From abfe22162a2b102d20185708d6db88d90f194c10 Mon Sep 17 00:00:00 2001
From: Daniel Benli Ye <yebenli@bytedance.com>
Date: Thu, 21 Feb 2019 02:04:31 -0500
Subject: [PATCH 01/62] enable dpdk pdump tool for DPVS

dpdk-pdump tool can affect performance, take your own risk to use it.
The usage is in http://doc.dpdk.org/guides-17.11/tools/pdump.html.

The following two steps should be taken to enable dpdk pdump tool.
1. install libpcap-dev and compile DPDK with 0003-enable-pdump-and-change-dpdk-pdump-tool-for-DPVS.patch.
2. compile DPVS with CONFIG_DPVS_PDUMP enabled.

Sometimes you may need to disable ASLR for using dpdk-pdump. The
command to disable ASLR is listed below.
  echo 0 | sudo tee /proc/sys/kernel/randomize_va_space
Please recover ASLR after packet capturing, otherwise you may have
security issue.
---
 include/dpdk.h                                |   5 +
 ...-and-change-dpdk-pdump-tool-for-DPVS.patch | 415 ++++++++++++++++++
 src/config.mk                                 |   1 +
 src/dpdk.mk                                   |   2 +-
 src/main.c                                    |  13 +
 5 files changed, 435 insertions(+), 1 deletion(-)
 create mode 100644 patch/dpdk-stable-17.11.2/0003-enable-pdump-and-change-dpdk-pdump-tool-for-DPVS.patch

diff --git a/include/dpdk.h b/include/dpdk.h
index ff049b067..25791ad17 100644
--- a/include/dpdk.h
+++ b/include/dpdk.h
@@ -55,6 +55,11 @@
 #include <rte_kni.h>
 #include <rte_ip_frag.h>
 #include <rte_eth_bond.h>
+
+#ifdef CONFIG_DPVS_PDUMP
+#include <rte_pdump.h>
+#endif
+
 #include "mbuf.h"
 
 typedef uint8_t lcoreid_t;
diff --git a/patch/dpdk-stable-17.11.2/0003-enable-pdump-and-change-dpdk-pdump-tool-for-DPVS.patch b/patch/dpdk-stable-17.11.2/0003-enable-pdump-and-change-dpdk-pdump-tool-for-DPVS.patch
new file mode 100644
index 000000000..a10fe4976
--- /dev/null
+++ b/patch/dpdk-stable-17.11.2/0003-enable-pdump-and-change-dpdk-pdump-tool-for-DPVS.patch
@@ -0,0 +1,415 @@
+From 34d3d8ebc02906739d9ee6c152091eaf628a292e Mon Sep 17 00:00:00 2001
+From: Daniel Benli Ye <yebenli@bytedance.com>
+Date: Tue, 18 Dec 2018 09:01:52 -0500
+Subject: [PATCH] enable pdump and change dpdk-pdump tool for DPVS
+
+A fix in app/pdump/main.c is x-ported from later release.
+rte.app.pdump.mk is copied from rte.app.mk and do several changes
+to addapt DPVS.
+---
+ app/pdump/Makefile  |   2 +-
+ app/pdump/main.c    |   3 +-
+ config/common_base  |   2 +-
+ mk/rte.app.pdump.mk | 348 ++++++++++++++++++++++++++++++++++++++++++++++++++++
+ 4 files changed, 351 insertions(+), 4 deletions(-)
+ create mode 100644 mk/rte.app.pdump.mk
+
+diff --git a/app/pdump/Makefile b/app/pdump/Makefile
+index 38ac3e9..28b0d3e 100644
+--- a/app/pdump/Makefile
++++ b/app/pdump/Makefile
+@@ -41,6 +41,6 @@ CFLAGS += $(WERROR_FLAGS)
+ 
+ SRCS-y := main.c
+ 
+-include $(RTE_SDK)/mk/rte.app.mk
++include $(RTE_SDK)/mk/rte.app.pdump.mk
+ 
+ endif
+diff --git a/app/pdump/main.c b/app/pdump/main.c
+index 66272f5..d974583 100644
+--- a/app/pdump/main.c
++++ b/app/pdump/main.c
+@@ -583,11 +583,10 @@ configure_vdev(uint16_t port_id)
+ {
+ 	struct ether_addr addr;
+ 	const uint16_t rxRings = 0, txRings = 1;
+-	const uint8_t nb_ports = rte_eth_dev_count();
+ 	int ret;
+ 	uint16_t q;
+ 
+-	if (port_id > nb_ports)
++	if (!rte_eth_dev_is_valid_port(port_id))
+ 		return -1;
+ 
+ 	ret = rte_eth_dev_configure(port_id, rxRings, txRings,
+diff --git a/config/common_base b/config/common_base
+index 214d9a2..3dbc100 100644
+--- a/config/common_base
++++ b/config/common_base
+@@ -397,7 +397,7 @@ CONFIG_RTE_PMD_RING_MAX_TX_RINGS=16
+ #
+ # Compile software PMD backed by PCAP files
+ #
+-CONFIG_RTE_LIBRTE_PMD_PCAP=n
++CONFIG_RTE_LIBRTE_PMD_PCAP=y
+ 
+ #
+ # Compile link bonding PMD library
+diff --git a/mk/rte.app.pdump.mk b/mk/rte.app.pdump.mk
+new file mode 100644
+index 0000000..e425472
+--- /dev/null
++++ b/mk/rte.app.pdump.mk
+@@ -0,0 +1,348 @@
++#   BSD LICENSE
++#
++#   Copyright(c) 2010-2017 Intel Corporation. All rights reserved.
++#   Copyright(c) 2014-2015 6WIND S.A.
++#   All rights reserved.
++#
++#   Redistribution and use in source and binary forms, with or without
++#   modification, are permitted provided that the following conditions
++#   are met:
++#
++#     * Redistributions of source code must retain the above copyright
++#       notice, this list of conditions and the following disclaimer.
++#     * Redistributions in binary form must reproduce the above copyright
++#       notice, this list of conditions and the following disclaimer in
++#       the documentation and/or other materials provided with the
++#       distribution.
++#     * Neither the name of Intel Corporation nor the names of its
++#       contributors may be used to endorse or promote products derived
++#       from this software without specific prior written permission.
++#
++#   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
++#   "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
++#   LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
++#   A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
++#   OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
++#   SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
++#   LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
++#   DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
++#   THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
++#   (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
++#   OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++
++include $(RTE_SDK)/mk/internal/rte.compile-pre.mk
++include $(RTE_SDK)/mk/internal/rte.install-pre.mk
++include $(RTE_SDK)/mk/internal/rte.clean-pre.mk
++include $(RTE_SDK)/mk/internal/rte.build-pre.mk
++
++# VPATH contains at least SRCDIR
++VPATH += $(SRCDIR)
++
++_BUILD = $(APP)
++_INSTALL = $(INSTALL-FILES-y) $(SYMLINK-FILES-y)
++_INSTALL += $(RTE_OUTPUT)/app/$(APP) $(RTE_OUTPUT)/app/$(APP).map
++POSTINSTALL += target-appinstall
++_CLEAN = doclean
++POSTCLEAN += target-appclean
++
++ifeq ($(NO_LDSCRIPT),)
++LDSCRIPT = $(RTE_LDSCRIPT)
++endif
++
++# Link only the libraries used in the application
++LDFLAGS += --as-needed
++
++# default path for libs
++_LDLIBS-y += -L$(RTE_SDK_BIN)/lib
++
++#
++# Order is important: from higher level to lower level
++#
++_LDLIBS-$(CONFIG_RTE_LIBRTE_FLOW_CLASSIFY)  += -lrte_flow_classify
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PIPELINE)       += -lrte_pipeline
++_LDLIBS-$(CONFIG_RTE_LIBRTE_TABLE)          += -lrte_table
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PORT)           += -lrte_port
++
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PDUMP)          += -lrte_pdump
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DISTRIBUTOR)    += -lrte_distributor
++_LDLIBS-$(CONFIG_RTE_LIBRTE_IP_FRAG)        += -lrte_ip_frag
++_LDLIBS-$(CONFIG_RTE_LIBRTE_GRO)            += -lrte_gro
++_LDLIBS-$(CONFIG_RTE_LIBRTE_GSO)            += -lrte_gso
++_LDLIBS-$(CONFIG_RTE_LIBRTE_METER)          += -lrte_meter
++_LDLIBS-$(CONFIG_RTE_LIBRTE_LPM)            += -lrte_lpm
++# librte_acl needs --whole-archive because of weak functions
++_LDLIBS-$(CONFIG_RTE_LIBRTE_ACL)            += --whole-archive
++_LDLIBS-$(CONFIG_RTE_LIBRTE_ACL)            += --no-whole-archive
++_LDLIBS-$(CONFIG_RTE_LIBRTE_JOBSTATS)       += -lrte_jobstats
++_LDLIBS-$(CONFIG_RTE_LIBRTE_METRICS)        += -lrte_metrics
++_LDLIBS-$(CONFIG_RTE_LIBRTE_BITRATE)        += -lrte_bitratestats
++_LDLIBS-$(CONFIG_RTE_LIBRTE_LATENCY_STATS)  += -lrte_latencystats
++_LDLIBS-$(CONFIG_RTE_LIBRTE_POWER)          += -lrte_power
++
++_LDLIBS-$(CONFIG_RTE_LIBRTE_TIMER)          += -lrte_timer
++_LDLIBS-$(CONFIG_RTE_LIBRTE_EFD)            += -lrte_efd
++
++_LDLIBS-y += --whole-archive
++
++_LDLIBS-$(CONFIG_RTE_LIBRTE_CFGFILE)        += -lrte_cfgfile
++_LDLIBS-$(CONFIG_RTE_LIBRTE_HASH)           += -lrte_hash
++_LDLIBS-$(CONFIG_RTE_LIBRTE_VHOST)          += -lrte_vhost
++_LDLIBS-$(CONFIG_RTE_LIBRTE_KVARGS)         += -lrte_kvargs
++_LDLIBS-$(CONFIG_RTE_LIBRTE_MBUF)           += -lrte_mbuf
++_LDLIBS-$(CONFIG_RTE_LIBRTE_NET)            += -lrte_net
++_LDLIBS-$(CONFIG_RTE_LIBRTE_ETHER)          += -lrte_ethdev
++_LDLIBS-$(CONFIG_RTE_LIBRTE_CRYPTODEV)      += -lrte_cryptodev
++_LDLIBS-$(CONFIG_RTE_LIBRTE_SECURITY)       += -lrte_security
++_LDLIBS-$(CONFIG_RTE_LIBRTE_MEMPOOL)        += -lrte_mempool
++_LDLIBS-$(CONFIG_RTE_DRIVER_MEMPOOL_RING)   += -lrte_mempool_ring
++_LDLIBS-$(CONFIG_RTE_LIBRTE_RING)           += -lrte_ring
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PCI)            += -lrte_pci
++_LDLIBS-$(CONFIG_RTE_LIBRTE_EAL)            += -lrte_eal
++_LDLIBS-$(CONFIG_RTE_LIBRTE_CMDLINE)        += -lrte_cmdline
++_LDLIBS-$(CONFIG_RTE_LIBRTE_SCHED)          += -lrte_sched
++
++ifeq ($(CONFIG_RTE_EXEC_ENV_LINUXAPP),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_KNI)            += -lrte_kni
++endif
++
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PCI_BUS)        += -lrte_bus_pci
++_LDLIBS-$(CONFIG_RTE_LIBRTE_VDEV_BUS)       += -lrte_bus_vdev
++
++ifeq ($(CONFIG_RTE_BUILD_SHARED_LIB),n)
++# plugins (link only if static libraries)
++
++_LDLIBS-$(CONFIG_RTE_DRIVER_MEMPOOL_STACK)  += -lrte_mempool_stack
++
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_AF_PACKET)  += -lrte_pmd_af_packet
++_LDLIBS-$(CONFIG_RTE_LIBRTE_ARK_PMD)        += -lrte_pmd_ark
++_LDLIBS-$(CONFIG_RTE_LIBRTE_AVP_PMD)        += -lrte_pmd_avp
++_LDLIBS-$(CONFIG_RTE_LIBRTE_BNX2X_PMD)      += -lrte_pmd_bnx2x -lz
++_LDLIBS-$(CONFIG_RTE_LIBRTE_BNXT_PMD)       += -lrte_pmd_bnxt
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_BOND)       += -lrte_pmd_bond
++_LDLIBS-$(CONFIG_RTE_LIBRTE_CXGBE_PMD)      += -lrte_pmd_cxgbe
++ifeq ($(CONFIG_RTE_LIBRTE_DPAA_BUS),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DPAA_BUS)       += -lrte_bus_dpaa
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DPAA_MEMPOOL)   += -lrte_mempool_dpaa
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DPAA_PMD)       += -lrte_pmd_dpaa
++endif
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DPAA2_PMD)      += -lrte_pmd_dpaa2
++_LDLIBS-$(CONFIG_RTE_LIBRTE_E1000_PMD)      += -lrte_pmd_e1000
++_LDLIBS-$(CONFIG_RTE_LIBRTE_ENA_PMD)        += -lrte_pmd_ena
++_LDLIBS-$(CONFIG_RTE_LIBRTE_ENIC_PMD)       += -lrte_pmd_enic
++_LDLIBS-$(CONFIG_RTE_LIBRTE_FM10K_PMD)      += -lrte_pmd_fm10k
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_FAILSAFE)   += -lrte_pmd_failsafe
++_LDLIBS-$(CONFIG_RTE_LIBRTE_I40E_PMD)       += -lrte_pmd_i40e
++_LDLIBS-$(CONFIG_RTE_LIBRTE_IXGBE_PMD)      += -lrte_pmd_ixgbe
++ifeq ($(CONFIG_RTE_LIBRTE_KNI),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_KNI)        += -lrte_pmd_kni
++endif
++_LDLIBS-$(CONFIG_RTE_LIBRTE_LIO_PMD)        += -lrte_pmd_lio
++_LDLIBS-$(CONFIG_RTE_LIBRTE_MLX4_PMD)       += -lrte_pmd_mlx4 -libverbs -lmlx4
++_LDLIBS-$(CONFIG_RTE_LIBRTE_MLX5_PMD)       += -lrte_pmd_mlx5 -libverbs -lmlx5
++_LDLIBS-$(CONFIG_RTE_LIBRTE_MRVL_PMD)       += -lrte_pmd_mrvl -L$(LIBMUSDK_PATH)/lib -lmusdk
++_LDLIBS-$(CONFIG_RTE_LIBRTE_NFP_PMD)        += -lrte_pmd_nfp
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_NULL)       += -lrte_pmd_null
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_PCAP)       += -lrte_pmd_pcap -lpcap
++_LDLIBS-$(CONFIG_RTE_LIBRTE_QEDE_PMD)       += -lrte_pmd_qede
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_RING)       += -lrte_pmd_ring
++ifeq ($(CONFIG_RTE_LIBRTE_SCHED),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_SOFTNIC)      += -lrte_pmd_softnic
++endif
++_LDLIBS-$(CONFIG_RTE_LIBRTE_SFC_EFX_PMD)    += -lrte_pmd_sfc_efx
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_SZEDATA2)   += -lrte_pmd_szedata2 -lsze2
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_TAP)        += -lrte_pmd_tap
++_LDLIBS-$(CONFIG_RTE_LIBRTE_THUNDERX_NICVF_PMD) += -lrte_pmd_thunderx_nicvf
++_LDLIBS-$(CONFIG_RTE_LIBRTE_VIRTIO_PMD)     += -lrte_pmd_virtio
++ifeq ($(CONFIG_RTE_LIBRTE_VHOST),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_VHOST)      += -lrte_pmd_vhost
++endif # $(CONFIG_RTE_LIBRTE_VHOST)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_VMXNET3_PMD)    += -lrte_pmd_vmxnet3_uio
++
++ifeq ($(CONFIG_RTE_LIBRTE_CRYPTODEV),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_AESNI_MB)    += -lrte_pmd_aesni_mb
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_AESNI_MB)    += -L$(AESNI_MULTI_BUFFER_LIB_PATH) -lIPSec_MB
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_AESNI_GCM)   += -lrte_pmd_aesni_gcm
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_AESNI_GCM)   += -L$(AESNI_MULTI_BUFFER_LIB_PATH) -lIPSec_MB
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_OPENSSL)     += -lrte_pmd_openssl -lcrypto
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_NULL_CRYPTO) += -lrte_pmd_null_crypto
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_QAT)         += -lrte_pmd_qat -lcrypto
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_SNOW3G)      += -lrte_pmd_snow3g
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_SNOW3G)      += -L$(LIBSSO_SNOW3G_PATH)/build -lsso_snow3g
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_KASUMI)      += -lrte_pmd_kasumi
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_KASUMI)      += -L$(LIBSSO_KASUMI_PATH)/build -lsso_kasumi
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_ZUC)         += -lrte_pmd_zuc
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_ZUC)         += -L$(LIBSSO_ZUC_PATH)/build -lsso_zuc
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_ARMV8_CRYPTO)    += -lrte_pmd_armv8
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_ARMV8_CRYPTO)    += -L$(ARMV8_CRYPTO_LIB_PATH) -larmv8_crypto
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_MRVL_CRYPTO) += -L$(LIBMUSDK_PATH)/lib -lrte_pmd_mrvl_crypto -lmusdk
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_CRYPTO_SCHEDULER) += -lrte_pmd_crypto_scheduler
++ifeq ($(CONFIG_RTE_LIBRTE_FSLMC_BUS),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_DPAA2_SEC)   += -lrte_pmd_dpaa2_sec
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_DPAA2_SEC)   += -lrte_mempool_dpaa2
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_DPAA2_SEC)   += -lrte_bus_fslmc
++endif # CONFIG_RTE_LIBRTE_FSLMC_BUS
++
++ifeq ($(CONFIG_RTE_LIBRTE_DPAA_BUS),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_DPAA_SEC)   += -lrte_bus_dpaa
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_DPAA_SEC)   += -lrte_pmd_dpaa_sec
++endif # CONFIG_RTE_LIBRTE_DPAA_BUS
++
++endif # CONFIG_RTE_LIBRTE_CRYPTODEV
++
++ifeq ($(CONFIG_RTE_LIBRTE_DPAA2_PMD),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DPAA2_PMD)      += -lrte_bus_fslmc
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DPAA2_PMD)      += -lrte_mempool_dpaa2
++endif # CONFIG_RTE_LIBRTE_DPAA2_PMD
++
++endif # !CONFIG_RTE_BUILD_SHARED_LIBS
++
++_LDLIBS-y += --no-whole-archive
++
++ifeq ($(CONFIG_RTE_BUILD_SHARED_LIB),n)
++# The static libraries do not know their dependencies.
++# So linking with static library requires explicit dependencies.
++_LDLIBS-$(CONFIG_RTE_LIBRTE_EAL)            += -lrt
++ifeq ($(CONFIG_RTE_EXEC_ENV_LINUXAPP)$(CONFIG_RTE_EAL_NUMA_AWARE_HUGEPAGES),yy)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_EAL)            += -lnuma
++endif
++_LDLIBS-$(CONFIG_RTE_LIBRTE_SCHED)          += -lm
++_LDLIBS-$(CONFIG_RTE_LIBRTE_SCHED)          += -lrt
++_LDLIBS-$(CONFIG_RTE_LIBRTE_MEMBER)         += -lm
++_LDLIBS-$(CONFIG_RTE_LIBRTE_METER)          += -lm
++ifeq ($(CONFIG_RTE_LIBRTE_VHOST_NUMA),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_VHOST)          += -lnuma
++endif
++_LDLIBS-$(CONFIG_RTE_PORT_PCAP)             += -lpcap
++endif # !CONFIG_RTE_BUILD_SHARED_LIBS
++
++_LDLIBS-y += $(EXECENV_LDLIBS)
++
++LDLIBS += $(_LDLIBS-y) $(CPU_LDLIBS) $(EXTRA_LDLIBS)
++
++# all the words except the first one
++allbutfirst = $(wordlist 2,$(words $(1)),$(1))
++
++# Eliminate duplicates without sorting, only keep the last occurrence
++filter-libs = \
++	$(if $(1),$(strip\
++		$(if \
++			$(and \
++				$(filter $(firstword $(1)),$(call allbutfirst,$(1))),\
++				$(filter -l%,$(firstword $(1)))),\
++			,\
++			$(firstword $(1))) \
++		$(call filter-libs,$(call allbutfirst,$(1)))))
++
++LDLIBS := $(call filter-libs,$(LDLIBS))
++
++ifeq ($(RTE_DEVEL_BUILD)$(CONFIG_RTE_BUILD_SHARED_LIB),yy)
++LDFLAGS += -rpath=$(RTE_SDK_BIN)/lib
++endif
++
++MAPFLAGS = -Map=$@.map --cref
++
++.PHONY: all
++all: install
++
++.PHONY: install
++install: build _postinstall
++
++_postinstall: build
++
++.PHONY: build
++build: _postbuild
++
++exe2cmd = $(strip $(call dotfile,$(patsubst %,%.cmd,$(1))))
++
++ifeq ($(LINK_USING_CC),1)
++O_TO_EXE = $(CC) -o $@ $(CFLAGS) $(EXTRA_CFLAGS) $(OBJS-y) $(call linkerprefix, \
++	$(LDLIBS) $(LDFLAGS) $(LDFLAGS_$(@)) $(EXTRA_LDFLAGS) \
++	$(MAPFLAGS))
++else
++O_TO_EXE = $(LD) -o $@ $(OBJS-y) \
++	$(LDLIBS) $(LDFLAGS) $(LDFLAGS_$(@)) $(EXTRA_LDFLAGS) \
++	$(MAPFLAGS)
++endif
++O_TO_EXE_STR = $(subst ','\'',$(O_TO_EXE)) #'# fix syntax highlight
++O_TO_EXE_DISP = $(if $(V),"$(O_TO_EXE_STR)","  LD $(@)")
++O_TO_EXE_CMD = "cmd_$@ = $(O_TO_EXE_STR)"
++O_TO_EXE_DO = @set -e; \
++	echo $(O_TO_EXE_DISP); \
++	$(O_TO_EXE) && \
++	echo $(O_TO_EXE_CMD) > $(call exe2cmd,$(@))
++
++-include .$(APP).cmd
++
++# path where libraries are retrieved
++LDLIBS_PATH := $(subst -Wl$(comma)-L,,$(filter -Wl$(comma)-L%,$(LDLIBS)))
++LDLIBS_PATH += $(subst -L,,$(filter -L%,$(LDLIBS)))
++
++# list of .a files that are linked to this application
++LDLIBS_NAMES := $(patsubst -l%,lib%.a,$(filter -l%,$(LDLIBS)))
++LDLIBS_NAMES += $(patsubst -Wl$(comma)-l%,lib%.a,$(filter -Wl$(comma)-l%,$(LDLIBS)))
++
++# list of found libraries files (useful for deps). If not found, the
++# library is silently ignored and dep won't be checked
++LDLIBS_FILES := $(sort $(wildcard $(foreach dir,$(LDLIBS_PATH),\
++	$(addprefix $(dir)/,$(LDLIBS_NAMES)))))
++
++#
++# Compile executable file if needed
++#
++$(APP): $(OBJS-y) $(LDLIBS_FILES) $(DEP_$(APP)) $(LDSCRIPT) FORCE
++	@[ -d $(dir $@) ] || mkdir -p $(dir $@)
++	$(if $(D),\
++		@echo -n "$< -> $@ " ; \
++		echo -n "file_missing=$(call boolean,$(file_missing)) " ; \
++		echo -n "cmdline_changed=$(call boolean,$(call cmdline_changed,$(O_TO_EXE_STR))) " ; \
++		echo -n "depfile_missing=$(call boolean,$(depfile_missing)) " ; \
++		echo "depfile_newer=$(call boolean,$(depfile_newer)) ")
++	$(if $(or \
++		$(file_missing),\
++		$(call cmdline_changed,$(O_TO_EXE_STR)),\
++		$(depfile_missing),\
++		$(depfile_newer)),\
++		$(O_TO_EXE_DO))
++
++#
++# install app in $(RTE_OUTPUT)/app
++#
++$(RTE_OUTPUT)/app/$(APP): $(APP)
++	@echo "  INSTALL-APP $(APP)"
++	@[ -d $(RTE_OUTPUT)/app ] || mkdir -p $(RTE_OUTPUT)/app
++	$(Q)cp -f $(APP) $(RTE_OUTPUT)/app
++
++#
++# install app map file in $(RTE_OUTPUT)/app
++#
++$(RTE_OUTPUT)/app/$(APP).map: $(APP)
++	@echo "  INSTALL-MAP $(APP).map"
++	@[ -d $(RTE_OUTPUT)/app ] || mkdir -p $(RTE_OUTPUT)/app
++	$(Q)cp -f $(APP).map $(RTE_OUTPUT)/app
++
++#
++# Clean all generated files
++#
++.PHONY: clean
++clean: _postclean
++	$(Q)rm -f $(_BUILD_TARGETS) $(_INSTALL_TARGETS) $(_CLEAN_TARGETS)
++
++.PHONY: doclean
++doclean:
++	$(Q)rm -rf $(APP) $(OBJS-all) $(DEPS-all) $(DEPSTMP-all) \
++	  $(CMDS-all) $(INSTALL-FILES-all) .$(APP).cmd $(APP).map
++
++
++include $(RTE_SDK)/mk/internal/rte.compile-post.mk
++include $(RTE_SDK)/mk/internal/rte.install-post.mk
++include $(RTE_SDK)/mk/internal/rte.clean-post.mk
++include $(RTE_SDK)/mk/internal/rte.build-post.mk
++
++ifneq ($(wildcard $(RTE_SDK)/mk/target/$(RTE_TARGET)/rte.app.mk),)
++include $(RTE_SDK)/mk/target/$(RTE_TARGET)/rte.app.mk
++else
++include $(RTE_SDK)/mk/target/generic/rte.app.mk
++endif
++
++.PHONY: FORCE
++FORCE:
+-- 
+2.1.4
+
diff --git a/src/config.mk b/src/config.mk
index 119dbb69d..b07116729 100644
--- a/src/config.mk
+++ b/src/config.mk
@@ -35,6 +35,7 @@ CFLAGS += -D DPVS_MAX_LCORE=64
 #CFLAGS += -D CONFIG_TC_DEBUG
 #CFLAGS += -D CONFIG_DPVS_IPVS_STATS_DEBUG
 #CFLAGS += -D CONFIG_DPVS_MBUF_DEBUG
+#CFLAGS += -D CONFIG_DPVS_PDUMP
 
 GCC_MAJOR = $(shell echo __GNUC__ | $(CC) -E -x c - | tail -n 1)
 GCC_MINOR = $(shell echo __GNUC_MINOR__ | $(CC) -E -x c - | tail -n 1)
diff --git a/src/dpdk.mk b/src/dpdk.mk
index 77e6d4585..46bfed724 100644
--- a/src/dpdk.mk
+++ b/src/dpdk.mk
@@ -44,5 +44,5 @@ LIBS += -Wl,--no-as-needed -fvisibility=default \
 		-Wl,--whole-archive -lrte_hash -lrte_kvargs -Wl,-lrte_mbuf -lrte_eal \
 		-Wl,-lrte_mempool -lrte_ring -lrte_cmdline -lrte_cfgfile -lrte_kni \
 		-lrte_mempool_ring -lrte_timer -lrte_net -Wl,-lrte_pmd_virtio \
-		-lrte_pci -lrte_bus_pci -lrte_bus_vdev -lrte_lpm \
+		-lrte_pci -lrte_bus_pci -lrte_bus_vdev -lrte_lpm -lrte_pdump \
 		-Wl,--no-whole-archive -lrt -lm -ldl -lcrypto
diff --git a/src/main.c b/src/main.c
index 88e7fdf0f..8fb6ce62c 100644
--- a/src/main.c
+++ b/src/main.c
@@ -191,6 +191,14 @@ int main(int argc, char *argv[])
 
     rte_timer_subsystem_init();
 
+#ifdef CONFIG_DPVS_PDUMP
+    /* initialize packet capture framework */
+    err = rte_pdump_init(NULL);
+    if (err < 0) {
+        rte_exit(EXIT_FAILURE, "Fail init dpdk pdump framework\n");
+    }
+#endif
+
     if ((err = cfgfile_init()) != EDPVS_OK)
         rte_exit(EXIT_FAILURE, "Fail init configuration file: %s\n",
                  dpvs_strerror(err));
@@ -315,6 +323,11 @@ int main(int argc, char *argv[])
     if ((err = cfgfile_term()) != 0)
         RTE_LOG(ERR, DPVS, "Fail to term configuration file: %s\n",
                 dpvs_strerror(err));
+#ifdef CONFIG_DPVS_PDUMP
+    if ((err = rte_pdump_uninit()) != 0) {
+        RTE_LOG(ERR, DPVS, "Fail to uninitialize dpdk pdump framework.\n");
+    }
+#endif
     pidfile_rm(DPVS_PIDFILE);
 
     exit(0);

From 5e022b141205407d41f90ee1dd4d79770bc2bd1b Mon Sep 17 00:00:00 2001
From: Jason Joo <hblzxsj@163.com>
Date: Tue, 14 May 2019 09:44:50 +0800
Subject: [PATCH 02/62] patch dpdk-17.11.2 to support rh75

---
 .../0003-rh75-ndo_change_mtu.patch            | 25 +++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 patch/dpdk-stable-17.11.2/0003-rh75-ndo_change_mtu.patch

diff --git a/patch/dpdk-stable-17.11.2/0003-rh75-ndo_change_mtu.patch b/patch/dpdk-stable-17.11.2/0003-rh75-ndo_change_mtu.patch
new file mode 100644
index 000000000..00d96b8c3
--- /dev/null
+++ b/patch/dpdk-stable-17.11.2/0003-rh75-ndo_change_mtu.patch
@@ -0,0 +1,25 @@
+--- a/lib/librte_eal/linuxapp/kni/compat.h
++++ b/lib/librte_eal/linuxapp/kni/compat.h
+@@ -103,2 +103,8 @@
+
++#if (defined(RHEL_RELEASE_CODE) && \
++       (RHEL_RELEASE_CODE >= RHEL_RELEASE_VERSION(7, 5)) && \
++       (RHEL_RELEASE_CODE < RHEL_RELEASE_VERSION(8, 0)))
++#define ndo_change_mtu ndo_change_mtu_rh74
++#endif
++
+ #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 11, 0)
+
+--- a/lib/librte_eal/linuxapp/kni/ethtool/igb/kcompat.h
++++ b/lib/librte_eal/linuxapp/kni/ethtool/igb/kcompat.h
+@@ -3933,4 +3933,10 @@ skb_set_hash(struct sk_buff *skb, __u32
+ #endif
+
++#if (defined(RHEL_RELEASE_CODE) && \
++       (RHEL_RELEASE_CODE >= RHEL_RELEASE_VERSION(7, 5)) && \
++       (RHEL_RELEASE_CODE < RHEL_RELEASE_VERSION(8, 0)))
++#define ndo_change_mtu ndo_change_mtu_rh74
++#endif
++
+ #if ((LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)) || \
+     (SLE_VERSION_CODE && SLE_VERSION_CODE >= SLE_VERSION(12, 3, 0)))

From b115686a79fb10a2095ffea69363fb03203f17cb Mon Sep 17 00:00:00 2001
From: ytwang0320 <wyt900320@163.com>
Date: Tue, 23 Jul 2019 16:04:43 +0800
Subject: [PATCH 03/62] removed gfwip list total ip numbers.

---
 src/ipset.c | 45 ++++++++++++++++++++++++++-------------------
 1 file changed, 26 insertions(+), 19 deletions(-)

diff --git a/src/ipset.c b/src/ipset.c
index 52ad05e73..2ba8857b1 100755
--- a/src/ipset.c
+++ b/src/ipset.c
@@ -337,8 +337,7 @@ static struct dpvs_sockopts ipset_sockopts = {
 
 static int ipset_parse_conf_file(void)
 {
-    char *buf, *pstr;
-    bool found_num = false;
+    char *buf, ch;
     struct dp_vs_multi_ipset_conf *ips = NULL;
     int ip_num = 0, ipset_size = 0, ip_index = 0;
 
@@ -347,24 +346,32 @@ static int ipset_parse_conf_file(void)
         RTE_LOG(WARNING, IPSET, "no memory for ipset buf\n");
         return -1;
     }
+
+    while(!feof(g_current_stream))
+    {
+        if((ch=getc(g_current_stream))=='\n')
+            ip_num++;
+    }
+
+    if (!ip_num)
+    {
+        RTE_LOG(WARNING, IPSET, "no ip in the gfwip \n");
+        return -1;
+    }
+        
+    RTE_LOG(DEBUG, IPSET, "gfwip list has %u ips\n", ip_num);
+
+    fseek(g_current_stream, 0, SEEK_SET);
+
+    ipset_size = sizeof(struct dp_vs_multi_ipset_conf) + ip_num*sizeof(struct dp_vs_ipset_conf);
+    ips = rte_calloc_socket(NULL, 1, ipset_size, 0, rte_socket_id());
+    if (ips == NULL) {
+        RTE_LOG(WARNING, IPSET, "no memory for ipset conf\n");
+        return -1;
+    }                        
+    ips->num = ip_num;
+
     while (read_line(buf, CFG_FILE_MAX_BUF_SZ)) {
-        if (false == found_num && NULL != (pstr = strstr(buf, IPSET_CFG_MEMBERS))) {
-            pstr += strlen(IPSET_CFG_MEMBERS);
-            ip_num = atoi(pstr);
-            found_num = true;
-            ipset_size = sizeof(struct dp_vs_multi_ipset_conf) + ip_num*sizeof(struct dp_vs_ipset_conf);
-            ips = rte_calloc_socket(NULL, 1, ipset_size, 0, rte_socket_id());
-            if (ips == NULL) {
-                RTE_LOG(WARNING, IPSET, "no memory for ipset conf\n");
-                break;
-            }                        
-        ips->num = ip_num;
-        continue;
-        }
-        if (ips == NULL) {
-            RTE_LOG(WARNING, IPSET, "cannot get gfwip members\n");
-            break;
-        }                        
         if (inet_pton(AF_INET, buf, &ips->ipset_conf[ip_index].addr) <= 0)
              ips->ipset_conf[ip_index].af = 0;
         else                     

From 63ff5487dc129567bce1e3e242cb1e2d8f7b683d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=A4=8F=E8=B4=B5=E6=AD=A6?= <xiaguiwu@qiyi.com>
Date: Wed, 24 Jul 2019 15:09:47 +0800
Subject: [PATCH 04/62] add dpvs traffic stats

---
 include/conf/stats.h |  53 +++
 include/stats.h      |  24 ++
 src/ipv4.c           |   3 +
 src/ipv6/ipv6.c      |   3 +
 src/main.c           |   7 +
 src/stats.c          | 826 +++++++++++++++++++++++++++++++++++++++++++
 tools/dpip/Makefile  |   2 +-
 tools/dpip/dpip.c    |   6 +-
 tools/dpip/stats.c   | 125 +++++++
 9 files changed, 1046 insertions(+), 3 deletions(-)
 create mode 100644 include/conf/stats.h
 create mode 100644 include/stats.h
 create mode 100644 src/stats.c
 create mode 100644 tools/dpip/stats.c

diff --git a/include/conf/stats.h b/include/conf/stats.h
new file mode 100644
index 000000000..c194e0aac
--- /dev/null
+++ b/include/conf/stats.h
@@ -0,0 +1,53 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_STATS_CONF_H__
+#define __DPVS_STATS_CONF_H__
+#include <stdint.h>
+#include <linux/if_addr.h>
+#include "inet.h"
+
+enum {
+    /* set */
+    SOCKOPT_SET_STATS_ADD  = 6400,
+    SOCKOPT_SET_STATS_DEL,
+
+    /* get */
+    SOCKOPT_GET_STATS_SHOW,
+};
+
+struct stats_param {
+	uint8_t 			 af;
+	uint8_t 			 proto;
+	uint8_t			 cid;
+
+	union inet_addr 	 saddr;
+	union inet_addr 	 daddr;
+	uint16_t			 sport;
+	uint16_t			 dport;
+
+    double long total_recv;
+    double long total_sent;
+
+} __attribute__((__packed__));
+
+struct stats_param_array {
+    int                 nstats;
+    struct stats_param stats[0];
+};
+
+#endif /* __DPVS_INETADDR_CONF_H__ */
diff --git a/include/stats.h b/include/stats.h
new file mode 100644
index 000000000..dc1ccabd7
--- /dev/null
+++ b/include/stats.h
@@ -0,0 +1,24 @@
+#ifndef __STATS_H__
+#define __STATS_H__
+
+#include "common.h"
+#include "list.h"
+#include "dpdk.h"
+#include "timer.h"
+#include "inet.h"
+#include "ctrl.h"
+
+int stats_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
+                             void **out, size_t *outsize);
+
+int stats_pkt_in(int af, struct rte_mbuf *mbuf);
+int stats_pkt_out(int af, struct rte_mbuf *mbuf);
+void stats_process_ring(void);
+
+int stats_enable_func(void);
+int stats_disable_func(void);
+
+int stats_init(void);
+
+#endif
+
diff --git a/src/ipv4.c b/src/ipv4.c
index a75657335..0bbf1b546 100644
--- a/src/ipv4.c
+++ b/src/ipv4.c
@@ -26,6 +26,7 @@
 #include "neigh.h"
 #include "icmp.h"
 #include "parser/parser.h"
+#include "stats.h"
 
 #define IPV4
 #define RTE_LOGTYPE_IPV4    RTE_LOGTYPE_USER1
@@ -262,6 +263,7 @@ int ipv4_output(struct rte_mbuf *mbuf)
     assert(rt);
 
     IP4_UPD_PO_STATS(out, mbuf->pkt_len);
+    stats_pkt_out(AF_INET, mbuf);
 
     return INET_HOOK(AF_INET, INET_HOOK_POST_ROUTING, mbuf,
             NULL, rt->port, ipv4_output_fin);
@@ -386,6 +388,7 @@ static int ipv4_rcv(struct rte_mbuf *mbuf, struct netif_port *port)
     }
 
     IP4_UPD_PO_STATS(in, mbuf->pkt_len);
+    stats_pkt_in(AF_INET, mbuf);
 
     if (mbuf_may_pull(mbuf, sizeof(struct ipv4_hdr)) != 0)
         goto inhdr_error;
diff --git a/src/ipv6/ipv6.c b/src/ipv6/ipv6.c
index 058e5a48a..ebedf251e 100644
--- a/src/ipv6/ipv6.c
+++ b/src/ipv6/ipv6.c
@@ -35,6 +35,7 @@
 #include "parser/parser.h"
 #include "neigh.h"
 #include "icmp6.h"
+#include "stats.h"
 
 /*
  * IPv6 inet hooks
@@ -367,6 +368,7 @@ int ip6_output(struct rte_mbuf *mbuf)
     }
 
     IP6_UPD_PO_STATS(out, mbuf->pkt_len);
+    stats_pkt_out(AF_INET6, mbuf);
     mbuf->port = dev->id;
 
     if (unlikely(conf_ipv6_disable)) {
@@ -536,6 +538,7 @@ static int ip6_rcv(struct rte_mbuf *mbuf, struct netif_port *dev)
     }
 
     IP6_UPD_PO_STATS(in, mbuf->pkt_len);
+    stats_pkt_in(AF_INET6, mbuf);
 
     if (unlikely(conf_ipv6_disable)) {
         IP6_INC_STATS(indiscards);
diff --git a/src/main.c b/src/main.c
index 0e7888b88..d7f1b0639 100644
--- a/src/main.c
+++ b/src/main.c
@@ -35,6 +35,7 @@
 #include "ip_tunnel.h"
 #include "sys_time.h"
 #include "route6.h"
+#include "stats.h"
 
 #define DPVS    "dpvs"
 #define RTE_LOGTYPE_DPVS RTE_LOGTYPE_USER1
@@ -240,6 +241,9 @@ int main(int argc, char *argv[])
         rte_exit(EXIT_FAILURE, "Fail to init netif_ctrl: %s\n",
                  dpvs_strerror(err));
 
+    if ((err = stats_init()) != EDPVS_OK)
+        rte_exit(EXIT_FAILURE, "Fail to init stats: %s\n", dpvs_strerror(err));
+    
     /* config and start all available dpdk ports */
     nports = rte_eth_dev_count();
     for (pid = 0; pid < nports; pid++) {
@@ -292,6 +296,9 @@ int main(int argc, char *argv[])
         /* process mac ring on master */
         neigh_process_ring(NULL);
 
+        /* process stats ring */
+        stats_process_ring();
+
         /* increase loop counts */
         netif_update_master_loop_cnt();
     }
diff --git a/src/stats.c b/src/stats.c
new file mode 100644
index 000000000..dbeea4220
--- /dev/null
+++ b/src/stats.c
@@ -0,0 +1,826 @@
+#include <stdio.h>
+#include <string.h>
+#include "inet.h"
+#include "ipv4.h"
+#include "ipv6.h"
+#include "stats.h"
+#include "conf/stats.h"
+
+#ifndef STATS
+#define STATS
+#define RTE_LOGTYPE_STATS    RTE_LOGTYPE_USER1
+#endif
+
+#define STATS_TOPN 20
+
+#define STATS_RING_SIZE  1024
+#define STATS_INTERVAL   1024 
+
+#define STATS_PKT_DIR_IN 0
+#define STATS_PKT_DIR_OUT 1
+
+#define STATS_TBL_BITS          20
+#define STATS_TBL_SIZE          (1 << STATS_TBL_BITS)
+#define STATS_TBL_MASK          (STATS_TBL_SIZE - 1)
+
+#define HISTORY_LENGTH  10
+#define RESOLUTION 2
+int history_pos = 0;
+
+time_t last_timestamp;
+bool stats_disable = true;
+
+typedef struct sorted_list_node_tag {
+    struct sorted_list_node_tag* next;
+    void* data;
+} sorted_list_node;
+
+typedef struct {
+    sorted_list_node root;
+    int (*compare)(void*, void*);
+} sorted_list_type;
+
+int sorted_list_num = 0;
+sorted_list_type stats_sorted_list;
+
+static struct list_head *stats_tbl;
+static struct rte_ring *stats_ring[DPVS_MAX_LCORE];
+
+#define this_inpkts_count   (RTE_PER_LCORE(inpkts_count))
+#define this_outpkts_count  (RTE_PER_LCORE(outpkts_count))
+
+static RTE_DEFINE_PER_LCORE(uint32_t, inpkts_count);
+static RTE_DEFINE_PER_LCORE(uint32_t, outpkts_count);
+
+static uint32_t stats_tlb_rnd; /* hash random */
+
+typedef enum {
+	HASH_STATUS_OK,
+	HASH_STATUS_KEY_NOT_FOUND
+} hash_status_enum;
+
+struct stats_pkt {
+	int af;
+    uint32_t pkt_len;
+    union inet_addr saddr;
+	union inet_addr daddr;
+	uint16_t src_port;
+	uint16_t dst_port; 
+	uint8_t proto;
+	uint8_t dir;
+    lcoreid_t cid;
+} __rte_cache_aligned;
+
+struct stats_entry {
+	struct list_head	 list;
+
+	uint8_t 			 af;
+	uint8_t 			 proto;
+	lcoreid_t			 cid;
+
+	union inet_addr 	 saddr;
+	union inet_addr 	 daddr;
+	uint16_t			 sport;
+	uint16_t			 dport;
+
+    double long recv[HISTORY_LENGTH];
+    double long sent[HISTORY_LENGTH];	
+	
+    double long total_recv;
+    double long total_sent;
+	int last_write;
+
+} __rte_cache_aligned;
+
+
+static inline uint32_t stats_tlb_hashkey(int af,
+    const union inet_addr *saddr, uint16_t sport,
+    const union inet_addr *daddr, uint16_t dport,
+    uint32_t mask)
+{
+    switch (af) {
+    case AF_INET:
+        return rte_jhash_3words((uint32_t)saddr->in.s_addr,
+                (uint32_t)daddr->in.s_addr,
+                ((uint32_t)sport) << 16 | (uint32_t)dport,
+                stats_tlb_rnd) & mask;
+
+    case AF_INET6:
+        {
+            uint32_t vect[9];
+
+            vect[0] = ((uint32_t)sport) << 16 | (uint32_t)dport;
+            memcpy(&vect[1], &saddr->in6, 16);
+            memcpy(&vect[5], &daddr->in6, 16);
+
+            return rte_jhash_32b(vect, 9, stats_tlb_rnd) & mask;
+        }
+
+    default:
+        RTE_LOG(DEBUG, STATS, "%s: hashing unsupported protocol %d\n", __func__, af);
+        return 0;
+    }
+}
+
+static hash_status_enum stats_entry_get(uint32_t hash, struct stats_pkt *param, struct stats_entry **out_entry)
+{
+	struct stats_entry *entry;
+	
+	list_for_each_entry(entry, &stats_tbl[hash], list) {
+		if (entry->sport == param->src_port && entry->dport == param->dst_port
+				&& inet_addr_equal(param->af, &entry->saddr, &param->saddr)
+				&& inet_addr_equal(param->af, &entry->daddr, &param->daddr)
+				&& entry->proto == param->proto
+				&& entry->af == param->af) {
+			/* hit */
+	        *out_entry = entry;
+			RTE_LOG(DEBUG, STATS,
+					"%s: [hit]\n", __func__);	
+			return HASH_STATUS_OK;
+		}
+	}
+	RTE_LOG(DEBUG, STATS,
+			"%s: [not found]\n", __func__);	
+
+    return HASH_STATUS_KEY_NOT_FOUND;
+}
+
+
+static void history_rotate(void) 
+{
+	uint32_t hash = 0;
+	struct stats_entry *entry, *nxt;
+    history_pos = (history_pos + 1) % HISTORY_LENGTH;
+
+    for(; hash < STATS_TBL_SIZE; hash++) {
+
+		list_for_each_entry_safe(entry, nxt, &stats_tbl[hash], list) {
+
+            /* no data in the last 20s */
+            if (entry->last_write == history_pos) {
+                list_del(&entry->list);
+                if (entry->af == AF_INET) {
+                    RTE_LOG(DEBUG, STATS,
+                         "%s:[v4] [history_pos : %d, cid:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u]\n",
+                         __func__, history_pos, entry->cid, entry->proto, entry->saddr.in.s_addr,                                                                                entry->daddr.in.s_addr, entry->sport, entry->dport);
+                }
+                rte_free(entry);
+			} else {
+				entry->total_recv -= entry->recv[history_pos];
+				entry->total_sent -= entry->sent[history_pos];
+				entry->recv[history_pos] = 0;
+				entry->sent[history_pos] = 0;
+			}
+		}
+	}
+}
+
+static int stats_entry_compare(void* aa, void* bb) {
+    struct stats_entry * a = (struct stats_entry *)aa;
+    struct stats_entry * b = (struct stats_entry *)bb;
+
+	return (a->total_recv + a->total_sent) > (b->total_recv + b->total_sent);
+}
+
+static void sorted_list_initialise(sorted_list_type* list) {
+    list->root.next = NULL;
+}
+
+static void insert_topN_list(struct stats_entry *entry)
+{
+    sorted_list_node *node, *p, *first;
+    struct stats_entry *data;
+
+    p = &(stats_sorted_list.root);
+
+	if (sorted_list_num == STATS_TOPN && stats_sorted_list.compare(p->next->data, entry)) {   
+		RTE_LOG(DEBUG, STATS,
+			"%s: no need to insert\n", __func__);
+		return;
+	}
+
+    while (p->next != NULL && stats_sorted_list.compare(entry, p->next->data) > 0) {
+        p = p->next;
+    } 
+
+    node = rte_zmalloc(NULL, sizeof(*node), RTE_CACHE_LINE_SIZE);
+	if (node == NULL) {
+		RTE_LOG(ERR, STATS,
+				"%s: no memory\n", __func__);
+		return;
+	}
+
+    node->next = p->next;
+    node->data = entry;
+    p->next = node;
+    RTE_LOG(DEBUG, STATS,
+        "%s: [insert list]cid : %d, sp : %u, dp : %u\n", 
+        __func__, entry->cid, entry->sport, entry->dport);
+    if(sorted_list_num < STATS_TOPN)
+	    sorted_list_num++;
+    else {
+        /* free the first node */
+	    p = &(stats_sorted_list.root);
+        first = p->next;
+	
+        data = (struct stats_entry *)first->data;
+        RTE_LOG(DEBUG, STATS,
+            "%s: [free first entry]cid : %d, sp : %u, dp : %u\n", 
+             __func__, data->cid, data->sport, data->dport);
+        p->next = first->next;
+
+		rte_free(first);
+	}
+}
+
+static void stats_sort_topN(void)
+{
+	uint32_t hash = 0;
+	struct stats_entry *entry, *nxt;
+
+    for(; hash < STATS_TBL_SIZE; hash++) {
+
+		list_for_each_entry_safe(entry, nxt, &stats_tbl[hash], list) {
+		    insert_topN_list(entry);
+		}
+	}
+}
+
+static void stats_addr_cpy(int af, 	union inet_addr *daddr, union inet_addr *saddr)
+{
+	if (af == AF_INET) {
+		daddr->in.s_addr = saddr->in.s_addr;
+	} else if (af == AF_INET6) {
+		memcpy(daddr->in6.s6_addr, saddr->in6.s6_addr, 16);
+	} else {
+		RTE_LOG(DEBUG, STATS,
+				"%s: unsupported\n", __func__);
+	}    
+}
+
+int stats_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
+                             void **out, size_t *outsize)
+{
+    struct stats_param_array *array;
+    sorted_list_node *node, *p;
+	struct stats_entry *entry;
+    uint32_t off;
+
+    if (stats_disable) {
+        RTE_LOG(DEBUG, STATS,
+            "%s: stats disable\n",  __func__);      
+        return EDPVS_OK;
+    }   
+
+    if (!conf || size < sizeof(struct stats_param) || !out || !outsize)
+        return EDPVS_INVAL;
+
+    /* sort stats */
+	stats_sort_topN();
+
+    *outsize = sizeof(struct stats_param_array) + \
+               sorted_list_num * sizeof(struct stats_param);
+    *out = rte_calloc(NULL, 1, *outsize, RTE_CACHE_LINE_SIZE);
+    if (!(*out)) {
+		RTE_LOG(ERR, STATS,
+						"%s: no memory \n", __func__);
+        return EDPVS_NOMEM;
+    }
+
+    array = *out;
+    array->nstats = sorted_list_num;
+    off = 0;
+
+    p = &(stats_sorted_list.root);
+    while (p->next != NULL && off < sorted_list_num) {
+        node = p->next;
+        p->next = node->next;	
+
+	    entry = (struct stats_entry *)node->data;
+		array->stats[off].af = entry->af;
+		array->stats[off].proto = entry->proto;
+		array->stats[off].cid = entry->cid;
+		stats_addr_cpy(entry->af, &array->stats[off].saddr, &entry->saddr);
+		stats_addr_cpy(entry->af, &array->stats[off].daddr, &entry->daddr);
+		array->stats[off].sport = entry->sport;
+		array->stats[off].dport = entry->dport;
+		array->stats[off].total_recv = entry->total_recv * STATS_INTERVAL;
+		array->stats[off].total_sent = entry->total_sent * STATS_INTERVAL;
+       
+        if (AF_INET == entry->af) {
+            RTE_LOG(DEBUG, STATS,"%s: sip = %s, sport = %u\n", __func__, inet_ntoa(array->stats[off].saddr.in), ntohs(entry->sport));
+            RTE_LOG(DEBUG, STATS,"%s: dip = %s, dport = %u\n", __func__, inet_ntoa(array->stats[off].daddr.in), ntohs(entry->dport));
+        } else if (AF_INET6 == entry->af) {
+                char src_addr[INET6_ADDRSTRLEN];
+                char dst_addr[INET6_ADDRSTRLEN];
+
+                inet_ntop(AF_INET6, &entry->saddr.in6, src_addr, INET6_ADDRSTRLEN);
+                inet_ntop(AF_INET6, &entry->daddr.in6, dst_addr, INET6_ADDRSTRLEN);
+
+                RTE_LOG(DEBUG, STATS,"%s: sip = %s sport = %u, dip = %s, dport = %u\n",
+                     __func__, src_addr, ntohs(entry->sport), dst_addr, ntohs(entry->dport));
+        } else {
+            RTE_LOG(DEBUG, STATS, "%s: unsupported\n", __func__);
+        }
+        
+        RTE_LOG(DEBUG, STATS,
+            "%s: off : %u, cid : %d, proto: %u, total_recv: %Lf,  total_sent : %Lf\n", 
+            __func__, off, entry->cid, entry->proto, array->stats[off].total_recv, array->stats[off].total_sent);
+        
+        rte_free(node);
+
+		off++;
+    }
+
+    sorted_list_num = 0;
+    return EDPVS_OK;
+}
+
+
+void stats_process_ring(void)
+{    
+    int i;
+    uint16_t nb_rb;
+	uint32_t hash;
+	lcoreid_t cid;
+    struct stats_pkt *param;
+	struct stats_pkt *params[NETIF_MAX_PKT_BURST];
+	struct stats_entry *entry = NULL;
+
+    time_t t;
+
+    if (likely(stats_disable)) {		
+        return;
+    }	
+
+    t = time(NULL);
+    if(t - last_timestamp >= RESOLUTION) {
+        history_rotate();
+        last_timestamp = t;
+    }
+	
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+	    if (!rte_lcore_is_enabled(cid)) {
+		    continue;
+	    }
+
+	    nb_rb = rte_ring_dequeue_burst(stats_ring[cid], (void **)params,
+									  NETIF_MAX_PKT_BURST, NULL);
+
+		if (nb_rb > 0) {			
+			for (i = 0; i < nb_rb; i++) {
+			    param = params[i];
+
+				hash = stats_tlb_hashkey(param->af, &param->saddr, param->src_port, &param->daddr, 
+					param->dst_port, STATS_TBL_MASK);
+
+				if (stats_entry_get(hash, param, &entry) == HASH_STATUS_KEY_NOT_FOUND) {
+
+					entry = rte_zmalloc(NULL, sizeof(struct stats_entry), RTE_CACHE_LINE_SIZE);
+					if (entry == NULL) {
+						RTE_LOG(ERR, STATS,
+								"%s: no memory\n", __func__);
+						continue;
+					}
+					
+					memset(entry, 0, sizeof(struct stats_entry));
+					entry->af = param->af;
+					entry->cid = param->cid;
+					entry->proto = param->proto;
+					stats_addr_cpy(param->af, &entry->saddr, &param->saddr);
+					stats_addr_cpy(param->af, &entry->daddr, &param->daddr);
+					entry->sport = param->src_port;
+					entry->dport = param->dst_port;
+			
+					list_add(&entry->list, &stats_tbl[hash]);                 
+				}
+                
+                if (param->af == AF_INET) {
+				    RTE_LOG(DEBUG, STATS,
+						"%s:[v4] dequeue stats_ring[cid:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u, len:%u]\n",
+						__func__, entry->cid, entry->proto, entry->saddr.in.s_addr, 
+						entry->daddr.in.s_addr, entry->sport, entry->dport, param->pkt_len);
+                } else {
+                    RTE_LOG(DEBUG, STATS,
+                         "%s:[v6] dequeue stats_ring[cid:%d, dir:%d, proto:%u, src:%08X %08X %08X %08X, dst:%08X %08X %08X %08X, sp:%u, dp:%u, len:%u]\n",
+                         __func__, entry->cid, param->dir, entry->proto, 
+                         entry->saddr.in6.s6_addr32[0], entry->saddr.in6.s6_addr32[1],
+                         entry->saddr.in6.s6_addr32[2], entry->saddr.in6.s6_addr32[3],
+                         entry->daddr.in6.s6_addr32[0],entry->daddr.in6.s6_addr32[1],
+                         entry->daddr.in6.s6_addr32[2],entry->daddr.in6.s6_addr32[3],
+                         entry->sport, entry->dport, param->pkt_len);
+                
+                }
+
+				/* Update record */
+				entry->last_write = history_pos;
+				if (param->dir == STATS_PKT_DIR_IN) {
+					entry->recv[history_pos] += param->pkt_len;
+					entry->total_recv += param->pkt_len;
+                    RTE_LOG(DEBUG, STATS,
+                        "%s: history_pos: %d, recv : %Lf, total_recv : %Lf\n", __func__, history_pos, entry->recv[history_pos], entry->total_recv);
+
+                } else {
+					entry->sent[history_pos] += param->pkt_len;
+					entry->total_sent += param->pkt_len;
+
+                    RTE_LOG(DEBUG, STATS,
+                        "%s: history_pos: %d: sent : %Lf, total_sent: %Lf\n", __func__, history_pos, entry->sent[history_pos], entry->total_sent);
+				}				
+			}
+		}
+    }
+}
+
+static int stats_pkt_deliver(int af, struct rte_mbuf *mbuf, uint8_t dir)
+{
+	int ret;
+	struct stats_pkt *pkt;
+	__be16 _ports[2], *ports;
+	lcoreid_t cid = rte_lcore_id();
+
+	if (af == AF_INET) {
+		struct ipv4_hdr *ip4h = ip4_hdr(mbuf);
+
+		if (unlikely(ip4h->next_proto_id != IPPROTO_TCP &&
+					 ip4h->next_proto_id != IPPROTO_UDP)) {
+			RTE_LOG(DEBUG, STATS,
+				"%s: unspported proto[core: %d, proto: %d]\n",
+				__func__, cid, ip4h->next_proto_id);
+			return EDPVS_NOPROT;
+		}
+
+	    ports = mbuf_header_pointer(mbuf, ip4_hdrlen(mbuf), sizeof(_ports), _ports);
+	    if (!ports) {
+			RTE_LOG(ERR, STATS,
+					"%s: invalid pkt[%d, %d]\n",
+					__func__, cid, dir);
+			return EDPVS_INVPKT;
+		}	
+		
+		pkt = rte_zmalloc("stats_inpkt", sizeof(struct stats_pkt), RTE_CACHE_LINE_SIZE);
+		if (pkt == NULL) {
+			RTE_LOG(ERR, STATS,
+					"%s: no memory[%d, %d]\n",
+					__func__, cid, dir);
+			return EDPVS_NOMEM;
+		}
+		
+		pkt->af = AF_INET;
+		pkt->cid = cid;
+		pkt->dir = dir;
+		pkt->proto = ip4h->next_proto_id;
+		pkt->saddr.in.s_addr = ip4h->src_addr;
+		pkt->daddr.in.s_addr = ip4h->dst_addr;
+		pkt->src_port = ports[0];
+		pkt->dst_port = ports[1];
+		pkt->pkt_len = mbuf->pkt_len;
+		RTE_LOG(DEBUG, STATS,
+				"%s:[v4] enqueued to stats_ring[cid:%d, dir:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u, len:%u]\n",
+				__func__, cid, dir, pkt->proto, ip4h->src_addr, ip4h->dst_addr, pkt->src_port, pkt->dst_port, pkt->pkt_len);
+
+	} else if (af == AF_INET6) {
+		struct ip6_hdr *ip6h = ip6_hdr(mbuf);
+		uint8_t ip6nxt = ip6h->ip6_nxt;
+
+		if (unlikely(ip6nxt != IPPROTO_TCP &&
+					 ip6nxt != IPPROTO_UDP)) {
+			RTE_LOG(DEBUG, STATS,
+				"%s: unspported proto[core: %d, proto: %d]\n",
+				__func__, cid, ip6nxt);
+			return EDPVS_NOPROT;
+		}
+        
+		ports = mbuf_header_pointer(mbuf, ip6_hdrlen(mbuf), sizeof(_ports), _ports);
+		if (!ports) {
+			RTE_LOG(ERR, STATS,
+					"%s: invalid pkt[%d, %d]\n",
+					 __func__, cid, dir);
+			return EDPVS_INVPKT;
+		}	 
+		
+		pkt = rte_zmalloc("stats_inpkt", sizeof(struct stats_pkt), RTE_CACHE_LINE_SIZE);
+		if (pkt == NULL) {
+			RTE_LOG(ERR, STATS,
+					"%s: no memory[%d, %d]\n",
+					__func__, cid, dir);
+			return EDPVS_NOMEM;
+		}
+		
+		pkt->af = AF_INET6;
+		pkt->cid = cid;
+		pkt->dir = dir;
+		pkt->proto = ip6nxt;
+		pkt->saddr.in6 = ip6h->ip6_src;
+		pkt->daddr.in6 = ip6h->ip6_dst;
+		pkt->src_port = ports[0];
+		pkt->dst_port = ports[1];
+		pkt->pkt_len = mbuf->pkt_len;
+
+		RTE_LOG(DEBUG, STATS,
+				"%s:[v6] enqueued to stats_ring[cid:%d, dir:%d, proto:%u, src:%08X %08X %08X %08X, dst:%08X %08X %08X %08X, sp:%u, dp:%u, len:%u]\n",
+				__func__, cid, dir, pkt->proto, 
+				pkt->saddr.in6.s6_addr32[0], pkt->saddr.in6.s6_addr32[1],
+				pkt->saddr.in6.s6_addr32[2], pkt->saddr.in6.s6_addr32[3],
+			    pkt->daddr.in6.s6_addr32[0],pkt->daddr.in6.s6_addr32[1],
+			    pkt->daddr.in6.s6_addr32[2],pkt->daddr.in6.s6_addr32[3],
+		        pkt->src_port, pkt->dst_port, pkt->pkt_len);
+		
+    } else {
+//#ifdef CONFIG_DPVS_IPVS_DEBUG
+		RTE_LOG(DEBUG, STATS,
+			"%s: err af\n",	__func__);
+//#endif
+        return EDPVS_INVPKT;
+	}	
+
+	ret = rte_ring_enqueue(stats_ring[cid], pkt);
+	if (ret < 0) {
+		RTE_LOG(DEBUG, STATS,
+			"%s: failed to enqueue stats_ring[%d]\n",
+			__func__, cid);
+		rte_free(pkt);
+		return EDPVS_DROP;
+	}
+
+//#ifdef CONFIG_DPVS_IPVS_DEBUG
+	RTE_LOG(DEBUG, STATS,
+		"%s: enqueued to stats_ring[%d]\n",
+		__func__, cid);
+//#endif
+
+    return EDPVS_OK;
+}
+
+int stats_pkt_in(int af, struct rte_mbuf *mbuf)
+{
+    if (likely(stats_disable)) {
+		RTE_LOG(DEBUG, STATS,
+			"%s: stats disable\n", __func__);		
+        return EDPVS_OK;
+    }		
+
+	this_inpkts_count++;
+	if (this_inpkts_count % STATS_INTERVAL == 0) {
+
+        stats_pkt_deliver(af, mbuf, STATS_PKT_DIR_IN);
+    }
+
+	return EDPVS_OK;
+}
+
+int stats_pkt_out(int af, struct rte_mbuf *mbuf)
+{
+    if (likely(stats_disable)) {
+		RTE_LOG(DEBUG, STATS,
+			"%s: stats disable\n", __func__);		
+        return EDPVS_OK;
+    }		
+
+	this_outpkts_count++;
+	if (this_outpkts_count % STATS_INTERVAL == 0) {
+
+        stats_pkt_deliver(af, mbuf, STATS_PKT_DIR_OUT);
+    }
+
+	return EDPVS_OK; 
+}
+
+
+/*
+ * master core allocates stats rings with the other lcores espectively.
+ */
+static int stats_ring_create(void)
+{
+    char name_buf[RTE_RING_NAMESIZE];
+    int socket_id;
+	lcoreid_t cid;
+
+    socket_id = rte_socket_id();
+
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        if (!rte_lcore_is_enabled(cid)) {
+            continue;
+        }
+
+        snprintf(name_buf, RTE_RING_NAMESIZE,
+            "stat_ring[%d]", cid);
+
+        stats_ring[cid] =
+            rte_ring_create(name_buf, STATS_RING_SIZE, socket_id,
+                            RING_F_SP_ENQ | RING_F_SC_DEQ);
+
+        if (!stats_ring[cid]) {
+            RTE_LOG(ERR, STATS,
+                "%s: failed to create stat_ring[%d]\n",
+                 __func__, cid);
+            return EDPVS_NOMEM;
+        }
+
+        RTE_LOG(DEBUG, STATS,
+	        "%s: success to create stat_ring[%d]\n",
+	        __func__, cid);
+    }
+
+    return EDPVS_OK;
+}
+
+int stats_enable_func(void)
+{
+	int i;
+    int err;
+
+    if (stats_disable == false) {
+        return EDPVS_OK;
+    }
+
+    err = stats_ring_create();
+    if (err != EDPVS_OK) {
+        return err;
+    }
+
+    stats_tbl = rte_malloc_socket(NULL, sizeof(struct list_head) * STATS_TBL_SIZE,
+            RTE_CACHE_LINE_SIZE, rte_socket_id());
+
+	if (!stats_tbl) {
+        RTE_LOG(ERR, STATS,
+            "%s: rte_malloc_socket null\n",
+            __func__);
+		return EDPVS_NOMEM;
+	}
+
+    for (i = 0; i < STATS_TBL_SIZE; i++)
+        INIT_LIST_HEAD(&stats_tbl[i]);
+	
+	stats_disable = false;
+	RTE_LOG(DEBUG, STATS,
+		"%s: stats_disable[%d]\n",
+		__func__, stats_disable);
+
+    return EDPVS_OK;
+}
+
+static void stats_variable_reset(void)
+{
+	history_pos = 0;	
+    sorted_list_num = 0;	
+	
+	this_inpkts_count = 0;
+	this_outpkts_count = 0;
+}
+
+static void stats_ring_free(void)
+{
+    lcoreid_t cid;
+
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        if (!rte_lcore_is_enabled(cid)) {
+             continue;
+        }
+        rte_ring_free(stats_ring[cid]);
+        RTE_LOG(DEBUG, STATS,
+            "%s: stats_ring free[%d]\n",
+            __func__, cid);
+    }
+}
+
+
+int stats_disable_func(void)
+{
+	uint32_t hash = 0;
+    int i;
+    uint16_t nb_rb;
+	lcoreid_t cid;
+    struct stats_pkt *param;
+	struct stats_pkt *params[NETIF_MAX_PKT_BURST];
+	struct stats_entry *entry, *nxt;
+	sorted_list_node *node, *p;
+	int count = 0;
+
+    if (stats_disable == true) {
+        return EDPVS_OK;
+    }
+
+	stats_disable = true;
+
+    /* dequeue stats ring and free elements */
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+	    if (!rte_lcore_is_enabled(cid)) {
+		    continue;
+	    }
+
+	    nb_rb = rte_ring_dequeue_burst(stats_ring[cid], (void **)params,
+									  NETIF_MAX_PKT_BURST, NULL);
+
+		while (nb_rb > 0) {		
+			count += nb_rb;
+			for (i = 0; i < nb_rb; i++) {
+			    param = params[i];
+                rte_free(param);
+			}
+			
+		    nb_rb = rte_ring_dequeue_burst(stats_ring[cid], (void **)params,
+							  NETIF_MAX_PKT_BURST, NULL);
+		}
+		
+		RTE_LOG(DEBUG, STATS,
+			"%s: stats ring[%d] free [%d] pkts\n",
+			__func__, cid, count);
+
+		count = 0;
+		
+    }	
+
+	/* free stats ring */
+	stats_ring_free();
+
+    count = 0;
+    /* delete and free all entry added to stats_tbl */
+    for(; hash < STATS_TBL_SIZE; hash++) {
+		list_for_each_entry_safe(entry, nxt, &stats_tbl[hash], list) {
+            list_del(&entry->list);
+            rte_free(entry);
+			count++;
+		}
+	}
+
+	RTE_LOG(DEBUG, STATS,
+		"%s: stats_tbl free [%d]\n",
+		__func__, count);
+
+    /* free tlb */
+    if (stats_tbl) {
+        rte_free(stats_tbl);
+    }
+
+	count = 0;
+
+    /* free sorted list */
+    p = &(stats_sorted_list.root);
+    while (p->next != NULL) {
+        node = p->next;
+	    p->next = node->next;
+		rte_free(node);	
+		count++;
+    } 
+	
+	RTE_LOG(DEBUG, STATS,
+		"%s: stats_sorted_list free [%d]\n",
+		__func__, count);
+    
+	stats_variable_reset();
+
+    return EDPVS_OK;
+}
+
+static void stats_sorted_list_init(void) {
+    stats_sorted_list.compare = &stats_entry_compare;
+    sorted_list_initialise(&stats_sorted_list);
+}
+
+static int stats_sockopt_set(sockoptid_t opt, const void *conf, size_t size)
+{
+     switch (opt) {
+     case SOCKOPT_SET_STATS_ADD:
+                            
+          RTE_LOG(DEBUG, STATS,
+              "%s: enable\n", __func__);
+          return stats_enable_func(); 
+     case SOCKOPT_SET_STATS_DEL:
+          RTE_LOG(DEBUG, STATS,
+              "%s: disable\n", __func__);
+          return stats_disable_func(); 
+
+     default:
+          RTE_LOG(ERR, STATS,
+               "%s: NOTSUPP\n", __func__);
+          return EDPVS_NOTSUPP;
+     }
+}
+
+
+static struct dpvs_sockopts stats_sockopts = {
+    .version        = SOCKOPT_VERSION,
+    .set_opt_min    = SOCKOPT_SET_STATS_ADD,
+    .set_opt_max    = SOCKOPT_SET_STATS_DEL,
+    .set            = stats_sockopt_set,
+    .get_opt_min    = SOCKOPT_GET_STATS_SHOW,
+    .get_opt_max    = SOCKOPT_GET_STATS_SHOW,
+    .get            = stats_sockopt_get,
+};
+
+int stats_init(void)
+{
+    int err;
+	
+	stats_disable = true;
+
+	stats_tlb_rnd = (uint32_t)random();
+
+	stats_sorted_list_init();
+
+    if ((err = sockopt_register(&stats_sockopts)) != EDPVS_OK)
+        return err;
+
+    return EDPVS_OK;
+}
diff --git a/tools/dpip/Makefile b/tools/dpip/Makefile
index e5a89b4c9..3ef930cea 100644
--- a/tools/dpip/Makefile
+++ b/tools/dpip/Makefile
@@ -33,7 +33,7 @@ DEFS = -D DPVS_MAX_LCORE=64
 CFLAGS += $(DEFS)
 
 OBJS = dpip.o utils.o route.o addr.o neigh.o link.o vlan.o \
-	   qsch.o cls.o tunnel.o ipset.o ipv6.o ../../src/common.o \
+	   qsch.o cls.o tunnel.o ipset.o ipv6.o stats.o ../../src/common.o \
 	   ../keepalived/keepalived/libipvs-2.6/sockopt.o
 
 all: $(TARGET)
diff --git a/tools/dpip/dpip.c b/tools/dpip/dpip.c
index 537f97930..18f03f95c 100644
--- a/tools/dpip/dpip.c
+++ b/tools/dpip/dpip.c
@@ -152,9 +152,11 @@ static int parse_args(int argc, char *argv[], struct dpip_conf *conf)
         exit(1);
     }
 
-    if (strcmp(argv[1], "add") == 0)
+    if (strcmp(argv[1], "add") == 0 ||
+            strcmp(argv[1], "enable") == 0)
         conf->cmd = DPIP_CMD_ADD;
-    else if (strcmp(argv[1], "del") == 0)
+    else if (strcmp(argv[1], "del") == 0 ||
+            strcmp(argv[1], "disable") == 0)
         conf->cmd = DPIP_CMD_DEL;
     else if (strcmp(argv[1], "set") == 0 ||
              strcmp(argv[1], "change") == 0)
diff --git a/tools/dpip/stats.c b/tools/dpip/stats.c
new file mode 100644
index 000000000..3c4815110
--- /dev/null
+++ b/tools/dpip/stats.c
@@ -0,0 +1,125 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#include <stdlib.h>
+#include <string.h>
+#include <arpa/inet.h>
+#include <netinet/in.h>
+#include "common.h"
+#include "dpip.h"
+#include "conf/inetaddr.h"
+#include "conf/stats.h"
+#include "sockopt.h"
+
+
+static void stats_help(void)
+{
+    fprintf(stderr,
+            "Usage:\n"
+            "    dpip stats [enable | disable]\n"
+            "    dpip stats show\n"
+           );
+}
+
+static void stats_dump(const struct stats_param *param)
+{
+    if (AF_INET == param->af) {
+           printf("lcore: %u, [%s, %u -> ",
+               param->cid, inet_ntoa(param->saddr.in), ntohs(param->sport));
+           printf("%s, %u | %u], [%.0Lf, %.0Lf]",            
+               inet_ntoa(param->daddr.in), ntohs(param->dport), param->proto, param->total_recv, param->total_sent); 
+
+	} else if (AF_INET6 == param->af) {
+        char src_addr[INET6_ADDRSTRLEN];
+        char dst_addr[INET6_ADDRSTRLEN];
+
+        inet_ntop(AF_INET6, &param->saddr.in6, src_addr, INET6_ADDRSTRLEN);
+        inet_ntop(AF_INET6, &param->daddr.in6, dst_addr, INET6_ADDRSTRLEN);
+
+        printf("lcore: %u, [%s, %u -> %s, %u | %u], [%.0Lf, %.0Lf]",
+            param->cid, src_addr, ntohs(param->sport), dst_addr, ntohs(param->dport), param->proto, param->total_recv, param->total_sent);
+
+	} else {
+        printf("unsupported");
+	}
+
+    printf("\n");
+    return;
+}
+
+static int stats_do_cmd(struct dpip_obj *obj, dpip_cmd_t cmd,
+                       struct dpip_conf *conf)
+{
+    size_t size;
+    int err, i;
+	struct stats_param stats_param;
+	struct stats_param_array *stats_array;
+
+    switch (conf->cmd) {
+    case DPIP_CMD_ADD:
+        return dpvs_setsockopt(SOCKOPT_SET_STATS_ADD, &stats_param, sizeof(stats_param));
+    case DPIP_CMD_DEL:
+        return dpvs_setsockopt(SOCKOPT_SET_STATS_DEL, &stats_param, sizeof(stats_param));
+    case DPIP_CMD_SHOW:
+        err = dpvs_getsockopt(SOCKOPT_GET_STATS_SHOW, &stats_param, sizeof(stats_param),
+                              (void **)&stats_array, &size);
+        if (err != 0)
+            return err;
+
+        if (stats_array == NULL) {
+            fprintf(stderr, "warnning: disabled.\n");
+            return EDPVS_OK;
+
+        }
+
+        if (size <= sizeof(*stats_array)
+                || size != sizeof(*stats_array) + \
+                           stats_array->nstats * sizeof(struct stats_param)) {
+            fprintf(stderr, "response nstats : %d.\n", stats_array->nstats);
+            dpvs_sockopt_msg_free(stats_array);
+            return EDPVS_NOTEXIST;
+        }
+
+	    //printf("-------------top10 stats[in the last 20s]----------\n");
+
+        for (i = stats_array->nstats - 1; i >= 0; i--) {
+            printf("top%d: ", stats_array->nstats - i);
+            stats_dump(&stats_array->stats[i]);
+        }
+
+        dpvs_sockopt_msg_free(stats_array);
+        return EDPVS_OK;
+    default:
+        return EDPVS_NOTSUPP;
+    }
+}
+
+struct dpip_obj dpip_stats = {
+    .name   = "stats",
+    .help   = stats_help,
+    .do_cmd = stats_do_cmd,
+};
+
+static void __init stats_init(void)
+{
+    dpip_register_obj(&dpip_stats);
+}
+
+static void __exit stats_exit(void)
+{
+    dpip_unregister_obj(&dpip_stats);
+}

From 8f696d4fc1fe0acf8bd85148c7d9346cb4cca09b Mon Sep 17 00:00:00 2001
From: yangxingwu <xingwu.yang@gmail.com>
Date: Fri, 26 Jul 2019 10:11:34 +0800
Subject: [PATCH 05/62] ipvswrapper.c: remove executable permission

---
 tools/keepalived/keepalived/check/ipvswrapper.c | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 mode change 100755 => 100644 tools/keepalived/keepalived/check/ipvswrapper.c

diff --git a/tools/keepalived/keepalived/check/ipvswrapper.c b/tools/keepalived/keepalived/check/ipvswrapper.c
old mode 100755
new mode 100644

From 70fcba3d24eba30fce9f0bb5bb2177f5dff20ff9 Mon Sep 17 00:00:00 2001
From: zhuangyan <zhuangyan@bytedance.com>
Date: Sun, 25 Aug 2019 17:10:06 +0800
Subject: [PATCH 06/62] neigh: show the concrete neighbour entry info when its
 queue is full.

o Remove the queue length check of the newly created neighbour entry as well.
---
 src/neigh.c | 32 +++++++++++++++++++++-----------
 1 file changed, 21 insertions(+), 11 deletions(-)

diff --git a/src/neigh.c b/src/neigh.c
index ce810c42c..ea3e6db76 100644
--- a/src/neigh.c
+++ b/src/neigh.c
@@ -161,7 +161,6 @@ static inline char *eth_addr_itoa(const struct ether_addr *src, char *dst, size_
     return dst;
 }
 
-
 #ifdef CONFIG_DPVS_NEIGH_DEBUG
 static void dump_arp_hdr(const char *msg, const struct arp_hdr *ah, portid_t port)
 {
@@ -184,11 +183,6 @@ static void dump_arp_hdr(const char *msg, const struct arp_hdr *ah, portid_t por
     }
     fprintf(stderr, "\n");
 }
-
-#else
-static inline void dump_arp_hdr(const char *msg, const struct arp_hdr *ah, portid_t port)
-{
-}
 #endif
 
 static inline int neigh_hash(struct neighbour_entry *neighbour, unsigned int hashkey)
@@ -545,7 +539,10 @@ static int neigh_send_arp(struct netif_port *port, uint32_t src_ip, uint32_t dst
 
     memset(&arp[1], 0, 18);
 
+#ifdef CONFIG_DPVS_NEIGH_DEBUG
     dump_arp_hdr("send", arp, port->id);
+#endif
+
     netif_xmit(m, port);
     return EDPVS_OK;
 }
@@ -564,6 +561,22 @@ static inline void neigh_show_nexthop(const char *func, int af,
 }
 #endif
 
+static inline void neigh_show_entry(const char *func,
+                                    struct neighbour_entry *neigh)
+{
+    char ipaddr[64];
+
+    RTE_LOG(ERR, NEIGHBOUR,
+            "%s: [%d] ip %s, state %s, %d (> %d) packets "
+            "queued on %s so drop the packet",
+            func, rte_lcore_id(),
+            inet_ntop(neigh->af, &neigh->ip_addr, ipaddr, sizeof(ipaddr))
+            ? ipaddr : "::",
+            nud_state_names[neigh->state],
+            neigh->que_num, arp_unres_qlen,
+            neigh->port ? neigh->port->name : "null i/f");
+}
+
 int neigh_output(int af, union inet_addr *nexhop,
                  struct rte_mbuf *m, struct netif_port *port)
 {
@@ -590,13 +603,13 @@ int neigh_output(int af, union inet_addr *nexhop,
         if ((neighbour->state == DPVS_NUD_S_NONE) ||
            (neighbour->state == DPVS_NUD_S_SEND)) {
             if (neighbour->que_num > arp_unres_qlen) {
+                neigh_show_entry(__func__, neighbour);
                 /*
                  * don't need arp request now,
                  * since neighbour will not be confirmed
                  * and it will be released late
                  */
                 rte_pktmbuf_free(m);
-                RTE_LOG(ERR, NEIGHBOUR, "[%s] neigh_unres_queue is full, drop packet\n", __func__);
                 return EDPVS_DROP;
             }
             m_buf = rte_zmalloc("neigh_new_mbuf",
@@ -639,10 +652,7 @@ int neigh_output(int af, union inet_addr *nexhop,
             rte_pktmbuf_free(m);
             return EDPVS_NOMEM;
         }
-        if(neighbour->que_num > arp_unres_qlen){
-            rte_pktmbuf_free(m);
-            return EDPVS_DROP;
-        }
+
         m_buf = rte_zmalloc("neigh_new_mbuf",
                            sizeof(struct neighbour_mbuf_entry), RTE_CACHE_LINE_SIZE);
         if(!m_buf){

From 4273c04bc5ccb7af595047bdebf9ce87aa555059 Mon Sep 17 00:00:00 2001
From: zhuangyan <zhuangyan@bytedance.com>
Date: Fri, 30 Aug 2019 16:36:05 +0800
Subject: [PATCH 07/62] ipvs: remove the unnecessary line within main().

---
 src/main.c | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/main.c b/src/main.c
index 0e7888b88..d052c78c7 100644
--- a/src/main.c
+++ b/src/main.c
@@ -187,7 +187,6 @@ int main(int argc, char *argv[])
     err = rte_eal_init(argc, argv);
     if (err < 0)
         rte_exit(EXIT_FAILURE, "Invalid EAL parameters\n");
-    argc -= err, argv += err;
 
     RTE_LOG(INFO, DPVS, "dpvs version: %s, build on %s\n", DPVS_VERSION, DPVS_BUILD_DATE);
 

From 5128db7e886e860e2c4b731597ab582853e5a481 Mon Sep 17 00:00:00 2001
From: zhuangyan <zhuangyan@bytedance.com>
Date: Tue, 17 Sep 2019 14:08:10 +0800
Subject: [PATCH 08/62] ctrl: increase buffer size to 8192 from 4096.

o When dpvs runs with 16 worker cores, like 'dpvs -- -l 0,1-8,11-18', we need to
  larger buffer to accommodate the debugging info.
---
 src/ctrl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/ctrl.c b/src/ctrl.c
index d7f7bf703..4293f89d8 100644
--- a/src/ctrl.c
+++ b/src/ctrl.c
@@ -991,7 +991,7 @@ static inline int msg_init(void)
     int ii, jj;
     int ret;
     char ring_name[16];
-    char buf[4096];
+    char buf[8192];
 
     if (DPVS_MAX_LCORE > MSG_MAX_LCORE_SUPPORTED)
         return EDPVS_NOTSUPP;

From b9623e01aff388e1cf459944a7e2650f07479a7b Mon Sep 17 00:00:00 2001
From: yangxingwu <xingwu.yang@gmail.com>
Date: Fri, 11 Oct 2019 21:52:03 +0800
Subject: [PATCH 09/62] alloc_percpu_stats: alloc memory from all sockets

in most cases, this function run on master core and socket 0
---
 src/ipvs/ip_vs_stats.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/ipvs/ip_vs_stats.c b/src/ipvs/ip_vs_stats.c
index 17a80f7d9..6598003a2 100644
--- a/src/ipvs/ip_vs_stats.c
+++ b/src/ipvs/ip_vs_stats.c
@@ -84,8 +84,8 @@ static struct dp_vs_stats* alloc_percpu_stats(void)
     struct dp_vs_stats* svc_stats;
 
     netif_get_slave_lcores(&nlcore, &lcore_mask);
-    svc_stats = rte_malloc_socket(NULL, sizeof(struct dp_vs_stats) * DPVS_MAX_LCORE,
-                                   RTE_CACHE_LINE_SIZE, rte_socket_id());
+    svc_stats = rte_zmalloc(NULL, sizeof(struct dp_vs_stats) * DPVS_MAX_LCORE,
+            RTE_CACHE_LINE_SIZE);
     if (!svc_stats)
         return NULL;
 

From 9e0447f053719e9c04e5f37797e91b1670678073 Mon Sep 17 00:00:00 2001
From: zhuangyan <zhuangyan@bytedance.com>
Date: Sun, 25 Aug 2019 17:55:14 +0800
Subject: [PATCH 10/62] neigh: refactor neigh_output() to make the code logic
 clear.

---
 src/neigh.c | 64 ++++++++++++++++++++++++++++-------------------------
 1 file changed, 34 insertions(+), 30 deletions(-)

diff --git a/src/neigh.c b/src/neigh.c
index 4b88e9f05..53be015fa 100644
--- a/src/neigh.c
+++ b/src/neigh.c
@@ -600,8 +600,9 @@ int neigh_output(int af, union inet_addr *nexhop,
     neighbour = neigh_lookup_entry(af, nexhop, port, hashkey);
 
     if (neighbour) {
-        if ((neighbour->state == DPVS_NUD_S_NONE) ||
-           (neighbour->state == DPVS_NUD_S_SEND)) {
+        switch (neighbour->state) {
+        case DPVS_NUD_S_NONE:
+        case DPVS_NUD_S_SEND:
             if (neighbour->que_num > arp_unres_qlen) {
                 neigh_show_entry(__func__, neighbour);
                 /*
@@ -612,12 +613,14 @@ int neigh_output(int af, union inet_addr *nexhop,
                 rte_pktmbuf_free(m);
                 return EDPVS_DROP;
             }
+
             m_buf = rte_zmalloc("neigh_new_mbuf",
-                               sizeof(struct neighbour_mbuf_entry), RTE_CACHE_LINE_SIZE);
+                                sizeof(struct neighbour_mbuf_entry), RTE_CACHE_LINE_SIZE);
             if (!m_buf) {
                 rte_pktmbuf_free(m);
                 return EDPVS_DROP;
             }
+
             m_buf->m = m;
             list_add_tail(&m_buf->neigh_mbuf_list, &neighbour->queue_list);
             neighbour->que_num++;
@@ -626,12 +629,12 @@ int neigh_output(int af, union inet_addr *nexhop,
                 neigh_state_confirm(neighbour);
                 neigh_entry_state_trans(neighbour, 0);
             }
+
             return EDPVS_OK;
-        }
-        else if ((neighbour->state == DPVS_NUD_S_REACHABLE) ||
-                 (neighbour->state == DPVS_NUD_S_PROBE) ||
-                 (neighbour->state == DPVS_NUD_S_DELAY)) {
 
+        case DPVS_NUD_S_REACHABLE:
+        case DPVS_NUD_S_PROBE:
+        case DPVS_NUD_S_DELAY:
             neigh_fill_mac(neighbour, m, NULL, port);
             netif_xmit(m, neighbour->port);
 
@@ -641,35 +644,36 @@ int neigh_output(int af, union inet_addr *nexhop,
             }
 
             return EDPVS_OK;
-        }
 
-        return EDPVS_IDLE;
-    }
-    else{
-        neighbour = neigh_add_table(af, nexhop, NULL, port, hashkey, 0);
-        if(!neighbour){
-            RTE_LOG(ERR, NEIGHBOUR, "[%s] add neighbour wrong\n", __func__);
-            rte_pktmbuf_free(m);
-            return EDPVS_NOMEM;
+        default:
+            return EDPVS_IDLE;
         }
+    }
 
-        m_buf = rte_zmalloc("neigh_new_mbuf",
-                           sizeof(struct neighbour_mbuf_entry), RTE_CACHE_LINE_SIZE);
-        if(!m_buf){
-            rte_pktmbuf_free(m);
-            return EDPVS_DROP;
-        }
-        m_buf->m = m;
-        list_add_tail(&m_buf->neigh_mbuf_list, &neighbour->queue_list);
-        neighbour->que_num++;
+    /* create the neighbour entry if not found */
+    neighbour = neigh_add_table(af, nexhop, NULL, port, hashkey, 0);
+    if (!neighbour) {
+        RTE_LOG(ERR, NEIGHBOUR, "[%s] add neighbour wrong\n", __func__);
+        rte_pktmbuf_free(m);
+        return EDPVS_NOMEM;
+    }
 
-        if (neighbour->state == DPVS_NUD_S_NONE) {
-            neigh_state_confirm(neighbour);
-            neigh_entry_state_trans(neighbour, 0);
-        }
+    m_buf = rte_zmalloc("neigh_new_mbuf",
+                        sizeof(struct neighbour_mbuf_entry), RTE_CACHE_LINE_SIZE);
+    if (!m_buf) {
+        rte_pktmbuf_free(m);
+        return EDPVS_DROP;
+    }
+    m_buf->m = m;
+    list_add_tail(&m_buf->neigh_mbuf_list, &neighbour->queue_list);
+    neighbour->que_num++;
 
-        return EDPVS_OK;
+    if (neighbour->state == DPVS_NUD_S_NONE) {
+        neigh_state_confirm(neighbour);
+        neigh_entry_state_trans(neighbour, 0);
     }
+
+    return EDPVS_OK;
 }
 
 int neigh_gratuitous_arp(struct in_addr *src_ip, struct netif_port *port)

From 9601d3cc35cc1a577e30268fda72ad56b0d55333 Mon Sep 17 00:00:00 2001
From: zhuangyan <zhuangyan@bytedance.com>
Date: Tue, 17 Sep 2019 11:55:30 +0800
Subject: [PATCH 11/62] ipvs: add connection timer operation APIs as below.

a) dp_vs_conn_attach_timer_nolock()
   Add the connection to the timer with/without lock.

b) dp_vs_conn_dettach_timer_nolock()
   Remove the connection from the timer with/without lock.

c) dp_vs_conn_refresh_timer_nolock()
   Refresh the connection within the timer with/without lock.

- Also use dp_vs_conn_is_template() instead of checking the flag of
  DPVS_CONN_F_TEMPLATE.
---
 include/ipvs/conn.h    |  35 +++++++++++-
 src/ipvs/ip_vs_conn.c  | 118 ++++++++++++++++++++++++++++++-----------
 src/ipvs/ip_vs_laddr.c |   4 +-
 3 files changed, 121 insertions(+), 36 deletions(-)

diff --git a/include/ipvs/conn.h b/include/ipvs/conn.h
index 356c3084e..bfb07cfdc 100644
--- a/include/ipvs/conn.h
+++ b/include/ipvs/conn.h
@@ -39,6 +39,7 @@ enum {
     DPVS_CONN_F_HASHED          = 0x0040,
     DPVS_CONN_F_REDIRECT_HASHED = 0x0080,
     DPVS_CONN_F_INACTIVE        = 0x0100,
+    DPVS_CONN_F_IN_TIMER        = 0x0200,
     DPVS_CONN_F_SYNPROXY        = 0x8000,
     DPVS_CONN_F_TEMPLATE        = 0x1000,
     DPVS_CONN_F_NOFASTXMIT      = 0x2000,
@@ -153,10 +154,10 @@ struct dp_vs_conn {
 
     /* connection redirect in fnat/snat/nat modes */
     struct dp_vs_redirect  *redirect;
-  
+
     /* flag for gfwip */
     bool outwall;
-  
+
 } __rte_cache_aligned;
 
 /* for syn-proxy to save all ack packet in conn before rs's syn-ack arrives */
@@ -280,6 +281,36 @@ static inline void dp_vs_control_add(struct dp_vs_conn *conn, struct dp_vs_conn
     rte_atomic32_inc(&ctl_conn->n_control);
 }
 
+static inline bool
+dp_vs_conn_is_template(struct dp_vs_conn *conn)
+{
+    return  (conn->flags & DPVS_CONN_F_TEMPLATE) ? true : false;
+}
+
+static inline void
+dp_vs_conn_set_template(struct dp_vs_conn *conn)
+{
+    conn->flags |= DPVS_CONN_F_TEMPLATE;
+}
+
+static inline bool
+dp_vs_conn_is_in_timer(struct dp_vs_conn *conn)
+{
+    return (conn->flags & DPVS_CONN_F_IN_TIMER) ? true : false;
+}
+
+static inline void
+dp_vs_conn_set_in_timer(struct dp_vs_conn *conn)
+{
+    conn->flags |= DPVS_CONN_F_IN_TIMER;
+}
+
+static inline void
+dp_vs_conn_clear_in_timer(struct dp_vs_conn *conn)
+{
+    conn->flags &= ~DPVS_CONN_F_IN_TIMER;
+}
+
 static inline bool
 dp_vs_conn_is_redirect_hashed(struct dp_vs_conn *conn)
 {
diff --git a/src/ipvs/ip_vs_conn.c b/src/ipvs/ip_vs_conn.c
index a0d61a367..54f00c4f5 100644
--- a/src/ipvs/ip_vs_conn.c
+++ b/src/ipvs/ip_vs_conn.c
@@ -85,6 +85,8 @@ static uint32_t dp_vs_conn_rnd; /* hash random */
  */
 static struct rte_mempool *dp_vs_conn_cache[DPVS_MAX_SOCKET];
 
+static int conn_expire(void *priv);
+
 static struct dp_vs_conn *dp_vs_conn_alloc(enum dpvs_fwd_mode fwdmode,
                                            uint32_t flags)
 {
@@ -120,6 +122,74 @@ static void dp_vs_conn_free(struct dp_vs_conn *conn)
     this_conn_count--;
 }
 
+static void dp_vs_conn_attach_timer(struct dp_vs_conn *conn, bool lock)
+{
+    int rc;
+
+    if (dp_vs_conn_is_in_timer(conn))
+        return;
+
+    if (dp_vs_conn_is_template(conn)) {
+        if (lock)
+            rc = dpvs_timer_sched(&conn->timer, &conn->timeout,
+                                  conn_expire, conn, true);
+        else
+            rc = dpvs_timer_sched_nolock(&conn->timer, &conn->timeout,
+                                  conn_expire, conn, true);
+    } else {
+        if (lock)
+            rc = dpvs_timer_sched(&conn->timer, &conn->timeout,
+                                  conn_expire, conn, false);
+        else
+            rc = dpvs_timer_sched_nolock(&conn->timer, &conn->timeout,
+                                  conn_expire, conn, false);
+    }
+
+    if (rc == EDPVS_OK)
+        dp_vs_conn_set_in_timer(conn);
+}
+
+static void dp_vs_conn_detach_timer(struct dp_vs_conn *conn, bool lock)
+{
+    int rc;
+
+    if (!dp_vs_conn_is_in_timer(conn))
+        return;
+
+    if (dp_vs_conn_is_template(conn)) {
+        if (lock)
+            rc = dpvs_timer_cancel(&conn->timer, true);
+        else
+            rc = dpvs_timer_cancel_nolock(&conn->timer, true);
+    } else {
+        if (lock)
+            rc = dpvs_timer_cancel(&conn->timer, false);
+        else
+            rc = dpvs_timer_cancel_nolock(&conn->timer, false);
+    }
+
+    if (rc == EDPVS_OK)
+        dp_vs_conn_clear_in_timer(conn);
+}
+
+static void dp_vs_conn_refresh_timer(struct dp_vs_conn *conn, bool lock)
+{
+    if (!dp_vs_conn_is_in_timer(conn))
+        return;
+
+    if (dp_vs_conn_is_template(conn)) {
+        if (lock)
+            dpvs_timer_update(&conn->timer, &conn->timeout, true);
+        else
+            dpvs_timer_update_nolock(&conn->timer, &conn->timeout, true);
+    } else {
+        if (lock)
+            dpvs_timer_update(&conn->timer, &conn->timeout, false);
+        else
+            dpvs_timer_update_nolock(&conn->timer, &conn->timeout, false);
+    }
+}
+
 static inline struct dp_vs_conn *
 tuplehash_to_conn(const struct conn_tuple_hash *thash)
 {
@@ -172,7 +242,7 @@ static inline int __dp_vs_conn_hash(struct dp_vs_conn *conn, uint32_t mask)
                          &tuplehash_out(conn).daddr, tuplehash_out(conn).dport,
                          mask);
 
-    if (conn->flags & DPVS_CONN_F_TEMPLATE) {
+    if (dp_vs_conn_is_template(conn)) {
         /* lock is complusory for template */
         rte_spinlock_lock(&dp_vs_ct_lock);
         list_add(&tuplehash_in(conn).list, &dp_vs_ct_tbl[ihash]);
@@ -221,7 +291,7 @@ static inline int dp_vs_conn_unhash(struct dp_vs_conn *conn)
         } else {
             dp_vs_redirect_unhash(conn);
 
-            if (conn->flags & DPVS_CONN_F_TEMPLATE) {
+            if (dp_vs_conn_is_template(conn)) {
                 rte_spinlock_lock(&dp_vs_ct_lock);
                 list_del(&tuplehash_in(conn).list);
                 list_del(&tuplehash_out(conn).list);
@@ -271,7 +341,7 @@ static int conn_bind_dest(struct dp_vs_conn *conn, struct dp_vs_dest *dest)
 
     rte_atomic32_inc(&dest->refcnt);
 
-    if (conn->flags & DPVS_CONN_F_TEMPLATE)
+    if (dp_vs_conn_is_template(conn))
         rte_atomic32_inc(&dest->persistconns);
     else
         rte_atomic32_inc(&dest->inactconns);
@@ -307,7 +377,7 @@ static int conn_unbind_dest(struct dp_vs_conn *conn)
 {
     struct dp_vs_dest *dest = conn->dest;
 
-    if (conn->flags & DPVS_CONN_F_TEMPLATE) {
+    if (dp_vs_conn_is_template(conn)) {
         rte_atomic32_dec(&dest->persistconns);
     } else  {
         if (conn->flags & DPVS_CONN_F_INACTIVE)
@@ -495,10 +565,7 @@ static int conn_expire(void *priv)
     /* refcnt == 1 means we are the only referer.
      * no one is using the conn and it's timed out. */
     if (rte_atomic32_read(&conn->refcnt) == 1) {
-        if (conn->flags & DPVS_CONN_F_TEMPLATE)
-            dpvs_timer_cancel_nolock(&conn->timer, true);
-        else
-            dpvs_timer_cancel_nolock(&conn->timer, false);
+        dp_vs_conn_detach_timer(conn, false);
 
         /* I was controlled by someone */
         if (conn->control)
@@ -576,10 +643,7 @@ static int conn_expire(void *priv)
 
     /* some one is using it when expire,
      * try del it again later */
-    if (conn->flags & DPVS_CONN_F_TEMPLATE)
-        dpvs_timer_update_nolock(&conn->timer, &conn->timeout, true);
-    else
-        dpvs_timer_update_nolock(&conn->timer, &conn->timeout, false);
+    dp_vs_conn_refresh_timer(conn, false);
 
     rte_atomic32_dec(&conn->refcnt);
     return DTIMER_OK;
@@ -598,10 +662,7 @@ static void conn_flush(void)
         list_for_each_entry_safe(tuphash, next, &this_conn_tbl[i], list) {
             conn = tuplehash_to_conn(tuphash);
 
-            if (conn->flags & DPVS_CONN_F_TEMPLATE)
-                dpvs_timer_cancel(&conn->timer, true);
-            else
-                dpvs_timer_cancel(&conn->timer, false);
+            dp_vs_conn_detach_timer(conn, true);
 
             rte_atomic32_inc(&conn->refcnt);
             if (rte_atomic32_read(&conn->refcnt) != 2) {
@@ -680,8 +741,10 @@ struct dp_vs_conn *dp_vs_conn_new(struct rte_mbuf *mbuf,
     if (unlikely(!new))
         return NULL;
 
+    new->flags = flags;
+
     /* set proper RS port */
-    if ((flags & DPVS_CONN_F_TEMPLATE) || param->ct_dport != 0)
+    if (dp_vs_conn_is_template(new) || param->ct_dport != 0)
         rport = param->ct_dport;
     else if (dest->fwdmode == DPVS_FWD_MODE_SNAT) {
         if (unlikely(param->proto == IPPROTO_ICMP ||
@@ -764,7 +827,6 @@ struct dp_vs_conn *dp_vs_conn_new(struct rte_mbuf *mbuf,
     /* caller will use it right after created,
      * just like dp_vs_conn_get(). */
     rte_atomic32_set(&new->refcnt, 1);
-    new->flags  = flags;
     new->state  = 0;
 #ifdef CONFIG_DPVS_IPVS_STATS_DEBUG
     new->ctime = rte_rdtsc();
@@ -799,7 +861,8 @@ struct dp_vs_conn *dp_vs_conn_new(struct rte_mbuf *mbuf,
     INIT_LIST_HEAD(&new->ack_mbuf);
     rte_atomic32_set(&new->syn_retry_max, 0);
     rte_atomic32_set(&new->dup_ack_cnt, 0);
-    if ((flags & DPVS_CONN_F_SYNPROXY) && !(flags & DPVS_CONN_F_TEMPLATE)) {
+
+    if ((flags & DPVS_CONN_F_SYNPROXY) && !dp_vs_conn_is_template(new)) {
         struct tcphdr _tcph, *th = NULL;
         struct dp_vs_synproxy_ack_pakcet *ack_mbuf;
         struct dp_vs_proto *pp;
@@ -834,10 +897,7 @@ struct dp_vs_conn *dp_vs_conn_new(struct rte_mbuf *mbuf,
 
     /* schedule conn timer */
     dpvs_time_rand_delay(&new->timeout, 1000000);
-    if (new->flags & DPVS_CONN_F_TEMPLATE)
-        dpvs_timer_sched(&new->timer, &new->timeout, conn_expire, new, true);
-    else
-        dpvs_timer_sched(&new->timer, &new->timeout, conn_expire, new, false);
+    dp_vs_conn_attach_timer(new, true);
 
 #ifdef CONFIG_DPVS_IPVS_DEBUG
     conn_dump("new conn: ", new);
@@ -953,7 +1013,7 @@ struct dp_vs_conn *dp_vs_ct_in_get(int af, uint16_t proto,
         if (tuphash->sport == sport && tuphash->dport == dport
                 && inet_addr_equal(af, &tuphash->saddr, saddr)
                 && inet_addr_equal(af, &tuphash->daddr, daddr)
-                && conn->flags & DPVS_CONN_F_TEMPLATE
+                && dp_vs_conn_is_template(conn)
                 && tuphash->proto == proto
                 && tuphash->af == af) {
             /* hit */
@@ -1026,10 +1086,7 @@ void dp_vs_conn_put_no_reset(struct dp_vs_conn *conn)
 /* put back the conn and reset it's timer */
 void dp_vs_conn_put(struct dp_vs_conn *conn)
 {
-    if (conn->flags & DPVS_CONN_F_TEMPLATE)
-        dpvs_timer_update(&conn->timer, &conn->timeout, true);
-    else
-        dpvs_timer_update(&conn->timer, &conn->timeout, false);
+    dp_vs_conn_refresh_timer(conn, true);
 
     assert(rte_atomic32_read(&conn->refcnt) > 0);
     rte_atomic32_dec(&conn->refcnt);
@@ -1038,10 +1095,7 @@ void dp_vs_conn_put(struct dp_vs_conn *conn)
 /* used in conn timer handler: conn_expire */
 static void dp_vs_conn_put_nolock(struct dp_vs_conn *conn)
 {
-    if (conn->flags & DPVS_CONN_F_TEMPLATE)
-        dpvs_timer_update_nolock(&conn->timer, &conn->timeout, true);
-    else
-        dpvs_timer_update_nolock(&conn->timer, &conn->timeout, false);
+    dp_vs_conn_refresh_timer(conn, false);
 
     assert(rte_atomic32_read(&conn->refcnt) > 0);
     rte_atomic32_dec(&conn->refcnt);
diff --git a/src/ipvs/ip_vs_laddr.c b/src/ipvs/ip_vs_laddr.c
index 836d49f09..9512e8ae9 100644
--- a/src/ipvs/ip_vs_laddr.c
+++ b/src/ipvs/ip_vs_laddr.c
@@ -171,7 +171,7 @@ int dp_vs_laddr_bind(struct dp_vs_conn *conn, struct dp_vs_service *svc)
         return EDPVS_INVAL;
     if (svc->proto != IPPROTO_TCP && svc->proto != IPPROTO_UDP)
         return EDPVS_NOTSUPP;
-    if (conn->flags & DPVS_CONN_F_TEMPLATE)
+    if (dp_vs_conn_is_template(conn))
         return EDPVS_OK;
 
     /*
@@ -259,7 +259,7 @@ int dp_vs_laddr_unbind(struct dp_vs_conn *conn)
 {
     struct sockaddr_storage dsin, ssin;
 
-    if (conn->flags & DPVS_CONN_F_TEMPLATE)
+    if (dp_vs_conn_is_template(conn))
         return EDPVS_OK;
 
     if (!conn->local)

From 28784f96968cddefec9f28706ac7ee1b72e467a3 Mon Sep 17 00:00:00 2001
From: yangxingwu <xingwu.yang@gmail.com>
Date: Thu, 17 Oct 2019 10:57:33 +0800
Subject: [PATCH 12/62] netif.c: use rte_zmalloc instead of rte_zmalloc_socket
 in netif_sockopt_get

---
 src/netif.c | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/src/netif.c b/src/netif.c
index 0f910516e..b31ab4646 100644
--- a/src/netif.c
+++ b/src/netif.c
@@ -4207,8 +4207,8 @@ static int get_lcore_mask(void **out, size_t *out_len)
 
     netif_lcore_mask_get_t *get;
 
-    get = rte_zmalloc_socket(NULL, sizeof(netif_lcore_mask_get_t),
-            RTE_CACHE_LINE_SIZE, rte_socket_id());
+    get = rte_zmalloc(NULL, sizeof(netif_lcore_mask_get_t),
+            RTE_CACHE_LINE_SIZE);
     if (unlikely (NULL == get))
         return EDPVS_NOMEM;
 
@@ -4242,8 +4242,8 @@ static int get_lcore_basic(lcoreid_t cid, void **out, size_t *out_len)
         return err;
     assert(len < NETIF_CTRL_BUFFER_LEN);
 
-    get = rte_zmalloc_socket(NULL, sizeof(netif_lcore_basic_get_t) + len,
-            RTE_CACHE_LINE_SIZE, rte_socket_id());
+    get = rte_zmalloc(NULL, sizeof(netif_lcore_basic_get_t) + len,
+            RTE_CACHE_LINE_SIZE);
     if (unlikely(NULL == get))
         return EDPVS_NOMEM;
 
@@ -4337,8 +4337,8 @@ static int get_lcore_stats(lcoreid_t cid, void **out, size_t *out_len)
     netif_lcore_stats_get_t *get;
     struct netif_lcore_stats stats;
 
-    get = rte_zmalloc_socket(NULL, sizeof(struct netif_lcore_stats_get),
-            RTE_CACHE_LINE_SIZE, rte_socket_id());
+    get = rte_zmalloc(NULL, sizeof(struct netif_lcore_stats_get),
+            RTE_CACHE_LINE_SIZE);
     if (unlikely(!get))
         return EDPVS_NOMEM;
 
@@ -4438,8 +4438,8 @@ static int get_port_basic(struct netif_port *port, void **out, size_t *out_len)
     bool promisc;
     int err;
 
-    get = rte_zmalloc_socket(NULL, sizeof(netif_nic_basic_get_t),
-            RTE_CACHE_LINE_SIZE, rte_socket_id());
+    get = rte_zmalloc(NULL, sizeof(netif_nic_basic_get_t),
+            RTE_CACHE_LINE_SIZE);
     if (unlikely(!get))
         return EDPVS_NOMEM;
 
@@ -4694,8 +4694,8 @@ static int get_port_stats(struct netif_port *port, void **out, size_t *out_len)
     if (err != EDPVS_OK)
         return err;
 
-    get = rte_zmalloc_socket(NULL, sizeof(netif_nic_stats_get_t),
-            RTE_CACHE_LINE_SIZE, rte_socket_id());
+    get = rte_zmalloc(NULL, sizeof(netif_nic_stats_get_t),
+            RTE_CACHE_LINE_SIZE);
     if (unlikely(!get))
         return EDPVS_NOMEM;
 
@@ -4726,8 +4726,8 @@ static int get_bond_status(struct netif_port *port, void **out, size_t *out_len)
     if (mport->type != PORT_TYPE_BOND_MASTER)
         return EDPVS_INVAL;
 
-    get = rte_zmalloc_socket(NULL, sizeof(netif_bond_status_get_t),
-            RTE_CACHE_LINE_SIZE, rte_socket_id());
+    get = rte_zmalloc(NULL, sizeof(netif_bond_status_get_t),
+            RTE_CACHE_LINE_SIZE);
     if (unlikely(!get))
         return EDPVS_NOMEM;
     get->mode = rte_eth_bond_mode_get(port->id);

From 73e1e7445ec06ad21669b4a33e7e626c06ef9af9 Mon Sep 17 00:00:00 2001
From: gaofeng <gaofeng@qiyi.com>
Date: Mon, 21 Oct 2019 22:54:26 +0800
Subject: [PATCH 13/62] fix crash problem when toa is used on centos 7.6

---
 kmod/toa/toa.c | 120 +++++++++++++++++++++++++++++++++++++++----------
 1 file changed, 96 insertions(+), 24 deletions(-)

diff --git a/kmod/toa/toa.c b/kmod/toa/toa.c
index 1040370f3..2d755b7f1 100644
--- a/kmod/toa/toa.c
+++ b/kmod/toa/toa.c
@@ -1,6 +1,4 @@
 #include "toa.h"
-#include <linux/list.h>
-
 /*
  *    TOA: Address is a new TCP Option
  *    Address include ip+port, Now support IPV4 and IPV6
@@ -86,6 +84,35 @@ struct toa_stats_entry toa_stats[] = {
     TOA_STAT_END
 };
 
+unsigned int is_ro_addr(unsigned long addr)
+{
+    unsigned int level;
+    unsigned int ro_enable = 0;
+    pte_t *pte = lookup_address(addr, &level);
+    if (pte->pte &~ _PAGE_RW)
+    {
+            ro_enable = 1;
+    }
+    
+    return ro_enable;
+}
+
+void set_addr_rw(unsigned long addr)
+{
+    unsigned int level;
+    pte_t *pte = lookup_address(addr, &level);
+
+    if (pte->pte &~ _PAGE_RW) pte->pte |= _PAGE_RW;
+}
+
+void set_addr_ro(unsigned long addr)
+{
+    unsigned int level;
+    pte_t *pte = lookup_address(addr, &level);
+
+    pte->pte = pte->pte &~_PAGE_RW;
+}
+
 DEFINE_TOA_STAT(struct toa_stat_mib, ext_stats);
 
 #if (defined(TOA_IPV6_ENABLE) || defined(TOA_NAT64_ENABLE))
@@ -726,22 +753,44 @@ tcp_v6_syn_recv_sock_toa(struct sock *sk, struct sk_buff *skb,
 static inline int
 hook_toa_functions(void)
 {
-    /* hook inet_getname for ipv4 */
-    struct proto_ops *inet_stream_ops_p =
-            (struct proto_ops *)&inet_stream_ops;
-    /* hook tcp_v4_syn_recv_sock for ipv4 */
-    struct inet_connection_sock_af_ops *ipv4_specific_p =
-            (struct inet_connection_sock_af_ops *)&ipv4_specific;
 
+    struct proto_ops *inet_stream_ops_p;
+    struct inet_connection_sock_af_ops *ipv4_specific_p;
+    int rw_enable = 0;
+    
+    /* hook inet_getname for ipv4 */
+    inet_stream_ops_p = (struct proto_ops *)&inet_stream_ops;
+    
+    if(is_ro_addr((unsigned long)(&inet_stream_ops.getname)))
+    {
+            set_addr_rw((unsigned long)(&inet_stream_ops.getname));
+            rw_enable = 1;
+    }
     inet_stream_ops_p->getname = inet_getname_toa;
+    if(rw_enable == 1)
+    {
+            set_addr_ro((unsigned long)(&inet_stream_ops.getname));
+            rw_enable = 0;
+    }
     TOA_INFO("CPU [%u] hooked inet_getname <%p> --> <%p>\n",
-        smp_processor_id(), inet_getname, inet_stream_ops_p->getname);
-
+    	smp_processor_id(), inet_getname, inet_stream_ops_p->getname);
+    
+    ipv4_specific_p = (struct inet_connection_sock_af_ops *)&ipv4_specific;
+    
+    if(is_ro_addr((unsigned long)(&ipv4_specific.syn_recv_sock)))
+    {
+            set_addr_rw((unsigned long)(&ipv4_specific.syn_recv_sock));
+            rw_enable = 1;
+    }
     ipv4_specific_p->syn_recv_sock = tcp_v4_syn_recv_sock_toa;
+    if(rw_enable == 1)
+    {
+            set_addr_ro((unsigned long)(&ipv4_specific.syn_recv_sock));
+            rw_enable = 0;
+    }
     TOA_INFO("CPU [%u] hooked tcp_v4_syn_recv_sock <%p> --> <%p>\n",
-        smp_processor_id(), tcp_v4_syn_recv_sock,
-        ipv4_specific_p->syn_recv_sock);
-
+    	smp_processor_id(), tcp_v4_syn_recv_sock,
+    	ipv4_specific_p->syn_recv_sock);
 #ifdef TOA_IPV6_ENABLE
     inet6_stream_ops_p->getname = inet6_getname_toa;
     TOA_INFO("CPU [%u] hooked inet6_getname <%p> --> <%p>\n",
@@ -760,20 +809,43 @@ hook_toa_functions(void)
 static int
 unhook_toa_functions(void)
 {
-    /* unhook inet_getname for ipv4 */
-    struct proto_ops *inet_stream_ops_p =
-            (struct proto_ops *)&inet_stream_ops;
-    /* unhook tcp_v4_syn_recv_sock for ipv4 */
-    struct inet_connection_sock_af_ops *ipv4_specific_p =
-            (struct inet_connection_sock_af_ops *)&ipv4_specific;
 
+    struct proto_ops *inet_stream_ops_p;
+    struct inet_connection_sock_af_ops *ipv4_specific_p;
+    int rw_enable = 0;
+    
+    /* unhook inet_getname for ipv4 */
+    inet_stream_ops_p = (struct proto_ops *)&inet_stream_ops;
+    
+    if(is_ro_addr((unsigned long)(&inet_stream_ops.getname)))
+    {
+            set_addr_rw((unsigned long)(&inet_stream_ops.getname));
+            rw_enable = 1;
+    }
     inet_stream_ops_p->getname = inet_getname;
-    TOA_INFO("CPU [%u] unhooked inet_getname\n",
-        smp_processor_id());
-
+    if(rw_enable == 1)
+    {
+            set_addr_ro((unsigned long)(&inet_stream_ops.getname));
+            rw_enable = 0;
+    }
+    TOA_INFO("CPU [%u] unhooked inet_getname\n", smp_processor_id());
+    
+    /* unhook tcp_v4_syn_recv_sock for ipv4 */
+    ipv4_specific_p = (struct inet_connection_sock_af_ops *)&ipv4_specific;
+    if(is_ro_addr((unsigned long)(&ipv4_specific.syn_recv_sock)))
+    {
+            set_addr_rw((unsigned long)(&ipv4_specific.syn_recv_sock));
+            rw_enable = 1;
+    }
+    set_addr_rw((unsigned long)(&ipv4_specific.syn_recv_sock));
     ipv4_specific_p->syn_recv_sock = tcp_v4_syn_recv_sock;
-    TOA_INFO("CPU [%u] unhooked tcp_v4_syn_recv_sock\n",
-        smp_processor_id());
+    if(rw_enable == 1)
+    {
+            set_addr_ro((unsigned long)(&ipv4_specific.syn_recv_sock));
+            rw_enable = 0;
+    }
+
+    TOA_INFO("CPU [%u] unhooked tcp_v4_syn_recv_sock\n", smp_processor_id());
 
 #ifdef TOA_IPV6_ENABLE
     if (inet6_stream_ops_p) {

From 7c3b1bb5b1575844bdc1ee7dd4185d1e2691173a Mon Sep 17 00:00:00 2001
From: zhuangyan <zhuangyan@bytedance.com>
Date: Wed, 16 Oct 2019 20:51:22 +0800
Subject: [PATCH 14/62] ipvs: refactor conn_expire() to make the code logic
 clear.

- Rename conn_expire() to dp_vs_conn_expire().
---
 src/ipvs/ip_vs_conn.c | 217 ++++++++++++++++++++++++------------------
 1 file changed, 127 insertions(+), 90 deletions(-)

diff --git a/src/ipvs/ip_vs_conn.c b/src/ipvs/ip_vs_conn.c
index 54f00c4f5..346415359 100644
--- a/src/ipvs/ip_vs_conn.c
+++ b/src/ipvs/ip_vs_conn.c
@@ -85,7 +85,7 @@ static uint32_t dp_vs_conn_rnd; /* hash random */
  */
 static struct rte_mempool *dp_vs_conn_cache[DPVS_MAX_SOCKET];
 
-static int conn_expire(void *priv);
+static int dp_vs_conn_expire(void *priv);
 
 static struct dp_vs_conn *dp_vs_conn_alloc(enum dpvs_fwd_mode fwdmode,
                                            uint32_t flags)
@@ -132,17 +132,17 @@ static void dp_vs_conn_attach_timer(struct dp_vs_conn *conn, bool lock)
     if (dp_vs_conn_is_template(conn)) {
         if (lock)
             rc = dpvs_timer_sched(&conn->timer, &conn->timeout,
-                                  conn_expire, conn, true);
+                                  dp_vs_conn_expire, conn, true);
         else
             rc = dpvs_timer_sched_nolock(&conn->timer, &conn->timeout,
-                                  conn_expire, conn, true);
+                                  dp_vs_conn_expire, conn, true);
     } else {
         if (lock)
             rc = dpvs_timer_sched(&conn->timer, &conn->timeout,
-                                  conn_expire, conn, false);
+                                  dp_vs_conn_expire, conn, false);
         else
             rc = dpvs_timer_sched_nolock(&conn->timer, &conn->timeout,
-                                  conn_expire, conn, false);
+                                  dp_vs_conn_expire, conn, false);
     }
 
     if (rc == EDPVS_OK)
@@ -323,7 +323,8 @@ static inline int dp_vs_conn_unhash(struct dp_vs_conn *conn)
     return err;
 }
 
-static int conn_bind_dest(struct dp_vs_conn *conn, struct dp_vs_dest *dest)
+static int dp_vs_conn_bind_dest(struct dp_vs_conn *conn,
+                                struct dp_vs_dest *dest)
 {
     /* ATTENTION:
      *   Initial state of conn should be INACTIVE, with conn->inactconns=1 and
@@ -373,7 +374,7 @@ static int conn_bind_dest(struct dp_vs_conn *conn, struct dp_vs_dest *dest)
     return EDPVS_OK;
 }
 
-static int conn_unbind_dest(struct dp_vs_conn *conn)
+static int dp_vs_conn_unbind_dest(struct dp_vs_conn *conn)
 {
     struct dp_vs_dest *dest = conn->dest;
 
@@ -488,55 +489,53 @@ static inline void conn_stats_dump(const char *msg, struct dp_vs_conn *conn)
 
 static void dp_vs_conn_put_nolock(struct dp_vs_conn *conn);
 
-/* timeout hanlder */
-static int conn_expire(void *priv)
+static void dp_vs_conn_set_timeout(struct dp_vs_conn *conn,
+                                   struct dp_vs_proto *pp)
 {
-    struct dp_vs_conn *conn = priv;
-    struct dp_vs_proto *pp;
-    struct rte_mbuf *cloned_syn_mbuf;
-    struct dp_vs_synproxy_ack_pakcet *ack_mbuf, *t_ack_mbuf;
-    struct rte_mempool *pool;
-
-    assert(conn);
-    assert(conn->af == AF_INET || conn->af == AF_INET6);
-    assert(rte_atomic32_read(&conn->refcnt) > 0);
-
-    /* set proper timeout */
     unsigned conn_timeout = 0;
 
-    pp = dp_vs_proto_lookup(conn->proto);
-    if (((conn->proto == IPPROTO_TCP) &&
-        (conn->state == DPVS_TCP_S_ESTABLISHED)) ||
-        ((conn->proto == IPPROTO_UDP) &&
-        (conn->state == DPVS_UDP_S_NORMAL))) {
+    /* set proper timeout */
+    if ((conn->proto == IPPROTO_TCP && conn->state == DPVS_TCP_S_ESTABLISHED)
+        || (conn->proto == IPPROTO_UDP && conn->state == DPVS_UDP_S_NORMAL)) {
         conn_timeout = dp_vs_get_conn_timeout(conn);
-        if (unlikely(conn_timeout > 0))
+
+        if (unlikely(conn_timeout > 0)) {
             conn->timeout.tv_sec = conn_timeout;
-        else if (pp && pp->timeout_table)
-            conn->timeout.tv_sec = pp->timeout_table[conn->state];
-        else
-            conn->timeout.tv_sec = 60;
-    } else if (pp && pp->timeout_table)
+            return;
+        }
+    }
+
+    if (pp && pp->timeout_table)
         conn->timeout.tv_sec = pp->timeout_table[conn->state];
     else
         conn->timeout.tv_sec = 60;
 
     dpvs_time_rand_delay(&conn->timeout, 1000000);
+}
 
-    rte_atomic32_inc(&conn->refcnt);
+/*
+ * retransmit syn packet to rs
+ */
+static int dp_vs_conn_resend_packets(struct dp_vs_conn *conn,
+                                     struct dp_vs_proto *pp)
+{
+    struct rte_mempool *pool;
+    struct rte_mbuf *cloned_syn_mbuf;
 
-    /* retransmit syn packet to rs */
     if (conn->syn_mbuf && rte_atomic32_read(&conn->syn_retry_max) > 0) {
         if (likely(conn->packet_xmit != NULL)) {
             pool = get_mbuf_pool(conn, DPVS_CONN_DIR_INBOUND);
+
             if (unlikely(!pool)) {
-                RTE_LOG(WARNING, IPVS, "%s: no route for syn_proxy rs's syn "
-                        "retransmit\n", __func__);
+                RTE_LOG(WARNING, IPVS,
+                        "%s: no route for syn_proxy rs's syn retransmit\n",
+                        __func__);
             } else {
                 cloned_syn_mbuf = mbuf_copy(conn->syn_mbuf, pool);
                 if (unlikely(!cloned_syn_mbuf)) {
-                    RTE_LOG(WARNING, IPVS, "%s: no memory for syn_proxy rs's syn "
-                            "retransmit\n", __func__);
+                    RTE_LOG(WARNING, IPVS,
+                            "%s: no memory for syn_proxy rs's syn retransmit\n",
+                            __func__);
                 } else {
                     cloned_syn_mbuf->userdata = NULL;
                     conn->packet_xmit(pp, conn, cloned_syn_mbuf);
@@ -547,6 +546,90 @@ static int conn_expire(void *priv)
         rte_atomic32_dec(&conn->syn_retry_max);
         dp_vs_estats_inc(SYNPROXY_RS_ERROR);
 
+        return EDPVS_OK;
+    }
+
+    return EDPVS_INPROGRESS;
+}
+
+static void dp_vs_conn_sa_release(struct dp_vs_conn *conn)
+{
+    struct sockaddr_storage saddr, daddr;
+
+    if (conn->dest->fwdmode != DPVS_FWD_MODE_SNAT
+        || conn->proto == IPPROTO_ICMP
+        || conn->proto == IPPROTO_ICMPV6) {
+        return;
+    }
+
+    memset(&saddr, 0, sizeof(saddr));
+    memset(&daddr, 0, sizeof(daddr));
+
+    if (AF_INET == conn->af) {
+        struct sockaddr_in *daddr4 = (struct sockaddr_in *)&daddr;
+        struct sockaddr_in *saddr4 = (struct sockaddr_in *)&saddr;
+
+        daddr4->sin_family = AF_INET;
+        daddr4->sin_addr = conn->caddr.in;
+        daddr4->sin_port = conn->cport;
+
+        saddr4->sin_family = AF_INET;
+        saddr4->sin_addr = conn->vaddr.in;
+        saddr4->sin_port = conn->vport;
+    } else { /* AF_INET6 */
+        struct sockaddr_in6 *daddr6 = (struct sockaddr_in6 *)&daddr;
+        struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)&saddr;
+
+        daddr6->sin6_family = AF_INET6;
+        daddr6->sin6_addr = conn->caddr.in6;
+        daddr6->sin6_port = conn->cport;
+
+        saddr6->sin6_family = AF_INET6;
+        saddr6->sin6_addr = conn->vaddr.in6;
+        saddr6->sin6_port = conn->vport;
+    }
+
+    sa_release(conn->out_dev, (struct sockaddr_storage *)&daddr,
+               (struct sockaddr_storage *)&saddr);
+}
+
+static void dp_vs_conn_free_packets(struct dp_vs_conn *conn)
+{
+    struct dp_vs_synproxy_ack_pakcet *ack_mbuf, *t_ack_mbuf;
+
+    /* free stored ack packet */
+    list_for_each_entry_safe(ack_mbuf, t_ack_mbuf, &conn->ack_mbuf, list) {
+        list_del_init(&ack_mbuf->list);
+        rte_pktmbuf_free(ack_mbuf->mbuf);
+        sp_dbg_stats32_dec(sp_ack_saved);
+        rte_mempool_put(this_ack_mbufpool, ack_mbuf);
+    }
+
+    conn->ack_num = 0;
+
+    /* free stored syn mbuf */
+    if (conn->syn_mbuf) {
+        rte_pktmbuf_free(conn->syn_mbuf);
+        sp_dbg_stats32_dec(sp_syn_saved);
+    }
+}
+
+/* timeout hanlder */
+static int dp_vs_conn_expire(void *priv)
+{
+    struct dp_vs_conn *conn = priv;
+    struct dp_vs_proto *pp;
+
+    assert(conn);
+    assert(conn->af == AF_INET || conn->af == AF_INET6);
+    assert(rte_atomic32_read(&conn->refcnt) > 0);
+
+    pp = dp_vs_proto_lookup(conn->proto);
+    dp_vs_conn_set_timeout(conn, pp);
+
+    rte_atomic32_inc(&conn->refcnt);
+
+    if (dp_vs_conn_resend_packets(conn, pp) == EDPVS_OK) {
         /* expire later */
         dp_vs_conn_put_nolock(conn);
         return DTIMER_OK;
@@ -574,56 +657,10 @@ static int conn_expire(void *priv)
         if (pp && pp->conn_expire)
             pp->conn_expire(pp, conn);
 
-        if (conn->dest->fwdmode == DPVS_FWD_MODE_SNAT
-                && conn->proto != IPPROTO_ICMP
-                && conn->proto != IPPROTO_ICMPV6) {
-            struct sockaddr_storage saddr, daddr;
-            memset(&saddr, 0, sizeof(saddr));
-            memset(&daddr, 0, sizeof(daddr));
-            if (AF_INET == conn->af) {
-                struct sockaddr_in *daddr4 = (struct sockaddr_in *)&daddr;
-                struct sockaddr_in *saddr4 = (struct sockaddr_in *)&saddr;
-
-                daddr4->sin_family = AF_INET;
-                daddr4->sin_addr = conn->caddr.in;
-                daddr4->sin_port = conn->cport;
-
-                saddr4->sin_family = AF_INET;
-                saddr4->sin_addr = conn->vaddr.in;
-                saddr4->sin_port = conn->vport;
-            } else { /* AF_INET6 */
-                struct sockaddr_in6 *daddr6 = (struct sockaddr_in6 *)&daddr;
-                struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)&saddr;
-
-                daddr6->sin6_family = AF_INET6;
-                daddr6->sin6_addr = conn->caddr.in6;
-                daddr6->sin6_port = conn->cport;
-
-                saddr6->sin6_family = AF_INET6;
-                saddr6->sin6_addr = conn->vaddr.in6;
-                saddr6->sin6_port = conn->vport;
-            }
-            sa_release(conn->out_dev, (struct sockaddr_storage *)&daddr,
-                    (struct sockaddr_storage *)&saddr);
-        }
-
-        conn_unbind_dest(conn);
+        dp_vs_conn_sa_release(conn);
+        dp_vs_conn_unbind_dest(conn);
         dp_vs_laddr_unbind(conn);
-
-        /* free stored ack packet */
-        list_for_each_entry_safe(ack_mbuf, t_ack_mbuf, &conn->ack_mbuf, list) {
-            list_del_init(&ack_mbuf->list);
-            rte_pktmbuf_free(ack_mbuf->mbuf);
-            sp_dbg_stats32_dec(sp_ack_saved);
-            rte_mempool_put(this_ack_mbufpool, ack_mbuf);
-        }
-        conn->ack_num = 0;
-
-        /* free stored syn mbuf */
-        if (conn->syn_mbuf) {
-            rte_pktmbuf_free(conn->syn_mbuf);
-            sp_dbg_stats32_dec(sp_syn_saved);
-        }
+        dp_vs_conn_free_packets(conn);
 
         rte_atomic32_dec(&conn->refcnt);
 
@@ -707,7 +744,7 @@ static void conn_flush(void)
                               (struct sockaddr_storage *)&saddr);
                 }
 
-                conn_unbind_dest(conn);
+                dp_vs_conn_unbind_dest(conn);
                 dp_vs_laddr_unbind(conn);
                 rte_atomic32_dec(&conn->refcnt);
 
@@ -833,7 +870,7 @@ struct dp_vs_conn *dp_vs_conn_new(struct rte_mbuf *mbuf,
 #endif
 
     /* bind destination and corresponding trasmitter */
-    err = conn_bind_dest(new, dest);
+    err = dp_vs_conn_bind_dest(new, dest);
     if (err != EDPVS_OK) {
         RTE_LOG(WARNING, IPVS, "%s: fail to bind dest: %s\n",
                 __func__, dpvs_strerror(err));
@@ -907,7 +944,7 @@ struct dp_vs_conn *dp_vs_conn_new(struct rte_mbuf *mbuf,
 unbind_laddr:
     dp_vs_laddr_unbind(new);
 unbind_dest:
-    conn_unbind_dest(new);
+    dp_vs_conn_unbind_dest(new);
 errout:
     dp_vs_conn_free(new);
     return NULL;
@@ -1092,7 +1129,7 @@ void dp_vs_conn_put(struct dp_vs_conn *conn)
     rte_atomic32_dec(&conn->refcnt);
 }
 
-/* used in conn timer handler: conn_expire */
+/* used in conn timer handler: dp_vs_conn_expire */
 static void dp_vs_conn_put_nolock(struct dp_vs_conn *conn)
 {
     dp_vs_conn_refresh_timer(conn, false);

From 83ccf1183eeea057def001885d76846bbc943ebe Mon Sep 17 00:00:00 2001
From: jerrywang <jerrywang@qiyi.com>
Date: Thu, 23 May 2019 17:16:44 +0800
Subject: [PATCH 15/62] svc/dest/laddr support percore; fix snat bug: no range
 config

---
 include/common.h                              |    5 +
 include/conf/laddr.h                          |    4 +
 include/ctrl.h                                |   26 +
 include/ipvs/dest.h                           |   14 +-
 include/ipvs/service.h                        |   61 +-
 include/ipvs/stats.h                          |    7 +-
 src/ctrl.c                                    |    2 +-
 src/ipset.c                                   |    5 -
 src/ipvs/ip_vs_conhash.c                      |    2 +-
 src/ipvs/ip_vs_conn.c                         |    2 +-
 src/ipvs/ip_vs_core.c                         |    4 +-
 src/ipvs/ip_vs_dest.c                         |  189 +--
 src/ipvs/ip_vs_laddr.c                        |  388 +++++--
 src/ipvs/ip_vs_proto_icmp.c                   |    6 +-
 src/ipvs/ip_vs_proto_tcp.c                    |   13 +-
 src/ipvs/ip_vs_proto_udp.c                    |    6 +-
 src/ipvs/ip_vs_rr.c                           |    4 -
 src/ipvs/ip_vs_service.c                      | 1019 ++++++++++++-----
 src/ipvs/ip_vs_stats.c                        |  191 +--
 src/ipvs/ip_vs_synproxy.c                     |   17 +-
 src/ipvs/ip_vs_wrr.c                          |    2 -
 src/neigh.c                                   |    2 +
 tools/ipvsadm/ipvsadm.c                       |  165 ++-
 .../keepalived/keepalived/check/check_data.c  |    1 +
 .../keepalived/check/check_parser.c           |   13 +
 .../keepalived/keepalived/check/ipvswrapper.c |   18 +-
 .../keepalived/include/check_data.h           |    4 +-
 .../keepalived/keepalived/libipvs-2.6/dp_vs.h |    9 -
 .../keepalived/keepalived/libipvs-2.6/ip_vs.h |  110 +-
 .../keepalived/libipvs-2.6/libipvs.c          |   39 +-
 .../keepalived/libipvs-2.6/libipvs.h          |   12 +-
 31 files changed, 1339 insertions(+), 1001 deletions(-)

diff --git a/include/common.h b/include/common.h
index 8d358dc8e..6c2d79257 100644
--- a/include/common.h
+++ b/include/common.h
@@ -71,6 +71,11 @@ typedef uint16_t    __u16;
 typedef uint32_t    __u32;
 #endif
 
+#ifndef lcoreid_t
+typedef uint8_t lcoreid_t;
+#endif
+
+
 #define DPVS_WAIT_WHILE(expr) while(expr){;}
 
 typedef enum {
diff --git a/include/conf/laddr.h b/include/conf/laddr.h
index 32097eff4..09a3bc66f 100644
--- a/include/conf/laddr.h
+++ b/include/conf/laddr.h
@@ -34,6 +34,9 @@ enum {
     SOCKOPT_GET_LADDR_GETALL,
 };
 
+#define SOCKOPT_LADDR_BASE SOCKOPT_SET_LADDR_ADD
+#define SOCKOPT_GET_LADDR_MAX 199
+
 struct dp_vs_laddr_entry {
     int af;
     union inet_addr addr;
@@ -52,6 +55,7 @@ struct dp_vs_laddr_conf {
     char                drange[256];
     char                iifname[IFNAMSIZ];
     char                oifname[IFNAMSIZ];
+    lcoreid_t           cid;
 
     /* for set */
     int                 af_l;
diff --git a/include/ctrl.h b/include/ctrl.h
index 2fa8c7df4..16c4c7072 100644
--- a/include/ctrl.h
+++ b/include/ctrl.h
@@ -204,6 +204,32 @@ int msg_dump(const struct dpvs_msg *msg, char *buf, int len);
 #define MSG_TYPE_IPV6_STATS                 16
 #define MSG_TYPE_ROUTE6                     17
 #define MSG_TYPE_NEIGH_GET                  18
+#define MSG_TYPE_IPSET_ADD                  19
+#define MSG_TYPE_IPSET_DEL                  20
+#define MSG_TYPE_IPSET_FLUSH                21
+
+/* for svc per_core, refer to service.h*/
+enum {
+    MSG_TYPE_SVC_SET_FLUSH = MSG_TYPE_IPSET_FLUSH + 1,
+    MSG_TYPE_SVC_SET_ZERO,    
+    MSG_TYPE_SVC_SET_ADD,      
+    MSG_TYPE_SVC_SET_EDIT,    
+    MSG_TYPE_SVC_SET_DEL,     
+    MSG_TYPE_SVC_SET_ADDDEST, 
+    MSG_TYPE_SVC_SET_EDITDEST,
+    MSG_TYPE_SVC_SET_DELDEST,
+    MSG_TYPE_LADDR_SET_ADD,
+    MSG_TYPE_LADDR_SET_DEL,
+    MSG_TYPE_LADDR_SET_FLUSH,
+    MSG_TYPE_SVC_GET_INFO,    
+    MSG_TYPE_SVC_GET_SERVICES,
+    MSG_TYPE_SVC_GET_SERVICE, 
+    MSG_TYPE_SVC_GET_DESTS,
+    MSG_TYPE_LADDR_GET_ALL,
+};
+#define MSG_TYPE_SVC_SET_BASE MSG_TYPE_SVC_SET_FLUSH
+#define MSG_TYPE_SVC_GET_BASE MSG_TYPE_SVC_GET_INFO
+#define MSG_TYPE_SET_LADDR_BASE MSG_TYPE_LADDR_SET_ADD
 
 #define SOCKOPT_VERSION_MAJOR               1
 #define SOCKOPT_VERSION_MINOR               0
diff --git a/include/ipvs/dest.h b/include/ipvs/dest.h
index bbcf8eb8f..86f7fbdec 100644
--- a/include/ipvs/dest.h
+++ b/include/ipvs/dest.h
@@ -59,7 +59,7 @@ struct dp_vs_dest {
     rte_atomic16_t      weight;     /* server weight */
 
     rte_atomic32_t      refcnt;     /* reference counter */
-    struct dp_vs_stats  *stats;     /* Use per-cpu statistics for destination server */
+    struct dp_vs_stats  stats;      /* Use per-cpu statistics for destination server */
 
     enum dpvs_fwd_mode  fwdmode;
 
@@ -126,6 +126,8 @@ struct dp_vs_get_dests {
     /* number of real servers */
     unsigned int num_dests;
 
+    lcoreid_t        cid;
+
     char        srange[256];
     char        drange[256];
     char        iifname[IFNAMSIZ];
@@ -181,24 +183,18 @@ int dp_vs_new_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest,
 struct dp_vs_dest *dp_vs_lookup_dest(int af, struct dp_vs_service *svc,
                                      const union inet_addr *daddr, uint16_t dport);
 
-struct dp_vs_dest *dp_vs_trash_get_dest(struct dp_vs_service *svc,
-                                        const union inet_addr *daddr, uint16_t dport);
-
-void dp_vs_trash_cleanup(void);
-
 int dp_vs_add_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest);
 
 int dp_vs_edit_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest);
 
-void __dp_vs_unlink_dest(struct dp_vs_service *svc,
+void dp_vs_unlink_dest(struct dp_vs_service *svc,
                         struct dp_vs_dest *dest, int svcupd);
 
-void __dp_vs_del_dest(struct dp_vs_dest *dest);
+void dp_vs_dest_put(struct dp_vs_dest *dest);
 
 int dp_vs_del_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest);
 
 int dp_vs_get_dest_entries(const struct dp_vs_service *svc,
-                           const struct dp_vs_get_dests *get,
                            struct dp_vs_get_dests *uptr);
 
 int dp_vs_dest_init(void);
diff --git a/include/ipvs/service.h b/include/ipvs/service.h
index c8d997260..b25b7841f 100644
--- a/include/ipvs/service.h
+++ b/include/ipvs/service.h
@@ -42,15 +42,15 @@
 #define DP_VS_SVC_F_SIP_HASH        0x0100      /* sip hash target */
 #define DP_VS_SVC_F_QID_HASH        0x0200      /* quic cid hash target */
 
-rte_rwlock_t __dp_vs_svc_lock;
+#define DP_VS_SVC_F_MATCH           0x0400      /* snat match */
 
 /* virtual service */
 struct dp_vs_service {
     struct list_head    s_list;     /* node for normal service table */
     struct list_head    f_list;     /* node for fwmark service table */
     struct list_head    m_list;     /* node for match  service table */
-    rte_atomic32_t      refcnt;
-    rte_atomic32_t      usecnt;
+    rte_atomic32_t      refcnt;     /* svc is per core, conn will not refer to svc, but dest will.
+                                     *  while conn will refer to dest */
 
     /*
      * to identify a service
@@ -78,14 +78,12 @@ struct dp_vs_service {
 
     struct dp_vs_scheduler  *scheduler;
     void                *sched_data;
-    rte_rwlock_t        sched_lock;
 
-    struct dp_vs_stats  *stats;
+    struct dp_vs_stats  stats;
 
     /* FNAT only */
     struct list_head    laddr_list; /* local address (LIP) pool */
     struct list_head    *laddr_curr;
-    rte_rwlock_t        laddr_lock;
     uint32_t            num_laddrs;
 
     /* ... flags, timer ... */
@@ -128,6 +126,7 @@ struct dp_vs_service_entry {
 
     unsigned int        num_dests;
     unsigned int        num_laddrs;
+    lcoreid_t           cid;
 
     struct dp_vs_stats  stats;
 
@@ -138,6 +137,7 @@ struct dp_vs_service_entry {
 };
 
 struct dp_vs_get_services {
+    lcoreid_t     cid;
     unsigned int        num_services;
     struct dp_vs_service_entry entrytable[0];
 };
@@ -167,60 +167,40 @@ struct dp_vs_getinfo {
     unsigned int version;
     unsigned int size;
     unsigned int num_services;
+    unsigned int num_lcores;
 };
 
 #ifdef __DPVS__
 int dp_vs_service_init(void);
 int dp_vs_service_term(void);
 
-int dp_vs_add_service(struct dp_vs_service_conf *u,
-                      struct dp_vs_service **svc_p);
-
-int dp_vs_del_service(struct dp_vs_service *svc);
-
-int dp_vs_edit_service(struct dp_vs_service *svc,
-                       struct dp_vs_service_conf *u);
-
 struct dp_vs_service *
 dp_vs_service_lookup(int af, uint16_t protocol,
                      const union inet_addr *vaddr,
                      uint16_t vport, uint32_t fwmark,
                      const struct rte_mbuf *mbuf,
                      const struct dp_vs_match *match,
-                     bool *outwall);
+                     bool *outwall, lcoreid_t cid);
 
 int dp_vs_match_parse(const char *srange, const char *drange,
                       const char *iifname, const char *oifname,
-                      struct dp_vs_match *match);
+                      int af, struct dp_vs_match *match);
 
-void __dp_vs_bind_svc(struct dp_vs_dest *dest, struct dp_vs_service *svc);
+void dp_vs_bind_svc(struct dp_vs_dest *dest, struct dp_vs_service *svc);
 
-void __dp_vs_unbind_svc(struct dp_vs_dest *dest);
+void dp_vs_unbind_svc(struct dp_vs_dest *dest);
 
-struct dp_vs_service *dp_vs_lookup_vip(int af, uint16_t protocol,
-                                    const union inet_addr *vaddr);
+void dp_vs_svc_put(struct dp_vs_service *svc);
 
-static inline void dp_vs_service_put(struct dp_vs_service *svc)
-{
-    rte_atomic32_dec(&svc->usecnt);
-}
-
-struct dp_vs_service *__dp_vs_service_get(int af, uint16_t protocol,
-                       const union inet_addr *vaddr, uint16_t vport);
-
-struct dp_vs_service *__dp_vs_svc_fwm_get(int af, uint32_t fwmark);
-
-int dp_vs_get_service_entries(const struct dp_vs_get_services *get,
-        struct dp_vs_get_services *uptr);
+struct dp_vs_service *dp_vs_lookup_vip(int af, uint16_t protocol,
+                                       const union inet_addr *vaddr,
+                                       lcoreid_t cid);
 
 unsigned dp_vs_get_conn_timeout(struct dp_vs_conn *conn);
 
-/* flush all services */
-int dp_vs_flush(void);
-
-int dp_vs_zero_service(struct dp_vs_service *svc);
-
-int dp_vs_zero_all(void);
+#define MAX_ARG_LEN    (sizeof(struct dp_vs_service_user) +    \
+                         sizeof(struct dp_vs_dest_user))
+#endif
 
 enum{
     DPVS_SO_SET_FLUSH = 200,
@@ -246,9 +226,6 @@ enum{
 #define SOCKOPT_SVC_BASE         DPVS_SO_SET_FLUSH
 #define SOCKOPT_SVC_SET_CMD_MAX  DPVS_SO_SET_GRATARP
 #define SOCKOPT_SVC_GET_CMD_MAX  DPVS_SO_GET_DESTS
-
-#define MAX_ARG_LEN    (sizeof(struct dp_vs_service_user) +    \
-                         sizeof(struct dp_vs_dest_user))
-#endif
+#define SOCKOPT_SVC_MAX          299
 
 #endif /* __DPVS_SVC_H__ */
diff --git a/include/ipvs/stats.h b/include/ipvs/stats.h
index 665ae04f1..fc6ecde3a 100644
--- a/include/ipvs/stats.h
+++ b/include/ipvs/stats.h
@@ -98,8 +98,7 @@ struct dp_vs_estats {
 int dp_vs_stats_init(void);
 int dp_vs_stats_term(void);
 
-void dp_vs_stats_clear(void);
-void dp_svc_stats_clear(struct dp_vs_stats *stats);
+void dp_vs_stats_clear(struct dp_vs_stats *stats);
 
 int dp_vs_stats_in(struct dp_vs_conn *conn, struct rte_mbuf *mbuf);
 int dp_vs_stats_out(struct dp_vs_conn *conn, struct rte_mbuf *mbuf);
@@ -108,10 +107,8 @@ void dp_vs_stats_conn(struct dp_vs_conn *conn);
 void dp_vs_estats_inc(enum dp_vs_estats_type field);
 void dp_vs_estats_clear(void);
 uint64_t dp_vs_estats_get(enum dp_vs_estats_type field);
+int dp_vs_add_stats(struct dp_vs_stats* dst, struct dp_vs_stats* src);
 
-int dp_vs_new_stats(struct dp_vs_stats **p);
-void dp_vs_del_stats(struct dp_vs_stats *p);
-void dp_vs_zero_stats(struct dp_vs_stats* stats);
 int dp_vs_copy_stats(struct dp_vs_stats* dst, struct dp_vs_stats* src);
 #endif
 
diff --git a/src/ctrl.c b/src/ctrl.c
index 631f9893c..43225662e 100644
--- a/src/ctrl.c
+++ b/src/ctrl.c
@@ -99,7 +99,7 @@ inline static void msg_debug_dump(void)
 
     allc = rte_atomic64_read(&n_msg_allc);
 
-    if (likely(allc % 100000))
+    if (likely(allc % 10))
         return;
 
     RTE_LOG(INFO, MSGMGR, "%s: allocated=%ld, freed=%ld, processing=%d\n",
diff --git a/src/ipset.c b/src/ipset.c
index 52ad05e73..9195f2ba5 100644
--- a/src/ipset.c
+++ b/src/ipset.c
@@ -34,11 +34,6 @@
 #define this_ipset_table_lcore  (this_ipset_lcore.ipset_table)
 #define this_num_ipset          (RTE_PER_LCORE(num_ipset))
 
-#define MSG_TYPE_IPSET_ADD                  19
-#define MSG_TYPE_IPSET_DEL                  20
-#define MSG_TYPE_IPSET_FLUSH                21
-
-
 struct ipset_lcore{
 	struct list_head ipset_table[IPSET_TAB_SIZE];
 };
diff --git a/src/ipvs/ip_vs_conhash.c b/src/ipvs/ip_vs_conhash.c
index 2c95bf7cb..cb0cf8c7f 100644
--- a/src/ipvs/ip_vs_conhash.c
+++ b/src/ipvs/ip_vs_conhash.c
@@ -145,7 +145,7 @@ static void node_fini(struct node_s *node)
         return;
 
     if (node->data) {
-        rte_atomic32_dec(&(((struct dp_vs_dest *)(node->data))->refcnt));
+        dp_vs_dest_put((struct dp_vs_dest *)node->data);
         node->data = NULL;
     }
 
diff --git a/src/ipvs/ip_vs_conn.c b/src/ipvs/ip_vs_conn.c
index 54f00c4f5..a51035f7f 100644
--- a/src/ipvs/ip_vs_conn.c
+++ b/src/ipvs/ip_vs_conn.c
@@ -392,7 +392,7 @@ static int conn_unbind_dest(struct dp_vs_conn *conn)
         dest->flags &= ~DPVS_DEST_F_OVERLOAD;
     }
 
-    rte_atomic32_dec(&dest->refcnt);
+    dp_vs_dest_put(dest);
 
     conn->dest = NULL;
     return EDPVS_OK;
diff --git a/src/ipvs/ip_vs_core.c b/src/ipvs/ip_vs_core.c
index 4b0547acd..146266123 100644
--- a/src/ipvs/ip_vs_core.c
+++ b/src/ipvs/ip_vs_core.c
@@ -1083,8 +1083,8 @@ static int __dp_vs_pre_routing(void *priv, struct rte_mbuf *mbuf,
 
     /* Drop udp packet which send to tcp-vip */
     if (g_defence_udp_drop && IPPROTO_UDP == iph.proto) {
-        if ((svc = dp_vs_lookup_vip(af, IPPROTO_UDP, &iph.daddr)) == NULL) {
-            if ((svc = dp_vs_lookup_vip(af, IPPROTO_TCP, &iph.daddr)) != NULL) {
+        if ((svc = dp_vs_lookup_vip(af, IPPROTO_UDP, &iph.daddr, rte_lcore_id())) == NULL) {
+            if ((svc = dp_vs_lookup_vip(af, IPPROTO_TCP, &iph.daddr, rte_lcore_id())) != NULL) {
                 dp_vs_estats_inc(DEFENCE_UDP_DROP);
                 return INET_DROP;
             }
diff --git a/src/ipvs/ip_vs_dest.c b/src/ipvs/ip_vs_dest.c
index 92697a7d9..8324797d4 100644
--- a/src/ipvs/ip_vs_dest.c
+++ b/src/ipvs/ip_vs_dest.c
@@ -47,64 +47,6 @@ struct dp_vs_dest *dp_vs_lookup_dest(int af,
     return NULL;
 }
 
-/*
- *  Lookup dest by {svc,addr,port} in the destination trash.
- *  The destination trash is used to hold the destinations that are removed
- *  from the service table but are still referenced by some conn entries.
- *  The reason to add the destination trash is when the dest is temporary
- *  down (either by administrator or by monitor program), the dest can be
- *  picked back from the trash, the remaining connections to the dest can
- *  continue, and the counting information of the dest is also useful for
- *  scheduling.
- */
-struct dp_vs_dest *dp_vs_trash_get_dest(struct dp_vs_service *svc,
-                                        const union inet_addr *daddr,
-                                        uint16_t dport)
-{
-    struct dp_vs_dest *dest, *nxt;
-
-    list_for_each_entry_safe(dest, nxt, &dp_vs_dest_trash, n_list) {
-        RTE_LOG(DEBUG, SERVICE, "%s: Destination still in trash.\n", __func__);
-        if (dest->af == svc->af &&
-            inet_addr_equal(svc->af, &dest->addr, daddr) &&
-            dest->port == dport &&
-            dest->vfwmark == svc->fwmark &&
-            dest->proto == svc->proto &&
-            (svc->fwmark ||
-             (inet_addr_equal(svc->af, &dest->vaddr, &svc->addr) &&
-              dest->vport == svc->port))) {
-             /*since svc may be edit, variables should be coverd*/
-             dest->conn_timeout = svc->conn_timeout;
-             dest->limit_proportion = svc->limit_proportion;
-             return dest;
-            }
-        if (rte_atomic32_read(&dest->refcnt) == 1) {
-            RTE_LOG(DEBUG, SERVICE, "%s: Removing destination from trash.\n", __func__);
-            list_del(&dest->n_list);
-            //dp_vs_dst_reset(dest);//to be finished
-            __dp_vs_unbind_svc(dest);
-
-            dp_vs_del_stats(dest->stats);
-            rte_free(dest);
-        }
-    }
-    return NULL;
-}
-
-void dp_vs_trash_cleanup(void)
-{
-    struct dp_vs_dest *dest, *nxt;
-
-    list_for_each_entry_safe(dest, nxt, &dp_vs_dest_trash, n_list) {
-        list_del(&dest->n_list);
-        //dp_vs_dst_reset(dest);
-        __dp_vs_unbind_svc(dest);
-
-        dp_vs_del_stats(dest->stats);
-        rte_free(dest);
-    }
-}
-
 static void __dp_vs_update_dest(struct dp_vs_service *svc,
                                 struct dp_vs_dest *dest,
                                 struct dp_vs_dest_conf *udest)
@@ -116,19 +58,6 @@ static void __dp_vs_update_dest(struct dp_vs_service *svc,
 
     rte_atomic16_set(&dest->conn_flags, conn_flags);
 
-    /* bind the service */
-    if (!dest->svc) {
-        __dp_vs_bind_svc(dest, svc);
-    } else {
-        if (dest->svc != svc) {
-            __dp_vs_unbind_svc(dest);
-
-            dp_svc_stats_clear(dest->stats);
-
-            __dp_vs_bind_svc(dest, svc);
-        }
-    }
-
     dest->flags |= DPVS_DEST_F_AVAILABLE;
 
     if (udest->max_conn == 0 || udest->max_conn > dest->max_conn)
@@ -165,12 +94,8 @@ int dp_vs_new_dest(struct dp_vs_service *svc,
     rte_atomic32_set(&dest->actconns, 0);
     rte_atomic32_set(&dest->inactconns, 0);
     rte_atomic32_set(&dest->persistconns, 0);
-    rte_atomic32_set(&dest->refcnt, 0);
-
-    if (dp_vs_new_stats(&(dest->stats)) != EDPVS_OK) {
-        rte_free(dest);
-        return EDPVS_NOMEM;
-    }
+    rte_atomic32_set(&dest->refcnt, 1);
+    dp_vs_bind_svc(dest, svc);
 
     __dp_vs_update_dest(svc, dest, udest);
 
@@ -209,43 +134,6 @@ dp_vs_add_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest)
         return EDPVS_EXIST;
     }
 
-    /*
-     * Check if the dest already exists in the trash and
-     * is from the same service
-     */
-    dest = dp_vs_trash_get_dest(svc, &daddr, dport);
-
-    if (dest != NULL) {
-        RTE_LOG(DEBUG, SERVICE, "%s: get dest from trash.\n", __func__);
-
-        __dp_vs_update_dest(svc, dest, udest);
-
-        /*
-         * Get the destination from the trash
-         */
-        list_del(&dest->n_list);
-        /* Reset the statistic value */
-        dp_svc_stats_clear(dest->stats);
-
-        rte_rwlock_write_lock(&__dp_vs_svc_lock);
-
-        /*
-         * Wait until all other svc users go away.
-         */
-        DPVS_WAIT_WHILE(rte_atomic32_read(&svc->usecnt) > 1);
-
-        list_add(&dest->n_list, &svc->dests);
-        svc->weight += udest->weight;
-        svc->num_dests++;
-
-        /* call the update_service function of its scheduler */
-        if (svc->scheduler->update_service)
-            svc->scheduler->update_service(svc, dest, DPVS_SO_SET_ADDDEST);
-
-        rte_rwlock_write_unlock(&__dp_vs_svc_lock);
-        return EDPVS_OK;
-    }
-
     /*
      * Allocate and initialize the dest structure
      */
@@ -254,18 +142,6 @@ dp_vs_add_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest)
         return ret;
     }
 
-    /*
-     * Add the dest entry into the list
-     */
-    rte_atomic32_inc(&dest->refcnt);
-
-    rte_rwlock_write_lock(&__dp_vs_svc_lock);
-
-    /*
-     * Wait until all other svc users go away.
-     */
-    DPVS_WAIT_WHILE(rte_atomic32_read(&svc->usecnt) > 1);
-
     list_add(&dest->n_list, &svc->dests);
     svc->weight += udest->weight;
     svc->num_dests++;
@@ -274,8 +150,6 @@ dp_vs_add_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest)
     if (svc->scheduler->update_service)
         svc->scheduler->update_service(svc, dest, DPVS_SO_SET_ADDDEST);
 
-    rte_rwlock_write_unlock(&__dp_vs_svc_lock);
-
     return EDPVS_OK;
 }
 
@@ -315,11 +189,6 @@ dp_vs_edit_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest)
 
     __dp_vs_update_dest(svc, dest, udest);
 
-    rte_rwlock_write_lock(&__dp_vs_svc_lock);
-
-    /* Wait until all other svc users go away */
-    DPVS_WAIT_WHILE(rte_atomic32_read(&svc->usecnt) > 1);
-
     /* Update service weight */
     svc->weight = svc->weight - old_weight + udest->weight;
     if (svc->weight < 0) {
@@ -335,42 +204,25 @@ dp_vs_edit_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest)
     if (svc->scheduler->update_service)
         svc->scheduler->update_service(svc, dest, DPVS_SO_SET_EDITDEST);
 
-    rte_rwlock_write_unlock(&__dp_vs_svc_lock);
-
     return EDPVS_OK;
 }
 
-/*
- *  Delete a destination (must be already unlinked from the service)
- */
-void __dp_vs_del_dest(struct dp_vs_dest *dest)
+void dp_vs_dest_put(struct dp_vs_dest *dest)
 {
-    /*
-     *  Decrease the refcnt of the dest, and free the dest
-     *  if nobody refers to it (refcnt=0). Otherwise, throw
-     *  the destination into the trash.
-     */
+    if (!dest)
+        return;
+
     if (rte_atomic32_dec_and_test(&dest->refcnt)) {
-     //   dp_vs_dst_reset(dest);
-        /* simply decrease svc->refcnt here, let the caller check
-           and release the service if nobody refers to it.
-           Only user context can release destination and service,
-           and only one user context can update virtual service at a
-           time, so the operation here is OK */
-        __dp_vs_unbind_svc(dest);
-        dp_vs_del_stats(dest->stats);
+        dp_vs_unbind_svc(dest);
         rte_free(dest);
-    } else {
-        RTE_LOG(DEBUG, SERVICE,"%s moving dest into trash\n", __func__);
-        list_add(&dest->n_list, &dp_vs_dest_trash);
-        rte_atomic32_inc(&dest->refcnt);
+        RTE_LOG(ERR, SERVICE, "%s delete rs\n", __func__);
     }
 }
 
 /*
  *  Unlink a destination from the given service
  */
-void __dp_vs_unlink_dest(struct dp_vs_service *svc,
+void dp_vs_unlink_dest(struct dp_vs_service *svc,
                 struct dp_vs_dest *dest, int svcupd)
 {
     dest->flags &= ~DPVS_DEST_F_AVAILABLE;
@@ -411,30 +263,20 @@ dp_vs_del_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest)
         return EDPVS_NOTEXIST;
     }
 
-    rte_rwlock_write_lock(&__dp_vs_svc_lock);
-
-    /*
-     *      Wait until all other svc users go away.
-     */
-    DPVS_WAIT_WHILE(rte_atomic32_read(&svc->usecnt) > 1);
-
     /*
      *      Unlink dest from the service
      */
-    __dp_vs_unlink_dest(svc, dest, 1);
-
-    rte_rwlock_write_unlock(&__dp_vs_svc_lock);
+    dp_vs_unlink_dest(svc, dest, 1);
 
     /*
      *      Delete the destination
      */
-    __dp_vs_del_dest(dest);
+    dp_vs_dest_put(dest);
 
     return EDPVS_OK;
 }
 
 int dp_vs_get_dest_entries(const struct dp_vs_service *svc,
-                           const struct dp_vs_get_dests *get,
                            struct dp_vs_get_dests *uptr)
 {
     int ret = 0;
@@ -442,8 +284,10 @@ int dp_vs_get_dest_entries(const struct dp_vs_service *svc,
     struct dp_vs_dest *dest;
     struct dp_vs_dest_entry entry;
 
+    uptr->cid = rte_lcore_id();
+    uptr->num_dests = svc->num_dests;
     list_for_each_entry(dest, &svc->dests, n_list){
-        if(count >= get->num_dests)
+        if(count >= svc->num_dests)
             break;
         memset(&entry, 0, sizeof(entry));
         entry.af   = dest->af;
@@ -456,7 +300,9 @@ int dp_vs_get_dest_entries(const struct dp_vs_service *svc,
         entry.actconns = rte_atomic32_read(&dest->actconns);
         entry.inactconns = rte_atomic32_read(&dest->inactconns);
         entry.persistconns = rte_atomic32_read(&dest->persistconns);
-        ret = dp_vs_copy_stats(&(entry.stats), dest->stats);
+        ret = dp_vs_add_stats(&(entry.stats), &dest->stats);
+        if (ret != EDPVS_OK)
+            break;
 
         memcpy(&uptr->entrytable[count], &entry, sizeof(entry));
         count++;
@@ -472,6 +318,5 @@ int dp_vs_dest_init(void)
 
 int dp_vs_dest_term(void)
 {
-    dp_vs_trash_cleanup();
     return EDPVS_OK;
 }
diff --git a/src/ipvs/ip_vs_laddr.c b/src/ipvs/ip_vs_laddr.c
index 9512e8ae9..ff4dec4ab 100644
--- a/src/ipvs/ip_vs_laddr.c
+++ b/src/ipvs/ip_vs_laddr.c
@@ -96,7 +96,6 @@
  *    It man not make sence to let #lcore bigger then #laddr.
  */
 
-/* laddr is configured with service instead of lcore */
 struct dp_vs_laddr {
     int                     af;
     struct list_head        list;       /* svc->laddr_list elem */
@@ -155,9 +154,13 @@ static inline struct dp_vs_laddr *__get_laddr(struct dp_vs_service *svc)
 
 static inline void put_laddr(struct dp_vs_laddr *laddr)
 {
-    /* use lock if other field need by changed */
-    rte_atomic32_dec(&laddr->refcnt);
-    return;
+    if (!laddr)
+        return;
+
+    if (rte_atomic32_dec_and_test(&laddr->refcnt)) {
+        rte_free(laddr);
+        RTE_LOG(DEBUG, IPVS, "%s: delete laddr.\n", __func__);
+    }
 }
 
 int dp_vs_laddr_bind(struct dp_vs_conn *conn, struct dp_vs_service *svc)
@@ -177,17 +180,12 @@ int dp_vs_laddr_bind(struct dp_vs_conn *conn, struct dp_vs_service *svc)
     /*
      * some time allocate lport fails for one laddr,
      * but there's also some resource on another laddr.
-     * use write lock since
-     * 1. __get_laddr will change svc->laddr_curr;
-     * 2. we uses svc->num_laddrs;
      */
-    rte_rwlock_write_lock(&svc->laddr_lock);
     for (i = 0; i < dp_vs_laddr_max_trails && i < svc->num_laddrs; i++) {
         /* select a local IP from service */
         laddr = __get_laddr(svc);
         if (!laddr) {
             RTE_LOG(ERR, IPVS, "%s: no laddr available.\n", __func__);
-            rte_rwlock_write_unlock(&svc->laddr_lock);
             return EDPVS_RESOURCE;
         }
 
@@ -231,7 +229,6 @@ int dp_vs_laddr_bind(struct dp_vs_conn *conn, struct dp_vs_service *svc)
                 : (((struct sockaddr_in6 *)&ssin)->sin6_port));
         break;
     }
-    rte_rwlock_write_unlock(&svc->laddr_lock);
 
     if (!laddr || sport == 0) {
 #ifdef CONFIG_DPVS_IPVS_DEBUG
@@ -315,7 +312,7 @@ int dp_vs_laddr_add(struct dp_vs_service *svc,
 
     new->af = af;
     new->addr = *addr;
-    rte_atomic32_init(&new->refcnt);
+    rte_atomic32_set(&new->refcnt, 1);
     rte_atomic32_init(&new->conn_counts);
 
     /* is the laddr bind to local interface ? */
@@ -325,10 +322,8 @@ int dp_vs_laddr_add(struct dp_vs_service *svc,
         return EDPVS_NOTEXIST;
     }
 
-    rte_rwlock_write_lock(&svc->laddr_lock);
     list_for_each_entry(curr, &svc->laddr_list, list) {
         if (af == curr->af && inet_addr_equal(af, &curr->addr, &new->addr)) {
-            rte_rwlock_write_unlock(&svc->laddr_lock);
             rte_free(new);
             return EDPVS_EXIST;
         }
@@ -336,7 +331,6 @@ int dp_vs_laddr_add(struct dp_vs_service *svc,
 
     list_add_tail(&new->list, &svc->laddr_list);
     svc->num_laddrs++;
-    rte_rwlock_write_unlock(&svc->laddr_lock);
 
     return EDPVS_OK;
 }
@@ -349,31 +343,18 @@ int dp_vs_laddr_del(struct dp_vs_service *svc, int af, const union inet_addr *ad
     if (!svc || !addr)
         return EDPVS_INVAL;
 
-    rte_rwlock_write_lock(&svc->laddr_lock);
     list_for_each_entry_safe(laddr, next, &svc->laddr_list, list) {
         if (!((af == laddr->af) && inet_addr_equal(af, &laddr->addr, addr)))
             continue;
 
         /* found */
-        if (rte_atomic32_read(&laddr->refcnt) == 0) {
-         /* update svc->curr_laddr */
         if (svc->laddr_curr == &laddr->list)
-        svc->laddr_curr = laddr->list.next;
-            list_del(&laddr->list);
-            rte_free(laddr);
-            svc->num_laddrs--;
-            err = EDPVS_OK;
-        } else {
-            /* XXX: move to trash list and implement an garbage collector,
-             * or just try del again ? */
-            err = EDPVS_BUSY;
-        }
-        break;
+                svc->laddr_curr = laddr->list.next;
+        list_del(&laddr->list);
+        svc->num_laddrs--;
+        put_laddr(laddr);
+        err = EDPVS_OK;
     }
-    rte_rwlock_write_unlock(&svc->laddr_lock);
-
-    if (err == EDPVS_BUSY)
-        RTE_LOG(DEBUG, IPVS, "%s: laddr is in use.\n", __func__);
 
     return err;
 }
@@ -388,14 +369,11 @@ static int dp_vs_laddr_getall(struct dp_vs_service *svc,
     if (!svc || !addrs || !naddr)
         return EDPVS_INVAL;
 
-    rte_rwlock_write_lock(&svc->laddr_lock);
-
     if (svc->num_laddrs > 0) {
         *naddr = svc->num_laddrs;
         *addrs = rte_malloc_socket(0, sizeof(struct dp_vs_laddr_entry) * svc->num_laddrs,
                 RTE_CACHE_LINE_SIZE, rte_socket_id());
         if (!(*addrs)) {
-            rte_rwlock_write_unlock(&svc->laddr_lock);
             return EDPVS_NOMEM;
         }
 
@@ -412,7 +390,6 @@ static int dp_vs_laddr_getall(struct dp_vs_service *svc,
         *addrs = NULL;
     }
 
-    rte_rwlock_write_unlock(&svc->laddr_lock);
     return EDPVS_OK;
 }
 
@@ -424,23 +401,14 @@ int dp_vs_laddr_flush(struct dp_vs_service *svc)
     if (!svc)
         return EDPVS_INVAL;
 
-    rte_rwlock_write_lock(&svc->laddr_lock);
     list_for_each_entry_safe(laddr, next, &svc->laddr_list, list) {
-        if (rte_atomic32_read(&laddr->refcnt) == 0) {
-            list_del(&laddr->list);
-            rte_free(laddr);
-            svc->num_laddrs--;
-        } else {
-            char buf[64];
-
-            if (inet_ntop(laddr->af, &laddr->addr, buf, sizeof(buf)) == NULL)
-                snprintf(buf, sizeof(buf), "::");
-
-            RTE_LOG(DEBUG, IPVS, "%s: laddr %s is in use.\n", __func__, buf);
-            err = EDPVS_BUSY;
-        }
+        if (svc->laddr_curr == &laddr->list)
+                svc->laddr_curr = laddr->list.next;
+        list_del(&laddr->list);
+        svc->num_laddrs--;
+        put_laddr(laddr);
+        err = EDPVS_OK;
     }
-    rte_rwlock_write_unlock(&svc->laddr_lock);
 
     return err;
 }
@@ -448,24 +416,47 @@ int dp_vs_laddr_flush(struct dp_vs_service *svc)
 /*
  * for control plane
  */
+
+static inline sockoptid_t set_opt_so2msg(int opt)
+{
+    return opt - SOCKOPT_LADDR_BASE + MSG_TYPE_SET_LADDR_BASE;
+}
+
 static int laddr_sockopt_set(sockoptid_t opt, const void *conf, size_t size)
 {
     const struct dp_vs_laddr_conf *laddr_conf = conf;
     struct dp_vs_service *svc;
     int err;
     struct dp_vs_match match;
+    lcoreid_t cid = rte_lcore_id();
+
+    // send to slave core
+    if (cid == rte_get_master_lcore()) {
+        struct dpvs_msg *msg;
+
+        msg = msg_make(set_opt_so2msg(opt), 0, DPVS_MSG_MULTICAST, cid, size, conf);
+        if (!msg)
+            return EDPVS_NOMEM;
+
+        err = multicast_msg_send(msg, 0, NULL);
+        /* go on in master core, not return */
+        if (err != EDPVS_OK)
+            RTE_LOG(ERR, SERVICE, "[%s] fail to send multicast message\n", __func__);
+        msg_destroy(&msg);
+    }
 
     if (!conf && size < sizeof(*laddr_conf))
         return EDPVS_INVAL;
 
     if (dp_vs_match_parse(laddr_conf->srange, laddr_conf->drange,
                           laddr_conf->iifname, laddr_conf->oifname,
-                          &match) != EDPVS_OK)
+                          laddr_conf->af_s, &match) != EDPVS_OK)
         return EDPVS_INVAL;
 
     svc = dp_vs_service_lookup(laddr_conf->af_s, laddr_conf->proto,
                                &laddr_conf->vaddr, laddr_conf->vport,
-                               laddr_conf->fwmark, NULL, &match, NULL);
+                               laddr_conf->fwmark, NULL, &match, 
+                               NULL, rte_lcore_id());
     if (!svc)
         return EDPVS_NOSERV;
 
@@ -485,73 +476,200 @@ static int laddr_sockopt_set(sockoptid_t opt, const void *conf, size_t size)
         break;
     }
 
-    dp_vs_service_put(svc);
     return err;
 }
 
-static int laddr_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
-                             void **out, size_t *outsize)
+static int get_msg_cb(struct dpvs_msg *msg)
 {
-    const struct dp_vs_laddr_conf *laddr_conf = conf;
-    struct dp_vs_laddr_conf *laddrs;
-    struct dp_vs_service *svc;
-    struct dp_vs_laddr_entry *addrs;
-    size_t naddr, i;
-    int err;
+    lcoreid_t cid = rte_lcore_id();
+    struct dp_vs_laddr_conf *laddr_conf, *laddrs;
     struct dp_vs_match match;
+    struct dp_vs_laddr_entry *addrs;
+    struct dp_vs_service *svc;
+    size_t naddr;
+    int err, size, i;
 
-    if (!conf && size < sizeof(*laddr_conf))
-        return EDPVS_INVAL;
-
+    laddr_conf = (struct dp_vs_laddr_conf *)msg->data;
     if (dp_vs_match_parse(laddr_conf->srange, laddr_conf->drange,
                           laddr_conf->iifname, laddr_conf->oifname,
-                          &match) != EDPVS_OK)
-        return EDPVS_INVAL;
-
+                          laddr_conf->af_s, &match) != EDPVS_OK) {
+        return EDPVS_NOMEM;
+    }
 
     svc = dp_vs_service_lookup(laddr_conf->af_s, laddr_conf->proto,
                                &laddr_conf->vaddr, laddr_conf->vport,
-                               laddr_conf->fwmark, NULL, &match, NULL);
-    if (!svc)
+                               laddr_conf->fwmark, NULL, &match, 
+                               NULL, cid);
+    if (!svc) {
         return EDPVS_NOSERV;
+    } 
+    err = dp_vs_laddr_getall(svc, &addrs, &naddr); 
+    if (err != EDPVS_OK)
+        return err;
 
-    switch (opt) {
-    case SOCKOPT_GET_LADDR_GETALL:
-        err = dp_vs_laddr_getall(svc, &addrs, &naddr);
-        if (err != EDPVS_OK)
-            break;
-
-        *outsize = sizeof(*laddr_conf) + naddr * sizeof(struct dp_vs_laddr_entry);
-        *out = rte_malloc_socket(0, *outsize, RTE_CACHE_LINE_SIZE, rte_socket_id());
-        if (!*out) {
-            if (addrs)
-                rte_free(addrs);
-            err = EDPVS_NOMEM;
-            break;
-        }
+    size = sizeof(*laddr_conf) + naddr * sizeof(struct dp_vs_laddr_entry);
+    laddrs = rte_malloc_socket(0, size, RTE_CACHE_LINE_SIZE, rte_socket_id());
+    if (!laddrs) {
+        if (addrs)
+            rte_free(addrs);
+        return EDPVS_NOMEM;
+    }
 
-        laddrs = *out;
-        *laddrs = *laddr_conf;
+    *laddrs = *laddr_conf;
+    laddrs->nladdrs = naddr;
+    for (i = 0; i < naddr; i++) {
+        laddrs->laddrs[i].af = addrs[i].af;
+        laddrs->laddrs[i].addr = addrs[i].addr;
+        /* TODO: nport_conflict & nconns */
+        laddrs->laddrs[i].nport_conflict = 0;
+        laddrs->laddrs[i].nconns = addrs[i].nconns;
+    }
+    if (addrs)
+        rte_free(addrs);
 
-        laddrs->nladdrs = naddr;
-        for (i = 0; i < naddr; i++) {
-            laddrs->laddrs[i].af = addrs[i].af;
-            laddrs->laddrs[i].addr = addrs[i].addr;
-            /* TODO: nport_conflict & nconns */
-            laddrs->laddrs[i].nport_conflict = 0;
-            laddrs->laddrs[i].nconns = addrs[i].nconns;
-        }
+    msg->reply.len = size;
+    msg->reply.data = (void *)laddrs;
+    return EDPVS_OK;
+}
 
-        if (addrs)
-            rte_free(addrs);
-        break;
-    default:
-        err = EDPVS_NOTSUPP;
-        break;
+static int dp_vs_copy_percore_laddrs_stats(struct dp_vs_laddr_conf *master_laddrs,
+                                           struct dp_vs_laddr_conf *slave_laddrs)
+{
+    int i;
+    if (master_laddrs->nladdrs != slave_laddrs->nladdrs)
+        return EDPVS_INVAL;
+    for (i = 0; i < master_laddrs->nladdrs; i++) {
+        master_laddrs->laddrs[i].nport_conflict += slave_laddrs->laddrs[i].nport_conflict;
+        master_laddrs->laddrs[i].nconns += slave_laddrs->laddrs[i].nconns;
     }
 
-    dp_vs_service_put(svc);
-    return err;
+    return EDPVS_OK;
+}
+
+static void opt2cpu(sockoptid_t opt, sockoptid_t *new_opt, lcoreid_t *cid)
+{
+    *cid = opt - SOCKOPT_GET_LADDR_GETALL;
+    *new_opt = SOCKOPT_GET_LADDR_GETALL;
+}
+
+static int laddr_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
+                             void **out, size_t *outsize)
+{
+    const struct dp_vs_laddr_conf *laddr_conf = conf;
+    struct dp_vs_laddr_conf *laddrs, *get_msg;
+    struct dp_vs_service *svc;
+    struct dp_vs_laddr_entry *addrs;
+    size_t naddr, i;
+    int err;
+    struct dp_vs_match match;
+    struct dpvs_multicast_queue *reply = NULL;
+    struct dpvs_msg *msg, *cur;
+    uint8_t num_lcores = 0;
+    sockoptid_t new_opt;
+    lcoreid_t cid;
+
+    netif_get_slave_lcores(&num_lcores, NULL);
+    opt2cpu(opt, &new_opt, &cid);
+    if (cid > num_lcores || new_opt > SOCKOPT_GET_LADDR_GETALL)
+        return EDPVS_INVAL;
+
+    if (!conf && size < sizeof(*laddr_conf))
+        return EDPVS_INVAL;
+
+    switch (new_opt) {
+        case SOCKOPT_GET_LADDR_GETALL:
+            msg = msg_make(MSG_TYPE_LADDR_GET_ALL, 0, DPVS_MSG_MULTICAST, rte_lcore_id(),
+                           sizeof(struct dp_vs_laddr_conf), laddr_conf);
+            if (!msg)
+                return EDPVS_NOMEM;
+
+            err = multicast_msg_send(msg, 0, &reply);
+            if (err != EDPVS_OK) {
+                msg_destroy(&msg);
+                RTE_LOG(ERR, SERVICE, "%s: send message fail.\n", __func__);
+                return EDPVS_MSG_FAIL;
+            }
+
+            if (cid == rte_get_master_lcore()) {
+                if (dp_vs_match_parse(laddr_conf->srange, laddr_conf->drange,
+                                      laddr_conf->iifname, laddr_conf->oifname,
+                                      laddr_conf->af_s, &match) != EDPVS_OK) {
+                    msg_destroy(&msg);
+                    return EDPVS_INVAL;
+                }
+                svc = dp_vs_service_lookup(laddr_conf->af_s, laddr_conf->proto,
+                                           &laddr_conf->vaddr, laddr_conf->vport,
+                                           laddr_conf->fwmark, NULL, &match, NULL, cid);
+                if (!svc) {
+                    msg_destroy(&msg);
+                    return EDPVS_NOSERV;
+                }
+
+	        err = dp_vs_laddr_getall(svc, &addrs, &naddr);
+                if (err != EDPVS_OK) {
+                    msg_destroy(&msg);
+                    return err;
+                }
+                
+                *outsize = sizeof(*laddr_conf) + naddr * sizeof(struct dp_vs_laddr_entry);
+                *out = rte_malloc_socket(0, *outsize, RTE_CACHE_LINE_SIZE, rte_socket_id());
+                if (!*out) {
+                    if (addrs)
+                        rte_free(addrs);
+                    msg_destroy(&msg);
+                    return EDPVS_NOMEM;
+                }
+
+                laddrs = *out;
+                *laddrs = *laddr_conf;
+
+                laddrs->nladdrs = naddr;
+                for (i = 0; i < naddr; i++) {
+                    laddrs->laddrs[i].af = addrs[i].af;
+                    laddrs->laddrs[i].addr = addrs[i].addr;
+                    /* TODO: nport_conflict & nconns */
+                    laddrs->laddrs[i].nport_conflict = 0;
+                    laddrs->laddrs[i].nconns = addrs[i].nconns;
+                }
+                if (addrs)
+                    rte_free(addrs);
+
+                list_for_each_entry(cur, &reply->mq, mq_node) {
+                    get_msg = (struct dp_vs_laddr_conf *)(cur->data);
+                    err = dp_vs_copy_percore_laddrs_stats(laddrs, get_msg);
+                    if (err != EDPVS_OK) {
+                        msg_destroy(&msg);
+                        rte_free(out);
+                        *out = NULL;
+                        return err;
+                    }
+                }
+                msg_destroy(&msg);
+                return EDPVS_OK;
+
+            } else {
+                list_for_each_entry(cur, &reply->mq, mq_node) {
+                    get_msg = (struct dp_vs_laddr_conf *)(cur->data);
+                    if (cid == get_msg->cid) {
+                        *outsize = sizeof(*laddr_conf) + \
+                                   get_msg->nladdrs * sizeof(struct dp_vs_laddr_entry);
+                        *out = rte_malloc_socket(0, *outsize, RTE_CACHE_LINE_SIZE, rte_socket_id());
+                        if (!*out) {
+                            msg_destroy(&msg);
+                            return EDPVS_NOMEM;
+                        }
+                        rte_memcpy(*out, get_msg, *outsize);
+                        msg_destroy(&msg);
+                        return EDPVS_OK;
+                    }
+                }
+                RTE_LOG(ERR, SERVICE, "%s: find no laddr for cid=%d.\n", __func__, cid);
+                msg_destroy(&msg);
+                return EDPVS_NOTEXIST;
+            }
+        default:
+            return EDPVS_NOTSUPP;
+    }
 }
 
 static struct dpvs_sockopts laddr_sockopts = {
@@ -560,13 +678,77 @@ static struct dpvs_sockopts laddr_sockopts = {
     .set_opt_max        = SOCKOPT_SET_LADDR_FLUSH,
     .set                = laddr_sockopt_set,
     .get_opt_min        = SOCKOPT_GET_LADDR_GETALL,
-    .get_opt_max        = SOCKOPT_GET_LADDR_GETALL,
+    .get_opt_max        = SOCKOPT_GET_LADDR_MAX,
     .get                = laddr_sockopt_get,
 };
 
+static int add_msg_cb(struct dpvs_msg *msg)
+{
+    return laddr_sockopt_set(SOCKOPT_SET_LADDR_ADD, msg->data, msg->len);
+}
+
+static int del_msg_cb(struct dpvs_msg *msg)
+{
+    return laddr_sockopt_set(SOCKOPT_SET_LADDR_DEL, msg->data, msg->len);
+}
+
+static int flush_msg_cb(struct dpvs_msg *msg)
+{
+    return laddr_sockopt_set(SOCKOPT_SET_LADDR_FLUSH, msg->data, msg->len);
+}
+
 int dp_vs_laddr_init(void)
 {
     int err;
+    struct dpvs_msg_type msg_type;
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_LADDR_SET_ADD;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = add_msg_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+        RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+        return err;
+    }
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_LADDR_SET_DEL;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = del_msg_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+        RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+        return err;
+    }
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_LADDR_SET_FLUSH;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = flush_msg_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+        RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+        return err;
+    }   
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_LADDR_GET_ALL;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = get_msg_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+        RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+        return err;
+    }
 
     if ((err = sockopt_register(&laddr_sockopts)) != EDPVS_OK)
         return err;
diff --git a/src/ipvs/ip_vs_proto_icmp.c b/src/ipvs/ip_vs_proto_icmp.c
index 3e8cdc081..01bfb46f3 100644
--- a/src/ipvs/ip_vs_proto_icmp.c
+++ b/src/ipvs/ip_vs_proto_icmp.c
@@ -99,8 +99,8 @@ static int icmp_conn_sched(struct dp_vs_proto *proto,
         return EDPVS_INVPKT;
     }
 
-    svc = dp_vs_service_lookup(iph->af, iph->proto,
-                               &iph->daddr, 0, 0, mbuf, NULL, &outwall);
+    svc = dp_vs_service_lookup(iph->af, iph->proto, &iph->daddr, 0, 0, 
+                               mbuf, NULL, &outwall, rte_lcore_id());
     if (!svc) {
         *verdict = INET_ACCEPT;
         return EDPVS_NOSERV;
@@ -109,12 +109,10 @@ static int icmp_conn_sched(struct dp_vs_proto *proto,
     /* schedule RS and create new connection */
     *conn = dp_vs_schedule(svc, iph, mbuf, false, outwall);
     if (!*conn) {
-        dp_vs_service_put(svc);
         *verdict = INET_DROP;
         return EDPVS_RESOURCE;
     }
 
-    dp_vs_service_put(svc);
     return EDPVS_OK;
 }
 
diff --git a/src/ipvs/ip_vs_proto_tcp.c b/src/ipvs/ip_vs_proto_tcp.c
index 27c04476c..3b6155c00 100644
--- a/src/ipvs/ip_vs_proto_tcp.c
+++ b/src/ipvs/ip_vs_proto_tcp.c
@@ -590,7 +590,8 @@ static int tcp_conn_sched(struct dp_vs_proto *proto,
 
         /* Drop tcp packet which is send to vip and !vport */
         if (g_defence_tcp_drop &&
-                (svc = dp_vs_lookup_vip(iph->af, iph->proto, &iph->daddr))) {
+                (svc = dp_vs_lookup_vip(iph->af, iph->proto, 
+                                    &iph->daddr, rte_lcore_id()))) {
             dp_vs_estats_inc(DEFENCE_TCP_DROP);
             *verdict = INET_DROP;
             return EDPVS_INVPKT;
@@ -600,12 +601,13 @@ static int tcp_conn_sched(struct dp_vs_proto *proto,
         return EDPVS_INVAL;
     }
 
-    svc = dp_vs_service_lookup(iph->af, iph->proto, 
-                               &iph->daddr, th->dest, 0, mbuf, NULL, &outwall);
+    svc = dp_vs_service_lookup(iph->af, iph->proto, &iph->daddr, th->dest, 
+                               0, mbuf, NULL, &outwall, rte_lcore_id());
     if (!svc) {
         /* Drop tcp packet which is send to vip and !vport */
         if (g_defence_tcp_drop &&
-                (svc = dp_vs_lookup_vip(iph->af, iph->proto, &iph->daddr))) {
+                (svc = dp_vs_lookup_vip(iph->af, iph->proto, 
+                                   &iph->daddr, rte_lcore_id()))) {
             dp_vs_estats_inc(DEFENCE_TCP_DROP);
             *verdict = INET_DROP;
             return EDPVS_INVPKT;
@@ -616,13 +618,10 @@ static int tcp_conn_sched(struct dp_vs_proto *proto,
 
     *conn = dp_vs_schedule(svc, iph, mbuf, false, outwall);
     if (!*conn) {
-        dp_vs_service_put(svc);
         *verdict = INET_DROP;
         return EDPVS_RESOURCE;
     }
 
-    dp_vs_service_put(svc);
-
     return EDPVS_OK;
 }
 
diff --git a/src/ipvs/ip_vs_proto_udp.c b/src/ipvs/ip_vs_proto_udp.c
index eeb724ab6..2dd6b103d 100644
--- a/src/ipvs/ip_vs_proto_udp.c
+++ b/src/ipvs/ip_vs_proto_udp.c
@@ -160,8 +160,8 @@ static int udp_conn_sched(struct dp_vs_proto *proto,
     }
 
     /* lookup service <vip:vport> */
-    svc = dp_vs_service_lookup(iph->af, iph->proto,
-                               &iph->daddr, uh->dst_port, 0, mbuf, NULL, &outwall);
+    svc = dp_vs_service_lookup(iph->af, iph->proto, &iph->daddr, 
+                     uh->dst_port, 0, mbuf, NULL, &outwall, rte_lcore_id());
     if (!svc) {
         *verdict = INET_ACCEPT;
         return EDPVS_NOSERV;
@@ -170,7 +170,6 @@ static int udp_conn_sched(struct dp_vs_proto *proto,
     /* schedule RS and create new connection */
     *conn = dp_vs_schedule(svc, iph, mbuf, false, outwall);
     if (!*conn) {
-        dp_vs_service_put(svc);
         *verdict = INET_DROP;
         return EDPVS_RESOURCE;
     }
@@ -190,7 +189,6 @@ static int udp_conn_sched(struct dp_vs_proto *proto,
         }
     }
 
-    dp_vs_service_put(svc);
     return EDPVS_OK;
 }
 
diff --git a/src/ipvs/ip_vs_rr.c b/src/ipvs/ip_vs_rr.c
index 234f859f4..06f3e6fb4 100644
--- a/src/ipvs/ip_vs_rr.c
+++ b/src/ipvs/ip_vs_rr.c
@@ -40,8 +40,6 @@ static struct dp_vs_dest *dp_vs_rr_schedule(struct dp_vs_service *svc,
     struct list_head *p, *q;
     struct dp_vs_dest *dest;
 
-    rte_rwlock_write_lock(&svc->sched_lock);
-
     p = (struct list_head *)svc->sched_data;
     p = p->next;
     q = p;
@@ -59,13 +57,11 @@ static struct dp_vs_dest *dp_vs_rr_schedule(struct dp_vs_service *svc,
             goto out;
         q = q->next;
     } while (q != p);
-    rte_rwlock_write_unlock(&svc->sched_lock);
 
     return NULL;
 
 out:
     svc->sched_data = q;
-    rte_rwlock_write_unlock(&svc->sched_lock);
 
     return dest;
 }
diff --git a/src/ipvs/ip_vs_service.c b/src/ipvs/ip_vs_service.c
index 60a8637ee..056f812f1 100644
--- a/src/ipvs/ip_vs_service.c
+++ b/src/ipvs/ip_vs_service.c
@@ -15,6 +15,10 @@
  * GNU General Public License for more details.
  *
  */
+/*
+ * svc will not be changed during svc get(svc is per core); 
+ * but conn will hold dest and dest will hold svc. so we need refcnt
+ */
 #include <arpa/inet.h>
 #include <netinet/in.h>
 #include "inet.h"
@@ -33,7 +37,7 @@
 #include "neigh.h"
 #include "ipset.h"
 
-static int dp_vs_num_services = 0;
+static rte_atomic16_t dp_vs_num_services[DPVS_MAX_LCORE];
 
 /**
  * hash table for svc
@@ -42,13 +46,13 @@ static int dp_vs_num_services = 0;
 #define DP_VS_SVC_TAB_SIZE (1 << DP_VS_SVC_TAB_BITS)
 #define DP_VS_SVC_TAB_MASK (DP_VS_SVC_TAB_SIZE - 1)
 
-static struct list_head dp_vs_svc_table[DP_VS_SVC_TAB_SIZE];
+static struct list_head dp_vs_svc_table[DPVS_MAX_LCORE][DP_VS_SVC_TAB_SIZE];
 
-static struct list_head dp_vs_svc_fwm_table[DP_VS_SVC_TAB_SIZE];
+static struct list_head dp_vs_svc_fwm_table[DPVS_MAX_LCORE][DP_VS_SVC_TAB_SIZE];
 
-static struct list_head dp_vs_svc_match_list;
+static struct list_head dp_vs_svc_match_list[DPVS_MAX_LCORE];
 
-static inline unsigned dp_vs_svc_hashkey(int af, unsigned proto, const union inet_addr *addr)
+static inline int dp_vs_svc_hashkey(int af, unsigned proto, const union inet_addr *addr)
 {
     uint32_t addr_fold;
 
@@ -56,7 +60,7 @@ static inline unsigned dp_vs_svc_hashkey(int af, unsigned proto, const union ine
 
     if (!addr_fold) {
         RTE_LOG(DEBUG, SERVICE, "%s: IP proto not support.\n", __func__);
-        return 0;
+        return EDPVS_INVAL;
     }
 
     return (proto ^ rte_be_to_cpu_32(addr_fold)) & DP_VS_SVC_TAB_MASK;
@@ -67,9 +71,9 @@ static inline unsigned dp_vs_svc_fwm_hashkey(uint32_t fwmark)
     return fwmark & DP_VS_SVC_TAB_MASK;
 }
 
-static int dp_vs_svc_hash(struct dp_vs_service *svc)
+static int dp_vs_svc_hash(struct dp_vs_service *svc, lcoreid_t cid)
 {
-    unsigned hash;
+    int hash;
 
     if (svc->flags & DP_VS_SVC_F_HASHED){
         RTE_LOG(DEBUG, SERVICE, "%s: request for already hashed.\n", __func__);
@@ -78,19 +82,21 @@ static int dp_vs_svc_hash(struct dp_vs_service *svc)
 
     if (svc->fwmark) {
         hash = dp_vs_svc_fwm_hashkey(svc->fwmark);
-        list_add(&svc->f_list, &dp_vs_svc_fwm_table[hash]);
+        list_add(&svc->f_list, &dp_vs_svc_fwm_table[cid][hash]);
     } else if (svc->match) {
-        list_add(&svc->m_list, &dp_vs_svc_match_list);
+        list_add(&svc->m_list, &dp_vs_svc_match_list[cid]);
     } else {
         /*
          *  Hash it by <protocol,addr,port> in dp_vs_svc_table
          */
         hash = dp_vs_svc_hashkey(svc->af, svc->proto, &svc->addr);
-        list_add(&svc->s_list, &dp_vs_svc_table[hash]);
+        if (hash < 0)
+             return EDPVS_INVAL;
+
+        list_add(&svc->s_list, &dp_vs_svc_table[cid][hash]);
     }
 
     svc->flags |= DP_VS_SVC_F_HASHED;
-    rte_atomic32_inc(&svc->refcnt);
     return EDPVS_OK;
 }
 
@@ -109,24 +115,24 @@ static int dp_vs_svc_unhash(struct dp_vs_service *svc)
         list_del(&svc->s_list);
 
     svc->flags &= ~DP_VS_SVC_F_HASHED;
-    rte_atomic32_dec(&svc->refcnt);
     return EDPVS_OK;
 }
 
-struct dp_vs_service *__dp_vs_service_get(int af, uint16_t protocol,
+static struct dp_vs_service *__dp_vs_service_get(int af, uint16_t protocol,
                                           const union inet_addr *vaddr,
-                                          uint16_t vport)
+                                          uint16_t vport, lcoreid_t cid)
 {
-    unsigned hash;
+    int hash;
     struct dp_vs_service *svc;
 
     hash = dp_vs_svc_hashkey(af, protocol, vaddr);
-    list_for_each_entry(svc, &dp_vs_svc_table[hash], s_list){
+    if (hash < 0)
+        return NULL;
+    list_for_each_entry(svc, &dp_vs_svc_table[cid][hash], s_list){
         if ((svc->af == af)
             && inet_addr_equal(af, &svc->addr, vaddr)
             && (svc->port == vport)
             && (svc->proto == protocol)) {
-                rte_atomic32_inc(&svc->usecnt);
                 return svc;
             }
     }
@@ -134,7 +140,7 @@ struct dp_vs_service *__dp_vs_service_get(int af, uint16_t protocol,
     return NULL;
 }
 
-struct dp_vs_service *__dp_vs_svc_fwm_get(int af, uint32_t fwmark)
+static struct dp_vs_service *__dp_vs_svc_fwm_get(int af, uint32_t fwmark, lcoreid_t cid)
 {
     unsigned hash;
     struct dp_vs_service *svc;
@@ -142,10 +148,9 @@ struct dp_vs_service *__dp_vs_svc_fwm_get(int af, uint32_t fwmark)
     /* Check for fwmark addressed entries */
     hash = dp_vs_svc_fwm_hashkey(fwmark);
 
-    list_for_each_entry(svc, &dp_vs_svc_fwm_table[hash], f_list) {
+    list_for_each_entry(svc, &dp_vs_svc_fwm_table[cid][hash], f_list) {
         if (svc->fwmark == fwmark && svc->af == af) {
             /* HIT */
-            rte_atomic32_inc(&svc->usecnt);
             return svc;
         }
     }
@@ -191,7 +196,7 @@ static inline bool __svc_in_range(int af,
 }
 
 static struct dp_vs_service *
-__dp_vs_svc_match_get4(const struct rte_mbuf *mbuf, bool *outwall)
+__dp_vs_svc_match_get4(const struct rte_mbuf *mbuf, bool *outwall, lcoreid_t cid)
 {
     struct route_entry *rt = mbuf->userdata;
     struct ipv4_hdr *iph = ip4_hdr(mbuf); /* ipv4 only */
@@ -234,7 +239,7 @@ __dp_vs_svc_match_get4(const struct rte_mbuf *mbuf, bool *outwall)
         route4_put(rt);
     }
 
-    list_for_each_entry(svc, &dp_vs_svc_match_list, m_list) {
+    list_for_each_entry(svc, &dp_vs_svc_match_list[cid], m_list) {
         struct dp_vs_match *m = svc->match;
         struct netif_port *idev, *odev;
         assert(m);
@@ -251,7 +256,6 @@ __dp_vs_svc_match_get4(const struct rte_mbuf *mbuf, bool *outwall)
             (!idev || idev->id == mbuf->port) &&
             (!odev || odev->id == oif)
            ) {
-            rte_atomic32_inc(&svc->usecnt);
             return svc;
         }
     }
@@ -260,7 +264,7 @@ __dp_vs_svc_match_get4(const struct rte_mbuf *mbuf, bool *outwall)
 }
 
 static struct dp_vs_service *
-__dp_vs_svc_match_get6(const struct rte_mbuf *mbuf)
+__dp_vs_svc_match_get6(const struct rte_mbuf *mbuf, lcoreid_t cid)
 {
     struct route6 *rt = mbuf->userdata;
     struct ip6_hdr *iph = ip6_hdr(mbuf);
@@ -304,7 +308,7 @@ __dp_vs_svc_match_get6(const struct rte_mbuf *mbuf)
         route6_put(rt);
     }
 
-    list_for_each_entry(svc, &dp_vs_svc_match_list, m_list) {
+    list_for_each_entry(svc, &dp_vs_svc_match_list[cid], m_list) {
         struct dp_vs_match *m = svc->match;
         struct netif_port *idev, *odev;
         assert(m);
@@ -323,7 +327,6 @@ __dp_vs_svc_match_get6(const struct rte_mbuf *mbuf)
             (!idev || idev->id == mbuf->port) &&
             (!odev || odev->id == oif)
            ) {
-            rte_atomic32_inc(&svc->usecnt);
             return svc;
         }
     }
@@ -332,19 +335,19 @@ __dp_vs_svc_match_get6(const struct rte_mbuf *mbuf)
 }
 
 static struct dp_vs_service *
-__dp_vs_svc_match_get(int af, const struct rte_mbuf *mbuf, bool *outwall)
+__dp_vs_svc_match_get(int af, const struct rte_mbuf *mbuf, bool *outwall, lcoreid_t cid)
 {
     if (af == AF_INET)
-        return __dp_vs_svc_match_get4(mbuf, outwall);
+        return __dp_vs_svc_match_get4(mbuf, outwall, cid);
     else if (af == AF_INET6)
-        return __dp_vs_svc_match_get6(mbuf);
+        return __dp_vs_svc_match_get6(mbuf, cid);
     else
         return NULL;
 }
 
 int dp_vs_match_parse(const char *srange, const char *drange,
                       const char *iifname, const char *oifname,
-                      struct dp_vs_match *match)
+                      int af, struct dp_vs_match *match)
 {
     int err;
 
@@ -362,6 +365,13 @@ int dp_vs_match_parse(const char *srange, const char *drange,
             return err;
     }
 
+    if (match->af && af && match->af != af)
+        return EDPVS_INVAL;
+
+    // no range param
+    if (!match->af)
+        match->af = af;
+
     snprintf(match->iifname, IFNAMSIZ, "%s", iifname ? : "");
     snprintf(match->oifname, IFNAMSIZ, "%s", oifname ? : "");
 
@@ -369,19 +379,19 @@ int dp_vs_match_parse(const char *srange, const char *drange,
 }
 
 static struct dp_vs_service *
-__dp_vs_svc_match_find(int af, uint8_t proto, const struct dp_vs_match *match)
+__dp_vs_svc_match_find(int af, uint8_t proto, const struct dp_vs_match *match,
+                       lcoreid_t cid)
 {
     struct dp_vs_service *svc;
 
     if (!match || is_empty_match(match))
         return NULL;
 
-    list_for_each_entry(svc, &dp_vs_svc_match_list, m_list) {
+    list_for_each_entry(svc, &dp_vs_svc_match_list[cid], m_list) {
         assert(svc->match);
         if (af == svc->af && proto == svc->proto &&
             memcmp(match, svc->match, sizeof(struct dp_vs_match)) == 0)
         {
-            rte_atomic32_inc(&svc->usecnt);
             return svc;
         }
     }
@@ -394,27 +404,24 @@ struct dp_vs_service *dp_vs_service_lookup(int af, uint16_t protocol,
                                         uint16_t vport, uint32_t fwmark,
                                         const struct rte_mbuf *mbuf,
                                         const struct dp_vs_match *match,
-                                        bool *outwall)
+                                        bool *outwall, lcoreid_t cid)
 {
     struct dp_vs_service *svc = NULL;
 
-    rte_rwlock_read_lock(&__dp_vs_svc_lock);
-
-    if (fwmark && (svc = __dp_vs_svc_fwm_get(af, fwmark)))
+    if (fwmark && (svc = __dp_vs_svc_fwm_get(af, fwmark, cid)))
         goto out;
 
-    if ((svc = __dp_vs_service_get(af, protocol, vaddr, vport)))
+    if ((svc = __dp_vs_service_get(af, protocol, vaddr, vport, cid)))
         goto out;
 
     if (match && !is_empty_match(match))
-        if ((svc = __dp_vs_svc_match_find(af, protocol, match)))
+        if ((svc = __dp_vs_svc_match_find(af, protocol, match, cid)))
             goto out;
 
     if (mbuf) /* lowest priority */
-        svc = __dp_vs_svc_match_get(af, mbuf, outwall);
+        svc = __dp_vs_svc_match_get(af, mbuf, outwall, cid);
 
 out:
-    rte_rwlock_read_unlock(&__dp_vs_svc_lock);
 #ifdef CONFIG_DPVS_MBUF_DEBUG
     if (!svc && mbuf)
         dp_vs_mbuf_dump("found service failed.", af, mbuf);
@@ -424,50 +431,58 @@ struct dp_vs_service *dp_vs_service_lookup(int af, uint16_t protocol,
 
 
 struct dp_vs_service *dp_vs_lookup_vip(int af, uint16_t protocol,
-                                       const union inet_addr *vaddr)
+                                       const union inet_addr *vaddr,
+                                       lcoreid_t cid)
 {
     struct dp_vs_service *svc;
-    unsigned hash;
-
-    rte_rwlock_read_lock(&__dp_vs_svc_lock);
+    int hash;
 
     hash = dp_vs_svc_hashkey(af, protocol, vaddr);
-    list_for_each_entry(svc, &dp_vs_svc_table[hash], s_list) {
+    if (hash < 0)
+        return NULL;
+    list_for_each_entry(svc, &dp_vs_svc_table[cid][hash], s_list) {
         if ((svc->af == af)
             && inet_addr_equal(af, &svc->addr, vaddr)
             && (svc->proto == protocol)) {
             /* HIT */
-            rte_rwlock_read_unlock(&__dp_vs_svc_lock);
             return svc;
         }
     }
 
-    rte_rwlock_read_unlock(&__dp_vs_svc_lock);
     return NULL;
 }
 
 void
-__dp_vs_bind_svc(struct dp_vs_dest *dest, struct dp_vs_service *svc)
+dp_vs_bind_svc(struct dp_vs_dest *dest, struct dp_vs_service *svc)
 {
     rte_atomic32_inc(&svc->refcnt);
     dest->svc = svc;
 }
 
-void __dp_vs_unbind_svc(struct dp_vs_dest *dest)
+void dp_vs_svc_put(struct dp_vs_service *svc)
 {
-    struct dp_vs_service *svc = dest->svc;
+    if (!svc)
+        return;
 
-    dest->svc = NULL;
     if (rte_atomic32_dec_and_test(&svc->refcnt)) {
-        dp_vs_del_stats(svc->stats);
         if (svc->match)
             rte_free(svc->match);
         rte_free(svc);
-    }
+        RTE_LOG(DEBUG, SERVICE, "%s: delete svc.\n", __func__);
+    }    
+}
+
+void dp_vs_unbind_svc(struct dp_vs_dest *dest)
+{
+    if (!dest->svc)
+        return;
+    dp_vs_svc_put(dest->svc);
+    dest->svc = NULL;
 }
 
-int dp_vs_add_service(struct dp_vs_service_conf *u,
-                      struct dp_vs_service **svc_p)
+static int dp_vs_add_service(struct dp_vs_service_conf *u,
+                      struct dp_vs_service **svc_p,
+                      lcoreid_t cid)
 {
     int ret = 0;
     int size;
@@ -476,7 +491,7 @@ int dp_vs_add_service(struct dp_vs_service_conf *u,
 
     if (!u->fwmark && inet_is_addr_any(u->af, &u->addr)
         && !u->port && is_empty_match(&u->match)) {
-        RTE_LOG(ERR, SERVICE, "%s: adding empty servive\n", __func__);
+        RTE_LOG(ERR, SERVICE, "%s: adding inval servive\n", __func__);
         return EDPVS_INVAL;
     }
 
@@ -492,8 +507,6 @@ int dp_vs_add_service(struct dp_vs_service_conf *u,
         RTE_LOG(ERR, SERVICE, "%s: no memory.\n", __func__);
         return EDPVS_NOMEM;
     }
-    rte_atomic32_set(&svc->usecnt, 1);
-    rte_atomic32_set(&svc->refcnt, 1);
 
     svc->af = u->af;
     svc->proto = u->protocol;
@@ -517,28 +530,23 @@ int dp_vs_add_service(struct dp_vs_service_conf *u,
         *(svc->match) = u->match;
     }
 
-    rte_rwlock_init(&svc->laddr_lock);
     INIT_LIST_HEAD(&svc->laddr_list);
     svc->num_laddrs = 0;
     svc->laddr_curr = &svc->laddr_list;
 
     INIT_LIST_HEAD(&svc->dests);
-    rte_rwlock_init(&svc->sched_lock);
 
     ret = dp_vs_bind_scheduler(svc, sched);
     if (ret)
         goto out_err;
     sched = NULL;
 
-    ret = dp_vs_new_stats(&(svc->stats));
-    if(ret)
-        goto out_err;
-
-    dp_vs_num_services++;
+    rte_atomic16_inc(&dp_vs_num_services[cid]);
 
-    rte_rwlock_write_lock(&__dp_vs_svc_lock);
-    dp_vs_svc_hash(svc);
-    rte_rwlock_write_unlock(&__dp_vs_svc_lock);
+    ret = dp_vs_svc_hash(svc, cid);
+    if (ret != EDPVS_OK)
+        return ret;
+    rte_atomic32_set(&svc->refcnt, 1);
 
     *svc_p = svc;
     return EDPVS_OK;
@@ -547,7 +555,6 @@ int dp_vs_add_service(struct dp_vs_service_conf *u,
     if(svc != NULL) {
         if (svc->scheduler)
             dp_vs_unbind_scheduler(svc);
-        dp_vs_del_stats(svc->stats);
         if (svc->match)
             rte_free(svc->match);
         rte_free(svc);
@@ -555,8 +562,7 @@ int dp_vs_add_service(struct dp_vs_service_conf *u,
     return ret;
 }
 
-int
-dp_vs_edit_service(struct dp_vs_service *svc, struct dp_vs_service_conf *u)
+static int dp_vs_edit_service(struct dp_vs_service *svc, struct dp_vs_service_conf *u)
 {
     struct dp_vs_scheduler *sched, *old_sched;
     int ret = 0;
@@ -576,13 +582,6 @@ dp_vs_edit_service(struct dp_vs_service *svc, struct dp_vs_service_conf *u)
         goto out;
     }
 
-    rte_rwlock_write_lock(&__dp_vs_svc_lock);
-
-    /*
-     * Wait until all other svc users go away.
-     */
-    DPVS_WAIT_WHILE(rte_atomic32_read(&svc->usecnt) > 1);
-
     /*
      * Set the flags and timeout value
      */
@@ -600,7 +599,7 @@ dp_vs_edit_service(struct dp_vs_service *svc, struct dp_vs_service_conf *u)
          */
         if ((ret = dp_vs_unbind_scheduler(svc))) {
             old_sched = sched;
-            goto out_unlock;
+            goto out;
         }
 
         /*
@@ -619,23 +618,20 @@ dp_vs_edit_service(struct dp_vs_service *svc, struct dp_vs_service_conf *u)
              */
             dp_vs_bind_scheduler(svc, old_sched);
             old_sched = sched;
-            goto out_unlock;
+            goto out;
         }
     }
 
-out_unlock:
-    rte_rwlock_write_unlock(&__dp_vs_svc_lock);
 out:
     return ret;
 }
 
-
 static void __dp_vs_del_service(struct dp_vs_service *svc)
 {
     struct dp_vs_dest *dest, *nxt;
 
     /* Count only IPv4 services for old get/setsockopt interface */
-    dp_vs_num_services--;
+    rte_atomic16_dec(&dp_vs_num_services[rte_lcore_id()]);
 
     /* Unbind scheduler */
     dp_vs_unbind_scheduler(svc);
@@ -648,23 +644,17 @@ static void __dp_vs_del_service(struct dp_vs_service *svc)
      *    Unlink the whole destination list
      */
     list_for_each_entry_safe(dest, nxt, &svc->dests, n_list) {
-        DPVS_WAIT_WHILE(rte_atomic32_read(&svc->usecnt) > 1);
-        __dp_vs_unlink_dest(svc, dest, 0);
-        __dp_vs_del_dest(dest);
+        dp_vs_unlink_dest(svc, dest, 0);
+        dp_vs_dest_put(dest);
     }
 
     /*
      *    Free the service if nobody refers to it
      */
-    if (rte_atomic32_dec_and_test(&svc->refcnt)) {
-        dp_vs_del_stats(svc->stats);
-        if (svc->match)
-            rte_free(svc->match);
-        rte_free(svc);
-    }
+    dp_vs_svc_put(svc);
 }
 
-int dp_vs_del_service(struct dp_vs_service *svc)
+static int dp_vs_del_service(struct dp_vs_service *svc)
 {
     if (svc == NULL)
         return EDPVS_NOTEXIST;
@@ -672,19 +662,13 @@ int dp_vs_del_service(struct dp_vs_service *svc)
     /*
      * Unhash it from the service table
      */
-    rte_rwlock_write_lock(&__dp_vs_svc_lock);
-
     dp_vs_svc_unhash(svc);
-
+    
     /*
      * Wait until all the svc users go away.
      */
-    DPVS_WAIT_WHILE(rte_atomic32_read(&svc->usecnt) > 1);
-
     __dp_vs_del_service(svc);
 
-    rte_rwlock_write_unlock(&__dp_vs_svc_lock);
-
     return EDPVS_OK;
 }
 
@@ -708,8 +692,9 @@ dp_vs_copy_service(struct dp_vs_service_entry *dst, struct dp_vs_service *src)
     dst->netmask = src->netmask;
     dst->num_dests = src->num_dests;
     dst->num_laddrs = src->num_laddrs;
+    dst->cid = rte_lcore_id();
 
-    err = dp_vs_copy_stats(&dst->stats, src->stats);
+    err = dp_vs_add_stats(&dst->stats, &src->stats);
 
     m = src->match;
     if (!m)
@@ -724,16 +709,19 @@ dp_vs_copy_service(struct dp_vs_service_entry *dst, struct dp_vs_service *src)
     return err;
 }
 
-int dp_vs_get_service_entries(const struct dp_vs_get_services *get,
-                              struct dp_vs_get_services *uptr)
+static int dp_vs_get_service_entries(int num_services,
+                                     struct dp_vs_get_services *uptr,
+                                     lcoreid_t cid)
 {
     int idx, count = 0;
     struct dp_vs_service *svc;
     int ret = 0;
 
+    uptr->cid = cid;
+    uptr->num_services = num_services;
     for (idx = 0; idx < DP_VS_SVC_TAB_SIZE; idx++) {
-        list_for_each_entry(svc, &dp_vs_svc_table[idx], s_list){
-            if (count >= get->num_services)
+        list_for_each_entry(svc, &dp_vs_svc_table[cid][idx], s_list){
+            if (count >= num_services)
                 goto out;
             ret = dp_vs_copy_service(&uptr->entrytable[count], svc);
             if (ret != EDPVS_OK)
@@ -743,8 +731,8 @@ int dp_vs_get_service_entries(const struct dp_vs_get_services *get,
     }
 
     for (idx = 0; idx < DP_VS_SVC_TAB_SIZE; idx++) {
-        list_for_each_entry(svc, &dp_vs_svc_fwm_table[idx], f_list) {
-            if (count >= get->num_services)
+        list_for_each_entry(svc, &dp_vs_svc_fwm_table[cid][idx], f_list) {
+            if (count >= num_services)
                 goto out;
             ret = dp_vs_copy_service(&uptr->entrytable[count], svc);
             if (ret != EDPVS_OK)
@@ -753,8 +741,8 @@ int dp_vs_get_service_entries(const struct dp_vs_get_services *get,
         }
     }
 
-    list_for_each_entry(svc, &dp_vs_svc_match_list, m_list) {
-        if (count >= get->num_services)
+    list_for_each_entry(svc, &dp_vs_svc_match_list[cid], m_list) {
+        if (count >= num_services)
             goto out;
         ret = dp_vs_copy_service(&uptr->entrytable[count], svc);
         if (ret != EDPVS_OK)
@@ -762,6 +750,8 @@ int dp_vs_get_service_entries(const struct dp_vs_get_services *get,
         count++;
     }
 
+    if (count < num_services)
+        ret = EDPVS_INVAL;
 out:
     return ret;
 }
@@ -777,7 +767,7 @@ unsigned dp_vs_get_conn_timeout(struct dp_vs_conn *conn)
     return 90;
 }
 
-int dp_vs_flush(void)
+static int dp_vs_flush(lcoreid_t cid)
 {
     int idx;
     struct dp_vs_service *svc, *nxt;
@@ -786,16 +776,9 @@ int dp_vs_flush(void)
      * Flush the service table hashed by <protocol,addr,port>
      */
     for (idx = 0; idx < DP_VS_SVC_TAB_SIZE; idx++) {
-        list_for_each_entry_safe(svc, nxt, &dp_vs_svc_table[idx],
+        list_for_each_entry_safe(svc, nxt, &dp_vs_svc_table[cid][idx],
                      s_list) {
-            rte_rwlock_write_lock(&__dp_vs_svc_lock);
-            dp_vs_svc_unhash(svc);
-            /*
-             * Wait until all the svc users go away.
-             */
-            DPVS_WAIT_WHILE(rte_atomic32_read(&svc->usecnt) > 0);
-            __dp_vs_del_service(svc);
-            rte_rwlock_write_unlock(&__dp_vs_svc_lock);
+            dp_vs_del_service(svc);
         }
     }
 
@@ -804,76 +787,59 @@ int dp_vs_flush(void)
      */
     for (idx = 0; idx < DP_VS_SVC_TAB_SIZE; idx++) {
         list_for_each_entry_safe(svc, nxt,
-                     &dp_vs_svc_fwm_table[idx], f_list) {
-            rte_rwlock_write_lock(&__dp_vs_svc_lock);
-            dp_vs_svc_unhash(svc);
-            /*
-             * Wait until all the svc users go away.
-             */
-            DPVS_WAIT_WHILE(rte_atomic32_read(&svc->usecnt) > 0);
-            __dp_vs_del_service(svc);
-            rte_rwlock_write_unlock(&__dp_vs_svc_lock);
+                     &dp_vs_svc_fwm_table[cid][idx], f_list) {
+            dp_vs_del_service(svc);
         }
     }
 
     list_for_each_entry_safe(svc, nxt,
-                    &dp_vs_svc_match_list, m_list) {
-        rte_rwlock_write_lock(&__dp_vs_svc_lock);
-        dp_vs_svc_unhash(svc);
-        /*
-         * Wait until all the svc users go away.
-         */
-        DPVS_WAIT_WHILE(rte_atomic32_read(&svc->usecnt) > 0);
-        __dp_vs_del_service(svc);
-        rte_rwlock_write_unlock(&__dp_vs_svc_lock);
+                    &dp_vs_svc_match_list[cid], m_list) {
+            dp_vs_del_service(svc);
     }
 
     return EDPVS_OK;
 }
 
-int dp_vs_zero_service(struct dp_vs_service *svc)
+static int dp_vs_zero_service(struct dp_vs_service *svc)
 {
     struct dp_vs_dest *dest;
 
-    rte_rwlock_write_lock(&__dp_vs_svc_lock);
-
     list_for_each_entry(dest, &svc->dests, n_list) {
-        dp_svc_stats_clear(dest->stats);
+        dp_vs_stats_clear(&dest->stats);
     }
-    dp_svc_stats_clear(svc->stats);
-    rte_rwlock_write_unlock(&__dp_vs_svc_lock);
+    dp_vs_stats_clear(&svc->stats);
     return EDPVS_OK;
 }
 
-int dp_vs_zero_all(void)
+static int dp_vs_zero_all(lcoreid_t cid)
 {
     int idx;
     struct dp_vs_service *svc;
 
     for (idx = 0; idx < DP_VS_SVC_TAB_SIZE; idx++) {
-        list_for_each_entry(svc, &dp_vs_svc_table[idx], s_list) {
+        list_for_each_entry(svc, &dp_vs_svc_table[cid][idx], s_list) {
             dp_vs_zero_service(svc);
         }
     }
 
     for (idx = 0; idx < DP_VS_SVC_TAB_SIZE; idx++) {
-        list_for_each_entry(svc, &dp_vs_svc_fwm_table[idx], f_list) {
+        list_for_each_entry(svc, &dp_vs_svc_fwm_table[cid][idx], f_list) {
             dp_vs_zero_service(svc);
         }
     }
 
-    list_for_each_entry(svc, &dp_vs_svc_match_list, m_list) {
+    list_for_each_entry(svc, &dp_vs_svc_match_list[cid], m_list) {
         dp_vs_zero_service(svc);
     }
 
-    dp_vs_stats_clear();
+    dp_vs_estats_clear();
     return EDPVS_OK;
 }
 
 
 /*CONTROL PLANE*/
 static int dp_vs_copy_usvc_compat(struct dp_vs_service_conf *conf,
-                                   struct dp_vs_service_user *user)
+                                  struct dp_vs_service_user *user)
 {
     int err;
     conf->af = user->af;
@@ -892,12 +858,19 @@ static int dp_vs_copy_usvc_compat(struct dp_vs_service_conf *conf,
     conf->bps = user->bps;
     conf->limit_proportion = user->limit_proportion;
 
-    err = dp_vs_match_parse(user->srange, user->drange,
-                            user->iifname, user->oifname, &conf->match);
-    if (conf->match.af)
-        conf->af = conf->match.af;
+    if (user->flags & DP_VS_SVC_F_MATCH) {
+        err = dp_vs_match_parse(user->srange, user->drange,
+                                user->iifname, user->oifname, 
+                                user->af, &conf->match);
+        if (err != EDPVS_OK)
+            return err;
+        if (conf->match.af && !conf->af)
+            conf->af = conf->match.af;
+        if ((conf->match.af != AF_INET) && (conf->match.af != AF_INET6))
+            return EDPVS_NOTSUPP;
+    }
 
-    return err;
+    return EDPVS_OK;
 }
 
 static void dp_vs_copy_udest_compat(struct dp_vs_dest_conf *udest,
@@ -926,6 +899,11 @@ static int gratuitous_arp_send_vip(struct in_addr *vip)
     return EDPVS_NOTEXIST;
 }
 
+static inline int set_opt_so2msg(sockoptid_t opt)
+{
+    return opt - SOCKOPT_SVC_BASE + MSG_TYPE_SVC_SET_BASE;
+}
+
 static int dp_vs_set_svc(sockoptid_t opt, const void *user, size_t len)
 {
     int ret;
@@ -936,18 +914,36 @@ static int dp_vs_set_svc(sockoptid_t opt, const void *user, size_t len)
     struct dp_vs_dest_user *udest_compat;
     struct dp_vs_dest_conf udest;
     struct in_addr *vip;
+    lcoreid_t cid = rte_lcore_id();
 
-    if (opt == DPVS_SO_SET_GRATARP){
+    if (opt == DPVS_SO_SET_GRATARP && cid == rte_get_master_lcore()){
         vip = (struct in_addr *)user;
         return gratuitous_arp_send_vip(vip);
     }
+ 
+    // send to slave core
+    if (cid == rte_get_master_lcore()) {
+        struct dpvs_msg *msg;
+
+        msg = msg_make(set_opt_so2msg(opt), 0, DPVS_MSG_MULTICAST, cid, len, user);
+        if (!msg)
+            return EDPVS_NOMEM;
+
+        ret = multicast_msg_send(msg, 0, NULL);
+        /* go on in master core, not return */
+        if (ret != EDPVS_OK)
+            RTE_LOG(ERR, SERVICE, "[%s] fail to send multicast message\n", __func__);
+        msg_destroy(&msg);
+    }
+
     if (opt == DPVS_SO_SET_FLUSH)
-        return dp_vs_flush();
+        return dp_vs_flush(cid);
 
     memcpy(arg, user, len);
     usvc_compat = (struct dp_vs_service_user *)arg;
     udest_compat = (struct dp_vs_dest_user *)(usvc_compat + 1);
 
+    memset(&usvc, 0, sizeof(usvc));
     ret = dp_vs_copy_usvc_compat(&usvc, usvc_compat);
     if (ret != EDPVS_OK)
         return ret;
@@ -957,7 +953,7 @@ static int dp_vs_set_svc(sockoptid_t opt, const void *user, size_t len)
            !usvc.fwmark && !usvc.port &&
            is_empty_match(&usvc.match)
           ) {
-            return dp_vs_zero_all();
+            return dp_vs_zero_all(cid);
         }
     }
 
@@ -969,11 +965,11 @@ static int dp_vs_set_svc(sockoptid_t opt, const void *user, size_t len)
 
     if (!inet_is_addr_any(usvc.af, &usvc.addr) || usvc.port)
         svc = __dp_vs_service_get(usvc.af, usvc.protocol,
-                                  &usvc.addr, usvc.port);
+                                  &usvc.addr, usvc.port, cid);
     else if (usvc.fwmark)
-        svc = __dp_vs_svc_fwm_get(usvc.af, usvc.fwmark);
+        svc = __dp_vs_svc_fwm_get(usvc.af, usvc.fwmark, cid);
     else if (!is_empty_match(&usvc.match))
-        svc = __dp_vs_svc_match_find(usvc.af, usvc.protocol, &usvc.match);
+        svc = __dp_vs_svc_match_find(usvc.af, usvc.protocol, &usvc.match, cid);
     else {
         RTE_LOG(ERR, SERVICE, "%s: empty service.\n", __func__);
         return EDPVS_INVAL;
@@ -981,8 +977,6 @@ static int dp_vs_set_svc(sockoptid_t opt, const void *user, size_t len)
 
     if(opt != DPVS_SO_SET_ADD &&
             (svc == NULL || svc->proto != usvc.protocol)){
-        if (svc)
-            dp_vs_service_put(svc);
         return EDPVS_INVAL;
     }
 
@@ -991,15 +985,13 @@ static int dp_vs_set_svc(sockoptid_t opt, const void *user, size_t len)
             if(svc != NULL)
                 ret = EDPVS_EXIST;
             else
-                ret = dp_vs_add_service(&usvc, &svc);
+                ret = dp_vs_add_service(&usvc, &svc, cid);
             break;
         case DPVS_SO_SET_EDIT:
             ret = dp_vs_edit_service(svc, &usvc);
             break;
         case DPVS_SO_SET_DEL:
             ret = dp_vs_del_service(svc);
-            // reset svc to avoid use after free
-            svc = NULL;
             break;
         case DPVS_SO_SET_ZERO:
             ret = dp_vs_zero_service(svc);
@@ -1020,15 +1012,197 @@ static int dp_vs_set_svc(sockoptid_t opt, const void *user, size_t len)
             ret = EDPVS_INVAL;
     }
 
-    if(svc)
-        dp_vs_service_put(svc);
     return ret;
 }
 
+/*
+ * for example : SOCKOPT_SVC_BASE is 200, SOCKOPT_SVC_GET_CMD_MAX is 204, 
+ * old_opt 205 means core 1 get opt 200 
+ */
+static inline void opt2cpu(sockoptid_t old_opt, sockoptid_t *new_opt, lcoreid_t *cid)
+{
+    assert(old_opt >= SOCKOPT_SVC_BASE);
+    assert(old_opt <= SOCKOPT_SVC_MAX);
+
+    *new_opt = (old_opt - SOCKOPT_SVC_BASE)%(SOCKOPT_SVC_GET_CMD_MAX - SOCKOPT_SVC_BASE + 1)
+               + SOCKOPT_SVC_BASE;
+    *cid     = (old_opt - SOCKOPT_SVC_BASE)/(SOCKOPT_SVC_GET_CMD_MAX - SOCKOPT_SVC_BASE + 1);
+}
+
+/* copy service/dest/stats */
+static int dp_vs_copy_percore_svcs_stats(struct dp_vs_get_services *master_svcs, 
+                                         struct dp_vs_get_services *slave_svcs)
+{
+    int i;
+    if (master_svcs->num_services != slave_svcs->num_services)
+        return EDPVS_INVAL;
+    for (i = 0; i < master_svcs->num_services; i++) 
+        dp_vs_add_stats(&master_svcs->entrytable[i].stats, &slave_svcs->entrytable[i].stats);
+
+    return EDPVS_OK;
+}
+
+//dest should not be changed during get msg
+static int dp_vs_copy_percore_dests_stats(struct dp_vs_get_dests *master_dests,
+                                          struct dp_vs_get_dests *slave_dests)
+{
+    int i;
+    if (master_dests->num_dests != slave_dests->num_dests)
+        return EDPVS_INVAL;
+    for (i = 0; i < master_dests->num_dests; i++) {
+        master_dests->entrytable[i].actconns += slave_dests->entrytable[i].actconns;
+        master_dests->entrytable[i].inactconns += slave_dests->entrytable[i].inactconns;
+        master_dests->entrytable[i].persistconns += slave_dests->entrytable[i].persistconns;
+        dp_vs_add_stats(&master_dests->entrytable[i].stats, &slave_dests->entrytable[i].stats);
+    }
+
+    return EDPVS_OK;
+}
+
+static int dp_vs_get_services_uc_cb(struct dpvs_msg *msg)
+{
+    lcoreid_t cid = rte_lcore_id();
+    size_t size;
+    struct dp_vs_get_services *get, *output;
+    int ret;
+
+    /* service may be changed */    
+    get = (struct dp_vs_get_services *)msg->data;
+    if (get->num_services != rte_atomic16_read(&dp_vs_num_services[cid])) {
+        RTE_LOG(ERR, SERVICE, "%s: svc number %d not match %d in cid=%d.\n",
+        __func__, get->num_services, rte_atomic16_read(&dp_vs_num_services[cid]), cid);
+        return EDPVS_INVAL;
+    }
+
+    size = sizeof(*get) + sizeof(struct dp_vs_service_entry) * get->num_services;
+    output = rte_zmalloc("get_services", size, 0);
+    if (output == NULL)
+        return EDPVS_NOMEM;
+    ret = dp_vs_get_service_entries(get->num_services, output, cid);
+    if (ret != EDPVS_OK) {
+        rte_free(output);
+        return ret;
+    }
+    msg->reply.len = size;
+    msg->reply.data = (void *)output;
+    return EDPVS_OK;
+}
+
+static struct dp_vs_service *
+dp_vs_get_service_lcore(const struct dp_vs_service_entry *entry,
+                                              lcoreid_t cid)
+{
+    struct dp_vs_service *svc = NULL;
+    int ret;
+
+    if(entry->fwmark)
+        svc = __dp_vs_svc_fwm_get(AF_INET, entry->fwmark, cid);
+    else if (!inet_is_addr_any(entry->af, &entry->addr) || entry->port)
+        svc = __dp_vs_service_get(entry->af, entry->proto,
+                                  &entry->addr, entry->port, cid);
+    else {
+        struct dp_vs_match match;
+
+        ret = dp_vs_match_parse(entry->srange, entry->drange,
+                                entry->iifname, entry->oifname,
+                                entry->af, &match);
+        if (ret != EDPVS_OK)
+            return NULL;
+
+        if (!is_empty_match(&match)) {
+            svc = __dp_vs_svc_match_find(match.af, entry->proto,
+                                         &match, cid);
+        }
+    }
+
+    return svc;
+}
+
+static int dp_vs_get_service_uc_cb(struct dpvs_msg *msg)
+{
+    lcoreid_t cid = rte_lcore_id();
+    struct dp_vs_service_entry *entry;
+    struct dp_vs_service *svc;
+    int ret, size;
+
+    entry = (struct dp_vs_service_entry *)msg->data;
+    svc = dp_vs_get_service_lcore(entry, cid);
+    if (!svc)
+        return EDPVS_NOTEXIST;
+
+    size = sizeof(struct dp_vs_service_entry);   
+    entry = rte_zmalloc("get_service", size, 0);
+    if (entry == NULL)
+        return EDPVS_NOMEM;
+
+    ret = dp_vs_copy_service(entry, svc);
+    if (ret != EDPVS_OK) {
+        rte_free(entry);
+        return ret;
+    }
+    msg->reply.len = size;
+    msg->reply.data = (void *)entry;
+    return EDPVS_OK;
+}
+
+static int dp_vs_get_dests_uc_cb(struct dpvs_msg *msg)
+{
+    lcoreid_t cid = rte_lcore_id();
+    int ret;
+    size_t size;
+    struct dp_vs_get_dests *get, *output;
+    struct dp_vs_service *svc;
+    struct dp_vs_service_entry entry; // to get svc
+
+    memset(&entry, 0, sizeof(entry));
+    get = (struct dp_vs_get_dests *)msg->data;
+    entry.addr    = get->addr;
+    entry.af      = get->af;
+    entry.fwmark  = get->fwmark;
+    entry.port    = get->port;
+    entry.proto   = get->proto;
+    rte_memcpy(entry.srange, get->srange, sizeof(get->srange));
+    rte_memcpy(entry.drange, get->drange, sizeof(get->drange));
+    rte_memcpy(entry.iifname, get->iifname, sizeof(get->iifname));
+    rte_memcpy(entry.oifname, get->oifname, sizeof(get->oifname));
+
+    svc = dp_vs_get_service_lcore(&entry, cid);
+    if (!svc)
+        return EDPVS_NOTEXIST;
+    if (svc->num_dests != get->num_dests) {
+        RTE_LOG(ERR, SERVICE, "%s: dests number not match in cid=%d.\n", __func__, cid);
+        return EDPVS_INVAL;
+    }
+
+    size = sizeof(*get) + sizeof(struct dp_vs_dest_entry) * (svc->num_dests);
+    output = rte_zmalloc("get_dests", size, 0);
+    if (output == NULL)
+        return EDPVS_NOMEM;
+    rte_memcpy(output, get, sizeof(*get));
+    ret = dp_vs_get_dest_entries(svc, output);
+    if (ret != EDPVS_OK) {
+        rte_free(output);
+        return ret;
+    }
+
+    msg->reply.len = size;
+    msg->reply.data = (void *)output;
+    return EDPVS_OK;
+}
+
 static int dp_vs_get_svc(sockoptid_t opt, const void *user, size_t len, void **out, size_t *outlen)
 {
     int ret = 0;
-    switch (opt){
+    uint8_t num_lcores = 0;
+    lcoreid_t cid;
+    sockoptid_t new_opt;
+
+    netif_get_slave_lcores(&num_lcores, NULL);
+    opt2cpu(opt, &new_opt, &cid);
+    if (cid > num_lcores || new_opt > SOCKOPT_SVC_MAX)
+        return EDPVS_INVAL; 
+
+    switch (new_opt){
         case DPVS_SO_GET_VERSION:
             {
                 char *buf = rte_zmalloc("info",64,0);
@@ -1037,7 +1211,7 @@ static int dp_vs_get_svc(sockoptid_t opt, const void *user, size_t len, void **o
                 sprintf(buf,"DPDK-FULLNAT Server version 1.1.4 (size=0)");
                 *out = buf;
                 *outlen = 64;
-                break;
+                return EDPVS_OK;
             }
         case DPVS_SO_GET_INFO:
             {
@@ -1047,82 +1221,180 @@ static int dp_vs_get_svc(sockoptid_t opt, const void *user, size_t len, void **o
                     return EDPVS_NOMEM;
                 info->version = 0;
                 info->size = 0;
-                info->num_services = dp_vs_num_services;
+                info->num_services = rte_atomic16_read(&dp_vs_num_services[cid]);
+                info->num_lcores = num_lcores;
                 *out = info;
                 *outlen = sizeof(struct dp_vs_getinfo);
-                break;
+                return EDPVS_OK;
             }
         case DPVS_SO_GET_SERVICES:
             {
-                struct dp_vs_get_services *get, *output;
+                struct dp_vs_get_services *get, *get_msg, *output;
+                struct dpvs_msg *msg, *cur;
+                struct dpvs_multicast_queue *reply = NULL;
                 int size;
+
                 get = (struct dp_vs_get_services *)user;
                 size = sizeof(*get) + \
                        sizeof(struct dp_vs_service_entry) * (get->num_services);
-                if(len != sizeof(*get)){
+                if (len != sizeof(*get)){
                     *outlen = 0;
                     return EDPVS_INVAL;
                 }
-                output = rte_zmalloc("get_services", size, 0);
-                if (unlikely(NULL == output))
+
+                /* get slave core svc */
+                msg = msg_make(MSG_TYPE_SVC_GET_SERVICES, 0, DPVS_MSG_MULTICAST, rte_lcore_id(),
+                               size, user);
+                if (!msg) {
                     return EDPVS_NOMEM;
-                memcpy(output, get, sizeof(*get));
-                ret = dp_vs_get_service_entries(get, output);
-                *out = output;
-                *outlen = size;
+                }
+
+                ret = multicast_msg_send(msg, 0, &reply);
+                if (ret != EDPVS_OK) {
+                    msg_destroy(&msg);
+                    RTE_LOG(ERR, SERVICE, "%s: send message fail.\n", __func__);
+                    return EDPVS_MSG_FAIL;
+                }
+
+                if (cid == rte_get_master_lcore()) {
+                    output = rte_zmalloc("get_services", size, 0);
+                    if (unlikely(NULL == output)) {
+                        msg_destroy(&msg);
+                        return EDPVS_NOMEM;
+                    }
+                    rte_memcpy(output, get, sizeof(*get));
+                    ret = dp_vs_get_service_entries(get->num_services, output, cid);
+                    if (ret != EDPVS_OK) {
+                        msg_destroy(&msg);
+                        rte_free(output);
+                        return ret;
+                    }
+                    list_for_each_entry(cur, &reply->mq, mq_node) {
+                        get_msg = (struct dp_vs_get_services *)(cur->data);
+                        ret = dp_vs_copy_percore_svcs_stats(output, get_msg);
+                        if (ret != EDPVS_OK) {
+                            msg_destroy(&msg);
+                            rte_free(output);
+                            return ret; 
+                        }
+                    }
+                    *out = output;
+                    *outlen = size;
+                    msg_destroy(&msg);
+                    return EDPVS_OK;
+                } else {
+                    output = rte_zmalloc("get_services", size, 0);
+                    if (unlikely(NULL == output)) {
+                        msg_destroy(&msg);
+                        return EDPVS_NOMEM;
+                    }
+                    list_for_each_entry(cur, &reply->mq, mq_node) {
+                        get_msg = (struct dp_vs_get_services *)(cur->data);
+                        if (get_msg->cid == cid) {
+                            output = rte_zmalloc("get_services", size, 0);
+                            if (unlikely(NULL == output)) {
+                                msg_destroy(&msg);
+                                return EDPVS_NOMEM;
+                            }
+                            rte_memcpy(output, get_msg, size);
+                            *out = output;
+                            *outlen = size;
+                            msg_destroy(&msg);
+                            return EDPVS_OK;
+                        }
+                    }
+                    RTE_LOG(ERR, SERVICE, "%s: find no services for cid=%d.\n", __func__, cid);
+                    msg_destroy(&msg);
+                    rte_free(output);
+                    return EDPVS_NOTEXIST;
+                }
             }
-            break;
         case DPVS_SO_GET_SERVICE:
             {
-                struct dp_vs_service_entry *entry, *output;
+                struct dp_vs_service_entry *entry, *get_msg, *output;
+                struct dpvs_msg *msg, *cur;
+                struct dpvs_multicast_queue *reply = NULL;
                 struct dp_vs_service *svc = NULL;
-                union inet_addr addr;
 
                 entry = (struct dp_vs_service_entry *)user;
-                addr = entry->addr;
-                if(entry->fwmark)
-                    svc = __dp_vs_svc_fwm_get(AF_INET, entry->fwmark);
-                else if (!inet_is_addr_any(entry->af, &entry->addr) || entry->port)
-                    svc = __dp_vs_service_get(entry->af, entry->proto,
-                                              &addr, entry->port);
-                else {
-                    struct dp_vs_match match;
-
-                    ret = dp_vs_match_parse(entry->srange, entry->drange,
-                                            entry->iifname, entry->oifname,
-                                            &match);
-                    if (ret != EDPVS_OK)
-                        return ret;
 
-                    if (!is_empty_match(&match)) {
-                        svc = __dp_vs_svc_match_find(match.af, entry->proto,
-                                                     &match);
+                /* get slave core svc */
+                msg = msg_make(MSG_TYPE_SVC_GET_SERVICE, 0, DPVS_MSG_MULTICAST, rte_lcore_id(),
+                               sizeof(struct dp_vs_service_entry), user);
+                if (!msg)
+                    return EDPVS_NOMEM;
+
+                ret = multicast_msg_send(msg, 0, &reply);
+                if (ret != EDPVS_OK) {
+                    msg_destroy(&msg);
+                    RTE_LOG(ERR, SERVICE, "%s: send message fail.\n", __func__);
+                    return EDPVS_MSG_FAIL;
+                }    
+
+                if (cid == rte_get_master_lcore()) {
+                    svc = dp_vs_get_service_lcore(entry, cid);
+                    if (!svc) {
+                        msg_destroy(&msg);
+                        return EDPVS_NOTEXIST;
                     }
-                }
 
-                if (!svc) {
-                    *outlen = 0;
-                    return EDPVS_NOTEXIST;
-                }
+                    output = rte_zmalloc("get_service",
+                                          sizeof(struct dp_vs_service_entry), 0);
+                    if (output == NULL) {
+                        msg_destroy(&msg);
+                        return EDPVS_NOTEXIST;
+                    }
+                    memcpy(output, entry, sizeof(struct dp_vs_service_entry));
+                    ret = dp_vs_copy_service(output, svc);
+                    if (ret != EDPVS_OK) {
+                        msg_destroy(&msg);
+                        rte_free(output);
+                        return ret;
+                    }
 
-                output = rte_zmalloc("get_service",
-                                     sizeof(struct dp_vs_service_entry), 0);
-                if (unlikely(NULL == output)) {
-                    dp_vs_service_put(svc);
-                    return EDPVS_NOMEM;
+                    list_for_each_entry(cur, &reply->mq, mq_node) {
+                        get_msg = (struct dp_vs_service_entry *)(cur->data);
+                        ret = dp_vs_add_stats(&output->stats, &get_msg->stats);
+                        if (ret != EDPVS_OK) {
+                            msg_destroy(&msg);
+                            rte_free(output);
+                            return ret;
+                        }
+                    }
+                    *out = output;
+                    *outlen = sizeof(struct dp_vs_service_entry);
+                    msg_destroy(&msg);
+                    return EDPVS_OK;
+                } else {
+                    output = rte_zmalloc("get_service",
+                                         sizeof(struct dp_vs_service_entry), 0);
+                    if (!output) {
+                        msg_destroy(&msg);
+                        return EDPVS_NOTEXIST;
+                    }
+                    list_for_each_entry(cur, &reply->mq, mq_node) {
+                        get_msg = (struct dp_vs_service_entry *)(cur->data);
+                        if (cid == get_msg->cid) {
+                            rte_memcpy(output, get_msg, sizeof(struct dp_vs_service_entry));
+                            *out = output;
+                            *outlen = sizeof(struct dp_vs_service_entry);
+                            msg_destroy(&msg);
+                            return EDPVS_OK;
+                        }
+                    }
+                    RTE_LOG(ERR, SERVICE, "%s: find no service for cid=%d.\n", __func__, cid);
+                    msg_destroy(&msg);
+                    rte_free(output);
+                    return EDPVS_NOTEXIST; 
                 }
-                memcpy(output, entry, sizeof(struct dp_vs_service_entry));
-                ret = dp_vs_copy_service(output, svc);
-                dp_vs_service_put(svc);
-                *out = output;
-                *outlen = sizeof(struct dp_vs_service_entry);
             }
-            break;
         case DPVS_SO_GET_DESTS:
             {
                 struct dp_vs_service *svc = NULL;
-                union inet_addr addr;
-                struct dp_vs_get_dests *get, *output;
+                struct dp_vs_get_dests *get, *get_msg, *output;
+                struct dpvs_msg *msg, *cur;
+                struct dpvs_multicast_queue *reply = NULL;
+                struct dp_vs_service_entry entry; // to get svc
                 int size;
                 get = (struct dp_vs_get_dests *)user;
                 size = sizeof(*get) + sizeof(struct dp_vs_dest_entry) * get->num_dests;
@@ -1130,54 +1402,92 @@ static int dp_vs_get_svc(sockoptid_t opt, const void *user, size_t len, void **o
                     *outlen = 0;
                     return EDPVS_INVAL;
                 }
-                addr = get->addr;
-                output = rte_zmalloc("get_services", size, 0);
-                if (unlikely(NULL == output))
+
+                entry.addr    = get->addr;
+                entry.af      = get->af;
+                entry.fwmark  = get->fwmark;
+                entry.port    = get->port;
+                entry.proto   = get->proto;
+                rte_memcpy(entry.srange, get->srange, sizeof(get->srange));
+                rte_memcpy(entry.drange, get->drange, sizeof(get->drange));
+                rte_memcpy(entry.iifname, get->iifname, sizeof(get->iifname));
+                rte_memcpy(entry.oifname, get->oifname, sizeof(get->oifname));
+
+                /* get slave core svc */
+                msg = msg_make(MSG_TYPE_SVC_GET_DESTS, 0, DPVS_MSG_MULTICAST, rte_lcore_id(),
+                               sizeof(struct dp_vs_get_dests), user);
+                if (!msg)
                     return EDPVS_NOMEM;
-                memcpy(output, get, sizeof(*get));
-
-                if(get->fwmark)
-                    svc = __dp_vs_svc_fwm_get(get->af, get->fwmark);
-                else if (!inet_is_addr_any(get->af, &addr) || get->port)
-                    svc = __dp_vs_service_get(get->af, get->proto, &addr,
-                                              get->port);
-                else {
-                    struct dp_vs_match match;
-
-                    ret = dp_vs_match_parse(get->srange, get->drange,
-                                            get->iifname, get->oifname,
-                                            &match);
+                    
+                ret = multicast_msg_send(msg, 0, &reply);
+                if (ret != EDPVS_OK) {
+                    msg_destroy(&msg);
+                    RTE_LOG(ERR, SERVICE, "%s: send message fail.\n", __func__);
+                    return EDPVS_MSG_FAIL;
+                }
+ 
+                if (cid == rte_get_master_lcore()) {
+                    svc = dp_vs_get_service_lcore(&entry, cid);
+                    if (!svc) {
+                        msg_destroy(&msg);
+                        return EDPVS_NOTEXIST;
+                    }
+                    if (svc->num_dests != get->num_dests) {
+                        RTE_LOG(ERR, SERVICE, "%s: dests number not match in cid=%d.\n", __func__, cid);
+                        msg_destroy(&msg);
+                        return EDPVS_INVAL;
+                    }
+                    output = rte_zmalloc("get_dests", size, 0);
+                    if (!output) {
+                        msg_destroy(&msg);
+                        return EDPVS_NOMEM;
+                    }
+                    rte_memcpy(output, get, sizeof(get));
+                    ret = dp_vs_get_dest_entries(svc, output);
                     if (ret != EDPVS_OK) {
+                        msg_destroy(&msg);
                         rte_free(output);
                         return ret;
                     }
 
-                    if (!is_empty_match(&match)) {
-                        svc = __dp_vs_svc_match_find(match.af, get->proto,
-                                                     &match);
+                    list_for_each_entry(cur, &reply->mq, mq_node) {
+                        get_msg = (struct dp_vs_get_dests *)(cur->data);
+                        ret = dp_vs_copy_percore_dests_stats(output, get_msg);
+                        if (ret != EDPVS_OK) {
+                            msg_destroy(&msg);
+                            rte_free(output);
+                            return ret;
+                        }
                     }
+                    *out = output;
+                    *outlen = size;
+                    msg_destroy(&msg);
+                    return EDPVS_OK;
+                } else {
+                    output = rte_zmalloc("get_dests", size, 0);
+                    if (!output) {
+                        msg_destroy(&msg);
+                        return EDPVS_NOMEM;
+                    }
+                    list_for_each_entry(cur, &reply->mq, mq_node) {
+                        get_msg = (struct dp_vs_get_dests *)(cur->data);
+                        if (cid == get_msg->cid) {
+                            rte_memcpy(output, get_msg, size);
+                            *out = output;
+                            *outlen = size;
+                            msg_destroy(&msg);
+                            return EDPVS_OK;
+                        }
+                    }
+                    RTE_LOG(ERR, SERVICE, "%s: find no dests for cid=%d.\n", __func__, cid);
+                    msg_destroy(&msg);
+                    rte_free(output);
+                    return EDPVS_NOTEXIST;
                 }
-
-                if (!svc)
-                    ret = EDPVS_NOTEXIST;
-                else {
-                    ret = dp_vs_get_dest_entries(svc, get, output);
-                    dp_vs_service_put(svc);
-                }
-                *out = output;
-                *outlen = size;
             }
-            break;
         default:
             return EDPVS_INVAL;
     }
-    
-    if (ret != EDPVS_OK) {
-        if (*out)
-            rte_free(*out);
-    }
-
-    return ret; 
 }
 
 struct dpvs_sockopts sockopts_svc = {
@@ -1186,27 +1496,208 @@ struct dpvs_sockopts sockopts_svc = {
     .set_opt_max    = SOCKOPT_SVC_SET_CMD_MAX,
     .set            = dp_vs_set_svc,
     .get_opt_min    = SOCKOPT_SVC_BASE,
-    .get_opt_max    = SOCKOPT_SVC_GET_CMD_MAX,
+    .get_opt_max    = SOCKOPT_SVC_MAX,
     .get            = dp_vs_get_svc,
 };
 
+static int flush_msg_cb(struct dpvs_msg *msg)
+{
+    
+    return dp_vs_set_svc(DPVS_SO_SET_FLUSH, msg->data, msg->len);
+}
+
+static int zero_msg_cb(struct dpvs_msg *msg)
+{
+    return dp_vs_set_svc(DPVS_SO_SET_ZERO, msg->data, msg->len);
+}
+
+static int add_msg_cb(struct dpvs_msg *msg)
+{
+    return dp_vs_set_svc(DPVS_SO_SET_ADD, msg->data, msg->len);
+}
+
+static int edit_msg_cb(struct dpvs_msg *msg)
+{
+    return dp_vs_set_svc(DPVS_SO_SET_EDIT, msg->data, msg->len);
+}
+
+static int del_msg_cb(struct dpvs_msg *msg)
+{
+    return dp_vs_set_svc(DPVS_SO_SET_DEL, msg->data, msg->len);
+}
+
+static int adddest_msg_cb(struct dpvs_msg *msg)
+{
+    return dp_vs_set_svc(DPVS_SO_SET_ADDDEST, msg->data, msg->len);
+}
+
+static int editdest_msg_cb(struct dpvs_msg *msg)
+{
+    return dp_vs_set_svc(DPVS_SO_SET_EDITDEST, msg->data, msg->len);
+}
+
+static int deldest_msg_cb(struct dpvs_msg *msg)
+{
+    return dp_vs_set_svc(DPVS_SO_SET_DELDEST, msg->data, msg->len);
+}
+
 int dp_vs_service_init(void)
 {
-    int idx;
-    for (idx = 0; idx < DP_VS_SVC_TAB_SIZE; idx++) {
-        INIT_LIST_HEAD(&dp_vs_svc_table[idx]);
-        INIT_LIST_HEAD(&dp_vs_svc_fwm_table[idx]);
+    int idx, cid, err;
+    struct dpvs_msg_type msg_type;
+
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        for (idx = 0; idx < DP_VS_SVC_TAB_SIZE; idx++) {
+            INIT_LIST_HEAD(&dp_vs_svc_table[cid][idx]);
+            INIT_LIST_HEAD(&dp_vs_svc_fwm_table[cid][idx]);
+        }
+        INIT_LIST_HEAD(&dp_vs_svc_match_list[cid]);
+        rte_atomic16_init(&dp_vs_num_services[cid]);
     }
-    INIT_LIST_HEAD(&dp_vs_svc_match_list);
-    rte_rwlock_init(&__dp_vs_svc_lock);
     dp_vs_dest_init();
     sockopt_register(&sockopts_svc);
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_SVC_SET_FLUSH;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = flush_msg_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+        RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+        return err;
+    }
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_SVC_SET_ZERO;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = zero_msg_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+        RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+        return err;
+    }
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_SVC_SET_ADD;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = add_msg_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+         RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+         return err;
+    }
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_SVC_SET_EDIT;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = edit_msg_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+         RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+         return err; 
+    }
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_SVC_SET_DEL;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = del_msg_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+         RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+         return err;
+    }
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_SVC_SET_ADDDEST;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = adddest_msg_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+         RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+         return err;
+    }
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_SVC_SET_EDITDEST;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = editdest_msg_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+         RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+         return err;
+    }
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_SVC_SET_DELDEST;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = deldest_msg_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+         RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+         return err;
+    }
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_SVC_GET_SERVICES;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = dp_vs_get_services_uc_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+         RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+         return err;
+    }
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_SVC_GET_SERVICE;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = dp_vs_get_service_uc_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+         RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+         return err;
+    }
+
+    memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
+    msg_type.type   = MSG_TYPE_SVC_GET_DESTS;
+    msg_type.mode   = DPVS_MSG_MULTICAST;
+    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.cid    = rte_lcore_id();
+    msg_type.unicast_msg_cb = dp_vs_get_dests_uc_cb;
+    err = msg_type_mc_register(&msg_type);
+    if (err != EDPVS_OK) {
+         RTE_LOG(ERR, SERVICE, "%s: fail to register msg.\n", __func__);
+         return err;
+    }
+
     return EDPVS_OK;
 }
 
 int dp_vs_service_term(void)
 {
-    dp_vs_flush();
+    int cid;
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        dp_vs_flush(cid);
+    }
     dp_vs_dest_term();
     return EDPVS_OK;
 }
diff --git a/src/ipvs/ip_vs_stats.c b/src/ipvs/ip_vs_stats.c
index 6598003a2..0ff01672f 100644
--- a/src/ipvs/ip_vs_stats.c
+++ b/src/ipvs/ip_vs_stats.c
@@ -31,7 +31,7 @@
 static struct dp_vs_stats dpvs_stats[DPVS_MAX_LCORE];
 static struct dp_vs_estats dpvs_estats[DPVS_MAX_LCORE];
 
-static void __dp_vs_stats_clear(struct dp_vs_stats *stats)
+void dp_vs_stats_clear(struct dp_vs_stats *stats)
 {
     stats->conns    = 0;
     stats->inpkts   = 0;
@@ -40,179 +40,20 @@ static void __dp_vs_stats_clear(struct dp_vs_stats *stats)
     stats->outbytes = 0;
 }
 
-void dp_vs_stats_clear(void)
+int dp_vs_add_stats(struct dp_vs_stats* dst, struct dp_vs_stats* src)
 {
-    uint8_t nlcore, i;
-    uint64_t lcore_mask;
-
-    /* get configured data-plane lcores */
-    netif_get_slave_lcores(&nlcore, &lcore_mask);
-
-    for (i = 0; i < DPVS_MAX_LCORE; i++) {
-        if (!(lcore_mask & (1L<<i)))
-            continue; /* unused */
-
-        __dp_vs_stats_clear(&dpvs_stats[i]);
-    }
-
-    return;
-}
-
-/*add this code for per core stats*/
-void dp_svc_stats_clear(struct dp_vs_stats *stats)
-{
-    uint8_t nlcore, i;
-    uint64_t lcore_mask;
-
-    if (NULL == stats)
-        return;
-
-    netif_get_slave_lcores(&nlcore, &lcore_mask);
-
-    for (i = 0; i < DPVS_MAX_LCORE; i++) {
-        if (!(lcore_mask & (1L<<i)))
-            continue;
-        __dp_vs_stats_clear(&stats[i]);
-    }
-}
-
-
-static struct dp_vs_stats* alloc_percpu_stats(void)
-{
-    uint8_t nlcore, i;
-    uint64_t lcore_mask;
-    struct dp_vs_stats* svc_stats;
-
-    netif_get_slave_lcores(&nlcore, &lcore_mask);
-    svc_stats = rte_zmalloc(NULL, sizeof(struct dp_vs_stats) * DPVS_MAX_LCORE,
-            RTE_CACHE_LINE_SIZE);
-    if (!svc_stats)
-        return NULL;
-
-    for (i = 0; i < DPVS_MAX_LCORE; i++) {
-        if (!(lcore_mask & (1L<<i)))
-            continue;
-        __dp_vs_stats_clear(&svc_stats[i]);
-    }
-
-    return svc_stats;
-}
-
-int dp_vs_new_stats(struct dp_vs_stats **p)
-{
-    *p = alloc_percpu_stats();
-    if (NULL == *p) {
-        RTE_LOG(WARNING, SERVICE, "%s: no memory!\n", __func__);
-        return EDPVS_NOMEM;
-    }
-    return EDPVS_OK;
-}
-
-void dp_vs_del_stats(struct dp_vs_stats *p)
-{
-    if (p)
-        rte_free(p);
-}
-
-void dp_vs_zero_stats(struct dp_vs_stats* stats)
-{
-    uint8_t nlcore, i;
-    uint64_t lcore_mask;
-
-    netif_get_slave_lcores(&nlcore,&lcore_mask);
-
-    for (i = 0; i < DPVS_MAX_LCORE; i++) {
-        if (!(lcore_mask & (1L<<i)))
-            continue;
-        __dp_vs_stats_clear(&stats[i]);
-    }
-    return;
-}
-
-static int get_stats_uc_cb(struct dpvs_msg *msg)
-{
-    char *reply;
-    struct dp_vs_stats **src;
-    lcoreid_t cid;
-    assert(msg);
-    cid = rte_lcore_id();
-    if (msg->len != sizeof(struct dp_vs_stats *)) {
-        RTE_LOG(ERR, SERVICE, "%s: bad message.\n", __func__);
-        return EDPVS_INVAL;
-    }
-    src = (struct dp_vs_stats **)msg->data;
-
-    reply = msg_reply_alloc(sizeof(struct dp_vs_stats));
-    if (unlikely(!reply))
-        return EDPVS_NOMEM;
-    rte_memcpy(reply, &((*src)[cid]), sizeof(struct dp_vs_stats));
-    msg->reply.len = sizeof(struct dp_vs_stats);
-    msg->reply.data = (void *)reply;
+    dst->conns    += src->conns;
+    dst->inpkts   += src->inpkts;
+    dst->inbytes  += src->inbytes;
+    dst->outbytes += src->outbytes;
+    dst->outpkts  += src->outpkts;
     return EDPVS_OK;
 }
 
-int dp_vs_copy_stats(struct dp_vs_stats* dst, struct dp_vs_stats* src)
-{
-    struct dpvs_msg *msg;
-    struct dpvs_multicast_queue *reply=NULL;
-    struct dpvs_msg *cur;
-    struct dp_vs_stats *per_stats;
-    int err;
-
-    if (!src)
-        return EDPVS_INVAL;
-
-    msg = msg_make(MSG_TYPE_STATS_GET, 0, DPVS_MSG_MULTICAST, rte_lcore_id(),
-            sizeof(struct dp_vs_stats *), &src);
-    if (!msg) {
-        return EDPVS_NOMEM;
-    }
-    err = multicast_msg_send(msg, 0, &reply);
-    if (err != EDPVS_OK) {
-        msg_destroy(&msg);
-        RTE_LOG(ERR, SERVICE, "%s: send message fail.\n", __func__);
-        return err;
-    }
-    list_for_each_entry(cur, &reply->mq, mq_node) {
-        per_stats = (struct dp_vs_stats *)(cur->data);
-        dst->conns += per_stats->conns;
-        dst->inpkts += per_stats->inpkts;
-        dst->inbytes += per_stats->inbytes;
-        dst->outbytes += per_stats->outbytes;
-        dst->outpkts += per_stats->outpkts;
-    }
-    msg_destroy(&msg);
-    return EDPVS_OK;
-}
-
-static void register_stats_cb(void)
-{
-    struct dpvs_msg_type mt;
-    memset(&mt, 0 ,sizeof(mt));
-    mt.type = MSG_TYPE_STATS_GET;
-    mt.prio = MSG_PRIO_LOW;
-    mt.unicast_msg_cb = get_stats_uc_cb;
-    mt.multicast_msg_cb = NULL;
-    assert(msg_type_mc_register(&mt) == 0);
-}
-
-static void unregister_stats_cb(void)
-{
-    struct dpvs_msg_type mt;
-    memset(&mt, 0, sizeof(mt));
-    mt.type = MSG_TYPE_STATS_GET;
-    mt.prio = MSG_PRIO_LOW;
-    mt.unicast_msg_cb = get_stats_uc_cb;
-    mt.multicast_msg_cb = NULL;
-    assert(msg_type_mc_unregister(&mt) == 0);
-}
-
 int dp_vs_stats_in(struct dp_vs_conn *conn, struct rte_mbuf *mbuf)
 {
     assert(conn && mbuf);
     struct dp_vs_dest *dest = conn->dest;
-    lcoreid_t cid;
-    cid = rte_lcore_id();
 
     if (dest && (dest->flags & DPVS_DEST_F_AVAILABLE)) {
         /*limit rate*/
@@ -222,8 +63,8 @@ int dp_vs_stats_in(struct dp_vs_conn *conn, struct rte_mbuf *mbuf)
                         ? EDPVS_OVERLOAD : EDPVS_OK;
         }
 
-        dest->stats[cid].inpkts++;
-        dest->stats[cid].inbytes += mbuf->pkt_len;
+        dest->stats.inpkts++;
+        dest->stats.inbytes += mbuf->pkt_len;
     }
 
 #ifdef CONFIG_DPVS_IPVS_STATS_DEBUG
@@ -240,8 +81,6 @@ int dp_vs_stats_out(struct dp_vs_conn *conn, struct rte_mbuf *mbuf)
 {
     assert(conn && mbuf);
     struct dp_vs_dest *dest = conn->dest;
-    lcoreid_t cid;
-    cid = rte_lcore_id();
 
     if (dest && (dest->flags & DPVS_DEST_F_AVAILABLE)) {
         /*limit rate*/
@@ -251,8 +90,8 @@ int dp_vs_stats_out(struct dp_vs_conn *conn, struct rte_mbuf *mbuf)
             ? EDPVS_OVERLOAD : EDPVS_OK;
         }
 
-        dest->stats[cid].outpkts++;
-        dest->stats[cid].outbytes += mbuf->pkt_len;
+        dest->stats.outpkts++;
+        dest->stats.outbytes += mbuf->pkt_len;
     }
 
 #ifdef CONFIG_DPVS_IPVS_STATS_DEBUG
@@ -268,10 +107,8 @@ int dp_vs_stats_out(struct dp_vs_conn *conn, struct rte_mbuf *mbuf)
 void dp_vs_stats_conn(struct dp_vs_conn *conn)
 {
     assert(conn && conn->dest);
-    lcoreid_t cid;
 
-    cid = rte_lcore_id();
-    conn->dest->stats[cid].conns++;
+    conn->dest->stats.conns++;
     this_dpvs_stats.conns++;
 }
 
@@ -292,14 +129,12 @@ uint64_t dp_vs_estats_get(enum dp_vs_estats_type field)
 
 int dp_vs_stats_init(void)
 {
-    dp_vs_stats_clear();
+    dp_vs_estats_clear();
     srand(rte_rdtsc());
-    register_stats_cb();
     return EDPVS_OK;
 }
 
 int dp_vs_stats_term(void)
 {
-    unregister_stats_cb();
     return EDPVS_OK;
 }
diff --git a/src/ipvs/ip_vs_synproxy.c b/src/ipvs/ip_vs_synproxy.c
index 0be5c8c1c..bf08fc197 100644
--- a/src/ipvs/ip_vs_synproxy.c
+++ b/src/ipvs/ip_vs_synproxy.c
@@ -689,26 +689,21 @@ int dp_vs_synproxy_syn_rcv(int af, struct rte_mbuf *mbuf,
         goto syn_rcv_out;
 
     if (th->syn && !th->ack && !th->rst && !th->fin &&
-            (svc = dp_vs_service_lookup(af, iph->proto,
-                                        &iph->daddr, th->dest, 0, NULL, NULL, NULL)) &&
+            (svc = dp_vs_service_lookup(af, iph->proto, &iph->daddr, th->dest, 0,
+                                        NULL, NULL, NULL, rte_lcore_id())) &&
             (svc->flags & DP_VS_SVC_F_SYNPROXY)) {
         /* if service's weight is zero (non-active realserver),
          * do noting and drop the packet */
         if (svc->weight == 0) {
             dp_vs_estats_inc(SYNPROXY_NO_DEST);
-            dp_vs_service_put(svc);
             goto syn_rcv_out;
         }
 
-        dp_vs_service_put(svc);
-
         /* drop packet from blacklist */
         if (dp_vs_blklst_lookup(iph->proto, &iph->daddr, th->dest, &iph->saddr)) {
             goto syn_rcv_out;
         }
     } else {
-        if (svc)
-            dp_vs_service_put(svc);
         return 1;
     }
 
@@ -961,14 +956,13 @@ int dp_vs_synproxy_ack_rcv(int af, struct rte_mbuf *mbuf,
     /* Do not check svc syn-proxy flag, as it may be changed after syn-proxy step 1. */
     if (!th->syn && th->ack && !th->rst && !th->fin &&
             (svc = dp_vs_service_lookup(af, iph->proto, &iph->daddr,
-                                        th->dest, 0, NULL, NULL, NULL))) {
+                           th->dest, 0, NULL, NULL, NULL, rte_lcore_id()))) {
         if (dp_vs_synproxy_ctrl_defer &&
                 !syn_proxy_ack_has_data(mbuf, iph, th)) {
             /* Update statistics */
             dp_vs_estats_inc(SYNPROXY_NULL_ACK);
             /* We get a pure ack when expecting ack packet with payload, so
              * have to drop it */
-            dp_vs_service_put(svc);
             *verdict = INET_DROP;
             return 0;
         }
@@ -985,7 +979,6 @@ int dp_vs_synproxy_ack_rcv(int af, struct rte_mbuf *mbuf,
             /* Cookie check failed, drop the packet */
             RTE_LOG(DEBUG, IPVS, "%s: syn_cookie check failed seq=%u\n", __func__,
                     ntohl(th->ack_seq) - 1);
-            dp_vs_service_put(svc);
             *verdict = INET_DROP;
             return 0;
         }
@@ -1000,14 +993,10 @@ int dp_vs_synproxy_ack_rcv(int af, struct rte_mbuf *mbuf,
             RTE_LOG(WARNING, IPVS, "%s: ip_vs_schedule failed\n", __func__);
             /* FIXME: What to do when virtual service is available but no destination
              * available for a new connetion: send an icmp UNREACHABLE ? */
-            dp_vs_service_put(svc);
             *verdict = INET_DROP;
             return 0;
         }
 
-        /* Release the service, we do not need it any more */
-        dp_vs_service_put(svc);
-
         /* Do nothing but print a error msg when fail, because session will be
          * correctly freed in dp_vs_conn_expire */
         if (EDPVS_OK != (res = syn_proxy_send_rs_syn(af, th, *cpp, mbuf, pp, &opt))) {
diff --git a/src/ipvs/ip_vs_wrr.c b/src/ipvs/ip_vs_wrr.c
index 0a76a8d22..893fdbdf4 100644
--- a/src/ipvs/ip_vs_wrr.c
+++ b/src/ipvs/ip_vs_wrr.c
@@ -132,7 +132,6 @@ static struct dp_vs_dest *dp_vs_wrr_schedule(struct dp_vs_service *svc,
      * This loop will always terminate, because mark->cw in (0, max_weight]
      * and at least one server has its weight equal to max_weight.
      */
-    rte_rwlock_write_lock(&svc->sched_lock);
     p = mark->cl;
     while (1) {
         if (mark->cl == &svc->dests) {
@@ -179,7 +178,6 @@ static struct dp_vs_dest *dp_vs_wrr_schedule(struct dp_vs_service *svc,
     }
 
       out:
-    rte_rwlock_write_unlock(&svc->sched_lock);
 
     return dest;
 }
diff --git a/src/neigh.c b/src/neigh.c
index 53be015fa..cb9b048c7 100644
--- a/src/neigh.c
+++ b/src/neigh.c
@@ -1084,6 +1084,7 @@ static void register_stats_cb(void)
     memset(&mt, 0 , sizeof(mt));
     mt.type = MSG_TYPE_NEIGH_GET;
     mt.prio = MSG_PRIO_LOW;
+    mt.mode   = DPVS_MSG_MULTICAST;
     mt.unicast_msg_cb = get_neigh_uc_cb;
     mt.multicast_msg_cb = NULL;
     assert(msg_type_mc_register(&mt) == 0);
@@ -1095,6 +1096,7 @@ static void unregister_stats_cb(void)
     memset(&mt, 0, sizeof(mt));
     mt.type = MSG_TYPE_NEIGH_GET;
     mt.prio = MSG_PRIO_LOW;
+    mt.mode   = DPVS_MSG_MULTICAST;
     mt.unicast_msg_cb = get_neigh_uc_cb;
     mt.multicast_msg_cb = NULL;
     assert(msg_type_mc_unregister(&mt) == 0);
diff --git a/tools/ipvsadm/ipvsadm.c b/tools/ipvsadm/ipvsadm.c
index 274d01e0a..4fa592d29 100644
--- a/tools/ipvsadm/ipvsadm.c
+++ b/tools/ipvsadm/ipvsadm.c
@@ -200,6 +200,7 @@ static const char* optnames[] = {
 	"ifname" ,
 	"sockpair" ,
 	"hash-target",
+        "cpu"
 };
 
 /*
@@ -212,27 +213,47 @@ static const char* optnames[] = {
  */
 static const char commands_v_options[NUMBER_OF_CMD][NUMBER_OF_OPT] =
 {
-        /* -n   -c   svc  -s   -p   -M   -r   fwd  -w   -x   -y   -mc  tot  dmn  -st  -rt  thr  -pc  srt  sid  -ex  ops  pe   laddr blst syn ifname sockpair hashtag*/
-/*ADD*/      {'x', 'x', '+', ' ', ' ', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x',  ' ', 'x' ,'x' ,' '},
-/*EDIT*/     {'x', 'x', '+', ' ', ' ', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x',  ' ', 'x' ,'x' ,' '},
-/*DEL*/      {'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x'},
-/*FLUSH*/    {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x'},
-/*LIST*/     {' ', '1', '1', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '1', '1', ' ', ' ', ' ', ' ', ' ', ' ', ' ', 'x', 'x', 'x', 'x',  'x', 'x' ,' ' ,'x'},
-/*ADDSRV*/   {'x', 'x', '+', 'x', 'x', 'x', '+', ' ', ' ', ' ', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x'},
-/*DELSRV*/   {'x', 'x', '+', 'x', 'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x'},
-/*EDITSRV*/  {'x', 'x', '+', 'x', 'x', 'x', '+', ' ', ' ', ' ', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x'},
-/*TIMEOUT*/  {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x'},
-/*STARTD*/   {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x'},
-/*STOPD*/    {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x'},
-/*RESTORE*/  {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x'},
-/*SAVE*/     {' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x'},
-/*ZERO*/     {'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x'},
-/*ADDLADDR*/ {'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '+', 'x',  'x', '+' ,'x' ,'x'},
-/*DELLADDR*/ {'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '+', 'x',  'x', '+' ,'x' ,'x'},
-/*GETLADDR*/ {'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x'},
-/*ADDBLKLST*/{'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '+',  'x', 'x' ,'x' ,'x'},
-/*DELBLKLST*/{'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '+',  'x', 'x' ,'x' ,'x'},
-/*GETBLKLST*/{'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x'},
+/* -n   -c   svc  -s   -p   -M   -r   fwd  -w   -x   -y   -mc  tot  dmn  -st  -rt  thr  -pc  srt  sid  -ex  ops  pe   laddr blst syn ifname sockpair hashtag cpu*/
+/*ADD*/   
+    {'x', 'x', '+', ' ', ' ', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x',  ' ', 'x' ,'x' ,' ', 'x'},
+/*EDIT*/  
+    {'x', 'x', '+', ' ', ' ', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x',  ' ', 'x' ,'x' ,' ', 'x'},
+/*DEL*/      
+    {'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
+/*FLUSH*/    
+    {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
+/*LIST*/     
+    {' ', '1', '1', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '1', '1', ' ', ' ', ' ', ' ', ' ', ' ', ' ', 'x', 'x', 'x', 'x',  'x', 'x' ,' ' ,'x', ' '},
+/*ADDSRV*/   
+    {'x', 'x', '+', 'x', 'x', 'x', '+', ' ', ' ', ' ', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
+/*DELSRV*/   
+    {'x', 'x', '+', 'x', 'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
+/*EDITSRV*/  
+    {'x', 'x', '+', 'x', 'x', 'x', '+', ' ', ' ', ' ', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
+/*TIMEOUT*/  
+    {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
+/*STARTD*/   
+    {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
+/*STOPD*/    
+    {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
+/*RESTORE*/  
+    {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
+/*SAVE*/     
+    {' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
+/*ZERO*/     
+    {'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
+/*ADDLADDR*/ 
+    {'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '+', 'x',  'x', '+' ,'x' ,'x', 'x'},
+/*DELLADDR*/ 
+    {'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '+', 'x',  'x', '+' ,'x' ,'x', 'x'},
+/*GETLADDR*/ 
+    {'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', ' '},
+/*ADDBLKLST*/
+    {'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '+',  'x', 'x' ,'x' ,'x', 'x'},
+/*DELBLKLST*/
+    {'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '+',  'x', 'x' ,'x' ,'x', 'x'},
+/*GETBLKLST*/
+    {'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
 };
 
 /* printing format flags */
@@ -265,6 +286,7 @@ struct ipvs_command_entry {
 	ipvs_laddr_t		laddr;
 	ipvs_blklst_t		blklst;
 	ipvs_sockpair_t		sockpair;
+	lcoreid_t		cid;
 };
 
 /* Use values outside ASCII range so that if an option has
@@ -285,6 +307,7 @@ enum {
 	TAG_NO_SORT,
 	TAG_PERSISTENCE_ENGINE,
 	TAG_SOCKPAIR,
+	TAG_CPU, 
 };
 
 /* various parsing helpers & parsing functions */
@@ -320,12 +343,12 @@ static void fail(int err, char *msg, ...);
 static void list_conn(int is_template, unsigned int format);
 static void list_conn_sockpair(int is_template,
 		ipvs_sockpair_t *sockpair, unsigned int format);
-static void list_service(ipvs_service_t *svc, unsigned int format);
-static void list_all(unsigned int format);
+static void list_service(ipvs_service_t *svc, unsigned int format, lcoreid_t cid);
+static void list_all(unsigned int format, lcoreid_t cid);
 static void list_timeout(void);
 static void list_daemon(void);
-static int list_laddrs(ipvs_service_t *svc, int with_title);
-static int list_all_laddrs(void);
+static int list_laddrs(ipvs_service_t *svc, int with_title, lcoreid_t cid);
+static int list_all_laddrs(lcoreid_t cid);
 static void list_blklsts_print_title(void);
 static int list_blklst(uint32_t addr_v4, uint16_t port, uint16_t protocol);
 static int list_all_blklsts(void);
@@ -341,7 +364,7 @@ int main(int argc, char **argv)
 {
 	int result;
 
-	if (ipvs_init()) {
+	if (ipvs_init(0)) {
 		fail(2, "Can't initialize ipvs: %s\n"
 			"Are you sure that dpvs is running?",
 			ipvs_strerror(errno));
@@ -352,7 +375,7 @@ int main(int argc, char **argv)
 
 	/* list the table if there is no other arguement */
 	if (argc == 1){
-		list_all(FMT_NONE);
+		list_all(FMT_NONE, 0);
 		ipvs_close();
 		return 0;
 	}
@@ -404,7 +427,7 @@ parse_options(int argc, char **argv, struct ipvs_command_entry *ce,
 		  NULL, NULL },
 		{ "icmp-service", 'q', POPT_ARG_STRING, &optarg, 'q',
 		  NULL, NULL },
-		{ "icmpv6-service", '1', POPT_ARG_STRING, &optarg, 'q',
+		{ "icmpv6-service", '1', POPT_ARG_STRING, &optarg, '1',
 		  NULL, NULL },
 		{ "fwmark-service", 'f', POPT_ARG_STRING, &optarg, 'f',
 		  NULL, NULL },
@@ -454,6 +477,7 @@ parse_options(int argc, char **argv, struct ipvs_command_entry *ce,
 		{ "ifname", 'F', POPT_ARG_STRING, &optarg, 'F', NULL, NULL },
 		{ "match", 'H', POPT_ARG_STRING, &optarg, 'H', NULL, NULL },
 		{ "hash-target", 'Y', POPT_ARG_STRING, &optarg, 'Y', NULL, NULL },
+		{ "cpu", '\0', POPT_ARG_STRING, &optarg, TAG_CPU, NULL, NULL },
 		{ NULL, 0, 0, NULL, 0, NULL, NULL }
 	};
 
@@ -567,7 +591,8 @@ parse_options(int argc, char **argv, struct ipvs_command_entry *ce,
 			break;
 		case 'H':
 			set_option(options, OPT_SERVICE);
-		if (parse_match_snat(optarg, &ce->svc) != 0)
+			ce->svc.flags |= IP_VS_SVC_F_MATCH;
+			if (parse_match_snat(optarg, &ce->svc) != 0)
 				fail(2, "illegal match specified");
 			break;
 		case 'f':
@@ -795,6 +820,11 @@ parse_options(int argc, char **argv, struct ipvs_command_entry *ce,
 				fail(2 , "hash target not support\n");
 			break;
 			}
+		case TAG_CPU:
+			{
+			ce->cid = atoi(optarg);
+			break;
+			}
 		default:
 			fail(2, "invalid option `%s'",
 			     poptBadOption(context, POPT_BADOPTION_NOALIAS));
@@ -871,6 +901,8 @@ static int process_options(int argc, char **argv, int reading_stdin)
 	ce.dest.conn_flags = IP_VS_CONN_F_DROUTE;
 	/* Set the default persistent granularity to /32 mask */
 	ce.svc.netmask = ((u_int32_t) 0xffffffff);
+	/* Set the default cpu be master */
+	ce.cid = 0;
 
 	if (parse_options(argc, argv, &ce, &options, &format))
 		return -1;
@@ -912,6 +944,7 @@ static int process_options(int argc, char **argv, int reading_stdin)
 	}
 
 	switch (ce.cmd) {
+	ipvs_init(ce.cid);
 	case CMD_LIST:
 		if ((options & (OPT_CONNECTION|OPT_TIMEOUT|OPT_DAEMON) &&
 		     options & (OPT_STATS|OPT_RATE|OPT_THRESHOLDS)) ||
@@ -926,13 +959,13 @@ static int process_options(int argc, char **argv, int reading_stdin)
             else
                 list_conn(options & OPT_PERSISTENTCONN, format);
 		else if (options & OPT_SERVICE)
-			list_service(&ce.svc, format);
+			list_service(&ce.svc, format, ce.cid);
 		else if (options & OPT_TIMEOUT)
 			list_timeout();
 		else if (options & OPT_DAEMON)
 			list_daemon();
 		else
-			list_all(format);
+			list_all(format, ce.cid);
 		return 0;
 
 	case CMD_RESTORE:
@@ -940,7 +973,7 @@ static int process_options(int argc, char **argv, int reading_stdin)
 
 	case CMD_SAVE:
 		format |= FMT_RULE;
-		list_all(format);
+		list_all(format, ce.cid);
 		return 0;
 
 	case CMD_FLUSH:
@@ -997,9 +1030,9 @@ static int process_options(int argc, char **argv, int reading_stdin)
 
 	case CMD_GETLADDR:
 		if(options & OPT_SERVICE)
-			result = list_laddrs(&ce.svc , 1);
+			result = list_laddrs(&ce.svc , 1, ce.cid);
 		else
-			result = list_all_laddrs();
+			result = list_all_laddrs(ce.cid);
 		break;
 
 	case CMD_ADDBLKLST:
@@ -1259,6 +1292,7 @@ parse_sockpair(char *buf, ipvs_sockpair_t *sockpair)
 
     return 1;
 }
+
 /*
  * comma separated parameters list, all fields is used to match packets.
  *
@@ -1278,10 +1312,11 @@ static int parse_match_snat(const char *buf, ipvs_service_t *svc)
     char params[256];
     char *arg, *start, *sp, key[32], val[128];
     int r;
+    bool range = false;
+    bool af = false;
 
     snprintf(params, sizeof(params), "%s", buf);
 
-    svc->af = AF_INET; /* now IPv4 only */
     svc->protocol = IPPROTO_NONE;
 
     for (start = params; (arg = strtok_r(start, ",", &sp)); start = NULL) {
@@ -1303,9 +1338,19 @@ static int parse_match_snat(const char *buf, ipvs_service_t *svc)
                 svc->protocol = IPPROTO_ICMPV6;
             else
                 return -1;
+        } else if (strcmp(key, "af") == 0){
+            af = true;
+            if (strcmp(val, "ipv4") == 0)
+                svc->af = AF_INET;
+            else if (strcmp(val, "ipv6") == 0)
+                svc->af = AF_INET6;
+            else
+                return -1;
         } else if (strcmp(key, "src-range") == 0) {
+            range = true;
             snprintf(svc->srange, sizeof(svc->srange), "%s", val);
         } else if (strcmp(key, "dst-range") == 0) {
+            range = true;
             snprintf(svc->drange, sizeof(svc->drange), "%s", val);
         } else if (strcmp(key, "iif") == 0) {
             snprintf(svc->iifname, sizeof(svc->iifname), "%s", val);
@@ -1316,6 +1361,8 @@ static int parse_match_snat(const char *buf, ipvs_service_t *svc)
         }
     }
 
+    if (!range && !af)
+        return -1;
     return 0;
 }
 
@@ -1486,8 +1533,9 @@ static void usage_exit(const char *program, const int exit_status)
 		"  --numeric      -n                   numeric output of addresses and ports\n"
 		"  --ifname       -F                   nic interface for laddrs\n"
 		"  --synproxy     -j                   TCP syn proxy\n"
-		"  --match        -H MATCH             select service by MATCH 'proto,srange,drange,iif,oif'\n"
-		"  --hash-target  -Y hashtag           choose target for conhash (support sip or qid for quic)\n",
+		"  --match        -H MATCH             select service by MATCH 'af,proto,srange,drange,iif,oif', af should be defined if no range defined\n"
+		"  --hash-target  -Y hashtag           choose target for conhash (support sip or qid for quic)\n"
+		"  --cpu            cid                choose cid to show\n",
 		DEF_SCHED);
 
 	exit(exit_status);
@@ -1734,13 +1782,13 @@ static void print_title(unsigned int format)
 
 
 static void
-print_service_entry(ipvs_service_entry_t *se, unsigned int format)
+print_service_entry(ipvs_service_entry_t *se, unsigned int format, lcoreid_t cid)
 {
 	struct ip_vs_get_dests *d;
 	char svc_name[256];
 	int i;
 
-	if (!(d = ipvs_get_dests(se))) {
+	if (!(d = ipvs_get_dests(se, cid))) {
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		exit(1);
 	}
@@ -1788,6 +1836,7 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 		free(vname);
 	} else { /* match */
 		char *proto;
+		char af[10];
 
 		if (se->protocol == IPPROTO_TCP)
 			proto = "tcp";
@@ -1798,10 +1847,15 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 		else
 			proto = "icmpv6";
 
+		if (se->af == AF_INET)
+			sprintf(af, "ipv4");
+		else if (se->af == AF_INET6)
+			sprintf(af, "ipv6");
+
 		if (format & FMT_RULE) {
 			snprintf(svc_name, sizeof(svc_name),
-			"-H proto=%s,src-range=%s,dst-range=%s,iif=%s,oif=%s",
-			proto, se->srange, se->drange, se->iifname, se->oifname);
+			"-H af=%s, proto=%s,src-range=%s,dst-range=%s,iif=%s,oif=%s",
+			proto, af, se->srange, se->drange, se->iifname, se->oifname);
 
 		} else {
 			int left = sizeof(svc_name);
@@ -1810,6 +1864,9 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 			left -= snprintf(svc_name + strlen(svc_name), left,
 				"MATCH %s", proto);
 
+			left -= snprintf(svc_name + strlen(svc_name), left,
+				",af=%s", af);
+
 			if (strcmp(se->srange, "[::-::]:0-0") != 0 &&
                             strcmp(se->srange, "0.0.0.0-0.0.0.0:0-0") != 0)
 				left -= snprintf(svc_name + strlen(svc_name), left,
@@ -2009,17 +2066,17 @@ static void print_service_and_laddrs(struct ip_vs_get_laddrs* d, int with_title)
 }
 
 
-static int list_laddrs(ipvs_service_t *svc , int with_title)
+static int list_laddrs(ipvs_service_t *svc , int with_title, lcoreid_t cid)
 {
 	ipvs_service_entry_t *entry;
 	struct ip_vs_get_laddrs *d;
 
-	if (!(entry = ipvs_get_service(svc))) {
+	if (!(entry = ipvs_get_service(svc, cid))) {
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		return -1;
 	}
 
-	if (!(d = ipvs_get_laddrs(entry))) {
+	if (!(d = ipvs_get_laddrs(entry, cid))) {
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		free(entry);
 		return -1;
@@ -2034,20 +2091,20 @@ static int list_laddrs(ipvs_service_t *svc , int with_title)
 }
 
 
-static int list_all_laddrs(void)
+static int list_all_laddrs(lcoreid_t cid)
 {
 	struct ip_vs_get_services *get;
 	struct ip_vs_get_laddrs   *d;
 	int i;
 	int title_enable = 1;
 
-	if (!(get = ipvs_get_services())) {
+	if (!(get = ipvs_get_services(cid))) {
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		return -1;
 	}
 
 	for (i = 0; i < get->num_services; i++){
-		if(!(d = ipvs_get_laddrs(&(get->entrytable[i])))) {
+		if(!(d = ipvs_get_laddrs(&(get->entrytable[i]), cid))) {
 			free(get);
 			fprintf(stderr, "%s\n", ipvs_strerror(errno));
 			return -1;
@@ -2114,7 +2171,7 @@ static int list_all_blklsts(void)
 	struct ip_vs_get_services *get;
 	int i;
 
-	if (!(get = ipvs_get_services())) {
+	if (!(get = ipvs_get_services(0))) {
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		exit(1);
 	}
@@ -2128,23 +2185,23 @@ static int list_all_blklsts(void)
 	return 0;
 }
 
-static void list_service(ipvs_service_t *svc, unsigned int format)
+static void list_service(ipvs_service_t *svc, unsigned int format, lcoreid_t cid)
 {
 	ipvs_service_entry_t *entry;
 
-	if (!(entry = ipvs_get_service(svc))) {
+	if (!(entry = ipvs_get_service(svc, cid))) {
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		exit(1);
 	}
 
 	print_title(format);
-	print_service_entry(entry, format);
+	print_service_entry(entry, format, cid);
 	free(entry);
 
 }
 
 
-static void list_all(unsigned int format)
+static void list_all(unsigned int format, lcoreid_t cid)
 {
 	struct ip_vs_get_services *get;
 	int i;
@@ -2153,7 +2210,7 @@ static void list_all(unsigned int format)
 		printf("IP Virtual Server version %d.%d.%d (size=%d)\n",
 		       NVERSION(ipvs_info.version), ipvs_info.size);
 
-	if (!(get = ipvs_get_services())) {
+	if (!(get = ipvs_get_services(cid))) {
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		exit(1);
 	}
@@ -2163,7 +2220,7 @@ static void list_all(unsigned int format)
 
 	print_title(format);
 	for (i = 0; i < get->num_services; i++)
-		print_service_entry(&get->entrytable[i], format);
+		print_service_entry(&get->entrytable[i], format, cid);
 	free(get);
 }
 
diff --git a/tools/keepalived/keepalived/check/check_data.c b/tools/keepalived/keepalived/check/check_data.c
index e2e964f2c..fadc458c1 100644
--- a/tools/keepalived/keepalived/check/check_data.c
+++ b/tools/keepalived/keepalived/check/check_data.c
@@ -442,6 +442,7 @@ alloc_vs(char *ip, char *port)
 	new->blklst_addr_gname = NULL;
 	new->vip_bind_dev = NULL;
 	new->hash_target = 0;
+	new->af = 0;
 	memset(new->srange, 0, 256);
 	memset(new->drange, 0, 256);
 	memset(new->iifname, 0, IFNAMSIZ);
diff --git a/tools/keepalived/keepalived/check/check_parser.c b/tools/keepalived/keepalived/check/check_parser.c
index 15e697223..2c688c203 100644
--- a/tools/keepalived/keepalived/check/check_parser.c
+++ b/tools/keepalived/keepalived/check/check_parser.c
@@ -449,6 +449,18 @@ iif_handler(vector_t *strvec)
 	snprintf(vs->iifname, sizeof(vs->iifname), "%s", (char *)vector_slot(strvec, 1));
 }
 
+static void
+af_handler(vector_t *strvec)
+{
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	char *str = vector_slot(strvec, 1);
+
+	if (!strcmp(str, "ipv4") || !strcmp(str, "IPv4"))
+		vs->af = AF_INET;
+	else if (!strcmp(str, "ipv6") || !strcmp(str, "IPv6"))
+		vs->af = AF_INET6;
+}
+
 static void
 hash_target_handler(vector_t *strvec)
 {
@@ -515,6 +527,7 @@ check_init_keywords(void)
 	install_keyword("dst-range", &dst_range_handler);
 	install_keyword("oif", &oif_handler);
 	install_keyword("iif", &iif_handler);
+	install_keyword("af", &af_handler);
 	install_keyword("hash_target", &hash_target_handler);
 
 	/* Pool regression detection and handling. */
diff --git a/tools/keepalived/keepalived/check/ipvswrapper.c b/tools/keepalived/keepalived/check/ipvswrapper.c
index 9a9612c33..dd1c0fa48 100644
--- a/tools/keepalived/keepalived/check/ipvswrapper.c
+++ b/tools/keepalived/keepalived/check/ipvswrapper.c
@@ -375,7 +375,7 @@ ipvs_start(void)
 {
 	log_message(LOG_DEBUG, "Initializing ipvs 2.6");
 	/* Initialize IPVS module */
-	if (ipvs_init()) {
+	if (ipvs_init(0)) {
 		log_message(LOG_INFO, "IPVS: Can't initialize ipvs: %s",
 				ipvs_strerror(errno));
 		return IPVS_ERROR;
@@ -451,8 +451,10 @@ ipvs_talk(int cmd)
 			break;
 		case IP_VS_SO_SET_EDITDEST:
 			if ((result = ipvs_update_dest(srule, drule)) &&
-			    (result == EDPVS_NOTEXIST))
+			    (result == EDPVS_NOTEXIST || result == EDPVS_MSG_FAIL)) {
 				result = ipvs_add_dest(srule, drule);
+				cmd = IP_VS_SO_SET_ADDDEST;
+			}
 			break;
 		case IP_VS_SO_SET_ADDTUNNEL:
 			result = ipvs_add_tunnel(tunnel_rule);
@@ -462,10 +464,12 @@ ipvs_talk(int cmd)
 			break;
 	}
 
-	if (result) {
-		if (result == EDPVS_EXIST && (cmd == IP_VS_SO_SET_ADD || cmd == IP_VS_SO_SET_ADDDEST))
+	if (result) {//EDPVS_MSG_FAIL just ignore set failed
+		if ((result == EDPVS_EXIST || result == EDPVS_MSG_FAIL || result == EDPVS_NOTSUPP) 
+			&& (cmd == IP_VS_SO_SET_ADD || cmd == IP_VS_SO_SET_ADDDEST))
 			result = 0;
-		else if (result == EDPVS_NOTEXIST && (cmd == IP_VS_SO_SET_DEL || cmd == IP_VS_SO_SET_DELDEST))
+		else if ((result == EDPVS_NOTEXIST || result == EDPVS_MSG_FAIL || result == EDPVS_NOTSUPP)
+			&& (cmd == IP_VS_SO_SET_DEL || cmd == IP_VS_SO_SET_DELDEST))
 			result = 0;
 		log_message(LOG_INFO, "IPVS: %s", ipvs_strerror(errno));
 	}
@@ -609,6 +613,7 @@ ipvs_set_rule(int cmd, virtual_server_t * vs, real_server_t * rs)
 	srule->netmask = (vs->addr.ss_family == AF_INET6) ? 128 : ((u_int32_t) 0xffffffff);
 	srule->protocol = vs->service_type;
 	srule->conn_timeout = vs->conn_timeout;
+	srule->af = vs->af;
 	snprintf(srule->srange, 256, "%s", vs->srange);
 	snprintf(srule->drange, 256, "%s", vs->drange);
 	snprintf(srule->iifname, IFNAMSIZ, "%s", vs->iifname);
@@ -1033,6 +1038,9 @@ ipvs_cmd(int cmd, list vs_group, virtual_server_t * vs, real_server_t * rs)
 			srule->af = vs->addr.ss_family;
 			srule->addr.ip = 0;
 			srule->port = inet_sockaddrport(&vs->addr);
+			srule->flags |= IP_VS_SVC_F_MATCH;
+			if (!srule->af)
+				srule->af = vs->af;
 		} else {
 			srule->af = vs->addr.ss_family;
 			if (vs->addr.ss_family == AF_INET6)
diff --git a/tools/keepalived/keepalived/include/check_data.h b/tools/keepalived/keepalived/include/check_data.h
index 7efb6a9e1..dc81ca511 100644
--- a/tools/keepalived/keepalived/include/check_data.h
+++ b/tools/keepalived/keepalived/include/check_data.h
@@ -183,6 +183,7 @@ typedef struct _virtual_server {
 	char				*vip_bind_dev;		/* the interface name,vip bindto */
 	char				*blklst_addr_gname;	/* black list ip group name */
 
+	uint16_t			af;
 	char				srange[256];
 	char				drange[256];
 	char				iifname[IFNAMSIZ];
@@ -297,7 +298,8 @@ static inline int inaddr_equal(sa_family_t family, void *addr1, void *addr2)
 			 !strcmp((X)->srange, (Y)->srange)				&&\
 			 !strcmp((X)->drange, (Y)->drange)				&&\
 			 !strcmp((X)->iifname, (Y)->iifname)				&&\
-			 !strcmp((X)->oifname, (Y)->oifname))
+			 !strcmp((X)->oifname, (Y)->oifname)				&&\
+			 (X)->af == (Y)->af)
 
 #define VSGE_ISEQ(X,Y)	(sockstorage_equal(&(X)->addr,&(Y)->addr) &&	\
 			 (X)->range     == (Y)->range &&		\
diff --git a/tools/keepalived/keepalived/libipvs-2.6/dp_vs.h b/tools/keepalived/keepalived/libipvs-2.6/dp_vs.h
index a222ca3f4..70c339036 100644
--- a/tools/keepalived/keepalived/libipvs-2.6/dp_vs.h
+++ b/tools/keepalived/keepalived/libipvs-2.6/dp_vs.h
@@ -2,15 +2,6 @@
 #define _DP_VS_H
 
 #include <netinet/in.h>
-#include "conf/route.h"
-#include "conf/route6.h"
-#include "conf/inetaddr.h"
-#include "conf/laddr.h"
-#include "conf/blklst.h"
-#include "conf/conn.h"
-#include "ip_tunnel.h"
-#include "ipvs/service.h"
-#include "ipvs/dest.h"
 
 enum{
     DPVS_SO_SET_FLUSH = 200,
diff --git a/tools/keepalived/keepalived/libipvs-2.6/ip_vs.h b/tools/keepalived/keepalived/libipvs-2.6/ip_vs.h
index 9c4cd9466..6dc17bdc6 100644
--- a/tools/keepalived/keepalived/libipvs-2.6/ip_vs.h
+++ b/tools/keepalived/keepalived/libipvs-2.6/ip_vs.h
@@ -11,7 +11,15 @@
 #include <arpa/inet.h>
 #include <linux/types.h>	/* For __beXX types in userland */
 #include <stdbool.h>
-#include "dp_vs.h"
+#include "conf/route.h"
+#include "conf/route6.h"
+#include "conf/inetaddr.h"
+#include "conf/laddr.h"
+#include "conf/blklst.h"
+#include "conf/conn.h"
+#include "ip_tunnel.h"
+#include "ipvs/service.h"
+#include "ipvs/dest.h"
 
 #ifdef LIBIPVS_USE_NL
 #include <netlink/netlink.h>
@@ -43,8 +51,9 @@
 #define IP_VS_SVC_F_SCHED2	0x0010		/* scheduler flag 2 */
 #define IP_VS_SVC_F_SCHED3	0x0020		/* scheduler flag 3 */
 
-#define IP_VS_SVC_F_SIP_HASH    0x0100          /* sip hash target */
-#define IP_VS_SVC_F_QID_HASH    0x0200          /* quic cid hash target */
+#define IP_VS_SVC_F_SIP_HASH	0x0100		/* sip hash target */
+#define IP_VS_SVC_F_QID_HASH	0x0200		/* quic cid hash target */
+#define IP_VS_SVC_F_MATCH	0x0400		/* snat match */
 
 #define IP_VS_SVC_F_SCHED_SH_FALLBACK	IP_VS_SVC_F_SCHED1 /* SH fallback */
 #define IP_VS_SVC_F_SCHED_SH_PORT	IP_VS_SVC_F_SCHED2 /* SH use port */
@@ -272,38 +281,9 @@ struct ip_vs_getinfo {
 
 	/* number of virtual services */
 	unsigned int		num_services;
-};
-
-
-/* The argument to IP_VS_SO_GET_SERVICE */
-struct ip_vs_service_entry_kern {
-	/* which service: user fills in these */
-	u_int16_t		protocol;
-	__be32			addr;	/* virtual address */
-	__be16			port;
-	u_int32_t		fwmark;		/* firwall mark of service */
-
-	/* service options */
-	char			sched_name[IP_VS_SCHEDNAME_MAXLEN];
-	unsigned		flags;          /* virtual service flags */
-	unsigned		timeout;	/* persistent timeout */
-	unsigned		conn_timeout;
-	__be32			netmask;	/* persistent netmask */
-	unsigned		bps;
-	unsigned		limit_proportion;
 
-	/* number of real servers */
-	unsigned int		num_dests;
-	/* number of local address*/
-	unsigned int		num_laddrs;
-
-	/* statistics */
-	struct ip_vs_stats_user stats;
-
-	char			srange[256];
-	char			drange[256];
-	char			iifname[IFNAMSIZ];
-	char			oifname[IFNAMSIZ];
+        /* number of lcores*/
+        unsigned int            num_lcores;
 };
 
 struct ip_vs_service_entry {
@@ -341,23 +321,6 @@ struct ip_vs_service_entry {
 
 };
 
-struct ip_vs_dest_entry_kern {
-	__be32			addr;	/* destination address */
-	__be16			port;
-	unsigned		conn_flags;	/* connection flags */
-	int			weight;		/* destination weight */
-
-	u_int32_t		u_threshold;	/* upper threshold */
-	u_int32_t		l_threshold;	/* lower threshold */
-
-	u_int32_t		activeconns;	/* active connections */
-	u_int32_t		inactconns;	/* inactive connections */
-	u_int32_t		persistconns;	/* persistent connections */
-
-	/* statistics */
-	struct ip_vs_stats_user stats;
-};
-
 struct ip_vs_dest_entry {
 	__be32			__addr_v4;	/* destination address - internal use only */
 	__be16			port;
@@ -391,21 +354,6 @@ struct ip_vs_laddr_entry {
 	union nf_inet_addr	addr;
 };
 
-/* The argument to IP_VS_SO_GET_LADDRS */
-struct ip_vs_get_laddrs_kern {
-	/* which service: user fills in these */
-	u_int16_t		protocol;
-	__be32			addr;	/* virtual address - internal use only */
-	__be16			port;
-	u_int32_t		fwmark;		/* firwall mark of service */
-
-	/* number of local address*/
-	unsigned int		num_laddrs;
-
-	/* the real servers */
-	struct ip_vs_laddr_entry_kern	entrytable[0];
-};
-
 struct ip_vs_get_laddrs {
 	/* which service: user fills in these */
 	u_int16_t		protocol;
@@ -422,26 +370,6 @@ struct ip_vs_get_laddrs {
 	struct ip_vs_laddr_entry	entrytable[0];
 };
 
-/* The argument to IP_VS_SO_GET_DESTS */
-struct ip_vs_get_dests_kern {
-	/* which service: user fills in these */
-	u_int16_t		protocol;
-	__be32			addr;	/* virtual address - internal use only */
-	__be16			port;
-	u_int32_t		fwmark;		/* firwall mark of service */
-
-	/* number of real servers */
-	unsigned int		num_dests;
-
-	char			srange[256];
-	char			drange[256];
-	char			iifname[IFNAMSIZ];
-	char			oifname[IFNAMSIZ];
-
-	/* the real servers */
-	struct ip_vs_dest_entry_kern	entrytable[0];
-};
-
 struct ip_vs_get_dests {
 	/* which service: user fills in these */
 	u_int16_t		protocol;
@@ -468,19 +396,11 @@ struct ip_vs_get_dests {
 struct ip_vs_get_services {
 	/* number of virtual services */
 	unsigned int		num_services;
-
+	unsigned int		cid;
 	/* service table */
 	struct ip_vs_service_entry entrytable[0];
 };
 
-struct ip_vs_get_services_kern {
-	/* number of virtual services */
-	unsigned int		num_services;
-
-	/* service table */
-	struct ip_vs_service_entry_kern entrytable[0];
-};
-
 /* The argument to IP_VS_SO_GET_TIMEOUT */
 struct ip_vs_timeout_user {
 	int			tcp_timeout;
diff --git a/tools/keepalived/keepalived/libipvs-2.6/libipvs.c b/tools/keepalived/keepalived/libipvs-2.6/libipvs.c
index 8e532d937..5f732a2b2 100644
--- a/tools/keepalived/keepalived/libipvs-2.6/libipvs.c
+++ b/tools/keepalived/keepalived/libipvs-2.6/libipvs.c
@@ -22,7 +22,6 @@
 
 #include "libipvs.h"
 #include "sockopt.h"
-#include "dp_vs.h"
 
 typedef struct ipvs_servicedest_s {
 	struct ip_vs_service_kern	svc;
@@ -111,7 +110,7 @@ typedef struct dpvs_servicedest_s {
 
 void ipvs_service_entry_2_user(const ipvs_service_entry_t *entry, ipvs_service_t *user);
 
-int ipvs_init(void)
+int ipvs_init(lcoreid_t cid)
 {
 	socklen_t len;
 	struct ip_vs_getinfo *ipvs_info_rcv;
@@ -186,7 +185,7 @@ int ipvs_update_service_by_options(ipvs_service_t *svc, unsigned int options)
 	ipvs_service_entry_t *entry;
 	ipvs_service_t user;
 
-	if (!(entry = ipvs_get_service(svc))) {
+	if (!(entry = ipvs_get_service(svc, 0))) {
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		exit(1);
 	}
@@ -241,7 +240,7 @@ int ipvs_update_service_synproxy(ipvs_service_t *svc , int enable)
 {
 	ipvs_service_entry_t *entry;
 
-	if (!(entry = ipvs_get_service(svc))) {
+	if (!(entry = ipvs_get_service(svc, 0))) {
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		exit(1);
 	}
@@ -478,8 +477,18 @@ int ipvs_stop_daemon(ipvs_daemon_t *dm)
 			  (char *)dm, sizeof(*dm));
 }
 
+static inline sockoptid_t  cpu2opt_svc(lcoreid_t cid, sockoptid_t old_opt)
+{
+	return old_opt + cid * (SOCKOPT_SVC_GET_CMD_MAX - SOCKOPT_SVC_BASE + 1);
+}
+
+/* now support get_all only */
+static inline sockoptid_t cpu2opt_laddr(lcoreid_t cid, sockoptid_t old_opt)
+{
+	return old_opt + cid;
+}
 
-struct ip_vs_get_services *ipvs_get_services(void)
+struct ip_vs_get_services *ipvs_get_services(lcoreid_t cid)
 {
 	struct ip_vs_get_services *get;
 	struct dp_vs_get_services *dpvs_get, *dpvs_get_rcv;
@@ -499,8 +508,8 @@ struct ip_vs_get_services *ipvs_get_services(void)
 		return NULL;
 	}
 	dpvs_get->num_services = ipvs_info.num_services;
-	
-	if (dpvs_getsockopt(DPVS_SO_GET_SERVICES, dpvs_get, len, (void **)&dpvs_get_rcv, &len_rcv)) {
+	dpvs_get->cid = cid;
+	if (dpvs_getsockopt(cpu2opt_svc(cid, DPVS_SO_GET_SERVICES), dpvs_get, len, (void **)&dpvs_get_rcv, &len_rcv)) {
 		free(get);
 		free(dpvs_get);
 		return NULL;
@@ -609,7 +618,7 @@ ipvs_sort_services(struct ip_vs_get_services *s, ipvs_service_cmp_t f)
 	      sizeof(ipvs_service_entry_t), (qsort_cmp_t)f);
 }
 
-struct ip_vs_get_laddrs *ipvs_get_laddrs(ipvs_service_entry_t *svc)
+struct ip_vs_get_laddrs *ipvs_get_laddrs(ipvs_service_entry_t *svc, lcoreid_t cid)
 {
 	struct ip_vs_get_laddrs *laddrs;
 	struct dp_vs_laddr_conf conf, *result;
@@ -624,13 +633,14 @@ struct ip_vs_get_laddrs *ipvs_get_laddrs(ipvs_service_entry_t *svc)
 		conf.vaddr.in6 = svc->addr.in6;
 	conf.vport = svc->port;
 	conf.fwmark = svc->fwmark;
+	conf.cid = cid;
 
 	snprintf(conf.srange, sizeof(conf.srange), "%s", svc->srange);
 	snprintf(conf.drange, sizeof(conf.drange), "%s", svc->drange);
 	snprintf(conf.iifname, sizeof(conf.iifname), "%s", svc->iifname);
 	snprintf(conf.iifname, sizeof(conf.oifname), "%s", svc->oifname);
 
-	if (dpvs_getsockopt(SOCKOPT_GET_LADDR_GETALL, &conf, sizeof(conf),
+	if (dpvs_getsockopt(cpu2opt_laddr(cid, SOCKOPT_GET_LADDR_GETALL), &conf, sizeof(conf),
 				(void **)&result, &res_size) != 0)
 		return NULL;
 
@@ -700,7 +710,7 @@ struct dp_vs_blklst_conf_array *ipvs_get_blklsts(void)
 	return array;
 }
 
-struct ip_vs_get_dests *ipvs_get_dests(ipvs_service_entry_t *svc)
+struct ip_vs_get_dests *ipvs_get_dests(ipvs_service_entry_t *svc, lcoreid_t cid)
 {
 	struct ip_vs_get_dests *d;
 	struct dp_vs_get_dests *dpvs_dests, *dpvs_dests_rcv;
@@ -726,12 +736,14 @@ struct ip_vs_get_dests *ipvs_get_dests(ipvs_service_entry_t *svc)
 	memcpy(&dpvs_dests->addr, &svc->addr, sizeof(svc->addr));
 	dpvs_dests->port = svc->port;
 	dpvs_dests->num_dests = svc->num_dests;
+	dpvs_dests->cid = cid;
 	snprintf(dpvs_dests->srange, sizeof(dpvs_dests->srange), "%s", svc->srange);
 	snprintf(dpvs_dests->drange, sizeof(dpvs_dests->drange), "%s", svc->drange);
 	snprintf(dpvs_dests->iifname, sizeof(dpvs_dests->iifname), "%s", svc->iifname);
 	snprintf(dpvs_dests->oifname, sizeof(dpvs_dests->oifname), "%s", svc->oifname);
 
-	if (dpvs_getsockopt(DPVS_SO_GET_DESTS, dpvs_dests, len, (void **)&dpvs_dests_rcv, &len_rcv)) {
+	if (dpvs_getsockopt(cpu2opt_svc(cid, DPVS_SO_GET_DESTS), dpvs_dests, len, 
+                            (void **)&dpvs_dests_rcv, &len_rcv)) {
 		free(d);
 		free(dpvs_dests);
 		return NULL;
@@ -788,7 +800,7 @@ void ipvs_sort_dests(struct ip_vs_get_dests *d, ipvs_dest_cmp_t f)
 
 
 ipvs_service_entry_t *
-ipvs_get_service(struct ip_vs_service_user *hint)
+ipvs_get_service(struct ip_vs_service_user *hint, lcoreid_t cid)
 {
 	ipvs_service_entry_t *svc;
 	struct dp_vs_service_entry dpvs_svc, *dpvs_svc_ptr, *dpvs_svc_rcv;
@@ -805,9 +817,10 @@ ipvs_get_service(struct ip_vs_service_user *hint)
 	len_rcv = sizeof(*dpvs_svc_rcv);
 	memset(&dpvs_svc, 0, len);
 	dpvs_svc_ptr = &dpvs_svc;
+	dpvs_svc.cid = cid;
 	IPVS_2_DPVS(dpvs_svc_ptr, hint);
 
-	if (dpvs_getsockopt(DPVS_SO_GET_SERVICE,
+	if (dpvs_getsockopt(cpu2opt_svc(cid, DPVS_SO_GET_SERVICE),
 		       &dpvs_svc, len, (void **)&dpvs_svc_rcv, &len_rcv)) {
 		goto out_err;
 	}
diff --git a/tools/keepalived/keepalived/libipvs-2.6/libipvs.h b/tools/keepalived/keepalived/libipvs-2.6/libipvs.h
index 4c46fa2f0..d1bfe955c 100644
--- a/tools/keepalived/keepalived/libipvs-2.6/libipvs.h
+++ b/tools/keepalived/keepalived/libipvs-2.6/libipvs.h
@@ -42,7 +42,7 @@
 #define OPT_IFNAME		0x4000000
 #define OPT_SOCKPAIR		0x8000000
 #define OPT_HASHTAG		0x10000000
-#define NUMBER_OF_OPT		29
+#define NUMBER_OF_OPT		30 //opt cid is not defined above
 
 #define MINIMUM_IPVS_VERSION_MAJOR      1
 #define MINIMUM_IPVS_VERSION_MINOR      1
@@ -81,7 +81,7 @@ typedef struct ip_vs_blklst_entry       ipvs_blklst_entry_t;
 extern struct ip_vs_getinfo ipvs_info;
 
 /* init socket and get ipvs info */
-extern int ipvs_init(void);
+extern int ipvs_init(lcoreid_t cid);
 
 /* get ipvs info separately */
 extern int ipvs_getinfo(void);
@@ -123,7 +123,7 @@ extern struct ip_vs_conn_array* ip_vs_get_conns(const struct ip_vs_conn_req *req
 
 extern int ipvs_add_laddr(ipvs_service_t *svc, ipvs_laddr_t * laddr);
 extern int ipvs_del_laddr(ipvs_service_t *svc, ipvs_laddr_t * laddr);
-extern struct ip_vs_get_laddrs *ipvs_get_laddrs(ipvs_service_entry_t *svc);
+extern struct ip_vs_get_laddrs *ipvs_get_laddrs(ipvs_service_entry_t *svc, lcoreid_t cid);
 
 /*for add/delete a blacklist ip*/
 extern int ipvs_add_blklst(ipvs_service_t *svc, ipvs_blklst_t * blklst);
@@ -144,7 +144,7 @@ extern int ipvs_stop_daemon(ipvs_daemon_t *dm);
 
 
 /* get all the ipvs services */
-extern struct ip_vs_get_services *ipvs_get_services(void);
+extern struct ip_vs_get_services *ipvs_get_services(lcoreid_t);
 
 /* sort the service entries */
 typedef int (*ipvs_service_cmp_t)(ipvs_service_entry_t *,
@@ -155,7 +155,7 @@ extern void ipvs_sort_services(struct ip_vs_get_services *s,
 			       ipvs_service_cmp_t f);
 
 /* get the destination array of the specified service */
-extern struct ip_vs_get_dests *ipvs_get_dests(ipvs_service_entry_t *svc);
+extern struct ip_vs_get_dests *ipvs_get_dests(ipvs_service_entry_t *svc, lcoreid_t cid);
 
 /* sort the destination entries */
 typedef int (*ipvs_dest_cmp_t)(ipvs_dest_entry_t *,
@@ -166,7 +166,7 @@ extern void ipvs_sort_dests(struct ip_vs_get_dests *d,
 			    ipvs_dest_cmp_t f);
 
 /* get an ipvs service entry */
-extern ipvs_service_entry_t *ipvs_get_service(struct ip_vs_service_user *hint);
+extern ipvs_service_entry_t *ipvs_get_service(struct ip_vs_service_user *hint, lcoreid_t cid);
 
 /* get ipvs timeout */
 extern ipvs_timeout_t *ipvs_get_timeout(void);

From c96f8215e0c6e85e0a520a6fc985a0260f2957b3 Mon Sep 17 00:00:00 2001
From: mscbg <jerrywang@qiyi.com>
Date: Mon, 17 Jun 2019 14:04:53 +0800
Subject: [PATCH 16/62] delete debug code

---
 src/ipvs/ip_vs_dest.c | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/ipvs/ip_vs_dest.c b/src/ipvs/ip_vs_dest.c
index 8324797d4..0f947bd25 100644
--- a/src/ipvs/ip_vs_dest.c
+++ b/src/ipvs/ip_vs_dest.c
@@ -215,7 +215,6 @@ void dp_vs_dest_put(struct dp_vs_dest *dest)
     if (rte_atomic32_dec_and_test(&dest->refcnt)) {
         dp_vs_unbind_svc(dest);
         rte_free(dest);
-        RTE_LOG(ERR, SERVICE, "%s delete rs\n", __func__);
     }
 }
 

From 3f314477e0dd7978dcbace0500b2b4166e5c4a50 Mon Sep 17 00:00:00 2001
From: jerrywang <jerrywang@qiyi.com>
Date: Thu, 23 May 2019 17:16:44 +0800
Subject: [PATCH 17/62] svc/dest/laddr support percore; fix snat bug: no range
 config

---
 src/ipvs/ip_vs_dest.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/ipvs/ip_vs_dest.c b/src/ipvs/ip_vs_dest.c
index 0f947bd25..8324797d4 100644
--- a/src/ipvs/ip_vs_dest.c
+++ b/src/ipvs/ip_vs_dest.c
@@ -215,6 +215,7 @@ void dp_vs_dest_put(struct dp_vs_dest *dest)
     if (rte_atomic32_dec_and_test(&dest->refcnt)) {
         dp_vs_unbind_svc(dest);
         rte_free(dest);
+        RTE_LOG(ERR, SERVICE, "%s delete rs\n", __func__);
     }
 }
 

From 8091fb72b01a44bb6aabd5d87de457ff3e6e1bb5 Mon Sep 17 00:00:00 2001
From: mscbg <jerrywang@qiyi.com>
Date: Mon, 17 Jun 2019 14:04:53 +0800
Subject: [PATCH 18/62] delete debug code

---
 src/ipvs/ip_vs_dest.c | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/ipvs/ip_vs_dest.c b/src/ipvs/ip_vs_dest.c
index 8324797d4..0f947bd25 100644
--- a/src/ipvs/ip_vs_dest.c
+++ b/src/ipvs/ip_vs_dest.c
@@ -215,7 +215,6 @@ void dp_vs_dest_put(struct dp_vs_dest *dest)
     if (rte_atomic32_dec_and_test(&dest->refcnt)) {
         dp_vs_unbind_svc(dest);
         rte_free(dest);
-        RTE_LOG(ERR, SERVICE, "%s delete rs\n", __func__);
     }
 }
 

From a5f92b5f538d355fa2f6fed528e0b8536d32c6cc Mon Sep 17 00:00:00 2001
From: mscbg <jerrywang@qiyi.com>
Date: Mon, 29 Jul 2019 11:26:54 +0800
Subject: [PATCH 19/62] fix bug for release timer

---
 src/inetaddr.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/inetaddr.c b/src/inetaddr.c
index 5889aed5a..747c5137a 100644
--- a/src/inetaddr.c
+++ b/src/inetaddr.c
@@ -396,6 +396,7 @@ static int inet_ifaddr_dad_completed(void *arg)
     struct inet_ifaddr *ifa = arg;
 
     rte_rwlock_write_lock(&in_addr_lock);
+    dpvs_timer_cancel(&ifa->timer, true);
     ifa->flags &= ~(IFA_F_TENTATIVE|IFA_F_OPTIMISTIC|IFA_F_DADFAILED);
     rte_rwlock_write_unlock(&in_addr_lock);
 

From 8d62c533b2dcb39a19167fc12746512c06d0a2a6 Mon Sep 17 00:00:00 2001
From: mscbg <jerrywang@qiyi.com>
Date: Wed, 23 Oct 2019 16:23:49 +0800
Subject: [PATCH 20/62] fix bug by some code review

fix msg bug
---
 src/ctrl.c               |  2 +-
 src/inetaddr.c           |  4 ++--
 src/ipvs/ip_vs_blklst.c  |  4 ++--
 src/ipvs/ip_vs_laddr.c   | 10 +++++-----
 src/ipvs/ip_vs_service.c | 26 ++++++++++----------------
 tools/ipvsadm/ipvsadm.c  |  4 ++--
 6 files changed, 22 insertions(+), 28 deletions(-)

diff --git a/src/ctrl.c b/src/ctrl.c
index 43225662e..631f9893c 100644
--- a/src/ctrl.c
+++ b/src/ctrl.c
@@ -99,7 +99,7 @@ inline static void msg_debug_dump(void)
 
     allc = rte_atomic64_read(&n_msg_allc);
 
-    if (likely(allc % 10))
+    if (likely(allc % 100000))
         return;
 
     RTE_LOG(INFO, MSGMGR, "%s: allocated=%ld, freed=%ld, processing=%d\n",
diff --git a/src/inetaddr.c b/src/inetaddr.c
index 747c5137a..be6a13785 100644
--- a/src/inetaddr.c
+++ b/src/inetaddr.c
@@ -396,11 +396,11 @@ static int inet_ifaddr_dad_completed(void *arg)
     struct inet_ifaddr *ifa = arg;
 
     rte_rwlock_write_lock(&in_addr_lock);
-    dpvs_timer_cancel(&ifa->timer, true);
+    dpvs_timer_cancel_nolock(&ifa->timer, true);
     ifa->flags &= ~(IFA_F_TENTATIVE|IFA_F_OPTIMISTIC|IFA_F_DADFAILED);
     rte_rwlock_write_unlock(&in_addr_lock);
 
-    return DTIMER_STOP;
+    return DTIMER_OK;
 }
 
 /* change timer callback, refer to 'addrconf_mod_timer' */
diff --git a/src/ipvs/ip_vs_blklst.c b/src/ipvs/ip_vs_blklst.c
index d64e753a7..f9b9fa7aa 100644
--- a/src/ipvs/ip_vs_blklst.c
+++ b/src/ipvs/ip_vs_blklst.c
@@ -145,7 +145,7 @@ static int dp_vs_blklst_add(uint8_t proto, const union inet_addr *vaddr,
                    cid, sizeof(struct dp_vs_blklst_conf), &cf);
     if (!msg)
         return EDPVS_NOMEM;
-    err = multicast_msg_send(msg, 0, NULL);
+    err = multicast_msg_send(msg, DPVS_MSG_F_ASYNC, NULL);
     if (err != EDPVS_OK) {
         msg_destroy(&msg);
         RTE_LOG(INFO, SERVICE, "[%s] fail to send multicast message\n", __func__);
@@ -187,7 +187,7 @@ static int dp_vs_blklst_del(uint8_t proto, const union inet_addr *vaddr,
                    cid, sizeof(struct dp_vs_blklst_conf), &cf);
     if (!msg)
         return EDPVS_NOMEM;
-    err = multicast_msg_send(msg, 0, NULL);
+    err = multicast_msg_send(msg, DPVS_MSG_F_ASYNC, NULL);
     if (err != EDPVS_OK) {
         RTE_LOG(INFO, SERVICE, "[%s] fail to send multicast message\n", __func__);
         return err;
diff --git a/src/ipvs/ip_vs_laddr.c b/src/ipvs/ip_vs_laddr.c
index ff4dec4ab..d9deab89d 100644
--- a/src/ipvs/ip_vs_laddr.c
+++ b/src/ipvs/ip_vs_laddr.c
@@ -438,7 +438,7 @@ static int laddr_sockopt_set(sockoptid_t opt, const void *conf, size_t size)
         if (!msg)
             return EDPVS_NOMEM;
 
-        err = multicast_msg_send(msg, 0, NULL);
+        err = multicast_msg_send(msg, DPVS_MSG_F_ASYNC, NULL);
         /* go on in master core, not return */
         if (err != EDPVS_OK)
             RTE_LOG(ERR, SERVICE, "[%s] fail to send multicast message\n", __func__);
@@ -508,7 +508,7 @@ static int get_msg_cb(struct dpvs_msg *msg)
         return err;
 
     size = sizeof(*laddr_conf) + naddr * sizeof(struct dp_vs_laddr_entry);
-    laddrs = rte_malloc_socket(0, size, RTE_CACHE_LINE_SIZE, rte_socket_id());
+    laddrs = msg_reply_alloc(size);
     if (!laddrs) {
         if (addrs)
             rte_free(addrs);
@@ -605,7 +605,7 @@ static int laddr_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
                     return EDPVS_NOSERV;
                 }
 
-	        err = dp_vs_laddr_getall(svc, &addrs, &naddr);
+                err = dp_vs_laddr_getall(svc, &addrs, &naddr);
                 if (err != EDPVS_OK) {
                     msg_destroy(&msg);
                     return err;
@@ -639,7 +639,7 @@ static int laddr_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
                     err = dp_vs_copy_percore_laddrs_stats(laddrs, get_msg);
                     if (err != EDPVS_OK) {
                         msg_destroy(&msg);
-                        rte_free(out);
+                        rte_free(*out);
                         *out = NULL;
                         return err;
                     }
@@ -741,7 +741,7 @@ int dp_vs_laddr_init(void)
     memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
     msg_type.type   = MSG_TYPE_LADDR_GET_ALL;
     msg_type.mode   = DPVS_MSG_MULTICAST;
-    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.prio   = MSG_PRIO_LOW;
     msg_type.cid    = rte_lcore_id();
     msg_type.unicast_msg_cb = get_msg_cb;
     err = msg_type_mc_register(&msg_type);
diff --git a/src/ipvs/ip_vs_service.c b/src/ipvs/ip_vs_service.c
index 056f812f1..ebddcf3a9 100644
--- a/src/ipvs/ip_vs_service.c
+++ b/src/ipvs/ip_vs_service.c
@@ -219,7 +219,7 @@ __dp_vs_svc_match_get4(const struct rte_mbuf *mbuf, bool *outwall, lcoreid_t cid
         oif = rt->port->id;
     } else if (outwall != NULL && (NULL != ipset_addr_lookup(AF_INET, &daddr))
                                && (rt = route_gfw_net_lookup(&daddr.in))) {
-        char dst[64];	     
+        char dst[64];
         RTE_LOG(DEBUG, IPSET, "%s: IP %s is in the gfwip set, found route in the outwall table.\n", __func__, 
                               inet_ntop(AF_INET, &daddr, dst, sizeof(dst))? dst: "");	    
         oif = rt->port->id;
@@ -663,7 +663,7 @@ static int dp_vs_del_service(struct dp_vs_service *svc)
      * Unhash it from the service table
      */
     dp_vs_svc_unhash(svc);
-    
+
     /*
      * Wait until all the svc users go away.
      */
@@ -929,7 +929,7 @@ static int dp_vs_set_svc(sockoptid_t opt, const void *user, size_t len)
         if (!msg)
             return EDPVS_NOMEM;
 
-        ret = multicast_msg_send(msg, 0, NULL);
+        ret = multicast_msg_send(msg, DPVS_MSG_F_ASYNC, NULL);
         /* go on in master core, not return */
         if (ret != EDPVS_OK)
             RTE_LOG(ERR, SERVICE, "[%s] fail to send multicast message\n", __func__);
@@ -1075,7 +1075,7 @@ static int dp_vs_get_services_uc_cb(struct dpvs_msg *msg)
     }
 
     size = sizeof(*get) + sizeof(struct dp_vs_service_entry) * get->num_services;
-    output = rte_zmalloc("get_services", size, 0);
+    output = msg_reply_alloc(size);
     if (output == NULL)
         return EDPVS_NOMEM;
     ret = dp_vs_get_service_entries(get->num_services, output, cid);
@@ -1131,7 +1131,7 @@ static int dp_vs_get_service_uc_cb(struct dpvs_msg *msg)
         return EDPVS_NOTEXIST;
 
     size = sizeof(struct dp_vs_service_entry);   
-    entry = rte_zmalloc("get_service", size, 0);
+    entry = msg_reply_alloc(size);
     if (entry == NULL)
         return EDPVS_NOMEM;
 
@@ -1175,7 +1175,7 @@ static int dp_vs_get_dests_uc_cb(struct dpvs_msg *msg)
     }
 
     size = sizeof(*get) + sizeof(struct dp_vs_dest_entry) * (svc->num_dests);
-    output = rte_zmalloc("get_dests", size, 0);
+    output = msg_reply_alloc(size);
     if (output == NULL)
         return EDPVS_NOMEM;
     rte_memcpy(output, get, sizeof(*get));
@@ -1283,11 +1283,6 @@ static int dp_vs_get_svc(sockoptid_t opt, const void *user, size_t len, void **o
                     msg_destroy(&msg);
                     return EDPVS_OK;
                 } else {
-                    output = rte_zmalloc("get_services", size, 0);
-                    if (unlikely(NULL == output)) {
-                        msg_destroy(&msg);
-                        return EDPVS_NOMEM;
-                    }
                     list_for_each_entry(cur, &reply->mq, mq_node) {
                         get_msg = (struct dp_vs_get_services *)(cur->data);
                         if (get_msg->cid == cid) {
@@ -1305,7 +1300,6 @@ static int dp_vs_get_svc(sockoptid_t opt, const void *user, size_t len, void **o
                     }
                     RTE_LOG(ERR, SERVICE, "%s: find no services for cid=%d.\n", __func__, cid);
                     msg_destroy(&msg);
-                    rte_free(output);
                     return EDPVS_NOTEXIST;
                 }
             }
@@ -1329,7 +1323,7 @@ static int dp_vs_get_svc(sockoptid_t opt, const void *user, size_t len, void **o
                     msg_destroy(&msg);
                     RTE_LOG(ERR, SERVICE, "%s: send message fail.\n", __func__);
                     return EDPVS_MSG_FAIL;
-                }    
+                } 
 
                 if (cid == rte_get_master_lcore()) {
                     svc = dp_vs_get_service_lcore(entry, cid);
@@ -1656,7 +1650,7 @@ int dp_vs_service_init(void)
     memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
     msg_type.type   = MSG_TYPE_SVC_GET_SERVICES;
     msg_type.mode   = DPVS_MSG_MULTICAST;
-    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.prio   = MSG_PRIO_LOW;
     msg_type.cid    = rte_lcore_id();
     msg_type.unicast_msg_cb = dp_vs_get_services_uc_cb;
     err = msg_type_mc_register(&msg_type);
@@ -1668,7 +1662,7 @@ int dp_vs_service_init(void)
     memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
     msg_type.type   = MSG_TYPE_SVC_GET_SERVICE;
     msg_type.mode   = DPVS_MSG_MULTICAST;
-    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.prio   = MSG_PRIO_LOW;
     msg_type.cid    = rte_lcore_id();
     msg_type.unicast_msg_cb = dp_vs_get_service_uc_cb;
     err = msg_type_mc_register(&msg_type);
@@ -1680,7 +1674,7 @@ int dp_vs_service_init(void)
     memset(&msg_type, 0, sizeof(struct dpvs_msg_type));
     msg_type.type   = MSG_TYPE_SVC_GET_DESTS;
     msg_type.mode   = DPVS_MSG_MULTICAST;
-    msg_type.prio   = MSG_PRIO_NORM;
+    msg_type.prio   = MSG_PRIO_LOW;
     msg_type.cid    = rte_lcore_id();
     msg_type.unicast_msg_cb = dp_vs_get_dests_uc_cb;
     err = msg_type_mc_register(&msg_type);
diff --git a/tools/ipvsadm/ipvsadm.c b/tools/ipvsadm/ipvsadm.c
index 4fa592d29..103a5ad23 100644
--- a/tools/ipvsadm/ipvsadm.c
+++ b/tools/ipvsadm/ipvsadm.c
@@ -21,7 +21,7 @@
  *        Wensong Zhang       :   added the long options
  *        Wensong Zhang       :   added the hostname and portname input
  *        Wensong Zhang       :   added the hostname and portname output
- *	  Lars Marowsky-Brée  :   added persistence granularity support
+ *        Lars Marowsky-Brée  :   added persistence granularity support
  *        Julian Anastasov    :   fixed the (null) print for unknown services
  *        Wensong Zhang       :   added the port_to_anyname function
  *        Horms               :   added option to read commands from stdin
@@ -200,7 +200,7 @@ static const char* optnames[] = {
 	"ifname" ,
 	"sockpair" ,
 	"hash-target",
-        "cpu"
+	"cpu"
 };
 
 /*

From 589a587791d136e76b12c2f7bae8a833baa02c72 Mon Sep 17 00:00:00 2001
From: mscbg <jerrywang@qiyi.com>
Date: Tue, 29 Oct 2019 10:19:20 +0800
Subject: [PATCH 21/62] Modificate order

---
 tools/ipvsadm/ipvsadm.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tools/ipvsadm/ipvsadm.c b/tools/ipvsadm/ipvsadm.c
index 103a5ad23..9d78051cb 100644
--- a/tools/ipvsadm/ipvsadm.c
+++ b/tools/ipvsadm/ipvsadm.c
@@ -1862,10 +1862,10 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format, lcoreid_t cid
 			svc_name[0] = '\0';
 
 			left -= snprintf(svc_name + strlen(svc_name), left,
-				"MATCH %s", proto);
+				"af=%s", af);
 
 			left -= snprintf(svc_name + strlen(svc_name), left,
-				",af=%s", af);
+				",MATCH %s", proto);
 
 			if (strcmp(se->srange, "[::-::]:0-0") != 0 &&
                             strcmp(se->srange, "0.0.0.0-0.0.0.0:0-0") != 0)

From 6b6b53e3ea43a5e0980df4e93b6eafeddc69bf2f Mon Sep 17 00:00:00 2001
From: Weiliang Li <liweiliang@cmss.chinamobile.com>
Date: Mon, 4 Nov 2019 15:48:50 +0800
Subject: [PATCH 22/62] delete a dead code block

Opposite inner 'if' condition leads to a dead code block (outer condition is 'ii < NETIF_MAX_BOND_SLAVES' and inner condition is 'ii >= NETIF_MAX_BOND_SLAVES')
---
 src/netif.c | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/src/netif.c b/src/netif.c
index b1520a1b4..0ea1da77a 100644
--- a/src/netif.c
+++ b/src/netif.c
@@ -555,11 +555,6 @@ static void bonding_slave_handler(vector_t tokens)
     assert(str);
     if (get_port_conf_stream(str)) {
         for (ii = 0; ii < NETIF_MAX_BOND_SLAVES; ii++) {
-            if (ii >= NETIF_MAX_BOND_SLAVES) {
-                RTE_LOG(ERR, NETIF, "bonding %s's slaves exceed maximum supported: %d",
-                        current_bond->name, NETIF_MAX_BOND_SLAVES);
-                break;
-            }
             if (!current_bond->slaves[ii][0]) {
                 strncpy(current_bond->slaves[ii], str, sizeof(current_bond->slaves[ii]));
                 RTE_LOG(INFO, NETIF, "bonding %s:slave%d=%s\n", current_bond->name, ii, str);

From 1a9f189b7a45d7efb5e7f7dc90fe68090e118981 Mon Sep 17 00:00:00 2001
From: Weiliang Li <liweiliang@cmss.chinamobile.com>
Date: Tue, 5 Nov 2019 11:26:03 +0800
Subject: [PATCH 23/62] fix unmatched brace

Delete unmatched '}'.
---
 tools/keepalived/keepalived/check/ipvswrapper.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/tools/keepalived/keepalived/check/ipvswrapper.c b/tools/keepalived/keepalived/check/ipvswrapper.c
index 9a9612c33..5da2a4d63 100644
--- a/tools/keepalived/keepalived/check/ipvswrapper.c
+++ b/tools/keepalived/keepalived/check/ipvswrapper.c
@@ -93,8 +93,7 @@ ipvs_start(void)
 		log_message(LOG_INFO,
 				"IPVS : Can't initialize ipvs: %s",
 				ipvs_strerror(errno));
-			return IPVS_ERROR;
-		}
+		return IPVS_ERROR;
 	}
 
 	/* Allocate global user rules */

From f463d4fabd1904acf1b07af917eaae7ff754d18a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=A4=8F=E8=B4=B5=E6=AD=A6?= <xiaguiwu@qiyi.com>
Date: Fri, 2 Aug 2019 15:24:03 +0800
Subject: [PATCH 24/62] dpvs traffic bugfix

---
 include/conf/{stats.h => iftraf.h} |   45 +-
 include/iftraf.h                   |   21 +
 include/stats.h                    |   24 -
 src/iftraf.c                       | 1116 ++++++++++++++++++++++++++++
 src/ipv4.c                         |    8 +-
 src/ipv6/ipv6.c                    |    6 +-
 src/main.c                         |   12 +-
 src/stats.c                        |  826 --------------------
 tools/dpip/Makefile                |    2 +-
 tools/dpip/iftraf.c                |  155 ++++
 tools/dpip/stats.c                 |  125 ----
 11 files changed, 1334 insertions(+), 1006 deletions(-)
 rename include/conf/{stats.h => iftraf.h} (56%)
 create mode 100644 include/iftraf.h
 delete mode 100644 include/stats.h
 create mode 100644 src/iftraf.c
 delete mode 100644 src/stats.c
 create mode 100644 tools/dpip/iftraf.c
 delete mode 100644 tools/dpip/stats.c

diff --git a/include/conf/stats.h b/include/conf/iftraf.h
similarity index 56%
rename from include/conf/stats.h
rename to include/conf/iftraf.h
index c194e0aac..2ff57c838 100644
--- a/include/conf/stats.h
+++ b/include/conf/iftraf.h
@@ -15,39 +15,46 @@
  * GNU General Public License for more details.
  *
  */
-#ifndef __DPVS_STATS_CONF_H__
-#define __DPVS_STATS_CONF_H__
+#ifndef __DPVS_IFTRAF_CONF_H__
+#define __DPVS_IFTRAF_CONF_H__
 #include <stdint.h>
 #include <linux/if_addr.h>
 #include "inet.h"
-
+	
 enum {
     /* set */
-    SOCKOPT_SET_STATS_ADD  = 6400,
-    SOCKOPT_SET_STATS_DEL,
+    SOCKOPT_SET_IFTRAF_ADD = 6400,
+    SOCKOPT_SET_IFTRAF_DEL,
 
     /* get */
-    SOCKOPT_GET_STATS_SHOW,
+    SOCKOPT_GET_IFTRAF_SHOW,
 };
 
-struct stats_param {
-	uint8_t 			 af;
-	uint8_t 			 proto;
-	uint8_t			 cid;
+struct dp_vs_iftraf_conf {
+    char ifname[IFNAMSIZ];
+} __attribute__((__packed__));
+
 
-	union inet_addr 	 saddr;
-	union inet_addr 	 daddr;
-	uint16_t			 sport;
-	uint16_t			 dport;
+struct iftraf_param {
+    uint8_t af;
+    uint8_t proto;
+    uint8_t cid;
+    uint16_t devid;
+    char ifname[IFNAMSIZ];
+    union inet_addr saddr;
+    union inet_addr daddr;
+    uint16_t sport;
+    uint16_t dport;
 
-    double long total_recv;
-    double long total_sent;
+    uint32_t total_recv;
+    uint32_t total_sent;
 
 } __attribute__((__packed__));
 
-struct stats_param_array {
-    int                 nstats;
-    struct stats_param stats[0];
+struct iftraf_param_array {
+    int ntrafs;
+    struct iftraf_param iftraf[0];
 };
 
 #endif /* __DPVS_INETADDR_CONF_H__ */
+
diff --git a/include/iftraf.h b/include/iftraf.h
new file mode 100644
index 000000000..95eb60649
--- /dev/null
+++ b/include/iftraf.h
@@ -0,0 +1,21 @@
+#ifndef __IFTRAF_H__
+#define __IFTRAF_H__
+
+#include "common.h"
+#include "list.h"
+#include "dpdk.h"
+#include "timer.h"
+#include "inet.h"
+#include "ctrl.h"
+
+int iftraf_sockopt_get(sockoptid_t opt, const void *conf, size_t size,  void **out, size_t *outsize);
+
+int iftraf_pkt_in(int af, struct rte_mbuf *mbuf, struct netif_port *dev);
+int iftraf_pkt_out(int af, struct rte_mbuf *mbuf, struct netif_port *dev);
+void iftraf_process_ring(void);
+
+int iftraf_init(void);
+int iftraf_term(void); /* cleanup */
+
+#endif
+
diff --git a/include/stats.h b/include/stats.h
deleted file mode 100644
index dc1ccabd7..000000000
--- a/include/stats.h
+++ /dev/null
@@ -1,24 +0,0 @@
-#ifndef __STATS_H__
-#define __STATS_H__
-
-#include "common.h"
-#include "list.h"
-#include "dpdk.h"
-#include "timer.h"
-#include "inet.h"
-#include "ctrl.h"
-
-int stats_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
-                             void **out, size_t *outsize);
-
-int stats_pkt_in(int af, struct rte_mbuf *mbuf);
-int stats_pkt_out(int af, struct rte_mbuf *mbuf);
-void stats_process_ring(void);
-
-int stats_enable_func(void);
-int stats_disable_func(void);
-
-int stats_init(void);
-
-#endif
-
diff --git a/src/iftraf.c b/src/iftraf.c
new file mode 100644
index 000000000..352e4079a
--- /dev/null
+++ b/src/iftraf.c
@@ -0,0 +1,1116 @@
+#include <stdio.h>
+#include <string.h>
+#include "inet.h"
+#include "ipv4.h"
+#include "ipv6.h"
+#include "iftraf.h"
+#include "conf/iftraf.h"
+#include "vlan.h"
+
+#ifndef IFTRAF
+#define IFTRAF
+#define RTE_LOGTYPE_IFTRAF    RTE_LOGTYPE_USER1
+#endif
+
+#define IFTRAF_TOPN 20
+
+#define IFTRAF_RING_SIZE  1024
+#define IFTRAF_INTERVAL   1024 
+
+#define IFTRAF_PKT_DIR_IN 0
+#define IFTRAF_PKT_DIR_OUT 1
+
+#define IFTRAF_TBL_BITS          12
+#define IFTRAF_TBL_SIZE          (1 << IFTRAF_TBL_BITS)
+#define IFTRAF_TBL_MASK          (IFTRAF_TBL_SIZE - 1)
+
+#define IFTRAF_IFTBL_BITS          10
+#define IFTRAF_IFTBL_SIZE          (1 << IFTRAF_IFTBL_BITS)
+#define IFTRAF_IFTBL_MASK          (IFTRAF_IFTBL_SIZE - 1)
+
+#define IFTRAF_HISTORY_LENGTH  30
+#define IFTRAF_TIME_INTERVAL 0x100000
+
+static int history_pos = 0;
+static int iftraf_ticket = 0;
+bool iftraf_disable = true;
+
+typedef struct sorted_list_node_tag {
+    struct sorted_list_node_tag* next;
+    void* data;
+} sorted_list_node;
+
+typedef struct {
+    sorted_list_node root;
+    int (*compare)(void*, void*);
+    int sorted_list_num;
+} sorted_list_type;
+
+sorted_list_type iftraf_sorted_list;
+sorted_list_type sorted_list[NETIF_MAX_PORTS];
+
+static struct list_head *iftraf_tbl;
+static struct list_head *iftraf_iftbl;
+
+static struct rte_ring *iftraf_ring[DPVS_MAX_LCORE];
+
+#define this_inpkts_count   (RTE_PER_LCORE(inpkts_count))
+#define this_outpkts_count  (RTE_PER_LCORE(outpkts_count))
+
+static RTE_DEFINE_PER_LCORE(uint32_t, inpkts_count);
+static RTE_DEFINE_PER_LCORE(uint32_t, outpkts_count);
+
+static uint32_t iftraf_tlb_rnd; /* hash random */
+
+typedef enum {
+    HASH_STATUS_OK,
+    HASH_STATUS_KEY_NOT_FOUND
+} hash_status_enum;
+
+struct iftraf_pkt {
+    uint8_t af;
+    uint8_t proto;
+    uint8_t dir;
+    lcoreid_t cid;
+    uint32_t pkt_len;
+    union inet_addr saddr;
+    union inet_addr daddr;
+    uint16_t src_port;
+    uint16_t dst_port; 
+    portid_t  devid;
+    char ifname[IFNAMSIZ]; 
+} __rte_cache_aligned;
+
+struct iftraf_entry {
+    struct list_head list;
+
+    uint8_t af;
+    uint8_t proto;
+    lcoreid_t cid;
+    portid_t devid;
+    char ifname[IFNAMSIZ];
+
+    union inet_addr saddr;
+    union inet_addr daddr;
+    uint16_t sport;
+    uint16_t dport;
+
+    uint32_t recv[IFTRAF_HISTORY_LENGTH];
+    uint32_t sent[IFTRAF_HISTORY_LENGTH];	
+	
+    uint32_t total_recv;
+    uint32_t total_sent;
+    int last_write;
+
+} __rte_cache_aligned;
+
+
+static inline uint32_t iftraf_tlb_hashkey(int af,
+    const union inet_addr *saddr, uint16_t sport,
+    const union inet_addr *daddr, uint16_t dport)
+{
+    switch (af) {
+    case AF_INET:
+        return rte_jhash_3words((uint32_t)saddr->in.s_addr,
+                (uint32_t)daddr->in.s_addr,
+                ((uint32_t)sport) << 16 | (uint32_t)dport,
+                iftraf_tlb_rnd) & IFTRAF_TBL_MASK;
+
+    case AF_INET6:
+        {
+            uint32_t vect[9];
+
+            vect[0] = ((uint32_t)sport) << 16 | (uint32_t)dport;
+            memcpy(&vect[1], &saddr->in6, 16);
+            memcpy(&vect[5], &daddr->in6, 16);
+
+            return rte_jhash_32b(vect, 9, iftraf_tlb_rnd) & IFTRAF_TBL_MASK;
+        }
+
+    default:
+        RTE_LOG(DEBUG, IFTRAF, "%s: hashing unsupported protocol %d\n", __func__, af);
+        return 0;
+    }
+}
+
+static hash_status_enum iftraf_entry_get(uint32_t hash, struct iftraf_pkt *param, struct iftraf_entry **out_entry)
+{
+    struct iftraf_entry *entry;
+	
+    list_for_each_entry(entry, &iftraf_tbl[hash], list) {
+        if (entry->sport == param->src_port && entry->dport == param->dst_port
+            && inet_addr_equal(param->af, &entry->saddr, &param->saddr)
+            && inet_addr_equal(param->af, &entry->daddr, &param->daddr)
+            && entry->proto == param->proto
+            && entry->af == param->af) {
+            /* hit */
+            *out_entry = entry;
+            RTE_LOG(DEBUG, IFTRAF,
+                "%s: [hit]\n", __func__);	
+            return HASH_STATUS_OK;
+        }
+    }
+    RTE_LOG(DEBUG, IFTRAF,
+        "%s: [not found]\n", __func__);	
+
+    return HASH_STATUS_KEY_NOT_FOUND;
+}
+
+
+static void history_rotate(void) 
+{
+    uint32_t hash = 0;
+    struct iftraf_entry *entry, *nxt;
+    struct iftraf_entry *ifentry, *ifnxt;
+    history_pos = (history_pos + 1) % IFTRAF_HISTORY_LENGTH;
+
+    for(hash = 0; hash < IFTRAF_TBL_SIZE; hash++) {
+
+        list_for_each_entry_safe(entry, nxt, &iftraf_tbl[hash], list) {
+            /* no data in the last 20s */
+            if (entry->last_write == history_pos) {
+                list_del(&entry->list);
+                if (entry->af == AF_INET) {
+                    RTE_LOG(DEBUG, IFTRAF,
+                        "%s:[v4] [history_pos : %d, cid:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u]\n",
+                        __func__, history_pos, entry->cid, entry->proto, entry->saddr.in.s_addr, entry->daddr.in.s_addr, entry->sport, entry->dport);
+                }
+                rte_free(entry);
+            } else {
+                entry->total_recv -= entry->recv[history_pos];
+                entry->total_sent -= entry->sent[history_pos];
+                entry->recv[history_pos] = 0;
+                entry->sent[history_pos] = 0;
+            }
+        }
+    }
+
+    for(hash = 0; hash < IFTRAF_IFTBL_SIZE; hash++) {
+
+        list_for_each_entry_safe(ifentry, ifnxt, &iftraf_iftbl[hash], list) {
+
+            /* no data in the last 20s */
+            if (ifentry->last_write == history_pos) {
+                list_del(&ifentry->list);
+                if (ifentry->af == AF_INET) {
+                    RTE_LOG(DEBUG, IFTRAF,
+                        "%s:[v4] [history_pos : %d, cid:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u]\n",
+                        __func__, history_pos, ifentry->cid, ifentry->proto, ifentry->saddr.in.s_addr, entry->daddr.in.s_addr, entry->sport, entry->dport);
+                }
+                rte_free(ifentry);
+            } else {
+                ifentry->total_recv -= ifentry->recv[history_pos];
+                ifentry->total_sent -= ifentry->sent[history_pos];
+                ifentry->recv[history_pos] = 0;
+                ifentry->sent[history_pos] = 0;
+            }
+        }
+    }
+}
+
+static int iftraf_entry_compare(void* aa, void* bb) 
+{
+    struct iftraf_entry * a = (struct iftraf_entry *)aa;
+    struct iftraf_entry * b = (struct iftraf_entry *)bb;
+
+    return (a->total_recv + a->total_sent) > (b->total_recv + b->total_sent);
+}
+
+static void sorted_list_initialise(sorted_list_type* list) 
+{
+    list->root.next = NULL;
+    list->sorted_list_num = 0;
+    list->compare = &iftraf_entry_compare;
+}
+
+static void insert_top_list(struct iftraf_entry *entry, sorted_list_type *p_iftraf_sorted_list)
+{
+    sorted_list_node *node, *p, *first;
+    struct iftraf_entry *data;
+
+    p = &(p_iftraf_sorted_list->root);
+
+    if (p_iftraf_sorted_list->sorted_list_num == IFTRAF_TOPN && p_iftraf_sorted_list->compare(p->next->data, entry)) {   
+        struct iftraf_entry *firstentry = (struct iftraf_entry *)p->next->data;
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: no need to insert[%u: %u, %u: %u]\n", 
+             __func__, firstentry->total_recv, firstentry->total_sent, entry->total_recv, entry->total_sent);
+
+        return;
+    }
+
+    while (p->next != NULL && p_iftraf_sorted_list->compare(entry, p->next->data) > 0) {
+        p = p->next;
+    } 
+
+    node = rte_zmalloc(NULL, sizeof(*node), RTE_CACHE_LINE_SIZE);
+    if (node == NULL) {
+        RTE_LOG(ERR, IFTRAF,
+            "%s: no memory\n", __func__);
+        return;
+    }
+
+    node->next = p->next;
+    node->data = entry;
+    p->next = node;
+    RTE_LOG(DEBUG, IFTRAF,
+        "%s: [insert list]cid : %d, sp : %u, dp : %u, recv : %u, sent : %u\n", 
+        __func__, entry->cid, ntohs(entry->sport), ntohs(entry->dport), entry->total_recv, entry->total_sent);
+    if(p_iftraf_sorted_list->sorted_list_num < IFTRAF_TOPN)
+        p_iftraf_sorted_list->sorted_list_num++;
+    else {
+        /* free the first node */
+        p = &(p_iftraf_sorted_list->root);
+        first = p->next;
+	
+        data = (struct iftraf_entry *)first->data;
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: [free first entry]cid : %d, sp : %u, dp : %u, recv : %u, sent : %u\n", 
+             __func__, data->cid, ntohs(data->sport), ntohs(data->dport), data->total_recv, data->total_sent);
+        p->next = first->next;
+
+        rte_free(first);
+    }
+}
+
+static void list_merge(void)
+{
+    sorted_list_type *list;
+    portid_t devid = 0;
+    sorted_list_node *node, *p, *pp;	
+    uint32_t num = 0;
+
+    pp = &(iftraf_sorted_list.root);
+    for (devid = 0; devid < NETIF_MAX_PORTS; devid++) {
+
+        list = &sorted_list[devid];
+        p = &(list->root);
+        while (p->next != NULL && num < list->sorted_list_num) {
+            node = p->next;
+            p->next = node->next;	
+
+            /*insert*/
+            node->next = pp->next;
+            pp->next = node;
+            iftraf_sorted_list.sorted_list_num++;
+			
+            num++;
+        }		
+        num = 0;
+        list->sorted_list_num = 0;
+    }
+}
+
+static void iftraf_sort_top(portid_t port_id)
+{
+    uint32_t hash = 0;
+    struct iftraf_entry *entry, *nxt;
+    struct iftraf_entry *ifentry, *ifnxt;
+
+    if (port_id == NETIF_MAX_PORTS) {
+        for (hash = 0; hash < IFTRAF_IFTBL_SIZE; hash++) {
+            list_for_each_entry_safe(ifentry, ifnxt, &iftraf_iftbl[hash], list) {	                
+                insert_top_list(ifentry, &sorted_list[ifentry->devid]);
+            }
+        }
+
+        list_merge();
+		
+    } else if (port_id < NETIF_MAX_PORTS) {
+        for (hash = 0; hash < IFTRAF_IFTBL_SIZE; hash++) {
+            list_for_each_entry_safe(ifentry, ifnxt, &iftraf_iftbl[hash], list) {	
+                if (ifentry->devid == port_id) {
+                    RTE_LOG(DEBUG, IFTRAF,
+                        "%s: [devid : %u\n", 
+                         __func__, port_id);
+                    insert_top_list(ifentry, &iftraf_sorted_list);
+                }
+            }
+        }
+		
+    } else {
+        for(hash = 0; hash < IFTRAF_TBL_SIZE; hash++) {
+            list_for_each_entry_safe(entry, nxt, &iftraf_tbl[hash], list) {		    				
+                insert_top_list(entry, &iftraf_sorted_list);
+            }
+        }
+    }
+}
+
+static void iftraf_addr_cpy(int af, union inet_addr *daddr, union inet_addr *saddr)
+{
+    if (af == AF_INET) {
+        daddr->in.s_addr = saddr->in.s_addr;
+    } else if (af == AF_INET6) {
+        memcpy(daddr->in6.s6_addr, saddr->in6.s6_addr, 16);
+    } else {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: unsupported\n", __func__);
+    }    
+}
+
+int iftraf_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
+                             void **out, size_t *outsize)
+{
+    struct iftraf_param_array *array;
+    sorted_list_node *node, *p;
+    struct iftraf_entry *entry;
+    uint32_t off;
+    struct netif_port *port = NULL;
+    const struct dp_vs_iftraf_conf *cf;
+    portid_t port_id = UINT16_MAX;
+
+    if (iftraf_disable) {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: iftraf disable\n",  __func__);      
+        return EDPVS_OK;
+    }   
+
+    if (!conf || size < sizeof(struct dp_vs_iftraf_conf) || !out || !outsize)
+        return EDPVS_INVAL;
+	cf = conf;
+
+    if (cf && strlen(cf->ifname)) {
+        port = netif_port_get_by_name(cf->ifname);
+        port_id = (port != NULL ) ? port->id : NETIF_MAX_PORTS;
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: ifname : %s, id = %d\n", __func__, cf->ifname, port_id);
+    }
+
+    /* sort iftraf */
+    iftraf_sort_top(port_id);
+
+    RTE_LOG(DEBUG, IFTRAF,
+        "%s: sorted_list_num = %d\n", __func__, iftraf_sorted_list.sorted_list_num);
+
+    *outsize = sizeof(struct iftraf_param_array) + \
+               iftraf_sorted_list.sorted_list_num * sizeof(struct iftraf_param);
+    *out = rte_calloc(NULL, 1, *outsize, RTE_CACHE_LINE_SIZE);
+    if (!(*out)) {
+	RTE_LOG(ERR, IFTRAF, "%s: no memory \n", __func__);
+        return EDPVS_NOMEM;
+    }
+
+    array = *out;
+    array->ntrafs = iftraf_sorted_list.sorted_list_num;
+    off = 0;
+
+    p = &(iftraf_sorted_list.root);
+    while (p->next != NULL && off < iftraf_sorted_list.sorted_list_num) {
+        node = p->next;
+        p->next = node->next;	
+
+        entry = (struct iftraf_entry *)node->data;
+        array->iftraf[off].af = entry->af;
+        array->iftraf[off].proto = entry->proto;
+        array->iftraf[off].cid = entry->cid;
+        iftraf_addr_cpy(entry->af, &array->iftraf[off].saddr, &entry->saddr);
+        iftraf_addr_cpy(entry->af, &array->iftraf[off].daddr, &entry->daddr);
+        array->iftraf[off].sport = entry->sport;
+        array->iftraf[off].dport = entry->dport;
+        array->iftraf[off].total_recv = entry->total_recv;
+        array->iftraf[off].total_sent = entry->total_sent;
+        strcpy(array->iftraf[off].ifname, entry->ifname);
+       
+        if (AF_INET == entry->af) {
+            RTE_LOG(DEBUG, IFTRAF,"%s: sip = %s, sport = %u, dip = %s, dport = %u\n", 
+                __func__, inet_ntoa(array->iftraf[off].saddr.in), ntohs(entry->sport), inet_ntoa(array->iftraf[off].daddr.in), ntohs(entry->dport));
+        } else if (AF_INET6 == entry->af) {
+            char src_addr[INET6_ADDRSTRLEN];
+            char dst_addr[INET6_ADDRSTRLEN];
+
+            inet_ntop(AF_INET6, &entry->saddr.in6, src_addr, INET6_ADDRSTRLEN);
+            inet_ntop(AF_INET6, &entry->daddr.in6, dst_addr, INET6_ADDRSTRLEN);
+
+            RTE_LOG(DEBUG, IFTRAF,"%s: sip = %s sport = %u, dip = %s, dport = %u\n",
+                __func__, src_addr, ntohs(entry->sport), dst_addr, ntohs(entry->dport));
+        } else {
+            RTE_LOG(DEBUG, IFTRAF, "%s: unsupported\n", __func__);
+        }
+        
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: off : %u, cid : %d, proto: %u, total_recv: %u,  total_sent : %u\n", 
+            __func__, off, entry->cid, entry->proto, array->iftraf[off].total_recv, array->iftraf[off].total_sent);
+        
+        rte_free(node);
+
+        off++;
+    }
+
+    iftraf_sorted_list.sorted_list_num = 0;
+    return EDPVS_OK;
+}
+
+static void inline iftraf_tlb_add(struct iftraf_pkt *param)
+{
+    uint32_t hash;
+    struct iftraf_entry *entry = NULL;
+	
+    hash = iftraf_tlb_hashkey(param->af, &param->saddr, param->src_port, &param->daddr, 
+               param->dst_port);
+	
+    if (iftraf_entry_get(hash, param, &entry) == HASH_STATUS_KEY_NOT_FOUND) {
+
+        entry = rte_zmalloc(NULL, sizeof(struct iftraf_entry), RTE_CACHE_LINE_SIZE);
+        if (entry == NULL) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: no memory\n", __func__);
+            return;
+        }
+		
+        memset(entry, 0, sizeof(struct iftraf_entry));
+        entry->af = param->af;
+        entry->cid = param->cid;
+        entry->devid = param->devid;
+        entry->proto = param->proto;
+        iftraf_addr_cpy(param->af, &entry->saddr, &param->saddr);
+        iftraf_addr_cpy(param->af, &entry->daddr, &param->daddr);
+        entry->sport = param->src_port;
+        entry->dport = param->dst_port;
+        strcpy(entry->ifname, param->ifname);
+
+        list_add(&entry->list, &iftraf_tbl[hash]);				  
+    }
+	
+    if (param->af == AF_INET) {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s:[v4] dequeue iftraf_ring[cid:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u, len:%u]\n",
+            __func__, entry->cid, entry->proto, entry->saddr.in.s_addr, 
+            entry->daddr.in.s_addr, ntohs(entry->sport), ntohs(entry->dport), param->pkt_len);
+    } else {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s:[v6] dequeue iftraf_ring[cid:%d, dir:%d, proto:%u, src:%08X %08X %08X %08X, dst:%08X %08X %08X %08X, sp:%u, dp:%u, len:%u]\n",
+            __func__, entry->cid, param->dir, entry->proto, 
+            entry->saddr.in6.s6_addr32[0], entry->saddr.in6.s6_addr32[1],
+            entry->saddr.in6.s6_addr32[2], entry->saddr.in6.s6_addr32[3],
+            entry->daddr.in6.s6_addr32[0],entry->daddr.in6.s6_addr32[1],
+            entry->daddr.in6.s6_addr32[2],entry->daddr.in6.s6_addr32[3],
+            ntohs(entry->sport), ntohs(entry->dport), param->pkt_len);
+	}
+
+    /* Update record */
+    entry->last_write = history_pos;
+    if (param->dir == IFTRAF_PKT_DIR_IN) {
+        entry->recv[history_pos] += param->pkt_len;
+        entry->total_recv += param->pkt_len;
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: history_pos: %d, recv : %u, total_recv : %u\n", __func__, history_pos, entry->recv[history_pos], entry->total_recv);
+
+    } else {
+        entry->sent[history_pos] += param->pkt_len;
+        entry->total_sent += param->pkt_len;
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: history_pos: %d: sent : %u, total_sent: %u\n", __func__, history_pos, entry->sent[history_pos], entry->total_sent);
+    }
+}
+
+static inline unsigned iftraf_byif_hashkey(int af,
+					const union inet_addr *addr,
+					portid_t  devid)
+{
+    uint32_t addr_fold;
+
+    addr_fold = inet_addr_fold(af, addr);
+
+    if (!addr_fold) {
+        RTE_LOG(DEBUG, IFTRAF, "%s: IP proto not support.\n", __func__);
+        return 0;
+    }
+
+    return (ntohl(addr_fold) ^ (devid >> IFTRAF_IFTBL_BITS) ^ devid)
+        & IFTRAF_IFTBL_MASK;
+}
+
+static hash_status_enum iftraf_ifentry_get(uint32_t hash, struct iftraf_pkt *param, struct iftraf_entry **out_entry)
+{
+    struct iftraf_entry *entry;
+	
+    list_for_each_entry(entry, &iftraf_iftbl[hash], list) {
+        if (inet_addr_equal(param->af, &entry->saddr, &param->saddr)
+            && entry->devid == param->devid
+            && entry->af == param->af) {
+            /* hit */
+            *out_entry = entry;
+            RTE_LOG(DEBUG, IFTRAF,
+                "%s: [hit]\n", __func__);	
+            return HASH_STATUS_OK;
+        }
+    }
+    RTE_LOG(DEBUG, IFTRAF,
+        "%s: [not found]\n", __func__);	
+
+    return HASH_STATUS_KEY_NOT_FOUND;
+}
+
+static void inline iftraf_iftlb_add(struct iftraf_pkt *param)
+{
+    uint32_t hash;
+    struct iftraf_entry *entry = NULL;
+	
+    hash = iftraf_byif_hashkey(param->af, &param->saddr, param->devid);
+	
+    if (iftraf_ifentry_get(hash, param, &entry) == HASH_STATUS_KEY_NOT_FOUND) {
+
+        entry = rte_zmalloc(NULL, sizeof(struct iftraf_entry), RTE_CACHE_LINE_SIZE);
+        if (entry == NULL) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: no memory\n", __func__);
+            return;
+        }
+		
+        memset(entry, 0, sizeof(struct iftraf_entry));
+        entry->af = param->af;
+        entry->cid = param->cid;
+        entry->devid = param->devid;
+        entry->proto = 0;//param->proto;
+        iftraf_addr_cpy(param->af, &entry->saddr, &param->saddr);
+        iftraf_addr_cpy(param->af, &entry->daddr, &param->daddr);
+        entry->sport = 0;//param->src_port;
+        entry->dport = 0;//param->dst_port;
+        strcpy(entry->ifname, param->ifname);
+
+        list_add(&entry->list, &iftraf_iftbl[hash]);				  
+    }
+	
+    if (param->af == AF_INET) {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s:[v4] dequeue iftraf_ring[cid:%d, proto:%u, devid:%u, ifname:%s,src:%08X, dst:%08X, sp:%u, dp:%u, len:%u]\n",
+            __func__, entry->cid, entry->proto, entry->devid, entry->ifname, entry->saddr.in.s_addr, 
+            entry->daddr.in.s_addr, ntohs(entry->sport), ntohs(entry->dport), param->pkt_len);
+    } else {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s:[v6] dequeue iftraf_ring[cid:%d, dir:%d, proto:%u, devid:%u,  src:%08X %08X %08X %08X, dst:%08X %08X %08X %08X, sp:%u, dp:%u, len:%u]\n",
+            __func__, entry->cid, param->dir, entry->proto, entry->devid, 
+            entry->saddr.in6.s6_addr32[0], entry->saddr.in6.s6_addr32[1],
+            entry->saddr.in6.s6_addr32[2], entry->saddr.in6.s6_addr32[3],
+            entry->daddr.in6.s6_addr32[0],entry->daddr.in6.s6_addr32[1],
+            entry->daddr.in6.s6_addr32[2],entry->daddr.in6.s6_addr32[3],
+            ntohs(entry->sport), ntohs(entry->dport), param->pkt_len);
+    }
+
+    /* Update record */
+    entry->last_write = history_pos;
+    if (param->dir == IFTRAF_PKT_DIR_IN) {
+        entry->recv[history_pos] += param->pkt_len;
+        entry->total_recv += param->pkt_len;
+        RTE_LOG(DEBUG, IFTRAF,
+        "%s: history_pos: %d, recv : %u, total_recv : %u\n", __func__, history_pos, entry->recv[history_pos], entry->total_recv);
+
+    } else {
+        entry->sent[history_pos] += param->pkt_len;
+        entry->total_sent += param->pkt_len;
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: history_pos: %d: sent : %u, total_sent: %u\n", __func__, history_pos, entry->sent[history_pos], entry->total_sent);
+    }
+}
+
+
+void iftraf_process_ring(void)
+{    
+    int i;
+    uint16_t nb_rb;
+    lcoreid_t cid;
+    struct iftraf_pkt *param;
+    struct iftraf_pkt *params[NETIF_MAX_PKT_BURST];	
+
+    if (likely(iftraf_disable)) {		
+        return;
+    }	
+
+    iftraf_ticket++;
+    if(iftraf_ticket % IFTRAF_TIME_INTERVAL == 0) {
+        history_rotate();
+        iftraf_ticket = 0;
+    }
+	
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        if (!rte_lcore_is_enabled(cid)) {
+            continue;
+        }
+
+        nb_rb = rte_ring_dequeue_burst(iftraf_ring[cid], (void **)params,
+                    NETIF_MAX_PKT_BURST, NULL);
+
+        if (nb_rb > 0) {			
+            for (i = 0; i < nb_rb; i++) {
+                param = params[i];
+
+                /* insert into iftraf table */
+                iftraf_tlb_add(param);
+
+                /* insert into iftraf table by if && source ip */
+                iftraf_iftlb_add(param);
+           }
+        }
+    }
+}
+
+static int iftraf_pkt_deliver(int af, struct rte_mbuf *mbuf, struct netif_port *dev, uint8_t dir)
+{
+    int ret;
+    struct iftraf_pkt *pkt;
+    __be16 _ports[2], *ports;
+    lcoreid_t cid = rte_lcore_id();
+    portid_t devid;
+
+    if (af == AF_INET) {
+        struct ipv4_hdr *ip4h = ip4_hdr(mbuf);
+
+        if (unlikely(ip4h->next_proto_id != IPPROTO_TCP &&
+            ip4h->next_proto_id != IPPROTO_UDP)) {
+            RTE_LOG(DEBUG, IFTRAF,
+                "%s: unspported proto[core: %d, proto: %d]\n",
+                __func__, cid, ip4h->next_proto_id);
+            return EDPVS_NOPROT;
+        }
+
+        ports = mbuf_header_pointer(mbuf, ip4_hdrlen(mbuf), sizeof(_ports), _ports);
+        if (!ports) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: invalid pkt[%d, %d]\n",
+                __func__, cid, dir);
+            return EDPVS_INVPKT;
+        }	
+		
+        pkt = rte_zmalloc("iftraf_inpkt", sizeof(struct iftraf_pkt), RTE_CACHE_LINE_SIZE);
+        if (pkt == NULL) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: no memory[%d, %d]\n",
+                __func__, cid, dir);
+            return EDPVS_NOMEM;
+        }
+
+        if (dev->type == PORT_TYPE_VLAN) {
+            struct vlan_dev_priv *vlan = netif_priv(dev);
+            struct netif_port *real_dev = vlan->real_dev;
+            RTE_LOG(DEBUG, IFTRAF, "%s: id = %u, ifname = %s, type=%d\n", 
+                __func__, real_dev->id,real_dev->name,real_dev->type);
+            devid = real_dev->id;
+            strcpy(pkt->ifname, real_dev->name);
+        } else {		
+            devid = mbuf->port;
+            strcpy(pkt->ifname, dev->name);
+        }
+
+        pkt->devid = devid;
+        pkt->af = AF_INET;
+        pkt->cid = cid;
+        pkt->dir = dir;
+        pkt->proto = ip4h->next_proto_id;
+        if (dir == IFTRAF_PKT_DIR_IN) {
+            pkt->saddr.in.s_addr = ip4h->src_addr;
+            pkt->daddr.in.s_addr = ip4h->dst_addr;
+            pkt->src_port = ports[0];
+            pkt->dst_port = ports[1];
+        } else {
+            pkt->saddr.in.s_addr = ip4h->dst_addr;
+            pkt->daddr.in.s_addr = ip4h->src_addr;
+            pkt->src_port = ports[1];
+            pkt->dst_port = ports[0];
+        }
+
+        pkt->pkt_len = mbuf->pkt_len;
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s:[v4] enqueued to iftraf_ring[cid:%d, dir:%d, devid:%u, ifname:%s, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u, len:%u]\n",
+            __func__, cid, dir, pkt->devid, pkt->ifname, pkt->proto, ip4h->src_addr, ip4h->dst_addr, ntohs(pkt->src_port), ntohs(pkt->dst_port), pkt->pkt_len);
+
+    } else if (af == AF_INET6) {
+        struct ip6_hdr *ip6h = ip6_hdr(mbuf);
+        uint8_t ip6nxt = ip6h->ip6_nxt;
+
+        if (unlikely(ip6nxt != IPPROTO_TCP &&
+            ip6nxt != IPPROTO_UDP)) {
+            RTE_LOG(DEBUG, IFTRAF,
+                "%s: unspported proto[core: %d, proto: %d]\n",
+                __func__, cid, ip6nxt);
+            return EDPVS_NOPROT;
+        }
+        
+        ports = mbuf_header_pointer(mbuf, ip6_hdrlen(mbuf), sizeof(_ports), _ports);
+        if (!ports) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: invalid pkt[%d, %d]\n",
+                __func__, cid, dir);
+            return EDPVS_INVPKT;
+        }	 
+		
+        pkt = rte_zmalloc("iftraf_inpkt", sizeof(struct iftraf_pkt), RTE_CACHE_LINE_SIZE);
+        if (pkt == NULL) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: no memory[%d, %d]\n",
+                __func__, cid, dir);
+            return EDPVS_NOMEM;
+        }
+
+        if (dev->type == PORT_TYPE_VLAN) {
+            struct vlan_dev_priv *vlan = netif_priv(dev);
+            struct netif_port *real_dev = vlan->real_dev;
+            RTE_LOG(DEBUG, IFTRAF, "%s: id = %u, ifname = %s, type=%d\n", 
+                __func__, real_dev->id,real_dev->name,real_dev->type);
+            devid = real_dev->id;
+            strcpy(pkt->ifname, real_dev->name);
+        } else {		
+            devid = mbuf->port;
+            strcpy(pkt->ifname, dev->name);
+        }
+        		 
+        pkt->af = AF_INET6;
+        pkt->devid = devid;
+        pkt->cid = cid;
+        pkt->dir = dir;
+        pkt->proto = ip6nxt;
+        if (dir == IFTRAF_PKT_DIR_IN) {
+            pkt->saddr.in6 = ip6h->ip6_src;
+            pkt->daddr.in6 = ip6h->ip6_dst;
+            pkt->src_port = ports[0];
+            pkt->dst_port = ports[1];
+        } else {
+            pkt->saddr.in6 = ip6h->ip6_dst;
+            pkt->daddr.in6 = ip6h->ip6_src;
+            pkt->src_port = ports[1];
+            pkt->dst_port = ports[0];
+        }
+        pkt->pkt_len = mbuf->pkt_len;
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s:[v6] enqueued to iftraf_ring[cid:%d, dir:%d, devid:%u,  proto:%u, src:%08X %08X %08X %08X, dst:%08X %08X %08X %08X, sp:%u, dp:%u, len:%u]\n",
+            __func__, cid, dir, pkt->devid, pkt->proto, 
+            pkt->saddr.in6.s6_addr32[0], pkt->saddr.in6.s6_addr32[1],
+            pkt->saddr.in6.s6_addr32[2], pkt->saddr.in6.s6_addr32[3],
+            pkt->daddr.in6.s6_addr32[0],pkt->daddr.in6.s6_addr32[1],
+            pkt->daddr.in6.s6_addr32[2],pkt->daddr.in6.s6_addr32[3],
+            ntohs(pkt->src_port), ntohs(pkt->dst_port), pkt->pkt_len);
+    } else {
+        return EDPVS_INVPKT;
+    }	
+
+    ret = rte_ring_enqueue(iftraf_ring[cid], pkt);
+    if (ret < 0) {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: failed to enqueue iftraf_ring[%d]\n",
+            __func__, cid);
+        rte_free(pkt);
+        return EDPVS_DROP;
+    }
+
+    return EDPVS_OK;
+}
+
+int iftraf_pkt_in(int af, struct rte_mbuf *mbuf, struct netif_port *dev)
+{
+    if (likely(iftraf_disable)) {
+        return EDPVS_OK;
+    }		
+
+    this_inpkts_count++;
+    if (this_inpkts_count % IFTRAF_INTERVAL == 0) {
+        iftraf_pkt_deliver(af, mbuf, dev, IFTRAF_PKT_DIR_IN);
+    }
+
+    return EDPVS_OK;
+}
+
+int iftraf_pkt_out(int af, struct rte_mbuf *mbuf, struct netif_port *dev)
+{
+    if (likely(iftraf_disable)) {
+        return EDPVS_OK;
+    }		
+
+    this_outpkts_count++;
+    if (this_outpkts_count % IFTRAF_INTERVAL == 0) {
+        iftraf_pkt_deliver(af, mbuf, dev, IFTRAF_PKT_DIR_OUT);
+    }
+
+    return EDPVS_OK; 
+}
+
+
+/*
+ * master core allocates iftraf rings with the other lcores espectively.
+ */
+static int iftraf_ring_create(void)
+{
+    char name_buf[RTE_RING_NAMESIZE];
+    int socket_id;
+    lcoreid_t cid, ccid;
+
+    socket_id = rte_socket_id();
+
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        if (!rte_lcore_is_enabled(cid)) {
+            continue;
+        }
+
+        snprintf(name_buf, RTE_RING_NAMESIZE,
+            "iftraf_ring[%d]", cid);
+
+        iftraf_ring[cid] =
+            rte_ring_create(name_buf, IFTRAF_RING_SIZE, socket_id,
+                            RING_F_SP_ENQ | RING_F_SC_DEQ);
+
+        if (!iftraf_ring[cid]) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: failed to create iftraf_ring[%d]\n",
+                 __func__, cid);
+            for (ccid = 0; ccid < cid; ccid++) {
+                if (iftraf_ring[ccid])
+                    rte_ring_free(iftraf_ring[ccid]);
+            }
+            return EDPVS_NOMEM;
+        }
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: success to create iftraf_ring[%d]\n",
+            __func__, cid);
+    }
+
+    return EDPVS_OK;
+}
+
+static int iftraf_enable_func(void)
+{
+    int i;
+    int err;
+    lcoreid_t cid;
+
+    if (iftraf_disable == false) {
+        return EDPVS_OK;
+    }
+
+    err = iftraf_ring_create();
+    if (err != EDPVS_OK) {
+        return err;
+    }
+
+    iftraf_tbl = rte_malloc_socket(NULL, sizeof(struct list_head) * IFTRAF_TBL_SIZE,
+                    RTE_CACHE_LINE_SIZE, rte_socket_id());
+
+    if (!iftraf_tbl) {
+        RTE_LOG(ERR, IFTRAF,
+            "%s: rte_malloc_socket null\n",
+            __func__);
+        goto tbl_fail;
+    }
+
+    for (i = 0; i < IFTRAF_TBL_SIZE; i++)
+        INIT_LIST_HEAD(&iftraf_tbl[i]);
+
+    iftraf_iftbl = rte_malloc_socket(NULL, sizeof(struct list_head) * IFTRAF_IFTBL_SIZE,
+                      RTE_CACHE_LINE_SIZE, rte_socket_id());
+
+    if (!iftraf_iftbl) {
+        RTE_LOG(ERR, IFTRAF,
+            "%s: rte_malloc_socket null\n",
+            __func__);
+        goto iftbl_fail;
+    }
+
+    for (i = 0; i < IFTRAF_IFTBL_SIZE; i++)
+        INIT_LIST_HEAD(&iftraf_iftbl[i]);	
+	
+    iftraf_disable = false;
+    RTE_LOG(INFO, IFTRAF,
+        "%s: %s\n", __func__, "iftraf enabled");
+
+    return EDPVS_OK;
+ 
+iftbl_fail:
+    if (iftraf_tbl) 
+        rte_free(iftraf_tbl);
+
+tbl_fail:
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        if (!rte_lcore_is_enabled(cid)) {
+            continue;
+        }
+        if (iftraf_ring[cid])
+            rte_ring_free(iftraf_ring[cid]);
+        }
+
+    return EDPVS_NOMEM;
+}
+
+static void iftraf_variable_reset(void)
+{
+    history_pos = 0;	
+    this_inpkts_count = 0;
+    this_outpkts_count = 0;
+}
+
+static void iftraf_ring_free(void)
+{
+    lcoreid_t cid;
+
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        if (!rte_lcore_is_enabled(cid)) {
+             continue;
+        }
+        if (iftraf_ring[cid]) {
+            rte_ring_free(iftraf_ring[cid]);
+        }
+        
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: iftraf_ring free[%d]\n",
+            __func__, cid);
+    }
+}
+
+
+static int iftraf_disable_func(void)
+{
+    uint32_t hash;
+    int i;
+    uint16_t nb_rb;
+    lcoreid_t cid;
+    struct iftraf_pkt *param;
+    struct iftraf_pkt *params[NETIF_MAX_PKT_BURST];
+    struct iftraf_entry *entry, *nxt;
+    int count = 0;
+
+    if (iftraf_disable == true) {
+        return EDPVS_OK;
+    }
+
+    iftraf_disable = true;
+
+    /* dequeue iftraf ring and free elements */
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        if (!rte_lcore_is_enabled(cid)) {
+            continue;
+        }
+
+        nb_rb = rte_ring_dequeue_burst(iftraf_ring[cid], (void **)params,
+                    NETIF_MAX_PKT_BURST, NULL);
+
+        while (nb_rb > 0) {		
+            count += nb_rb;
+            for (i = 0; i < nb_rb; i++) {
+                param = params[i];
+                rte_free(param);
+            }
+			
+            nb_rb = rte_ring_dequeue_burst(iftraf_ring[cid], (void **)params,
+                        NETIF_MAX_PKT_BURST, NULL);
+        }
+		
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: iftraf ring[%d] free [%d] pkts\n",
+            __func__, cid, count);
+
+        count = 0;
+		
+    }	
+
+    /* free iftraf ring */
+    iftraf_ring_free();
+
+    /* free tlb */
+    if (iftraf_tbl) {
+        count = 0;
+        /* delete and free all entry added to iftraf_tbl */
+        for(hash = 0; hash < IFTRAF_TBL_SIZE; hash++) {
+            list_for_each_entry_safe(entry, nxt, &iftraf_tbl[hash], list) {
+                list_del(&entry->list);
+                rte_free(entry);
+                count++;
+            }
+        }
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: iftraf_tbl free [%d]\n",
+            __func__, count);
+
+        rte_free(iftraf_tbl);
+    }
+
+    /* free tlb */
+    if (iftraf_iftbl) {
+        count = 0;
+        /* delete and free all entry added to iftraf_tbl */
+        for(hash = 0; hash < IFTRAF_IFTBL_SIZE; hash++) {
+            list_for_each_entry_safe(entry, nxt, &iftraf_iftbl[hash], list) {
+                list_del(&entry->list);
+                rte_free(entry);
+                count++;
+            }
+        }
+		
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: iftraf_iftbl free [%d]\n",
+            __func__, count);
+
+        rte_free(iftraf_iftbl);
+    }
+    
+    iftraf_variable_reset();
+    RTE_LOG(INFO, IFTRAF,
+        "%s: %s\n", __func__, "iftraf disabled");
+
+    return EDPVS_OK;
+}
+
+static void iftraf_sorted_list_init(void) {  
+    portid_t devid = 0;
+    sorted_list_initialise(&iftraf_sorted_list);
+
+    for (devid = 0; devid < NETIF_MAX_PORTS; devid++) {
+        sorted_list_initialise(&sorted_list[devid]);
+    }
+}
+
+static int iftraf_sockopt_set(sockoptid_t opt, const void *conf, size_t size)
+{
+     switch (opt) {
+     case SOCKOPT_SET_IFTRAF_ADD:
+          return iftraf_enable_func(); 
+     case SOCKOPT_SET_IFTRAF_DEL:
+          return iftraf_disable_func(); 
+
+     default:
+          return EDPVS_NOTSUPP;
+     }
+}
+
+
+static struct dpvs_sockopts iftraf_sockopts = {
+    .version        = SOCKOPT_VERSION,
+    .set_opt_min    = SOCKOPT_SET_IFTRAF_ADD,
+    .set_opt_max    = SOCKOPT_SET_IFTRAF_DEL,
+    .set            = iftraf_sockopt_set,
+    .get_opt_min    = SOCKOPT_GET_IFTRAF_SHOW,
+    .get_opt_max    = SOCKOPT_GET_IFTRAF_SHOW,
+    .get            = iftraf_sockopt_get,
+};
+
+int iftraf_init(void)
+{
+    int err;
+	
+    iftraf_disable = true;
+
+    iftraf_tlb_rnd = (uint32_t)random();
+
+    iftraf_sorted_list_init();
+
+    if ((err = sockopt_register(&iftraf_sockopts)) != EDPVS_OK)
+        return err;
+
+    return EDPVS_OK;
+}
+
+int iftraf_term(void)
+{
+    int err;
+
+    err = sockopt_unregister(&iftraf_sockopts);
+    if (err != EDPVS_OK)
+        return err;
+
+    err = iftraf_disable_func();
+    if (err != EDPVS_OK)
+        return err;
+
+    return EDPVS_OK;
+}
diff --git a/src/ipv4.c b/src/ipv4.c
index 0bbf1b546..83b5158b4 100644
--- a/src/ipv4.c
+++ b/src/ipv4.c
@@ -26,7 +26,7 @@
 #include "neigh.h"
 #include "icmp.h"
 #include "parser/parser.h"
-#include "stats.h"
+#include "iftraf.h"
 
 #define IPV4
 #define RTE_LOGTYPE_IPV4    RTE_LOGTYPE_USER1
@@ -263,7 +263,8 @@ int ipv4_output(struct rte_mbuf *mbuf)
     assert(rt);
 
     IP4_UPD_PO_STATS(out, mbuf->pkt_len);
-    stats_pkt_out(AF_INET, mbuf);
+    mbuf->port = rt->port->id;
+    iftraf_pkt_out(AF_INET, mbuf, rt->port);
 
     return INET_HOOK(AF_INET, INET_HOOK_POST_ROUTING, mbuf,
             NULL, rt->port, ipv4_output_fin);
@@ -388,8 +389,7 @@ static int ipv4_rcv(struct rte_mbuf *mbuf, struct netif_port *port)
     }
 
     IP4_UPD_PO_STATS(in, mbuf->pkt_len);
-    stats_pkt_in(AF_INET, mbuf);
-
+    iftraf_pkt_in(AF_INET, mbuf, port);
     if (mbuf_may_pull(mbuf, sizeof(struct ipv4_hdr)) != 0)
         goto inhdr_error;
 
diff --git a/src/ipv6/ipv6.c b/src/ipv6/ipv6.c
index ebedf251e..3392953f5 100644
--- a/src/ipv6/ipv6.c
+++ b/src/ipv6/ipv6.c
@@ -35,7 +35,7 @@
 #include "parser/parser.h"
 #include "neigh.h"
 #include "icmp6.h"
-#include "stats.h"
+#include "iftraf.h"
 
 /*
  * IPv6 inet hooks
@@ -368,9 +368,9 @@ int ip6_output(struct rte_mbuf *mbuf)
     }
 
     IP6_UPD_PO_STATS(out, mbuf->pkt_len);
-    stats_pkt_out(AF_INET6, mbuf);
     mbuf->port = dev->id;
 
+    iftraf_pkt_out(AF_INET6, mbuf, dev);
     if (unlikely(conf_ipv6_disable)) {
         IP6_INC_STATS(outdiscards);
         if (rt)
@@ -538,7 +538,7 @@ static int ip6_rcv(struct rte_mbuf *mbuf, struct netif_port *dev)
     }
 
     IP6_UPD_PO_STATS(in, mbuf->pkt_len);
-    stats_pkt_in(AF_INET6, mbuf);
+    iftraf_pkt_in(AF_INET6, mbuf, dev);
 
     if (unlikely(conf_ipv6_disable)) {
         IP6_INC_STATS(indiscards);
diff --git a/src/main.c b/src/main.c
index d7f1b0639..9848b5952 100644
--- a/src/main.c
+++ b/src/main.c
@@ -35,7 +35,7 @@
 #include "ip_tunnel.h"
 #include "sys_time.h"
 #include "route6.h"
-#include "stats.h"
+#include "iftraf.h"
 
 #define DPVS    "dpvs"
 #define RTE_LOGTYPE_DPVS RTE_LOGTYPE_USER1
@@ -241,7 +241,7 @@ int main(int argc, char *argv[])
         rte_exit(EXIT_FAILURE, "Fail to init netif_ctrl: %s\n",
                  dpvs_strerror(err));
 
-    if ((err = stats_init()) != EDPVS_OK)
+    if ((err = iftraf_init()) != EDPVS_OK)
         rte_exit(EXIT_FAILURE, "Fail to init stats: %s\n", dpvs_strerror(err));
     
     /* config and start all available dpdk ports */
@@ -296,8 +296,8 @@ int main(int argc, char *argv[])
         /* process mac ring on master */
         neigh_process_ring(NULL);
 
-        /* process stats ring */
-        stats_process_ring();
+        /* process iftraf ring */
+        iftraf_process_ring();
 
         /* increase loop counts */
         netif_update_master_loop_cnt();
@@ -305,6 +305,10 @@ int main(int argc, char *argv[])
 
 end:
     dpvs_state_set(DPVS_STATE_FINISH);
+    if ((err = iftraf_term()) !=0 )
+        rte_exit(EXIT_FAILURE, "Fail to term iftraf: %s\n",
+                dpvs_strerror(err));
+
     if ((err = netif_ctrl_term()) !=0 )
         rte_exit(EXIT_FAILURE, "Fail to term netif_ctrl: %s\n",
                  dpvs_strerror(err));
diff --git a/src/stats.c b/src/stats.c
deleted file mode 100644
index dbeea4220..000000000
--- a/src/stats.c
+++ /dev/null
@@ -1,826 +0,0 @@
-#include <stdio.h>
-#include <string.h>
-#include "inet.h"
-#include "ipv4.h"
-#include "ipv6.h"
-#include "stats.h"
-#include "conf/stats.h"
-
-#ifndef STATS
-#define STATS
-#define RTE_LOGTYPE_STATS    RTE_LOGTYPE_USER1
-#endif
-
-#define STATS_TOPN 20
-
-#define STATS_RING_SIZE  1024
-#define STATS_INTERVAL   1024 
-
-#define STATS_PKT_DIR_IN 0
-#define STATS_PKT_DIR_OUT 1
-
-#define STATS_TBL_BITS          20
-#define STATS_TBL_SIZE          (1 << STATS_TBL_BITS)
-#define STATS_TBL_MASK          (STATS_TBL_SIZE - 1)
-
-#define HISTORY_LENGTH  10
-#define RESOLUTION 2
-int history_pos = 0;
-
-time_t last_timestamp;
-bool stats_disable = true;
-
-typedef struct sorted_list_node_tag {
-    struct sorted_list_node_tag* next;
-    void* data;
-} sorted_list_node;
-
-typedef struct {
-    sorted_list_node root;
-    int (*compare)(void*, void*);
-} sorted_list_type;
-
-int sorted_list_num = 0;
-sorted_list_type stats_sorted_list;
-
-static struct list_head *stats_tbl;
-static struct rte_ring *stats_ring[DPVS_MAX_LCORE];
-
-#define this_inpkts_count   (RTE_PER_LCORE(inpkts_count))
-#define this_outpkts_count  (RTE_PER_LCORE(outpkts_count))
-
-static RTE_DEFINE_PER_LCORE(uint32_t, inpkts_count);
-static RTE_DEFINE_PER_LCORE(uint32_t, outpkts_count);
-
-static uint32_t stats_tlb_rnd; /* hash random */
-
-typedef enum {
-	HASH_STATUS_OK,
-	HASH_STATUS_KEY_NOT_FOUND
-} hash_status_enum;
-
-struct stats_pkt {
-	int af;
-    uint32_t pkt_len;
-    union inet_addr saddr;
-	union inet_addr daddr;
-	uint16_t src_port;
-	uint16_t dst_port; 
-	uint8_t proto;
-	uint8_t dir;
-    lcoreid_t cid;
-} __rte_cache_aligned;
-
-struct stats_entry {
-	struct list_head	 list;
-
-	uint8_t 			 af;
-	uint8_t 			 proto;
-	lcoreid_t			 cid;
-
-	union inet_addr 	 saddr;
-	union inet_addr 	 daddr;
-	uint16_t			 sport;
-	uint16_t			 dport;
-
-    double long recv[HISTORY_LENGTH];
-    double long sent[HISTORY_LENGTH];	
-	
-    double long total_recv;
-    double long total_sent;
-	int last_write;
-
-} __rte_cache_aligned;
-
-
-static inline uint32_t stats_tlb_hashkey(int af,
-    const union inet_addr *saddr, uint16_t sport,
-    const union inet_addr *daddr, uint16_t dport,
-    uint32_t mask)
-{
-    switch (af) {
-    case AF_INET:
-        return rte_jhash_3words((uint32_t)saddr->in.s_addr,
-                (uint32_t)daddr->in.s_addr,
-                ((uint32_t)sport) << 16 | (uint32_t)dport,
-                stats_tlb_rnd) & mask;
-
-    case AF_INET6:
-        {
-            uint32_t vect[9];
-
-            vect[0] = ((uint32_t)sport) << 16 | (uint32_t)dport;
-            memcpy(&vect[1], &saddr->in6, 16);
-            memcpy(&vect[5], &daddr->in6, 16);
-
-            return rte_jhash_32b(vect, 9, stats_tlb_rnd) & mask;
-        }
-
-    default:
-        RTE_LOG(DEBUG, STATS, "%s: hashing unsupported protocol %d\n", __func__, af);
-        return 0;
-    }
-}
-
-static hash_status_enum stats_entry_get(uint32_t hash, struct stats_pkt *param, struct stats_entry **out_entry)
-{
-	struct stats_entry *entry;
-	
-	list_for_each_entry(entry, &stats_tbl[hash], list) {
-		if (entry->sport == param->src_port && entry->dport == param->dst_port
-				&& inet_addr_equal(param->af, &entry->saddr, &param->saddr)
-				&& inet_addr_equal(param->af, &entry->daddr, &param->daddr)
-				&& entry->proto == param->proto
-				&& entry->af == param->af) {
-			/* hit */
-	        *out_entry = entry;
-			RTE_LOG(DEBUG, STATS,
-					"%s: [hit]\n", __func__);	
-			return HASH_STATUS_OK;
-		}
-	}
-	RTE_LOG(DEBUG, STATS,
-			"%s: [not found]\n", __func__);	
-
-    return HASH_STATUS_KEY_NOT_FOUND;
-}
-
-
-static void history_rotate(void) 
-{
-	uint32_t hash = 0;
-	struct stats_entry *entry, *nxt;
-    history_pos = (history_pos + 1) % HISTORY_LENGTH;
-
-    for(; hash < STATS_TBL_SIZE; hash++) {
-
-		list_for_each_entry_safe(entry, nxt, &stats_tbl[hash], list) {
-
-            /* no data in the last 20s */
-            if (entry->last_write == history_pos) {
-                list_del(&entry->list);
-                if (entry->af == AF_INET) {
-                    RTE_LOG(DEBUG, STATS,
-                         "%s:[v4] [history_pos : %d, cid:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u]\n",
-                         __func__, history_pos, entry->cid, entry->proto, entry->saddr.in.s_addr,                                                                                entry->daddr.in.s_addr, entry->sport, entry->dport);
-                }
-                rte_free(entry);
-			} else {
-				entry->total_recv -= entry->recv[history_pos];
-				entry->total_sent -= entry->sent[history_pos];
-				entry->recv[history_pos] = 0;
-				entry->sent[history_pos] = 0;
-			}
-		}
-	}
-}
-
-static int stats_entry_compare(void* aa, void* bb) {
-    struct stats_entry * a = (struct stats_entry *)aa;
-    struct stats_entry * b = (struct stats_entry *)bb;
-
-	return (a->total_recv + a->total_sent) > (b->total_recv + b->total_sent);
-}
-
-static void sorted_list_initialise(sorted_list_type* list) {
-    list->root.next = NULL;
-}
-
-static void insert_topN_list(struct stats_entry *entry)
-{
-    sorted_list_node *node, *p, *first;
-    struct stats_entry *data;
-
-    p = &(stats_sorted_list.root);
-
-	if (sorted_list_num == STATS_TOPN && stats_sorted_list.compare(p->next->data, entry)) {   
-		RTE_LOG(DEBUG, STATS,
-			"%s: no need to insert\n", __func__);
-		return;
-	}
-
-    while (p->next != NULL && stats_sorted_list.compare(entry, p->next->data) > 0) {
-        p = p->next;
-    } 
-
-    node = rte_zmalloc(NULL, sizeof(*node), RTE_CACHE_LINE_SIZE);
-	if (node == NULL) {
-		RTE_LOG(ERR, STATS,
-				"%s: no memory\n", __func__);
-		return;
-	}
-
-    node->next = p->next;
-    node->data = entry;
-    p->next = node;
-    RTE_LOG(DEBUG, STATS,
-        "%s: [insert list]cid : %d, sp : %u, dp : %u\n", 
-        __func__, entry->cid, entry->sport, entry->dport);
-    if(sorted_list_num < STATS_TOPN)
-	    sorted_list_num++;
-    else {
-        /* free the first node */
-	    p = &(stats_sorted_list.root);
-        first = p->next;
-	
-        data = (struct stats_entry *)first->data;
-        RTE_LOG(DEBUG, STATS,
-            "%s: [free first entry]cid : %d, sp : %u, dp : %u\n", 
-             __func__, data->cid, data->sport, data->dport);
-        p->next = first->next;
-
-		rte_free(first);
-	}
-}
-
-static void stats_sort_topN(void)
-{
-	uint32_t hash = 0;
-	struct stats_entry *entry, *nxt;
-
-    for(; hash < STATS_TBL_SIZE; hash++) {
-
-		list_for_each_entry_safe(entry, nxt, &stats_tbl[hash], list) {
-		    insert_topN_list(entry);
-		}
-	}
-}
-
-static void stats_addr_cpy(int af, 	union inet_addr *daddr, union inet_addr *saddr)
-{
-	if (af == AF_INET) {
-		daddr->in.s_addr = saddr->in.s_addr;
-	} else if (af == AF_INET6) {
-		memcpy(daddr->in6.s6_addr, saddr->in6.s6_addr, 16);
-	} else {
-		RTE_LOG(DEBUG, STATS,
-				"%s: unsupported\n", __func__);
-	}    
-}
-
-int stats_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
-                             void **out, size_t *outsize)
-{
-    struct stats_param_array *array;
-    sorted_list_node *node, *p;
-	struct stats_entry *entry;
-    uint32_t off;
-
-    if (stats_disable) {
-        RTE_LOG(DEBUG, STATS,
-            "%s: stats disable\n",  __func__);      
-        return EDPVS_OK;
-    }   
-
-    if (!conf || size < sizeof(struct stats_param) || !out || !outsize)
-        return EDPVS_INVAL;
-
-    /* sort stats */
-	stats_sort_topN();
-
-    *outsize = sizeof(struct stats_param_array) + \
-               sorted_list_num * sizeof(struct stats_param);
-    *out = rte_calloc(NULL, 1, *outsize, RTE_CACHE_LINE_SIZE);
-    if (!(*out)) {
-		RTE_LOG(ERR, STATS,
-						"%s: no memory \n", __func__);
-        return EDPVS_NOMEM;
-    }
-
-    array = *out;
-    array->nstats = sorted_list_num;
-    off = 0;
-
-    p = &(stats_sorted_list.root);
-    while (p->next != NULL && off < sorted_list_num) {
-        node = p->next;
-        p->next = node->next;	
-
-	    entry = (struct stats_entry *)node->data;
-		array->stats[off].af = entry->af;
-		array->stats[off].proto = entry->proto;
-		array->stats[off].cid = entry->cid;
-		stats_addr_cpy(entry->af, &array->stats[off].saddr, &entry->saddr);
-		stats_addr_cpy(entry->af, &array->stats[off].daddr, &entry->daddr);
-		array->stats[off].sport = entry->sport;
-		array->stats[off].dport = entry->dport;
-		array->stats[off].total_recv = entry->total_recv * STATS_INTERVAL;
-		array->stats[off].total_sent = entry->total_sent * STATS_INTERVAL;
-       
-        if (AF_INET == entry->af) {
-            RTE_LOG(DEBUG, STATS,"%s: sip = %s, sport = %u\n", __func__, inet_ntoa(array->stats[off].saddr.in), ntohs(entry->sport));
-            RTE_LOG(DEBUG, STATS,"%s: dip = %s, dport = %u\n", __func__, inet_ntoa(array->stats[off].daddr.in), ntohs(entry->dport));
-        } else if (AF_INET6 == entry->af) {
-                char src_addr[INET6_ADDRSTRLEN];
-                char dst_addr[INET6_ADDRSTRLEN];
-
-                inet_ntop(AF_INET6, &entry->saddr.in6, src_addr, INET6_ADDRSTRLEN);
-                inet_ntop(AF_INET6, &entry->daddr.in6, dst_addr, INET6_ADDRSTRLEN);
-
-                RTE_LOG(DEBUG, STATS,"%s: sip = %s sport = %u, dip = %s, dport = %u\n",
-                     __func__, src_addr, ntohs(entry->sport), dst_addr, ntohs(entry->dport));
-        } else {
-            RTE_LOG(DEBUG, STATS, "%s: unsupported\n", __func__);
-        }
-        
-        RTE_LOG(DEBUG, STATS,
-            "%s: off : %u, cid : %d, proto: %u, total_recv: %Lf,  total_sent : %Lf\n", 
-            __func__, off, entry->cid, entry->proto, array->stats[off].total_recv, array->stats[off].total_sent);
-        
-        rte_free(node);
-
-		off++;
-    }
-
-    sorted_list_num = 0;
-    return EDPVS_OK;
-}
-
-
-void stats_process_ring(void)
-{    
-    int i;
-    uint16_t nb_rb;
-	uint32_t hash;
-	lcoreid_t cid;
-    struct stats_pkt *param;
-	struct stats_pkt *params[NETIF_MAX_PKT_BURST];
-	struct stats_entry *entry = NULL;
-
-    time_t t;
-
-    if (likely(stats_disable)) {		
-        return;
-    }	
-
-    t = time(NULL);
-    if(t - last_timestamp >= RESOLUTION) {
-        history_rotate();
-        last_timestamp = t;
-    }
-	
-    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
-	    if (!rte_lcore_is_enabled(cid)) {
-		    continue;
-	    }
-
-	    nb_rb = rte_ring_dequeue_burst(stats_ring[cid], (void **)params,
-									  NETIF_MAX_PKT_BURST, NULL);
-
-		if (nb_rb > 0) {			
-			for (i = 0; i < nb_rb; i++) {
-			    param = params[i];
-
-				hash = stats_tlb_hashkey(param->af, &param->saddr, param->src_port, &param->daddr, 
-					param->dst_port, STATS_TBL_MASK);
-
-				if (stats_entry_get(hash, param, &entry) == HASH_STATUS_KEY_NOT_FOUND) {
-
-					entry = rte_zmalloc(NULL, sizeof(struct stats_entry), RTE_CACHE_LINE_SIZE);
-					if (entry == NULL) {
-						RTE_LOG(ERR, STATS,
-								"%s: no memory\n", __func__);
-						continue;
-					}
-					
-					memset(entry, 0, sizeof(struct stats_entry));
-					entry->af = param->af;
-					entry->cid = param->cid;
-					entry->proto = param->proto;
-					stats_addr_cpy(param->af, &entry->saddr, &param->saddr);
-					stats_addr_cpy(param->af, &entry->daddr, &param->daddr);
-					entry->sport = param->src_port;
-					entry->dport = param->dst_port;
-			
-					list_add(&entry->list, &stats_tbl[hash]);                 
-				}
-                
-                if (param->af == AF_INET) {
-				    RTE_LOG(DEBUG, STATS,
-						"%s:[v4] dequeue stats_ring[cid:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u, len:%u]\n",
-						__func__, entry->cid, entry->proto, entry->saddr.in.s_addr, 
-						entry->daddr.in.s_addr, entry->sport, entry->dport, param->pkt_len);
-                } else {
-                    RTE_LOG(DEBUG, STATS,
-                         "%s:[v6] dequeue stats_ring[cid:%d, dir:%d, proto:%u, src:%08X %08X %08X %08X, dst:%08X %08X %08X %08X, sp:%u, dp:%u, len:%u]\n",
-                         __func__, entry->cid, param->dir, entry->proto, 
-                         entry->saddr.in6.s6_addr32[0], entry->saddr.in6.s6_addr32[1],
-                         entry->saddr.in6.s6_addr32[2], entry->saddr.in6.s6_addr32[3],
-                         entry->daddr.in6.s6_addr32[0],entry->daddr.in6.s6_addr32[1],
-                         entry->daddr.in6.s6_addr32[2],entry->daddr.in6.s6_addr32[3],
-                         entry->sport, entry->dport, param->pkt_len);
-                
-                }
-
-				/* Update record */
-				entry->last_write = history_pos;
-				if (param->dir == STATS_PKT_DIR_IN) {
-					entry->recv[history_pos] += param->pkt_len;
-					entry->total_recv += param->pkt_len;
-                    RTE_LOG(DEBUG, STATS,
-                        "%s: history_pos: %d, recv : %Lf, total_recv : %Lf\n", __func__, history_pos, entry->recv[history_pos], entry->total_recv);
-
-                } else {
-					entry->sent[history_pos] += param->pkt_len;
-					entry->total_sent += param->pkt_len;
-
-                    RTE_LOG(DEBUG, STATS,
-                        "%s: history_pos: %d: sent : %Lf, total_sent: %Lf\n", __func__, history_pos, entry->sent[history_pos], entry->total_sent);
-				}				
-			}
-		}
-    }
-}
-
-static int stats_pkt_deliver(int af, struct rte_mbuf *mbuf, uint8_t dir)
-{
-	int ret;
-	struct stats_pkt *pkt;
-	__be16 _ports[2], *ports;
-	lcoreid_t cid = rte_lcore_id();
-
-	if (af == AF_INET) {
-		struct ipv4_hdr *ip4h = ip4_hdr(mbuf);
-
-		if (unlikely(ip4h->next_proto_id != IPPROTO_TCP &&
-					 ip4h->next_proto_id != IPPROTO_UDP)) {
-			RTE_LOG(DEBUG, STATS,
-				"%s: unspported proto[core: %d, proto: %d]\n",
-				__func__, cid, ip4h->next_proto_id);
-			return EDPVS_NOPROT;
-		}
-
-	    ports = mbuf_header_pointer(mbuf, ip4_hdrlen(mbuf), sizeof(_ports), _ports);
-	    if (!ports) {
-			RTE_LOG(ERR, STATS,
-					"%s: invalid pkt[%d, %d]\n",
-					__func__, cid, dir);
-			return EDPVS_INVPKT;
-		}	
-		
-		pkt = rte_zmalloc("stats_inpkt", sizeof(struct stats_pkt), RTE_CACHE_LINE_SIZE);
-		if (pkt == NULL) {
-			RTE_LOG(ERR, STATS,
-					"%s: no memory[%d, %d]\n",
-					__func__, cid, dir);
-			return EDPVS_NOMEM;
-		}
-		
-		pkt->af = AF_INET;
-		pkt->cid = cid;
-		pkt->dir = dir;
-		pkt->proto = ip4h->next_proto_id;
-		pkt->saddr.in.s_addr = ip4h->src_addr;
-		pkt->daddr.in.s_addr = ip4h->dst_addr;
-		pkt->src_port = ports[0];
-		pkt->dst_port = ports[1];
-		pkt->pkt_len = mbuf->pkt_len;
-		RTE_LOG(DEBUG, STATS,
-				"%s:[v4] enqueued to stats_ring[cid:%d, dir:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u, len:%u]\n",
-				__func__, cid, dir, pkt->proto, ip4h->src_addr, ip4h->dst_addr, pkt->src_port, pkt->dst_port, pkt->pkt_len);
-
-	} else if (af == AF_INET6) {
-		struct ip6_hdr *ip6h = ip6_hdr(mbuf);
-		uint8_t ip6nxt = ip6h->ip6_nxt;
-
-		if (unlikely(ip6nxt != IPPROTO_TCP &&
-					 ip6nxt != IPPROTO_UDP)) {
-			RTE_LOG(DEBUG, STATS,
-				"%s: unspported proto[core: %d, proto: %d]\n",
-				__func__, cid, ip6nxt);
-			return EDPVS_NOPROT;
-		}
-        
-		ports = mbuf_header_pointer(mbuf, ip6_hdrlen(mbuf), sizeof(_ports), _ports);
-		if (!ports) {
-			RTE_LOG(ERR, STATS,
-					"%s: invalid pkt[%d, %d]\n",
-					 __func__, cid, dir);
-			return EDPVS_INVPKT;
-		}	 
-		
-		pkt = rte_zmalloc("stats_inpkt", sizeof(struct stats_pkt), RTE_CACHE_LINE_SIZE);
-		if (pkt == NULL) {
-			RTE_LOG(ERR, STATS,
-					"%s: no memory[%d, %d]\n",
-					__func__, cid, dir);
-			return EDPVS_NOMEM;
-		}
-		
-		pkt->af = AF_INET6;
-		pkt->cid = cid;
-		pkt->dir = dir;
-		pkt->proto = ip6nxt;
-		pkt->saddr.in6 = ip6h->ip6_src;
-		pkt->daddr.in6 = ip6h->ip6_dst;
-		pkt->src_port = ports[0];
-		pkt->dst_port = ports[1];
-		pkt->pkt_len = mbuf->pkt_len;
-
-		RTE_LOG(DEBUG, STATS,
-				"%s:[v6] enqueued to stats_ring[cid:%d, dir:%d, proto:%u, src:%08X %08X %08X %08X, dst:%08X %08X %08X %08X, sp:%u, dp:%u, len:%u]\n",
-				__func__, cid, dir, pkt->proto, 
-				pkt->saddr.in6.s6_addr32[0], pkt->saddr.in6.s6_addr32[1],
-				pkt->saddr.in6.s6_addr32[2], pkt->saddr.in6.s6_addr32[3],
-			    pkt->daddr.in6.s6_addr32[0],pkt->daddr.in6.s6_addr32[1],
-			    pkt->daddr.in6.s6_addr32[2],pkt->daddr.in6.s6_addr32[3],
-		        pkt->src_port, pkt->dst_port, pkt->pkt_len);
-		
-    } else {
-//#ifdef CONFIG_DPVS_IPVS_DEBUG
-		RTE_LOG(DEBUG, STATS,
-			"%s: err af\n",	__func__);
-//#endif
-        return EDPVS_INVPKT;
-	}	
-
-	ret = rte_ring_enqueue(stats_ring[cid], pkt);
-	if (ret < 0) {
-		RTE_LOG(DEBUG, STATS,
-			"%s: failed to enqueue stats_ring[%d]\n",
-			__func__, cid);
-		rte_free(pkt);
-		return EDPVS_DROP;
-	}
-
-//#ifdef CONFIG_DPVS_IPVS_DEBUG
-	RTE_LOG(DEBUG, STATS,
-		"%s: enqueued to stats_ring[%d]\n",
-		__func__, cid);
-//#endif
-
-    return EDPVS_OK;
-}
-
-int stats_pkt_in(int af, struct rte_mbuf *mbuf)
-{
-    if (likely(stats_disable)) {
-		RTE_LOG(DEBUG, STATS,
-			"%s: stats disable\n", __func__);		
-        return EDPVS_OK;
-    }		
-
-	this_inpkts_count++;
-	if (this_inpkts_count % STATS_INTERVAL == 0) {
-
-        stats_pkt_deliver(af, mbuf, STATS_PKT_DIR_IN);
-    }
-
-	return EDPVS_OK;
-}
-
-int stats_pkt_out(int af, struct rte_mbuf *mbuf)
-{
-    if (likely(stats_disable)) {
-		RTE_LOG(DEBUG, STATS,
-			"%s: stats disable\n", __func__);		
-        return EDPVS_OK;
-    }		
-
-	this_outpkts_count++;
-	if (this_outpkts_count % STATS_INTERVAL == 0) {
-
-        stats_pkt_deliver(af, mbuf, STATS_PKT_DIR_OUT);
-    }
-
-	return EDPVS_OK; 
-}
-
-
-/*
- * master core allocates stats rings with the other lcores espectively.
- */
-static int stats_ring_create(void)
-{
-    char name_buf[RTE_RING_NAMESIZE];
-    int socket_id;
-	lcoreid_t cid;
-
-    socket_id = rte_socket_id();
-
-    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
-        if (!rte_lcore_is_enabled(cid)) {
-            continue;
-        }
-
-        snprintf(name_buf, RTE_RING_NAMESIZE,
-            "stat_ring[%d]", cid);
-
-        stats_ring[cid] =
-            rte_ring_create(name_buf, STATS_RING_SIZE, socket_id,
-                            RING_F_SP_ENQ | RING_F_SC_DEQ);
-
-        if (!stats_ring[cid]) {
-            RTE_LOG(ERR, STATS,
-                "%s: failed to create stat_ring[%d]\n",
-                 __func__, cid);
-            return EDPVS_NOMEM;
-        }
-
-        RTE_LOG(DEBUG, STATS,
-	        "%s: success to create stat_ring[%d]\n",
-	        __func__, cid);
-    }
-
-    return EDPVS_OK;
-}
-
-int stats_enable_func(void)
-{
-	int i;
-    int err;
-
-    if (stats_disable == false) {
-        return EDPVS_OK;
-    }
-
-    err = stats_ring_create();
-    if (err != EDPVS_OK) {
-        return err;
-    }
-
-    stats_tbl = rte_malloc_socket(NULL, sizeof(struct list_head) * STATS_TBL_SIZE,
-            RTE_CACHE_LINE_SIZE, rte_socket_id());
-
-	if (!stats_tbl) {
-        RTE_LOG(ERR, STATS,
-            "%s: rte_malloc_socket null\n",
-            __func__);
-		return EDPVS_NOMEM;
-	}
-
-    for (i = 0; i < STATS_TBL_SIZE; i++)
-        INIT_LIST_HEAD(&stats_tbl[i]);
-	
-	stats_disable = false;
-	RTE_LOG(DEBUG, STATS,
-		"%s: stats_disable[%d]\n",
-		__func__, stats_disable);
-
-    return EDPVS_OK;
-}
-
-static void stats_variable_reset(void)
-{
-	history_pos = 0;	
-    sorted_list_num = 0;	
-	
-	this_inpkts_count = 0;
-	this_outpkts_count = 0;
-}
-
-static void stats_ring_free(void)
-{
-    lcoreid_t cid;
-
-    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
-        if (!rte_lcore_is_enabled(cid)) {
-             continue;
-        }
-        rte_ring_free(stats_ring[cid]);
-        RTE_LOG(DEBUG, STATS,
-            "%s: stats_ring free[%d]\n",
-            __func__, cid);
-    }
-}
-
-
-int stats_disable_func(void)
-{
-	uint32_t hash = 0;
-    int i;
-    uint16_t nb_rb;
-	lcoreid_t cid;
-    struct stats_pkt *param;
-	struct stats_pkt *params[NETIF_MAX_PKT_BURST];
-	struct stats_entry *entry, *nxt;
-	sorted_list_node *node, *p;
-	int count = 0;
-
-    if (stats_disable == true) {
-        return EDPVS_OK;
-    }
-
-	stats_disable = true;
-
-    /* dequeue stats ring and free elements */
-    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
-	    if (!rte_lcore_is_enabled(cid)) {
-		    continue;
-	    }
-
-	    nb_rb = rte_ring_dequeue_burst(stats_ring[cid], (void **)params,
-									  NETIF_MAX_PKT_BURST, NULL);
-
-		while (nb_rb > 0) {		
-			count += nb_rb;
-			for (i = 0; i < nb_rb; i++) {
-			    param = params[i];
-                rte_free(param);
-			}
-			
-		    nb_rb = rte_ring_dequeue_burst(stats_ring[cid], (void **)params,
-							  NETIF_MAX_PKT_BURST, NULL);
-		}
-		
-		RTE_LOG(DEBUG, STATS,
-			"%s: stats ring[%d] free [%d] pkts\n",
-			__func__, cid, count);
-
-		count = 0;
-		
-    }	
-
-	/* free stats ring */
-	stats_ring_free();
-
-    count = 0;
-    /* delete and free all entry added to stats_tbl */
-    for(; hash < STATS_TBL_SIZE; hash++) {
-		list_for_each_entry_safe(entry, nxt, &stats_tbl[hash], list) {
-            list_del(&entry->list);
-            rte_free(entry);
-			count++;
-		}
-	}
-
-	RTE_LOG(DEBUG, STATS,
-		"%s: stats_tbl free [%d]\n",
-		__func__, count);
-
-    /* free tlb */
-    if (stats_tbl) {
-        rte_free(stats_tbl);
-    }
-
-	count = 0;
-
-    /* free sorted list */
-    p = &(stats_sorted_list.root);
-    while (p->next != NULL) {
-        node = p->next;
-	    p->next = node->next;
-		rte_free(node);	
-		count++;
-    } 
-	
-	RTE_LOG(DEBUG, STATS,
-		"%s: stats_sorted_list free [%d]\n",
-		__func__, count);
-    
-	stats_variable_reset();
-
-    return EDPVS_OK;
-}
-
-static void stats_sorted_list_init(void) {
-    stats_sorted_list.compare = &stats_entry_compare;
-    sorted_list_initialise(&stats_sorted_list);
-}
-
-static int stats_sockopt_set(sockoptid_t opt, const void *conf, size_t size)
-{
-     switch (opt) {
-     case SOCKOPT_SET_STATS_ADD:
-                            
-          RTE_LOG(DEBUG, STATS,
-              "%s: enable\n", __func__);
-          return stats_enable_func(); 
-     case SOCKOPT_SET_STATS_DEL:
-          RTE_LOG(DEBUG, STATS,
-              "%s: disable\n", __func__);
-          return stats_disable_func(); 
-
-     default:
-          RTE_LOG(ERR, STATS,
-               "%s: NOTSUPP\n", __func__);
-          return EDPVS_NOTSUPP;
-     }
-}
-
-
-static struct dpvs_sockopts stats_sockopts = {
-    .version        = SOCKOPT_VERSION,
-    .set_opt_min    = SOCKOPT_SET_STATS_ADD,
-    .set_opt_max    = SOCKOPT_SET_STATS_DEL,
-    .set            = stats_sockopt_set,
-    .get_opt_min    = SOCKOPT_GET_STATS_SHOW,
-    .get_opt_max    = SOCKOPT_GET_STATS_SHOW,
-    .get            = stats_sockopt_get,
-};
-
-int stats_init(void)
-{
-    int err;
-	
-	stats_disable = true;
-
-	stats_tlb_rnd = (uint32_t)random();
-
-	stats_sorted_list_init();
-
-    if ((err = sockopt_register(&stats_sockopts)) != EDPVS_OK)
-        return err;
-
-    return EDPVS_OK;
-}
diff --git a/tools/dpip/Makefile b/tools/dpip/Makefile
index 3ef930cea..04822c80b 100644
--- a/tools/dpip/Makefile
+++ b/tools/dpip/Makefile
@@ -33,7 +33,7 @@ DEFS = -D DPVS_MAX_LCORE=64
 CFLAGS += $(DEFS)
 
 OBJS = dpip.o utils.o route.o addr.o neigh.o link.o vlan.o \
-	   qsch.o cls.o tunnel.o ipset.o ipv6.o stats.o ../../src/common.o \
+	   qsch.o cls.o tunnel.o ipset.o ipv6.o iftraf.o ../../src/common.o \
 	   ../keepalived/keepalived/libipvs-2.6/sockopt.o
 
 all: $(TARGET)
diff --git a/tools/dpip/iftraf.c b/tools/dpip/iftraf.c
new file mode 100644
index 000000000..5cd4c6330
--- /dev/null
+++ b/tools/dpip/iftraf.c
@@ -0,0 +1,155 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#include <stdlib.h>
+#include <string.h>
+#include <arpa/inet.h>
+#include <netinet/in.h>
+#include "common.h"
+#include "dpip.h"
+#include "conf/inetaddr.h"
+#include "conf/iftraf.h"
+#include "sockopt.h"
+
+
+static void iftraf_help(void)
+{
+    fprintf(stderr,
+            "Usage:\n"
+            "    dpip iftraf [enable | disable]\n"
+            "    dpip iftraf show\n"
+           );
+}
+
+static void iftraf_dump(const struct iftraf_param *param)
+{
+    if (AF_INET == param->af) {
+        printf("%s, [%s, %u -> ",
+            param->ifname, inet_ntoa(param->saddr.in), ntohs(param->sport));
+        printf("%s, %u | %u], [%u, %u]",            
+            inet_ntoa(param->daddr.in), ntohs(param->dport), param->proto, param->total_recv, param->total_sent); 
+
+    } else if (AF_INET6 == param->af) {
+        char src_addr[INET6_ADDRSTRLEN];
+        char dst_addr[INET6_ADDRSTRLEN];
+
+        inet_ntop(AF_INET6, &param->saddr.in6, src_addr, INET6_ADDRSTRLEN);
+        inet_ntop(AF_INET6, &param->daddr.in6, dst_addr, INET6_ADDRSTRLEN);
+
+        printf("%s, [%s, %u -> %s, %u | %u], [%u, %u]",
+            param->ifname, src_addr, ntohs(param->sport), dst_addr, ntohs(param->dport), param->proto, param->total_recv, param->total_sent);
+
+    } else {
+        printf("unsupported");
+    }
+
+    printf("\n");
+    return;
+}
+
+static int iftraf_parse_args(struct dpip_conf *conf,
+                            struct dp_vs_iftraf_conf *iftraf_conf)
+{
+    memset(iftraf_conf, 0, sizeof(*iftraf_conf));
+
+    while (conf->argc > 0) {
+        if (strcmp(conf->argv[0], "dev") == 0) {
+            NEXTARG_CHECK(conf, "dev");
+            snprintf(iftraf_conf->ifname, sizeof(iftraf_conf->ifname), "%s", conf->argv[0]);
+        } 
+        NEXTARG(conf);
+    }
+
+    if (conf->argc > 0) {
+        fprintf(stderr, "too many arguments\n");
+        return -1;
+    }
+	
+    return 0;
+}
+
+static int iftraf_do_cmd(struct dpip_obj *obj, dpip_cmd_t cmd,
+                       struct dpip_conf *conf)
+{
+    size_t size;
+    int err, i;
+    struct dp_vs_iftraf_conf iftraf_conf;
+    struct iftraf_param iftraf_param;
+    struct iftraf_param_array *iftraf_array;
+
+    if (iftraf_parse_args(conf, &iftraf_conf) != 0)
+        return EDPVS_INVAL;
+
+    switch (conf->cmd) {
+    case DPIP_CMD_ADD:
+        return dpvs_setsockopt(SOCKOPT_SET_IFTRAF_ADD, &iftraf_param, sizeof(iftraf_param));
+    case DPIP_CMD_DEL:
+        return dpvs_setsockopt(SOCKOPT_SET_IFTRAF_DEL, &iftraf_param, sizeof(iftraf_param));
+    case DPIP_CMD_SHOW:
+        err = dpvs_getsockopt(SOCKOPT_GET_IFTRAF_SHOW, &iftraf_conf, sizeof(iftraf_conf),
+                              (void **)&iftraf_array, &size);
+        if (err != 0)
+            return err;
+
+        if (iftraf_array == NULL) {
+            fprintf(stderr, "warnning: disabled.\n");
+            return EDPVS_OK;
+
+        }
+
+        if (size <= sizeof(*iftraf_array)
+                || size != sizeof(*iftraf_array) + \
+                           iftraf_array->ntrafs * sizeof(struct iftraf_param)) {
+            fprintf(stderr, "response nstats : %d.\n", iftraf_array->ntrafs);
+            dpvs_sockopt_msg_free(iftraf_array);
+            return EDPVS_NOTEXIST;
+        }
+
+        //printf("-------------top10 iftraf[in the last 20s]----------\n");
+        if (strcmp(iftraf_conf.ifname, "all") == 0) {
+            for (i = 0; i < iftraf_array->ntrafs; i++) {
+                printf("top%d: ", i + 1);
+                iftraf_dump(&iftraf_array->iftraf[i]);
+            }
+        } else {
+            for (i = iftraf_array->ntrafs - 1; i >= 0; i--) {
+                printf("top%d: ", iftraf_array->ntrafs - i);
+                iftraf_dump(&iftraf_array->iftraf[i]);
+            }
+        }
+        dpvs_sockopt_msg_free(iftraf_array);
+        return EDPVS_OK;
+    default:
+        return EDPVS_NOTSUPP;
+    }
+}
+
+struct dpip_obj dpip_iftraf = {
+    .name   = "iftraf",
+    .help   = iftraf_help,
+    .do_cmd = iftraf_do_cmd,
+};
+
+static void __init iftraf_init(void)
+{
+    dpip_register_obj(&dpip_iftraf);
+}
+
+static void __exit iftraf_exit(void)
+{
+    dpip_unregister_obj(&dpip_iftraf);
+}
diff --git a/tools/dpip/stats.c b/tools/dpip/stats.c
deleted file mode 100644
index 3c4815110..000000000
--- a/tools/dpip/stats.c
+++ /dev/null
@@ -1,125 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#include <stdlib.h>
-#include <string.h>
-#include <arpa/inet.h>
-#include <netinet/in.h>
-#include "common.h"
-#include "dpip.h"
-#include "conf/inetaddr.h"
-#include "conf/stats.h"
-#include "sockopt.h"
-
-
-static void stats_help(void)
-{
-    fprintf(stderr,
-            "Usage:\n"
-            "    dpip stats [enable | disable]\n"
-            "    dpip stats show\n"
-           );
-}
-
-static void stats_dump(const struct stats_param *param)
-{
-    if (AF_INET == param->af) {
-           printf("lcore: %u, [%s, %u -> ",
-               param->cid, inet_ntoa(param->saddr.in), ntohs(param->sport));
-           printf("%s, %u | %u], [%.0Lf, %.0Lf]",            
-               inet_ntoa(param->daddr.in), ntohs(param->dport), param->proto, param->total_recv, param->total_sent); 
-
-	} else if (AF_INET6 == param->af) {
-        char src_addr[INET6_ADDRSTRLEN];
-        char dst_addr[INET6_ADDRSTRLEN];
-
-        inet_ntop(AF_INET6, &param->saddr.in6, src_addr, INET6_ADDRSTRLEN);
-        inet_ntop(AF_INET6, &param->daddr.in6, dst_addr, INET6_ADDRSTRLEN);
-
-        printf("lcore: %u, [%s, %u -> %s, %u | %u], [%.0Lf, %.0Lf]",
-            param->cid, src_addr, ntohs(param->sport), dst_addr, ntohs(param->dport), param->proto, param->total_recv, param->total_sent);
-
-	} else {
-        printf("unsupported");
-	}
-
-    printf("\n");
-    return;
-}
-
-static int stats_do_cmd(struct dpip_obj *obj, dpip_cmd_t cmd,
-                       struct dpip_conf *conf)
-{
-    size_t size;
-    int err, i;
-	struct stats_param stats_param;
-	struct stats_param_array *stats_array;
-
-    switch (conf->cmd) {
-    case DPIP_CMD_ADD:
-        return dpvs_setsockopt(SOCKOPT_SET_STATS_ADD, &stats_param, sizeof(stats_param));
-    case DPIP_CMD_DEL:
-        return dpvs_setsockopt(SOCKOPT_SET_STATS_DEL, &stats_param, sizeof(stats_param));
-    case DPIP_CMD_SHOW:
-        err = dpvs_getsockopt(SOCKOPT_GET_STATS_SHOW, &stats_param, sizeof(stats_param),
-                              (void **)&stats_array, &size);
-        if (err != 0)
-            return err;
-
-        if (stats_array == NULL) {
-            fprintf(stderr, "warnning: disabled.\n");
-            return EDPVS_OK;
-
-        }
-
-        if (size <= sizeof(*stats_array)
-                || size != sizeof(*stats_array) + \
-                           stats_array->nstats * sizeof(struct stats_param)) {
-            fprintf(stderr, "response nstats : %d.\n", stats_array->nstats);
-            dpvs_sockopt_msg_free(stats_array);
-            return EDPVS_NOTEXIST;
-        }
-
-	    //printf("-------------top10 stats[in the last 20s]----------\n");
-
-        for (i = stats_array->nstats - 1; i >= 0; i--) {
-            printf("top%d: ", stats_array->nstats - i);
-            stats_dump(&stats_array->stats[i]);
-        }
-
-        dpvs_sockopt_msg_free(stats_array);
-        return EDPVS_OK;
-    default:
-        return EDPVS_NOTSUPP;
-    }
-}
-
-struct dpip_obj dpip_stats = {
-    .name   = "stats",
-    .help   = stats_help,
-    .do_cmd = stats_do_cmd,
-};
-
-static void __init stats_init(void)
-{
-    dpip_register_obj(&dpip_stats);
-}
-
-static void __exit stats_exit(void)
-{
-    dpip_unregister_obj(&dpip_stats);
-}

From c7d5f0af2ad10e04555a5440452dcc1796b19925 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Mon, 24 Jun 2019 20:53:58 +0800
Subject: [PATCH 25/62] dpvs: add mlx5 libs

---
 src/dpdk.mk | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/dpdk.mk b/src/dpdk.mk
index 46bfed724..e1b46a204 100644
--- a/src/dpdk.mk
+++ b/src/dpdk.mk
@@ -40,7 +40,8 @@ LIBS += -L $(DPDKDIR)/lib
 
 LIBS += -Wl,--no-as-needed -fvisibility=default \
         -Wl,--whole-archive -lrte_pmd_vmxnet3_uio -lrte_pmd_i40e -lrte_pmd_ixgbe \
-		-lrte_pmd_e1000 -lrte_pmd_bnxt -lrte_pmd_ring -lrte_pmd_bond -lrte_ethdev -lrte_ip_frag \
+		-lrte_pmd_e1000 -lrte_pmd_bnxt -lrte_pmd_ring -lrte_pmd_bond \
+		-lrte_ethdev -lrte_ip_frag -lrte_pmd_mlx5 -libverbs -lmlx5 \
 		-Wl,--whole-archive -lrte_hash -lrte_kvargs -Wl,-lrte_mbuf -lrte_eal \
 		-Wl,-lrte_mempool -lrte_ring -lrte_cmdline -lrte_cfgfile -lrte_kni \
 		-lrte_mempool_ring -lrte_timer -lrte_net -Wl,-lrte_pmd_virtio \

From ff5e2ac76859c86cd240c31cc23da56b3de9434d Mon Sep 17 00:00:00 2001
From: Daniel Benli Ye <yebenli@bytedance.com>
Date: Thu, 21 Feb 2019 03:06:52 -0500
Subject: [PATCH 26/62] DPVS changes for DPDK 18.11.0

Some initial changes for DPDK 18.11.0. Compared to DPDK 17.11.2, changes are listed below:
1. API change: rte_eth_dev_count() -> rte_eth_dev_count_avail().
2. In DPDK 18.08 release, ethdev: The old offload API is removed:
       Rx per-port rte_eth_conf.rxmode.[bit-fields]
       Tx per-queue rte_eth_txconf.txq_flags
       ETH_TXQ_FLAGS_NO*
   The transition bits are removed:
       rte_eth_conf.rxmode.ignore_offload_bitfield
       ETH_TXQ_FLAGS_IGNORE
3. In DPDK 18.05, rss_hf check is added. So adapt_device_rss_hf() is added.
   https://github.com/DPDK/dpdk/commit/8863a1fbfc66f762f70eb486431c23cc55f2cc3c
4. The following warning is presented in DPVS log.
   "Kni: kni_add_dev: fail to set mac 6C:92:BF:A1:ED:20 for eth0: Timer expired"
   It doesn't matter as function works well. This log printed because compared to DPDK 17.11.2,
   kni_net_set_mac callback function in DPDK 18.11 adds kni_net_process_request().
   kni_net_process_request() calls wait_event_interruptible_timeout() which returns Timeout err code.
5. When install rte_kni kernel module, parameter "carrier=on" should be added.
   This is because DPDK 18.11 updated the KNI kernel module with a new kernel module parameter,
   carrier=[on|off] to allow the user to control the default carrier state of the KNI kernel network interfaces.
   Actually, rte_kni_update_link API should be used, but it's an experimental API. See release note for detail.
---
 src/kni.c   | 12 ++++++--
 src/main.c  |  2 +-
 src/netif.c | 81 +++++++++++++++++++++++++++++++++++------------------
 3 files changed, 65 insertions(+), 30 deletions(-)

diff --git a/src/kni.c b/src/kni.c
index 77f9ed2e0..c894971bf 100644
--- a/src/kni.c
+++ b/src/kni.c
@@ -50,6 +50,8 @@ static void kni_fill_conf(const struct netif_port *dev, const char *ifname,
                           struct rte_kni_conf *conf)
 {
     struct rte_eth_dev_info info = {0};
+    const struct rte_bus *bus = NULL;
+    const struct rte_pci_device *pci_dev;
 
     memset(conf, 0, sizeof(*conf));
     conf->group_id = dev->id;
@@ -57,8 +59,14 @@ static void kni_fill_conf(const struct netif_port *dev, const char *ifname,
 
     if (dev->type == PORT_TYPE_GENERAL) { /* dpdk phy device */
         rte_eth_dev_info_get(dev->id, &info);
-        conf->addr = info.pci_dev->addr;
-        conf->id = info.pci_dev->id;
+        if (info.device) {
+            bus = rte_bus_find_by_device(info.device);
+        }
+        if (bus && !strcmp(bus->name, "pci")) {
+            pci_dev = RTE_DEV_TO_PCI(info.device);
+            conf->addr = pci_dev->addr;
+            conf->id = pci_dev->id;
+        }
     }
 
     if (ifname && strlen(ifname))
diff --git a/src/main.c b/src/main.c
index a82a96667..b334eeda8 100644
--- a/src/main.c
+++ b/src/main.c
@@ -254,7 +254,7 @@ int main(int argc, char *argv[])
         rte_exit(EXIT_FAILURE, "Fail to init stats: %s\n", dpvs_strerror(err));
     
     /* config and start all available dpdk ports */
-    nports = rte_eth_dev_count();
+    nports = rte_eth_dev_count_avail();
     for (pid = 0; pid < nports; pid++) {
         dev = netif_port_get(pid);
         if (!dev) {
diff --git a/src/netif.c b/src/netif.c
index 18eeb3ec0..8f801268c 100644
--- a/src/netif.c
+++ b/src/netif.c
@@ -1394,7 +1394,7 @@ static int check_lcore_conf(int lcores, const struct netif_lcore_conf *lcore_con
     queueid_t qid;
     struct netif_lcore_conf mark;
     memset(&mark, 0, sizeof(mark));
-    nports = rte_eth_dev_count();
+    nports = rte_eth_dev_count_avail();
     while (lcore_conf[i].nports > 0)
     {
         if (lcore2index[lcore_conf[i].id] != i) {
@@ -2438,7 +2438,7 @@ static void lcore_job_xmit(void *args)
     for (i = 0; i < lcore_conf[lcore2index[cid]].nports; i++) {
         pid = lcore_conf[lcore2index[cid]].pqs[i].id;
 #ifdef CONFIG_DPVS_NETIF_DEBUG
-        if (unlikely(pid >= rte_eth_dev_count())) {
+        if (unlikely(pid >= rte_eth_dev_count_avail())) {
             RTE_LOG(DEBUG, NETIF, "[%s] No enough NICs\n", __func__);
             continue;
         }
@@ -2877,13 +2877,21 @@ static int dpdk_set_mc_list(struct netif_port *dev)
 {
     struct ether_addr addrs[NETIF_MAX_HWADDR];
     int err;
+    int ret = 0;
     size_t naddr = NELEMS(addrs);
 
     err = __netif_mc_dump(dev, addrs, &naddr);
     if (err != EDPVS_OK)
         return err;
 
-    return rte_eth_dev_set_mc_addr_list((uint8_t)dev->id, addrs, naddr);
+    ret = rte_eth_dev_set_mc_addr_list((uint8_t)dev->id, addrs, naddr);
+    if (ret == -ENOTSUP) {
+        /* If nic doesn't support to set multicast filter, enable all. */
+        rte_eth_allmulticast_enable(dev->id);
+        ret = EDPVS_OK;
+    }
+
+    return ret;
 }
 
 static int dpdk_filter_supported(struct netif_port *dev, enum rte_filter_type fltype)
@@ -2969,13 +2977,9 @@ static inline void setup_dev_of_flags(struct netif_port *port)
 
     if (port->dev_info.tx_offload_capa & DEV_TX_OFFLOAD_TCP_CKSUM)
         port->flag |= NETIF_PORT_FLAG_TX_TCP_CSUM_OFFLOAD;
-    else
-        port->dev_info.default_txconf.txq_flags |= ETH_TXQ_FLAGS_NOXSUMTCP;
 
     if (port->dev_info.tx_offload_capa & DEV_TX_OFFLOAD_UDP_CKSUM)
         port->flag |= NETIF_PORT_FLAG_TX_UDP_CSUM_OFFLOAD;
-    else
-        port->dev_info.default_txconf.txq_flags |= ETH_TXQ_FLAGS_NOXSUMUDP;
 
     /* FIXME: may be a bug in dev_info get for virtio device,
      *        set the txq_of_flags manually for this type device */
@@ -3003,7 +3007,7 @@ static inline void setup_dev_of_flags(struct netif_port *port)
     /* rx offload conf and flags */
     if (port->dev_info.rx_offload_capa & DEV_RX_OFFLOAD_VLAN_STRIP) {
         port->flag |= NETIF_PORT_FLAG_RX_VLAN_STRIP_OFFLOAD;
-        port->dev_conf.rxmode.hw_vlan_strip = 1;
+        port->dev_conf.rxmode.offloads |= DEV_RX_OFFLOAD_VLAN_STRIP;
     }
     if (port->dev_info.rx_offload_capa & DEV_RX_OFFLOAD_IPV4_CKSUM)
         port->flag |= NETIF_PORT_FLAG_RX_IP_CSUM_OFFLOAD;
@@ -3283,6 +3287,22 @@ static int rss_resolve_proc(char *rss)
     return rss_value;
 }
 
+/* check and adapt device rss hash function */
+static void adapt_device_rss_hf(portid_t port_id, uint64_t *rss_hf)
+{
+    struct rte_eth_dev_info dev_info;
+
+    rte_eth_dev_info_get(port_id, &dev_info);
+    if ((dev_info.flow_type_rss_offloads | *rss_hf) !=
+        dev_info.flow_type_rss_offloads) {
+        RTE_LOG(WARNING, NETIF,
+                "Ethdev port_id=%u invalid rss_hf: 0x%"PRIx64", valid value: 0x%"PRIx64"\n",
+                port_id, *rss_hf, dev_info.flow_type_rss_offloads);
+        /* mask the unsupported rss_hf */
+        *rss_hf &= dev_info.flow_type_rss_offloads;
+    }
+}
+
 /* fill in rx/tx queue configurations, including queue number,
  * decriptor number, bonding device's rss */
 static void fill_port_config(struct netif_port *port, char *promisc_on)
@@ -3328,6 +3348,9 @@ static void fill_port_config(struct netif_port *port, char *promisc_on)
         port->dev_conf.fdir_conf.pballoc = cfg_stream->fdir_pballoc;
         port->dev_conf.fdir_conf.status = cfg_stream->fdir_status;
 
+        /* need to adapt configured rss_hf as driver supported RSS offload types are different. */
+        adapt_device_rss_hf(port->id, &port->dev_conf.rx_adv_conf.rss_conf.rss_hf);
+
         if (cfg_stream->rx_queue_nb > 0 && port->nrxq > cfg_stream->rx_queue_nb) {
             RTE_LOG(WARNING, NETIF, "%s: rx-queues(%d) configured in workers != "
                     "rx-queues(%d) configured in device, setup %d rx-queues for %s\n",
@@ -3473,6 +3496,13 @@ int netif_port_start(struct netif_port *port)
     // device configure
     if ((ret = netif_port_fdir_dstport_mask_set(port)) != EDPVS_OK)
         return ret;
+
+    if (port->flag & NETIF_PORT_FLAG_TX_IP_CSUM_OFFLOAD)
+        port->dev_conf.txmode.offloads |= DEV_TX_OFFLOAD_IPV4_CKSUM;
+    if (port->flag & NETIF_PORT_FLAG_TX_UDP_CSUM_OFFLOAD)
+        port->dev_conf.txmode.offloads |= DEV_TX_OFFLOAD_UDP_CKSUM;
+    if (port->flag & NETIF_PORT_FLAG_TX_TCP_CSUM_OFFLOAD)
+        port->dev_conf.txmode.offloads |= DEV_TX_OFFLOAD_TCP_CKSUM;
     ret = rte_eth_dev_configure(port->id, port->nrxq, port->ntxq, &port->dev_conf);
     if (ret < 0 ) {
         RTE_LOG(ERR, NETIF, "%s: fail to config %s\n", __func__, port->name);
@@ -3496,11 +3526,6 @@ int netif_port_start(struct netif_port *port)
     if (port->ntxq > 0) {
         for (qid = 0; qid < port->ntxq; qid++) {
             memcpy(&txconf, &port->dev_info.default_txconf, sizeof(struct rte_eth_txconf));
-            if (port->dev_conf.rxmode.jumbo_frame
-                    || (port->flag & NETIF_PORT_FLAG_TX_IP_CSUM_OFFLOAD)
-                    || (port->flag & NETIF_PORT_FLAG_TX_UDP_CSUM_OFFLOAD)
-                    || (port->flag & NETIF_PORT_FLAG_TX_TCP_CSUM_OFFLOAD))
-                txconf.txq_flags = 0;
             ret = rte_eth_tx_queue_setup(port->id, qid, port->txq_desc_nb,
                     port->socket, &txconf);
             if (ret < 0) {
@@ -3733,11 +3758,7 @@ static struct rte_eth_conf default_port_conf = {
         .mq_mode        = ETH_MQ_RX_RSS,
         .max_rx_pkt_len = ETHER_MAX_LEN,
         .split_hdr_size = 0,
-        .header_split   = 0,
-        .hw_ip_checksum = 1,
-        .hw_vlan_filter = 0,
-        .jumbo_frame    = 0,
-        .hw_strip_crc   = 0,
+        .offloads = DEV_RX_OFFLOAD_IPV4_CKSUM,
     },
     .rx_adv_conf = {
         .rss_conf = {
@@ -3873,7 +3894,7 @@ inline static void netif_port_init(const struct rte_eth_conf *conf)
     struct rte_eth_conf this_eth_conf;
     char *kni_name;
 
-    nports = rte_eth_dev_count();
+    nports = rte_eth_dev_count_avail();
     if (nports <= 0)
         rte_exit(EXIT_FAILURE, "No dpdk ports found!\n"
                 "Possibly nic or driver is not dpdk-compatible.\n");
@@ -4100,7 +4121,7 @@ int netif_virtual_devices_add(void)
     }
 #endif
 
-    phy_pid_end = rte_eth_dev_count();
+    phy_pid_end = rte_eth_dev_count_avail();
 
     port_id_end = max(port_id_end, phy_pid_end);
     /* set bond_pid_offset before create bonding device */
@@ -4156,7 +4177,7 @@ int netif_virtual_devices_add(void)
     }
 
     if (!list_empty(&bond_list)) {
-        bond_pid_end = rte_eth_dev_count();
+        bond_pid_end = rte_eth_dev_count_avail();
 
         port_id_end = max(port_id_end, bond_pid_end);
         RTE_LOG(INFO, NETIF, "bonding device port id range: [%d, %d)\n",
@@ -4513,12 +4534,18 @@ static int get_port_basic(struct netif_port *port, void **out, size_t *out_len)
 static inline void copy_dev_info(struct netif_nic_dev_get *get,
         const struct rte_eth_dev_info *dev_info)
 {
-    if (dev_info->pci_dev)
-        snprintf(get->pci_addr, sizeof(get->pci_addr), "%04x:%02x:%02x:%0x",
-                dev_info->pci_dev->addr.domain,
-                dev_info->pci_dev->addr.bus,
-                dev_info->pci_dev->addr.devid,
-                dev_info->pci_dev->addr.function);
+    if (dev_info->device) {
+        const struct rte_bus *bus = NULL;
+        bus = rte_bus_find_by_device(dev_info->device);
+        if (bus && !strcmp(bus->name, "pci")) {
+            const struct rte_pci_device *pci_dev = RTE_DEV_TO_PCI(dev_info->device);
+            snprintf(get->pci_addr, sizeof(get->pci_addr), "%04x:%02x:%02x:%0x",
+                     pci_dev->addr.domain,
+                     pci_dev->addr.bus,
+                     pci_dev->addr.devid,
+                     pci_dev->addr.function);
+        }
+    }
     if (dev_info->driver_name)
         strncpy(get->driver_name, dev_info->driver_name, sizeof(get->driver_name));
     get->if_index = dev_info->if_index;

From ee5d2cfd94e8128da36cbc3c1f19ab15d5c891e3 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Fri, 28 Jun 2019 11:11:23 +0800
Subject: [PATCH 27/62] Fix some problems found in using DPDK 18.11

---
 src/common.c | 13 ++++++++++---
 src/netif.c  | 46 +++++++++++++++++++++++++++++++++++++++-------
 2 files changed, 49 insertions(+), 10 deletions(-)

diff --git a/src/common.c b/src/common.c
index ffc25e746..c5c7cd4b1 100644
--- a/src/common.c
+++ b/src/common.c
@@ -148,8 +148,14 @@ int linux_set_if_mac(const char *ifname, const unsigned char mac[ETH_ALEN])
     memcpy(ifr.ifr_hwaddr.sa_data, mac, ETH_ALEN);
 
     if (ioctl(sock_fd, SIOCSIFHWADDR, &ifr)) {
+        /* DPDK 18.11, 'kni_net_process_request' is called when updating
+         * device's mac address, in which 'wait_event_interruptible_timeout'
+         * is used to wait for setting results, which may easily get timeout and
+         * return fail. We ignore the error here and return OK nevertheless.*/
+        fprintf(stderr, "%s: fail to set %s's MAC address: %s\n",
+                __func__, ifname, strerror(errno));
         close(sock_fd);
-        return EDPVS_SYSCALL;
+        return EDPVS_OK;
     }
 
     close(sock_fd);
@@ -174,11 +180,12 @@ static int linux_hw_mc_mod(const char *ifname,
         fprintf(stderr, "%s: fail to set link mcast to %s: %s\n",
                 __func__, ifname, strerror(errno));
         close(fd);
-        return EDPVS_SYSCALL;
+        /* Ignore the error because 'kni_net_process_request' may get timeout. */
+        return EDPVS_OK;
     }
 
     close(fd);
-    return 0;
+    return EDPVS_OK;
 }
 
 int linux_hw_mc_add(const char *ifname, const uint8_t hwma[ETH_ALEN])
diff --git a/src/netif.c b/src/netif.c
index 8f801268c..730434981 100644
--- a/src/netif.c
+++ b/src/netif.c
@@ -2887,6 +2887,8 @@ static int dpdk_set_mc_list(struct netif_port *dev)
     ret = rte_eth_dev_set_mc_addr_list((uint8_t)dev->id, addrs, naddr);
     if (ret == -ENOTSUP) {
         /* If nic doesn't support to set multicast filter, enable all. */
+        RTE_LOG(WARNING, NETIF, "%s: rte_eth_dev_set_mc_addr_list is not supported, "
+                "enable all multicast.\n", __func__);
         rte_eth_allmulticast_enable(dev->id);
         ret = EDPVS_OK;
     }
@@ -2906,6 +2908,13 @@ void netif_mask_fdir_filter(int af, const struct netif_port *port,
     const struct rte_eth_fdir_masks *fmask;
     union rte_eth_fdir_flow *flow = &filt->input.flow;
 
+    /* There exists a defect here. If the netif_port 'port' is not PORT_TYPE_GENERAL,
+       mask fdir_filter of the port would fail. The correct way to accomplish the
+       function is to register this method for all device types. Considering the flow
+       is not changed after masking, we just skip netif_ports other than physical ones. */
+    if (port->type != PORT_TYPE_GENERAL)
+        return;
+
     if (rte_eth_dev_filter_ctrl(port->id, RTE_ETH_FILTER_FDIR,
                 RTE_ETH_FILTER_INFO, &fdir_info) < 0) {
         RTE_LOG(WARNING, NETIF, "%s: Fail to fetch fdir info of %s !\n",
@@ -2948,9 +2957,15 @@ void netif_mask_fdir_filter(int af, const struct netif_port *port,
 static int dpdk_set_fdir_filt(struct netif_port *dev, enum rte_filter_op op,
                               const struct rte_eth_fdir_filter *filt)
 {
-    if (rte_eth_dev_filter_ctrl(dev->id, RTE_ETH_FILTER_FDIR,
-                                op, (void *)filt) < 0)
+    int ret;
+
+    ret = rte_eth_dev_filter_ctrl(dev->id,
+            RTE_ETH_FILTER_FDIR, op, (void *)filt);
+    if (ret < 0) {
+        RTE_LOG(WARNING, NETIF, "%s: fdir filt set failed for %s -- %s(%d)\n!",
+                __func__, dev->name, rte_strerror(-ret), ret);
         return EDPVS_DPDKAPIFAIL;
+    }
 
     return EDPVS_OK;
 }
@@ -3287,12 +3302,14 @@ static int rss_resolve_proc(char *rss)
     return rss_value;
 }
 
-/* check and adapt device rss hash function */
-static void adapt_device_rss_hf(portid_t port_id, uint64_t *rss_hf)
+/* check and adapt device offloading/rss features */
+static void adapt_device_conf(portid_t port_id, uint64_t *rss_hf,
+        uint64_t *rx_offload, uint64_t *tx_offload)
 {
     struct rte_eth_dev_info dev_info;
 
     rte_eth_dev_info_get(port_id, &dev_info);
+
     if ((dev_info.flow_type_rss_offloads | *rss_hf) !=
         dev_info.flow_type_rss_offloads) {
         RTE_LOG(WARNING, NETIF,
@@ -3301,6 +3318,22 @@ static void adapt_device_rss_hf(portid_t port_id, uint64_t *rss_hf)
         /* mask the unsupported rss_hf */
         *rss_hf &= dev_info.flow_type_rss_offloads;
     }
+
+    if ((dev_info.rx_offload_capa | *rx_offload) != dev_info.rx_offload_capa) {
+        RTE_LOG(WARNING, NETIF,
+                "Ethdev port_id=%u invalid rx_offload: 0x%"PRIx64", valid value: 0x%"PRIx64"\n",
+                port_id, *rx_offload, dev_info.rx_offload_capa);
+        /* mask the unsupported rx_offload */
+        *rx_offload &= dev_info.rx_offload_capa;
+    }
+
+    if ((dev_info.tx_offload_capa | *tx_offload) != dev_info.tx_offload_capa) {
+        RTE_LOG(WARNING, NETIF,
+                "Ethdev port_id=%u invalid tx_offload: 0x%"PRIx64", valid value: 0x%"PRIx64"\n",
+                port_id, *tx_offload, dev_info.tx_offload_capa);
+        /* mask the unsupported tx_offload */
+        *tx_offload &= dev_info.tx_offload_capa;
+    }
 }
 
 /* fill in rx/tx queue configurations, including queue number,
@@ -3348,9 +3381,6 @@ static void fill_port_config(struct netif_port *port, char *promisc_on)
         port->dev_conf.fdir_conf.pballoc = cfg_stream->fdir_pballoc;
         port->dev_conf.fdir_conf.status = cfg_stream->fdir_status;
 
-        /* need to adapt configured rss_hf as driver supported RSS offload types are different. */
-        adapt_device_rss_hf(port->id, &port->dev_conf.rx_adv_conf.rss_conf.rss_hf);
-
         if (cfg_stream->rx_queue_nb > 0 && port->nrxq > cfg_stream->rx_queue_nb) {
             RTE_LOG(WARNING, NETIF, "%s: rx-queues(%d) configured in workers != "
                     "rx-queues(%d) configured in device, setup %d rx-queues for %s\n",
@@ -3503,6 +3533,8 @@ int netif_port_start(struct netif_port *port)
         port->dev_conf.txmode.offloads |= DEV_TX_OFFLOAD_UDP_CKSUM;
     if (port->flag & NETIF_PORT_FLAG_TX_TCP_CSUM_OFFLOAD)
         port->dev_conf.txmode.offloads |= DEV_TX_OFFLOAD_TCP_CKSUM;
+    adapt_device_conf(port->id, &port->dev_conf.rx_adv_conf.rss_conf.rss_hf,
+            &port->dev_conf.rxmode.offloads, &port->dev_conf.txmode.offloads);
     ret = rte_eth_dev_configure(port->id, port->nrxq, port->ntxq, &port->dev_conf);
     if (ret < 0 ) {
         RTE_LOG(ERR, NETIF, "%s: fail to config %s\n", __func__, port->name);

From 58a3dde2ab1eecdf44ea8ff92df4672ba1d87b31 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Wed, 26 Jun 2019 10:13:45 +0800
Subject: [PATCH 28/62] Fix backward compatible problem for DPDK 17.11

---
 include/dpdk.h  |  1 +
 include/netif.h | 29 ++++++++++++++++++-----------
 src/Makefile    |  2 +-
 src/kni.c       | 19 ++++++++++++-------
 src/main.c      |  2 +-
 src/netif.c     | 26 +++++++++++++++-----------
 6 files changed, 48 insertions(+), 31 deletions(-)

diff --git a/include/dpdk.h b/include/dpdk.h
index aa16c79d7..01fb48451 100644
--- a/include/dpdk.h
+++ b/include/dpdk.h
@@ -18,6 +18,7 @@
 #ifndef __DPVS_DPDK_H__
 #define __DPVS_DPDK_H__
 #include <rte_common.h>
+#include <rte_version.h>
 #include <rte_vect.h>
 #include <rte_byteorder.h>
 #include <rte_log.h>
diff --git a/include/netif.h b/include/netif.h
index ca3ef1d82..a0a722a8d 100644
--- a/include/netif.h
+++ b/include/netif.h
@@ -284,6 +284,8 @@ int netif_lcore_loop_job_unregister(struct netif_lcore_loop_job *lcore_job);
 int netif_lcore_start(void);
 bool is_lcore_id_valid(lcoreid_t cid);
 bool netif_lcore_is_idle(lcoreid_t cid);
+void lcore_process_packets(struct netif_queue_conf *qconf, struct rte_mbuf **mbufs,
+                           lcoreid_t cid, uint16_t count, bool pkts_from_ring);
 
 /************************** protocol API *****************************/
 int netif_register_pkt(struct pkt_type *pt);
@@ -311,6 +313,13 @@ int netif_get_queue(struct netif_port *port, lcoreid_t id, queueid_t *qid);
 int netif_get_link(struct netif_port *dev, struct rte_eth_link *link);
 int netif_get_promisc(struct netif_port *dev, bool *promisc);
 int netif_get_stats(struct netif_port *dev, struct rte_eth_stats *stats);
+struct netif_port *netif_alloc(size_t priv_size, const char *namefmt,
+                               unsigned int nrxq, unsigned int ntxq,
+                               void (*setup)(struct netif_port *));
+portid_t netif_port_count(void);
+int netif_free(struct netif_port *dev);
+int netif_port_register(struct netif_port *dev);
+int netif_port_unregister(struct netif_port *dev);
 
 /************************** module API *****************************/
 int netif_virtual_devices_add(void);
@@ -326,6 +335,7 @@ void install_netif_keywords(void);
 /*************************** kni api *******************************/
 void kni_process_on_master(void);
 
+
 static inline void *netif_priv(struct netif_port *dev)
 {
     return (char *)dev + __ALIGN_KERNEL(sizeof(struct netif_port), NETIF_ALIGN);
@@ -336,14 +346,6 @@ static inline struct netif_tc *netif_tc(struct netif_port *dev)
     return &dev->tc;
 }
 
-struct netif_port *netif_alloc(size_t priv_size, const char *namefmt,
-                               unsigned int nrxq, unsigned int ntxq,
-                               void (*setup)(struct netif_port *));
-
-int netif_free(struct netif_port *dev);
-int netif_port_register(struct netif_port *dev);
-int netif_port_unregister(struct netif_port *dev);
-
 static inline int eth_addr_equal(const struct ether_addr *addr1,
                                  const struct ether_addr *addr2)
 {
@@ -363,8 +365,13 @@ static inline char *eth_addr_dump(const struct ether_addr *ea,
     return buf;
 }
 
-portid_t netif_port_count(void);
-void lcore_process_packets(struct netif_queue_conf *qconf, struct rte_mbuf **mbufs,
-                           lcoreid_t cid, uint16_t count, bool pkts_from_ring);
+static inline uint16_t dpvs_rte_eth_dev_count(void)
+{
+#if RTE_VERSION < RTE_VERSION_NUM(18, 11, 0, 0)
+    return rte_eth_dev_count();
+#else
+    return rte_eth_dev_count_avail();
+#endif
+}
 
 #endif /* __DPVS_NETIF_H__ */
diff --git a/src/Makefile b/src/Makefile
index b6893358f..f107f70ac 100644
--- a/src/Makefile
+++ b/src/Makefile
@@ -57,7 +57,7 @@ else
 	CFLAGS += -rdynamic
 endif
 
-LIBS += -lpthread -lnuma
+LIBS += -lpthread -lnuma -lmnl
 
 CFLAGS += $(INCDIRS) $(LIBS)
 
diff --git a/src/kni.c b/src/kni.c
index c894971bf..98b84b3d6 100644
--- a/src/kni.c
+++ b/src/kni.c
@@ -50,8 +50,6 @@ static void kni_fill_conf(const struct netif_port *dev, const char *ifname,
                           struct rte_kni_conf *conf)
 {
     struct rte_eth_dev_info info = {0};
-    const struct rte_bus *bus = NULL;
-    const struct rte_pci_device *pci_dev;
 
     memset(conf, 0, sizeof(*conf));
     conf->group_id = dev->id;
@@ -59,14 +57,21 @@ static void kni_fill_conf(const struct netif_port *dev, const char *ifname,
 
     if (dev->type == PORT_TYPE_GENERAL) { /* dpdk phy device */
         rte_eth_dev_info_get(dev->id, &info);
+#if RTE_VERSION < RTE_VERSION_NUM(18, 11, 0, 0)
+        conf->addr = info.pci_dev->addr;
+        conf->id = info.pci_dev->id;
+#else
         if (info.device) {
+            const struct rte_bus *bus = NULL;
+            const struct rte_pci_device *pci_dev;
             bus = rte_bus_find_by_device(info.device);
+            if (bus && !strcmp(bus->name, "pci")) {
+                pci_dev = RTE_DEV_TO_PCI(info.device);
+                conf->addr = pci_dev->addr;
+                conf->id = pci_dev->id;
+            }
         }
-        if (bus && !strcmp(bus->name, "pci")) {
-            pci_dev = RTE_DEV_TO_PCI(info.device);
-            conf->addr = pci_dev->addr;
-            conf->id = pci_dev->id;
-        }
+#endif
     }
 
     if (ifname && strlen(ifname))
diff --git a/src/main.c b/src/main.c
index b334eeda8..0b12c5514 100644
--- a/src/main.c
+++ b/src/main.c
@@ -254,7 +254,7 @@ int main(int argc, char *argv[])
         rte_exit(EXIT_FAILURE, "Fail to init stats: %s\n", dpvs_strerror(err));
     
     /* config and start all available dpdk ports */
-    nports = rte_eth_dev_count_avail();
+    nports = dpvs_rte_eth_dev_count();
     for (pid = 0; pid < nports; pid++) {
         dev = netif_port_get(pid);
         if (!dev) {
diff --git a/src/netif.c b/src/netif.c
index 730434981..3149ddcb8 100644
--- a/src/netif.c
+++ b/src/netif.c
@@ -1394,7 +1394,7 @@ static int check_lcore_conf(int lcores, const struct netif_lcore_conf *lcore_con
     queueid_t qid;
     struct netif_lcore_conf mark;
     memset(&mark, 0, sizeof(mark));
-    nports = rte_eth_dev_count_avail();
+    nports = dpvs_rte_eth_dev_count();
     while (lcore_conf[i].nports > 0)
     {
         if (lcore2index[lcore_conf[i].id] != i) {
@@ -2438,7 +2438,7 @@ static void lcore_job_xmit(void *args)
     for (i = 0; i < lcore_conf[lcore2index[cid]].nports; i++) {
         pid = lcore_conf[lcore2index[cid]].pqs[i].id;
 #ifdef CONFIG_DPVS_NETIF_DEBUG
-        if (unlikely(pid >= rte_eth_dev_count_avail())) {
+        if (unlikely(pid >= dpvs_rte_eth_dev_count())) {
             RTE_LOG(DEBUG, NETIF, "[%s] No enough NICs\n", __func__);
             continue;
         }
@@ -3926,7 +3926,7 @@ inline static void netif_port_init(const struct rte_eth_conf *conf)
     struct rte_eth_conf this_eth_conf;
     char *kni_name;
 
-    nports = rte_eth_dev_count_avail();
+    nports = dpvs_rte_eth_dev_count();
     if (nports <= 0)
         rte_exit(EXIT_FAILURE, "No dpdk ports found!\n"
                 "Possibly nic or driver is not dpdk-compatible.\n");
@@ -4153,7 +4153,7 @@ int netif_virtual_devices_add(void)
     }
 #endif
 
-    phy_pid_end = rte_eth_dev_count_avail();
+    phy_pid_end = dpvs_rte_eth_dev_count();
 
     port_id_end = max(port_id_end, phy_pid_end);
     /* set bond_pid_offset before create bonding device */
@@ -4209,7 +4209,7 @@ int netif_virtual_devices_add(void)
     }
 
     if (!list_empty(&bond_list)) {
-        bond_pid_end = rte_eth_dev_count_avail();
+        bond_pid_end = dpvs_rte_eth_dev_count();
 
         port_id_end = max(port_id_end, bond_pid_end);
         RTE_LOG(INFO, NETIF, "bonding device port id range: [%d, %d)\n",
@@ -4566,18 +4566,22 @@ static int get_port_basic(struct netif_port *port, void **out, size_t *out_len)
 static inline void copy_dev_info(struct netif_nic_dev_get *get,
         const struct rte_eth_dev_info *dev_info)
 {
+    const struct rte_pci_device *pci_dev = NULL;
+#if RTE_VERSION < RTE_VERSION_NUM(18, 11, 0, 0)
+    pci_dev = dev_info->pci_dev;
+#else
     if (dev_info->device) {
         const struct rte_bus *bus = NULL;
         bus = rte_bus_find_by_device(dev_info->device);
         if (bus && !strcmp(bus->name, "pci")) {
-            const struct rte_pci_device *pci_dev = RTE_DEV_TO_PCI(dev_info->device);
-            snprintf(get->pci_addr, sizeof(get->pci_addr), "%04x:%02x:%02x:%0x",
-                     pci_dev->addr.domain,
-                     pci_dev->addr.bus,
-                     pci_dev->addr.devid,
-                     pci_dev->addr.function);
+            pci_dev = RTE_DEV_TO_PCI(dev_info->device);
         }
     }
+#endif
+    if (pci_dev)
+        snprintf(get->pci_addr, sizeof(get->pci_addr), "%04x:%02x:%02x:%0x",
+                 pci_dev->addr.domain, pci_dev->addr.bus,
+                 pci_dev->addr.devid, pci_dev->addr.function);
     if (dev_info->driver_name)
         strncpy(get->driver_name, dev_info->driver_name, sizeof(get->driver_name));
     get->if_index = dev_info->if_index;

From 2882b7974c9396a925a13c2635db53e609159bc4 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Fri, 28 Jun 2019 13:51:15 +0800
Subject: [PATCH 29/62] Add compile option for MLX5

---
 src/Makefile  | 4 ++--
 src/config.mk | 2 ++
 src/dpdk.mk   | 8 ++++++--
 3 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/src/Makefile b/src/Makefile
index f107f70ac..971b6babc 100644
--- a/src/Makefile
+++ b/src/Makefile
@@ -34,8 +34,8 @@ DATE_STRING := $(shell date +%Y.%m.%d.%H:%M:%S)
 # same path of THIS Makefile
 SRCDIR := $(dir $(realpath $(firstword $(MAKEFILE_LIST))))
 
-include $(SRCDIR)/dpdk.mk
 include $(SRCDIR)/config.mk
+include $(SRCDIR)/dpdk.mk
 
 INCDIRS += -I $(SRCDIR)/../include
 
@@ -57,7 +57,7 @@ else
 	CFLAGS += -rdynamic
 endif
 
-LIBS += -lpthread -lnuma -lmnl
+LIBS += -lpthread -lnuma
 
 CFLAGS += $(INCDIRS) $(LIBS)
 
diff --git a/src/config.mk b/src/config.mk
index c288b3ef0..cf1a668a9 100644
--- a/src/config.mk
+++ b/src/config.mk
@@ -21,6 +21,8 @@
 # TODO: use standard way to define compile flags.
 #
 
+CONFIG_MLX5=n
+
 CFLAGS += -D DPVS_MAX_SOCKET=2
 CFLAGS += -D DPVS_MAX_LCORE=64
 
diff --git a/src/dpdk.mk b/src/dpdk.mk
index e1b46a204..f83f8e3cc 100644
--- a/src/dpdk.mk
+++ b/src/dpdk.mk
@@ -40,10 +40,14 @@ LIBS += -L $(DPDKDIR)/lib
 
 LIBS += -Wl,--no-as-needed -fvisibility=default \
         -Wl,--whole-archive -lrte_pmd_vmxnet3_uio -lrte_pmd_i40e -lrte_pmd_ixgbe \
-		-lrte_pmd_e1000 -lrte_pmd_bnxt -lrte_pmd_ring -lrte_pmd_bond \
-		-lrte_ethdev -lrte_ip_frag -lrte_pmd_mlx5 -libverbs -lmlx5 \
+		-lrte_pmd_e1000 -lrte_pmd_bnxt -lrte_pmd_ring -lrte_pmd_bond -lrte_ethdev -lrte_ip_frag \
 		-Wl,--whole-archive -lrte_hash -lrte_kvargs -Wl,-lrte_mbuf -lrte_eal \
 		-Wl,-lrte_mempool -lrte_ring -lrte_cmdline -lrte_cfgfile -lrte_kni \
 		-lrte_mempool_ring -lrte_timer -lrte_net -Wl,-lrte_pmd_virtio \
 		-lrte_pci -lrte_bus_pci -lrte_bus_vdev -lrte_lpm -lrte_pdump \
 		-Wl,--no-whole-archive -lrt -lm -ldl -lcrypto
+
+ifeq ($(CONFIG_MLX5), y)
+LIBS += -Wl,--whole-archive -lrte_pmd_mlx5 -Wl,--no-whole-archive
+LIBS += -libverbs -lmlx5 -lmnl
+endif

From 35280c003140721caecb94249627a19193d529cc Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Fri, 28 Jun 2019 18:22:53 +0800
Subject: [PATCH 30/62] patch: add patched for dpdk-stable-17.11.6 and
 dpdk-stable-18.11.2

---
 ...iable-IP-header-len-for-checksum-API.patch |  56 ++++++++
 ...link-event-for-multicast-driver-part.patch | 108 +++++++++++++++
 ...iable-IP-header-len-for-checksum-API.patch |  56 ++++++++
 ...link-event-for-multicast-driver-part.patch | 124 ++++++++++++++++++
 ...e-flow_item-type-comparsion-in-flow_.patch |  33 +++++
 5 files changed, 377 insertions(+)
 create mode 100644 patch/dpdk-stable-17.11.6/0001-net-support-variable-IP-header-len-for-checksum-API.patch
 create mode 100644 patch/dpdk-stable-17.11.6/0002-kni-use-netlink-event-for-multicast-driver-part.patch
 create mode 100644 patch/dpdk-stable-18.11.2/0001-net-support-variable-IP-header-len-for-checksum-API.patch
 create mode 100644 patch/dpdk-stable-18.11.2/0002-kni-use-netlink-event-for-multicast-driver-part.patch
 create mode 100644 patch/dpdk-stable-18.11.2/0003-driver-kni-enable-flow_item-type-comparsion-in-flow_.patch

diff --git a/patch/dpdk-stable-17.11.6/0001-net-support-variable-IP-header-len-for-checksum-API.patch b/patch/dpdk-stable-17.11.6/0001-net-support-variable-IP-header-len-for-checksum-API.patch
new file mode 100644
index 000000000..d423571f8
--- /dev/null
+++ b/patch/dpdk-stable-17.11.6/0001-net-support-variable-IP-header-len-for-checksum-API.patch
@@ -0,0 +1,56 @@
+From 648ff9e42e58a4fe6587dce05b534fb746ae438f Mon Sep 17 00:00:00 2001
+From: ywc689 <ywc689@163.com>
+Date: Fri, 28 Jun 2019 17:48:12 +0800
+Subject: [PATCH 1/2] net: support variable IP header len for checksum API.
+
+IPv4 checksum APIs use fixe IP header length, it will failed if there is
+any IP option. Now calculating header length by "ihl" field, so that we
+can support options.
+---
+ dpdk-stable-17.11.6/lib/librte_net/rte_ip.h | 13 +++++++------
+ 1 file changed, 7 insertions(+), 6 deletions(-)
+
+diff --git a/dpdk-stable-17.11.6/lib/librte_net/rte_ip.h b/dpdk-stable-17.11.6/lib/librte_net/rte_ip.h
+index 8d4907f..0d504f6 100644
+--- a/dpdk-stable-17.11.6/lib/librte_net/rte_ip.h
++++ b/dpdk-stable-17.11.6/lib/librte_net/rte_ip.h
+@@ -314,7 +314,7 @@ struct ipv4_hdr {
+ rte_ipv4_cksum(const struct ipv4_hdr *ipv4_hdr)
+ {
+ 	uint16_t cksum;
+-	cksum = rte_raw_cksum(ipv4_hdr, sizeof(struct ipv4_hdr));
++	cksum = rte_raw_cksum(ipv4_hdr, (ipv4_hdr->version_ihl & 0xf) * 4);
+ 	return (cksum == 0xffff) ? cksum : (uint16_t)~cksum;
+ }
+ 
+@@ -356,7 +356,7 @@ struct ipv4_hdr {
+ 	} else {
+ 		psd_hdr.len = rte_cpu_to_be_16(
+ 			(uint16_t)(rte_be_to_cpu_16(ipv4_hdr->total_length)
+-				- sizeof(struct ipv4_hdr)));
++				- (ipv4_hdr->version_ihl & 0xf) * 4));
+ 	}
+ 	return rte_raw_cksum(&psd_hdr, sizeof(psd_hdr));
+ }
+@@ -379,13 +379,14 @@ struct ipv4_hdr {
+ rte_ipv4_udptcp_cksum(const struct ipv4_hdr *ipv4_hdr, const void *l4_hdr)
+ {
+ 	uint32_t cksum;
+-	uint32_t l3_len, l4_len;
++	uint32_t l3_len, l4_len, iphlen;
+ 
+ 	l3_len = rte_be_to_cpu_16(ipv4_hdr->total_length);
+-	if (l3_len < sizeof(struct ipv4_hdr))
+-		return 0;
++	iphlen = (ipv4_hdr->version_ihl & 0xf) * 4;
+ 
+-	l4_len = l3_len - sizeof(struct ipv4_hdr);
++	if (l3_len < iphlen)
++		return 0;
++	l4_len = l3_len - iphlen;
+ 
+ 	cksum = rte_raw_cksum(l4_hdr, l4_len);
+ 	cksum += rte_ipv4_phdr_cksum(ipv4_hdr, 0);
+-- 
+1.8.3.1
+
diff --git a/patch/dpdk-stable-17.11.6/0002-kni-use-netlink-event-for-multicast-driver-part.patch b/patch/dpdk-stable-17.11.6/0002-kni-use-netlink-event-for-multicast-driver-part.patch
new file mode 100644
index 000000000..ed0cbb40d
--- /dev/null
+++ b/patch/dpdk-stable-17.11.6/0002-kni-use-netlink-event-for-multicast-driver-part.patch
@@ -0,0 +1,108 @@
+From dd72a3e2a760131f156f61a37df8826514f1ed4c Mon Sep 17 00:00:00 2001
+From: ywc689 <ywc689@163.com>
+Date: Fri, 28 Jun 2019 17:52:13 +0800
+Subject: [PATCH 2/2] kni: use netlink event for multicast (driver part)
+
+kni driver send netlink event every time hw-multicast list updated by
+kernel, the user kni app should capture the event and update multicast
+to kni device.
+
+original way is using rte_kni_request to pass hw-multicast to user kni
+module. that method works but finally memory corruption found, which is
+to kni device.
+---
+ .../lib/librte_eal/linuxapp/kni/kni_net.c          | 68 ++++++++++++++++++++++
+ 1 file changed, 68 insertions(+)
+
+diff --git a/dpdk-stable-17.11.6/lib/librte_eal/linuxapp/kni/kni_net.c b/dpdk-stable-17.11.6/lib/librte_eal/linuxapp/kni/kni_net.c
+index db9f489..fab94d1 100644
+--- a/dpdk-stable-17.11.6/lib/librte_eal/linuxapp/kni/kni_net.c
++++ b/dpdk-stable-17.11.6/lib/librte_eal/linuxapp/kni/kni_net.c
+@@ -35,6 +35,8 @@
+ #include <linux/skbuff.h>
+ #include <linux/kthread.h>
+ #include <linux/delay.h>
++#include <linux/inetdevice.h>
++#include <net/netlink.h>
+ 
+ #include <exec-env/rte_kni_common.h>
+ #include <kni_fifo.h>
+@@ -579,9 +581,75 @@
+ 	return 0;
+ }
+ 
++static size_t
++kni_nlmsg_size(void)
++{
++	return NLMSG_ALIGN(sizeof(struct ifaddrmsg))
++	       + nla_total_size(4) /* IFA_ADDRESS */
++	       + nla_total_size(4) /* IFA_LOCAL */
++	       + nla_total_size(4) /* IFA_BROADCAST */
++	       + nla_total_size(IFNAMSIZ) /* IFA_LABEL */
++	       + nla_total_size(4) /* IFA_FLAGS */
++	       + nla_total_size(sizeof(struct ifa_cacheinfo)); /* IFA_CACHEINFO */
++}
++
+ static void
+ kni_net_set_rx_mode(struct net_device *dev)
+ {
++	/*
++	 * send event to notify user (DPDK KNI app) that multicast list changed,
++	 * so that it can monitor multicast join/leave and set HW mc-addrs to
++	 * kni dev accordinglly.
++	 *
++	 * this event is just an notification, we do not save any mc-addr here
++	 * (so attribute space for us). user kni app should get maddrs after
++	 * receive this notification.
++	 *
++	 * I was expecting kernel send some rtnl event for multicast join/leave,
++	 * but it doesn't. By checking the call-chain of SIOCADDMULTI (ip maddr,
++	 * manages only hardware multicast) and IP_ADD_MEMBERSHIP (ip_mc_join_group,
++	 * used to for IPv4 multicast), no rtnl event sent.
++	 *
++	 * so as workaround, modify kni driver here to send RTM_NEWADDR.
++	 * it may not suitalbe to use this event for mcast, but that should works.
++	 * hope that won't affect other listener to this event.
++	 *
++	 * previous solution was using rte_kni_request to pass hw-maddr list to user.
++	 * it "works" for times but finally memory corruption found, which is
++	 * not easy to address (lock was added and reviewed). That's why we use
++	 * netlink event instead.
++	 */
++	struct sk_buff *skb;
++	struct net *net = dev_net(dev);
++	struct nlmsghdr *nlh;
++	struct ifaddrmsg *ifm;
++
++	skb = nlmsg_new(kni_nlmsg_size(), GFP_ATOMIC);
++	if (!skb)
++		return;
++
++	/* no other event for us ? */
++	nlh = nlmsg_put(skb, 0, 0, RTM_NEWADDR, sizeof(*ifm), 0);
++	if (!nlh) {
++		kfree_skb(skb);
++		return;
++	}
++
++	/* just send an notification so no other info */
++	ifm = nlmsg_data(nlh);
++	memset(ifm, 0, sizeof(*ifm));
++	ifm->ifa_family = AF_UNSPEC;
++	ifm->ifa_prefixlen = 0;
++	ifm->ifa_flags = 0;
++	ifm->ifa_scope = RT_SCOPE_NOWHERE;
++	ifm->ifa_index = 0;
++
++	nlmsg_end(skb, nlh);
++
++	/* other group ? */
++	pr_debug("%s: rx-mode/multicast-list changed\n", __func__);
++	rtnl_notify(skb, net, 0, RTNLGRP_NOTIFY, NULL, GFP_ATOMIC);
++	return;
+ }
+ 
+ static int
+-- 
+1.8.3.1
+
diff --git a/patch/dpdk-stable-18.11.2/0001-net-support-variable-IP-header-len-for-checksum-API.patch b/patch/dpdk-stable-18.11.2/0001-net-support-variable-IP-header-len-for-checksum-API.patch
new file mode 100644
index 000000000..0c1852c3a
--- /dev/null
+++ b/patch/dpdk-stable-18.11.2/0001-net-support-variable-IP-header-len-for-checksum-API.patch
@@ -0,0 +1,56 @@
+From 5dac8928f844b4b6cfaeab6c1174b60b7409279b Mon Sep 17 00:00:00 2001
+From: ywc689 <ywc689@163.com>
+Date: Fri, 28 Jun 2019 16:27:08 +0800
+Subject: [PATCH 1/3] net: support variable IP header len for checksum API.
+
+IPv4 checksum APIs use fixe IP header length, it will failed if there is
+any IP option. Now calculating header length by "ihl" field, so that we
+can support options.
+---
+ dpdk-stable-18.11.2/lib/librte_net/rte_ip.h | 13 +++++++------
+ 1 file changed, 7 insertions(+), 6 deletions(-)
+
+diff --git a/dpdk-stable-18.11.2/lib/librte_net/rte_ip.h b/dpdk-stable-18.11.2/lib/librte_net/rte_ip.h
+index f9b9090..635bdcc 100644
+--- a/dpdk-stable-18.11.2/lib/librte_net/rte_ip.h
++++ b/dpdk-stable-18.11.2/lib/librte_net/rte_ip.h
+@@ -252,7 +252,7 @@ struct ipv4_hdr {
+ rte_ipv4_cksum(const struct ipv4_hdr *ipv4_hdr)
+ {
+ 	uint16_t cksum;
+-	cksum = rte_raw_cksum(ipv4_hdr, sizeof(struct ipv4_hdr));
++	cksum = rte_raw_cksum(ipv4_hdr, (ipv4_hdr->version_ihl & 0xf) * 4);
+ 	return (cksum == 0xffff) ? cksum : (uint16_t)~cksum;
+ }
+ 
+@@ -294,7 +294,7 @@ struct ipv4_hdr {
+ 	} else {
+ 		psd_hdr.len = rte_cpu_to_be_16(
+ 			(uint16_t)(rte_be_to_cpu_16(ipv4_hdr->total_length)
+-				- sizeof(struct ipv4_hdr)));
++				- (ipv4_hdr->version_ihl & 0xf) * 4));
+ 	}
+ 	return rte_raw_cksum(&psd_hdr, sizeof(psd_hdr));
+ }
+@@ -317,13 +317,14 @@ struct ipv4_hdr {
+ rte_ipv4_udptcp_cksum(const struct ipv4_hdr *ipv4_hdr, const void *l4_hdr)
+ {
+ 	uint32_t cksum;
+-	uint32_t l3_len, l4_len;
++	uint32_t l3_len, l4_len, iphlen;
+ 
+ 	l3_len = rte_be_to_cpu_16(ipv4_hdr->total_length);
+-	if (l3_len < sizeof(struct ipv4_hdr))
+-		return 0;
++	iphlen = (ipv4_hdr->version_ihl & 0xf) * 4;
+ 
+-	l4_len = l3_len - sizeof(struct ipv4_hdr);
++	if (l3_len < iphlen)
++		return 0;
++	l4_len = l3_len - iphlen;
+ 
+ 	cksum = rte_raw_cksum(l4_hdr, l4_len);
+ 	cksum += rte_ipv4_phdr_cksum(ipv4_hdr, 0);
+-- 
+1.8.3.1
+
diff --git a/patch/dpdk-stable-18.11.2/0002-kni-use-netlink-event-for-multicast-driver-part.patch b/patch/dpdk-stable-18.11.2/0002-kni-use-netlink-event-for-multicast-driver-part.patch
new file mode 100644
index 000000000..abd9ac448
--- /dev/null
+++ b/patch/dpdk-stable-18.11.2/0002-kni-use-netlink-event-for-multicast-driver-part.patch
@@ -0,0 +1,124 @@
+From 7a54416e9370be6d573d6b9429002c0712a5851f Mon Sep 17 00:00:00 2001
+From: ywc689 <ywc689@163.com>
+Date: Fri, 28 Jun 2019 16:52:24 +0800
+Subject: [PATCH 2/3] kni: use netlink event for multicast (driver part)
+
+kni driver send netlink event every time hw-multicast list updated by
+kernel, the user kni app should capture the event and update multicast
+to kni device.
+
+original way is using rte_kni_request to pass hw-multicast to user kni
+module. that method works but finally memory corruption found, which is
+to kni device.
+---
+ dpdk-stable-18.11.2/kernel/linux/kni/kni_net.c | 70 ++++++++++++++++++++++++++
+ 1 file changed, 70 insertions(+)
+
+diff --git a/dpdk-stable-18.11.2/kernel/linux/kni/kni_net.c b/dpdk-stable-18.11.2/kernel/linux/kni/kni_net.c
+index 7371b6d..edc1416 100644
+--- a/dpdk-stable-18.11.2/kernel/linux/kni/kni_net.c
++++ b/dpdk-stable-18.11.2/kernel/linux/kni/kni_net.c
+@@ -16,6 +16,8 @@
+ #include <linux/skbuff.h>
+ #include <linux/kthread.h>
+ #include <linux/delay.h>
++#include <linux/inetdevice.h>
++#include <net/netlink.h>
+ 
+ #include <exec-env/rte_kni_common.h>
+ #include <kni_fifo.h>
+@@ -103,6 +105,7 @@
+ 	ret_val = wait_event_interruptible_timeout(kni->wq,
+ 			kni_fifo_count(kni->resp_q), 3 * HZ);
+ 	if (signal_pending(current) || ret_val <= 0) {
++		pr_err("%s: wait_event_interruptible timeout\n", __func__);
+ 		ret = -ETIME;
+ 		goto fail;
+ 	}
+@@ -605,9 +608,75 @@ void kni_net_release_fifo_phy(struct kni_dev *kni)
+ 	return -EOPNOTSUPP;
+ }
+ 
++static size_t
++kni_nlmsg_size(void)
++{
++    return NLMSG_ALIGN(sizeof(struct ifaddrmsg))
++           + nla_total_size(4) /* IFA_ADDRESS */
++           + nla_total_size(4) /* IFA_LOCAL */
++           + nla_total_size(4) /* IFA_BROADCAST */
++           + nla_total_size(IFNAMSIZ) /* IFA_LABEL */
++           + nla_total_size(4) /* IFA_FLAGS */
++           + nla_total_size(sizeof(struct ifa_cacheinfo)); /* IFA_CACHEINFO */
++}
++
+ static void
+ kni_net_set_rx_mode(struct net_device *dev)
+ {
++    /*
++     * send event to notify user (DPDK KNI app) that multicast list changed,
++     * so that it can monitor multicast join/leave and set HW mc-addrs to
++     * kni dev accordinglly.
++     *
++     * this event is just an notification, we do not save any mc-addr here
++     * (so attribute space for us). user kni app should get maddrs after
++     * receive this notification.
++     *
++     * I was expecting kernel send some rtnl event for multicast join/leave,
++     * but it doesn't. By checking the call-chain of SIOCADDMULTI (ip maddr,
++     * manages only hardware multicast) and IP_ADD_MEMBERSHIP (ip_mc_join_group,
++     * used to for IPv4 multicast), no rtnl event sent.
++     *
++     * so as workaround, modify kni driver here to send RTM_NEWADDR.
++     * it may not suitalbe to use this event for mcast, but that should works.
++     * hope that won't affect other listener to this event.
++     *
++     * previous solution was using rte_kni_request to pass hw-maddr list to user.
++     * it "works" for times but finally memory corruption found, which is
++     * not easy to address (lock was added and reviewed). That's why we use
++     * netlink event instead.
++     */
++    struct sk_buff *skb;
++    struct net *net = dev_net(dev);
++    struct nlmsghdr *nlh;
++    struct ifaddrmsg *ifm;
++
++    skb = nlmsg_new(kni_nlmsg_size(), GFP_ATOMIC);
++    if (!skb)
++        return;
++
++    /* no other event for us ? */
++    nlh = nlmsg_put(skb, 0, 0, RTM_NEWADDR, sizeof(*ifm), 0);
++    if (!nlh) {
++        kfree_skb(skb);
++        return;
++    }
++
++    /* just send an notification so no other info */
++    ifm = nlmsg_data(nlh);
++    memset(ifm, 0, sizeof(*ifm));
++    ifm->ifa_family = AF_UNSPEC;
++    ifm->ifa_prefixlen = 0;
++    ifm->ifa_flags = 0;
++    ifm->ifa_scope = RT_SCOPE_NOWHERE;
++    ifm->ifa_index = 0;
++
++    nlmsg_end(skb, nlh);
++
++    /* other group ? */
++    pr_debug("%s: rx-mode/multicast-list changed\n", __func__);
++    rtnl_notify(skb, net, 0, RTNLGRP_NOTIFY, NULL, GFP_ATOMIC);
++    return;
+ }
+ 
+ static int
+@@ -727,6 +796,7 @@ void kni_net_release_fifo_phy(struct kni_dev *kni)
+ 	kni = netdev_priv(netdev);
+ 	ret = kni_net_process_request(kni, &req);
+ 
++	pr_info("%s request returns %d!\n", __func__, ret);
+ 	return (ret == 0 ? req.result : ret);
+ }
+ 
+-- 
+1.8.3.1
+
diff --git a/patch/dpdk-stable-18.11.2/0003-driver-kni-enable-flow_item-type-comparsion-in-flow_.patch b/patch/dpdk-stable-18.11.2/0003-driver-kni-enable-flow_item-type-comparsion-in-flow_.patch
new file mode 100644
index 000000000..38c539a33
--- /dev/null
+++ b/patch/dpdk-stable-18.11.2/0003-driver-kni-enable-flow_item-type-comparsion-in-flow_.patch
@@ -0,0 +1,33 @@
+From 408cda4311b0c10b441fbf8b67614d7873ec718a Mon Sep 17 00:00:00 2001
+From: ywc689 <ywc689@163.com>
+Date: Fri, 28 Jun 2019 17:02:40 +0800
+Subject: [PATCH 3/3] driver:kni: enable flow_item type comparsion in
+ flow_fdir_cmp
+
+the existence is checked before adding/deleting a fdir flow, but
+the flow type is not compared in 'flow_fdir_cmp', which resulting
+in the failure or unwanted behavior in adding/deleting two same
+fdir flows with flow type(such as ipv4 tcp/udp) different only.
+---
+ dpdk-stable-18.11.2/drivers/net/mlx5/mlx5_flow.c | 5 +++++
+ 1 file changed, 5 insertions(+)
+
+diff --git a/dpdk-stable-18.11.2/drivers/net/mlx5/mlx5_flow.c b/dpdk-stable-18.11.2/drivers/net/mlx5/mlx5_flow.c
+index 222cd81..d99edce 100644
+--- a/dpdk-stable-18.11.2/drivers/net/mlx5/mlx5_flow.c
++++ b/dpdk-stable-18.11.2/drivers/net/mlx5/mlx5_flow.c
+@@ -2668,6 +2668,11 @@ struct rte_flow *
+ static int
+ flow_fdir_cmp(const struct mlx5_fdir *f1, const struct mlx5_fdir *f2)
+ {
++	unsigned i;
++	for (i = 0; i < sizeof(f1->items)/sizeof(f1->items[0]); i++) {
++		if (f1->items[i].type != f2->items[i].type)
++			return 1;
++	}
+ 	if (FLOW_FDIR_CMP(f1, f2, attr) ||
+ 	    FLOW_FDIR_CMP(f1, f2, l2) ||
+ 	    FLOW_FDIR_CMP(f1, f2, l2_mask) ||
+-- 
+1.8.3.1
+

From e0c0ed02f50b6795cddde4973bbde049b02c91ec Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Sun, 30 Jun 2019 22:37:22 +0800
Subject: [PATCH 31/62] netif: fix tx offloads problem

---
 src/netif.c | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/src/netif.c b/src/netif.c
index 3149ddcb8..36ee2e11f 100644
--- a/src/netif.c
+++ b/src/netif.c
@@ -3533,8 +3533,10 @@ int netif_port_start(struct netif_port *port)
         port->dev_conf.txmode.offloads |= DEV_TX_OFFLOAD_UDP_CKSUM;
     if (port->flag & NETIF_PORT_FLAG_TX_TCP_CSUM_OFFLOAD)
         port->dev_conf.txmode.offloads |= DEV_TX_OFFLOAD_TCP_CKSUM;
+    port->dev_conf.txmode.offloads |= DEV_TX_OFFLOAD_MBUF_FAST_FREE;
     adapt_device_conf(port->id, &port->dev_conf.rx_adv_conf.rss_conf.rss_hf,
             &port->dev_conf.rxmode.offloads, &port->dev_conf.txmode.offloads);
+
     ret = rte_eth_dev_configure(port->id, port->nrxq, port->ntxq, &port->dev_conf);
     if (ret < 0 ) {
         RTE_LOG(ERR, NETIF, "%s: fail to config %s\n", __func__, port->name);
@@ -3558,6 +3560,14 @@ int netif_port_start(struct netif_port *port)
     if (port->ntxq > 0) {
         for (qid = 0; qid < port->ntxq; qid++) {
             memcpy(&txconf, &port->dev_info.default_txconf, sizeof(struct rte_eth_txconf));
+#if RTE_VERSION < RTE_VERSION_NUM(18, 11, 0, 0)
+            if (port->dev_conf.rxmode.jumbo_frame
+                    || (port->flag & NETIF_PORT_FLAG_TX_IP_CSUM_OFFLOAD)
+                    || (port->flag & NETIF_PORT_FLAG_TX_UDP_CSUM_OFFLOAD)
+                    || (port->flag & NETIF_PORT_FLAG_TX_TCP_CSUM_OFFLOAD))
+                txconf.txq_flags = 0;
+#endif
+            txconf.offloads = port->dev_conf.txmode.offloads;
             ret = rte_eth_tx_queue_setup(port->id, qid, port->txq_desc_nb,
                     port->socket, &txconf);
             if (ret < 0) {

From b3e4eb4e78adc1df2586f11e49f445a17d66ff51 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Wed, 13 Nov 2019 11:39:54 +0800
Subject: [PATCH 32/62] patch: update dpdk patches

---
 ...ink-event-for-multicast-driver-part.patch} |   8 +-
 ...iable-IP-header-len-for-checksum-API.patch |  14 +-
 ...-and-change-dpdk-pdump-tool-for-DPVS.patch |   8 +-
 .../0003-rh75-ndo_change_mtu.patch            |  25 --
 ....2-to-support-rh75-provided-by-Jason.patch |  48 ++
 ...ink-event-for-multicast-driver-part.patch} |  12 +-
 ...able-IP-header-len-for-checksum-API.patch} |  12 +-
 ...-and-change-dpdk-pdump-tool-for-DPVS.patch | 415 ++++++++++++++++++
 ...ink-event-for-multicast-driver-part.patch} |  12 +-
 ...able-IP-header-len-for-checksum-API.patch} |  12 +-
 ...e-flow_item-type-comparsion-in-flow_.patch |  10 +-
 11 files changed, 507 insertions(+), 69 deletions(-)
 rename patch/dpdk-stable-17.11.2/{0001-PATCH-kni-use-netlink-event-for-multicast-driver-par.patch => 0001-kni-use-netlink-event-for-multicast-driver-part.patch} (93%)
 delete mode 100644 patch/dpdk-stable-17.11.2/0003-rh75-ndo_change_mtu.patch
 create mode 100644 patch/dpdk-stable-17.11.2/0004-patch-dpdk-17.11.2-to-support-rh75-provided-by-Jason.patch
 rename patch/dpdk-stable-17.11.6/{0002-kni-use-netlink-event-for-multicast-driver-part.patch => 0001-kni-use-netlink-event-for-multicast-driver-part.patch} (87%)
 rename patch/dpdk-stable-17.11.6/{0001-net-support-variable-IP-header-len-for-checksum-API.patch => 0002-net-support-variable-IP-header-len-for-checksum-API.patch} (78%)
 create mode 100644 patch/dpdk-stable-17.11.6/0003-enable-pdump-and-change-dpdk-pdump-tool-for-DPVS.patch
 rename patch/dpdk-stable-18.11.2/{0002-kni-use-netlink-event-for-multicast-driver-part.patch => 0001-kni-use-netlink-event-for-multicast-driver-part.patch} (90%)
 rename patch/dpdk-stable-18.11.2/{0001-net-support-variable-IP-header-len-for-checksum-API.patch => 0002-net-support-variable-IP-header-len-for-checksum-API.patch} (78%)

diff --git a/patch/dpdk-stable-17.11.2/0001-PATCH-kni-use-netlink-event-for-multicast-driver-par.patch b/patch/dpdk-stable-17.11.2/0001-kni-use-netlink-event-for-multicast-driver-part.patch
similarity index 93%
rename from patch/dpdk-stable-17.11.2/0001-PATCH-kni-use-netlink-event-for-multicast-driver-par.patch
rename to patch/dpdk-stable-17.11.2/0001-kni-use-netlink-event-for-multicast-driver-part.patch
index 9c37cb46d..05b10eba2 100644
--- a/patch/dpdk-stable-17.11.2/0001-PATCH-kni-use-netlink-event-for-multicast-driver-par.patch
+++ b/patch/dpdk-stable-17.11.2/0001-kni-use-netlink-event-for-multicast-driver-part.patch
@@ -1,7 +1,7 @@
-From b5843bda351920c27be5e8211ef6fa5d548fa03e Mon Sep 17 00:00:00 2001
+From 52f4389c80b4b41386c53daf16d860305252f325 Mon Sep 17 00:00:00 2001
 From: Lei Chen <raychen@qiyi.com>
 Date: Tue, 23 Jan 2018 12:39:56 +0800
-Subject: [PATCH] kni: use netlink event for multicast (driver part).
+Subject: [PATCH 1/4] kni: use netlink event for multicast (driver part).
 
 kni driver send netlink event every time hw-multicast list updated by
 kernel, the user kni app should capture the event and update multicast
@@ -27,7 +27,7 @@ index db9f489..fab94d1 100644
  
  #include <exec-env/rte_kni_common.h>
  #include <kni_fifo.h>
-@@ -579,9 +581,75 @@ kni_net_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
+@@ -579,9 +581,75 @@
  	return 0;
  }
  
@@ -104,5 +104,5 @@ index db9f489..fab94d1 100644
  
  static int
 -- 
-2.7.4
+1.8.3.1
 
diff --git a/patch/dpdk-stable-17.11.2/0002-net-support-variable-IP-header-len-for-checksum-API.patch b/patch/dpdk-stable-17.11.2/0002-net-support-variable-IP-header-len-for-checksum-API.patch
index 927827a29..96dd76ea8 100644
--- a/patch/dpdk-stable-17.11.2/0002-net-support-variable-IP-header-len-for-checksum-API.patch
+++ b/patch/dpdk-stable-17.11.2/0002-net-support-variable-IP-header-len-for-checksum-API.patch
@@ -1,7 +1,7 @@
-From c2dfa35bbd68b869f9069ca9b7474dd93e2097ef Mon Sep 17 00:00:00 2001
+From a949f95267849630a750f1e72ee468d58b806589 Mon Sep 17 00:00:00 2001
 From: Lei Chen <raychen@qiyi.com>
 Date: Tue, 6 Mar 2018 16:04:36 +0800
-Subject: [PATCH 2/2] net: support variable IP header len for checksum API.
+Subject: [PATCH 2/4] net: support variable IP header len for checksum API.
 
 IPv4 checksum APIs use fixe IP header length, it will failed if there is
 any IP option. Now calculating header length by "ihl" field, so that we
@@ -13,10 +13,10 @@ Signed-off-by: Lei Chen <raychen@qiyi.com>
  1 file changed, 3 insertions(+), 3 deletions(-)
 
 diff --git a/lib/librte_net/rte_ip.h b/lib/librte_net/rte_ip.h
-index 4491b86..cfbc3bd 100644
+index 73ec398..e03f707 100644
 --- a/lib/librte_net/rte_ip.h
 +++ b/lib/librte_net/rte_ip.h
-@@ -314,7 +314,7 @@ static inline uint16_t
+@@ -314,7 +314,7 @@ struct ipv4_hdr {
  rte_ipv4_cksum(const struct ipv4_hdr *ipv4_hdr)
  {
  	uint16_t cksum;
@@ -25,7 +25,7 @@ index 4491b86..cfbc3bd 100644
  	return (cksum == 0xffff) ? cksum : ~cksum;
  }
  
-@@ -356,7 +356,7 @@ rte_ipv4_phdr_cksum(const struct ipv4_hdr *ipv4_hdr, uint64_t ol_flags)
+@@ -356,7 +356,7 @@ struct ipv4_hdr {
  	} else {
  		psd_hdr.len = rte_cpu_to_be_16(
  			(uint16_t)(rte_be_to_cpu_16(ipv4_hdr->total_length)
@@ -34,7 +34,7 @@ index 4491b86..cfbc3bd 100644
  	}
  	return rte_raw_cksum(&psd_hdr, sizeof(psd_hdr));
  }
-@@ -381,7 +381,7 @@ rte_ipv4_udptcp_cksum(const struct ipv4_hdr *ipv4_hdr, const void *l4_hdr)
+@@ -381,7 +381,7 @@ struct ipv4_hdr {
  	uint32_t l4_len;
  
  	l4_len = rte_be_to_cpu_16(ipv4_hdr->total_length) -
@@ -44,5 +44,5 @@ index 4491b86..cfbc3bd 100644
  	cksum = rte_raw_cksum(l4_hdr, l4_len);
  	cksum += rte_ipv4_phdr_cksum(ipv4_hdr, 0);
 -- 
-2.7.4
+1.8.3.1
 
diff --git a/patch/dpdk-stable-17.11.2/0003-enable-pdump-and-change-dpdk-pdump-tool-for-DPVS.patch b/patch/dpdk-stable-17.11.2/0003-enable-pdump-and-change-dpdk-pdump-tool-for-DPVS.patch
index a10fe4976..48743416d 100644
--- a/patch/dpdk-stable-17.11.2/0003-enable-pdump-and-change-dpdk-pdump-tool-for-DPVS.patch
+++ b/patch/dpdk-stable-17.11.2/0003-enable-pdump-and-change-dpdk-pdump-tool-for-DPVS.patch
@@ -1,7 +1,7 @@
-From 34d3d8ebc02906739d9ee6c152091eaf628a292e Mon Sep 17 00:00:00 2001
+From 3f2c917cc758f3205ea38447dc7a82215c448cc0 Mon Sep 17 00:00:00 2001
 From: Daniel Benli Ye <yebenli@bytedance.com>
 Date: Tue, 18 Dec 2018 09:01:52 -0500
-Subject: [PATCH] enable pdump and change dpdk-pdump tool for DPVS
+Subject: [PATCH 3/4] enable pdump and change dpdk-pdump tool for DPVS
 
 A fix in app/pdump/main.c is x-ported from later release.
 rte.app.pdump.mk is copied from rte.app.mk and do several changes
@@ -30,7 +30,7 @@ diff --git a/app/pdump/main.c b/app/pdump/main.c
 index 66272f5..d974583 100644
 --- a/app/pdump/main.c
 +++ b/app/pdump/main.c
-@@ -583,11 +583,10 @@ configure_vdev(uint16_t port_id)
+@@ -583,11 +583,10 @@ struct parse_val {
  {
  	struct ether_addr addr;
  	const uint16_t rxRings = 0, txRings = 1;
@@ -411,5 +411,5 @@ index 0000000..e425472
 +.PHONY: FORCE
 +FORCE:
 -- 
-2.1.4
+1.8.3.1
 
diff --git a/patch/dpdk-stable-17.11.2/0003-rh75-ndo_change_mtu.patch b/patch/dpdk-stable-17.11.2/0003-rh75-ndo_change_mtu.patch
deleted file mode 100644
index 00d96b8c3..000000000
--- a/patch/dpdk-stable-17.11.2/0003-rh75-ndo_change_mtu.patch
+++ /dev/null
@@ -1,25 +0,0 @@
---- a/lib/librte_eal/linuxapp/kni/compat.h
-+++ b/lib/librte_eal/linuxapp/kni/compat.h
-@@ -103,2 +103,8 @@
-
-+#if (defined(RHEL_RELEASE_CODE) && \
-+       (RHEL_RELEASE_CODE >= RHEL_RELEASE_VERSION(7, 5)) && \
-+       (RHEL_RELEASE_CODE < RHEL_RELEASE_VERSION(8, 0)))
-+#define ndo_change_mtu ndo_change_mtu_rh74
-+#endif
-+
- #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 11, 0)
-
---- a/lib/librte_eal/linuxapp/kni/ethtool/igb/kcompat.h
-+++ b/lib/librte_eal/linuxapp/kni/ethtool/igb/kcompat.h
-@@ -3933,4 +3933,10 @@ skb_set_hash(struct sk_buff *skb, __u32
- #endif
-
-+#if (defined(RHEL_RELEASE_CODE) && \
-+       (RHEL_RELEASE_CODE >= RHEL_RELEASE_VERSION(7, 5)) && \
-+       (RHEL_RELEASE_CODE < RHEL_RELEASE_VERSION(8, 0)))
-+#define ndo_change_mtu ndo_change_mtu_rh74
-+#endif
-+
- #if ((LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)) || \
-     (SLE_VERSION_CODE && SLE_VERSION_CODE >= SLE_VERSION(12, 3, 0)))
diff --git a/patch/dpdk-stable-17.11.2/0004-patch-dpdk-17.11.2-to-support-rh75-provided-by-Jason.patch b/patch/dpdk-stable-17.11.2/0004-patch-dpdk-17.11.2-to-support-rh75-provided-by-Jason.patch
new file mode 100644
index 000000000..3cb205562
--- /dev/null
+++ b/patch/dpdk-stable-17.11.2/0004-patch-dpdk-17.11.2-to-support-rh75-provided-by-Jason.patch
@@ -0,0 +1,48 @@
+From 95e115dd2bfe5f7a7e54af0f73577af0a68fdba0 Mon Sep 17 00:00:00 2001
+From: wencyu <yuwenchao@qiyi.com>
+Date: Wed, 13 Nov 2019 10:17:35 +0800
+Subject: [PATCH 4/4] patch dpdk-17.11.2 to support rh75 (provided by Jason Joo
+ <hblzxsj@163.com>)
+
+---
+ lib/librte_eal/linuxapp/kni/compat.h              | 6 ++++++
+ lib/librte_eal/linuxapp/kni/ethtool/igb/kcompat.h | 6 ++++++
+ 2 files changed, 12 insertions(+)
+
+diff --git a/lib/librte_eal/linuxapp/kni/compat.h b/lib/librte_eal/linuxapp/kni/compat.h
+index 3f8c0bc..be707bc 100644
+--- a/lib/librte_eal/linuxapp/kni/compat.h
++++ b/lib/librte_eal/linuxapp/kni/compat.h
+@@ -101,6 +101,12 @@
+ #undef NET_NAME_UNKNOWN
+ #endif
+ 
++#if (defined(RHEL_RELEASE_CODE) && \
++       (RHEL_RELEASE_CODE >= RHEL_RELEASE_VERSION(7, 5)) && \
++       (RHEL_RELEASE_CODE < RHEL_RELEASE_VERSION(8, 0)))
++#define ndo_change_mtu ndo_change_mtu_rh74
++#endif
++
+ #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 11, 0)
+ #define HAVE_SIGNAL_FUNCTIONS_OWN_HEADER
+ #endif
+diff --git a/lib/librte_eal/linuxapp/kni/ethtool/igb/kcompat.h b/lib/librte_eal/linuxapp/kni/ethtool/igb/kcompat.h
+index 443a3f2..46cad90 100644
+--- a/lib/librte_eal/linuxapp/kni/ethtool/igb/kcompat.h
++++ b/lib/librte_eal/linuxapp/kni/ethtool/igb/kcompat.h
+@@ -3932,6 +3932,12 @@ static inline struct sk_buff *__kc__vlan_hwaccel_put_tag(struct sk_buff *skb,
+ #define vlan_tx_tag_present skb_vlan_tag_present
+ #endif
+ 
++#if (defined(RHEL_RELEASE_CODE) && \
++       (RHEL_RELEASE_CODE >= RHEL_RELEASE_VERSION(7, 5)) && \
++       (RHEL_RELEASE_CODE < RHEL_RELEASE_VERSION(8, 0)))
++#define ndo_change_mtu ndo_change_mtu_rh74
++#endif
++
+ #if ((LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)) || \
+     (SLE_VERSION_CODE && SLE_VERSION_CODE >= SLE_VERSION(12, 3, 0)))
+ #define HAVE_VF_VLAN_PROTO
+-- 
+1.8.3.1
+
diff --git a/patch/dpdk-stable-17.11.6/0002-kni-use-netlink-event-for-multicast-driver-part.patch b/patch/dpdk-stable-17.11.6/0001-kni-use-netlink-event-for-multicast-driver-part.patch
similarity index 87%
rename from patch/dpdk-stable-17.11.6/0002-kni-use-netlink-event-for-multicast-driver-part.patch
rename to patch/dpdk-stable-17.11.6/0001-kni-use-netlink-event-for-multicast-driver-part.patch
index ed0cbb40d..0934c174a 100644
--- a/patch/dpdk-stable-17.11.6/0002-kni-use-netlink-event-for-multicast-driver-part.patch
+++ b/patch/dpdk-stable-17.11.6/0001-kni-use-netlink-event-for-multicast-driver-part.patch
@@ -1,7 +1,7 @@
-From dd72a3e2a760131f156f61a37df8826514f1ed4c Mon Sep 17 00:00:00 2001
+From b5dc636f0ccdccb3d4e94f3453b6e95a631bb10a Mon Sep 17 00:00:00 2001
 From: ywc689 <ywc689@163.com>
 Date: Fri, 28 Jun 2019 17:52:13 +0800
-Subject: [PATCH 2/2] kni: use netlink event for multicast (driver part)
+Subject: [PATCH 1/3] kni: use netlink event for multicast (driver part)
 
 kni driver send netlink event every time hw-multicast list updated by
 kernel, the user kni app should capture the event and update multicast
@@ -11,13 +11,13 @@ original way is using rte_kni_request to pass hw-multicast to user kni
 module. that method works but finally memory corruption found, which is
 to kni device.
 ---
- .../lib/librte_eal/linuxapp/kni/kni_net.c          | 68 ++++++++++++++++++++++
+ lib/librte_eal/linuxapp/kni/kni_net.c | 68 +++++++++++++++++++++++++++++++++++
  1 file changed, 68 insertions(+)
 
-diff --git a/dpdk-stable-17.11.6/lib/librte_eal/linuxapp/kni/kni_net.c b/dpdk-stable-17.11.6/lib/librte_eal/linuxapp/kni/kni_net.c
+diff --git a/lib/librte_eal/linuxapp/kni/kni_net.c b/lib/librte_eal/linuxapp/kni/kni_net.c
 index db9f489..fab94d1 100644
---- a/dpdk-stable-17.11.6/lib/librte_eal/linuxapp/kni/kni_net.c
-+++ b/dpdk-stable-17.11.6/lib/librte_eal/linuxapp/kni/kni_net.c
+--- a/lib/librte_eal/linuxapp/kni/kni_net.c
++++ b/lib/librte_eal/linuxapp/kni/kni_net.c
 @@ -35,6 +35,8 @@
  #include <linux/skbuff.h>
  #include <linux/kthread.h>
diff --git a/patch/dpdk-stable-17.11.6/0001-net-support-variable-IP-header-len-for-checksum-API.patch b/patch/dpdk-stable-17.11.6/0002-net-support-variable-IP-header-len-for-checksum-API.patch
similarity index 78%
rename from patch/dpdk-stable-17.11.6/0001-net-support-variable-IP-header-len-for-checksum-API.patch
rename to patch/dpdk-stable-17.11.6/0002-net-support-variable-IP-header-len-for-checksum-API.patch
index d423571f8..0a24083af 100644
--- a/patch/dpdk-stable-17.11.6/0001-net-support-variable-IP-header-len-for-checksum-API.patch
+++ b/patch/dpdk-stable-17.11.6/0002-net-support-variable-IP-header-len-for-checksum-API.patch
@@ -1,19 +1,19 @@
-From 648ff9e42e58a4fe6587dce05b534fb746ae438f Mon Sep 17 00:00:00 2001
+From 4be86649fd61173409040093eecffdbc30570988 Mon Sep 17 00:00:00 2001
 From: ywc689 <ywc689@163.com>
 Date: Fri, 28 Jun 2019 17:48:12 +0800
-Subject: [PATCH 1/2] net: support variable IP header len for checksum API.
+Subject: [PATCH 2/3] net: support variable IP header len for checksum API.
 
 IPv4 checksum APIs use fixe IP header length, it will failed if there is
 any IP option. Now calculating header length by "ihl" field, so that we
 can support options.
 ---
- dpdk-stable-17.11.6/lib/librte_net/rte_ip.h | 13 +++++++------
+ lib/librte_net/rte_ip.h | 13 +++++++------
  1 file changed, 7 insertions(+), 6 deletions(-)
 
-diff --git a/dpdk-stable-17.11.6/lib/librte_net/rte_ip.h b/dpdk-stable-17.11.6/lib/librte_net/rte_ip.h
+diff --git a/lib/librte_net/rte_ip.h b/lib/librte_net/rte_ip.h
 index 8d4907f..0d504f6 100644
---- a/dpdk-stable-17.11.6/lib/librte_net/rte_ip.h
-+++ b/dpdk-stable-17.11.6/lib/librte_net/rte_ip.h
+--- a/lib/librte_net/rte_ip.h
++++ b/lib/librte_net/rte_ip.h
 @@ -314,7 +314,7 @@ struct ipv4_hdr {
  rte_ipv4_cksum(const struct ipv4_hdr *ipv4_hdr)
  {
diff --git a/patch/dpdk-stable-17.11.6/0003-enable-pdump-and-change-dpdk-pdump-tool-for-DPVS.patch b/patch/dpdk-stable-17.11.6/0003-enable-pdump-and-change-dpdk-pdump-tool-for-DPVS.patch
new file mode 100644
index 000000000..fcc38a6d6
--- /dev/null
+++ b/patch/dpdk-stable-17.11.6/0003-enable-pdump-and-change-dpdk-pdump-tool-for-DPVS.patch
@@ -0,0 +1,415 @@
+From f15dd5afb3b061ff636b66cb5507f9122e02be55 Mon Sep 17 00:00:00 2001
+From: Daniel Benli Ye <yebenli@bytedance.com>
+Date: Tue, 18 Dec 2018 09:01:52 -0500
+Subject: [PATCH 3/3] enable pdump and change dpdk-pdump tool for DPVS
+
+A fix in app/pdump/main.c is x-ported from later release.
+rte.app.pdump.mk is copied from rte.app.mk and do several changes
+to addapt DPVS.
+---
+ app/pdump/Makefile  |   2 +-
+ app/pdump/main.c    |   3 +-
+ config/common_base  |   2 +-
+ mk/rte.app.pdump.mk | 348 ++++++++++++++++++++++++++++++++++++++++++++++++++++
+ 4 files changed, 351 insertions(+), 4 deletions(-)
+ create mode 100644 mk/rte.app.pdump.mk
+
+diff --git a/app/pdump/Makefile b/app/pdump/Makefile
+index 38ac3e9..28b0d3e 100644
+--- a/app/pdump/Makefile
++++ b/app/pdump/Makefile
+@@ -41,6 +41,6 @@ CFLAGS += $(WERROR_FLAGS)
+ 
+ SRCS-y := main.c
+ 
+-include $(RTE_SDK)/mk/rte.app.mk
++include $(RTE_SDK)/mk/rte.app.pdump.mk
+ 
+ endif
+diff --git a/app/pdump/main.c b/app/pdump/main.c
+index 8e42b36..96d82aa 100644
+--- a/app/pdump/main.c
++++ b/app/pdump/main.c
+@@ -583,11 +583,10 @@ struct parse_val {
+ {
+ 	struct ether_addr addr;
+ 	const uint16_t rxRings = 0, txRings = 1;
+-	const uint8_t nb_ports = rte_eth_dev_count();
+ 	int ret;
+ 	uint16_t q;
+ 
+-	if (port_id > nb_ports)
++	if (!rte_eth_dev_is_valid_port(port_id))
+ 		return -1;
+ 
+ 	ret = rte_eth_dev_configure(port_id, rxRings, txRings,
+diff --git a/config/common_base b/config/common_base
+index 7b47922..31f50b4 100644
+--- a/config/common_base
++++ b/config/common_base
+@@ -399,7 +399,7 @@ CONFIG_RTE_PMD_RING_MAX_TX_RINGS=16
+ #
+ # Compile software PMD backed by PCAP files
+ #
+-CONFIG_RTE_LIBRTE_PMD_PCAP=n
++CONFIG_RTE_LIBRTE_PMD_PCAP=y
+ 
+ #
+ # Compile link bonding PMD library
+diff --git a/mk/rte.app.pdump.mk b/mk/rte.app.pdump.mk
+new file mode 100644
+index 0000000..e425472
+--- /dev/null
++++ b/mk/rte.app.pdump.mk
+@@ -0,0 +1,348 @@
++#   BSD LICENSE
++#
++#   Copyright(c) 2010-2017 Intel Corporation. All rights reserved.
++#   Copyright(c) 2014-2015 6WIND S.A.
++#   All rights reserved.
++#
++#   Redistribution and use in source and binary forms, with or without
++#   modification, are permitted provided that the following conditions
++#   are met:
++#
++#     * Redistributions of source code must retain the above copyright
++#       notice, this list of conditions and the following disclaimer.
++#     * Redistributions in binary form must reproduce the above copyright
++#       notice, this list of conditions and the following disclaimer in
++#       the documentation and/or other materials provided with the
++#       distribution.
++#     * Neither the name of Intel Corporation nor the names of its
++#       contributors may be used to endorse or promote products derived
++#       from this software without specific prior written permission.
++#
++#   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
++#   "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
++#   LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
++#   A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
++#   OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
++#   SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
++#   LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
++#   DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
++#   THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
++#   (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
++#   OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
++
++include $(RTE_SDK)/mk/internal/rte.compile-pre.mk
++include $(RTE_SDK)/mk/internal/rte.install-pre.mk
++include $(RTE_SDK)/mk/internal/rte.clean-pre.mk
++include $(RTE_SDK)/mk/internal/rte.build-pre.mk
++
++# VPATH contains at least SRCDIR
++VPATH += $(SRCDIR)
++
++_BUILD = $(APP)
++_INSTALL = $(INSTALL-FILES-y) $(SYMLINK-FILES-y)
++_INSTALL += $(RTE_OUTPUT)/app/$(APP) $(RTE_OUTPUT)/app/$(APP).map
++POSTINSTALL += target-appinstall
++_CLEAN = doclean
++POSTCLEAN += target-appclean
++
++ifeq ($(NO_LDSCRIPT),)
++LDSCRIPT = $(RTE_LDSCRIPT)
++endif
++
++# Link only the libraries used in the application
++LDFLAGS += --as-needed
++
++# default path for libs
++_LDLIBS-y += -L$(RTE_SDK_BIN)/lib
++
++#
++# Order is important: from higher level to lower level
++#
++_LDLIBS-$(CONFIG_RTE_LIBRTE_FLOW_CLASSIFY)  += -lrte_flow_classify
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PIPELINE)       += -lrte_pipeline
++_LDLIBS-$(CONFIG_RTE_LIBRTE_TABLE)          += -lrte_table
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PORT)           += -lrte_port
++
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PDUMP)          += -lrte_pdump
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DISTRIBUTOR)    += -lrte_distributor
++_LDLIBS-$(CONFIG_RTE_LIBRTE_IP_FRAG)        += -lrte_ip_frag
++_LDLIBS-$(CONFIG_RTE_LIBRTE_GRO)            += -lrte_gro
++_LDLIBS-$(CONFIG_RTE_LIBRTE_GSO)            += -lrte_gso
++_LDLIBS-$(CONFIG_RTE_LIBRTE_METER)          += -lrte_meter
++_LDLIBS-$(CONFIG_RTE_LIBRTE_LPM)            += -lrte_lpm
++# librte_acl needs --whole-archive because of weak functions
++_LDLIBS-$(CONFIG_RTE_LIBRTE_ACL)            += --whole-archive
++_LDLIBS-$(CONFIG_RTE_LIBRTE_ACL)            += --no-whole-archive
++_LDLIBS-$(CONFIG_RTE_LIBRTE_JOBSTATS)       += -lrte_jobstats
++_LDLIBS-$(CONFIG_RTE_LIBRTE_METRICS)        += -lrte_metrics
++_LDLIBS-$(CONFIG_RTE_LIBRTE_BITRATE)        += -lrte_bitratestats
++_LDLIBS-$(CONFIG_RTE_LIBRTE_LATENCY_STATS)  += -lrte_latencystats
++_LDLIBS-$(CONFIG_RTE_LIBRTE_POWER)          += -lrte_power
++
++_LDLIBS-$(CONFIG_RTE_LIBRTE_TIMER)          += -lrte_timer
++_LDLIBS-$(CONFIG_RTE_LIBRTE_EFD)            += -lrte_efd
++
++_LDLIBS-y += --whole-archive
++
++_LDLIBS-$(CONFIG_RTE_LIBRTE_CFGFILE)        += -lrte_cfgfile
++_LDLIBS-$(CONFIG_RTE_LIBRTE_HASH)           += -lrte_hash
++_LDLIBS-$(CONFIG_RTE_LIBRTE_VHOST)          += -lrte_vhost
++_LDLIBS-$(CONFIG_RTE_LIBRTE_KVARGS)         += -lrte_kvargs
++_LDLIBS-$(CONFIG_RTE_LIBRTE_MBUF)           += -lrte_mbuf
++_LDLIBS-$(CONFIG_RTE_LIBRTE_NET)            += -lrte_net
++_LDLIBS-$(CONFIG_RTE_LIBRTE_ETHER)          += -lrte_ethdev
++_LDLIBS-$(CONFIG_RTE_LIBRTE_CRYPTODEV)      += -lrte_cryptodev
++_LDLIBS-$(CONFIG_RTE_LIBRTE_SECURITY)       += -lrte_security
++_LDLIBS-$(CONFIG_RTE_LIBRTE_MEMPOOL)        += -lrte_mempool
++_LDLIBS-$(CONFIG_RTE_DRIVER_MEMPOOL_RING)   += -lrte_mempool_ring
++_LDLIBS-$(CONFIG_RTE_LIBRTE_RING)           += -lrte_ring
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PCI)            += -lrte_pci
++_LDLIBS-$(CONFIG_RTE_LIBRTE_EAL)            += -lrte_eal
++_LDLIBS-$(CONFIG_RTE_LIBRTE_CMDLINE)        += -lrte_cmdline
++_LDLIBS-$(CONFIG_RTE_LIBRTE_SCHED)          += -lrte_sched
++
++ifeq ($(CONFIG_RTE_EXEC_ENV_LINUXAPP),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_KNI)            += -lrte_kni
++endif
++
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PCI_BUS)        += -lrte_bus_pci
++_LDLIBS-$(CONFIG_RTE_LIBRTE_VDEV_BUS)       += -lrte_bus_vdev
++
++ifeq ($(CONFIG_RTE_BUILD_SHARED_LIB),n)
++# plugins (link only if static libraries)
++
++_LDLIBS-$(CONFIG_RTE_DRIVER_MEMPOOL_STACK)  += -lrte_mempool_stack
++
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_AF_PACKET)  += -lrte_pmd_af_packet
++_LDLIBS-$(CONFIG_RTE_LIBRTE_ARK_PMD)        += -lrte_pmd_ark
++_LDLIBS-$(CONFIG_RTE_LIBRTE_AVP_PMD)        += -lrte_pmd_avp
++_LDLIBS-$(CONFIG_RTE_LIBRTE_BNX2X_PMD)      += -lrte_pmd_bnx2x -lz
++_LDLIBS-$(CONFIG_RTE_LIBRTE_BNXT_PMD)       += -lrte_pmd_bnxt
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_BOND)       += -lrte_pmd_bond
++_LDLIBS-$(CONFIG_RTE_LIBRTE_CXGBE_PMD)      += -lrte_pmd_cxgbe
++ifeq ($(CONFIG_RTE_LIBRTE_DPAA_BUS),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DPAA_BUS)       += -lrte_bus_dpaa
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DPAA_MEMPOOL)   += -lrte_mempool_dpaa
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DPAA_PMD)       += -lrte_pmd_dpaa
++endif
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DPAA2_PMD)      += -lrte_pmd_dpaa2
++_LDLIBS-$(CONFIG_RTE_LIBRTE_E1000_PMD)      += -lrte_pmd_e1000
++_LDLIBS-$(CONFIG_RTE_LIBRTE_ENA_PMD)        += -lrte_pmd_ena
++_LDLIBS-$(CONFIG_RTE_LIBRTE_ENIC_PMD)       += -lrte_pmd_enic
++_LDLIBS-$(CONFIG_RTE_LIBRTE_FM10K_PMD)      += -lrte_pmd_fm10k
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_FAILSAFE)   += -lrte_pmd_failsafe
++_LDLIBS-$(CONFIG_RTE_LIBRTE_I40E_PMD)       += -lrte_pmd_i40e
++_LDLIBS-$(CONFIG_RTE_LIBRTE_IXGBE_PMD)      += -lrte_pmd_ixgbe
++ifeq ($(CONFIG_RTE_LIBRTE_KNI),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_KNI)        += -lrte_pmd_kni
++endif
++_LDLIBS-$(CONFIG_RTE_LIBRTE_LIO_PMD)        += -lrte_pmd_lio
++_LDLIBS-$(CONFIG_RTE_LIBRTE_MLX4_PMD)       += -lrte_pmd_mlx4 -libverbs -lmlx4
++_LDLIBS-$(CONFIG_RTE_LIBRTE_MLX5_PMD)       += -lrte_pmd_mlx5 -libverbs -lmlx5
++_LDLIBS-$(CONFIG_RTE_LIBRTE_MRVL_PMD)       += -lrte_pmd_mrvl -L$(LIBMUSDK_PATH)/lib -lmusdk
++_LDLIBS-$(CONFIG_RTE_LIBRTE_NFP_PMD)        += -lrte_pmd_nfp
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_NULL)       += -lrte_pmd_null
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_PCAP)       += -lrte_pmd_pcap -lpcap
++_LDLIBS-$(CONFIG_RTE_LIBRTE_QEDE_PMD)       += -lrte_pmd_qede
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_RING)       += -lrte_pmd_ring
++ifeq ($(CONFIG_RTE_LIBRTE_SCHED),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_SOFTNIC)      += -lrte_pmd_softnic
++endif
++_LDLIBS-$(CONFIG_RTE_LIBRTE_SFC_EFX_PMD)    += -lrte_pmd_sfc_efx
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_SZEDATA2)   += -lrte_pmd_szedata2 -lsze2
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_TAP)        += -lrte_pmd_tap
++_LDLIBS-$(CONFIG_RTE_LIBRTE_THUNDERX_NICVF_PMD) += -lrte_pmd_thunderx_nicvf
++_LDLIBS-$(CONFIG_RTE_LIBRTE_VIRTIO_PMD)     += -lrte_pmd_virtio
++ifeq ($(CONFIG_RTE_LIBRTE_VHOST),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_VHOST)      += -lrte_pmd_vhost
++endif # $(CONFIG_RTE_LIBRTE_VHOST)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_VMXNET3_PMD)    += -lrte_pmd_vmxnet3_uio
++
++ifeq ($(CONFIG_RTE_LIBRTE_CRYPTODEV),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_AESNI_MB)    += -lrte_pmd_aesni_mb
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_AESNI_MB)    += -L$(AESNI_MULTI_BUFFER_LIB_PATH) -lIPSec_MB
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_AESNI_GCM)   += -lrte_pmd_aesni_gcm
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_AESNI_GCM)   += -L$(AESNI_MULTI_BUFFER_LIB_PATH) -lIPSec_MB
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_OPENSSL)     += -lrte_pmd_openssl -lcrypto
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_NULL_CRYPTO) += -lrte_pmd_null_crypto
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_QAT)         += -lrte_pmd_qat -lcrypto
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_SNOW3G)      += -lrte_pmd_snow3g
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_SNOW3G)      += -L$(LIBSSO_SNOW3G_PATH)/build -lsso_snow3g
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_KASUMI)      += -lrte_pmd_kasumi
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_KASUMI)      += -L$(LIBSSO_KASUMI_PATH)/build -lsso_kasumi
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_ZUC)         += -lrte_pmd_zuc
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_ZUC)         += -L$(LIBSSO_ZUC_PATH)/build -lsso_zuc
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_ARMV8_CRYPTO)    += -lrte_pmd_armv8
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_ARMV8_CRYPTO)    += -L$(ARMV8_CRYPTO_LIB_PATH) -larmv8_crypto
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_MRVL_CRYPTO) += -L$(LIBMUSDK_PATH)/lib -lrte_pmd_mrvl_crypto -lmusdk
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_CRYPTO_SCHEDULER) += -lrte_pmd_crypto_scheduler
++ifeq ($(CONFIG_RTE_LIBRTE_FSLMC_BUS),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_DPAA2_SEC)   += -lrte_pmd_dpaa2_sec
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_DPAA2_SEC)   += -lrte_mempool_dpaa2
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_DPAA2_SEC)   += -lrte_bus_fslmc
++endif # CONFIG_RTE_LIBRTE_FSLMC_BUS
++
++ifeq ($(CONFIG_RTE_LIBRTE_DPAA_BUS),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_DPAA_SEC)   += -lrte_bus_dpaa
++_LDLIBS-$(CONFIG_RTE_LIBRTE_PMD_DPAA_SEC)   += -lrte_pmd_dpaa_sec
++endif # CONFIG_RTE_LIBRTE_DPAA_BUS
++
++endif # CONFIG_RTE_LIBRTE_CRYPTODEV
++
++ifeq ($(CONFIG_RTE_LIBRTE_DPAA2_PMD),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DPAA2_PMD)      += -lrte_bus_fslmc
++_LDLIBS-$(CONFIG_RTE_LIBRTE_DPAA2_PMD)      += -lrte_mempool_dpaa2
++endif # CONFIG_RTE_LIBRTE_DPAA2_PMD
++
++endif # !CONFIG_RTE_BUILD_SHARED_LIBS
++
++_LDLIBS-y += --no-whole-archive
++
++ifeq ($(CONFIG_RTE_BUILD_SHARED_LIB),n)
++# The static libraries do not know their dependencies.
++# So linking with static library requires explicit dependencies.
++_LDLIBS-$(CONFIG_RTE_LIBRTE_EAL)            += -lrt
++ifeq ($(CONFIG_RTE_EXEC_ENV_LINUXAPP)$(CONFIG_RTE_EAL_NUMA_AWARE_HUGEPAGES),yy)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_EAL)            += -lnuma
++endif
++_LDLIBS-$(CONFIG_RTE_LIBRTE_SCHED)          += -lm
++_LDLIBS-$(CONFIG_RTE_LIBRTE_SCHED)          += -lrt
++_LDLIBS-$(CONFIG_RTE_LIBRTE_MEMBER)         += -lm
++_LDLIBS-$(CONFIG_RTE_LIBRTE_METER)          += -lm
++ifeq ($(CONFIG_RTE_LIBRTE_VHOST_NUMA),y)
++_LDLIBS-$(CONFIG_RTE_LIBRTE_VHOST)          += -lnuma
++endif
++_LDLIBS-$(CONFIG_RTE_PORT_PCAP)             += -lpcap
++endif # !CONFIG_RTE_BUILD_SHARED_LIBS
++
++_LDLIBS-y += $(EXECENV_LDLIBS)
++
++LDLIBS += $(_LDLIBS-y) $(CPU_LDLIBS) $(EXTRA_LDLIBS)
++
++# all the words except the first one
++allbutfirst = $(wordlist 2,$(words $(1)),$(1))
++
++# Eliminate duplicates without sorting, only keep the last occurrence
++filter-libs = \
++	$(if $(1),$(strip\
++		$(if \
++			$(and \
++				$(filter $(firstword $(1)),$(call allbutfirst,$(1))),\
++				$(filter -l%,$(firstword $(1)))),\
++			,\
++			$(firstword $(1))) \
++		$(call filter-libs,$(call allbutfirst,$(1)))))
++
++LDLIBS := $(call filter-libs,$(LDLIBS))
++
++ifeq ($(RTE_DEVEL_BUILD)$(CONFIG_RTE_BUILD_SHARED_LIB),yy)
++LDFLAGS += -rpath=$(RTE_SDK_BIN)/lib
++endif
++
++MAPFLAGS = -Map=$@.map --cref
++
++.PHONY: all
++all: install
++
++.PHONY: install
++install: build _postinstall
++
++_postinstall: build
++
++.PHONY: build
++build: _postbuild
++
++exe2cmd = $(strip $(call dotfile,$(patsubst %,%.cmd,$(1))))
++
++ifeq ($(LINK_USING_CC),1)
++O_TO_EXE = $(CC) -o $@ $(CFLAGS) $(EXTRA_CFLAGS) $(OBJS-y) $(call linkerprefix, \
++	$(LDLIBS) $(LDFLAGS) $(LDFLAGS_$(@)) $(EXTRA_LDFLAGS) \
++	$(MAPFLAGS))
++else
++O_TO_EXE = $(LD) -o $@ $(OBJS-y) \
++	$(LDLIBS) $(LDFLAGS) $(LDFLAGS_$(@)) $(EXTRA_LDFLAGS) \
++	$(MAPFLAGS)
++endif
++O_TO_EXE_STR = $(subst ','\'',$(O_TO_EXE)) #'# fix syntax highlight
++O_TO_EXE_DISP = $(if $(V),"$(O_TO_EXE_STR)","  LD $(@)")
++O_TO_EXE_CMD = "cmd_$@ = $(O_TO_EXE_STR)"
++O_TO_EXE_DO = @set -e; \
++	echo $(O_TO_EXE_DISP); \
++	$(O_TO_EXE) && \
++	echo $(O_TO_EXE_CMD) > $(call exe2cmd,$(@))
++
++-include .$(APP).cmd
++
++# path where libraries are retrieved
++LDLIBS_PATH := $(subst -Wl$(comma)-L,,$(filter -Wl$(comma)-L%,$(LDLIBS)))
++LDLIBS_PATH += $(subst -L,,$(filter -L%,$(LDLIBS)))
++
++# list of .a files that are linked to this application
++LDLIBS_NAMES := $(patsubst -l%,lib%.a,$(filter -l%,$(LDLIBS)))
++LDLIBS_NAMES += $(patsubst -Wl$(comma)-l%,lib%.a,$(filter -Wl$(comma)-l%,$(LDLIBS)))
++
++# list of found libraries files (useful for deps). If not found, the
++# library is silently ignored and dep won't be checked
++LDLIBS_FILES := $(sort $(wildcard $(foreach dir,$(LDLIBS_PATH),\
++	$(addprefix $(dir)/,$(LDLIBS_NAMES)))))
++
++#
++# Compile executable file if needed
++#
++$(APP): $(OBJS-y) $(LDLIBS_FILES) $(DEP_$(APP)) $(LDSCRIPT) FORCE
++	@[ -d $(dir $@) ] || mkdir -p $(dir $@)
++	$(if $(D),\
++		@echo -n "$< -> $@ " ; \
++		echo -n "file_missing=$(call boolean,$(file_missing)) " ; \
++		echo -n "cmdline_changed=$(call boolean,$(call cmdline_changed,$(O_TO_EXE_STR))) " ; \
++		echo -n "depfile_missing=$(call boolean,$(depfile_missing)) " ; \
++		echo "depfile_newer=$(call boolean,$(depfile_newer)) ")
++	$(if $(or \
++		$(file_missing),\
++		$(call cmdline_changed,$(O_TO_EXE_STR)),\
++		$(depfile_missing),\
++		$(depfile_newer)),\
++		$(O_TO_EXE_DO))
++
++#
++# install app in $(RTE_OUTPUT)/app
++#
++$(RTE_OUTPUT)/app/$(APP): $(APP)
++	@echo "  INSTALL-APP $(APP)"
++	@[ -d $(RTE_OUTPUT)/app ] || mkdir -p $(RTE_OUTPUT)/app
++	$(Q)cp -f $(APP) $(RTE_OUTPUT)/app
++
++#
++# install app map file in $(RTE_OUTPUT)/app
++#
++$(RTE_OUTPUT)/app/$(APP).map: $(APP)
++	@echo "  INSTALL-MAP $(APP).map"
++	@[ -d $(RTE_OUTPUT)/app ] || mkdir -p $(RTE_OUTPUT)/app
++	$(Q)cp -f $(APP).map $(RTE_OUTPUT)/app
++
++#
++# Clean all generated files
++#
++.PHONY: clean
++clean: _postclean
++	$(Q)rm -f $(_BUILD_TARGETS) $(_INSTALL_TARGETS) $(_CLEAN_TARGETS)
++
++.PHONY: doclean
++doclean:
++	$(Q)rm -rf $(APP) $(OBJS-all) $(DEPS-all) $(DEPSTMP-all) \
++	  $(CMDS-all) $(INSTALL-FILES-all) .$(APP).cmd $(APP).map
++
++
++include $(RTE_SDK)/mk/internal/rte.compile-post.mk
++include $(RTE_SDK)/mk/internal/rte.install-post.mk
++include $(RTE_SDK)/mk/internal/rte.clean-post.mk
++include $(RTE_SDK)/mk/internal/rte.build-post.mk
++
++ifneq ($(wildcard $(RTE_SDK)/mk/target/$(RTE_TARGET)/rte.app.mk),)
++include $(RTE_SDK)/mk/target/$(RTE_TARGET)/rte.app.mk
++else
++include $(RTE_SDK)/mk/target/generic/rte.app.mk
++endif
++
++.PHONY: FORCE
++FORCE:
+-- 
+1.8.3.1
+
diff --git a/patch/dpdk-stable-18.11.2/0002-kni-use-netlink-event-for-multicast-driver-part.patch b/patch/dpdk-stable-18.11.2/0001-kni-use-netlink-event-for-multicast-driver-part.patch
similarity index 90%
rename from patch/dpdk-stable-18.11.2/0002-kni-use-netlink-event-for-multicast-driver-part.patch
rename to patch/dpdk-stable-18.11.2/0001-kni-use-netlink-event-for-multicast-driver-part.patch
index abd9ac448..17aea758a 100644
--- a/patch/dpdk-stable-18.11.2/0002-kni-use-netlink-event-for-multicast-driver-part.patch
+++ b/patch/dpdk-stable-18.11.2/0001-kni-use-netlink-event-for-multicast-driver-part.patch
@@ -1,7 +1,7 @@
-From 7a54416e9370be6d573d6b9429002c0712a5851f Mon Sep 17 00:00:00 2001
+From 659c6e84e3ae0c5e5b93894aa15dd4983b3ac6c3 Mon Sep 17 00:00:00 2001
 From: ywc689 <ywc689@163.com>
 Date: Fri, 28 Jun 2019 16:52:24 +0800
-Subject: [PATCH 2/3] kni: use netlink event for multicast (driver part)
+Subject: [PATCH 1/3] kni: use netlink event for multicast (driver part)
 
 kni driver send netlink event every time hw-multicast list updated by
 kernel, the user kni app should capture the event and update multicast
@@ -11,13 +11,13 @@ original way is using rte_kni_request to pass hw-multicast to user kni
 module. that method works but finally memory corruption found, which is
 to kni device.
 ---
- dpdk-stable-18.11.2/kernel/linux/kni/kni_net.c | 70 ++++++++++++++++++++++++++
+ kernel/linux/kni/kni_net.c | 70 ++++++++++++++++++++++++++++++++++++++++++++++
  1 file changed, 70 insertions(+)
 
-diff --git a/dpdk-stable-18.11.2/kernel/linux/kni/kni_net.c b/dpdk-stable-18.11.2/kernel/linux/kni/kni_net.c
+diff --git a/kernel/linux/kni/kni_net.c b/kernel/linux/kni/kni_net.c
 index 7371b6d..edc1416 100644
---- a/dpdk-stable-18.11.2/kernel/linux/kni/kni_net.c
-+++ b/dpdk-stable-18.11.2/kernel/linux/kni/kni_net.c
+--- a/kernel/linux/kni/kni_net.c
++++ b/kernel/linux/kni/kni_net.c
 @@ -16,6 +16,8 @@
  #include <linux/skbuff.h>
  #include <linux/kthread.h>
diff --git a/patch/dpdk-stable-18.11.2/0001-net-support-variable-IP-header-len-for-checksum-API.patch b/patch/dpdk-stable-18.11.2/0002-net-support-variable-IP-header-len-for-checksum-API.patch
similarity index 78%
rename from patch/dpdk-stable-18.11.2/0001-net-support-variable-IP-header-len-for-checksum-API.patch
rename to patch/dpdk-stable-18.11.2/0002-net-support-variable-IP-header-len-for-checksum-API.patch
index 0c1852c3a..2356e2154 100644
--- a/patch/dpdk-stable-18.11.2/0001-net-support-variable-IP-header-len-for-checksum-API.patch
+++ b/patch/dpdk-stable-18.11.2/0002-net-support-variable-IP-header-len-for-checksum-API.patch
@@ -1,19 +1,19 @@
-From 5dac8928f844b4b6cfaeab6c1174b60b7409279b Mon Sep 17 00:00:00 2001
+From 86d8695113517403c59497dc2f43a333fa44316b Mon Sep 17 00:00:00 2001
 From: ywc689 <ywc689@163.com>
 Date: Fri, 28 Jun 2019 16:27:08 +0800
-Subject: [PATCH 1/3] net: support variable IP header len for checksum API.
+Subject: [PATCH 2/3] net: support variable IP header len for checksum API.
 
 IPv4 checksum APIs use fixe IP header length, it will failed if there is
 any IP option. Now calculating header length by "ihl" field, so that we
 can support options.
 ---
- dpdk-stable-18.11.2/lib/librte_net/rte_ip.h | 13 +++++++------
+ lib/librte_net/rte_ip.h | 13 +++++++------
  1 file changed, 7 insertions(+), 6 deletions(-)
 
-diff --git a/dpdk-stable-18.11.2/lib/librte_net/rte_ip.h b/dpdk-stable-18.11.2/lib/librte_net/rte_ip.h
+diff --git a/lib/librte_net/rte_ip.h b/lib/librte_net/rte_ip.h
 index f9b9090..635bdcc 100644
---- a/dpdk-stable-18.11.2/lib/librte_net/rte_ip.h
-+++ b/dpdk-stable-18.11.2/lib/librte_net/rte_ip.h
+--- a/lib/librte_net/rte_ip.h
++++ b/lib/librte_net/rte_ip.h
 @@ -252,7 +252,7 @@ struct ipv4_hdr {
  rte_ipv4_cksum(const struct ipv4_hdr *ipv4_hdr)
  {
diff --git a/patch/dpdk-stable-18.11.2/0003-driver-kni-enable-flow_item-type-comparsion-in-flow_.patch b/patch/dpdk-stable-18.11.2/0003-driver-kni-enable-flow_item-type-comparsion-in-flow_.patch
index 38c539a33..d5634fb53 100644
--- a/patch/dpdk-stable-18.11.2/0003-driver-kni-enable-flow_item-type-comparsion-in-flow_.patch
+++ b/patch/dpdk-stable-18.11.2/0003-driver-kni-enable-flow_item-type-comparsion-in-flow_.patch
@@ -1,4 +1,4 @@
-From 408cda4311b0c10b441fbf8b67614d7873ec718a Mon Sep 17 00:00:00 2001
+From 2e26428dc4d450e974ceb9bc737f691057cd80b6 Mon Sep 17 00:00:00 2001
 From: ywc689 <ywc689@163.com>
 Date: Fri, 28 Jun 2019 17:02:40 +0800
 Subject: [PATCH 3/3] driver:kni: enable flow_item type comparsion in
@@ -9,13 +9,13 @@ the flow type is not compared in 'flow_fdir_cmp', which resulting
 in the failure or unwanted behavior in adding/deleting two same
 fdir flows with flow type(such as ipv4 tcp/udp) different only.
 ---
- dpdk-stable-18.11.2/drivers/net/mlx5/mlx5_flow.c | 5 +++++
+ drivers/net/mlx5/mlx5_flow.c | 5 +++++
  1 file changed, 5 insertions(+)
 
-diff --git a/dpdk-stable-18.11.2/drivers/net/mlx5/mlx5_flow.c b/dpdk-stable-18.11.2/drivers/net/mlx5/mlx5_flow.c
+diff --git a/drivers/net/mlx5/mlx5_flow.c b/drivers/net/mlx5/mlx5_flow.c
 index 222cd81..d99edce 100644
---- a/dpdk-stable-18.11.2/drivers/net/mlx5/mlx5_flow.c
-+++ b/dpdk-stable-18.11.2/drivers/net/mlx5/mlx5_flow.c
+--- a/drivers/net/mlx5/mlx5_flow.c
++++ b/drivers/net/mlx5/mlx5_flow.c
 @@ -2668,6 +2668,11 @@ struct rte_flow *
  static int
  flow_fdir_cmp(const struct mlx5_fdir *f1, const struct mlx5_fdir *f2)

From 917e4a4c12696ae72561a37a0247b23c45a1587d Mon Sep 17 00:00:00 2001
From: chenwei <chenw@koal.com>
Date: Tue, 19 Nov 2019 15:08:00 +0000
Subject: [PATCH 33/62] bugfix: fix wrong assignment in assertion expression

---
 src/ctrl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/ctrl.c b/src/ctrl.c
index 9ca2f0793..7638fb932 100644
--- a/src/ctrl.c
+++ b/src/ctrl.c
@@ -697,7 +697,7 @@ int msg_master_process(int step)
             /* probably previous msg timeout and new msg of this type sent */
             RTE_LOG(INFO, MSGMGR, "%s:msg@%p, multicast reply msg <type:%d, seq:%d> from"
                     " lcore %d repeated\n", __func__, msg, msg->type, msg->seq, msg->cid);
-            assert(msg->mode = DPVS_MSG_UNICAST);
+            assert(msg->mode == DPVS_MSG_UNICAST);
             add_msg_flags(msg, DPVS_MSG_F_STATE_DROP);
             msg_destroy(&msg); /* sorry, you are late */
         }

From 80d9ee206626ba2ad5be08696849bf80ec6a94b9 Mon Sep 17 00:00:00 2001
From: Weiliang Li <liweiliang@cmss.chinamobile.com>
Date: Tue, 26 Nov 2019 22:02:20 +0800
Subject: [PATCH 34/62] Delete useless if condition.

Delete useless if condition.
---
 src/ipvs/libconhash/util_rbtree.c | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/src/ipvs/libconhash/util_rbtree.c b/src/ipvs/libconhash/util_rbtree.c
index 0c0782dac..cb386675b 100644
--- a/src/ipvs/libconhash/util_rbtree.c
+++ b/src/ipvs/libconhash/util_rbtree.c
@@ -290,10 +290,6 @@ void rbtree_delete_fixup(util_rbtree_t *rbtree, util_rbtree_node_t *node)
         else /* node is right child */
         {
             w = node->parent->left;
-            if(w == 0)
-            {
-                //int t = 4;
-            }
             if(util_rbt_isred(w))
             {
                 util_rbt_black(w);

From db69cf84706356b3273401930dc33b4e3a0c3c90 Mon Sep 17 00:00:00 2001
From: Haishuang Yan <yanhaishuang@cmss.chinamobile.com>
Date: Sun, 1 Dec 2019 22:09:17 +0800
Subject: [PATCH 35/62] ip_tunnel: fix possible memory leak in tunnel_xmit

mbuf is leaked when rte_pktmbuf_prepend return fails in tunnel_xmit.

Signed-off-by: Haishuang Yan <yanhaishuang@cmss.chinamobile.com>
---
 src/ip_tunnel.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/ip_tunnel.c b/src/ip_tunnel.c
index 4608a401b..e6dfb05ff 100644
--- a/src/ip_tunnel.c
+++ b/src/ip_tunnel.c
@@ -349,8 +349,10 @@ static int tunnel_xmit(struct rte_mbuf *mbuf, __be32 src, __be32 dst,
     struct iphdr *oiph; /* outter IP header */
 
     oiph = (struct iphdr *)rte_pktmbuf_prepend(mbuf, sizeof(*oiph));
-    if (!oiph)
+    if (!oiph) {
+        rte_pktmbuf_free(mbuf);
         return EDPVS_NOROOM;
+    }
 
     oiph->version   = 4;
     oiph->ihl       = sizeof(struct iphdr) >> 2;

From a923f2f02ca1d15b2dedc274581f917c10481a15 Mon Sep 17 00:00:00 2001
From: weiyanhua <weiyanhua@360.cn>
Date: Tue, 17 Dec 2019 17:00:39 +0800
Subject: [PATCH 36/62] fix:no enough memory dpvs crash.

---
 src/netif.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/netif.c b/src/netif.c
index 36ee2e11f..a6328c9f2 100644
--- a/src/netif.c
+++ b/src/netif.c
@@ -2750,6 +2750,11 @@ struct netif_port *netif_alloc(size_t priv_size, const char *namefmt,
     }
 
     dev = rte_zmalloc("netif", alloc_size, RTE_CACHE_LINE_SIZE);
+    if (!dev) {
+        RTE_LOG(ERR, NETIF, "%s: no memory\n", __func__);
+        return NULL;
+    }
+
     dev->id = netif_port_id_alloc();
 
     if (strstr(namefmt, "%d"))

From 2ad9ffcba9702880939d429643005f83df9b9256 Mon Sep 17 00:00:00 2001
From: mscbg <jerrywang@qiyi.com>
Date: Mon, 23 Dec 2019 16:59:37 +0800
Subject: [PATCH 37/62] fix bug: msg free use msg_reply_free

---
 src/ipv6/ipv6_ctrl.c     | 2 +-
 src/ipvs/ip_vs_service.c | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/ipv6/ipv6_ctrl.c b/src/ipv6/ipv6_ctrl.c
index ec6d9a7e4..763093ad2 100644
--- a/src/ipv6/ipv6_ctrl.c
+++ b/src/ipv6/ipv6_ctrl.c
@@ -40,7 +40,7 @@ static int ip6_msg_get_stats(struct dpvs_msg *msg)
 
     err = ipv6_stats_cpu(stats);
     if (err != EDPVS_OK) {
-        rte_free(stats);
+        msg_reply_free(stats);
         return err;
     }
 
diff --git a/src/ipvs/ip_vs_service.c b/src/ipvs/ip_vs_service.c
index ebddcf3a9..5bd23a812 100644
--- a/src/ipvs/ip_vs_service.c
+++ b/src/ipvs/ip_vs_service.c
@@ -1080,7 +1080,7 @@ static int dp_vs_get_services_uc_cb(struct dpvs_msg *msg)
         return EDPVS_NOMEM;
     ret = dp_vs_get_service_entries(get->num_services, output, cid);
     if (ret != EDPVS_OK) {
-        rte_free(output);
+        msg_reply_free(output);
         return ret;
     }
     msg->reply.len = size;
@@ -1137,7 +1137,7 @@ static int dp_vs_get_service_uc_cb(struct dpvs_msg *msg)
 
     ret = dp_vs_copy_service(entry, svc);
     if (ret != EDPVS_OK) {
-        rte_free(entry);
+        msg_reply_free(entry);
         return ret;
     }
     msg->reply.len = size;
@@ -1181,7 +1181,7 @@ static int dp_vs_get_dests_uc_cb(struct dpvs_msg *msg)
     rte_memcpy(output, get, sizeof(*get));
     ret = dp_vs_get_dest_entries(svc, output);
     if (ret != EDPVS_OK) {
-        rte_free(output);
+        msg_reply_free(output);
         return ret;
     }
 

From ca664a46f57dbc6fe6f23c81651584ac43208e36 Mon Sep 17 00:00:00 2001
From: ytwang0320 <wyt900320@163.com>
Date: Wed, 25 Dec 2019 16:14:36 +0800
Subject: [PATCH 38/62] updated keepalived 2.0.19

---
 .../.github/ISSUE_TEMPLATE/bug_report.md      |     43 +
 .../.github/ISSUE_TEMPLATE/feature_request.md |     26 +
 .../support-help-request-template.md          |     42 +
 .../ISSUE_TEMPLATE/use-for-any-other-issue.md |     43 +
 tools/keepalived/.gitignore                   |     48 +
 tools/keepalived/.indent.pro                  |      8 +
 tools/keepalived/.travis.yml                  |     47 +
 tools/keepalived/CONTRIBUTORS                 |      2 +-
 tools/keepalived/ChangeLog                    |   6440 +-
 tools/keepalived/Dockerfile                   |     54 +
 tools/keepalived/INSTALL                      |    225 +-
 tools/keepalived/Makefile.am                  |     80 +
 tools/keepalived/Makefile.in                  |    929 +-
 tools/keepalived/README                       |     25 -
 tools/keepalived/README.md                    |     42 +
 tools/keepalived/TODO                         |    153 +
 tools/keepalived/VERSION                      |      1 -
 tools/keepalived/bin_install/Makefile.am      |     36 +
 tools/keepalived/build_setup                  |      6 +
 tools/keepalived/config.json                  |   4919 +
 tools/keepalived/configure                    |  12552 +-
 tools/keepalived/configure.ac                 |   2795 +
 tools/keepalived/configure.in                 |    387 -
 tools/keepalived/doc/.gitignore               |      1 +
 tools/keepalived/doc/KEEPALIVED-MIB           |   2221 -
 tools/keepalived/doc/KEEPALIVED-MIB.txt       |   5265 +
 tools/keepalived/doc/Makefile.am              |    220 +
 tools/keepalived/doc/NOTE_vrrp_vmac.txt       |     40 +-
 tools/keepalived/doc/README.sphinx            |     11 +
 tools/keepalived/doc/VRRP-MIB.txt             |    792 +
 tools/keepalived/doc/VRRPv3-MIB.txt           |    955 +
 tools/keepalived/doc/keepalived.conf.SYNOPSIS |    442 +-
 tools/keepalived/doc/man/man1/genhash.1       |     10 +
 .../keepalived/doc/man/man5/keepalived.conf.5 |   2546 +-
 tools/keepalived/doc/man/man8/.gitignore      |      1 +
 tools/keepalived/doc/man/man8/Makefile.am     |     20 +
 tools/keepalived/doc/man/man8/keepalived.8    |    107 -
 tools/keepalived/doc/man/man8/keepalived.8.in |    358 +
 .../doc/samples/keepalived.conf.HTTP_GET.port |      6 +-
 .../doc/samples/keepalived.conf.IPv6          |     65 +-
 .../doc/samples/keepalived.conf.SMTP_CHECK    |      5 +-
 .../doc/samples/keepalived.conf.SSL_GET       |     16 +-
 .../samples/keepalived.conf.conditional_conf  |     34 +
 .../doc/samples/keepalived.conf.inhibit       |      7 +-
 .../doc/samples/keepalived.conf.misc_check    |      6 +-
 .../samples/keepalived.conf.misc_check_arg    |      3 +-
 .../doc/samples/keepalived.conf.sample        |      6 +-
 .../doc/samples/keepalived.conf.status_code   |     13 +-
 .../samples/keepalived.conf.track_interface   |      2 +-
 .../keepalived.conf.virtual_server_group      |     10 +-
 .../doc/samples/keepalived.conf.virtualhost   |      8 +-
 .../doc/samples/keepalived.conf.vrrp          |      7 +-
 .../samples/keepalived.conf.vrrp.lvs_syncd    |      1 -
 .../doc/samples/keepalived.conf.vrrp.routes   |      1 +
 .../doc/samples/keepalived.conf.vrrp.rules    |     28 +
 .../doc/samples/keepalived.conf.vrrp.scripts  |      2 +-
 .../doc/samples/keepalived.conf.vrrp.sync     |      2 -
 .../doc/samples/sample.misccheck.smbcheck.sh  |      2 +-
 .../doc/samples/sample_notify_fifo.sh         |     93 +
 .../source/_static/.gitignore}                |      0
 tools/keepalived/doc/source/_static/.gitkeep  |      0
 .../doc/source/_templates/.gitignore          |      0
 .../keepalived/doc/source/_templates/.gitkeep |      0
 tools/keepalived/doc/source/about.rst         |     43 +
 .../doc/source/case_study_failover.rst        |    174 +
 .../doc/source/case_study_healthcheck.rst     |    225 +
 .../doc/source/case_study_mixing.rst          |    152 +
 tools/keepalived/doc/source/conf.py           |    297 +
 .../doc/source/configuration_synopsis.rst     |    190 +
 .../doc/source/images/software_design.png     |    Bin 0 -> 28145 bytes
 tools/keepalived/doc/source/index.rst         |     24 +
 .../doc/source/installing_keepalived.rst      |    144 +
 tools/keepalived/doc/source/introduction.rst  |     29 +
 tools/keepalived/doc/source/license.rst       |     10 +
 .../doc/source/load_balancing_techniques.rst  |     61 +
 .../doc/source/programs_synopsis.rst          |    172 +
 .../doc/source/protocol_support.rst           |     36 +
 .../doc/source/scheduling_algorithms.rst      |     78 +
 tools/keepalived/doc/source/snmp_support.rst  |    133 +
 .../keepalived/doc/source/software_design.rst |    330 +
 tools/keepalived/doc/source/terminology.rst   |     75 +
 tools/keepalived/doc/source/todo.rst          |      7 +
 .../tools/pydoctheme/static/pydoctheme.css    |    178 +
 .../doc/source/tools/pydoctheme/theme.conf    |     23 +
 tools/keepalived/docker/keepalived.conf       |     10 +
 tools/keepalived/genhash/.gitignore           |      1 +
 tools/keepalived/genhash/INSTALL              |      4 +-
 tools/keepalived/genhash/Makefile.am          |     22 +
 tools/keepalived/genhash/Makefile.in          |    653 +-
 tools/keepalived/genhash/README               |      4 +-
 tools/keepalived/genhash/http.c               |    282 +-
 tools/keepalived/genhash/{ => include}/hash.h |     36 +-
 tools/keepalived/genhash/{ => include}/http.h |     36 +-
 .../keepalived/genhash/{ => include}/layer4.h |     18 +-
 tools/keepalived/genhash/{ => include}/main.h |     52 +-
 tools/keepalived/genhash/{ => include}/sock.h |     28 +-
 tools/keepalived/genhash/{ => include}/ssl.h  |     15 +-
 tools/keepalived/genhash/layer4.c             |    181 +-
 tools/keepalived/genhash/main.c               |    213 +-
 tools/keepalived/genhash/sock.c               |     19 +-
 tools/keepalived/genhash/ssl.c                |    223 +-
 tools/keepalived/goodies/arpreset.pl          |     97 +
 .../goodies/check_conditional_tests           |     16 +
 tools/keepalived/install-sh                   |    252 +-
 tools/keepalived/keepalived.conf              |  37053 +++++
 tools/keepalived/keepalived.spec.in           |    137 +-
 tools/keepalived/keepalived/.gitignore        |      2 +
 tools/keepalived/keepalived/Makefile.am       |     75 +
 tools/keepalived/keepalived/Makefile.in       |    958 +-
 tools/keepalived/keepalived/bfd/Makefile.am   |     24 +
 tools/keepalived/keepalived/bfd/bfd.c         |    308 +
 tools/keepalived/keepalived/bfd/bfd_daemon.c  |    453 +
 tools/keepalived/keepalived/bfd/bfd_data.c    |    360 +
 tools/keepalived/keepalived/bfd/bfd_event.c   |     85 +
 tools/keepalived/keepalived/bfd/bfd_parser.c  |    559 +
 .../keepalived/keepalived/bfd/bfd_scheduler.c |   1249 +
 tools/keepalived/keepalived/check/Makefile.am |     36 +
 tools/keepalived/keepalived/check/Makefile.in |    645 +-
 tools/keepalived/keepalived/check/check_api.c |    584 +-
 tools/keepalived/keepalived/check/check_bfd.c |    321 +
 .../keepalived/check/check_daemon.c           |    690 +-
 .../keepalived/keepalived/check/check_data.c  |   1478 +-
 tools/keepalived/keepalived/check/check_dns.c |    548 +
 .../keepalived/keepalived/check/check_http.c  |   1848 +-
 .../keepalived/keepalived/check/check_misc.c  |    526 +-
 .../keepalived/check/check_parser.c           |   1061 +-
 .../keepalived/keepalived/check/check_print.c |     50 +
 .../keepalived/keepalived/check/check_smtp.c  |    878 +-
 .../keepalived/keepalived/check/check_snmp.c  |   1223 +-
 tools/keepalived/keepalived/check/check_ssl.c |    218 +-
 tools/keepalived/keepalived/check/check_tcp.c |    212 +-
 .../keepalived/keepalived/check/ipvswrapper.c |   1943 +-
 tools/keepalived/keepalived/check/ipwrapper.c |   1420 +-
 .../keepalived/check/ipwrapper.c.TODO         |    917 +
 .../{libipvs-2.6 => check}/libipvs.c          |   1054 +-
 tools/keepalived/keepalived/check/sockopt.c   |    285 +
 tools/keepalived/keepalived/core/Makefile.am  |     43 +
 tools/keepalived/keepalived/core/Makefile.in  |    620 +-
 tools/keepalived/keepalived/core/daemon.c     |     31 +-
 .../keepalived/keepalived/core/global_data.c  |    606 +-
 .../keepalived/core/global_parser.c           |   1935 +-
 .../keepalived/core/keepalived_netlink.c      |   2482 +
 tools/keepalived/keepalived/core/layer4.c     |    145 +-
 tools/keepalived/keepalived/core/libnl_link.c |    137 +
 tools/keepalived/keepalived/core/main.c       |   2010 +-
 tools/keepalived/keepalived/core/namespaces.c |    302 +
 tools/keepalived/keepalived/core/pidfile.c    |     99 +-
 tools/keepalived/keepalived/core/smtp.c       |    564 +-
 tools/keepalived/keepalived/core/snmp.c       |    385 +-
 .../keepalived/core/track_process.c           |   1193 +
 tools/keepalived/keepalived/dbus/.gitignore   |      1 +
 tools/keepalived/keepalived/dbus/Makefile.am  |     46 +
 .../dbus/org.keepalived.Vrrp1.Instance.xml    |     31 +
 .../org.keepalived.Vrrp1.Vrrp.xml_template    |     94 +
 .../keepalived/dbus/org.keepalived.Vrrp1.conf |     14 +
 tools/keepalived/keepalived/etc/.gitignore    |      1 +
 tools/keepalived/keepalived/etc/Makefile.am   |      9 +
 .../keepalived/etc/init.d/.gitignore          |      1 +
 .../keepalived/etc/init.d/Makefile.am         |     31 +
 .../init.d/{keepalived.init => keepalived}    |      0
 ...ived.suse.init => keepalived.suse.init.in} |     19 +-
 .../keepalived/keepalived/etc/init/.gitignore |      1 +
 .../keepalived/etc/init/Makefile.am           |     25 +
 .../keepalived/etc/init/keepalived.conf.in    |     11 +
 .../keepalived/etc/keepalived/keepalived.conf |     42 +-
 .../keepalived/etc/openrc/keepalived          |     11 +
 .../keepalived}                               |      0
 tools/keepalived/keepalived/include/bfd.h     |    244 +
 .../keepalived/include/bfd_daemon.h           |     42 +
 .../keepalived/keepalived/include/bfd_data.h  |     58 +
 .../keepalived/keepalived/include/bfd_event.h |     36 +
 .../keepalived/include/bfd_parser.h           |     32 +
 .../keepalived/include/bfd_scheduler.h        |     34 +
 .../keepalived/keepalived/include/check_api.h |     83 +-
 .../keepalived/keepalived/include/check_bfd.h |     62 +
 .../keepalived/include/check_daemon.h         |     19 +-
 .../keepalived/include/check_data.h           |    349 +-
 .../keepalived/keepalived/include/check_dns.h |     98 +
 .../keepalived/include/check_http.h           |    131 +-
 .../keepalived/include/check_misc.h           |     24 +-
 .../keepalived/include/check_parser.h         |     14 +-
 .../keepalived/include/check_print.h          |     29 +
 .../keepalived/include/check_smtp.h           |     44 +-
 .../keepalived/include/check_snmp.h           |    114 +-
 .../keepalived/keepalived/include/check_ssl.h |     19 +-
 .../keepalived/keepalived/include/check_tcp.h |     16 +-
 tools/keepalived/keepalived/include/common.h  |    152 +
 .../keepalived/include/conf/blklst.h          |     56 +
 .../keepalived/keepalived/include/conf/conn.h |     91 +
 .../keepalived/include/conf/inetaddr.h        |     68 +
 .../keepalived/include/conf/ip_tunnel.h       |    154 +
 .../keepalived/keepalived/include/conf/ipv6.h |     39 +
 .../keepalived/include/conf/laddr.h           |     66 +
 .../keepalived/include/conf/neigh.h           |     86 +
 .../keepalived/include/conf/netif.h           |    281 +
 .../keepalived/include/conf/route.h           |     79 +
 .../keepalived/include/conf/route6.h          |     56 +
 tools/keepalived/keepalived/include/conf/tc.h |    139 +
 .../keepalived/keepalived/include/conf/vlan.h |     46 +
 tools/keepalived/keepalived/include/daemon.h  |     13 +-
 tools/keepalived/keepalived/include/dp_vs.h   |     35 +
 tools/keepalived/keepalived/include/flow.h    |    122 +
 .../keepalived/include/global_data.h          |    252 +-
 .../keepalived/include/global_parser.h        |     15 +-
 tools/keepalived/keepalived/include/inet.h    |    338 +
 .../{libipvs-2.6 => include}/ip_vs.h          |    507 +-
 .../keepalived/include/ipvs/blklst.h          |     39 +
 .../keepalived/include/ipvs/conhash.h         |     28 +
 .../keepalived/keepalived/include/ipvs/conn.h |    273 +
 .../keepalived/keepalived/include/ipvs/dest.h |    210 +
 .../keepalived/keepalived/include/ipvs/ipvs.h |     58 +
 .../keepalived/include/ipvs/laddr.h           |     35 +
 .../keepalived/include/ipvs/nat64.h           |     49 +
 .../keepalived/include/ipvs/proto.h           |    108 +
 .../keepalived/include/ipvs/proto_icmp.h      |     24 +
 .../keepalived/include/ipvs/proto_tcp.h       |    109 +
 .../keepalived/include/ipvs/proto_udp.h       |     36 +
 tools/keepalived/keepalived/include/ipvs/rr.h |     28 +
 .../keepalived/include/ipvs/sched.h           |     59 +
 .../keepalived/include/ipvs/service.h         |    255 +
 .../keepalived/include/ipvs/stats.h           |    118 +
 .../keepalived/include/ipvs/synproxy.h        |    128 +
 .../keepalived/keepalived/include/ipvs/wlc.h  |     28 +
 .../keepalived/keepalived/include/ipvs/wrr.h  |     28 +
 .../keepalived/keepalived/include/ipvs/xmit.h |     63 +
 .../keepalived/include/ipvswrapper.h          |     88 +-
 .../keepalived/keepalived/include/ipwrapper.h |     36 +-
 .../keepalived/include/keepalived_netlink.h   |    152 +
 tools/keepalived/keepalived/include/layer4.h  |     75 +-
 .../{libipvs-2.6 => include}/libipvs.h        |     84 +-
 .../keepalived/include/libnl_link.h           |     92 +
 tools/keepalived/keepalived/include/main.h    |     89 +-
 tools/keepalived/keepalived/include/match.h   |    143 +
 .../keepalived/include/namespaces.h           |     32 +
 tools/keepalived/keepalived/include/pidfile.h |     45 +-
 tools/keepalived/keepalived/include/smtp.h    |     89 +-
 tools/keepalived/keepalived/include/snmp.h    |     51 +-
 tools/keepalived/keepalived/include/sockopt.h |     63 +
 .../keepalived/include/track_process.h        |     49 +
 tools/keepalived/keepalived/include/vrrp.h    |    405 +-
 .../keepalived/keepalived/include/vrrp_arp.h  |     58 +-
 .../keepalived/include/vrrp_daemon.h          |     23 +-
 .../keepalived/keepalived/include/vrrp_data.h |     96 +-
 .../keepalived/keepalived/include/vrrp_dbus.h |     43 +
 .../include/{vrrp_index.h => vrrp_firewall.h} |     38 +-
 tools/keepalived/keepalived/include/vrrp_if.h |    225 +-
 .../keepalived/include/vrrp_if_config.h       |     43 +
 .../include/vrrp_ip_rule_route_parser.h       |     44 +
 .../keepalived/include/vrrp_ipaddress.h       |     88 +-
 .../keepalived/include/vrrp_iproute.h         |    251 +-
 .../keepalived/include/vrrp_iprule.h          |    129 +
 .../keepalived/include/vrrp_ipsecah.h         |     28 +-
 .../keepalived/include/vrrp_ipset.h           |     48 +
 .../keepalived/include/vrrp_iptables.h        |     58 +
 .../keepalived/include/vrrp_iptables_calls.h  |     52 +
 .../keepalived/include/vrrp_iptables_cmd.h    |     40 +
 .../keepalived/include/vrrp_iptables_lib.h    |     49 +
 .../keepalived/keepalived/include/vrrp_json.h |     34 +
 .../keepalived/include/vrrp_ndisc.h           |     47 +-
 .../keepalived/include/vrrp_netlink.h         |     69 -
 .../keepalived/include/vrrp_nftables.h        |     52 +
 .../keepalived/include/vrrp_notify.h          |      9 +-
 .../keepalived/include/vrrp_parser.h          |     14 +-
 .../keepalived/include/vrrp_print.h           |     31 +
 .../keepalived/include/vrrp_scheduler.h       |     61 +-
 .../keepalived/keepalived/include/vrrp_snmp.h |    143 +-
 .../keepalived/keepalived/include/vrrp_sock.h |     53 +
 .../keepalived/include/vrrp_static_track.h    |     47 +
 .../keepalived/keepalived/include/vrrp_sync.h |     23 +-
 .../keepalived/include/vrrp_track.h           |    199 +-
 .../keepalived/keepalived/include/vrrp_vmac.h |     45 +-
 .../keepalived/keepalived.service.in          |     15 +
 .../keepalived/libipvs-2.4/Makefile.in        |     18 -
 .../keepalived/libipvs-2.4/libipvs.c          |    230 -
 .../keepalived/libipvs-2.4/libipvs.h          |     63 -
 .../keepalived/libipvs-2.6/Makefile.in        |     28 -
 .../keepalived/libipvs-2.6/ip_vs_nl_policy.c  |     79 -
 tools/keepalived/keepalived/main.c            |     30 +
 tools/keepalived/keepalived/vrrp/Makefile.am  |     87 +
 tools/keepalived/keepalived/vrrp/Makefile.in  |    708 +-
 tools/keepalived/keepalived/vrrp/vrrp.c       |   4544 +-
 tools/keepalived/keepalived/vrrp/vrrp_arp.c   |     22 +-
 .../keepalived/keepalived/vrrp/vrrp_daemon.c  |   1001 +-
 tools/keepalived/keepalived/vrrp/vrrp_data.c  |   1154 +-
 tools/keepalived/keepalived/vrrp/vrrp_dbus.c  |   1014 +
 .../keepalived/vrrp/vrrp_firewall.c           |    118 +
 tools/keepalived/keepalived/vrrp/vrrp_if.c    |   1388 +-
 .../keepalived/vrrp/vrrp_if_config.c          |    562 +
 tools/keepalived/keepalived/vrrp/vrrp_index.c |    127 -
 .../vrrp/vrrp_ip_rule_route_parser.c          |    308 +
 .../keepalived/vrrp/vrrp_ipaddress.c          |    691 +-
 .../keepalived/keepalived/vrrp/vrrp_iproute.c |   1644 +-
 .../keepalived/keepalived/vrrp/vrrp_iprule.c  |    928 +
 .../keepalived/keepalived/vrrp/vrrp_ipsecah.c |     40 +-
 tools/keepalived/keepalived/vrrp/vrrp_ipset.c |    458 +
 .../keepalived/vrrp/vrrp_iptables.c           |    350 +
 .../keepalived/vrrp/vrrp_iptables_calls.c     |    882 +
 .../keepalived/vrrp/vrrp_iptables_cmd.c       |    351 +
 .../keepalived/vrrp/vrrp_iptables_lib.c       |    535 +
 tools/keepalived/keepalived/vrrp/vrrp_json.c  |    295 +
 tools/keepalived/keepalived/vrrp/vrrp_ndisc.c |    195 +-
 .../keepalived/keepalived/vrrp/vrrp_netlink.c |    774 -
 .../keepalived/vrrp/vrrp_nftables.c           |   1997 +
 .../keepalived/keepalived/vrrp/vrrp_notify.c  |    370 +-
 .../keepalived/keepalived/vrrp/vrrp_parser.c  |   2066 +-
 tools/keepalived/keepalived/vrrp/vrrp_print.c |    100 +
 .../keepalived/vrrp/vrrp_scheduler.c          |   1607 +-
 tools/keepalived/keepalived/vrrp/vrrp_snmp.c  |   4852 +-
 .../keepalived/vrrp/vrrp_static_track.c       |    219 +
 tools/keepalived/keepalived/vrrp/vrrp_sync.c  |    257 +-
 tools/keepalived/keepalived/vrrp/vrrp_track.c |   1190 +-
 tools/keepalived/keepalived/vrrp/vrrp_vmac.c  |    733 +-
 tools/keepalived/kpalive_cluster_test.conf    | 104953 +++++++++++++++
 tools/keepalived/lib/.gitignore               |      4 +
 tools/keepalived/lib/Makefile.am              |    100 +
 tools/keepalived/lib/Makefile.in              |    708 +-
 tools/keepalived/lib/assert.c                 |     49 +
 tools/keepalived/lib/assert_debug.h           |     33 +
 tools/keepalived/lib/bitops.h                 |     90 +
 tools/keepalived/lib/buffer.c                 |    428 -
 tools/keepalived/lib/buffer.h                 |     84 -
 tools/keepalived/lib/command.c                |   2681 -
 tools/keepalived/lib/command.h                |    294 -
 tools/keepalived/lib/config.h.in              |   1009 +-
 tools/keepalived/lib/config_warnings.h.in     |     12 +
 tools/keepalived/lib/container.h              |     52 +
 tools/keepalived/lib/html.c                   |     77 +-
 tools/keepalived/lib/html.h                   |     11 +-
 tools/keepalived/lib/json_writer.c            |    304 +
 tools/keepalived/lib/json_writer.h            |     75 +
 tools/keepalived/lib/keepalived_magic.h       |     70 +
 tools/keepalived/lib/list.c                   |    287 +-
 tools/keepalived/lib/list.h                   |     93 +-
 tools/keepalived/lib/list_head.c              |     21 +-
 tools/keepalived/lib/list_head.h              |     91 +-
 tools/keepalived/lib/logger.c                 |    216 +-
 tools/keepalived/lib/logger.h                 |     39 +-
 tools/keepalived/lib/memory.c                 |    863 +-
 tools/keepalived/lib/memory.h                 |     81 +-
 tools/keepalived/lib/notify.c                 |   1205 +-
 tools/keepalived/lib/notify.h                 |     93 +-
 tools/keepalived/lib/old_socket.c             |     53 +
 tools/keepalived/lib/old_socket.h             |     46 +
 tools/keepalived/lib/parser.c                 |   2173 +-
 tools/keepalived/lib/parser.h                 |    130 +-
 tools/keepalived/lib/process.c                |    297 +
 tools/keepalived/lib/process.h                |     53 +
 tools/keepalived/lib/rbtree.c                 |    678 +
 tools/keepalived/lib/rbtree.h                 |    400 +
 tools/keepalived/lib/rbtree_augmented.h       |    294 +
 tools/keepalived/lib/rttables.c               |    436 +
 tools/keepalived/lib/rttables.h               |     51 +
 tools/keepalived/lib/scheduler.c              |   2050 +-
 tools/keepalived/lib/scheduler.h              |    286 +-
 tools/keepalived/lib/signals.c                |    621 +-
 tools/keepalived/lib/signals.h                |     48 +-
 tools/keepalived/lib/timer.c                  |    267 +-
 tools/keepalived/lib/timer.h                  |    112 +-
 tools/keepalived/lib/utils.c                  |   1090 +-
 tools/keepalived/lib/utils.h                  |    268 +-
 tools/keepalived/lib/vector.c                 |    131 +-
 tools/keepalived/lib/vector.h                 |     62 +-
 tools/keepalived/lib/vty.c                    |   2163 -
 tools/keepalived/lib/vty.h                    |    196 -
 tools/keepalived/lib/warnings.h               |    110 +
 .../keepalived/snap-tools/keepalived-wrapper  |     28 +
 tools/keepalived/snap/hooks/install           |     15 +
 tools/keepalived/snap/hooks/post-refresh      |      1 +
 tools/keepalived/snap/snapcraft.yaml          |    444 +
 tools/keepalived/test/.gitignore              |      1 +
 tools/keepalived/test/ci/build.sh             |     10 +
 tools/keepalived/test/ci/setup.sh             |     22 +
 tools/keepalived/test/genhash-test.sh         |     62 +
 tools/keepalived/test/mk_if                   |     74 +
 tools/keepalived/test/mk_lots                 |     59 +
 tools/keepalived/test/netns-test.sh           |    160 +
 tools/keepalived/test/tcp_server.c            |    282 +
 tools/keepalived/tools/json_tracking/isolate  |    172 +
 .../tools/json_tracking/make_conf.py          |     62 +
 .../json_tracking/template_vrrp_instance      |     55 +
 .../keepalived/tools/json_tracking/vrrp_recap |     66 +
 381 files changed, 256783 insertions(+), 26991 deletions(-)
 create mode 100644 tools/keepalived/.github/ISSUE_TEMPLATE/bug_report.md
 create mode 100644 tools/keepalived/.github/ISSUE_TEMPLATE/feature_request.md
 create mode 100644 tools/keepalived/.github/ISSUE_TEMPLATE/support-help-request-template.md
 create mode 100644 tools/keepalived/.github/ISSUE_TEMPLATE/use-for-any-other-issue.md
 create mode 100644 tools/keepalived/.gitignore
 create mode 100644 tools/keepalived/.indent.pro
 create mode 100644 tools/keepalived/.travis.yml
 create mode 100644 tools/keepalived/Dockerfile
 create mode 100644 tools/keepalived/Makefile.am
 delete mode 100644 tools/keepalived/README
 create mode 100644 tools/keepalived/README.md
 delete mode 100644 tools/keepalived/VERSION
 create mode 100644 tools/keepalived/bin_install/Makefile.am
 create mode 100755 tools/keepalived/build_setup
 create mode 100644 tools/keepalived/config.json
 create mode 100644 tools/keepalived/configure.ac
 delete mode 100644 tools/keepalived/configure.in
 create mode 100644 tools/keepalived/doc/.gitignore
 delete mode 100644 tools/keepalived/doc/KEEPALIVED-MIB
 create mode 100644 tools/keepalived/doc/KEEPALIVED-MIB.txt
 create mode 100644 tools/keepalived/doc/Makefile.am
 create mode 100644 tools/keepalived/doc/README.sphinx
 create mode 100644 tools/keepalived/doc/VRRP-MIB.txt
 create mode 100644 tools/keepalived/doc/VRRPv3-MIB.txt
 create mode 100644 tools/keepalived/doc/man/man8/.gitignore
 create mode 100644 tools/keepalived/doc/man/man8/Makefile.am
 delete mode 100644 tools/keepalived/doc/man/man8/keepalived.8
 create mode 100644 tools/keepalived/doc/man/man8/keepalived.8.in
 create mode 100644 tools/keepalived/doc/samples/keepalived.conf.conditional_conf
 create mode 100644 tools/keepalived/doc/samples/keepalived.conf.vrrp.rules
 create mode 100755 tools/keepalived/doc/samples/sample_notify_fifo.sh
 rename tools/keepalived/{keepalived/bin/.gitkeep => doc/source/_static/.gitignore} (100%)
 create mode 100644 tools/keepalived/doc/source/_static/.gitkeep
 create mode 100644 tools/keepalived/doc/source/_templates/.gitignore
 create mode 100644 tools/keepalived/doc/source/_templates/.gitkeep
 create mode 100644 tools/keepalived/doc/source/about.rst
 create mode 100644 tools/keepalived/doc/source/case_study_failover.rst
 create mode 100644 tools/keepalived/doc/source/case_study_healthcheck.rst
 create mode 100644 tools/keepalived/doc/source/case_study_mixing.rst
 create mode 100644 tools/keepalived/doc/source/conf.py
 create mode 100644 tools/keepalived/doc/source/configuration_synopsis.rst
 create mode 100644 tools/keepalived/doc/source/images/software_design.png
 create mode 100644 tools/keepalived/doc/source/index.rst
 create mode 100644 tools/keepalived/doc/source/installing_keepalived.rst
 create mode 100644 tools/keepalived/doc/source/introduction.rst
 create mode 100644 tools/keepalived/doc/source/license.rst
 create mode 100644 tools/keepalived/doc/source/load_balancing_techniques.rst
 create mode 100644 tools/keepalived/doc/source/programs_synopsis.rst
 create mode 100644 tools/keepalived/doc/source/protocol_support.rst
 create mode 100644 tools/keepalived/doc/source/scheduling_algorithms.rst
 create mode 100644 tools/keepalived/doc/source/snmp_support.rst
 create mode 100644 tools/keepalived/doc/source/software_design.rst
 create mode 100644 tools/keepalived/doc/source/terminology.rst
 create mode 100644 tools/keepalived/doc/source/todo.rst
 create mode 100644 tools/keepalived/doc/source/tools/pydoctheme/static/pydoctheme.css
 create mode 100644 tools/keepalived/doc/source/tools/pydoctheme/theme.conf
 create mode 100644 tools/keepalived/docker/keepalived.conf
 create mode 100644 tools/keepalived/genhash/.gitignore
 create mode 100644 tools/keepalived/genhash/Makefile.am
 rename tools/keepalived/genhash/{ => include}/hash.h (69%)
 rename tools/keepalived/genhash/{ => include}/http.h (54%)
 rename tools/keepalived/genhash/{ => include}/layer4.h (72%)
 rename tools/keepalived/genhash/{ => include}/main.h (66%)
 rename tools/keepalived/genhash/{ => include}/sock.h (79%)
 rename tools/keepalived/genhash/{ => include}/ssl.h (77%)
 create mode 100755 tools/keepalived/goodies/arpreset.pl
 create mode 100755 tools/keepalived/goodies/check_conditional_tests
 mode change 100755 => 120000 tools/keepalived/install-sh
 create mode 100644 tools/keepalived/keepalived.conf
 create mode 100644 tools/keepalived/keepalived/.gitignore
 create mode 100644 tools/keepalived/keepalived/Makefile.am
 create mode 100644 tools/keepalived/keepalived/bfd/Makefile.am
 create mode 100644 tools/keepalived/keepalived/bfd/bfd.c
 create mode 100644 tools/keepalived/keepalived/bfd/bfd_daemon.c
 create mode 100644 tools/keepalived/keepalived/bfd/bfd_data.c
 create mode 100644 tools/keepalived/keepalived/bfd/bfd_event.c
 create mode 100644 tools/keepalived/keepalived/bfd/bfd_parser.c
 create mode 100644 tools/keepalived/keepalived/bfd/bfd_scheduler.c
 create mode 100644 tools/keepalived/keepalived/check/Makefile.am
 create mode 100644 tools/keepalived/keepalived/check/check_bfd.c
 create mode 100644 tools/keepalived/keepalived/check/check_dns.c
 create mode 100644 tools/keepalived/keepalived/check/check_print.c
 mode change 100755 => 100644 tools/keepalived/keepalived/check/ipvswrapper.c
 create mode 100644 tools/keepalived/keepalived/check/ipwrapper.c.TODO
 rename tools/keepalived/keepalived/{libipvs-2.6 => check}/libipvs.c (50%)
 create mode 100644 tools/keepalived/keepalived/check/sockopt.c
 create mode 100644 tools/keepalived/keepalived/core/Makefile.am
 create mode 100644 tools/keepalived/keepalived/core/keepalived_netlink.c
 create mode 100644 tools/keepalived/keepalived/core/libnl_link.c
 create mode 100644 tools/keepalived/keepalived/core/namespaces.c
 create mode 100644 tools/keepalived/keepalived/core/track_process.c
 create mode 100644 tools/keepalived/keepalived/dbus/.gitignore
 create mode 100644 tools/keepalived/keepalived/dbus/Makefile.am
 create mode 100644 tools/keepalived/keepalived/dbus/org.keepalived.Vrrp1.Instance.xml
 create mode 100644 tools/keepalived/keepalived/dbus/org.keepalived.Vrrp1.Vrrp.xml_template
 create mode 100644 tools/keepalived/keepalived/dbus/org.keepalived.Vrrp1.conf
 create mode 100644 tools/keepalived/keepalived/etc/.gitignore
 create mode 100644 tools/keepalived/keepalived/etc/Makefile.am
 create mode 100644 tools/keepalived/keepalived/etc/init.d/.gitignore
 create mode 100644 tools/keepalived/keepalived/etc/init.d/Makefile.am
 rename tools/keepalived/keepalived/etc/init.d/{keepalived.init => keepalived} (100%)
 rename tools/keepalived/keepalived/etc/init.d/{keepalived.suse.init => keepalived.suse.init.in} (91%)
 create mode 100644 tools/keepalived/keepalived/etc/init/.gitignore
 create mode 100644 tools/keepalived/keepalived/etc/init/Makefile.am
 create mode 100644 tools/keepalived/keepalived/etc/init/keepalived.conf.in
 create mode 100644 tools/keepalived/keepalived/etc/openrc/keepalived
 rename tools/keepalived/keepalived/etc/{init.d/keepalived.sysconfig => sysconfig/keepalived} (100%)
 create mode 100644 tools/keepalived/keepalived/include/bfd.h
 create mode 100644 tools/keepalived/keepalived/include/bfd_daemon.h
 create mode 100644 tools/keepalived/keepalived/include/bfd_data.h
 create mode 100644 tools/keepalived/keepalived/include/bfd_event.h
 create mode 100644 tools/keepalived/keepalived/include/bfd_parser.h
 create mode 100644 tools/keepalived/keepalived/include/bfd_scheduler.h
 create mode 100644 tools/keepalived/keepalived/include/check_bfd.h
 create mode 100644 tools/keepalived/keepalived/include/check_dns.h
 create mode 100644 tools/keepalived/keepalived/include/check_print.h
 create mode 100644 tools/keepalived/keepalived/include/common.h
 create mode 100644 tools/keepalived/keepalived/include/conf/blklst.h
 create mode 100644 tools/keepalived/keepalived/include/conf/conn.h
 create mode 100644 tools/keepalived/keepalived/include/conf/inetaddr.h
 create mode 100644 tools/keepalived/keepalived/include/conf/ip_tunnel.h
 create mode 100644 tools/keepalived/keepalived/include/conf/ipv6.h
 create mode 100644 tools/keepalived/keepalived/include/conf/laddr.h
 create mode 100644 tools/keepalived/keepalived/include/conf/neigh.h
 create mode 100644 tools/keepalived/keepalived/include/conf/netif.h
 create mode 100644 tools/keepalived/keepalived/include/conf/route.h
 create mode 100644 tools/keepalived/keepalived/include/conf/route6.h
 create mode 100644 tools/keepalived/keepalived/include/conf/tc.h
 create mode 100644 tools/keepalived/keepalived/include/conf/vlan.h
 create mode 100644 tools/keepalived/keepalived/include/dp_vs.h
 create mode 100644 tools/keepalived/keepalived/include/flow.h
 create mode 100644 tools/keepalived/keepalived/include/inet.h
 rename tools/keepalived/keepalived/{libipvs-2.6 => include}/ip_vs.h (64%)
 create mode 100644 tools/keepalived/keepalived/include/ipvs/blklst.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/conhash.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/conn.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/dest.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/ipvs.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/laddr.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/nat64.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/proto.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/proto_icmp.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/proto_tcp.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/proto_udp.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/rr.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/sched.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/service.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/stats.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/synproxy.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/wlc.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/wrr.h
 create mode 100644 tools/keepalived/keepalived/include/ipvs/xmit.h
 create mode 100644 tools/keepalived/keepalived/include/keepalived_netlink.h
 rename tools/keepalived/keepalived/{libipvs-2.6 => include}/libipvs.h (80%)
 create mode 100644 tools/keepalived/keepalived/include/libnl_link.h
 create mode 100644 tools/keepalived/keepalived/include/match.h
 create mode 100644 tools/keepalived/keepalived/include/namespaces.h
 create mode 100644 tools/keepalived/keepalived/include/sockopt.h
 create mode 100644 tools/keepalived/keepalived/include/track_process.h
 create mode 100644 tools/keepalived/keepalived/include/vrrp_dbus.h
 rename tools/keepalived/keepalived/include/{vrrp_index.h => vrrp_firewall.h} (61%)
 create mode 100644 tools/keepalived/keepalived/include/vrrp_if_config.h
 create mode 100644 tools/keepalived/keepalived/include/vrrp_ip_rule_route_parser.h
 create mode 100644 tools/keepalived/keepalived/include/vrrp_iprule.h
 create mode 100644 tools/keepalived/keepalived/include/vrrp_ipset.h
 create mode 100644 tools/keepalived/keepalived/include/vrrp_iptables.h
 create mode 100644 tools/keepalived/keepalived/include/vrrp_iptables_calls.h
 create mode 100644 tools/keepalived/keepalived/include/vrrp_iptables_cmd.h
 create mode 100644 tools/keepalived/keepalived/include/vrrp_iptables_lib.h
 create mode 100644 tools/keepalived/keepalived/include/vrrp_json.h
 delete mode 100644 tools/keepalived/keepalived/include/vrrp_netlink.h
 create mode 100644 tools/keepalived/keepalived/include/vrrp_nftables.h
 create mode 100644 tools/keepalived/keepalived/include/vrrp_print.h
 create mode 100644 tools/keepalived/keepalived/include/vrrp_sock.h
 create mode 100644 tools/keepalived/keepalived/include/vrrp_static_track.h
 create mode 100644 tools/keepalived/keepalived/keepalived.service.in
 delete mode 100644 tools/keepalived/keepalived/libipvs-2.4/Makefile.in
 delete mode 100644 tools/keepalived/keepalived/libipvs-2.4/libipvs.c
 delete mode 100644 tools/keepalived/keepalived/libipvs-2.4/libipvs.h
 delete mode 100644 tools/keepalived/keepalived/libipvs-2.6/Makefile.in
 delete mode 100644 tools/keepalived/keepalived/libipvs-2.6/ip_vs_nl_policy.c
 create mode 100644 tools/keepalived/keepalived/main.c
 create mode 100644 tools/keepalived/keepalived/vrrp/Makefile.am
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_dbus.c
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_firewall.c
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_if_config.c
 delete mode 100644 tools/keepalived/keepalived/vrrp/vrrp_index.c
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_ip_rule_route_parser.c
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_iprule.c
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_ipset.c
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_iptables.c
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_iptables_calls.c
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_iptables_cmd.c
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_iptables_lib.c
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_json.c
 delete mode 100644 tools/keepalived/keepalived/vrrp/vrrp_netlink.c
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_nftables.c
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_print.c
 create mode 100644 tools/keepalived/keepalived/vrrp/vrrp_static_track.c
 create mode 100644 tools/keepalived/kpalive_cluster_test.conf
 create mode 100644 tools/keepalived/lib/.gitignore
 create mode 100644 tools/keepalived/lib/Makefile.am
 create mode 100644 tools/keepalived/lib/assert.c
 create mode 100644 tools/keepalived/lib/assert_debug.h
 create mode 100644 tools/keepalived/lib/bitops.h
 delete mode 100644 tools/keepalived/lib/buffer.c
 delete mode 100644 tools/keepalived/lib/buffer.h
 delete mode 100644 tools/keepalived/lib/command.c
 delete mode 100644 tools/keepalived/lib/command.h
 create mode 100644 tools/keepalived/lib/config_warnings.h.in
 create mode 100644 tools/keepalived/lib/container.h
 create mode 100644 tools/keepalived/lib/json_writer.c
 create mode 100644 tools/keepalived/lib/json_writer.h
 create mode 100644 tools/keepalived/lib/keepalived_magic.h
 create mode 100644 tools/keepalived/lib/old_socket.c
 create mode 100644 tools/keepalived/lib/old_socket.h
 create mode 100644 tools/keepalived/lib/process.c
 create mode 100644 tools/keepalived/lib/process.h
 create mode 100644 tools/keepalived/lib/rbtree.c
 create mode 100644 tools/keepalived/lib/rbtree.h
 create mode 100644 tools/keepalived/lib/rbtree_augmented.h
 create mode 100644 tools/keepalived/lib/rttables.c
 create mode 100644 tools/keepalived/lib/rttables.h
 delete mode 100644 tools/keepalived/lib/vty.c
 delete mode 100644 tools/keepalived/lib/vty.h
 create mode 100644 tools/keepalived/lib/warnings.h
 create mode 100755 tools/keepalived/snap-tools/keepalived-wrapper
 create mode 100755 tools/keepalived/snap/hooks/install
 create mode 120000 tools/keepalived/snap/hooks/post-refresh
 create mode 100644 tools/keepalived/snap/snapcraft.yaml
 create mode 100644 tools/keepalived/test/.gitignore
 create mode 100755 tools/keepalived/test/ci/build.sh
 create mode 100755 tools/keepalived/test/ci/setup.sh
 create mode 100755 tools/keepalived/test/genhash-test.sh
 create mode 100755 tools/keepalived/test/mk_if
 create mode 100755 tools/keepalived/test/mk_lots
 create mode 100755 tools/keepalived/test/netns-test.sh
 create mode 100644 tools/keepalived/test/tcp_server.c
 create mode 100755 tools/keepalived/tools/json_tracking/isolate
 create mode 100755 tools/keepalived/tools/json_tracking/make_conf.py
 create mode 100644 tools/keepalived/tools/json_tracking/template_vrrp_instance
 create mode 100755 tools/keepalived/tools/json_tracking/vrrp_recap

diff --git a/tools/keepalived/.github/ISSUE_TEMPLATE/bug_report.md b/tools/keepalived/.github/ISSUE_TEMPLATE/bug_report.md
new file mode 100644
index 000000000..53735c6cd
--- /dev/null
+++ b/tools/keepalived/.github/ISSUE_TEMPLATE/bug_report.md
@@ -0,0 +1,43 @@
+---
+name: Bug report
+about: Create a report to help us improve keepalived
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Any steps necessary to reproduce the behaviour:
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Keepalived version**
+Output of `keepalived -v`
+
+**Distro (please complete the following information):**
+ - Name [e.g. Fedora, Ubuntu]
+ - Version [e.g. 29]
+ - Architecture [e.g. x86_64]
+
+**Details of any containerisation or hosted service (e.g. AWS)**
+If keepalived is being run in a container or on a hosted service, provide full details
+
+**Configuration file:**
+A full copy of the configuration file, obfuscated if necessary to protect passwords and IP addresses
+
+**Notify and track scripts**
+If any notify or track scripts are in use, please provide copies of them
+
+**System Log entries**
+Full keepalived system log entries from when keepalived started
+
+**Did keepalived coredump?**
+If so, can you please provide a stacktrace from the coredump, using gdb.
+
+**Additional context**
+Add any other context about the problem here.
diff --git a/tools/keepalived/.github/ISSUE_TEMPLATE/feature_request.md b/tools/keepalived/.github/ISSUE_TEMPLATE/feature_request.md
new file mode 100644
index 000000000..2e71bc0c8
--- /dev/null
+++ b/tools/keepalived/.github/ISSUE_TEMPLATE/feature_request.md
@@ -0,0 +1,26 @@
+---
+name: Feature request
+about: Suggest an enhancement for keepalived
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Is your feature request to resolve a problem or provide enhanced functionality? Please describe.**
+A clear and concise description of what the problem is.
+
+**Describe the solution you would like**
+A clear and concise description of what you would like to happen.
+
+**Describe alternatives you have considered**
+A clear and concise description of any alternative solutions or features you have considered.
+
+**Would the feature request be of benefit only to you, or is it more generally applicable?**
+If it would benefit others please describe how.
+
+**Keepalived version**
+Output of `keepalived -v` (the feature may already be supported in a later version).
+
+**Additional context**
+Add any other context about the feature request here.
diff --git a/tools/keepalived/.github/ISSUE_TEMPLATE/support-help-request-template.md b/tools/keepalived/.github/ISSUE_TEMPLATE/support-help-request-template.md
new file mode 100644
index 000000000..915bd755e
--- /dev/null
+++ b/tools/keepalived/.github/ISSUE_TEMPLATE/support-help-request-template.md
@@ -0,0 +1,42 @@
+---
+name: Support/help request template
+about: Title of what you need help/support for
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+_Support requests should be sent to_ keepalived-devel@lists.sourceforge.net
+
+**Describe why you are unable to send the support request to the above email list**
+Understanding why you cannot use the email list should help us improve it.
+
+**Describe what you need help/support for**
+A clear and concise description of what you need help with.
+
+**Details of what you would like to do with keepalived**
+Describe in details what you would like to achieve with keepalived
+
+**Keepalived version**
+Output of `keepalived -v` (a later version of keepalived might be needed).
+
+**Distro (please complete the following information):**
+ - Name [e.g. Fedora, Ubuntu]
+ - Version [e.g. 29]
+ - Architecture [e.g. x86_64]
+
+**Details of any containerisation or hosted service (e.g. AWS)**
+If keepalived is being run in a container or on a hosted service, provide full details 
+
+**Configuration file:**
+Full copy of your configuration file, obfuscated if necessary to protect passwords and IP addresses
+
+**Notify and track scripts**
+If any notify or track scripts are in use, please provide copies of them
+
+**System Log entries**
+Full keepalived system log entries from when keepalived started, if applicable
+
+**Additional context**
+Add any other context about the problem here.
diff --git a/tools/keepalived/.github/ISSUE_TEMPLATE/use-for-any-other-issue.md b/tools/keepalived/.github/ISSUE_TEMPLATE/use-for-any-other-issue.md
new file mode 100644
index 000000000..93cd8f82a
--- /dev/null
+++ b/tools/keepalived/.github/ISSUE_TEMPLATE/use-for-any-other-issue.md
@@ -0,0 +1,43 @@
+---
+name: Use this for any other issue
+about: Please use this rather than 'Open a regular issue' below
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Describe the issue**
+A clear and concise description of what the issue is.
+
+**To Reproduce**
+Any steps necessary to reproduce the behaviour:
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Keepalived version**
+Output of `keepalived -v`
+
+**Distro (please complete the following information):**
+ - Name [e.g. Fedora, Ubuntu]
+ - Version [e.g. 29]
+ - Architecture [e.g. x86_64]
+
+**Details of any containerisation or hosted service (e.g. AWS)**
+If keepalived is being run in a container or on a hosted service, provide full details
+
+**Configuration file:**
+A full copy of the configuration file, obfuscated if necessary to protect passwords and IP addresses
+
+**Notify and track scripts**
+If any notify or track scripts are in use, please provide copies of them
+
+**System Log entries**
+Full keepalived system log entries from when keepalived started
+
+**Did keepalived coredump?**
+If so, can you please provide a stacktrace from the coredump, using gdb.
+
+**Additional context**
+Add any other context about the problem here.
diff --git a/tools/keepalived/.gitignore b/tools/keepalived/.gitignore
new file mode 100644
index 000000000..e2a4ac540
--- /dev/null
+++ b/tools/keepalived/.gitignore
@@ -0,0 +1,48 @@
+*.orig
+*.rej
+*.o
+*.a
+README
+bin/
+keepalived.spec
+*~
+*.swp
+.dir-locals.el
+keepalived-*.tar.gz
+
+
+# http://www.gnu.org/software/automake
+Makefile
+Makefile.in
+
+# http://www.gnu.org/software/autoconf
+/ar-lib
+/autom4te.cache
+/autoscan.log
+/autoscan-*.log
+/aclocal.m4
+/compile
+/config.cache
+/config.h.in
+/config.log
+/config.status
+/configure.scan
+/depcomp
+/install-sh
+/missing
+stamp-h?
+
+.deps/
+
+/tmp/
+/devel/
+
+# To be able to build without automake/autoconf comment out the following
+lib/config.h.in
+/configure
+
+# For snap builds
+parts/
+prime/
+stage/
+keepalived*.snap
diff --git a/tools/keepalived/.indent.pro b/tools/keepalived/.indent.pro
new file mode 100644
index 000000000..9864f418c
--- /dev/null
+++ b/tools/keepalived/.indent.pro
@@ -0,0 +1,8 @@
+-kr
+-i8
+-ts8
+-sob
+-l80
+-ss
+-bs
+-psl
diff --git a/tools/keepalived/.travis.yml b/tools/keepalived/.travis.yml
new file mode 100644
index 000000000..df0edd9a8
--- /dev/null
+++ b/tools/keepalived/.travis.yml
@@ -0,0 +1,47 @@
+git:
+  depth: 5
+
+language: c
+compiler: gcc
+os: linux
+dist: xenial
+
+addons:
+  apt:
+    packages:
+    - libsnmp-dev
+    - iptables-dev
+    - libipset-dev
+    - libnfnetlink-dev
+    - libnl-3-dev
+    - libnl-genl-3-dev
+    - libnl-route-3-dev
+    - libssl-dev
+    - libmagic-dev
+    - libglib2.0-dev
+    - libjson-c-dev
+    - libpcre2-dev
+    - libmnl-dev
+    - libnftnl-dev
+    update: true
+
+install:
+  - autoreconf -W portability -visf
+
+before_script:
+  - ./test/ci/setup.sh
+
+script:
+  - ./test/ci/build.sh
+
+env:
+  matrix:
+    - KEEPALIVED_CONFIG_ARGS=""
+    - KEEPALIVED_CONFIG_ARGS="--enable-snmp --enable-snmp-rfc --enable-json --enable-dbus --disable-checksum-compat --enable-bfd --enable-asserts"
+    - KEEPALIVED_CONFIG_ARGS="--enable-sha1 --enable-dbus --enable-dbus-create-instance --disable-dynamic-linking --disable-fwmark --disable-lvs-syncd --enable-snmp-vrrp --enable-timer-check --disable-iptables --disable-nftables --disable-track-process"
+    - KEEPALIVED_CONFIG_ARGS="--enable-dynamic-linking --disable-vrrp-auth --enable-snmp-rfc --disable-snmp-reply-v3-for-v2 --disable-nftables"
+    - KEEPALIVED_CONFIG_ARGS="--disable-libiptc --disable-libnl --enable-snmp-checker"
+    - KEEPALIVED_CONFIG_ARGS="--enable-conversion-checks --enable-stacktrace --enable-mem-check --enable-mem-check-log --disable-lvs-64bit-stats --enable-snmp-rfcv2"
+    - KEEPALIVED_CONFIG_ARGS="--disable-lvs --enable-snmp-vrrp --enable-snmp-rfc --enable-json --enable-sha1 --enable-dbus --disable-routes --enable-bfd --disable-iptables --disable-linkbeat"
+    - KEEPALIVED_CONFIG_ARGS="--disable-vrrp --enable-snmp-checker --enable-sha1 --enable-regex"
+    - KEEPALIVED_CONFIG_ARGS="--disable-hardening --enable-dump-threads --enable-epoll-debug --enable-snmp-rfcv3 --enable-log-file --disable-libipset"
diff --git a/tools/keepalived/CONTRIBUTORS b/tools/keepalived/CONTRIBUTORS
index de4fdcc11..0dff03f2b 100644
--- a/tools/keepalived/CONTRIBUTORS
+++ b/tools/keepalived/CONTRIBUTORS
@@ -22,7 +22,7 @@ Kevin Lindsay, <kevinl@netnation.com> :
 	o Redesigned signal handling.
 
 Nick Couchman, <nick.couchman at seakr.com> :
-        o Patch for u_threshold and l_threshold support.
+	o Patch for u_threshold and l_threshold support.
 
 Willy Tarreau, <w at 1wt.eu> :
 	o Extended VRRP framework to support floating
diff --git a/tools/keepalived/ChangeLog b/tools/keepalived/ChangeLog
index 83537e856..dc3022103 100644
--- a/tools/keepalived/ChangeLog
+++ b/tools/keepalived/ChangeLog
@@ -1,3 +1,6209 @@
+2019-10-19 Alexandre Cassen <acassen@keepalived.org>
+	* keepalived-2.0.19
+	* Allow persistence, scheduler and flags of VS to be changed on reload
+	  A virtual server is identified by its IP address, protocol and port,
+	  or the firewall mark and address family, and not by the persistence
+	  settings or scheduler and scheduler flags. When comparing virtual
+	  servers on a reload, don't check persistence and scheduler settings
+	  match, but update them if necessary.
+	* Ignore default RS settings when comparing VSs after reload
+	  Various default settings for real servers belonging to a virtual
+	  server can be configured against a virtual server. These settings
+	  should be ignored when comparing virtual servers following a
+	  reload. Any differences in real server settings will be handled
+	  separately.
+	* Clarify what IPVS persistence engines are supported in man page
+	* Allow RS forwarding method to be changed on reload
+	  A real server is identified by its IP address and port, and not by
+	  the forwarding method.  When comparing real servers on a reload, don't
+	  check the forwarding method, but update it if necessary.
+	* Check address family when comparing fwmark VSs on reload
+	* Update test tcp server
+	* Allow more than one BFD instance with a neighbour
+	  This commit now checks both the neighbour address and the source/local
+	  address when finding a BFD instance. This means that more than one BFD
+	  instance can be set up with the same neighbour, so long as a different
+	  local address is used.
+	* Make PID files group and world readable
+	  Issue #1378 identified that PID files were created without group
+	  and work read in the file permission bits being set, due to the umask.
+	  This was causing a problem, since a non-root user was needing to read
+	  the PID file.
+	  This commit now forces the file permissions of PID files to be:
+	  owner=rw, group=r, other=r.
+	* Fix erroneous error message when creating IPv4 ipvlan interfaces
+	  The code was checking for a return value != -1 to identify an error,
+	  whereas it should have been checking for return value != 1.
+	* Ignore reloading signals till signal_init call
+	* fix bug in vrrp_json_track_ifp_dump()
+	* Fix handling unknown user in MISC_CHECK
+	  If the user was unknown, it wasn't dequeuing the new checker, resulting
+	  in a subsequent coredump.
+	* Fix ~SEQ handling
+	  Commit 47b2207 - "Add const attribute where appropriate in config parser
+	  code" broke handling of ~SEQ, due to including one extra character at the
+	  end of the sequence variable name.
+	  This commit corrects the length of the variable set as part of the ~SEQ
+	  processing.
+	* Revert "Fix route add/delete on reload if only change via address"
+	  This reverts commit f54c2e8294c6f2080c3ae951ba25bf40d5b8d211.
+	  The commit did the wrong thing: the via address is not part of the
+	  key of the route.
+	  The problem was that if it detected it already had a route with the
+	  same key, it replaced the route, but with the old route and not the
+	  new one. The next commit will rectify this.
+	* Correct handling of replacing routes on reload
+	  Issue #1390 identified that a route with a changed source address
+	  wasn't being changed on reload, and identified that the problem was
+	  related to issue #1220.
+	  It turns out that commit f54c2e8 which resolved issue #1220 was not
+	  the correct fix. The problem was that when reloading, if a new route
+	  matched an old route, the old route was replaced with the OLD route
+	  (i.e. it did nothing), rather than replacing it with the NEW route.
+	  This commit now replaces the old route with the new route.
+	* Add addresses/routes/rules in that order and delete in reverse order
+	  Routes can requires addresses to exist in order to be able to add them,
+	  and rules determine which routes are used.
+	* Fix not logging error on deletion of expired route
+	* Make netlink_route() return bool, and add some LIST_FOREACH
+	* Handle changing virtual route to use new VIP on reload
+	  During a reload, routes replacing existing routes are replaced, as
+	  opposed to deleted and added; this avoids the route disappearing for
+	  a short while.  However, if a new route uses a VIP that didn't exist
+	  in the old configuration then the route replacement will fail.
+	  The code is now changed so that it attempts to replace the route, but
+	  if that fails, it deletes the old route and later adds the new route
+	  after the new VIPS have been added.
+	* Don't log EPOLLERR or EPOLLHUP - they can occur with TCP_CHECK
+	* Fix tcp_server getopt() handling
+	* Properly handle MISC_CHECK script returning exit status 0
+	  If a MISC_CHECK script returned an exit status >= 2, and then the
+	  script returns 0, the weight of the real server was not updated
+	  following the script returning 0, and the quorum also wasn't updated.
+	  This commit makes keepalived update the weight of a real server and
+	  the quorum following a MISC_CHECK returning a 0 exit status.
+	  This is a change of behaviour for MISC_CHECKs whose scripts return
+	  an exit status >= 2 subsequently followed by an exit status of 0.
+	  However, the new behaviour is consistent with the documentation and
+	  is also the behaviour that would be expected. Some users may need to
+	  modify their MISC_CHECK scripts if the scripts return an exit code >= 2
+	  and subsequently return an exit code of 0 expecting that to mean that
+	  the status hasn't changed.
+	* Correct documentation re range of values for Virtual Router ID
+	  The valid range of values for the VRID is 1 to 255, and does not
+	  include 0.
+	* Handle script timeouts when child process has terminated
+	  Issue #1364 identified that if a track script timed out and the kill
+	  of the process failed to to its exit status already having been reaped,
+	  keepalived would never run the track scripts again. It transpires that
+	  the same problem existed with MISC_CHECK scripts.
+	  The commit now ensures that after the timeout the script will be set
+	  to idle state, so that it can be run again.
+	* Clear thread_master current_event when cleanup thread_master
+	  The current_event was left pointing to an event that had been deleted,
+	  with the consequence that if the next epoll event matched the outdated
+	  current_event, that outdated event could be used.
+	  This commit clears the current_event when the thread_master is cleaned up.
+	* Add errno numbers to some bfd error messages, rather than just text
+	  Although the strerror() text is helpful, it is often useful just to
+	  know the error number.
+	* Enable FIFOs to receive initial fault notifications at startup
+	  Issue #1399 identified that if a track_file caused a VRRP instance
+	  to start in fault state, there was no notification of the fault sent
+	  to the notify FIFOs.
+	  This commit implements the suggestion of chenwng in issue #1399 and
+	  moves the opening of the notify FIFOs to earlier in the init process.
+	* Resolve incorectly identified Coverity error
+	* Define VRRP and BFD initialisms
+	* Add support for nftables blocking IGMP/MLD packets on VMAC interfaces
+	  Issue #882 identified that VRRP instances using VMACs sent IGMP/MLD
+	  packets using the MAC address of the VMAC interface even when the
+	  vrrp instance was in backup state. This meant that switches would
+	  update what interface the VRRP MAC address was on to the backup
+	  instance, thereby meaning that until the master instance sent another
+	  advert, packets destined to be forwarded by the master instance would
+	  be delivered to the backup instance and lost.
+	  This commit adds support to use nftables to stop the packets being
+	  send from the VMAC interface (and thereby using the 00:00:5e:00:0x:xx
+	  MAC address), and instead the packets are sent on the parent interface.
+	  How this is acheived depends on whether the kernel supports the dup
+	  statement; if it does the IGMP messages are simply moved from the VMAC
+	  interface to the parent interface otherwise the join groups are done on
+	  both the VMAC interface and the parent interface, and nftables drops
+	  the join messages on the VMAC interface.
+	  This functionality might be better implemented using eBPF, but older
+	  systems don't support that, and I still need to work out how to use
+	  eBPF.
+	* Add support for using iptables to block VMAC IGMP/MLD messages
+	  Commit b10bbfc2a added support for using nftables to block
+	  IGMP/MLD messages being sent VMAC interfaces. This commit adds
+	  the equivalent functionality using iptables.
+	* Improve checking of incompatible configure options
+	* Fix Travis-CI build errors
+	* Don't attempt to remove IGMP blocking iptables rules for IPVLANs
+	  We don't block IGMP/MLD for IPVLANs so there are no rules to remove.
+	* Turn off nftables mnl debug logging
+	* Don't log an error when deleting nonexistant nftable at startup
+	  Since there is no native flush command to the kernel to delete all
+	  the rules, sets, meters etc in a table, we just delete the table,
+	  and if the table doesn't exist an error is returned.
+	  This commits stops the error being logged, since it isn't an error
+	  of interest.
+	* Minor tidying up of setting up nftables
+	* Fix error when setting up nftables with eVIPs from other family
+	  The sequence number of nftables netlink messages was getting out
+	  of order when a VRRP instance had both IPv4 and IPv6 entries.
+	  This is now resolved by checking for the existance of residual
+	  tables of both families when keepalived first checks for residual
+	  tables.
+	* Remove some duplicate nftables code
+	* Remove inhibit_on_failure from keepalived.conf(5) man page
+	  The inhibit_on_failure keyword does not apply to checkers, and is
+	  not implemented for them.
+	* Remove vi swap file erroneously included in previous commit
+	* Add additional logging of reasons for vrrp instances going to fault
+	  Pull request #1353 suggested adding additional logging for reasons
+	  for vrrp instances going to fault state at startup, and for track
+	  file status changes.
+	  This commit merges those changes, fixes one error, and only logs
+	  track file status changes if the -D option (log detail) is set.
+	* Make skip_check_adv_addr work properly
+	  Keepalived was checking the received advert packet length against
+	  the expected length based on the number of VIPs configured on the
+	  vrrp instance. This commit changes the check so that the received
+	  packet length is checked against the number of VIPs in the VRRP
+	  packet header, thereby ensuring that the advert packet is self
+	  consistent.
+	  The check for the number of addresses is now only done if
+	  skip_check_adr_addr is not set (which matches what the RFC says).
+	  Note: skip_check_adv_addr only skips the check of VIPs in a received
+	  packet if the advert is received from the same master as the previous
+	  advert.
+	  With this commit, if skip_check_adv_addr is set, it is possible to
+	  reload a master instance with a different number of VIPs, and then
+	  subsequently reload the backup instance, without the backup instance
+	  becoming master due to the mismatch of the number of VIPs.
+
+2019-07-26 Alexandre Cassen <acassen@keepalived.org>
+	* keepalived-2.0.18
+	* Set NA_ROUTER flag in gratuitous NA messages appropriately.
+	  Previously keepalived checked the IPv6 forwarding state of the interface/
+	  parent interface of a VRRP instance, and used that for all GNA messages.
+	  However, if addresses are configured on different interfaces, it should
+	  be the setting for the address's interface that is used.
+	* Fix memory leak with dbus_instance_name.
+	* Make set_value() add entry for memcheck identifying where called.
+	* Add configure option --enable-checksum-debug.
+	  Issue #1175 identified that intermittently they were getting VRRPv3
+	  checksum errors. The maintainers of keepalived were unable to reproduce
+	  the problem despite extensive testing, and so a special patch was produced
+	  to check and log any checksum changes from previous adverts sent or received.
+	  Almost two months later there has been no feedback. The patch has now been
+	  forward ported from v2.0.12 to v2.0.17 and is included here, enabled by
+	  --enable-checksum-debug option, so that if there are ever any checksum problems
+	  in the future this code can be used to ascertain what is happening.
+	* Fix configuring LVS sync daemon in backup state.
+	  Commit eb929f8 - "Stop LVS sync daemon on shutdown" moved shutting
+	  down the LVS sync daemon to the wrong place, so that it was called
+	  whenever a VRRP instance transitioned out of master state. This
+	  commit moves the shutting down of the sync daemon to shutdown phase 1,
+	  and it is shutdown before the VRRP instances are shut down.
+	* Increase open file limit for checker process if no of checkers need it.
+	  TCP, HTTP/SSL, DNS and SMTP checkers all use a socket. If there is a
+	  sufficiently large number of checkers, the default open file limit may
+	  be exceeded. This commits counts the number of such checkers, and also
+	  thr number of smtp_alerts, and if necessary increases the open file limit
+	  to allow them all to run at once.  	
+	* Ensure MISC_CHECK processes don't get increase open file limit.
+	* When checking number of open files for vrrp process, allow for smtp
+	  alerts.
+	* Combine checker set_max_file_limit() and set_vrrp_max_fds() common
+	  code.
+	* DNS_CHECK: correct error info in dns_type_handler func.
+	  Sometimes, users set two type values by mistake in keepalived.conf,
+	  and the first is right and the second one is not in DNS_TYPE[].
+	  Then the dns_check->type is set successfully when parsing first type value
+	  , which may be different from the default SOA. As for the second one,
+	  the dns_type_handler func will print error info "Defaulting to SOA",
+	  actually, currently the dns_check->type may be not equal to SOA.
+	  Here, we will print the dns_type_name(dns_check->type) instead of "SOA".
+	* Simplify restoring RLIMIT_NOFILE for child processes.
+	* Simplify handling incorrect dns_check type.
+	* Add missing track_process documentation to keepalived.conf(5) man
+	  page.
+	* Add weight "reverse" feature to track_bfd.
+	  The reverse feature allows reducing the priority when the tracker is up
+	  and reducing the priority when the tracker is down.
+	* Add weight "reverse" feature to track_interface.
+	  The reverse feature allows reducing the priority when the tracker is up
+	  and reducing the priority when the tracker is down.
+	* Add weight "reverse" feature to track_script.
+	  The reverse feature allows reducing the priority when the tracker is up
+	  and reducing the priority when the tracker is down.
+	* Update alloc_track_file() and alloc_group_track_file() to be
+	  consistent.
+	* Allow reverse tracking with weight 0.
+	  This allows a vrrp instance to go to fault state if an interfaces is UP,
+	  or a track script or bfd instance is up, or a track process has achieved
+	  quorum, and down otherwise.
+	* Fix reverse on track_script when configured on sync group and instance
+	  If a track script was configured on both a vrrp instance and the sync
+	  group that the instance was configured in, then the reverse setting
+	  wasn't being properly carried forward.
+	* Add weight "reverse" feature to track_file.
+	  The reverse feature allows reducing the priority when the tracker is up
+	  and increasing the priority when the tracker is down.
+	* Make track_bfd reverse handling consistent with other trackers.
+	* Add track weight reverse to SNMP output.
+	* Add vrrp track_bfd details to SNMP output.
+	* Add vrrp track_process details to SNMP output.
+	* Disallow --enable-track-process-debug with --disable-track-process.
+	* Add conditional compilation around track_bfd/process SNMP code.
+	* Remove duplicate code for parsing vrrp and sync group trackers.
+	  The code for parsing trackers for vrrp instances and sync groups
+	  was to all intents and purposes identical, so this commit now uses
+	  common code for both of them.
+	* sll_protocol should be set to  0x806.
+	  Some times , send the gratuitous ARP message should set sll_protocol,
+	  let some drivers can evaluate which protocol we use.
+	* Neighbor discovery set sll_protocol.
+	* Fix SNMP VRRPv3 IP address OIDs returned.
+	  The OIDs returned for SNMPv3 addresses were incorrectly formatted,
+	  including one extra subid that was the length of the IP address.
+	* Don't use numeric values of address lengths for VRRP SNMP v3.
+	* Stop returning not-accessible fields for v2 SNMP.
+	* Stop return not-accessible fields for v3 SNMP.
+	* Use common code for VRRP tracker SNMP output.
+	  Many functions were using the same, fairly large, code block to do
+	  the same thing. These are now standardised to use the new function
+	  snmp_find_element().
+	* make some vrrp snmp function parameters const.
+	* Make virtual_server_t vsgname const.
+	* Fix SNMP reporting of virtual server group fwmark and address
+	  ranges.
+	* More SNMP fixes for virtual server group fwmark and address ranges.
+	* If virtual server is fwmark and rs's tunnelled, default to IPv4.
+	  If a virtual server uses a fwmark, and all the real servers are
+	  tunnelled, the address family could be IPv4 or IPv6. If the family
+	  is not specified, default to IPv4 (to match behavious of ipvsadm).
+	* Make LIST_SIZE safe to use if list is not assigned.
+	* Optimisations to snmp_header_list_table().
+	* Optimisations to snmp_find_element().
+	* Further optimisation to snmp_find_element().
+	* Add support for IPVS GUE tunnel type
+	  This functionality was introduced in Linux 5.2.
+	  To view the IPVS setup with ipvsadm requires ipvsadm v1.30 plus
+	  commits 2347b504e3ce and c3c2c3c6ae12e3.
+	* Add support for IPVS GUE tunnel checksum option.
+	  The kernel functionality is scheduled for Linux 5.3.
+	* Add support for IPVS GRE tunnels.
+	  The kernel functionality is scheduled for Linux 5.3.
+	  In addition to the ipvsadm patch requirements identified for GUE
+	  tunnels, the patch at
+	* Add pure attribute to http_get_check_compare().
+	  GCC was suggesting adding the pure attribute to http_get_check_compare()
+	  so let's do so.
+	* Resolve warnings from gcc 9.1.1.
+	* Resolve all outstanding coverity issues.
+	* Fix use of getrandom() in BFD rand_intv().
+	* When resetting priority of child process, don't change parent's priority
+	  Issue 1358 identified that it was the priority of the parent process,
+	  rather than the child process, that was being reset. This commit corrects
+	  that and resets the priority of the child process.
+	* Add missing bfd_instance vrrp and checker keyword documentation.
+	* Don't send bfd events to vrrp or checker process if no
+	  configuration.
+	  If there is no vrrp configuration, or no checker configuration, there
+	  is no point sending bfd_event notifications to the relevant processes.
+	  Actually, since the processes may not be running, sending such
+	  notifications can cause the pipes to become full, so it is necessary,
+	  as well as desirable, not to write events to the pipes in those
+	  circumstances.
+	* Revert use of getrandom() for bfd jitter.
+	  This can be called up to 1000 times a second per bfd instance, and
+	  so risks emptying the entropy pool.
+	* Use random() rather than rand() in bfd rand_intv().
+	  The rest of keepalived uses random(), so this changes creates more
+	  consistency.
+	* Allow bfd discriminator to be an odd number.
+	  rand_intv(1, UINT32_MAX) was always returning an even number, since
+	  RAND_MAX == UINT32_MAX / 2. This commit sets the lsb of the discriminator
+	  to the lsb of the current time in seconds.
+	* Ensure BFD source port in range 49152..65535.
+	  RFC5881 requires the source port for BFD packets to be in the above
+	  range, but keepalived was allowing the port to be randomly generated
+	  by the kernel, and hence could be outside the range.
+	  This commit sets the permitted port range to the intersection of
+	  [49152, 65535] and the values in /proc/sys/net/ipv4/ip_local_port_range,
+	  unless the intersection is too small, in which case it just uses the BFD
+	  specified values.
+	  keepalived generates a random port number in the required range, and then
+	  loops through the range starting from the random port number until it
+	  finds one it can bind to.
+	* Resolve coverity resource leak issue 218872.
+	* Resolve coverity Resource leak issue 218875.
+	* Resolve coverity Resource leak issue 218876.
+	* Resolve coverity Unexpected control flow issue 218873.
+	* Change code to avoid coverity String length miscalculation issue 218874
+	  The code was correct, but as coverity points out, strlen(str + 1) is more
+	  likely to be an error for strlen(str) + 1, so avoid the use of the former
+	  construct.
+
+2019-06-25 Alexandre Cassen <acassen@keepalived.org>
+	* keepalived-2.0.17
+	* Add support to define CPU affinity for vrrp, checker & bfd processes
+	  Created 3 new configurations keywords to set CPU affinity of Keepalived
+	  processes : vrrp_cpu_affinity, checker_cpu_affinity & bfd_cpu_affinity
+	  This option can be used to force vrrp, checker and bfd processes to run
+	  on a restricted CPU set. You can either bind processes to a single CPU
+	  or define a set of cpu. In that last case Linux kernel will be restricted
+	  to that cpu set during scheduling. Forcing process binding to single CPU
+	  can increase performances on heavy loaded box. for example:
+	  "vrrp_cpu_affinity 2" will force vrrp process to run on cpu_id 2
+	  "vrrp_cpu_affinity 2 3" will retrict kernel scheduling decision over
+	  cpu_id 2 & 3.
+	* correct syntax error when _HAVE_VRRP_VMAC_ && no HAVE_IFLA_LINK_NETNSID.
+	* Stage libmnl and libnftnl4.
+	* Add dynamic download of kernels using scriplets Also added
+	  Linux 5.0.0 build.
+	* Example build using EOL kernel from old-releases.
+	* Modify snapcraft.yaml to dynamically source correct kernel versions.
+	* dump processes CPU Affinity while dumping global conf.
+	  Add support to dump CPU Affinity for each Keepalived processes where
+	  CPU Affinity has been changed by configuration.
+	* Don't enclose /dev/tcp/127.0.0.1/22 in ' chars when running as script
+	  RedHat identified a problem with scripts like:
+	  vrrp_script {
+	    script "</dev/tcp/127.0.0.1/22"
+	  }
+	  where returning an exit code of 127 (script not found).
+	  This was identified to be due to the "script" being enclosed in '
+	  characters, so the resulting system call was
+	  system("'</dev/tcp/127.0.0.1/22'"), which failed. Not adding the leading
+	  and trailing ' characters when the first character of the script is '<'
+	  or '>' resolves the problem.
+	* Add support for use_ipvlan (use an ipvlan i/f similar to use_vmac)
+	  Issue #1170 identified that use_vmac didn't work with systemd-networkd
+	  since systemd-networkd was removing IP addresses created by keepalived
+	  (and any other application). It was discovered that systemd-networkd
+	  did not remove IP addresses from ipvlans.
+	  This commit adds support for ipvlans, but to work around the problem,
+	  and because it might have other uses.
+	  Systemd commit - https://github.com/systemd/systemd/pull/12511 has added
+	  configuration options to stop systemd-networkd removing IP addresses
+	  added by other applications, but it is not merged yet, and it will be a
+	  while before all the distros merge it.
+	* Fix building with ipvlans before IFLA_IPVLAN_FLAGS was defined.
+	* Default IPVLANs to bridge mode
+	  We shouldn't change the behaviour if a kernel is upgraded, so
+	  default to the original mode supported.
+	* Ensure that -lm linker library flag is always set
+	  configure was testing whether it was necessary to add the -lm option,
+	  but for some reason gcc adds it itself if -Os is not specified, but
+	  does not add it if -Os is specified. Consequently if configure was
+	  run without -Os, and make was run with -Os the link failed.
+	  The commit ensures that -lm is always used.
+	* Handle checking for -Wl,-z,relro and -Wl,-z,now properly.
+	* Honour CFLAGS, CPPFLAGS, LDLIBS and LDFLAGS settings when configure runs.
+	* Propogate CFLAGS, CPPFLAGS, LDFLAGS and LDLIBS from configure to make files
+	  Make sure any settings in CFLAGS etc at the time configure is run are added
+	  to the Makefiles, to ensure that the make is run in the same environement
+	  that configure is run in.
+	* Use CFLAGS, CPPFLAGS, LDFLAGS and LDLIBS correctly
+	  Use the correct variable for the relevant option type, e.g. -llib
+	  should be in LDLIBS, not LDFLAGS, and -Ddefn should be in CPPFLAGS
+	  not CFLAGS.
+	* Fix non-ipvlan interfaces broken by adding ipvlans.
+	* Check bfd instance name length before copying.
+	* Add lib/container.h to avoid duplicate definition of container_of.
+	* Revisited code to use const declaration where appropriate.
+	* Add STRDUP/STRNDUP functions.
+	* Add FREE_CONST, FREE_CONST_ONLY and REALLOC_CONST.
+	* Change thread_t * to thread_ref_t except in thread handler code
+	  Treat the thread reference as a handle, so that the only code that
+	  manipulates thread structures is in the scheduler.
+	* Add STRDUPs in check_data.
+	* Add STRDUP in bfp parser code.
+	* -U flags should be included in CPPFLAGS
+	* Update track_process documentation.
+	  Issue #1265 requested further clarify regarding the track_process
+	  process specification and use of quote marks.
+	* Fix building on Linux 3.13 (required for building snaps)
+	* Ensure 4 extra parameters are set for notify scripts with no shebang.
+	* Streamline functions returning string matching a define.
+	* Make addattr8/16/32/64 and rta_addrattr8/16/32/64 inline functions
+	  Since these functions simply call addattr_l/rta_addattr_l, making the
+	  functions inline removes the overhead of one function call.
+	* Add genhash option -P to select HTTP 1.1 or 1.0 with Connection: close
+	  Max Kellerman (max.kellermann@gmail.com) submitted pull request #1260
+	  to add "Connection: close" to the HTTP header sent by genhash. In order
+	  to maintain backwards compatibility, this has been implemented as an
+	  option '-P 1.0C'. In addition, '-P 1.1' requests that a version 1.1
+	  header is sent (which includes 'Connection: close').
+	* Add http_protocol option for HTTP_GET and SSL_GET checkers.
+	  To be consistent with commit 2ff56f5 - "Add genhash option -P
+	  to select HTTP 1.1 or 1.0 with Connection: close", this commit
+	  adds the http_protocol keyword for HTTP_GET and SSL_GET checkers.
+	  'http_protocol 1.0C' adds 'Connection: close' to a 1.0 header, and
+	  'http_protocol 1.1' sends an HTTP/1.1 header, which includes the
+	  'Connection: close' option.
+	* Tidy up the recieve message processing code loops in genhash.
+	* Add genhash -t timeout option.
+	* Simplify thread process in genhash after send HTTP request.
+	* support http status_code group
+	  The origin status_code only support one specific code, now we can
+	  support http status_code of the same class. That's to say, we can
+	  use 1xx to represent 100-199, 2xx means 200-299 ans so on.
+	  eg: The configure as follows:
+	  url {
+	      path /index.html
+	      status_code 2xx 3xx
+	  }
+	  which means we consider all status_code range in [200,399] is ok.
+	  Of course the following configure is either 200 or [300,399] is ok.
+	  url {
+	      path /index.html
+	      status_code 2xx 3xx
+	  }
+	* Fix compiler warnings introduced in commit c7c23a2
+	  Commit c7c23a2 - "support http status_code group" introduced
+	  two compiler warnings, due to isdigit() being undeclared, and
+	  a shadows declaration. These warnings are now resolved.
+	* Use standard bit testing and setting functions
+	  Commit c7c23a2 - "support http status_code group" added additional
+	  bit testing and setting functions, rather than using the already
+	  defined ones in bitops.h.
+	  This commit also resolves the assumption that longs are 64 bits, and
+	  will allow the code to work with longs of any length.
+	  The original commit would cause all status codes 100 to 599 to be
+	  written when the configuration was dumped, regardless of whether
+	  the specific codes were set. This commit now writes the status codes
+	  in ranges.
+	  Finally, if no status code is configured, it sets the bits for the
+	  default status codes (200-299).
+	* Change how http status codes are configured
+	  Commit c7c23a2 - "support http status_code group" allowed status codes to
+	  be specified as 2xx, meaning 200-299. This commit changes the configuration
+	  so that 2xx etc is no longer used, but status code ranges can be specified,
+	  e.g. status_code 150 180-189 200-299 503 510-520
+	* Update documentation for commit c7c23a2.
+	* Fix a memory leak and duplicate free in HTTP_GET checker.
+	* Fix sending SMTP alerts
+	  Issue #1275 identified that SMTP alerts were not working. The SMTP alerts
+	  were broken by commit 5860cf2 - "Make checker fail if ENETUNREACH returned
+	  by connect()", since the SMTP state machine was not updated to handle the
+	  addition value in enum connect_result.
+	  This commit adds code to handle the additional enum, but also makes the
+	  code less sensitive to such changes, and more likely to produce compiler
+	  warnings/errors if appropriate updates are not done in the future.
+	* Fix various compilation warnings with certain configure options.
+	* Update location of PID file to match Filesystem Hierarchy Standard v3.0
+	  Issue #1277 identified that PID files should be created in /run rather
+	  than /var/run, and that systemd logged a warning if the service file
+	  specified PIDFile under /var/run.
+	  This commit now makes keepalived use the appropriate directory for PID
+	  files as determined by configued (rather than doing its own thing), and
+	  configure now uses /run in preference to /var/run.
+	* Stop LVS sync daemon on shutdown
+	  The shutdown of the sync daemon was delayed to phase 2 of the shutdown
+	  which meant that the controlling VRRP instance could never be in the
+	  master state. We now stop the sync daemon in phase 1, when the VRRP
+	  instance is transitioned out of master state.
+	* Use -isystem rather than -I for path to kernel headers
+	  Using -isystem rather than -I allows the dispensation for some warnings
+	  to system headers to apply to the kernel header tree we are specifying.
+	  This stops some warnings that would not occur with kernel headers under
+	  /usr/include but that were being generated when -I was used (it
+	  nevertheless has helped identify two bugs).
+	* Ensure check system headers for definition of NFT_TABLE_MAXNAMELEN
+	  Prior to Linux 4.1 NFT_TABLE_MAXNAMELEN was not defined, but we must
+	  include linux/netfilter/nf_tables.h before checking whether it is
+	  defined or not!
+	* Improved configure testing for <linux/netfilter/nf_tables.h>
+	* Add warning -Wwrite-strings and resolve new warnings.
+	* Add -Wdouble-promotion and resolve new warnings.
+	* Add -Wformat-signedness and resolve new warnings.
+	* Fix building on Ubuntu 16.04 with --disable-vrrp
+	  The addition of including <inttypes.h> was needed on Ubuntu 16.04,
+	  whereas it wasn't necessary on Fedora or Debian.
+	* Explicitly include <inttypes.h> where print format names are used.
+	* Add more -Wformat-* options and resolve new warnings.
+	* Add -Wframe-larger-than=5120
+	  The largest frame is just under 4200 bytes (which may be more than we
+	  want anyway), but adding this warning will at least tell us if a stupidly
+	  large frame is created in the future.
+	* Fix spelling of -Wmissing-field-initializers.
+	* Fix definition of PRI_rlim_t generated by configure on 32 bit systems.
+	* Rseolve warning re >=0 comparison for unsigned value.
+	* add min max judge
+	  Although even if min > max, the code works well. We better to print
+	  the error config to let the user know this.
+	* Ensure correct definition of MAX_ADDR_LEN is used
+	  <net/if_arp.h> defines MAX_ADDR_LEN as 7, and <linux/netdevice.h>
+	  defines MAX_ADDR_LEN as 32. We need to ensure we have the longer one.
+	* update doc samples of keepalived.conf.status_code.
+	* Fix compiling on Alpine Linux 3.7.
+	* Update list of packages to install on Alpine Linux.
+	* Send GARP/NA message when leaving fault state if using unicast
+	  If the master's ARP entry for a backup route has expired and we are
+	  using a short advert interval (< 0.5 seconds), then the backup router
+	  could timeout receiving adverts before the master sends its next
+	  ARP/NDISC message; until it has had a reply to that it cannot send any
+	  adverts to the backup router in question.
+	  This commit makes a VRRP instance that is using unicast send a GARP/NA
+	  when it transitions out of fault state, to ensure that the master (or
+	  local router) can send adverts to us immediately.
+	* track_process: handle different threads having different names
+	  prctl(PR_SET_NAME) is a per thread property, not a per process
+	  property, so when a PROC_EVENT_COMM event is received, we need to
+	  check that the tid == pid, so ensure that only the main (initial)
+	  thread that COMM changes are considered for.
+	* Fix some log_message for specifiers in track_process.c.
+	* Fix for JSON characters escaping.
+	* Don't attempt to create a macvlan when using an ipvlan
+	  netlink_link_add_vmac() detected an interface had been created, and
+	  so didn't attempt to create a macvlan, but netlink_link_add_vmac()
+	  shouldn't be called in this circumstance.
+	* On reload, report addresses being removed as removed, not thos remaining.
+	* Don't add further iptables entries on reload when using ipsets.
+	* Stop deleting VMAC/IPVLAN interfaces on reload when still needed.
+	* Fix formatting of email To: line.
+	* Improve efficiency of setting up SMTP headers.
+	* Fix segfault when we do not config vsg.
+	* Fix issues reported by coverty (unchecked return value, buffer overrun,
+	  Logically dead code, uinitialized var, explicit null dereferenced, ...)
+	* Resolve compiler warning in list_sort().
+	* genhash: make printssl a static function.
+	* Change strncpy() to strcpy_safe() in smtp_final().
+	* Convert some snmp list loops to use LIST_FOREACH.
+	* Make inet_stosockaddr() return bool rather than int.
+	* Fix checking for VMAC/IPVLAN no longer used after reload
+	  Pull request 1310 identified that there was a problem building
+	  keepalived with VLANs but without ipvlans. The code that needed
+	  changing was also incorrect so this commit resolves both issues.
+	* Fix false-positive send_instance_notifies calls
+	  Issue #1311 identified that duplicate notifies were being sent on
+	  a reload, and pull request #1312 provided a fix. Unfortunately other
+	  intervening commits stopped the original patch applying, so this
+	  updates the original patch.
+	  The patch also stops duplicate logging of vrrp instance states on
+	  reload when there has been no change.
+	* Set thread parameter value explicitly to 0 when add timer thread
+	  It is possible for a function to be called either from a timer thread
+	  or an event thread. When an event thread is added, a vlue can be passed
+	  which will be passed to the function, but currently there is no way to
+	  set the value for a timer thread (a function thread_add_timer_val() can
+	  be added when needed), but in order to allow the value to be used with
+	  an event thread, it needs to be explicitly set to something when called
+	  via a timer thread, so just set it to 0.
+	* Remove VRRP_DISPATCHER definition - it was not used.
+	* Some minor tweaks for the format of keepalived.data.
+	* Make track_process, parser and dump_keywords --debug options.
+	* Change default to not check for EINTR if use signalfd.
+	* Don't send prio 0 adverts for deleted VRRP instance that wasn't master
+	  When a VRRP instance ceases to exist following a config reload, we must
+	  only send priority 0 adverts if the deleted instance was in master state
+	  prior to the reload.
+	* Send notifies when vrrp instance deleted on reload
+	  This commit makes notifies be send saying that the instance is in
+	  fault state, since that is the closest we have to the instance being
+	  deleted (the instance can't run since it is deleted which is quiet
+	  similar to being in fault state).
+	* Streamline some HTTP_GET code.
+	* Simplify HTTP_GET epilog parameters
+	  Parameters t and c weren't needed, since they can be determined from
+	  the method parameter if we add REGISTER_CHECKER_FAILED.
+	* Set checker->has_run for HTTP_GET after failure
+	  The behaviour we want after a failure of checking a URL at startup
+	  is the same as if all checks had completed, so if there is a failure,
+	  just set checker->has_run.
+	* Make http_get url_it point to list element rather than a counter
+	  This makes fetching the next URL more efficient.
+	* When we run the initial HTTP_GET check, we don't want any retries
+	  It isn't only the first URL that shouldn't have retries, but all of
+	  them. This commit implements that.
+	* When an HTTP_GET url check fails, keep checking that URL until success
+	  When a URL check has failed, there is no point checking other URLs until
+	  we know the one that has failed is working again. The approach now is
+	  that the failed URL is checked until it is Ok again, and then all the URLs
+	  are checked before the checker is successful. This will reduce the recovery
+	  time once the failed URL recovers.
+	* When starting up, don't delay between checking all the URLs
+	  When we start up, particularly in alpha mode, we want to check the
+	  URLs as quickly as possible, so don't delay by delay_loop between
+	  checking each URL, but check them immediately one after the other.
+	* After HTTP_GET URL failure, delay max of delay_loop and delay_before_retry.
+	* After an HTTP_GET failure, check the URLs without any delay
+	  This means that recovery will occur as quickly as possible.
+	* Some cosmetic changes to check_ssl.c.
+	* Add option fast_recovery for HTTP_GET.
+	  Commits 3027e0c - "When starting up, don't delay between checking all the
+	  URLs" and 86e02dd - "After an HTTP_GET failure, check the URLs without
+	  any delay" removed the delay between URL checks both at startup and after
+	  a URL check failure. This commit makes that options, and it will only do
+	  the fast checking if fast_recovery is configured against the checker.
+	* Make set_value() check for missing parameter
+	  Pull request #1308 identifed that if set_value() was called when
+	  there wasn't a parameter on the command line, keepalived could
+	  segfault since NULL was returned (examples were HTTP_GET with an
+	  empty path specified, and DNS_CHECK with empty name).
+	  This commit modifies set_value() so that keepalived will exit if
+	  it is called with no keyword parameter is missing. Uses of
+	  set_value() where no parameter did not cause a problem (e.g. where
+	  the whole option was optional, such as virtual_host) now check if
+	  the parameter is mising and report a configuration error.
+	* Handle vrrp tracked interfaces being down on reload
+	  If the base interface of a vmac interface was down on reload, the
+	  vrrt instance would not come back up after the base interface came
+	  back up.
+	* Don't log error when sending priority 0 advert after interface goes down.
+	* Cosmetic change to address_exist().
+	* Add information regarding SElinux and keepalived.
+	* Fix overflow status code
+	  Under normal circumstances, status_code returns 100-599,
+	  but if it is a constructed abnormal reply message,
+	  it may be out of the range, resulting in the status_code
+	  array out of bounds, and then keepalived segfault.
+	* Ensure HTTP status code is preceeded by a space character.
+	* Fix setting existing macvlan etc base interfaces at startup.
+	* Add further SELinux references.
+	* Resolve implicit declaration of function ‘strdup’ warning.
+	* Allow location of /run dir to be specified to configure
+	  The commit adds configure option --with-run-dir=PATH
+	* Fix reloading when interfaces deleted and recreated
+	  If have macvlans on a real interface, with vmacs configured on the
+	  macvlans and the macvlans are deleted, the vmacs from them are removed
+	  from the configuration, the configuration is reloaded, and this is done
+	  for more than one macvlan, and then the configuration is reinstated
+	  one by one with the configuration being reloaded, keepalived was
+	  incorrectly setting some of the vrrp instances to fault state. This commit
+	  resolves the issues.
+
+2019-05-03 Alexandre Cassen <acassen@keepalived.org>
+	* keepalived-2.0.16
+	* Add log_unknown_vrids keyword.
+	  Commit 21e6f5f added logging when a VRRP packet was received on an
+	  interface and the VRID in the advert was not configured on that
+	  interface.
+	  Due to valid uses of keepalived having a VRRP instance on an
+	  interface, but there being other, independent, VRRP instances with
+	  different VRIDs on the same interface, this patch only enables logging
+	  of unknown VRIDs if it is specifically configured.
+	* Stop segfault when reload and using -x option.
+	* Fix compilation error found by Travis-CI.
+	* Fix a couple of typos.
+	* Ensure check command line when needed for track process.
+	* Check if comm really changed when get PROC_EVENT_COMM_CHANGE.
+	* Fix debounce delay handling for track_process.
+	* Optimise add_process().
+	* Remove processes no longer being monitored.
+	* Optimise check_process().
+	* Ignore process threads for track_process.
+	* Allow matching of process parameters in track_process
+	  This additional functionality was requested in issue #1190.
+	* Allow separate delay timers for fork and process exit in
+	  track_process.
+	* Add quorum_max for track_process.
+	  This allows track_process to go to fault state if more than a
+	  specified number of instances of a process are running. In particular
+	  it can go to fault state if more than one instance is running, and
+	  also if any instance of a process is running.
+	* Add configuring process name.
+	  With up to 4 processes running all named keepalived, it can be
+	  difficult to know which is which. The commit adds the option to
+	  allow process name to be set independantly for each process.
+	* Handle macvlans/macvtaps being moved into different namespace from parent
+	  If a macvlan or macvtap interface is moved into a different namespace from
+	  its parent, and the interface is in the namespace in which keepalived is
+	  running, keepalived is unable to get information about, or configure, the
+	  parent interface. In this case, treat the macvlan/macvtap interface as though
+	  it doesn't have a parent interface.
+	  There are a couple of consequences of this in this situation:
+	    1) If a vrrp instance is configured with use_vmac and its configured interface
+	       is such a macvlan/macvtap interface, keepalived cannot ensure that the
+	       arp_ignore and arp_filter settings are correct on the parent
+	    2) keepalived cannot check that there a not duplicate VRIDs being used on the
+	       interface.
+	* Typo writing word error fix.
+	* Add vrrp instance priority change notifications on FIFOs only.
+	  Issue #1213 requested notification of vrrp instance priority changes,
+	  and this commit implements that with new FIFO messages:
+	  INSTANCE "VI_0" MASTER_PRIORITY 220
+	  INSTANCE "VI_0" BACKUP_PRIORITY 254
+	  This has been implemented via notify FIFOs only, since the order of
+	  processing of scripts is indeterminate if events happen quickly in
+	  succession, potentially causing the last processed priority by a
+	  script not to be the lastest priority, and using SMTP notification
+	  would be ridiculous.
+	* Allow user and group ownership of FIFOs to be configured.
+	* Remove extraneous debugging message from process_name commit
+	  Commit 4ad6d11 - "Add configuring process name" accidentally left
+	  a debugging log message in the code. This commit removes it.
+	* Fix FREE error if tracked process has no parameters.
+	* Fix track processes when reloading.
+	* Fix route add/delete on reload if only change via address
+	  If a virtual_iproute
+	  src 100.100.100.100 2.2.2.2/32 via 100.100.100.2 dev eth0
+	  is changed to
+	  src 100.100.100.100 2.2.2.2/32 via 100.100.100.1 dev eth0
+	  on a reload the route didn't get updated. The reason is that the
+	  via address wasn't used in the comparison of routes, so keepalived
+	  didn't detect that it had changed.
+	* Define TASK_COMM_LEN rather than use numbers in code.
+	* Fix promote_secondaries.
+	* Add snmpd.service to keepalived.service if SNMP enabled.
+	* Add issue templates for github.
+	* Make utils.c function parameters const where appropriate.
+	* Add missing info to check process dump file.
+	* Make ipvs_talk() error message more meaningful
+	  The error message used to just output the IPVS command number, now
+	  the name of the command is reported too.
+	* Make more use of LIST_FOREACH in ipwrapper.c.
+	* Change VS_ISEQ etc to be functions and correct them.
+	* Resolve removing virtual servers in virtual server groups after
+	  reloading.
+	* Update NOTE_vrrp_vmac.txt re sysctl settings.
+	* Ignore base interfaces of macvlans if in a different namespace.
+	* Don't lose sin_addr_l and sin6_addr_l lists from interface when recreate
+	  Issue #1232 identified that keepalived segfaulted when an interface was
+	  recreated. This commit resolves the problem of the address lists being
+	  lost.
+	* Fix commit 128bfe6 for pre v4.0 kernels
+	  Commit 128bfe6 - "Ignore base interfaces of macvlans if in a different
+	  namespace" added using IFLA_LINK_NETNSID to detect if the parent of an
+	  interface was in a different namespace. Unfortunately that was only
+	  introduced in Linux v4.0, so don't attempt to use it if it is not
+	  defined.
+	  For kernels older than v4.0 if a macvlan interface's parent is in
+	  another network namespace, but the ifindex of the parent interface also
+	  exists in the namespace in which keepalived is running, then keepalived
+	  will believe the parent of the macvlan is the wrong interface.
+	* Fix commit 3207f5c - IFLA_LINK_NETNSID is not #define'd
+	  This fixes commit 3207f5c - "Fix commit 128bfe6 for pre v4.0 kernels".
+	  A configure test is needed to check for IFLA_LINK_NETNSID.
+	* Further fixes/improvements for MACVLAN parents in different
+	  namespaces.
+	* allow to set zero weight for real server.
+	* Add comments re needing to enable protocol 112 in an AWS security
+	  group.
+	* Check if base i/f of a residual macvlan is in correct namespace.
+	* Stop segfault if using DBus and have invalid VRRP configuration.
+	  If a VRRP instance was removed by vrrp_complete_init() it was causing
+	  a segfault in the DBus code. The commit moves the initialisation of
+	  DBus until after the validity of the VRRP instances has been checked.
+	* Handle DBus process properly when reloading.
+	  DBus may change from being enabled to disabled or vice versa and
+	  the code didn't handle that.
+	* Close DBus pipes when stop using DBus.
+	* Add some more LIST_FOREACH to DBus code.
+	* Move a g_free() to after last use of the freed string in vrrp_dbus.
+	* Fix error in man page.
+	* Handle network namespace name properly when reloading.
+	* Don't call g_hash_table_remove() when using g_hash_table_foreach_remove()
+	  g_hash_table_foreach_remove() removes each object from the hash table,
+	  so calling g_hash_table_remove() as well made it not work properly.
+	* Resolve various aspects of reloading when also using DBus.
+	  1. Add ability for DBus to be enabled and disabled at reload
+	  2. Correctly handle vrrp_instance name change for matching interface/
+	     family/VRID.
+	  3. Correct handling of interface/family/VRID change for a vrrp_instance
+	     with the same name.
+	* Resolve segfault when a vrrp_instance has no interface specified.
+	* Fix sending priority 0 adverts after reload for deleted vrrp
+	  instances.
+	  During a reload, vrrp_dispatcher_release() was called prior to
+	  reloading the configuration, and it closed all the vrrp send/receive
+	  sockets. However it isn't until after the reload that it is known which
+	  vrrp instances no longer exist, and clear_diff_vrrp() attempted to send 0
+	  priority adverts for those instances. Since the sockets had already been
+	  closed, the adverts could not be sent. Worse, the socket_t structures had
+	  been released, but the released memory was accessed in attempting to send
+	  the adverts.
+	  This commit delays calling vrrp_dispatcher_release() until after the new
+	  configuration has been reloaded, and it sends 0 priority adverts before
+	  all the old sockets are closed. Following this new sockets are opened.
+	  It would be possible to make the code more efficient and retain the sockets
+	  that still need to be used, rather than closing them and opening new ones,
+	  but that is for another commit.
+	* Update some comments in vrrp_snmp.c.
+	* Use structure initialisation to clear struct, rather than memset.
+	* Fix logging if receive EPOLLHUP, EPOLLERR and add for EPOLLRDHUP.
+	* Add support for network timestamp debugging.
+	* Check return code from recvfrom() before other values for
+	  track_process.
+	* Use IPV6_RECVPKTINFO rather than IPV6_RECVHOPLIMIT when check
+	  multicast.
+	* Ensure virtual servers are properly removed when reloading.
+	  Pull request #1246 provided a patch to resolve the issue of virtual
+	  servers in a virtual server group that are deleted from the virtual
+	  server group on a reload weren't being removed from the IPVS
+	  configuration. However, the patch didn't quite work with the current
+	  HEAD of the master branch.
+	  This commit incorporates that patch provided and makes the necessary
+	  adjustments for it to work correctly.
+	* Cosmetic changes to IPVS code.
+	* Make clear the IPv6 instances use VRRP version 3.
+	* Delete redundant code.
+	* Update comments in vrrp_nftables.c.
+	* Update for gcc v9
+	  Detect if -Wchkp is no longer supported, and fix a -Wstrict-overflow
+	  warning in write_backtrace().
+	* Add additional compiler warnings available in gcc verion 9.
+
+2019-04-04 Alexandre Cassen <acassen@keepalived.org>
+	* keepalived-2.0.15
+	* Fix uninitialised variable.
+	* Fix rpmbuild on CentOS7, and rely on auto-requires.
+	* Add option to flush lvs on shutdown.
+	  Currently all known virtual servers and their real servers are
+	  removed one at a time at shutdown. With large configurations on
+	  a busy system, this can take some time.
+	  Add an option just like the existing 'lvs_flush' which operates
+	  on shutdown. Typical environments with a single keepalived instance
+	  can take advantage of this option to achieve a faster shutdown or
+	  restart cycle.
+	* Make alpha mode checkers on new real servers start down on reload.
+	  Patch #1180 identified that new real servers with alpha mode checkers
+	  were being added online immediately, and if the checker then failed
+	  were being removed. This commit makes real servers that didn't exist
+	  before the reload start in down state if they have alpha mode checkers.
+	* Remove duplicate config dump entry.
+	* Make new real servers at reload start down if have alpha mode
+	  checkers.
+	* Close checker and smtp_alert sockets on reload.
+	  Issue #1177 identified that sockets were being left open (lost) after
+	  a reload. It transpired that these were sockets opened by TCP_CHECK,
+	  HTTP_GET, SSL_GET, DNS_CHECK and SMTP_CHECK checkers, and by smtp_alerts
+	  in the process of being sent.
+	  This commit adds an extra parameter to thread_add_read() and
+	  thread_add_write() to allow indicating that the scheduler should close
+	  the socket when destroying threads.
+	* Send vrrp group backup notifies at startup.
+	* Make inhibit_on_failure be inherited by real server from virtual
+	  server.
+	* Allow real and sorry servers to be configured with port 0
+	  This is to maintain backwards compatibility with keepalived prior
+	  to commit d87f07c - "Ensure always check return from inet_stosockaddr
+	  when parsing config".
+	  The proper way to configure this is to omit the port, which requires
+	  the next commit.
+	* Don't setup IPVS config with real and virtual servers ports
+	  different.
+	  If the real server is using DR or TUN, the port of the real server must
+	  be the same as the port of the virtual server. This commit uses the
+	  virtual server port for the real server when configuring IPVS.
+	* Log warnings if real server and virtual server ports don't match
+	  This commit adds logging warnings if virtual and real server ports,
+	  when using TUN or DR, don't match.
+	  It also sets the real server ports to be the same as the virtual server
+	  ports. Although listing the IPVS configuration with ipvsadm will look
+	  different, the kernel ignored the port of a real server when using DR
+	  or TUN, so the behaviour isn't changed, but when looking at the
+	  configuration it now shows what is actually happening.
+	* Fix warning when protocol specified for virtual server with fwmark.
+	* Add log message that nb_get_retry is deprecated.
+	* Fix whitespace in configure.ac.
+	* Fix configure error when systemd not installed
+	  configure was trying to execute
+	    pkg-config --variable=systemdsystemunitdir systemd
+	  even if systemd was not available.
+	  This commit makes configure only execute the above if it has determined
+	  that systemd is the correct init package to use.
+	* Correct references to RFC6527 (VRRPv3 SNMP RFC).
+	* nsure checker->has_run is always set once a checker has run.
+	* Fix some indentation in configure.ac.
+	* Update fopen_safe() to open temporary file in destination directory
+	  rename() in fopen_safe() was failing if the file being created
+	  was not on the same filesystem as /tmp.
+	* Add ${_RANDOM} configuration keyword.
+	  It might seem strange to introduce random elements to configuration
+	  files, but it can be useful for testing.
+	* Fix using ~SEQ() in multiline configuration definitions.
+	* Make blank lines terminate a multiline definition.
+	* Minor updates for lvs_flush_on_stop.
+	* Add option to skip deleting real servers on shutdown or reload
+	  If a virtual server is removed, the kernel will remove its real servers,
+	  so keepalived doesn't explicitly need to do so.
+	  The lvs_flush_onstop option removes all LVS configuration, whereas this
+	  new option will only remove the virtual servers managed by keepalived.
+	* Correct error message re checker_log_all_failures.
+	* Fix syntax error in configure.ac.
+	* Fix track_process initialisation for processes with PIDs starting 9.
+	* Remove debugging log message.
+	* Remove inappropriate function const attributes
+	  They were causing iptables/ipsets not to be initialised.
+	* Stop warning: function might be candidate for attribute ‘const’
+	  Depending on what configure options are selected, gcc can output
+	  the above warning for initialise_debug_options().
+	  This commit ensures that the warning is not produced.
+	* Enable strict-config-checks option in keepalived.spec RPM file.
+	* vrrp: relax attribute 'const' warning at iptables helpers.
+	* Propagate libm to KA_LIBS.
+	* Fix building on Alpine Linux.
+	  Alpine (musl) doesn't have a definition of __GNU_PREREQ, so create a
+	  dummy definition.
+
+2019-03-24 Alexandre Cassen <acassen@keepalived.org>
+	* keepalived-2.0.14
+	* Add compiler warning -Wfloat-conversion and fix new warnings.
+	  It was discovered that passing 0.000001 as a parameter specified
+	  as uint32_t to a function did not generate any warning of type
+	  mismatch, or loss of precision.
+	  This commit adds -Wfloat-conversion and fixes 3 instances of new
+	  warnings that were generated.
+	* For non systemd enviroment, it occurs syntax error 'fi'.
+	  To avoid syntax error, modify keepalived.spec.in.
+	* When uninstall keepalived with init upstart, stop keepalived process.
+	* Fix type re LOG_INGO should be LOG_INFO * 6git stash --cached.
+	  The code was actualy in a #ifdef INCLUDE_UNUSED_CODE block, and
+	  so isn't currently compiled.
+	* Register missing thread function for thread debugging.
+	* Fix reutrn value of notify_script_compare misusing issue.
+	* Fix typo in keepalived.conf man page re BFD min_rx.
+	* Fix segfault when bfd process reloads config.
+	  Issue #1145 reported the bdf process was segfaulting when reloading.
+	  The bfd process was freeing and allocating a new thread_master_t
+	  when reloading, which doesn't work. This commit changes the bfd
+	  process to clean and reinitialise the thread_master_t.
+	* Fix segfault in handle_proc_ev().
+	  On Linux 3.10 the ack bit can be set in a connector message, and
+	  the CPU number is set to UINT32_MAX. This commit skips acks, and
+	  also checks that CPU number is within range of the number of CPUs
+	  on the system.
+	* Fix OpenSSL init failure with OpenSSL v1.1.1.
+	  OpenSSL v1.1.1, but not v1.1.0h or v1.1.1b failed in SSL_CTX_new()
+	  if OPENSSL_init_crypto(OPENSSL_INIT_NO_LOAD_CONFIG) had previously
+	  been called.
+	  This commit doesn't call OPENSSL_init_crypto() if doing so causes
+	  SSL_CTX_new() to fail.
+	* Remove all references to libnfnetlink.
+	  Commit 2899da6 (Stop using linbl for mcast group membership and
+	  setting rx buf sizes) stopped using libnfnetlink, but INSTALL and
+	  keepalived.spec.in were not updated accordingly.
+	* Fix genhash re OPENSSL_init_crypto bug and improve configure.ac.
+	  Commit fe6d6ac (Fix OpenSSL init failure with OpenSSL v1.1.1) didn't
+	  update the identical code in genhash/ssl.c. Also, an improvement for
+	  the test in configure.ac was suggested.
+	* Fix log output when real server removed.
+	  FMT_VS() and FMT_RS() both call inet_sockaddrtotrio which uses a
+	  static buffer to return the formatted string, but since FMT_VS(),
+	  wheich simply calls format_vs() copies the returned string to its
+	  own static buffer, if FMT_VS() was called before FMT_RS() then
+	  the returned strings from both could be used.
+	  The problem occurs when both FMT_VS() and FMT_RS() are used as
+	  parameters to log_message() (or printf etc). It appeared to work
+	  fine on x86_64, but was writing the same IP address for both the
+	  real server and virtual server on ARM architectures. This is due
+	  to the compiler evaluating parameters to the log_message() function
+	  call in a different order on the different architectures.
+	  This commit adds inet_sockaddrtotrio_r() which allows the output
+	  to be in a buffer specified by the caller, and so FMT_VS() and
+	  FMT_RS() can now be called in either order without one overwriting
+	  a buffer used by the other.
+	* Streamline some string formatting with FMT_RS() and FMR_VS().
+	  Following commit 9fe353d (Fix log output when real server removed)
+	  some code can be streamlined now that the order of calling FMT_VS()
+	  and FMT_RS() does not matter.
+	* Replace FMT_HTTP_RS(), FMT_TCP_RS() and FMT_DNS_RS() with FMT_CHK().
+	  They were all simply defined to be FMT_CHK() so just replace them
+	  with that. This made it much simpler to find all used of FMT_CHK().
+	* Fix building with gcc 4.4.7 (Centos 6.5).
+	  gcc v4.4.7 doesn't support -Wfloat-conversion, so check for it at
+	  configure time.
+	* Add dumping checker config/status when receive SIGUSR1.
+	* Don't put alpha mode checkers into failed state at reload
+	  If a new checker is added at a reload, unless the real server aleady
+	  has failed checkers, then ignore the alpha mode of the checker. This
+	  means that the real server, if up, won't be taken down and then brought
+	  back up again almost straight away. If the real server already has
+	  failed checkers, then setting an alpha mode checker down initially
+	  won't take down the real server, so we can allow the alpha mode setting
+	  to apply.
+	* Handle alpha mode checkers initial failure at startup better.
+	* Fix compile failure discovered by Travis-CI.
+	* Fix calling syslog when not using signalfd().
+	  Pull request #1149 identified that syslog is AS-Unsafe (see signal-safety
+	  man page), and that therefore signals should be blocked when calling it.
+	  This commit blocks signals when calling syslog()/vsyslog() when signalfd()
+	  is not being used.
+	* Rationalise function attributes.
+	* Fix enable-optimise configure option.
+	* Use AS_HELP_STRING for all options in configure.ac.
+	* Streamline genhash -h option.
+	* Make genhash -v version match keepalived.
+	* Fix config check of virtual server quorum against weights of real
+	  servers.
+	* Fix some configure tested checks for OPENSSL_init_crypto.
+	* Add infrastructure for adding additional compiler warnings.
+	* Add standard and extra compiler warnings.
+	* Add and resolve missing-declarations and missing-prototypes warnings
+	  Approximately 16 additional functions are now declared static.
+	* Add and resolve old-style-definitions warnings
+	* Add and resolve redundant-decls warnings
+	* Add and resolve jump-misses-init warnings
+	* Add and resolve shadow warnings
+	* Add and resolve unsuffixed-float-constants warnings
+	* Add and resolve suggest-attribute=const warnings
+	* Add and resolve suggest-attribute=format warnings
+	* Add and resolve suggest-attribute=malloc warnings
+	* Add and resolve suggest-attribute=noreturn warnings
+	* Add and resolve suggest-attribute=pure warnings
+	* Add and resolve unused-macros warnings
+	* Add and resolve null-dereference warnings
+	* Add and resolve float-equal warnings
+	* Add and resolve stack-protector warnings
+	* Add and resolve strict-overflow=4 warnings
+	* Add and resolve pointer-arith warnings
+	  This particularly includes adding a number of bytes to a void *.
+	* Add and resolve cast-qual warnings
+	* Resolve additional warnings identified on Centos 6.5/gcc 4.4.7
+	* Remove static from zalloc()
+	* Fix some compiler warnings on Ubuntu Xenial, and add comments re
+	  others.
+	* Rename LIST parameters to lst in list_head.h to avoid upper case.
+	* Fix real server checkers moving from failed to OK on reload.
+	* add rs judgement in migrate_checkers.
+	* Detect connection failure in genhash and exit rather than loop.
+	* Add another function pure attribute.
+	* Fix sending notifies for vrrp instances at startup when in sync group
+	  Issue #1155 idenfified that notify scripts for vrrp instance transition
+	  to backup state when keepalived started up were not being sent if
+	  the vrrp instance was in a sync group. It was also the case that SNMP
+	  traps, SMTP alerts and FIFO notifies were not being sent either.
+	  This commit make keepalived send the initial notifies when the vrrp
+	  instance is in a sync group.
+	* Fix building keepalived RPM on Fedora 26.
+	  For some reason -fPIC is needed when testing for the presence of
+	  setns().
+	* Add vrrp_startup_delay configuration option.
+	  Some systems that start keepalived at boot time need to delay the
+	  startup of the vrrp instances, due to network interfaces taking
+	  time to properly come up. This commit adds a global configuration
+	  option vrrp_startup_delay that delays the vrrp instances starting
+	  up, for the specified number of seconds.
+	* Handle checkers properly when reload immediately after startup.
+	* Streamline some of the SMTP checker code.
+	* Create separate checker for each host in SMTP_CHECK block
+	  Having multiple host entries in an SMTP_CHECK block is deprecated.
+	  This commit streamlines the SMTP_CHECK code by creating a separate
+	  SMTP checker for each host declared in the SMTP_CHECK block, so that
+	  apart from parsing the configuration, the code no longer handles
+	  multiple hosts per checker.
+	  The support for parsing configuration with multiple hosts is only
+	  enabled if WITH_HOST_ENTRIES is defined in check_smtp.c. It is
+	  currently enabled, but when support for multiple hosts in the
+	  SMTP_CHECK block is finally removed, it will simply be a matter of
+	  deleting all code in the WITH_HOST_ENTRIES conditional blocks.
+	* Make checker fail if ENETUNREACH returned by connect().
+	  The connect() call can return some immediate errors such as ENETUNREACH.
+	  These were not being treated as a failure of the checker, since the code
+	  used to assume that any non success return by connect() meant that the
+	  connection was in progress.
+	  keepalived will now treat ENETUNREACH, EHOSTUNREACH, ECONNREFUSED,
+	  EHOSTDOWN, ENETDOWN, ECONNRESET, ECONNABORTED, ETIMEDOUT, when returned
+	  by connect(), as meaning that the checker has failed.
+	* Don't set SO_LINGER with a timeout of 0
+	  SO_LINGER with a timeout of 0 causes a TCP connection to be reset
+	  rather than cleanly closed. Instead of specifying a timeout of 0,
+	  use 5 seconds, so that there is an orderly shutdown of the TCP
+	  connection, but the close socket doesn't remain in TIMED_WAIT state
+	  for more than a short time.
+	* nftables: fix build with kernel lower than 4.1.
+	* Remove dead code & cosmectics.
+	  Remove code marked as UNUSED where things simply go nowhere even if
+	  define is set. We keep for the moment UNUSED code related to debug
+	  helpers used during coding process.
+
+2019-02-19 Alexandre Cassen <acassen@keepalived.org>
+	* keepalived-2.0.13
+	* Add BFD build option to keepalived.spec rpm file
+	  Issue #1114 identified that the keepalived.spec file was not being
+	  generated to build BFD support even if keepalived had been configured
+	  to support it.
+	* Copy tarball to rpmbuild/SOURCES when building in place
+	  It seems that even when building in place, rpmbuild expects the
+	  tarball to be in the rpmbuild/SOURCES directory.
+	* Fix configure check for __always_inline
+	* Handle interface MAC addresses changing
+	  When an interface is added to a bond interface, if it is the first
+	  interface added, the MAC address of the bond interface is changed
+	  to the MAC address of the added interface. When subsequent interfaces
+	  are added, their MAC addresses are changed to that of the bond
+	  interface.
+	  Issue #1112 identified that if a bond interface is deleted and
+	  recreated, the gratuitous ARPs were sent with the wrong source MAC
+	  address.
+	  This commit now updates interface MAC addresses from the netlink
+	  RTM_NEWLINK messages, so that the correct MAC address is always
+	  used.
+	* Minor tidying up of opening gratuitous ARP socket.
+	* Streamline setting SOCK_NONBLOCK on vrrp sockets.
+	* Use netlink reported hardware address length for unsolicited NAs
+	  ETH_ALEN is correct for Ethernet type interaces, but is not right
+	  for Infiniband interfaces.
+	* Minor tidying up of opening gratuitous NA socket.
+	* Make gratuitous ARP/NA sockets non blocking
+	  keepalived shouldn't block when sending gratutious ARP/NA messages.
+	  It is better to lose the messages than for keepalived to block, so
+	  set the sockets non blocking.
+	* Use netlink provided broadcast address for gratuitous ARP
+	  If an interface has a non-standard broadcast address, we should
+	  honour it.
+	* Fix building on pre 3.10 kernels re track_process
+	  Issue #1119 reported that keepalived wouldn't build on CentOS 6.
+	  Various PROC_EVENT_* declarations were assumed to exist, some of which
+	  were not introduced until Linux v3.10. Most of them are not needed, but
+	  PROC_EVENT_COMM is used by the track_process code.
+	  This commit now checks for the existence of the PROC_EVENT_* declarations,
+	  but since keepalived uses PROC_EVENT_COMM, track_process is not supported
+	  prior to Linux v3.2.
+	* Make track_process work prior to Linux 3.2, but with limitations
+	  Prior to Linux 3.2 the PROC_EVENT_COMM event did not exist, which
+	  means that keepalived is unable to detect changes to process name
+	  (/proc/PID/comm) prior to Linux 3.2. most processes do not change
+	  their process name, and so using track_process prior to Linux 3.2
+	  is safe so long as the monitored processes are known not to change
+	  their process name.
+	* Stop configure failing when nftables is not supported.
+	* Streamline socket use with linkbeat.
+	  Previously the socket used for ioctls was opened and closed twice per
+	  poll if using MII or ETHTOOL polling, and once per poll if using ioctl
+	  polling. This commit opens the socket once at startup, uses that socket
+	  for all linkbeat polls, and closes it on termination.
+	* Enable linkbeat polling to work with dynamic interfaces.
+	* Add linkbeat_interfaces configuration block
+	  It was not possible to indicate that an interface that wasn't used
+	  as the interface of a vrrp instance, but was used either as a track
+	  interface, or for virtual/static ip addresses or routes should use
+	  linkbeat. This commit adds that capability.
+	* Add ability to specify linkbeat type in linkbeat_interfaces block.
+	* Add --disable-linkbeat configure option
+	  Does anyone use linkbeat anymore? This commit enables keepalived to
+	  be build without the linkbeat code.
+	* Don't remove link local IPv6 address from VMAC that isn't keepalived's
+	  If IFLA_INET6_ADDR_GEN_MODE isn't supported and a macvlan interface
+	  already had a (non-default) link local addresss and the link local
+	  address that matched the interface's MAC address was added, keepalived
+	  was removing it as soon as it was added. This commit stop keepalived
+	  removing the address when we shouldn't.
+	* Set configure init type correctly in keepalived.spec file.
+	* Fix handling of VMACs with multiple reloads
+	  If a configuration is loaded that has a VRRP instance using a VMAC,
+	  then the configuration is updated to remove that VRRP instance and
+	  keepalived reloads its configuration, then the configuration is
+	  updated again to reinstate the VRRP instance and the configuration
+	  is again reloaded, keepalived thought the VMAC interface still
+	  existed, whereas it was deleted following the first reload.
+	  This commit ensures that keepalived properly detects whether an
+	  interface exists following a reload.
+	* Remember more than one interface local address per interface
+	  Keepalived needs a local address for each interface it sends adverts
+	  on. If the address keepalived is using is deleted and another address
+	  is configured on the interface, then keepalived should start using
+	  that address. To do this, a list of configured address on each
+	  interfaces needs to be maintained.
+	* Don't consider VIPs as local addresses when restart after crash
+	  Keepalived maintains a list of addresses per interface that can be
+	  used as source adddresses for adverts. To build the list, keepalived
+	  reads the addresses configured on interfaces when it starts. However,
+	  if keepalived crashed it will have left VIPs configured on interfaces,
+	  and we don't want to use them as advert source addresses.
+	  This commit makes keepalived compare the addresses on interfaces
+	  to VIPs, and ignores any addresses that are VIPs.
+	* Fix removing left over VIPs at startup.
+	* Use read_timer() when parsing config where appropriate.
+	* Allow fractional warmup, delay_loop and delay_before_retry for checkers
+	  To shorten the real server monitoring interval, make it possible to specify
+	  decimal value for following items:
+		warmup
+		delay_loop
+		delay_before_retry
+	* Update connect_timeout configuration options
+	  Based on the patch submitted by tamu.0.0.tamu@gmail.com this patch
+	  allows setting the connect_timeout to a resolution of micro-seconds.
+	  The patch also adds the ability to set a default value at the virtual
+	  server and real server levels.
+	* Fix unused variable warning when building only with RFC compliant
+	  SNMP.
+	* It enable to set zero value as mintime for delay_loop and connect_timeout.
+	* Add option not to check for EINTR if using signalfd()
+	  If keepalived is using signalfd(), there are no asynchronous signal
+	  handlers, and therefore EINTR cannot be returned.
+	  Currently the check for EINTR is enabled by default, and configure
+	  option --disable-eintr-debug disables the check, while
+	  --enable-eintr-debug enables writing log entries if EINTR is returned.
+	  Once sufficient testing has been performed, the default will be
+	  changed not to test for EINTR if signalfd() is supported.
+	* Make checking for EAGAIN/EWOULDBLOCK consistent
+	  The code in some places checked errno for EAGAIN and EWOULDBLOCK
+	  and in other places only checked EAGAIN. On Linux EAGAIN == EWOULDBLOCK,
+	  so the check is not necessary, but EAGAIN is not guaranteed to be the
+	  same value as EWOULDBLOCK, so define check_EAGAIN that only checks EAGAIN
+	  if they are the same value, but checks both if they are different.
+	* Ensure default connection timeout for smtp checker hosts set.
+	* Set default connection timeout if no smtp check host specified.
+	* Fix min timer value, zero to 0.000001Sec.
+	* Add fixing min time for vs_co_timeout_handler() and rs_co_timeout_handler().
+	* Fix parameter of read_timer(), it treat Mintime and Maxtime as microseconds.
+	* vrrp: vrrp_dispatcher_read() performance extension
+	  We took time with Quentin to simulate and rework this code. We introduced
+	  2 imbricated while loop:
+	  (1) First one is catching recvfrom EINTR (this code trig
+	      only on kernel older than 2.6.22 where signalfd was firstly introduced).
+	      Newer kernel will immediately break the loop (hey guys: if you are running
+	      older than 2.6.22 it is worth considering upgrading).
+	  (2) Second loop will continue reading from socket until same VRID advert
+	      has been received during the same cycle. After simulating, it appears that
+	      during contention with a lot of VRRP instances (around 1500), this design
+	      is needed to relax socket recvq from growing. This can be viewed as a
+	      Poll-Mode activation during contention and fallback to regular I/O MUX
+	      during normal operations. This loop breaks immediately and re-submit
+	      opration to I/O MUX when there is no more to be read.
+	* Fix conversion from long for double in read_timer().
+	* Remove variable timer of unsigned long cast in read_timer().
+	  When Double type variable timer is cast to long type, it's scale falls.
+
+2019-01-26 Alexandre Cassen <acassen@keepalived.org>
+	* keepalived-2.0.12
+	* Documentation related.
+	  Remove keepalived.conf.SYNOPSIS content to make a pointer to manpage.
+	  Update README manifest to reflect actual Keepalived goal and features.
+	* Improve error message if process events connector not enabled in
+	  kernel.
+	* Add option to disable track-process functionality
+	  Issue #1099 reported that their kernel did not support the proc events
+	  connector, and it would therefore be helpful to have an option to build
+	  keepalived without the track-process functionality.
+	  This commit adds the --disable-track-process configure option.
+	* Fix vrrp instances going to fault state when have virtual routes
+	  If an interface going down caused a vrrp instance to go to fault
+	  state, and the vrrp instance also had virtual routes, the state
+	  of the vrrp instance would be set to backup when the deletion of
+	  the virtual route was detected. This commit ensures that the vrrp
+	  instance stays in fault state until the interface is brought up
+	  again.
+	* Remove Red Hat Linux 9 and RH Enterprise Linux 3 from spec file.
+	  Red Hat Linux 9 and Red Hat Enterprise Linux 3 are both based on
+	  Linux 2.4, which is no longer supported by keepalived. The options
+	  in the spec file for Reh Hat Linux 9 have twice caused people to
+	  specify wrong options to configure when trying to build keepalived,
+	  so the options are removed to i) avoid confusion and ii) they are
+	  not longer relevant.
+	* Add global option vrrp_min_garp.
+	  By default keepalived sends 5 gratuitous ARP/NA messages after
+	  transitioning to master, and 5 more 5 seconds later. This isn't
+	  necessary with modern switches, and so if the vrrp_min_garp option
+	  is set, only one gratuitious ARP/NA message is sent after transition
+	  to master, and no repeat messages are sent 4 seconds later.
+	* Standardise definition of _INCLUDE_UNUSED_CODE_
+	* Remove out of date comment re VRRP over IPv6.
+	* Correct typo in keepalived.conf.5.
+	* Directly use structure sizes for packet header lengths.
+	* vrrp_state_fault_rx() is not used.
+	  Wrap the function in conditional compilation so it is not compiled
+	* Convert so list loops to use LIST_FOREACH.
+	* Don't recalculate vrrp packet header address.
+	  vrrp_get_header() calculates the address of the vrrp header in a
+	  received packet, but it was being recalculated in vrrp_in_chk().
+	  This commit passes the already calculated address to vrrp_in_chk().
+	* Ensure a received packet has an AH header if and only if AH auth.
+	  Ensure that a received packet has an AH header if we expect AH
+	  authentication, and doesn't have an AH header if we don't expect
+	  AH authentication.
+	* Ensure all protocol headers received before return pointer to vrrp header
+	  vrrp_get_header() returns a pointer to the vrrp header, but it now returns
+	  NULL if insufficient data has been received to include all the (IP,
+	  possibly AH, and VRRP) headers (this does not include the VIPs in the VRRP
+	  packet).
+	  This means that when a pointer to the VRRP header is returned, all fields in
+	  all protocol headers can safely be accessed.
+	* Add check of received IPv6 hop count in multicast adverts
+	  The VRRP RFC requires that IPv6 hop count MUST be checked to be 255,
+	  just as the TTL for IPv6 must be 255. Previously that wasn't being
+	  checked, since IPv6 raw sockets don't provide access to the IPv6
+	  header.
+	  Using recvmsg() rather than recvfrom(), and setting socket option
+	  IPV6_RECVHOPLIMIT allows keepalived to receive the hop count as
+	  ancillary data, and that can now be checked.
+	* Improve reading from vrrp receive sockets.
+	  Previously no check was made of the return value from recvfrom()/
+	  recvmsg(). This meant than an error could occur (e.g. EINTR), or no
+	  data might be returned, and keepalived would still attempt to process
+	  the receive buffer as though data had been received.
+	* Enhance and streamline checking of validity of received VRRP packet
+	  This includes checking that a packet is multicast, unless unicast is
+	  expected in which case it is checked for unicast, ensuring that if
+	  AH authentication is used, the next header protocol is VRRP.
+	  The sequence of some checks is revised to ensure that the fields being
+	  checked are valid to be accessed prior to accessing them, e.g. check
+	  that the packet is VRRP version 2 before checking the authentication.
+	* Stop clearing receive buffer before receiving VRRP packets.
+	  This is no longer necessary now that the appropriate checks are
+	  made of the return status of recvmsg(), and also that the checks
+	  of received packet length and packet headers now do all necessary
+	  checks.
+	* Add compile time checks for IPV6_RECVHOPLIMIT/IPV6_RECVPKTINFO
+	  support.
+	* Update keepalived.spec.in build-requires.
+	  The kernel package required for building keepalived is kernel-headers
+	  not kernel-devel. Also, it is superfluous to have package kernel in
+	  the build-requires!
+	* Add missing file (build.setup) to tarball.
+	* Fix calculating print format to rlim_t in configure.ac.
+	* Fix compiler warnings on 32 bit systems re HASH_UPDATE.
+	  Removing all the casts stopped the warnings.
+	* Use PRI_rlim_t when printing rlim_t types.
+	* Use %zd/%zu for ssize_t/size_t to avoid warnings on 32 bit systems.
+	* Fix some space/tab formatting.
+	* Stop declaring some timer definitions unsigned to stop compiler
+	  warnings.
+	  TIMER_HZ, TIMER_CENTI_HZ, NSEC_PER_SEC were causing some compiler warnings
+	  on some systems due to being defined with a 'U' unsigned suffix. Removing
+	  the unsigned specifier stopped the compiler warnings.
+	* Fix compiler warning due to incorrect format specifier.
+	  An int64_t should use % PRIi64 and not %ld
+	* Stop an uninitialized variable compiler warning.
+	* Fix MEM_CHECK debugging on processors without unaligned memory
+	  access.
+	* Don't attempt to use unopened socket for getting ipset version.
+	* Tidy up an error message.
+	* vrrp: make vrrp_dispatcher_read() async while catching error.
+	  During investigations we decided to update previous patch to resubmit
+	  into I/O MUX on read error. It will make read procedure I/O MUX freindly
+	  by removing potential sync operation potentially leading to a global
+	  I/O MUX desync. We aggreed, the situation is really and very exceptionnal
+	  but could happen.
+	* vrrp: vrrp_arp_thread split.
+	  Split the function for maintainability purpose.
+
+2019-01-06 Alexandre Cassen <acassen@keepalived.org>
+	* keepalived-2.0.11
+	* Fix segfault while shutting down when SNMP activity occurs.
+	  Issue #1061 identified that keepalived could segfault when it
+	  shut down. It appears that this was caused by data being received
+	  on the file descriptors that the snmp agent requests keepalived
+	  to monitor with epoll(). Since the read threads weren't being
+	  processed during a shutdown, the first time an snmp fd was ready,
+	  keepalived discarded the read thread. The second time that fd became
+	  ready there was no thread to handle the fd, and, since the assert()
+	  statement was not compiled in, non existant data was queued to the
+	  thread ready queue.
+	  This commit changes the assert() calls to continue, so that non existant
+	  data is no longer queued to the thread ready queue.
+	* While shutting down, continue to handle snmp agent fds.
+	  Since we don't shutdown the snmp connection until the very end of
+	  the shutdown process (we need to be able to send snmp traps), we
+	  should continue to handle the snmp fds on behalf of the snmp agent
+	  while shutting down.
+	* Ensure snmp agent is in correct state when initialising/closing
+	  Make sure the snmp agent is not already initialised before
+	  initialising it, and make sure it has been initialised before
+	  closing it.
+	* Disable asserts in bfd code by default and add --enable-asserts
+	  Asserts were enabled by default in the bfd code, which shouldn't be
+	  the case.
+	  Add --enable-asserts configure option so that the asserts tests can
+	  be enabled while debugging.
+	* Remove debugging log message accidently left in.
+	* Update receive buffers when interface is created.
+	  The receive buffer size used by keepalived is based on the largest
+	  MTU of any interface that keepalived uses. If dynamic interfaces
+	  are being used and an interface is created after keepalived has
+	  started, the MTU of the new interface may be larger than the
+	  previous largest, so the receive buffer may need to be increased
+	  in size.
+	  Further, if vrrp_rx_bufs_policy is MTU, then the kernel receive
+	  buffers on the receive socket may need to be increased.
+	* Handle MTU sizes being changed.
+	  Issue #1068 identified that the MTU size wasn't being updated in
+	  keepalived if it changed.
+	  This commit now updates the MTU size and adjusts receive buffer
+	  sizes accordingly.
+	* Fix syntax error in configure.ac.
+	* Fix double free when global data smtp_helo_name copied from local_name
+	  Issue #1071 identified a double free fault. It occurred when smtp_helo_name
+	  was not set, in which case it was set to point to the same malloc'd memory
+	  as local_name. At termination keepalived freed both local_name and
+	  smtp_helo_name.
+	  If keepalived needs to use local_name for smtp_helo_name it now malloc's
+	  additional memory to copy the string into.
+	* Rename TIMER_MAX to TIMER_MAXIMUM.
+	  ulibC defines TIMER_MAX, so to avoid naming conflict rename it.
+	  This issue was reported by Paul Gildea <gildeap@tcd.ie> who also
+	  provided the patch.
+	* Fix segfault when smtp alerts configured.
+	* First working version of nftables.
+	* Restructed code around how iptables/nftables are called
+	  This commit also allows building keepalived without iptables
+	  support, thereby allowing only nftables support.
+	  Adding any other mechanism to handle no_accept mode, i.e. blocking
+	  receiving and sending to/from VIPs should be added to vrrp_firewall.c,
+	  in a similar way to how nftables/iptables are used.
+	* Update doc files re nftables.
+	* Make nftables handle dont_track_primary appropriately.
+	* Fix config reload with nftables.
+	* Set base chain priorities from configuration.
+	* Use iptables by default if neither iptables or nftables configured.
+	  But if the build of keepalived does not include iptables, then use
+	  nftables default.
+	* Stop dumping keywords - left turned on after debugging.
+	* Make umask configuration apply to created file.
+	* Add libmnl and libnftnl to travis file.
+	* Fix compilation failure when NFTNL_EXPR_LOOKUP_FLAGS not defined.
+	* Fix compilation failure when build with nftables but without iptables.
+	* Fix order of include files in configure COLLISION test.
+	  Since Linux 4.4.11 (commit 1575c09) including linux/if.h after
+	  net/if.h works, whereas until glibc fix their headers including
+	  net/if.h after linux/if.h causes compiler redefinition errors.
+	  Unfortunately the test for the collision was done the wrong way
+	  round, as identified in issue #1079. The patch included in the
+	  issue report corrects the order of inclusion of the header files.
+	  What we should do is ensure that glibc header files are included
+	  before Linux header files, so that at least if kernel headers from
+	  4.4.11 onwards are used, the conflict will not occur.
+	* Set CLOEXEC on netlink sockets.
+	* Correct error message for invalid route metric.
+	* Add track_process for vrrp to monitor if another process is running.
+	  Configurations frequently include a track_script to check that a process
+	  is running, often haproxy or nginx. Using any of pgrep, pkill, killall,
+	  pidof, etc, has an overhead of reading all /proc/[1-9]*/status and/or
+	  /proc/[1-9]*/cmdline files. In particular reading the cmdline files
+	  has a significant overhead on a system that is swapping, since the
+	  cmdline files provide access to part of the address space of each
+	  process, which may need to be fetched from the swap space.
+	  This commit reads the /proc/[1-9]*/stat and/or the /proc/[1-9]*/cmdline
+	  files only when keepalived starts, and after that uses the process events
+	  connector to track process creation and termination.
+	  keepalived will ignore zombie processes, whereas pgrep etc include them.
+	  A minimum number of instances of a process can be specified, and also a
+	  delay so that if a process is restarted, it won't cause monitoring vrrp
+	  instances to immediately transition to fault state but to wait the
+	  configured time and it the monitored process starts again it
+	  won't transition to fault state.
+	  There are potential difficulties with the process event connector if a
+	  large number of process events occur very rapidly, since there can be
+	  a receive buffer overrun on the netlink socket. This code will detect
+	  that happening, increase the receive buffer size, and reread the processes
+	  from /proc.
+	* Add missing #include to track_process.c.
+	* Fix number of elements of fd_set read for snmp select info.
+	* Remove thread_event_t when EPOLL_CTL_DEL fails.
+	  If snmpd closes a file descriptor, when keepalived attempts to
+	  unregister the fd from epoll an error is returned. However, we still
+	  need to remove the thread_event_t from the io_events rbtree.
+	* Fix connection to snmpd after it has to reconnect.
+	  Issue #1080 identified that keepalived wasn't handling a connection
+	  failure and reconnect to snmpd properly. The problem was created when
+	  the change from select() to epoll() was made.
+	  This commit makes keepalived unregister and reregister the snmp file
+	  descriptors after snmpd reconnects.
+	* Fix retry count for SMTP_CHECK checker.
+	  The checker was doing one too few retries.
+	* Make healthchecker failure reporting consistent
+	  Some healthcheckers were reporting all failures, and others only when
+	  the retries expired. This commit by default makes the checkers only
+	  report failure when the retries expire, unless the global keyword
+	  checker_log_all_failures or log_all_failures on the specific checker
+	  is configured.
+	* After reload, reinitialise current track processes state.
+	* Remove unused variable in track_process.c.
+	* Add configure checks re --with-kernel-dir.
+	* Convert remaining select() to epoll_wait().
+	  keepalived was using select() for handling the termination of child
+	  processes, but the main scheduling loop now uses epoll_wait(), so
+	  convert the select() to epoll_wait() from consistency.
+	* Stop keepalived leaving zombie child processes.
+	  keepalived wasn't reaping the termination of its child processes,
+	  so this commit adds waitpid() calls once it knows the processes
+	  have terminated.
+	* Fix make distclean and make distcheck.
+	* Also skip route not configured with down interface.
+	  Otherwise, if keepalived has virtual_routes configured, we create
+	  a virtual interface and bring it up and down, current code will bring
+	  VRRP state to FAULT and never return.
+	* Stop vrrp process entering infinite loop when track script times out
+	  Issue #1093 identified that the vrrp process was entering an infinite
+	  loop after a track script timed out. This was due to a child process
+	  thread having an RB tree for PIDs as well as for the timeout, and if
+	  a child process timed out, the thread wasn't being removed from the
+	  PID RB tree. This commit now ensures it is removed.
+	* Fix the abbreviation of Shortest Expected Delay.
+	* Don't free unallocated memory if not tracking processes.
+	* vrrp: Rewrote JSON code
+	  Remove dependency to json-c extralib by using a simple streaming JSON writter.
+	  Refactored code to make it simple to maintain.
+	* vrrp: Fix JSON handling for v{route;rule}.
+	* autoconf: fix nftables selection
+	  We need to inhibit nftable compilation if compiling system has
+	  kernel header file nf_tables.h but not libnftnl nor libmnl.
+
+2018-11-12 Alexandre Cassen <acassen@keepalived.org>
+	* keepalived-2.0.10
+	* Fix compiling on Alpine Linux.
+	* Stop printf compiler warning on Alpine Linux due to rlim_t.
+	* manpage cosmetic.
+	* Fix removing snmpd read threads when snmpd becomes unavailable.
+	* Update to support libipset version 7.
+	* Use ipset_printf for ipset messages so can go to log.
+	* When opening files for write, ensure files can only be read by root.
+	  Issue #1048 referred to CVE-2018-19046 regarding files used for
+	  debugging purposes could potentially be read by non root users.
+	  This commit ensures that such log files cannot be opened by non root
+	  users.
+	* Disable fopen_safe() append mode by default
+	  If a non privileged user creates /tmp/keepalived.log and has it open
+	  for read (e.g. tail -f), then even though keepalived will change the
+	  owner to root and remove all read/write permissions from non owners,
+	  the application which already has the file open will be able to read
+	  the added log entries.
+	  Accordingly, opening a file in append mode is disabled by default, and
+	  only enabled if --enable-smtp-alert-debug or --enable-log-file (which
+	  are debugging options and unset by default) are enabled.
+	  This should further alleviate security concerns related to CVE-2018-19046.
+	* vrrp: add support to constant time memcmp.
+	  Just an update to use best practise security design pattern. While
+	  comparing password or hmac you need to ensure comparison function
+	  is time constant in order to figth against any timing attacks. We
+	  turn off potential compiler optimizations for this particular
+	  function to avoid any short circuit.
+	* Make sure a non privileged user cannot read keepalived file output
+	  Ensure that when a file such as /tmp/keepalived.data is wriiten,
+	  no non privileged can have a previous version of that file already
+	  open, thereby allowing them to read the data.
+	  This should fully resolve CVE-2018-19046.
+
+2018-11-08 Alexandre Cassen <acassen@gmail.com>
+	* keepalived-2.0.9
+	* Fix updating a timer thread's timeout.
+	  Issue #1042 identified that the BFD process could segfault. This
+	  was tracked down to a timer thread which had already expired having
+	  its timeout updated by timer_thread_update_timeout().
+	  The sands timer should only be updated if the thread is on a waiting
+	  queue, and not if it has already timed out or it is unused.
+	* Don't requeue read thread if it is not waiting.
+	  This update matches commit 09a2a37 - Fix updating a timer thread's
+	  timeout should.
+	* Allow BFD instance to recover after send error.
+	  If sendto failed in bfd_send_packet(), the bfd instance was put into
+	  admin down state, but there was no means for the bfd instance to
+	  transition out of admin down state.
+	  This commit makes keepalived log the first instance of a sequence of
+	  failures to send a bfd packet, but does not bring the bfd instance down
+	  in case the error is a transient error. If the error is longer lasting,
+	  the remote system will timeout, transition to down state, and send a message
+	  saying it is down.
+	  Once the bfd instance can start sending again the bfd instance can now
+	  transition again to up state.
+	* Make DGB definition use log_message() rather than syslog().
+	* Fix building with --enable-debug configure option.
+	* Start list of required kernel features in INSTALL file.
+	  Issue #1024 asked what kernel features are needed to support keepalived.
+	  The simple answer was that it isn't recorded anywhere, so this is a
+	  start of making a list of the features required.
+	* Make list_remove() call list free function and add list_transfer().
+	  If an element is being removed from a list, the free function should
+	  be called.
+	  list_transfer() allows a list element to be moved from one list to
+	  another without freeing and reallocating the list element control
+	  information.
+	* Add mem_check diagnostics re calling functions of list functions.
+	  When using mem_check, mallocs and frees were recorded against the
+	  list functions, and the originating functions weren't identified.
+	  This patch adds recording of the functions calling the list
+	  functions so that the originating function is identified.
+	* Simplify the processing of comments in configuration files.
+	  This commit moves the handling (and removal) of comments to a
+	  single function (called from read_line()) which simplifies the
+	  processing of config files.
+	* Add ~SEQ(start, step, end) config functionality
+	  Where a configuration has repeated blocks of configuration where
+	  the only thing that changes is a numeric value (e.g. for VRIDs
+	  from 1 to 255) this allows the block to be defined once, and a
+	  single line using ~SEQ can then generate all the blocks.
+	* Use REALLOC when building a multiline definition.
+	  The code used to use MALLOC, strcpy() and FREE, but REALLOC can do
+	  all this for us.
+	* Improve mem-check diagnostics.
+	  When using an allocation list of over 50,000 entries, it was quite slow
+	  searching thtough all the entries to find the matching memory allocation,
+	  and to find free entries. This commit changes to using malloc() to create
+	  entries, and a red-black tree to hold the entries. It also has a separate
+	  list of free entries.
+	  This commit also adds 4 more types of memory allocation error, and
+	  improves the consistency of the entries in the log files.
+	* Don't attempt to delete VMAC when underlying interface is deleted.
+	  If the underlying interface of one of our vmacs is deleted, and we
+	  know the vmac has been deleted, don't attempt to delete it again.
+	* Include master state in determining if vmacs are up or down
+	  Netlink doesn't send messages for a state change of a macvlan when
+	  the master device changes state, so we have to track that for
+	  ourselves.
+	* Turn off parser debugging.
+	* Make test/mk_if create iptables chains.
+	* Handle interfaces not existing when keepalived terminates.
+	  If the underlying interface of a vmac we created has been deleted,
+	  the vmac will not exist so don't attempt to delete it again. Also,
+	  don't attempt to reset the configuration of the underlying interface.
+	* Handle the underlying interface of a macvlan interface going up/down.
+	  The kernel doesn't send netlink messages for macvlans going up or
+	  down when the underlying interface transitions (it doesn't even
+	  update their status to say they are up/down), but the interfaces
+	  don't work. We need to track the state of the underlying interfaces
+	  and propagate that to the macvlan interfaces.
+	* Fix duplicate value in track_t enum.
+	* Fix check for matching track types.
+	* Treat macvtap interfaces in the same way as macvlan interfaces.
+	* Improve handling of interfaces not existing when keepalived starts.
+	* Fix handling interface deletion and creation of vmacs on macvlan i/fs.
+	* When interface created, open sockets on it if used by VRRP directly
+	  If an interface is created that has vrrp instances configured on it
+	  that don't use VMACs, or use vmac_xmit_base, then the raw sockets
+	  must be opened.
+	* Force seeing a transition to up state when an interface is created.
+	* Fix netlink remnant data error.
+	* Add command line and configuration option to set umask.
+	  Issue #1048 identified that files created by keepalived are created
+	  with mode 0666. This commit changes the default to 0644, and also
+	  allows the umask to be specified in the configuration or as a command
+	  line option.
+	* Fix compile warning introduced in commit c6247a9.
+	  Commit c6247a9 - "Add command line and configuration option to set umask"
+	  introduced a compile warning, although the code would have worked OK.
+	* When opening files for write, ensure they aren't symbolic links.
+	  Issue #1048 identified that if, for example, a non privileged user
+	  created a symbolic link from /etc/keepalvied.data to /etc/passwd,
+	  writing to /etc/keepalived.data (which could be invoked via DBus)
+	  would cause /etc/passwd to be overwritten.
+	  This commit stops keepalived writing to pathnames where the ultimate
+	  component is a symbolic link, by setting O_NOFOLLOW whenever opening
+	  a file for writing.
+	  This might break some setups, where, for example, /etc/keepalived.data
+	  was a symbolic link to /home/fred/keepalived.data. If this was the case,
+	  instead create a symbolic link from /home/fred/keepalived.data to
+	  /tmp/keepalived.data, so that the file is still accessible via
+	  /home/fred/keepalived.data.
+	  There doesn't appear to be a way around this backward incompatibility,
+	  since even checking if the pathname is a symbolic link prior to opening
+	  for writing would create a race condition.
+	* Make netlink error messages more meaningful.
+	* Fix compiling without support for macvlans.
+	* fix uninitialized structure.
+	  The linkinfo and linkattr structures were not initialized,
+	  so we should not expect that unexistant attributes are set
+	  to NULL. Add the missing memset().
+	* fix socket allocation with dynamic interfaces.
+	  When there are several vrrp instance binding different interfaces that
+	  don't exist at startup, their ifindex is set to 0 in the sock. The
+	  function already_exist_sock() that lookup for an existing socket will
+	  always return the first sock because the ifindex is the same.
+	  Later, when an interface appears, the fd will be created for one
+	  instance, and all instances will wrongly use this fd to send the
+	  advertisments.
+	  Fix this by using the interface structure pointer instead of the
+	  ifindex as the key for sock lookup.
+	  The problem was identified by Olivier Matz <olivier.matz@6wind.com>
+	  who also provided a patch fixing the problem. This patch is a slight
+	  rework of Olivier's patch, better using the existing data structures
+	  that keepalived already holds.
+	* When creating a macvlan interface, use AF_UNSPEC rather than AF_INET.
+	* Stop using libnl for configuring interfaces.
+	  Since there is code to configure the interfaces using netlink without
+	  using libnl, there is no point in having code to do it using libnl.
+	* Fix building on Centos 6.5.
+	* Stop including some files not needed after libnl removal for i/fs.
+	* Fix some compilation issues when building without vrrp support.
+	* Stop using linbl for mcast group membership and setting rx buf sizes.
+	  Since there is code to handle multicast group membership and
+	  setting kernel netlink receive buffer sizes without using libnl,
+	  there is no point in having code to do it using libnl.
+	  This now means that the vrrp functionality no longer uses libnl.
+	* Add some sanity checking of configure options.
+	  Certain invalid combinations of configure options could cause compile
+	  errors, e.g. --disable-vrrp --enable-vrrp-fd-debug. This commit ensures
+	  that invalid combinations aren't allowed, in order to stop the compile
+	  errors.
+	* Fix invalid configuration combination caught by previous commit.
+	* Use netlink to set/clear rp_filter on interfaces.
+	* Fix configure for building without vrrp.
+	* Actually update the .travis.yml file to fix the problem.
+	* Fix conditional compilation re epoll-thread-dump debugging.
+	* Update INSTALL file now no longer use libnl-route-3.
+	* Stop cast to incompatible function type warnings from gcc 8.1.
+	* Update snapcraft.yaml not to include libnl-route-3.
+	* keepalived exit with non-zero exit code if config file not readable.
+	* Allow specifying default config file at configure time.
+	* Use keepalived define for exit code when malloc failure.
+	* Fix configuring fixed interface type.
+	* Add configuring keepalived default configuration file.
+	* Fix return value in get_time_rtt() error path.
+	* Update generation of git-commit.h.
+	* snapcraft.yaml: Enable all sensible build options. Preserve build time
+	  version in the snap version. Expose genhash.
+	* snapcraft.yaml: Build keepalived with Linux 3.13 headers.
+	* snap: Add an install hook to make sure a keepalived configuration exists.
+	* snap: Move the hooks to the correct location.
+	* snap: Make sure /etc/keepalived exists.
+	* Fix building with IP_MULTICAST_ALL in linux/in.h but not netinet/in.h
+	  Issue #1054 identified that configure was checking the definition of
+	  IP_MULTICAST_ALL in linux/in.h but including netinet/in.h, which also
+	  has the definition, but only from glibc 2.17.
+	  This commit creates a local definition (in lib/config.h) of IP_MULTICAST_ALL
+	  if it is defined in linux/in.h but not in netinet/in.h. The reason for
+	  this is that compiles using linux/in.h fail due to conflicting definitions.
+	* Fix creating iptables tables in mk_if.
+	* Update .travis.yml to use xenial.
+	* Update .travis.yml to add --enable-regex option.
+	* Tidy up .travis.yml file.
+	* snap: Build multiple keepalived binaries.
+	* Updated snapcraft builds to support multiple kernel versions.
+
+2018-10-21 Alexandre Cassen <acassen@gmail.com>
+	* keepalived-2.0.8
+	* Improve identifing interface as macvlan when reading interface details
+	* Enslave a VMAC to the VRF master of the underlying interface.
+	* Use addattr32 rather than addattr_l for if_index.
+	* Only include VRF support if kernel headers support it.
+	* Fix --enable-timer-debug configure option.
+	* Fix some configure.ac enable option tests.
+	* Include stdbool.h in process.c.
+	* Fix diagnostic message re ignoring weight of tracked interface.
+	* Fix track_bfds with weights.
+	* Correct conditional compilation definition name.
+	* Fix memory leak in HTTP_GET/SSL_GET.
+	* Fix two memory leaks in DNS_CHECK.
+	* Don't consider retries for BFD_CHECK. The BFD_CHECKer doesn't support
+	  retries, and the check was causing the checker not to transition to
+	  down state.
+	* Fix memory leak with BFD_CHECK.
+	* Restart global notify FIFO handler after reload.
+	* modify @WITH_REGEX@ to @WITH_REGEX_TRUE@
+	* Fix compiling without BFD support.
+	* Stop bfd process sending double the number of packets.
+	  If a bfd process received an initial bfd packet, it scheduled a
+	  second bfd_sender_thread thereby causing two packets to be sent
+	  in every interval.
+	* Use timerfd for select timeouts rather than select timeout parameter
+	  This is a precursor to moving to using epoll.
+	* Use epoll rather than select.
+	  epoll is both more efficient than select and also doesn't have a
+	  file descriptor limit of 1024, which limited the number of vrrp
+	  instances that could be managed.
+	  This commit also introduces read-black trees and the list_head
+	  list type.
+	* Add --enable-timer-check option for logging calls for getting time
+	  Calls to update the current time from the kernel are made too
+	  frequently, and this patch logs when the calls are made, and how
+	  long since the previous call, so unnecessary calls can be removed.
+	* Add debug option for monitoring epoll queues.
+	  This is enabled by --enable-epoll-debug and replaces
+	  --enable-timer-debug.
+	* Use system monotonic clock to generate a monotonic clock.
+	  Rather than have our own code for creating a monotonic clock, use
+	  the kernel's monotonic clock.
+	* Make some functions in timer.c inline.
+	  The functions had one line of code so inlining them is more
+	  efficient.
+	* Fix requeueing read and write threads after read/write timeouts.
+	* Fix initial allocating and final freeing of thread_master epoll_events.
+	* When cleaning up threads, also clean up their thread_events.
+	* Add thread_close_fd() function to release thread_event_t on close
+	  When a file descriptor that has been monitored by epoll is closed
+	  the thread_event_t structure used for managing epoll for that fd
+	  has to be release. Therefore calls to close() and replace by calls
+	  to thread_close_fd().
+	* Make parent process write log entry when it is reloading.
+	* Move checking for thread timeouts to timerfd_handler
+	  There is no point in checking for thread timeouts if the timerfd
+	  isn't readable; in other words only check for thread timeouts if
+	  the timer has expired.
+	* Make bfd reschuling timer threads more efficient.
+	* Streamline DNS_CHECK code.
+	* Fix buffer overrun with track file path names.
+	* Add timestamp when writing mem_check entries to file.
+	* Ensure thread_event_t released for ready threads at termination.
+	* Increase open file limit if large number of VRRP instances.
+	  Each VRRP instance can use up to 2 file descriptors, and so if there
+	  are more than 500 ish VRRP instances the number of open files
+	  can exceed the default per process limit (1024 on my system).
+	  The commit allows 2 file descriptors per vrrp instance plus a few more,
+	  and if the RLIMIT_NOFILE value returned by getrlimit isn't high enough,
+	  keepalived will increase the limit.
+	* Ensure that child processes run with standard priorities/limits.
+	  When child processes such as notify scripts, track_scripts and
+	  MISC_CHECK scripts are run, they should not inherit any elevated
+	  priorities, system limits etc from the parent keepalived process.
+	* Change multiple spaces to tabs in scheduler.h.
+	* Add family to sockpool listing.
+	* Fix a multiline definition expansion issue.
+	* Free allocated cache when closing/freeing netlink socket.
+	  When running on a system with 500+ interfaces configured and adding
+	  1000 VMAC interfaces, the heap was growing by 340Mb due the netlink
+	  cahce not being freed after creating each VMAC interface. With this
+	  patch the heap only grow by 3.7Mb (if creating 1000 VMAC interfaces
+	  the heap grep by 905Mb now reduced to 6.1Mb).
+	* Stop using netlink cache when adding and configuring VMAC interfaces.
+	  When running on a system with 500+ interfaces configured and adding
+	  1000 VMAC interfaces, it was taking 2.3 seconds to add the interfaces.
+	  Without populating a netlink cache each time a VMAC interface is created
+	  it now takes 0.38 seconds to add the interfaces (if creating 1000 VMAC
+	  interfaces it was taking 6.1 seconds, now reduced to 0.89 seconds, and
+	  the heap growth is reduced from 6.1Mb to 3.9Mb).
+	* Add function rtnk_link_get_kernel for dynamic linking.
+	* Fix compiling without JSON support.
+	* Add support for recording perf profiling data for vrrp process.
+	* Add comment re usage of MAX_ALLOC_LIST.
+	* Some streamlining of scheduler.c.
+	* Merge --enable-epoll-debug and --enable-dump-threads functionality.
+	* Let thread_add_unuse() set thread type, and use thread_add_unuse() more.
+	* Use break rather than return in process_threads().
+	* Fix segfault when reloading with HTTP_GET and no regex configured.
+	* Merge the next-generation scheduler.
+	* Make all debug options need enabling at runtime.
+	  Previously if configure enabled a debug option its output was always
+	  recorded, which meant that if one didn't want the output, configure/
+	  compile was needed. This commit adds command line options that need to
+	  be set in order to turn the debugging on.
+	* Remove unwanted debug message.
+	* Fix parsing --debug options.
+	* Fix rb tree insertion with timers.
+	* Add missing functions for thread debugging.
+	* Add vrrp instance VMAC flags when dumping configuration.
+	* Ensure parent thread terminates if child has permanant config error.
+	* Ensure don't delete VMAC interface if keepalived didn't create it.
+	  and sundry fixes.
+	* If receive lower priority advert, send GARP messages for sync group.
+	  A recent update to issue #542 identified that following recovery
+	  from a split brain situation, GARP messages weren't being sent. It
+	  transpired that, if a member of a sync group in master state received
+	  a lower priority advert and vrrp_higher_prio_send_advert is set, a
+	  further (lower priority) advert is sent, and the instance and all the
+	  members of the sync group transition to backup (the other members of
+	  the sync group don't send a further advert since they haven't received
+	  a higher priority advert). This meant that the other members of the
+	  sync group on the keepalived instance that remained master didn't
+	  receive a lower priority advert, and so didn't send further GARP
+	  messages.
+	  This commit changes keepalived's behaviour, so that if a vrrp instance
+	  is sending GARP messages due to receiving a lower priority advert
+	  and it is a member of a sync group, keepalived will also send GARP
+	  messages for any other member of the sync group that have
+	  garp_lower_prio_rep set.
+	* Allow 0.0.0.0 and default/default6 for rule/route to/from addresses.
+	* Check return value of SSL_CTX_new().
+	* Check return values of SSL_new() and BIO_new_socket().
+	* Only allow subnet masks with routes or virtual IP addresses.
+	  For example, if specifying a via address or preferred source address
+	  for a route, it isn't valid to specify a subnet mask.
+	* Add inet/inet6 to specify ip route/rule family if ambiguous.
+	* Remove superfluous parameter from parse_route().
+	* Add "any" and "all" as synonyms for "default".
+	* Fix memory leak if route destination address is wrong address family.
+	* Add ttl-propagate route option.
+	* Fix checking return status of kill().
+	* Fix building with --enable-debug configure option.
+	* Stop delay in reload when using network namespaces.
+	  If running in a network namespace, getaddrinfo() could take over
+	  30 seconds before timing out while trying to contact a name
+	  server. To alleviate this, the hostname is remembered from when
+	  keepalived started.
+	* Fix spelling of propagate in propagate_signal().
+	* Fix effective_priority after reload if tracked interface down.
+	* Cosmetic grammatical changes.
+	* Add debug option for dumping vrrp fd lists.
+	* Fix calculation for vrrp fd timers.
+	  Starting or reloading keepalived when an interface that was tracked
+	  interface was failed was stopping other vrrp instances that were on
+	  the same interface but not using VMACs coming up.
+	* Move code for initialising tracking priorities to vrrp_track.c.
+	* Don't overwrite track file on reload.
+	* Don't attempt to write track file if path not specified.
+	* Fix compiling when not using --enable-vrrp-fd-debug.
+	* Fix compiling with configure --enable-vrrp-fd-debug.
+	* Add sync group track_bfds and track file status to config dump.
+	* Move initialisation of track_files.
+	* Don't alter effective_priority if track_file take vrrp instance down.
+	* Don't log vrrp instance in fault state at reload if already fault.
+	* Fix calculating fd timer if all vrrp sands are set to TIMER_DISABLED.
+	* Don't make all sync groups transition to backup on reload
+	  If a sync group was in master state, and can still be after a reload
+	  then allow it to stay in master state.
+	* Don't have track_bfd list in vrrp_sgroup_t in BFD not enabled.
+	* Fix memory leak re vrrp_sgroup_t track lists.
+	* Tidy up some freeing of MALLOC'd memory.
+	  Use FREE_PTR if it is not known if the pointer is valid, and don't
+	  clear the pointer afterr FREE/FREE_PTR since FREE does it anyway.
+	* Add memory.c list size definition and move definition from memory.h.
+	* Increase size of checksum value for MEM_CHECK.
+	* Don't store checksum of memory allocation block. It can be calculated
+	  from the size, so do so.
+	* Make the checksum for memory allocation blocks unsigned.
+	* Use an enum for memory allocation block types.
+	* Update comment re debug bit for memory detect error.
+	* In memory alloc debug code report free or realloc for not alloc'd.
+	* Allow for PIDs up to 2^22 (7 decimal digits).
+	* Add function for dumping memory allocation while running.
+	* Fix max memory allocation size calculations.
+	* Fix reporting original and new file/line/func for realloc.
+	* Check matching block for realloc is allocated.
+	  The same memory block may have been previously allocated and freed,
+	  so we need to make sure that the block we find is currently marked
+	  as allocated.
+	* Use a new MEMCHECK struct for realloc overrun detected
+	  It was marking the allocated block as an overrun block, whereas it
+	  needs to be an allocated block, so use a new block to mark the
+	  overrun.
+	* Tidy up working of a couple of memory allocation messages.
+	* Use for loops rather than while blocks in memory allocation code.
+	* Report number of mallocs and reallocs with MEMCHECK.
+	* Attempt to log first free after double free in MEMCHECK.
+	* Streamline use of buf/buffer in memory.c.
+	* Always use first free entry in alloc_list for MEMCHECK.
+	* Define MEMCHECK alloc_list size via configure.
+	* Align keepalived_free() and keepalived_realloc().
+	* Make char * const where possible for MEMCHECK.
+	* Merge MEMCHECK keepalived_free() and keepalived_realloc().
+	  Most of the code was common between the two (or should have been),
+	  so it makes sense for them to use common code.
+	* Ensure only relevant thread types run during shutdown.
+	* Fix building without --enable-mem-check.
+	* Use rbtree search for finding child thread on child termination.
+	  It was doing a linear search of the rbtree in timeout order. This
+	  commit adds another rbtree for child processes (vrrp track scripts
+	  and check_misc scripts), sorted by PID, to make the search by PID
+	  more efficient.
+	* Make rbtree compare function thread_timer_cmp() more efficient.
+	* Remove child_remover functionality - it was superfluous.
+	* Fix checking that there are no duplicate vrrp instances configured
+	  The tuple {interface, family, vrid} must be unique. The check for
+	  this was being made completely incorrectly.
+	* Delay creating vrrp notify FIFO.
+	* Remove struct sockaddr_storage saddr from sock_t.
+	* Use an rbtree for finding vrrp instance for received advert.
+	  Previously the code search a list of pointers to vrrp instances and
+	  looked for a matching fd and vrid. In order to optimise this, it was
+	  implemented using an mlist whose index was a hash of the fd and vrid.
+	  This commit changes the approach and uses an rbtree for each sock_t.
+	  Since the sock_t that the advert was received on is known, the rbtree
+	  search is only searching for a match on the vrid.
+	  Not only is this more efficient, but it is simpler, uses standard code,
+	  and reduces the code by over 60 lines.
+	* Use an rbtree for finding vrrp instance for socket timeout.
+	  Previously the code search a list of pointers to vrrp instances and
+	  looked for matching file descriptor and sands < time_now. In order to
+	  optimise this, it was implemented using an mlist whose index was a hash
+	  of the fd.
+	  This commit changes the approach and uses a second rbtree for each sock_t.
+	  Since the sock_t that the timeout occurred on is known, the rbtree
+	  search is only searching for a match of the sands.
+	  Not only is this more efficient, but it is simpler, uses standard code,
+	  and reduces the code by over 220 lines.
+	* Remove superfluous checks of rbtree node != NULL in rb_move().
+	* Remove superfluous check of node != NULL in rb_next().
+	* Update rbtree code to Linux 4.18.10.
+	* Fix debug logging of sands timers before time_now.
+	* Update rb_for_each_entry etc and rb_move to use rb_entry_safe.
+	  With the added definition of rb_entry_safe in the rbtree code
+	  updated to Linux 4.18.10, the refinition of rb_entry was reverted
+	  to the kernel definition. That meant that rb_for_each_entry,
+	  rb_for_eacn_entry_safe and rb_move neded to be updated to use
+	  rb_entry_safe rather than rb_entry.
+	* Add support functions for rbtree rb_root_cached.
+	  This is in preparation for the use of rb_root_cached in the next
+	  patch.
+	* Use cached rbtrees where the key is a timeval_t sands
+	  When the key of an rbtree is a timeval_t sands keepalived will frequently
+	  need to access the first node of the tree in order to calculate the next
+	  timeout. This applies to the read, write, child and timer threads queues,
+	  and also the vrrp queues on a sock_t.
+	  The use of cached rbtrees for these is ideal since it gives direct access
+	  to the first node of the queue.
+	* Add thread_add_read_sands to avoid introducing timer errors.
+	  When using thread_add_read and the timeout was held as timeval_t,
+	  it was converted to and offset from time_now, and then converted
+	  back to a timeval_t, but time_now was updated, resulting in a
+	  slightly different value being used as the timeout. Using
+	  thread_add_read_sands() avoids the double conversion and results in the
+	  timeout being more accurate.
+	* Replace NETLINK_TIMER with TIMER_NEVER.
+	  It makes the code easier to read, and since NETLINK_TIMER was defined
+	  to be TIMER_NEVER it doesn't change the functionality.
+	* Handle preempt delays not expiring at same time on sync group
+	  If different vrrp instances in a sync group had preempt delays
+	  that expired at different times keepalived looped with very small
+	  to epoll_wait() until all preempt delays had expired, causing high
+	  CPU utilisation.
+	  Keepalived now reschedules vrrp instances with a delay of
+	  3 * advert_int + skew time while waiting for all vrrp instances in
+	  the sync group to expire their preempt delays.
+	* Fix segfault when receive netlink message for default route added.
+	* Move vrf_master_index into conditional compilation block.
+	* Store interface macvlan type.
+	* Make vrp_master_ifp point to self for VRF master interfaces.
+	* Log if cannot create a VMAC due to existing interface with same name.
+	* Handle delete/create of macvlan i/fs which aren't keepalived's.
+	* Tidying up keepalived_netlink.c.
+	* Handle VRFs changing on macvlan i/fs which have VMACs configured on them.
+	* Fix recreating our VMACs if they are deleted.
+	* Fix detecting address add/deletion from underlying i/f of our vmacs.
+	* Don't use configured_ifp or base_ifp if not _HAVE_VRRP_VMAC_.
+	* Distinguish between VMAC on real i/f and no VMAC on macvlan i/f
+	  If keepalived is configured to have a non VMAC interface on a macvlan
+	  interface, we want to use the macvlan interface rather than the
+	  underlying interface, whereas if we have a VMAC interface on a macvlan
+	  interface, we create the VMAC on the underlying interface of the macvlan.
+	* Update duplicate VRID check where vrrp instance configured on macvlan.
+	  If a VRRP instance is configured on a macvlan interface, the duplicate
+	  VRID check needs to be done on the underlying interface.
+	* Check for VRID conflicts when changeable interfaces are added
+	  For example, a vrrp instance could be configured on a macvlan, and
+	  that macvlan could be deleted and recreated with another base interface.
+	  The VRIDs in this case need to be checked for duplicates against the
+	  base interface, and so the VRID check needs to be done dynamically.
+	  In order to allow VRID conflicts to produce config errors at startup,
+	  by default keepalived assumes that there won't be interface movements
+	  as described above, and will only handle it if the global_defs option
+	  'dynamic_interfaces' is used along with the option 'allow_if_changes'.
+	* Remove some comments inserted for tracking changes to code.
+	* Fix building with --enable-debug configure option.
+	* Check that '{'s and '}'s are balanced in the configuration file.
+	* Allow more flexibility re placing of { and }.
+	* Improve reporting additional '}'s in configuration.
+	* Minor improvements re thread handling and cancellation.
+	* Remove unused THREAD_IF_UP and THREAD_IF_DOWN.
+	* Replace getpagesize() with sysconf(_SC_PAGESIZE).
+	* Increase netlink receive buffer for dumps to 16KiB.
+	* Dynamically set the netlink receive buffer size.
+	* Sort out setting netlink receive buffer size.
+
+2018-08-23 Alexandre Cassen <acassen@gmail.com>
+	* keepalived-2.0.7
+	* Fix buffer overflow in extract_status_code().
+	  Issue #960 identified that the buffer allocated for copying the
+	  HTTP status code could overflow if the http response was corrupted.
+	  This commit changes the way the status code is read, avoids copying
+	  data, and also ensures that the status code is three digits long,
+	  is non-negative and occurs on the first line of the response.
+	* Some fixes for config-test.
+	* Change ka_config_error() to report_config_error().
+	* Read interface addresses when doing config-test.
+	* Update documentation re garp_lower_prio_repeat.
+	* Add comment re tracking routes with nexthops doesn't work.
+	* Fix handling of default_interface
+	  Issue #963 identified that default_interface wasn't being set
+	  correctly. The problem was that the configuration was read by the
+	  parent process, but the parent process doesn't know about the
+	  system interfaces.
+	  Fix commit makes the vrrp process set the default interface when
+	  it starts.
+	* Fix a segfault in checker process on reload
+	  Issue #955 identified a segfault when keepalived reloads. This
+	  was caused by attempting to set the receive buffer size on a
+	  netlink socket that was not open. It now only attempts to set
+	  buffer sizes on the netlink sockets that are open.
+	* Use report_config_error() in check_parser.c.
+	* Don't run a sublevel close handler on a skipped configuration block
+	  If a configuration block was skipped due to an error, the configuration
+	  read won't be valid and may not even exist, so make sure the sublevel
+	  end handler isn't run.
+	  An example is if a virtual_server block is skipped, then the sublevel
+	  end handler would have run against the previous (if any) virtual_server,
+	  and if there hadn't been a previous virtual_server block it could
+	  segfault.
+	* Tidy up use of inet_stosockaddr.
+	* Add more error checking to read_timer() and its uses.
+	* Add validation of lvs_sched.
+	* Use report_config_error() in checker parsers
+	  Thwese should have been included in commit ead70947 -
+	  "Update config-test".
+	* Add stronger validation of numeric fields
+	  Issue #955 identified that invalid parameters in advert_int, delay_loop,
+	  lb_algo/lvs_sched, lb_kind/lvs_method, quorum, ip_family, virtual_server
+	  and real_server ports, weights and connect_timeout were not being reported.
+	  This commit will now report any errors in those fields, and a number of
+	  other fields.
+	* Improve parsing of virtual_router_id.
+	* Allow virtual server ports not to be specified
+	  If the service is persistent, a "wild-card" port can be used.
+	* Prepend WARNING to read_int/unsigned/double messages if not rejecting
+	  read_int()/read_unsigned()/read_double() can output log messages if
+	  the syntax is invalid but the configuration is being accepted, e.g.
+	  parsing 12zyx will return 12 if _STRICT_CONFIG_ is not defined. In
+	  this case we want to indicate that the entry is not valid, but we
+	  are still processing it, so prepend the error message with WARNING.
+	* Improve parsing of virtual server group address ranges
+	  An address range of 10.9.8.7-10.9.8.15 was parsed as 10.9.8.7-10
+	  and no error was reported, although someone might have expected
+	  that this would mean 10.9.8.7-15.
+	  keepalived will now report a configuration warning, and if
+	  keepalived is configured with --enable-strict-config-checks the
+	  configuration will be rejected.
+	* Restore original string in inet_stosockaddr()
+	  If there was a '-' or a '/' after the address, the string was modified
+	  to terminate at that point. This commit now restores the original string.
+	* Allow keepalived to run with --config-test when live instance running.
+	* Report errors for invalid smtp_server.
+	* Remove inet_stom() - it was not used
+	  inet_stom used atoi which is unsafe. Since the function was not used,
+	  it has been simply removed.
+	* Rename read_(int|unsigned|double) read_(int|unsigned|double)_strvec
+	  Want to be able to have equivalent functions just being passed a string,
+	  so rename the functions using strvec to be explicit about that.
+	* Fix config dump for vrrp_garp_lower_prio_delay.
+	* Fix config dump of vrrp garp_refresh.
+	* Make config dump write fraction part of vrrp preempt delay.
+	* Simplify config dump of garp/gna_interval.
+	* dd config dump for VRRP/checker/BFD realtime_priority/limit.
+	* Ensure structure fully initialised for sched_setscheduler.
+	* Make set_process_dont_swap() and set_process_priority() static functions.
+	* Minimise time when keepalived runs with realtime priority
+	  keepalived shouldn't use realtime priority when it is loading or
+	  reloading configurations, so delay setting realtime priorities, and
+	  revert to stardard scheduling when terminating or reloading.
+	* Report user/system CPU time used when exit with detailed logging.
+	* Make default rlimit_rtime 10000 microseconds
+	  The previous default of 1000 microseconds was insufficient
+	* Stop using atoi for readong configuration weight.
+	* Make read_unsigned, read_int, read_double for parsing strings
+	  These functions are analogous to read_unsigned_strvec, read_int_strvec
+	  and read_double_strvec, but take strings as the parameter rather than
+	  a strvec.
+	* Stop using atoi for parsing mask of ip addresses.
+	* Stop using atoi for reading VRID in Dbus code.
+	* Stop using atoi for reading vrrp debug level, and add to conf dump.
+	* Stop using atoi for parsing garp_refresh.
+	* Stop using atoi for parsing preempt_delay.
+	* Stop using atoi for parsing garp_lower_prio_repeat.
+	* Stop using atoi for parsing vrrp script rise.
+	* Stop using atoi for parsing vrrp script fall.
+	* Stop using atoi for parsing garp_interval/gna_interval
+	* Stop using atoi for parsing smtp status code
+	* Stop using atoi for parsing realtime scheduling priority
+	* Stop using atoi for parsing process priorities
+	* Stop using atoi for parsing global garp/gna_interval
+	* top using atoi for parsing genhash port number
+	* Stop using atoi for parsing tcp_server port number
+	* Stop using atoi for parsing command line log facility.
+	* update documentation to show range of bfd weights
+	* Ensure read_unsigned() detects negative numbers.
+	* Stop using atoi to parse HTTP_GET status code.
+	* Stop using atoi to parse checker port numbers.
+	* Use read_unsigned() for domain/inet_stosockaddr port.
+	* Make read_unsigned_strvec() recognise minus sign after spaces
+	  It is possible have a word read from the configuration start with
+	  spaces it is is enclosed in quotes, which are then removed, but
+	  the leading spaces aren't removed.
+	* Make get_u8()/get_u16()/get_u32() use read_unsigned().
+	* Make get_u64() properly detect -ve numbers.
+	* Make get_time_rtt() properly detect -ve numbers.
+	* Make get_addr64() handle whitespace properly and disallow '-' signs
+	  Skip leading whitespace, don't allow embedded whitespace, and don't
+	  allow minus signs.
+	* Make get_addr64() and parse_mpls_address handle whitespace
+	* Change more log_message() to report_config_error() in vrrp_iproute.c.
+	* Improve use of strtoul() in rttables.c.
+	* Implement get_u64() in same way as get_u8() etc.
+	* Fix print format specifier in read_unsigned_base
+	* Correct error message for garp_master_refresh
+	* Remove \n from error message.
+	* Allow round trip time to be UINT32_MAX
+	* Change mix_rx to min_rx for bfd_instance in documentation.
+	* Make bfd_parser use read_unsigned_strvec() etc rather than strtoul().
+	* Fix config dump for BFD instance timers.
+	* Fix handling of ip rule ipproto option.
+	* Add read_unsigned_base_strvec() to allow number base to be specified
+	  This requires renaming static functions read_int_int() etc to
+	  read_int_base() etc.
+	* Minimise and improve use of strtoul() etc in parsing ip rules.
+	* Use read_int_strvec() for vrrp_version.
+	* Use read_int_strvec() instead of strtol() in vrrp_parser.c.
+	* Use read_int_strvec() instead of strtol() etc in check_parser.c.
+	* Use read_int_strvec() instead of strtol() etc in check_data.c.
+	* Improve strtoul handling for '--log_facility' command line option.
+	* Add documentation for lvs_timeouts config option.
+	* Allow vrrp garp_delay to be 0 in accordance with documentation.
+	* Use read_int_strvec() instead of strtol() etc in global_parser.c.
+	* Corret end of line detection in genhash.
+	* Improve genhash command line parsing use of strtoul.
+	* Replace CHECKER_VALUE_INT with read_unsigned_strvec due to use of strtoul.
+	* Remove CHECKER_VALUE_UINT definition since no longer used.
+	* Add conditional compilation around variable not always used.
+	* Only read interfaces in VRRP process.
+	* Enable --config-test to work with BFD configuration.
+	* Only add garp_delay_t's to interfaces used by VRRP instances
+	  There is no point allocating a garp_delay_t to an interface that
+	  isn't used by a VRRP instance, so this commit make keepalived only
+	  allocate garp_delay_t scructures to the used interfaces.
+	  In addition, when the configuration is dumped, list the interfaces
+	  relevant to each garp_delay_t.
+	* Add logging command line options if keepalived segfaults.
+	* Don't free tcp checker data field on exit, since not used.
+	* Report configuration file line numbers when errors
+	  Following the recent series of commits for better validation of
+	  the configuration, and the move to reporting all configuration
+	  errors through report_config_error(), it is now feasible to report
+	  the configuration file line number on when the error occurs.
+	* Rationalise error messages when reading configuration
+	  Now that configuration file line numbers are reported, the error
+	  messages can be simplified since the context doesn't need to be
+	  given in the detail as before.
+	* Return NULL rather than false as a pointer in parser.c
+	* Fix an infinite loop when parsing certain parameter substitutions
+	  If a multiline definition had text after the '=' sign, keepalived
+	  would loop.
+	* Fix a multiline parameter substitution having a replacement on 1st line
+	  If a multiline parameter definition had a replaceable parameter or a
+	  definition on the first non-blank line, it wasn't being handled. This commit
+	  ensures that replaceable parameters/definitions on the first line are
+	  handled correctly.
+	* Add logging command line options when keepalived starts.
+	* Change some log_message() to report_config_error() in vrrp_sync.c.
+	* Improve handling of select() returning an error
+	  If select returned an error, the code was processing the returned
+	  timeout and fds as though they were valid. This commits logs an
+	  error the first time, sleeps for 1 second if it is a programming
+	  error, and then sets up the select call again.
+	* Remove DBG() statement left over in previous commit.
+	* improve doc spelling.
+	* Add mh scheduler for LVS
+	  This is similar to the sh scheduler. Options are the same but we
+	  duplicate everything. An alternative would have been to reuse the
+	  names for the sh scheduler.
+	  The mh scheduler is supported starting from Linux 4.18. It's a
+	  consistent hash scheduler.
+	* manpage update and re-visited.
+	  keepalived.conf.5 be considered as THE exhaustive source of information
+	  in order to configure Keepalived. This documenation is supported and
+	  maintained by Keepalived Core-Team.
+	* Fix errors in KEEPALIVED-MIB.txt
+	  Commit 181858d - "Add mh scheduler for LVS" introduced a couple
+	  of formatting errors, and didn't update the revision date.
+	* Some SNMP library handling improvements.
+	* Stop bfd -- vrrp pipe read timing out
+	  There is no need for a timeout on reading the pipe, so set the
+	  timeout to TIMER_NEVER.
+	* manpage updates
+	  Update manpage to make html convertion easy. This manpage is now
+	  sitting in documentation tab of Keepalived website.
+	* Update libnl_link.c
+	  SegFault when launch with dynamic LIBNL because of loading symbol
+	  from wrong library.
+	* Fix building rpm package and instructions
+	  Issue #977 identified that the instructions in the INSTALL file
+	  were incorrect.
+	* Adds regex pattern matching for HTTP_GET and SSL_GET.
+	* Remove pcre build tests from Travis-CI
+	  Travis-CI environments are too old to support libpcre2, so we have
+	  to remove it.
+	* Fix #980: coredump on start when logfile cannot be accessed.
+	* Don't loop forever if configuration has unknown replaceable parameter.
+
+2018-07-23 Quentin Armitage <quentin@armitage.org.uk>
+	* keepalived-2.0.6
+	* Fix genhash digest calculation. The bracketting in HASH_UPDATE was wrong.
+	* Bring keepalived(8) man page up to date.
+	* Fix segfault when IPVS_DEST_ATTR_ADDR_FAMILY not defined.
+	  Issue #938 identified a segfault on the checker process when using
+	  CentOS/RHEL 6. It turned out that conditional compilation check
+	  for IPVS_DEST_ATTR_ADDR_FAMILY was not being handled correctly.
+	* Don't create a link-local address for vmac when vmac_xmit_base is set
+	  Since commit 18ec95add483 ("Make vmac_xmit_base work for IPv6
+	  instances") VRRP advertisements are sent from the base interface and not
+	  from the vmac interface when vmac_xmit_base is set.
+	  Therefore, there is no need to configure a link-local address on the
+	  vmac interface. This also means that we don't need to regenerate a
+	  link-local address for the vmac if the link-local address was removed
+	  from the base interface, or inherit a link-local address in case one was
+	  configured on the base interface.
+	* Fix setting i/f params on a bridge underlying i/f of a VMAC
+	  Issue #944 identified that when the underlying interface of a VMAC
+	  interface was a bridge, keepalived was failing to set arp_ignore and
+	  arp_filter in the underlying bridge interface. The problem appears to
+	  lie in the libnl3 library. The description of the problem given in the
+	  issue report was:
+	    Problem is that ifi_family is set to AF_BRIDGE, whereas it should be set
+	    to AF_UNSPEC. The kernel function that handles RTM_SETLINK messages for
+	  AF_BRIDGE doesn't know how to process the IFLA_AF_SPEC attribute.
+	  This commit stops using libnl3 for setting/clearing arp_ignore and
+	  arp_filter, and directly constructs the netlink messages in keepalived.
+	* Use RTM_NEWLINK rather than RTM_SETLINK for setting i/f options
+	  libnl3 uses RTM_NEWLINK rather than RTM_SETLINK for setting
+	  interface options when ifi_family is AF_UNSPEC, so update commit
+	  9b2b2c9 - "Fix setting i/f params on a bridge underlying i/f of
+	  a VMAC" to do likewise.
+	* Fix creating VMACs on 2.6.32 and earlier kernels
+	  RTM_NEWLINK didn't support specifying interface by name until
+	  Linux 2.6.33, and if using an earlier kernel, the netlink call
+	  failed. This meant that the VMAC was not enabled.
+	* Fix setting arp_ignore and arp_filter on bridge interfaces.
+	* Add diagnostic message if vrrp script time out and kill fails.
+	* Fix compile errors and warnings when building with --enable-debug.
+	* Don't do md5 check unless configured.
+	* In http_handle_response() combine fetched_url and url
+	  fetched_url and url always pointed to the same url, so only use
+	  one variable.
+	* Store and handle HTTP_GET digest in binary form
+	  Configured digests were being stored in character string form, and
+	  the calculated digests were converted to strings. This commit now
+	  handles digests as fixed length binary data, and validates the
+	  configured digests to make sure they are valid hex strings with
+	  the correct length.
+	* Add support for quote and escape handling of notify and other scripts.
+	  Notify and other scripts need to be able to be configured with embedded
+	  spaces, quotes and special characters for the command and the parameters.
+	  This commit adds that ability.
+	* When checking script file path, only replace name part if same file.
+	  Some executables are in the filesystem as symbolic links, and alter
+	  their functionality based on the file part of the name. This was being
+	  incorrectly handled by keepalived, which now checks whether a file exists
+	  using the original name, and it it does whether it is the same file.
+	* Remove cmd_str from notify_script_t
+	  The cmd_str string (sort of) duplicated what was in the args array
+	  of a notify_script_t, but was not always accurate. With the removal
+	  of cmd_str, whenever it needs to be output, the string is now
+	  generated from the args array, so accurately reflects what is
+	  actually executed.
+	* Add quoting and escaping for script configuration, and other minor changes.
+	* Use vsyslog() if available instead of syslog().
+	* Report virtual server as well as real server when config dump checker.
+	* Only report IP_MULTICAST_ALL unset for IPv4 sockets
+	  Commit 6fb5980 - "Stop receive message queues not being read on send
+	  sockets" added a warning if data was received on vrrp send sockets, since
+	  setting IP_MULTICAST_ALL should stop packets being received, but older
+	  kernels still queued packets.
+	  It has now been discovered the IP_MULTICAST_ALL (of course) only applies
+	  to IPv4 and so the warning only makes sense for IPv4 sockets.
+	  I haven't been able to find a way to stop IPv6 multicast packets being
+	  received on the send socket. It appears that if any socket adds an IPv6
+	  multicast group on an interface, then any raw socket using that interface
+	  will recieve all enabled multicast packets, and the receive socket has to
+	  add the multicast group.
+	* Properly stop packets being queued on vrrp send sockets
+	  Commit 6fb5980 - "Stop receive message queues not being read on
+	  send sockets" did stop messages building up on the receive queue
+	  of vrrp send sockets, but it wasn't an ideal solution, and it also
+	  made the assumption that the problem was only occurring due to
+	  multicast packets not being filtered when IP_MULTICAST_ALL was set,
+	  which appears not to work properly between at least Linux 3.6.11 and
+	  3.16. In fact the problem also occurred when using IPv4 unicast and
+	  IPv6 in any form, and so has been a long term issue in keepalived.
+	  The original solution was to listen on the send socket and discard any
+	  packets that were received. This commit takes a completely different
+	  solution (many thanks to Simon Kirby for the suggestion) and sets a
+	  BPF filter on send sockets that filter out all received packets on the
+	  sockets.
+	  This commit effectively reverts commit 6fb5980, and the subsequent
+	  commits 88c698d8 - "Cancel read thread on send sockets when closing",
+	  f981b55d - "Only allow vrrp_rx_bufs_policy NO_SEND_RX if have
+	  IP_MULTICAST_ALL", 7ff7ea1f - "Another fix to listening on send socket",
+	  and 77d947f7 - "Only report IP_MULTICAST_ALL unset for IPv4 sockets"
+	  and partially reverts 4297f0a - "Add options to set vrrp socket receive
+	  buffer sizes".
+	  This commit removes the configuration option NO_SEND_RX from
+	  vrrp_tx_bufs_policy introduced in commit 4297f0a since it is now
+	  no longer relevant, because no packets are queued to the send socket.
+	* Add newlines to the keepalived.stats output for better readability.
+	* Add notify_master_rx_lower_pri script option and FIFO output.
+	  If a lower priority router has transitioned to master, there has presumably
+	  been an intermittent communications break between the master and backup. It
+	  appears that servers in an Amazon AWS environment can experience this.
+	  The problem then occurs if a notify_master script is executed on the backup
+	  that has just transitioned to master and the script executes something like
+	  a `aws ec2 assign-private-ip-addresses` command, thereby removing the address
+	  from the 'proper' master. Executing notify_master_rx_lower_pri notification
+	  allows the 'proper' master to recover the secondary addresses.
+	* Fix malloc'd memory length in open_log_file().
+
+2018-06-29 Quentin Armitage <quentin@armitage.org.uk>
+	* keepalived-2.0.5
+	* Update config-test option so keepalived exits with status 1 on failure.
+	* Fix config write of virtual server group ip addresses.
+	* Document default and default6 for virtual/static route destinations.
+	* Cancel read thread on send sockets when closing.
+	  Commit 4297f0a - "Add options to set vrrp socket receive buffer sizes"
+	  added reading on vrrp send sockets to stop receive queues building up
+	  on some 3.x kernels. The commit didn't cancel the read thread on the
+	  send sockets when the socket was closed, causing several thousand
+	  log writes. This commit cancels the read thread.
+	* Exit with status 1 if config check fails, and fix terminating when
+	  reading send sockets.
+	* Stop segfaulting when receive a packet (fixing commit 97aec76).
+	  Commit 97aec76 - "Update config-test option so keepalived exits
+	  with status 1 on failure" had a test for __test_bit(CONFIG_TEST_BIT)
+	  the wrong way round. This commit fixes that.
+	* Don't assume rpm is available.
+	* Only allow vrrp_rx_bufs_policy NO_SEND_RX if have IP_MULTICAST_ALL.
+	* Improve setting up virtual/real servers with virtual server groups.
+	  When setting up virtual servers defined by virtual server groups,
+	  keepalived was getting confused between fwmarks and ip addresses.
+	  This still needs further work, but the setting up of virtual/real
+	  servers now works.
+	* Fix setting up and deletion of virtual servers with groups
+	  Virtual server entries in virtual server groups can be used
+	  by multiple virtual_server entries. This commit ensures that
+	  virtual servers are not deleted until the last virtual_server
+	  instance using the virtual server is removed.
+	* Allocate vrrp send buffer during vrrp_complete_instance()
+	  Issue #926 identified a segfault. The vrrp send buffer was not being
+	  allocated early enough, and was being accessed before being allocated
+	  if the checksum algorithm needed updating.
+	* Fix vrrp v3 with unicast and IPv4.
+	  The checksum calculations were happening in the wrong way, with the
+	  wrong data. This commit sorts all that out.
+	* Don't set effective priority to 254 when specify dont_track_primary.
+	* Make csum_incremental_update16/32 inline.
+	* Add --enable-optimise=LEVEL configure option.
+	* Remove debug message left in configure.ac from adding --enable-optimise.
+	* Fix compiling on CentOS 6.
+	  Issue #932 identified that keepalived would not compile on CentOS 6.
+	  The problem is that kernel header file linux/rtnetlink.h needs
+	  sys/socket.h to be included before linux/rtnetlink.h when using old
+	  (e.g. 2.6) kernel headers.
+	* Another fix to listening on send socket.
+	  Commit 4297f0a - "Add options to set vrrp socket receive buffer sizes"
+	  added reading on vrrp send sockets to stop receive queues building up
+	  on some 3.x kernels. The commit didn't save the new thread in
+	  sock->thread_out when it was added for reading in vrrp_write_fd_read_thread.
+	  It now does so.
+
+2018-06-17 Quentin Armitage <quentin@armitage.org.uk>
+	* keepalived-2.0.4
+	* Make vmac_xmit_base work for IPv6 instances.
+	  Issue #917 identified that for IPv6 even when vmac_xmit_base was
+	  configured, the adverts were being sent from the vmac interface.
+	  This commit makes the packets be sent from the underlying interface
+	  when vmac_xmit_base is configured.
+	* Handle vmac_xmit_base when interfaces are recreated.
+	* Add -t config-test option.
+	  Issue #389 has received increasing support to add a configuration
+	  validation option. This commit adds the -t/--commit-test option
+	  to report any detected configururation errors and exit.
+	  Errors are logged to the system log by default, but use of the -g
+	  and -G options can make the errors be logged to files.
+
+2018-06-15 Quentin Armitage <quentin@armitage.org.uk>
+	* keepalived-2.0.3
+	* Fix building with --disables-routes configure option.
+	* Fix some compiler warnings on Travis-CI.
+	* Fix setting vrrp effective priority on reload.
+	* Add tracking of static addresses, routes and rules
+	  By default a static address, route or rule will now be reinstated
+	  if it is deleted, unless the no_track option is specified.
+	  In addition, if a track_group is specified for an address/route/rule
+	  then if the address/route/rule cannot be reinstated (e.g. if the
+	  specified interface is down or has been deleted), then the vrrp
+	  instances specified in the track group will transition to fault state
+	  until the interface comes back up.
+	  This commit completes the monitoring and reinstatement of addresses
+	  routes and rules and means that keepalived should now fully support
+	  hot-swap devices.
+	* Log when restoring static addresses, routes or rules.
+	* Allow static addresses/routes/rules to be configured on VMACs.
+	  When VMACs were using an interface name generated by keepalived,
+	  if static address/routes/rules had beeon configured on a VMAC
+	  interface name, then a different name would be generated for
+	  the vrrp instance. This commit now allows the same name to be used.
+	* Fix configure when pkg-config --libs returns -L entries.
+	* Add log message for advert receive timeout when using log detail (-D).
+	* Stop receive message queues not being read on send sockets.
+	  We shouldn't receive anything on vrrp send sockets since IP_MULTICAST_ALL is
+	  cleared, and no multicast groups are subscribed to on the socket. However,
+	  Debian Jessie with a 3.16.0 kernel, CentOS 7 with a 3.10.0 kernel,
+	  and Fedora 16 with a 3.6.11 kernel all exhibit the problem of multicast
+	  packets being queued on the send socket. Whether this was a kernel problem
+	  that has been subsequently resolved, or a system default configuration
+	  problem isn't yet known.
+	  The workaround to the problem is to read on the send sockets, and to discard
+	  any received data.
+	  If anyone can provide more information about this issue it would be
+	  very helpful.
+	* Ensure sorry server/virtual server same address family unless tunnelled.
+	  A real server and a virtual server can only be of the same address family
+	  if the forwarding method is tunnelled, and also must have a kernel that
+	  supports IPVS_DEST_ATTR_ADDR_FAMILY.
+	* Add options to set vrrp socket receive buffer sizes.
+	  Some systems have very large settings for net.core.rmem_default
+	  allowing very large receive queues to build if the sockets aren't
+	  read. keepalived doesn't need large buffers for receive queues,
+	  so this commit allows options for setting the maximum buffer sizes
+	  to be much smaller. It also adds the option of setting the receive
+	  buffer size on the vrrp send sockets to be as small as possible,
+	  since we shouldn't be receiving anything on those.
+	  Following commit 6fb5980 - "Stop receive message queues not being
+	  read on send sockets", this commit also adds the option not to
+	  read the send sockets, which can be used where it is known that the
+	  kernel will not queue unwanted multicasts to the send socket.
+	* Consider eVIPs when determining if need GARP/NDISC send buffers.
+	* Fix sending IPv6 unicast vrrp adverts.
+
+2018-06-06 Quentin Armitage <quentin@armitage.org.uk>
+	* keepalived-2.0.2
+	* Only compile code in rttables.c that is needed by the
+	  configuration.
+	* Set default preferences for ip rules if not specified.
+	  Since different vrrp instances can become master in different
+	  orders, if preferences (priorities) are not specified for
+	  ip rules, the order in which they are specified will be
+	  indeterminate. In order to give some consistency, keepalived
+	  will not allocate a default preference to each rule, and will
+	  also warn that this is probably not going to work as intended.
+	  The solution is to specify a preference for each rule.
+	* Require preference if an ip rule specifies goto.
+	  Since preferences are now auto-generated if not specified, a
+	  rule with a goto must now specify a preference.
+	* Add tracking of virtual rules.
+	  If a virtual rule is deleted, the vrrp instance will transition
+	  to backup. When it becomes master again the rule will be re-added.
+	* Fix compilation failure found by Travis-CI.
+	* In configure.ac check if SHA1_Init() needs -fpic.
+	* Fix make rpm when rpmbuild doesn't support --build-in-place.
+	* Update INSTALL file to describe how to build rpm files.
+	* Fix instructions for building rpm packages.
+
+2018-06-04 Quentin Armitage <quentin@armitage.org.uk>
+	* keepalived-2.0.1
+	* Remove '\n' characters from log_message() text.
+	* Allow IPv6 ip rules to be specified using fwmarks.
+	* Fix configure generation of keepalived.spec file.
+	* Stop rebuilding scheduler.o every make.
+	* Remove ' characters from configure args in keepalived -v output.
+	* Remove duplicate reporting of network namespace in config dumps
+	* Add ${_INSTANCE} config parameter.
+	* Remove debugging log message.
+	* Recalculate max_fd used for select if it should reduce.
+	* Add tracking of virtual routes.
+	  If a virtual route is deleted, by default to vrrp instance will
+	  now transition to backup mode, and if it transitions to master
+	  again the route will be re-added. If an interface on which a
+	  route is configured is down, then the instance will go to fault
+	  state, since the route cannot be added.
+	  This commit also adds a no-track option for routes, which means
+	  that deletion of the route will not cause the vrrp instance to
+	  transition to backup.
+	* Handle interface down at startup with tracked route configured on it
+	  If a virtual route which is tracked is configured on an interface that
+	  is down at startup, then the vrrp instance needs to start in fault
+	  state.
+	* Rename netlink_reflect_filter() to netlink_link_filter()
+	  The function only handles RTM_NEWLINK/RTM_DELLINK messages and there
+	  are other functions to handle other message types.
+	* Fix compilation warning.
+	* Make recreating deleted VMACs work.
+	* Fix Travis-CI compilation failure and warning.
+	* Stop duplicate definition and duplicate include in vrrp_iproute.c.
+	* Add new ip rule options for Linux 4.17
+	  FRA_PROTOCOL, FRA_IP_PROTO, FRA_SPORT_RANGE and FRA_DPORT_RANGE have
+	  been added in Linux 4.17.
+
+2018-05-26 Quentin Armitage <quentin@armitage.org.uk>
+	* keepalived-2.0.0
+	* Beta branch merge into master branch ! 2years of dev here !
+	* Transition to master as soon as decision is made to do so
+	    Previously keepalived waited one further advert interval before
+	    transitioning.
+	    This meant that previously if a master went down and sent priority
+	    0 message, there was one extra advert interval before the highest
+	    priority backup configured the VIP addresses.
+	    Now if vrrp instances have high priorities (i.e. close to 255),
+	    then the transition to master and configuration of addresses will
+	    now occur in a small multiple of advert_interval/256.
+	* Process interface state changes immediately.
+	    Previously keepalived waited for advert timer expiry. The problem
+	    was that if an interface went down and came back up before the
+	    next timer expiry, and addresses, routes and VMACs that we had
+	    configured on that interface would be removed, but we wouldn't
+	    know about it.
+	* Add support for hot-swappable NICs
+	    This also handles interfaces being deleted and restored.
+	* Add vrrp_track_file option.
+	    This allows track_scripts, which are run on a frequent scheduled
+	    basis, to be replaced with a vrrp_track_file, which contains a
+	    number as a text string which is used in the same way as the exit
+	    status from a track script. The track_files are only read if they
+	    are changed, so external events can update a track file, rather
+	    than their status needing to be detected by polling by track
+	    scripts.
+	* Add notify fifos.
+	    Rather than sending notifications via notify scripts it is now
+	    possible to send notify messages via fifos. Not only does this
+	    mean that the overhead of executing script for each notification
+	    is removed, but it also guarantees the delivery of notifications
+	    in the correct order, whereas if the notification is via scripts,
+	    there is no guarantee that the scripts will execute in the desired
+	    order if two or more notifications are sent in quick succession.
+	    There can be a global fifo to process all notifies, and also
+	    separate fifos for vrrp and checkers. It is possible to specify a
+	    script for keepalived to execute to process the messages on the
+	    fifo(s).
+	* Stop logging address addition/deletions if addresses not ours
+	    The -a option can be used to override this behaviour and log all
+	    address changes.
+	* Transition to fault state if source address for adverts is deleted
+	   from interface
+	* Transition to backup state if a VIP or eVIP is removed
+	    When we next transition to master the addresses will be restored.
+	    If nopreempt is not set, that will be almost immediately.
+	* Make address owner (priority 255) transition to master immediately
+	* Don't process a received advert if the authentication fails
+	* Ignore invalid received adverts totally
+	    Previously the master down timer was being updated, which meant
+	    that a backup could be stuck in backup state even if the only
+	    received adverts were invalid.
+	* Don't reset timer before sending next advert if receive a lower
+	  priority advert.
+	    This was stopping a higher priority backup instance to stay in
+	    backup state.
+	* Log if receive invalid authentication header
+	* Ignore lower priority adverts when backup (to comply with RFCs)
+	    This also means that the master down timer wasn't reset, which
+	    was causing a delay to becoming master
+	* Fix first advert interval of vrrp instances in a sync group.
+	* Stop two vrrp instances with preempt delay and equal priorities
+	  flip-flopping between master and backup state
+	* Make sync group members transition state at same time
+	    When first instance makes transition (i.e. when the trigger event
+	    occurs) rather than wait for next timer expiry
+	* Process vrrp track script returning a new status code immediately
+	    For all instances (and their sync group members), rather than
+	    waiting for the next timer expiry on each instance, the instance
+	    will transition update it's state immediately.
+	* On reload, make track scripts inherit the state from before reload
+	    This stops vrrp instances transitioning to down and coming back up
+	    once the script has run.
+	* Correct the use of adver_int and master_adver_int
+	* Ensure when leaving fault state that a vrrp instance transitions
+	  to backup unless it has priority 255
+	* Remove quick_sync functionality since no longer needed.
+	* Improved code efficiency:
+	  * Finding vrrp instance after read timeout
+	  * When getting interface information for a new vmac, only request
+	     information for that i/f.
+	  * Directly update effective priority of vrrp instances when scripts
+	     return new status rather than scheduling a thread to do it
+	  * Don't run a read timeout on vrrp instance in fault state
+	  * Don't run a track script if no vrrp instance is tracking it
+	  * Stop checking interface status after every timer expiry since
+	     processing interface state changes is now done synchronously
+	  * The timeout for the select call had a maximum timeout of 1 second,
+	     it now times out only when something needs to happen
+	  * The timeout on netlink reads was 500 seconds and this has been
+	     extended to 1 day.
+	  * Streamline signal handling between main process and child process
+	     by using signalfd if available, rather than using a pipe
+	  * Minimise searching for an interface struct based on its index by
+	     using pointers to the interface structures
+	  * Stop opening and closing vrrp scripts before running them. We can
+	     detect they are missing from the return of the exec call.
+	  * Allow threads that don't need a timeout to never timeout
+	  * Calculate the maximum fd number when calling select() rather than
+	     specifying the maximum of 1024.
+	  * Ignore netlink NEWLINK messages that are only wireless state
+	     changes.
+	  * Don't check whether timers have expired after select() returns if
+	     its timeout didn't expire.
+	  * Termination of child processes (scripts) were being handled twice
+	  * Don't generate the IP header checksum since the kernel will always
+	     generate it.
+	  * Maintain pointers to tracking scripts to save seaching a list to
+	     find the relevant script.
+	  * Vrrp instances to have pointer to interface structure to avoid
+	      having to search based in index
+	* Fix the checksum calculation for VRRPv3 unicast peers.
+	* Don't regenerate the full advert packet each time an advert is sent
+	    Keepalived now simply updates the necessary fields and calculates
+	    the change needed to the checksum.
+	* Detect a vmac interface going down, and make the vrrp instance
+	  transition to fault state.
+	    Previously the instance would only go down if the underlying
+	    interface went down.
+	* Stop weighted track scripts updating priority of sync group members
+	* Make vrrp instances go straight to fault state at startup if a
+	  relevant interface is down
+	    Previously an instance would start in up state and transition to
+	    fault at next timer expiry
+	* Ensure that a sync group starts in backup state unless all members
+	  are address owners
+	* Restore master down timer after leaving fault state
+	* Use execve() to execute scripts rather than system().
+	    This saves a fork and an extra process, and also allows the
+	    parameters to be parsed once only at startup, rather than each
+	    time the script is invoked.
+	* Don't treat a failure to execute a script as a failure of the script
+	* Ensure all scripts receive TERM signal when keepalived terminates
+	* If keepalived is running with an elevated priority, stop running
+	  scripts with that elevated priority.
+	* Enable an unweighted tracking script make a vrrp instance which is
+	  an address owner transition to fault state
+	* Delay bringing vrrp instances up at startup until after the first
+	  completion of the tracking scripts
+	    This stops an instance coming up an then being brought back down
+	    again after the script completes with a failure.
+	* Reduce number of error messages if a script is not executable
+	* Add linkbeat option per vrrp instance
+	* Fix timer addition on 32-bit systems
+	* Ignore netlink messages for interfaces using linkbeat polling
+	* If priority of vrrp instance changes when in backup due to a vrrp
+	  script, reschedule the read timeout
+	* If re-using a VMAC after a reload, ensure it is correctly configured
+	* Don't send priority 0 adverts when transition to fault state unless
+	  were in master mode
+	* Identify routes added by keepalived as belonging to keepalived
+	* Enable vrrp instances to be put into fault state if their routes are
+	  removed
+	* Add track scripts, track files and track_if to sync groups and
+	  deprecate global_tracking
+	    (use sync_group_tracking_weight instead, but only if necessary).
+	* Improve AH authentication sequence number handling, and (re)enable
+	  sequence number checking for VMACs and sync groups
+	* Remove autoconf/automake generated files from git repo.
+	    Script build_setup will create the necessary build environment.
+	* Improve and standardise notifications
+	* Fix not sending RS and VS notifies if omega set
+	* Add no_checker_emails to not send emails every time a checker
+	    changes state, but only if a real server changes state
+	* Monitor VIP/eVIP deletion and transition to backup if a VIP/eVIP
+	    is removed unloes it is configured with the no-track option.
+
+2018-05-26 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.4.5 released.
+	* Update snapcraft.yaml for 1.4.x+git
+	* Fix generation of git-commit.h with git commit number.
+	* Set virtual server address family correctly.
+	* Set virtual server address family correctly when using tunnelled
+	  real servers.
+	* Fix handling of virtual servers with no real servers at config time.
+	* Add warning if virtual and real servers are different address families.
+	  Although normally the virtual server and real servers must have the
+	  same address family, if a real server is tunnelled, the address families
+	  can be different. However, the kernel didn't support that until 3.18,
+	  so add a check that the address families are the same if different
+	  address families are not supported by the kernel.
+	* Send correct status in Dbus VrrpStatusChange notification.
+	  When an instance transitioned from BACKUP to FAULT, the Dbus
+	  status change message reported the old status (BACKUP) rather than
+	  the new status (FAULT). This commit attempts to resolved that.
+
+2018-05-08 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.4.4 released.
+	* doc: ipvs schedulers update
+	* Fix a couple of typos in configure.ac.
+	* Fix namespace collision with musl if_ether.h.
+	* Check if return value from read_value_block() is null before using.
+	* Fix reporting real server stats via SNMP.
+	* Make checker process handle RTM_NEWLINK messages with -a option
+	  Even though the checker process doesn't subscribe to RTNLGRP_LINK
+	  messages, it appears that older kernels (certainly 2.6.32) can
+	  send RTM_NEWLINK (but not RTM_DELLINK) messages. This occurs
+	  when the link is set to up state.
+	  Only the VRRP process is interested in link messages, and so the
+	  checker process doesn't do the necessary initialisation to be able
+	  to handle RTM_NEWLINK messages.
+	  This commit makes the checker process simply discard RTM_NEWLINK
+	  and RTM_DELLINK messages, rather than assuming that if it receives
+	  an RTM_NEWLINK message it must be the VRRP process.
+	  This problem was reported in issue #848 since the checker process
+	  was segfaulting when a new interface was added when the -a command
+	  line option was specified.
+	* Fix handling RTM_NEWLINK when building without VRRP code.
+	* Fix building on Fedora 28.
+	  net-snmp-config output can include compiler and linker flags that
+	  refer to spec files that were used to build net-snmp but may not
+	  exist on the system building keepalived. That would cause the build
+	  done by configure to test for net-snmp support to fail; in particular
+	  on a Fedora 28 system that doesn't have the redhat-rpm-config package
+	  installed.
+	  This commit checks that any spec files in the compiler and linker
+	  flags returned by net-snmp-config exist on the system building
+	  keepalived, and if not it removes the reference(s) to the spec file(s).
+
+2018-04-09 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.4.3 released.
+	* vrrp: setting '0' as default value for ifa_flags to make gcc happy.
+	* Add additional libraries when testing for presence of SSL_CTX_new().
+	  It appears that some systems need -lcrypto when linking with -lssl.
+	* Sanitise checking of libnl3 in configure.ac.
+	* Report and handle missing '}'s in config files.
+	* Add missing '\n' in keepalived.data output.
+	* Stop backup taking over as master while master reloads.
+	  If a reload was initiated just before an advert, and since it took
+	  one advert interval after a reload before an advert was sent, if the
+	  reload itself took more than one advert interval, the backup could
+	  time out and take over as master.
+	  This commit makes keepalived send adverts for all instances that are
+	  master immediately before a reload, and also sends adverts immediately
+	  after a reload, thereby trippling the time available for the reload
+	  to complete.
+	* Add route option fastopen_no_cookie and rule option l3mdev.
+	* Fix errors in KEEPALIVED-MIB.txt.
+	* Simplify setting on IN6_ADDR_GEN_MODE.
+	* Cosmetic changes to keepalived(8) man page.
+	* Don't set ipvs sync daemon to master state before becoming master
+	  If a vrrp instance which was the one specified for the ipvs sync
+	  daemon was configured with initial state master, the sync daemon
+	  was being set to master mode before the vrrp instance transitioned
+	  to master mode. This caused an error message when the vrrp instance
+	  transitioned to master and attempted to make the sync daemon go from
+	  backup to master mode.
+	  This commit stops setting the sync daemon to master mode at initialisation
+	  time, and it is set to master mode when the vrrp instance transitions
+	  to master.
+	* Fix freeing vector which has not had any entries allocated.
+	* Add additional mem-check disgnostics
+	  vector_alloc, vectot_alloc_slot, vector_free and alloc_strvec all
+	  call MALLOC/FREE but the functions written in the mem_check log
+	  are vector_alloc etc, not the functions that call them.
+	  This commit adds logging of the originating calling function.
+	* Fix memory leak in parser.c.
+	* Improve alignment of new mem-check logging.
+	* Disable all checkers on a virtual server when ha_suspend set.
+	  Only the first checker was being disabled; this commit now disables
+	  all of them.
+	  Also, make the decision to disable a checker when starting/reloading
+	  when scheduling the checker, so that the existance of the required
+	  address can be checked.
+	* Stop genhash segfaulting when built with --enable-mem-check.
+	* Fix memory allocation problems in genhash.
+	* Properly fix memory allocation problems in genhash.
+	* Fix persistence_granularity IPv4 netmask validation.
+	  The logic test from inet_aton() appears to be inverted.
+	* Fix segfault when checker configuration is missing expected parameter
+	  Issue #806 mentioned as an aside that "nb_get_retry" without a parameter
+	  was sigfaulting. Commit be7ae80 - "Stop segfaulting when configuration
+	  keyword is missing its parameter" missed the "hidden" uses of vector_slot()
+	  (i.e. those used via definitions in header files).
+	  This commit now updates those uses of vector_slot() to use strvec_slot()
+	  instead.
+	* Fix compiling on Linux 2.x kernels.
+	  There were missing checks for HAVE_DECL_CLONE_NEWNET causing
+	  references to an undeclared variable if CLONE_NEWNET wasn't defined.
+	* Improve parsing of kernel release.
+	  The kernel EXTRAVERSION can start with any character (although
+	  starting with a digit would be daft), so relax the check for it
+	  starting with a '-'. Kernels using both '+' and '.' being the
+	  first character of EXTRAVERSION have been reported.
+	* Improve grammer.
+	* add support for SNI in SSL_GET check.
+	  this adds a `enable_sni` parameter to SSL_GET, making sure the check
+	  passes the virtualhost in the SNI extension during SSL handshake.
+	* Optimise setting host name for SSL_GET requests with SNI.
+	* Allow SNI to be used with SSL_GET with OpenSSL v1.0.0 and LibreSSL.
+	* Use configure to check for SSL_set_tlsext_host_name()
+	  Rather than checking for a specific version of the OpenSSL library
+	  (and it would also need checking the version of the LibreSSL library)
+	  let configure check for the presence of SSL_set_tlsext_host_name().
+	  Also omit all code related to SNI of SSL_set_tlsext_host_name() is
+	  not available.
+	* Use configure to determine available OpenSSL functionality
+	  Rather than using version numbers of the OpenSSL library to determine
+	  what functions are available, let configure determine whether the
+	  functions are supported.
+	  The also means that the same tests work for LibreSSL.
+	* Add support for gratuitous ARPs for IP over Infiniband.
+	* Use system header definition instead of local definition IF_HWADDR_MAX
+	  linux/netdevice.h has definition MAX_ADDR_LEN, which is 32, whereas
+	  IF_HWADDR_MAX was locally defined to be 20.
+	  Unfortunately we end up with more system header file juggling to ensure
+	  we don't have duplicate definitions.
+	* Fix vrrp_script and check_misc scripts of type </dev/tcp/127.0.0.1/80.
+	* Add the first pre-defined config definition (${_PWD})
+	  ${_PWD} in a configuration file will be replaced with the full
+	  path name of the directory that keepalived is reading the current
+	  configuration file from.
+	* Open and run the notify fifo and script if no other fifo
+	  Due to the way the code was structured the notify_fifo for both
+	  checker and vrrp messages wasn't run if neither the vrrp or checker
+	  fifo wasn't configured.
+	  Also, if all three fifos were configured, the general fifo script
+	  was executed by both the vrrp and checker process, causing problems.
+	* Add support for Infiniband interfaces when dumping configuration.
+	* Tidy up layout in vrrp_arp.c.
+	* Add configure check for support of position independant executables (PIE).
+	* Add check for -pie support, and fix writing to keepalived.data.
+
+2018-02-25 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.4.2 released.
+	* Make genhash exit with exit code 1 on error.
+	  Issue #766 identified that genhash always exits with exit code 1
+	  even if an error has occurred.
+	* Rationalise printing of http header in genhash.
+	* Use http header Content-Length field in HTTP_CHECK/SSL_CHECK.
+	  If a Content-Length is supplied in the http header, use that as a
+	  limit to the data length (as wget does). If the length of data
+	  received does not match the Content-Length log a warning.
+	* Optimise parameter passing to fprintf in genhash.
+	* Don't declare mark variable if don't have MARK socket option.
+	* Fix sync groups with only one member.
+	  Commit c88744a0 allowed sync groups with only 1 member again, but
+	  didn't stop removing the sync group if there was only 1 member.
+	  This commit now doesn't remove sync groups with only one member.
+	* Make track scripts work with --enable-debug config option.
+	* Add warning if --enable-debug configure option is used.
+	* Allow more flexibility of layout of { and } in config files.
+	  keepalived was a bit fussy about where '{'s and '}'s (braces) could
+	  be placed in terms of after the keyword, or on a line on their own.
+	  It certainly was not possible to have multiple braces on one line.
+	  This commit now provides complete flexibility of where braces are, so
+	  long as they occur in the correct order.
+	* Make alloc_value_block() report block type if there is an error.
+	* Simplify alloc_value_block() by using libc string functions.
+	* Add dumping of garp delay config when using -d option.
+	* Fix fractions of seconds for garp group garp_interval.
+	* Make read_value_block() use alloc_value_block().
+	  This removes quite a bit of duplication of functionality, and
+	  ensures the configuration parsing will be more consistent.
+	* Fix build with Linux kernel headers v4.15.
+	  Linux kernel version 4.15 changed the libc/kernel headers suppression
+	  logic in a way that introduces collisions.
+	* Add missing command line options to keepalived(8) man page.
+	* Fix --dont-release-vrrp.
+	  On github, ushuz reported that commit 62e8455 - "Don't delete vmac
+	  interfaces before dropping multicast membership" broke --dont-release-vrrp.
+	  This commit restores the correct functionality.
+	* Define _GNU_SOURCE for all compilation units.
+	  Rather than defining _GNU_SOURCE when needed, let configure add
+	  it to the flags passed to the C compiler, so that it is defined
+	  for all compilation units. This ensures consistence.
+	* Fix new warnings procuded by gcc 8.
+	* Fix dumping empty lists.
+	  Add a check in dump_list() for an empty list, and don't attempt
+	  to dump it if it is empty.
+	* Resolve conversion-check compiler warnings.
+	* Add missing content to installing_keepalived.rst documentation.
+	  Issue #778 identified that there was text missing at the end of
+	  the document, and that is now added.
+	* Fix systemd service to start after network-online.target.
+	  This fix was merged downstream by RedHat in response to
+	  RHBZ #1413320.
+	* Update INSTALL file to describe packages needed for building
+	  documentation.
+	* INSTALL: note linux distro package that provides 'sphinx_rtd_theme'
+	* Clear /proc/sys/net/ipv6/conf/IF/disable_ipv6 when create VMACs.
+	  An issue was identified where keepalived was reporting permission
+	  denied when attempting to add an IPv6 address to a VMAC interface.
+	  It turned out that this was because
+	  /proc/sys/net/ipv6/conf/default/disable_ipv6
+	  was set to 1, causing IPv6 to be disables on all interfaces that
+	  keepalived created.
+	  This commit clears disable_ipv6 on any VMAC interfaces that
+	  keepalived creates if the vrrp instance is using IPv6.
+	
+2018-01-27 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.4.1 released.
+	* Improve and fix use of getopt_long().
+	  We musn't use a long option val of 1, since getopt_long() can return
+	  that value.
+	  getopt_long() also returns longindex == 0 when there is no matching
+	  long option, and there needs to be careful checking if there is an
+	  error to work out whether a long or short option was used, which is
+	  needed for meaningful error messages.
+	* Write assert() messages to syslog.
+	  assert()s are nasty things, but at least let's get the benefit of
+	  them, and write the messages to syslog, rather than losing them down
+	  stderr.
+	* Enable sorry server at startup if quorum down due to alpha mode
+	  If alpha mode is configured on sufficient checkers so that a
+	  virtual server doesn't have a quorum, we need to add the sorry
+	  server at startup, otherwise it won't be added until a quorum has
+	  been achieved and subsequently lost again. In the case where some
+	  of the checkers remain in the down state at startup, this would have
+	  meant that the sorry server never got added.
+	* For virtual servers, ensure quorum <= number of real servers
+	  If the quorum were gigher than the number of real servers, the
+	  quorum for the real server to come up could never be achieved, so
+	  if the quorum is greater than the number of real servers, reduce it
+	  to the number of real servers.
+	* Fix some SNMP keepalived checker integer types and default values.
+	  Some virtual server and real server values were being sent to SNMP
+	  with a signed type whereas the value is unsigned, so set the type
+	  field correctly.
+	  Some virtual server and real server values that apply to checkers
+	  are set to nonsense default values in order to determine if a
+	  value has been specified. Handle these values when reporting them
+	  to SNMP replying with 0 rather than a nonsense value.
+	* Fix some MALLOC/FREE issues with notify FIFOs.
+	*  Add instance_name/config_id to alert emails' subjects if configured.
+	  If multiple instances of keepalived are running, either different
+	  instance_names and/or config_ids, it is useful to know which
+	  keepalived instance the email relates to.
+	* Ensure that email body string isn't unterminated.
+	  Using strncpy() needs to ensure that there is a nul termination byte,
+	  so this commits adds always writing a nul byte to the end of the buffer.
+	* Remove duplicate fault notification.
+	* Fix problem with scripts found via PATH with a '/' in parameters.
+	  Recent discussions on issue #101 led to discovering that if an
+	  executable without a fully qualified name was specified as a script
+	  and there was a '/' character in the parameters, then the path
+	  resolution would not work.
+	* Send SNMP traps when go from backup to fault due to sync group.
+	  Commit 020a9ab added executing notify_fault for vrrp instances
+	  transitioning from backup to fault state due to another instance
+	  in the sync group going to fault state. This commit adds sending
+	  SNMP traps in the same circumstance.
+	* Revert "Add instance_name/config_id to alert emails' subjects if
+	  configured". This should be handled by setting router_id
+	* Add config option to send smtp-alerts to file rather than send emails
+	  This is useful for debugging purposes.
+	* Add additional entry to Travis-CI build matrix.
+	* Fix segfault if no sorry server configured for a virtual server.
+	  Issue #751 identified a segfault in vs_end_handler(), and it
+	  transpires that the forwarding method of the sorry server was being
+	  checked without first testing that a sorry server had been configured.
+	* Improve the log message when a master receives higher priority advert.
+	  The log message reported in issue #754
+	  "VRRP_Instance(VI_1) Received advert with higher priority 253, ours 253"
+	  is somewhat misleading since 253 == 253.
+	  This commit improves the log message in this case be reporting that
+	  the sender's IP address is higher and the priority is equal. It also
+	  states the it was a master receiving the advert.
+	* First stage of making --enable-debug work
+	  Issue #582 identified that compiling with --enable-debug produced
+	  an executable that didn't work.
+	  This commit largely makes that option work, but there needs to be
+	  more work to make signals work.
+	* Generalise handling of signals.
+	* Don't assume json header files are in /usr/include/json-c
+	  Use pkg-config to find the location of the json header files
+	  when testing for the presence of the header files in configure.
+	* Add file updated by configure.ac change.
+	* Log more helpful message when healthchecker activated or suspended
+	  Include the realserver in the log message
+	* Fix building with musl libc.
+	* fix spelling mistakes about keyword promote_secondaries in man page.
+
+2017-12-29 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.4.0 released.
+	* Add Linux build and runtime versions to -v output.
+	* Log kernel version and build kernel version to log at startup.
+	* Fix compiling with --enable-debug.
+	* Don't sleep for 1 send when exiting vrrp process if no vrrp instances.
+	* Streamline and rationalise use of child_finder function.
+	  The child_finder function is simplified, and also stop using the
+	  parent process' child_finder function in the checker process.
+	* Don't request bug report if script terminates due to seg fault.
+	  The report_child_status() function would log a message requesting a
+	  bug report if a check_misc script or a vrrp_track script exited due
+	  to a seg fault.
+	*  Handle vrrp track and check_misc scripts being killed by signal.
+	*  Rationalise reporting of child process exit status.
+	  report_child_status() is now only called in the main keepalived
+	  program. The reporting of the exit status of vrrp track scripts
+	  and MISC_CHECK scripts is now handled in the specific code for
+	  those scripts. This means that non 0 exit statuses aren't
+	  repeatedly reported for vrrp track scripts.
+	* eally fix reporting of child process exit status.
+	* Log a helpful message i using mem-check and too many allocs.
+	  keepalived simply being terminated by SIGABRT with no diagnostic
+	  message was unhelpful.
+	* Rename child_finder() to child_finder_name() etc
+	  The function only finds the name of the child process, and not
+	  the thread for the child process, so rename the function accordingly.
+	* Add log to file and no syslog options.
+	  With large configurations the syslog can get flooded and drop output.
+	  This commit adds options to not log to syslog, and also to log all
+	  output to files.
+	* Add option to only flush log files before forking.
+	* Don't poll netlink for all interfaces each time add a VMAC.
+	  We can poll for the individual interface details which significantly
+	  reduces what we have to process.
+	* Print interface details in keepalived.data output.
+	* Be consistent with type of size parameter for mlists.
+	* Fix sign conversion warnings.
+	* Add high performace child finder code.
+	  The code to find the relevant thread to execute afer a child process
+	  (either a vrrp track script or a misc_check healthchecker) was doing
+	  a linear search for the matching pid, which if there are a large number
+	  of child processes running could become time consuming.
+	  The code now will enable high performance child finding, based on using
+	  mlists hashed by the pid, if there are 32 or more vrrp track scripts or
+	  misc check healthcheckers. The size of the mlist is based on the number
+	  of scripts, with a limit of 256.
+	* Improve high performance child termination timeout code.
+	* Fix high performance child finder cleanup code.
+	* Preserve filename in script path name resolution.
+	  Some executables change their behaviour depending on the name by
+	  which they are invoked (e.g. /usr/sbin/pidof when it is a link to
+	  /usr/sbin/killall5). Using realpath() changes the file name part
+	  if it is a symbolic link. This commit resolves all symbolic links
+	  to directories, but leaves the file name part unaltered. It then
+	  checks the security of both the path to the link and the path to
+	  the real file.
+	* Handle scripts names that are symbolic links properly.
+	* Use fstatat() rather than stat() for checking script security.
+	  If we use fstatat() we can discover if a file is a symbolic
+	  link and treat it accordingly.
+	* Fix building with kernels older than v4.4.
+	* Fix building with --disable-lipiptc and --enable-dynamic-linking.
+	* Fix building with --without-vrrp configure option.
+	* Resolve unused return value warning.
+	* Fix some RFC SNMP issues.
+	* Attempt to fix mock builds.
+	* Fix parsing of broadcast + and broadcast -
+	* check_http.c: http_get_check_compare crash fixed in case of absense
+	  of digest.
+	* Add -pie linker option.
+	  Since -fPIE is specified for the compiler, -pie should be specified
+	  for the linker.
+	* check_http.c: http_get_check_compare crash fixed in case of absense o.
+	* Fix use S_PATH and fchdir().
+	  S_PATH wasn't defined until Linux 2.6.39 and fchdir() doesn't work
+	  with S_PATH until Linux 3.5 (according to open(2) man page).
+	* Fix building with Linux versions between 2.6.39 and 3.3
+	  Linux 2.6.39 introduced ipsets, but the kernel had some omissions
+	  from linux/netfilter/ipset/ip_set.h header file, so the libipset
+	  provided version needed to be used.
+	  Note: RedHat backported ipsets to at least 2.6.32, so the problem
+	  applied to earlier versions of RedHat Linux and Centos.
+	* Fix segfault when parsing invalid real server.
+	  If the first real server ip address doesn't match the address
+	  family of the virtual server, then we need to skip parsing the
+	  rest of the real_server block.
+	* Make when vs_end_handler is executed
+	  Commit 1ba7180b ('ipvs: new service option "ip_family"') added a
+	  sublevel_end_handler vs_end_handler, but this was being executed
+	  at the end of each real_server rather than after the virtual_server.
+	  This commit adds a new parser function install_root_end_handler(),
+	  and vs_end_handler is now installed using that function so that it
+	  is executed at the end of the virtual_server rather than after each
+	  real_server.
+	* Allow tunnelled rs address family not to match vs family.
+	  The address family of a tunnelled real server does not have to
+	  match the address family of its virtual server, so we need to
+	  delay any setting of the vs address family from an rs address
+	  until the end of the real_server block, so that we know whether
+	  the forwarding method is tunnelling or not. Likewise the check
+	  of the sorry server has to be delayed until the end of the
+	  virtual server configuration (the tunnelling method may be
+	  specified after the address of the real/sorry server).
+	  The address family of a virtual server is only not determined
+	  by the virtual server configuration itself if the virtual server
+	  is defined by a fwmark and all of the real/sorry servers are
+	  tunnelled. In this case the address family cannot properly be
+	  determined from the address family of any tunnelled real servers.
+	  However, to maintain backward compatibility with configurations
+	  used prior to this commit, the address family of the virtual
+	  server will be taken from the address family of the (tunnelled)
+	  real/sorry servers if they are all the same; if they are not all
+	  the same it will default to IPv4 (this is not incompatible since
+	  previously mixed IPv4 and IPv6 real/sorry servers were not allowed,
+	  even if tunnelled).
+	* Remove bogus warning for fwmark virtual servers.
+	  "Warning: Virtual server FWM 83: protocol specified for fwmark
+	  - protocol will be ignored" should not be given if no protocol has
+	  been specified.
+	* Fix removing left-over addresses if keepalived aborts.
+	* Fix use of init_state after a reload.
+	  Issue #627 identified that vrrp->init_state was being incorrectly
+	  used in vrrp_fault(), since it is modified at a reload.
+	  Instead of using init_state, we now use the configured priority
+	  of the vrrp instance, so if the vrrp instance is the address owner
+	  (priority 255) it will transition to master after leaving to fault
+	  state, otherwise it transitions to backup.
+	* Remove init_state from vrrp structure
+	  init_state is no longer used, so remove it from the vrrp structure.
+	  Since it has been included in keepalived SNMP, it is preserved
+	  solely for reporting in SNMP requests.
+	* Change conditional compilation _WITH_SNMP_KEEPALIVED_ to
+	  _WITH_SNMP_VRRP_
+	  The functionality that the conditional compilation enabled was snmp
+	  vrrp functionality, so make the name more relevant.
+	* Update error message in configure.ac.
+	* Add more configure options to Travis build matrix.
+	* Install additional libraries in Travis environment for new options.
+	* Fix some problem found by Travis-ci.
+	* Fix configure --disable-checksum-compat option.
+	* Remove DOS file formatting from .travis.yml.
+	* Add more configuration option to Travis builds and some build fixes.
+	* Tidy up some code alignment.
+	* Update openssl use to stop using deprecated functions
+	  openssl from version 1.1 deprecated certain functions that keepalived
+	  was using. This commit ceases using those functions if the version
+	  of openssl is >= 1.1.
+	* Fix some issues identified by valgrind.
+	  Some file descriptors weren't being closed at exit, and also one
+	  or two mallocs weren't being freed.
+	* Set pointer to NULL after FREE_PTR() unless exiting.
+	* Allow sync groups with only 1 member, but issue a warning.
+	* Fix building with LibreSSL version of OpenSSL.
+	  Unfortunately LibreSSL updates OPENSSL_VERSION_NUMBER, and its value
+	  is higher that OpenSSL's latest version. When checking the version
+	  number we need to check that we are not using LibreSSL (by checking
+	  whether LIBRESSL_VERSION_NUMBER is defined).
+	  LibreSSL also hasn't implemented the new functions that OpenSSL has
+	  provided to replace functions that are deprecated or it is recommended
+	  should not be used, and so if using LibreSSL the old functions need
+	  to be used.
+	* Update genhash to stop using deprecated functions openssl functions.
+	* Remove last few Subversion source file version Id strings.
+	  Some of the genhash source code still had Subversion Id strings,
+	  and these are now removed.
+	* Add copyright update script.
+	* Copyright update.
+	* Remove outdated Version comment.
+	* Fix update copyright script.
+	* Include Makefile.in files in copyright update.
+	* Add replaceable parameters in configuration files.
+	* Fix some MALLOC/FREE issues with config parameters.
+	* Add multiline configuration definitions.
+	* Remove debugging messages left in lib/parser.c.
+	* Fix a FREE error.
+	* Fix keepalived.conf(5) man page.
+	* Fix type in keepalived.conf(5) man page.
+	* Suppress error message when removing leftover addresses at startup.
+
+2017-10-21 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.3.9 released.
+	* Stop segfault if SSL context cannot be initialised.
+	* Don't leave point to SSL data after freeing it.
+	* Fix memory leak if duplicate SSL context values specified.
+	* Don't initialise an SSL context if it isn't being used.
+	* Checksum compatibility should refer to v1.3.6.
+	* Update keepalived.spec.in for differences between Fedora and CentOS.
+	* change hash to something more even and hash size accordingly.
+	* also update size of hash in free_list.
+
+2017-10-15 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.3.8 released.
+	* parser: do not exit when glob() doesn't match any files.
+	* Use nodename as default id for conditional configuration.
+	  If the node name returned by uname() is host123.abc.de, then
+	  lines in the configuration file matching @host123 will match the
+	  conditional configuration test. This means that it is no longer
+	  necessary to specify the -i command line option if the conditional
+	  configuration string used in the configuration is the node name.
+	* Option --i/--config-id parameter is not optional.
+	  Since the config-id defaults to the hostname, there is no point
+	  in allowing --config-id to be used without a parameter, just to mean
+	  use the hostname.
+	* Use NULL instead of 0 for pointers in get_longopts struct.
+	* Some minor tidying up of the new JSON output code.
+	  1. Use SIGRTMIN+2 rather than (_SIGRTMIN + 4)
+	  2. Don't include JSON code if not building with VRRP
+	  3. Some code alignment fixes
+	  4. Some conditional compilation additions
+	* Add --signum command line option to report signal numbers.
+	  Since keepalived is starting to use real time signals, and those
+	  signal numbers are not fixes, this commit introduces a way to
+	  ask keepalived to report those signal numbers.
+	* Stop command line option -i segfaulting.
+	* Fix config include files when file has no directory par.
+	  When an include file name has no directory part, there is no
+	  directory to change to, so don't try to do so.
+	* Use getcwd() malloc functionality if available.
+	* Add support for csh brace globs in config file names.
+	* Update documentation for config file include directive.
+	* Use fchdir() when changing direcories while reading include files.
+	  The getcwd(3) man page recommends using open()/fchdir() rather than
+	  getcwd()/chdir() since fchdir() is guarantee to return to the previous
+	  directory even if directories have been renamed in between the first
+	  chdir and the second. It also suggests that it is faster, and saves
+	  mallocs or allocation of arrays on the stack of size PATH_MAX.
+	* Use alloc_value_block() for vrrp_vip_handler().
+	* Fix whitespace error introduced in commit 9458c9b9.
+	* Reinforce that '@' conditional config character must be 1st on line.
+	  The '@' conditional configuration character must be the very first
+	  on a configuration, meaning that there cannot even by whitespace
+	  before the '@' character.
+	* Check whether GLOB_BRACE is supported (it is not part of POSIX.2).
+	* When building a docker image, it appears that autoheader is required.
+	* Fix IPVS virtual server setup with persistence.
+	* Remove a merge conflict .rej file accidentally added to git.
+	  This commit also updates the .gitconfig file to ensure that .rej
+	  files will not be added in the future.
+	* config synopsis - cleanup line endings and comment alignment.
+	* conf examples - clean eol whitespace.
+	* conf examples - clean triple line breaks.
+	* add pair of config options used in misc_check.
+	* clean surprise tab character.
+	* many whitespace fixes; some missing docu added to synopsis.
+	* config docs - apply code review markups.
+	* Trivial updates to latest format cleaning patches.
+	* Allow conditional configuration to work with include statements.
+	* Allow '@' conditional configuration to be preceeded by whitespace.
+
+2017-10-01 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.3.7 released.
+	* Allow broadcast address to be specified as '-' or '+'
+	  When configuring an ip address with a broadcast address, allow the
+	  use of - and + (like ip(8)) to clear or set the host specfic bits of
+	  the address, i.e.
+	  10.6.23.254/16 broadcast + result in a broadcast address of 10.6.255.255
+	  10.6.23.254/16 broadcast - results in a broadcast address of 10.6.0.0
+	* Change some code layout and macro/variable names
+	* Print unicast peer addresses in /tmp/keepalived.data
+	* Add negative conditional configuration.
+	  A configuration line starting @main will only be included if
+	  keepalived is started with option -i main.
+	  This commit adds configuration option @^main, meaning that the
+	  remainder of the configuration line will only be included if
+	  -i main was NOT specified.
+	* Fix calculation of checksum for VRRPv3 IPv4 unicast peers.
+	  Alternate unicast peers were being sent adverts with the checksum
+	  set to 0. The reason for this was that the checksum field was not
+	  being set to 0 before the checksum calculation, hence causing the
+	  calculated checksum to be 0 for the second, fourth, sixth etc
+	  unicast peer.
+	* Generate README from README.md.
+	* Only declare (and use) auth variables if compiling with authentication.
+	  authtype_mismatch and auth_failure are only used if authentication is
+	  enabled.
+	* The vrrp_t vmac flag should be a bool.
+	* Add include guard for vrrp_print.h.
+	* Log some additional vrrp variables.
+	* Make checksum change backwards compatible.
+	  This commits adds the ability of keepalived to revert to using the old
+	  checksum calculation if it sees an advert that has an old checksum. This
+	  means that if an old and a new version of keepalived are working
+	  together, once the new version has seen an advert from an old version,
+	  it will drop back to using the old style checksum, and so the two
+	  keepalived instances will work together.
+	  There is a slight problem with this, though. If the old version starts
+	  when a new version is master, if will report bad checksums. This should
+	  be fine, since keepalived should discard the adverts, time out and send
+	  an advert which would make the new keepalived revert to old checksums.
+	  Unfortunately, keepalived does not completely ignore bad adverts, since
+	  it resets its master down timer, even for bad adverts, and so it never
+	  times out. However, in this scenario, there will still remain one master
+	  and all the other keepalived instances will be in backup state, and so
+	  VRRP functionality is preserved.
+	  As identified in commit bcf2936 until commit 67275d2 keepalived did not
+	  work with VRRPv3 and more than one other unicast peer, so for migration
+	  we only need to consider two unicast peers. To upgrade, first upgrade
+	  the keepalived instance that is in backup mode. This will see old
+	  checksums when it starts, and so start using old checksums. The other
+	  keepalived instance can then be upgraded and it will also see old
+	  checksums when it starts up. In order to switch to using new checksums,
+	  temporarily add the following line in the configuration of each vrrp
+	  instance that is in master state:
+	  old_unicast_checksum never
+	  and then reload the keepalived instance by sending it SIGHUP. After the
+	  master has restarted, restart the backup with a SIGHUP, and they will
+	  then be using new checksums. The temporary old_unicast_checksum never
+	  lines can now be removed from the configuration.
+	* Add checker bind_if keyword.
+	  If a checker binds to a link local IPv6 address, the interface has
+	  to be specified.
+	* Make DBus service name configurable.
+	* Make --config-id option default to hostname.
+	  This is the equivalent of specifying --config-id `hostname -s`, and
+	  makes it more straightforward to deploy the same configuration to
+	  multiple hosts.
+	* Issue warning if more than 1 dynamic misc_checker per real server.
+	  If different scripts return different exit statuses, the priority
+	  of the real server will keep changing. The solution is to combine
+	  the functionality into 1 script.
+	* Improve DBus error handling.
+	  . Always clear errors to avoid leaks
+	  . Check for errors when emitting signals
+	  . Check for errors when registering objects
+	* Stop test tcp_server leaving zombie processes.
+	* Fix persistence_granularity handling
+	  1. vs->addr.ss_family should never be used to check address family of
+	     vs since there may not be an address is using fwmark.
+	  2. If using fwmark, the address family may not be known when parsing
+	     persistence_granularity
+	  3. Set address family from format of persistence_granularity if not
+	     already set
+	  4. Ensure entire string is a number and is between 1 and 128 for IPv6
+	  5. Ensure netmask specified for IPv4 is solid
+	* Ensure always check return from inet_stosockaddr when parsing config.
+	* Add lthreshold and uthreshold to keepalived.SYNOPSIS.
+	* Merge virtual server group addresses and ranges into one list.
+	  A single address can be treated as a range with only 1 address, so
+	  this reduces the number of lists that need to be processed when
+	  handling a virtual server group.
+	  A number of corrections were also made re hton/ntoh(s|l).
+	* Remove redundant setting of real server weight.
+	* Don't use vs->addr.ss_family for address family of virtual server.
+	  A virtual server won't use vs->addr if it is defined by a fwmark or
+	  it is uses a firtual server group. vs->af is the correct field to use.
+	* Make ipvs_update_stats() little/big endian aware.
+	* Simplify ipvs_update_stats().
+	  Don't run a state machine to collect all the stats, simple iterate
+	  through the entries.
+	* Move fetching ipvs stats into ipvs_update_vs_stats().
+	* Remove some #defines in ipvs_update_stats().
+	* Streamline setup for changing ipvs configuration.
+	* Fix updating resolved notify script path names with parameters.
+	* Add silent option to test/tcp_server.
+	* Document default checker connect ip/port.
+	* Remove duplicate setting up of file name.
+	* Validate HTTP_GET and SSL_GET checkers.
+	  Unsure that urls have a path specified, and that the checkers have
+	  at least one url specified.
+	* Fix memory leak if SMTP_CHECK helo_name specified.
+	* Fix dumping of SMTP_CHECK host list.
+	* Don't allocate and copy default SMTP_CHECK helo name unless needed.
+	* Tidy up dumping SMTP checkers.
+	* Remove smtp_host_t typedef.
+	  If is passed to functions that take a conn_opts_t parameter, so
+	  we need to explicitly use the correct type.
+	* Simplify handling of host{} block in SMTP_CHECK.
+	  This also allows specifying connect_ip, connect_port as well as
+	  unsing host blocks.
+	* Add DNS_CHECK RRSIG and DNSKEY query types.
+	* Fix documentation re MISC_CHECK.
+	* Detect if no misc_path specified for MISC_CHECK.
+	  If no path was specified, keepalived was segfaulting.
+	* Add some more error messages to socket_bind_connect().
+	* Checker connections aren't always TCP.
+	* Report if checker bind_if is missing
+	  If a link local IPv6 address is specified for a checker to
+	  connect to, then a bind interface must also be specified,
+	  otherwise the connect() call fails.
+	* If a real server has inhibit_on_failure, configure it at start up
+	  If a real server had inhibit_on_failure set, but it also had an
+	  alpha mode checker, then the real server should be installed at
+	  startup with weight 0 to be consistent with what would happen if
+	  the checker had been successful but then failed.
+	* Improve handling of virtual server groups.
+	  If multiple virtual servers use the same virtual server group, and
+	  the virtual servers have different protocols, or the virtual server
+	  groups are defined using only fwmarks and the virtual servers have
+	  different address families, then multiple versions of the entries
+	  in the virtual server groups will need to be created as IPVS
+	  virtual servers.
+	  This patch handles the creation and removal of the necessary different
+	  virtual servers for the virtual server groups.
+	* Add virtual server protocol types SCTP and none for SNMP.
+	* Handle virtual server with no protocol specified
+	  This is valid if fwmarks are being used.
+	* Warn if a protocol is set on a virtual server using firewall marks.
+	* Don't check !LIST_ISEMPTY(vs->rs) after config is validated
+	  In validate_check_config() any virtual server without any real
+	  servers is removed, so there is no need to check subsequently.
+	* Don't allow virtual server groups without any addresses for fwmarks.
+	* Fix and optimise handling of promote_secondaries.
+	  The promote_secondaries flag was being cleared by the first vrrp
+	  instance that stopped using an interface, rather than by the last
+	  instance.
+	* Fix the setting of mcast address for checksum compatibility
+	  It was using INADDR_VRRP_GROUP rather than vrrp_mcast_group4.
+
+2017-09-15 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.3.6 released.
+	* Ensure locations of pid files is consistent
+	  Issue #563 identified that the generated keepalived.service has the
+	  wrong location for the pid file. On investigating this it was discovered
+	  that keepalived isn't following the GNU coding standards for location of
+	  pid files; however, we can't now move the default location of pid files.
+	  This commit ensures that the keepalived.service file's location for pid
+	  files is consistent with where keepalived is placing them, but also adds
+	  a configure option --enable-gnu-std-paths, which means that keepalived
+	  will use ${localstatedir} for the location of pid files, while the default
+	  remains /var/run
+	* Stop logging that preferred_lft has been set to 0.
+	  Some users are interpreting the message as a warning, and hence are
+	  unnecessarily avoiding using a /128 netmask for IPv6 addresses. The
+	  message doesn't really tell us anything useful, so remove it.
+	* Handle not being able to load ip_tables or ip6_tables modules.
+	  When running in a docker container it isn't possible to load kernel
+	  modules, so we need to cleanly handle a failure to load the modules.
+	* Don't segfault if unable to load ip_vs module.
+	  In a docker container it isn't possible to load a kernel module. The
+	  check code was detecting that it couldn't load the module, but the
+	  checker process, when cleaning up prior to exiting, was assuming that
+	  certain pointers had been initialised which hadn't been when an error
+	  was detected so early in the initialisation.
+	  This commit adds testing for uninitialised pointers during the exit
+	  sequence.
+	* Fix releasing malloc'd memory for saved core pattern.
+	* Fix memory leak when adding iptables entries.
+	* Handle missing virtual server configuration.
+	  keepalived was segfaulting if a virtual server had no real servers
+	  configured. There were also issues of checkers running even if there
+	  was missing essential configuration from a virtual server which meant
+	  it could be set up. The problems were a virtual server group specified
+	  but it didn't exist, a virtual server group with no configuration, and
+	  a virtual server address family not match the address family of a virtual
+	  server group.
+	* Don't attempt to remove ipsets if ipset handling not initialised.
+	* Delay initialising IPVS until affter processing configuration.
+	  If IPVS isn't configured, there is not point in loading the ip_vs
+	  module.
+	* Fix conditional compilation tests for _HAVE_LIBNL3_
+	* Make dynamic flag bool.
+	* Don't report exit status of misc_check scripts.
+	  The result of a change in status from a misc_check script is reported
+	  by the code anyway, so to log any non-zero exit code is superfluous and
+	  annoying.
+	* Work around conflict between kernel and libipset header files.
+	  ipset copies linux/netfilter/ipset/ip_set.h (and other) header
+	  files, producing local copies that are installed as
+	  libipset/linux_ip_set.h etc as part of the libipset development
+	  package. Unfortunately although the kernel changes the include
+	  guards when processing its source code, ipset does not, and so
+	  the duplicated header files have different include guards.
+	  This patch detects if the include guards don't match, and if so
+	  if linux/netfilter/ipset/ip_set.h is included, it defines the
+	  include guard used by libipset/linux_ip_set.h before the latter is
+	  indirectly included.
+	* add Dockerfile.
+	* Fix detecting default script uid/gid.
+	* Stop segfault when keepalived can't load ip_vs module.
+	* Add some additional docker support files and add make target docker.
+	  The configuration file installed by make install isn't ideal to run
+	  keepalived with, so add a simple keepalived.conf that will be
+	  installed into the container.
+	  Add make target docker, to build the docker image.
+	  Add docker/README to give some information about building and using
+	  containers (this is mainly so that I don't forget how to the details).
+	* Remove a line of debugging code.
+	* Don't complain about keepalived_script user if not needed.
+	  keepalived logged a warning every time if the keepalived_script user
+	  didn't exist. We only need that warning if there is a script that uses
+	  the default user, and an alternative defult user isn't specified.
+	* Fix relative script path names with embedded spaces.
+	  The space wasn't being restored after resolving the path name.
+	* Fix memory leak if notify scripts specified multiple times.
+	* Remove some residual debugging messages.
+	* Fix memory leak if quorum up/down scripts specified multiple times.
+	* Use realpath() to canonicalize script names.
+	* Fix missing PARAMETER_UNSET, which caused the global value of
+	  vrrp_higher_prio_send_advert not to be used for each VRRP instance.
+	* Remove unused variable introduced in commit 1c5bfa29.
+	* Fix using virtual server groups following commit 5ca36cb.
+	* Set address port to be sequence number for virtual server group.
+	  The format_vs() function uses the virtual server address port as
+	  the sequence number of the virtual server instance using the virtual
+	  server group, so we need to set it up.
+	* Warn if real server has no checkers when alpha mode.
+	  If a virtual server is configured with alpha mode, and a real server
+	  has no checkers, the real server will never be able to be activated,
+	  so generate an appropriate warning.
+	* Only delete virtual server once if using a virtual server group.
+	  If multiple virtual servers are using a virtual server group, the
+	  virtual servers are defined by the virtual server group, and so they
+	  should only be deleted for the first virtual server using the group.
+	  There is still an issue that the configuration of all virtual servers
+	  using the virtual server group needs to be consistent.
+	* Add further checks for LVS configuration.
+	* Document additional scheduling algorithms for IPVS.
+	* Change virtual_server_t loadbalancing_kind to forwarding_method.
+	  The variable name loadbalancing_kind didn't represent the meaning of
+	  the parameter, so change it to forwarding_method.
+	* Add fo and ovf scheduling types to SNMP.
+	* Only check one packet scheduling if supported.
+	* Add lvs_method per real server.
+	  The lvs_method should be settable for each real server within a
+	  virtual server. This commit maintains existing default behaviour
+	  by using the lvs_method set against the virtual server as the default
+	  for the real servers, but adds the option to configure the lvs_method
+	  individually for each real server.
+	* Fix type in printing config of scripts.
+	* Convert some spaces to tabs.
+	* logger: output timestamps to console logs.
+	* Optimise handling of config_id in parser.
+	* Fix some typos.
+	* prog_type variable doesn't make sense when building a DEBUG version.
+	  The DEBUG version runs everything in a single process, and to the
+	  prog_type variable is meaningless in this case. This commit excludes
+	  the prog_type variable by conditional compilation when building a
+	  DEBUG version.
+	* Add home, -nodad, mngtmpaddr, noprefixroute, and autojoin address flags.
+	* Update documentation for commit cc67476.
+	* Add notify FIFO.
+	  pull requests #568 and #587 and issue #584 have all identified that if
+	  notify scripts are run in close succession, then order if processing of
+	  those scripts is indeterminate, and this is causing systems that are
+	  monitoring the state of vrrp instances to have the wrong state.
+	  There have been various suggestions about how this should be resolved,
+	  principally along the lines that the notify scripts should be run
+	  synchronously, i.e. a notify script should not be run until the previous
+	  notify script completed. While this would work, it adds some overhead to
+	  keepalived, which currently does not monitor the exit status of notify
+	  scripts.
+	  There is a further issue with notify scripts that if a large number of
+	  events occur in rapid succession (e.g. due to an interface flapping), this
+	  can cause a large number of child processes to be created very rapidly.
+	  This commit adds an alternative method for external processes receiving
+	  notification of events. Instead of forking a script for each event, keepalived
+	  will write to a named pipe. An external process can then read the pipe to
+	  receive notification of events, and process them appropriately. This is
+	  guaranteed to deliver events in the correct order. It also has the benefit
+	  that there isn't the overhead of forking a child process for each event.
+	* If can't get local host name, set default router_id to "[unknown]".
+	  Issue #588 reported that keepalived was segfaulting when generating
+	  an SNMP trap in strlen(global_data->router_id), which presumable is
+	  due to global_data->router_id being NULL. As a precaution set
+	  router_id to "[unknown]" if get_local_name() fails".
+	* Implement SNMP reporting smtpServerPort.
+	  Commit 128cd24 added functionality for specifying smtp server port
+	  and commit bcb09b8a added smtpServerPort to the keepalived MIB, but
+	  no code was added to report the port. This commit adds that functionality.
+	* Don't use PATH when executing FIFO script.
+	  The path has already been resolved as part of checking the script
+	  security, so there is no need to search the path.
+	* Log error if unable to execute FIFO notify script.
+	* Pass FIFO name to notify_fifo_script as parameter.
+	* Add FIFO notify for LVS notifies.
+	  To match the FIFO notifies for VRRP, this commit adds FIFO notifies
+	  for LVS. There are now three FIFOs available, a global one that
+	  will send output for VRRP and LVS, one for VRRP only and one for
+	  LVS only.
+	* Fix conditional compilation for --enable-debug
+	  Commit 7947247 attempted to sort out making keepalived work with
+	  --enable-debug, but unfortunately it used the wrong conditional
+	  compilation variable (DEBUG instead of _DEBUG_). This commit
+	  corrects the conditional compilation tests.
+	* Include protocol in virtual and real server output.
+	* Stop segfaulting if no script given for a vrrp_script.
+	* Fix a _DEBUG_ conditional compilation test.
+	* Fix incorrect expression in clear_services().
+	* Fix use htons() instead of ntohs().
+	* Fix bad file descriptor error at reload with no virtual servers.
+	* Delete disabled inhibit servers at reload.
+	* Add logging to remove sorry server at reload.
+	* Fix bad file descriptor error at reload with no virtual servers.
+	* Delete disabled inhibit servers at reload.
+	* Fix thread_cancel() for timed out threads.
+	* build: add basic .travis.yml file
+	* README.md: rename from README.
+	* build: add build status tag in readme file
+	  All that's needed now, is for user `acassen` to
+	  go to `https://travis-ci.org/` login with the Github
+	  account, import repos from Github, and enable build
+	  for keepalived [a checkbox/button].
+	* Set sorry_server's fowarding_method.
+	* Further fix for thread_cancel() for child timeout threads.
+	  Commit ade3d699 fixed removing read and write timeout threads
+	  from the ready queue when they are cancelled. This commits adds
+	  removing child timeout threads from the ready queue too.
+	* Fix warnings from ignoring seteuid/setegid return results.
+	* Fix dynamic linking with early versions of libnl3 without nla_get_s32.
+	* Updated autoconf files due to autoconf upgrade.
+	* Fix compiling with namespace collisions in net/if.h and linux.if.h.
+	* Update travis configuration.
+	  This commit includes the installation of development library
+	  packages, updated kernel header files, using trusty for the builds,
+	  and adding more build options.
+	* Reinstate distributing (renamed) README.md file.
+	* More updates for updated automake/autoconf.
+	* Fix new warnings produced by gcc 7.
+	*  Migrate failed checkers at reload (provisional implementation).
+	* Implement comparison of checkers.
+	  genhash: libraries to link with should be put in LDADD, not LDFLAGS.
+	* configure.ac: fixed build on older systems, namely CentOS 6.
+	  Provide AS_VAR_COPY if missing and downgrade autoconf dep to 2.63.
+	* Fix worng migrate of checker-id.
+	* Set active if new failed_checkers is empty.
+	* Fix typo in interface details printing.
+	* Enable vmacs to work when sysctl net.ipv4.conf.all.rp_filter > 0.
+	  A number of distros now set net.ipv4.conf.all.rp_filter = 1 by default.
+	  This means that when a vrrp instance is in the master state, it cannot
+	  receive adverts sent by a higher priority master, and hence we end up
+	  with 2 masters.
+	  I tried an alternative of receiving on the base interface, but no packets
+	  that have the same source MAC address as an interface on the system
+	  (i.e. the vmac interface) get delivered to the socket.
+	  For distros such as Fedora, RHEL, CentOS, ArchLinux, all.rp_filter = 1
+	  due to systemd commit
+	  https://github.com/systemd/systemd/commit/1836bf9e1d70240c8079e4db4312309f4f1f91fd
+	  The reason given for the commit is to work around a boot-time race condition
+	  where interfaces created before default.rp_filter is set do not get the
+	  updated default.rp_filter setting, and so the all.rp_filter setting is used
+	  to override the individual interface settings. This doesn't seem the right
+	  solution to the problem, since it prevents any interface running with
+	  rp_filter = 0, and that is what we need for vmacs. I have filed an issue
+	  report for systemd at https://github.com/systemd/systemd/issues/6282, but
+	  in the mean time we need to work around the issue. Ubuntu sets all.rp_filter=1
+	  in /etc/sysctl.d/10-network-security.conf provided by the procps package.
+	  Debian doesn't set all.rp_filter.
+	  The only solution I have found, and I am not entirely happy with this since
+	  it has effects beyond keepalived and affects the system as a whole, is to set
+	  all.rp_filter = 0. In order to seek not to change the operation of the system,
+	  if default.rp_filter < all.rp_filter, default.rp_filter is set to all.rp_filter,
+	  thereby ensuring that any new interfaces created will take the original value
+	  of all.rp_filter. It then iterates through all existing interfaces, and
+	  {interface}.rp_filter is set to the value of all.rp_filter if
+	  {interface}.rp_filter < all.rp_filter. all.rp_filter is then set to 0.
+	  This means that all interfaces should behave in the same way as before, since
+	  the behaviour of rp_filter is defined by the maximum of
+	  {interface,all}.rp_filter, but we are not able to operate the vmac interfaces
+	  with rp_filter = 0. When keepalived exists, it restores the original settings
+	  of rp_filter if they are the same as what we set them to.
+	* Only restore rp_filter on interfaces if same as we set them to.
+	  If rp_filter has been altered since we set it, then do not restore
+	  it to the original value.
+	* Update files for build fix commits.
+	  Commits 2cccc97 and a932cf2 provided fixes for building on CentOS6.
+	  This commit updates genhash/Makefile.in in line with
+	  genhash/Makefile.am and adds a comment to autoconf.ac regarding
+	  when autoconf introduced support of AS_VAR_COPY.
+	* Fix build error at when _HAVE_IPV4_DEVCONF_ was undefined.
+	* Remove unnecessary parameter compare.
+	* Resolve compiler warning introduced by commit 8361b11.
+	* Remove debugging log messages added in commits 99fe626 and 6ec26e0.
+	* Fix compiler warning and remove unwanted log messages.
+	* Make a couple of checker variables non global.
+	* Correct comparison for checker compare in migrate_failed_checkers.
+	  Commit 2ff6b3f changed the sense of the comparisons of checkers,
+	  but didn't make the corresponding change to checking the result.
+	* Fix keepalived.doc(5) man page.
+	* Add virtualhost config for real servers.
+	  Different real servers may want different virtualhost config
+	  settings. The real server virtualhost setting overrides the
+	  virtual server virtualhost setting.
+	* Allow virtualhost to be specified per checker and per url.
+	* Fix compiling with SNMP enabled.
+	* Fix compiler warnings when use configure --enable-conversion-checks.
+	* Fix an unintentional case fall-through.
+	  gcc 7 identified two case statement fall-throughs. One was intentional,
+	  but the other was a bug. The latter is now fixed, a comment is added
+	  for the former so the warning isn't generated.
+	* Fix commit cc67476 to allow flags for static and virtual ip addresses.
+	* Fix handling of more recent ip address flags.
+	  Recent ip address flags have exceeded 8 bits, and so the IFA_FLAGS
+	  attribute needs to be used, rather than the ifa_flags field.
+	* Fix typo in help.
+
+2017-03-19 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.3.5 released.
+	* Ensure nopreempt is not set if address owner.
+	* Remove hardcoded paths from init files.
+	* Add configure option to override system init type.
+	* Fix some configure tests for init type.
+	* Add support for ip rules uidrange option.
+	  This option was added in Linux 4.10.
+	* Resolve compiler warning on 32 bit systems.
+	  There were two warnings in lib/timer.c for signed vs. unsigned
+	  comparisons on 32 bit systems.
+	* Add missing documentation for ip rule uidrange.
+	* Include snapcraft.yaml tar file.
+	* Remove extraneous EXTRA_DIST directory.
+	* Add library requirements for ArchLinux.
+	* Allow tracking and misc_check scripts time to terminate after
+	  timeout. If a script exceeds the timeout, it is sent a SIGTERM,
+	  and then if it still doesn't terminate, it is sent a SIGKILL.
+	  The problem was that the script was only allowed 2 microseconds
+	  to terminate, whereas it should have been 2 seconds.
+	* Fix script paths when converted to absolute path names.
+	  If a tracking or misc_check script is not specified by a fully
+	  qualified path name, but rather it is resolved via PATH, the updated
+	  patch name wasn't being saved for tracking or misc_check scripts.
+	* Remove yet more hardcoded paths.
+	* Make git ignore keepalived.service file.
+	* Streamline signal handling initialisation.
+	* Report track script name if it times out.
+	  keepalived was simply reporting that pid nnnn had timed out, which
+	  didn't give any indication of what script it was that had timed out.
+	  This patch now means that the script name will be logged rather than
+	  the pid.
+	* Fix conditional configuration for config read via alloc_value_block().
+	  The code for handling conditional configuration was in the wrong function.
+	  This commit move it to read_line() so all configuration is read in the
+	  context of @system_id conditional lines.
+	* Fix compiling with --disable-vrrp.
+	  When building without vrrp, the checker process still needs to
+	  know about IP address creationg and deletion in order to allow the
+	  ha_suspend configuration option to work.
+	* The checker process never needs to monitor interfaces.
+	* Move vrrp_ipvs_needed() to vrrp_daemon.c.
+	* Remove some unnecessary includes of check_data.h.
+	* Make ha_suspend work when building without vrrp.
+	  Support of ha_suspend was only enabled when keepalived was built
+	  with vrrp support. There may be other processes that are adding and
+	  deleting ip addresses, so support of ha_suspend should be enabled when
+	  building without vrrp support.
+	  Also, the vrrp process doesn't need to call the update_checker_activity()
+	  function when addresses are added or deleted.
+	* Don't use netlink address monitoring if not using ha_suspend.
+	* Make --release-vips (-X) option work.
+	  'X' was not included in the optstring for getopt_long(), and so
+	  --release-vips option was not recognised.
+	  Further, only enable VRRP and checker specific options if compiled
+	  with that functionality.
+	* Only report added/deleted addresses if relevant to keepalived.
+	  Logs could get full of messages reporting address addition/deletion
+	  that were of no relevance to keepalived. By default, keepalived will
+	  now only report address additions/deletions with the -D option if
+	  the address is relevant to keepalived.
+	  The -a option is added to log all address additions/deletions.
+	* Remove all #ifdef _WITH_LVS_ from checker code.
+	  If building the checker code, _WITH_LVS_ is always defined (_WITH_LVS_
+	  means build the checker code), so there is no point testing if it is
+	  defined in any of the checker code.
+	* Only include vrrp header files when building with vrrp and also for
+	  check. Make sure vrrp header files are only included if building with
+	  vrrp (i.e. without --disable-vrrp), and likewise only include check
+	  header files if compiling with LVS support (i.e. without --disable-lvs).
+	* Add test/tcp_server.c for testing TCP_CHECK.
+	* Make -a option work without ha_suspend.
+	* Fix integer types. The correct, standard integer types are uint8_t and
+	  uint16_t, not u_int8_t nor u_int16_t (the latter being kernel types).
+	  glibc and uClibc may define the kernel-compatible types, but musl (which
+	  is standards-compliant) does not.
+	* Fix warning when compiling without libnl.
+	* Add including <stdint.h> where those types are used.
+	* Add option to not use dlopen() for libipset, but link at link time.
+	* Remove superfluous (duplicated) block of code.
+	* Add option for dynamic (run-time) linking to libip[46]tc.
+	* Fix dynamic linking of libiptc without ipsets.
+	* Check iptables/ip6tables commands available before using them.
+	* Fix some conversion check compiler warnings.
+	* Make configure option --disable-routes do something.
+	* Don't link to libdl if not needed.
+	* Fix compilation with --disable-vrrp.
+	* Don't link to libraries not required by configuration.
+	* Remove all authentication code if --disable-vrrp-auth specified.
+	* Remove FALLBACK_LIBNL1 and use existing _HAVE_LIBNL1_ instead.
+	  There was no point in a separate FALLBACK_LIBNL1 since it and
+	  _HAVE_LIBNL1_ always had the same value.
+	* Add udp functionality to tcp_server test program.
+	* Fix check_conditional_tests script.
+	* Add option for dynamic (run-time) linking to libxtables.
+	* First stage of run-time linking to libnl-3.
+	* Dynamic/static linking options of libnl/libnl-3, libip[46]tc and
+	  libipset. libnl/libnl-3, libip[46]tc and libipset can all be dynamically
+	  linked at run-time, and if they are not available, keepalvied will use
+	  the alternative code which is used when the libraries cannot be linked
+	  a build time.
+	  This means that a single executable keepalived can be created that will
+	  use the libraries if they are installed on the target system, but will
+	  fall back to the alternatives if the libraries are not available.
+	  This is useful for build environments such as Buildroot which will not
+	  force optional dependencies (see pull request #540), since now keepalived
+	  can be built so as not to force the optional dependencies, but to make
+	  use of them if they are installed.
+	* Fix building without libnl/libnl-3.
+	* Don't allow adver_int to be rounded down to 0.
+	* Fix creation of iptables entries on more recent kernels.
+	  On a 4.9.13 kernel iptables entries were being created with
+	  return-nomatch ! update-counters ! update-subcounters, as shown by
+	  the iptables command.
+	  Although it is not understood why these options are being added, it
+	  transpires that the problem occurs when using version one of the
+	  xt_info_set_match, but doesn't occur when using version 4 of the
+	  structure.
+	  This patch ensures that the latest version of the structure that is
+	  supported by the kernel is always used.
+	* Fix updating /proc/sys/kernel/core_pattern.
+	  Reset file offset to beginning of file between reading the file and
+	  writing new contents.
+	* Fix printing of smtp_server port.
+	* Handle failure if fail dynamically to get address of a libipset function.
+	* Be defensive in case fail to get addres of a libipset function dynamically.
+	* Fix evaluation of library names for run-time linking.
+	* Show failed ipset dl function.
+	* Provide explicit DL error messages and fix autobuilt snap version.
+	* Fix formatting of email message for CHECK_SMTP failures.
+	  The format string passed to smtp_final() can contain format specifiers
+	  so a further pass through printf is required.
+	* Add printf format attribute to vlog_message().
+	* Add higher_prio_send_advert vrrp config option.
+	  There is a problem if two vrrp instances, due to becoming isolated,
+	  both become master, since they will both have sent GARP messages.
+	  Setting higher_prio_send_advert and garp_lower_priority_repeat means
+	  that if a master receives a higher priority advert, it will send its
+	  own lower priority advert before it transitions to backup. The higher
+	  priority master, on receiving a lower priority advert, will then send
+	  GARP messages, and so the ARP caches will then be correctly updated.
+	  Using the higher_prio_send_advert option may be considered not to
+	  conform to the VRRP protocol (725) to (765) in state description of
+	  RFC5798, however, since which of the two masters advertises first
+	  after they can both see each other again is random, there is a 50%
+	  chance that the lower priority instance will send an advert before the
+	  higher priority instance, so to all external observers it will appear
+	  that this is the case, or at least that the adverts overlapped.
+	* Fix higher_prio_send_advert in lower priority master.
+	* Load the ip_tables module if using iptables.
+	  We cannot guarantee that the ip_tables modules has been loaded, so
+	  we load it ourself if using libiptc.
+	* Fix (cosmetic) conditional compilation test.
+	* Fix building with --enable-libxtables-dynamic --disable-libiptc.
+	* Enable compilation with namespaces if SYS_setns is not defined.
+	* Fix compiling with struct xt_set_info_match_v0.
+	* Check to libnfnetlink.h and netlink.h with libnl v1 too.
+	* Workaround missing libraries from pkg-config --libs libiptc.
+	  Old version of libiptc don't report requirements on libip4tc and
+	  libip6tc, so check if the output from pkg-config is only -L.* -liptc
+	  and if so add -lip4tc -lip6tc.
+
+2017-02-18 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.3.4 released.
+	* Fix generation of lib/git-commit.h when building a tagged commit.
+	* Define GIT_DATE and GIT_YEAR when generating default git-commit.h
+	  This issue was caused by commit 5287f03 which didn't define GIT_DATE
+	  and GIT_YEAR in all circumstances.
+
+2017-02-14 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.3.3 released.
+	* Fix unitialised use of misck_checker in script timeout.
+	* Fix detection of no netlink being installed.
+	* Fix conditional compilation for LIBIPVS without netlink.
+	* Terminate child processes if parent dies.
+	  If the parent keepalived process is killed, the child processes will
+	  be orphaned and can cause problem when attempting to restart
+	  keepalived. This patch makes use of prctl with PR_SET_PDEATHSIG such
+	  that all child processes will receive SIGTERM if the parent process
+	  dies.
+	* Ensure syslog and mem_check_log open before using them.
+	  A segfault was occuring when --enable-mem-check-log option was
+	  selected, due to attempting to write to the log file before it had
+	  been opened. It was also evident that there could be attempts to
+	  write to syslog before that had been opened too.
+	* Fix building on Centos 7/RHEL 7 re lightweight tunnel encapsulation.
+	  RedHat have partially backported lightweight tunnel encapsulation
+	  into their kernel, but not included MPLS or ILA. We need to have
+	  conditional compilation for LWTUNNEL_ENCAP_MPLS and LWTUNNEL_ENCAP_ILA
+	  rather than just checking for RTA_ENCAP.
+	* Update documentation for tracking scripts weight 0.
+	  weight default is 0, which means tat a failure implies a FAULT state.
+	* Reinstate code checking module ip_vs loaded.
+	  Commit d900df2 removed a bit to much code that looked as though it
+	  wasn't doing anything, with the result that the check of whether the
+	  ip_vs module was loaded didn't occur.
+	  This commit reinstates the code for checking, and if necessary loading,
+	  the ip_vs module, but also sanitises the code slightly.
+	* Fix some more compiler warnings.
+	* Fix a typo in a help message in configure.ac.
+	* sorry_server: keep sorry_server on reload.
+	* sorry_server: set it up on start or reload if quorum is down.
+	  on start: in alpha mode.
+	  on reload: if changed, or no previous sorry_server.
+	* Added doc for priority 4th parameter to notify script.
+	* ipwrapper.c: make functions void if return value not used or constant.
+	  Several functions in check/ipwrapper.c were always returnung the same
+	  value, and the code calling the functions then checked and returned an
+	  error if the return value was not the value always returned. Also, for
+	  some functions returning a value the return value was never checked in
+	  the calling function.
+	  Making the functions void, and removing the if (...) makes the code easier
+	  to read, and potentially slightly more efficient.
+	* Add snapcraft.yaml for CI build publication.
+	* Fix missing documentation for 4th parameter of notify action.
+	* Make builds reproducable, and copyright date reflect latest commit.
+	  Pull request #503 provided an update to facilitate reproducable builds,
+	  and also ensure that the copyright date doesn't postdate the last source
+	  code modification. Unfortunately the commits required manual updates to
+	  change the copyright year, thereby creating maintainability issues. The
+	  commit also allowed fake build dates to be specified.
+	  This commit takes an alternative approach, and takes the dates used for
+	  the copyright message and the version date from the date of the last git
+	  commit.
+	  If the code is build from within a git tree, this is straightforward. On
+	  the other hand, the code may be build from  tarball, so we ensure that
+	  the lib/git-commit.h file is updated when the tarball is built, and
+	  included in the tarball.
+	* Add option to force building without libnl/libnl-3.
+	  This option is really only for test purposes to build keepalived
+	  without libnl even though libnl is installed.
+	* Log errors if configure IPVS with IPv6 if not using libnl.
+	  The socket interface for configurating IPVS does not support IPv6,
+	  so rather than leaving the user with the error message
+	  "Operation not supported with specified address family"
+	  give a meaningful message in the log.
+	  At configure time, a warning will also be generated stating that
+	  IPVS will not support IPv6.
+	* Ensure IPVS address families match.
+	  Don't allow a mixture of IPv4 and IPv6 addresses in a virtual server
+	  group, or within a virtual server.
+	* When dumping an IPVS IPv6 address range, use hex.
+	* Log if virtual_server_group doesn't exists, or address family mismatch.
+	  If a virtual server is configured to use a virtual server group but that
+	  virtual server group doesn't exist, then log an error.
+	  Also, if the address family of the virtual server group and virtual server
+	  don't match, log an error as well.
+	  We really ought to be removing the virtual server from the configuration,
+	  but I haven't worked out how to do that yet.
+	* Don't flag changes to automake/conf generated files as source changes.
+	  The output of keepalived -v adds a '+' if there are uncommitted changes to
+	  the source code. However, we aren't interested in changes to the autoconf
+	  or automake generated files, since these aren't really "source" files, and
+	  are only included in the git repo to allow building on systems without
+	  autoconf/automake. Further, the differences may simply be due to different
+	  versions of autotools being used.
+	* Minor formatting updates to Sphinx documentation.
+	* Enable configure to work with ash.
+	* Handle sysconf() returning -1 for _SC_GETPW_R_SIZE_MAX.
+	* Report ignoring virtual server if group specified doesn't exist.
+	  It's too difficult to remove the virtual server from the configuration,
+	  but the error will be reported in the log, and so the sysadmin should
+	  resolve the configuration.
+	* Updated snapcraft.yaml location.
+	* Move snapcraft and reflect master version.
+	* Add libipset3 to snap stage packages.
+	* Allow for keepalived to be a command in /snap/bin/ as well as a daemon.
+	* Add 'source-type: git' to avoid dirty commit versions.
+	* Update gitignore for clean snap commit versions.
+	* Resolve not adding '+' to git version in snapcraft builds.
+	  This is a temporary workaround to the problem of snapcraft deleting
+	  the snap/snapcraft.yaml file from its clone of the git repo (see
+	  https://bugs.launchpad.net/snapcraft/+bug/1662388 for details).
+	* Add cleaning of snapcraft generated directories/files.
+	* Add support for Alpine Linux.
+	  This commit adds detection and support of the OpenRC init system.
+	* Add details of what libraries are needed for various Linux distros.
+	* Force recreating automake/autoconf files when building with rpm.
+	  If an autoconf/automake source file is patched as part of the rpmbuild
+	  process, then some of the autoconf/automake generated files may be
+	  regenerated, and this can cause a mismatch if the versions of autoconf/
+	  automake on the system building the rpm don't match the versions
+	  that were used to generate the files that have been committed to git.
+	  This patch changes the keepalived.spec file to always run autoreconf -f -i
+	  to ensure the generated autoconf/automake files are aligned to the right
+	  version.
+
+2016-11-26 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.3.2 released.
+	* Correctly handle return code from system() call.
+	  If we want to check for an exit status, WIFEXITED(ret) must be
+	  checked first.
+	* Fix compilation where SNMP enabled.
+	* Fix a couple of SNMP errors.
+	  The length of KEEPALIVED-MIB::version was being returned a sizeof(char *)
+	  rather than strlen(char *).
+	  VRRPv3 vrrpv3GlobalStatisticsDiscontinuityTime was being completely
+	  mishandled.
+	* Add additional files needed to build from git without autoconf.
+	* Don't save and restore current directory twice with config includes.
+	* Don't recognise an executable file as a configuration file.
+	* Allow maximum path names for configuration files.
+	* Don't check for include file after reaching EOF.
+	* Fix a segfault if terminating at startup do to interface not found.
+	* notify: log error while performing set{gid,uid}.
+	  Log error message while setting goup and user before system call.
+	  Maybe we should avoid system call on error if {gid,uid} are used, would
+	  be more secure.
+	* Don't execute a script if setuid or setgid fails.
+	  This was suggested in the comment of commit 849615d and is clearly
+	  the right (secure) thing to do.
+	* If a script doesn't have a '/' in the name, search PATH for it.
+	  This also handles spaces in script specifications where they are
+	  parameters.
+	* Don't allow accept when strict mode set if not address owner.
+	  This commit changes keepalived from just issuing a warning to also
+	  disable accept mode when strict mode is set.
+	  Patch submitted by levin1.
+	* Added init_fail setting to assume failed state for vrrp_script during
+	  startup of keepalived.
+	* When checking script security check set uid/gid bits too.
+	  Although the setuid/gid bits are ignored for scripts, they are
+	  not ignored for binary executables, and there is no point in having
+	  the bits set for scripts. So we play safe, and simply check those
+	  bits, and don't attempt to ascertain if it is a script or not.
+	* Disable scripts that aren't executable.
+	  system() on a non-executable script will fail, so we may as well
+	  just not try executing such a script.
+	* Exit if can't read configuration file.
+	  If we have no configuration, we have nothing to run, so exit.
+	* Don't chdir("/") if not forking.
+	  In keepalived_main() there is a comment that the working directory
+	  is / unless keepalived is run in non-forked mode, in which case it
+	  remains the current working directory when keepalived was run.
+	  Unfortunately start_vrrp_child() and start_check_child() were
+	  executing chdir("/") regardless of whether they had been forked or not.
+	  Since the parent process does chdir("/") if it is appropriate, the
+	  children will inherit that, so they don't need to chdir() at all.
+	* Only set umask(0) in parent process.
+	  The children inherit it from the parent, so no need to set it in
+	  the vrrp or checker child processes.
+	* Further changes for script init state failed.
+	* notify: use _GNU_SOURCE.
+	  Just to make compiler happy about inconsitent declaration of mempcpy
+	  and strchrnul. Just cosmetics here.
+
+2016-11-21 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.3.1 released.
+	* Ensure lists aren't empty when checking script security.
+	* Correctly check security of scripts with parameters, and check
+	  checker notify/quorum scripts
+	* Check security of real/virtual server notify scripts.
+	* Handle space in filenames appropriately when checking script security.
+	  The generic notify scripts can have spaces in their filenames, all other
+	  scripts spaced delineate parameters.
+
+2016-11-20 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.3.0 released.
+	* Add DBus functionality to VRRP.
+	  Add new pthread off VRRP to expose DBUs service org.keepalived.Vrrp1
+	  through a GMainLoop.
+	  Create a general /org/keepalived/Vrrp1/Vrrp DBus
+	  object and a /org/keepalived/Vrrp1/Instance/#interface#/#group# object for
+	  each VRRP instance.
+	  Interface org.keepalived.Vrrp1.Vrrp implements methods PrintData,
+	  PrintStats and signal VrrpStopped.
+	  Interface com.keepalived.Vrrp1.Instance implements method SendGarp
+	  (sends a single Gratuitous ARP from the given Instance),
+	  signal VrrpStatusChange, and properties Name and State (retrievable
+	  through calls to org.freedesktop.DBus.Properties.Get)
+	  Interface files are located at location /usr/share/dbus-1/interfaces/
+	  A policy file, which determines who has access to the service, is
+	  located at /etc/dbus-1/system.d/
+	* Resolve DBus working after a reload
+	  thread_destroy_list() was closing file descriptors of read and write
+	  threads, but we wanted the DBus pipes to remain open. It transpires that
+	  closing the fds in thread_destroy_list() is unnecessary, since they are
+	  closed elsewhere anyway, so stop closing the fds in thread_destroy_list().
+	* Add stronger compiler warnings (-Wextra).
+	  The following bugs were discovered:
+	  check_smnp_realserver_weight()
+		comparison if unsigned value < 0
+	  alloc_ipaddress()
+	    comparison of unsigned == -1 and not checking
+	    return status of find_rttables_scope() correctly
+	  read_line()
+	    accessing element buf[18446744073709551615]
+	    ie. buf[2^64-1], which is the same as buf[-1].
+	  The following improvements to the code were made:
+	  Many unused function parameters
+	  either removed or marked unused
+	  Many signed vs. unsigned comparisons
+	  In most cases variables change to be unsigned
+	  Lengths being stored in signed variables
+	* Rationalise checking of libnl-3.
+	* Bring generation of rpmbuild keepalived.spec file up to date
+	  The keepalived.spec file is now created to match the options passed
+	  to configure. It also detects if the system init process is systemd,
+	  upstart or the traditional SYSV init system.
+	* Add more BuildRequires to keepalived.spec.in.
+	* Further improvements to keepalived.spec.in for systemd systems
+	* Change some configure.ac variable names due to using PKG_PROG_PKG_CONFIG
+	* Fix configure.ac to make RedHat hardened rpm builds work
+	  CFLAGS, CPPFLAGS and LIBS variables were not being preserved by
+	  configure.ac, and this caused needed CFLAGS to be lost when
+	  configure was run, resulting in a build failure.
+	  This commit ensures the flags are all preserved.
+	* Allow for automake macro AM_PROG_AR not existing.
+	* Add support for UDP socket to layer4 library.
+	* Add DNS checker.
+	* Update documentation for DNS health checker.
+	* Fix compile check for PE selection support.
+	* Add file missing from add-dns-checker commit.
+	* Update commits for correctly checking for IPVS_SVC_ATTR_PE_NAME.
+	  The upadted configure and lib/config.h.in weren't included in the commits,
+	  and to be consistent the comment on what Linux version introduced the feature
+	  is in configure.ac if the test exists in configure.ac
+	* Fix conditional compilation test for FRA_OIFNAME.
+	* Fix compilation test for IFLA_INET6_ADDR_GEN_MODE.
+	* Fix compilation test for IPVS_DEST_ATTR_ADDR_FAMILY.
+	* Fix compilation test for IPVS_DEST_ATTR_STATS64 and IPVS_SVC_ATTR_STATS64.
+	* Fix compilation test for RTA_VIA.
+	* Fix compilation test for CLONE_NEWNET for DBus.
+	* Fix issue of overwriting the original disposition of signals.
+	* Improve forced termination of script execution process and its offspring.
+	* Improve propagate important signal for the script process groups.
+	* Use argument instead of static variable.
+	* Fix bug around the process group.
+	* Use SIGTERM instead of SIGHUP.
+	* Stop linking with -lipset.
+	  libipset (if used) is dynamically linked at runtime, and so keepalived
+	  shouldn't be linked with -lipset.
+	  Linking with -lipset was erroneously added when converting the build
+	  system to use automake.
+	* Report diagnostic message if dlopen() fails.
+	* Fix loading of ipset library when development library not installed.
+	* Don't use ipsets with namespaces on Linux < 3.13 by default.
+	  On Linux prior to version 3.13, ipsets were not network namespace
+	  aware, so by default the use if ipsets is disabled if keepalived
+	  is running in a network namespace. Configuration keyword
+	  'namespace_with_ipsets' enables ipset use with a network namespace
+	  on these older kernels.
+	* Fix reporting of script exit status.
+	* Update documentation and fix compiler warning re ipset with Linux < 3.13
+	* Make report_child_status() check for vrrp and checker child processes
+	  report_child_status() checks for exit status KEEPALIVED_EXIT_FATAL
+	  and KEEPALIVED_EXIT_CONFIG, but these are only relevant for the vrrp
+	  and checker child processes, and not for track scripts etc. This commit
+	  adds a check that the terminating process is the vrrp or checker process
+	  before checking those exit statuses.
+	* Add no_accept mode for VRRPv2 and standardise VRRPv3 with it
+	  RFC3768, for VRRPv2, specifies that packets addressed to the VIPs
+	  should not be accepted, unless the router is the address owner.
+	  This commit implements not accepting the packets when running VRRPv2,
+	  but only if no_accept is specified, or running in strict mode. The reason
+	  for not making no_accept the default (which would confirm to the RFCs) is
+	  that if running IPVS, or any other service on top of the VIPs, we need to
+	  be able to accept the packets, and requiring everyone to specify accept
+	  in that case would not be reasonable.
+	  Prior to this commit, VRRPv3 was blocking packets sent to VIPs (and eVIPS),
+	  unless the vrrp instance was the address owner, or accept mode was set. This
+	  commit changes the default behaviour for VRRPv3 to make it consistent with
+	  VRRPv2 (i.e. either strict mode or no_accept needs to be specified to be
+	  conformant with RFC5978).
+	* Tidy up logged messages if ipset initialisation fails.
+	* Streamline MII polling.
+	  We only need to read 2 MII registers, and not 32 as was previously being
+	  done.
+	  This commit also uses the <linux/mii.h> header file for field and
+	  register definitions.
+	* Simplify bitops.h code.
+	* Resolve warnings generated with compiler option -Dconversion.
+	  Most of the warnings were resolved by changing the data types of some
+	  variables. Others required casting, particularly where kernel interfaces
+	  are involved.
+	  There were a few instances discovered that were errors, for example comparing
+	  an unsigned int against -1, and assigning a 16 bit value to a uint8_t.
+	  This commit also adds configure options --enable-conversion-checks and
+	  --enable-force-conversion-checks, the former adds compiler option -Dconversion
+	  unless the compiler is an old version that throws up false warnings. Option
+	  --enable-force-conversion-checks adds -Dconversion even if the compiler throws
+	  up known false warnings.
+	* Fix some minor errors/typos in doc/keepalived.conf.SYNOPSIS.
+	* Fix keyword error in sample configuration.
+	* Fix typo in genhash error message.
+	* Fix address ranges for virtual server groups
+	  The handling of address ranges was only written for IPv4 addresses, and
+	  only worked on little endian systems.
+	  This commit enables IPv6 address ranges to work, and also should now
+	  work on big endian systems (but I don't have access to a big endian system
+	  to test it). Validation is added to ensure that the end of the range is after
+	  the start of the range, and that the value of the range end does not exceed
+	  255 (for IPv4) of ffff (for IPv6).
+	  There is also some optimisation of the code, so that netmask is not set (since
+	  it isn't used by the kernel), and the port is set once only, before the loop
+	  through the addresses.
+	* Add --enable-Werror configure option.
+	* Add promote_secondaries keyword for vrrp_instance block.
+	  If two IPv4 VIP addresses are in the same CIDR, and the primary
+	  address is removed, then by default any other address in the same CIDR is
+	  also removed. To stop this happening, the promote_secondaries flag
+	  needs to be set on the interface.
+	  Commit e5526cf added setting the promote_secondaries option on
+	  VMAC interfaces, and stated that adding the option for non-VMAC
+	  interfaces would be added later. This commit now adds a
+	  promote_secondaries configuration option in order to set the flag
+	  on the interface.
+	* Add reporting of promote_secondaries configuration setting.
+	* Add conditional configuration feature
+	  It is usually the case that the configurations for keepalived for
+	  systems operating together are virtually identical, and only differ
+	  in vrrp instance priorities, router id, and unicast addresses if
+	  those are being used.
+	  It is a nuisance to have to edit one file for each server to make
+	  identical changes, so this commit adds the facility for conditional
+	  configuration entries.
+	  Any line starting with the '@' character is a conditional line.
+	  Immediately following the '@' character is a config id. The line is
+	  only included in the configuration if the config id matches the
+	  argument passed to keepalived with the -i option on the command line.
+	  For example, consider the following configuration snippet:
+	  global_defs
+	  {
+	    @main       router_id main_router
+	    @backup router_id backup_router
+	  }
+	  If keepalived is started with -i main, then the router id will be
+	  main_router, if started with -i backup, then backup_router. If
+	  keepalived is started without the -i option, or -i anything else,
+	  then the above snippet will not configure any router id.
+	* Fix building with --disable-vrrp.
+	* Stop segfaulting when configuration keyword is missing its parameter
+	  There are many places where during configuration parsing the code
+	  assumes that if a keyword is specified that requires a parameter, then
+	  the parameter exists. If the parameter doesn't exist, then the code
+	  indexes past the end of the vector, and at best segfaults, and at worst
+	  may carry on, parsing random data.
+	  This commit adds strvec_slot() which checks for the presence of the
+	  parameter, and if configured will call a function that can handle the
+	  error. Currently this logs that the parameter is missing, with as much
+	  helpful information as it can provide, and then terminates.
+	* Use FMT_STR_VSLOT where appropriate.
+	* Use TIMER_HZ where appropriate.
+	* Fix comment and error message re http write timeout.
+	* More verbose logging on (effective) priorities pt. 2.
+	* Change configure option --enable-snmp-keepalived to --enable-snmp-vrrp
+	  The option was enabling snmp for vrrp, not all of keepalived (the
+	  --enable-snmp option does that), so this commit renames it to reflect
+	  what it is actually doing.
+	  The --enable-snmp-keepalived option is retained but marked as obsolete.
+	* Use AS_HELP_STRING autoconf macro.
+	* Fix process increase
+	* Add forcing termination of children of scripts if script times out
+	  Commits fe9638b..cebfbf5 resolved problems around forced termination
+	  of scripts if they didn't terminate within the proscribed time. During
+	  the development of the patches, it was identified that after a script
+	  had been terminated by SIGTERM, any child processes created by the
+	  script also need to be kill.
+	  This commit adds the forced termination of any such children.
+	* Correctly handle existing VMACs on reload.
+	  Anthony Dempsey in issue #449 identified that
+	  keepalived attempts to recreate existing VMAC interfaces on a reload,
+	  and that the subsequent failure causes keepalived not to use the VMAC.
+	  This then identified further issues such as the check for an existing
+	  VMAC in netlink_link_add_vmac() didn't also check the interface a
+	  VMAC was on, and that the checks for conflicts of VMAC interface names
+	  with existing interfaces weren't sufficient.
+	  This patch builds on the patch provided by Anthony Dempsey to also
+	  resolve the additional issues identified.
+	* Fix check of matching VRRP instances on reload.
+	  On a reload, clear_diff_vrrp() removes vrrp instances that are no
+	  longer in the configuration. The check, however, was based on vrrp
+	  instance name, which might have changed. The check is now based on
+	  VRID, address family and interface, since it is this triplet that
+	  uniquely defines a vrrp instance.
+	* Fix clearing addresses no longer used after a reload.
+	  The address comparison was including ifa_index, but that wasn't being
+	  set up until after clear_diff_vrrp() was called.
+	* Don't zero the mem_allocated count during reload.
+	  We want to know if there is a leak during reload, so don't zero the
+	  counter.
+	* Ensure iptables/sets entries and ip routes/rules not lost on reload.
+	  There were several places in the code that were causing existing
+	  iptables/ipsets entries to be lost on reload, and also new entries
+	  for additional ip addresses were deleted after being added. In
+	  addition, ip rules/routes for existing entries were being removed.
+	* Ensure GARPs/GNAs are sent after reload if VIP/eVIP addresses added.
+	  Although there have been versions of keepalived when GARPs/GNAs were
+	  sent after a reload, this was due to a bug in determining if the VRRP
+	  instance had existed before. Resolving that bug (commit aaea8a4),
+	  caused keepalived to stop sending GARPs after a reload. This commit
+	  now specifically adds code to send GARPs on a VRRP instance for all
+	  addresses on that instance. It would be better if GARPs were sent only
+	  for the added addresses, and that may be resolved in a future commit.
+	* Use correct interface for iptables/ipset entries when not accept mode
+	  If an interface was specified for a VIP/eVIP, the iptables/ipset block
+	  if not in accept mode for link local IPV6 addresses was specifying the
+	  interface the vrrp instance was on rather than the interface the address
+	  was added to.
+	  This commit now makes the iptables/ipset entry specify the interface that
+	  the address has been added to.
+	* Resolve "Netlink: error: message truncated" messages.
+	  On systems with a page size larger than 4096 keepalived may report:
+	  "Netlink: error: message truncated" messages
+	  This error was reported on a ppc64le in an OpenStack/Nutron environment.
+	  Ppc64le is using a 64k pages size. I found that keepalived's netlink recvmsg
+	  buffer was too small causing messages to be truncated. The size of the read
+	  buffer for the netlink socket should be based on page size however, it should
+	  not exceed 8192. See the comment in the patch.
+	  I tested the fix by creating 100 veth interfaces and verifying the errors
+	  did not return.
+	* Use ipsets with namespaces on Linux < 3.13 if ipset names configured.
+	  The problem with using ipsets with namespaces on Linux < 3.13 is that
+	  ipsets were not namespace aware, and so all ipset entries added are
+	  global to the system, including all network namespaces. This causes
+	  problems if the default ipset names are used, but if set names have
+	  been specified, it is reasonable that they have been set to be
+	  different for each namespace, and hence there will be no clashes.
+	  The documentation is also updated for vrrp_ipsets keyword.
+	* Don't write MEM_CHECK data to log when forked script child terminates.
+	  The mem check log file was being filled with extraneous termination
+	  information every time a forked child terminated. When a child is forked
+	  it now sets a flag to stop the termination dump.
+	* Fix illegal syntax in configure script
+	  Indirect expansion (`${!foo}`) is a bashism, it's not POSIX-sh
+	  compatible and is not supported by common shells except Bash and ZSH!
+	  Configure script should be portable, hence strictly POSIX compliant.
+	  Moreover it has shebang /bin/sh.
+	* Make running scripts more secure
+	  Previously, keepalived ran all scripts as root. This is potentially
+	  dangerous if a non-root user can modify the script, or has write
+	  access to any part of the path to the script.
+	  This commit does the following:
+	  1) Adds configuration options to specify the user/group under which to
+	     run each script
+	  2) Adds an option to set the default script user/group. If this is not
+	     set it will default to user keepalived_script if that user exists,
+	     otherwise it will default to root, as before.
+	  3) If a script is to be executed with root privilege, report if it is
+	     writeable in any way by a non-root user.
+	  4) Add an option enable_script_security so that any scripts failing
+	  3) above won't be executed.
+	  5) Report if any scripts are not executable by the relevant user.
+	* Fix some lead tab/space issues.
+	* Fix segfault when terminating with no notify script configured.
+	* Fix compiler warning generated with --enable-conversion-checks.
+	* Don't segfault if modules ip_tables or ip6_tables not loaded
+	  If either of the modules is not loaded, then don't use ip(6)tables for
+	  that address family. We could load the module, but there would be no
+	  entries pointing to the chains that we use, and so there is no point
+	  adding entries to chains that won't be traversed.
+	* Resolve some type mismatch warnings on 32 bit systems.
+	* Fix checking security of misc_check scripts.
+
+2016-09-11 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.2.24 released.
+	* Declare and use default value for garp_refresh.
+	* Update documentation for default setting of snmp_server.
+	* Ensure old VIPs removed after reload.
+	* Add internet network control support for IPv6.
+	* Log startup and "already running" messages to console with --log-console.
+	* Remove VIPs on reload if no longer in configuration.
+	* Add internet network control support for IPv6.
+	* Add more lvs syncd options, and various minor fixes.
+	* Don't attempt to set packet priority for wrong IP protocol.
+	  if_setsockopt_priority() was setting SO_PRIORITY socket option regardless
+	  of whether the socket was IPv4 or IPv6. Although the setsockopt() call doesn't
+	  fail for IPv6, it doesn't do anything.
+	  Commit fc7ea83 added setting IPV6_TCLASS, again for both IPv4 and IPv6, but
+	  the setsockopt() call fails on an IPv4 socket.
+	  This commit makes keepalived only set the appropriate socket option, depending
+	  on whether it is an IPv4 or IPv6 socket.
+	  The commit also changes from using the SO_PRIORITY option for IPv4 to using the
+	  more specific IP_TOS option.
+	* Avoid compiler warning of duplicate definition.
+	* Add function attributes to malloc functions.
+	* KEEPALIVED-MIB vrrpRuleIndex should be unsigned.
+	* Allow all ip rule/route options for rules and routes.
+	  This commit adds support for all ip rule/route supported options for
+	  rules and routes (and also tunnel-id rule option not yet supported
+	  by ip rule).
+	* Make ip rules/routes a configuration option.
+	* Add all ip rules/routes options, and minor fixes.
+	* Corrections for rule suppress_ifgroup.
+	* Stop respawning children repeatedly after permanent error.
+	  Keepalived was respawning very rapidly after a permanent error, which
+	  was not useful.
+	  This commit allows the detection of certain errors and if one occurs
+	  keepalived won't respawn the child processes, but will terminate with
+	  an error message.
+	* Remove all remaining vestiges of Linux 2.4 (and earlier) support.
+	  There was code remaining for supporting ip_vs for Linux 2.4, but
+	  the remainder of the keepalived code requires Linux >= 2.6.
+	* Make some libipvs functions static.
+	* Move ipvs source and include files into check/include directories.
+	* Don't duplicate kernel definitions for IPVS code.
+	* Remove unused code from libipvs.c.
+	* Remove ip_vs_nl_policy.c, contents now in libipvs.c.
+	* Add ipvs 64 bit stats.
+	* Remove linux 2.4 code, add 64bit ipvs snmp stats, and some minor fixes.
+	* Fix compiling without SNMP checker support.
+	  The patchset removing support for Linux 2.4 introduced a problem
+	  compiling libipvs.c when SNMP checker support wasn't enabled.
+	* Remove those annoying "unknown keyword" messages.
+	  A slight reworking of the parsing code manages to get rid of those
+	  annoying "unknown keyword" messages which we all know are't true.
+	* Remove IP_VS_TEMPLATE_TIMEOUT. It was removed from ipvsadm in
+	  version 1.0.4.
+	* Remove check for MSG_TRUNC being defined.
+	  It has been defined since glibc 2.2.
+	* Remove conditionals based on libc5. libc5 predated glibc 2.0.
+	* Remove conditional compilation checks for defines in Linux 2.6.
+	  ETHTOOOL_GLINK, RTAX_FEATURES, RTAX_INITRWND, SIOCETHTOOL and SIOCGMIIPHY
+	  are all defined in Linux 2.6, so no longer need to be wrapped in
+	  conditional compilation checks.
+	* Sort out checks for O_CLOEXEC.
+	* Remove check for SA_RESTART. It existed pre Linux 2.6.
+	* Change reporting of default snmp socket.
+	* More updates for removing pre-Linux 2.6 code, and stop "unknown keyword"
+	  messages.
+	* Fix adding iptables entries on Linux 4.6.3 onwards.
+	  ip[46]tables_add_rules() were allocating space for an additional
+	  struct xt_entry_match. kernel commit 13631bfc6041 added validation
+	  that all offsets and sizes are sane, and the extra
+	  struct entry_match failed that test.
+	* Fix adding iptables entries on Linux 4.6.3 onwards.
+	* Fix size parameter for keepalived_malloc/realloc.
+	  lib/memory.h specified the size parameter to keepalived_malloc/realloc
+	  as size_t, whereas lib/memory.c specified unsigned long.
+	  The inconsistency was complained about by the compiler on 32-bit systems.
+	  Fix memory.c to make the parameter a size_t.
+	  Change lib/memory.c and lib/memory.h to use type size_t for size
+	  variables.
+	  Use printf format specified %zu for size parameters.
+	* Fix building without LVS or without VRRP.
+	* Convert build system to automake.
+	  The INSTALL file gives instructions for setting up the build system
+	  using automake etc.
+	  For those without automake (and autoconf), just running configure
+	  works as before.
+	* Convert build system to automake.
+	* Add network namespace support.
+	  This allows multiple instances of keepalived to be run on a single
+	  system. The instances can communicate with each other as though they
+	  are running in separate systems, but they are also isolated from
+	  each other for all other purposes.
+	  See keepalived/core/namespaces.c for some example configurations and
+	  use cases.
+	* Use atexit() for reporting malloc/free checks on termination.
+	* Add + and git commit in -v output if uncommited changes.
+	* Add network namespace support.
+	* Remove some superfluous conditional compilation tests.
+	* Poll for reflection netlink messages after adding each interface.
+	  If a large number of interfaces are added, the kernel reflection
+	  netlink socket can run out of buffers. This commit adds a poll of
+	  the kernel netlink reflection channel after adding each interface,
+	  thereby ensuring that a large queue of messages isn't built up.
+	* Stop Netlink: Received message overrun (No buffer space available) messages.
+	* Fix debug build since automake conversion.
+	* Fix configuration testing for ipset support prior to Linux 3.4.
+	* Add polling of netlink messages when entering master state.
+	  If a large number of vrrp instances enter master state simultaneously
+	  the netlink socket can run out of buffers, since the netlink socket
+	  isn't read sufficiently frequently. Adding a poll of the netlink socket
+	  after the VIPs/eVIPs are added ensures that the netlink messages are read
+	  when the become available.
+	* Add some missing '\n's when printing the vrrp configuration.
+	* Fix generating git-commit.h.
+	* Ensure xmit_base not set with strict mode.
+	* Fix detection of code changes not commited to git in git-commit.h.
+	* Change true/false variables in global_data to bools.
+	* Fix timer_cmp handling large differences between the two times.
+	  In a struct timeval, tv_sec is a time_t which is a long. Assigning
+	  a.tv_sec - b.tv_sec to an int caused it to overflow if the time
+	  differences were large.
+	* Add a TIMER_NEVER value.
+	  This allows a thread to specify that it never wants to be woken on a
+	  timed basis.
+	* Add global default_interface keyword.
+	  default_interfaces sets the default interface to use for static
+	  ipaddresses. If the system does not have an eth0, or one wants to
+	  use a different interface for several static ipaddresses, this makes
+	  the configuration simpler. It also has the potential to reduces
+	  changes required if transferring the configuration to another system.
+	* Fix skew time for VRRPv3 with low priority and long advert interval.
+	  With a low priority and a long advert interval, the calculation of the
+	  skew time was overflowing a uint32_t. For example, with a priority of
+	  1 and an advertisment interval of 10 seconds, the skew time was being
+	  calculated as 4288 seconds, rather than 9.96 seconds. This had the
+	  impact that the backup instance would take over an hour to transition
+	  to master.
+	* Don't set master_adver_int from an invalid packet.
+	* Make timeout_persistence a uint32 rather than a string.
+	* Fix some configuration tests and compiling on old Linux version.
+	* Improve persistence handling.
+	  Properly support persistence_granularity for IPv6.
+	  Set persistence_timeout default if granularity specified.
+	  Only support persistence engine if supported by the kernel.
+	  This commit also changes variables timeout_persistence and
+	  granularity_persistence to persistence_timeout and
+	  granularity_timeout.
+	* Simplify a bit of indentation.
+	* Add (commented out) code for writing stack backtrace to a file.
+	* Free syslog_ident string after logging the free.
+	  When writing mem check entries to the log, the syslog_ident needs to be
+	  freed after the log has been written to.
+	* Allow FREE_PTR mem check to log the proper function.
+	  Having FREE_PTR as a function meant that whenever any memory was freed by
+	  FREE_PTR() the function that was logged as freeing it was FREE_PTR itself.
+	  Changing FREE_PTR() to be a #define means that the calling function name
+	  is logged.
+	* Fix tests of HAVE_DECL_CLONE_NEWNET.
+	* Fix a conditional compilation test re namespaces and rename a variable.
+	* Fix when some FREE() calls are made.
+	* Only parse net_namespace in parent process.
+	* Add VRRP/LVS conditional compilation around PID files.
+	* Improve removing zombie PID files.
+	* Add more VRRP/LVS conditional compilation.
+	* Don't check if instance is a rotuer every time an NA is sent.
+	  keepalived was calling sysctl to check if the interface was configured as
+	  router before sending each gratuitous Neighbour Discovery advertisement. This
+	  patch now checks if the interface is routing when the instance transitions to
+	  master, and uses that for all the NA messages.
+	* Improve mem check initialisation.
+	* Add support for running multiple instances of keepalived.
+	  Using network namespaces allows multiple instances of keepalived to run
+	  concurrently, in different namespaces, without any collision of the pid
+	  files.
+	  This patch adds the concept of a keepalived instance name, which is then
+	  use in the pidfile name, so that multiple instances of keepalived can run
+	  in the same namespace without pid file name collisions.
+	* Add option to write pid files to /var/run/keepalived.
+	  When using namespaces or instances, pid files are written to /var/run/keepalived.
+	  The commit adds an option for the standard pid files to use that directory.
+	* Add keywords instance and use_pid_dir, plus sundry fixes/improvements.
+	* Add configure option to enable stacktrace support.
+	* Fix adding and deleting iptables rules for addresses.
+	  When keepalived was built not using ipsets, the adding and deleting
+	  of rules for addresses was including an extra xt_entry_match struct
+	  that meant that the rules could only be deleted by ithe iptables
+	  command by entry number and not be specifying the parameters.
+	* Fix compiling without libiptc (iptables) support.
+	* Don't log error message when trying to remove leftover iptables config.
+	  At startup keepalived attempts to remove any iptables configuration that
+	  may have been left over from a previous run. Of course the entries won't
+	  normally be there, so don't report an error if they are not found.
+	* Fix iptables entries for accept mode, other iptables fixes, and make
+	  write_stacktrace a configure option.
+	* Add script to setup interfaces in a network namespace.
+	  The scripts mirrors the running network interfaces that are needed
+	  for a given keepalived configuration into a network namespace
+	  (default test), so that keepalived can be run in that namespace in
+	  order to test the configuration.
+	* Correct comments re location of network namespace pid files.
+	* Add -s option for overriding net_namespace configuration option.
+	* Change test/netns-test.sh -c option to -f to match keepalived.
+	* Make netns-test.sh report interfaces that don't exist.
+	* Remove leftover debug message.
+	* Fix address comparison for equal priority adverts.
+	* Streamline the specification of libraries to the linker.
+	  Most of the dynamic libraries and static libraries were being specified
+	  twice. This commit removes the duplication of all of the dynamic libraries
+	  and only duplicates core/libcore.a of the static libraries.
+	* Fix automake files for building on Ubuntu 14.04 LTS.
+	* Enable building with Net-SNMP on Ubuntu.
+	* Stop compiler warning on Ubuntu.
+	* Fix compilation with libipset on Debian wheezy.
+	* Fix various build problems on Ubuntu 14.04 and Debian.
+
+2016-07-11 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.2.23 released.
+	* Make malloc/free diagnostics a separate configure option.
+	  The commit adds the configure --enable-mem-check option which
+	  allows the MALLOC/FREE diagnostics to be enabled without
+	  the --enable-debug option. This means that the mem-check
+	  diagnostics can be used when running keepalived in it's normal mode
+	  with forking children for vrrp and checkers.
+	  The mem-check diagnostics are written to
+	  /tmp/Keepalived_{,vrrp,healthcheckers}_mem.PID.log
+	  The --mem-check-log configure option enables command line option
+	  -L which also writes zalloc/free details to the syslog.
+	* Fix compilation error on 32-bit systems with mem-check enabled.
+	* Replace one zalloc() and one free() call with MALLOC() and FREE().
+	  This ensures that the mem-check diagnostics cover all mallocs/frees.
+	*  Fix report of malloc'd memory not being freed.
+	* Streamline read_line().
+	* Resolve a segfault when reloading with vmacs.
+	  The vrrp_t entries on the vrrp_data list have pointers to an
+	  interface_t for each vrrp instance. When reloading, the
+	  interface_t items where freed, but a pointer to the old list
+	  of vrrp_t items is held in old_vrrp_data. After the new
+	  configuration is processed, clear_diff_vrrp() is called. clear_diff_vrrp()
+	  uses the interface_t pointers from the old vrrp_t entries, but the
+	  memory pointed to by the interface_t pointers has already been freed,
+	  and probably reallocated for a different use.
+	  This commit delays freeing the old interface_t items until after
+	  clear_diff_vrrp() has completed, so the interface_t pointers remain valid.
+	* Check valid interface pointer before calling reset_interface_parameters().
+	  Before resetting the settings on the base interface of a vmac, check that
+	  the interface_t pointer is valid.
+	* Fix new --mem-check-log option.
+	* Don't write parent's memory logging into children's log file.
+	  When running with mem-check output to files, the buffer from the
+	  parent process was also being written into the children's log
+	  files. The commit sets the CLOEXEC flag on the log files, and
+	  also sets the log files to be line buffered.
+	* Fix segfault or infinite loop in thread_child_handler() after reloading.
+	  When the checker and vrrp child processes start up, memory for a
+	  thread_master_t is malloc'd and saved in master. Subsequently,
+	  launch_scheduler() is called, and that sets the parameter to be passed
+	  to the SIGCHLD handler - thread_child_handler() to the value of master,
+	  pointing to a thread_master_t.
+	  If keepalived is signalled to reload, the child processes free all
+	  malloc'd memory, and a new thread_master_t is malloc'd and saved in
+	  master. If this is not the same address as the previous thread_master_t,
+	  then the value being passed to the SIGCHLD handler is a pointer to the
+	  old thread_master_t, whereas everything else is using the new thread_master_t.
+	  If the memory used for the old thread_master_t is then returned in a subsequent
+	  malloc() call, a subsequent SIGCHLD will invoke thread_child_handler() with
+	  a pointer to memory that has now been overwritten for some other purpose, hence
+	  causing either a segfault or an infinite loop.
+	  A further consequence is that new child processes will be added to the new
+	  thread_master_t, but when thread_child_hander() is called after a child
+	  terminates, it won't find the child since it is still looking at the old
+	  thread_master_t.
+	  This commit modifies the behaviour of a reload by not releasing the old
+	  thread_master_t and then malloc'ing a new one, but rather it just reinitialises
+	  the original thread_master_t and continues using it.
+	* Remove base_iface from struct _vrrp_ - it wasn't used.
+	* Add configuration option to flush LVS configuration.
+	  This commit adds a global configuration option lvs_flush to flush
+	  the LVS configuration, and if not set, the configuration won't be
+	  flushed.
+	* Add back real server when return from failure with HTTP_CHECK.
+	  If status_code wasn't specified for a url entry in the configuration
+	  then a real server would never be returned to service following a
+	  failure.
+	  The commit makes keepalived return a real server to service if no
+	  status_code is specified if the HTTP status code returned from the
+	  service is a success code (i.e. 2xx).
+	* Avoid duplication of keyword installation in check_http.c.
+	* Fix adding new static ip addresses after reload.
+	  Commit f23ab52, when stopping duplicate static ip routes and rules
+	  being added after a reload also stopped new static ip addresses being
+	  added. The commit reinstates adding new static ip addresses.
+	* Fix adding static iprule/routes after a reload.
+	* Stop segfault when configure a route with no destination address.
+	* Fix unused global vrrp_garp_master_refresh.
+	* fix healthchecker reload when some healthchecks are failed.
+
+2016-06-14 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.2.22 released.
+	* vrrp: Fix build without VRRP VMAC.
+	* Fix compilation with RFC SNMP without Keepalived SNMP.
+	* vrrp: Update master_adver_int when receive higher priority advert
+	  when master.
+	  If VRRPv3 is being used, and a higher priority advert is received when
+	  in master mode, the master_adver_int needs to be updated when transitioning
+	  backup mode. If this isn't done, and our advert interval is less than a third
+	  of the new masters, we will time out and re-enter master mode, send an advert
+	  to which the other master will resond with a higher priority advert, causing
+	  us to go back into backup mode, until our timer expires again, and this will
+	  continue indefinitely.
+	* vrrp: Don't send advert after receiving higher priority advert.
+	  If a master receives a higher priority advert, there is no need
+	  to send another advert, since the sender of the higher priority
+	  advert is already a master. Further, any other instance in backup
+	  mode will process our subsequent advert, and then consider the
+	  wrong system to be master, until it receives another advert from
+	  the real master.
+	  With VRRPv3, if the other master has an advert interval more than
+	  three times our advert interval, backup routers will be using our
+	  advert interval after we've sent our subsequent advert, and will
+	  then timeout before the new master sends another advert, prompting
+	  (one of) the backup routers to become a master, which will prompt
+	  the higher priority master to send an advert, the ex-backup router
+	  will then send another advert and we could end up in an endless cycle.
+	* vrrp: Fix receiving advert from address owner when in fault state.
+	* vrrp: When transitioning from fault state, log state change.
+	* vrrp: Fix preempt delay when transitioning from fault state.
+	  There were two ways of leaving fault state, either by receiving a packet
+	  on the instance, or by a netlink message indication that the interface is
+	  up again. In neither case was preempt_delay considered in the code.
+	  This commit changes the way vrrp->preempt_time is used. preempt_time is now
+	  only used once a higher priority advert is received, rather than being updated
+	  every time a lower priority advert is received. vrrp->preempt_time is now also
+	  set when transitioning out of fault state. vrrp->preempt_time.tv_sec == 0 now
+	  indicates the timer is not running.
+	* vrrp: Detect and report duplicate address owners.
+	  If more than one system is configured as an address owner (priority
+	  == 255), this would be a configuration error, and could cause
+	  unexpected behaviour. This commit ensures that the problem is
+	  reported, and sets the local instance not to be the addess owner,
+	  as a temporary workaround for the problem.
+	* vrrp: Fix maximum number of VIPs allowe.
+	* ipvs: Fix IPVS with IPv6 addresses.
+	* ipvs: Don't overwrite errno by another syscall before checking errno.
+	* ipvs: ipvswrapper.c: fix comparison.
+	* Enable compilation with development net-snmp headers.
+	* vrrp: Fix IPv4 vIP removal when addr matches pre-existing interface addr.
+	  For IPv4 vIPs keepalived adds a /32 to the underlying interface. If
+	  this address matches an address already configured, e.g. a /24, when
+	  this vIP is eventually removed due to a configuration change or
+	  keepalived shutdown, the original address matching the vIP, outside
+	  of keepalived's control, is removed instead. This behaviour is
+	  incorrect. The /32 added by keepalived should be the address being
+	  removed. Keepalived should not be touching any addresses it does not
+	  create.
+	* vrrp: Check for errors when opening VRRP data and stats files.
+	  This fixes crashes when running keepalived under SELinux enforcing mode,
+	  which does not allow keepalived proccess to write to /tmp by default.
+	* vrrp: Don't assume IPADDRESS_DEL == 0 and IPADDRESS_ADD != 0.
+	* vrrp: Fix compilation failure.
+	* vrrp: Fix transition to backup when receive equal priority advert from
+	  higher address.
+	  When a vrrp instance in master mode received an advert from another master
+	  that had equal priority, it wasn't comparing the addresses to determine
+	  whether it should treat the advert as higher priority, and hence the
+	  instance should fall back into backup state.
+	  When checking whether the advert is from a lower priority master, it now
+	  checks if the priorities are equal and then compares the addresses.
+	* vrrp: Optimise address comparision when receive advert in master mode.
+	* Optimise inet_inaddr_cmp.
+
+
+2016-05-26 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.2.21 released.
+	* Install VRRP-MIB when applicable.
+	  It appears that the condition in Makefile.in for installing VRRP-MIB
+	  was using a non-existent macro, SNMP_RFC2_SUPPORT. This patch removes
+	  two conditions from Makefile.in that use undefined macros and adds a
+	  condition to install VRRP-MIB when SNMP_RFCV2_SUPPORT is set
+	  appropriately.
+	* Check virtual route has an interface before returning ifindex to SNMP
+	* Force git-commit.h to be updated when needed
+	* INSTALL: Keepalived doesn't need popt anymore
+	* INSTALL: support for 2.2 kernels is long gone.
+	* INSTALL: fix a few typos
+	* keepalived.conf(5) some minor improvements
+	* man keepalived(8): some minor improvements
+	* Add printing of smtp server port when printing global config
+	* timeout_epilog: mark argument const.
+	* parser: mark some function arguments as const.
+	* terminate argv with NULL.
+	  man execvp says: "The array of pointers must be terminated by a null
+	  pointer."
+	* ipvswrapper.c: fix comparison.
+	* mark pidfile strings as const.
+	* utils.c: mark some arguments a const.
+	  I left inet_stosockaddr alone for now, since it modifies the string.
+	  We should fix that, since we pass in strings which might be const and in
+	  readonly memory.
+	* netlink_scope_n2a: mark return type as const.
+	* vector->allocated is unsigned.
+	* notify_script_exec: mark a few arguments as const.
+	* vscript_print: mark string as const.
+	* vector->allocted is unsigned.
+	* dump_vscript: mark str as const.
+	* Updated range for virtual_router_id and priority.
+	* Stop segfaulting with mixed IPv4/IPv6 configuration
+	  After reporting that an ip address was of the wrong family, when
+	  the invalid address was removed from the configuration, keepalived
+	  was segfaulting, which was due to the wrong address being passed to
+	  free_list_element().
+	* Updated range for virtual_router_id and priority in
+	  doc/keepalived.conf.SYNOPSIS
+	* Allow '-' characters in smtp_server hostname.
+	* Allow smtp_server domain names with '-' characters to be parsed
+	  correctly.
+	* Report and exit if configuration file(s) not found/readable.
+	  The configuration file is treated as a pattern, and processed
+	  using glob(). If there is no matching file, then it wasn't reading
+	  any file, and keepalived was running with no configuration.
+	  This patch adds a specific check that there is at least one matching
+	  file, and also checks that all the configuration files are readable,
+	  otherwise it reports an error and terminates.
+	* Fix building with Linux < 3.4 when ipset development libraries
+	  installed.
+	  Prior to Linux 3.4 the ipset header files could not be included in
+	  userspace. This patch adds checking that the ipset headers files can
+	  be included, otherwise it disables using ipsets.
+	* configure: fix macvlan detection with musl libc.
+	* Fix compiling without macvlan support.
+	* Bind read sockets to particular interface.
+	  Otherwise, since we use RAW sockets, we will receive IPPROTO_VRRP
+	  packets that come in on any interface.
+	* vrrp: read_to() -> read_timeout(). Make function name less confusing.
+	* vrrp: open_vrrp_socket() -> open_vrrp_read_socket().
+	  An equivalent open_vrrp_send_socket() exists, therefore make
+	  the read version follow the same naming convention.
+	* vrrp: fix uninitialized input parameter to setsockopt().
+	* Make most functions in vrrp_print.c static.
+	* Enable compilation on Linux 4.5.x.
+	  Including <libiptc/libiptc.h> causes a compilation failure on Linux 4.5
+	  due to both <net/if.h> and <linux/if.h> being included, and they have
+	  a namespace collision.
+	  As a workaround, this commit defines _LINUX_IF_H before including
+	  <libiptc/libiptc.h>, to stop <linux/if.h> being included. Ugly, yes,
+	  but without editting kernel header files I can't see any other way
+	  of resolving the problem.
+	* Fix segmentation fault when no VIPs configured.
+	  When checking the VIPs in a received packet, it wasn't correctly
+	  handling the situation when there were no VIPs configured on the
+	  VRRP instance.
+	* Improve checking of existance and readability of config files.
+	  There was no check of the return value from glob() in read_conf_file()
+	  and check_conf_file(), so that if there were no matching files, they
+	  attempted to use the uninitialised globbuf, with globbuf.gl_pathc taking
+	  a random value. A further check has been added that the files returned
+	  are regular files.
+	  Finally, if no config file name is specified check_conf_file() is now
+	  passed the default config file name rather than null.
+	* vrrp: update struct msghdr.
+	  The vrrp netlink code assumes an order for the members of struct msghdr.
+	  This breaks recvmsg and sendmsg with musl libc on mips64. Fix this by
+	  using designated initializers instead.
+	* Initialise structures by field names.
+	* Detection of priority == 0 seems to be shaded.
+	* More verbose logging on (effective) priorities.
+	* Log changes to effective priority made via SNMP.
+	* vrrp: use proper interface index while handling routes.
+	  It appears current code has a small typos while handling routes trying
+	  to access route->oif where it should be route->index.
+	* vrrp: make vrrp_set_effective_priority() accessible from snmp code.
+	  just include proper file in order to avoid compilation error.
+	* monotonic_gettimeofday: make static.
+	* Disable unused extract_content_length function.
+	* utils: disable more unused functions.
+	* utils: make inet_sockaddrtos2 static.
+	* signal: remove unused functions.
+	* Disable unused signal_ending() consistently with other unused code.
+	* parser: make a bunch of stuff static.
+	* scheduler: make a bunch of stuff static.
+	* scheduler: disable unused thread_cancel_event().
+	* vector: disable unused functions.
+	* vector: make 2 functions static.
+	* list: disable unused function.
+	* genhash: make some functions static.
+	* Remove unused variable.
+	* core: make a few functions static.
+	* checkers: make some functions static.
+	* vrrp_arp: make some global variables file-scope.
+	* vrrp_ndisk.c: make 2 global variables file-scope.
+	* vrrp: make some functions and globals static.
+	* In get_modprobe(), close file descriptor if MALLOC fails.
+	  The sequencing of the code wasn't quite right, and so if the MALLOC
+	  had failed, the file descriptor would be left open.
+	* Fix compilation without SOCK_CLOEXEC and SOCK_NONBLOCK.
+	  SOCK_CLOEXEC and SOCK_NONBLOCK weren't introduced until
+	  Linux 2.6.23, so for earlier kernels explicitly call fcntl().
+	* Don't include FIB rule/route support if kernel doesn't support it.
+	* Enable genhash to build without SOCK_CLOEXEC.
+	* Ignore O_CLOEXEC if not defined when opening and immediately closing file.
+	* Allow building without --disable-fwmark if SO_MARK not defined.
+	  configure complained "No SO_MARK declaration in headers" if that
+	  was the case, but --disable-fwmark was not specified. The commit
+	  stops the error message, and just defines _WITHOUT_SO_MARK_ if
+	  SO_MARK is not defined.
+	* Update documentation for debug option.
+	* Add options -m and -M for producing core dumps.
+	  Many systems won't produce core dumps by default. The -m option
+	  sets the hard and soft RLIMIT_CORE values to unlimited, thereby
+	  allowing core dumps to be produced.
+	  Some systems set /proc/sys/kernel/core_pattern so that a core file
+	  is not produced, but the core image is passed to another process.
+	  The -M option overrides this so that a core file is produced, and
+	  it restores the previous setting on termination of the parent process,
+	  unless it was the parent process that abnormally terminated.
+	* Add option to specify port of smtp_-server.
+	* Add comment re when linux/if.h and net/if.h issue resolved upstream.
+	* Enable building with SNMP with FIB routing support.
+	* Exclude extraneous code when building with --disable-lvs.
+	* Update description of location of core files.
+	* Add support for throttling gratuitous ARPs and NAs.
+	  The commit supersedes pull request #111, and extends its functionality
+	  to also allow throttling of gratuitous NA messages (IPv6), and allows
+	  specifying the delay parameters per interface, since interfaces from
+	  the host may be connected to different switches, which require
+	  different throttling rates.
+	* Add snmpServerPort to Keepalived MIB.
+	* Add printing of smtp server port when printing global config.
+	* Add aggregation of interfaces for throttling ARPs/NAs.
+	  This commit adds support for aggregating interfaces together, so
+	  that if multiple interfaces are connected to the same physical switch
+	  and the switch is limited as a whole on the rate of gratuitous ARPs/
+	  unsolicited NAs it can process, the interfaces can be grouped together
+	  so that the limit specified is applied across them as a whole.
+	* In free_interface_queue, don't check LIST_ISEMPTY before freeing.
+	* Clear pointer freed by free_list().
+	* Make FREE_PTR() clear the pointer after freeing the memory.
+	* Make FREE() clear pointer after memory released.
+	  Since a pointer to allocated memory mustn't be used after the memory is
+	  freed, it is safer to clear the pointer. It also means that if the pointer
+	  is subsequently used, it shoud segfault immediately rather than potentially
+	  trampling over random memory, which might be very difficult to debug.
+	* vrrp: Improve validation of advert_int.
+
+2016-04-02 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.2.20 released.
+	* better VERSION handling
+	* ipvs: tcp check supports retry.
+	  New tcp check config option "retry" sets the check retry counter.
+	  If tcp check fails on an alive server, keepalived will perform
+	  another checks until n_retry counter reaches zero, or until the check
+	  succeeds. The delay between retry checks is configured by the
+	  "delay_before_retry" config option. The default value is 1 retry after 1 second.
+	  This is the same feature that already exists in HTTP checker
+	  (config option "nb_get_retry").
+	* check_http: retry logic is refined.
+	  Retry on every error, including timeout and connection
+	  error, but only when RS is up.
+	  This is needed to reduce rs flaps: we shut the server down
+	  only after nb_get_retry failed checks.
+	  Also, do not wait for delay_loop after a successfull check to
+	  bring the server UP.
+	* ipvs: respect the error code of the ipvs_talk.
+	  Previously, if the IPVS reflector was unable to perform
+	  its task, it reported error through syslog and ignored it.
+	  This behavior leads to inconsistancies with quorum-handler:
+	  it is called with UP even if no RS were added into the IPVS.
+	  This could take place, for example, when there is a limit of
+	  opened filehandles and keepalived was unable to open netlink
+	  socket (it is opened on every call to the ipvs_talk).
+	  Now the check is not marked as OK unless IPVS reflector reports
+	  OK. Following successfull check will try to add an RS again.
+	  The special case errors "ENOENT on remove" and "EEXIST on add"
+	  are treated with OK result code.
+	* ipvs: remove unused resulting error code.
+	  These functions are turned from int into void:
+	  ipvs_group_sync_entry, ipvs_group_remove_entry, ipvs_syncd_cmd.
+	* check_http: reduce cpu usage.
+	  do MD5 calculation only when configured to do so.
+	* timer: reduce cpu usage.
+	  timer_cmp is called too often and eats much of cpu cycles. Make
+	  the comparison more effective. Increase code re-using in
+	  monotonic_gettimeofday(). Use timer_reset_lazy() where possible
+	  to omit the excess memset() call.
+	* scheduler: reduce CPU usage.
+	  Since threads are sorted by t->sands, we could break the cycle
+	  when not expired thread found.
+	* ipvs: rs weight changes properly on reload.
+	  Do not remove and re-add a real_server when reloading config
+	  if its weight has changed. Just edit the existing ipvs rs entry.
+	* ipvs: new service option "ip_family".
+	  This option explicitly specifies the address family of a
+	  fwmark IPVS service entry. Previously it was determined by
+	  the AF of the first real server. This logic is kept as a fallback
+	  when the "ip_family" option is missing.
+	  Also, now it is possible to create two different services
+	  for v4 and v6 with the same fwmark number.
+	* make 'smtp_server' config to support domain name.
+	* use getaddrinfo() instread of gethostbyname().
+	* make 'smtp_server' config to support domain name.
+	* Added vrrp 'timeout' to synopsis.
+	* Cleaned/fixed up KEEPALIVED-MIB, it now passes smilint
+	* Fixed vrrp_snmp_route() - it was returning the address of the pointer
+	  instead of the IP address / network address for dst, gw, gw2, and src
+	* SNMP fixes/cleanup.
+	* Added support for static and virtual ip rules for use with policy
+	  based routing
+	* Add info to set a default gateway into man and sample.
+	* vrrp: Fix socket setup code for IPv4 multicast.
+	  if_setsockopt_mcast_if was only doing anything for IPv6 interfaces.
+	  Make it work also for IPv4 interfaces, and then don't need to
+	  call if_setsockopt_bindtodevice for multicast.
+	  Is it still necessary to call it for unicast?
+	* vrrp: Set (and restore) interface parameters.
+	  In order to receive and send multicasts on the correct interfaces
+	  various parameters need to be set via the /proc/sys/net/ipv4/conf
+	  interface. This patch sets them as needed, and restores any
+	  changes on the underlying interface on exit.
+	  If a user currently sets any parameters by scripts, that will
+	  override these changes and still work, but this change in general
+	  will make it unnecessary to change any parameters with scripts.
+	* vrrp: Leave VRRP multicast group by ifindex.
+	  Since we know the interface index, use that instead of the address
+	  since it is more efficient. Also, in the unlikely event that the
+	  interface doesn't have an address, then this avoids a problem.
+	* vrrp: Don't delete vmac interfaces before dropping multicast membership.
+	  Further to commit afea07bd94384c8ac8125e8cdbfd18bc4a46b14e, the
+	  dropping multicast memberships were failing, since the vmac
+	  interfaces had already been deleted. This patch keeps the vmac
+	  interfaces until after the IP_DROP_MEMBERSHIP ioctls. Separating
+	  the sending of the VRRP priority 0 messages from the shutdown
+	  of the vrrp instances is necessary since vrrp_dispatcher_release
+	  closes the sockets that are needed for sending the messages.
+	* vrrp: Don't open vrrp_send_socket if address family is wrong.
+	  open_vrrp_send_socket was opening a socket, and then checking that
+	  the address family was valid. Checking that the address family is
+	  valid at the beginning of the function streamlines the code.
+	* vrrp: Stop m'cast packets being queued (and not received) on send socket.
+	  If there are other vrrp instances on the same network, their
+	  multicast packets are queued to our vrrp send socket, but since we
+	  don't receive on that socket, the messages just get queued in the
+	  kernel (run netstat -anp | grep keepalived to see the queued
+	  packets increasing).
+	  This patch clears the IP_MULTICAST_ALL option, to stop these
+	  packets being queued.
+	* vrrp: Fix typos in log messages.
+	* vrrp: Fix RFC reference.
+	* vrrp: Fix vrrp parser error message.
+	* vrrp: Add interface index to vrrp dump data.
+	* vrrp: Don't specify source address in IP_ADD_MEMBERSHIP ioctl.
+	  If ifindex is specified, any source address given is ignored.
+	* vrrp: If fail to remove vmac i/f, don't report success after fail message.
+	* Help vim's formatting to work in configure.in.
+	  The single "'" in a comment confuses vim, and the screen formatting
+	  gets confused. Adding a second "'" in a C comment sorts vim out.
+	* vrrp: Don't explicitly drop IGMP membership before interface deletion.
+	  The kernel will send IGMP leave group messages when an interface
+	  is deleted, so there is no need for us to do so. Experimentation
+	  has shown that explicity doing IGMP_DROP_MEMBERSHIP doesn't make
+	  it any more likely the IGMP leave group messages will be sent.
+	  Adding the 1 second sleep significantly increases the likelihood
+	  of the IGMP messages being sent, but is doesn't guarantee it.
+	  Extending the sleep time doesn't improve the chances.
+	* Fix compiler warnings.
+	* vrrp: Add info to set a default gateway into man and sample.
+	* vrrp: Don't report error on interface creation/deletion.
+	  netlink_reflect_filter was returning an error if it didn't already
+	  know about an interface that has just been created. If we don't
+	  know about the interface, simply ignore it. Likewise on interface
+	  deletion, if we don't know about the interface, ignore it.
+	* vrrp: Ensure the first interface's parameters are set when using libnl3.
+	  Patch 60217b63242bee37b1c97a04644be6eb5e18b4c4 sets the interface
+	  parameters for each interface, but when using libnl3 there was a
+	  conflict with libnl, causing the parameters not to be set for the
+	  first interface. This patch makes vrrp_netlink.c use libnl3 if it
+	  is available, to avoid the conflict.
+	* vrrp: Fix interface parameter setting with libnl3 and error message on
+	  interface creation/deletion
+	* vrrp: Allow gratuitious ARP parameters to be configured globally.
+	  It is likely that the gratuitions ARP parameters will want to be
+	  the same for all interfaces, so allow the defaults to be set
+	  globally. Also allow vrrp_garp_delay to be set to 0 to indicate not to
+	  send further garp messages after a delay (to emulate how the
+	  kernel sends gratuitous ARPs).
+	* ipvs: Remove nat_mask configuration parameter.
+	  nat_mask was only valid with 2.2 kernel, and the implementation of
+	  it was removed in patch d51194f... but some of the configuration
+	  code remained. This patch removes all remaining code relating to
+	  nat_mask.
+	* Update man pages. keepalived.conf.5 is updated to include all
+	  configuration parameters, and keepalived.8 is updated to document the
+	  signals that can be used with keepalived.
+	* Remove remaining 2.2 kernel code.
+	* vrrp: Allow specification of default VRRP version to use.
+	  Rather than have to specify using VRRP version 3 on each VRRP
+	  instance, allow global configuration to set the default version.
+	* vrrp: Remove use of deprecated nl_join_groups().
+	  The use of nl_join_groups was introduced in commit 84cf733.. in
+	  order to resolve quickly a problem introduced in an earlier patch.
+	  This patch follows the approach adopted by libnl3, which uses a
+	  list of groups, rather than a bitmap which is limited to 32 groups.
+	* Documentation updates, removal of redundant code, global config.
+	* vrrp: set router flag in neighbour advertisements.
+	  This is necessary in order to prevent the IPv6 stack on a node that
+	  receives the unsolicited and overriding neighbour advertisement for the
+	  VIP (that gets sent automatically when Keepalived transitions to MASTER
+	  state) from immediately removing the VIP from its list of default
+	  routers. See https://bugs.launchpad.net/bugs/1520517 for an example of
+	  the problems this can cause.
+	  Note that the approach in this patch simply unconditionally sets the
+	  router flag. That is better than having it unconditionally unset (VRRP
+	  stands for Virtual *Router* Redundancy Protocol, after all), but it
+	  might not be appropriate whenever VRRP is used to fail over addresses
+	  that are used for other tasks than being routers. Thus it might be
+	  better to read in the interface's "forwarding" sysctl and set the router
+	  flag accordingly, or making the value of the router flag configurable in
+	  keepalived.conf.
+	* vrrp: Dynamic addition of interfaces from netlink msg.
+	  When a tracked interface is deleted then recreated with the same config
+	  VRRP groups tracking this interface will remain down. This is due to
+	  tracking of stale information.
+	  This patch listens for netlink messages for the creation of interfaces
+	  and does one of two things.
+	  i) If the interface doesn't exist in the vrrp interface list a new
+	  interface structure is created and the information from the message is
+	  used to fill the structure. This new interface is then added to the
+	  interface queue.
+	  ii) If the interface already exists in the queue we zero it and then
+	  use the information in the message to fill the structure.
+	* branch to fix empty RS list issue.
+	* a fix for services with no RS.
+	* check: segfault when there is no real server for a virtual server.
+	* vrrp: Stop memory leak rename function for convention.
+	  Renamed netlink_populate_intf_struct to netlink_if_link_populate to fit
+	  with file naming scheme.
+	  It was possible that a created ifp structure would not be cleaned up if
+	  netlink_if_link_populate returned a -1, fixed this so the structure is
+	  FREEd.
+	* Make parent process handle and propagate USR1/2 signals.
+	  In order to be able to automate writing configuration and/or stats
+	  the signals USR1 and USR2 need to be able to be sent to the parent
+	  process since its pid can be read from /var/run/keepalived.pid.
+	  The parent then needs to propagate these signals to a vrrp child.
+	* Ignore all signals except those explicitly wanted.
+	  In order to harden keepalived against a user accidentally sending
+	  a wrong signal to keepalived, set all signals other than those we
+	  want actioned to be ignored.
+	* Remove potential race condition when setting signal handlers.
+	  There was the potential for signal_run_callback to be invoked
+	  after calling sigaction for a signal, prior to the internal signal
+	  handler signal_SIG***_handler and signal_SIG***_v variables being
+	  set up. To remove the race condition, when setting a signal handler
+	  block the signal until the internal handlers have been fully set up.
+	* Make signal_ignore mean ignore.
+	  signal_ignore was setting a signal handler for the signal, but
+	  then itaking no action when the signal was received. This is now
+	  changed so the signal is actually set to be ignored.
+	* Streamline signal handling code.
+	  There was some duplication of the code for signal handling, and
+	  this slight restructuring avoids the duplication and makes it
+	  simpler.
+	* vrrp: Invoke notify scripts with the default signal disposition.
+	  It is reasonable for notify scripts to expect to be invoked with
+	  the standard signal disposition, so when first setting up signal
+	  dispositions, remember the original state so it can be restored
+	  before the notify scripts are exec'd.
+	* Return address of previous signal handler according to SA_SIGINFO.
+	  The man page for sigaction(2) states that SA_SIGINFO is only
+	  meaningful when establishing a signal handler. This appears not
+	  to be the case, since the flag will be set in the oldact structure
+	  on return from sigaction if the previous signal handler was
+	  established using the SA_SIGINFO flag.
+	* Invoke all scripts with the default signal disposition.
+	  Just as the change for notify scripts, it should apply to other
+	  scripts as well.
+	* vrrp: Don't wait on script process being killed after timeout.
+	  The child_timout_thread functions send a SIGKILL to a child
+	  process that has timed out and didn't die quickly enough
+	  after sending a SIGTERM. They then wait on the process dying.
+	  The main problem is that if the waitpid is successful here, then
+	  waitpid in thread_child_handler will never be successful for the
+	  same pid, and so the entry on the child list will never be removed
+	  and the parent thread will not be marked as ready.
+	  There is also a theoretical possibility that the child process is
+	  unkillable, and so the waitpid would hang forever.
+	* Set thread conditions before adding to list.
+	  It seems safer to set the status and type of a thread before
+	  adding it to the ready list.
+	* Remove some code duplication re running scripts.
+	  misc_check_thread and vrrp_script_thread were virtually identical
+	  so move duplicate code into new function system_call_script in
+	  notify.c.
+	* Fix formating of man page.
+	* Set standard signal disposition before invoking ip(6)tables.
+	  Call signal_handler_notify before running iptables/ip6tables.
+	  Since it is now called for more than notify scripts, rename
+	  signal_handler_notify to signal_handler_script
+	* Move common code for opening fd 0/1/2 into a function.
+	  The code for setting fd 0/1/2 to /dev/null before running a script
+	  was in several places. All the common code is moved into a function
+	  and the function called from the relevant places.
+	  It is only necessary to reopen fd 0/1/2 if keepalived is running
+	  with the --dont-fork option, since without that option the fds are
+	  already open on /dev/null.
+	* Optimise closure of fds before invoking scripts.
+	  Every time before a script was invoked, closeall() was called,
+	  which would spin through 1024 file descriptors closing them, even
+	  though the vast majority were not open, resulting in 1024 system
+	  calls. To avoid that, open all sockets and file descriptors
+	  (except fd 0/1/2) with the CLOEXEC flag set, so that the fds will
+	  be closed by the kernel when the script is exec'd.
+	* Simplify some IPv4/IPv6 code.
+	  Code blocks were (unnecessarily) repeated in functions which
+	  handled both IPv4 and IPv6 situations.
+	* Fix reloading and invoking notify scripts.
+	* Update vrrp_scheduler.c.
+	* Converted pdf user guide to RST with Sphinx.
+	* Added check for libnfnetlink header during the configure step.
+	* In free_list_elements invoke the free function if it exists.
+	* Use of LIST_ISEMPTY to check list exists causes memory leak.
+	* Stop parse_ipaddress FREEing via pointer passed to it.
+	  parse_ipaddress FREE'd new following an error, but new could be an
+	  address passed to the function, and therefore might not be MALLOC'd
+	  memory.  This commit makes the caller of parse_ipaddress free the
+	  memory if there is an error and the calling function MALLOC'd the
+	  memory.
+	* vrrp: Add vrrp_iptables global configuration option.
+	  The iptables/ip6tables entries were always added at the end of the
+	  INPUT chain, but for many configurations this is too late in the
+	  processing. This patch allows the chain name to which rules are
+	  added to be specified, and also allows the option of specifying
+	  no rules are to be added.
+	  If a chain name is specifed, it is necessary for that chain to
+	  already exist in the iptables and/or ip6tables config, and for
+	  that chain to be called from an appropriate point in the
+	  ip(6)tables configuration.
+	* vrrp: Add option to block outbound traffic from VIPs.
+	  Unwanted traffic to VIPs is discarded by ip(6)tables. This adds
+	  an option to also block outgoing traffic from VIPs.
+	* vrrp: Add iptables blocks for E-VIPs just like VIPs.
+	* vrrp: Allow unicast IPv6 Neighbour Solicits to be received.
+	  An ip6tables rule is added to allow IPv6 NAs to be received, but
+	  we also need to be able to receive NSs to respond to neighbours
+	  attempting to verify our reachability.
+	* vrrp: Use correct MAC address for IPv6 VRRP packets.
+	  The IPv6 VRRP packets were using the MAC address of the underlying
+	  interface, rather than the MAC address of the vmac. This commit sets
+	  the correct MAC address for IPv6, and also adds the link-local address
+	  of the underlying interface to the vmac interface, so that VRRP
+	  packets can be sent from the vmac interface, thereby using the VRRP
+	  MAC address.
+	* vrrp: Disable IPv6 on IPv4 VRRP VMAC interfaces.
+	  If IPv6 is not disabled on VMAC interfaces, an IPv6 link local
+	  address is generated based on the virtual MAC address. This is not
+	  only contrary to RFC 5798 para 7.4, but also causes duplicate
+	  address detection failure. The address also just isn't needed!
+	* vrrp: Fix setting nlmsg_len for netlink messages.
+	  For netlink messages, nlmsg_len must always be set to an aligned
+	  length. Prior to this commit, nlmsg_len was only being aligned when
+	  a subsequent attribute was added to the list. This was fine if the
+	  length of the last attribute added was an aligned length (which had
+	  always the case), but didn't work if the last attribute added didn't
+	  have an aligned length.
+	  This patch is needed in preparation for adding an attribute which
+	  doesn't have an aligned length.
+	* vrrp: Stop having an IPv6 link-local address added based on VMAC mac
+	  address.
+	  IPv6 link-local addresses that were based on the virtual MAC address of
+	  the VMAC interface were being added. RFC5798 para 7.4 states that this
+	  is not permitted. It also causes duplicate address detection failure,
+	  since each instance of the virtual router was configuring the same
+	  IPv6 address on the same subnet.
+	  This commit stops the offending link-local address being addied (or removes
+	  it if it can't stop it being added), and since VRRP advertisements must
+	  be sent with the virtual MAC address, but a link-local address for the
+	  interface, if a link-local address from the underlying interface exists,
+	  it is added to the VMAC interface, otherwise the MAC address of the
+	  underlying interface is used to generate a link-local address, which is
+	  then added.
+	  It wasn't until Linux 3.17 that the IFLA_INET6_ADDR_GEN_MODE netlink
+	  message was added, via which one can stop a link-local address being
+	  automatically configured. Therefore, if IFLA_INET6_ADDR_GEN_MODE is not
+	  supported, the only way to ensure that the problematic link-local
+	  address is not added is to remove it after the interface is brought up.
+	  This is not ideal, since there is a small window when the "illegal",
+	  and possibly duplicate, link-local address exists, but I haven't
+	  found any other way of doing it for pre 3.17 kernels.
+	* vrrp: Stop sending unnecessary attributes in netlink messages.
+	  When an IPv6 virtual address was deleted, it was being reported
+	  in the log file that preferred lifetime was being set to 0, which
+	  is only relevant when the address is being added. This commit stops
+	  adding the IFA_CACHEINFO attribute when deleting addresses, and
+	  also stops adding other unnecessary attributes.
+	* vrrp: Allocate an IPv6 link local address to VMAC if none on real
+	  interface.
+	  The physical interface than a VMAC is configured on may not have an
+	  IPv6 link local address, but we can construct one for the VMAC using
+	  the MAC interface of the underlying interface.
+	* vrrp: Remove code allowing mixed IPv4/IPv6 addresses.
+	  If addresses of both types were configured, the receiving end would
+	  reject the packet since the count of addresses received would have been
+	  wrong since only addresses of one family can be sent, see vrrp_in_chk:
+	  if (hd->naddr != LIST_SIZE(vrrp->vip))
+	  Since we don't want to send the addresses of the wrong family, add them
+	  to the virtual_ipaddress_excluded block rather than the virtual_ipaddress
+	  block.
+	* vrrp: Only set router flag in Neighbour Advertisements if forwarding.
+	* vrrp: Enforce maximum number of vips per virtual router.
+	  If there were more than one virtual_address blocks in a
+	  virtual_router block, one could add as many virtual addresses as
+	  one wanted, since it didn't check the number already read.
+	* vrrp: Don't ignore excess virtual_address entries.
+	  If there are too many virtual_address entries, add them to the
+	  excluded block, but still give a warning message.
+	* vrrp: Verify VRRP configuration after all configuration read.
+	  There was a lot of duplicated checking in vrrp_parser.c to ensure that
+	  configured parameters were consistent, and also a requirement to configure
+	  certain parameters before others. This checking was incomplete, and also
+	  becoming more and more complex as more configuration options were added.
+	  This commit delays a large part of the checking until after all the
+	  configuration has been read. This removes the need for options to be
+	  specified in a certain order and also for checking in multiple places
+	  whether certain combinations are valid.
+	  As a consequence of the delay in checking the configuration, the creation
+	  of the VMAC interfaces is delayed until after the checking.
+	* vrrp: Accept is only valid for VRRPv3
+	* vrrp: Verify priority and init_state consistent.
+	* vrrp: Verify password specified for authentication.
+	* vrrp: Verify have an ip address for interface.
+	* vrrp: xmit_base is only valid on a VMAC.
+	* vrrp: Ensure at least one VIP is configured on a VRRP instance.
+	  This commit requires at least one VIP to be configured on a
+	  vrrp_instance.  Although the code looked as though it was designed to
+	  allow 0 VIPs, not only was that a protocol violation, but also keepalived
+	  rejected any VRRPv3 packets received without any VIPs, and also any VRRPv2
+	  with IPv6  due to the check in vrrp_in_chk() in vrrp.c.
+	* vrrp: Generate unique default VMAC interface names.
+	  Since the virtual router ID can be duplicated both between IPv4 and IPv6,
+	  and also between different interfaces, the approach of setting a default
+	  interface name as vrrp.VRID could produce duplicate names.
+	  This commit now attempts to use vrrp.VRID, but if that already exists,
+	  then it will try vrrpN.VRID, where N starts from 1 and increases until an
+	  unused name is found (for IPv6 it tries vrrp6.VRID before vrrp1.VRID).
+	* vrrp: Ensure necessary uniqueness of VRIDs.
+	  VRIDs must be unique for a given address family and interface.
+	  This commit ensures that there is no duplication of VRID/address family
+	  on any interface.
+	* vrrp: Don't assign VIPs/eVIPs to the default interface.
+	  alloc_ipaddress was always setting the interface to DLFT_INT (eth0) if no
+	  dev DEVNAME was specified to a VIP/eVIP/static address. This is fine for a
+	  static address, but doesn't make sense for a VIP or eVIP, since they should
+	  be assigned to the vrrp_instance interface, unless explicitly configured
+	  otherwise.
+	  In fact, it probably doesn't make sense to specify dev DEVNAME for a
+	  VIP/eVIP, since the addresses must be assigned to the vrrp_instance
+	  interface.
+	* If a configuration error occurs between {}, skip to end.
+	  If a configuration error occurred in a block, the parser could get confused.
+	  This commit makes the parser ignore ignore all further entries until the end
+	  of the block.
+	* Don't allow specification of default as an address where inappropriate.
+	  The function parse_ipaddress would allow default or default6 to be
+	  specified for any address it parsed, but it doesn't makes sense in a
+	  lot of cases, so add a parameter to indicate if default is valid.
+	* Improve checking of configured advertisement timer.
+	* vrrp: Make sure that a VRRP instance has a name and is unique.
+	  It was possible to specify a vrrp_instance without a name. It was also
+	  possible to specify the same vrrp instance name twice.
+	* Extra validation for reading ip addresses.
+	* vrrp: Ensure a sync group has a name and hasn't already been specified.
+	* vrrp: VRRP authentication is dependent on VRRPv2 not IPv4.
+	  The check for whether authentication is not dependant on IPv4, but rather
+	  VRRPv2. This check will be conducted following reading the whole configuration.
+	* vrrp: Log error if unknown authentication type.
+	* Check for, and handle, '{' at beginning of a block.
+	  There was no check for a '{' at the beginning of a configuration block.
+	  This commit is the start of that check, allowing it either at the end
+	  of the line with the keyword, or on a line of its own.
+	  Also, in respect of group and notification_email, for all other configuration
+	  items, the '{' could follow on a line of its own, but for configuration
+	  items using read_value_block the '{' on a line following the keyword
+	  was read as a configuration entry.
+	* Check for, and report, unknown keywords.
+	  A misspelt keyword would have been silently ignored, potentially causing
+	  the user difficulty in understanding why his configuration wasn't working.
+	* If an address fails to parse, ensure don't return an apparent address.
+	  When reading an address, the address family was set early on, and a
+	  subsequent failure to parse the address left the address family configured,
+	  thereby making it appear that a valid address had been read. Simply set the
+	  address family to AF_UNSPEC on a failure.
+	* Ensure an address option has a value.
+	  There was no check that the parameter was present after a keyword, so for
+	  example : 1.2.3.4 dev
+	  would not have generated an error message, and alloc_ipaddress would have
+	  attempted to read a word after dev, which would either cause a dore dump
+	  or possibly return a parameter from a previous configuration line.
+	  This type of checking probably needs to be added elsewhere too.
+	* Add validation of address scope.
+	* vrrp: Don't allow group block more than once in a sync group.
+	  If a second group is configured, the first group is lost, and its
+	  malloc'd memory is also lost.
+	* vrrp: Make sure sync groups have at least two members.
+	  If a sync group was configured with no group {} statement, or if
+	  the group statement had no entries, then keepalived would core dump.
+	  This commit rejects groups with 0 members, and also with 1 member,
+	  since it isn't a group. It also checks that a virtual_instance isn't
+	  configured in more than one sync group, and also that the group
+	  members specified exist.
+	* The address must be the first record in an address configuration item.
+	  When an address is configured, it must be the first entry on the line.
+	  This allows options specified afterwards to know the address family,
+	  and also when reporting errors to include the address.
+	* vrrp: Log error if IPv6 and first address is not link local.
+	  RFC5798 section 5.2.9 requires that if the protocol is IPv6, then
+	  the first address must be the link local address of the virtual
+	  router.
+	* vrrp: Ensure that the full VRRP packet has been received in the buffer.
+	  Although afer receiving a VRRP packet, it checked that the length
+	  specified in the IP header was long enough to contain all the VRRP data,
+	  it didn't check that the data actually received was sufficiently long,
+	  so this check is added.
+	* vrrp: Stop VIPs in same CIDR being deleted, but only when using vmac
+	  so far.
+	  If an interface has more than one IP address in the same CIDR, when
+	  the "primary" address is deleted, all the secondary addresses are
+	  also deleted, unless /proc/sys/net/ipv4/conf/IFACE/promote_secondaries
+	  is 1. This commit sets the promote_secondaries flag on vmacs.
+	* vrrp:  Make from and to for VRRP iprules use a define.
+	  "From" and "To" were being stored as words rather than converted to
+	  defined value. This made storage requirements larger and processing
+	  them more time consuming.
+	* Don't report configuration bytes used if not _DEBUG_.
+	  If _DEBUG_ is not defined, malloc was increasing the count of memory
+	  allocated when called, but free wasn't reducing the count, and so the
+	  figure reported was meaningless.
+	  This commit completely disables the memory allocated counting and
+	  reporting if _DEBUG_ is not defined.
+	* vrrp: Use defines for address scopes.
+	  Rather than hard coded values for address scopes, use RT_SCOPE_*
+	* Force order of multiplication and division to avoid underflow.
+	* Clear list pointer after freeing list.
+	* Fix handling of active in vectors. active wasn't being consistently
+	  updated or reported for vectors.
+	* Make functions always returning 0 void.
+	  Three functions in utils.c always returned 0, and the calling
+	  functions weren't checking the return code, since it was pointless,
+	  so the functions have been changed to be of type void.
+	* Use struct in_addr rather than uint32_t for IPv4 address.
+	* vrrp: Disable all VMAC configuration code if don't have VMACs.
+	* Allow multiple spaces in quoted strings.
+	  The handling of quoted strings saved each word separated between
+	  tokens of '"'. This meant reconstructing a quoted string lost multiple
+	  spaces and was hard work.
+	  Quoted strings are now saved as the whole quoted string, without the
+	  quotes, so retrieval is much simpler. This also allows further keywords
+	  to follow the quoted string, if desired.
+	* vrrp: Remove string length dependencies in vrrp_print.
+	* vrrp: Stop using deprecated bcopy.
+	* vrrp: Add vrrp_instance name to some log messages.
+	* Optimise returning from list_element() when end of list reached.
+	* Make free_melement a static function.
+	* Use INET6_ADDRSTRLEN rather than hardcoded length.
+	* Don't format log message if not going to log it.
+	* vrrp: Add option to reduce vrrp advert address checking.
+	  By default, every received VRRP advertisement checks the advertised
+	  addresses are the same as the configured addresses, which is o(n^2).
+	  This change adds the option to check the first packet received from
+	  a master, but not to check the VIP list in subsequent adverts from
+	  the same master.
+	* vrrp: Ensure vrrp_buffer large enough for largest possible received
+	  packet.
+	  The allocated receive buffer had size VRRP_PACKET_TEMP_LEN, which
+	  suggests that it wasn't intended as the final solution.
+	  Instead of using a fixed buffer size, the maximum MTU across all the
+	  interfaces is calculated, and the size of the vrrp_buffer allocated
+	  is the maximum MTU size. This guarantees that any VRRP packet received
+	  will fit in the buffer.
+	* vrrp: Improved received VRRP packet checking.
+	  First check the protocol headers have been received, then before
+	  checking the overall length of the received data, check the data in
+	  the protocol headers, since this will allow more meaningful errors
+	  to be reported. For example if there was a mismatch between VRRP
+	  versions with IPv4, a length error was being reported, rather than
+	  the version mismatch.
+	  All the error messages in VRRP packet checking now include VRRP
+	  instance name, to help tracking down where the error lies.
+	* vrrp: Remove fixed limit number of VIPs in a VRRP advert.
+	  There was an arbirtary limit of VRRP_MAX_VIP (20) VIPs for sending
+	  a VRRP advert. Now that the vrrp_buffer is sized to be able to
+	  receive any packet up to the largest MTU size, we can dynamically
+	  allow as many VIPs as will fit in a packet (which varies depending
+	  on IPv4 or IPv6).
+	  There is also an overhead checking the received addresses in an
+	  advert against the VIPs configure on the instance, but this can now
+	  be mitigated by setting skip_chk_adv_addr on the VRRP instance.
+	* vrrp: Fix printing of vrrp tracking scripts.
+	* vrrp: Print Last transition time in human readable form.
+	* Disable assert statements unless _DEBUG_ is defined.
+	* Streamline free_list_element
+	* Remove duplication of code between free_list and free_list_elements.
+	* vrrp: Add vrrp strict mode, enforcing VRRP compliance.
+	  The commit doesn't yet implement strict mode, but it will block
+	  0 VIPs, unicast peers, IPV6 in VRRPv2.
+	* vrrp: Add some strict tests.
+	  In strict mode, the following are enforced:
+	    IPv6 required VRRPv3
+	    There must be at least one VIP per VR instance
+	    No unicast peers
+	    Must be address owner to start in MASTER mode
+	* vrrp: Don't allow AH authentication with IPv6 and VRRPv2.
+	  Of course, the RFCs don't allow IPv6 in VRRPv2, but it is an
+	  extension supported by keepalived.
+	* vrrp: Some minor ipsecah updates.
+	* vrrp: Clearly identify that VRRP has subblocks of VRRP scripts.
+	  The keepalived.conf.5 man page wasn't explicit that there are VRRP script
+	  subblocks as part of the VRRP configuration, and this is now explicit.
+	* Trivial edits to man page keepalived.conf(5).
+	* man page remove static_rules configuration from vrrp_instance.
+	  keepalived.conf.5 man page had an entry for static_rules within the
+	  vrrp_instance blocks, and this is clearly wrong.
+	* vrrp: Fix typo in error message when sending VRRP advert.
+	* vrrp: Add option not to include vrrp authentication code.
+	  RFC3768 updated VRRPv2 to remove authentication in 2004. This commit
+	  adds a configure time option to exclude authentication code.
+	* vrrp: When adding ip(6)tables entries, only specify i/f for link_local
+	  addresses.
+	  Packets to/from global address could arrive or be sent on any interface,
+	  so don't specify the interface for blocking the packets. For link local
+	  addresses, the block must relate to the specific interface.
+	* vrrp: Add ability to use libiptc rather than invoking ip(6)tables.
+	  Invoking ip(6)tables has a high overhead, since the process has to be
+	  forked and exec'd, and then it has to read the whole ip(6)tables
+	  filter chain before it makes a single update and commits it back.
+	  Using libiptc avoids the overhead of multiple forks/execs, and also
+	  means that multiple entries can be added/deleted to/from the ip(6)tables
+	  configuration in a single update.
+	* vrrp: Add option to use ipsets instead of iptables to block addresses.
+	  Instead of having lists of addresses in iptables, it is much more
+	  efficient to use ipsets to handle those addresses, since that is
+	  what it is designed for.
+	* Use /proc/sys/kernel/modprobe to find modprobe.
+	* Reinstate SIGCHLD before forking to exec modprobe for ip_vs.
+	  The fork of modprobe to load ip_vs would have reported a failure
+	  even though it would have succeeded.
+	* Reinstate SIGCHLD before forking to exec modprobe for ip_vs.
+	  The fork of modprobe to load ip_vs would have reported a failure
+	  even though it would have succeeded.
+	* Fix forking/execing re closing signal pipe.
+	  When calling scripts, we don't want to give them access to the signal
+	  pipe used between the parent process and the vrrp process.
+	* vrrp: Fix compile error when net/if.h and netlink/route/link.h conflict.
+	  Some versions of libnl3 netlink/route/link.h conflict with some
+	  versions of kernel header file net/if.h. This commit has a
+	  workaround for when there is a conflict.
+	* vrrp: Fix compile failure with old kernels and libnl3.
+	  Issue #215 identified a compile error with pre 3.13 kernels when
+	  libnl3 was installed. This commit adds a test for that situation
+	  and avoids using rtnl_link_inet_[sg]et_conf.
+	  I haven't been able to test this on a re 3.13 kernel, but I have
+	  simulated the scenario and it compiles as expected.
+	* vrrp: Fix compilation when ipsets not installed.
+	* vrrp: Fix build breakage when not using libiptc.
+	* vrrp: Fix VRRP respawning when no VIPs specified.
+	  Commit b46dec58fa failed to check the the VIP list existed before
+	  checking how many entries were in the list.
+	  This commit also defaults the address family to IPv4 if no VIPs are
+	  specified.
+	* vrrp: Make dependency on libnfnetlink/libnfnetlink.h conditional.
+	* Streamline handling of daemon mode flags.
+	* Improve handling of not being able to read a pid file.
+	  If a pid file was opened, but for some reason a pid could not
+	  successfully be read, the pid used to check if a process was
+	  running was random.
+	* Remove unused pid filename definitions.
+	* Change outstanding debug flag tests to use bitops helpers.
+	* Allow for different sizes of long ints in bitops.
+	* vrrp: Ensure conversions of vrrp->adver_int etc don't overflow.
+	* Use bitops with daemon_mode.
+	* vrrp: Fix ip_rule direction for SNMP.
+	  Commit 2da11f99 introduced defines for ip_rule directions rather
+	  than using strings, but the commit omitted to update the snmp code
+	  when processing the directions.
+	* add a line about the 'include' keyword in keepalived.conf(5).
+	* fix HTTP_GET config dump. The config dumper routine
+	  dump_http_get_check was always printing the last configured checker's
+	  connection info.
+	* dump_conn_opts: prototype change.
+	  pass the conn_opts_t pointer as a void* parameter to make the
+	  function prototype a valid dump callbac This makes smtp_dump_host()
+	  function needless, it is removed.
+	* fix build issues on older systems.
+	  Try to avoid the build error on systems which lack of
+	  O_CLOEXEC and IP_MULTICAST_ALL defines (such as Ubuntu lucid and
+	  Debian squeeze).
+	* Fix compilation with --disable-vrrp-auth
+	* vrrp: Remove state VRRP_STATE_LEAVE_MASTER since it isn't used.
+	* vrrp: Fix VRRPv2 authentication issues.
+	* Don't redefine _GNU_SOURCE.
+	* vrrp: Exclude function vrrp_ah_sync when --disable_vrrp_auth.
+	* Fix some conditional compilation errors.
+	* Streamline getopt_long options.
+	* Remove '\n's from log messages.
+	* Ensure standard configure generated defines are used.
+	  The defines used in the compiles in the various subdirectories were
+	  specified in each Makefile.in which could lead to inconsistencies.
+	  This commit defines APP_DEFS in configure.in, which is then used
+	  in each Makefile.in.
+	* Dump keywords to file rather than stdout.
+	* Add copyright message and build options to version output.
+	  This commit also ensures that the end year of the copyright date
+	  range is the current year when keepalived was built.
+	* Stop erroneously logging error message for unknown keywords.
+	  When vrrp_parser parsed the configuration file, it didn't know
+	  about the checker keywords, and vice versa, and so reported errors.
+	  This commits makes the other keywords known but marked as inactive.
+	* vrrp: Fix SNMP trap NewMaster.
+	  The trap must only be triggered for IPv4, since RFC2787 doesn't
+	  understand IPv6. Also, RFC2787 only supports VRRPv2 instances,
+	  so don't raise the trap for VRRPv3 instances.
+	  The IP address returned must be the actual IPv4 address, and not
+	  the ip_address_t that holds the address.
+	* vrrp: Use underlying interface for ifindex in NewMaster traps for vmacs.
+	  If the VMAC ifindex is returned, then there is no indication that
+	  multiple VRRP instances are operating on the same physical interface,
+	  so return the ifindex of the underlying interface. This will also
+	  mean that the same ifindex should be maintained between different
+	  invocations of keepalived.
+	* vrrp: Move SNMP private defines into vrrp_snmp.c/check_snmp.c.
+	  The defines for the net-snmp "magic" were in the header files
+	  which were included by other modules. The defines are private to
+	  the c source file, so move the defines into them, to avoid polution
+	  compilation units which included vrrp_snmp.h/check_snmp.h.
+	*  Use definition for 1.3.6.1.2.1.
+	* vrrp: Start SNMP after reading configuration.
+	  If SNMP is started before the configuration is read, a meaningless
+	  response will be returned to net-snmp, so don't start the snmp agent
+	  until after all the config has been read.
+	* vrrp: Fix setting SNMPv2-MIB::sysORID entries in ORTable.
+	  The length of the OID passed to register_sysORTable was wrong.
+	* vrrp: Allow SNMP agent to unregister cleanly with more than one MIB.
+	  Separate snmp_unregister_mib() out from snmp_agent_close() to allow
+	  multiple MIBs to be unregistered before the snmp agent is closed.
+	* vrrp: Don't register the global_oid with SNMP twice.
+	  If SNMP is enabled, both the checker process and the vrrp process
+	  were registering the global_oid. This commit makes the checker
+	  process register it if it is running, otherwise the vrrp
+	  thread registers it.
+	* vrrp: Add read-only support for RFC2787 SNMP (VRRPv2).
+	* vrrp: Allow any combination of keepalived and RFC SNMP support.
+	* Allow enabling snmp via config file.
+	* ipvs: sctp ad persistent engine support.
+	* Fix building with --disable-lvs
+	* Stop autoconf complaining.
+	* vrrp: Use defined value for maximum VRRP priority.
+	* vrrp: Simplify scheduler code vrrp_leave_fault().
+	  Two pairs of code blocks were repeated, and each pair could be
+	  reduced to occuring only once if the conditions were merged.
+	* vrrp: If VRRP priority is 255 and not nopreempt, configure like state
+	  MASTER.
+	* vrrp: Ensure number of VIPs doesn't exceed 255 per instance.
+	* vrrp: Don't check second time if IFLA_IFNAME is NULL.
+	* Dump interface details with rest of config.
+	* vrrp: When becoming master, block addresses before adding them.
+	  If not accept mode, entries are added to iptables/ipsets to block
+	  traffic to the VIPs/eVIPS. These entries should be added BEFORE the
+	  addresses themselves are added, to ensure there isn't a (small)
+	  window when we might reply from the added addresses.
+	* vrrp: Document virtual_rules.
+	* Fix memory leak re some uses of ipaddresstos().
+	* Fix parsing ipset names.
+	* vrrp: Improve and fix finding vmacs left over from previous invocation.
+	  When netlink reports a new or existing interface, we can extract
+	  information that allows us to determine if the interface is a macvlan,
+	  and the type (e.g. private). We can then save that in the interface_t
+	  structure, setting the vlan flag, and base ifindex.
+	  When working out the interface name to use for VMAC instances, we can
+	  then check the interfaces which are macvlans to see if any of them
+	  match the vrrp instance in terms of mac address, underlying interface
+	  and inet address family, and if so we can then reuse the macvlan interface.
+	  Commit 9ae463e7f broke the finding of existing interfaces where the
+	  configuration didn't specify the VMAC interface name, and simply created
+	  a new interface. This commits now resolves that.
+	  There is still an issue that if an interface was in MASTER mode when
+	  keepalived terminated, when keepalived restarts it leaves the VIPs and
+	  eVIPS on the interfaces, meaning that keepalived cannot receive VRRP
+	  packets on the interface from the VRRP instance that has taken over, and
+	  it also means that there are duplicate IP addresses on the network.
+	  Another commit will resolve this issue.
+	* vrrp: Remove ip addresses left over from previous failure.
+	  If keepalived terminates unexpectedly, for any instances for which
+	  it was master, it leaves ip addresses configured on the interfaces.
+	  When keepalived restarts, if it starts in backup mode, the addresses
+	  must be removed. In addition, any iptables/ipsets entries added for
+	  !accept_mode must also be removed, in order to avoid multiple entries
+	  being created in iptables.
+	  This commit removes any addresses and iptables/ipsets configuration
+	  for any interfaces that exist when iptables starts up. If keepalived
+	  shut down cleanly, that will only be for non-vmac interfaces, but if
+	  it terminated unexpectedly, it can also be for any left-over vmacs.
+	* Sort out extraneous space and tab characters.
+	  The commit removes spaces followed by tabs, trailing spaces and tabs,
+	  and replaces occurrences of 8 spaces within tabs, except where the
+	  spaces and or tabs occur within strings.
+	  This has the benefit that if blocks of code are copied, git does not
+	  complain when running git am on a file produced by git format-patch.
+	* vrrp: Simplify RFC SNMP code.
+	  The code was checking VRRP version unnecessarily, and also had code
+	  to return an index element which is not necessary.
+	* vrrp: Don't send traps for SNMP MIBS which are not enabled.
+	* vrrp: Don't register SNMP global OID if not handling it.
+	  If neither the checker nor the vrrp components of KEEPALIVED-MIB
+	  are enabled, don't register the global OID.
+	* Parameters passed to traps don't need to be static.
+	* Fix --without-lvs and --without-vrrp configure options.
+	* Ensure general MIB is enabled if --disable-lvs configured
+	* Avoid compiler warning re function definition to prototype.
+	* Add RFC6527 SNMP (VRRPv3).
+	  This commit adds read-only and notifiction support for SNMP for VRRPv3
+	  in accordance with RFC6527.
+	* vrrp: Fix MAC address for IPv4 VMACs created after IPv6 VMACs.
+	* vrrp: Allow routes and rules to use tables >= 256
+	* Don't recompile libipvs-2.6/*.c every build.
+	* vrrp: Remove left over ip rules and routes at startup.
+	* vrrp: Ensure ip routes added before rules, and vice versa.
+	  If ip rules are added before routes, then it is possible for a
+	  packet to be routed while the routing table is only partially
+	  complete. Adding the rule after the routes ensures that the routing
+	  table won't be processed until it is completely set up.
+	  Likewise, when removing rules and routes, remove the rules first.
+	* vrrp: Add missing reason message for rejected VRRP packet.
+	  Issue #255 show a log identifying bogus VRRP received, but there
+	  was no reason shown for the rejection. The only instance I can find
+	  for this is if vrr->family is neither AF_INET or AF_INET6, which I
+	  think must be a bug in the code parsing and setting up VRRP instances.
+	  This commit just adds a log message to be explicit about why the packet
+	  is rejected, and also reports the value of vrrp->family.
+	* Reduce number of calls to getaddrinfo() reducing DNS lookups.
+	* Report if vrrp or checker process abnormally terminates.
+	* Add option to increase child process priorities and make non swappable.
+	* Make vrrp_daemon.c and check_daemon.c use header file for externs.
+	* Add reporting ops mode, and minor tidying up of virtual_server config.
+	* vrrp: Don't overwrite real interface MAC address with VMAC MAC address.
+	  When a VMAC was being created, the MAC address of the VMAC was
+	  being copied to the MAC address of the underlying interface in the
+	  interface_t structure.
+	  The netlink reflector sets up the MAC address of the new VMAC
+	  interface, so there is no need to copy a MAC address at all.
+	* vrrp: Stop keepalived_vrrp terminating with SIGSEGV if lvs_syncd_if set.
+	  ipvs_stop() was being called before shutdown_vrrp_instances(), and
+	  so if lvs_syncd_if had been specified on a vrrp instance, keepalived
+	  would subsequently terminate with a SIGSEGV in free_interface_queue().
+	* Make lvs_sync_daemon global config rather than vrrp specific.
+	* Stop lvs sync daemons on restart in case of prior abnormal termination.
+	* Remove any residual ipvs configuration on restart.
+	* vrrp: Optimise clear_diff_vrrp_*() functions.
+	* Check MALLOC returned non NULL before copying to the location.
+	* Allxoow specifying syncid for lvs syncd.
+	* vrrp: Send second set of GARP messages afer receiving lower prio advert.
+	  When a VRRP instance transitions to master state, if garp_master_delay
+	  is non-zero, a second set of garp_master_repeat messages is sent after
+	  garp_master_delay seconds (unless 0). However, if a lower priority advert
+	  is received, keepalived didn't send a second set. This commit sends a
+	  second set if a second set would have been sent after transition to master.
+	* vrrp: Allow setting of graduitius ARP parameters for lower prio adv
+	  separately.
+	* Don't log a "keepalived stopped" message if keepalived already running.
+	* vrrp: Add support for iprule and iproute table names.
+	* Resolve MALLOC/FREE issues to iprule/iproute table names.
+	* Make keepalived_malloc return void* to match malloc.
+	* When reporting MALLOC/FREE status on exit, report max MALLOC'd memory.
+	* Make libipvs use MALLOC/FREE.
+	* Don't restore original signal state when reloading checker config.
+	* Ensure signals USR1 and USR2 are set to ignore in checker process.
+	* vrrp: Only free list of iprule table names if list assigned.
+	* vrrp: Fix strict mode of vrrp instance overriding global vrrp_strict.
+	* Attempt to fix build breakage introduced in commit 85f81dd.
+	* Fix parsing of scope for ip addresses.
+	* Free global ssl context on reload.
+	* Free request_t buffer and ssl data on reload.
+	* vrrp: Restore sync-state after reload.
+	  Currently the sync state is rebuilt from the member states after
+	  config reload. This changes now reloads the previous sync state
+	  after reload, and then pushes this back to the group members. If a
+	  new group member is added during the reload, then the new group
+	  will accept the sync group state. If a group member is removed
+	  during a reload, then a special case will be executed to force
+	  the sync-group state to BACKUP. This is required so that an
+	  alternative backup peer for the removed group is given an
+	  opportunity to take over the gateway.
+
+2015-07-07 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.2.19 released.
+	* vrrp: fix checksum computation in vrrp v2 for socket family AF_INET
+	  One of difference between VRRPv2 and VRRPv3 is the way checksum is
+	  computed. In VRRPv2 no accumulation is specified in RFC while in VRRPv3
+	  it uses regular accumulator with upper pseudo header. This fix restore
+	  compliant VRRPv2 for AF_INET vrrp instance. Since IPv6 socket are using
+	  IPV6_CHECKSUM option this means that checksum for VRRPv6 instance runing
+	  in native_ipv6 mode are broken. But since this is a end to end sanity
+	  check and both side are operating the same way this OK, no "compliant
+	  with VRRPv3 RFC", but anyway using native IPv6 on VRRPv2 is not really
+	  compliant too ;)
+	* Some cosmetics at Makefile stuff.
+
+2015-06-30 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.2.18 released.
+	* some cosmetics changes (in memory and parser).
+	* remove dead/not used code.
+	* revert notify script brought by last release.
+	* revert VRRP preemption speed up extension.
+	* vrrp: ix vrrp removes incorrect IPv4 address when VIPs
+	  are removed.
+	* vrrp: Re-enable VRRPv2 checksum on inbound pkts.
+
+2015-05-31 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.2.17 released.
+	* zalloc use xalloc for consistency.
+	* memory: fix wrong size calculation in zfree.
+	* Fix keepalived snmp configuration.
+	* Change comments to match kernel style.
+	* smtp: Fix wrong algorithm in RCPT-TO building.
+	* vrrp: ICMPv6 : modify the way we copy the src address into the IPv6
+	  header, in order to not overwrite the header' and the 'hop limit' fields
+	* vrrp: sync status flag (up/down) for _all_ VMAC interfaces.
+	  When using VMAC and running multiple instances on the same interface,
+	  only one of the VMAC interfaces will get its status flag synched.
+	  This commit will update the status flag for _all_ VMAC interfaces attached
+	  to a base interface.
+	* ipvs: fix segfault crash when parsing SMTP_CHECK config
+	* ipvs: SMTP_CHECK now respects configured RS port. Before that it always
+	  used the default port 25.
+	* ipvs: config parser: handler for the end of block. new function
+	  install_sublevel_end_handler(handler).
+	* ipvs: new log function vlog_message taking varg_list. log_message now
+	  uses format gcc attribute, not the macro wrapper.
+	* ipvs: bug: check_smtp was logging "#30" instead of RS address do not do
+	  nested va_start/va_end calls in smtp_final.
+	* ipvs: clarify snmp_check config syntax. Now host{} section is optional,
+	  and all the standard connection options are available in the SNMP_CHECK{}
+	  level, too. If one or many host section persist, those base-level options
+	  are used to specify default values that can be overriden in a host section.
+	* vrrp: Use literal constants for bit flags Use literal constants for bit
+	  flags of the "debug" global variable Change from using numeric constants
+	  to literal constants for the bit flags of the "debug" global variable.
+	* vrrp: Backup obtains VIP resulting in a duplicate IP. VRRP backup obtains
+	  VIP resulting in a duplicate IP situation. When a priority change to the
+	  configuration of a Master router drops its priority to below that of a
+	  backup router, the VIP is not released on the Master router leading to
+	  a duplicate IP situation.
+	* vrrp: Make preempt_delay work more than once.
+	* vrrp: Changes needed to support AH auth in VMAC mode. Note according to
+	  the RFC this is not a requirement, but we think that our customers will
+	  expect it to work. The RFC actually discourages its use because it adds
+	  little to no additional security.  We are still able to interoperate in
+	  RFC mode by not enabling authentication.
+	* vrrp: Check VRRP header in the IP auth header is correct. In the middle
+	  of vrrp_in_chk, the existing VRRP packet parsing code does
+	  "return vrrp_in_chk_ipsecah(vrrp, buffer);" if the VRRP version is two,
+	  and the authentication type is IP sec authentication, to check whether
+	  or not the IP sec authentication header is valid.  However the "instant"
+	  returns means that is the IP sec authentication header is valid, then
+	  the remaining parts of the VRRP packet (VRRP version, VRRP checksum,
+	  VRID, number of VIPs, advertise-interval) are not parsed or validated.
+	* vrrp: Add support for SNMP trap: vrrpTrapNewMaster.
+	* vrrp: Add skeleton code for VRRP-MIB.
+	* vrrp: Check existing VIF and recreate if VMACs are wrong. Although under
+	  normal circumstances we will cleanup VIF interfaces when shutdown, there
+	  are various scenarios were this is not the case. To make the code more
+	  robust, keepalived now performs a check for matching VIF interfaces at
+	  restart, and if the configuration of the VIF matches the current
+	  keepalived configuration it will reuse the VIF. However, should the
+	  configuration be different, keepalived will remove the existing
+	  interface, and then recreate a new VIF interface with the appropriate
+	  configuration. This fix resolves the continuous crash scenario that can
+	  occur when keepalived fails to configure the VIF because one already
+	  exists. It prevents keepalived from reusing a previous VIF interface
+	  which does not completely match it configuration criteria.`
+	* vrrp: fix snmp code (cosmetic)
+	* vrrp: Fix the keepalived mib and agentx warnings. During Keepalived
+	  startup, about twenty "duplicate registration" and a couple of "Failed
+	  to connect to the agentx master agent" warning messages were issued.
+	  Pairs of the "Failed to connect" warning messages were logged every two
+	  minutes. The "duplicate registration" warnings happened because VRRP
+	  called snmp_agent_init twice, once for the keepalived-vrrp MIB, and once
+	  for the rfc2787-vrrp MIB, however each call to snmp_agent_init also
+	  tried to register the keepalived-global MIB (which holds data like
+	  Keepalived version number, SMTP server details, and a "from" email
+	  address).  It was the second attempt to register this keepalived-global
+	  MIB that generated the "duplicate registration" warning. The registration
+	  of the keepalived-global MIB is now only done once under the control of
+	  a static variable.   init_agent is also called just once under the control
+	  of the same static variable to prevent it logging a warning message. The
+	  "Failed to connect" warnings occur because Keepalived does not know how
+	  to connect to the SNMP AgentX master server.  By default the Agent X
+	  master server is listening for MIB registrations on a local TCP socket
+	  with a port number of 705.
+	* vrrp: Fix VRRP preemption taking too long. VRRP preemption may not work
+	  correctly due to group expiry timers being incorrectly manipulated while
+	  running down the MDT. Also, preemption can be disrupted if the VRRP group
+	  receives an advertisement while running down it's timer.
+	* vrrp: Initial Implementation of VRRP statistics.
+	  . Add VRRP counters, This is needed by the VRRP-MIB, and will provide
+	    better insight into the operation of VRRP for users.
+	  . Add SIGUSR1 and SIGUSR2 handlers
+	    - SIGUSR1 allows users to dump current state of VRRP instacnes to
+	      /tmp/keepalived.data
+	    - SIGUSR2 allows users to dump VRRP counters to /tmp/keepalived.stats
+	* vrrp: Copy old VRRP stats on reload.
+	* vrrp: Seperate printing functions from vrrp_daemon.c. Seperate state
+	  printing code from vrrp_daemon.c so that the code is better organized.
+	* vrrp: Track master router priority in VRRP.
+	* vrrp: Added 'Master priority' output to show vrrp detail.
+	* vrrp: Enhance keepalived vrrp to configure mltp-scripts. Currently,
+	  keepalived vrrp only allows to configure single notification script.
+	  This is a limitation ans should be extended so that keepalived vrrp can
+	  notify multiple scripts about vrrp state changes.
+	* vrrp: Don't display ipsec ah password in log files. When authentication
+	  type is selected as ipsec ah, password should not be displayed in the
+	  log files.
+	* vrrp: Fix notify upon reload. When a notify script is configured after
+	  Keepalived has been started, if other notify scripts are already
+	  configured, these scripts get reinvoked even if the state has not
+	  changed. This occurs when in backup state. When in master state, no
+	  notifications are sent out at all if a new notify script is configured.
+	  For the backup case, this problem occurs when the daemon is reloaded.
+	  This causes vrrp to leave the state it's currently in, go to the init
+	  state and from there, go back to backup. However, this transition
+	  causes the notify scripts to be invoked, causing a redundant
+	  notification to be sent. For the master case, there is no call to
+	  notify_instance_exec(), hence why no notifications are seen at all.
+	  The solution is to add a new field to the vrrp struct that stores the
+	  notify scripts that were configured before reload. A new function has
+	  been added to take advantage of this new field. Instead of calling
+	  notify_instance_exec() when we are in the init state, we now call
+	  notify_instance_exec_init(). This is a proxy function that modifies
+	  the 'script' member of a vrrp structure to point to a new list
+	  containing only scripts that have not previously been configured,
+	  thereby preventing the sending of notifications that have already been
+	  sent. This new list is created by utilising the new vrrp struct field.
+	  Inside this new function, notify_instance_exec() is called using the
+	  modified VRRP instance. When this call returns, the member is reset
+	  back to its original value.
+	* vrrp: Keepalived extension to support VRRP version 3. Updated vrrp_header
+	  and _vrrp_t struct to support version 3 params. Support to build vrrp_v3
+	  packet.
+	* vrrp: Keepalived extension to support VRRP version 3 (2).
+	* vrrp: Keepalived extension to support VRRP version 3 (3). Timer changes
+	  to support centi-sec.
+	* vrrp: Keepalived extension to support accept mode for v3.
+	* vrrp: Fix up limitations of keepalived VRRPv3. The current Keepalived is
+	  supporting IPv6 but it is not fully functional and it is not as per
+	  RFC5798.  Following are the issues identified and changes done:
+	    - IPv6 address population.
+	    - Correction of Checksum in case of IPv6.
+	    - Getting source address from received advertisements.
+	    - Populating source address in sent VRRP advertisements.
+	* vrrp: Improve display output for VRRPv3.
+	    - Changed data-type of mcast_saddr to sockaddr_storage to support IPv6
+	      also.
+	    - Added new parameters version, accept, weight updated advertisement
+	      interval for operational command show output.
+	* vrrp: MIB enhancements for accept-mode.
+	* vrrp: Fix mismatched advertisement interval. In VRRP version 3, all
+	  BACKUP routers must set their advertisement intervals to match the current
+	  MASTER's. Although not explicitly stated in RCF5798, when the MASTER falls
+	  over or forfeits its MASTER status, the new MASTER should not continue to
+	  use the old MASTER's advertisement interval value and should instead use
+	  its locally configured value. To achieve this, a new field has been added
+	  to the VRRP structure that stores the most recent advertisement interval
+	  of the current MASTER. We track changes to the current MASTER's interval
+	  and update this new variable accordingly. The value is only updated when
+	  we are in BACKUP state and reconfiguring the local advertisement interval
+	  has no effect on it.
+	* vrrp: snmp: don't hardcode AgentX socket location. The default location
+	  should be `/var/agentx/master` (as per RFC2741 and this is also the
+	  default for NetSNMP, including on Debian-based distributions). This
+	  default location is set at configure-time for NetSNMP and subagent will
+	  use it automatically (it is also available through `net-snmp-config.h`).
+	  A useful feature would be to have a flag to change that if the user
+	  change this settings in the master agent. This commit just reverts this
+	  change to let SNMP subsystem work as expected for most users.
+	* vrrp: snmp: restore use of net-snmp-config to build SNMP support. With
+	  a lazy linker, `libnetsnmpmibs` may require some additional libraries
+	  to be linked (like `libsensors`). Therefore, only rely on
+	  `net-snmp-config` to get the appropriate flags.
+	  Also add some additional tests:
+	    - check that we can build a simple executable (NetSNMP can be quite
+	      broken and in this case, the error during compilation is not crystal
+	      clear, checking that in configure is more informative)
+	    - check if we subagent support is compiled in (This is optional and
+	      again, the error is not crystal clear during compilation).
+	    - check that net-snmp/agent/util_funcs.h is present (Due to a flaw in
+	      NetSNMP build process, this header was not installed for quite a long
+	      time, notably on RHEL derivatives; code to handle its absence was
+	      already present in Keepalived).
+	* vrrp: snmp: don't enable SNMP support automatically.
+	  Most users won't use it and it would fail if NetSNMP is not installed,
+	  unless a user add `--disable-snmp` to configure command line.
+	* build: move custom include directives (`-I`) first. Some libraries,
+	  notably NetSNMP, may pollute CFLAGS by adding stuff like
+	  `-I/usr/lib/x86_64-linux-gnu/perl/5.20/CORE` in CFLAGS. Instead of
+	  trying to not use CFLAGS from NetSNMP at all (some of those bits are
+	  important as they influence some NetSNMP headers), we ensure that the
+	  bogus include flags are after our own include flags.
+	* global: Set global data default values after parsing config file.
+	  This patch will defer setting the global data default values until
+	  after the config file has been parsed. This will potentially avoid two
+	  calls to getaddrinfo. For example, if the router_id and/or email_from
+	  parameters are set in the config file, there is no need to call
+	  getaddrinfo twice in order to set a default value. Instead, this patch
+	  will check to see if they values are unset after parsing the config
+	  file. Note that email_from and smtp_connection_to are only set to a
+	  default value if they are unitialized and smtp_server is specified.
+	* doc: add -x/--snmp flag to keepalived manual page.
+	* snmp: add -A/--snmp-agent-socket to specify AgentX socket.
+
+2015-03-31 Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.2.16 released.
+	* Properly close netlink channel to avoid fd leak.
+	* Use getaddrinfo instead of gethostbyname to workaround
+	  glibc gethostbyname function buffer overflow.
+	* ipvs: log http timeout only when server goes down
+	  All other calls to log_message() when a check fails are
+	  performed when a server changes its state.
+	  The http timeout log message is the only exception.
+	* ipvs: properly fix bug when Q < H.
+	  The commit a77c2c7 has not fixed the issue.
+	  Log messages became accurate, but unsigned comparison
+	  was still in use.
+	* ipvs: HUP processing refactored.
+	  copy_srv_states is removed: we can copy states with
+	  existing clear_diff_*functions, as long as
+	  clear_diff_services is called before the init_services.
+	  vs_exist, rs_exist: remove side-effects from these functions.
+	  Now they do only search and return pointers.
+	  get_rs_list removed: the new rs list is now passed to
+	  clear_diff_rs.
+	  init_service_vs: quorum_state assignment is not needed
+	  here. It is already assigned either by vs constructor, or
+	  by alpha handler, or by clear_diff_services.
+	* ipvs: refactoring link vsg structure to vs.
+	  this adds a pointer to virtual_server_group_t into
+	  the virtual_server_t structure and fills these pointers
+	  after config load.
+	  This change will allow to access vsg items of a vs easily,
+	  without iterating and name compare.
+	* ipvs: refactoring use links to vs->vsg links.
+	  ipvs_cmd: removed vs_group list parameter. Link to vsg
+	  is obtained via vs->vsg. These functions are also modified
+	  in the same way: ipvs_group_cmd, clear_service_rs,
+	  clear_service_vs, clear_diff_rs.
+	  clear_diff_vsg: new_vs is passed as a param, vsg pointers
+	  are retrieved w/o iterating.
+	* ipvs: fix problems with config reload.
+	  The commit 7bf6fc contained a bad trying to fix the issue
+	  when an alive RS does not appear in a new VSG entry on reload.
+	  It has not fixed the original issue and added a new one:
+	  vs_groups lose quorum on config reload.
+	  This commit fixes the issue properly, and also the case when
+	  RS in VSG is in inhibit mode.
+	  The reloaded flag is added to the virtual_server_group_entry_t.
+	  ipvs_group_sync_entry: add alive destinations to the newly
+	  created vsge.  It is aware of inhibit-on-failure destinations.
+	  sync_service_vsg: calls the former for each created vsg entry
+	  vsge_exist: changed just as other *_exist routines.
+	* genhash: add support of fwmark in genhash
+	* genhash: terminate thread if connect_error
+	* Fixed filenames and paths so that make uninstall removes
+	  initscript and man pages. Changed perms for keepalived.sysconfig
+	  from 755 to 644
+	* Fix a typo in dump_global-data().
+	* vrrp: revert previous buggy preempt extension.
+	* smtp: fix infinite loop when the smtp server unexpectedly
+	  closes the connection.
+
+2014-12-21  Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.2.15 released.
+	* vrrp: Use ancillary data on sending path for IPv6
+	  mcast_src_ip. Well, previous code used bind() to specify
+	  IPv6 src address. Ancillary data is a much more cleaner
+	  and efficient way...
+	* ipvs: Fix format of long int in log_message call.
+	* ipvs: fix building with fwmark disabled.
+	* vrrp: Pointer dereference before NULL check.
+	* STR(SMTP_PORT) returns "SMTP_PORT", not "25".
+
+2014-12-16  Alexandre Cassen  <acassen@linux-vs.org>
+	* keepalived-1.2.14 released.
+	* The "Date:" mail header is now localtime.
+	* bugfix: fwmark field was formatted as signed int
+	* dump_conn_opts: fwmark was not displayed.
+	* log_message: emit -Wformat= compiler warnings.
+	  There could be (and actually are) situations when the format
+	  string and the arguments list passed to the log_message() are
+	  inconsistent or mistyped. The compiler did not show any warnings
+	  because the vsnprintf was called indirectly.
+	* Further unification of IP endpoints logging.
+	  This change tries to keep usage of the standard "[%s]:%d" format
+	  string to a minimum. Instead, use inet_sockaddrtopair wherever
+	  possible.
+	* Add SNMP subsystem option to man page.
+	  The keepalived(8) man page did not mention the -x option to
+	  enable the SNMP subsystem. This patch adds the -x (and --smmp)
+	  options to the keepalived(8) man page, as described in the
+	  keepalived help message.
+	* vrrp: fix gratuitous ARP refresh timer handling.
+	  Previous code was using an 'int' to store parsed timer value.
+	  This value was then expanded to TIMER_HZ which can lead to a
+	  wrapping issue if requested timer is longer than local machine
+	  'int' representation. This patch reworked the code to use
+	  timeval_t instead and perfrom regular timeval operations.
+	* vrrp: Fix a memory leak while dropping incoming IPSEC-AH
+	  authenticated advert. Digest was allocated in previous code
+	  without freeing it on HMAC-MD5 missmatch.
+	* vrrp: Extend IPSEC-AH auth to support unicast.
+	  If you plane to use IPSEC-AH auth in unicast mode (which THE best
+	  idea), then IP header TTL MUST be zeroed since it is mutable field
+	  on transit.
+	* vrrp: Update VRRP VMAC doc.
+	  Add vmac_xmit_base in configuration example and force rp_filter=0
+	  on macvlan interface.
+	* vrrp: make gratuitous ARP repeat count configurable.
+	  . garp_master_repeat : Gratuitous ARP count sent on the wire
+				 after MASTER state transition.
+	  . garp_master_refresh_repeat : Gratuitous ARP count sent on the
+					 wire when garp_refresh_timer fir
+	* vrrp: fix preempt and state BACKUP when prio 255.
+	  This makes it so that keepalived will respect various settings that
+	  should prevent it from assuming the MASTER role for a vrrp_instance
+	  unconditionally and immediately, even if the priority of the
+	  vrrp_instance in question is set to 255 (VRRP_PRIO_OWNER). These
+	  settings include:
+	  ---- conf ----
+	  state BACKUP
+	  preempt_delay <N>
+	  nopreempt
+	* vrrp: in backup state notify when vrrp is not up and move to FAULT
+	  state.
+	* ipvs: failed RS was flapping on config reload.
+	  The RS disabled by health-checker was turned on w/o health-checking
+	  by SIGHUP handler in the init_service_rs() subroutine.
+	  This did not happen with alpha mode set.
+	* libipvs: allow IPv4 RS in IPv6 VS and vice versa.
+	  This change syncronizes local copy of libipvs with the upstream
+	  (kernel/ipvsadm/ipvsadm.git) to the date. IPVS in Linux 3.18 will
+	  include the feature of mixing of tunneled RS families in single VS.
+	  The compatibility with older kernel versions is kept.
+	* libipvs: minor bugfix with retreiving dest af.
+	  This change needs to be sent to the ipvsadm upstream, too.
+	  This clarifies the previous commit, so there is no need to mention
+	  it in the changelog.
+	* vrrp: check if interface is known when using use_vmac.
+	  vrrp->ifp is NULL when use_vmac keyword is defined before the
+	  interface keyword. This would result in a segfault
+	* vrrp: simplify macvlan creation.
+	  Create the macvlan interface in one netlink command rather than
+	  three (creation of the macvlan in netlink_link_add_vmac function,
+	  set of the mac address in the netlink_link_setlladdr function, set
+	  macvlan mode in the netlink_link_setmode function).
+	  This simplification:
+	  1. avoids potential issues if the firt netlink command passes butcw
+	      not the next ones
+	  2. reduces number of netlink messages (light optimization)
+	* ipvs: bugfix quorum state was flapping when Q < H.
+	  When a service had quorum < hysteresis, the lower threshold of RS
+	  weights was calculated incorrecly. Unsigned arythmetics was used, so
+	  errors like this appeared in log: Keepalived_healthcheckers[2535]:
+	  Lost quorum 1-2=18446744073709551615 > 10 for VS
+	  The up -> down quorum state transition was happening every time when
+	  alive RS set was changed. This bug was in place since
+	  keepalived-1.2.9
+	* vrrp: add support to IPv6 mcast src address specification.
+	  For some reason (well... which one ?), previous code didnt support
+	  specification of multicast source address in IPv6 mode. If you are
+	  using 'native_ipv6' and want to specify IPv6 mcast source ip address
+	  then you can use 'mcast_src_ip' keyword with IPv6 address.
+	* vrrp: Add support to IPv6 src_address discrimination in master
+	  rx state.
+	  Previous code didnt support IPv6 address discrimination while in
+	  MASTER state receiving same prio advert. This patch extend previous
+	  code to support IP address comparison agnostic.
+	* vrrp: IPv6 mcast src_addr handling and VMAC fix.
+	  Properly bind socket for v6 use-case when mcasr_src_ip is in use or
+	  when VMAC is used. This patch fix VRRP VMAC in native_ipv6 mode,
+	  previous code just use the vmac interface link-local IP Address as
+	  src_ip leading to a corner case (to keep polite).
+	* vrrp: in IPv6 scope_id is mandatory to bind link-local address.
+	  In IPv6 use-case, source IP address is set binding sokect to
+	  socaddr_in6. Linux Kernel requires interface to bind link-local
+	  address.
+	* vrrp: fix nopreempt mode in master_rx.
+	  While receiving lower prio advert, preempt election according to
+	  nopreempt keyword. By default preempt is on as requested by RFC.
+	* exit on malloc failure.
+	* genhash: code cleanup.
+
 2014-05-13  Alexandre Cassen  <acassen@linux-vs.org>
 	* keepalived-1.2.13 released.
 	* vrrp : Use the standard unsigned int types. This fixes
@@ -473,7 +6679,7 @@
 	  of the digest (provided that extra care is taken that no two
 	  algorithms will ever alias in this regard).  Also the test
 	  script for genhash was extended to conditionally use SHA1.
-	* Jan Pokorný cleaned up genhash code. 
+	* Jan Pokorný cleaned up genhash code.
 	  Access to the hash-specific context was simplified as I've
 	  now checked some C guarantees regarding union/it's members
 	  initial address vs. aligning so now extra inlined accessor
@@ -633,7 +6839,7 @@
 	  disruption for VRRP.
 	* Copyright update
 	* some cosmetics.
-	
+
 2012-07-27  Alexandre Cassen  <acassen@linux-vs.org>
 	* keepalived-1.2.4 released.
 	* Please look at git repo for credits.
@@ -701,16 +6907,16 @@
 2011-01-09  Alexandre Cassen  <acassen@linux-vs.org>
 	* keepalived-1.2.2 released.
 	* IPv6 : extended autoconf script to support libnl detection.
-	         IPv6 IPVS kernel subsystem is reachable through
-	         generic netlink configuration interface.
+		 IPv6 IPVS kernel subsystem is reachable through
+		 generic netlink configuration interface.
 	* IPv6 : Enhanced libipvs-2.6 to support generic netlink
-	         configuration interface. If generic netlink is
-	         available with kernel then it will be the
-	         prefered path to configure IPVS.
+		 configuration interface. If generic netlink is
+		 available with kernel then it will be the
+		 prefered path to configure IPVS.
 	* IPv6 : Enhanced the whole checker API to use
-	         sockaddr_storage.
+		 sockaddr_storage.
 	* IPv6 : Enhanced the whole core framework to use
-	         sockaddr_storage.
+		 sockaddr_storage.
 	* IPv6 : Enhanced all checkers to use sockaddr_storage.
 	* fixed a long time pending issue in all checkers. If
 	  first connection attempt to remote peer was failing
@@ -870,7 +7076,7 @@
 	  address display.
 	* Vincent Bernat <bernat <at> luffy.cx> extended genhash to
 	  display an error when giving an incorrect IP address.
-	* Vincent Bernat <bernat <at> luffy.cx>: When parsing 
+	* Vincent Bernat <bernat <at> luffy.cx>: When parsing
 	  "blackhole" route, also parse IP mask.
 	* Vincent Bernat <bernat <at> luffy.cx>:
 	  On reload, destroy signal pipes before recreating them.
@@ -881,16 +7087,16 @@
 	  Handle non-existant default interface in VIP definition.
 	* Vincent Bernat <bernat <at> luffy.cx>:
 	  Remove alive real servers when quorum is lost.
-	* Vincent Bernat <bernat <at> luffy.cx>: 
+	* Vincent Bernat <bernat <at> luffy.cx>:
 	  Fix a segfault when a virtual_server is empty.
-	* Vincent Bernat <bernat <at> luffy.cx>: 
+	* Vincent Bernat <bernat <at> luffy.cx>:
 	  Add real servers to new member of a virtual server group
 	  on reload.
-	* Vincent Bernat <bernat <at> luffy.cx>: 
+	* Vincent Bernat <bernat <at> luffy.cx>:
 	  Keep previous effective VRRP priority on reload.
-	* Vincent Bernat <bernat <at> luffy.cx>: 
+	* Vincent Bernat <bernat <at> luffy.cx>:
 	  Fix VRRP script not running any more after reload.
-	* Vincent Bernat <bernat <at> luffy.cx>: 
+	* Vincent Bernat <bernat <at> luffy.cx>:
 	  On reload, keep status for all VRRP scripts.
 	* Removed IPVS Kernel 2.2 support
 
@@ -1025,7 +7231,7 @@
 	  stream. It appears some webserver cause healthchecker crash.
 	* Chris Marchesi, <chris.marchesi at canadawebhosting.com> provided
 	  a patch for better handling of SSL handshake errors.
-	* Shinji Tanaka, <stanaka at hatena.ne.jp> fixed parser "include" 
+	* Shinji Tanaka, <stanaka at hatena.ne.jp> fixed parser "include"
 	  directive to support declaration inside configuration directives,
 	  like including file inside vrrp_instance declaration.
 	* Andreas Kotes, <count at flatline.de> fixed HTTP healthchecker
@@ -1034,13 +7240,13 @@
 	* VRRP : Willy Tarreau, <w at 1wt.eu> fixed a missing notifications
 	  upon transition from fault to backup.
 	* VRRP : Add support to route metric in virtual_routes definition.
-	
+
 2007-09-13  Alexandre Cassen  <acassen@linux-vs.org>
 	* keepalived-1.1.14 released.
 	* Shinji Tanaka, <stanaka at hatena.ne.jp> extended parsing
 	  framework to support "include" directives. For more
 	  informations and documentation please refer to Shinji
-	  website : 
+	  website :
 	    http://misccs.dyndns.org/index.php?keepalived%20include%20patch
 	* Tobias Klausmann, <klausman at schwarzvogel.de> add error loggin
 	  while parsing configuration file.
@@ -1055,7 +7261,7 @@
 	* VRRP : Michael Smith, <msmith at cbnco.com> extended
 	  virtual_ipaddress setting to support Old-style Linux interface
 	  aliases like eth0:1.
-	* VRRP : Ward Wouts, <ward.wouts at gmail.com> add support to 
+	* VRRP : Ward Wouts, <ward.wouts at gmail.com> add support to
 	  vrrp_script logging.
 
 2006-10-11  Alexandre Cassen  <acassen@linux-vs.org>
@@ -1276,7 +7482,7 @@
 	* Ronald Wahl <rwa@peppercon.com>, moved the definition of variables
 	  to C files
 	* Ronald Wahl <rwa@peppercon.com> and I fixed scanning for header/body
-	  separator in HTTP protocol 
+	  separator in HTTP protocol
 	* Ronald Wahl <rwa@peppercon.com> replaced memcpy by memmove where source
 	  & destination may overlap
 	* Extended checker API to only register checkers when checker callback
@@ -1364,9 +7570,9 @@
 	  detection.
 	* To work-around the SMP forking bug, added support to two
 	  new daemon starting options :
-	  --vrrp               -P    Only run with VRRP subsystem.
-	  --check              -C    Only run with Health-checker
-	                             subsystem.
+	  --vrrp	       -P    Only run with VRRP subsystem.
+	  --check	       -C    Only run with Health-checker
+				     subsystem.
 	  Those options extend daemon design to support VRRP &
 	  heathchecking subsystem selection. You can now run
 	  two Keepalived daemon one invoqued with --vrrp and
@@ -1394,7 +7600,7 @@
 	* keepalived-1.1.3 released.
 	* Stephan von Krawczynski, <skraw@ithnet.com> extended ip
 	  address framework to support broadcast address selection.
-	* Extended the scheduling framework to support plain 'long' 
+	* Extended the scheduling framework to support plain 'long'
 	  timer. Visited the layer4 framework to support this new
 	  scheduling scheme. Reviewed the checkers and VRRP framework
 	  to support long timer.
@@ -1404,7 +7610,7 @@
 	  log level selection for main daemon. A new command line
 	  argument has been created :
 	  --log-facility  -S  0-7 Set syslog facility to
-	                      LOG_LOCAL[0-7]. (default=LOG_DAEMON)
+			      LOG_LOCAL[0-7]. (default=LOG_DAEMON)
 	* Extended the HTTP checker to support non blocking read
 	  while processing stream. NONBLOCK flags is set before
 	  read operation to catch EAGAIN error.
@@ -1479,14 +7685,14 @@
 	* keepalived-1.1.1 released.
 	* VRRP : Fixed an issue while reloading configuration. Fixed
 	  a dereferencing pointer.
-	* Fixed misc checker to perform server state according to 
+	* Fixed misc checker to perform server state according to
 	  checker result !!!
 
 2003-07-22  Alexandre Cassen  <acassen@linux-vs.org>
 	* keepalived-1.1.0 released.
 	* The release focus is : "High Performance"
-	* Name cleanup for the healthchecking directory. use check 
-	  instead of healthcheck to be in conformance with watchdog and 
+	* Name cleanup for the healthchecking directory. use check
+	  instead of healthcheck to be in conformance with watchdog and
 	  global software architecture.
 	* updated the SYNOPSIS file for documenting the table arg inside
 	  virtual/static_routes declaration. You can set routes refering
@@ -1499,7 +7705,7 @@
 	* VRRP : Added support to a global shared buffer for incoming
 	  advert handling. A new buffer is no longer allocated each time
 	  processing incoming advert, instead a shared room is used.
-	* VRRP : Added support to pre-allocated shared buffer for 
+	* VRRP : Added support to pre-allocated shared buffer for
 	  outgoing adverts. Each vrrp instance use a 'one time'
 	  allocated buffer instead of a 'all time' one.
 	* VRRP : Extended the socket pool design to support shared fd
@@ -1513,12 +7719,12 @@
 	  "static_ipaddress".
 	  look at doc/samples/keepalived.conf.static_ipaddress.
 	  IP addresses specified into this block will be added during
-	  daemon bootstrap and removed during daemon shutdown. 
-	  Differential conf parsing is enabled for this block, 
-	  removing/adding static_ipaddress can be done on the fly 
+	  daemon bootstrap and removed during daemon shutdown.
+	  Differential conf parsing is enabled for this block,
+	  removing/adding static_ipaddress can be done on the fly
 	  sending SIGHUP signal to daemon.
 	* VRRP : Extended track_interface to support multiple interface
-	  tracking. For those familiar with Nokia monitored circuit, 
+	  tracking. For those familiar with Nokia monitored circuit,
 	  this extention provide the same functionality.
 	  look at doc/samples/keepalived.conf.track_interface.
 	* VRRP : The VRRP instance lookup framework has been extended
@@ -1543,30 +7749,30 @@
 	  perf, differents VRID on all instance must be used. The
 	  design can be sumed by :
 
-          VRID hash table :
+	  VRID hash table :
 
-             +---+---+---+---+---+---+.........+-----+
-             | 1 | 2 | 3 | 4 | 5 | 6 |.........| 255 |
-             +---+---+---+---+---+---+.........+-----+
-                   |       |
-                 +---+   +---+
-                 |fd3|   |fd1|
-                 +---+   +---+
-                           |
-                         +---+
-                         |fd5|
-                         +---+ 
+	     +---+---+---+---+---+---+.........+-----+
+	     | 1 | 2 | 3 | 4 | 5 | 6 |.........| 255 |
+	     +---+---+---+---+---+---+.........+-----+
+		   |       |
+		 +---+   +---+
+		 |fd3|   |fd1|
+		 +---+   +---+
+			   |
+			 +---+
+			 |fd5|
+			 +---+
 
 	  This hash table is filled during configuration parsing and
 	  VRRP instances are not duplicated but dynamically pointed
 	  to optimize memory.
-	* VRRP : The VRRP synchronization group lookup has been 
+	* VRRP : The VRRP synchronization group lookup has been
 	  extended. During bootstrap a VRRP instance index is built upon
-	  sync_group instance name. This extension speed up 
-	  synchronization since while synchronizing it perfoms the 
-	  instance index instead of lookup by instance_name. The 
-	  previous synchornization code has been rewritten to use this 
-	  'list visiting' design for FAULT/BACKUP/MASTER states 
+	  sync_group instance name. This extension speed up
+	  synchronization since while synchronizing it perfoms the
+	  instance index instead of lookup by instance_name. The
+	  previous synchornization code has been rewritten to use this
+	  'list visiting' design for FAULT/BACKUP/MASTER states
 	  synchronization.
 	* VRRP : Optimized the vrrp_timer_vrid_timeout(...) to speed
 	  up vrid lookup over timeouted fd using a one pass lookup.
@@ -1617,9 +7823,9 @@
 	  selection via daemon command line. Created two new
 	  cmdline options :
 	       --wdog-vrrp  -R  Define VRRP watchdog polling
-	                        delay. (default=5s)
-               --wdog-check -H  Define checkers watchdog
-	                        polling delay. (default=5s)
+				delay. (default=5s)
+	       --wdog-check -H  Define checkers watchdog
+				polling delay. (default=5s)
 	* Extended SMTP code to support bigger buffer while
 	  processing remote mta messages.
 	* Erik Barker, <erikb@netnation.com> extended initscript
@@ -1745,7 +7951,7 @@
 	  Creative Internet Techniques, <www.httpd.net>
 	  Please visit sponsor homepage, open minded people here !
 	* Fixed some Makefile and autoconf code dependence issues.
-	* Move keepalived.conf.SYNOPSIS and samples into "doc" directory. 
+	* Move keepalived.conf.SYNOPSIS and samples into "doc" directory.
 	* Enhanced HTTP|SSL check to support large url. Get buffer request is
 	  now 2KBytes.
 	* Removed \n in healthchecker smtp_alert call. This cause some troubles
@@ -2180,7 +8386,7 @@
 	  VRRP packet lenght are limited to a 20 VIPs, if you want more VRRP VIPs
 	  add them to the "virtual_ipaddress_excluded" configuration block.
 	* VRRP : Added more logging facility when setting/removings VIPs & E-VIPs.
-	* VRRP : Created a new FSM state called become_master in charge of 
+	* VRRP : Created a new FSM state called become_master in charge of
 	  VIPs/E-VIPs/notifications handling. The goto_master state is now a state
 	  where the instance send an advert to force a new MASTER election setting
 	  the instance into a transition mode. If election success its finaly
@@ -2287,7 +8493,7 @@
 	  MII transceiver status register thread poller. Monitoring Basic Mode
 	  Status Register (BMSR) of the MII status words. Waiting for kernel
 	  NIC drivers hackers to support this functionnality through netlink
-          (=> Like a IFF_RUNNING update broadcast).
+	  (=> Like a IFF_RUNNING update broadcast).
 	* VRRP : Linked the state machine to the global interface structure.
 	  NIC failure/events are handled.
 	* VRRP : Review the whole state machine code to be more realistic. The
@@ -2322,7 +8528,7 @@
 	  the socket, multicast advert can be sent but not received ?
 	  really strange don t know why probably an IGMP resubmit ?.
 	  So multicast group is left during failover (media trouble,
-          IFF_DOWN or !IFF_RUNNING). In fallback, we register a new
+	  IFF_DOWN or !IFF_RUNNING). In fallback, we register a new
 	  membership and synchronize all the packet dispatcher fds.
 	* VRRP : Fixed a checksum trouble using password authentication.
 	* VRRP : Added support to the LVS sync daemon. This permit
@@ -2404,20 +8610,20 @@
 	* Rewrite the whole VRRP previous code.
 	* VRRP : Created a hierarchic scheduling framework.
 	  Handle VRRP instances multiplexing on the same I/O fd.
-	  VRRP I/O events are handled by our global scheduling 
+	  VRRP I/O events are handled by our global scheduling
 	  framework. Then the global sheduling framework call a VRRP
 	  I/O instance dispatcher to manage VRRP instances.
 	* VRRP : Created a temporary socket pool to handle register
-	         our VRRP thread instances.
+		 our VRRP thread instances.
 	  We create & allocate a socket pool here. The soft design
 	  can be sum up by the following sketch :
- 
+
 	         fd1  fd2    fd3  fd4          fdi  fdi+1
 	      -----\__/--------\__/---........---\__/---
 	         | ETH0 |    | ETH1 |          | ETHn |
 	         +------+    +------+          +------+
- 
- 	  Here we have n physical NIC. Each NIC own a maximum of 2 fds.
+
+	  Here we have n physical NIC. Each NIC own a maximum of 2 fds.
 	  (one for VRRP the other for IPSEC_AH). All our VRRP instances
 	  are multiplexed through this fds. So our design can handle 2*n
 	  multiplexing points.
@@ -2432,7 +8638,7 @@
 	  Handle VRRP states & transition states.
 	* VRRP : Created a VRRP synchronization instance circuit. This
 	  functionnality gave you the ability to monitor VRRP instance
-	  each other. This mean that if 2 VRRP instances are monitoring 
+	  each other. This mean that if 2 VRRP instances are monitoring
 	  themself and if one of this instance change state, the other
 	  follow the same state. ex.: With 2 VRRP instances (VI_1 & VI_2)
 	  if VI_1 become backup then VI_2 become backup too. (symetricly
@@ -2457,12 +8663,12 @@
 	  Thanks goes to Gianni D'Aprile for pointing it to me.
 
 2001-11-04  Alexandre Cassen  <acassen@linux-vs.org>
-        * keepalived-0.3.8 released.
-        * Added support to native IPTABLE LVS CODE
-          => using NAT on 2.4 kernel ipchains kernel support
-             has been removed.
-        * Added support to Direct Routing & Tunneling.
-        * Review the keepalived.init script to be much more generic.
+	* keepalived-0.3.8 released.
+	* Added support to native IPTABLE LVS CODE
+	  => using NAT on 2.4 kernel ipchains kernel support
+	     has been removed.
+	* Added support to Direct Routing & Tunneling.
+	* Review the keepalived.init script to be much more generic.
 
 2001-09-14  Alexandre Cassen  <acassen@linux-vs.org>
 	* keepalived-0.4.1 released.
@@ -2492,50 +8698,50 @@
 
 2001-07-15  Alexandre Cassen  <acassen@linux-vs.org>
 	* keepalived-0.3.5 released.
-        * Rewrite the whole signal handling, registering a terminating
-          thread on signal.
-        * Move logsystem to syslog using facility LOG_INFO & LOG_DEBUG.
-        * Added a daemonization function imported from zebra.
-        * Rewrite the pidfile handling, check if daemon is running, if not
-          remove eventual stalled pidfile and create new pidfile.
-        * Added a strong scheduling framework based on an I/O multiplexer
-          to handle asynchronous process. This code is imported from zebra
-          and have been enhanced for keepalived purposes.
-
-          Thread types are :
-          . timeouted read on fd.
-          . timeouted write on fd.
-          . timer.
-          . event.
-          . terminate event.
-
-          => The zebra framework have been enhanced to add support for timeouted
-             read/write fds.
-
-          => With this framework keepalived use a Boss/Worker thread model design,
-             fetching ready thread from a master threading queues.
-
-        * Rewrite the configuration file reader to add flexibility on extending.
-          The dynamic data structure has been rewritten to use apropriate types.
-          Right now parsing framework is ready for easy new checker structures
-          integration.
-        * Rewrite the smtp connector. The implementation take advantage of the
-          I/O multiplexer. All read/write operations from/to the remote smtp server
-          are done asynchronously. The implementation is rfc 821 compliant (multiple
-          receiver are handled by a multiple RCPT TO command as specified in rfc821.3.1).
-        * Rewrite the IPFW & IPVS wrappers.
-        * Added support for NAT mask on IP MASQ rules (keyword nat_mask in configuration
-          file). Added support for sorry server facility, so when all the server from a 
-          VS server pool are removed, a sorry server is automaticaly added to the VS pool 
-          (typically this is used when you have a spare server online).
-        * Rewrite the previous checkers. Checkers are now based on a hierarchic layer
-          stack framework. The protocol implemented for the moment is TCP. All layer 5
-          checkers are using layer4.c primitives with the same design :
-
-          . a checker connector thread (creating the socket) registering the connection
-            checker thread.
-          . a connection checker thread testing connection states (error, in_progress,
-            timeout, success). When connection success upper level thread are registered
-            to handle checks.
-        * Delay loop is now checkers specifics since we can use a multithreaded framework.
-        * Update the PDF documentation file.
+	* Rewrite the whole signal handling, registering a terminating
+	  thread on signal.
+	* Move logsystem to syslog using facility LOG_INFO & LOG_DEBUG.
+	* Added a daemonization function imported from zebra.
+	* Rewrite the pidfile handling, check if daemon is running, if not
+	  remove eventual stalled pidfile and create new pidfile.
+	* Added a strong scheduling framework based on an I/O multiplexer
+	  to handle asynchronous process. This code is imported from zebra
+	  and have been enhanced for keepalived purposes.
+
+	  Thread types are :
+	  . timeouted read on fd.
+	  . timeouted write on fd.
+	  . timer.
+	  . event.
+	  . terminate event.
+
+	  => The zebra framework have been enhanced to add support for timeouted
+	     read/write fds.
+
+	  => With this framework keepalived use a Boss/Worker thread model design,
+	     fetching ready thread from a master threading queues.
+
+	* Rewrite the configuration file reader to add flexibility on extending.
+	  The dynamic data structure has been rewritten to use apropriate types.
+	  Right now parsing framework is ready for easy new checker structures
+	  integration.
+	* Rewrite the smtp connector. The implementation take advantage of the
+	  I/O multiplexer. All read/write operations from/to the remote smtp server
+	  are done asynchronously. The implementation is rfc 821 compliant (multiple
+	  receiver are handled by a multiple RCPT TO command as specified in rfc821.3.1).
+	* Rewrite the IPFW & IPVS wrappers.
+	* Added support for NAT mask on IP MASQ rules (keyword nat_mask in configuration
+	  file). Added support for sorry server facility, so when all the server from a
+	  VS server pool are removed, a sorry server is automaticaly added to the VS pool
+	  (typically this is used when you have a spare server online).
+	* Rewrite the previous checkers. Checkers are now based on a hierarchic layer
+	  stack framework. The protocol implemented for the moment is TCP. All layer 5
+	  checkers are using layer4.c primitives with the same design :
+
+	  . a checker connector thread (creating the socket) registering the connection
+	    checker thread.
+	  . a connection checker thread testing connection states (error, in_progress,
+	    timeout, success). When connection success upper level thread are registered
+	    to handle checks.
+	* Delay loop is now checkers specifics since we can use a multithreaded framework.
+	* Update the PDF documentation file.
diff --git a/tools/keepalived/Dockerfile b/tools/keepalived/Dockerfile
new file mode 100644
index 000000000..fde4be1f2
--- /dev/null
+++ b/tools/keepalived/Dockerfile
@@ -0,0 +1,54 @@
+FROM alpine:3.5
+MAINTAINER Bertrand Gouny <bertrand.gouny@osixia.net>
+
+# add keepalived sources to /tmp/keepalived-sources
+ADD . /tmp/keepalived-sources
+
+# Add keepalived default script user to make sure their IDs get assigned consistently,
+# regardless of whatever dependencies get added
+RUN addgroup -S keepalived_script && adduser -D -S -G keepalived_script keepalived_script
+
+# 1. install required libraries and tools
+# 2. compile and install keepalived
+# 3. remove keepalived sources and unnecessary libraries and tools
+RUN apk --no-cache add \
+       gcc \
+       ipset \
+       ipset-dev \
+       iptables \
+       iptables-dev \
+       libnfnetlink \
+       libnfnetlink-dev \
+       libnl3 \
+       libnl3-dev \
+       make \
+       musl-dev \
+       openssl \
+       openssl-dev \
+       autoconf \
+
+    && cd /tmp/keepalived-sources \
+    && ./configure --disable-dynamic-linking \
+    && make && make install \
+    && cd - \
+
+    && rm -rf /tmp/keepalived-sources \
+    && apk --no-cache del \
+	gcc \
+	ipset-dev \
+	iptables-dev \
+	libnfnetlink-dev \
+	libnl3-dev \
+	make \
+	musl-dev \
+	openssl-dev \
+	autoconf
+
+ADD docker/keepalived.conf /usr/local/etc/keepalived/keepalived.conf
+
+# set keepalived as image entrypoint with --dont-fork and --log-console (to make it docker friendly)
+# define /usr/local/etc/keepalived/keepalived.conf as the configuration file to use
+ENTRYPOINT ["/usr/local/sbin/keepalived","--dont-fork","--log-console", "-f","/usr/local/etc/keepalived/keepalived.conf"]
+
+# example command to customise keepalived daemon:
+# CMD ["--log-detail","--dump-conf"]
diff --git a/tools/keepalived/INSTALL b/tools/keepalived/INSTALL
index 5b2d25ecb..e140ed371 100644
--- a/tools/keepalived/INSTALL
+++ b/tools/keepalived/INSTALL
@@ -1,56 +1,251 @@
-Kernel needing
+Kernel needs
 ==============
 
   Compile a kernel with the following options :
 
   Kernel/User netlink socket
-  Network firewalls (for Kernel 2.2)
   LinuxVirtualServer
 
-  Keepalived support all LVS code : including IPVS code for kernel 2.2
-  and kernel 2.4
+  Keepalived supports all LVS code.
 
-Libraries dependency
+Library dependencies
 ====================
 
   In order to compile Keepalived needs the following libraries :
 
   * OpenSSL, <www.openssl.org>
-  * popt
+
+Linux flavours
+==============
+
+RedHat based systems (RedHat Enterprise/CentOS/Fedora)
+------------------------------------------------------
+The following build packages are needed:
+	make
+	autoconf automake (to build from git source tree rather than tarball)
+The following libraries need to be installed:
+	openssl-devel libnl3-devel ipset-devel iptables-devel
+For magic file identification support:
+	file-devel
+For SNMP support:
+	net-snmp-devel
+For DBUS support:
+	glib2-devel
+For JSON support:
+	json-c-devel
+For PCRE support
+	pcre2-devel
+For nftables support
+	libnftnl-devel libmnl-devel
+
+For building the documentation, the following packages need to be installed:
+	Fedora: python-sphinx (will pull in: python2-sphinx_rtd_theme)
+	CentOS-and-friends: python-sphinx epel-release python-sphinx_rtd_theme
+   For latex or pdf files, the following are also needed:
+	Fedora: latexmk python-sphinx-latex
+	CentOS-and-friends: latexmk texlive texlive-titlesec texlive-framed texlive-threeparttable texlive-wrapfig texlive-multirow
+
+Debian/Ubuntu
+-------------
+For building packages:
+	build-essential pkg-config, and to build from git repo automake autoconf
+The following libraries need to be installed:
+	iptables-dev libipset-dev libnl-3-dev libnl-genl-3-dev libssl-dev
+For magic file identification support:
+	libmagic-dev
+For SNMP support:
+	libsnmp-dev
+For DBUS support:
+	libglib2.0-dev
+For JSON support:
+	libjson-c-dev
+For PCRE support:
+	libpcre2-dev
+For nftables support
+	libnftnl-dev libmnl-dev
+
+For building the documentation, the following packages need to be installed:
+	python-sphinx python-sphinx-rtd-theme
+   For latex or pdf files, the following are also needed:
+	texlive-latex-base texlive-generic-extra texlive-latex-recommended texlive-fonts-recommended texlive-latex-extra
+
+Alpine Linux
+------------
+The following libraries need to be installed:
+	iptables-dev ipset-dev libnl3-dev musl-dev libnftnl-dev and openssl-dev or libressl-dev
+For magic file identification support:
+	file-dev
+For SNMP support:
+	net-snmp-dev (requires libressl-dev and not openssl-dev)
+For PCRE support
+	pcre2-dev
+
+For building the documentation, the following packages need to be installed:
+	py-sphinx py3-sphinx_rtd_theme
+   For latex or pdf files, you'll need texlive or similar, which is not yet
+   available as a distro package.
+
+
+Archlinux
+---------
+Run the following to install the required libraries:
+	pacman -S ipset libnl1
+For magic file identification support:
+	TDB
+For SNMP support:
+	pacman -S net-snmp
+for PCRE support:
+	pcre-2 (may be installed by default)
+
+For building the documentation, the following packages need to be installed:
+	python-sphinx python-sphinx_rtd_theme
+   For latex or pdf files, the following are also needed:
+	texlive-core texlive-bin texlive-latexextra
+
+Kernel configuration requirements
+---------------------------------
+The following list is probably incomplete, and will be updated as other
+options become known.
+
+BPF
+EPOLL
+SIGNALFD
+TIMERFD
+SYSCTL
+PROC_FS
+INET
+IP_MULTICAST
+IPV6
+IP_VS (unless --disable-lvs is specified)
+  IP_VS suboptions to match the real_server/virtual_server configuration
+NETFILTER_XTABLES - if strict_mode or no_accept.
+  NETFILTER_XT options and IP_SET
+NF_TABLES and associated components - to use nftables for strict_mode or no_accept
+IP_ADVANCED_ROUTER and various associated options if static/dynamic routes specified
+FIB_RULES if static or dynamic rules are specified
+
+Installing from a git repo
+==========================
+To install from a git repo, execute:
+  1. Ensure you have autoconf and automake installed
+  2. git clone http://github.com/acassen/keepalived
+  3. cd keepalived
+  4. ./build_setup	# generate the autoconf and automake environment
+  5. Follow the instructions below for Installation, omitting the first two steps.
 
 Installation
 ============
 
-  1. uncompress the tarball
+  1. tar -xf TARFILE
   2. cd into the directory
   3. './configure'
   4. 'make'
   5. 'make install'. This will install keepalived on your system,
      binaries and configuration file :
      * keepalived : The keepalived daemon program.
-     * genhash : The MD5 url digest generator. You need it to 
+     * genhash : The MD5 url digest generator. You need it to
                  configure HTTP GET check and SSL GET check in
                  order to compute MD5SUM digest etalon.
      * /etc/keepalived/keepalived.conf
-  6. link keepalived.init into your runlevel directory. On redhat systems :
+  6. link keepalived.init into your runlevel directory. On Red Hat systems :
      ln -s /etc/rc.d/init.d/keepalived.init /etc/rc.d/rc3.d/S99keepalived
 
-  By default configure script use /usr/local as base directory. You can change
-  this value to your own by passing --prefix value to configure script
+  By default the configure script uses /usr/local as base directory. You can
+  change this value to your own by passing it the --prefix value.
 
   eg: './configure --prefix=/usr/'
 
+Building RPM files
+==================
+
+ If building from tarball:
+  1a. tar -xf TARFILE
+  1b. cd into the directory
+
+ If building from git clone:
+  1. ./build_setup 
+
+ For tarball and git
+  2. ./configure
+  3. make rpm
+
+ The .rpm files will be created in directory `rpm --eval "%{_rpmdir}"`/ARCH
+
+Modifying source code
+=====================
+
+If you modify the source code, especially configure.ac or any Makefile.am
+file, you will need to regenerate the build files. Keepalived uses automake
+and so you will need to have automake and autoconf installed.
+
 Configuration
 =============
 
-  Just take a look to the /etc/keepalived/keepalived.conf file installed.
-  It will give you all the informations needed. If you want more informations
-  considering keepalived, please refer to the keepalived homepage into the
-  documentation section.
+  Just take a look at the /etc/keepalived/keepalived.conf file installed.
+  It will give you all the information needed. Alternativley, run
+  'man keepalived.conf' or look at doc/keepalived.conf.SYNOPSIS.
+  If you want more information about keepalived, please refer to the
+  keepalived homepage into the documentation section.
 
   http://www.keepalived.org
 
 
+Creating a docker container
+===========================
+There is a very useful github project maintained by osixia for building a
+docker container with keepalived.
+
+To use, run the following:
+git clone https://github.com/osixia/docker-keepalived.git
+cd docker-keepalived
+make build
+docker run --name keepalived --cap-add=NET_ADMIN --net=host \
+  --env KEEPALIVED_INTERFACE=eth0 -d osixia/keepalived:1.3.5 \
+	# or whatever version of keepalived you have
+
+To update the keepalived source code, put a new tarball in the image
+directory (the Dockerfile may need updating with a new version).
+
+Useful docker commands are:
+docker logs keepalvied 2>&1 | lessa	# view system logs of container
+docker exec it keepalived bash		# execute shell in container
+docker rm -f keepalived			# Remove the container
+
+keepalived is unable to load the ip_tables, ip6_tables, xt_set and ip_vs
+modules from within the container, so ensure they are already loaded in
+the host system.
+
+To generate a core file in the root filesystem of the container,
+/proc/sys/kernel/core_pattern needs to be updated in the host system,
+and not from the container (or in other words the -M option to keepalived
+does not work within a container. Installing gdb in the container (edit
+the image/Dockerfile to add it before make build) may be helpful if you
+need to examine core files in the container.
+
+
+Running in an AWS container
+===========================
+The VRRP protocol is not enabled in AWS security groups. If you are using AWS,
+create a rule in the AWS security group. The rule should be "Custom Protocol"
+and value should be "112" (the VRRP protocol number). All ports should be opened.
+
+
+Running with SElinux
+====================
+If the system running keepalived has SElinux enabled in enforcing mode, keepalived
+may have difficulty running scripts, accessing configuration files, etc, especially
+if keepalived is being started by systemd.
+
+By default, scripts should be located in /usr/libexec/keepalived, or alternatively,
+to set the necessary security context for a script, execute:
+chcon -t keepalived_unconfined_script_exec_t PATH_TO_SCRIPT
+
+See
+   https://www.mankier.com/8/keepalived_selinux and
+   https://www.mankier.com/8/keepalived_unconfined_script_selinux
+for further details of SElinux and keepalived.
+
+
 Have fun with it !
 
 Alexandre, <acassen@linux-vs.org>
diff --git a/tools/keepalived/Makefile.am b/tools/keepalived/Makefile.am
new file mode 100644
index 000000000..2b44bb356
--- /dev/null
+++ b/tools/keepalived/Makefile.am
@@ -0,0 +1,80 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+export			DEBUG_CFLAGS
+export			DEBUG_CPPFLAGS
+export			DEBUG_LDFLAGS
+
+edit = echo "  EDIT     $@"; \
+	 sed -e "/^\[\!\[/d"
+
+SUBDIRS			= lib keepalived doc
+
+if BUILD_GENHASH
+  SUBDIRS		+= genhash
+endif
+
+SUBDIRS			+= bin_install
+
+EXTRA_DIST		= AUTHOR CONTRIBUTORS snap README.md build_setup
+
+doc_DATA		= README
+
+MOSTLYCLEANFILES	= README
+
+MAINTAINERCLEANFILES	= @MAINTAINERCLEANFILES@
+
+README:	$(srcdir)/README.md
+	@$(edit) '$(srcdir)/$@.md' >$@
+
+distclean-local:
+	@rm -f aclocal.m4 ar-lib compile depcomp install-sh missing keepalived-$(VERSION).tar.gz config.log config.status
+	@rm -rf autom4te.cache
+
+dist-hook:
+	@rm -f $(distdir)/README
+
+.PHONY: docker
+docker:
+	docker build -t keepalived .
+
+# clean all files that are generated by automake/autoconf etc
+autoclean:
+	@$(MAKE) distclean
+	@rm -f configure `find . -name Makefile.in` lib/config.h.in lib/git-commit.h
+
+git-clean:
+	@$(MAKE) autoclean
+
+clean-local: clean-local-snap
+
+# clean files that are generated by snapcraft
+.PHONY:	clean-local-snap
+clean-local-snap:
+	-rm -rf parts/ prime/ stage/ keepalived_*.snap
+
+# Added targets to maintain compatibility with keepalived releases 1.2.22 and earlier
+.PHONY: tarball rpm debug profile mrproper
+
+tarball: dist
+
+@RPM_TRUE@rpm:
+@RPM_TRUE@			@$(MAKE) dist
+@RPM_TRUE@			@cp -p keepalived-$(VERSION).tar.gz `rpm --eval "%{_sourcedir}"`
+@RPM_TRUE@@RPM_BIP_TRUE@	rpmbuild -ba --build-in-place keepalived.spec
+@RPM_TRUE@@RPM_BIP_FALSE@	rpmbuild -ba keepalived.spec
+
+debug:
+	@$(MAKE) DEBUG_LDFLAGS=-ggdb
+
+profile:
+	@$(MAKE) DEBUG_CFLAGS=-pg
+
+mrproper:
+	@echo Please use `make distclean`
+
+AM_DISTCHECK_CONFIGURE_FLAGS = \
+        --with-systemdsystemunitdir=$$dc_install_base/$(systemdsystemunitdir)
diff --git a/tools/keepalived/Makefile.in b/tools/keepalived/Makefile.in
index 749bf9141..1240c6292 100644
--- a/tools/keepalived/Makefile.in
+++ b/tools/keepalived/Makefile.in
@@ -1,62 +1,887 @@
-# Makefile
+# Makefile.in generated by automake 1.13.4 from Makefile.am.
+# @configure_input@
+
+# Copyright (C) 1994-2013 Free Software Foundation, Inc.
+
+# This Makefile.in is free software; the Free Software Foundation
+# gives unlimited permission to copy and/or distribute it,
+# with or without modifications, as long as this notice is preserved.
+
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
+# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
+# PARTICULAR PURPOSE.
+
+@SET_MAKE@
+
+# Makefile.am
 #
 # Keepalived OpenSource project.
 #
-# Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+VPATH = @srcdir@
+am__is_gnu_make = test -n '$(MAKEFILE_LIST)' && test -n '$(MAKELEVEL)'
+am__make_running_with_option = \
+  case $${target_option-} in \
+      ?) ;; \
+      *) echo "am__make_running_with_option: internal error: invalid" \
+              "target option '$${target_option-}' specified" >&2; \
+         exit 1;; \
+  esac; \
+  has_opt=no; \
+  sane_makeflags=$$MAKEFLAGS; \
+  if $(am__is_gnu_make); then \
+    sane_makeflags=$$MFLAGS; \
+  else \
+    case $$MAKEFLAGS in \
+      *\\[\ \	]*) \
+        bs=\\; \
+        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
+          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
+    esac; \
+  fi; \
+  skip_next=no; \
+  strip_trailopt () \
+  { \
+    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
+  }; \
+  for flg in $$sane_makeflags; do \
+    test $$skip_next = yes && { skip_next=no; continue; }; \
+    case $$flg in \
+      *=*|--*) continue;; \
+        -*I) strip_trailopt 'I'; skip_next=yes;; \
+      -*I?*) strip_trailopt 'I';; \
+        -*O) strip_trailopt 'O'; skip_next=yes;; \
+      -*O?*) strip_trailopt 'O';; \
+        -*l) strip_trailopt 'l'; skip_next=yes;; \
+      -*l?*) strip_trailopt 'l';; \
+      -[dEDm]) skip_next=yes;; \
+      -[JT]) skip_next=yes;; \
+    esac; \
+    case $$flg in \
+      *$$target_option*) has_opt=yes; break;; \
+    esac; \
+  done; \
+  test $$has_opt = yes
+am__make_dryrun = (target_option=n; $(am__make_running_with_option))
+am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
+pkgdatadir = $(datadir)/@PACKAGE@
+pkgincludedir = $(includedir)/@PACKAGE@
+pkglibdir = $(libdir)/@PACKAGE@
+pkglibexecdir = $(libexecdir)/@PACKAGE@
+am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
+install_sh_DATA = $(install_sh) -c -m 644
+install_sh_PROGRAM = $(install_sh) -c
+install_sh_SCRIPT = $(install_sh) -c
+INSTALL_HEADER = $(INSTALL_DATA)
+transform = $(program_transform_name)
+NORMAL_INSTALL = :
+PRE_INSTALL = :
+POST_INSTALL = :
+NORMAL_UNINSTALL = :
+PRE_UNINSTALL = :
+POST_UNINSTALL = :
+@BUILD_GENHASH_TRUE@am__append_1 = genhash
+subdir = .
+DIST_COMMON = $(srcdir)/Makefile.in $(srcdir)/Makefile.am \
+	$(top_srcdir)/configure $(am__configure_deps) \
+	$(srcdir)/keepalived.spec.in COPYING ChangeLog INSTALL README \
+	TODO ar-lib depcomp install-sh missing
+ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
+am__aclocal_m4_deps = $(top_srcdir)/configure.ac
+am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
+	$(ACLOCAL_M4)
+am__CONFIG_DISTCLEAN_FILES = config.status config.cache config.log \
+ configure.lineno config.status.lineno
+mkinstalldirs = $(install_sh) -d
+CONFIG_HEADER = $(top_builddir)/lib/config.h \
+	$(top_builddir)/lib/config_warnings.h
+CONFIG_CLEAN_FILES = keepalived.spec
+CONFIG_CLEAN_VPATH_FILES =
+AM_V_P = $(am__v_P_@AM_V@)
+am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
+am__v_P_0 = false
+am__v_P_1 = :
+AM_V_GEN = $(am__v_GEN_@AM_V@)
+am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
+am__v_GEN_0 = @echo "  GEN     " $@;
+am__v_GEN_1 = 
+AM_V_at = $(am__v_at_@AM_V@)
+am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
+am__v_at_0 = @
+am__v_at_1 = 
+SOURCES =
+DIST_SOURCES =
+RECURSIVE_TARGETS = all-recursive check-recursive cscopelist-recursive \
+	ctags-recursive dvi-recursive html-recursive info-recursive \
+	install-data-recursive install-dvi-recursive \
+	install-exec-recursive install-html-recursive \
+	install-info-recursive install-pdf-recursive \
+	install-ps-recursive install-recursive installcheck-recursive \
+	installdirs-recursive pdf-recursive ps-recursive \
+	tags-recursive uninstall-recursive
+am__can_run_installinfo = \
+  case $$AM_UPDATE_INFO_DIR in \
+    n|no|NO) false;; \
+    *) (install-info --version) >/dev/null 2>&1;; \
+  esac
+am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
+am__vpath_adj = case $$p in \
+    $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
+    *) f=$$p;; \
+  esac;
+am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
+am__install_max = 40
+am__nobase_strip_setup = \
+  srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
+am__nobase_strip = \
+  for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
+am__nobase_list = $(am__nobase_strip_setup); \
+  for p in $$list; do echo "$$p $$p"; done | \
+  sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
+  $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
+    if (++n[$$2] == $(am__install_max)) \
+      { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
+    END { for (dir in files) print dir, files[dir] }'
+am__base_list = \
+  sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
+  sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
+am__uninstall_files_from_dir = { \
+  test -z "$$files" \
+    || { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
+    || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
+         $(am__cd) "$$dir" && rm -f $$files; }; \
+  }
+am__installdirs = "$(DESTDIR)$(docdir)"
+DATA = $(doc_DATA)
+RECURSIVE_CLEAN_TARGETS = mostlyclean-recursive clean-recursive	\
+  distclean-recursive maintainer-clean-recursive
+am__recursive_targets = \
+  $(RECURSIVE_TARGETS) \
+  $(RECURSIVE_CLEAN_TARGETS) \
+  $(am__extra_recursive_targets)
+AM_RECURSIVE_TARGETS = $(am__recursive_targets:-recursive=) TAGS CTAGS \
+	cscope distdir dist dist-all distcheck
+am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
+# Read a list of newline-separated strings from the standard input,
+# and print each of them once, without duplicates.  Input order is
+# *not* preserved.
+am__uniquify_input = $(AWK) '\
+  BEGIN { nonempty = 0; } \
+  { items[$$0] = 1; nonempty = 1; } \
+  END { if (nonempty) { for (i in items) print i; }; } \
+'
+# Make sure the list of sources is unique.  This is necessary because,
+# e.g., the same source file might be shared among _SOURCES variables
+# for different programs/libraries.
+am__define_uniq_tagged_files = \
+  list='$(am__tagged_files)'; \
+  unique=`for i in $$list; do \
+    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
+  done | $(am__uniquify_input)`
+ETAGS = etags
+CTAGS = ctags
+CSCOPE = cscope
+DIST_SUBDIRS = lib keepalived doc genhash bin_install
+DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
+distdir = $(PACKAGE)-$(VERSION)
+top_distdir = $(distdir)
+am__remove_distdir = \
+  if test -d "$(distdir)"; then \
+    find "$(distdir)" -type d ! -perm -200 -exec chmod u+w {} ';' \
+      && rm -rf "$(distdir)" \
+      || { sleep 5 && rm -rf "$(distdir)"; }; \
+  else :; fi
+am__post_remove_distdir = $(am__remove_distdir)
+am__relativize = \
+  dir0=`pwd`; \
+  sed_first='s,^\([^/]*\)/.*$$,\1,'; \
+  sed_rest='s,^[^/]*/*,,'; \
+  sed_last='s,^.*/\([^/]*\)$$,\1,'; \
+  sed_butlast='s,/*[^/]*$$,,'; \
+  while test -n "$$dir1"; do \
+    first=`echo "$$dir1" | sed -e "$$sed_first"`; \
+    if test "$$first" != "."; then \
+      if test "$$first" = ".."; then \
+        dir2=`echo "$$dir0" | sed -e "$$sed_last"`/"$$dir2"; \
+        dir0=`echo "$$dir0" | sed -e "$$sed_butlast"`; \
+      else \
+        first2=`echo "$$dir2" | sed -e "$$sed_first"`; \
+        if test "$$first2" = "$$first"; then \
+          dir2=`echo "$$dir2" | sed -e "$$sed_rest"`; \
+        else \
+          dir2="../$$dir2"; \
+        fi; \
+        dir0="$$dir0"/"$$first"; \
+      fi; \
+    fi; \
+    dir1=`echo "$$dir1" | sed -e "$$sed_rest"`; \
+  done; \
+  reldir="$$dir2"
+DIST_ARCHIVES = $(distdir).tar.gz
+GZIP_ENV = --best
+DIST_TARGETS = dist-gzip
+distuninstallcheck_listfiles = find . -type f -print
+am__distuninstallcheck_listfiles = $(distuninstallcheck_listfiles) \
+  | sed 's|^\./|$(prefix)/|' | grep -v '$(infodir)/dir$$'
+distcleancheck_listfiles = find . -type f -print
+ACLOCAL = @ACLOCAL@
+AMTAR = @AMTAR@
+AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
+AR = @AR@
+ARFLAGS = @ARFLAGS@
+AUTOCONF = @AUTOCONF@
+AUTOHEADER = @AUTOHEADER@
+AUTOMAKE = @AUTOMAKE@
+AWK = @AWK@
+CC = @CC@
+CCDEPMODE = @CCDEPMODE@
+CFLAGS = @CFLAGS@
+CPP = @CPP@
+CPPFLAGS = @CPPFLAGS@
+CYGPATH_W = @CYGPATH_W@
+DEFAULT_CONFIG_FILE = @DEFAULT_CONFIG_FILE@
+DEFS = @DEFS@
+DEPDIR = @DEPDIR@
+ECHO_C = @ECHO_C@
+ECHO_N = @ECHO_N@
+ECHO_T = @ECHO_T@
+EGREP = @EGREP@
+EXEEXT = @EXEEXT@
+GENHASH_LIBS = @GENHASH_LIBS@
+GREP = @GREP@
+HAVE_RPM = @HAVE_RPM@
+HAVE_RPMBUILD = @HAVE_RPMBUILD@
+HAVE_SPHINX_BUILD = @HAVE_SPHINX_BUILD@
+INSTALL = @INSTALL@
+INSTALL_DATA = @INSTALL_DATA@
+INSTALL_PROGRAM = @INSTALL_PROGRAM@
+INSTALL_SCRIPT = @INSTALL_SCRIPT@
+INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
+KA_CFLAGS = @KA_CFLAGS@
+KA_CPPFLAGS = @KA_CPPFLAGS@
+KA_LDFLAGS = @KA_LDFLAGS@
+KA_LIBS = @KA_LIBS@
+LDD = @LDD@
+LDFLAGS = @LDFLAGS@
+LIBOBJS = @LIBOBJS@
+LIBS = @LIBS@
+LN_S = @LN_S@
+LTLIBOBJS = @LTLIBOBJS@
+MAINTAINERCLEANFILES = @MAINTAINERCLEANFILES@
+MAKEINFO = @MAKEINFO@
+MKDIR_P = @MKDIR_P@
+NETSNMP_CONFIG = @NETSNMP_CONFIG@
+OBJEXT = @OBJEXT@
+PACKAGE = @PACKAGE@
+PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
+PACKAGE_NAME = @PACKAGE_NAME@
+PACKAGE_STRING = @PACKAGE_STRING@
+PACKAGE_TARNAME = @PACKAGE_TARNAME@
+PACKAGE_URL = @PACKAGE_URL@
+PACKAGE_VERSION = @PACKAGE_VERSION@
+PATH_SEPARATOR = @PATH_SEPARATOR@
+PID_DIR = @PID_DIR@
+PKG_CONFIG = @PKG_CONFIG@
+PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
+PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
+RANLIB = @RANLIB@
+SED = @SED@
+SET_MAKE = @SET_MAKE@
+SHELL = @SHELL@
+SNMP_SERVICE = @SNMP_SERVICE@
+SPHINXBUILDNAME = @SPHINXBUILDNAME@
+STRIP = @STRIP@
+VERSION = @VERSION@
+abs_builddir = @abs_builddir@
+abs_srcdir = @abs_srcdir@
+abs_top_builddir = @abs_top_builddir@
+abs_top_srcdir = @abs_top_srcdir@
+ac_ct_AR = @ac_ct_AR@
+ac_ct_CC = @ac_ct_CC@
+am__include = @am__include@
+am__leading_dot = @am__leading_dot@
+am__quote = @am__quote@
+am__tar = @am__tar@
+am__untar = @am__untar@
+bindir = @bindir@
+build_alias = @build_alias@
+builddir = @builddir@
+datadir = @datadir@
+datarootdir = @datarootdir@
+docdir = @docdir@
+dvidir = @dvidir@
+exec_prefix = @exec_prefix@
+host_alias = @host_alias@
+htmldir = @htmldir@
+includedir = @includedir@
+infodir = @infodir@
+install_sh = @install_sh@
+libdir = @libdir@
+libexecdir = @libexecdir@
+localedir = @localedir@
+localstatedir = @localstatedir@
+mandir = @mandir@
+mkdir_p = @mkdir_p@
+oldincludedir = @oldincludedir@
+pdfdir = @pdfdir@
+prefix = @prefix@
+program_transform_name = @program_transform_name@
+psdir = @psdir@
+sbindir = @sbindir@
+sharedstatedir = @sharedstatedir@
+srcdir = @srcdir@
+sysconfdir = @sysconfdir@
+systemdsystemunitdir = @systemdsystemunitdir@
+target_alias = @target_alias@
+top_build_prefix = @top_build_prefix@
+top_builddir = @top_builddir@
+top_srcdir = @top_srcdir@
+edit = echo "  EDIT     $@"; \
+	 sed -e "/^\[\!\[/d"
+
+SUBDIRS = lib keepalived doc $(am__append_1) bin_install
+EXTRA_DIST = AUTHOR CONTRIBUTORS snap README.md build_setup
+doc_DATA = README
+MOSTLYCLEANFILES = README
+AM_DISTCHECK_CONFIGURE_FLAGS = \
+        --with-systemdsystemunitdir=$$dc_install_base/$(systemdsystemunitdir)
+
+all: all-recursive
+
+.SUFFIXES:
+am--refresh: Makefile
+	@:
+$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
+	@for dep in $?; do \
+	  case '$(am__configure_deps)' in \
+	    *$$dep*) \
+	      echo ' cd $(srcdir) && $(AUTOMAKE) --foreign'; \
+	      $(am__cd) $(srcdir) && $(AUTOMAKE) --foreign \
+		&& exit 0; \
+	      exit 1;; \
+	  esac; \
+	done; \
+	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign Makefile'; \
+	$(am__cd) $(top_srcdir) && \
+	  $(AUTOMAKE) --foreign Makefile
+.PRECIOUS: Makefile
+Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
+	@case '$?' in \
+	  *config.status*) \
+	    echo ' $(SHELL) ./config.status'; \
+	    $(SHELL) ./config.status;; \
+	  *) \
+	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $@ $(am__depfiles_maybe)'; \
+	    cd $(top_builddir) && $(SHELL) ./config.status $@ $(am__depfiles_maybe);; \
+	esac;
+
+$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
+	$(SHELL) ./config.status --recheck
+
+$(top_srcdir)/configure:  $(am__configure_deps)
+	$(am__cd) $(srcdir) && $(AUTOCONF)
+$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
+	$(am__cd) $(srcdir) && $(ACLOCAL) $(ACLOCAL_AMFLAGS)
+$(am__aclocal_m4_deps):
+keepalived.spec: $(top_builddir)/config.status $(srcdir)/keepalived.spec.in
+	cd $(top_builddir) && $(SHELL) ./config.status $@
+install-docDATA: $(doc_DATA)
+	@$(NORMAL_INSTALL)
+	@list='$(doc_DATA)'; test -n "$(docdir)" || list=; \
+	if test -n "$$list"; then \
+	  echo " $(MKDIR_P) '$(DESTDIR)$(docdir)'"; \
+	  $(MKDIR_P) "$(DESTDIR)$(docdir)" || exit 1; \
+	fi; \
+	for p in $$list; do \
+	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
+	  echo "$$d$$p"; \
+	done | $(am__base_list) | \
+	while read files; do \
+	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(docdir)'"; \
+	  $(INSTALL_DATA) $$files "$(DESTDIR)$(docdir)" || exit $$?; \
+	done
+
+uninstall-docDATA:
+	@$(NORMAL_UNINSTALL)
+	@list='$(doc_DATA)'; test -n "$(docdir)" || list=; \
+	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
+	dir='$(DESTDIR)$(docdir)'; $(am__uninstall_files_from_dir)
+
+# This directory's subdirectories are mostly independent; you can cd
+# into them and run 'make' without going through this Makefile.
+# To change the values of 'make' variables: instead of editing Makefiles,
+# (1) if the variable is set in 'config.status', edit 'config.status'
+#     (which will cause the Makefiles to be regenerated when you run 'make');
+# (2) otherwise, pass the desired values on the 'make' command line.
+$(am__recursive_targets):
+	@fail=; \
+	if $(am__make_keepgoing); then \
+	  failcom='fail=yes'; \
+	else \
+	  failcom='exit 1'; \
+	fi; \
+	dot_seen=no; \
+	target=`echo $@ | sed s/-recursive//`; \
+	case "$@" in \
+	  distclean-* | maintainer-clean-*) list='$(DIST_SUBDIRS)' ;; \
+	  *) list='$(SUBDIRS)' ;; \
+	esac; \
+	for subdir in $$list; do \
+	  echo "Making $$target in $$subdir"; \
+	  if test "$$subdir" = "."; then \
+	    dot_seen=yes; \
+	    local_target="$$target-am"; \
+	  else \
+	    local_target="$$target"; \
+	  fi; \
+	  ($(am__cd) $$subdir && $(MAKE) $(AM_MAKEFLAGS) $$local_target) \
+	  || eval $$failcom; \
+	done; \
+	if test "$$dot_seen" = "no"; then \
+	  $(MAKE) $(AM_MAKEFLAGS) "$$target-am" || exit 1; \
+	fi; test -z "$$fail"
+
+ID: $(am__tagged_files)
+	$(am__define_uniq_tagged_files); mkid -fID $$unique
+tags: tags-recursive
+TAGS: tags
+
+tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	set x; \
+	here=`pwd`; \
+	if ($(ETAGS) --etags-include --version) >/dev/null 2>&1; then \
+	  include_option=--etags-include; \
+	  empty_fix=.; \
+	else \
+	  include_option=--include; \
+	  empty_fix=; \
+	fi; \
+	list='$(SUBDIRS)'; for subdir in $$list; do \
+	  if test "$$subdir" = .; then :; else \
+	    test ! -f $$subdir/TAGS || \
+	      set "$$@" "$$include_option=$$here/$$subdir/TAGS"; \
+	  fi; \
+	done; \
+	$(am__define_uniq_tagged_files); \
+	shift; \
+	if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
+	  test -n "$$unique" || unique=$$empty_fix; \
+	  if test $$# -gt 0; then \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      "$$@" $$unique; \
+	  else \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      $$unique; \
+	  fi; \
+	fi
+ctags: ctags-recursive
+
+CTAGS: ctags
+ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	$(am__define_uniq_tagged_files); \
+	test -z "$(CTAGS_ARGS)$$unique" \
+	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
+	     $$unique
+
+GTAGS:
+	here=`$(am__cd) $(top_builddir) && pwd` \
+	  && $(am__cd) $(top_srcdir) \
+	  && gtags -i $(GTAGS_ARGS) "$$here"
+cscope: cscope.files
+	test ! -s cscope.files \
+	  || $(CSCOPE) -b -q $(AM_CSCOPEFLAGS) $(CSCOPEFLAGS) -i cscope.files $(CSCOPE_ARGS)
+clean-cscope:
+	-rm -f cscope.files
+cscope.files: clean-cscope cscopelist
+cscopelist: cscopelist-recursive
+
+cscopelist-am: $(am__tagged_files)
+	list='$(am__tagged_files)'; \
+	case "$(srcdir)" in \
+	  [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
+	  *) sdir=$(subdir)/$(srcdir) ;; \
+	esac; \
+	for i in $$list; do \
+	  if test -f "$$i"; then \
+	    echo "$(subdir)/$$i"; \
+	  else \
+	    echo "$$sdir/$$i"; \
+	  fi; \
+	done >> $(top_builddir)/cscope.files
+
+distclean-tags:
+	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
+	-rm -f cscope.out cscope.in.out cscope.po.out cscope.files
+
+distdir: $(DISTFILES)
+	$(am__remove_distdir)
+	test -d "$(distdir)" || mkdir "$(distdir)"
+	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	list='$(DISTFILES)'; \
+	  dist_files=`for file in $$list; do echo $$file; done | \
+	  sed -e "s|^$$srcdirstrip/||;t" \
+	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
+	case $$dist_files in \
+	  */*) $(MKDIR_P) `echo "$$dist_files" | \
+			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
+			   sort -u` ;; \
+	esac; \
+	for file in $$dist_files; do \
+	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
+	  if test -d $$d/$$file; then \
+	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
+	    if test -d "$(distdir)/$$file"; then \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
+	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
+	  else \
+	    test -f "$(distdir)/$$file" \
+	    || cp -p $$d/$$file "$(distdir)/$$file" \
+	    || exit 1; \
+	  fi; \
+	done
+	@list='$(DIST_SUBDIRS)'; for subdir in $$list; do \
+	  if test "$$subdir" = .; then :; else \
+	    $(am__make_dryrun) \
+	      || test -d "$(distdir)/$$subdir" \
+	      || $(MKDIR_P) "$(distdir)/$$subdir" \
+	      || exit 1; \
+	    dir1=$$subdir; dir2="$(distdir)/$$subdir"; \
+	    $(am__relativize); \
+	    new_distdir=$$reldir; \
+	    dir1=$$subdir; dir2="$(top_distdir)"; \
+	    $(am__relativize); \
+	    new_top_distdir=$$reldir; \
+	    echo " (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) top_distdir="$$new_top_distdir" distdir="$$new_distdir" \\"; \
+	    echo "     am__remove_distdir=: am__skip_length_check=: am__skip_mode_fix=: distdir)"; \
+	    ($(am__cd) $$subdir && \
+	      $(MAKE) $(AM_MAKEFLAGS) \
+	        top_distdir="$$new_top_distdir" \
+	        distdir="$$new_distdir" \
+		am__remove_distdir=: \
+		am__skip_length_check=: \
+		am__skip_mode_fix=: \
+	        distdir) \
+	      || exit 1; \
+	  fi; \
+	done
+	$(MAKE) $(AM_MAKEFLAGS) \
+	  top_distdir="$(top_distdir)" distdir="$(distdir)" \
+	  dist-hook
+	-test -n "$(am__skip_mode_fix)" \
+	|| find "$(distdir)" -type d ! -perm -755 \
+		-exec chmod u+rwx,go+rx {} \; -o \
+	  ! -type d ! -perm -444 -links 1 -exec chmod a+r {} \; -o \
+	  ! -type d ! -perm -400 -exec chmod a+r {} \; -o \
+	  ! -type d ! -perm -444 -exec $(install_sh) -c -m a+r {} {} \; \
+	|| chmod -R a+r "$(distdir)"
+dist-gzip: distdir
+	tardir=$(distdir) && $(am__tar) | GZIP=$(GZIP_ENV) gzip -c >$(distdir).tar.gz
+	$(am__post_remove_distdir)
+
+dist-bzip2: distdir
+	tardir=$(distdir) && $(am__tar) | BZIP2=$${BZIP2--9} bzip2 -c >$(distdir).tar.bz2
+	$(am__post_remove_distdir)
+
+dist-lzip: distdir
+	tardir=$(distdir) && $(am__tar) | lzip -c $${LZIP_OPT--9} >$(distdir).tar.lz
+	$(am__post_remove_distdir)
+
+dist-xz: distdir
+	tardir=$(distdir) && $(am__tar) | XZ_OPT=$${XZ_OPT--e} xz -c >$(distdir).tar.xz
+	$(am__post_remove_distdir)
+
+dist-tarZ: distdir
+	tardir=$(distdir) && $(am__tar) | compress -c >$(distdir).tar.Z
+	$(am__post_remove_distdir)
+
+dist-shar: distdir
+	shar $(distdir) | GZIP=$(GZIP_ENV) gzip -c >$(distdir).shar.gz
+	$(am__post_remove_distdir)
+
+dist-zip: distdir
+	-rm -f $(distdir).zip
+	zip -rq $(distdir).zip $(distdir)
+	$(am__post_remove_distdir)
+
+dist dist-all:
+	$(MAKE) $(AM_MAKEFLAGS) $(DIST_TARGETS) am__post_remove_distdir='@:'
+	$(am__post_remove_distdir)
+
+# This target untars the dist file and tries a VPATH configuration.  Then
+# it guarantees that the distribution is self-contained by making another
+# tarfile.
+distcheck: dist
+	case '$(DIST_ARCHIVES)' in \
+	*.tar.gz*) \
+	  GZIP=$(GZIP_ENV) gzip -dc $(distdir).tar.gz | $(am__untar) ;;\
+	*.tar.bz2*) \
+	  bzip2 -dc $(distdir).tar.bz2 | $(am__untar) ;;\
+	*.tar.lz*) \
+	  lzip -dc $(distdir).tar.lz | $(am__untar) ;;\
+	*.tar.xz*) \
+	  xz -dc $(distdir).tar.xz | $(am__untar) ;;\
+	*.tar.Z*) \
+	  uncompress -c $(distdir).tar.Z | $(am__untar) ;;\
+	*.shar.gz*) \
+	  GZIP=$(GZIP_ENV) gzip -dc $(distdir).shar.gz | unshar ;;\
+	*.zip*) \
+	  unzip $(distdir).zip ;;\
+	esac
+	chmod -R a-w $(distdir)
+	chmod u+w $(distdir)
+	mkdir $(distdir)/_build $(distdir)/_inst
+	chmod a-w $(distdir)
+	test -d $(distdir)/_build || exit 0; \
+	dc_install_base=`$(am__cd) $(distdir)/_inst && pwd | sed -e 's,^[^:\\/]:[\\/],/,'` \
+	  && dc_destdir="$${TMPDIR-/tmp}/am-dc-$$$$/" \
+	  && am__cwd=`pwd` \
+	  && $(am__cd) $(distdir)/_build \
+	  && ../configure --srcdir=.. --prefix="$$dc_install_base" \
+	    $(AM_DISTCHECK_CONFIGURE_FLAGS) \
+	    $(DISTCHECK_CONFIGURE_FLAGS) \
+	  && $(MAKE) $(AM_MAKEFLAGS) \
+	  && $(MAKE) $(AM_MAKEFLAGS) dvi \
+	  && $(MAKE) $(AM_MAKEFLAGS) check \
+	  && $(MAKE) $(AM_MAKEFLAGS) install \
+	  && $(MAKE) $(AM_MAKEFLAGS) installcheck \
+	  && $(MAKE) $(AM_MAKEFLAGS) uninstall \
+	  && $(MAKE) $(AM_MAKEFLAGS) distuninstallcheck_dir="$$dc_install_base" \
+	        distuninstallcheck \
+	  && chmod -R a-w "$$dc_install_base" \
+	  && ({ \
+	       (cd ../.. && umask 077 && mkdir "$$dc_destdir") \
+	       && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" install \
+	       && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" uninstall \
+	       && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" \
+	            distuninstallcheck_dir="$$dc_destdir" distuninstallcheck; \
+	      } || { rm -rf "$$dc_destdir"; exit 1; }) \
+	  && rm -rf "$$dc_destdir" \
+	  && $(MAKE) $(AM_MAKEFLAGS) dist \
+	  && rm -rf $(DIST_ARCHIVES) \
+	  && $(MAKE) $(AM_MAKEFLAGS) distcleancheck \
+	  && cd "$$am__cwd" \
+	  || exit 1
+	$(am__post_remove_distdir)
+	@(echo "$(distdir) archives ready for distribution: "; \
+	  list='$(DIST_ARCHIVES)'; for i in $$list; do echo $$i; done) | \
+	  sed -e 1h -e 1s/./=/g -e 1p -e 1x -e '$$p' -e '$$x'
+distuninstallcheck:
+	@test -n '$(distuninstallcheck_dir)' || { \
+	  echo 'ERROR: trying to run $@ with an empty' \
+	       '$$(distuninstallcheck_dir)' >&2; \
+	  exit 1; \
+	}; \
+	$(am__cd) '$(distuninstallcheck_dir)' || { \
+	  echo 'ERROR: cannot chdir into $(distuninstallcheck_dir)' >&2; \
+	  exit 1; \
+	}; \
+	test `$(am__distuninstallcheck_listfiles) | wc -l` -eq 0 \
+	   || { echo "ERROR: files left after uninstall:" ; \
+	        if test -n "$(DESTDIR)"; then \
+	          echo "  (check DESTDIR support)"; \
+	        fi ; \
+	        $(distuninstallcheck_listfiles) ; \
+	        exit 1; } >&2
+distcleancheck: distclean
+	@if test '$(srcdir)' = . ; then \
+	  echo "ERROR: distcleancheck can only run from a VPATH build" ; \
+	  exit 1 ; \
+	fi
+	@test `$(distcleancheck_listfiles) | wc -l` -eq 0 \
+	  || { echo "ERROR: files left in build directory after distclean:" ; \
+	       $(distcleancheck_listfiles) ; \
+	       exit 1; } >&2
+check-am: all-am
+check: check-recursive
+all-am: Makefile $(DATA)
+installdirs: installdirs-recursive
+installdirs-am:
+	for dir in "$(DESTDIR)$(docdir)"; do \
+	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
+	done
+install: install-recursive
+install-exec: install-exec-recursive
+install-data: install-data-recursive
+uninstall: uninstall-recursive
+
+install-am: all-am
+	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
+
+installcheck: installcheck-recursive
+install-strip:
+	if test -z '$(STRIP)'; then \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	      install; \
+	else \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
+	fi
+mostlyclean-generic:
+	-test -z "$(MOSTLYCLEANFILES)" || rm -f $(MOSTLYCLEANFILES)
+
+clean-generic:
+
+distclean-generic:
+	-test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES)
+	-test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES)
+
+maintainer-clean-generic:
+	@echo "This command is intended for maintainers to use"
+	@echo "it deletes files that may require special tools to rebuild."
+	-test -z "$(MAINTAINERCLEANFILES)" || rm -f $(MAINTAINERCLEANFILES)
+clean: clean-recursive
+
+clean-am: clean-generic clean-local mostlyclean-am
+
+distclean: distclean-recursive
+	-rm -f $(am__CONFIG_DISTCLEAN_FILES)
+	-rm -f Makefile
+distclean-am: clean-am distclean-generic distclean-local \
+	distclean-tags
+
+dvi: dvi-recursive
+
+dvi-am:
+
+html: html-recursive
+
+html-am:
 
-TARFILES = AUTHOR bin ChangeLog configure configure.in CONTRIBUTORS COPYING \
-	   doc genhash INSTALL install-sh keepalived keepalived.spec.in lib Makefile.in \
-	   README TODO VERSION
+info: info-recursive
 
-TARBALL = keepalived-@VERSION@.tar.gz
+info-am:
 
-all:
-	$(MAKE) -C lib || exit 1;
-	$(MAKE) -C keepalived
-	$(MAKE) -C genhash
-	@echo ""
-	@echo "Make complete"
+install-data-am: install-docDATA
+
+install-dvi: install-dvi-recursive
+
+install-dvi-am:
+
+install-exec-am:
+
+install-html: install-html-recursive
+
+install-html-am:
+
+install-info: install-info-recursive
+
+install-info-am:
+
+install-man:
+
+install-pdf: install-pdf-recursive
+
+install-pdf-am:
+
+install-ps: install-ps-recursive
+
+install-ps-am:
+
+installcheck-am:
+
+maintainer-clean: maintainer-clean-recursive
+	-rm -f $(am__CONFIG_DISTCLEAN_FILES)
+	-rm -rf $(top_srcdir)/autom4te.cache
+	-rm -f Makefile
+maintainer-clean-am: distclean-am maintainer-clean-generic
+
+mostlyclean: mostlyclean-recursive
+
+mostlyclean-am: mostlyclean-generic
+
+pdf: pdf-recursive
+
+pdf-am:
+
+ps: ps-recursive
+
+ps-am:
+
+uninstall-am: uninstall-docDATA
+
+.MAKE: $(am__recursive_targets) install-am install-strip
+
+.PHONY: $(am__recursive_targets) CTAGS GTAGS TAGS all all-am \
+	am--refresh check check-am clean clean-cscope clean-generic \
+	clean-local cscope cscopelist-am ctags ctags-am dist dist-all \
+	dist-bzip2 dist-gzip dist-hook dist-lzip dist-shar dist-tarZ \
+	dist-xz dist-zip distcheck distclean distclean-generic \
+	distclean-local distclean-tags distcleancheck distdir \
+	distuninstallcheck dvi dvi-am html html-am info info-am \
+	install install-am install-data install-data-am \
+	install-docDATA install-dvi install-dvi-am install-exec \
+	install-exec-am install-html install-html-am install-info \
+	install-info-am install-man install-pdf install-pdf-am \
+	install-ps install-ps-am install-strip installcheck \
+	installcheck-am installdirs installdirs-am maintainer-clean \
+	maintainer-clean-generic mostlyclean mostlyclean-generic pdf \
+	pdf-am ps ps-am tags tags-am uninstall uninstall-am \
+	uninstall-docDATA
+
+
+export			DEBUG_CFLAGS
+export			DEBUG_CPPFLAGS
+export			DEBUG_LDFLAGS
+
+README:	$(srcdir)/README.md
+	@$(edit) '$(srcdir)/$@.md' >$@
+
+distclean-local:
+	@rm -f aclocal.m4 ar-lib compile depcomp install-sh missing keepalived-$(VERSION).tar.gz config.log config.status
+	@rm -rf autom4te.cache
+
+dist-hook:
+	@rm -f $(distdir)/README
+
+.PHONY: docker
+docker:
+	docker build -t keepalived .
+
+# clean all files that are generated by automake/autoconf etc
+autoclean:
+	@$(MAKE) distclean
+	@rm -f configure `find . -name Makefile.in` lib/config.h.in lib/git-commit.h
+
+git-clean:
+	@$(MAKE) autoclean
+
+clean-local: clean-local-snap
+
+# clean files that are generated by snapcraft
+.PHONY:	clean-local-snap
+clean-local-snap:
+	-rm -rf parts/ prime/ stage/ keepalived_*.snap
+
+# Added targets to maintain compatibility with keepalived releases 1.2.22 and earlier
+.PHONY: tarball rpm debug profile mrproper
+
+tarball: dist
+
+@RPM_TRUE@rpm:
+@RPM_TRUE@			@$(MAKE) dist
+@RPM_TRUE@			@cp -p keepalived-$(VERSION).tar.gz `rpm --eval "%{_sourcedir}"`
+@RPM_TRUE@@RPM_BIP_TRUE@	rpmbuild -ba --build-in-place keepalived.spec
+@RPM_TRUE@@RPM_BIP_FALSE@	rpmbuild -ba keepalived.spec
 
 debug:
-	$(MAKE) -C lib || exit 1;
-	$(MAKE) -C keepalived debug
-	@echo ""
-	@echo "Make complete"
+	@$(MAKE) DEBUG_LDFLAGS=-ggdb
 
 profile:
-	$(MAKE) -C lib || exit 1;
-	$(MAKE) -C keepalived profile
-	@echo ""
-	@echo "Make complete"
-
-clean:
-	$(MAKE) -C lib clean
-	$(MAKE) -C keepalived clean
-	$(MAKE) -C genhash clean
-
-distclean:
-	$(MAKE) -C lib distclean
-	$(MAKE) -C keepalived distclean
-	$(MAKE) -C genhash distclean
-	rm -f Makefile
-	rm -f keepalived.spec
-
-mrproper: distclean
-	rm -f config.*
-
-uninstall:
-	$(MAKE) -C keepalived uninstall
-	$(MAKE) -C genhash uninstall
-
-install:
-	$(MAKE) -C keepalived install
-	$(MAKE) -C genhash install
-
-tarball: mrproper
-	mkdir keepalived-@VERSION@
-	cp -a $(TARFILES) keepalived-@VERSION@
-	tar --exclude .git -czf $(TARBALL) keepalived-@VERSION@
-	rm -rf keepalived-@VERSION@
-
-rpm:
-	rpmbuild -ba keepalived.spec
+	@$(MAKE) DEBUG_CFLAGS=-pg
+
+mrproper:
+	@echo Please use `make distclean`
+
+# Tell versions [3.59,3.63) of GNU make to not export all variables.
+# Otherwise a system limit (for SysV at least) may be exceeded.
+.NOEXPORT:
diff --git a/tools/keepalived/README b/tools/keepalived/README
deleted file mode 100644
index 153816e86..000000000
--- a/tools/keepalived/README
+++ /dev/null
@@ -1,25 +0,0 @@
-The main goal of the keepalived project is to add a strong & robust
-keepalive facility to the Linux Virtual Server project.
-It implements a multilayer TCP/IP stack checks. Keepalived implements
-a framework based on three family checks : Layer3, Layer4 & Layer5. 
-This framework gives the daemon the ability of checking a LVS server 
-pool states. Keepalived can be sumarize as a LVS driving daemon.
-
-Keepalived implementation is based on an I/O multiplexer to handle a 
-strong multi-threading framework. All the events process use this I/O
-multiplexer.
-
-Keepalived is free software, Copyright (C) Alexandre Cassen.
-See the file COPYING for copying conditions.
-
-
-OPENSSL TOOLKIT LICENCE EXCEPTION
-
-In addition, as the copyright holder of Keepalived,
-I, Alexandre Cassen, <acassen@linux-vs.org>,
-grant the following special exception: 
-
-        I, Alexandre Cassen, <acassen@linux-vs.org>, explicitly allow
-        the compilation and distribution of the Keepalived software with
-        the OpenSSL Toolkit.
-
diff --git a/tools/keepalived/README.md b/tools/keepalived/README.md
new file mode 100644
index 000000000..49ea1b12b
--- /dev/null
+++ b/tools/keepalived/README.md
@@ -0,0 +1,42 @@
+keepalived: Loadbalancing & High-Availability
+=============================================
+
+[![Build Status](https://travis-ci.org/acassen/keepalived.svg?branch=master)](https://travis-ci.org/acassen/keepalived) [![keepalived](https://snapcraft.io/keepalived/badge.svg)](https://snapcraft.io/keepalived)
+
+The main goal of this project is to provide simple and robust facilities
+for loadbalancing and high-availability to Linux system and Linux based
+infrastructures. Loadbalancing framework relies on well-known and widely
+used Linux Virtual Server (IPVS) kernel module providing Layer4 loadbalancing.
+Keepalived implements a set of checkers to dynamically and adaptively maintain
+and manage loadbalanced server pool according their health. On the other hand
+high-availability is achieved by the Virtual Router Redundancy Protocol (VRRP).
+VRRP is a fundamental brick for router failover. In addition, Keepalived
+implements a set of hooks to the VRRP finite state machine providing low-level
+and high-speed protocol interactions. In order to offer fastest network
+failure detection, Keepalived implements the Bidirectional Forwarding Detection
+(BFD) protocol. VRRP state transition can take into account BFD hints to drive
+fast state transition. Keepalived frameworks can be used independently or all
+together to provide resilient infrastructures.
+
+Keepalived implementation is based on an I/O multiplexer to handle a
+strong multi-threading framework. All the events process use this I/O
+multiplexer.
+
+To build keepalived from the git source tree, you will need to have
+autoconf, automake and various libraries installed. See the INSTALL
+file for details of what needs to be installed and what needs to be
+executed before building keepalived.
+
+Keepalived is free software, Copyright (C) Alexandre Cassen.
+See the file COPYING for copying conditions.
+
+OPENSSL TOOLKIT LICENCE EXCEPTION
+
+In addition, as the copyright holder of Keepalived,
+I, Alexandre Cassen, <acassen@linux-vs.org>,
+grant the following special exception:
+
+	I, Alexandre Cassen, <acassen@linux-vs.org>, explicitly allow
+	the compilation and distribution of the Keepalived software with
+	the OpenSSL Toolkit.
+
diff --git a/tools/keepalived/TODO b/tools/keepalived/TODO
index 52801f45a..cab84bcf5 100644
--- a/tools/keepalived/TODO
+++ b/tools/keepalived/TODO
@@ -1 +1,154 @@
 Whatever you want !
+
+Real servers
+Add quorum_weight, defaults to weight. May want to set different between quorum and IPVS weight
+
+Rationalise use of timer_now()/gettimeofday()/set_time_now()
+
+
+virtual route:
+1. How do we handle
+     virtual_routes {
+            192.168.210.0/24 via 10.1.0.1
+     }
+     if there is no route to 10.1.0.1? If we go to fault state if it cannot
+     be installed when attempt to transition to master, how do we know to transiton
+     out of fault state.
+
+
+IPVS
+1. Can we have an IPv4 fwmark and specify tunnel to IPv6, and vice versa etc.
+   What does ipvsadm do?
+2. Sort out IP_VS_SO vs LVS_CMD...
+3. Make sure log/email messages contain relevant info re VS -> RS. See FMT_CHK
+
+The following are still outstanding from the ideas for what became v2.0.0:
+
+	* Sort out termination in vrrp and checker - stop_vrrp/check, and phase2
+	    are inconsistent between vrrp and checker. What about bfd?
+	* A route with multiple nexthops will only be deleted if all interfaces
+	    are down. Each nexthop needs to record the interface, and only remove
+	    once all down
+	* Don't add RTNMGRP_IPV4_ADDR/IPV6_ADDR if not monitoring one of those
+	    families
+	* May want to stop VS down at start for alpha mode RSs (except SNMP)
+	* Rate limit respawning if a child process dies
+	* Have a socket to connect to for receiving notifications. A process
+	    can register for what notifications it wants to receive.
+	* Allow variable parameters to be passed to scripts - see issue #837
+	* Make tarball include git version if not a tag
+	* If an address owner recovers from fault, transition directly to
+	  master
+	* If configuration_state=MASTER && !OWNER, transition to master after
+	  1 * advert_int + skew. Sort out all initialisation around states
+	* Split vrrp_snmp.c into vrrp_snmp_keepalived.c vrrp_snmp_rfcv2.c and
+	  vrrp_snmp_rfcv3.c
+	* Only send correct type of trap, and respond to correct SNMP version,
+	  controlled by config, defaults to type of instance. Flags snmp_v2 and
+	  snmp_v3 to force other, or both.
+	* Ensure unicast peers groups check source address of received advert
+	  so that the same VRID can be used between different peer groups on the
+	  same interface.
+	* Add process checking:
+	    Add track_process for vrrp instances
+	    Add PROCESS_CHECK for checkers
+	    - Find PID and remember it. If PID has gone, try and find new pid
+	    Look at how pidof/killall find processes
+	* Allow dynamic definitions, e.g. $_VI_NAME
+	    Also $*_INSTANCE net_namspace $_INSTANCE
+	    so $* means only do if $_INSTANCE not blank. */
+	* ng-scheduler
+
+
+Other issues awaiting resolution:
+
+ipvs_group_range_cmd() appears nonsense, and inet_stor returning a uint8_t
+doesn't work for IPv6. The virtual_service_entry_t thing needs range to be
+uint32_t. Why would mask be 0xffffffff for IPv6?
+
+ip_vs_daemon_kern vs /usr/include/linux/ip_vs.h ip_vs_daemon_user
+
+vrrp_timer_fd should return 0 if an fd's timer is in the past?
+
+Make vrrp->send_buffer a single buffer for all
+
+Check timers passto to thread_... functions are reasonable, and stacktrace if not.
+
+In function socket_state, should thread_add_write use timer_long() or -timer_long()
+
+vrrp_timer_fd() - see comment
+
+In thread functions with a timer, ensure not > LONG_MAX (or even some lower value);
+
+Change tcp_socket_state etc to socket_state etc
+
+Add noreturn function attribute on stop_vrrp/check
+
+bin/genhash -s 2001:470:69dd:35::188 --port 80 -u /Harriet/     # works, but
+bin/genhash -s 2001:470:69dd:35::188 --port 80 -u /Harriet/     # -S doesn't
+								# but -S is OK with IPv4 address
+
+in ipvswrapper.c, get rid of static srule etc and make them procedure local and pass as parameters
+
+Stop passing base_ifp to netlink3_set_interface_parameters() etc
+
+ipsecah issues
+==============
+1. sync and vmac ignore counter
+
+2. Start up just after master dies, but have lowest priority so become master with counter == 1
+
+3. cycle won't happen
+
+4. In vrrp_backup, don't check auth type matches
+
+5. ? if cycle becomes set, we must become backup. How do we get out of state?
+
+epoll
+=====
+Use timerfd (see timerfd_create(2)) for microsecond timing with epoll, and do not bother with its timeout.
+If not available, then simply use the epoll timer.
+
+Optimise calls to timer_now() and see set_time_now()
+====================================================
+After select completes, get time. Before calculating next
+select expire time, get time again.
+To test time processing, save time after select and log time taken
+before next select. Also initialise timer at startup.
+
+Add api
+=======
+
+Add pipe for updates
+====================
+track_script like for absolute or relative priority
+
+Upstream issues
+===============
+
+1. Kernel. Socket receive buffers growing to fill memory
+   See issue #839. If the following setting are in place:
+net.core.rmem_default = 37748736
+net.core.rmem_max = 37748736
+   and vrrp_tx_bufs_policy NO_SEND_RX is configured, then
+   all system memory can be consumed. Why is it not limited
+   to 37748736 bytes?
+
+2. Kernel. Corruption when netlink sends status of large number
+   of links - see issues #392/#803.
+   When using default socket receive buffer size, and have 500
+   vmac interfaces configured on a physical interface and the
+   physical interface is downed, lots of netlink messages are
+   received, and we get an ENOBUFS. However, after that we then
+   see a repeat of some of the earlier messages, so it looks like
+   a circular buffer corruption. Running ip -ts monitor link addr route
+   we see precisely the same problem at exactly the same message,
+   although which message it is varies each time.
+
+3. net-snmp. Display-hint only works on indices.
+   See issue #866.
+   # snmpwalk -v2c -c public localhost KEEPALIVED-MIB::virtualServerAddress
+   KEEPALIVED-MIB::virtualServerAddress.1 = STRING: "
+0,"
+   The address is attempted to be output as text, rather than using
+   the display hint
diff --git a/tools/keepalived/VERSION b/tools/keepalived/VERSION
deleted file mode 100644
index 0b1f1edf1..000000000
--- a/tools/keepalived/VERSION
+++ /dev/null
@@ -1 +0,0 @@
-1.2.13
diff --git a/tools/keepalived/bin_install/Makefile.am b/tools/keepalived/bin_install/Makefile.am
new file mode 100644
index 000000000..73924de0e
--- /dev/null
+++ b/tools/keepalived/bin_install/Makefile.am
@@ -0,0 +1,36 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2016 Alexandre Cassen, <acassen@gmail.com>
+
+.PHONY:	all debug profile
+
+all debug profile: $(top_builddir)/bin/keepalived $(top_builddir)/bin/genhash
+
+$(top_builddir)/bin/keepalived: $(top_builddir)/keepalived/keepalived
+	@$(MKDIR_P) $(top_builddir)/bin
+	@(if test -f $(top_builddir)/keepalived/keepalived; then \
+		if test -z "$(DEBUG_LDFLAGS)$(DEBUG_CFLAGS)$(DEBUG_CPPFLAGS)"; then \
+			@STRIP@ -o $(top_builddir)/bin/keepalived $(top_builddir)/keepalived/keepalived; \
+		else \
+			cp -p $(top_builddir)/keepalived/keepalived $(top_builddir)/bin; \
+		fi; \
+	else \
+		rm -f $(top_builddir)/bin/keepalived; \
+	fi)
+
+$(top_builddir)/bin/genhash: $(top_builddir)/genhash/genhash
+	@$(MKDIR_P) $(top_builddir)/bin
+	@(if test -f $(top_builddir)/genhash/genhash; then \
+		if test -z "$(DEBUG_LDFLAGS)$(DEBUG_CFLAGS)$(DEBUG_CPPFLAGS)"; then \
+			@STRIP@ -o $(top_builddir)/bin/genhash $(top_builddir)/genhash/genhash; \
+		else \
+			cp -p $(top_builddir)/genhash/genhash $(top_builddir)/bin; \
+		fi; \
+	else \
+		rm -f $(top_builddir)/bin/genhash; \
+	fi)
+
+clean-local:
+	rm -f $(top_builddir)/bin/keepalived $(top_builddir)/bin/genhash
diff --git a/tools/keepalived/build_setup b/tools/keepalived/build_setup
new file mode 100755
index 000000000..c3610d4e5
--- /dev/null
+++ b/tools/keepalived/build_setup
@@ -0,0 +1,6 @@
+#!/bin/sh
+
+aclocal
+autoheader
+automake --add-missing
+autoreconf
diff --git a/tools/keepalived/config.json b/tools/keepalived/config.json
new file mode 100644
index 000000000..a8ae7746e
--- /dev/null
+++ b/tools/keepalived/config.json
@@ -0,0 +1,4919 @@
+{
+    "clusterId":"791",
+    "vipports":[
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.180:80:100,192.168.34.225:80:100,192.168.54.21:80:100,192.168.26.59:80:100,192.168.17.189:80:100,192.168.5.185:80:100,192.168.14.14:80:100,192.168.38.64:80:100,192.168.26.163:80:100,192.168.45.240:80:100,192.168.45.60:80:100,192.168.37.104:80:100,192.168.17.71:80:100,192.168.21.52:80:100,192.168.37.17:80:100,192.168.9.172:80:100,192.168.14.238:80:100,192.168.38.138:80:100,192.168.53.106:80:100,192.168.15.192:80:100,192.168.26.36:80:100,192.168.46.90:80:100,192.168.31.190:80:100,192.168.31.7:80:100,192.168.26.215:80:100,192.168.15.103:80:100,192.168.49.215:80:100,192.168.15.108:80:100,192.168.33.101:80:100,192.168.5.155:80:100,192.168.10.1:80:100,192.168.29.210:80:100,192.168.51.176:80:100,192.168.51.251:80:100,192.168.23.200:80:100,192.168.33.192:80:100,192.168.1.170:80:100,192.168.50.91:80:100,192.168.47.100:80:100,192.168.11.142:80:100,192.168.25.157:80:100,192.168.46.52:80:100,192.168.30.154:80:100,192.168.6.82:80:100,192.168.47.80:80:100,192.168.54.151:80:100,192.168.19.171:80:100,192.168.18.92:80:100,192.168.3.93:80:100,192.168.59.219:80:100,192.168.25.6:80:100,192.168.26.19:80:100,192.168.53.136:80:100,192.168.22.29:80:100,192.168.15.143:80:100,192.168.46.75:80:100,192.168.21.208:80:100,192.168.35.80:80:100,192.168.57.58:80:100,192.168.26.212:80:100,192.168.14.95:80:100,192.168.47.3:80:100,192.168.31.102:80:100,192.168.47.155:80:100,192.168.58.13:80:100,192.168.1.171:80:100,192.168.31.213:80:100,192.168.29.60:80:100,192.168.37.139:80:100,192.168.13.206:80:100,192.168.29.117:80:100,192.168.26.75:80:100,192.168.25.229:80:100,192.168.5.29:80:100,192.168.38.191:80:100,192.168.58.12:80:100,192.168.3.49:80:100,192.168.53.99:80:100,192.168.25.133:80:100,192.168.50.238:80:100,192.168.7.126:80:100,192.168.43.248:80:100,192.168.15.233:80:100,192.168.55.105:80:100,192.168.43.195:80:100,192.168.42.135:80:100,192.168.38.66:80:100",
+            "vip":"111.13.235.69"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.14.15:80:100,192.168.1.142:80:100,192.168.59.105:80:100",
+            "vip":"192.168.102.169"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.168:80:100,192.168.37.246:80:100",
+            "vip":"192.168.101.63"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.43.100:80:100,192.168.57.126:80:100,192.168.19.145:80:100,192.168.58.154:80:100",
+            "vip":"192.168.102.88"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.25.59:80:100,192.168.58.241:80:100",
+            "vip":"111.13.235.132"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.35.248:80:100,192.168.26.71:80:100,192.168.46.103:80:100,192.168.33.50:80:100",
+            "vip":"192.168.101.61"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.37:80:100,192.168.49.41:80:100,192.168.33.34:80:100,192.168.18.13:80:100,192.168.23.161:80:100,192.168.43.121:80:100,192.168.49.19:80:100,192.168.13.177:80:100,192.168.18.81:80:100,192.168.2.55:80:100,192.168.37.207:80:100,192.168.14.39:80:100,192.168.15.216:80:100,192.168.6.54:80:100,192.168.17.41:80:100,192.168.1.70:80:100,192.168.31.103:80:100,192.168.11.55:80:100,192.168.25.233:80:100,192.168.3.194:80:100,192.168.34.147:80:100,192.168.3.78:80:100,192.168.43.173:80:100,192.168.47.247:80:100,192.168.54.233:80:100,192.168.1.253:80:100,192.168.38.71:80:100,192.168.3.61:80:100,192.168.22.183:80:100,192.168.7.190:80:100,192.168.10.130:80:100,192.168.45.110:80:100,192.168.34.241:80:100,192.168.57.237:80:100,192.168.10.152:80:100,192.168.1.21:80:100,192.168.37.183:80:100,192.168.6.43:80:100,192.168.59.198:80:100,192.168.6.165:80:100,192.168.35.212:80:100,192.168.58.57:80:100,192.168.47.8:80:100,192.168.47.112:80:100,192.168.10.217:80:100,192.168.59.219:80:100,192.168.15.162:80:100,192.168.19.202:80:100,192.168.2.72:80:100,192.168.17.98:80:100,192.168.11.122:80:100,192.168.6.239:80:100,192.168.9.69:80:100,192.168.59.142:80:100,192.168.25.1:80:100,192.168.13.2:80:100,192.168.33.193:80:100,192.168.54.159:80:100,192.168.55.75:80:100,192.168.3.228:80:100,192.168.34.178:80:100,192.168.58.201:80:100,192.168.42.15:80:100,192.168.22.123:80:100,192.168.35.191:80:100,192.168.11.156:80:100,192.168.11.247:80:100,192.168.38.79:80:100,192.168.59.201:80:100,192.168.22.201:80:100,192.168.49.115:80:100,192.168.9.7:80:100,192.168.10.142:80:100,192.168.6.111:80:100,192.168.43.235:80:100,192.168.17.78:80:100,192.168.2.25:80:100,192.168.45.84:80:100,192.168.53.82:80:100,192.168.59.134:80:100,192.168.46.79:80:100,192.168.5.232:80:100,192.168.5.78:80:100,192.168.53.59:80:100,192.168.17.177:80:100,192.168.3.38:80:100,192.168.19.160:80:100,192.168.49.125:80:100,192.168.18.126:80:100,192.168.41.202:80:100,192.168.33.77:80:100,192.168.17.111:80:100,192.168.30.163:80:100,192.168.13.170:80:100,192.168.5.205:80:100,192.168.39.159:80:100,192.168.30.81:80:100,192.168.11.245:80:100,192.168.6.105:80:100,192.168.11.213:80:100,192.168.21.128:80:100,192.168.14.3:80:100,192.168.1.157:80:100,192.168.31.29:80:100,192.168.11.116:80:100,192.168.54.106:80:100,192.168.38.38:80:100,192.168.57.221:80:100,192.168.35.148:80:100,192.168.10.242:80:100,192.168.43.231:80:100,192.168.31.151:80:100,192.168.58.69:80:100,192.168.55.168:80:100,192.168.27.92:80:100,192.168.17.221:80:100,192.168.47.11:80:100,192.168.5.164:80:100,192.168.18.1:80:100,192.168.42.196:80:100,192.168.3.19:80:100,192.168.30.34:80:100,192.168.6.46:80:100,192.168.42.121:80:100,192.168.51.167:80:100,192.168.42.99:80:100,192.168.11.133:80:100,192.168.54.113:80:100,192.168.17.3:80:100,192.168.57.110:80:100,192.168.42.207:80:100,192.168.37.14:80:100,192.168.57.155:80:100,192.168.49.123:80:100,192.168.23.208:80:100,192.168.6.244:80:100,192.168.19.110:80:100,192.168.47.3:80:100,192.168.23.109:80:100,192.168.23.194:80:100,192.168.29.73:80:100,192.168.7.150:80:100,192.168.27.27:80:100,192.168.29.236:80:100,192.168.49.100:80:100,192.168.14.199:80:100,192.168.34.72:80:100,192.168.7.129:80:100,192.168.7.254:80:100,192.168.39.21:80:100,192.168.22.48:80:100,192.168.47.121:80:100,192.168.1.249:80:100,192.168.37.228:80:100,192.168.37.55:80:100,192.168.3.210:80:100,192.168.57.247:80:100,192.168.27.122:80:100,192.168.11.201:80:100,192.168.42.50:80:100,192.168.55.36:80:100,192.168.41.98:80:100,192.168.37.179:80:100,192.168.46.63:80:100,192.168.55.197:80:100,192.168.22.21:80:100,192.168.25.145:80:100,192.168.2.110:80:100,192.168.51.127:80:100,192.168.43.234:80:100,192.168.54.23:80:100,192.168.18.93:80:100,192.168.18.180:80:100,192.168.14.125:80:100,192.168.33.237:80:100,192.168.54.88:80:100,192.168.54.246:80:100,192.168.51.155:80:100,192.168.37.194:80:100,192.168.39.19:80:100,192.168.54.154:80:100,192.168.57.211:80:100,192.168.30.238:80:100,192.168.10.199:80:100,192.168.15.76:80:100,192.168.13.179:80:100,192.168.17.125:80:100,192.168.39.101:80:100,192.168.6.141:80:100,192.168.35.220:80:100,192.168.45.174:80:100",
+            "vip":"192.168.101.7"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.176:80:100,192.168.45.176:80:100,192.168.22.165:80:100,192.168.21.204:80:100",
+            "vip":"111.13.235.154"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.3:80:100,192.168.59.94:80:100,192.168.50.61:80:100,192.168.58.69:80:100,192.168.53.130:80:100,192.168.39.244:80:100,192.168.55.68:80:100,192.168.53.59:80:100,192.168.42.227:80:100,192.168.26.205:80:100,192.168.38.165:80:100",
+            "vip":"192.168.101.167"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.224:80:100",
+            "vip":"111.13.235.244"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.237:80:100,192.168.7.46:80:100,192.168.17.203:80:100,192.168.30.48:80:100,192.168.1.210:80:100,192.168.14.45:80:100,192.168.41.162:80:100,192.168.45.239:80:100,192.168.37.23:80:100,192.168.1.221:80:100,192.168.58.26:80:100,192.168.9.78:80:100,192.168.46.249:80:100,192.168.30.186:80:100,192.168.57.70:80:100,192.168.14.236:80:100,192.168.3.226:80:100,192.168.35.131:80:100",
+            "vip":"192.168.101.122"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.7.173:80:100,192.168.17.25:80:100,192.168.35.130:80:100,192.168.22.130:80:100,192.168.30.103:80:100,192.168.42.89:80:100,192.168.15.59:80:100,192.168.19.100:80:100",
+            "vip":"192.168.102.135"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.77:80:100,192.168.30.251:80:100",
+            "vip":"192.168.102.28"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.134:80:100,192.168.35.168:80:100,192.168.14.122:80:100,192.168.21.224:80:100",
+            "vip":"192.168.101.139"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.189:80:100,192.168.39.238:80:100,192.168.43.25:80:100,192.168.50.69:80:100",
+            "vip":"192.168.102.62"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.53:80:100,192.168.55.236:80:100",
+            "vip":"192.168.101.80"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.17.29:80:100,192.168.6.112:80:100,192.168.6.55:80:100,192.168.57.148:80:100,192.168.14.41:80:100,192.168.6.51:80:100,192.168.47.8:80:100,192.168.10.193:80:100,192.168.47.25:80:100,192.168.59.127:80:100,192.168.42.84:80:100,192.168.19.219:80:100,192.168.13.134:80:100,192.168.55.81:80:100,192.168.14.175:80:100,192.168.50.20:80:100,192.168.37.175:80:100",
+            "vip":"192.168.102.214"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.61:80:100,192.168.11.140:80:100",
+            "vip":"111.13.235.85"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.237:80:100,192.168.31.132:80:100,192.168.42.231:80:100,192.168.9.219:80:100,192.168.33.38:80:100,192.168.35.189:80:100",
+            "vip":"192.168.101.244"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.240:80:100,192.168.1.237:80:100,192.168.53.87:80:100,192.168.53.51:80:100,192.168.1.23:80:100,192.168.33.46:80:100,192.168.33.39:80:100",
+            "vip":"111.13.235.103"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.196:80:100,192.168.53.184:80:100,192.168.57.200:80:100,192.168.43.26:80:100,192.168.33.144:80:100,192.168.18.177:80:100,192.168.33.114:80:100,192.168.59.117:80:100,192.168.35.106:80:100,192.168.23.141:80:100,192.168.18.212:80:100,192.168.14.244:80:100,192.168.17.103:80:100,192.168.25.150:80:100,192.168.34.130:80:100,192.168.26.155:80:100,192.168.46.179:80:100,192.168.21.59:80:100,192.168.58.117:80:100,192.168.33.240:80:100,192.168.35.207:80:100,192.168.46.106:80:100,192.168.22.20:80:100,192.168.7.3:80:100,192.168.47.91:80:100,192.168.58.124:80:100,192.168.25.124:80:100,192.168.25.139:80:100,192.168.38.83:80:100,192.168.54.54:80:100,192.168.54.19:80:100,192.168.47.107:80:100,192.168.3.110:80:100,192.168.57.36:80:100,192.168.42.19:80:100,192.168.45.110:80:100,192.168.49.227:80:100,192.168.54.89:80:100,192.168.5.2:80:100,192.168.46.44:80:100,192.168.38.17:80:100,192.168.27.202:80:100,192.168.30.77:80:100,192.168.29.176:80:100,192.168.30.4:80:100,192.168.39.153:80:100,192.168.13.79:80:100,192.168.29.118:80:100,192.168.21.146:80:100,192.168.35.151:80:100,192.168.11.77:80:100,192.168.59.123:80:100,192.168.13.148:80:100,192.168.15.58:80:100,192.168.21.48:80:100,192.168.31.180:80:100,192.168.18.173:80:100,192.168.43.44:80:100,192.168.42.45:80:100,192.168.39.41:80:100,192.168.19.209:80:100,192.168.58.207:80:100,192.168.55.209:80:100,192.168.50.178:80:100,192.168.11.101:80:100,192.168.42.152:80:100,192.168.19.223:80:100,192.168.27.207:80:100,192.168.1.104:80:100,192.168.29.30:80:100,192.168.13.202:80:100,192.168.37.123:80:100,192.168.6.72:80:100,192.168.3.7:80:100,192.168.30.249:80:100,192.168.57.153:80:100,192.168.57.81:80:100,192.168.55.191:80:100,192.168.23.248:80:100,192.168.17.204:80:100,192.168.58.30:80:100,192.168.34.215:80:100,192.168.22.237:80:100,192.168.10.201:80:100,192.168.11.103:80:100,192.168.9.170:80:100,192.168.42.156:80:100,192.168.59.168:80:100,192.168.42.198:80:100,192.168.5.198:80:100,192.168.45.175:80:100,192.168.31.223:80:100,192.168.3.164:80:100,192.168.5.28:80:100,192.168.10.42:80:100,192.168.54.227:80:100,192.168.45.199:80:100,192.168.45.42:80:100,192.168.33.149:80:100,192.168.55.222:80:100,192.168.6.101:80:100,192.168.35.183:80:100,192.168.15.177:80:100,192.168.13.170:80:100,192.168.43.105:80:100,192.168.45.63:80:100,192.168.11.65:80:100,192.168.43.199:80:100,192.168.11.245:80:100,192.168.35.13:80:100,192.168.23.111:80:100,192.168.55.233:80:100,192.168.43.227:80:100,192.168.17.124:80:100,192.168.15.71:80:100,192.168.18.53:80:100,192.168.58.235:80:100,192.168.2.35:80:100,192.168.42.140:80:100,192.168.1.229:80:100,192.168.39.115:80:100,192.168.3.62:80:100,192.168.41.37:80:100,192.168.34.87:80:100,192.168.2.251:80:100,192.168.34.75:80:100,192.168.17.130:80:100,192.168.39.105:80:100,192.168.58.189:80:100,192.168.29.188:80:100,192.168.13.130:80:100,192.168.3.97:80:100,192.168.57.82:80:100,192.168.37.1:80:100,192.168.19.40:80:100,192.168.2.197:80:100,192.168.7.94:80:100,192.168.11.112:80:100,192.168.26.139:80:100,192.168.21.25:80:100,192.168.50.207:80:100,192.168.14.106:80:100,192.168.29.166:80:100,192.168.9.152:80:100,192.168.22.147:80:100,192.168.29.242:80:100,192.168.43.249:80:100,192.168.5.64:80:100,192.168.50.232:80:100,192.168.6.60:80:100,192.168.11.246:80:100,192.168.6.42:80:100,192.168.51.136:80:100,192.168.47.137:80:100,192.168.1.173:80:100,192.168.50.7:80:100,192.168.42.161:80:100,192.168.54.95:80:100,192.168.33.169:80:100,192.168.9.23:80:100,192.168.11.62:80:100,192.168.26.4:80:100,192.168.11.235:80:100,192.168.18.233:80:100,192.168.2.218:80:100,192.168.15.210:80:100,192.168.33.6:80:100,192.168.34.13:80:100,192.168.50.44:80:100,192.168.11.76:80:100,192.168.43.202:80:100,192.168.34.249:80:100,192.168.49.5:80:100,192.168.1.184:80:100,192.168.25.99:80:100,192.168.51.19:80:100,192.168.51.221:80:100,192.168.41.36:80:100,192.168.33.227:80:100,192.168.54.146:80:100,192.168.10.116:80:100,192.168.55.127:80:100,192.168.11.215:80:100,192.168.13.215:80:100,192.168.53.205:80:100,192.168.46.228:80:100,192.168.11.86:80:100,192.168.19.158:80:100,192.168.3.139:80:100,192.168.22.188:80:100,192.168.35.245:80:100,192.168.38.117:80:100,192.168.22.33:80:100,192.168.13.29:80:100,192.168.11.38:80:100,192.168.25.215:80:100,192.168.7.177:80:100",
+            "vip":"192.168.101.82"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.117:80:100,192.168.50.71:80:100,192.168.11.140:80:100,192.168.6.65:80:100,192.168.33.64:80:100,192.168.5.159:80:100,192.168.5.246:80:100,192.168.43.244:80:100,192.168.30.234:80:100,192.168.9.191:80:100,192.168.2.6:80:100,192.168.35.208:80:100,192.168.7.87:80:100,192.168.18.147:80:100,192.168.21.185:80:100,192.168.23.194:80:100,192.168.34.225:80:100,192.168.50.115:80:100",
+            "vip":"192.168.102.5"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.147:80:100,192.168.30.195:80:100,192.168.17.189:80:100,192.168.31.19:80:100,192.168.21.157:80:100,192.168.26.186:80:100,192.168.23.210:80:100",
+            "vip":"192.168.102.166"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.196:80:100,192.168.6.5:80:100,192.168.15.121:80:100,192.168.58.164:80:100,192.168.5.162:80:100,192.168.23.242:80:100,192.168.38.113:80:100,192.168.59.25:80:100,192.168.41.20:80:100,192.168.1.151:80:100,192.168.5.187:80:100,192.168.19.84:80:100,192.168.3.105:80:100,192.168.29.89:80:100,192.168.11.243:80:100,192.168.10.193:80:100,192.168.42.176:80:100,192.168.43.170:80:100,192.168.42.129:80:100,192.168.55.11:80:100,192.168.54.53:80:100,192.168.29.132:80:100,192.168.23.221:80:100,192.168.3.96:80:100,192.168.3.29:80:100,192.168.51.78:80:100,192.168.42.233:80:100,192.168.35.41:80:100,192.168.41.40:80:100,192.168.7.10:80:100,192.168.27.11:80:100,192.168.6.211:80:100,192.168.31.143:80:100,192.168.34.207:80:100,192.168.45.235:80:100,192.168.11.114:80:100,192.168.53.158:80:100,192.168.19.159:80:100,192.168.46.101:80:100,192.168.58.122:80:100,192.168.15.177:80:100,192.168.33.253:80:100,192.168.46.212:80:100,192.168.21.242:80:100,192.168.50.227:80:100,192.168.18.197:80:100,192.168.9.126:80:100,192.168.19.61:80:100,192.168.49.231:80:100,192.168.55.219:80:100,192.168.39.247:80:100",
+            "vip":"192.168.102.33"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.65:80:100,192.168.11.20:80:100,192.168.55.241:80:100",
+            "vip":"192.168.102.92"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.109:80:100,192.168.14.226:80:100,192.168.42.115:80:100",
+            "vip":"192.168.101.191"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.132:80:100,192.168.55.248:80:100,192.168.46.105:80:100,192.168.18.124:80:100,192.168.7.69:80:100,192.168.9.30:80:100,192.168.34.181:80:100,192.168.25.35:80:100,192.168.45.239:80:100,192.168.29.73:80:100,192.168.57.81:80:100,192.168.31.119:80:100,192.168.57.248:80:100,192.168.14.183:80:100,192.168.45.6:80:100",
+            "vip":"192.168.102.170"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.1:80:100,192.168.41.135:80:100,192.168.21.206:80:100,192.168.58.5:80:100,192.168.50.143:80:100,192.168.10.157:80:100,192.168.49.243:80:100,192.168.53.173:80:100,192.168.22.153:80:100,192.168.54.17:80:100,192.168.59.237:80:100,192.168.50.66:80:100,192.168.27.151:80:100,192.168.46.65:80:100,192.168.54.139:80:100,192.168.37.172:80:100,192.168.31.115:80:100,192.168.18.78:80:100,192.168.26.96:80:100,192.168.14.27:80:100,192.168.55.73:80:100,192.168.7.150:80:100,192.168.51.101:80:100,192.168.14.226:80:100,192.168.6.6:80:100,192.168.13.92:80:100,192.168.43.167:80:100,192.168.3.214:80:100,192.168.6.92:80:100,192.168.47.27:80:100,192.168.38.57:80:100,192.168.57.117:80:100,192.168.2.20:80:100,192.168.37.111:80:100,192.168.5.76:80:100,192.168.13.52:80:100,192.168.37.72:80:100,192.168.14.10:80:100,192.168.15.58:80:100,192.168.49.198:80:100,192.168.23.87:80:100,192.168.29.177:80:100,192.168.54.188:80:100,192.168.47.206:80:100,192.168.38.224:80:100,192.168.11.23:80:100,192.168.15.123:80:100,192.168.17.238:80:100,192.168.10.52:80:100,192.168.9.60:80:100,192.168.15.27:80:100,192.168.27.207:80:100,192.168.57.51:80:100,192.168.57.141:80:100,192.168.42.236:80:100,192.168.42.17:80:100,192.168.22.71:80:100,192.168.30.93:80:100,192.168.18.150:80:100,192.168.29.29:80:100,192.168.18.239:80:100,192.168.7.136:80:100,192.168.53.5:80:100,192.168.29.190:80:100,192.168.15.31:80:100,192.168.29.38:80:100,192.168.57.204:80:100,192.168.29.84:80:100,192.168.13.8:80:100,192.168.39.5:80:100,192.168.18.75:80:100,192.168.19.3:80:100,192.168.50.247:80:100,192.168.54.103:80:100,192.168.5.156:80:100,192.168.10.198:80:100,192.168.7.66:80:100,192.168.21.167:80:100,192.168.39.170:80:100,192.168.3.53:80:100,192.168.9.198:80:100,192.168.7.193:80:100,192.168.19.128:80:100,192.168.49.171:80:100,192.168.54.148:80:100,192.168.17.60:80:100,192.168.17.217:80:100,192.168.6.5:80:100,192.168.19.174:80:100,192.168.18.124:80:100,192.168.43.228:80:100,192.168.23.26:80:100,192.168.51.163:80:100,192.168.25.118:80:100,192.168.10.123:80:100,192.168.51.212:80:100,192.168.25.142:80:100,192.168.43.77:80:100,192.168.49.247:80:100,192.168.19.210:80:100,192.168.11.3:80:100,192.168.33.81:80:100,192.168.23.54:80:100,192.168.50.62:80:100,192.168.18.242:80:100,192.168.59.101:80:100,192.168.38.15:80:100,192.168.41.226:80:100,192.168.6.181:80:100,192.168.15.20:80:100,192.168.55.107:80:100,192.168.38.63:80:100,192.168.25.49:80:100,192.168.25.192:80:100,192.168.2.99:80:100,192.168.9.204:80:100,192.168.25.85:80:100,192.168.22.219:80:100,192.168.10.28:80:100,192.168.45.64:80:100,192.168.58.25:80:100,192.168.31.43:80:100,192.168.51.154:80:100,192.168.26.212:80:100,192.168.58.56:80:100,192.168.14.83:80:100,192.168.25.11:80:100,192.168.6.244:80:100,192.168.14.167:80:100,192.168.46.20:80:100,192.168.59.179:80:100,192.168.49.237:80:100,192.168.15.18:80:100,192.168.42.41:80:100,192.168.35.159:80:100,192.168.26.21:80:100,192.168.29.97:80:100,192.168.38.190:80:100,192.168.38.84:80:100,192.168.6.53:80:100,192.168.26.119:80:100,192.168.9.72:80:100,192.168.59.196:80:100,192.168.38.76:80:100,192.168.1.179:80:100,192.168.33.45:80:100,192.168.41.93:80:100,192.168.39.40:80:100,192.168.41.3:80:100,192.168.27.146:80:100,192.168.19.172:80:100,192.168.7.225:80:100,192.168.31.137:80:100,192.168.55.27:80:100,192.168.11.20:80:100,192.168.6.223:80:100,192.168.35.238:80:100,192.168.19.170:80:100,192.168.6.115:80:100,192.168.57.20:80:100,192.168.9.124:80:100,192.168.39.179:80:100,192.168.7.54:80:100,192.168.58.7:80:100,192.168.29.39:80:100,192.168.59.102:80:100,192.168.31.228:80:100,192.168.3.144:80:100,192.168.39.25:80:100,192.168.37.122:80:100,192.168.53.67:80:100,192.168.22.131:80:100,192.168.5.252:80:100",
+            "vip":"192.168.102.233"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.161:80:100,192.168.26.195:80:100",
+            "vip":"192.168.101.18"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.240:80:100,192.168.27.197:80:100,192.168.6.18:80:100,192.168.54.20:80:100,192.168.45.187:80:100,192.168.13.74:80:100,192.168.46.23:80:100,192.168.9.188:80:100",
+            "vip":"192.168.101.42"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.235:80:100,192.168.39.231:80:100,192.168.33.188:80:100,192.168.9.90:80:100,192.168.18.248:80:100,192.168.3.132:80:100,192.168.31.34:80:100,192.168.34.96:80:100,192.168.49.112:80:100,192.168.27.242:80:100,192.168.27.185:80:100,192.168.42.221:80:100,192.168.59.42:80:100,192.168.38.90:80:100,192.168.50.65:80:100,192.168.29.67:80:100,192.168.18.168:80:100,192.168.41.69:80:100,192.168.35.137:80:100,192.168.47.147:80:100,192.168.10.237:80:100,192.168.15.38:80:100,192.168.23.191:80:100,192.168.37.141:80:100,192.168.18.194:80:100,192.168.18.21:80:100,192.168.7.222:80:100,192.168.46.78:80:100,192.168.9.97:80:100,192.168.58.40:80:100,192.168.17.2:80:100,192.168.46.156:80:100,192.168.6.202:80:100,192.168.7.37:80:100,192.168.13.22:80:100,192.168.18.250:80:100,192.168.19.214:80:100,192.168.39.13:80:100,192.168.41.43:80:100,192.168.5.90:80:100,192.168.47.132:80:100,192.168.13.236:80:100,192.168.38.19:80:100,192.168.6.235:80:100,192.168.58.122:80:100,192.168.42.204:80:100,192.168.42.94:80:100,192.168.30.84:80:100,192.168.13.93:80:100,192.168.27.62:80:100,192.168.45.73:80:100,192.168.34.84:80:100,192.168.33.22:80:100,192.168.46.198:80:100,192.168.59.88:80:100,192.168.58.188:80:100,192.168.46.132:80:100,192.168.41.226:80:100,192.168.11.10:80:100,192.168.55.51:80:100,192.168.58.22:80:100,192.168.10.179:80:100,192.168.51.182:80:100,192.168.51.129:80:100,192.168.57.156:80:100,192.168.53.33:80:100,192.168.58.25:80:100,192.168.59.146:80:100,192.168.11.217:80:100,192.168.1.166:80:100,192.168.58.197:80:100,192.168.46.57:80:100,192.168.50.218:80:100,192.168.29.163:80:100,192.168.26.33:80:100,192.168.5.103:80:100,192.168.6.216:80:100,192.168.38.155:80:100,192.168.57.18:80:100,192.168.21.73:80:100,192.168.5.62:80:100,192.168.22.72:80:100,192.168.43.246:80:100,192.168.25.163:80:100,192.168.25.58:80:100,192.168.15.100:80:100",
+            "vip":"111.13.235.187"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.1.150:80:100,192.168.46.139:80:100,192.168.37.91:80:100,192.168.25.158:80:100",
+            "vip":"192.168.101.5"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.46.156:80:100,192.168.35.136:80:100,192.168.57.127:80:100,192.168.22.11:80:100,192.168.27.75:80:100,192.168.22.222:80:100,192.168.1.144:80:100,192.168.3.166:80:100",
+            "vip":"111.13.235.174"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.236:80:100,192.168.7.36:80:100,192.168.19.20:80:100,192.168.51.225:80:100",
+            "vip":"192.168.102.110"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.77:80:100",
+            "vip":"111.13.235.141"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.117:80:100,192.168.26.227:80:100,192.168.51.168:80:100,192.168.39.218:80:100,192.168.22.103:80:100,192.168.10.129:80:100,192.168.45.157:80:100,192.168.26.113:80:100,192.168.39.62:80:100,192.168.50.217:80:100,192.168.14.177:80:100,192.168.39.197:80:100,192.168.49.45:80:100,192.168.57.72:80:100,192.168.49.61:80:100,192.168.9.202:80:100,192.168.46.104:80:100",
+            "vip":"192.168.101.150"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.35.253:80:100",
+            "vip":"192.168.101.199"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.45.234:80:100,192.168.30.157:80:100,192.168.18.163:80:100,192.168.49.199:80:100,192.168.54.146:80:100,192.168.45.67:80:100",
+            "vip":"111.13.235.130"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.14.192:80:100,192.168.46.92:80:100,192.168.18.168:80:100",
+            "vip":"192.168.102.94"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.117:80:100,192.168.31.163:80:100",
+            "vip":"192.168.102.54"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.119:80:100,192.168.30.151:80:100,192.168.18.18:80:100,192.168.49.80:80:100,192.168.3.54:80:100,192.168.10.54:80:100",
+            "vip":"192.168.102.251"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.22.188:80:100,192.168.55.1:80:100,192.168.37.7:80:100,192.168.22.56:80:100,192.168.34.202:80:100,192.168.19.177:80:100,192.168.14.111:80:100,192.168.43.9:80:100,192.168.7.120:80:100,192.168.29.116:80:100,192.168.59.1:80:100,192.168.1.139:80:100",
+            "vip":"111.13.235.220"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.212:80:100",
+            "vip":"111.13.235.114"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.91:80:100",
+            "vip":"192.168.102.137"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.26.221:80:100,192.168.33.108:80:100,192.168.46.229:80:100,192.168.39.244:80:100,192.168.47.241:80:100,192.168.1.226:80:100,192.168.10.55:80:100",
+            "vip":"111.13.235.241"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.54:80:100,192.168.25.135:80:100",
+            "vip":"111.13.235.89"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.141:80:100",
+            "vip":"111.13.235.135"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.207:80:100,192.168.29.84:80:100,192.168.49.46:80:100,192.168.23.140:80:100,192.168.47.209:80:100,192.168.53.140:80:100,192.168.50.22:80:100,192.168.31.238:80:100,192.168.42.100:80:100",
+            "vip":"192.168.102.109"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.178:80:100",
+            "vip":"192.168.102.60"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.223:80:100",
+            "vip":"111.13.235.225"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.79:80:100,192.168.29.96:80:100,192.168.11.147:80:100",
+            "vip":"192.168.102.189"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.215:80:100,192.168.23.161:80:100,192.168.41.57:80:100,192.168.34.17:80:100,192.168.31.146:80:100,192.168.38.252:80:100,192.168.43.219:80:100,192.168.54.204:80:100,192.168.55.5:80:100,192.168.7.3:80:100,192.168.19.242:80:100,192.168.10.12:80:100,192.168.57.119:80:100,192.168.35.145:80:100,192.168.55.249:80:100,192.168.27.36:80:100,192.168.25.79:80:100,192.168.30.239:80:100,192.168.58.226:80:100,192.168.34.26:80:100,192.168.47.176:80:100,192.168.38.43:80:100,192.168.54.15:80:100,192.168.51.47:80:100,192.168.55.26:80:100,192.168.35.48:80:100,192.168.6.219:80:100,192.168.3.174:80:100,192.168.14.5:80:100,192.168.50.222:80:100,192.168.39.118:80:100,192.168.55.111:80:100,192.168.9.12:80:100,192.168.19.53:80:100,192.168.58.81:80:100,192.168.10.75:80:100,192.168.29.83:80:100,192.168.37.82:80:100,192.168.1.29:80:100,192.168.1.247:80:100,192.168.29.116:80:100,192.168.47.216:80:100,192.168.10.247:80:100,192.168.50.43:80:100,192.168.5.215:80:100,192.168.31.117:80:100,192.168.15.121:80:100,192.168.6.208:80:100,192.168.33.179:80:100,192.168.39.57:80:100,192.168.27.229:80:100,192.168.57.76:80:100,192.168.3.20:80:100,192.168.51.22:80:100,192.168.6.70:80:100,192.168.55.70:80:100,192.168.55.213:80:100,192.168.11.116:80:100,192.168.41.159:80:100,192.168.22.217:80:100,192.168.25.243:80:100,192.168.10.236:80:100,192.168.45.164:80:100,192.168.42.122:80:100,192.168.51.156:80:100,192.168.9.30:80:100,192.168.58.176:80:100,192.168.46.114:80:100,192.168.23.181:80:100,192.168.19.140:80:100,192.168.6.1:80:100,192.168.9.164:80:100,192.168.9.207:80:100,192.168.23.92:80:100,192.168.45.80:80:100,192.168.1.232:80:100,192.168.54.184:80:100,192.168.37.154:80:100,192.168.55.175:80:100,192.168.23.216:80:100,192.168.33.169:80:100,192.168.54.237:80:100,192.168.59.27:80:100,192.168.53.101:80:100,192.168.27.239:80:100,192.168.37.99:80:100,192.168.59.162:80:100,192.168.3.149:80:100,192.168.58.254:80:100,192.168.25.235:80:100,192.168.50.193:80:100,192.168.1.63:80:100,192.168.38.209:80:100,192.168.39.40:80:100,192.168.45.55:80:100,192.168.50.87:80:100,192.168.5.65:80:100,192.168.35.47:80:100,192.168.22.53:80:100,192.168.43.201:80:100,192.168.17.35:80:100,192.168.3.71:80:100,192.168.14.24:80:100,192.168.51.209:80:100,192.168.41.165:80:100,192.168.7.103:80:100",
+            "vip":"192.168.101.255"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.165:80:100",
+            "vip":"111.13.235.116"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.55:80:100",
+            "vip":"111.13.235.101"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.66:80:100",
+            "vip":"192.168.101.241"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.33:80:100,192.168.9.1:80:100,192.168.7.161:80:100,192.168.19.118:80:100,192.168.45.83:80:100,192.168.26.121:80:100,192.168.2.115:80:100,192.168.42.13:80:100,192.168.7.233:80:100,192.168.35.219:80:100,192.168.38.48:80:100,192.168.53.250:80:100,192.168.1.66:80:100,192.168.6.124:80:100,192.168.42.179:80:100,192.168.33.230:80:100,192.168.53.91:80:100,192.168.42.228:80:100,192.168.50.56:80:100,192.168.55.106:80:100,192.168.21.66:80:100,192.168.43.146:80:100,192.168.21.190:80:100,192.168.25.66:80:100,192.168.43.14:80:100,192.168.39.10:80:100,192.168.55.53:80:100,192.168.34.142:80:100,192.168.58.227:80:100,192.168.22.212:80:100,192.168.33.132:80:100,192.168.53.162:80:100,192.168.1.4:80:100,192.168.51.137:80:100,192.168.50.181:80:100,192.168.33.219:80:100,192.168.41.29:80:100,192.168.26.115:80:100,192.168.58.12:80:100,192.168.45.1:80:100,192.168.57.229:80:100,192.168.31.220:80:100,192.168.11.84:80:100,192.168.9.44:80:100,192.168.10.1:80:100,192.168.1.224:80:100,192.168.45.84:80:100,192.168.33.36:80:100,192.168.31.157:80:100,192.168.49.103:80:100,192.168.7.82:80:100,192.168.43.67:80:100,192.168.21.107:80:100,192.168.38.77:80:100,192.168.27.170:80:100,192.168.35.181:80:100,192.168.42.79:80:100,192.168.19.77:80:100,192.168.14.142:80:100,192.168.13.104:80:100,192.168.25.135:80:100,192.168.42.143:80:100,192.168.38.177:80:100,192.168.30.15:80:100,192.168.35.155:80:100,192.168.42.85:80:100,192.168.34.25:80:100,192.168.3.67:80:100,192.168.47.114:80:100,192.168.26.85:80:100,192.168.23.129:80:100,192.168.13.116:80:100,192.168.46.95:80:100,192.168.13.187:80:100,192.168.53.243:80:100,192.168.7.192:80:100,192.168.57.139:80:100,192.168.29.217:80:100,192.168.53.106:80:100,192.168.30.133:80:100,192.168.11.8:80:100,192.168.19.188:80:100,192.168.3.173:80:100,192.168.55.132:80:100,192.168.19.71:80:100",
+            "vip":"192.168.101.87"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.135:80:100,192.168.3.46:80:100,192.168.3.83:80:100",
+            "vip":"111.13.235.74"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.14.199:80:100,192.168.34.211:80:100,192.168.34.194:80:100",
+            "vip":"192.168.102.15"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.182:80:100,192.168.27.248:80:100,192.168.55.104:80:100,192.168.38.123:80:100,192.168.50.47:80:100",
+            "vip":"192.168.101.147"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.221:80:100,192.168.50.177:80:100,192.168.5.168:80:100",
+            "vip":"192.168.101.173"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.110:80:100,192.168.46.88:80:100,192.168.14.69:80:100,192.168.57.137:80:100",
+            "vip":"192.168.101.67"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.167:80:100,192.168.34.218:80:100,192.168.21.149:80:100,192.168.31.73:80:100,192.168.9.161:80:100,192.168.35.78:80:100,192.168.38.125:80:100,192.168.53.26:80:100,192.168.11.116:80:100,192.168.47.147:80:100,192.168.14.254:80:100,192.168.43.196:80:100,192.168.57.25:80:100,192.168.38.45:80:100,192.168.17.104:80:100,192.168.57.217:80:100,192.168.3.53:80:100,192.168.58.175:80:100,192.168.59.158:80:100,192.168.42.93:80:100,192.168.22.200:80:100,192.168.45.119:80:100,192.168.35.197:80:100,192.168.51.209:80:100,192.168.19.135:80:100,192.168.6.37:80:100,192.168.46.32:80:100,192.168.17.44:80:100,192.168.49.24:80:100,192.168.34.251:80:100,192.168.46.65:80:100,192.168.41.49:80:100,192.168.30.210:80:100,192.168.45.232:80:100,192.168.33.142:80:100,192.168.25.197:80:100,192.168.50.98:80:100,192.168.33.141:80:100,192.168.14.9:80:100,192.168.15.231:80:100,192.168.37.209:80:100,192.168.21.219:80:100,192.168.58.203:80:100,192.168.34.130:80:100,192.168.59.52:80:100,192.168.5.209:80:100,192.168.13.208:80:100,192.168.46.182:80:100,192.168.47.25:80:100,192.168.42.177:80:100,192.168.59.218:80:100,192.168.2.241:80:100,192.168.33.11:80:100,192.168.13.106:80:100,192.168.15.60:80:100,192.168.5.156:80:100,192.168.21.167:80:100,192.168.22.98:80:100,192.168.19.234:80:100,192.168.57.92:80:100,192.168.2.29:80:100,192.168.2.122:80:100,192.168.5.100:80:100,192.168.5.190:80:100,192.168.9.193:80:100,192.168.13.192:80:100,192.168.14.2:80:100,192.168.54.96:80:100,192.168.42.103:80:100,192.168.11.20:80:100,192.168.41.155:80:100,192.168.7.111:80:100,192.168.30.8:80:100,192.168.47.242:80:100,192.168.38.138:80:100,192.168.11.254:80:100,192.168.33.20:80:100,192.168.9.175:80:100,192.168.31.42:80:100",
+            "vip":"111.13.235.173"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.23.166:80:100,192.168.33.32:80:100",
+            "vip":"192.168.102.22"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.191:80:100",
+            "vip":"192.168.102.184"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.3:80:100,192.168.3.142:80:100,192.168.45.215:80:100,192.168.38.180:80:100,192.168.30.94:80:100,192.168.45.57:80:100,192.168.21.167:80:100,192.168.41.40:80:100,192.168.47.33:80:100,192.168.19.15:80:100,192.168.33.139:80:100,192.168.26.252:80:100,192.168.53.146:80:100,192.168.37.63:80:100,192.168.39.35:80:100",
+            "vip":"192.168.101.30"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.51.227:80:100,192.168.43.44:80:100",
+            "vip":"192.168.101.111"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.139:80:100,192.168.59.153:80:100,192.168.49.32:80:100,192.168.22.65:80:100,192.168.58.154:80:100,192.168.17.70:80:100,192.168.55.214:80:100,192.168.9.152:80:100,192.168.51.32:80:100,192.168.9.115:80:100,192.168.33.189:80:100,192.168.50.70:80:100,192.168.34.118:80:100",
+            "vip":"192.168.101.50"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.197:80:100,192.168.29.164:80:100,192.168.13.23:80:100,192.168.21.167:80:100",
+            "vip":"192.168.102.47"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.69:80:100,192.168.23.204:80:100,192.168.38.128:80:100,192.168.10.147:80:100,192.168.29.90:80:100,192.168.3.41:80:100,192.168.59.8:80:100,192.168.2.160:80:100,192.168.51.29:80:100",
+            "vip":"192.168.102.145"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.160:80:100,192.168.38.53:80:100,192.168.57.7:80:100,192.168.27.204:80:100,192.168.33.144:80:100,192.168.51.170:80:100,192.168.3.24:80:100,192.168.30.70:80:100,192.168.27.32:80:100,192.168.39.48:80:100,192.168.27.221:80:100,192.168.41.26:80:100,192.168.39.254:80:100,192.168.18.62:80:100,192.168.37.45:80:100,192.168.13.57:80:100,192.168.9.200:80:100,192.168.55.16:80:100,192.168.54.1:80:100,192.168.59.135:80:100,192.168.58.14:80:100,192.168.41.97:80:100,192.168.9.192:80:100,192.168.19.219:80:100,192.168.55.100:80:100,192.168.10.12:80:100,192.168.31.151:80:100,192.168.55.189:80:100,192.168.34.131:80:100,192.168.59.254:80:100,192.168.29.209:80:100,192.168.21.134:80:100,192.168.25.218:80:100,192.168.39.248:80:100,192.168.11.242:80:100,192.168.33.176:80:100,192.168.43.54:80:100,192.168.17.187:80:100,192.168.41.4:80:100,192.168.3.67:80:100,192.168.38.134:80:100,192.168.58.228:80:100,192.168.55.161:80:100,192.168.22.87:80:100,192.168.29.72:80:100,192.168.45.20:80:100,192.168.10.170:80:100,192.168.15.252:80:100,192.168.5.189:80:100,192.168.14.99:80:100,192.168.55.132:80:100,192.168.1.115:80:100,192.168.21.84:80:100,192.168.14.80:80:100,192.168.59.106:80:100,192.168.5.162:80:100,192.168.29.109:80:100,192.168.1.3:80:100,192.168.46.180:80:100,192.168.27.101:80:100,192.168.5.187:80:100,192.168.26.187:80:100,192.168.11.184:80:100,192.168.42.96:80:100,192.168.49.90:80:100,192.168.14.86:80:100,192.168.6.182:80:100,192.168.54.161:80:100,192.168.3.79:80:100,192.168.45.90:80:100,192.168.55.193:80:100,192.168.43.27:80:100,192.168.14.6:80:100,192.168.25.211:80:100,192.168.55.65:80:100,192.168.43.74:80:100,192.168.21.36:80:100,192.168.54.70:80:100,192.168.22.94:80:100,192.168.43.182:80:100,192.168.39.156:80:100,192.168.11.191:80:100,192.168.35.241:80:100,192.168.27.166:80:100,192.168.19.162:80:100,192.168.27.167:80:100,192.168.34.152:80:100,192.168.22.55:80:100,192.168.34.5:80:100,192.168.47.171:80:100,192.168.14.41:80:100,192.168.39.51:80:100,192.168.7.101:80:100,192.168.5.138:80:100,192.168.17.123:80:100,192.168.7.11:80:100,192.168.57.162:80:100,192.168.39.237:80:100,192.168.38.189:80:100,192.168.45.199:80:100,192.168.5.86:80:100,192.168.29.95:80:100,192.168.14.118:80:100,192.168.47.245:80:100,192.168.26.97:80:100,192.168.49.199:80:100,192.168.59.208:80:100,192.168.55.164:80:100,192.168.39.97:80:100,192.168.59.174:80:100,192.168.10.149:80:100,192.168.58.218:80:100,192.168.42.70:80:100,192.168.10.191:80:100,192.168.58.91:80:100,192.168.38.112:80:100,192.168.55.135:80:100,192.168.21.90:80:100,192.168.38.126:80:100,192.168.6.174:80:100,192.168.5.220:80:100,192.168.29.196:80:100,192.168.27.55:80:100,192.168.54.232:80:100,192.168.6.53:80:100,192.168.30.2:80:100,192.168.43.164:80:100,192.168.30.19:80:100,192.168.27.90:80:100,192.168.2.254:80:100,192.168.49.114:80:100,192.168.17.18:80:100,192.168.5.85:80:100,192.168.55.166:80:100,192.168.49.186:80:100,192.168.37.68:80:100,192.168.51.159:80:100,192.168.1.52:80:100,192.168.1.179:80:100,192.168.3.229:80:100,192.168.11.180:80:100,192.168.27.80:80:100,192.168.42.59:80:100,192.168.29.14:80:100,192.168.45.212:80:100,192.168.46.239:80:100,192.168.41.23:80:100,192.168.46.83:80:100,192.168.39.131:80:100,192.168.58.143:80:100,192.168.53.242:80:100,192.168.13.197:80:100,192.168.25.13:80:100,192.168.58.18:80:100,192.168.47.162:80:100,192.168.55.99:80:100,192.168.14.66:80:100,192.168.1.39:80:100,192.168.30.31:80:100,192.168.25.125:80:100,192.168.55.117:80:100,192.168.6.238:80:100,192.168.22.33:80:100,192.168.49.60:80:100,192.168.37.119:80:100,192.168.42.78:80:100,192.168.26.208:80:100",
+            "vip":"192.168.101.141"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.195:80:100,192.168.51.151:80:100,192.168.2.85:80:100,192.168.37.121:80:100,192.168.37.156:80:100,192.168.39.18:80:100,192.168.57.43:80:100,192.168.17.252:80:100,192.168.11.41:80:100,192.168.46.19:80:100,192.168.57.126:80:100,192.168.59.44:80:100,192.168.25.229:80:100,192.168.10.137:80:100,192.168.50.129:80:100,192.168.15.44:80:100,192.168.30.185:80:100,192.168.38.1:80:100,192.168.43.76:80:100,192.168.41.168:80:100,192.168.29.96:80:100,192.168.26.156:80:100,192.168.37.197:80:100,192.168.21.132:80:100,192.168.14.253:80:100,192.168.3.84:80:100,192.168.21.148:80:100,192.168.14.246:80:100,192.168.41.19:80:100,192.168.33.155:80:100,192.168.10.114:80:100,192.168.41.127:80:100,192.168.49.207:80:100",
+            "vip":"192.168.101.130"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.25.161:80:100,192.168.9.21:80:100",
+            "vip":"192.168.102.253"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.54.56:80:100,192.168.15.62:80:100,192.168.13.60:80:100,192.168.53.100:80:100,192.168.21.157:80:100,192.168.57.18:80:100,192.168.22.91:80:100",
+            "vip":"192.168.101.142"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.241:80:100",
+            "vip":"192.168.102.77"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.43.189:80:100,192.168.57.129:80:100,192.168.58.48:80:100,192.168.39.218:80:100,192.168.39.91:80:100,192.168.15.140:80:100,192.168.42.57:80:100",
+            "vip":"111.13.235.80"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.252:80:100,192.168.21.240:80:100,192.168.42.244:80:100",
+            "vip":"192.168.102.198"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.148:80:100,192.168.5.108:80:100,192.168.41.179:80:100,192.168.29.127:80:100,192.168.1.212:80:100",
+            "vip":"111.13.235.133"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.252:80:100,192.168.26.241:80:100,192.168.53.48:80:100,192.168.11.240:80:100,192.168.22.33:80:100,192.168.59.218:80:100,192.168.7.3:80:100,192.168.50.180:80:100",
+            "vip":"192.168.102.7"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.86:80:100,192.168.26.121:80:100,192.168.5.14:80:100,192.168.58.247:80:100,192.168.18.9:80:100,192.168.13.94:80:100,192.168.59.90:80:100,192.168.55.220:80:100",
+            "vip":"192.168.102.249"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.57:80:100,192.168.3.161:80:100,192.168.42.131:80:100,192.168.59.122:80:100,192.168.43.28:80:100,192.168.58.66:80:100,192.168.9.222:80:100,192.168.59.207:80:100,192.168.21.54:80:100",
+            "vip":"192.168.101.243"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.189:80:100,192.168.55.215:80:100,192.168.22.87:80:100,192.168.47.121:80:100,192.168.30.169:80:100,192.168.2.128:80:100,192.168.46.122:80:100",
+            "vip":"192.168.102.35"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.81:80:100,192.168.30.33:80:100",
+            "vip":"111.13.235.204"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.23:80:100",
+            "vip":"192.168.102.164"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.51.63:80:100,192.168.9.157:80:100,192.168.27.171:80:100",
+            "vip":"111.13.235.213"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.218:80:100,192.168.55.61:80:100,192.168.27.8:80:100,192.168.42.10:80:100,192.168.9.151:80:100,192.168.1.90:80:100,192.168.39.225:80:100,192.168.9.163:80:100,192.168.23.83:80:100,192.168.21.133:80:100,192.168.17.184:80:100,192.168.11.4:80:100,192.168.23.88:80:100,192.168.23.152:80:100,192.168.33.53:80:100,192.168.18.146:80:100,192.168.1.11:80:100,192.168.22.141:80:100,192.168.21.54:80:100",
+            "vip":"192.168.102.247"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.8:80:100,192.168.29.6:80:100,192.168.5.170:80:100,192.168.31.197:80:100,192.168.18.63:80:100,192.168.15.57:80:100,192.168.49.31:80:100,192.168.27.233:80:100,192.168.50.82:80:100,192.168.29.188:80:100,192.168.2.188:80:100,192.168.26.22:80:100,192.168.54.141:80:100",
+            "vip":"192.168.102.9"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.250:80:100,192.168.21.250:80:100,192.168.7.189:80:100,192.168.43.58:80:100",
+            "vip":"192.168.102.213"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.35.220:80:100,192.168.47.146:80:100,192.168.50.195:80:100",
+            "vip":"192.168.102.12"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.57.135:80:100,192.168.14.223:80:100,192.168.31.2:80:100,192.168.59.205:80:100",
+            "vip":"192.168.102.129"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.17.22:80:100,192.168.11.69:80:100,192.168.5.230:80:100,192.168.21.51:80:100,192.168.14.109:80:100",
+            "vip":"111.13.235.211"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.23.146:80:100,192.168.37.46:80:100",
+            "vip":"192.168.102.236"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.110:80:100,192.168.1.188:80:100,192.168.42.252:80:100,192.168.58.190:80:100,192.168.41.157:80:100,192.168.45.245:80:100,192.168.21.145:80:100",
+            "vip":"192.168.102.209"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.22.1:80:100",
+            "vip":"192.168.102.40"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.54:80:100,192.168.33.136:80:100,192.168.17.225:80:100,192.168.59.169:80:100,192.168.41.41:80:100,192.168.35.69:80:100,192.168.9.53:80:100,192.168.2.191:80:100,192.168.50.34:80:100,192.168.7.130:80:100,192.168.46.183:80:100,192.168.30.21:80:100,192.168.35.168:80:100",
+            "vip":"192.168.101.65"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.5:80:100,192.168.2.142:80:100,192.168.45.30:80:100,192.168.25.26:80:100,192.168.25.70:80:100,192.168.13.243:80:100,192.168.17.103:80:100,192.168.1.66:80:100,192.168.14.183:80:100,192.168.13.109:80:100,192.168.58.32:80:100,192.168.10.202:80:100,192.168.50.166:80:100,192.168.38.11:80:100,192.168.10.40:80:100,192.168.39.144:80:100,192.168.35.134:80:100,192.168.27.242:80:100,192.168.45.238:80:100,192.168.35.17:80:100,192.168.11.232:80:100,192.168.58.71:80:100,192.168.7.150:80:100,192.168.7.128:80:100,192.168.21.140:80:100,192.168.19.145:80:100,192.168.46.196:80:100,192.168.53.172:80:100,192.168.25.137:80:100,192.168.49.174:80:100,192.168.38.122:80:100,192.168.27.43:80:100,192.168.51.92:80:100,192.168.50.202:80:100,192.168.1.32:80:100,192.168.43.108:80:100,192.168.22.32:80:100,192.168.11.200:80:100,192.168.49.148:80:100,192.168.59.154:80:100,192.168.5.60:80:100",
+            "vip":"192.168.102.10"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.253:80:100,192.168.46.161:80:100,192.168.18.177:80:100,192.168.25.171:80:100,192.168.2.23:80:100",
+            "vip":"192.168.101.194"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.125:80:100,192.168.19.46:80:100,192.168.13.81:80:100,192.168.47.116:80:100",
+            "vip":"192.168.102.99"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.45.252:80:100,192.168.33.74:80:100,192.168.6.54:80:100,192.168.43.24:80:100",
+            "vip":"192.168.101.19"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.46.136:80:100,192.168.57.123:80:100,192.168.57.154:80:100,192.168.5.175:80:100,192.168.25.225:80:100,192.168.10.155:80:100",
+            "vip":"192.168.102.226"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.153:80:100,192.168.29.120:80:100,192.168.7.149:80:100,192.168.59.251:80:100,192.168.54.223:80:100,192.168.50.32:80:100,192.168.2.55:80:100,192.168.7.100:80:100,192.168.21.159:80:100,192.168.19.175:80:100,192.168.31.125:80:100,192.168.25.47:80:100,192.168.37.10:80:100,192.168.6.134:80:100,192.168.47.28:80:100,192.168.26.173:80:100,192.168.9.188:80:100,192.168.46.31:80:100,192.168.55.89:80:100,192.168.59.163:80:100,192.168.23.178:80:100,192.168.59.18:80:100,192.168.22.101:80:100,192.168.15.80:80:100,192.168.58.93:80:100,192.168.13.154:80:100,192.168.23.131:80:100,192.168.37.203:80:100,192.168.55.196:80:100,192.168.9.50:80:100,192.168.58.130:80:100,192.168.31.136:80:100,192.168.39.44:80:100,192.168.35.212:80:100,192.168.15.12:80:100,192.168.13.122:80:100,192.168.3.161:80:100,192.168.53.86:80:100,192.168.41.175:80:100,192.168.31.59:80:100,192.168.31.219:80:100,192.168.42.214:80:100,192.168.1.167:80:100,192.168.7.26:80:100,192.168.31.189:80:100,192.168.19.153:80:100,192.168.15.7:80:100,192.168.15.29:80:100,192.168.14.61:80:100,192.168.25.109:80:100,192.168.1.247:80:100,192.168.19.90:80:100,192.168.22.10:80:100,192.168.49.213:80:100,192.168.13.126:80:100,192.168.29.53:80:100,192.168.57.88:80:100,192.168.45.122:80:100,192.168.49.87:80:100,192.168.38.124:80:100,192.168.47.75:80:100,192.168.15.37:80:100,192.168.59.227:80:100,192.168.2.14:80:100,192.168.10.137:80:100,192.168.33.167:80:100,192.168.25.184:80:100,192.168.17.196:80:100,192.168.13.254:80:100,192.168.25.212:80:100,192.168.57.55:80:100,192.168.49.44:80:100,192.168.58.134:80:100,192.168.7.237:80:100,192.168.10.197:80:100,192.168.5.234:80:100,192.168.33.13:80:100,192.168.2.22:80:100,192.168.13.184:80:100,192.168.37.29:80:100,192.168.31.95:80:100,192.168.33.250:80:100,192.168.22.159:80:100,192.168.38.237:80:100,192.168.6.214:80:100,192.168.49.153:80:100,192.168.35.168:80:100,192.168.5.76:80:100,192.168.33.86:80:100,192.168.49.74:80:100,192.168.59.12:80:100,192.168.3.172:80:100,192.168.31.172:80:100,192.168.3.71:80:100,192.168.23.137:80:100,192.168.18.202:80:100",
+            "vip":"192.168.102.105"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.60:80:100,192.168.6.132:80:100,192.168.38.248:80:100,192.168.41.18:80:100,192.168.10.231:80:100,192.168.45.253:80:100,192.168.41.212:80:100,192.168.38.25:80:100,192.168.14.101:80:100",
+            "vip":"192.168.102.42"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.137:80:100,192.168.49.241:80:100,192.168.9.55:80:100,192.168.15.57:80:100,192.168.22.231:80:100,192.168.39.209:80:100,192.168.26.184:80:100",
+            "vip":"192.168.101.113"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.35.171:80:100,192.168.49.36:80:100",
+            "vip":"192.168.102.59"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.222:80:100,192.168.33.123:80:100,192.168.51.36:80:100,192.168.23.184:80:100,192.168.3.224:80:100,192.168.21.119:80:100,192.168.55.16:80:100,192.168.17.251:80:100,192.168.53.120:80:100",
+            "vip":"192.168.101.135"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.44:80:100,192.168.42.60:80:100,192.168.30.63:80:100",
+            "vip":"111.13.235.120"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.25.51:80:100,192.168.55.21:80:100,192.168.39.78:80:100,192.168.13.137:80:100,192.168.21.114:80:100,192.168.15.214:80:100,192.168.1.123:80:100,192.168.47.99:80:100,192.168.37.249:80:100,192.168.25.173:80:100,192.168.38.208:80:100",
+            "vip":"111.13.235.223"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.51.251:80:100,192.168.17.23:80:100,192.168.25.19:80:100",
+            "vip":"192.168.102.96"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.224:80:100,192.168.51.111:80:100,192.168.5.191:80:100",
+            "vip":"111.13.235.104"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.138:80:100,192.168.47.187:80:100,192.168.10.230:80:100,192.168.45.181:80:100,192.168.14.3:80:100,192.168.42.122:80:100,192.168.45.41:80:100,192.168.50.217:80:100,192.168.39.177:80:100,192.168.50.149:80:100,192.168.23.19:80:100,192.168.39.86:80:100,192.168.19.219:80:100,192.168.7.112:80:100,192.168.9.33:80:100",
+            "vip":"111.13.235.218"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.7.228:80:100,192.168.35.209:80:100",
+            "vip":"192.168.101.81"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.3:80:100,192.168.19.238:80:100,192.168.37.90:80:100,192.168.10.64:80:100,192.168.49.138:80:100,192.168.30.110:80:100,192.168.43.7:80:100,192.168.30.111:80:100",
+            "vip":"111.13.235.248"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.82:80:100,192.168.15.38:80:100,192.168.39.81:80:100,192.168.18.45:80:100,192.168.42.180:80:100,192.168.21.188:80:100,192.168.23.157:80:100,192.168.14.215:80:100,192.168.18.151:80:100,192.168.59.43:80:100,192.168.5.15:80:100,192.168.18.147:80:100,192.168.14.156:80:100,192.168.51.9:80:100,192.168.18.149:80:100,192.168.22.65:80:100,192.168.14.15:80:100,192.168.43.186:80:100,192.168.57.179:80:100,192.168.50.79:80:100,192.168.25.109:80:100,192.168.43.77:80:100,192.168.21.61:80:100,192.168.22.13:80:100,192.168.19.145:80:100,192.168.34.239:80:100,192.168.54.33:80:100,192.168.39.144:80:100,192.168.25.3:80:100,192.168.14.133:80:100,192.168.17.234:80:100,192.168.15.202:80:100,192.168.15.53:80:100,192.168.41.33:80:100,192.168.1.77:80:100,192.168.53.147:80:100,192.168.35.205:80:100,192.168.3.144:80:100,192.168.23.9:80:100,192.168.33.132:80:100,192.168.53.156:80:100,192.168.1.128:80:100,192.168.38.183:80:100,192.168.19.30:80:100,192.168.33.201:80:100",
+            "vip":"192.168.102.156"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.210:80:100,192.168.11.63:80:100,192.168.42.73:80:100,192.168.19.20:80:100",
+            "vip":"192.168.101.202"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.208:80:100,192.168.19.69:80:100,192.168.3.180:80:100",
+            "vip":"111.13.235.206"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.26.226:80:100,192.168.6.165:80:100,192.168.54.214:80:100",
+            "vip":"192.168.102.187"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.196:80:100,192.168.10.147:80:100,192.168.26.215:80:100,192.168.23.109:80:100,192.168.41.207:80:100,192.168.6.74:80:100,192.168.57.3:80:100",
+            "vip":"192.168.101.53"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.51:80:100,192.168.51.56:80:100,192.168.14.201:80:100,192.168.25.4:80:100",
+            "vip":"111.13.235.71"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.188:80:100,192.168.54.142:80:100,192.168.47.196:80:100,192.168.9.69:80:100,192.168.43.59:80:100,192.168.43.243:80:100,192.168.55.116:80:100,192.168.3.88:80:100,192.168.25.14:80:100,192.168.14.152:80:100,192.168.19.95:80:100,192.168.55.61:80:100,192.168.26.8:80:100,192.168.17.236:80:100,192.168.11.112:80:100,192.168.41.17:80:100,192.168.30.108:80:100,192.168.21.72:80:100,192.168.37.178:80:100,192.168.14.57:80:100,192.168.50.148:80:100,192.168.43.179:80:100,192.168.2.186:80:100,192.168.50.83:80:100,192.168.54.124:80:100",
+            "vip":"111.13.235.102"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.224:80:100,192.168.17.29:80:100,192.168.33.87:80:100,192.168.37.162:80:100",
+            "vip":"111.13.235.216"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.53:80:100,192.168.23.8:80:100,192.168.17.110:80:100,192.168.50.68:80:100,192.168.49.132:80:100,192.168.22.153:80:100,192.168.31.166:80:100,192.168.14.4:80:100,192.168.13.250:80:100,192.168.29.24:80:100,192.168.30.3:80:100,192.168.50.165:80:100,192.168.5.55:80:100,192.168.50.44:80:100,192.168.47.232:80:100,192.168.2.28:80:100,192.168.9.95:80:100,192.168.54.77:80:100,192.168.59.245:80:100,192.168.46.85:80:100,192.168.5.144:80:100,192.168.38.89:80:100,192.168.49.177:80:100,192.168.45.70:80:100,192.168.31.199:80:100,192.168.21.36:80:100,192.168.13.234:80:100,192.168.17.47:80:100,192.168.31.181:80:100,192.168.34.129:80:100,192.168.6.60:80:100,192.168.43.21:80:100,192.168.26.57:80:100,192.168.45.3:80:100,192.168.29.144:80:100,192.168.41.132:80:100,192.168.59.218:80:100,192.168.51.178:80:100,192.168.47.136:80:100,192.168.9.81:80:100,192.168.33.201:80:100",
+            "vip":"192.168.101.207"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.126:80:100,192.168.21.23:80:100,192.168.22.25:80:100,192.168.25.197:80:100,192.168.57.233:80:100,192.168.47.23:80:100,192.168.5.36:80:100,192.168.46.186:80:100",
+            "vip":"192.168.101.105"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.128:80:100,192.168.1.111:80:100,192.168.14.64:80:100,192.168.59.57:80:100,192.168.5.59:80:100,192.168.14.175:80:100,192.168.9.248:80:100",
+            "vip":"192.168.102.36"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.22.169:80:100,192.168.45.123:80:100,192.168.15.12:80:100,192.168.18.213:80:100,192.168.22.234:80:100",
+            "vip":"192.168.101.79"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.82:80:100,192.168.42.34:80:100,192.168.11.218:80:100,192.168.58.77:80:100,192.168.38.192:80:100,192.168.27.62:80:100,192.168.27.254:80:100,192.168.22.117:80:100,192.168.6.233:80:100,192.168.45.17:80:100,192.168.54.228:80:100,192.168.25.126:80:100,192.168.34.94:80:100,192.168.11.67:80:100,192.168.5.133:80:100,192.168.58.37:80:100,192.168.51.146:80:100,192.168.18.27:80:100,192.168.15.49:80:100,192.168.25.4:80:100,192.168.29.145:80:100,192.168.35.79:80:100,192.168.34.211:80:100,192.168.59.161:80:100,192.168.1.65:80:100,192.168.10.190:80:100,192.168.29.42:80:100,192.168.38.228:80:100,192.168.9.202:80:100,192.168.6.121:80:100,192.168.41.100:80:100,192.168.22.47:80:100,192.168.47.115:80:100,192.168.7.236:80:100,192.168.57.14:80:100,192.168.1.162:80:100,192.168.35.167:80:100,192.168.29.254:80:100,192.168.45.110:80:100,192.168.27.111:80:100,192.168.17.243:80:100,192.168.38.176:80:100,192.168.3.82:80:100,192.168.50.102:80:100,192.168.46.250:80:100,192.168.57.94:80:100,192.168.10.248:80:100,192.168.35.227:80:100,192.168.38.241:80:100,192.168.35.117:80:100,192.168.13.9:80:100,192.168.9.235:80:100,192.168.1.172:80:100,192.168.6.178:80:100,192.168.6.241:80:100,192.168.33.152:80:100,192.168.29.81:80:100,192.168.54.156:80:100",
+            "vip":"192.168.101.138"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.212:80:100",
+            "vip":"111.13.235.214"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.111:80:100",
+            "vip":"192.168.101.24"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.17.235:80:100,192.168.47.80:80:100,192.168.6.3:80:100,192.168.47.96:80:100,192.168.59.215:80:100,192.168.33.243:80:100",
+            "vip":"192.168.101.35"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.57.232:80:100,192.168.54.159:80:100,192.168.54.115:80:100,192.168.55.254:80:100",
+            "vip":"192.168.102.234"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.23.159:80:100,192.168.55.109:80:100,192.168.7.11:80:100,192.168.14.20:80:100,192.168.14.102:80:100,192.168.46.241:80:100,192.168.49.92:80:100,192.168.21.99:80:100,192.168.22.152:80:100,192.168.14.242:80:100,192.168.22.27:80:100,192.168.37.190:80:100,192.168.10.187:80:100,192.168.27.212:80:100,192.168.9.48:80:100,192.168.29.26:80:100,192.168.15.227:80:100,192.168.26.220:80:100,192.168.18.42:80:100,192.168.39.137:80:100,192.168.54.99:80:100,192.168.55.90:80:100,192.168.13.72:80:100,192.168.41.247:80:100,192.168.6.61:80:100,192.168.38.242:80:100,192.168.41.248:80:100,192.168.50.36:80:100,192.168.53.84:80:100,192.168.34.38:80:100,192.168.17.94:80:100,192.168.35.33:80:100,192.168.53.98:80:100,192.168.46.64:80:100,192.168.54.42:80:100,192.168.27.99:80:100,192.168.18.2:80:100,192.168.26.17:80:100,192.168.57.198:80:100",
+            "vip":"192.168.102.30"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.109:80:100,192.168.13.244:80:100",
+            "vip":"192.168.101.200"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.25.37:80:100,192.168.30.123:80:100,192.168.47.94:80:100,192.168.38.35:80:100,192.168.15.42:80:100,192.168.42.210:80:100,192.168.26.177:80:100,192.168.59.10:80:100,192.168.1.34:80:100,192.168.39.249:80:100,192.168.31.150:80:100,192.168.27.99:80:100,192.168.58.51:80:100,192.168.47.136:80:100,192.168.9.215:80:100,192.168.54.99:80:100,192.168.59.80:80:100",
+            "vip":"192.168.102.178"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.45.93:80:100,192.168.47.205:80:100,192.168.21.73:80:100",
+            "vip":"192.168.101.48"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.208:80:100,192.168.55.187:80:100,192.168.39.176:80:100,192.168.51.206:80:100",
+            "vip":"192.168.102.1"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.177:80:100,192.168.13.215:80:100,192.168.26.74:80:100",
+            "vip":"111.13.235.82"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.53:80:100,192.168.41.35:80:100,192.168.6.120:80:100,192.168.13.161:80:100,192.168.6.162:80:100",
+            "vip":"192.168.101.71"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.14.68:80:100,192.168.33.246:80:100,192.168.14.9:80:100,192.168.5.180:80:100,192.168.41.137:80:100,192.168.57.165:80:100,192.168.1.87:80:100,192.168.17.206:80:100,192.168.35.144:80:100,192.168.7.12:80:100,192.168.13.243:80:100,192.168.26.223:80:100,192.168.30.143:80:100,192.168.50.33:80:100,192.168.43.173:80:100,192.168.58.16:80:100,192.168.39.137:80:100,192.168.25.235:80:100,192.168.1.83:80:100,192.168.59.18:80:100,192.168.9.139:80:100,192.168.47.36:80:100,192.168.41.246:80:100,192.168.37.193:80:100,192.168.14.46:80:100,192.168.43.146:80:100,192.168.58.93:80:100,192.168.7.79:80:100,192.168.54.62:80:100,192.168.58.242:80:100,192.168.57.22:80:100,192.168.9.216:80:100,192.168.17.25:80:100,192.168.41.119:80:100,192.168.42.32:80:100,192.168.26.252:80:100,192.168.10.47:80:100,192.168.21.18:80:100,192.168.38.249:80:100,192.168.30.202:80:100,192.168.27.1:80:100,192.168.15.98:80:100,192.168.54.205:80:100,192.168.50.105:80:100,192.168.57.114:80:100,192.168.54.87:80:100,192.168.47.139:80:100,192.168.14.216:80:100,192.168.38.135:80:100,192.168.13.63:80:100,192.168.1.236:80:100,192.168.22.15:80:100,192.168.15.61:80:100,192.168.14.147:80:100,192.168.49.137:80:100,192.168.1.95:80:100,192.168.58.177:80:100,192.168.17.24:80:100,192.168.26.132:80:100,192.168.50.141:80:100,192.168.1.230:80:100,192.168.59.175:80:100,192.168.49.56:80:100,192.168.46.219:80:100,192.168.43.160:80:100,192.168.34.90:80:100,192.168.10.126:80:100,192.168.18.235:80:100,192.168.59.41:80:100,192.168.18.114:80:100,192.168.3.72:80:100,192.168.34.246:80:100,192.168.2.141:80:100,192.168.55.169:80:100,192.168.11.27:80:100,192.168.15.111:80:100,192.168.19.82:80:100,192.168.35.229:80:100,192.168.33.234:80:100,192.168.19.92:80:100,192.168.23.132:80:100,192.168.10.179:80:100,192.168.21.53:80:100,192.168.31.199:80:100,192.168.50.207:80:100,192.168.59.202:80:100,192.168.26.9:80:100,192.168.1.132:80:100,192.168.13.56:80:100,192.168.39.79:80:100,192.168.10.156:80:100,192.168.34.120:80:100,192.168.47.137:80:100,192.168.23.63:80:100,192.168.59.143:80:100,192.168.42.150:80:100,192.168.37.185:80:100,192.168.58.164:80:100,192.168.39.37:80:100,192.168.37.198:80:100,192.168.5.85:80:100,192.168.11.62:80:100,192.168.45.165:80:100,192.168.3.241:80:100,192.168.38.143:80:100,192.168.57.5:80:100,192.168.26.75:80:100,192.168.11.243:80:100,192.168.41.29:80:100,192.168.38.212:80:100,192.168.9.166:80:100,192.168.37.36:80:100,192.168.30.241:80:100,192.168.59.72:80:100,192.168.6.185:80:100,192.168.3.120:80:100,192.168.11.215:80:100,192.168.57.191:80:100,192.168.14.125:80:100,192.168.58.45:80:100,192.168.18.122:80:100,192.168.11.86:80:100,192.168.46.208:80:100,192.168.55.228:80:100,192.168.7.40:80:100,192.168.13.82:80:100,192.168.38.14:80:100,192.168.53.67:80:100,192.168.30.150:80:100,192.168.11.160:80:100,192.168.18.6:80:100,192.168.34.226:80:100",
+            "vip":"111.13.235.160"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.76:80:100,192.168.6.216:80:100",
+            "vip":"111.13.235.221"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.26.232:80:100,192.168.1.20:80:100,192.168.50.60:80:100,192.168.2.198:80:100,192.168.39.80:80:100,192.168.35.205:80:100",
+            "vip":"192.168.101.158"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.158:80:100,192.168.55.64:80:100,192.168.43.168:80:100,192.168.39.43:80:100,192.168.27.220:80:100,192.168.42.153:80:100,192.168.34.186:80:100,192.168.10.78:80:100",
+            "vip":"111.13.235.87"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.203:80:100,192.168.33.188:80:100,192.168.6.189:80:100,192.168.35.113:80:100,192.168.34.162:80:100,192.168.54.59:80:100,192.168.15.47:80:100,192.168.17.164:80:100,192.168.43.236:80:100,192.168.39.254:80:100,192.168.10.204:80:100,192.168.6.54:80:100,192.168.34.199:80:100,192.168.30.189:80:100,192.168.10.167:80:100,192.168.54.71:80:100,192.168.19.34:80:100,192.168.15.137:80:100,192.168.46.152:80:100,192.168.50.204:80:100,192.168.39.161:80:100,192.168.22.46:80:100,192.168.29.21:80:100,192.168.21.237:80:100,192.168.37.102:80:100,192.168.30.108:80:100,192.168.39.55:80:100,192.168.9.103:80:100,192.168.54.82:80:100,192.168.26.210:80:100,192.168.21.168:80:100,192.168.31.230:80:100,192.168.3.94:80:100,192.168.47.160:80:100,192.168.11.77:80:100,192.168.14.112:80:100,192.168.23.201:80:100,192.168.39.138:80:100,192.168.53.106:80:100,192.168.33.27:80:100,192.168.2.155:80:100,192.168.38.249:80:100,192.168.23.217:80:100,192.168.10.217:80:100,192.168.35.78:80:100,192.168.53.222:80:100,192.168.3.134:80:100,192.168.19.225:80:100,192.168.27.159:80:100,192.168.2.71:80:100,192.168.55.128:80:100,192.168.17.74:80:100,192.168.54.98:80:100,192.168.3.24:80:100,192.168.54.21:80:100,192.168.13.174:80:100,192.168.57.196:80:100,192.168.29.132:80:100,192.168.53.233:80:100,192.168.14.50:80:100,192.168.1.247:80:100,192.168.25.230:80:100,192.168.9.57:80:100,192.168.6.111:80:100,192.168.11.166:80:100,192.168.11.32:80:100,192.168.33.192:80:100,192.168.47.134:80:100,192.168.9.190:80:100,192.168.23.174:80:100,192.168.54.108:80:100,192.168.6.198:80:100,192.168.29.53:80:100,192.168.50.247:80:100,192.168.57.192:80:100,192.168.34.18:80:100,192.168.51.239:80:100,192.168.1.182:80:100,192.168.34.92:80:100,192.168.53.188:80:100,192.168.34.49:80:100,192.168.38.5:80:100,192.168.58.190:80:100,192.168.1.130:80:100,192.168.33.152:80:100,192.168.23.99:80:100,192.168.46.109:80:100,192.168.53.252:80:100,192.168.25.208:80:100,192.168.46.151:80:100,192.168.46.206:80:100,192.168.9.145:80:100,192.168.14.110:80:100,192.168.29.194:80:100,192.168.35.5:80:100,192.168.31.203:80:100,192.168.10.236:80:100,192.168.55.95:80:100,192.168.39.36:80:100,192.168.26.117:80:100,192.168.46.93:80:100,192.168.54.85:80:100,192.168.54.103:80:100,192.168.1.134:80:100,192.168.31.81:80:100,192.168.13.214:80:100,192.168.19.243:80:100,192.168.51.182:80:100,192.168.22.64:80:100,192.168.47.175:80:100,192.168.23.10:80:100,192.168.41.126:80:100,192.168.46.39:80:100,192.168.18.59:80:100,192.168.43.107:80:100,192.168.51.107:80:100,192.168.46.64:80:100,192.168.11.61:80:100,192.168.34.198:80:100,192.168.21.173:80:100,192.168.21.172:80:100,192.168.57.210:80:100,192.168.27.235:80:100,192.168.51.45:80:100,192.168.7.132:80:100,192.168.34.65:80:100,192.168.53.186:80:100,192.168.31.213:80:100,192.168.22.117:80:100,192.168.37.180:80:100,192.168.19.109:80:100,192.168.19.169:80:100,192.168.13.115:80:100,192.168.11.201:80:100,192.168.59.39:80:100,192.168.45.31:80:100,192.168.45.170:80:100,192.168.17.1:80:100,192.168.53.85:80:100,192.168.35.252:80:100,192.168.43.202:80:100,192.168.38.212:80:100,192.168.26.122:80:100,192.168.23.78:80:100,192.168.23.35:80:100,192.168.15.195:80:100,192.168.31.23:80:100,192.168.1.55:80:100,192.168.55.79:80:100,192.168.25.50:80:100,192.168.6.7:80:100,192.168.13.137:80:100,192.168.35.171:80:100,192.168.39.233:80:100,192.168.57.96:80:100,192.168.7.211:80:100,192.168.42.227:80:100,192.168.5.192:80:100,192.168.50.22:80:100",
+            "vip":"111.13.235.228"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.108:80:100,192.168.29.211:80:100",
+            "vip":"192.168.101.83"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.200:80:100",
+            "vip":"111.13.235.73"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.225:80:100,192.168.27.47:80:100",
+            "vip":"111.13.235.226"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.236:80:100,192.168.46.47:80:100,192.168.5.177:80:100,192.168.1.79:80:100,192.168.47.187:80:100",
+            "vip":"192.168.102.191"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.32:80:100,192.168.25.127:80:100",
+            "vip":"192.168.101.99"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.239:80:100,192.168.42.168:80:100,192.168.50.50:80:100,192.168.27.64:80:100,192.168.3.149:80:100,192.168.25.155:80:100,192.168.7.73:80:100,192.168.27.8:80:100,192.168.11.190:80:100",
+            "vip":"192.168.102.27"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.225:80:100,192.168.15.108:80:100,192.168.47.191:80:100,192.168.39.99:80:100",
+            "vip":"192.168.101.169"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.2.147:80:100,192.168.51.218:80:100,192.168.10.48:80:100",
+            "vip":"192.168.102.126"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.160:80:100,192.168.49.248:80:100,192.168.5.225:80:100,192.168.45.184:80:100,192.168.46.253:80:100,192.168.2.111:80:100,192.168.7.119:80:100,192.168.6.119:80:100,192.168.46.86:80:100",
+            "vip":"192.168.101.181"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.70:80:100",
+            "vip":"192.168.102.44"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.5:80:100,192.168.29.165:80:100,192.168.26.33:80:100",
+            "vip":"192.168.101.97"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.100:80:100",
+            "vip":"192.168.101.217"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.22.239:80:100,192.168.1.44:80:100,192.168.11.8:80:100,192.168.7.144:80:100",
+            "vip":"111.13.235.238"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.130:80:100,192.168.30.19:80:100",
+            "vip":"192.168.101.54"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.212:80:100,192.168.25.235:80:100,192.168.41.8:80:100,192.168.37.170:80:100,192.168.18.26:80:100,192.168.49.38:80:100,192.168.38.93:80:100,192.168.47.94:80:100,192.168.13.69:80:100,192.168.10.98:80:100,192.168.29.93:80:100,192.168.39.150:80:100,192.168.35.19:80:100,192.168.31.180:80:100,192.168.3.153:80:100",
+            "vip":"192.168.101.133"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.181:80:100,192.168.45.134:80:100",
+            "vip":"192.168.102.190"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.51.138:80:100,192.168.15.19:80:100,192.168.2.142:80:100,192.168.27.27:80:100",
+            "vip":"192.168.101.10"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.173:80:100,192.168.55.17:80:100,192.168.23.217:80:100,192.168.43.16:80:100",
+            "vip":"111.13.235.185"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.125:80:100,192.168.46.149:80:100,192.168.49.58:80:100,192.168.14.215:80:100,192.168.51.249:80:100,192.168.9.196:80:100,192.168.26.102:80:100",
+            "vip":"192.168.102.91"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.155:80:100",
+            "vip":"111.13.235.125"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.22.209:80:100,192.168.59.111:80:100,192.168.37.203:80:100,192.168.35.57:80:100,192.168.30.117:80:100,192.168.45.194:80:100,192.168.47.81:80:100,192.168.43.22:80:100,192.168.42.124:80:100",
+            "vip":"192.168.101.72"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.182:80:100,192.168.45.16:80:100,192.168.49.234:80:100,192.168.50.21:80:100",
+            "vip":"192.168.102.210"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.14.213:80:100,192.168.9.223:80:100,192.168.9.95:80:100,192.168.1.78:80:100,192.168.13.164:80:100,192.168.29.47:80:100,192.168.3.130:80:100",
+            "vip":"192.168.101.206"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.251:80:100,192.168.6.184:80:100,192.168.43.97:80:100,192.168.31.112:80:100",
+            "vip":"192.168.102.100"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.113:80:100,192.168.25.240:80:100,192.168.58.8:80:100",
+            "vip":"192.168.102.19"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.1.105:80:100,192.168.7.224:80:100,192.168.23.225:80:100,192.168.53.86:80:100",
+            "vip":"192.168.102.117"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.35.65:80:100,192.168.17.140:80:100,192.168.38.52:80:100,192.168.21.27:80:100",
+            "vip":"192.168.102.144"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.252:80:100,192.168.43.116:80:100,192.168.25.163:80:100,192.168.31.37:80:100",
+            "vip":"192.168.101.58"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.232:80:100,192.168.14.79:80:100,192.168.1.203:80:100,192.168.11.125:80:100,192.168.35.3:80:100,192.168.9.15:80:100,192.168.29.239:80:100,192.168.15.226:80:100,192.168.59.127:80:100,192.168.50.24:80:100,192.168.13.231:80:100,192.168.49.45:80:100",
+            "vip":"192.168.101.254"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.152:80:100,192.168.59.218:80:100,192.168.35.215:80:100,192.168.3.213:80:100",
+            "vip":"192.168.102.153"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.9:80:100,192.168.50.84:80:100,192.168.27.75:80:100",
+            "vip":"111.13.235.81"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.34:80:100,192.168.51.98:80:100,192.168.9.222:80:100,192.168.2.4:80:100",
+            "vip":"111.13.235.176"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.17.239:80:100,192.168.2.86:80:100,192.168.13.92:80:100,192.168.49.244:80:100",
+            "vip":"192.168.101.174"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.130:80:100,192.168.34.246:80:100",
+            "vip":"192.168.101.68"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.176:80:100",
+            "vip":"192.168.102.216"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.54.47:80:100,192.168.9.134:80:100,192.168.2.57:80:100,192.168.23.103:80:100,192.168.31.202:80:100,192.168.45.25:80:100,192.168.9.89:80:100,192.168.47.129:80:100,192.168.7.33:80:100,192.168.37.32:80:100,192.168.39.143:80:100,192.168.25.177:80:100,192.168.21.23:80:100,192.168.14.16:80:100,192.168.45.114:80:100,192.168.30.227:80:100,192.168.46.75:80:100,192.168.17.178:80:100,192.168.2.42:80:100,192.168.43.147:80:100,192.168.33.36:80:100,192.168.14.24:80:100,192.168.50.213:80:100,192.168.25.127:80:100",
+            "vip":"192.168.101.201"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.253:80:100,192.168.35.132:80:100,192.168.1.81:80:100",
+            "vip":"192.168.102.217"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.57.120:80:100",
+            "vip":"192.168.101.196"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.5:80:100,192.168.13.180:80:100,192.168.57.114:80:100,192.168.17.138:80:100",
+            "vip":"192.168.102.231"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.9:80:100,192.168.15.104:80:100,192.168.43.132:80:100,192.168.54.83:80:100,192.168.34.9:80:100,192.168.14.128:80:100",
+            "vip":"111.13.235.212"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.188:80:100,192.168.18.51:80:100,192.168.35.110:80:100,192.168.33.142:80:100,192.168.11.13:80:100",
+            "vip":"192.168.101.37"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.152:80:100",
+            "vip":"192.168.101.186"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.26.34:80:100,192.168.41.70:80:100",
+            "vip":"192.168.102.32"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.35.143:80:100,192.168.58.51:80:100,192.168.26.231:80:100,192.168.49.15:80:100",
+            "vip":"192.168.101.226"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.104:80:100,192.168.29.90:80:100",
+            "vip":"111.13.235.246"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.156:80:100,192.168.49.183:80:100,192.168.21.187:80:100,192.168.30.22:80:100,192.168.26.70:80:100,192.168.59.126:80:100,192.168.7.181:80:100,192.168.51.165:80:100,192.168.38.234:80:100",
+            "vip":"192.168.101.109"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.86:80:100,192.168.25.60:80:100,192.168.9.79:80:100,192.168.59.230:80:100",
+            "vip":"192.168.101.184"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.1.6:80:100,192.168.46.210:80:100",
+            "vip":"192.168.102.89"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.104:80:100,192.168.21.107:80:100",
+            "vip":"192.168.101.73"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.173:80:100,192.168.23.103:80:100,192.168.42.82:80:100,192.168.31.11:80:100",
+            "vip":"192.168.101.128"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.223:80:100,192.168.9.172:80:100",
+            "vip":"192.168.102.237"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.17.191:80:100",
+            "vip":"111.13.235.153"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.54.73:80:100,192.168.22.204:80:100,192.168.9.79:80:100,192.168.2.191:80:100,192.168.31.24:80:100,192.168.26.152:80:100,192.168.29.13:80:100",
+            "vip":"192.168.102.123"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.55:80:100",
+            "vip":"192.168.102.46"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.204:80:100,192.168.50.7:80:100,192.168.57.203:80:100",
+            "vip":"111.13.235.243"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.17.194:80:100,192.168.38.83:80:100,192.168.23.185:80:100,192.168.37.29:80:100",
+            "vip":"192.168.101.131"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.80:80:100,192.168.1.254:80:100,192.168.54.2:80:100,192.168.7.124:80:100,192.168.1.202:80:100,192.168.23.156:80:100,192.168.39.107:80:100,192.168.57.40:80:100,192.168.22.109:80:100,192.168.26.69:80:100,192.168.3.22:80:100,192.168.45.75:80:100,192.168.42.234:80:100,192.168.46.174:80:100,192.168.34.70:80:100,192.168.17.50:80:100,192.168.3.58:80:100,192.168.38.110:80:100",
+            "vip":"192.168.102.121"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.96:80:100,192.168.2.217:80:100,192.168.6.135:80:100,192.168.15.164:80:100,192.168.55.178:80:100,192.168.27.172:80:100,192.168.34.31:80:100",
+            "vip":"111.13.235.127"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.182:80:100,192.168.37.121:80:100,192.168.50.72:80:100,192.168.43.49:80:100",
+            "vip":"111.13.235.100"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.55:80:100,192.168.42.58:80:100,192.168.35.158:80:100,192.168.26.180:80:100",
+            "vip":"192.168.102.93"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.46.157:80:100",
+            "vip":"192.168.102.248"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.182:80:100,192.168.46.108:80:100,192.168.42.203:80:100",
+            "vip":"192.168.102.6"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.157:80:100,192.168.43.16:80:100,192.168.13.38:80:100,192.168.34.125:80:100",
+            "vip":"111.13.235.76"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.54.85:80:100",
+            "vip":"111.13.235.109"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.14.163:80:100,192.168.42.5:80:100,192.168.46.148:80:100",
+            "vip":"192.168.101.154"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.33:80:100,192.168.10.118:80:100,192.168.13.128:80:100,192.168.46.152:80:100,192.168.29.88:80:100",
+            "vip":"111.13.235.175"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.1:80:100,192.168.18.192:80:100,192.168.34.47:80:100,192.168.57.195:80:100,192.168.10.167:80:100,192.168.2.217:80:100,192.168.3.194:80:100,192.168.31.167:80:100,192.168.58.16:80:100,192.168.10.90:80:100,192.168.31.217:80:100,192.168.53.32:80:100,192.168.13.154:80:100,192.168.29.144:80:100,192.168.47.16:80:100,192.168.39.168:80:100,192.168.17.146:80:100,192.168.9.168:80:100,192.168.42.52:80:100,192.168.49.3:80:100,192.168.18.163:80:100,192.168.25.65:80:100,192.168.18.215:80:100,192.168.30.107:80:100,192.168.42.174:80:100,192.168.38.204:80:100,192.168.33.7:80:100,192.168.51.138:80:100,192.168.59.125:80:100,192.168.14.181:80:100,192.168.33.73:80:100,192.168.6.130:80:100,192.168.18.233:80:100,192.168.47.70:80:100,192.168.11.43:80:100,192.168.11.225:80:100,192.168.37.216:80:100,192.168.5.158:80:100,192.168.41.25:80:100,192.168.23.239:80:100,192.168.7.43:80:100,192.168.2.141:80:100,192.168.58.36:80:100,192.168.11.6:80:100,192.168.35.163:80:100,192.168.39.237:80:100,192.168.39.204:80:100,192.168.17.34:80:100,192.168.14.47:80:100,192.168.26.212:80:100,192.168.29.217:80:100,192.168.13.234:80:100,192.168.29.199:80:100,192.168.31.199:80:100,192.168.15.132:80:100,192.168.17.3:80:100,192.168.17.212:80:100,192.168.29.244:80:100,192.168.33.123:80:100,192.168.23.206:80:100,192.168.14.57:80:100,192.168.50.224:80:100,192.168.17.171:80:100,192.168.25.6:80:100,192.168.1.50:80:100,192.168.7.150:80:100,192.168.15.18:80:100,192.168.26.116:80:100,192.168.59.27:80:100,192.168.38.151:80:100,192.168.57.247:80:100,192.168.11.102:80:100,192.168.1.208:80:100,192.168.27.37:80:100,192.168.29.24:80:100,192.168.29.28:80:100,192.168.25.57:80:100,192.168.29.21:80:100,192.168.51.221:80:100,192.168.31.25:80:100,192.168.2.190:80:100,192.168.15.244:80:100,192.168.15.105:80:100,192.168.1.116:80:100,192.168.54.14:80:100,192.168.25.223:80:100,192.168.5.252:80:100,192.168.9.107:80:100,192.168.14.164:80:100",
+            "vip":"111.13.235.224"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.241:80:100,192.168.39.201:80:100,192.168.18.17:80:100,192.168.17.11:80:100,192.168.30.156:80:100,192.168.57.241:80:100,192.168.47.4:80:100,192.168.23.157:80:100,192.168.30.200:80:100,192.168.47.121:80:100,192.168.15.21:80:100,192.168.41.115:80:100,192.168.9.215:80:100,192.168.55.129:80:100,192.168.46.180:80:100,192.168.27.122:80:100,192.168.34.214:80:100,192.168.22.210:80:100,192.168.47.72:80:100,192.168.29.58:80:100,192.168.29.234:80:100,192.168.50.78:80:100,192.168.39.36:80:100,192.168.3.28:80:100,192.168.50.40:80:100,192.168.27.204:80:100,192.168.38.215:80:100,192.168.10.111:80:100,192.168.43.217:80:100,192.168.23.23:80:100,192.168.19.199:80:100,192.168.33.126:80:100,192.168.1.64:80:100,192.168.47.125:80:100,192.168.51.14:80:100,192.168.38.121:80:100,192.168.11.70:80:100,192.168.11.234:80:100,192.168.47.71:80:100,192.168.10.112:80:100,192.168.50.204:80:100,192.168.41.240:80:100,192.168.45.132:80:100,192.168.33.204:80:100,192.168.54.79:80:100,192.168.17.31:80:100,192.168.3.156:80:100,192.168.9.95:80:100,192.168.18.239:80:100,192.168.10.216:80:100,192.168.19.62:80:100,192.168.46.147:80:100,192.168.53.56:80:100,192.168.33.26:80:100,192.168.3.70:80:100,192.168.33.57:80:100,192.168.47.2:80:100,192.168.33.213:80:100,192.168.35.137:80:100,192.168.31.139:80:100,192.168.10.152:80:100,192.168.41.160:80:100,192.168.35.238:80:100,192.168.54.5:80:100,192.168.35.20:80:100,192.168.53.6:80:100,192.168.45.237:80:100,192.168.49.248:80:100,192.168.29.103:80:100,192.168.10.115:80:100,192.168.45.45:80:100,192.168.57.41:80:100,192.168.59.28:80:100,192.168.59.112:80:100,192.168.55.60:80:100,192.168.13.104:80:100,192.168.7.169:80:100,192.168.3.218:80:100",
+            "vip":"192.168.101.203"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.23.216:80:100,192.168.33.142:80:100,192.168.47.223:80:100,192.168.7.47:80:100,192.168.51.176:80:100",
+            "vip":"111.13.235.70"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.45.50:80:100,192.168.39.187:80:100,192.168.33.39:80:100,192.168.41.175:80:100,192.168.15.101:80:100,192.168.37.246:80:100,192.168.3.193:80:100,192.168.19.149:80:100,192.168.57.103:80:100",
+            "vip":"111.13.235.210"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.247:80:100,192.168.29.88:80:100,192.168.19.118:80:100",
+            "vip":"192.168.101.177"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.121:80:100",
+            "vip":"192.168.102.78"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.35.221:80:100,192.168.2.40:80:100,192.168.14.7:80:100,192.168.47.89:80:100,192.168.31.25:80:100,192.168.58.51:80:100",
+            "vip":"111.13.235.139"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.7.68:80:100,192.168.35.254:80:100",
+            "vip":"111.13.235.177"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.215:80:100,192.168.50.202:80:100",
+            "vip":"192.168.101.238"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.119:80:100,192.168.35.186:80:100,192.168.39.201:80:100,192.168.51.187:80:100",
+            "vip":"111.13.235.155"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.122:80:100,192.168.21.13:80:100,192.168.26.43:80:100,192.168.6.75:80:100,192.168.13.75:80:100,192.168.53.103:80:100,192.168.34.116:80:100,192.168.17.74:80:100,192.168.53.164:80:100,192.168.58.139:80:100,192.168.58.195:80:100,192.168.3.97:80:100,192.168.10.188:80:100,192.168.35.35:80:100,192.168.38.72:80:100,192.168.1.27:80:100,192.168.26.97:80:100,192.168.25.202:80:100,192.168.18.130:80:100,192.168.11.30:80:100,192.168.27.166:80:100,192.168.10.133:80:100,192.168.11.209:80:100,192.168.29.240:80:100,192.168.11.213:80:100,192.168.23.147:80:100",
+            "vip":"192.168.102.158"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.108:80:100,192.168.18.181:80:100,192.168.9.149:80:100,192.168.9.41:80:100",
+            "vip":"111.13.235.131"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.213:80:100,192.168.57.46:80:100",
+            "vip":"192.168.102.67"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.43.219:80:100,192.168.43.185:80:100",
+            "vip":"192.168.102.102"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.2.175:80:100,192.168.41.145:80:100,192.168.54.199:80:100",
+            "vip":"111.13.235.235"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.239:80:100,192.168.50.61:80:100,192.168.57.222:80:100,192.168.27.25:80:100,192.168.49.121:80:100,192.168.37.27:80:100,192.168.53.37:80:100,192.168.11.102:80:100,192.168.27.20:80:100,192.168.13.115:80:100,192.168.17.190:80:100,192.168.15.245:80:100,192.168.49.230:80:100,192.168.31.254:80:100,192.168.59.207:80:100,192.168.53.249:80:100,192.168.33.234:80:100,192.168.37.97:80:100,192.168.45.82:80:100,192.168.1.59:80:100,192.168.43.184:80:100,192.168.53.117:80:100,192.168.58.26:80:100,192.168.18.237:80:100,192.168.18.162:80:100,192.168.14.125:80:100,192.168.43.101:80:100,192.168.54.64:80:100,192.168.35.227:80:100,192.168.41.79:80:100,192.168.26.85:80:100,192.168.10.124:80:100,192.168.43.148:80:100,192.168.27.147:80:100",
+            "vip":"192.168.102.115"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.190:80:100,192.168.7.51:80:100,192.168.7.166:80:100,192.168.49.94:80:100,192.168.50.237:80:100,192.168.17.194:80:100,192.168.5.195:80:100,192.168.23.251:80:100,192.168.29.60:80:100,192.168.21.117:80:100",
+            "vip":"111.13.235.161"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.176:80:100,192.168.9.149:80:100,192.168.10.84:80:100,192.168.30.198:80:100",
+            "vip":"192.168.102.146"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.229:80:100,192.168.54.226:80:100",
+            "vip":"192.168.101.55"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.43.109:80:100,192.168.25.167:80:100,192.168.46.31:80:100",
+            "vip":"192.168.102.151"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.43.145:80:100,192.168.49.218:80:100,192.168.55.166:80:100,192.168.38.127:80:100",
+            "vip":"111.13.235.128"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.51.96:80:100,192.168.30.125:80:100,192.168.43.185:80:100,192.168.35.117:80:100,192.168.17.223:80:100,192.168.57.21:80:100,192.168.45.170:80:100,192.168.9.137:80:100,192.168.27.106:80:100,192.168.14.137:80:100,192.168.33.225:80:100",
+            "vip":"111.13.235.237"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.148:80:100,192.168.34.172:80:100,192.168.42.202:80:100,192.168.43.167:80:100,192.168.3.113:80:100",
+            "vip":"192.168.102.154"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.193:80:100,192.168.13.153:80:100,192.168.3.35:80:100,192.168.58.108:80:100,192.168.51.14:80:100,192.168.37.229:80:100,192.168.3.12:80:100,192.168.19.151:80:100",
+            "vip":"111.13.235.136"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.54.247:80:100,192.168.49.86:80:100,192.168.58.83:80:100",
+            "vip":"192.168.102.254"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.185:80:100,192.168.35.52:80:100",
+            "vip":"192.168.102.124"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.142:80:100,192.168.9.79:80:100",
+            "vip":"111.13.235.79"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.3:80:100,192.168.9.200:80:100,192.168.14.252:80:100,192.168.58.62:80:100",
+            "vip":"192.168.101.153"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.132:80:100,192.168.58.126:80:100,192.168.15.98:80:100,192.168.19.30:80:100,192.168.10.66:80:100",
+            "vip":"192.168.101.11"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.23.126:80:100,192.168.7.108:80:100,192.168.14.89:80:100,192.168.30.188:80:100,192.168.33.147:80:100,192.168.34.212:80:100,192.168.2.147:80:100",
+            "vip":"111.13.235.245"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.35.108:80:100,192.168.11.121:80:100,192.168.6.163:80:100",
+            "vip":"192.168.102.188"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.192:80:100,192.168.43.41:80:100,192.168.41.131:80:100,192.168.49.235:80:100",
+            "vip":"192.168.102.202"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.2.253:80:100,192.168.38.108:80:100,192.168.39.11:80:100,192.168.39.25:80:100,192.168.19.7:80:100,192.168.6.252:80:100",
+            "vip":"192.168.102.127"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.46.159:80:100,192.168.38.44:80:100,192.168.59.185:80:100,192.168.34.29:80:100",
+            "vip":"111.13.235.122"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.26:80:100,192.168.19.148:80:100,192.168.22.221:80:100,192.168.25.228:80:100",
+            "vip":"192.168.102.243"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.43.108:80:100,192.168.17.153:80:100,192.168.37.44:80:100",
+            "vip":"192.168.102.112"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.152:80:100",
+            "vip":"192.168.102.95"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.174:80:100,192.168.19.138:80:100,192.168.13.96:80:100",
+            "vip":"192.168.101.121"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.25.177:80:100",
+            "vip":"192.168.101.110"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.29:80:100,192.168.46.211:80:100,192.168.27.187:80:100,192.168.27.26:80:100,192.168.41.210:80:100,192.168.31.127:80:100,192.168.49.8:80:100,192.168.9.101:80:100,192.168.42.9:80:100,192.168.15.241:80:100,192.168.45.102:80:100,192.168.54.111:80:100,192.168.1.184:80:100,192.168.29.234:80:100,192.168.22.35:80:100,192.168.25.15:80:100,192.168.53.116:80:100,192.168.55.99:80:100,192.168.18.75:80:100,192.168.1.67:80:100,192.168.25.93:80:100,192.168.15.229:80:100,192.168.13.233:80:100,192.168.21.215:80:100,192.168.37.222:80:100,192.168.11.19:80:100,192.168.29.81:80:100",
+            "vip":"111.13.235.83"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.148:80:100,192.168.30.108:80:100,192.168.53.242:80:100,192.168.7.62:80:100",
+            "vip":"192.168.101.228"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.57:80:100,192.168.46.137:80:100,192.168.13.55:80:100,192.168.1.42:80:100,192.168.38.200:80:100,192.168.59.73:80:100",
+            "vip":"192.168.102.65"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.155:80:100",
+            "vip":"192.168.101.249"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.22.66:80:100,192.168.57.133:80:100,192.168.55.220:80:100,192.168.18.215:80:100",
+            "vip":"192.168.101.189"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.186:80:100,192.168.14.88:80:100,192.168.9.227:80:100",
+            "vip":"111.13.235.124"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.43.53:80:100,192.168.37.200:80:100",
+            "vip":"111.13.235.230"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.82:80:100",
+            "vip":"192.168.102.241"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.54:80:100,192.168.53.245:80:100,192.168.10.217:80:100,192.168.6.178:80:100",
+            "vip":"192.168.102.29"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.25:80:100",
+            "vip":"192.168.101.123"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.51:80:100",
+            "vip":"192.168.102.14"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.43.12:80:100,192.168.27.113:80:100,192.168.10.249:80:100,192.168.54.50:80:100,192.168.3.143:80:100,192.168.21.21:80:100,192.168.34.225:80:100,192.168.10.175:80:100,192.168.1.45:80:100,192.168.42.159:80:100,192.168.58.52:80:100,192.168.21.44:80:100,192.168.27.68:80:100,192.168.21.160:80:100,192.168.41.94:80:100,192.168.33.108:80:100,192.168.54.30:80:100,192.168.53.250:80:100,192.168.58.144:80:100,192.168.3.2:80:100,192.168.35.247:80:100,192.168.10.35:80:100,192.168.54.171:80:100,192.168.33.42:80:100,192.168.50.39:80:100,192.168.29.92:80:100,192.168.50.78:80:100,192.168.50.198:80:100,192.168.39.246:80:100,192.168.5.72:80:100,192.168.53.53:80:100,192.168.37.148:80:100,192.168.39.41:80:100,192.168.27.91:80:100,192.168.27.243:80:100,192.168.23.192:80:100,192.168.42.103:80:100,192.168.50.130:80:100,192.168.47.42:80:100,192.168.23.25:80:100,192.168.33.97:80:100,192.168.18.163:80:100,192.168.49.230:80:100,192.168.38.240:80:100,192.168.43.112:80:100,192.168.5.236:80:100,192.168.21.89:80:100,192.168.54.188:80:100,192.168.5.66:80:100,192.168.5.174:80:100,192.168.49.24:80:100,192.168.2.132:80:100,192.168.33.179:80:100,192.168.57.202:80:100,192.168.3.216:80:100,192.168.33.183:80:100,192.168.23.99:80:100,192.168.9.229:80:100,192.168.39.146:80:100,192.168.31.130:80:100,192.168.47.14:80:100,192.168.10.40:80:100,192.168.5.31:80:100,192.168.23.170:80:100,192.168.9.38:80:100,192.168.42.61:80:100,192.168.49.13:80:100,192.168.54.212:80:100,192.168.31.199:80:100,192.168.50.207:80:100,192.168.31.251:80:100,192.168.57.19:80:100,192.168.27.116:80:100,192.168.9.240:80:100,192.168.55.208:80:100,192.168.30.181:80:100,192.168.47.137:80:100,192.168.21.138:80:100,192.168.19.71:80:100,192.168.42.41:80:100,192.168.30.19:80:100,192.168.18.211:80:100,192.168.43.118:80:100,192.168.30.175:80:100,192.168.25.236:80:100,192.168.5.180:80:100,192.168.50.193:80:100,192.168.42.183:80:100,192.168.46.79:80:100,192.168.39.40:80:100,192.168.50.149:80:100,192.168.13.127:80:100,192.168.22.96:80:100,192.168.35.31:80:100,192.168.19.101:80:100,192.168.29.185:80:100,192.168.22.58:80:100,192.168.53.205:80:100,192.168.3.253:80:100,192.168.49.100:80:100,192.168.7.111:80:100,192.168.2.12:80:100",
+            "vip":"192.168.102.143"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.55:80:100",
+            "vip":"192.168.102.255"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.99:80:100",
+            "vip":"111.13.235.232"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.153:80:100,192.168.11.191:80:100,192.168.27.154:80:100,192.168.27.21:80:100,192.168.54.31:80:100,192.168.25.14:80:100,192.168.45.26:80:100,192.168.7.98:80:100,192.168.14.54:80:100,192.168.41.163:80:100,192.168.3.111:80:100,192.168.25.238:80:100,192.168.43.127:80:100,192.168.35.240:80:100,192.168.22.181:80:100,192.168.43.152:80:100,192.168.13.194:80:100,192.168.31.141:80:100,192.168.10.134:80:100",
+            "vip":"111.13.235.229"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.41:80:100,192.168.26.25:80:100,192.168.53.45:80:100,192.168.1.249:80:100,192.168.45.141:80:100,192.168.25.39:80:100,192.168.11.138:80:100,192.168.27.60:80:100,192.168.38.129:80:100,192.168.2.218:80:100,192.168.42.48:80:100,192.168.53.159:80:100,192.168.22.121:80:100,192.168.54.178:80:100,192.168.3.186:80:100,192.168.5.12:80:100,192.168.27.206:80:100,192.168.34.249:80:100,192.168.23.218:80:100,192.168.26.78:80:100,192.168.42.184:80:100,192.168.34.25:80:100,192.168.21.237:80:100,192.168.58.23:80:100,192.168.43.181:80:100,192.168.38.110:80:100,192.168.58.76:80:100,192.168.30.168:80:100,192.168.59.216:80:100,192.168.23.143:80:100,192.168.17.93:80:100,192.168.59.195:80:100,192.168.57.3:80:100",
+            "vip":"192.168.102.152"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.24:80:100,192.168.49.2:80:100,192.168.58.110:80:100",
+            "vip":"192.168.102.235"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.203:80:100,192.168.37.121:80:100,192.168.10.181:80:100,192.168.21.162:80:100,192.168.27.244:80:100,192.168.22.42:80:100,192.168.42.205:80:100,192.168.13.182:80:100",
+            "vip":"192.168.101.211"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.176:80:100,192.168.55.59:80:100",
+            "vip":"192.168.101.62"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.173:80:100",
+            "vip":"111.13.235.190"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.35.126:80:100,192.168.11.135:80:100,192.168.1.199:80:100,192.168.38.236:80:100",
+            "vip":"192.168.101.98"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.150:80:100,192.168.55.135:80:100,192.168.27.235:80:100",
+            "vip":"192.168.101.180"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.25.228:80:100,192.168.59.39:80:100",
+            "vip":"192.168.101.6"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.54.167:80:100,192.168.13.148:80:100,192.168.55.117:80:100",
+            "vip":"192.168.102.49"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.23:80:100,192.168.31.110:80:100,192.168.3.136:80:100,192.168.43.71:80:100,192.168.42.168:80:100,192.168.42.124:80:100,192.168.58.213:80:100,192.168.1.48:80:100,192.168.49.108:80:100,192.168.25.18:80:100,192.168.1.161:80:100,192.168.30.55:80:100,192.168.3.203:80:100,192.168.14.141:80:100,192.168.9.35:80:100,192.168.15.57:80:100",
+            "vip":"192.168.102.63"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.124:80:100,192.168.9.64:80:100,192.168.35.216:80:100,192.168.50.58:80:100",
+            "vip":"111.13.235.192"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.84:80:100,192.168.25.38:80:100,192.168.53.227:80:100",
+            "vip":"192.168.101.216"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.1.112:80:100,192.168.55.192:80:100,192.168.14.143:80:100,192.168.18.191:80:100",
+            "vip":"111.13.235.247"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.139:80:100",
+            "vip":"192.168.102.239"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.169:80:100,192.168.35.228:80:100",
+            "vip":"192.168.101.172"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.57.14:80:100,192.168.1.75:80:100,192.168.26.63:80:100",
+            "vip":"192.168.102.125"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.152:80:100,192.168.3.10:80:100,192.168.35.103:80:100,192.168.25.206:80:100,192.168.3.143:80:100,192.168.57.172:80:100,192.168.46.225:80:100,192.168.35.144:80:100,192.168.22.173:80:100,192.168.31.110:80:100,192.168.11.14:80:100,192.168.39.248:80:100,192.168.37.229:80:100,192.168.47.65:80:100,192.168.49.211:80:100,192.168.14.25:80:100,192.168.33.215:80:100,192.168.10.90:80:100,192.168.19.145:80:100,192.168.19.206:80:100,192.168.29.238:80:100,192.168.2.127:80:100,192.168.14.148:80:100,192.168.51.150:80:100,192.168.3.84:80:100,192.168.25.161:80:100,192.168.17.187:80:100,192.168.37.183:80:100,192.168.7.162:80:100,192.168.38.134:80:100,192.168.50.198:80:100,192.168.46.18:80:100,192.168.37.74:80:100,192.168.34.247:80:100,192.168.35.168:80:100,192.168.5.187:80:100,192.168.5.69:80:100,192.168.15.32:80:100,192.168.51.36:80:100,192.168.58.148:80:100,192.168.51.251:80:100,192.168.39.58:80:100,192.168.35.166:80:100,192.168.7.76:80:100,192.168.14.129:80:100,192.168.42.84:80:100,192.168.54.191:80:100,192.168.1.13:80:100,192.168.2.161:80:100,192.168.53.174:80:100,192.168.45.76:80:100,192.168.47.243:80:100,192.168.37.202:80:100,192.168.34.208:80:100,192.168.10.222:80:100,192.168.17.145:80:100,192.168.46.19:80:100,192.168.42.251:80:100,192.168.18.154:80:100,192.168.38.222:80:100,192.168.30.125:80:100,192.168.29.18:80:100,192.168.30.186:80:100,192.168.57.124:80:100,192.168.9.241:80:100,192.168.59.34:80:100,192.168.3.109:80:100,192.168.27.212:80:100,192.168.27.15:80:100,192.168.5.124:80:100,192.168.18.86:80:100,192.168.23.100:80:100,192.168.7.16:80:100,192.168.27.87:80:100,192.168.13.56:80:100,192.168.38.166:80:100,192.168.54.225:80:100,192.168.7.137:80:100,192.168.6.205:80:100,192.168.50.100:80:100,192.168.1.238:80:100,192.168.37.174:80:100,192.168.59.78:80:100,192.168.51.68:80:100,192.168.29.60:80:100,192.168.57.164:80:100,192.168.3.105:80:100,192.168.29.89:80:100,192.168.42.203:80:100,192.168.50.60:80:100,192.168.19.84:80:100,192.168.3.30:80:100,192.168.43.186:80:100,192.168.34.1:80:100,192.168.39.56:80:100,192.168.23.112:80:100,192.168.35.199:80:100,192.168.13.61:80:100,192.168.5.171:80:100,192.168.15.195:80:100,192.168.33.221:80:100,192.168.31.143:80:100,192.168.37.140:80:100,192.168.7.134:80:100,192.168.25.117:80:100,192.168.22.183:80:100,192.168.9.199:80:100,192.168.13.229:80:100,192.168.17.27:80:100,192.168.51.74:80:100,192.168.39.82:80:100,192.168.6.13:80:100,192.168.30.118:80:100",
+            "vip":"111.13.235.179"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.176:80:100,192.168.51.116:80:100,192.168.22.123:80:100,192.168.25.220:80:100",
+            "vip":"111.13.235.199"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.203:80:100,192.168.14.22:80:100,192.168.42.222:80:100,192.168.39.34:80:100",
+            "vip":"192.168.101.4"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.239:80:100,192.168.46.57:80:100,192.168.13.109:80:100",
+            "vip":"111.13.235.172"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.224:80:100,192.168.46.93:80:100,192.168.41.205:80:100,192.168.7.183:80:100,192.168.26.175:80:100,192.168.14.111:80:100,192.168.13.49:80:100,192.168.27.156:80:100",
+            "vip":"192.168.101.22"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.115:80:100,192.168.41.101:80:100,192.168.18.53:80:100",
+            "vip":"192.168.101.101"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.206:80:100,192.168.38.184:80:100,192.168.49.180:80:100,192.168.22.100:80:100",
+            "vip":"192.168.101.17"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.71:80:100",
+            "vip":"111.13.235.99"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.249:80:100,192.168.5.244:80:100,192.168.53.71:80:100,192.168.27.45:80:100,192.168.2.191:80:100,192.168.46.14:80:100",
+            "vip":"192.168.101.115"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.54:80:100",
+            "vip":"192.168.102.244"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.100:80:100,192.168.42.233:80:100,192.168.17.170:80:100,192.168.2.5:80:100",
+            "vip":"111.13.235.240"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.250:80:100,192.168.17.78:80:100,192.168.19.111:80:100,192.168.58.30:80:100,192.168.22.63:80:100,192.168.29.162:80:100",
+            "vip":"111.13.235.72"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.1:80:100",
+            "vip":"192.168.101.175"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.238:80:100,192.168.5.91:80:100,192.168.55.192:80:100,192.168.46.187:80:100,192.168.11.42:80:100,192.168.23.167:80:100,192.168.33.233:80:100,192.168.21.230:80:100,192.168.42.218:80:100,192.168.21.229:80:100,192.168.33.120:80:100,192.168.23.73:80:100,192.168.26.218:80:100,192.168.21.45:80:100,192.168.9.167:80:100,192.168.59.128:80:100,192.168.2.233:80:100,192.168.10.84:80:100,192.168.45.190:80:100",
+            "vip":"192.168.101.14"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.74:80:100,192.168.39.192:80:100,192.168.30.40:80:100,192.168.31.147:80:100,192.168.18.92:80:100,192.168.9.63:80:100,192.168.49.232:80:100,192.168.26.190:80:100,192.168.42.9:80:100,192.168.49.135:80:100,192.168.2.250:80:100,192.168.34.227:80:100,192.168.54.53:80:100,192.168.37.248:80:100,192.168.57.166:80:100,192.168.43.15:80:100,192.168.30.239:80:100,192.168.27.17:80:100,192.168.35.196:80:100,192.168.18.142:80:100,192.168.55.84:80:100,192.168.27.43:80:100,192.168.47.167:80:100,192.168.47.151:80:100,192.168.49.97:80:100,192.168.46.20:80:100,192.168.2.86:80:100,192.168.5.189:80:100,192.168.53.9:80:100,192.168.29.51:80:100",
+            "vip":"111.13.235.68"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.127:80:100,192.168.54.112:80:100",
+            "vip":"192.168.101.155"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.22:80:100,192.168.22.139:80:100,192.168.47.136:80:100,192.168.39.105:80:100,192.168.37.89:80:100,192.168.43.45:80:100,192.168.33.117:80:100",
+            "vip":"192.168.101.161"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.17.51:80:100,192.168.21.198:80:100,192.168.50.133:80:100",
+            "vip":"111.13.235.157"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.135:80:100,192.168.2.238:80:100,192.168.47.211:80:100,192.168.39.108:80:100,192.168.15.8:80:100,192.168.35.82:80:100,192.168.49.158:80:100,192.168.59.152:80:100,192.168.31.24:80:100,192.168.15.220:80:100,192.168.53.109:80:100,192.168.30.224:80:100,192.168.21.41:80:100,192.168.3.204:80:100,192.168.27.213:80:100,192.168.18.103:80:100",
+            "vip":"192.168.101.60"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.112:80:100,192.168.26.11:80:100,192.168.55.186:80:100,192.168.2.241:80:100,192.168.51.33:80:100",
+            "vip":"192.168.101.209"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.160:80:100",
+            "vip":"192.168.101.74"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.218:80:100,192.168.15.65:80:100,192.168.53.110:80:100,192.168.11.25:80:100",
+            "vip":"192.168.102.139"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.45.252:80:100,192.168.10.201:80:100,192.168.50.107:80:100,192.168.18.240:80:100,192.168.3.165:80:100,192.168.37.100:80:100",
+            "vip":"192.168.102.97"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.196:80:100,192.168.31.215:80:100,192.168.30.132:80:100,192.168.55.244:80:100,192.168.6.107:80:100,192.168.23.26:80:100,192.168.15.27:80:100,192.168.11.102:80:100,192.168.50.56:80:100,192.168.59.237:80:100,192.168.59.33:80:100,192.168.9.64:80:100,192.168.3.228:80:100,192.168.21.46:80:100,192.168.14.240:80:100,192.168.51.137:80:100,192.168.35.21:80:100,192.168.5.203:80:100,192.168.53.165:80:100,192.168.47.89:80:100,192.168.41.106:80:100,192.168.45.86:80:100,192.168.10.178:80:100,192.168.43.131:80:100,192.168.51.193:80:100,192.168.49.161:80:100,192.168.29.230:80:100,192.168.35.245:80:100,192.168.39.182:80:100,192.168.54.184:80:100,192.168.19.165:80:100,192.168.34.42:80:100",
+            "vip":"111.13.235.197"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.151:80:100,192.168.37.155:80:100,192.168.1.81:80:100,192.168.37.46:80:100,192.168.31.227:80:100",
+            "vip":"192.168.102.55"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.113:80:100,192.168.13.212:80:100,192.168.45.242:80:100,192.168.22.186:80:100",
+            "vip":"192.168.102.175"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.19:80:100",
+            "vip":"192.168.102.204"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.82:80:100,192.168.25.228:80:100,192.168.17.21:80:100,192.168.33.233:80:100,192.168.13.225:80:100,192.168.33.181:80:100,192.168.31.219:80:100,192.168.43.72:80:100,192.168.21.38:80:100,192.168.39.2:80:100",
+            "vip":"192.168.101.36"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.57.13:80:100,192.168.25.137:80:100,192.168.15.65:80:100,192.168.6.143:80:100,192.168.7.80:80:100,192.168.30.37:80:100,192.168.47.145:80:100",
+            "vip":"192.168.101.117"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.45.1:80:100,192.168.30.243:80:100,192.168.2.179:80:100,192.168.22.120:80:100",
+            "vip":"192.168.102.108"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.141:80:100,192.168.51.99:80:100,192.168.55.142:80:100,192.168.1.245:80:100",
+            "vip":"111.13.235.137"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.51.11:80:100,192.168.25.132:80:100,192.168.50.31:80:100,192.168.26.79:80:100,192.168.49.105:80:100,192.168.6.133:80:100,192.168.17.178:80:100,192.168.5.162:80:100,192.168.9.233:80:100,192.168.11.198:80:100,192.168.35.250:80:100,192.168.33.4:80:100,192.168.53.230:80:100,192.168.9.110:80:100,192.168.17.233:80:100",
+            "vip":"192.168.101.93"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.30:80:100,192.168.30.141:80:100,192.168.6.9:80:100",
+            "vip":"192.168.102.18"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.2.4:80:100,192.168.3.206:80:100,192.168.41.174:80:100",
+            "vip":"192.168.101.240"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.165:80:100,192.168.3.127:80:100,192.168.53.252:80:100,192.168.18.184:80:100,192.168.35.100:80:100,192.168.2.44:80:100,192.168.23.4:80:100,192.168.25.126:80:100,192.168.41.82:80:100",
+            "vip":"192.168.102.159"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.92:80:100,192.168.19.83:80:100,192.168.34.95:80:100",
+            "vip":"111.13.235.96"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.35.211:80:100",
+            "vip":"111.13.235.108"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.231:80:100,192.168.46.224:80:100,192.168.6.26:80:100,192.168.19.1:80:100,192.168.37.233:80:100,192.168.33.108:80:100,192.168.33.233:80:100,192.168.46.1:80:100,192.168.33.114:80:100,192.168.33.121:80:100,192.168.19.223:80:100,192.168.29.107:80:100,192.168.6.124:80:100,192.168.38.213:80:100,192.168.27.128:80:100,192.168.59.142:80:100,192.168.27.108:80:100,192.168.53.240:80:100,192.168.13.75:80:100,192.168.21.251:80:100,192.168.26.84:80:100,192.168.54.69:80:100,192.168.50.110:80:100,192.168.34.184:80:100,192.168.26.94:80:100,192.168.26.117:80:100,192.168.30.68:80:100,192.168.3.26:80:100,192.168.2.167:80:100,192.168.57.160:80:100,192.168.22.150:80:100,192.168.23.197:80:100,192.168.34.75:80:100,192.168.5.38:80:100,192.168.43.143:80:100,192.168.57.82:80:100,192.168.14.168:80:100,192.168.19.151:80:100,192.168.58.252:80:100,192.168.15.179:80:100,192.168.5.125:80:100,192.168.6.45:80:100,192.168.43.177:80:100,192.168.30.127:80:100,192.168.57.166:80:100,192.168.45.114:80:100,192.168.59.54:80:100,192.168.7.247:80:100,192.168.53.83:80:100,192.168.25.67:80:100,192.168.3.61:80:100,192.168.33.1:80:100,192.168.5.58:80:100,192.168.17.196:80:100,192.168.58.65:80:100,192.168.59.34:80:100,192.168.37.154:80:100,192.168.22.112:80:100,192.168.31.184:80:100,192.168.27.33:80:100,192.168.50.233:80:100,192.168.25.36:80:100,192.168.47.187:80:100,192.168.57.11:80:100,192.168.57.88:80:100,192.168.53.40:80:100,192.168.27.201:80:100,192.168.18.162:80:100,192.168.23.63:80:100,192.168.29.73:80:100,192.168.53.126:80:100,192.168.57.189:80:100,192.168.42.78:80:100,192.168.47.37:80:100,192.168.46.213:80:100,192.168.22.137:80:100,192.168.47.106:80:100",
+            "vip":"192.168.101.39"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.1.30:80:100",
+            "vip":"192.168.101.86"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.72:80:100",
+            "vip":"192.168.101.31"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.237:80:100,192.168.54.27:80:100,192.168.45.209:80:100,192.168.29.205:80:100,192.168.14.144:80:100,192.168.34.65:80:100,192.168.23.189:80:100,192.168.19.151:80:100",
+            "vip":"192.168.101.91"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.254:80:100,192.168.53.181:80:100,192.168.46.20:80:100,192.168.50.157:80:100,192.168.17.145:80:100,192.168.19.223:80:100,192.168.54.117:80:100,192.168.3.8:80:100",
+            "vip":"192.168.101.242"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.196:80:100",
+            "vip":"192.168.101.157"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.2.246:80:100,192.168.47.206:80:100,192.168.6.19:80:100,192.168.49.235:80:100",
+            "vip":"192.168.101.85"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.23:80:100,192.168.41.42:80:100",
+            "vip":"192.168.101.182"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.57:80:100,192.168.51.104:80:100,192.168.6.169:80:100,192.168.7.229:80:100",
+            "vip":"111.13.235.78"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.140:80:100,192.168.41.131:80:100",
+            "vip":"192.168.102.119"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.45.142:80:100",
+            "vip":"111.13.235.156"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.143:80:100,192.168.55.222:80:100,192.168.34.148:80:100,192.168.17.191:80:100",
+            "vip":"192.168.102.224"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.74:80:100,192.168.31.21:80:100",
+            "vip":"111.13.235.126"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.239:80:100",
+            "vip":"111.13.235.170"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.132:80:100,192.168.7.221:80:100",
+            "vip":"192.168.101.20"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.164:80:100,192.168.10.205:80:100",
+            "vip":"192.168.101.15"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.137:80:100",
+            "vip":"192.168.101.143"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.167:80:100,192.168.41.77:80:100,192.168.15.70:80:100,192.168.17.5:80:100",
+            "vip":"192.168.102.114"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.196:80:100,192.168.46.186:80:100,192.168.25.39:80:100,192.168.51.186:80:100,192.168.29.57:80:100,192.168.46.222:80:100,192.168.47.101:80:100,192.168.45.205:80:100,192.168.45.139:80:100,192.168.15.163:80:100,192.168.14.155:80:100,192.168.58.225:80:100,192.168.53.88:80:100,192.168.35.173:80:100,192.168.33.171:80:100,192.168.14.184:80:100,192.168.19.89:80:100,192.168.21.78:80:100,192.168.39.7:80:100,192.168.9.20:80:100,192.168.6.94:80:100,192.168.17.158:80:100,192.168.49.145:80:100,192.168.23.151:80:100,192.168.43.240:80:100,192.168.51.208:80:100,192.168.53.109:80:100,192.168.38.136:80:100,192.168.47.54:80:100",
+            "vip":"111.13.235.242"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.244:80:100,192.168.31.236:80:100,192.168.25.140:80:100,192.168.29.254:80:100,192.168.23.181:80:100,192.168.57.95:80:100",
+            "vip":"192.168.102.242"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.92:80:100,192.168.53.17:80:100,192.168.38.107:80:100",
+            "vip":"111.13.235.195"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.51.138:80:100,192.168.38.139:80:100,192.168.7.184:80:100",
+            "vip":"192.168.102.150"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.6:80:100,192.168.54.254:80:100",
+            "vip":"192.168.101.8"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.103:80:100,192.168.23.215:80:100,192.168.50.142:80:100,192.168.26.209:80:100,192.168.23.73:80:100,192.168.6.243:80:100,192.168.23.130:80:100",
+            "vip":"192.168.102.17"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.118:80:100,192.168.38.98:80:100",
+            "vip":"111.13.235.107"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.77:80:100,192.168.54.177:80:100,192.168.47.228:80:100,192.168.39.191:80:100",
+            "vip":"192.168.101.229"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.1.254:80:100,192.168.18.57:80:100,192.168.43.90:80:100,192.168.57.222:80:100,192.168.42.206:80:100,192.168.46.225:80:100,192.168.55.16:80:100,192.168.43.48:80:100,192.168.58.117:80:100,192.168.25.31:80:100,192.168.17.151:80:100,192.168.13.228:80:100,192.168.58.65:80:100,192.168.57.36:80:100,192.168.11.44:80:100,192.168.13.9:80:100,192.168.15.119:80:100,192.168.45.157:80:100,192.168.42.31:80:100,192.168.9.69:80:100,192.168.31.94:80:100,192.168.15.152:80:100,192.168.2.151:80:100,192.168.15.219:80:100,192.168.14.72:80:100,192.168.9.144:80:100,192.168.13.151:80:100,192.168.17.39:80:100,192.168.7.247:80:100,192.168.3.245:80:100,192.168.57.111:80:100,192.168.49.64:80:100,192.168.10.251:80:100,192.168.22.254:80:100,192.168.17.154:80:100,192.168.53.174:80:100,192.168.47.54:80:100,192.168.11.80:80:100,192.168.19.177:80:100,192.168.30.89:80:100,192.168.14.110:80:100,192.168.26.253:80:100,192.168.59.114:80:100,192.168.10.145:80:100,192.168.27.230:80:100,192.168.17.221:80:100,192.168.13.133:80:100,192.168.35.189:80:100,192.168.31.51:80:100,192.168.41.40:80:100,192.168.27.170:80:100,192.168.10.28:80:100,192.168.29.244:80:100,192.168.51.66:80:100,192.168.42.109:80:100,192.168.58.41:80:100,192.168.59.250:80:100,192.168.6.205:80:100,192.168.1.173:80:100,192.168.31.21:80:100,192.168.57.139:80:100,192.168.14.26:80:100,192.168.14.225:80:100,192.168.18.27:80:100,192.168.13.142:80:100,192.168.23.76:80:100,192.168.53.12:80:100,192.168.14.123:80:100,192.168.42.211:80:100,192.168.6.34:80:100,192.168.34.157:80:100,192.168.57.241:80:100,192.168.59.215:80:100,192.168.17.252:80:100,192.168.41.241:80:100,192.168.33.184:80:100,192.168.55.185:80:100,192.168.35.197:80:100,192.168.39.251:80:100,192.168.21.213:80:100,192.168.6.45:80:100,192.168.55.199:80:100,192.168.35.215:80:100,192.168.11.78:80:100,192.168.59.57:80:100,192.168.43.179:80:100,192.168.19.61:80:100,192.168.18.202:80:100",
+            "vip":"111.13.235.252"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.2.125:80:100,192.168.49.64:80:100,192.168.22.58:80:100",
+            "vip":"192.168.102.199"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.23.240:80:100,192.168.21.51:80:100,192.168.42.210:80:100,192.168.59.174:80:100,192.168.15.71:80:100,192.168.18.3:80:100,192.168.58.115:80:100,192.168.17.42:80:100,192.168.46.186:80:100,192.168.53.23:80:100,192.168.33.214:80:100,192.168.13.15:80:100,192.168.17.156:80:100",
+            "vip":"111.13.235.236"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.114:80:100,192.168.41.210:80:100",
+            "vip":"192.168.102.185"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.18:80:100",
+            "vip":"192.168.101.220"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.7:80:100,192.168.7.15:80:100,192.168.17.127:80:100,192.168.46.113:80:100",
+            "vip":"111.13.235.105"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.23.52:80:100,192.168.45.135:80:100",
+            "vip":"192.168.101.78"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.240:80:100,192.168.49.178:80:100,192.168.9.173:80:100,192.168.11.125:80:100,192.168.23.145:80:100,192.168.2.43:80:100,192.168.37.109:80:100,192.168.25.173:80:100",
+            "vip":"192.168.101.252"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.104:80:100,192.168.19.62:80:100,192.168.37.122:80:100",
+            "vip":"192.168.102.3"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.77:80:100,192.168.15.134:80:100,192.168.45.12:80:100",
+            "vip":"192.168.101.94"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.152:80:100,192.168.17.151:80:100,192.168.29.100:80:100,192.168.41.79:80:100,192.168.3.234:80:100,192.168.42.152:80:100,192.168.6.178:80:100,192.168.30.128:80:100,192.168.53.214:80:100,192.168.49.209:80:100,192.168.45.2:80:100,192.168.51.144:80:100,192.168.29.47:80:100,192.168.22.222:80:100,192.168.6.22:80:100,192.168.33.236:80:100,192.168.33.183:80:100,192.168.1.67:80:100",
+            "vip":"192.168.102.205"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.21:80:100,192.168.37.138:80:100,192.168.31.156:80:100,192.168.27.230:80:100,192.168.2.186:80:100,192.168.54.213:80:100,192.168.14.110:80:100,192.168.14.93:80:100",
+            "vip":"192.168.101.231"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.238:80:100,192.168.6.246:80:100,192.168.6.175:80:100,192.168.2.237:80:100",
+            "vip":"192.168.102.41"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.217:80:100,192.168.34.10:80:100,192.168.9.142:80:100",
+            "vip":"192.168.102.128"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.239:80:100,192.168.3.107:80:100,192.168.37.7:80:100,192.168.2.49:80:100,192.168.19.38:80:100,192.168.3.179:80:100,192.168.25.180:80:100,192.168.7.24:80:100,192.168.19.171:80:100,192.168.34.35:80:100,192.168.2.170:80:100,192.168.54.41:80:100,192.168.21.195:80:100,192.168.22.175:80:100,192.168.46.10:80:100,192.168.23.127:80:100,192.168.39.174:80:100,192.168.59.135:80:100,192.168.45.21:80:100,192.168.30.38:80:100,192.168.15.4:80:100,192.168.30.45:80:100,192.168.26.98:80:100,192.168.38.105:80:100,192.168.6.146:80:100,192.168.25.27:80:100,192.168.49.63:80:100,192.168.5.14:80:100,192.168.47.37:80:100,192.168.51.192:80:100,192.168.49.188:80:100,192.168.10.158:80:100,192.168.46.237:80:100,192.168.18.68:80:100,192.168.37.20:80:100,192.168.33.197:80:100,192.168.14.223:80:100,192.168.15.7:80:100,192.168.27.142:80:100,192.168.2.89:80:100,192.168.47.252:80:100,192.168.22.142:80:100,192.168.49.97:80:100,192.168.33.126:80:100,192.168.26.67:80:100",
+            "vip":"192.168.102.98"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.213:80:100,192.168.3.126:80:100,192.168.15.199:80:100",
+            "vip":"192.168.101.164"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.161:80:100,192.168.11.47:80:100,192.168.26.245:80:100,192.168.19.176:80:100,192.168.35.209:80:100,192.168.38.247:80:100,192.168.35.214:80:100,192.168.59.246:80:100,192.168.10.38:80:100,192.168.5.205:80:100,192.168.27.104:80:100",
+            "vip":"192.168.101.70"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.111:80:100,192.168.54.227:80:100,192.168.43.50:80:100",
+            "vip":"192.168.102.207"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.197:80:100,192.168.37.44:80:100",
+            "vip":"192.168.101.27"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.137:80:100,192.168.51.133:80:100",
+            "vip":"192.168.102.177"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.83:80:100,192.168.58.78:80:100,192.168.1.192:80:100,192.168.47.197:80:100,192.168.38.157:80:100,192.168.47.150:80:100,192.168.25.215:80:100,192.168.46.118:80:100",
+            "vip":"192.168.101.148"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.7.113:80:100,192.168.35.169:80:100,192.168.34.131:80:100",
+            "vip":"111.13.235.142"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.170:80:100,192.168.7.88:80:100",
+            "vip":"192.168.102.45"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.81:80:100,192.168.2.145:80:100,192.168.55.54:80:100,192.168.29.115:80:100,192.168.46.140:80:100",
+            "vip":"192.168.101.102"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.122:80:100,192.168.9.211:80:100,192.168.33.226:80:100,192.168.21.22:80:100,192.168.43.18:80:100,192.168.25.143:80:100,192.168.47.238:80:100,192.168.7.100:80:100",
+            "vip":"192.168.101.25"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.65:80:100,192.168.38.112:80:100,192.168.19.30:80:100,192.168.5.31:80:100,192.168.57.77:80:100,192.168.23.6:80:100,192.168.22.99:80:100",
+            "vip":"192.168.102.72"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.182:80:100,192.168.53.196:80:100,192.168.47.231:80:100,192.168.6.17:80:100,192.168.45.178:80:100,192.168.9.86:80:100,192.168.2.213:80:100,192.168.13.157:80:100,192.168.58.60:80:100,192.168.26.53:80:100,192.168.45.89:80:100,192.168.31.157:80:100,192.168.19.62:80:100,192.168.15.153:80:100",
+            "vip":"192.168.102.172"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.85:80:100,192.168.39.194:80:100,192.168.2.11:80:100,192.168.49.73:80:100",
+            "vip":"192.168.101.134"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.250:80:100,192.168.14.27:80:100,192.168.50.18:80:100",
+            "vip":"192.168.101.188"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.126:80:100,192.168.1.209:80:100",
+            "vip":"192.168.101.76"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.95:80:100,192.168.22.159:80:100,192.168.45.206:80:100,192.168.46.147:80:100,192.168.54.159:80:100,192.168.57.9:80:100",
+            "vip":"111.13.235.239"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.206:80:100,192.168.39.190:80:100,192.168.2.205:80:100",
+            "vip":"192.168.102.218"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.26.176:80:100,192.168.21.168:80:100,192.168.19.9:80:100,192.168.31.190:80:100,192.168.29.16:80:100,192.168.42.79:80:100,192.168.57.3:80:100",
+            "vip":"192.168.102.240"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.130:80:100,192.168.1.24:80:100,192.168.9.184:80:100,192.168.1.146:80:100,192.168.37.64:80:100,192.168.3.165:80:100,192.168.46.166:80:100,192.168.27.120:80:100,192.168.29.41:80:100,192.168.26.130:80:100,192.168.29.14:80:100,192.168.59.209:80:100,192.168.1.2:80:100,192.168.58.106:80:100,192.168.33.210:80:100,192.168.27.123:80:100",
+            "vip":"111.13.235.208"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.116:80:100",
+            "vip":"111.13.235.84"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.45.166:80:100,192.168.21.5:80:100",
+            "vip":"111.13.235.93"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.77:80:100,192.168.41.56:80:100,192.168.57.189:80:100",
+            "vip":"192.168.101.179"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.201:80:100,192.168.45.229:80:100,192.168.29.141:80:100,192.168.27.229:80:100",
+            "vip":"192.168.101.235"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.180:80:100,192.168.6.144:80:100,192.168.41.49:80:100,192.168.33.25:80:100",
+            "vip":"192.168.101.250"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.11:80:100,192.168.53.75:80:100,192.168.46.169:80:100,192.168.35.193:80:100",
+            "vip":"192.168.102.26"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.222:80:100,192.168.26.116:80:100",
+            "vip":"111.13.235.217"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.44:80:100,192.168.57.200:80:100,192.168.31.79:80:100,192.168.38.108:80:100,192.168.23.8:80:100,192.168.38.115:80:100,192.168.51.120:80:100,192.168.7.68:80:100,192.168.33.87:80:100,192.168.35.100:80:100,192.168.14.71:80:100,192.168.9.58:80:100,192.168.43.236:80:100,192.168.42.51:80:100,192.168.37.48:80:100,192.168.42.62:80:100,192.168.53.34:80:100,192.168.25.148:80:100,192.168.6.231:80:100,192.168.2.60:80:100,192.168.17.193:80:100,192.168.2.52:80:100,192.168.57.124:80:100,192.168.5.200:80:100,192.168.19.248:80:100,192.168.29.178:80:100,192.168.23.138:80:100,192.168.19.41:80:100,192.168.55.249:80:100,192.168.34.185:80:100,192.168.43.133:80:100,192.168.23.136:80:100,192.168.42.111:80:100,192.168.6.10:80:100,192.168.17.71:80:100,192.168.15.222:80:100,192.168.10.225:80:100,192.168.15.64:80:100,192.168.19.159:80:100,192.168.34.197:80:100,192.168.11.250:80:100,192.168.22.18:80:100,192.168.30.37:80:100,192.168.18.24:80:100,192.168.38.206:80:100,192.168.10.211:80:100,192.168.17.148:80:100,192.168.34.238:80:100,192.168.53.95:80:100,192.168.33.231:80:100,192.168.11.45:80:100,192.168.14.166:80:100,192.168.29.141:80:100,192.168.45.99:80:100,192.168.38.56:80:100,192.168.13.205:80:100,192.168.22.50:80:100,192.168.7.243:80:100,192.168.33.85:80:100,192.168.13.223:80:100,192.168.22.187:80:100,192.168.18.79:80:100,192.168.10.75:80:100,192.168.42.31:80:100,192.168.43.221:80:100,192.168.5.31:80:100,192.168.57.152:80:100,192.168.58.15:80:100,192.168.41.108:80:100,192.168.31.94:80:100,192.168.50.8:80:100,192.168.33.210:80:100,192.168.34.160:80:100,192.168.27.34:80:100,192.168.42.9:80:100,192.168.46.78:80:100,192.168.59.225:80:100,192.168.26.191:80:100,192.168.15.182:80:100,192.168.9.243:80:100,192.168.21.71:80:100,192.168.33.33:80:100,192.168.41.28:80:100,192.168.29.38:80:100,192.168.45.178:80:100,192.168.13.208:80:100,192.168.13.129:80:100,192.168.47.134:80:100,192.168.43.9:80:100,192.168.59.64:80:100,192.168.46.22:80:100,192.168.51.15:80:100,192.168.10.112:80:100,192.168.15.13:80:100,192.168.33.149:80:100,192.168.55.222:80:100,192.168.3.53:80:100,192.168.31.41:80:100,192.168.41.99:80:100,192.168.37.31:80:100,192.168.49.162:80:100,192.168.50.113:80:100,192.168.2.173:80:100,192.168.18.87:80:100,192.168.3.20:80:100,192.168.46.229:80:100,192.168.31.254:80:100,192.168.17.7:80:100,192.168.7.212:80:100,192.168.6.106:80:100,192.168.17.160:80:100,192.168.59.212:80:100,192.168.7.29:80:100,192.168.58.202:80:100,192.168.46.227:80:100,192.168.1.46:80:100,192.168.50.226:80:100,192.168.26.5:80:100,192.168.59.15:80:100,192.168.51.148:80:100,192.168.26.62:80:100,192.168.50.242:80:100,192.168.35.36:80:100,192.168.47.245:80:100,192.168.49.30:80:100,192.168.11.249:80:100,192.168.17.251:80:100,192.168.29.65:80:100,192.168.11.106:80:100,192.168.46.9:80:100,192.168.37.185:80:100,192.168.21.183:80:100,192.168.31.220:80:100,192.168.15.2:80:100,192.168.18.103:80:100,192.168.51.13:80:100,192.168.17.129:80:100,192.168.34.25:80:100,192.168.38.242:80:100,192.168.47.5:80:100,192.168.13.11:80:100,192.168.33.180:80:100,192.168.37.226:80:100,192.168.3.124:80:100,192.168.35.190:80:100,192.168.30.96:80:100,192.168.29.99:80:100,192.168.55.58:80:100,192.168.13.111:80:100,192.168.42.161:80:100,192.168.14.182:80:100,192.168.21.68:80:100,192.168.6.74:80:100,192.168.59.132:80:100,192.168.13.7:80:100,192.168.39.217:80:100,192.168.39.124:80:100,192.168.21.144:80:100,192.168.58.240:80:100,192.168.21.166:80:100,192.168.3.114:80:100,192.168.53.186:80:100,192.168.42.234:80:100,192.168.17.42:80:100,192.168.33.236:80:100,192.168.43.217:80:100,192.168.50.5:80:100,192.168.58.125:80:100,192.168.7.75:80:100,192.168.3.83:80:100,192.168.21.155:80:100,192.168.43.136:80:100,192.168.1.186:80:100,192.168.39.188:80:100,192.168.17.70:80:100,192.168.58.46:80:100,192.168.18.128:80:100,192.168.15.45:80:100,192.168.41.68:80:100,192.168.15.17:80:100,192.168.43.233:80:100,192.168.42.125:80:100,192.168.45.132:80:100,192.168.17.76:80:100,192.168.22.176:80:100,192.168.17.104:80:100,192.168.33.57:80:100,192.168.29.167:80:100,192.168.50.243:80:100,192.168.38.61:80:100,192.168.14.249:80:100,192.168.35.186:80:100,192.168.31.228:80:100,192.168.29.67:80:100,192.168.13.180:80:100,192.168.33.41:80:100",
+            "vip":"192.168.101.132"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.196:80:100,192.168.53.193:80:100,192.168.47.97:80:100,192.168.47.233:80:100,192.168.9.179:80:100,192.168.15.29:80:100,192.168.53.143:80:100,192.168.15.142:80:100,192.168.13.111:80:100,192.168.59.242:80:100,192.168.14.61:80:100,192.168.49.92:80:100,192.168.2.223:80:100,192.168.46.203:80:100,192.168.35.168:80:100",
+            "vip":"192.168.101.32"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.253:80:100,192.168.19.37:80:100,192.168.1.192:80:100,192.168.10.138:80:100,192.168.23.110:80:100,192.168.19.216:80:100,192.168.29.177:80:100",
+            "vip":"111.13.235.148"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.130:80:100,192.168.14.249:80:100,192.168.53.238:80:100,192.168.30.146:80:100,192.168.9.78:80:100,192.168.1.252:80:100,192.168.23.5:80:100,192.168.9.211:80:100,192.168.6.24:80:100,192.168.5.162:80:100,192.168.46.158:80:100,192.168.59.105:80:100,192.168.25.212:80:100,192.168.18.100:80:100,192.168.42.200:80:100,192.168.50.250:80:100,192.168.57.228:80:100,192.168.33.48:80:100",
+            "vip":"192.168.102.200"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.226:80:100,192.168.22.219:80:100,192.168.2.18:80:100",
+            "vip":"192.168.102.197"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.124:80:100,192.168.33.13:80:100,192.168.43.158:80:100,192.168.14.56:80:100,192.168.21.207:80:100,192.168.47.165:80:100,192.168.11.75:80:100,192.168.6.103:80:100,192.168.49.207:80:100",
+            "vip":"192.168.102.43"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.23:80:100,192.168.50.35:80:100,192.168.53.82:80:100,192.168.22.240:80:100",
+            "vip":"192.168.102.221"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.1.76:80:100,192.168.2.40:80:100,192.168.51.116:80:100",
+            "vip":"111.13.235.159"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.14.161:80:100,192.168.49.62:80:100,192.168.22.89:80:100,192.168.35.91:80:100,192.168.39.138:80:100,192.168.34.244:80:100,192.168.2.135:80:100,192.168.33.87:80:100,192.168.10.144:80:100,192.168.15.120:80:100,192.168.3.194:80:100,192.168.45.222:80:100,192.168.54.253:80:100,192.168.29.198:80:100",
+            "vip":"192.168.102.75"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.26.74:80:100",
+            "vip":"111.13.235.193"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.58:80:100,192.168.58.222:80:100,192.168.7.32:80:100,192.168.2.8:80:100",
+            "vip":"192.168.101.218"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.1.239:80:100,192.168.46.249:80:100,192.168.23.104:80:100,192.168.23.170:80:100,192.168.45.185:80:100,192.168.38.170:80:100,192.168.7.103:80:100",
+            "vip":"192.168.101.187"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.41:80:100,192.168.59.215:80:100,192.168.54.176:80:100,192.168.38.24:80:100,192.168.29.83:80:100,192.168.23.162:80:100,192.168.11.12:80:100,192.168.42.116:80:100,192.168.14.214:80:100,192.168.22.90:80:100,192.168.47.96:80:100,192.168.3.231:80:100,192.168.25.156:80:100,192.168.5.5:80:100,192.168.14.250:80:100,192.168.59.168:80:100,192.168.27.71:80:100,192.168.31.251:80:100,192.168.55.179:80:100,192.168.2.51:80:100,192.168.33.57:80:100,192.168.35.253:80:100,192.168.29.39:80:100,192.168.7.66:80:100,192.168.59.37:80:100,192.168.33.42:80:100,192.168.23.145:80:100,192.168.46.98:80:100,192.168.43.52:80:100,192.168.14.191:80:100,192.168.13.231:80:100,192.168.51.160:80:100,192.168.2.53:80:100",
+            "vip":"192.168.102.206"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.235:80:100",
+            "vip":"192.168.102.86"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.9:80:100,192.168.50.73:80:100,192.168.10.147:80:100,192.168.26.148:80:100",
+            "vip":"192.168.102.186"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.6:80:100,192.168.18.190:80:100,192.168.2.20:80:100,192.168.55.90:80:100,192.168.42.10:80:100,192.168.50.109:80:100,192.168.15.130:80:100,192.168.13.136:80:100,192.168.9.1:80:100,192.168.7.167:80:100,192.168.37.72:80:100,192.168.14.184:80:100,192.168.1.160:80:100,192.168.19.98:80:100,192.168.22.90:80:100,192.168.43.62:80:100,192.168.38.212:80:100",
+            "vip":"192.168.102.116"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.95:80:100,192.168.55.28:80:100,192.168.33.187:80:100",
+            "vip":"111.13.235.151"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.212:80:100,192.168.37.223:80:100,192.168.42.166:80:100,192.168.50.63:80:100",
+            "vip":"192.168.101.100"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.8:80:100,192.168.27.101:80:100,192.168.45.92:80:100,192.168.45.136:80:100,192.168.27.133:80:100,192.168.31.156:80:100,192.168.25.99:80:100,192.168.15.231:80:100",
+            "vip":"192.168.101.224"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.98:80:100,192.168.15.71:80:100,192.168.58.115:80:100",
+            "vip":"192.168.102.174"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.19:80:100",
+            "vip":"111.13.235.115"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.54.15:80:100,192.168.25.48:80:100,192.168.15.243:80:100,192.168.54.57:80:100,192.168.43.116:80:100,192.168.54.188:80:100,192.168.59.149:80:100,192.168.26.81:80:100,192.168.13.230:80:100,192.168.19.12:80:100,192.168.23.201:80:100,192.168.54.2:80:100",
+            "vip":"192.168.101.92"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.232:80:100,192.168.25.241:80:100,192.168.34.204:80:100,192.168.51.237:80:100,192.168.30.246:80:100,192.168.2.68:80:100,192.168.3.134:80:100",
+            "vip":"111.13.235.171"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.46.245:80:100,192.168.43.131:80:100,192.168.42.221:80:100,192.168.17.58:80:100,192.168.46.32:80:100,192.168.6.21:80:100,192.168.33.6:80:100,192.168.15.26:80:100,192.168.55.130:80:100,192.168.53.203:80:100,192.168.31.192:80:100,192.168.34.235:80:100,192.168.43.183:80:100,192.168.17.156:80:100,192.168.3.48:80:100",
+            "vip":"111.13.235.215"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.23.24:80:100,192.168.49.194:80:100,192.168.53.161:80:100,192.168.51.108:80:100,192.168.17.27:80:100,192.168.13.169:80:100,192.168.5.193:80:100,192.168.1.115:80:100",
+            "vip":"192.168.102.232"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.127:80:100,192.168.47.29:80:100,192.168.54.179:80:100,192.168.50.80:80:100",
+            "vip":"192.168.101.230"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.139:80:100,192.168.18.206:80:100,192.168.55.223:80:100,192.168.41.216:80:100,192.168.38.19:80:100,192.168.54.53:80:100,192.168.23.198:80:100,192.168.50.220:80:100",
+            "vip":"192.168.102.24"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.1:80:100,192.168.30.214:80:100",
+            "vip":"192.168.102.180"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.17.147:80:100,192.168.38.133:80:100,192.168.1.87:80:100,192.168.55.77:80:100,192.168.41.10:80:100,192.168.27.42:80:100,192.168.7.57:80:100,192.168.1.176:80:100,192.168.31.14:80:100,192.168.49.155:80:100,192.168.29.147:80:100,192.168.13.104:80:100",
+            "vip":"192.168.101.52"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.87:80:100,192.168.30.235:80:100,192.168.39.83:80:100",
+            "vip":"111.13.235.207"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.111:80:100",
+            "vip":"192.168.101.214"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.1:80:100,192.168.15.169:80:100,192.168.38.161:80:100,192.168.29.188:80:100,192.168.15.58:80:100,192.168.11.173:80:100,192.168.37.21:80:100,192.168.9.245:80:100",
+            "vip":"111.13.235.234"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.209:80:100,192.168.15.201:80:100,192.168.46.232:80:100,192.168.25.133:80:100,192.168.35.213:80:100,192.168.27.163:80:100,192.168.1.249:80:100,192.168.37.152:80:100",
+            "vip":"192.168.101.44"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.41:80:100,192.168.37.177:80:100,192.168.9.59:80:100,192.168.43.86:80:100,192.168.50.171:80:100,192.168.13.174:80:100,192.168.13.68:80:100,192.168.54.180:80:100,192.168.10.196:80:100,192.168.21.247:80:100,192.168.25.79:80:100,192.168.19.12:80:100,192.168.54.199:80:100,192.168.18.142:80:100,192.168.15.202:80:100,192.168.19.228:80:100,192.168.49.68:80:100,192.168.17.63:80:100,192.168.43.108:80:100,192.168.33.106:80:100,192.168.23.201:80:100,192.168.1.99:80:100",
+            "vip":"192.168.101.127"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.85:80:100,192.168.18.107:80:100,192.168.2.35:80:100,192.168.39.77:80:100,192.168.1.204:80:100",
+            "vip":"111.13.235.150"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.126:80:100,192.168.2.246:80:100,192.168.19.120:80:100,192.168.45.40:80:100,192.168.34.198:80:100,192.168.54.222:80:100,192.168.21.221:80:100,192.168.47.51:80:100,192.168.15.126:80:100,192.168.35.207:80:100,192.168.51.150:80:100,192.168.37.221:80:100",
+            "vip":"192.168.102.230"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.93:80:100,192.168.1.201:80:100",
+            "vip":"192.168.102.39"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.218:80:100,192.168.51.29:80:100,192.168.2.212:80:100",
+            "vip":"111.13.235.147"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.122:80:100,192.168.54.183:80:100,192.168.19.167:80:100,192.168.53.94:80:100,192.168.39.3:80:100,192.168.21.150:80:100,192.168.31.124:80:100,192.168.58.166:80:100",
+            "vip":"192.168.102.223"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.191:80:100,192.168.26.45:80:100,192.168.2.31:80:100",
+            "vip":"192.168.101.129"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.231:80:100,192.168.26.86:80:100,192.168.33.166:80:100,192.168.15.10:80:100,192.168.59.79:80:100,192.168.29.136:80:100",
+            "vip":"192.168.102.23"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.100:80:100,192.168.57.30:80:100",
+            "vip":"111.13.235.98"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.45.159:80:100,192.168.9.168:80:100,192.168.53.15:80:100,192.168.47.174:80:100",
+            "vip":"192.168.102.90"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.2.193:80:100,192.168.45.211:80:100,192.168.18.209:80:100,192.168.30.45:80:100,192.168.50.194:80:100",
+            "vip":"192.168.102.250"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.45.1:80:100,192.168.5.72:80:100,192.168.25.202:80:100,192.168.38.209:80:100,192.168.50.120:80:100,192.168.26.64:80:100,192.168.27.150:80:100,192.168.27.5:80:100,192.168.46.137:80:100,192.168.50.53:80:100,192.168.53.117:80:100,192.168.47.237:80:100,192.168.10.235:80:100,192.168.21.179:80:100,192.168.55.151:80:100,192.168.7.158:80:100,192.168.18.100:80:100,192.168.25.215:80:100,192.168.46.122:80:100",
+            "vip":"192.168.102.83"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.119:80:100,192.168.33.251:80:100,192.168.19.209:80:100,192.168.51.235:80:100,192.168.18.2:80:100,192.168.27.20:80:100,192.168.39.211:80:100,192.168.59.186:80:100,192.168.41.107:80:100,192.168.22.136:80:100,192.168.51.65:80:100,192.168.37.151:80:100,192.168.14.151:80:100,192.168.2.49:80:100,192.168.59.217:80:100,192.168.22.36:80:100,192.168.6.30:80:100,192.168.54.102:80:100,192.168.38.43:80:100,192.168.35.39:80:100,192.168.57.92:80:100,192.168.37.241:80:100,192.168.51.25:80:100,192.168.5.142:80:100,192.168.42.14:80:100,192.168.46.191:80:100",
+            "vip":"111.13.235.169"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.168:80:100,192.168.3.67:80:100,192.168.17.236:80:100,192.168.39.163:80:100,192.168.42.215:80:100,192.168.31.104:80:100,192.168.18.186:80:100,192.168.9.99:80:100,192.168.17.116:80:100",
+            "vip":"111.13.235.86"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.23.239:80:100,192.168.53.218:80:100,192.168.22.254:80:100,192.168.3.3:80:100,192.168.49.52:80:100",
+            "vip":"111.13.235.91"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.139:80:100,192.168.15.87:80:100",
+            "vip":"192.168.101.223"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.218:80:100,192.168.21.122:80:100,192.168.18.125:80:100,192.168.49.157:80:100,192.168.13.243:80:100,192.168.31.15:80:100,192.168.49.72:80:100",
+            "vip":"111.13.235.75"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.51.55:80:100,192.168.43.158:80:100,192.168.55.141:80:100,192.168.10.69:80:100,192.168.57.214:80:100,192.168.1.170:80:100,192.168.50.25:80:100,192.168.1.80:80:100,192.168.34.15:80:100",
+            "vip":"192.168.101.28"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.7:80:100,192.168.10.189:80:100,192.168.22.29:80:100,192.168.35.73:80:100,192.168.35.54:80:100,192.168.22.63:80:100,192.168.31.99:80:100",
+            "vip":"192.168.101.9"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.254:80:100,192.168.7.6:80:100,192.168.41.19:80:100,192.168.57.194:80:100,192.168.27.186:80:100",
+            "vip":"111.13.235.94"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.253:80:100,192.168.37.196:80:100,192.168.35.12:80:100,192.168.50.14:80:100,192.168.14.145:80:100,192.168.59.47:80:100,192.168.30.53:80:100,192.168.50.30:80:100,192.168.54.59:80:100,192.168.41.166:80:100,192.168.2.81:80:100,192.168.3.50:80:100,192.168.31.24:80:100,192.168.22.153:80:100,192.168.31.34:80:100,192.168.18.195:80:100,192.168.59.135:80:100,192.168.30.177:80:100,192.168.9.218:80:100,192.168.1.240:80:100,192.168.27.198:80:100,192.168.10.49:80:100,192.168.27.29:80:100,192.168.2.160:80:100,192.168.27.22:80:100,192.168.42.136:80:100,192.168.51.78:80:100,192.168.21.140:80:100,192.168.23.72:80:100,192.168.10.164:80:100,192.168.38.238:80:100,192.168.58.239:80:100,192.168.46.163:80:100,192.168.27.106:80:100,192.168.14.224:80:100,192.168.49.182:80:100,192.168.29.100:80:100,192.168.42.43:80:100,192.168.27.234:80:100,192.168.43.194:80:100,192.168.5.105:80:100,192.168.55.196:80:100,192.168.29.42:80:100,192.168.33.118:80:100,192.168.45.138:80:100,192.168.5.151:80:100,192.168.53.203:80:100,192.168.37.124:80:100,192.168.11.178:80:100,192.168.2.34:80:100,192.168.43.215:80:100,192.168.41.189:80:100,192.168.39.199:80:100,192.168.11.23:80:100,192.168.45.103:80:100,192.168.43.240:80:100,192.168.5.143:80:100,192.168.54.235:80:100,192.168.46.172:80:100,192.168.37.48:80:100,192.168.30.146:80:100,192.168.45.215:80:100,192.168.33.150:80:100,192.168.18.125:80:100,192.168.19.187:80:100,192.168.53.13:80:100,192.168.49.27:80:100,192.168.15.44:80:100,192.168.37.219:80:100,192.168.37.227:80:100,192.168.37.242:80:100,192.168.26.22:80:100,192.168.23.160:80:100,192.168.7.247:80:100,192.168.53.204:80:100,192.168.27.217:80:100,192.168.14.250:80:100,192.168.49.38:80:100,192.168.30.171:80:100,192.168.53.59:80:100,192.168.54.108:80:100,192.168.34.122:80:100,192.168.10.158:80:100,192.168.38.51:80:100,192.168.7.99:80:100,192.168.23.2:80:100,192.168.54.42:80:100,192.168.35.111:80:100,192.168.2.176:80:100,192.168.5.205:80:100,192.168.43.144:80:100,192.168.29.104:80:100,192.168.38.116:80:100,192.168.33.194:80:100,192.168.3.187:80:100,192.168.22.167:80:100,192.168.45.147:80:100,192.168.7.83:80:100,192.168.17.124:80:100,192.168.53.154:80:100,192.168.7.223:80:100,192.168.21.128:80:100,192.168.2.139:80:100,192.168.50.191:80:100,192.168.30.52:80:100,192.168.39.80:80:100,192.168.37.77:80:100,192.168.42.30:80:100,192.168.31.130:80:100,192.168.51.48:80:100,192.168.47.163:80:100,192.168.10.85:80:100,192.168.14.75:80:100,192.168.38.22:80:100,192.168.14.23:80:100,192.168.46.198:80:100,192.168.3.104:80:100,192.168.14.2:80:100,192.168.34.79:80:100,192.168.14.118:80:100,192.168.37.28:80:100,192.168.31.81:80:100,192.168.39.238:80:100,192.168.23.212:80:100,192.168.22.192:80:100,192.168.51.123:80:100,192.168.15.87:80:100,192.168.57.180:80:100,192.168.10.13:80:100,192.168.21.233:80:100,192.168.26.157:80:100,192.168.58.98:80:100,192.168.41.162:80:100,192.168.3.225:80:100,192.168.58.42:80:100,192.168.43.95:80:100,192.168.33.84:80:100,192.168.7.16:80:100,192.168.42.133:80:100,192.168.13.155:80:100,192.168.17.117:80:100,192.168.34.242:80:100,192.168.47.22:80:100,192.168.3.3:80:100,192.168.10.60:80:100,192.168.9.196:80:100,192.168.59.11:80:100,192.168.57.193:80:100,192.168.55.203:80:100,192.168.25.102:80:100,192.168.19.52:80:100,192.168.26.116:80:100,192.168.55.248:80:100,192.168.18.2:80:100,192.168.35.208:80:100,192.168.26.23:80:100,192.168.46.11:80:100,192.168.45.126:80:100,192.168.47.116:80:100,192.168.15.142:80:100,192.168.21.6:80:100,192.168.42.233:80:100,192.168.55.81:80:100,192.168.15.227:80:100,192.168.10.33:80:100,192.168.54.137:80:100,192.168.3.111:80:100,192.168.17.157:80:100,192.168.57.134:80:100,192.168.53.99:80:100,192.168.53.52:80:100,192.168.11.174:80:100,192.168.23.108:80:100,192.168.39.36:80:100,192.168.33.140:80:100,192.168.55.218:80:100,192.168.42.155:80:100,192.168.59.75:80:100,192.168.19.178:80:100,192.168.42.24:80:100,192.168.7.177:80:100,192.168.42.115:80:100,192.168.17.125:80:100,192.168.45.87:80:100",
+            "vip":"192.168.102.25"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.249:80:100,192.168.22.210:80:100,192.168.58.134:80:100,192.168.51.45:80:100,192.168.33.155:80:100,192.168.15.11:80:100,192.168.31.209:80:100,192.168.38.79:80:100,192.168.14.46:80:100",
+            "vip":"192.168.101.90"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.65:80:100,192.168.39.63:80:100,192.168.25.190:80:100",
+            "vip":"111.13.235.77"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.57.107:80:100,192.168.41.105:80:100,192.168.29.156:80:100,192.168.53.29:80:100,192.168.11.47:80:100,192.168.51.126:80:100,192.168.7.2:80:100,192.168.49.83:80:100,192.168.15.53:80:100,192.168.19.167:80:100,192.168.31.116:80:100,192.168.18.78:80:100,192.168.37.89:80:100",
+            "vip":"192.168.101.170"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.34:80:100,192.168.34.194:80:100",
+            "vip":"192.168.101.118"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.38:80:100,192.168.53.247:80:100",
+            "vip":"192.168.102.52"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.19:80:100,192.168.21.108:80:100,192.168.18.199:80:100",
+            "vip":"192.168.101.75"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.185:80:100",
+            "vip":"192.168.101.185"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.172:80:100,192.168.51.243:80:100",
+            "vip":"192.168.102.103"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.127:80:100,192.168.15.42:80:100,192.168.46.211:80:100,192.168.21.139:80:100,192.168.45.77:80:100,192.168.23.239:80:100,192.168.31.146:80:100,192.168.7.242:80:100,192.168.7.59:80:100,192.168.10.93:80:100,192.168.29.222:80:100,192.168.5.185:80:100,192.168.43.219:80:100,192.168.1.2:80:100,192.168.37.78:80:100,192.168.15.115:80:100,192.168.3.146:80:100,192.168.45.240:80:100,192.168.2.130:80:100,192.168.31.217:80:100,192.168.31.152:80:100,192.168.57.234:80:100,192.168.35.207:80:100,192.168.17.156:80:100,192.168.46.49:80:100,192.168.37.97:80:100,192.168.45.192:80:100,192.168.41.245:80:100,192.168.49.248:80:100,192.168.13.198:80:100,192.168.19.231:80:100,192.168.54.174:80:100,192.168.2.155:80:100,192.168.55.209:80:100,192.168.31.10:80:100,192.168.47.139:80:100,192.168.59.62:80:100,192.168.33.208:80:100,192.168.6.73:80:100,192.168.21.7:80:100,192.168.58.201:80:100,192.168.35.230:80:100,192.168.3.102:80:100,192.168.27.100:80:100,192.168.29.180:80:100,192.168.35.166:80:100,192.168.7.5:80:100,192.168.1.7:80:100,192.168.31.149:80:100,192.168.37.66:80:100,192.168.41.35:80:100,192.168.15.197:80:100,192.168.47.148:80:100,192.168.10.213:80:100,192.168.10.229:80:100,192.168.35.183:80:100,192.168.6.108:80:100,192.168.15.204:80:100,192.168.47.74:80:100,192.168.26.179:80:100,192.168.18.218:80:100,192.168.37.42:80:100,192.168.38.179:80:100,192.168.39.105:80:100,192.168.14.47:80:100,192.168.26.212:80:100,192.168.30.245:80:100,192.168.41.100:80:100,192.168.49.10:80:100,192.168.19.131:80:100,192.168.30.209:80:100,192.168.7.88:80:100,192.168.54.201:80:100,192.168.7.157:80:100,192.168.26.211:80:100,192.168.59.2:80:100,192.168.11.147:80:100,192.168.43.33:80:100,192.168.35.75:80:100,192.168.34.89:80:100,192.168.30.142:80:100,192.168.34.198:80:100,192.168.18.134:80:100,192.168.53.183:80:100,192.168.5.234:80:100,192.168.13.36:80:100,192.168.50.31:80:100,192.168.10.192:80:100,192.168.45.167:80:100,192.168.2.115:80:100,192.168.43.142:80:100,192.168.31.95:80:100,192.168.50.250:80:100,192.168.57.140:80:100,192.168.15.128:80:100,192.168.14.212:80:100,192.168.29.89:80:100,192.168.41.68:80:100,192.168.19.229:80:100,192.168.11.20:80:100,192.168.39.73:80:100,192.168.42.53:80:100,192.168.35.199:80:100,192.168.26.54:80:100,192.168.46.102:80:100,192.168.22.127:80:100,192.168.47.59:80:100,192.168.59.75:80:100,192.168.49.206:80:100,192.168.54.210:80:100,192.168.53.156:80:100,192.168.26.49:80:100,192.168.57.19:80:100",
+            "vip":"192.168.102.71"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.140:80:100,192.168.23.173:80:100,192.168.9.167:80:100,192.168.59.48:80:100",
+            "vip":"192.168.102.84"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.222:80:100,192.168.2.135:80:100,192.168.25.177:80:100,192.168.49.75:80:100",
+            "vip":"192.168.101.21"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.228:80:100,192.168.18.2:80:100,192.168.59.179:80:100",
+            "vip":"111.13.235.158"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.199:80:100",
+            "vip":"111.13.235.178"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.14.68:80:100,192.168.34.228:80:100,192.168.42.40:80:100,192.168.18.68:80:100,192.168.7.162:80:100,192.168.27.164:80:100,192.168.18.207:80:100,192.168.10.187:80:100,192.168.18.148:80:100,192.168.59.99:80:100,192.168.30.165:80:100,192.168.35.103:80:100,192.168.47.160:80:100,192.168.31.59:80:100,192.168.59.146:80:100,192.168.15.19:80:100,192.168.58.224:80:100",
+            "vip":"192.168.102.181"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.147:80:100,192.168.13.104:80:100,192.168.11.39:80:100,192.168.10.192:80:100",
+            "vip":"192.168.102.79"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.25.60:80:100,192.168.38.254:80:100",
+            "vip":"192.168.101.137"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.82:80:100",
+            "vip":"192.168.102.133"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.2.60:80:100,192.168.21.111:80:100,192.168.21.87:80:100,192.168.34.24:80:100,192.168.41.184:80:100,192.168.33.56:80:100,192.168.5.196:80:100,192.168.6.97:80:100,192.168.33.86:80:100,192.168.14.179:80:100,192.168.55.187:80:100,192.168.42.19:80:100,192.168.31.182:80:100,192.168.59.92:80:100,192.168.35.7:80:100,192.168.38.7:80:100",
+            "vip":"192.168.102.203"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.199:80:100,192.168.57.203:80:100,192.168.15.54:80:100,192.168.6.136:80:100",
+            "vip":"192.168.102.113"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.199:80:100,192.168.14.55:80:100,192.168.5.231:80:100,192.168.29.5:80:100",
+            "vip":"192.168.102.162"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.51.100:80:100",
+            "vip":"192.168.102.157"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.25.217:80:100,192.168.39.126:80:100",
+            "vip":"192.168.101.221"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.81:80:100,192.168.23.243:80:100,192.168.37.52:80:100,192.168.27.221:80:100",
+            "vip":"192.168.102.238"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.10:80:100,192.168.15.103:80:100",
+            "vip":"111.13.235.92"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.215:80:100,192.168.45.103:80:100,192.168.9.40:80:100,192.168.15.108:80:100,192.168.33.39:80:100,192.168.11.79:80:100,192.168.18.50:80:100",
+            "vip":"192.168.101.163"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.137:80:100,192.168.58.63:80:100,192.168.21.174:80:100,192.168.1.185:80:100,192.168.3.222:80:100,192.168.5.118:80:100",
+            "vip":"192.168.101.212"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.43.175:80:100,192.168.17.189:80:100,192.168.43.130:80:100,192.168.2.61:80:100",
+            "vip":"192.168.101.46"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.172:80:100,192.168.5.91:80:100,192.168.10.200:80:100,192.168.58.207:80:100,192.168.26.167:80:100,192.168.33.106:80:100,192.168.46.65:80:100,192.168.19.53:80:100,192.168.9.17:80:100,192.168.29.55:80:100,192.168.5.16:80:100,192.168.37.214:80:100,192.168.18.96:80:100",
+            "vip":"192.168.101.33"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.2.66:80:100",
+            "vip":"192.168.101.12"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.235:80:100,192.168.43.208:80:100,192.168.58.131:80:100,192.168.29.107:80:100,192.168.18.9:80:100,192.168.57.84:80:100,192.168.39.113:80:100,192.168.9.63:80:100,192.168.14.185:80:100,192.168.9.2:80:100,192.168.58.36:80:100,192.168.38.237:80:100,192.168.7.32:80:100,192.168.58.52:80:100,192.168.3.79:80:100,192.168.18.60:80:100,192.168.19.56:80:100,192.168.25.49:80:100,192.168.59.109:80:100,192.168.59.112:80:100,192.168.2.14:80:100,192.168.22.195:80:100,192.168.25.200:80:100,192.168.30.122:80:100,192.168.35.129:80:100,192.168.49.204:80:100,192.168.35.52:80:100,192.168.53.169:80:100,192.168.38.153:80:100,192.168.13.194:80:100,192.168.42.249:80:100,192.168.29.177:80:100",
+            "vip":"111.13.235.145"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.100:80:100,192.168.29.117:80:100,192.168.54.191:80:100,192.168.34.199:80:100,192.168.29.55:80:100,192.168.33.66:80:100,192.168.53.10:80:100",
+            "vip":"192.168.102.21"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.236:80:100",
+            "vip":"192.168.101.239"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.100:80:100,192.168.30.49:80:100,192.168.30.246:80:100,192.168.58.71:80:100,192.168.57.241:80:100,192.168.51.87:80:100,192.168.18.7:80:100,192.168.10.209:80:100,192.168.10.127:80:100,192.168.47.72:80:100,192.168.29.181:80:100,192.168.46.249:80:100,192.168.2.165:80:100,192.168.43.84:80:100,192.168.3.7:80:100,192.168.31.87:80:100,192.168.59.41:80:100,192.168.15.23:80:100,192.168.19.147:80:100,192.168.6.86:80:100,192.168.34.253:80:100,192.168.13.97:80:100,192.168.22.112:80:100,192.168.7.215:80:100,192.168.6.28:80:100,192.168.25.181:80:100,192.168.45.54:80:100,192.168.41.53:80:100,192.168.43.210:80:100,192.168.47.57:80:100,192.168.21.200:80:100,192.168.15.26:80:100,192.168.13.148:80:100,192.168.39.125:80:100,192.168.17.82:80:100,192.168.41.31:80:100,192.168.25.42:80:100,192.168.1.79:80:100,192.168.13.38:80:100,192.168.33.5:80:100,192.168.57.29:80:100,192.168.9.66:80:100,192.168.39.79:80:100,192.168.5.143:80:100,192.168.13.116:80:100,192.168.34.214:80:100,192.168.38.190:80:100,192.168.54.177:80:100,192.168.1.9:80:100,192.168.46.56:80:100,192.168.41.58:80:100,192.168.43.86:80:100,192.168.33.116:80:100,192.168.26.39:80:100,192.168.5.73:80:100,192.168.3.140:80:100,192.168.58.231:80:100,192.168.10.1:80:100,192.168.3.79:80:100,192.168.50.89:80:100,192.168.43.177:80:100,192.168.5.210:80:100,192.168.25.211:80:100,192.168.50.187:80:100,192.168.26.196:80:100,192.168.33.211:80:100,192.168.1.170:80:100,192.168.26.222:80:100,192.168.31.91:80:100,192.168.50.70:80:100,192.168.42.49:80:100,192.168.42.139:80:100,192.168.53.90:80:100,192.168.17.134:80:100,192.168.19.9:80:100,192.168.47.146:80:100,192.168.10.36:80:100,192.168.3.187:80:100,192.168.21.192:80:100,192.168.7.186:80:100,192.168.30.94:80:100,192.168.59.174:80:100,192.168.43.120:80:100,192.168.15.71:80:100,192.168.42.195:80:100,192.168.13.85:80:100,192.168.10.8:80:100,192.168.18.17:80:100,192.168.50.235:80:100,192.168.35.5:80:100,192.168.25.103:80:100,192.168.9.225:80:100,192.168.53.142:80:100,192.168.38.123:80:100,192.168.13.17:80:100,192.168.31.252:80:100,192.168.5.165:80:100,192.168.29.217:80:100,192.168.58.197:80:100,192.168.46.144:80:100,192.168.46.208:80:100,192.168.27.250:80:100,192.168.26.120:80:100,192.168.13.254:80:100,192.168.42.62:80:100,192.168.6.236:80:100,192.168.54.129:80:100,192.168.34.129:80:100,192.168.19.96:80:100,192.168.27.218:80:100,192.168.42.133:80:100,192.168.3.201:80:100,192.168.13.30:80:100,192.168.22.128:80:100,192.168.55.58:80:100,192.168.33.126:80:100,192.168.47.92:80:100,192.168.23.216:80:100,192.168.53.189:80:100,192.168.38.198:80:100,192.168.29.85:80:100,192.168.9.217:80:100,192.168.35.25:80:100,192.168.14.17:80:100,192.168.6.193:80:100,192.168.43.96:80:100,192.168.47.76:80:100,192.168.10.51:80:100,192.168.38.143:80:100,192.168.43.122:80:100,192.168.23.214:80:100,192.168.43.47:80:100,192.168.37.210:80:100,192.168.3.186:80:100,192.168.13.175:80:100,192.168.5.29:80:100,192.168.59.192:80:100,192.168.7.109:80:100,192.168.46.233:80:100,192.168.51.54:80:100,192.168.43.79:80:100,192.168.57.226:80:100,192.168.3.162:80:100,192.168.41.162:80:100,192.168.43.166:80:100,192.168.37.77:80:100,192.168.50.233:80:100,192.168.11.78:80:100,192.168.31.139:80:100,192.168.54.182:80:100,192.168.25.194:80:100,192.168.27.184:80:100,192.168.15.105:80:100,192.168.46.226:80:100,192.168.25.163:80:100,192.168.29.135:80:100,192.168.57.57:80:100,192.168.41.165:80:100,192.168.21.236:80:100,192.168.57.189:80:100,192.168.27.213:80:100,192.168.13.33:80:100",
+            "vip":"192.168.102.66"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.157:80:100,192.168.47.130:80:100,192.168.31.63:80:100,192.168.21.167:80:100,192.168.19.124:80:100,192.168.47.111:80:100,192.168.3.157:80:100,192.168.39.21:80:100,192.168.25.142:80:100,192.168.33.175:80:100,192.168.22.83:80:100,192.168.22.247:80:100,192.168.18.168:80:100,192.168.39.68:80:100,192.168.31.111:80:100,192.168.5.129:80:100,192.168.51.34:80:100,192.168.13.109:80:100,192.168.58.32:80:100",
+            "vip":"111.13.235.255"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.136:80:100,192.168.46.173:80:100,192.168.10.243:80:100,192.168.55.137:80:100,192.168.15.55:80:100,192.168.42.136:80:100,192.168.34.17:80:100,192.168.6.207:80:100,192.168.46.4:80:100,192.168.57.156:80:100,192.168.38.232:80:100,192.168.10.81:80:100,192.168.58.63:80:100,192.168.9.218:80:100,192.168.47.142:80:100,192.168.46.14:80:100,192.168.13.89:80:100,192.168.57.94:80:100,192.168.31.145:80:100,192.168.43.133:80:100,192.168.26.175:80:100,192.168.2.130:80:100,192.168.33.26:80:100,192.168.27.157:80:100,192.168.6.92:80:100,192.168.23.183:80:100,192.168.49.88:80:100,192.168.33.176:80:100,192.168.5.120:80:100,192.168.27.234:80:100,192.168.57.22:80:100,192.168.22.132:80:100,192.168.34.3:80:100,192.168.19.107:80:100,192.168.50.57:80:100,192.168.42.185:80:100,192.168.6.126:80:100,192.168.13.99:80:100,192.168.53.222:80:100,192.168.3.65:80:100,192.168.22.143:80:100,192.168.19.4:80:100,192.168.49.149:80:100,192.168.42.134:80:100,192.168.41.105:80:100,192.168.27.103:80:100,192.168.21.30:80:100,192.168.11.227:80:100,192.168.10.245:80:100,192.168.41.49:80:100,192.168.14.147:80:100,192.168.41.154:80:100,192.168.41.104:80:100,192.168.43.177:80:100,192.168.55.141:80:100,192.168.29.180:80:100,192.168.13.157:80:100,192.168.27.162:80:100,192.168.5.66:80:100,192.168.41.8:80:100,192.168.54.68:80:100,192.168.45.229:80:100,192.168.43.55:80:100,192.168.14.83:80:100,192.168.27.199:80:100,192.168.37.231:80:100,192.168.2.6:80:100,192.168.5.106:80:100,192.168.37.133:80:100,192.168.53.7:80:100,192.168.6.251:80:100,192.168.49.40:80:100,192.168.26.6:80:100,192.168.55.139:80:100,192.168.25.249:80:100,192.168.18.9:80:100,192.168.27.144:80:100,192.168.54.41:80:100,192.168.49.179:80:100,192.168.53.15:80:100,192.168.35.163:80:100,192.168.23.170:80:100,192.168.9.48:80:100,192.168.38.15:80:100,192.168.5.165:80:100,192.168.59.74:80:100,192.168.7.164:80:100,192.168.27.28:80:100,192.168.51.182:80:100,192.168.18.120:80:100,192.168.39.84:80:100,192.168.15.228:80:100,192.168.34.210:80:100,192.168.13.130:80:100,192.168.31.43:80:100,192.168.22.225:80:100,192.168.2.182:80:100,192.168.26.9:80:100,192.168.10.80:80:100,192.168.26.158:80:100,192.168.51.43:80:100,192.168.23.9:80:100,192.168.3.101:80:100,192.168.53.12:80:100,192.168.2.63:80:100,192.168.13.184:80:100,192.168.25.7:80:100,192.168.50.250:80:100,192.168.47.195:80:100,192.168.35.108:80:100,192.168.55.226:80:100,192.168.58.163:80:100,192.168.15.242:80:100,192.168.29.5:80:100,192.168.37.226:80:100,192.168.9.128:80:100,192.168.22.42:80:100,192.168.5.169:80:100,192.168.25.252:80:100,192.168.23.16:80:100,192.168.29.82:80:100,192.168.55.199:80:100,192.168.45.82:80:100,192.168.39.155:80:100,192.168.45.235:80:100,192.168.50.63:80:100,192.168.11.165:80:100,192.168.31.216:80:100,192.168.17.214:80:100,192.168.10.124:80:100,192.168.30.120:80:100,192.168.6.29:80:100,192.168.50.22:80:100,192.168.22.248:80:100,192.168.31.237:80:100",
+            "vip":"192.168.101.171"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.26.118:80:100,192.168.43.183:80:100",
+            "vip":"111.13.235.121"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.148:80:100,192.168.21.125:80:100,192.168.13.157:80:100,192.168.51.202:80:100,192.168.22.103:80:100,192.168.34.10:80:100,192.168.51.167:80:100,192.168.13.113:80:100,192.168.39.155:80:100,192.168.34.170:80:100,192.168.49.6:80:100,192.168.26.70:80:100,192.168.21.36:80:100,192.168.17.180:80:100,192.168.11.103:80:100,192.168.6.188:80:100,192.168.55.7:80:100,192.168.25.41:80:100",
+            "vip":"192.168.102.120"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.78:80:100,192.168.2.101:80:100,192.168.47.151:80:100",
+            "vip":"192.168.102.57"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.135:80:100,192.168.9.157:80:100,192.168.57.36:80:100,192.168.33.11:80:100",
+            "vip":"192.168.102.81"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.229:80:100,192.168.50.176:80:100,192.168.49.166:80:100,192.168.30.88:80:100,192.168.42.3:80:100",
+            "vip":"192.168.102.252"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.90:80:100,192.168.5.105:80:100,192.168.57.151:80:100,192.168.45.189:80:100,192.168.38.154:80:100,192.168.22.76:80:100,192.168.47.110:80:100,192.168.5.143:80:100,192.168.54.3:80:100",
+            "vip":"192.168.102.220"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.23.94:80:100,192.168.25.32:80:100,192.168.15.178:80:100,192.168.5.166:80:100,192.168.29.24:80:100,192.168.29.70:80:100,192.168.23.40:80:100,192.168.2.231:80:100,192.168.37.129:80:100,192.168.14.175:80:100,192.168.3.111:80:100,192.168.35.96:80:100,192.168.1.226:80:100,192.168.49.151:80:100,192.168.7.93:80:100",
+            "vip":"111.13.235.140"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.40:80:100,192.168.5.225:80:100,192.168.37.250:80:100,192.168.19.128:80:100",
+            "vip":"192.168.102.134"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.26:80:100,192.168.22.225:80:100",
+            "vip":"192.168.102.73"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.26:80:100,192.168.37.228:80:100,192.168.23.206:80:100,192.168.49.50:80:100",
+            "vip":"111.13.235.250"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.38:80:100,192.168.47.128:80:100",
+            "vip":"192.168.101.246"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.51.217:80:100,192.168.35.163:80:100",
+            "vip":"111.13.235.123"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.62:80:100,192.168.47.49:80:100,192.168.34.37:80:100",
+            "vip":"111.13.235.112"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.245:80:100",
+            "vip":"192.168.102.20"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.94:80:100",
+            "vip":"192.168.101.248"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.247:80:100,192.168.25.152:80:100,192.168.33.229:80:100,192.168.21.240:80:100,192.168.47.240:80:100",
+            "vip":"192.168.102.122"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.212:80:100,192.168.47.84:80:100,192.168.38.34:80:100,192.168.59.204:80:100,192.168.41.150:80:100,192.168.43.20:80:100,192.168.33.142:80:100,192.168.14.33:80:100,192.168.19.156:80:100,192.168.37.8:80:100,192.168.59.9:80:100,192.168.57.190:80:100,192.168.49.19:80:100,192.168.38.158:80:100,192.168.15.92:80:100,192.168.54.87:80:100,192.168.53.239:80:100,192.168.13.135:80:100,192.168.43.75:80:100,192.168.37.62:80:100,192.168.31.126:80:100,192.168.45.65:80:100,192.168.54.73:80:100,192.168.54.45:80:100,192.168.17.109:80:100,192.168.47.86:80:100,192.168.53.89:80:100,192.168.45.109:80:100,192.168.41.230:80:100,192.168.5.191:80:100,192.168.18.119:80:100,192.168.41.107:80:100,192.168.26.204:80:100,192.168.55.95:80:100,192.168.2.124:80:100,192.168.27.46:80:100,192.168.9.8:80:100,192.168.33.101:80:100,192.168.29.225:80:100,192.168.25.23:80:100,192.168.26.38:80:100,192.168.39.58:80:100,192.168.31.162:80:100,192.168.30.50:80:100,192.168.7.174:80:100,192.168.14.70:80:100,192.168.7.94:80:100,192.168.15.97:80:100,192.168.21.162:80:100,192.168.54.4:80:100,192.168.41.171:80:100,192.168.7.156:80:100,192.168.57.44:80:100,192.168.42.74:80:100,192.168.51.164:80:100,192.168.46.22:80:100,192.168.7.35:80:100,192.168.2.184:80:100,192.168.43.202:80:100,192.168.46.77:80:100,192.168.49.161:80:100,192.168.13.144:80:100,192.168.13.192:80:100,192.168.3.58:80:100,192.168.51.245:80:100,192.168.2.110:80:100,192.168.13.187:80:100,192.168.29.151:80:100,192.168.29.229:80:100,192.168.21.207:80:100,192.168.45.206:80:100,192.168.29.236:80:100,192.168.13.104:80:100,192.168.17.89:80:100,192.168.33.31:80:100",
+            "vip":"192.168.102.192"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.35.216:80:100,192.168.2.161:80:100,192.168.21.147:80:100,192.168.33.221:80:100,192.168.6.145:80:100,192.168.18.23:80:100,192.168.1.215:80:100,192.168.46.250:80:100",
+            "vip":"192.168.101.41"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.124:80:100,192.168.37.236:80:100,192.168.41.101:80:100,192.168.7.65:80:100,192.168.54.127:80:100",
+            "vip":"192.168.101.166"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.201:80:100,192.168.31.62:80:100,192.168.29.128:80:100,192.168.43.34:80:100",
+            "vip":"192.168.102.131"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.25:80:100,192.168.1.112:80:100,192.168.11.48:80:100,192.168.34.58:80:100,192.168.37.109:80:100,192.168.2.245:80:100,192.168.29.131:80:100,192.168.45.75:80:100,192.168.57.125:80:100",
+            "vip":"192.168.102.179"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.245:80:100,192.168.19.60:80:100,192.168.2.72:80:100",
+            "vip":"192.168.101.124"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.123:80:100,192.168.6.204:80:100,192.168.59.110:80:100,192.168.58.30:80:100,192.168.29.147:80:100",
+            "vip":"192.168.101.43"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.31:80:100,192.168.17.201:80:100",
+            "vip":"192.168.101.210"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.22:80:100,192.168.19.30:80:100,192.168.49.189:80:100,192.168.41.211:80:100",
+            "vip":"192.168.101.152"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.17:80:100,192.168.1.127:80:100,192.168.27.126:80:100,192.168.59.253:80:100,192.168.5.59:80:100",
+            "vip":"192.168.101.145"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.58:80:100,192.168.27.110:80:100,192.168.22.50:80:100,192.168.47.226:80:100,192.168.26.162:80:100,192.168.11.135:80:100,192.168.46.108:80:100,192.168.2.228:80:100,192.168.59.130:80:100,192.168.41.110:80:100,192.168.25.73:80:100,192.168.17.45:80:100,192.168.13.182:80:100,192.168.33.168:80:100,192.168.43.50:80:100",
+            "vip":"192.168.101.160"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.190:80:100,192.168.18.233:80:100",
+            "vip":"192.168.101.151"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.214:80:100,192.168.27.216:80:100,192.168.33.60:80:100,192.168.31.138:80:100",
+            "vip":"192.168.101.219"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.19:80:100,192.168.26.33:80:100,192.168.26.171:80:100,192.168.7.129:80:100,192.168.27.85:80:100,192.168.13.200:80:100,192.168.11.71:80:100,192.168.55.25:80:100,192.168.53.15:80:100",
+            "vip":"192.168.101.23"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.90:80:100,192.168.9.126:80:100,192.168.34.56:80:100,192.168.50.167:80:100",
+            "vip":"192.168.102.229"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.46.5:80:100,192.168.1.87:80:100,192.168.15.20:80:100,192.168.49.252:80:100,192.168.53.13:80:100,192.168.38.8:80:100,192.168.13.171:80:100,192.168.54.224:80:100",
+            "vip":"111.13.235.146"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.43.150:80:100,192.168.49.24:80:100",
+            "vip":"111.13.235.231"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.23.229:80:100",
+            "vip":"192.168.102.111"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.22.175:80:100,192.168.11.184:80:100,192.168.11.18:80:100",
+            "vip":"111.13.235.200"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.171:80:100,192.168.29.97:80:100",
+            "vip":"192.168.102.160"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.195:80:100,192.168.11.234:80:100,192.168.1.239:80:100,192.168.43.185:80:100",
+            "vip":"111.13.235.168"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.97:80:100,192.168.41.204:80:100,192.168.6.109:80:100,192.168.10.125:80:100,192.168.6.239:80:100,192.168.2.224:80:100,192.168.2.233:80:100,192.168.1.138:80:100,192.168.17.60:80:100",
+            "vip":"192.168.102.155"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.219:80:100,192.168.3.97:80:100,192.168.43.3:80:100,192.168.55.113:80:100",
+            "vip":"111.13.235.162"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.112:80:100,192.168.59.153:80:100,192.168.41.164:80:100,192.168.35.57:80:100,192.168.27.190:80:100,192.168.2.222:80:100",
+            "vip":"192.168.102.16"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.22.163:80:100,192.168.6.167:80:100,192.168.22.13:80:100,192.168.57.123:80:100,192.168.55.75:80:100,192.168.38.71:80:100,192.168.31.172:80:100",
+            "vip":"192.168.102.212"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.11:80:100,192.168.42.155:80:100,192.168.2.6:80:100,192.168.1.196:80:100",
+            "vip":"192.168.101.3"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.37:80:100,192.168.1.114:80:100,192.168.31.77:80:100,192.168.59.68:80:100,192.168.27.232:80:100,192.168.3.25:80:100,192.168.43.134:80:100,192.168.35.149:80:100",
+            "vip":"111.13.235.202"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.46.222:80:100",
+            "vip":"192.168.101.156"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.22.125:80:100,192.168.25.159:80:100,192.168.17.242:80:100",
+            "vip":"192.168.101.88"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.34:80:100,192.168.50.101:80:100,192.168.47.249:80:100,192.168.34.250:80:100,192.168.21.32:80:100,192.168.51.196:80:100,192.168.31.156:80:100,192.168.19.42:80:100,192.168.45.15:80:100,192.168.25.68:80:100,192.168.54.31:80:100,192.168.2.59:80:100,192.168.37.107:80:100,192.168.26.127:80:100,192.168.25.233:80:100,192.168.34.27:80:100,192.168.46.122:80:100,192.168.23.252:80:100,192.168.41.130:80:100,192.168.35.41:80:100,192.168.37.131:80:100,192.168.58.18:80:100,192.168.37.31:80:100,192.168.9.105:80:100,192.168.53.15:80:100,192.168.18.217:80:100,192.168.18.43:80:100,192.168.54.125:80:100,192.168.9.240:80:100,192.168.59.216:80:100,192.168.34.70:80:100,192.168.10.133:80:100,192.168.33.117:80:100,192.168.3.81:80:100",
+            "vip":"192.168.101.190"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.164:80:100,192.168.18.213:80:100,192.168.2.63:80:100,192.168.55.178:80:100,192.168.38.192:80:100,192.168.5.10:80:100,192.168.35.139:80:100,192.168.7.29:80:100,192.168.14.218:80:100,192.168.38.107:80:100,192.168.19.19:80:100,192.168.23.205:80:100,192.168.55.145:80:100,192.168.53.20:80:100,192.168.19.109:80:100,192.168.30.36:80:100,192.168.13.2:80:100,192.168.27.38:80:100,192.168.53.180:80:100,192.168.46.129:80:100,192.168.7.242:80:100,192.168.37.133:80:100,192.168.17.163:80:100,192.168.2.251:80:100,192.168.58.117:80:100,192.168.26.245:80:100,192.168.22.239:80:100,192.168.10.120:80:100,192.168.7.9:80:100,192.168.9.85:80:100,192.168.39.166:80:100,192.168.11.141:80:100,192.168.57.153:80:100,192.168.58.82:80:100,192.168.50.204:80:100,192.168.3.231:80:100,192.168.35.213:80:100,192.168.7.164:80:100,192.168.2.197:80:100,192.168.26.88:80:100,192.168.7.107:80:100,192.168.58.253:80:100,192.168.30.93:80:100,192.168.51.130:80:100,192.168.39.9:80:100,192.168.51.12:80:100,192.168.47.89:80:100,192.168.19.90:80:100,192.168.33.7:80:100,192.168.30.75:80:100,192.168.27.21:80:100,192.168.29.166:80:100,192.168.18.78:80:100,192.168.54.161:80:100,192.168.7.81:80:100,192.168.3.169:80:100,192.168.23.136:80:100,192.168.11.131:80:100,192.168.23.234:80:100,192.168.34.129:80:100,192.168.25.66:80:100,192.168.3.136:80:100,192.168.37.157:80:100,192.168.31.61:80:100,192.168.45.189:80:100,192.168.1.48:80:100,192.168.53.156:80:100,192.168.49.78:80:100,192.168.15.246:80:100,192.168.19.59:80:100,192.168.45.143:80:100,192.168.1.154:80:100,192.168.46.18:80:100,192.168.13.46:80:100",
+            "vip":"192.168.102.219"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.172:80:100",
+            "vip":"192.168.101.26"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.14.163:80:100,192.168.30.215:80:100,192.168.41.217:80:100,192.168.46.112:80:100,192.168.22.177:80:100,192.168.15.153:80:100",
+            "vip":"192.168.102.138"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.4:80:100,192.168.45.167:80:100,192.168.6.205:80:100",
+            "vip":"192.168.101.126"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.92:80:100,192.168.30.36:80:100,192.168.5.89:80:100,192.168.25.125:80:100,192.168.46.31:80:100,192.168.14.30:80:100,192.168.58.42:80:100,192.168.7.161:80:100,192.168.54.161:80:100,192.168.58.129:80:100,192.168.10.57:80:100,192.168.29.152:80:100,192.168.41.156:80:100,192.168.54.129:80:100,192.168.6.170:80:100",
+            "vip":"192.168.101.51"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.25.169:80:100,192.168.7.23:80:100,192.168.35.13:80:100",
+            "vip":"192.168.101.140"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.185:80:100,192.168.3.69:80:100,192.168.2.234:80:100,192.168.6.32:80:100",
+            "vip":"192.168.101.108"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.38:80:100,192.168.30.151:80:100,192.168.7.25:80:100,192.168.19.156:80:100,192.168.29.45:80:100,192.168.41.30:80:100",
+            "vip":"192.168.101.59"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.26.21:80:100,192.168.21.154:80:100,192.168.58.138:80:100",
+            "vip":"192.168.102.130"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.2.231:80:100,192.168.49.45:80:100,192.168.54.33:80:100,192.168.26.126:80:100,192.168.18.107:80:100",
+            "vip":"111.13.235.117"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.11:80:100,192.168.43.167:80:100,192.168.17.76:80:100,192.168.2.234:80:100,192.168.14.44:80:100,192.168.33.197:80:100,192.168.23.38:80:100,192.168.55.82:80:100,192.168.57.218:80:100,192.168.34.251:80:100,192.168.53.109:80:100,192.168.31.245:80:100,192.168.33.67:80:100,192.168.3.39:80:100,192.168.31.158:80:100,192.168.42.138:80:100,192.168.39.81:80:100,192.168.6.192:80:100,192.168.5.103:80:100,192.168.34.109:80:100,192.168.10.127:80:100",
+            "vip":"111.13.235.163"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.198:80:100,192.168.25.61:80:100,192.168.41.179:80:100,192.168.22.199:80:100",
+            "vip":"192.168.102.167"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.5:80:100,192.168.18.115:80:100,192.168.39.221:80:100,192.168.54.59:80:100,192.168.34.171:80:100,192.168.47.20:80:100,192.168.10.127:80:100,192.168.35.66:80:100,192.168.59.69:80:100,192.168.9.158:80:100,192.168.7.150:80:100,192.168.45.65:80:100,192.168.43.156:80:100,192.168.7.61:80:100,192.168.34.26:80:100,192.168.43.92:80:100,192.168.11.53:80:100,192.168.9.136:80:100,192.168.11.30:80:100,192.168.11.193:80:100,192.168.26.29:80:100,192.168.58.205:80:100,192.168.33.162:80:100,192.168.11.101:80:100,192.168.18.92:80:100,192.168.54.131:80:100,192.168.59.166:80:100,192.168.5.69:80:100,192.168.14.86:80:100,192.168.26.245:80:100,192.168.54.143:80:100,192.168.41.138:80:100,192.168.25.13:80:100,192.168.27.100:80:100,192.168.47.43:80:100,192.168.6.184:80:100,192.168.17.230:80:100,192.168.42.198:80:100,192.168.5.171:80:100,192.168.50.161:80:100,192.168.38.65:80:100,192.168.43.191:80:100,192.168.54.209:80:100,192.168.43.123:80:100,192.168.51.28:80:100,192.168.33.194:80:100,192.168.23.124:80:100,192.168.31.148:80:100,192.168.27.30:80:100,192.168.21.26:80:100,192.168.59.19:80:100,192.168.9.74:80:100,192.168.41.1:80:100,192.168.50.245:80:100,192.168.59.174:80:100,192.168.35.55:80:100,192.168.30.219:80:100,192.168.22.75:80:100,192.168.43.4:80:100,192.168.5.123:80:100,192.168.51.167:80:100,192.168.29.120:80:100,192.168.5.4:80:100,192.168.23.233:80:100,192.168.57.58:80:100,192.168.7.245:80:100,192.168.47.53:80:100,192.168.10.215:80:100,192.168.17.120:80:100,192.168.46.64:80:100,192.168.15.122:80:100,192.168.25.72:80:100,192.168.14.225:80:100,192.168.47.82:80:100,192.168.5.214:80:100,192.168.27.239:80:100,192.168.14.215:80:100,192.168.34.157:80:100,192.168.23.43:80:100,192.168.18.32:80:100,192.168.17.163:80:100,192.168.10.224:80:100,192.168.46.155:80:100,192.168.33.204:80:100,192.168.37.41:80:100,192.168.23.49:80:100,192.168.21.107:80:100,192.168.43.79:80:100,192.168.29.218:80:100,192.168.25.146:80:100,192.168.45.206:80:100,192.168.34.188:80:100,192.168.19.25:80:100,192.168.30.70:80:100,192.168.3.81:80:100,192.168.25.16:80:100",
+            "vip":"192.168.102.82"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.133:80:100,192.168.2.244:80:100",
+            "vip":"192.168.101.114"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.103:80:100,192.168.7.190:80:100,192.168.49.197:80:100",
+            "vip":"192.168.101.103"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.64:80:100,192.168.59.17:80:100",
+            "vip":"111.13.235.90"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.185:80:100",
+            "vip":"192.168.101.237"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.126:80:100,192.168.7.77:80:100,192.168.10.253:80:100,192.168.10.73:80:100,192.168.30.153:80:100,192.168.10.209:80:100,192.168.51.139:80:100,192.168.21.60:80:100,192.168.17.189:80:100,192.168.1.221:80:100,192.168.54.214:80:100,192.168.7.25:80:100,192.168.54.71:80:100,192.168.27.174:80:100,192.168.17.4:80:100,192.168.47.71:80:100,192.168.58.29:80:100,192.168.21.239:80:100,192.168.3.85:80:100,192.168.33.173:80:100,192.168.18.189:80:100,192.168.50.252:80:100,192.168.54.240:80:100,192.168.30.101:80:100,192.168.5.25:80:100,192.168.35.51:80:100,192.168.10.116:80:100,192.168.55.195:80:100,192.168.10.28:80:100,192.168.27.203:80:100,192.168.7.140:80:100,192.168.51.150:80:100,192.168.43.107:80:100,192.168.51.154:80:100,192.168.21.46:80:100,192.168.19.98:80:100,192.168.21.16:80:100,192.168.51.8:80:100,192.168.38.153:80:100,192.168.14.92:80:100,192.168.7.143:80:100,192.168.55.238:80:100",
+            "vip":"111.13.235.233"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.96:80:100,192.168.2.1:80:100,192.168.49.66:80:100",
+            "vip":"192.168.102.165"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.211:80:100,192.168.17.41:80:100,192.168.17.189:80:100,192.168.23.34:80:100,192.168.17.119:80:100,192.168.38.65:80:100",
+            "vip":"192.168.101.56"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.158:80:100,192.168.46.52:80:100,192.168.7.225:80:100,192.168.15.187:80:100,192.168.37.108:80:100",
+            "vip":"111.13.235.66"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.120:80:100",
+            "vip":"111.13.235.111"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.14.6:80:100,192.168.19.246:80:100,192.168.54.1:80:100",
+            "vip":"192.168.102.245"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.213:80:100,192.168.1.57:80:100,192.168.1.124:80:100,192.168.27.254:80:100,192.168.11.109:80:100,192.168.3.134:80:100,192.168.15.222:80:100,192.168.27.235:80:100",
+            "vip":"111.13.235.205"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.205:80:100,192.168.49.29:80:100,192.168.35.241:80:100,192.168.18.226:80:100,192.168.2.87:80:100,192.168.21.207:80:100,192.168.51.68:80:100,192.168.3.50:80:100,192.168.37.229:80:100,192.168.57.165:80:100",
+            "vip":"192.168.101.29"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.68:80:100,192.168.10.226:80:100,192.168.47.217:80:100",
+            "vip":"192.168.101.232"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.15:80:100,192.168.21.111:80:100,192.168.51.215:80:100",
+            "vip":"111.13.235.110"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.112:80:100,192.168.7.149:80:100,192.168.46.140:80:100,192.168.22.199:80:100,192.168.55.146:80:100,192.168.41.153:80:100,192.168.43.73:80:100,192.168.19.155:80:100,192.168.50.84:80:100,192.168.37.207:80:100,192.168.47.117:80:100,192.168.58.107:80:100,192.168.54.45:80:100,192.168.22.173:80:100,192.168.50.239:80:100,192.168.54.1:80:100,192.168.30.9:80:100,192.168.57.100:80:100,192.168.15.224:80:100,192.168.26.223:80:100,192.168.46.106:80:100,192.168.58.168:80:100,192.168.19.219:80:100,192.168.53.135:80:100,192.168.37.88:80:100,192.168.14.101:80:100,192.168.21.42:80:100,192.168.15.173:80:100,192.168.34.91:80:100,192.168.31.77:80:100,192.168.35.235:80:100,192.168.1.251:80:100,192.168.33.26:80:100,192.168.41.69:80:100,192.168.5.191:80:100,192.168.43.63:80:100,192.168.34.83:80:100,192.168.29.2:80:100,192.168.47.112:80:100,192.168.29.118:80:100,192.168.47.57:80:100,192.168.22.87:80:100,192.168.57.63:80:100,192.168.30.105:80:100,192.168.10.37:80:100,192.168.26.215:80:100,192.168.59.192:80:100,192.168.1.232:80:100,192.168.26.171:80:100,192.168.30.68:80:100,192.168.11.188:80:100,192.168.7.133:80:100,192.168.29.76:80:100,192.168.26.204:80:100,192.168.5.113:80:100,192.168.50.19:80:100,192.168.18.215:80:100,192.168.34.195:80:100,192.168.43.87:80:100,192.168.1.10:80:100,192.168.59.223:80:100,192.168.31.205:80:100,192.168.57.204:80:100,192.168.34.10:80:100,192.168.35.87:80:100,192.168.35.192:80:100,192.168.50.4:80:100,192.168.11.171:80:100,192.168.19.165:80:100,192.168.53.92:80:100,192.168.25.107:80:100,192.168.46.184:80:100,192.168.43.232:80:100,192.168.23.189:80:100,192.168.43.97:80:100,192.168.2.6:80:100,192.168.31.198:80:100,192.168.11.137:80:100,192.168.49.160:80:100,192.168.43.72:80:100,192.168.19.8:80:100,192.168.31.117:80:100,192.168.19.168:80:100,192.168.33.35:80:100,192.168.14.38:80:100,192.168.26.170:80:100,192.168.38.71:80:100,192.168.9.40:80:100,192.168.30.205:80:100,192.168.42.146:80:100,192.168.58.132:80:100,192.168.42.140:80:100,192.168.27.211:80:100,192.168.29.249:80:100,192.168.11.75:80:100,192.168.41.177:80:100,192.168.29.223:80:100,192.168.11.27:80:100,192.168.46.58:80:100,192.168.39.97:80:100,192.168.26.44:80:100,192.168.7.46:80:100,192.168.54.49:80:100,192.168.43.161:80:100,192.168.11.135:80:100,192.168.59.34:80:100,192.168.41.173:80:100,192.168.46.195:80:100,192.168.49.72:80:100,192.168.13.96:80:100,192.168.37.76:80:100,192.168.34.37:80:100,192.168.18.38:80:100,192.168.42.47:80:100,192.168.29.99:80:100,192.168.41.79:80:100,192.168.49.168:80:100,192.168.50.156:80:100,192.168.46.174:80:100,192.168.15.126:80:100,192.168.35.40:80:100,192.168.58.137:80:100,192.168.42.237:80:100,192.168.29.133:80:100,192.168.50.31:80:100,192.168.15.117:80:100,192.168.30.78:80:100,192.168.14.254:80:100,192.168.26.119:80:100,192.168.22.184:80:100,192.168.3.207:80:100,192.168.29.34:80:100,192.168.19.207:80:100,192.168.22.93:80:100,192.168.1.85:80:100,192.168.58.230:80:100,192.168.31.33:80:100,192.168.50.90:80:100,192.168.49.208:80:100,192.168.9.166:80:100,192.168.55.125:80:100,192.168.17.161:80:100,192.168.33.49:80:100,192.168.11.48:80:100,192.168.23.2:80:100,192.168.10.116:80:100,192.168.57.38:80:100,192.168.31.134:80:100,192.168.54.69:80:100,192.168.41.59:80:100,192.168.3.71:80:100,192.168.41.160:80:100,192.168.6.77:80:100,192.168.34.98:80:100,192.168.18.207:80:100,192.168.1.225:80:100,192.168.7.52:80:100,192.168.25.129:80:100,192.168.13.29:80:100,192.168.18.162:80:100,192.168.39.186:80:100,192.168.22.111:80:100",
+            "vip":"192.168.101.116"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.45.123:80:100,192.168.19.226:80:100,192.168.7.203:80:100",
+            "vip":"192.168.102.8"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.51.83:80:100,192.168.50.199:80:100,192.168.31.115:80:100,192.168.6.209:80:100,192.168.47.101:80:100,192.168.29.148:80:100,192.168.5.88:80:100,192.168.58.2:80:100",
+            "vip":"192.168.102.246"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.7.176:80:100,192.168.58.61:80:100,192.168.26.187:80:100,192.168.15.226:80:100,192.168.35.7:80:100,192.168.38.198:80:100",
+            "vip":"111.13.235.249"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.17.28:80:100,192.168.2.82:80:100",
+            "vip":"192.168.102.13"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.46.244:80:100,192.168.17.215:80:100,192.168.2.156:80:100",
+            "vip":"192.168.101.1"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.35.26:80:100,192.168.14.57:80:100,192.168.7.18:80:100,192.168.51.31:80:100,192.168.35.85:80:100,192.168.14.122:80:100,192.168.17.133:80:100,192.168.37.172:80:100,192.168.34.198:80:100,192.168.55.186:80:100,192.168.38.234:80:100,192.168.15.72:80:100,192.168.15.87:80:100",
+            "vip":"192.168.102.208"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.245:80:100,192.168.39.176:80:100,192.168.31.2:80:100",
+            "vip":"192.168.101.106"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.68:80:100,192.168.9.40:80:100,192.168.41.70:80:100",
+            "vip":"192.168.102.222"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.186:80:100,192.168.18.12:80:100,192.168.2.153:80:100",
+            "vip":"111.13.235.194"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.21:80:100",
+            "vip":"192.168.102.69"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.127:80:100,192.168.17.225:80:100,192.168.39.119:80:100,192.168.15.54:80:100,192.168.49.124:80:100,192.168.57.220:80:100,192.168.11.196:80:100,192.168.31.176:80:100,192.168.18.152:80:100",
+            "vip":"111.13.235.183"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.248:80:100",
+            "vip":"192.168.101.34"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.155:80:100,192.168.11.30:80:100,192.168.21.171:80:100,192.168.18.188:80:100,192.168.37.212:80:100,192.168.35.41:80:100",
+            "vip":"192.168.101.215"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.46.181:80:100,192.168.53.117:80:100,192.168.17.141:80:100",
+            "vip":"192.168.102.183"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.45.191:80:100,192.168.47.153:80:100",
+            "vip":"192.168.101.245"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.252:80:100,192.168.21.157:80:100,192.168.55.84:80:100,192.168.34.114:80:100,192.168.47.197:80:100,192.168.59.209:80:100,192.168.49.86:80:100,192.168.27.186:80:100,192.168.22.38:80:100,192.168.5.183:80:100,192.168.59.163:80:100,192.168.45.34:80:100,192.168.7.189:80:100,192.168.38.13:80:100,192.168.59.175:80:100,192.168.37.17:80:100,192.168.53.179:80:100,192.168.27.2:80:100,192.168.49.117:80:100,192.168.25.230:80:100,192.168.54.40:80:100,192.168.9.11:80:100,192.168.27.141:80:100,192.168.9.153:80:100,192.168.33.50:80:100,192.168.35.174:80:100,192.168.29.63:80:100,192.168.1.216:80:100,192.168.14.111:80:100,192.168.58.126:80:100,192.168.29.152:80:100,192.168.34.69:80:100,192.168.49.9:80:100,192.168.30.206:80:100,192.168.23.57:80:100,192.168.25.4:80:100,192.168.7.57:80:100,192.168.3.27:80:100,192.168.57.50:80:100,192.168.14.151:80:100,192.168.29.116:80:100,192.168.47.97:80:100,192.168.50.29:80:100,192.168.30.107:80:100,192.168.23.200:80:100,192.168.9.126:80:100,192.168.10.166:80:100,192.168.58.100:80:100,192.168.38.207:80:100,192.168.27.12:80:100,192.168.17.54:80:100,192.168.5.84:80:100,192.168.37.165:80:100,192.168.27.147:80:100,192.168.46.191:80:100,192.168.18.139:80:100,192.168.22.165:80:100,192.168.1.103:80:100,192.168.41.180:80:100,192.168.15.85:80:100,192.168.59.10:80:100,192.168.11.110:80:100,192.168.22.88:80:100,192.168.53.105:80:100,192.168.53.117:80:100,192.168.50.207:80:100,192.168.26.55:80:100,192.168.6.11:80:100,192.168.35.193:80:100,192.168.21.150:80:100,192.168.50.209:80:100,192.168.57.28:80:100,192.168.6.86:80:100,192.168.13.192:80:100,192.168.14.167:80:100,192.168.18.214:80:100,192.168.17.93:80:100,192.168.58.152:80:100,192.168.21.68:80:100,192.168.59.133:80:100,192.168.47.82:80:100,192.168.39.124:80:100,192.168.50.73:80:100,192.168.43.208:80:100,192.168.1.171:80:100,192.168.49.223:80:100,192.168.9.120:80:100,192.168.57.5:80:100,192.168.21.152:80:100,192.168.21.6:80:100,192.168.41.3:80:100,192.168.37.131:80:100,192.168.51.130:80:100,192.168.26.34:80:100,192.168.50.42:80:100,192.168.45.40:80:100,192.168.57.37:80:100,192.168.59.137:80:100,192.168.21.170:80:100,192.168.46.101:80:100,192.168.1.210:80:100,192.168.51.25:80:100,192.168.6.2:80:100,192.168.57.170:80:100",
+            "vip":"111.13.235.181"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.16:80:100",
+            "vip":"111.13.235.254"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.14.229:80:100,192.168.22.85:80:100",
+            "vip":"192.168.101.165"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.244:80:100,192.168.58.150:80:100,192.168.3.27:80:100,192.168.43.219:80:100,192.168.41.227:80:100,192.168.41.233:80:100,192.168.54.117:80:100,192.168.19.77:80:100,192.168.37.3:80:100,192.168.51.105:80:100",
+            "vip":"192.168.102.149"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.134:80:100,192.168.39.223:80:100,192.168.6.150:80:100,192.168.29.243:80:100,192.168.3.21:80:100,192.168.17.2:80:100,192.168.51.180:80:100,192.168.54.1:80:100,192.168.34.199:80:100,192.168.7.59:80:100,192.168.17.30:80:100,192.168.17.218:80:100,192.168.46.217:80:100,192.168.51.6:80:100,192.168.10.190:80:100,192.168.26.159:80:100,192.168.46.142:80:100,192.168.43.29:80:100,192.168.27.17:80:100,192.168.49.144:80:100,192.168.13.9:80:100,192.168.17.182:80:100,192.168.27.249:80:100,192.168.51.220:80:100,192.168.11.119:80:100,192.168.45.186:80:100,192.168.59.17:80:100,192.168.38.166:80:100,192.168.10.209:80:100,192.168.31.189:80:100,192.168.30.81:80:100,192.168.31.169:80:100,192.168.59.158:80:100,192.168.50.223:80:100,192.168.51.177:80:100,192.168.42.52:80:100,192.168.45.52:80:100,192.168.21.89:80:100,192.168.3.203:80:100,192.168.11.82:80:100,192.168.39.156:80:100,192.168.45.229:80:100,192.168.37.157:80:100,192.168.3.216:80:100,192.168.15.120:80:100,192.168.58.105:80:100,192.168.34.176:80:100,192.168.54.120:80:100,192.168.10.68:80:100,192.168.57.33:80:100,192.168.25.118:80:100,192.168.45.194:80:100,192.168.7.123:80:100,192.168.19.180:80:100,192.168.58.181:80:100,192.168.49.71:80:100,192.168.49.113:80:100,192.168.47.7:80:100,192.168.53.35:80:100,192.168.30.184:80:100,192.168.17.242:80:100,192.168.53.151:80:100,192.168.13.12:80:100,192.168.1.243:80:100,192.168.5.182:80:100,192.168.17.110:80:100,192.168.54.18:80:100,192.168.38.112:80:100,192.168.29.120:80:100,192.168.7.35:80:100,192.168.38.210:80:100,192.168.5.71:80:100,192.168.46.127:80:100,192.168.53.130:80:100,192.168.46.139:80:100,192.168.54.95:80:100,192.168.38.198:80:100,192.168.34.238:80:100,192.168.26.26:80:100,192.168.30.35:80:100,192.168.35.64:80:100,192.168.18.74:80:100,192.168.26.192:80:100,192.168.33.236:80:100,192.168.34.202:80:100,192.168.21.251:80:100,192.168.59.39:80:100,192.168.39.145:80:100,192.168.27.174:80:100,192.168.25.57:80:100,192.168.21.66:80:100,192.168.34.32:80:100,192.168.34.128:80:100,192.168.3.253:80:100,192.168.15.130:80:100,192.168.53.75:80:100,192.168.2.64:80:100,192.168.43.213:80:100,192.168.51.89:80:100,192.168.3.238:80:100",
+            "vip":"192.168.102.132"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.174:80:100,192.168.11.101:80:100,192.168.50.122:80:100",
+            "vip":"192.168.101.233"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.100:80:100,192.168.6.60:80:100,192.168.9.34:80:100",
+            "vip":"111.13.235.165"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.57:80:100,192.168.54.200:80:100",
+            "vip":"192.168.102.215"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.55:80:100,192.168.51.173:80:100",
+            "vip":"111.13.235.129"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.81:80:100,192.168.31.3:80:100",
+            "vip":"111.13.235.64"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.22.154:80:100,192.168.9.231:80:100,192.168.21.59:80:100,192.168.59.70:80:100",
+            "vip":"111.13.235.118"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.62:80:100",
+            "vip":"111.13.235.253"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.38.72:80:100,192.168.55.225:80:100,192.168.9.203:80:100,192.168.27.184:80:100,192.168.27.89:80:100,192.168.26.71:80:100,192.168.55.107:80:100,192.168.46.79:80:100,192.168.26.150:80:100,192.168.35.30:80:100,192.168.47.11:80:100,192.168.51.55:80:100,192.168.39.81:80:100,192.168.11.65:80:100,192.168.45.65:80:100",
+            "vip":"192.168.102.182"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.22.98:80:100,192.168.17.11:80:100",
+            "vip":"192.168.102.34"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.46.63:80:100,192.168.27.147:80:100",
+            "vip":"192.168.101.183"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.11:80:100",
+            "vip":"192.168.101.162"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.131:80:100",
+            "vip":"192.168.102.107"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.98:80:100,192.168.31.88:80:100,192.168.1.105:80:100,192.168.45.80:80:100,192.168.37.249:80:100,192.168.50.23:80:100,192.168.3.50:80:100,192.168.41.123:80:100",
+            "vip":"192.168.101.192"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.209:80:100,192.168.10.111:80:100,192.168.35.31:80:100,192.168.34.120:80:100,192.168.35.99:80:100,192.168.38.116:80:100,192.168.59.122:80:100,192.168.19.205:80:100",
+            "vip":"192.168.101.84"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.25.162:80:100,192.168.14.180:80:100,192.168.5.76:80:100,192.168.46.160:80:100,192.168.35.93:80:100",
+            "vip":"111.13.235.188"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.196:80:100,192.168.26.151:80:100",
+            "vip":"192.168.101.146"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.27:80:100,192.168.6.159:80:100,192.168.5.241:80:100",
+            "vip":"111.13.235.144"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.213:80:100",
+            "vip":"192.168.101.77"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.4:80:100,192.168.51.83:80:100,192.168.53.245:80:100,192.168.35.103:80:100,192.168.7.71:80:100,192.168.13.188:80:100,192.168.19.83:80:100,192.168.49.173:80:100,192.168.5.139:80:100,192.168.49.33:80:100,192.168.7.84:80:100,192.168.54.126:80:100,192.168.29.51:80:100,192.168.25.59:80:100,192.168.37.112:80:100,192.168.54.252:80:100,192.168.39.159:80:100,192.168.30.54:80:100,192.168.17.95:80:100,192.168.43.231:80:100,192.168.17.202:80:100,192.168.25.181:80:100,192.168.22.168:80:100,192.168.50.120:80:100,192.168.17.36:80:100,192.168.9.238:80:100,192.168.42.195:80:100,192.168.31.142:80:100,192.168.41.120:80:100,192.168.51.205:80:100,192.168.39.1:80:100,192.168.39.204:80:100,192.168.10.49:80:100,192.168.57.153:80:100,192.168.49.86:80:100,192.168.10.32:80:100,192.168.7.14:80:100,192.168.29.221:80:100,192.168.17.77:80:100,192.168.33.224:80:100,192.168.11.186:80:100,192.168.31.16:80:100,192.168.35.84:80:100,192.168.31.31:80:100,192.168.15.175:80:100,192.168.45.200:80:100,192.168.41.77:80:100,192.168.57.164:80:100,192.168.30.23:80:100,192.168.49.109:80:100,192.168.22.207:80:100,192.168.2.7:80:100,192.168.17.133:80:100,192.168.14.170:80:100,192.168.49.24:80:100,192.168.13.107:80:100,192.168.10.215:80:100,192.168.7.18:80:100,192.168.17.194:80:100,192.168.2.125:80:100,192.168.58.34:80:100,192.168.39.232:80:100,192.168.58.182:80:100,192.168.9.73:80:100,192.168.9.71:80:100,192.168.50.251:80:100,192.168.7.15:80:100,192.168.59.132:80:100,192.168.15.218:80:100,192.168.14.203:80:100,192.168.7.177:80:100",
+            "vip":"111.13.235.186"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.96:80:100,192.168.38.139:80:100,192.168.9.160:80:100,192.168.21.53:80:100",
+            "vip":"192.168.102.104"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.74:80:100",
+            "vip":"111.13.235.209"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.213:80:100,192.168.59.198:80:100,192.168.57.18:80:100,192.168.34.240:80:100",
+            "vip":"111.13.235.184"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.54.187:80:100,192.168.17.27:80:100",
+            "vip":"192.168.101.247"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.23.239:80:100,192.168.5.155:80:100,192.168.18.214:80:100,192.168.31.129:80:100,192.168.26.122:80:100,192.168.13.134:80:100,192.168.47.76:80:100,192.168.14.186:80:100,192.168.27.70:80:100,192.168.47.159:80:100,192.168.10.127:80:100",
+            "vip":"192.168.102.140"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.205:80:100,192.168.25.167:80:100",
+            "vip":"192.168.102.228"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.194:80:100",
+            "vip":"192.168.101.149"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.65:80:100",
+            "vip":"111.13.235.222"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.130:80:100,192.168.2.1:80:100,192.168.21.206:80:100,192.168.15.42:80:100,192.168.58.47:80:100,192.168.21.157:80:100,192.168.43.63:80:100,192.168.26.193:80:100,192.168.26.206:80:100,192.168.2.171:80:100,192.168.53.103:80:100,192.168.43.48:80:100,192.168.54.92:80:100,192.168.17.53:80:100,192.168.50.33:80:100,192.168.18.213:80:100,192.168.7.87:80:100,192.168.10.121:80:100,192.168.38.216:80:100,192.168.11.24:80:100,192.168.25.31:80:100,192.168.42.250:80:100,192.168.14.143:80:100,192.168.5.168:80:100,192.168.21.19:80:100,192.168.9.138:80:100,192.168.23.243:80:100,192.168.22.132:80:100,192.168.47.136:80:100,192.168.13.52:80:100,192.168.15.19:80:100,192.168.15.153:80:100,192.168.53.8:80:100,192.168.43.183:80:100,192.168.23.241:80:100,192.168.46.175:80:100,192.168.6.56:80:100,192.168.10.148:80:100,192.168.45.59:80:100,192.168.30.187:80:100,192.168.18.171:80:100,192.168.55.123:80:100,192.168.1.3:80:100,192.168.5.137:80:100,192.168.33.228:80:100,192.168.34.178:80:100,192.168.29.167:80:100,192.168.27.212:80:100,192.168.34.237:80:100,192.168.18.52:80:100,192.168.57.196:80:100,192.168.5.229:80:100,192.168.45.106:80:100,192.168.37.145:80:100,192.168.21.175:80:100,192.168.5.213:80:100,192.168.41.84:80:100,192.168.31.184:80:100,192.168.53.15:80:100,192.168.10.4:80:100,192.168.29.50:80:100,192.168.1.70:80:100,192.168.49.64:80:100,192.168.9.198:80:100,192.168.31.198:80:100,192.168.57.137:80:100,192.168.41.106:80:100,192.168.21.13:80:100,192.168.10.68:80:100,192.168.1.149:80:100,192.168.17.229:80:100,192.168.43.39:80:100,192.168.50.20:80:100,192.168.54.253:80:100,192.168.55.144:80:100,192.168.29.57:80:100,192.168.47.11:80:100,192.168.1.102:80:100,192.168.49.193:80:100,192.168.39.76:80:100,192.168.30.209:80:100,192.168.18.244:80:100,192.168.15.52:80:100,192.168.3.139:80:100,192.168.47.246:80:100,192.168.42.253:80:100,192.168.15.203:80:100,192.168.19.96:80:100,192.168.19.199:80:100,192.168.37.64:80:100,192.168.27.227:80:100,192.168.42.209:80:100,192.168.54.220:80:100,192.168.33.75:80:100,192.168.39.244:80:100,192.168.41.32:80:100,192.168.13.1:80:100,192.168.43.122:80:100,192.168.2.33:80:100,192.168.46.214:80:100,192.168.33.64:80:100,192.168.25.140:80:100,192.168.19.213:80:100,192.168.2.219:80:100,192.168.6.107:80:100,192.168.13.42:80:100,192.168.3.183:80:100,192.168.37.137:80:100,192.168.29.71:80:100,192.168.37.85:80:100,192.168.6.112:80:100,192.168.49.58:80:100,192.168.9.47:80:100,192.168.30.150:80:100",
+            "vip":"192.168.102.195"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.54.74:80:100,192.168.59.244:80:100,192.168.3.66:80:100",
+            "vip":"192.168.101.104"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.242:80:100,192.168.45.145:80:100,192.168.37.136:80:100,192.168.25.118:80:100,192.168.15.177:80:100,192.168.47.244:80:100,192.168.51.119:80:100,192.168.11.235:80:100,192.168.29.46:80:100",
+            "vip":"192.168.101.234"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.123:80:100,192.168.39.26:80:100,192.168.57.157:80:100,192.168.58.148:80:100,192.168.1.43:80:100,192.168.7.47:80:100,192.168.13.219:80:100,192.168.46.122:80:100",
+            "vip":"111.13.235.201"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.7.191:80:100,192.168.17.146:80:100,192.168.57.116:80:100,192.168.18.141:80:100",
+            "vip":"192.168.101.195"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.62:80:100",
+            "vip":"192.168.101.47"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.142:80:100,192.168.38.26:80:100,192.168.43.157:80:100",
+            "vip":"192.168.101.253"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.74:80:100,192.168.51.80:80:100,192.168.41.234:80:100,192.168.34.61:80:100,192.168.5.23:80:100,192.168.27.97:80:100,192.168.26.25:80:100,192.168.5.221:80:100,192.168.22.41:80:100,192.168.22.234:80:100,192.168.57.76:80:100,192.168.6.239:80:100,192.168.29.159:80:100,192.168.46.40:80:100,192.168.18.250:80:100,192.168.21.165:80:100,192.168.57.242:80:100,192.168.51.15:80:100,192.168.21.83:80:100",
+            "vip":"192.168.102.50"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.190:80:100,192.168.21.136:80:100,192.168.11.137:80:100",
+            "vip":"192.168.101.222"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.188:80:100,192.168.29.145:80:100,192.168.29.235:80:100,192.168.17.114:80:100,192.168.30.14:80:100,192.168.17.73:80:100",
+            "vip":"192.168.101.197"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.135:80:100,192.168.14.239:80:100,192.168.45.28:80:100",
+            "vip":"192.168.102.31"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.51.112:80:100,192.168.57.158:80:100,192.168.38.251:80:100",
+            "vip":"192.168.102.168"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.196:80:100",
+            "vip":"192.168.101.95"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.114:80:100",
+            "vip":"192.168.101.89"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.47:80:100,192.168.29.14:80:100,192.168.31.134:80:100",
+            "vip":"192.168.101.251"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.18.224:80:100",
+            "vip":"192.168.101.144"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.39:80:100",
+            "vip":"192.168.101.96"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.222:80:100,192.168.53.11:80:100,192.168.15.103:80:100,192.168.22.173:80:100,192.168.13.209:80:100,192.168.38.113:80:100,192.168.9.158:80:100,192.168.27.242:80:100,192.168.42.200:80:100,192.168.57.124:80:100,192.168.41.152:80:100,192.168.29.178:80:100,192.168.19.36:80:100,192.168.17.151:80:100,192.168.2.209:80:100,192.168.58.26:80:100,192.168.42.218:80:100,192.168.58.102:80:100,192.168.1.119:80:100,192.168.45.203:80:100,192.168.21.19:80:100,192.168.54.40:80:100,192.168.45.5:80:100,192.168.58.49:80:100,192.168.47.51:80:100,192.168.46.248:80:100,192.168.17.219:80:100,192.168.31.16:80:100,192.168.54.131:80:100,192.168.22.44:80:100,192.168.55.96:80:100,192.168.23.77:80:100,192.168.21.30:80:100,192.168.54.92:80:100,192.168.39.117:80:100,192.168.58.142:80:100,192.168.54.181:80:100,192.168.41.52:80:100,192.168.59.4:80:100,192.168.35.87:80:100,192.168.18.63:80:100,192.168.53.15:80:100,192.168.27.121:80:100,192.168.39.93:80:100,192.168.35.13:80:100,192.168.1.73:80:100,192.168.33.95:80:100,192.168.5.112:80:100,192.168.57.128:80:100,192.168.33.240:80:100,192.168.14.53:80:100,192.168.53.119:80:100,192.168.7.166:80:100,192.168.10.137:80:100,192.168.38.171:80:100,192.168.30.125:80:100,192.168.14.36:80:100,192.168.10.215:80:100,192.168.53.130:80:100,192.168.38.79:80:100,192.168.5.27:80:100,192.168.15.126:80:100,192.168.47.38:80:100,192.168.41.112:80:100,192.168.50.203:80:100,192.168.26.192:80:100,192.168.10.51:80:100,192.168.6.31:80:100,192.168.50.185:80:100,192.168.43.207:80:100,192.168.46.222:80:100,192.168.39.150:80:100,192.168.30.4:80:100,192.168.6.48:80:100,192.168.51.13:80:100,192.168.27.143:80:100,192.168.45.72:80:100,192.168.58.160:80:100,192.168.58.213:80:100,192.168.50.101:80:100,192.168.18.180:80:100,192.168.55.244:80:100,192.168.30.206:80:100,192.168.53.178:80:100,192.168.23.98:80:100,192.168.5.163:80:100,192.168.9.221:80:100,192.168.23.24:80:100,192.168.2.246:80:100,192.168.27.216:80:100,192.168.3.111:80:100",
+            "vip":"111.13.235.149"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.2.147:80:100,192.168.59.200:80:100,192.168.34.67:80:100,192.168.21.71:80:100",
+            "vip":"111.13.235.138"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.161:80:100",
+            "vip":"192.168.101.208"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.54:80:100,192.168.19.9:80:100,192.168.13.82:80:100,192.168.14.179:80:100,192.168.58.83:80:100,192.168.9.36:80:100",
+            "vip":"192.168.102.201"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.160:80:100,192.168.2.40:80:100,192.168.47.180:80:100,192.168.49.73:80:100",
+            "vip":"111.13.235.113"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.15.173:80:100,192.168.27.144:80:100,192.168.26.109:80:100",
+            "vip":"111.13.235.167"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.39:80:100",
+            "vip":"111.13.235.196"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.24:80:100,192.168.58.236:80:100,192.168.41.47:80:100,192.168.10.127:80:100",
+            "vip":"192.168.101.136"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.140:80:100,192.168.6.21:80:100,192.168.26.200:80:100,192.168.2.138:80:100",
+            "vip":"192.168.102.161"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.184:80:100",
+            "vip":"111.13.235.189"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.110:80:100,192.168.59.205:80:100,192.168.25.26:80:100,192.168.3.27:80:100,192.168.57.105:80:100,192.168.54.168:80:100",
+            "vip":"111.13.235.251"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.23.27:80:100,192.168.55.38:80:100,192.168.14.83:80:100,192.168.26.173:80:100,192.168.9.84:80:100,192.168.42.90:80:100,192.168.14.237:80:100,192.168.29.162:80:100,192.168.41.145:80:100",
+            "vip":"192.168.102.118"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.26.172:80:100",
+            "vip":"192.168.101.69"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.46.114:80:100",
+            "vip":"192.168.101.236"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.33:80:100",
+            "vip":"111.13.235.227"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.10.221:80:100,192.168.25.238:80:100",
+            "vip":"111.13.235.67"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.46.105:80:100",
+            "vip":"192.168.101.178"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.172:80:100,192.168.51.131:80:100,192.168.51.35:80:100",
+            "vip":"111.13.235.152"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.43:80:100",
+            "vip":"111.13.235.203"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.126:80:100,192.168.41.5:80:100,192.168.57.70:80:100,192.168.27.57:80:100,192.168.2.44:80:100",
+            "vip":"192.168.102.196"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.69:80:100,192.168.25.17:80:100,192.168.53.172:80:100,192.168.25.228:80:100,192.168.6.104:80:100,192.168.11.94:80:100,192.168.37.202:80:100,192.168.26.51:80:100,192.168.5.198:80:100,192.168.38.105:80:100,192.168.37.213:80:100,192.168.29.167:80:100",
+            "vip":"192.168.101.45"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.7.172:80:100,192.168.49.223:80:100",
+            "vip":"192.168.101.227"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.120:80:100,192.168.2.53:80:100",
+            "vip":"192.168.101.120"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.139:80:100,192.168.26.223:80:100,192.168.15.220:80:100,192.168.39.151:80:100,192.168.29.157:80:100,192.168.3.146:80:100,192.168.46.117:80:100",
+            "vip":"192.168.102.74"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.39.208:80:100,192.168.47.119:80:100,192.168.50.26:80:100,192.168.25.241:80:100",
+            "vip":"192.168.101.159"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.118:80:100,192.168.13.21:80:100,192.168.25.57:80:100,192.168.55.84:80:100,192.168.47.64:80:100,192.168.31.35:80:100,192.168.53.105:80:100,192.168.15.250:80:100,192.168.29.33:80:100,192.168.34.98:80:100,192.168.22.29:80:100,192.168.42.87:80:100,192.168.7.127:80:100,192.168.13.92:80:100,192.168.38.222:80:100,192.168.55.130:80:100,192.168.18.109:80:100,192.168.9.4:80:100,192.168.45.131:80:100,192.168.30.190:80:100",
+            "vip":"192.168.102.106"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.38:80:100,192.168.41.229:80:100,192.168.47.16:80:100,192.168.21.132:80:100,192.168.19.24:80:100,192.168.43.115:80:100,192.168.54.196:80:100,192.168.10.214:80:100,192.168.1.92:80:100,192.168.21.201:80:100,192.168.1.246:80:100,192.168.47.76:80:100,192.168.11.141:80:100,192.168.26.75:80:100,192.168.1.206:80:100,192.168.51.198:80:100,192.168.22.138:80:100,192.168.15.234:80:100",
+            "vip":"111.13.235.182"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.7.165:80:100,192.168.31.151:80:100,192.168.6.158:80:100",
+            "vip":"192.168.102.173"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.82:80:100,192.168.34.28:80:100,192.168.47.178:80:100,192.168.39.65:80:100,192.168.3.25:80:100,192.168.38.122:80:100,192.168.43.20:80:100,192.168.39.166:80:100,192.168.53.235:80:100,192.168.13.243:80:100,192.168.21.56:80:100,192.168.54.249:80:100,192.168.17.227:80:100,192.168.46.186:80:100,192.168.43.216:80:100,192.168.19.62:80:100,192.168.6.243:80:100,192.168.47.144:80:100,192.168.57.132:80:100,192.168.30.50:80:100,192.168.9.218:80:100,192.168.18.123:80:100,192.168.27.151:80:100,192.168.47.74:80:100,192.168.58.201:80:100,192.168.27.60:80:100,192.168.17.4:80:100,192.168.1.28:80:100,192.168.17.143:80:100,192.168.27.240:80:100,192.168.7.164:80:100,192.168.53.143:80:100,192.168.13.77:80:100,192.168.25.139:80:100,192.168.11.85:80:100,192.168.13.61:80:100,192.168.29.95:80:100,192.168.15.54:80:100,192.168.18.22:80:100,192.168.41.194:80:100,192.168.27.6:80:100,192.168.58.6:80:100,192.168.1.144:80:100,192.168.42.169:80:100,192.168.41.136:80:100,192.168.37.183:80:100,192.168.29.33:80:100,192.168.38.207:80:100,192.168.59.193:80:100,192.168.42.226:80:100,192.168.5.223:80:100,192.168.21.193:80:100,192.168.19.61:80:100,192.168.23.87:80:100,192.168.25.223:80:100,192.168.51.234:80:100",
+            "vip":"192.168.102.171"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.34.142:80:100,192.168.53.206:80:100",
+            "vip":"192.168.102.142"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.1:80:100,192.168.5.8:80:100,192.168.1.250:80:100,192.168.11.2:80:100,192.168.23.112:80:100,192.168.53.102:80:100,192.168.7.41:80:100,192.168.25.105:80:100,192.168.13.91:80:100,192.168.18.218:80:100,192.168.6.188:80:100,192.168.17.247:80:100,192.168.21.61:80:100",
+            "vip":"192.168.101.49"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.148:80:100,192.168.11.168:80:100,192.168.51.190:80:100",
+            "vip":"192.168.101.16"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.17.95:80:100,192.168.46.112:80:100,192.168.41.10:80:100,192.168.57.147:80:100,192.168.51.77:80:100,192.168.6.174:80:100,192.168.17.227:80:100,192.168.27.33:80:100,192.168.59.80:80:100",
+            "vip":"192.168.101.107"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.7.173:80:100,192.168.31.233:80:100,192.168.21.102:80:100,192.168.3.203:80:100,192.168.45.171:80:100,192.168.19.35:80:100,192.168.19.141:80:100,192.168.50.96:80:100,192.168.35.208:80:100,192.168.14.137:80:100,192.168.1.222:80:100,192.168.27.58:80:100,192.168.3.89:80:100,192.168.37.63:80:100,192.168.1.241:80:100,192.168.43.140:80:100,192.168.23.149:80:100,192.168.15.101:80:100,192.168.30.109:80:100,192.168.51.210:80:100,192.168.47.81:80:100,192.168.13.252:80:100,192.168.47.164:80:100,192.168.22.49:80:100,192.168.46.220:80:100,192.168.13.204:80:100,192.168.26.120:80:100,192.168.1.55:80:100,192.168.21.78:80:100,192.168.58.110:80:100,192.168.39.61:80:100,192.168.25.107:80:100,192.168.25.224:80:100,192.168.26.179:80:100,192.168.10.86:80:100,192.168.18.84:80:100,192.168.26.230:80:100,192.168.25.144:80:100,192.168.22.15:80:100,192.168.17.138:80:100,192.168.33.189:80:100,192.168.34.161:80:100,192.168.57.170:80:100",
+            "vip":"192.168.102.61"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.25.27:80:100,192.168.30.238:80:100,192.168.54.84:80:100,192.168.23.192:80:100",
+            "vip":"192.168.102.147"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.1.184:80:100,192.168.14.105:80:100,192.168.35.101:80:100,192.168.37.191:80:100",
+            "vip":"192.168.102.2"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.49.230:80:100,192.168.26.37:80:100,192.168.51.166:80:100,192.168.6.123:80:100,192.168.41.212:80:100,192.168.18.85:80:100,192.168.49.247:80:100,192.168.18.88:80:100",
+            "vip":"111.13.235.95"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.29.44:80:100,192.168.49.73:80:100",
+            "vip":"192.168.102.85"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.59:80:100,192.168.49.176:80:100,192.168.34.179:80:100,192.168.1.101:80:100,192.168.26.231:80:100,192.168.3.172:80:100,192.168.46.165:80:100",
+            "vip":"192.168.102.176"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.17.231:80:100,192.168.41.54:80:100,192.168.41.218:80:100,192.168.50.94:80:100,192.168.6.223:80:100,192.168.38.233:80:100,192.168.22.18:80:100,192.168.42.211:80:100,192.168.15.209:80:100,192.168.21.119:80:100,192.168.2.141:80:100,192.168.43.152:80:100,192.168.25.77:80:100,192.168.45.6:80:100,192.168.7.222:80:100,192.168.11.131:80:100",
+            "vip":"111.13.235.97"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.6:80:100,192.168.57.96:80:100,192.168.23.113:80:100,192.168.50.154:80:100",
+            "vip":"111.13.235.119"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.11.2:80:100",
+            "vip":"192.168.101.38"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.43.97:80:100",
+            "vip":"192.168.101.225"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.193:80:100,192.168.9.185:80:100,192.168.21.252:80:100,192.168.45.163:80:100,192.168.2.26:80:100,192.168.19.72:80:100,192.168.51.250:80:100",
+            "vip":"192.168.102.53"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.8:80:100,192.168.49.177:80:100,192.168.39.138:80:100,192.168.34.46:80:100",
+            "vip":"192.168.101.119"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.117:80:100,192.168.19.9:80:100",
+            "vip":"192.168.101.198"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.14.221:80:100,192.168.21.82:80:100,192.168.50.185:80:100,192.168.54.59:80:100,192.168.57.205:80:100,192.168.25.96:80:100,192.168.10.31:80:100,192.168.53.173:80:100,192.168.5.111:80:100,192.168.23.85:80:100,192.168.27.164:80:100,192.168.43.229:80:100,192.168.49.194:80:100,192.168.2.217:80:100,192.168.18.213:80:100,192.168.5.129:80:100,192.168.14.25:80:100,192.168.30.167:80:100,192.168.54.86:80:100,192.168.54.247:80:100,192.168.21.94:80:100,192.168.51.133:80:100,192.168.18.66:80:100,192.168.25.118:80:100,192.168.45.124:80:100,192.168.23.201:80:100,192.168.53.203:80:100,192.168.5.160:80:100,192.168.43.188:80:100,192.168.50.94:80:100,192.168.43.183:80:100,192.168.38.56:80:100,192.168.15.38:80:100,192.168.38.34:80:100,192.168.21.250:80:100,192.168.1.120:80:100,192.168.14.102:80:100,192.168.19.223:80:100,192.168.54.217:80:100,192.168.31.219:80:100,192.168.10.254:80:100,192.168.50.84:80:100,192.168.59.241:80:100,192.168.53.20:80:100,192.168.33.226:80:100,192.168.25.217:80:100,192.168.34.165:80:100,192.168.21.184:80:100,192.168.42.143:80:100,192.168.15.167:80:100,192.168.57.30:80:100,192.168.6.158:80:100,192.168.58.142:80:100,192.168.25.253:80:100,192.168.45.178:80:100,192.168.30.95:80:100,192.168.25.132:80:100,192.168.41.21:80:100,192.168.34.166:80:100,192.168.11.171:80:100,192.168.45.199:80:100,192.168.9.133:80:100,192.168.37.157:80:100,192.168.11.15:80:100,192.168.6.108:80:100,192.168.46.174:80:100,192.168.37.231:80:100,192.168.59.214:80:100,192.168.38.201:80:100,192.168.47.243:80:100,192.168.2.250:80:100,192.168.18.114:80:100,192.168.30.108:80:100,192.168.13.17:80:100,192.168.15.37:80:100,192.168.54.253:80:100,192.168.25.43:80:100,192.168.19.214:80:100,192.168.37.190:80:100,192.168.17.193:80:100,192.168.11.87:80:100,192.168.26.177:80:100,192.168.51.60:80:100,192.168.51.203:80:100,192.168.25.6:80:100,192.168.6.59:80:100,192.168.57.67:80:100,192.168.34.204:80:100,192.168.50.49:80:100,192.168.57.231:80:100,192.168.21.25:80:100,192.168.1.39:80:100,192.168.14.106:80:100,192.168.27.248:80:100,192.168.37.89:80:100,192.168.27.244:80:100,192.168.50.11:80:100,192.168.26.105:80:100,192.168.37.149:80:100,192.168.34.82:80:100,192.168.21.56:80:100,192.168.35.163:80:100,192.168.34.78:80:100,192.168.1.244:80:100,192.168.14.180:80:100,192.168.25.70:80:100,192.168.22.105:80:100,192.168.51.68:80:100,192.168.22.149:80:100,192.168.30.131:80:100,192.168.3.26:80:100,192.168.33.20:80:100,192.168.2.88:80:100,192.168.2.49:80:100,192.168.33.224:80:100,192.168.58.213:80:100,192.168.10.62:80:100,192.168.42.27:80:100,192.168.30.91:80:100,192.168.13.215:80:100,192.168.26.188:80:100,192.168.43.93:80:100,192.168.34.103:80:100,192.168.31.253:80:100,192.168.7.155:80:100,192.168.13.237:80:100,192.168.21.112:80:100,192.168.46.226:80:100,192.168.31.37:80:100,192.168.7.52:80:100,192.168.25.78:80:100,192.168.5.239:80:100,192.168.9.81:80:100,192.168.45.87:80:100,192.168.14.164:80:100",
+            "vip":"192.168.102.211"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.85:80:100",
+            "vip":"192.168.102.194"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.147:80:100,192.168.1.213:80:100,192.168.30.98:80:100",
+            "vip":"192.168.102.101"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.13.84:80:100,192.168.59.215:80:100",
+            "vip":"192.168.102.68"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.9.44:80:100,192.168.42.101:80:100,192.168.58.81:80:100,192.168.5.1:80:100,192.168.19.105:80:100,192.168.33.128:80:100,192.168.35.174:80:100,192.168.11.71:80:100,192.168.29.115:80:100,192.168.9.60:80:100,192.168.39.18:80:100,192.168.17.80:80:100,192.168.1.149:80:100,192.168.10.241:80:100,192.168.45.103:80:100,192.168.27.122:80:100,192.168.57.160:80:100,192.168.34.224:80:100,192.168.47.251:80:100,192.168.21.113:80:100,192.168.29.129:80:100,192.168.18.55:80:100,192.168.15.8:80:100,192.168.39.106:80:100,192.168.42.124:80:100,192.168.42.194:80:100,192.168.26.69:80:100,192.168.1.151:80:100,192.168.18.20:80:100,192.168.57.34:80:100,192.168.15.57:80:100,192.168.29.182:80:100,192.168.34.216:80:100,192.168.9.92:80:100,192.168.55.114:80:100,192.168.3.8:80:100,192.168.59.6:80:100,192.168.59.72:80:100,192.168.33.175:80:100,192.168.23.188:80:100,192.168.27.217:80:100,192.168.31.20:80:100,192.168.45.108:80:100,192.168.25.38:80:100,192.168.38.95:80:100,192.168.47.37:80:100,192.168.3.109:80:100,192.168.31.178:80:100,192.168.3.214:80:100,192.168.6.78:80:100,192.168.11.147:80:100,192.168.53.205:80:100,192.168.21.55:80:100,192.168.34.200:80:100,192.168.59.102:80:100,192.168.18.185:80:100,192.168.53.98:80:100,192.168.7.155:80:100,192.168.29.122:80:100,192.168.49.58:80:100,192.168.42.103:80:100,192.168.34.107:80:100,192.168.31.239:80:100,192.168.55.86:80:100,192.168.30.197:80:100,192.168.38.96:80:100,192.168.9.16:80:100,192.168.9.221:80:100,192.168.53.25:80:100,192.168.50.10:80:100,192.168.41.35:80:100,192.168.51.103:80:100,192.168.42.36:80:100,192.168.38.30:80:100",
+            "vip":"192.168.102.38"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.19.168:80:100,192.168.31.163:80:100,192.168.45.215:80:100,192.168.51.195:80:100,192.168.31.22:80:100,192.168.1.155:80:100,192.168.17.118:80:100,192.168.6.225:80:100,192.168.22.62:80:100",
+            "vip":"192.168.101.125"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.51.170:80:100,192.168.55.195:80:100",
+            "vip":"192.168.102.76"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.54.225:80:100,192.168.45.72:80:100,192.168.39.237:80:100",
+            "vip":"192.168.102.70"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.58.226:80:100,192.168.43.182:80:100,192.168.1.161:80:100",
+            "vip":"192.168.102.80"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.231:80:100,192.168.33.229:80:100,192.168.58.182:80:100,192.168.11.62:80:100,192.168.55.11:80:100,192.168.25.59:80:100,192.168.11.172:80:100,192.168.7.20:80:100",
+            "vip":"111.13.235.88"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.234:80:100,192.168.53.229:80:100,192.168.41.190:80:100,192.168.49.66:80:100,192.168.5.242:80:100,192.168.42.15:80:100,192.168.46.33:80:100,192.168.37.62:80:100",
+            "vip":"192.168.102.148"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.229:80:100,192.168.51.28:80:100,192.168.34.153:80:100,192.168.23.136:80:100",
+            "vip":"192.168.102.11"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.33.93:80:100,192.168.5.232:80:100",
+            "vip":"111.13.235.180"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.1.146:80:100,192.168.15.123:80:100,192.168.6.71:80:100,192.168.15.207:80:100,192.168.37.223:80:100,192.168.35.147:80:100,192.168.57.193:80:100",
+            "vip":"111.13.235.191"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.17.116:80:100,192.168.58.93:80:100",
+            "vip":"192.168.102.37"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.22.166:80:100,192.168.17.109:80:100,192.168.57.233:80:100,192.168.49.236:80:100,192.168.50.120:80:100,192.168.18.21:80:100,192.168.17.239:80:100,192.168.34.42:80:100,192.168.50.42:80:100,192.168.59.161:80:100,192.168.13.5:80:100,192.168.21.151:80:100,192.168.18.216:80:100",
+            "vip":"192.168.102.163"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.22.109:80:100,192.168.6.91:80:100,192.168.3.128:80:100,192.168.22.144:80:100",
+            "vip":"192.168.102.64"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.122:80:100,192.168.39.173:80:100,192.168.53.165:80:100,192.168.9.17:80:100,192.168.58.88:80:100,192.168.46.213:80:100,192.168.6.225:80:100",
+            "vip":"192.168.102.141"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.65:80:100,192.168.15.147:80:100,192.168.9.230:80:100,192.168.58.147:80:100,192.168.33.139:80:100,192.168.29.13:80:100,192.168.59.184:80:100,192.168.15.221:80:100,192.168.14.187:80:100,192.168.15.80:80:100,192.168.55.6:80:100,192.168.25.187:80:100,192.168.45.28:80:100,192.168.15.165:80:100,192.168.55.171:80:100,192.168.3.174:80:100,192.168.21.146:80:100,192.168.26.7:80:100,192.168.19.107:80:100,192.168.50.6:80:100,192.168.6.165:80:100,192.168.39.201:80:100,192.168.21.250:80:100,192.168.57.218:80:100,192.168.7.122:80:100,192.168.43.148:80:100,192.168.58.126:80:100,192.168.7.207:80:100,192.168.47.159:80:100,192.168.31.169:80:100,192.168.46.134:80:100,192.168.39.117:80:100,192.168.1.107:80:100,192.168.7.73:80:100,192.168.5.203:80:100,192.168.19.71:80:100,192.168.50.141:80:100,192.168.51.138:80:100,192.168.25.18:80:100,192.168.25.17:80:100,192.168.17.55:80:100,192.168.47.15:80:100,192.168.43.161:80:100,192.168.33.138:80:100,192.168.33.249:80:100,192.168.46.168:80:100,192.168.14.245:80:100,192.168.6.52:80:100,192.168.58.105:80:100,192.168.46.109:80:100,192.168.18.177:80:100,192.168.13.72:80:100,192.168.58.131:80:100,192.168.7.115:80:100,192.168.2.90:80:100,192.168.19.131:80:100,192.168.26.18:80:100,192.168.41.218:80:100,192.168.30.157:80:100,192.168.6.135:80:100,192.168.7.188:80:100,192.168.1.78:80:100,192.168.5.41:80:100,192.168.13.192:80:100,192.168.1.203:80:100,192.168.45.44:80:100,192.168.51.214:80:100,192.168.19.196:80:100,192.168.13.36:80:100,192.168.58.138:80:100,192.168.29.97:80:100,192.168.21.80:80:100,192.168.51.159:80:100,192.168.51.98:80:100,192.168.15.125:80:100,192.168.57.31:80:100,192.168.37.179:80:100,192.168.25.229:80:100,192.168.5.200:80:100,192.168.23.33:80:100,192.168.37.131:80:100,192.168.7.34:80:100,192.168.38.89:80:100,192.168.21.242:80:100,192.168.26.16:80:100,192.168.50.145:80:100,192.168.59.252:80:100,192.168.53.38:80:100,192.168.7.106:80:100,192.168.49.91:80:100",
+            "vip":"111.13.235.106"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.42.207:80:100,192.168.46.148:80:100",
+            "vip":"111.13.235.164"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.50.8:80:100,192.168.55.104:80:100,192.168.18.179:80:100,192.168.45.136:80:100,192.168.7.95:80:100,192.168.46.170:80:100,192.168.33.26:80:100,192.168.26.172:80:100,192.168.54.168:80:100",
+            "vip":"192.168.101.66"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.54.61:80:100,192.168.37.233:80:100,192.168.46.90:80:100,192.168.11.116:80:100,192.168.25.236:80:100,192.168.33.66:80:100,192.168.55.80:80:100,192.168.43.59:80:100,192.168.51.55:80:100,192.168.54.253:80:100,192.168.47.251:80:100,192.168.6.54:80:100,192.168.23.155:80:100,192.168.6.16:80:100,192.168.25.130:80:100,192.168.9.38:80:100,192.168.41.46:80:100,192.168.18.127:80:100,192.168.46.163:80:100,192.168.51.219:80:100,192.168.6.121:80:100,192.168.41.72:80:100,192.168.45.35:80:100,192.168.3.250:80:100,192.168.10.30:80:100,192.168.15.54:80:100,192.168.53.77:80:100,192.168.15.239:80:100,192.168.9.21:80:100,192.168.57.237:80:100,192.168.13.118:80:100,192.168.23.36:80:100,192.168.7.21:80:100,192.168.47.132:80:100,192.168.14.204:80:100,192.168.9.15:80:100,192.168.39.246:80:100,192.168.49.207:80:100",
+            "vip":"192.168.101.193"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.3.92:80:100,192.168.29.173:80:100,192.168.38.88:80:100,192.168.11.87:80:100,192.168.5.25:80:100,192.168.57.76:80:100,192.168.6.205:80:100,192.168.54.108:80:100,192.168.59.118:80:100,192.168.27.82:80:100,192.168.42.163:80:100",
+            "vip":"192.168.101.176"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.101:80:100",
+            "vip":"192.168.101.2"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.1:80:100,192.168.30.114:80:100,192.168.26.231:80:100,192.168.47.46:80:100,192.168.59.110:80:100,192.168.54.130:80:100,192.168.29.229:80:100,192.168.41.42:80:100,192.168.38.74:80:100,192.168.11.232:80:100,192.168.43.156:80:100,192.168.42.149:80:100,192.168.37.104:80:100,192.168.50.16:80:100,192.168.30.148:80:100,192.168.18.140:80:100,192.168.10.115:80:100,192.168.6.254:80:100,192.168.19.105:80:100,192.168.15.162:80:100,192.168.42.52:80:100,192.168.33.150:80:100,192.168.30.3:80:100,192.168.3.140:80:100,192.168.10.111:80:100,192.168.49.120:80:100,192.168.25.23:80:100,192.168.58.252:80:100,192.168.39.58:80:100,192.168.13.145:80:100,192.168.54.188:80:100,192.168.30.59:80:100,192.168.25.2:80:100,192.168.17.61:80:100,192.168.9.80:80:100,192.168.21.231:80:100,192.168.23.189:80:100,192.168.30.41:80:100,192.168.2.161:80:100,192.168.59.176:80:100,192.168.2.173:80:100,192.168.30.90:80:100,192.168.2.208:80:100,192.168.59.113:80:100,192.168.30.240:80:100,192.168.57.128:80:100,192.168.41.159:80:100,192.168.39.113:80:100,192.168.14.53:80:100,192.168.2.242:80:100,192.168.26.117:80:100,192.168.13.242:80:100,192.168.1.241:80:100,192.168.33.74:80:100,192.168.29.26:80:100,192.168.26.13:80:100,192.168.23.252:80:100,192.168.45.218:80:100,192.168.5.242:80:100,192.168.31.210:80:100,192.168.13.210:80:100,192.168.45.48:80:100,192.168.1.176:80:100,192.168.29.73:80:100,192.168.49.45:80:100,192.168.59.235:80:100,192.168.35.208:80:100,192.168.22.117:80:100,192.168.58.115:80:100,192.168.41.144:80:100,192.168.55.36:80:100,192.168.13.187:80:100,192.168.30.24:80:100,192.168.58.73:80:100,192.168.33.20:80:100,192.168.14.1:80:100,192.168.43.202:80:100,192.168.42.188:80:100,192.168.55.110:80:100,192.168.27.78:80:100,192.168.46.220:80:100,192.168.34.81:80:100,192.168.47.52:80:100,192.168.59.131:80:100,192.168.10.162:80:100,192.168.19.20:80:100,192.168.3.222:80:100,192.168.17.27:80:100,192.168.6.152:80:100,192.168.18.143:80:100",
+            "vip":"192.168.102.225"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.2.148:80:100,192.168.46.5:80:100,192.168.27.245:80:100,192.168.29.45:80:100,192.168.17.218:80:100,192.168.31.62:80:100",
+            "vip":"192.168.101.64"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.2.152:80:100,192.168.19.20:80:100,192.168.25.134:80:100",
+            "vip":"192.168.101.205"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.152:80:100,192.168.23.136:80:100,192.168.41.168:80:100,192.168.9.227:80:100",
+            "vip":"192.168.102.51"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.36:80:100,192.168.46.101:80:100,192.168.29.89:80:100,192.168.3.191:80:100,192.168.26.137:80:100",
+            "vip":"192.168.102.193"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.25.214:80:100,192.168.7.131:80:100,192.168.33.216:80:100,192.168.34.228:80:100,192.168.25.47:80:100,192.168.49.119:80:100,192.168.43.140:80:100,192.168.2.124:80:100,192.168.27.68:80:100,192.168.18.58:80:100,192.168.14.101:80:100,192.168.43.190:80:100,192.168.30.20:80:100,192.168.17.56:80:100,192.168.49.253:80:100,192.168.23.53:80:100,192.168.45.66:80:100,192.168.6.110:80:100,192.168.58.196:80:100,192.168.34.241:80:100,192.168.15.74:80:100,192.168.55.246:80:100,192.168.38.206:80:100,192.168.50.176:80:100,192.168.21.119:80:100,192.168.26.220:80:100,192.168.45.20:80:100,192.168.57.63:80:100,192.168.23.154:80:100,192.168.55.14:80:100,192.168.47.206:80:100,192.168.27.91:80:100,192.168.45.157:80:100,192.168.23.222:80:100,192.168.55.128:80:100,192.168.41.164:80:100,192.168.45.149:80:100,192.168.51.50:80:100,192.168.14.135:80:100,192.168.18.129:80:100,192.168.14.195:80:100,192.168.19.14:80:100,192.168.59.79:80:100,192.168.31.224:80:100,192.168.23.118:80:100,192.168.13.57:80:100,192.168.2.102:80:100,192.168.11.241:80:100,192.168.7.5:80:100,192.168.7.176:80:100,192.168.10.42:80:100,192.168.19.212:80:100,192.168.19.166:80:100,192.168.57.92:80:100,192.168.22.110:80:100,192.168.10.172:80:100,192.168.41.132:80:100,192.168.22.224:80:100,192.168.35.19:80:100,192.168.41.1:80:100,192.168.25.208:80:100,192.168.14.32:80:100,192.168.23.167:80:100,192.168.5.195:80:100,192.168.17.205:80:100,192.168.50.38:80:100,192.168.45.222:80:100,192.168.15.43:80:100,192.168.2.92:80:100,192.168.23.250:80:100,192.168.9.212:80:100,192.168.17.221:80:100,192.168.6.12:80:100,192.168.57.76:80:100,192.168.57.179:80:100,192.168.55.248:80:100,192.168.42.200:80:100,192.168.42.99:80:100,192.168.1.39:80:100,192.168.13.44:80:100,192.168.49.236:80:100,192.168.46.195:80:100,192.168.42.109:80:100,192.168.11.147:80:100,192.168.9.164:80:100,192.168.21.114:80:100,192.168.41.155:80:100,192.168.34.67:80:100,192.168.34.104:80:100,192.168.27.235:80:100,192.168.1.33:80:100,192.168.50.164:80:100,192.168.34.111:80:100,192.168.31.195:80:100,192.168.15.73:80:100,192.168.39.202:80:100,192.168.35.10:80:100,192.168.1.97:80:100,192.168.59.153:80:100,192.168.2.136:80:100,192.168.3.141:80:100,192.168.46.155:80:100,192.168.47.133:80:100,192.168.9.91:80:100,192.168.34.7:80:100,192.168.46.231:80:100,192.168.10.43:80:100,192.168.9.135:80:100,192.168.13.252:80:100,192.168.49.5:80:100,192.168.21.247:80:100,192.168.7.236:80:100,192.168.46.233:80:100,192.168.31.23:80:100,192.168.59.131:80:100,192.168.19.16:80:100,192.168.15.111:80:100,192.168.18.122:80:100,192.168.31.39:80:100,192.168.29.127:80:100,192.168.19.203:80:100,192.168.14.134:80:100,192.168.19.91:80:100",
+            "vip":"192.168.101.213"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.68:80:100,192.168.37.33:80:100,192.168.45.227:80:100,192.168.19.107:80:100,192.168.50.183:80:100,192.168.38.59:80:100,192.168.7.50:80:100,192.168.10.205:80:100",
+            "vip":"192.168.102.4"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.1.56:80:100,192.168.29.156:80:100,192.168.7.109:80:100,192.168.33.23:80:100,192.168.2.210:80:100,192.168.7.147:80:100,192.168.9.191:80:100,192.168.1.235:80:100,192.168.18.182:80:100,192.168.29.51:80:100,192.168.29.66:80:100",
+            "vip":"111.13.235.134"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.1.199:80:100,192.168.54.191:80:100",
+            "vip":"192.168.101.40"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.53.114:80:100,192.168.26.58:80:100,192.168.19.99:80:100,192.168.37.54:80:100,192.168.47.202:80:100,192.168.38.78:80:100,192.168.14.166:80:100,192.168.47.63:80:100,192.168.7.184:80:100",
+            "vip":"192.168.102.58"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.27.100:80:100,192.168.25.82:80:100,192.168.1.214:80:100,192.168.31.233:80:100,192.168.47.244:80:100,192.168.27.87:80:100,192.168.55.232:80:100,192.168.25.70:80:100,192.168.42.15:80:100,192.168.59.223:80:100,192.168.50.211:80:100,192.168.2.44:80:100,192.168.51.75:80:100,192.168.43.225:80:100,192.168.41.20:80:100,192.168.37.140:80:100,192.168.25.223:80:100,192.168.51.26:80:100",
+            "vip":"192.168.101.57"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.84:80:100,192.168.39.65:80:100,192.168.59.213:80:100,192.168.49.19:80:100,192.168.35.106:80:100,192.168.22.129:80:100,192.168.19.55:80:100,192.168.6.102:80:100,192.168.21.139:80:100,192.168.34.47:80:100,192.168.31.110:80:100,192.168.21.222:80:100,192.168.57.15:80:100,192.168.47.41:80:100,192.168.25.233:80:100,192.168.58.29:80:100,192.168.1.185:80:100,192.168.46.142:80:100,192.168.19.240:80:100,192.168.43.53:80:100,192.168.30.239:80:100,192.168.58.226:80:100,192.168.11.18:80:100,192.168.2.174:80:100,192.168.5.148:80:100,192.168.11.143:80:100,192.168.41.53:80:100,192.168.38.134:80:100,192.168.39.44:80:100,192.168.27.141:80:100,192.168.38.182:80:100,192.168.27.134:80:100,192.168.22.92:80:100,192.168.53.236:80:100,192.168.54.177:80:100,192.168.17.169:80:100,192.168.19.235:80:100,192.168.19.88:80:100,192.168.59.127:80:100,192.168.58.252:80:100,192.168.3.1:80:100,192.168.57.105:80:100,192.168.42.156:80:100,192.168.51.33:80:100,192.168.23.200:80:100,192.168.37.206:80:100,192.168.53.92:80:100,192.168.14.58:80:100,192.168.59.56:80:100,192.168.21.116:80:100,192.168.46.238:80:100,192.168.43.227:80:100,192.168.11.253:80:100,192.168.55.213:80:100,192.168.21.67:80:100,192.168.27.50:80:100,192.168.54.75:80:100,192.168.51.240:80:100,192.168.14.118:80:100,192.168.46.170:80:100,192.168.6.51:80:100,192.168.39.204:80:100,192.168.22.106:80:100,192.168.45.19:80:100,192.168.30.157:80:100,192.168.58.91:80:100,192.168.38.114:80:100,192.168.23.10:80:100,192.168.2.75:80:100,192.168.35.229:80:100,192.168.35.190:80:100,192.168.17.233:80:100,192.168.13.249:80:100,192.168.10.60:80:100,192.168.47.155:80:100,192.168.3.155:80:100,192.168.42.36:80:100,192.168.25.102:80:100,192.168.51.144:80:100,192.168.13.158:80:100,192.168.22.17:80:100,192.168.42.211:80:100,192.168.9.251:80:100,192.168.33.236:80:100,192.168.33.250:80:100,192.168.11.201:80:100,192.168.7.240:80:100,192.168.19.211:80:100,192.168.10.41:80:100,192.168.23.108:80:100,192.168.9.222:80:100,192.168.18.122:80:100,192.168.39.6:80:100,192.168.1.188:80:100,192.168.19.183:80:100,192.168.58.150:80:100,192.168.45.117:80:100,192.168.7.211:80:100,192.168.14.164:80:100",
+            "vip":"192.168.101.112"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.6.129:80:100,192.168.6.187:80:100,192.168.3.16:80:100,192.168.39.179:80:100,192.168.54.149:80:100",
+            "vip":"111.13.235.143"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.55.3:80:100",
+            "vip":"192.168.102.227"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.41.62:80:100,192.168.35.27:80:100,192.168.26.91:80:100,192.168.47.238:80:100",
+            "vip":"192.168.101.13"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.31.145:80:100,192.168.19.135:80:100,192.168.11.64:80:100,192.168.11.22:80:100,192.168.50.132:80:100,192.168.23.114:80:100,192.168.30.242:80:100,192.168.55.128:80:100,192.168.59.208:80:100,192.168.49.186:80:100,192.168.41.233:80:100,192.168.25.155:80:100,192.168.17.139:80:100,192.168.10.38:80:100,192.168.53.170:80:100,192.168.54.165:80:100,192.168.42.188:80:100",
+            "vip":"192.168.102.56"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.5.22:80:100,192.168.9.220:80:100,192.168.53.47:80:100,192.168.55.158:80:100",
+            "vip":"111.13.235.65"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.47.50:80:100,192.168.15.55:80:100,192.168.26.167:80:100,192.168.9.14:80:100,192.168.18.216:80:100,192.168.18.224:80:100,192.168.49.241:80:100,192.168.2.165:80:100,192.168.47.133:80:100,192.168.38.81:80:100,192.168.10.49:80:100,192.168.43.6:80:100,192.168.22.207:80:100,192.168.26.2:80:100,192.168.17.76:80:100,192.168.54.114:80:100,192.168.50.195:80:100,192.168.25.133:80:100,192.168.51.113:80:100,192.168.31.69:80:100,192.168.59.3:80:100,192.168.46.88:80:100,192.168.35.226:80:100,192.168.6.98:80:100,192.168.21.58:80:100,192.168.15.164:80:100,192.168.53.38:80:100,192.168.17.95:80:100,192.168.14.42:80:100,192.168.47.112:80:100,192.168.57.115:80:100,192.168.15.220:80:100,192.168.35.3:80:100,192.168.15.80:80:100,192.168.39.200:80:100,192.168.18.169:80:100,192.168.49.1:80:100",
+            "vip":"192.168.102.87"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.37.138:80:100,192.168.50.245:80:100,192.168.39.11:80:100,192.168.10.95:80:100,192.168.39.225:80:100,192.168.14.79:80:100,192.168.43.21:80:100,192.168.53.100:80:100,192.168.9.234:80:100,192.168.54.89:80:100,192.168.49.172:80:100,192.168.2.44:80:100,192.168.26.168:80:100",
+            "vip":"111.13.235.219"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.55:80:100",
+            "vip":"111.13.235.198"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.35.3:80:100,192.168.23.238:80:100,192.168.57.253:80:100",
+            "vip":"192.168.102.48"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.30.249:80:100,192.168.54.154:80:100,192.168.21.17:80:100,192.168.35.10:80:100,192.168.53.138:80:100",
+            "vip":"192.168.101.168"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.14.129:80:100,192.168.57.22:80:100,192.168.14.196:80:100,192.168.10.128:80:100,192.168.55.75:80:100,192.168.2.35:80:100,192.168.41.70:80:100,192.168.55.160:80:100,192.168.42.25:80:100,192.168.21.203:80:100,192.168.51.95:80:100,192.168.21.1:80:100,192.168.22.131:80:100,192.168.41.203:80:100,192.168.30.118:80:100,192.168.31.203:80:100,192.168.46.225:80:100",
+            "vip":"192.168.102.136"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.59.208:80:100,192.168.58.20:80:100,192.168.3.98:80:100,192.168.25.242:80:100",
+            "vip":"111.13.235.166"
+        },
+        {
+            "ipType":"IPV4",
+            "port":"80",
+            "protocol":"TCP",
+            "rips":"192.168.21.82:80:100,192.168.18.234:80:100,192.168.19.148:80:100,192.168.55.145:80:100,192.168.15.42:80:100,192.168.22.37:80:100,192.168.59.47:80:100,192.168.5.159:80:100,192.168.25.209:80:100,192.168.37.215:80:100,192.168.6.81:80:100,192.168.19.26:80:100,192.168.34.126:80:100,192.168.43.198:80:100,192.168.29.40:80:100,192.168.9.149:80:100,192.168.46.225:80:100,192.168.31.146:80:100,192.168.38.252:80:100,192.168.51.103:80:100,192.168.47.28:80:100,192.168.21.12:80:100,192.168.25.249:80:100,192.168.22.234:80:100,192.168.54.204:80:100,192.168.9.2:80:100,192.168.33.239:80:100,192.168.10.134:80:100,192.168.41.94:80:100,192.168.11.99:80:100,192.168.33.196:80:100,192.168.10.55:80:100,192.168.38.121:80:100,192.168.38.238:80:100,192.168.21.79:80:100,192.168.11.181:80:100,192.168.49.48:80:100,192.168.10.78:80:100,192.168.45.28:80:100,192.168.59.156:80:100,192.168.38.221:80:100,192.168.18.251:80:100,192.168.17.94:80:100,192.168.37.183:80:100,192.168.37.181:80:100,192.168.54.100:80:100,192.168.58.44:80:100,192.168.45.20:80:100,192.168.29.136:80:100,192.168.18.252:80:100,192.168.30.182:80:100,192.168.7.11:80:100,192.168.54.36:80:100,192.168.59.219:80:100,192.168.42.197:80:100,192.168.5.178:80:100,192.168.47.196:80:100,192.168.22.44:80:100,192.168.14.167:80:100,192.168.19.80:80:100,192.168.37.123:80:100,192.168.14.150:80:100,192.168.5.68:80:100,192.168.18.210:80:100,192.168.55.227:80:100,192.168.35.105:80:100,192.168.18.129:80:100,192.168.25.65:80:100,192.168.45.133:80:100,192.168.34.31:80:100,192.168.45.90:80:100,192.168.17.107:80:100,192.168.14.169:80:100,192.168.47.90:80:100,192.168.11.191:80:100,192.168.46.184:80:100,192.168.49.64:80:100,192.168.13.142:80:100,192.168.25.157:80:100,192.168.30.71:80:100,192.168.53.169:80:100,192.168.54.231:80:100,192.168.53.162:80:100,192.168.10.212:80:100,192.168.27.151:80:100,192.168.57.112:80:100,192.168.33.91:80:100,192.168.2.85:80:100,192.168.14.74:80:100,192.168.39.192:80:100,192.168.2.35:80:100,192.168.7.123:80:100,192.168.17.229:80:100,192.168.10.203:80:100,192.168.59.243:80:100,192.168.54.41:80:100,192.168.47.227:80:100,192.168.14.12:80:100,192.168.22.75:80:100,192.168.43.80:80:100,192.168.15.1:80:100,192.168.58.69:80:100,192.168.55.206:80:100,192.168.23.250:80:100,192.168.45.67:80:100,192.168.41.67:80:100,192.168.53.187:80:100,192.168.59.60:80:100,192.168.35.229:80:100,192.168.5.165:80:100,192.168.33.76:80:100,192.168.50.167:80:100,192.168.10.173:80:100,192.168.18.228:80:100,192.168.41.40:80:100,192.168.46.103:80:100,192.168.1.100:80:100,192.168.6.137:80:100,192.168.29.171:80:100,192.168.38.50:80:100,192.168.26.211:80:100,192.168.7.153:80:100,192.168.27.15:80:100,192.168.42.221:80:100,192.168.17.152:80:100,192.168.50.133:80:100,192.168.23.249:80:100,192.168.58.208:80:100,192.168.9.80:80:100,192.168.25.179:80:100,192.168.58.246:80:100,192.168.6.114:80:100,192.168.17.52:80:100,192.168.29.85:80:100,192.168.35.225:80:100,192.168.49.116:80:100,192.168.30.78:80:100,192.168.6.32:80:100,192.168.53.129:80:100,192.168.5.22:80:100,192.168.35.108:80:100,192.168.21.29:80:100,192.168.26.183:80:100,192.168.22.243:80:100,192.168.7.225:80:100,192.168.9.108:80:100,192.168.37.131:80:100,192.168.51.70:80:100,192.168.9.202:80:100,192.168.59.217:80:100,192.168.14.202:80:100,192.168.38.175:80:100,192.168.41.59:80:100,192.168.1.140:80:100,192.168.54.182:80:100,192.168.18.14:80:100,192.168.3.153:80:100,192.168.6.238:80:100,192.168.55.131:80:100,192.168.39.101:80:100,192.168.34.23:80:100,192.168.31.138:80:100",
+            "vip":"192.168.101.204"
+        }
+    ]
+}
diff --git a/tools/keepalived/configure b/tools/keepalived/configure
index dcb9f06fa..d0ff7d95e 100755
--- a/tools/keepalived/configure
+++ b/tools/keepalived/configure
@@ -1,6 +1,8 @@
 #! /bin/sh
 # Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.69.
+# Generated by GNU Autoconf 2.69 for Keepalived 2.0.19.
+#
+# Report bugs to <keepalived-users@groups.io>.
 #
 #
 # Copyright (C) 1992-1996, 1998-2012 Free Software Foundation, Inc.
@@ -264,10 +266,11 @@ fi
     $as_echo "$0: In particular, zsh $ZSH_VERSION has bugs and should"
     $as_echo "$0: be upgraded to zsh 4.3.4 or later."
   else
-    $as_echo "$0: Please tell bug-autoconf@gnu.org about your system,
-$0: including any error possibly output before this
-$0: message. Then install a modern shell, or manually run
-$0: the script under such a shell if you do have one."
+    $as_echo "$0: Please tell bug-autoconf@gnu.org and
+$0: keepalived-users@groups.io about your system, including
+$0: any error possibly output before this message. Then
+$0: install a modern shell, or manually run the script
+$0: under such a shell if you do have one."
   fi
   exit 1
 fi
@@ -575,12 +578,12 @@ MFLAGS=
 MAKEFLAGS=
 
 # Identity of this package.
-PACKAGE_NAME=
-PACKAGE_TARNAME=
-PACKAGE_VERSION=
-PACKAGE_STRING=
-PACKAGE_BUGREPORT=
-PACKAGE_URL=
+PACKAGE_NAME='Keepalived'
+PACKAGE_TARNAME='keepalived'
+PACKAGE_VERSION='2.0.19'
+PACKAGE_STRING='Keepalived 2.0.19'
+PACKAGE_BUGREPORT='keepalived-users@groups.io'
+PACKAGE_URL='http://www.keepalived.org/'
 
 ac_unique_file="keepalived/core/main.c"
 # Factoring default headers for most tests.
@@ -619,28 +622,138 @@ ac_includes_default="\
 # include <unistd.h>
 #endif"
 
-ac_subst_vars='LTLIBOBJS
-LIBOBJS
-VRRP_SUPPORT
-USE_NL
-IPVS_SUPPORT
-VERSION_DATE
-VERSION
-DFLAGS
-SO_MARK_SUPPORT
-SHA1_SUPPORT
-SNMP_SUPPORT
+ac_subst_vars='am__EXEEXT_FALSE
+am__EXEEXT_TRUE
+LTLIBOBJS
+INIT_SUSE_FALSE
+INIT_SUSE_TRUE
+INIT_OPENRC_FALSE
+INIT_OPENRC_TRUE
+INIT_SYSV_FALSE
+INIT_SYSV_TRUE
+INIT_SYSTEMD_FALSE
+INIT_SYSTEMD_TRUE
+INIT_UPSTART_FALSE
+INIT_UPSTART_TRUE
+systemdsystemunitdir
+DEFAULT_CONFIG_FILE
+RPM_BIP_FALSE
+RPM_BIP_TRUE
+RPM_FALSE
+RPM_TRUE
+HAVE_RPMBUILD
+HAVE_RPM
+PROFILE_FALSE
+PROFILE_TRUE
+ASSERTS_FALSE
+ASSERTS_TRUE
+DEBUG_FALSE
+DEBUG_TRUE
+BUILD_DOCS_FALSE
+BUILD_DOCS_TRUE
+HAVE_SPHINX_BUILD
+SPHINXBUILDNAME
+PID_DIR
+WITH_NAMESPACES_FALSE
+WITH_NAMESPACES_TRUE
+WITH_SHA1_FALSE
+WITH_SHA1_TRUE
+DBUS_CREATE_INSTANCE_FALSE
+DBUS_CREATE_INSTANCE_TRUE
+WITH_DBUS_FALSE
+WITH_DBUS_TRUE
+SNMP_SERVICE
+SNMP_REPLY_V3_FOR_V2_FALSE
+SNMP_REPLY_V3_FOR_V2_TRUE
+SNMP_RFCV3_FALSE
+SNMP_RFCV3_TRUE
+SNMP_RFCV2_FALSE
+SNMP_RFCV2_TRUE
+SNMP_RFC_FALSE
+SNMP_RFC_TRUE
+SNMP_CHECKER_FALSE
+SNMP_CHECKER_TRUE
+SNMP_VRRP_FALSE
+SNMP_VRRP_TRUE
+SNMP_KEEPALIVED_FALSE
+SNMP_KEEPALIVED_TRUE
+SNMP_FALSE
+SNMP_TRUE
 NETSNMP_CONFIG
-VRRP_VMAC
-IPVS_SYNCD
-KERN
+FIB_ROUTING_FALSE
+FIB_ROUTING_TRUE
+SOCK_NONBLOCK_FALSE
+SOCK_NONBLOCK_TRUE
+CN_PROC_FALSE
+CN_PROC_TRUE
+WITH_BFD_FALSE
+WITH_BFD_TRUE
+WITH_JSON_FALSE
+WITH_JSON_TRUE
+VMAC_FALSE
+VMAC_TRUE
+VRRP_AUTH_FALSE
+VRRP_AUTH_TRUE
+WITH_VRRP_FALSE
+WITH_VRRP_TRUE
+WITH_REGEX_FALSE
+WITH_REGEX_TRUE
+WITH_IPVS_FALSE
+WITH_IPVS_TRUE
+FIREWALL_FALSE
+FIREWALL_TRUE
+NFTABLES_FALSE
+NFTABLES_TRUE
+REQUIRE_IPTABLES_LIBS_FALSE
+REQUIRE_IPTABLES_LIBS_TRUE
+LIBIPSET_DYNAMIC_FALSE
+LIBIPSET_DYNAMIC_TRUE
+LIBIPTC_DYNAMIC_FALSE
+LIBIPTC_DYNAMIC_TRUE
+IPTABLES_CMD_FALSE
+IPTABLES_CMD_TRUE
+IPTABLES_FALSE
+IPTABLES_TRUE
+LIBIPSET_FALSE
+LIBIPSET_TRUE
+LIBIPTC_FALSE
+LIBIPTC_TRUE
+LIBNL_DYNAMIC_FALSE
+LIBNL_DYNAMIC_TRUE
+LIBNL3_FALSE
+LIBNL3_TRUE
+LIBNL1_FALSE
+LIBNL1_TRUE
+BUILD_GENHASH_FALSE
+BUILD_GENHASH_TRUE
+GENHASH_LIBS
+LIBOBJS
 EGREP
-GREP
 CPP
-STRIP
-INSTALL_DATA
-INSTALL_SCRIPT
-INSTALL_PROGRAM
+KA_LIBS
+KA_LDFLAGS
+KA_CFLAGS
+KA_CPPFLAGS
+WITH_STRICT_CONFIG_CHECKS_FALSE
+WITH_STRICT_CONFIG_CHECKS_TRUE
+ARFLAGS
+ac_ct_AR
+AR
+LDD
+SED
+LN_S
+GREP
+RANLIB
+am__fastdepCC_FALSE
+am__fastdepCC_TRUE
+CCDEPMODE
+am__nodep
+AMDEPBACKSLASH
+AMDEP_FALSE
+AMDEP_TRUE
+am__quote
+am__include
+DEPDIR
 OBJEXT
 EXEEXT
 ac_ct_CC
@@ -648,6 +761,37 @@ CPPFLAGS
 LDFLAGS
 CFLAGS
 CC
+PKG_CONFIG_LIBDIR
+PKG_CONFIG_PATH
+PKG_CONFIG
+MAINTAINERCLEANFILES
+AM_BACKSLASH
+AM_DEFAULT_VERBOSITY
+AM_DEFAULT_V
+AM_V
+am__untar
+am__tar
+AMTAR
+am__leading_dot
+SET_MAKE
+AWK
+mkdir_p
+MKDIR_P
+INSTALL_STRIP_PROGRAM
+STRIP
+install_sh
+MAKEINFO
+AUTOHEADER
+AUTOMAKE
+AUTOCONF
+ACLOCAL
+VERSION
+PACKAGE
+CYGPATH_W
+am__isrc
+INSTALL_DATA
+INSTALL_SCRIPT
+INSTALL_PROGRAM
 target_alias
 host_alias
 build_alias
@@ -689,20 +833,87 @@ SHELL'
 ac_subst_files=''
 ac_user_opts='
 enable_option_checking
+enable_silent_rules
 enable_lvs_syncd
 enable_lvs
+enable_lvs_64bit_stats
 enable_vrrp
+enable_bfd
 with_kernel_dir
-with_kernel_version
 enable_fwmark
 enable_snmp
+enable_snmp_vrrp
+enable_snmp_keepalived
+enable_snmp_checker
+enable_snmp_rfc
+enable_snmp_rfcv2
+enable_snmp_rfcv3
+enable_snmp_reply_v3_for_v2
+enable_dbus
+enable_dbus_create_instance
 enable_sha1
+enable_regex
+enable_regex_timers
+enable_json
+with_init
+enable_vrrp_auth
+enable_checksum_compat
+enable_routes
+enable_linkbeat
+enable_gnu_std_paths
+enable_dynamic_linking
+enable_iptables
+enable_libiptc_dynamic
+enable_libipset_dynamic
+enable_libnl_dynamic
+enable_libiptc
+enable_libipset
+enable_nftables
+enable_libnl
+enable_track_process
+with_run_dir
+enable_strict_config_checks
+enable_hardening
+enable_optimise
+enable_warnings
+enable_extra_warnings
+enable_mem_check
+enable_mem_check_log
+enable_timer_check
 enable_debug
+enable_netlink_timers
+enable_smtp_alert_debug
+enable_stacktrace
+enable_perf
+enable_log_file
+enable_dump_threads
+enable_epoll_debug
+enable_epoll_thread_dump
+enable_regex_debug
+enable_tsm_debug
+enable_vrrp_fd_debug
+enable_eintr_debug
+enable_track_process_debug
+enable_parser_debug
+enable_checksum_debug
+enable_dump_keywords
+enable_network_timestamp
+enable_asserts
+with_fixed_if_type
+with_default_config_file
 enable_profile
+enable_conversion_checks
+enable_force_conversion_checks
+enable_Werror
+with_systemdsystemunitdir
+enable_dependency_tracking
 '
       ac_precious_vars='build_alias
 host_alias
 target_alias
+PKG_CONFIG
+PKG_CONFIG_PATH
+PKG_CONFIG_LIBDIR
 CC
 CFLAGS
 LDFLAGS
@@ -749,7 +960,7 @@ sharedstatedir='${prefix}/com'
 localstatedir='${prefix}/var'
 includedir='${prefix}/include'
 oldincludedir='/usr/include'
-docdir='${datarootdir}/doc/${PACKAGE}'
+docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
 infodir='${datarootdir}/info'
 htmldir='${docdir}'
 dvidir='${docdir}'
@@ -1249,7 +1460,7 @@ if test "$ac_init_help" = "long"; then
   # Omit some internal or obsolete options to make the list less imposing.
   # This message is too long to be a string in the A/UX 3.1 sh.
   cat <<_ACEOF
-\`configure' configures this package to adapt to many kinds of systems.
+\`configure' configures Keepalived 2.0.19 to adapt to many kinds of systems.
 
 Usage: $0 [OPTION]... [VAR=VALUE]...
 
@@ -1297,7 +1508,7 @@ Fine tuning of the installation directories:
   --infodir=DIR           info documentation [DATAROOTDIR/info]
   --localedir=DIR         locale-dependent data [DATAROOTDIR/locale]
   --mandir=DIR            man documentation [DATAROOTDIR/man]
-  --docdir=DIR            documentation root [DATAROOTDIR/doc/PACKAGE]
+  --docdir=DIR            documentation root [DATAROOTDIR/doc/keepalived]
   --htmldir=DIR           html documentation [DOCDIR]
   --dvidir=DIR            dvi documentation [DOCDIR]
   --pdfdir=DIR            pdf documentation [DOCDIR]
@@ -1305,33 +1516,143 @@ Fine tuning of the installation directories:
 _ACEOF
 
   cat <<\_ACEOF
+
+Program names:
+  --program-prefix=PREFIX            prepend PREFIX to installed program names
+  --program-suffix=SUFFIX            append SUFFIX to installed program names
+  --program-transform-name=PROGRAM   run sed PROGRAM on installed program names
 _ACEOF
 fi
 
 if test -n "$ac_init_help"; then
-
+  case $ac_init_help in
+     short | recursive ) echo "Configuration of Keepalived 2.0.19:";;
+   esac
   cat <<\_ACEOF
 
 Optional Features:
   --disable-option-checking  ignore unrecognized --enable/--with options
   --disable-FEATURE       do not include FEATURE (same as --enable-FEATURE=no)
   --enable-FEATURE[=ARG]  include FEATURE [ARG=yes]
+  --enable-silent-rules   less verbose build output (undo: "make V=1")
+  --disable-silent-rules  verbose build output (undo: "make V=0")
   --disable-lvs-syncd     do not use LVS synchronization daemon
   --disable-lvs           do not use the LVS framework
+  --disable-lvs-64bit-stats
+                          do not use the LVS 64-bit stats
   --disable-vrrp          do not use the VRRP framework
+  --enable-bfd            use the BFD framework
   --disable-fwmark        compile without SO_MARK support
   --enable-snmp           compile with SNMP support
+  --enable-snmp-vrrp      compile with SNMP vrrp support
+  --enable-snmp-keepalived
+                          obsolete - use --enable-snmp-vrrp
+  --enable-snmp-checker   compile with SNMP checker support
+  --enable-snmp-rfc       compile with SNMP RFC2787 (VRRPv2) and SNMP RFC6527
+                          (VRRPv3) support
+  --enable-snmp-rfcv2     compile with SNMP RFC2787 (VRRPv2) support
+  --enable-snmp-rfcv3     compile with SNMP RFC6527 (VRRPv3) support
+  --disable-snmp-reply-v3-for-v2
+                          disable RFC6527 responses for VRRPv2 instances
+  --enable-dbus           compile with dbus support
+  --enable-dbus-create-instance
+                          compile with dbus support for creating instances
   --enable-sha1           compile with SHA1 support
+  --enable-regex          build with HTTP_GET regex checking
+  --enable-regex-timers   build with HTTP_GET regex timers
+  --enable-json           compile with signal to dump configuration and stats
+                          as json
+  --disable-vrrp-auth     compile without VRRP authentication
+  --disable-checksum-compat
+                          compile without v1.3.6 and earlier VRRPv3 unicast
+                          checksum compatibility
+  --disable-routes        compile without ip rules/routes
+  --disable-linkbeat      build without linkbeat support
+  --enable-gnu-std-paths  use GNU standard paths for pid files etc
+  --enable-dynamic-linking
+                          compile with/without dynamically linked
+                          libiptc/libipset/libnl
+  --disable-iptables      compile without iptables support
+  --enable-libiptc-dynamic
+                          compile with libiptc dynamically linked
+  --disable-libipset-dynamic
+                          compile with libipset statically linked
+  --enable-libnl-dynamic  compile with libnl dynamically linked
+  --disable-libiptc       compile without libiptc
+  --disable-libipset      compile without libipset
+  --disable-nftables      build without nftables support
+  --disable-libnl         compile without libnl
+  --disable-track-process build without track-process functionality
+  --enable-strict-config-checks
+                          build with strict configuration checking
+  --disable-hardening     do not build with security hardening
+  --enable-optimise       compiler optimisation level
+  --enable-warnings[=WARNINGS]
+                          additional compiler warnings, disable for reduced
+                          set
+  --enable-extra-warnings extra compiler warnings that will probably produce
+                          many warnings
+  --enable-mem-check      compile with memory alloc checking
+  --enable-mem-check-log  compile with memory alloc checking writing to syslog
+  --enable-timer-check    compile with set time logging
   --enable-debug          compile with debugging flags
+  --enable-netlink-timers compile with netlink command timers
+  --enable-smtp-alert-debug
+                          compile with smtp-alert debugging
+  --enable-stacktrace     compile with stacktrace support
+  --enable-perf           compile with perf performance data recording support
+                          for vrrp process
+  --enable-log-file       enable logging to file (-g)
+  --enable-dump-threads   compile with thread dumping support
+  --enable-epoll-debug    compile with epoll_wait() debugging support
+  --enable-epoll-thread-dump
+                          compile with epoll thread dumping support
+  --enable-regex-debug    compile with regex debugging support
+  --enable-tsm-debug      compile with TSM debugging support
+  --enable-vrrp-fd-debug  compile with vrrp fd debugging support
+  --enable-eintr-debug    compile with EINTR debugging support, set to
+                          check/nocheck to check/not check for EINTR
+  --enable-track-process-debug
+                          compile with track process debugging support, set to
+                          log all process connector events
+  --enable-parser-debug   compile with parser debugging support
+  --enable-checksum-debug compile with checksum debugging support
+  --enable-dump-keywords  compile with keyword dumping support
+  --enable-network-timestamp
+                          compile with network timestamp debugging support
+  --enable-asserts        compile with assert() enabled
   --enable-profile        compile with profiling flags
+  --enable-conversion-checks
+                          compile with conversion warnings if sensible
+  --enable-force-conversion-checks
+                          compile with conversion warnings
+  --enable-Werror         compile with warnings being errors
+  --enable-dependency-tracking
+                          do not reject slow dependency extractors
+  --disable-dependency-tracking
+                          speeds up one-time build
 
 Optional Packages:
   --with-PACKAGE[=ARG]    use PACKAGE [ARG=yes]
   --without-PACKAGE       do not use PACKAGE (same as --with-PACKAGE=no)
   --with-kernel-dir=DIR   path to linux kernel source directory
-  --with-kernel-version=VER forced value for linux kernel version (VER=2.4|2.6)
+  --with-init=(upstart|systemd|SYSV|SUSE|openrc)
+                          specify init type
+  --with-run-dir=PATH_TO_RUN
+                          specify directory where /run is located
+  --with-fixed-if-type=TYPE
+                          treat interface type TYPE as unchangeable
+  --with-default-config-file=FILE
+                          Default configuration file
+  --with-systemdsystemunitdir=DIR
+                          Directory for systemd service files]
 
 Some influential environment variables:
+  PKG_CONFIG  path to pkg-config utility
+  PKG_CONFIG_PATH
+              directories to add to pkg-config's search path
+  PKG_CONFIG_LIBDIR
+              path overriding pkg-config's built-in search path
   CC          C compiler command
   CFLAGS      C compiler flags
   LDFLAGS     linker flags, e.g. -L<lib dir> if you have libraries in a
@@ -1344,7 +1665,8 @@ Some influential environment variables:
 Use these variables to override the choices made by `configure' or to help
 it to find libraries and programs with nonstandard names/locations.
 
-Report bugs to the package provider.
+Report bugs to <keepalived-users@groups.io>.
+Keepalived home page: <http://www.keepalived.org/>.
 _ACEOF
 ac_status=$?
 fi
@@ -1407,7 +1729,7 @@ fi
 test -n "$ac_init_help" && exit $ac_status
 if $ac_init_version; then
   cat <<\_ACEOF
-configure
+Keepalived configure 2.0.19
 generated by GNU Autoconf 2.69
 
 Copyright (C) 2012 Free Software Foundation, Inc.
@@ -1459,20 +1781,21 @@ fi
 
 } # ac_fn_c_try_compile
 
-# ac_fn_c_try_cpp LINENO
-# ----------------------
-# Try to preprocess conftest.$ac_ext, and return whether this succeeded.
-ac_fn_c_try_cpp ()
+# ac_fn_c_try_link LINENO
+# -----------------------
+# Try to link conftest.$ac_ext, and return whether this succeeded.
+ac_fn_c_try_link ()
 {
   as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  if { { ac_try="$ac_cpp conftest.$ac_ext"
+  rm -f conftest.$ac_objext conftest$ac_exeext
+  if { { ac_try="$ac_link"
 case "(($ac_try" in
   *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
   *) ac_try_echo=$ac_try;;
 esac
 eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
 $as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.err
+  (eval "$ac_link") 2>conftest.err
   ac_status=$?
   if test -s conftest.err; then
     grep -v '^ *+' conftest.err >conftest.er1
@@ -1480,21 +1803,29 @@ $as_echo "$ac_try_echo"; } >&5
     mv -f conftest.er1 conftest.err
   fi
   $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } > conftest.i && {
-	 test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
+  test $ac_status = 0; } && {
+	 test -z "$ac_c_werror_flag" ||
 	 test ! -s conftest.err
+       } && test -s conftest$ac_exeext && {
+	 test "$cross_compiling" = yes ||
+	 test -x conftest$ac_exeext
        }; then :
   ac_retval=0
 else
   $as_echo "$as_me: failed program was:" >&5
 sed 's/^/| /' conftest.$ac_ext >&5
 
-    ac_retval=1
+	ac_retval=1
 fi
+  # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information
+  # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would
+  # interfere with the next link command; also delete a directory that is
+  # left behind by Apple's compiler.  We do this before executing the actions.
+  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
   eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
   as_fn_set_status $ac_retval
 
-} # ac_fn_c_try_cpp
+} # ac_fn_c_try_link
 
 # ac_fn_c_try_run LINENO
 # ----------------------
@@ -1538,6 +1869,43 @@ fi
 
 } # ac_fn_c_try_run
 
+# ac_fn_c_try_cpp LINENO
+# ----------------------
+# Try to preprocess conftest.$ac_ext, and return whether this succeeded.
+ac_fn_c_try_cpp ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  if { { ac_try="$ac_cpp conftest.$ac_ext"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.err
+  ac_status=$?
+  if test -s conftest.err; then
+    grep -v '^ *+' conftest.err >conftest.er1
+    cat conftest.er1 >&5
+    mv -f conftest.er1 conftest.err
+  fi
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; } > conftest.i && {
+	 test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
+	 test ! -s conftest.err
+       }; then :
+  ac_retval=0
+else
+  $as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+
+    ac_retval=1
+fi
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+  as_fn_set_status $ac_retval
+
+} # ac_fn_c_try_cpp
+
 # ac_fn_c_check_header_mongrel LINENO HEADER VAR INCLUDES
 # -------------------------------------------------------
 # Tests whether HEADER exists, giving a warning if it cannot be compiled using
@@ -1608,6 +1976,10 @@ $as_echo "$as_me: WARNING: $2: see the Autoconf documentation" >&2;}
 $as_echo "$as_me: WARNING: $2:     section \"Present But Cannot Be Compiled\"" >&2;}
     { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: proceeding with the compiler's result" >&5
 $as_echo "$as_me: WARNING: $2: proceeding with the compiler's result" >&2;}
+( $as_echo "## ----------------------------------------- ##
+## Report this to keepalived-users@groups.io ##
+## ----------------------------------------- ##"
+     ) | sed "s/^/$as_me: WARNING:     /" >&2
     ;;
 esac
   { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
@@ -1656,42 +2028,50 @@ $as_echo "$ac_res" >&6; }
 
 } # ac_fn_c_check_header_compile
 
-# ac_fn_c_check_decl LINENO SYMBOL VAR INCLUDES
-# ---------------------------------------------
-# Tests whether SYMBOL is declared in INCLUDES, setting cache variable VAR
-# accordingly.
-ac_fn_c_check_decl ()
+# ac_fn_c_check_type LINENO TYPE VAR INCLUDES
+# -------------------------------------------
+# Tests whether TYPE exists after having included INCLUDES, setting cache
+# variable VAR accordingly.
+ac_fn_c_check_type ()
 {
   as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  as_decl_name=`echo $2|sed 's/ *(.*//'`
-  as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'`
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $as_decl_name is declared" >&5
-$as_echo_n "checking whether $as_decl_name is declared... " >&6; }
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
+$as_echo_n "checking for $2... " >&6; }
 if eval \${$3+:} false; then :
   $as_echo_n "(cached) " >&6
 else
+  eval "$3=no"
   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 $4
 int
 main ()
 {
-#ifndef $as_decl_name
-#ifdef __cplusplus
-  (void) $as_decl_use;
-#else
-  (void) $as_decl_name;
-#endif
-#endif
-
+if (sizeof ($2))
+	 return 0;
   ;
   return 0;
 }
 _ACEOF
 if ac_fn_c_try_compile "$LINENO"; then :
-  eval "$3=yes"
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+if (sizeof (($2)))
+	    return 0;
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
 else
-  eval "$3=no"
+  eval "$3=yes"
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
@@ -1700,75 +2080,36 @@ eval ac_res=\$$3
 $as_echo "$ac_res" >&6; }
   eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
 
-} # ac_fn_c_check_decl
-
-# ac_fn_c_try_link LINENO
-# -----------------------
-# Try to link conftest.$ac_ext, and return whether this succeeded.
-ac_fn_c_try_link ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest$ac_exeext
-  if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest$ac_exeext && {
-	 test "$cross_compiling" = yes ||
-	 test -x conftest$ac_exeext
-       }; then :
-  ac_retval=0
-else
-  $as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1
-fi
-  # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information
-  # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would
-  # interfere with the next link command; also delete a directory that is
-  # left behind by Apple's compiler.  We do this before executing the actions.
-  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} # ac_fn_c_try_link
+} # ac_fn_c_check_type
 
-# ac_fn_c_check_type LINENO TYPE VAR INCLUDES
-# -------------------------------------------
-# Tests whether TYPE exists after having included INCLUDES, setting cache
-# variable VAR accordingly.
-ac_fn_c_check_type ()
+# ac_fn_c_find_intX_t LINENO BITS VAR
+# -----------------------------------
+# Finds a signed integer type with width BITS, setting cache variable VAR
+# accordingly.
+ac_fn_c_find_intX_t ()
 {
   as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-$as_echo_n "checking for $2... " >&6; }
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for int$2_t" >&5
+$as_echo_n "checking for int$2_t... " >&6; }
 if eval \${$3+:} false; then :
   $as_echo_n "(cached) " >&6
 else
   eval "$3=no"
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+     # Order is important - never check a type that is potentially smaller
+     # than half of the expected target width.
+     for ac_type in int$2_t 'int' 'long int' \
+	 'long long int' 'short int' 'signed char'; do
+       cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
-$4
+$ac_includes_default
+	     enum { N = $2 / 2 - 1 };
 int
 main ()
 {
-if (sizeof ($2))
-	 return 0;
+static int test_array [1 - 2 * !(0 < ($ac_type) ((((($ac_type) 1 << N) << N) - 1) * 2 + 1))];
+test_array [0] = 0;
+return test_array [0];
+
   ;
   return 0;
 }
@@ -1776,12 +2117,16 @@ _ACEOF
 if ac_fn_c_try_compile "$LINENO"; then :
   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
-$4
+$ac_includes_default
+	        enum { N = $2 / 2 - 1 };
 int
 main ()
 {
-if (sizeof (($2)))
-	    return 0;
+static int test_array [1 - 2 * !(($ac_type) ((((($ac_type) 1 << N) << N) - 1) * 2 + 1)
+		 < ($ac_type) ((((($ac_type) 1 << N) << N) - 1) * 2 + 2))];
+test_array [0] = 0;
+return test_array [0];
+
   ;
   return 0;
 }
@@ -1789,18 +2134,83 @@ _ACEOF
 if ac_fn_c_try_compile "$LINENO"; then :
 
 else
-  eval "$3=yes"
+  case $ac_type in #(
+  int$2_t) :
+    eval "$3=yes" ;; #(
+  *) :
+    eval "$3=\$ac_type" ;;
+esac
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+       if eval test \"x\$"$3"\" = x"no"; then :
+
+else
+  break
+fi
+     done
 fi
 eval ac_res=\$$3
 	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
 $as_echo "$ac_res" >&6; }
   eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
 
-} # ac_fn_c_check_type
+} # ac_fn_c_find_intX_t
+
+# ac_fn_c_find_uintX_t LINENO BITS VAR
+# ------------------------------------
+# Finds an unsigned integer type with width BITS, setting cache variable VAR
+# accordingly.
+ac_fn_c_find_uintX_t ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for uint$2_t" >&5
+$as_echo_n "checking for uint$2_t... " >&6; }
+if eval \${$3+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  eval "$3=no"
+     # Order is important - never check a type that is potentially smaller
+     # than half of the expected target width.
+     for ac_type in uint$2_t 'unsigned int' 'unsigned long int' \
+	 'unsigned long long int' 'unsigned short int' 'unsigned char'; do
+       cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$ac_includes_default
+int
+main ()
+{
+static int test_array [1 - 2 * !((($ac_type) -1 >> ($2 / 2 - 1)) >> ($2 / 2 - 1) == 3)];
+test_array [0] = 0;
+return test_array [0];
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  case $ac_type in #(
+  uint$2_t) :
+    eval "$3=yes" ;; #(
+  *) :
+    eval "$3=\$ac_type" ;;
+esac
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+       if eval test \"x\$"$3"\" = x"no"; then :
+
+else
+  break
+fi
+     done
+fi
+eval ac_res=\$$3
+	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+
+} # ac_fn_c_find_uintX_t
 
 # ac_fn_c_check_func LINENO FUNC VAR
 # ----------------------------------
@@ -1868,23 +2278,126 @@ $as_echo "$ac_res" >&6; }
   eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
 
 } # ac_fn_c_check_func
-cat >config.log <<_ACEOF
-This file contains any messages produced by compilers while
-running configure, to aid debugging if configure makes a mistake.
 
-It was created by $as_me, which was
-generated by GNU Autoconf 2.69.  Invocation command line was
-
-  $ $0 $@
-
-_ACEOF
-exec 5>>config.log
+# ac_fn_c_check_decl LINENO SYMBOL VAR INCLUDES
+# ---------------------------------------------
+# Tests whether SYMBOL is declared in INCLUDES, setting cache variable VAR
+# accordingly.
+ac_fn_c_check_decl ()
 {
-cat <<_ASUNAME
-## --------- ##
-## Platform. ##
-## --------- ##
-
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  as_decl_name=`echo $2|sed 's/ *(.*//'`
+  as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'`
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $as_decl_name is declared" >&5
+$as_echo_n "checking whether $as_decl_name is declared... " >&6; }
+if eval \${$3+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$4
+int
+main ()
+{
+#ifndef $as_decl_name
+#ifdef __cplusplus
+  (void) $as_decl_use;
+#else
+  (void) $as_decl_name;
+#endif
+#endif
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  eval "$3=yes"
+else
+  eval "$3=no"
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+eval ac_res=\$$3
+	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+
+} # ac_fn_c_check_decl
+
+# ac_fn_c_check_member LINENO AGGR MEMBER VAR INCLUDES
+# ----------------------------------------------------
+# Tries to find if the field MEMBER exists in type AGGR, after including
+# INCLUDES, setting cache variable VAR accordingly.
+ac_fn_c_check_member ()
+{
+  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2.$3" >&5
+$as_echo_n "checking for $2.$3... " >&6; }
+if eval \${$4+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$5
+int
+main ()
+{
+static $2 ac_aggr;
+if (ac_aggr.$3)
+return 0;
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  eval "$4=yes"
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$5
+int
+main ()
+{
+static $2 ac_aggr;
+if (sizeof ac_aggr.$3)
+return 0;
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  eval "$4=yes"
+else
+  eval "$4=no"
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+eval ac_res=\$$4
+	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
+
+} # ac_fn_c_check_member
+cat >config.log <<_ACEOF
+This file contains any messages produced by compilers while
+running configure, to aid debugging if configure makes a mistake.
+
+It was created by Keepalived $as_me 2.0.19, which was
+generated by GNU Autoconf 2.69.  Invocation command line was
+
+  $ $0 $@
+
+_ACEOF
+exec 5>>config.log
+{
+cat <<_ASUNAME
+## --------- ##
+## Platform. ##
+## --------- ##
+
 hostname = `(hostname || uname -n) 2>/dev/null | sed 1q`
 uname -m = `(uname -m) 2>/dev/null || echo unknown`
 uname -r = `(uname -r) 2>/dev/null || echo unknown`
@@ -2220,25 +2733,251 @@ ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $
 ac_compiler_gnu=$ac_cv_c_compiler_gnu
 
 
-VERSION=`cat VERSION`
-VERSION_DATE=`date +%m/%d,20%y`
-OUTPUT_TARGET="Makefile genhash/Makefile keepalived/core/Makefile lib/config.h keepalived.spec"
+am__api_version='1.13'
 
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}gcc; ac_word=$2
+ac_aux_dir=
+for ac_dir in "$srcdir" "$srcdir/.." "$srcdir/../.."; do
+  if test -f "$ac_dir/install-sh"; then
+    ac_aux_dir=$ac_dir
+    ac_install_sh="$ac_aux_dir/install-sh -c"
+    break
+  elif test -f "$ac_dir/install.sh"; then
+    ac_aux_dir=$ac_dir
+    ac_install_sh="$ac_aux_dir/install.sh -c"
+    break
+  elif test -f "$ac_dir/shtool"; then
+    ac_aux_dir=$ac_dir
+    ac_install_sh="$ac_aux_dir/shtool install -c"
+    break
+  fi
+done
+if test -z "$ac_aux_dir"; then
+  as_fn_error $? "cannot find install-sh, install.sh, or shtool in \"$srcdir\" \"$srcdir/..\" \"$srcdir/../..\"" "$LINENO" 5
+fi
+
+# These three variables are undocumented and unsupported,
+# and are intended to be withdrawn in a future Autoconf release.
+# They can cause serious problems if a builder's source tree is in a directory
+# whose full name contains unusual characters.
+ac_config_guess="$SHELL $ac_aux_dir/config.guess"  # Please don't use this var.
+ac_config_sub="$SHELL $ac_aux_dir/config.sub"  # Please don't use this var.
+ac_configure="$SHELL $ac_aux_dir/configure"  # Please don't use this var.
+
+
+# Find a good install program.  We prefer a C program (faster),
+# so one script is as good as another.  But avoid the broken or
+# incompatible versions:
+# SysV /etc/install, /usr/sbin/install
+# SunOS /usr/etc/install
+# IRIX /sbin/install
+# AIX /bin/install
+# AmigaOS /C/install, which installs bootblocks on floppy discs
+# AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag
+# AFS /usr/afsws/bin/install, which mishandles nonexistent args
+# SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
+# OS/2's system install, which has a completely different semantic
+# ./install, which can be erroneously created by make from ./install.sh.
+# Reject install programs that cannot install multiple files.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5
+$as_echo_n "checking for a BSD-compatible install... " >&6; }
+if test -z "$INSTALL"; then
+if ${ac_cv_path_install+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    # Account for people who put trailing slashes in PATH elements.
+case $as_dir/ in #((
+  ./ | .// | /[cC]/* | \
+  /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \
+  ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \
+  /usr/ucb/* ) ;;
+  *)
+    # OSF1 and SCO ODT 3.0 have their own names for install.
+    # Don't use installbsd from OSF since it installs stuff as root
+    # by default.
+    for ac_prog in ginstall scoinst install; do
+      for ac_exec_ext in '' $ac_executable_extensions; do
+	if as_fn_executable_p "$as_dir/$ac_prog$ac_exec_ext"; then
+	  if test $ac_prog = install &&
+	    grep dspmsg "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
+	    # AIX install.  It has an incompatible calling convention.
+	    :
+	  elif test $ac_prog = install &&
+	    grep pwplus "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
+	    # program-specific install script used by HP pwplus--don't use.
+	    :
+	  else
+	    rm -rf conftest.one conftest.two conftest.dir
+	    echo one > conftest.one
+	    echo two > conftest.two
+	    mkdir conftest.dir
+	    if "$as_dir/$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir" &&
+	      test -s conftest.one && test -s conftest.two &&
+	      test -s conftest.dir/conftest.one &&
+	      test -s conftest.dir/conftest.two
+	    then
+	      ac_cv_path_install="$as_dir/$ac_prog$ac_exec_ext -c"
+	      break 3
+	    fi
+	  fi
+	fi
+      done
+    done
+    ;;
+esac
+
+  done
+IFS=$as_save_IFS
+
+rm -rf conftest.one conftest.two conftest.dir
+
+fi
+  if test "${ac_cv_path_install+set}" = set; then
+    INSTALL=$ac_cv_path_install
+  else
+    # As a last resort, use the slow shell script.  Don't cache a
+    # value for INSTALL within a source directory, because that will
+    # break other packages using the cache if that directory is
+    # removed, or if the value is a relative name.
+    INSTALL=$ac_install_sh
+  fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5
+$as_echo "$INSTALL" >&6; }
+
+# Use test -z because SunOS4 sh mishandles braces in ${var-val}.
+# It thinks the first close brace ends the variable substitution.
+test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}'
+
+test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}'
+
+test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether build environment is sane" >&5
+$as_echo_n "checking whether build environment is sane... " >&6; }
+# Reject unsafe characters in $srcdir or the absolute working directory
+# name.  Accept space and tab only in the latter.
+am_lf='
+'
+case `pwd` in
+  *[\\\"\#\$\&\'\`$am_lf]*)
+    as_fn_error $? "unsafe absolute working directory name" "$LINENO" 5;;
+esac
+case $srcdir in
+  *[\\\"\#\$\&\'\`$am_lf\ \	]*)
+    as_fn_error $? "unsafe srcdir value: '$srcdir'" "$LINENO" 5;;
+esac
+
+# Do 'set' in a subshell so we don't clobber the current shell's
+# arguments.  Must try -L first in case configure is actually a
+# symlink; some systems play weird games with the mod time of symlinks
+# (eg FreeBSD returns the mod time of the symlink's containing
+# directory).
+if (
+   am_has_slept=no
+   for am_try in 1 2; do
+     echo "timestamp, slept: $am_has_slept" > conftest.file
+     set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null`
+     if test "$*" = "X"; then
+	# -L didn't work.
+	set X `ls -t "$srcdir/configure" conftest.file`
+     fi
+     if test "$*" != "X $srcdir/configure conftest.file" \
+	&& test "$*" != "X conftest.file $srcdir/configure"; then
+
+	# If neither matched, then we have a broken ls.  This can happen
+	# if, for instance, CONFIG_SHELL is bash and it inherits a
+	# broken ls alias from the environment.  This has actually
+	# happened.  Such a system could not be considered "sane".
+	as_fn_error $? "ls -t appears to fail.  Make sure there is not a broken
+  alias in your environment" "$LINENO" 5
+     fi
+     if test "$2" = conftest.file || test $am_try -eq 2; then
+       break
+     fi
+     # Just in case.
+     sleep 1
+     am_has_slept=yes
+   done
+   test "$2" = conftest.file
+   )
+then
+   # Ok.
+   :
+else
+   as_fn_error $? "newly created file is older than distributed files!
+Check your system clock" "$LINENO" 5
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+# If we didn't sleep, we still need to ensure time stamps of config.status and
+# generated files are strictly newer.
+am_sleep_pid=
+if grep 'slept: no' conftest.file >/dev/null 2>&1; then
+  ( sleep 1 ) &
+  am_sleep_pid=$!
+fi
+
+rm -f conftest.file
+
+test "$program_prefix" != NONE &&
+  program_transform_name="s&^&$program_prefix&;$program_transform_name"
+# Use a double $ so make ignores it.
+test "$program_suffix" != NONE &&
+  program_transform_name="s&\$&$program_suffix&;$program_transform_name"
+# Double any \ or $.
+# By default was `s,x,x', remove it if useless.
+ac_script='s/[\\$]/&&/g;s/;s,x,x,$//'
+program_transform_name=`$as_echo "$program_transform_name" | sed "$ac_script"`
+
+# expand $ac_aux_dir to an absolute path
+am_aux_dir=`cd $ac_aux_dir && pwd`
+
+if test x"${MISSING+set}" != xset; then
+  case $am_aux_dir in
+  *\ * | *\	*)
+    MISSING="\${SHELL} \"$am_aux_dir/missing\"" ;;
+  *)
+    MISSING="\${SHELL} $am_aux_dir/missing" ;;
+  esac
+fi
+# Use eval to expand $SHELL
+if eval "$MISSING --is-lightweight"; then
+  am_missing_run="$MISSING "
+else
+  am_missing_run=
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: 'missing' script is too old or missing" >&5
+$as_echo "$as_me: WARNING: 'missing' script is too old or missing" >&2;}
+fi
+
+if test x"${install_sh}" != xset; then
+  case $am_aux_dir in
+  *\ * | *\	*)
+    install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;;
+  *)
+    install_sh="\${SHELL} $am_aux_dir/install-sh"
+  esac
+fi
+
+# Installed binaries are usually stripped using 'strip' when the user
+# run "make install-strip".  However 'strip' might not be the right
+# tool to use in cross-compilation environments, therefore Automake
+# will honor the 'STRIP' environment variable to overrule this program.
+if test "$cross_compiling" != no; then
+  if test -n "$ac_tool_prefix"; then
+  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
+set dummy ${ac_tool_prefix}strip; ac_word=$2
 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
 $as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_CC+:} false; then :
+if ${ac_cv_prog_STRIP+:} false; then :
   $as_echo_n "(cached) " >&6
 else
-  if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
+  if test -n "$STRIP"; then
+  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
 else
 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
 for as_dir in $PATH
@@ -2247,7 +2986,7 @@ do
   test -z "$as_dir" && as_dir=.
     for ac_exec_ext in '' $ac_executable_extensions; do
   if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}gcc"
+    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
     $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
     break 2
   fi
@@ -2257,10 +2996,10 @@ IFS=$as_save_IFS
 
 fi
 fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-$as_echo "$CC" >&6; }
+STRIP=$ac_cv_prog_STRIP
+if test -n "$STRIP"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
+$as_echo "$STRIP" >&6; }
 else
   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
 $as_echo "no" >&6; }
@@ -2268,17 +3007,17 @@ fi
 
 
 fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "gcc", so it can be a program name with args.
-set dummy gcc; ac_word=$2
+if test -z "$ac_cv_prog_STRIP"; then
+  ac_ct_STRIP=$STRIP
+  # Extract the first word of "strip", so it can be a program name with args.
+set dummy strip; ac_word=$2
 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
 $as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_CC+:} false; then :
+if ${ac_cv_prog_ac_ct_STRIP+:} false; then :
   $as_echo_n "(cached) " >&6
 else
-  if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
+  if test -n "$ac_ct_STRIP"; then
+  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
 else
 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
 for as_dir in $PATH
@@ -2287,7 +3026,7 @@ do
   test -z "$as_dir" && as_dir=.
     for ac_exec_ext in '' $ac_executable_extensions; do
   if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="gcc"
+    ac_cv_prog_ac_ct_STRIP="strip"
     $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
     break 2
   fi
@@ -2297,17 +3036,17 @@ IFS=$as_save_IFS
 
 fi
 fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-$as_echo "$ac_ct_CC" >&6; }
+ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
+if test -n "$ac_ct_STRIP"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
+$as_echo "$ac_ct_STRIP" >&6; }
 else
   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
 $as_echo "no" >&6; }
 fi
 
-  if test "x$ac_ct_CC" = x; then
-    CC=""
+  if test "x$ac_ct_STRIP" = x; then
+    STRIP=":"
   else
     case $cross_compiling:$ac_tool_warned in
 yes:)
@@ -2315,65 +3054,69 @@ yes:)
 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
 ac_tool_warned=yes ;;
 esac
-    CC=$ac_ct_CC
+    STRIP=$ac_ct_STRIP
   fi
 else
-  CC="$ac_cv_prog_CC"
+  STRIP="$ac_cv_prog_STRIP"
 fi
 
-if test -z "$CC"; then
-          if test -n "$ac_tool_prefix"; then
-    # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}cc; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_CC+:} false; then :
+fi
+INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s"
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for a thread-safe mkdir -p" >&5
+$as_echo_n "checking for a thread-safe mkdir -p... " >&6; }
+if test -z "$MKDIR_P"; then
+  if ${ac_cv_path_mkdir+:} false; then :
   $as_echo_n "(cached) " >&6
 else
-  if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH$PATH_SEPARATOR/opt/sfw/bin
 do
   IFS=$as_save_IFS
   test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}cc"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
+    for ac_prog in mkdir gmkdir; do
+	 for ac_exec_ext in '' $ac_executable_extensions; do
+	   as_fn_executable_p "$as_dir/$ac_prog$ac_exec_ext" || continue
+	   case `"$as_dir/$ac_prog$ac_exec_ext" --version 2>&1` in #(
+	     'mkdir (GNU coreutils) '* | \
+	     'mkdir (coreutils) '* | \
+	     'mkdir (fileutils) '4.1*)
+	       ac_cv_path_mkdir=$as_dir/$ac_prog$ac_exec_ext
+	       break 3;;
+	   esac
+	 done
+       done
   done
 IFS=$as_save_IFS
 
 fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-$as_echo "$CC" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
 
+  test -d ./--version && rmdir ./--version
+  if test "${ac_cv_path_mkdir+set}" = set; then
+    MKDIR_P="$ac_cv_path_mkdir -p"
+  else
+    # As a last resort, use the slow shell script.  Don't cache a
+    # value for MKDIR_P within a source directory, because that will
+    # break other packages using the cache if that directory is
+    # removed, or if the value is a relative name.
+    MKDIR_P="$ac_install_sh -d"
   fi
 fi
-if test -z "$CC"; then
-  # Extract the first word of "cc", so it can be a program name with args.
-set dummy cc; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $MKDIR_P" >&5
+$as_echo "$MKDIR_P" >&6; }
+
+for ac_prog in gawk mawk nawk awk
+do
+  # Extract the first word of "$ac_prog", so it can be a program name with args.
+set dummy $ac_prog; ac_word=$2
 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
 $as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_CC+:} false; then :
+if ${ac_cv_prog_AWK+:} false; then :
   $as_echo_n "(cached) " >&6
 else
-  if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
+  if test -n "$AWK"; then
+  ac_cv_prog_AWK="$AWK" # Let the user override the test.
 else
-  ac_prog_rejected=no
 as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
 for as_dir in $PATH
 do
@@ -2381,11 +3124,7 @@ do
   test -z "$as_dir" && as_dir=.
     for ac_exec_ext in '' $ac_executable_extensions; do
   if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    if test "$as_dir/$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then
-       ac_prog_rejected=yes
-       continue
-     fi
-    ac_cv_prog_CC="cc"
+    ac_cv_prog_AWK="$ac_prog"
     $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
     break 2
   fi
@@ -2393,53 +3132,260 @@ done
   done
 IFS=$as_save_IFS
 
-if test $ac_prog_rejected = yes; then
-  # We found a bogon in the path, so make sure we never use it.
-  set dummy $ac_cv_prog_CC
-  shift
-  if test $# != 0; then
-    # We chose a different compiler from the bogus one.
-    # However, it has the same basename, so the bogon will be chosen
-    # first if we set CC to just the basename; use the full file name.
-    shift
-    ac_cv_prog_CC="$as_dir/$ac_word${1+' '}$@"
-  fi
 fi
 fi
+AWK=$ac_cv_prog_AWK
+if test -n "$AWK"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5
+$as_echo "$AWK" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
 fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-$as_echo "$CC" >&6; }
+
+
+  test -n "$AWK" && break
+done
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} sets \$(MAKE)" >&5
+$as_echo_n "checking whether ${MAKE-make} sets \$(MAKE)... " >&6; }
+set x ${MAKE-make}
+ac_make=`$as_echo "$2" | sed 's/+/p/g; s/[^a-zA-Z0-9_]/_/g'`
+if eval \${ac_cv_prog_make_${ac_make}_set+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat >conftest.make <<\_ACEOF
+SHELL = /bin/sh
+all:
+	@echo '@@@%%%=$(MAKE)=@@@%%%'
+_ACEOF
+# GNU make sometimes prints "make[1]: Entering ...", which would confuse us.
+case `${MAKE-make} -f conftest.make 2>/dev/null` in
+  *@@@%%%=?*=@@@%%%*)
+    eval ac_cv_prog_make_${ac_make}_set=yes;;
+  *)
+    eval ac_cv_prog_make_${ac_make}_set=no;;
+esac
+rm -f conftest.make
+fi
+if eval test \$ac_cv_prog_make_${ac_make}_set = yes; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+  SET_MAKE=
 else
   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
 $as_echo "no" >&6; }
+  SET_MAKE="MAKE=${MAKE-make}"
 fi
 
+rm -rf .tst 2>/dev/null
+mkdir .tst 2>/dev/null
+if test -d .tst; then
+  am__leading_dot=.
+else
+  am__leading_dot=_
+fi
+rmdir .tst 2>/dev/null
 
+# Check whether --enable-silent-rules was given.
+if test "${enable_silent_rules+set}" = set; then :
+  enableval=$enable_silent_rules;
 fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  for ac_prog in cl.exe
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
+
+case $enable_silent_rules in # (((
+  yes) AM_DEFAULT_VERBOSITY=0;;
+   no) AM_DEFAULT_VERBOSITY=1;;
+    *) AM_DEFAULT_VERBOSITY=1;;
+esac
+am_make=${MAKE-make}
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5
+$as_echo_n "checking whether $am_make supports nested variables... " >&6; }
+if ${am_cv_make_support_nested_variables+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if $as_echo 'TRUE=$(BAR$(V))
+BAR0=false
+BAR1=true
+V=1
+am__doit:
+	@$(TRUE)
+.PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then
+  am_cv_make_support_nested_variables=yes
+else
+  am_cv_make_support_nested_variables=no
+fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5
+$as_echo "$am_cv_make_support_nested_variables" >&6; }
+if test $am_cv_make_support_nested_variables = yes; then
+    AM_V='$(V)'
+  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
+else
+  AM_V=$AM_DEFAULT_VERBOSITY
+  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
+fi
+AM_BACKSLASH='\'
+
+if test "`cd $srcdir && pwd`" != "`pwd`"; then
+  # Use -I$(srcdir) only when $(srcdir) != ., so that make's output
+  # is not polluted with repeated "-I."
+  am__isrc=' -I$(srcdir)'
+  # test to see if srcdir already configured
+  if test -f $srcdir/config.status; then
+    as_fn_error $? "source directory already configured; run \"make distclean\" there first" "$LINENO" 5
+  fi
+fi
+
+# test whether we have cygpath
+if test -z "$CYGPATH_W"; then
+  if (cygpath --version) >/dev/null 2>/dev/null; then
+    CYGPATH_W='cygpath -w'
+  else
+    CYGPATH_W=echo
+  fi
+fi
+
+
+# Define the identity of the package.
+ PACKAGE='keepalived'
+ VERSION='2.0.19'
+
+
+cat >>confdefs.h <<_ACEOF
+#define PACKAGE "$PACKAGE"
+_ACEOF
+
+
+cat >>confdefs.h <<_ACEOF
+#define VERSION "$VERSION"
+_ACEOF
+
+# Some tools Automake needs.
+
+ACLOCAL=${ACLOCAL-"${am_missing_run}aclocal-${am__api_version}"}
+
+
+AUTOCONF=${AUTOCONF-"${am_missing_run}autoconf"}
+
+
+AUTOMAKE=${AUTOMAKE-"${am_missing_run}automake-${am__api_version}"}
+
+
+AUTOHEADER=${AUTOHEADER-"${am_missing_run}autoheader"}
+
+
+MAKEINFO=${MAKEINFO-"${am_missing_run}makeinfo"}
+
+# For better backward compatibility.  To be removed once Automake 1.9.x
+# dies out for good.  For more background, see:
+# <http://lists.gnu.org/archive/html/automake/2012-07/msg00001.html>
+# <http://lists.gnu.org/archive/html/automake/2012-07/msg00014.html>
+mkdir_p='$(MKDIR_P)'
+
+# We need awk for the "check" target.  The system "awk" is bad on
+# some platforms.
+# Always define AMTAR for backward compatibility.  Yes, it's still used
+# in the wild :-(  We should find a proper way to deprecate it ...
+AMTAR='$${TAR-tar}'
+
+
+# We'll loop over all known methods to create a tar archive until one works.
+_am_tools='gnutar  pax cpio none'
+
+am__tar='$${TAR-tar} chof - "$$tardir"' am__untar='$${TAR-tar} xf -'
+
+
+
+
+
+
+
+
+
+ac_config_headers="$ac_config_headers lib/config.h lib/config_warnings.h"
+
+
+
+
+
+ac_config_files="$ac_config_files Makefile keepalived/Makefile lib/Makefile keepalived/core/Makefile keepalived.spec genhash/Makefile keepalived/check/Makefile keepalived/vrrp/Makefile keepalived/bfd/Makefile doc/Makefile bin_install/Makefile keepalived/dbus/Makefile keepalived/etc/Makefile keepalived/etc/init/Makefile keepalived/etc/init.d/Makefile doc/man/man8/Makefile"
+
+
+
+MAINTAINERCLEANFILES="*~ *.orig *.rej core core.*"
+
+CONFIG_OPTIONS=
+SYSTEM_OPTIONS=
+
+# Check whether --enable-silent-rules was given.
+if test "${enable_silent_rules+set}" = set; then :
+  enableval=$enable_silent_rules;
+fi
+
+case $enable_silent_rules in # (((
+  yes) AM_DEFAULT_VERBOSITY=0;;
+   no) AM_DEFAULT_VERBOSITY=1;;
+    *) AM_DEFAULT_VERBOSITY=0;;
+esac
+am_make=${MAKE-make}
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5
+$as_echo_n "checking whether $am_make supports nested variables... " >&6; }
+if ${am_cv_make_support_nested_variables+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if $as_echo 'TRUE=$(BAR$(V))
+BAR0=false
+BAR1=true
+V=1
+am__doit:
+	@$(TRUE)
+.PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then
+  am_cv_make_support_nested_variables=yes
+else
+  am_cv_make_support_nested_variables=no
+fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5
+$as_echo "$am_cv_make_support_nested_variables" >&6; }
+if test $am_cv_make_support_nested_variables = yes; then
+    AM_V='$(V)'
+  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
+else
+  AM_V=$AM_DEFAULT_VERBOSITY
+  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
+fi
+AM_BACKSLASH='\'
+
+
+
+
+
+
+
+
+
+if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
+	if test -n "$ac_tool_prefix"; then
+  # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args.
+set dummy ${ac_tool_prefix}pkg-config; ac_word=$2
 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
 $as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_CC+:} false; then :
+if ${ac_cv_path_PKG_CONFIG+:} false; then :
   $as_echo_n "(cached) " >&6
 else
-  if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+  case $PKG_CONFIG in
+  [\\/]* | ?:[\\/]*)
+  ac_cv_path_PKG_CONFIG="$PKG_CONFIG" # Let the user override the test with a path.
+  ;;
+  *)
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
 for as_dir in $PATH
 do
   IFS=$as_save_IFS
   test -z "$as_dir" && as_dir=.
     for ac_exec_ext in '' $ac_executable_extensions; do
   if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="$ac_tool_prefix$ac_prog"
+    ac_cv_path_PKG_CONFIG="$as_dir/$ac_word$ac_exec_ext"
     $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
     break 2
   fi
@@ -2447,43 +3393,42 @@ done
   done
 IFS=$as_save_IFS
 
+  ;;
+esac
 fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-$as_echo "$CC" >&6; }
+PKG_CONFIG=$ac_cv_path_PKG_CONFIG
+if test -n "$PKG_CONFIG"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PKG_CONFIG" >&5
+$as_echo "$PKG_CONFIG" >&6; }
 else
   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
 $as_echo "no" >&6; }
 fi
 
 
-    test -n "$CC" && break
-  done
 fi
-if test -z "$CC"; then
-  ac_ct_CC=$CC
-  for ac_prog in cl.exe
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
+if test -z "$ac_cv_path_PKG_CONFIG"; then
+  ac_pt_PKG_CONFIG=$PKG_CONFIG
+  # Extract the first word of "pkg-config", so it can be a program name with args.
+set dummy pkg-config; ac_word=$2
 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
 $as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_CC+:} false; then :
+if ${ac_cv_path_ac_pt_PKG_CONFIG+:} false; then :
   $as_echo_n "(cached) " >&6
 else
-  if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+  case $ac_pt_PKG_CONFIG in
+  [\\/]* | ?:[\\/]*)
+  ac_cv_path_ac_pt_PKG_CONFIG="$ac_pt_PKG_CONFIG" # Let the user override the test with a path.
+  ;;
+  *)
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
 for as_dir in $PATH
 do
   IFS=$as_save_IFS
   test -z "$as_dir" && as_dir=.
     for ac_exec_ext in '' $ac_executable_extensions; do
   if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="$ac_prog"
+    ac_cv_path_ac_pt_PKG_CONFIG="$as_dir/$ac_word$ac_exec_ext"
     $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
     break 2
   fi
@@ -2491,23 +3436,20 @@ done
   done
 IFS=$as_save_IFS
 
+  ;;
+esac
 fi
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-$as_echo "$ac_ct_CC" >&6; }
+ac_pt_PKG_CONFIG=$ac_cv_path_ac_pt_PKG_CONFIG
+if test -n "$ac_pt_PKG_CONFIG"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKG_CONFIG" >&5
+$as_echo "$ac_pt_PKG_CONFIG" >&6; }
 else
   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
 $as_echo "no" >&6; }
 fi
 
-
-  test -n "$ac_ct_CC" && break
-done
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
+  if test "x$ac_pt_PKG_CONFIG" = x; then
+    PKG_CONFIG=""
   else
     case $cross_compiling:$ac_tool_warned in
 yes:)
@@ -2515,1261 +3457,8148 @@ yes:)
 $as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
 ac_tool_warned=yes ;;
 esac
-    CC=$ac_ct_CC
+    PKG_CONFIG=$ac_pt_PKG_CONFIG
   fi
+else
+  PKG_CONFIG="$ac_cv_path_PKG_CONFIG"
 fi
 
 fi
+if test -n "$PKG_CONFIG"; then
+	_pkg_min_version=0.9.0
+	{ $as_echo "$as_me:${as_lineno-$LINENO}: checking pkg-config is at least version $_pkg_min_version" >&5
+$as_echo_n "checking pkg-config is at least version $_pkg_min_version... " >&6; }
+	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
+		{ $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+	else
+		{ $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+		PKG_CONFIG=""
+	fi
+fi
 
+# Check whether --enable-lvs-syncd was given.
+if test "${enable_lvs_syncd+set}" = set; then :
+  enableval=$enable_lvs_syncd;
+fi
 
-test -z "$CC" && { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "no acceptable C compiler found in \$PATH
-See \`config.log' for more details" "$LINENO" 5; }
-
-# Provide some information about the compiler.
-$as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5
-set X $ac_compile
-ac_compiler=$2
-for ac_option in --version -v -V -qversion; do
-  { { ac_try="$ac_compiler $ac_option >&5"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_compiler $ac_option >&5") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    sed '10a\
-... rest of stderr output deleted ...
-         10q' conftest.err >conftest.er1
-    cat conftest.er1 >&5
+# Check whether --enable-lvs was given.
+if test "${enable_lvs+set}" = set; then :
+  enableval=$enable_lvs;
+fi
+
+# Check whether --enable-lvs-64bit-stats was given.
+if test "${enable_lvs_64bit_stats+set}" = set; then :
+  enableval=$enable_lvs_64bit_stats;
+fi
+
+# Check whether --enable-vrrp was given.
+if test "${enable_vrrp+set}" = set; then :
+  enableval=$enable_vrrp;
+fi
+
+# Check whether --enable-bfd was given.
+if test "${enable_bfd+set}" = set; then :
+  enableval=$enable_bfd;
+fi
+
+
+# Check whether --with-kernel-dir was given.
+if test "${with_kernel_dir+set}" = set; then :
+  withval=$with_kernel_dir;   kernel_src_path="$withval"
+                          else kernel_src_path=""
+fi
+
+# Check whether --enable-fwmark was given.
+if test "${enable_fwmark+set}" = set; then :
+  enableval=$enable_fwmark;
+fi
+
+# Check whether --enable-snmp was given.
+if test "${enable_snmp+set}" = set; then :
+  enableval=$enable_snmp;
+fi
+
+# Check whether --enable-snmp-vrrp was given.
+if test "${enable_snmp_vrrp+set}" = set; then :
+  enableval=$enable_snmp_vrrp;
+fi
+
+# Check whether --enable-snmp-keepalived was given.
+if test "${enable_snmp_keepalived+set}" = set; then :
+  enableval=$enable_snmp_keepalived;
+fi
+
+# Check whether --enable-snmp-checker was given.
+if test "${enable_snmp_checker+set}" = set; then :
+  enableval=$enable_snmp_checker;
+fi
+
+# Check whether --enable-snmp-rfc was given.
+if test "${enable_snmp_rfc+set}" = set; then :
+  enableval=$enable_snmp_rfc;
+fi
+
+# Check whether --enable-snmp-rfcv2 was given.
+if test "${enable_snmp_rfcv2+set}" = set; then :
+  enableval=$enable_snmp_rfcv2;
+fi
+
+# Check whether --enable-snmp-rfcv3 was given.
+if test "${enable_snmp_rfcv3+set}" = set; then :
+  enableval=$enable_snmp_rfcv3;
+fi
+
+# Check whether --enable-snmp-reply-v3-for-v2 was given.
+if test "${enable_snmp_reply_v3_for_v2+set}" = set; then :
+  enableval=$enable_snmp_reply_v3_for_v2;
+fi
+
+# Check whether --enable-dbus was given.
+if test "${enable_dbus+set}" = set; then :
+  enableval=$enable_dbus;
+fi
+
+# Check whether --enable-dbus-create-instance was given.
+if test "${enable_dbus_create_instance+set}" = set; then :
+  enableval=$enable_dbus_create_instance;
+fi
+
+# Check whether --enable-sha1 was given.
+if test "${enable_sha1+set}" = set; then :
+  enableval=$enable_sha1;
+fi
+
+# Check whether --enable-regex was given.
+if test "${enable_regex+set}" = set; then :
+  enableval=$enable_regex;
+fi
+
+# Check whether --enable-regex-timers was given.
+if test "${enable_regex_timers+set}" = set; then :
+  enableval=$enable_regex_timers;
+fi
+
+# Check whether --enable-json was given.
+if test "${enable_json+set}" = set; then :
+  enableval=$enable_json;
+fi
+
+
+# Check whether --with-init was given.
+if test "${with_init+set}" = set; then :
+  withval=$with_init; init_type="$withval"
+else
+  init_type=""
+fi
+
+# Check whether --enable-vrrp-auth was given.
+if test "${enable_vrrp_auth+set}" = set; then :
+  enableval=$enable_vrrp_auth;
+fi
+
+# Check whether --enable-checksum_compat was given.
+if test "${enable_checksum_compat+set}" = set; then :
+  enableval=$enable_checksum_compat;
+fi
+
+# Check whether --enable-routes was given.
+if test "${enable_routes+set}" = set; then :
+  enableval=$enable_routes;
+fi
+
+# Check whether --enable-linkbeat was given.
+if test "${enable_linkbeat+set}" = set; then :
+  enableval=$enable_linkbeat;
+fi
+
+# Check whether --enable-gnu-std-paths was given.
+if test "${enable_gnu_std_paths+set}" = set; then :
+  enableval=$enable_gnu_std_paths;
+fi
+
+# Check whether --enable-dynamic-linking was given.
+if test "${enable_dynamic_linking+set}" = set; then :
+  enableval=$enable_dynamic_linking;
+fi
+
+# Check whether --enable-iptables was given.
+if test "${enable_iptables+set}" = set; then :
+  enableval=$enable_iptables;
+else
+  IPTABLES_SILENT=Yes
+fi
+
+# Check whether --enable-libiptc-dynamic was given.
+if test "${enable_libiptc_dynamic+set}" = set; then :
+  enableval=$enable_libiptc_dynamic;
+fi
+
+# Check whether --enable-libipset-dynamic was given.
+if test "${enable_libipset_dynamic+set}" = set; then :
+  enableval=$enable_libipset_dynamic;
+fi
+
+# Check whether --enable-libnl-dynamic was given.
+if test "${enable_libnl_dynamic+set}" = set; then :
+  enableval=$enable_libnl_dynamic;
+fi
+
+# Check whether --enable-libiptc was given.
+if test "${enable_libiptc+set}" = set; then :
+  enableval=$enable_libiptc;
+fi
+
+# Check whether --enable-libipset was given.
+if test "${enable_libipset+set}" = set; then :
+  enableval=$enable_libipset;
+fi
+
+# Check whether --enable-nftables was given.
+if test "${enable_nftables+set}" = set; then :
+  enableval=$enable_nftables;
+else
+  NFTABLES_SILENT=Yes
+fi
+
+# Check whether --enable-libnl was given.
+if test "${enable_libnl+set}" = set; then :
+  enableval=$enable_libnl;
+fi
+
+# Check whether --enable-track-process was given.
+if test "${enable_track_process+set}" = set; then :
+  enableval=$enable_track_process;
+fi
+
+
+# Check whether --with-run-dir was given.
+if test "${with_run_dir+set}" = set; then :
+  withval=$with_run_dir; RUN_DIR_SPECIFIED=Y
+else
+  RUN_DIR_SPECIFIED=N
+fi
+
+# Check whether --enable-strict-config-checks was given.
+if test "${enable_strict_config_checks+set}" = set; then :
+  enableval=$enable_strict_config_checks;
+fi
+
+# Check whether --enable-hardening was given.
+if test "${enable_hardening+set}" = set; then :
+  enableval=$enable_hardening;
+fi
+
+# Check whether --enable-optimise was given.
+if test "${enable_optimise+set}" = set; then :
+  enableval=$enable_optimise;
+else
+  enable_optimise=not-specified
+fi
+
+# Check whether --enable-warnings was given.
+if test "${enable_warnings+set}" = set; then :
+  enableval=$enable_warnings;
+else
+  enable_warnings=yes
+fi
+
+# Check whether --enable-extra-warnings was given.
+if test "${enable_extra_warnings+set}" = set; then :
+  enableval=$enable_extra_warnings;
+fi
+
+# Check whether --enable-mem-check was given.
+if test "${enable_mem_check+set}" = set; then :
+  enableval=$enable_mem_check;
+fi
+
+# Check whether --enable-mem-check-log was given.
+if test "${enable_mem_check_log+set}" = set; then :
+  enableval=$enable_mem_check_log;
+fi
+
+# Check whether --enable-timer-check was given.
+if test "${enable_timer_check+set}" = set; then :
+  enableval=$enable_timer_check;
+fi
+
+# Check whether --enable-debug was given.
+if test "${enable_debug+set}" = set; then :
+  enableval=$enable_debug;
+fi
+
+# Check whether --enable-netlink-timers was given.
+if test "${enable_netlink_timers+set}" = set; then :
+  enableval=$enable_netlink_timers;
+fi
+
+# Check whether --enable-smtp-alert-debug was given.
+if test "${enable_smtp_alert_debug+set}" = set; then :
+  enableval=$enable_smtp_alert_debug;
+fi
+
+# Check whether --enable-stacktrace was given.
+if test "${enable_stacktrace+set}" = set; then :
+  enableval=$enable_stacktrace;
+fi
+
+# Check whether --enable-perf was given.
+if test "${enable_perf+set}" = set; then :
+  enableval=$enable_perf;
+fi
+
+# Check whether --enable-log-file was given.
+if test "${enable_log_file+set}" = set; then :
+  enableval=$enable_log_file;
+fi
+
+# Check whether --enable-dump-threads was given.
+if test "${enable_dump_threads+set}" = set; then :
+  enableval=$enable_dump_threads;
+fi
+
+# Check whether --enable-epoll-debug was given.
+if test "${enable_epoll_debug+set}" = set; then :
+  enableval=$enable_epoll_debug;
+fi
+
+# Check whether --enable-epoll-thread-dump was given.
+if test "${enable_epoll_thread_dump+set}" = set; then :
+  enableval=$enable_epoll_thread_dump;
+fi
+
+# Check whether --enable-regex-debug was given.
+if test "${enable_regex_debug+set}" = set; then :
+  enableval=$enable_regex_debug;
+fi
+
+# Check whether --enable-tsm-debug was given.
+if test "${enable_tsm_debug+set}" = set; then :
+  enableval=$enable_tsm_debug;
+fi
+
+# Check whether --enable-vrrp-fd-debug was given.
+if test "${enable_vrrp_fd_debug+set}" = set; then :
+  enableval=$enable_vrrp_fd_debug;
+fi
+
+# Check whether --enable-eintr-debug was given.
+if test "${enable_eintr_debug+set}" = set; then :
+  enableval=$enable_eintr_debug;
+fi
+
+# Check whether --enable-track-process-debug was given.
+if test "${enable_track_process_debug+set}" = set; then :
+  enableval=$enable_track_process_debug;
+fi
+
+# Check whether --enable-parser-debug was given.
+if test "${enable_parser_debug+set}" = set; then :
+  enableval=$enable_parser_debug;
+fi
+
+# Check whether --enable-checksum-debug was given.
+if test "${enable_checksum_debug+set}" = set; then :
+  enableval=$enable_checksum_debug;
+fi
+
+# Check whether --enable-dump-keywords was given.
+if test "${enable_dump_keywords+set}" = set; then :
+  enableval=$enable_dump_keywords;
+fi
+
+# Check whether --enable-network-timestamp was given.
+if test "${enable_network_timestamp+set}" = set; then :
+  enableval=$enable_network_timestamp;
+fi
+
+# Check whether --enable-asserts was given.
+if test "${enable_asserts+set}" = set; then :
+  enableval=$enable_asserts;
+fi
+
+
+# Check whether --with-fixed-if-type was given.
+if test "${with_fixed_if_type+set}" = set; then :
+  withval=$with_fixed_if_type;
+fi
+
+
+# Check whether --with-default-config-file was given.
+if test "${with_default_config_file+set}" = set; then :
+  withval=$with_default_config_file; default_config_file="$withval"
+else
+  default_config_file=""
+fi
+
+# Check whether --enable-profile was given.
+if test "${enable_profile+set}" = set; then :
+  enableval=$enable_profile;
+fi
+
+# Check whether --enable-conversion-checks was given.
+if test "${enable_conversion_checks+set}" = set; then :
+  enableval=$enable_conversion_checks;
+fi
+
+# Check whether --enable-force-conversion-checks was given.
+if test "${enable_force_conversion_checks+set}" = set; then :
+  enableval=$enable_force_conversion_checks;
+fi
+
+# Check whether --enable-Werror was given.
+if test "${enable_Werror+set}" = set; then :
+  enableval=$enable_Werror;
+fi
+
+
+
+# Check whether --with-systemdsystemunitdir was given.
+if test "${with_systemdsystemunitdir+set}" = set; then :
+  withval=$with_systemdsystemunitdir;
+fi
+
+
+# Set the kernel headers path
+if test -n "$kernel_src_path"; then
+  if test ! -d $kernel_src_path/include; then
+    as_fn_error $? "kernel source path $kernel_src_path/include does not exist" "$LINENO" 5
+  fi
+  if test ! -d $kernel_src_path/include/linux; then
+    as_fn_error $? "kernel source path $kernel_src_path/include does not appear to include linux header files" "$LINENO" 5
+  fi
+  if test -d $kernel_src_path/include/uapi/linux; then
+    as_fn_error $? "kernel source path $kernel_src_path appears to be an unprocessed kernel source tree" "$LINENO" 5
+  fi
+  kernelinc="-isystem $kernel_src_path/include"
+elif test ! -d /usr/include/linux -a \
+	    -d /usr/src/linux/include; then
+  kernelinc="-isystem /usr/src/linux/include"
+else
+  kernelinc=
+fi
+
+CPPFLAGS="$kernelinc $CPPFLAGS"
+
+# Checks for programs.
+ac_ext=c
+ac_cpp='$CPP $CPPFLAGS'
+ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_c_compiler_gnu
+if test -n "$ac_tool_prefix"; then
+  # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args.
+set dummy ${ac_tool_prefix}gcc; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_CC+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$CC"; then
+  ac_cv_prog_CC="$CC" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_CC="${ac_tool_prefix}gcc"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
   fi
-  rm -f conftest.er1 conftest.err
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
 done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+CC=$ac_cv_prog_CC
+if test -n "$CC"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
+$as_echo "$CC" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+fi
+if test -z "$ac_cv_prog_CC"; then
+  ac_ct_CC=$CC
+  # Extract the first word of "gcc", so it can be a program name with args.
+set dummy gcc; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_ac_ct_CC+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$ac_ct_CC"; then
+  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_ac_ct_CC="gcc"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+ac_ct_CC=$ac_cv_prog_ac_ct_CC
+if test -n "$ac_ct_CC"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
+$as_echo "$ac_ct_CC" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+  if test "x$ac_ct_CC" = x; then
+    CC=""
+  else
+    case $cross_compiling:$ac_tool_warned in
+yes:)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
+ac_tool_warned=yes ;;
+esac
+    CC=$ac_ct_CC
+  fi
+else
+  CC="$ac_cv_prog_CC"
+fi
+
+if test -z "$CC"; then
+          if test -n "$ac_tool_prefix"; then
+    # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args.
+set dummy ${ac_tool_prefix}cc; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_CC+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$CC"; then
+  ac_cv_prog_CC="$CC" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_CC="${ac_tool_prefix}cc"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+CC=$ac_cv_prog_CC
+if test -n "$CC"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
+$as_echo "$CC" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+  fi
+fi
+if test -z "$CC"; then
+  # Extract the first word of "cc", so it can be a program name with args.
+set dummy cc; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_CC+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$CC"; then
+  ac_cv_prog_CC="$CC" # Let the user override the test.
+else
+  ac_prog_rejected=no
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    if test "$as_dir/$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then
+       ac_prog_rejected=yes
+       continue
+     fi
+    ac_cv_prog_CC="cc"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+if test $ac_prog_rejected = yes; then
+  # We found a bogon in the path, so make sure we never use it.
+  set dummy $ac_cv_prog_CC
+  shift
+  if test $# != 0; then
+    # We chose a different compiler from the bogus one.
+    # However, it has the same basename, so the bogon will be chosen
+    # first if we set CC to just the basename; use the full file name.
+    shift
+    ac_cv_prog_CC="$as_dir/$ac_word${1+' '}$@"
+  fi
+fi
+fi
+fi
+CC=$ac_cv_prog_CC
+if test -n "$CC"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
+$as_echo "$CC" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+fi
+if test -z "$CC"; then
+  if test -n "$ac_tool_prefix"; then
+  for ac_prog in cl.exe
+  do
+    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
+set dummy $ac_tool_prefix$ac_prog; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_CC+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$CC"; then
+  ac_cv_prog_CC="$CC" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_CC="$ac_tool_prefix$ac_prog"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+CC=$ac_cv_prog_CC
+if test -n "$CC"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
+$as_echo "$CC" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+    test -n "$CC" && break
+  done
+fi
+if test -z "$CC"; then
+  ac_ct_CC=$CC
+  for ac_prog in cl.exe
+do
+  # Extract the first word of "$ac_prog", so it can be a program name with args.
+set dummy $ac_prog; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_ac_ct_CC+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$ac_ct_CC"; then
+  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_ac_ct_CC="$ac_prog"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+ac_ct_CC=$ac_cv_prog_ac_ct_CC
+if test -n "$ac_ct_CC"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
+$as_echo "$ac_ct_CC" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+  test -n "$ac_ct_CC" && break
+done
+
+  if test "x$ac_ct_CC" = x; then
+    CC=""
+  else
+    case $cross_compiling:$ac_tool_warned in
+yes:)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
+ac_tool_warned=yes ;;
+esac
+    CC=$ac_ct_CC
+  fi
+fi
+
+fi
+
+
+test -z "$CC" && { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "no acceptable C compiler found in \$PATH
+See \`config.log' for more details" "$LINENO" 5; }
+
+# Provide some information about the compiler.
+$as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5
+set X $ac_compile
+ac_compiler=$2
+for ac_option in --version -v -V -qversion; do
+  { { ac_try="$ac_compiler $ac_option >&5"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_compiler $ac_option >&5") 2>conftest.err
+  ac_status=$?
+  if test -s conftest.err; then
+    sed '10a\
+... rest of stderr output deleted ...
+         10q' conftest.err >conftest.er1
+    cat conftest.er1 >&5
+  fi
+  rm -f conftest.er1 conftest.err
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }
+done
+
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+ac_clean_files_save=$ac_clean_files
+ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out"
+# Try to create an executable without -o first, disregard a.out.
+# It will help us diagnose broken compilers, and finding out an intuition
+# of exeext.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5
+$as_echo_n "checking whether the C compiler works... " >&6; }
+ac_link_default=`$as_echo "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
+
+# The possible output files:
+ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*"
+
+ac_rmfiles=
+for ac_file in $ac_files
+do
+  case $ac_file in
+    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
+    * ) ac_rmfiles="$ac_rmfiles $ac_file";;
+  esac
+done
+rm -f $ac_rmfiles
+
+if { { ac_try="$ac_link_default"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_link_default") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; then :
+  # Autoconf-2.13 could set the ac_cv_exeext variable to `no'.
+# So ignore a value of `no', otherwise this would lead to `EXEEXT = no'
+# in a Makefile.  We should not override ac_cv_exeext if it was cached,
+# so that the user can short-circuit this test for compilers unknown to
+# Autoconf.
+for ac_file in $ac_files ''
+do
+  test -f "$ac_file" || continue
+  case $ac_file in
+    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj )
+	;;
+    [ab].out )
+	# We found the default executable, but exeext='' is most
+	# certainly right.
+	break;;
+    *.* )
+	if test "${ac_cv_exeext+set}" = set && test "$ac_cv_exeext" != no;
+	then :; else
+	   ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
+	fi
+	# We set ac_cv_exeext here because the later test for it is not
+	# safe: cross compilers may not add the suffix if given an `-o'
+	# argument, so we may need to know it at that point already.
+	# Even if this section looks crufty: it has the advantage of
+	# actually working.
+	break;;
+    * )
+	break;;
+  esac
+done
+test "$ac_cv_exeext" = no && ac_cv_exeext=
+
+else
+  ac_file=''
+fi
+if test -z "$ac_file"; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+$as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+
+{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error 77 "C compiler cannot create executables
+See \`config.log' for more details" "$LINENO" 5; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5
+$as_echo_n "checking for C compiler default output file name... " >&6; }
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5
+$as_echo "$ac_file" >&6; }
+ac_exeext=$ac_cv_exeext
+
+rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out
+ac_clean_files=$ac_clean_files_save
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5
+$as_echo_n "checking for suffix of executables... " >&6; }
+if { { ac_try="$ac_link"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_link") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; then :
+  # If both `conftest.exe' and `conftest' are `present' (well, observable)
+# catch `conftest.exe'.  For instance with Cygwin, `ls conftest' will
+# work properly (i.e., refer to `conftest.exe'), while it won't with
+# `rm'.
+for ac_file in conftest.exe conftest conftest.*; do
+  test -f "$ac_file" || continue
+  case $ac_file in
+    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
+    *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
+	  break;;
+    * ) break;;
+  esac
+done
+else
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "cannot compute suffix of executables: cannot compile and link
+See \`config.log' for more details" "$LINENO" 5; }
+fi
+rm -f conftest conftest$ac_cv_exeext
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5
+$as_echo "$ac_cv_exeext" >&6; }
+
+rm -f conftest.$ac_ext
+EXEEXT=$ac_cv_exeext
+ac_exeext=$EXEEXT
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <stdio.h>
+int
+main ()
+{
+FILE *f = fopen ("conftest.out", "w");
+ return ferror (f) || fclose (f) != 0;
+
+  ;
+  return 0;
+}
+_ACEOF
+ac_clean_files="$ac_clean_files conftest.out"
+# Check that the compiler produces executables we can run.  If not, either
+# the compiler is broken, or we cross compile.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5
+$as_echo_n "checking whether we are cross compiling... " >&6; }
+if test "$cross_compiling" != yes; then
+  { { ac_try="$ac_link"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_link") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }
+  if { ac_try='./conftest$ac_cv_exeext'
+  { { case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_try") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; }; then
+    cross_compiling=no
+  else
+    if test "$cross_compiling" = maybe; then
+	cross_compiling=yes
+    else
+	{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "cannot run C compiled programs.
+If you meant to cross compile, use \`--host'.
+See \`config.log' for more details" "$LINENO" 5; }
+    fi
+  fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5
+$as_echo "$cross_compiling" >&6; }
+
+rm -f conftest.$ac_ext conftest$ac_cv_exeext conftest.out
+ac_clean_files=$ac_clean_files_save
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5
+$as_echo_n "checking for suffix of object files... " >&6; }
+if ${ac_cv_objext+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+rm -f conftest.o conftest.obj
+if { { ac_try="$ac_compile"
+case "(($ac_try" in
+  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
+  *) ac_try_echo=$ac_try;;
+esac
+eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
+$as_echo "$ac_try_echo"; } >&5
+  (eval "$ac_compile") 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }; then :
+  for ac_file in conftest.o conftest.obj conftest.*; do
+  test -f "$ac_file" || continue;
+  case $ac_file in
+    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;;
+    *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'`
+       break;;
+  esac
+done
+else
+  $as_echo "$as_me: failed program was:" >&5
+sed 's/^/| /' conftest.$ac_ext >&5
+
+{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "cannot compute suffix of object files: cannot compile
+See \`config.log' for more details" "$LINENO" 5; }
+fi
+rm -f conftest.$ac_cv_objext conftest.$ac_ext
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5
+$as_echo "$ac_cv_objext" >&6; }
+OBJEXT=$ac_cv_objext
+ac_objext=$OBJEXT
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using the GNU C compiler" >&5
+$as_echo_n "checking whether we are using the GNU C compiler... " >&6; }
+if ${ac_cv_c_compiler_gnu+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+#ifndef __GNUC__
+       choke me
+#endif
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_compiler_gnu=yes
+else
+  ac_compiler_gnu=no
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+ac_cv_c_compiler_gnu=$ac_compiler_gnu
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5
+$as_echo "$ac_cv_c_compiler_gnu" >&6; }
+if test $ac_compiler_gnu = yes; then
+  GCC=yes
+else
+  GCC=
+fi
+ac_test_CFLAGS=${CFLAGS+set}
+ac_save_CFLAGS=$CFLAGS
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5
+$as_echo_n "checking whether $CC accepts -g... " >&6; }
+if ${ac_cv_prog_cc_g+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_save_c_werror_flag=$ac_c_werror_flag
+   ac_c_werror_flag=yes
+   ac_cv_prog_cc_g=no
+   CFLAGS="-g"
+   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_prog_cc_g=yes
+else
+  CFLAGS=""
+      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+else
+  ac_c_werror_flag=$ac_save_c_werror_flag
+	 CFLAGS="-g"
+	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_prog_cc_g=yes
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+   ac_c_werror_flag=$ac_save_c_werror_flag
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5
+$as_echo "$ac_cv_prog_cc_g" >&6; }
+if test "$ac_test_CFLAGS" = set; then
+  CFLAGS=$ac_save_CFLAGS
+elif test $ac_cv_prog_cc_g = yes; then
+  if test "$GCC" = yes; then
+    CFLAGS="-g -O2"
+  else
+    CFLAGS="-g"
+  fi
+else
+  if test "$GCC" = yes; then
+    CFLAGS="-O2"
+  else
+    CFLAGS=
+  fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $CC option to accept ISO C89" >&5
+$as_echo_n "checking for $CC option to accept ISO C89... " >&6; }
+if ${ac_cv_prog_cc_c89+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_cv_prog_cc_c89=no
+ac_save_CC=$CC
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <stdarg.h>
+#include <stdio.h>
+struct stat;
+/* Most of the following tests are stolen from RCS 5.7's src/conf.sh.  */
+struct buf { int x; };
+FILE * (*rcsopen) (struct buf *, struct stat *, int);
+static char *e (p, i)
+     char **p;
+     int i;
+{
+  return p[i];
+}
+static char *f (char * (*g) (char **, int), char **p, ...)
+{
+  char *s;
+  va_list v;
+  va_start (v,p);
+  s = g (p, va_arg (v,int));
+  va_end (v);
+  return s;
+}
+
+/* OSF 4.0 Compaq cc is some sort of almost-ANSI by default.  It has
+   function prototypes and stuff, but not '\xHH' hex character constants.
+   These don't provoke an error unfortunately, instead are silently treated
+   as 'x'.  The following induces an error, until -std is added to get
+   proper ANSI mode.  Curiously '\x00'!='x' always comes out true, for an
+   array size at least.  It's necessary to write '\x00'==0 to get something
+   that's true only with -std.  */
+int osf4_cc_array ['\x00' == 0 ? 1 : -1];
+
+/* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters
+   inside strings and character constants.  */
+#define FOO(x) 'x'
+int xlc6_cc_array[FOO(a) == 'x' ? 1 : -1];
+
+int test (int i, double x);
+struct s1 {int (*f) (int a);};
+struct s2 {int (*f) (double a);};
+int pairnames (int, char **, FILE *(*)(struct buf *, struct stat *, int), int, int);
+int argc;
+char **argv;
+int
+main ()
+{
+return f (e, argv, 0) != argv[0]  ||  f (e, argv, 1) != argv[1];
+  ;
+  return 0;
+}
+_ACEOF
+for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std \
+	-Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__"
+do
+  CC="$ac_save_CC $ac_arg"
+  if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_prog_cc_c89=$ac_arg
+fi
+rm -f core conftest.err conftest.$ac_objext
+  test "x$ac_cv_prog_cc_c89" != "xno" && break
+done
+rm -f conftest.$ac_ext
+CC=$ac_save_CC
+
+fi
+# AC_CACHE_VAL
+case "x$ac_cv_prog_cc_c89" in
+  x)
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
+$as_echo "none needed" >&6; } ;;
+  xno)
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
+$as_echo "unsupported" >&6; } ;;
+  *)
+    CC="$CC $ac_cv_prog_cc_c89"
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5
+$as_echo "$ac_cv_prog_cc_c89" >&6; } ;;
+esac
+if test "x$ac_cv_prog_cc_c89" != xno; then :
+
+fi
+
+ac_ext=c
+ac_cpp='$CPP $CPPFLAGS'
+ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_c_compiler_gnu
+DEPDIR="${am__leading_dot}deps"
+
+ac_config_commands="$ac_config_commands depfiles"
+
+
+am_make=${MAKE-make}
+cat > confinc << 'END'
+am__doit:
+	@echo this is the am__doit target
+.PHONY: am__doit
+END
+# If we don't find an include directive, just comment out the code.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for style of include used by $am_make" >&5
+$as_echo_n "checking for style of include used by $am_make... " >&6; }
+am__include="#"
+am__quote=
+_am_result=none
+# First try GNU make style include.
+echo "include confinc" > confmf
+# Ignore all kinds of additional output from 'make'.
+case `$am_make -s -f confmf 2> /dev/null` in #(
+*the\ am__doit\ target*)
+  am__include=include
+  am__quote=
+  _am_result=GNU
+  ;;
+esac
+# Now try BSD make style include.
+if test "$am__include" = "#"; then
+   echo '.include "confinc"' > confmf
+   case `$am_make -s -f confmf 2> /dev/null` in #(
+   *the\ am__doit\ target*)
+     am__include=.include
+     am__quote="\""
+     _am_result=BSD
+     ;;
+   esac
+fi
+
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $_am_result" >&5
+$as_echo "$_am_result" >&6; }
+rm -f confinc confmf
+
+# Check whether --enable-dependency-tracking was given.
+if test "${enable_dependency_tracking+set}" = set; then :
+  enableval=$enable_dependency_tracking;
+fi
+
+if test "x$enable_dependency_tracking" != xno; then
+  am_depcomp="$ac_aux_dir/depcomp"
+  AMDEPBACKSLASH='\'
+  am__nodep='_no'
+fi
+ if test "x$enable_dependency_tracking" != xno; then
+  AMDEP_TRUE=
+  AMDEP_FALSE='#'
+else
+  AMDEP_TRUE='#'
+  AMDEP_FALSE=
+fi
+
+
+
+depcc="$CC"   am_compiler_list=
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking dependency style of $depcc" >&5
+$as_echo_n "checking dependency style of $depcc... " >&6; }
+if ${am_cv_CC_dependencies_compiler_type+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then
+  # We make a subdir and do the tests there.  Otherwise we can end up
+  # making bogus files that we don't know about and never remove.  For
+  # instance it was reported that on HP-UX the gcc test will end up
+  # making a dummy file named 'D' -- because '-MD' means "put the output
+  # in D".
+  rm -rf conftest.dir
+  mkdir conftest.dir
+  # Copy depcomp to subdir because otherwise we won't find it if we're
+  # using a relative directory.
+  cp "$am_depcomp" conftest.dir
+  cd conftest.dir
+  # We will build objects and dependencies in a subdirectory because
+  # it helps to detect inapplicable dependency modes.  For instance
+  # both Tru64's cc and ICC support -MD to output dependencies as a
+  # side effect of compilation, but ICC will put the dependencies in
+  # the current directory while Tru64 will put them in the object
+  # directory.
+  mkdir sub
+
+  am_cv_CC_dependencies_compiler_type=none
+  if test "$am_compiler_list" = ""; then
+     am_compiler_list=`sed -n 's/^#*\([a-zA-Z0-9]*\))$/\1/p' < ./depcomp`
+  fi
+  am__universal=false
+  case " $depcc " in #(
+     *\ -arch\ *\ -arch\ *) am__universal=true ;;
+     esac
+
+  for depmode in $am_compiler_list; do
+    # Setup a source with many dependencies, because some compilers
+    # like to wrap large dependency lists on column 80 (with \), and
+    # we should not choose a depcomp mode which is confused by this.
+    #
+    # We need to recreate these files for each test, as the compiler may
+    # overwrite some of them when testing with obscure command lines.
+    # This happens at least with the AIX C compiler.
+    : > sub/conftest.c
+    for i in 1 2 3 4 5 6; do
+      echo '#include "conftst'$i'.h"' >> sub/conftest.c
+      # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with
+      # Solaris 10 /bin/sh.
+      echo '/* dummy */' > sub/conftst$i.h
+    done
+    echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
+
+    # We check with '-c' and '-o' for the sake of the "dashmstdout"
+    # mode.  It turns out that the SunPro C++ compiler does not properly
+    # handle '-M -o', and we need to detect this.  Also, some Intel
+    # versions had trouble with output in subdirs.
+    am__obj=sub/conftest.${OBJEXT-o}
+    am__minus_obj="-o $am__obj"
+    case $depmode in
+    gcc)
+      # This depmode causes a compiler race in universal mode.
+      test "$am__universal" = false || continue
+      ;;
+    nosideeffect)
+      # After this tag, mechanisms are not by side-effect, so they'll
+      # only be used when explicitly requested.
+      if test "x$enable_dependency_tracking" = xyes; then
+	continue
+      else
+	break
+      fi
+      ;;
+    msvc7 | msvc7msys | msvisualcpp | msvcmsys)
+      # This compiler won't grok '-c -o', but also, the minuso test has
+      # not run yet.  These depmodes are late enough in the game, and
+      # so weak that their functioning should not be impacted.
+      am__obj=conftest.${OBJEXT-o}
+      am__minus_obj=
+      ;;
+    none) break ;;
+    esac
+    if depmode=$depmode \
+       source=sub/conftest.c object=$am__obj \
+       depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
+       $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \
+         >/dev/null 2>conftest.err &&
+       grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 &&
+       grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
+       grep $am__obj sub/conftest.Po > /dev/null 2>&1 &&
+       ${MAKE-make} -s -f confmf > /dev/null 2>&1; then
+      # icc doesn't choke on unknown options, it will just issue warnings
+      # or remarks (even with -Werror).  So we grep stderr for any message
+      # that says an option was ignored or not supported.
+      # When given -MP, icc 7.0 and 7.1 complain thusly:
+      #   icc: Command line warning: ignoring option '-M'; no argument required
+      # The diagnosis changed in icc 8.0:
+      #   icc: Command line remark: option '-MP' not supported
+      if (grep 'ignoring option' conftest.err ||
+          grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else
+        am_cv_CC_dependencies_compiler_type=$depmode
+        break
+      fi
+    fi
+  done
+
+  cd ..
+  rm -rf conftest.dir
+else
+  am_cv_CC_dependencies_compiler_type=none
+fi
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_CC_dependencies_compiler_type" >&5
+$as_echo "$am_cv_CC_dependencies_compiler_type" >&6; }
+CCDEPMODE=depmode=$am_cv_CC_dependencies_compiler_type
+
+ if
+  test "x$enable_dependency_tracking" != xno \
+  && test "$am_cv_CC_dependencies_compiler_type" = gcc3; then
+  am__fastdepCC_TRUE=
+  am__fastdepCC_FALSE='#'
+else
+  am__fastdepCC_TRUE='#'
+  am__fastdepCC_FALSE=
+fi
+
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} sets \$(MAKE)" >&5
+$as_echo_n "checking whether ${MAKE-make} sets \$(MAKE)... " >&6; }
+set x ${MAKE-make}
+ac_make=`$as_echo "$2" | sed 's/+/p/g; s/[^a-zA-Z0-9_]/_/g'`
+if eval \${ac_cv_prog_make_${ac_make}_set+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat >conftest.make <<\_ACEOF
+SHELL = /bin/sh
+all:
+	@echo '@@@%%%=$(MAKE)=@@@%%%'
+_ACEOF
+# GNU make sometimes prints "make[1]: Entering ...", which would confuse us.
+case `${MAKE-make} -f conftest.make 2>/dev/null` in
+  *@@@%%%=?*=@@@%%%*)
+    eval ac_cv_prog_make_${ac_make}_set=yes;;
+  *)
+    eval ac_cv_prog_make_${ac_make}_set=no;;
+esac
+rm -f conftest.make
+fi
+if eval test \$ac_cv_prog_make_${ac_make}_set = yes; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+  SET_MAKE=
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+  SET_MAKE="MAKE=${MAKE-make}"
+fi
+
+
+if test -n "$ac_tool_prefix"; then
+  # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args.
+set dummy ${ac_tool_prefix}ranlib; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_RANLIB+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$RANLIB"; then
+  ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+RANLIB=$ac_cv_prog_RANLIB
+if test -n "$RANLIB"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5
+$as_echo "$RANLIB" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+fi
+if test -z "$ac_cv_prog_RANLIB"; then
+  ac_ct_RANLIB=$RANLIB
+  # Extract the first word of "ranlib", so it can be a program name with args.
+set dummy ranlib; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_ac_ct_RANLIB+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$ac_ct_RANLIB"; then
+  ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_ac_ct_RANLIB="ranlib"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB
+if test -n "$ac_ct_RANLIB"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5
+$as_echo "$ac_ct_RANLIB" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+  if test "x$ac_ct_RANLIB" = x; then
+    RANLIB=":"
+  else
+    case $cross_compiling:$ac_tool_warned in
+yes:)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
+ac_tool_warned=yes ;;
+esac
+    RANLIB=$ac_ct_RANLIB
+  fi
+else
+  RANLIB="$ac_cv_prog_RANLIB"
+fi
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5
+$as_echo_n "checking for grep that handles long lines and -e... " >&6; }
+if ${ac_cv_path_GREP+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -z "$GREP"; then
+  ac_path_GREP_found=false
+  # Loop through the user's path and test for each of PROGNAME-LIST
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_prog in grep ggrep; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
+      ac_path_GREP="$as_dir/$ac_prog$ac_exec_ext"
+      as_fn_executable_p "$ac_path_GREP" || continue
+# Check for GNU ac_path_GREP and select it if it is found.
+  # Check for GNU $ac_path_GREP
+case `"$ac_path_GREP" --version 2>&1` in
+*GNU*)
+  ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;;
+*)
+  ac_count=0
+  $as_echo_n 0123456789 >"conftest.in"
+  while :
+  do
+    cat "conftest.in" "conftest.in" >"conftest.tmp"
+    mv "conftest.tmp" "conftest.in"
+    cp "conftest.in" "conftest.nl"
+    $as_echo 'GREP' >> "conftest.nl"
+    "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break
+    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
+    as_fn_arith $ac_count + 1 && ac_count=$as_val
+    if test $ac_count -gt ${ac_path_GREP_max-0}; then
+      # Best one so far, save it but keep looking for a better one
+      ac_cv_path_GREP="$ac_path_GREP"
+      ac_path_GREP_max=$ac_count
+    fi
+    # 10*(2^10) chars as input seems more than enough
+    test $ac_count -gt 10 && break
+  done
+  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
+esac
+
+      $ac_path_GREP_found && break 3
+    done
+  done
+  done
+IFS=$as_save_IFS
+  if test -z "$ac_cv_path_GREP"; then
+    as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
+  fi
+else
+  ac_cv_path_GREP=$GREP
+fi
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5
+$as_echo "$ac_cv_path_GREP" >&6; }
+ GREP="$ac_cv_path_GREP"
+
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ln -s works" >&5
+$as_echo_n "checking whether ln -s works... " >&6; }
+LN_S=$as_ln_s
+if test "$LN_S" = "ln -s"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no, using $LN_S" >&5
+$as_echo "no, using $LN_S" >&6; }
+fi
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for a sed that does not truncate output" >&5
+$as_echo_n "checking for a sed that does not truncate output... " >&6; }
+if ${ac_cv_path_SED+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+            ac_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/
+     for ac_i in 1 2 3 4 5 6 7; do
+       ac_script="$ac_script$as_nl$ac_script"
+     done
+     echo "$ac_script" 2>/dev/null | sed 99q >conftest.sed
+     { ac_script=; unset ac_script;}
+     if test -z "$SED"; then
+  ac_path_SED_found=false
+  # Loop through the user's path and test for each of PROGNAME-LIST
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_prog in sed gsed; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
+      ac_path_SED="$as_dir/$ac_prog$ac_exec_ext"
+      as_fn_executable_p "$ac_path_SED" || continue
+# Check for GNU ac_path_SED and select it if it is found.
+  # Check for GNU $ac_path_SED
+case `"$ac_path_SED" --version 2>&1` in
+*GNU*)
+  ac_cv_path_SED="$ac_path_SED" ac_path_SED_found=:;;
+*)
+  ac_count=0
+  $as_echo_n 0123456789 >"conftest.in"
+  while :
+  do
+    cat "conftest.in" "conftest.in" >"conftest.tmp"
+    mv "conftest.tmp" "conftest.in"
+    cp "conftest.in" "conftest.nl"
+    $as_echo '' >> "conftest.nl"
+    "$ac_path_SED" -f conftest.sed < "conftest.nl" >"conftest.out" 2>/dev/null || break
+    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
+    as_fn_arith $ac_count + 1 && ac_count=$as_val
+    if test $ac_count -gt ${ac_path_SED_max-0}; then
+      # Best one so far, save it but keep looking for a better one
+      ac_cv_path_SED="$ac_path_SED"
+      ac_path_SED_max=$ac_count
+    fi
+    # 10*(2^10) chars as input seems more than enough
+    test $ac_count -gt 10 && break
+  done
+  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
+esac
+
+      $ac_path_SED_found && break 3
+    done
+  done
+  done
+IFS=$as_save_IFS
+  if test -z "$ac_cv_path_SED"; then
+    as_fn_error $? "no acceptable sed could be found in \$PATH" "$LINENO" 5
+  fi
+else
+  ac_cv_path_SED=$SED
+fi
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_SED" >&5
+$as_echo "$ac_cv_path_SED" >&6; }
+ SED="$ac_cv_path_SED"
+  rm -f conftest.sed
+
+if test -n "$ac_tool_prefix"; then
+  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
+set dummy ${ac_tool_prefix}strip; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_STRIP+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$STRIP"; then
+  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+STRIP=$ac_cv_prog_STRIP
+if test -n "$STRIP"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
+$as_echo "$STRIP" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+fi
+if test -z "$ac_cv_prog_STRIP"; then
+  ac_ct_STRIP=$STRIP
+  # Extract the first word of "strip", so it can be a program name with args.
+set dummy strip; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_ac_ct_STRIP+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$ac_ct_STRIP"; then
+  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_ac_ct_STRIP="strip"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
+if test -n "$ac_ct_STRIP"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
+$as_echo "$ac_ct_STRIP" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+  if test "x$ac_ct_STRIP" = x; then
+    STRIP=""
+  else
+    case $cross_compiling:$ac_tool_warned in
+yes:)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
+ac_tool_warned=yes ;;
+esac
+    STRIP=$ac_ct_STRIP
+  fi
+else
+  STRIP="$ac_cv_prog_STRIP"
+fi
+
+if test -n "$ac_tool_prefix"; then
+  # Extract the first word of "${ac_tool_prefix}ldd", so it can be a program name with args.
+set dummy ${ac_tool_prefix}ldd; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_LDD+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$LDD"; then
+  ac_cv_prog_LDD="$LDD" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_LDD="${ac_tool_prefix}ldd"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+LDD=$ac_cv_prog_LDD
+if test -n "$LDD"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $LDD" >&5
+$as_echo "$LDD" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+fi
+if test -z "$ac_cv_prog_LDD"; then
+  ac_ct_LDD=$LDD
+  # Extract the first word of "ldd", so it can be a program name with args.
+set dummy ldd; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_ac_ct_LDD+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$ac_ct_LDD"; then
+  ac_cv_prog_ac_ct_LDD="$ac_ct_LDD" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_ac_ct_LDD="ldd"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+ac_ct_LDD=$ac_cv_prog_ac_ct_LDD
+if test -n "$ac_ct_LDD"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_LDD" >&5
+$as_echo "$ac_ct_LDD" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+  if test "x$ac_ct_LDD" = x; then
+    LDD=""
+  else
+    case $cross_compiling:$ac_tool_warned in
+yes:)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
+ac_tool_warned=yes ;;
+esac
+    LDD=$ac_ct_LDD
+  fi
+else
+  LDD="$ac_cv_prog_LDD"
+fi
+
+
+
+if test -n "$ac_tool_prefix"; then
+  for ac_prog in ar lib "link -lib"
+  do
+    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
+set dummy $ac_tool_prefix$ac_prog; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_AR+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$AR"; then
+  ac_cv_prog_AR="$AR" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_AR="$ac_tool_prefix$ac_prog"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+AR=$ac_cv_prog_AR
+if test -n "$AR"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AR" >&5
+$as_echo "$AR" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+    test -n "$AR" && break
+  done
+fi
+if test -z "$AR"; then
+  ac_ct_AR=$AR
+  for ac_prog in ar lib "link -lib"
+do
+  # Extract the first word of "$ac_prog", so it can be a program name with args.
+set dummy $ac_prog; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_ac_ct_AR+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$ac_ct_AR"; then
+  ac_cv_prog_ac_ct_AR="$ac_ct_AR" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_ac_ct_AR="$ac_prog"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+fi
+fi
+ac_ct_AR=$ac_cv_prog_ac_ct_AR
+if test -n "$ac_ct_AR"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_AR" >&5
+$as_echo "$ac_ct_AR" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
+
+  test -n "$ac_ct_AR" && break
+done
+
+  if test "x$ac_ct_AR" = x; then
+    AR="false"
+  else
+    case $cross_compiling:$ac_tool_warned in
+yes:)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
+ac_tool_warned=yes ;;
+esac
+    AR=$ac_ct_AR
+  fi
+fi
+
+: ${AR=ar}
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking the archiver ($AR) interface" >&5
+$as_echo_n "checking the archiver ($AR) interface... " >&6; }
+if ${am_cv_ar_interface+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  am_cv_ar_interface=ar
+   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+int some_variable = 0;
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  am_ar_try='$AR cru libconftest.a conftest.$ac_objext >&5'
+      { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$am_ar_try\""; } >&5
+  (eval $am_ar_try) 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }
+      if test "$ac_status" -eq 0; then
+        am_cv_ar_interface=ar
+      else
+        am_ar_try='$AR -NOLOGO -OUT:conftest.lib conftest.$ac_objext >&5'
+        { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$am_ar_try\""; } >&5
+  (eval $am_ar_try) 2>&5
+  ac_status=$?
+  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+  test $ac_status = 0; }
+        if test "$ac_status" -eq 0; then
+          am_cv_ar_interface=lib
+        else
+          am_cv_ar_interface=unknown
+        fi
+      fi
+      rm -f conftest.lib libconftest.a
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_ar_interface" >&5
+$as_echo "$am_cv_ar_interface" >&6; }
+
+case $am_cv_ar_interface in
+ar)
+  ;;
+lib)
+  # Microsoft lib, so override with the ar-lib wrapper script.
+  # FIXME: It is wrong to rewrite AR.
+  # But if we don't then we get into trouble of one sort or another.
+  # A longer-term fix would be to have automake use am__AR in this case,
+  # and then we could set am__AR="$am_aux_dir/ar-lib \$(AR)" or something
+  # similar.
+  AR="$am_aux_dir/ar-lib $AR"
+  ;;
+unknown)
+  as_fn_error $? "could not determine $AR interface" "$LINENO" 5
+  ;;
+esac
+
+ARFLAGS=cr
+
+
+# Default settings
+ENABLE_LOG_FILE_APPEND=No
+
+# AC_PROG_LIBTOOL
+
+#
+# save the configure arguments
+#
+args=`echo $ac_configure_args | $SED -e "s/'//g"`
+
+cat >>confdefs.h <<_ACEOF
+#define KEEPALIVED_CONFIGURE_OPTIONS "$args"
+_ACEOF
+
+
+# Save the CPPFLAGS, CFLAGS, LDFLAGS and LDLIBS settings for make time
+KA_CPPFLAGS="$kernelinc -D_GNU_SOURCE $CPPFLAGS"
+KA_CFLAGS="-g $CFLAGS"
+KA_LDFLAGS=$LDFLAGS
+KA_LIBS=$LDLIBS
+
+NEED_LIBDL=No
+#KA_LIBTOOLFLAGS =
+
+# Set up the compiler warnings we want
+MAX_FRAME_SIZE=5120
+WARNINGS_BASIC="all extra unused strict-prototypes"
+WARNINGS_STD="absolute-value address-of-packed-member alloca alloc-zero array-bounds=2 attribute-alias bad-function-cast cast-align cast-qual chkp date-time disabled-optimization double-promotion duplicated-branches duplicated-cond float-conversion float-equal format-overflow format-security format-signedness format-truncation frame-larger-than=$MAX_FRAME_SIZE implicit-fallthrough=3 init-self inline jump-misses-init logical-op missing-declarations missing-field-initializers missing-prototypes nested-externs normalized null-dereference old-style-definition overlength-strings pointer-arith redundant-decls shadow shift-overflow=2 stack-protector strict-overflow=4 strict-prototypes stringop-overflow=2 suggest-attribute=cold suggest-attribute=const suggest-attribute=format suggest-attribute=malloc suggest-attribute=noreturn suggest-attribute=pure sync-nand trampolines undef uninitialized unknown-pragmas unsuffixed-float-constants unused-const-variable=2 unused-macros variadic-macros write-strings"
+WARNINGS_EXTRA="aggregate-return cast-align= strict conversion format-nonliteral format-overflow=2 format-truncation=2 padded pedantic sign-conversion stack-usage=$MAX_FRAME_SIZE strict-overflow=5 stringop-overflow=3 stringop-overflow=4 switch-enum system-headers traditional-conversion"
+
+# We want _GNU_SOURCE defined always
+CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE"
+
+# fpclassify() needs -lm
+KA_LIBS="$KA_LIBS -lm"
+
+# Some sanity checks on configure options
+if test .$enable_vrrp = .no; then :
+  if test .$IPTABLES_SILENT == .Yes; then :
+  enable_iptables=no
+fi
+    if test .$NFTABLES_SILENT == .Yes; then :
+  enable_nftables=no
+fi
+
+    if test .$enable_perf != .; then :
+  as_fn_error $? "enable-perf requires vrrp" "$LINENO" 5
+fi
+    if test $with_fixed_if_type; then :
+  as_fn_error $? "with-fixed-if-type requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_vrrp_fd_debug != .; then :
+  as_fn_error $? "enable-vrrp-fd-debug requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_tsm_debug != .; then :
+  as_fn_error $? "enable-tsm-debug requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_json != .; then :
+  as_fn_error $? "enable-json requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_snmp_vrrp != .; then :
+  as_fn_error $? "enable-snmp-vrrp requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_snmp_keepalived != .; then :
+  as_fn_error $? "enable-snmp-keepalived requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_snmp_rfc != .; then :
+  as_fn_error $? "enable-snmp-rfc requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_snmp_rfcv2 != .; then :
+  as_fn_error $? "enable-snmp-rfcv2 requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_snmp_rfcv3 != .; then :
+  as_fn_error $? "enable-snmp-rfcv3 requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_dbus != .; then :
+  as_fn_error $? "enable-dbus requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_vrrp_auth != .; then :
+  as_fn_error $? "disable-vrrp-auth requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_checksum_compat != .; then :
+  as_fn_error $? "disable-checksum-compat requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_routes != .; then :
+  as_fn_error $? "disable-routes requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_linkbeat != .; then :
+  as_fn_error $? "disable-linkbeat requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_bfd != .; then :
+  as_fn_error $? "enable-bfd requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_iptables != .no; then :
+  as_fn_error $? "enable-iptables requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_nftables != .no; then :
+  as_fn_error $? "enable-nftables requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_track_process != .; then :
+  as_fn_error $? "enable-track-process requires vrrp" "$LINENO" 5
+fi
+    if test .$enable_network_timestamp != .; then :
+  as_fn_error $? "enable-network_timestamp requires vrrp" "$LINENO" 5
+fi
+
+fi
+if test .$enable_iptables = .no; then :
+  if test .$enable_libiptc != .; then :
+  as_fn_error $? "disable-libiptc requires vrrp and iptables" "$LINENO" 5
+fi
+    if test .$enable_libipset != .; then :
+  as_fn_error $? "disable-libipset requires vrrp and iptables" "$LINENO" 5
+fi
+
+fi
+if test .$enable_libiptc = .no; then :
+  if test .$enable_libiptc_dynamic != .; then :
+  as_fn_error $? "enable-libiptc-dynamic requires vrrp and libiptc" "$LINENO" 5
+fi
+    if test .$enable_libipset != .; then :
+  as_fn_error $? "disable-libipset requires libiptc" "$LINENO" 5
+fi
+    if test .$enable_libipset_dynamic != .; then :
+  as_fn_error $? "disable-libipset-dynamic requires libiptc" "$LINENO" 5
+fi
+
+fi
+if test .$enable_libipset = .no; then :
+  if test .$enable_libipset_dynamic != .; then :
+  as_fn_error $? "disable-libipset-dynamic requires ipsets" "$LINENO" 5
+fi
+
+fi
+if test .$enable_snmp_rfc != .yes -a .$enable_snmp_rfcv3 != yes; then :
+  if test .$enable_snmp_reply_v3_for_v2 != .; then :
+  as_fn_error $? "enable-snmp-reply-v3-for-v2 requires enable-snmp-rfcv3 or enable-snmp-rfc" "$LINENO" 5
+fi
+
+fi
+if test .$enable_dbus != .yes; then :
+  if test .$enable_dbus_create_instance != .; then :
+  as_fn_error $? "enable-dbus-create-instance requires enable-dbus" "$LINENO" 5
+fi
+
+fi
+if test .$enable_lvs = .no; then :
+  if test .$enable_regex != .; then :
+  as_fn_error $? "enable-regex requires lvs" "$LINENO" 5
+fi
+    if test .$enable_libnl != .; then :
+  as_fn_error $? "disable-libnl requires lvs" "$LINENO" 5
+fi
+    if test .$enable_lvs_syncd != .; then :
+  as_fn_error $? "disable-lvs-syncd requires lvs" "$LINENO" 5
+fi
+    if test .$enable_lvs_64bit_stats != .; then :
+  as_fn_error $? "disable-lvs-64bit-stats requires lvs" "$LINENO" 5
+fi
+    if test .$enable_fwmark != .; then :
+  as_fn_error $? "enable-fwmark requires lvs" "$LINENO" 5
+fi
+
+fi
+if test .$enable_lvs = .no; then :
+  if test .$enable_libnl_dynamic != .; then :
+  as_fn_error $? "enable-libnl-dynamic requires lvs and libnl" "$LINENO" 5
+fi
+
+fi
+if test .$enable_regex != .yes; then :
+  if test .$enable_regex_timers != .; then :
+  as_fn_error $? "enable-regex-timers requires enable-regex" "$LINENO" 5
+fi
+    if test .$enable_regex_debug != .; then :
+  as_fn_error $? "enable-regex-debug requires enable-regex" "$LINENO" 5
+fi
+
+fi
+if test .$enable_track_process = .no; then :
+  if test .$enable_track_process_debug != .; then :
+  as_fn_error $? "enable-track-process-debug incompatible with disable-track-process" "$LINENO" 5
+fi
+
+fi
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking diagnostic pragmas in functions" >&5
+$as_echo_n "checking diagnostic pragmas in functions... " >&6; }
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+  int main(int argc, char**argv)
+  {
+_Pragma("GCC diagnostic warning \"-Wall\"")
+  }
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+
+$as_echo "#define _HAVE_FUNCTION_DIAGNOSTIC_PRAGMAS_  1 " >>confdefs.h
+
+
+else
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking diagnostic push/pop pragmas" >&5
+$as_echo_n "checking diagnostic push/pop pragmas... " >&6; }
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+  int main(int argc, char**argv)
+  {
+_Pragma("GCC diagnostic push")
+  }
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+
+$as_echo "#define _HAVE_DIAGNOSTIC_PUSH_POP_PRAGMAS_  1 " >>confdefs.h
+
+
+else
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+if test ".$enable_warnings" = .no; then :
+  WARNINGS_ENABLED=$WARNINGS_BASIC
+else
+  if test ".$enable_warnings" != .yes; then :
+  WARN_LIST=`echo $enable_warnings | sed -e "s/-W//g"`
+	      WARNINGS_ENABLED="$WARNINGS_ENABLED "$WARN_LIST""
+
+fi
+
+
+fi
+if test .$enable_extra_warnings = .yes; then :
+  WARNINGS_ENABLED="$WARNINGS_ENABLED "$WARNINGS_EXTRA""
+fi
+
+if test "$enable_conversion_checks" = yes; then
+  # Check if we can sensibly enable -Wconversion
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for usable -Wconversion" >&5
+$as_echo_n "checking for usable -Wconversion... " >&6; }
+  SAV_CFLAGS="$CFLAGS"
+  CFLAGS="$CFLAGS -Wconversion -O2 -Wp,-D_FORTIFY_SOURCE=2 -Werror"
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+    #include <sys/types.h>
+    #include <sys/select.h>
+    #include <stdint.h>
+    #include <stdbool.h>
+    #include <sys/socket.h>
+    #include <linux/rtnetlink.h>
+
+    #define VAL	255
+
+    static void
+    fun(uint8_t val)
+    {
+    }
+
+    int main(int argc, char**argv)
+    {
+      fd_set set;
+      uint8_t	val = 42;
+      unsigned u;
+      bool b;
+      size_t size = 17;
+      char c[2];
+      char *c_ptr = c;
+      struct rtattr rta;
+      struct rtattr *rta_p = &rta;
+
+      FD_SET(argc+1, &set);
+
+      fun(argc == VAL ? VAL : val);
+
+      //      vrrp->lower_prio_no_advert = vrrp->strict_mode ? true : global_data->vrrp_lower_prio_no_advert;
+      u = u ? true : b;
+
+      size = RTA_LENGTH(size);
+      c_ptr = RTA_DATA(c_ptr);
+      rta_p = RTA_NEXT(rta_p, size);
+
+      val = (u < 256 ) ? u & 0xff : 0;
+    }
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+      { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+      WARNINGS_ENABLED="$WARNINGS_ENABLED conversion"
+
+else
+
+      { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+      { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: -Wconversion is not sensible with this compiler. Use --enable-force-conversion-checks to override." >&5
+$as_echo "$as_me: WARNING: -Wconversion is not sensible with this compiler. Use --enable-force-conversion-checks to override." >&2;}
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+  CFLAGS="$SAV_CFLAGS"
+elif test "$enable_force_conversion_checks" = yes; then
+  WARNINGS_ENABLED="$WARNINGS_ENABLED conversion"
+fi
+
+if test "$enable_Werror" = yes; then
+  WARNINGS_ENABLED="$WARNINGS_ENABLED error"
+fi
+
+CONFIG_WARNINGS=lib/config_warnings.h.in
+
+# Save (or restore) lib/config_warnings.h.in
+if test ! -f ${CONFIG_WARNINGS}.sav; then :
+  cp -p ${CONFIG_WARNINGS} ${CONFIG_WARNINGS}.sav
+else
+  cp -p ${CONFIG_WARNINGS}.sav ${CONFIG_WARNINGS}
+fi
+
+SAV_CFLAGS="$CFLAGS"
+for WARN in $WARNINGS_ENABLED
+do
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for -W$WARN" >&5
+$as_echo_n "checking for -W$WARN... " >&6; }
+  CFLAGS="$SAV_CFLAGS -W$WARN"
+
+  WARN_VAR=_HAVE_WARNING_`echo $WARN | tr "a-z=-" "A-Z__"`_
+  LOCAL_WARN_VAR=HAVE_WARNING_`echo $WARN | sed -e "s/=.*//" | tr "a-z-" "A-Z_"`
+  grep -q "^#undef $WARN_VAR$" $CONFIG_WARNINGS
+  if test $? -ne 0; then :
+  echo -e "\n/* Define to 1 if -W$WARN in use */\n#undef $WARN_VAR" >>$CONFIG_WARNINGS
+
+fi
+
+  test `echo $WARN | grep "=[0-9][0-9]*$"`
+  if test $? -eq 0; then :
+   WARN_SHORT=`echo $WARN | sed -e 's/=[0-9][0-9]*$//'`
+	  WARN_VAR_SHORT=_HAVE_WARNING_`echo $WARN_SHORT | tr "a-z=-" "A-Z__"`_
+	  grep -q "^#undef $WARN_VAR_SHORT$" $CONFIG_WARNINGS
+	  if test $? -ne 0; then :
+  echo -e "\n/* Define to 1 if -W$WARN_SHORT in use */\n#undef $WARN_VAR_SHORT" >>$CONFIG_WARNINGS
+
+fi
+
+else
+   unset WARN_VAR_SHORT
+
+fi
+
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+    int main(int argc, char**argv)
+    {
+    }
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+      # gcc 9 removed -Wchkp and doesn't error if it is specified,
+      # but rather outputs:
+      #  warning: switch '-Wchkp' is no longer supported
+      # so check for the warning.
+      touch conftest.err
+      grep -q "is no longer supported" conftest.err
+      if test $? -ne 0; then :
+
+	{ $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+	eval $LOCAL_WARN_VAR=yes
+	KA_CFLAGS="$KA_CFLAGS -W$WARN"
+	cat >>confdefs.h <<_ACEOF
+#define $WARN_VAR  1
+_ACEOF
+
+	if test -z "$WARN_VAR_SHORT"; then :
+
+else
+  cat >>confdefs.h <<_ACEOF
+#define $WARN_VAR_SHORT  1
+_ACEOF
+
+
+fi
+
+else
+
+	{ $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+	eval $LOCAL_WARN_VAR=no
+
+fi
+
+else
+
+      { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+      eval $LOCAL_WARN_VAR=no
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+done
+if test .$HAVE_WARNING_STRICT_OVERFLOW = .yes; then :
+
+	# The following is not supported in gcc 5.4.0
+	CFLAGS="$CFLAGS -Werror"
+	cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+	  _Pragma("GCC diagnostic warning \"-Wstrict-overflow=1\"")
+	  int main(int argc, char**argv)
+	  {
+	  }
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+$as_echo "#define _HAVE_PRAGMA_WARN_STRICT_OVERFLOW_1_  1 " >>confdefs.h
+
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+
+fi
+CFLAGS="$SAV_CFLAGS"
+
+STRICT_CONFIG=No
+if test "$enable_strict_config_checks" = yes; then
+
+$as_echo "#define _STRICT_CONFIG_  1 " >>confdefs.h
+
+  STRICT_CONFIG=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS STRICT_CONFIG"
+fi
+ if test $STRICT_CONFIG = Yes; then
+  WITH_STRICT_CONFIG_CHECKS_TRUE=
+  WITH_STRICT_CONFIG_CHECKS_FALSE='#'
+else
+  WITH_STRICT_CONFIG_CHECKS_TRUE='#'
+  WITH_STRICT_CONFIG_CHECKS_FALSE=
+fi
+
+
+if test "$enable_hardening" != no; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for PIE support" >&5
+$as_echo_n "checking for PIE support... " >&6; }
+  SAV_CFLAGS="$CFLAGS"
+  SAV_LDFLAGS="$LDFLAGS"
+  CFLAGS="$CFLAGS -fPIE"
+  LDFLAGS="$LDFLAGS -pie"
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+    int main(int argc, char **argv)
+    {
+      int i = 0;
+    }
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+      KA_CFLAGS="$KA_CFLAGS -fPIE"
+      KA_LDFLAGS="$KA_LDFLAGS -pie"
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+  CFLAGS=$SAV_CFLAGS
+  LDFLAGS=$SAV_LDFLAGS
+
+  for FLAG in \
+	  "-Wformat -Werror=format-security" \
+	  "-Wp,-D_FORTIFY_SOURCE=2" \
+	  "-fexceptions" \
+	  "-fstack-protector-strong" \
+	  "--param=ssp-buffer-size=4" \
+	  "-grecord-gcc-switches"
+  do
+    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $FLAG support" >&5
+$as_echo_n "checking for $FLAG support... " >&6; }
+    CFLAGS="$CFLAGS $FLAG"
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+	KA_CFLAGS="$KA_CFLAGS $FLAG"
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+    CFLAGS=$SAV_CFLAGS
+  done
+
+  WL_FLAGS=
+  for FLAG in \
+	  "-z,relro" \
+	  "-z,now"
+  do
+    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for -Wl,$FLAG support" >&5
+$as_echo_n "checking for -Wl,$FLAG support... " >&6; }
+    LDFLAGS="$LDFLAGS -Wl,$FLAG"
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+      int main(int argc, char **argv)
+      {
+	int i = 0;
+      }
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+
+	{ $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+	WL_FLAGS="$WL_FLAGS -Wl,$FLAG"
+
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+    CFLAGS=$SAV_CFLAGS
+    LDFLAGS=$SAV_LDFLAGS
+  done
+  if test -n "$WL_FLAGS"; then
+    KA_LDFLAGS="$KA_LDFLAGS $WL_FLAGS"
+  fi
+fi
+
+# enable-optimise
+if test "$enable_optimise" = yes -o "$enable_optimise" = not-specified; then :
+  optimise_level=2
+else
+  optimise_level=$enable_optimise
+fi
+if test "$enable_optimise" = no; then :
+  optimise_level=0
+fi
+if test "$optimise_level" -eq 0; then :
+
+    echo $KA_CFLAGS | $GREP -q -- "-D_FORTIFY_SOURCE=[^0]"
+    if test $? -eq 0; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: --disable-optimise requires --disable-hardening" >&5
+$as_echo "$as_me: WARNING: --disable-optimise requires --disable-hardening" >&2;}
+fi
+
+fi
+FLAG="-O$optimise_level"
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $FLAG support" >&5
+$as_echo_n "checking for $FLAG support... " >&6; }
+SAV_CFLAGS=$CFLAGS
+CFLAGS="$CFLAGS $FLAG"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+    KA_CFLAGS="$KA_CFLAGS $FLAG"
+else
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+    if test "$enable_optimise" != not-specified; then :
+  as_fn_error $? "Invalid optimisation level specified" "$LINENO" 5
+fi
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+CFLAGS=$SAV_CFLAGS
+
+
+
+
+
+# AC_SUBST(KA_LIBTOOLFLAGS)
+
+# Check if unaligned memory access is supported (for ARM not supported prior to ARMv6 processors)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for unaligned memory access" >&5
+$as_echo_n "checking for unaligned memory access... " >&6; }
+if test "$cross_compiling" = yes; then :
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: unknown" >&5
+$as_echo "unknown" >&6; }
+    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Cannot determine if unaligned access supported. Assuming yes." >&5
+$as_echo "$as_me: WARNING: Cannot determine if unaligned access supported. Assuming yes." >&2;}
+
+
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+
+	#include <limits.h>
+	#include <endian.h>
+
+	#if __BYTE_ORDER == __BIG_ENDIAN
+	#if ULONG_MAX == 0xffffffffffffffffUL
+	#define CHK_VAL       0x1234567890abcdefUL
+	#elif ULONG_MAX == 0xffffffffUL
+	#define CHK_VAL       0x12345678UL
+	#else
+	#define CHK_VAL       0x1234UL
+	#endif
+	#elif __BYTE_ORDER == __LITTLE_ENDIAN
+	#if ULONG_MAX == 0xffffffffffffffffUL
+	#define CHK_VAL       0xefcdab9078563412UL
+	#elif ULONG_MAX == 0xffffffffUL
+	#define CHK_VAL       0x78563412UL
+	#else
+	#define CHK_VAL       0x3412UL
+	#endif
+	#else
+	#error Neither big nor little endian - unsupported
+	#endif
+
+int
+main ()
+{
+
+	unsigned long arr[2] = { 0, 0 };
+	unsigned char *p = (unsigned char *)arr + 1;
+	unsigned i;
+
+	*(unsigned long *)p = CHK_VAL;
+
+	return !!(arr[0] == CHK_VAL || p[0] != 0x12 || p[1] != 0x34 || p[2] != 0x56);
+
+
+  ;
+  return 0;
+}
+
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+else
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+
+$as_echo "#define _NO_UNALIGNED_ACCESS_  1 " >>confdefs.h
+
+
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
+fi
+
+
+# Checks for libraries.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for clock_gettime() requires -lrt" >&5
+$as_echo_n "checking for clock_gettime() requires -lrt... " >&6; }
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+  #include <time.h>
+  int main(int argc, char **argv)
+  {
+    int i;
+    struct timespec ts;
+
+    i = clock_gettime(CLOCK_MONOTONIC, &ts);
+  }
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+else
+
+    SAV_LIBS="$LIBS"
+    LIBS="$LIBS -lrt"
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+      #include <time.h>
+      int main(int argc, char **argv)
+      {
+	int i;
+	struct timespec ts;
+
+	i = clock_gettime(CLOCK_MONOTONIC, &ts);
+      }
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+	KA_LIBS="$KA_LIBS -lrt"
+else
+  as_fn_error $? "clock_gettime() not supported" "$LINENO" 5
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+    LIBS=$SAV_LIBS
+
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+
+# Checks for header files.
+ac_ext=c
+ac_cpp='$CPP $CPPFLAGS'
+ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_c_compiler_gnu
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking how to run the C preprocessor" >&5
+$as_echo_n "checking how to run the C preprocessor... " >&6; }
+# On Suns, sometimes $CPP names a directory.
+if test -n "$CPP" && test -d "$CPP"; then
+  CPP=
+fi
+if test -z "$CPP"; then
+  if ${ac_cv_prog_CPP+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+      # Double quotes because CPP needs to be expanded
+    for CPP in "$CC -E" "$CC -E -traditional-cpp" "/lib/cpp"
+    do
+      ac_preproc_ok=false
+for ac_c_preproc_warn_flag in '' yes
+do
+  # Use a header file that comes with gcc, so configuring glibc
+  # with a fresh cross-compiler works.
+  # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
+  # <limits.h> exists even on freestanding compilers.
+  # On the NeXT, cc -E runs the code through the compiler's parser,
+  # not just through cpp. "Syntax error" is here to catch this case.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#ifdef __STDC__
+# include <limits.h>
+#else
+# include <assert.h>
+#endif
+		     Syntax error
+_ACEOF
+if ac_fn_c_try_cpp "$LINENO"; then :
+
+else
+  # Broken: fails on valid input.
+continue
+fi
+rm -f conftest.err conftest.i conftest.$ac_ext
+
+  # OK, works on sane cases.  Now check whether nonexistent headers
+  # can be detected and how.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <ac_nonexistent.h>
+_ACEOF
+if ac_fn_c_try_cpp "$LINENO"; then :
+  # Broken: success on invalid input.
+continue
+else
+  # Passes both tests.
+ac_preproc_ok=:
+break
+fi
+rm -f conftest.err conftest.i conftest.$ac_ext
+
+done
+# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
+rm -f conftest.i conftest.err conftest.$ac_ext
+if $ac_preproc_ok; then :
+  break
+fi
+
+    done
+    ac_cv_prog_CPP=$CPP
+
+fi
+  CPP=$ac_cv_prog_CPP
+else
+  ac_cv_prog_CPP=$CPP
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $CPP" >&5
+$as_echo "$CPP" >&6; }
+ac_preproc_ok=false
+for ac_c_preproc_warn_flag in '' yes
+do
+  # Use a header file that comes with gcc, so configuring glibc
+  # with a fresh cross-compiler works.
+  # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
+  # <limits.h> exists even on freestanding compilers.
+  # On the NeXT, cc -E runs the code through the compiler's parser,
+  # not just through cpp. "Syntax error" is here to catch this case.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#ifdef __STDC__
+# include <limits.h>
+#else
+# include <assert.h>
+#endif
+		     Syntax error
+_ACEOF
+if ac_fn_c_try_cpp "$LINENO"; then :
+
+else
+  # Broken: fails on valid input.
+continue
+fi
+rm -f conftest.err conftest.i conftest.$ac_ext
+
+  # OK, works on sane cases.  Now check whether nonexistent headers
+  # can be detected and how.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <ac_nonexistent.h>
+_ACEOF
+if ac_fn_c_try_cpp "$LINENO"; then :
+  # Broken: success on invalid input.
+continue
+else
+  # Passes both tests.
+ac_preproc_ok=:
+break
+fi
+rm -f conftest.err conftest.i conftest.$ac_ext
+
+done
+# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
+rm -f conftest.i conftest.err conftest.$ac_ext
+if $ac_preproc_ok; then :
+
+else
+  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
+$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
+as_fn_error $? "C preprocessor \"$CPP\" fails sanity check
+See \`config.log' for more details" "$LINENO" 5; }
+fi
+
+ac_ext=c
+ac_cpp='$CPP $CPPFLAGS'
+ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
+ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
+ac_compiler_gnu=$ac_cv_c_compiler_gnu
+
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
+$as_echo_n "checking for egrep... " >&6; }
+if ${ac_cv_path_EGREP+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
+   then ac_cv_path_EGREP="$GREP -E"
+   else
+     if test -z "$EGREP"; then
+  ac_path_EGREP_found=false
+  # Loop through the user's path and test for each of PROGNAME-LIST
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_prog in egrep; do
+    for ac_exec_ext in '' $ac_executable_extensions; do
+      ac_path_EGREP="$as_dir/$ac_prog$ac_exec_ext"
+      as_fn_executable_p "$ac_path_EGREP" || continue
+# Check for GNU ac_path_EGREP and select it if it is found.
+  # Check for GNU $ac_path_EGREP
+case `"$ac_path_EGREP" --version 2>&1` in
+*GNU*)
+  ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
+*)
+  ac_count=0
+  $as_echo_n 0123456789 >"conftest.in"
+  while :
+  do
+    cat "conftest.in" "conftest.in" >"conftest.tmp"
+    mv "conftest.tmp" "conftest.in"
+    cp "conftest.in" "conftest.nl"
+    $as_echo 'EGREP' >> "conftest.nl"
+    "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
+    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
+    as_fn_arith $ac_count + 1 && ac_count=$as_val
+    if test $ac_count -gt ${ac_path_EGREP_max-0}; then
+      # Best one so far, save it but keep looking for a better one
+      ac_cv_path_EGREP="$ac_path_EGREP"
+      ac_path_EGREP_max=$ac_count
+    fi
+    # 10*(2^10) chars as input seems more than enough
+    test $ac_count -gt 10 && break
+  done
+  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
+esac
+
+      $ac_path_EGREP_found && break 3
+    done
+  done
+  done
+IFS=$as_save_IFS
+  if test -z "$ac_cv_path_EGREP"; then
+    as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
+  fi
+else
+  ac_cv_path_EGREP=$EGREP
+fi
+
+   fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
+$as_echo "$ac_cv_path_EGREP" >&6; }
+ EGREP="$ac_cv_path_EGREP"
+
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ANSI C header files" >&5
+$as_echo_n "checking for ANSI C header files... " >&6; }
+if ${ac_cv_header_stdc+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <stdlib.h>
+#include <stdarg.h>
+#include <string.h>
+#include <float.h>
+
+int
+main ()
+{
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_header_stdc=yes
+else
+  ac_cv_header_stdc=no
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+if test $ac_cv_header_stdc = yes; then
+  # SunOS 4.x string.h does not declare mem*, contrary to ANSI.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <string.h>
+
+_ACEOF
+if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
+  $EGREP "memchr" >/dev/null 2>&1; then :
+
+else
+  ac_cv_header_stdc=no
+fi
+rm -f conftest*
+
+fi
+
+if test $ac_cv_header_stdc = yes; then
+  # ISC 2.0.2 stdlib.h does not declare free, contrary to ANSI.
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <stdlib.h>
+
+_ACEOF
+if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
+  $EGREP "free" >/dev/null 2>&1; then :
+
+else
+  ac_cv_header_stdc=no
+fi
+rm -f conftest*
+
+fi
+
+if test $ac_cv_header_stdc = yes; then
+  # /bin/cc in Irix-4.0.5 gets non-ANSI ctype macros unless using -ansi.
+  if test "$cross_compiling" = yes; then :
+  :
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <ctype.h>
+#include <stdlib.h>
+#if ((' ' & 0x0FF) == 0x020)
+# define ISLOWER(c) ('a' <= (c) && (c) <= 'z')
+# define TOUPPER(c) (ISLOWER(c) ? 'A' + ((c) - 'a') : (c))
+#else
+# define ISLOWER(c) \
+		   (('a' <= (c) && (c) <= 'i') \
+		     || ('j' <= (c) && (c) <= 'r') \
+		     || ('s' <= (c) && (c) <= 'z'))
+# define TOUPPER(c) (ISLOWER(c) ? ((c) | 0x40) : (c))
+#endif
+
+#define XOR(e, f) (((e) && !(f)) || (!(e) && (f)))
+int
+main ()
+{
+  int i;
+  for (i = 0; i < 256; i++)
+    if (XOR (islower (i), ISLOWER (i))
+	|| toupper (i) != TOUPPER (i))
+      return 2;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+
+else
+  ac_cv_header_stdc=no
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
+fi
+
+fi
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_stdc" >&5
+$as_echo "$ac_cv_header_stdc" >&6; }
+if test $ac_cv_header_stdc = yes; then
+
+$as_echo "#define STDC_HEADERS 1" >>confdefs.h
+
+fi
+
+# On IRIX 5.3, sys/types and inttypes.h are conflicting.
+for ac_header in sys/types.h sys/stat.h stdlib.h string.h memory.h strings.h \
+		  inttypes.h stdint.h unistd.h
+do :
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
+ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default
+"
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
+_ACEOF
+
+fi
+
+done
+
+
+for ac_header in arpa/inet.h fcntl.h limits.h netdb.h netinet/in.h stdint.h stdlib.h string.h sys/ioctl.h sys/param.h sys/prctl.h sys/socket.h sys/time.h syslog.h unistd.h
+do :
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
+ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
+_ACEOF
+
+else
+  as_fn_error $? "Missing/unusable system header file <$ac_header>" "$LINENO" 5
+fi
+
+done
+
+
+# check for kernel headers
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS $kernelinc"
+NETLINK_EXTRA_INCLUDE=
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+  #include <linux/netlink.h>
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+else
+  ac_fn_c_check_header_compile "$LINENO" "linux/netlink.h" "ac_cv_header_linux_netlink_h" "#include <sys/socket.h>
+"
+if test "x$ac_cv_header_linux_netlink_h" = xyes; then :
+
+
+$as_echo "#define NETLINK_H_NEEDS_SYS_SOCKET_H  1 " >>confdefs.h
+
+      NETLINK_EXTRA_INCLUDE="#include <sys/socket.h>"
+
+else
+  as_fn_error $? "Missing/unusable kernel header file <linux/netlink.h>" "$LINENO" 5
+fi
+
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+RTNETLINK_EXTRA_INCLUDE=
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+  #include <linux/rtnetlink.h>
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+else
+  ac_fn_c_check_header_compile "$LINENO" "linux/rtnetlink.h" "ac_cv_header_linux_rtnetlink_h" "#include <sys/socket.h>
+"
+if test "x$ac_cv_header_linux_rtnetlink_h" = xyes; then :
+
+
+$as_echo "#define RTNETLINK_H_NEEDS_SYS_SOCKET_H  1 " >>confdefs.h
+
+      RTNETLINK_EXTRA_INCLUDE="#include <sys/socket.h>"
+
+else
+  as_fn_error $? "Missing/unusable kernel header file <linux/rtnetlink.h>" "$LINENO" 5
+fi
+
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+for ac_header in asm/types.h linux/ethtool.h linux/icmpv6.h linux/if_ether.h linux/if_packet.h linux/ip.h linux/sockios.h linux/types.h
+do :
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
+ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
+_ACEOF
+
+else
+  as_fn_error $? "Missing/unusable kernel header file <$ac_header>" "$LINENO" 5
+fi
+
+done
+
+for ac_header in linux/fib_rules.h linux/if_addr.h linux/if_link.h
+do :
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
+ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$NETLINK_EXTRA_INCLUDE
+"
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
+_ACEOF
+
+else
+  as_fn_error $? "Missing/unusable kernel header file <$ac_header>" "$LINENO" 5
+fi
+
+done
+
+for ac_header in linux/if_arp.h
+do :
+  ac_fn_c_check_header_compile "$LINENO" "linux/if_arp.h" "ac_cv_header_linux_if_arp_h" "#include <sys/socket.h>
+"
+if test "x$ac_cv_header_linux_if_arp_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LINUX_IF_ARP_H 1
+_ACEOF
+
+else
+  as_fn_error $? "Missing/unusable <$ac_header>" "$LINENO" 5
+fi
+
+done
+
+CPPFLAGS="$SAV_CPPFLAGS"
+
+# Checks for typedefs, structures, and compiler characteristics.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for stdbool.h that conforms to C99" >&5
+$as_echo_n "checking for stdbool.h that conforms to C99... " >&6; }
+if ${ac_cv_header_stdbool_h+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+             #include <stdbool.h>
+             #ifndef bool
+              "error: bool is not defined"
+             #endif
+             #ifndef false
+              "error: false is not defined"
+             #endif
+             #if false
+              "error: false is not 0"
+             #endif
+             #ifndef true
+              "error: true is not defined"
+             #endif
+             #if true != 1
+              "error: true is not 1"
+             #endif
+             #ifndef __bool_true_false_are_defined
+              "error: __bool_true_false_are_defined is not defined"
+             #endif
+
+             struct s { _Bool s: 1; _Bool t; } s;
+
+             char a[true == 1 ? 1 : -1];
+             char b[false == 0 ? 1 : -1];
+             char c[__bool_true_false_are_defined == 1 ? 1 : -1];
+             char d[(bool) 0.5 == true ? 1 : -1];
+             /* See body of main program for 'e'.  */
+             char f[(_Bool) 0.0 == false ? 1 : -1];
+             char g[true];
+             char h[sizeof (_Bool)];
+             char i[sizeof s.t];
+             enum { j = false, k = true, l = false * true, m = true * 256 };
+             /* The following fails for
+                HP aC++/ANSI C B3910B A.05.55 [Dec 04 2003]. */
+             _Bool n[m];
+             char o[sizeof n == m * sizeof n[0] ? 1 : -1];
+             char p[-1 - (_Bool) 0 < 0 && -1 - (bool) 0 < 0 ? 1 : -1];
+             /* Catch a bug in an HP-UX C compiler.  See
+                http://gcc.gnu.org/ml/gcc-patches/2003-12/msg02303.html
+                http://lists.gnu.org/archive/html/bug-coreutils/2005-11/msg00161.html
+              */
+             _Bool q = true;
+             _Bool *pq = &q;
+
+int
+main ()
+{
+
+             bool e = &s;
+             *pq |= q;
+             *pq |= ! q;
+             /* Refer to every declared value, to avoid compiler optimizations.  */
+             return (!a + !b + !c + !d + !e + !f + !g + !h + !i + !!j + !k + !!l
+                     + !m + !n + !o + !p + !q + !pq);
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_header_stdbool_h=yes
+else
+  ac_cv_header_stdbool_h=no
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_stdbool_h" >&5
+$as_echo "$ac_cv_header_stdbool_h" >&6; }
+   ac_fn_c_check_type "$LINENO" "_Bool" "ac_cv_type__Bool" "$ac_includes_default"
+if test "x$ac_cv_type__Bool" = xyes; then :
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE__BOOL 1
+_ACEOF
+
+
+fi
+
+
+if test $ac_cv_header_stdbool_h = yes; then
+
+$as_echo "#define HAVE_STDBOOL_H 1" >>confdefs.h
+
+fi
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for inline" >&5
+$as_echo_n "checking for inline... " >&6; }
+if ${ac_cv_c_inline+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_cv_c_inline=no
+for ac_kw in inline __inline__ __inline; do
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#ifndef __cplusplus
+typedef int foo_t;
+static $ac_kw foo_t static_foo () {return 0; }
+$ac_kw foo_t foo () {return 0; }
+#endif
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_c_inline=$ac_kw
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+  test "$ac_cv_c_inline" != no && break
+done
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_inline" >&5
+$as_echo "$ac_cv_c_inline" >&6; }
+
+case $ac_cv_c_inline in
+  inline | yes) ;;
+  *)
+    case $ac_cv_c_inline in
+      no) ac_val=;;
+      *) ac_val=$ac_cv_c_inline;;
+    esac
+    cat >>confdefs.h <<_ACEOF
+#ifndef __cplusplus
+#define inline $ac_val
+#endif
+_ACEOF
+    ;;
+esac
+
+ac_fn_c_find_intX_t "$LINENO" "64" "ac_cv_c_int64_t"
+case $ac_cv_c_int64_t in #(
+  no|yes) ;; #(
+  *)
+
+cat >>confdefs.h <<_ACEOF
+#define int64_t $ac_cv_c_int64_t
+_ACEOF
+;;
+esac
+
+ac_fn_c_check_type "$LINENO" "pid_t" "ac_cv_type_pid_t" "$ac_includes_default"
+if test "x$ac_cv_type_pid_t" = xyes; then :
+
+else
+
+cat >>confdefs.h <<_ACEOF
+#define pid_t int
+_ACEOF
+
+fi
+
+ac_fn_c_check_type "$LINENO" "size_t" "ac_cv_type_size_t" "$ac_includes_default"
+if test "x$ac_cv_type_size_t" = xyes; then :
+
+else
+
+cat >>confdefs.h <<_ACEOF
+#define size_t unsigned int
+_ACEOF
+
+fi
+
+ac_fn_c_find_uintX_t "$LINENO" "16" "ac_cv_c_uint16_t"
+case $ac_cv_c_uint16_t in #(
+  no|yes) ;; #(
+  *)
+
+
+cat >>confdefs.h <<_ACEOF
+#define uint16_t $ac_cv_c_uint16_t
+_ACEOF
+;;
+  esac
+
+ac_fn_c_find_uintX_t "$LINENO" "32" "ac_cv_c_uint32_t"
+case $ac_cv_c_uint32_t in #(
+  no|yes) ;; #(
+  *)
+
+$as_echo "#define _UINT32_T 1" >>confdefs.h
+
+
+cat >>confdefs.h <<_ACEOF
+#define uint32_t $ac_cv_c_uint32_t
+_ACEOF
+;;
+  esac
+
+ac_fn_c_find_uintX_t "$LINENO" "64" "ac_cv_c_uint64_t"
+case $ac_cv_c_uint64_t in #(
+  no|yes) ;; #(
+  *)
+
+$as_echo "#define _UINT64_T 1" >>confdefs.h
+
+
+cat >>confdefs.h <<_ACEOF
+#define uint64_t $ac_cv_c_uint64_t
+_ACEOF
+;;
+  esac
+
+ac_fn_c_find_uintX_t "$LINENO" "8" "ac_cv_c_uint8_t"
+case $ac_cv_c_uint8_t in #(
+  no|yes) ;; #(
+  *)
+
+$as_echo "#define _UINT8_T 1" >>confdefs.h
+
+
+cat >>confdefs.h <<_ACEOF
+#define uint8_t $ac_cv_c_uint8_t
+_ACEOF
+;;
+  esac
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for an ANSI C-conforming const" >&5
+$as_echo_n "checking for an ANSI C-conforming const... " >&6; }
+if ${ac_cv_c_const+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+int
+main ()
+{
+
+#ifndef __cplusplus
+  /* Ultrix mips cc rejects this sort of thing.  */
+  typedef int charset[2];
+  const charset cs = { 0, 0 };
+  /* SunOS 4.1.1 cc rejects this.  */
+  char const *const *pcpcc;
+  char **ppc;
+  /* NEC SVR4.0.2 mips cc rejects this.  */
+  struct point {int x, y;};
+  static struct point const zero = {0,0};
+  /* AIX XL C 1.02.0.0 rejects this.
+     It does not let you subtract one const X* pointer from another in
+     an arm of an if-expression whose if-part is not a constant
+     expression */
+  const char *g = "string";
+  pcpcc = &g + (g ? g-g : 0);
+  /* HPUX 7.0 cc rejects these. */
+  ++pcpcc;
+  ppc = (char**) pcpcc;
+  pcpcc = (char const *const *) ppc;
+  { /* SCO 3.2v4 cc rejects this sort of thing.  */
+    char tx;
+    char *t = &tx;
+    char const *s = 0 ? (char *) 0 : (char const *) 0;
+
+    *t++ = 0;
+    if (s) return 0;
+  }
+  { /* Someone thinks the Sun supposedly-ANSI compiler will reject this.  */
+    int x[] = {25, 17};
+    const int *foo = &x[0];
+    ++foo;
+  }
+  { /* Sun SC1.0 ANSI compiler rejects this -- but not the above. */
+    typedef const int *iptr;
+    iptr p = 0;
+    ++p;
+  }
+  { /* AIX XL C 1.02.0.0 rejects this sort of thing, saying
+       "k.c", line 2.27: 1506-025 (S) Operand must be a modifiable lvalue. */
+    struct s { int j; const int *ap[3]; } bx;
+    struct s *b = &bx; b->j = 5;
+  }
+  { /* ULTRIX-32 V3.1 (Rev 9) vcc rejects this */
+    const int foo = 10;
+    if (!foo) return 0;
+  }
+  return !cs[0] && !zero.x;
+#endif
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  ac_cv_c_const=yes
+else
+  ac_cv_c_const=no
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_const" >&5
+$as_echo "$ac_cv_c_const" >&6; }
+if test $ac_cv_c_const = no; then
+
+$as_echo "#define const /**/" >>confdefs.h
+
+fi
+
+
+# Checks for library functions.
+for ac_header in vfork.h
+do :
+  ac_fn_c_check_header_mongrel "$LINENO" "vfork.h" "ac_cv_header_vfork_h" "$ac_includes_default"
+if test "x$ac_cv_header_vfork_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_VFORK_H 1
+_ACEOF
+
+fi
+
+done
+
+for ac_func in fork vfork
+do :
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
+_ACEOF
+
+fi
+done
+
+if test "x$ac_cv_func_fork" = xyes; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for working fork" >&5
+$as_echo_n "checking for working fork... " >&6; }
+if ${ac_cv_func_fork_works+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test "$cross_compiling" = yes; then :
+  ac_cv_func_fork_works=cross
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+$ac_includes_default
+int
+main ()
+{
+
+	  /* By Ruediger Kuhlmann. */
+	  return fork () < 0;
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+  ac_cv_func_fork_works=yes
+else
+  ac_cv_func_fork_works=no
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
+fi
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_fork_works" >&5
+$as_echo "$ac_cv_func_fork_works" >&6; }
+
+else
+  ac_cv_func_fork_works=$ac_cv_func_fork
+fi
+if test "x$ac_cv_func_fork_works" = xcross; then
+  case $host in
+    *-*-amigaos* | *-*-msdosdjgpp*)
+      # Override, as these systems have only a dummy fork() stub
+      ac_cv_func_fork_works=no
+      ;;
+    *)
+      ac_cv_func_fork_works=yes
+      ;;
+  esac
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: result $ac_cv_func_fork_works guessed because of cross compilation" >&5
+$as_echo "$as_me: WARNING: result $ac_cv_func_fork_works guessed because of cross compilation" >&2;}
+fi
+ac_cv_func_vfork_works=$ac_cv_func_vfork
+if test "x$ac_cv_func_vfork" = xyes; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for working vfork" >&5
+$as_echo_n "checking for working vfork... " >&6; }
+if ${ac_cv_func_vfork_works+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test "$cross_compiling" = yes; then :
+  ac_cv_func_vfork_works=cross
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+/* Thanks to Paul Eggert for this test.  */
+$ac_includes_default
+#include <sys/wait.h>
+#ifdef HAVE_VFORK_H
+# include <vfork.h>
+#endif
+/* On some sparc systems, changes by the child to local and incoming
+   argument registers are propagated back to the parent.  The compiler
+   is told about this with #include <vfork.h>, but some compilers
+   (e.g. gcc -O) don't grok <vfork.h>.  Test for this by using a
+   static variable whose address is put into a register that is
+   clobbered by the vfork.  */
+static void
+#ifdef __cplusplus
+sparc_address_test (int arg)
+# else
+sparc_address_test (arg) int arg;
+#endif
+{
+  static pid_t child;
+  if (!child) {
+    child = vfork ();
+    if (child < 0) {
+      perror ("vfork");
+      _exit(2);
+    }
+    if (!child) {
+      arg = getpid();
+      write(-1, "", 0);
+      _exit (arg);
+    }
+  }
+}
+
+int
+main ()
+{
+  pid_t parent = getpid ();
+  pid_t child;
+
+  sparc_address_test (0);
+
+  child = vfork ();
+
+  if (child == 0) {
+    /* Here is another test for sparc vfork register problems.  This
+       test uses lots of local variables, at least as many local
+       variables as main has allocated so far including compiler
+       temporaries.  4 locals are enough for gcc 1.40.3 on a Solaris
+       4.1.3 sparc, but we use 8 to be safe.  A buggy compiler should
+       reuse the register of parent for one of the local variables,
+       since it will think that parent can't possibly be used any more
+       in this routine.  Assigning to the local variable will thus
+       munge parent in the parent process.  */
+    pid_t
+      p = getpid(), p1 = getpid(), p2 = getpid(), p3 = getpid(),
+      p4 = getpid(), p5 = getpid(), p6 = getpid(), p7 = getpid();
+    /* Convince the compiler that p..p7 are live; otherwise, it might
+       use the same hardware register for all 8 local variables.  */
+    if (p != p1 || p != p2 || p != p3 || p != p4
+	|| p != p5 || p != p6 || p != p7)
+      _exit(1);
+
+    /* On some systems (e.g. IRIX 3.3), vfork doesn't separate parent
+       from child file descriptors.  If the child closes a descriptor
+       before it execs or exits, this munges the parent's descriptor
+       as well.  Test for this by closing stdout in the child.  */
+    _exit(close(fileno(stdout)) != 0);
+  } else {
+    int status;
+    struct stat st;
+
+    while (wait(&status) != child)
+      ;
+    return (
+	 /* Was there some problem with vforking?  */
+	 child < 0
+
+	 /* Did the child fail?  (This shouldn't happen.)  */
+	 || status
+
+	 /* Did the vfork/compiler bug occur?  */
+	 || parent != getpid()
+
+	 /* Did the file descriptor bug occur?  */
+	 || fstat(fileno(stdout), &st) != 0
+	 );
+  }
+}
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+  ac_cv_func_vfork_works=yes
+else
+  ac_cv_func_vfork_works=no
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
+fi
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_vfork_works" >&5
+$as_echo "$ac_cv_func_vfork_works" >&6; }
+
+fi;
+if test "x$ac_cv_func_fork_works" = xcross; then
+  ac_cv_func_vfork_works=$ac_cv_func_vfork
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: result $ac_cv_func_vfork_works guessed because of cross compilation" >&5
+$as_echo "$as_me: WARNING: result $ac_cv_func_vfork_works guessed because of cross compilation" >&2;}
+fi
+
+if test "x$ac_cv_func_vfork_works" = xyes; then
+
+$as_echo "#define HAVE_WORKING_VFORK 1" >>confdefs.h
+
+else
+
+$as_echo "#define vfork fork" >>confdefs.h
+
+fi
+if test "x$ac_cv_func_fork_works" = xyes; then
+
+$as_echo "#define HAVE_WORKING_FORK 1" >>confdefs.h
+
+fi
+
+for ac_header in stdlib.h
+do :
+  ac_fn_c_check_header_mongrel "$LINENO" "stdlib.h" "ac_cv_header_stdlib_h" "$ac_includes_default"
+if test "x$ac_cv_header_stdlib_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_STDLIB_H 1
+_ACEOF
+
+fi
+
+done
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for GNU libc compatible malloc" >&5
+$as_echo_n "checking for GNU libc compatible malloc... " >&6; }
+if ${ac_cv_func_malloc_0_nonnull+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test "$cross_compiling" = yes; then :
+  ac_cv_func_malloc_0_nonnull=no
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#if defined STDC_HEADERS || defined HAVE_STDLIB_H
+# include <stdlib.h>
+#else
+char *malloc ();
+#endif
+
+int
+main ()
+{
+return ! malloc (0);
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+  ac_cv_func_malloc_0_nonnull=yes
+else
+  ac_cv_func_malloc_0_nonnull=no
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
+fi
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_malloc_0_nonnull" >&5
+$as_echo "$ac_cv_func_malloc_0_nonnull" >&6; }
+if test $ac_cv_func_malloc_0_nonnull = yes; then :
+
+$as_echo "#define HAVE_MALLOC 1" >>confdefs.h
+
+else
+  $as_echo "#define HAVE_MALLOC 0" >>confdefs.h
+
+   case " $LIBOBJS " in
+  *" malloc.$ac_objext "* ) ;;
+  *) LIBOBJS="$LIBOBJS malloc.$ac_objext"
+ ;;
+esac
+
+
+$as_echo "#define malloc rpl_malloc" >>confdefs.h
+
+fi
+
+
+for ac_header in stdlib.h
+do :
+  ac_fn_c_check_header_mongrel "$LINENO" "stdlib.h" "ac_cv_header_stdlib_h" "$ac_includes_default"
+if test "x$ac_cv_header_stdlib_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_STDLIB_H 1
+_ACEOF
+
+fi
+
+done
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for GNU libc compatible realloc" >&5
+$as_echo_n "checking for GNU libc compatible realloc... " >&6; }
+if ${ac_cv_func_realloc_0_nonnull+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test "$cross_compiling" = yes; then :
+  ac_cv_func_realloc_0_nonnull=no
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#if defined STDC_HEADERS || defined HAVE_STDLIB_H
+# include <stdlib.h>
+#else
+char *realloc ();
+#endif
+
+int
+main ()
+{
+return ! realloc (0, 0);
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+  ac_cv_func_realloc_0_nonnull=yes
+else
+  ac_cv_func_realloc_0_nonnull=no
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
+fi
+
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_realloc_0_nonnull" >&5
+$as_echo "$ac_cv_func_realloc_0_nonnull" >&6; }
+if test $ac_cv_func_realloc_0_nonnull = yes; then :
+
+$as_echo "#define HAVE_REALLOC 1" >>confdefs.h
+
+else
+  $as_echo "#define HAVE_REALLOC 0" >>confdefs.h
+
+   case " $LIBOBJS " in
+  *" realloc.$ac_objext "* ) ;;
+  *) LIBOBJS="$LIBOBJS realloc.$ac_objext"
+ ;;
+esac
+
+
+$as_echo "#define realloc rpl_realloc" >>confdefs.h
+
+fi
+
+
+for ac_func in dup2 getcwd gettimeofday memmove memset select setenv socket strcasecmp strchr strdup strerror strpbrk strstr strtol strtoul uname
+do :
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
+_ACEOF
+
+fi
+done
+
+for ac_func in pipe2
+do :
+  ac_fn_c_check_func "$LINENO" "pipe2" "ac_cv_func_pipe2"
+if test "x$ac_cv_func_pipe2" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_PIPE2 1
+_ACEOF
+ SYSTEM_OPTIONS="$SYSTEM_OPTIONS PIPE2"
+fi
+done
+
+for ac_func in signalfd
+do :
+  ac_fn_c_check_func "$LINENO" "signalfd" "ac_cv_func_signalfd"
+if test "x$ac_cv_func_signalfd" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_SIGNALFD 1
+_ACEOF
+ SYSTEM_OPTIONS="$SYSTEM_OPTIONS SIGNALFD"
+fi
+done
+
+for ac_func in inotify_init1
+do :
+  ac_fn_c_check_func "$LINENO" "inotify_init1" "ac_cv_func_inotify_init1"
+if test "x$ac_cv_func_inotify_init1" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_INOTIFY_INIT1 1
+_ACEOF
+ SYSTEM_OPTIONS="$SYSTEM_OPTIONS INOTIFY_INIT1"
+fi
+done
+
+for ac_func in vsyslog
+do :
+  ac_fn_c_check_func "$LINENO" "vsyslog" "ac_cv_func_vsyslog"
+if test "x$ac_cv_func_vsyslog" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_VSYSLOG 1
+_ACEOF
+ SYSTEM_OPTIONS="$SYSTEM_OPTIONS VSYSLOG"
+fi
+done
+
+for ac_func in epoll_create1
+do :
+  ac_fn_c_check_func "$LINENO" "epoll_create1" "ac_cv_func_epoll_create1"
+if test "x$ac_cv_func_epoll_create1" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_EPOLL_CREATE1 1
+_ACEOF
+ SYSTEM_OPTIONS="$SYSTEM_OPTIONS EPOLL_CREATE1"
+fi
+done
+
+
+# glibc uses unsigned int as 3rd parameter to __assert_fail(), musl uses int.
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+  #include <assert.h>
+  #include <stdlib.h>
+
+  void __assert_fail(const char * a, const char *b, unsigned int l, const char *c)
+  {
+    exit(a[0] + b[0] + c[0] + l == 0);
+  }
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  LINE_type="unsigned int"
+else
+  LINE_type="int"
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+cat >>confdefs.h <<_ACEOF
+#define LINE_type  $LINE_type
+_ACEOF
+
+
+SAV_CFLAGS="$CFLAGS"
+CFLAGS="$CFLAGS -Wattributes -Werror"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+  #include <stdlib.h>
+  static __always_inline int
+  test_func(int val)
+  {
+    return val;
+  }
+
+  int
+  main(int argc, char **argv)
+  {
+    int val = test_func(3);
+    return val;
+  }
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+    static __inline __attribute__ ((__always_inline__)) int
+    test_func(int val)
+    {
+      return val;
+    }
+
+    int
+    main(int argc, char **argv)
+    {
+      int val = test_func(3);
+      return val;
+    }
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+$as_echo "#define __always_inline __inline __attribute__ ((__always_inline__))" >>confdefs.h
+
+else
+
+$as_echo "#define __always_inline inline" >>confdefs.h
+
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+CFLAGS="$SAV_CFLAGS"
+
+if test "$enable_dynamic_linking"; then :
+
+    if test .$enable_vrrp != .no; then :
+
+	enable_libiptc_dynamic=$enable_dynamic_linking
+	enable_libipset_dynamic=$enable_dynamic_linking
+
+fi
+    if test .$enable_lvs != .no; then :
+
+	enable_libnl_dynamic=$enable_dynamic_linking
+
+fi
+
+fi
+
+# check for missing definition - added in glibc 2.8
+ac_fn_c_check_decl "$LINENO" "ETHERTYPE_IPV6" "ac_cv_have_decl_ETHERTYPE_IPV6" "#include <net/ethernet.h>
+"
+if test "x$ac_cv_have_decl_ETHERTYPE_IPV6" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_ETHERTYPE_IPV6 $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+else
+
+
+$as_echo "#define ETHERTYPE_IPV6 0x86dd" >>confdefs.h
+
+
+fi
+
+
+BUILD_GENHASH=Yes
+# check for openssl headers
+NEED_MD5=no
+NEED_SSL=no
+if test "$enable_vrrp" != no -a \
+	"$enable_vrrp_auth" != no; then
+  NEED_MD5=yes
+fi
+if test "$enable_lvs" != no; then
+  NEED_MD5=yes
+  NEED_SSL=yes
+fi
+for ac_header in openssl/ssl.h openssl/err.h
+do :
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
+ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
+_ACEOF
+
+else
+
+    if test $NEED_SSL = yes; then
+      as_fn_error $? "
+  !!! OpenSSL is not properly installed on your system. !!!
+  !!! Can not include OpenSSL headers files.            !!!" "$LINENO" 5
+    fi
+    BUILD_GENHASH=No
+    NEED_SSL=no
+    break
+
+fi
+
+done
+
+for ac_header in openssl/md5.h
+do :
+  ac_fn_c_check_header_mongrel "$LINENO" "openssl/md5.h" "ac_cv_header_openssl_md5_h" "$ac_includes_default"
+if test "x$ac_cv_header_openssl_md5_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_OPENSSL_MD5_H 1
+_ACEOF
+
+else
+
+    if test $NEED_MD5 = yes; then
+      as_fn_error $? "
+  !!! OpenSSL is not properly installed on your system. !!!
+  !!! Can not include OpenSSL MD5 headers files.        !!!" "$LINENO" 5
+    fi
+    BUILD_GENHASH=No
+    NEED_MD5=no
+    break
+
+fi
+
+done
+
+unset LIBS
+
+$PKG_CONFIG --exists openssl
+if test $? -eq 0; then
+   if test -n "OPENSSL"; then
+      KA_PKG_PFX=OPENSSL
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I openssl`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other openssl`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+    if test . = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires openssl`
+      var=`$PKG_CONFIG --libs-only-l openssl`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs openssl`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
+
+    fi
+
+else
+  OPENSSL_LIBS="-lssl -lcrypto"
+fi
+
+EXTRA_LIBS=`echo $OPENSSL_LIBS | sed -e "s/-lcrypto//"`
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for MD5_Init in -lcrypto" >&5
+$as_echo_n "checking for MD5_Init in -lcrypto... " >&6; }
+if ${ac_cv_lib_crypto_MD5_Init+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-lcrypto $EXTRA_LIBS $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char MD5_Init ();
+int
+main ()
+{
+return MD5_Init ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_lib_crypto_MD5_Init=yes
+else
+  ac_cv_lib_crypto_MD5_Init=no
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_MD5_Init" >&5
+$as_echo "$ac_cv_lib_crypto_MD5_Init" >&6; }
+if test "x$ac_cv_lib_crypto_MD5_Init" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LIBCRYPTO 1
+_ACEOF
+
+  LIBS="-lcrypto $LIBS"
+
+else
+
+    if test $NEED_MD5 = yes; then
+      as_fn_error $? "OpenSSL MD5 libraries are required" "$LINENO" 5
+    fi
+    BUILD_GENHASH=No
+
+fi
+
+if test $NEED_MD5 = yes; then
+  KA_LIBS="$KA_LIBS $LIBS"
+fi
+GENHASH_LIBS="$GENHASH_LIBS $LIBS"
+unset LIBS
+
+EXTRA_LIBS=`echo $OPENSSL_LIBS | sed -e "s/-lssl//"`
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for SSL_CTX_new in -lssl" >&5
+$as_echo_n "checking for SSL_CTX_new in -lssl... " >&6; }
+if ${ac_cv_lib_ssl_SSL_CTX_new+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-lssl $EXTRA_LIBS $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char SSL_CTX_new ();
+int
+main ()
+{
+return SSL_CTX_new ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_lib_ssl_SSL_CTX_new=yes
+else
+  ac_cv_lib_ssl_SSL_CTX_new=no
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ssl_SSL_CTX_new" >&5
+$as_echo "$ac_cv_lib_ssl_SSL_CTX_new" >&6; }
+if test "x$ac_cv_lib_ssl_SSL_CTX_new" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LIBSSL 1
+_ACEOF
+
+  LIBS="-lssl $LIBS"
+
+else
+
+    if test $NEED_SSL = yes; then
+      as_fn_error $? "OpenSSL libraries are required" "$LINENO" 5
+    fi
+    BUILD_GENHASH=No
+
+fi
+
+if test $NEED_SSL = yes; then
+  KA_LIBS="$KA_LIBS $LIBS"
+fi
+GENHASH_LIBS="$GENHASH_LIBS $LIBS"
+unset LIBS
+
+# Introduced in OpenSSL ver 0.9.9
+LIBS=$OPENSSL_LIBS
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking SSL_set_tlsext_host_name() - may be a definition" >&5
+$as_echo_n "checking SSL_set_tlsext_host_name() - may be a definition... " >&6; }
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+    #include <openssl/ssl.h>
+    int main(void)
+    {
+      request_t req;
+      SSL_set_tlsext_host_name(req.ssl, "SSL");
+    }
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+
+else
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+
+$as_echo "#define _HAVE_SSL_SET_TLSEXT_HOST_NAME_  1 " >>confdefs.h
+
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+# SSL_CTX_set_verify_depth() introduced OpenSSL v0.9.5a
+for ac_func in SSL_CTX_set_verify_depth
+do :
+  ac_fn_c_check_func "$LINENO" "SSL_CTX_set_verify_depth" "ac_cv_func_SSL_CTX_set_verify_depth"
+if test "x$ac_cv_func_SSL_CTX_set_verify_depth" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_SSL_CTX_SET_VERIFY_DEPTH 1
+_ACEOF
+
+fi
+done
+
+
+# SSL_set0_rbio(), SSL_set0_wbio() OPENSSL_init_crypto() and TLS_method() introduced OpenSSL v1.1.0
+for ac_func in SSL_set0_rbio OPENSSL_init_crypto TLS_method
+do :
+  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
+ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
+if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
+_ACEOF
+
+fi
+done
+
+
+# In OpenSSL v1.1.1 the call to SSL_CTX_new() fails if OPENSSL_init_crypto() has been called with
+# OPENSSL_INIT_NO_LOAD_CONFIG. It does not fail in v1.1.0h and v1.1.1b.
+if test .$ac_cv_func_OPENSSL_init_crypto = .yes; then :
+
+	if test .$ac_cv_func_TLS_method = .yes; then :
+  method_func=TLS_method
+else
+  method_func=SSLv23_method
+fi
+	if test "$cross_compiling" = yes; then :
+
+	    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Cannot determine if need to OPENSSL_init_crypto() problem. Assuming yes for safety." >&5
+$as_echo "$as_me: WARNING: Cannot determine if need to OPENSSL_init_crypto() problem. Assuming yes for safety." >&2;}
+	    openssl_init_no_load_bug=1
+
+
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+#include <openssl/ssl.h>
+int
+main ()
+{
+
+	      const SSL_METHOD *meth;
+	      SSL_CTX *ctx;
+
+	      if (!OPENSSL_init_crypto(OPENSSL_INIT_NO_LOAD_CONFIG, NULL))
+		return 1;
+
+	      /* Initialize SSL context */
+	      meth = $method_func();
+	      if (!(ctx = SSL_CTX_new(meth)))
+		return 1;
+	      return 0;
+
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_run "$LINENO"; then :
+  openssl_init_no_load_bug=0
+else
+  openssl_init_no_load_bug=1
+fi
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
+fi
+
+	if test $openssl_init_no_load_bug -eq 1; then :
+
+$as_echo "#define HAVE_OPENSSL_INIT_NO_LOAD_CONFIG_BUG  1 " >>confdefs.h
+
+fi
+
+fi
+unset LIBS
+
+if test $BUILD_GENHASH = No; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: Unable to build genhash due to missing openssl headers/libraries" >&5
+$as_echo "$as_me: Unable to build genhash due to missing openssl headers/libraries" >&6;}
+  GENHASH_LIBS=
+fi
+
+ if test $BUILD_GENHASH = Yes; then
+  BUILD_GENHASH_TRUE=
+  BUILD_GENHASH_FALSE='#'
+else
+  BUILD_GENHASH_TRUE='#'
+  BUILD_GENHASH_FALSE=
+fi
+
+
+IPV4_DEVCONF=No
+if test .$enable_vrrp != .no; then
+    SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPP_FLAGS $kernelinc"
+  IPV4_DEVCONF=Yes
+  ac_fn_c_check_decl "$LINENO" "IPV4_DEVCONF_ARP_IGNORE" "ac_cv_have_decl_IPV4_DEVCONF_ARP_IGNORE" "#include <linux/ip.h>
+"
+if test "x$ac_cv_have_decl_IPV4_DEVCONF_ARP_IGNORE" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPV4_DEVCONF_ARP_IGNORE $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+else
+
+      IPV4_DEVCONF=No
+      break
+
+fi
+ac_fn_c_check_decl "$LINENO" "IPV4_DEVCONF_ACCEPT_LOCAL" "ac_cv_have_decl_IPV4_DEVCONF_ACCEPT_LOCAL" "#include <linux/ip.h>
+"
+if test "x$ac_cv_have_decl_IPV4_DEVCONF_ACCEPT_LOCAL" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPV4_DEVCONF_ACCEPT_LOCAL $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+else
+
+      IPV4_DEVCONF=No
+      break
+
+fi
+ac_fn_c_check_decl "$LINENO" "IPV4_DEVCONF_RP_FILTER" "ac_cv_have_decl_IPV4_DEVCONF_RP_FILTER" "#include <linux/ip.h>
+"
+if test "x$ac_cv_have_decl_IPV4_DEVCONF_RP_FILTER" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPV4_DEVCONF_RP_FILTER $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+else
+
+      IPV4_DEVCONF=No
+      break
+
+fi
+ac_fn_c_check_decl "$LINENO" "IPV4_DEVCONF_ARPFILTER" "ac_cv_have_decl_IPV4_DEVCONF_ARPFILTER" "#include <linux/ip.h>
+"
+if test "x$ac_cv_have_decl_IPV4_DEVCONF_ARPFILTER" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPV4_DEVCONF_ARPFILTER $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+else
+
+      IPV4_DEVCONF=No
+      break
+
+fi
+
+  if test $IPV4_DEVCONF = Yes; then
+
+$as_echo "#define _HAVE_IPV4_DEVCONF_  1 " >>confdefs.h
+
+    SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPV4_DEVCONF"
+  fi
+  for ac_header in linux/rtnetlink.h
+do :
+  ac_fn_c_check_header_compile "$LINENO" "linux/rtnetlink.h" "ac_cv_header_linux_rtnetlink_h" "$RTNETLINK_EXTRA_INCLUDE
+"
+if test "x$ac_cv_header_linux_rtnetlink_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LINUX_RTNETLINK_H 1
+_ACEOF
+
+else
+  as_fn_error $? "Unusable linux/rtnetlink.h" "$LINENO" 5
+fi
+
+done
+
+  CPPFLAGS="$SAV_CPPFLAGS"
+fi
+
+IPV6_ADVANCED_API=No
+ac_fn_c_check_decl "$LINENO" "IPV6_RECVHOPLIMIT" "ac_cv_have_decl_IPV6_RECVHOPLIMIT" "#include <netinet/ip6.h>
+"
+if test "x$ac_cv_have_decl_IPV6_RECVHOPLIMIT" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPV6_RECVHOPLIMIT $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+  IPV6_ADVANCED_API=Yes
+fi
+ac_fn_c_check_decl "$LINENO" "IPV6_RECVPKTINFO" "ac_cv_have_decl_IPV6_RECVPKTINFO" "#include <netinet/ip6.h>
+"
+if test "x$ac_cv_have_decl_IPV6_RECVPKTINFO" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPV6_RECVPKTINFO $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+  IPV6_ADVANCED_API=Yes
+fi
+
+if test $IPV6_ADVANCED_API = Yes; then :
+  SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPV6_ADVANCED_API"
+fi
+
+NETLINK_VER=0
+IPVS_USE_NL=No
+if test .$enable_lvs != .no -a .${enable_libnl} != .no; then
+  $PKG_CONFIG --exists libnl-3.0
+  if test $? -eq 0; then
+     if test -n "NL3"; then
+      KA_PKG_PFX=NL3
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I libnl-3.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other libnl-3.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+    if test .remove-requires = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires libnl-3.0`
+      var=`$PKG_CONFIG --libs-only-l libnl-3.0`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs libnl-3.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
+
+    fi
+
+    as_ac_Lib=`$as_echo "ac_cv_lib_$NL3_LIB_NAMES''_nl_socket_alloc" | $as_tr_sh`
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for nl_socket_alloc in -l$NL3_LIB_NAMES" >&5
+$as_echo_n "checking for nl_socket_alloc in -l$NL3_LIB_NAMES... " >&6; }
+if eval \${$as_ac_Lib+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-l$NL3_LIB_NAMES  $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char nl_socket_alloc ();
+int
+main ()
+{
+return nl_socket_alloc ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  eval "$as_ac_Lib=yes"
+else
+  eval "$as_ac_Lib=no"
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+eval ac_res=\$$as_ac_Lib
+	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+if eval test \"x\$"$as_ac_Lib"\" = x"yes"; then :
+
+	NETLINK_VER=3
+	NEED_NL3=No
+
+	 if test -n "GENL"; then
+      KA_PKG_PFX=GENL
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I libnl-genl-3.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other libnl-genl-3.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+    if test .remove-requires = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires libnl-genl-3.0`
+      var=`$PKG_CONFIG --libs-only-l libnl-genl-3.0`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs libnl-genl-3.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
+
+    fi
+
+	as_ac_Lib=`$as_echo "ac_cv_lib_$GENL_LIB_NAMES''_genl_connect" | $as_tr_sh`
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for genl_connect in -l$GENL_LIB_NAMES" >&5
+$as_echo_n "checking for genl_connect in -l$GENL_LIB_NAMES... " >&6; }
+if eval \${$as_ac_Lib+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-l$GENL_LIB_NAMES  $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char genl_connect ();
+int
+main ()
+{
+return genl_connect ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  eval "$as_ac_Lib=yes"
+else
+  eval "$as_ac_Lib=no"
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+eval ac_res=\$$as_ac_Lib
+	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
+$as_echo "$ac_res" >&6; }
+if eval test \"x\$"$as_ac_Lib"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_LIB$GENL_LIB_NAMES" | $as_tr_cpp` 1
+_ACEOF
+
+  LIBS="-l$GENL_LIB_NAMES $LIBS"
+
+else
+  as_fn_error $? "libnl-3 is installed but not libnl-gen-3. Please, install libnl-gen-3/libnl-genl-3." "$LINENO" 5
+fi
+
+	IPVS_USE_NL=Yes
+	if test .$enable_libnl_dynamic = .yes; then
+	   if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in $($PKG_CONFIG --cflags-only-I libnl-genl-3.0); do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in $($PKG_CONFIG --cflags-only-other libnl-genl-3.0); do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+
+    if test $LDD = :; then
+      as_fn_error $? "ldd is required for dynamic run-time linking support" "$LINENO" 5
+    fi
+
+    SAV_LIBS="$LIBS"
+    LIBS="$LIBS -l$GENL_LIB_NAMES"
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+      extern void genl_connect(void);
+      int main(void)
+      {
+	genl_connect();
+	return 0;
+      }
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+
+      LIB_DETAILS=`$LDD ./conftest$EXEEXT | grep $GENL_LIB_NAMES.so | sed -e "s/^[ \t]*//"`
+      LIB_NAME=`echo $LIB_DETAILS | sed -e "s/ .*//"`
+
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+    LIBS="$SAV_LIBS"
+
+
+cat >>confdefs.h <<_ACEOF
+#define NL3_GENL_LIB_NAME  "$LIB_NAME"
+_ACEOF
+
+	else
+	   if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I libnl-genl-3.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other libnl-genl-3.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+    if test . = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires libnl-genl-3.0`
+      var=`$PKG_CONFIG --libs-only-l libnl-genl-3.0`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs libnl-genl-3.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
+
+    fi
+
+	fi
+	NEED_NL3=Yes
+
+	if test $NEED_NL3 = Yes; then
+
+$as_echo "#define _HAVE_LIBNL3_  1 " >>confdefs.h
+
+	  SYSTEM_OPTIONS="$SYSTEM_OPTIONS LIBNL3"
+	  if test .$enable_libnl_dynamic = .yes; then
+	    SYSTEM_OPTIONS="$SYSTEM_OPTIONS LIBNL_DYNAMIC"
+	     if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in $($PKG_CONFIG --cflags-only-I libnl-3.0); do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in $($PKG_CONFIG --cflags-only-other libnl-3.0); do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+
+$as_echo "#define _LIBNL_DYNAMIC_  1 " >>confdefs.h
+
+	    NEED_LIBDL=Yes
+
+    if test $LDD = :; then
+      as_fn_error $? "ldd is required for dynamic run-time linking support" "$LINENO" 5
+    fi
+
+    SAV_LIBS="$LIBS"
+    LIBS="$LIBS -l$NL3_LIB_NAMES"
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+      extern void nl_socket_alloc(void);
+      int main(void)
+      {
+	nl_socket_alloc();
+	return 0;
+      }
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+
+      LIB_DETAILS=`$LDD ./conftest$EXEEXT | grep $NL3_LIB_NAMES.so | sed -e "s/^[ \t]*//"`
+      LIB_NAME=`echo $LIB_DETAILS | sed -e "s/ .*//"`
+
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+    LIBS="$SAV_LIBS"
+
+
+cat >>confdefs.h <<_ACEOF
+#define NL3_LIB_NAME  "$LIB_NAME"
+_ACEOF
+
+	  else
+	     if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I libnl-3.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other libnl-3.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+    if test . = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires libnl-3.0`
+      var=`$PKG_CONFIG --libs-only-l libnl-3.0`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs libnl-3.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
+
+    fi
+
+	  fi
+	fi
+
+fi
+
+  fi
+
+  if test $NETLINK_VER -eq 0; then
+    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for nl_socket_modify_cb in -lnl" >&5
+$as_echo_n "checking for nl_socket_modify_cb in -lnl... " >&6; }
+if ${ac_cv_lib_nl_nl_socket_modify_cb+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-lnl  $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char nl_socket_modify_cb ();
+int
+main ()
+{
+return nl_socket_modify_cb ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_lib_nl_nl_socket_modify_cb=yes
+else
+  ac_cv_lib_nl_nl_socket_modify_cb=no
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_nl_nl_socket_modify_cb" >&5
+$as_echo "$ac_cv_lib_nl_nl_socket_modify_cb" >&6; }
+if test "x$ac_cv_lib_nl_nl_socket_modify_cb" = xyes; then :
+
+	IPVS_USE_NL=Yes
+	NETLINK_VER=1
+
+$as_echo "#define _HAVE_LIBNL1_  1 " >>confdefs.h
+
+	SYSTEM_OPTIONS="$SYSTEM_OPTIONS LIBNL1"
+	if test .$enable_libnl_dynamic = .yes; then
+	   if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in $($PKG_CONFIG --cflags-only-I libnl-1); do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in $($PKG_CONFIG --cflags-only-other libnl-1); do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+	  CONFIG_OPTIONS="$CONFIG_OPTIONS LIBNL_DYNAMIC"
+
+$as_echo "#define _LIBNL_DYNAMIC_  1 " >>confdefs.h
+
+	  NEED_LIBDL=Yes
+
+    if test $LDD = :; then
+      as_fn_error $? "ldd is required for dynamic run-time linking support" "$LINENO" 5
+    fi
+
+    SAV_LIBS="$LIBS"
+    LIBS="$LIBS -lnl"
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+      extern void nl_socket_modify_cb(void);
+      int main(void)
+      {
+	nl_socket_modify_cb();
+	return 0;
+      }
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+
+      LIB_DETAILS=`$LDD ./conftest$EXEEXT | grep nl.so | sed -e "s/^[ \t]*//"`
+      LIB_NAME=`echo $LIB_DETAILS | sed -e "s/ .*//"`
+
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+    LIBS="$SAV_LIBS"
+
+
+cat >>confdefs.h <<_ACEOF
+#define NL_LIB_NAME  "$LIB_NAME"
+_ACEOF
+
+	else
+	   if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I libnl-1`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other libnl-1`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+    if test . = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires libnl-1`
+      var=`$PKG_CONFIG --libs-only-l libnl-1`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs libnl-1`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
+
+    fi
+
+	fi
+
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: keepalived will be built without libnl support." >&5
+$as_echo "$as_me: WARNING: keepalived will be built without libnl support." >&2;}
+
+fi
+
+  fi
+
+  if test $NETLINK_VER -ne 0; then
+    SAV_CPPFLAGS="$CPPFLAGS"
+    CPPFLAGS="$SAV_CPPFLAGS $NL3_CPPFLAGS"
+    for ac_header in netlink/netlink.h
+do :
+  ac_fn_c_check_header_mongrel "$LINENO" "netlink/netlink.h" "ac_cv_header_netlink_netlink_h" "$ac_includes_default"
+if test "x$ac_cv_header_netlink_netlink_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_NETLINK_NETLINK_H 1
+_ACEOF
+
+else
+  as_fn_error $? "netlink headers missing" "$LINENO" 5
+fi
+
+done
+
+    for ac_header in netlink/genl/ctrl.h netlink/genl/genl.h
+do :
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
+ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
+_ACEOF
+
+else
+  as_fn_error $? "netlink genl headers missing" "$LINENO" 5
+fi
+
+done
+
+    CPPFLAGS="$SAV_CPPFLAGS"
+  fi
+fi
+ if test $NETLINK_VER -eq 1; then
+  LIBNL1_TRUE=
+  LIBNL1_FALSE='#'
+else
+  LIBNL1_TRUE='#'
+  LIBNL1_FALSE=
+fi
+
+ if test $NETLINK_VER -eq 3; then
+  LIBNL3_TRUE=
+  LIBNL3_FALSE='#'
+else
+  LIBNL3_TRUE='#'
+  LIBNL3_FALSE=
+fi
+
+ if test .$enable_lvs != .no -a .$enable_libnl_dynamic = .yes -a $NETLINK_VER -ne 0; then
+  LIBNL_DYNAMIC_TRUE=
+  LIBNL_DYNAMIC_FALSE='#'
+else
+  LIBNL_DYNAMIC_TRUE='#'
+  LIBNL_DYNAMIC_FALSE=
+fi
+
+unset LIBS
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for magic_open in -lmagic" >&5
+$as_echo_n "checking for magic_open in -lmagic... " >&6; }
+if ${ac_cv_lib_magic_magic_open+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-lmagic  $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char magic_open ();
+int
+main ()
+{
+return magic_open ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_lib_magic_magic_open=yes
+else
+  ac_cv_lib_magic_magic_open=no
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_magic_magic_open" >&5
+$as_echo "$ac_cv_lib_magic_magic_open" >&6; }
+if test "x$ac_cv_lib_magic_magic_open" = xyes; then :
+
+
+$as_echo "#define _HAVE_LIBMAGIC_  1 " >>confdefs.h
+
+    KA_LIBS="$KA_LIBS -lmagic"
+
+fi
+
+unset LIBS
+
+ac_fn_c_check_decl "$LINENO" "RTA_ENCAP" "ac_cv_have_decl_RTA_ENCAP" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_RTA_ENCAP" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_RTA_ENCAP $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "RTA_EXPIRES" "ac_cv_have_decl_RTA_EXPIRES" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_RTA_EXPIRES" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_RTA_EXPIRES $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "RTA_NEWDST" "ac_cv_have_decl_RTA_NEWDST" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_RTA_NEWDST" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_RTA_NEWDST $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "RTA_PREF" "ac_cv_have_decl_RTA_PREF" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_RTA_PREF" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_RTA_PREF $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "FRA_SUPPRESS_PREFIXLEN" "ac_cv_have_decl_FRA_SUPPRESS_PREFIXLEN" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_FRA_SUPPRESS_PREFIXLEN" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_FRA_SUPPRESS_PREFIXLEN $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "FRA_SUPPRESS_IFGROUP" "ac_cv_have_decl_FRA_SUPPRESS_IFGROUP" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_FRA_SUPPRESS_IFGROUP" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_FRA_SUPPRESS_IFGROUP $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "FRA_TUN_ID" "ac_cv_have_decl_FRA_TUN_ID" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_FRA_TUN_ID" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_FRA_TUN_ID $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "RTAX_CC_ALGO" "ac_cv_have_decl_RTAX_CC_ALGO" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_RTAX_CC_ALGO" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_RTAX_CC_ALGO $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "RTAX_QUICKACK" "ac_cv_have_decl_RTAX_QUICKACK" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_RTAX_QUICKACK" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_RTAX_QUICKACK $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "RTEXT_FILTER_SKIP_STATS" "ac_cv_have_decl_RTEXT_FILTER_SKIP_STATS" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_RTEXT_FILTER_SKIP_STATS" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_RTEXT_FILTER_SKIP_STATS $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "FRA_L3MDEV" "ac_cv_have_decl_FRA_L3MDEV" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_FRA_L3MDEV" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_FRA_L3MDEV $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "FRA_UID_RANGE" "ac_cv_have_decl_FRA_UID_RANGE" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_FRA_UID_RANGE" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_FRA_UID_RANGE $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "RTAX_FASTOPEN_NO_COOKIE" "ac_cv_have_decl_RTAX_FASTOPEN_NO_COOKIE" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_RTAX_FASTOPEN_NO_COOKIE" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_RTAX_FASTOPEN_NO_COOKIE $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "RTA_VIA" "ac_cv_have_decl_RTA_VIA" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_RTA_VIA" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_RTA_VIA $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "FRA_OIFNAME" "ac_cv_have_decl_FRA_OIFNAME" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_FRA_OIFNAME" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_FRA_OIFNAME $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "FRA_PROTOCOL" "ac_cv_have_decl_FRA_PROTOCOL" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_FRA_PROTOCOL" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_FRA_PROTOCOL $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "FRA_IP_PROTO" "ac_cv_have_decl_FRA_IP_PROTO" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_FRA_IP_PROTO" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_FRA_IP_PROTO $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "FRA_SPORT_RANGE" "ac_cv_have_decl_FRA_SPORT_RANGE" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_FRA_SPORT_RANGE" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_FRA_SPORT_RANGE $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "FRA_DPORT_RANGE" "ac_cv_have_decl_FRA_DPORT_RANGE" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_FRA_DPORT_RANGE" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_FRA_DPORT_RANGE $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "RTA_TTL_PROPAGATE" "ac_cv_have_decl_RTA_TTL_PROPAGATE" "$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_RTA_TTL_PROPAGATE" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_RTA_TTL_PROPAGATE $ac_have_decl
+_ACEOF
+
+for flag in RTA_ENCAP RTA_EXPIRES RTA_NEWDST RTA_PREF FRA_SUPPRESS_PREFIXLEN FRA_SUPPRESS_IFGROUP FRA_TUN_ID RTAX_CC_ALGO RTAX_QUICKACK RTEXT_FILTER_SKIP_STATS FRA_L3MDEV FRA_UID_RANGE RTAX_FASTOPEN_NO_COOKIE RTA_VIA FRA_OIFNAME FRA_PROTOCOL FRA_IP_PROTO FRA_SPORT_RANGE FRA_DPORT_RANGE RTA_TTL_PROPAGATE; do
+  eval decl_var=\$ac_cv_have_decl_$flag
+  if test ${decl_var} = yes; then
+    SYSTEM_OPTIONS="$SYSTEM_OPTIONS "${flag}
+  fi
+done
+
+ac_fn_c_check_decl "$LINENO" "IFA_FLAGS" "ac_cv_have_decl_IFA_FLAGS" "#include <linux/if_addr.h>
+"
+if test "x$ac_cv_have_decl_IFA_FLAGS" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IFA_FLAGS $ac_have_decl
+_ACEOF
+
+for flag in IFA_FLAGS; do
+  eval decl_var=\$ac_cv_have_decl_$flag
+  if test ${decl_var} = yes; then
+    SYSTEM_OPTIONS="$SYSTEM_OPTIONS "${flag}
+  fi
+done
+
+ac_fn_c_check_decl "$LINENO" "IP_MULTICAST_ALL" "ac_cv_have_decl_IP_MULTICAST_ALL" "
+    #include <sys/socket.h>
+    #include <linux/in.h>
+
+"
+if test "x$ac_cv_have_decl_IP_MULTICAST_ALL" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IP_MULTICAST_ALL $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+    SYSTEM_OPTIONS="$SYSTEM_OPTIONS "IP_MULTICAST_ALL
+    # Check if definition is in netinet/in.h, since we can't include linux/in.h
+    # due to conflicting definitions
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+
+	    #include <netinet/in.h>
+	    int main(int argc, char **argv)
+	    {
+	      int i = IP_MULTICAST_ALL;
+	    }
+
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+
+else
+
+	# No - netinet/in.h doesn't have IP_MULTICAST_ALL
+	# Build a program that will output the value of the kernel's IP_MULTICAST_ALL
+	cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+
+		#include <sys/socket.h>
+		#include <linux/in.h>
+		#include <stdio.h>
+		int main(int argc, char **argv)
+		{
+		  printf("%d\n", IP_MULTICAST_ALL);
+		}
+
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+
+	    # Create local definition of IP_MULTICAST_ALL
+	    IMA=$(./conftest$EXEEXT)
+
+cat >>confdefs.h <<_ACEOF
+#define IP_MULTICAST_ALL  $IMA
+_ACEOF
+
+
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+
+
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+
+fi
+
+
+if test $ac_cv_have_decl_RTA_ENCAP = yes; then :
+
+    ac_fn_c_check_decl "$LINENO" "LWTUNNEL_ENCAP_MPLS" "ac_cv_have_decl_LWTUNNEL_ENCAP_MPLS" "#include <linux/lwtunnel.h>
+"
+if test "x$ac_cv_have_decl_LWTUNNEL_ENCAP_MPLS" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_LWTUNNEL_ENCAP_MPLS $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "LWTUNNEL_ENCAP_ILA" "ac_cv_have_decl_LWTUNNEL_ENCAP_ILA" "#include <linux/lwtunnel.h>
+"
+if test "x$ac_cv_have_decl_LWTUNNEL_ENCAP_ILA" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_LWTUNNEL_ENCAP_ILA $ac_have_decl
+_ACEOF
+
+    for flag in LWTUNNEL_ENCAP_MPLS LWTUNNEL_ENCAP_ILA; do
+      eval decl_var=\$ac_cv_have_decl_$flag
+      if test ${decl_var} = yes; then
+	SYSTEM_OPTIONS="$SYSTEM_OPTIONS ${flag}"
+      fi
+    done
+
+fi
+
+USE_IPTABLES=No
+USE_LIBIPTC=No
+USE_LIBIPSET=No
+if test .$enable_iptables != .no; then :
+
+    USE_IPTABLES=Yes
+
+$as_echo "#define _WITH_IPTABLES_  1 " >>confdefs.h
+
+    if test .${enable_libiptc} = .no; then
+      CONFIG_OPTIONS="$CONFIG_OPTIONS IPTABLES_CMD"
+    else
+      USE_LIBIPTC=Yes
+            SAV_CPPFLAGS="$CPPFLAGS"
+      CPPFLAGS="$CPPFLAGS $kernelinc"
+      for ac_header in linux/netfilter/x_tables.h libiptc/libip6tc.h libiptc/libiptc.h libiptc/libxtc.h
+do :
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
+ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
+_ACEOF
+
+else
+
+	  USE_LIBIPTC=No
+	  break
+
+fi
+
+done
+
+      CPPFLAGS="$SAV_CPPFLAGS"
+
+      if test $USE_LIBIPTC = Yes; then
+	 if test -n "IPTC"; then
+      KA_PKG_PFX=IPTC
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I --static libiptc`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other --static libiptc`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+    if test . = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires --static libiptc`
+      var=`$PKG_CONFIG --libs-only-l --static libiptc`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs --static libiptc`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
+
+    fi
+
+	LIBS="$IPTC_LIBS"
+	SAV_CPPFLAGS="$CPPFLAGS"
+	CPPFLAGS="$CPPFLAGS $kernelinc"
+	{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for iptc_init in -liptc" >&5
+$as_echo_n "checking for iptc_init in -liptc... " >&6; }
+if ${ac_cv_lib_iptc_iptc_init+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-liptc  $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char iptc_init ();
+int
+main ()
+{
+return iptc_init ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_lib_iptc_iptc_init=yes
+else
+  ac_cv_lib_iptc_iptc_init=no
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_iptc_iptc_init" >&5
+$as_echo "$ac_cv_lib_iptc_iptc_init" >&6; }
+if test "x$ac_cv_lib_iptc_iptc_init" = xyes; then :
+
+
+$as_echo "#define _HAVE_LIBIPTC_  1 " >>confdefs.h
+
+	    SYSTEM_OPTIONS="$SYSTEM_OPTIONS LIBIPTC"
+	    if test .${enable_libiptc_dynamic} != .yes; then
+	       if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I --static libiptc`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other --static libiptc`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+    if test . = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires --static libiptc`
+      var=`$PKG_CONFIG --libs-only-l --static libiptc`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs --static libiptc`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
+
+    fi
+
+	      CONFIG_OPTIONS="$CONFIG_OPTIONS LIBIPTC"
+	      	      KA_LIBS=`echo $KA_LIBS | sed -e "s/ -liptc//"`
+	      	      IPTC_LIBS=`echo $IPTC_LIBS | sed -e "s/ *-L[^ ]*  */ /" -e "s/ *-liptc */ /" -e "s/^  *$//"`
+	      if test ".$IPTC_LIBS" = .; then
+		KA_LIBS=`echo $KA_LIBS -lip4tc -lip6tc`
+	      fi
+	    else
+	       if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in $($PKG_CONFIG --cflags-only-I libiptc); do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in $($PKG_CONFIG --cflags-only-other libiptc); do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+	      CONFIG_OPTIONS="$CONFIG_OPTIONS LIBIPTC_DYNAMIC"
+
+$as_echo "#define _LIBIPTC_DYNAMIC_  1 " >>confdefs.h
+
+	      NEED_LIBDL=Yes
+
+    if test $LDD = :; then
+      as_fn_error $? "ldd is required for dynamic run-time linking support" "$LINENO" 5
+    fi
+
+    SAV_LIBS="$LIBS"
+    LIBS="$LIBS -lip4tc"
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+      extern void iptc_init(void);
+      int main(void)
+      {
+	iptc_init();
+	return 0;
+      }
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+
+      LIB_DETAILS=`$LDD ./conftest$EXEEXT | grep ip4tc.so | sed -e "s/^[ \t]*//"`
+      LIB_NAME=`echo $LIB_DETAILS | sed -e "s/ .*//"`
+
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+    LIBS="$SAV_LIBS"
+
+
+cat >>confdefs.h <<_ACEOF
+#define IP4TC_LIB_NAME  "$LIB_NAME"
+_ACEOF
+
+
+    if test $LDD = :; then
+      as_fn_error $? "ldd is required for dynamic run-time linking support" "$LINENO" 5
+    fi
+
+    SAV_LIBS="$LIBS"
+    LIBS="$LIBS -lip6tc"
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+      extern void ip6tc_init(void);
+      int main(void)
+      {
+	ip6tc_init();
+	return 0;
+      }
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+
+      LIB_DETAILS=`$LDD ./conftest$EXEEXT | grep ip6tc.so | sed -e "s/^[ \t]*//"`
+      LIB_NAME=`echo $LIB_DETAILS | sed -e "s/ .*//"`
+
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+    LIBS="$SAV_LIBS"
+
+
+cat >>confdefs.h <<_ACEOF
+#define IP6TC_LIB_NAME  "$LIB_NAME"
+_ACEOF
+
+	      LIBIPTC_DYNAMIC=Yes
+	    fi
+
+else
+  USE_LIBIPTC=No
+fi
+
+	CPPFLAGS="$SAV_CPPFLAGS"
+      fi
+
+      if test $USE_LIBIPTC = Yes; then
+		SAV_CPPFLAGS="$CPPFLAGS"
+	CPPFLAGS="$CPPFLAGS $kernelinc"
+	if test "${enable_libipset}" != no; then
+	  $PKG_CONFIG --exists libipset
+	  if test $? -eq 0; then
+	     if test -n "IPSET"; then
+      KA_PKG_PFX=IPSET
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I libipset`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other libipset`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+    if test . = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires libipset`
+      var=`$PKG_CONFIG --libs-only-l libipset`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs libipset`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
+
+    fi
+
+	  else
+	    IPSET_LIBS="-lipset"
+	  fi
+	  SAV_LIBS=$LIBS
+	  LIBS="$IPTC_LIBS $IPSET_LIBS"
+
+	  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ipset_session_init in -lipset" >&5
+$as_echo_n "checking for ipset_session_init in -lipset... " >&6; }
+if ${ac_cv_lib_ipset_ipset_session_init+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  ac_check_lib_save_LIBS=$LIBS
+LIBS="-lipset  $LIBS"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+/* Override any GCC internal prototype to avoid an error.
+   Use char because int might match the return type of a GCC
+   builtin and then its argument prototype would still apply.  */
+#ifdef __cplusplus
+extern "C"
+#endif
+char ipset_session_init ();
+int
+main ()
+{
+return ipset_session_init ();
+  ;
+  return 0;
+}
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+  ac_cv_lib_ipset_ipset_session_init=yes
+else
+  ac_cv_lib_ipset_ipset_session_init=no
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+LIBS=$ac_check_lib_save_LIBS
+fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ipset_ipset_session_init" >&5
+$as_echo "$ac_cv_lib_ipset_ipset_session_init" >&6; }
+if test "x$ac_cv_lib_ipset_ipset_session_init" = xyes; then :
+
+	      USE_LIBIPSET=Yes
+	      for ac_header in libipset/data.h libipset/linux_ip_set.h libipset/session.h libipset/types.h
+do :
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
+ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
+_ACEOF
+
+else
+
+		  USE_LIBIPSET=No
+		  break
+
+fi
+
+done
+
+
+	      if test $USE_LIBIPSET = Yes; then
+				EXTRA_INCLUDE=
+		cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+		  #include <linux/netfilter/xt_set.h>
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+  for ac_header in linux/netfilter/xt_set.h
+do :
+  ac_fn_c_check_header_mongrel "$LINENO" "linux/netfilter/xt_set.h" "ac_cv_header_linux_netfilter_xt_set_h" "$ac_includes_default"
+if test "x$ac_cv_header_linux_netfilter_xt_set_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LINUX_NETFILTER_XT_SET_H 1
+_ACEOF
+
+else
+  USE_LIBIPSET=No
+fi
+
+done
+
+else
+  ac_fn_c_check_header_compile "$LINENO" "linux/netfilter/xt_set.h" "ac_cv_header_linux_netfilter_xt_set_h" "#include <libipset/linux_ip_set.h>
+"
+if test "x$ac_cv_header_linux_netfilter_xt_set_h" = xyes; then :
+
+
+$as_echo "#define USE_LIBIPSET_LINUX_IP_SET_H  1 " >>confdefs.h
+
+		      EXTRA_INCLUDE="#include <libipset/linux_ip_set.h>"
+
+else
+  USE_LIBIPSET=No
+fi
+
+
+
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+	      fi
+
+	      if test $USE_LIBIPSET = Yes; then
+
+$as_echo "#define _HAVE_LIBIPSET_  1 " >>confdefs.h
+
+		$PKG_CONFIG --exists libipset
+		if test $? -eq 0; then
+		  if test .${enable_libipset_dynamic} = .no; then
+		     if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I libipset`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other libipset`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+    if test . = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires libipset`
+      var=`$PKG_CONFIG --libs-only-l libipset`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs libipset`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
+
+    fi
+
+		  else
+		     if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in $($PKG_CONFIG --cflags-only-I libipset); do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in $($PKG_CONFIG --cflags-only-other libipset); do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+		  fi
+		elif test .${enable_libipset_dynamic} = .no; then
+		  KA_LIBS="$KA_LIBS -lipset"
+		fi
+		if test .${enable_libipset_dynamic} != .no; then
+
+$as_echo "#define _LIBIPSET_DYNAMIC_  1 " >>confdefs.h
+
+		  CONFIG_OPTIONS="$CONFIG_OPTIONS LIBIPSET_DYNAMIC"
+		  NEED_LIBDL=Yes
+
+    if test $LDD = :; then
+      as_fn_error $? "ldd is required for dynamic run-time linking support" "$LINENO" 5
+    fi
+
+    SAV_LIBS="$LIBS"
+    LIBS="$LIBS -lipset"
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+      extern void ipset_session_init(void);
+      int main(void)
+      {
+	ipset_session_init();
+	return 0;
+      }
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+
+      LIB_DETAILS=`$LDD ./conftest$EXEEXT | grep ipset.so | sed -e "s/^[ \t]*//"`
+      LIB_NAME=`echo $LIB_DETAILS | sed -e "s/ .*//"`
+
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+    LIBS="$SAV_LIBS"
+
+
+cat >>confdefs.h <<_ACEOF
+#define IPSET_LIB_NAME  "$LIB_NAME"
+_ACEOF
+
+		else
+		  CONFIG_OPTIONS="$CONFIG_OPTIONS LIBIPSET"
+		fi
+
+						ac_fn_c_check_member "$LINENO" "struct xt_set_info_match_v1" "match_set.index" "ac_cv_member_struct_xt_set_info_match_v1_match_set_index" "
+		    $EXTRA_INCLUDE
+		    #include <linux/netfilter/xt_set.h>
+
+"
+if test "x$ac_cv_member_struct_xt_set_info_match_v1_match_set_index" = xyes; then :
+
+$as_echo "#define HAVE_XT_SET_INFO_MATCH_V1  1 " >>confdefs.h
+
+fi
+
+				ac_fn_c_check_member "$LINENO" "struct xt_set_info_match_v3" "match_set.index" "ac_cv_member_struct_xt_set_info_match_v3_match_set_index" "
+		    $EXTRA_INCLUDE
+		    #include <linux/netfilter/xt_set.h>
+
+"
+if test "x$ac_cv_member_struct_xt_set_info_match_v3_match_set_index" = xyes; then :
+
+$as_echo "#define HAVE_XT_SET_INFO_MATCH_V3  1 " >>confdefs.h
+
+fi
+
+				ac_fn_c_check_member "$LINENO" "struct xt_set_info_match_v4" "match_set.index" "ac_cv_member_struct_xt_set_info_match_v4_match_set_index" "
+		    $EXTRA_INCLUDE
+		    #include <linux/netfilter/xt_set.h>
+
+"
+if test "x$ac_cv_member_struct_xt_set_info_match_v4_match_set_index" = xyes; then :
+
+$as_echo "#define HAVE_XT_SET_INFO_MATCH_V4  1 " >>confdefs.h
+
+fi
+
+
+				cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+		  #include <linux/netfilter/ipset/ip_set.h>
+		  int main(void) { int var = IPSET_ATTR_IFACE; }
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+$as_echo "#define HAVE_IPSET_ATTR_IFACE  1 " >>confdefs.h
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+																						cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+		  #include <linux/netfilter/ipset/ip_set.h>
+		  #include <libipset/linux_ip_set.h>
+		  int main(void) {}
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+else
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+		     #include <linux/netfilter/ipset/ip_set.h>
+		     #ifdef _UAPI_IP_SET_H
+		     #error _UAPI_IP_SET_H defined
+		     #endif
+		     int main(void) {}
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
 
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+$as_echo "#define LIBIPSET_H_ADD_UAPI_IP_SET_H_GUARD 1" >>confdefs.h
+
+else
+
+$as_echo "#define LIBIPSET_H_ADD_IP_SET_H_GUARD 1" >>confdefs.h
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+	      fi
+
+	      if test $USE_LIBIPSET = Yes; then
+		{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for libipset version 7 or later" >&5
+$as_echo_n "checking for libipset version 7 or later... " >&6; }
+		cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
-int
-main ()
-{
+		    #include <libipset/session.h>
+
+		    void test_func(void)
+		    {
+		      ipset_session_init(NULL, NULL);
+		    }
 
-  ;
-  return 0;
-}
 _ACEOF
-ac_clean_files_save=$ac_clean_files
-ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out"
-# Try to create an executable without -o first, disregard a.out.
-# It will help us diagnose broken compilers, and finding out an intuition
-# of exeext.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5
-$as_echo_n "checking whether the C compiler works... " >&6; }
-ac_link_default=`$as_echo "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
+if ac_fn_c_try_compile "$LINENO"; then :
 
-# The possible output files:
-ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*"
+		    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
 
-ac_rmfiles=
-for ac_file in $ac_files
-do
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    * ) ac_rmfiles="$ac_rmfiles $ac_file";;
-  esac
-done
-rm -f $ac_rmfiles
+else
 
-if { { ac_try="$ac_link_default"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_link_default") 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then :
-  # Autoconf-2.13 could set the ac_cv_exeext variable to `no'.
-# So ignore a value of `no', otherwise this would lead to `EXEEXT = no'
-# in a Makefile.  We should not override ac_cv_exeext if it was cached,
-# so that the user can short-circuit this test for compilers unknown to
-# Autoconf.
-for ac_file in $ac_files ''
-do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj )
-	;;
-    [ab].out )
-	# We found the default executable, but exeext='' is most
-	# certainly right.
-	break;;
-    *.* )
-	if test "${ac_cv_exeext+set}" = set && test "$ac_cv_exeext" != no;
-	then :; else
-	   ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
+		    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+
+$as_echo "#define LIBIPSET_PRE_V7_COMPAT  1 " >>confdefs.h
+
+		    SYSTEM_OPTIONS="$SYSTEM_OPTIONS "LIBIPSET_PRE_V7
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+	      fi
+
+fi
+
+	  LIBS="$SAV_LIBS"
 	fi
-	# We set ac_cv_exeext here because the later test for it is not
-	# safe: cross compilers may not add the suffix if given an `-o'
-	# argument, so we may need to know it at that point already.
-	# Even if this section looks crufty: it has the advantage of
-	# actually working.
-	break;;
-    * )
-	break;;
-  esac
-done
-test "$ac_cv_exeext" = no && ac_cv_exeext=
+
+		ac_fn_c_check_decl "$LINENO" "XT_EXTENSION_MAXNAMELEN" "ac_cv_have_decl_XT_EXTENSION_MAXNAMELEN" "#include <linux/netfilter/x_tables.h>
+"
+if test "x$ac_cv_have_decl_XT_EXTENSION_MAXNAMELEN" = xyes; then :
 
 else
-  ac_file=''
+
+$as_echo "#define XT_EXTENSION_MAXNAMELEN  (XT_FUNCTION_MAXNAMELEN - 1) " >>confdefs.h
+
 fi
-if test -z "$ac_file"; then :
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-$as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 
-{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error 77 "C compiler cannot create executables
-See \`config.log' for more details" "$LINENO" 5; }
+
+	CPPFLAGS="$SAV_CPPFLAGS"
+      fi
+    fi
+    if test $USE_LIBIPTC = No -o .$LIBIPTC_DYNAMIC = .Yes; then :
+
+$as_echo "#define _USE_IPTABLES_CMD_  1 " >>confdefs.h
+
+fi
+
+fi
+ if test $USE_LIBIPTC = Yes; then
+  LIBIPTC_TRUE=
+  LIBIPTC_FALSE='#'
 else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+  LIBIPTC_TRUE='#'
+  LIBIPTC_FALSE=
+fi
+
+ if test $USE_LIBIPSET = Yes; then
+  LIBIPSET_TRUE=
+  LIBIPSET_FALSE='#'
+else
+  LIBIPSET_TRUE='#'
+  LIBIPSET_FALSE=
+fi
+
+ if test $USE_IPTABLES = Yes; then
+  IPTABLES_TRUE=
+  IPTABLES_FALSE='#'
+else
+  IPTABLES_TRUE='#'
+  IPTABLES_FALSE=
+fi
+
+ if test $USE_IPTABLES = Yes -a \( $USE_LIBIPTC = No -o .$LIBIPTC_DYNAMIC = .Yes \); then
+  IPTABLES_CMD_TRUE=
+  IPTABLES_CMD_FALSE='#'
+else
+  IPTABLES_CMD_TRUE='#'
+  IPTABLES_CMD_FALSE=
+fi
+
+ if test $USE_LIBIPTC = Yes -a .$LIBIPTC_DYNAMIC = .Yes; then
+  LIBIPTC_DYNAMIC_TRUE=
+  LIBIPTC_DYNAMIC_FALSE='#'
+else
+  LIBIPTC_DYNAMIC_TRUE='#'
+  LIBIPTC_DYNAMIC_FALSE=
+fi
+
+ if test $USE_LIBIPSET = Yes -a .${enable_libipset_dynamic} != .no; then
+  LIBIPSET_DYNAMIC_TRUE=
+  LIBIPSET_DYNAMIC_FALSE='#'
+else
+  LIBIPSET_DYNAMIC_TRUE='#'
+  LIBIPSET_DYNAMIC_FALSE=
+fi
+
+ if test $USE_IPTABLES = Yes -a $USE_LIBIPTC = Yes -a .$LIBIPTC_DYNAMIC = .Yes; then
+  REQUIRE_IPTABLES_LIBS_TRUE=
+  REQUIRE_IPTABLES_LIBS_FALSE='#'
+else
+  REQUIRE_IPTABLES_LIBS_TRUE='#'
+  REQUIRE_IPTABLES_LIBS_FALSE=
+fi
+
+unset LIBS
+
+USE_NFTABLES=No
+if test .${enable_nftables} != .no; then
+  USE_NFTABLES=Yes
+    SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPPFLAGS $kernelinc"
+  ac_fn_c_check_decl "$LINENO" "NFTA_TABLE_MAX" "ac_cv_have_decl_NFTA_TABLE_MAX" "#include <linux/netfilter/nf_tables.h>
+"
+if test "x$ac_cv_have_decl_NFTA_TABLE_MAX" = xyes; then :
+
+else
+
+     if test .${enable_nftables} = .yes; then :
+  as_fn_error $? "nftables header files missing/not useable" "$LINENO" 5
+fi
+     USE_NFTABLES=No
+
+fi
+
+
+  if test $USE_NFTABLES = Yes; then
+    $PKG_CONFIG --exists libnftnl
+    if test $? -ne 0; then
+      USE_NFTABLES=No
+      { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: libnftnl missing" >&5
+$as_echo "$as_me: WARNING: libnftnl missing" >&2;}
+    fi
+    $PKG_CONFIG --exists libmnl
+    if test $? -ne 0; then
+      USE_NFTABLES=No
+      { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: libmnl missing" >&5
+$as_echo "$as_me: WARNING: libmnl missing" >&2;}
+    fi
+
+    if test $USE_NFTABLES = Yes; then
+      # nft prior to version 0.8.3 does not support type ifname in sets. We can't check the version of
+      #  nft, but we can check the version of libnftnl. nft v0.8.3 required libnftnl v1.0.9, but so did
+      #  nft v0.8.2. So play safe, and require the next version.
+      #LIBNFTNL_VERSION=`printf "0x%2.2x%2.2x%2.2xU" \`pkg-config --modversion libnftnl | sed -e "s/\./ /g"\``
+      #AC_DEFINE_UNQUOTED([LIBNFTNL_VERSION], [ $LIBNFTNL_VERSION ], [libnftnl version in hex])
+
+       if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I libnftnl`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other libnftnl`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+    if test . = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires libnftnl`
+      var=`$PKG_CONFIG --libs-only-l libnftnl`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs libnftnl`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
+
+    fi
+
+       if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I libmnl`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other libmnl`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+    if test . = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires libmnl`
+      var=`$PKG_CONFIG --libs-only-l libmnl`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs libmnl`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
+
+    fi
+
+
+$as_echo "#define _WITH_NFTABLES_  1 " >>confdefs.h
+
+      CONFIG_OPTIONS="$CONFIG_OPTIONS NFTABLES"
+      { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether NFTNL_EXPR_LOOKUP_FLAGS is defined" >&5
+$as_echo_n "checking whether NFTNL_EXPR_LOOKUP_FLAGS is defined... " >&6; }
+      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+	#include <libnftnl/expr.h>
+	int main(void)
+	{
+	  int i = NFTNL_EXPR_LOOKUP_FLAGS;
+	  return 0;
+	}
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+
+	  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
 $as_echo "yes" >&6; }
+
+$as_echo "#define HAVE_NFTNL_EXPR_LOOKUP_FLAGS  1 " >>confdefs.h
+
+
+else
+
+	  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+      # nft dup from Linux 4.3
+      ac_fn_c_check_decl "$LINENO" "NFTA_DUP_MAX" "ac_cv_have_decl_NFTA_DUP_MAX" "#include <linux/netfilter/nf_tables.h>
+"
+if test "x$ac_cv_have_decl_NFTA_DUP_MAX" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_NFTA_DUP_MAX $ac_have_decl
+_ACEOF
+
+
+      for ac_header in libnftnl/udata.h
+do :
+  ac_fn_c_check_header_mongrel "$LINENO" "libnftnl/udata.h" "ac_cv_header_libnftnl_udata_h" "$ac_includes_default"
+if test "x$ac_cv_header_libnftnl_udata_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LIBNFTNL_UDATA_H 1
+_ACEOF
+
+          { $as_echo "$as_me:${as_lineno-$LINENO}: checking for nftnl_udata_put_u32" >&5
+$as_echo_n "checking for nftnl_udata_put_u32... " >&6; }
+          SAV_LIBS="$LIBS"
+          LIBS="$LIBS `$PKG_CONFIG --libs libnftnl`"
+          cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+	      #include <libnftnl/udata.h>
+	      int main(void)
+	      {
+	        nftnl_udata_put_u32(NULL, 0, 0);
+	        return 0;
+	      }
+
+_ACEOF
+if ac_fn_c_try_link "$LINENO"; then :
+
+	      { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+
+$as_echo "#define HAVE_NFTNL_UDATA_PUT_U32  1 " >>confdefs.h
+
+
+else
+
+	      { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+          LIBS="$SAV_LIBS"
+
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5
-$as_echo_n "checking for C compiler default output file name... " >&6; }
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5
-$as_echo "$ac_file" >&6; }
-ac_exeext=$ac_cv_exeext
 
-rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out
-ac_clean_files=$ac_clean_files_save
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5
-$as_echo_n "checking for suffix of executables... " >&6; }
-if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then :
-  # If both `conftest.exe' and `conftest' are `present' (well, observable)
-# catch `conftest.exe'.  For instance with Cygwin, `ls conftest' will
-# work properly (i.e., refer to `conftest.exe'), while it won't with
-# `rm'.
-for ac_file in conftest.exe conftest conftest.*; do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	  break;;
-    * ) break;;
-  esac
 done
+
+    fi
+  fi
+  CPPFLAGS="$SAV_CPPFLAGS"
+fi
+ if test $USE_NFTABLES = Yes; then
+  NFTABLES_TRUE=
+  NFTABLES_FALSE='#'
 else
-  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of executables: cannot compile and link
-See \`config.log' for more details" "$LINENO" 5; }
+  NFTABLES_TRUE='#'
+  NFTABLES_FALSE=
 fi
-rm -f conftest conftest$ac_cv_exeext
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5
-$as_echo "$ac_cv_exeext" >&6; }
 
-rm -f conftest.$ac_ext
-EXEEXT=$ac_cv_exeext
-ac_exeext=$EXEEXT
+unset LIBS
+
+if test $USE_IPTABLES = Yes -o $USE_NFTABLES = Yes; then :
+
+$as_echo "#define _WITH_FIREWALL_  1 " >>confdefs.h
+
+fi
+ if test $USE_IPTABLES = Yes -o $USE_NFTABLES = Yes; then
+  FIREWALL_TRUE=
+  FIREWALL_FALSE='#'
+else
+  FIREWALL_TRUE='#'
+  FIREWALL_FALSE=
+fi
+
+
+# Including <linux/if.h> and <net/if.h> can cause a namespace collision.
+# Later versions of the headers are OK if linux/if.h is included second
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for linux/if.h and net/if.h namespace collision" >&5
+$as_echo_n "checking for linux/if.h and net/if.h namespace collision... " >&6; }
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS $kernelinc"
 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
-#include <stdio.h>
-int
-main ()
-{
-FILE *f = fopen ("conftest.out", "w");
- return ferror (f) || fclose (f) != 0;
 
-  ;
-  return 0;
-}
+    #include <linux/if.h>
+    #include <net/if.h>
+
 _ACEOF
-ac_clean_files="$ac_clean_files conftest.out"
-# Check that the compiler produces executables we can run.  If not, either
-# the compiler is broken, or we cross compile.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5
-$as_echo_n "checking whether we are cross compiling... " >&6; }
-if test "$cross_compiling" != yes; then
-  { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-  if { ac_try='./conftest$ac_cv_exeext'
-  { { case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; }; then
-    cross_compiling=no
-  else
-    if test "$cross_compiling" = maybe; then
-	cross_compiling=yes
-    else
-	{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "cannot run C compiled programs.
-If you meant to cross compile, use \`--host'.
-See \`config.log' for more details" "$LINENO" 5; }
-    fi
-  fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5
-$as_echo "$cross_compiling" >&6; }
+if ac_fn_c_try_compile "$LINENO"; then :
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
 
-rm -f conftest.$ac_ext conftest$ac_cv_exeext conftest.out
-ac_clean_files=$ac_clean_files_save
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5
-$as_echo_n "checking for suffix of object files... " >&6; }
-if ${ac_cv_objext+:} false; then :
-  $as_echo_n "(cached) " >&6
 else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+
+$as_echo "#define _HAVE_NET_LINUX_IF_H_COLLISION_  1 " >>confdefs.h
+
+    SYSTEM_OPTIONS="$SYSTEM_OPTIONS NET_LINUX_IF_H_COLLISION"
+
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+CPPFLAGS="$SAV_CPPFLAGS"
+
+# Including <linux/if_ether.h> and <netinet/if_ether.h> causes a namespace collision
+# with musl libc, but the collision only occurs if linux/ip_ether.h is included
+# before netinet/if_ether.h. The problem is that we want to include them in that
+# order.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for linux/if_ether.h then netinet/if_ether.h namespace collision" >&5
+$as_echo_n "checking for linux/if_ether.h then netinet/if_ether.h namespace collision... " >&6; }
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS $kernelinc"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
-int
-main ()
-{
+    #include <linux/if_ether.h>
+    #include <netinet/if_ether.h>
 
-  ;
-  return 0;
-}
 _ACEOF
-rm -f conftest.o conftest.obj
-if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then :
-  for ac_file in conftest.o conftest.obj conftest.*; do
-  test -f "$ac_file" || continue;
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;;
-    *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'`
-       break;;
-  esac
-done
+if ac_fn_c_try_compile "$LINENO"; then :
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+
 else
-  $as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
 
-{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of object files: cannot compile
-See \`config.log' for more details" "$LINENO" 5; }
-fi
-rm -f conftest.$ac_cv_objext conftest.$ac_ext
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+
+$as_echo "#define _HAVE_NETINET_LINUX_IF_ETHER_H_COLLISION_  1 " >>confdefs.h
+
+    SYSTEM_OPTIONS="$SYSTEM_OPTIONS NETINET_LINUX_IF_ETHER_H_COLLISION"
+
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5
-$as_echo "$ac_cv_objext" >&6; }
-OBJEXT=$ac_cv_objext
-ac_objext=$OBJEXT
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using the GNU C compiler" >&5
-$as_echo_n "checking whether we are using the GNU C compiler... " >&6; }
-if ${ac_cv_c_compiler_gnu+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+CPPFLAGS="$SAV_CPPFLAGS"
+
+# Linux 4.5 to 4.5.4 has <libiptc/libiptc.h> indirectly including <net/if.h>
+# and <linux/if.h> which causes a namespace collision.
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for libiptc/libiptc.h linux/if.h and net/if.h namespace collision" >&5
+$as_echo_n "checking for libiptc/libiptc.h linux/if.h and net/if.h namespace collision... " >&6; }
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS $kernelinc"
+cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
-int
-main ()
-{
-#ifndef __GNUC__
-       choke me
-#endif
+    #include <libiptc/libiptc.h>
 
-  ;
-  return 0;
-}
 _ACEOF
 if ac_fn_c_try_compile "$LINENO"; then :
-  ac_compiler_gnu=yes
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+
 else
-  ac_compiler_gnu=no
+
+    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+
+$as_echo "#define _HAVE_LIBIPTC_LINUX_NET_IF_H_COLLISION_  1 " >>confdefs.h
+
+    SYSTEM_OPTIONS="$SYSTEM_OPTIONS LIBIPTC_LINUX_NET_IF_H_COLLISION"
+
 fi
 rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-ac_cv_c_compiler_gnu=$ac_compiler_gnu
+CPPFLAGS="$SAV_CPPFLAGS"
+
+IPVS_SYNCD_ATTRIBUTES=No
+IPVS_64BIT_STATS=No
+WITH_REGEX=No
+ENABLE_REGEX_DEBUG=No
+if test "$enable_lvs" != no; then
+  IPVS_SUPPORT=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS LVS"
+
+$as_echo "#define _WITH_LVS_  1 " >>confdefs.h
+
+
+    for ac_header in linux/ip_vs.h
+do :
+  ac_fn_c_check_header_mongrel "$LINENO" "linux/ip_vs.h" "ac_cv_header_linux_ip_vs_h" "$ac_includes_default"
+if test "x$ac_cv_header_linux_ip_vs_h" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LINUX_IP_VS_H 1
+_ACEOF
 
+            ac_fn_c_check_decl "$LINENO" "IP_VS_SVC_F_ONEPACKET" "ac_cv_have_decl_IP_VS_SVC_F_ONEPACKET" "#include <linux/ip_vs.h>
+"
+if test "x$ac_cv_have_decl_IP_VS_SVC_F_ONEPACKET" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5
-$as_echo "$ac_cv_c_compiler_gnu" >&6; }
-if test $ac_compiler_gnu = yes; then
-  GCC=yes
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IP_VS_SVC_F_ONEPACKET $ac_have_decl
+_ACEOF
+
+
+fi
+
+done
+
+
+  if test $IPVS_USE_NL = Yes; then
+
+$as_echo "#define LIBIPVS_USE_NL  1 " >>confdefs.h
+
+    SYSTEM_OPTIONS="$SYSTEM_OPTIONS LIBIPVS_NETLINK"
+  fi
+
+    SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPPFLAGS $kernelinc"
+
+    ac_fn_c_check_decl "$LINENO" "IPVS_DEST_ATTR_ADDR_FAMILY" "ac_cv_have_decl_IPVS_DEST_ATTR_ADDR_FAMILY" "#include <linux/ip_vs.h>
+"
+if test "x$ac_cv_have_decl_IPVS_DEST_ATTR_ADDR_FAMILY" = xyes; then :
+  ac_have_decl=1
 else
-  GCC=
+  ac_have_decl=0
 fi
-ac_test_CFLAGS=${CFLAGS+set}
-ac_save_CFLAGS=$CFLAGS
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5
-$as_echo_n "checking whether $CC accepts -g... " >&6; }
-if ${ac_cv_prog_cc_g+:} false; then :
-  $as_echo_n "(cached) " >&6
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPVS_DEST_ATTR_ADDR_FAMILY $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+  SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPVS_DEST_ATTR_ADDR_FAMILY"
+fi
+
+
+    IPVS_SYNCD_ATTRIBUTES=Yes
+  ac_fn_c_check_decl "$LINENO" "IPVS_DAEMON_ATTR_SYNC_MAXLEN" "ac_cv_have_decl_IPVS_DAEMON_ATTR_SYNC_MAXLEN" "#include <linux/ip_vs.h>
+"
+if test "x$ac_cv_have_decl_IPVS_DAEMON_ATTR_SYNC_MAXLEN" = xyes; then :
+  ac_have_decl=1
 else
-  ac_save_c_werror_flag=$ac_c_werror_flag
-   ac_c_werror_flag=yes
-   ac_cv_prog_cc_g=no
-   CFLAGS="-g"
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
+  ac_have_decl=0
+fi
 
-int
-main ()
-{
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPVS_DAEMON_ATTR_SYNC_MAXLEN $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
 
-  ;
-  return 0;
-}
+else
+
+      IPVS_SYNCD_ATTRIBUTES=No
+      break
+
+fi
+ac_fn_c_check_decl "$LINENO" "IPVS_DAEMON_ATTR_MCAST_GROUP" "ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_GROUP" "#include <linux/ip_vs.h>
+"
+if test "x$ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_GROUP" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPVS_DAEMON_ATTR_MCAST_GROUP $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+else
+
+      IPVS_SYNCD_ATTRIBUTES=No
+      break
+
+fi
+ac_fn_c_check_decl "$LINENO" "IPVS_DAEMON_ATTR_MCAST_GROUP6" "ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_GROUP6" "#include <linux/ip_vs.h>
+"
+if test "x$ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_GROUP6" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPVS_DAEMON_ATTR_MCAST_GROUP6 $ac_have_decl
 _ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_prog_cc_g=yes
+if test $ac_have_decl = 1; then :
+
 else
-  CFLAGS=""
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
 
-int
-main ()
-{
+      IPVS_SYNCD_ATTRIBUTES=No
+      break
 
-  ;
-  return 0;
-}
+fi
+ac_fn_c_check_decl "$LINENO" "IPVS_DAEMON_ATTR_MCAST_PORT" "ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_PORT" "#include <linux/ip_vs.h>
+"
+if test "x$ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_PORT" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPVS_DAEMON_ATTR_MCAST_PORT $ac_have_decl
 _ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
+if test $ac_have_decl = 1; then :
 
 else
-  ac_c_werror_flag=$ac_save_c_werror_flag
-	 CFLAGS="-g"
-	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
 
-int
-main ()
-{
+      IPVS_SYNCD_ATTRIBUTES=No
+      break
 
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_prog_cc_g=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+ac_fn_c_check_decl "$LINENO" "IPVS_DAEMON_ATTR_MCAST_TTL" "ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_TTL" "#include <linux/ip_vs.h>
+"
+if test "x$ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_TTL" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
 fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-   ac_c_werror_flag=$ac_save_c_werror_flag
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPVS_DAEMON_ATTR_MCAST_TTL $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+else
+
+      IPVS_SYNCD_ATTRIBUTES=No
+      break
+
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5
-$as_echo "$ac_cv_prog_cc_g" >&6; }
-if test "$ac_test_CFLAGS" = set; then
-  CFLAGS=$ac_save_CFLAGS
-elif test $ac_cv_prog_cc_g = yes; then
-  if test "$GCC" = yes; then
-    CFLAGS="-g -O2"
-  else
-    CFLAGS="-g"
+
+
+    if test $IPVS_SYNCD_ATTRIBUTES = Yes; then
+
+$as_echo "#define _HAVE_IPVS_SYNCD_ATTRIBUTES_  1 " >>confdefs.h
+
+    SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPVS_SYNCD_ATTRIBUTES"
   fi
+
+      if test "$enable_lvs_64bit_stats" != "no"; then
+    IPVS_64BIT_STATS=Yes
+    ac_fn_c_check_decl "$LINENO" "IPVS_SVC_ATTR_STATS64" "ac_cv_have_decl_IPVS_SVC_ATTR_STATS64" "#include <linux/ip_vs.h>
+"
+if test "x$ac_cv_have_decl_IPVS_SVC_ATTR_STATS64" = xyes; then :
+  ac_have_decl=1
 else
-  if test "$GCC" = yes; then
-    CFLAGS="-O2"
-  else
-    CFLAGS=
-  fi
+  ac_have_decl=0
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $CC option to accept ISO C89" >&5
-$as_echo_n "checking for $CC option to accept ISO C89... " >&6; }
-if ${ac_cv_prog_cc_c89+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_cv_prog_cc_c89=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <stdarg.h>
-#include <stdio.h>
-struct stat;
-/* Most of the following tests are stolen from RCS 5.7's src/conf.sh.  */
-struct buf { int x; };
-FILE * (*rcsopen) (struct buf *, struct stat *, int);
-static char *e (p, i)
-     char **p;
-     int i;
-{
-  return p[i];
-}
-static char *f (char * (*g) (char **, int), char **p, ...)
-{
-  char *s;
-  va_list v;
-  va_start (v,p);
-  s = g (p, va_arg (v,int));
-  va_end (v);
-  return s;
-}
 
-/* OSF 4.0 Compaq cc is some sort of almost-ANSI by default.  It has
-   function prototypes and stuff, but not '\xHH' hex character constants.
-   These don't provoke an error unfortunately, instead are silently treated
-   as 'x'.  The following induces an error, until -std is added to get
-   proper ANSI mode.  Curiously '\x00'!='x' always comes out true, for an
-   array size at least.  It's necessary to write '\x00'==0 to get something
-   that's true only with -std.  */
-int osf4_cc_array ['\x00' == 0 ? 1 : -1];
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPVS_SVC_ATTR_STATS64 $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
 
-/* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters
-   inside strings and character constants.  */
-#define FOO(x) 'x'
-int xlc6_cc_array[FOO(a) == 'x' ? 1 : -1];
+else
 
-int test (int i, double x);
-struct s1 {int (*f) (int a);};
-struct s2 {int (*f) (double a);};
-int pairnames (int, char **, FILE *(*)(struct buf *, struct stat *, int), int, int);
-int argc;
-char **argv;
-int
-main ()
-{
-return f (e, argv, 0) != argv[0]  ||  f (e, argv, 1) != argv[1];
-  ;
-  return 0;
-}
-_ACEOF
-for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std \
-	-Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__"
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_prog_cc_c89=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext
-  test "x$ac_cv_prog_cc_c89" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC
+	IPVS_64BIT_STATS=No
+	break
 
 fi
-# AC_CACHE_VAL
-case "x$ac_cv_prog_cc_c89" in
-  x)
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-$as_echo "none needed" >&6; } ;;
-  xno)
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-$as_echo "unsupported" >&6; } ;;
-  *)
-    CC="$CC $ac_cv_prog_cc_c89"
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5
-$as_echo "$ac_cv_prog_cc_c89" >&6; } ;;
-esac
-if test "x$ac_cv_prog_cc_c89" != xno; then :
-
+ac_fn_c_check_decl "$LINENO" "IPVS_DEST_ATTR_STATS64" "ac_cv_have_decl_IPVS_DEST_ATTR_STATS64" "#include <linux/ip_vs.h>
+"
+if test "x$ac_cv_have_decl_IPVS_DEST_ATTR_STATS64" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
 fi
 
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPVS_DEST_ATTR_STATS64 $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+else
+
+	IPVS_64BIT_STATS=No
+	break
 
-ac_aux_dir=
-for ac_dir in "$srcdir" "$srcdir/.." "$srcdir/../.."; do
-  if test -f "$ac_dir/install-sh"; then
-    ac_aux_dir=$ac_dir
-    ac_install_sh="$ac_aux_dir/install-sh -c"
-    break
-  elif test -f "$ac_dir/install.sh"; then
-    ac_aux_dir=$ac_dir
-    ac_install_sh="$ac_aux_dir/install.sh -c"
-    break
-  elif test -f "$ac_dir/shtool"; then
-    ac_aux_dir=$ac_dir
-    ac_install_sh="$ac_aux_dir/shtool install -c"
-    break
-  fi
-done
-if test -z "$ac_aux_dir"; then
-  as_fn_error $? "cannot find install-sh, install.sh, or shtool in \"$srcdir\" \"$srcdir/..\" \"$srcdir/../..\"" "$LINENO" 5
 fi
 
-# These three variables are undocumented and unsupported,
-# and are intended to be withdrawn in a future Autoconf release.
-# They can cause serious problems if a builder's source tree is in a directory
-# whose full name contains unusual characters.
-ac_config_guess="$SHELL $ac_aux_dir/config.guess"  # Please don't use this var.
-ac_config_sub="$SHELL $ac_aux_dir/config.sub"  # Please don't use this var.
-ac_configure="$SHELL $ac_aux_dir/configure"  # Please don't use this var.
+    if test $IPVS_64BIT_STATS = Yes; then
 
+$as_echo "#define _WITH_LVS_64BIT_STATS_  1 " >>confdefs.h
 
-# Find a good install program.  We prefer a C program (faster),
-# so one script is as good as another.  But avoid the broken or
-# incompatible versions:
-# SysV /etc/install, /usr/sbin/install
-# SunOS /usr/etc/install
-# IRIX /sbin/install
-# AIX /bin/install
-# AmigaOS /C/install, which installs bootblocks on floppy discs
-# AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag
-# AFS /usr/afsws/bin/install, which mishandles nonexistent args
-# SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
-# OS/2's system install, which has a completely different semantic
-# ./install, which can be erroneously created by make from ./install.sh.
-# Reject install programs that cannot install multiple files.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5
-$as_echo_n "checking for a BSD-compatible install... " >&6; }
-if test -z "$INSTALL"; then
-if ${ac_cv_path_install+:} false; then :
-  $as_echo_n "(cached) " >&6
+      SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPVS_64BIT_STATS"
+    fi
+  fi
+
+      ac_fn_c_check_decl "$LINENO" "IPVS_DEST_ATTR_TUN_TYPE" "ac_cv_have_decl_IPVS_DEST_ATTR_TUN_TYPE" "#include <linux/ip_vs.h>
+"
+if test "x$ac_cv_have_decl_IPVS_DEST_ATTR_TUN_TYPE" = xyes; then :
+  ac_have_decl=1
 else
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    # Account for people who put trailing slashes in PATH elements.
-case $as_dir/ in #((
-  ./ | .// | /[cC]/* | \
-  /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \
-  ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \
-  /usr/ucb/* ) ;;
-  *)
-    # OSF1 and SCO ODT 3.0 have their own names for install.
-    # Don't use installbsd from OSF since it installs stuff as root
-    # by default.
-    for ac_prog in ginstall scoinst install; do
-      for ac_exec_ext in '' $ac_executable_extensions; do
-	if as_fn_executable_p "$as_dir/$ac_prog$ac_exec_ext"; then
-	  if test $ac_prog = install &&
-	    grep dspmsg "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # AIX install.  It has an incompatible calling convention.
-	    :
-	  elif test $ac_prog = install &&
-	    grep pwplus "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # program-specific install script used by HP pwplus--don't use.
-	    :
-	  else
-	    rm -rf conftest.one conftest.two conftest.dir
-	    echo one > conftest.one
-	    echo two > conftest.two
-	    mkdir conftest.dir
-	    if "$as_dir/$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir" &&
-	      test -s conftest.one && test -s conftest.two &&
-	      test -s conftest.dir/conftest.one &&
-	      test -s conftest.dir/conftest.two
-	    then
-	      ac_cv_path_install="$as_dir/$ac_prog$ac_exec_ext -c"
-	      break 3
-	    fi
-	  fi
-	fi
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IPVS_DEST_ATTR_TUN_TYPE $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+
+$as_echo "#define _HAVE_IPVS_TUN_TYPE_  1 " >>confdefs.h
+
+      SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPVS_TUN_TYPE"
+
+fi
+
+
+    ac_fn_c_check_decl "$LINENO" "IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM" "ac_cv_have_decl_IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM" "#include <linux/ip_vs.h>
+"
+if test "x$ac_cv_have_decl_IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+
+$as_echo "#define _HAVE_IPVS_TUN_CSUM_  1 " >>confdefs.h
+
+      SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPVS_TUN_CSUM"
+
+fi
+
+
+    ac_fn_c_check_decl "$LINENO" "IP_VS_CONN_F_TUNNEL_TYPE_GRE" "ac_cv_have_decl_IP_VS_CONN_F_TUNNEL_TYPE_GRE" "#include <linux/ip_vs.h>
+"
+if test "x$ac_cv_have_decl_IP_VS_CONN_F_TUNNEL_TYPE_GRE" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IP_VS_CONN_F_TUNNEL_TYPE_GRE $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+
+$as_echo "#define _HAVE_IPVS_TUN_GRE_  1 " >>confdefs.h
+
+      SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPVS_TUN_GRE"
+
+fi
+
+
+  CPPFLAGS="$SAV_CPPFLAGS"
+
+    if test "$enable_regex" = yes; then :
+
+      $PKG_CONFIG --exists libpcre2-8
+      HAVE_PCRE2=$?
+      if test $HAVE_PCRE2 -ne 0; then :
+  as_fn_error $? "cannot find pcre library" "$LINENO" 5
+fi
+      { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pcre.h" >&5
+$as_echo_n "checking for pcre.h... " >&6; }
+      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+	#define PCRE2_CODE_UNIT_WIDTH 8
+	#include <pcre2.h>
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+	  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+	  WITH_REGEX=Yes
+	   if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I libpcre2-8`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other libpcre2-8`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
+
+
+    if test . = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires libpcre2-8`
+      var=`$PKG_CONFIG --libs-only-l libpcre2-8`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
       done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs libpcre2-8`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
     done
-    ;;
-esac
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
 
-  done
-IFS=$as_save_IFS
+    fi
 
-rm -rf conftest.one conftest.two conftest.dir
+
+$as_echo "#define _WITH_REGEX_CHECK_  1 " >>confdefs.h
+
+	  CONFIG_OPTIONS="$CONFIG_OPTIONS REGEX"
+
+else
+
+	  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+	  as_fn_error $? "pcre2.h is missing" "$LINENO" 5
 
 fi
-  if test "${ac_cv_path_install+set}" = set; then
-    INSTALL=$ac_cv_path_install
-  else
-    # As a last resort, use the slow shell script.  Don't cache a
-    # value for INSTALL within a source directory, because that will
-    # break other packages using the cache if that directory is
-    # removed, or if the value is a relative name.
-    INSTALL=$ac_install_sh
-  fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5
-$as_echo "$INSTALL" >&6; }
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+      if test "$enable_regex_timers" = yes; then
 
-# Use test -z because SunOS4 sh mishandles braces in ${var-val}.
-# It thinks the first close brace ends the variable substitution.
-test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}'
+$as_echo "#define _WITH_REGEX_TIMERS_  1 " >>confdefs.h
 
-test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}'
+      fi
 
-test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
+      if test "${enable_regex_debug}" = yes; then
 
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_STRIP+:} false; then :
-  $as_echo_n "(cached) " >&6
+$as_echo "#define _REGEX_DEBUG_  1 " >>confdefs.h
+
+	ENABLE_REGEX_DEBUG=Yes
+	CONFIG_OPTIONS="$CONFIG_OPTIONS REGEX_DEBUG"
+      fi
+
+fi
 else
-  if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
+  IPVS_SUPPORT=No
+fi
+ if test $IPVS_SUPPORT = Yes; then
+  WITH_IPVS_TRUE=
+  WITH_IPVS_FALSE='#'
 else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
+  WITH_IPVS_TRUE='#'
+  WITH_IPVS_FALSE=
+fi
+
+ if test $WITH_REGEX = Yes; then
+  WITH_REGEX_TRUE=
+  WITH_REGEX_FALSE='#'
+else
+  WITH_REGEX_TRUE='#'
+  WITH_REGEX_FALSE=
+fi
+
+
+VRRP_SUPPORT=No
+VRRP_AUTH_SUPPORT=No
+MACVLAN_SUPPORT=No
+ENABLE_JSON=No
+BFD_SUPPORT=No
+HAVE_CN_PROC=No
+if test "$enable_vrrp" != no; then
+  VRRP_SUPPORT=Yes
+
+$as_echo "#define _WITH_VRRP_  1 " >>confdefs.h
+
+  CONFIG_OPTIONS="$CONFIG_OPTIONS VRRP"
+
+    if test "${enable_vrrp_auth}" != no; then
+    VRRP_AUTH_SUPPORT=Yes
+
+$as_echo "#define _WITH_VRRP_AUTH_  1 " >>confdefs.h
+
+    CONFIG_OPTIONS="$CONFIG_OPTIONS VRRP_AUTH"
   fi
-done
-  done
-IFS=$as_save_IFS
 
+    SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPPFLAGS $kernelinc"
+  MACVLAN_SUPPORT=Yes
+    ac_fn_c_check_decl "$LINENO" "IFLA_MACVLAN_MODE" "ac_cv_have_decl_IFLA_MACVLAN_MODE" "
+      #include <sys/socket.h>
+      #include <linux/if_link.h>
+
+"
+if test "x$ac_cv_have_decl_IFLA_MACVLAN_MODE" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
 fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IFLA_MACVLAN_MODE $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+else
+
+      MACVLAN_SUPPORT=No
+      break
+
 fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-$as_echo "$STRIP" >&6; }
+ac_fn_c_check_decl "$LINENO" "MACVLAN_MODE_PRIVATE" "ac_cv_have_decl_MACVLAN_MODE_PRIVATE" "
+      #include <sys/socket.h>
+      #include <linux/if_link.h>
+
+"
+if test "x$ac_cv_have_decl_MACVLAN_MODE_PRIVATE" = xyes; then :
+  ac_have_decl=1
 else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
+  ac_have_decl=0
 fi
 
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_MACVLAN_MODE_PRIVATE $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+else
+
+      MACVLAN_SUPPORT=No
+      break
 
 fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_STRIP+:} false; then :
-  $as_echo_n "(cached) " >&6
+
+  if test $MACVLAN_SUPPORT = Yes; then
+
+$as_echo "#define _HAVE_VRRP_VMAC_  1 " >>confdefs.h
+
+    SYSTEM_OPTIONS="$SYSTEM_OPTIONS VRRP_VMAC"
+  fi
+  CPPFLAGS="$SAV_CPPFLAGS"
+
+    SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPPFLAGS $kernelinc"
+  IPVLAN_SUPPORT=Yes
+    ac_fn_c_check_decl "$LINENO" "IFLA_IPVLAN_MODE" "ac_cv_have_decl_IFLA_IPVLAN_MODE" "
+      #include <sys/socket.h>
+      #include <linux/if_link.h>
+
+"
+if test "x$ac_cv_have_decl_IFLA_IPVLAN_MODE" = xyes; then :
+  ac_have_decl=1
 else
-  if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IFLA_IPVLAN_MODE $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
 else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
+
+      IPVLAN_SUPPORT=No
+      break
+
+fi
+
+  if test $IPVLAN_SUPPORT = Yes; then
+
+$as_echo "#define _HAVE_VRRP_IPVLAN_  1 " >>confdefs.h
+
+    SYSTEM_OPTIONS="$SYSTEM_OPTIONS VRRP_IPVLAN"
   fi
-done
-  done
-IFS=$as_save_IFS
+  CPPFLAGS="$SAV_CPPFLAGS"
+
+    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+/* end confdefs.h.  */
+
+    #include <linux/if_link.h>
+    int main(void) { int var = IFLA_LINK_NETNSID; }
+
+_ACEOF
+if ac_fn_c_try_compile "$LINENO"; then :
+
+
+$as_echo "#define HAVE_IFLA_LINK_NETNSID  1 " >>confdefs.h
+
+      SYSTEM_OPTIONS="$SYSTEM_OPTIONS IFLA_LINK_NETNSID"
 
 fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+    if test "${enable_json}" = yes; then
+    ENABLE_JSON=Yes
+
+$as_echo "#define _WITH_JSON_  1 " >>confdefs.h
+
+    CONFIG_OPTIONS="$CONFIG_OPTIONS JSON"
+  fi
+
+    if test "${enable_bfd}" = yes; then
+    BFD_SUPPORT=Yes
+
+$as_echo "#define _WITH_BFD_  1 " >>confdefs.h
+
+    CONFIG_OPTIONS="$CONFIG_OPTIONS BFD"
+  fi
+
+    if test .$enable_track_process != .no; then :
+
+      SYSTEM_OPTIONS="$SYSTEM_OPTIONS CN_PROC"
+      HAVE_CN_PROC=Yes
+
+$as_echo "#define _WITH_CN_PROC_  1 " >>confdefs.h
+
+                              ac_fn_c_check_decl "$LINENO" "PROC_EVENT_SID" "ac_cv_have_decl_PROC_EVENT_SID" "#include <linux/cn_proc.h>
+"
+if test "x$ac_cv_have_decl_PROC_EVENT_SID" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
 fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-$as_echo "$ac_ct_STRIP" >&6; }
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_PROC_EVENT_SID $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "PROC_EVENT_PTRACE" "ac_cv_have_decl_PROC_EVENT_PTRACE" "#include <linux/cn_proc.h>
+"
+if test "x$ac_cv_have_decl_PROC_EVENT_PTRACE" = xyes; then :
+  ac_have_decl=1
 else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
+  ac_have_decl=0
 fi
 
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_PROC_EVENT_PTRACE $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "PROC_EVENT_COMM" "ac_cv_have_decl_PROC_EVENT_COMM" "#include <linux/cn_proc.h>
+"
+if test "x$ac_cv_have_decl_PROC_EVENT_COMM" = xyes; then :
+  ac_have_decl=1
 else
-  STRIP="$ac_cv_prog_STRIP"
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_PROC_EVENT_COMM $ac_have_decl
+_ACEOF
+ac_fn_c_check_decl "$LINENO" "PROC_EVENT_COREDUMP" "ac_cv_have_decl_PROC_EVENT_COREDUMP" "#include <linux/cn_proc.h>
+"
+if test "x$ac_cv_have_decl_PROC_EVENT_COREDUMP" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
 fi
 
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_PROC_EVENT_COREDUMP $ac_have_decl
+_ACEOF
+
+
+else
+  CONFIG_OPTIONS="$CONFIG_OPTIONS DISABLE_TRACK_PROCESS"
+fi
+fi
+ if test $VRRP_SUPPORT = Yes; then
+  WITH_VRRP_TRUE=
+  WITH_VRRP_FALSE='#'
+else
+  WITH_VRRP_TRUE='#'
+  WITH_VRRP_FALSE=
+fi
 
-# Check whether --enable-lvs-syncd was given.
-if test "${enable_lvs_syncd+set}" = set; then :
-  enableval=$enable_lvs_syncd;
+ if test $VRRP_AUTH_SUPPORT = Yes; then
+  VRRP_AUTH_TRUE=
+  VRRP_AUTH_FALSE='#'
+else
+  VRRP_AUTH_TRUE='#'
+  VRRP_AUTH_FALSE=
 fi
 
-# Check whether --enable-lvs was given.
-if test "${enable_lvs+set}" = set; then :
-  enableval=$enable_lvs;
+ if test $MACVLAN_SUPPORT = Yes; then
+  VMAC_TRUE=
+  VMAC_FALSE='#'
+else
+  VMAC_TRUE='#'
+  VMAC_FALSE=
 fi
 
-# Check whether --enable-vrrp was given.
-if test "${enable_vrrp+set}" = set; then :
-  enableval=$enable_vrrp;
+ if test $ENABLE_JSON = Yes; then
+  WITH_JSON_TRUE=
+  WITH_JSON_FALSE='#'
+else
+  WITH_JSON_TRUE='#'
+  WITH_JSON_FALSE=
 fi
 
+ if test $BFD_SUPPORT = Yes; then
+  WITH_BFD_TRUE=
+  WITH_BFD_FALSE='#'
+else
+  WITH_BFD_TRUE='#'
+  WITH_BFD_FALSE=
+fi
 
-# Check whether --with-kernel-dir was given.
-if test "${with_kernel_dir+set}" = set; then :
-  withval=$with_kernel_dir; kernelinc="$withval/include" kernelpath="$withval"
+ if test $HAVE_CN_PROC = Yes; then
+  CN_PROC_TRUE=
+  CN_PROC_FALSE='#'
 else
-  kernelinc="/usr/src/linux/include" kernelpath="/usr/src/linux"
+  CN_PROC_TRUE='#'
+  CN_PROC_FALSE=
 fi
 
 
-# Check whether --with-kernel-version was given.
-if test "${with_kernel_version+set}" = set; then :
-  withval=$with_kernel_version; kernelversion="$withval"
-else
-  kernelversion=""
+if test ${IPVS_SUPPORT} = No -a ${VRRP_SUPPORT} = No; then
+  as_fn_error $? "keepalived MUST be compiled with at least one of LVS or VRRP framework" "$LINENO" 5
 fi
 
-# Check whether --enable-fwmark was given.
-if test "${enable_fwmark+set}" = set; then :
-  enableval=$enable_fwmark;
+# Introduced in Linux 2.6.27 and glibc 2.9
+ac_fn_c_check_decl "$LINENO" "SOCK_NONBLOCK" "ac_cv_have_decl_SOCK_NONBLOCK" "#include <sys/socket.h>
+"
+if test "x$ac_cv_have_decl_SOCK_NONBLOCK" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
 fi
 
-# Check whether --enable-snmp was given.
-if test "${enable_snmp+set}" = set; then :
-  enableval=$enable_snmp;
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_SOCK_NONBLOCK $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+  SYSTEM_OPTIONS="$SYSTEM_OPTIONS SOCK_NONBLOCK"
 fi
 
-# Check whether --enable-sha1 was given.
-if test "${enable_sha1+set}" = set; then :
-  enableval=$enable_sha1;
+ if test $ac_cv_have_decl_SOCK_NONBLOCK = yes; then
+  SOCK_NONBLOCK_TRUE=
+  SOCK_NONBLOCK_FALSE='#'
+else
+  SOCK_NONBLOCK_TRUE='#'
+  SOCK_NONBLOCK_FALSE=
 fi
 
-# Check whether --enable-debug was given.
-if test "${enable_debug+set}" = set; then :
-  enableval=$enable_debug;
+
+# Introduced in Linux 2.6.27 and glibc 2.9
+ac_fn_c_check_decl "$LINENO" "SOCK_CLOEXEC" "ac_cv_have_decl_SOCK_CLOEXEC" "#include <sys/socket.h>
+"
+if test "x$ac_cv_have_decl_SOCK_CLOEXEC" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
 fi
 
-# Check whether --enable-profile was given.
-if test "${enable_profile+set}" = set; then :
-  enableval=$enable_profile;
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_SOCK_CLOEXEC $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+  SYSTEM_OPTIONS="$SYSTEM_OPTIONS SOCK_CLOEXEC"
 fi
 
 
+# Introduced in Linux 2.6.37
+ac_fn_c_check_decl "$LINENO" "IPVS_SVC_ATTR_PE_NAME" "ac_cv_have_decl_IPVS_SVC_ATTR_PE_NAME" "#include <linux/ip_vs.h>
+"
+if test "x$ac_cv_have_decl_IPVS_SVC_ATTR_PE_NAME" = xyes; then :
+
+
+$as_echo "#define _HAVE_PE_NAME_  1 " >>confdefs.h
+
 
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking how to run the C preprocessor" >&5
-$as_echo_n "checking how to run the C preprocessor... " >&6; }
-# On Suns, sometimes $CPP names a directory.
-if test -n "$CPP" && test -d "$CPP"; then
-  CPP=
 fi
-if test -z "$CPP"; then
-  if ${ac_cv_prog_CPP+:} false; then :
-  $as_echo_n "(cached) " >&6
+
+
+# Introduced in Linux 2.6.39
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE"
+ac_fn_c_check_decl "$LINENO" "O_PATH" "ac_cv_have_decl_O_PATH" "#include <fcntl.h>
+"
+if test "x$ac_cv_have_decl_O_PATH" = xyes; then :
+  ac_have_decl=1
 else
-      # Double quotes because CPP needs to be expanded
-    for CPP in "$CC -E" "$CC -E -traditional-cpp" "/lib/cpp"
-    do
-      ac_preproc_ok=false
-for ac_c_preproc_warn_flag in '' yes
-do
-  # Use a header file that comes with gcc, so configuring glibc
-  # with a fresh cross-compiler works.
-  # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-  # <limits.h> exists even on freestanding compilers.
-  # On the NeXT, cc -E runs the code through the compiler's parser,
-  # not just through cpp. "Syntax error" is here to catch this case.
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-		     Syntax error
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_O_PATH $ac_have_decl
 _ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
+if test $ac_have_decl = 1; then :
+
+    SYSTEM_OPTIONS="$SYSTEM_OPTIONS O_PATH"
+
+fi
+
+CPPFLAGS="$SAV_CPPFLAGS"
 
+ac_fn_c_check_decl "$LINENO" "GLOB_BRACE" "ac_cv_have_decl_GLOB_BRACE" "#include <glob.h>
+"
+if test "x$ac_cv_have_decl_GLOB_BRACE" = xyes; then :
+  ac_have_decl=1
 else
-  # Broken: fails on valid input.
-continue
+  ac_have_decl=0
 fi
-rm -f conftest.err conftest.i conftest.$ac_ext
 
-  # OK, works on sane cases.  Now check whether nonexistent headers
-  # can be detected and how.
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <ac_nonexistent.h>
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_GLOB_BRACE $ac_have_decl
 _ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
-  # Broken: success on invalid input.
-continue
-else
-  # Passes both tests.
-ac_preproc_ok=:
-break
+if test $ac_have_decl = 1; then :
+  SYSTEM_OPTIONS="$SYSTEM_OPTIONS GLOB_BRACE"
 fi
-rm -f conftest.err conftest.i conftest.$ac_ext
 
-done
-# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
-rm -f conftest.i conftest.err conftest.$ac_ext
-if $ac_preproc_ok; then :
-  break
+
+UNICAST_CHKSUM_COMPAT_SUPPORT=No
+if test .$enable_checksum_compat != .no; then
+  UNICAST_CHKSUM_COMPAT_SUPPORT=Yes
+
+$as_echo "#define _WITH_UNICAST_CHKSUM_COMPAT_  1 " >>confdefs.h
+
+  CONFIG_OPTIONS="$CONFIG_OPTIONS OLD_CHKSUM_COMPAT"
 fi
 
-    done
-    ac_cv_prog_CPP=$CPP
+FIB_ROUTING_SUPPORT=No
+if test .$enable_vrrp != .no -a .$enable_routes != .no; then
+  # Introduced in Linux 2.6.19
+  SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPPFLAGS $kernelinc"
+  ac_fn_c_check_decl "$LINENO" "FRA_SRC" "ac_cv_have_decl_FRA_SRC" "#include <sys/socket.h>
+      #include <linux/fib_rules.h>
+"
+if test "x$ac_cv_have_decl_FRA_SRC" = xyes; then :
+
+      FIB_ROUTING_SUPPORT=Yes
+
+$as_echo "#define _HAVE_FIB_ROUTING_  1 " >>confdefs.h
+
+      CONFIG_OPTIONS="$CONFIG_OPTIONS FIB_ROUTING"
 
 fi
-  CPP=$ac_cv_prog_CPP
+
+  CPPFLAGS="$SAV_CPPFLAGS"
+fi
+ if test $FIB_ROUTING_SUPPORT = Yes; then
+  FIB_ROUTING_TRUE=
+  FIB_ROUTING_FALSE='#'
 else
-  ac_cv_prog_CPP=$CPP
+  FIB_ROUTING_TRUE='#'
+  FIB_ROUTING_FALSE=
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $CPP" >&5
-$as_echo "$CPP" >&6; }
-ac_preproc_ok=false
-for ac_c_preproc_warn_flag in '' yes
-do
-  # Use a header file that comes with gcc, so configuring glibc
-  # with a fresh cross-compiler works.
-  # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-  # <limits.h> exists even on freestanding compilers.
-  # On the NeXT, cc -E runs the code through the compiler's parser,
-  # not just through cpp. "Syntax error" is here to catch this case.
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-		     Syntax error
-_ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
+
+
+if test .$enable_linkbeat = .no; then :
+
+    LINKBEAT_SUPPORT=No
+    CONFIG_OPTIONS="$CONFIG_OPTIONS NO_LINKBEAT"
 
 else
-  # Broken: fails on valid input.
-continue
+
+    LINKBEAT_SUPPORT=Yes
+
+$as_echo "#define _WITH_LINKBEAT_  1 " >>confdefs.h
+
+
 fi
-rm -f conftest.err conftest.i conftest.$ac_ext
 
-  # OK, works on sane cases.  Now check whether nonexistent headers
-  # can be detected and how.
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <ac_nonexistent.h>
-_ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
-  # Broken: success on invalid input.
-continue
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS $kernelinc"
+if test ${MACVLAN_SUPPORT} = Yes; then
+  # Introduced in Linux 3.17
+  ac_fn_c_check_decl "$LINENO" "IFLA_INET6_ADDR_GEN_MODE" "ac_cv_have_decl_IFLA_INET6_ADDR_GEN_MODE" "
+      #include <linux/if_link.h>
+
+"
+if test "x$ac_cv_have_decl_IFLA_INET6_ADDR_GEN_MODE" = xyes; then :
+  ac_have_decl=1
 else
-  # Passes both tests.
-ac_preproc_ok=:
-break
+  ac_have_decl=0
 fi
-rm -f conftest.err conftest.i conftest.$ac_ext
 
-done
-# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
-rm -f conftest.i conftest.err conftest.$ac_ext
-if $ac_preproc_ok; then :
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IFLA_INET6_ADDR_GEN_MODE $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+
+      SYSTEM_OPTIONS="$SYSTEM_OPTIONS INET6_ADDR_GEN_MODE"
+
+fi
+
+fi
+CPPFLAGS="$SAV_CPPFLAGS"
+
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS $kernelinc"
+if test ${MACVLAN_SUPPORT} = Yes; then
+  # Introduced in Linux 4.3
+  ac_fn_c_check_decl "$LINENO" "IFLA_VRF_MAX" "ac_cv_have_decl_IFLA_VRF_MAX" "
+      #include <linux/if_link.h>
 
+"
+if test "x$ac_cv_have_decl_IFLA_VRF_MAX" = xyes; then :
+  ac_have_decl=1
 else
-  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "C preprocessor \"$CPP\" fails sanity check
-See \`config.log' for more details" "$LINENO" 5; }
+  ac_have_decl=0
 fi
 
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_IFLA_VRF_MAX $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
 
+      SYSTEM_OPTIONS="$SYSTEM_OPTIONS VRF"
 
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5
-$as_echo_n "checking for grep that handles long lines and -e... " >&6; }
-if ${ac_cv_path_GREP+:} false; then :
+$as_echo "#define _HAVE_VRF_  1 " >>confdefs.h
+
+
+fi
+
+fi
+CPPFLAGS="$SAV_CPPFLAGS"
+
+SNMP_SUPPORT=No
+SNMP_KEEPALIVED_SUPPORT=No
+SNMP_VRRP_SUPPORT=No
+SNMP_RFC_SUPPORT=No
+SNMP_RFCV2_SUPPORT=No
+SNMP_RFCV3_SUPPORT=No
+SNMP_CHECKER_SUPPORT=No
+SNMP_V3_FOR_V2=No
+if test "$enable_snmp_keepalived" = yes; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: --enable-snmp-keepalived is obsolete. Use --enable-snmp-vrrp." >&5
+$as_echo "$as_me: WARNING: --enable-snmp-keepalived is obsolete. Use --enable-snmp-vrrp." >&2;}
+  enable_snmp_vrrp=$enable_snmp_keepalived
+fi
+if test "$enable_snmp" = yes -o \
+	"$enable_snmp_vrrp" = yes -o \
+	"$enable_snmp_checker" = yes -o \
+	"$enable_snmp_rfc" = yes -o \
+	"$enable_snmp_rfcv2" = yes -o \
+	"$enable_snmp_rfcv3" = yes; then
+  if test -n "$ac_tool_prefix"; then
+  # Extract the first word of "${ac_tool_prefix}net-snmp-config", so it can be a program name with args.
+set dummy ${ac_tool_prefix}net-snmp-config; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_path_NETSNMP_CONFIG+:} false; then :
   $as_echo_n "(cached) " >&6
 else
-  if test -z "$GREP"; then
-  ac_path_GREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_prog in grep ggrep; do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_GREP="$as_dir/$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_GREP" || continue
-# Check for GNU ac_path_GREP and select it if it is found.
-  # Check for GNU $ac_path_GREP
-case `"$ac_path_GREP" --version 2>&1` in
-*GNU*)
-  ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;;
-*)
-  ac_count=0
-  $as_echo_n 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    $as_echo 'GREP' >> "conftest.nl"
-    "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_GREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_GREP="$ac_path_GREP"
-      ac_path_GREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_GREP_found && break 3
-    done
-  done
+  case $NETSNMP_CONFIG in
+  [\\/]* | ?:[\\/]*)
+  ac_cv_path_NETSNMP_CONFIG="$NETSNMP_CONFIG" # Let the user override the test with a path.
+  ;;
+  *)
+  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_path_NETSNMP_CONFIG="$as_dir/$ac_word$ac_exec_ext"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
   done
 IFS=$as_save_IFS
-  if test -z "$ac_cv_path_GREP"; then
-    as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_GREP=$GREP
-fi
 
+  ;;
+esac
+fi
+NETSNMP_CONFIG=$ac_cv_path_NETSNMP_CONFIG
+if test -n "$NETSNMP_CONFIG"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $NETSNMP_CONFIG" >&5
+$as_echo "$NETSNMP_CONFIG" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5
-$as_echo "$ac_cv_path_GREP" >&6; }
- GREP="$ac_cv_path_GREP"
 
 
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
-$as_echo_n "checking for egrep... " >&6; }
-if ${ac_cv_path_EGREP+:} false; then :
+fi
+if test -z "$ac_cv_path_NETSNMP_CONFIG"; then
+  ac_pt_NETSNMP_CONFIG=$NETSNMP_CONFIG
+  # Extract the first word of "net-snmp-config", so it can be a program name with args.
+set dummy net-snmp-config; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_path_ac_pt_NETSNMP_CONFIG+:} false; then :
   $as_echo_n "(cached) " >&6
 else
-  if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
-   then ac_cv_path_EGREP="$GREP -E"
-   else
-     if test -z "$EGREP"; then
-  ac_path_EGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
+  case $ac_pt_NETSNMP_CONFIG in
+  [\\/]* | ?:[\\/]*)
+  ac_cv_path_ac_pt_NETSNMP_CONFIG="$ac_pt_NETSNMP_CONFIG" # Let the user override the test with a path.
+  ;;
+  *)
   as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
+for as_dir in $PATH
 do
   IFS=$as_save_IFS
   test -z "$as_dir" && as_dir=.
-    for ac_prog in egrep; do
     for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_EGREP="$as_dir/$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_EGREP" || continue
-# Check for GNU ac_path_EGREP and select it if it is found.
-  # Check for GNU $ac_path_EGREP
-case `"$ac_path_EGREP" --version 2>&1` in
-*GNU*)
-  ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
-*)
-  ac_count=0
-  $as_echo_n 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    $as_echo 'EGREP' >> "conftest.nl"
-    "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_EGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_EGREP="$ac_path_EGREP"
-      ac_path_EGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_EGREP_found && break 3
-    done
-  done
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_path_ac_pt_NETSNMP_CONFIG="$as_dir/$ac_word$ac_exec_ext"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
   done
 IFS=$as_save_IFS
-  if test -z "$ac_cv_path_EGREP"; then
-    as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
+
+  ;;
+esac
+fi
+ac_pt_NETSNMP_CONFIG=$ac_cv_path_ac_pt_NETSNMP_CONFIG
+if test -n "$ac_pt_NETSNMP_CONFIG"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_pt_NETSNMP_CONFIG" >&5
+$as_echo "$ac_pt_NETSNMP_CONFIG" >&6; }
 else
-  ac_cv_path_EGREP=$EGREP
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
 fi
 
-   fi
+  if test "x$ac_pt_NETSNMP_CONFIG" = x; then
+    NETSNMP_CONFIG="no"
+  else
+    case $cross_compiling:$ac_tool_warned in
+yes:)
+{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
+$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
+ac_tool_warned=yes ;;
+esac
+    NETSNMP_CONFIG=$ac_pt_NETSNMP_CONFIG
+  fi
+else
+  NETSNMP_CONFIG="$ac_cv_path_NETSNMP_CONFIG"
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
-$as_echo "$ac_cv_path_EGREP" >&6; }
- EGREP="$ac_cv_path_EGREP"
 
+  if test "$NETSNMP_CONFIG" = no; then
+    as_fn_error $? "*** unable to find net-snmp-config" "$LINENO" 5
+  fi
+  NETSNMP_LIBS_AGENT=`${NETSNMP_CONFIG} --netsnmp-agent-libs`
+  NETSNMP_LIBS_EXT=`${NETSNMP_CONFIG} --external-libs`
+  NETSNMP_LIBS="$NETSNMP_LIBS_AGENT $NETSNMP_LIBS_EXT"
+  NETSNMP_CFLAGS="`${NETSNMP_CONFIG} --base-cflags`"
+  NETSNMP_CPPFLAGS="-DNETSNMP_NO_INLINE"
+
+  # net-snmp-config adds compiler and linker options that were set at the time
+  # net-snmp was built, and this can include spec files that may not exist
+  # on the system building keepalived. We need to check if any spec files
+  # are specified, and if they do not exist on this system, then remove them
+  # from NETSNMP_LIBS or NETSNMP_CFLAGS.
+  # For further information, see https://bugzilla.redhat.com/show_bug.cgi?id=1544527
+  # and the other bugs referred to in it.
+  for spec in `echo $NETSNMP_LIBS | sed -e "s? ?\n?g" | grep "^-specs="`; do
+    SPEC_FILE=`echo $spec | sed -e "s?^-spaces=??"`
+    if test ! -f $SPEC_FILE; then
+      NETSNMP_LIBS=`echo $NETSNMP_LIBS | sed -e "s? *$spec *? ?"`
+      { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Removing $spec from NETSNMP_LIBS since spec file not installed" >&5
+$as_echo "$as_me: WARNING: Removing $spec from NETSNMP_LIBS since spec file not installed" >&2;}
+    fi
+  done
+  for spec in `echo $NETSNMP_CFLAGS | sed -e "s? ?\n?g" | grep "^-specs="`; do
+    SPEC_FILE=`echo $spec | sed -e "s?^-spaces=??"`
+    if test ! -f $SPEC_FILE; then
+      NETSNMP_CFLAGS=`echo $NETSNMP_CFLAGS | sed -e "s? *$spec *? ?"`
+      { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Removing $spec from NETSNMP_CFLAGS since spec file not installed" >&5
+$as_echo "$as_me: WARNING: Removing $spec from NETSNMP_CFLAGS since spec file not installed" >&2;}
+    fi
+  done
 
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ANSI C header files" >&5
-$as_echo_n "checking for ANSI C header files... " >&6; }
-if ${ac_cv_header_stdc+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
+  SAV_CFLAGS="$CFLAGS"
+  CFLAGS="$CFLAGS ${NETSNMP_CFLAGS}"
+  SAV_LIBS="$LIBS"
+  LIBS="$LIBS ${NETSNMP_LIBS}"
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler supports flag \"${NETSNMP_CFLAGS} ${NETSNMP_LIBS}\" from Net-SNMP" >&5
+$as_echo_n "checking whether C compiler supports flag \"${NETSNMP_CFLAGS} ${NETSNMP_LIBS}\" from Net-SNMP... " >&6; }
   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
-#include <stdlib.h>
-#include <stdarg.h>
-#include <string.h>
-#include <float.h>
 
-int
-main ()
-{
+      int main(void)
+      {
+	return 0;
+      }
 
-  ;
-  return 0;
-}
 _ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_header_stdc=yes
+if ac_fn_c_try_link "$LINENO"; then :
+
+      { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+
 else
-  ac_cv_header_stdc=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 
-if test $ac_cv_header_stdc = yes; then
-  # SunOS 4.x string.h does not declare mem*, contrary to ANSI.
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <string.h>
+     { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+     as_fn_error $? "*** incorrect CFLAGS from net-snmp-config" "$LINENO" 5
 
+fi
+rm -f core conftest.err conftest.$ac_objext \
+    conftest$ac_exeext conftest.$ac_ext
+
+  # Do we have subagent support?
+  for ac_func in netsnmp_enable_subagent
+do :
+  ac_fn_c_check_func "$LINENO" "netsnmp_enable_subagent" "ac_cv_func_netsnmp_enable_subagent"
+if test "x$ac_cv_func_netsnmp_enable_subagent" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_NETSNMP_ENABLE_SUBAGENT 1
 _ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "memchr" >/dev/null 2>&1; then :
 
 else
-  ac_cv_header_stdc=no
+  as_fn_error $? "*** no subagent support in net-snmp" "$LINENO" 5
 fi
-rm -f conftest*
+done
 
-fi
 
-if test $ac_cv_header_stdc = yes; then
-  # ISC 2.0.2 stdlib.h does not declare free, contrary to ANSI.
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <stdlib.h>
+  # check for net-snmp headers
+  # Some ancient distributions may miss <net-snmp/agent/util_funcs.h> header
+  SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPPFLAGS $NETSNMP_CFLAGS"
+  for ac_header in net-snmp/agent/agent_sysORTable.h net-snmp/agent/snmp_vars.h net-snmp/agent/util_funcs.h
+do :
+  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
+ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "
+      #include <net-snmp/net-snmp-config.h>
+      #include <net-snmp/net-snmp-includes.h>
+      #include <net-snmp/agent/net-snmp-agent-includes.h>
 
+"
+if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
+  cat >>confdefs.h <<_ACEOF
+#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
 _ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "free" >/dev/null 2>&1; then :
 
 else
-  ac_cv_header_stdc=no
+  as_fn_error $? "missing net-snmp headers" "$LINENO" 5
 fi
-rm -f conftest*
 
-fi
+done
 
-if test $ac_cv_header_stdc = yes; then
-  # /bin/cc in Irix-4.0.5 gets non-ANSI ctype macros unless using -ansi.
-  if test "$cross_compiling" = yes; then :
-  :
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <ctype.h>
-#include <stdlib.h>
-#if ((' ' & 0x0FF) == 0x020)
-# define ISLOWER(c) ('a' <= (c) && (c) <= 'z')
-# define TOUPPER(c) (ISLOWER(c) ? 'A' + ((c) - 'a') : (c))
-#else
-# define ISLOWER(c) \
-		   (('a' <= (c) && (c) <= 'i') \
-		     || ('j' <= (c) && (c) <= 'r') \
-		     || ('s' <= (c) && (c) <= 'z'))
-# define TOUPPER(c) (ISLOWER(c) ? ((c) | 0x40) : (c))
-#endif
 
-#define XOR(e, f) (((e) && !(f)) || (!(e) && (f)))
-int
-main ()
-{
-  int i;
-  for (i = 0; i < 256; i++)
-    if (XOR (islower (i), ISLOWER (i))
-	|| toupper (i) != TOUPPER (i))
-      return 2;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
+  SNMP_SUPPORT=Yes
 
-else
-  ac_cv_header_stdc=no
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-  conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
+  # NETSNMP_CFLAGS can have CPPFLAGS options, so separate them
+  NETSNMP_CPPFLAGS_XTRA=`echo " $NETSNMP_CFLAGS " | sed -e "s/ /  /g" -e "s/ -[^IDU] *-/ -/g" -e "s/ -[^IDU] *[^-][^ ]* / /g" -e "s/  */ /g"`
+  NETSNMP_CFLAGS=`echo " $NETSNMP_CFLAGS " | sed -e "s/ /  /g" -e "s/ -[IDU] *[^ ]* / /g" -e "s/  */ /g"`
+  KA_CFLAGS="$KA_CFLAGS $NETSNMP_CFLAGS"
+  KA_CPPFLAGS="$KA_CPPFLAGS $NETSNMP_CPPFLAGS $NETSNMP_CPPFLAGS_XTRA"
+
+  # NETSNMP_LIBS may have some LDFLAGS options, so separate them
+  NETSNMP_LDFLAGS_XTRA=`echo " $NETSNMP_LIBS " | sed -e "s/ /  /g" -e "s/ -l *[^ ]* /  /g" -e "s/  */ /g" -e "s/ -/ @-/g" | tr "@" "\n" | sed -e "s/^  *//" -e "s/  *$//" | sort -u | tr "\n" " "`
+  NETSNMP_LIBS=`echo " $NETSNMP_LIBS " | sed -e "s/ /  /g" -e "s/ \(-l *[^ ]*\) /@\1@/g" | tr "@" "\n" | grep  "^-l" | tr "\n" " " | sed -e "s/  */ /g"`
+  KA_LDFLAGS="$KA_LDFLAGS $NETSNMP_LDFLAGS $NETSNMP_LDFLAGS_XTRA"
+  KA_LIBS="$KA_LIBS $NETSNMP_LIBS"
+
+  if test "$enable_snmp_rfc" = yes; then
+    SNMP_RFCV2_SUPPORT=Yes
+    SNMP_RFCV3_SUPPORT=Yes
+  else
+    if test "$enable_snmp_rfcv2" = yes; then
+      SNMP_RFCV2_SUPPORT=Yes
+    fi
+    if test "$enable_snmp_rfcv3" = yes; then
+      SNMP_RFCV3_SUPPORT=Yes
+    fi
+  fi
+  if test ${SNMP_RFCV2_SUPPORT} = Yes -o \
+	  ${SNMP_RFCV3_SUPPORT} = Yes; then
+    if test ${VRRP_SUPPORT} != Yes; then
+      as_fn_error $? "RFC SNMP support requires VRRP" "$LINENO" 5
+    fi
+    SNMP_RFC_SUPPORT=Yes
+  fi
+  if test ${SNMP_RFCV3_SUPPORT} = Yes -a \
+	  "$enable_snmp_reply_v3_for_v2" != no; then
+
+$as_echo "#define _SNMP_REPLY_V3_FOR_V2_  1 " >>confdefs.h
+
+    SNMP_V3_FOR_V2=Yes
+    CONFIG_OPTIONS="$CONFIG_OPTIONS SNMP_V3_FOR_V2"
+  fi
+
+  if test "$enable_snmp" = yes; then
+    if test ${VRRP_SUPPORT} = Yes; then
+      SNMP_VRRP_SUPPORT=Yes
+    fi
+    if test ${IPVS_SUPPORT} = Yes; then
+      SNMP_CHECKER_SUPPORT=Yes
+    fi
+  else
+    if test "$enable_snmp_vrrp" = yes; then
+      SNMP_VRRP_SUPPORT=Yes
+    fi
+    if test "$enable_snmp_checker" = yes; then
+      SNMP_CHECKER_SUPPORT=Yes
+    fi
+  fi
+  if test ${VRRP_SUPPORT} != Yes -a \
+	  ${SNMP_VRRP_SUPPORT} = Yes; then
+    as_fn_error $? "VRRP SNMP support requires VRRP" "$LINENO" 5
+  fi
+  if test ${IPVS_SUPPORT} = No -a \
+	  ${SNMP_CHECKER_SUPPORT} = Yes; then
+    as_fn_error $? "CHECKER SNMP support requires checker" "$LINENO" 5
+  fi
+
+  if test ${SNMP_VRRP_SUPPORT} = Yes -o \
+	  ${SNMP_CHECKER_SUPPORT} = Yes; then
+    SNMP_KEEPALIVED_SUPPORT=Yes
+  fi
 
+  CPPFLAGS="$SAV_CPPFLAGS"
+  CFLAGS="$SAV_CFLAGS"
+  LIBS="$SAV_LIBS"
 fi
+
+if test $SNMP_SUPPORT = Yes; then
+
+$as_echo "#define _WITH_SNMP_  1 " >>confdefs.h
+
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_stdc" >&5
-$as_echo "$ac_cv_header_stdc" >&6; }
-if test $ac_cv_header_stdc = yes; then
+if test $SNMP_KEEPALIVED_SUPPORT = Yes; then
 
-$as_echo "#define STDC_HEADERS 1" >>confdefs.h
+$as_echo "#define _WITH_SNMP_KEEPALIVED_  1 " >>confdefs.h
 
 fi
+if test $SNMP_VRRP_SUPPORT = Yes; then
 
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for sys/wait.h that is POSIX.1 compatible" >&5
-$as_echo_n "checking for sys/wait.h that is POSIX.1 compatible... " >&6; }
-if ${ac_cv_header_sys_wait_h+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <sys/types.h>
-#include <sys/wait.h>
-#ifndef WEXITSTATUS
-# define WEXITSTATUS(stat_val) ((unsigned int) (stat_val) >> 8)
-#endif
-#ifndef WIFEXITED
-# define WIFEXITED(stat_val) (((stat_val) & 255) == 0)
-#endif
+$as_echo "#define _WITH_SNMP_VRRP_  1 " >>confdefs.h
 
-int
-main ()
-{
-  int s;
-  wait (&s);
-  s = WIFEXITED (s) ? WEXITSTATUS (s) : 1;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_header_sys_wait_h=yes
-else
-  ac_cv_header_sys_wait_h=no
+  CONFIG_OPTIONS="$CONFIG_OPTIONS SNMP_VRRP"
 fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+if test $SNMP_CHECKER_SUPPORT = Yes; then
+
+$as_echo "#define _WITH_SNMP_CHECKER_  1 " >>confdefs.h
+
+  CONFIG_OPTIONS="$CONFIG_OPTIONS SNMP_CHECKER"
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_sys_wait_h" >&5
-$as_echo "$ac_cv_header_sys_wait_h" >&6; }
-if test $ac_cv_header_sys_wait_h = yes; then
+if test $SNMP_RFC_SUPPORT = Yes; then
 
-$as_echo "#define HAVE_SYS_WAIT_H 1" >>confdefs.h
+$as_echo "#define _WITH_SNMP_RFC_  1 " >>confdefs.h
 
 fi
+if test $SNMP_RFCV2_SUPPORT = Yes; then
 
-# On IRIX 5.3, sys/types and inttypes.h are conflicting.
-for ac_header in sys/types.h sys/stat.h stdlib.h string.h memory.h strings.h \
-		  inttypes.h stdint.h unistd.h
-do :
-  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default
-"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
+$as_echo "#define _WITH_SNMP_RFCV2_  1 " >>confdefs.h
 
+  CONFIG_OPTIONS="$CONFIG_OPTIONS SNMP_RFCV2"
 fi
+if test $SNMP_RFCV3_SUPPORT = Yes; then
 
-done
+$as_echo "#define _WITH_SNMP_RFCV3_  1 " >>confdefs.h
 
+  CONFIG_OPTIONS="$CONFIG_OPTIONS SNMP_RFCV3"
+fi
+ if test $SNMP_SUPPORT = Yes; then
+  SNMP_TRUE=
+  SNMP_FALSE='#'
+else
+  SNMP_TRUE='#'
+  SNMP_FALSE=
+fi
 
-for ac_header in fcntl.h syslog.h unistd.h sys/ioctl.h sys/time.h
-do :
-  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
+ if test $SNMP_KEEPALIVED_SUPPORT = Yes; then
+  SNMP_KEEPALIVED_TRUE=
+  SNMP_KEEPALIVED_FALSE='#'
+else
+  SNMP_KEEPALIVED_TRUE='#'
+  SNMP_KEEPALIVED_FALSE=
+fi
 
+ if test $SNMP_VRRP_SUPPORT = Yes -o $SNMP_RFC_SUPPORT = Yes; then
+  SNMP_VRRP_TRUE=
+  SNMP_VRRP_FALSE='#'
+else
+  SNMP_VRRP_TRUE='#'
+  SNMP_VRRP_FALSE=
 fi
 
-done
+ if test $SNMP_CHECKER_SUPPORT = Yes; then
+  SNMP_CHECKER_TRUE=
+  SNMP_CHECKER_FALSE='#'
+else
+  SNMP_CHECKER_TRUE='#'
+  SNMP_CHECKER_FALSE=
+fi
 
-for ac_header in openssl/ssl.h openssl/md5.h openssl/err.h
-do :
-  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
+ if test $SNMP_RFCV2_SUPPORT = Yes -o $SNMP_RFCV3_SUPPORT = Yes; then
+  SNMP_RFC_TRUE=
+  SNMP_RFC_FALSE='#'
+else
+  SNMP_RFC_TRUE='#'
+  SNMP_RFC_FALSE=
+fi
 
+ if test $SNMP_RFCV2_SUPPORT = Yes; then
+  SNMP_RFCV2_TRUE=
+  SNMP_RFCV2_FALSE='#'
 else
-  as_fn_error $? "
-  !!! OpenSSL is not properly installed on your system. !!!
-  !!! Can not include OpenSSL headers files.            !!!" "$LINENO" 5
+  SNMP_RFCV2_TRUE='#'
+  SNMP_RFCV2_FALSE=
 fi
 
-done
+ if test $SNMP_RFCV3_SUPPORT = Yes; then
+  SNMP_RFCV3_TRUE=
+  SNMP_RFCV3_FALSE='#'
+else
+  SNMP_RFCV3_TRUE='#'
+  SNMP_RFCV3_FALSE=
+fi
 
-ac_fn_c_check_decl "$LINENO" "ETHERTYPE_IPV6" "ac_cv_have_decl_ETHERTYPE_IPV6" "#include <net/ethernet.h>
-"
-if test "x$ac_cv_have_decl_ETHERTYPE_IPV6" = xyes; then :
+ if test $SNMP_V3_FOR_V2 = Yes; then
+  SNMP_REPLY_V3_FOR_V2_TRUE=
+  SNMP_REPLY_V3_FOR_V2_FALSE='#'
+else
+  SNMP_REPLY_V3_FOR_V2_TRUE='#'
+  SNMP_REPLY_V3_FOR_V2_FALSE=
+fi
 
+if test $SNMP_SUPPORT = Yes; then :
+  SNMP_SERVICE=snmpd.service
 else
-  CFLAGS="$CFLAGS -DETHERTYPE_IPV6=0x86dd"
+  SNMP_SERVICE=
 fi
 
 
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for crypt in -lcrypt" >&5
-$as_echo_n "checking for crypt in -lcrypt... " >&6; }
-if ${ac_cv_lib_crypt_crypt+:} false; then :
+DBUS_SUPPORT=No
+DBUS_CREATE_INSTANCE=No
+if test "$enable_dbus" = yes; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for g_bus_own_name in -lgio-2.0" >&5
+$as_echo_n "checking for g_bus_own_name in -lgio-2.0... " >&6; }
+if ${ac_cv_lib_gio_2_0_g_bus_own_name+:} false; then :
   $as_echo_n "(cached) " >&6
 else
   ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcrypt  $LIBS"
+LIBS="-lgio-2.0  $LIBS"
 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
@@ -3779,139 +11608,182 @@ cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 #ifdef __cplusplus
 extern "C"
 #endif
-char crypt ();
+char g_bus_own_name ();
 int
 main ()
 {
-return crypt ();
+return g_bus_own_name ();
   ;
   return 0;
 }
 _ACEOF
 if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_crypt_crypt=yes
+  ac_cv_lib_gio_2_0_g_bus_own_name=yes
 else
-  ac_cv_lib_crypt_crypt=no
+  ac_cv_lib_gio_2_0_g_bus_own_name=no
 fi
 rm -f core conftest.err conftest.$ac_objext \
     conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypt_crypt" >&5
-$as_echo "$ac_cv_lib_crypt_crypt" >&6; }
-if test "x$ac_cv_lib_crypt_crypt" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBCRYPT 1
-_ACEOF
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_gio_2_0_g_bus_own_name" >&5
+$as_echo "$ac_cv_lib_gio_2_0_g_bus_own_name" >&6; }
+if test "x$ac_cv_lib_gio_2_0_g_bus_own_name" = xyes; then :
+
+       if test -n ""; then
+      KA_PKG_PFX=
+    else
+      KA_PKG_PFX=KA
+    fi
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CPPFLAGS
+    for item in `$PKG_CONFIG --cflags-only-I gio-2.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
+
+    ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_CFLAGS
+    for item in `$PKG_CONFIG --cflags-only-other gio-2.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
 
-  LIBS="-lcrypt $LIBS"
 
-else
-  as_fn_error $? "crypt() function is required" "$LINENO" 5
-fi
+    if test . = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires gio-2.0`
+      var=`$PKG_CONFIG --libs-only-l gio-2.0`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      ADD_NEW=
+   eval var=\$${KA_PKG_PFX}_LIBS
+    for item in `$PKG_CONFIG --libs gio-2.0`; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	ADD_NEW="$ADD_NEW $item"
+      fi
+    done
+    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
+
+    fi
+
+      DBUS_SUPPORT=Yes
+
+$as_echo "#define _WITH_DBUS_  1 " >>confdefs.h
+
+      CONFIG_OPTIONS="$CONFIG_OPTIONS DBUS"
+
+            SAV_CFLAGS=$CFLAGS
+      CFLAGS="$($PKG_CONFIG --cflags gio-2.0)"
+      SAV_LIBS=$LIBS
+      LIBS="$($PKG_CONFIG --libs gio-2.0)"
+      if test "$cross_compiling" = yes; then :
+
+	  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Cannot determine if need to call g_type_init(). Assuming yes for safety." >&5
+$as_echo "$as_me: WARNING: Cannot determine if need to call g_type_init(). Assuming yes for safety." >&2;}
+	  need_g_type_init=1
 
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for MD5_Init in -lcrypto" >&5
-$as_echo_n "checking for MD5_Init in -lcrypto... " >&6; }
-if ${ac_cv_lib_crypto_MD5_Init+:} false; then :
-  $as_echo_n "(cached) " >&6
 else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcrypto  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char MD5_Init ();
+	  #include <gio/gio.h>
 int
 main ()
 {
-return MD5_Init ();
+return !g_thread_functions_for_glib_use.mutex_lock;
   ;
   return 0;
 }
 _ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_crypto_MD5_Init=yes
+if ac_fn_c_try_run "$LINENO"; then :
+  need_g_type_init=0
 else
-  ac_cv_lib_crypto_MD5_Init=no
+  need_g_type_init=1
 fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
+rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+  conftest.$ac_objext conftest.beam conftest.$ac_ext
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_MD5_Init" >&5
-$as_echo "$ac_cv_lib_crypto_MD5_Init" >&6; }
-if test "x$ac_cv_lib_crypto_MD5_Init" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBCRYPTO 1
-_ACEOF
 
-  LIBS="-lcrypto $LIBS"
+      if test $need_g_type_init -eq 1; then
+
+$as_echo "#define DBUS_NEED_G_TYPE_INIT  1 " >>confdefs.h
+
+      fi
+      LIBS=$SAV_LIBS
+      CFLAGS=$SAV_CFLAGS
+      if test "$enable_dbus_create_instance" = yes; then
+
+$as_echo "#define _WITH_DBUS_CREATE_INSTANCE_  1 " >>confdefs.h
+
+	DBUS_CREATE_INSTANCE=Yes
+	CONFIG_OPTIONS="$CONFIG_OPTIONS DBUS_CREATE_INSTANCE"
+	{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: DBus create instance functionality is dangerous - why do you want it?" >&5
+$as_echo "$as_me: WARNING: DBus create instance functionality is dangerous - why do you want it?" >&2;}
+      fi
 
 else
-  as_fn_error $? "OpenSSL libraries are required" "$LINENO" 5
+  as_fn_error $? "DBUS support requested but libgio-2.0 not found." "$LINENO" 5
 fi
 
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for SSL_CTX_new in -lssl" >&5
-$as_echo_n "checking for SSL_CTX_new in -lssl... " >&6; }
-if ${ac_cv_lib_ssl_SSL_CTX_new+:} false; then :
-  $as_echo_n "(cached) " >&6
+  unset LIBS
+fi
+ if test $DBUS_SUPPORT = Yes; then
+  WITH_DBUS_TRUE=
+  WITH_DBUS_FALSE='#'
 else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-lssl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
+  WITH_DBUS_TRUE='#'
+  WITH_DBUS_FALSE=
+fi
 
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char SSL_CTX_new ();
-int
-main ()
-{
-return SSL_CTX_new ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_ssl_SSL_CTX_new=yes
+ if test $DBUS_CREATE_INSTANCE = Yes; then
+  DBUS_CREATE_INSTANCE_TRUE=
+  DBUS_CREATE_INSTANCE_FALSE='#'
 else
-  ac_cv_lib_ssl_SSL_CTX_new=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
+  DBUS_CREATE_INSTANCE_TRUE='#'
+  DBUS_CREATE_INSTANCE_FALSE=
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ssl_SSL_CTX_new" >&5
-$as_echo "$ac_cv_lib_ssl_SSL_CTX_new" >&6; }
-if test "x$ac_cv_lib_ssl_SSL_CTX_new" = xyes; then :
+
+
+SHA1_SUPPORT=No
+if test "${enable_sha1}" = yes; then
+  for ac_header in openssl/sha.h
+do :
+  ac_fn_c_check_header_mongrel "$LINENO" "openssl/sha.h" "ac_cv_header_openssl_sha_h" "$ac_includes_default"
+if test "x$ac_cv_header_openssl_sha_h" = xyes; then :
   cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBSSL 1
+#define HAVE_OPENSSL_SHA_H 1
 _ACEOF
 
-  LIBS="-lssl $LIBS"
-
 else
-  as_fn_error $? "OpenSSL libraries are required" "$LINENO" 5
+  as_fn_error $? "unable to find openssl/sha.h" "$LINENO" 5
 fi
 
+done
 
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for nl_socket_alloc in -lnl-3" >&5
-$as_echo_n "checking for nl_socket_alloc in -lnl-3... " >&6; }
-if ${ac_cv_lib_nl_3_nl_socket_alloc+:} false; then :
+  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for SHA1_Init in -lcrypto" >&5
+$as_echo_n "checking for SHA1_Init in -lcrypto... " >&6; }
+if ${ac_cv_lib_crypto_SHA1_Init+:} false; then :
   $as_echo_n "(cached) " >&6
 else
   ac_check_lib_save_LIBS=$LIBS
-LIBS="-lnl-3  $LIBS"
+LIBS="-lcrypto  $LIBS"
 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
@@ -3921,35 +11793,45 @@ cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 #ifdef __cplusplus
 extern "C"
 #endif
-char nl_socket_alloc ();
+char SHA1_Init ();
 int
 main ()
 {
-return nl_socket_alloc ();
+return SHA1_Init ();
   ;
   return 0;
 }
 _ACEOF
 if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_nl_3_nl_socket_alloc=yes
+  ac_cv_lib_crypto_SHA1_Init=yes
 else
-  ac_cv_lib_nl_3_nl_socket_alloc=no
+  ac_cv_lib_crypto_SHA1_Init=no
 fi
 rm -f core conftest.err conftest.$ac_objext \
     conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_nl_3_nl_socket_alloc" >&5
-$as_echo "$ac_cv_lib_nl_3_nl_socket_alloc" >&6; }
-if test "x$ac_cv_lib_nl_3_nl_socket_alloc" = xyes; then :
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_SHA1_Init" >&5
+$as_echo "$ac_cv_lib_crypto_SHA1_Init" >&6; }
+if test "x$ac_cv_lib_crypto_SHA1_Init" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LIBCRYPTO 1
+_ACEOF
+
+  LIBS="-lcrypto $LIBS"
+
+else
 
-    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for genl_connect in -lnl-genl-3" >&5
-$as_echo_n "checking for genl_connect in -lnl-genl-3... " >&6; }
-if ${ac_cv_lib_nl_genl_3_genl_connect+:} false; then :
+            { ac_cv_lib_crypto_SHA1_Init=; unset ac_cv_lib_crypto_SHA1_Init;}
+      SAV_CFLAGS=$CFLAGS
+      CFLAGS="$CFLAGS -fpic"
+      { $as_echo "$as_me:${as_lineno-$LINENO}: checking for SHA1_Init in -lcrypto" >&5
+$as_echo_n "checking for SHA1_Init in -lcrypto... " >&6; }
+if ${ac_cv_lib_crypto_SHA1_Init+:} false; then :
   $as_echo_n "(cached) " >&6
 else
   ac_check_lib_save_LIBS=$LIBS
-LIBS="-lnl-genl-3  $LIBS"
+LIBS="-lcrypto  $LIBS"
 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
@@ -3959,293 +11841,265 @@ cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 #ifdef __cplusplus
 extern "C"
 #endif
-char genl_connect ();
+char SHA1_Init ();
 int
 main ()
 {
-return genl_connect ();
+return SHA1_Init ();
   ;
   return 0;
 }
 _ACEOF
 if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_nl_genl_3_genl_connect=yes
+  ac_cv_lib_crypto_SHA1_Init=yes
 else
-  ac_cv_lib_nl_genl_3_genl_connect=no
+  ac_cv_lib_crypto_SHA1_Init=no
 fi
 rm -f core conftest.err conftest.$ac_objext \
     conftest$ac_exeext conftest.$ac_ext
 LIBS=$ac_check_lib_save_LIBS
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_nl_genl_3_genl_connect" >&5
-$as_echo "$ac_cv_lib_nl_genl_3_genl_connect" >&6; }
-if test "x$ac_cv_lib_nl_genl_3_genl_connect" = xyes; then :
+{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_SHA1_Init" >&5
+$as_echo "$ac_cv_lib_crypto_SHA1_Init" >&6; }
+if test "x$ac_cv_lib_crypto_SHA1_Init" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_LIBCRYPTO 1
+_ACEOF
 
-        USE_NL="LIBIPVS_USE_NL"
-        CFLAGS="$CFLAGS $(pkg-config --cflags libnl-genl-3.0)"
-	LIBS="$LIBS $(pkg-config --libs libnl-genl-3.0)"
+  LIBS="-lcrypto $LIBS"
 
 else
+  as_fn_error $? "SHA1 in OpenSSL required" "$LINENO" 5
+fi
 
-        as_fn_error $? "libnl-3 is installed but not libnl-gen-3. Please, install libnl-gen-3." "$LINENO" 5
+      CFLAGS=$SAV_CFLAGS
+      KA_CFLAGS="$KA_CFLAGS -fpic"
 
 fi
 
+  SHA1_SUPPORT=Yes
 
-else
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for nl_socket_modify_cb in -lnl" >&5
-$as_echo_n "checking for nl_socket_modify_cb in -lnl... " >&6; }
-if ${ac_cv_lib_nl_nl_socket_modify_cb+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-lnl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
+$as_echo "#define _WITH_SHA1_  1 " >>confdefs.h
 
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char nl_socket_modify_cb ();
-int
-main ()
-{
-return nl_socket_modify_cb ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_nl_nl_socket_modify_cb=yes
-else
-  ac_cv_lib_nl_nl_socket_modify_cb=no
 fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
+ if test $SHA1_SUPPORT = Yes; then
+  WITH_SHA1_TRUE=
+  WITH_SHA1_FALSE='#'
+else
+  WITH_SHA1_TRUE='#'
+  WITH_SHA1_FALSE=
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_nl_nl_socket_modify_cb" >&5
-$as_echo "$ac_cv_lib_nl_nl_socket_modify_cb" >&6; }
-if test "x$ac_cv_lib_nl_nl_socket_modify_cb" = xyes; then :
 
-        USE_NL="LIBIPVS_USE_NL"
-        CFLAGS="$CFLAGS -DFALLBACK_LIBNL1"
-        LIBS="$LIBS $(pkg-config --libs libnl-1)"
+unset LIBS
 
+SO_MARK_SUPPORT=No
+if test "${enable_fwmark}" != no; then
+  ac_fn_c_check_decl "$LINENO" "SO_MARK" "ac_cv_have_decl_SO_MARK" "#include <sys/socket.h>
+"
+if test "x$ac_cv_have_decl_SO_MARK" = xyes; then :
+  ac_have_decl=1
 else
+  ac_have_decl=0
+fi
 
-        USE_NL="LIBIPVS_DONTUSE_NL"
-        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: keepalived will be built without libnl support." >&5
-$as_echo "$as_me: WARNING: keepalived will be built without libnl support." >&2;}
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_SO_MARK $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
 
-fi
+      SO_MARK_SUPPORT=Yes
 
+$as_echo "#define _WITH_SO_MARK_  1 " >>confdefs.h
+
+      SYSTEM_OPTIONS="$SYSTEM_OPTIONS SO_MARK"
 
 fi
 
+fi
 
-CPPFLAGS="$CPPFLAGS -I$kernelinc"
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for kernel version" >&5
-$as_echo_n "checking for kernel version... " >&6; }
-if test "$cross_compiling" = yes; then :
+SAV_CFLAGS="$CFLAGS"
+ac_fn_c_check_decl "$LINENO" "CLONE_NEWNET" "ac_cv_have_decl_CLONE_NEWNET" "#include <sched.h>
+"
+if test "x$ac_cv_have_decl_CLONE_NEWNET" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_CLONE_NEWNET $ac_have_decl
+_ACEOF
 
-    LINUX_MAJOR="0"
-    LINUX_MINOR="0"
-    LINUX_PATCH="0"
+for ac_func in setns
+do :
+  ac_fn_c_check_func "$LINENO" "setns" "ac_cv_func_setns"
+if test "x$ac_cv_func_setns" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_SETNS 1
+_ACEOF
 
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
+fi
+done
 
-    #include <stdlib.h>
-    #include <stdio.h>
-    #include <linux/version.h>
-    #if !defined(UTS_RELEASE) && !defined(LINUX_VERSION_CODE)
-    #include <linux/utsrelease.h>
-    #endif
-    int main (void) {
-      FILE *fp = fopen ("linuxinfo", "w");
-      if (!fp) return 1;
-    #if defined(UTS_RELEASE)
-      fprintf (fp, "%s\n", UTS_RELEASE);
-    #elif defined(LINUX_VERSION_CODE)
-      fprintf (fp, "%d.%d.%d\n", LINUX_VERSION_CODE >> 16, (LINUX_VERSION_CODE >> 8) & 0xFF, LINUX_VERSION_CODE & 0xFF);
-    #else
-      fprintf (fp, "0.0.0\n"); /* Let's fail gently */
-    #endif
-      fclose (fp);
-      return 0;
-    }
+if test $ac_cv_func_setns = no; then :
 
+	{ ac_cv_func_setns=; unset ac_cv_func_setns;}
+	CFLAGS="$CFLAGS -fPIC"
+	for ac_func in setns
+do :
+  ac_fn_c_check_func "$LINENO" "setns" "ac_cv_func_setns"
+if test "x$ac_cv_func_setns" = xyes; then :
+  cat >>confdefs.h <<_ACEOF
+#define HAVE_SETNS 1
 _ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
 
-    LINUX_MAJOR=`cat linuxinfo | cut -d'.' -f1`
-    LINUX_MINOR=`cat linuxinfo | cut -d'.' -f2`
-    LINUX_PATCH=`cat linuxinfo | cut -d'.' -f3`
+fi
+done
+
 
+fi
+CFLAGS="$SAV_CFLAGS"
+ if test $ac_cv_have_decl_CLONE_NEWNET = yes; then
+  WITH_NAMESPACES_TRUE=
+  WITH_NAMESPACES_FALSE='#'
 else
+  WITH_NAMESPACES_TRUE='#'
+  WITH_NAMESPACES_FALSE=
+fi
 
-    LINUX_MAJOR="0"
-    LINUX_MINOR="0"
-    LINUX_PATCH="0"
 
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-  conftest.$ac_objext conftest.beam conftest.$ac_ext
+ac_fn_c_check_decl "$LINENO" "SCHED_RR" "ac_cv_have_decl_SCHED_RR" "#include <sched.h>
+"
+if test "x$ac_cv_have_decl_SCHED_RR" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
 fi
 
-  rm -f linuxinfo
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_SCHED_RR $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
 
-  if test "$kernelversion" = "2.4"; then
-    KERN="_KRNL_2_4_"
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: 2.4" >&5
-$as_echo "2.4" >&6; }
-  elif test "$kernelversion" = "2.6"; then
-    KERN="_KRNL_2_6_"
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: 2.6" >&5
-$as_echo "2.6" >&6; }
-  else
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: $LINUX_MAJOR.$LINUX_MINOR.$LINUX_PATCH" >&5
-$as_echo "$LINUX_MAJOR.$LINUX_MINOR.$LINUX_PATCH" >&6; }
-    if test "$LINUX_MAJOR" = "2" && test "$LINUX_MINOR" = "6"; then
-      KERN="_KRNL_2_6_"
-    elif test "$LINUX_MAJOR" = "2" && test "$LINUX_MINOR" = "4"; then
-      KERN="_KRNL_2_4_"
-    else
-      KERN="_KRNL_2_6_"
-    fi
-    if test "$LINUX_MAJOR" = "0" -a "$LINUX_MINOR" = "0" -a "$LINUX_PATCH" = "0"; then
-      { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Cannot determine Linux Kernel version." >&5
-$as_echo "$as_me: WARNING: Cannot determine Linux Kernel version." >&2;}
-    fi
-  fi
+    SCHED_RT_SUPPORT=Yes
 
+$as_echo "#define _HAVE_SCHED_RT_  1 " >>confdefs.h
 
+    SYSTEM_OPTIONS="$SYSTEM_OPTIONS SCHED_RT"
 
-IPVS_SUPPORT="_WITHOUT_LVS_"
-if test "$enable_lvs" != "no"; then
-  if test "$KERN" = "_KRNL_2_6_"; then
-    IPVS_SUPPORT="_WITH_LVS_"
-  else
-    ac_fn_c_check_header_mongrel "$LINENO" "net/ip_vs.h" "ac_cv_header_net_ip_vs_h" "$ac_includes_default"
-if test "x$ac_cv_header_net_ip_vs_h" = xyes; then :
-  IPVS_SUPPORT="_WITH_LVS_"
+        ac_fn_c_check_decl "$LINENO" "RLIMIT_RTTIME" "ac_cv_have_decl_RLIMIT_RTTIME" "#include <sys/resource.h>
+"
+if test "x$ac_cv_have_decl_RLIMIT_RTTIME" = xyes; then :
+  ac_have_decl=1
 else
+  ac_have_decl=0
+fi
+
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_RLIMIT_RTTIME $ac_have_decl
+_ACEOF
 
-        IPVS_SUPPORT="_WITHOUT_LVS_"
-        { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: keepalived will be built without LVS support." >&5
-$as_echo "$as_me: WARNING: keepalived will be built without LVS support." >&2;}
 
+        ac_fn_c_check_decl "$LINENO" "SCHED_RESET_ON_FORK" "ac_cv_have_decl_SCHED_RESET_ON_FORK" "#include <sched.h>
+"
+if test "x$ac_cv_have_decl_SCHED_RESET_ON_FORK" = xyes; then :
+  ac_have_decl=1
+else
+  ac_have_decl=0
 fi
 
+cat >>confdefs.h <<_ACEOF
+#define HAVE_DECL_SCHED_RESET_ON_FORK $ac_have_decl
+_ACEOF
+if test $ac_have_decl = 1; then :
+  SYSTEM_OPTIONS="$SYSTEM_OPTIONS SCHED_RESET_ON_FORK"
+else
 
-  fi
-fi
+$as_echo "#define SCHED_RESET_ON_FORK  0 " >>confdefs.h
 
-if test "$IPVS_SUPPORT" = "_WITHOUT_LVS_" -a "$enable_vrrp" = "no"; then
-  as_fn_error $? "keepalived MUST be compiled at least with LVS or VRRP framework" "$LINENO" 5
 fi
 
-IPVS_SYNCD="_WITHOUT_IPVS_SYNCD_"
-if test "$IPVS_SUPPORT" = "_WITH_LVS_"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for IPVS syncd support" >&5
-$as_echo_n "checking for IPVS syncd support... " >&6; }
-  if test "$KERN" = "_KRNL_2_6_"; then
-    IPVS_SYNCD="_HAVE_IPVS_SYNCD_"
-  elif test "_KRNL_2_4_"; then
-    IPVS_SYNCD="_HAVE_IPVS_SYNCD_"
-  else
-    IPVS_SYNCD="_WITHOUT_IPVS_SYNCD_"
-  fi
 
-  if test "${IPVS_SUPPORT}" = "_WITHOUT_LVS_" -o "$enable_lvs_syncd" = "no"; then
-    IPVS_SYNCD="_WITHOUT_IPVS_SYNCD_"
-  fi
+else
+
+    SCHED_RT_SUPPORT=No
 
-  if test "$IPVS_SYNCD" = "_HAVE_IPVS_SYNCD_"; then
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-  else
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-  fi
 fi
 
 
+GNU_STD_PATHS=No
+if test "${enable_gnu_std_paths}" = "yes"; then
 
-VRRP_SUPPORT="_WITHOUT_VRRP_"
-if test "$enable_vrrp" != "no"; then
-  VRRP_SUPPORT="_WITH_VRRP_"
+$as_echo "#define GNU_STD_PATHS  1 " >>confdefs.h
+
+  PID_DIR=$localstatedir
+elif test $RUN_DIR_SPECIFIED = Y -a .${with_run_dir} != .no; then
+  PID_DIR=`echo ${with_run_dir} | sed -e "s:/run$::"`	# Remove a trailing /run - somewill will include it sometime
+elif test -d /run; then
+  PID_DIR=
+else
+  PID_DIR=/var
 fi
 
-CPPFLAGS="$CPPFLAGS -I$kernelinc"
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for kernel macvlan support" >&5
-$as_echo_n "checking for kernel macvlan support... " >&6; }
+cat >>confdefs.h <<_ACEOF
+#define PID_DIR_ROOT  "${PID_DIR}"
+_ACEOF
+
+
+
+SAV_CFLAGS="$CFLAGS"
+CFLAGS="-Wformat -Werror=format $SAV_CPPFLAGS $KA_CPPFLAGS"
 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
 /* end confdefs.h.  */
 
-    #include <bits/sockaddr.h>
-    #include <linux/if_link.h>
-    int macvlan;
-
-int
-main ()
-{
+  #include <stdio.h>
+  #include <sys/resource.h>
+  int
+  main(int argc, char **argv)
+  {
+    rlim_t val = 23U;
+    printf("%lu %d %p", val, argc, argv);
 
-    macvlan = IFLA_MACVLAN_MODE;
-    macvlan = MACVLAN_MODE_PRIVATE;
+    return 0;
+  }
 
-  ;
-  return 0;
-}
 _ACEOF
 if ac_fn_c_try_compile "$LINENO"; then :
 
-    MACVLAN_SUPPORT=yes
+$as_echo "#define PRI_rlim_t \"lu\"" >>confdefs.h
 
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext;
+else
 
-  if test "$MACVLAN_SUPPORT" = "yes"; then
-    VRRP_VMAC="_HAVE_VRRP_VMAC_"
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-  else
-    VRRP_VMAC="_WITHOUT_VRRP_VMAC_"
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-  fi
+$as_echo "#define PRI_rlim_t \"llu\"" >>confdefs.h
 
+fi
+rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+CFLAGS="$SAV_CFLAGS"
 
+if test -z "$SPHINXBUILD"; then
+  SPHINXBUILDNAME=sphinx-build
+else
+  SPHINXBUILDNAME=${SPHINXBUILD}
+fi
 
-SNMP_SUPPORT="_WITHOUT_SNMP_"
-if test "$enable_snmp" = "yes"; then
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}net-snmp-config", so it can be a program name with args.
-set dummy ${ac_tool_prefix}net-snmp-config; ac_word=$2
+# Extract the first word of "$SPHINXBUILDNAME", so it can be a program name with args.
+set dummy $SPHINXBUILDNAME; ac_word=$2
 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
 $as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_NETSNMP_CONFIG+:} false; then :
+if ${ac_cv_prog_HAVE_SPHINX_BUILD+:} false; then :
   $as_echo_n "(cached) " >&6
 else
-  case $NETSNMP_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_NETSNMP_CONFIG="$NETSNMP_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+  if test -n "$HAVE_SPHINX_BUILD"; then
+  ac_cv_prog_HAVE_SPHINX_BUILD="$HAVE_SPHINX_BUILD" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
 for as_dir in $PATH
 do
   IFS=$as_save_IFS
   test -z "$as_dir" && as_dir=.
     for ac_exec_ext in '' $ac_executable_extensions; do
   if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_path_NETSNMP_CONFIG="$as_dir/$ac_word$ac_exec_ext"
+    ac_cv_prog_HAVE_SPHINX_BUILD="Yes"
     $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
     break 2
   fi
@@ -4253,532 +12107,557 @@ done
   done
 IFS=$as_save_IFS
 
-  ;;
-esac
+  test -z "$ac_cv_prog_HAVE_SPHINX_BUILD" && ac_cv_prog_HAVE_SPHINX_BUILD="No"
 fi
-NETSNMP_CONFIG=$ac_cv_path_NETSNMP_CONFIG
-if test -n "$NETSNMP_CONFIG"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $NETSNMP_CONFIG" >&5
-$as_echo "$NETSNMP_CONFIG" >&6; }
+fi
+HAVE_SPHINX_BUILD=$ac_cv_prog_HAVE_SPHINX_BUILD
+if test -n "$HAVE_SPHINX_BUILD"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $HAVE_SPHINX_BUILD" >&5
+$as_echo "$HAVE_SPHINX_BUILD" >&6; }
 else
   { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
 $as_echo "no" >&6; }
 fi
 
 
-fi
-if test -z "$ac_cv_path_NETSNMP_CONFIG"; then
-  ac_pt_NETSNMP_CONFIG=$NETSNMP_CONFIG
-  # Extract the first word of "net-snmp-config", so it can be a program name with args.
-set dummy net-snmp-config; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_ac_pt_NETSNMP_CONFIG+:} false; then :
-  $as_echo_n "(cached) " >&6
+ if test $HAVE_SPHINX_BUILD = Yes; then
+  BUILD_DOCS_TRUE=
+  BUILD_DOCS_FALSE='#'
 else
-  case $ac_pt_NETSNMP_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_ac_pt_NETSNMP_CONFIG="$ac_pt_NETSNMP_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_path_ac_pt_NETSNMP_CONFIG="$as_dir/$ac_word$ac_exec_ext"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
+  BUILD_DOCS_TRUE='#'
+  BUILD_DOCS_FALSE=
+fi
+
+
+MEM_CHECK=No
+MEM_CHECK_LOG=No
+if test "${enable_mem_check}" = "yes"; then
+  MEM_CHECK=Yes
+
+$as_echo "#define _MEM_CHECK_  1 " >>confdefs.h
+
+  CONFIG_OPTIONS="$CONFIG_OPTIONS MEM_CHECK"
+  if test "${enable_mem_check_log}" = "yes"; then
+    MEM_CHECK_LOG=Yes
+
+$as_echo "#define _MEM_CHECK_LOG_  1 " >>confdefs.h
+
+    CONFIG_OPTIONS="$CONFIG_OPTIONS MEM_CHECK_LOG"
   fi
-done
-  done
-IFS=$as_save_IFS
+fi
 
-  ;;
-esac
+TIMER_CHECK=No
+if test "${enable_timer_check}" = "yes"; then
+  TIMER_CHECK=Yes
+
+$as_echo "#define _TIMER_CHECK_  1 " >>confdefs.h
+
+  CONFIG_OPTIONS="$CONFIG_OPTIONS TIMER_CHECK"
 fi
-ac_pt_NETSNMP_CONFIG=$ac_cv_path_ac_pt_NETSNMP_CONFIG
-if test -n "$ac_pt_NETSNMP_CONFIG"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_pt_NETSNMP_CONFIG" >&5
-$as_echo "$ac_pt_NETSNMP_CONFIG" >&6; }
+
+if test "${enable_debug}" = yes; then
+
+$as_echo "#define _DEBUG_  1 " >>confdefs.h
+
+  ENABLE_DEBUG=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS DEBUG"
 else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
+  ENABLE_DEBUG=No
+fi
+ if test $ENABLE_DEBUG = Yes; then
+  DEBUG_TRUE=
+  DEBUG_FALSE='#'
+else
+  DEBUG_TRUE='#'
+  DEBUG_FALSE=
 fi
 
-  if test "x$ac_pt_NETSNMP_CONFIG" = x; then
-    NETSNMP_CONFIG="no"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    NETSNMP_CONFIG=$ac_pt_NETSNMP_CONFIG
-  fi
+
+if test "${enable_netlink_timers}" = yes; then
+
+$as_echo "#define _NETLINK_TIMERS_  1 " >>confdefs.h
+
+  ENABLE_NETLINK_TIMERS=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS NETLINK_TIMERS"
 else
-  NETSNMP_CONFIG="$ac_cv_path_NETSNMP_CONFIG"
+  ENABLE_NETLINK_TIMERS=No
 fi
 
-    if test x"$NETSNMP_CONFIG" = x"no"; then
-      as_fn_error $? "unable to find net-snmp-config" "$LINENO" 5
-    fi
-    NETSNMP_LIBS=`${NETSNMP_CONFIG} --agent-libs`
-    #NETSNMP_CFLAGS="`${NETSNMP_CONFIG} --base-cflags`"
-    #CFLAGS="${NETSNMP_CFLAGS} $CFLAGS"
-    LIBS="${NETSNMP_LIBS} $LIBS"
-    { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler supports flag \"${NETSNMP_LIBS}\" from Net-SNMP" >&5
-$as_echo_n "checking whether C compiler supports flag \"${NETSNMP_LIBS}\" from Net-SNMP... " >&6; }
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
+if test "${enable_smtp_alert_debug}" = yes; then
 
-int main(void);
+$as_echo "#define _SMTP_ALERT_DEBUG_  1 " >>confdefs.h
 
-int
-main ()
-{
+  ENABLE_SMTP_ALERT_DEBUG=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS SMTP_ALERT_DEBUG"
+  ENABLE_LOG_FILE_APPEND=Yes
+else
+  ENABLE_SMTP_ALERT_DEBUG=No
+fi
 
-{
-  return 0;
-}
+if test "${enable_stacktrace}" = yes; then
 
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
+$as_echo "#define _WITH_STACKTRACE_  1 " >>confdefs.h
+
+  ENABLE_STACKTRACE=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS STACKTRACE"
+  KA_LDFLAGS="$KA_LDFLAGS -rdynamic"
 else
+  ENABLE_STACKTRACE=No
+fi
 
-     { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-     as_fn_error $? "incorrect CFLAGS from net-snmp-config" "$LINENO" 5
+if test "${enable_dump_threads}" = yes; then
+
+$as_echo "#define _WITH_DUMP_THREADS_  1 " >>confdefs.h
+
+  ENABLE_DUMP_THREADS=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS DUMP_THREADS"
+else
+  ENABLE_DUMP_THREADS=No
 fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
 
-   # Do we have a usable <net-snmp/agent/util_funcs.h> header?
-    for ac_header in net-snmp/agent/util_funcs.h
-do :
-  ac_fn_c_check_header_compile "$LINENO" "net-snmp/agent/util_funcs.h" "ac_cv_header_net_snmp_agent_util_funcs_h" "
-#include <net-snmp/net-snmp-config.h>
-#include <net-snmp/net-snmp-includes.h>
-#include <net-snmp/library/snmp_transport.h>
-#include <net-snmp/agent/net-snmp-agent-includes.h>
-#include <net-snmp/agent/snmp_vars.h>
+if test "${enable_epoll_debug}" = yes; then
 
-"
-if test "x$ac_cv_header_net_snmp_agent_util_funcs_h" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_NET_SNMP_AGENT_UTIL_FUNCS_H 1
-_ACEOF
+$as_echo "#define _EPOLL_DEBUG_  1 " >>confdefs.h
+
+  ENABLE_EPOLL_DEBUG=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS EPOLL_DEBUG"
+else
+  ENABLE_EPOLL_DEBUG=No
+fi
+
+if test "${enable_epoll_thread_dump}" = yes; then
+
+$as_echo "#define _EPOLL_THREAD_DUMP_  1 " >>confdefs.h
 
+  ENABLE_EPOLL_THREAD_DUMP=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS EPOLL_THREAD_DUMP"
+else
+  ENABLE_EPOLL_THREAD_DUMP=No
 fi
 
-done
+if test $ENABLE_EPOLL_THREAD_DUMP = Yes -o $ENABLE_DUMP_THREADS = Yes -o $ENABLE_EPOLL_DEBUG = Yes; then
+
+$as_echo "#define THREAD_DUMP  1 " >>confdefs.h
+
+fi
+
+if test "${enable_tsm_debug}" = yes; then
+
+$as_echo "#define _TSM_DEBUG_  1 " >>confdefs.h
+
+  ENABLE_TSM_DEBUG=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS TSM_DEBUG"
+else
+  ENABLE_TSM_DEBUG=No
+fi
+
+if test "${enable_vrrp_fd_debug}" = yes; then
+
+$as_echo "#define _VRRP_FD_DEBUG_  1 " >>confdefs.h
+
+  ENABLE_VRRP_FD_DEBUG=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS VRRP_FD_DEBUG"
+else
+  ENABLE_VRRP_FD_DEBUG=No
+fi
+
+if test "${enable_network_timestamp}" = yes; then
+
+$as_echo "#define _NETWORK_TIMESTAMP_  1 " >>confdefs.h
+
+  ENABLE_NETWORK_TIMESTAMP=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS NETWORK_TIMESTAMP"
+else
+  ENABLE_NETWORK_TIMESTAMP=No
+fi
+
+if test "${enable_asserts}" = yes; then
+
+$as_echo "#define _ENABLE_ASSERT_  1 " >>confdefs.h
+
+  ENABLE_ASSERT=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS ASSERT"
+else
+  ENABLE_ASSERT=No
+fi
+ if test $ENABLE_ASSERT = Yes; then
+  ASSERTS_TRUE=
+  ASSERTS_FALSE='#'
+else
+  ASSERTS_TRUE='#'
+  ASSERTS_FALSE=
+fi
+
+
+if test "${with_fixed_if_type}"; then
+  if test "${with_fixed_if_type}" = yes -o ${with_fixed_if_type} = no; then
+    as_fn_error $? "An interface type must be specified with --with-fixed-if-type" "$LINENO" 5
+  fi
+
+cat >>confdefs.h <<_ACEOF
+#define _FIXED_IF_TYPE_  "${with_fixed_if_type}"
+_ACEOF
+
+  FIXED_IF_TYPE=${with_fixed_if_type}
+  CONFIG_OPTIONS="$CONFIG_OPTIONS FIXED_IF_TYPE=${with_fixed_if_type}"
+else
+  FIXED_IF_TYPE=
+fi
 
-    SNMP_SUPPORT="_WITH_SNMP_"
+WITH_PROFILING=No
+if test "${enable_profile}" = yes; then
+  WITH_PROFILING=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS PROFILING"
+  KA_CFLAGS="$KA_CFLAGS -pg"
+fi
+ if test $WITH_PROFILING = Yes; then
+  PROFILE_TRUE=
+  PROFILE_FALSE='#'
+else
+  PROFILE_TRUE='#'
+  PROFILE_FALSE=
 fi
 
 
+if test "${enable_perf}" = yes; then
 
-SHA1_SUPPORT="_WITHOUT_SHA1_"
-if test "${enable_sha1}" = "yes"; then
-  CFLAGS="$CFLAGS -DFEAT_SHA1"
-  for ac_header in openssl/sha.h
-do :
-  ac_fn_c_check_header_mongrel "$LINENO" "openssl/sha.h" "ac_cv_header_openssl_sha_h" "$ac_includes_default"
-if test "x$ac_cv_header_openssl_sha_h" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_OPENSSL_SHA_H 1
-_ACEOF
+$as_echo "#define _WITH_PERF_  1 " >>confdefs.h
 
+  ENABLE_PERF=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS PERF"
+  KA_CFLAGS="$KA_CFLAGS -pg"
 else
-  as_fn_error $? "unable to find openssl/sha.h" "$LINENO" 5
+  ENABLE_PERF=No
 fi
 
-done
+if test "${enable_log_file}" = yes; then
 
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for SHA1_Init in -lcrypto" >&5
-$as_echo_n "checking for SHA1_Init in -lcrypto... " >&6; }
-if ${ac_cv_lib_crypto_SHA1_Init+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcrypto  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
+$as_echo "#define ENABLE_LOG_TO_FILE  1 " >>confdefs.h
 
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char SHA1_Init ();
-int
-main ()
-{
-return SHA1_Init ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_crypto_SHA1_Init=yes
-else
-  ac_cv_lib_crypto_SHA1_Init=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
+  ENABLE_LOG_FILE_APPEND=Yes
+  CONFIG_OPTIONS="$CONFIG_OPTIONS FILE_LOGGING"
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_SHA1_Init" >&5
-$as_echo "$ac_cv_lib_crypto_SHA1_Init" >&6; }
-if test "x$ac_cv_lib_crypto_SHA1_Init" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBCRYPTO 1
-_ACEOF
 
-  LIBS="-lcrypto $LIBS"
+if test ${ENABLE_LOG_FILE_APPEND} = Yes; then
 
-else
-  as_fn_error $? "SHA1 in OpenSSL required" "$LINENO" 5
-fi
+$as_echo "#define ENABLE_LOG_FILE_APPEND  1 " >>confdefs.h
 
-  SHA1_SUPPORT="_WITH_SHA1_"
+  CONFIG_OPTIONS="$CONFIG_OPTIONS LOG_FILE_APPEND"
 fi
 
+if test .$enable_eintr_debug = .yes; then :
 
 
-if test "${enable_fwmark}" = "no"; then
-  SO_MARK_SUPPORT="_WITHOUT_SO_MARK_"
-else
-  ac_fn_c_check_decl "$LINENO" "SO_MARK" "ac_cv_have_decl_SO_MARK" "#include <sys/socket.h>
+$as_echo "#define DEBUG_EINTR  1 " >>confdefs.h
 
-"
-if test "x$ac_cv_have_decl_SO_MARK" = xyes; then :
+    CONFIG_OPTIONS="$CONFIG_OPTIONS EINTR_DEBUG"
 
 else
-  as_fn_error $? "No SO_MARK declaration in headers" "$LINENO" 5
+
+        if test .$ac_cv_func_signalfd != .yes -o .$enable_eintr_debug = .check; then :
+
+
+$as_echo "#define CHECK_EINTR  1 " >>confdefs.h
+
+	if test .$ac_cv_func_signalfd = .yes; then :
+  CONFIG_OPTIONS="$CONFIG_OPTIONS EINTR_CHECK"
 fi
 
-  SO_MARK_SUPPORT="_WITH_SO_MARK_"
 fi
 
+fi
 
+if test .$enable_track_process_debug = .yes; then :
 
 
-if test "${enable_debug}" = "yes"; then
-  DFLAGS="-D_DEBUG_"
+$as_echo "#define _TRACK_PROCESS_DEBUG_  1 " >>confdefs.h
 
-fi
+    CONFIG_OPTIONS="$CONFIG_OPTIONS TRACK_PROCESS_DEBUG"
 
-if test "${enable_profile}" = "yes"; then
-  CFLAGS="$CFLAGS -pg"
 fi
 
+if test .$enable_parser_debug = .yes; then :
 
 
+$as_echo "#define _PARSER_DEBUG_  1 " >>confdefs.h
 
+    CONFIG_OPTIONS="$CONFIG_OPTIONS PARSER_DEBUG"
 
+fi
 
+if test .$enable_checksum_debug = .yes; then :
 
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for an ANSI C-conforming const" >&5
-$as_echo_n "checking for an ANSI C-conforming const... " >&6; }
-if ${ac_cv_c_const+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main ()
-{
 
-#ifndef __cplusplus
-  /* Ultrix mips cc rejects this sort of thing.  */
-  typedef int charset[2];
-  const charset cs = { 0, 0 };
-  /* SunOS 4.1.1 cc rejects this.  */
-  char const *const *pcpcc;
-  char **ppc;
-  /* NEC SVR4.0.2 mips cc rejects this.  */
-  struct point {int x, y;};
-  static struct point const zero = {0,0};
-  /* AIX XL C 1.02.0.0 rejects this.
-     It does not let you subtract one const X* pointer from another in
-     an arm of an if-expression whose if-part is not a constant
-     expression */
-  const char *g = "string";
-  pcpcc = &g + (g ? g-g : 0);
-  /* HPUX 7.0 cc rejects these. */
-  ++pcpcc;
-  ppc = (char**) pcpcc;
-  pcpcc = (char const *const *) ppc;
-  { /* SCO 3.2v4 cc rejects this sort of thing.  */
-    char tx;
-    char *t = &tx;
-    char const *s = 0 ? (char *) 0 : (char const *) 0;
+$as_echo "#define CHECKSUM_DIAGNOSTICS  1 " >>confdefs.h
 
-    *t++ = 0;
-    if (s) return 0;
-  }
-  { /* Someone thinks the Sun supposedly-ANSI compiler will reject this.  */
-    int x[] = {25, 17};
-    const int *foo = &x[0];
-    ++foo;
-  }
-  { /* Sun SC1.0 ANSI compiler rejects this -- but not the above. */
-    typedef const int *iptr;
-    iptr p = 0;
-    ++p;
-  }
-  { /* AIX XL C 1.02.0.0 rejects this sort of thing, saying
-       "k.c", line 2.27: 1506-025 (S) Operand must be a modifiable lvalue. */
-    struct s { int j; const int *ap[3]; } bx;
-    struct s *b = &bx; b->j = 5;
-  }
-  { /* ULTRIX-32 V3.1 (Rev 9) vcc rejects this */
-    const int foo = 10;
-    if (!foo) return 0;
-  }
-  return !cs[0] && !zero.x;
-#endif
+    CONFIG_OPTIONS="$CONFIG_OPTIONS CHECKSUM_DEBUG"
 
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_c_const=yes
-else
-  ac_cv_c_const=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_const" >&5
-$as_echo "$ac_cv_c_const" >&6; }
-if test $ac_cv_c_const = no; then
 
-$as_echo "#define const /**/" >>confdefs.h
+if test .$enable_dump_keywords = .yes; then :
+
+
+$as_echo "#define _DUMP_KEYWORDS_  1 " >>confdefs.h
+
+    CONFIG_OPTIONS="$CONFIG_OPTIONS DUMP_KEYWORDS"
 
 fi
 
-ac_fn_c_check_type "$LINENO" "pid_t" "ac_cv_type_pid_t" "$ac_includes_default"
-if test "x$ac_cv_type_pid_t" = xyes; then :
+if test ${NEED_LIBDL} = Yes; then
+  KA_LIBS="$KA_LIBS -ldl"
+fi
 
-else
+echo " $KA_LIBS" | grep -qE -- " -l?pthread "
+if test $? -eq 0 ;then
 
-cat >>confdefs.h <<_ACEOF
-#define pid_t int
-_ACEOF
+$as_echo "#define _WITH_PTHREADS_  1 " >>confdefs.h
 
 fi
 
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether time.h and sys/time.h may both be included" >&5
-$as_echo_n "checking whether time.h and sys/time.h may both be included... " >&6; }
-if ${ac_cv_header_time+:} false; then :
+RPM_NO_BIP=1
+# Extract the first word of "rpm", so it can be a program name with args.
+set dummy rpm; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_HAVE_RPM+:} false; then :
   $as_echo_n "(cached) " >&6
 else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <sys/types.h>
-#include <sys/time.h>
-#include <time.h>
+  if test -n "$HAVE_RPM"; then
+  ac_cv_prog_HAVE_RPM="$HAVE_RPM" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_HAVE_RPM="Yes"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
 
-int
-main ()
-{
-if ((struct tm *) 0)
-return 0;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_header_time=yes
+  test -z "$ac_cv_prog_HAVE_RPM" && ac_cv_prog_HAVE_RPM="No"
+fi
+fi
+HAVE_RPM=$ac_cv_prog_HAVE_RPM
+if test -n "$HAVE_RPM"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $HAVE_RPM" >&5
+$as_echo "$HAVE_RPM" >&6; }
 else
-  ac_cv_header_time=no
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
 fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+
+if test $HAVE_RPM = Yes; then
+  # Extract the first word of "rpmbuild", so it can be a program name with args.
+set dummy rpmbuild; ac_word=$2
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
+$as_echo_n "checking for $ac_word... " >&6; }
+if ${ac_cv_prog_HAVE_RPMBUILD+:} false; then :
+  $as_echo_n "(cached) " >&6
+else
+  if test -n "$HAVE_RPMBUILD"; then
+  ac_cv_prog_HAVE_RPMBUILD="$HAVE_RPMBUILD" # Let the user override the test.
+else
+as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
+for as_dir in $PATH
+do
+  IFS=$as_save_IFS
+  test -z "$as_dir" && as_dir=.
+    for ac_exec_ext in '' $ac_executable_extensions; do
+  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
+    ac_cv_prog_HAVE_RPMBUILD="Yes"
+    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
+    break 2
+  fi
+done
+  done
+IFS=$as_save_IFS
+
+  test -z "$ac_cv_prog_HAVE_RPMBUILD" && ac_cv_prog_HAVE_RPMBUILD="No"
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_time" >&5
-$as_echo "$ac_cv_header_time" >&6; }
-if test $ac_cv_header_time = yes; then
+fi
+HAVE_RPMBUILD=$ac_cv_prog_HAVE_RPMBUILD
+if test -n "$HAVE_RPMBUILD"; then
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $HAVE_RPMBUILD" >&5
+$as_echo "$HAVE_RPMBUILD" >&6; }
+else
+  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+fi
+
 
-$as_echo "#define TIME_WITH_SYS_TIME 1" >>confdefs.h
+  RPM_SRC_DIR=`rpm --eval "%{_sourcedir}"`
+  if ! test -d $RPM_SRC_DIR; then
+    HAVE_RPMBUILD=No
+  fi
+  if test $HAVE_RPMBUILD = Yes; then
+    rpmbuild --help | grep -q -- --build-in-place
+    RPM_NO_BIP=$?
+  fi
+fi
+ if test $HAVE_RPM = Yes; then
+  RPM_TRUE=
+  RPM_FALSE='#'
+else
+  RPM_TRUE='#'
+  RPM_FALSE=
+fi
 
+ if test $RPM_NO_BIP -eq 0; then
+  RPM_BIP_TRUE=
+  RPM_BIP_FALSE='#'
+else
+  RPM_BIP_TRUE='#'
+  RPM_BIP_FALSE=
 fi
 
 
-if test $ac_cv_c_compiler_gnu = yes; then
-    { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC needs -traditional" >&5
-$as_echo_n "checking whether $CC needs -traditional... " >&6; }
-if ${ac_cv_prog_gcc_traditional+:} false; then :
-  $as_echo_n "(cached) " >&6
+INIT_TYPE=
+if test -n "$init_type"; then :
+  INIT_TYPE=$init_type
+elif test -n "$with_systemdsystemunitdir"; then :
+  INIT_TYPE=systemd
 else
-    ac_pattern="Autoconf.*'x'"
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <sgtty.h>
-Autoconf TIOCGETP
-_ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "$ac_pattern" >/dev/null 2>&1; then :
-  ac_cv_prog_gcc_traditional=yes
+
+    /sbin/init --version 2>/dev/null | grep -q upstart
+    if test $? -eq 0; then :
+  INIT_TYPE=upstart
 else
-  ac_cv_prog_gcc_traditional=no
+
+	init_path=`which systemctl 2>/dev/null`
+	if test \( $? -eq 0 -a -x "$init_path" \); then :
+
+	    systemctl | grep -q -- "-\.mount"
+	    if test $? -eq 0; then :
+  INIT_TYPE=systemd
 fi
-rm -f conftest*
 
+fi
+	if test \( -z "$INIT_TYPE" -a -f /etc/init.d/networking \); then :
 
-  if test $ac_cv_prog_gcc_traditional = no; then
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <termio.h>
-Autoconf TCGETA
-_ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "$ac_pattern" >/dev/null 2>&1; then :
-  ac_cv_prog_gcc_traditional=yes
+	    init_path=`which openrc-run 2>/dev/null`
+	    if test \( $? -eq 0 -a -x "$init_path" \); then :
+
+		head -1 /etc/init.d/networking | grep -q "^#! */.*/openrc-run$"
+		if test $? -eq 0; then :
+  INIT_TYPE=openrc
 fi
-rm -f conftest*
 
-  fi
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_gcc_traditional" >&5
-$as_echo "$ac_cv_prog_gcc_traditional" >&6; }
-  if test $ac_cv_prog_gcc_traditional = yes; then
-    CC="$CC -traditional"
-  fi
+
+fi
+	if test \( -z "$INIT_TYPE" -a -f /etc/init.d/cron -a ! -h /etc/init.d/cron \); then :
+  INIT_TYPE=SYSV
 fi
 
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for working memcmp" >&5
-$as_echo_n "checking for working memcmp... " >&6; }
-if ${ac_cv_func_memcmp_working+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test "$cross_compiling" = yes; then :
-  ac_cv_func_memcmp_working=no
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_includes_default
-int
-main ()
-{
+fi
 
-  /* Some versions of memcmp are not 8-bit clean.  */
-  char c0 = '\100', c1 = '\200', c2 = '\201';
-  if (memcmp(&c0, &c2, 1) >= 0 || memcmp(&c1, &c2, 1) >= 0)
-    return 1;
+fi
+if test \( .$INIT_TYPE = .systemd -a -z "$with_systemdsystemunitdir" \); then :
+  with_systemdsystemunitdir=$($PKG_CONFIG --variable=systemdsystemunitdir systemd)
+fi
 
-  /* The Next x86 OpenStep bug shows up only when comparing 16 bytes
-     or more and with at least one buffer not starting on a 4-byte boundary.
-     William Lewis provided this test program.   */
-  {
-    char foo[21];
-    char bar[21];
-    int i;
-    for (i = 0; i < 4; i++)
-      {
-	char *a = foo + i;
-	char *b = bar + i;
-	strcpy (a, "--------01111111");
-	strcpy (b, "--------10000000");
-	if (memcmp (a, b, 16) >= 0)
-	  return 1;
-      }
-    return 0;
-  }
+if test $default_config_file; then :
+
+    if test $default_config_file = yes -o $default_config_file = no; then :
+  as_fn_error $? "A filename must be specified for default-config-file" "$LINENO" 5
+fi
+    CONFIG_FILE=$default_config_file
+    CONFIG_OPTIONS="$CONFIG_OPTIONS DEFAULT_CONFIG_FILE=${default_config_file}"
 
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
-  ac_cv_func_memcmp_working=yes
 else
-  ac_cv_func_memcmp_working=no
+  default_config_file="/etc/$PACKAGE/$PACKAGE.conf"
 fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-  conftest.$ac_objext conftest.beam conftest.$ac_ext
+
+cat >>confdefs.h <<_ACEOF
+#define DEFAULT_CONFIG_FILE "$default_config_file"
+_ACEOF
+
+DEFAULT_CONFIG_FILE=$default_config_file
+
+
+if test -z "$INIT_TYPE"; then
+  INIT_TYPE=undetected
+elif test $INIT_TYPE = systemd; then
+  systemdsystemunitdir=$with_systemdsystemunitdir
+
 fi
 
+ if test $INIT_TYPE = upstart; then
+  INIT_UPSTART_TRUE=
+  INIT_UPSTART_FALSE='#'
+else
+  INIT_UPSTART_TRUE='#'
+  INIT_UPSTART_FALSE=
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_memcmp_working" >&5
-$as_echo "$ac_cv_func_memcmp_working" >&6; }
-test $ac_cv_func_memcmp_working = no && case " $LIBOBJS " in
-  *" memcmp.$ac_objext "* ) ;;
-  *) LIBOBJS="$LIBOBJS memcmp.$ac_objext"
- ;;
-esac
 
+ if test $INIT_TYPE = systemd; then
+  INIT_SYSTEMD_TRUE=
+  INIT_SYSTEMD_FALSE='#'
+else
+  INIT_SYSTEMD_TRUE='#'
+  INIT_SYSTEMD_FALSE=
+fi
 
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking return type of signal handlers" >&5
-$as_echo_n "checking return type of signal handlers... " >&6; }
-if ${ac_cv_type_signal+:} false; then :
-  $as_echo_n "(cached) " >&6
+ if test $INIT_TYPE = SYSV; then
+  INIT_SYSV_TRUE=
+  INIT_SYSV_FALSE='#'
 else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <sys/types.h>
-#include <signal.h>
+  INIT_SYSV_TRUE='#'
+  INIT_SYSV_FALSE=
+fi
 
-int
-main ()
-{
-return *(signal (0, 0)) (0) == 1;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_type_signal=int
+ if test $INIT_TYPE = openrc; then
+  INIT_OPENRC_TRUE=
+  INIT_OPENRC_FALSE='#'
 else
-  ac_cv_type_signal=void
+  INIT_OPENRC_TRUE='#'
+  INIT_OPENRC_FALSE=
 fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
+
+ if test $INIT_TYPE = SUSE; then
+  INIT_SUSE_TRUE=
+  INIT_SUSE_FALSE='#'
+else
+  INIT_SUSE_TRUE='#'
+  INIT_SUSE_FALSE=
 fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_type_signal" >&5
-$as_echo "$ac_cv_type_signal" >&6; }
+
+
 
 cat >>confdefs.h <<_ACEOF
-#define RETSIGTYPE $ac_cv_type_signal
+#define CONFIGURATION_OPTIONS "$CONFIG_OPTIONS"
 _ACEOF
 
 
-for ac_func in gettimeofday select socket strerror strtol uname
-do :
-  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
+cat >>confdefs.h <<_ACEOF
+#define SYSTEM_OPTIONS "$SYSTEM_OPTIONS"
 _ACEOF
 
+
+if test $NETLINK_VER -eq 0; then
+	NETLINK_VER=None
 fi
-done
 
+echo
 
-OUTPUT_TARGET="$OUTPUT_TARGET keepalived/Makefile lib/Makefile"
-if test "${VRRP_SUPPORT}" = "_WITH_VRRP_"; then
-  OUTPUT_TARGET="$OUTPUT_TARGET keepalived/vrrp/Makefile"
-fi
-if test "$IPVS_SUPPORT" = "_WITH_LVS_"; then
-  OUTPUT_TARGET="$OUTPUT_TARGET keepalived/check/Makefile"
-  if test "$KERN" = "_KRNL_2_6_"; then
-    OUTPUT_TARGET="$OUTPUT_TARGET keepalived/libipvs-2.6/Makefile"
-  elif test "$KERN" = "_KRNL_2_4_"; then
-    OUTPUT_TARGET="$OUTPUT_TARGET keepalived/libipvs-2.4/Makefile"
-  fi
-fi
-ac_config_files="$ac_config_files $OUTPUT_TARGET"
+# Tidy up some strings
+KA_CPPFLAGS=`echo $KA_CPPFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+KA_CFLAGS=`echo $KA_CFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+KA_LDFLAGS=`echo $KA_LDFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+KA_LIBS=`echo $KA_LIBS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+
+# Tidy up some strings
+KA_CPPFLAGS=`echo $KA_CPPFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+KA_CFLAGS=`echo $KA_CFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+KA_LDFLAGS=`echo $KA_LDFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+KA_LIBS=`echo $KA_LIBS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
 
 cat >confcache <<\_ACEOF
 # This file is a shell script that caches the results of configure
@@ -4870,43 +12749,7 @@ test "x$prefix" = xNONE && prefix=$ac_default_prefix
 # Let make expand exec_prefix.
 test "x$exec_prefix" = xNONE && exec_prefix='${prefix}'
 
-# Transform confdefs.h into DEFS.
-# Protect against shell expansion while executing Makefile rules.
-# Protect against Makefile macro expansion.
-#
-# If the first sed substitution is executed (which looks for macros that
-# take arguments), then branch to the quote section.  Otherwise,
-# look for a macro that doesn't take arguments.
-ac_script='
-:mline
-/\\$/{
- N
- s,\\\n,,
- b mline
-}
-t clear
-:clear
-s/^[	 ]*#[	 ]*define[	 ][	 ]*\([^	 (][^	 (]*([^)]*)\)[	 ]*\(.*\)/-D\1=\2/g
-t quote
-s/^[	 ]*#[	 ]*define[	 ][	 ]*\([^	 ][^	 ]*\)[	 ]*\(.*\)/-D\1=\2/g
-t quote
-b any
-:quote
-s/[	 `~#$^&*(){}\\|;'\''"<>?]/\\&/g
-s/\[/\\&/g
-s/\]/\\&/g
-s/\$/$$/g
-H
-:any
-${
-	g
-	s/^\n//
-	s/\n/ /g
-	p
-}
-'
-DEFS=`sed -n "$ac_script" confdefs.h`
-
+DEFS=-DHAVE_CONFIG_H
 
 ac_libobjs=
 ac_ltlibobjs=
@@ -4925,6 +12768,218 @@ LIBOBJS=$ac_libobjs
 LTLIBOBJS=$ac_ltlibobjs
 
 
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking that generated files are newer than configure" >&5
+$as_echo_n "checking that generated files are newer than configure... " >&6; }
+   if test -n "$am_sleep_pid"; then
+     # Hide warnings about reused PIDs.
+     wait $am_sleep_pid 2>/dev/null
+   fi
+   { $as_echo "$as_me:${as_lineno-$LINENO}: result: done" >&5
+$as_echo "done" >&6; }
+ if test -n "$EXEEXT"; then
+  am__EXEEXT_TRUE=
+  am__EXEEXT_FALSE='#'
+else
+  am__EXEEXT_TRUE='#'
+  am__EXEEXT_FALSE=
+fi
+
+if test -z "${AMDEP_TRUE}" && test -z "${AMDEP_FALSE}"; then
+  as_fn_error $? "conditional \"AMDEP\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${am__fastdepCC_TRUE}" && test -z "${am__fastdepCC_FALSE}"; then
+  as_fn_error $? "conditional \"am__fastdepCC\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${WITH_STRICT_CONFIG_CHECKS_TRUE}" && test -z "${WITH_STRICT_CONFIG_CHECKS_FALSE}"; then
+  as_fn_error $? "conditional \"WITH_STRICT_CONFIG_CHECKS\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${BUILD_GENHASH_TRUE}" && test -z "${BUILD_GENHASH_FALSE}"; then
+  as_fn_error $? "conditional \"BUILD_GENHASH\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${LIBNL1_TRUE}" && test -z "${LIBNL1_FALSE}"; then
+  as_fn_error $? "conditional \"LIBNL1\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${LIBNL3_TRUE}" && test -z "${LIBNL3_FALSE}"; then
+  as_fn_error $? "conditional \"LIBNL3\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${LIBNL_DYNAMIC_TRUE}" && test -z "${LIBNL_DYNAMIC_FALSE}"; then
+  as_fn_error $? "conditional \"LIBNL_DYNAMIC\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${LIBIPTC_TRUE}" && test -z "${LIBIPTC_FALSE}"; then
+  as_fn_error $? "conditional \"LIBIPTC\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${LIBIPSET_TRUE}" && test -z "${LIBIPSET_FALSE}"; then
+  as_fn_error $? "conditional \"LIBIPSET\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${IPTABLES_TRUE}" && test -z "${IPTABLES_FALSE}"; then
+  as_fn_error $? "conditional \"IPTABLES\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${IPTABLES_CMD_TRUE}" && test -z "${IPTABLES_CMD_FALSE}"; then
+  as_fn_error $? "conditional \"IPTABLES_CMD\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${LIBIPTC_DYNAMIC_TRUE}" && test -z "${LIBIPTC_DYNAMIC_FALSE}"; then
+  as_fn_error $? "conditional \"LIBIPTC_DYNAMIC\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${LIBIPSET_DYNAMIC_TRUE}" && test -z "${LIBIPSET_DYNAMIC_FALSE}"; then
+  as_fn_error $? "conditional \"LIBIPSET_DYNAMIC\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${REQUIRE_IPTABLES_LIBS_TRUE}" && test -z "${REQUIRE_IPTABLES_LIBS_FALSE}"; then
+  as_fn_error $? "conditional \"REQUIRE_IPTABLES_LIBS\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${NFTABLES_TRUE}" && test -z "${NFTABLES_FALSE}"; then
+  as_fn_error $? "conditional \"NFTABLES\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${FIREWALL_TRUE}" && test -z "${FIREWALL_FALSE}"; then
+  as_fn_error $? "conditional \"FIREWALL\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${WITH_IPVS_TRUE}" && test -z "${WITH_IPVS_FALSE}"; then
+  as_fn_error $? "conditional \"WITH_IPVS\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${WITH_REGEX_TRUE}" && test -z "${WITH_REGEX_FALSE}"; then
+  as_fn_error $? "conditional \"WITH_REGEX\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${WITH_VRRP_TRUE}" && test -z "${WITH_VRRP_FALSE}"; then
+  as_fn_error $? "conditional \"WITH_VRRP\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${VRRP_AUTH_TRUE}" && test -z "${VRRP_AUTH_FALSE}"; then
+  as_fn_error $? "conditional \"VRRP_AUTH\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${VMAC_TRUE}" && test -z "${VMAC_FALSE}"; then
+  as_fn_error $? "conditional \"VMAC\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${WITH_JSON_TRUE}" && test -z "${WITH_JSON_FALSE}"; then
+  as_fn_error $? "conditional \"WITH_JSON\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${WITH_BFD_TRUE}" && test -z "${WITH_BFD_FALSE}"; then
+  as_fn_error $? "conditional \"WITH_BFD\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${CN_PROC_TRUE}" && test -z "${CN_PROC_FALSE}"; then
+  as_fn_error $? "conditional \"CN_PROC\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${SOCK_NONBLOCK_TRUE}" && test -z "${SOCK_NONBLOCK_FALSE}"; then
+  as_fn_error $? "conditional \"SOCK_NONBLOCK\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${FIB_ROUTING_TRUE}" && test -z "${FIB_ROUTING_FALSE}"; then
+  as_fn_error $? "conditional \"FIB_ROUTING\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${SNMP_TRUE}" && test -z "${SNMP_FALSE}"; then
+  as_fn_error $? "conditional \"SNMP\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${SNMP_KEEPALIVED_TRUE}" && test -z "${SNMP_KEEPALIVED_FALSE}"; then
+  as_fn_error $? "conditional \"SNMP_KEEPALIVED\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${SNMP_VRRP_TRUE}" && test -z "${SNMP_VRRP_FALSE}"; then
+  as_fn_error $? "conditional \"SNMP_VRRP\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${SNMP_CHECKER_TRUE}" && test -z "${SNMP_CHECKER_FALSE}"; then
+  as_fn_error $? "conditional \"SNMP_CHECKER\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${SNMP_RFC_TRUE}" && test -z "${SNMP_RFC_FALSE}"; then
+  as_fn_error $? "conditional \"SNMP_RFC\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${SNMP_RFCV2_TRUE}" && test -z "${SNMP_RFCV2_FALSE}"; then
+  as_fn_error $? "conditional \"SNMP_RFCV2\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${SNMP_RFCV3_TRUE}" && test -z "${SNMP_RFCV3_FALSE}"; then
+  as_fn_error $? "conditional \"SNMP_RFCV3\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${SNMP_REPLY_V3_FOR_V2_TRUE}" && test -z "${SNMP_REPLY_V3_FOR_V2_FALSE}"; then
+  as_fn_error $? "conditional \"SNMP_REPLY_V3_FOR_V2\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${WITH_DBUS_TRUE}" && test -z "${WITH_DBUS_FALSE}"; then
+  as_fn_error $? "conditional \"WITH_DBUS\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${DBUS_CREATE_INSTANCE_TRUE}" && test -z "${DBUS_CREATE_INSTANCE_FALSE}"; then
+  as_fn_error $? "conditional \"DBUS_CREATE_INSTANCE\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${WITH_SHA1_TRUE}" && test -z "${WITH_SHA1_FALSE}"; then
+  as_fn_error $? "conditional \"WITH_SHA1\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${WITH_NAMESPACES_TRUE}" && test -z "${WITH_NAMESPACES_FALSE}"; then
+  as_fn_error $? "conditional \"WITH_NAMESPACES\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${BUILD_DOCS_TRUE}" && test -z "${BUILD_DOCS_FALSE}"; then
+  as_fn_error $? "conditional \"BUILD_DOCS\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${DEBUG_TRUE}" && test -z "${DEBUG_FALSE}"; then
+  as_fn_error $? "conditional \"DEBUG\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${ASSERTS_TRUE}" && test -z "${ASSERTS_FALSE}"; then
+  as_fn_error $? "conditional \"ASSERTS\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${PROFILE_TRUE}" && test -z "${PROFILE_FALSE}"; then
+  as_fn_error $? "conditional \"PROFILE\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${RPM_TRUE}" && test -z "${RPM_FALSE}"; then
+  as_fn_error $? "conditional \"RPM\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${RPM_BIP_TRUE}" && test -z "${RPM_BIP_FALSE}"; then
+  as_fn_error $? "conditional \"RPM_BIP\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${INIT_UPSTART_TRUE}" && test -z "${INIT_UPSTART_FALSE}"; then
+  as_fn_error $? "conditional \"INIT_UPSTART\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${INIT_SYSTEMD_TRUE}" && test -z "${INIT_SYSTEMD_FALSE}"; then
+  as_fn_error $? "conditional \"INIT_SYSTEMD\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${INIT_SYSV_TRUE}" && test -z "${INIT_SYSV_FALSE}"; then
+  as_fn_error $? "conditional \"INIT_SYSV\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${INIT_OPENRC_TRUE}" && test -z "${INIT_OPENRC_FALSE}"; then
+  as_fn_error $? "conditional \"INIT_OPENRC\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
+if test -z "${INIT_SUSE_TRUE}" && test -z "${INIT_SUSE_FALSE}"; then
+  as_fn_error $? "conditional \"INIT_SUSE\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
 
 : "${CONFIG_STATUS=./config.status}"
 ac_write_fail=0
@@ -5322,7 +13377,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 # report actual input values of CONFIG_FILES etc. instead of their
 # values after options handling.
 ac_log="
-This file was extended by $as_me, which was
+This file was extended by Keepalived $as_me 2.0.19, which was
 generated by GNU Autoconf 2.69.  Invocation command line was
 
   CONFIG_FILES    = $CONFIG_FILES
@@ -5340,11 +13395,16 @@ case $ac_config_files in *"
 "*) set x $ac_config_files; shift; ac_config_files=$*;;
 esac
 
+case $ac_config_headers in *"
+"*) set x $ac_config_headers; shift; ac_config_headers=$*;;
+esac
 
 
 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 # Files that config.status was made for.
 config_files="$ac_config_files"
+config_headers="$ac_config_headers"
+config_commands="$ac_config_commands"
 
 _ACEOF
 
@@ -5365,17 +13425,26 @@ Usage: $0 [OPTION]... [TAG]...
       --recheck    update $as_me by reconfiguring in the same conditions
       --file=FILE[:TEMPLATE]
                    instantiate the configuration file FILE
+      --header=FILE[:TEMPLATE]
+                   instantiate the configuration header FILE
 
 Configuration files:
 $config_files
 
-Report bugs to the package provider."
+Configuration headers:
+$config_headers
+
+Configuration commands:
+$config_commands
+
+Report bugs to <keepalived-users@groups.io>.
+Keepalived home page: <http://www.keepalived.org/>."
 
 _ACEOF
 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
 ac_cs_version="\\
-config.status
+Keepalived config.status 2.0.19
 configured by $0, generated by GNU Autoconf 2.69,
   with options \\"\$ac_cs_config\\"
 
@@ -5386,6 +13455,8 @@ gives unlimited permission to copy, distribute and modify it."
 ac_pwd='$ac_pwd'
 srcdir='$srcdir'
 INSTALL='$INSTALL'
+MKDIR_P='$MKDIR_P'
+AWK='$AWK'
 test -n "\$AWK" || AWK=awk
 _ACEOF
 
@@ -5430,7 +13501,18 @@ do
     esac
     as_fn_append CONFIG_FILES " '$ac_optarg'"
     ac_need_defaults=false;;
-  --he | --h |  --help | --hel | -h )
+  --header | --heade | --head | --hea )
+    $ac_shift
+    case $ac_optarg in
+    *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
+    esac
+    as_fn_append CONFIG_HEADERS " '$ac_optarg'"
+    ac_need_defaults=false;;
+  --he | --h)
+    # Conflict between --help and --header
+    as_fn_error $? "ambiguous option: \`$1'
+Try \`$0 --help' for more information.";;
+  --help | --hel | -h )
     $as_echo "$ac_cs_usage"; exit ;;
   -q | -quiet | --quiet | --quie | --qui | --qu | --q \
   | -silent | --silent | --silen | --sile | --sil | --si | --s)
@@ -5478,6 +13560,11 @@ _ASBOX
 
 _ACEOF
 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+#
+# INIT-COMMANDS
+#
+AMDEP_TRUE="$AMDEP_TRUE" ac_aux_dir="$ac_aux_dir"
+
 _ACEOF
 
 cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
@@ -5486,7 +13573,25 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 for ac_config_target in $ac_config_targets
 do
   case $ac_config_target in
-    "$OUTPUT_TARGET") CONFIG_FILES="$CONFIG_FILES $OUTPUT_TARGET" ;;
+    "lib/config.h") CONFIG_HEADERS="$CONFIG_HEADERS lib/config.h" ;;
+    "lib/config_warnings.h") CONFIG_HEADERS="$CONFIG_HEADERS lib/config_warnings.h" ;;
+    "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;;
+    "keepalived/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/Makefile" ;;
+    "lib/Makefile") CONFIG_FILES="$CONFIG_FILES lib/Makefile" ;;
+    "keepalived/core/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/core/Makefile" ;;
+    "keepalived.spec") CONFIG_FILES="$CONFIG_FILES keepalived.spec" ;;
+    "genhash/Makefile") CONFIG_FILES="$CONFIG_FILES genhash/Makefile" ;;
+    "keepalived/check/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/check/Makefile" ;;
+    "keepalived/vrrp/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/vrrp/Makefile" ;;
+    "keepalived/bfd/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/bfd/Makefile" ;;
+    "doc/Makefile") CONFIG_FILES="$CONFIG_FILES doc/Makefile" ;;
+    "bin_install/Makefile") CONFIG_FILES="$CONFIG_FILES bin_install/Makefile" ;;
+    "keepalived/dbus/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/dbus/Makefile" ;;
+    "keepalived/etc/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/etc/Makefile" ;;
+    "keepalived/etc/init/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/etc/init/Makefile" ;;
+    "keepalived/etc/init.d/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/etc/init.d/Makefile" ;;
+    "doc/man/man8/Makefile") CONFIG_FILES="$CONFIG_FILES doc/man/man8/Makefile" ;;
+    "depfiles") CONFIG_COMMANDS="$CONFIG_COMMANDS depfiles" ;;
 
   *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;;
   esac
@@ -5499,6 +13604,8 @@ done
 # bizarre bug on SunOS 4.1.3.
 if $ac_need_defaults; then
   test "${CONFIG_FILES+set}" = set || CONFIG_FILES=$config_files
+  test "${CONFIG_HEADERS+set}" = set || CONFIG_HEADERS=$config_headers
+  test "${CONFIG_COMMANDS+set}" = set || CONFIG_COMMANDS=$config_commands
 fi
 
 # Have a temporary directory for convenience.  Make it in the build tree
@@ -5686,8 +13793,116 @@ fi
 cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 fi # test -n "$CONFIG_FILES"
 
+# Set up the scripts for CONFIG_HEADERS section.
+# No need to generate them if there are no CONFIG_HEADERS.
+# This happens for instance with `./config.status Makefile'.
+if test -n "$CONFIG_HEADERS"; then
+cat >"$ac_tmp/defines.awk" <<\_ACAWK ||
+BEGIN {
+_ACEOF
+
+# Transform confdefs.h into an awk script `defines.awk', embedded as
+# here-document in config.status, that substitutes the proper values into
+# config.h.in to produce config.h.
+
+# Create a delimiter string that does not exist in confdefs.h, to ease
+# handling of long lines.
+ac_delim='%!_!# '
+for ac_last_try in false false :; do
+  ac_tt=`sed -n "/$ac_delim/p" confdefs.h`
+  if test -z "$ac_tt"; then
+    break
+  elif $ac_last_try; then
+    as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5
+  else
+    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
+  fi
+done
+
+# For the awk script, D is an array of macro values keyed by name,
+# likewise P contains macro parameters if any.  Preserve backslash
+# newline sequences.
 
-eval set X "  :F $CONFIG_FILES      "
+ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]*
+sed -n '
+s/.\{148\}/&'"$ac_delim"'/g
+t rset
+:rset
+s/^[	 ]*#[	 ]*define[	 ][	 ]*/ /
+t def
+d
+:def
+s/\\$//
+t bsnl
+s/["\\]/\\&/g
+s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
+D["\1"]=" \3"/p
+s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2"/p
+d
+:bsnl
+s/["\\]/\\&/g
+s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
+D["\1"]=" \3\\\\\\n"\\/p
+t cont
+s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p
+t cont
+d
+:cont
+n
+s/.\{148\}/&'"$ac_delim"'/g
+t clear
+:clear
+s/\\$//
+t bsnlc
+s/["\\]/\\&/g; s/^/"/; s/$/"/p
+d
+:bsnlc
+s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p
+b cont
+' <confdefs.h | sed '
+s/'"$ac_delim"'/"\\\
+"/g' >>$CONFIG_STATUS || ac_write_fail=1
+
+cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
+  for (key in D) D_is_set[key] = 1
+  FS = ""
+}
+/^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ {
+  line = \$ 0
+  split(line, arg, " ")
+  if (arg[1] == "#") {
+    defundef = arg[2]
+    mac1 = arg[3]
+  } else {
+    defundef = substr(arg[1], 2)
+    mac1 = arg[2]
+  }
+  split(mac1, mac2, "(") #)
+  macro = mac2[1]
+  prefix = substr(line, 1, index(line, defundef) - 1)
+  if (D_is_set[macro]) {
+    # Preserve the white space surrounding the "#".
+    print prefix "define", macro P[macro] D[macro]
+    next
+  } else {
+    # Replace #undef with comments.  This is necessary, for example,
+    # in the case of _POSIX_SOURCE, which is predefined and required
+    # on some systems where configure will not decide to define it.
+    if (defundef == "undef") {
+      print "/*", prefix defundef, macro, "*/"
+      next
+    }
+  }
+}
+{ print }
+_ACAWK
+_ACEOF
+cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
+  as_fn_error $? "could not setup config headers machinery" "$LINENO" 5
+fi # test -n "$CONFIG_HEADERS"
+
+
+eval set X "  :F $CONFIG_FILES  :H $CONFIG_HEADERS    :C $CONFIG_COMMANDS"
 shift
 for ac_tag
 do
@@ -5825,6 +14040,11 @@ ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
   [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;;
   *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;;
   esac
+  ac_MKDIR_P=$MKDIR_P
+  case $MKDIR_P in
+  [\\/$]* | ?:[\\/]* ) ;;
+  */*) ac_MKDIR_P=$ac_top_build_prefix$MKDIR_P ;;
+  esac
 _ACEOF
 
 cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
@@ -5879,6 +14099,7 @@ s&@builddir@&$ac_builddir&;t t
 s&@abs_builddir@&$ac_abs_builddir&;t t
 s&@abs_top_builddir@&$ac_abs_top_builddir&;t t
 s&@INSTALL@&$ac_INSTALL&;t t
+s&@MKDIR_P@&$ac_MKDIR_P&;t t
 $ac_datarootdir_hack
 "
 eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \
@@ -5900,11 +14121,167 @@ which seems to be undefined.  Please make sure it is defined" >&2;}
   esac \
   || as_fn_error $? "could not create $ac_file" "$LINENO" 5
  ;;
+  :H)
+  #
+  # CONFIG_HEADER
+  #
+  if test x"$ac_file" != x-; then
+    {
+      $as_echo "/* $configure_input  */" \
+      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs"
+    } >"$ac_tmp/config.h" \
+      || as_fn_error $? "could not create $ac_file" "$LINENO" 5
+    if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then
+      { $as_echo "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5
+$as_echo "$as_me: $ac_file is unchanged" >&6;}
+    else
+      rm -f "$ac_file"
+      mv "$ac_tmp/config.h" "$ac_file" \
+	|| as_fn_error $? "could not create $ac_file" "$LINENO" 5
+    fi
+  else
+    $as_echo "/* $configure_input  */" \
+      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \
+      || as_fn_error $? "could not create -" "$LINENO" 5
+  fi
+# Compute "$ac_file"'s index in $config_headers.
+_am_arg="$ac_file"
+_am_stamp_count=1
+for _am_header in $config_headers :; do
+  case $_am_header in
+    $_am_arg | $_am_arg:* )
+      break ;;
+    * )
+      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
+  esac
+done
+echo "timestamp for $_am_arg" >`$as_dirname -- "$_am_arg" ||
+$as_expr X"$_am_arg" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
+	 X"$_am_arg" : 'X\(//\)[^/]' \| \
+	 X"$_am_arg" : 'X\(//\)$' \| \
+	 X"$_am_arg" : 'X\(/\)' \| . 2>/dev/null ||
+$as_echo X"$_am_arg" |
+    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)[^/].*/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\).*/{
+	    s//\1/
+	    q
+	  }
+	  s/.*/./; q'`/stamp-h$_am_stamp_count
+ ;;
 
+  :C)  { $as_echo "$as_me:${as_lineno-$LINENO}: executing $ac_file commands" >&5
+$as_echo "$as_me: executing $ac_file commands" >&6;}
+ ;;
+  esac
 
 
+  case $ac_file$ac_mode in
+    "depfiles":C) test x"$AMDEP_TRUE" != x"" || {
+  # Older Autoconf quotes --file arguments for eval, but not when files
+  # are listed without --file.  Let's play safe and only enable the eval
+  # if we detect the quoting.
+  case $CONFIG_FILES in
+  *\'*) eval set x "$CONFIG_FILES" ;;
+  *)   set x $CONFIG_FILES ;;
   esac
+  shift
+  for mf
+  do
+    # Strip MF so we end up with the name of the file.
+    mf=`echo "$mf" | sed -e 's/:.*$//'`
+    # Check whether this is an Automake generated Makefile or not.
+    # We used to match only the files named 'Makefile.in', but
+    # some people rename them; so instead we look at the file content.
+    # Grep'ing the first line is not enough: some people post-process
+    # each Makefile.in and add a new line on top of each file to say so.
+    # Grep'ing the whole file is not good either: AIX grep has a line
+    # limit of 2048, but all sed's we know have understand at least 4000.
+    if sed -n 's,^#.*generated by automake.*,X,p' "$mf" | grep X >/dev/null 2>&1; then
+      dirpart=`$as_dirname -- "$mf" ||
+$as_expr X"$mf" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
+	 X"$mf" : 'X\(//\)[^/]' \| \
+	 X"$mf" : 'X\(//\)$' \| \
+	 X"$mf" : 'X\(/\)' \| . 2>/dev/null ||
+$as_echo X"$mf" |
+    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)[^/].*/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\).*/{
+	    s//\1/
+	    q
+	  }
+	  s/.*/./; q'`
+    else
+      continue
+    fi
+    # Extract the definition of DEPDIR, am__include, and am__quote
+    # from the Makefile without running 'make'.
+    DEPDIR=`sed -n 's/^DEPDIR = //p' < "$mf"`
+    test -z "$DEPDIR" && continue
+    am__include=`sed -n 's/^am__include = //p' < "$mf"`
+    test -z "$am__include" && continue
+    am__quote=`sed -n 's/^am__quote = //p' < "$mf"`
+    # Find all dependency output files, they are included files with
+    # $(DEPDIR) in their names.  We invoke sed twice because it is the
+    # simplest approach to changing $(DEPDIR) to its actual value in the
+    # expansion.
+    for file in `sed -n "
+      s/^$am__include $am__quote\(.*(DEPDIR).*\)$am__quote"'$/\1/p' <"$mf" | \
+	 sed -e 's/\$(DEPDIR)/'"$DEPDIR"'/g'`; do
+      # Make sure the directory exists.
+      test -f "$dirpart/$file" && continue
+      fdir=`$as_dirname -- "$file" ||
+$as_expr X"$file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
+	 X"$file" : 'X\(//\)[^/]' \| \
+	 X"$file" : 'X\(//\)$' \| \
+	 X"$file" : 'X\(/\)' \| . 2>/dev/null ||
+$as_echo X"$file" |
+    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)[^/].*/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\/\)$/{
+	    s//\1/
+	    q
+	  }
+	  /^X\(\/\).*/{
+	    s//\1/
+	    q
+	  }
+	  s/.*/./; q'`
+      as_dir=$dirpart/$fdir; as_fn_mkdir_p
+      # echo "creating $dirpart/$file"
+      echo '# dummy' > "$dirpart/$file"
+    done
+  done
+}
+ ;;
 
+  esac
 done # for ac_tag
 
 
@@ -5942,6 +14319,8 @@ $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
 fi
 
 
+# Restore lib/config_warnings.h.in
+mv ${CONFIG_WARNINGS}.sav ${CONFIG_WARNINGS}
 
 cat <<EOF;
 
@@ -5949,58 +14328,119 @@ Keepalived configuration
 ------------------------
 Keepalived version       : ${VERSION}
 Compiler                 : ${CC}
-Compiler flags           : ${CFLAGS}
+Preprocessor flags       : ${KA_CPPFLAGS}
+Compiler flags           : ${KA_CFLAGS}
 EOF
 
-if test -n "$LIBS"; then
-  echo "Extra Lib                : $LIBS"
+if test -n "$KA_LDFLAGS$KA_LIBS"; then
+  echo "Linker flags             : $KA_LDFLAGS"
+  echo "Extra Lib                : $KA_LIBS"
 fi
 
-if test "${IPVS_SUPPORT}" = "_WITH_LVS_"; then
-  echo "Use IPVS Framework       : Yes"
-  if test "${IPVS_SYNCD}" = "_HAVE_IPVS_SYNCD_"; then
-    echo "IPVS sync daemon support : Yes"
-  elif test "${IPVS_SYNCD}" = "_WITHOUT_IPVS_SYNCD_"; then
-    echo "IPVS sync daemon support : No"
-  fi
-  if test "${USE_NL}" = "LIBIPVS_USE_NL"; then
-    echo "IPVS use libnl           : Yes"
-  else
-    echo "IPVS use libnl           : No"
-  fi
-else
-  echo "Use IPVS Framework       : No"
-  echo "IPVS sync daemon support : No"
+echo "Use IPVS Framework       : ${IPVS_SUPPORT}"
+if test ${IPVS_SUPPORT} = Yes; then
+  echo "IPVS use libnl           : ${IPVS_USE_NL}"
+  echo "IPVS syncd attributes    : ${IPVS_SYNCD_ATTRIBUTES}"
+  echo "IPVS 64 bit stats        : ${IPVS_64BIT_STATS}"
+  echo "HTTP_GET regex support   : ${WITH_REGEX}"
 fi
-
-if test "${SO_MARK_SUPPORT}" = "_WITH_SO_MARK_"; then
-  echo "fwmark socket support    : Yes"
-else
-  echo "fwmark socket support    : No"
+echo "fwmark socket support    : ${SO_MARK_SUPPORT}"
+echo "Use VRRP Framework       : ${VRRP_SUPPORT}"
+if test ${VRRP_SUPPORT} = Yes; then
+  echo "Use VRRP VMAC            : ${MACVLAN_SUPPORT}"
+  echo "Use VRRP authentication  : ${VRRP_AUTH_SUPPORT}"
+  echo "With ip rules/routes     : ${FIB_ROUTING_SUPPORT}"
+  echo "With track_process       : ${HAVE_CN_PROC}"
+  echo "With linkbeat            : ${LINKBEAT_SUPPORT}"
 fi
-
-if test "${VRRP_SUPPORT}" = "_WITH_VRRP_"; then
-  echo "Use VRRP Framework       : Yes"
-  if test "${VRRP_VMAC}" = "_HAVE_VRRP_VMAC_"; then
-    echo "Use VRRP VMAC            : Yes"
-  else
-    echo "Use VRRP VMAC            : No"
-  fi
-else
-  echo "Use VRRP Framework       : No"
+echo "Use BFD Framework        : ${BFD_SUPPORT}"
+echo "SNMP vrrp support        : ${SNMP_VRRP_SUPPORT}"
+echo "SNMP checker support     : ${SNMP_CHECKER_SUPPORT}"
+echo "SNMP RFCv2 support       : ${SNMP_RFCV2_SUPPORT}"
+echo "SNMP RFCv3 support       : ${SNMP_RFCV3_SUPPORT}"
+if test ${SNMP_RFCV3_SUPPORT} = Yes; then
+  echo "SNMP send V3 for V2      : ${SNMP_V3_FOR_V2}"
 fi
-if test "${SNMP_SUPPORT}" = "_WITH_SNMP_"; then
-  echo "SNMP support             : Yes"
-else
-  echo "SNMP support             : No"
+echo "DBUS support             : ${DBUS_SUPPORT}"
+if test ${DBUS_SUPPORT} = Yes; then
+  echo "DBUS create instance     : ${DBUS_CREATE_INSTANCE}"
 fi
-if test "${SHA1_SUPPORT}" = "_WITH_SHA1_"; then
-  echo "SHA1 support             : Yes"
-else
-  echo "SHA1 support             : No"
+echo "SHA1 support             : ${SHA1_SUPPORT}"
+echo "Use JSON output          : ${ENABLE_JSON}"
+echo "libnl version            : ${NETLINK_VER}"
+echo "Use IPv4 devconf         : ${IPV4_DEVCONF}"
+echo "Use iptables             : ${USE_IPTABLES}"
+if test .$USE_IPTABLES = .Yes; then
+  echo "Use libiptc              : ${USE_LIBIPTC}"
+  echo "Use libipset             : ${USE_LIBIPSET}"
 fi
-if test "${DFLAGS}" = "-D_DEBUG_"; then
-  echo "Use Debug flags          : Yes"
-else
-  echo "Use Debug flags          : No"
+echo "Use nftables             : ${USE_NFTABLES}"
+echo "init type                : ${INIT_TYPE}"
+echo "Strict config checks     : ${STRICT_CONFIG}"
+echo "Build genhash            : ${BUILD_GENHASH}"
+echo "Build documentation      : ${HAVE_SPHINX_BUILD}"
+if test ${ENABLE_STACKTRACE} = Yes; then
+  echo "Stacktrace support       : ${ENABLE_STACKTRACE}"
+fi
+if test ${ENABLE_PERF} = Yes; then
+  echo "Perf support             : ${ENABLE_PERF}"
+fi
+if test ${MEM_CHECK} = Yes; then
+  echo "Memory alloc check       : ${MEM_CHECK}"
+  echo "Memory alloc check log   : ${MEM_CHECK_LOG}"
+fi
+if test ${TIMER_CHECK} = Yes; then
+  echo "Set time logging         : ${TIMER_CHECK}"
+fi
+if test ${ENABLE_DUMP_THREADS} = Yes; then
+  echo "Thread debugging         : ${ENABLE_DUMP_THREADS}"
+fi
+if test ${ENABLE_EPOLL_DEBUG} = Yes; then
+  echo "epoll_wait() debugging   : ${ENABLE_EPOLL_DEBUG}"
+fi
+if test ${ENABLE_EPOLL_THREAD_DUMP} = Yes; then
+  echo "epoll thread dumping     : ${ENABLE_EPOLL_THREAD_DUMP}"
+fi
+if test ${ENABLE_REGEX_DEBUG} = Yes; then
+  echo "regex debugging          : ${ENABLE_REGEX_DEBUG}"
+fi
+if test ${ENABLE_TSM_DEBUG} = Yes; then
+  echo "TSM debugging            : ${ENABLE_TSM_DEBUG}"
+fi
+if test ${ENABLE_VRRP_FD_DEBUG} = Yes; then
+  echo "VRRP_FD debugging        : ${ENABLE_VRRP_FD_DEBUG}"
+fi
+if test ${ENABLE_NETWORK_TIMESTAMP} = Yes; then
+  echo "network timestamping     : ${ENABLE_NETWORK_TIMESTAMP}"
+fi
+if test ${ENABLE_ASSERT} = Yes; then
+  echo "asserts enabled          : ${ENABLE_ASSERT}"
+fi
+if test ${ENABLE_DEBUG} = Yes; then
+  echo "Use Debug flags          : ${ENABLE_DEBUG}"
+fi
+if test ${ENABLE_NETLINK_TIMERS} = Yes; then
+  echo "Netlink command timers   : ${ENABLE_NETLINK_TIMERS}"
+fi
+if test ${ENABLE_SMTP_ALERT_DEBUG} = Yes; then
+  echo "smtp-alert debugging     : ${ENABLE_SMTP_ALERT_DEBUG}"
+fi
+if test "${FIXED_IF_TYPE}"; then
+  echo "Fixed interface type     : ${FIXED_IF_TYPE}"
+fi
+if test "${CONFIG_FILE}"; then
+  echo "Default config file      : ${CONFIG_FILE}"
+fi
+
+
+if test ${IPVS_SUPPORT} = Yes -a ${IPVS_USE_NL} = No; then
+  echo
+  echo "*** WARNING - this build will not support IPVS with IPv6. Please install libnl/libnl-3 dev libraries to support IPv6 with IPVS."
+  echo
+fi
+
+if test ${ENABLE_DEBUG} = Yes; then
+  echo
+  echo "*** WARNING --enable-debug is only for debugging purposes and isn't expected to work properly"
+  echo
 fi
diff --git a/tools/keepalived/configure.ac b/tools/keepalived/configure.ac
new file mode 100644
index 000000000..3f1955372
--- /dev/null
+++ b/tools/keepalived/configure.ac
@@ -0,0 +1,2795 @@
+#
+# Keepalived OpenSource project.
+#
+# Configuration template file for keepalived.
+# autoconf will generate & check deps for proper compilation
+#
+# Copyright (C) 2001-2018 Alexandre Cassen, <acassen@linux-vs.org>
+
+AC_DEFUN([add_to_var], [$1="$$1 $2"])
+AC_DEFUN([add_to_var_ind], [eval $1=\"\$$1 $2\"]) dnl "
+
+AC_DEFUN([add_to_var_ind_unique],
+  ADD_NEW=
+  [ eval var=\$$1
+    for item in $2; do
+      echo " $var " | $GREP -q " $item "
+      if test $? -ne 0; then
+	add_to_var([ADD_NEW], [$item])
+      fi
+    done
+    add_to_var_ind([$1], [$ADD_NEW])
+  ])
+
+AC_DEFUN([add_pkg_config],
+  [ if test -n "$2"; then
+      KA_PKG_PFX=$2
+    else
+      KA_PKG_PFX=KA
+    fi
+    add_to_var_ind_unique([${KA_PKG_PFX}_CPPFLAGS], [`$PKG_CONFIG --cflags-only-I $1`])
+    add_to_var_ind_unique([${KA_PKG_PFX}_CFLAGS], [`$PKG_CONFIG --cflags-only-other $1`])
+
+    if test .$3 = .remove-requires; then
+      REQUIRES=`$PKG_CONFIG --print-requires $1`
+      var=`$PKG_CONFIG --libs-only-l $1`
+      for r in $REQUIRES; do
+	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
+	for l in $REQ_LIBS; do
+	  var=`echo " $var " | sed -e "s: $l : :g"`
+	done
+      done
+      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
+      eval ${KA_PKG_PFX}_LIBS="\"$var\""
+
+      var=`echo $var | sed -e "s/-l//g"`
+      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
+    else
+      add_to_var_ind_unique([${KA_PKG_PFX}_LIBS], [`$PKG_CONFIG --libs $1`])
+    fi
+  ])
+
+AC_DEFUN([add_pkg_config_without_libs],
+  [ if test -n "$2"; then
+      KA_PKG_PFX=$2
+    else
+      KA_PKG_PFX=KA
+    fi
+    add_to_var_ind_unique([${KA_PKG_PFX}_CPPFLAGS], [$($PKG_CONFIG --cflags-only-I $1)])
+    add_to_var_ind_unique([${KA_PKG_PFX}_CFLAGS], [$($PKG_CONFIG --cflags-only-other $1)])
+  ])
+
+AC_DEFUN([add_config_opt], [add_to_var([CONFIG_OPTIONS], [$1])])
+
+AC_DEFUN([add_system_opt], [add_to_var([SYSTEM_OPTIONS], [$1])])
+
+AC_DEFUN([get_lib_name],
+  [
+    if test $LDD = :; then
+      AC_MSG_ERROR([ldd is required for dynamic run-time linking support])
+    fi
+
+    SAV_LIBS="$LIBS"
+    LIBS="$LIBS -l$1"
+    AC_LINK_IFELSE([AC_LANG_SOURCE([[
+      extern void $2(void);
+      int main(void)
+      {
+	$2();
+	return 0;
+      }
+    ]])], [
+      LIB_DETAILS=`$LDD ./conftest$EXEEXT | grep $1.so | sed -e "s/^[[ \t]]*//"`
+      LIB_NAME=`echo $LIB_DETAILS | sed -e "s/ .*//"`
+    ],[
+    ])
+    LIBS="$SAV_LIBS"
+  ])
+
+# AS_VAR_COPY was introduced in autoconf 2.63b.
+# Remove the following definition once require autoconf >= 2.64.
+m4_ifndef([AS_VAR_COPY],
+[m4_define([AS_VAR_COPY],
+[AS_LITERAL_IF([$1[]$2], [$1=$$2], [eval $1=\$$2])])])
+
+dnl ----[ Process this file with autoconf to produce a configure script ]----
+AC_PREREQ([2.63])
+AC_INIT([Keepalived], [2.0.19], [keepalived-users@groups.io], [], [http://www.keepalived.org/])
+AM_INIT_AUTOMAKE([-Wall -Werror -Woverride foreign])
+
+AC_CONFIG_SRCDIR([keepalived/core/main.c])
+
+AC_CONFIG_HEADERS([lib/config.h lib/config_warnings.h])
+
+AH_TOP(
+  [
+#ifndef _CONFIG_H
+#define _CONFIG_H
+  ])
+AH_BOTTOM(
+  [
+#include "config_warnings.h"
+
+#ifndef _GNU_SOURCE
+#define _GNU_SOURCE
+#endif
+
+#endif])
+
+AC_CONFIG_FILES([Makefile keepalived/Makefile lib/Makefile keepalived/core/Makefile keepalived.spec \
+		 genhash/Makefile keepalived/check/Makefile keepalived/vrrp/Makefile \
+		 keepalived/bfd/Makefile doc/Makefile bin_install/Makefile keepalived/dbus/Makefile \
+		 keepalived/etc/Makefile keepalived/etc/init/Makefile keepalived/etc/init.d/Makefile \
+		 doc/man/man8/Makefile])
+
+
+MAINTAINERCLEANFILES="*~ *.orig *.rej core core.*"
+AC_SUBST(MAINTAINERCLEANFILES)
+CONFIG_OPTIONS=
+SYSTEM_OPTIONS=
+
+AM_SILENT_RULES([yes])
+
+PKG_PROG_PKG_CONFIG
+
+dnl ----[ Keepalived specific configure options ]----
+AC_ARG_ENABLE(lvs-syncd,
+  [AS_HELP_STRING([--disable-lvs-syncd], [do not use LVS synchronization daemon])])
+AC_ARG_ENABLE(lvs,
+  [AS_HELP_STRING([--disable-lvs], [do not use the LVS framework])])
+AC_ARG_ENABLE(lvs-64bit-stats,
+  [AS_HELP_STRING([--disable-lvs-64bit-stats], [do not use the LVS 64-bit stats])])
+AC_ARG_ENABLE(vrrp,
+  [AS_HELP_STRING([--disable-vrrp], [do not use the VRRP framework])])
+AC_ARG_ENABLE(bfd,
+  [AS_HELP_STRING([--enable-bfd], [use the BFD framework])])
+AC_ARG_WITH(kernel-dir,
+  [AS_HELP_STRING([--with-kernel-dir=DIR], [path to linux kernel source directory])],
+  [AS_HELP_STRING([kernel_src_path="$withval"],], [[kernel_src_path=""])])
+AC_ARG_ENABLE(fwmark,
+  [AS_HELP_STRING([--disable-fwmark], [compile without SO_MARK support])])
+AC_ARG_ENABLE(snmp,
+  [AS_HELP_STRING([--enable-snmp], [compile with SNMP support])])
+AC_ARG_ENABLE(snmp-vrrp,
+  [AS_HELP_STRING([--enable-snmp-vrrp], [compile with SNMP vrrp support])])
+AC_ARG_ENABLE(snmp-keepalived,
+  [AS_HELP_STRING([--enable-snmp-keepalived], [obsolete - use --enable-snmp-vrrp])])
+AC_ARG_ENABLE(snmp-checker,
+  [AS_HELP_STRING([--enable-snmp-checker], [compile with SNMP checker support])])
+AC_ARG_ENABLE(snmp-rfc,
+  [AS_HELP_STRING([--enable-snmp-rfc], [compile with SNMP RFC2787 (VRRPv2) and SNMP RFC6527 (VRRPv3) support])])
+AC_ARG_ENABLE(snmp-rfcv2,
+  [AS_HELP_STRING([--enable-snmp-rfcv2], [compile with SNMP RFC2787 (VRRPv2) support])])
+AC_ARG_ENABLE(snmp-rfcv3,
+  [AS_HELP_STRING([--enable-snmp-rfcv3], [compile with SNMP RFC6527 (VRRPv3) support])])
+AC_ARG_ENABLE(snmp-reply-v3-for-v2,
+  [AS_HELP_STRING([--disable-snmp-reply-v3-for-v2], [disable RFC6527 responses for VRRPv2 instances])])
+AC_ARG_ENABLE(dbus,
+  [AS_HELP_STRING([--enable-dbus], [compile with dbus support])])
+AC_ARG_ENABLE(dbus-create-instance,
+  [AS_HELP_STRING([--enable-dbus-create-instance], [compile with dbus support for creating instances])])
+AC_ARG_ENABLE(sha1,
+  [AS_HELP_STRING([--enable-sha1], [compile with SHA1 support])])
+AC_ARG_ENABLE(regex,
+  [AS_HELP_STRING([--enable-regex], [build with HTTP_GET regex checking])])
+AC_ARG_ENABLE(regex-timers,
+  [AS_HELP_STRING([--enable-regex-timers], [build with HTTP_GET regex timers])])
+AC_ARG_ENABLE(json,
+  [AS_HELP_STRING([--enable-json], [compile with signal to dump configuration and stats as json])])
+AC_ARG_WITH(init,
+  [AS_HELP_STRING([--with-init=(upstart|systemd|SYSV|SUSE|openrc)], [specify init type])],
+  [init_type="$withval"], [init_type=""])
+AC_ARG_ENABLE(vrrp-auth,
+  [AS_HELP_STRING([--disable-vrrp-auth], [compile without VRRP authentication])])
+AC_ARG_ENABLE(checksum_compat,
+  [AS_HELP_STRING([--disable-checksum-compat], [compile without v1.3.6 and earlier VRRPv3 unicast checksum compatibility])])
+AC_ARG_ENABLE(routes,
+  [AS_HELP_STRING([--disable-routes], [compile without ip rules/routes])])
+AC_ARG_ENABLE(linkbeat,
+  [AS_HELP_STRING([--disable-linkbeat], [build without linkbeat support])])
+AC_ARG_ENABLE(gnu-std-paths,
+  [AS_HELP_STRING([--enable-gnu-std-paths], [use GNU standard paths for pid files etc])])
+AC_ARG_ENABLE(dynamic-linking,
+  [AS_HELP_STRING([--enable-dynamic-linking], [compile with/without dynamically linked libiptc/libipset/libnl])])
+AC_ARG_ENABLE(iptables,
+  [AS_HELP_STRING([--disable-iptables], [compile without iptables support])],
+  [], [IPTABLES_SILENT=Yes])
+AC_ARG_ENABLE(libiptc-dynamic,
+  [AS_HELP_STRING([--enable-libiptc-dynamic], [compile with libiptc dynamically linked])])
+AC_ARG_ENABLE(libipset-dynamic,
+  [AS_HELP_STRING([--disable-libipset-dynamic], [compile with libipset statically linked])])
+AC_ARG_ENABLE(libnl-dynamic,
+  [AS_HELP_STRING([--enable-libnl-dynamic], [compile with libnl dynamically linked])])
+AC_ARG_ENABLE(libiptc,
+  [AS_HELP_STRING([--disable-libiptc], [compile without libiptc])])
+AC_ARG_ENABLE(libipset,
+  [AS_HELP_STRING([--disable-libipset], [compile without libipset])])
+AC_ARG_ENABLE(nftables,
+  [AS_HELP_STRING([--disable-nftables], [build without nftables support])],
+  [], [NFTABLES_SILENT=Yes])
+AC_ARG_ENABLE(libnl,
+  [AS_HELP_STRING([--disable-libnl], [compile without libnl])])
+AC_ARG_ENABLE(track-process,
+  [AS_HELP_STRING([--disable-track-process], [build without track-process functionality])])
+AC_ARG_WITH(run-dir,
+  [AS_HELP_STRING([--with-run-dir=PATH_TO_RUN], [specify directory where /run is located])],
+  [RUN_DIR_SPECIFIED=Y], [RUN_DIR_SPECIFIED=N])
+AC_ARG_ENABLE(strict-config-checks,
+  [AS_HELP_STRING([--enable-strict-config-checks], [build with strict configuration checking])])
+AC_ARG_ENABLE(hardening,
+  [AS_HELP_STRING([--disable-hardening], [do not build with security hardening])])
+AC_ARG_ENABLE(optimise,
+  [AS_HELP_STRING([--enable-optimise], [compiler optimisation level])], [], [enable_optimise=not-specified])
+AC_ARG_ENABLE(warnings,
+  [AS_HELP_STRING([--enable-warnings[[=WARNINGS]]], [additional compiler warnings, disable for reduced set])], [], [enable_warnings=yes])
+AC_ARG_ENABLE(extra-warnings,
+  [AS_HELP_STRING([--enable-extra-warnings], [extra compiler warnings that will probably produce many warnings])])
+AC_ARG_ENABLE(mem-check,
+  [AS_HELP_STRING([--enable-mem-check], [compile with memory alloc checking])])
+AC_ARG_ENABLE(mem-check-log,
+  [AS_HELP_STRING([--enable-mem-check-log], [compile with memory alloc checking writing to syslog])])
+AC_ARG_ENABLE(timer-check,
+  [AS_HELP_STRING([--enable-timer-check], [compile with set time logging])])
+AC_ARG_ENABLE(debug,
+  [AS_HELP_STRING([--enable-debug], [compile with debugging flags])])
+AC_ARG_ENABLE(netlink-timers,
+  [AS_HELP_STRING([--enable-netlink-timers], [compile with netlink command timers])])
+AC_ARG_ENABLE(smtp-alert-debug,
+  [AS_HELP_STRING([--enable-smtp-alert-debug], [compile with smtp-alert debugging])])
+AC_ARG_ENABLE(stacktrace,
+  [AS_HELP_STRING([--enable-stacktrace], [compile with stacktrace support])])
+AC_ARG_ENABLE(perf,
+  [AS_HELP_STRING([--enable-perf], [compile with perf performance data recording support for vrrp process])])
+AC_ARG_ENABLE(log-file,
+  [AS_HELP_STRING([--enable-log-file], [enable logging to file (-g)])])
+AC_ARG_ENABLE(dump-threads,
+  [AS_HELP_STRING([--enable-dump-threads], [compile with thread dumping support])])
+AC_ARG_ENABLE(epoll-debug,
+  [AS_HELP_STRING([--enable-epoll-debug], [compile with epoll_wait() debugging support])])
+AC_ARG_ENABLE(epoll-thread-dump,
+  [AS_HELP_STRING([--enable-epoll-thread-dump], [compile with epoll thread dumping support])])
+AC_ARG_ENABLE(regex-debug,
+  [AS_HELP_STRING([--enable-regex-debug], [compile with regex debugging support])])
+AC_ARG_ENABLE(tsm-debug,
+  [AS_HELP_STRING([--enable-tsm-debug], [compile with TSM debugging support])])
+AC_ARG_ENABLE(vrrp-fd-debug,
+  [AS_HELP_STRING([--enable-vrrp-fd-debug], [compile with vrrp fd debugging support])])
+AC_ARG_ENABLE(eintr-debug,
+  [AS_HELP_STRING([--enable-eintr-debug], [compile with EINTR debugging support, set to check/nocheck to check/not check for EINTR])])
+AC_ARG_ENABLE(track-process-debug,
+  [AS_HELP_STRING([--enable-track-process-debug], [compile with track process debugging support, set to log all process connector events])])
+AC_ARG_ENABLE(parser-debug,
+  [AS_HELP_STRING([--enable-parser-debug], [compile with parser debugging support])])
+AC_ARG_ENABLE(checksum-debug,
+  [AS_HELP_STRING([--enable-checksum-debug], [compile with checksum debugging support])])
+AC_ARG_ENABLE(dump-keywords,
+  [AS_HELP_STRING([--enable-dump-keywords], [compile with keyword dumping support])])
+AC_ARG_ENABLE(network-timestamp,
+  [AS_HELP_STRING([--enable-network-timestamp], [compile with network timestamp debugging support])])
+AC_ARG_ENABLE(asserts,
+  [AS_HELP_STRING([--enable-asserts], [compile with assert() enabled])])
+AC_ARG_WITH(fixed-if-type,
+  [AS_HELP_STRING([--with-fixed-if-type=TYPE], [treat interface type TYPE as unchangeable])])
+AC_ARG_WITH(default-config-file,
+  AS_HELP_STRING([--with-default-config-file=FILE], [Default configuration file]),
+  [default_config_file="$withval"], [default_config_file=""])
+AC_ARG_ENABLE(profile,
+  [AS_HELP_STRING([--enable-profile], [compile with profiling flags])])
+AC_ARG_ENABLE(conversion-checks,
+  [AS_HELP_STRING([--enable-conversion-checks], [compile with conversion warnings if sensible])])
+AC_ARG_ENABLE(force-conversion-checks,
+  [AS_HELP_STRING([--enable-force-conversion-checks], [compile with conversion warnings])])
+AC_ARG_ENABLE(Werror,
+  [AS_HELP_STRING([--enable-Werror], [compile with warnings being errors])])
+
+AC_ARG_WITH([systemdsystemunitdir],
+	AS_HELP_STRING([--with-systemdsystemunitdir=DIR], [Directory for systemd service files])])
+
+# Set the kernel headers path
+if test -n "$kernel_src_path"; then
+  if test ! -d $kernel_src_path/include; then
+    AC_MSG_ERROR([kernel source path $kernel_src_path/include does not exist])
+  fi
+  if test ! -d $kernel_src_path/include/linux; then
+    AC_MSG_ERROR([kernel source path $kernel_src_path/include does not appear to include linux header files])
+  fi
+  if test -d $kernel_src_path/include/uapi/linux; then
+    AC_MSG_ERROR([kernel source path $kernel_src_path appears to be an unprocessed kernel source tree])
+  fi
+  kernelinc="-isystem $kernel_src_path/include"
+elif test ! -d /usr/include/linux -a \
+	    -d /usr/src/linux/include; then
+  kernelinc="-isystem /usr/src/linux/include"
+else
+  kernelinc=
+fi
+
+CPPFLAGS="$kernelinc $CPPFLAGS"
+
+# Checks for programs.
+AC_PROG_CC
+AC_PROG_MAKE_SET
+AC_PROG_INSTALL
+AC_PROG_RANLIB
+AC_PROG_GREP
+AC_PROG_LN_S
+AC_PROG_SED
+AC_CHECK_TOOL(STRIP,strip)
+AC_CHECK_TOOL(LDD,ldd)
+
+m4_ifdef([AM_PROG_AR], [AM_PROG_AR])
+ARFLAGS=cr
+AC_SUBST(ARFLAGS)
+
+# Default settings
+ENABLE_LOG_FILE_APPEND=No
+
+# AC_PROG_LIBTOOL
+
+#
+# save the configure arguments
+#
+args=`echo $ac_configure_args | $SED -e "s/'//g"`
+AC_DEFINE_UNQUOTED(KEEPALIVED_CONFIGURE_OPTIONS,"$args", [configure options specified])
+
+# Save the CPPFLAGS, CFLAGS, LDFLAGS and LDLIBS settings for make time
+KA_CPPFLAGS="$kernelinc -D_GNU_SOURCE $CPPFLAGS"
+KA_CFLAGS="-g $CFLAGS"
+KA_LDFLAGS=$LDFLAGS
+KA_LIBS=$LDLIBS
+
+NEED_LIBDL=No
+#KA_LIBTOOLFLAGS =
+
+# Set up the compiler warnings we want
+dnl -- Unused warnings - traditional
+MAX_FRAME_SIZE=5120
+WARNINGS_BASIC="all extra unused strict-prototypes"
+WARNINGS_STD="absolute-value address-of-packed-member alloca alloc-zero array-bounds=2 attribute-alias bad-function-cast cast-align cast-qual chkp date-time disabled-optimization double-promotion duplicated-branches duplicated-cond float-conversion float-equal format-overflow format-security format-signedness format-truncation frame-larger-than=$MAX_FRAME_SIZE implicit-fallthrough=3 init-self inline jump-misses-init logical-op missing-declarations missing-field-initializers missing-prototypes nested-externs normalized null-dereference old-style-definition overlength-strings pointer-arith redundant-decls shadow shift-overflow=2 stack-protector strict-overflow=4 strict-prototypes stringop-overflow=2 suggest-attribute=cold suggest-attribute=const suggest-attribute=format suggest-attribute=malloc suggest-attribute=noreturn suggest-attribute=pure sync-nand trampolines undef uninitialized unknown-pragmas unsuffixed-float-constants unused-const-variable=2 unused-macros variadic-macros write-strings"
+WARNINGS_EXTRA="aggregate-return cast-align= strict conversion format-nonliteral format-overflow=2 format-truncation=2 padded pedantic sign-conversion stack-usage=$MAX_FRAME_SIZE strict-overflow=5 stringop-overflow=3 stringop-overflow=4 switch-enum system-headers traditional-conversion"
+
+# We want _GNU_SOURCE defined always
+add_to_var([CPPFLAGS], [-D_GNU_SOURCE])
+
+# fpclassify() needs -lm
+add_to_var([KA_LIBS], [-lm])
+
+# Some sanity checks on configure options
+AS_IF([test .$enable_vrrp = .no],
+    AS_IF([test .$IPTABLES_SILENT == .Yes], [enable_iptables=no])
+    AS_IF([test .$NFTABLES_SILENT == .Yes], [enable_nftables=no])
+
+    AS_IF([test .$enable_perf != .], [AC_MSG_ERROR([enable-perf requires vrrp])])
+    AS_IF([test $with_fixed_if_type], [AC_MSG_ERROR([with-fixed-if-type requires vrrp])])
+    AS_IF([test .$enable_vrrp_fd_debug != .], [AC_MSG_ERROR([enable-vrrp-fd-debug requires vrrp])])
+    AS_IF([test .$enable_tsm_debug != .], [AC_MSG_ERROR([enable-tsm-debug requires vrrp])])
+    AS_IF([test .$enable_json != .], [AC_MSG_ERROR([enable-json requires vrrp])])
+    AS_IF([test .$enable_snmp_vrrp != .], [AC_MSG_ERROR([enable-snmp-vrrp requires vrrp])])
+    AS_IF([test .$enable_snmp_keepalived != .], [AC_MSG_ERROR([enable-snmp-keepalived requires vrrp])])
+    AS_IF([test .$enable_snmp_rfc != .], [AC_MSG_ERROR([enable-snmp-rfc requires vrrp])])
+    AS_IF([test .$enable_snmp_rfcv2 != .], [AC_MSG_ERROR([enable-snmp-rfcv2 requires vrrp])])
+    AS_IF([test .$enable_snmp_rfcv3 != .], [AC_MSG_ERROR([enable-snmp-rfcv3 requires vrrp])])
+    AS_IF([test .$enable_dbus != .], [AC_MSG_ERROR([enable-dbus requires vrrp])])
+    AS_IF([test .$enable_vrrp_auth != .], [AC_MSG_ERROR([disable-vrrp-auth requires vrrp])])
+    AS_IF([test .$enable_checksum_compat != .], [AC_MSG_ERROR([disable-checksum-compat requires vrrp])])
+    AS_IF([test .$enable_routes != .], [AC_MSG_ERROR([disable-routes requires vrrp])])
+    AS_IF([test .$enable_linkbeat != .], [AC_MSG_ERROR([disable-linkbeat requires vrrp])])
+    AS_IF([test .$enable_bfd != .], [AC_MSG_ERROR([enable-bfd requires vrrp])])
+    AS_IF([test .$enable_iptables != .no], [AC_MSG_ERROR([enable-iptables requires vrrp])])
+    AS_IF([test .$enable_nftables != .no], [AC_MSG_ERROR([enable-nftables requires vrrp])])
+    AS_IF([test .$enable_track_process != .], [AC_MSG_ERROR([enable-track-process requires vrrp])])
+    AS_IF([test .$enable_network_timestamp != .], [AC_MSG_ERROR([enable-network_timestamp requires vrrp])])
+  )
+AS_IF([test .$enable_iptables = .no],
+    AS_IF([test .$enable_libiptc != .], [AC_MSG_ERROR([disable-libiptc requires vrrp and iptables])])
+    AS_IF([test .$enable_libipset != .], [AC_MSG_ERROR([disable-libipset requires vrrp and iptables])])
+  )
+AS_IF([test .$enable_libiptc = .no],
+    AS_IF([test .$enable_libiptc_dynamic != .], [AC_MSG_ERROR([enable-libiptc-dynamic requires vrrp and libiptc])])
+    AS_IF([test .$enable_libipset != .], [AC_MSG_ERROR([disable-libipset requires libiptc])])
+    AS_IF([test .$enable_libipset_dynamic != .], [AC_MSG_ERROR([disable-libipset-dynamic requires libiptc])])
+  )
+AS_IF([test .$enable_libipset = .no],
+    AS_IF([test .$enable_libipset_dynamic != .], [AC_MSG_ERROR([disable-libipset-dynamic requires ipsets])])
+  )
+AS_IF([test .$enable_snmp_rfc != .yes -a .$enable_snmp_rfcv3 != yes],
+    AS_IF([test .$enable_snmp_reply_v3_for_v2 != .], [AC_MSG_ERROR([enable-snmp-reply-v3-for-v2 requires enable-snmp-rfcv3 or enable-snmp-rfc])])
+  )
+AS_IF([test .$enable_dbus != .yes],
+    AS_IF([test .$enable_dbus_create_instance != .], [AC_MSG_ERROR([enable-dbus-create-instance requires enable-dbus])])
+  )
+AS_IF([test .$enable_lvs = .no],
+    AS_IF([test .$enable_regex != .], [AC_MSG_ERROR([enable-regex requires lvs])])
+    AS_IF([test .$enable_libnl != .], [AC_MSG_ERROR([disable-libnl requires lvs])])
+    AS_IF([test .$enable_lvs_syncd != .], [AC_MSG_ERROR([disable-lvs-syncd requires lvs])])
+    AS_IF([test .$enable_lvs_64bit_stats != .], [AC_MSG_ERROR([disable-lvs-64bit-stats requires lvs])])
+    AS_IF([test .$enable_fwmark != .], [AC_MSG_ERROR([enable-fwmark requires lvs])])
+  )
+AS_IF([test .$enable_lvs = .no],
+    AS_IF([test .$enable_libnl_dynamic != .], [AC_MSG_ERROR([enable-libnl-dynamic requires lvs and libnl])])
+  )
+AS_IF([test .$enable_regex != .yes],
+    AS_IF([test .$enable_regex_timers != .], [AC_MSG_ERROR([enable-regex-timers requires enable-regex])])
+    AS_IF([test .$enable_regex_debug != .], [AC_MSG_ERROR([enable-regex-debug requires enable-regex])])
+  )
+AS_IF([test .$enable_track_process = .no],
+    AS_IF([test .$enable_track_process_debug != .], [AC_MSG_ERROR([enable-track-process-debug incompatible with disable-track-process])])
+  )
+
+dnl -- Check for diagnostic pragmas in functions - GCC 4.6.0
+AC_MSG_CHECKING([diagnostic pragmas in functions])
+AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+  int main(int argc, char**argv)
+  {
+_Pragma("GCC diagnostic warning \"-Wall\"")
+  }
+  ]])],
+  [
+    AC_MSG_RESULT([yes])
+    AC_DEFINE([_HAVE_FUNCTION_DIAGNOSTIC_PRAGMAS_], [ 1 ], [Define to 1 if can have _Pragma GCC diagnostic in functions])
+  ],
+  [
+    AC_MSG_RESULT([no])
+  ])
+
+dnl -- Check for diagnostic push/pop pragmas - GCC 4.6.0
+AC_MSG_CHECKING([diagnostic push/pop pragmas])
+AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+  int main(int argc, char**argv)
+  {
+_Pragma("GCC diagnostic push")
+  }
+  ]])],
+  [
+    AC_MSG_RESULT([yes])
+    AC_DEFINE([_HAVE_DIAGNOSTIC_PUSH_POP_PRAGMAS_], [ 1 ], [Define to 1 if can have _Pragma GCC diagnostic push/pop])
+  ],
+  [
+    AC_MSG_RESULT([no])
+  ])
+
+dnl - Set up warnings list
+AS_IF([test ".$enable_warnings" = .no],
+      [WARNINGS_ENABLED=$WARNINGS_BASIC],
+      [AS_IF([test ".$enable_warnings" != .yes],
+	     [WARN_LIST=`echo $enable_warnings | sed -e "s/-W//g"`
+	      add_to_var([WARNINGS_ENABLED], ["$WARN_LIST"])
+	     ])
+      ]
+     )
+AS_IF([test .$enable_extra_warnings = .yes],
+      [add_to_var([WARNINGS_ENABLED], ["$WARNINGS_EXTRA"])])
+
+if test "$enable_conversion_checks" = yes; then
+  # Check if we can sensibly enable -Wconversion
+  AC_MSG_CHECKING([for usable -Wconversion])
+  SAV_CFLAGS="$CFLAGS"
+  CFLAGS="$CFLAGS -Wconversion -O2 -Wp,-D_FORTIFY_SOURCE=2 -Werror"
+  AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+    #include <sys/types.h>
+    #include <sys/select.h>
+    #include <stdint.h>
+    #include <stdbool.h>
+    #include <sys/socket.h>
+    #include <linux/rtnetlink.h>
+
+    #define VAL	255
+
+    static void
+    fun(uint8_t val)
+    {
+    }
+
+    int main(int argc, char**argv)
+    {
+      fd_set set;
+      uint8_t	val = 42;
+      unsigned u;
+      bool b;
+      size_t size = 17;
+      char c[2];
+      char *c_ptr = c;
+      struct rtattr rta;
+      struct rtattr *rta_p = &rta;
+
+      FD_SET(argc+1, &set);
+
+      fun(argc == VAL ? VAL : val);
+
+      //      vrrp->lower_prio_no_advert = vrrp->strict_mode ? true : global_data->vrrp_lower_prio_no_advert;
+      u = u ? true : b;
+
+      size = RTA_LENGTH(size);
+      c_ptr = RTA_DATA(c_ptr);
+      rta_p = RTA_NEXT(rta_p, size);
+
+      val = (u < 256 ) ? u & 0xff : 0;
+    }
+    ]])],
+    [
+      AC_MSG_RESULT([yes])
+      add_to_var([WARNINGS_ENABLED], [conversion])
+    ],
+    [
+      AC_MSG_RESULT([no])
+      AC_MSG_WARN([-Wconversion is not sensible with this compiler. Use --enable-force-conversion-checks to override.])
+    ])
+  CFLAGS="$SAV_CFLAGS"
+elif test "$enable_force_conversion_checks" = yes; then
+  add_to_var([WARNINGS_ENABLED], [conversion])
+fi
+
+if test "$enable_Werror" = yes; then
+  add_to_var([WARNINGS_ENABLED], [error])
+fi
+
+CONFIG_WARNINGS=lib/config_warnings.h.in
+
+# Save (or restore) lib/config_warnings.h.in
+AS_IF([test ! -f ${CONFIG_WARNINGS}.sav],
+      [cp -p ${CONFIG_WARNINGS} ${CONFIG_WARNINGS}.sav],
+      [cp -p ${CONFIG_WARNINGS}.sav ${CONFIG_WARNINGS}])
+
+SAV_CFLAGS="$CFLAGS"
+for WARN in $WARNINGS_ENABLED
+do
+  AC_MSG_CHECKING([for -W$WARN])
+  CFLAGS="$SAV_CFLAGS -W$WARN"
+
+  WARN_VAR=_HAVE_WARNING_`echo $WARN | tr "a-z=-" "A-Z__"`_
+  LOCAL_WARN_VAR=HAVE_WARNING_`echo $WARN | sed -e "s/=.*//" | tr "a-z-" "A-Z_"`
+  grep -q "^#undef $WARN_VAR$" $CONFIG_WARNINGS
+  AS_IF([test $? -ne 0],
+	[echo -e "\n/* Define to 1 if -W$WARN in use */\n#undef $WARN_VAR" >>$CONFIG_WARNINGS]
+       )
+
+  test `echo $WARN | grep "=[[0-9]][[0-9]]*$"`
+  AS_IF([test $? -eq 0],
+	[ WARN_SHORT=`echo $WARN | sed -e 's/=[[0-9]][[0-9]]*$//'`
+	  WARN_VAR_SHORT=_HAVE_WARNING_`echo $WARN_SHORT | tr "a-z=-" "A-Z__"`_
+	  grep -q "^#undef $WARN_VAR_SHORT$" $CONFIG_WARNINGS
+	  AS_IF([test $? -ne 0],
+		[echo -e "\n/* Define to 1 if -W$WARN_SHORT in use */\n#undef $WARN_VAR_SHORT" >>$CONFIG_WARNINGS]
+	       )
+	],
+	[ unset WARN_VAR_SHORT ]
+       )
+
+  AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+    int main(int argc, char**argv)
+    {
+    }
+    ]])],
+    [
+      # gcc 9 removed -Wchkp and doesn't error if it is specified,
+      # but rather outputs:
+      #  warning: switch '-Wchkp' is no longer supported
+      # so check for the warning.
+      touch conftest.err
+      grep -q "is no longer supported" conftest.err
+      AS_IF([test $? -ne 0],
+       [
+	AC_MSG_RESULT([yes])
+	eval $LOCAL_WARN_VAR=yes
+	add_to_var([KA_CFLAGS], [-W$WARN])
+	AC_DEFINE_UNQUOTED([$WARN_VAR], [ 1 ])
+	AS_IF([test -z "$WARN_VAR_SHORT"], [],
+	      [AC_DEFINE_UNQUOTED([$WARN_VAR_SHORT], [ 1 ])]
+	     )
+       ],
+       [
+	AC_MSG_RESULT([no])
+	eval $LOCAL_WARN_VAR=no
+       ])
+    ],
+    [
+      AC_MSG_RESULT([no])
+      eval $LOCAL_WARN_VAR=no
+    ])
+done
+AS_IF([test .$HAVE_WARNING_STRICT_OVERFLOW = .yes],
+      [
+	# The following is not supported in gcc 5.4.0
+	CFLAGS="$CFLAGS -Werror"
+	AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+	  _Pragma("GCC diagnostic warning \"-Wstrict-overflow=1\"")
+	  int main(int argc, char**argv)
+	  {
+	  }
+	  ]])],
+	  [AC_DEFINE([_HAVE_PRAGMA_WARN_STRICT_OVERFLOW_1_], [ 1 ], [Define to 1 if _Pragma("GCC diagnostic warning \"-Wstrict-overflow=1\"") supported])
+	  ])
+      ]
+     )
+CFLAGS="$SAV_CFLAGS"
+
+dnl ---- [ Do we want stricter configuration checking? ] ----
+STRICT_CONFIG=No
+if test "$enable_strict_config_checks" = yes; then
+  AC_DEFINE([_STRICT_CONFIG_], [ 1 ], [Define to 1 if want stricter configuration checking])
+  STRICT_CONFIG=Yes
+  add_config_opt([STRICT_CONFIG])
+fi
+AM_CONDITIONAL([WITH_STRICT_CONFIG_CHECKS], [test $STRICT_CONFIG = Yes])
+
+if test "$enable_hardening" != no; then
+  AC_MSG_CHECKING([for PIE support])
+  SAV_CFLAGS="$CFLAGS"
+  SAV_LDFLAGS="$LDFLAGS"
+  CFLAGS="$CFLAGS -fPIE"
+  LDFLAGS="$LDFLAGS -pie"
+  AC_LINK_IFELSE([AC_LANG_SOURCE([[
+    int main(int argc, char **argv)
+    {
+      int i = 0;
+    }
+    ]])],
+    AC_MSG_RESULT([yes])
+      add_to_var([KA_CFLAGS], [-fPIE])
+      add_to_var([KA_LDFLAGS], [-pie]),
+    AC_MSG_RESULT([no]))
+  CFLAGS=$SAV_CFLAGS
+  LDFLAGS=$SAV_LDFLAGS
+
+  for FLAG in \
+	  "-Wformat -Werror=format-security" \
+	  "-Wp,-D_FORTIFY_SOURCE=2" \
+	  "-fexceptions" \
+	  "-fstack-protector-strong" \
+	  "--param=ssp-buffer-size=4" \
+	  "-grecord-gcc-switches"
+  do
+    AC_MSG_CHECKING([for $FLAG support])
+    CFLAGS="$CFLAGS $FLAG"
+    AC_COMPILE_IFELSE(
+      [AC_LANG_SOURCE([[ ]])],
+      [AC_MSG_RESULT([yes])]
+	add_to_var([KA_CFLAGS], [$FLAG]),
+      [AC_MSG_RESULT([no])])
+    CFLAGS=$SAV_CFLAGS
+  done
+
+  WL_FLAGS=
+  for FLAG in \
+	  "-z,relro" \
+	  "-z,now"
+  do
+    AC_MSG_CHECKING([for -Wl,$FLAG support])
+    LDFLAGS="$LDFLAGS -Wl,$FLAG"
+    AC_LINK_IFELSE(
+      [AC_LANG_SOURCE([[
+      int main(int argc, char **argv)
+      {
+	int i = 0;
+      }
+      ]])],
+      [
+	AC_MSG_RESULT([yes])
+	WL_FLAGS="$WL_FLAGS -Wl,$FLAG"
+      ],
+      [AC_MSG_RESULT([no])]
+    )
+    CFLAGS=$SAV_CFLAGS
+    LDFLAGS=$SAV_LDFLAGS
+  done
+  if test -n "$WL_FLAGS"; then
+    add_to_var([KA_LDFLAGS], [$WL_FLAGS])
+  fi
+fi
+
+# enable-optimise
+AS_IF([test "$enable_optimise" = yes -o "$enable_optimise" = not-specified], [optimise_level=2], [optimise_level=$enable_optimise])
+AS_IF([test "$enable_optimise" = no], [optimise_level=0])
+AS_IF([test "$optimise_level" -eq 0],
+  [
+    echo $KA_CFLAGS | $GREP -q -- "-D_FORTIFY_SOURCE=[[^0]]"
+    AS_IF([test $? -eq 0], [AC_MSG_WARN([--disable-optimise requires --disable-hardening])])
+  ])
+FLAG="-O$optimise_level"
+AC_MSG_CHECKING([for $FLAG support])
+SAV_CFLAGS=$CFLAGS
+CFLAGS="$CFLAGS $FLAG"
+AC_COMPILE_IFELSE(
+  [AC_LANG_SOURCE([[ ]])],
+  [AC_MSG_RESULT([yes])]
+    add_to_var([KA_CFLAGS], [$FLAG]),
+  [
+    AC_MSG_RESULT([no])
+    AS_IF([test "$enable_optimise" != not-specified], [AC_MSG_ERROR([Invalid optimisation level specified])])
+  ])
+CFLAGS=$SAV_CFLAGS
+
+AC_SUBST(KA_CPPFLAGS)
+AC_SUBST(KA_CFLAGS)
+AC_SUBST(KA_LDFLAGS)
+AC_SUBST(KA_LIBS)
+# AC_SUBST(KA_LIBTOOLFLAGS)
+
+# Check if unaligned memory access is supported (for ARM not supported prior to ARMv6 processors)
+AC_MSG_CHECKING([for unaligned memory access])
+AC_RUN_IFELSE(
+  [
+    AC_LANG_PROGRAM(
+      [[
+	#include <limits.h>
+	#include <endian.h>
+
+	#if __BYTE_ORDER == __BIG_ENDIAN
+	#if ULONG_MAX == 0xffffffffffffffffUL
+	#define CHK_VAL       0x1234567890abcdefUL
+	#elif ULONG_MAX == 0xffffffffUL
+	#define CHK_VAL       0x12345678UL
+	#else
+	#define CHK_VAL       0x1234UL
+	#endif
+	#elif __BYTE_ORDER == __LITTLE_ENDIAN
+	#if ULONG_MAX == 0xffffffffffffffffUL
+	#define CHK_VAL       0xefcdab9078563412UL
+	#elif ULONG_MAX == 0xffffffffUL
+	#define CHK_VAL       0x78563412UL
+	#else
+	#define CHK_VAL       0x3412UL
+	#endif
+	#else
+	#error Neither big nor little endian - unsupported
+	#endif
+      ]],
+      [[
+	unsigned long arr[2] = { 0, 0 };
+	unsigned char *p = (unsigned char *)arr + 1;
+	unsigned i;
+
+	*(unsigned long *)p = CHK_VAL;
+
+	return !!(arr[0] == CHK_VAL || p[0] != 0x12 || p[1] != 0x34 || p[2] != 0x56);
+      ]]
+    )
+  ],
+  [AC_MSG_RESULT([yes])],
+  [
+    AC_MSG_RESULT([no])
+    AC_DEFINE([_NO_UNALIGNED_ACCESS_], [ 1 ], [Define to 1 if unaligned memory access not supported])
+  ],
+  [
+    AC_MSG_RESULT([unknown])
+    AC_MSG_WARN([Cannot determine if unaligned access supported. Assuming yes.])
+  ]
+ )
+
+# Checks for libraries.
+dnl clock_gettime() required -lt before glibc 2.17
+AC_MSG_CHECKING([for clock_gettime() requires -lrt])
+AC_LINK_IFELSE([AC_LANG_SOURCE([[
+  #include <time.h>
+  int main(int argc, char **argv)
+  {
+    int i;
+    struct timespec ts;
+
+    i = clock_gettime(CLOCK_MONOTONIC, &ts);
+  }
+  ]])],
+  [AC_MSG_RESULT([no])],
+  [
+    SAV_LIBS="$LIBS"
+    LIBS="$LIBS -lrt"
+    AC_LINK_IFELSE([AC_LANG_SOURCE([[
+      #include <time.h>
+      int main(int argc, char **argv)
+      {
+	int i;
+	struct timespec ts;
+
+	i = clock_gettime(CLOCK_MONOTONIC, &ts);
+      }
+      ]])],
+      [AC_MSG_RESULT([yes])]
+	add_to_var([KA_LIBS], [-lrt]),
+      [AC_MSG_ERROR([clock_gettime() not supported])])
+    LIBS=$SAV_LIBS
+  ])
+
+# Checks for header files.
+AC_CHECK_HEADERS([arpa/inet.h fcntl.h limits.h netdb.h netinet/in.h stdint.h stdlib.h string.h sys/ioctl.h sys/param.h sys/prctl.h sys/socket.h sys/time.h syslog.h unistd.h],
+  [], [AC_MSG_ERROR([Missing/unusable system header file <$ac_header>])])
+
+# check for kernel headers
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS $kernelinc"
+dnl -- <linux/netlink.h> needed <sys/socket.h> until Linux 3.1
+dnl -- using AC_CHECK_HEADER causes a horrible error message for the user
+NETLINK_EXTRA_INCLUDE=
+AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+  #include <linux/netlink.h>
+  ]])], [],
+  [AC_CHECK_HEADER([linux/netlink.h],
+    [
+      AC_DEFINE([NETLINK_H_NEEDS_SYS_SOCKET_H], [ 1 ], [Define to 1 if <linux/netlink.h> needs <sys/socket.h>])
+      NETLINK_EXTRA_INCLUDE="#include <sys/socket.h>"
+    ], [AC_MSG_ERROR([Missing/unusable kernel header file <linux/netlink.h>])],
+    [[#include <sys/socket.h>]])])
+
+dnl -- <linux/rtnetlink.h> needed <sys/socket.h> until ? Linux 3.1
+dnl -- using AC_CHECK_HEADER causes a horrible error message for the user
+RTNETLINK_EXTRA_INCLUDE=
+AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+  #include <linux/rtnetlink.h>
+  ]])], [],
+  [AC_CHECK_HEADER([linux/rtnetlink.h],
+    [
+      AC_DEFINE([RTNETLINK_H_NEEDS_SYS_SOCKET_H], [ 1 ], [Define to 1 if <linux/rtnetlink.h> needs <sys/socket.h>])
+      RTNETLINK_EXTRA_INCLUDE="#include <sys/socket.h>"
+    ], [AC_MSG_ERROR([Missing/unusable kernel header file <linux/rtnetlink.h>])],
+    [[#include <sys/socket.h>]])])
+
+AC_CHECK_HEADERS([asm/types.h linux/ethtool.h linux/icmpv6.h linux/if_ether.h linux/if_packet.h linux/ip.h linux/sockios.h linux/types.h],
+  [], [AC_MSG_ERROR([Missing/unusable kernel header file <$ac_header>])])
+AC_CHECK_HEADERS([linux/fib_rules.h linux/if_addr.h linux/if_link.h],
+  [], [AC_MSG_ERROR([Missing/unusable kernel header file <$ac_header>])],
+  [[$NETLINK_EXTRA_INCLUDE]])
+AC_CHECK_HEADERS([linux/if_arp.h],
+  [], [AC_MSG_ERROR([Missing/unusable <$ac_header>])],
+  [[#include <sys/socket.h>]])
+CPPFLAGS="$SAV_CPPFLAGS"
+
+# Checks for typedefs, structures, and compiler characteristics.
+AC_HEADER_STDBOOL
+AC_C_INLINE
+AC_TYPE_INT64_T
+AC_TYPE_PID_T
+AC_TYPE_SIZE_T
+AC_TYPE_UINT16_T
+AC_TYPE_UINT32_T
+AC_TYPE_UINT64_T
+AC_TYPE_UINT8_T
+AC_C_CONST
+
+# Checks for library functions.
+AC_FUNC_FORK
+AC_FUNC_MALLOC
+AC_FUNC_REALLOC
+AC_CHECK_FUNCS([dup2 getcwd gettimeofday memmove memset select setenv socket strcasecmp strchr strdup strerror strpbrk strstr strtol strtoul uname])
+dnl - pipe2() since Linux 2.6.27 and glibc 2.9.
+AC_CHECK_FUNCS([pipe2], [add_system_opt([PIPE2])])
+dnl - signalfd() since Linux 2.6.22 and glibc 2.8
+AC_CHECK_FUNCS([signalfd], [add_system_opt([SIGNALFD])])
+dnl - inotify_init1() since Linux 2.6.27
+AC_CHECK_FUNCS([inotify_init1], [add_system_opt([INOTIFY_INIT1])])
+dnl - vsyslog() Not defined by Posix, but available in glibc and musl
+AC_CHECK_FUNCS([vsyslog], [add_system_opt([VSYSLOG])])
+dnl - epoll_create1() since Linux 2.6.27 and glibc 2.9
+AC_CHECK_FUNCS([epoll_create1], [add_system_opt([EPOLL_CREATE1])])
+
+# glibc uses unsigned int as 3rd parameter to __assert_fail(), musl uses int.
+AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+  #include <assert.h>
+  #include <stdlib.h>
+
+  void __assert_fail(const char * a, const char *b, unsigned int l, const char *c)
+  {
+    exit(a[0] + b[0] + c[0] + l == 0);
+  }
+  ]])],
+  [LINE_type="unsigned int"], [LINE_type="int"])
+AC_DEFINE_UNQUOTED([LINE_type], [ $LINE_type ], [The type of parameter __line passed to __assert_fail()])
+
+dnl Check if libc supports __always_inline
+dnl See glibc sys/cdefs.h definition of __always_inline and comment
+SAV_CFLAGS="$CFLAGS"
+CFLAGS="$CFLAGS -Wattributes -Werror"
+AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+  #include <stdlib.h>
+  static __always_inline int
+  test_func(int val)
+  {
+    return val;
+  }
+
+  int
+  main(int argc, char **argv)
+  {
+    int val = test_func(3);
+    return val;
+  }
+  ]])],
+  [],
+  [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+    static __inline __attribute__ ((__always_inline__)) int
+    test_func(int val)
+    {
+      return val;
+    }
+
+    int
+    main(int argc, char **argv)
+    {
+      int val = test_func(3);
+      return val;
+    }
+    ]])],
+    [AC_DEFINE([__always_inline], [__inline __attribute__ ((__always_inline__))], [Define  __always_inline if libc does not define it])],
+    [AC_DEFINE([__always_inline], [inline], [Define __always_inline if libc does not define it])]
+  )])
+CFLAGS="$SAV_CFLAGS"
+
+dnl - Do we want to override dynamic/static linking?
+AS_IF([test "$enable_dynamic_linking"],
+  [
+    AS_IF([test .$enable_vrrp != .no],
+      [
+	enable_libiptc_dynamic=$enable_dynamic_linking
+	enable_libipset_dynamic=$enable_dynamic_linking
+      ])
+    AS_IF([test .$enable_lvs != .no],
+      [
+	enable_libnl_dynamic=$enable_dynamic_linking
+      ])
+  ])
+
+# check for missing definition - added in glibc 2.8
+AC_CHECK_DECLS([ETHERTYPE_IPV6], [],
+  [
+    AC_DEFINE([ETHERTYPE_IPV6], [0x86dd], [Defined here if not found in <net/ethernet.h>.])
+  ],
+  [[#include <net/ethernet.h>]])
+
+BUILD_GENHASH=Yes
+dnl ----[ Checks for openssl ]----
+# check for openssl headers
+NEED_MD5=no
+NEED_SSL=no
+if test "$enable_vrrp" != no -a \
+	"$enable_vrrp_auth" != no; then
+  NEED_MD5=yes
+fi
+if test "$enable_lvs" != no; then
+  NEED_MD5=yes
+  NEED_SSL=yes
+fi
+AC_CHECK_HEADERS([openssl/ssl.h openssl/err.h], [],
+  [
+    if test $NEED_SSL = yes; then
+      AC_MSG_ERROR([
+  !!! OpenSSL is not properly installed on your system. !!!
+  !!! Can not include OpenSSL headers files.            !!!])
+    fi
+    BUILD_GENHASH=No
+    NEED_SSL=no
+    break
+  ])
+AC_CHECK_HEADERS([openssl/md5.h], [],
+  [
+    if test $NEED_MD5 = yes; then
+      AC_MSG_ERROR([
+  !!! OpenSSL is not properly installed on your system. !!!
+  !!! Can not include OpenSSL MD5 headers files.        !!!])
+    fi
+    BUILD_GENHASH=No
+    NEED_MD5=no
+    break
+  ])
+unset LIBS
+
+$PKG_CONFIG --exists openssl
+if test $? -eq 0; then
+  add_pkg_config([openssl], [OPENSSL])
+else
+  OPENSSL_LIBS="-lssl -lcrypto"
+fi
+
+EXTRA_LIBS=`echo $OPENSSL_LIBS | sed -e "s/-lcrypto//"`
+AC_CHECK_LIB(crypto, MD5_Init, [],
+  [
+    if test $NEED_MD5 = yes; then
+      AC_MSG_ERROR([OpenSSL MD5 libraries are required])
+    fi
+    BUILD_GENHASH=No
+  ], [$EXTRA_LIBS])
+if test $NEED_MD5 = yes; then
+  add_to_var([KA_LIBS], [$LIBS])
+fi
+add_to_var([GENHASH_LIBS], [$LIBS])
+unset LIBS
+
+EXTRA_LIBS=`echo $OPENSSL_LIBS | sed -e "s/-lssl//"`
+AC_CHECK_LIB(ssl, SSL_CTX_new, [],
+  [
+    if test $NEED_SSL = yes; then
+      AC_MSG_ERROR([OpenSSL libraries are required])
+    fi
+    BUILD_GENHASH=No
+  ], [$EXTRA_LIBS])
+if test $NEED_SSL = yes; then
+  add_to_var([KA_LIBS], [$LIBS])
+fi
+add_to_var([GENHASH_LIBS], [$LIBS])
+unset LIBS
+
+# Introduced in OpenSSL ver 0.9.9
+LIBS=$OPENSSL_LIBS
+AC_MSG_CHECKING([SSL_set_tlsext_host_name() - may be a definition])
+AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+    #include <openssl/ssl.h>
+    int main(void)
+    {
+      request_t req;
+      SSL_set_tlsext_host_name(req.ssl, "SSL");
+    }
+  ]])], [
+    AC_MSG_RESULT([no])
+  ], [
+    AC_MSG_RESULT([yes])
+    AC_DEFINE([_HAVE_SSL_SET_TLSEXT_HOST_NAME_], [ 1 ], [Define to 1 if have SSL_set_tlsext_host_name()])
+])
+
+# SSL_CTX_set_verify_depth() introduced OpenSSL v0.9.5a
+AC_CHECK_FUNCS([SSL_CTX_set_verify_depth])
+
+# SSL_set0_rbio(), SSL_set0_wbio() OPENSSL_init_crypto() and TLS_method() introduced OpenSSL v1.1.0
+AC_CHECK_FUNCS([SSL_set0_rbio OPENSSL_init_crypto TLS_method])
+
+# In OpenSSL v1.1.1 the call to SSL_CTX_new() fails if OPENSSL_init_crypto() has been called with
+# OPENSSL_INIT_NO_LOAD_CONFIG. It does not fail in v1.1.0h and v1.1.1b.
+AS_IF([test .$ac_cv_func_OPENSSL_init_crypto = .yes],
+      [
+	AS_IF([test .$ac_cv_func_TLS_method = .yes], [method_func=TLS_method], [method_func=SSLv23_method])
+	AC_RUN_IFELSE(
+	  [AC_LANG_PROGRAM(
+	    [[#include <openssl/ssl.h>]],
+	    [[
+	      const SSL_METHOD *meth;
+	      SSL_CTX *ctx;
+
+	      if (!OPENSSL_init_crypto(OPENSSL_INIT_NO_LOAD_CONFIG, NULL))
+		return 1;
+
+	      /* Initialize SSL context */
+	      meth = $method_func();
+	      if (!(ctx = SSL_CTX_new(meth)))
+		return 1;
+	      return 0;
+	    ]])],
+	  [openssl_init_no_load_bug=0],
+	  [openssl_init_no_load_bug=1],
+	  [
+	    AC_MSG_WARN([Cannot determine if need to OPENSSL_init_crypto() problem. Assuming yes for safety.])
+	    openssl_init_no_load_bug=1
+	  ]
+	)
+	AS_IF([test $openssl_init_no_load_bug -eq 1],
+	      [AC_DEFINE([HAVE_OPENSSL_INIT_NO_LOAD_CONFIG_BUG], [ 1 ], [Define to 1 if OPENSSL_init_crypto(OPENSSL_INIT_NO_LOAD_CONFIG) bug)])])
+      ])
+unset LIBS
+
+if test $BUILD_GENHASH = No; then
+  AC_MSG_NOTICE([Unable to build genhash due to missing openssl headers/libraries])
+  GENHASH_LIBS=
+fi
+AC_SUBST([GENHASH_LIBS])
+AM_CONDITIONAL([BUILD_GENHASH], [test $BUILD_GENHASH = Yes])
+
+dnl ----[ Check for IPv4 devconf netlink support ]----
+IPV4_DEVCONF=No
+if test .$enable_vrrp != .no; then
+  dnl ----[Check have IPV4_DEVCONF defines - since Linux 3.11]----
+  SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPP_FLAGS $kernelinc"
+  IPV4_DEVCONF=Yes
+  AC_CHECK_DECLS([
+    IPV4_DEVCONF_ARP_IGNORE,
+    IPV4_DEVCONF_ACCEPT_LOCAL,
+    IPV4_DEVCONF_RP_FILTER,
+    IPV4_DEVCONF_ARPFILTER],
+    [],
+    [
+      IPV4_DEVCONF=No
+      break
+    ],
+    [[#include <linux/ip.h>]])
+  if test $IPV4_DEVCONF = Yes; then
+    AC_DEFINE([_HAVE_IPV4_DEVCONF_], [ 1 ], [Define to 1 if have IPv4 netlink device configuration])
+    add_system_opt([IPV4_DEVCONF])
+  fi
+  AC_CHECK_HEADERS([linux/rtnetlink.h], [], [AC_MSG_ERROR([Unusable linux/rtnetlink.h])], [$RTNETLINK_EXTRA_INCLUDE])
+  CPPFLAGS="$SAV_CPPFLAGS"
+fi
+
+dnl ----[ Check for IPv6 Advanced API (RFC3542) - since Linux 2.6.14 ]----
+IPV6_ADVANCED_API=No
+AC_CHECK_DECLS([
+  IPV6_RECVHOPLIMIT,
+  IPV6_RECVPKTINFO],
+  [IPV6_ADVANCED_API=Yes],
+  [],
+  [[#include <netinet/ip6.h>]])
+AS_IF([test $IPV6_ADVANCED_API = Yes], [add_system_opt([IPV6_ADVANCED_API])])
+
+dnl ----[ Checks for libraries ]----
+NETLINK_VER=0
+IPVS_USE_NL=No
+if test .$enable_lvs != .no -a .${enable_libnl} != .no; then
+  $PKG_CONFIG --exists libnl-3.0
+  if test $? -eq 0; then
+    add_pkg_config([libnl-3.0], [NL3], [remove-requires])
+    AC_CHECK_LIB($NL3_LIB_NAMES, nl_socket_alloc,
+      [
+	NETLINK_VER=3
+	NEED_NL3=No
+
+	add_pkg_config([libnl-genl-3.0], [GENL], [remove-requires])
+	AC_CHECK_LIB($GENL_LIB_NAMES, genl_connect, [],
+	  [AC_MSG_ERROR([libnl-3 is installed but not libnl-gen-3. Please, install libnl-gen-3/libnl-genl-3.])])
+	IPVS_USE_NL=Yes
+	if test .$enable_libnl_dynamic = .yes; then
+	  add_pkg_config_without_libs([libnl-genl-3.0])
+	  get_lib_name([$GENL_LIB_NAMES], [genl_connect])
+	  AC_DEFINE_UNQUOTED([NL3_GENL_LIB_NAME], [ "$LIB_NAME" ], [Define the nl-genl-3.0 library name])
+	else
+	  add_pkg_config([libnl-genl-3.0])
+	fi
+	NEED_NL3=Yes
+
+	if test $NEED_NL3 = Yes; then
+	  AC_DEFINE([_HAVE_LIBNL3_], [ 1 ], [Define to 1 if using libnl-3])
+	  add_system_opt([LIBNL3])
+	  if test .$enable_libnl_dynamic = .yes; then
+	    add_system_opt([LIBNL_DYNAMIC])
+	    add_pkg_config_without_libs([libnl-3.0])
+	    AC_DEFINE([_LIBNL_DYNAMIC_], [ 1 ], [Define to 1 if building with libnl dynamic linking])
+	    NEED_LIBDL=Yes
+	    get_lib_name([$NL3_LIB_NAMES], [nl_socket_alloc])
+	    AC_DEFINE_UNQUOTED([NL3_LIB_NAME], [ "$LIB_NAME" ], [Define the nl-3 library name])
+	  else
+	    add_pkg_config([libnl-3.0])
+	  fi
+	fi
+      ], [])
+  fi
+
+  if test $NETLINK_VER -eq 0; then
+    AC_CHECK_LIB(nl, nl_socket_modify_cb,
+      [
+	IPVS_USE_NL=Yes
+	NETLINK_VER=1
+	AC_DEFINE([_HAVE_LIBNL1_], [ 1 ], [Define to 1 if using libnl-1])
+	add_system_opt([LIBNL1])
+	if test .$enable_libnl_dynamic = .yes; then
+	  add_pkg_config_without_libs([libnl-1])
+	  add_config_opt([LIBNL_DYNAMIC])
+	  AC_DEFINE([_LIBNL_DYNAMIC_], [ 1 ], [Define to 1 if building with libnl dynamic linking])
+	  NEED_LIBDL=Yes
+	  get_lib_name([nl], [nl_socket_modify_cb])
+	  AC_DEFINE_UNQUOTED([NL_LIB_NAME], [ "$LIB_NAME" ], [Define the nl library name])
+	else
+	  add_pkg_config([libnl-1])
+	fi
+      ],
+      [AC_MSG_WARN([keepalived will be built without libnl support.])
+    ])
+  fi
+
+  if test $NETLINK_VER -ne 0; then
+    SAV_CPPFLAGS="$CPPFLAGS"
+    CPPFLAGS="$SAV_CPPFLAGS $NL3_CPPFLAGS"
+    AC_CHECK_HEADERS([netlink/netlink.h], [], [AC_MSG_ERROR([netlink headers missing])])
+    AC_CHECK_HEADERS([netlink/genl/ctrl.h netlink/genl/genl.h], [], [AC_MSG_ERROR([netlink genl headers missing])])
+    CPPFLAGS="$SAV_CPPFLAGS"
+  fi
+fi
+AM_CONDITIONAL([LIBNL1], [test $NETLINK_VER -eq 1])
+AM_CONDITIONAL([LIBNL3], [test $NETLINK_VER -eq 3])
+AM_CONDITIONAL([LIBNL_DYNAMIC], [test .$enable_lvs != .no -a .$enable_libnl_dynamic = .yes -a $NETLINK_VER -ne 0])
+unset LIBS
+
+AC_CHECK_LIB(magic, magic_open,
+  [
+    AC_DEFINE([_HAVE_LIBMAGIC_], [ 1 ], [Define to 1 if have magic library])
+    add_to_var([KA_LIBS], [-lmagic])
+  ])
+unset LIBS
+
+dnl -- Check for the following variables introduced at various times into Linux
+dnl --FRA_OIFNAME		dnl -- Linux 2.6.33
+dnl --RTAX_QUICKACK		dnl -- Linux 3.11
+dnl --FRA_SUPPRESS_PREFIXLEN	dnl -- Linux 3.12
+dnl --FRA_SUPPRESS_IFGROUP	dnl -- Linux 3.12
+dnl --RTAX_CC_ALGO		dnl -- Linux 4.0
+dnl --RTA_VIA			dnl -- Linux 4.1
+dnl --RTA_NEWDST		dnl -- Linux 4.1
+dnl --RTA_PREF			dnl -- Linux 4.1
+dnl --FRA_TUN_ID		dnl -- Linux 4.3
+dnl --RTA_ENCAP			dnl -- Linux 4.3
+dnl --RTEXT_FILTER_SKIP_STATS	dnl -- Linux 4.4
+dnl --RTA_EXPIRES		dnl -- Linux 4.5
+dnl --FRA_L3MDEV		dnl -- Linux 4.8
+dnl --FRA_UID_RANGE		dnl -- Linux 4.10
+dnl --RTAX_FASTOPEN_NO_COOKIE	dnl -- Linux 4.15
+dnl --FRA_PROTOCOL		dnl -- Linux 4.17
+dnl --FRA_IP_PROTO		dnl -- Linux 4.17
+dnl --FRA_SPORT_RANGE		dnl -- Linux 4.17
+dnl --FRA_DPORT_RANGE		dnl -- Linux 4.17
+dnl --RTA_TTL_PROPAGATE		dnl -- Linux 4.12
+AC_CHECK_DECLS([RTA_ENCAP, RTA_EXPIRES, RTA_NEWDST, RTA_PREF, FRA_SUPPRESS_PREFIXLEN, FRA_SUPPRESS_IFGROUP, FRA_TUN_ID, RTAX_CC_ALGO, RTAX_QUICKACK, RTEXT_FILTER_SKIP_STATS, FRA_L3MDEV, FRA_UID_RANGE, RTAX_FASTOPEN_NO_COOKIE, RTA_VIA, FRA_OIFNAME, FRA_PROTOCOL, FRA_IP_PROTO, FRA_SPORT_RANGE, FRA_DPORT_RANGE, RTA_TTL_PROPAGATE], [], [],
+  [[$RTNETLINK_EXTRA_INCLUDES
+    #include <linux/rtnetlink.h>
+    #include <sys/socket.h>
+    #include <linux/fib_rules.h>]])
+for flag in RTA_ENCAP RTA_EXPIRES RTA_NEWDST RTA_PREF FRA_SUPPRESS_PREFIXLEN FRA_SUPPRESS_IFGROUP FRA_TUN_ID RTAX_CC_ALGO RTAX_QUICKACK RTEXT_FILTER_SKIP_STATS FRA_L3MDEV FRA_UID_RANGE RTAX_FASTOPEN_NO_COOKIE RTA_VIA FRA_OIFNAME FRA_PROTOCOL FRA_IP_PROTO FRA_SPORT_RANGE FRA_DPORT_RANGE RTA_TTL_PROPAGATE; do
+  AS_VAR_COPY([decl_var], [ac_cv_have_decl_$flag])
+  if test ${decl_var} = yes; then
+    add_system_opt[${flag}]
+  fi
+done
+
+dnl - Introduced in Linux 3.14
+AC_CHECK_DECLS([IFA_FLAGS], [], [], [[#include <linux/if_addr.h>]])
+for flag in IFA_FLAGS; do
+  AS_VAR_COPY([decl_var], [ac_cv_have_decl_$flag])
+  if test ${decl_var} = yes; then
+    add_system_opt[${flag}]
+  fi
+done
+
+dnl - Introduced in Linux 2.6.31, but not until glibc 2.17
+AC_CHECK_DECLS([IP_MULTICAST_ALL],
+  [
+    add_system_opt[IP_MULTICAST_ALL]
+    # Check if definition is in netinet/in.h, since we can't include linux/in.h
+    # due to conflicting definitions
+    AC_LINK_IFELSE(
+      [
+	AC_LANG_SOURCE(
+	[[
+	    #include <netinet/in.h>
+	    int main(int argc, char **argv)
+	    {
+	      int i = IP_MULTICAST_ALL;
+	    }
+	]])
+      ],
+      [],
+      [
+	# No - netinet/in.h doesn't have IP_MULTICAST_ALL
+	# Build a program that will output the value of the kernel's IP_MULTICAST_ALL
+	AC_LINK_IFELSE(
+	  [
+	    AC_LANG_SOURCE(
+	      [[
+		#include <sys/socket.h>
+		#include <linux/in.h>
+		#include <stdio.h>
+		int main(int argc, char **argv)
+		{
+		  printf("%d\n", IP_MULTICAST_ALL);
+		}
+	      ]])
+	  ],
+	  [
+	    # Create local definition of IP_MULTICAST_ALL
+	    IMA=$(./conftest$EXEEXT)
+	    AC_DEFINE_UNQUOTED([IP_MULTICAST_ALL], [ $IMA ], [Defined to value in <linux/in.h> if not in <netinet/in.h>])
+	  ])
+      ]
+    )
+  ],
+  [],
+  [[
+    #include <sys/socket.h>
+    #include <linux/in.h>
+  ]])
+
+dnl -- RedHat backported ENCAP_IP and ENCAP_IP6 without MPLS and ILA
+AS_IF([test $ac_cv_have_decl_RTA_ENCAP = yes],
+  [
+    AC_CHECK_DECLS([LWTUNNEL_ENCAP_MPLS, LWTUNNEL_ENCAP_ILA], [], [],
+      [[#include <linux/lwtunnel.h>]])
+    for flag in LWTUNNEL_ENCAP_MPLS LWTUNNEL_ENCAP_ILA; do
+      AS_VAR_COPY([decl_var], [ac_cv_have_decl_$flag])
+      if test ${decl_var} = yes; then
+	add_system_opt([${flag}])
+      fi
+    done
+  ])
+
+dnl ----[Check for iptables libraries]----
+USE_IPTABLES=No
+USE_LIBIPTC=No
+USE_LIBIPSET=No
+AS_IF([test .$enable_iptables != .no],
+  [
+    USE_IPTABLES=Yes
+    AC_DEFINE([_WITH_IPTABLES_], [ 1 ], [Define to 1 if want iptables support])
+    if test .${enable_libiptc} = .no; then
+      add_config_opt([IPTABLES_CMD])
+    else
+      USE_LIBIPTC=Yes
+      dnl -- linux/netfilter/x_tables.h since Linux 2.6.16
+      SAV_CPPFLAGS="$CPPFLAGS"
+      CPPFLAGS="$CPPFLAGS $kernelinc"
+      AC_CHECK_HEADERS([linux/netfilter/x_tables.h libiptc/libip6tc.h libiptc/libiptc.h libiptc/libxtc.h], [],
+	[
+	  USE_LIBIPTC=No
+	  break
+	])
+      CPPFLAGS="$SAV_CPPFLAGS"
+
+      if test $USE_LIBIPTC = Yes; then
+	add_pkg_config([--static libiptc], [IPTC])
+	LIBS="$IPTC_LIBS"
+	SAV_CPPFLAGS="$CPPFLAGS"
+	CPPFLAGS="$CPPFLAGS $kernelinc"
+	AC_CHECK_LIB(iptc, iptc_init,
+	  [
+	    AC_DEFINE([_HAVE_LIBIPTC_], [ 1 ], [Define to 1 if have iptables libraries])
+	    add_system_opt([LIBIPTC])
+	    if test .${enable_libiptc_dynamic} != .yes; then
+	      add_pkg_config([--static libiptc])
+	      add_config_opt([LIBIPTC])
+	      dnl - Older versions of libiptc produced a requirement for -liptc, but we don't need it
+	      KA_LIBS=`echo $KA_LIBS | sed -e "s/ -liptc//"`
+	      dnl - Even older versions of libiptc don't produce any requirement other than -liptc
+	      IPTC_LIBS=`echo $IPTC_LIBS | sed -e "s/ *-L[[^ ]]*  */ /" -e "s/ *-liptc */ /" -e "s/^  *$//"`
+	      if test ".$IPTC_LIBS" = .; then
+		KA_LIBS=`echo $KA_LIBS -lip4tc -lip6tc`
+	      fi
+	    else
+	      add_pkg_config_without_libs([libiptc])
+	      add_config_opt([LIBIPTC_DYNAMIC])
+	      AC_DEFINE([_LIBIPTC_DYNAMIC_], [ 1 ], [Define to 1 if building with libiptc dynamic linking])
+	      NEED_LIBDL=Yes
+	      get_lib_name([ip4tc], [iptc_init])
+	      AC_DEFINE_UNQUOTED([IP4TC_LIB_NAME], [ "$LIB_NAME" ], [Define the ip4tc library name])
+	      get_lib_name([ip6tc], [ip6tc_init])
+	      AC_DEFINE_UNQUOTED([IP6TC_LIB_NAME], [ "$LIB_NAME" ], [Define the ip6tc library name])
+	      LIBIPTC_DYNAMIC=Yes
+	    fi
+	  ],
+	  [USE_LIBIPTC=No])
+	CPPFLAGS="$SAV_CPPFLAGS"
+      fi
+
+      if test $USE_LIBIPTC = Yes; then
+	dnl ----[Check for ipset libraries]----
+	SAV_CPPFLAGS="$CPPFLAGS"
+	CPPFLAGS="$CPPFLAGS $kernelinc"
+	if test "${enable_libipset}" != no; then
+	  $PKG_CONFIG --exists libipset
+	  if test $? -eq 0; then
+	    add_pkg_config([libipset], [IPSET])
+	  else
+	    IPSET_LIBS="-lipset"
+	  fi
+	  SAV_LIBS=$LIBS
+	  LIBS="$IPTC_LIBS $IPSET_LIBS"
+
+	  AC_CHECK_LIB(ipset, ipset_session_init,
+	    [
+	      USE_LIBIPSET=Yes
+	      AC_CHECK_HEADERS([libipset/data.h libipset/linux_ip_set.h libipset/session.h libipset/types.h], [],
+		[
+		  USE_LIBIPSET=No
+		  break
+		])
+
+	      if test $USE_LIBIPSET = Yes; then
+		dnl -- Need to use <libipset/linux_ip_set.h> for <linux/netfilter/xt_set.h> prior to Linux 3.4
+		EXTRA_INCLUDE=
+		AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+		  #include <linux/netfilter/xt_set.h>
+		  ]])],
+		  [AC_CHECK_HEADERS([linux/netfilter/xt_set.h], [], [USE_LIBIPSET=No], [])],
+		  [AC_CHECK_HEADER([linux/netfilter/xt_set.h],
+		    [
+		      AC_DEFINE([USE_LIBIPSET_LINUX_IP_SET_H], [ 1 ], [Define to 1 if <linux/netfilter/xt_set.h> needs <libipset/linux_ip_set.h>])
+		      EXTRA_INCLUDE="#include <libipset/linux_ip_set.h>"
+		    ], [USE_LIBIPSET=No],
+		    [[#include <libipset/linux_ip_set.h>]])
+		  ]
+		)
+	      fi
+
+	      if test $USE_LIBIPSET = Yes; then
+		AC_DEFINE([_HAVE_LIBIPSET_], [ 1 ], [Define to 1 if have ipset library])
+		$PKG_CONFIG --exists libipset
+		if test $? -eq 0; then
+		  if test .${enable_libipset_dynamic} = .no; then
+		    add_pkg_config([libipset])
+		  else
+		    add_pkg_config_without_libs([libipset])
+		  fi
+		elif test .${enable_libipset_dynamic} = .no; then
+		  add_to_var([KA_LIBS], [-lipset])
+		fi
+		if test .${enable_libipset_dynamic} != .no; then
+		  AC_DEFINE([_LIBIPSET_DYNAMIC_], [ 1 ], [Define to 1 if building with libipset dynamic linking])
+		  add_config_opt([LIBIPSET_DYNAMIC])
+		  NEED_LIBDL=Yes
+		  get_lib_name([ipset], [ipset_session_init])
+		  AC_DEFINE_UNQUOTED([IPSET_LIB_NAME], [ "$LIB_NAME" ], [Define the ipset library name])
+		else
+		  add_config_opt([LIBIPSET])
+		fi
+
+		dnl -- xt_set_info_match first introduced in Linux 2.6.39 (initial implementation of ipsets)
+		dnl -- xt_set_info_match_v1 declared since Linux 3.1
+		AC_CHECK_MEMBER([struct xt_set_info_match_v1.match_set.index], [AC_DEFINE([HAVE_XT_SET_INFO_MATCH_V1], [ 1 ], [Define to 1 if have struct xt_set_info_match_v1])], [],
+		  [
+		    $EXTRA_INCLUDE
+		    #include <linux/netfilter/xt_set.h>
+		  ])
+		dnl -- xt_set_info_match_v3 declared since Linux 3.10
+		AC_CHECK_MEMBER([struct xt_set_info_match_v3.match_set.index], [AC_DEFINE([HAVE_XT_SET_INFO_MATCH_V3], [ 1 ], [Define to 1 if have struct xt_set_info_match_v3])], [],
+		  [
+		    $EXTRA_INCLUDE
+		    #include <linux/netfilter/xt_set.h>
+		  ])
+		dnl -- xt_set_info_match_v4 declared since Linux 3.19
+		AC_CHECK_MEMBER([struct xt_set_info_match_v4.match_set.index], [AC_DEFINE([HAVE_XT_SET_INFO_MATCH_V4], [ 1 ], [Define to 1 if have struct xt_set_info_match_v4])], [],
+		  [
+		    $EXTRA_INCLUDE
+		    #include <linux/netfilter/xt_set.h>
+		  ])
+
+		dnl - ipset type iface introduced in Linux 3.1
+		AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+		  #include <linux/netfilter/ipset/ip_set.h>
+		  int main(void) { int var = IPSET_ATTR_IFACE; }
+		  ]])],
+		  [AC_DEFINE([HAVE_IPSET_ATTR_IFACE], [ 1 ], [Define to 1 if ipset supports iface type])])
+
+		dnl - The include guard for <linux/netfilter/ipset/ip_set.h> has the leading _UAPI remove when
+		dnl - the source code is processed to produce the actual header files.
+		dnl - Unfortunately libipset provides a copy of the kernel headers, as <libipset/linux_ip_set*.h>,
+		dnl - but it doesn't remove the _UAPI from the header files when installing them.
+		dnl - Unfortunately we need to include some libipset header files, which include the
+		dnl - libipset version, and also <linux/netfilter/xt_set.h> which includes the kernel version.
+		dnl - To get around this problem, after include one of these we need to define the header guard
+		dnl - for the other, to stop it being included as well.
+		dnl - This is reported as a bug against ipset at https://bugzilla.netfilter.org/show_bug.cgi?id=1139
+		dnl - We will take the kernel version if there is an inclusion collision.
+		AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+		  #include <linux/netfilter/ipset/ip_set.h>
+		  #include <libipset/linux_ip_set.h>
+		  int main(void) {}
+		  ]])], [],
+		  [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+		     #include <linux/netfilter/ipset/ip_set.h>
+		     #ifdef _UAPI_IP_SET_H
+		     #error _UAPI_IP_SET_H defined
+		     #endif
+		     int main(void) {}
+		     ]])],
+		     [AC_DEFINE([LIBIPSET_H_ADD_UAPI_IP_SET_H_GUARD], [1], [Define to add guard _UAPI_IP_SET_H before including <libipset/linux_ip_set.h>])],
+		     [AC_DEFINE([LIBIPSET_H_ADD_IP_SET_H_GUARD], [1], [Define to add guard _IP_SET_H before including <libipset/linux_ip_set.h>])])
+		  ])
+	      fi
+
+	      if test $USE_LIBIPSET = Yes; then
+		AC_MSG_CHECKING([for libipset version 7 or later])
+		AC_COMPILE_IFELSE([AC_LANG_SOURCE(
+		  [[
+		    #include <libipset/session.h>
+
+		    void test_func(void)
+		    {
+		      ipset_session_init(NULL, NULL);
+		    }
+		  ]])],
+		  [
+		    AC_MSG_RESULT([yes])
+		  ],
+		  [
+		    AC_MSG_RESULT([no])
+		    AC_DEFINE([LIBIPSET_PRE_V7_COMPAT], [ 1 ], [Define to 1 if libipset library version prior to v7])
+		    add_system_opt[LIBIPSET_PRE_V7]
+		  ])
+	      fi
+	    ])
+	  LIBS="$SAV_LIBS"
+	fi
+
+	dnl -- XT_EXTENSION_MAXNAMELEN not defined until Linux 2.6.35
+	AC_CHECK_DECL([XT_EXTENSION_MAXNAMELEN], [],
+	  [AC_DEFINE([XT_EXTENSION_MAXNAMELEN], [ (XT_FUNCTION_MAXNAMELEN - 1) ], [Define if <linux/netfilter/x_tables.h> doesnt define it])],
+	  [#include <linux/netfilter/x_tables.h>])
+
+	CPPFLAGS="$SAV_CPPFLAGS"
+      fi
+    fi
+    AS_IF([test $USE_LIBIPTC = No -o .$LIBIPTC_DYNAMIC = .Yes],
+	  [AC_DEFINE([_USE_IPTABLES_CMD_], [ 1 ], [Define to 1 if using iptables command enabled])])
+  ])
+AM_CONDITIONAL([LIBIPTC], [test $USE_LIBIPTC = Yes])
+AM_CONDITIONAL([LIBIPSET], [test $USE_LIBIPSET = Yes])
+AM_CONDITIONAL([IPTABLES], [test $USE_IPTABLES = Yes])
+AM_CONDITIONAL([IPTABLES_CMD], [test $USE_IPTABLES = Yes -a \( $USE_LIBIPTC = No -o .$LIBIPTC_DYNAMIC = .Yes \)])
+AM_CONDITIONAL([LIBIPTC_DYNAMIC], [test $USE_LIBIPTC = Yes -a .$LIBIPTC_DYNAMIC = .Yes])
+AM_CONDITIONAL([LIBIPSET_DYNAMIC], [test $USE_LIBIPSET = Yes -a .${enable_libipset_dynamic} != .no])
+AM_CONDITIONAL([REQUIRE_IPTABLES_LIBS], [test $USE_IPTABLES = Yes -a $USE_LIBIPTC = Yes -a .$LIBIPTC_DYNAMIC = .Yes])
+unset LIBS
+
+dnl ----[Check for nftables libraries]----
+USE_NFTABLES=No
+if test .${enable_nftables} != .no; then
+  USE_NFTABLES=Yes
+  dnl -- linux/netfilter/nf_tables.h since Linux 3.13
+  SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPPFLAGS $kernelinc"
+  AC_CHECK_DECL([NFTA_TABLE_MAX], [],
+   [
+     AS_IF([test .${enable_nftables} = .yes], [AC_MSG_ERROR([nftables header files missing/not useable])])
+     USE_NFTABLES=No
+   ],
+   [#include <linux/netfilter/nf_tables.h>])
+
+  if test $USE_NFTABLES = Yes; then
+    $PKG_CONFIG --exists libnftnl
+    if test $? -ne 0; then
+      USE_NFTABLES=No
+      AC_MSG_WARN([libnftnl missing])
+    fi
+    $PKG_CONFIG --exists libmnl
+    if test $? -ne 0; then
+      USE_NFTABLES=No
+      AC_MSG_WARN([libmnl missing])
+    fi
+
+    if test $USE_NFTABLES = Yes; then
+      # nft prior to version 0.8.3 does not support type ifname in sets. We can't check the version of
+      #  nft, but we can check the version of libnftnl. nft v0.8.3 required libnftnl v1.0.9, but so did
+      #  nft v0.8.2. So play safe, and require the next version.
+      #LIBNFTNL_VERSION=`printf "0x%2.2x%2.2x%2.2xU" \`pkg-config --modversion libnftnl | sed -e "s/\./ /g"\``
+      #AC_DEFINE_UNQUOTED([LIBNFTNL_VERSION], [ $LIBNFTNL_VERSION ], [libnftnl version in hex])
+
+      add_pkg_config([libnftnl])
+      add_pkg_config([libmnl])
+      AC_DEFINE([_WITH_NFTABLES_], [ 1 ], [Define to 1 if want nftables support])
+      add_config_opt([NFTABLES])
+      AC_MSG_CHECKING([whether NFTNL_EXPR_LOOKUP_FLAGS is defined])
+      AC_LINK_IFELSE([AC_LANG_SOURCE([[
+	#include <libnftnl/expr.h>
+	int main(void)
+	{
+	  int i = NFTNL_EXPR_LOOKUP_FLAGS;
+	  return 0;
+	}
+	]])], [
+	  AC_MSG_RESULT(yes)
+	  AC_DEFINE([HAVE_NFTNL_EXPR_LOOKUP_FLAGS], [ 1 ], [Define to 1 if NFTNL_EXPR_LOOKUP_FLAGS defined])
+	],[
+	  AC_MSG_RESULT(no)
+	])
+      # nft dup from Linux 4.3
+      AC_CHECK_DECLS([NFTA_DUP_MAX], [], [],
+        [#include <linux/netfilter/nf_tables.h>])
+
+      AC_CHECK_HEADERS([libnftnl/udata.h],
+	[
+          AC_MSG_CHECKING([for nftnl_udata_put_u32])
+          SAV_LIBS="$LIBS"
+          LIBS="$LIBS `$PKG_CONFIG --libs libnftnl`"
+          AC_LINK_IFELSE([AC_LANG_SOURCE([[
+	      #include <libnftnl/udata.h>
+	      int main(void)
+	      {
+	        nftnl_udata_put_u32(NULL, 0, 0);
+	        return 0;
+	      }
+	    ]])], [
+	      AC_MSG_RESULT(yes)
+	      AC_DEFINE([HAVE_NFTNL_UDATA_PUT_U32], [ 1 ], [Define to 1 if nftnl_udata_put_u32 declared])
+	    ],[
+	      AC_MSG_RESULT(no)
+	    ])
+          LIBS="$SAV_LIBS"
+	])
+    fi
+  fi
+  CPPFLAGS="$SAV_CPPFLAGS"
+fi
+AM_CONDITIONAL([NFTABLES], [test $USE_NFTABLES = Yes])
+unset LIBS
+
+AS_IF([test $USE_IPTABLES = Yes -o $USE_NFTABLES = Yes], [AC_DEFINE([_WITH_FIREWALL_], [ 1 ], [Define to 1 if using iptables or nftables])])
+AM_CONDITIONAL([FIREWALL], [test $USE_IPTABLES = Yes -o $USE_NFTABLES = Yes])
+
+dnl ----[Check if have linux/if.h and net/if.h namespace collision]----
+# Including <linux/if.h> and <net/if.h> can cause a namespace collision.
+# Later versions of the headers are OK if linux/if.h is included second
+AC_MSG_CHECKING([for linux/if.h and net/if.h namespace collision])
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS $kernelinc"
+AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+    #include <linux/if.h>
+    #include <net/if.h>
+  ]])],
+  [
+    AC_MSG_RESULT([no])
+  ],
+  [
+    AC_MSG_RESULT([yes])
+    AC_DEFINE([_HAVE_NET_LINUX_IF_H_COLLISION_], [ 1 ], [Define to 1 if have linux/if.h followed by net/if.h namespace collision])
+    add_system_opt([NET_LINUX_IF_H_COLLISION])
+  ])
+CPPFLAGS="$SAV_CPPFLAGS"
+
+dnl ----[Check if have linux/if_ether.h and netinet/if_ether.h namespace collision]----
+# Including <linux/if_ether.h> and <netinet/if_ether.h> causes a namespace collision
+# with musl libc, but the collision only occurs if linux/ip_ether.h is included
+# before netinet/if_ether.h. The problem is that we want to include them in that
+# order.
+AC_MSG_CHECKING([for linux/if_ether.h then netinet/if_ether.h namespace collision])
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS $kernelinc"
+AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+    #include <linux/if_ether.h>
+    #include <netinet/if_ether.h>
+  ]])],
+  [
+    AC_MSG_RESULT([no])
+  ],
+  [
+    AC_MSG_RESULT([yes])
+    AC_DEFINE([_HAVE_NETINET_LINUX_IF_ETHER_H_COLLISION_], [ 1 ], [Define to 1 if have linux/if_ether.h then netinet/if_ether.h namespace collision])
+    add_system_opt([NETINET_LINUX_IF_ETHER_H_COLLISION])
+  ])
+CPPFLAGS="$SAV_CPPFLAGS"
+
+# Linux 4.5 to 4.5.4 has <libiptc/libiptc.h> indirectly including <net/if.h>
+# and <linux/if.h> which causes a namespace collision.
+AC_MSG_CHECKING([for libiptc/libiptc.h linux/if.h and net/if.h namespace collision])
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS $kernelinc"
+AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+    #include <libiptc/libiptc.h>
+  ]])],
+  [
+    AC_MSG_RESULT([no])
+  ],
+  [
+    AC_MSG_RESULT([yes])
+    AC_DEFINE([_HAVE_LIBIPTC_LINUX_NET_IF_H_COLLISION_], [ 1 ], [Define to 1 if have libiptc/libiptc.h linux/if.h and net/if.h namespace collision])
+    add_system_opt([LIBIPTC_LINUX_NET_IF_H_COLLISION])
+  ])
+CPPFLAGS="$SAV_CPPFLAGS"
+
+dnl ----[ Checks for LVS, VRRP and BFD support ]----
+IPVS_SYNCD_ATTRIBUTES=No
+IPVS_64BIT_STATS=No
+WITH_REGEX=No
+ENABLE_REGEX_DEBUG=No
+if test "$enable_lvs" != no; then
+  IPVS_SUPPORT=Yes
+  add_config_opt([LVS])
+  AC_DEFINE([_WITH_LVS_], [ 1 ], [Define to 1 if have IPVS support])
+
+  dnl -- <linux/ip_vs.h> exists from Linux 2.6.27; prior to that <net/ip_vs.h> is used
+  AC_CHECK_HEADERS([linux/ip_vs.h],
+    [
+      dnl -- From Linux 2.6.35 (but CentOS has it in 2.6.32)
+      AC_CHECK_DECLS([IP_VS_SVC_F_ONEPACKET], [], [],
+	[[#include <linux/ip_vs.h>]])
+    ])
+
+  if test $IPVS_USE_NL = Yes; then
+    AC_DEFINE([LIBIPVS_USE_NL], [ 1 ], [Define to 1 if libipvs can use netlink])
+    add_system_opt([LIBIPVS_NETLINK])
+  fi
+
+  dnl ----[ IPVS syncd options ]---
+  SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPPFLAGS $kernelinc"
+
+  dnl -- Since Linux 3.18
+  AC_CHECK_DECLS([IPVS_DEST_ATTR_ADDR_FAMILY], [add_system_opt([IPVS_DEST_ATTR_ADDR_FAMILY])], [], [#include <linux/ip_vs.h>])
+
+  dnl -- Since Linux ?.?.?
+  IPVS_SYNCD_ATTRIBUTES=Yes
+  AC_CHECK_DECLS([
+    IPVS_DAEMON_ATTR_SYNC_MAXLEN,
+    IPVS_DAEMON_ATTR_MCAST_GROUP,
+    IPVS_DAEMON_ATTR_MCAST_GROUP6,
+    IPVS_DAEMON_ATTR_MCAST_PORT,
+    IPVS_DAEMON_ATTR_MCAST_TTL], [],
+    [
+      IPVS_SYNCD_ATTRIBUTES=No
+      break
+    ],
+    [[#include <linux/ip_vs.h>]])
+
+  dnl -- Since Linux 4.3
+  if test $IPVS_SYNCD_ATTRIBUTES = Yes; then
+    AC_DEFINE([_HAVE_IPVS_SYNCD_ATTRIBUTES_], [ 1 ], [Define to 1 if have IPVS syncd attributes])
+    add_system_opt([IPVS_SYNCD_ATTRIBUTES])
+  fi
+
+  dnl ----[ IPVS 64-bit stats ]----
+  dnl -- Since Linux 4.1
+  if test "$enable_lvs_64bit_stats" != "no"; then
+    IPVS_64BIT_STATS=Yes
+    AC_CHECK_DECLS([
+      IPVS_SVC_ATTR_STATS64,
+      IPVS_DEST_ATTR_STATS64], [],
+      [
+	IPVS_64BIT_STATS=No
+	break
+      ],
+      [[#include <linux/ip_vs.h>]])
+    if test $IPVS_64BIT_STATS = Yes; then
+      AC_DEFINE([_WITH_LVS_64BIT_STATS_], [ 1 ], [Define to 1 if have IPVS 64 bit stats])
+      add_system_opt([IPVS_64BIT_STATS])
+    fi
+  fi
+
+  dnl ----[ IPVS tunnel type ]----
+  dnl -- Since Linux 5.2
+  AC_CHECK_DECLS([IPVS_DEST_ATTR_TUN_TYPE],
+    [
+      AC_DEFINE([_HAVE_IPVS_TUN_TYPE_], [ 1 ], [Define to 1 if have IPVS tunnel type])
+      add_system_opt([IPVS_TUN_TYPE])
+    ], [],
+    [[#include <linux/ip_vs.h>]])
+
+  dnl -- Since Linux 5.3
+  AC_CHECK_DECLS([IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM],
+    [
+      AC_DEFINE([_HAVE_IPVS_TUN_CSUM_], [ 1 ], [Define to 1 if have IPVS tunnel checksum options])
+      add_system_opt([IPVS_TUN_CSUM])
+    ], [],
+    [[#include <linux/ip_vs.h>]])
+
+  dnl -- Since Linux 5.3
+  AC_CHECK_DECLS([IP_VS_CONN_F_TUNNEL_TYPE_GRE],
+    [
+      AC_DEFINE([_HAVE_IPVS_TUN_GRE_], [ 1 ], [Define to 1 if have IPVS gre tunnel])
+      add_system_opt([IPVS_TUN_GRE])
+    ], [],
+    [[#include <linux/ip_vs.h>]])
+
+  CPPFLAGS="$SAV_CPPFLAGS"
+
+  dnl ----[ Is HTTP_GET regex checking wanted? ]----
+  AS_IF([test "$enable_regex" = yes],
+    [
+      $PKG_CONFIG --exists libpcre2-8
+      HAVE_PCRE2=$?
+      AS_IF([test $HAVE_PCRE2 -ne 0], [AC_MSG_ERROR([cannot find pcre library])])
+      AC_MSG_CHECKING([for pcre.h])
+      AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+	#define PCRE2_CODE_UNIT_WIDTH 8
+	#include <pcre2.h>
+	]])],
+	[
+	  AC_MSG_RESULT([yes])
+	  WITH_REGEX=Yes
+	  add_pkg_config([libpcre2-8])
+	  AC_DEFINE([_WITH_REGEX_CHECK_], [ 1 ], [Define to 1 to build with HTTP_GET regex checking])
+	  add_config_opt([REGEX])
+	],
+	[
+	  AC_MSG_RESULT([no])
+	  AC_MSG_ERROR([pcre2.h is missing])
+	])
+      if test "$enable_regex_timers" = yes; then
+	AC_DEFINE([_WITH_REGEX_TIMERS_], [ 1 ], [Define to 1 to include regex timers])
+      fi
+
+      if test "${enable_regex_debug}" = yes; then
+	AC_DEFINE([_REGEX_DEBUG_], [ 1 ], [Define to 1 to build with regex debugging support])
+	ENABLE_REGEX_DEBUG=Yes
+	add_config_opt([REGEX_DEBUG])
+      fi
+    ])
+else
+  IPVS_SUPPORT=No
+fi
+AM_CONDITIONAL([WITH_IPVS], [test $IPVS_SUPPORT = Yes])
+AM_CONDITIONAL([WITH_REGEX], [test $WITH_REGEX = Yes])
+
+dnl ----[ Checks for kernel netlink support ]----
+VRRP_SUPPORT=No
+VRRP_AUTH_SUPPORT=No
+MACVLAN_SUPPORT=No
+ENABLE_JSON=No
+BFD_SUPPORT=No
+HAVE_CN_PROC=No
+if test "$enable_vrrp" != no; then
+  VRRP_SUPPORT=Yes
+  AC_DEFINE([_WITH_VRRP_], [ 1 ], [Define to 1 if have VRRP support])
+  add_config_opt([VRRP])
+
+  dnl ----[ check for VRRP authentication support ]----
+  if test "${enable_vrrp_auth}" != no; then
+    VRRP_AUTH_SUPPORT=Yes
+    AC_DEFINE([_WITH_VRRP_AUTH_], [ 1 ], [Define to 1 if want ARRP authentication support])
+    add_config_opt([VRRP_AUTH])
+  fi
+
+  dnl ----[ Checks for kernel VMAC support ]----
+  SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPPFLAGS $kernelinc"
+  MACVLAN_SUPPORT=Yes
+  dnl -- Since Linux 2.6.33
+  AC_CHECK_DECLS([
+      IFLA_MACVLAN_MODE,
+      MACVLAN_MODE_PRIVATE], [],
+    [
+      MACVLAN_SUPPORT=No
+      break
+    ], [[
+      #include <sys/socket.h>
+      #include <linux/if_link.h>
+    ]])
+  if test $MACVLAN_SUPPORT = Yes; then
+    AC_DEFINE([_HAVE_VRRP_VMAC_], [ 1 ], [Define to 1 if have MAC VLAN support])
+    add_system_opt([VRRP_VMAC])
+  fi
+  CPPFLAGS="$SAV_CPPFLAGS"
+
+  dnl ----[ Checks for kernel IPVLAN support ]----
+  SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPPFLAGS $kernelinc"
+  IPVLAN_SUPPORT=Yes
+  dnl -- Since Linux 3.19
+  AC_CHECK_DECLS([
+      IFLA_IPVLAN_MODE], [],
+    [
+      IPVLAN_SUPPORT=No
+      break
+    ], [[
+      #include <sys/socket.h>
+      #include <linux/if_link.h>
+    ]])
+  if test $IPVLAN_SUPPORT = Yes; then
+    AC_DEFINE([_HAVE_VRRP_IPVLAN_], [ 1 ], [Define to 1 if have IP VLAN support])
+    add_system_opt([VRRP_IPVLAN])
+  fi
+  CPPFLAGS="$SAV_CPPFLAGS"
+
+  dnl ----[ Check for IFLA_LINK_NETNSID support ]---- since Linux v4.0
+  AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+    #include <linux/if_link.h>
+    int main(void) { int var = IFLA_LINK_NETNSID; }
+    ]])],
+    [
+      AC_DEFINE([HAVE_IFLA_LINK_NETNSID], [ 1 ], [Define to 1 if IFLA_LINK_NETNSID supported])
+      add_system_opt([IFLA_LINK_NETNSID])
+    ])
+
+  dnl ----[ JSON output or not ? ]----
+  if test "${enable_json}" = yes; then
+    ENABLE_JSON=Yes
+    AC_DEFINE([_WITH_JSON_], [ 1 ], [Define to 1 to build with JSON output support])
+    add_config_opt([JSON])
+  fi
+
+  dnl ----[ BFD support ? ]----
+  if test "${enable_bfd}" = yes; then
+    BFD_SUPPORT=Yes
+    AC_DEFINE([_WITH_BFD_], [ 1 ], [Define to 1 if have BFD support])
+    add_config_opt([BFD])
+  fi
+
+  dnl -- Check for process events connector - Linux v2.6.15
+  AS_IF([test .$enable_track_process != .no],
+    [
+      add_system_opt([CN_PROC])
+      HAVE_CN_PROC=Yes
+      AC_DEFINE([_WITH_CN_PROC_], [ 1 ], [Define to 1 if have linux/cn_proc.h and track-process not disabled])
+      dnl -- PROC_EVENT_SID since Linux v2.6.32
+      dnl -- PROC_EVENT_PTRACE since Linux v3.1
+      dnl -- PROC_EVENT_COMM since Linux v3.2
+      dnl -- PROC_EVENT_COREDUMP since Linux v3.10
+      AC_CHECK_DECLS([PROC_EVENT_SID, PROC_EVENT_PTRACE, PROC_EVENT_COMM, PROC_EVENT_COREDUMP], [], [], [[#include <linux/cn_proc.h>]])
+    ],
+    [add_config_opt([DISABLE_TRACK_PROCESS])])
+fi
+AM_CONDITIONAL([WITH_VRRP], [test $VRRP_SUPPORT = Yes])
+AM_CONDITIONAL([VRRP_AUTH], [test $VRRP_AUTH_SUPPORT = Yes])
+AM_CONDITIONAL([VMAC], [test $MACVLAN_SUPPORT = Yes])
+AM_CONDITIONAL([WITH_JSON], [test $ENABLE_JSON = Yes])
+AM_CONDITIONAL([WITH_BFD], [test $BFD_SUPPORT = Yes])
+AM_CONDITIONAL([CN_PROC], [test $HAVE_CN_PROC = Yes])
+
+if test ${IPVS_SUPPORT} = No -a ${VRRP_SUPPORT} = No; then
+  AC_MSG_ERROR([keepalived MUST be compiled with at least one of LVS or VRRP framework])
+fi
+
+dnl ----[ Checks for glibc SOCK_NONBLOCK support ]----
+# Introduced in Linux 2.6.27 and glibc 2.9
+AC_CHECK_DECLS([SOCK_NONBLOCK], [add_system_opt([SOCK_NONBLOCK])], [],[[#include <sys/socket.h>]])
+AM_CONDITIONAL([SOCK_NONBLOCK], [test $ac_cv_have_decl_SOCK_NONBLOCK = yes])
+
+dnl ----[ Checks for glibc SOCK_CLOEXEC support ]----
+# Introduced in Linux 2.6.27 and glibc 2.9
+AC_CHECK_DECLS([SOCK_CLOEXEC], [add_system_opt([SOCK_CLOEXEC])], [],[[#include <sys/socket.h>]])
+
+dnl ----[ Checks for pe support ]----
+# Introduced in Linux 2.6.37
+AC_CHECK_DECL([IPVS_SVC_ATTR_PE_NAME],
+   [
+     AC_DEFINE([_HAVE_PE_NAME_], [ 1 ], [Define to 1 if have pe selection support])
+   ],
+   [], [[#include <linux/ip_vs.h>]])
+
+dnl ----[ Checks for O_PATH support ]----
+# Introduced in Linux 2.6.39
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE"
+AC_CHECK_DECLS([O_PATH],
+  [
+    add_system_opt([O_PATH])
+  ], [],[[#include <fcntl.h>]])
+CPPFLAGS="$SAV_CPPFLAGS"
+
+dnl ----[ Check for GLOB_BRACE support ]----
+AC_CHECK_DECLS([GLOB_BRACE], [add_system_opt([GLOB_BRACE])], [], [[#include <glob.h>]])
+
+dnl ----[ Do we want v1.3.6 and earlier VRRPv3 unicast checksum compatibility support ]----
+UNICAST_CHKSUM_COMPAT_SUPPORT=No
+if test .$enable_checksum_compat != .no; then
+  UNICAST_CHKSUM_COMPAT_SUPPORT=Yes
+  AC_DEFINE([_WITH_UNICAST_CHKSUM_COMPAT_], [ 1 ], [Define to 1 to enable v1.3.6 and earlier VRRPv3 unicast checksum compatibility])
+  add_config_opt([OLD_CHKSUM_COMPAT])
+fi
+
+dnl ----[ Checks for FIB routing support ]----
+FIB_ROUTING_SUPPORT=No
+if test .$enable_vrrp != .no -a .$enable_routes != .no; then
+  # Introduced in Linux 2.6.19
+  SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPPFLAGS $kernelinc"
+  AC_CHECK_DECL([FRA_SRC],
+    [
+      FIB_ROUTING_SUPPORT=Yes
+      AC_DEFINE([_HAVE_FIB_ROUTING_], [ 1 ], [Define to 1 if have FIB routing support])
+      add_config_opt([FIB_ROUTING])
+    ], [],
+    [[#include <sys/socket.h>
+      #include <linux/fib_rules.h>]])
+  CPPFLAGS="$SAV_CPPFLAGS"
+fi
+AM_CONDITIONAL([FIB_ROUTING], [test $FIB_ROUTING_SUPPORT = Yes])
+
+dnl ----[ Check if linkbeat wanted ]----
+AS_IF([test .$enable_linkbeat = .no],
+  [
+    LINKBEAT_SUPPORT=No
+    add_config_opt([NO_LINKBEAT])
+  ],
+  [
+    LINKBEAT_SUPPORT=Yes
+    AC_DEFINE([_WITH_LINKBEAT_], [ 1 ], [Define to 1 if have linkbeat support])
+  ])
+
+dnl ----[ Checks for kernel IFLA_INET6_ADDR_GEN_MODE support ]----
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS $kernelinc"
+if test ${MACVLAN_SUPPORT} = Yes; then
+  # Introduced in Linux 3.17
+  AC_CHECK_DECLS([IFLA_INET6_ADDR_GEN_MODE],
+    [
+      add_system_opt([INET6_ADDR_GEN_MODE])
+    ], [], [[
+      #include <linux/if_link.h>
+    ]])
+fi
+CPPFLAGS="$SAV_CPPFLAGS"
+
+dnl ----[ Checks for kernel IFLA_VRF_... support ]----
+SAV_CPPFLAGS="$CPPFLAGS"
+CPPFLAGS="$CPPFLAGS $kernelinc"
+if test ${MACVLAN_SUPPORT} = Yes; then
+  # Introduced in Linux 4.3
+  AC_CHECK_DECLS([IFLA_VRF_MAX],
+    [
+      add_system_opt([VRF])
+      AC_DEFINE([_HAVE_VRF_], [ 1 ], [Define to 1 if have kernel VRF support])
+    ], [], [[
+      #include <linux/if_link.h>
+    ]])
+fi
+CPPFLAGS="$SAV_CPPFLAGS"
+
+dnl ----[ Checks for SNMP support ]----
+SNMP_SUPPORT=No
+SNMP_KEEPALIVED_SUPPORT=No
+SNMP_VRRP_SUPPORT=No
+SNMP_RFC_SUPPORT=No
+SNMP_RFCV2_SUPPORT=No
+SNMP_RFCV3_SUPPORT=No
+SNMP_CHECKER_SUPPORT=No
+SNMP_V3_FOR_V2=No
+if test "$enable_snmp_keepalived" = yes; then
+  AC_MSG_WARN([--enable-snmp-keepalived is obsolete. Use --enable-snmp-vrrp.])
+  enable_snmp_vrrp=$enable_snmp_keepalived
+fi
+if test "$enable_snmp" = yes -o \
+	"$enable_snmp_vrrp" = yes -o \
+	"$enable_snmp_checker" = yes -o \
+	"$enable_snmp_rfc" = yes -o \
+	"$enable_snmp_rfcv2" = yes -o \
+	"$enable_snmp_rfcv3" = yes; then
+  AC_PATH_TOOL([NETSNMP_CONFIG], [net-snmp-config], [no])
+  if test "$NETSNMP_CONFIG" = no; then
+    AC_MSG_ERROR([*** unable to find net-snmp-config])
+  fi
+  NETSNMP_LIBS_AGENT=`${NETSNMP_CONFIG} --netsnmp-agent-libs`
+  NETSNMP_LIBS_EXT=`${NETSNMP_CONFIG} --external-libs`
+  NETSNMP_LIBS="$NETSNMP_LIBS_AGENT $NETSNMP_LIBS_EXT"
+  NETSNMP_CFLAGS="`${NETSNMP_CONFIG} --base-cflags`"
+  NETSNMP_CPPFLAGS="-DNETSNMP_NO_INLINE"
+
+  # net-snmp-config adds compiler and linker options that were set at the time
+  # net-snmp was built, and this can include spec files that may not exist
+  # on the system building keepalived. We need to check if any spec files
+  # are specified, and if they do not exist on this system, then remove them
+  # from NETSNMP_LIBS or NETSNMP_CFLAGS.
+  # For further information, see https://bugzilla.redhat.com/show_bug.cgi?id=1544527
+  # and the other bugs referred to in it.
+  for spec in `echo $NETSNMP_LIBS | sed -e "s? ?\n?g" | grep "^-specs="`; do
+    SPEC_FILE=`echo $spec | sed -e "s?^-spaces=??"`
+    if test ! -f $SPEC_FILE; then
+      NETSNMP_LIBS=`echo $NETSNMP_LIBS | sed -e "s? *$spec *? ?"`
+      AC_MSG_WARN([Removing $spec from NETSNMP_LIBS since spec file not installed])
+    fi
+  done
+  for spec in `echo $NETSNMP_CFLAGS | sed -e "s? ?\n?g" | grep "^-specs="`; do
+    SPEC_FILE=`echo $spec | sed -e "s?^-spaces=??"`
+    if test ! -f $SPEC_FILE; then
+      NETSNMP_CFLAGS=`echo $NETSNMP_CFLAGS | sed -e "s? *$spec *? ?"`
+      AC_MSG_WARN([Removing $spec from NETSNMP_CFLAGS since spec file not installed])
+    fi
+  done
+
+  SAV_CFLAGS="$CFLAGS"
+  CFLAGS="$CFLAGS ${NETSNMP_CFLAGS}"
+  SAV_LIBS="$LIBS"
+  LIBS="$LIBS ${NETSNMP_LIBS}"
+  AC_MSG_CHECKING([whether C compiler supports flag "${NETSNMP_CFLAGS} ${NETSNMP_LIBS}" from Net-SNMP])
+  AC_LINK_IFELSE([AC_LANG_SOURCE([[
+      int main(void)
+      {
+	return 0;
+      }
+    ]])], [
+      AC_MSG_RESULT(yes)
+    ],[
+     AC_MSG_RESULT(no)
+     AC_MSG_ERROR([*** incorrect CFLAGS from net-snmp-config])
+    ])
+
+  # Do we have subagent support?
+  AC_CHECK_FUNCS([netsnmp_enable_subagent], [],
+      [AC_MSG_ERROR([*** no subagent support in net-snmp])])
+
+  # check for net-snmp headers
+  # Some ancient distributions may miss <net-snmp/agent/util_funcs.h> header
+  SAV_CPPFLAGS="$CPPFLAGS"
+  CPPFLAGS="$CPPFLAGS $NETSNMP_CFLAGS"
+  AC_CHECK_HEADERS(net-snmp/agent/agent_sysORTable.h net-snmp/agent/snmp_vars.h net-snmp/agent/util_funcs.h,[],
+    [AC_MSG_ERROR([missing net-snmp headers])],[[
+      #include <net-snmp/net-snmp-config.h>
+      #include <net-snmp/net-snmp-includes.h>
+      #include <net-snmp/agent/net-snmp-agent-includes.h>
+    ]])
+
+  SNMP_SUPPORT=Yes
+
+  # NETSNMP_CFLAGS can have CPPFLAGS options, so separate them
+  NETSNMP_CPPFLAGS_XTRA=`echo " $NETSNMP_CFLAGS " | sed -e "s/ /  /g" -e "s/ -[[^IDU]] *-/ -/g" -e "s/ -[[^IDU]] *[[^-]][[^ ]]* / /g" -e "s/  */ /g"`
+  NETSNMP_CFLAGS=`echo " $NETSNMP_CFLAGS " | sed -e "s/ /  /g" -e "s/ -[[IDU]] *[[^ ]]* / /g" -e "s/  */ /g"`
+  add_to_var([KA_CFLAGS], [$NETSNMP_CFLAGS])
+  add_to_var([KA_CPPFLAGS], [$NETSNMP_CPPFLAGS $NETSNMP_CPPFLAGS_XTRA])
+
+  # NETSNMP_LIBS may have some LDFLAGS options, so separate them
+  NETSNMP_LDFLAGS_XTRA=`echo " $NETSNMP_LIBS " | sed -e "s/ /  /g" -e "s/ -l *[[^ ]]* /  /g" -e "s/  */ /g" -e "s/ -/ @-/g" | tr "@" "\n" | sed -e "s/^  *//" -e "s/  *$//" | sort -u | tr "\n" " "`
+  NETSNMP_LIBS=`echo " $NETSNMP_LIBS " | sed -e "s/ /  /g" -e "s/ \(-l *[[^ ]]*\) /@\1@/g" | tr "@" "\n" | grep  "^-l" | tr "\n" " " | sed -e "s/  */ /g"`
+  add_to_var([KA_LDFLAGS], [$NETSNMP_LDFLAGS $NETSNMP_LDFLAGS_XTRA])
+  add_to_var([KA_LIBS], [$NETSNMP_LIBS])
+
+  if test "$enable_snmp_rfc" = yes; then
+    SNMP_RFCV2_SUPPORT=Yes
+    SNMP_RFCV3_SUPPORT=Yes
+  else
+    if test "$enable_snmp_rfcv2" = yes; then
+      SNMP_RFCV2_SUPPORT=Yes
+    fi
+    if test "$enable_snmp_rfcv3" = yes; then
+      SNMP_RFCV3_SUPPORT=Yes
+    fi
+  fi
+  if test ${SNMP_RFCV2_SUPPORT} = Yes -o \
+	  ${SNMP_RFCV3_SUPPORT} = Yes; then
+    if test ${VRRP_SUPPORT} != Yes; then
+      AC_MSG_ERROR([RFC SNMP support requires VRRP])
+    fi
+    SNMP_RFC_SUPPORT=Yes
+  fi
+  if test ${SNMP_RFCV3_SUPPORT} = Yes -a \
+	  "$enable_snmp_reply_v3_for_v2" != no; then
+    AC_DEFINE([_SNMP_REPLY_V3_FOR_V2_], [ 1 ], [Define to 1 to have keepalived send RFC6527 SNMP responses for VRRPv2 instances])
+    SNMP_V3_FOR_V2=Yes
+    add_config_opt([SNMP_V3_FOR_V2])
+  fi
+
+  if test "$enable_snmp" = yes; then
+    if test ${VRRP_SUPPORT} = Yes; then
+      SNMP_VRRP_SUPPORT=Yes
+    fi
+    if test ${IPVS_SUPPORT} = Yes; then
+      SNMP_CHECKER_SUPPORT=Yes
+    fi
+  else
+    if test "$enable_snmp_vrrp" = yes; then
+      SNMP_VRRP_SUPPORT=Yes
+    fi
+    if test "$enable_snmp_checker" = yes; then
+      SNMP_CHECKER_SUPPORT=Yes
+    fi
+  fi
+  if test ${VRRP_SUPPORT} != Yes -a \
+	  ${SNMP_VRRP_SUPPORT} = Yes; then
+    AC_MSG_ERROR([VRRP SNMP support requires VRRP])
+  fi
+  if test ${IPVS_SUPPORT} = No -a \
+	  ${SNMP_CHECKER_SUPPORT} = Yes; then
+    AC_MSG_ERROR([CHECKER SNMP support requires checker])
+  fi
+
+  if test ${SNMP_VRRP_SUPPORT} = Yes -o \
+	  ${SNMP_CHECKER_SUPPORT} = Yes; then
+    SNMP_KEEPALIVED_SUPPORT=Yes
+  fi
+
+  CPPFLAGS="$SAV_CPPFLAGS"
+  CFLAGS="$SAV_CFLAGS"
+  LIBS="$SAV_LIBS"
+fi
+
+dnl ----[What SNMP support is required]----
+if test $SNMP_SUPPORT = Yes; then
+  AC_DEFINE([_WITH_SNMP_], [ 1 ], [Define to 1 to have SNMP support])
+fi
+if test $SNMP_KEEPALIVED_SUPPORT = Yes; then
+  AC_DEFINE([_WITH_SNMP_KEEPALIVED_], [ 1 ], [Define to 1 to have keepalived SNMP support])
+fi
+if test $SNMP_VRRP_SUPPORT = Yes; then
+  AC_DEFINE([_WITH_SNMP_VRRP_], [ 1 ], [Define to 1 to have keepalived SNMP VRRP support])
+  add_config_opt([SNMP_VRRP])
+fi
+if test $SNMP_CHECKER_SUPPORT = Yes; then
+  AC_DEFINE([_WITH_SNMP_CHECKER_], [ 1 ], [Define to 1 to have keepalived SNMP checker support])
+  add_config_opt([SNMP_CHECKER])
+fi
+if test $SNMP_RFC_SUPPORT = Yes; then
+  AC_DEFINE([_WITH_SNMP_RFC_], [ 1 ], [Define to 1 to have RFC SNMP support])
+fi
+if test $SNMP_RFCV2_SUPPORT = Yes; then
+  AC_DEFINE([_WITH_SNMP_RFCV2_], [ 1 ], [Define to 1 to have RFCv2 SNMP support])
+  add_config_opt([SNMP_RFCV2])
+fi
+if test $SNMP_RFCV3_SUPPORT = Yes; then
+  AC_DEFINE([_WITH_SNMP_RFCV3_], [ 1 ], [Define to 1 to have RFCv3 SNMP support])
+  add_config_opt([SNMP_RFCV3])
+fi
+AM_CONDITIONAL([SNMP], [test $SNMP_SUPPORT = Yes])
+AM_CONDITIONAL([SNMP_KEEPALIVED], [test $SNMP_KEEPALIVED_SUPPORT = Yes])
+AM_CONDITIONAL([SNMP_VRRP], [test $SNMP_VRRP_SUPPORT = Yes -o $SNMP_RFC_SUPPORT = Yes])
+AM_CONDITIONAL([SNMP_CHECKER], [test $SNMP_CHECKER_SUPPORT = Yes])
+AM_CONDITIONAL([SNMP_RFC], [test $SNMP_RFCV2_SUPPORT = Yes -o $SNMP_RFCV3_SUPPORT = Yes])
+AM_CONDITIONAL([SNMP_RFCV2], [test $SNMP_RFCV2_SUPPORT = Yes])
+AM_CONDITIONAL([SNMP_RFCV3], [test $SNMP_RFCV3_SUPPORT = Yes])
+AM_CONDITIONAL([SNMP_REPLY_V3_FOR_V2], [test $SNMP_V3_FOR_V2 = Yes])
+AS_IF([test $SNMP_SUPPORT = Yes], [SNMP_SERVICE=snmpd.service], [SNMP_SERVICE=])
+AC_SUBST([SNMP_SERVICE])
+
+dnl ----[ Check for Dbus support ]----
+DBUS_SUPPORT=No
+DBUS_CREATE_INSTANCE=No
+if test "$enable_dbus" = yes; then
+  AC_CHECK_LIB(gio-2.0, g_bus_own_name,
+    [
+      add_pkg_config([gio-2.0])
+      DBUS_SUPPORT=Yes
+      AC_DEFINE([_WITH_DBUS_], [ 1 ], [Define to 1 to have DBUS support])
+      add_config_opt([DBUS])
+
+      dnl -- g_type_init() not needed and deprecated since glib 2.36
+      SAV_CFLAGS=$CFLAGS
+      CFLAGS="$($PKG_CONFIG --cflags gio-2.0)"
+      SAV_LIBS=$LIBS
+      LIBS="$($PKG_CONFIG --libs gio-2.0)"
+      AC_RUN_IFELSE(
+	[
+	  AC_LANG_PROGRAM(
+	    [[#include <gio/gio.h>]],
+	    [[return !g_thread_functions_for_glib_use.mutex_lock;]])],
+	[need_g_type_init=0],
+	[need_g_type_init=1],
+	[
+	  AC_MSG_WARN([Cannot determine if need to call g_type_init(). Assuming yes for safety.])
+	  need_g_type_init=1
+	])
+      if test $need_g_type_init -eq 1; then
+	AC_DEFINE([DBUS_NEED_G_TYPE_INIT], [ 1 ], [Define to 1 if need to call g_type_init()])
+      fi
+      LIBS=$SAV_LIBS
+      CFLAGS=$SAV_CFLAGS
+      if test "$enable_dbus_create_instance" = yes; then
+	AC_DEFINE([_WITH_DBUS_CREATE_INSTANCE_], [ 1 ], [Define to 1 to have DBus create instance support])
+	DBUS_CREATE_INSTANCE=Yes
+	add_config_opt([DBUS_CREATE_INSTANCE])
+	AC_MSG_WARN([DBus create instance functionality is dangerous - why do you want it?])
+      fi
+    ],
+    [AC_MSG_ERROR([DBUS support requested but libgio-2.0 not found.])])
+  unset LIBS
+fi
+AM_CONDITIONAL([WITH_DBUS], [test $DBUS_SUPPORT = Yes])
+AM_CONDITIONAL([DBUS_CREATE_INSTANCE], [test $DBUS_CREATE_INSTANCE = Yes])
+
+dnl ----[ SHA1 or not ? ]----
+SHA1_SUPPORT=No
+if test "${enable_sha1}" = yes; then
+  AC_CHECK_HEADERS(openssl/sha.h,,AC_MSG_ERROR([unable to find openssl/sha.h]))
+  AC_CHECK_LIB(crypto, SHA1_Init,,
+    [
+      dnl libcrypto can require -fpic
+      AS_UNSET([ac_cv_lib_crypto_SHA1_Init])
+      SAV_CFLAGS=$CFLAGS
+      CFLAGS="$CFLAGS -fpic"
+      AC_CHECK_LIB(crypto, SHA1_Init,,AC_MSG_ERROR([SHA1 in OpenSSL required]))
+      CFLAGS=$SAV_CFLAGS
+      add_to_var([KA_CFLAGS],[-fpic])
+    ])
+  SHA1_SUPPORT=Yes
+  AC_DEFINE([_WITH_SHA1_], [ 1 ], [Define to 1 to have SHA1 support])
+fi
+AM_CONDITIONAL([WITH_SHA1], [test $SHA1_SUPPORT = Yes])
+unset LIBS
+
+dnl ----[ check for SO_MARK support ]----
+dnl -- Since Linux 2.6.25
+SO_MARK_SUPPORT=No
+if test "${enable_fwmark}" != no; then
+  AC_CHECK_DECLS([SO_MARK],
+    [
+      SO_MARK_SUPPORT=Yes
+      AC_DEFINE([_WITH_SO_MARK_], [ 1 ], [Define to 1 if have SO_MARK])
+      add_system_opt([SO_MARK])
+    ], [],
+    [[#include <sys/socket.h>]])
+fi
+
+dnl ---[ check for setns() ]----
+dnl -- CLONE_NEWNET defined from Linux 3.0
+SAV_CFLAGS="$CFLAGS"
+AC_CHECK_DECLS([CLONE_NEWNET], [], [], [[#include <sched.h>]])
+dnl -- From glibc 2.14. Otherwise use setns syscall, since Linux 2.4.x
+AC_CHECK_FUNCS([setns])
+dnl -- When building a RedHat RPM with hardening enabled, -pie is specified,
+dnl -- and for setns this requires -fPIC
+AS_IF([test $ac_cv_func_setns = no],
+      [
+	AS_UNSET([ac_cv_func_setns])
+	CFLAGS="$CFLAGS -fPIC"
+	AC_CHECK_FUNCS([setns])
+      ])
+CFLAGS="$SAV_CFLAGS"
+AM_CONDITIONAL([WITH_NAMESPACES], [test $ac_cv_have_decl_CLONE_NEWNET = yes])
+
+dnl ----[ check for realtime scheduling support ]----
+dnl -- from Linux ?.?.?
+AC_CHECK_DECLS([SCHED_RR],
+  [
+    SCHED_RT_SUPPORT=Yes
+    AC_DEFINE([_HAVE_SCHED_RT_], [ 1 ], [Define to 1 if have SCHED_RR])
+    add_system_opt([SCHED_RT])
+
+    dnl -- RLIMIT_RTTIME since Linux 2.6.25 - not supported wwith musl libc
+    AC_CHECK_DECLS([RLIMIT_RTTIME], [], [], [[#include <sys/resource.h>]])
+
+    dnl -- SCHED_RESET_ON_FORK since Linux 2.6.32
+    AC_CHECK_DECLS([SCHED_RESET_ON_FORK],
+      [add_system_opt([SCHED_RESET_ON_FORK])],
+      [AC_DEFINE([SCHED_RESET_ON_FORK], [ 0 ], [Dummy definition if not defined in system headers])],
+      [[#include <sched.h>]])
+  ],
+  [
+    SCHED_RT_SUPPORT=No
+  ], [[#include <sched.h>]])
+
+dnl -- Do we want GNU standard paths (moves .pid files)
+GNU_STD_PATHS=No
+if test "${enable_gnu_std_paths}" = "yes"; then
+  AC_DEFINE([GNU_STD_PATHS], [ 1 ], [set to enforce GNU standard paths, for .pid files etc])
+  PID_DIR=$localstatedir
+elif test $RUN_DIR_SPECIFIED = Y -a .${with_run_dir} != .no; then
+  PID_DIR=`echo ${with_run_dir} | sed -e "s:/run$::"`	# Remove a trailing /run - somewill will include it sometime
+elif test -d /run; then
+  PID_DIR=
+else
+  PID_DIR=/var
+fi
+AC_DEFINE_UNQUOTED([PID_DIR_ROOT], [ "${PID_DIR}" ], [Parent directory of /run])
+AC_SUBST([PID_DIR])
+
+dnl - Check type of rlim_t for printf() - this check needs to be late on
+dnl - since _FILE_OFFSET_BITS (set when using netsnmp) alters sizeof(rlim_t)
+SAV_CFLAGS="$CFLAGS"
+CFLAGS="-Wformat -Werror=format $SAV_CPPFLAGS $KA_CPPFLAGS"
+AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
+  #include <stdio.h>
+  #include <sys/resource.h>
+  int
+  main(int argc, char **argv)
+  {
+    rlim_t val = 23U;
+    printf("%lu %d %p", val, argc, argv);
+
+    return 0;
+  }
+  ]])],
+  [AC_DEFINE([PRI_rlim_t], ["lu"], [Define printf format specifier for rlim_t])],
+  [AC_DEFINE([PRI_rlim_t], ["llu"], [Define printf format specifier for rlim_t])],
+  )
+CFLAGS="$SAV_CFLAGS"
+
+dnl ---[ check for sphinx-build executable ]----
+if test -z "$SPHINXBUILD"; then
+  SPHINXBUILDNAME=sphinx-build
+else
+  SPHINXBUILDNAME=${SPHINXBUILD}
+fi
+AC_SUBST(SPHINXBUILDNAME)
+AC_CHECK_PROG([HAVE_SPHINX_BUILD], [$SPHINXBUILDNAME], [Yes], [No])
+AM_CONDITIONAL([BUILD_DOCS], [test $HAVE_SPHINX_BUILD = Yes])
+
+dnl ----[ Memory alloc check or not ? ]----
+MEM_CHECK=No
+MEM_CHECK_LOG=No
+if test "${enable_mem_check}" = "yes"; then
+  MEM_CHECK=Yes
+  AC_DEFINE([_MEM_CHECK_], [ 1 ], [Define to 1 to build with malloc/free checks])
+  add_config_opt([MEM_CHECK])
+  if test "${enable_mem_check_log}" = "yes"; then
+    MEM_CHECK_LOG=Yes
+    AC_DEFINE([_MEM_CHECK_LOG_], [ 1 ], [Define to 1 to log malloc/free checks to syslog])
+    add_config_opt([MEM_CHECK_LOG])
+  fi
+fi
+
+dnl ----[ Memory alloc check or not ? ]----
+TIMER_CHECK=No
+if test "${enable_timer_check}" = "yes"; then
+  TIMER_CHECK=Yes
+  AC_DEFINE([_TIMER_CHECK_], [ 1 ], [Define to 1 to build with set time logging])
+  add_config_opt([TIMER_CHECK])
+fi
+
+dnl ----[ Debug or not ? ]----
+if test "${enable_debug}" = yes; then
+  AC_DEFINE([_DEBUG_], [ 1 ], [Define to 1 to build with debugging support])
+  ENABLE_DEBUG=Yes
+  add_config_opt([DEBUG])
+else
+  ENABLE_DEBUG=No
+fi
+AM_CONDITIONAL([DEBUG], [test $ENABLE_DEBUG = Yes])
+
+dnl ----[ Netlink command timers or not ? ]----
+if test "${enable_netlink_timers}" = yes; then
+  AC_DEFINE([_NETLINK_TIMERS_], [ 1 ], [Define to 1 to build with netlink command timers support])
+  ENABLE_NETLINK_TIMERS=Yes
+  add_config_opt([NETLINK_TIMERS])
+else
+  ENABLE_NETLINK_TIMERS=No
+fi
+
+dnl ----[ smtp-alert debugging or not ? ]----
+if test "${enable_smtp_alert_debug}" = yes; then
+  AC_DEFINE([_SMTP_ALERT_DEBUG_], [ 1 ], [Define to 1 to build with smtp-alert debugging support])
+  ENABLE_SMTP_ALERT_DEBUG=Yes
+  add_config_opt([SMTP_ALERT_DEBUG])
+  ENABLE_LOG_FILE_APPEND=Yes
+else
+  ENABLE_SMTP_ALERT_DEBUG=No
+fi
+
+dnl ----[ Stacktrace support or not ? ]----
+if test "${enable_stacktrace}" = yes; then
+  AC_DEFINE([_WITH_STACKTRACE_], [ 1 ], [Define to 1 to build with stacktrace support])
+  ENABLE_STACKTRACE=Yes
+  add_config_opt([STACKTRACE])
+  add_to_var([KA_LDFLAGS], [-rdynamic])
+else
+  ENABLE_STACKTRACE=No
+fi
+
+dnl ----[ Thread dumping support or not ? ]----
+if test "${enable_dump_threads}" = yes; then
+  AC_DEFINE([_WITH_DUMP_THREADS_], [ 1 ], [Define to 1 to build with thread dumping support])
+  ENABLE_DUMP_THREADS=Yes
+  add_config_opt([DUMP_THREADS])
+else
+  ENABLE_DUMP_THREADS=No
+fi
+
+dnl ----[ epoll() debugging support or not ? ]----
+if test "${enable_epoll_debug}" = yes; then
+  AC_DEFINE([_EPOLL_DEBUG_], [ 1 ], [Define to 1 to build with epoll_wait() debugging support])
+  ENABLE_EPOLL_DEBUG=Yes
+  add_config_opt([EPOLL_DEBUG])
+else
+  ENABLE_EPOLL_DEBUG=No
+fi
+
+dnl ----[ epoll() thread dumping support or not ? ]----
+if test "${enable_epoll_thread_dump}" = yes; then
+  AC_DEFINE([_EPOLL_THREAD_DUMP_], [ 1 ], [Define to 1 to build with epoll thread dumping support])
+  ENABLE_EPOLL_THREAD_DUMP=Yes
+  add_config_opt([EPOLL_THREAD_DUMP])
+else
+  ENABLE_EPOLL_THREAD_DUMP=No
+fi
+
+if test $ENABLE_EPOLL_THREAD_DUMP = Yes -o $ENABLE_DUMP_THREADS = Yes -o $ENABLE_EPOLL_DEBUG = Yes; then
+  AC_DEFINE([THREAD_DUMP], [ 1 ], [Define to 1 to build with thread dumping support])
+fi
+
+dnl ----[ TSM debugging support or not ? ]----
+if test "${enable_tsm_debug}" = yes; then
+  AC_DEFINE([_TSM_DEBUG_], [ 1 ], [Define to 1 to build with TSM debugging support])
+  ENABLE_TSM_DEBUG=Yes
+  add_config_opt([TSM_DEBUG])
+else
+  ENABLE_TSM_DEBUG=No
+fi
+
+dnl ----[ VRRP FD debugging support or not ? ]----
+if test "${enable_vrrp_fd_debug}" = yes; then
+  AC_DEFINE([_VRRP_FD_DEBUG_], [ 1 ], [Define to 1 to build with vrrp fd debugging support])
+  ENABLE_VRRP_FD_DEBUG=Yes
+  add_config_opt([VRRP_FD_DEBUG])
+else
+  ENABLE_VRRP_FD_DEBUG=No
+fi
+
+dnl ----[ network timestamp support or not ? ]----
+if test "${enable_network_timestamp}" = yes; then
+  AC_DEFINE([_NETWORK_TIMESTAMP_], [ 1 ], [Define to 1 to build with network timestamp support])
+  ENABLE_NETWORK_TIMESTAMP=Yes
+  add_config_opt([NETWORK_TIMESTAMP])
+else
+  ENABLE_NETWORK_TIMESTAMP=No
+fi
+
+dnl ----[ asserts enabled or not ? ]----
+if test "${enable_asserts}" = yes; then
+  AC_DEFINE([_ENABLE_ASSERT_], [ 1 ], [Define to 1 to enable asserts])
+  ENABLE_ASSERT=Yes
+  add_config_opt([ASSERT])
+else
+  ENABLE_ASSERT=No
+fi
+AM_CONDITIONAL([ASSERTS], [test $ENABLE_ASSERT = Yes])
+
+dnl ----[ Specify interface type to be unchangeable ]----
+if test "${with_fixed_if_type}"; then
+  if test "${with_fixed_if_type}" = yes -o ${with_fixed_if_type} = no; then
+    AC_MSG_ERROR([An interface type must be specified with --with-fixed-if-type])
+  fi
+  AC_DEFINE_UNQUOTED([_FIXED_IF_TYPE_], [ "${with_fixed_if_type}" ], [Consider ${with_fixed_if_type} interfaces to be unchangeable])
+  FIXED_IF_TYPE=${with_fixed_if_type}
+  add_config_opt([FIXED_IF_TYPE=${with_fixed_if_type}])
+else
+  FIXED_IF_TYPE=
+fi
+
+dnl ----[ Profiling or not ? ]----
+WITH_PROFILING=No
+if test "${enable_profile}" = yes; then
+  WITH_PROFILING=Yes
+  add_config_opt([PROFILING])
+  add_to_var([KA_CFLAGS], [-pg])
+fi
+AM_CONDITIONAL([PROFILE], [test $WITH_PROFILING = Yes])
+
+dnl ----[ perf support or not? keepalived provides runtime options ]----
+if test "${enable_perf}" = yes; then
+  AC_DEFINE([_WITH_PERF_], [ 1 ], [Define to 1 to build with perf support])
+  ENABLE_PERF=Yes
+  add_config_opt([PERF])
+  add_to_var([KA_CFLAGS], [-pg])
+else
+  ENABLE_PERF=No
+fi
+
+if test "${enable_log_file}" = yes; then
+  AC_DEFINE([ENABLE_LOG_TO_FILE], [ 1 ], [Define if enabling logging to files])
+  ENABLE_LOG_FILE_APPEND=Yes
+  add_config_opt([FILE_LOGGING])
+fi
+
+if test ${ENABLE_LOG_FILE_APPEND} = Yes; then
+  AC_DEFINE([ENABLE_LOG_FILE_APPEND], [ 1 ], [Define if appending to log files is allowed])
+  add_config_opt([LOG_FILE_APPEND])
+fi
+
+dnl ----[ Do we need to check for EINTR, or enable EINTR debugging code]----
+AS_IF([test .$enable_eintr_debug = .yes],
+  [
+    AC_DEFINE([DEBUG_EINTR], [ 1 ], [Define to test for and log errno == EINTR when no asynchronous signal handlers])
+    add_config_opt([EINTR_DEBUG])
+  ],
+  [
+    dnl --- We need to check for EINTR if we are not using signalfd
+    AS_IF([test .$ac_cv_func_signalfd != .yes -o .$enable_eintr_debug = .check],
+      [
+	AC_DEFINE([CHECK_EINTR], [ 1 ], [Define if need to check for EINTR errno])
+	AS_IF([test .$ac_cv_func_signalfd = .yes], [add_config_opt([EINTR_CHECK])])
+      ])
+  ])
+
+dnl ----[ Do we want to enable track process debugging code]----
+AS_IF([test .$enable_track_process_debug = .yes],
+  [
+    AC_DEFINE([_TRACK_PROCESS_DEBUG_], [ 1 ], [Define to enable logging all process connector events])
+    add_config_opt([TRACK_PROCESS_DEBUG])
+  ])
+
+dnl ----[ Do we want to enable parser debugging code]----
+AS_IF([test .$enable_parser_debug = .yes],
+  [
+    AC_DEFINE([_PARSER_DEBUG_], [ 1 ], [Define to enable parser debugging])
+    add_config_opt([PARSER_DEBUG])
+  ])
+
+dnl ----[ Do we want to enable checksum debugging code]----
+AS_IF([test .$enable_checksum_debug = .yes],
+  [
+    AC_DEFINE([CHECKSUM_DIAGNOSTICS], [ 1 ], [Define to enable checksum debugging])
+    add_config_opt([CHECKSUM_DEBUG])
+  ])
+
+dnl ----[ Do we want to enable dump keywords code]----
+AS_IF([test .$enable_dump_keywords = .yes],
+  [
+    AC_DEFINE([_DUMP_KEYWORDS_], [ 1 ], [Define to enable keyword dumping])
+    add_config_opt([DUMP_KEYWORDS])
+  ])
+
+if test ${NEED_LIBDL} = Yes; then
+  add_to_var([KA_LIBS], [-ldl])
+fi
+
+dnl ----[ Determine if we are using pthreads ]----
+echo " $KA_LIBS" | grep -qE -- " -l?pthread "
+if test $? -eq 0 ;then
+  AC_DEFINE([_WITH_PTHREADS_], [ 1 ], [Define to 1 if using pthreads])
+fi
+
+dnl ----[ Check if rpmbuild supports --build-in-place ]----
+RPM_NO_BIP=1
+AC_CHECK_PROG([HAVE_RPM], [rpm], [Yes], [No])
+if test $HAVE_RPM = Yes; then
+  AC_CHECK_PROG([HAVE_RPMBUILD], [rpmbuild], [Yes], [No])
+  RPM_SRC_DIR=`rpm --eval "%{_sourcedir}"`
+  if ! test -d $RPM_SRC_DIR; then
+    HAVE_RPMBUILD=No
+  fi
+  if test $HAVE_RPMBUILD = Yes; then
+    rpmbuild --help | grep -q -- --build-in-place
+    RPM_NO_BIP=$?
+  fi
+fi
+AM_CONDITIONAL([RPM], [test $HAVE_RPM = Yes])
+AM_CONDITIONAL([RPM_BIP], [test $RPM_NO_BIP -eq 0])
+
+dnl ----[ Determine system init type]----
+INIT_TYPE=
+AS_IF(
+  [test -n "$init_type"], [INIT_TYPE=$init_type],
+  [test -n "$with_systemdsystemunitdir"], [INIT_TYPE=systemd],
+  [
+    /sbin/init --version 2>/dev/null | grep -q upstart
+    AS_IF(
+      [test $? -eq 0], [INIT_TYPE=upstart],
+      [
+	init_path=`which systemctl 2>/dev/null`
+	AS_IF([test \( $? -eq 0 -a -x "$init_path" \)],
+	  [
+	    systemctl | grep -q -- "-\.mount"
+	    AS_IF([test $? -eq 0], [INIT_TYPE=systemd])
+	  ])
+	AS_IF([test \( -z "$INIT_TYPE" -a -f /etc/init.d/networking \)],
+	  [
+	    init_path=`which openrc-run 2>/dev/null`
+	    AS_IF([test \( $? -eq 0 -a -x "$init_path" \)],
+	      [
+		head -1 /etc/init.d/networking | grep -q "^#! */.*/openrc-run$"
+		AS_IF([test $? -eq 0], [INIT_TYPE=openrc])
+	      ])
+	  ])
+	AS_IF([test \( -z "$INIT_TYPE" -a -f /etc/init.d/cron -a ! -h /etc/init.d/cron \)], [INIT_TYPE=SYSV])
+      ])
+  ])
+AS_IF([test \( .$INIT_TYPE = .systemd -a -z "$with_systemdsystemunitdir" \)], [with_systemdsystemunitdir=$($PKG_CONFIG --variable=systemdsystemunitdir systemd)])
+
+dnl ----[Default keepalived configuration file]----
+AS_IF([test $default_config_file],
+  [
+    AS_IF([test $default_config_file = yes -o $default_config_file = no],
+	  [AC_MSG_ERROR([A filename must be specified for default-config-file])])
+    CONFIG_FILE=$default_config_file
+    add_config_opt([DEFAULT_CONFIG_FILE=${default_config_file}])
+  ],
+  [default_config_file="/etc/$PACKAGE/$PACKAGE.conf"])
+AC_DEFINE_UNQUOTED([DEFAULT_CONFIG_FILE], ["$default_config_file"], [The default configuration file])
+AC_SUBST([DEFAULT_CONFIG_FILE], [$default_config_file])
+
+if test -z "$INIT_TYPE"; then
+  INIT_TYPE=undetected
+elif test $INIT_TYPE = systemd; then
+  AC_SUBST([systemdsystemunitdir], [$with_systemdsystemunitdir])
+fi
+
+AM_CONDITIONAL([INIT_UPSTART], [test $INIT_TYPE = upstart])
+AM_CONDITIONAL([INIT_SYSTEMD], [test $INIT_TYPE = systemd])
+AM_CONDITIONAL([INIT_SYSV], [test $INIT_TYPE = SYSV])
+AM_CONDITIONAL([INIT_OPENRC], [test $INIT_TYPE = openrc])
+AM_CONDITIONAL([INIT_SUSE], [test $INIT_TYPE = SUSE])
+
+AC_DEFINE_UNQUOTED([CONFIGURATION_OPTIONS], ["$CONFIG_OPTIONS"], [The configuration options from which the package is built])
+AC_DEFINE_UNQUOTED([SYSTEM_OPTIONS], ["$SYSTEM_OPTIONS"], [The system options from which the package is built])
+
+if test $NETLINK_VER -eq 0; then
+	NETLINK_VER=None
+fi
+
+dnl ----[ Process output target ]----
+echo
+
+# Tidy up some strings
+KA_CPPFLAGS=`echo $KA_CPPFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+KA_CFLAGS=`echo $KA_CFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+KA_LDFLAGS=`echo $KA_LDFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+KA_LIBS=`echo $KA_LIBS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+
+# Tidy up some strings
+KA_CPPFLAGS=`echo $KA_CPPFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+KA_CFLAGS=`echo $KA_CFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+KA_LDFLAGS=`echo $KA_LDFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+KA_LIBS=`echo $KA_LIBS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
+
+AC_OUTPUT
+
+# Restore lib/config_warnings.h.in
+mv ${CONFIG_WARNINGS}.sav ${CONFIG_WARNINGS}
+
+dnl ----[ Display current configuration ]----
+cat <<EOF;
+
+Keepalived configuration
+------------------------
+Keepalived version       : ${VERSION}
+Compiler                 : ${CC}
+Preprocessor flags       : ${KA_CPPFLAGS}
+Compiler flags           : ${KA_CFLAGS}
+EOF
+
+dnl ----[ display optional vars  ]----
+if test -n "$KA_LDFLAGS$KA_LIBS"; then
+  echo "Linker flags             : $KA_LDFLAGS"
+  echo "Extra Lib                : $KA_LIBS"
+fi
+
+echo "Use IPVS Framework       : ${IPVS_SUPPORT}"
+if test ${IPVS_SUPPORT} = Yes; then
+  echo "IPVS use libnl           : ${IPVS_USE_NL}"
+  echo "IPVS syncd attributes    : ${IPVS_SYNCD_ATTRIBUTES}"
+  echo "IPVS 64 bit stats        : ${IPVS_64BIT_STATS}"
+  echo "HTTP_GET regex support   : ${WITH_REGEX}"
+fi
+echo "fwmark socket support    : ${SO_MARK_SUPPORT}"
+echo "Use VRRP Framework       : ${VRRP_SUPPORT}"
+if test ${VRRP_SUPPORT} = Yes; then
+  echo "Use VRRP VMAC            : ${MACVLAN_SUPPORT}"
+  echo "Use VRRP authentication  : ${VRRP_AUTH_SUPPORT}"
+  echo "With ip rules/routes     : ${FIB_ROUTING_SUPPORT}"
+  echo "With track_process       : ${HAVE_CN_PROC}"
+  echo "With linkbeat            : ${LINKBEAT_SUPPORT}"
+fi
+echo "Use BFD Framework        : ${BFD_SUPPORT}"
+echo "SNMP vrrp support        : ${SNMP_VRRP_SUPPORT}"
+echo "SNMP checker support     : ${SNMP_CHECKER_SUPPORT}"
+echo "SNMP RFCv2 support       : ${SNMP_RFCV2_SUPPORT}"
+echo "SNMP RFCv3 support       : ${SNMP_RFCV3_SUPPORT}"
+if test ${SNMP_RFCV3_SUPPORT} = Yes; then
+  echo "SNMP send V3 for V2      : ${SNMP_V3_FOR_V2}"
+fi
+echo "DBUS support             : ${DBUS_SUPPORT}"
+if test ${DBUS_SUPPORT} = Yes; then
+  echo "DBUS create instance     : ${DBUS_CREATE_INSTANCE}"
+fi
+echo "SHA1 support             : ${SHA1_SUPPORT}"
+echo "Use JSON output          : ${ENABLE_JSON}"
+echo "libnl version            : ${NETLINK_VER}"
+echo "Use IPv4 devconf         : ${IPV4_DEVCONF}"
+echo "Use iptables             : ${USE_IPTABLES}"
+if test .$USE_IPTABLES = .Yes; then
+  echo "Use libiptc              : ${USE_LIBIPTC}"
+  echo "Use libipset             : ${USE_LIBIPSET}"
+fi
+echo "Use nftables             : ${USE_NFTABLES}"
+echo "init type                : ${INIT_TYPE}"
+echo "Strict config checks     : ${STRICT_CONFIG}"
+echo "Build genhash            : ${BUILD_GENHASH}"
+echo "Build documentation      : ${HAVE_SPHINX_BUILD}"
+if test ${ENABLE_STACKTRACE} = Yes; then
+  echo "Stacktrace support       : ${ENABLE_STACKTRACE}"
+fi
+if test ${ENABLE_PERF} = Yes; then
+  echo "Perf support             : ${ENABLE_PERF}"
+fi
+if test ${MEM_CHECK} = Yes; then
+  echo "Memory alloc check       : ${MEM_CHECK}"
+  echo "Memory alloc check log   : ${MEM_CHECK_LOG}"
+fi
+if test ${TIMER_CHECK} = Yes; then
+  echo "Set time logging         : ${TIMER_CHECK}"
+fi
+if test ${ENABLE_DUMP_THREADS} = Yes; then
+  echo "Thread debugging         : ${ENABLE_DUMP_THREADS}"
+fi
+if test ${ENABLE_EPOLL_DEBUG} = Yes; then
+  echo "epoll_wait() debugging   : ${ENABLE_EPOLL_DEBUG}"
+fi
+if test ${ENABLE_EPOLL_THREAD_DUMP} = Yes; then
+  echo "epoll thread dumping     : ${ENABLE_EPOLL_THREAD_DUMP}"
+fi
+if test ${ENABLE_REGEX_DEBUG} = Yes; then
+  echo "regex debugging          : ${ENABLE_REGEX_DEBUG}"
+fi
+if test ${ENABLE_TSM_DEBUG} = Yes; then
+  echo "TSM debugging            : ${ENABLE_TSM_DEBUG}"
+fi
+if test ${ENABLE_VRRP_FD_DEBUG} = Yes; then
+  echo "VRRP_FD debugging        : ${ENABLE_VRRP_FD_DEBUG}"
+fi
+if test ${ENABLE_NETWORK_TIMESTAMP} = Yes; then
+  echo "network timestamping     : ${ENABLE_NETWORK_TIMESTAMP}"
+fi
+if test ${ENABLE_ASSERT} = Yes; then
+  echo "asserts enabled          : ${ENABLE_ASSERT}"
+fi
+if test ${ENABLE_DEBUG} = Yes; then
+  echo "Use Debug flags          : ${ENABLE_DEBUG}"
+fi
+if test ${ENABLE_NETLINK_TIMERS} = Yes; then
+  echo "Netlink command timers   : ${ENABLE_NETLINK_TIMERS}"
+fi
+if test ${ENABLE_SMTP_ALERT_DEBUG} = Yes; then
+  echo "smtp-alert debugging     : ${ENABLE_SMTP_ALERT_DEBUG}"
+fi
+if test "${FIXED_IF_TYPE}"; then
+  echo "Fixed interface type     : ${FIXED_IF_TYPE}"
+fi
+if test "${CONFIG_FILE}"; then
+  echo "Default config file      : ${CONFIG_FILE}"
+fi
+
+dnl ----[ end configure ]---
+
+if test ${IPVS_SUPPORT} = Yes -a ${IPVS_USE_NL} = No; then
+  echo
+  echo "*** WARNING - this build will not support IPVS with IPv6. Please install libnl/libnl-3 dev libraries to support IPv6 with IPVS."
+  echo
+fi
+
+if test ${ENABLE_DEBUG} = Yes; then
+  echo
+  echo "*** WARNING --enable-debug is only for debugging purposes and isn't expected to work properly"
+  echo
+fi
diff --git a/tools/keepalived/configure.in b/tools/keepalived/configure.in
deleted file mode 100644
index 8aba44ad2..000000000
--- a/tools/keepalived/configure.in
+++ /dev/null
@@ -1,387 +0,0 @@
-#
-# Keepalived OpenSource project.
-#
-# Configuration template file for keepalived.
-# autoconf will generate & check deps for proper compilation
-#
-# Copyright (C) 2001-2009 Alexandre Cassen, <acassen@linux-vs.org>
-
-dnl ----[ Process this file with autoconf to produce a configure script ]----
-AC_INIT(keepalived/core/main.c)
-VERSION=`cat VERSION`
-VERSION_DATE=`date +%m/%d,20%y`
-OUTPUT_TARGET="Makefile genhash/Makefile keepalived/core/Makefile lib/config.h keepalived.spec"
-
-dnl ----[ Checks for programs ]----
-AC_PROG_CC
-AC_PROG_INSTALL
-AC_CHECK_TOOL(STRIP,strip)
-
-dnl ----[ Keepalived specific configure options ]----
-AC_ARG_ENABLE(lvs-syncd,
-  [  --disable-lvs-syncd     do not use LVS synchronization daemon])
-AC_ARG_ENABLE(lvs,
-  [  --disable-lvs           do not use the LVS framework])
-AC_ARG_ENABLE(vrrp,
-  [  --disable-vrrp          do not use the VRRP framework])
-AC_ARG_WITH(kernel-dir,
-  [  --with-kernel-dir=DIR   path to linux kernel source directory],
-  [kernelinc="$withval/include" kernelpath="$withval"],
-  [kernelinc="/usr/src/linux/include" kernelpath="/usr/src/linux"])
-AC_ARG_WITH(kernel-version,
-  [  --with-kernel-version=VER forced value for linux kernel version (VER=2.4|2.6)],
-  [kernelversion="$withval"], [kernelversion=""])
-AC_ARG_ENABLE(fwmark,
-  [  --disable-fwmark        compile without SO_MARK support])
-AC_ARG_ENABLE(snmp,
-  [  --enable-snmp           compile with SNMP support])
-AC_ARG_ENABLE(sha1,
-  [  --enable-sha1           compile with SHA1 support])
-AC_ARG_ENABLE(debug,
-  [  --enable-debug          compile with debugging flags])
-AC_ARG_ENABLE(profile,
-  [  --enable-profile        compile with profiling flags])
-
-dnl ----[ Checks for header files ]----
-AC_HEADER_STDC
-AC_HEADER_SYS_WAIT
-AC_CHECK_HEADERS(fcntl.h syslog.h unistd.h sys/ioctl.h sys/time.h)
-dnl [do we really need this ?] AC_CHECK_HEADERS(linux/netlink.h linux/rtnetlink.h)
-AC_CHECK_HEADERS(openssl/ssl.h openssl/md5.h openssl/err.h,,AC_MSG_ERROR([
-  !!! OpenSSL is not properly installed on your system. !!!
-  !!! Can not include OpenSSL headers files.            !!!]))
-AC_CHECK_DECL([ETHERTYPE_IPV6],[],[CFLAGS="$CFLAGS -DETHERTYPE_IPV6=0x86dd"],
-  [[@%:@include <net/ethernet.h>]])
-
-dnl ----[ Checks for libraries ]----
-AC_CHECK_LIB(crypt, crypt,,AC_MSG_ERROR([crypt() function is required]))
-AC_CHECK_LIB(crypto, MD5_Init,,AC_MSG_ERROR([OpenSSL libraries are required]))
-AC_CHECK_LIB(ssl, SSL_CTX_new,,AC_MSG_ERROR([OpenSSL libraries are required]))
-
-AC_CHECK_LIB(nl-3, nl_socket_alloc,
-  [
-    AC_CHECK_LIB(nl-genl-3, genl_connect,
-      [
-        USE_NL="LIBIPVS_USE_NL"
-        CFLAGS="$CFLAGS $(pkg-config --cflags libnl-genl-3.0)"
-	LIBS="$LIBS $(pkg-config --libs libnl-genl-3.0)"
-      ],
-      [
-        AC_MSG_ERROR([libnl-3 is installed but not libnl-gen-3. Please, install libnl-gen-3.])
-      ])
-  ],
-  [
-    AC_CHECK_LIB(nl, nl_socket_modify_cb,
-      [
-        USE_NL="LIBIPVS_USE_NL"
-        CFLAGS="$CFLAGS -DFALLBACK_LIBNL1"
-        LIBS="$LIBS $(pkg-config --libs libnl-1)"
-      ],
-      [                                                                                           
-        USE_NL="LIBIPVS_DONTUSE_NL"
-        AC_MSG_WARN([keepalived will be built without libnl support.])
-      ])
-  ])
-
-dnl ----[ Kernel version check ]----
-CPPFLAGS="$CPPFLAGS -I$kernelinc"
-AC_MSG_CHECKING([for kernel version])
-AC_TRY_RUN([
-    #include <stdlib.h>
-    #include <stdio.h>
-    #include <linux/version.h>
-    #if !defined(UTS_RELEASE) && !defined(LINUX_VERSION_CODE)
-    #include <linux/utsrelease.h>
-    #endif
-    int main (void) {
-      FILE *fp = fopen ("linuxinfo", "w");
-      if (!fp) return 1;
-    #if defined(UTS_RELEASE)
-      fprintf (fp, "%s\n", UTS_RELEASE);
-    #elif defined(LINUX_VERSION_CODE)
-      fprintf (fp, "%d.%d.%d\n", LINUX_VERSION_CODE >> 16, (LINUX_VERSION_CODE >> 8) & 0xFF, LINUX_VERSION_CODE & 0xFF);
-    #else
-      fprintf (fp, "0.0.0\n"); /* Let's fail gently */
-    #endif
-      fclose (fp); 
-      return 0;
-    } 
-  ], [
-    LINUX_MAJOR=`cat linuxinfo | cut -d'.' -f1`
-    LINUX_MINOR=`cat linuxinfo | cut -d'.' -f2`
-    LINUX_PATCH=`cat linuxinfo | cut -d'.' -f3`
-  ], [
-    LINUX_MAJOR="0"
-    LINUX_MINOR="0"
-    LINUX_PATCH="0"
-  ], [
-    LINUX_MAJOR="0"
-    LINUX_MINOR="0"
-    LINUX_PATCH="0"
-  ])
-  rm -f linuxinfo
-
-  if test "$kernelversion" = "2.4"; then
-    KERN="_KRNL_2_4_"
-    AC_MSG_RESULT([2.4])
-  elif test "$kernelversion" = "2.6"; then
-    KERN="_KRNL_2_6_"
-    AC_MSG_RESULT([2.6])
-  else
-    AC_MSG_RESULT([$LINUX_MAJOR.$LINUX_MINOR.$LINUX_PATCH])
-    if test "$LINUX_MAJOR" = "2" && test "$LINUX_MINOR" = "6"; then
-      KERN="_KRNL_2_6_"
-    elif test "$LINUX_MAJOR" = "2" && test "$LINUX_MINOR" = "4"; then
-      KERN="_KRNL_2_4_"
-    else
-      KERN="_KRNL_2_6_"
-    fi
-    if test "$LINUX_MAJOR" = "0" -a "$LINUX_MINOR" = "0" -a "$LINUX_PATCH" = "0"; then
-      AC_MSG_WARN([Cannot determine Linux Kernel version.])
-    fi
-  fi
-
-AC_SUBST(KERN)
-
-dnl ----[ Checks for LVS and VRRP support ]----
-IPVS_SUPPORT="_WITHOUT_LVS_"
-if test "$enable_lvs" != "no"; then
-  if test "$KERN" = "_KRNL_2_6_"; then
-    IPVS_SUPPORT="_WITH_LVS_"
-  else
-    AC_CHECK_HEADER([net/ip_vs.h],
-      [IPVS_SUPPORT="_WITH_LVS_"],
-      [
-        IPVS_SUPPORT="_WITHOUT_LVS_"
-        AC_MSG_WARN([keepalived will be built without LVS support.])
-      ])
-  fi
-fi  
-
-if test "$IPVS_SUPPORT" = "_WITHOUT_LVS_" -a "$enable_vrrp" = "no"; then
-  AC_MSG_ERROR([keepalived MUST be compiled at least with LVS or VRRP framework])
-fi
-
-dnl ----[ IPVS syncd support probe ]---
-IPVS_SYNCD="_WITHOUT_IPVS_SYNCD_"
-if test "$IPVS_SUPPORT" = "_WITH_LVS_"; then
-  AC_MSG_CHECKING([for IPVS syncd support])
-  if test "$KERN" = "_KRNL_2_6_"; then
-    IPVS_SYNCD="_HAVE_IPVS_SYNCD_"
-  elif test "_KRNL_2_4_"; then
-    IPVS_SYNCD="_HAVE_IPVS_SYNCD_"
-  else
-    IPVS_SYNCD="_WITHOUT_IPVS_SYNCD_"
-  fi
-
-  if test "${IPVS_SUPPORT}" = "_WITHOUT_LVS_" -o "$enable_lvs_syncd" = "no"; then
-    IPVS_SYNCD="_WITHOUT_IPVS_SYNCD_"
-  fi
-
-  if test "$IPVS_SYNCD" = "_HAVE_IPVS_SYNCD_"; then
-    AC_MSG_RESULT([yes])
-  else
-    AC_MSG_RESULT([no])
-  fi
-fi
-
-AC_SUBST(IPVS_SYNCD)
-
-dnl ----[ Checks for kernel netlink support ]----
-VRRP_SUPPORT="_WITHOUT_VRRP_"
-if test "$enable_vrrp" != "no"; then
-  VRRP_SUPPORT="_WITH_VRRP_"
-fi
-
-dnl ----[ Checks for kernel VMAC support ]----
-CPPFLAGS="$CPPFLAGS -I$kernelinc"
-AC_MSG_CHECKING([for kernel macvlan support])
-AC_TRY_COMPILE([
-    #include <bits/sockaddr.h>
-    #include <linux/if_link.h>
-    int macvlan;
-  ], [
-    macvlan = IFLA_MACVLAN_MODE;
-    macvlan = MACVLAN_MODE_PRIVATE;
-  ], [
-    MACVLAN_SUPPORT=yes
-  ], []);
-
-  if test "$MACVLAN_SUPPORT" = "yes"; then
-    VRRP_VMAC="_HAVE_VRRP_VMAC_"
-    AC_MSG_RESULT([yes])
-  else
-    VRRP_VMAC="_WITHOUT_VRRP_VMAC_"
-    AC_MSG_RESULT([no])
-  fi
-
-AC_SUBST(VRRP_VMAC)
-
-dnl ----[ Checks for SNMP support ]----
-SNMP_SUPPORT="_WITHOUT_SNMP_"
-if test "$enable_snmp" = "yes"; then
-    AC_PATH_TOOL([NETSNMP_CONFIG], [net-snmp-config], [no])
-    if test x"$NETSNMP_CONFIG" = x"no"; then
-      AC_MSG_ERROR([unable to find net-snmp-config])
-    fi
-    NETSNMP_LIBS=`${NETSNMP_CONFIG} --agent-libs`
-    #NETSNMP_CFLAGS="`${NETSNMP_CONFIG} --base-cflags`"
-    #CFLAGS="${NETSNMP_CFLAGS} $CFLAGS"
-    LIBS="${NETSNMP_LIBS} $LIBS"
-    AC_MSG_CHECKING([whether C compiler supports flag "${NETSNMP_LIBS}" from Net-SNMP])
-    AC_LINK_IFELSE([AC_LANG_PROGRAM([
-int main(void);
-],
-[
-{
-  return 0;
-}
-])],[AC_MSG_RESULT(yes)],[
-     AC_MSG_RESULT(no)
-     AC_MSG_ERROR([incorrect CFLAGS from net-snmp-config])])
-
-   # Do we have a usable <net-snmp/agent/util_funcs.h> header?
-    AC_CHECK_HEADERS([net-snmp/agent/util_funcs.h],,,[
-@%:@include <net-snmp/net-snmp-config.h>
-@%:@include <net-snmp/net-snmp-includes.h>
-@%:@include <net-snmp/library/snmp_transport.h>
-@%:@include <net-snmp/agent/net-snmp-agent-includes.h>
-@%:@include <net-snmp/agent/snmp_vars.h>
-    ])
-    SNMP_SUPPORT="_WITH_SNMP_"
-fi
-
-AC_SUBST(SNMP_SUPPORT)
-
-dnl ----[ SHA1 or not ? ]----
-SHA1_SUPPORT="_WITHOUT_SHA1_"
-if test "${enable_sha1}" = "yes"; then
-  CFLAGS="$CFLAGS -DFEAT_SHA1"
-  AC_CHECK_HEADERS(openssl/sha.h,,AC_MSG_ERROR([unable to find openssl/sha.h]))
-  AC_CHECK_LIB(crypto, SHA1_Init,,AC_MSG_ERROR([SHA1 in OpenSSL required]))
-  SHA1_SUPPORT="_WITH_SHA1_"
-fi
-
-AC_SUBST(SHA1_SUPPORT)
-
-dnl ----[ check for SO_MARK support ]----
-if test "${enable_fwmark}" = "no"; then
-  SO_MARK_SUPPORT="_WITHOUT_SO_MARK_"
-else
-  AC_CHECK_DECL(SO_MARK,,AC_MSG_ERROR([No SO_MARK declaration in headers]),
-    #include <sys/socket.h>
-  )
-  SO_MARK_SUPPORT="_WITH_SO_MARK_"
-fi
-
-AC_SUBST(SO_MARK_SUPPORT)
-
-
-dnl ----[ Debug or not ? ]----
-if test "${enable_debug}" = "yes"; then
-  DFLAGS="-D_DEBUG_"
-  AC_SUBST(DFLAGS)
-fi
-
-dnl ----[ Profiling or not ? ]----
-if test "${enable_profile}" = "yes"; then
-  CFLAGS="$CFLAGS -pg"
-fi
-
-AC_SUBST(VERSION)
-AC_SUBST(VERSION_DATE)
-AC_SUBST(IPVS_SUPPORT)
-AC_SUBST(USE_NL)
-AC_SUBST(VRRP_SUPPORT)
-
-dnl ----[ Checks for typedefs, structures, and compiler characteristics ]----
-AC_C_CONST
-AC_TYPE_PID_T
-AC_HEADER_TIME
-
-dnl ----[ Checks for library functions ]----
-AC_PROG_GCC_TRADITIONAL
-AC_FUNC_MEMCMP
-AC_TYPE_SIGNAL
-AC_CHECK_FUNCS(gettimeofday select socket strerror strtol uname)
-
-dnl ----[ Process output target ]----
-OUTPUT_TARGET="$OUTPUT_TARGET keepalived/Makefile lib/Makefile"
-if test "${VRRP_SUPPORT}" = "_WITH_VRRP_"; then
-  OUTPUT_TARGET="$OUTPUT_TARGET keepalived/vrrp/Makefile"
-fi
-if test "$IPVS_SUPPORT" = "_WITH_LVS_"; then
-  OUTPUT_TARGET="$OUTPUT_TARGET keepalived/check/Makefile"
-  if test "$KERN" = "_KRNL_2_6_"; then
-    OUTPUT_TARGET="$OUTPUT_TARGET keepalived/libipvs-2.6/Makefile"
-  elif test "$KERN" = "_KRNL_2_4_"; then
-    OUTPUT_TARGET="$OUTPUT_TARGET keepalived/libipvs-2.4/Makefile"
-  fi
-fi
-AC_OUTPUT($OUTPUT_TARGET)
-
-
-dnl ----[ Display current configuration ]----
-cat <<EOF;
-
-Keepalived configuration
-------------------------
-Keepalived version       : ${VERSION}
-Compiler                 : ${CC}
-Compiler flags           : ${CFLAGS}
-EOF
-
-dnl ----[ display optional vars  ]----
-if test -n "$LIBS"; then
-  echo "Extra Lib                : $LIBS"
-fi
-
-if test "${IPVS_SUPPORT}" = "_WITH_LVS_"; then
-  echo "Use IPVS Framework       : Yes"
-  if test "${IPVS_SYNCD}" = "_HAVE_IPVS_SYNCD_"; then
-    echo "IPVS sync daemon support : Yes"
-  elif test "${IPVS_SYNCD}" = "_WITHOUT_IPVS_SYNCD_"; then
-    echo "IPVS sync daemon support : No"
-  fi
-  if test "${USE_NL}" = "LIBIPVS_USE_NL"; then
-    echo "IPVS use libnl           : Yes"
-  else
-    echo "IPVS use libnl           : No"
-  fi
-else
-  echo "Use IPVS Framework       : No"
-  echo "IPVS sync daemon support : No"
-fi
-
-if test "${SO_MARK_SUPPORT}" = "_WITH_SO_MARK_"; then
-  echo "fwmark socket support    : Yes"
-else
-  echo "fwmark socket support    : No"
-fi
-
-if test "${VRRP_SUPPORT}" = "_WITH_VRRP_"; then
-  echo "Use VRRP Framework       : Yes"
-  if test "${VRRP_VMAC}" = "_HAVE_VRRP_VMAC_"; then
-    echo "Use VRRP VMAC            : Yes"
-  else
-    echo "Use VRRP VMAC            : No"
-  fi
-else
-  echo "Use VRRP Framework       : No"
-fi
-if test "${SNMP_SUPPORT}" = "_WITH_SNMP_"; then
-  echo "SNMP support             : Yes"
-else
-  echo "SNMP support             : No"
-fi
-if test "${SHA1_SUPPORT}" = "_WITH_SHA1_"; then
-  echo "SHA1 support             : Yes"
-else
-  echo "SHA1 support             : No"
-fi
-if test "${DFLAGS}" = "-D_DEBUG_"; then
-  echo "Use Debug flags          : Yes"
-else
-  echo "Use Debug flags          : No"
-fi
-dnl ----[ end configure ]---
diff --git a/tools/keepalived/doc/.gitignore b/tools/keepalived/doc/.gitignore
new file mode 100644
index 000000000..567609b12
--- /dev/null
+++ b/tools/keepalived/doc/.gitignore
@@ -0,0 +1 @@
+build/
diff --git a/tools/keepalived/doc/KEEPALIVED-MIB b/tools/keepalived/doc/KEEPALIVED-MIB
deleted file mode 100644
index 95d53ec65..000000000
--- a/tools/keepalived/doc/KEEPALIVED-MIB
+++ /dev/null
@@ -1,2221 +0,0 @@
--- ----------------------------------------------------------------------
--- MIB file for keepalived (http://www.keepalived.org)
--- ----------------------------------------------------------------------
---
--- There are two sections in this MIB: vrrp and check.
-
-KEEPALIVED-MIB DEFINITIONS ::= BEGIN
-
-IMPORTS
-    OBJECT-TYPE, MODULE-IDENTITY,
-    Integer32, Unsigned32, Counter32, Counter64,
-    Gauge32, enterprises, NOTIFICATION-TYPE
-        FROM SNMPv2-SMI
-    OBJECT-GROUP, MODULE-COMPLIANCE, NOTIFICATION-GROUP
-    	FROM SNMPv2-CONF
-    InetAddressType, InetAddress, InetPortNumber,
-    InetAddressPrefixLength, InetScopeType
-        FROM INET-ADDRESS-MIB
-    InterfaceIndex, ifIndex
-        FROM IF-MIB
-    DisplayString, TEXTUAL-CONVENTION, TruthValue
-        FROM SNMPv2-TC;
-
-keepalived MODULE-IDENTITY
-     LAST-UPDATED "201208240000Z"
-     ORGANIZATION "Keepalived"
-     CONTACT-INFO "http://www.keepalived.org"
-     DESCRIPTION
-        "This MIB describes objects used by keepalived, both
-         for VRRP and health checker."
-     REVISION "201208240000Z"
-     DESCRIPTION "routerId added to traps variables"
-     REVISION "200904080000Z"
-     DESCRIPTION "Initial revision"
-
-     ::= { project 5 }
-
--- We are hosted under Debian OID. See http://dsa.debian.org/iana/
-debian			OBJECT IDENTIFIER ::= { enterprises 9586 }
-project			OBJECT IDENTIFIER ::= { debian 100 }
-
-VrrpState ::= TEXTUAL-CONVENTION
-    STATUS       current
-    DESCRIPTION
-	"Represents a VRRP state."
-    SYNTAX INTEGER {
-    	init(0),
-	backup(1),
-	master(2),
-	fault(3),
-	unknown(4)
-	}
-
-global			OBJECT IDENTIFIER ::= { keepalived 1 }
-vrrp                    OBJECT IDENTIFIER ::= { keepalived 2 }
-check                   OBJECT IDENTIFIER ::= { keepalived 3 }
-conformance		OBJECT IDENTIFIER ::= { keepalived 4 }
-
--- ----------------------------------------------------------------------
--- Global part
--- ----------------------------------------------------------------------
-
-version OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-    	"Version of keepalived"
-    ::= { global 1 }
-
-routerId OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-    	"Router ID"
-    ::= { global 2 }
-
-mail	OBJECT IDENTIFIER ::= { global 3 }
-
-smtpServerAddressType OBJECT-TYPE
-    SYNTAX InetAddressType
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-    	"Address type for SMTP server."
-    ::= { mail 1 }
-
-smtpServerAddress OBJECT-TYPE
-    SYNTAX InetAddress
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-    	"Address of SMTP server."
-    ::= { mail 2 }
-
-smtpServerTimeout OBJECT-TYPE
-    SYNTAX Unsigned32
-    UNITS "seconds"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-    	"SMTP server connection timeout."
-    ::= { mail 3 }
-
-emailFrom OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-    	"Email address for the From field."
-    ::= { mail 4 }
-
-emailTable OBJECT-TYPE
-    SYNTAX SEQUENCE OF EmailEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Table of email notification addresses."
-    ::= { mail 5 }
-
-emailEntry OBJECT-TYPE
-    SYNTAX EmailEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Email address to be notified with an alert."
-    INDEX { emailIndex }
-    ::= { emailTable 1 }
-
-EmailEntry ::= SEQUENCE {
-	emailIndex Integer32,
-	emailAddress DisplayString
-}
-
-emailIndex OBJECT-TYPE
-    SYNTAX Integer32 (1..2147483647)
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Index for the email address."
-    ::= { emailEntry 1 }
-
-emailAddress OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Email address to be notified when an alert is raised."
-    ::= { emailEntry 2 }
-
-trapEnable OBJECT-TYPE
-    SYNTAX INTEGER { enabled(1), disabled(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Indicate whether traps should be sent for various events."
-    ::= { global 4 }
-
-linkBeat OBJECT-TYPE
-    SYNTAX INTEGER { netlink(1), polling(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Indicate which method is used to check if a link is up or
-	down. netlink(1) means that the kernel will push a link state
-	change while polling(2) means that the status of the link is
-	checked periodically."
-    ::= { global 5 }
-
--- ----------------------------------------------------------------------
--- VRRP part
--- ----------------------------------------------------------------------
-
--- Sync groups
--- see vrrp.h
-
-vrrpSyncGroupTable OBJECT-TYPE
-    SYNTAX SEQUENCE OF VrrpSyncGroupEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Table of sync groups"
-    ::= { vrrp 1 }
-
-vrrpSyncGroupEntry OBJECT-TYPE
-    SYNTAX VrrpSyncGroupEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Information describing a sync group"
-    INDEX { vrrpSyncGroupIndex }
-    ::= { vrrpSyncGroupTable 1 }
-
-VrrpSyncGroupEntry ::= SEQUENCE {
-	vrrpSyncGroupIndex Integer32,
-	vrrpSyncGroupName DisplayString,
-	vrrpSyncGroupState VrrpState,
-	vrrpSyncGroupSmtpAlert INTEGER,
-	vrrpSyncGroupNotifyExec INTEGER,
-	vrrpSyncGroupScriptMaster DisplayString,
-	vrrpSyncGroupScriptBackup DisplayString,
-	vrrpSyncGroupScriptFault DisplayString,
-	vrrpSyncGroupScript DisplayString
-}
-
-vrrpSyncGroupIndex OBJECT-TYPE
-    SYNTAX Integer32 (1..2147483647)
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Index of the synchronisation group."
-    ::= { vrrpSyncGroupEntry 1 }
-
-vrrpSyncGroupName OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Name of the synchronisation group."
-    ::= {vrrpSyncGroupEntry 2 }
-
-vrrpSyncGroupState OBJECT-TYPE
-    SYNTAX VrrpState
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current state of the synchronisation group."
-    ::= {vrrpSyncGroupEntry 3 }
-
-vrrpSyncGroupSmtpAlert OBJECT-TYPE
-    SYNTAX INTEGER { enabled(1), disabled(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Will SMTP alert be sent for this synchronisation group?"
-    ::= {vrrpSyncGroupEntry 4 }
-
-vrrpSyncGroupNotifyExec OBJECT-TYPE
-    SYNTAX INTEGER { enabled(1), disabled(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Will we execute notification script for this group?"
-    ::= {vrrpSyncGroupEntry 5 }
-
-vrrpSyncGroupScriptMaster OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Script to execute when the group becomes master."
-    ::= {vrrpSyncGroupEntry 6 }
-
-vrrpSyncGroupScriptBackup OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Script to execute when the group becomes backup."
-    ::= {vrrpSyncGroupEntry 7 }
-
-vrrpSyncGroupScriptFault OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Script to execute when the group is in fault state."
-    ::= {vrrpSyncGroupEntry 8 }
-
-vrrpSyncGroupScript OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Script to execute whenever a state change occurs."
-    ::= {vrrpSyncGroupEntry 9 }
-
-vrrpSyncGroupMemberTable OBJECT-TYPE
-    SYNTAX SEQUENCE OF VrrpSyncGroupMemberEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Table of instances contained in sync groups"
-    ::= { vrrp 2 }
-
-vrrpSyncGroupMemberEntry OBJECT-TYPE
-    SYNTAX VrrpSyncGroupMemberEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Information describing a member of a sync group"
-    INDEX { vrrpSyncGroupIndex, vrrpSyncGroupMemberInstanceIndex }
-    ::= { vrrpSyncGroupMemberTable 1 }
-
-VrrpSyncGroupMemberEntry ::= SEQUENCE {
-	vrrpSyncGroupMemberInstanceIndex Integer32,
-	vrrpSyncGroupMemberName DisplayString
-}
-
-vrrpSyncGroupMemberInstanceIndex OBJECT-TYPE
-    SYNTAX Integer32 (1..2147483647)
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Index of an instance in a synchronisation group.
-	 There is no relation with this index and the index of the
-	 corresponding instance in vrrpInstanceTable. Use the name
-	 to find out the corresponding instance."
-    ::= { vrrpSyncGroupMemberEntry 1 }
-
-vrrpSyncGroupMemberName OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Name of the instance contained in the synchronisation group."
-    ::= { vrrpSyncGroupMemberEntry 2 }
-
--- VRRP instances
--- see vrrp.h
-
-vrrpInstanceTable OBJECT-TYPE
-    SYNTAX SEQUENCE OF VrrpInstanceEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Table of VRRP instances"
-    ::= { vrrp 3 }
-
-vrrpInstanceEntry OBJECT-TYPE
-    SYNTAX VrrpInstanceEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Information describing a sync group"
-    INDEX { vrrpInstanceIndex }
-    ::= { vrrpInstanceTable 1 }
-
-VrrpInstanceEntry ::= SEQUENCE {
-	vrrpInstanceIndex INTEGER,
-	vrrpInstanceName DisplayString,
-	vrrpInstanceVirtualRouterId Unsigned32,
-	vrrpInstanceState VrrpState,
-	vrrpInstanceInitialState VrrpState,
-	vrrpInstanceWantedState VrrpState,
-	vrrpInstanceBasePriority Integer32,
-	vrrpInstanceEffectivePriority Integer32,
-	vrrpInstanceVipsStatus INTEGER,
-	vrrpInstancePrimaryInterface DisplayString,
-	vrrpInstanceTrackPrimaryIf INTEGER,
-	vrrpInstanceAdvertisementsInt Unsigned32,
-	vrrpInstancePreempt INTEGER,
-	vrrpInstancePreemptDelay Unsigned32,
-	vrrpInstanceAuthType INTEGER,
-	vrrpInstanceLvsSyncDaemon INTEGER,
-	vrrpInstanceLvsSyncInterface DisplayString,
-	vrrpInstanceSyncGroup DisplayString,
-	vrrpInstanceGarpDelay Unsigned32,
-	vrrpInstanceSmtpAlert INTEGER,
-	vrrpInstanceNotifyExec INTEGER,
-	vrrpInstanceScriptMaster DisplayString,
-	vrrpInstanceScriptBackup DisplayString,
-	vrrpInstanceScriptFault DisplayString,
-	vrrpInstanceScriptStop DisplayString,
-	vrrpInstanceScript DisplayString
-}
-
-vrrpInstanceIndex OBJECT-TYPE
-    SYNTAX INTEGER {
-    	static(0)
-	}
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Index of the VRRP instance.
-
-	 Instance 0 is for static IP and static routes."
-    ::= { vrrpInstanceEntry 1 }
-
-vrrpInstanceName OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Name of the VRRP instance."
-    ::= { vrrpInstanceEntry 2 }
-
-vrrpInstanceVirtualRouterId OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Virtual Router ID (VRID) for this VRRP instance."
-    ::= { vrrpInstanceEntry 3 }
-
-vrrpInstanceState OBJECT-TYPE
-    SYNTAX VrrpState
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current state of this VRRP instance."
-    ::= { vrrpInstanceEntry 4 }
-
-vrrpInstanceInitialState OBJECT-TYPE
-    SYNTAX VrrpState
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Initial state of this VRRP instance."
-    ::= { vrrpInstanceEntry 5 }
-
-vrrpInstanceWantedState OBJECT-TYPE
-    SYNTAX VrrpState
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"State wanted by the operator for this VRRP instance."
-    ::= { vrrpInstanceEntry 6 }
-
-vrrpInstanceBasePriority OBJECT-TYPE
-    SYNTAX Integer32
-    MAX-ACCESS read-write
-    STATUS current
-    DESCRIPTION
-	"Base priority (as defined in the configuration file) for this
-	 VRRP instance.
-
-	 This value can be modified to force the virtual router
-	 instance to become backup or master.
-	 "
-    ::= { vrrpInstanceEntry 7 }
-
-vrrpInstanceEffectivePriority OBJECT-TYPE
-    SYNTAX Integer32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Effective priority for this VRRP instance. Status of
-	 interfaces and script results are used to compute this value
-	 from the base priority."
-    ::= { vrrpInstanceEntry 8 }
-
-vrrpInstanceVipsStatus OBJECT-TYPE
-    SYNTAX INTEGER { allSet(1), notAllSet(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Are all VIP of this VRRP instance enabled?"
-    ::= { vrrpInstanceEntry 9 }
-
-vrrpInstancePrimaryInterface OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Primary interface of this VRRP instance."
-    ::= { vrrpInstanceEntry 10 }
-
-vrrpInstanceTrackPrimaryIf OBJECT-TYPE
-    SYNTAX INTEGER { tracked(1), notTracked(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Do we track the status of the primary interface?"
-    ::= { vrrpInstanceEntry 11 }
-
-vrrpInstanceAdvertisementsInt OBJECT-TYPE
-    SYNTAX Unsigned32
-    UNITS "seconds"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Delay in seconds between two VRRP advertisements."
-    ::= { vrrpInstanceEntry 12 }
-
-vrrpInstancePreempt OBJECT-TYPE
-    SYNTAX INTEGER { preempt(1), noPreempt(2) }
-    MAX-ACCESS read-write
-    STATUS current
-    DESCRIPTION
-	"Will a higher priority advertisement preempt a lower instance?"
-    ::= { vrrpInstanceEntry 13 }
-
-vrrpInstancePreemptDelay OBJECT-TYPE
-    SYNTAX Unsigned32
-    UNITS "seconds"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Delay after startup until preemption can happen. 0 means that
-	 there is no delay."
-    ::= { vrrpInstanceEntry 14 }
-
-vrrpInstanceAuthType OBJECT-TYPE
-    SYNTAX INTEGER {
-    		none(0),
-		password(1),
-		ah(2)
-		}
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Authentication method to authenticate other peers."
-    ::= { vrrpInstanceEntry 15 }
-
-vrrpInstanceLvsSyncDaemon OBJECT-TYPE
-    SYNTAX INTEGER { enabled(1), disabled(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Is LVS sync daemon enabled for this VRRP instance?"
-    ::= { vrrpInstanceEntry 16 }
-
-vrrpInstanceLvsSyncInterface OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"If LVS sync daemon is enabled, which interface to use for syncing?"
-    ::= { vrrpInstanceEntry 17 }
-
-vrrpInstanceSyncGroup OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Name of the synchronisation group this VRRP instance belongs, if any."
-    ::= { vrrpInstanceEntry 18 }
-
-vrrpInstanceGarpDelay OBJECT-TYPE
-    SYNTAX Unsigned32
-    UNITS "seconds"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Delay to launch gratuitous ARP (GARP)."
-    ::= { vrrpInstanceEntry 19 }
-
-vrrpInstanceSmtpAlert OBJECT-TYPE
-    SYNTAX INTEGER { enabled(1), disabled(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Will SMTP alert be sent for this VRRP instance?"
-    ::= { vrrpInstanceEntry 20 }
-
-vrrpInstanceNotifyExec OBJECT-TYPE
-    SYNTAX INTEGER { enabled(1), disabled(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Will we execute notification script for this instance?"
-    ::= { vrrpInstanceEntry 21 }
-
-vrrpInstanceScriptMaster OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Script to execute when the instance becomes master."
-    ::= { vrrpInstanceEntry 22 }
-
-vrrpInstanceScriptBackup OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Script to execute when the instance becomes backup."
-    ::= { vrrpInstanceEntry 23 }
-
-vrrpInstanceScriptFault OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Script to execute when the instance is in fault state."
-    ::= { vrrpInstanceEntry 24 }
-
-vrrpInstanceScriptStop OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Script to execute when the instance is stopped."
-    ::= { vrrpInstanceEntry 25 }
-
-vrrpInstanceScript OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Script to execute whenever a state change occurs."
-    ::= { vrrpInstanceEntry 26 }
-
-vrrpTrackedInterfaceTable OBJECT-TYPE
-    SYNTAX SEQUENCE OF VrrpTrackedInterfaceEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Table of tracked interfaces for each VRRP instance."
-    ::= { vrrp 4 }
-
-vrrpTrackedInterfaceEntry OBJECT-TYPE
-    SYNTAX VrrpTrackedInterfaceEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Information describing a tracked interface"
-    INDEX { vrrpInstanceIndex, ifIndex }
-    ::= { vrrpTrackedInterfaceTable 1 }
-
-VrrpTrackedInterfaceEntry ::= SEQUENCE {
-	vrrpTrackedInterfaceName DisplayString,
-	vrrpTrackedInterfaceWeight Integer32
-}
-
-vrrpTrackedInterfaceName OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Name of the tracked interface."
-    ::= { vrrpTrackedInterfaceEntry 1 }
-
-vrrpTrackedInterfaceWeight OBJECT-TYPE
-    SYNTAX Integer32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-        "Weight of the tracked interface."
-    ::= { vrrpTrackedInterfaceEntry 2 }
-
-vrrpTrackedScriptTable OBJECT-TYPE
-    SYNTAX SEQUENCE OF VrrpTrackedScriptEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Table of tracked interfaces for each VRRP instance."
-    ::= { vrrp 5 }
-
-vrrpTrackedScriptEntry OBJECT-TYPE
-    SYNTAX VrrpTrackedScriptEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Information describing a tracked script"
-    INDEX { vrrpInstanceIndex, vrrpTrackedScriptIndex }
-    ::= { vrrpTrackedScriptTable 1 }
-
-VrrpTrackedScriptEntry ::= SEQUENCE {
-	vrrpTrackedScriptIndex Integer32,
-	vrrpTrackedScriptName DisplayString,
-	vrrpTrackedScriptWeight Integer32
-}
-
-vrrpTrackedScriptIndex OBJECT-TYPE
-    SYNTAX Integer32 (1..2147483647)
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Index of the tracked script in the set of tracked scripts for
-	 the given VRRP instance. This index has no relation with the
-	 index of vrrpScriptTable."
-    ::= { vrrpTrackedScriptEntry 1 }
-
-vrrpTrackedScriptName OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Name of the tracked interface."
-    ::= { vrrpTrackedScriptEntry 2 }
-
-vrrpTrackedScriptWeight OBJECT-TYPE
-    SYNTAX Integer32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-        "Weight of the tracked interface."
-    ::= { vrrpTrackedScriptEntry 3 }
-
--- IP addresses
--- see vrrp_ipaddress.h
-
-vrrpAddressTable OBJECT-TYPE
-    SYNTAX SEQUENCE OF VrrpAddressEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Table of static and virtual addresses"
-    ::= { vrrp 6 }
-
-vrrpAddressEntry OBJECT-TYPE
-    SYNTAX VrrpAddressEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Information describing an address. This can be a static
-         address or a virtual address. In case of static address, the
-         VRRP instance index is 0."
-    INDEX { vrrpInstanceIndex, vrrpAddressIndex }
-    ::= { vrrpAddressTable 1 }
-
-VrrpAddressEntry ::= SEQUENCE {
-	vrrpAddressIndex Integer32,
-        vrrpAddressType InetAddressType,
-	vrrpAddressValue InetAddress,
-	vrrpAddressBroadcast InetAddress,
-	vrrpAddressMask InetAddressPrefixLength,
-	vrrpAddressScope InetScopeType,
-	vrrpAddressIfIndex InterfaceIndex,
-	vrrpAddressIfName DisplayString,
-	vrrpAddressIfAlias DisplayString,
-	vrrpAddressStatus INTEGER,
-	vrrpAddressAdvertising INTEGER
-}
-
-vrrpAddressIndex OBJECT-TYPE
-    SYNTAX Integer32 (1..2147483647)
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Address index."
-    ::= { vrrpAddressEntry 1 }
-
-vrrpAddressType OBJECT-TYPE
-    SYNTAX InetAddressType
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"A value that represents a type of Internet address."
-    ::= { vrrpAddressEntry 2 }
-
-vrrpAddressValue OBJECT-TYPE
-    SYNTAX InetAddress
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Actual IP address."
-    ::= { vrrpAddressEntry 3 }
-
-vrrpAddressBroadcast OBJECT-TYPE
-    SYNTAX InetAddress
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Broadcast address associated with the IP address."
-    ::= { vrrpAddressEntry 4 }
-
-vrrpAddressMask OBJECT-TYPE
-    SYNTAX InetAddressPrefixLength
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Address mask."
-    ::= { vrrpAddressEntry 5 }
-
-vrrpAddressScope OBJECT-TYPE
-    SYNTAX InetScopeType
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Address scope."
-    ::= { vrrpAddressEntry 6 }
-
-vrrpAddressIfIndex OBJECT-TYPE
-    SYNTAX InterfaceIndex
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Index of the interface to which the IP address is linked to."
-    ::= { vrrpAddressEntry 7 }
-
-vrrpAddressIfName OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Name of the interface to which the IP address is linked to."
-    ::= { vrrpAddressEntry 8 }
-
-vrrpAddressIfAlias OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Alias name of the interface."
-    ::= { vrrpAddressEntry 9 }
-
-vrrpAddressStatus OBJECT-TYPE
-    SYNTAX INTEGER { set(1), unset(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Is the IP address set?"
-    ::= { vrrpAddressEntry 10 }
-
-vrrpAddressAdvertising OBJECT-TYPE
-    SYNTAX INTEGER { advertised(1), notAdvertised(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Status of VRRP advertising for this IP address."
-    ::= { vrrpAddressEntry 11 }
-
--- Routes
--- see vrrp_iproute.h
-
-vrrpRouteTable OBJECT-TYPE
-    SYNTAX SEQUENCE OF VrrpRouteEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Table of static and virtual routes."
-    ::= { vrrp 7 }
-
-vrrpRouteEntry OBJECT-TYPE
-    SYNTAX VrrpRouteEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Information describing a route. In case of a static route,
-        the instance index is 0."
-    INDEX { vrrpInstanceIndex, vrrpRouteIndex }
-    ::= { vrrpRouteTable 1 }
-
-VrrpRouteEntry ::= SEQUENCE {
-	vrrpRouteIndex Integer32,
-        vrrpRouteAddressType InetAddressType,
-	vrrpRouteDestination InetAddress,
-	vrrpRouteDestinationMask InetAddressPrefixLength,
-	vrrpRouteGateway InetAddress,
-	vrrpRouteSecondaryGateway InetAddress,
-	vrrpRouteSource InetAddress,
-	vrrpRouteMetric Unsigned32,
-	vrrpRouteScope InetScopeType,
-	vrrpRouteType INTEGER,
-	vrrpRouteIfIndex InterfaceIndex,
-	vrrpRouteIfName DisplayString,
-	vrrpRouteRoutingTable Unsigned32,
-	vrrpRouteStatus INTEGER
-}
-
-vrrpRouteIndex OBJECT-TYPE
-    SYNTAX Integer32 (1..2147483647)
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Route index."
-    ::= { vrrpRouteEntry 1 }
-
-vrrpRouteAddressType OBJECT-TYPE
-    SYNTAX InetAddressType
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Route type of internet address."
-    ::= { vrrpRouteEntry 2 }
-
-vrrpRouteDestination OBJECT-TYPE
-    SYNTAX InetAddress
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Route destination."
-    ::= { vrrpRouteEntry 3 }
-
-vrrpRouteDestinationMask OBJECT-TYPE
-    SYNTAX InetAddressPrefixLength
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Route destination mask."
-    ::= { vrrpRouteEntry 4 }
-
-vrrpRouteGateway OBJECT-TYPE
-    SYNTAX InetAddress
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Gateway for the given destination."
-    ::= { vrrpRouteEntry 5 }
-
-vrrpRouteSecondaryGateway OBJECT-TYPE
-    SYNTAX InetAddress
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"An optional second gateway for the given destination."
-    ::= { vrrpRouteEntry 6 }
-
-vrrpRouteSource OBJECT-TYPE
-    SYNTAX InetAddress
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Which source IP address to use with this route."
-    ::= { vrrpRouteEntry 7 }
-
-vrrpRouteMetric OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Metric of this route."
-    ::= { vrrpRouteEntry 8 }
-
-vrrpRouteScope OBJECT-TYPE
-    SYNTAX InetScopeType
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Scope of this route."
-    ::= { vrrpRouteEntry 9 }
-
-vrrpRouteType OBJECT-TYPE
-    SYNTAX INTEGER { normal(1), ecmp(2), blackhole(3) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Kind of route."
-    ::= { vrrpRouteEntry 10 }
-
-vrrpRouteIfIndex OBJECT-TYPE
-    SYNTAX InterfaceIndex
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Interface attached to this route."
-    ::= { vrrpRouteEntry 11 }
-
-vrrpRouteIfName OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Name of the interface of attached to this route."
-    ::= { vrrpRouteEntry 12 }
-
-vrrpRouteRoutingTable OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Routing table where to route should be inserted."
-    ::= { vrrpRouteEntry 13 }
-
-vrrpRouteStatus OBJECT-TYPE
-    SYNTAX INTEGER { set(1), unset(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Is this route set in the kernel?"
-    ::= { vrrpRouteEntry 14 }
-
--- VRRP scripts
--- see vrrp_track.h
-
-vrrpScriptTable OBJECT-TYPE
-    SYNTAX SEQUENCE OF VrrpScriptEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Table of VRRP scripts"
-    ::= { vrrp 8 }
-
-vrrpScriptEntry OBJECT-TYPE
-    SYNTAX VrrpScriptEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-        "Information describing a VRRP script"
-    INDEX { vrrpScriptIndex }
-    ::= { vrrpScriptTable 1 }
-
-VrrpScriptEntry ::= SEQUENCE {
-	vrrpScriptIndex Integer32,
-        vrrpScriptName DisplayString,
-        vrrpScriptCommand DisplayString,
-        vrrpScriptInterval Integer32,
-        vrrpScriptWeight Integer32,
-        vrrpScriptResult INTEGER,
-        vrrpScriptRise Unsigned32,
-        vrrpScriptFall Unsigned32
-}
-
-vrrpScriptIndex OBJECT-TYPE
-    SYNTAX Integer32 (1..2147483647)
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Script index."
-    ::= { vrrpScriptEntry 1 }
-
-vrrpScriptName OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-        "Symbolic name of the script."
-    ::= { vrrpScriptEntry 2 }
-
-vrrpScriptCommand OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-        "Command executed when running the script."
-    ::= { vrrpScriptEntry 3 }
-
-vrrpScriptInterval OBJECT-TYPE
-    SYNTAX Integer32
-    UNITS "seconds"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-        "Interval between two runs of the script."
-    ::= { vrrpScriptEntry 4 }
-
-vrrpScriptWeight OBJECT-TYPE
-    SYNTAX Integer32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-        "Weight of the script if successful."
-    ::= { vrrpScriptEntry 5 }
-
-vrrpScriptResult OBJECT-TYPE
-    SYNTAX INTEGER {
-        disabled(0),
-        init(1),
-        bad(2),
-        good(3),
-        initgood(4)
-           }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-        "Current status of the script."
-    ::= { vrrpScriptEntry 6 }
-
-vrrpScriptRise OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-        "How many times the script should succeed before OK."
-    ::= { vrrpScriptEntry 7 }
-
-vrrpScriptFall OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-        "How many times the script should fail before KO."
-    ::= { vrrpScriptEntry 8 }
-
--- Traps
-
-vrrpTrap OBJECT IDENTIFIER ::= { vrrp 9 }
-vrrpTraps OBJECT IDENTIFIER ::= { vrrpTrap 0 } -- Reverse-mappable
-vrrpTrapControl OBJECT IDENTIFIER ::= { vrrpTrap 1 }
-
-vrrpSyncGroupStateChange NOTIFICATION-TYPE
-    OBJECTS {
-    	vrrpSyncGroupName,
-	vrrpSyncGroupState,
-	routerId
-    }
-    STATUS current
-    DESCRIPTION
-	"This trap signifies that the state of the whole vrrp sync
-	group changed."
-    ::= { vrrpTraps 1 }
-
-vrrpInstanceStateChange NOTIFICATION-TYPE
-    OBJECTS {
-    	vrrpInstanceName,
-	vrrpInstanceState,
-	vrrpInstanceInitialState,
-	routerId
-    }
-    STATUS current
-    DESCRIPTION
-	"This trap signifies that the state of a vrrp instance changed."
-    ::= { vrrpTraps 2 }
-
--- ----------------------------------------------------------------------
--- Healthchecker part
--- ----------------------------------------------------------------------
-
--- Virtual server group
-
-virtualServerGroupTable OBJECT-TYPE
-    SYNTAX SEQUENCE OF VirtualServerGroupEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Table of virtual server groups."
-    ::= { check 1 }
-
-virtualServerGroupEntry OBJECT-TYPE
-    SYNTAX VirtualServerGroupEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Information describing a virtual server group."
-    INDEX { virtualServerGroupIndex }
-    ::= { virtualServerGroupTable 1 }
-
-VirtualServerGroupEntry ::= SEQUENCE {
-	virtualServerGroupIndex Integer32,
-	virtualServerGroupName DisplayString
-}
-
-virtualServerGroupIndex OBJECT-TYPE
-    SYNTAX Integer32 (1..2147483647)
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Index of the virtual server group."
-    ::= { virtualServerGroupEntry 1 }
-
-virtualServerGroupName OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Name of the virtual server group."
-    ::= { virtualServerGroupEntry 2 }
-
-virtualServerGroupMemberTable OBJECT-TYPE
-    SYNTAX SEQUENCE OF VirtualServerGroupMemberEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Table of members of a virtual server group."
-    ::= { check 2 }
-
-virtualServerGroupMemberEntry OBJECT-TYPE
-    SYNTAX VirtualServerGroupMemberEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Description of a member of a virtual server group."
-    INDEX { virtualServerGroupIndex, virtualServerGroupMemberIndex }
-    ::= { virtualServerGroupMemberTable 1 }
-
-VirtualServerGroupMemberEntry ::= SEQUENCE {
-	virtualServerGroupMemberIndex Integer32,
-	virtualServerGroupMemberType INTEGER,
-	virtualServerGroupMemberFwMark Unsigned32,
-	virtualServerGroupMemberAddrType InetAddressType,
-	virtualServerGroupMemberAddress InetAddress,
-	virtualServerGroupMemberAddr1 InetAddress,
-	virtualServerGroupMemberAddr2 InetAddress,
-	virtualServerGroupMemberPort InetPortNumber
-}
-
-virtualServerGroupMemberIndex OBJECT-TYPE
-    SYNTAX Integer32 (1..2147483647)
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Index of the member into virtual server group."
-    ::= { virtualServerGroupMemberEntry 1 }
-
-virtualServerGroupMemberType OBJECT-TYPE
-    SYNTAX INTEGER { fwmark(1), ip(2), iprange(3) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Kind of entry: firewall mark, address with port or range of
-	 addresses with port."
-    ::= { virtualServerGroupMemberEntry 2 }
-
-virtualServerGroupMemberFwMark OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Firewall mark for this member.
-
-	 If the kind of this member is not fwmark(1), then this entry
-	 should not exist for the current row."
-    ::= { virtualServerGroupMemberEntry 3 }
-
-virtualServerGroupMemberAddrType OBJECT-TYPE
-    SYNTAX InetAddressType
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Type of IP address for this member.
-
-	 If the kind of this member is neither address(2) or range(3),
-	 then this entry should not exist for the current row."
-    ::= { virtualServerGroupMemberEntry 4 }
-
-virtualServerGroupMemberAddress OBJECT-TYPE
-    SYNTAX InetAddress
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"IP address of this member.
-
-	If the kind of this member is not address(2), then this entry
-	should not exist for the current row."
-    ::= { virtualServerGroupMemberEntry 5 }
-
-virtualServerGroupMemberAddr1 OBJECT-TYPE
-    SYNTAX InetAddress
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"First IP address of the range for this member.
-
-	If the kind of this member is not range(3), then this entry
-	should not exist for the current row."
-    ::= { virtualServerGroupMemberEntry 6 }
-
-virtualServerGroupMemberAddr2 OBJECT-TYPE
-    SYNTAX InetAddress
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Second IP address of the range for this member.
-
-	If the kind of this member is not range(3), then this entry
-	should not exist for the current row."
-    ::= { virtualServerGroupMemberEntry 7 }
-
-virtualServerGroupMemberPort OBJECT-TYPE
-    SYNTAX InetPortNumber
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"V port for this member.
-
-	If the kind of this member is neither address(2) nor range(3),
-	then this entry should not exist for the current row."
-    ::= { virtualServerGroupMemberEntry 8 }
-
--- virtual server
-
-virtualServerTable OBJECT-TYPE
-    SYNTAX SEQUENCE OF VirtualServerEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Table of virtual servers."
-    ::= { check 3 }
-
-virtualServerEntry OBJECT-TYPE
-    SYNTAX VirtualServerEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Information describing a virtual server."
-    INDEX { virtualServerIndex }
-    ::= { virtualServerTable 1 }
-
-VirtualServerEntry ::= SEQUENCE {
-	virtualServerIndex Integer32,
-	virtualServerType INTEGER,
-	virtualServerNameOfGroup DisplayString,
-	virtualServerFwMark Unsigned32,
-	virtualServerAddrType InetAddressType,
-	virtualServerAddress InetAddress,
-	virtualServerPort InetPortNumber,
-	virtualServerProtocol INTEGER,
-	virtualServerLoadBalancingAlgo INTEGER,
-	virtualServerLoadBalancingKind INTEGER,
-	virtualServerOPS TruthValue,
-	virtualServerStatus INTEGER,
-	virtualServerVirtualHost DisplayString,
-	virtualServerPersist INTEGER,
-	virtualServerPersistTimeout Unsigned32,
-	virtualServerPersistGranularity InetAddress,
-	virtualServerDelayLoop Unsigned32,
-	virtualServerHaSuspend TruthValue,
-	virtualServerAlpha INTEGER,
-	virtualServerOmega INTEGER,
-	virtualServerRealServersTotal Unsigned32,
-	virtualServerRealServersUp Unsigned32,
-	virtualServerQuorum Unsigned32,
-	virtualServerQuorumStatus INTEGER,
-	virtualServerQuorumUp DisplayString,
-	virtualServerQuorumDown DisplayString,
-	virtualServerHysteresis Unsigned32,
-	virtualServerStatsConns Gauge32,
-	virtualServerStatsInPkts Counter32,
-	virtualServerStatsOutPkts Counter32,
-	virtualServerStatsInBytes Counter64,
-	virtualServerStatsOutBytes Counter64,
-	virtualServerRateCps Gauge32,
-	virtualServerRateInPPS Gauge32,
-	virtualServerRateOutPPS Gauge32,
-	virtualServerRateInBPS Gauge32,
-	virtualServerRateOutBPS Gauge32
-}
-
-virtualServerIndex OBJECT-TYPE
-    SYNTAX Integer32 (1..2147483647)
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Index of the virtual server."
-    ::= { virtualServerEntry 1 }
-
-virtualServerType OBJECT-TYPE
-    SYNTAX INTEGER { fwmark(1), ip(2), group(3) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Type of virtual server. A virtual server can either be
-	defined from a firewall mark, an IP and a port
-	or from a virtual server group."
-    ::= { virtualServerEntry 2 }
-
-virtualServerNameOfGroup OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"If the virtual is defined from a group, this is the name of the group."
-    ::= { virtualServerEntry 3 }
-
-virtualServerFwMark OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"If the virtual server is defined from a firewall mark, this
-	is the value of the mark. Otherwise, this column should not
-	exist in the current row."
-    ::= { virtualServerEntry 4 }
-
-virtualServerAddrType OBJECT-TYPE
-    SYNTAX InetAddressType
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"If the virtual server is defined from an IP, this
-	is the address family. Otherwise, this column should not
-	exist in the current row."
-    ::= { virtualServerEntry 5 }
-
-virtualServerAddress OBJECT-TYPE
-    SYNTAX InetAddress
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"If the virtual server is defined from an IP address, this
-	is the value of the IP. Otherwise, this column should not
-	exist in the current row."
-    ::= { virtualServerEntry 6 }
-
-virtualServerPort OBJECT-TYPE
-    SYNTAX InetPortNumber
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"If the virtual server is defined from an IP, this is
-	the value of the port to listen for requests. Otherwise, this column
-	should not exist in the current row."
-    ::= { virtualServerEntry 7 }
-
-virtualServerProtocol OBJECT-TYPE
-    SYNTAX INTEGER { tcp(1), udp(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Which transport protocol should be used for this virtual server."
-    ::= { virtualServerEntry 8 }
-
-virtualServerLoadBalancingAlgo OBJECT-TYPE
-    SYNTAX INTEGER {
-    	rr(1),
-	wrr(2),
-	lc(3),
-	wlc(4),
-	lblc(5),
-	lblcr(6),
-	dh(7),
-	sh(8),
-	sed(9),
-	nq(10),
-	unknown(99)
-    }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Which load balancing algorithm (or scheduler) should be used
-	for this virtual server."
-    ::= { virtualServerEntry 9 }
-
-virtualServerLoadBalancingKind OBJECT-TYPE
-    SYNTAX INTEGER { nat(1), dr(2), tun(3) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Forwarding method to use for this virtual server."
-    ::= { virtualServerEntry 10 }
-
-virtualServerStatus OBJECT-TYPE
-    SYNTAX INTEGER { alive(1), dead(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current status of this virtual server."
-    ::= { virtualServerEntry 11 }
-
-virtualServerVirtualHost OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Virtualhost of this server for HTTP like requests."
-    ::= { virtualServerEntry 12 }
-
-virtualServerPersist OBJECT-TYPE
-    SYNTAX INTEGER { enabled(1), disabled(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Is the virtual service persistence enabled?"
-    ::= { virtualServerEntry 13 }
-
-virtualServerPersistTimeout OBJECT-TYPE
-    SYNTAX Unsigned32
-    UNITS "seconds"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"If this virtual service is persistence, what is the timeout."
-    ::= { virtualServerEntry 14 }
-
-virtualServerPersistGranularity OBJECT-TYPE
-    SYNTAX InetAddress
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Netmask specifying the granularity of the persistence mechanism."
-    ::= { virtualServerEntry 15 }
-
-virtualServerDelayLoop OBJECT-TYPE
-    SYNTAX Unsigned32
-    UNITS "seconds"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Delay in seconds between two checks."
-    ::= { virtualServerEntry 16 }
-
-virtualServerHaSuspend OBJECT-TYPE
-    SYNTAX TruthValue
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"If set to true(1), checks will be suspended if the IP of the
-	virtual server is currently not set."
-    ::= { virtualServerEntry 17 }
-
-virtualServerAlpha OBJECT-TYPE
-    SYNTAX INTEGER { enabled(1), disabled(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Is alpha mode enabled?"
-    ::= { virtualServerEntry 18 }
-
-virtualServerOmega OBJECT-TYPE
-    SYNTAX INTEGER { enabled(1), disabled(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Is omega mode enabled?"
-    ::= { virtualServerEntry 19 }
-
-virtualServerRealServersTotal OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Total number of real servers for this virtual server."
-    ::= { virtualServerEntry 20 }
-
-virtualServerRealServersUp OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Real servers actually up for this virtual server."
-    ::= { virtualServerEntry 21 }
-
-virtualServerQuorum OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Quorum to get amond real servers to consider this virtual server up."
-    ::= { virtualServerEntry 22 }
-
-virtualServerQuorumStatus OBJECT-TYPE
-    SYNTAX INTEGER { met(1), notMet(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current status of the quorum for this virtual server."
-    ::= { virtualServerEntry 23 }
-
-virtualServerQuorumUp OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Command to execute when the quorum is met."
-    ::= { virtualServerEntry 24 }
-
-virtualServerQuorumDown OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Command to execute when the quorum is not met."
-    ::= { virtualServerEntry 25 }
-
-virtualServerHysteresis OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Hysteresis with respect to quorum count."
-    ::= { virtualServerEntry 26 }
-
-virtualServerStatsConns OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "connections"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Total number of connections scheduled for this virtual server."
-    ::= { virtualServerEntry 27 }
-
-virtualServerStatsInPkts OBJECT-TYPE
-    SYNTAX Counter32
-    UNITS "packets"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Total number of incoming packets for this virtual server."
-    ::= { virtualServerEntry 28 }
-
-virtualServerStatsOutPkts OBJECT-TYPE
-    SYNTAX Counter32
-    UNITS "packets"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Total number of outgoing packets for this virtual server."
-    ::= { virtualServerEntry 29 }
-
-virtualServerStatsInBytes OBJECT-TYPE
-    SYNTAX Counter64
-    UNITS "bytes"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Total number of incoming bytes for this virtual server."
-    ::= { virtualServerEntry 30 }
-
-virtualServerStatsOutBytes OBJECT-TYPE
-    SYNTAX Counter64
-    UNITS "bytes"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Total number of outgoing bytes for this virtual server."
-    ::= { virtualServerEntry 31 }
-
-virtualServerRateCps OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "connections/s"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current connection rate for this virtual server."
-    ::= { virtualServerEntry 32 }
-
-virtualServerRateInPPS OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "packets/s"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current in packet rate for this virtual server."
-    ::= { virtualServerEntry 33 }
-
-virtualServerRateOutPPS OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "packets/s"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current out packet rate for this virtual server."
-    ::= { virtualServerEntry 34 }
-
-virtualServerRateInBPS OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "bytes/s"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current incoming rate for this virtual server."
-    ::= { virtualServerEntry 35 }
-
-virtualServerRateOutBPS OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "bytes/s"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current outgoing rate for this virtual server."
-    ::= { virtualServerEntry 36 }
-
-virtualServerOPS OBJECT-TYPE
-    SYNTAX TruthValue
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"If set to true(1), One-Packet-Scheduling will be applied."
-    ::= { virtualServerEntry 37 }
-
--- real servers
-
-realServerTable OBJECT-TYPE
-    SYNTAX SEQUENCE OF RealServerEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Table of real servers. This includes regular real servers and sorry servers."
-    ::= { check 4 }
-
-realServerEntry OBJECT-TYPE
-    SYNTAX RealServerEntry
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Information describing a real server."
-    INDEX { virtualServerIndex, realServerIndex }
-    ::= { realServerTable 1 }
-
-RealServerEntry ::= SEQUENCE {
-	realServerIndex Integer32,
-	realServerType INTEGER,
-	realServerAddrType InetAddressType,
-	realServerAddress InetAddress,
-	realServerPort InetPortNumber,
-	realServerStatus INTEGER,
-	realServerWeight Integer32,
-	realServerUpperConnectionLimit Unsigned32,
-	realServerLowerConnectionLimit Unsigned32,
-	realServerActionWhenDown INTEGER,
-	realServerNotifyUp DisplayString,
-	realServerNotifyDown DisplayString,
-	realServerFailedChecks Unsigned32,
-	realServerStatsConns Gauge32,
-	realServerStatsActiveConns Gauge32,
-	realServerStatsInactiveConns Gauge32,
-	realServerStatsPersistentConns Gauge32,
-	realServerStatsInPkts Counter32,
-	realServerStatsOutPkts Counter32,
-	realServerStatsInBytes Counter64,
-	realServerStatsOutBytes Counter64,
-	realServerRateCps Gauge32,
-	realServerRateInPPS Gauge32,
-	realServerRateOutPPS Gauge32,
-	realServerRateInBPS Gauge32,
-	realServerRateOutBPS Gauge32
-}
-
-realServerIndex OBJECT-TYPE
-    SYNTAX Integer32 (1..2147483647)
-    MAX-ACCESS not-accessible
-    STATUS current
-    DESCRIPTION
-	"Index of the real server."
-    ::= { realServerEntry 1 }
-
-realServerType OBJECT-TYPE
-    SYNTAX INTEGER { regular(1), sorry(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Type of real server: either a regular real server or a sorry server."
-    ::= { realServerEntry 2 }
-
-realServerAddrType OBJECT-TYPE
-    SYNTAX InetAddressType
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Address family for this real server."
-    ::= { realServerEntry 3 }
-
-realServerAddress OBJECT-TYPE
-    SYNTAX InetAddress
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"IP address of this real server."
-    ::= { realServerEntry 4 }
-
-realServerPort OBJECT-TYPE
-    SYNTAX InetPortNumber
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Port of the service."
-    ::= { realServerEntry 5 }
-
-realServerStatus OBJECT-TYPE
-    SYNTAX INTEGER { alive(1), dead(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Status of this real server."
-    ::= { realServerEntry 6 }
-
-realServerWeight OBJECT-TYPE
-    SYNTAX Integer32
-    MAX-ACCESS read-write
-    STATUS current
-    DESCRIPTION
-	"Weight of this real server.
-
-	This value can be set to 0 to disable the real server."
-    ::= { realServerEntry 7 }
-
-realServerUpperConnectionLimit OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Maximum number of connections for this real server."
-    ::= { realServerEntry 8 }
-
-realServerLowerConnectionLimit OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Minimum number of connections for this real server."
-    ::= { realServerEntry 9 }
-
-realServerActionWhenDown OBJECT-TYPE
-    SYNTAX INTEGER { remove(1), inhibit(2) }
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"What action is performed when this server is down. Its weight
-	can be set to 0 (inhibit) or it can be removed from the pool."
-    ::= { realServerEntry 10 }
-
-realServerNotifyUp OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Command to execute when this server becomes alive."
-    ::= { realServerEntry 11 }
-
-realServerNotifyDown OBJECT-TYPE
-    SYNTAX DisplayString
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Command to execute when this server becomes dead."
-    ::= { realServerEntry 12 }
-
-realServerFailedChecks OBJECT-TYPE
-    SYNTAX Unsigned32
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"How many failed checks for this real server."
-    ::= { realServerEntry 13 }
-
-realServerStatsConns OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "connections"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Total number of connections scheduled for this real server."
-    ::= { realServerEntry 14 }
-
-realServerStatsActiveConns OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "connections"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current active connections for this real server."
-    ::= { realServerEntry 15 }
-
-realServerStatsInactiveConns OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "connections"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current inactive connections for this real server."
-    ::= { realServerEntry 16 }
-
-realServerStatsPersistentConns OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "connections"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current persistent connections for this real server."
-    ::= { realServerEntry 17 }
-
-realServerStatsInPkts OBJECT-TYPE
-    SYNTAX Counter32
-    UNITS "packets"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Total number of incoming packets for this real server."
-    ::= { realServerEntry 18 }
-
-realServerStatsOutPkts OBJECT-TYPE
-    SYNTAX Counter32
-    UNITS "packets"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Total number of outgoing packets for this real server."
-    ::= { realServerEntry 19 }
-
-realServerStatsInBytes OBJECT-TYPE
-    SYNTAX Counter64
-    UNITS "bytes"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Total number of incoming bytes for this real server."
-    ::= { realServerEntry 20 }
-
-realServerStatsOutBytes OBJECT-TYPE
-    SYNTAX Counter64
-    UNITS "bytes"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Total number of outgoing bytes for this real server."
-    ::= { realServerEntry 21 }
-
-realServerRateCps OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "connections/s"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current connection rate for this real server."
-    ::= { realServerEntry 22 }
-
-realServerRateInPPS OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "packets/s"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current in packet rate for this real server."
-    ::= { realServerEntry 23 }
-
-realServerRateOutPPS OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "packets/s"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current out packet rate for this real server."
-    ::= { realServerEntry 24 }
-
-realServerRateInBPS OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "bytes/s"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current incoming rate for this real server."
-    ::= { realServerEntry 25 }
-
-realServerRateOutBPS OBJECT-TYPE
-    SYNTAX Gauge32
-    UNITS "bytes/s"
-    MAX-ACCESS read-only
-    STATUS current
-    DESCRIPTION
-	"Current outgoing rate for this real server."
-    ::= { realServerEntry 26 }
-
--- Traps
-
-checkTrap OBJECT IDENTIFIER ::= { check 5 }
-checkTraps OBJECT IDENTIFIER ::= { checkTrap 0 } -- Reverse-mappable
-checkTrapControl OBJECT IDENTIFIER ::= { checkTrap 1 }
-
-realServerStateChange NOTIFICATION-TYPE
-    OBJECTS {
-    	realServerAddrType,
-	realServerAddress,
-	realServerPort,
-	realServerStatus,
-	virtualServerType,
-	virtualServerProtocol,
-	virtualServerRealServersUp,
-	virtualServerRealServersTotal,
-	routerId
-    }
-    STATUS current
-    DESCRIPTION
-	"This trap signifies that the state of a real server has
-	changed. Additional varbinds will be added depending on the
-	value of virtualServerType: virtualServerNameOfGroup,
-	virtualServerFwMark, virtualServerAddrType,
-	virtualServerAddress, virtualServerPort."
-    ::= { checkTraps 1 }
-
-virtualServerQuorumStateChange NOTIFICATION-TYPE
-    OBJECTS {
-	virtualServerType,
-	virtualServerProtocol,
-	virtualServerQuorumStatus,
-	virtualServerQuorum,
-	virtualServerRealServersUp,
-	virtualServerRealServersTotal,
-	routerId
-    }
-    STATUS current
-    DESCRIPTION
-	"This trap signifies that the quorum of a virtual server has
-	changed. Additional varbinds will be added depending on the
-	value of virtualServerType: virtualServerNameOfGroup,
-	virtualServerFwMark, virtualServerAddrType,
-	virtualServerAddress, virtualServerPort."
-    ::= { checkTraps 2 }
-
--- ----------------------------------------------------------------------
--- Conformance
--- ----------------------------------------------------------------------
-
-compliances  OBJECT IDENTIFIER ::= { conformance 1 }
-groups	     OBJECT IDENTIFIER ::= { conformance 2 }
-
-globalCompliances MODULE-COMPLIANCE
-    STATUS current
-    DESCRIPTION
-	"Compliance statement for global data"
-    MODULE -- this module
-    MANDATORY-GROUPS {
-    	globalGroup
-    }
-    ::= { compliances 1 }
-
-vrrpCompliances MODULE-COMPLIANCE
-    STATUS current
-    DESCRIPTION
-	"The VRRP compliance statement"
-    MODULE -- this module
-    MANDATORY-GROUPS {
-	vrrpScriptGroup,
-	vrrpSyncGroup,
-	vrrpInstanceGroup,
-	vrrpTrapsGroup
-    }
-    ::= { compliances 2 }
-
-checkCompliances MODULE-COMPLIANCE
-    STATUS current
-    DESCRIPTION
-	"The check compliance statement"
-    MODULE -- this module
-    MANDATORY-GROUPS {
-	virtualServerGroupGroup,
-	virtualServerGroup,
-	realServerGroup,
-	checkTrapsGroup
-    }
-    ::= { compliances 3 }
-
-globalGroup OBJECT-GROUP
-    OBJECTS {
-    	version,
-	routerId,
-	smtpServerAddressType,
-	smtpServerAddress,
-	smtpServerTimeout,
-	emailFrom,
-	emailAddress,
-	trapEnable,
-	linkBeat
-    }
-    STATUS current
-    DESCRIPTION
-	"Conformance group for global data."
-    ::= { groups 1 }
-
-vrrpGroups OBJECT IDENTIFIER ::= { groups 2 }
-
-vrrpSyncGroup OBJECT-GROUP
-    OBJECTS {
-	vrrpSyncGroupName,
-	vrrpSyncGroupState,
-	vrrpSyncGroupSmtpAlert,
-	vrrpSyncGroupNotifyExec,
-	vrrpSyncGroupScriptMaster,
-	vrrpSyncGroupScriptBackup,
-	vrrpSyncGroupScriptFault,
-	vrrpSyncGroupScript,
-	vrrpSyncGroupMemberName
-	}
-    STATUS current
-    DESCRIPTION
-	"Conformance group for synchronisation groups."
-    ::= { vrrpGroups 1 }
-
-vrrpInstanceGroup OBJECT-GROUP
-    OBJECTS {
-	vrrpInstanceName,
-	vrrpInstanceVirtualRouterId,
-	vrrpInstanceState,
-	vrrpInstanceInitialState,
-	vrrpInstanceWantedState,
-	vrrpInstanceBasePriority,
-	vrrpInstanceEffectivePriority,
-	vrrpInstanceVipsStatus,
-	vrrpInstancePrimaryInterface,
-	vrrpInstanceTrackPrimaryIf,
-	vrrpInstanceAdvertisementsInt,
-	vrrpInstancePreempt,
-	vrrpInstancePreemptDelay,
-	vrrpInstanceAuthType,
-	vrrpInstanceLvsSyncDaemon,
-	vrrpInstanceLvsSyncInterface,
-	vrrpInstanceSyncGroup,
-	vrrpInstanceGarpDelay,
-	vrrpInstanceSmtpAlert,
-	vrrpInstanceNotifyExec,
-	vrrpInstanceScriptMaster,
-	vrrpInstanceScriptBackup,
-	vrrpInstanceScriptFault,
-	vrrpInstanceScriptStop,
-	vrrpInstanceScript,
-	vrrpTrackedInterfaceName,
-	vrrpTrackedInterfaceWeight,
-	vrrpTrackedScriptName,
-	vrrpTrackedScriptWeight,
-        vrrpAddressType,
-	vrrpAddressValue,
-	vrrpAddressBroadcast,
-	vrrpAddressMask,
-	vrrpAddressScope,
-	vrrpAddressIfIndex,
-	vrrpAddressIfName,
-	vrrpAddressIfAlias,
-	vrrpAddressStatus,
-	vrrpAddressAdvertising,
-        vrrpRouteAddressType,
-	vrrpRouteDestination,
-	vrrpRouteDestinationMask,
-	vrrpRouteGateway,
-	vrrpRouteSecondaryGateway,
-	vrrpRouteSource,
-	vrrpRouteMetric,
-	vrrpRouteScope,
-	vrrpRouteType,
-	vrrpRouteIfIndex,
-	vrrpRouteIfName,
-	vrrpRouteRoutingTable,
-	vrrpRouteStatus
-	}
-    STATUS current
-    DESCRIPTION
-	"Conformance group for VRRP instances."
-    ::= { vrrpGroups 2 }
-
-vrrpScriptGroup OBJECT-GROUP
-    OBJECTS {
-    	vrrpScriptName,
-	vrrpScriptCommand,
-	vrrpScriptInterval,
-	vrrpScriptWeight,
-	vrrpScriptResult,
-	vrrpScriptRise,
-	vrrpScriptFall
-	}
-    STATUS current
-    DESCRIPTION
-	"Conformance group for VRRP scripts."
-    ::= { vrrpGroups 3 }
-
-vrrpTrapsGroup NOTIFICATION-GROUP
-    NOTIFICATIONS {
-    	vrrpSyncGroupStateChange,
-    	vrrpInstanceStateChange
-	}
-    STATUS current
-    DESCRIPTION
-	"Conformance group for VRRP traps."
-    ::= { vrrpGroups 4 }
-
-checkGroups OBJECT IDENTIFIER ::= { groups 3 }
-
-virtualServerGroupGroup OBJECT-GROUP
-    OBJECTS {
-	virtualServerGroupName,
-	virtualServerGroupMemberType,
-	virtualServerGroupMemberFwMark,
-	virtualServerGroupMemberAddrType,
-	virtualServerGroupMemberAddress,
-	virtualServerGroupMemberAddr1,
-	virtualServerGroupMemberAddr2,
-	virtualServerGroupMemberPort
-	}
-    STATUS current
-    DESCRIPTION
-	"Conformance group for virtual server groups."
-    ::= { checkGroups 1 }
-
-virtualServerGroup OBJECT-GROUP
-    OBJECTS {
-	virtualServerType,
-	virtualServerNameOfGroup,
-	virtualServerFwMark,
-	virtualServerAddrType,
-	virtualServerAddress,
-	virtualServerPort,
-	virtualServerProtocol,
-	virtualServerLoadBalancingAlgo,
-	virtualServerLoadBalancingKind,
-	virtualServerStatus,
-	virtualServerVirtualHost,
-	virtualServerPersist,
-	virtualServerPersistTimeout,
-	virtualServerPersistGranularity,
-	virtualServerDelayLoop,
-	virtualServerHaSuspend,
-	virtualServerAlpha,
-	virtualServerOmega,
-	virtualServerRealServersTotal,
-	virtualServerRealServersUp,
-	virtualServerQuorum,
-	virtualServerQuorumStatus,
-	virtualServerQuorumUp,
-	virtualServerQuorumDown,
-	virtualServerHysteresis,
-	virtualServerStatsConns,
-	virtualServerStatsInPkts,
-	virtualServerStatsOutPkts,
-	virtualServerStatsInBytes,
-	virtualServerStatsOutBytes,
-	virtualServerRateCps,
-	virtualServerRateInPPS,
-	virtualServerRateOutPPS,
-	virtualServerRateInBPS,
-	virtualServerRateOutBPS
-	}
-    STATUS current
-    DESCRIPTION
-	"Conformance group for virtual servers."
-    ::= { checkGroups 2 }
-
-realServerGroup OBJECT-GROUP
-    OBJECTS {
-	realServerType,
-	realServerAddrType,
-	realServerAddress,
-	realServerPort,
-	realServerStatus,
-	realServerWeight,
-	realServerUpperConnectionLimit,
-	realServerLowerConnectionLimit,
-	realServerActionWhenDown,
-	realServerNotifyUp,
-	realServerNotifyDown,
-	realServerFailedChecks,
-	realServerStatsConns,
-	realServerStatsActiveConns,
-	realServerStatsInactiveConns,
-	realServerStatsPersistentConns,
-	realServerStatsInPkts,
-	realServerStatsOutPkts,
-	realServerStatsInBytes,
-	realServerStatsOutBytes,
-	realServerRateCps,
-	realServerRateInPPS,
-	realServerRateOutPPS,
-	realServerRateInBPS,
-	realServerRateOutBPS
-	}
-    STATUS current
-    DESCRIPTION
-	"Conformance group for real servers."
-    ::= { checkGroups 3 }
-
-checkTrapsGroup NOTIFICATION-GROUP
-    NOTIFICATIONS {
-    	realServerStateChange,
-    	virtualServerQuorumStateChange
-	}
-    STATUS current
-    DESCRIPTION
-	"Conformance group for check traps."
-    ::= { checkGroups 4 }
-
-END
diff --git a/tools/keepalived/doc/KEEPALIVED-MIB.txt b/tools/keepalived/doc/KEEPALIVED-MIB.txt
new file mode 100644
index 000000000..3664daee9
--- /dev/null
+++ b/tools/keepalived/doc/KEEPALIVED-MIB.txt
@@ -0,0 +1,5265 @@
+-- ----------------------------------------------------------------------
+-- MIB file for keepalived (http://www.keepalived.org)
+-- ----------------------------------------------------------------------
+--
+-- There are two sections in this MIB: vrrp and check.
+
+KEEPALIVED-MIB DEFINITIONS ::= BEGIN
+
+IMPORTS
+    OBJECT-TYPE, MODULE-IDENTITY,
+    Integer32, Unsigned32, Counter32, Counter64,
+    Gauge32, enterprises, NOTIFICATION-TYPE
+        FROM SNMPv2-SMI
+    OBJECT-GROUP, MODULE-COMPLIANCE, NOTIFICATION-GROUP
+        FROM SNMPv2-CONF
+    InetAddressType, InetAddress, InetPortNumber,
+    InetAddressPrefixLength, InetScopeType
+        FROM INET-ADDRESS-MIB
+    InterfaceIndex, ifIndex
+        FROM IF-MIB
+    DisplayString, TEXTUAL-CONVENTION, TruthValue
+        FROM SNMPv2-TC;
+
+keepalived MODULE-IDENTITY
+     LAST-UPDATED "201907120003Z"
+     ORGANIZATION "Keepalived"
+     CONTACT-INFO "http://www.keepalived.org"
+     DESCRIPTION
+        "This MIB describes objects used by keepalived, both
+         for VRRP and health checker."
+     REVISION "201907120003Z"
+     DESCRIPTION "add IPVS GRE tunnels"
+     REVISION "201907120002Z"
+     DESCRIPTION "add IPVS tunnel checksum option"
+     REVISION "201907120001Z"
+     DESCRIPTION "add IPVS tunnel type"
+     REVISION "201906300003Z"
+     DESCRIPTION "add vrrp process tracker"
+     REVISION "201906300002Z"
+     DESCRIPTION "add vrrp bfd tracker"
+     REVISION "201906300001Z"
+     DESCRIPTION "add reverse for vrrp trackers"
+     REVISION "201904010001Z"
+     DESCRIPTION "add lvs_flush_onstop for each virtual server"
+     REVISION "201903250001Z"
+     DESCRIPTION "add lvs_flush_onstop"
+     REVISION "201902140001Z"
+     DESCRIPTION "add checker connection timeout"
+     REVISION "201902140000Z"
+     DESCRIPTION "add checker warmup, delay loop and delay before retry in micro-seconds"
+     REVISION "201808140000Z"
+     DESCRIPTION "add MH LVS scheduler"
+     REVISION "201807180000Z"
+     DESCRIPTION "add script master rx lower priority"
+     REVISION "201806040000Z"
+     DESCRIPTION "add ip rule protocol, ip_proto, src and dst port ranges"
+     REVISION "201805170000Z"
+     DESCRIPTION "add virtual server shutdown status"
+     REVISION "201804290000Z"
+     DESCRIPTION "add VRRP state stop"
+     REVISION "201804280000Z"
+     DESCRIPTION "add VRRP address peers"
+     REVISION "201803060000Z"
+     DESCRIPTION "add VRRP protocol version to VRRP instance"
+     REVISION "201803010000Z"
+     DESCRIPTION "add route option fastopen_no_cookie and rule option l3mdev"
+     REVISION "201801100000Z"
+     DESCRIPTION "add sync group notify_stop script"
+     REVISION "201801080001Z"
+     DESCRIPTION "add SmtpAlert global defaults"
+     REVISION "201801080000Z"
+     DESCRIPTION "add SmtpAlert for real and virtual servers"
+     REVISION "201710260000Z"
+     DESCRIPTION "remove vrrpScriptResult disabled status"
+     REVISION "201710030001Z"
+     DESCRIPTION
+	"correct max weight for track scripts
+	 and track interfaces"
+     REVISION "201710030000Z"
+     DESCRIPTION "correct max weight for vrrpTrackFile"
+     REVISION "201710020003Z"
+     DESCRIPTION "add dynamic_interfaces"
+     REVISION "201710020002Z"
+     DESCRIPTION "add sync_group_tracking_weight"
+     REVISION "201710020001Z"
+     DESCRIPTION "allow tracking file weights of 0 and 254"
+     REVISION "201710020000Z"
+     DESCRIPTION
+	"add weights for tracking files and
+	 tracking scripts, interfaces and files for sync groups"
+     REVISION "201709150000Z"
+     DESCRIPTION "add sctp and none as virtual server protocol types"
+     REVISION "201708100000Z"
+     DESCRIPTION "virtualhost config to real server"
+     REVISION "201707220001Z"
+     DESCRIPTION "add default weight setting on a virtual server"
+     REVISION "201707220000Z"
+     DESCRIPTION "improve flexibility of checker configuration"
+     REVISION "201706020000Z"
+     DESCRIPTION "add smtpEmailFaults"
+     REVISION "201705300000Z"
+     DESCRIPTION "add vrrp track files"
+     REVISION "201704110001Z"
+     DESCRIPTION "add real server forwarding method"
+     REVISION "201704110000Z"
+     DESCRIPTION "add fo and ovf load balancing types"
+     REVISION "201702190000Z"
+     DESCRIPTION "add ip rule/route uid support"
+     REVISION "201611260000Z"
+     DESCRIPTION "add initfailed state for scripts"
+     REVISION "201610230000Z"
+     DESCRIPTION "add per interface linkbeat option"
+     REVISION "201610180000Z"
+     DESCRIPTION "add promote_secondaries"
+     REVISION "201609120000Z"
+     DESCRIPTION "dbus support added"
+     REVISION "201609060000Z"
+     DESCRIPTION "add LVS scheduler flags"
+     REVISION "201608230000Z"
+     DESCRIPTION "add IPv6 persistence granularity"
+     REVISION "201608030000Z"
+     DESCRIPTION "net-namespace added"
+     REVISION "201607260000Z"
+     DESCRIPTION "64-bit stats added"
+     REVISION "201607100000Z"
+     DESCRIPTION "enhanced virtual rules and routes"
+     REVISION "201607030000Z"
+     DESCRIPTION "change vrrpRuleIndex to unsigned"
+     REVISION "201607021200Z"
+     DESCRIPTION "add lvs timeout parameters"
+     REVISION "201607020000Z"
+     DESCRIPTION
+	"added LVS sync daemon parameters and deprecated
+	 LVS sync daemon objects within VRRP instance"
+     REVISION "201606290000Z"
+     DESCRIPTION "add lvs_flush"
+     REVISION "201606030000Z"
+     DESCRIPTION "update comment for vrrpInstancePreemptDelay"
+     REVISION "201605221540Z"
+     DESCRIPTION "smtpServerPort added"
+     REVISION "201510270000Z"
+     DESCRIPTION "routerId added to traps variables"
+     REVISION "200904080000Z"
+     DESCRIPTION "Initial revision"
+
+     ::= { project 5 }
+
+-- We are hosted under Debian OID. See http://dsa.debian.org/iana/
+debian          OBJECT IDENTIFIER ::= { enterprises 9586 }
+project         OBJECT IDENTIFIER ::= { debian 100 }
+
+VrrpState ::= TEXTUAL-CONVENTION
+    STATUS       current
+    DESCRIPTION
+    "Represents a VRRP state."
+    SYNTAX INTEGER {
+        init(0),
+        backup(1),
+        master(2),
+        fault(3),
+        unknown(4),
+        shutdown(5)
+    }
+
+RouteType ::= TEXTUAL-CONVENTION
+    STATUS	current
+    DESCRIPTION
+	"Type of route"
+    SYNTAX	INTEGER { unicast(1),
+			  ecmp(2),
+		          blackhole(3),
+		          anycast(4),
+		          multicast(5),
+		          broadcast(6),
+		          unreachable(7),
+		          prohibit(8),
+			  throw(9),
+		          nat(10),
+		          xresolve(11) }
+
+RuleAction ::= TEXTUAL-CONVENTION
+    STATUS	current
+    DESCRIPTION
+	"Action of rule"
+    SYNTAX	INTEGER { table(1),
+			  goto(2),
+			  nop(3),
+		          blackhole(6),
+		          unreachable(7),
+		          prohibit(8) }
+
+Realm ::= TEXTUAL-CONVENTION
+    DISPLAY-HINT "d"
+    STATUS	current
+    DESCRIPTION
+	"Route realm."
+    SYNTAX	Unsigned32 (1..65535)
+
+PrefType ::= TEXTUAL-CONVENTION
+    STATUS	current
+    DESCRIPTION
+	"Preference type of route"
+    SYNTAX	INTEGER { low(1), medium(2), high(3) }
+
+EncapType ::= TEXTUAL-CONVENTION
+    STATUS	current
+    DESCRIPTION
+	"Encapsulation type of route"
+    SYNTAX INTEGER { mpls(1), ip(2), ila(3), ip6(4) }
+
+global          OBJECT IDENTIFIER ::= { keepalived 1 }
+vrrp            OBJECT IDENTIFIER ::= { keepalived 2 }
+check           OBJECT IDENTIFIER ::= { keepalived 3 }
+conformance     OBJECT IDENTIFIER ::= { keepalived 4 }
+
+-- ----------------------------------------------------------------------
+-- Global part
+-- ----------------------------------------------------------------------
+
+version OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Version of keepalived"
+    ::= { global 1 }
+
+routerId OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Router ID"
+    ::= { global 2 }
+
+mail    OBJECT IDENTIFIER ::= { global 3 }
+
+smtpServerAddressType OBJECT-TYPE
+    SYNTAX InetAddressType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Address type for SMTP server."
+    ::= { mail 1 }
+
+smtpServerAddress OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Address of SMTP server."
+    ::= { mail 2 }
+
+smtpServerTimeout OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "SMTP server connection timeout."
+    ::= { mail 3 }
+
+emailFrom OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Email address for the From field."
+    ::= { mail 4 }
+
+emailTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF EmailEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of email notification addresses."
+    ::= { mail 5 }
+
+smtpServerPort OBJECT-TYPE
+    SYNTAX InetPortNumber
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Port of SMTP server."
+    ::= { mail 6 }
+
+smtpEmailFaults OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Email vrrp fault state transitions."
+    ::= { mail 7 }
+
+smtpEmailSmtpAlert OBJECT-TYPE
+    SYNTAX INTEGER { on(1), off(2), unset(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Email default smtp alert."
+    ::= { mail 8 }
+
+smtpEmailSmtpAlertVrrp OBJECT-TYPE
+    SYNTAX INTEGER { on(1), off(2), unset(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Email default smtp alert for vrrp."
+    ::= { mail 9 }
+
+smtpEmailSmtpAlertChecker OBJECT-TYPE
+    SYNTAX INTEGER { on(1), off(2), unset(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Email default smtp alert for checkers."
+    ::= { mail 10 }
+
+emailEntry OBJECT-TYPE
+    SYNTAX EmailEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Email address to be notified with an alert."
+    INDEX { emailIndex }
+    ::= { emailTable 1 }
+
+EmailEntry ::= SEQUENCE {
+    emailIndex Integer32,
+    emailAddress DisplayString
+}
+
+emailIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index for the email address."
+    ::= { emailEntry 1 }
+
+emailAddress OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Email address to be notified when an alert is raised."
+    ::= { emailEntry 2 }
+
+trapEnable OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Indicate whether traps should be sent for various events."
+    ::= { global 4 }
+
+linkBeat OBJECT-TYPE
+    SYNTAX INTEGER { netlink(1), polling(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Indicate which method is used to check if a link is up or
+        down. netlink(1) means that the kernel will push a link state
+        change while polling(2) means that the status of the link is
+        checked periodically."
+    ::= { global 5 }
+
+lvsFlush OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Indicate whether LVS config is flushed at startup."
+    ::= { global 6 }
+
+ipvs64BitStats OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "True if 64-bit stats counters are available for ipvs, false otherwise."
+    ::= { global 7 }
+
+netNamespace OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "The name of the net namespace keepalived is running in."
+    ::= { global 8 }
+
+dbus OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "True if the DBus interface is enabled."
+    ::= { global 9 }
+
+dynamicInterfaces OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "True if dynamic interfaces is enabled."
+    ::= { global 10 }
+
+lvsFlushOnStop OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2), flushVS(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Indicate whether LVS config is flushed at shutdown."
+    ::= { global 11 }
+
+-- ----------------------------------------------------------------------
+-- VRRP part
+-- ----------------------------------------------------------------------
+
+-- Sync groups
+-- see vrrp.h
+
+vrrpSyncGroupTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpSyncGroupEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of sync groups"
+    ::= { vrrp 1 }
+
+vrrpSyncGroupEntry OBJECT-TYPE
+    SYNTAX VrrpSyncGroupEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a sync group"
+    INDEX { vrrpSyncGroupIndex }
+    ::= { vrrpSyncGroupTable 1 }
+
+VrrpSyncGroupEntry ::= SEQUENCE {
+    vrrpSyncGroupIndex Integer32,
+    vrrpSyncGroupName DisplayString,
+    vrrpSyncGroupState VrrpState,
+    vrrpSyncGroupSmtpAlert INTEGER,
+    vrrpSyncGroupNotifyExec INTEGER,
+    vrrpSyncGroupScriptMaster DisplayString,
+    vrrpSyncGroupScriptBackup DisplayString,
+    vrrpSyncGroupScriptFault DisplayString,
+    vrrpSyncGroupScript DisplayString,
+    vrrpSyncGroupTrackingWeight INTEGER,
+    vrrpSyncGroupScriptStop DisplayString
+}
+
+vrrpSyncGroupIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the synchronisation group."
+    ::= { vrrpSyncGroupEntry 1 }
+
+vrrpSyncGroupName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the synchronisation group."
+    ::= {vrrpSyncGroupEntry 2 }
+
+vrrpSyncGroupState OBJECT-TYPE
+    SYNTAX VrrpState
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current state of the synchronisation group."
+    ::= {vrrpSyncGroupEntry 3 }
+
+vrrpSyncGroupSmtpAlert OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Will SMTP alert be sent for this synchronisation group?"
+    ::= {vrrpSyncGroupEntry 4 }
+
+vrrpSyncGroupNotifyExec OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Will we execute notification script for this group?"
+    ::= {vrrpSyncGroupEntry 5 }
+
+vrrpSyncGroupScriptMaster OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Script to execute when the group becomes master."
+    ::= {vrrpSyncGroupEntry 6 }
+
+vrrpSyncGroupScriptBackup OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Script to execute when the group becomes backup."
+    ::= {vrrpSyncGroupEntry 7 }
+
+vrrpSyncGroupScriptFault OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Script to execute when the group is in fault state."
+    ::= {vrrpSyncGroupEntry 8 }
+
+vrrpSyncGroupScript OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Script to execute whenever a state change occurs."
+    ::= {vrrpSyncGroupEntry 9 }
+
+vrrpSyncGroupTrackingWeight OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Allow differing tracking weights for sync group members"
+    ::= {vrrpSyncGroupEntry 10 }
+
+vrrpSyncGroupScriptStop OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Script to execute when the keepalived stops."
+    ::= {vrrpSyncGroupEntry 11 }
+
+
+vrrpSyncTrackedInterfaceTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpSyncTrackedInterfaceEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of tracked interfaces for each VRRP instance."
+    ::= { vrrp 14 }
+
+vrrpSyncTrackedInterfaceEntry OBJECT-TYPE
+    SYNTAX VrrpSyncTrackedInterfaceEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a tracked interface"
+    INDEX { vrrpSyncGroupIndex, ifIndex }
+    ::= { vrrpSyncTrackedInterfaceTable 1 }
+
+VrrpSyncTrackedInterfaceEntry ::= SEQUENCE {
+    vrrpSyncTrackedInterfaceName DisplayString,
+    vrrpSyncTrackedInterfaceWeight Integer32,
+    vrrpSyncTrackedInterfaceWgtRev Integer32
+}
+
+vrrpSyncTrackedInterfaceName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the tracked interface."
+    ::= { vrrpSyncTrackedInterfaceEntry 1 }
+
+vrrpSyncTrackedInterfaceWeight OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight of the tracked interface."
+    ::= { vrrpSyncTrackedInterfaceEntry 2 }
+
+vrrpSyncTrackedInterfaceWgtRev OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight reversed for the tracked interface."
+    ::= { vrrpSyncTrackedInterfaceEntry 3 }
+
+vrrpSyncTrackedScriptTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpSyncTrackedScriptEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of tracked scripts for each VRRP instance."
+    ::= { vrrp 15 }
+
+vrrpSyncTrackedScriptEntry OBJECT-TYPE
+    SYNTAX VrrpSyncTrackedScriptEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a tracked script"
+    INDEX { vrrpSyncGroupIndex, vrrpSyncTrackedScriptIndex }
+    ::= { vrrpSyncTrackedScriptTable 1 }
+
+VrrpSyncTrackedScriptEntry ::= SEQUENCE {
+    vrrpSyncTrackedScriptIndex Integer32,
+    vrrpSyncTrackedScriptName DisplayString,
+    vrrpSyncTrackedScriptWeight Integer32,
+    vrrpSyncTrackedScriptWgtRev Integer32
+}
+
+vrrpSyncTrackedScriptIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the tracked script in the set of tracked scripts for
+         the given VRRP instance. This index has no relation with the
+         index of vrrpSyncScriptTable."
+    ::= { vrrpSyncTrackedScriptEntry 1 }
+
+vrrpSyncTrackedScriptName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the tracked interface."
+    ::= { vrrpSyncTrackedScriptEntry 2 }
+
+vrrpSyncTrackedScriptWeight OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight of the tracked interface."
+    ::= { vrrpSyncTrackedScriptEntry 3 }
+
+vrrpSyncTrackedScriptWgtRev OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight reversed for the tracked interface."
+    ::= { vrrpSyncTrackedScriptEntry 4 }
+
+vrrpSyncTrackedFileTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpSyncTrackedFileEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of tracked files for each sync group."
+    ::= { vrrp 16 }
+
+vrrpSyncTrackedFileEntry OBJECT-TYPE
+    SYNTAX VrrpSyncTrackedFileEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a tracked file"
+    INDEX { vrrpSyncGroupIndex, vrrpSyncTrackedFileIndex }
+    ::= { vrrpSyncTrackedFileTable 1 }
+
+VrrpSyncTrackedFileEntry ::= SEQUENCE {
+    vrrpSyncTrackedFileIndex Integer32,
+    vrrpSyncTrackedFileName DisplayString,
+    vrrpSyncTrackedFileWeight Integer32,
+    vrrpSyncTrackedFileWgtRev Integer32
+}
+
+vrrpSyncTrackedFileIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the tracked file in the set of tracked files for
+         the given VRRP instance. This index has no relation with the
+         index of vrrpSyncFileTable."
+    ::= { vrrpSyncTrackedFileEntry 1 }
+
+vrrpSyncTrackedFileName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the tracked file."
+    ::= { vrrpSyncTrackedFileEntry 2 }
+
+vrrpSyncTrackedFileWeight OBJECT-TYPE
+    SYNTAX Integer32 (-254..254)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight of the tracked file."
+    ::= { vrrpSyncTrackedFileEntry 3 }
+
+vrrpSyncTrackedFileWgtRev OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight reversed for the tracked file."
+    ::= { vrrpSyncTrackedFileEntry 4 }
+
+vrrpSyncTrackedBfdTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpSyncTrackedBfdEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of tracked BFDs for each sync group."
+    ::= { vrrp 19 }
+
+vrrpSyncTrackedBfdEntry OBJECT-TYPE
+    SYNTAX VrrpSyncTrackedBfdEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a tracked BFD"
+    INDEX { vrrpSyncGroupIndex, vrrpSyncTrackedBfdIndex }
+    ::= { vrrpSyncTrackedBfdTable 1 }
+
+VrrpSyncTrackedBfdEntry ::= SEQUENCE {
+    vrrpSyncTrackedBfdIndex Integer32,
+    vrrpSyncTrackedBfdName DisplayString,
+    vrrpSyncTrackedBfdWeight Integer32,
+    vrrpSyncTrackedBfdWgtRev Integer32
+}
+
+vrrpSyncTrackedBfdIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the tracked BFD in the set of tracked BFDs for
+         the given VRRP instance. This index has no relation with the
+         index of vrrpSyncBfdTable."
+    ::= { vrrpSyncTrackedBfdEntry 1 }
+
+vrrpSyncTrackedBfdName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the tracked BFD."
+    ::= { vrrpSyncTrackedBfdEntry 2 }
+
+vrrpSyncTrackedBfdWeight OBJECT-TYPE
+    SYNTAX Integer32 (-254..254)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight of the tracked BFD."
+    ::= { vrrpSyncTrackedBfdEntry 3 }
+
+vrrpSyncTrackedBfdWgtRev OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight reversed for the tracked BFD."
+    ::= { vrrpSyncTrackedBfdEntry 4 }
+
+vrrpSyncTrackedProcessTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpSyncTrackedProcessEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of tracked processes for each sync group."
+    ::= { vrrp 22 }
+
+vrrpSyncTrackedProcessEntry OBJECT-TYPE
+    SYNTAX VrrpSyncTrackedProcessEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a tracked process"
+    INDEX { vrrpSyncGroupIndex, vrrpSyncTrackedProcessIndex }
+    ::= { vrrpSyncTrackedProcessTable 1 }
+
+VrrpSyncTrackedProcessEntry ::= SEQUENCE {
+    vrrpSyncTrackedProcessIndex Integer32,
+    vrrpSyncTrackedProcessName DisplayString,
+    vrrpSyncTrackedProcessWeight Integer32,
+    vrrpSyncTrackedProcessWgtRev INTEGER
+}
+
+vrrpSyncTrackedProcessIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the tracked process in the set of tracked processes for
+         the given VRRP instance. This index has no relation with the
+         index of vrrpSyncProcessTable."
+    ::= { vrrpSyncTrackedProcessEntry 1 }
+
+vrrpSyncTrackedProcessName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the tracked process."
+    ::= { vrrpSyncTrackedProcessEntry 2 }
+
+vrrpSyncTrackedProcessWeight OBJECT-TYPE
+    SYNTAX Integer32 (-254..254)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight of the tracked process."
+    ::= { vrrpSyncTrackedProcessEntry 3 }
+
+vrrpSyncTrackedProcessWgtRev OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight reversed for the tracked process."
+    ::= { vrrpSyncTrackedProcessEntry 4 }
+
+vrrpSyncGroupMemberTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpSyncGroupMemberEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of instances contained in sync groups"
+    ::= { vrrp 2 }
+
+vrrpSyncGroupMemberEntry OBJECT-TYPE
+    SYNTAX VrrpSyncGroupMemberEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a member of a sync group"
+    INDEX { vrrpSyncGroupIndex, vrrpSyncGroupMemberInstanceIndex }
+    ::= { vrrpSyncGroupMemberTable 1 }
+
+VrrpSyncGroupMemberEntry ::= SEQUENCE {
+    vrrpSyncGroupMemberInstanceIndex Integer32,
+    vrrpSyncGroupMemberName DisplayString
+}
+
+vrrpSyncGroupMemberInstanceIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of an instance in a synchronisation group.
+         There is no relation with this index and the index of the
+         corresponding instance in vrrpInstanceTable. Use the name
+         to find out the corresponding instance."
+    ::= { vrrpSyncGroupMemberEntry 1 }
+
+vrrpSyncGroupMemberName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the instance contained in the synchronisation group."
+    ::= { vrrpSyncGroupMemberEntry 2 }
+
+-- VRRP instances
+-- see vrrp.h
+
+vrrpInstanceTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpInstanceEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of VRRP instances"
+    ::= { vrrp 3 }
+
+vrrpInstanceEntry OBJECT-TYPE
+    SYNTAX VrrpInstanceEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a sync group"
+    INDEX { vrrpInstanceIndex }
+    ::= { vrrpInstanceTable 1 }
+
+VrrpInstanceEntry ::= SEQUENCE {
+    vrrpInstanceIndex INTEGER,
+    vrrpInstanceName DisplayString,
+    vrrpInstanceVirtualRouterId Unsigned32,
+    vrrpInstanceState VrrpState,
+    vrrpInstanceInitialState VrrpState,
+    vrrpInstanceWantedState VrrpState,
+    vrrpInstanceBasePriority Integer32,
+    vrrpInstanceEffectivePriority Integer32,
+    vrrpInstanceVipsStatus INTEGER,
+    vrrpInstancePrimaryInterface DisplayString,
+    vrrpInstanceTrackPrimaryIf INTEGER,
+    vrrpInstanceAdvertisementsInt Unsigned32,
+    vrrpInstancePreempt INTEGER,
+    vrrpInstancePreemptDelay Unsigned32,
+    vrrpInstanceAuthType INTEGER,
+    vrrpInstanceLvsSyncDaemon INTEGER,
+    vrrpInstanceLvsSyncInterface DisplayString,
+    vrrpInstanceSyncGroup DisplayString,
+    vrrpInstanceGarpDelay Unsigned32,
+    vrrpInstanceSmtpAlert INTEGER,
+    vrrpInstanceNotifyExec INTEGER,
+    vrrpInstanceScriptMaster DisplayString,
+    vrrpInstanceScriptBackup DisplayString,
+    vrrpInstanceScriptFault DisplayString,
+    vrrpInstanceScriptStop DisplayString,
+    vrrpInstanceScript DisplayString,
+    vrrpInstanceAccept INTEGER,
+    vrrpInstancePromoteSecondaries INTEGER,
+    vrrpInstanceUseLinkbeat INTEGER,
+    vrrpInstanceVrrpVersion INTEGER,
+    vrrpInstanceScriptMstrRxLowerPri DisplayString
+}
+
+vrrpInstanceIndex OBJECT-TYPE
+    SYNTAX INTEGER {
+        static(0)
+    }
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the VRRP instance.
+         Instance 0 is for static IP and static routes."
+    ::= { vrrpInstanceEntry 1 }
+
+vrrpInstanceName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the VRRP instance."
+    ::= { vrrpInstanceEntry 2 }
+
+vrrpInstanceVirtualRouterId OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Virtual Router ID (VRID) for this VRRP instance."
+    ::= { vrrpInstanceEntry 3 }
+
+vrrpInstanceState OBJECT-TYPE
+    SYNTAX VrrpState
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current state of this VRRP instance."
+    ::= { vrrpInstanceEntry 4 }
+
+vrrpInstanceInitialState OBJECT-TYPE
+    SYNTAX VrrpState
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Initial state of this VRRP instance."
+    ::= { vrrpInstanceEntry 5 }
+
+vrrpInstanceWantedState OBJECT-TYPE
+    SYNTAX VrrpState
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "State wanted by the operator for this VRRP instance."
+    ::= { vrrpInstanceEntry 6 }
+
+vrrpInstanceBasePriority OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-write
+    STATUS current
+    DESCRIPTION
+        "Base priority (as defined in the configuration file) for this
+         VRRP instance.
+         This value can be modified to force the virtual router
+         instance to become backup or master."
+    ::= { vrrpInstanceEntry 7 }
+
+vrrpInstanceEffectivePriority OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Effective priority for this VRRP instance. Status of
+         interfaces and script results are used to compute this value
+         from the base priority."
+    ::= { vrrpInstanceEntry 8 }
+
+vrrpInstanceVipsStatus OBJECT-TYPE
+    SYNTAX INTEGER { allSet(1), notAllSet(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Are all VIP of this VRRP instance enabled?"
+    ::= { vrrpInstanceEntry 9 }
+
+vrrpInstancePrimaryInterface OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Primary interface of this VRRP instance."
+    ::= { vrrpInstanceEntry 10 }
+
+vrrpInstanceTrackPrimaryIf OBJECT-TYPE
+    SYNTAX INTEGER { tracked(1), notTracked(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Do we track the status of the primary interface?"
+    ::= { vrrpInstanceEntry 11 }
+
+vrrpInstanceAdvertisementsInt OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "seconds(VRRPv2) / centiseconds(VRRPv3)"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Delay in seconds between two VRRP advertisements and it is in centiseconds between two VRRPV3 advertisements"
+    ::= { vrrpInstanceEntry 12 }
+
+vrrpInstancePreempt OBJECT-TYPE
+    SYNTAX INTEGER { preempt(1), noPreempt(2) }
+    MAX-ACCESS read-write
+    STATUS current
+    DESCRIPTION
+        "Will a higher priority advertisement preempt a lower instance?"
+    ::= { vrrpInstanceEntry 13 }
+
+vrrpInstancePreemptDelay OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Delay after startup or lower priority advert received until preemption can happen. 0 means that there is no delay."
+    ::= { vrrpInstanceEntry 14 }
+
+vrrpInstanceAuthType OBJECT-TYPE
+    SYNTAX INTEGER {
+            none(0),
+        password(1),
+        ah(2)
+        }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "VRRPv2 supports authentication method to authenticate other peers. VRRPv3 does not support authentication"
+    ::= { vrrpInstanceEntry 15 }
+
+vrrpInstanceLvsSyncDaemon OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS deprecated
+    DESCRIPTION
+        "Is LVS sync daemon enabled for this VRRP instance?
+	 Deprecated in favour of lvsSyncDaemonEnabled."
+    ::= { vrrpInstanceEntry 16 }
+
+vrrpInstanceLvsSyncInterface OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS deprecated
+    DESCRIPTION
+        "If LVS sync daemon is enabled, which interface to use for syncing?
+	 Deprecated in favour of lvsSyncDaemonInterface."
+    ::= { vrrpInstanceEntry 17 }
+
+vrrpInstanceSyncGroup OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the synchronisation group this VRRP instance belongs, if any."
+    ::= { vrrpInstanceEntry 18 }
+
+vrrpInstanceGarpDelay OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Delay to launch gratuitous ARP (GARP)."
+    ::= { vrrpInstanceEntry 19 }
+
+vrrpInstanceSmtpAlert OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Will SMTP alert be sent for this VRRP instance?"
+    ::= { vrrpInstanceEntry 20 }
+
+vrrpInstanceNotifyExec OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Will we execute notification script for this instance?"
+    ::= { vrrpInstanceEntry 21 }
+
+vrrpInstanceScriptMaster OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Script to execute when the instance becomes master."
+    ::= { vrrpInstanceEntry 22 }
+
+vrrpInstanceScriptBackup OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Script to execute when the instance becomes backup."
+    ::= { vrrpInstanceEntry 23 }
+
+vrrpInstanceScriptFault OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Script to execute when the instance is in fault state."
+    ::= { vrrpInstanceEntry 24 }
+
+vrrpInstanceScriptStop OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Script to execute when the instance is stopped."
+    ::= { vrrpInstanceEntry 25 }
+
+vrrpInstanceScript OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Script to execute whenever a state change occurs."
+    ::= { vrrpInstanceEntry 26 }
+
+vrrpInstanceAccept OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-write
+    STATUS current
+    DESCRIPTION
+        "Accept allow the non-master owner to process the packets destined to VIP and it is supported for only VRRPv3."
+    ::= { vrrpInstanceEntry 27 }
+
+vrrpInstancePromoteSecondaries OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-write
+    STATUS current
+    DESCRIPTION
+        "Set promote_secondaries on interface."
+    ::= { vrrpInstanceEntry 28 }
+
+vrrpInstanceUseLinkbeat OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-write
+    STATUS current
+    DESCRIPTION
+        "Use linkbeat for interface status."
+    ::= { vrrpInstanceEntry 29 }
+
+vrrpInstanceVrrpVersion OBJECT-TYPE
+    SYNTAX INTEGER { vrrpv2(2), vrrpv3(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "VRRP protocol version."
+    ::= { vrrpInstanceEntry 30 }
+
+vrrpInstanceScriptMstrRxLowerPri OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Script to execute when master instance receives lower priority advert."
+    ::= { vrrpInstanceEntry 31 }
+
+vrrpTrackedInterfaceTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpTrackedInterfaceEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of tracked interfaces for each VRRP instance."
+    ::= { vrrp 4 }
+
+vrrpTrackedInterfaceEntry OBJECT-TYPE
+    SYNTAX VrrpTrackedInterfaceEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a tracked interface"
+    INDEX { vrrpInstanceIndex, ifIndex }
+    ::= { vrrpTrackedInterfaceTable 1 }
+
+VrrpTrackedInterfaceEntry ::= SEQUENCE {
+    vrrpTrackedInterfaceName DisplayString,
+    vrrpTrackedInterfaceWeight Integer32,
+    vrrpTrackedInterfaceWgtRev Integer32
+}
+
+vrrpTrackedInterfaceName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the tracked interface."
+    ::= { vrrpTrackedInterfaceEntry 1 }
+
+vrrpTrackedInterfaceWeight OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight of the tracked interface."
+    ::= { vrrpTrackedInterfaceEntry 2 }
+
+vrrpTrackedInterfaceWgtRev OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight reverse for the tracked interface."
+    ::= { vrrpTrackedInterfaceEntry 3 }
+
+vrrpTrackedScriptTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpTrackedScriptEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of tracked scripts for each VRRP instance."
+    ::= { vrrp 5 }
+
+vrrpTrackedScriptEntry OBJECT-TYPE
+    SYNTAX VrrpTrackedScriptEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a tracked script"
+    INDEX { vrrpInstanceIndex, vrrpTrackedScriptIndex }
+    ::= { vrrpTrackedScriptTable 1 }
+
+VrrpTrackedScriptEntry ::= SEQUENCE {
+    vrrpTrackedScriptIndex Integer32,
+    vrrpTrackedScriptName DisplayString,
+    vrrpTrackedScriptWeight Integer32,
+    vrrpTrackedScriptWgtRev Integer32
+}
+
+vrrpTrackedScriptIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the tracked script in the set of tracked scripts for
+         the given VRRP instance. This index has no relation with the
+         index of vrrpScriptTable."
+    ::= { vrrpTrackedScriptEntry 1 }
+
+vrrpTrackedScriptName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the tracked interface."
+    ::= { vrrpTrackedScriptEntry 2 }
+
+vrrpTrackedScriptWeight OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight of the tracked interface."
+    ::= { vrrpTrackedScriptEntry 3 }
+
+vrrpTrackedScriptWgtRev OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight reverse for the tracked interface."
+    ::= { vrrpTrackedScriptEntry 4 }
+
+-- IP addresses
+-- see vrrp_ipaddress.h
+
+vrrpAddressTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpAddressEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of static and virtual addresses"
+    ::= { vrrp 6 }
+
+vrrpAddressEntry OBJECT-TYPE
+    SYNTAX VrrpAddressEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing an address. This can be a static
+         address or a virtual address. In case of static address, the
+         VRRP instance index is 0."
+    INDEX { vrrpInstanceIndex, vrrpAddressIndex }
+    ::= { vrrpAddressTable 1 }
+
+VrrpAddressEntry ::= SEQUENCE {
+    vrrpAddressIndex Integer32,
+    vrrpAddressType InetAddressType,
+    vrrpAddressValue InetAddress,
+    vrrpAddressBroadcast InetAddress,
+    vrrpAddressMask InetAddressPrefixLength,
+    vrrpAddressScope InetScopeType,
+    vrrpAddressIfIndex InterfaceIndex,
+    vrrpAddressIfName DisplayString,
+    vrrpAddressIfAlias DisplayString,
+    vrrpAddressStatus INTEGER,
+    vrrpAddressAdvertising INTEGER,
+    vrrpAddressPeer InetAddress
+}
+
+vrrpAddressIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Address index."
+    ::= { vrrpAddressEntry 1 }
+
+vrrpAddressType OBJECT-TYPE
+    SYNTAX InetAddressType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "A value that represents a type of Internet address."
+    ::= { vrrpAddressEntry 2 }
+
+vrrpAddressValue OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Actual IP address."
+    ::= { vrrpAddressEntry 3 }
+
+vrrpAddressBroadcast OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Broadcast address associated with the IP address."
+    ::= { vrrpAddressEntry 4 }
+
+vrrpAddressMask OBJECT-TYPE
+    SYNTAX InetAddressPrefixLength
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Address mask."
+    ::= { vrrpAddressEntry 5 }
+
+vrrpAddressScope OBJECT-TYPE
+    SYNTAX InetScopeType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Address scope."
+    ::= { vrrpAddressEntry 6 }
+
+vrrpAddressIfIndex OBJECT-TYPE
+    SYNTAX InterfaceIndex
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Index of the interface to which the IP address is linked to."
+    ::= { vrrpAddressEntry 7 }
+
+vrrpAddressIfName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the interface to which the IP address is linked to."
+    ::= { vrrpAddressEntry 8 }
+
+vrrpAddressIfAlias OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Alias name of the interface."
+    ::= { vrrpAddressEntry 9 }
+
+vrrpAddressStatus OBJECT-TYPE
+    SYNTAX INTEGER { set(1), unset(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is the IP address set?"
+    ::= { vrrpAddressEntry 10 }
+
+vrrpAddressAdvertising OBJECT-TYPE
+    SYNTAX INTEGER { advertised(1), notAdvertised(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Status of VRRP advertising for this IP address."
+    ::= { vrrpAddressEntry 11 }
+
+vrrpAddressPeer OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "The peer address."
+    ::= { vrrpAddressEntry 12 }
+
+-- Routes
+-- see vrrp_iproute.h
+
+vrrpRouteTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpRouteEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of static and virtual routes."
+    ::= { vrrp 7 }
+
+vrrpRouteEntry OBJECT-TYPE
+    SYNTAX VrrpRouteEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a route. In case of a static route,
+        the instance index is 0."
+    INDEX { vrrpInstanceIndex, vrrpRouteIndex }
+    ::= { vrrpRouteTable 1 }
+
+VrrpRouteEntry ::= SEQUENCE {
+    vrrpRouteIndex Integer32,
+    vrrpRouteAddressType InetAddressType,
+    vrrpRouteDestination InetAddress,
+    vrrpRouteDestinationMask InetAddressPrefixLength,
+    vrrpRouteGateway InetAddress,
+    vrrpRouteSecondaryGateway InetAddress,
+    vrrpRouteSource InetAddress,
+    vrrpRouteMetric Unsigned32,
+    vrrpRouteScope InetScopeType,
+    vrrpRouteType INTEGER,
+    vrrpRouteIfIndex InterfaceIndex,
+    vrrpRouteIfName DisplayString,
+    vrrpRouteRoutingTable Unsigned32,
+    vrrpRouteStatus INTEGER,
+    vrrpRouteFromAddress InetAddress,
+    vrrpRouteFromAddressMask InetAddressPrefixLength,
+    vrrpRouteTos Unsigned32,
+    vrrpRouteProtocol INTEGER,
+    vrrpRouteECN TruthValue,
+    vrrpRouteQuickAck TruthValue,
+    vrrpRouteExpires Integer32,
+    vrrpRouteMTU Unsigned32,
+    vrrpRouteMTULock TruthValue,
+    vrrpRouteHopLimit Unsigned32,
+    vrrpRouteAdvmss Unsigned32,
+    vrrpRouteAdvmssLock TruthValue,
+    vrrpRouteRTT Unsigned32,
+    vrrpRouteRTTLock TruthValue,
+    vrrpRouteRTTvar Unsigned32,
+    vrrpRouteRTTvarLock TruthValue,
+    vrrpRouteReordering Unsigned32,
+    vrrpRouteReorderingLock TruthValue,
+    vrrpRouteWindow Unsigned32,
+    vrrpRouteCwnd Unsigned32,
+    vrrpRouteCwndLock TruthValue,
+    vrrpRouteSSthresh Unsigned32,
+    vrrpRouteSSthreshLock TruthValue,
+    vrrpRouteRTOMin Unsigned32,
+    vrrpRouteRTOMinLock TruthValue,
+    vrrpRouteInitCwnd Unsigned32,
+    vrrpRouteInitRwnd Unsigned32,
+    vrrpRouteCongCtl DisplayString,
+    vrrpRoutePref PrefType,
+    vrrpRouteRealmDst Realm,
+    vrrpRouteRealmSrc Realm,
+    vrrpRouteEncapType EncapType,
+    vrrpRouteEncapMplsLabels DisplayString,
+    vrrpRouteEncapId Counter64,
+    vrrpRouteEncapDstAddress InetAddress,
+    vrrpRouteEncapSrcAddress InetAddress,
+    vrrpRouteEncapTOS Unsigned32,
+    vrrpRouteEncapTTL Unsigned32,
+    vrrpRouteEncapFlags Unsigned32,
+    vrrpRouteEncapIlaLocator Counter64,
+    vrrpRouteFastOpenNoCookie TruthValue
+}
+
+vrrpRouteIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Route index."
+    ::= { vrrpRouteEntry 1 }
+
+vrrpRouteAddressType OBJECT-TYPE
+    SYNTAX InetAddressType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Route type of internet address."
+    ::= { vrrpRouteEntry 2 }
+
+vrrpRouteDestination OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Route destination."
+    ::= { vrrpRouteEntry 3 }
+
+vrrpRouteDestinationMask OBJECT-TYPE
+    SYNTAX InetAddressPrefixLength
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Route destination mask."
+    ::= { vrrpRouteEntry 4 }
+
+vrrpRouteGateway OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Gateway for the given destination."
+    ::= { vrrpRouteEntry 5 }
+
+vrrpRouteSecondaryGateway OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "An optional second gateway for the given destination."
+    ::= { vrrpRouteEntry 6 }
+
+vrrpRouteSource OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Which source IP address to use with this route."
+    ::= { vrrpRouteEntry 7 }
+
+vrrpRouteMetric OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Metric of this route."
+    ::= { vrrpRouteEntry 8 }
+
+vrrpRouteScope OBJECT-TYPE
+    SYNTAX InetScopeType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Scope of this route."
+    ::= { vrrpRouteEntry 9 }
+
+vrrpRouteType OBJECT-TYPE
+    SYNTAX RouteType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Kind of route."
+    ::= { vrrpRouteEntry 10 }
+
+vrrpRouteIfIndex OBJECT-TYPE
+    SYNTAX InterfaceIndex
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Interface attached to this route."
+    ::= { vrrpRouteEntry 11 }
+
+vrrpRouteIfName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the interface of attached to this route."
+    ::= { vrrpRouteEntry 12 }
+
+vrrpRouteRoutingTable OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Routing table where the route should be inserted."
+    ::= { vrrpRouteEntry 13 }
+
+vrrpRouteStatus OBJECT-TYPE
+    SYNTAX INTEGER { set(1), unset(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is this route set in the kernel?"
+    ::= { vrrpRouteEntry 14 }
+
+vrrpRouteFromAddress OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Source address to use for the route."
+    ::= { vrrpRouteEntry 15 }
+
+vrrpRouteFromAddressMask OBJECT-TYPE
+    SYNTAX InetAddressPrefixLength
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Source address mask."
+    ::= { vrrpRouteEntry 16 }
+
+vrrpRouteTos OBJECT-TYPE
+    SYNTAX Unsigned32 (0..255)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Route TOS value to match."
+    ::= { vrrpRouteEntry 17 }
+
+vrrpRouteProtocol OBJECT-TYPE
+    SYNTAX INTEGER { unspec(1), redirect(2), kernel(3), boot(4), static(5), gated(9), ra(10), mrt(11),
+		      zebra(12), bird(13), dnrouted(14), xorp(15), ntk(16), dhcp(17), keepalived(112) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Route protocol identifier"
+    ::= { vrrpRouteEntry 18 }
+
+vrrpRouteECN OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Explicit congestion notification enabled on route."
+    ::= { vrrpRouteEntry 19 }
+
+vrrpRouteQuickAck OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Quick ack enabled on route."
+    ::= { vrrpRouteEntry 20 }
+
+vrrpRouteExpires OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Lifetime of route."
+    ::= { vrrpRouteEntry 21 }
+
+vrrpRouteMTU OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "MTU for route."
+    ::= { vrrpRouteEntry 22 }
+
+vrrpRouteMTULock OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is MTU locked?"
+    ::= { vrrpRouteEntry 23 }
+
+vrrpRouteHopLimit OBJECT-TYPE
+    SYNTAX Unsigned32 (1..256)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Hoplimit for route."
+    ::= { vrrpRouteEntry 24 }
+
+vrrpRouteAdvmss OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Advertised MSS for route."
+    ::= { vrrpRouteEntry 25 }
+
+vrrpRouteAdvmssLock OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is advertised MSS locked?"
+    ::= { vrrpRouteEntry 26 }
+
+vrrpRouteRTT OBJECT-TYPE
+    SYNTAX Unsigned32 (1..536870)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Retransmission timer in msec for route."
+    ::= { vrrpRouteEntry 27 }
+
+vrrpRouteRTTLock OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is retransmission timer locked?"
+    ::= { vrrpRouteEntry 28 }
+
+vrrpRouteRTTvar OBJECT-TYPE
+    SYNTAX Unsigned32 (1..1073741)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Retransmission timer var in msec for route."
+    ::= { vrrpRouteEntry 29 }
+
+vrrpRouteRTTvarLock OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is retransmission timer var locked?"
+    ::= { vrrpRouteEntry 30 }
+
+vrrpRouteReordering OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Reordeering for route."
+    ::= { vrrpRouteEntry 31 }
+
+vrrpRouteReorderingLock OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is reordering value locked?"
+    ::= { vrrpRouteEntry 32 }
+
+vrrpRouteWindow OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Window for route."
+    ::= { vrrpRouteEntry 33 }
+
+vrrpRouteCwnd OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Congestion window for route."
+    ::= { vrrpRouteEntry 34 }
+
+vrrpRouteCwndLock OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is congestion window value locked?"
+    ::= { vrrpRouteEntry 35 }
+
+vrrpRouteSSthresh OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "SS threshold window for route."
+    ::= { vrrpRouteEntry 36 }
+
+vrrpRouteSSthreshLock OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is SS threshold value locked?"
+    ::= { vrrpRouteEntry 37 }
+
+vrrpRouteRTOMin OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Minimum RTO value (ms) for route."
+    ::= { vrrpRouteEntry 38 }
+
+vrrpRouteRTOMinLock OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is minimum RTO value value locked?"
+    ::= { vrrpRouteEntry 39 }
+
+vrrpRouteInitCwnd OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Initial congestion window for route."
+    ::= { vrrpRouteEntry 40 }
+
+vrrpRouteInitRwnd OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Initian R window for route."
+    ::= { vrrpRouteEntry 41 }
+
+vrrpRouteCongCtl OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Congestion control algorithm for route."
+    ::= { vrrpRouteEntry 42 }
+
+vrrpRoutePref OBJECT-TYPE
+    SYNTAX PrefType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Preference type for IPv6 route"
+    ::= { vrrpRouteEntry 43 }
+
+vrrpRouteRealmDst OBJECT-TYPE
+    SYNTAX Realm
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Realms for route."
+    ::= { vrrpRouteEntry 44 }
+
+vrrpRouteRealmSrc OBJECT-TYPE
+    SYNTAX Realm
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Realms for route."
+    ::= { vrrpRouteEntry 45 }
+
+vrrpRouteEncapType OBJECT-TYPE
+    SYNTAX EncapType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Encapsulation type."
+    ::= { vrrpRouteEntry 46 }
+
+vrrpRouteEncapMplsLabels OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "MPLS labels for MPLS encapsulation."
+    ::= { vrrpRouteEntry 47 }
+
+vrrpRouteEncapId OBJECT-TYPE
+    SYNTAX Counter64
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Tunnel ID for IP/IPv6 tunnels."
+    ::= { vrrpRouteEntry 48 }
+
+vrrpRouteEncapDstAddress OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Destination address for IP/IPv6 encapsulation."
+    ::= { vrrpRouteEntry 49 }
+
+vrrpRouteEncapSrcAddress OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Source address for IP/IPv6 encapsulation."
+    ::= { vrrpRouteEntry 50 }
+
+vrrpRouteEncapTOS OBJECT-TYPE
+    SYNTAX Unsigned32 (0..255)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Route next hop TOS/dsfield for IP/IPv6 encapsulation."
+    ::= { vrrpRouteEntry 51 }
+
+vrrpRouteEncapTTL OBJECT-TYPE
+    SYNTAX Unsigned32 (1..255)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Next hop time to live/hopcount for IP/IPv6 encapsulation."
+    ::= { vrrpRouteEntry 52 }
+
+vrrpRouteEncapFlags OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Flags for this IP/IPv6 encapsulation."
+    ::= { vrrpRouteEntry 53 }
+
+vrrpRouteEncapIlaLocator OBJECT-TYPE
+    SYNTAX Counter64
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "ILA locator for this encapsulation."
+    ::= { vrrpRouteEntry 54 }
+
+vrrpRouteFastOpenNoCookie OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Fast open no cookie."
+    ::= { vrrpRouteEntry 55 }
+
+-- Route next hops
+-- see vrrp_iproute.h
+
+vrrpRouteNextHopTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpRouteNextHopEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of next hops for static and virtual routes."
+    ::= { vrrp 11 }
+
+vrrpRouteNextHopEntry OBJECT-TYPE
+    SYNTAX VrrpRouteNextHopEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a route next hop. This can be for a static
+         route or a virtual route. In case of a static route, the
+         VRRP instance index is 0."
+    INDEX { vrrpInstanceIndex, vrrpRouteIndex, vrrpRouteNextHopIndex }
+    ::= { vrrpRouteNextHopTable 1 }
+
+VrrpRouteNextHopEntry ::= SEQUENCE {
+    vrrpRouteNextHopIndex Integer32,
+    vrrpRouteNextHopAddressType InetAddressType,
+    vrrpRouteNextHopAddress InetAddress,
+    vrrpRouteNextHopIfIndex InterfaceIndex,
+    vrrpRouteNextHopIfName DisplayString,
+    vrrpRouteNextHopWeight Unsigned32,
+    vrrpRouteNextHopOnlink TruthValue,
+    vrrpRouteNextHopRealmDst Realm,
+    vrrpRouteNextHopRealmSrc Realm,
+    vrrpRouteNextHopEncapType EncapType,
+    vrrpRouteNextHopEncapMplsLabels DisplayString,
+    vrrpRouteNextHopEncapId Counter64,
+    vrrpRouteNextHopEncapDstAddress InetAddress,
+    vrrpRouteNextHopEncapSrcAddress InetAddress,
+    vrrpRouteNextHopEncapTOS Unsigned32,
+    vrrpRouteNextHopEncapTTL Unsigned32,
+    vrrpRouteNextHopEncapFlags Unsigned32,
+    vrrpRouteNextHopEncapIlaLocator Counter64
+}
+
+vrrpRouteNextHopIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Route next hop index."
+    ::= { vrrpRouteNextHopEntry 1 }
+
+vrrpRouteNextHopAddressType OBJECT-TYPE
+    SYNTAX InetAddressType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Route next hop internet address type."
+    ::= { vrrpRouteNextHopEntry 2 }
+
+vrrpRouteNextHopAddress OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Route next hop address."
+    ::= { vrrpRouteNextHopEntry 3 }
+
+vrrpRouteNextHopIfIndex OBJECT-TYPE
+    SYNTAX InterfaceIndex
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Interface for this next hop."
+    ::= { vrrpRouteNextHopEntry 4 }
+
+vrrpRouteNextHopIfName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the interface for this next hop."
+    ::= { vrrpRouteNextHopEntry 5 }
+
+vrrpRouteNextHopWeight OBJECT-TYPE
+    SYNTAX Unsigned32 (1..256)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Route next hop weight."
+    ::= { vrrpRouteNextHopEntry 6 }
+
+vrrpRouteNextHopOnlink OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Next hop address is specified to be onlink."
+    ::= { vrrpRouteNextHopEntry 7 }
+
+vrrpRouteNextHopRealmDst OBJECT-TYPE
+    SYNTAX Realm
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Destination realm for this next hop."
+    ::= { vrrpRouteNextHopEntry 8 }
+
+vrrpRouteNextHopRealmSrc OBJECT-TYPE
+    SYNTAX Realm
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Source realms for this next hop."
+    ::= { vrrpRouteNextHopEntry 9 }
+
+vrrpRouteNextHopEncapType OBJECT-TYPE
+    SYNTAX EncapType
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Encapsulation type."
+    ::= { vrrpRouteNextHopEntry 10 }
+
+vrrpRouteNextHopEncapMplsLabels OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "MPLS labels for MPLS encapsulation."
+    ::= { vrrpRouteNextHopEntry 11 }
+
+vrrpRouteNextHopEncapId OBJECT-TYPE
+    SYNTAX Counter64
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Tunnel ID for IP/IPv6 tunnels."
+    ::= { vrrpRouteNextHopEntry 12 }
+
+vrrpRouteNextHopEncapDstAddress OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Destination address for IP/IPv6 encapsulation."
+    ::= { vrrpRouteNextHopEntry 13 }
+
+vrrpRouteNextHopEncapSrcAddress OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Source address for IP/IPv6 encapsulation."
+    ::= { vrrpRouteNextHopEntry 14 }
+
+vrrpRouteNextHopEncapTOS OBJECT-TYPE
+    SYNTAX Unsigned32 (0..255)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Route next hop TOS/dsfield for IP/IPv6 encapsulation."
+    ::= { vrrpRouteNextHopEntry 15 }
+
+vrrpRouteNextHopEncapTTL OBJECT-TYPE
+    SYNTAX Unsigned32 (1..255)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Next hop time to live/hopcount for IP/IPv6 encapsulation."
+    ::= { vrrpRouteNextHopEntry 16 }
+
+vrrpRouteNextHopEncapFlags OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Flags for this IP/IPv6 encapsulation."
+    ::= { vrrpRouteNextHopEntry 17 }
+
+vrrpRouteNextHopEncapIlaLocator OBJECT-TYPE
+    SYNTAX Counter64
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "ILA locator for this encapsulation."
+    ::= { vrrpRouteNextHopEntry 18 }
+
+-- Rules
+-- see vrrp_iprule.h
+
+vrrpRuleTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpRuleEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of static and virtual rules."
+    ::= { vrrp 8 }
+
+vrrpRuleEntry OBJECT-TYPE
+    SYNTAX VrrpRuleEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a rule. In case of a static rule,
+        the instance index is 0."
+    INDEX { vrrpInstanceIndex, vrrpRuleIndex }
+    ::= { vrrpRuleTable 1 }
+
+VrrpRuleEntry ::= SEQUENCE {
+    vrrpRuleIndex Unsigned32,
+    vrrpRuleDirection DisplayString,
+    vrrpRuleAddressType InetAddressType,
+    vrrpRuleAddress InetAddress,
+    vrrpRuleAddressMask InetAddressPrefixLength,
+    vrrpRuleRoutingTable Unsigned32,
+    vrrpRuleStatus INTEGER,
+    vrrpRuleInvert TruthValue,
+    vrrpRuleDestinationAddressType InetAddressType,
+    vrrpRuleDestinationAddress InetAddress,
+    vrrpRuleDestinationAddressMask InetAddressPrefixLength,
+    vrrpRuleSourceAddressType InetAddressType,
+    vrrpRuleSourceAddress InetAddress,
+    vrrpRuleSourceAddressMask InetAddressPrefixLength,
+    vrrpRuleTos Unsigned32,
+    vrrpRuleFwmark Unsigned32,
+    vrrpRuleFwmask Unsigned32,
+    vrrpRuleRealmDst Realm,
+    vrrpRuleRealmSrc Realm,
+    vrrpRuleInInterface DisplayString,
+    vrrpRuleOutInterface DisplayString,
+    vrrpRuleTarget Unsigned32,
+    vrrpRuleAction RuleAction,
+    vrrpRuleTableNo Unsigned32,
+    vrrpRulePreference Unsigned32,
+    vrrpRuleSuppressPrefixLen Unsigned32,
+    vrrpRuleSuppressGroup DisplayString,
+    vrrpRuleTunnelIdHigh Unsigned32,
+    vrrpRuleTunnelIdLow Unsigned32,
+    vrrpRuleUidRangeStart Unsigned32,
+    vrrpRuleUidRangeEnd Unsigned32,
+    vrrpRuleL3mdev TruthValue,
+    vrrpRuleProtocol INTEGER,
+    vrrpRuleIPProto Unsigned32,
+    vrrpRuleSrcPortStart Unsigned32,
+    vrrpRuleSrcPortEnd Unsigned32,
+    vrrpRuleDstPortStart Unsigned32,
+    vrrpRuleDstPortEnd Unsigned32
+}
+
+vrrpRuleIndex OBJECT-TYPE
+    SYNTAX Unsigned32 (1..4294967295)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Rule index."
+    ::= { vrrpRuleEntry 1 }
+
+vrrpRuleDirection OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS obsolete
+    DESCRIPTION
+        "Traffic direction for this rule."
+    ::= { vrrpRuleEntry 2 }
+
+vrrpRuleAddressType OBJECT-TYPE
+    SYNTAX InetAddressType
+    MAX-ACCESS read-only
+    STATUS obsolete
+    DESCRIPTION
+        "Rule type of internet address."
+    ::= { vrrpRuleEntry 3 }
+
+vrrpRuleAddress OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS obsolete
+    DESCRIPTION
+        "Rule network address."
+    ::= { vrrpRuleEntry 4 }
+
+vrrpRuleAddressMask OBJECT-TYPE
+    SYNTAX InetAddressPrefixLength
+    MAX-ACCESS read-only
+    STATUS obsolete
+    DESCRIPTION
+        "Rule network mask."
+    ::= { vrrpRuleEntry 5 }
+
+vrrpRuleRoutingTable OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Routing table where the rule should be inserted."
+    ::= { vrrpRuleEntry 6 }
+
+vrrpRuleStatus OBJECT-TYPE
+    SYNTAX INTEGER { set(1), unset(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is this rule set in the kernel?"
+    ::= { vrrpRuleEntry 7 }
+
+vrrpRuleInvert OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Invert rule matching sense."
+    ::= { vrrpRuleEntry 8 }
+
+vrrpRuleDestinationAddressType OBJECT-TYPE
+    SYNTAX InetAddressType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Family of rule destination internet address."
+    ::= { vrrpRuleEntry 9 }
+
+vrrpRuleDestinationAddress OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule destination network address."
+    ::= { vrrpRuleEntry 10 }
+
+vrrpRuleDestinationAddressMask OBJECT-TYPE
+    SYNTAX InetAddressPrefixLength
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule destination address network mask."
+    ::= { vrrpRuleEntry 11 }
+
+vrrpRuleSourceAddressType OBJECT-TYPE
+    SYNTAX InetAddressType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Family of rule source internet address."
+    ::= { vrrpRuleEntry 12 }
+
+vrrpRuleSourceAddress OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule source network address."
+    ::= { vrrpRuleEntry 13 }
+
+vrrpRuleSourceAddressMask OBJECT-TYPE
+    SYNTAX InetAddressPrefixLength
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule source address network mask."
+    ::= { vrrpRuleEntry 14 }
+
+vrrpRuleTos OBJECT-TYPE
+    SYNTAX Unsigned32 (0..255)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule TOS value to match."
+    ::= { vrrpRuleEntry 15 }
+
+vrrpRuleFwmark OBJECT-TYPE
+    SYNTAX Unsigned32 (0..4294967295)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule fwmark value to match."
+    ::= { vrrpRuleEntry 16 }
+
+vrrpRuleFwmask OBJECT-TYPE
+    SYNTAX Unsigned32 (0..4294967295)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule fwmask value to match the fwmark."
+    ::= { vrrpRuleEntry 17 }
+
+vrrpRuleRealmDst OBJECT-TYPE
+    SYNTAX Realm
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Destination realm to select if the rule matched."
+    ::= { vrrpRuleEntry 18 }
+
+vrrpRuleRealmSrc OBJECT-TYPE
+    SYNTAX Realm
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Source realm to select if the rule matched."
+    ::= { vrrpRuleEntry 19 }
+
+vrrpRuleInInterface OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule incoming interface to match."
+    ::= { vrrpRuleEntry 20 }
+
+vrrpRuleOutInterface OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule outgoing interface to match."
+    ::= { vrrpRuleEntry 21 }
+
+vrrpRuleTarget OBJECT-TYPE
+    SYNTAX Unsigned32 (0..4294967295)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule goto target."
+    ::= { vrrpRuleEntry 22 }
+
+vrrpRuleAction OBJECT-TYPE
+    SYNTAX RuleAction
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule type."
+    ::= { vrrpRuleEntry 23 }
+
+vrrpRuleTableNo OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Routing table."
+    ::= { vrrpRuleEntry 24 }
+
+vrrpRulePreference OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Routing table."
+    ::= { vrrpRuleEntry 25 }
+
+vrrpRuleSuppressPrefixLen OBJECT-TYPE
+    SYNTAX Unsigned32 (0..128)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule suppress match prefix length."
+    ::= { vrrpRuleEntry 26 }
+
+vrrpRuleSuppressGroup OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule suppress match interface group."
+    ::= { vrrpRuleEntry 27 }
+
+vrrpRuleTunnelIdHigh OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule tunnel-id low 32 bits."
+    ::= { vrrpRuleEntry 28 }
+
+vrrpRuleTunnelIdLow OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule tunnel-id high 32 bits."
+    ::= { vrrpRuleEntry 29 }
+
+vrrpRuleUidRangeStart OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule Uid range start."
+    ::= { vrrpRuleEntry 30 }
+
+vrrpRuleUidRangeEnd OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule Uid range end."
+    ::= { vrrpRuleEntry 31 }
+
+vrrpRuleL3mdev OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Use routing device specified for layer 3 VRF device."
+    ::= { vrrpRuleEntry 32 }
+
+vrrpRuleProtocol OBJECT-TYPE
+    SYNTAX INTEGER { unspec(1), redirect(2), kernel(3), boot(4), static(5), gated(9), ra(10), mrt(11),
+		      zebra(12), bird(13), dnrouted(14), xorp(15), ntk(16), dhcp(17), keepalived(112) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule protocol identifier."
+    ::= { vrrpRuleEntry 33 }
+
+vrrpRuleIPProto OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule IP protocol."
+    ::= { vrrpRuleEntry 34 }
+
+vrrpRuleSrcPortStart OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule source port range start."
+    ::= { vrrpRuleEntry 35 }
+
+vrrpRuleSrcPortEnd OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule source port range end."
+    ::= { vrrpRuleEntry 36 }
+
+vrrpRuleDstPortStart OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule destination port range start."
+    ::= { vrrpRuleEntry 37 }
+
+vrrpRuleDstPortEnd OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Rule destination port range end."
+    ::= { vrrpRuleEntry 38 }
+
+
+-- VRRP scripts
+-- see vrrp_track.h
+
+vrrpScriptTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpScriptEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of VRRP scripts"
+    ::= { vrrp 9 }
+
+vrrpScriptEntry OBJECT-TYPE
+    SYNTAX VrrpScriptEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a VRRP script"
+    INDEX { vrrpScriptIndex }
+    ::= { vrrpScriptTable 1 }
+
+VrrpScriptEntry ::= SEQUENCE {
+    vrrpScriptIndex Integer32,
+    vrrpScriptName DisplayString,
+    vrrpScriptCommand DisplayString,
+    vrrpScriptInterval Integer32,
+    vrrpScriptWeight Integer32,
+    vrrpScriptResult INTEGER,
+    vrrpScriptRise Unsigned32,
+    vrrpScriptFall Unsigned32,
+    vrrpScriptWgtRev Integer32
+}
+
+vrrpScriptIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Script index."
+    ::= { vrrpScriptEntry 1 }
+
+vrrpScriptName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Symbolic name of the script."
+    ::= { vrrpScriptEntry 2 }
+
+vrrpScriptCommand OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Command executed when running the script."
+    ::= { vrrpScriptEntry 3 }
+
+vrrpScriptInterval OBJECT-TYPE
+    SYNTAX Integer32
+    UNITS "seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Interval between two runs of the script."
+    ::= { vrrpScriptEntry 4 }
+
+vrrpScriptWeight OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight of the script if successful."
+    ::= { vrrpScriptEntry 5 }
+
+vrrpScriptResult OBJECT-TYPE
+    SYNTAX INTEGER {
+        init(1),
+        bad(2),
+        good(3),
+        initfailed(5)
+           }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current status of the script."
+    ::= { vrrpScriptEntry 6 }
+
+vrrpScriptRise OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "How many times the script should succeed before OK."
+    ::= { vrrpScriptEntry 7 }
+
+vrrpScriptFall OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "How many times the script should fail before KO."
+    ::= { vrrpScriptEntry 8 }
+
+vrrpScriptWgtRev OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight reverse for the script if successful."
+    ::= { vrrpScriptEntry 9 }
+
+-- VRRP files
+-- see vrrp_track.h
+
+vrrpTrackedFileTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpTrackedFileEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of tracked files for each VRRP instance."
+    ::= { vrrp 12 }
+
+vrrpTrackedFileEntry OBJECT-TYPE
+    SYNTAX VrrpTrackedFileEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a tracked file"
+    INDEX { vrrpInstanceIndex, vrrpTrackedFileIndex }
+    ::= { vrrpTrackedFileTable 1 }
+
+VrrpTrackedFileEntry ::= SEQUENCE {
+    vrrpTrackedFileIndex Integer32,
+    vrrpTrackedFileName DisplayString,
+    vrrpTrackedFileWeight Integer32,
+    vrrpTrackedFileWgtRev Integer32
+}
+
+vrrpTrackedFileIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the tracked file in the set of tracked files for
+         the given VRRP instance. This index has no relation with the
+         index of vrrpFileTable."
+    ::= { vrrpTrackedFileEntry 1 }
+
+vrrpTrackedFileName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the tracked file."
+    ::= { vrrpTrackedFileEntry 2 }
+
+vrrpTrackedFileWeight OBJECT-TYPE
+    SYNTAX Integer32 (-254..254)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight of the tracked file."
+    ::= { vrrpTrackedFileEntry 3 }
+
+vrrpTrackedFileWgtRev OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight reverse for the tracked file."
+    ::= { vrrpTrackedFileEntry 4 }
+
+vrrpFileTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpFileEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of VRRP files"
+    ::= { vrrp 13 }
+
+vrrpFileEntry OBJECT-TYPE
+    SYNTAX VrrpFileEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a VRRP file"
+    INDEX { vrrpFileIndex }
+    ::= { vrrpFileTable 1 }
+
+VrrpFileEntry ::= SEQUENCE {
+    vrrpFileIndex Integer32,
+    vrrpFileName DisplayString,
+    vrrpFilePath DisplayString,
+    vrrpFileResult INTEGER,
+    vrrpFileWeight Integer32,
+    vrrpFileWgtRev Integer32
+}
+
+vrrpFileIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "File index."
+    ::= { vrrpFileEntry 1 }
+
+vrrpFileName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Symbolic name of the file."
+    ::= { vrrpFileEntry 2 }
+
+vrrpFilePath OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Path of track file."
+    ::= { vrrpFileEntry 3 }
+
+vrrpFileResult OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current status of the file."
+    ::= { vrrpFileEntry 4 }
+
+vrrpFileWeight OBJECT-TYPE
+    SYNTAX Integer32 (-254..254)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default weight of the tracked file."
+    ::= { vrrpFileEntry 5 }
+
+vrrpFileWgtRev OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default weight reverse for the tracked file."
+    ::= { vrrpFileEntry 6 }
+
+-- VRRP track BFD
+-- see vrrp_track.h
+
+vrrpTrackedBfdTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpTrackedBfdEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of tracked BFDs for each VRRP instance."
+    ::= { vrrp 17 }
+
+vrrpTrackedBfdEntry OBJECT-TYPE
+    SYNTAX VrrpTrackedBfdEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a tracked BFD"
+    INDEX { vrrpInstanceIndex, vrrpTrackedBfdIndex }
+    ::= { vrrpTrackedBfdTable 1 }
+
+VrrpTrackedBfdEntry ::= SEQUENCE {
+    vrrpTrackedBfdIndex Integer32,
+    vrrpTrackedBfdName DisplayString,
+    vrrpTrackedBfdWeight Integer32,
+    vrrpTrackedBfdWgtRev Integer32
+}
+
+vrrpTrackedBfdIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the tracked BFD in the set of tracked BFDs for
+         the given VRRP instance. This index has no relation with the
+         index of vrrpBfdTable."
+    ::= { vrrpTrackedBfdEntry 1 }
+
+vrrpTrackedBfdName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the tracked BFD."
+    ::= { vrrpTrackedBfdEntry 2 }
+
+vrrpTrackedBfdWeight OBJECT-TYPE
+    SYNTAX Integer32 (-254..254)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight of the tracked BFD."
+    ::= { vrrpTrackedBfdEntry 3 }
+
+vrrpTrackedBfdWgtRev OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight reverse for the tracked BFD."
+    ::= { vrrpTrackedBfdEntry 4 }
+
+vrrpBfdTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpBfdEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of VRRP BFDs"
+    ::= { vrrp 18 }
+
+vrrpBfdEntry OBJECT-TYPE
+    SYNTAX VrrpBfdEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a VRRP BFD"
+    INDEX { vrrpBfdIndex }
+    ::= { vrrpBfdTable 1 }
+
+VrrpBfdEntry ::= SEQUENCE {
+    vrrpBfdIndex Integer32,
+    vrrpBfdName DisplayString,
+    vrrpBfdResult INTEGER,
+    vrrpBfdWeight Integer32,
+    vrrpBfdWgtRev Integer32
+}
+
+vrrpBfdIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Bfd index."
+    ::= { vrrpBfdEntry 1 }
+
+vrrpBfdName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Symbolic name of the BFD."
+    ::= { vrrpBfdEntry 2 }
+
+vrrpBfdResult OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current status of the BFD."
+    ::= { vrrpBfdEntry 3 }
+
+vrrpBfdWeight OBJECT-TYPE
+    SYNTAX Integer32 (-254..254)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default weight of the tracked BFD."
+    ::= { vrrpBfdEntry 4 }
+
+vrrpBfdWgtRev OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default weight reverse for the tracked BFD."
+    ::= { vrrpBfdEntry 5 }
+
+-- VRRP track process
+-- see vrrp_track.h
+
+vrrpTrackedProcessTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpTrackedProcessEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of tracked processes for each VRRP instance."
+    ::= { vrrp 20 }
+
+vrrpTrackedProcessEntry OBJECT-TYPE
+    SYNTAX VrrpTrackedProcessEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a tracked process"
+    INDEX { vrrpInstanceIndex, vrrpTrackedProcessIndex }
+    ::= { vrrpTrackedProcessTable 1 }
+
+VrrpTrackedProcessEntry ::= SEQUENCE {
+    vrrpTrackedProcessIndex Integer32,
+    vrrpTrackedProcessName DisplayString,
+    vrrpTrackedProcessWeight Integer32,
+    vrrpTrackedProcessWgtRev Integer32
+}
+
+vrrpTrackedProcessIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the tracked process in the set of tracked processes for
+         the given VRRP instance. This index has no relation with the
+         index of vrrpProcessTable."
+    ::= { vrrpTrackedProcessEntry 1 }
+
+vrrpTrackedProcessName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the tracked process."
+    ::= { vrrpTrackedProcessEntry 2 }
+
+vrrpTrackedProcessWeight OBJECT-TYPE
+    SYNTAX Integer32 (-254..254)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight of the tracked process."
+    ::= { vrrpTrackedProcessEntry 3 }
+
+vrrpTrackedProcessWgtRev OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Weight reverse for the tracked process."
+    ::= { vrrpTrackedProcessEntry 4 }
+
+vrrpProcessTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VrrpProcessEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of VRRP processes"
+    ::= { vrrp 21 }
+
+vrrpProcessEntry OBJECT-TYPE
+    SYNTAX VrrpProcessEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a VRRP process"
+    INDEX { vrrpProcessIndex }
+    ::= { vrrpProcessTable 1 }
+
+VrrpProcessEntry ::= SEQUENCE {
+    vrrpProcessIndex Integer32,
+    vrrpProcessName DisplayString,
+    vrrpProcessPath DisplayString,
+    vrrpProcessParams DisplayString,
+    vrrpProcessParamMatch INTEGER,
+    vrrpProcessWeight Integer32,
+    vrrpProcessWgtRev INTEGER,
+    vrrpProcessQuorum Unsigned32,
+    vrrpProcessQuorumMax Integer32,
+    vrrpProcessForkDelay Unsigned32,
+    vrrpProcessTerminateDelay Unsigned32,
+    vrrpProcessFullCommand INTEGER,
+    vrrpProcessCurProc Integer32,
+    vrrpProcessResult INTEGER
+}
+
+vrrpProcessIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Process index."
+    ::= { vrrpProcessEntry 1 }
+
+vrrpProcessName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Symbolic name of the process."
+    ::= { vrrpProcessEntry 2 }
+
+vrrpProcessPath OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Path of the process."
+    ::= { vrrpProcessEntry 3 }
+
+vrrpProcessParams OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Parameters to check of the process."
+    ::= { vrrpProcessEntry 4 }
+
+vrrpProcessParamMatch OBJECT-TYPE
+    SYNTAX INTEGER { none(0), exact(1), partial(2), initial(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Match type of the parameters."
+    ::= { vrrpProcessEntry 5 }
+
+vrrpProcessWeight OBJECT-TYPE
+    SYNTAX Integer32 (-254..254)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default weight of the tracked process."
+    ::= { vrrpProcessEntry 6 }
+
+vrrpProcessWgtRev OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default weight reverse for the tracked process."
+    ::= { vrrpProcessEntry 7 }
+
+vrrpProcessQuorum OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Quorum of number of patching processes required."
+    ::= { vrrpProcessEntry 8 }
+
+vrrpProcessQuorumMax OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Maximum number of matching processes required."
+    ::= { vrrpProcessEntry 9 }
+
+vrrpProcessForkDelay OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "microseconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Delay before consider new process running."
+    ::= { vrrpProcessEntry 10 }
+
+vrrpProcessTerminateDelay OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "microseconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Delay before consider process terminated."
+    ::= { vrrpProcessEntry 11 }
+
+vrrpProcessFullCommand OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "True if full path named used rather than comm string."
+    ::= { vrrpProcessEntry 12 }
+
+vrrpProcessCurProc OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Number of matching processes currently running."
+    ::= { vrrpProcessEntry 13 }
+
+vrrpProcessResult OBJECT-TYPE
+    SYNTAX INTEGER { true(1), false(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current status of the process."
+    ::= { vrrpProcessEntry 14 }
+
+-- Traps
+
+vrrpTrap OBJECT IDENTIFIER ::= { vrrp 10 }
+vrrpTraps OBJECT IDENTIFIER ::= { vrrpTrap 0 } -- Reverse-mappable
+vrrpTrapControl OBJECT IDENTIFIER ::= { vrrpTrap 1 }
+
+vrrpSyncGroupStateChange NOTIFICATION-TYPE
+    OBJECTS {
+        vrrpSyncGroupName,
+    vrrpSyncGroupState,
+    routerId
+    }
+    STATUS current
+    DESCRIPTION
+        "This trap signifies that the state of the whole vrrp sync
+        group changed."
+    ::= { vrrpTraps 1 }
+
+vrrpInstanceStateChange NOTIFICATION-TYPE
+    OBJECTS {
+        vrrpInstanceName,
+    vrrpInstanceState,
+    vrrpInstanceInitialState,
+    routerId
+    }
+    STATUS current
+    DESCRIPTION
+        "This trap signifies that the state of a vrrp instance changed."
+    ::= { vrrpTraps 2 }
+
+-- ----------------------------------------------------------------------
+-- Healthchecker part
+-- ----------------------------------------------------------------------
+
+-- Virtual server group
+
+virtualServerGroupTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VirtualServerGroupEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of virtual server groups."
+    ::= { check 1 }
+
+virtualServerGroupEntry OBJECT-TYPE
+    SYNTAX VirtualServerGroupEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a virtual server group."
+    INDEX { virtualServerGroupIndex }
+    ::= { virtualServerGroupTable 1 }
+
+VirtualServerGroupEntry ::= SEQUENCE {
+    virtualServerGroupIndex Integer32,
+    virtualServerGroupName DisplayString
+}
+
+virtualServerGroupIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the virtual server group."
+    ::= { virtualServerGroupEntry 1 }
+
+virtualServerGroupName OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Name of the virtual server group."
+    ::= { virtualServerGroupEntry 2 }
+
+virtualServerGroupMemberTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VirtualServerGroupMemberEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of members of a virtual server group."
+    ::= { check 2 }
+
+virtualServerGroupMemberEntry OBJECT-TYPE
+    SYNTAX VirtualServerGroupMemberEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Description of a member of a virtual server group."
+    INDEX { virtualServerGroupIndex, virtualServerGroupMemberIndex }
+    ::= { virtualServerGroupMemberTable 1 }
+
+VirtualServerGroupMemberEntry ::= SEQUENCE {
+    virtualServerGroupMemberIndex Integer32,
+    virtualServerGroupMemberType INTEGER,
+    virtualServerGroupMemberFwMark Unsigned32,
+    virtualServerGroupMemberAddrType InetAddressType,
+    virtualServerGroupMemberAddress InetAddress,
+    virtualServerGroupMemberAddr1 InetAddress,
+    virtualServerGroupMemberAddr2 InetAddress,
+    virtualServerGroupMemberPort InetPortNumber
+}
+
+virtualServerGroupMemberIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the member into virtual server group."
+    ::= { virtualServerGroupMemberEntry 1 }
+
+virtualServerGroupMemberType OBJECT-TYPE
+    SYNTAX INTEGER { fwmark(1), ip(2), iprange(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Kind of entry: firewall mark, address with port or range of
+         addresses with port."
+    ::= { virtualServerGroupMemberEntry 2 }
+
+virtualServerGroupMemberFwMark OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Firewall mark for this member.
+
+         If the kind of this member is not fwmark(1), then this entry
+         should not exist for the current row."
+    ::= { virtualServerGroupMemberEntry 3 }
+
+virtualServerGroupMemberAddrType OBJECT-TYPE
+    SYNTAX InetAddressType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Type of IP address for this member.
+
+         If the kind of this member is neither address(2) or range(3),
+         then this entry should not exist for the current row."
+    ::= { virtualServerGroupMemberEntry 4 }
+
+virtualServerGroupMemberAddress OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "IP address of this member.
+
+        If the kind of this member is not address(2), then this entry
+        should not exist for the current row."
+    ::= { virtualServerGroupMemberEntry 5 }
+
+virtualServerGroupMemberAddr1 OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "First IP address of the range for this member.
+
+        If the kind of this member is not range(3), then this entry
+        should not exist for the current row."
+    ::= { virtualServerGroupMemberEntry 6 }
+
+virtualServerGroupMemberAddr2 OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Second IP address of the range for this member.
+
+        If the kind of this member is not range(3), then this entry
+        should not exist for the current row."
+    ::= { virtualServerGroupMemberEntry 7 }
+
+virtualServerGroupMemberPort OBJECT-TYPE
+    SYNTAX InetPortNumber
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "V port for this member.
+
+        If the kind of this member is neither address(2) nor range(3),
+        then this entry should not exist for the current row."
+    ::= { virtualServerGroupMemberEntry 8 }
+
+-- virtual server
+
+virtualServerTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF VirtualServerEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of virtual servers."
+    ::= { check 3 }
+
+virtualServerEntry OBJECT-TYPE
+    SYNTAX VirtualServerEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a virtual server."
+    INDEX { virtualServerIndex }
+    ::= { virtualServerTable 1 }
+
+VirtualServerEntry ::= SEQUENCE {
+    virtualServerIndex Integer32,
+    virtualServerType INTEGER,
+    virtualServerNameOfGroup DisplayString,
+    virtualServerFwMark Unsigned32,
+    virtualServerAddrType InetAddressType,
+    virtualServerAddress InetAddress,
+    virtualServerPort InetPortNumber,
+    virtualServerProtocol INTEGER,
+    virtualServerLoadBalancingAlgo INTEGER,
+    virtualServerLoadBalancingKind INTEGER,
+    virtualServerStatus INTEGER,
+    virtualServerVirtualHost DisplayString,
+    virtualServerPersist INTEGER,
+    virtualServerPersistTimeout Unsigned32,
+    virtualServerPersistGranularity InetAddress,
+    virtualServerDelayLoop Unsigned32,
+    virtualServerHaSuspend TruthValue,
+    virtualServerAlpha INTEGER,
+    virtualServerOmega INTEGER,
+    virtualServerRealServersTotal Unsigned32,
+    virtualServerRealServersUp Unsigned32,
+    virtualServerQuorum Unsigned32,
+    virtualServerQuorumStatus INTEGER,
+    virtualServerQuorumUp DisplayString,
+    virtualServerQuorumDown DisplayString,
+    virtualServerHysteresis Unsigned32,
+    virtualServerStatsConns Gauge32,
+    virtualServerStatsInPkts Counter32,
+    virtualServerStatsOutPkts Counter32,
+    virtualServerStatsInBytes Counter64,
+    virtualServerStatsOutBytes Counter64,
+    virtualServerRateCps Gauge32,
+    virtualServerRateInPPS Gauge32,
+    virtualServerRateOutPPS Gauge32,
+    virtualServerRateInBPS Gauge32,
+    virtualServerRateOutBPS Gauge32,
+    virtualServerOPS TruthValue,
+    virtualServerStatsConns64 Counter64,
+    virtualServerStatsInPkts64 Counter64,
+    virtualServerStatsOutPkts64 Counter64,
+    virtualServerRateCpsLow Unsigned32,
+    virtualServerRateCpsHigh Unsigned32,
+    virtualServerRateInPPSLow Unsigned32,
+    virtualServerRateInPPSHigh Unsigned32,
+    virtualServerRateOutPPSLow Unsigned32,
+    virtualServerRateOutPPSHigh Unsigned32,
+    virtualServerRateInBPSLow Unsigned32,
+    virtualServerRateInBPSHigh Unsigned32,
+    virtualServerRateOutBPSLow Unsigned32,
+    virtualServerRateOutBPSHigh Unsigned32,
+    virtualServerPersistGranularity6 Unsigned32,
+    virtualServerHashed TruthValue,
+    virtualServerSHFallback TruthValue,
+    virtualServerSHPort TruthValue,
+    virtualServerSched3 TruthValue,
+    virtualServerActionWhenDown INTEGER,
+    virtualServerRetry Unsigned32,
+    virtualServerDelayBeforeRetry Unsigned32,
+    virtualServerWarmup Unsigned32,
+    virtualServerWeight INTEGER,
+    virtualServerSmtpAlert INTEGER,
+    virtualServerMHFallback TruthValue,
+    virtualServerMHPort TruthValue,
+    virtualServerDelayLoopUsec Unsigned32,
+    virtualServerDelayBeforeRetrUsec Unsigned32,
+    virtualServerWarmupUsec Unsigned32,
+    virtualServerConnTimeoutUsec Unsigned32,
+    virtualServerTunnelType INTEGER,
+    virtualServerTunnelPort InetPortNumber,
+    virtualServerTunnelCsum INTEGER
+}
+
+virtualServerIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the virtual server."
+    ::= { virtualServerEntry 1 }
+
+virtualServerType OBJECT-TYPE
+    SYNTAX INTEGER { fwmark(1), ip(2), group(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Type of virtual server. A virtual server can either be
+        defined from a firewall mark, an IP and a port
+        or from a virtual server group."
+    ::= { virtualServerEntry 2 }
+
+virtualServerNameOfGroup OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If the virtual is defined from a group, this is the name of the group."
+    ::= { virtualServerEntry 3 }
+
+virtualServerFwMark OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If the virtual server is defined from a firewall mark, this
+        is the value of the mark. Otherwise, this column should not
+        exist in the current row."
+    ::= { virtualServerEntry 4 }
+
+virtualServerAddrType OBJECT-TYPE
+    SYNTAX InetAddressType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If the virtual server is defined from an IP, this
+        is the address family. Otherwise, this column should not
+        exist in the current row."
+    ::= { virtualServerEntry 5 }
+
+virtualServerAddress OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If the virtual server is defined from an IP address, this
+        is the value of the IP. Otherwise, this column should not
+        exist in the current row."
+    ::= { virtualServerEntry 6 }
+
+virtualServerPort OBJECT-TYPE
+    SYNTAX InetPortNumber
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If the virtual server is defined from an IP, this is
+        the value of the port to listen for requests. Otherwise, this column
+        should not exist in the current row."
+    ::= { virtualServerEntry 7 }
+
+virtualServerProtocol OBJECT-TYPE
+    SYNTAX INTEGER { tcp(1), udp(2), sctp(3), none(4) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Which transport protocol should be used for this virtual server."
+    ::= { virtualServerEntry 8 }
+
+virtualServerLoadBalancingAlgo OBJECT-TYPE
+    SYNTAX INTEGER {
+    rr(1),
+    wrr(2),
+    lc(3),
+    wlc(4),
+    lblc(5),
+    lblcr(6),
+    dh(7),
+    sh(8),
+    sed(9),
+    nq(10),
+    fo(11),
+    ovf(12),
+    mh(13),
+    unknown(99)
+    }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Which load balancing algorithm (or scheduler) should be used
+        for this virtual server."
+    ::= { virtualServerEntry 9 }
+
+-- Note: this object is misnamed. It should be virtualServerForwardingMethod
+virtualServerLoadBalancingKind OBJECT-TYPE
+    SYNTAX INTEGER { nat(1), dr(2), tun(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default forwarding method to use for this virtual server."
+    ::= { virtualServerEntry 10 }
+
+virtualServerStatus OBJECT-TYPE
+    SYNTAX INTEGER { alive(1), dead(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current status of this virtual server."
+    ::= { virtualServerEntry 11 }
+
+virtualServerVirtualHost OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Virtualhost of this server for HTTP like requests."
+    ::= { virtualServerEntry 12 }
+
+virtualServerPersist OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is the virtual service persistence enabled?"
+    ::= { virtualServerEntry 13 }
+
+virtualServerPersistTimeout OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If this virtual service is persistence, what is the timeout."
+    ::= { virtualServerEntry 14 }
+
+virtualServerPersistGranularity OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Netmask specifying the granularity of the IPv4 persistence mechanism."
+    ::= { virtualServerEntry 15 }
+
+virtualServerDelayLoop OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Delay in seconds between two checks."
+    ::= { virtualServerEntry 16 }
+
+virtualServerHaSuspend OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If set to true(1), checks will be suspended if the IP of the
+        virtual server is currently not set."
+    ::= { virtualServerEntry 17 }
+
+virtualServerAlpha OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is alpha mode enabled?"
+    ::= { virtualServerEntry 18 }
+
+virtualServerOmega OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is omega mode enabled?"
+    ::= { virtualServerEntry 19 }
+
+virtualServerRealServersTotal OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of real servers for this virtual server."
+    ::= { virtualServerEntry 20 }
+
+virtualServerRealServersUp OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Real servers actually up for this virtual server."
+    ::= { virtualServerEntry 21 }
+
+virtualServerQuorum OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Quorum to get amond real servers to consider this virtual server up."
+    ::= { virtualServerEntry 22 }
+
+virtualServerQuorumStatus OBJECT-TYPE
+    SYNTAX INTEGER { met(1), notMet(2), shutdown(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current status of the quorum for this virtual server."
+    ::= { virtualServerEntry 23 }
+
+virtualServerQuorumUp OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Command to execute when the quorum is met."
+    ::= { virtualServerEntry 24 }
+
+virtualServerQuorumDown OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Command to execute when the quorum is not met."
+    ::= { virtualServerEntry 25 }
+
+virtualServerHysteresis OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Hysteresis with respect to quorum count."
+    ::= { virtualServerEntry 26 }
+
+virtualServerStatsConns OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "connections"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of connections scheduled for this virtual server."
+    ::= { virtualServerEntry 27 }
+
+virtualServerStatsInPkts OBJECT-TYPE
+    SYNTAX Counter32
+    UNITS "packets"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of incoming packets for this virtual server."
+    ::= { virtualServerEntry 28 }
+
+virtualServerStatsOutPkts OBJECT-TYPE
+    SYNTAX Counter32
+    UNITS "packets"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of outgoing packets for this virtual server."
+    ::= { virtualServerEntry 29 }
+
+virtualServerStatsInBytes OBJECT-TYPE
+    SYNTAX Counter64
+    UNITS "bytes"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of incoming bytes for this virtual server."
+    ::= { virtualServerEntry 30 }
+
+virtualServerStatsOutBytes OBJECT-TYPE
+    SYNTAX Counter64
+    UNITS "bytes"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of outgoing bytes for this virtual server."
+    ::= { virtualServerEntry 31 }
+
+virtualServerRateCps OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "connections/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current connection rate for this virtual server."
+    ::= { virtualServerEntry 32 }
+
+virtualServerRateInPPS OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "packets/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current in packet rate for this virtual server."
+    ::= { virtualServerEntry 33 }
+
+virtualServerRateOutPPS OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "packets/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current out packet rate for this virtual server."
+    ::= { virtualServerEntry 34 }
+
+virtualServerRateInBPS OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "bytes/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current incoming rate for this virtual server."
+    ::= { virtualServerEntry 35 }
+
+virtualServerRateOutBPS OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "bytes/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current outgoing rate for this virtual server."
+    ::= { virtualServerEntry 36 }
+
+virtualServerOPS OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If set to true(1), One-Packet-Scheduling will be applied."
+    ::= { virtualServerEntry 37 }
+
+virtualServerStatsConns64 OBJECT-TYPE
+    SYNTAX Counter64
+    UNITS "connections"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of connections scheduled for this virtual server."
+    ::= { virtualServerEntry 38 }
+
+virtualServerStatsInPkts64 OBJECT-TYPE
+    SYNTAX Counter64
+    UNITS "packets"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of incoming packets for this virtual server."
+    ::= { virtualServerEntry 39 }
+
+virtualServerStatsOutPkts64 OBJECT-TYPE
+    SYNTAX Counter64
+    UNITS "packets"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of outgoing packets for this virtual server."
+    ::= { virtualServerEntry 40 }
+
+virtualServerRateCpsLow OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "connections/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current connection rate for this virtual server.
+	Together with virtualServerRateCpsHigh composes 64-bit number."
+    ::= { virtualServerEntry 41 }
+
+virtualServerRateCpsHigh OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "connections/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current connection rate for this virtual server.
+	Together with virtualServerRateCpsLow composes 64-bit number."
+    ::= { virtualServerEntry 42 }
+
+virtualServerRateInPPSLow OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "packets/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current in packet rate for this virtual server.
+	Together with virtualServerRateInPPSHigh composes 64-bit number."
+    ::= { virtualServerEntry 43 }
+
+virtualServerRateInPPSHigh OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "packets/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current in packet rate for this virtual server.
+	Together with virtualServerRateInPPSLow composes 64-bit number."
+    ::= { virtualServerEntry 44 }
+
+virtualServerRateOutPPSLow OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "packets/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current out packet rate for this virtual server.
+	Together with virtualServerRateOutPPSHigh composes 64-bit number."
+    ::= { virtualServerEntry 45 }
+
+virtualServerRateOutPPSHigh OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "packets/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current out packet rate for this virtual server.
+	Together with virtualServerRateOutPPSLow composes 64-bit number."
+    ::= { virtualServerEntry 46 }
+
+virtualServerRateInBPSLow OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "bytes/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current incoming rate for this virtual server.
+	Together with virtualServerInBPSHigh composes 64-bit number."
+    ::= { virtualServerEntry 47 }
+
+virtualServerRateInBPSHigh OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "bytes/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current incoming rate for this virtual server.
+	Together with virtualServerRateInBPSLow composes 64-bit number."
+    ::= { virtualServerEntry 48 }
+
+virtualServerRateOutBPSLow OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "bytes/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current outgoing rate for this virtual server.
+	Together with virtualServerRateOutBPSHigh composes 64-bit number."
+    ::= { virtualServerEntry 49 }
+
+virtualServerRateOutBPSHigh OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "bytes/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current outgoing rate for this virtual server.
+	Together with virtualServerRateOutBPSLow composes 64-bit number."
+    ::= { virtualServerEntry 50 }
+
+virtualServerPersistGranularity6 OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Netmask specifying the granularity of the IPv6 persistence mechanism."
+    ::= { virtualServerEntry 51 }
+
+virtualServerHashed OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If set to true(1), entries will be hashed."
+    ::= { virtualServerEntry 52 }
+
+virtualServerSHFallback OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If set to true(1), SH scheduler fallback."
+    ::= { virtualServerEntry 53 }
+
+virtualServerSHPort OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If set to true(1), SH scheduler use port."
+    ::= { virtualServerEntry 54 }
+
+virtualServerSched3 OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If set to true(1), scheduler flag 3 set."
+    ::= { virtualServerEntry 55 }
+
+virtualServerActionWhenDown OBJECT-TYPE
+    SYNTAX INTEGER { remove(1), inhibit(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "What action is performed when the real servers are down. Its weight
+        can be set to 0 (inhibit) or it can be removed from the pool."
+    ::= { virtualServerEntry 56 }
+
+virtualServerRetry OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default number of retries of checker before marking failed."
+    ::= { virtualServerEntry 57 }
+
+virtualServerDelayBeforeRetry OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default number of seconds between retrying a checker ofter it has failed."
+    ::= { virtualServerEntry 58 }
+
+virtualServerWarmup OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Maximum number of seconds to delay before running checker."
+    ::= { virtualServerEntry 59 }
+
+virtualServerWeight OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default wieght for each real server."
+    ::= { virtualServerEntry 60 }
+
+virtualServerSmtpAlert OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Will SMTP alert be sent for this virtual server?"
+    ::= { virtualServerEntry 61 }
+
+virtualServerMHFallback OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If set to true(1), MH scheduler fallback."
+    ::= { virtualServerEntry 62 }
+
+virtualServerMHPort OBJECT-TYPE
+    SYNTAX TruthValue
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If set to true(1), MH scheduler use port."
+    ::= { virtualServerEntry 63 }
+
+virtualServerDelayLoopUsec OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "micro-seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Delay in micro-seconds between two checks."
+    ::= { virtualServerEntry 64 }
+
+virtualServerDelayBeforeRetrUsec OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "micro-seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default number of micro-seconds between retrying a checker ofter it has failed."
+    ::= { virtualServerEntry 65 }
+
+virtualServerWarmupUsec OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "micro-seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Maximum number of micro-seconds to delay before running checker."
+    ::= { virtualServerEntry 66 }
+
+virtualServerConnTimeoutUsec OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "micro-seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Maximum number of micro-seconds for checker to establish connection."
+    ::= { virtualServerEntry 67 }
+
+virtualServerTunnelType OBJECT-TYPE
+    SYNTAX INTEGER { ipip(1), gue(2), gre(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default forwarding tunnel type use for this virtual server."
+    ::= { virtualServerEntry 68 }
+
+virtualServerTunnelPort OBJECT-TYPE
+    SYNTAX InetPortNumber
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default forwarding tunnel GUE port use for this virtual server."
+    ::= { virtualServerEntry 69 }
+
+virtualServerTunnelCsum OBJECT-TYPE
+    SYNTAX INTEGER { nocsum(1), csum(2), remcsum(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default forwarding tunnel checksum type use for this virtual server."
+    ::= { virtualServerEntry 70 }
+
+
+-- real servers
+
+realServerTable OBJECT-TYPE
+    SYNTAX SEQUENCE OF RealServerEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Table of real servers. This includes regular real servers and sorry servers."
+    ::= { check 4 }
+
+realServerEntry OBJECT-TYPE
+    SYNTAX RealServerEntry
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Information describing a real server."
+    INDEX { virtualServerIndex, realServerIndex }
+    ::= { realServerTable 1 }
+
+RealServerEntry ::= SEQUENCE {
+    realServerIndex Integer32,
+    realServerType INTEGER,
+    realServerAddrType InetAddressType,
+    realServerAddress InetAddress,
+    realServerPort InetPortNumber,
+    realServerStatus INTEGER,
+    realServerWeight Integer32,
+    realServerUpperConnectionLimit Unsigned32,
+    realServerLowerConnectionLimit Unsigned32,
+    realServerActionWhenDown INTEGER,
+    realServerNotifyUp DisplayString,
+    realServerNotifyDown DisplayString,
+    realServerFailedChecks Unsigned32,
+    realServerStatsConns Gauge32,
+    realServerStatsActiveConns Gauge32,
+    realServerStatsInactiveConns Gauge32,
+    realServerStatsPersistentConns Gauge32,
+    realServerStatsInPkts Counter32,
+    realServerStatsOutPkts Counter32,
+    realServerStatsInBytes Counter64,
+    realServerStatsOutBytes Counter64,
+    realServerRateCps Gauge32,
+    realServerRateInPPS Gauge32,
+    realServerRateOutPPS Gauge32,
+    realServerRateInBPS Gauge32,
+    realServerRateOutBPS Gauge32,
+    realServerStatsConns64 Counter64,
+    realServerStatsInPkts64 Counter64,
+    realServerStatsOutPkts64 Counter64,
+    realServerRateCpsLow Unsigned32,
+    realServerRateCpsHigh Unsigned32,
+    realServerRateInPPSLow Unsigned32,
+    realServerRateInPPSHigh Unsigned32,
+    realServerRateOutPPSLow Unsigned32,
+    realServerRateOutPPSHigh Unsigned32,
+    realServerRateInBPSLow Unsigned32,
+    realServerRateInBPSHigh Unsigned32,
+    realServerRateOutBPSLow Unsigned32,
+    realServerRateOutBPSHigh Unsigned32,
+    realServerForwardingMethod INTEGER,
+    realServerVirtualHost DisplayString,
+    realServerAlpha INTEGER,
+    realServerRetry Unsigned32,
+    realServerDelayBeforeRetry Unsigned32,
+    realServerWarmup Unsigned32,
+    realServerDelayLoop Unsigned32,
+    realServerSmtpAlert INTEGER,
+    realServerDelayBeforeRetryUsec Unsigned32,
+    realServerWarmupUsec Unsigned32,
+    realServerDelayLoopUsec Unsigned32,
+    realServerConnTimeoutUsec Unsigned32,
+    realServerTunnelType INTEGER,
+    realServerTunnelPort InetPortNumber,
+    realServerTunnelCsum INTEGER
+}
+
+realServerIndex OBJECT-TYPE
+    SYNTAX Integer32 (1..2147483647)
+    MAX-ACCESS not-accessible
+    STATUS current
+    DESCRIPTION
+        "Index of the real server."
+    ::= { realServerEntry 1 }
+
+realServerType OBJECT-TYPE
+    SYNTAX INTEGER { regular(1), sorry(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Type of real server: either a regular real server or a sorry server."
+    ::= { realServerEntry 2 }
+
+realServerAddrType OBJECT-TYPE
+    SYNTAX InetAddressType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Address family for this real server."
+    ::= { realServerEntry 3 }
+
+realServerAddress OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "IP address of this real server."
+    ::= { realServerEntry 4 }
+
+realServerPort OBJECT-TYPE
+    SYNTAX InetPortNumber
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Port of the service."
+    ::= { realServerEntry 5 }
+
+realServerStatus OBJECT-TYPE
+    SYNTAX INTEGER { alive(1), dead(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Status of this real server."
+    ::= { realServerEntry 6 }
+
+realServerWeight OBJECT-TYPE
+    SYNTAX Integer32
+    MAX-ACCESS read-write
+    STATUS current
+    DESCRIPTION
+        "Weight of this real server.
+
+        This value can be set to 0 to disable the real server."
+    ::= { realServerEntry 7 }
+
+realServerUpperConnectionLimit OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Maximum number of connections for this real server."
+    ::= { realServerEntry 8 }
+
+realServerLowerConnectionLimit OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Minimum number of connections for this real server."
+    ::= { realServerEntry 9 }
+
+realServerActionWhenDown OBJECT-TYPE
+    SYNTAX INTEGER { remove(1), inhibit(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "What action is performed when this server is down. Its weight
+        can be set to 0 (inhibit) or it can be removed from the pool."
+    ::= { realServerEntry 10 }
+
+realServerNotifyUp OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Command to execute when this server becomes alive."
+    ::= { realServerEntry 11 }
+
+realServerNotifyDown OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Command to execute when this server becomes dead."
+    ::= { realServerEntry 12 }
+
+realServerFailedChecks OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "How many failed checks for this real server."
+    ::= { realServerEntry 13 }
+
+realServerStatsConns OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "connections"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of connections scheduled for this real server."
+    ::= { realServerEntry 14 }
+
+realServerStatsActiveConns OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "connections"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current active connections for this real server."
+    ::= { realServerEntry 15 }
+
+realServerStatsInactiveConns OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "connections"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current inactive connections for this real server."
+    ::= { realServerEntry 16 }
+
+realServerStatsPersistentConns OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "connections"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current persistent connections for this real server."
+    ::= { realServerEntry 17 }
+
+realServerStatsInPkts OBJECT-TYPE
+    SYNTAX Counter32
+    UNITS "packets"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of incoming packets for this real server."
+    ::= { realServerEntry 18 }
+
+realServerStatsOutPkts OBJECT-TYPE
+    SYNTAX Counter32
+    UNITS "packets"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of outgoing packets for this real server."
+    ::= { realServerEntry 19 }
+
+realServerStatsInBytes OBJECT-TYPE
+    SYNTAX Counter64
+    UNITS "bytes"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of incoming bytes for this real server."
+    ::= { realServerEntry 20 }
+
+realServerStatsOutBytes OBJECT-TYPE
+    SYNTAX Counter64
+    UNITS "bytes"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of outgoing bytes for this real server."
+    ::= { realServerEntry 21 }
+
+realServerRateCps OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "connections/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current connection rate for this real server."
+    ::= { realServerEntry 22 }
+
+realServerRateInPPS OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "packets/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current in packet rate for this real server."
+    ::= { realServerEntry 23 }
+
+realServerRateOutPPS OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "packets/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current out packet rate for this real server."
+    ::= { realServerEntry 24 }
+
+realServerRateInBPS OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "bytes/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current incoming rate for this real server."
+    ::= { realServerEntry 25 }
+
+realServerRateOutBPS OBJECT-TYPE
+    SYNTAX Gauge32
+    UNITS "bytes/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current outgoing rate for this real server."
+    ::= { realServerEntry 26 }
+
+realServerStatsConns64 OBJECT-TYPE
+    SYNTAX Counter64
+    UNITS "connections"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of connections scheduled for this real server."
+    ::= { realServerEntry 27 }
+
+realServerStatsInPkts64 OBJECT-TYPE
+    SYNTAX Counter64
+    UNITS "packets"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of incoming packets for this real server."
+    ::= { realServerEntry 28 }
+
+realServerStatsOutPkts64 OBJECT-TYPE
+    SYNTAX Counter64
+    UNITS "packets"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Total number of outgoing packets for this real server."
+    ::= { realServerEntry 29 }
+
+realServerRateCpsLow OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "connections/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current connection rate for this real server.
+	Together with realServerRateCpsHigh composes 64-bit number."
+    ::= { realServerEntry 30 }
+
+realServerRateCpsHigh OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "connections/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current connection rate for this real server.
+	Together with realServerRateCpsLow composes 64-bit number."
+    ::= { realServerEntry 31 }
+
+realServerRateInPPSLow OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "packets/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current in packet rate for this real server.
+	Together with realServerRateInPPSHigh composes 64-bit number."
+    ::= { realServerEntry 32 }
+
+realServerRateInPPSHigh OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "packets/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current in packet rate for this real server.
+	Together with realServerRateInPPSLow composes 64-bit number."
+    ::= { realServerEntry 33 }
+
+realServerRateOutPPSLow OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "packets/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current out packet rate for this real server.
+	Together with realServerRateOutPPSHigh composes 64-bit number."
+    ::= { realServerEntry 34 }
+
+realServerRateOutPPSHigh OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "packets/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current out packet rate for this real server.
+	Together with realServerRateOutPPSLow composes 64-bit number."
+    ::= { realServerEntry 35 }
+
+realServerRateInBPSLow OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "bytes/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current incoming rate for this real server.
+	Together with realServerInBPSHigh composes 64-bit number."
+    ::= { realServerEntry 36 }
+
+realServerRateInBPSHigh OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "bytes/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current incoming rate for this real server.
+	Together with realServerRateInBPSLow composes 64-bit number."
+    ::= { realServerEntry 37 }
+
+realServerRateOutBPSLow OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "bytes/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current outgoing rate for this real server.
+	Together with realServerRateOutBPSHigh composes 64-bit number."
+    ::= { realServerEntry 38 }
+
+realServerRateOutBPSHigh OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "bytes/s"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Current outgoing rate for this real server.
+	Together with realServerRateOutBPSLow composes 64-bit number."
+    ::= { realServerEntry 39 }
+
+realServerForwardingMethod OBJECT-TYPE
+    SYNTAX INTEGER { nat(1), dr(2), tun(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Forwarding method to use for this real server."
+    ::= { realServerEntry 40 }
+
+realServerVirtualHost OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Virtualhost of this real server for HTTP like requests."
+    ::= { realServerEntry 41 }
+
+realServerAlpha OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is alpha mode enabled?"
+    ::= { realServerEntry 42 }
+
+realServerRetry OBJECT-TYPE
+    SYNTAX Unsigned32
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default number of retries of checker before marking failed."
+    ::= { realServerEntry 43 }
+
+realServerDelayBeforeRetry OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default number of seconds between retrying a checker after it has failed."
+    ::= { realServerEntry 44 }
+
+realServerWarmup OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Maximum number of seconds to delay before running checker."
+    ::= { realServerEntry 45 }
+
+realServerDelayLoop OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Delay in seconds between two checks."
+    ::= { realServerEntry 46 }
+
+realServerSmtpAlert OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Will SMTP alert be sent for this real server?"
+    ::= {realServerEntry 47 }
+
+realServerDelayBeforeRetryUsec OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "micro-seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Default number of micro-seconds between retrying a checker after it has failed."
+    ::= { realServerEntry 48 }
+
+realServerWarmupUsec OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "micro-seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Maximum number of micro-seconds to delay before running checker."
+    ::= { realServerEntry 49 }
+
+realServerDelayLoopUsec OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "micro-seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Delay in micro-seconds between two checks."
+    ::= { realServerEntry 50 }
+
+realServerConnTimeoutUsec OBJECT-TYPE
+    SYNTAX Unsigned32
+    UNITS "micro-seconds"
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Maximum number of micro-seconds for checker to establish connection."
+    ::= { realServerEntry 51 }
+
+realServerTunnelType OBJECT-TYPE
+    SYNTAX INTEGER { ipip(1), gue(2), gre(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Forwarding tunnel type use for this real server."
+    ::= { realServerEntry 52 }
+
+realServerTunnelPort OBJECT-TYPE
+    SYNTAX InetPortNumber
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Forwarding tunnel GUE port use for this real server."
+    ::= { realServerEntry 53 }
+
+realServerTunnelCsum OBJECT-TYPE
+    SYNTAX INTEGER { nocsum(1), csum(2), remcsum(3) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Forwarding tunnel checksum type use for this real server."
+    ::= { realServerEntry 54 }
+
+lvsSyncDaemon    OBJECT IDENTIFIER ::= { check 6 }
+
+lvsSyncDaemonEnabled OBJECT-TYPE
+    SYNTAX INTEGER { enabled(1), disabled(2) }
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "Is LVS sync daemon enabled?"
+    ::= { lvsSyncDaemon 1 }
+
+lvsSyncDaemonInterface OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If LVS sync daemon is enabled, which interface to use for syncing?"
+    ::= { lvsSyncDaemon 2 }
+
+lvsSyncDaemonVrrpInstance OBJECT-TYPE
+    SYNTAX DisplayString
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "If LVS sync daemon is enabled, which VRRP instance is it tracking?"
+    ::= { lvsSyncDaemon 3 }
+
+lvsSyncDaemonSyncId OBJECT-TYPE
+    SYNTAX Integer32 (0..255)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "LVS sync daemon id?"
+    ::= { lvsSyncDaemon 4 }
+
+lvsSyncDaemonMaxLen OBJECT-TYPE
+    SYNTAX Integer32 (0..65517)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "LVS sync daemon payload maximum length, 0 means default setting.
+	 Only available on Linux >= 4.3."
+    ::= { lvsSyncDaemon 5 }
+
+lvsSyncDaemonPort OBJECT-TYPE
+    SYNTAX Integer32 (0..65535)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "LVS sync daemon UDP port, 0 means default setting.
+	 Only available on Linux >= 4.3."
+    ::= { lvsSyncDaemon 6 }
+
+lvsSyncDaemonTTL OBJECT-TYPE
+    SYNTAX Integer32 (0..255)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "LVS sync daemon packet TTL, 0 means default setting.
+	 Only available on Linux >= 4.3."
+    ::= { lvsSyncDaemon 7 }
+
+lvsSyncDaemonMcastGroupAddrType OBJECT-TYPE
+    SYNTAX InetAddressType
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "LVS sync daemon multicast group address type.
+	 Only available on Linux >= 4.3."
+    ::= { lvsSyncDaemon 8 }
+
+lvsSyncDaemonMcastGroupAddrValue OBJECT-TYPE
+    SYNTAX InetAddress
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "LVS sync daemon multicast group IP address.
+	 Only available on Linux >= 4.3."
+    ::= { lvsSyncDaemon 9 }
+
+lvsTimeouts    OBJECT IDENTIFIER ::= { check 7 }
+
+lvsTimeoutTcp OBJECT-TYPE
+    SYNTAX Integer32 (1..2678400)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "LVS TCP timeout"
+    ::= { lvsTimeouts 1 }
+
+lvsTimeoutTcpFin OBJECT-TYPE
+    SYNTAX Integer32 (1..2678400)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "LVS TCP FIN timeout"
+    ::= { lvsTimeouts 2 }
+
+lvsTimeoutUdp OBJECT-TYPE
+    SYNTAX Integer32 (1..2678400)
+    MAX-ACCESS read-only
+    STATUS current
+    DESCRIPTION
+        "LVS UDP timeout"
+    ::= { lvsTimeouts 3 }
+
+-- Traps
+
+checkTrap OBJECT IDENTIFIER ::= { check 5 }
+checkTraps OBJECT IDENTIFIER ::= { checkTrap 0 } -- Reverse-mappable
+checkTrapControl OBJECT IDENTIFIER ::= { checkTrap 1 }
+
+realServerStateChange NOTIFICATION-TYPE
+    OBJECTS {
+        realServerAddrType,
+    realServerAddress,
+    realServerPort,
+    realServerStatus,
+    virtualServerType,
+    virtualServerProtocol,
+    virtualServerRealServersUp,
+    virtualServerRealServersTotal,
+    routerId
+    }
+    STATUS current
+    DESCRIPTION
+        "This trap signifies that the state of a real server has
+        changed. Additional varbinds will be added depending on the
+        value of virtualServerType: virtualServerNameOfGroup,
+        virtualServerFwMark, virtualServerAddrType,
+        virtualServerAddress, virtualServerPort."
+    ::= { checkTraps 1 }
+
+virtualServerQuorumStateChange NOTIFICATION-TYPE
+    OBJECTS {
+    virtualServerType,
+    virtualServerProtocol,
+    virtualServerQuorumStatus,
+    virtualServerQuorum,
+    virtualServerRealServersUp,
+    virtualServerRealServersTotal,
+    routerId
+    }
+    STATUS current
+    DESCRIPTION
+        "This trap signifies that the quorum of a virtual server has
+        changed. Additional varbinds will be added depending on the
+        value of virtualServerType: virtualServerNameOfGroup,
+        virtualServerFwMark, virtualServerAddrType,
+        virtualServerAddress, virtualServerPort."
+    ::= { checkTraps 2 }
+
+-- ----------------------------------------------------------------------
+-- Conformance
+-- ----------------------------------------------------------------------
+
+compliances  OBJECT IDENTIFIER ::= { conformance 1 }
+groups       OBJECT IDENTIFIER ::= { conformance 2 }
+
+globalCompliances MODULE-COMPLIANCE
+    STATUS current
+    DESCRIPTION
+        "Compliance statement for global data"
+    MODULE -- this module
+    MANDATORY-GROUPS {
+        globalGroup
+    }
+    ::= { compliances 1 }
+
+vrrpCompliances MODULE-COMPLIANCE
+    STATUS current
+    DESCRIPTION
+        "The VRRP compliance statement"
+    MODULE -- this module
+    MANDATORY-GROUPS {
+    vrrpScriptGroup,
+    vrrpSyncGroup,
+    vrrpInstanceGroup,
+    vrrpTrapsGroup,
+    vrrpFileGroup,
+    vrrpBfdGroup,
+    vrrpProcessGroup
+    }
+    ::= { compliances 2 }
+
+checkCompliances MODULE-COMPLIANCE
+    STATUS current
+    DESCRIPTION
+        "The check compliance statement"
+    MODULE -- this module
+    MANDATORY-GROUPS {
+    virtualServerGroupGroup,
+    virtualServerGroup,
+    realServerGroup,
+    checkTrapsGroup,
+    lvsSyncDaemonGroup,
+    lvsTimeoutsGroup
+    }
+    ::= { compliances 3 }
+
+vrrpLvsSyncGroupCompliances MODULE-COMPLIANCE
+    STATUS deprecated
+    DESCRIPTION
+	"The compliance statement for LVS sync group associated
+	 with a VRRP instance. This is deprecated in favour of
+	 lvsSyncDaemonGroup."
+    MODULE -- this module
+    MANDATORY-GROUPS {
+    vrrpLvsSyncGroup
+    }
+    ::= { compliances 4 }
+
+globalGroup OBJECT-GROUP
+    OBJECTS {
+    version,
+    routerId,
+    smtpServerAddressType,
+    smtpServerAddress,
+    smtpServerTimeout,
+    emailFrom,
+    emailAddress,
+    smtpServerPort,
+    smtpEmailFaults,
+    smtpEmailSmtpAlert,
+    smtpEmailSmtpAlertVrrp,
+    smtpEmailSmtpAlertChecker,
+    trapEnable,
+    linkBeat,
+    lvsFlush,
+    ipvs64BitStats,
+    netNamespace,
+    dbus,
+    dynamicInterfaces,
+    lvsFlushOnStop
+    }
+    STATUS current
+    DESCRIPTION
+        "Conformance group for global data."
+    ::= { groups 1 }
+
+vrrpGroups OBJECT IDENTIFIER ::= { groups 2 }
+
+vrrpSyncGroup OBJECT-GROUP
+    OBJECTS {
+    vrrpSyncGroupName,
+    vrrpSyncGroupState,
+    vrrpSyncGroupSmtpAlert,
+    vrrpSyncGroupNotifyExec,
+    vrrpSyncGroupScriptMaster,
+    vrrpSyncGroupScriptBackup,
+    vrrpSyncGroupScriptFault,
+    vrrpSyncGroupScript,
+    vrrpSyncGroupTrackingWeight,
+    vrrpSyncGroupScriptStop,
+    vrrpSyncGroupMemberName,
+    vrrpSyncTrackedInterfaceName,
+    vrrpSyncTrackedInterfaceWeight,
+    vrrpSyncTrackedInterfaceWgtRev,
+    vrrpSyncTrackedScriptName,
+    vrrpSyncTrackedScriptWeight,
+    vrrpSyncTrackedScriptWgtRev,
+    vrrpSyncTrackedFileName,
+    vrrpSyncTrackedFileWeight,
+    vrrpSyncTrackedFileWgtRev,
+    vrrpSyncTrackedBfdName,
+    vrrpSyncTrackedBfdWeight,
+    vrrpSyncTrackedBfdWgtRev,
+    vrrpSyncTrackedProcessName,
+    vrrpSyncTrackedProcessWeight,
+    vrrpSyncTrackedProcessWgtRev
+    }
+    STATUS current
+    DESCRIPTION
+        "Conformance group for synchronisation groups."
+    ::= { vrrpGroups 1 }
+
+vrrpInstanceGroup OBJECT-GROUP
+    OBJECTS {
+    vrrpInstanceName,
+    vrrpInstanceVirtualRouterId,
+    vrrpInstanceState,
+    vrrpInstanceInitialState,
+    vrrpInstanceWantedState,
+    vrrpInstanceBasePriority,
+    vrrpInstanceEffectivePriority,
+    vrrpInstanceVipsStatus,
+    vrrpInstancePrimaryInterface,
+    vrrpInstanceTrackPrimaryIf,
+    vrrpInstanceAdvertisementsInt,
+    vrrpInstancePreempt,
+    vrrpInstancePreemptDelay,
+    vrrpInstanceAuthType,
+    vrrpInstanceSyncGroup,
+    vrrpInstanceGarpDelay,
+    vrrpInstanceSmtpAlert,
+    vrrpInstanceNotifyExec,
+    vrrpInstanceScriptMaster,
+    vrrpInstanceScriptBackup,
+    vrrpInstanceScriptFault,
+    vrrpInstanceScriptStop,
+    vrrpInstanceScript,
+    vrrpInstanceAccept,
+    vrrpInstancePromoteSecondaries,
+    vrrpInstanceUseLinkbeat,
+    vrrpInstanceVrrpVersion,
+    vrrpInstanceScriptMstrRxLowerPri,
+    vrrpTrackedInterfaceName,
+    vrrpTrackedInterfaceWeight,
+    vrrpTrackedInterfaceWgtRev,
+    vrrpTrackedScriptName,
+    vrrpTrackedScriptWeight,
+    vrrpTrackedScriptWgtRev,
+    vrrpTrackedFileName,
+    vrrpTrackedFileWeight,
+    vrrpTrackedFileWgtRev,
+    vrrpTrackedBfdName,
+    vrrpTrackedBfdWeight,
+    vrrpTrackedBfdWgtRev,
+    vrrpTrackedProcessName,
+    vrrpTrackedProcessWeight,
+    vrrpTrackedProcessWgtRev,
+    vrrpAddressType,
+    vrrpAddressValue,
+    vrrpAddressBroadcast,
+    vrrpAddressMask,
+    vrrpAddressScope,
+    vrrpAddressIfIndex,
+    vrrpAddressIfName,
+    vrrpAddressIfAlias,
+    vrrpAddressStatus,
+    vrrpAddressAdvertising,
+    vrrpAddressPeer,
+    vrrpRouteAddressType,
+    vrrpRouteDestination,
+    vrrpRouteDestinationMask,
+    vrrpRouteGateway,
+    vrrpRouteSecondaryGateway,
+    vrrpRouteSource,
+    vrrpRouteMetric,
+    vrrpRouteScope,
+    vrrpRouteType,
+    vrrpRouteIfIndex,
+    vrrpRouteIfName,
+    vrrpRouteRoutingTable,
+    vrrpRouteStatus,
+    vrrpRouteFromAddress,
+    vrrpRouteFromAddressMask,
+    vrrpRouteTos,
+    vrrpRouteProtocol,
+    vrrpRouteECN,
+    vrrpRouteQuickAck,
+    vrrpRouteExpires,
+    vrrpRouteMTU,
+    vrrpRouteMTULock,
+    vrrpRouteHopLimit,
+    vrrpRouteAdvmss,
+    vrrpRouteAdvmssLock,
+    vrrpRouteRTT,
+    vrrpRouteRTTLock,
+    vrrpRouteRTTvar,
+    vrrpRouteRTTvarLock,
+    vrrpRouteReordering,
+    vrrpRouteReorderingLock,
+    vrrpRouteWindow,
+    vrrpRouteCwnd,
+    vrrpRouteCwndLock,
+    vrrpRouteSSthresh,
+    vrrpRouteSSthreshLock,
+    vrrpRouteRTOMin,
+    vrrpRouteRTOMinLock,
+    vrrpRouteInitCwnd,
+    vrrpRouteInitRwnd,
+    vrrpRouteCongCtl,
+    vrrpRoutePref,
+    vrrpRouteRealmDst,
+    vrrpRouteRealmSrc,
+    vrrpRouteEncapType,
+    vrrpRouteEncapMplsLabels,
+    vrrpRouteEncapId,
+    vrrpRouteEncapDstAddress,
+    vrrpRouteEncapSrcAddress,
+    vrrpRouteEncapTOS,
+    vrrpRouteEncapTTL,
+    vrrpRouteEncapFlags,
+    vrrpRouteEncapIlaLocator,
+    vrrpRouteFastOpenNoCookie,
+    vrrpRouteNextHopAddressType,
+    vrrpRouteNextHopAddress,
+    vrrpRouteNextHopIfIndex,
+    vrrpRouteNextHopIfName,
+    vrrpRouteNextHopWeight,
+    vrrpRouteNextHopOnlink,
+    vrrpRouteNextHopRealmDst,
+    vrrpRouteNextHopRealmSrc,
+    vrrpRouteNextHopEncapMplsLabels,
+    vrrpRouteNextHopEncapId,
+    vrrpRouteNextHopEncapDstAddress,
+    vrrpRouteNextHopEncapSrcAddress,
+    vrrpRouteNextHopEncapTOS,
+    vrrpRouteNextHopEncapTTL,
+    vrrpRouteNextHopEncapFlags,
+    vrrpRouteNextHopEncapIlaLocator,
+    vrrpRuleRoutingTable,
+    vrrpRuleStatus,
+    vrrpRuleInvert,
+    vrrpRuleDestinationAddressType,
+    vrrpRuleDestinationAddress,
+    vrrpRuleDestinationAddressMask,
+    vrrpRuleSourceAddressType,
+    vrrpRuleSourceAddress,
+    vrrpRuleSourceAddressMask,
+    vrrpRuleTos,
+    vrrpRuleFwmark,
+    vrrpRuleFwmask,
+    vrrpRuleRealmDst,
+    vrrpRuleRealmSrc,
+    vrrpRuleInInterface,
+    vrrpRuleOutInterface,
+    vrrpRuleTarget,
+    vrrpRuleAction,
+    vrrpRuleTableNo,
+    vrrpRulePreference,
+    vrrpRuleSuppressPrefixLen,
+    vrrpRuleSuppressGroup,
+    vrrpRuleTunnelIdHigh,
+    vrrpRuleTunnelIdLow,
+    vrrpRuleUidRangeStart,
+    vrrpRuleUidRangeEnd,
+    vrrpRuleL3mdev,
+    vrrpRuleProtocol,
+    vrrpRuleIPProto,
+    vrrpRuleSrcPortStart,
+    vrrpRuleSrcPortEnd,
+    vrrpRuleDstPortStart,
+    vrrpRuleDstPortEnd
+    }
+    STATUS current
+    DESCRIPTION
+        "Conformance group for VRRP instances."
+    ::= { vrrpGroups 2 }
+
+vrrpScriptGroup OBJECT-GROUP
+    OBJECTS {
+    vrrpScriptName,
+    vrrpScriptCommand,
+    vrrpScriptInterval,
+    vrrpScriptWeight,
+    vrrpScriptResult,
+    vrrpScriptRise,
+    vrrpScriptFall,
+    vrrpScriptWgtRev
+    }
+    STATUS current
+    DESCRIPTION
+        "Conformance group for VRRP scripts."
+    ::= { vrrpGroups 3 }
+
+vrrpTrapsGroup NOTIFICATION-GROUP
+    NOTIFICATIONS {
+        vrrpSyncGroupStateChange,
+        vrrpInstanceStateChange
+    }
+    STATUS current
+    DESCRIPTION
+        "Conformance group for VRRP traps."
+    ::= { vrrpGroups 4 }
+
+vrrpLvsSyncGroup OBJECT-GROUP
+    OBJECTS {
+    vrrpInstanceLvsSyncDaemon,
+    vrrpInstanceLvsSyncInterface
+    }
+    STATUS deprecated
+    DESCRIPTION
+	"The deprecated LVS sync daemon configuration
+	 objects associated with a VRRP instance."
+    ::= { vrrpGroups 5 }
+
+vrrpObsoleteInstanceGroup OBJECT-GROUP
+    OBJECTS {
+    vrrpRuleDirection,
+    vrrpRuleAddressType,
+    vrrpRuleAddress,
+    vrrpRuleAddressMask }
+    STATUS obsolete
+    DESCRIPTION
+        "Obsolete group for VRRP instances."
+    ::= { vrrpGroups 6 }
+
+vrrpFileGroup OBJECT-GROUP
+    OBJECTS {
+    vrrpFileName,
+    vrrpFilePath,
+    vrrpFileResult,
+    vrrpFileWeight,
+    vrrpFileWgtRev
+    }
+    STATUS current
+    DESCRIPTION
+        "Conformance group for VRRP track files."
+    ::= { vrrpGroups 7 }
+
+vrrpBfdGroup OBJECT-GROUP
+    OBJECTS {
+    vrrpBfdName,
+    vrrpBfdResult,
+    vrrpBfdWeight,
+    vrrpBfdWgtRev
+    }
+    STATUS current
+    DESCRIPTION
+        "Conformance group for VRRP track BFDs."
+    ::= { vrrpGroups 8 }
+
+vrrpProcessGroup OBJECT-GROUP
+    OBJECTS {
+    vrrpProcessName,
+    vrrpProcessPath,
+    vrrpProcessParams,
+    vrrpProcessParamMatch,
+    vrrpProcessWeight,
+    vrrpProcessWgtRev,
+    vrrpProcessQuorum,
+    vrrpProcessQuorumMax,
+    vrrpProcessForkDelay,
+    vrrpProcessTerminateDelay,
+    vrrpProcessFullCommand,
+    vrrpProcessCurProc,
+    vrrpProcessResult
+    }
+    STATUS current
+    DESCRIPTION
+        "Conformance group for VRRP track processes."
+    ::= { vrrpGroups 9 }
+
+checkGroups OBJECT IDENTIFIER ::= { groups 3 }
+
+virtualServerGroupGroup OBJECT-GROUP
+    OBJECTS {
+    virtualServerGroupName,
+    virtualServerGroupMemberType,
+    virtualServerGroupMemberFwMark,
+    virtualServerGroupMemberAddrType,
+    virtualServerGroupMemberAddress,
+    virtualServerGroupMemberAddr1,
+    virtualServerGroupMemberAddr2,
+    virtualServerGroupMemberPort
+    }
+    STATUS current
+    DESCRIPTION
+        "Conformance group for virtual server groups."
+    ::= { checkGroups 1 }
+
+virtualServerGroup OBJECT-GROUP
+    OBJECTS {
+    virtualServerType,
+    virtualServerNameOfGroup,
+    virtualServerFwMark,
+    virtualServerAddrType,
+    virtualServerAddress,
+    virtualServerPort,
+    virtualServerProtocol,
+    virtualServerLoadBalancingAlgo,
+    virtualServerLoadBalancingKind,
+    virtualServerStatus,
+    virtualServerVirtualHost,
+    virtualServerPersist,
+    virtualServerPersistTimeout,
+    virtualServerPersistGranularity,
+    virtualServerDelayLoop,
+    virtualServerHaSuspend,
+    virtualServerAlpha,
+    virtualServerOmega,
+    virtualServerRealServersTotal,
+    virtualServerRealServersUp,
+    virtualServerQuorum,
+    virtualServerQuorumStatus,
+    virtualServerQuorumUp,
+    virtualServerQuorumDown,
+    virtualServerHysteresis,
+    virtualServerStatsConns,
+    virtualServerStatsInPkts,
+    virtualServerStatsOutPkts,
+    virtualServerStatsInBytes,
+    virtualServerStatsOutBytes,
+    virtualServerRateCps,
+    virtualServerRateInPPS,
+    virtualServerRateOutPPS,
+    virtualServerRateInBPS,
+    virtualServerRateOutBPS,
+    virtualServerOPS,
+    virtualServerStatsConns64,
+    virtualServerStatsInPkts64,
+    virtualServerStatsOutPkts64,
+    virtualServerRateCpsLow,
+    virtualServerRateCpsHigh,
+    virtualServerRateInPPSLow,
+    virtualServerRateInPPSHigh,
+    virtualServerRateOutPPSLow,
+    virtualServerRateOutPPSHigh,
+    virtualServerRateInBPSLow,
+    virtualServerRateInBPSHigh,
+    virtualServerRateOutBPSLow,
+    virtualServerRateOutBPSHigh,
+    virtualServerPersistGranularity6,
+    virtualServerHashed,
+    virtualServerSHFallback,
+    virtualServerSHPort,
+    virtualServerSched3,
+    virtualServerActionWhenDown,
+    virtualServerRetry,
+    virtualServerDelayBeforeRetry,
+    virtualServerWarmup,
+    virtualServerWeight,
+    virtualServerSmtpAlert,
+    virtualServerMHFallback,
+    virtualServerMHPort,
+    virtualServerDelayLoopUsec,
+    virtualServerDelayBeforeRetrUsec,
+    virtualServerWarmupUsec,
+    virtualServerConnTimeoutUsec,
+    virtualServerTunnelType,
+    virtualServerTunnelPort,
+    virtualServerTunnelCsum
+    }
+    STATUS current
+    DESCRIPTION
+        "Conformance group for virtual servers."
+    ::= { checkGroups 2 }
+
+realServerGroup OBJECT-GROUP
+    OBJECTS {
+    realServerType,
+    realServerAddrType,
+    realServerAddress,
+    realServerPort,
+    realServerStatus,
+    realServerWeight,
+    realServerUpperConnectionLimit,
+    realServerLowerConnectionLimit,
+    realServerActionWhenDown,
+    realServerNotifyUp,
+    realServerNotifyDown,
+    realServerFailedChecks,
+    realServerStatsConns,
+    realServerStatsActiveConns,
+    realServerStatsInactiveConns,
+    realServerStatsPersistentConns,
+    realServerStatsInPkts,
+    realServerStatsOutPkts,
+    realServerStatsInBytes,
+    realServerStatsOutBytes,
+    realServerRateCps,
+    realServerRateInPPS,
+    realServerRateOutPPS,
+    realServerRateInBPS,
+    realServerRateOutBPS,
+    realServerStatsConns64,
+    realServerStatsInPkts64,
+    realServerStatsOutPkts64,
+    realServerRateCpsLow,
+    realServerRateCpsHigh,
+    realServerRateInPPSLow,
+    realServerRateInPPSHigh,
+    realServerRateOutPPSLow,
+    realServerRateOutPPSHigh,
+    realServerRateInBPSLow,
+    realServerRateInBPSHigh,
+    realServerRateOutBPSLow,
+    realServerRateOutBPSHigh,
+    realServerForwardingMethod,
+    realServerVirtualHost,
+    realServerAlpha,
+    realServerRetry,
+    realServerDelayBeforeRetry,
+    realServerWarmup,
+    realServerDelayLoop,
+    realServerSmtpAlert,
+    realServerDelayBeforeRetryUsec,
+    realServerWarmupUsec,
+    realServerDelayLoopUsec,
+    realServerConnTimeoutUsec,
+    realServerTunnelType,
+    realServerTunnelPort,
+    realServerTunnelCsum
+    }
+    STATUS current
+    DESCRIPTION
+        "Conformance group for real servers."
+    ::= { checkGroups 3 }
+
+checkTrapsGroup NOTIFICATION-GROUP
+    NOTIFICATIONS {
+        realServerStateChange,
+        virtualServerQuorumStateChange
+    }
+    STATUS current
+    DESCRIPTION
+        "Conformance group for check traps."
+    ::= { checkGroups 4 }
+
+lvsSyncDaemonGroup OBJECT-GROUP
+    OBJECTS {
+    lvsSyncDaemonEnabled,
+    lvsSyncDaemonInterface,
+    lvsSyncDaemonVrrpInstance,
+    lvsSyncDaemonSyncId,
+    lvsSyncDaemonMaxLen,
+    lvsSyncDaemonPort,
+    lvsSyncDaemonTTL,
+    lvsSyncDaemonMcastGroupAddrType,
+    lvsSyncDaemonMcastGroupAddrValue
+    }
+    STATUS current
+    DESCRIPTION
+	"Conformance group for LVS sync daemon."
+    ::= { checkGroups 5 }
+
+lvsTimeoutsGroup OBJECT-GROUP
+    OBJECTS {
+    lvsTimeoutTcp,
+    lvsTimeoutTcpFin,
+    lvsTimeoutUdp
+    }
+    STATUS current
+    DESCRIPTION
+	"Conformance group for LVS timeouts."
+    ::= { checkGroups 6 }
+
+END
diff --git a/tools/keepalived/doc/Makefile.am b/tools/keepalived/doc/Makefile.am
new file mode 100644
index 000000000..7a888375e
--- /dev/null
+++ b/tools/keepalived/doc/Makefile.am
@@ -0,0 +1,220 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+
+SUBDIRS		= man/man8
+
+if BUILD_GENHASH
+dist_man1_MANS	= man/man1/genhash.1
+endif
+dist_man5_MANS	= man/man5/keepalived.conf.5
+
+EXTRA_DIST	= source samples keepalived.conf.SYNOPSIS NOTE_vrrp_vmac.txt KEEPALIVED-MIB.txt VRRP-MIB.txt VRRPv3-MIB.txt
+
+sampledir	= $(sysconfdir)/@PACKAGE@/samples
+sample_DATA	= $(srcdir)/samples/*
+
+mibsdir		= $(datarootdir)/snmp/mibs
+mibs_DATA	=
+if SNMP_KEEPALIVED
+mibs_DATA	+= KEEPALIVED-MIB.txt
+endif
+if SNMP_RFCV2
+mibs_DATA	+= VRRP-MIB.txt
+endif
+if SNMP_RFCV3
+mibs_DATA	+= VRRPv3-MIB.txt
+endif
+
+dist-hook:
+	rm -rf `find $(distdir)/doc -type d -name ".git*"`
+
+if !BUILD_DOCS
+
+.PHONY: all help
+
+all:
+	@true
+
+help:
+	@echo "To build the documentation, make sure you have Sphinx installed, then"
+	@echo "run configure with the SPHINXBUILD environment variable pointing to"
+	@echo "the path of the 'sphinx-build' executable. Alternatively you can add"
+	@echo "the directory with the executable to your PATH. If you don't have"
+	@echo "Sphinx installed, either try installing package python-sphinx or"
+	@echo "equivalent, or grab it from http://sphinx-doc.org/."
+endif
+
+if BUILD_DOCS
+
+# You can set these variables from the command line.
+SPHINXOPTS	=
+SPHINXBUILD	= @SPHINXBUILDNAME@
+PAPER		= a4
+BUILDDIR	= build
+
+
+# Internal variables.
+PAPEROPT	= -D latex_paper_size=$(PAPER)
+ALLSPHINXOPTS   = -d $(BUILDDIR)/doctrees $(PAPEROPT) $(SPHINXOPTS) source
+# the i18n builder cannot share the environment and doctrees with the others
+I18NSPHINXOPTS  = $(PAPEROPT) $(SPHINXOPTS) source
+
+.PHONY: help clean html dirhtml singlehtml pickle json htmlhelp qthelp devhelp epub latex latexpdf text man changes linkcheck doctest gettext
+
+default: man
+
+help:
+	@echo "Please use \`make <target>' where <target> is one of"
+	@echo "  html       to make standalone HTML files"
+	@echo "  singlehtml to make a single large HTML file"
+	@echo "  pickle     to make pickle files"
+	@echo "  json       to make JSON files"
+	@echo "  htmlhelp   to make HTML files and a HTML help project"
+	@echo "  qthelp     to make HTML files and a qthelp project"
+	@echo "  devhelp    to make HTML files and a Devhelp project"
+	@echo "  epub       to make an epub"
+	@echo "  latex      to make LaTeX files, you can set PAPER=a4 or PAPER=letter"
+	@echo "  latexpdf   to make LaTeX files and run them through pdflatex"
+	@echo "  latexpdfja to make LaTeX files and run them through platex/dvipdfmx"
+	@echo "  text       to make text files"
+	@echo "  man        to make manual pages"
+	@echo "  texinfo    to make Texinfo files"
+	@echo "  info       to make Texinfo files and run them through makeinfo"
+	@echo "  gettext    to make PO message catalogs"
+	@echo "  changes    to make an overview of all changed/added/deprecated items"
+	@echo "  xml        to make Docutils-native XML files"
+	@echo "  pseudoxml  to make pseudoxml-XML files for display purposes"
+	@echo "  linkcheck  to check all external links for integrity"
+	@echo "  doctest    to run all doctests embedded in the documentation (if enabled)"
+
+clean:
+	rm -rf $(BUILDDIR)
+
+html:
+	$(SPHINXBUILD) -b html $(ALLSPHINXOPTS) $(BUILDDIR)/html
+	@echo
+	@echo "Build finished. The HTML pages are in $(BUILDDIR)/html."
+
+dirhtml:
+	$(SPHINXBUILD) -b dirhtml $(ALLSPHINXOPTS) $(BUILDDIR)/dirhtml
+	@echo
+	@echo "Build finished. The HTML pages are in $(BUILDDIR)/dirhtml."
+
+singlehtml:
+	$(SPHINXBUILD) -b singlehtml $(ALLSPHINXOPTS) $(BUILDDIR)/singlehtml
+	@echo
+	@echo "Build finished. The HTML page is in $(BUILDDIR)/singlehtml."
+
+pickle:
+	$(SPHINXBUILD) -b pickle $(ALLSPHINXOPTS) $(BUILDDIR)/pickle
+	@echo
+	@echo "Build finished; now you can process the pickle files."
+
+json:
+	$(SPHINXBUILD) -b json $(ALLSPHINXOPTS) $(BUILDDIR)/json
+	@echo
+	@echo "Build finished; now you can process the JSON files."
+
+htmlhelp:
+	$(SPHINXBUILD) -b htmlhelp $(ALLSPHINXOPTS) $(BUILDDIR)/htmlhelp
+	@echo
+	@echo "Build finished; now you can run HTML Help Workshop with the" \
+	      ".hhp project file in $(BUILDDIR)/htmlhelp."
+
+qthelp:
+	$(SPHINXBUILD) -b qthelp $(ALLSPHINXOPTS) $(BUILDDIR)/qthelp
+	@echo
+	@echo "Build finished; now you can run "qcollectiongenerator" with the" \
+	      ".qhcp project file in $(BUILDDIR)/qthelp, like this:"
+	@echo "# qcollectiongenerator $(BUILDDIR)/qthelp/Keepalived.qhcp"
+	@echo "To view the help file:"
+	@echo "# assistant -collectionFile $(BUILDDIR)/qthelp/Keepalived.qhc"
+
+devhelp:
+	$(SPHINXBUILD) -b devhelp $(ALLSPHINXOPTS) $(BUILDDIR)/devhelp
+	@echo
+	@echo "Build finished."
+	@echo "To view the help file:"
+	@echo "# mkdir -p $$HOME/.local/share/devhelp/Keepalived"
+	@echo "# ln -s $(BUILDDIR)/devhelp $$HOME/.local/share/devhelp/Keepalived"
+	@echo "# devhelp"
+
+epub:
+	$(SPHINXBUILD) -b epub $(ALLSPHINXOPTS) $(BUILDDIR)/epub
+	@echo
+	@echo "Build finished. The epub file is in $(BUILDDIR)/epub."
+
+latex:
+	$(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
+	@echo
+	@echo "Build finished; the LaTeX files are in $(BUILDDIR)/latex."
+	@echo "Run \`make' in that directory to run these through (pdf)latex" \
+	      "(use \`make latexpdf' here to do that automatically)."
+
+latexpdf:
+	$(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
+	@echo "Running LaTeX files through pdflatex..."
+	$(MAKE) -C $(BUILDDIR)/latex all-pdf
+	@echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex."
+
+latexpdfja:
+	$(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
+	@echo "Running LaTeX files through platex and dvipdfmx..."
+	$(MAKE) -C $(BUILDDIR)/latex all-pdf-ja
+	@echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex."
+
+text:
+	$(SPHINXBUILD) -b text $(ALLSPHINXOPTS) $(BUILDDIR)/text
+	@echo
+	@echo "Build finished. The text files are in $(BUILDDIR)/text."
+
+man:
+	$(SPHINXBUILD) -b man $(ALLSPHINXOPTS) $(BUILDDIR)/man
+	@echo
+	@echo "Build finished. The manual pages are in $(BUILDDIR)/man."
+
+texinfo:
+	$(SPHINXBUILD) -b texinfo $(ALLSPHINXOPTS) $(BUILDDIR)/texinfo
+	@echo
+	@echo "Build finished. The Texinfo files are in $(BUILDDIR)/texinfo."
+	@echo "Run \`make' in that directory to run these through makeinfo" \
+	      "(use \`make info' here to do that automatically)."
+
+info:
+	$(SPHINXBUILD) -b texinfo $(ALLSPHINXOPTS) $(BUILDDIR)/texinfo
+	@echo "Running Texinfo files through makeinfo..."
+	make -C $(BUILDDIR)/texinfo info
+	@echo "makeinfo finished; the Info files are in $(BUILDDIR)/texinfo."
+
+gettext:
+	$(SPHINXBUILD) -b gettext $(I18NSPHINXOPTS) $(BUILDDIR)/locale
+	@echo
+	@echo "Build finished. The message catalogs are in $(BUILDDIR)/locale."
+
+changes:
+	$(SPHINXBUILD) -b changes $(ALLSPHINXOPTS) $(BUILDDIR)/changes
+	@echo
+	@echo "The overview file is in $(BUILDDIR)/changes."
+
+linkcheck:
+	$(SPHINXBUILD) -b linkcheck $(ALLSPHINXOPTS) $(BUILDDIR)/linkcheck
+	@echo
+	@echo "Link check complete; look for any errors in the above output " \
+	      "or in $(BUILDDIR)/linkcheck/output.txt."
+
+doctest:
+	$(SPHINXBUILD) -b doctest $(ALLSPHINXOPTS) $(BUILDDIR)/doctest
+	@echo "Testing of doctests in the sources finished, look at the " \
+	      "results in $(BUILDDIR)/doctest/output.txt."
+
+xml:
+	$(SPHINXBUILD) -b xml $(ALLSPHINXOPTS) $(BUILDDIR)/xml
+	@echo
+	@echo "Build finished. The XML files are in $(BUILDDIR)/xml."
+
+pseudoxml:
+	$(SPHINXBUILD) -b pseudoxml $(ALLSPHINXOPTS) $(BUILDDIR)/pseudoxml
+	@echo
+	@echo "Build finished. The pseudo-XML files are in $(BUILDDIR)/pseudoxml."
+endif
diff --git a/tools/keepalived/doc/NOTE_vrrp_vmac.txt b/tools/keepalived/doc/NOTE_vrrp_vmac.txt
index 35a5fe8ba..52e29fda4 100644
--- a/tools/keepalived/doc/NOTE_vrrp_vmac.txt
+++ b/tools/keepalived/doc/NOTE_vrrp_vmac.txt
@@ -4,6 +4,8 @@
                                        Alexandre Cassen
                                         July 11th 2012
 
+					latest update
+                                       April 20th 2019
 
 To reduce takeover impact, some networking environment would require using
 VRRP with VMAC address. To reach that goal Keepalived VRRP framework implements
@@ -15,7 +17,7 @@ driver to defines thoses interfaces. It is then mandatory to use kernel
 compiled with macvlan support.
 
 In addition we can mention that VRRP VMAC will work only with kernel including
-the following patch :
+the following patch (include in Linux from v3.2):
 
 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=commitdiff;h=729e72a10930ef765c11a5a35031ba47f18221c4
 
@@ -27,30 +29,26 @@ Alternatively, you can specify 'vmac_xmit_base' which will cause the VRRP
 messages to be transmitted and received on the underlying interface whilst ARP
 will happen from the the VMAC interface.
 
-You may also need to tweak your physical interfaces to play around with well
-known ARP issues. If you have issues, try the following configurations :
+keepalived now sets the necessary interface configuration options, but if the
+settings in net.ipv4.conf.all are non-standard, then these may override the
+specific settings for the interface. Source file keepalived/vrrp/vrrp_if_config.c
+documents what interface parameters are set for both the VMAC interface and its
+parent interface. Kernel source file doc/Documentation/networking/ip-sysctl.txt
+documents how the conf.all settings can override the specific settings for
+individual interfaces. If using MACVLAN interfaces is not working as you expect,
+check the interface settings, include the conf.all settings and compare it with
+the documentation.
 
-1) Global configuration
+VMAC interface
 
-	net.ipv4.conf.all.arp_ignore = 1
-	net.ipv4.conf.all.arp_announce = 1
-	net.ipv4.conf.all.arp_filter = 0
-
-2) Physical interface configuration
-
-For the physical ethernet interface running VRRP instance use:
-
-net.ipv4.conf.eth0.arp_filter = 1
-
-3) VMAC interface
-
-consider the following VRRP configuration : 
+consider the following VRRP configuration :
 
 vrrp_instance instance1 {
 	state BACKUP
 	interface eth0
 	virtual_router_id 250
 	use_vmac
+	vmac_xmit_base         # Transmit VRRP adverts over physical interface
 	priority 150
 	advert_int 1
 	virtual_ipaddress {
@@ -63,11 +61,9 @@ named 'vrrp.250' (default internal paradigm is vrrp.{virtual_router_id}, you can
 override this naming by giving an argument to 'use_vmac' keyword, eg: use_vmac
 vrrp250).
 
-you then need to configure interface with :
-net.ipv4.conf.vrrp.250.arp_filter = 0
-net.ipv4.conf.vrrp.250.accept_local = 1 (this is needed for the address owner case)
-
-you can create notify_master script to automate this configuration step for you :
+If you need to change interface configuration settings, you can create notify_master
+script to automate this configuration step for you. You may also need to use a
+notify_backup script to set interface settings to apply before becoming master.
 
 vrrp_instance instance1 {
 	state BACKUP
diff --git a/tools/keepalived/doc/README.sphinx b/tools/keepalived/doc/README.sphinx
new file mode 100644
index 000000000..05ca42320
--- /dev/null
+++ b/tools/keepalived/doc/README.sphinx
@@ -0,0 +1,11 @@
+# To build the documentation with sphinx, the following packages were required
+# to be installed on Fedora 24:
+
+dnf install python-sphinx \ # this which will pull in python-sphinx_rtd_theme
+	texlive-cm texlive-ec texlive-times texlive-helvetic texlive-courier \
+	texlive-cmap texlive-fancyhdr texlive-fancybox texlive-titlesec texlive-framed texlive-threeparttable texlive-babel-english \
+	texlive-mdwtools texlive-wrapfig texlive-parskip texlive-upquote texlive-capt-of texlive-multirow texlive-eqparbox texlive-dvips
+
+On Fedora 25, the following are also required:
+	texlive-mfware-bin texlive-gsftopk-bin
+
diff --git a/tools/keepalived/doc/VRRP-MIB.txt b/tools/keepalived/doc/VRRP-MIB.txt
new file mode 100644
index 000000000..81a2f74ec
--- /dev/null
+++ b/tools/keepalived/doc/VRRP-MIB.txt
@@ -0,0 +1,792 @@
+VRRP-MIB DEFINITIONS ::= BEGIN
+
+ IMPORTS
+     MODULE-IDENTITY, OBJECT-TYPE,
+     NOTIFICATION-TYPE, Counter32,
+     Integer32, IpAddress, mib-2         FROM SNMPv2-SMI
+
+     TEXTUAL-CONVENTION, RowStatus,
+     MacAddress, TruthValue, TimeStamp   FROM SNMPv2-TC
+
+     MODULE-COMPLIANCE, OBJECT-GROUP,
+     NOTIFICATION-GROUP                  FROM SNMPv2-CONF
+     ifIndex                             FROM IF-MIB;
+
+
+ vrrpMIB  MODULE-IDENTITY
+     LAST-UPDATED "200003030000Z"
+     ORGANIZATION "IETF VRRP Working Group"
+     CONTACT-INFO
+            "Brian R. Jewell
+     Postal: Copper Mountain Networks, Inc.
+             2470 Embarcadero Way
+             Palo Alto, California 94303
+     Tel:    +1 650 687 3367
+     E-Mail: bjewell@coppermountain.com"
+
+     DESCRIPTION
+         "This MIB describes objects used for managing Virtual Router
+          Redundancy Protocol (VRRP) routers."
+     REVISION "200003030000Z"    -- 03 Mar 2000
+     DESCRIPTION "Initial version as published in RFC 2787."
+     ::= { mib-2 68 }
+
+-- *******************************************************************
+--  Textual Conventions
+-- *******************************************************************
+
+ VrId ::= TEXTUAL-CONVENTION
+     STATUS       current
+     DESCRIPTION
+         "A number which, along with an interface index (ifIndex),
+         serves to uniquely identify a virtual router on a given VRRP
+         router. A set of one or more associated addresses is assigned
+         to a VRID."
+     SYNTAX      Integer32 (1..255)
+
+-- *******************************************************************
+--  VRRP MIB Groups
+-- *******************************************************************
+
+ vrrpOperations      OBJECT IDENTIFIER ::= { vrrpMIB 1 }
+ vrrpStatistics      OBJECT IDENTIFIER ::= { vrrpMIB 2 }
+ vrrpConformance     OBJECT IDENTIFIER ::= { vrrpMIB 3 }
+
+
+-- *******************************************************************
+--  Start of MIB objects
+-- *******************************************************************
+
+ vrrpNodeVersion  OBJECT-TYPE
+     SYNTAX       Integer32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+        "This value identifies the particular version of the VRRP
+         supported by this node."
+     ::= { vrrpOperations 1 }
+
+ vrrpNotificationCntl  OBJECT-TYPE
+     SYNTAX       INTEGER {
+         enabled     (1),
+         disabled    (2)
+     }
+     MAX-ACCESS   read-write
+     STATUS       current
+     DESCRIPTION
+        "Indicates whether the VRRP-enabled router will generate
+         SNMP traps for events defined in this MIB. 'Enabled'
+         results in SNMP traps; 'disabled', no traps are sent."
+     DEFVAL { enabled }
+     ::= { vrrpOperations 2 }
+
+-- *******************************************************************
+--  VRRP Operations Table
+-- *******************************************************************
+
+ vrrpOperTable OBJECT-TYPE
+     SYNTAX       SEQUENCE OF VrrpOperEntry
+     MAX-ACCESS   not-accessible
+     STATUS       current
+     DESCRIPTION
+         "Operations table for a VRRP router which consists of a
+          sequence (i.e., one or more conceptual rows) of
+          'vrrpOperEntry' items."
+     ::= { vrrpOperations 3 }
+
+ vrrpOperEntry OBJECT-TYPE
+     SYNTAX       VrrpOperEntry
+     MAX-ACCESS   not-accessible
+     STATUS       current
+     DESCRIPTION
+         "An entry in the vrrpOperTable containing the operational
+          characteristics of a virtual router. On a VRRP router,
+          a given virtual router is identified by a combination
+          of the IF index and VRID.
+
+          Rows in the table cannot be modified unless the value
+          of `vrrpOperAdminState' is `disabled' and the
+          `vrrpOperState' has transitioned to `initialize'."
+
+     INDEX    { ifIndex, vrrpOperVrId }
+     ::= { vrrpOperTable 1 }
+
+ VrrpOperEntry ::=
+     SEQUENCE {
+         vrrpOperVrId
+             VrId,
+         vrrpOperVirtualMacAddr
+             MacAddress,
+         vrrpOperState
+             INTEGER,
+         vrrpOperAdminState
+             INTEGER,
+         vrrpOperPriority
+             Integer32,
+         vrrpOperIpAddrCount
+             Integer32,
+         vrrpOperMasterIpAddr
+             IpAddress,
+         vrrpOperPrimaryIpAddr
+             IpAddress,
+         vrrpOperAuthType
+             INTEGER,
+         vrrpOperAuthKey
+             OCTET STRING,
+         vrrpOperAdvertisementInterval
+             Integer32,
+         vrrpOperPreemptMode
+             TruthValue,
+         vrrpOperVirtualRouterUpTime
+             TimeStamp,
+         vrrpOperProtocol
+             INTEGER,
+         vrrpOperRowStatus
+             RowStatus
+ }
+
+ vrrpOperVrId OBJECT-TYPE
+     SYNTAX       VrId
+     MAX-ACCESS   not-accessible
+     STATUS       current
+     DESCRIPTION
+         "This object contains the Virtual Router Identifier (VRID)."
+     ::= { vrrpOperEntry 1 }
+
+ vrrpOperVirtualMacAddr OBJECT-TYPE
+     SYNTAX       MacAddress
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The virtual MAC address of the virtual router. Although this
+         object can be derived from the 'vrrpOperVrId' object, it is
+         defined so that it is easily obtainable by a management
+         application and can be included in VRRP-related SNMP traps."
+     ::= { vrrpOperEntry 2 }
+
+ vrrpOperState OBJECT-TYPE
+     SYNTAX       INTEGER {
+         initialize(1),
+         backup(2),
+         master(3)
+     }
+     MAX-ACCESS   read-only
+     STATUS       current
+
+     DESCRIPTION
+         "The current state of the virtual router. This object has
+         three defined values:
+
+           - `initialize', which indicates that all the
+             virtual router is waiting for a startup event.
+
+           - `backup', which indicates the virtual router is
+             monitoring the availability of the master router.
+
+           - `master', which indicates that the virtual router
+             is forwarding packets for IP addresses that are
+             associated with this router.
+
+         Setting the `vrrpOperAdminState' object (below) initiates
+         transitions in the value of this object."
+     ::= { vrrpOperEntry 3 }
+
+ vrrpOperAdminState OBJECT-TYPE
+     SYNTAX       INTEGER {
+         up(1),
+         down(2)
+     }
+     MAX-ACCESS   read-create
+     STATUS       current
+     DESCRIPTION
+         "This object will enable/disable the virtual router
+         function. Setting the value to `up', will transition
+         the state of the virtual router from `initialize' to `backup'
+         or `master', depending on the value of `vrrpOperPriority'.
+         Setting the value to `down', will transition  the
+         router from `master' or `backup' to `initialize'. State
+         transitions may not be immediate; they sometimes depend on
+         other factors, such as the interface (IF) state.
+
+         The `vrrpOperAdminState' object must be set to `down' prior
+         to modifying the other read-create objects in the conceptual
+         row. The value of the `vrrpOperRowStatus' object (below)
+         must be `active', signifying that the conceptual row
+         is valid (i.e., the objects are correctly set),
+         in order for this object to be set to `up'."
+     DEFVAL    { down }
+     ::= { vrrpOperEntry 4 }
+
+ vrrpOperPriority OBJECT-TYPE
+     SYNTAX       Integer32 (0..255)
+     MAX-ACCESS   read-create
+     STATUS       current
+     DESCRIPTION
+         "This object specifies the priority to be used for the
+         virtual router master election process. Higher values imply
+         higher priority.
+
+         A priority of '0', although not settable, is sent by
+         the master router to indicate that this router has ceased
+         to participate in VRRP and a backup virtual router should
+         transition  to become a new master.
+
+         A priority of 255 is used for the router that owns the
+         associated IP address(es)."
+     DEFVAL       { 100 }
+     ::= { vrrpOperEntry 5 }
+
+ vrrpOperIpAddrCount OBJECT-TYPE
+     SYNTAX       Integer32 (0..255)
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The number of IP addresses that are associated with this
+         virtual router. This number is equal to the number of rows
+         in the vrrpAssoIpAddrTable that correspond to a given IF
+         index/VRID pair."
+     ::= { vrrpOperEntry 6 }
+
+ vrrpOperMasterIpAddr OBJECT-TYPE
+     SYNTAX       IpAddress
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The master router's real (primary) IP address. This is
+         the IP address listed as the source in VRRP advertisement
+         last received by this virtual router."
+     ::= { vrrpOperEntry 7 }
+
+ vrrpOperPrimaryIpAddr OBJECT-TYPE
+     SYNTAX       IpAddress
+     MAX-ACCESS   read-create
+     STATUS       current
+     DESCRIPTION
+         "In the case where there is more than one IP address for
+         a given `ifIndex', this object is used to specify the IP
+         address that will become the `vrrpOperMasterIpAddr', should
+         the virtual router transition from backup to master. If
+         this object is set to 0.0.0.0, the IP address which is
+         numerically lowest will be selected."
+     DEFVAL       { '00000000'H } -- 0.0.0.0
+     ::= { vrrpOperEntry 8 }
+
+ vrrpOperAuthType OBJECT-TYPE
+     SYNTAX       INTEGER {
+         noAuthentication(1),       -- VRRP protocol exchanges are not
+                                    -- authenticated.
+         simpleTextPassword(2),     -- Exchanges are authenticated by a
+                                    -- clear text password.
+         ipAuthenticationHeader(3)  -- Exchanges are authenticated using
+                                    -- the IP authentication header.
+     }
+     MAX-ACCESS   read-create
+     STATUS       current
+     DESCRIPTION
+         "Authentication type used for VRRP protocol exchanges between
+         virtual routers. This value of this object is the same for a
+         given ifIndex.
+
+         New enumerations to this list can only be added via a new
+         RFC on the standards track."
+     DEFVAL       { noAuthentication }
+     ::= { vrrpOperEntry 9 }
+
+ vrrpOperAuthKey OBJECT-TYPE
+     SYNTAX       OCTET STRING (SIZE (0..16))
+     MAX-ACCESS   read-create
+     STATUS       current
+     DESCRIPTION
+         "The Authentication Key. This object is set according to
+         the value of the 'vrrpOperAuthType' object
+         ('simpleTextPassword' or 'ipAuthenticationHeader'). If the
+         length of the value is less than 16 octets, the agent will
+         left adjust and zero fill to 16 octets. The value of this
+         object is the same for a given ifIndex.
+
+         When read, vrrpOperAuthKey always returns an Octet String
+         of length zero."
+     ::= { vrrpOperEntry 10 }
+
+ vrrpOperAdvertisementInterval OBJECT-TYPE
+     SYNTAX       Integer32 (1..255)
+     UNITS        "seconds"
+     MAX-ACCESS   read-create
+     STATUS       current
+     DESCRIPTION
+         "The time interval, in seconds, between sending
+         advertisement messages. Only the master router sends
+         VRRP advertisements."
+     DEFVAL       { 1 }
+     ::= { vrrpOperEntry 11 }
+
+ vrrpOperPreemptMode OBJECT-TYPE
+     SYNTAX       TruthValue
+     MAX-ACCESS   read-create
+     STATUS       current
+     DESCRIPTION
+         "Controls whether a higher priority virtual router will
+         preempt a lower priority master."
+     DEFVAL       { true }
+     ::= { vrrpOperEntry 12 }
+
+ vrrpOperVirtualRouterUpTime OBJECT-TYPE
+     SYNTAX       TimeStamp
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "This is the value of the `sysUpTime' object when this
+         virtual router (i.e., the `vrrpOperState') transitioned
+         out of `initialized'."
+     ::= { vrrpOperEntry 13 }
+
+ vrrpOperProtocol OBJECT-TYPE
+     SYNTAX   INTEGER {
+         ip (1),
+         bridge (2),
+         decnet (3),
+         other (4)
+     }
+     MAX-ACCESS read-create
+     STATUS     current
+     DESCRIPTION
+         "The particular protocol being controlled by this Virtual
+         Router.
+
+         New enumerations to this list can only be added via a new
+         RFC on the standards track."
+     DEFVAL { ip }
+     ::= { vrrpOperEntry 14 }
+
+ vrrpOperRowStatus OBJECT-TYPE
+     SYNTAX       RowStatus
+     MAX-ACCESS   read-create
+     STATUS       current
+     DESCRIPTION
+         "The row status variable, used in accordance to installation
+         and removal conventions for conceptual rows. The rowstatus of
+         a currently active row in the vrrpOperTable is constrained
+         by the operational state of the corresponding virtual router.
+         When `vrrpOperRowStatus' is set to active(1), no other
+         objects in the conceptual row, with the exception of
+         `vrrpOperAdminState', can be modified. Prior to setting the
+         `vrrpOperRowStatus' object from `active' to a different value,
+         the `vrrpOperAdminState' object must be set to `down' and the
+         `vrrpOperState' object be transitioned to `initialize'.
+
+         To create a row in this table, a manager sets this object
+         to either createAndGo(4) or createAndWait(5). Until instances
+         of all corresponding columns are appropriately configured,
+         the value of the corresponding instance of the `vrrpOperRowStatus'
+         column will be read as notReady(3).
+         In particular, a newly created row cannot be made active(1)
+         until (minimally) the corresponding instance of
+         `vrrpOperVrId' has been set and there is at least one active
+         row in the `vrrpAssoIpAddrTable' defining an associated
+         IP address for the virtual router."
+     ::= { vrrpOperEntry 15 }
+
+
+-- *******************************************************************
+--  VRRP Associated IP Address Table
+-- *******************************************************************
+
+ vrrpAssoIpAddrTable OBJECT-TYPE
+     SYNTAX       SEQUENCE OF VrrpAssoIpAddrEntry
+     MAX-ACCESS   not-accessible
+     STATUS       current
+     DESCRIPTION
+         "The table of addresses associated with this virtual router."
+     ::= { vrrpOperations 4 }
+
+ vrrpAssoIpAddrEntry OBJECT-TYPE
+     SYNTAX       VrrpAssoIpAddrEntry
+     MAX-ACCESS   not-accessible
+     STATUS       current
+     DESCRIPTION
+         "An entry in the table contains an IP address that is
+         associated with a virtual router. The number of rows for
+         a given ifIndex and VrId will equal the number of IP
+         addresses associated (e.g., backed up) by the virtual
+         router (equivalent to 'vrrpOperIpAddrCount').
+
+         Rows in the table cannot be modified unless the value
+         of `vrrpOperAdminState' is `disabled' and the
+         `vrrpOperState' has transitioned to `initialize'."
+
+     INDEX    { ifIndex, vrrpOperVrId, vrrpAssoIpAddr }
+     ::= { vrrpAssoIpAddrTable 1 }
+
+ VrrpAssoIpAddrEntry ::=
+     SEQUENCE {
+         vrrpAssoIpAddr
+             IpAddress,
+         vrrpAssoIpAddrRowStatus
+             RowStatus
+ }
+
+ vrrpAssoIpAddr OBJECT-TYPE
+     SYNTAX       IpAddress
+     MAX-ACCESS   not-accessible
+     STATUS       current
+     DESCRIPTION
+         "The assigned IP addresses that a virtual router is
+         responsible for backing up."
+     ::= { vrrpAssoIpAddrEntry 1 }
+
+ vrrpAssoIpAddrRowStatus OBJECT-TYPE
+     SYNTAX       RowStatus
+     MAX-ACCESS   read-create
+     STATUS       current
+     DESCRIPTION
+         "The row status variable, used according to installation
+         and removal conventions for conceptual rows. Setting this
+         object to active(1) or createAndGo(4) results in the
+         addition of an associated address for a virtual router.
+         Destroying the entry or setting it to notInService(2)
+         removes the associated address from the virtual router.
+         The use of other values is implementation-dependent."
+     ::= { vrrpAssoIpAddrEntry 2 }
+
+
+-- *******************************************************************
+--  VRRP Router Statistics
+-- *******************************************************************
+
+ vrrpRouterChecksumErrors OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of VRRP packets received with an invalid
+         VRRP checksum value."
+     ::= { vrrpStatistics 1 }
+
+ vrrpRouterVersionErrors OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of VRRP packets received with an unknown
+         or unsupported version number."
+     ::= { vrrpStatistics 2 }
+
+ vrrpRouterVrIdErrors OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of VRRP packets received with an invalid
+         VRID for this virtual router."
+     ::= { vrrpStatistics 3 }
+
+-- *******************************************************************
+--  VRRP Router Statistics Table
+-- *******************************************************************
+
+ vrrpRouterStatsTable OBJECT-TYPE
+     SYNTAX       SEQUENCE OF VrrpRouterStatsEntry
+     MAX-ACCESS   not-accessible
+     STATUS       current
+     DESCRIPTION
+         "Table of virtual router statistics."
+     ::= { vrrpStatistics 4 }
+
+ vrrpRouterStatsEntry OBJECT-TYPE
+     SYNTAX       VrrpRouterStatsEntry
+     MAX-ACCESS   not-accessible
+     STATUS       current
+     DESCRIPTION
+         "An entry in the table, containing statistics information
+         about a given virtual router."
+     AUGMENTS    { vrrpOperEntry }
+     ::= { vrrpRouterStatsTable 1 }
+
+ VrrpRouterStatsEntry ::=
+     SEQUENCE {
+         vrrpStatsBecomeMaster
+             Counter32,
+         vrrpStatsAdvertiseRcvd
+             Counter32,
+         vrrpStatsAdvertiseIntervalErrors
+             Counter32,
+         vrrpStatsAuthFailures
+             Counter32,
+         vrrpStatsIpTtlErrors
+             Counter32,
+         vrrpStatsPriorityZeroPktsRcvd
+             Counter32,
+         vrrpStatsPriorityZeroPktsSent
+             Counter32,
+         vrrpStatsInvalidTypePktsRcvd
+             Counter32,
+         vrrpStatsAddressListErrors
+             Counter32,
+         vrrpStatsInvalidAuthType
+             Counter32,
+         vrrpStatsAuthTypeMismatch
+             Counter32,
+         vrrpStatsPacketLengthErrors
+             Counter32
+     }
+
+ vrrpStatsBecomeMaster OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of times that this virtual router's state
+         has transitioned to MASTER."
+     ::= { vrrpRouterStatsEntry 1 }
+
+ vrrpStatsAdvertiseRcvd OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of VRRP advertisements received by this
+         virtual router."
+     ::= { vrrpRouterStatsEntry 2 }
+
+ vrrpStatsAdvertiseIntervalErrors OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of VRRP advertisement packets received
+         for which the advertisement interval is different than the
+         one configured for the local virtual router."
+     ::= { vrrpRouterStatsEntry 3 }
+
+ vrrpStatsAuthFailures OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of VRRP packets received that do not pass
+         the authentication check."
+     ::= { vrrpRouterStatsEntry 4 }
+
+ vrrpStatsIpTtlErrors OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of VRRP packets received by the virtual
+         router with IP TTL (Time-To-Live) not equal to 255."
+     ::= { vrrpRouterStatsEntry 5 }
+
+ vrrpStatsPriorityZeroPktsRcvd OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of VRRP packets received by the virtual
+         router with a priority of '0'."
+     ::= { vrrpRouterStatsEntry 6 }
+
+ vrrpStatsPriorityZeroPktsSent OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of VRRP packets sent by the virtual router
+         with a priority of '0'."
+     ::= { vrrpRouterStatsEntry 7 }
+
+ vrrpStatsInvalidTypePktsRcvd OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The number of VRRP packets received by the virtual router
+         with an invalid value in the 'type' field."
+     ::= { vrrpRouterStatsEntry 8 }
+
+ vrrpStatsAddressListErrors OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of packets received for which the address
+         list does not match the locally configured list for the
+         virtual router."
+     ::= { vrrpRouterStatsEntry 9 }
+
+ vrrpStatsInvalidAuthType OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of packets received with an unknown
+         authentication type."
+     ::= { vrrpRouterStatsEntry 10 }
+
+ vrrpStatsAuthTypeMismatch OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of packets received with 'Auth Type' not
+         equal to the locally configured authentication method
+         (`vrrpOperAuthType')."
+     ::= { vrrpRouterStatsEntry 11 }
+
+ vrrpStatsPacketLengthErrors OBJECT-TYPE
+     SYNTAX       Counter32
+     MAX-ACCESS   read-only
+     STATUS       current
+     DESCRIPTION
+         "The total number of packets received with a packet length
+         less than the length of the VRRP header."
+     ::= { vrrpRouterStatsEntry 12 }
+
+-- *******************************************************************
+--   Trap Definitions
+-- *******************************************************************
+
+ vrrpNotifications   OBJECT IDENTIFIER ::= { vrrpMIB 0 }
+
+ vrrpTrapPacketSrc OBJECT-TYPE
+     SYNTAX       IpAddress
+     MAX-ACCESS   accessible-for-notify
+     STATUS       current
+     DESCRIPTION
+         "The IP address of an inbound VRRP packet. Used by
+          vrrpTrapAuthFailure trap."
+     ::= { vrrpOperations 5 }
+
+ vrrpTrapAuthErrorType OBJECT-TYPE
+     SYNTAX        INTEGER {
+         invalidAuthType (1),
+         authTypeMismatch (2),
+         authFailure (3)
+     }
+     MAX-ACCESS   accessible-for-notify
+     STATUS       current
+     DESCRIPTION
+         "Potential types of configuration conflicts.
+         Used by vrrpAuthFailure trap."
+     ::= { vrrpOperations 6 }
+
+ vrrpTrapNewMaster NOTIFICATION-TYPE
+     OBJECTS      { vrrpOperMasterIpAddr
+                  }
+     STATUS       current
+     DESCRIPTION
+         "The newMaster trap indicates that the sending agent
+         has transitioned to 'Master' state."
+     ::= { vrrpNotifications 1 }
+
+ vrrpTrapAuthFailure NOTIFICATION-TYPE
+     OBJECTS      { vrrpTrapPacketSrc,
+                    vrrpTrapAuthErrorType
+                  }
+     STATUS       current
+     DESCRIPTION
+         "A vrrpAuthFailure trap signifies that a packet has
+         been received from a router whose authentication key
+         or authentication type conflicts with this router's
+         authentication key or authentication type. Implementation
+         of this trap is optional."
+     ::= { vrrpNotifications 2 }
+
+
+-- *******************************************************************
+--  Conformance Information
+-- *******************************************************************
+
+ vrrpMIBCompliances  OBJECT IDENTIFIER ::= { vrrpConformance 1 }
+ vrrpMIBGroups       OBJECT IDENTIFIER ::= { vrrpConformance 2 }
+
+-- ...................................................................
+-- Compliance Statements
+-- ...................................................................
+
+ vrrpMIBCompliance MODULE-COMPLIANCE
+     STATUS current
+     DESCRIPTION
+        "The core compliance statement for all VRRP implementations."
+     MODULE -- this module
+     MANDATORY-GROUPS  {
+         vrrpOperGroup,
+         vrrpStatsGroup
+     }
+     OBJECT        vrrpOperPriority
+     WRITE-SYNTAX  Integer32 (1..255)
+     DESCRIPTION  "SETable values are from 1 to 255."
+     ::= { vrrpMIBCompliances 1 }
+
+-- ...................................................................
+-- Conformance Groups
+-- ...................................................................
+
+ vrrpOperGroup  OBJECT-GROUP
+     OBJECTS  {
+         vrrpNodeVersion,
+         vrrpNotificationCntl,
+         vrrpOperVirtualMacAddr,
+         vrrpOperState,
+         vrrpOperAdminState,
+         vrrpOperPriority,
+         vrrpOperIpAddrCount,
+         vrrpOperMasterIpAddr,
+         vrrpOperPrimaryIpAddr,
+         vrrpOperAuthType,
+         vrrpOperAuthKey,
+         vrrpOperAdvertisementInterval,
+         vrrpOperPreemptMode,
+         vrrpOperVirtualRouterUpTime,
+         vrrpOperProtocol,
+         vrrpOperRowStatus,
+         vrrpAssoIpAddrRowStatus
+         }
+     STATUS current
+     DESCRIPTION
+        "Conformance group for VRRP operations."
+     ::= { vrrpMIBGroups 1 }
+
+ vrrpStatsGroup  OBJECT-GROUP
+     OBJECTS  {
+         vrrpRouterChecksumErrors,
+         vrrpRouterVersionErrors,
+         vrrpRouterVrIdErrors,
+         vrrpStatsBecomeMaster,
+         vrrpStatsAdvertiseRcvd,
+         vrrpStatsAdvertiseIntervalErrors,
+         vrrpStatsAuthFailures,
+         vrrpStatsIpTtlErrors,
+         vrrpStatsPriorityZeroPktsRcvd,
+         vrrpStatsPriorityZeroPktsSent,
+         vrrpStatsInvalidTypePktsRcvd,
+         vrrpStatsAddressListErrors,
+         vrrpStatsInvalidAuthType,
+         vrrpStatsAuthTypeMismatch,
+         vrrpStatsPacketLengthErrors
+         }
+     STATUS current
+     DESCRIPTION
+        "Conformance group for VRRP statistics."
+     ::= { vrrpMIBGroups 2 }
+
+ vrrpTrapGroup  OBJECT-GROUP
+     OBJECTS  {
+         vrrpTrapPacketSrc,
+         vrrpTrapAuthErrorType
+         }
+     STATUS current
+     DESCRIPTION
+        "Conformance group for objects contained in VRRP notifications."
+     ::= { vrrpMIBGroups 3 }
+
+ vrrpNotificationGroup NOTIFICATION-GROUP
+     NOTIFICATIONS {
+         vrrpTrapNewMaster,
+         vrrpTrapAuthFailure
+         }
+     STATUS current
+     DESCRIPTION
+        "The VRRP MIB Notification Group."
+     ::= { vrrpMIBGroups 4 }
+
+END
diff --git a/tools/keepalived/doc/VRRPv3-MIB.txt b/tools/keepalived/doc/VRRPv3-MIB.txt
new file mode 100644
index 000000000..5b935f822
--- /dev/null
+++ b/tools/keepalived/doc/VRRPv3-MIB.txt
@@ -0,0 +1,955 @@
+VRRPV3-MIB DEFINITIONS ::= BEGIN
+
+    IMPORTS
+        MODULE-IDENTITY, OBJECT-TYPE,
+        NOTIFICATION-TYPE, Counter32,
+        Integer32, mib-2, Unsigned32,
+        Counter64, TimeTicks
+            FROM SNMPv2-SMI                 -- RFC2578
+
+        TEXTUAL-CONVENTION, RowStatus,
+        MacAddress, TruthValue, TimeStamp,
+        TimeInterval
+            FROM SNMPv2-TC                  -- RFC2579
+
+        MODULE-COMPLIANCE, OBJECT-GROUP,
+        NOTIFICATION-GROUP
+            FROM SNMPv2-CONF                -- RFC2580
+
+        ifIndex
+            FROM IF-MIB                     -- RFC2863
+
+        InetAddressType, InetAddress
+            FROM INET-ADDRESS-MIB;          -- RFC4001
+
+   vrrpv3MIB  MODULE-IDENTITY
+        LAST-UPDATED "201708140000Z"         -- Aug 14, 2017
+        ORGANIZATION "IETF VRRP Working Group"
+        CONTACT-INFO
+               "WG E-Mail: vrrp@ietf.org
+
+                Editor:    Kalyan Tata
+                           Nokia
+                           313 Fairchild Dr,
+                           Mountain View, CA 94043
+                           Tata_kalyan@yahoo.com"
+
+        DESCRIPTION
+            "This MIB describes objects used for managing Virtual
+             Router Redundancy Protocol version 3 (VRRPv3).
+
+             Copyright (c) 2012 IETF Trust and the persons
+             identified as authors of the code.  All rights
+             reserved.
+
+             Redistribution and use in source and binary forms,
+             with or without modification, is permitted pursuant
+             to, and subject to the license terms contained in,
+             the Simplified BSD License set forth in Section
+             4.c of the IETF Trust's Legal Provisions Relating
+             to IETF Documents
+             (http://trustee.ietf.org/license-info).
+
+             This version of the MIB module is part of RFC 6527.
+             Please see the RFC for full legal notices."
+
+        REVISION "201708140000Z"    -- Aug 14, 2017
+        DESCRIPTION "Apply RFC 6527 errata id 4168 and 5086."
+
+        REVISION "201202130000Z"    -- Feb 13, 2012
+        DESCRIPTION "Initial version as published in RFC 6527."
+
+        ::= { mib-2 207 }
+
+-- Textual Conventions
+
+   Vrrpv3VrIdTC ::= TEXTUAL-CONVENTION
+        DISPLAY-HINT "d"
+        STATUS       current
+        DESCRIPTION
+            "The value of the Virtual Router Identifier noted as
+            (VRID) in RFC 5798.  This, along with interface index
+            (ifIndex) and IP version, serves to uniquely identify
+            a virtual router on a given VRRP router."
+        REFERENCE "RFC 5798 (Sections 3 and 5.2.3)"
+        SYNTAX      Integer32 (1..255)
+
+--  VRRPv3 MIB Groups
+
+   vrrpv3Notifications   OBJECT IDENTIFIER ::= { vrrpv3MIB 0 }
+   vrrpv3Objects         OBJECT IDENTIFIER ::= { vrrpv3MIB 1 }
+   vrrpv3Conformance     OBJECT IDENTIFIER ::= { vrrpv3MIB 2 }
+
+-- VRRPv3 MIB Objects
+
+   vrrpv3Operations      OBJECT IDENTIFIER ::= { vrrpv3Objects 1 }
+   vrrpv3Statistics      OBJECT IDENTIFIER ::= { vrrpv3Objects 2 }
+
+--  VRRPv3 Operations Table
+
+    vrrpv3OperationsTable OBJECT-TYPE
+        SYNTAX       SEQUENCE OF Vrrpv3OperationsEntry
+        MAX-ACCESS   not-accessible
+        STATUS       current
+        DESCRIPTION
+            "Unified Operations table for a VRRP router that
+             consists of a sequence (i.e., one or more conceptual
+             rows) of 'vrrpv3OperationsEntry' items each of which
+             describe the operational characteristics of a virtual
+             router."
+
+        ::= { vrrpv3Operations 1 }
+
+    vrrpv3OperationsEntry OBJECT-TYPE
+        SYNTAX       Vrrpv3OperationsEntry
+        MAX-ACCESS   not-accessible
+        STATUS       current
+        DESCRIPTION
+            "An entry in the vrrpv3OperationsTable containing the
+             operational characteristics of a virtual router.
+             On a VRRP router, a given virtual router is
+             identified by a combination of ifIndex, VRID, and
+             the IP version.  ifIndex represents an interface of
+             the router.
+
+             A row must be created with vrrpv3OperationsStatus
+             set to initialize(1) and cannot transition to
+             backup(2) or master(3) until
+             vrrpv3OperationsRowStatus is transitioned to
+             active(1).
+
+             The information in this table is persistent and when
+             written the entity SHOULD save the change to non-
+             volatile storage."
+
+        INDEX    { ifIndex, vrrpv3OperationsVrId,
+                   vrrpv3OperationsInetAddrType
+                  }
+        ::= { vrrpv3OperationsTable 1 }
+
+    Vrrpv3OperationsEntry ::=
+
+        SEQUENCE {
+            vrrpv3OperationsVrId
+                Vrrpv3VrIdTC,
+            vrrpv3OperationsInetAddrType
+                InetAddressType,
+            vrrpv3OperationsMasterIpAddr
+                InetAddress,
+            vrrpv3OperationsPrimaryIpAddr
+                InetAddress,
+            vrrpv3OperationsVirtualMacAddr
+                MacAddress,
+            vrrpv3OperationsStatus
+                INTEGER,
+            vrrpv3OperationsPriority
+                Unsigned32,
+            vrrpv3OperationsAddrCount
+                Integer32,
+            vrrpv3OperationsAdvInterval
+                TimeInterval,
+            vrrpv3OperationsPreemptMode
+                TruthValue,
+            vrrpv3OperationsAcceptMode
+                TruthValue,
+            vrrpv3OperationsUpTime
+                TimeTicks,
+            vrrpv3OperationsRowStatus
+                RowStatus
+    }
+    vrrpv3OperationsVrId OBJECT-TYPE
+        SYNTAX       Vrrpv3VrIdTC
+        MAX-ACCESS   not-accessible
+        STATUS       current
+        DESCRIPTION
+            "This object contains the Virtual Router Identifier
+             (VRID)."
+        REFERENCE "RFC 4001"
+        ::= { vrrpv3OperationsEntry 1 }
+
+    vrrpv3OperationsInetAddrType OBJECT-TYPE
+        SYNTAX       InetAddressType
+        MAX-ACCESS   not-accessible
+        STATUS       current
+        DESCRIPTION
+           "The IP address type of Vrrpv3OperationsEntry and
+            Vrrpv3AssociatedIpAddrEntry.  This value determines
+            the type for vrrpv3OperationsMasterIpAddr,
+            vrrpv3OperationsPrimaryIpAddr, and
+            vrrpv3AssociatedIpAddrAddress.
+
+             ipv4(1) and ipv6(2) are the only two values supported
+             in this MIB module."
+        REFERENCE "RFC 4001"
+        ::= { vrrpv3OperationsEntry 2 }
+
+    vrrpv3OperationsMasterIpAddr OBJECT-TYPE
+        SYNTAX       InetAddress
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+          "The master router's real IP address.  The master router
+          would set this address to vrrpv3OperationsPrimaryIpAddr
+          while transitioning to master state.  For backup
+          routers, this is the IP address listed as the source in
+          the VRRP advertisement last received by this virtual
+          router."
+        REFERENCE "RFC 5798"
+        ::= { vrrpv3OperationsEntry 3 }
+
+    vrrpv3OperationsPrimaryIpAddr OBJECT-TYPE
+        SYNTAX       InetAddress
+        MAX-ACCESS   read-create
+        STATUS       current
+        DESCRIPTION
+            "In the case where there is more than one IP
+            Address (associated IP addresses) for a given
+            'ifIndex', this object is used to specify the IP
+            address that will become the
+            vrrpv3OperationsMasterIpAddr', should the virtual
+            router transition from backup state to master."
+        ::= { vrrpv3OperationsEntry 4 }
+
+    vrrpv3OperationsVirtualMacAddr OBJECT-TYPE
+        SYNTAX       MacAddress
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+           "The virtual MAC address of the virtual router.
+           Although this object can be derived from the
+           'vrrpv3OperationsVrId' object, it is defined so that it
+           is easily obtainable by a management application and
+           can be included in VRRP-related SNMP notifications."
+        ::= { vrrpv3OperationsEntry 5 }
+
+    vrrpv3OperationsStatus OBJECT-TYPE
+        SYNTAX       INTEGER {
+            initialize(1),
+            backup(2),
+            master(3)
+        }
+        MAX-ACCESS   read-only
+        STATUS       current
+
+        DESCRIPTION
+            "The current state of the virtual router.  This object
+            has three defined values:
+
+            - 'initialize', which indicates that the
+               virtual router is waiting for a startup event.
+
+            - 'backup', which indicates that the virtual router is
+               monitoring the availability of the master router.
+
+            - 'master', which indicates that the virtual router
+               is forwarding packets for IP addresses that are
+               associated with this router."
+        REFERENCE "RFC 5798"
+        ::= { vrrpv3OperationsEntry 6 }
+
+    vrrpv3OperationsPriority OBJECT-TYPE
+        SYNTAX       Unsigned32 (0..255)
+        MAX-ACCESS   read-create
+        STATUS       current
+        DESCRIPTION
+          "This object specifies the priority to be used for the
+          virtual router master election process; higher values
+          imply higher priority.
+
+          A priority of '0', although not settable, is sent by
+          the master router to indicate that this router has
+          ceased to participate in VRRP, and a backup virtual
+          router should transition to become a new master.
+
+          A priority of 255 is used for the router that owns the
+          associated IP address(es) for VRRP over IPv4 and hence
+          is not settable.
+
+          Setting the values of this object to 0 or 255 should be
+          rejected by the agents implementing this MIB module.
+          For example, an SNMP agent would return 'badValue(3)'
+          when a user tries to set the values 0 or 255 for this
+          object."
+
+        REFERENCE "RFC 5798, Section 6.1"
+        DEFVAL       { 100 }
+        ::= { vrrpv3OperationsEntry 7 }
+
+    vrrpv3OperationsAddrCount OBJECT-TYPE
+        SYNTAX       Integer32 (0..255)
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "The number of IP addresses that are associated with
+            this virtual router.  This number is equal to the
+            number of rows in the vrrpv3AssociatedAddrTable that
+            correspond to a given ifIndex/VRID/IP version."
+        REFERENCE "RFC 5798, Section 6.1"
+        ::= { vrrpv3OperationsEntry 8 }
+
+    vrrpv3OperationsAdvInterval OBJECT-TYPE
+        SYNTAX       TimeInterval (1..4095)
+        UNITS        "centiseconds"
+        MAX-ACCESS   read-create
+        STATUS       current
+        DESCRIPTION
+            "The time interval, in centiseconds, between sending
+            advertisement messages.  Only the master router sends
+            VRRP advertisements."
+        REFERENCE "RFC 5798, Section 6.1"
+        DEFVAL       { 100}
+        ::= { vrrpv3OperationsEntry 9 }
+
+    vrrpv3OperationsPreemptMode OBJECT-TYPE
+        SYNTAX       TruthValue
+        MAX-ACCESS   read-create
+        STATUS       current
+        DESCRIPTION
+          "Controls whether a higher priority virtual router will
+          preempt a lower priority master."
+        REFERENCE "RFC 5798, Section 6.1"
+        DEFVAL       { true }
+        ::= { vrrpv3OperationsEntry 10 }
+
+    vrrpv3OperationsAcceptMode OBJECT-TYPE
+        SYNTAX       TruthValue
+        MAX-ACCESS   read-create
+        STATUS       current
+        DESCRIPTION
+           "Controls whether a virtual router in master state
+           will accept packets addressed to the address owner's
+           address as its own if it is not the address
+           owner.  Default is false(2)."
+        DEFVAL       { false }
+        ::= { vrrpv3OperationsEntry 11 }
+
+    vrrpv3OperationsUpTime OBJECT-TYPE
+        SYNTAX       TimeTicks
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "This value represents the amount of time, in
+            TimeTicks (hundredth of a second), since this virtual
+            router (i.e., the 'vrrpv3OperationsStatus')
+            transitioned out of 'initialize'."
+        REFERENCE "RFC 5798, Section 6.1"
+        ::= { vrrpv3OperationsEntry 12 }
+
+    vrrpv3OperationsRowStatus OBJECT-TYPE
+        SYNTAX       RowStatus
+        MAX-ACCESS   read-create
+        STATUS       current
+        DESCRIPTION
+          "The RowStatus variable should be used in accordance to
+           installation and removal conventions for conceptual
+           rows.
+
+           To create a row in this table, a manager sets this
+           object to either createAndGo(4) or createAndWait(5).
+           Until instances of all corresponding columns are
+           appropriately configured, the value of the
+           corresponding instance of the
+           'vrrpv3OperationsRowStatus' column will be read as
+           notReady(3).
+           In particular, a newly created row cannot be made
+           active(1) until (minimally) the corresponding instance
+           of vrrpv3OperationsInetAddrType, vrrpv3OperationsVrId,
+           and vrrpv3OperationsPrimaryIpAddr has been set, and
+           there is at least one active row in the
+           'vrrpv3AssociatedIpAddrTable' defining an associated
+           IP address.
+
+           notInService(2) should be used to administratively
+           bring the row down.
+
+           A typical order of operation to add a row is:
+           1. Create a row in vrrpv3OperationsTable with
+           createAndWait(5).
+           2. Create one or more corresponding rows in
+           vrrpv3AssociatedIpAddrTable.
+           3. Populate the vrrpv3OperationsEntry.
+           4. Set vrrpv3OperationsRowStatus to active(1).
+
+           A typical order of operation to delete an entry is:
+           1. Set vrrpv3OperationsRowStatus to notInService(2).
+           2. Set the corresponding rows in
+           vrrpv3AssociatedIpAddrTable to destroy(6) to delete
+           the entry.
+           3. Set vrrpv3OperationsRowStatus to destroy(6) to
+           delete the entry."
+        ::= { vrrpv3OperationsEntry 13 }
+
+--  VRRP Associated Address Table
+
+    vrrpv3AssociatedIpAddrTable OBJECT-TYPE
+        SYNTAX       SEQUENCE OF Vrrpv3AssociatedIpAddrEntry
+        MAX-ACCESS   not-accessible
+        STATUS       current
+        DESCRIPTION
+            "The table of addresses associated with each virtual
+             router."
+        ::= { vrrpv3Operations 2 }
+
+    vrrpv3AssociatedIpAddrEntry OBJECT-TYPE
+        SYNTAX       Vrrpv3AssociatedIpAddrEntry
+        MAX-ACCESS   not-accessible
+        STATUS       current
+        DESCRIPTION
+           "An entry in the table contains an IP address that is
+           associated with a virtual router.  The number of rows
+           for a given IP version, VrID, and ifIndex will equal
+           the number of IP addresses associated (e.g., backed up)
+           by the virtual router (equivalent to
+           'vrrpv3OperationsIpAddrCount').
+
+           Rows in the table cannot be modified unless the value
+           of 'vrrpv3OperationsStatus' for the corresponding entry
+           in the vrrpv3OperationsTable has transitioned to
+           initialize(1).
+
+           The information in this table is persistent and when
+           written the entity SHOULD save the change to non-
+           volatile storage."
+
+        INDEX    { ifIndex, vrrpv3OperationsVrId,
+                   vrrpv3OperationsInetAddrType,
+                   vrrpv3AssociatedIpAddrAddress }
+
+        ::= { vrrpv3AssociatedIpAddrTable 1 }
+
+    Vrrpv3AssociatedIpAddrEntry ::=
+        SEQUENCE {
+            vrrpv3AssociatedIpAddrAddress
+
+                InetAddress,
+            vrrpv3AssociatedIpAddrRowStatus
+                RowStatus
+    }
+
+    vrrpv3AssociatedIpAddrAddress OBJECT-TYPE
+        SYNTAX       InetAddress (SIZE (0|4|16))
+        MAX-ACCESS   not-accessible
+        STATUS       current
+        DESCRIPTION
+            "The assigned IP addresses that a virtual router is
+            responsible for backing up.
+
+            The IP address type is determined by the value of
+            vrrpv3OperationsInetAddrType in the index of this
+            row."
+        REFERENCE "RFC 5798"
+        ::= { vrrpv3AssociatedIpAddrEntry 1 }
+
+    vrrpv3AssociatedIpAddrRowStatus OBJECT-TYPE
+        SYNTAX       RowStatus
+        MAX-ACCESS   read-create
+        STATUS       current
+        DESCRIPTION
+          "The row status variable, used according to
+          installation and removal conventions for conceptual
+          rows.  To create a row in this table, a manager sets
+          this object to either createAndGo(4) or
+          createAndWait(5).  Setting this object to active(1)
+          results in the addition of an associated address for a
+          virtual router.  Setting this object to notInService(2)
+          results in administratively bringing down the row.
+
+          Destroying the entry or setting it to destroy(6)
+          removes the associated address from the virtual router.
+          The use of other values is implementation-dependent.
+
+          Implementations should not allow deletion of the last
+          row corresponding to an active row in
+          vrrpv3OperationsTable.
+
+          Refer to the description of vrrpv3OperationsRowStatus
+          for typical row creation and deletion scenarios."
+        ::= { vrrpv3AssociatedIpAddrEntry 2 }
+
+--  VRRP Router Statistics
+
+    vrrpv3RouterChecksumErrors OBJECT-TYPE
+        SYNTAX       Counter64
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "The total number of VRRP packets received with an
+            invalid VRRP checksum value.
+
+            Discontinuities in the value of this counter can occur
+            at re-initialization of the management system, and at
+            other times as indicated by the value of
+            vrrpv3GlobalStatisticsDiscontinuityTime."
+
+        REFERENCE "RFC 5798, Section 5.2.8"
+        ::= { vrrpv3Statistics 1 }
+
+    vrrpv3RouterVersionErrors OBJECT-TYPE
+        SYNTAX       Counter64
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "The total number of VRRP packets received with an
+            unknown or unsupported version number.
+
+            Discontinuities in the value of this counter can occur
+            at re-initialization of the management system, and at
+            other times as indicated by the value of
+            vrrpv3GlobalStatisticsDiscontinuityTime."
+
+        REFERENCE "RFC 5798, Section 5.2.1"
+        ::= { vrrpv3Statistics 2 }
+
+    vrrpv3RouterVrIdErrors OBJECT-TYPE
+        SYNTAX       Counter64
+        MAX-ACCESS   read-only
+       STATUS       current
+        DESCRIPTION
+            "The total number of VRRP packets received with a
+             VRID that is not valid for any virtual router on this
+             router.
+
+            Discontinuities in the value of this counter can occur
+            at re-initialization of the management system, and at
+            other times as indicated by the value of
+            vrrpv3GlobalStatisticsDiscontinuityTime."
+
+        REFERENCE "RFC 5798, Section 5.2.3"
+        ::= { vrrpv3Statistics 3 }
+
+   vrrpv3GlobalStatisticsDiscontinuityTime OBJECT-TYPE
+       SYNTAX     TimeStamp
+       MAX-ACCESS read-only
+       STATUS     current
+       DESCRIPTION
+         "The value of sysUpTime on the most recent occasion at
+          which one of vrrpv3RouterChecksumErrors,
+          vrrpv3RouterVersionErrors, and vrrpv3RouterVrIdErrors
+          suffered a discontinuity.
+
+          If no such discontinuities have occurred since the last
+          re-initialization of the local management subsystem,
+          then this object contains a zero value."
+
+       ::= { vrrpv3Statistics 4 }
+
+--  VRRP Router Statistics Table
+
+    vrrpv3StatisticsTable OBJECT-TYPE
+        SYNTAX       SEQUENCE OF Vrrpv3StatisticsEntry
+        MAX-ACCESS   not-accessible
+        STATUS       current
+        DESCRIPTION
+            "Table of virtual router statistics."
+        ::= { vrrpv3Statistics 5 }
+
+    vrrpv3StatisticsEntry OBJECT-TYPE
+        SYNTAX       Vrrpv3StatisticsEntry
+        MAX-ACCESS   not-accessible
+        STATUS       current
+        DESCRIPTION
+            "An entry in the table containing statistics
+            information about a given virtual router."
+        AUGMENTS    { vrrpv3OperationsEntry }
+        ::= { vrrpv3StatisticsTable 1 }
+
+    Vrrpv3StatisticsEntry ::=
+        SEQUENCE {
+            vrrpv3StatisticsMasterTransitions
+                Counter32,
+            vrrpv3StatisticsNewMasterReason
+                INTEGER,
+            vrrpv3StatisticsRcvdAdvertisements
+                Counter64,
+            vrrpv3StatisticsAdvIntervalErrors
+                Counter64,
+            vrrpv3StatisticsIpTtlErrors
+                Counter64,
+            vrrpv3StatisticsProtoErrReason
+                INTEGER,
+            vrrpv3StatisticsRcvdPriZeroPackets
+                Counter64,
+            vrrpv3StatisticsSentPriZeroPackets
+                Counter64,
+            vrrpv3StatisticsRcvdInvalidTypePackets
+                Counter64,
+            vrrpv3StatisticsAddressListErrors
+                Counter64,
+            vrrpv3StatisticsPacketLengthErrors
+                Counter64,
+            vrrpv3StatisticsRowDiscontinuityTime
+                 TimeStamp,
+            vrrpv3StatisticsRefreshRate
+                 Unsigned32
+        }
+
+    vrrpv3StatisticsMasterTransitions OBJECT-TYPE
+        SYNTAX       Counter32
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "The total number of times that this virtual router's
+            state has transitioned to master state.
+
+            Discontinuities in the value of this counter can occur
+            at re-initialization of the management system, and at
+            other times as indicated by the value of
+            vrrpv3StatisticsRowDiscontinuityTime."
+        ::= { vrrpv3StatisticsEntry 1 }
+
+   vrrpv3StatisticsNewMasterReason OBJECT-TYPE
+        SYNTAX        INTEGER {
+            notMaster (0),
+            priority  (1),
+            preempted (2),
+            masterNoResponse (3)
+        }
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+           "This indicates the reason for the virtual router to
+           transition to master state.  If the virtual router
+           never transitioned to master state, the value of this
+           object is notMaster(0).  Otherwise, this indicates the
+           reason this virtual router transitioned to master
+           state the last time.  Used by vrrpv3NewMaster
+           notification."
+        ::= { vrrpv3StatisticsEntry 2 }
+
+    vrrpv3StatisticsRcvdAdvertisements OBJECT-TYPE
+        SYNTAX       Counter64
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "The total number of VRRP advertisements received by
+            this virtual router.
+
+            Discontinuities in the value of this counter can occur
+            at re-initialization of the management system, and at
+            other times as indicated by the value of
+            vrrpv3StatisticsRowDiscontinuityTime."
+
+        ::= { vrrpv3StatisticsEntry 3 }
+
+    vrrpv3StatisticsAdvIntervalErrors OBJECT-TYPE
+        SYNTAX       Counter64
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "The total number of VRRP advertisement packets
+            received for which the advertisement interval is
+            different from the vrrpv3OperationsAdvInterval
+            configured on this virtual router.
+
+            Discontinuities in the value of this counter can occur
+            at re-initialization of the management system, and at
+            other times as indicated by the value of
+            vrrpv3StatisticsRowDiscontinuityTime."
+
+        ::= { vrrpv3StatisticsEntry 4 }
+
+    vrrpv3StatisticsIpTtlErrors OBJECT-TYPE
+        SYNTAX       Counter64
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "The total number of VRRP packets received by the
+            virtual router with IPv4 TTL (for VRRP over IPv4) or
+            IPv6 Hop Limit (for VRRP over IPv6) not equal to 255.
+
+            Discontinuities in the value of this counter can occur
+            at re-initialization of the management system, and at
+            other times as indicated by the value of
+            vrrpv3StatisticsRowDiscontinuityTime."
+        REFERENCE "RFC 5798, Section 5.1.1.3"
+        ::= { vrrpv3StatisticsEntry 5 }
+
+   vrrpv3StatisticsProtoErrReason OBJECT-TYPE
+        SYNTAX        INTEGER {
+            noError (0),
+            ipTtlError (1),
+            versionError  (2),
+            checksumError (3),
+            vrIdError(4)
+        }
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "This indicates the reason for the last protocol
+            error.  This SHOULD be set to noError(0) when no
+            protocol errors are encountered.  Used by
+            vrrpv3ProtoError notification."
+        ::= { vrrpv3StatisticsEntry 6 }
+
+    vrrpv3StatisticsRcvdPriZeroPackets OBJECT-TYPE
+        SYNTAX       Counter64
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "The total number of VRRP packets received by the
+            virtual router with a priority of '0'.
+
+            Discontinuities in the value of this counter can occur
+            at re-initialization of the management system, and at
+            other times as indicated by the value of
+            vrrpv3StatisticsRowDiscontinuityTime."
+        REFERENCE "RFC 5798, Section 5.2.4"
+        ::= { vrrpv3StatisticsEntry 7 }
+
+    vrrpv3StatisticsSentPriZeroPackets OBJECT-TYPE
+        SYNTAX       Counter64
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "The total number of VRRP packets sent by the virtual
+            router with a priority of '0'.
+
+            Discontinuities in the value of this counter can occur
+            at re-initialization of the management system, and at
+            other times as indicated by the value of
+            vrrpv3StatisticsRowDiscontinuityTime."
+        REFERENCE "RFC 5798, Section 5.2.4"
+        ::= { vrrpv3StatisticsEntry 8 }
+
+    vrrpv3StatisticsRcvdInvalidTypePackets OBJECT-TYPE
+        SYNTAX       Counter64
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "The number of VRRP packets received by the virtual
+            router with an invalid value in the 'type' field.
+
+            Discontinuities in the value of this counter can occur
+            at re-initialization of the management system, and at
+            other times as indicated by the value of
+            vrrpv3StatisticsRowDiscontinuityTime."
+        ::= { vrrpv3StatisticsEntry 9 }
+
+    vrrpv3StatisticsAddressListErrors OBJECT-TYPE
+        SYNTAX       Counter64
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "The total number of packets received for which the
+            address list does not match the locally configured
+            list for the virtual router.
+
+            Discontinuities in the value of this counter can occur
+            at re-initialization of the management system, and at
+            other times as indicated by the value of
+            vrrpv3StatisticsRowDiscontinuityTime."
+        ::= { vrrpv3StatisticsEntry 10 }
+
+    vrrpv3StatisticsPacketLengthErrors OBJECT-TYPE
+        SYNTAX       Counter64
+        MAX-ACCESS   read-only
+        STATUS       current
+        DESCRIPTION
+            "The total number of packets received with a packet
+            length less than the length of the VRRP header.
+
+            Discontinuities in the value of this counter can occur
+            at re-initialization of the management system, and at
+            other times as indicated by the value of
+            vrrpv3StatisticsRowDiscontinuityTime."
+        ::= { vrrpv3StatisticsEntry 11 }
+
+   vrrpv3StatisticsRowDiscontinuityTime OBJECT-TYPE
+       SYNTAX     TimeStamp
+       MAX-ACCESS read-only
+       STATUS     current
+       DESCRIPTION
+          "The value of sysUpTime on the most recent occasion at
+          which any one or more of this entry's counters
+          suffered a discontinuity.
+
+          If no such discontinuities have occurred since the last
+          re-initialization of the local management subsystem,
+          then this object contains a zero value."
+       ::= { vrrpv3StatisticsEntry 12 }
+
+   vrrpv3StatisticsRefreshRate OBJECT-TYPE
+       SYNTAX     Unsigned32
+       UNITS "milliseconds"
+       MAX-ACCESS read-only
+       STATUS     current
+       DESCRIPTION
+         "The minimum reasonable polling interval for this entry.
+          This object provides an indication of the minimum
+          amount of time required to update the counters in this
+          entry."
+       ::= { vrrpv3StatisticsEntry 13 }
+
+--   Notification Definitions
+--   Notifications may be controlled using SNMP-NOTIFICATION-MIB
+
+    vrrpv3NewMaster NOTIFICATION-TYPE
+        OBJECTS      {
+                       vrrpv3OperationsMasterIpAddr,
+                       vrrpv3StatisticsNewMasterReason
+                     }
+        STATUS       current
+        DESCRIPTION
+            "The newMaster notification indicates that the sending
+            agent has transitioned to master state."
+        ::= { vrrpv3Notifications 1 }
+
+    vrrpv3ProtoError NOTIFICATION-TYPE
+        OBJECTS      {
+                       vrrpv3StatisticsProtoErrReason
+                     }
+        STATUS       current
+        DESCRIPTION
+            "The notification indicates that the sending agent has
+            encountered the protocol error indicated by
+            vrrpv3StatisticsProtoErrReason."
+        ::= { vrrpv3Notifications 2 }
+
+--  Conformance Information
+
+ vrrpv3Compliances  OBJECT IDENTIFIER ::= { vrrpv3Conformance 1 }
+ vrrpv3Groups       OBJECT IDENTIFIER ::= { vrrpv3Conformance 2 }
+
+-- Compliance Statements
+
+    vrrpv3FullCompliance MODULE-COMPLIANCE
+        STATUS current
+        DESCRIPTION
+           "The compliance statement"
+        MODULE -- this module
+        MANDATORY-GROUPS  {
+            vrrpv3OperationsGroup,
+            vrrpv3StatisticsGroup,
+            vrrpv3InfoGroup,
+            vrrpv3NotificationsGroup
+        }
+        OBJECT        vrrpv3OperationsPriority
+        WRITE-SYNTAX  Unsigned32 (1..254)
+        DESCRIPTION  "Setable values are from 1 to 254."
+        ::= { vrrpv3Compliances 1 }
+
+    vrrpv3ReadOnlyCompliance MODULE-COMPLIANCE
+        STATUS current
+        DESCRIPTION
+           "When this MIB module is implemented without support
+           for read-create (i.e., in read-only mode), then such
+           an implementation can claim read-only compliance.
+           Such a device can then be monitored, but cannot be
+           configured with this MIB."
+
+        MODULE -- this module
+        MANDATORY-GROUPS  {
+            vrrpv3OperationsGroup,
+            vrrpv3StatisticsGroup,
+            vrrpv3StatisticsDiscontinuityGroup,
+            vrrpv3InfoGroup,
+            vrrpv3NotificationsGroup
+        }
+
+        OBJECT        vrrpv3OperationsPriority
+        MIN-ACCESS    read-only
+        DESCRIPTION  "Write access is not required."
+
+        OBJECT        vrrpv3OperationsPrimaryIpAddr
+        MIN-ACCESS    read-only
+        DESCRIPTION  "Write access is not required."
+        OBJECT        vrrpv3OperationsAdvInterval
+        MIN-ACCESS    read-only
+        DESCRIPTION  "Write access is not required."
+
+        OBJECT        vrrpv3OperationsPreemptMode
+        MIN-ACCESS    read-only
+        DESCRIPTION  "Write access is not required."
+
+        OBJECT        vrrpv3OperationsAcceptMode
+        MIN-ACCESS    read-only
+        DESCRIPTION  "Write access is not required."
+
+        OBJECT        vrrpv3OperationsRowStatus
+        MIN-ACCESS    read-only
+        DESCRIPTION  "Write access is not required."
+
+        OBJECT        vrrpv3AssociatedIpAddrRowStatus
+        MIN-ACCESS    read-only
+        DESCRIPTION  "Write access is not required."
+
+        ::= { vrrpv3Compliances 2 }
+
+-- Conformance Groups
+
+    vrrpv3OperationsGroup   OBJECT-GROUP
+        OBJECTS  {
+            vrrpv3OperationsVirtualMacAddr,
+            vrrpv3OperationsStatus,
+            vrrpv3OperationsPriority,
+            vrrpv3OperationsMasterIpAddr,
+            vrrpv3OperationsAdvInterval,
+            vrrpv3OperationsPreemptMode,
+            vrrpv3OperationsAcceptMode,
+            vrrpv3OperationsUpTime,
+            vrrpv3OperationsRowStatus,
+            vrrpv3OperationsAddrCount,
+            vrrpv3OperationsPrimaryIpAddr,
+            vrrpv3AssociatedIpAddrRowStatus
+            }
+        STATUS current
+        DESCRIPTION
+           "Conformance group for VRRPv3 operations."
+        ::= { vrrpv3Groups 1 }
+
+    vrrpv3StatisticsGroup  OBJECT-GROUP
+        OBJECTS  {
+            vrrpv3RouterChecksumErrors,
+            vrrpv3RouterVersionErrors,
+            vrrpv3RouterVrIdErrors,
+            vrrpv3StatisticsMasterTransitions,
+            vrrpv3StatisticsNewMasterReason,
+            vrrpv3StatisticsRcvdAdvertisements,
+            vrrpv3StatisticsAdvIntervalErrors,
+            vrrpv3StatisticsRcvdPriZeroPackets,
+            vrrpv3StatisticsSentPriZeroPackets,
+            vrrpv3StatisticsRcvdInvalidTypePackets,
+            vrrpv3StatisticsIpTtlErrors,
+            vrrpv3StatisticsProtoErrReason,
+            vrrpv3StatisticsAddressListErrors,
+            vrrpv3StatisticsPacketLengthErrors,
+            vrrpv3StatisticsRowDiscontinuityTime,
+            vrrpv3StatisticsRefreshRate
+            }
+        STATUS current
+        DESCRIPTION
+           "Conformance group for VRRPv3 statistics."
+        ::= { vrrpv3Groups 2 }
+
+    vrrpv3StatisticsDiscontinuityGroup  OBJECT-GROUP
+        OBJECTS  {
+            vrrpv3GlobalStatisticsDiscontinuityTime
+            }
+        STATUS current
+        DESCRIPTION
+           "Objects providing information about counter
+            discontinuities."
+        ::= { vrrpv3Groups 3 }
+
+    vrrpv3InfoGroup  OBJECT-GROUP
+        OBJECTS  {
+            vrrpv3StatisticsProtoErrReason,
+            vrrpv3StatisticsNewMasterReason
+            }
+        STATUS current
+        DESCRIPTION
+           "Conformance group for objects contained in VRRPv3
+            notifications."
+        ::= { vrrpv3Groups 4 }
+
+    vrrpv3NotificationsGroup NOTIFICATION-GROUP
+        NOTIFICATIONS {
+            vrrpv3NewMaster,
+            vrrpv3ProtoError
+            }
+        STATUS current
+        DESCRIPTION
+           "The VRRP MIB Notification Group."
+        ::= { vrrpv3Groups 5 }
+
+END
diff --git a/tools/keepalived/doc/keepalived.conf.SYNOPSIS b/tools/keepalived/doc/keepalived.conf.SYNOPSIS
index b8a09eecd..1ae228b7c 100644
--- a/tools/keepalived/doc/keepalived.conf.SYNOPSIS
+++ b/tools/keepalived/doc/keepalived.conf.SYNOPSIS
@@ -1,439 +1,5 @@
-This file describe all the Keepalived available keywords. The keepalived.conf
-file is compounded by three configurations parts :
-
-	* Globals configurations
-	* VRRP configuration
-	* LVS configuration
-
-0. Comment string
-
-There is 2 valid comment valid string : # or ! If you want to add comment
-in you configuration file use this char.
-
-1. Globals configurations
-
-This block is divided in 2 sub-block :
-
-	* Global definitions
-	* Static routes
-
-	1.1. Global definitions
-
-	The configuration block looks like :
-
-global_defs {				# Block identification
-    notification_email {		# Email to send alertes to
-       <EMAIL ADDRESS>			# Standard email address
-       <EMAIL ADDRESS>
-       ...
-    }
-    notification_email_from <EMAIL ADDRESS> # Email From dealing with SMTP proto
-    smtp_server <IP ADDRESS>		   # SMTP server IP address
-    smtp_connect_timeout <INTEGER>	   # Number of seconds timeout connect
- 					   #  remote SMTP server
-    router_id <STRING>			   # String identifying router
-    vrrp_mcast_group4 <IPv4 ADDRESS>	   # optional, default 224.0.0.18
-    vrrp_mcast_group6 <IPv6 ADDRESS>	   # optional, default ff02::12
-}
-
-linkbeat_use_polling	# Use media link failure detection polling fashion
-
-	1.2. Static addresses
-
-	The configuration block looks like :
-
-static_ipaddress {			# block identification
-    <IP ADDRESS>/<MASK> brd <IP ADDRESS> dev <STRING> scope <SCOPE>
-    <IP ADDRESS>/<MASK> brd <IP ADDRESS> dev <STRING> scope <SCOPE>
-    ...
-}
-
-SCOPE can take the following values :
-	* site
-	* link
-	* host
-	* nowhere
-	* global
-
-	1.3. Static routes
-
-	The configuration block looks like :
-
-static_routes {							# block identification
-    src <IP ADDRESS> [to] <IP ADDRESS>/<MASK> via|gw <IP ADDRESS> dev <STRING> scope <SCOPE> table <TABLE-ID> # to is optional
-    src <IP ADDRESS> [to] <IP ADDRESS>/<MASK> via|gw <IP ADDRESS> dev <STRING> scope <SCOPE> table <TABLE-ID> # to is optional
-    src <IP ADDRESS> [to] <IP ADDRESS>/<MASK> via|gw <IP ADDRESS> or <IP ADDRESS> dev <STRING> scope <SCOPE> table <TABLE-ID> # will use multipath route
-    blackhole <IP ADDRESS>[/<MASK>]
-    ...
-}
-
-SCOPE can take the following values :
-	* site
-	* link
-	* host
-	* nowhere
-	* global
-
-2. VRRP configuration
-
-This block is divided in 3 sub-block :
-
-	* VRRP scripts
-	* VRRP synchronization group
-	* VRRP instance
-
-	2.1. VRRP scripts
-
-	The configuration block looks like :
-
-vrrp_script <STRING> {          # VRRP script declaration
-    script <QUOTED_STRING>      # script to run periodically
-    interval <INTEGER>          # run the script this every seconds
-    weight <INTEGER:-254..254>  # adjust priority by this weight
-    fall <INTEGER>              # required number of failures for KO switch
-    rise <INTEGER>              # required number of successes for OK switch
-}
-
-The script will be executed periodically, every <interval> seconds. Its exit
-code will be recorded for all VRRP instances which will want to monitor it.
-Note that the script will only be executed if at least one VRRP instance
-monitors it with a non-zero weight. Thus, any number of scripts may be
-declared without taking the system down.
-
-If unspecified, the weight equals 2, which means that a success will add +2
-to the priority of all VRRP instances which monitor it. On the opposite, a
-negative weight will be subtracted from the initial priority in case of
-failure.
-
-	2.2. VRRP synchronization group
-
-	The configuration block looks like :
-
-vrrp_sync_group <STRING> {	# VRRP sync group declaration
-    group {			# group of instance to sync together
-      <STRING>			#   a
-      <STRING>			#       set
-      ...			#             of VRRP_Instance string
-    }
-    notify_master <STRING>|<QUOTED-STRING> # Script to run during MASTER transit
-    notify_backup <STRING>|<QUOTED-STRING> # Script to run during BACKUP transit
-    notify_fault <STRING>|<QUOTED-STRING>  # Script to run during FAULT transit
-    notify <STRING>|<QUOTED-STRING>	   # Script to run during ANY state transit (1)
-    smtp_alert		 # Send email notif during state transit
-}
-
-(1) The "notify" script is called AFTER the corresponding notify_* script has
-    been called, and is given exactly 4 arguments (the whole string is interpreted
-    as a litteral filename so don't add parameters!):
-
-    $1 = A string indicating whether it's a "GROUP" or an "INSTANCE"
-    $2 = The name of said group or instance
-    $3 = The state it's transitioning to ("MASTER", "BACKUP" or "FAULT")
-    $4 = The priority value
-
-    $1 and $3 are ALWAYS sent in uppercase, and the possible strings sent are the
-    same ones listed above ("GROUP"/"INSTANCE", "MASTER"/"BACKUP"/"FAULT").
-
-Important: for a SYNC group to run reliably, it is vital that all instances in
-           the group are MASTER or that they are all either BACKUP or FAULT. A
-           situation with half instances having higher priority on machine A
-           half others with higher priority on machine B will lead to constant
-           re-elections. For this reason, when instances are grouped, their
-           tracking weights are automatically set to zero, in order to avoid
-           inconsistent priorities across instances.
-
-	2.3. VRRP instance
-
-	The configuration block looks like :
-
-vrrp_instance <STRING> {		# VRRP instance declaration
-    use_vmac				# Use VRRP Virtual MAC
-    vmac_xmit_base			# Send/Recv VRRP messages from base
-					#  interface instead of VMAC interface
-    native_ipv6				# Force instance to use IPv6
-					#  when using mixed IPv4&IPv6 conf
-    state MASTER|BACKUP			# Start-up default state
-    interface <STRING>			# Binding interface
-    track_interface {			# Interfaces state we monitor
-      <STRING>
-      <STRING>
-      <STRING> weight <INTEGER:-254..254>
-      ...
-    }
-    track_script {                     # Scripts state we monitor
-      <STRING>
-      <STRING> weight <INTEGER:-254..254>
-      ...
-    }
-    dont_track_primary                  # (default unset) ignore VRRP interface faults.
-                                        #  useful for cross-connect VRRP config.
-    mcast_src_ip <IP ADDRESS>		# src_ip to use into the VRRP packets
-    unicast_src_ip <IP ADDRESS>		# src_ip to use into the VRRP packets (alias to mcast_src_ip)
-    unicast_peer {			# Do not use multicast, instead send VRRP
-      <IP ADDRESS>			#  adverts to following list of ip address
-      ...				#  in unicast design fashion
-    }
-    lvs_sync_daemon_interface <STRING>	# Binding interface for lvs syncd
-    garp_master_delay <INTEGER>		# delay for gratuitous ARP after MASTER
-					#  state transition
-    garp_master_refresh <INTEGER>	# Periodic delay in seconds sending
-					#  gratuitous ARP while in MASTER state
-    virtual_router_id <INTEGER-0..255>	# VRRP VRID
-    priority <INTEGER-0..255>		# VRRP PRIO
-    advert_int <INTEGER>		# VRRP Advert interval (use default)
-    authentication {			# Authentication block
-        auth_type PASS|AH		# Simple Passwd or IPSEC AH
-        auth_pass <STRING>		# Password string (up to 8 characters)
-    }
-    virtual_ipaddress {			# VRRP IP addres block
-        <IP ADDRESS>/<MASK> brd <IP ADDRESS> dev <STRING> scope <SCOPE> label <LABEL>
-        <IP ADDRESS>/<MASK> brd <IP ADDRESS> dev <STRING> scope <SCOPE> label <LABEL>
-        ...
-    }
-    virtual_ipaddress_excluded {       	# VRRP IP excluded from VRRP
-        <IP ADDRESS>/<MASK> brd <IP ADDRESS> dev <STRING> scope <SCOPE>	# packets
-        <IP ADDRESS>/<MASK> brd <IP ADDRESS> dev <STRING> scope <SCOPE>
-        ...
-    }
-    virtual_routes {			# VRRP virtual routes
-    	src <IP ADDRESS> [to] <IP ADDRESS>/<MASK> via|gw <IP ADDRESS> dev <STRING> scope <SCOPE> table <TABLE-ID> metric <METRIC> # to is optional
-    	src <IP ADDRESS> [to] <IP ADDRESS>/<MASK> via|gw <IP ADDRESS> dev <STRING> scope <SCOPE> table <TABLE-ID> metric <METRIC> # to is optional
-    	src <IP ADDRESS> [to] <IP ADDRESS>/<MASK> via|gw <IP ADDRESS> or <IP ADDRESS> dev <STRING> scope <SCOPE> table <TABLE-ID> # will use multipath route
-        ...
-	blackhole <IP ADDRESS>[/<MASK>]
-    }
-    nopreempt					# Override VRRP RFC preemption default
-    preempt_delay				# Seconds after startup until
-						#  preemption. 0 (default) to 1,000
-    debug					# Debug level
-    notify_master <STRING>|<QUOTED-STRING>	# Same as vrrp_sync_group
-    notify_backup <STRING>|<QUOTED-STRING>	# Same as vrrp_sync_group
-    notify_fault <STRING>|<QUOTED-STRING>	# Same as vrrp_sync_group
-    notify_stop <STRING>|<QUOTED-STRING>	# Script to launch when stopping vrrp
-    notify <STRING>|<QUOTED-STRING>		# Same as vrrp_sync_group
-    smtp_alert					# Same as vrrp_sync_group
-}
-
-SCOPE can take the following values :
-	* site
-	* link
-	* host
-	* nowhere
-	* global
-
-LABEL is optional and creates a name for the alias. For compatibility with
-"ifconfig", it should be of the form <realdev>:<anytext>, for example
-eth0:1 for an alias on eth0.
-
-METRIC is optional and specify a route priority.
-
-When a weight is specified in track_interface, instead of setting the vrrp
-instance to the FAULT state in case of failure, its priority will be
-increased by the weight when the interface is up (for positive weights),
-or decreased by the weight's absolute value when the interface is down
-(for negative weights). The weight must be comprised between -254 and +254
-inclusive. 0 is the default behaviour which means that a failure implies a
-FAULT state. The common practise is to use positive weights to count a
-limited number of good services so that the server with the highest count
-becomes master. Negative weights are better to count unexpected failures
-among a high number of interfaces, as it will not saturate even with high
-number of interfaces.
-
-The same principle can be applied to track_script entries, except that an
-unspecified weight means that the default weight declared in the script
-will be used.
-
-
-3. LVS configuration
-
-This block is divided in 2 sub-block :
-
-	* Virtual server group
-	* Virtual server
-
-	3.1. Virtual server group
-	
-	The configuration block looks like :
-
-virtual_server_group <STRING> {
-	<IP ADDRESS> <PORT>		# VIP VPORT
-	<IP ADDRESS> <PORT>
-	...
-	<IP ADDRESS RANGE> <PORT>	# VIP range VPORT
-	<IP ADDRESS RANGE> <PORT>
-	...
-	fwmark <INTEGER>		# fwmark
-	fwmark <INTEGER>
-	...
-}
-
-Note:	<IP ADDRESS RANGE> has the form of : XXX.YYY.ZZZ.WWW-VVV, define
-	the IP address range starting at WWW and monotonaly incremented by
-	one to VVV. Example : 192.168.200.1-10 means .1 to .10 IP addresses.
-
-	3.2. Virtual server
-	
-	The configuration block looks like :
-
-	A virtual_server can be either :
-	* vip vport declaration
-	* fwmark declaration
-	* group declaration
-
-virtual_server <IP ADDRESS> <PORT> {	# VS IP/PORT declaration
-virtual_server fwmark <INTEGER>    {	# VS fwmark declaration
-virtual_server group <STRING>      {	# VS group declaration
-    delay_loop <INTEGER>		# delay timer for service polling
-    lvs_sched rr|wrr|lc|wlc|lblc|sh|dh	# LVS scheduler used
-    ops					# Apply One-Packet-Scheduling (only for UDP)
-    lvs_method NAT|DR|TUN		# LVS method used
-    persistence_timeout <INTEGER>	# LVS persistence timeout
-    persistence_granularity <NETMASK>	# LVS granularity mask
-    protocol TCP			# Only TCP is implemented
-    ha_suspend				# If VS IP address is not set, suspend
-					#  healthcheckers activity
-    virtualhost <STRING>		# VirtualHost string to use for
-					#  HTTP_GET or SSL_GET
-
-    # Assume silently all RSs down and healthchecks
-    # failed on start. This helps preventing false
-    # positive actions on startup. Alpha mode is
-    # disabled by default.
-    alpha
-
-    # On daemon shutdown, consider quorum and RS
-    # down notifiers for execution, where appropriate.
-    # Omega mode is disabled by default.
-    omega
-
-    # Minimum total weight of all live servers in
-    # the pool necessary to operate VS with no
-    # quality regression. Defaults to 1.
-    quorum <INT>
-
-    # Tolerate this much weight units compared to the
-    # nominal quorum, when considering quorum gain
-    # or loss. A flap dampener. Defaults to 0.
-    hysteresis <INT>
-
-    # Script to launch when quorum is gained.
-    quorum_up <STRING>|<QUOTED-STRING>
-
-    # Script to launch when quorum is lost.
-    quorum_down <STRING>|<QUOTED-STRING>
-
-    sorry_server <IP ADDRESS> <PORT>	# RS to add to LVS topology when all
-					#   realserver are down
-    sorry_server_inhibit		# applies inhibit_on_failure behaviour
-					# to the preceding sorry_server
-					# directive
-
-    real_server <IP ADDRESS> <PORT> {	# RS declaration
-        weight <INTEGER>		# weight to use (default: 1)
-        inhibit_on_failure		# Set weight to 0 on healthchecker
-					#  failure
-        notify_up <STRING>|<QUOTED-STRING> # Script to launch when
-					   #  healthchecker consider service
-					   #  as up.
-        notify_down <STRING>|<QUOTED-STRING> # Script to launch when 
-					     #  healthchecker consider service
-					     #  as down.
-	
-        HTTP_GET|SSL_GET {		# HTTP and SSL healthcheckers
-            url {			# A set of url to test
-              path <STRING>		# Path
-              digest <STRING>		# Digest computed with genhash
-              status_code <INTEGER>	# status code returned into the HTTP
-            }                           #   header.
-            url {
-              path <STRING>
-              digest <STRING>
-              status_code <INTEGER>
-            }
-            ...
-            connect_ip <IP ADDRESS> # IP address to connect
-            connect_port <PORT>     # TCP port to connect
-            bindto <IP ADDRESS>     # IP address to bind to
-            bind_port <PORT>        # TCP port to bind to
-            connect_timeout <INTEGER>   # Timeout connection
-            fwmark <INTEGER>        # fwmark to set on socket (SO_MARK)
-            nb_get_retry <INTEGER>  # number of get retry
-            delay_before_retry <INTEGER> # delay before retry
-            warmup <INTEGER>        # random delay for maximum N seconds
-        }
-    }
-
-    real_server <IP ADDRESS> <PORT> {	# Idem
-        weight <INTEGER>		# Idem
-        inhibit_on_failure		# Idem
-        notify_up <STRING>|<QUOTED-STRING> # Idem
-        notify_down <STRING>|<QUOTED-STRING> # Idem
-
-        TCP_CHECK {			# TCP healthchecker
-            connect_ip <IP ADDRESS> # IP address to connect
-            connect_port <PORT>     # TCP port to connect
-            bindto <IP ADDRESS>     # IP address to bind to
-            bind_port <PORT>        # TCP port to bind to
-            connect_timeout <INTEGER>   # Timeout connection
-            fwmark <INTEGER>        # fwmark to set on socket (SO_MARK)
-            warmup <INTEGER>        # random delay for maximum N seconds
-        }
-    }
-
-    real_server <IP ADDRESS> <PORT> {	# Idem
-        weight <INTEGER>		# Idem
-        inhibit_on_failure		# Idem
-        notify_up <STRING>|<QUOTED-STRING> # Idem
-        notify_down <STRING>|<QUOTED-STRING> # Idem
-
-        SMTP_CHECK {                   # SMTP healthchecker
-            host {                      # Optional additional host/port to check
-                connect_ip <IP ADDRESS> # IP address to connect
-                connect_port <PORT>     # TCP port to connect
-                bindto <IP ADDRESS>     # IP address to bind to
-                bind_port <PORT>        # TCP port to bind to
-                connect_timeout <INTEGER>   # Timeout connection
-                fwmark <INTEGER>        # fwmark to set on socket (SO_MARK)
-            }
-            host {
-                connect_ip <IP ADDRESS> # IP address to connect
-                connect_port <PORT>     # TCP port to connect
-                bindto <IP ADDRESS>     # IP address to bind to
-                bind_port <PORT>        # TCP port to bind to
-                connect_timeout <INTEGER>   # Timeout connection
-                fwmark <INTEGER>        # fwmark to set on socket (SO_MARK)
-            }
-            ...
-            connect_timeout <INTEGER>  # Connection and read/write timeout
-            warmup <INTEGER>        # random delay for maximum N seconds
-            retry <INTEGER>             # Number of times to retry a failed check
-            delay_before_retry <INTEGER> # Delay in seconds before retrying
-            helo_name <STRING>|<QUOTED-STRING> # Host to use for the HELO request
-        }
-    }
-
-    real_server <IP ADDRESS> <PORT> {	# Idem
-        weight <INTEGER>		# Idem
-        inhibit_on_failure		# Idem
-        notify_up <STRING>|<QUOTED-STRING> # Idem
-        notify_down <STRING>|<QUOTED-STRING> # Idem
-
-        MISC_CHECK {				# MISC healthchecker
-            misc_path <STRING>|<QUOTED-STRING>	# External system script or program
-            misc_timeout <INTEGER>		# Script execution timeout
-            warmup <INTEGER>        # random delay for maximum N seconds
-
-            # If set, exit code from healthchecker is used
-            # to dynamically adjust the weight as follows:
-            #   exit status 0: svc check success, weight
-            #     unchanged.
-            #   exit status 1: svc check failed.
-            #   exit status 2-255: svc check success, weight
-            #     changed to 2 less than exit status.
-            #   (for example: exit status of 255 would set
-            #     weight to 253)
-            misc_dynamic
-        }
-    }
-}
+This file is now deprecated. Please refer to doc/man/man5/keepalived.conf.5
+for full documentation support. If you just dont want to install manpage but
+just looking for a nice formatted output, following can make the job :
 
+  groff -t -e -mandoc -Tascii keepalived.conf.5 | col -bx
diff --git a/tools/keepalived/doc/man/man1/genhash.1 b/tools/keepalived/doc/man/man1/genhash.1
index 6814ca374..af591fefb 100644
--- a/tools/keepalived/doc/man/man1/genhash.1
+++ b/tools/keepalived/doc/man/man1/genhash.1
@@ -2,6 +2,7 @@
 .\" genhash(1)
 .\"
 .\" Copyright (C) 2004 Andres Salomon
+.\" Copyright (C) 2010-2013 Alexandre Cassen, <acassen@gmail.com>
 .TH genhash 1 "Feb 2004"
 .SH NAME
 genhash \- md5 hash generation tool for remote web pages
@@ -38,6 +39,15 @@ Specify the hash algorithm to make a digest of the target page.
 Consult the help screen for list of available ones with a mark
 of the default one.
 .TP
+.B --protocol <protocol_version>, -P
+Specify the HTTP protocol version to use. protocol_version can
+be 1.0, 1.1 or 1.0c. 1.0c means protocol version 1.0 but with
+a "Connection: close" line; this is included in version 1.1 by
+default.
+.TP
+.B --timeout <timeout>, -t
+Specify the connection timeout in seconds.
+.TP
 .B --verbose, -v
 Be verbose with the output.
 .TP
diff --git a/tools/keepalived/doc/man/man5/keepalived.conf.5 b/tools/keepalived/doc/man/man5/keepalived.conf.5
index c574f3fda..ed8b36554 100644
--- a/tools/keepalived/doc/man/man5/keepalived.conf.5
+++ b/tools/keepalived/doc/man/man5/keepalived.conf.5
@@ -1,558 +1,2248 @@
-.TH KEEPALIVED.CONF 5 "Jan 2004" V1.0
-.UC 4
+.TH keepalived.conf 5 2019-03-24 "Keepalived" "Keepalived Configuration's Manual"
 .SH NAME
-/etc/keepalived/keepalived.conf - configuration file for keepalived
+keepalived.conf - configuration file for Keepalived
 .br
 .SH DESCRIPTION
-.B keepalived.conf
-is the configuration file which describes all the keepalived keywords.
-keywords are placed in hierachies of blocks (and subblocks), 
-each layer being delimited by '{' and '}' pairs. 
+\fBkeepalived.conf\fR is the configuration file which describes all the
+Keepalived keywords. Keywords are placed in hierarchies of blocks and
+subblocks, each layer being delimited by '{' and '}' pairs.
 .PP
-Comments start with '#' or '!' to the end of the line and can start 
+Comments start with '#' or '!' to the end of the line and can start
 anywhere in a line.
+.PP
+The keyword 'include' allows inclusion of other configuration files from within
+the main configuration file, or from subsequently included files.
+.PP
+The format of the include directive is:
+
+\fBinclude\fR FILENAME
+.PP
+FILENAME can be a fully qualified or relative pathname, and can include wildcards,
+including csh style brace expressions such as "{foo/{,cat,dog},bar}" if glob()
+supports them.
+.PP
+After opening an included file, the current directory is set to the directory of
+the file itself, so any relative paths included from a file are relative to the
+directory of the including file itself.
+.PP
+\fBNote:\fR
+This documentation MUST be considered as THE exhaustive source of information in
+order to configure Keepalived. This documenation is supported and maintained by
+Keepalived Core-Team.
+.PP
+.SH PARAMETER SYNTAX
+\fB<BOOL>\fR
+is one of on|off|true|false|yes|no
+.br
+\fB<TIMER>\fR
+is a time value in seconds, including fractional seconds, e.g. 2.71828 or 3;
+resolution of timer is micro-seconds.
+.SH SCRIPTS
+There are three classes of scripts can be configured to be executed.
+
+(a) Notify scripts that are run when a vrrp instance or vrrp group
+changes state, or a virtual server quorum changes between up and down.
+
+(b) vrrp tracking scripts that will cause vrrp instances to go down it they exit
+a non-zero exist status, or if a weight is specified will add or subtract the
+weight to/from the priority of that vrrp instance.
+
+(c) LVS checker misc scripts that will cause a real server to be configured down
+if they exit with a non-zero status.
+
+By default the scripts will be executed by user keepalived_script if that user
+exists, or if not by root, but for each script the user/group under which it is
+to be executed can be specified.
+
+There are significant security implications if scripts are executed with root
+privileges, especially if the scripts themselves are modifiable or replaceable
+by a non root user. Consequently, security checks are made at startup to ensure
+that if a script is executed by root, then it cannot be modified or replaced by
+a non root user.
+
+All scripts should be written so that they will terminate on receipt of a SIGTERM
+signal. Scripts will be sent SIGTERM if their parent terminates, or it is a script
+the keepalived is awaiting its exit status and it has run for too long.
+.PP
+.SH Quoted strings
+Quoted strings are specified between " characters; more specifically a string
+will only end after a quoted string if there is whitespace afterwards. For
+example:
+.nf
+.RS
+"abcd" efg h jkl "mnop"
+.RE
+.fi
+will be the single string "abcd efg h jkl mnop", i.e. the embedded " characters
+are removed.
+.PP
+Quoted strings can also have escaped characters, like the shell. \\a, \\b, \\E, \\f,
+\\n, \\r, \\t, \\v, \\nnn and \\xXX (where nnn is up to 3 octal digits, and XX is any
+sequence of hex digits) and \\cC (which produces the control version of
+character C) are all supported. \\C for any other character C is just
+treated as an escaped version of character C, so \\\\ is a \\ character and
+\\" will be a " character, but it won't start or terminate a quoted string.
+.PP
+For specifying scripts with parameters, unquoted spaces will separate the parameters.
+If it is required for a parameter to contain a space, it should be enclosed in single
+quotes (').
+
+.PP
+.SH CONFIGURATION PARSER
+Traditionally the configuration file parser has not been one of the strengths of
+keepalived. Lot of efforts have been put to correct this even if this is not the
+primal goal of the project.
 .SH TOP HIERACHY
 .PP
-.B GLOBAL CONFIGURATION
+Keepalived configuration file is articulated around a set of configuration blocks.
+Each block is focusing and targetting a specific daemon family feature. These features
+are:
 .PP
-.B VRRPD CONFIGURATION
+\fBGLOBAL CONFIGURATION\fR
 .PP
-.B LVS CONFIGURATION
+\fBBFD CONFIGURATION\fR
 .PP
+\fBVRRPD CONFIGURATION\fR
+.PP
+\fBLVS CONFIGURATION\fR
 .SH GLOBAL CONFIGURATION
-contains subblocks of 
-.B Global definitions
+contains subblocks of
+\fBGlobal definitions,
+Linkbeat interfaces,
+Static track groups,
+Static addresses,
+Static routes,\fR
 and
-.B Static routes
+\fBStatic rules\fR
 .PP
 .SH Global definitions
 .PP
- global_defs           # Block id
- { 
- notification_email    # To:
-        {
-        admin@example1.com 
+.nf
+# Following are global daemon facilities for running
+# keepalived in a separate network namespace:
+# --
+# Set the network namespace to run in.
+# The directory /var/run/keepalived will be created as an
+# unshared mount point, for example for pid files.
+# syslog entries will have _NAME appended to the ident.
+# Note: the namespace cannot be changed on a configuration reload.
+\fBnet_namespace \fRNAME
+
+# ipsets wasn't network namespace aware until Linux 3.13, and so
+# if running with # an earlier version of the kernel, by default
+# use of ipsets is disabled if using a namespace and vrrp_ipsets
+# has not been specified. This options overrides the default and
+# allows ipsets to be used with a namespace on kernels prior to 3.13.
+\fBnamespace_with_ipsets\fR
+
+# If multiple instances of keepalived are run in the same namespace,
+# this will create pid files with NAME as part of the file names,
+# in /var/run/keepalived.
+# Note: the instance name cannot be changed on a configuration reload
+\fBinstance \fRNAME
+
+# Create pid files in /var/run/keepalived
+\fBuse_pid_dir\fR
+
+# Poll to detect media link failure using ETHTOOL, MII or ioctl interface
+# otherwise uses netlink interface.
+\fBlinkbeat_use_polling\fR
+
+# Time for main process to allow for child processes to exit on termination
+# in seconds. This can be needed for very large configurations.
+# (default: 5)
+\fBchild_wait_time \fRSECS
+
+# Global definitions configuration block
+\fBglobal_defs \fR{
+    # Set the process names of the keepalived processes to the default values:
+    #   keepalived, keepalived_vrrp, keepalived_ipvs, keepalived_bfd
+    \fBprocess_names\fR
+
+    # Specify the individual process names
+    \fBprocess_name\fR NAME
+    \fBvrrp_process_name\fR NAME
+    \fBipvs_process_name\fR NAME
+    \fBbfd_process_name\fR NAME
+
+    # Set of email To: notify
+    \fBnotification_email \fR{
+        admin@example1.com
         ...
+    }
+
+    # email from address that will be in the header
+    # (default: keepalived@<local host name>)
+    \fBnotification_email_from \fRadmin@example.com
+
+    # Remote SMTP server used to send notification email.
+    # IP address or domain name with optional port number.
+    # (default port number: 25)
+    \fBsmtp_server \fR127.0.0.1 [<PORT>]
+
+    # Name to use in HELO messages.
+    # (default: local host name)
+    \fBsmtp_helo_name \fR<STRING>
+
+    # SMTP server connection timeout in seconds.
+    \fBsmtp_connect_timeout \fR30
+
+    # Sets default state for all smtp_alerts
+    \fBsmtp_alert \fR<BOOL>
+
+    # Sets default state for vrrp smtp_alerts
+    \fBsmtp_alert_vrrp \fR<BOOL>
+
+    # Sets default state for checker smtp_alerts
+    \fBsmtp_alert_checker \fR<BOOL>
+
+    # Sets logging all checker failes while checker up
+    \fBchecker_log_all_failures \fR<BOOL>
+
+    # Don't send smtp alerts for fault conditions
+    \fBno_email_faults\fR
+
+    # String identifying the machine (doesn't have to be hostname).
+    # (default: local host name)
+    \fBrouter_id \fR<STRING>
+
+    # Multicast Group to use for IPv4 VRRP adverts
+    # (default: 224.0.0.18)
+    \fBvrrp_mcast_group4 \fR224.0.0.18
+
+    # Multicast Group to use for IPv6 VRRP adverts
+    # (default: ff02::12)
+    \fBvrrp_mcast_group6 \fRff02::12
+
+    # sets the default interface for static addresses.
+    # (default: eth0)
+    \fBdefault_interface \fRp33p1.3
+
+    # Sync daemon as provided by IPVS kernel code only support
+    # a single daemon instance at a time to synchronize connection table.
+    # Binding interface, vrrp instance and optional
+    #  syncid for lvs syncd
+    #  syncid (0 to 255) for lvs syncd
+    #  maxlen (1..65507) maximum packet length
+    #  port (1..65535) UDP port number to use
+    #  ttl (1..255)
+    #  group - multicast group address (IPv4 or IPv6)
+    # NOTE: maxlen, port, ttl and group are only available on Linux 4.3 or later.
+    \fBlvs_sync_daemon \fR<INTERFACE> <VRRP_INSTANCE> [id <SYNC_ID>] [maxlen <LEN>] \e
+                    [port <PORT>] [ttl <TTL>] [group <IP ADDR>]
+
+    # flush any existing LVS configuration at startup
+    \fBlvs_flush\fR
+
+    # flush remaining LVS configuration at shutdown
+    # If VS is specified, remove each keepalived managed virtual
+    # server without explicitly removing the real servers (the kernel will
+    # remove them).
+    \fBlvs_flush_onstop [VS]\fR
+
+    # delay for second set of gratuitous ARPs after transition to MASTER.
+    # in seconds, 0 for no second set.
+    # (default: 5)
+    \fBvrrp_garp_master_delay \fR10
+
+    # number of gratuitous ARP messages to send at a time after
+    # transition to MASTER.
+    # (default: 5)
+    \fBvrrp_garp_master_repeat \fR1
+
+    # delay for second set of gratuitous ARPs after lower priority
+    # advert received when MASTER.
+    \fBvrrp_garp_lower_prio_delay \fR10
+
+    # number of gratuitous ARP messages to send at a time after
+    # lower priority advert received when MASTER.
+    \fBvrrp_garp_lower_prio_repeat \fR1
+
+    # minimum time interval for refreshing gratuitous ARPs while MASTER.
+    # in seconds.
+    # (default: 0 (no refreshing))
+    \fBvrrp_garp_master_refresh \fR60
+
+    # number of gratuitous ARP messages to send at a time while MASTER
+    # (default: 1)
+    \fBvrrp_garp_master_refresh_repeat \fR2
+
+    # Delay in ms between gratuitous ARP messages sent on an interface
+    # decimal, seconds (resolution usecs).
+    # (default: 0)
+    \fBvrrp_garp_interval \fR0.001
+
+    # Delay in ms between unsolicited NA messages sent on an interface
+    # decimal, seconds (resolution usecs).
+    # (default: 0)
+    \fBvrrp_gna_interval \fR0.000001
+
+    # By default keepalived sends 5 gratuitions ARP/NA messages at a
+    # time, and after transitioning to MASTER sends a second block of
+    # 5 messages 5 seconds later.
+    # With modern switches this is unnecessary, so setting vrrp_min_garp
+    # causes only one ARP/NA message to be sent, with no repeat 5 seconds
+    # later.
+    \fBvrrp_min_garp \fR[<BOOL>]
+
+    # If a lower priority advert is received, don't send another advert.
+    # This causes adherence to the RFCs. Defaults to false, unless
+    # strict_mode is set.
+    \fBvrrp_lower_prio_no_advert \fR[<BOOL>]
+
+    # If we are master and receive a higher priority advert, send an advert
+    # (which will be lower priority than the other master), before we
+    # transition to backup. This means that if the other master has
+    # garp_lower_priority_repeat set, it will resend garp messages.
+    # This is to get around the problem of their having been two simultaneous
+    # masters, and the last GARP messages seen were from us.
+    \fBvrrp_higher_prio_send_advert \fR[<BOOL>]
+
+    # Set the default VRRP version to use
+    # (default: 2, but IPv6 instances will use version 3)
+    \fBvrrp_version \fR<2 or 3>
+
+    # Specify the iptables chain for ensuring a version 3 instance
+    # doesn't respond on addresses that it doesn't own.
+    # Note: it is necessary for the specified chain to exist in
+    # the iptables and/or ip6tables configuration, and for the chain
+    # to be called from an appropriate point in the iptables configuration.
+    # It will probably be necessary to have this filtering after accepting
+    # any ESTABLISHED,RELATED packets, because IPv4 might select the VIP as
+    # the source address for outgoing connections.
+    # (default: INPUT)
+    \fBvrrp_iptables \fRkeepalived
+
+    # or for outbound filtering as well
+    # Note, outbound filtering won't work with IPv4, since the VIP can be
+    # selected as the source address for an outgoing connection. With IPv6
+    # this is unlikely since the addresses are deprecated.
+    \fBvrrp_iptables \fRkeepalived_in keepalived_out
+
+    # or to not add any iptables rules:
+    \fBvrrp_iptables\fR
+
+    # Keepalived may have the option to use ipsets in conjunction with
+    # iptables. If so, then the ipset names can be specified, defaults
+    # as below. If no names are specified, ipsets will not be used,
+    # otherwise any omitted names will be constructed by adding "_if"
+    # and/or "6" and _igmp/_mld to previously specified names.
+    \fBvrrp_ipsets \fR[keepalived [keepalived6 [keepalived_if6 [keepalived_igmp [keepalived_mld]]]]]
+
+    # Use nftables to implement no_accept mode and only send IGMP/MLD
+    #   messages on the parent interface of a VMAC.
+    #   TABLENAME must not exist, and must be different for each
+    #   instance of keepalived running in the same network namespace.
+    #   Default tablename is keepalived, and priority is -1.
+    #   keepalived will create base chains in the table.
+    #   counters means counters are added to the rules (primarily for
+    #   debugging purposes).
+    #   ifindex means create IPv6 link local sets using ifindex rather
+    #   than ifnames. This is the default unless the vrrp_instance has
+    #   set dont_track_primary. The alternative is to use interface names
+    #   as part of the set key, but the nft utility prior to v0.8.3 will
+    #   then not output interface names properly.
+    \fBnftables \fR[TABLENAME]
+    \fBnftables_priority \fRPRIORITY
+    \fBnftables_counters\fR
+    \fBnftables_ifindex\fR
+
+    # The following enables checking that when in unicast mode, the
+    # source address of a VRRP packet is one of our unicast peers.
+    \fBvrrp_check_unicast_src\fR
+
+    # Checking all the addresses in a received VRRP advert can be time
+    # consuming. Setting this flag means the check won't be carried out
+    # if the advert is from the same master router as the previous advert
+    # received.
+    # (default: don't skip)
+    \fBvrrp_skip_check_adv_addr\fR
+
+    # Enforce strict VRRP protocol compliance. This will prohibit:
+    #   0 VIPs
+    #   unicast peers
+    #   IPv6 addresses in VRRP version 2
+    \fBvrrp_strict\fR
+
+    # Send vrrp instance priority notifications on notify FIFOs.
+    \fBvrrp_notify_priority_changes\fR <BOOL>
+
+    # The following options can be used if vrrp, checker or bfd  processes
+    # are timing out. This can be seen by a backup vrrp instance becoming
+    # master even when the master is still running because the master or
+    # backup system is too busy to process vrrp packets.
+    # --
+    # Set the vrrp child process priority (Negative values increase priority)
+    \fBvrrp_priority \fR<-20 to 19>
+
+    # Set the checker child process priority
+    \fBchecker_priority \fR<-20 to 19>
+
+    # Set the BFD child process priority
+    \fBbfd_priority \fR<-20 to 19>
+
+    # Set the vrrp child process non swappable
+    \fBvrrp_no_swap\fR
+
+    # Set the checker child process non swappable
+    \fBchecker_no_swap\fR
+
+    # Set the BFD child process non swappable
+    \fBbfd_no_swap\fR
+
+    # The following options can be used to force vrrp, checker and bfd
+    # processes to run on a restricted CPU set.
+    # You can either bind processes to a single CPU or define a set of
+    # cpu. In that last case Linux kernel will be restricted to that cpu
+    # set during scheduling. Forcing process binding to single CPU can
+    # increase performances on heavy loaded box.
+    # INTEGER following configuration keyword are representing cpu_id
+    # as shown in /proc/cpuinfo on line "processor:"
+    # --
+    # Set CPU Affinity for the vrrp child process
+    \fBvrrp_cpu_affinity\fR <INTEGER> [<INTERGER>]...[<INTEGER>]
+
+    # Set CPU Affinity for the checker child process
+    \fBchecker_cpu_affinity\fR <INTEGER> [<INTERGER>]...[<INTEGER>]
+
+    # Set CPU Affinity for the bfd child process
+    \fBbfd_cpu_affinity\fR <INTEGER> [<INTERGER>]...[<INTEGER>]
+
+    # Set the vrrp child process to use real-time scheduling
+    # at the specified priority
+    \fBvrrp_rt_priority \fR<1..99>
+
+    # Set the checker child process to use real-time scheduling
+    # at the specified priority
+    \fBchecker_rt_priority \fR<1..99>
+
+    # Set the BFD child process to use real-time scheduling
+    # at the specified  priority
+    \fBbfd_rt_priority \fR<1..99>
+
+    # Set the limit on CPU time between blocking system calls,
+    # in microseconds
+    # (default: 1000)
+    \fBvrrp_rlimit_rtime \fR>=1
+    \fBchecker_rlimit_rtime \fR>=1
+    \fBbfd_rlimit_rtime \fR>=1
+
+    # If Keepalived has been build with SNMP support, the following
+    # keywords are available.
+    # Note: Keepalived, checker and RFC support can be individually
+    # enabled/disabled
+    # --
+    # Specify socket to use for connecting to SNMP master agent
+    # (see source module keepalived/vrrp/vrrp_snmp.c for more details)
+    # (default: unix:/var/agentx/master)
+    \fBsnmp_socket \fRudp:1.2.3.4:705
+
+    # enable SNMP handling of vrrp element of KEEPALIVED MIB
+    \fBenable_snmp_vrrp\fR
+
+    # enable SNMP handling of checker element of KEEPALIVED MIB
+    \fBenable_snmp_checker\fR
+
+    # enable SNMP handling of RFC2787 and RFC6527 VRRP MIBs
+    \fBenable_snmp_rfc\fR
+
+    # enable SNMP handling of RFC2787 VRRP MIB
+    \fBenable_snmp_rfcv2\fR
+
+    # enable SNMP handling of RFC6527 VRRP MIB
+    \fBenable_snmp_rfcv3\fR
+
+    # enable SNMP traps
+    \fBenable_traps\fR
+
+    # If Keepalived has been build with DBus support, the following
+    # keywords are available.
+    # --
+    # Enable the DBus interface
+    \fBenable_dbus\fR
+
+    # Name of DBus service
+    # Useful if you want to run multiple keepalived processes with DBus enabled
+    # (default: org.keepalived.Vrrp1)
+    \fBdbus_service_name \fRSERVICE_NAME
+
+    # Specify the default username/groupname to run scripts under.
+    # If this option is not specified, the user defaults to keepalived_script
+    # if that user exists, otherwise root.
+    # If groupname is not specified, it defaults to the user's group.
+    \fBscript_user \fRusername [groupname]
+
+    # Don't run scripts configured to be run as root if any part of the path
+    # is writable by a non-root user.
+    \fBenable_script_security\fR
+
+    # Rather than using notify scripts, specifying a fifo allows more
+    # efficient processing of notify events, and guarantees that they
+    # will be delivered in the correct sequence.
+    # NOTE: the FIFO names must all be different
+    # --
+    # FIFO to write notify events to
+    # See vrrp_notify_fifo and lvs_notify_fifo for format of output
+    # For further details, see the description under vrrp_sync_group.
+    # see doc/samples/sample_notify_fifo.sh for sample usage.
+    \fBnotify_fifo \fRFIFO_NAME [username [groupname]]
+
+    # script to be run by keepalived to process notify events
+    # The FIFO name will be passed to the script as the last parameter
+    \fBnotify_fifo_script \fRSTRING|QUOTED_STRING [username [groupname]]
+
+    # FIFO to write vrrp notify events to.
+    # The string written will be a line of the form: INSTANCE "VI_1" MASTER 100
+    # and will be terminated with a new line character.
+    # For further details of the output, see the description under vrrp_sync_group
+    # and doc/samples/sample_notify_fifo.sh for sample usage.
+    \fBvrrp_notify_fifo \fRFIFO_NAME [username [groupname]]
+
+    # script to be run by keepalived to process vrrp notify events
+    # The FIFO name will be passed to the script as the last parameter
+    \fBvrrp_notify_fifo_script \fRSTRING|QUOTED_STRING [username [groupname]]
+
+    # FIFO to write notify healthchecker events to
+    # The string written will be a line of the form:
+    # VS [192.168.201.15]:tcp:80 {UP|DOWN}
+    # RS [1.2.3.4]:tcp:80 [192.168.201.15]:tcp:80 {UP|DOWN}
+    # and will be terminated with a new line character.
+    \fBlvs_notify_fifo \fRFIFO_NAME [username [groupname]]
+
+    # script to be run by keepalived to process healthchecher notify events
+    # The FIFO name will be passed to the script as the last parameter
+    \fBlvs_notify_fifo_script \fRSTRING|QUOTED_STRING [username [groupname]]
+
+    # Allow configuration to include interfaces that don't exist at startup.
+    # This allows keepalived to work with interfaces that may be deleted and restored
+    #   and also allows virtual and static routes and rules on VMAC interfaces.
+    #   allow_if_changes allows an interface to be deleted and recreated with a
+    #   different type or underlying interface, eg changing from vlan to macvlan
+    #   or changing a macvlan from eth1 to eth2. This is predominantly used for
+    #   reporting duplicate VRID errors at startup if allow_if_changes is not set.
+    \fBdynamic_interfaces [allow_if_changes]\fR
+
+    # The following options are only needed for large configurations, where either
+    # keepalived creates a large number of interface, or the system has a large
+    # number of interface. These options only need using if
+    # "Netlink: Receive buffer overrun" messages are seen in the system logs.
+    # If the buffer size needed exceeds the value in /proc/sys/net/core/rmem_max
+    #  the corresponding force option will need to be set.
+    # --
+    # Set netlink receive buffer size. This is useful for
+    # very large configurations where a large number of interfaces exist, and
+    # the initial read of the interfaces on the system causes a netlink buffer
+    # overrun.
+    \fBvrrp_netlink_cmd_rcv_bufs \fRBYTES
+    \fBvrrp_netlink_cmd_rcv_bufs_force \fR<BOOL>
+    \fBvrrp_netlink_monitor_rcv_bufs \fRBYTES
+    \fBvrrp_netlink_monitor_rcv_bufs_force \fR<BOOL>
+
+    # The vrrp netlink command and monitor socket the checker command and
+    # and monitor socket and process monitor buffer sizes can be independently set.
+    # The force flag means to use SO_RCVBUFFORCE, so that the buffer size
+    # can exceed /proc/sys/net/core/rmem_max.
+    \fBlvs_netlink_cmd_rcv_bufs \fRBYTES
+    \fBlvs_netlink_cmd_rcv_bufs_force \fR<BOOL>
+    \fBlvs_netlink_monitor_rcv_bufs \fRBYTES
+    \fBlvs_netlink_monitor_rcv_bufs_force \fR<BOOL>
+
+    # As a guide for process_monitor_rcv_bufs for 1400 processes terminating
+    # simultaneously, 212992 (the default on some systems) is insufficient, whereas
+    # 500000 is sufficient.
+    \fBprocess_monitor_rcv_bufs \fRBYTES
+    \fBprocess_monitor_rcv_bufs_force \fR<BOOL>
+
+    # When a socket is opened, the kernel configures the max rx buffer size for
+    # the socket to /proc/sys/net/core/rmem_default. On some systems this can be
+    # very large, and even generally this can be much larger than necessary.
+    # This isn't a problem so long as keepalived is reading all queued data from
+    # it's sockets, but if rmem_default was set sufficiently large, and if for
+    # some reason keepalived stopped reading, it could consume all system memory.
+    # The vrrp_rx_bufs_policy allows configuring of the rx bufs size when the
+    # sockets are opened. If the policy is MTU, the rx buf size is configured
+    # to the total of interface's MTU * vrrp_rx_bufs_multiplier for each vrrp
+    # instance using the socket. Likewise, if the policy is ADVERT, then it is
+    # the total of each vrrp instances advert packet size * multiplier.
+    # (default: use system default)
+    \fBvrrp_rx_bufs_policy \fR[MTU|ADVERT|NUMBER]
+
+    # (default: 3)
+    \fBvrrp_rx_bufs_multiplier \fRNUMBER
+
+    # Send notifies at startup for real servers that are starting up
+    \fBrs_init_notifies\fR
+
+    # Don't send an email every time a real server checker changes state;
+    # only send email when a real server is added or removed
+    \fBno_checker_emails\fR
+
+    # The umask to use for creating files. The number can be specified in hex, octal
+    #   or decimal. BITS are I{R|W|X}{USR|GRP|OTH}, e.g. IRGRP, separated by '|'s.
+    #   The default umask is IWGRP | IWOTH. This option cannot override the
+    #   command-line option.
+    \fBumask \fR[NUMBER|BITS]
+
+    # On some systems when bond interfaces are created, they can start passing traffic
+    # and then have a several second gap when they stop passing traffic inbound. This
+    # can mean that if keepalived is started at boot time, i.e. at the same time as
+    # bond interfaces are being created, keepalived doesn't receive adverts and hence
+    # can become master despite an instance with higher priority sending adverts.
+    # This option specifies a delay in seconds before vrrp instances start up after
+    # keepalived starts,
+    \fBvrrp_startup_delay \fR5.5
+
+    # The following will cause logging of receipt of VRRP adverts for VRIDs not configured
+    # on the interface on which they are received.
+    \fBlog_unknown_vrids\fR
+
+    # Specify random seed for ${_RANDOM}, to make configurations repeatable (default
+    # is to use a seed based on the time, so that each time a different configuration
+    # will be generated).
+    \fBrandom_seed \fRUNSIGNED_INT
+}
+.fi
+.SH Linkbeat interfaces
+.PP
+The linkbeat_interfaces block allows specifying which interfaces should use polling
+via MII, Ethtool or ioctl status rather than rely on netlink status updates. This
+allows more granular control of global definition \fBlinkbeat_use_polling\fR.
+.PP
+This option is preferred over the deprecated use of \fBlinkbeat_use_polling\fR in
+a vrrp_instance block, since the latter only allows using linkbeat on the interface
+of the vrrp_instance itself, whereas \fRtrack_interface\fR and virtual_ipaddresses
+and virtual_iproutes may require monitoring other interfaces, which may need to use
+linkbeat polling.
+.PP
+The default polling type to use is MII, unless that isn't supported in which case
+ETHTOOL is used, and if that isn't supported then ioctl polling. The preferred type
+of polling to use can be specified with MII or ETHTOOL or IOCTL after the interface
+name, but if that type isn't supported, a supported type will be used.
+.PP
+The synfax for linkbeat_interfaces is:
+.nf
+    \fBlinkbeat_interfaces\fR {
+        eth2
+        enp2s0 ETHTOOL
+    }
+.fi
+.SH Static track groups
+.PP
+Static track groups are used to allow vrrp instances to track static addresses,
+routes and rules. If a static address/route/rule specifies a track group, then
+if the address/route/rule is deleted and cannot be restored, the vrrp instance
+will transition to fault state.
+.PP
+The syntax for a track group is:
+.nf
+    \fBtrack_group \fRGROUP1 {
+        \fBgroup \fR{
+            VI_1
+            VI_2
         }
- # From: from address that will be in header
- notification_email_from admin@example.com 
- smtp_server 127.0.0.1        # IP
- smtp_connect_timeout 30      # integer, seconds
- router_id my_hostname        # string identifying the machine,
-                              # (doesn't have to be hostname).
- vrrp_mcast_group4 224.0.0.18 # optional, default 224.0.0.18
- vrrp_mcast_group6 ff02::12   # optional, default ff02::12
- enable_traps                 # enable SNMP traps
- }
-
-
-.SH Static routes/addresses
-.PP
-keepalived can configure static addresses and routes. These addresses are
-.B NOT
-moved by vrrpd, they stay on the machine. 
+    }
+.fi
+.SH Static routes/addresses/rules
+.PP
+Keepalived can configure static addresses, routes, and rules. These addresses are
+\fBNOT\fR
+moved by vrrpd, they stay on the machine.
 If you already have IPs and routes on your machines and
 your machines can ping each other, you don't need this section.
+The syntax for rules and routes is that same as for ip rule add/ip route add
+(except shorted option names aren't supported due to ambiguities).
+The track_group specification refers to a named track_group which lists
+the vrrp instances which will track the address, i.e. if the address is
+deleted the vrrp instances will transition to backup.
+
+NOTE: since rules without preferences can be added in different orders
+due to vrrp instances transitioning from master to backup etc, rules need
+to have a preference. If a preference is not specified, keepalived will
+assign one, but it will probably not be what you want.
+.PP
+The syntax is the same for virtual addresses and virtual routes. If no dev element
+is specified, it defaults to default_interface (default eth0).
+Note: the broadcast address may be specified as '-' or '+' to clear or set the host
+bits of the address.
+.PP
+If a route or rule could apply to either IPv4 or IPv6 it will default to IPv4.
+To force a route/rule to be IPv6, add the keyword "inet6".
+.PP
+.nf
+    \fBstatic_ipaddress \fR{
+        <IPADDR>[/<MASK>] [brd <IPADDR>] [dev <STRING>] [scope <SCOPE>]
+                          [label <LABEL>] [peer <IPADDR>] [home]
+                          [-nodad] [mngtmpaddr] [noprefixroute]
+                          [autojoin] [track_group GROUP]
+        192.168.1.1/24 dev eth0 scope global
+        ...
+    }
+.fi
+.PP
+.nf
+    \fBstatic_routes \fR{
+        192.168.2.0/24 via 192.168.1.100 dev eth0 track_group GROUP1
+
+        192.168.100.0/24 table 6909 nexthop via 192.168.101.1 dev wlan0
+                         onlink weight 1 nexthop via 192.168.101.2
+                         dev wlan0 onlink weight 2
+
+        192.168.200.0/24 dev p33p1.2 table 6909 tos 0x04 protocol bird
+                         scope link priority 12 mtu 1000 hoplimit 100
+                         advmss 101 rtt 102 rttvar 103 reordering 104
+                         window 105 cwnd 106 ssthresh lock 107 realms
+                         PQA/0x14 rto_min 108 initcwnd 109 initrwnd 110
+                         features ecn
+
+        2001:470:69e9:1:2::4 dev p33p1.2 table 6909 tos 0x04 protocol
+                             bird scope link priority 12 mtu 1000
+                             hoplimit 100 advmss 101 rtt 102 rttvar 103
+                             reordering 104 window 105 cwnd 106 ssthresh
+                             lock 107 rto_min 108 initcwnd 109
+                             initrwnd 110 features ecn fastopen_no_cookie 1
+        ...
+    }
+.fi
+.PP
+.nf
+    \fBstatic_rules \fR{
+        from 192.168.2.0/24 table 1 track_group GROUP1
+
+        to 192.168.2.0/24 table 1
+
+        from 192.168.28.0/24 to 192.168.29.0/26 table small iif p33p1
+                             oif wlan0 tos 22 fwmark 24/12
+                             preference 39 realms 30/20 goto 40
+
+        to 1:2:3:4:5:6:7:0/112 from 7:6:5:4:3:2::/96 table 6908
+                               uidrange 10000-19999
+
+        to 1:2:3:4:6:6:7:0/112 from 8:6:5:4:3:2::/96 l3mdev protocol 12
+                               ip_proto UDP sport 10-20 dport 20-30
+        ...
+    }
+.fi
+.PP
+.SH VRRP track processes
+.PP
+.nf
+The configuration block looks like:
+
+    \fBvrrp_track_process\fR <STRING> {
+        # process to monitor (with optional parameters)
+        # A quoted string is treated as a single element, so if the first item
+        # after the process keyword is quoted, that will be the command name.
+        # For example:
+        #  process "/tmp/a b" param1 "param 2"
+        # would mean a process named '/tmp/a b' (quotes removed) with 2 parameters
+        #  'param1' and 'param 2'.
+        \fBprocess\fR <STRING>|<QUOTED_STRING> [<STRING>|<QUOTED_STRING> ...]
+
+        # If matching parameters, this specifies a partial match (i.e. the first
+        #   n parameters match exactly), or an initial match, i.e. the last
+        #   parameter may be longer that the parameter configured.
+        # To specify that a command must have no parameters, don't specify
+        #   any parameters, but specify param_match.
+        param_match {initial|partial}
+
+        # default weight (default is 1). For description of reverse, see track_process.
+        # 'weight 0 reverse' will cause the vrrp instance to be down when the
+        # quorum is up, and vice versa.
+        \fBweight\fR <-254..254> [reverse]
+
+        # minimum number of processes for success
+        \fBquorum\fR NUM
+
+        # maximum number of processes for success. For example, setting
+        #   this to 1 would cause a failure if two instances of the process
+        #   were running (but beware forks - see fork_delay below).
+        #   Setting this to 0 would mean failure if the matching process were
+        #   running at all.
+        \fBquorum_max\fR NUM
+
+        # time to delay after process quorum gained after fork before
+        #   consider process up (in fractions of second)
+        #   This is to avoid up/down bounce for fork/exec
+        \fBfork_delay\fR SECS
+
+        # time to delay after process quorum lost before
+        #   consider process down (in fractions of second)
+        #   This is to avoid down/up bounce after terminate/parent refork.
+        \fBterminate_delay\fR SECS
+
+        # this sets fork_delay and terminate_delay
+        \fBdelay\fR SECS
+
+        # Normally process string is matched against the process name,
+        #   as shown on the Name: line in /proc/PID/status, unless
+        #   parameters are specified.
+        #   This option forces matching the full command line
+        \fBfull_command\fR
+   }
+.fi
+.PP
+To avoid having to frequently run a track_script to monitor the existance
+of processes (often haproxy or nginx), vrrp_track_process can monitor whether
+other processes are running.
 .PP
-The syntax is the same as for virtual addresses and virtual routes.
+One difference from pgrep is track_process doesn't do a regular expression match of the
+command string, but does an exact match. 'pgrep ssh' will match an sshd process, this
+track_process will not (it is equivalent to pgrep "^ssh$").
 .PP
- static_ipaddress
- {
- 192.168.1.1/24 dev eth0 scope global
- ...
- }
+If full_command is used (equivalent to pgrep -f), /proc/PID/cmdline is used, but
+any updates to cmdline will not be detected (a process shouldn't normally change it,
+although it is possible with great care, for example systemd).
 .PP
- static_routes
- {
- 192.168.2.0/24 via 192.168.1.100 dev eth0
- ...
- }
+Prior to Linux v3.2 track_process will not support detection of changes to a process
+name, since the kernel did not notify changes of process name prior to 3.2. Most
+processes do not change their process name, but, for example, firefox forks processes
+that change their process name to "Web Content". The process name referred to here is
+the contents of /proc/PID/comm.
+.PP
+Quorum is the number of matching processes that must be run for an OK status.
+.PP
+Delay might be useful if it anticipated that a process may be reloaded (stopped and
+restarted), and it isn't desired to down and up a vrrp instance.
+.PP
+A positive weight means that an OK status will add <weight> to the priority of all
+VRRP instances which monitor it. On the opposite, a negative weight will be subtracted
+from the initial priority in case of insufficient processes.
+.PP
+If the vrrp instance or sync group is not the address owner and the result is between
+-253 and 253, the result will be added to the initial priority of the VRRP instance
+(a negative value will reduce the priority), although the effective priority will
+be limited to the range [1,254].
+.PP
+If a vrrp instance using a track_process is a member of a sync group, unless
+sync_group_tracking_weight is set on the group weight 0 must be set.
+Likewise, if the vrrp instance is the address owner, weight 0 must also be set.
+.PP
+Rational for not using pgrep/pidof/killall and the likes:
+.PP
+Every time pgrep or its equivalent is run, it iterates though the /proc/[1-9][0-9]*
+directories, and opens the status and cmdline pseudo files in each directory.
+The cmdline pseudo file is mapped to the process's address space, and so if that
+part of the process is swapped out, it will have to be fetched from the swap space.
+pgrep etc also include zombie processes whereas keepalived does not, since they aren't
+running.
+.PP
+This implementation only iterates though /proc/[1-9][0-9]*/ directories at start up, and
+it won't even read the cmdline pseudo files if 'full_command' is not specified for any of
+the vrrp_track_process entries. After startup, it uses the process_events
+kernel <-> userspace connector to receive notification of process changes. If full_command
+is specified for any track_process instance, the cmdline pseudo file will have to be
+read upon notification of the creation of the new process, but at that time it is very
+unlikely that it will have already been swapped out.
+.PP
+On a busy system with a high number of process creations/terminations, using a
+track_script with pgrep/pidof/killall may be more efficient, although those processes
+are inefficient compared to the minimum that keepalived needs.
+.PP
+Using pgrep etc on a system that is swapping can have a significant detrimental impact
+on the performance of the system, due to having to fetch swapped memory from the swap
+space, thereby causing additional swapping.
+.PP
+.SH BFD CONFIGURATION
+.PP
+This is an implementation of RFC5880 (Bidirectional forwarding detection),
+and this can be configured to work between 2 keepalived instances, but using
+unweighted track_bfds between a master/backup pair of VRRP instances means that
+the VRRP instance will only be able to come up if both VRRP instance are running,
+which somewhat defeats the purpose of VRRP.
+.PP
+This implementation has been tested with OpenBFDD (available at
+https://github.com/dyninc/OpenBFDD).
+.PP
+.nf
+The syntax for bfd instance is :
+
+\fBbfd_instance \fR<STRING> {
+    # BFD Neighbor IP (synonym neighbour_ip)
+    \fBneighbor_ip \fR<IP ADDRESS>
+
+    # Source IP to use (optional, except in order to ensure that the
+    # local port is valid, it is required)
+    \fBsource_ip \fR<IP ADDRESS>
+
+    # Required min RX interval, in ms
+    # (default is 10 ms)
+    \fBmin_rx \fR<INTEGER>
+
+    # Desired min TX interval, in ms
+    # (default is 10 ms)
+    \fBmin_tx \fR<INTEGER>
+
+    # Desired idle TX interval, in ms
+    # (default is 1000 ms)
+    \fBidle_tx \fR<INTEGER>
+
+    # Number of missed packets after
+    # which the session is declared down
+    # (default is 5)
+    \fBmultiplier \fR<INTEGER>
+
+    # Operate in passive mode (default is active)
+    \fBpassive\fR
+
+    # outgoing IPv4 ttl to use (default 255)
+    \fBttl \fR<INTEGER>
+
+    # outgoing IPv6 hoplimit to use (default 64)
+    \fBhoplimit \fR<INTEGER>
+
+    # maximum reduction of ttl/hoplimit
+    #  in received packet (default 0)
+    #  (255 disables hop count checking)
+    \fBmax_hops \fR<INTEGER>
+
+    # Default tracking weight
+    # Normally, positive weights are added to the vrrp instance priority when
+    # the bfd instance is up, negative weights reduce the priority when it is down.
+    # However, if reverse is specified, the priority is decreased when up and
+    # increased when down. 'weight 0 reverse' will cause the vrrp instance to be down
+    # when the bfd instance is up, and vice versa.
+    \fBweight\fR <-253:253> [reverse]
+
+    # Normally bfd event notifications are sent to both the VRRP and checker processes.
+    # Specifying vrrp or checker will cause event notifications for this bfd_instance
+    # only to be sent to the specified process
+    \fBvrrp\fR
+    \fBchecker\fR
+}
+.fi
 .PP
 .SH VRRPD CONFIGURATION
-contains subblocks of 
-.B VRRP synchronization group(s)
+contains subblocks of
+\fBVRRP script(s),
+VRRP synchronization group(s),
+VRRP gratuitous ARP and unsolicited neighbour advert delay group(s)\fR
 and
-.B VRRP instance(s)
+\fBVRRP instance(s)\fR
+.PP
+.SH VRRP script(s)
+.PP
+The script will be executed periodically, every <interval> seconds. Its exit
+code will be recorded for all VRRP instances which monitor it.
+Note that the script will only be executed if at least one VRRP instance
+monitors it.
+
+The default weight equals 0, which means that any VRRP instance monitoring
+the script will transition to the fault state after <fall> consecutive failures
+of the script. After that, <rise> consecutive successes will cause VRRP instances to
+leave the fault state, unless they are also in the fault state due to other scripts
+or interfaces that they are tracking.
+
+A positive weight means that <rise> successes will add <weight> to the priority of all
+VRRP instances which monitor it. On the opposite, a negative weight will be subtracted
+from the initial priority in case of <fall> failures.
+.PP
+.nf
+The syntax for the vrrp script is:
+
+# Adds a script to be executed periodically. Its exit code will be
+# recorded for all VRRP instances and sync groups which are monitoring it.
+\fBvrrp_script \fR<SCRIPT_NAME> {
+    # path of the script to execute
+    \fBscript \fR<STRING>|<QUOTED-STRING>
+
+    # seconds between script invocations, (default: 1 second)
+    \fBinterval \fR<INTEGER>
+
+    # seconds after which script is considered to have failed
+    \fBtimeout \fR<INTEGER>
+
+    # adjust priority by this weight, (default: 0)
+    # For description of reverse, see track_script.
+    # 'weight 0 reverse' will cause the vrrp instance to be down when the
+    # script is up, and vice versa.
+    \fBweight \fR<INTEGER:-253..253> [reverse]
+
+    # required number of successes for OK transition
+    \fBrise \fR<INTEGER>
+
+    # required number of successes for KO transition
+    \fBfall \fR<INTEGER>
+
+    # user/group names to run script under.
+    #  group default to group of user
+    \fBuser \fRUSERNAME [GROUPNAME]
+
+    # assume script initially is in failed state
+    \fBinit_fail\fR
+}
+.fi
+.PP
+.SH VRRP track files
+.PP
+Adds a file to be monitored. The script will be read whenever it is
+modified. The value in the file will be recorded for all VRRP instances
+and sync groups which monitor it.
+Note that the file will only be read if at least one VRRP instance
+or sync group monitors it.
+
+A value will be read as a number in text from the file.  If the weight
+configured against the track_file is 0, a non-zero value in the file will
+be treated as a failure status, and a zero value will be treated as
+an OK status, otherwise the value will be  multiplied by the weight configured
+in the track_file statement. If the result is less than -253 any VRRP
+instance or sync group monitoring the script will transition to the fault state
+(the weight can be 254 to allow for a negative value being read from the file).
+
+If the vrrp instance or sync group is not the address owner and the result is between
+-253 and 253, the result will be added to the initial priority of the VRRP instance
+(a negative value will reduce the priority), although the effective priority will
+be limited to the range [1,254].
+
+If a vrrp instance using a track_file is a member of a sync group, unless
+sync_group_tracking_weight is set on the group weight 0 must be set.
+Likewise, if the vrrp instance is the address owner, weight 0 must also be set.
 .PP
+.nf
+The syntax for vrrp track file is :
+
+\fBvrrp_track_file \fR<STRING> {
+    # file to track (weight defaults to 1)
+    \fBfile \fR<QUOTED_STRING>
+
+    # optional default weight
+    \fBweight \fR<-254..254> [reverse]
+
+    # create the file and/or initialise the value
+    # This causes VALUE (default 0) to be written to
+    # the specified file at startup if the file doesn't
+    # exist, unless overwrite is specified in which case
+    # any existing file contents will be overwritten with
+    # the specified value.
+    \fBinit_file \fR[VALUE] [overwrite]
+}
+.fi
 .SH VRRP synchronization group(s)
 .PP
- #string, name of group of IPs that failover together
- vrrp_sync_group VG_1 { 
-    group {
-      inside_network   # name of vrrp_instance (below) 
-      outside_network  # One for each moveable IP. 
-      ... 
+VRRP Sync Group is an extension to VRRP protocol. The main goal is to define a bundle
+of VRRP instance to get synchronized together so that transition of one instance will
+be reflected to others group members.
+.sp
+In addition there is an enhanced notify feature for fine state transition catching.
+.sp
+You can also define multiple track policy in order to force state transition according
+to a third party event such as interface, scripts, file, BFD.
+.sp
+\fBImportant\fR: for a SYNC group to run reliably, it is vital that all instances in
+the group are MASTER or that they are all either BACKUP or FAULT. A
+situation with half instances having higher priority on machine A
+half others with higher priority on machine B will lead to constant
+re-elections. For this reason, when instances are grouped, any
+track scripts/files configured against member VRRP instances will have
+their tracking weights automatically set to zero, in order to avoid
+inconsistent priorities across instances.
+.PP
+.nf
+The syntax for vrrp_sync_group is :
+
+\fBvrrp_sync_group \fR<STRING> {
+    \fBgroup \fR{
+        # name of the vrrp_instance (see below)
+        # Set of VRRP_Instance string
+        <STRING>
+        <STRING>
+        ...
+    }
+
+    # Synchronization group tracking interface, script, file & bfd will
+    # update the status/priority of all VRRP instances which are members
+    # of the sync group.
+    # 'weight 0 reverse' will cause the vrrp instance to be down when the
+    # interface is up, and vice versa.
+    \fBtrack_interface \fR{
+        eth0
+        eth1
+        eth2 weight <-253..253> [reverse]
+        ...
     }
-    
+
+    # add a tracking script to the sync group (<SCRIPT_NAME> is the name
+    # of the vrrp_script entry) go to FAULT state if any of these go down
+    # if unweighted.
+    # reverse causes the direction of the adjustment of the priority to be reversed.
+    \fBtrack_script \fR{
+        <SCRIPT_NAME>
+        <SCRIPT_NAME> weight <-253..253> [reverse|no_reverse]
+    }
+
+    # Files whose state we monitor, value is added to effective priority.
+    # <STRING> is the name of a vrrp_track_file
+    # weight defaults to weight configured in vrrp_track_file
+    \fBtrack_file \fR{
+        <STRING>
+        <STRING> weight <-254..254> [reverse|noreverse]
+        ...
+    }
+
+    # Process to monitor, weight is added to effective priority.
+    # <STRING> is the name of a vrrp_track_process
+    # weight defaults to weight configured in vrrp_track_process.
+    # See vrrp_instance track_process for description of weight.
+    \fBtrack_process \fR{
+        <STRING>
+        <STRING> weight <-254..254> [reverse|noreverse]
+        ...
+    }
+
+    # BFD instances we monitor, value is added to effective priority.
+    # <STRING> is the name of a BFD instance
+    \fBtrack_bfd \fR{
+        <STRING>
+        <STRING>
+        <STRING> weight <INTEGER: -253..253> [reverse|noreverse]
+        ...
+    }
+
     # notify scripts and alerts are optional
     #
-    # filenames of scripts to run on transitions
-    # can be unquoted (if just filename) 
-    # or quoted (if has parameters)
+    # filenames of scripts to run on transitions can be unquoted (if
+    # just filename) or quoted (if it has parameters)
+    # The username and groupname specify the user and group
+    # under which the scripts should be run. If username is
+    # specified, the group defaults to the group of the user.
+    # If username is not specified, they default to the
+    # global script_user and script_group
+
     # to MASTER transition
-    notify_master /path/to_master.sh 
+    \fBnotify_master \fR/path/to_master.sh [username [groupname]]
+
     # to BACKUP transition
-    notify_backup /path/to_backup.sh 
-    # FAULT transition 
-    notify_fault "/path/fault.sh VG_1" 
+    \fBnotify_backup \fR/path/to_backup.sh [username [groupname]]
+
+    # FAULT transition
+    \fBnotify_fault \fR"/path/fault.sh VG_1" [username [groupname]]
+
+    # executed when stopping vrrp
+    \fBnotify_stop \fR<STRING>|<QUOTED-STRING> [username [groupname]]
 
     # for ANY state transition.
-    # "notify" script is called AFTER the 
-    # notify_* script(s) and is executed 
-    # with 3 arguments provided by keepalived
-    # (ie don't include parameters in the notify line).
-    # arguments
-    # $1 = "GROUP"|"INSTANCE"
-    # $2 = name of group or instance
-    # $3 = target state of transition 
-    #     ("MASTER"|"BACKUP"|"FAULT")
-    notify /path/notify.sh 
-
-    # Send email notifcation during state transition, 
-    # using addresses in global_defs above.
-    smtp_alert
- }
+    # "notify" script is called AFTER the notify_* script(s) and
+    # is executed with 4 additional arguments after the configured
+    # arguments provided by Keepalived:
+    #   $(n-3) = "GROUP"|"INSTANCE"
+    #   $(n-2) = name of the group or instance
+    #   $(n-1) = target state of transition (stop only applies to instances)
+    #            ("MASTER"|"BACKUP"|"FAULT"|"STOP")
+    #   $(n)   = priority value
+    #   $(n-3) and $(n-1) are ALWAYS sent in uppercase, and the possible
+    # strings sent are the same ones listed above
+    #   ("GROUP"/"INSTANCE", "MASTER"/"BACKUP"/"FAULT"/"STOP")
+    # (note: STOP is only applicable to instances)
+    \fBnotify \fR<STRING>|<QUOTED-STRING> [username [groupname]]
+
+    # The notify fifo output is the same as the last 4 parameters for the "notify"
+    # script, with the addition of "MASTER_RX_LOWER_PRI" instead of state for an
+    # instance, and also "MASTER_PRIORITY" and "BACKUP_PRIORITY" if the priority
+    # changes and notify_priority_changes is configured.
+    # MASTER_RX_LOWER_PRI is used if a master needs to set some external state, such
+    # as setting a secondary IP address when using Amazon AWS; if another keepalived
+    # has transitioned to master due to a communications break, the lower priority
+    # instance will have taken over the secondary IP address, and the proper master
+    # needs to be able to restore it.
+
+    # Send FIFO notifies for vrrp priority changes
+    \fBnotify_priority_changes\fR <BOOL>
 
+    # Send email notification during state transition,
+    # using addresses in global_defs above (default no,
+    # unless global smtp_alert/smtp_alert_vrrp set)
+    \fBsmtp_alert \fR<BOOL>
+
+    # DEPRECATED. Use track_interface, track_script and
+    # track_file on vrrp_sync_groups instead.
+    \fBglobal_tracking\fR
+
+    # allow sync groups to use differing weights.
+    # This probably WON'T WORK, but is a replacement for
+    # global_tracking in case different weights were used
+    # across different vrrp instances in the same sync group.
+    \fBsync_group_tracking_weight\fR
+}
+.fi
+.SH VRRP gratuitous ARP and unsolicited neighbour advert delay group(s)
+.PP
+specifies the setting of delays between sending gratuitous ARPs
+and unsolicited neighbour advertisements. This is intended for when an
+upstream switch is unable to handle being flooded with ARPs/NAs.
+
+Use interface when the limits apply on the single physical interface.
+Use interfaces when a group of interfaces are linked to the same switch
+and the limits apply to the switch as a whole.
+
+\fBNote\fR: Only one of interface or interfaces should be used per block.
+
+If the global vrrp_garp_interval and/or vrrp_gna_interval are set, any
+interfaces that aren't specified in a garp_group will inherit the global
+settings.
+.PP
+.nf
+The syntax for garp_group is :
+
+\fBgarp_group \fR{
+    # Sets the interval between Gratuitous ARP (in seconds, resolution microseconds)
+    \fBgarp_interval \fR<DECIMAL>
+
+    # Sets the default interval between unsolicited NA (in seconds, resolution microseconds)
+    \fBgna_interval \fR<DECIMAL>
+
+    # The physical interface to which the intervals apply
+    \fBinterface \fR<STRING>
+
+    # A list of interfaces accross which the delays are aggregated.
+    \fBinterfaces \fR{
+        <STRING>
+        <STRING>
+        ...
+    }
+}
+.fi
 .SH VRRP instance(s)
 .PP
-describes the moveable IP for each instance of a group in vrrp_sync_group.
-Here are described two IPs (on inside_network and on outside_network), 
-on machine "my_hostname", which belong to the group VG_1 and
-which will transition together on any state change.
+A VRRP Instance is the VRRP protocol key feature. It defines and configures
+VRRP behaviour to run on a specific interface. Each VRRP Instances are related
+to a uniq interface.
 .PP
- #You will need to write another block for outside_network.
- vrrp_instance inside_network {
+.nf
+The syntax for vrrp_instance is :
+
+\fBvrrp_instance \fR<STRING> {
     # Initial state, MASTER|BACKUP
-    # As soon as the other machine(s) come up, 
-    # an election will be held and the machine 
-    # with the highest "priority" will become MASTER.
+    # As soon as the other machine(s) come up,
+    # an election will be held and the machine
+    # with the highest priority will become MASTER.
     # So the entry here doesn't matter a whole lot.
-    state MASTER
+    \fBstate \fRMASTER
 
     # interface for inside_network, bound by vrrp
-    interface eth0
+    \fBinterface \fReth0
 
     # Use VRRP Virtual MAC.
-    use_vmac <VMAC_INTERFACE>
+    # \fBNOTE\fR: If sysctl net.ipv4.conf.all.rp_filter is set,
+    # and this vrrp_instance is an IPv4 instance, using
+    # this option will cause the individual interfaces to be
+    # updated to the greater of their current setting, and
+    # all.rp_filter, as will default.rp_filter, and all.rp_filter
+    # will be set to 0.
+    # The original settings are restored on termination.
+    \fBuse_vmac \fR[<VMAC_INTERFACE>]
 
     # Send/Recv VRRP messages from base interface instead of
     # VMAC interface
-    vmac_xmit_base
+    \fBvmac_xmit_base\fR
+
+    # Use IPVLAN interface. keepalived will create a mode L2
+    # ipvlan interface on top of the specified interface.
+    # For IPv4 instances, an IP address is required, for IPv6
+    # the address is optional, in which case the link local
+    # address will be used.
+    # The mode flags default to bridge. NOTE: the mode flags must be the
+    # same for all ipvlans on the same underlying interface.
+    # It is safer to configure an interface name, in case keepalived crashes
+    # and restarts, in which case it can more reliably find a previously
+    # created interface.
+    \fBuse_ipvlan \fR[<INTERFACE_NAME>] [IP_ADDRESS] [bridge|private|vepa]
+
+    # force instance to use IPv6 (this option is deprecated since
+    # the virtual ip addresses determine whether IPv4 or IPv6 is used).
+    \fBnative_ipv6\fR
 
     # Ignore VRRP interface faults (default unset)
-    dont_track_primary
+    \fBdont_track_primary\fR
+
+    # optional, monitor these as well.
+    # go to FAULT state if any of these go down if unweighted.
+    # When a weight is specified in track_interface, instead of setting the vrrp
+    # instance to the FAULT state in case of failure, its priority will be
+    # increased by the weight when the interface is up (for positive weights),
+    # or decreased by the weight's absolute value when the interface is down
+    # (for negative weights), unless reverse is specified, in which case the
+    # direction of adjustment of the priority is reversed.
+    # The weight must be comprised between -253 and +253 inclusive.
+    # 0 is the default behaviour which means that a failure implies a
+    # FAULT state. The common practice is to use positive weights to count a
+    # limited number of good services so that the server with the highest count
+    # becomes master. Negative weights are better to count unexpected failures
+    # among a high number of interfaces, as it will not saturate even with high
+    # number of interfaces. Use reverse to increase priority if an interfaces is down
+    \fBtrack_interface \fR{
+        eth0
+        eth1
+        eth2 weight <-253..253> [reverse]
+         ...
+    }
+
+    # add a tracking script to the interface
+    # (<SCRIPT_NAME> is the name of the vrrp_track_script entry)
+    # The same principle as track_interface can be applied to track_script entries,
+    # except that an unspecified weight means that the default weight declared in
+    # the script will be used (which itself defaults to 0).
+    # reverse causes the direction of the adjustment of the priority to be reversed.
+    \fBtrack_script \fR{
+        <SCRIPT_NAME>
+        <SCRIPT_NAME> weight <-253..253> [reverse|no_reverse]
+    }
 
-    # optional, monitor these as well. 
-    # go to FAULT state if any of these go down.
-    track_interface {
-      eth0 
-      eth1 
-      ...
+    # Files whose state we monitor, value is added to effective priority.
+    # <STRING> is the name of a vrrp_track_file
+    \fBtrack_file \fR{
+        <STRING>
+        <STRING>
+        <STRING> weight <-254..254> [reverse|noreverse]
+        ...
     }
 
-    # default IP for binding vrrpd is the primary IP 
-    # on interface. If you want to hide location of vrrpd, 
+    # Positive weights are added/subtracted when the process is running,
+    # negative weights are subtracted/added when the not running.
+    # If reverse is specified, the addition/subtraction is reversed.
+    # <STRING> is the name of a vrrp_track_process
+    # weight defaults to weight configured in vrrp_track_process
+    \fBtrack_process \fR{
+        <STRING>
+        <STRING> weight <-254..254> [reverse|noreverse]
+        ...
+    }
+
+    # BFD instances we monitor, value is added to effective priority,
+    # unless reverse is specified, when the value is subtracted.
+    # Positive weights are add/subtracted when the bfd instance is up,
+    # negative weights are subtracted/added when the bfd instance is down.
+    # <STRING> is the name of a BFD instance
+    \fBtrack_bfd \fR{
+        <STRING>
+        <STRING>
+        <STRING> weight <INTEGER: -253..253> [reverse|noreverse]
+        ...
+    }
+
+    # default IP for binding vrrpd is the primary IP
+    # on interface. If you want to hide the location of vrrpd,
     # use this IP as src_addr for multicast or unicast vrrp
-    # packets. (since it's multicast, vrrpd will get the reply 
+    # packets. (since it's multicast, vrrpd will get the reply
     # packet no matter what src_addr is used).
     # optional
-    mcast_src_ip <IPADDR> 
-    unicast_src_ip <IPADDR> 
+    \fBmcast_src_ip \fR<IPADDR>
+    \fBunicast_src_ip \fR<IPADDR>
 
-    # Do not send VRRP adverts over VRRP multicast group.
+    # if the configured src_ip doesn't exist or is removed put the
+    # instance into fault state
+    \fBtrack_src_ip\fR
+
+    # VRRP version to run on interface
+    #  default is global parameter vrrp_version, but IPv6 instances will
+    #  always use version 3.
+    \fBversion \fR<2 or 3>
+
+    # Do not send VRRP adverts over a VRRP multicast group.
     # Instead it sends adverts to the following list of
-    # ip addresses using unicast design fashion. It can
-    # be cool to use VRRP FSM and features in a networking
-    # environement where multicast is not supported !
-    # IP Addresses specified can IPv4 as well as IPv6
-    unicast_peer {
-      <IPADDR>
-      ...
+    # ip addresses using unicast. It can be cool to use
+    # the VRRP FSM and features in a networking
+    # environment where multicast is not supported!
+    # IP addresses specified can be IPv4 as well as IPv6.
+    \fBunicast_peer \fR{
+        <IPADDR>
+        ...
     }
 
-    # Binding interface for lvs syncd
-    lvs_sync_daemon_interface eth1 
+    # The checksum calculation when using VRRPv3 changed after v1.3.6.
+    #  Setting this flag forces the old checksum algorithm to be used
+    #  to maintain backward compatibility, although keepalived will
+    #  attempt to maintain compatibility anyway if it sees an old
+    #  version checksum. Specifying never will turn off auto detection
+    #  of old checksums. [This option may not be enabled - check output
+    #  of `keepalived -v` for OLD_CHKSUM_COMPAT.]
+    \fBold_unicast_checksum \fR[never]
 
-    # delay for gratuitous ARP after transition to MASTER
-    garp_master_delay 10 # secs, default 5 
+    # interface specific settings, same as global parameters.
+    # default to global parameters
+    \fBgarp_master_delay \fR10
+    \fBgarp_master_repeat \fR1
+    \fBgarp_lower_prio_delay \fR10
+    \fBgarp_lower_prio_repeat \fR1
+    \fBgarp_master_refresh \fR60
+    \fBgarp_master_refresh_repeat \fR2
+    \fBgarp_interval \fR100
+    \fBgna_interval \fR100
 
-    # arbitary unique number 0..255
+    # If a lower priority advert is received, don't send another advert.
+    # This causes adherence to the RFCs (defaults to global
+    # vrrp_lower_priority_dont_send_advert).
+    \fBlower_prio_no_advert \fR[<BOOL>]
+
+    # If we are master and receive a higher priority advert, send an advert
+    # (which will be lower priority than the other master), before we transition
+    # to backup. This means that if the other master has garp_lower_prio_repeat
+    # set, it will resend garp messages. This is to get around the problem of
+    # their having been two simultaneous masters, and the last GARP
+    # messages seen were from us.
+    \fBhigher_prio_send_advert \fR[<BOOL>]
+
+    # arbitrary unique number from 1 to 255
     # used to differentiate multiple instances of vrrpd
     # running on the same NIC (and hence same socket).
-    virtual_router_id 51
+    \fBvirtual_router_id \fR51
 
     # for electing MASTER, highest priority wins.
-    # to be MASTER, make 50 more than other machines.
-    priority 100
-
-    # VRRP Advert interval, secs (use default)
-    advert_int 1
-    authentication {     # Authentication block
-        # PASS||AH
-        # PASS - Simple Passwd (suggested) 
+    # to be MASTER, make this 50 more than on other machines.
+    \fBpriority \fR100
+
+    # VRRP Advert interval in seconds (e.g. 0.92) (use default)
+    \fBadvert_int \fR1
+
+    # Note: authentication was removed from the VRRPv2 specification by
+    # RFC3768 in 2004.
+    #   Use of this option is non-compliant and can cause problems; avoid
+    #   using if possible, except when using unicast, where it can be helpful.
+    \fBauthentication \fR{
+        # PASS|AH
+        # PASS - Simple password (suggested)
         # AH - IPSEC (not recommended))
-        auth_type PASS
+        \fBauth_type \fRPASS
+
         # Password for accessing vrrpd.
-        # should be the same for all machines.
+        # should be the same on all machines.
         # Only the first eight (8) characters are used.
-        auth_pass 1234
+        \fBauth_pass \fR1234
     }
 
-    #addresses add|del on change to MASTER, to BACKUP.
-    #With the same entries on other machines,
-    #the opposite transition will be occuring.
-    virtual_ipaddress {
-        <IPADDR>/<MASK> brd <IPADDR> dev <STRING> scope <SCOPE> label <LABEL>
+    # addresses add|del on change to MASTER, to BACKUP.
+    # With the same entries on other machines,
+    # the opposite transition will be occurring.
+    # For virutal_ipaddress, virtual_ipaddress_excluded,
+    #   virtual_routes and virtual_rules most of the options
+    #   match the options of the command ip address/route/rule add.
+    #   The track_group option only applies to static addresses/routes/rules.
+    #   no_track is specific to keepalived and means that the
+    #   vrrp_instance will not transition out of master state
+    #   if the address/route/rule is deleted and the address/route/rule
+    #   will not be reinstated until the vrrp instance next transitions
+    #   to master.
+    # <LABEL>: is optional and creates a name for the alias.
+               For compatibility with "ifconfig", it should
+               be of the form <realdev>:<anytext>, for example
+               eth0:1 for an alias on eth0.
+    # <SCOPE>: ("site"|"link"|"host"|"nowhere"|"global")
+    \fBvirtual_ipaddress \fR{
+        <IPADDR>[/<MASK>] [brd <IPADDR>] [dev <STRING>] [scope <SCOPE>]
+                          [label <LABEL>] [peer <IPADDR>] [home]
+                          [-nodad] [mngtmpaddr] [noprefixroute]
+                          [autojoin] [no_track]
         192.168.200.17/24 dev eth1
         192.168.200.18/24 dev eth2 label eth2:1
     }
 
-    #VRRP IP excluded from VRRP
-    #optional.
-    #For cases with large numbers (eg 200) of IPs 
-    #on the same interface. To decrease the number 
-    #of packets sent in adverts, you can exclude 
-    #most IPs from adverts.
-    #The IPs are add|del as for virtual_ipaddress.
-    virtual_ipaddress_excluded { 
-     <IPADDR>/<MASK> brd <IPADDR> dev <STRING> scope <SCOPE> 
-     <IPADDR>/<MASK> brd <IPADDR> dev <STRING> scope <SCOPE>
+    # VRRP IP excluded from VRRP optional.
+    # For cases with large numbers (eg 200) of IPs
+    # on the same interface. To decrease the number
+    # of addresses sent in adverts, you can exclude
+    # most IPs from adverts.
+    # The IPs are add|del as for virtual_ipaddress.
+    # Can also be used if you want to be able to add
+    # a mixture of IPv4 and IPv6 addresses, since all
+    # addresses in virtual_ipaddress must be of the
+    # same family.
+    \fBvirtual_ipaddress_excluded \fR{
+        <IPADDR>[/<MASK>] [brd <IPADDR>] [dev <STRING>] [scope <SCOPE>]
+                          [label <LABEL>] [peer <IPADDR>] [home]
+                          [-nodad] [mngtmpaddr] [noprefixroute]
+                          [autojoin] [no_track]
+        <IPADDR>[/<MASK>] ...
         ...
     }
-    # routes add|del when changing to MASTER, to BACKUP
-    virtual_routes {
-        # src <IPADDR> [to] <IPADDR>/<MASK> via|gw <IPADDR> [or <IPADDR>] dev <STRING> scope <SCOPE> tab
+
+    # Set the promote_secondaries flag on the interface to stop other
+    # addresses in the same CIDR being removed when 1 of them is removed
+    # For example if 10.1.1.2/24 and 10.1.1.3/24 are both configured on an
+    # interface, and one is removed, unless promote_secondaries is set on
+    # the interface the other address will also be removed.
+    \fBpromote_secondaries \fR
+
+    # routes add|del when changing to MASTER, to BACKUP.
+    # See static_routes for more details
+    \fBvirtual_routes \fR{
+        # src <IPADDR> [to] <IPADDR>/<MASK> via|gw <IPADDR>
+        #   [or <IPADDR>] dev <STRING> scope <SCOPE> table <TABLE>
         src 192.168.100.1 to 192.168.109.0/24 via 192.168.200.254 dev eth1
         192.168.110.0/24 via 192.168.200.254 dev eth1
-        192.168.111.0/24 dev eth2
+        192.168.111.0/24 dev eth2 no_track
         192.168.112.0/24 via 192.168.100.254
-	192.168.113.0/24 via 192.168.200.254 or 192.168.100.254 dev eth1
-	blackhole 192.168.114.0/24
+        192.168.113.0/24 via 192.168.200.254 or 192.168.100.254 dev eth1
+        blackhole 192.168.114.0/24
+        0.0.0.0/0 gw 192.168.0.1 table 100  # To set a default gateway into table 100.
+    }
+
+    # rules add|del when changing to MASTER, to BACKUP
+    # See static_rules for more details
+    \fBvirtual_rules \fR{
+        from 192.168.2.0/24 table 1
+        to 192.168.2.0/24 table 1 no_track
     }
 
-    # VRRP will normally preempt a lower priority
-    # machine when a higher priority machine comes
-    # online.  "nopreempt" allows the lower priority
-    # machine to maintain the master role, even when
-    # a higher priority machine comes back online.
+    # VRRPv3 has an Accept Mode to allow the virtual router when not the
+    # address owner to receive packets addressed to a VIP. This is the default
+    # setting unless strict mode is set. As an extension, this also works for
+    # VRRPv2 (RFC 3768 doesn't define an accept mode).
+    # --
+    # Accept packets to non address-owner
+    \fBaccept\fR
+
+    # Drop packets to non address-owner.
+    \fBno_accept\fR
+
+    # VRRP will normally preempt a lower priority machine when a higher priority
+    # machine comes online.  "nopreempt" allows the lower priority machine to
+    # maintain the master role, even when a higher priority machine comes back
+    # online.
     # NOTE: For this to work, the initial state of this
     # entry must be BACKUP.
-    nopreempt
+    # --
+    \fBnopreempt\fR
+
+    # for backwards compatibility
+    \fBpreempt\fR
 
-    # Seconds after startup until preemption
+    # See description of global vrrp_skip_check_adv_addr, which
+    # sets the default value. Defaults to vrrp_skip_check_adv_addr
+    \fBskip_check_adv_addr \fR[on|off|true|false|yes|no]
+
+    # See description of global vrrp_strict
+    # If vrrp_strict is not specified, it takes the value of vrrp_strict
+    # If strict_mode without a parameter is specified, it defaults to on
+    \fBstrict_mode \fR[on|off|true|false|yes|no]
+
+    # Seconds after startup or seeing a lower priority master until preemption
     # (if not disabled by "nopreempt").
-    # Range: 0 (default) to 1,000
+    # Range: 0 (default) to 1000 (e.g. 4.12)
     # NOTE: For this to work, the initial state of this
     # entry must be BACKUP.
-    preempt_delay 300    # waits 5 minutes
+    \fBpreempt_delay \fR300    # waits 5 minutes
 
     # Debug level, not implemented yet.
-    debug
+    # LEVEL is a number in the range 0 to 4
+    \fBdebug \fR<LEVEL>
 
     # notify scripts, alert as above
-    notify_master <STRING>|<QUOTED-STRING>
-    notify_backup <STRING>|<QUOTED-STRING>
-    notify_fault <STRING>|<QUOTED-STRING> 
-    notify <STRING>|<QUOTED-STRING> 
-    smtp_alert 
- }
+    \fBnotify_master \fR<STRING>|<QUOTED-STRING> [username [groupname]]
+    \fBnotify_backup \fR<STRING>|<QUOTED-STRING> [username [groupname]]
+    \fBnotify_fault \fR<STRING>|<QUOTED-STRING> [username [groupname]]
+    # executed when stopping vrrp
+    \fBnotify_stop \fR<STRING>|<QUOTED-STRING> [username [groupname]]
+    \fBnotify \fR<STRING>|<QUOTED-STRING> [username [groupname]]
+
+    # The notify_master_rx_lower_pri script is executed if a master
+    #  receives an advert with priority lower than the master's advert.
+    \fBnotify_master_rx_lower_pri \fR<STRING>|<QUOTED-STRING> [username [groupname]]
+
+    # Send vrrp instance priority notifications on notify FIFOs.
+    \fBnotify_priority_changes\fR <BOOL>
+
+    # Send SMTP alerts
+    \fBsmtp_alert \fR<BOOL>
+
+    # Set socket receive buffer size (see global_defs
+    # vrrp_rx_bufs_policy for explanation)
+    \fBkernel_rx_buf_size\fR
 
+    # Set use of linkbeat for the interface of this VRRP instance. This option is
+    # deprecated - use linkbeat_interfaces block instead.
+    \fBlinkbeat_use_polling\fR
+}
+.fi
 .SH LVS CONFIGURATION
-contains subblocks of 
-.B Virtual server group(s)
+contains subblocks of
+\fBVirtual server group(s)\fR
 and
-.B Virtual server(s)
+\fBVirtual server(s)\fR
+.PP
+The subblocks contain arguments for configuring Linux IPVS (LVS) feature.
+Knowledge of
+.I ipvsadm(8)
+will be helpful here. Configuring LVS is achieved by defining virtual server groups,
+virtual servers and optionally SSL configuration. Every virtual server defines a set
+of real servers, you can attach healthcheckers to each real server. Keepalived will
+then lead LVS operation by dynamically maintaining topology.
 .PP
-The subblocks contain arguments for 
-.I ipvsadm(8). 
-A knowlege of 
+For details of what configuration combinations are valid, see the
 .I ipvsadm(8)
-will be helpful here.
+man page.
+.PP
+\fBNote:\fR
+Where an option can be configured for a virtual server, real server,
+and possibly checker, the virtual server setting is the default for real servers,
+and the real server setting is the default for checkers.
+.PP
+\fBNote:\fR
+Tunnelled real/sorry servers can differ from the address family of
+the virtual server and non tunnelled real/sorry servers, which all have to be the
+same. If a virtual server uses a fwmark, and all the real/sorry servers are
+tunnelled, the address family of the virtual server will be the same as the
+address family of the real/sorry servers if they are all the same, otherwise
+it will default to IPv4 (use ip_family inet6 to override this).
+.PP
+\fBNote:\fR
+The port for the virtual server can only be omitted if the virtual service is persistent.
 .PP
 .SH Virtual server group(s)
 .PP
- # optional
- # this groups allows a service on a real_server 
- # to belong to multiple virtual services 
- # and to be only health checked once.
- # Only for very large LVSs.
- virtual_server_group <STRING> {
-        #VIP port
-        <IPADDR> <PORT> 
-        <IPADDR> <PORT>
-        ...
-        #
-        # <IPADDR RANGE> has the form 
-        # XXX.YYY.ZZZ.WWW-VVV eg 192.168.200.1-10 
-        # range includes both .1 and .10 address
-        <IPADDR RANGE> <PORT># VIP range VPORT
-        <IPADDR RANGE> <PORT>
-        ...
-        fwmark <INT>  # fwmark
-        fwmark <INT>
-        ...
-}
+This feature offers a way to simplify your configuration by factorizing virtual server
+definitions. If you need to define a bunch of virtual servers with exactly the same
+real server topology then this feature will make your configuration much more readable
+and will optimize healthchecking task by only spawning one healthchecking where
+multiple virtual server declaration will spawn a dedicated healthchecker for every
+real server which will waste system resources.
+.PP
+Any combination of IP addresses, IP address ranges and firewall marks can be used. Use
+of this option is intended for very large LVSs.
+.PP
+.nf
+The syntax for virtual_server_group is :
 
+\fBvirtual_server_group \fR<STRING> {
+    # Virtual IP Address and Port
+    <IPADDR> [<PORT>]
+    <IPADDR> [<PORT>]
+    ...
+    # <IPADDR RANGE> has the form
+    # XXX.YYY.ZZZ.WWW-VVV eg 192.168.200.1-10
+    # range includes both .1 and .10 address
+    <IPADDR RANGE> [<PORT>] # VIP range [VPORT]
+    <IPADDR RANGE> [<PORT>]
+    ...
+    # Firewall Mark (fwmark)
+    \fBfwmark \fR<INTEGER>
+    \fBfwmark \fR<INTEGER>
+    ...
+}
+.fi
 .SH Virtual server(s)
 .PP
-A virtual_server can be a declaration of one of 
-.TP 
-.B vip vport (IPADDR PORT pair)
-.TP
-.B fwmark <INT>
-.TP
-.B (virtual server) group <STRING>
-
-    #setup service
-    virtual_server IP port |
-    virtual_server fwmark int |
-    virtual_server group string
-    {
-    # delay timer for service polling
-    delay_loop <INT> 
-
-    # LVS scheduler 
-    lb_algo rr|wrr|lc|wlc|lblc|sh|dh 
+A virtual_server can be a declaration of one of
+\fB<IPADDR> [<PORT>]\fR
+,
+\fBfwmark <INTEGER>\fR
+or
+\fBgroup <STRING>\fR
+.PP
+.nf
+The syntax for virtual_server is :
+
+\fBvirtual_server \fR<IPADDR> [<PORT>]  |
+\fBvirtual_server fwmark \fR<INTEGER> |
+\fBvirtual_server group \fR<STRING> {
+    # LVS scheduler
+    \fBlvs_sched \fRrr|wrr|lc|wlc|lblc|sh|mh|dh|fo|ovf|lblcr|sed|nq
+
+    # Enable hashed entry
+    \fBhashed\fR
+    # Enable flag-1 for scheduler (-b flag-1 in ipvsadm)
+    \fBflag-1\fR
+    # Enable flag-2 for scheduler (-b flag-2 in ipvsadm)
+    \fBflag-2\fR
+    # Enable flag-3 for scheduler (-b flag-3 in ipvsadm)
+    \fBflag-3\fR
+    # Enable sh-port for sh scheduler (-b sh-port in ipvsadm)
+    \fBsh-port\fR
+    # Enable sh-fallback for sh scheduler  (-b sh-fallback in ipvsadm)
+    \fBsh-fallback\fR
+    # Enable mh-port for mh scheduler (-b mh-port in ipvsadm)
+    \fBmh-port\fR
+    # Enable mh-fallback for mh scheduler  (-b mh-fallback in ipvsadm)
+    \fBmh-fallback\fR
     # Enable One-Packet-Scheduling for UDP (-O in ipvsadm)
-    ops
-    # LVS forwarding method
-    lb_kind NAT|DR|TUN 
-    # LVS persistence timeout, sec
-    persistence_timeout <INT> 
+    \fBops\fR
+
+    # Default LVS forwarding method.
+    # Default tunnel type is ipip. Since Linux 5.2 the GUE tunnel type can
+    # be specified. If using GUE, a port number is required. Since Linux 5.3
+    # if the tunnel type is GUE, the checksum option can also be specified.
+    # Since Linux 5.3, GRE tunnel type is also supported, but without the
+    # remcsum option.
+    \fBlvs_method \fRNAT|DR
+    or
+    \fBlvs_method \fRTUN [type {ipip|gue port NUM|gre} [nocsum|csum|remcsum]]
+    # LVS persistence engine name (currently only sip supported)
+    \fBpersistence_engine \fR<STRING>
+    # LVS persistence timeout in seconds, default 6 minutes
+    \fBpersistence_timeout \fR[<INTEGER>]
     # LVS granularity mask (-M in ipvsadm)
-    persistence_granularity <NETMASK> 
-    # Only TCP is implemented
-    protocol TCP 
-    # If VS IP address is not set, 
+    \fBpersistence_granularity \fR<NETMASK>
+    # L4 protocol
+    \fBprotocol \fRTCP|UDP|SCTP
+    # If VS IP address is not set,
     # suspend healthchecker's activity
-    ha_suspend
-    
-    # VirtualHost string for HTTP_GET or SSL_GET
+    \fBha_suspend\fR
+
+    # Send email notification during quorum up/down transition,
+    # using addresses in global_defs above (default no,
+    # unless global smtp_alert/smtp_alert_checker set)
+    \fBsmtp_alert \fR<BOOL>
+
+    # Default VirtualHost string for HTTP_GET or SSL_GET
     # eg virtualhost www.firewall.loc
-    virtualhost <STRING>                
+    # Overridden by virtualhost config of real server or checker
+    \fBvirtualhost \fR<STRING>
 
-    # Assume silently all RSs down and healthchecks
-    # failed on start. This helps preventing false
-    # positive actions on startup. Alpha mode is
+    # On daemon startup assume that all RSs are down
+    # and healthchecks failed. This helps to prevent
+    # false positives on startup. Alpha mode is
     # disabled by default.
-    alpha
+    \fBalpha\fR
 
-    # On daemon shutdown, consider quorum and RS
+    # On daemon shutdown consider quorum and RS
     # down notifiers for execution, where appropriate.
     # Omega mode is disabled by default.
-    omega
+    \fBomega\fR
 
     # Minimum total weight of all live servers in
     # the pool necessary to operate VS with no
     # quality regression. Defaults to 1.
-    quorum <INT>
+    \fBquorum \fR<INTEGER>
 
     # Tolerate this much weight units compared to the
     # nominal quorum, when considering quorum gain
     # or loss. A flap dampener. Defaults to 0.
-    hysteresis <INT>
+    \fBhysteresis \fR<INTEGER>
 
-    # Script to launch when quorum is gained.
-    quorum_up <STRING>|<QUOTED-STRING>
+    # Script to execute when quorum is gained.
+    \fBquorum_up \fR<STRING>|<QUOTED-STRING> [username [groupname]]
 
-    # Script to launch when quorum is lost.
-    quorum_down <STRING>|<QUOTED-STRING>
+    # Script to execute when quorum is lost.
+    \fBquorum_down \fR<STRING>|<QUOTED-STRING> [username [groupname]]
 
+    # IP family for a fwmark service (optional)
+    \fBip_family \fRinet|inet6
 
     # setup realserver(s)
 
-    # RS to add when all realservers are down
-    sorry_server <IPADDR> <PORT>
-    # applies inhibit_on_failure behaviour to the
-    # preceding sorry_server directive
-    sorry_server_inhibit
-    
-    # one entry for each realserver 	
-    real_server <IPADDR> <PORT> 
-       {
-           # relative weight to use, default: 1
-           weight <INT> 
-           # Set weight to 0
-           # when healthchecker detects failure
-           inhibit_on_failure 
-                
-           # Script to launch when healthchecker
-           # considers service as up.
-           notify_up <STRING>|<QUOTED-STRING> 
-           # Script to launch when healthchecker
-           # considers service as down.
-           notify_down <STRING>|<QUOTED-STRING> 
-   
-           # pick one healthchecker
-           # HTTP_GET|SSL_GET|TCP_CHECK|SMTP_CHECK|MISC_CHECK
-   
-           # HTTP and SSL healthcheckers
-           HTTP_GET|SSL_GET 
-           {              
-               # A url to test
-               # can have multiple entries here
-               url {
-                 #eg path / , or path /mrtg2/
-                 path <STRING> 
-                 # healthcheck needs status_code
-                 # or status_code and digest
-                 # Digest computed with genhash
-                 # eg digest 9b3a0c85a887a256d6939da88aabd8cd
-                 digest <STRING>
-                 # status code returned in the HTTP header
-                 # eg status_code 200
-                 status_code <INT>     
-               } 
-               # number of get retry
-               nb_get_retry <INT> 
-               # delay before retry
-               delay_before_retry <INT>
-
-               # ======== generic connection options
-               # Optional IP address to connect to.
-               # The default is real server's IP
-               connect_ip <IP ADDRESS>
-               # Optional port to connect to if not
-               # The default is real server's port
-               connect_port <PORT>
-               # Optional interface to use to
-               # originate the connection
-               bindto <IP ADDRESS>
-               # Optional source port to
-               # originate the connection from
-               bind_port <PORT>
-               # Optional connection timeout in seconds.
-               # The default is 5 seconds
-               connect_timeout <INTEGER>
-               # Optional fwmark to mark all outgoing
-               # checker pakets with
-               fwmark <INTEGER>
-
-               # Optional random delay to begin initial check for
-               # maximum N seconds.
-               # Useful to scatter multiple simultaneous
-               # checks to the same RS. Enabled by default, with
-               # the maximum at delay_loop. Specify 0 to disable
-               warmup <INT>
-           } #HTTP_GET|SSL_GET
-   
-           #TCP healthchecker (bind to IP port)
-           TCP_CHECK 
-           { 
-               # ======== generic connection options
-               # Optional IP address to connect to.
-               # The default is real server's IP
-               connect_ip <IP ADDRESS>
-               # Optional port to connect to if not
-               # The default is real server's port
-               connect_port <PORT>
-               # Optional interface to use to
-               # originate the connection
-               bindto <IP ADDRESS>
-               # Optional source port to
-               # originate the connection from
-               bind_port <PORT>
-               # Optional connection timeout in seconds.
-               # The default is 5 seconds
-               connect_timeout <INTEGER>
-               # Optional fwmark to mark all outgoing
-               # checker pakets with
-               fwmark <INTEGER>
-
-               # Optional random delay to begin initial check for
-               # maximum N seconds.
-               # Useful to scatter multiple simultaneous
-               # checks to the same RS. Enabled by default, with
-               # the maximum at delay_loop. Specify 0 to disable
-               warmup <INT>
-           } #TCP_CHECK
-
-           # SMTP healthchecker
-           SMTP_CHECK
-           {
-               # An optional host interface to check.
-               # If no host directives are present, only
-               # the ip address of the real server will
-               # be checked.
-               host {
-                 # ======== generic connection options
-                 # Optional IP address to connect to.
-                 # The default is real server's IP
-                 connect_ip <IP ADDRESS>
-                 # Optional port to connect to if not
-                 # the default of 25
-                 connect_port <PORT>
-                 # Optional interface to use to
-                 # originate the connection
-                 bindto <IP ADDRESS>
-                 # Optional source port to
-                 # originate the connection from
-                 bind_port <PORT>
-                 # Optional per-host connection timeout.
-                 # Default is outer-scope connect_timeout
-                 connect_timeout <INTEGER>
-                 # Optional fwmark to mark all outgoing
-                 # checker pakets with
-                 fwmark <INTEGER>
-              }
-              # Connection and read/write timeout
-              # in seconds. The default is 5 seconds
-              connect_timeout <INTEGER>
-              # Number of times to retry a failed check
-              retry <INTEGER>
-              # Delay in seconds before retrying
-              delay_before_retry <INTEGER>
-              # Optional string to use for the smtp HELO request
-              helo_name <STRING>|<QUOTED-STRING>
-
-              # Optional random delay to begin initial check for
-              # maximum N seconds.
-              # Useful to scatter multiple simultaneous
-              # checks to the same RS. Enabled by default, with
-              # the maximum at delay_loop. Specify 0 to disable
-              warmup <INT>
-           } #SMTP_CHECK
-
-           #MISC healthchecker, run a program
-           MISC_CHECK 
-           {
-               # External system script or program
-               misc_path <STRING>|<QUOTED-STRING>
-               # Script execution timeout
-               misc_timeout <INT>
-
-               # Optional random delay to begin initial check for
-               # maximum N seconds.
-               # Useful to scatter multiple simultaneous
-               # checks to the same RS. Enabled by default, with
-               # the maximum at delay_loop. Specify 0 to disable
-               warmup <INT>
-
-               # If set, exit code from healthchecker is used
-               # to dynamically adjust the weight as follows:
-               #   exit status 0: svc check success, weight
-               #     unchanged.
-               #   exit status 1: svc check failed.
-               #   exit status 2-255: svc check success, weight
-               #     changed to 2 less than exit status.
-               #   (for example: exit status of 255 would set
-               #     weight to 253)
-               misc_dynamic
-           }
-       } # realserver defn
-    } # virtual service
-
-
-.SH AUTHOR 
+    # RS to add to LVS topology when the quorum isn't achieved.
+    #  If a sorry server is configured, all real servers will
+    #  be brought down when the quorum is not achieved.
+    \fBsorry_server \fR<IPADDR> [<PORT>]
+    # applies inhibit_on_failure behaviour to the sorry_server
+    \fBsorry_server_inhibit\fR
+    # Sorry server LVS forwarding method
+    # For details of tunnel type, see virtual_server details.
+    \fBsorry_server_lvs_method \fRNAT|DR
+    or
+    \fBsorry_server_lvs_method \fRTUN [type {ipip|gue port NUM|gre} [nocsum|csum|remcsum]]
+
+    # Optional connection timeout in seconds.
+    # The default is 5 seconds
+    \fBconnect_timeout \fR<TIMER>
+
+    # Retry count to make additional checks if check
+    # of an alive server fails. Default: 1 unless specified below
+    \fBretry \fR<INTEGER>
+
+    # delay before retry after failure
+    \fBdelay_before_retry \fR<TIMER>
+
+    # Optional random delay to start the initial check
+    # for maximum N seconds.
+    # Useful to scatter multiple simultaneous
+    # checks to the same RS. Enabled by default, with
+    # the maximum at delay_loop. Specify 0 to disable
+    \fBwarmup \fR<TIMER>
+
+    # delay timer for checker polling
+    \fBdelay_loop \fR<TIMER>
+
+    # Set weight to 0 when healthchecker detects failure
+    \fBinhibit_on_failure\fR
+
+    # one entry for each realserver
+    \fBreal_server \fR<IPADDR> [<PORT>] {
+        # relative weight to use, default: 1
+        \fBweight \fR<INTEGER>
+        # LVS forwarding method
+        # For details of tunnel type, see virtual_server details.
+        \fBlvs_method \fRNAT|DR
+        or
+        \fBlvs_method \fRTUN [type {ipip|gue port NUM|gre} [nocsum|csum|remcsum]]
+
+        # Script to execute when healthchecker
+        # considers service as up.
+        \fBnotify_up \fR<STRING>|<QUOTED-STRING> [username [groupname]]
+        # Script to execute when healthchecker
+        # considers service as down.
+        \fBnotify_down \fR<STRING>|<QUOTED-STRING> [username [groupname]]
+
+        # maximum number of connections to server
+        \fButhreshold \fR<INTEGER>
+        # minimum number of connections to server
+        \fBlthreshold \fR<INTEGER>
+
+        # Send email notification during state transition,
+        # using addresses in global_defs above (default yes,
+        # unless global smtp_alert/smtp_alert_checker set)
+        \fBsmtp_alert \fR<BOOL>
+
+        # Default VirtualHost string for HTTP_GET or SSL_GET
+        # eg virtualhost www.firewall.loc
+        # Overridden by virtualhost config of a checker
+        \fBvirtualhost \fR<STRING>
+
+        \fBalpha \fR<BOOL>                    # see above
+        \fBconnect_timeout \fR<TIMER>         # see above
+        \fBretry \fR<INTEGER>                 # see above
+        \fBdelay_before_retry \fR<TIMER>      # see above
+        \fBwarmup \fR<TIMER>                  # see above
+        \fBdelay_loop \fR<TIMER>              # see above
+        \fBinhibit_on_failure \fR<BOOL>       # see above
+        \fBlog_all_failures \fR<BOOL>         # log all failures when checker up
+
+        # healthcheckers. Can be multiple of each type
+        # HTTP_GET|SSL_GET|TCP_CHECK|SMTP_CHECK|DNS_CHECK|MISC_CHECK|BFD_CHECK
+
+        # All checkers have the following options, except MISC_CHECK
+        # which only has options alpha onwards, and BFD_CHECK which has none
+        # of the standard options:
+        CHECKER_TYPE {
+            # ======== generic connection options
+            # Optional IP address to connect to.
+            # The default is the realserver IP
+            \fBconnect_ip \fR<IPADDR>
+
+            # Optional port to connect to
+            # The default is the realserver port
+            \fBconnect_port \fR<PORT>
+
+            # Optional address to use to
+            # originate the connection
+            \fBbindto \fR<IPADDR>
+
+            # Optional interface to use; needed if
+            # the bindto address is IPv6 link local
+            \fBbind_if \fR<IFNAME>
+
+            # Optional source port to
+            # originate the connection from
+            \fBbind_port \fR<PORT>
+
+            # Optional fwmark to mark all outgoing
+            # checker packets with
+            \fBfwmark \fR<INTEGER>
+
+            \fBalpha \fR<BOOL>                    # see above
+            \fBconnect_timeout \fR<TIMER>         # see above
+            \fBretry \fR<INTEGER>                 # see above
+            \fBdelay_before_retry \fR<TIMER>      # see above
+            \fBwarmup \fR<TIMER>                  # see above
+            \fBdelay_loop \fR<TIMER>              # see above
+        }
+
+        # The following options are additional checker specific
+
+        # HTTP and SSL healthcheckers
+        \fBHTTP_GET|SSL_GET \fR{
+            # HTTP protocol version, one of 1.0, 1.0C, 1.1
+            # Protocol version 1.0C means version 1.0 with the addition
+            # of a "Connection: close" line, which is included in
+            # version 1.1 by default.
+            \fBhttp_protocol \fR<PROTOCOL>
+            # When alpha mode is set, or when recovering from a failure,
+            # each URL is checked, with a delay of <delay_loop> between
+            # each check. if there were 20 URLs, and the <delay_loop> were
+            # 3 seconds, it would take 1 minute before the RS would come up
+            # following startup, or recovery from a failure. Setting
+            # fast_recovery removes the delay, both at start up and after
+            # recovery from a failure, meaning that the RS will come up
+            # once all the URLs have been checked, with no delay between
+            # checking each URL.
+            \fBfast_recovery \fR[<BOOL>]
+            # An url to test
+            # can have multiple entries here
+            \fBurl \fR{
+              #eg path / , or path /mrtg2/
+              \fBpath \fR<STRING>
+              # healthcheck needs digest
+              # or status_code and digest
+              # Digest computed with genhash
+              # eg digest 9b3a0c85a887a256d6939da88aabd8cd
+              \fBdigest \fR<STRING>
+              # status code returned in the HTTP header
+              # eg status_code 200 or status_code 200-299 400-499 503 505
+              # Default is 200-299
+              \fBstatus_code \fR<INTEGER|RANGE> [<INTEGER|RANGE>] ...
+              # VirtualHost string. eg virtualhost www.firewall.loc
+              # If not set, uses virtualhost from real or virtual server
+              \fBvirtualhost \fR<STRING>
+              # Regular expression to search returned data against.
+              # A failure to match causes the check to fail.
+              \fBregex \fR<STRING>
+              # Reverse the sense of the match, so a match of the
+              # returned text causes the check to fail.
+              \fBregex_no_match\fR
+              # Space separated list of options for regex.
+              #  See man pcre2api for a description of the options.
+              #  The following option are supported:
+              #   allow_empty_class alt_bsux auto_callout caseless
+              #   dollar_endonly dotall dupnames extended firstline
+              #   match_unset_backref multiline never_ucp never_utf
+              #   no_auto_capture no_auto_possess no_dotstar_anchor
+              #   no_start_optimize ucp ungreedy utf never_backslash_c
+              #   alt_circumflex alt_verbnames use_offset_limit
+              \fBregex_options \fR<OPTIONS>
+              # For complicated regular expressions a larger stack
+              #   may be needed, and this allows the start and maximum
+              #   sizes in bytes to be specified. For more details see
+              #   the documentation for pcre2_jit_stack_create()
+              \fBregex_stack \fR<START> <MAX>
+              # The minimum offset into the returned data to start
+              #   checking for the regex pattern match. This can save
+              #   processing time if the returned data is large.
+              \fBregex_min_offset \fR<OFFSET>
+              # The maximum offset into the returned data for the
+              #   start of the subject match.
+              \fBregex_max_offset \fR<OFFSET>
+            }
+        }
+
+        \fBSSL_GET \fR{
+            # when provided, send Server Name Indicator during SSL handshake
+            \fBenable_sni\fR
+        }
+
+        # TCP healthchecker
+        \fBTCP_CHECK \fR{
+            # No additional options
+        }
+
+        # SMTP healthchecker
+        \fBSMTP_CHECK \fR{
+            # Optional string to use for the SMTP HELO request
+            \fBhelo_name \fR<STRING>|<QUOTED-STRING>
+        }
+
+        # DNS healthchecker
+        \fBDNS_CHECK \fR{
+            # The retry default is 3.
+
+            # DNS query type
+            #   A|NS|CNAME|SOA|MX|TXT|AAAA
+            # The default is SOA
+            \fBtype \fR<STRING>
+
+            # Domain name to use for the DNS query
+            # The default is . (dot)
+            \fBname \fR<STRING>
+        }
+
+        # MISC healthchecker, run a program
+        \fBMISC_CHECK \fR{
+            # The retry default is 0.
+
+            # External script or program
+            \fBmisc_path \fR<STRING>|<QUOTED-STRING>
+            # Script execution timeout
+            \fBmisc_timeout \fR<INTEGER>
+
+            # If set, the exit code from healthchecker is used
+            # to dynamically adjust the weight as follows:
+            #   exit status 0: svc check success, weight
+            #     unchanged.
+            #   exit status 1: svc check failed.
+            #   exit status 2-255: svc check success, weight
+            #     changed to 2 less than exit status.
+            #   (for example: exit status of 255 would set
+            #     weight to 253)
+            # NOTE: do not have more than one dynamic MISC_CHECK per real_server.
+            \fBmisc_dynamic\fR
+
+            # Specify the username/groupname that the script should
+            #   be run under.
+            # If GROUPNAME is not specified, the group of the user
+            #   is used
+            \fBuser \fRUSERNAME [GROUPNAME]
+        }
+
+        # BFD instance name to check
+        \fBBFD_CHECK \fR{
+            \fBname \fR<STRING>
+        }
+    }
+}
+.fi
+.PP
+.nf
+# Parameters used for SSL_GET check.
+# If none of the parameters are specified, the SSL context
+# will be auto generated.
+\fBSSL \fR{
+    # Password
+    \fBpassword \fR<STRING>
+    # CA file
+    \fBca \fR<STRING>
+    # Certificate file
+    \fBcertificate \fR<STRING>
+    # Key file
+    \fBkey \fR<STRING>
+}
+.fi
+.PP
+.SH ADVANCED CONFIGURATION
+.PP
+Configuration parser has been extended to support advanced features such as
+conditional configuration and parameter substitution. These features are
+very usefull for any scripted env where configuration template are
+generated (datacenters).
+.PP
+.SH Conditional configuration and configuration id
+The config-id defaults to the first part of the node name as returned by
+uname, and can be overridden with the -i or --config-id command line option.
+.PP
+Any configuration line starting with '@' is a conditional configuration line.
+The word immediately following (i.e. without any space) the '@' character
+is compared against the config-id, and if they don't match, the configuration
+line is ignored.
+.PP
+Alternatively, '@^' is a negative comparison, so if the word immediately
+following does NOT match the config-id, the configuration line IS included.
+.PP
+The purpose of this is to allow a single configuration file to be used for
+multiple systems, where the only differences are likely to be the router_id,
+vrrp instance priorities, and possibly interface names and unicast addresses.
+.PP
+For example:
+.PP
+.nf
+    \fBglobal_defs \fR{
+        @main   \fBrouter_id \fRmain_router
+        @backup \fBrouter_id \fRbackup_router
+    }
+    ...
+    \fBvrrp_instance \fRVRRP {
+        ...
+        @main    \fBunicast_src_ip \fR1.2.3.4
+        @backup  \fBunicast_src_ip \fR1.2.3.5
+        @backup2 \fBunicast_src_ip \fR1.2.3.6
+        \fBunicast_peer \fR{
+            @^main    1.2.3.4
+            @^backup  1.2.3.5
+            @^backup2 1.2.3.6
+        }
+        ...
+    }
+.fi
+.PP
+If keepalived is invoked with -i main, then the router_id will be set to main_router,
+if invoked with -i backup, then backup_router, if not invoked with -i, or with
+-i anything else, then the router_id will not be set. The unicast peers for main will
+be 1.2.3.5 and 1.2.3.6.
+.SH Parameter substitution
+Substitutable parameters can be specified. The format for defining a parameter is:
+.PP
+$PARAMETER=VALUE
+.PP
+where there must be no space before the '=' and only whitespace may preceed to '$'.
+Empty values are allowed.
+
+Parameter names can be made up of any combination of A-Za-z0-9 and _, but cannot start
+with a digit. Parameter names starting with an underscore should be considered
+reserved names that keepalived will define for various pre-defined options.
+
+After a parameter is defined, any occurrence of $PARAMETER followed by
+whitespace, or any occurrence of ${PARAMETER} (which need not be followed by
+whitespace) will be replaced by VALUE.
+
+Replacement is recursive, so that if a parameter value itself includes a
+replaceable parameter, then after the first substitution, the parameter
+in the value will then be replaced; the substitution is done at replacement
+time and not at definition time, so for example:
+.PP
+.nf
+    $ADDRESS_BASE=10.2.${ADDRESS_BASE_SUB}
+    $ADDRESS_BASE_SUB=0
+    ${ADDRESS_BASE}.100/32
+    $ADDRESS_BASE_SUB=10
+    ${ADDRESS_BASE}.100/32
+
+    will produce:
+        10.2.0.100/32
+        10.2.10.100/32
+.fi
+.PP
+Note in the above examples the use of both ADDRESS_BASE and ADDRESS_BASE_SUB
+required braces ({}) since the parameters were not followed by whitespace
+(after the first substitution which produced 10.2.${ADDRESS_BASE_SUB}.100/32
+the parameter is still not followed by whitespace).
+
+If a parameter is not defined, it will not be replaced at all, so for
+example ${UNDEF_PARAMETER} will remain in the configuration if it is
+undefined; this means that existing configuration that contains a '$'
+character (for example in a script definition) will not be changed so
+long as no new parameter definitions are added to the configuration.
+
+Parameter substitution works in conjunction with conditional configuration.
+For example:
+.PP
+.nf
+    @main $PRIORITY=240
+    @backup $PRIORITY=200
+    \fR...
+    \fBvrrp_instance \fRVI_0 {
+        \fBpriority \fR$PRIORITY
+    }
+
+    will produce:
+        \fR...
+        \fBvrrp_instance \fRVI_0 {
+            \fBpriority \fR240
+        }
+        if the config_id is main.
+
+    $IF_MAIN=@main
+    $IF_MAIN \fBpriority \fR240
+
+    will produce:
+        \fBpriority \fR240
+        if the config_id is main and nothing if the config_id is not main,
+        although why anyone would want to use this rather than simply the
+        following is not known (but still possible):
+            @main \fBpriority \fR240
+.fi
+.PP
+Multiline definitions are also supported, but when used there must be nothing on the
+line after the parameter name. A multiline definition is specified by ending each line
+except the last with a '\\' character.
+.PP
+Example:
+.nf
+    $INSTANCE= \e
+    \fBvrrp_instance \fRVI_${NUM} { \e
+        \fBinterface \fReth0.${NUM} \e
+        \fBuse_vmac \fRvrrp${NUM}.1 \e
+        \fBvirtual_router_id \fR1 \e
+        @high \fBpriority \fR130 \e
+        @low \fBpriority \fR120 \e
+        \fBadvert_int \fR1 \e
+        \fBvirtual_ipaddress \fR{ \e
+            10.0.${NUM}.254/24 \e
+        } \e
+        \fBtrack_script \fR{ \e
+            offset_instance_${NUM} \e
+        } \e
+    }
+
+    $NUM=0
+    $INSTANCE
+
+    $NUM=1
+    $INSTANCE
+.fi
+.PP
+The use of multiline definitions can be nested.
+.PP
+Example:
+.nf
+    $RS= \e
+    \fBreal_server \fR192.168.${VS_NUM}.${RS_NUM} 80 { \e
+        \fBweight \fR1 \e
+        \fBinhibit_on_failure\fR \e
+        \fBsmtp_alert\fR \e
+        \fBMISC_CHECK \fR{ \e
+            \fBmisc_path \fR"${_PWD}/scripts/vs.sh RS_misc.${INST}.${VS_NUM}.${RS_NUM}.0 10.0.${VS_NUM}.4:80->192.168.${VS_NUM}.${RS_NUM}:80" \e
+        } \e
+
+        \fBMISC_CHECK \fR{ \e
+            \fBmisc_path \fR"${_PWD}/scripts/vs.sh RS_misc.${INST}.${VS_NUM}.${RS_NUM}.1 10.0.${VS_NUM}.4:80->192.168.${VS_NUM}.${RS_NUM}:80" \e
+        } \e
+
+        \fBnotify_up \fR"${_PWD}/scripts/notify.sh RS_notify.${INST}.${VS_NUM}.${RS_NUM} UP 10.0.${VS_NUM}.4:80->192.168.${VS_NUM}.${RS_NUM}:80" \e
+
+        \fBnotify_down \fR"${_PWD}/scripts/notify.sh RS_notify.${INST}.${VS_NUM}.${RS_NUM} DOWN 10.0.${VS_NUM}.4:80->192.168.${VS_NUM}.${RS_NUM}:80" \e
+
+    }
+
+    $VS= \e
+    \fBvirtual_server \fR10.0.${VS_NUM}.4 80 { \e
+        \fBquorum \fR2 \e
+        \fBquorum_up \fR"${_PWD}/scripts/notify.sh VS_notify.${INST} UP 10.0.${VS_NUM}.4:80" \e
+        \fBquorum_down \fR"${_PWD}/scripts/notify.sh VS_notify.${INST} DOWN 10.0.${VS_NUM}.4:80" \e
+        $RS_NUM=1 \e
+        $RS \e
+        $RS_NUM=2 \e
+        $RS \e
+        $RS_NUM=3 \e
+        $RS \e
+    }
+
+    $VS_NUM=0
+    $ALPHA=alpha
+    $VS
+
+    $VS_NUM=1
+    $ALPHA=
+    $VS
+.fi
+.PP
+The above will create 2 virtual servers, each with 3 real servers
+.SH Pre-defined definitions
+.PP
+The following pre-defined definitions are defined:
+.sp
+\fB${_PWD} : \fRThe directory of the current configuration file (this can be changed if using the include directive).
+.br
+\fB${_INSTANCE} : \fRThe instance name (as defined by the -i option, defaults to hostname).
 .br
-Joseph Mack. 
+\fB${_RANDOM [MIN [MAX]]} : \fRThis is replaced by a random integer in the range [MIN, MAX],
+where MIN and MAX are optional non-negative integers. Defaults are MIN=0 and MAX=32767.
+.PP
+Additional pre-defined definitions will be added as their need is identified.
+It will normally be quite straightforward to add additional pre-defined
+definitions, so if you need one, or have a good idea for one, then raise
+an issue at https://github.com/acassen/keepalived/issues requesting it.
+.SH Sequence blocks
+.PP
+A line starting \fB~SEQ(var, start, step, end)\fR will cause the remainder of the
+line to be processed multiple times, with the variable \fB$var\fR set initially to
+\fBstart\fR, and then \fB$var\fR will be incremented by \fBstep\fR repeatedly, terminating when
+it is greater than \fBend\fR. \fBstep\fR may be omitted, in which case it defaults to 1 or
+-1, depending on whether \fBend\fR is greater or less than \fBstart\fR. \fBstart\fR may also be
+omitted, in which case it defaults to 1 if \fBend\fR > 0 or -1 if \fBend\fR < 0. so, for example:
+.PP
+.nf
+    ~SEQ(SUBNET, 0, 3) ip_address 10.0.$SUBNET.1
+
+    would produce:
+        ip_address 10.0.0.1
+        ip_address 10.0.1.1
+        ip_address 10.0.2.1
+        ip_address 10.0.3.1
+.fi
+.PP
+There can be multiple ~SEQ elements on a line, so for example:
+.PP
+.nf
+    $VI4= \e
+    \fBvrrp_track_file \fRoffset_instance_4.${IF}.${NUM}.${ID} { \e
+        \fBfile \fR"${_PWD}/679/track_files/4.${IF}.${NUM}.${ID}" \e
+        \fBweight \fR-100 \e
+    } \e
+    \fBvrrp_instance \fRvrrp4.${IF}.${NUM}.${ID} { \e
+        \fBinterface \fRbond${IF}.${NUM} \e
+        \fBuse_vmac \fRvrrp4.${IF}.${NUM}.${ID} \e
+        \fBvirtual_router_id \fR${ID} \e
+        \fBpriority \fR130 \e
+        \fBvirtual_ipaddress \fR{ \e
+            10.${IF}.${NUM}.${ID}/24 \e
+        } \e
+        \fBtrack_file \fR{ \e
+            offset_instance_4.${IF}.${NUM}.${ID} \e
+        } \e
+    }
+
+    \fB~SEQ\fR(IF,0,7) \fB~SEQ\fR(NUM,0,31) \fB~SEQ\fR(ID,1,254) $VI4
+
+    will produce 65024 vrrp instances with names from vrrp4.0.0.1 through to
+    vrrp4.7.31.254.
+.fi
+.PP
+.SH AUTHORS
 .br
-Information derived from doc/keepalived.conf.SYNOPSIS,
-doc/samples/keepalived.conf.* and Changelog by Alexandre Cassen 
-for keepalived-1.1.4, 
-and from HOWTOs by Adam Fletcher and Vince Worthington.
+Initial by Joseph Mack. Extensive updates by Alexandre Cassen & Quentin Armitage.
 .SH "SEE ALSO"
 ipvsadm(8), ip --help.
-.\" Local Variables:
-.\"  mode: nroff
-.\" End:
diff --git a/tools/keepalived/doc/man/man8/.gitignore b/tools/keepalived/doc/man/man8/.gitignore
new file mode 100644
index 000000000..f85d35a34
--- /dev/null
+++ b/tools/keepalived/doc/man/man8/.gitignore
@@ -0,0 +1 @@
+keepalived.8
diff --git a/tools/keepalived/doc/man/man8/Makefile.am b/tools/keepalived/doc/man/man8/Makefile.am
new file mode 100644
index 000000000..608228206
--- /dev/null
+++ b/tools/keepalived/doc/man/man8/Makefile.am
@@ -0,0 +1,20 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+edit = echo "  EDIT     $@"; \
+	sed \
+	 -e 's|@DEFAULT_CONFIG_FILE[@]|$(DEFAULT_CONFIG_FILE)|g'
+
+dist_man8_MANS  = keepalived.8
+
+keepalived.8: Makefile
+	@$(edit) '$(srcdir)/$@.in' >$@
+
+keepalived.8: $(srcdir)/keepalived.8.in
+
+EXTRA_DIST		= keepalived.8.in
+
+MOSTLYCLEANFILES	= keepalived.8
diff --git a/tools/keepalived/doc/man/man8/keepalived.8 b/tools/keepalived/doc/man/man8/keepalived.8
deleted file mode 100644
index 7219887dc..000000000
--- a/tools/keepalived/doc/man/man8/keepalived.8
+++ /dev/null
@@ -1,107 +0,0 @@
-.TH KEEPALIVED "8" "November 2012"
-
-.na
-.nh
-
-.SH "NAME"
-keepalived \- load\-balancing and high\-availability service
-
-.SH "SYNOPSIS"
-\fBkeepalived\fP
-[\fB\-f\fP|\fB\-\-use\-file\fP=FILE]
-[\fB\-P\fP|\fB\-\-vrrp\fP]
-[\fB\-C\fP|\fB\-\-check\fP]
-[\fB\-l\fP|\fB\-\-log\-console\fP]
-[\fB\-D\fP|\fB\-\-log\-detail\fP]
-[\fB\-S\fP|\fB\-\-log\-facility\fP={0-7}]
-[\fB\-V\fP|\fB\-\-dont\-release\-vrrp\fP]
-[\fB\-I\fP|\fB\-\-dont\-release\-ipvs\fP]
-[\fB\-R\fP|\fB\-\-dont\-respawn\fP]
-[\fB\-n\fP|\fB\-\-dont\-fork\fP]
-[\fB\-d\fP|\fB\-\-dump\-conf\fP]
-[\fB\-p\fP|\fB\-\-pid\fP=FILE]
-[\fB\-r\fP|\fB\-\-vrrp_pid\fP=FILE]
-[\fB\-c\fP|\fB\-\-checkers_pid\fP=FILE]
-[\fB\-v\fP|\fB\-\-version\fP]
-[\fB\-h\fP|\fB\-\-help\fP]
-
-.SH "DESCRIPTION"
-Keepalived provides simple and robust facilities for load\-balancing
-and high\-availability. The load\-balancing framework relies on
-well\-known and widely used Linux Virtual Server (IPVS) kernel module
-providing Layer4 load\-balancing. Keepalived implements a set of
-checkers to dynamically and adaptively maintain and manage
-load\-balanced server pool according their health. Keepalived also
-implements the VRRPv2 protocol to achieve high\-availability with
-director failover.
-
-.SH "OPTIONS"
-.TP
-\fB -f, --use-file\fP=FILE
-Use the specified configuration file. The default configuration file
-is "/etc/keepalived/keepalived.conf".
-.TP
-\fB -P, --vrrp\fP
-Only run the VRRP subsystem. This is useful for configurations that do
-not use IPVS load balancer.
-.TP
-\fB -C, --check\fP
-Only run the healthcheck subsystem. This is useful for configurations
-that use the IPVS load balancer with a single director with no failover.
-.TP
-\fB -l, --log-console\fP
-Log messages to the local console. The default behavior is to log
-messages to syslog.
-.TP
-\fB -D, --log-detail\fP
-Detailed log messages.
-.TP
-\fB -S, --log-facility\fP=[0-7]
-Set syslog facility to LOG_LOCAL[0-7]. The default syslog facility is LOG_DAEMON.
-.TP
-\fB -V, --dont-release-vrrp\fP
-Don't remove VRRP VIPs and VROUTEs on daemon stop. The default
-behavior is to remove all VIPs and VROUTEs when keepalived exits
-.TP
-\fB -I, --dont-release-ipvs\fP
-Don't remove IPVS topology on daemon stop. The default behavior it to
-remove all entries from the IPVS virtual server table on when
-keepalived exits.
-.TP
-\fB -R, --dont-respawn\fP
-Don't respawn child processes. The default behavior is to restart the
-VRRP and checker processes if either process exits.
-.TP
-\fB -n, --dont-fork\fP
-Don't fork the daemon process. This option will cause keepalived to
-run in the foreground.
-.TP
-\fB -d, --dump-conf\fP
-Dump the configuration data.
-.TP
-\fB -p, --pid\fP=FILE
-Use specified pidfile for parent keepalived process. The default
-pidfile for keepalived is "/var/run/keepalived.pid".
-.TP
-\fB -r, --vrrp_pid\fP=FILE
-Use specified pidfile for VRRP child process. The default pidfile for
-the VRRP child process is "/var/run/keepalived_vrrp.pid".
-.TP
-\fB -c, --checkers_pid\fP=FILE
-Use specified pidfile for checkers child process. The default pidfile
-for the checker child process is "/var/run/keepalived_checkers.pid".
-.TP
-\fB -x, --snmp\fP
-Enable SNMP subsystem.
-.TP
-\fB -v, --version\fP
-Display the version and exit.
-.TP
-\fB -h, --help\fP
-Display this help message and exit.
-
-.SH "SEE ALSO"
-\fBkeepalived.conf\fP(5), \fBipvsadm\fP(8)
-
-.SH "AUTHOR"
-This man page was written by Ryan O'Hara <rohara@redhat.com>
diff --git a/tools/keepalived/doc/man/man8/keepalived.8.in b/tools/keepalived/doc/man/man8/keepalived.8.in
new file mode 100644
index 000000000..77d258853
--- /dev/null
+++ b/tools/keepalived/doc/man/man8/keepalived.8.in
@@ -0,0 +1,358 @@
+.TH KEEPALIVED "8" "July 2018"
+
+.na
+.nh
+
+.SH "NAME"
+keepalived \- load\-balancing and high\-availability service
+
+.SH "SYNOPSIS"
+\fBkeepalived\fP
+[\fB\-f\fP|\fB\-\-use\-file\fP=FILE]
+[\fB\-P\fP|\fB\-\-vrrp\fP]
+[\fB\-C\fP|\fB\-\-check\fP]
+[\fB\-B\fP|\fB\-\-no_bfd\fP]
+[\fB\-\-all\fP]
+[\fB\-l\fP|\fB\-\-log\-console\fP]
+[\fB\-D\fP|\fB\-\-log\-detail\fP]
+[\fB\-S\fP|\fB\-\-log\-facility\fP={0-7}]
+[\fB\-g\fP|\fB\-\-log\-file\fP=FILE]
+[\fB\-\-flush\-log\-file\fP]
+[\fB\-G\fP|\fB\-\-no\-syslog\fP]
+[\fB\-X\fP|\fB\-\-release\-vips\fP]
+[\fB\-V\fP|\fB\-\-dont\-release\-vrrp\fP]
+[\fB\-I\fP|\fB\-\-dont\-release\-ipvs\fP]
+[\fB\-R\fP|\fB\-\-dont\-respawn\fP]
+[\fB\-n\fP|\fB\-\-dont\-fork\fP]
+[\fB\-d\fP|\fB\-\-dump\-conf\fP]
+[\fB\-p\fP|\fB\-\-pid\fP=FILE]
+[\fB\-r\fP|\fB\-\-vrrp_pid\fP=FILE]
+[\fB\-c\fP|\fB\-\-checkers_pid\fP=FILE]
+[\fB\-a\fP|\fB\-\-address-monitoring\fP]
+[\fB\-b\fP|\fB\-\-bfd_pid\fP=FILE]
+[\fB\-s\fP|\fB\-\-namespace\fP=NAME]
+[\fB\-i\fP|\fB\-\-config-id\fP id]
+[\fB\-x\fP|\fB\-\-snmp\fP]
+[\fB\-A\fP|\fB\-\-snmp-agent-socket\fP=FILE]
+[\fB\-u\fP|\fB\-\-umask\fP=NUMBER]
+[\fB\-m\fP|\fB\-\-core\-dump\fP]
+[\fB\-M\fP|\fB\-\-core\-dump\-pattern\fP[=PATTERN]]
+[\fB\-\-signum\fP=SIGFUNC]
+[\fB\-t\fP|\fB\-\-config\-test\fP[=FILE]]
+[\fB\-\-perf\fP[={all|run|end}]]
+[\fB\-\-debug\fP[=debug-options]]
+[\fB\-v\fP|\fB\-\-version\fP]
+[\fB\-h\fP|\fB\-\-help\fP]
+
+.SH "DESCRIPTION"
+Keepalived provides simple and robust facilities for load\-balancing
+and high\-availability. The load\-balancing framework relies on the
+well\-known and widely used Linux Virtual Server (IPVS) kernel module
+providing Layer4 load\-balancing. Keepalived implements a set of
+checkers to dynamically and adaptively maintain and manage a
+load\-balanced server pool according to their health. Keepalived also
+implements the VRRPv2 and VRRPv3 protocols to achieve high\-availability
+with director failover.
+
+.SH "OPTIONS"
+.TP
+\fB -f, --use-file\fP=FILE
+Use the specified configuration file. The default configuration file
+is "@DEFAULT_CONFIG_FILE@".
+.TP
+\fB -P, --vrrp\fP
+Only run the VRRP subsystem. This is useful for configurations that do
+not use the IPVS load balancer.
+.TP
+\fB -C, --check\fP
+Only run the healthcheck subsystem. This is useful for configurations
+that use the IPVS load balancer with a single director with no failover.
+.TP
+\fB -B, --no_bfd\fP
+Don't run the BFD subsystem.
+.TP
+\fB --all\fP
+Run all subsystems, even if they have no configuration.
+.TP
+\fB -l, --log-console\fP
+Log messages to the local console. The default behavior is to log
+messages to syslog.
+.TP
+\fB -D, --log-detail\fP
+Detailed log messages.
+.TP
+\fB -S, --log-facility\fP=[0-7]
+Set syslog facility to LOG_LOCAL[0-7]. The default syslog facility is LOG_DAEMON.
+.TP
+\fB -g, --log-file\fP=FILE
+Write log entries to FILE. FILE will have _vrrp, _healthcheckers, and _bfd
+inserted before the last '.' in FILE for the log output for those processes.
+.TP
+\fB --flush-log-file\fP
+If using the -g option, the log file stream will be flushed after each write.
+.TP
+\fB -G, --no-syslog\fP
+Do not write log entries to syslog. This can be useful if the rate of writing
+log entries is sufficiently high that syslog will rate limit them, and the -g
+option is used instead.
+.TP
+\fB -X, --release-vips\fP
+Drop VIP on transition from signal.
+.TP
+\fB -V, --dont-release-vrrp\fP
+Don't remove VRRP VIPs and VROUTEs on daemon stop. The default
+behavior is to remove all VIPs and VROUTEs when keepalived exits.
+.TP
+\fB -I, --dont-release-ipvs\fP
+Don't remove IPVS topology on daemon stop. The default behavior it to
+remove all entries from the IPVS virtual server table when
+keepalived exits.
+.TP
+\fB -R, --dont-respawn\fP
+Don't respawn child processes. The default behavior is to restart the
+VRRP and checker processes if either process exits.
+.TP
+\fB -n, --dont-fork\fP
+Don't fork the daemon process. This option will cause keepalived to
+run in the foreground.
+.TP
+\fB -d, --dump-conf\fP
+Dump the configuration data.
+.TP
+\fB -p, --pid\fP=FILE
+Use the specified pidfile for the parent keepalived process. The default
+pidfile for keepalived is "/var/run/keepalived.pid", unless a network
+namespace is being used. See
+.B NAMESPACES
+below for more details.
+.TP
+\fB -r, --vrrp_pid\fP=FILE
+Use the specified pidfile for the VRRP child process. The default pidfile
+for the VRRP child process is "/var/run/keepalived_vrrp.pid", unless a
+network namespace is being used.
+.TP
+\fB -c, --checkers_pid\fP=FILE
+Use the specified pidfile for checkers child process. The default pidfile
+for the checker child process is "/var/run/keepalived_checkers.pid" unless
+a network namespace is being used.
+.TP
+\fB -a, --address-monitoring\fP
+Log all address additions/deletions reported by netlink.
+.TP
+\fB -b, --bfd_pid\fP=FILE
+Use the specified pidfile for the BFD child process. The default pidfile
+for the BFD child process is "/var/run/keepalived_bfd.pid" unless
+a network namespace is being used.
+.TP
+\fB -s, --namespace\fP=NAME
+Run keepalived in network namespace NAME. See
+.B NAMESPACES
+below for more details.
+.TP
+\fB -i, --config-id ID
+Use configuration id ID, for conditional configuration (defaults to
+hostname without the domain name).
+.TP
+\fB -x, --snmp\fP
+Enable the SNMP subsystem.
+.TP
+\fB -A, --snmp-agent-socket\fP=FILE
+Use the specified socket for connection to SNMP master agent.
+.TP
+\fB -u, --umask\fP=NUMBER
+The umask specified in the usual numeric way - see man umask(2)
+.TP
+\fB -m, --core-dump\fP
+Override the RLIMIT_CORE hard and soft limits to enable keepalived to
+produce a coredump in the event of a segfault or other failure.
+This is most useful if keepalived has been built with 'make debug'.
+Core dumps will be created in /, unless keepalived is run with the
+--dont-fork option, in which case they will be created in the directory
+from which keepalived was run, or they will be created in the directory
+of a configuraton file if the fault occurs while reading the file.
+.TP
+\fB -M, --core-dump-pattern\fP[=PATTERN]
+Sets option --core-dump, and also updates /proc/sys/kernel/core_pattern
+to the pattern specified, or 'core' if none specified.
+Provided the parent process doesn't terminate abnormally, it will restore
+/proc/sys/kernel/core_pattern to its original value on exit.
+
+\fBNote:\fP This will also affect any other process producing a core dump while keepalived is running.
+.TP
+\fB --signum\fP=PATTERN
+Returns the signal number to use for STOP, RELOAD, DATA, STATS and JSON.
+For example, to stop keepalived running, execute:
+.IP
+.nf
+kill -s $(keepalived --signum=STOP) $(cat /var/run/keepalived.pid)
+.fi
+.TP
+\fB -t, --config-test\fP[=FILE]
+Keepalived will check the configuration file and exit with non-zero exit
+status if there are errors in the configuration, otherwise it exits with
+exit status 0 (see \fBExit status\fP below for details).
+
+Rather that writing to syslog, it will write diagnostic messages to stderr
+unless file is specified, in which case it will write to the file.
+.TP
+\fB --perf\fP[={all|run|end}]
+Record perf data for vrrp process. Data will be written to /perf_vrrp.data.
+The data recorded is for use with the perf tool.
+.TP
+\fB --debug\fP[=debug-options]]
+Enables debug options if they have been compiled into keepalived.
+\fIdebug-options\fP is made up of a sequence of strings of the form Ulll.
+.br
+The upper case letter specifies the debug option, and the lower case letters
+specify for which processes the option is to be enabled.
+.br
+If a debug option is not followed by any lower case letters, the debug option
+is enabled for all processes.
+.PP
+.RS
+The characters to identify the processes are:
+.TS
+tab(@);
+c l
+c l.
+Chr@Process
+_
+p@Parent process
+b@BFD process
+c@Checker process
+v@VRRP process
+.TE
+.PP
+The characters used to identify the debug options are:
+.TS
+tab(@);
+c l.
+Chr@Debug option
+_
+D@Epoll thread dump
+E@Epoll debug
+F@VRRP fd debug
+N@Netlink timers
+P@Network timestamp
+X@Regex timers
+M@Email alert debug
+T@Timer debug
+S@TSM debug
+R@Regex debug
+.TE
+.PP
+\fBExample:\fP --debug=DvEcvNR
+.RE
+.TP
+\fB -v, --version\fP
+Display the version and exit.
+.TP
+\fB -h, --help\fP
+Display this help message and exit.
+.SS "Exit status:"
+.TP
+0
+if OK
+.TP
+1
+if unable to malloc memory
+.TP
+2
+if cannot initialise subsystems
+.TP
+3
+if running with --config-test and configuration cannot be run
+.TP
+4
+if running with --config-test and there are configuration errors but keepalived
+will run after modifying the configuration
+.TP
+5
+if running with --config-test and script security hasn't been enabled but scripts
+are configured.
+.SH NAMESPACES
+.B keepalived
+can be run in a network namespace (see
+\fBkeepalived.conf\fP(5) for configuration details). When
+run in a network namespace, a local mount namespace is also
+created, and /var/run/keepalived/keepalived_NamespaceName
+is mounted on /var/run/keepalived. By default, pid files with
+the usual default names are then created in
+/var/run/keepalived from the perspective of a process in the
+mount namespace, and they will be visible in
+/var/run/keepalived/keepalived_NamespaceName for a process
+running in the default mount namespace.
+
+.SH SIGNALS
+.B keepalived
+reacts to a set of signals.  You can send a signal to
+the parent
+.B keepalived
+process using the following:
+.IP
+.nf
+kill -SIGNAL $(cat /var/run/keepalived.pid)
+.fi
+.PP
+or better:
+.IP
+.nf
+kill -s $(keepalived --signum=SIGFUNC) $(cat /var/run/keepalived.pid)
+.fi
+.PP
+Note that if the first option is used, -SIGNAL must be
+replaced with the actual signal you are trying to send,
+e.g. with HUP. So it then becomes:
+.IP
+.nf
+kill -HUP $(cat /var/run/keepalived.pid)
+.fi
+.PP
+Signals other than for STOP, RELOAD, DATA and STATS may change depending
+on the kernel, and also what functionality is included in the version of
+the keepalived depending on the build options used.
+.PP
+.TP
+.B HUP\fP or \fBSIGFUNC=RELOAD
+This causes
+.B keepalived
+to close down all interfaces, reload its configuration, and
+start up with the new configuration.
+.TP
+.B TERM\fP, \fBINT\fP or \fBSIGFUNC=STOP
+.B keepalived
+will shut down.
+.TP
+.B USR1\fP or \fBSIGFUNC=DATA
+Write configuration data to
+.B /tmp/keepalived.data
+.TP
+.B USR2\fP or \fBSIGFUNC=STATS
+Write statistics info to
+.B /tmp/keepalived.stats
+.LP
+.TP
+.B SIGFUNC=JSON
+Write configuration data in JSON format to
+.B /tmp/keepalived.json
+.LP
+.SH "USING KEEPALIVED WITH FIREWALLD"
+If you are running a firewall (see
+.BR firewalld (8) )
+you must allow VRRP protocol traffic through the firewall. For example
+if this instance of
+.B keepalived(8)
+has a peer node on IPv4 address 192.168.0.1:
+.IP
+.nf
+# firewall-cmd \\
+    --add-rich-rule="rule family='ipv4' \\
+                     source address='192.168.0.1' \\
+                     protocol value='vrrp' accept" --permanent
+# firewall-cmd --reload
+.fi
+.SH "SEE ALSO"
+\fBkeepalived.conf\fP(5), \fBipvsadm\fP(8)
+
+.SH "AUTHOR"
+This man page was written by Ryan O'Hara <rohara@redhat.com>
diff --git a/tools/keepalived/doc/samples/keepalived.conf.HTTP_GET.port b/tools/keepalived/doc/samples/keepalived.conf.HTTP_GET.port
index fd3d56358..61c41de40 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.HTTP_GET.port
+++ b/tools/keepalived/doc/samples/keepalived.conf.HTTP_GET.port
@@ -12,7 +12,7 @@ global_defs {
 
 virtual_server 192.168.200.100 443 {
     delay_loop 6
-    lb_algo rr 
+    lb_algo rr
     lb_kind NAT
     persistence_timeout 50
     protocol TCP
@@ -20,13 +20,13 @@ virtual_server 192.168.200.100 443 {
     real_server 192.168.201.100 443 {
         weight 1
         SSL_GET {
-            url { 
+            url {
               path /
               digest ff20ad2481f97b1754ef3e12ecd3a9cc
             }
             connect_port    444
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
diff --git a/tools/keepalived/doc/samples/keepalived.conf.IPv6 b/tools/keepalived/doc/samples/keepalived.conf.IPv6
index 6867d6826..d3b255b9f 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.IPv6
+++ b/tools/keepalived/doc/samples/keepalived.conf.IPv6
@@ -4,54 +4,49 @@ global_defs {
    router_id LVS_DEVEL
 }
 
-
 virtual_server_group IPv6_group {
-	ae00::2-9	80 
-	ae00::1		80 
+    ae00::2-9 80
+    ae00::1   80
 }
 
-#virtual_server group IPv6_group {
+# virtual_server group IPv6_group {
 virtual_server ae00::1 80 {
     delay_loop 6
-    lb_algo rr 
+    lb_algo rr
     lb_kind NAT
     persistence_timeout 50
     protocol TCP
 
-#    real_server ae00::10 80 {
+#   real_server ae00::10 80 {
     real_server ae00::10 25 {
         weight 1
 
-	SMTP_CHECK {
+        SMTP_CHECK {
             connect_timeout 3
-	    retry 3
-	    helo_name "foo.bar.com"
+            retry 3
+            helo_name "foo.bar.com"
 
-#	    host {
+#           host {
 #               bindto ae00::2
-#	       connect_ip ae00::10
-#	       connect_port 25
-#	    }
-	}
-
-#	TCP_CHECK {
-#		connect_port 80
-#		bind_to ae00::2
-#	}
-
-#        HTTP_GET {
-#            url { 
-#              path /ind.html
-#              status_code 200
-#            }
-#            bindto ae00::2
-#            connect_timeout 3
-#            nb_get_retry 3
-#            delay_before_retry 3
-#        }
-#    }
-
-
+#               connect_ip ae00::10
+#               connect_port 25
+#           }
+        }
+
+#       TCP_CHECK {
+#          connect_port 80
+#          bind_to ae00::2
+#       }
+
+#       HTTP_GET {
+#           url {
+#             path /ind.html
+#             status_code 200
+#           }
+#           bindto ae00::2
+#           connect_timeout 3
+#           retry 3
+#           delay_before_retry 3
+#       }
+    }
 }
-
-
diff --git a/tools/keepalived/doc/samples/keepalived.conf.SMTP_CHECK b/tools/keepalived/doc/samples/keepalived.conf.SMTP_CHECK
index 898aacc73..be131b347 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.SMTP_CHECK
+++ b/tools/keepalived/doc/samples/keepalived.conf.SMTP_CHECK
@@ -19,7 +19,7 @@ global_defs {
    notification_email_from Alexandre.Cassen@firewall.loc
    smtp_server 192.168.200.1
    smtp_connect_timeout 30
-   lvs_id LVS_DEVEL
+   router_id LVS_DEVEL
 }
 
 virtual_server 192.168.200.100 25 {
@@ -50,7 +50,7 @@ virtual_server 192.168.200.100 25 {
 ! traffic to some additional subnets. We do not
 ! want to dispatch traffic unless all the interfaces
 ! appear to be up. Note: The main ip of the real
-! server that we are dipatching traffic to must
+! server that we are dispatching traffic to must
 ! explicitly be checked by a host directive.
 
     real_server 172.16.1.11 25 {
@@ -75,7 +75,6 @@ virtual_server 192.168.200.100 25 {
         }
     }
 
-
 ! Final example showing some of the more extended
 ! features.
 !
diff --git a/tools/keepalived/doc/samples/keepalived.conf.SSL_GET b/tools/keepalived/doc/samples/keepalived.conf.SSL_GET
index c7f036759..61172fa1e 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.SSL_GET
+++ b/tools/keepalived/doc/samples/keepalived.conf.SSL_GET
@@ -29,7 +29,7 @@ vrrp_instance VI_1 {
 
 virtual_server 192.168.200.100 443 {
     delay_loop 6
-    lb_algo rr 
+    lb_algo rr
     lb_kind NAT
     persistence_timeout 50
     protocol TCP
@@ -37,16 +37,16 @@ virtual_server 192.168.200.100 443 {
     real_server 192.168.201.100 443 {
         weight 1
         SSL_GET {
-            url { 
+            url {
               path /
               digest ff20ad2481f97b1754ef3e12ecd3a9cc
             }
-            url { 
+            url {
               path /mrtg/
               digest 9b3a0c85a887a256d6939da88aabd8cd
             }
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
@@ -54,7 +54,7 @@ virtual_server 192.168.200.100 443 {
 
 virtual_server 192.168.200.100 80 {
     delay_loop 6
-    lb_algo rr 
+    lb_algo rr
     lb_kind NAT
     persistence_timeout 50
     protocol TCP
@@ -62,16 +62,16 @@ virtual_server 192.168.200.100 80 {
     real_server 192.168.201.100 80 {
         weight 1
         HTTP_GET {
-            url { 
+            url {
               path /
               digest ff20ad2481f97b1754ef3e12ecd3a9cc
             }
-            url { 
+            url {
               path /mrtg/
               digest 9b3a0c85a887a256d6939da88aabd8cd
             }
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
diff --git a/tools/keepalived/doc/samples/keepalived.conf.conditional_conf b/tools/keepalived/doc/samples/keepalived.conf.conditional_conf
new file mode 100644
index 000000000..3310f9b6c
--- /dev/null
+++ b/tools/keepalived/doc/samples/keepalived.conf.conditional_conf
@@ -0,0 +1,34 @@
+# Run keepalived with either '-i high' or '-i low'
+
+@high net_namespace high
+@low net_namespace low
+
+vrrp_script check_VI_0 {
+@high	script /etc/keepalived/scripts/check_high_VI_0.sh
+@low	script /etc/keepalived/scripts/check_low_VI_0.sh
+	interval 1
+	timeout 10
+	rise 3
+	fall 3
+}
+
+vrrp_instance VI_0 {
+	state BACKUP
+	interface eth0
+	virtual_router_id 1
+@high	priority 170
+@low	priority 85
+	advert_int 12
+	version 3
+	use_vmac
+	track_script {
+		check_VI_0
+	}
+	track_interface {
+		eth3
+		eth2 weight 20
+	}
+	virtual_ipaddress {
+		10.1.0.254/32
+	}
+}
diff --git a/tools/keepalived/doc/samples/keepalived.conf.inhibit b/tools/keepalived/doc/samples/keepalived.conf.inhibit
index abbe49338..aa5c85b70 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.inhibit
+++ b/tools/keepalived/doc/samples/keepalived.conf.inhibit
@@ -12,22 +12,21 @@ global_defs {
 
 virtual_server 10.10.10.2 1358 {
     delay_loop 6
-    lb_algo rr 
+    lb_algo rr
     lb_kind NAT
     persistence_timeout 50
     protocol TCP
 
-
     real_server 192.168.200.2 1358 {
         weight 1
         inhibit_on_failure        ! set weight to 0 instead of removing service
         HTTP_GET {
-            url { 
+            url {
               path /testurl3/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334d
             }
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
diff --git a/tools/keepalived/doc/samples/keepalived.conf.misc_check b/tools/keepalived/doc/samples/keepalived.conf.misc_check
index e41f6b286..dfbf5aaa7 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.misc_check
+++ b/tools/keepalived/doc/samples/keepalived.conf.misc_check
@@ -1,4 +1,5 @@
 ! Configuration File for keepalived
+! This example demonstrates MISC_CHECK, a component of LVS configuration.
 
 global_defs {
    notification_email {
@@ -12,9 +13,8 @@ global_defs {
 
 virtual_server 10.10.10.2 1358 {
     delay_loop 6
-    lb_algo rr 
+    lb_algo rr
     lb_kind NAT
-    nat_mask 255.255.255.0
     persistence_timeout 50
     protocol TCP
 
@@ -22,7 +22,7 @@ virtual_server 10.10.10.2 1358 {
         weight 1
         MISC_CHECK {
           misc_path /usr/local/bin/script.sh
-!          misc_dynamic
+!         misc_dynamic
         }
     }
 
diff --git a/tools/keepalived/doc/samples/keepalived.conf.misc_check_arg b/tools/keepalived/doc/samples/keepalived.conf.misc_check_arg
index e27092eab..89c9f04ac 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.misc_check_arg
+++ b/tools/keepalived/doc/samples/keepalived.conf.misc_check_arg
@@ -12,9 +12,8 @@ global_defs {
 
 virtual_server 10.10.10.2 1358 {
     delay_loop 6
-    lb_algo rr 
+    lb_algo rr
     lb_kind NAT
-    nat_mask 255.255.255.0
     persistence_timeout 50
     protocol TCP
 
diff --git a/tools/keepalived/doc/samples/keepalived.conf.sample b/tools/keepalived/doc/samples/keepalived.conf.sample
index 223326b5d..209e35a6d 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.sample
+++ b/tools/keepalived/doc/samples/keepalived.conf.sample
@@ -25,7 +25,7 @@ vrrp_instance VI_1 {
 
 virtual_server 10.10.10.2 1358 {
     delay_loop 6
-    lb_algo rr 
+    lb_algo rr
     lb_kind NAT
     persistence_timeout 50
     protocol TCP
@@ -35,12 +35,12 @@ virtual_server 10.10.10.2 1358 {
     real_server 192.168.200.2 1358 {
         weight 1
         HTTP_GET {
-            url { 
+            url {
               path /testurl3/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334d
             }
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
diff --git a/tools/keepalived/doc/samples/keepalived.conf.status_code b/tools/keepalived/doc/samples/keepalived.conf.status_code
index 049c71d6f..0a9340b8b 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.status_code
+++ b/tools/keepalived/doc/samples/keepalived.conf.status_code
@@ -1,4 +1,5 @@
 ! Configuration File for keepalived
+! This example demonstrates status_code, a component of LVS configuration.
 
 global_defs {
    notification_email {
@@ -12,7 +13,7 @@ global_defs {
 
 virtual_server 192.168.200.100 443 {
     delay_loop 6
-    lb_algo rr 
+    lb_algo rr
     lb_kind NAT
     persistence_timeout 50
     protocol TCP
@@ -20,17 +21,17 @@ virtual_server 192.168.200.100 443 {
     real_server 192.168.201.100 443 {
         weight 1
         SSL_GET {
-            url { 
+            url {
               path /
-              status_code 200	# Can only specify a HTTP status_code
+              status_code 200-299 400-499 503 505 # Can specify a HTTP status_code or a section separated by '-' or both
             }
-            url { 
+            url {
               path /mrtg/
               digest 9b3a0c85a887a256d6939da88aabd8cd
-              status_code 200	# Can mix digest and status_code
+              status_code 200  # Can mix digest and status_code
             }
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
diff --git a/tools/keepalived/doc/samples/keepalived.conf.track_interface b/tools/keepalived/doc/samples/keepalived.conf.track_interface
index 2e658b456..38d9166ab 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.track_interface
+++ b/tools/keepalived/doc/samples/keepalived.conf.track_interface
@@ -4,7 +4,7 @@ global_defs {
    router_id LVS_DEVEL
 }
 
-static_route {
+static_routes {
     192.168.210.0/24 via 192.168.200.254 dev eth0
     192.168.211.0/24 via 192.168.200.254 dev eth0
     192.168.212.0/24 dev eth3
diff --git a/tools/keepalived/doc/samples/keepalived.conf.virtual_server_group b/tools/keepalived/doc/samples/keepalived.conf.virtual_server_group
index 6aa949cbf..a9570fbaa 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.virtual_server_group
+++ b/tools/keepalived/doc/samples/keepalived.conf.virtual_server_group
@@ -21,7 +21,7 @@ virtual_server_group VSG_1 {
 
 virtual_server group VSG_1 {
     delay_loop 6
-    lb_algo rr 
+    lb_algo rr
     lb_kind NAT
     persistence_timeout 50
     protocol TCP
@@ -29,12 +29,12 @@ virtual_server group VSG_1 {
     real_server 192.168.200.1 1358 {
         weight 1
         HTTP_GET {
-            url { 
+            url {
               path /testurl3/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334d
             }
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
@@ -42,12 +42,12 @@ virtual_server group VSG_1 {
     real_server 192.168.200.2 1358 {
         weight 1
         HTTP_GET {
-            url { 
+            url {
               path /testurl3/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334d
             }
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
diff --git a/tools/keepalived/doc/samples/keepalived.conf.virtualhost b/tools/keepalived/doc/samples/keepalived.conf.virtualhost
index ee6f3caf1..2e52ac1d9 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.virtualhost
+++ b/tools/keepalived/doc/samples/keepalived.conf.virtualhost
@@ -12,7 +12,7 @@ global_defs {
 
 virtual_server 192.168.200.100 80 {
     delay_loop 6
-    lb_algo rr 
+    lb_algo rr
     lb_kind NAT
     persistence_timeout 50
     protocol TCP
@@ -22,16 +22,16 @@ virtual_server 192.168.200.100 80 {
     real_server 192.168.201.100 80 {
         weight 1
         SSL_GET {
-            url { 
+            url {
               path /
               digest ff20ad2481f97b1754ef3e12ecd3a9cc
             }
-            url { 
+            url {
               path /mrtg/
               digest 9b3a0c85a887a256d6939da88aabd8cd
             }
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
diff --git a/tools/keepalived/doc/samples/keepalived.conf.vrrp b/tools/keepalived/doc/samples/keepalived.conf.vrrp
index 50c22fb94..791b1fc9d 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.vrrp
+++ b/tools/keepalived/doc/samples/keepalived.conf.vrrp
@@ -10,7 +10,6 @@ global_defs {
    router_id LVS_DEVEL
 }
 
-
 vrrp_instance VI_1 {
     state MASTER
     interface eth0
@@ -28,9 +27,9 @@ vrrp_instance VI_1 {
         192.168.200.17
         192.168.200.18
 
-	# optional label. should be of the form "realdev:sometext" for
-	# compatibility with ifconfig.
-	192.168.200.18 label eth0:1
+        # optional label. should be of the form "realdev:sometext" for
+        # compatibility with ifconfig.
+        192.168.200.18 label eth0:1
     }
 }
 
diff --git a/tools/keepalived/doc/samples/keepalived.conf.vrrp.lvs_syncd b/tools/keepalived/doc/samples/keepalived.conf.vrrp.lvs_syncd
index 0b12607ed..cdf7c49aa 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.vrrp.lvs_syncd
+++ b/tools/keepalived/doc/samples/keepalived.conf.vrrp.lvs_syncd
@@ -51,7 +51,6 @@ virtual_server 192.168.200.19 80 {
     delay_loop 20
     lb_algo rr
     lb_kind NAT
-    nat_mask 255.255.255.0
     persistence_timeout 50
     protocol TCP
 
diff --git a/tools/keepalived/doc/samples/keepalived.conf.vrrp.routes b/tools/keepalived/doc/samples/keepalived.conf.vrrp.routes
index 1d526aacd..97ae50df3 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.vrrp.routes
+++ b/tools/keepalived/doc/samples/keepalived.conf.vrrp.routes
@@ -29,5 +29,6 @@ vrrp_instance VI_1 {
         192.168.112.0/24 via 192.168.100.254
         192.168.113.0/24 via 192.168.100.252 or 192.168.100.253
 	blackhole 192.168.113.1/32
+        0.0.0.0/0 gw 192.168.0.1 table 100  # To set a default gateway into table 100.
     }
 }
diff --git a/tools/keepalived/doc/samples/keepalived.conf.vrrp.rules b/tools/keepalived/doc/samples/keepalived.conf.vrrp.rules
new file mode 100644
index 000000000..8b663becd
--- /dev/null
+++ b/tools/keepalived/doc/samples/keepalived.conf.vrrp.rules
@@ -0,0 +1,28 @@
+! Configuration File for keepalived
+! This example demonstrates static_rules and virtual_rules, components of IP
+! Tables configuration.
+
+global_defs {
+   router_id LVS_DEVEL
+}
+
+static_rules {
+    from 192.168.100.0/24 table 1
+    to 192.168.100./24 table 1
+}
+
+vrrp_instance VI_1 {
+    state MASTER
+    interface eth0
+    virtual_router_id 51
+    priority 100
+    virtual_ipaddress {
+        192.168.200.16
+        192.168.200.17 dev eth1
+        192.168.200.18 dev eth2
+    }
+    virtual_rules {
+        from 192.168.200.0/24 table 2
+        to 192.168.200./24 table 2
+    }
+}
diff --git a/tools/keepalived/doc/samples/keepalived.conf.vrrp.scripts b/tools/keepalived/doc/samples/keepalived.conf.vrrp.scripts
index 0f65561ac..70b0d6d61 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.vrrp.scripts
+++ b/tools/keepalived/doc/samples/keepalived.conf.vrrp.scripts
@@ -1,6 +1,6 @@
 ! Configuration File for keepalived
 ! extra script call demonstration
-! scripts are supported in Instance and groupes
+! scripts are supported in Instance and groups
 ! declarations.
 
 vrrp_sync_group G1 {
diff --git a/tools/keepalived/doc/samples/keepalived.conf.vrrp.sync b/tools/keepalived/doc/samples/keepalived.conf.vrrp.sync
index ad4cd0a20..05ad5d790 100644
--- a/tools/keepalived/doc/samples/keepalived.conf.vrrp.sync
+++ b/tools/keepalived/doc/samples/keepalived.conf.vrrp.sync
@@ -70,7 +70,6 @@ vrrp_instance VI_5 {
     }
 }
 
-
 vrrp_instance VI_6 {
     state MASTER
     interface eth0
@@ -110,4 +109,3 @@ vrrp_instance VI_9 {
         192.168.200.24/27
     }
 }
-
diff --git a/tools/keepalived/doc/samples/sample.misccheck.smbcheck.sh b/tools/keepalived/doc/samples/sample.misccheck.smbcheck.sh
index f5552961b..193f933f9 100644
--- a/tools/keepalived/doc/samples/sample.misccheck.smbcheck.sh
+++ b/tools/keepalived/doc/samples/sample.misccheck.smbcheck.sh
@@ -10,7 +10,7 @@ fi
 if [ -z "$1" ] ; then
 	echo "Usage: $0 <ip address>"
 	exit 2
-fi 
+fi
 
 ($SAMBA_BIN -N -L $1 -W CENTRALB -U nobody) \
  | egrep '^Domain=\[[A-Za-z0-9_-]+\]' > /dev/null 2>&1
diff --git a/tools/keepalived/doc/samples/sample_notify_fifo.sh b/tools/keepalived/doc/samples/sample_notify_fifo.sh
new file mode 100755
index 000000000..d7840f845
--- /dev/null
+++ b/tools/keepalived/doc/samples/sample_notify_fifo.sh
@@ -0,0 +1,93 @@
+#!/bin/bash
+
+# To use this script, copy it to directory /etc/keepalived/scripts
+# and add one or more of the following to the keepalived configuration
+# file in the global_defs section:
+#     notify_fifo /tmp/notify_fifo
+#     vrrp_notify_fifo /tmp/vrrp_notify_fifo
+#     lvs_notify_fifo /tmp/lvs_notify_fifo
+# This script will then need to be executed, passing it the name of the
+# fifo.
+#
+# As an alternative to executing this script manually, add one or more of
+# the following in the global_defs section of the config:
+#     notify_fifo_script /etc/keepalived/scripts/sample_notify_fifo.sh
+#     vrrp_notify_fifo_script /etc/keepalived/scripts/sample_notify_fifo.sh
+#     lvs_notify_fifo_script /etc/keepalived/scripts/sample_notify_fifo.sh
+# If run this way, Keepalived will terminate the script with SIGTERM when
+# it exits.
+
+CREATED_FIFO=0
+
+FIFO=$1
+[[ -z $FIFO ]] && echo "A FIFO name must be specified" && exit 1
+
+LOG_FILE=/tmp/${FIFO##*/}.log
+
+stopping()
+{
+	PROLOGUE=$(echo "$(date +"%a %b %e %X %Y")": \[$PPID:$$\])
+	echo "$PROLOGUE" STOPPING >>$LOG_FILE
+}
+
+start_shutdown()
+{
+	# When keepalived terminates, it sends a TERM signal to this script before
+	#  sending the fifo notifies. We catch the SIGTERM here, and after a short
+	#  delay send a SIGALRM to the main script process
+	( sleep 0.5
+	  kill -ALRM $$
+	) &
+}
+
+trap "{ stopping; [[ $CREATED_FIFO -eq 1 ]] && rm -f $FIFO; exit 0; }" HUP INT QUIT USR1 USR2 PIPE ALRM
+trap start_shutdown TERM
+
+if [[ ! -p $FIFO ]]; then
+	mkfifo $FIFO
+	if [[ $? -eq 0 ]]; then
+		CREATED_FIFO=1
+	else
+		echo "Unable to create fifo $FIFO"
+		exit 1
+	fi
+fi
+
+# If keepalived terminates, the FIFO will be closed, so
+# read the FIFO in a loop. It keepalived hasn't opened the
+# FIFO, the script will be blocked until it has been opened.
+while [[ 1 ]]
+do
+	[[ ! -p $FIFO ]] && echo FIFO $FIFO missing && exit 1
+
+	while read line; do
+		PROLOGUE=$(echo "$(date +"%a %b %e %X %Y")": \[$PPID:$$\])
+		set $line
+		TYPE=$1
+		if [[ $TYPE = INSTANCE || $TYPE = GROUP ]]; then
+			VRRP_INST=${2//\"/}
+			STATE=$3
+			PRIORITY=$4
+
+			# Now take whatever action is required
+			echo "$PROLOGUE" $TYPE $VRRP_INST $STATE $PRIORITY >>$LOG_FILE
+		elif [[ $TYPE = VS ]]; then
+			VS=$2
+			STATE=$3
+
+			# Now take whatever action is required
+			echo "$PROLOGUE" $TYPE $VS $STATE >>$LOG_FILE
+		elif [[ $TYPE = RS ]]; then
+			RS=$2
+			VS=$3
+			STATE=$4
+
+			# Now take whatever action is required
+			echo "$PROLOGUE" $TYPE $RS $VS $STATE >>$LOG_FILE
+		else
+			echo "$PROLOGUE" $TYPE - unknown "($*)" >>$LOG_FILE
+		fi
+	done < $FIFO
+
+	echo "$PROLOGUE" STOPPED >>$LOG_FILE
+done
diff --git a/tools/keepalived/keepalived/bin/.gitkeep b/tools/keepalived/doc/source/_static/.gitignore
similarity index 100%
rename from tools/keepalived/keepalived/bin/.gitkeep
rename to tools/keepalived/doc/source/_static/.gitignore
diff --git a/tools/keepalived/doc/source/_static/.gitkeep b/tools/keepalived/doc/source/_static/.gitkeep
new file mode 100644
index 000000000..e69de29bb
diff --git a/tools/keepalived/doc/source/_templates/.gitignore b/tools/keepalived/doc/source/_templates/.gitignore
new file mode 100644
index 000000000..e69de29bb
diff --git a/tools/keepalived/doc/source/_templates/.gitkeep b/tools/keepalived/doc/source/_templates/.gitkeep
new file mode 100644
index 000000000..e69de29bb
diff --git a/tools/keepalived/doc/source/about.rst b/tools/keepalived/doc/source/about.rst
new file mode 100644
index 000000000..2d3bb5aac
--- /dev/null
+++ b/tools/keepalived/doc/source/about.rst
@@ -0,0 +1,43 @@
+#####################
+About These Documents
+#####################
+
+These documents are generated from `reStructuredText`_ sources by `Sphinx`_, a
+document processor specifically written for the Python documentation.
+
+.. _reStructuredText: http://docutils.sourceforge.net/rst.html
+.. _Sphinx: http://sphinx-doc.org/
+
+
+Building The Documentation
+**************************
+
+To build the keepalived documentation, you will need to have a recent version
+of Sphinx installed on your system.  Alternatively, you could use a python
+virtualenv.
+
+From the root of the repository clone, run the following command to build the
+documentation in HTML format::
+
+    cd keepalived-docs
+    make html
+
+For PDF, you will also need ``docutils`` and various ``texlive-*`` packages for
+converting reStructuredText to LaTex and finally to PDF::
+
+    pip install docutils
+    cd keepalived-docs
+    make latexpdf
+
+Alternatively, you can use the ``sphinx-build`` command that comes with the
+Sphinx package::
+
+    cd keepalived-docs
+    sphinx-build -b html . build/html
+
+.. todo::
+   make latexpdf needs pdflatex provided by texlive-latex on RHEL6 and
+   texlive-latex-bin-bin on Fedora21
+
+.. todo::
+   make linkcheck to check for broken links
diff --git a/tools/keepalived/doc/source/case_study_failover.rst b/tools/keepalived/doc/source/case_study_failover.rst
new file mode 100644
index 000000000..0c85b75f1
--- /dev/null
+++ b/tools/keepalived/doc/source/case_study_failover.rst
@@ -0,0 +1,174 @@
+###############################
+Case Study: Failover using VRRP
+###############################
+
+As an example we can introduce the following LVS topology:
+
+Architecture Specification
+**************************
+
+To create a virtual LVS director using the VRRPv2 protocol, we define the following architecture:
+
+* 2 LVS directors in active-active configuration.
+* 4 VRRP Instances per LVS director: 2 VRRP Instance in the MASTER state and 2 in BACKUP state. We use a symmetric state on each LVS directors.
+* 2 VRRP Instances in the same state are to be synchronized to define a persistent virtual routing path.
+* Strong authentication: IPSEC-AH is used to protect our VRRP advertisements from spoofed and reply attacks.
+
+The VRRP Instances are compounded with the following IP addresses:
+
+* VRRP Instance VI_1: owning VRRIP VIPs VIP1 & VIP2. This instance defaults to the MASTER state on LVS director 1. It stays synchronized with VI_2.
+* VRRP Instance VI_2: owning DIP1. This instance is by default in MASTER state on LVS director 1. It stays synchronized with VI_1.
+* VRRP Instance VI_3: owning VRRIP VIPs VIP3 & VIP4. This instance is in default MASTER state on LVS director 2. It stays synchronized with VI_4.
+* VRRP Instance VI_4: owning DIP2. This instance is in default MASTER state on LVS director 2. It stays synchronized with VI_3.
+
+Keepalived Configuration
+************************
+
+The whole configuration is done in the /etc/keepalived/keepalived.conf file. In our case study this file on LVS director 1 looks like::
+
+    vrrp_sync_group VG1 {
+        group {
+            VI_1
+            VI_2
+        }
+    }
+    vrrp_sync_group VG2 {
+        group {
+            VI_3
+            VI_4
+        }
+    }
+    vrrp_instance VI_1 {
+        state MASTER
+        interface eth0
+        virtual_router_id 51
+        priority 150
+        advert_int 1
+        authentication {
+            auth_type AH
+            auth_pass k@l!ve1
+        }
+        virtual_ipaddress {
+            192.168.200.10
+            192.168.200.11
+        }
+    }
+    vrrp_instance VI_2 {
+        state MASTER
+        interface eth1
+        virtual_router_id 52
+        priority 150
+        advert_int 1
+        authentication {
+            auth_type AH
+            auth_pass k@l!ve2
+        }
+        virtual_ipaddress {
+            192.168.100.10
+        }
+    }
+
+
+::
+
+    vrrp_instance VI_3 {
+        state BACKUP
+        interface eth0
+        virtual_router_id 53
+        priority 100
+        advert_int 1
+        authentication {
+            auth_type AH
+            auth_pass k@l!ve3
+        }
+        virtual_ipaddress {
+            192.168.200.12
+            192.168.200.13
+        }
+    }
+    vrrp_instance VI_4 {
+        state BACKUP
+        interface eth1
+        virtual_router_id 54
+        priority 100
+        advert_int 1
+        authentication {
+            auth_type AH
+            auth_pass k@l!ve4
+        }
+        virtual_ipaddress {
+            192.168.100.11
+        }
+    }
+
+Then we define the symmetric configuration file on LVS director 2. This means that VI_3 & VI_4 on LVS director 2 are in MASTER state with a higher priority 150 to start with a stable state.  Symmetrically VI_1 & VI_2 on LVS director 2 are in default BACKUP state with lower priority of 100.
+|
+This configuration file specifies 2 VRRP Instances per physical NIC. When you run Keepalived on LVS director 1 without running it on LVS director 2, LVS director 1 will own all the VRRP VIP. So if you use the ip utility you may see something like: (On Debian the ip utility is part of iproute)::
+
+    [root@lvs1 tmp]# ip address list
+    1: lo: <LOOPBACK,UP> mtu 3924 qdisc noqueue
+        link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
+        inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
+    2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
+        link/ether 00:00:5e:00:01:10 brd ff:ff:ff:ff:ff:ff
+        inet 192.168.200.5/24 brd 192.168.200.255 scope global eth0
+        inet 192.168.200.10/32 scope global eth0
+        inet 192.168.200.11/32 scope global eth0
+        inet 192.168.200.12/32 scope global eth0
+        inet 192.168.200.13/32 scope global eth0
+    3: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
+        link/ether 00:00:5e:00:01:32 brd ff:ff:ff:ff:ff:ff
+        inet 192.168.100.5/24 brd 192.168.201.255 scope global eth1
+        inet 192.168.100.10/32 scope global eth1
+        inet 192.168.100.11/32 scope global eth1
+
+Then simply start Keepalived on the LVS director 2 and you will see::
+
+    [root@lvs1 tmp]# ip address list
+    1: lo: <LOOPBACK,UP> mtu 3924 qdisc noqueue
+        link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
+        inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
+    2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
+        link/ether 00:00:5e:00:01:10 brd ff:ff:ff:ff:ff:ff
+        inet 192.168.200.5/24 brd 192.168.200.255 scope global eth0
+        inet 192.168.200.10/32 scope global eth0
+        inet 192.168.200.11/32 scope global eth0
+    3: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
+        link/ether 00:00:5e:00:01:32 brd ff:ff:ff:ff:ff:ff
+        inet 192.168.100.5/24 brd 192.168.201.255 scope global eth1
+        inet 192.168.100.10/32 scope global eth1
+
+Symmetrically on LVS director 2 you will see::
+
+    [root@lvs2 tmp]# ip address list
+    1: lo: <LOOPBACK,UP> mtu 3924 qdisc noqueue
+        link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
+        inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
+    2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
+        link/ether 00:00:5e:00:01:10 brd ff:ff:ff:ff:ff:ff
+        inet 192.168.200.5/24 brd 192.168.200.255 scope global eth0
+        inet 192.168.200.12/32 scope global eth0
+        inet 192.168.200.13/32 scope global eth0
+    3: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
+        link/ether 00:00:5e:00:01:32 brd ff:ff:ff:ff:ff:ff
+        inet 192.168.100.5/24 brd 192.168.201.255 scope global eth1
+        inet 192.168.100.11/32 scope global eth1
+
+The VRRP VIPs are:
+
+* VIP1 = 192.168.200.10
+* VIP2 = 192.168.200.11
+* VIP3 = 192.168.200.12
+* VIP4 = 192.168.200.13
+* DIP1 = 192.168.100.10
+* DIP2 = 192.168.100.11
+
+The use of VRRP keyword “sync_instance� imply that we have defined a pair of MASTER VRRP Instance per LVS directors ó (VI_1,VI_2) & (VI_3,VI_4). This means that if eth0 on LVS director 1 fails then VI_1 enters the MASTER state on LVS director 2 so the MASTER Instance distribution on both directors will be: (VI_2) on director 1 & (VI_1,VI_3,VI_4) on director 2. We use “sync_instance�
+so VI_2 is forced to BACKUP the state on LVS director 1. The final VRRP MASTER instance distribution will be: (none) on LVS director 1 & (VI_1,VI_2,VI_3,VI_4) on LVS director 2. If eth0 on LVS director 1 became available the distribution will transition back to the initial state.
+
+For more details on this state transition please refer to the “Linux Virtual Server High Availability using VRRPv2� paper (available at http://www.linux-vs.org/~acassen/), which explains the implementation of this functionality.
+
+Using this configuration both LVS directors are active at a time, thus sharing LVS directors for a global director. That way we introduce a virtual LVS director.
+
+.. note::
+   This VRRP configuration sample is an illustration for a high availability router (not LVS specific). It can be used for many more common/simple needs.
diff --git a/tools/keepalived/doc/source/case_study_healthcheck.rst b/tools/keepalived/doc/source/case_study_healthcheck.rst
new file mode 100644
index 000000000..932418b54
--- /dev/null
+++ b/tools/keepalived/doc/source/case_study_healthcheck.rst
@@ -0,0 +1,225 @@
+#######################
+Case Study: Healthcheck
+#######################
+
+As an example we can introduce the following LVS topology:
+
+First of all, you need a well-configured LVS topology. In the rest of this document, we will assume that all system configurations have been done. This kind of topology is generally implemented in a DMZ architecture. For more information on LVS NAT topology and system configuration please read the nice Joseph Mack LVS HOWTO.
+
+Main architecture components
+****************************
+
+* LVS Router: Owning the load balanced IP Class routed (192.168.100.0/24).
+* Network Router: The default router for the entire internal network. All the LAN workstations are handled through this IP address.
+* Network DNS Server: Referencing the internal network IP topology.
+* SMTP Server: SMTP server receiving the mail alerts.
+* SERVER POOL: Set of servers hosting load balanced services.
+
+Server pool specifications
+**************************
+
+In this sample configuration we have 2 server pools:
+
+* Server pool 1: Hosting the HTTP & SSL services. Each server owns two application servers (IBM WEBSPHERE & BEA WEBLOGIC)
+* Server pool 2: Hosting the SMTP service.
+
+Keepalived configuration
+************************
+
+You are now ready to configure the Keepalived daemon according to your LVS topology. The whole configuration is done in the /etc/keepalived/keepalived.conf file. In our case study this file looks like::
+
+    # Configuration File for keepalived
+    global_defs {
+        notification_email {
+            admin@domain.com
+            0633225522@domain.com
+        }
+        notification_email_from keepalived@domain.com
+        smtp_server 192.168.200.20
+        smtp_connect_timeout 30
+        lvs_id LVS_MAIN
+    }
+    virtual_server 192.168.200.15 80 {
+        delay_loop 30
+        lb_algo wrr
+        lb_kind NAT
+        persistence_timeout 50
+        protocol TCP
+
+        sorry_server 192.168.100.100 80
+
+        real_server 192.168.100.2 80 {
+            weight 2
+            HTTP_GET {
+                url {
+                    path /testurl/test.jsp
+                    digest ec90a42b99ea9a2f5ecbe213ac9eba03
+                }
+                url {
+                    path /testurl2/test.jsp
+                    digest 640205b7b0fc66c1ea91c463fac6334c
+                }
+                connect_timeout 3
+                retry 3
+                delay_before_retry 2
+            }
+        }
+        real_server 192.168.100.3 80 {
+            weight 1
+            HTTP_GET {
+                url {
+                    path /testurl/test.jsp
+                    digest 640205b7b0fc66c1ea91c463fac6334c
+                }
+                connect_timeout 3
+                retry 3
+                delay_before_retry 2
+            }
+        }
+    }
+    virtual_server 192.168.200.15 443 {
+        delay_loop 20
+        lb_algo rr
+        lb_kind NAT
+        persistence_timeout 360
+        protocol TCP
+        real_server 192.168.100.2 443 {
+            weight 1
+            TCP_CHECK {
+                connect_timeout 3
+            }
+        }
+        real_server 192.168.100.3 443 {
+            weight 1
+            TCP_CHECK {
+                connect_timeout 3
+            }
+        }
+    }
+    virtual_server 192.168.200.15 25 {
+        delay_loop 15
+        lb_algo wlc
+        lb_kind NAT
+        persistence_timeout 50
+        protocol TCP
+        real_server 192.168.100.4 25 {
+            weight 1
+            TCP_CHECK {
+                connect_timeout 3
+            }
+        }
+        real_server 192.168.100.5 25 {
+            weight 2
+            TCP_CHECK {
+                connect_timeout 3
+            }
+        }
+    }
+
+According to this configuration example, the Keepalived daemon will drive the kernel using the following information:
+
+* The LVS server will own the name: LVS_MAIN
+* Notification:
+
+    * SMTP server will be: 192.168.200.20
+    * SMTP connection timeout is set to: 30 seconded
+    * Notification emails will be: admin@domain.com & 0633225522@domain.com
+
+* Load balanced services:
+
+    * HTTP: VIP 192.168.200.15 port 80
+
+        * Load balancing: Using Weighted Round Robin scheduler with NAT forwarding. Connection persistence is set to 50 seconds on each TCP service. If you are using Linux kernel 2.2 you need to specify the NAT netmask to define the IPFW masquerade granularity (nat_mask keyword). The delay loop is set to 30 seconds
+        * Sorry Server: If all real servers are removed from the VS’s server pools, we add the sorry_server 192.168.100.100 port 80 to serve clients requests.
+        * Real server 192.168.100.2 port 80 will be weighted to 2. Failure detection will be based on HTTP_GET over 2 URLS. The service connection timeout will be set to 3 seconds. The real server will be considered down after 3 retries. The daemon will wait for 2 seconds before retrying.
+        * Real server 192.168.100.3 port 80 will be weighted to 1. Failure detection will be based on HTTP_GET over 1 URL. The service connection timeout will be set to 3 seconds. The real server will be considered down after 3 retries. The daemon will wait for 2 seconds before retrying.
+
+    * SSL: VIP 192.168.200.15 port 443
+
+        * Load balancing: Using Round Robin scheduler with NAT forwarding.  Connection persistence is set to 360 seconds on each TCP service.  The delay loop is set to 20 seconds
+        * Real server 192.168.100.2 port 443 will be weighted to 2. Failure detection will be based on TCP_CHECK. The real server will be considered down after a 3-second connection timeout.
+        * Real server 192.168.100.3 port 443 will be weighted to 2. Failure detection will be based on TCP_CHECK. The real server will be considered down after a 3-second connection timeout.
+
+    * SMTP: VIP 192.168.200.15 port 25
+
+        * Load balancing: Using Weighted Least Connection scheduling algorithm in a NAT topology with connection persistence set to 50 seconds. The delay loop is set to 15 seconds
+        * Real server 192.168.100.4 port 25 will be weighted to 1. Failure detection will be based on TCP_CHECK. The real server will be considered down after a 3-second connection timeout.
+        * Real server 192.168.100.5 port 25 will be weighted to 2. Failure detection will be based on TCP_CHECK. The real server will be considered down after a 3-second connection timeout.
+
+For SSL server health check, we can use SSL_GET checkers. The configuration block for a corresponding real server will look like::
+
+    virtual_server 192.168.200.15 443 {
+        delay_loop 20
+        lb_algo rr
+        lb_kind NAT
+        persistence_timeout 360
+        protocol TCP
+        real_server 192.168.100.2 443 {
+            weight 1
+            SSL_GET
+            {
+                url {
+                    path /testurl/test.jsp
+                    digest ec90a42b99ea9a2f5ecbe213ac9eba03
+                }
+                url {
+                    path /testurl2/test.jsp
+                    digest 640205b7b0fc66c1ea91c463fac6334c
+                }
+                connect_timeout 3
+                retry 3
+                delay_before_retry 2
+            }
+        }
+        real_server 192.168.100.3 443 {
+            weight 1
+            SSL_GET
+            {
+                url {
+                    path /testurl/test.jsp
+                    digest 640205b7b0fc66c1ea91c463fac6334c
+                }
+                connect_timeout 3
+                retry 3
+                delay_before_retry 2
+            }
+        }
+    }
+
+To generate a sum over an URL simply proceed as follows::
+
+    [root@lvs /root]# genhash –s 192.168.100.2 –p 80 –u /testurl/test.jsp
+    --------------------------[ HTTP Header Buffer ]--------------------------
+    0000 48 54 54 50 2f 31 2e 31 - 20 34 30 31 20 55 6e 61 HTTP/1.1 401 Una
+    0010 75 74 68 6f 72 69 7a 65 - 64 0d 0a 44 61 74 65 3a uthorized..Date:
+    0020 20 4d 6f 6e 2c 20 32 33 - 20 41 70 72 20 32 30 30 Mon, 23 Apr 200
+    0030 31 20 31 35 3a 34 31 3a - 35 34 20 47 4d 54 0d 0a 1 15:41:54 GMT..
+    0040 41 6c 6c 6f 77 3a 20 47 - 45 54 2c 20 48 45 41 44 Allow: GET, HEAD
+    0050 0d 0a 53 65 72 76 65 72 - 3a 20 4f 72 61 63 6c 65 ..Server: Oracle
+    0060 5f 57 65 62 5f 4c 69 73 - 74 65 6e 65 72 2f 34 2e _Web_Listener/4.
+    0070 30 2e 38 2e 31 2e 30 45 - 6e 74 65 72 70 72 69 73 0.8.1.0Enterpris
+    0080 65 45 64 69 74 69 6f 6e - 0d 0a 43 6f 6e 74 65 6e eEdition..Conten
+    0090 74 2d 54 79 70 65 3a 20 - 74 65 78 74 2f 68 74 6d t-Type: text/htm
+    00a0 6c 0d 0a 43 6f 6e 74 65 - 6e 74 2d 4c 65 6e 67 74 l..Content-Lengt
+    00b0 68 3a 20 31 36 34 0d 0a - 57 57 57 2d 41 75 74 68 h: 164..WWW-Auth
+    00c0 65 6e 74 69 63 61 74 65 - 3a 20 42 61 73 69 63 20 enticate: Basic
+    00d0 72 65 61 6c 6d 3d 22 41 - 43 43 45 53 20 20 20 20 realm="ACCES
+    00e0 22 0d 0a 43 61 63 68 65 - 2d 43 6f 6e 74 72 6f 6c "..Cache-Control
+    00f0 3a 20 70 75 62 6c 69 63 - 0d 0a 0d 0a : public....
+    ------------------------------[ HTML Buffer ]-----------------------------
+    0000 3c 48 54 4d 4c 3e 3c 48 - 45 41 44 3e 3c 54 49 54 <HTML><HEAD><TIT
+    0010 4c 45 3e 55 6e 61 75 74 - 68 6f 72 69 7a 65 64 3c LE>Unauthorized<
+    0020 2f 54 49 54 4c 45 3e 3c - 2f 48 45 41 44 3e 0d 0a /TITLE></HEAD>..
+    0030 3c 42 4f 44 59 3e 54 68 - 69 73 20 64 6f 63 75 6d <BODY>This docum
+    0040 65 6e 74 20 69 73 20 70 - 72 6f 74 65 63 74 65 64 ent is protected
+    0050 2e 20 20 59 6f 75 20 6d - 75 73 74 20 73 65 6e 64 . You must send
+    0060 0d 0a 74 68 65 20 70 72 - 6f 70 65 72 20 61 75 74 ..the proper aut
+    0070 68 6f 72 69 7a 61 74 69 - 6f 6e 20 69 6e 66 6f 72 horization infor
+    0080 6d 61 74 69 6f 6e 20 74 - 6f 20 61 63 63 65 73 73 mation to access
+    0090 20 69 74 2e 3c 2f 42 4f - 44 59 3e 3c 2f 48 54 4d it.</BODY></HTM
+    00a0 4c 3e 0d 0a - L>..
+    -----------------------[ HTML MD5 final resulting ]-----------------------
+    MD5 Digest : ec90a42b99ea9a2f5ecbe213ac9eba03
+
+The only thing to do is to copy the generated MD5 Digest value generated and paste it into your Keepalived configuration file as a digest value keyword.
+
diff --git a/tools/keepalived/doc/source/case_study_mixing.rst b/tools/keepalived/doc/source/case_study_mixing.rst
new file mode 100644
index 000000000..0061107e0
--- /dev/null
+++ b/tools/keepalived/doc/source/case_study_mixing.rst
@@ -0,0 +1,152 @@
+#########################################
+Case Study: Mixing Healthcheck & Failover
+#########################################
+
+For this example, we use the same topology used in the Failover part. The idea here is to use VRRP VIPs as LVS VIPs. That way we will introduce a High Available LVS director performing LVS real server pool monitoring.
+
+Keepalived Configuration
+************************
+
+The whole configuration is done in the /etc/keepalived/keepalived.conf file. In
+our case study this file on LVS director 1 looks like::
+
+    # Configuration File for keepalived
+    global_defs {
+        notification_email {
+            admin@domain.com
+            0633225522@domain.com
+        }
+        notification_email_from keepalived@domain.com
+        smtp_server 192.168.200.20
+        smtp_connect_timeout 30
+        lvs_id LVS_MAIN
+    }
+    # VRRP Instances definitions
+    vrrp_sync_group VG1 {
+        group {
+            VI_1
+            VI_2
+        }
+    }
+    vrrp_sync_group VG2 {
+        group {
+            VI_3
+            VI_4
+        }
+    }
+    vrrp_instance VI_1 {
+        state MASTER
+        interface eth0
+        virtual_router_id 51
+        priority 150
+        advert_int 1
+        authentication {
+            auth_type PASS
+            auth_pass k@l!ve1
+        }
+        virtual_ipaddress {
+            192.168.200.10
+            192.168.200.11
+        }
+    }
+    vrrp_instance VI_2 {
+        state MASTER
+        interface eth1
+        virtual_router_id 52
+        priority 150
+        advert_int 1
+        authentication {
+            auth_type PASS
+            auth_pass k@l!ve2
+        }
+        virtual_ipaddress {
+            192.168.100.10
+        }
+    }
+    vrrp_instance VI_3 {
+        state BACKUP
+        interface eth0
+        virtual_router_id 53
+        priority 100
+        advert_int 1
+        authentication {
+            auth_type PASS
+            auth_pass k@l!ve3
+        }
+        virtual_ipaddress {
+            192.168.200.12
+            192.168.200.13
+        }
+    }
+    vrrp_instance VI_4 {
+        state BACKUP
+        interface eth1
+        virtual_router_id 54
+        priority 100
+        advert_int 1
+        authentication {
+            auth_type PASS
+            auth_pass k@l!ve4
+        }
+        virtual_ipaddress {
+            192.168.100.11
+        }
+    }
+    # Virtual Servers definitions
+    virtual_server 192.168.200.10 80 {
+        delay_loop 30
+        lb_algo wrr
+        lb_kind NAT
+        persistence_timeout 50
+        protocol TCP
+        sorry_server 192.168.100.100 80
+        real_server 192.168.100.2 80 {
+            weight 2
+            HTTP_GET {
+                url {
+                    path /testurl/test.jsp
+                    digest ec90a42b99ea9a2f5ecbe213ac9eba03
+                }
+                url {
+                    path /testurl2/test.jsp
+                    digest 640205b7b0fc66c1ea91c463fac6334c
+                }
+                connect_timeout 3
+                retry 3
+                delay_before_retry 2
+            }
+        }
+        real_server 192.168.100.3 80 {
+            weight 1
+            HTTP_GET {
+                url {
+                    path /testurl/test.jsp
+                    digest 640205b7b0fc66c1ea91c463fac6334c
+                }
+                connect_timeout 3
+                retry 3
+                delay_before_retry 2
+            }
+        }
+    }
+    virtual_server 192.168.200.12 443 {
+        delay_loop 20
+        lb_algo rr
+        lb_kind NAT
+        persistence_timeout 360
+        protocol TCP
+        real_server 192.168.100.2 443 {
+            weight 1
+            TCP_CHECK {
+                connect_timeout 3
+            }
+        }
+        real_server 192.168.100.3 443 {
+            weight 1
+            TCP_CHECK {
+                connect_timeout 3
+            }
+        }
+    }
+
+We define the symmetric VRRP configuration file on LVS director 2. That way both directors are active at a time, director 1 handling HTTP stream and director 2 SSL stream.
diff --git a/tools/keepalived/doc/source/conf.py b/tools/keepalived/doc/source/conf.py
new file mode 100644
index 000000000..f5d079caf
--- /dev/null
+++ b/tools/keepalived/doc/source/conf.py
@@ -0,0 +1,297 @@
+# -*- coding: utf-8 -*-
+#
+# Keepalived documentation build configuration file, created by
+# sphinx-quickstart on Mon Dec 29 18:59:45 2014.
+#
+# This file is execfile()d with the current directory set to its
+# containing dir.
+#
+# Note that not all possible configuration values are present in this
+# autogenerated file.
+#
+# All configuration values have a default; values that are commented out
+# serve to show the default.
+
+import sys
+import os
+import time
+
+# If extensions (or modules to document with autodoc) are in another directory,
+# add these directories to sys.path here. If the directory is relative to the
+# documentation root, use os.path.abspath to make it absolute, like shown here.
+#sys.path.insert(0, os.path.abspath('.'))
+
+# -- General configuration ------------------------------------------------
+
+# If your documentation needs a minimal Sphinx version, state it here.
+#needs_sphinx = '1.0'
+
+# Add any Sphinx extension module names here, as strings. They can be
+# extensions coming with Sphinx (named 'sphinx.ext.*') or your custom
+# ones.
+extensions = [
+    'sphinx.ext.todo',
+]
+
+# Support for todo items
+todo_include_todos = True
+
+# Add any paths that contain templates here, relative to this directory.
+templates_path = ['_templates']
+
+# The suffix of source filenames.
+source_suffix = '.rst'
+
+# The encoding of source files.
+#source_encoding = 'utf-8-sig'
+
+# The master toctree document.
+master_doc = 'index'
+
+# General information about the project.
+project = u'Keepalived'
+copyright = u'2001-%s, Alexandre Cassen' % time.strftime('%Y')
+
+# The version info for the project you're documenting, acts as replacement for
+# |version| and |release|, also used in various other places throughout the
+# built documents.
+#
+# The short X.Y version.
+version = '1.3'
+# The full version, including alpha/beta/rc tags.
+release = '1.4.3'
+
+# The language for content autogenerated by Sphinx. Refer to documentation
+# for a list of supported languages.
+#language = None
+
+# There are two options for replacing |today|: either, you set today to some
+# non-false value, then it is used:
+today = ''
+# Else, today_fmt is used as the format for a strftime call.
+today_fmt = '%B %d, %Y'
+
+# List of patterns, relative to source directory, that match files and
+# directories to ignore when looking for source files.
+exclude_patterns = []
+
+# The reST default role (used for this markup: `text`) to use for all
+# documents.
+#default_role = None
+
+# If true, '()' will be appended to :func: etc. cross-reference text.
+#add_function_parentheses = True
+
+# If true, the current module name will be prepended to all description
+# unit titles (such as .. function::).
+#add_module_names = True
+
+# If true, sectionauthor and moduleauthor directives will be shown in the
+# output. They are ignored by default.
+#show_authors = False
+
+# The name of the Pygments (syntax highlighting) style to use.
+pygments_style = 'sphinx'
+
+# A list of ignored prefixes for module index sorting.
+#modindex_common_prefix = []
+
+# If true, keep warnings as "system message" paragraphs in the built documents.
+#keep_warnings = False
+
+
+# -- Options for HTML output ----------------------------------------------
+
+# The theme to use for HTML and HTML Help pages.  See the documentation for
+# a list of builtin themes.
+html_theme = 'sphinx_rtd_theme'
+
+# Theme options are theme-specific and customize the look and feel of a theme
+# further.  For a list of options available for each theme, see the
+# documentation.
+#html_theme_options = {'collapsiblesidebar': True}
+
+# Add any paths that contain custom themes here, relative to this directory.
+#html_theme_path = ['tools']
+#html_theme_path = [sphinx_rtd_theme.get_html_theme_path()]
+
+# The name for this set of Sphinx documents.  If None, it defaults to
+# "<project> v<release> documentation".
+#html_title = None
+
+# A shorter title for the navigation bar.  Default is the same as html_title.
+html_short_title = '%s %s User Guide' % (project, release)
+
+# The name of an image file (relative to this directory) to place at the top
+# of the sidebar.
+#html_logo = None
+
+# The name of an image file (within the static path) to use as favicon of the
+# docs.  This file should be a Windows icon file (.ico) being 16x16 or 32x32
+# pixels large.
+#html_favicon = None
+
+# Add any paths that contain custom static files (such as style sheets) here,
+# relative to this directory. They are copied after the builtin static files,
+# so a file named "default.css" will overwrite the builtin "default.css".
+html_static_path = ['_static']
+
+# Add any extra paths that contain custom files (such as robots.txt or
+# .htaccess) here, relative to this directory. These files are copied
+# directly to the root of the documentation.
+#html_extra_path = []
+
+# If not '', a 'Last updated on:' timestamp is inserted at every page bottom,
+# using the given strftime format.
+#html_last_updated_fmt = '%b %d, %Y'
+
+# If true, SmartyPants will be used to convert quotes and dashes to
+# typographically correct entities.
+#html_use_smartypants = True
+
+# Custom sidebar templates, maps document names to template names.
+#html_sidebars = {}
+
+# Additional templates that should be rendered to pages, maps page names to
+# template names.
+#html_additional_pages = {}
+
+# If false, no module index is generated.
+#html_domain_indices = True
+
+# If false, no index is generated.
+#html_use_index = True
+
+# If true, the index is split into individual pages for each letter.
+#html_split_index = False
+
+# If true, links to the reST sources are added to the pages.
+html_show_sourcelink = False
+
+# If true, "Created using Sphinx" is shown in the HTML footer. Default is True.
+#html_show_sphinx = True
+
+# If true, "(C) Copyright ..." is shown in the HTML footer. Default is True.
+html_show_copyright = True
+
+# If true, an OpenSearch description file will be output, and all pages will
+# contain a <link> tag referring to it.  The value of this option must be the
+# base URL from which the finished HTML is served.
+#html_use_opensearch = ''
+
+# This is the file name suffix for HTML files (e.g. ".xhtml").
+#html_file_suffix = None
+
+# Output file base name for HTML help builder.
+htmlhelp_basename = 'Keepaliveddoc'
+
+
+# -- Options for LaTeX output ---------------------------------------------
+
+latex_elements = {
+# The paper size ('letterpaper' or 'a4paper').
+#'papersize': 'letterpaper',
+
+# The font size ('10pt', '11pt' or '12pt').
+#'pointsize': '10pt',
+
+# Additional stuff for the LaTeX preamble.
+#'preamble': '',
+}
+
+# Grouping the document tree into LaTeX files. List of tuples
+# (source start file, target name, title,
+#  author, documentclass [howto, manual, or own class]).
+latex_documents = [
+  ('index', 'Keepalived_UserGuide.tex', u'Keepalived User Guide',
+   u'Alexandre Cassen and Contributors', 'manual'),
+]
+
+# The name of an image file (relative to this directory) to place at the top of
+# the title page.
+#latex_logo = None
+
+# For "manual" documents, if this is true, then toplevel headings are parts,
+# not chapters.
+#latex_use_parts = False
+
+# If true, show page references after internal links.
+#latex_show_pagerefs = False
+
+# If true, show URL addresses after external links.
+#latex_show_urls = False
+
+# Documents to append as an appendix to all manuals.
+#latex_appendices = []
+
+# If false, no module index is generated.
+#latex_domain_indices = True
+
+# -- Options for Epub output ----------------------------------------------
+
+# Bibliographic Dublin Core info.
+epub_title = u'Keepalived User Guide'
+epub_author = u'Alexandre Cassen and Contributors'
+epub_publisher = u'Alexandre Cassen and Contributors'
+epub_copyright = u'%s, Alexandre Cassen' % time.strftime('%Y')
+
+# The basename for the epub file. It defaults to the project name.
+#epub_basename = u'Keepalived'
+
+# The HTML theme for the epub output. Since the default themes are not optimized
+# for small screen space, using the same theme for HTML and epub output is
+# usually not wise. This defaults to 'epub', a theme designed to save visual
+# space.
+#epub_theme = 'epub'
+
+# The language of the text. It defaults to the language option
+# or en if the language is not set.
+#epub_language = ''
+
+# The scheme of the identifier. Typical schemes are ISBN or URL.
+#epub_scheme = ''
+
+# The unique identifier of the text. This can be a ISBN number
+# or the project homepage.
+#epub_identifier = ''
+
+# A unique identification for the text.
+#epub_uid = ''
+
+# A tuple containing the cover image and cover page html template filenames.
+#epub_cover = ()
+
+# A sequence of (type, uri, title) tuples for the guide element of content.opf.
+#epub_guide = ()
+
+# HTML files that should be inserted before the pages created by sphinx.
+# The format is a list of tuples containing the path and title.
+#epub_pre_files = []
+
+# HTML files shat should be inserted after the pages created by sphinx.
+# The format is a list of tuples containing the path and title.
+#epub_post_files = []
+
+# A list of files that should not be packed into the epub file.
+epub_exclude_files = ['search.html']
+
+# The depth of the table of contents in toc.ncx.
+#epub_tocdepth = 3
+
+# Allow duplicate toc entries.
+#epub_tocdup = True
+
+# Choose between 'default' and 'includehidden'.
+#epub_tocscope = 'default'
+
+# Fix unsupported image types using the PIL.
+#epub_fix_images = False
+
+# Scale large images.
+#epub_max_image_width = 0
+
+# How to display URL addresses: 'footnote', 'no', or 'inline'.
+#epub_show_urls = 'inline'
+
+# If false, no index is generated.
+#epub_use_index = True
diff --git a/tools/keepalived/doc/source/configuration_synopsis.rst b/tools/keepalived/doc/source/configuration_synopsis.rst
new file mode 100644
index 000000000..e9032a7ec
--- /dev/null
+++ b/tools/keepalived/doc/source/configuration_synopsis.rst
@@ -0,0 +1,190 @@
+#################################
+Keepalived configuration synopsis
+#################################
+
+The Keepalived configuration file uses the following synopsis (configuration keywords are Bold/Italic):
+
+Global Definitions Synopsis
+***************************
+
+.. parsed-literal::
+
+    **global_defs** {
+        **notification_email** {
+            email
+            email
+        }
+        **notification_email_from** email
+        **smtp_server** host
+        **smtp_connect_timeout** num
+        **lvs_id** string
+    }
+
+========================    ======================================================  =========
+Keyword                     Definition                                              Type
+========================    ======================================================  =========
+global_defs                 identify the global def configuration block
+notification_email          email accounts that will receive the notification mail  List
+notification_email_from     email to use when processing “MAIL FROM:� SMTP command  List
+smtp_server remote SMTP     server to use for sending mail notifications            alphanum
+smtp_connection_timeout     specify a timeout for SMTP stream processing            numerical
+lvs_id                      specify the name of the LVS director                    alphanum
+========================    ======================================================  =========
+
+Email type: Is a string using charset as specified into the SMTP RFC eg: “user@domain.com�
+
+Virtual Server Definitions Synopsis
+***********************************
+
+.. parsed-literal::
+
+    **virtual_server** (@IP PORT)|(*fwmark* num) {
+        **delay_loop** num
+        **lb_algo** *rr|wrr|lc|wlc|sh|dh|lblc*
+        **lb_kind** *NAT|DR|TUN*
+        **(nat_mask** @IP)
+        **persistence_timeout** num
+        **persistence_granularity** @IP
+        **virtualhost** string
+        **protocol** *TCP|UDP*
+
+        **sorry_server** @IP PORT
+        **real_server** @IP PORT {
+            **weight** num
+            **TCP_CHECK** {
+                **connect_port** num
+                **connect_timeout** num
+            }
+        }
+        **real_server** @IP PORT {
+            **weight** num
+            **MISC_CHECK** {
+                **misc_path** /path_to_script/script.sh
+                (or **misc_path** “ /path_to_script/script.sh <arg_list>�)
+            }
+        }
+    }
+    **real_server** @IP PORT {
+        **weight** num
+        **HTTP_GET|SSL_GET** {
+            **url** { # You can add multiple url block
+                **path** alphanum
+                **digest** alphanum
+            }
+            **connect_port** num
+            **connect_timeout** num
+            **retry** num
+            **delay_before_retry** num
+        }
+    }
+
+======================= =========================================================== =========
+Keyword                 Definition                                                  Type
+======================= =========================================================== =========
+virtual_server          identify a virtual server definition block
+fwmark                  specify that virtual server is a FWMARK
+delay_loop              specify in seconds the interval between checks              numerical
+lb_algo                 select a specific scheduler (rr|wrr|lc|wlc...)              string
+lb_kind                 select a specific forwarding method (NAT|DR|TUN)            string
+persistence_timeout     specify a timeout value for persistent connections          numerical
+persistence_granularity specify a granularity mask for persistent connections
+virtualhost             specify a HTTP virtualhost to use for HTTP|SSL_GET          alphanum
+protocol                specify the protocol kind (TCP|UDP)                         numerical
+sorry_server            server to be added to the pool if all real servers are down
+real_server             specify a real server member
+weight                  specify the real server weight for load balancing decisions numerical
+TCP_CHECK               check real server availability using TCP connect
+MISC_CHECK              check real server availability using user defined script
+misc_path               identify the script to run with full path                   path
+HTTP_GET                check real server availability using HTTP GET request
+SSL_GET                 check real server availability using SSL GET request
+url                     identify a url definition block
+path                    specify the url path                                        alphanum
+digest                  specify the digest for a specific url path                  alphanum
+connect_port            connect remote server on specified TCP port                 numerical
+connect_timeout         connect remote server using timeout                         numerical
+retry                   maximum number of retries                                   numerical
+delay_before_retry      delay between two successive retries                        numerical
+======================= =========================================================== =========
+
+.. note::
+   The "nat_mask" keyword is obsolete if you are not using LVS with Linux kernel 2.2 series.  This flag give you the ability to define the reverse NAT granularity.
+
+.. note::
+   Currently, Healthcheck framework, only implements TCP protocol for service monitoring.
+
+.. note::
+   Type "path" refers to the full path of the script being called. Note that for scripts requiring arguments the path and arguments must be enclosed in double quotes (").
+
+VRRP Instance Definitions Synopsis
+**********************************
+
+.. parsed-literal::
+
+    **vrrp_sync_group** string {
+        **group** {
+            string
+            string
+        }
+        **notify_master** /path_to_script/script_master.sh
+            (or **notify_master** “ /path_to_script/script_master.sh <arg_list>�)
+        **notify_backup** /path_to_script/script_backup.sh
+            (or **notify_backup** “/path_to_script/script_backup.sh <arg_list>�)
+        **notify_fault** /path_to_script/script_fault.sh
+            (or **notify_fault** “ /path_to_script/script_fault.sh <arg_list>�)
+    }
+    **vrrp_instance** string {
+        **state** *MASTER|BACKUP*
+        **interface** string
+        **mcast_src_ip** @IP
+        **lvs_sync_daemon_interface** string
+        **virtual_router_id** num
+        **priority** num
+        **advert_int** num
+        **smtp_alert**
+        **authentication** {
+            **auth_type** *PASS|AH*
+            **auth_pass** string
+        }
+        **virtual_ipaddress** { # Block limited to 20 IP addresses
+            @IP
+            @IP
+            @IP
+        }
+        **virtual_ipaddress_excluded** { # Unlimited IP addresses
+            @IP
+            @IP
+            @IP
+        }
+        **notify_master** /path_to_script/script_master.sh
+            (or **notify_master** “ /path_to_script/script_master.sh <arg_list>�)
+        **notify_backup** /path_to_script/script_backup.sh
+            (or **notify_backup** “ /path_to_script/script_backup.sh <arg_list>�)
+        **notify_fault** /path_to_script/script_fault.sh
+            (or **notify_fault** “ /path_to_script/script_fault.sh <arg_list>�)
+    }
+
+==========================  ======================================================================= =========
+Keyword                     Definition                                                              Type
+==========================  ======================================================================= =========
+vrrp_instance               identify a VRRP instance definition block
+state                       specify the instance state in standard use
+Interface                   specify the network interface for the instance to run on                string
+mcast_src_ip                specify the src IP address value for VRRP adverts IP header
+lvs_sync_daemon_inteface    specify the network interface for the LVS sync_daemon to run on         string
+virtual_router_id           specify to which VRRP router id the instance belongs                    numerical
+priority                    specify the instance priority in the VRRP router                        numerical
+advert_int                  specify the advertisement interval in seconds (set to 1)                numerical
+smtp_alert                  Activate the SMTP notification for MASTER state transition
+authentication              identify a VRRP authentication definition block
+auth_type                   specify which kind of authentication to use (PASS|AH)
+auth_pass                   specify the password string to use                                      string
+virtual_ipaddress           identify a VRRP VIP definition block
+virtual_ipaddress_excluded  identify a VRRP VIP excluded definition block (not protocol VIPs)
+notify_master               specify a shell script to be executed during transition to master state path
+notify_backup               specify a shell script to be executed during transition to backup state path
+notify_fault                specify a shell script to be executed during transition to fault state  path
+vrrp_sync_group             Identify the VRRP synchronization instances group                       string
+==========================  ======================================================================= =========
+
+Path type: A system path to a script eg: “/usr/local/bin/transit.sh <arg_list>�
diff --git a/tools/keepalived/doc/source/images/software_design.png b/tools/keepalived/doc/source/images/software_design.png
new file mode 100644
index 0000000000000000000000000000000000000000..6ca3af4bb0a617cbf728b0671108aa31fed08c99
GIT binary patch
literal 28145
zcmaI7b9iLW6E_;$wl>zrns8&=wr$(CootegZQHhO+i$+V_qq4}cf00vP4}GVO!cSh
zG^(n@<zz(RVQ^r8fPmn|#e@`qfIt91K)_*8pg%QnU9-P`7?`Pmv;YuLZ7l4EKKM_W
z$WTl{8VJaP90<rS2nguyr^@dH2*{ZM2<S`?2#6~U2nf?It4*H!=V8xsQcA+#-`}5~
zpKot(FE1}oPfw4Jj}H$I@9!U9Utd>OSH~yEySuyF+gm?rXJ_Z&;NbA^@bdEV`T6<0
z5w@eFePm>KX=&-?<mB$|?)CL`dS-fKePecR_V)I+q@-kUaA0|P`K$q^y1KfrulM8Q
zBR@aCzrTNNZ7n1uczk^9^z^j5yDKg(Zed~J=H|xV-*0ki^5WtmEiEl6DXFQc@&5ka
z)6*j~G<0QU<^25I#l^+i+BzmCW^`=S-rnBW*mz=MJUTjhJPW2G7;3E)#?sQ#$H%8L
z0h*icKa{-nA!NA02(f^5#K5AhAuTK{#>U2w;DEE;Ax#w!PU>LVVxjyEA^eRXHvhp$
zNJuCvE9>a!Y;JBHA0G`556#cdUteFZuC5LZ4Vs#o&dtpQ1_lle4esynjgF2?O-&xw
zz#LS=>{P;R)Y8nA{~j-*SSp4Y8XRm+A|D<Z8W|qS@Fp$sgWRrw@ieC!8~c%Z)Y*W1
zVtj0TVr+79VtRUNW_D&~<_ET!xw+Yeh55zB#igaim6c_E6{Z+hhCoNY_4W0&wbjkd
zjg5_Ub8~ZIVqy*sj{Sol+7Am0LqtS8IX*r)IgW~oIy*Z%IX=1gf$8Gn{D&^ik&uwC
zE-$bCzw7Gq>hk91`uYd!>;JLq>$}?@`bj_RC*3{VKg<_EKm4#C=zp?@hy6~`qnWVF
zgVFhkhUs?q{(O$d|0&AT<BzsHy}iAbr|Uhx{Lp{d%MW{g+1ptzj$mxBO?dx!|M>XP
zrvGK{AKzbJs{{U@Utie)^kHG4Q<IZ3)6;XavkN~!FD%T>&Mhu2?(A$Yulz?pKtx1D
ztgiiET8oZ}-rCyS_<>_%eRJ!FHg|sX^1p9e3-b#<cpUs7a&Yj2MYKKc^vulL>+9S9
z=zshzCMNppN74Ux#YD$2t;D<i=m)TYq^OX1DENUF5Re6oxR8L7+uCKPCqJ5M({I{4
z2wiR^G=WooI2`$$SvH&yk<(2O)SfKpum}-wlz>rI*8&-@9Y?(6eCap_a*}i*X*5H*
zE1r9Nc|_hWN8rg+NAhrrv-B5lkwnL9x1+5Nn}qk_=B2gvf8~VSFl}WveP{nZ)jTh?
zJ+I#?m49lV2-vK`Ld^dEKR_dvEzPmj+eoW%vCZA8ekD)I{bK+^&aEzgf!<#t2=T1Z
zI6UM7)9ZXazuw2>53^;z@`(%kLPmgtWAQP$c?|;oc=ME2yB&tMqj7(A323m-M^kwj
z809s?5g?wI--!Pz)Pg4P-DcEapRJ_wxJ&AR2F_VkWo!!#_|#%Q34g4)!g7o7bo(c#
zGksnz>U2Bbp$(n`WE;!Wmm#;|RMnBQq8b}A4VAt_asekh)8>37%j{f_GJE4@q)X<%
z=rlW-5?i9KPe;jVOo~G=eNo;LD)Qa}2GA)}Y_!RQl*7R$K)fs;E-)1xXanKia%`~4
z5S4R~sFCftL8>gDrI@3Tma+qP>F^RY+hmE&OP^IFF%aajEsA1!zI6|;>Y2LXuhcxk
zW+8N5W>-76cnHrC%OE(20MH?JoGt_%@n#TUogY*Aimc51cKW5osP-gZCV>qh7($b2
zJ_1HDKL~jWO6SJSOUkw=SbYt98*uJ*^YTxjnD!SalL?g?k~68f-h@$jIu`ST97|Fp
zq+YsydgKk!Dukp?3Mxj*ctz}hAw;1zdRwU+-)U;M8%hmxUFsZ!6%ZxPe&rdgzKUF)
z)spfuw#W9wYZW%_dzk{674$WRFm85OHdZ1dts<V#nEoE*gndvp9vACXI6lXH>*s(B
zy=ZQK)wsMoleV3<U-p(u=n0CUi3kCeP{^p!SOFUjvpXg2w$a$+f&YfrKuj-?mlKBz
zlcV%sFR>{mBjYqHK+tnttsdhD4l|RZ5fnc+B0?H`74q-&^o`z!k{-CeMfg}CW0NuT
zg!8`NJ{#zbflv#-6fet^qO-X<?m2f1%8R-JJou5Qt(d}nNZ6Vn&qO+ft@l6UA&=NF
zB^mTYX1OL1nH1(dMV)#Vu>hsuoOl#P3T|}3g+P;rulnguJmceg<Rpl-f+fiKeKHu>
zXoe<f@!0j3QJ}*J%me(4vUCWr`%s4~>H|{hw9}O6LI@a=qAcNgjG6xg7+dK@?1&Ol
zsT|?dv|?3izJKn*5WvOIFL$^<=+Xe|<!&e%8cg}h!#FZNs^z|D=Pu*(!)yvuO)(8x
z!e-!O5w>WH7_*GZt^pwrA;De&7uljsfzPgiLQYhSgG^1Om2&jMufYSS47!|RJ_7W`
z_y^Nrm~2sI>y20%MC#QKBjCkgJCb2x!=CJg{0L+BCyJAj-tor4K&uFY>#WugBo9TZ
zrn;`Sx~5<v466q<w#5Y8FAAiM8dv(nI5@u+`4iYXEqPc<B^%D&!H$EHb<?p171d;f
z*m%?r<B)zz=sx0@26Y-U3u}H`V7-n3{xSjHrLHDW3W(?e$Ulp=a8@m^CuWoqn~3JZ
zsHQ`hb{PS{NQs6)u1^69oPchkoLb{mVIz<h3|hkKS!;1pIvhisdFU4(0+TVLR%qSZ
zrI8i8rr7iT3sN-BozgEG2#XoJW(viHi0_2TmiGE!aHVB%2CnQhCor3~L(P=GQaYu#
zItq~--kxewFBCtJG|!9;+aC+oh5sD`*ZrBQTAf8?x~3Vhv;tjEI^rzQ52_Ot3>x~8
z>~Zn{3~)P~LSG?fQdlfC6!J}TgOyV1XK3N~KTWz4Btjns=Y(jjEeIOysLTn$KZy}e
zcZ0PisZY?K7;R*s!Oe{B@6?(Fgk@h$ctHcOOHI=`y6RbQA>&&WbQ$I7K!JgV#>mge
zpaD*-C@YM{IQWLcNG3@aF<O{yynSkYeT)x2X)}Bm2e9u^pTO)=8zM9{i2|U^9Z?by
zP@Hv#WBP)~-b*XJlDhQwLKjBR@B#Uz1l>-@nyV>Rg(rw@1(`*f9{ThQjJT@^nbG(O
zv0jkRCycLVi^zah2ONA?WOy{8l07V@^}qCCjkFzFBU!-x2-=2700mv_idw<s=@dh;
zRVk*XAbcyOzvwOoCn!?vwjKZBTJvFbx=OT3dXSE`Ov@V=vJS!3YvjcsN2F_!!xm91
znz}-j$7mI@SufDBbd2gUb7Z7hrT%(X4D|XzFRPwPds<r{UbX3`4@uv}0+;eey*zXk
zWPB7x&q5XAa(77)Hi%~D9=r)XuG>JF`}TYL$USx45HfdCOctHUD3Sa-IgV=7NP{n6
zgaIoDA@cO^4P0ixh54<bis)n#L8zXu33dgFRm90QA^urSe|Z~+h()=#uDG(o5Yo0v
zvkW6+q;<$6c%)Q%`l=J*Z}!gA<YfZDm4pTTw|73To+#ZaZ>_5k=SPC}Oz0S*ehCdV
zL)%_16f8WDiyhd#5+YOjOBAW*rLZd$U{hY|JMtt40tn!i>?qv|OW+Fc!u^n(<o_4A
zH>TXo=Z;qO1M`fTT<bi=9W4ILgVF_Ne$S+34<GKD(XjDnDnKf$3N<J(>!P1S-$s9j
zjG1pU&*9f{R^+({`5u_KVa%uRiAmMHnGr5G)hJj-e|LZNI0E<iD!e~xF`$nEx-P!e
zXrBBmlgsU}>S$Ii6@5~kooG3PrhhG6=_X|oK3{6(@n2O(-X+|L_g3ckj=zzwN*5U%
zH+AxASh{p{q@JUwhP#V_zZvMF_7bVqOy=k%TY<ib4fEoVImc*YMW58oM!{y?py@$<
zKMQ}gzuouNy5r>XGySu35xQ?;u_@AA+(-7d*mfAcwem@@tQsuKozP&?kURbt@OX!i
z#igB^_177&nE=H3c93*9?`2T-&Qo4pb7zkj&7XLRbD|e2lsqMIn?``mK~3vHF8y6<
zV{BAVUDTR0ud4KFq`g`i1Wn&&fD8`zEQ$9@`Y<x_>WKN_5XM25mdo~COS)NyzF*j3
zXgv8C*Hx#)Yv5KPNpXU3(?<|48!qGVaH|W4Tr!-v?=(Li3C#I5w)Gs<byjdk4~+OI
zcGD7mD~k{>bXrc53h^d?4C$t&>n!h{nm<fYK+0egW+ZWQFA`|G{7NvZs;#^wd;)zF
zfloqn_V1dfpc(>(!yy$e9^KtZ7aq+@sp5QoaE>ddj%j8(bi)>&bXfA-ZDNd{kI-S5
zHSS^={H`?F--q`g$C60B8uq}R2K3Ww1b>-dp$hiE{ihHm#=d#E#2-;x0ecYszaQzA
z`6Cj6FaK}h=gx#B@VlA+JtM}FDBRgUi44mjO61Wo>>ovc&%+xLF}oHhl{6NCB(#?a
zSz&pv;h4*12Y6ughCMu~1|}4}`rH^lN4}{K!sJbSuc-nX7L%P!i&j>NoLrYNlSx)F
zc8La?@!nKF%eNH9=nfb&cVTbPJfq}oNz{Z{-e^X>hw60N;54u5E|<sE>L7itM8599
zk0g@^<7gwlj5E}JPZ))TkD@<8;@w1f#W)m6F+QgbFwb60a1^eQAk!lyP8`fg?L<v;
zTA`Oz$niIEYg-`BxPQHlHPRQ2VN!44a$mJTB&hx6*O?k%dNn6tHa?m)N_Kx$Cr?Q=
zM^Ti?G(*tdpGQGF1|4YqU3|)`@5>b_3ldSkdK3mNP`TH-N{dU8$a;A6G<HMl<8ybA
ztUVX0&9KCg5~oNp{^y(OJlJ#-2k`&?N01=}d*F1uX;C^5ter#^cOi>ro%}?+DH`)>
zIH%E}_FnL9YY03^%<CaXu3Owu3){orjA<2m#Tl+OGu@{Iyt*05Cwbfyy3b=>(~gU+
zkYVX1eue)lJ}GQ|fMSA)dW~V9dQrVJIpbdbyiHzN(4rpXJ#Iw}YKpl=62)ZhHV;p;
z%jQb0;rLJtx=ni6NEQ<=2E-U`*92NEQ+bE6;qtKw&*j#NeI#pKg}9WkNjlfWNGN?s
znpG2Ju55s9fxev26bbJ%_70IR^7!}&86RK*0^s&JHnHRAYbvIe&$03LGh0}XP&1gI
zKOg|mE!ih%)@$syI^1#DtTxoxY_~*ih;>vT;KWvI{GXzcwxF`$)962<jVZ%w-Q%1=
zj{>a;BJvj?Xf5|`9dgH<Y%f{{am0A^LPdHwuxTe@G<ztZF)S0q^2Pn*`1t_i7yx&c
zze9}xevu&wdP3E4`z!)BT`nct8dO5U@3FrRs(btF0+hVo^E6m14d#j-9^6*9XfdHZ
zG^eDs=BVNUSaUQR`v%okd%!!LB)2~Iu2(Vmu4<rV6c;nJE!=U&Zfn5ov?4)<J7dOx
znPN+f?$qXVg(Vj*HOgNm_L%omYl?$wlR~F;g+%La%M(=z^S<{quEQ~a3V$O(gqnFm
zrdG3z^@zs9L(Q;}K&a0#VWr)q)WV{;JrJ1MJBRSH5wM(h!(sSiPG=?;CJ#$7C56GY
zO3m^n8{v|F|18#<tTmejz+CN!^l|OVdxXQSM}U#1$kQtwG|;CTqsMl|iPTwxvb$7A
zH%nG4)!Ho<U0y2Jy0Y1vRBo}{Hz?u{(YCv^4WKj{wIl2pk+laUar$Jo%MZR*R)JXz
zhoi7h_J#@v<b;ef1QH}dNFu_SgSf$65%f#0l^uL9qSnD#Y?e75O7cR9?Tpz(!r5au
z+FeF>?f+zi8MF&Q^b#~%LIJ$16W$F?pKLxZw|H>zV8(fah3>3+<J4$`^uVnWXpb}n
z^moDyeBRfIFCH2tuA;Je#JbnpZMV0|6lYi2l}U`kthaf0WrbaTx4nn8r`Fv{X%VP#
zv)dK#*!nc)AQU=lw*Mu*C@ti<d-ZB{@HIO48u{dpe{a?8)D?(VNFZtI#&J}lL9L)v
zNC-sIs@LIfuOGHXW(msPO1R{#Py>LNA3zEG+JEra6zkN{RW4rUGZ2r&C6+vS<i3Lv
zJ58)~pczBqKEI6tkeERMI*CG$D+?TyYJ|`tOfH@gnTHY*vF1@RSKe^yY0=?6<SDKG
zViHekR@5b$QZcQ}s;zbcv7FS-ch8!zpXtb}d*nR;*=)EwL-y>l_6(r#7>YwC{8&7e
z@WdFI9XI?znRWWbs0_`;&1WGIfL!MEbQL`GjxEirFa0iN&1WqO6eV<v>)hhCw@h23
zp?^9Hb73FbqtzjbH5mjCMxCx4*moJEfwqxmv@c4$O!&7soL!GBG{{vNBWpzn#lqhx
zaY5#R36;S|yVxrTs5u0H_Lp)VtBZ%b3N`gGVFfG<7nT!JQyZ6^Z!DB};kdk<hQ0>2
zkPc)}ku-CC#%ge*B*GsMt!aj-fT2Rgk%=A5rA3DO3k{R1z&pRZ(!91d9iHu3G=VjJ
zQ+d^KMT;<eR?~t42MurUPnJB7+Rm7o@ao?2r8&0_%Gw5x8uG_^EKR7o`7{4pNdIgP
z2L}E88v&-;t{lwp!7?|tQe?k|{+MvOvnC19Nc=|_E%|h}6ZjPbd=J!*{!mm@_QJt*
zHp~rOCH9&EJN^M;exV(GD7-B^pA+~8eOX$g3x=YMbKI3ab|8Q)TMb#bp6}mI`;+K?
z{!kRe?)cKD*1MieBKT_cRoZnk77QolV*frF-S>_HCWad^y?sqzFB%4h8pfLuO<VSW
z(e!mJ$d&Xe(6EWn&f2)e6NwrBafM$@dVGD?^=b+`C=zN8M#KoNK*rJj*F9TMGKM>E
zyq^?|aZqz}S2wax25qHtKzb#*pIY+nEX2Dj@=h`MvTp3VW`D$y4cmeWqgY8lkn{CS
zBx6VtoZJitE&ir5u%RlLLSW3LQPS^HZdPWB;sbc+xlu2sZVg5A2cBaHd3?BcJG=Bt
z)<Zb471s<)%BdeQ0YA&gTyK}!g?F~iBe2JcQf_;aJtM_|@V`(+i4++b1qCwM+~~-&
z3lBa*0ay76L#2tx(uq!Os1&k%6`rMKR3tD#0v7|d`$UQ;=(A|{9<4U*x)uW;WaWyM
zYQ#xk>*0xNI`eN|U5;mY(VlqD(z)X6o=$<iaf`~yZ=u;~rZh~tZo7dKskw#pbr1RT
zQ69p^_vuGRNAo^Drk@#^no~JXfX$7I<KgCcIv=_+Q-;pf>f%EyN#+j?g-;^j&v`mi
z4H@>_5IoZiMMihlGI@z{_3jjtZY9df!D}bqi<p3lHA&)D%eVL4QzGv!)cXzJ*J@wg
z&yw$R!aCkkHN1Y$=}|%d2#H+B%F4=PFU?+n@6`vVu5PX)5;r8mhnKgexA(OC1f&r?
z(D6nvY-Qy@8-Ht$Igc+e_Ay1ZPNxS1+K%TJx6tpGrkrPI6c>*0rfaH=`r$UqH^tJB
zmC*@C9Ok?B3We^P`wQRK_sCF5*Xx&gKHlWpyBwb2;3-0W6{V1nkS1-IPA96Q`QoOT
z@qE=k>s1CXcf~X1BLxHHl*=Masa1MA5}9H0LrroyG3jenTEST(uGB6Zw=pl-1(t8l
zK$kUvx>H#2bH{y8%4di!KwSMHuM^M&oNwP>C6DK2<5?akan#flYVoeA$TWYOna+56
zJya8DY80XHZ`%(@%Pe!=b~vYhY#QF3=R3r*-?gZUx4QWVI>?VcWo6%V?C0jG8_g<8
z2$&1J8zF0_p<Um0fV*K*Uv-&YRgeDA_JJ!Pb!X}Bm^^$J2eq!zwDj!FpB@g(F8L;)
z+11{=#QmU1+zm7}?9=kkep*?HS$T??ic$N1vaGFL25?n554kuw@t?H$dLB2%AbiUp
z5!YH~|Cl84ziO8a{1<&X>+AQqMqY<qv_dJ1T!(bJLkgCwn{{m|n(k`@VGi;v-=x;`
zhe!IPM4Z}775HlEUxE>IA~}oqbw)?0Pg0GqBB-f5+X~fwD;xd30%_krsG5D?3l|;&
zG11x(PPU5F>)g&Y_WdSa>gzUoi1;4L3sgEte$J^i?4Iij)fVFYV8~l04S&J_oUJ`x
zKqiKcYA5ys0lcp<;lC4irXi%Yd)3v0#(o2GKX<-&7jM#;&j{cDY4PCK7tEb@nh1CH
z#=QO3dEaJDF|=@twK+4u5TMYiXZrT9I_vM)`cxF?t$uf9pG9v4b!oW7q05DjSOxuQ
zhi}cjQ^-j^U*+_u^X!K@K?FX9OLWMJKS0RP_9DikAMbtxQucG6@9T6g_p6p@_~AT?
zmyh@IX(Yq2L{^c7qu6pFz7g*_&Eds~i|ruDG%!+k%8hzEDe=d~VmadWwwgxVz8_IF
zivR%UNIodwPW^}_0Od(C9+{qI=T444Eoe2-j>?XGdbl6WK5rN4KL)JoNAYO)Xx)9u
zOza)!d=dTnwI7Iivu%*7ciejXy_@?~;fj6vdi(*GI>CO@Q8jzxeR!djk{zGDtejj#
z^2T<L(p7M`;mFeK%=cE(ZpfFJ{&>Ez(fytrNy+|QhNyE@b>^KDKL)McA6t3ZuFFZj
z-1&ZJp`msAM`THnzOW(+QHw>+5y$+6&x7E{RpHDK+7_w@Y4trWYuXk^z2PknM7O=o
zXcW|X_L=QZRPz$4E%Dj9h5*+3-RxbJZeHiQ&|hn)CG}ah4)idd_uXV0rX>>iwcbVS
zfDQj<`yMi4eDJkxYVND;Dm&MuyFmzmak!Omzv@=fVK3^X4#;`1&Mj9R(`;YbOdUJV
zXiyWD6TC1=3-gG@*P@y(K6sKmbe68V!WGpn#CKu3TZnPZsSFaSNaubXWKCS|Xfc7e
zUC0=v(bpBkC6(4`g~(#%_MVKS5x_FLi~OAcW<oAtt}9L!)??IOe8+9tA?UsTr|t@e
z9s9cUh4;L*(GN~b%8`k_oby#!Lp`yk-T@vMC_hmAH;T(rUL-GwXvILdIuvsn*hTVh
zhn*eU$;fW|_u{)Y(i7a&ghFMoMlZIsT-CVpqxPAI#;_>XF>uZHJOXgq0GQd)|C*Sp
zRO<py6~<6#DTm(TOjb-1D7lerl-uf%FRw!dcZWj^5g~e%C4rQJ^Agi0GJjo<K?lS9
zuja=xWITRD>$seeA}&6DpoCjyJfdbYxhpl5eev}JNFYAbNEo4hl>Mz?R8KJOG9QF*
zot~d0F-sR1dz^0nq8U7yp&pYyGK_n?-C?O^gO_bh&%oVcN4H{a3aDToP_VIvdE?k`
z$XSW?L0@pyp%o^Yk<THcd4U|}E#QlemO4+5T1<%6ai)se!do|rp&;Et=D&NH2LAY(
z395+%mYD|i5f5CoFAtI`uyUGxG(789l+tHR!4#b1DdHh6=|;h+>gwCZb^1Ew#~S2J
zTp6Eo<L(R?!N$*b>%3*YOO?0)44@jD&AQt2p@8wg@wiTeI8bvWck_$7)VM(Tu<nM7
z;#x!bqvBK|Oql3FtGE{w6ZKFvjgZ%rPNkivafBZPZ2kn(sB2L*Da5Ep)eUY@qf~+$
z@3LM6XV(m3>tmBcN`kls;s-%hNp#s*sWw!p(jHXR!&W<fla;siBWNsENu5bbu-yt2
zC-o_ukmU&d7~7%;+tN2r6WXw^lf)xe5)p+g=Tb+<=f)#fCC}GV#U)oXQ<|ICDpfn1
z+fCf(+(MP~@YD5bDhzc=EZbs8^bAJjP>Fire($GX&k8K92hb*o*60zN729L+lPn1e
zROVg>86RLpM=o@*L#+_^P=?7Fh$6JAOw^8@sD&G|t32WTx!_>?$CI%`Z<MM&$kGHL
z&teq@#{be<{VG_5cVW9r<gq2Nsu5&q9kJ3u(ot#B6JU}pAl#M%dqJXKZ}Gni>$q8G
zsJ1d(4S~nnrW87^d^oXGNuPTfQ)#S_YMM7HGX_}66Vj~Hfq{z_r6$wOV*p-|&C(3a
zwDR73A0it4{M>77vzqmPefXI@La3nf#@2%O5J$~40mlOq+=Vm1)-e1YWXnTpMHA6D
zo_$u2fvZg3rb!S5VJo6?VZzcMzT+@O{=(NcaOauqF2uVYuyu3j4{=+`8R$urJp*Eo
zMPqCNW4v1lFw#3aq8IZ-`2>fZ>ti2aW@G2(<aF;(G<Q5cV;eY6*iXPb>6<^I59=q{
zD`P;Q5A%4q&yKzy$w)94HjFrGh*~#gs5Ua_{e^IXNcJb|0WLVmX;s8#p51|fN#Jno
z$ee3y)EFEB!f!MV>-D9}fp@(2Jjv!lrUTx8ReZfhU%<hOTUUqjN}NfEb-q=%9P}#z
z2MMM+pVegVxGqB@ByybL2@8mV_e;Et5@?P)wh3?_WWQPCA9XzhkI}~fWciD|*~pk3
zre87uC_mb0bUcW4D=cn}GKy){T>3I592*EgKK`v5Vr9Z|)N3>0tVSlf;!eivgPL{x
zAbneHwFZ{o8bwyJpS}&|_lnuT*jV%P+G6P_GP7sbLi{X7>{b{BXAQ;mist6__V#sm
zYy9ix7@3v|hXHxuP8p+-6z@@dHl?{mXgL$nbg3liFK(j`2|T_E)WHGVd2}vt6KXwD
z?ov6-!XL3Ve2=Q^E8?=gWZL3k+0wV>ZB9KS8<RB@pdk~D6L3BbUh3*zT=+zsTN4(O
zdX@>qf^Hrh8KoIUw0eqMJ0bIbAK=d}VjyhKoI|tS03LOwF`ZDu3HXYN7e;GcRr8t`
zl*0hG7<Ng39G+IfT<;dGzy^^|PZ8Q=Hh>-e<6zQ0h^mEmF)34h5@hEb2oUG~w$Z1t
zRD(TUg9bHNhI4Ip`&UOT)fqGsZVAiBD5O`wdS$@StdKb3?_;v+p1kIWN8v5GI$Q_J
zv|%5XZQsW2NU_7-e&Z(}4PkGhwfi7TKaqS$qaM49X+7Pp1EZdB0vl|5eQOB%-}KZ0
z>k!M7o&^*vxsu+S<Hmx%)=Xf4Uklk$3t7cdRgIIf3*`2K;%&)ZWRq=Z#|eXT9c|GS
znMjqY8BcP9IQF(t?iRRp9X$*v4&U}DOS%KI=PdlDp6SxjoqGM)H+MN+hkE8NJ3c1z
zKk3Xz)1FD%0U11<*a)`N;oY4TZv0y%1deo_Acxs{AVB>X;lF&T%=|ocH8e1`?^dt-
z3iy9RfN7OA?jv0ao;6?d?8R^3n6DJ?(Hvt*m*0#}e)xa*u;p!p=h<yj=q$L7VIbJ+
zPBV+~GJ{Ev$ICj9;<Ys|oE|;ua4wS86(tlBSbtGbfp<=hZeTWGAF$bC#Q!r}ml8U=
zm~ymSj&9_ZRQw=hQh5!M>BXVpD@2{%Oxj?2jYT<?O?~{QV*qwB5unIxnUc+#ZH%d4
zCk9$MXDXiQjC{qgbvlTeXfp)R3>zDt&4+)wqr<4Po5?2Q=&MD+^b$|ISBiGM5jV!(
zn(VW_7>a)J!nyWh-%~_x`!%Gw4gb(k7nLJAwLWqkbL-Lq2R=y0)LlM=YlfC7`aDlL
zKQ9^8w4Z&)m-_uW9R|TLZYDd+A9!ynm&W%CmE*9*-=8iwH~_7OWdaO3lL{M_ayTnf
zm_Q=SI652Hw`*SXg7V#Td>FO-hSrzcelLYixkff<W_ToBOdQpp6Im;)kT2fIjY(Ya
zD3*~ao<eru0!=tRc3gQCzpdWgSh3B`2FP$mm4SbM?#1cr07xXALkQh)UYfKuoDbXW
z5dD?hWS*Q+su;O^K+$!c!s-q~|4(z0tEA>wdx~S0vSNGU_}!ho-p20>C2y@ka|3kn
zVoIVAM+%i&Yus1mfJm^cSPF%vaBh`BY;Ms-HYjTq)~$Gvs~<}go{OyuKSH`TSxLF)
zN)Vg6{vULg75jk<edG4=ar_Z8ugSX4V~NK%b#%*S>vfGrXUoMV>lS6}^$5PM@S7!T
zF*Fh6ut2Pv@_$V>`yeC3cv@HnY9z(V(n{v8W0h6DA0TQvRUJ|hu)neqhzG&Z3=*0&
zjr(9rB`)HqLI_tB8oKgek^Ye+N|2{m(KZj8neiRHJ>3o)Rfd1xV(3S^1EXyz2$Q=P
zG<}=W6_ml!0-asHsgK=G70EWq^lcYat~c8hL!q=K2K95Mh2a^$QIOoC($kEKqwrG?
z12mCcPVzQUW=P!}xC@NeBVL4CY=mzl^tQ(8!yBk`EOC?Tm3!L%{iC>8iE(YRMtyR|
zRSvZ}Z=%**YpRq;sNW^tHymxAQZ&}g1SYt~vKj`QEl>YbYxjPCk|p=P8-2P=B)5jN
zMG0yWgj&t@3IG-xEREYKOXRmf8I{>{Ckmef6Tm^VQZ{#0sa!+oR$gzO51FDS_!aw3
zT9>uA-Yf|xP~IeoOix}=?j~+=iLe_iH?li2d9G4EqcXaqVx3IKiim91Y@J9Zq>ya1
z!1^WI2l1Z>1@*-o&>Q`V4O(32<H?`Db61t;)V0a74PR+BroR7OqAJI@x&TeCFd9O%
zwcJuNqRFS5#1$pvhZ*d_5zF>wTh#u7W6DsTi4iaTr6<>HOHm#nf+>ALkr)IF!Ac_F
z(DVzHId6QDMH~g!RgOk_7_diNHzC*UqcXTAn@V%4__A4Ja<iFXD9xVYD!#6~mTlke
zH*|>;`i1tu09G|IM0q=eY`RR($t@#>DsPoKLbS5)QZ|U7K66>lyGpOloNx9`jhC;q
z-VD1>SxiOCU@DzKTF)B~)@=E1#lVb72(O{jdh)-1MzA=E#vkVcpWxq_$Hn?aV~f&<
z>SMRr;75+y@51BMYUBg&;|Sa2@0I226hP_GK<Jfq-H_wlO7Fz=ZFil92<@wrC64FT
zWFTFFK~@9KB#nGkk;8H;z-rvjR!*?i7FHcS{Lp~LAx>9`sQQyqGhtTU3XZX?LfX+~
zKtRxgBJY#@cOSooVQHC`_1tuHC7pQv0ej=%TF8=5Pz%9iB90y%;1bZBXygJTKAKHT
zkHpMyF9T~j6mv*@IkokpCo<U)Q(a{!#DZ4uPtd;9ZJx86q8pt_(WZNMJ$tSGGy(4m
zYuUKD3B)=wXEk^%;MNx<;{uvN(Obk5HzjG*v<$^pJ56qouC}x#S}5-j%?m%npu88v
zKabCfh{oK@hJ0-R{+wx2o#nA9TVMNuk!X>Pn}&QVACrUcfluDZ=SKBbb)FcNIP$t~
zH0Qr$XcaW7Q2{YJ7cujZgexR+H5_Met{;;!L3ci$<?RBlSB=P!I|THl8hyAob?lIf
z*~eAtsM*A{N(Of0xv6r+V0@2hi*J)-DwJ=?ZT5i#-kvwP5E(ru6k$O&Ng-PP0sh&A
z%pp`!{0aAiXMO7pGQqDQsCW!^gCHgg=;#LH=&<>7(LVb71p~;CWwR*Pt1N*bv}FHK
z7k<AAS{(D<T{brgaYLpHvp`pvUorwXPpFp1GL^N442Qw#L7SsY5=t|uE=l|Nyh8*2
zR9A{a(($4hBRK5FFz}kj#Bq7E=V&>ydr|dpGT~I;3(>CBwh*u$Eh$$2c-8*O9|&cx
zmg-sJkj)tpbLN>wxrG1h;9BH2g-w#b<s!pGffp#Ce47+kjFhnT3?AyWjS5}Wu@AKs
zf|Qi!Z)JFSCm87rKEMeAKlW1pU6Z<OXD}I$S+6k;oMHsGdTRD&GZ{DUZ0`vO|C4HW
zr6HldlsWaE18u?YS^k@7p?(>4a)J-(;#W^jM`u0h&ng@xd`-!7gCiobEK~yIIb^hg
zh?GoTTwLsjnAK3EKwE_N1gb<`^sf=H|5BMHG{%sjC6_uqL}hbnL~QTKVYAWgO<oIZ
z@lBpktSKygDTCod2AniYc(Kt2-%Qjz+MAh3)gEqhxdq>$+3bRP|8%up@45{#l%z?C
zATX61V9;!{{U=^CZTIPNU9QKvZPFh%bG?0$N5TEad@SUvKaqt2@2`;p5x<tCq0(=m
zI`{rG%YK9Y>nWAd{3U~@vrI)Sox`^`&A4#`(tM3fAv)XMEMz$U7GG5Vp(G3oM=K)I
z$<A$#egQioCK0S8Dp81v@3+AIb^YB9DxKl<=1lfxex{l|F0I)!jE|}02RhA5G(D5J
z)u4^!nN@t3!4r(ZH3swn=)Q`r>~ao|TISd-<as~<0t7xc7E5Z^m>7(N;ZdOE3W^`U
zn}!0mR-M|~3X4iR$P*EZOmGb-sv~$j67zISjwQV&2zS_Wu|5t4mXaz3b$v<m3h-vD
z@X-^-nktmy1BUv#W}Zkh>96Rro$J3)X2?NuILYuqKj2(dZYEj7i~?IW4_(8X>|_RZ
zy4lxc-cCh$=T@uv<6gL`RH)V3g1_bV`<N2i&|L8c<W2K+_k-JE-XX0*&Q3q)=TYw5
zqmPhuH*XhS1A|;hl~-5iLV(G9oJ-<hc{1hH)<IxY2~wgD$!d<Md3UC>rUC!v>KSC&
zh==AZNl(ZA;GF;48KVn~oNKy6wlu%GR$n6d-#qnVNb+@K_H1)n8}C-rpvkSZm+1!7
zs2S9{nN7!+nNf+9Qq<_(WhksZ6tJNalbrksYWnqEd`w=mE#R6<pJUL*Q2<cv-*<`&
znYBa9XuEdwC=H+&epavh^WbO@zW4X){L;--R-ZU)VQfIqw#VgUCR2~C4>9m^7GI|i
zMtw3%FcT9*0|pfsCKPqD!bE?qFZdLRGYD=Yexjm=S0VLf=+Dy4x4@PV75<6b-Yz@J
zu2ru9jHk8hOi=*L1V&1#!9bd|J(YS({UIfyIF&-364-P}{${*w`2g#94@OyTX1f6$
zk5oS)k3}F)mEEHg)CKE(-xF`3EtTz_JP#)FmCjg8s^gP{0F2$zLZ{uNMt6y-5>&&n
zYb*o-w3XL+tSvb2SWi=r&Ig7@R&cbvB+PY&x;zm-u?-mMAFo~HFqXcUiJo7!;3*Se
zKE#%#AXdBMi~b54hI;z||LExJuczkoTaM21nVg75SKe>0?QCz?s||I3@)raRH972t
zO4k{j?NvyZ7e~7%f8nnzxCi`(?cD9wUl(i=e=u13a}&kC@W|vbf>;J(xLHh4T%^2v
zr!aLdK0%&3J-b^};jgyNOx2=ot~)(FRnK?PP9DqEE4xxoyZz1uh|4R#46b?N1a3PQ
zbvFtbS{LO+oF92;t$y2e`LWO<5gvBs^<Cjfi*dN1WgFhVE|)?>+X4rPkV)C*nT@jD
zm=Zvi58(Wz08)wRi{U-uO7Tm_A>bi^BnXoN+rTSn_<tM)kJOhj4@REbI#fj1i)9-l
zW7BQIY8QL*PrNdU&zFhJ*U3(ZBhfX9#w<oFKAQ93KVxq8=OTanj)9)9vr$o3sfiJ5
zd`|kaDrTMOzx{*~)y#C>bVj6Tuv#&c*doG#IMG41kC9I;nM1eZf$*?IX=I8F5)u*#
z=eE#{43dDr-VGsE*3Q`3u)lxxvgtVrPIaBRqF985{BOel{{3-3@Uu`GB+IyxkQA6F
zSFw<QfW(0?-pKy(N0vVSzAD4ax%_l1L4hyD=QQGqBW^8IY@fOo*~dp6XRW30N<SI8
z+L?db`y3p6f9>L{b6Zz2xZFluq1r-B%ZJjgpCD44aMU9|)dey_$Hb)hhM~mJv_0NN
zepa6}&B)A@eSgh<w6w9|^jy1kV)hv=ytjP12W;*wCwM^2X=Z$CXiPQvZO<i~K|-J8
z+HlT0w7s$%aLi{#jGAi7H2YbNtMkRl4#sVtK2l%TkEHn^zY0HYSuhpyKmY3nx-zL5
z*7b8ZeSCfpY8yFQL=)TcwB-Wd>){X$po%H7(p&3A&iBl-_q<lNbk9vTX2PzhnJ+m8
zxL$An?(%&8+H4=x#n=wM{7UU<@g>A^1qQfAMyk!G3LlB;)yNytuQ_~wrBZr-OOD(c
zGaiA+`@yHk!QJltCe~#Pk=waSU8Me=zT;e8Tl1J|M(?;kp31#{e3Vx2^f+#HJoW>v
zRngVGAwB|S!t`^z>I+^{G0@J_+G)t?_KUhtL$D{@zCR}R=xu)Nxb|?KcBOuv=QCb>
zuuXrViT3>Q2wi@CGN90`{eI(a)rdmumALoo()c(e|8nUM(^H=Bw!$%>Af!>t^HbQa
zVKz7zX@5zb-9&cP55zL{i(SEHMDYOeIE;_i^X1>8hmLK5WpWjbTYwtl2!QlsOmLw^
z9K8BBAY*1`wq86VnfixQ+XA)|&x5Stk~-wKE=*?xtwcwJgEgt+DGWqaLpYYP73|?@
zTG{28@<_PX;);Nw2jTR`r@=<ohOQUk<oTxo50;?QUW7i{-_UhvW*ifqD7aPc3&x#=
zt&$7ftr9Dv5@KeX=SV8y9}_UDOimMnlt|Y@M%#Bi?e~vYQD2x{l*mOS$_>m(iq8Pd
zz;r<MmlASPsYO?B#2B>7!KU#*#A#)ehiuJO@&c;M&(0yfi00RIpy%_ps1N6zWWzsx
z-K}f{egQ?VXL>z~H{>B0fmSswriaB;Km1RzmdV17ZyhgR(zP1{%DwUUZ+zIIy*yI*
zVL%iewcgTo<FkH;BIjOtrtT)5Gpae*%S$`w8BK(s-GDTlPp~<=`<gT{oE9+|@^6y`
zRqk<BQVxmYO>Fv7?-uyRc|`B;U6+Gc@vpk9fa-@3L{&@IgYN^;2;Vb0`<_YakTX&%
z?+qyX$+=jdiv=Jji-5}SYeMsK^^7f3;~^}3FVuVlfTbuECDwE1OE*g_I8ETje!gD1
zDYQ6voaAdjVBlislbrl20q#2T`qu0!^7*z89ov(K=y2oIN=ys_l=idjb;r`|?lv?D
zsY~Vjc6WV0-;)My&04jqi;ET{=l4p?Ia2V$)XMp?+{4@B)A{9qN@#W}jcq}G@a2&-
zQvv&ELV`(@8(h_X6i?7f8Cm~FaytE$u&y_{G?s-}tGId>3dSe-G`zYk$$5F^n!&K%
zhzYsi_YqSmoD0>aQaFC~73Gp7`f6l(1HiHyhc!Y|meeVDHTXv5!*&Udw&N9SLMRrb
z1S^E|P2Mk?Y<8Bka>I73gUU^5p)}Lx!AtbN;Sk>^MpANcl)jk31`COCl<M$94>|E(
zUFd+RXih1{73AWipPq!!2W!SML1;0?bpRkZ#vUjl&dZzQ1qb4nt$>FQ3Hq~hSgu>U
z{OR$@ObK|LVz2tr$mVbew~l$!AA15Mu>bECJ4|1y??5?+UtDbsEL<ML2WAEM8<|nF
zNeYloJ@kIW$u7hHxu7hD0h{Vd{9<&}kbMyLf!{Zfko$b^aS2BpvSrD~=`NzPe3suH
zJ3ao8)m<Jty}))~FrH4kmX=>Iv?l?eka@B%S*=mJgXUx8C-g|ZKwt<)zK=jhLk6Wt
zP`qyFlFFZL$)5VhhZ1%5F_bNtZZ+0z`y_bf$szY`rn6q$7Dq=_UJP%*R)ygNQ3UsT
z55Lu=VMKsv3q?Uq3g%OYj8sT0Qi_0+EPO`QU=I4M5QTWh*)*slv}A`6){Jhs_5wls
zSOV{<-Kx7J#JRCss{`(-Tl=;gl2Jg4=Q1N9gTj5$Q8!@$Av(OcN>Q%Vgi*CKW=?Y{
zX_B*$7dw(nvxWphk*e1WOytq&uJS!OB7m?}XSwHneCt|6z!sITGZCHJBj4BlA}Esk
zW3Smt&sK~NI{a^Pz8Az5UHs@Wr1$d^Re_B2{XkVRcu-;_H#@xtUH?~AgRe(_+|OL}
zp<{Q|S1s(?dL`a%w6$8Vs2&9Ea>}9sgsy3JnUv$q0ysEL4gzaekyrv|50+(6xOjj`
zl$9n`SXm*NGV%oDpA}$13<93D&I=g?W}Jn}*e{2}xhg26dMBzL;h>ZVF&s+<%#h!g
zbgif^ylaV>#TFgRL&XO=D~vS(g9xZ?wEzLhz<{$GV_gBs(K1aOwCLY&BwB7^hLGFP
zY_WvDVgINgb7M6;<PB7!hD##;>z{I*{_f|yRKI3gyPtl=wm8B)@L)A5n-gS)ZLq0Y
z)q24^kP%0|VC04e8K0Ze!6}@{Wt1!yDuaq>$99R5y8Kp8mOMuwr~s(3`*`6a@$c9=
z3pnq8LkI{>2>6Zn-Xh^3DnZ8I?gIlH`8#Yr2pK>RU~#@fZ{_$md-HCceP3|VL2qwQ
z0;(-K?yXFgsvRA_uT<#^Ha<#t-8e-C-Av(5dgh9Y*d-Z-7>%M1bz_U^wA+f<q7{C2
z9C)K5iT*k`qyxo5bF}ghA)A&R^P$fWH0MLInIY?Lqq*cHXoa~0LcAQ0^KKxc(S*N+
z|Biy&F<zC`0U~L1Mn*iwjFXaYd*`QzN^1a+fe1^VbWq8#mzLU_ga`o^pO<=a_})BA
zJr?IT*bXnftJNjNoxHe7<lJ<0WmiN7CA3^zcwmTk+b@B>P;Z)XVUVA|dwCXXtN5b1
z{!ie5`2kaCHl=O!?k$OeEghlWf4M3pFo2&p3(wb6DNKdn3}N6r+mVf!=91-I0w;Zz
zQb?W)oc`@dT;1lN_ZPdGl*JHD2Uym6^2?gSmn2!<uC!(CLABO`x~;~dE628<V_1Xq
z#c5la_~O-gC_i$>1?j$|`Q933a6-?ZMb~eJ*5f?jstLX{5RA~(%sa9>F>jS+3M%mp
z|9MQ|@5HNRI6pT=KrGOl9&|4#uJKUb$B!XMRcMB6#=n;O^&(rp2-#5jabEl4F@&+S
ze124L*gHMQ&v7g5(KgGF%p{S1`p$ryJH+#h^W!4Qh#JC!yl!_jbUo^D$CAC<9q6~6
za(A5C6%0iT-3B$C%Csd9IcEdCp0v|`%NGoFYV)-10xk$e#Lr+pMiQG6=YD_?K@|L$
zWIx6W_y{GwWq?4boe-qF9JM4;9&019F2bqVUp9PvdBoC(yo6uD-~2Olv~d13DbPOO
za}<$9(k(}qF3%^r@7`^dSC>ZaI93lS`{P02&Z0yGcMgu7{*&7^qLILn>={189v&({
zL^_*+@GCJ($XFi5ox^2IsL?|aOMU_8?)c-67f;hOgJJOQ%OsZ1UmOJf06P>t3Ix(Q
zc?X2wpbe2usA%X92@)QHiWe&a!cq@aCYxOnJ%7T`CyiO>XLUy`1nU0=vJ-Y7o!|z?
zNfUr;(#O0LL}v?qq@l6wF;ETb&*3xFhuf0Rxs{M}$Ai@4oH*9#;`!k5kz{5<t<3H|
zPsZ)ak$jV*GZBzzbCEur-{6KWS%%{SO40N<QXe^{%N#oHrvTR<x7kBOzlcR+SRg_=
zQ16C=B_|xW%(?HD_AB&#Ha7Wq$8e5@HoZ%b-+tYQ{TGZxVD8n<h*aN!Kj(Ik9p?%n
z7!wrKF%LD!?=TYI%m{5j9Bs==@VdW#HUz+_?lb{x?Y_v8dJ_eXCxd2-Wz%P=%{$Kv
zk~r75O!#EmbR(tTn-CrS<>rPxJSvuR>P$H|UHwBgG-5aR`>#pP{MZnG5z2-nC00v!
zMm>RWxfX%gRtkSlj2Pwu)(U#E7y;PAW+C5q2TiJuW_wd;<FeH|gc1qqf%QyOTr-Z~
z7BIR$CFLqWbj$r%jD&g}00lAA?z#mHrt-@I3967JfE3E%7^+SThb$jS3=CVkTHQsC
zk<qY9Kfdi4K$Zm}X?1#=Zcl8|B<DsJh94U6#F<=lwYqbk=uhB)U8dz(iGo&CByT2O
zD3>Mz!>aKR`Xq8C5py7aG&Ceq+$9bUZs9Rm7bubP<}O2n8iNmjak?=3^JnySf7ow}
zj?;%_m(u3|9^+Vkm&{MqEGOsYs<x19SOANuBQ@@3%kvta&L8E*@H)Y8nDNm~eAH7;
zYjoCdcnje2kk;0?yd>j7^(pIYS*;8q(WYNXXjC8^K&$Y_r3uzJVLr*&ECS!N^ni<i
z+Le6^cmhb6Y-P5T48FqT?@a;9i5wR$Hsq?6*rMBUYhz-vB}dmw!6#R2Qin;g;L{l9
z^2)v4tth40Ax;?DL(NmhrQ5OEXl+75p{S%p3_guJVsnt|_TY-=wSR>F691bg61WO<
z4gbStVOq$?{_vJJ;#^D@B(ao;yBrx*GATb)Ff0Bwho3~qqwA2ip6Du{Jbf{k^R-@u
zcKA746)FvHSCLl#EQ(h1Rk86C4gcDp@Kq{p**T2EVrMt#68mmxG*e!@NR=|m*^E3g
zp9S=qG5L^ue8uI*7zCNp8=I@5@%-qseM)$kB86<%_t$7CDsqX8u#hlob_55qeZi@b
z;{0f$G{sN!S%8}2z-Xd8kv$4UYM4a?morL{%w7YkG{rBOYz}vrjc3`MARdqbKYNh7
zf0?#+m5Tw<8}&Nl@~2@*OyeZ+Dau5};Dlt&aIN6f+n*>eCDI%im3chG0?5h`s8+2?
zQUL?KUKu*|7*u?ss#BXr%RHNU6o0^r`>It9Fl382sWO{uqg2eYAOX57$jfdUL`yD3
zLD9Ix;VQu!VX&MA5qL!YOb={33Gpp9q$YkSM8k=kXG@pmU=O0g*<9%8kGz!AWq+Y&
zViogH^HAik1OKu7G?E)!0#ZtjO({8%LbfAz%o!w2zLcNh7ymbZY=KNCB0?!aTVCc)
z&VpM-hnT$?x+6Q)FrW+wstAfoPZIg5HjF;;QfRTWx}%9U=l32Z-SZ2KZd4YA+dwhV
zy!pD2WSs4uRg{CS*tn!f1R3$`UF->3+CpcwRN^zsDAz2h$-O{KfaPooed%az^{Lx%
z&oMpaiF)wQ8e)=;&UA{U<Sm<Xe|aOp<L|4}nIL3bG8Y$_vHQ3~wvD@^ghZL{_+3(H
zrlw5pttS@Nq>m|)prfP3czS(Wdofw#;e|S1);+{H$9d|S*HHCg6d_bu1AwPuw^VI#
zmVCxgB<U0y(BzFOfTK4{r|(ABmLDZyfv#T}hNoT^_2>B~jKKSYP<xfnM{LpuV-B6{
zx2On=VX#j*w&vxqTEsT$i^-T-_uQYGV@=Z<a^3T=vD=sirNRdOI%8!~<loyQ!bUj;
z;!_Ue5o3ob#);srOW$MioLl17GSb5M9Elk)V<0edb0AqtavAk`_@+}?Jh1-~GCZ2V
zIm%4!o+xi*0*_eP*$s2*lMZQ*WP}C8L|FS@Ru`b2`(*qXX=rJ;OV8eEb#?i4b+2xE
zyi}O6LH+PClqqYNv61F`Ox}2VC+>;QXpE5$LUH{EGd{eO*YIn}sVes<f5(PN?#)`n
zHn<Sbm5yMNp%ZK1Dd-e5M6@e6bd{;`$EIwrKXos}BnLyV?8oA13Y)7?5{SLbl0y!d
z%r=-%3sZ|JUJ$A4JdQD7MNJqnq<QGv|1_+3w85^a0=5#92<rWeVgk8~w-Qr9jaX9O
zr0I>@@6eawN$4&LwhNw?o|V%$O4jnc6&8;G)6RiDs|ps@d@#JlOVis+bK3AN*zx#h
zOY)_xvn^F&(WD(C2FpG+&To^t%u`SM)-qOylA#tP2Zbzn=_YytX6{dD-Bm>35L7bO
zlu{mvgp7hgmZ%&V`C|U=H5|coklMRYfvIu2@3=L5yunGBr}7g^Y2(d+lckc2#+Ha)
zE4pGq*b^fwAx~#GdpvWL#V6aB1n!V)8ywX_jCz;7uiyLQ5939LbqO~naHYgNPEf&C
zsDj`Wthg9y#x_VF#=aYia}bHzk^^krf>(kpw(NLTCFedmdTnuSgwK0)Dcg<y5||+#
znU!$Y6fQ{8HYyg<wf+_zE>{fUR+);gDLmtY=AQmJ^?q^_4OQTm-3L*_9h9B4$SinV
z|0fqG<-(L+Vs~#RtfB$B?~j)oPSAhOGV$@<uwr{V&TRWTF2Xwl0<YR(`*vE(KQW08
zW8AfSp*sQx+h3t;mKZYXCyxFPVC+hvj+MN}_Qw`;5@VnmK@m<}%B65cS++coEf#}C
zDhpF8avXZEV(I*vnvMN3e|zKl9pFN|QYd0_^~X#&5%@%}5disK5q!L^x@IS2Z^XbB
zD)oQts)=0miZ*&u8mdehO@_WIFBNb{B^=*_Lv)~%PZdf7l-9D>>rKaDl_$0;wVvZu
zoQi_!T_UZU)n4qISm3{5HfBnU>5GhsO<{cpFMMg_UVo14hRvYn6X*Y-Y4K6h;>5B*
zPrM(O4=>N(98H;sGT!XcN<4c_rm6O54%X@N8pM@pbzM)UQLWN>da}9iI@p9L-POd^
zJ3c$ZQF#}dIV@)|s0!~oxb$9pM}g95U30;9(C+lWX3}Z<KV`iIP#nz@K8(A&y9ReT
zBzTbE?jGE8xVsZVAUFg~(8JxG-~<kLINaU-_x`^6sy?aR+O3-1-r1d<+3o3m`f0!0
zF`e@YJqzSX!t-&+Z;JEPtvS8%YlCq|@i3uR)cRJp+xfsPVdm3$h2Gq;gOY#8I|CgJ
zS{&Er@sADn9{Htz*DHV>_(z(vZXMr`&3)#geYrcnG5N4{a@zIT7)4p}RQyzG$8R+Q
z`4mA_^(u(4N##(JWD--spq|BjyvW;6)2xj2EA8`U&d4cka)UrM=wDI^Vsoyn$JxJ6
zNrtxkwYBQ>gI$C-3q;WfQc}^=HVfRlBAn)TozH8kpz&y|!u(>}8Rk)#g64<X7FiDp
z`(x7Ohguir2L<m|?)eN`Tgykp+03@QNF;a{vq~N2T(?TMa!ueJopS7BmmrAfSc5V>
z=Z!=jSzJDVcI*Tcr2InUJvb@`TWK;g_hTq7V@#7h=Z|*W_NzAdJ~fPs&hlzmgZS4E
z*LGJ6^z=@2cH-y*TW58oy^9a^m&~8@TR~jlN54KH;%-Wbt!;0&zV5Dv+hz)sjn5BH
z?KPo17JbdTrZ2$0!FaRa_lag2Bwn-Nz{~b?b;$N2e%C7*+QZZFIdcFXY`yvZ)<!To
zLaJGXk)&hQ1cq~OoWTkeybq-4F~MlxFu*UQLNe)>Z*xi+wY@I;IV40r5pO4Vee&3J
z^j1a}vl@SW-9ta?yPgPr4c!?BYjL75m$uOf*yPt$ou`3|lxgxY0oyQO!|cWHVQ_21
ztm9#A(6#H;wr_B&pDXBk?cOZ-`u5_SGe|Pvp?M=nW^O#l^PAW%MmI_e2^P!KTlN-l
z_dC^<<(QmXHzMn1VB*zA@HHkwz}(6umYJI6DXe{4G5nRb!qtsJckz-@s?ue>@)Kwl
zzJ{vjoEMt{#uQVPUvw<>UPoCsiyM`q&Gxsxnsfou@-rn%pIo&-&jZz0N4OgzNTT)E
zZo*&Xp~jH*bK!fVZ>nQ4vC=Y&j*o%qYucZ2{_;ist_Qpczt?tqC~eo-W0i92s_3qs
zaW5Ipn~hC7w#yuYD^G#5-+lxez**(}2>H&S3lG@&4wtz%8s?zYHt|kv?mb^=r4?%^
zMQ+!RpdB4g+%0#Eo^^9NSR>WQiS>>(f0}*%shKksD=_#HpkD3D83a#;QnyjaB-JOh
zkt!XCE*IJsc>j7&+&wdY23Gyo03NwYTzWjp!)$t{CwsAgM=tA9WmRgUAH>zy#Mwni
zMqXJ#j4s%oBF&LOC~0cO)@uz~*lF0MSEUYNlSFzAWwQVM3_p1lwlPPU6aO8|BS?-T
z!`Dtx8IEJUc|FUC*{6u?)(0a&twK3*5q2z2H83jiCbRcs@Z(g_)8D&<RWOw5YsGP9
zA2JR=P)mSgyT+pYNn-q+EXV5IaS??U1y{TxQ(?<-@f9&cE1E9hV=Ghd5gD3R5->?R
zl|i+=?Y4elY-8g}j;t(p%5}!qBtWfMZ5Zss_c4+u4d&#dXi%2O=cjc&>n+&96SUxP
z$Mg^F@M96#>bUboTVgRP>J7kIAr)8Z^)oJhWSGTuP8<7-S_XSdfSv%m)C!1~tyaQI
zHxKnallvxu5;{h^i~8UF6ci4=z9%^@S^`9^sD1lZgI=E+la51j_20phNmyA5uYO+u
zF~Du7Llz%O`rO58nf*!q9NX8d_gnCtYRo3Z@nY}&eKH~j6cX0aafeeq_49!#C>vv)
zJl2&$RcydF8e4f|4ptQ}qxL;<y>LLL1!tE$nzrr&lR(Ui#3%MAx?}<1hAI78-f}xT
zHkuX%tkD>hF6UW|nuz;B8bi@$xn}f`l8Cn8Sd(d%^|)?%rN$nx4$A$*D#SMTwqJqV
zj_;^&J7<}z0CgZ-D3>=sGJm+?7+Z0rhAqR*RDe@B@|uH(Pww!H=rZv=s2akF;ir<I
z06*LTXucwJGX)%=TwK<t)3=0gu7n0h<dV>CKdRQ8VpY?-RZ*su;1e@moWuOMVvdAs
zgg7z(gB7@hBFi_8ug^~q210B@UA}JrK`hXEqwEQX8LBBFh@-EV>s;?0DZ*}|P!|IC
z{=RmPkL1u*DM_}#z@1YL3)QRKbQ9s4{KjC1_NI?+B>W-&eA9n(_<?+HIGLFOkmq*u
zFyo!vm3^^36S1R^Osy=e%9Yyf{qo@cruhhpxQFarS`8;tMxxZNE3=3I6MTjb`)OH1
zyDi?<LEit~^7quqMRQ7Y&mt+Us24yWgRtH@lzyudkee=KP(S%t7=>LVO)ECHG$uyt
z^G9a2PBpHX9iy9V#wo3`EV_$R^8kgP>u(Y2S_6uIVcve@<GwJyl*W|ef7bYXF4L!&
z5+hB-#Gfnr*kyR)Gdf1EJ*GU%hR(L|OIde}>Hd>bWtxzn?kqdrJOKcxC6IXqp<CDq
z#)B%RdOg^trjl<D@NJU5uOyp$w{yv+I5=R^NfL(Fi#at(i?~H>YAG<f%<jk1<e(Q+
z-j|D_MFpB`_>s38crF|`NzoqF`}Z%8jTd?)s?UuL{Q34!z1-vJ#^7QS?*8x6K9TV`
z58-04(;Z+g;0eRcC@XvFsiY}KBvJXJU~@6uJx2At&mDhSxa);L*;6Bb**4xchxaMX
z=9}2D63q^N%5(5U;cUji7_1~LHym8hK%;2T(`9tN#1rdgbUs|r%a%ffvJ>DzQWK{m
zBw0PGm=?Q$esh>w67C%tft=}u1ZI{RF~kjK#IlJRs^|v5V`c=3oyW5YZI5$RHK18L
z9wUD05&Ap1)6T;%6DLKTA{JfqsbMxAk64|GIBEde%XBh5#jq$?3{T%7rqthp%&&v!
z0^xEm@C?IIr-3m=)t_$gOM)W|ALzZ<ZJ)P_l51nAY0ylN$WdNVMkO5_yifMk5AlJO
zx_*zf;{xWwn8&Z%JUQBy$YzIjj_vacz&*TR>f+CSCE>b01ACM!c2dJl$_zajAq1`w
z4VT`E)fbGkJdW8n4yZFajf<7Z5>L1%PCeM=;-=*|ZciGt9dI2V?P+lT9S$c?Z>NU6
zBIwf(!s^q$)9=dQf^pSR{;)dO!2J1_40|RJtwhqfV5KhLjo)Vh<_<&b+wHd?A-yXM
zK^=-hoeyB)VIgH?9EukEHa;tupc(ypNL9}fVE86l=YEnAbpuSx`1uDkcN(U2gzpSh
z^ueE-zbn7HinJ)6+ji_g)Tz<TW@2D$96|=3xIY#L2>+Gm|LF8#@%zINaC8_bH{d6r
z;751hYJfZY7FylSn`F_rLs|HN8tn%Tt)gPgJ?#NDIg>q@J5K43?Uv%UHo@MkM~9W<
znyOi~foe^ez;9#xp8PzCAt2DSKbraULH~+O4p1FRj*e>##&!9=0=OtdkLWq>NNS#>
z%sr(!REq_*5Lx>J4(7Ddk8|I0-yBYp<S5}Hf&%PH7>lW3>ufJ&v-#d>7pt)0;VK2j
zFOP_pCknR@!M+A<^&0-;vw))$KA^Gmf6YdO0raS+3^+cZ1^?EsaOf!j7F^EY0NHol
z+9<WAfMsQuN%*5x3sahab$4gy1}JO+u!fcN!}DssGkk0LP2;~}o2Zi{M3LGrtga)2
zK4m>xpzFH$#VNABqyiNyL2)YW7x-R~Re<5d3!wUxy15Qu+O5%ew@fpH1;a?sj$do}
zcrF(Iwr=Ru{gxG-;GI|TqW1nMgveR6@iIlVVEWve;JwK-jshOFc+HU+Y<w-6Jeyv2
z?0)(&DkllGC`nH|8C0K=ot`Acf{3TNYM(gMzONaHQH4<&`cFj0*VqJH)ct8(G+q(N
zvK$^$;8n_xTV8MWM*$jl-Yw5@RT%kCH2xPZa`h<Ft3uB=wnI(|U>~>m(Li?2vVn6J
zB#!F5_`jQQOUrSVZO}LMnHn>)9+?>D0e4E4m#h`KI{8(dWL0<Gd4d45<Yg+Cq~*A0
z9X+G`EttSmXrS!vEV0H1)oi0_=o5EYj6rObnTDp%xV`HD$A_MxeTg>{ISW7C@J|97
zhI{8qL!Z_9?!;^4R&i{W0)PF3dguQa*mM6f^tItF|C+C|yVQy|Y86{{VTTfu9lTt>
zZqsm(UzI0l-)U+`Wbn&4e2qSz^AyW$!u0mTZMRN+&g+~>?|?H;@kw^KCoqGhedx^o
zd%EMqewGTUMJAF_PzLyL$Kmc+hy6=(vUXc^bT%2CPGEi4qRH&(91|2_;P{tg)A3vR
z&-;pGHSN2bw{LM-dnaq?GJl?Ir=HgD6@}EYp?HnhOuyIlg1x@=X66t6d8fzpKd90b
znun%C!prp<J&kwz#9s|H^e7DYPDtjvJ(m}&Jv2qcsfMdCG`tB14{%gj6#6e!v30J5
zPez74J#j>;JhBqKdFwGU*K`#PWb-HZZgn>5ZjXPy^l%QV=O48oH+L<Ld8j1T*2mb8
zP^xqmRi--QR@OY{b?tdlwJzY?mN*N%Le$#v1*XBE7hF-FAwXw&Y`gK_94+{Xp)pB?
zlM#VgGFhmF_%8*0zO>xLHRWf(7-KPEj2Icf!e@z>{j6F^68S{`NVt~d%IhRz@7{$I
zUg)qqv=Ek8HZO^CZpyo3E?cRcKqfCK_XHXZT?%D{_;z5$JY3*%#`GDW<mmAsN{kY~
z^v`qGVOir$`c+6)6}}J%9-SEXd=-Dn<G#cQy3okyksY`2xp+6Q2+VB%O)Y+s@M|?~
zo}6y#ojS0fc87t{Gx$g#%CEam@xFNLc`TsLMKAeBZi#iCj5s+RGpVJTUof-nW&M;+
zIioi3zfA2}Plv9z)AXnLf$D6|g@rmbHzjm|0af{=89R>)EHyoF?EeT8jt;%MpG~Me
ze*c0JC*;8ANeF@tsA>=4|A}wcMlM@0hX<c7?z{kaIf8;b%<Q)MBy6-~{zrh28<q<_
zm-xm_2-MZ24mgRCqwx<;eskK}9d*=2+YTjueA|v^BfQxj6BvVxW!AOGNfXo!iMsSR
z6<2Pxe`QU3p}Ts!uHiEU#%=X7^=T~VH&1KwtYjJPQp}O9{N)l=GPUB^DW|4rQs+Cl
zK;8Awu6%r0UA8$><f@vQ@LOgD`?{Pe>#x_@98*x(=9<?W%l%joN%bF<`d1~*by<0w
zc6i+8QV0Y_gH()BXM^Z!t82ADz)D#gOT8fu6`MF-hkkDsXXc%sl>-aEv&m}7`<T*y
zC@Qeji%=A&Em4}ywDBGj{a8Yem-wJXRjiV^BCj0>a4Afm@+R6lAlDJw_^odw=xVw&
zREPPITqxZc!F7EI)5hj{Oz<z%Sn0Hml!w6+BjZCA7m6?-^pOl@DqOhaZ@&sT%eDN4
z-O49KOAQ)KBU0NC>3!#q*vW0U%7t{bpV)ue^+#=#8&;Paou~sKG1`<LOtq;i1hH34
zm^4A+9enC_3C#@{o@tlzQ~h<d+<(MIHTMoKZLgM#WJ%NimXyz3#E|dD!b>S-_7ge0
zVacbPNH2n8y|p~(fKbW=XS|XwX(LhRoQ$qRLRJ>Vk1s#G(t4~d)t{JXP@K07q~KB`
zz-*eZ*#qB93*kqNQ=;-yl!y`ANP!RLOF`wU(0HP<vi_(B-)q}5R4fER{A4(>!1{r;
z4uhDY+ElerFA?@V+@(Eh8xcGiPPku}fA+JEsQ}p=gt{%+&P$y|UfJd~*UM<70H?yJ
zdx(VrlU90oL^Vi@b1vP3e7SBgwLwl*{w%$kPjQvQsFKv^#HNJz^l@*mJ|~7!Y??^p
zHwPWN^s2%_x<|aL;<n}97{#6k((fnDbPrP^$+)xv6ddn(_Dx;z=-6cM@7*hkkTS>r
zaQ2A&?neIxKG4OeRzCR{{Ts$-*8M!t@UFvXmkp*x^$bXeU18GIP`!{qiq5#a6l5Kj
zwKPY?_wCi8))EY&5IYexeUs&EOAM1$9hh8jhO#%THR;R;vH7g@AX4ia(Sp$M9+BWy
zxC!N0^az=XXvUn^#>RVaN;TYZn4t6xObmr$=`teC9z=eYD{*pHV=eeV-fK6)rhp3Q
zm>HUc0y`y_B<!D=zc*RJNVlj-BMs5iQo@f6Ggw<-slXrLgB20zzSrg`646@2c;j*X
zP#V}|hIn!km(a09MZd`IX70+KIBj&HHR-f)5GycZ@y06uUeVJ?D~px==Gx96uNc;B
z%!zC{-hBPiXT(Str^r&5lVr_`Pk$CcNy5Sfw_~M!E$KJ7OqtKw4cZwh13>Os<<rl>
z?&10)23=N<SCskE2qm9TW?ffXE?E`X%M$TiKCV-yASxRKh3}>Z`|S*Qq(mU37zM!#
znio7=sbz%IP#|L0!u#qYjs4oiQt_q(0&z}rKvu&Tt22Wz!eR+x=o+(FlSGP|R~UJ6
ztaafTf-)a`qj2hX>rhb5wxJC)K<5;n_+bI`Tfg0L@k_h;J4RD3&P&2JAU1Se)vX14
zU6mlRc#7tN^wK*hY8Ie~#`h7W{%ltRZ(v|bIGY-sm*$>NbY3-enKiEHmG8s9SnyJ#
zBLyXq*xQN#)~Y)lI~dQKxMT!(a%-LQn>{g?I_|1~YOO5mEG&o3d0nmSx1Ci~z^v@J
zyv`Jo>)JXd|K38?TC>aNCCqOt?X)fa_t1C-*YmDGbU_r_FKEuqWvkK#7?x42EPmM@
zpQW%PLI>x{PV(Rm^_MwB`&@9k1CIrVTy{V}tMnBy!iaC4{$tK*;Ww<%4t28jup;h1
zct+?}yj0IBK^{($*%=l+L(9Win~i=!fU_;~MR|2eEHPuq^E4eUhw+C@A6s!{{i6oY
zzua1_o+}Is{sZ$+w3CzP0P5)j?;bOEWMD$|L%?7zz&i!?jPgbzIxP?<940R4?J<rp
z1vZl<I9e&h7^gP}5}1S-!m$5Nfy#LHQ37p7suoO`X0?$^$i}@xnYt8>>_rDGr9184
zkU&#iYj@>xue9g7XvOyMm*agT*>h*<$7As3a@JJA3;QK&&?kq*3*z^pfyjenM~Azo
z?dx2giPzivCdYsLGYil#33PQ8nC*0k3v@rHf;OLJxnYf&iMUBJfj5^yO@7e1X^v@4
zJF%X%An{<JM&~{HhzEAlk^lY209S$ZsBV9fD328Qb>eSko49xD@d$-n)8YEo0#q01
zV(MQRYT!Q6NY*X;f`6}K6R_UBKJUTsTfGO_Ex)}I1yR)P*k$OGL}7gUd5C)yW1VoZ
z!45&%R2jZ;NMnw+=Ft<7OcUmglQm4*mj{DXA_^@#r!&~j*Sp_0pc^A7>g&ubsU!G)
z<2>mFPsD7UBMQc9zumpV_?5nvc!R^*$&dG7VD0tlE#v3yS>Om_W&uLMGY%E1m^Hx$
z2Pc&x^250|NZ&2xaj*MYW|gBWIN!6oL(SkLl4szd>`4NNNMD?68Yt@z?lix0Sl3X3
zllW<BC8L;SM5fU5y+^3rw74GxS#F7*LvD#;rj*PjGFRmdO}=-ob68bwZzNmDH3@H}
z{6BaZB35#+0G!OUh)_}QqqtS0k)y#@d3NJpF*H#g(x*xsM6GR27uC3=w<BAx8yRf5
zGTCElGDIY$_h}S!r$E{F>CYF;q1cR)#fy?~d*KCdxS~{4XG}G{pQ%F00wNWmT~)7_
zH!(FwqqnG_0xi7I9w&a`xF}qq<Y%S`CrK?H1?4OE$qF?*=a8P9f`S&6U6ZL9x`DiS
z<)S1Jg^EZ)jGYF8IvSYq8~29?i@1ca?VDu%Mc9$5T6hQ#3B}aQKLKEvvT`A1Lq?yj
zlEsw|g1Hu2=XYJSSE3FCU`&TDS}5Za0cYlrL)d#HD4N=q9kH*G{plWMYdM;S>!~;O
zoohr$Ph<5jHZ64$b-pD5^p~fE4f7+NisoGhrBjKvQiZIcl)wo7l$EhUGtPMrFr@YI
zBm?Jx_-`2AjG{p0U612@s$v>Eh@P-FaF$~zVtzsIcV`i{IiimV%dRaL8syt$n@IHv
z6I3*VpZ%Bgb+b2oX8H_y8XzEmLxLGvY*x3Niw)E~_^GAtz-Yy`C7OOmtji~gDavi{
zWoSXhJx3KXFll%<KGPR1j_JL*$W$U$us!nw>oLUD3o@hH4;?C26!>{FhUFI|Vvn_D
zFC|g`ieZhG9aCGdqxQMd=sy|P&kp^&%Jqmj(ME7EK&yz|mqY!{GjH0y<1Y&Q@F4>(
z(cr@zi4BZ5WUIjL2(+9wqwEMipKwC0J=UCs;Sykh6VHl@(;1mf@B96;&g)Pa9rS&U
z#+8gAi;<cuaNjVFOW#4wYKVnxQ??!7i<^a|{LFm1H~eeMze_iq92dUrU!0i7h+iqN
zzha2S{D`D{iJbExaUQ3xjj^}ol~)ccPFLZ(UXM+WgP~3m{PN<%x`j<*?sP_dQ~)E)
zuWK1VIWqsxR{~g?NNpyR_kDL9!G5Pu3rmWbJvM2`tA$A_I)NJ7p%LyW`WyJz4GBiE
zvC@g`X073p&0L=#=>QIRvL>?K0V(*|(9p2>twvZW_hjL7QTQ*wdMr3IN*i19iaWwZ
z+^P)(LmBnM6s5Q#S~P0jszk(vD2}^f$ymXlU{IO(BV41k#qxVEMJ&#Y1uowl(Jx8o
ztg}geCm`KTC>A`ezOlHZnC~s*pT7j~==fk-p6Y2emmZPiJU22rmNZ!$^$pLRP{!qT
z9%*RSELwjpCo<vRV$p*!_`t1RvfK2^QGe@rzje#=qG7s_9XX$#N7z%f6Cd>5=V7{V
zV4y#CQySt%htMOA@db#rE=9GT0OsMURAsjoXp@cE#2Q7%zPvETdDw`J-teJEP;s{W
z3h&s0%<(9>|G4G)(_jk<RcG0bce~l@ijT{J*K`X}*y#DSPZ1>p*LgXV?JBK9)3m+=
z`p&|_z`!GmwZj#muw@%j+pnecS8U{5cfu^yZ5yv=F=)tCO(h~o8H08XD?@Muy`1+v
z<0a(+i9(%;DQ;W(L4z<_$LBaVI(MiU9-f?>Tt*s>d?Rcckhn=<?-Zf+21H@${Whck
z;z_2WWw0=!wYMnf3;rVENP;Ry!BfQF;J)SMplD@9%hw$V_I-9|-@Z)gQQ)x%`Xo*$
z(1}DJs!)p}<}zZW|GkHvR-1BaSk+un(Oi+H3~v=mG%Z^ku^l>nK(e>G!)W}$B3@N5
zkEVq&G&Z&aC-1S=<th6%HWYkn<OL&q79A3!Dx@Kr%Fgk_S%lLM`i;6QLPbSYfMQ0t
zM6%on=oL1KHrf@E87U-zC*YZ)BCj@$VSGF#iG{;YHxPf+9?5idY1}793UR+1eQjwt
z>)!38L$8%2#*fIdu+(FsNOA#@9-A8oHN{G0fFLmoQQ4$ki&_fsmii{OfAg*|!NDU~
zktPmLHH|{Y1!De*C?>W3le@BMyb6I8A1lKPC(8#V13KAJv-1XTRkmz8x-8XPJ2<ZG
z`O(rCEnI@Q7~v%^Jk2a~8TkRlRaF@LR%SJ6nCl$jNV=ajsEn$zId-B;HxeTs8&JnX
zq_eVA<zSeP0^QU!f$XS!f^t%(Zt6%rWmyBTh0@H6?Mr~NBhYs;3+20<YL<T%NXpt}
zMnB@*FDUmLCVq~2(=jjS5_R)&K>2$nYM*lzBh9Z5wI#dfCZJ%0hg^w3B2BgCh8%mO
zD|psV;-00gdtM)k^TY#7_Y%ymGw1758e2()X*}Bor)nOZl$Ea!=gMd?JsxtSFuoK}
ze3C#{2<4@1-E+ELnw$9T1LiA}V!8cmFI;NIw;$TMbbXp+rZ>OJmX6unx+DlQ+BKnT
znWPLF^<Itz+uvS_Z}^?PwCZjwpm#ype~1l@0w?nU8_RxJhhjJbq5fN|zA3`qSa<=@
z15;KoS2@>_l-ntro|D6i2NVR`;fxk|yKtOwO?k+%=-PhAzSQjG3;{jxGuJ;U<D#-Y
zmZGQN4~S6%4hkd<XJ8$~r-G+z4yNc=GFqm!E&$1ex|Y*ws#l>5pY8?`AfJRe4nAE_
zcx{Q`AtHGhIkHif{D`-*sPYnpq?zBq5e8y;NVzau9yr(;8L^Zp7Z&PON16VDFvdh^
zmUG-3l}tBPq~c_>dkOHT$?_1c3Yw1mW6O}Pi7;)IHefAcoMX&utUASGG;wZ^dt(er
z8Hbo^P%K=7JohwL7*AR%oWY#uY<e}Ot$rn#hJlA@UK>y+ZALA9C&)9@ckfE4plMvM
zlPla9Vgu2J<g+>B*tL5!p3d$m>lGdpB(UjqbcXsr;-wKC1wM}H2opN%afSNddazKS
zDRp~{l1~o&7<VHv_m_dqs4<P=gGZF22Do?d!H)QcsjTBu@KP{<BYqg1)cda-+%|E9
zD}BR*Hrs}wz-QcNKWVN*$CVtxo2o{0HO;UbJMXAxYy}7E$<YnG2Dg`zklm&grN;3?
zqNHwKwRRLw+h@1Pj;|8#vQxv87eF~=b>=aP6N%v8@x^Dfwt%TYz}iNBo6eD9aB#4}
za(-N~>7dHUB{Aj7`dM=H6|s2I-lLJKiGMpj$g{Kl+Rw@9i^6l`9a#T82|Rgs45B>E
zg%TF6SOI7TH{QwItgHZ{08z^t?<VNd@N9P80_-e;j|f>@LLC)@P_IxOZ=gQXM74@m
zOVQkkrpdycg3=JSl2n6*>4<{GiNbo?gI-0c5I(@I-c35@CFkl(fvdrH$GOuDstzx=
zla8SIZk!0tGa9{^!bPlHWy;xDO4(mM-{a}tpT3^>VC;}?vU_Q?!25#c=iHuXV2fxH
z6yRu?Er%=o<8H}t>HrA`R%Q9(S4H@Kx5x?>%$CeOJb@(BYERSKcO~po!%3gNusrp5
zdG?T&{yCN`&abm(BV&ql*G|I+?cDHfQCtO_*sX>C@dH9>`HE>zFf7VyphS52us|X)
ziHO{wIjXXW=e_FBUf{mR(Rw(O&|Hnc^N+A!o*$9&-=qIC4N@LLErvP#8wKrxGaBgV
zP}W$678rnpRp0Y!DBR@Tb&jp=tLVL+YVn5X@0|azzvVIRV`62KF2C4}^!d$*4-fVN
zPJFl$&mG?t-J1AJ{)gTj^BePRSXYG3_5&_%>Q#G_uCpMOO<(8wm~EqyQNO|hUzG2T
zp1{F)Ij1UmP?{psAkn$lhG7Flag(iLIoO=V0dZAF;|z|RX9!rNKNmaK!c?Nf>KPn7
zCB_@b+PAdsH8?Q94x|%rANI8w6dpVgu8H-(69%~_8KEpj>!7}I_NaygZ_am-=Jhoc
zJBOltQ7B~_`rR-bYa@avGU>RT*C#&dlv_l^sW?a2ZrL)2-G7ati>h$`%5BnF+}qBN
zS53CRy+C;QeK_eJhzjhvkS!Ja(<UFOOclGro%m;d7;pZj*3n;2<`?3D@p4DsV}%wS
zy|Mc!T|YiSerjct{M28yED34t-)fBIM;3a(>h#^GNKW*F(nDQFzxK^TEYdvvjgq}B
z#Xk<({6ZWq6EP8}9ZG?$QYOUhwVsWo;+)QAGpms^^+V4CZM&(1YOf8X*n<-%Un9{n
zAbJX}RFncze^Oa`OI`u`qb2gls%h0?Ba0h4)1g}Dd%412+c@p_Us}<FpmT$t`K4+~
z23P`h1qLRle}0c3+O(m!Ry)7Qz8>@INk^*&YTNrNdCe9jzyDJ36BAJt66D2oB$#f-
z)1EswQ7>(u=Hp}|RhzH#kFAcx%6r}lqV3gU8j@T>S28mdgL*XY@cxt{H1f|8Mz*20
z);cGtrLn0@x#h>C_N1(<hvheS2PV#^6{J#ql`C|SPHwMt8fG3t+(bpWh&$!*MMOZj
zsX@?5+s(3E3o~93jAs7hh=zfUO`%JXw=U=5<Kr%LamaDojUbSA^2=i_)Oc0!D-uHv
z$fEzIa>T+?bP}%EJFk(9L}|7SPBNpZa|jJSDs#!vE`&SD)=uBghh{08E~|mdB(9WA
zmcdtuq4~({OY_8S|F?B5TJR5;p}wNt0e*yEh4wK>?1VfB<9rGKV5A-N;T>6!H1K*A
zM^d90w<?1NUnM%&?9{Ckj?q|H3Siw}niz{y<jRPV1#1_lae5;^P-?-)ySXfUgh|Tl
zBuXVPG4Agp57E#jz`|jJbKFbXRee3SMsurZ3LOnS)`fDV<il9uPdcEZqu*}fD8xk-
zka8JCa?|;7bRaR`CED7yI9L#+cvYm2>_VR{!kNt)GbE<iEkyCN43GYI=D56o1aTSr
z8S~)3C!k?{Oyiljts^8_0^g|4^nt%Ka%v0?CjQa8y06D4O|3IN%rsP-$^tc*{r3J7
zGySRNc16(^NszZiGW{y5O`ZAa6oQm_m?9d_9!DCu#SeiT74CE2cT4|~H8`VRkS+XM
z6UT_%<pC`-!(^oZ?#`zgoChs$c6fFzUIFuhLce-fyTe<Z&pw8?1|xf}tcD_azPIVE
z{De=%Yr{)<6i02Tgjx6uD*#lOE>5g$M&u?$oG-7otZ^*(lW179ptEb*CNeLm_W!)h
zT7~n2yqurVxfVfub9da@T`szjN6j1MfHRwIrEn~$`uGOpz4?WdqP)b>WX1HG(QQrr
z%DyW0U6FwdURPcJ#vU4m8ZrRi)Hp#fs(a1G_HeV5kH};ojwP3wa2(IPY4u1hPb!hJ
zimiY_yt)WAJ+gb8Z~~1yZ>FAZC=P)+Vk0@!*YfG(rog6h`NJ;~Yo$J+!C9HV1n$%x
z7607^I!kdGQvX1^aSbR7k|KTg*YRNi%l%@Hk|83VG^G?9fxD!e2nFx3vQW6|f(IuV
zSV11-eY7F9CMbVA5gqT{isruAPeKE~@lOgX;sVb|8-<R&BP9~K4vFN2f4(3hNZ&jF
z#)?J{Qu0-X9r_vpF)K(rKSwMCPDn2~iMw3BVcC|)FuJRn<5J6KXOdRC#JairMTx^R
zv97A%ZALEEDp0W|EVR+0d6d0T{&iOFBW5?Z#{YEgL3j=33n{g{1nOaScHnbkS3B?D
zxYf#4a^qAx2-p&dpP;71P!VD8<o^0tMgGg_`vM_}L$-kLRvcFi=nDj$8%(f~*EWZ4
zp{S@h-3`H#xH@SP?_cd&R}5>Y9#&rwOHNHiU%P`(3To!Czi67^Kza7A{j+cGk`2IN
zIVd<??_CvSPF-|!r8evCQuna%$iI5@Y4;necx$e$ah@xWHB4D_%b!mvfu`fQi!^;6
zH+xETo`>+z2CZ{u8GxnmI|JdvwVN-v0v)sG2Y8f~1CS~sms5i6`hNa~mms!#0K50@
z&@*AgSo--sPaMu^TEAu=c=^4o&%n=1Cys0gm79srd!yx(kV3K^FREAt`HQLJ!MEX-
znzpBuDMSvkZ(UaWVXFH2H@mE%_{Qt?rt7!MjTc*?c7^f;6|`P`ecM!dWP5RgMU^7}
z>)K{@a<q$uqcFxcpkJ+{E=*lYu)`&dYoR>9n3NVIVq$(m$*aoHFOrjTmt#IIprON(
zma!}WTIAq2NcLZKroUfXM7+^TTJ<?P0~%Wg$y$gU<oX+Rm9)prsfq7Spb0t1AxF?M
zvgEXHw(@GRZZq3fF0*}+0gacv@)Es<-cI0`;@IjF10lPu)fRy{q%Aq+>t2{@>^v%n
z^ht{pdOwvKsQ?O>VGw=8*<vkX@^Ewu4!~u)uQsx}lig7^h(32&(Eus@NUZy1@H^*V
zlBW@v+2hj2fL?Q>o@vOVug*@oup{Sht<w;1NOu2E9(GCcRzzt20Xr2_CV}3FD*Ca}
zw6f1*0;A5n(in0HI8jYxeKaC`>}=S=nQN52gBdo7pTvPgv2XOe7V|hn>9AYuUJ1S<
zH|!@r%V|+C;02?F{?b@6#~Z4oMaPBF8Cb+{$eIXBeVIXDqx!$4>p%ye6g)LxKhK|w
z*d=_D#FQ^8vq1iUjiaAnzF8&1`%?vmsc6(%dcci}MS&{zqZKCD2NFsVp_<h6c|Jzl
z3OP|3Y&om(9U_Cz!}lpT5vfsso(kYq0=3KVvRHHD=%N+a$1@Jl>?zT?CDO}D{Wwf4
zr0m1ekhr5Jb1K4pCJmQ&iR$CMe)!beUmKn{Y9&&R8h<_b^$!gGCn?$Zeg<v}g5}J3
znS7EW5(-R<GCkQv79Nt3N#?4F$<6SIS{17rzuAe}a3tj6ZcB;`XN10}!D%^_1`<~J
zx+XV)@u5OBj7%CbE-3#$F~VzxnjV`4*c~!5p_)FLW}(j@x*A>^u9uG?@nOG8%UsEY
z2e%NRs1<=slh(>sb&9x(_T<xRM(?=}he@)`=OZh8Q<y6;41m|IfvkDY!rqP#bGQ)u
z7amvlP}JeSNDj<jVaT%Oyqfb`_3PSXz=xrb>a>jt!};&@tj(^?kSwccvT%6HA|I#0
zmO|X-eY`0a$)&N<Z`i>S-`H3uaDaZr#`Db>CGLgpd`Dk?qBcVFk9ai<CE2Mo`5g7I
z(yMftO#O(SnhlSYv*7WPWKtyY;}?TglS;%z1S>=RmO4!a=q&#EW=++X6hFdOyE6%W
zMXLp0f|0-m7Y{hVsM<N9tb8#?NVmFPO8k#mOhf&jf-GjDU&Hghf;8Kt&@&)k2g5Je
z$R#H>M!XvTE4dvVAHwcK#S9pVa9pjg)>X<cnQL^}3RsJakrKvCzMu7R1}y9;9f}88
zHY{)$lkSQ?L;?C=l<BniPYt*M)jDI~n2}LM!)9)Whs}0t%<C)C-0BiTqQmctExN4m
zObAJHS8XRx&`}8cR*>$#{PpDJAL}<xT_vt_5iPIqwn#(V^1c71D44B@RKBVBI*xBr
zm1b@<UZjV;50x@q57jC=PMvFj=mmO=UD->3pt7}9^whJA9610xqjFMTUj=Apf*HoC
z97*q9F60EFziM;L#|yGdPi;YH+aahLC3~#y?%n#rDW54uh#cf$`(N=CO3P%K#h)Iy
zkP@iWlIA#!cqGRBX}s_ZN$@%XCVB+jKSD2z=mYB)HvBmu*aL<&(3j_?;=RX<y<wW!
zVp$I`j$9WDzbrk$0`n~RUlIZu*52f&ujZnHG&D58o^0U)j`^el*G^01tPVJ&I<rQ*
z?H;Hn7mdV+?B(<PQ!&;I4(9)7)yTMchexXNWTC__$AYGaV)T;J_p-L|vJtiNuz~Ji
zc)585IJkK^c=@z>xkUxIMfrp|xCKPHxxHLklK)=<&aT$>w!Z&=0bbt!OThWiYzHa;
OqbR2;TP<xK_J06+pHSrh

literal 0
HcmV?d00001

diff --git a/tools/keepalived/doc/source/index.rst b/tools/keepalived/doc/source/index.rst
new file mode 100644
index 000000000..f355a5f0b
--- /dev/null
+++ b/tools/keepalived/doc/source/index.rst
@@ -0,0 +1,24 @@
+#####################
+Keepalived User Guide
+#####################
+
+.. toctree::
+   :maxdepth: 1
+
+   introduction
+   software_design
+   load_balancing_techniques
+   installing_keepalived
+   configuration_synopsis
+   programs_synopsis
+   scheduling_algorithms
+   protocol_support
+   snmp_support
+   case_study_healthcheck
+   case_study_failover
+   case_study_mixing
+   terminology
+   license
+   about
+   todo
+
diff --git a/tools/keepalived/doc/source/installing_keepalived.rst b/tools/keepalived/doc/source/installing_keepalived.rst
new file mode 100644
index 000000000..6f7ae13c4
--- /dev/null
+++ b/tools/keepalived/doc/source/installing_keepalived.rst
@@ -0,0 +1,144 @@
+#####################
+Installing Keepalived
+#####################
+
+Install keepalived from the distribution's repositories or, alternatively,
+compile from source.  Although installing from the repositories is generally
+the fastest way to get keepalived running on a system, the version of
+keepalived available in the repositories are typically a few releases behind
+the latest available stable version.
+
+Installing from the Repositories
+********************************
+
+Installing on Red Hat Enterprise Linux
+======================================
+
+As of Red Hat 6.4, Red Hat and the clones have included the keepalived package
+in the base repository.  Therefore, run the following to install the keepalived
+package and all the required dependencies using YUM::
+
+    yum install keepalived
+
+Installing on Debian
+====================
+
+Run the following to install the keepalived package and all the required
+dependencies using Debian's APT package handling utility::
+
+    apt-get install keepalived
+
+
+Compiling and Building from Source
+**********************************
+
+In order to run the latest stable version, compile keepalived from source.
+Compiling keepalived requires a compiler, OpenSSL and the Netlink Library.  You
+may optionally install Net-SNMP, which is required for SNMP support.
+
+Install Prerequisites on RHEL/CentOS/Fedora
+===========================================
+
+On RHEL, Centos, Fedora etc install the following prerequisites
+(on older systems replace dnf with yum)::
+
+    dnf install curl gcc autoconf automake openssl-devel libnl3-devel \
+        iptables-devel ipset-devel net-snmp-devel libnfnetlink-devel file-devel
+
+For DBUS support::
+
+    dnf install glib2-devel
+
+For JSON support::
+
+    dnf install json-c-devel
+
+Install Prerequisites on Debian/Ubuntu
+======================================
+
+On Debian/Ubuntu, install the following prerequisites::
+
+    apt-get install pkg-config curl gcc autoconf automake libssl-dev libnl-3-dev \
+        libnl-genl-3-dev libsnmp-dev libnl-route-3-dev libnfnetlink-dev libipset-dev \
+        iptables-dev libsnmp-dev
+
+For DBUS support::
+
+    dnf install libglib2.0-dev
+
+For JSON support::
+
+    dnf install libjson-c-dev
+
+Install Prerequisites on Alpine Linux
+=====================================
+
+On Alpine Linux install the following prerequisites::
+
+    autoconf automake iptables-dev ipset-dev libnfnetlink-dev libnl3-dev musl-dev and
+        openssl-dev or libressl-dev
+ 
+For SNMP support::
+
+    net-snmp-dev (requires libressl-dev and not openssl-dev)
+
+Install Prerequisites on Archlinux
+==================================
+
+On Archlinux run the following to install the required libraries::
+
+    pacman -S ipset libnfnetlink libnl1
+
+For SNMP support::
+
+    pacman -S net-snmp
+
+
+Build and Install
+=================
+
+Use *curl* or any other transfer tool such as *wget* to download keepalived.
+The software is available at http://www.keepalived.org/download.html or
+https://github.com/acassen/keepalived. Then, compile the package::
+
+    curl --progress http://keepalived.org/software/keepalived-1.2.15.tar.gz | tar xz
+    cd keepalived-1.2.15
+    ./build_setup
+    ./configure
+    make
+    sudo make install
+
+It is a general recommendation when compiling from source to specify a PREFIX.
+For example::
+
+    ./configure --prefix=/usr/local/keepalived-1.2.15
+
+This makes it easy to uninstall a compiled version of keepalived simply by
+deleting the parent directory.  Additionally, this method of installation
+allows for multiple versions of Keepalived installed without overwriting each
+other.  Use a symlink to point to the desired version.  For example, your
+directory layout could look like this::
+
+    [root@lvs1 ~]# cd /usr/local
+    [root@lvs1 local]# ls -l
+    total 12
+    lrwxrwxrwx. 1 root root   17 Feb 24 20:23 keepalived -> keepalived-1.2.15
+    drwxr-xr-x. 2 root root 4096 Feb 24 20:22 keepalived-1.2.13
+    drwxr-xr-x. 2 root root 4096 Feb 24 20:22 keepalived-1.2.14
+    drwxr-xr-x. 2 root root 4096 Feb 24 20:22 keepalived-1.2.15
+
+Setup Init Scripts
+==================
+
+After compiling, create an init script in order to control the keepalived
+daemon.
+
+On RHEL::
+
+    ln -s /etc/rc.d/init.d/keepalived.init /etc/rc.d/rc3.d/S99keepalived
+
+On Debian::
+
+    ln -s /etc/init.d/keepalived.init /etc/rc2.d/S99keepalived
+
+Note: The link should be added in your default run level directory.
diff --git a/tools/keepalived/doc/source/introduction.rst b/tools/keepalived/doc/source/introduction.rst
new file mode 100644
index 000000000..29928a1fb
--- /dev/null
+++ b/tools/keepalived/doc/source/introduction.rst
@@ -0,0 +1,29 @@
+############
+Introduction
+############
+
+Load balancing is a method of distributing IP traffic across a cluster of real
+servers, providing one or more highly available virtual services.  When
+designing load-balanced topologies, it is important to account for the
+availability of the load balancer itself as well as the real servers behind
+it.
+
+Keepalived provides frameworks for both load balancing and high availability.
+The load balancing framework relies on the well-known and widely used Linux
+Virtual Server (IPVS) kernel module, which provides Layer 4 load balancing.
+Keepalived implements a set of health checkers to dynamically and adaptively
+maintain and manage load balanced server pools according to their health.
+High availability is achieved by the Virtual Redundancy Routing Protocol
+(VRRP).  VRRP is a fundamental brick for router failover. In addition,
+keepalived implements a set of hooks to the VRRP finite state machine
+providing low-level and high-speed protocol interactions. Each Keepalived
+framework can be used independently or together to provide resilient
+infrastructures.
+
+In this context, load balancer may also be referred to as a *director* or an *LVS
+router*.
+
+In short, Keepalived provides two main functions:
+
+* Health checking for LVS systems
+* Implementation of the VRRPv2 stack to handle load balancer failover
diff --git a/tools/keepalived/doc/source/license.rst b/tools/keepalived/doc/source/license.rst
new file mode 100644
index 000000000..de9f10527
--- /dev/null
+++ b/tools/keepalived/doc/source/license.rst
@@ -0,0 +1,10 @@
+#######
+License
+#######
+
+Copyright (c) 2001-2015 Alexandre Cassen.
+
+This document is released under the terms of the GNU General Public Licence.
+You can redistribute it and/or modify it under the terms of the GNU General
+Public Licence as published by the Free Software Foundation; either version
+2 of the Licence, or (at your option) any later version.
diff --git a/tools/keepalived/doc/source/load_balancing_techniques.rst b/tools/keepalived/doc/source/load_balancing_techniques.rst
new file mode 100644
index 000000000..f52fabd78
--- /dev/null
+++ b/tools/keepalived/doc/source/load_balancing_techniques.rst
@@ -0,0 +1,61 @@
+#########################
+Load Balancing Techniques
+#########################
+
+Virtual Server via NAT
+**********************
+
+NAT Routing is used when the Load-Balancer (or LVS Router) has two Network
+Interface Cards (NICs), one assigned an outside-facing IP address and the
+other, a private, inside-facing IP address.  In this method, the Load-Balancer
+receives requests from users on the public network and uses network address
+translation (NAT) to forward those requests to the real servers located on the
+private network.  The replies are also translated in the reverse direction,
+when the real servers reply to the users’ requests.
+
+As a result, an advantage is that the real servers are protected from the
+public network as they are hidden behind the Load-Balancer.  Another advantage
+is IP address preservation, as the private network can use private address
+ranges.
+
+The main disadvantage is that the Load-Balancer becomes a bottleneck.  It has
+to serve not only requests but also replies to and from the public users,
+while also forwarding to and from the private real servers.
+
+Virtual Server via Tunneling
+****************************
+
+In Tunneling mode, the Load-Balancer sends requests to real servers through IP tunnel
+in the former, and the Load-Balancer sends request to real servers via network
+address translation in the latter.
+
+The main advantage of this method is scalability, Load-Balancer will forward
+incoming request to farm nodes, latter nodes will then respond directly to the
+client requests without having to proxy through Load-Balancer. It offers you
+a way to locate nodes in different networking segments.
+
+The main disadvantage is the cost you will put into it to finally get a working
+env since it is deeply dependent upon your network architecture.
+
+Virtual Server via Direct Routing
+*********************************
+
+In Direct Routing, users issue requests to the VIP on the Load-Balancer.  The
+Load-Balancer uses its predefined scheduling (distribution) algorithm and
+forwards the requests to the appropriate real server.  Unlike using NAT
+Routing, the real servers respond directly to the public users, bypassing the
+need to route through the Load-Balancer.
+
+The main advantage with this routing method is scalability, as the
+Load-Balancer does not have the additional responsibility of routing outgoing
+packets from the real servers to the public users.
+
+The disadvantage to this routing method lies in its ARP limitation. In order
+for the real servers to directly respond to the public users’ requests, each
+real server must use the VIP as its source address when sending replies.
+As a result, the VIP and MAC address combination are shared amongst the
+Load-Balancer itself as well as each of the real servers that can lead to
+situations where the real servers receive the requests directly, bypassing
+the Load-Balancer on incoming requests.  There are methods available to
+solve this problem at the expense of added configuration complexity and
+manageability.
diff --git a/tools/keepalived/doc/source/programs_synopsis.rst b/tools/keepalived/doc/source/programs_synopsis.rst
new file mode 100644
index 000000000..5ab8b81b2
--- /dev/null
+++ b/tools/keepalived/doc/source/programs_synopsis.rst
@@ -0,0 +1,172 @@
+############################
+Keepalived programs synopsis
+############################
+
+Keepalived package comes with 2 programs.
+
+keepalived daemon
+*****************
+
+The keepalived command line arguments are:
+
+.. glossary::
+
+    -f, --use-file=FILE
+        Use the specified configuration file. The default configuration file is "/etc/keepalived/keepalived.conf".
+
+    -P, --vrrp
+        Only run the VRRP subsystem. This is useful for configurations that do not use IPVS load balancer.
+
+    -C, --check
+        Only run the healthcheck subsystem. This is useful for configurations that use the IPVS load balancer with a single director with no failover.
+
+    -l, --log-console
+        Log messages to the local console. The default behavior is to log messages to syslog.
+
+    -D, --log-detail
+        Detailed log messages.
+
+    -S, --log-facility=[0-7]
+        Set syslog facility to LOG_LOCAL[0-7]. The default syslog facility is LOG_DAEMON.
+
+    -V, --dont-release-vrrp
+        Don’t remove VRRP VIPs and VROUTEs on daemon stop. The default behavior is to remove all VIPs and VROUTEs when keepalived exits
+
+    -I, --dont-release-ipvs
+        Don’t remove IPVS topology on daemon stop. The default behavior is to remove all entries from the IPVS virtual server table on when keepalived exits.
+
+    -R, --dont-respawn
+        Don’t respawn child processes. The default behavior is to restart the VRRP and checker processes if either process exits.
+
+    -n, --dont-fork
+        Don’t fork the daemon process. This option will cause keepalived to run in the foreground.
+
+    -d, --dump-conf
+        Dump the configuration data.
+
+    -p, --pid=FILE
+        Use specified pidfile for parent keepalived process. The default pidfile for keepalived is "/var/run/keepalived.pid".
+
+    -r, --vrrp_pid=FILE
+        Use specified pidfile for VRRP child process. The default pidfile for the VRRP child process is "/var/run/keepalived_vrrp.pid".
+
+    -c, --checkers_pid=FILE
+        Use specified pidfile for checkers child process. The default pidfile for the checker child process is "/var/run/keepalived_checkers.pid".
+
+    -x, --snmp
+        Enable SNMP subsystem.
+
+    -v, --version
+        Display the version and exit.
+
+    -h, --help
+        Display this help message and exit.
+
+genhash utility
+***************
+
+The ``genhash`` binary is used to generate digest strings. The genhash command
+line arguments are:
+
+.. glossary::
+
+    --use-ssl, -S
+          Use SSL to connect to the server.
+
+    --server <host>, -s
+          Specify the ip address to connect to.
+
+    --port <port>, -p
+          Specify the port to connect to.
+
+    --url <url>, -u
+          Specify the path to the file you want to generate the hash of.
+
+    --use-virtualhost <host>, -V
+          Specify the virtual host to send along with the HTTP headers.
+
+    --hash <alg>, -H
+          Specify the hash algorithm to make a digest of the target page.   Consult  the
+          help screen for list of available ones with a mark of the default one.
+
+    --verbose, -v
+          Be verbose with the output.
+
+    --help, -h
+          Display the program help screen and exit.
+
+    --release, -r
+          Display the release number (version) and exit.
+
+Running Keepalived daemon
+*************************
+
+To run Keepalived simply type::
+
+    [root@lvs tmp]# /etc/rc.d/init.d/keepalived.init start
+    Starting Keepalived for LVS:                            [ OK ]
+
+All daemon messages are logged through the Linux syslog. If you start Keepalived with the “dump configuration data� option, you should see in your /var/log/messages (on Debian this may be */var/log/daemon.log* depending on your syslog configuration) something like this::
+
+    Jun 7 18:17:03 lvs1 Keepalived: Starting Keepalived v0.6.1 (06/13, 2002)
+    Jun 7 18:17:03 lvs1 Keepalived: Configuration is using : 92013 Bytes
+    Jun 7 18:17:03 lvs1 Keepalived: ------< Global definitions >------
+    Jun 7 18:17:03 lvs1 Keepalived: LVS ID = LVS_PROD
+    Jun 7 18:17:03 lvs1 Keepalived: Smtp server = 192.168.200.1
+    Jun 7 18:17:03 lvs1 Keepalived: Smtp server connection timeout = 30
+    Jun 7 18:17:03 lvs1 Keepalived: Email notification from = keepalived@domain.com
+    Jun 7 18:17:03 lvs1 Keepalived: Email notification = alert@domain.com
+    Jun 7 18:17:03 lvs1 Keepalived: Email notification = 0633556699@domain.com
+    Jun 7 18:17:03 lvs1 Keepalived: ------< SSL definitions >------
+    Jun 7 18:17:03 lvs1 Keepalived: Using autogen SSL context
+    Jun 7 18:17:03 lvs1 Keepalived: ------< LVS Topology >------
+    Jun 7 18:17:03 lvs1 Keepalived: System is compiled with LVS v0.9.8
+    Jun 7 18:17:03 lvs1 Keepalived: VIP = 10.10.10.2, VPORT = 80
+    Jun 7 18:17:03 lvs1 Keepalived: VirtualHost = www.domain1.com
+    Jun 7 18:17:03 lvs1 Keepalived: delay_loop = 6, lb_algo = rr
+    Jun 7 18:17:03 lvs1 Keepalived: persistence timeout = 50
+    Jun 7 18:17:04 lvs1 Keepalived: persistence granularity = 255.255.240.0
+    Jun 7 18:17:04 lvs1 Keepalived: protocol = TCP
+    Jun 7 18:17:04 lvs1 Keepalived: lb_kind = NAT
+    Jun 7 18:17:04 lvs1 Keepalived: sorry server = 192.168.200.200:80
+    Jun 7 18:17:04 lvs1 Keepalived: RIP = 192.168.200.2, RPORT = 80, WEIGHT = 1
+    Jun 7 18:17:04 lvs1 Keepalived: RIP = 192.168.200.3, RPORT = 80, WEIGHT = 2
+    Jun 7 18:17:04 lvs1 Keepalived: VIP = 10.10.10.3, VPORT = 443
+    Jun 7 18:17:04 lvs1 Keepalived: VirtualHost = www.domain2.com
+    Jun 7 18:17:04 lvs1 Keepalived: delay_loop = 3, lb_algo = rr
+    Jun 7 18:17:04 lvs1 Keepalived: persistence timeout = 50
+    Jun 7 18:17:04 lvs1 Keepalived: protocol = TCP
+    Jun 7 18:17:04 lvs1 Keepalived: lb_kind = NAT
+    Jun 7 18:17:04 lvs1 Keepalived: RIP = 192.168.200.4, RPORT = 443, WEIGHT = 1
+    Jun 7 18:17:04 lvs1 Keepalived: RIP = 192.168.200.5, RPORT = 1358, WEIGHT = 1
+    Jun 7 18:17:05 lvs1 Keepalived: ------< Health checkers >------
+    Jun 7 18:17:05 lvs1 Keepalived: 192.168.200.2:80
+    Jun 7 18:17:05 lvs1 Keepalived: Keepalive method = HTTP_GET
+    Jun 7 18:17:05 lvs1 Keepalived: Connection timeout = 3
+    Jun 7 18:17:05 lvs1 Keepalived: Nb get retry = 3
+    Jun 7 18:17:05 lvs1 Keepalived: Delay before retry = 3
+    Jun 7 18:17:05 lvs1 Keepalived: Checked url = /testurl/test.jsp,
+    Jun 7 18:17:05 lvs1 Keepalived: digest = 640205b7b0fc66c1ea91c463fac6334d
+    Jun 7 18:17:05 lvs1 Keepalived: 192.168.200.3:80
+    Jun 7 18:17:05 lvs1 Keepalived: Keepalive method = HTTP_GET
+    Jun 7 18:17:05 lvs1 Keepalived: Connection timeout = 3
+    Jun 7 18:17:05 lvs1 Keepalived: Nb get retry = 3
+    Jun 7 18:17:05 lvs1 Keepalived: Delay before retry = 3
+    Jun 7 18:17:05 lvs1 Keepalived: Checked url = /testurl/test.jsp,
+    Jun 7 18:17:05 lvs1 Keepalived: digest = 640205b7b0fc66c1ea91c463fac6334c
+    Jun 7 18:17:05 lvs1 Keepalived: Checked url = /testurl2/test.jsp,
+    Jun 7 18:17:05 lvs1 Keepalived: digest = 640205b7b0fc66c1ea91c463fac6334c
+    Jun 7 18:17:06 lvs1 Keepalived: 192.168.200.4:443
+    Jun 7 18:17:06 lvs1 Keepalived: Keepalive method = SSL_GET
+    Jun 7 18:17:06 lvs1 Keepalived: Connection timeout = 3
+    Jun 7 18:17:06 lvs1 Keepalived: Nb get retry = 3
+    Jun 7 18:17:06 lvs1 Keepalived: Delay before retry = 3
+    Jun 7 18:17:06 lvs1 Keepalived: Checked url = /testurl/test.jsp,
+    Jun 7 18:17:05 lvs1 Keepalived: digest = 640205b7b0fc66c1ea91c463fac6334d
+    Jun 7 18:17:06 lvs1 Keepalived: Checked url = /testurl2/test.jsp,
+    Jun 7 18:17:05 lvs1 Keepalived: digest = 640205b7b0fc66c1ea91c463fac6334d
+    Jun 7 18:17:06 lvs1 Keepalived: 192.168.200.5:1358
+    Jun 7 18:17:06 lvs1 Keepalived: Keepalive method = TCP_CHECK
+    Jun 7 18:17:06 lvs1 Keepalived: Connection timeout = 3
+    Jun 7 18:17:06 lvs1 Keepalived: Registering Kernel netlink reflector
+
diff --git a/tools/keepalived/doc/source/protocol_support.rst b/tools/keepalived/doc/source/protocol_support.rst
new file mode 100644
index 000000000..b3c40a6c0
--- /dev/null
+++ b/tools/keepalived/doc/source/protocol_support.rst
@@ -0,0 +1,36 @@
+#####################
+IPVS Protocol Support
+#####################
+
+IPVS Transport Protocol Load Balancing Support
+**********************************************
+
+IPVS supports load balancing the following transport protocols:
+
+* TCP
+* UDP
+* SCTP
+* ESP (Encapsulation Security Payload)
+* AH (Authentication Header)
+
+
+IPVS Application Helpers
+************************
+
+FTP Protocol Helper
+===================
+
+Netfilter Connection Tracking
+=============================
+
+SIP Persistence Engine
+======================
+
+Depends on UDP and SIP netfilter connection tracking.
+
+
+.. todo::
+   Mention Netfilter Connection Tracking
+
+.. todo::
+   Mention ipip kernel module
diff --git a/tools/keepalived/doc/source/scheduling_algorithms.rst b/tools/keepalived/doc/source/scheduling_algorithms.rst
new file mode 100644
index 000000000..bb3102252
--- /dev/null
+++ b/tools/keepalived/doc/source/scheduling_algorithms.rst
@@ -0,0 +1,78 @@
+##########################
+IPVS Scheduling Algorithms
+##########################
+
+The following scheduling algorithms are supported by the IPVS kernel code. (heavily stolen from LVS website).
+
+Round Robin (rr)
+****************
+
+The round-robin scheduling algorithm sends each incoming request to the next server in its list. Thus in a three server cluster (servers A, B, and C) request 1 would go to server A, request 2 would go to server B, request 3 would go to server C, and request 4 would go to server A, thus completing the cycling or 'round-robin' of servers. It treats all real servers as equals regardless of the number of incoming connections or response time each server is experiencing. Virtual Server provides a few advantages over traditional round-robin DNS. Round-robin DNS resolves a single domain to the different IP addresses, the scheduling granularity is host-based, and the caching of DNS queries hinders the basic algorithm, these factors lead to significant dynamic load imbalances among the real servers. The scheduling granularity of Virtual Server is network connection-based, and it is much superior to round-robin DNS due to the fine scheduling granularity.
+
+Weighted Round Robin (wrr)
+**************************
+
+The weighted round-robin scheduling is designed to better handle servers with different processing capacities. Each server can be assigned a weight, an integer value that indicates the processing capacity. Servers with higher weights receive new connections first than those with less weights, and servers with higher weights get more connections than those with less weights and servers with equal weights get equal connections. For example, the real servers, A, B, and C, have the weights, 4, 3, 2 respectively, a good scheduling sequence will be AABABCABC in a scheduling period (mod sum(Wi)). In the implementation of the weighted round-robin scheduling, a scheduling sequence will be generated according to the server weights after the rules of Virtual Server are modified. The network connections are directed to the different real servers based on the scheduling sequence in a round-robin manner.
+
+The weighted round-robin scheduling is better than the round-robin scheduling, when the processing capacity of real servers is different. However, it may lead to dynamic load imbalance among the real servers if the load of the requests vary highly. In short, there is the possibility that a majority of requests requiring large responses may be directed to the same real server.
+
+Actually, the round-robin scheduling is a special instance of the weighted round-robin scheduling, in which all the weights are equal.
+
+Least Connection (lc)
+*********************
+
+The least-connection scheduling algorithm directs network connections to the server with the least number of established connections. This is one of the dynamic scheduling algorithms; because it needs to count live connections for each server dynamically. For a Virtual Server that is managing a collection of servers with similar performance, least-connection scheduling is good to smooth distribution when the load of requests varies a lot. Virtual Server will direct requests to the real server with the fewest active connections.
+
+At a first glance, it might seem that least-connection scheduling can also perform well even when there are servers of various processing capacities, because the faster server will get more network connections. In fact, it cannot perform very well because of the TCP's TIME_WAIT state. The TCP's TIME_WAIT is usually 2 minutes, during this 2 minutes a busy website often receives thousands of connections, for example, the server A is twice as powerful as the server B, the server A is processing thousands of requests and keeping them in the TCP's TIME_WAIT state, but server B is crawling to get its thousands of connections finished. So, the least-connection scheduling cannot get load well balanced among servers with various processing capacities.
+
+Weighted Least Connection (wlc)
+*******************************
+
+The weighted least-connection scheduling is a superset of the least-connection scheduling, in which you can assign a performance weight to each real server. The servers with a higher weight value will receive a larger percentage of live connections at any one time. The Virtual Server Administrator can assign a weight to each real server, and network connections are scheduled to each server in which the percentage of the current number of live connections for each server is a ratio to its weight. The default weight is one.
+
+The weighted least-connections scheduling works as follows:
+
+    Supposing there are n real servers, each server i has weight Wi (i=1,..,n), and alive connections Ci (i=1,..,n), ALL_CONNECTIONS is the sum of Ci (i=1,..,n), the next network connection will be directed to the server j, in which
+
+        (Cj/ALL_CONNECTIONS)/Wj = min { (Ci/ALL_CONNECTIONS)/Wi } (i=1,..,n)
+
+    Since the ALL_CONNECTIONS is a constant in this lookup, there is no need to divide Ci by ALL_CONNECTIONS, it can be optimized as
+
+        Cj/Wj = min { Ci/Wi } (i=1,..,n)
+
+The weighted least-connection scheduling algorithm requires additional division than the least-connection. In a hope to minimize the overhead of scheduling when servers have the same processing capacity, both the least-connection scheduling and the weighted least-connection scheduling algorithms are implemented.
+
+Locality-Based Least Connection (lblc)
+**************************************
+
+The locality-based least-connection scheduling algorithm is for destination IP load balancing. It is usually used in cache cluster. This algorithm usually directs packet destined for an IP address to its server if the server is alive and under load. If the server is overloaded (its active connection numbers is larger than its weight) and there is a server in its half load, then allocate the weighted least-connection server to this IP address.
+
+Locality-Based Least Connection with Replication (lblcr)
+********************************************************
+
+The locality-based least-connection with replication scheduling algorithm is also for destination IP load balancing. It is usually used in cache cluster. It differs from the LBLC scheduling as follows: the load balancer maintains mappings from a target to a set of server nodes that can serve the target. Requests for a target are assigned to the least-connection node in the target's server set. If all the node in the server set are over loaded, it picks up a least-connection node in the cluster and adds it in the sever set for the target. If the server set has not been modified for the specified time, the most loaded node is removed from the server set, in order to avoid high degree of replication.
+
+Destination Hashing (dh)
+************************
+
+The destination hashing scheduling algorithm assigns network connections to the servers through looking up a statically assigned hash table by their destination IP addresses.
+
+Source Hashing (sh)
+*******************
+
+The source hashing scheduling algorithm assigns network connections to the servers through looking up a statically assigned hash table by their source IP addresses.
+
+Shortest Expected Delay (sed)
+*****************************
+
+The shortest expected delay scheduling algorithm assigns network connections to the server with the shortest expected delay. The expected delay that the job will experience is (Ci + 1) / Ui if sent to the ith server, in which Ci is the number of connections on the ith server and Ui is the fixed service rate (weight) of the ith server.
+
+Never Queue (nq)
+****************
+
+The never queue scheduling algorithm adopts a two-speed model. When there is an idle server available, the job will be sent to the idle server, instead of waiting for a fast one. When there is no idle server available, the job will be sent to the server that minimizes its expected delay (The Shortest Expected Delay scheduling algorithm).
+
+Overflow-Connection (ovf)
+*************************
+
+The Overflow connection scheduling algorithm implements "overflow" loadbalancing according to a number of active connections, will keep all connections to the node with the highest weight and overflow to the next node if the number of connections exceeds the node's weight. Note that this scheduler might not be suitable for UDP because it only uses active connections
diff --git a/tools/keepalived/doc/source/snmp_support.rst b/tools/keepalived/doc/source/snmp_support.rst
new file mode 100644
index 000000000..fe0b07933
--- /dev/null
+++ b/tools/keepalived/doc/source/snmp_support.rst
@@ -0,0 +1,133 @@
+########################
+Configuring SNMP Support
+########################
+
+Keepalived provides an SNMP subsystem that can gather various metrics about the
+VRRP stack and the health checker system. The keepalived MIB is in
+the ``doc`` directory of the project. The base SNMP OID for the MIB is
+`.1.3.6.1.4.1.9586.100.5`, which is hosted under the `Debian OID space`_
+assigned by IANA.
+
+.. _Debian OID space: https://dsa.debian.org/iana/
+
+
+Prerequisites *************
+
+Install the SNMP protocol tools and libraries onto your system.  This requires
+the installation of a few packages::
+
+    yum install net-snmp net-snmp-utils net-snmp-libs
+
+Once SNMP has been installed on your system, configure keepalived with SNMP
+support.  When compiling keepalived, add the ``--enable-snmp`` configure
+option.  For example::
+
+    ./configure --enable-snmp
+
+During the configure step of the compiling process, you will get a
+configuration summary before building with ``make``.  For example, you may see
+similar output on a CentOS 6 machine::
+
+    ./configure --prefix=/usr/local/keepalived-1.2.15 --enable-snmp
+    Keepalived configuration
+    ------------------------
+    Keepalived version       : 1.2.15
+    Compiler                 : gcc
+    Compiler flags           : -g -O2 -I/usr/include/libnl3
+    Extra Lib                : -Wl,-z,relro -Wl,-z,now -L/usr/lib64
+    -lnetsnmpagent -lnetsnmphelpers -lnetsnmpmibs -lnetsnmp -Wl,-E
+    -Wl,-rpath,/usr/lib64/perl5/CORE -lssl -lcrypto -lcrypt  -lnl-genl-3 -lnl-3
+    Use IPVS Framework       : Yes
+    IPVS sync daemon support : Yes
+    IPVS use libnl           : Yes
+    fwmark socket support    : Yes
+    Use VRRP Framework       : Yes
+    Use VRRP VMAC            : Yes
+    SNMP support             : Yes
+    SHA1 support             : No
+    Use Debug flags          : No
+
+Notice the *Extra Lib* section of the configuration summary.  It lists various
+library flags that gcc will use to build keepalived, several of which have to do with
+SNMP.
+
+Configuring Support
+*******************
+
+Enable SNMP AgentX support by including the following line in the SNMP
+daemon configuration file, typically ``/etc/snmp/snmpd.conf`` if you installed
+via RPMs on a CentOS machine::
+
+    master agentx
+
+.. note::
+   Be sure to reload or restart the SNMP service for the configuration change
+   to take effect.
+
+Adding the MIB
+**************
+
+You can query keepalived SNMP managed objects by using the OID.  For example::
+
+    snmpwalk -v2c -c public localhost .1.3.6.1.4.1.9586.100.5.1.1.0
+    SNMPv2-SMI::enterprises.9586.100.5.1.1.0 = STRING: "Keepalived v1.2.15 (01/10,2015)"
+
+Alternatively, with the keepalived MIB, you can query using the MIB available
+from the project.  First, copy the MIB to the system's global MIB directory or
+to the user's local MIB directory::
+
+    cp /usr/local/src/keepalived-1.2.15/doc/KEEPALIVED-MIB /usr/share/snmp/mibs
+
+or::
+
+    cp /usr/local/src/keepalived-1.2.15/doc/KEEPALIVED-MIB ~/.snmp/mibs
+
+The SNMP daemon will check both directories for the existence of the MIB.  Once
+the MIB is in place, the SNMP query can look as follows::
+
+    snmpwalk -v2c -c public localhost KEEPALIVED-MIB::version
+    KEEPALIVED-MIB::version.0 = STRING: Keepalived v1.2.15 (01/10,2015)
+
+
+MIB Overview
+************
+
+There are four main sections to the keepalived MIB:
+
+* global
+* vrrp
+* check
+* conformance
+
+Global
+======
+
+The global section includes objects that contain information about the
+keepalived instance such as version, router ID and administrative email
+addresses.
+
+VRRP
+====
+
+The VRRP section includes objects that contain information about each
+configured VRRP instance.  Within each instance, there are objects that include
+instance name, current state, and virtual IP addresses.
+
+Check
+=====
+
+The Check section includes objects that contain information about each
+configured virtual server.  It includes server tables for virtual and real
+servers and also configured load balancing algorithms, load balancing method,
+protocol, status, real and virtual server network connection statistics.
+
+Conformance
+===========
+
+.. todo::
+   do conformance
+
+.. note::
+   Use a MIB browser, such as mbrowse, to see what managed objects are available to
+   query for monitoring the health of your LVS servers.
+
diff --git a/tools/keepalived/doc/source/software_design.rst b/tools/keepalived/doc/source/software_design.rst
new file mode 100644
index 000000000..d139fcadd
--- /dev/null
+++ b/tools/keepalived/doc/source/software_design.rst
@@ -0,0 +1,330 @@
+###############
+Software Design
+###############
+
+
+Keepalived is written in pure ANSI/ISO C. The software is articulated around a
+central I/O multiplexer that provides realtime networking design. The main
+design focus is to provide a homogenous modularity between all elements. This
+is why a core library was created to remove code duplication. The goal is to
+produce a safe and secure code, ensuring production robustness and stability.
+
+To ensure robustness and stability, daemon is split into 3 distinct processes:
+
+* A minimalistic parent process in charge with forked children process monitoring.
+* Two children processes, one responsible for VRRP framework and the other for healthchecking.
+
+Each children process has its own scheduling I/O multiplexer, that way VRRP
+scheduling jitter is optimized since VRRP scheduling is more sensible/critical
+than healthcheckers. This split design minimalizes for healthchecking the usage
+of foreign libraries and minimalizes its own action down to an idle mainloop in
+order to avoid malfunctions caused by itself. 
+
+The parent process monitoring framework is called watchdog, the design is each
+children process opens an accept unix domain socket, then while daemon
+bootstrap, parent process connect to those unix domain sockets and send periodic
+(5s) hello packets to children. If parent cannot send hello packet to remotely
+connected unix domain socket it simply restarts children process. 
+
+This watchdog design offers 2 benefits, first of all, hello packets sent from
+parent process to remotely connected children is done through I/O multiplexer
+scheduler that way it can detect deadloop in the children scheduling framework.
+The second benefit is brought by the uses of sysV signal to detect dead
+children. When running you will see in process list::
+
+    PID         111     Keepalived  <-- Parent process monitoring children
+                112     \_ Keepalived   <-- VRRP child
+                113     \_ Keepalived   <-- Healthchecking child
+
+Kernel Components
+*****************
+
+Keepalived uses four Linux kernel components:
+
+1. LVS Framework: Uses the getsockopt and setsockopt calls to get and set options on sockets.
+#. Netfilter Framework: IPVS code that supports NAT and Masquerading.
+#. Netlink Interface: Sets and removes VRRP virtual IPs on network interfaces.
+#. Multicast:  VRRP advertisements are sent to the reserved VRRP MULTICAST group (224.0.0.18).
+
+
+Atomic Elements
+***************
+
+.. image:: images/software_design.png
+   :align: center
+   :scale: 80%
+   :alt: keepalived software design
+
+Control Plane
+=============
+
+Keepalived configuration is done through the file keepalived.conf. A compiler
+design is used for parsing. Parser work with a keyword tree hierarchy for
+mapping each configuration keyword with specifics handler. A central
+multi-level recursive function reads the configuration file and traverses the
+keyword tree. During parsing, configuration file is translated into an internal
+memory representation.
+
+Scheduler - I/O Multiplexer
+===========================
+
+All the events are scheduled into the same process. Keepalived is a single
+process. Keepalived is a network routing software, it is so closed to I/O. The
+design used here is a central select(...) that is in charge of scheduling all
+internal task. POSIX thread libs are NOT used. This framework provides its own
+thread abstraction optimized for networking purpose.
+
+Memory Management
+=================
+
+This framework provides access to some generic memory management functions like
+allocation, reallocation, release,... This framework can be used in two modes:
+normal_mode & debug_mode. When using debug_mode it provides a strong way to
+eradicate and track memory leaks. This low-level env provides buffer under-run
+protection by tracking allocation and release of memory. All the buffer used are
+length fixed to prevent against eventual buffer-overflow.
+
+Core Components
+===============
+
+This framework defines some common and global libraries that are used in all the
+code. Those libraries are html parsing, link-list, timer, vector, string
+formating, buffer dump, networking utils, daemon management, pid handling, 
+low-level TCP layer4. The goal here is to factorize code to the max to limit as
+possible code duplication to increase modularity.
+
+WatchDog
+========
+
+This framework provides children processes monitoring (VRRP & Healthchecking).
+Each child accepts connection to its own watchdog unix domain socket. Parent
+process sends "hello" messages to this child unix domain socket. Hello messages
+are sent using I/O multiplexer on the parent side and accepted/processed using
+I/O multiplexer on children side. If the parent detects broken pipe it tests 
+using sysV signal if child is still alive and restarts it.
+
+Checkers
+========
+
+This is one of the main Keepalived functionality. Checkers are in charge of
+realserver healthchecking. A checker tests if realserver is alive, this test ends
+on a binary decision: remove or add realserver from/into the LVS topology. The
+internal checker design is realtime networking software, it uses a fully
+multi-threaded FSM design (Finite State Machine). This checker stack provides
+LVS topology manipulation according to layer4 to layer5/7 test results. It's run
+in an independent process monitored by the parent process.
+
+VRRP Stack
+==========
+
+The other most important Keepalived functionality. VRRP (Virtual Router
+Redundancy Protocol: RFC2338) is focused on director takeover, it provides
+low-level design for router backup. It implements full IETF RFC2338 standard
+with some provisions and extensions for LVS and Firewall design. It implements
+the vrrp_sync_group extension that guarantees persistence routing path after
+protocol takeover. It implements IPSEC-AH using MD5-96bit crypto provision for
+securing protocol adverts exchange. For more information on VRRP please read
+the RFC. Important things: VRRP code can be used without the LVS support, it
+has been designed for independent use. It's run in an independent process
+monitored by parent process.
+
+System Call
+===========
+
+This framework offers the ability to launch extra system script. It is mainly
+used in the MISC checker. In VRRP framework it provides the ability to launch
+extra script during protocol state transition. The system call is done into a
+forked process to not pertube the global scheduling timer.
+
+Netlink Reflector
+=================
+
+Same as IPVS wrapper. Keepalived works with its own network interface
+representation. IP address and interface flags are set and monitored through
+kernel Netlink channel. The Netlink messaging sub-system is used for setting
+VRRP VIPs. On the other hand, the Netlink kernel messaging broadcast capability
+is used to reflect into our userspace Keepalived internal data representation
+any events related to interfaces. So any other userspace (others program)
+netlink manipulation is reflected our Keepalived data representation via
+Netlink Kernel broadcast (RTMGRP_LINK & RTMGRP_IPV4_IFADDR).
+
+SMTP
+====
+
+The SMTP protocol is used for administration notification. It implements the
+IETF RFC821 using a multi-threaded FSM design. Administration notifications are
+sent for healthcheckers activities and VRRP protocol state transition. SMTP is
+commonly used and can be interfaced with any other notification sub-system such
+as GSM-SMS, pagers, etc.
+
+IPVS Wrapper
+============
+
+This framework is used for sending rules to the Kernel IPVS code. It provides
+translation between Keepalived internal data representation and IPVS rule_user
+representation. It uses the IPVS libipvs to keep generic integration with IPVS
+code.
+
+IPVS
+====
+
+The Linux Kernel code provided by Wensong from LinuxVirtualServer.org
+OpenSource Project. IPVS (IP Virtual Server) implements transport-layer load
+balancing inside the Linux kernel, also referred to as Layer-4 switching.
+
+NETLINK
+=======
+
+The Linux Kernel code provided by Alexey Kuznetov with its very nice advanced
+routing framework and sub-system capabilities. Netlink is used to transfer
+information between kernel and user-space processes.  It consists of a standard
+sockets-based interface for userspace processes and an internal kernel API for
+kernel modules.
+
+Syslog
+======
+
+All keepalived daemon notification messages are logged using the syslog service.
+
+
+Healthcheck Framework
+*********************
+
+Each health check is registered to the global scheduling framework.  These
+health check worker threads implement the following types of health checks:
+
+.. glossary::
+
+    TCP_CHECK
+        Working at layer4. To ensure this check, we use a TCP Vanilla check using nonblocking/timed-out TCP connections. If the remote server does not reply to this request (timed-out), then the test is wrong and the server is removed from the server pool.
+
+    HTTP_GET
+        Working at layer5. Performs a HTTP GET to a specified URL. The HTTP GET result is then summed using the MD5 algorithm. If this sum does not match with the expected value, the test is wrong and the server is removed from the server pool. This module implements a multi-URL get check on the same service. This functionality is useful if you are using a server hosting more than one application servers. This functionality gives you the ability to check if an application server is working properly. The MD5 digests are generated using the genhash utility (included in the keepalived package).
+
+    SSL_GET
+        Same as HTTP_GET but uses a SSL connection to the remote webservers.
+
+    MISC_CHECK
+        This check allows a user-defined script to be run as the health checker. The result must be 0 or 1. The script is run on the director box and this is an ideal way to test in-house applications. Scripts that can be run without arguments can be called using the full path (i.e. /path_to_script/script.sh). Those requiring arguments need to be enclosed in double quotes (i.e. “/path_to_script/script.sh arg 1 ... arg n �)
+
+The goal for Keepalived is to define a generic framework easily extensible for adding new checkers modules. If you are interested in the development of existing or new checkers, have a look at the *keepalived/check* directory in the source:
+
+https://github.com/acassen/keepalived/tree/master/keepalived/check
+
+Failover (VRRP) Framework
+*************************
+
+Keepalived implements the VRRP protocol for director failover. Within the
+implemented VRRP stack, the VRRP Packet dispatcher is responsible for
+demultiplexing specific I/O for each VRRP instance.
+
+From RFC2338, VRRP is defined as::
+
+    “VRRP specifies an election protocol that dynamically assigns
+    responsibility for a virtual router to one of the VRRP routers on a LAN.
+    The VRRP router controlling the IP address(es) associated with a virtual
+    router is called the Master, and forwards packets sent to these IP
+    addresses. The election process provides dynamic fail over in the
+    forwarding responsibility should the Master become unavailable. This allows
+    any of the virtual router IP addresses on the LAN to be used as the default
+    first hop router by end-hosts. The advantage gained from using VRRP is a
+    higher availability default path without requiring configuration of dynamic
+    routing or router discovery protocols on every end-host.� [rfc2338]
+
+.. note::
+    This framework is LVS independent, so you can use it for LVS director
+    failover, even for other Linux routers needing a Hot-Standby protocol.
+    This framework has been completely integrated in the Keepalived daemon for
+    design & robustness reasons.
+
+The main functionalities provided by this framework are:
+
+* Failover: The native VRRP protocol purpose, based on a roaming set of VRRP VIPs.
+* VRRP Instance synchronization: We can specify a state monitoring between 2 VRRP Instances, also known as a *VRRP sync group*. It guarantees that 2 VRRP Instances remain in the same state. The synchronized instances monitor each other.
+* Nice Fallback
+* Advert Packet integrity: Using IPSEC-AH ICV.
+* System call: During a VRRP state transition, an external script/program may be called.
+
+
+Note on Using VRRP with Virtual MAC Address
+===========================================
+
+To reduce takeover impact, some networking environment would require using
+VRRP with VMAC address. To reach that goal Keepalived VRRP framework implements
+VMAC support by the invocation of 'use_vmac' keyword in configuration file.
+
+Internally, Keepalived code will bring up virtual interfaces, each interface
+dedicated to a specific virtual_router. Keepalived uses Linux kernel macvlan
+driver to defines these interfaces. It is then mandatory to use kernel
+compiled with macvlan support.
+
+In addition, we can mention that VRRP VMAC will work only with kernel including
+the following patch:
+
+http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=commitdiff;h=729e72a10930ef765c11a5a35031ba47f18221c4
+
+By default MACVLAN interface are in VEPA mode which filters out received
+packets whose MAC source address matches that of the MACVLAN interface. Setting
+MACVLAN interface in private mode will not filter based on source MAC address.
+
+Alternatively, you can specify 'vmac_xmit_base' which will cause the VRRP
+messages to be transmitted and received on the underlying interface whilst ARP
+will happen from the VMAC interface.
+
+You may also need to tweak your physical interfaces to play around with well
+known ARP issues. If you have issues, try the following configurations:
+
+1) Global configuration::
+
+    net.ipv4.conf.all.arp_ignore = 1
+    net.ipv4.conf.all.arp_announce = 1
+    net.ipv4.conf.all.arp_filter = 0
+
+2) Physical interface configuration
+
+For the physical ethernet interface running VRRP instance use::
+
+    net.ipv4.conf.eth0.arp_filter = 1
+
+3) VMAC interface
+
+consider the following VRRP configuration::
+
+    vrrp_instance instance1 {
+        state BACKUP
+        interface eth0
+        virtual_router_id 250
+        use_vmac
+            vmac_xmit_base         # Transmit VRRP adverts over physical interface
+        priority 150
+        advert_int 1
+        virtual_ipaddress {
+            10.0.0.254
+        }
+    }
+
+The ``use_vmac`` keyword will drive keepalived code to create a macvlan interface
+named *vrrp.250* (default internal paradigm is vrrp.{virtual_router_id}, you can
+override this naming by giving an argument to 'use_vmac' keyword, eg: use_vmac
+vrrp250).
+
+You then need to configure interface with::
+
+    net.ipv4.conf.vrrp.250.arp_filter = 0
+    net.ipv4.conf.vrrp.250.accept_local = 1 (this is needed for the address owner case)
+    net.ipv4.conf.vrrp.250.rp_filter = 0
+
+You can create notify_master script to automate this configuration step for you::
+
+    vrrp_instance instance1 {
+        state BACKUP
+        interface eth0
+        virtual_router_id 250
+        use_vmac
+        priority 150
+        advert_int 1
+        virtual_ipaddress {
+            10.0.0.254
+        }
+        notify_master "/usr/local/bin/vmac_tweak.sh vrrp.250"
+    }
diff --git a/tools/keepalived/doc/source/terminology.rst b/tools/keepalived/doc/source/terminology.rst
new file mode 100644
index 000000000..dad1f26ac
--- /dev/null
+++ b/tools/keepalived/doc/source/terminology.rst
@@ -0,0 +1,75 @@
+###########
+Terminology
+###########
+
+.. todo:: put image here
+
+LVS stands for “Linux Virtual Server“. LVS is a patched Linux kernel that adds a load balancing facility. For more information on LVS, please refer to the project homepage: http://www.linux-vs.org. LVS acts as a network bridge (using NAT) to load balance TCP/UDP stream. The LVS router components are:
+
+* WAN Interface: Ethernet Network Interface Controller that will be accessed by all the clients.
+* LAN Interface: Ethernet Network Interface Controller to manage all the load balanced servers.
+* Linux kernel: The kernel is patched with the latest LVS and is used as a router OS.
+
+In this document, we will use the following keywords:
+
+LVS Component
+*************
+
+.. glossary::
+
+    VIP
+        The Virtual IP is the IP address that will be accessed by all the
+        clients. The clients only access this IP address.
+
+    Real server
+        A real server hosts the application accessed by client requests.
+        WEB SERVER 1 & WEB SERVER 2 in our synopsis.
+
+    Server pool
+        A farm of real servers.
+
+    Virtual server
+        The access point to a Server pool.
+
+    Virtual Service
+        A TCP/UDP service associated with the VIP.
+
+VRRP Component
+**************
+
+.. glossary::
+
+    VRRP
+        The protocol implemented for the directors’ failover/virtualization.
+
+    IP Address owner
+        The VRRP Instance that has the IP address(es) as real interface
+        address(es). This is the VRRP Instance that, when up, will respond to
+        packets addressed to one of these IP address(es) for ICMP, TCP
+        connections, ...
+
+    MASTER state
+        VRRP Instance state when it is assuming the responsibility of forwarding
+        packets sent to the IP address(es) associated with the VRRP Instance.
+        This state is illustrated on “Case study: Failover� by a red line.
+
+    BACKUP state
+        VRRP Instance state when it is capable of forwarding packets in the
+        event that the current VRRP Instance MASTER fails.
+
+    Real Load Balancer
+        An LVS director running one or many VRRP Instances.
+
+    Virtual Load balancer
+        A set of Real Load balancers.
+
+    Synchronized Instance
+        VRRP Instance with which we want to be synchronized. This provides
+        VRRP Instance monitoring.
+
+    Advertisement
+        The name of a simple VRRPv2 packet sent to a set of VRRP Instances
+        while in the MASTER state.
+
+.. todo::
+   Define RIP, DIP, Director, IPVS
diff --git a/tools/keepalived/doc/source/todo.rst b/tools/keepalived/doc/source/todo.rst
new file mode 100644
index 000000000..1fda92fb2
--- /dev/null
+++ b/tools/keepalived/doc/source/todo.rst
@@ -0,0 +1,7 @@
+#########
+TODO List
+#########
+
+.. todolist::
+
+
diff --git a/tools/keepalived/doc/source/tools/pydoctheme/static/pydoctheme.css b/tools/keepalived/doc/source/tools/pydoctheme/static/pydoctheme.css
new file mode 100644
index 000000000..50835bb92
--- /dev/null
+++ b/tools/keepalived/doc/source/tools/pydoctheme/static/pydoctheme.css
@@ -0,0 +1,178 @@
+@import url("default.css");
+
+body {
+    background-color: white;
+    margin-left: 1em;
+    margin-right: 1em;
+}
+
+div.related {
+    margin-bottom: 1.2em;
+    padding: 0.5em 0;
+    border-top: 1px solid #ccc;
+    margin-top: 0.5em;
+}
+
+div.related a:hover {
+    color: #0095C4;
+}
+
+div.related:first-child {
+    border-top: 0;
+    border-bottom: 1px solid #ccc;
+}
+
+div.sphinxsidebar {
+    background-color: #eeeeee;
+    border-radius: 5px;
+    line-height: 130%;
+    font-size: smaller;
+}
+
+div.sphinxsidebar h3, div.sphinxsidebar h4 {
+    margin-top: 1.5em;
+}
+
+div.sphinxsidebarwrapper > h3:first-child {
+    margin-top: 0.2em;
+}
+
+div.sphinxsidebarwrapper > ul > li > ul > li {
+    margin-bottom: 0.4em;
+}
+
+div.sphinxsidebar a:hover {
+    color: #0095C4;
+}
+
+div.sphinxsidebar input {
+    font-family: 'Lucida Grande',Arial,sans-serif;
+    border: 1px solid #999999;
+    font-size: smaller;
+    border-radius: 3px;
+}
+
+div.sphinxsidebar input[type=text] {
+    max-width: 150px;
+}
+
+div.body {
+    padding: 0 0 0 1.2em;
+}
+
+div.body p {
+    line-height: 140%;
+}
+
+div.body h1, div.body h2, div.body h3, div.body h4, div.body h5, div.body h6 {
+    margin: 0;
+    border: 0;
+    padding: 0.3em 0;
+}
+
+div.body hr {
+    border: 0;
+    background-color: #ccc;
+    height: 1px;
+}
+
+div.body pre {
+    border-radius: 3px;
+    border: 1px solid #ac9;
+}
+
+div.body div.admonition, div.body div.impl-detail {
+    border-radius: 3px;
+}
+
+div.body div.impl-detail > p {
+    margin: 0;
+}
+
+div.body div.seealso {
+    border: 1px solid #dddd66;
+}
+
+div.body a {
+    color: #0072aa;
+}
+
+div.body a:visited {
+    color: #6363bb;
+}
+
+div.body a:hover {
+    color: #00B0E4;
+}
+
+tt, code, pre {
+    font-family: monospace, sans-serif;
+    font-size: 96.5%;
+}
+
+div.body tt, div.body code {
+    border-radius: 3px;
+}
+
+div.body tt.descname, div.body code.descname {
+    font-size: 120%;
+}
+
+div.body tt.xref, div.body a tt, div.body code.xref, div.body a code {
+    font-weight: normal;
+}
+
+.deprecated {
+    border-radius: 3px;
+}
+
+table.docutils {
+    border: 1px solid #ddd;
+    min-width: 20%;
+    border-radius: 3px;
+    margin-top: 10px;
+    margin-bottom: 10px;
+}
+
+table.docutils td, table.docutils th {
+    border: 1px solid #ddd !important;
+    border-radius: 3px;
+}
+
+table p, table li {
+    text-align: left !important;
+}
+
+table.docutils th {
+    background-color: #eee;
+    padding: 0.3em 0.5em;
+}
+
+table.docutils td {
+    background-color: white;
+    padding: 0.3em 0.5em;
+}
+
+table.footnote, table.footnote td {
+    border: 0 !important;
+}
+
+div.footer {
+    line-height: 150%;
+    margin-top: -2em;
+    text-align: right;
+    width: auto;
+    margin-right: 10px;
+}
+
+div.footer a:hover {
+    color: #0095C4;
+}
+
+.refcount {
+    color: #060;
+}
+
+.stableabi {
+    color: #229;
+}
diff --git a/tools/keepalived/doc/source/tools/pydoctheme/theme.conf b/tools/keepalived/doc/source/tools/pydoctheme/theme.conf
new file mode 100644
index 000000000..0c4388167
--- /dev/null
+++ b/tools/keepalived/doc/source/tools/pydoctheme/theme.conf
@@ -0,0 +1,23 @@
+[theme]
+inherit = default
+stylesheet = pydoctheme.css
+pygments_style = sphinx
+
+[options]
+bodyfont = 'Lucida Grande', Arial, sans-serif
+headfont = 'Lucida Grande', Arial, sans-serif
+footerbgcolor = white
+footertextcolor = #555555
+relbarbgcolor = white
+relbartextcolor = #666666
+relbarlinkcolor = #444444
+sidebarbgcolor = white
+sidebartextcolor = #444444
+sidebarlinkcolor = #444444
+bgcolor = white
+textcolor = #222222
+linkcolor = #0090c0
+visitedlinkcolor = #00608f
+headtextcolor = #1a1a1a
+headbgcolor = white
+headlinkcolor = #aaaaaa
diff --git a/tools/keepalived/docker/keepalived.conf b/tools/keepalived/docker/keepalived.conf
new file mode 100644
index 000000000..aece04ca5
--- /dev/null
+++ b/tools/keepalived/docker/keepalived.conf
@@ -0,0 +1,10 @@
+vrrp_instance VI_1 {
+    interface eth0
+    state BACKUP
+    virtual_router_id 127
+    priority 100
+
+    virtual_ipaddress {
+        10.247.254.2
+    }
+}
diff --git a/tools/keepalived/genhash/.gitignore b/tools/keepalived/genhash/.gitignore
new file mode 100644
index 000000000..00a3b2f1f
--- /dev/null
+++ b/tools/keepalived/genhash/.gitignore
@@ -0,0 +1 @@
+genhash
diff --git a/tools/keepalived/genhash/INSTALL b/tools/keepalived/genhash/INSTALL
index 3ed72dd63..7c2486f22 100644
--- a/tools/keepalived/genhash/INSTALL
+++ b/tools/keepalived/genhash/INSTALL
@@ -40,7 +40,7 @@ Utilisation
   We want to generate a MD5SUM over the server root url (/).
   To proceed, simply use :
 
-  [user@lvs]$ genhash -s 192.168.200.10 -p 80 -u / 
+  [user@lvs]$ genhash -s 192.168.200.10 -p 80 -u /
   -----------------------[    HTTP Header Buffer    ]-----------------------
   0000  48 54 54 50 2f 31 2e 31 - 20 32 30 30 20 4f 4b 0d   HTTP/1.1 200 OK.
   0010  0a 44 61 74 65 3a 20 57 - 65 64 2c 20 32 38 20 4e   .Date: Wed, 28 N
@@ -62,7 +62,7 @@ Utilisation
 
   Genhash can generate hash values over SSL content. Using the same sample
   we will obtain :
-  [user@lvs]$ genhash -S -s 192.168.200.10 -p 443 -u / 
+  [user@lvs]$ genhash -S -s 192.168.200.10 -p 443 -u /
   -----------------------[    HTTP Header Buffer    ]-----------------------
   0000  48 54 54 50 2f 31 2e 31 - 20 32 30 30 20 4f 4b 0d   HTTP/1.1 200 OK.
   0010  0a 44 61 74 65 3a 20 57 - 65 64 2c 20 32 38 20 4e   .Date: Wed, 28 N
diff --git a/tools/keepalived/genhash/Makefile.am b/tools/keepalived/genhash/Makefile.am
new file mode 100644
index 000000000..9aa37efd4
--- /dev/null
+++ b/tools/keepalived/genhash/Makefile.am
@@ -0,0 +1,22 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+AM_CPPFLAGS		= $(KA_CPPFLAGS) $(DEBUG_CPPFLAGS)
+AM_CFLAGS		= $(KA_CFLAGS) $(DEBUG_CFLAGS)
+AM_LDFLAGS		= $(KA_LDFLAGS) $(DEBUG_LDFLAGS)
+# AM_LIBTOOLFLAGS	= $(KA_LIBTOOLFLAGS)
+
+bin_PROGRAMS		= genhash
+AM_CPPFLAGS		+= -I$(srcdir)/../lib
+
+genhash_SOURCES		= main.c sock.c layer4.c http.c ssl.c
+genhash_LDADD		= ../lib/liblib.a $(KA_LIBS) $(GENHASH_LIBS)
+
+noinst_HEADERS		= $(srcdir)/include/*.h
+
+EXTRA_DIST		= AUTHOR
+
+MAINTAINERCLEANFILES	= @MAINTAINERCLEANFILES@
diff --git a/tools/keepalived/genhash/Makefile.in b/tools/keepalived/genhash/Makefile.in
index d41b39275..d9eecf2c2 100644
--- a/tools/keepalived/genhash/Makefile.in
+++ b/tools/keepalived/genhash/Makefile.in
@@ -1,65 +1,598 @@
-# Makefile.in
-#
-# Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+# Makefile.in generated by automake 1.13.4 from Makefile.am.
+# @configure_input@
 
-EXEC = genhash
-BIN  = ../bin
+# Copyright (C) 1994-2013 Free Software Foundation, Inc.
+
+# This Makefile.in is free software; the Free Software Foundation
+# gives unlimited permission to copy and/or distribute it,
+# with or without modifications, as long as this notice is preserved.
+
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
+# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
+# PARTICULAR PURPOSE.
+
+@SET_MAKE@
+
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
 
-prefix      = @prefix@
-exec_prefix = @exec_prefix@
-bindir      = @bindir@
-mandir      = @mandir@
-datarootdir = @datarootdir@
 
+VPATH = @srcdir@
+am__is_gnu_make = test -n '$(MAKEFILE_LIST)' && test -n '$(MAKELEVEL)'
+am__make_running_with_option = \
+  case $${target_option-} in \
+      ?) ;; \
+      *) echo "am__make_running_with_option: internal error: invalid" \
+              "target option '$${target_option-}' specified" >&2; \
+         exit 1;; \
+  esac; \
+  has_opt=no; \
+  sane_makeflags=$$MAKEFLAGS; \
+  if $(am__is_gnu_make); then \
+    sane_makeflags=$$MFLAGS; \
+  else \
+    case $$MAKEFLAGS in \
+      *\\[\ \	]*) \
+        bs=\\; \
+        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
+          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
+    esac; \
+  fi; \
+  skip_next=no; \
+  strip_trailopt () \
+  { \
+    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
+  }; \
+  for flg in $$sane_makeflags; do \
+    test $$skip_next = yes && { skip_next=no; continue; }; \
+    case $$flg in \
+      *=*|--*) continue;; \
+        -*I) strip_trailopt 'I'; skip_next=yes;; \
+      -*I?*) strip_trailopt 'I';; \
+        -*O) strip_trailopt 'O'; skip_next=yes;; \
+      -*O?*) strip_trailopt 'O';; \
+        -*l) strip_trailopt 'l'; skip_next=yes;; \
+      -*l?*) strip_trailopt 'l';; \
+      -[dEDm]) skip_next=yes;; \
+      -[JT]) skip_next=yes;; \
+    esac; \
+    case $$flg in \
+      *$$target_option*) has_opt=yes; break;; \
+    esac; \
+  done; \
+  test $$has_opt = yes
+am__make_dryrun = (target_option=n; $(am__make_running_with_option))
+am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
+pkgdatadir = $(datadir)/@PACKAGE@
+pkgincludedir = $(includedir)/@PACKAGE@
+pkglibdir = $(libdir)/@PACKAGE@
+pkglibexecdir = $(libexecdir)/@PACKAGE@
+am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
+install_sh_DATA = $(install_sh) -c -m 644
+install_sh_PROGRAM = $(install_sh) -c
+install_sh_SCRIPT = $(install_sh) -c
+INSTALL_HEADER = $(INSTALL_DATA)
+transform = $(program_transform_name)
+NORMAL_INSTALL = :
+PRE_INSTALL = :
+POST_INSTALL = :
+NORMAL_UNINSTALL = :
+PRE_UNINSTALL = :
+POST_UNINSTALL = :
+bin_PROGRAMS = genhash$(EXEEXT)
+subdir = genhash
+DIST_COMMON = $(srcdir)/Makefile.in $(srcdir)/Makefile.am \
+	$(top_srcdir)/depcomp $(noinst_HEADERS) COPYING ChangeLog \
+	INSTALL README
+ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
+am__aclocal_m4_deps = $(top_srcdir)/configure.ac
+am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
+	$(ACLOCAL_M4)
+mkinstalldirs = $(install_sh) -d
+CONFIG_HEADER = $(top_builddir)/lib/config.h \
+	$(top_builddir)/lib/config_warnings.h
+CONFIG_CLEAN_FILES =
+CONFIG_CLEAN_VPATH_FILES =
+am__installdirs = "$(DESTDIR)$(bindir)"
+PROGRAMS = $(bin_PROGRAMS)
+am_genhash_OBJECTS = main.$(OBJEXT) sock.$(OBJEXT) layer4.$(OBJEXT) \
+	http.$(OBJEXT) ssl.$(OBJEXT)
+genhash_OBJECTS = $(am_genhash_OBJECTS)
+am__DEPENDENCIES_1 =
+genhash_DEPENDENCIES = ../lib/liblib.a $(am__DEPENDENCIES_1) \
+	$(am__DEPENDENCIES_1)
+AM_V_P = $(am__v_P_@AM_V@)
+am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
+am__v_P_0 = false
+am__v_P_1 = :
+AM_V_GEN = $(am__v_GEN_@AM_V@)
+am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
+am__v_GEN_0 = @echo "  GEN     " $@;
+am__v_GEN_1 = 
+AM_V_at = $(am__v_at_@AM_V@)
+am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
+am__v_at_0 = @
+am__v_at_1 = 
+DEFAULT_INCLUDES = -I.@am__isrc@ -I$(top_builddir)/lib
+depcomp = $(SHELL) $(top_srcdir)/depcomp
+am__depfiles_maybe = depfiles
+am__mv = mv -f
+COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \
+	$(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
+AM_V_CC = $(am__v_CC_@AM_V@)
+am__v_CC_ = $(am__v_CC_@AM_DEFAULT_V@)
+am__v_CC_0 = @echo "  CC      " $@;
+am__v_CC_1 = 
+CCLD = $(CC)
+LINK = $(CCLD) $(AM_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@
+AM_V_CCLD = $(am__v_CCLD_@AM_V@)
+am__v_CCLD_ = $(am__v_CCLD_@AM_DEFAULT_V@)
+am__v_CCLD_0 = @echo "  CCLD    " $@;
+am__v_CCLD_1 = 
+SOURCES = $(genhash_SOURCES)
+DIST_SOURCES = $(genhash_SOURCES)
+am__can_run_installinfo = \
+  case $$AM_UPDATE_INFO_DIR in \
+    n|no|NO) false;; \
+    *) (install-info --version) >/dev/null 2>&1;; \
+  esac
+HEADERS = $(noinst_HEADERS)
+am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
+# Read a list of newline-separated strings from the standard input,
+# and print each of them once, without duplicates.  Input order is
+# *not* preserved.
+am__uniquify_input = $(AWK) '\
+  BEGIN { nonempty = 0; } \
+  { items[$$0] = 1; nonempty = 1; } \
+  END { if (nonempty) { for (i in items) print i; }; } \
+'
+# Make sure the list of sources is unique.  This is necessary because,
+# e.g., the same source file might be shared among _SOURCES variables
+# for different programs/libraries.
+am__define_uniq_tagged_files = \
+  list='$(am__tagged_files)'; \
+  unique=`for i in $$list; do \
+    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
+  done | $(am__uniquify_input)`
+ETAGS = etags
+CTAGS = ctags
+DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
+ACLOCAL = @ACLOCAL@
+AMTAR = @AMTAR@
+AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
+AR = @AR@
+ARFLAGS = @ARFLAGS@
+AUTOCONF = @AUTOCONF@
+AUTOHEADER = @AUTOHEADER@
+AUTOMAKE = @AUTOMAKE@
+AWK = @AWK@
 CC = @CC@
+CCDEPMODE = @CCDEPMODE@
+CFLAGS = @CFLAGS@
+CPP = @CPP@
+CPPFLAGS = @CPPFLAGS@
+CYGPATH_W = @CYGPATH_W@
+DEFAULT_CONFIG_FILE = @DEFAULT_CONFIG_FILE@
+DEFS = @DEFS@
+DEPDIR = @DEPDIR@
+ECHO_C = @ECHO_C@
+ECHO_N = @ECHO_N@
+ECHO_T = @ECHO_T@
+EGREP = @EGREP@
+EXEEXT = @EXEEXT@
+GENHASH_LIBS = @GENHASH_LIBS@
+GREP = @GREP@
+HAVE_RPM = @HAVE_RPM@
+HAVE_RPMBUILD = @HAVE_RPMBUILD@
+HAVE_SPHINX_BUILD = @HAVE_SPHINX_BUILD@
+INSTALL = @INSTALL@
+INSTALL_DATA = @INSTALL_DATA@
+INSTALL_PROGRAM = @INSTALL_PROGRAM@
+INSTALL_SCRIPT = @INSTALL_SCRIPT@
+INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
+KA_CFLAGS = @KA_CFLAGS@
+KA_CPPFLAGS = @KA_CPPFLAGS@
+KA_LDFLAGS = @KA_LDFLAGS@
+KA_LIBS = @KA_LIBS@
+LDD = @LDD@
+LDFLAGS = @LDFLAGS@
+LIBOBJS = @LIBOBJS@
+LIBS = @LIBS@
+LN_S = @LN_S@
+LTLIBOBJS = @LTLIBOBJS@
+MAINTAINERCLEANFILES = @MAINTAINERCLEANFILES@
+MAKEINFO = @MAKEINFO@
+MKDIR_P = @MKDIR_P@
+NETSNMP_CONFIG = @NETSNMP_CONFIG@
+OBJEXT = @OBJEXT@
+PACKAGE = @PACKAGE@
+PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
+PACKAGE_NAME = @PACKAGE_NAME@
+PACKAGE_STRING = @PACKAGE_STRING@
+PACKAGE_TARNAME = @PACKAGE_TARNAME@
+PACKAGE_URL = @PACKAGE_URL@
+PACKAGE_VERSION = @PACKAGE_VERSION@
+PATH_SEPARATOR = @PATH_SEPARATOR@
+PID_DIR = @PID_DIR@
+PKG_CONFIG = @PKG_CONFIG@
+PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
+PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
+RANLIB = @RANLIB@
+SED = @SED@
+SET_MAKE = @SET_MAKE@
+SHELL = @SHELL@
+SNMP_SERVICE = @SNMP_SERVICE@
+SPHINXBUILDNAME = @SPHINXBUILDNAME@
 STRIP = @STRIP@
-INCLUDES = -I../lib
-CFLAGS = @CFLAGS@ @CPPFLAGS@ $(INCLUDES) \
-	 -Wall -Wunused -Wstrict-prototypes
-LDFLAGS = @LIBS@ @LDFLAGS@
-
-OBJS = main.o sock.o layer4.o http.o ssl.o
-LIB_OBJS = ../lib/timer.o ../lib/scheduler.o ../lib/memory.o ../lib/list.o \
-	   ../lib/utils.o ../lib/html.o ../lib/signals.o ../lib/logger.o
-
-all:	$(BIN)/$(EXEC)
-	$(STRIP) $(BIN)/$(EXEC)
-	@echo ""
-	@echo "Make complete"
-
-$(BIN)/$(EXEC): $(LIB_OBJS) $(OBJS)
-	@set -e; \
-	echo "Building $(BIN)/$(EXEC)" && \
-	$(CC) -o $(BIN)/$(EXEC) $(LIB_OBJS) $(OBJS) $(LDFLAGS)
-
-clean:
-	rm -f core *.o
-
-distclean: clean
-	rm -f Makefile $(BIN)/$(EXEC)
-
-uninstall:
-	rm -f $(DESTDIR)$(bindir)/$(EXEC)
-	rm -f $(DESTDIR)$(mandir)/man1/genhash.1
-
-install:
-	install -d $(DESTDIR)$(bindir)
-	install -m 755 $(BIN)/$(EXEC) $(DESTDIR)$(bindir)/
-	install -d $(DESTDIR)$(mandir)/man1
-	install -m 644 ../doc/man/man1/genhash.1 $(DESTDIR)$(mandir)/man1
-
-mrproper: clean distclean
-	rm -f config.*
-
-# Code dependencies
-
-main.o: main.c main.h ../lib/utils.h sock.h ../lib/timer.h \
-	http.h ssl.h ../lib/scheduler.h ../lib/memory.h
-sock.o: sock.c sock.h ../lib/utils.h layer4.h ssl.h main.h \
-	../lib/memory.h
-layer4.o: layer4.c layer4.h ../lib/scheduler.h ../lib/utils.h \
-	main.h ssl.h
-http.o: http.c http.h sock.h ../lib/scheduler.h ../lib/utils.h \
-	layer4.h main.h ../lib/html.h ../lib/timer.h ../lib/scheduler.h \
-	../lib/memory.h
-ssl.o: ssl.c ssl.h http.h main.h ../lib/utils.h ../lib/html.h
+VERSION = @VERSION@
+abs_builddir = @abs_builddir@
+abs_srcdir = @abs_srcdir@
+abs_top_builddir = @abs_top_builddir@
+abs_top_srcdir = @abs_top_srcdir@
+ac_ct_AR = @ac_ct_AR@
+ac_ct_CC = @ac_ct_CC@
+am__include = @am__include@
+am__leading_dot = @am__leading_dot@
+am__quote = @am__quote@
+am__tar = @am__tar@
+am__untar = @am__untar@
+bindir = @bindir@
+build_alias = @build_alias@
+builddir = @builddir@
+datadir = @datadir@
+datarootdir = @datarootdir@
+docdir = @docdir@
+dvidir = @dvidir@
+exec_prefix = @exec_prefix@
+host_alias = @host_alias@
+htmldir = @htmldir@
+includedir = @includedir@
+infodir = @infodir@
+install_sh = @install_sh@
+libdir = @libdir@
+libexecdir = @libexecdir@
+localedir = @localedir@
+localstatedir = @localstatedir@
+mandir = @mandir@
+mkdir_p = @mkdir_p@
+oldincludedir = @oldincludedir@
+pdfdir = @pdfdir@
+prefix = @prefix@
+program_transform_name = @program_transform_name@
+psdir = @psdir@
+sbindir = @sbindir@
+sharedstatedir = @sharedstatedir@
+srcdir = @srcdir@
+sysconfdir = @sysconfdir@
+systemdsystemunitdir = @systemdsystemunitdir@
+target_alias = @target_alias@
+top_build_prefix = @top_build_prefix@
+top_builddir = @top_builddir@
+top_srcdir = @top_srcdir@
+AM_CPPFLAGS = $(KA_CPPFLAGS) $(DEBUG_CPPFLAGS) -I$(srcdir)/../lib
+AM_CFLAGS = $(KA_CFLAGS) $(DEBUG_CFLAGS)
+AM_LDFLAGS = $(KA_LDFLAGS) $(DEBUG_LDFLAGS)
+genhash_SOURCES = main.c sock.c layer4.c http.c ssl.c
+genhash_LDADD = ../lib/liblib.a $(KA_LIBS) $(GENHASH_LIBS)
+noinst_HEADERS = $(srcdir)/include/*.h
+EXTRA_DIST = AUTHOR
+all: all-am
+
+.SUFFIXES:
+.SUFFIXES: .c .o .obj
+$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
+	@for dep in $?; do \
+	  case '$(am__configure_deps)' in \
+	    *$$dep*) \
+	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
+	        && { if test -f $@; then exit 0; else break; fi; }; \
+	      exit 1;; \
+	  esac; \
+	done; \
+	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign genhash/Makefile'; \
+	$(am__cd) $(top_srcdir) && \
+	  $(AUTOMAKE) --foreign genhash/Makefile
+.PRECIOUS: Makefile
+Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
+	@case '$?' in \
+	  *config.status*) \
+	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
+	  *) \
+	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe)'; \
+	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe);; \
+	esac;
+
+$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+
+$(top_srcdir)/configure:  $(am__configure_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+$(am__aclocal_m4_deps):
+install-binPROGRAMS: $(bin_PROGRAMS)
+	@$(NORMAL_INSTALL)
+	@list='$(bin_PROGRAMS)'; test -n "$(bindir)" || list=; \
+	if test -n "$$list"; then \
+	  echo " $(MKDIR_P) '$(DESTDIR)$(bindir)'"; \
+	  $(MKDIR_P) "$(DESTDIR)$(bindir)" || exit 1; \
+	fi; \
+	for p in $$list; do echo "$$p $$p"; done | \
+	sed 's/$(EXEEXT)$$//' | \
+	while read p p1; do if test -f $$p \
+	  ; then echo "$$p"; echo "$$p"; else :; fi; \
+	done | \
+	sed -e 'p;s,.*/,,;n;h' \
+	    -e 's|.*|.|' \
+	    -e 'p;x;s,.*/,,;s/$(EXEEXT)$$//;$(transform);s/$$/$(EXEEXT)/' | \
+	sed 'N;N;N;s,\n, ,g' | \
+	$(AWK) 'BEGIN { files["."] = ""; dirs["."] = 1 } \
+	  { d=$$3; if (dirs[d] != 1) { print "d", d; dirs[d] = 1 } \
+	    if ($$2 == $$4) files[d] = files[d] " " $$1; \
+	    else { print "f", $$3 "/" $$4, $$1; } } \
+	  END { for (d in files) print "f", d, files[d] }' | \
+	while read type dir files; do \
+	    if test "$$dir" = .; then dir=; else dir=/$$dir; fi; \
+	    test -z "$$files" || { \
+	      echo " $(INSTALL_PROGRAM_ENV) $(INSTALL_PROGRAM) $$files '$(DESTDIR)$(bindir)$$dir'"; \
+	      $(INSTALL_PROGRAM_ENV) $(INSTALL_PROGRAM) $$files "$(DESTDIR)$(bindir)$$dir" || exit $$?; \
+	    } \
+	; done
+
+uninstall-binPROGRAMS:
+	@$(NORMAL_UNINSTALL)
+	@list='$(bin_PROGRAMS)'; test -n "$(bindir)" || list=; \
+	files=`for p in $$list; do echo "$$p"; done | \
+	  sed -e 'h;s,^.*/,,;s/$(EXEEXT)$$//;$(transform)' \
+	      -e 's/$$/$(EXEEXT)/' \
+	`; \
+	test -n "$$list" || exit 0; \
+	echo " ( cd '$(DESTDIR)$(bindir)' && rm -f" $$files ")"; \
+	cd "$(DESTDIR)$(bindir)" && rm -f $$files
+
+clean-binPROGRAMS:
+	-test -z "$(bin_PROGRAMS)" || rm -f $(bin_PROGRAMS)
+
+genhash$(EXEEXT): $(genhash_OBJECTS) $(genhash_DEPENDENCIES) $(EXTRA_genhash_DEPENDENCIES) 
+	@rm -f genhash$(EXEEXT)
+	$(AM_V_CCLD)$(LINK) $(genhash_OBJECTS) $(genhash_LDADD) $(LIBS)
+
+mostlyclean-compile:
+	-rm -f *.$(OBJEXT)
+
+distclean-compile:
+	-rm -f *.tab.c
+
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/http.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/layer4.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/main.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/sock.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/ssl.Po@am__quote@
+
+.c.o:
+@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
+@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c $<
+
+.c.obj:
+@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ `$(CYGPATH_W) '$<'`
+@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c `$(CYGPATH_W) '$<'`
+
+ID: $(am__tagged_files)
+	$(am__define_uniq_tagged_files); mkid -fID $$unique
+tags: tags-am
+TAGS: tags
+
+tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	set x; \
+	here=`pwd`; \
+	$(am__define_uniq_tagged_files); \
+	shift; \
+	if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
+	  test -n "$$unique" || unique=$$empty_fix; \
+	  if test $$# -gt 0; then \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      "$$@" $$unique; \
+	  else \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      $$unique; \
+	  fi; \
+	fi
+ctags: ctags-am
+
+CTAGS: ctags
+ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	$(am__define_uniq_tagged_files); \
+	test -z "$(CTAGS_ARGS)$$unique" \
+	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
+	     $$unique
+
+GTAGS:
+	here=`$(am__cd) $(top_builddir) && pwd` \
+	  && $(am__cd) $(top_srcdir) \
+	  && gtags -i $(GTAGS_ARGS) "$$here"
+cscopelist: cscopelist-am
+
+cscopelist-am: $(am__tagged_files)
+	list='$(am__tagged_files)'; \
+	case "$(srcdir)" in \
+	  [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
+	  *) sdir=$(subdir)/$(srcdir) ;; \
+	esac; \
+	for i in $$list; do \
+	  if test -f "$$i"; then \
+	    echo "$(subdir)/$$i"; \
+	  else \
+	    echo "$$sdir/$$i"; \
+	  fi; \
+	done >> $(top_builddir)/cscope.files
+
+distclean-tags:
+	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
+
+distdir: $(DISTFILES)
+	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	list='$(DISTFILES)'; \
+	  dist_files=`for file in $$list; do echo $$file; done | \
+	  sed -e "s|^$$srcdirstrip/||;t" \
+	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
+	case $$dist_files in \
+	  */*) $(MKDIR_P) `echo "$$dist_files" | \
+			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
+			   sort -u` ;; \
+	esac; \
+	for file in $$dist_files; do \
+	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
+	  if test -d $$d/$$file; then \
+	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
+	    if test -d "$(distdir)/$$file"; then \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
+	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
+	  else \
+	    test -f "$(distdir)/$$file" \
+	    || cp -p $$d/$$file "$(distdir)/$$file" \
+	    || exit 1; \
+	  fi; \
+	done
+check-am: all-am
+check: check-am
+all-am: Makefile $(PROGRAMS) $(HEADERS)
+installdirs:
+	for dir in "$(DESTDIR)$(bindir)"; do \
+	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
+	done
+install: install-am
+install-exec: install-exec-am
+install-data: install-data-am
+uninstall: uninstall-am
+
+install-am: all-am
+	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
+
+installcheck: installcheck-am
+install-strip:
+	if test -z '$(STRIP)'; then \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	      install; \
+	else \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
+	fi
+mostlyclean-generic:
+
+clean-generic:
+
+distclean-generic:
+	-test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES)
+	-test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES)
+
+maintainer-clean-generic:
+	@echo "This command is intended for maintainers to use"
+	@echo "it deletes files that may require special tools to rebuild."
+	-test -z "$(MAINTAINERCLEANFILES)" || rm -f $(MAINTAINERCLEANFILES)
+clean: clean-am
+
+clean-am: clean-binPROGRAMS clean-generic mostlyclean-am
+
+distclean: distclean-am
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+distclean-am: clean-am distclean-compile distclean-generic \
+	distclean-tags
+
+dvi: dvi-am
+
+dvi-am:
+
+html: html-am
+
+html-am:
+
+info: info-am
+
+info-am:
+
+install-data-am:
+
+install-dvi: install-dvi-am
+
+install-dvi-am:
+
+install-exec-am: install-binPROGRAMS
+
+install-html: install-html-am
+
+install-html-am:
+
+install-info: install-info-am
+
+install-info-am:
+
+install-man:
+
+install-pdf: install-pdf-am
+
+install-pdf-am:
+
+install-ps: install-ps-am
+
+install-ps-am:
+
+installcheck-am:
+
+maintainer-clean: maintainer-clean-am
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+maintainer-clean-am: distclean-am maintainer-clean-generic
+
+mostlyclean: mostlyclean-am
+
+mostlyclean-am: mostlyclean-compile mostlyclean-generic
+
+pdf: pdf-am
+
+pdf-am:
+
+ps: ps-am
+
+ps-am:
+
+uninstall-am: uninstall-binPROGRAMS
+
+.MAKE: install-am install-strip
+
+.PHONY: CTAGS GTAGS TAGS all all-am check check-am clean \
+	clean-binPROGRAMS clean-generic cscopelist-am ctags ctags-am \
+	distclean distclean-compile distclean-generic distclean-tags \
+	distdir dvi dvi-am html html-am info info-am install \
+	install-am install-binPROGRAMS install-data install-data-am \
+	install-dvi install-dvi-am install-exec install-exec-am \
+	install-html install-html-am install-info install-info-am \
+	install-man install-pdf install-pdf-am install-ps \
+	install-ps-am install-strip installcheck installcheck-am \
+	installdirs maintainer-clean maintainer-clean-generic \
+	mostlyclean mostlyclean-compile mostlyclean-generic pdf pdf-am \
+	ps ps-am tags tags-am uninstall uninstall-am \
+	uninstall-binPROGRAMS
+
+
+# Tell versions [3.59,3.63) of GNU make to not export all variables.
+# Otherwise a system limit (for SysV at least) may be exceeded.
+.NOEXPORT:
diff --git a/tools/keepalived/genhash/README b/tools/keepalived/genhash/README
index 263baf3f9..65f2287dc 100644
--- a/tools/keepalived/genhash/README
+++ b/tools/keepalived/genhash/README
@@ -1,8 +1,8 @@
 The main goal of the keepalived project is to add a strong & robust
 keepalive facility to the Linux Virtual Server project.
 It implements a multilayer TCP/IP stack checks. Keepalived implements
-a framework based on three family checks : Layer3, Layer4 & Layer5. 
-This framework gives the daemon the ability of checking a LVS server 
+a framework based on three family checks : Layer3, Layer4 & Layer5.
+This framework gives the daemon the ability of checking a LVS server
 pool states. Keepalived can be sumarize as a LVS driving daemon.
 
 To generate MD5SUM digest the this tool (genhash) is used.
diff --git a/tools/keepalived/genhash/http.c b/tools/keepalived/genhash/http.c
index 69a401e1b..2b98c47dd 100644
--- a/tools/keepalived/genhash/http.c
+++ b/tools/keepalived/genhash/http.c
@@ -5,8 +5,6 @@
  *
  * Part:        HTTP asynchronous engine.
  *
- * Version:     $Id: http.c,v 1.1.16 2009/02/14 03:25:07 acassen Exp $
- *
  * Authors:     Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -19,32 +17,56 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <errno.h>
+#include "config.h"
+
+/* system includes */
 #include <openssl/err.h>
-#include "memory.h"
-#include "http.h"
-#include "layer4.h"
-#include "main.h"
+
+/* keepalived includes */
 #include "utils.h"
 #include "html.h"
-#include "timer.h"
 
-/* 
+/* genhash includes */
+#include "include/http.h"
+#include "include/layer4.h"
+
+/* GET processing command */
+static const char *request_template =
+			"GET %s HTTP/1.%d\r\n"
+			"User-Agent: KeepAlive GenHash Client\r\n"
+			"%s"
+			"Host: %s%s\r\n\r\n";
+
+static const char *request_template_ipv6 =
+			"GET %s HTTP/1.%d\r\n"
+			"User-Agent: KeepAlive GenHash Client\r\n"
+			"%s"
+			"Host: [%s]%s\r\n\r\n";
+
+/* Output delimiters */
+#define DELIM_BEGIN		"-----------------------["
+#define DELIM_END		"]-----------------------\n"
+#define HTTP_HEADER_HEXA	DELIM_BEGIN"    HTTP Header Buffer    "DELIM_END
+#define HTTP_HEADER_ASCII	DELIM_BEGIN" HTTP Header Ascii Buffer "DELIM_END
+#define HTML_HEADER_HEXA	DELIM_BEGIN"        HTML Buffer        "DELIM_END
+#define HTML_HASH		DELIM_BEGIN"    HTML hash resulting    "DELIM_END
+#define HTML_HASH_FINAL		DELIM_BEGIN" HTML hash final resulting "DELIM_END
+
+/*
  * The global design of this checker is the following :
- * 
+ *
  * - All the actions are done asynchronously.
  * - All the actions handle timeout connection.
  * - All the actions handle error from low layer to upper
  *   layers.
- * 
+ *
  * The global synopsis of the inter-thread-call is :
- *     
+ *
  *     http_request_thread (send SSL GET request)
- *            v
- *     http_response_thread (initialize read stream step)
+ *                v
  *         /             \
  *        /               \
  *       v                 v
@@ -63,7 +85,7 @@ const hash_t hashes[hash_guard] = {
 		"MD5",
 		"MD5SUM",
 	},
-#ifdef FEAT_SHA1
+#ifdef _WITH_SHA1_
 	[hash_sha1] = {
 		(hash_init_f) SHA1_Init,
 		(hash_update_f) SHA1_Update,
@@ -79,13 +101,14 @@ const hash_t hashes[hash_guard] = {
 #define HASH_LABEL(sock)	((sock)->hash->label)
 #define HASH_INIT(sock)		((sock)->hash->init(&(sock)->context))
 #define HASH_UPDATE(sock, buf, len) \
-	((sock)->hash->update(&(sock)->context, (buf), (len)))
+	if ((sock)->content_len == -1 || (sock)->rx_bytes < (sock)->content_len) \
+		((sock)->hash->update(&(sock)->context, (buf), (sock)->content_len == -1 || (sock)->content_len - (sock)->rx_bytes >= len ? len : (sock)->content_len - (sock)->rx_bytes))
 #define HASH_FINAL(sock, digest) \
 	((sock)->hash->final((digest), &(sock)->context))
 
 /* free allocated pieces */
 static void
-free_all(thread_t * thread)
+free_all(thread_ref_t thread)
 {
 	SOCK *sock_obj = THREAD_ARG(thread);
 
@@ -99,13 +122,13 @@ free_all(thread_t * thread)
 	 * Decrement the current global get number.
 	 * => free the reserved thread
 	 */
-	req->response_time = timer_tol(timer_now());
+	req->response_time = timer_long(timer_now());
 	thread_add_terminate_event(thread->master);
 }
 
 /* Simple epilog functions. */
 int
-epilog(thread_t * thread)
+epilog(thread_ref_t thread)
 {
 	DBG("Timeout on URL : [%s]\n", req->url);
 	free_all(thread);
@@ -114,12 +137,11 @@ epilog(thread_t * thread)
 
 /* Simple finalization function */
 int
-finalize(thread_t * thread)
+finalize(thread_ref_t thread)
 {
 	SOCK *sock_obj = THREAD_ARG(thread);
-
 	unsigned char digest_length = HASH_LENGTH(sock_obj);
-	unsigned char digest[digest_length];
+	unsigned char *digest = MALLOC(digest_length);
 	int i;
 
 	/* Compute final hash digest */
@@ -127,31 +149,59 @@ finalize(thread_t * thread)
 	if (req->verbose) {
 		printf("\n");
 		printf(HTML_HASH);
-		dump_buffer((char *) digest, digest_length);
+		dump_buffer((char *) digest, digest_length, stdout, 0);
 
 		printf(HTML_HASH_FINAL);
 	}
 	printf("%s = ", HASH_LABEL(sock_obj));
 	for (i = 0; i < digest_length; i++)
 		printf("%02x", digest[i]);
+	if (sock_obj->content_len != -1 && sock_obj->content_len != sock_obj->rx_bytes)
+		printf ("\nWARNING - Content-Length (%zd) does not match received bytes (%zd).", sock_obj->content_len, sock_obj->rx_bytes);
 	printf("\n\n");
 
 	DBG("Finalize : [%s]\n", req->url);
 	free_all(thread);
+	FREE(digest);
 	return 0;
 }
 
 /* Dump HTTP header */
 static void
-http_dump_header(char *buffer, int size)
+http_dump_header(char *buffer, size_t size)
 {
-	int r;
-
-	dump_buffer(buffer, size);
+	dump_buffer(buffer, size, stdout, 0);
 	printf(HTTP_HEADER_ASCII);
-	for (r = 0; r < size; r++)
-		printf("%c", buffer[r]);
-	printf("\n");
+	printf("%*s\n", (int)size, buffer);
+}
+
+static ssize_t
+find_content_len(char *buffer, size_t size)
+{
+	const char *content_len_str = "Content-Length:";
+	unsigned long content_len;
+	bool valid_len = false;
+	char sav_char = buffer[size];
+	char *p;
+	char *end;
+
+	buffer[size] = '\0';
+	p = strstr(buffer, content_len_str);
+	if (p &&
+	    (p == buffer || p[-1] == '\r' || p[-1] == '\n')) {
+		p += strlen(content_len_str);
+		content_len = strtoul(p, &end, 10);
+
+		/* Make sure we have read to the end of the line */
+		if (!*end || *end == '\r' || *end == '\n')
+			valid_len = true;
+	}
+	buffer[size] = sav_char;
+
+	if (valid_len)
+		return (ssize_t)content_len;
+
+	return -1;
 }
 
 /* Process incoming stream */
@@ -164,26 +214,29 @@ http_process_stream(SOCK * sock_obj, int r)
 	if (!sock_obj->extracted) {
 		if (req->verbose)
 			printf(HTTP_HEADER_HEXA);
-		if ((sock_obj->extracted = extract_html(sock_obj->buffer, sock_obj->size))) {
+		if ((sock_obj->extracted = extract_html(sock_obj->buffer, (size_t)sock_obj->size))) {
+			sock_obj->content_len =
+				find_content_len(sock_obj->buffer + (sock_obj->size - r),
+					 (size_t)((sock_obj->extracted - sock_obj->buffer) - (sock_obj->size - r)));
 			if (req->verbose)
 				http_dump_header(sock_obj->buffer + (sock_obj->size - r),
-						 (sock_obj->extracted - sock_obj->buffer)
-						 - (sock_obj->size - r));
-			r = sock_obj->size - (sock_obj->extracted - sock_obj->buffer);
+						 (size_t)((sock_obj->extracted - sock_obj->buffer) - (sock_obj->size - r)));
+			r = sock_obj->size - (int)(sock_obj->extracted - sock_obj->buffer);
 			if (r) {
 				if (req->verbose) {
 					printf(HTML_HEADER_HEXA);
-					dump_buffer(sock_obj->extracted, r);
+					dump_buffer(sock_obj->extracted, (size_t)r, stdout, 0);
 				}
-				memmove(sock_obj->buffer, sock_obj->extracted, r);
+				memmove(sock_obj->buffer, sock_obj->extracted, (size_t)r);
 				HASH_UPDATE(sock_obj, sock_obj->buffer, r);
+				sock_obj->rx_bytes += r;
 				r = 0;
 			}
 			sock_obj->size = r;
 		} else {
+			sock_obj->content_len = find_content_len(sock_obj->buffer + (sock_obj->size - r), (size_t)r);
 			if (req->verbose)
-				http_dump_header(sock_obj->buffer + (sock_obj->size - r),
-						 r);
+				http_dump_header(sock_obj->buffer + (sock_obj->size - r), (size_t)r);
 
 			/* minimize buffer using no 2*CR/LF found yet */
 			if (sock_obj->size > 4) {
@@ -194,8 +247,9 @@ http_process_stream(SOCK * sock_obj, int r)
 		}
 	} else if (sock_obj->size) {
 		if (req->verbose)
-			dump_buffer(sock_obj->buffer, r);
+			dump_buffer(sock_obj->buffer, (size_t)r, stdout, 0);
 		HASH_UPDATE(sock_obj, sock_obj->buffer, sock_obj->size);
+		sock_obj->rx_bytes += sock_obj->size;
 		sock_obj->size = 0;
 	}
 
@@ -203,15 +257,17 @@ http_process_stream(SOCK * sock_obj, int r)
 }
 
 /* Asynchronous HTTP stream reader */
-int
-http_read_thread(thread_t * thread)
+static int
+http_read_thread(thread_ref_t thread)
 {
 	SOCK *sock_obj = THREAD_ARG(thread);
-	int r = 0;
+	ssize_t r = 0;
 
 	/* Handle read timeout */
-	if (thread->type == THREAD_READ_TIMEOUT)
+	if (thread->type == THREAD_READ_TIMEOUT) {
+		exit_code = 1;
 		return epilog(thread);
+	}
 
 	/* read the HTTP stream */
 	r = MAX_BUFFER_LENGTH - sock_obj->size;
@@ -220,124 +276,87 @@ http_read_thread(thread_t * thread)
 		fprintf(stderr, "HTTP socket buffer overflow (not consumed)\n");
 		r = MAX_BUFFER_LENGTH;
 	}
-	memset(sock_obj->buffer + sock_obj->size, 0, r);
-	r = read(thread->u.fd, sock_obj->buffer + sock_obj->size, r);
-
-	DBG(" [l:%d,fd:%d]\n", r, sock_obj->fd);
-
-	if (r == -1 || r == 0) {	/* -1:error , 0:EOF */
-		if (r == -1) {
-			/* We have encourred a real read error */
-			DBG("Read error with server [%s]:%d: %s\n",
-			    req->ipaddress, ntohs(req->addr_port),
-			    strerror(errno));
-			return epilog(thread);
-		}
+	memset(sock_obj->buffer + sock_obj->size, 0, (size_t)r);
+	r = read(thread->u.f.fd, sock_obj->buffer + sock_obj->size, (size_t)r);
 
+	DBG(" [l:%zd,fd:%d]\n", r, sock_obj->fd);
+
+	if (r == 0) {		/* EOF */
 		/* All the HTTP stream has been parsed */
 		finalize(thread);
+	} else if (r == -1) {	/* error */
+		/* We have encountered a real read error */
+		DBG("Read error with server [%s]:%d: %s\n",
+		    req->ipaddress, ntohs(req->addr_port),
+		    strerror(errno));
+		exit_code = 1;
+		return epilog(thread);
 	} else {
 		/* Handle the response stream */
-		http_process_stream(sock_obj, r);
+		http_process_stream(sock_obj, (int)r);
 
 		/*
 		 * Register next http stream reader.
 		 * Register itself to not perturbe global I/O multiplexer.
 		 */
 		thread_add_read(thread->master, http_read_thread, sock_obj,
-				thread->u.fd, HTTP_CNX_TIMEOUT);
+				thread->u.f.fd, req->timeout, true);
 	}
 
 	return 0;
 }
 
-/*
- * Read get result from the remote web server.
- * Apply trigger check to this result.
- */
-int
-http_response_thread(thread_t * thread)
-{
-	SOCK *sock_obj = THREAD_ARG(thread);
-
-	/* Handle read timeout */
-	if (thread->type == THREAD_READ_TIMEOUT)
-		return epilog(thread);
-
-	/* Allocate & clean the get buffer */
-	sock_obj->buffer = (char *) MALLOC(MAX_BUFFER_LENGTH);
-
-	/* Initalize the hash context */
-	sock_obj->hash = &hashes[req->hash];
-	HASH_INIT(sock_obj);
-
-	/* Register asynchronous http/ssl read thread */
-	if (req->ssl)
-		thread_add_read(thread->master, ssl_read_thread, sock_obj,
-				thread->u.fd, HTTP_CNX_TIMEOUT);
-	else
-		thread_add_read(thread->master, http_read_thread, sock_obj,
-				thread->u.fd, HTTP_CNX_TIMEOUT);
-	return 0;
-}
-
 /* remote Web server is connected, send it the get url query.  */
 int
-http_request_thread(thread_t * thread)
+http_request_thread(thread_ref_t thread)
 {
 	SOCK *sock_obj = THREAD_ARG(thread);
 	char *str_request;
-	char *request_host;
-	char *request_host_port;
+	const char *request_host;
+	const char *request_host_port;
 	int ret = 0;
+	char *str;
 
 	/* Handle read timeout */
-	if (thread->type == THREAD_WRITE_TIMEOUT)
+	if (thread->type == THREAD_WRITE_TIMEOUT) {
+		exit_code = 1;
 		return epilog(thread);
+	}
 
 	/* Allocate & clean the GET string */
 	str_request = (char *) MALLOC(GET_BUFFER_LENGTH);
-	memset(str_request, 0, GET_BUFFER_LENGTH);
 
 	if (req->vhost) {
 		/* If vhost was defined we don't need to override it's port */
 		request_host = req->vhost;
-		request_host_port = (char*) MALLOC(1);
-		*request_host_port = 0;
+		str = (char*) MALLOC(1);
+		*str = '\0';
+		request_host_port = str;
 	} else {
 		request_host = req->ipaddress;
-	
+
 		/* Allocate a buffer for the port string ( ":" [0-9][0-9][0-9][0-9][0-9] "\0" ) */
-		request_host_port = (char*) MALLOC(7);
-		snprintf(request_host_port, 7, ":%d",
-		 ntohs(req->addr_port));
-	}
-	
-	if(req->dst){
-		if(req->dst->ai_family == AF_INET6 && !req->vhost) {
-			snprintf(str_request, GET_BUFFER_LENGTH, REQUEST_TEMPLATE_IPV6,
-				req->url, request_host, request_host_port);
-		} else {
-			snprintf(str_request, GET_BUFFER_LENGTH, REQUEST_TEMPLATE,
-				req->url, request_host, request_host_port);
-		}
-	} else {
-		snprintf(str_request, GET_BUFFER_LENGTH, REQUEST_TEMPLATE,
-			req->url, request_host, request_host_port);
+		str = (char*) MALLOC(7);
+		snprintf(str, 7, ":%d", ntohs(req->addr_port));
+		request_host_port = str;
 	}
-	
-	FREE(request_host_port);
+
+	snprintf(str_request, GET_BUFFER_LENGTH,
+		 (req->dst && req->dst->ai_family == AF_INET6 && !req->vhost) ? request_template_ipv6 : request_template,
+		  req->url,
+		  req->http_protocol == HTTP_PROTOCOL_1_1 || req->http_protocol == HTTP_PROTOCOL_1_1K ? 1 : 0,
+		  req->http_protocol == HTTP_PROTOCOL_1_0C || req->http_protocol == HTTP_PROTOCOL_1_1 ? "Connection: close\r\n" :
+		    req->http_protocol == HTTP_PROTOCOL_1_0K || req->http_protocol == HTTP_PROTOCOL_1_1K ? "Connection: keep-alive\r\n" : "",
+		  request_host, request_host_port);
+
+	FREE_CONST(request_host_port);
 
 	/* Send the GET request to remote Web server */
 	DBG("Sending GET request [%s] on fd:%d\n", req->url, sock_obj->fd);
 	if (req->ssl)
-		ret =
-		    ssl_send_request(sock_obj->ssl, str_request,
-				     strlen(str_request));
+		ret = ssl_send_request(sock_obj->ssl, str_request, (int)strlen(str_request));
 	else
-		ret =
-		    (send(sock_obj->fd, str_request, strlen(str_request), 0) !=
-		     -1) ? 1 : 0;
+		ret = (send(sock_obj->fd, str_request, strlen(str_request), 0) != -1) ? 1 : 0;
 
 	FREE(str_request);
 
@@ -345,11 +364,26 @@ http_request_thread(thread_t * thread)
 		fprintf(stderr, "Cannot send get request to [%s]:%d.\n",
 			req->ipaddress,
 			ntohs(req->addr_port));
+		exit_code = 1;
 		return epilog(thread);
 	}
 
-	/* Register read timeouted thread */
-	thread_add_read(thread->master, http_response_thread, sock_obj,
-			sock_obj->fd, HTTP_CNX_TIMEOUT);
+	/* Allocate & clean the get buffer */
+	sock_obj->buffer = (char *) MALLOC(MAX_BUFFER_LENGTH);
+
+	/* Initalize the hash context */
+	sock_obj->hash = &hashes[req->hash];
+	HASH_INIT(sock_obj);
+
+	sock_obj->rx_bytes = 0;
+
+	/* Register asynchronous http/ssl read thread */
+	if (req->ssl)
+		thread_add_read(thread->master, ssl_read_thread, sock_obj,
+				sock_obj->fd, req->timeout, true);
+	else
+		thread_add_read(thread->master, http_read_thread, sock_obj,
+				sock_obj->fd, req->timeout, true);
+
 	return 1;
 }
diff --git a/tools/keepalived/genhash/hash.h b/tools/keepalived/genhash/include/hash.h
similarity index 69%
rename from tools/keepalived/genhash/hash.h
rename to tools/keepalived/genhash/include/hash.h
index d6fe7fd16..fd931fd4e 100644
--- a/tools/keepalived/genhash/hash.h
+++ b/tools/keepalived/genhash/include/hash.h
@@ -5,8 +5,6 @@
  *
  * Part:        Hash-related declarations (to break circular deps).
  *
- * Version:     hash.h 2013/07/22
- *
  * Authors:     Jan Pokorny, <jpokorny@redhat.com>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -20,21 +18,23 @@
  *              2 of the License, or (at your option) any later version.
  *
  * Copyright 2013 Red Hat, Inc.
+ * Copyright (C) 2014-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _HASH_H
 #define _HASH_H
 
+/* system includes */
 #include <openssl/md5.h>
-#ifdef FEAT_SHA1
-# include <openssl/sha.h>
+#ifdef _WITH_SHA1_
+#include <openssl/sha.h>
 #endif
 
 /* available hashes enumeration */
 enum feat_hashes {
 	hash_first,
 	hash_md5 = hash_first,
-#ifdef FEAT_SHA1
+#ifdef _WITH_SHA1_
 	hash_sha1,
 #endif
 	hash_guard,
@@ -42,27 +42,27 @@ enum feat_hashes {
 };
 
 typedef union {
-	MD5_CTX md5;
-#ifdef FEAT_SHA1
-	SHA_CTX sha;
+	MD5_CTX			md5;
+#ifdef _WITH_SHA1_
+	SHA_CTX			sha;
 #endif
 	/* this is due to poor C standard/draft wording (wrapped):
 	   https://groups.google.com/forum/#!msg/comp.lang.c/
 	   1kQMGXhgn4I/0VBEYG_ji44J */
-	char *dummy;
+	char			*dummy;
 } hash_context_t;
 
-typedef void (*hash_init_f)(hash_context_t *);
-typedef void (*hash_update_f)(hash_context_t *, const void *, unsigned long);
-typedef void (*hash_final_f)(unsigned char *, hash_context_t *);
+typedef int (*hash_init_f)(hash_context_t *);
+typedef int (*hash_update_f)(hash_context_t *, const void *, unsigned long);
+typedef int (*hash_final_f)(unsigned char *, hash_context_t *);
 
 typedef struct {
-	hash_init_f init;
-	hash_update_f update;
-	hash_final_f final;
-	unsigned char length;  /* length of the digest */
-	const char *id;  /* command-line handing + help*/
-	const char *label;  /* final output */
+	hash_init_f		init;
+	hash_update_f		update;
+	hash_final_f		final;
+	unsigned char		length;		/* length of the digest */
+	const char		*id;		/* command-line handing + help */
+	const char		*label;		/* final output */
 } hash_t;
 
 #endif
diff --git a/tools/keepalived/genhash/http.h b/tools/keepalived/genhash/include/http.h
similarity index 54%
rename from tools/keepalived/genhash/http.h
rename to tools/keepalived/genhash/include/http.h
index 4f0fd266c..6dfaf5987 100644
--- a/tools/keepalived/genhash/http.h
+++ b/tools/keepalived/genhash/include/http.h
@@ -5,8 +5,6 @@
  *
  * Part:        http.c include file.
  *
- * Version:     $Id: http.h,v 1.1.16 2009/02/14 03:25:07 acassen Exp $
- *
  * Authors:     Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -19,7 +17,7 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _HTTP_H
@@ -36,35 +34,25 @@
 /* global defs */
 #define GET_BUFFER_LENGTH 2048
 #define MAX_BUFFER_LENGTH 4096
-#define HTTP_CNX_TIMEOUT (5 * TIMER_HZ)
+#define HTTP_CNX_TIMEOUT 5
 #define PROTO_HTTP	0x01
 #define PROTO_SSL	0x02
 
-/* GET processing command */
-#define REQUEST_TEMPLATE "GET %s HTTP/1.0\r\n" \
-			 "User-Agent: GenHash (Linux powered)\r\n" \
-			 "Host: %s%s\r\n\r\n"
-
-#define REQUEST_TEMPLATE_IPV6 "GET %s HTTP/1.0\r\n" \
-			 "User-Agent: GenHash (Linux powered)\r\n" \
-			 "Host: [%s]%s\r\n\r\n"
-
-/* Output delimiters */
-#define DELIM_BEGIN "-----------------------["
-#define DELIM_END   "]-----------------------\n"
-#define HTTP_HEADER_HEXA  DELIM_BEGIN"    HTTP Header Buffer    "DELIM_END
-#define HTTP_HEADER_ASCII DELIM_BEGIN" HTTP Header Ascii Buffer "DELIM_END
-#define HTML_HEADER_HEXA  DELIM_BEGIN"       HTML Buffer        "DELIM_END
-#define HTML_HASH          DELIM_BEGIN"    HTML hash resulting    "DELIM_END
-#define HTML_HASH_FINAL    DELIM_BEGIN" HTML hash final resulting "DELIM_END
+typedef enum {
+	HTTP_PROTOCOL_1_0,
+	HTTP_PROTOCOL_1_0C,
+	HTTP_PROTOCOL_1_0K,
+	HTTP_PROTOCOL_1_1,
+	HTTP_PROTOCOL_1_1K,
+} http_protocol_t;
 
 /* Globals exported */
 extern const hash_t hashes[];
 
 /* Define prototypes */
-extern int epilog(thread_t *);
-extern int finalize(thread_t *);
+extern int epilog(thread_ref_t);
+extern int finalize(thread_ref_t);
 extern int http_process_stream(SOCK *, int);
-extern int http_request_thread(thread_t *);
+extern int http_request_thread(thread_ref_t);
 
 #endif
diff --git a/tools/keepalived/genhash/layer4.h b/tools/keepalived/genhash/include/layer4.h
similarity index 72%
rename from tools/keepalived/genhash/layer4.h
rename to tools/keepalived/genhash/include/layer4.h
index cb12b5d61..7fc981c49 100644
--- a/tools/keepalived/genhash/layer4.h
+++ b/tools/keepalived/genhash/include/layer4.h
@@ -5,8 +5,6 @@
  *
  * Part:        layer4.c include file.
  *
- * Version:     $Id: layer4.h,v 1.1.16 2009/02/14 03:25:07 acassen Exp $
- *
  * Authors:     Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -19,7 +17,7 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _LAYER4_H
@@ -46,18 +44,6 @@ enum connect_result {
 };
 
 /* Prototypes defs */
-extern enum connect_result
- tcp_connect(int fd, REQ *);
-
-extern enum connect_result
- tcp_socket_state(int, thread_t *, char *, uint16_t,
-		  int (*func) (thread_t *));
-
-extern void
- tcp_connection_state(int, enum connect_result
-		      , thread_t *, int (*func) (thread_t *)
-		      , long);
-
-extern int tcp_connect_thread(thread_t *);
+extern int tcp_connect_thread(thread_ref_t);
 
 #endif
diff --git a/tools/keepalived/genhash/main.h b/tools/keepalived/genhash/include/main.h
similarity index 66%
rename from tools/keepalived/genhash/main.h
rename to tools/keepalived/genhash/include/main.h
index 3242b356a..6d0431768 100644
--- a/tools/keepalived/genhash/main.h
+++ b/tools/keepalived/genhash/include/main.h
@@ -5,8 +5,6 @@
  *
  * Part:        main.c include file.
  *
- * Version:     $Id: main.h,v 1.1.16 2009/02/14 03:25:07 acassen Exp $
- *
  * Authors:     Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -19,7 +17,7 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _MAIN_H
@@ -48,40 +46,36 @@
 /* Build version */
 #define PROG    "genhash"
 
-#define VERSION_CODE 0x010000
-#define DATE_CODE    0x15070d
-
-#define GETMETER_VERSION(version)	\
-        (version >> 16) & 0xFF,		\
-        (version >> 8) & 0xFF,		\
-        version & 0xFF
-
-#define VERSION_STRING PROG" v%d.%d.%d (%.2d/%.2d, 20%.2d)\n",	\
-                GETMETER_VERSION(VERSION_CODE),			\
-                GETMETER_VERSION(DATE_CODE)
-
 /* HTTP/HTTPS request structure */
 typedef struct {
-	struct addrinfo *dst;
-	char ipaddress[INET6_ADDRSTRLEN];
-	uint16_t addr_port;
-	char *url;
-	char *vhost;
-	int verbose;
-	int ssl;
-	SSL_CTX *ctx;
-	SSL_METHOD *meth;
-	enum feat_hashes hash;
-	unsigned long ref_time;
-	unsigned long response_time;
+	struct		addrinfo *dst;
+	char		ipaddress[INET6_ADDRSTRLEN];
+	uint16_t	addr_port;
+	const char	*url;
+	const char	*vhost;
+	int		verbose;
+	int		ssl;
+	http_protocol_t http_protocol;
+	unsigned	timeout;
+#ifdef _HAVE_SSL_SET_TLSEXT_HOST_NAME_
+	int		sni;
+#endif
+	SSL_CTX		*ctx;
+	const SSL_METHOD *meth;
+	enum		feat_hashes hash;
+	unsigned long	ref_time;
+	unsigned long	response_time;
+#ifdef _WITH_SO_MARK_
+	unsigned int	mark;
+#endif
 } REQ;
 
 /* Global variables */
-extern thread_master_t *master;
 extern REQ *req;		/* Cmd line arguments */
+extern int exit_code;
 
 /* Data buffer length description */
-#define BUFSIZE             1024
+#define BUFSIZE		1024
 
 /* Command line error handling */
 #define CMD_LINE_ERROR   0
diff --git a/tools/keepalived/genhash/sock.h b/tools/keepalived/genhash/include/sock.h
similarity index 79%
rename from tools/keepalived/genhash/sock.h
rename to tools/keepalived/genhash/include/sock.h
index 0b395886c..0726fdaa4 100644
--- a/tools/keepalived/genhash/sock.h
+++ b/tools/keepalived/genhash/include/sock.h
@@ -5,8 +5,6 @@
  *
  * Part:        sock.c include file.
  *
- * Version:     $Id: sock.h,v 1.1.16 2009/02/14 03:25:07 acassen Exp $
- *
  * Authors:     Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -19,7 +17,7 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _SOCK_H
@@ -33,17 +31,19 @@
 
 /* Engine socket pool element structure */
 typedef struct {
-	int fd;
-	SSL *ssl;
-	BIO *bio;
-	const hash_t *hash;
-	hash_context_t context;
-	int status;
-	int lock;
-	char *buffer;
-	char *extracted;
-	int size;
-	int total_size;
+	int		fd;
+	SSL		*ssl;
+	BIO		*bio;
+	const		hash_t		*hash;
+	hash_context_t	context;
+	int		status;
+	int		lock;
+	char		*buffer;
+	const char	*extracted;
+	int		size;
+	int		total_size;
+	ssize_t		content_len;
+	ssize_t		rx_bytes;
 } SOCK;
 
 /* global vars exported */
diff --git a/tools/keepalived/genhash/ssl.h b/tools/keepalived/genhash/include/ssl.h
similarity index 77%
rename from tools/keepalived/genhash/ssl.h
rename to tools/keepalived/genhash/include/ssl.h
index c04ad9b7e..a64a2cf3d 100644
--- a/tools/keepalived/genhash/ssl.h
+++ b/tools/keepalived/genhash/include/ssl.h
@@ -5,8 +5,6 @@
  *
  * Part:        ssl.c include file.
  *
- * Version:     $Id: ssl.h,v 1.1.16 2009/02/14 03:25:07 acassen Exp $
- *
  * Authors:     Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -19,19 +17,22 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _SSL_H
 #define _SSL_H
 
+/* global includes */
 #include <openssl/ssl.h>
+#include <stdbool.h>
+
+#include "scheduler.h"
 
 /* Prototypes */
 extern void init_ssl(void);
-extern int ssl_connect(thread_t *);
-extern int ssl_printerr(int);
-extern int ssl_send_request(SSL *, char *, int);
-extern int ssl_read_thread(thread_t *);
+extern bool ssl_connect(thread_ref_t);
+extern int ssl_send_request(SSL *, const char *, int);
+extern int ssl_read_thread(thread_ref_t);
 
 #endif
diff --git a/tools/keepalived/genhash/layer4.c b/tools/keepalived/genhash/layer4.c
index ba7b05b1e..071625a29 100644
--- a/tools/keepalived/genhash/layer4.c
+++ b/tools/keepalived/genhash/layer4.c
@@ -5,8 +5,6 @@
  *
  * Part:        Layer4 asynchronous primitives.
  *
- * Version:     $Id: layer4.c,v 1.1.16 2009/02/14 03:25:07 acassen Exp $
- *
  * Authors:     Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -19,56 +17,54 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include "layer4.h"
+#include "config.h"
+
+#include <fcntl.h>
+
+/* keepalived include */
 #include "utils.h"
-#include "main.h"
-#include "sock.h"
-#include "http.h"
-#include "ssl.h"
 
-enum connect_result
+/* genhash includes */
+#include "include/layer4.h"
+
+static enum connect_result
 tcp_connect(int fd, REQ * req_obj)
 {
-	struct linger li = { 0 };
-	int long_inet;
+	struct linger li;
+	socklen_t long_inet;
 	struct sockaddr_in adr_serv;
 	struct sockaddr_in6 adr_serv6;
 	int ret;
-	int val;
 
-	/* free the tcp port after closing the socket descriptor */
+	/* free the tcp port after closing the socket descriptor, but allow
+	 * time for a proper shutdown. */
 	li.l_onoff = 1;
-	li.l_linger = 0;
-	setsockopt(fd, SOL_SOCKET, SO_LINGER, (char *) &li,
-		   sizeof (struct linger));
-
-	/* Make socket non-block. */
-	val = fcntl(fd, F_GETFL, 0);
-	fcntl(fd, F_SETFL, val | O_NONBLOCK);
-
-	if(req_obj->dst){
-		if(req_obj->dst->ai_family == AF_INET6) {
-			long_inet = sizeof (struct sockaddr_in6);
-			memset(&adr_serv6, 0, long_inet);
-			adr_serv6.sin6_family = req_obj->dst->ai_family;
-			adr_serv6.sin6_port = req_obj->addr_port;
-			inet_pton(AF_INET6, req_obj->ipaddress, &adr_serv6.sin6_addr);
-
-			/* Call connect function. */
-			ret = connect(fd, (struct sockaddr *) &adr_serv6, long_inet);
-		} else {
-			long_inet = sizeof (struct sockaddr_in);
-			memset(&adr_serv, 0, long_inet);
-			adr_serv.sin_family = req_obj->dst->ai_family;
-			adr_serv.sin_port = req_obj->addr_port;
-			inet_pton(AF_INET, req_obj->ipaddress, &adr_serv.sin_addr);
-
-			/* Call connect function. */
-			ret = connect(fd, (struct sockaddr *) &adr_serv, long_inet);
+	li.l_linger = 5;
+	if (setsockopt(fd, SOL_SOCKET, SO_LINGER, (char *) &li, sizeof (struct linger)))
+		fprintf(stderr, "Error setting SO_LINGER on socket %d\n", fd);
+
+#ifdef _WITH_SO_MARK_
+	if (req->mark) {
+		if (setsockopt (fd, SOL_SOCKET, SO_MARK, &req->mark, sizeof req->mark)) {
+			fprintf(stderr, "Error setting fwmark %u to socket: %s\n",
+					req->mark, strerror(errno));
+			return connect_error;
 		}
+	}
+#endif
+
+	if(req_obj->dst && req_obj->dst->ai_family == AF_INET6) {
+		long_inet = sizeof (struct sockaddr_in6);
+		memset(&adr_serv6, 0, long_inet);
+		adr_serv6.sin6_family = AF_INET6;
+		adr_serv6.sin6_port = req_obj->addr_port;
+		inet_pton(AF_INET6, req_obj->ipaddress, &adr_serv6.sin6_addr);
+
+		/* Call connect function. */
+		ret = connect(fd, (struct sockaddr *) &adr_serv6, long_inet);
 	} else {
 		long_inet = sizeof (struct sockaddr_in);
 		memset(&adr_serv, 0, long_inet);
@@ -81,25 +77,19 @@ tcp_connect(int fd, REQ * req_obj)
 	}
 
 	/* Immediate success */
-	if (ret == 0) {
-		fcntl(fd, F_SETFL, val);
+	if (ret == 0)
 		return connect_success;
-	}
 
-	/* If connect is in progress then return 1 else it's real error. */
-	if (ret < 0) {
-		if (errno != EINPROGRESS)
-			return connect_error;
-	}
+	/* If connect is in progress then return connect_in_progress else it's real error. */
+	if (errno != EINPROGRESS)
+		return connect_error;
 
 	/* restore previous fd args */
-	fcntl(fd, F_SETFL, val);
 	return connect_in_progress;
 }
 
-enum connect_result
-tcp_socket_state(int fd, thread_t * thread, char *ipaddress, uint16_t addr_port,
-		 int (*func) (thread_t *))
+static enum connect_result
+tcp_socket_state(thread_ref_t thread, thread_func_t func)
 {
 	int status;
 	socklen_t slen;
@@ -109,22 +99,22 @@ tcp_socket_state(int fd, thread_t * thread, char *ipaddress, uint16_t addr_port,
 	/* Handle connection timeout */
 	if (thread->type == THREAD_WRITE_TIMEOUT) {
 		DBG("TCP connection timeout to [%s]:%d.\n",
-		    ipaddress, ntohs(addr_port));
-		close(thread->u.fd);
+		    req->ipaddress, ntohs(req->addr_port));
+		thread_close_fd(thread);
 		return connect_timeout;
 	}
 
 	/* Check file descriptor */
 	slen = sizeof (status);
 	if (getsockopt
-	    (thread->u.fd, SOL_SOCKET, SO_ERROR, (void *) &status, &slen) < 0)
+	    (thread->u.f.fd, SOL_SOCKET, SO_ERROR, (void *) &status, &slen) < 0)
 		ret = errno;
 
 	/* Connection failed !!! */
 	if (ret) {
-		DBG("TCP connection failed to [%s]:%d.\n",
-		    ipaddress, ntohs(addr_port));
-		close(thread->u.fd);
+		DBG("TCP getsockopt() failed to [%s]:%d.\n",
+		    req->ipaddress, ntohs(req->addr_port));
+		thread_close_fd(thread);
 		return connect_error;
 	}
 
@@ -133,38 +123,44 @@ tcp_socket_state(int fd, thread_t * thread, char *ipaddress, uint16_t addr_port,
 	 * and other error code until connection is established.
 	 * Recompute the write timeout (or pending connection).
 	 */
-	if (status != 0) {
+	if (status == EINPROGRESS) {
 		DBG("TCP connection to [%s]:%d still IN_PROGRESS.\n",
-		    ipaddress, ntohs(addr_port));
+		    req->ipaddress, ntohs(req->addr_port));
 
 		timer_min = timer_sub_now(thread->sands);
 		thread_add_write(thread->master, func, THREAD_ARG(thread)
-				 , thread->u.fd, timer_long(timer_min));
+				 , thread->u.f.fd, timer_long(timer_min), true);
 		return connect_in_progress;
+	} else if (status) {
+		DBG("TCP connection failed to [%s]:%d.\n",
+		    req->ipaddress, ntohs(req->addr_port));
+		thread_close_fd(thread);
+		return connect_error;
 	}
 
 	return connect_success;
 }
 
-void
-tcp_connection_state(int fd, enum connect_result status, thread_t * thread,
-		     int (*func) (thread_t *)
-		     , long timeout)
+static void
+tcp_connection_state(int fd, enum connect_result status, thread_ref_t thread
+		     , thread_func_t func
+		     , unsigned long timeout)
 {
 	switch (status) {
 	case connect_error:
 		close(fd);
+		thread_add_terminate_event(thread->master);
 		break;
 
 	case connect_success:
 		thread_add_write(thread->master, func, THREAD_ARG(thread),
-				 fd, timeout);
+				 fd, timeout, true);
 		break;
 
 		/* Checking non-blocking connect, we wait until socket is writable */
 	case connect_in_progress:
 		thread_add_write(thread->master, func, THREAD_ARG(thread),
-				 fd, timeout);
+				 fd, timeout, true);
 		break;
 
 	default:
@@ -172,15 +168,13 @@ tcp_connection_state(int fd, enum connect_result status, thread_t * thread,
 	}
 }
 
-int
-tcp_check_thread(thread_t * thread)
+static int
+tcp_check_thread(thread_ref_t thread)
 {
 	SOCK *sock_obj = THREAD_ARG(thread);
 	int ret = 1;
 
-	sock_obj->status =
-	    tcp_socket_state(thread->u.fd, thread, req->ipaddress, req->addr_port,
-			     tcp_check_thread);
+	sock_obj->status = tcp_socket_state(thread, tcp_check_thread);
 	switch (sock_obj->status) {
 	case connect_error:
 		DBG("Error connecting server [%s]:%d.\n",
@@ -201,20 +195,23 @@ tcp_check_thread(thread_t * thread)
 				ret = ssl_connect(thread);
 
 			if (ret) {
+				/* SSL connections manage their own threads for SSL_connect */
+				if (req->ssl)
+					return 1;
+
 				/* Remote WEB server is connected.
 				 * Unlock eventual locked socket.
 				 */
 				sock_obj->lock = 0;
 				thread_add_event(thread->master,
 						 http_request_thread, sock_obj, 0);
+				thread_del_write(thread);
 			} else {
 				DBG("Connection trouble to: [%s]:%d.\n",
 				    req->ipaddress,
 				    ntohs(req->addr_port));
-				if (req->ssl)
-					ssl_printerr(SSL_get_error
-						     (sock_obj->ssl, ret));
 				sock_obj->status = connect_error;
+				thread_add_terminate_event(thread->master);
 				return -1;
 			}
 		}
@@ -225,33 +222,29 @@ tcp_check_thread(thread_t * thread)
 }
 
 int
-tcp_connect_thread(thread_t * thread)
+tcp_connect_thread(thread_ref_t thread)
 {
 	SOCK *sock_obj = THREAD_ARG(thread);
 
-	if(req->dst){
-		if(req->dst->ai_family == AF_INET6) {
-			if ((sock_obj->fd = socket(AF_INET6, SOCK_STREAM, IPPROTO_TCP)) == -1) {
-				DBG("WEB connection fail to create socket.\n");
-				return 0;
-			}
-		} else {
-			if ((sock_obj->fd = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP)) == -1) {
-				DBG("WEB connection fail to create socket.\n");
-				return 0;
-			}
-		}
-	} else {
-		if ((sock_obj->fd = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP)) == -1) {
-			DBG("WEB connection fail to create socket.\n");
-			return 0;
-		}
+	if ((sock_obj->fd = socket((req->dst && req->dst->ai_family == AF_INET6) ? AF_INET6 : AF_INET,
+				   SOCK_STREAM | SOCK_NONBLOCK
+#ifdef SOCK_CLOEXEC
+					       | SOCK_CLOEXEC
+#endif
+							     , IPPROTO_TCP)) == -1) {
+		DBG("WEB connection fail to create socket.\n");
+		return 0;
 	}
 
+#if !HAVE_DECL_SOCK_NONBLOCK
+	if (fcntl(sock_obj->fd, F_SETFL, fcntl(sock_obj->fd, F_GETFL) | O_NONBLOCK))
+		fprintf(stderr, "Unable to set socket non blocking\n");
+#endif
+
 	sock->status = tcp_connect(sock_obj->fd, req);
 
 	/* handle tcp connection status & register check worker thread */
 	tcp_connection_state(sock_obj->fd, sock_obj->status, thread, tcp_check_thread,
-			     HTTP_CNX_TIMEOUT);
+			     req->timeout);
 	return 0;
 }
diff --git a/tools/keepalived/genhash/main.c b/tools/keepalived/genhash/main.c
index dd767a3b6..a8c3959fe 100644
--- a/tools/keepalived/genhash/main.c
+++ b/tools/keepalived/genhash/main.c
@@ -5,8 +5,6 @@
  *
  * Part:        Main entry point.
  *
- * Version:     $Id: main.c,v 1.1.16 2009/02/14 03:25:07 acassen Exp $
- *
  * Authors:     Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -19,37 +17,43 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <signal.h>
+#include "config.h"
+
+/* system includes */
 #include <sys/stat.h>
 #include <sys/wait.h>
-#include "main.h"
-#include "utils.h"
-#include "signals.h"
-#include <sys/types.h>
 #include <stdio.h>
-#include <string.h>
 #include <sys/socket.h>
-#include <netdb.h>
+#include <arpa/inet.h>
+
+/* keepalived includes */
+#include "utils.h"
+#include "signals.h"
+#include "git-commit.h"
+
+/* genhash includes */
+#include "include/main.h"
+
 
 /* global var */
 REQ *req = NULL;
+int exit_code;
 
 /* Terminate handler */
-void
-sigend(void *v, int sig)
+static void
+sigend(__attribute__((unused)) void *v, __attribute__((unused)) int sig)
 {
 	/* register the terminate thread */
 	thread_add_terminate_event(master);
 }
 
 /* Initialize signal handler */
-void
+static void
 signal_init(void)
 {
-	signal_handler_init();
 	signal_set(SIGHUP, sigend, NULL);
 	signal_set(SIGINT, sigend, NULL);
 	signal_set(SIGTERM, sigend, NULL);
@@ -62,25 +66,37 @@ usage(const char *prog)
 {
 	enum feat_hashes i;
 
-	fprintf(stderr, VERSION_STRING);
-	fprintf(stderr,
-		"Usage:\n"
-		"  %s -s server-address -p port -u url\n"
-		"  %s -S -s server-address -p port -u url\n"
-		"  %s -h\n" "  %s -r\n\n", prog, prog, prog, prog);
+	fprintf(stderr, "%s", VERSION_STRING);
+#ifdef GIT_COMMIT
+	fprintf(stderr, ", git commit %s", GIT_COMMIT);
+#endif
+	fprintf(stderr, "\n\n%s\n\n", COPYRIGHT_STRING);
 	fprintf(stderr,
+		"Usage: %s COMMAND [OPTIONS]\n"
 		"Commands:\n"
+		"   -s server-address -p port -u url\n"
+		"   -S -s server-address -p port -u url\n"
+		"   -h\n"
+		"   -r\n\n", prog);
+	fprintf(stderr,
+		"Options:\n"
 		"Either long or short options are allowed.\n"
-		"  %s --use-ssl         -S       Use SSL connection to remote server.\n"
-		"  %s --server          -s       Use the specified remote server address.\n"
-		"  %s --port            -p       Use the specified remote server port.\n"
-		"  %s --url             -u       Use the specified remote server url.\n"
-		"  %s --use-virtualhost -V       Use the specified virtualhost in GET query.\n"
-		"  %s --hash            -H       Use the specified hash algorithm.\n"
-		"  %s --verbose         -v       Use verbose mode output.\n"
-		"  %s --help            -h       Display this short inlined help screen.\n"
-		"  %s --release         -r       Display the release number\n",
-		prog, prog, prog, prog, prog, prog, prog, prog, prog);
+		"   --use-ssl         -S       Use SSL connection to remote server.\n"
+#ifdef _HAVE_SSL_SET_TLSEXT_HOST_NAME_
+		"   --use-sni         -I       Use SNI during SSL handshake (uses virtualhost setting; see -V).\n"
+#endif
+		"   --server          -s       Use the specified remote server address.\n"
+		"   --port            -p       Use the specified remote server port.\n"
+		"   --url             -u       Use the specified remote server url.\n"
+		"   --use-virtualhost -V       Use the specified virtualhost in GET query.\n"
+		"   --hash            -H       Use the specified hash algorithm.\n"
+		"   --verbose         -v       Use verbose mode output.\n"
+		"   --help            -h       Display this short inlined help screen.\n"
+		"   --release         -r       Display the release number.\n"
+		"   --fwmark          -m       Use the specified FW mark.\n"
+		"   --protocol        -P       Use the specified HTTP protocol - '1.0', 1.0c', '1.1'.\n"
+		"                                1.0c means 1.0 with 'Connection: close'\n"
+		"   --timeout         -t       Timeout in seconds\n");
 	fprintf(stderr, "\nSupported hash algorithms:\n");
 	for (i = hash_first; i < hash_guard; i++)
 		fprintf(stderr, "  %s%s\n",
@@ -96,6 +112,9 @@ parse_cmdline(int argc, char **argv, REQ * req_obj)
 	struct addrinfo hint, *res = NULL;
 	int ret;
 	void *ptr;
+	char *endptr;
+	long port_num;
+	const char *start;
 
 	memset(&hint, '\0', sizeof hint);
 
@@ -103,23 +122,37 @@ parse_cmdline(int argc, char **argv, REQ * req_obj)
 	hint.ai_flags = AI_NUMERICHOST;
 
 	struct option long_options[] = {
-		{"release",         no_argument,       0, 'r'},
-		{"help",            no_argument,       0, 'h'},
-		{"verbose",         no_argument,       0, 'v'},
-		{"use-ssl",         no_argument,       0, 'S'},
-		{"server",          required_argument, 0, 's'},
-		{"hash",            required_argument, 0, 'H'},
-		{"use-virtualhost", required_argument, 0, 'V'},
-		{"port",            required_argument, 0, 'p'},
-		{"url",             required_argument, 0, 'u'},
+		{"release",		no_argument,       0, 'r'},
+		{"help",		no_argument,       0, 'h'},
+		{"verbose",		no_argument,       0, 'v'},
+		{"use-ssl",		no_argument,       0, 'S'},
+#ifdef _HAVE_SSL_SET_TLSEXT_HOST_NAME_
+		{"use-sni",		no_argument,       0, 'I'},
+#endif
+		{"server",		required_argument, 0, 's'},
+		{"hash",		required_argument, 0, 'H'},
+		{"use-virtualhost",	required_argument, 0, 'V'},
+		{"port",		required_argument, 0, 'p'},
+		{"url",			required_argument, 0, 'u'},
+		{"fwmark",		required_argument, 0, 'm'},
+		{"protocol",		required_argument, 0, 'P'},
+		{"timeout",		required_argument, 0, 't'},
 		{0, 0, 0, 0}
 	};
 
 	/* Parse the command line arguments */
-	while ((c = getopt_long (argc, argv, "rhvSs:H:V:p:u:", long_options, NULL)) != EOF) {
+	while ((c = getopt_long (argc, argv, "rhvSs:H:V:p:u:m:P:t:"
+#ifdef _HAVE_SSL_SET_TLSEXT_HOST_NAME_
+							       "I"
+#endif
+				  , long_options, NULL)) != EOF) {
 		switch (c) {
 		case 'r':
-			fprintf(stderr, VERSION_STRING);
+			fprintf(stderr, "%s", VERSION_STRING);
+#ifdef GIT_COMMIT
+			fprintf(stderr, ", git commit %s", GIT_COMMIT);
+#endif
+			fprintf(stderr, "\n");
 			break;
 		case 'h':
 			usage(argv[0]);
@@ -130,6 +163,11 @@ parse_cmdline(int argc, char **argv, REQ * req_obj)
 		case 'S':
 			req_obj->ssl = 1;
 			break;
+#ifdef _HAVE_SSL_SET_TLSEXT_HOST_NAME_
+		case 'I':
+			req_obj->sni = 1;
+			break;
+#endif
 		case 's':
 			if ((ret = getaddrinfo(optarg, NULL, &hint, &res)) != 0){
 				fprintf(stderr, "server should be an IP, not %s\n", optarg);
@@ -138,13 +176,14 @@ parse_cmdline(int argc, char **argv, REQ * req_obj)
 				if(res->ai_family == AF_INET) {
 					req_obj->dst = res;
 					ptr = &((struct sockaddr_in *) res->ai_addr)->sin_addr;
-					inet_ntop (res->ai_family, ptr, req_obj->ipaddress, INET6_ADDRSTRLEN);
+					inet_ntop (res->ai_family, ptr, req_obj->ipaddress, INET_ADDRSTRLEN);
 				} else if (res->ai_family == AF_INET6) {
 					req_obj->dst = res;
 					ptr = &((struct sockaddr_in6 *) res->ai_addr)->sin6_addr;
 					inet_ntop (res->ai_family, ptr, req_obj->ipaddress, INET6_ADDRSTRLEN);
 				} else {
 					fprintf(stderr, "server should be an IP, not %s\n", optarg);
+					freeaddrinfo(res);
 					return CMD_LINE_ERROR;
 				}
 			}
@@ -156,7 +195,7 @@ parse_cmdline(int argc, char **argv, REQ * req_obj)
 					break;
 				}
 			if (i == hash_guard) {
-				fprintf(stderr, "unknown hash algoritm: %s\n", optarg);
+				fprintf(stderr, "unknown hash algorithm: %s\n", optarg);
 				return CMD_LINE_ERROR;
 			}
 			break;
@@ -164,11 +203,55 @@ parse_cmdline(int argc, char **argv, REQ * req_obj)
 			req_obj->vhost = optarg;
 			break;
 		case 'p':
-			req_obj->addr_port = htons(atoi(optarg));
+			port_num = strtol(optarg, &endptr, 10);
+			if (*endptr || port_num <= 0 || port_num > 65535) {
+				fprintf(stderr, "invalid port number '%s'\n", optarg);
+				return CMD_LINE_ERROR;
+			}
+			req_obj->addr_port = htons(port_num);
 			break;
 		case 'u':
 			req_obj->url = optarg;
 			break;
+		case 'm':
+#ifdef _WITH_SO_MARK_
+			start = optarg + strspn(optarg, " \t");
+			req_obj->mark = (unsigned)strtoul(start, &endptr, 10);
+			if (*endptr || start[0] == '-' || start[0] == ' ') {
+				fprintf(stderr, "invalid fwmark '%s'\n", optarg);
+				return CMD_LINE_ERROR;
+			}
+#else
+			fprintf(stderr, "genhash built without fwmark support\n");
+			return CMD_LINE_ERROR;
+#endif
+			break;
+		case 'P':
+			if (!strcmp(optarg, "1.0"))
+				req_obj->http_protocol = HTTP_PROTOCOL_1_0;
+			else if (!strcmp(optarg, "1.0c") || !strcmp(optarg, "1.0C"))
+				req_obj->http_protocol = HTTP_PROTOCOL_1_0C;
+			else if (!strcmp(optarg, "1.1"))
+				req_obj->http_protocol = HTTP_PROTOCOL_1_1;
+			/* 1.0k and 1.1k are for test purposes and are not expected to be used */
+			else if (!strcmp(optarg, "1.0k"))
+				req_obj->http_protocol = HTTP_PROTOCOL_1_0K;
+			else if (!strcmp(optarg, "1.1k"))
+				req_obj->http_protocol = HTTP_PROTOCOL_1_1K;
+			else {
+				fprintf(stderr, "invalid HTTP protocol version '%s'\n", optarg);
+				return CMD_LINE_ERROR;
+			}
+			break;
+		case 't':
+			start = optarg + strspn(optarg, " \t");
+			req_obj->timeout = (unsigned)strtoul(start, &endptr, 10);
+			if (*endptr || start[0] == '-' || !start[0]) {
+				fprintf(stderr, "invalid timeout '%s'\n", optarg);
+				return CMD_LINE_ERROR;
+			}
+			req_obj->timeout *= TIMER_HZ;
+			break;
 		default:
 			usage(argv[0]);
 			return CMD_LINE_ERROR;
@@ -190,49 +273,50 @@ parse_cmdline(int argc, char **argv, REQ * req_obj)
 int
 main(int argc, char **argv)
 {
-	thread_t thread;
-	char *url_default = malloc(2);
-	url_default[0] = '/';
-	url_default[1] = '\0';
+	const char *url_default = "/";
+
+#ifdef _MEM_CHECK_
+	mem_log_init("Genhash", "Genhash process");
+	enable_mem_log_termination();
+#endif
 
 	/* Allocate the room */
 	req = (REQ *) MALLOC(sizeof (REQ));
 
 	/* Preset (potentially) non-zero defaults */
 	req->hash = hash_default;
+	req->http_protocol = HTTP_PROTOCOL_1_0;
+	req->timeout = HTTP_CNX_TIMEOUT * TIMER_HZ;
 
 	/* Command line parser */
 	if (!parse_cmdline(argc, argv, req)) {
-		FREE(url_default);
 		FREE(req);
-		exit(0);
+		exit(1);
 	}
 
 	/* Check minimum configuration need */
 	if (!req->dst && !req->addr_port && !req->url) {
-		FREE(url_default);
 		freeaddrinfo(req->dst);
 		FREE(req);
-		exit(0);
+		exit(1);
 	}
 
-	if(!req->url){
+	if(!req->url)
 		req->url = url_default;
-	}
 
 	/* Init the reference timer */
-	req->ref_time = timer_tol(timer_now());
+	req->ref_time = timer_long(timer_now());
 	DBG("Reference timer = %lu\n", req->ref_time);
 
 	/* Init SSL context */
 	init_ssl();
 
-	/* Signal handling initialization  */
-	signal_init();
-
 	/* Create the master thread */
 	master = thread_make_master();
 
+	/* Signal handling initialization  */
+	signal_init();
+
 	/* Register the GET request */
 	init_sock();
 
@@ -240,12 +324,11 @@ main(int argc, char **argv)
 	 * Processing the master thread queues,
 	 * return and execute one ready thread.
 	 * Run until error, used for debuging only.
-	 * Note that not calling launch_scheduler() does
-	 * not activate SIGCHLD handling, however, this
-	 * is no issue here.
+	 * Note that not calling launch_thread_scheduler()
+	 * does not activate SIGCHLD handling, however,
+	 * this is no issue here.
 	 */
-	while (thread_fetch(master, &thread))
-		thread_call(&thread);
+	process_threads(master);
 
 	/* Finalize output informations */
 	if (req->verbose)
@@ -253,10 +336,10 @@ main(int argc, char **argv)
 			    req->url, req->response_time - req->ref_time);
 
 	/* exit cleanly */
-	FREE(url_default);
+	thread_destroy_master(master);
 	SSL_CTX_free(req->ctx);
 	free_sock(sock);
 	freeaddrinfo(req->dst);
 	FREE(req);
-	exit(0);
+	exit(exit_code);
 }
diff --git a/tools/keepalived/genhash/sock.c b/tools/keepalived/genhash/sock.c
index 0085ebd6b..204416a57 100644
--- a/tools/keepalived/genhash/sock.c
+++ b/tools/keepalived/genhash/sock.c
@@ -5,8 +5,6 @@
  *
  * Part:        Socket pool utility functions.
  *
- * Version:     $Id: sock.c,v 1.1.16 2009/02/14 03:25:07 acassen Exp $
- *
  * Authors:     Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -19,17 +17,20 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <string.h>
+#include "config.h"
+
+/* system includes */
+
+/* keepalived includes */
 #include "memory.h"
 #include "utils.h"
-#include "list.h"
-#include "sock.h"
-#include "layer4.h"
-#include "ssl.h"
-#include "main.h"
+
+/* genhash includes */
+#include "include/sock.h"
+#include "include/layer4.h"
 
 /* global var */
 SOCK *sock = NULL;
diff --git a/tools/keepalived/genhash/ssl.c b/tools/keepalived/genhash/ssl.c
index f927783ff..d947ab1d3 100644
--- a/tools/keepalived/genhash/ssl.c
+++ b/tools/keepalived/genhash/ssl.c
@@ -5,8 +5,6 @@
  *
  * Part:        SSL engine. 'Semi' asyncrhonous stream handling.
  *
- * Version:     $Id: ssl.c,v 1.1.16 2009/02/14 03:25:07 acassen Exp $
- *
  * Authors:     Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -19,49 +17,65 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+/* system includes */
 #include <openssl/err.h>
-#include "main.h"
-#include "sock.h"
-#include "http.h"
-#include "ssl.h"
+#include <stdbool.h>
+
+/* keepalived includes */
 #include "utils.h"
-#include "html.h"
 
-/* extern variables */
-extern REQ *req;
+/* genhash includes */
+#include "include/ssl.h"
+#include "include/main.h"
+#include "include/layer4.h"
 
 /*
  * Initialize the SSL context, with or without specific
  * configuration files.
  */
-static BIO *bio_err = 0;
 void
 init_ssl(void)
 {
 	/* Library initialization */
+#ifdef HAVE_OPENSSL_INIT_CRYPTO
+#ifndef HAVE_OPENSSL_INIT_NO_LOAD_CONFIG_BUG
+	/* In OpenSSL v1.1.1 if the following is called, SSL_CTX_new() below fails.
+	 * It works in v1.1.0h and v1.1.1b.
+	 * It transpires that it works without setting NO_LOAD_CONFIG, but it is
+	 * presumably more efficient not to load it. */
+	if (!OPENSSL_init_crypto(OPENSSL_INIT_NO_LOAD_CONFIG, NULL))
+		fprintf(stderr, "OPENSSL_init_crypto failed\n");
+#endif
+#else
 	SSL_library_init();
-
 	SSL_load_error_strings();
-	bio_err = BIO_new_fp(stderr, BIO_NOCLOSE);
-	/* Initialize SSL context for SSL v2/3 */
-	req->meth = (SSL_METHOD *) SSLv23_method();
-	req->ctx = SSL_CTX_new(req->meth);
+#endif
+
+	/* Initialize SSL context */
+#ifdef HAVE_TLS_METHOD
+	req->meth = TLS_method();
+#else
+	req->meth = SSLv23_method();
+#endif
+	if (!(req->ctx = SSL_CTX_new(req->meth))) {
+		fprintf(stderr, "SSL_CTX_new() failed\n");
+		exit(1);
+	}
 
-#if (OPENSSL_VERSION_NUMBER < 0x00905100L)
+#if HAVE_SSL_CTX_SET_VERIFY_DEPTH
 	SSL_CTX_set_verify_depth(req->ctx, 1);
 #endif
 }
 
 /* Display SSL error to readable string */
-int
+static int
 ssl_printerr(int err)
 {
-	unsigned long extended_error = 0;
-	char *ssl_strerr;
-
 	switch (err) {
 	case SSL_ERROR_ZERO_RETURN:
 		fprintf(stderr, "  SSL error: (zero return)\n");
@@ -81,39 +95,120 @@ ssl_printerr(int err)
 	case SSL_ERROR_SYSCALL:
 		fprintf(stderr, "  SSL error: (syscall error)\n");
 		break;
-	case SSL_ERROR_SSL:{
-			ssl_strerr = (char *) MALLOC(500);
+	case SSL_ERROR_SSL:
+		fprintf(stderr, "  SSL error: (%s)\n", ERR_error_string(ERR_get_error(), NULL));
+		break;
+	}
+	return 0;
+}
 
-			extended_error = ERR_get_error();
-			ERR_error_string(extended_error, ssl_strerr);
-			fprintf(stderr, "  SSL error: (%s)\n", ssl_strerr);
-			FREE(ssl_strerr);
-			break;
-		}
+static void
+ssl_connection_done(thread_ref_t thread)
+{
+	SOCK *sock_obj = THREAD_ARG(thread);
+
+	sock_obj->lock = 0;
+	thread_add_event(thread->master,
+			 http_request_thread, sock_obj, 0);
+	thread_del_write(thread);
+}
+
+static int
+ssl_connect_complete_thread(thread_ref_t thread)
+{
+	SOCK *sock_obj = THREAD_ARG(thread);
+	int ret;
+	int error;
+
+	if (thread->type == THREAD_READ_TIMEOUT ||
+	    thread->type == THREAD_WRITE_TIMEOUT) {
+		exit_code = 1;
+		return epilog(thread);
 	}
+
+	ret = SSL_connect(sock_obj->ssl);
+	if (ret > 0) {
+		ssl_connection_done(thread);
+		return 0;
+	}
+
+	error = SSL_get_error(sock_obj->ssl, ret);
+	if (ret == -1 && error == SSL_ERROR_WANT_READ) {
+		thread_add_read(thread->master, ssl_connect_complete_thread, sock_obj,
+				sock_obj->fd, req->timeout, true);
+	}
+	else if (ret == -1 && error == SSL_ERROR_WANT_WRITE) {
+		thread_add_write(thread->master, ssl_connect_complete_thread, sock_obj,
+				sock_obj->fd, req->timeout, true);
+	} else {
+		DBG("  SSL_connect return code = %d on fd:%d\n", ret, thread->u.fd);
+		ssl_printerr(error);
+		sock_obj->status = connect_error;
+		thread_add_terminate_event(thread->master);
+	}
+
 	return 0;
 }
 
-int
-ssl_connect(thread_t * thread)
+bool
+ssl_connect(thread_ref_t thread)
 {
 	SOCK *sock_obj = THREAD_ARG(thread);
 	int ret;
+	int error;
 
 	sock_obj->ssl = SSL_new(req->ctx);
+	if (!sock_obj->ssl) {
+		fprintf(stderr, "SSL_new() failed\n");
+		return false;
+	}
+
 	sock_obj->bio = BIO_new_socket(sock_obj->fd, BIO_NOCLOSE);
+	if (!sock_obj->bio) {
+		fprintf(stderr, "BIO_new_socket failed\n");
+		return false;
+	}
+
 	BIO_set_nbio(sock_obj->bio, 1);	/* Set the Non-Blocking flag */
+#ifdef HAVE_SSL_SET0_RBIO
+	BIO_up_ref(sock_obj->bio);
+	SSL_set0_rbio(sock_obj->ssl, sock_obj->bio);
+	SSL_set0_wbio(sock_obj->ssl, sock_obj->bio);
+#else
 	SSL_set_bio(sock_obj->ssl, sock_obj->bio, sock_obj->bio);
+#endif
+#ifdef _HAVE_SSL_SET_TLSEXT_HOST_NAME_
+	if (req->vhost != NULL && req->sni) {
+		SSL_set_tlsext_host_name(sock_obj->ssl, req->vhost);
+	}
+#endif
+
 	ret = SSL_connect(sock_obj->ssl);
+	if (ret > 0) {
+		ssl_connection_done(thread);
+		return 1;
+	}
+
+	error = SSL_get_error(sock_obj->ssl, ret);
+	if (ret == -1 && error == SSL_ERROR_WANT_READ) {
+		thread_add_read(thread->master, ssl_connect_complete_thread, sock_obj,
+				sock_obj->fd, req->timeout, true);
+		return 1;
+	}
+	else if (ret == -1 && error == SSL_ERROR_WANT_WRITE) {
+		thread_add_write(thread->master, ssl_connect_complete_thread, sock_obj,
+				sock_obj->fd, req->timeout, true);
+		return 1;
+	}
 
 	DBG("  SSL_connect return code = %d on fd:%d\n", ret, thread->u.fd);
-	ssl_printerr(SSL_get_error(sock_obj->ssl, ret));
+	ssl_printerr(error);
 
-	return (ret > 0) ? 1 : 0;
+	return (ret > 0);
 }
 
 int
-ssl_send_request(SSL * ssl, char *str_request, int request_len)
+ssl_send_request(SSL *ssl, const char *str_request, int request_len)
 {
 	int err, r = 0;
 
@@ -134,15 +229,17 @@ ssl_send_request(SSL * ssl, char *str_request, int request_len)
 
 /* Asynchronous SSL stream reader */
 int
-ssl_read_thread(thread_t * thread)
+ssl_read_thread(thread_ref_t thread)
 {
 	SOCK *sock_obj = THREAD_ARG(thread);
 	int r = 0;
 	int error;
 
 	/* Handle read timeout */
-	if (thread->type == THREAD_READ_TIMEOUT)
+	if (thread->type == THREAD_READ_TIMEOUT) {
+		exit_code = 1;
 		return epilog(thread);
+	}
 
 	/*
 	 * The design implemented here is a workaround for use
@@ -151,7 +248,7 @@ ssl_read_thread(thread_t * thread)
 	 * I/O multiplexer thread framework because it enter
 	 * a synchronous read process for each GET reply.
 	 * Sound a little nasty !.
-	 * 
+	 *
 	 * Why OpenSSL doesn t handle underlying fd. This
 	 * break the I/O (select()) approach !...
 	 * If you read this and know the answer, please reply
@@ -160,37 +257,41 @@ ssl_read_thread(thread_t * thread)
 	 * and sometime not...
 	 */
 
-      read_stream:
+	do {
+		/* read the SSL stream */
+		r = MAX_BUFFER_LENGTH - sock_obj->size;
+		if (r <= 0) {
+			/* defensive check, should not occur */
+			fprintf(stderr, "SSL socket buffer overflow (not consumed)\n");
+			r = MAX_BUFFER_LENGTH;
+		}
+		memset(sock_obj->buffer + sock_obj->size, 0, (size_t)r);
+		r = SSL_read(sock_obj->ssl, sock_obj->buffer + sock_obj->size, r);
+		error = SSL_get_error(sock_obj->ssl, r);
+		if (r == -1 && error == SSL_ERROR_WANT_READ) {
+			thread_add_read(thread->master, ssl_read_thread, sock_obj,
+					sock_obj->fd, req->timeout, true);
 
-	/* read the SSL stream */
-	r = MAX_BUFFER_LENGTH - sock_obj->size;
-	if (r <= 0) {
-		/* defensive check, should not occur */
-		fprintf(stderr, "SSL socket buffer overflow (not consumed)\n");
-		r = MAX_BUFFER_LENGTH;
-	}
-	memset(sock_obj->buffer + sock_obj->size, 0, r);
-	r = SSL_read(sock_obj->ssl, sock_obj->buffer + sock_obj->size, r);
-	error = SSL_get_error(sock_obj->ssl, r);
+			return 0;
+		} else if (r == -1 && error == SSL_ERROR_WANT_WRITE) {
+			thread_add_write(thread->master, ssl_read_thread, sock_obj,
+					sock_obj->fd, req->timeout, true);
 
-	DBG(" [l:%d,fd:%d]\n", r, sock_obj->fd);
+			return 0;
+		}
+		DBG(" [l:%d,fd:%d]\n", r, sock_obj->fd);
 
-	if (error) {
-		/* All the SSL streal has been parsed */
-		/* Handle response stream */
-		if (error != SSL_ERROR_NONE)
+		if (error != SSL_ERROR_NONE) {
+			/* All the SSL stream has been parsed */
+			/* Handle response stream */
 			return finalize(thread);
-	} else if (r > 0 && error == 0) {
+		} else if (r <= 0)
+			return 0;
 
 		/* Handle the response stream */
 		http_process_stream(sock_obj, r);
+	} while (true);
 
-		/*
-		 * Register next ssl stream reader.
-		 * Register itself to not perturbe global I/O multiplexer.
-		 */
-		goto read_stream;
-	}
-
+	/* Unreachable */
 	return 0;
 }
diff --git a/tools/keepalived/goodies/arpreset.pl b/tools/keepalived/goodies/arpreset.pl
new file mode 100755
index 000000000..aa72aa955
--- /dev/null
+++ b/tools/keepalived/goodies/arpreset.pl
@@ -0,0 +1,97 @@
+#!/usr/bin/perl -w
+
+###################################################################
+# arpreset 0.2
+# Copyright (C) 2005  Steve Milton (milton AT isomedia.com)
+#
+# Utility for deleting a single ARP entry from a cisco router.
+# Script adapted from description on Cisco tech article.
+#   http://www.cisco.com/warp/public/477/SNMP/clear_arp.shtml
+#
+# The Cisco router needs to have a read/write community setup
+# for the utility to work.  I recommend using the following
+# IOS commands to setup a restricted community that can only
+# work with the MAC table.  You will need ENABLE level access
+# to the router to execute these commands.
+#
+#    access-list 50 permit 123.123.123.123
+#    access-list 50 permit 123.123.123.124
+#    access-list 50 deny any
+#    snmp-server view arpchange ipNetToMediaEntry.4 included
+#    snmp-server community blahblah view arpchange RW 50
+#
+# Set the access-list permit to the IP addresses of the systems
+# you want to be able to make changes to the MAC table.  Set
+# the community name (above blahblah) to something random and
+# password-like.
+###################################################################
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation; either version 2
+# of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+# 02110-1301, USA.
+###################################################################
+
+use strict;
+use Getopt::Long;
+&Getopt::Long::config('auto_abbrev');
+
+my ($router,$community,$address,$help,$check);
+$router=$community=$address=$help=$check="";
+
+my $status = GetOptions("router:s" => \$router,
+                        "community:s" => \$community,
+                        "address:s" => \$address,
+			"help" => \$help,
+			"check" => \$check);
+
+if (($status == 0) or $help) {
+    &PrintUsage;
+    exit 1;
+}
+
+if (!$router or !$community or !$address) {
+    &PrintUsage;
+    exit 1;
+}
+
+# OID for the ARP table entries
+my $ciscoOID = ".1.3.6.1.2.1.4.22.1.4";
+my $target = "";
+
+# Walk the SNMP ARP table on the router to locate the target address
+open(GET, "/usr/bin/snmpwalk -v1 -c $community $router $ciscoOID |");
+while(<GET>) {
+    if (/^(.*?\.$address)\s/) {
+	$target = $1;
+	print $_;
+    }
+}
+close(GET);
+if ($target and !$check) {
+    print "-- changed to --\n";
+    # set the target address to "invalid"
+    system("/usr/bin/snmpset -v1 -c $community $router $target i 2");
+} elsif (!$check) {
+    print "No target OID located.";
+    exit 1;
+}
+exit;
+
+sub PrintUsage {
+    print "arpreset 0.2\nCopyright (c) 2005 by Steve Milton\narpreset comes with ABSOLUTELY NO WARRANTY\n\n";
+    print "Usage: arpreset --router=routeraddress --community=rwcommunity --address=ipaddress\n";
+    print "       arpreset --help\n";
+    print "\nWhere ipaddress is the IP address in the Cisco router that you want to invalidate\nfrom the MAC address cache.\n";
+    print "\nYou can add --check to the command to make it NOT update the router, but check for\nthe entry only.\n";
+    exit;
+}
diff --git a/tools/keepalived/goodies/check_conditional_tests b/tools/keepalived/goodies/check_conditional_tests
new file mode 100755
index 000000000..21a2d5681
--- /dev/null
+++ b/tools/keepalived/goodies/check_conditional_tests
@@ -0,0 +1,16 @@
+#!/bin/bash
+
+# Get a count of each defined term used in #if directives
+# This can be useful to check for typos in the names
+
+grep "#[ \t]*if" $(find . -name "*.[ch]") | \
+	grep -v "_H$" | \
+	sed -e "s/.*://" | \
+	sed -e "s/#ifn*def *//" -e "s/#if  *//" | \
+	sed -e "s/[!\&()][!\&()]*/@/g" | \
+	tr @ "\n" | \
+	sed -e "s/ *defined[ \t]*//g" | \
+	sed -e "s/^  *//" -e "s/[ \t].*//" | \
+	grep -v "^ *$" | \
+	sort | \
+	uniq -c
diff --git a/tools/keepalived/install-sh b/tools/keepalived/install-sh
deleted file mode 100755
index e9de23842..000000000
--- a/tools/keepalived/install-sh
+++ /dev/null
@@ -1,251 +0,0 @@
-#!/bin/sh
-#
-# install - install a program, script, or datafile
-# This comes from X11R5 (mit/util/scripts/install.sh).
-#
-# Copyright 1991 by the Massachusetts Institute of Technology
-#
-# Permission to use, copy, modify, distribute, and sell this software and its
-# documentation for any purpose is hereby granted without fee, provided that
-# the above copyright notice appear in all copies and that both that
-# copyright notice and this permission notice appear in supporting
-# documentation, and that the name of M.I.T. not be used in advertising or
-# publicity pertaining to distribution of the software without specific,
-# written prior permission.  M.I.T. makes no representations about the
-# suitability of this software for any purpose.  It is provided "as is"
-# without express or implied warranty.
-#
-# Calling this script install-sh is preferred over install.sh, to prevent
-# `make' implicit rules from creating a file called install from it
-# when there is no Makefile.
-#
-# This script is compatible with the BSD install script, but was written
-# from scratch.  It can only install one file at a time, a restriction
-# shared with many OS's install programs.
-
-
-# set DOITPROG to echo to test this script
-
-# Don't use :- since 4.3BSD and earlier shells don't like it.
-doit="${DOITPROG-}"
-
-
-# put in absolute paths if you don't have them in your path; or use env. vars.
-
-mvprog="${MVPROG-mv}"
-cpprog="${CPPROG-cp}"
-chmodprog="${CHMODPROG-chmod}"
-chownprog="${CHOWNPROG-chown}"
-chgrpprog="${CHGRPPROG-chgrp}"
-stripprog="${STRIPPROG-strip}"
-rmprog="${RMPROG-rm}"
-mkdirprog="${MKDIRPROG-mkdir}"
-
-transformbasename=""
-transform_arg=""
-instcmd="$mvprog"
-chmodcmd="$chmodprog 0755"
-chowncmd=""
-chgrpcmd=""
-stripcmd=""
-rmcmd="$rmprog -f"
-mvcmd="$mvprog"
-src=""
-dst=""
-dir_arg=""
-
-while [ x"$1" != x ]; do
-    case $1 in
-	-c) instcmd="$cpprog"
-	    shift
-	    continue;;
-
-	-d) dir_arg=true
-	    shift
-	    continue;;
-
-	-m) chmodcmd="$chmodprog $2"
-	    shift
-	    shift
-	    continue;;
-
-	-o) chowncmd="$chownprog $2"
-	    shift
-	    shift
-	    continue;;
-
-	-g) chgrpcmd="$chgrpprog $2"
-	    shift
-	    shift
-	    continue;;
-
-	-s) stripcmd="$stripprog"
-	    shift
-	    continue;;
-
-	-t=*) transformarg=`echo $1 | sed 's/-t=//'`
-	    shift
-	    continue;;
-
-	-b=*) transformbasename=`echo $1 | sed 's/-b=//'`
-	    shift
-	    continue;;
-
-	*)  if [ x"$src" = x ]
-	    then
-		src=$1
-	    else
-		# this colon is to work around a 386BSD /bin/sh bug
-		:
-		dst=$1
-	    fi
-	    shift
-	    continue;;
-    esac
-done
-
-if [ x"$src" = x ]
-then
-	echo "install:	no input file specified"
-	exit 1
-else
-	true
-fi
-
-if [ x"$dir_arg" != x ]; then
-	dst=$src
-	src=""
-	
-	if [ -d $dst ]; then
-		instcmd=:
-		chmodcmd=""
-	else
-		instcmd=mkdir
-	fi
-else
-
-# Waiting for this to be detected by the "$instcmd $src $dsttmp" command
-# might cause directories to be created, which would be especially bad 
-# if $src (and thus $dsttmp) contains '*'.
-
-	if [ -f $src -o -d $src ]
-	then
-		true
-	else
-		echo "install:  $src does not exist"
-		exit 1
-	fi
-	
-	if [ x"$dst" = x ]
-	then
-		echo "install:	no destination specified"
-		exit 1
-	else
-		true
-	fi
-
-# If destination is a directory, append the input filename; if your system
-# does not like double slashes in filenames, you may need to add some logic
-
-	if [ -d $dst ]
-	then
-		dst="$dst"/`basename $src`
-	else
-		true
-	fi
-fi
-
-## this sed command emulates the dirname command
-dstdir=`echo $dst | sed -e 's,[^/]*$,,;s,/$,,;s,^$,.,'`
-
-# Make sure that the destination directory exists.
-#  this part is taken from Noah Friedman's mkinstalldirs script
-
-# Skip lots of stat calls in the usual case.
-if [ ! -d "$dstdir" ]; then
-defaultIFS='	
-'
-IFS="${IFS-${defaultIFS}}"
-
-oIFS="${IFS}"
-# Some sh's can't handle IFS=/ for some reason.
-IFS='%'
-set - `echo ${dstdir} | sed -e 's@/@%@g' -e 's@^%@/@'`
-IFS="${oIFS}"
-
-pathcomp=''
-
-while [ $# -ne 0 ] ; do
-	pathcomp="${pathcomp}${1}"
-	shift
-
-	if [ ! -d "${pathcomp}" ] ;
-        then
-		$mkdirprog "${pathcomp}"
-	else
-		true
-	fi
-
-	pathcomp="${pathcomp}/"
-done
-fi
-
-if [ x"$dir_arg" != x ]
-then
-	$doit $instcmd $dst &&
-
-	if [ x"$chowncmd" != x ]; then $doit $chowncmd $dst; else true ; fi &&
-	if [ x"$chgrpcmd" != x ]; then $doit $chgrpcmd $dst; else true ; fi &&
-	if [ x"$stripcmd" != x ]; then $doit $stripcmd $dst; else true ; fi &&
-	if [ x"$chmodcmd" != x ]; then $doit $chmodcmd $dst; else true ; fi
-else
-
-# If we're going to rename the final executable, determine the name now.
-
-	if [ x"$transformarg" = x ] 
-	then
-		dstfile=`basename $dst`
-	else
-		dstfile=`basename $dst $transformbasename | 
-			sed $transformarg`$transformbasename
-	fi
-
-# don't allow the sed command to completely eliminate the filename
-
-	if [ x"$dstfile" = x ] 
-	then
-		dstfile=`basename $dst`
-	else
-		true
-	fi
-
-# Make a temp file name in the proper directory.
-
-	dsttmp=$dstdir/#inst.$$#
-
-# Move or copy the file name to the temp name
-
-	$doit $instcmd $src $dsttmp &&
-
-	trap "rm -f ${dsttmp}" 0 &&
-
-# and set any options; do chmod last to preserve setuid bits
-
-# If any of these fail, we abort the whole thing.  If we want to
-# ignore errors from any of these, just make sure not to ignore
-# errors from the above "$doit $instcmd $src $dsttmp" command.
-
-	if [ x"$chowncmd" != x ]; then $doit $chowncmd $dsttmp; else true;fi &&
-	if [ x"$chgrpcmd" != x ]; then $doit $chgrpcmd $dsttmp; else true;fi &&
-	if [ x"$stripcmd" != x ]; then $doit $stripcmd $dsttmp; else true;fi &&
-	if [ x"$chmodcmd" != x ]; then $doit $chmodcmd $dsttmp; else true;fi &&
-
-# Now rename the file to the real destination.
-
-	$doit $rmcmd -f $dstdir/$dstfile &&
-	$doit $mvcmd $dsttmp $dstdir/$dstfile 
-
-fi &&
-
-
-exit 0
diff --git a/tools/keepalived/install-sh b/tools/keepalived/install-sh
new file mode 120000
index 000000000..4fcda595b
--- /dev/null
+++ b/tools/keepalived/install-sh
@@ -0,0 +1 @@
+/usr/share/automake-1.13/install-sh
\ No newline at end of file
diff --git a/tools/keepalived/keepalived.conf b/tools/keepalived/keepalived.conf
new file mode 100644
index 000000000..3090a7396
--- /dev/null
+++ b/tools/keepalived/keepalived.conf
@@ -0,0 +1,37053 @@
+############################## 1 ##############################
+virtual_server_group 111.13.235.211-80-TCP_QLB {
+    111.13.235.211 80
+}
+
+deny_address_group 111.13.235.211_deny {
+}
+
+virtual_server  group 111.13.235.211-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.211_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.211 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.211 bond1.kni;"
+
+    real_server 192.168.9.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 2 ##############################
+virtual_server_group 111.13.235.66-80-TCP_QLB {
+    111.13.235.66 80
+}
+
+deny_address_group 111.13.235.66_deny {
+}
+
+virtual_server  group 111.13.235.66-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.66_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.66 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.66 bond1.kni;"
+
+    real_server 192.168.39.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 3 ##############################
+virtual_server_group 192.168.1.64-80-TCP_QLB {
+    192.168.1.64 80
+}
+
+deny_address_group 192.168.1.64_deny {
+}
+
+virtual_server  group 192.168.1.64-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.64_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.64 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.64 bond1.kni;"
+
+    real_server 192.168.30.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 4 ##############################
+virtual_server_group 111.13.235.111-80-TCP_QLB {
+    111.13.235.111 80
+}
+
+deny_address_group 111.13.235.111_deny {
+}
+
+virtual_server  group 111.13.235.111-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.111_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.111 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.111 bond1.kni;"
+
+    real_server 192.168.26.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 5 ##############################
+virtual_server_group 111.13.235.69-80-TCP_QLB {
+    111.13.235.69 80
+}
+
+deny_address_group 111.13.235.69_deny {
+}
+
+virtual_server  group 111.13.235.69-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.69_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.69 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.69 bond1.kni;"
+
+    real_server 192.168.49.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 6 ##############################
+virtual_server_group 111.13.235.153-80-TCP_QLB {
+    111.13.235.153 80
+}
+
+deny_address_group 111.13.235.153_deny {
+}
+
+virtual_server  group 111.13.235.153-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.153_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.153 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.153 bond1.kni;"
+
+    real_server 192.168.18.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 7 ##############################
+virtual_server_group 111.13.235.205-80-TCP_QLB {
+    111.13.235.205 80
+}
+
+deny_address_group 111.13.235.205_deny {
+}
+
+virtual_server  group 111.13.235.205-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.205_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.205 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.205 bond1.kni;"
+
+    real_server 192.168.39.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 8 ##############################
+virtual_server_group 192.168.1.9-80-TCP_QLB {
+    192.168.1.9 80
+}
+
+deny_address_group 192.168.1.9_deny {
+}
+
+virtual_server  group 192.168.1.9-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.9_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.9 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.9 bond1.kni;"
+
+    real_server 192.168.38.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 9 ##############################
+virtual_server_group 111.13.235.197-80-TCP_QLB {
+    111.13.235.197 80
+}
+
+deny_address_group 111.13.235.197_deny {
+}
+
+virtual_server  group 111.13.235.197-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.197_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.197 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.197 bond1.kni;"
+
+    real_server 192.168.22.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 10 ##############################
+virtual_server_group 111.13.235.239-80-TCP_QLB {
+    111.13.235.239 80
+}
+
+deny_address_group 111.13.235.239_deny {
+}
+
+virtual_server  group 111.13.235.239-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.239_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.239 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.239 bond1.kni;"
+
+    real_server 192.168.47.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 11 ##############################
+virtual_server_group 111.13.235.201-80-TCP_QLB {
+    111.13.235.201 80
+}
+
+deny_address_group 111.13.235.201_deny {
+}
+
+virtual_server  group 111.13.235.201-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.201_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.201 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.201 bond1.kni;"
+
+    real_server 192.168.25.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 12 ##############################
+virtual_server_group 111.13.235.212-80-TCP_QLB {
+    111.13.235.212 80
+}
+
+deny_address_group 111.13.235.212_deny {
+}
+
+virtual_server  group 111.13.235.212-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.212_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.212 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.212 bond1.kni;"
+
+    real_server 192.168.3.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 13 ##############################
+virtual_server_group 111.13.235.208-80-TCP_QLB {
+    111.13.235.208 80
+}
+
+deny_address_group 111.13.235.208_deny {
+}
+
+virtual_server  group 111.13.235.208-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.208_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.208 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.208 bond1.kni;"
+
+    real_server 192.168.49.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 14 ##############################
+virtual_server_group 192.168.1.86-80-TCP_QLB {
+    192.168.1.86 80
+}
+
+deny_address_group 192.168.1.86_deny {
+}
+
+virtual_server  group 192.168.1.86-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.86_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.86 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.86 bond1.kni;"
+
+    real_server 192.168.50.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 15 ##############################
+virtual_server_group 192.168.1.40-80-TCP_QLB {
+    192.168.1.40 80
+}
+
+deny_address_group 192.168.1.40_deny {
+}
+
+virtual_server  group 192.168.1.40-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.40_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.40 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.40 bond1.kni;"
+
+    real_server 192.168.39.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 16 ##############################
+virtual_server_group 111.13.235.84-80-TCP_QLB {
+    111.13.235.84 80
+}
+
+deny_address_group 111.13.235.84_deny {
+}
+
+virtual_server  group 111.13.235.84-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.84_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.84 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.84 bond1.kni;"
+
+    real_server 192.168.33.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 17 ##############################
+virtual_server_group 111.13.235.127-80-TCP_QLB {
+    111.13.235.127 80
+}
+
+deny_address_group 111.13.235.127_deny {
+}
+
+virtual_server  group 111.13.235.127-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.127_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.127 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.127 bond1.kni;"
+
+    real_server 192.168.1.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 18 ##############################
+virtual_server_group 192.168.1.87-80-TCP_QLB {
+    192.168.1.87 80
+}
+
+deny_address_group 192.168.1.87_deny {
+}
+
+virtual_server  group 192.168.1.87-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.87_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.87 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.87 bond1.kni;"
+
+    real_server 192.168.35.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 19 ##############################
+virtual_server_group 111.13.235.93-80-TCP_QLB {
+    111.13.235.93 80
+}
+
+deny_address_group 111.13.235.93_deny {
+}
+
+virtual_server  group 111.13.235.93-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.93_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.93 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.93 bond1.kni;"
+
+    real_server 192.168.33.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 20 ##############################
+virtual_server_group 192.168.1.15-80-TCP_QLB {
+    192.168.1.15 80
+}
+
+deny_address_group 192.168.1.15_deny {
+}
+
+virtual_server  group 192.168.1.15-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.15_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.15 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.15 bond1.kni;"
+
+    real_server 192.168.6.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 21 ##############################
+virtual_server_group 111.13.235.244-80-TCP_QLB {
+    111.13.235.244 80
+}
+
+deny_address_group 111.13.235.244_deny {
+}
+
+virtual_server  group 111.13.235.244-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.244_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.244 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.244 bond1.kni;"
+
+    real_server 192.168.26.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 22 ##############################
+virtual_server_group 111.13.235.100-80-TCP_QLB {
+    111.13.235.100 80
+}
+
+deny_address_group 111.13.235.100_deny {
+}
+
+virtual_server  group 111.13.235.100-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.100_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.100 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.100 bond1.kni;"
+
+    real_server 192.168.54.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 23 ##############################
+virtual_server_group 111.13.235.194-80-TCP_QLB {
+    111.13.235.194 80
+}
+
+deny_address_group 111.13.235.194_deny {
+}
+
+virtual_server  group 111.13.235.194-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.194_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.194 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.194 bond1.kni;"
+
+    real_server 192.168.31.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 24 ##############################
+virtual_server_group 111.13.235.173-80-TCP_QLB {
+    111.13.235.173 80
+}
+
+deny_address_group 111.13.235.173_deny {
+}
+
+virtual_server  group 111.13.235.173-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.173_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.173 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.173 bond1.kni;"
+
+    real_server 192.168.22.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 25 ##############################
+virtual_server_group 111.13.235.183-80-TCP_QLB {
+    111.13.235.183 80
+}
+
+deny_address_group 111.13.235.183_deny {
+}
+
+virtual_server  group 111.13.235.183-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.183_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.183 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.183 bond1.kni;"
+
+    real_server 192.168.19.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 26 ##############################
+virtual_server_group 192.168.1.19-80-TCP_QLB {
+    192.168.1.19 80
+}
+
+deny_address_group 192.168.1.19_deny {
+}
+
+virtual_server  group 192.168.1.19-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.19_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.19 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.19 bond1.kni;"
+
+    real_server 192.168.10.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 27 ##############################
+virtual_server_group 111.13.235.76-80-TCP_QLB {
+    111.13.235.76 80
+}
+
+deny_address_group 111.13.235.76_deny {
+}
+
+virtual_server  group 111.13.235.76-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.76_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.76 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.76 bond1.kni;"
+
+    real_server 192.168.7.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 28 ##############################
+virtual_server_group 111.13.235.148-80-TCP_QLB {
+    111.13.235.148 80
+}
+
+deny_address_group 111.13.235.148_deny {
+}
+
+virtual_server  group 111.13.235.148-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.148_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.148 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.148 bond1.kni;"
+
+    real_server 192.168.57.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 29 ##############################
+virtual_server_group 111.13.235.109-80-TCP_QLB {
+    111.13.235.109 80
+}
+
+deny_address_group 111.13.235.109_deny {
+}
+
+virtual_server  group 111.13.235.109-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.109_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.109 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.109 bond1.kni;"
+
+    real_server 192.168.33.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 30 ##############################
+virtual_server_group 192.168.1.42-80-TCP_QLB {
+    192.168.1.42 80
+}
+
+deny_address_group 192.168.1.42_deny {
+}
+
+virtual_server  group 192.168.1.42-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.42_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.42 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.42 bond1.kni;"
+
+    real_server 192.168.1.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 31 ##############################
+virtual_server_group 111.13.235.224-80-TCP_QLB {
+    111.13.235.224 80
+}
+
+deny_address_group 111.13.235.224_deny {
+}
+
+virtual_server  group 111.13.235.224-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.224_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.224 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.224 bond1.kni;"
+
+    real_server 192.168.46.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 32 ##############################
+virtual_server_group 192.168.1.67-80-TCP_QLB {
+    192.168.1.67 80
+}
+
+deny_address_group 192.168.1.67_deny {
+}
+
+virtual_server  group 192.168.1.67-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.67_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.67 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.67 bond1.kni;"
+
+    real_server 192.168.3.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 33 ##############################
+virtual_server_group 192.168.1.2-80-TCP_QLB {
+    192.168.1.2 80
+}
+
+deny_address_group 192.168.1.2_deny {
+}
+
+virtual_server  group 192.168.1.2-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.2_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.2 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.2 bond1.kni;"
+
+    real_server 192.168.25.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 34 ##############################
+virtual_server_group 111.13.235.85-80-TCP_QLB {
+    111.13.235.85 80
+}
+
+deny_address_group 111.13.235.85_deny {
+}
+
+virtual_server  group 111.13.235.85-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.85_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.85 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.85 bond1.kni;"
+
+    real_server 192.168.54.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 35 ##############################
+virtual_server_group 192.168.1.43-80-TCP_QLB {
+    192.168.1.43 80
+}
+
+deny_address_group 192.168.1.43_deny {
+}
+
+virtual_server  group 192.168.1.43-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.43_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.43 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.43 bond1.kni;"
+
+    real_server 192.168.29.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 36 ##############################
+virtual_server_group 192.168.1.70-80-TCP_QLB {
+    192.168.1.70 80
+}
+
+deny_address_group 192.168.1.70_deny {
+}
+
+virtual_server  group 192.168.1.70-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.70_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.70 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.70 bond1.kni;"
+
+    real_server 192.168.54.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 37 ##############################
+virtual_server_group 111.13.235.181-80-TCP_QLB {
+    111.13.235.181 80
+}
+
+deny_address_group 111.13.235.181_deny {
+}
+
+virtual_server  group 111.13.235.181-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.181_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.181 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.181 bond1.kni;"
+
+    real_server 192.168.31.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 38 ##############################
+virtual_server_group 111.13.235.103-80-TCP_QLB {
+    111.13.235.103 80
+}
+
+deny_address_group 111.13.235.103_deny {
+}
+
+virtual_server  group 111.13.235.103-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.103_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.103 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.103 bond1.kni;"
+
+    real_server 192.168.41.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 39 ##############################
+virtual_server_group 111.13.235.254-80-TCP_QLB {
+    111.13.235.254 80
+}
+
+deny_address_group 111.13.235.254_deny {
+}
+
+virtual_server  group 111.13.235.254-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.254_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.254 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.254 bond1.kni;"
+
+    real_server 192.168.7.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 40 ##############################
+virtual_server_group 111.13.235.70-80-TCP_QLB {
+    111.13.235.70 80
+}
+
+deny_address_group 111.13.235.70_deny {
+}
+
+virtual_server  group 111.13.235.70-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.70_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.70 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.70 bond1.kni;"
+
+    real_server 192.168.22.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 41 ##############################
+virtual_server_group 192.168.1.83-80-TCP_QLB {
+    192.168.1.83 80
+}
+
+deny_address_group 192.168.1.83_deny {
+}
+
+virtual_server  group 192.168.1.83-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.83_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.83 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.83 bond1.kni;"
+
+    real_server 192.168.11.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 42 ##############################
+virtual_server_group 111.13.235.193-80-TCP_QLB {
+    111.13.235.193 80
+}
+
+deny_address_group 111.13.235.193_deny {
+}
+
+virtual_server  group 111.13.235.193-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.193_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.193 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.193 bond1.kni;"
+
+    real_server 192.168.38.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 43 ##############################
+virtual_server_group 111.13.235.165-80-TCP_QLB {
+    111.13.235.165 80
+}
+
+deny_address_group 111.13.235.165_deny {
+}
+
+virtual_server  group 111.13.235.165-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.165_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.165 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.165 bond1.kni;"
+
+    real_server 192.168.38.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 44 ##############################
+virtual_server_group 192.168.1.75-80-TCP_QLB {
+    192.168.1.75 80
+}
+
+deny_address_group 192.168.1.75_deny {
+}
+
+virtual_server  group 192.168.1.75-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.75_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.75 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.75 bond1.kni;"
+
+    real_server 192.168.9.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 45 ##############################
+virtual_server_group 192.168.1.20-80-TCP_QLB {
+    192.168.1.20 80
+}
+
+deny_address_group 192.168.1.20_deny {
+}
+
+virtual_server  group 192.168.1.20-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.20_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.20 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.20 bond1.kni;"
+
+    real_server 192.168.50.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 46 ##############################
+virtual_server_group 111.13.235.177-80-TCP_QLB {
+    111.13.235.177 80
+}
+
+deny_address_group 111.13.235.177_deny {
+}
+
+virtual_server  group 111.13.235.177-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.177_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.177 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.177 bond1.kni;"
+
+    real_server 192.168.3.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 47 ##############################
+virtual_server_group 111.13.235.129-80-TCP_QLB {
+    111.13.235.129 80
+}
+
+deny_address_group 111.13.235.129_deny {
+}
+
+virtual_server  group 111.13.235.129-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.129_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.129 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.129 bond1.kni;"
+
+    real_server 192.168.7.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 48 ##############################
+virtual_server_group 192.168.1.66-80-TCP_QLB {
+    192.168.1.66 80
+}
+
+deny_address_group 192.168.1.66_deny {
+}
+
+virtual_server  group 192.168.1.66-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.66_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.66 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.66 bond1.kni;"
+
+    real_server 192.168.23.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 49 ##############################
+virtual_server_group 111.13.235.64-80-TCP_QLB {
+    111.13.235.64 80
+}
+
+deny_address_group 111.13.235.64_deny {
+}
+
+virtual_server  group 111.13.235.64-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.64_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.64 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.64 bond1.kni;"
+
+    real_server 192.168.45.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 50 ##############################
+virtual_server_group 111.13.235.118-80-TCP_QLB {
+    111.13.235.118 80
+}
+
+deny_address_group 111.13.235.118_deny {
+}
+
+virtual_server  group 111.13.235.118-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.118_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.118 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.118 bond1.kni;"
+
+    real_server 192.168.38.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 51 ##############################
+virtual_server_group 111.13.235.243-80-TCP_QLB {
+    111.13.235.243 80
+}
+
+deny_address_group 111.13.235.243_deny {
+}
+
+virtual_server  group 111.13.235.243-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.243_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.243 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.243 bond1.kni;"
+
+    real_server 192.168.1.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 52 ##############################
+virtual_server_group 111.13.235.155-80-TCP_QLB {
+    111.13.235.155 80
+}
+
+deny_address_group 111.13.235.155_deny {
+}
+
+virtual_server  group 111.13.235.155-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.155_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.155 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.155 bond1.kni;"
+
+    real_server 192.168.7.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 53 ##############################
+virtual_server_group 111.13.235.253-80-TCP_QLB {
+    111.13.235.253 80
+}
+
+deny_address_group 111.13.235.253_deny {
+}
+
+virtual_server  group 111.13.235.253-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.253_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.253 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.253 bond1.kni;"
+
+    real_server 192.168.33.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 54 ##############################
+virtual_server_group 192.168.1.11-80-TCP_QLB {
+    192.168.1.11 80
+}
+
+deny_address_group 192.168.1.11_deny {
+}
+
+virtual_server  group 192.168.1.11-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.11_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.11 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.11 bond1.kni;"
+
+    real_server 192.168.38.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 55 ##############################
+virtual_server_group 111.13.235.115-80-TCP_QLB {
+    111.13.235.115 80
+}
+
+deny_address_group 111.13.235.115_deny {
+}
+
+virtual_server  group 111.13.235.115-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.115_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.115 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.115 bond1.kni;"
+
+    real_server 192.168.17.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 56 ##############################
+virtual_server_group 111.13.235.139-80-TCP_QLB {
+    111.13.235.139 80
+}
+
+deny_address_group 111.13.235.139_deny {
+}
+
+virtual_server  group 111.13.235.139-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.139_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.139 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.139 bond1.kni;"
+
+    real_server 192.168.11.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 57 ##############################
+virtual_server_group 192.168.1.21-80-TCP_QLB {
+    192.168.1.21 80
+}
+
+deny_address_group 192.168.1.21_deny {
+}
+
+virtual_server  group 192.168.1.21-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.21_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.21 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.21 bond1.kni;"
+
+    real_server 192.168.3.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 58 ##############################
+virtual_server_group 111.13.235.249-80-TCP_QLB {
+    111.13.235.249 80
+}
+
+deny_address_group 111.13.235.249_deny {
+}
+
+virtual_server  group 111.13.235.249-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.249_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.249 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.249 bond1.kni;"
+
+    real_server 192.168.43.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 59 ##############################
+virtual_server_group 192.168.1.82-80-TCP_QLB {
+    192.168.1.82 80
+}
+
+deny_address_group 192.168.1.82_deny {
+}
+
+virtual_server  group 192.168.1.82-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.82_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.82 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.82 bond1.kni;"
+
+    real_server 192.168.34.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 60 ##############################
+virtual_server_group 111.13.235.174-80-TCP_QLB {
+    111.13.235.174 80
+}
+
+deny_address_group 111.13.235.174_deny {
+}
+
+virtual_server  group 111.13.235.174-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.174_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.174 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.174 bond1.kni;"
+
+    real_server 192.168.21.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 61 ##############################
+virtual_server_group 111.13.235.235-80-TCP_QLB {
+    111.13.235.235 80
+}
+
+deny_address_group 111.13.235.235_deny {
+}
+
+virtual_server  group 111.13.235.235-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.235_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.235 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.235 bond1.kni;"
+
+    real_server 192.168.43.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 62 ##############################
+virtual_server_group 111.13.235.141-80-TCP_QLB {
+    111.13.235.141 80
+}
+
+deny_address_group 111.13.235.141_deny {
+}
+
+virtual_server  group 111.13.235.141-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.141_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.141 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.141 bond1.kni;"
+
+    real_server 192.168.21.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 63 ##############################
+virtual_server_group 192.168.1.96-80-TCP_QLB {
+    192.168.1.96 80
+}
+
+deny_address_group 192.168.1.96_deny {
+}
+
+virtual_server  group 192.168.1.96-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.96_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.96 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.96 bond1.kni;"
+
+    real_server 192.168.25.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 64 ##############################
+virtual_server_group 111.13.235.130-80-TCP_QLB {
+    111.13.235.130 80
+}
+
+deny_address_group 111.13.235.130_deny {
+}
+
+virtual_server  group 111.13.235.130-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.130_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.130 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.130 bond1.kni;"
+
+    real_server 192.168.3.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 65 ##############################
+virtual_server_group 192.168.1.32-80-TCP_QLB {
+    192.168.1.32 80
+}
+
+deny_address_group 192.168.1.32_deny {
+}
+
+virtual_server  group 192.168.1.32-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.32_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.32 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.32 bond1.kni;"
+
+    real_server 192.168.27.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 66 ##############################
+virtual_server_group 192.168.1.53-80-TCP_QLB {
+    192.168.1.53 80
+}
+
+deny_address_group 192.168.1.53_deny {
+}
+
+virtual_server  group 192.168.1.53-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.53_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.53 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.53 bond1.kni;"
+
+    real_server 192.168.53.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 67 ##############################
+virtual_server_group 111.13.235.188-80-TCP_QLB {
+    111.13.235.188 80
+}
+
+deny_address_group 111.13.235.188_deny {
+}
+
+virtual_server  group 111.13.235.188-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.188_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.188 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.188 bond1.kni;"
+
+    real_server 192.168.42.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 68 ##############################
+virtual_server_group 111.13.235.220-80-TCP_QLB {
+    111.13.235.220 80
+}
+
+deny_address_group 111.13.235.220_deny {
+}
+
+virtual_server  group 111.13.235.220-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.220_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.220 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.220 bond1.kni;"
+
+    real_server 192.168.6.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 69 ##############################
+virtual_server_group 111.13.235.128-80-TCP_QLB {
+    111.13.235.128 80
+}
+
+deny_address_group 111.13.235.128_deny {
+}
+
+virtual_server  group 111.13.235.128-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.128_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.128 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.128 bond1.kni;"
+
+    real_server 192.168.11.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 70 ##############################
+virtual_server_group 111.13.235.144-80-TCP_QLB {
+    111.13.235.144 80
+}
+
+deny_address_group 111.13.235.144_deny {
+}
+
+virtual_server  group 111.13.235.144-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.144_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.144 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.144 bond1.kni;"
+
+    real_server 192.168.30.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 71 ##############################
+virtual_server_group 111.13.235.196-80-TCP_QLB {
+    111.13.235.196 80
+}
+
+deny_address_group 111.13.235.196_deny {
+}
+
+virtual_server  group 111.13.235.196-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.196_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.196 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.196 bond1.kni;"
+
+    real_server 192.168.13.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 72 ##############################
+virtual_server_group 111.13.235.114-80-TCP_QLB {
+    111.13.235.114 80
+}
+
+deny_address_group 111.13.235.114_deny {
+}
+
+virtual_server  group 111.13.235.114-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.114_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.114 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.114 bond1.kni;"
+
+    real_server 192.168.7.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 73 ##############################
+virtual_server_group 111.13.235.237-80-TCP_QLB {
+    111.13.235.237 80
+}
+
+deny_address_group 111.13.235.237_deny {
+}
+
+virtual_server  group 111.13.235.237-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.237_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.237 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.237 bond1.kni;"
+
+    real_server 192.168.14.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 74 ##############################
+virtual_server_group 111.13.235.241-80-TCP_QLB {
+    111.13.235.241 80
+}
+
+deny_address_group 111.13.235.241_deny {
+}
+
+virtual_server  group 111.13.235.241-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.241_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.241 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.241 bond1.kni;"
+
+    real_server 192.168.5.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 75 ##############################
+virtual_server_group 111.13.235.89-80-TCP_QLB {
+    111.13.235.89 80
+}
+
+deny_address_group 111.13.235.89_deny {
+}
+
+virtual_server  group 111.13.235.89-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.89_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.89 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.89 bond1.kni;"
+
+    real_server 192.168.43.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 76 ##############################
+virtual_server_group 192.168.1.79-80-TCP_QLB {
+    192.168.1.79 80
+}
+
+deny_address_group 192.168.1.79_deny {
+}
+
+virtual_server  group 192.168.1.79-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.79_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.79 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.79 bond1.kni;"
+
+    real_server 192.168.54.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 77 ##############################
+virtual_server_group 111.13.235.135-80-TCP_QLB {
+    111.13.235.135 80
+}
+
+deny_address_group 111.13.235.135_deny {
+}
+
+virtual_server  group 111.13.235.135-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.135_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.135 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.135 bond1.kni;"
+
+    real_server 192.168.51.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 78 ##############################
+virtual_server_group 111.13.235.186-80-TCP_QLB {
+    111.13.235.186 80
+}
+
+deny_address_group 111.13.235.186_deny {
+}
+
+virtual_server  group 111.13.235.186-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.186_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.186 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.186 bond1.kni;"
+
+    real_server 192.168.14.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 79 ##############################
+virtual_server_group 111.13.235.207-80-TCP_QLB {
+    111.13.235.207 80
+}
+
+deny_address_group 111.13.235.207_deny {
+}
+
+virtual_server  group 111.13.235.207-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.207_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.207 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.207 bond1.kni;"
+
+    real_server 192.168.18.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 80 ##############################
+virtual_server_group 192.168.1.34-80-TCP_QLB {
+    192.168.1.34 80
+}
+
+deny_address_group 192.168.1.34_deny {
+}
+
+virtual_server  group 192.168.1.34-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.34_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.34 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.34 bond1.kni;"
+
+    real_server 192.168.33.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 81 ##############################
+virtual_server_group 111.13.235.225-80-TCP_QLB {
+    111.13.235.225 80
+}
+
+deny_address_group 111.13.235.225_deny {
+}
+
+virtual_server  group 111.13.235.225-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.225_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.225 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.225 bond1.kni;"
+
+    real_server 192.168.9.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 82 ##############################
+virtual_server_group 192.168.1.30-80-TCP_QLB {
+    192.168.1.30 80
+}
+
+deny_address_group 192.168.1.30_deny {
+}
+
+virtual_server  group 192.168.1.30-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.30_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.30 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.30 bond1.kni;"
+
+    real_server 192.168.51.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 83 ##############################
+virtual_server_group 192.168.1.60-80-TCP_QLB {
+    192.168.1.60 80
+}
+
+deny_address_group 192.168.1.60_deny {
+}
+
+virtual_server  group 192.168.1.60-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.60_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.60 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.60 bond1.kni;"
+
+    real_server 192.168.29.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 84 ##############################
+virtual_server_group 111.13.235.116-80-TCP_QLB {
+    111.13.235.116 80
+}
+
+deny_address_group 111.13.235.116_deny {
+}
+
+virtual_server  group 111.13.235.116-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.116_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.116 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.116 bond1.kni;"
+
+    real_server 192.168.21.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 85 ##############################
+virtual_server_group 111.13.235.209-80-TCP_QLB {
+    111.13.235.209 80
+}
+
+deny_address_group 111.13.235.209_deny {
+}
+
+virtual_server  group 111.13.235.209-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.209_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.209 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.209 bond1.kni;"
+
+    real_server 192.168.50.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 86 ##############################
+virtual_server_group 111.13.235.150-80-TCP_QLB {
+    111.13.235.150 80
+}
+
+deny_address_group 111.13.235.150_deny {
+}
+
+virtual_server  group 111.13.235.150-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.150_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.150 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.150 bond1.kni;"
+
+    real_server 192.168.1.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 87 ##############################
+virtual_server_group 111.13.235.184-80-TCP_QLB {
+    111.13.235.184 80
+}
+
+deny_address_group 111.13.235.184_deny {
+}
+
+virtual_server  group 111.13.235.184-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.184_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.184 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.184 bond1.kni;"
+
+    real_server 192.168.26.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 88 ##############################
+virtual_server_group 111.13.235.101-80-TCP_QLB {
+    111.13.235.101 80
+}
+
+deny_address_group 111.13.235.101_deny {
+}
+
+virtual_server  group 111.13.235.101-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.101_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.101 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.101 bond1.kni;"
+
+    real_server 192.168.6.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 89 ##############################
+virtual_server_group 192.168.1.3-80-TCP_QLB {
+    192.168.1.3 80
+}
+
+deny_address_group 192.168.1.3_deny {
+}
+
+virtual_server  group 192.168.1.3-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.3_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.3 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.3 bond1.kni;"
+
+    real_server 192.168.37.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 90 ##############################
+virtual_server_group 111.13.235.147-80-TCP_QLB {
+    111.13.235.147 80
+}
+
+deny_address_group 111.13.235.147_deny {
+}
+
+virtual_server  group 111.13.235.147-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.147_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.147 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.147 bond1.kni;"
+
+    real_server 192.168.13.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 91 ##############################
+virtual_server_group 111.13.235.79-80-TCP_QLB {
+    111.13.235.79 80
+}
+
+deny_address_group 111.13.235.79_deny {
+}
+
+virtual_server  group 111.13.235.79-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.79_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.79 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.79 bond1.kni;"
+
+    real_server 192.168.1.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 92 ##############################
+virtual_server_group 192.168.1.22-80-TCP_QLB {
+    192.168.1.22 80
+}
+
+deny_address_group 192.168.1.22_deny {
+}
+
+virtual_server  group 192.168.1.22-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.22_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.22 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.22 bond1.kni;"
+
+    real_server 192.168.31.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 93 ##############################
+virtual_server_group 111.13.235.74-80-TCP_QLB {
+    111.13.235.74 80
+}
+
+deny_address_group 111.13.235.74_deny {
+}
+
+virtual_server  group 111.13.235.74-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.74_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.74 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.74 bond1.kni;"
+
+    real_server 192.168.25.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 94 ##############################
+virtual_server_group 111.13.235.98-80-TCP_QLB {
+    111.13.235.98 80
+}
+
+deny_address_group 111.13.235.98_deny {
+}
+
+virtual_server  group 111.13.235.98-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.98_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.98 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.98 bond1.kni;"
+
+    real_server 192.168.2.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 95 ##############################
+virtual_server_group 111.13.235.245-80-TCP_QLB {
+    111.13.235.245 80
+}
+
+deny_address_group 111.13.235.245_deny {
+}
+
+virtual_server  group 111.13.235.245-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.245_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.245 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.245 bond1.kni;"
+
+    real_server 192.168.22.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 96 ##############################
+virtual_server_group 192.168.1.55-80-TCP_QLB {
+    192.168.1.55 80
+}
+
+deny_address_group 192.168.1.55_deny {
+}
+
+virtual_server  group 192.168.1.55-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.55_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.55 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.55 bond1.kni;"
+
+    real_server 192.168.58.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 97 ##############################
+virtual_server_group 192.168.1.88-80-TCP_QLB {
+    192.168.1.88 80
+}
+
+deny_address_group 192.168.1.88_deny {
+}
+
+virtual_server  group 192.168.1.88-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.88_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.88 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.88 bond1.kni;"
+
+    real_server 192.168.34.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 98 ##############################
+virtual_server_group 111.13.235.169-80-TCP_QLB {
+    111.13.235.169 80
+}
+
+deny_address_group 111.13.235.169_deny {
+}
+
+virtual_server  group 111.13.235.169-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.169_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.169 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.169 bond1.kni;"
+
+    real_server 192.168.19.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 99 ##############################
+virtual_server_group 111.13.235.86-80-TCP_QLB {
+    111.13.235.86 80
+}
+
+deny_address_group 111.13.235.86_deny {
+}
+
+virtual_server  group 111.13.235.86-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.86_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.86 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.86 bond1.kni;"
+
+    real_server 192.168.17.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 100 ##############################
+virtual_server_group 111.13.235.122-80-TCP_QLB {
+    111.13.235.122 80
+}
+
+deny_address_group 111.13.235.122_deny {
+}
+
+virtual_server  group 111.13.235.122-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.122_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.122 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.122 bond1.kni;"
+
+    real_server 192.168.1.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 101 ##############################
+virtual_server_group 111.13.235.91-80-TCP_QLB {
+    111.13.235.91 80
+}
+
+deny_address_group 111.13.235.91_deny {
+}
+
+virtual_server  group 111.13.235.91-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.91_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.91 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.91 bond1.kni;"
+
+    real_server 192.168.21.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 102 ##############################
+virtual_server_group 192.168.1.51-80-TCP_QLB {
+    192.168.1.51 80
+}
+
+deny_address_group 192.168.1.51_deny {
+}
+
+virtual_server  group 192.168.1.51-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.51_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.51 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.51 bond1.kni;"
+
+    real_server 192.168.13.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 103 ##############################
+virtual_server_group 192.168.1.4-80-TCP_QLB {
+    192.168.1.4 80
+}
+
+deny_address_group 192.168.1.4_deny {
+}
+
+virtual_server  group 192.168.1.4-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.4_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.4 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.4 bond1.kni;"
+
+    real_server 192.168.10.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 104 ##############################
+virtual_server_group 192.168.1.54-80-TCP_QLB {
+    192.168.1.54 80
+}
+
+deny_address_group 192.168.1.54_deny {
+}
+
+virtual_server  group 192.168.1.54-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.54_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.54 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.54 bond1.kni;"
+
+    real_server 192.168.53.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 105 ##############################
+virtual_server_group 111.13.235.151-80-TCP_QLB {
+    111.13.235.151 80
+}
+
+deny_address_group 111.13.235.151_deny {
+}
+
+virtual_server  group 111.13.235.151-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.151_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.151 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.151 bond1.kni;"
+
+    real_server 192.168.41.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 106 ##############################
+virtual_server_group 111.13.235.83-80-TCP_QLB {
+    111.13.235.83 80
+}
+
+deny_address_group 111.13.235.83_deny {
+}
+
+virtual_server  group 111.13.235.83-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.83_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.83 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.83 bond1.kni;"
+
+    real_server 192.168.53.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 107 ##############################
+virtual_server_group 192.168.1.29-80-TCP_QLB {
+    192.168.1.29 80
+}
+
+deny_address_group 192.168.1.29_deny {
+}
+
+virtual_server  group 192.168.1.29-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.29_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.29 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.29 bond1.kni;"
+
+    real_server 192.168.7.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 108 ##############################
+virtual_server_group 111.13.235.75-80-TCP_QLB {
+    111.13.235.75 80
+}
+
+deny_address_group 111.13.235.75_deny {
+}
+
+virtual_server  group 111.13.235.75-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.75_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.75 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.75 bond1.kni;"
+
+    real_server 192.168.58.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 109 ##############################
+virtual_server_group 192.168.1.10-80-TCP_QLB {
+    192.168.1.10 80
+}
+
+deny_address_group 192.168.1.10_deny {
+}
+
+virtual_server  group 192.168.1.10-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.10_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.10 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.10 bond1.kni;"
+
+    real_server 192.168.14.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 110 ##############################
+virtual_server_group 192.168.1.59-80-TCP_QLB {
+    192.168.1.59 80
+}
+
+deny_address_group 192.168.1.59_deny {
+}
+
+virtual_server  group 192.168.1.59-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.59_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.59 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.59 bond1.kni;"
+
+    real_server 192.168.33.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 111 ##############################
+virtual_server_group 192.168.1.95-80-TCP_QLB {
+    192.168.1.95 80
+}
+
+deny_address_group 192.168.1.95_deny {
+}
+
+virtual_server  group 192.168.1.95-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.95_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.95 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.95 bond1.kni;"
+
+    real_server 192.168.17.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 112 ##############################
+virtual_server_group 111.13.235.124-80-TCP_QLB {
+    111.13.235.124 80
+}
+
+deny_address_group 111.13.235.124_deny {
+}
+
+virtual_server  group 111.13.235.124-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.124_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.124 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.124 bond1.kni;"
+
+    real_server 192.168.5.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 113 ##############################
+virtual_server_group 111.13.235.94-80-TCP_QLB {
+    111.13.235.94 80
+}
+
+deny_address_group 111.13.235.94_deny {
+}
+
+virtual_server  group 111.13.235.94-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.94_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.94 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.94 bond1.kni;"
+
+    real_server 192.168.54.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 114 ##############################
+virtual_server_group 192.168.1.24-80-TCP_QLB {
+    192.168.1.24 80
+}
+
+deny_address_group 192.168.1.24_deny {
+}
+
+virtual_server  group 192.168.1.24-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.24_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.24 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.24 bond1.kni;"
+
+    real_server 192.168.26.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 115 ##############################
+virtual_server_group 111.13.235.230-80-TCP_QLB {
+    111.13.235.230 80
+}
+
+deny_address_group 111.13.235.230_deny {
+}
+
+virtual_server  group 111.13.235.230-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.230_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.230 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.230 bond1.kni;"
+
+    real_server 192.168.23.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 116 ##############################
+virtual_server_group 192.168.1.45-80-TCP_QLB {
+    192.168.1.45 80
+}
+
+deny_address_group 192.168.1.45_deny {
+}
+
+virtual_server  group 192.168.1.45-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.45_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.45 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.45 bond1.kni;"
+
+    real_server 192.168.45.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 117 ##############################
+virtual_server_group 192.168.1.27-80-TCP_QLB {
+    192.168.1.27 80
+}
+
+deny_address_group 192.168.1.27_deny {
+}
+
+virtual_server  group 192.168.1.27-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.27_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.27 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.27 bond1.kni;"
+
+    real_server 192.168.17.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 118 ##############################
+virtual_server_group 192.168.1.61-80-TCP_QLB {
+    192.168.1.61 80
+}
+
+deny_address_group 192.168.1.61_deny {
+}
+
+virtual_server  group 192.168.1.61-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.61_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.61 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.61 bond1.kni;"
+
+    real_server 192.168.59.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 119 ##############################
+virtual_server_group 192.168.1.37-80-TCP_QLB {
+    192.168.1.37 80
+}
+
+deny_address_group 192.168.1.37_deny {
+}
+
+virtual_server  group 192.168.1.37-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.37_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.37 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.37 bond1.kni;"
+
+    real_server 192.168.47.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 120 ##############################
+virtual_server_group 111.13.235.149-80-TCP_QLB {
+    111.13.235.149 80
+}
+
+deny_address_group 111.13.235.149_deny {
+}
+
+virtual_server  group 111.13.235.149-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.149_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.149 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.149 bond1.kni;"
+
+    real_server 192.168.58.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 121 ##############################
+virtual_server_group 111.13.235.77-80-TCP_QLB {
+    111.13.235.77 80
+}
+
+deny_address_group 111.13.235.77_deny {
+}
+
+virtual_server  group 111.13.235.77-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.77_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.77 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.77 bond1.kni;"
+
+    real_server 192.168.14.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 122 ##############################
+virtual_server_group 111.13.235.232-80-TCP_QLB {
+    111.13.235.232 80
+}
+
+deny_address_group 111.13.235.232_deny {
+}
+
+virtual_server  group 111.13.235.232-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.232_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.232 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.232 bond1.kni;"
+
+    real_server 192.168.18.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 123 ##############################
+virtual_server_group 111.13.235.138-80-TCP_QLB {
+    111.13.235.138 80
+}
+
+deny_address_group 111.13.235.138_deny {
+}
+
+virtual_server  group 111.13.235.138-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.138_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.138 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.138 bond1.kni;"
+
+    real_server 192.168.6.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 124 ##############################
+virtual_server_group 192.168.1.38-80-TCP_QLB {
+    192.168.1.38 80
+}
+
+deny_address_group 192.168.1.38_deny {
+}
+
+virtual_server  group 192.168.1.38-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.38_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.38 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.38 bond1.kni;"
+
+    real_server 192.168.45.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 125 ##############################
+virtual_server_group 111.13.235.80-80-TCP_QLB {
+    111.13.235.80 80
+}
+
+deny_address_group 111.13.235.80_deny {
+}
+
+virtual_server  group 111.13.235.80-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.80_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.80 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.80 bond1.kni;"
+
+    real_server 192.168.10.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 126 ##############################
+virtual_server_group 111.13.235.133-80-TCP_QLB {
+    111.13.235.133 80
+}
+
+deny_address_group 111.13.235.133_deny {
+}
+
+virtual_server  group 111.13.235.133-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.133_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.133 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.133 bond1.kni;"
+
+    real_server 192.168.47.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 127 ##############################
+virtual_server_group 192.168.1.41-80-TCP_QLB {
+    192.168.1.41 80
+}
+
+deny_address_group 192.168.1.41_deny {
+}
+
+virtual_server  group 192.168.1.41-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.41_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.41 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.41 bond1.kni;"
+
+    real_server 192.168.25.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 128 ##############################
+virtual_server_group 192.168.1.77-80-TCP_QLB {
+    192.168.1.77 80
+}
+
+deny_address_group 192.168.1.77_deny {
+}
+
+virtual_server  group 192.168.1.77-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.77_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.77 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.77 bond1.kni;"
+
+    real_server 192.168.54.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 129 ##############################
+virtual_server_group 192.168.1.56-80-TCP_QLB {
+    192.168.1.56 80
+}
+
+deny_address_group 192.168.1.56_deny {
+}
+
+virtual_server  group 192.168.1.56-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.56_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.56 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.56 bond1.kni;"
+
+    real_server 192.168.37.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 130 ##############################
+virtual_server_group 111.13.235.113-80-TCP_QLB {
+    111.13.235.113 80
+}
+
+deny_address_group 111.13.235.113_deny {
+}
+
+virtual_server  group 111.13.235.113-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.113_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.113 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.113 bond1.kni;"
+
+    real_server 192.168.58.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 131 ##############################
+virtual_server_group 111.13.235.167-80-TCP_QLB {
+    111.13.235.167 80
+}
+
+deny_address_group 111.13.235.167_deny {
+}
+
+virtual_server  group 111.13.235.167-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.167_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.167 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.167 bond1.kni;"
+
+    real_server 192.168.7.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 132 ##############################
+virtual_server_group 111.13.235.217-80-TCP_QLB {
+    111.13.235.217 80
+}
+
+deny_address_group 111.13.235.217_deny {
+}
+
+virtual_server  group 111.13.235.217-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.217_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.217 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.217 bond1.kni;"
+
+    real_server 192.168.7.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 133 ##############################
+virtual_server_group 111.13.235.204-80-TCP_QLB {
+    111.13.235.204 80
+}
+
+deny_address_group 111.13.235.204_deny {
+}
+
+virtual_server  group 111.13.235.204-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.204_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.204 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.204 bond1.kni;"
+
+    real_server 192.168.45.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 134 ##############################
+virtual_server_group 192.168.1.18-80-TCP_QLB {
+    192.168.1.18 80
+}
+
+deny_address_group 192.168.1.18_deny {
+}
+
+virtual_server  group 192.168.1.18-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.18_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.18 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.18 bond1.kni;"
+
+    real_server 192.168.43.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 135 ##############################
+virtual_server_group 111.13.235.215-80-TCP_QLB {
+    111.13.235.215 80
+}
+
+deny_address_group 111.13.235.215_deny {
+}
+
+virtual_server  group 111.13.235.215-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.215_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.215 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.215 bond1.kni;"
+
+    real_server 192.168.43.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 136 ##############################
+virtual_server_group 111.13.235.190-80-TCP_QLB {
+    111.13.235.190 80
+}
+
+deny_address_group 111.13.235.190_deny {
+}
+
+virtual_server  group 111.13.235.190-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.190_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.190 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.190 bond1.kni;"
+
+    real_server 192.168.27.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 137 ##############################
+virtual_server_group 111.13.235.171-80-TCP_QLB {
+    111.13.235.171 80
+}
+
+deny_address_group 111.13.235.171_deny {
+}
+
+virtual_server  group 111.13.235.171-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.171_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.171 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.171 bond1.kni;"
+
+    real_server 192.168.27.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 138 ##############################
+virtual_server_group 192.168.1.81-80-TCP_QLB {
+    192.168.1.81 80
+}
+
+deny_address_group 192.168.1.81_deny {
+}
+
+virtual_server  group 192.168.1.81-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.81_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.81 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.81 bond1.kni;"
+
+    real_server 192.168.31.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 139 ##############################
+virtual_server_group 111.13.235.162-80-TCP_QLB {
+    111.13.235.162 80
+}
+
+deny_address_group 111.13.235.162_deny {
+}
+
+virtual_server  group 111.13.235.162-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.162_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.162 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.162 bond1.kni;"
+
+    real_server 192.168.10.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 140 ##############################
+virtual_server_group 111.13.235.251-80-TCP_QLB {
+    111.13.235.251 80
+}
+
+deny_address_group 111.13.235.251_deny {
+}
+
+virtual_server  group 111.13.235.251-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.251_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.251 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.251 bond1.kni;"
+
+    real_server 192.168.45.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 141 ##############################
+virtual_server_group 192.168.1.47-80-TCP_QLB {
+    192.168.1.47 80
+}
+
+deny_address_group 192.168.1.47_deny {
+}
+
+virtual_server  group 192.168.1.47-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.47_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.47 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.47 bond1.kni;"
+
+    real_server 192.168.41.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 142 ##############################
+virtual_server_group 192.168.1.73-80-TCP_QLB {
+    192.168.1.73 80
+}
+
+deny_address_group 192.168.1.73_deny {
+}
+
+virtual_server  group 192.168.1.73-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.73_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.73 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.73 bond1.kni;"
+
+    real_server 192.168.13.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 143 ##############################
+virtual_server_group 111.13.235.178-80-TCP_QLB {
+    111.13.235.178 80
+}
+
+deny_address_group 111.13.235.178_deny {
+}
+
+virtual_server  group 111.13.235.178-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.178_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.178 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.178 bond1.kni;"
+
+    real_server 192.168.21.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 144 ##############################
+virtual_server_group 192.168.1.7-80-TCP_QLB {
+    192.168.1.7 80
+}
+
+deny_address_group 192.168.1.7_deny {
+}
+
+virtual_server  group 192.168.1.7-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.7_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.7 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.7 bond1.kni;"
+
+    real_server 192.168.49.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 145 ##############################
+virtual_server_group 111.13.235.192-80-TCP_QLB {
+    111.13.235.192 80
+}
+
+deny_address_group 111.13.235.192_deny {
+}
+
+virtual_server  group 111.13.235.192-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.192_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.192 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.192 bond1.kni;"
+
+    real_server 192.168.33.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 146 ##############################
+virtual_server_group 111.13.235.227-80-TCP_QLB {
+    111.13.235.227 80
+}
+
+deny_address_group 111.13.235.227_deny {
+}
+
+virtual_server  group 111.13.235.227-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.227_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.227 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.227 bond1.kni;"
+
+    real_server 192.168.42.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 147 ##############################
+virtual_server_group 111.13.235.110-80-TCP_QLB {
+    111.13.235.110 80
+}
+
+deny_address_group 111.13.235.110_deny {
+}
+
+virtual_server  group 111.13.235.110-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.110_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.110 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.110 bond1.kni;"
+
+    real_server 192.168.42.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 148 ##############################
+virtual_server_group 111.13.235.247-80-TCP_QLB {
+    111.13.235.247 80
+}
+
+deny_address_group 111.13.235.247_deny {
+}
+
+virtual_server  group 111.13.235.247-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.247_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.247 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.247 bond1.kni;"
+
+    real_server 192.168.50.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 149 ##############################
+virtual_server_group 111.13.235.67-80-TCP_QLB {
+    111.13.235.67 80
+}
+
+deny_address_group 111.13.235.67_deny {
+}
+
+virtual_server  group 111.13.235.67-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.67_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.67 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.67 bond1.kni;"
+
+    real_server 192.168.50.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 150 ##############################
+virtual_server_group 192.168.1.90-80-TCP_QLB {
+    192.168.1.90 80
+}
+
+deny_address_group 192.168.1.90_deny {
+}
+
+virtual_server  group 192.168.1.90-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.90_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.90 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.90 bond1.kni;"
+
+    real_server 192.168.57.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 151 ##############################
+virtual_server_group 192.168.1.44-80-TCP_QLB {
+    192.168.1.44 80
+}
+
+deny_address_group 192.168.1.44_deny {
+}
+
+virtual_server  group 192.168.1.44-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.44_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.44 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.44 bond1.kni;"
+
+    real_server 192.168.18.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 152 ##############################
+virtual_server_group 111.13.235.203-80-TCP_QLB {
+    111.13.235.203 80
+}
+
+deny_address_group 111.13.235.203_deny {
+}
+
+virtual_server  group 111.13.235.203-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.203_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.203 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.203 bond1.kni;"
+
+    real_server 192.168.35.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 153 ##############################
+virtual_server_group 192.168.1.26-80-TCP_QLB {
+    192.168.1.26 80
+}
+
+deny_address_group 192.168.1.26_deny {
+}
+
+virtual_server  group 192.168.1.26-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.26_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.26 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.26 bond1.kni;"
+
+    real_server 192.168.7.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 154 ##############################
+virtual_server_group 111.13.235.172-80-TCP_QLB {
+    111.13.235.172 80
+}
+
+deny_address_group 111.13.235.172_deny {
+}
+
+virtual_server  group 111.13.235.172-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.172_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.172 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.172 bond1.kni;"
+
+    real_server 192.168.58.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 155 ##############################
+virtual_server_group 111.13.235.182-80-TCP_QLB {
+    111.13.235.182 80
+}
+
+deny_address_group 111.13.235.182_deny {
+}
+
+virtual_server  group 111.13.235.182-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.182_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.182 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.182 bond1.kni;"
+
+    real_server 192.168.39.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 156 ##############################
+virtual_server_group 111.13.235.161-80-TCP_QLB {
+    111.13.235.161 80
+}
+
+deny_address_group 111.13.235.161_deny {
+}
+
+virtual_server  group 111.13.235.161-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.161_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.161 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.161 bond1.kni;"
+
+    real_server 192.168.6.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 157 ##############################
+virtual_server_group 111.13.235.221-80-TCP_QLB {
+    111.13.235.221 80
+}
+
+deny_address_group 111.13.235.221_deny {
+}
+
+virtual_server  group 111.13.235.221-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.221_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.221 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.221 bond1.kni;"
+
+    real_server 192.168.58.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 158 ##############################
+virtual_server_group 111.13.235.136-80-TCP_QLB {
+    111.13.235.136 80
+}
+
+deny_address_group 111.13.235.136_deny {
+}
+
+virtual_server  group 111.13.235.136-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.136_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.136 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.136 bond1.kni;"
+
+    real_server 192.168.58.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 159 ##############################
+virtual_server_group 192.168.1.46-80-TCP_QLB {
+    192.168.1.46 80
+}
+
+deny_address_group 192.168.1.46_deny {
+}
+
+virtual_server  group 192.168.1.46-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.46_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.46 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.46 bond1.kni;"
+
+    real_server 192.168.2.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 160 ##############################
+virtual_server_group 111.13.235.99-80-TCP_QLB {
+    111.13.235.99 80
+}
+
+deny_address_group 111.13.235.99_deny {
+}
+
+virtual_server  group 111.13.235.99-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.99_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.99 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.99 bond1.kni;"
+
+    real_server 192.168.27.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 161 ##############################
+virtual_server_group 111.13.235.92-80-TCP_QLB {
+    111.13.235.92 80
+}
+
+deny_address_group 111.13.235.92_deny {
+}
+
+virtual_server  group 111.13.235.92-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.92_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.92 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.92 bond1.kni;"
+
+    real_server 192.168.1.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 162 ##############################
+virtual_server_group 111.13.235.240-80-TCP_QLB {
+    111.13.235.240 80
+}
+
+deny_address_group 111.13.235.240_deny {
+}
+
+virtual_server  group 111.13.235.240-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.240_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.240 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.240 bond1.kni;"
+
+    real_server 192.168.54.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 163 ##############################
+virtual_server_group 111.13.235.120-80-TCP_QLB {
+    111.13.235.120 80
+}
+
+deny_address_group 111.13.235.120_deny {
+}
+
+virtual_server  group 111.13.235.120-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.120_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.120 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.120 bond1.kni;"
+
+    real_server 192.168.19.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 164 ##############################
+virtual_server_group 111.13.235.72-80-TCP_QLB {
+    111.13.235.72 80
+}
+
+deny_address_group 111.13.235.72_deny {
+}
+
+virtual_server  group 111.13.235.72-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.72_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.72 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.72 bond1.kni;"
+
+    real_server 192.168.37.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 165 ##############################
+virtual_server_group 111.13.235.229-80-TCP_QLB {
+    111.13.235.229 80
+}
+
+deny_address_group 111.13.235.229_deny {
+}
+
+virtual_server  group 111.13.235.229-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.229_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.229 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.229 bond1.kni;"
+
+    real_server 192.168.7.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 166 ##############################
+virtual_server_group 192.168.1.36-80-TCP_QLB {
+    192.168.1.36 80
+}
+
+deny_address_group 192.168.1.36_deny {
+}
+
+virtual_server  group 192.168.1.36-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.36_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.36 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.36 bond1.kni;"
+
+    real_server 192.168.57.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 167 ##############################
+virtual_server_group 111.13.235.223-80-TCP_QLB {
+    111.13.235.223 80
+}
+
+deny_address_group 111.13.235.223_deny {
+}
+
+virtual_server  group 111.13.235.223-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.223_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.223 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.223 bond1.kni;"
+
+    real_server 192.168.29.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 168 ##############################
+virtual_server_group 192.168.1.91-80-TCP_QLB {
+    192.168.1.91 80
+}
+
+deny_address_group 192.168.1.91_deny {
+}
+
+virtual_server  group 192.168.1.91-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.91_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.91 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.91 bond1.kni;"
+
+    real_server 192.168.33.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 169 ##############################
+virtual_server_group 111.13.235.189-80-TCP_QLB {
+    111.13.235.189 80
+}
+
+deny_address_group 111.13.235.189_deny {
+}
+
+virtual_server  group 111.13.235.189-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.189_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.189 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.189 bond1.kni;"
+
+    real_server 192.168.51.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 170 ##############################
+virtual_server_group 111.13.235.152-80-TCP_QLB {
+    111.13.235.152 80
+}
+
+deny_address_group 111.13.235.152_deny {
+}
+
+virtual_server  group 111.13.235.152-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.152_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.152 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.152 bond1.kni;"
+
+    real_server 192.168.29.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 171 ##############################
+virtual_server_group 111.13.235.68-80-TCP_QLB {
+    111.13.235.68 80
+}
+
+deny_address_group 111.13.235.68_deny {
+}
+
+virtual_server  group 111.13.235.68-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.68_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.68 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.68 bond1.kni;"
+
+    real_server 192.168.11.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 172 ##############################
+virtual_server_group 111.13.235.104-80-TCP_QLB {
+    111.13.235.104 80
+}
+
+deny_address_group 111.13.235.104_deny {
+}
+
+virtual_server  group 111.13.235.104-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.104_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.104 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.104 bond1.kni;"
+
+    real_server 192.168.9.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 173 ##############################
+virtual_server_group 111.13.235.145-80-TCP_QLB {
+    111.13.235.145 80
+}
+
+deny_address_group 111.13.235.145_deny {
+}
+
+virtual_server  group 111.13.235.145-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.145_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.145 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.145 bond1.kni;"
+
+    real_server 192.168.27.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 174 ##############################
+virtual_server_group 111.13.235.218-80-TCP_QLB {
+    111.13.235.218 80
+}
+
+deny_address_group 111.13.235.218_deny {
+}
+
+virtual_server  group 111.13.235.218-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.218_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.218 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.218 bond1.kni;"
+
+    real_server 192.168.17.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 175 ##############################
+virtual_server_group 111.13.235.248-80-TCP_QLB {
+    111.13.235.248 80
+}
+
+deny_address_group 111.13.235.248_deny {
+}
+
+virtual_server  group 111.13.235.248-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.248_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.248 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.248 bond1.kni;"
+
+    real_server 192.168.58.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 176 ##############################
+virtual_server_group 192.168.1.62-80-TCP_QLB {
+    192.168.1.62 80
+}
+
+deny_address_group 192.168.1.62_deny {
+}
+
+virtual_server  group 192.168.1.62-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.62_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.62 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.62 bond1.kni;"
+
+    real_server 192.168.41.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 177 ##############################
+virtual_server_group 111.13.235.255-80-TCP_QLB {
+    111.13.235.255 80
+}
+
+deny_address_group 111.13.235.255_deny {
+}
+
+virtual_server  group 111.13.235.255-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.255_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.255 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.255 bond1.kni;"
+
+    real_server 192.168.46.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 178 ##############################
+virtual_server_group 111.13.235.137-80-TCP_QLB {
+    111.13.235.137 80
+}
+
+deny_address_group 111.13.235.137_deny {
+}
+
+virtual_server  group 111.13.235.137-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.137_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.137 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.137 bond1.kni;"
+
+    real_server 192.168.18.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 179 ##############################
+virtual_server_group 111.13.235.157-80-TCP_QLB {
+    111.13.235.157 80
+}
+
+deny_address_group 111.13.235.157_deny {
+}
+
+virtual_server  group 111.13.235.157-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.157_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.157 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.157 bond1.kni;"
+
+    real_server 192.168.58.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 180 ##############################
+virtual_server_group 111.13.235.206-80-TCP_QLB {
+    111.13.235.206 80
+}
+
+deny_address_group 111.13.235.206_deny {
+}
+
+virtual_server  group 111.13.235.206-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.206_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.206 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.206 bond1.kni;"
+
+    real_server 192.168.50.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 181 ##############################
+virtual_server_group 111.13.235.121-80-TCP_QLB {
+    111.13.235.121 80
+}
+
+deny_address_group 111.13.235.121_deny {
+}
+
+virtual_server  group 111.13.235.121-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.121_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.121 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.121 bond1.kni;"
+
+    real_server 192.168.42.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 182 ##############################
+virtual_server_group 192.168.1.76-80-TCP_QLB {
+    192.168.1.76 80
+}
+
+deny_address_group 192.168.1.76_deny {
+}
+
+virtual_server  group 192.168.1.76-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.76_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.76 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.76 bond1.kni;"
+
+    real_server 192.168.19.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 183 ##############################
+virtual_server_group 192.168.1.72-80-TCP_QLB {
+    192.168.1.72 80
+}
+
+deny_address_group 192.168.1.72_deny {
+}
+
+virtual_server  group 192.168.1.72-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.72_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.72 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.72 bond1.kni;"
+
+    real_server 192.168.17.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 184 ##############################
+virtual_server_group 111.13.235.214-80-TCP_QLB {
+    111.13.235.214 80
+}
+
+deny_address_group 111.13.235.214_deny {
+}
+
+virtual_server  group 111.13.235.214-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.214_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.214 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.214 bond1.kni;"
+
+    real_server 192.168.46.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 185 ##############################
+virtual_server_group 111.13.235.71-80-TCP_QLB {
+    111.13.235.71 80
+}
+
+deny_address_group 111.13.235.71_deny {
+}
+
+virtual_server  group 111.13.235.71-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.71_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.71 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.71 bond1.kni;"
+
+    real_server 192.168.11.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 186 ##############################
+virtual_server_group 111.13.235.102-80-TCP_QLB {
+    111.13.235.102 80
+}
+
+deny_address_group 111.13.235.102_deny {
+}
+
+virtual_server  group 111.13.235.102-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.102_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.102 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.102 bond1.kni;"
+
+    real_server 192.168.47.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 187 ##############################
+virtual_server_group 111.13.235.140-80-TCP_QLB {
+    111.13.235.140 80
+}
+
+deny_address_group 111.13.235.140_deny {
+}
+
+virtual_server  group 111.13.235.140-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.140_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.140 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.140 bond1.kni;"
+
+    real_server 192.168.43.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 188 ##############################
+virtual_server_group 111.13.235.195-80-TCP_QLB {
+    111.13.235.195 80
+}
+
+deny_address_group 111.13.235.195_deny {
+}
+
+virtual_server  group 111.13.235.195-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.195_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.195 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.195 bond1.kni;"
+
+    real_server 192.168.3.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 189 ##############################
+virtual_server_group 192.168.1.89-80-TCP_QLB {
+    192.168.1.89 80
+}
+
+deny_address_group 192.168.1.89_deny {
+}
+
+virtual_server  group 192.168.1.89-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.89_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.89 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.89 bond1.kni;"
+
+    real_server 192.168.11.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 190 ##############################
+virtual_server_group 192.168.1.78-80-TCP_QLB {
+    192.168.1.78 80
+}
+
+deny_address_group 192.168.1.78_deny {
+}
+
+virtual_server  group 192.168.1.78-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.78_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.78 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.78 bond1.kni;"
+
+    real_server 192.168.46.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 191 ##############################
+virtual_server_group 111.13.235.250-80-TCP_QLB {
+    111.13.235.250 80
+}
+
+deny_address_group 111.13.235.250_deny {
+}
+
+virtual_server  group 111.13.235.250-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.250_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.250 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.250 bond1.kni;"
+
+    real_server 192.168.58.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 192 ##############################
+virtual_server_group 192.168.1.39-80-TCP_QLB {
+    192.168.1.39 80
+}
+
+deny_address_group 192.168.1.39_deny {
+}
+
+virtual_server  group 192.168.1.39-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.39_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.39 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.39 bond1.kni;"
+
+    real_server 192.168.33.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 193 ##############################
+virtual_server_group 111.13.235.198-80-TCP_QLB {
+    111.13.235.198 80
+}
+
+deny_address_group 111.13.235.198_deny {
+}
+
+virtual_server  group 111.13.235.198-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.198_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.198 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.198 bond1.kni;"
+
+    real_server 192.168.35.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 194 ##############################
+virtual_server_group 111.13.235.123-80-TCP_QLB {
+    111.13.235.123 80
+}
+
+deny_address_group 111.13.235.123_deny {
+}
+
+virtual_server  group 111.13.235.123-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.123_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.123 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.123 bond1.kni;"
+
+    real_server 192.168.6.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 195 ##############################
+virtual_server_group 192.168.1.100-80-TCP_QLB {
+    192.168.1.100 80
+}
+
+deny_address_group 192.168.1.100_deny {
+}
+
+virtual_server  group 192.168.1.100-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.100_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.100 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.100 bond1.kni;"
+
+    real_server 192.168.25.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 196 ##############################
+virtual_server_group 111.13.235.97-80-TCP_QLB {
+    111.13.235.97 80
+}
+
+deny_address_group 111.13.235.97_deny {
+}
+
+virtual_server  group 111.13.235.97-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.97_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.97 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.97 bond1.kni;"
+
+    real_server 192.168.6.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 197 ##############################
+virtual_server_group 111.13.235.112-80-TCP_QLB {
+    111.13.235.112 80
+}
+
+deny_address_group 111.13.235.112_deny {
+}
+
+virtual_server  group 111.13.235.112-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.112_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.112 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.112 bond1.kni;"
+
+    real_server 192.168.7.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 198 ##############################
+virtual_server_group 111.13.235.154-80-TCP_QLB {
+    111.13.235.154 80
+}
+
+deny_address_group 111.13.235.154_deny {
+}
+
+virtual_server  group 111.13.235.154-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.154_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.154 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.154 bond1.kni;"
+
+    real_server 192.168.41.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 199 ##############################
+virtual_server_group 111.13.235.119-80-TCP_QLB {
+    111.13.235.119 80
+}
+
+deny_address_group 111.13.235.119_deny {
+}
+
+virtual_server  group 111.13.235.119-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.119_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.119 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.119 bond1.kni;"
+
+    real_server 192.168.34.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 200 ##############################
+virtual_server_group 192.168.1.84-80-TCP_QLB {
+    192.168.1.84 80
+}
+
+deny_address_group 192.168.1.84_deny {
+}
+
+virtual_server  group 192.168.1.84-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.84_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.84 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.84 bond1.kni;"
+
+    real_server 192.168.59.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 201 ##############################
+virtual_server_group 111.13.235.159-80-TCP_QLB {
+    111.13.235.159 80
+}
+
+deny_address_group 111.13.235.159_deny {
+}
+
+virtual_server  group 111.13.235.159-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.159_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.159 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.159 bond1.kni;"
+
+    real_server 192.168.55.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 202 ##############################
+virtual_server_group 192.168.1.28-80-TCP_QLB {
+    192.168.1.28 80
+}
+
+deny_address_group 192.168.1.28_deny {
+}
+
+virtual_server  group 192.168.1.28-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.28_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.28 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.28 bond1.kni;"
+
+    real_server 192.168.3.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 203 ##############################
+virtual_server_group 111.13.235.187-80-TCP_QLB {
+    111.13.235.187 80
+}
+
+deny_address_group 111.13.235.187_deny {
+}
+
+virtual_server  group 111.13.235.187-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.187_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.187 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.187 bond1.kni;"
+
+    real_server 192.168.5.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 204 ##############################
+virtual_server_group 192.168.1.12-80-TCP_QLB {
+    192.168.1.12 80
+}
+
+deny_address_group 192.168.1.12_deny {
+}
+
+virtual_server  group 192.168.1.12-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.12_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.12 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.12 bond1.kni;"
+
+    real_server 192.168.13.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 205 ##############################
+virtual_server_group 111.13.235.234-80-TCP_QLB {
+    111.13.235.234 80
+}
+
+deny_address_group 111.13.235.234_deny {
+}
+
+virtual_server  group 111.13.235.234-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.234_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.234 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.234 bond1.kni;"
+
+    real_server 192.168.58.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 206 ##############################
+virtual_server_group 192.168.1.68-80-TCP_QLB {
+    192.168.1.68 80
+}
+
+deny_address_group 192.168.1.68_deny {
+}
+
+virtual_server  group 192.168.1.68-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.68_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.68 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.68 bond1.kni;"
+
+    real_server 192.168.50.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 207 ##############################
+virtual_server_group 111.13.235.82-80-TCP_QLB {
+    111.13.235.82 80
+}
+
+deny_address_group 111.13.235.82_deny {
+}
+
+virtual_server  group 111.13.235.82-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.82_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.82 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.82 bond1.kni;"
+
+    real_server 192.168.54.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 208 ##############################
+virtual_server_group 192.168.1.50-80-TCP_QLB {
+    192.168.1.50 80
+}
+
+deny_address_group 192.168.1.50_deny {
+}
+
+virtual_server  group 192.168.1.50-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.50_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.50 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.50 bond1.kni;"
+
+    real_server 192.168.54.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 209 ##############################
+virtual_server_group 111.13.235.96-80-TCP_QLB {
+    111.13.235.96 80
+}
+
+deny_address_group 111.13.235.96_deny {
+}
+
+virtual_server  group 111.13.235.96-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.96_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.96 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.96 bond1.kni;"
+
+    real_server 192.168.51.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 210 ##############################
+virtual_server_group 111.13.235.108-80-TCP_QLB {
+    111.13.235.108 80
+}
+
+deny_address_group 111.13.235.108_deny {
+}
+
+virtual_server  group 111.13.235.108-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.108_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.108 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.108 bond1.kni;"
+
+    real_server 192.168.2.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 211 ##############################
+virtual_server_group 111.13.235.213-80-TCP_QLB {
+    111.13.235.213 80
+}
+
+deny_address_group 111.13.235.213_deny {
+}
+
+virtual_server  group 111.13.235.213-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.213_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.213 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.213 bond1.kni;"
+
+    real_server 192.168.7.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 212 ##############################
+virtual_server_group 111.13.235.158-80-TCP_QLB {
+    111.13.235.158 80
+}
+
+deny_address_group 111.13.235.158_deny {
+}
+
+virtual_server  group 111.13.235.158-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.158_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.158 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.158 bond1.kni;"
+
+    real_server 192.168.30.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 213 ##############################
+virtual_server_group 192.168.1.5-80-TCP_QLB {
+    192.168.1.5 80
+}
+
+deny_address_group 192.168.1.5_deny {
+}
+
+virtual_server  group 192.168.1.5-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.5_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.5 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.5 bond1.kni;"
+
+    real_server 192.168.17.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 214 ##############################
+virtual_server_group 192.168.1.8-80-TCP_QLB {
+    192.168.1.8 80
+}
+
+deny_address_group 192.168.1.8_deny {
+}
+
+virtual_server  group 192.168.1.8-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.8_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.8 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.8 bond1.kni;"
+
+    real_server 192.168.19.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 215 ##############################
+virtual_server_group 111.13.235.88-80-TCP_QLB {
+    111.13.235.88 80
+}
+
+deny_address_group 111.13.235.88_deny {
+}
+
+virtual_server  group 111.13.235.88-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.88_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.88 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.88 bond1.kni;"
+
+    real_server 192.168.37.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 216 ##############################
+virtual_server_group 192.168.1.31-80-TCP_QLB {
+    192.168.1.31 80
+}
+
+deny_address_group 192.168.1.31_deny {
+}
+
+virtual_server  group 192.168.1.31-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.31_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.31 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.31 bond1.kni;"
+
+    real_server 192.168.43.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 217 ##############################
+virtual_server_group 192.168.1.35-80-TCP_QLB {
+    192.168.1.35 80
+}
+
+deny_address_group 192.168.1.35_deny {
+}
+
+virtual_server  group 192.168.1.35-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.35_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.35 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.35 bond1.kni;"
+
+    real_server 192.168.46.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 218 ##############################
+virtual_server_group 111.13.235.87-80-TCP_QLB {
+    111.13.235.87 80
+}
+
+deny_address_group 111.13.235.87_deny {
+}
+
+virtual_server  group 111.13.235.87-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.87_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.87 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.87 bond1.kni;"
+
+    real_server 192.168.13.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 219 ##############################
+virtual_server_group 192.168.1.33-80-TCP_QLB {
+    192.168.1.33 80
+}
+
+deny_address_group 192.168.1.33_deny {
+}
+
+virtual_server  group 192.168.1.33-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.33_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.33 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.33 bond1.kni;"
+
+    real_server 192.168.39.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 220 ##############################
+virtual_server_group 111.13.235.180-80-TCP_QLB {
+    111.13.235.180 80
+}
+
+deny_address_group 111.13.235.180_deny {
+}
+
+virtual_server  group 111.13.235.180-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.180_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.180 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.180 bond1.kni;"
+
+    real_server 192.168.54.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 221 ##############################
+virtual_server_group 192.168.1.23-80-TCP_QLB {
+    192.168.1.23 80
+}
+
+deny_address_group 192.168.1.23_deny {
+}
+
+virtual_server  group 192.168.1.23-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.23_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.23 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.23 bond1.kni;"
+
+    real_server 192.168.21.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 222 ##############################
+virtual_server_group 111.13.235.191-80-TCP_QLB {
+    111.13.235.191 80
+}
+
+deny_address_group 111.13.235.191_deny {
+}
+
+virtual_server  group 111.13.235.191-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.191_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.191 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.191 bond1.kni;"
+
+    real_server 192.168.34.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 223 ##############################
+virtual_server_group 111.13.235.228-80-TCP_QLB {
+    111.13.235.228 80
+}
+
+deny_address_group 111.13.235.228_deny {
+}
+
+virtual_server  group 111.13.235.228-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.228_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.228 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.228 bond1.kni;"
+
+    real_server 192.168.27.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 224 ##############################
+virtual_server_group 192.168.1.1-80-TCP_QLB {
+    192.168.1.1 80
+}
+
+deny_address_group 192.168.1.1_deny {
+}
+
+virtual_server  group 192.168.1.1-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.1_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.1 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.1 bond1.kni;"
+
+    real_server 192.168.38.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 225 ##############################
+virtual_server_group 111.13.235.160-80-TCP_QLB {
+    111.13.235.160 80
+}
+
+deny_address_group 111.13.235.160_deny {
+}
+
+virtual_server  group 111.13.235.160-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.160_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.160 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.160 bond1.kni;"
+
+    real_server 192.168.34.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 226 ##############################
+virtual_server_group 192.168.1.93-80-TCP_QLB {
+    192.168.1.93 80
+}
+
+deny_address_group 192.168.1.93_deny {
+}
+
+virtual_server  group 192.168.1.93-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.93_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.93 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.93 bond1.kni;"
+
+    real_server 192.168.9.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 227 ##############################
+virtual_server_group 111.13.235.73-80-TCP_QLB {
+    111.13.235.73 80
+}
+
+deny_address_group 111.13.235.73_deny {
+}
+
+virtual_server  group 111.13.235.73-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.73_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.73 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.73 bond1.kni;"
+
+    real_server 192.168.14.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 228 ##############################
+virtual_server_group 111.13.235.78-80-TCP_QLB {
+    111.13.235.78 80
+}
+
+deny_address_group 111.13.235.78_deny {
+}
+
+virtual_server  group 111.13.235.78-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.78_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.78 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.78 bond1.kni;"
+
+    real_server 192.168.41.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 229 ##############################
+virtual_server_group 111.13.235.146-80-TCP_QLB {
+    111.13.235.146 80
+}
+
+deny_address_group 111.13.235.146_deny {
+}
+
+virtual_server  group 111.13.235.146-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.146_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.146 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.146 bond1.kni;"
+
+    real_server 192.168.5.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 230 ##############################
+virtual_server_group 111.13.235.226-80-TCP_QLB {
+    111.13.235.226 80
+}
+
+deny_address_group 111.13.235.226_deny {
+}
+
+virtual_server  group 111.13.235.226-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.226_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.226 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.226 bond1.kni;"
+
+    real_server 192.168.19.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 231 ##############################
+virtual_server_group 111.13.235.106-80-TCP_QLB {
+    111.13.235.106 80
+}
+
+deny_address_group 111.13.235.106_deny {
+}
+
+virtual_server  group 111.13.235.106-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.106_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.106 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.106 bond1.kni;"
+
+    real_server 192.168.13.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 232 ##############################
+virtual_server_group 192.168.1.63-80-TCP_QLB {
+    192.168.1.63 80
+}
+
+deny_address_group 192.168.1.63_deny {
+}
+
+virtual_server  group 192.168.1.63-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.63_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.63 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.63 bond1.kni;"
+
+    real_server 192.168.6.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 233 ##############################
+virtual_server_group 111.13.235.126-80-TCP_QLB {
+    111.13.235.126 80
+}
+
+deny_address_group 111.13.235.126_deny {
+}
+
+virtual_server  group 111.13.235.126-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.126_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.126 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.126 bond1.kni;"
+
+    real_server 192.168.34.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 234 ##############################
+virtual_server_group 111.13.235.170-80-TCP_QLB {
+    111.13.235.170 80
+}
+
+deny_address_group 111.13.235.170_deny {
+}
+
+virtual_server  group 111.13.235.170-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.170_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.170 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.170 bond1.kni;"
+
+    real_server 192.168.30.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 235 ##############################
+virtual_server_group 192.168.1.97-80-TCP_QLB {
+    192.168.1.97 80
+}
+
+deny_address_group 192.168.1.97_deny {
+}
+
+virtual_server  group 192.168.1.97-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.97_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.97 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.97 bond1.kni;"
+
+    real_server 192.168.26.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 236 ##############################
+virtual_server_group 111.13.235.231-80-TCP_QLB {
+    111.13.235.231 80
+}
+
+deny_address_group 111.13.235.231_deny {
+}
+
+virtual_server  group 111.13.235.231-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.231_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.231 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.231 bond1.kni;"
+
+    real_server 192.168.45.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 237 ##############################
+virtual_server_group 111.13.235.163-80-TCP_QLB {
+    111.13.235.163 80
+}
+
+deny_address_group 111.13.235.163_deny {
+}
+
+virtual_server  group 111.13.235.163-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.163_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.163 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.163 bond1.kni;"
+
+    real_server 192.168.51.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 238 ##############################
+virtual_server_group 111.13.235.200-80-TCP_QLB {
+    111.13.235.200 80
+}
+
+deny_address_group 111.13.235.200_deny {
+}
+
+virtual_server  group 111.13.235.200-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.200_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.200 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.200 bond1.kni;"
+
+    real_server 192.168.37.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 239 ##############################
+virtual_server_group 111.13.235.134-80-TCP_QLB {
+    111.13.235.134 80
+}
+
+deny_address_group 111.13.235.134_deny {
+}
+
+virtual_server  group 111.13.235.134-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.134_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.134 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.134 bond1.kni;"
+
+    real_server 192.168.58.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 240 ##############################
+virtual_server_group 111.13.235.168-80-TCP_QLB {
+    111.13.235.168 80
+}
+
+deny_address_group 111.13.235.168_deny {
+}
+
+virtual_server  group 111.13.235.168-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.168_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.168 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.168 bond1.kni;"
+
+    real_server 192.168.2.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 241 ##############################
+virtual_server_group 192.168.1.85-80-TCP_QLB {
+    192.168.1.85 80
+}
+
+deny_address_group 192.168.1.85_deny {
+}
+
+virtual_server  group 192.168.1.85-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.85_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.85 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.85 bond1.kni;"
+
+    real_server 192.168.46.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 242 ##############################
+virtual_server_group 192.168.1.65-80-TCP_QLB {
+    192.168.1.65 80
+}
+
+deny_address_group 192.168.1.65_deny {
+}
+
+virtual_server  group 192.168.1.65-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.65_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.65 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.65 bond1.kni;"
+
+    real_server 192.168.35.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 243 ##############################
+virtual_server_group 192.168.1.6-80-TCP_QLB {
+    192.168.1.6 80
+}
+
+deny_address_group 192.168.1.6_deny {
+}
+
+virtual_server  group 192.168.1.6-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.6_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.6 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.6 bond1.kni;"
+
+    real_server 192.168.38.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 244 ##############################
+virtual_server_group 111.13.235.238-80-TCP_QLB {
+    111.13.235.238 80
+}
+
+deny_address_group 111.13.235.238_deny {
+}
+
+virtual_server  group 111.13.235.238-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.238_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.238 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.238 bond1.kni;"
+
+    real_server 192.168.51.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 245 ##############################
+virtual_server_group 192.168.1.92-80-TCP_QLB {
+    192.168.1.92 80
+}
+
+deny_address_group 192.168.1.92_deny {
+}
+
+virtual_server  group 192.168.1.92-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.92_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.92 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.92 bond1.kni;"
+
+    real_server 192.168.1.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 246 ##############################
+virtual_server_group 111.13.235.175-80-TCP_QLB {
+    111.13.235.175 80
+}
+
+deny_address_group 111.13.235.175_deny {
+}
+
+virtual_server  group 111.13.235.175-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.175_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.175 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.175 bond1.kni;"
+
+    real_server 192.168.59.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 247 ##############################
+virtual_server_group 111.13.235.242-80-TCP_QLB {
+    111.13.235.242 80
+}
+
+deny_address_group 111.13.235.242_deny {
+}
+
+virtual_server  group 111.13.235.242-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.242_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.242 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.242 bond1.kni;"
+
+    real_server 192.168.57.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 248 ##############################
+virtual_server_group 192.168.1.52-80-TCP_QLB {
+    192.168.1.52 80
+}
+
+deny_address_group 192.168.1.52_deny {
+}
+
+virtual_server  group 192.168.1.52-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.52_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.52 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.52 bond1.kni;"
+
+    real_server 192.168.5.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 249 ##############################
+virtual_server_group 192.168.1.49-80-TCP_QLB {
+    192.168.1.49 80
+}
+
+deny_address_group 192.168.1.49_deny {
+}
+
+virtual_server  group 192.168.1.49-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.49_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.49 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.49 bond1.kni;"
+
+    real_server 192.168.23.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 250 ##############################
+virtual_server_group 111.13.235.216-80-TCP_QLB {
+    111.13.235.216 80
+}
+
+deny_address_group 111.13.235.216_deny {
+}
+
+virtual_server  group 111.13.235.216-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.216_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.216 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.216 bond1.kni;"
+
+    real_server 192.168.25.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 251 ##############################
+virtual_server_group 111.13.235.131-80-TCP_QLB {
+    111.13.235.131 80
+}
+
+deny_address_group 111.13.235.131_deny {
+}
+
+virtual_server  group 111.13.235.131-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.131_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.131 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.131 bond1.kni;"
+
+    real_server 192.168.33.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 252 ##############################
+virtual_server_group 111.13.235.185-80-TCP_QLB {
+    111.13.235.185 80
+}
+
+deny_address_group 111.13.235.185_deny {
+}
+
+virtual_server  group 111.13.235.185-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.185_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.185 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.185 bond1.kni;"
+
+    real_server 192.168.50.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 253 ##############################
+virtual_server_group 111.13.235.107-80-TCP_QLB {
+    111.13.235.107 80
+}
+
+deny_address_group 111.13.235.107_deny {
+}
+
+virtual_server  group 111.13.235.107-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.107_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.107 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.107 bond1.kni;"
+
+    real_server 192.168.27.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 254 ##############################
+virtual_server_group 111.13.235.202-80-TCP_QLB {
+    111.13.235.202 80
+}
+
+deny_address_group 111.13.235.202_deny {
+}
+
+virtual_server  group 111.13.235.202-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.202_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.202 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.202 bond1.kni;"
+
+    real_server 192.168.58.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 255 ##############################
+virtual_server_group 111.13.235.252-80-TCP_QLB {
+    111.13.235.252 80
+}
+
+deny_address_group 111.13.235.252_deny {
+}
+
+virtual_server  group 111.13.235.252-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.252_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.252 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.252 bond1.kni;"
+
+    real_server 192.168.25.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 256 ##############################
+virtual_server_group 111.13.235.125-80-TCP_QLB {
+    111.13.235.125 80
+}
+
+deny_address_group 111.13.235.125_deny {
+}
+
+virtual_server  group 111.13.235.125-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.125_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.125 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.125 bond1.kni;"
+
+    real_server 192.168.21.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 257 ##############################
+virtual_server_group 111.13.235.210-80-TCP_QLB {
+    111.13.235.210 80
+}
+
+deny_address_group 111.13.235.210_deny {
+}
+
+virtual_server  group 111.13.235.210-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.210_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.210 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.210 bond1.kni;"
+
+    real_server 192.168.2.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 258 ##############################
+virtual_server_group 192.168.1.94-80-TCP_QLB {
+    192.168.1.94 80
+}
+
+deny_address_group 192.168.1.94_deny {
+}
+
+virtual_server  group 192.168.1.94-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.94_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.94 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.94 bond1.kni;"
+
+    real_server 192.168.57.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 259 ##############################
+virtual_server_group 192.168.1.57-80-TCP_QLB {
+    192.168.1.57 80
+}
+
+deny_address_group 192.168.1.57_deny {
+}
+
+virtual_server  group 192.168.1.57-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.57_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.57 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.57 bond1.kni;"
+
+    real_server 192.168.37.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 260 ##############################
+virtual_server_group 111.13.235.236-80-TCP_QLB {
+    111.13.235.236 80
+}
+
+deny_address_group 111.13.235.236_deny {
+}
+
+virtual_server  group 111.13.235.236-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.236_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.236 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.236 bond1.kni;"
+
+    real_server 192.168.57.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 261 ##############################
+virtual_server_group 192.168.1.58-80-TCP_QLB {
+    192.168.1.58 80
+}
+
+deny_address_group 192.168.1.58_deny {
+}
+
+virtual_server  group 192.168.1.58-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.58_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.58 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.58 bond1.kni;"
+
+    real_server 192.168.29.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 262 ##############################
+virtual_server_group 111.13.235.222-80-TCP_QLB {
+    111.13.235.222 80
+}
+
+deny_address_group 111.13.235.222_deny {
+}
+
+virtual_server  group 111.13.235.222-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.222_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.222 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.222 bond1.kni;"
+
+    real_server 192.168.22.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 263 ##############################
+virtual_server_group 192.168.1.69-80-TCP_QLB {
+    192.168.1.69 80
+}
+
+deny_address_group 192.168.1.69_deny {
+}
+
+virtual_server  group 192.168.1.69-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.69_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.69 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.69 bond1.kni;"
+
+    real_server 192.168.9.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 264 ##############################
+virtual_server_group 192.168.1.13-80-TCP_QLB {
+    192.168.1.13 80
+}
+
+deny_address_group 192.168.1.13_deny {
+}
+
+virtual_server  group 192.168.1.13-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.13_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.13 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.13 bond1.kni;"
+
+    real_server 192.168.1.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 265 ##############################
+virtual_server_group 111.13.235.176-80-TCP_QLB {
+    111.13.235.176 80
+}
+
+deny_address_group 111.13.235.176_deny {
+}
+
+virtual_server  group 111.13.235.176-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.176_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.176 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.176 bond1.kni;"
+
+    real_server 192.168.13.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 266 ##############################
+virtual_server_group 192.168.1.48-80-TCP_QLB {
+    192.168.1.48 80
+}
+
+deny_address_group 192.168.1.48_deny {
+}
+
+virtual_server  group 192.168.1.48-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.48_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.48 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.48 bond1.kni;"
+
+    real_server 192.168.14.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 267 ##############################
+virtual_server_group 111.13.235.105-80-TCP_QLB {
+    111.13.235.105 80
+}
+
+deny_address_group 111.13.235.105_deny {
+}
+
+virtual_server  group 111.13.235.105-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.105_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.105 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.105 bond1.kni;"
+
+    real_server 192.168.18.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 268 ##############################
+virtual_server_group 111.13.235.199-80-TCP_QLB {
+    111.13.235.199 80
+}
+
+deny_address_group 111.13.235.199_deny {
+}
+
+virtual_server  group 111.13.235.199-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.199_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.199 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.199 bond1.kni;"
+
+    real_server 192.168.7.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 269 ##############################
+virtual_server_group 111.13.235.143-80-TCP_QLB {
+    111.13.235.143 80
+}
+
+deny_address_group 111.13.235.143_deny {
+}
+
+virtual_server  group 111.13.235.143-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.143_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.143 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.143 bond1.kni;"
+
+    real_server 192.168.14.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 270 ##############################
+virtual_server_group 111.13.235.179-80-TCP_QLB {
+    111.13.235.179 80
+}
+
+deny_address_group 111.13.235.179_deny {
+}
+
+virtual_server  group 111.13.235.179-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.179_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.179 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.179 bond1.kni;"
+
+    real_server 192.168.13.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 271 ##############################
+virtual_server_group 192.168.1.80-80-TCP_QLB {
+    192.168.1.80 80
+}
+
+deny_address_group 192.168.1.80_deny {
+}
+
+virtual_server  group 192.168.1.80-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.80_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.80 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.80 bond1.kni;"
+
+    real_server 192.168.7.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 272 ##############################
+virtual_server_group 111.13.235.132-80-TCP_QLB {
+    111.13.235.132 80
+}
+
+deny_address_group 111.13.235.132_deny {
+}
+
+virtual_server  group 111.13.235.132-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.132_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.132 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.132 bond1.kni;"
+
+    real_server 192.168.42.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 273 ##############################
+virtual_server_group 111.13.235.81-80-TCP_QLB {
+    111.13.235.81 80
+}
+
+deny_address_group 111.13.235.81_deny {
+}
+
+virtual_server  group 111.13.235.81-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.81_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.81 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.81 bond1.kni;"
+
+    real_server 192.168.55.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 274 ##############################
+virtual_server_group 192.168.1.98-80-TCP_QLB {
+    192.168.1.98 80
+}
+
+deny_address_group 192.168.1.98_deny {
+}
+
+virtual_server  group 192.168.1.98-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.98_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.98 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.98 bond1.kni;"
+
+    real_server 192.168.30.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 275 ##############################
+virtual_server_group 111.13.235.65-80-TCP_QLB {
+    111.13.235.65 80
+}
+
+deny_address_group 111.13.235.65_deny {
+}
+
+virtual_server  group 111.13.235.65-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.65_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.65 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.65 bond1.kni;"
+
+    real_server 192.168.18.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 276 ##############################
+virtual_server_group 192.168.1.25-80-TCP_QLB {
+    192.168.1.25 80
+}
+
+deny_address_group 192.168.1.25_deny {
+}
+
+virtual_server  group 192.168.1.25-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.25_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.25 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.25 bond1.kni;"
+
+    real_server 192.168.53.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 277 ##############################
+virtual_server_group 192.168.1.16-80-TCP_QLB {
+    192.168.1.16 80
+}
+
+deny_address_group 192.168.1.16_deny {
+}
+
+virtual_server  group 192.168.1.16-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.16_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.16 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.16 bond1.kni;"
+
+    real_server 192.168.43.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 278 ##############################
+virtual_server_group 111.13.235.219-80-TCP_QLB {
+    111.13.235.219 80
+}
+
+deny_address_group 111.13.235.219_deny {
+}
+
+virtual_server  group 111.13.235.219-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.219_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.219 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.219 bond1.kni;"
+
+    real_server 192.168.11.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 279 ##############################
+virtual_server_group 192.168.1.14-80-TCP_QLB {
+    192.168.1.14 80
+}
+
+deny_address_group 192.168.1.14_deny {
+}
+
+virtual_server  group 192.168.1.14-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.14_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.14 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.14 bond1.kni;"
+
+    real_server 192.168.55.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 280 ##############################
+virtual_server_group 192.168.1.74-80-TCP_QLB {
+    192.168.1.74 80
+}
+
+deny_address_group 192.168.1.74_deny {
+}
+
+virtual_server  group 192.168.1.74-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.74_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.74 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.74 bond1.kni;"
+
+    real_server 192.168.29.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 281 ##############################
+virtual_server_group 111.13.235.95-80-TCP_QLB {
+    111.13.235.95 80
+}
+
+deny_address_group 111.13.235.95_deny {
+}
+
+virtual_server  group 111.13.235.95-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.95_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.95 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.95 bond1.kni;"
+
+    real_server 192.168.29.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 282 ##############################
+virtual_server_group 111.13.235.117-80-TCP_QLB {
+    111.13.235.117 80
+}
+
+deny_address_group 111.13.235.117_deny {
+}
+
+virtual_server  group 111.13.235.117-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.117_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.117 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.117 bond1.kni;"
+
+    real_server 192.168.25.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 283 ##############################
+virtual_server_group 111.13.235.156-80-TCP_QLB {
+    111.13.235.156 80
+}
+
+deny_address_group 111.13.235.156_deny {
+}
+
+virtual_server  group 111.13.235.156-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.156_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.156 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.156 bond1.kni;"
+
+    real_server 192.168.13.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 284 ##############################
+virtual_server_group 111.13.235.164-80-TCP_QLB {
+    111.13.235.164 80
+}
+
+deny_address_group 111.13.235.164_deny {
+}
+
+virtual_server  group 111.13.235.164-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.164_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.164 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.164 bond1.kni;"
+
+    real_server 192.168.51.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 285 ##############################
+virtual_server_group 192.168.1.71-80-TCP_QLB {
+    192.168.1.71 80
+}
+
+deny_address_group 192.168.1.71_deny {
+}
+
+virtual_server  group 192.168.1.71-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.71_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.71 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.71 bond1.kni;"
+
+    real_server 192.168.38.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 286 ##############################
+virtual_server_group 192.168.1.17-80-TCP_QLB {
+    192.168.1.17 80
+}
+
+deny_address_group 192.168.1.17_deny {
+}
+
+virtual_server  group 192.168.1.17-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.17_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.17 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.17 bond1.kni;"
+
+    real_server 192.168.23.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 287 ##############################
+virtual_server_group 111.13.235.246-80-TCP_QLB {
+    111.13.235.246 80
+}
+
+deny_address_group 111.13.235.246_deny {
+}
+
+virtual_server  group 111.13.235.246-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.246_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.246 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.246 bond1.kni;"
+
+    real_server 192.168.45.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 288 ##############################
+virtual_server_group 111.13.235.142-80-TCP_QLB {
+    111.13.235.142 80
+}
+
+deny_address_group 111.13.235.142_deny {
+}
+
+virtual_server  group 111.13.235.142-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.142_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.142 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.142 bond1.kni;"
+
+    real_server 192.168.58.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 289 ##############################
+virtual_server_group 111.13.235.90-80-TCP_QLB {
+    111.13.235.90 80
+}
+
+deny_address_group 111.13.235.90_deny {
+}
+
+virtual_server  group 111.13.235.90-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.90_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.90 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.90 bond1.kni;"
+
+    real_server 192.168.31.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 290 ##############################
+virtual_server_group 192.168.1.99-80-TCP_QLB {
+    192.168.1.99 80
+}
+
+deny_address_group 192.168.1.99_deny {
+}
+
+virtual_server  group 192.168.1.99-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.1.99_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.99 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.99 bond1.kni;"
+
+    real_server 192.168.58.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 291 ##############################
+virtual_server_group 111.13.235.233-80-TCP_QLB {
+    111.13.235.233 80
+}
+
+deny_address_group 111.13.235.233_deny {
+}
+
+virtual_server  group 111.13.235.233-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.233_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.233 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.233 bond1.kni;"
+
+    real_server 192.168.13.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 292 ##############################
+virtual_server_group 111.13.235.166-80-TCP_QLB {
+    111.13.235.166 80
+}
+
+deny_address_group 111.13.235.166_deny {
+}
+
+virtual_server  group 111.13.235.166-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.166_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.166 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.166 bond1.kni;"
+
+    real_server 192.168.15.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+
diff --git a/tools/keepalived/keepalived.spec.in b/tools/keepalived/keepalived.spec.in
index 2d67f5f9d..ec10459c6 100644
--- a/tools/keepalived/keepalived.spec.in
+++ b/tools/keepalived/keepalived.spec.in
@@ -1,13 +1,10 @@
-# $Id$
-# Authority: dag
-
 # Ugly, but we need headers from a kernel to rebuild against
 %define kernel %(rpm -q kernel-devel --qf '%{RPMTAG_VERSION}-%{RPMTAG_RELEASE}\\n' 2>/dev/null | head -1)
 
 Summary: HA monitor built upon LVS, VRRP and services poller
 Name: keepalived
-Version: 1.2.13
-Release: 5
+Version: @VERSION@
+Release: 1
 License: GPL
 Group: Applications/System
 URL: http://www.keepalived.org/
@@ -17,10 +14,29 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
 
 BuildRequires: openssl-devel
 # We need both of these for proper LVS support
-BuildRequires: kernel, kernel-devel
-Requires(post): /sbin/chkconfig
-Requires(preun): /sbin/service, /sbin/chkconfig
-Requires(postun): /sbin/service
+BuildRequires: kernel-headers
+BuildRequires: autoconf automake pkgconfig
+@SNMP_TRUE@BuildRequires: net-snmp-devel
+@WITH_DBUS_TRUE@BuildRequires: glib2-devel
+@LIBIPTC_TRUE@BuildRequires: iptables-devel
+@LIBIPSET_TRUE@BuildRequires: ipset-devel
+@LIBNL1_TRUE@BuildRequires: libnl-devel
+@LIBNL3_TRUE@BuildRequires: libnl3-devel
+@NFTABLES_TRUE@BuildRequires: libnftnl-devel libmnl-devel
+@INIT_SYSV_TRUE@Requires(post): /sbin/chkconfig
+@INIT_SYSV_TRUE@Requires(preun): /sbin/service, /sbin/chkconfig
+@INIT_SYSV_TRUE@Requires(postun): /sbin/service
+@INIT_SYSTEMD_TRUE@BuildRequires: systemd-units
+@WITH_REGEX_TRUE@BuildRequires: pcre2-devel
+
+@REQUIRE_IPTABLES_LIBS_TRUE@%if 0%{?rhel} <= 7
+@REQUIRE_IPTABLES_LIBS_TRUE@Requires: iptables
+@REQUIRE_IPTABLES_LIBS_TRUE@%else
+@REQUIRE_IPTABLES_LIBS_TRUE@Requires: iptables-libs
+@REQUIRE_IPTABLES_LIBS_TRUE@%endif
+@LIBIPSET_DYNAMIC_TRUE@Requires: ipset-libs
+@LIBNL_DYNAMIC_TRUE@@LIBNL1_TRUE@Require: libnl
+@LIBNL_DYNAMIC_TRUE@@LIBNL3_TRUE@Require: libnl3
 
 %description
 The main goal of the keepalived project is to add a strong & robust keepalive
@@ -40,12 +56,38 @@ healthchecks and LVS directors failover.
 
 
 %build
-%{?el3:export CPPFLAGS="-I/usr/kerberos/include"}
-%{?rh9:export CPPFLAGS="-I/usr/kerberos/include"}
-%configure \
-%{?el3:--includedir="/usr/kerberos/include"} \
-%{?rh9:--includedir="/usr/kerberos/include"} \
-    --with-kernel-dir="/lib/modules/%{kernel}/build"
+CONFIG_OPTS=
+@DEBUG_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-debug"
+@PROFILE_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-profile"
+@WITH_VRRP_FALSE@CONFIG_OPTS="$CONFIG_OPTS --disable-vrrp"
+@WITH_IPVS_FALSE@CONFIG_OPTS="$CONFIG_OPTS --disable-lvs"
+@NFTABLES_FALSE@CONFIG_OPTS="$CONFIG_OPTS --disable-nftables"
+@IPTABLES_FALSE@CONFIG_OPTS="$CONFIG_OPTS --disable-iptables"
+@IPTABLES_TRUE@@LIBIPTC_FALSE@CONFIG_OPTS="$CONFIG_OPTS --disable-libiptc"
+@IPTABLES_TRUE@@LIBIPSET_FALSE@CONFIG_OPTS="$CONFIG_OPTS --disable-libipset"
+@LIBIPTC_DYNAMIC_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-libiptc-dynamic"
+@LIBIPSET_DYNAMIC_FALSE@CONFIG_OPTS="$CONFIG_OPTS --disable-libipset-dynamic"
+@LIBNL_DYNAMIC_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-libnl-dynamic"
+@SNMP_KEEPALIVED_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-snmp"
+@SNMP_KEEPALIVED_FALSE@@SNMP_VRRP_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-snmp-vrrp"
+@SNMP_KEEPALIVED_FALSE@@SNMP_CHECKER_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-snmp-checker"
+@SNMP_RFC_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-snmp-rfc"
+@SNMP_RFC_FALSE@@SNMP_RFCV2_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-snmp-rfcv2"
+@SNMP_RFC_FALSE@@SNMP_RFCV3_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-snmp-rfcv3"
+@SNMP_REPLY_V3_FOR_V2_FALSE@CONFIG_OPTS="$CONFIG_OPTS --disable-snmp-reply-v3-for-v2"
+@WITH_SHA1_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-sha1"
+@WITH_DBUS_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-dbus"
+@INIT_UPSTART_TRUE@CONFIG_OPTS="$CONFIG_OPTS --with-init=upstart"
+@INIT_SYSTEMD_TRUE@CONFIG_OPTS="$CONFIG_OPTS --with-init=systemd"
+@INIT_SYSV_TRUE@CONFIG_OPTS="$CONFIG_OPTS --with-init=SYSV"
+@INIT_SUSE_TRUE@CONFIG_OPTS="$CONFIG_OPTS --with-init=SUSE"
+@INIT_OPENRC_TRUE@CONFIG_OPTS="$CONFIG_OPTS --with-init=openrc"
+@WITH_REGEX_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-regex"
+@WITH_BFD_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-bfd"
+@WITH_STRICT_CONFIG_CHECKS_TRUE@CONFIG_OPTS="$CONFIG_OPTS --enable-strict-config-checks"
+
+autoreconf -f -i
+%configure $CONFIG_OPTS
 %{__make} %{?_smp_mflags} STRIP=/bin/true
 
 
@@ -54,12 +96,14 @@ healthchecks and LVS directors failover.
 %{__make} install DESTDIR=%{buildroot}
 # Remove "samples", as we include them in %%doc
 %{__rm} -rf %{buildroot}%{_sysconfdir}/keepalived/samples/
+# Likewise remove README
+%{__rm} -f %{buildroot}%{_docdir}/%{name}/README
 
 %check
 # A build could silently have LVS support disabled if the kernel includes can't
 # be properly found, we need to avoid that.
-if ! grep -q "IPVS_SUPPORT='_WITH_LVS_'" config.log; then
-    echo "ERROR: We do not want keeepalived lacking LVS support."
+if ! grep -q "#define _WITH_LVS_ *1" lib/config.h; then
+    %{__echo} "ERROR: We do not want keepalived lacking LVS support."
     exit 1
 fi
 
@@ -69,36 +113,73 @@ fi
 
 
 %post
-/sbin/chkconfig --add keepalived
+if [ $1 -eq 1 ]; then
+        # Enable (but don't start) the units by default
+@INIT_SYSV_TRUE@	/sbin/chkconfig --add keepalived
+@INIT_SYSTEMD_TRUE@	/bin/systemctl enable keepalived.service >/dev/null 2>&1 || :
+:
+fi
 
 %preun
 if [ $1 -eq 0 ]; then
-    /sbin/service keepalived stop &>/dev/null || :
-    /sbin/chkconfig --del keepalived
+        # Disable and stop the units
+@INIT_SYSV_TRUE@	/sbin/service keepalived stop &>/dev/null || :
+@INIT_SYSV_TRUE@	/sbin/chkconfig --del keepalived
+@INIT_SYSTEMD_TRUE@	/bin/systemctl disable keepalived.service >/dev/null 2>&1 || :
+@INIT_SYSTEMD_TRUE@	/bin/systemctl stop keepalived.service >/dev/null 2>&1 || :
+@INIT_UPSTART_TRUE@	/sbin/stop keepalived >/dev/null 2>&1 || :
+:
 fi
 
 %postun
 if [ $1 -ge 1 ]; then
-    /sbin/service keepalived condrestart &>/dev/null || :
+@INIT_SYSV_TRUE@	/sbin/service keepalived condrestart &>/dev/null || :
+	# On upgrade, reload init system configuration if we changed unit files
+	# and restart the daemon
+@INIT_SYSTEMD_TRUE@	/bin/systemctl daemon-reload >/dev/null 2>&1 || :
+@INIT_SYSTEMD_TRUE@	/bin/systemctl try-restart keepalived.service >/dev/null 2>&1 || :
+:
 fi
 
-
 %files
-%defattr(-, root, root, 0755)
+%defattr(-, root, root, -)
 %doc AUTHOR ChangeLog CONTRIBUTORS COPYING README TODO
 %doc doc/keepalived.conf.SYNOPSIS doc/samples/
 %dir %{_sysconfdir}/keepalived/
-%attr(0600, root, root) %config(noreplace) %{_sysconfdir}/keepalived/keepalived.conf
-%attr(0600, root, root) %config(noreplace) %{_sysconfdir}/sysconfig/keepalived
-%{_sysconfdir}/rc.d/init.d/keepalived
+%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/keepalived/keepalived.conf
+%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sysconfig/keepalived
+@INIT_SYSTEMD_TRUE@%{_unitdir}/keepalived.service
+@INIT_SYSV_TRUE@%{_initdir}/keepalived
+@INIT_UPSTART_TRUE@%{_sysconfdir}/init/keepalived.conf
+@SNMP_TRUE@%{_datadir}/snmp/mibs/KEEPALIVED-MIB.txt
+@SNMP_RFCV2_TRUE@%{_datadir}/snmp/mibs/VRRP-MIB.txt
+@SNMP_RFCV3_TRUE@%{_datadir}/snmp/mibs/VRRPv3-MIB.txt
 %{_bindir}/genhash
-%{_sbindir}/keepalived
+%attr(0755,root,root) %{_sbindir}/keepalived
 %{_mandir}/man1/genhash.1*
 %{_mandir}/man5/keepalived.conf.5*
 %{_mandir}/man8/keepalived.8*
-
+@WITH_DBUS_TRUE@%attr(0644,root,root) %{_sysconfdir}/dbus-1/system.d/org.keepalived.Vrrp1.conf
+@WITH_DBUS_TRUE@%attr(0644,root,root) %{_datarootdir}/dbus-1/interfaces/org.keepalived.Vrrp1.Instance.xml
+@WITH_DBUS_TRUE@%attr(0644,root,root) %{_datarootdir}/dbus-1/interfaces/org.keepalived.Vrrp1.Vrrp.xml
 
 %changelog
+* Wed Nov  1 2017 Quentin Armitage <quentin@armitage.org.uk> 1.3.9-1
+- Fix installation of keepalived.service
+
+* Tue Oct 17 2017 Quentin Armitage <quentin@armitage.org.uk> 1.3.8-1
+- Handle Fedora and CentOS differences for %{_docdir_fmt}
+
+* Fri Sep 16 2016 Quentin Armitage <quentin@armitage.org.uk> 1.2.24-2
+- Fixes to allow building on a systemd based system
+
+* Wed Sep 14 2016 Quentin Armitage <quentin@armitage.org.uk> 1.2.24-1
+- Add more BuildRequires
+
+* Tue Sep 13 2016 Quentin Armitage <quentin@armitage.org.uk> 1.2.24
+- Update for changed format due of config.log due to using automake
+- Add support for systemd and upstart based systems
+
 * Thu Sep 13 2007 Alexandre Cassen <acassen@linux-vs.org> 1.1.14
 - Merge work done by freshrpms.net... Thanks guys !!! ;)
 
diff --git a/tools/keepalived/keepalived/.gitignore b/tools/keepalived/keepalived/.gitignore
new file mode 100644
index 000000000..be0c7d46c
--- /dev/null
+++ b/tools/keepalived/keepalived/.gitignore
@@ -0,0 +1,2 @@
+keepalived
+keepalived.service
diff --git a/tools/keepalived/keepalived/Makefile.am b/tools/keepalived/keepalived/Makefile.am
new file mode 100644
index 000000000..e5a6fec8f
--- /dev/null
+++ b/tools/keepalived/keepalived/Makefile.am
@@ -0,0 +1,75 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+AM_CPPFLAGS		= $(KA_CPPFLAGS) $(DEBUG_CPPFLAGS)
+AM_CFLAGS		= $(KA_CFLAGS) $(DEBUG_CFLAGS)
+AM_LDFLAGS		= $(KA_LDFLAGS) $(DEBUG_LDFLAGS)
+# AM_LIBTOOLFLAGS	= $(KA_LIBTOOLFLAGS)
+
+edit = echo "  EDIT     $@"; \
+	sed \
+	 -e 's|@sbindir[@]|$(sbindir)|g' \
+	 -e 's|@localstatedir[@]|$(localstatedir)|g' \
+	 -e 's|@sysconfdir[@]|$(sysconfdir)|g' \
+	 -e 's|@PID_DIR[@]|$(PID_DIR)|g' \
+	 -e 's|@SNMP_SERVICE[@]|$(SNMP_SERVICE)|g'
+
+sbin_PROGRAMS		= keepalived
+keepalived_SOURCES	= main.c
+
+noinst_HEADERS		= $(srcdir)/include/*.h
+
+AM_CPPFLAGS		+= -I$(srcdir)/include -I $(top_srcdir)/lib
+
+if WITH_IPVS
+  IPVS_SUBDIR		= check
+  IPVS_LIB		= check/libcheck.a
+endif
+
+if WITH_VRRP
+  VRRP_SUBDIR		= vrrp
+  VRRP_LIB		= vrrp/libvrrp.a
+endif
+
+if WITH_DBUS
+  DBUS_SUBDIR		= dbus
+endif
+
+if WITH_BFD
+  BFD_SUBDIR		= bfd
+  BFD_LIB		= bfd/libbfd.a
+endif
+
+keepalived.service: Makefile
+	@rm -f $@ $@.tmp
+	@$(edit) '$(srcdir)/$@.in' >$@
+
+keepalived.service: $(srcdir)/keepalived.service.in
+
+SUBDIRS			= core $(VRRP_SUBDIR) $(IPVS_SUBDIR) $(DBUS_SUBDIR) $(BFD_SUBDIR) etc
+
+EXTRA_DIST		= keepalived.service.in
+
+keepalived_LDADD	= core/libcore.a $(IPVS_LIB) $(VRRP_LIB) $(BFD_LIB) core/libcore.a ../lib/liblib.a $(KA_LIBS)
+
+MOSTLYCLEANFILES	= keepalived.service
+
+MAINTAINERCLEANFILES	= @MAINTAINERCLEANFILES@
+
+sysconfigdir		= $(sysconfdir)/sysconfig
+sysconfig_DATA		= etc/sysconfig/keepalived
+
+configdir		= $(sysconfdir)/@PACKAGE@
+config_DATA		= etc/keepalived/keepalived.conf
+
+if INIT_SYSTEMD
+systemdsystemunit_DATA	= keepalived.service
+endif
+
+if INIT_OPENRC
+initdir			= $(sysconfdir)/init.d
+init_DATA		= etc/openrc/keepalived
+endif
diff --git a/tools/keepalived/keepalived/Makefile.in b/tools/keepalived/keepalived/Makefile.in
index bcd2732dd..158144c0b 100644
--- a/tools/keepalived/keepalived/Makefile.in
+++ b/tools/keepalived/keepalived/Makefile.in
@@ -1,110 +1,864 @@
-# Makefile
+# Makefile.in generated by automake 1.13.4 from Makefile.am.
+# @configure_input@
+
+# Copyright (C) 1994-2013 Free Software Foundation, Inc.
+
+# This Makefile.in is free software; the Free Software Foundation
+# gives unlimited permission to copy and/or distribute it,
+# with or without modifications, as long as this notice is preserved.
+
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
+# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
+# PARTICULAR PURPOSE.
+
+@SET_MAKE@
+
+# Makefile.am
 #
 # Keepalived OpenSource project.
 #
-# Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
 
-EXEC      = keepalived
-BIN       = ../bin
-KERNEL    = @KERN@
-IPVS_FLAG = @IPVS_SUPPORT@
-VRRP_FLAG = @VRRP_SUPPORT@
 
-prefix      = @prefix@
-exec_prefix = @exec_prefix@
-sbindir     = @sbindir@
-sysconfdir  = @sysconfdir@
-datarootdir = @datarootdir@
-mandir      = @mandir@
-init_dir    = $(sysconfdir)/rc.d/init.d
-conf_dir    = $(sysconfdir)/keepalived
-sysconf_dir = $(sysconfdir)/sysconfig
 
+VPATH = @srcdir@
+am__is_gnu_make = test -n '$(MAKEFILE_LIST)' && test -n '$(MAKELEVEL)'
+am__make_running_with_option = \
+  case $${target_option-} in \
+      ?) ;; \
+      *) echo "am__make_running_with_option: internal error: invalid" \
+              "target option '$${target_option-}' specified" >&2; \
+         exit 1;; \
+  esac; \
+  has_opt=no; \
+  sane_makeflags=$$MAKEFLAGS; \
+  if $(am__is_gnu_make); then \
+    sane_makeflags=$$MFLAGS; \
+  else \
+    case $$MAKEFLAGS in \
+      *\\[\ \	]*) \
+        bs=\\; \
+        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
+          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
+    esac; \
+  fi; \
+  skip_next=no; \
+  strip_trailopt () \
+  { \
+    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
+  }; \
+  for flg in $$sane_makeflags; do \
+    test $$skip_next = yes && { skip_next=no; continue; }; \
+    case $$flg in \
+      *=*|--*) continue;; \
+        -*I) strip_trailopt 'I'; skip_next=yes;; \
+      -*I?*) strip_trailopt 'I';; \
+        -*O) strip_trailopt 'O'; skip_next=yes;; \
+      -*O?*) strip_trailopt 'O';; \
+        -*l) strip_trailopt 'l'; skip_next=yes;; \
+      -*l?*) strip_trailopt 'l';; \
+      -[dEDm]) skip_next=yes;; \
+      -[JT]) skip_next=yes;; \
+    esac; \
+    case $$flg in \
+      *$$target_option*) has_opt=yes; break;; \
+    esac; \
+  done; \
+  test $$has_opt = yes
+am__make_dryrun = (target_option=n; $(am__make_running_with_option))
+am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
+pkgdatadir = $(datadir)/@PACKAGE@
+pkgincludedir = $(includedir)/@PACKAGE@
+pkglibdir = $(libdir)/@PACKAGE@
+pkglibexecdir = $(libexecdir)/@PACKAGE@
+am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
+install_sh_DATA = $(install_sh) -c -m 644
+install_sh_PROGRAM = $(install_sh) -c
+install_sh_SCRIPT = $(install_sh) -c
+INSTALL_HEADER = $(INSTALL_DATA)
+transform = $(program_transform_name)
+NORMAL_INSTALL = :
+PRE_INSTALL = :
+POST_INSTALL = :
+NORMAL_UNINSTALL = :
+PRE_UNINSTALL = :
+POST_UNINSTALL = :
+sbin_PROGRAMS = keepalived$(EXEEXT)
+subdir = keepalived
+DIST_COMMON = $(srcdir)/Makefile.in $(srcdir)/Makefile.am \
+	$(top_srcdir)/depcomp $(noinst_HEADERS)
+ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
+am__aclocal_m4_deps = $(top_srcdir)/configure.ac
+am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
+	$(ACLOCAL_M4)
+mkinstalldirs = $(install_sh) -d
+CONFIG_HEADER = $(top_builddir)/lib/config.h \
+	$(top_builddir)/lib/config_warnings.h
+CONFIG_CLEAN_FILES =
+CONFIG_CLEAN_VPATH_FILES =
+am__installdirs = "$(DESTDIR)$(sbindir)" "$(DESTDIR)$(configdir)" \
+	"$(DESTDIR)$(initdir)" "$(DESTDIR)$(sysconfigdir)" \
+	"$(DESTDIR)$(systemdsystemunitdir)"
+PROGRAMS = $(sbin_PROGRAMS)
+am_keepalived_OBJECTS = main.$(OBJEXT)
+keepalived_OBJECTS = $(am_keepalived_OBJECTS)
+am__DEPENDENCIES_1 =
+keepalived_DEPENDENCIES = core/libcore.a $(IPVS_LIB) $(VRRP_LIB) \
+	$(BFD_LIB) core/libcore.a ../lib/liblib.a \
+	$(am__DEPENDENCIES_1)
+AM_V_P = $(am__v_P_@AM_V@)
+am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
+am__v_P_0 = false
+am__v_P_1 = :
+AM_V_GEN = $(am__v_GEN_@AM_V@)
+am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
+am__v_GEN_0 = @echo "  GEN     " $@;
+am__v_GEN_1 = 
+AM_V_at = $(am__v_at_@AM_V@)
+am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
+am__v_at_0 = @
+am__v_at_1 = 
+DEFAULT_INCLUDES = -I.@am__isrc@ -I$(top_builddir)/lib
+depcomp = $(SHELL) $(top_srcdir)/depcomp
+am__depfiles_maybe = depfiles
+am__mv = mv -f
+COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \
+	$(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
+AM_V_CC = $(am__v_CC_@AM_V@)
+am__v_CC_ = $(am__v_CC_@AM_DEFAULT_V@)
+am__v_CC_0 = @echo "  CC      " $@;
+am__v_CC_1 = 
+CCLD = $(CC)
+LINK = $(CCLD) $(AM_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@
+AM_V_CCLD = $(am__v_CCLD_@AM_V@)
+am__v_CCLD_ = $(am__v_CCLD_@AM_DEFAULT_V@)
+am__v_CCLD_0 = @echo "  CCLD    " $@;
+am__v_CCLD_1 = 
+SOURCES = $(keepalived_SOURCES)
+DIST_SOURCES = $(keepalived_SOURCES)
+RECURSIVE_TARGETS = all-recursive check-recursive cscopelist-recursive \
+	ctags-recursive dvi-recursive html-recursive info-recursive \
+	install-data-recursive install-dvi-recursive \
+	install-exec-recursive install-html-recursive \
+	install-info-recursive install-pdf-recursive \
+	install-ps-recursive install-recursive installcheck-recursive \
+	installdirs-recursive pdf-recursive ps-recursive \
+	tags-recursive uninstall-recursive
+am__can_run_installinfo = \
+  case $$AM_UPDATE_INFO_DIR in \
+    n|no|NO) false;; \
+    *) (install-info --version) >/dev/null 2>&1;; \
+  esac
+am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
+am__vpath_adj = case $$p in \
+    $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
+    *) f=$$p;; \
+  esac;
+am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
+am__install_max = 40
+am__nobase_strip_setup = \
+  srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
+am__nobase_strip = \
+  for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
+am__nobase_list = $(am__nobase_strip_setup); \
+  for p in $$list; do echo "$$p $$p"; done | \
+  sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
+  $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
+    if (++n[$$2] == $(am__install_max)) \
+      { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
+    END { for (dir in files) print dir, files[dir] }'
+am__base_list = \
+  sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
+  sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
+am__uninstall_files_from_dir = { \
+  test -z "$$files" \
+    || { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
+    || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
+         $(am__cd) "$$dir" && rm -f $$files; }; \
+  }
+DATA = $(config_DATA) $(init_DATA) $(sysconfig_DATA) \
+	$(systemdsystemunit_DATA)
+HEADERS = $(noinst_HEADERS)
+RECURSIVE_CLEAN_TARGETS = mostlyclean-recursive clean-recursive	\
+  distclean-recursive maintainer-clean-recursive
+am__recursive_targets = \
+  $(RECURSIVE_TARGETS) \
+  $(RECURSIVE_CLEAN_TARGETS) \
+  $(am__extra_recursive_targets)
+AM_RECURSIVE_TARGETS = $(am__recursive_targets:-recursive=) TAGS CTAGS \
+	distdir
+am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
+# Read a list of newline-separated strings from the standard input,
+# and print each of them once, without duplicates.  Input order is
+# *not* preserved.
+am__uniquify_input = $(AWK) '\
+  BEGIN { nonempty = 0; } \
+  { items[$$0] = 1; nonempty = 1; } \
+  END { if (nonempty) { for (i in items) print i; }; } \
+'
+# Make sure the list of sources is unique.  This is necessary because,
+# e.g., the same source file might be shared among _SOURCES variables
+# for different programs/libraries.
+am__define_uniq_tagged_files = \
+  list='$(am__tagged_files)'; \
+  unique=`for i in $$list; do \
+    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
+  done | $(am__uniquify_input)`
+ETAGS = etags
+CTAGS = ctags
+DIST_SUBDIRS = core vrrp check dbus bfd etc
+DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
+am__relativize = \
+  dir0=`pwd`; \
+  sed_first='s,^\([^/]*\)/.*$$,\1,'; \
+  sed_rest='s,^[^/]*/*,,'; \
+  sed_last='s,^.*/\([^/]*\)$$,\1,'; \
+  sed_butlast='s,/*[^/]*$$,,'; \
+  while test -n "$$dir1"; do \
+    first=`echo "$$dir1" | sed -e "$$sed_first"`; \
+    if test "$$first" != "."; then \
+      if test "$$first" = ".."; then \
+        dir2=`echo "$$dir0" | sed -e "$$sed_last"`/"$$dir2"; \
+        dir0=`echo "$$dir0" | sed -e "$$sed_butlast"`; \
+      else \
+        first2=`echo "$$dir2" | sed -e "$$sed_first"`; \
+        if test "$$first2" = "$$first"; then \
+          dir2=`echo "$$dir2" | sed -e "$$sed_rest"`; \
+        else \
+          dir2="../$$dir2"; \
+        fi; \
+        dir0="$$dir0"/"$$first"; \
+      fi; \
+    fi; \
+    dir1=`echo "$$dir1" | sed -e "$$sed_rest"`; \
+  done; \
+  reldir="$$dir2"
+ACLOCAL = @ACLOCAL@
+AMTAR = @AMTAR@
+AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
+AR = @AR@
+ARFLAGS = @ARFLAGS@
+AUTOCONF = @AUTOCONF@
+AUTOHEADER = @AUTOHEADER@
+AUTOMAKE = @AUTOMAKE@
+AWK = @AWK@
 CC = @CC@
+CCDEPMODE = @CCDEPMODE@
+CFLAGS = @CFLAGS@
+CPP = @CPP@
+CPPFLAGS = @CPPFLAGS@
+CYGPATH_W = @CYGPATH_W@
+DEFAULT_CONFIG_FILE = @DEFAULT_CONFIG_FILE@
+DEFS = @DEFS@
+DEPDIR = @DEPDIR@
+ECHO_C = @ECHO_C@
+ECHO_N = @ECHO_N@
+ECHO_T = @ECHO_T@
+EGREP = @EGREP@
+EXEEXT = @EXEEXT@
+GENHASH_LIBS = @GENHASH_LIBS@
+GREP = @GREP@
+HAVE_RPM = @HAVE_RPM@
+HAVE_RPMBUILD = @HAVE_RPMBUILD@
+HAVE_SPHINX_BUILD = @HAVE_SPHINX_BUILD@
+INSTALL = @INSTALL@
+INSTALL_DATA = @INSTALL_DATA@
+INSTALL_PROGRAM = @INSTALL_PROGRAM@
+INSTALL_SCRIPT = @INSTALL_SCRIPT@
+INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
+KA_CFLAGS = @KA_CFLAGS@
+KA_CPPFLAGS = @KA_CPPFLAGS@
+KA_LDFLAGS = @KA_LDFLAGS@
+KA_LIBS = @KA_LIBS@
+LDD = @LDD@
+LDFLAGS = @LDFLAGS@
+LIBOBJS = @LIBOBJS@
+LIBS = @LIBS@
+LN_S = @LN_S@
+LTLIBOBJS = @LTLIBOBJS@
+MAINTAINERCLEANFILES = @MAINTAINERCLEANFILES@
+MAKEINFO = @MAKEINFO@
+MKDIR_P = @MKDIR_P@
+NETSNMP_CONFIG = @NETSNMP_CONFIG@
+OBJEXT = @OBJEXT@
+PACKAGE = @PACKAGE@
+PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
+PACKAGE_NAME = @PACKAGE_NAME@
+PACKAGE_STRING = @PACKAGE_STRING@
+PACKAGE_TARNAME = @PACKAGE_TARNAME@
+PACKAGE_URL = @PACKAGE_URL@
+PACKAGE_VERSION = @PACKAGE_VERSION@
+PATH_SEPARATOR = @PATH_SEPARATOR@
+PID_DIR = @PID_DIR@
+PKG_CONFIG = @PKG_CONFIG@
+PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
+PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
+RANLIB = @RANLIB@
+SED = @SED@
+SET_MAKE = @SET_MAKE@
+SHELL = @SHELL@
+SNMP_SERVICE = @SNMP_SERVICE@
+SPHINXBUILDNAME = @SPHINXBUILDNAME@
 STRIP = @STRIP@
-LDFLAGS = @LIBS@ @LDFLAGS@ -ldl -lnuma
-SUBDIRS = core
-DPVSDEPS = ../../../src/common.o
-
-ifeq ($(IPVS_FLAG),_WITH_LVS_)
-  SUBDIRS += check
-endif
-
-ifeq ($(VRRP_FLAG),_WITH_VRRP_)
-  SUBDIRS += vrrp
-endif
-
-ifeq ($(IPVS_FLAG),_WITH_LVS_)
-  ifeq ($(KERNEL),_KRNL_2_4_)
-    SUBDIRS += libipvs-2.4
-  else
-    SUBDIRS += libipvs-2.6
-  endif
-endif
-
-all:
-	@set -e; \
-	for i in $(SUBDIRS); do \
-	$(MAKE) -C $$i || exit 1; done && \
-	echo "Building $(BIN)/$(EXEC)" && \
-	$(CC) -o $(BIN)/$(EXEC) `find $(SUBDIRS) ../lib -name '*.[oa]'` $(DPVSDEPS) $(LDFLAGS)
-	$(STRIP) $(BIN)/$(EXEC)
-	@echo ""
-	@echo "Make complete"
-
-debug:
-	@set -e; \
-	for i in $(SUBDIRS); do \
-	$(MAKE) -C $$i || exit 1; done && \
-	echo "Building $(BIN)/$(EXEC)" && \
-	$(CC) -o $(BIN)/$(EXEC) `find $(SUBDIRS) ../lib -name '*.[oa]'` $(DPVSDEPS) $(LDFLAGS) -ggdb
-	@echo ""
-	@echo "Make complete"
-
-profile:
-	@set -e; \
-	for i in $(SUBDIRS); do \
-	$(MAKE) -C $$i || exit 1; done && \
-	echo "Building $(BIN)/$(EXEC)" && \
-	$(CC) -o $(BIN)/$(EXEC) `find $(SUBDIRS) ../lib -name '*.[oa]'` $(LDFLAGS) $(DPVSDEPS) -pg
-	@echo ""
-	@echo "Make complete"
-
-clean:
-	@set -e; \
-	for i in $(SUBDIRS); do \
-	$(MAKE) -C $$i clean; done
-	@echo ""
-	@echo "Make complete"
-
-distclean:
-	@set -e; \
-	for i in $(SUBDIRS); do \
-	$(MAKE) -C $$i distclean; done
-	rm -f Makefile $(BIN)/$(EXEC)
-
-mrproper: distclean
-	rm -f config.*
-
-uninstall:
-	rm -f $(DESTDIR)$(sbindir)/$(EXEC)
-	rm -f $(DESTDIR)$(init_dir)/keepalived.init
-	rm -f $(DESTDIR)$(sysconf_dir)/keepalived
-	rm -rf $(DESTDIR)$(sysconfdir)/keepalived
-	rm -f $(DESTDIR)$(mandir)/man/man5/keepalived.conf.5
-	rm -f $(DESTDIR)$(mandir)/man/man8/keepalived.8
-
-install:
-	install -d $(DESTDIR)$(sbindir)
-	install -m 700 $(BIN)/$(EXEC) $(DESTDIR)$(sbindir)/
-	install -d $(DESTDIR)$(init_dir)
-	install -m 755 etc/init.d/keepalived.init $(DESTDIR)$(init_dir)/keepalived
-	install -d $(DESTDIR)$(sysconf_dir)
-	install -m 755 etc/init.d/keepalived.sysconfig $(DESTDIR)$(sysconf_dir)/keepalived
-	install -d $(DESTDIR)$(sysconfdir)/keepalived/samples
-	install -m 644 etc/keepalived/keepalived.conf $(DESTDIR)$(sysconfdir)/keepalived/
-	install -m 644 ../doc/samples/* $(DESTDIR)$(sysconfdir)/keepalived/samples/
-	install -d $(DESTDIR)$(mandir)/man5
-	install -d $(DESTDIR)$(mandir)/man8
-	install -m 644 ../doc/man/man5/keepalived.conf.5 $(DESTDIR)$(mandir)/man5
-	install -m 644 ../doc/man/man8/keepalived.8 $(DESTDIR)$(mandir)/man8
+VERSION = @VERSION@
+abs_builddir = @abs_builddir@
+abs_srcdir = @abs_srcdir@
+abs_top_builddir = @abs_top_builddir@
+abs_top_srcdir = @abs_top_srcdir@
+ac_ct_AR = @ac_ct_AR@
+ac_ct_CC = @ac_ct_CC@
+am__include = @am__include@
+am__leading_dot = @am__leading_dot@
+am__quote = @am__quote@
+am__tar = @am__tar@
+am__untar = @am__untar@
+bindir = @bindir@
+build_alias = @build_alias@
+builddir = @builddir@
+datadir = @datadir@
+datarootdir = @datarootdir@
+docdir = @docdir@
+dvidir = @dvidir@
+exec_prefix = @exec_prefix@
+host_alias = @host_alias@
+htmldir = @htmldir@
+includedir = @includedir@
+infodir = @infodir@
+install_sh = @install_sh@
+libdir = @libdir@
+libexecdir = @libexecdir@
+localedir = @localedir@
+localstatedir = @localstatedir@
+mandir = @mandir@
+mkdir_p = @mkdir_p@
+oldincludedir = @oldincludedir@
+pdfdir = @pdfdir@
+prefix = @prefix@
+program_transform_name = @program_transform_name@
+psdir = @psdir@
+sbindir = @sbindir@
+sharedstatedir = @sharedstatedir@
+srcdir = @srcdir@
+sysconfdir = @sysconfdir@
+systemdsystemunitdir = @systemdsystemunitdir@
+target_alias = @target_alias@
+top_build_prefix = @top_build_prefix@
+top_builddir = @top_builddir@
+top_srcdir = @top_srcdir@
+AM_CPPFLAGS = $(KA_CPPFLAGS) $(DEBUG_CPPFLAGS) -I$(srcdir)/include -I \
+	$(top_srcdir)/lib
+AM_CFLAGS = $(KA_CFLAGS) $(DEBUG_CFLAGS)
+AM_LDFLAGS = $(KA_LDFLAGS) $(DEBUG_LDFLAGS)
+# AM_LIBTOOLFLAGS	= $(KA_LIBTOOLFLAGS)
+edit = echo "  EDIT     $@"; \
+	sed \
+	 -e 's|@sbindir[@]|$(sbindir)|g' \
+	 -e 's|@localstatedir[@]|$(localstatedir)|g' \
+	 -e 's|@sysconfdir[@]|$(sysconfdir)|g' \
+	 -e 's|@PID_DIR[@]|$(PID_DIR)|g' \
+	 -e 's|@SNMP_SERVICE[@]|$(SNMP_SERVICE)|g'
+
+keepalived_SOURCES = main.c
+noinst_HEADERS = $(srcdir)/include/*.h
+@WITH_IPVS_TRUE@IPVS_SUBDIR = check
+@WITH_IPVS_TRUE@IPVS_LIB = check/libcheck.a
+@WITH_VRRP_TRUE@VRRP_SUBDIR = vrrp
+@WITH_VRRP_TRUE@VRRP_LIB = vrrp/libvrrp.a
+@WITH_DBUS_TRUE@DBUS_SUBDIR = dbus
+@WITH_BFD_TRUE@BFD_SUBDIR = bfd
+@WITH_BFD_TRUE@BFD_LIB = bfd/libbfd.a
+SUBDIRS = core $(VRRP_SUBDIR) $(IPVS_SUBDIR) $(DBUS_SUBDIR) $(BFD_SUBDIR) etc
+EXTRA_DIST = keepalived.service.in
+keepalived_LDADD = core/libcore.a $(IPVS_LIB) $(VRRP_LIB) $(BFD_LIB) core/libcore.a ../lib/liblib.a $(KA_LIBS)
+MOSTLYCLEANFILES = keepalived.service
+sysconfigdir = $(sysconfdir)/sysconfig
+sysconfig_DATA = etc/sysconfig/keepalived
+configdir = $(sysconfdir)/@PACKAGE@
+config_DATA = etc/keepalived/keepalived.conf
+@INIT_SYSTEMD_TRUE@systemdsystemunit_DATA = keepalived.service
+@INIT_OPENRC_TRUE@initdir = $(sysconfdir)/init.d
+@INIT_OPENRC_TRUE@init_DATA = etc/openrc/keepalived
+all: all-recursive
+
+.SUFFIXES:
+.SUFFIXES: .c .o .obj
+$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
+	@for dep in $?; do \
+	  case '$(am__configure_deps)' in \
+	    *$$dep*) \
+	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
+	        && { if test -f $@; then exit 0; else break; fi; }; \
+	      exit 1;; \
+	  esac; \
+	done; \
+	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign keepalived/Makefile'; \
+	$(am__cd) $(top_srcdir) && \
+	  $(AUTOMAKE) --foreign keepalived/Makefile
+.PRECIOUS: Makefile
+Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
+	@case '$?' in \
+	  *config.status*) \
+	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
+	  *) \
+	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe)'; \
+	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe);; \
+	esac;
+
+$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+
+$(top_srcdir)/configure:  $(am__configure_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+$(am__aclocal_m4_deps):
+install-sbinPROGRAMS: $(sbin_PROGRAMS)
+	@$(NORMAL_INSTALL)
+	@list='$(sbin_PROGRAMS)'; test -n "$(sbindir)" || list=; \
+	if test -n "$$list"; then \
+	  echo " $(MKDIR_P) '$(DESTDIR)$(sbindir)'"; \
+	  $(MKDIR_P) "$(DESTDIR)$(sbindir)" || exit 1; \
+	fi; \
+	for p in $$list; do echo "$$p $$p"; done | \
+	sed 's/$(EXEEXT)$$//' | \
+	while read p p1; do if test -f $$p \
+	  ; then echo "$$p"; echo "$$p"; else :; fi; \
+	done | \
+	sed -e 'p;s,.*/,,;n;h' \
+	    -e 's|.*|.|' \
+	    -e 'p;x;s,.*/,,;s/$(EXEEXT)$$//;$(transform);s/$$/$(EXEEXT)/' | \
+	sed 'N;N;N;s,\n, ,g' | \
+	$(AWK) 'BEGIN { files["."] = ""; dirs["."] = 1 } \
+	  { d=$$3; if (dirs[d] != 1) { print "d", d; dirs[d] = 1 } \
+	    if ($$2 == $$4) files[d] = files[d] " " $$1; \
+	    else { print "f", $$3 "/" $$4, $$1; } } \
+	  END { for (d in files) print "f", d, files[d] }' | \
+	while read type dir files; do \
+	    if test "$$dir" = .; then dir=; else dir=/$$dir; fi; \
+	    test -z "$$files" || { \
+	      echo " $(INSTALL_PROGRAM_ENV) $(INSTALL_PROGRAM) $$files '$(DESTDIR)$(sbindir)$$dir'"; \
+	      $(INSTALL_PROGRAM_ENV) $(INSTALL_PROGRAM) $$files "$(DESTDIR)$(sbindir)$$dir" || exit $$?; \
+	    } \
+	; done
+
+uninstall-sbinPROGRAMS:
+	@$(NORMAL_UNINSTALL)
+	@list='$(sbin_PROGRAMS)'; test -n "$(sbindir)" || list=; \
+	files=`for p in $$list; do echo "$$p"; done | \
+	  sed -e 'h;s,^.*/,,;s/$(EXEEXT)$$//;$(transform)' \
+	      -e 's/$$/$(EXEEXT)/' \
+	`; \
+	test -n "$$list" || exit 0; \
+	echo " ( cd '$(DESTDIR)$(sbindir)' && rm -f" $$files ")"; \
+	cd "$(DESTDIR)$(sbindir)" && rm -f $$files
+
+clean-sbinPROGRAMS:
+	-test -z "$(sbin_PROGRAMS)" || rm -f $(sbin_PROGRAMS)
+
+keepalived$(EXEEXT): $(keepalived_OBJECTS) $(keepalived_DEPENDENCIES) $(EXTRA_keepalived_DEPENDENCIES) 
+	@rm -f keepalived$(EXEEXT)
+	$(AM_V_CCLD)$(LINK) $(keepalived_OBJECTS) $(keepalived_LDADD) $(LIBS)
+
+mostlyclean-compile:
+	-rm -f *.$(OBJEXT)
+
+distclean-compile:
+	-rm -f *.tab.c
+
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/main.Po@am__quote@
+
+.c.o:
+@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
+@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c $<
+
+.c.obj:
+@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ `$(CYGPATH_W) '$<'`
+@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c `$(CYGPATH_W) '$<'`
+install-configDATA: $(config_DATA)
+	@$(NORMAL_INSTALL)
+	@list='$(config_DATA)'; test -n "$(configdir)" || list=; \
+	if test -n "$$list"; then \
+	  echo " $(MKDIR_P) '$(DESTDIR)$(configdir)'"; \
+	  $(MKDIR_P) "$(DESTDIR)$(configdir)" || exit 1; \
+	fi; \
+	for p in $$list; do \
+	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
+	  echo "$$d$$p"; \
+	done | $(am__base_list) | \
+	while read files; do \
+	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(configdir)'"; \
+	  $(INSTALL_DATA) $$files "$(DESTDIR)$(configdir)" || exit $$?; \
+	done
+
+uninstall-configDATA:
+	@$(NORMAL_UNINSTALL)
+	@list='$(config_DATA)'; test -n "$(configdir)" || list=; \
+	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
+	dir='$(DESTDIR)$(configdir)'; $(am__uninstall_files_from_dir)
+install-initDATA: $(init_DATA)
+	@$(NORMAL_INSTALL)
+	@list='$(init_DATA)'; test -n "$(initdir)" || list=; \
+	if test -n "$$list"; then \
+	  echo " $(MKDIR_P) '$(DESTDIR)$(initdir)'"; \
+	  $(MKDIR_P) "$(DESTDIR)$(initdir)" || exit 1; \
+	fi; \
+	for p in $$list; do \
+	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
+	  echo "$$d$$p"; \
+	done | $(am__base_list) | \
+	while read files; do \
+	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(initdir)'"; \
+	  $(INSTALL_DATA) $$files "$(DESTDIR)$(initdir)" || exit $$?; \
+	done
+
+uninstall-initDATA:
+	@$(NORMAL_UNINSTALL)
+	@list='$(init_DATA)'; test -n "$(initdir)" || list=; \
+	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
+	dir='$(DESTDIR)$(initdir)'; $(am__uninstall_files_from_dir)
+install-sysconfigDATA: $(sysconfig_DATA)
+	@$(NORMAL_INSTALL)
+	@list='$(sysconfig_DATA)'; test -n "$(sysconfigdir)" || list=; \
+	if test -n "$$list"; then \
+	  echo " $(MKDIR_P) '$(DESTDIR)$(sysconfigdir)'"; \
+	  $(MKDIR_P) "$(DESTDIR)$(sysconfigdir)" || exit 1; \
+	fi; \
+	for p in $$list; do \
+	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
+	  echo "$$d$$p"; \
+	done | $(am__base_list) | \
+	while read files; do \
+	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(sysconfigdir)'"; \
+	  $(INSTALL_DATA) $$files "$(DESTDIR)$(sysconfigdir)" || exit $$?; \
+	done
+
+uninstall-sysconfigDATA:
+	@$(NORMAL_UNINSTALL)
+	@list='$(sysconfig_DATA)'; test -n "$(sysconfigdir)" || list=; \
+	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
+	dir='$(DESTDIR)$(sysconfigdir)'; $(am__uninstall_files_from_dir)
+install-systemdsystemunitDATA: $(systemdsystemunit_DATA)
+	@$(NORMAL_INSTALL)
+	@list='$(systemdsystemunit_DATA)'; test -n "$(systemdsystemunitdir)" || list=; \
+	if test -n "$$list"; then \
+	  echo " $(MKDIR_P) '$(DESTDIR)$(systemdsystemunitdir)'"; \
+	  $(MKDIR_P) "$(DESTDIR)$(systemdsystemunitdir)" || exit 1; \
+	fi; \
+	for p in $$list; do \
+	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
+	  echo "$$d$$p"; \
+	done | $(am__base_list) | \
+	while read files; do \
+	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(systemdsystemunitdir)'"; \
+	  $(INSTALL_DATA) $$files "$(DESTDIR)$(systemdsystemunitdir)" || exit $$?; \
+	done
+
+uninstall-systemdsystemunitDATA:
+	@$(NORMAL_UNINSTALL)
+	@list='$(systemdsystemunit_DATA)'; test -n "$(systemdsystemunitdir)" || list=; \
+	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
+	dir='$(DESTDIR)$(systemdsystemunitdir)'; $(am__uninstall_files_from_dir)
+
+# This directory's subdirectories are mostly independent; you can cd
+# into them and run 'make' without going through this Makefile.
+# To change the values of 'make' variables: instead of editing Makefiles,
+# (1) if the variable is set in 'config.status', edit 'config.status'
+#     (which will cause the Makefiles to be regenerated when you run 'make');
+# (2) otherwise, pass the desired values on the 'make' command line.
+$(am__recursive_targets):
+	@fail=; \
+	if $(am__make_keepgoing); then \
+	  failcom='fail=yes'; \
+	else \
+	  failcom='exit 1'; \
+	fi; \
+	dot_seen=no; \
+	target=`echo $@ | sed s/-recursive//`; \
+	case "$@" in \
+	  distclean-* | maintainer-clean-*) list='$(DIST_SUBDIRS)' ;; \
+	  *) list='$(SUBDIRS)' ;; \
+	esac; \
+	for subdir in $$list; do \
+	  echo "Making $$target in $$subdir"; \
+	  if test "$$subdir" = "."; then \
+	    dot_seen=yes; \
+	    local_target="$$target-am"; \
+	  else \
+	    local_target="$$target"; \
+	  fi; \
+	  ($(am__cd) $$subdir && $(MAKE) $(AM_MAKEFLAGS) $$local_target) \
+	  || eval $$failcom; \
+	done; \
+	if test "$$dot_seen" = "no"; then \
+	  $(MAKE) $(AM_MAKEFLAGS) "$$target-am" || exit 1; \
+	fi; test -z "$$fail"
+
+ID: $(am__tagged_files)
+	$(am__define_uniq_tagged_files); mkid -fID $$unique
+tags: tags-recursive
+TAGS: tags
+
+tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	set x; \
+	here=`pwd`; \
+	if ($(ETAGS) --etags-include --version) >/dev/null 2>&1; then \
+	  include_option=--etags-include; \
+	  empty_fix=.; \
+	else \
+	  include_option=--include; \
+	  empty_fix=; \
+	fi; \
+	list='$(SUBDIRS)'; for subdir in $$list; do \
+	  if test "$$subdir" = .; then :; else \
+	    test ! -f $$subdir/TAGS || \
+	      set "$$@" "$$include_option=$$here/$$subdir/TAGS"; \
+	  fi; \
+	done; \
+	$(am__define_uniq_tagged_files); \
+	shift; \
+	if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
+	  test -n "$$unique" || unique=$$empty_fix; \
+	  if test $$# -gt 0; then \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      "$$@" $$unique; \
+	  else \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      $$unique; \
+	  fi; \
+	fi
+ctags: ctags-recursive
+
+CTAGS: ctags
+ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	$(am__define_uniq_tagged_files); \
+	test -z "$(CTAGS_ARGS)$$unique" \
+	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
+	     $$unique
+
+GTAGS:
+	here=`$(am__cd) $(top_builddir) && pwd` \
+	  && $(am__cd) $(top_srcdir) \
+	  && gtags -i $(GTAGS_ARGS) "$$here"
+cscopelist: cscopelist-recursive
+
+cscopelist-am: $(am__tagged_files)
+	list='$(am__tagged_files)'; \
+	case "$(srcdir)" in \
+	  [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
+	  *) sdir=$(subdir)/$(srcdir) ;; \
+	esac; \
+	for i in $$list; do \
+	  if test -f "$$i"; then \
+	    echo "$(subdir)/$$i"; \
+	  else \
+	    echo "$$sdir/$$i"; \
+	  fi; \
+	done >> $(top_builddir)/cscope.files
+
+distclean-tags:
+	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
+
+distdir: $(DISTFILES)
+	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	list='$(DISTFILES)'; \
+	  dist_files=`for file in $$list; do echo $$file; done | \
+	  sed -e "s|^$$srcdirstrip/||;t" \
+	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
+	case $$dist_files in \
+	  */*) $(MKDIR_P) `echo "$$dist_files" | \
+			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
+			   sort -u` ;; \
+	esac; \
+	for file in $$dist_files; do \
+	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
+	  if test -d $$d/$$file; then \
+	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
+	    if test -d "$(distdir)/$$file"; then \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
+	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
+	  else \
+	    test -f "$(distdir)/$$file" \
+	    || cp -p $$d/$$file "$(distdir)/$$file" \
+	    || exit 1; \
+	  fi; \
+	done
+	@list='$(DIST_SUBDIRS)'; for subdir in $$list; do \
+	  if test "$$subdir" = .; then :; else \
+	    $(am__make_dryrun) \
+	      || test -d "$(distdir)/$$subdir" \
+	      || $(MKDIR_P) "$(distdir)/$$subdir" \
+	      || exit 1; \
+	    dir1=$$subdir; dir2="$(distdir)/$$subdir"; \
+	    $(am__relativize); \
+	    new_distdir=$$reldir; \
+	    dir1=$$subdir; dir2="$(top_distdir)"; \
+	    $(am__relativize); \
+	    new_top_distdir=$$reldir; \
+	    echo " (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) top_distdir="$$new_top_distdir" distdir="$$new_distdir" \\"; \
+	    echo "     am__remove_distdir=: am__skip_length_check=: am__skip_mode_fix=: distdir)"; \
+	    ($(am__cd) $$subdir && \
+	      $(MAKE) $(AM_MAKEFLAGS) \
+	        top_distdir="$$new_top_distdir" \
+	        distdir="$$new_distdir" \
+		am__remove_distdir=: \
+		am__skip_length_check=: \
+		am__skip_mode_fix=: \
+	        distdir) \
+	      || exit 1; \
+	  fi; \
+	done
+check-am: all-am
+check: check-recursive
+all-am: Makefile $(PROGRAMS) $(DATA) $(HEADERS)
+installdirs: installdirs-recursive
+installdirs-am:
+	for dir in "$(DESTDIR)$(sbindir)" "$(DESTDIR)$(configdir)" "$(DESTDIR)$(initdir)" "$(DESTDIR)$(sysconfigdir)" "$(DESTDIR)$(systemdsystemunitdir)"; do \
+	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
+	done
+install: install-recursive
+install-exec: install-exec-recursive
+install-data: install-data-recursive
+uninstall: uninstall-recursive
+
+install-am: all-am
+	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
+
+installcheck: installcheck-recursive
+install-strip:
+	if test -z '$(STRIP)'; then \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	      install; \
+	else \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
+	fi
+mostlyclean-generic:
+	-test -z "$(MOSTLYCLEANFILES)" || rm -f $(MOSTLYCLEANFILES)
+
+clean-generic:
+
+distclean-generic:
+	-test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES)
+	-test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES)
+
+maintainer-clean-generic:
+	@echo "This command is intended for maintainers to use"
+	@echo "it deletes files that may require special tools to rebuild."
+	-test -z "$(MAINTAINERCLEANFILES)" || rm -f $(MAINTAINERCLEANFILES)
+clean: clean-recursive
+
+clean-am: clean-generic clean-sbinPROGRAMS mostlyclean-am
+
+distclean: distclean-recursive
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+distclean-am: clean-am distclean-compile distclean-generic \
+	distclean-tags
+
+dvi: dvi-recursive
+
+dvi-am:
+
+html: html-recursive
+
+html-am:
+
+info: info-recursive
+
+info-am:
+
+install-data-am: install-configDATA install-initDATA \
+	install-sysconfigDATA install-systemdsystemunitDATA
+
+install-dvi: install-dvi-recursive
+
+install-dvi-am:
+
+install-exec-am: install-sbinPROGRAMS
+
+install-html: install-html-recursive
+
+install-html-am:
+
+install-info: install-info-recursive
+
+install-info-am:
+
+install-man:
+
+install-pdf: install-pdf-recursive
+
+install-pdf-am:
+
+install-ps: install-ps-recursive
+
+install-ps-am:
+
+installcheck-am:
+
+maintainer-clean: maintainer-clean-recursive
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+maintainer-clean-am: distclean-am maintainer-clean-generic
+
+mostlyclean: mostlyclean-recursive
+
+mostlyclean-am: mostlyclean-compile mostlyclean-generic
+
+pdf: pdf-recursive
+
+pdf-am:
+
+ps: ps-recursive
+
+ps-am:
+
+uninstall-am: uninstall-configDATA uninstall-initDATA \
+	uninstall-sbinPROGRAMS uninstall-sysconfigDATA \
+	uninstall-systemdsystemunitDATA
+
+.MAKE: $(am__recursive_targets) install-am install-strip
+
+.PHONY: $(am__recursive_targets) CTAGS GTAGS TAGS all all-am check \
+	check-am clean clean-generic clean-sbinPROGRAMS cscopelist-am \
+	ctags ctags-am distclean distclean-compile distclean-generic \
+	distclean-tags distdir dvi dvi-am html html-am info info-am \
+	install install-am install-configDATA install-data \
+	install-data-am install-dvi install-dvi-am install-exec \
+	install-exec-am install-html install-html-am install-info \
+	install-info-am install-initDATA install-man install-pdf \
+	install-pdf-am install-ps install-ps-am install-sbinPROGRAMS \
+	install-strip install-sysconfigDATA \
+	install-systemdsystemunitDATA installcheck installcheck-am \
+	installdirs installdirs-am maintainer-clean \
+	maintainer-clean-generic mostlyclean mostlyclean-compile \
+	mostlyclean-generic pdf pdf-am ps ps-am tags tags-am uninstall \
+	uninstall-am uninstall-configDATA uninstall-initDATA \
+	uninstall-sbinPROGRAMS uninstall-sysconfigDATA \
+	uninstall-systemdsystemunitDATA
+
+
+keepalived.service: Makefile
+	@rm -f $@ $@.tmp
+	@$(edit) '$(srcdir)/$@.in' >$@
+
+keepalived.service: $(srcdir)/keepalived.service.in
+
+# Tell versions [3.59,3.63) of GNU make to not export all variables.
+# Otherwise a system limit (for SysV at least) may be exceeded.
+.NOEXPORT:
diff --git a/tools/keepalived/keepalived/bfd/Makefile.am b/tools/keepalived/keepalived/bfd/Makefile.am
new file mode 100644
index 000000000..e69d6da8e
--- /dev/null
+++ b/tools/keepalived/keepalived/bfd/Makefile.am
@@ -0,0 +1,24 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2017-2017 Alexandre Cassen, <acassen@gmail.com>
+
+AM_CPPFLAGS		= $(KA_CPPFLAGS) $(DEBUG_CPPFLAGS)
+AM_CFLAGS		= $(KA_CFLAGS) $(DEBUG_CFLAGS)
+AM_LDFLAGS		= $(KA_LDFLAGS) $(DEBUG_LDFLAGS)
+# AM_LIBS		= $(KA_LIBS)
+# AM_LIBTOOLFLAGS	= $(KA_LIBTOOLFLAGS)
+
+noinst_LIBRARIES	= libbfd.a
+
+libbfd_a_SOURCES = \
+	bfd.c bfd_data.c bfd_parser.c bfd_daemon.c bfd_scheduler.c \
+	bfd_event.c
+
+AM_CPPFLAGS		+= -I$(srcdir)/../include -I$(srcdir)/../../lib
+
+EXTRA_libbfd_a_SOURCES =
+libbfd_a_LIBADD =
+
+MAINTAINERCLEANFILES	= @MAINTAINERCLEANFILES@
diff --git a/tools/keepalived/keepalived/bfd/bfd.c b/tools/keepalived/keepalived/bfd/bfd.c
new file mode 100644
index 000000000..ea46da967
--- /dev/null
+++ b/tools/keepalived/keepalived/bfd/bfd.c
@@ -0,0 +1,308 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        BFD implementation as specified by RFC5880, RFC5881
+ *              Bidirectional Forwarding Detection (BFD) is a protocol
+ *              which can provide failure detection on bidirectional path
+ *              between two hosts. A pair of host creates BFD session for
+ *              the communications path. During the communication, hosts
+ *              transmit BFD packets periodically over the path between
+ *              them, and if one host stops receiving BFD packets for
+ *              long enough, some component in the path to the correspondent
+ *              peer is assumed to have failed
+ *
+ * Author:      Ilya Voronin, <ivoronin@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include <string.h>
+#include <arpa/inet.h>
+#include <sys/time.h>
+
+#include "bitops.h"
+#include "bfd.h"
+#include "bfd_data.h"
+#include "logger.h"
+#include "utils.h"
+#include "assert_debug.h"
+
+/* Initial state */
+const bfd_t bfd0 = {
+	.local_state = BFD_STATE_DOWN,
+	.remote_state = BFD_STATE_DOWN,
+	.local_discr = 0,	/* ! */
+	.remote_discr = 0,
+	.local_diag = BFD_DIAG_NO_DIAG,
+	.remote_diag = BFD_DIAG_NO_DIAG,
+	.remote_min_tx_intv = 0,
+	.remote_min_rx_intv = 0,
+	.local_demand = 0,
+	.remote_demand = 0,
+	.remote_detect_mult = 0,
+	.poll = 0,
+	.final = 0,
+	.local_tx_intv = 0,
+	.remote_tx_intv = 0,
+	.local_detect_time = 0,
+	.remote_detect_time = 0,
+	.last_seen = (struct timeval) {0},
+};
+
+void
+bfd_update_local_tx_intv(bfd_t *bfd)
+{
+	bfd->local_tx_intv = bfd->local_min_tx_intv > bfd->remote_min_rx_intv ?
+	    bfd->local_min_tx_intv : bfd->remote_min_rx_intv;
+}
+
+void
+bfd_update_remote_tx_intv(bfd_t *bfd)
+{
+	bfd->remote_tx_intv = bfd->local_min_rx_intv > bfd->remote_min_tx_intv ?
+	    bfd->local_min_rx_intv : bfd->remote_min_tx_intv;
+}
+
+void
+bfd_idle_local_tx_intv(bfd_t *bfd)
+{
+	bfd->local_tx_intv = bfd->local_idle_tx_intv > bfd->remote_min_rx_intv ?
+	    bfd->local_idle_tx_intv : bfd->remote_min_rx_intv;
+}
+
+void
+bfd_set_poll(bfd_t *bfd)
+{
+	if (__test_bit(LOG_DETAIL_BIT, &debug))
+		log_message(LOG_INFO, "BFD_Instance(%s) Starting poll sequence",
+			    bfd->iname);
+	/*
+	 * RFC5880:
+	 * ... If the timing is such that a system receiving a Poll Sequence
+	 * wishes to change the parameters described in this paragraph, the
+	 * new parameter values MAY be carried in packets with the Final (F)
+	 * bit set, even if the Poll Sequence has not yet been sent.
+	 */
+	if (bfd->final != 1)
+		bfd->poll = 1;
+}
+
+/* Copies BFD state */
+void
+bfd_copy_state(bfd_t *bfd, const bfd_t *bfd_old, bool all_fields)
+{
+	assert(bfd_old);
+	assert(bfd);
+
+	/* Copy state variables */
+	bfd->local_state = bfd_old->local_state;
+	bfd->remote_state = bfd_old->remote_state;
+	bfd->remote_discr = bfd_old->remote_discr;
+	bfd->remote_diag = bfd_old->remote_diag;
+	bfd->local_demand = bfd_old->local_demand;
+	bfd->remote_demand = bfd_old->remote_demand;
+	bfd->poll = bfd_old->poll;
+	bfd->final = bfd_old->final;
+
+	/*
+	 * RFC5880:
+	 * When the text refers to initializing a state variable, this takes
+	 * place only at the time that the session (and the corresponding state
+	 * variables) is created.  The state variables are subsequently
+	 * manipulated by the state machine and are never reinitialized, even if
+	 * the session fails and is reestablished.
+	 */
+	if (all_fields) {
+		bfd->local_diag = bfd_old->local_diag;
+		bfd->local_discr = bfd_old->local_discr;
+		bfd->remote_min_tx_intv = bfd_old->remote_min_tx_intv;
+		bfd->remote_min_rx_intv = bfd_old->remote_min_rx_intv;
+		bfd->remote_detect_mult = bfd_old->remote_detect_mult;
+		bfd->local_tx_intv = bfd_old->local_tx_intv;
+		bfd->remote_tx_intv = bfd_old->remote_tx_intv;
+		bfd->local_detect_time = bfd_old->local_detect_time;
+		bfd->remote_detect_time = bfd_old->remote_detect_time;
+
+		bfd->last_seen = bfd_old->last_seen;
+	}
+}
+
+/* Copies thread sands */
+void
+bfd_copy_sands(bfd_t *bfd, const bfd_t *bfd_old)
+{
+	bfd->sands_out = bfd_old->sands_out;
+	bfd->sands_exp = bfd_old->sands_exp;
+	bfd->sands_rst = bfd_old->sands_rst;
+}
+
+/* Resets BFD instance to initial state */
+void
+bfd_init_state(bfd_t *bfd)
+{
+	assert(bfd);
+
+	bfd_copy_state(bfd, &bfd0, true);
+	bfd->local_discr = bfd_get_random_discr(bfd_data);
+	bfd->local_tx_intv = bfd->local_idle_tx_intv;
+}
+
+void
+bfd_reset_state(bfd_t *bfd)
+{
+	assert(bfd);
+
+	bfd_copy_state(bfd, &bfd0, false);
+	bfd_idle_local_tx_intv(bfd);
+}
+
+/*
+ * Builds BFD packet
+ */
+void
+bfd_build_packet(bfdpkt_t *pkt, bfd_t *bfd, char *buf,
+		 const ssize_t bufsz)
+{
+	ssize_t len = sizeof (bfdhdr_t);
+
+	memset(buf, 0, bufsz);
+	pkt->hdr = (bfdhdr_t *) buf;
+
+	/* If we are responding to a poll, but also wanted
+	 * to send a poll, we can send the parameters now */
+	if (bfd->poll && bfd->final)
+		bfd->poll = false;
+
+	pkt->hdr->diag = bfd->local_diag;
+	pkt->hdr->version = BFD_VERSION_1;
+	pkt->hdr->state = bfd->local_state;
+	pkt->hdr->poll = bfd->poll;
+	pkt->hdr->final = bfd->final;
+	pkt->hdr->cplane = 0;
+	pkt->hdr->auth = 0;	/* Auth is not supported */
+	pkt->hdr->demand = bfd->local_demand;
+	pkt->hdr->multipoint = 0;
+	pkt->hdr->detect_mult = bfd->local_detect_mult;
+	pkt->hdr->len = len;
+	pkt->hdr->local_discr = htonl(bfd->local_discr);
+	pkt->hdr->remote_discr = htonl(bfd->remote_discr);
+	pkt->hdr->min_tx_intv = bfd->local_state == BFD_STATE_UP ? htonl(bfd->local_min_tx_intv) : htonl(bfd->local_idle_tx_intv);
+	pkt->hdr->min_rx_intv = htonl(bfd->local_min_rx_intv);
+	pkt->hdr->min_echo_rx_intv = 0;	/* Echo function is not supported */
+
+	pkt->len = len;
+	pkt->dst_addr = bfd->nbr_addr;
+	pkt->buf = buf;
+}
+
+/*
+ * Performs sanity checks on a packet
+ */
+bool
+bfd_check_packet(const bfdpkt_t *pkt)
+{
+	/* Preliminary sanity checks */
+	if (sizeof (bfdhdr_t) > pkt->len) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR, "Packet is too small: %u bytes",
+				    pkt->len);
+		return true;
+	}
+
+	if (pkt->hdr->len != pkt->len) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR, "Packet size mismatch:"
+				    " length field: %u bytes"
+				    ", buffer size: %u bytes",
+				    pkt->hdr->len, pkt->len);
+		return true;
+	}
+
+	/* Main Checks (RFC5880) */
+	if (pkt->hdr->version != BFD_VERSION_1) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR, "Packet is of unsupported"
+				    " version: %d", pkt->hdr->version);
+		return true;
+	}
+
+	if (!pkt->hdr->detect_mult) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR, "Packet 'detection multiplier'"
+				    " field is zero");
+		return true;
+	}
+
+	if (pkt->hdr->multipoint) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR, "Packet has 'multipoint' flag");
+		return true;
+	}
+
+	if (!pkt->hdr->local_discr) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR, "Packet 'my discriminator'"
+				    " field is zero");
+		return true;
+	}
+
+	if (!pkt->hdr->remote_discr
+	    && pkt->hdr->state != BFD_STATE_DOWN
+	    && pkt->hdr->state != BFD_STATE_ADMINDOWN) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR,
+				    "Packet 'your discriminator' field is"
+				    " zero and 'state' field is not"
+				    " Down or AdminDown");
+		return true;
+	}
+
+	/* Additional sanity checks */
+	if (pkt->hdr->poll && pkt->hdr->final) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR, "Packet has both poll and final"
+				    "  flags set");
+		return true;
+	}
+
+	if (!BFD_VALID_DIAG(pkt->hdr->diag)) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR, "Packet has invalid 'diag'"
+				    " field: %d", pkt->hdr->diag);
+		return true;
+	}
+
+	return false;
+}
+
+bool
+bfd_check_packet_ttl(const bfdpkt_t *pkt, const bfd_t *bfd)
+{
+	/* Generalized TTL Security Mechanism Check (RFC5881)
+	 * - extended so we can specify a maximum number of hops */
+	if (pkt->ttl && bfd->max_hops + pkt->ttl < bfd->ttl) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR, "Packet %s(%u) < %d - discarding",
+				    pkt->src_addr.ss_family == AF_INET ? "ttl" : "hop_limit",
+				    pkt->ttl,
+				    bfd->ttl - bfd->max_hops);
+
+		return true;
+	}
+
+	return false;
+}
diff --git a/tools/keepalived/keepalived/bfd/bfd_daemon.c b/tools/keepalived/keepalived/bfd/bfd_daemon.c
new file mode 100644
index 000000000..84eeb2efe
--- /dev/null
+++ b/tools/keepalived/keepalived/bfd/bfd_daemon.c
@@ -0,0 +1,453 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        BFD child process handling
+ *
+ * Author:      Ilya Voronin, <ivoronin@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include <unistd.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <sys/prctl.h>
+#include <fcntl.h>
+#include <sys/time.h>
+#include <sys/resource.h>
+
+#include "bfd.h"
+#include "bfd_daemon.h"
+#include "bfd_data.h"
+#include "bfd_parser.h"
+#include "bfd_scheduler.h"
+#include "bfd_event.h"
+#include "pidfile.h"
+#include "logger.h"
+#include "signals.h"
+#include "list.h"
+#include "main.h"
+#include "parser.h"
+#include "time.h"
+#include "global_data.h"
+#include "bitops.h"
+#include "utils.h"
+#include "scheduler.h"
+#include "process.h"
+#include "utils.h"
+#ifdef _WITH_CN_PROC_
+#include "track_process.h"
+#endif
+
+/* Global variables */
+int bfd_vrrp_event_pipe[2] = { -1, -1};
+int bfd_checker_event_pipe[2] = { -1, -1};
+
+/* Local variables */
+static const char *bfd_syslog_ident;
+
+#ifndef _DEBUG_
+static int reload_bfd_thread(thread_ref_t);
+#endif
+
+/* Daemon stop sequence */
+static void
+stop_bfd(int status)
+{
+	struct rusage usage;
+
+	if (__test_bit(CONFIG_TEST_BIT, &debug))
+		return;
+
+	/* Stop daemon */
+	pidfile_rm(bfd_pidfile);
+
+	/* Clean data */
+	free_global_data(global_data);
+	bfd_dispatcher_release(bfd_data);
+	free_bfd_data(bfd_data);
+	free_bfd_buffer();
+	thread_destroy_master(master);
+	free_parent_mallocs_exit();
+
+	/*
+	 * Reached when terminate signal catched.
+	 * finally return to parent process.
+	 */
+	if (__test_bit(LOG_DETAIL_BIT, &debug)) {
+		getrusage(RUSAGE_SELF, &usage);
+		log_message(LOG_INFO, "Stopped - used %ld.%6.6ld user time, %ld.%6.6ld system time", usage.ru_utime.tv_sec, usage.ru_utime.tv_usec, usage.ru_stime.tv_sec, usage.ru_stime.tv_usec);
+	}
+	else
+		log_message(LOG_INFO, "Stopped");
+
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		close_log_file();
+#endif
+	closelog();
+
+#ifndef _MEM_CHECK_LOG_
+	FREE_CONST_PTR(bfd_syslog_ident);
+#else
+	if (bfd_syslog_ident)
+		free(no_const_char_p(bfd_syslog_ident));
+#endif
+	close_std_fd();
+
+	exit(status);
+}
+
+/* Daemon init sequence */
+void
+open_bfd_pipes(void)
+{
+#ifdef _WITH_VRRP_
+	/* Open BFD VRRP control pipe */
+	if (open_pipe(bfd_vrrp_event_pipe) == -1) {
+		log_message(LOG_ERR, "Unable to create BFD vrrp event pipe: %m");
+		stop_keepalived();
+		return;
+	}
+#endif
+
+#ifdef _WITH_LVS_
+	/* Open BFD checker control pipe */
+	if (open_pipe(bfd_checker_event_pipe) == -1) {
+		log_message(LOG_ERR, "Unable to create BFD checker event pipe: %m");
+		stop_keepalived();
+		return;
+	}
+#endif
+}
+
+/* Daemon init sequence */
+static void
+start_bfd(__attribute__((unused)) data_t *prev_global_data)
+{
+	srandom(time(NULL));
+
+	if (reload)
+		global_data = alloc_global_data();
+	if (!(bfd_data = alloc_bfd_data())) {
+		stop_bfd(KEEPALIVED_EXIT_FATAL);
+		return;
+	}
+
+	alloc_bfd_buffer();
+
+	init_data(conf_file, bfd_init_keywords);
+	if (reload)
+		init_global_data(global_data, prev_global_data, true);
+
+	/* Update process name if necessary */
+	if ((!reload && global_data->bfd_process_name) ||
+	    (reload &&
+	     (!global_data->bfd_process_name != !prev_global_data->bfd_process_name ||
+	      (global_data->bfd_process_name && strcmp(global_data->bfd_process_name, prev_global_data->bfd_process_name)))))
+		set_process_name(global_data->bfd_process_name);
+
+	/* If we are just testing the configuration, then we terminate now */
+	if (__test_bit(CONFIG_TEST_BIT, &debug))
+		return;
+	bfd_complete_init();
+
+	/* Post initializations */
+#ifdef _MEM_CHECK_
+	log_message(LOG_INFO, "Configuration is using : %zu Bytes", mem_allocated);
+#endif
+
+	if (__test_bit(DUMP_CONF_BIT, &debug))
+		dump_bfd_data(NULL, bfd_data);
+
+	thread_add_event(master, bfd_dispatcher_init, bfd_data, 0);
+
+	/* Set the process priority and non swappable if configured */
+// TODO - measure max stack usage
+	set_process_priorities(
+#ifdef _HAVE_SCHED_RT_
+			global_data->bfd_realtime_priority,
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+			global_data->bfd_rlimit_rt,
+#endif
+#endif
+			global_data->bfd_process_priority, global_data->bfd_no_swap ? 4096 : 0);
+
+#ifdef _HAVE_SCHED_RT_
+	/* Set the process cpu affinity if configured */
+	set_process_cpu_affinity(&global_data->bfd_cpu_mask, "bfd");
+#endif
+}
+
+void
+bfd_validate_config(void)
+{
+	start_bfd(NULL);
+}
+
+#ifndef _DEBUG_
+/* Reload handler */
+static void
+sigreload_bfd(__attribute__ ((unused)) void *v,
+	   __attribute__ ((unused)) int sig)
+{
+	thread_add_event(master, reload_bfd_thread, NULL, 0);
+}
+
+/* Terminate handler */
+static void
+sigend_bfd(__attribute__ ((unused)) void *v,
+	   __attribute__ ((unused)) int sig)
+{
+	if (master)
+		thread_add_terminate_event(master);
+}
+
+/* BFD Child signal handling */
+static void
+bfd_signal_init(void)
+{
+	signal_set(SIGHUP, sigreload_bfd, NULL);
+	signal_set(SIGINT, sigend_bfd, NULL);
+	signal_set(SIGTERM, sigend_bfd, NULL);
+	signal_ignore(SIGPIPE);
+}
+
+/* Reload thread */
+static int
+reload_bfd_thread(__attribute__((unused)) thread_ref_t thread)
+{
+	timeval_t timer;
+	timer = timer_now();
+
+	log_message(LOG_INFO, "Reloading");
+
+	/* Use standard scheduling while reloading */
+	reset_process_priorities();
+
+	/* set the reloading flag */
+	SET_RELOAD;
+
+	/* Destroy master thread */
+	bfd_dispatcher_release(bfd_data);
+	thread_cleanup_master(master);
+	thread_add_base_threads(master, false);
+
+	old_bfd_data = bfd_data;
+	bfd_data = NULL;
+	old_global_data = global_data;
+	global_data = NULL;
+
+	/* Reload the conf */
+	signal_set(SIGCHLD, thread_child_handler, master);
+	start_bfd(old_global_data);
+
+	free_bfd_data(old_bfd_data);
+	free_global_data(old_global_data);
+
+	UNSET_RELOAD;
+
+	set_time_now();
+	log_message(LOG_INFO, "Reload finished in %lu usec", -timer_long(timer_sub_now(timer)));
+
+	return 0;
+}
+
+/* BFD Child respawning thread */
+static int
+bfd_respawn_thread(thread_ref_t thread)
+{
+	/* We catch a SIGCHLD, handle it */
+	bfd_child = 0;
+
+	if (!__test_bit(DONT_RESPAWN_BIT, &debug)) {
+		log_message(LOG_ALERT, "BFD child process(%d) died: Respawning", thread->u.c.pid);
+		start_bfd_child();
+	} else {
+		log_message(LOG_ALERT, "BFD child process(%d) died: Exiting", thread->u.c.pid);
+		raise(SIGTERM);
+	}
+	return 0;
+}
+#endif
+
+#ifndef _DEBUG_
+#ifdef THREAD_DUMP
+static void
+register_bfd_thread_addresses(void)
+{
+	register_scheduler_addresses();
+	register_signal_thread_addresses();
+
+	register_bfd_scheduler_addresses();
+
+	register_thread_address("bfd_dispatcher_init", bfd_dispatcher_init);
+	register_thread_address("reload_bfd_thread", reload_bfd_thread);
+
+	register_signal_handler_address("sigreload_bfd", sigreload_bfd);
+	register_signal_handler_address("sigend_bfd", sigend_bfd);
+	register_signal_handler_address("thread_child_handler", thread_child_handler);
+}
+#endif
+#endif
+
+int
+start_bfd_child(void)
+{
+#ifndef _DEBUG_
+	pid_t pid;
+	int ret;
+	const char *syslog_ident;
+
+	/* Initialize child process */
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		flush_log_file();
+#endif
+
+	pid = fork();
+
+	if (pid < 0) {
+		log_message(LOG_INFO, "BFD child process: fork error(%m)");
+		return -1;
+	} else if (pid) {
+		bfd_child = pid;
+		log_message(LOG_INFO, "Starting BFD child process, pid=%d",
+			    pid);
+
+		/* Start respawning thread */
+		thread_add_child(master, bfd_respawn_thread, NULL,
+				 pid, TIMER_NEVER);
+		return 0;
+	}
+	prctl(PR_SET_PDEATHSIG, SIGTERM);
+
+	prog_type = PROG_TYPE_BFD;
+
+	/* Close the read end of the event notification pipes, and the track_process fd */
+#ifdef _WITH_VRRP_
+	close(bfd_vrrp_event_pipe[0]);
+#ifdef _WITH_CN_PROC_
+	close_track_processes();
+#endif
+#endif
+#ifdef _WITH_LVS_
+	close(bfd_checker_event_pipe[0]);
+#endif
+
+	initialise_debug_options();
+
+	if ((global_data->instance_name
+#if HAVE_DECL_CLONE_NEWNET
+			   || global_data->network_namespace
+#endif
+					       ) &&
+	     (bfd_syslog_ident = make_syslog_ident(PROG_BFD)))
+		syslog_ident = bfd_syslog_ident;
+	else
+		syslog_ident = PROG_BFD;
+
+	/* Opening local BFD syslog channel */
+	if (!__test_bit(NO_SYSLOG_BIT, &debug))
+		openlog(syslog_ident, LOG_PID | ((__test_bit(LOG_CONSOLE_BIT, &debug)) ? LOG_CONS : 0)
+				    , (log_facility==LOG_DAEMON) ? LOG_LOCAL2 : log_facility);
+
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		open_log_file(log_file_name,
+				"bfd",
+#if HAVE_DECL_CLONE_NEWNET
+				global_data->network_namespace,
+#else
+				NULL,
+#endif
+				global_data->instance_name);
+#endif
+
+#ifdef _MEM_CHECK_
+	mem_log_init(PROG_BFD, "BFD child process");
+#endif
+
+	free_parent_mallocs_startup(true);
+
+	/* Clear any child finder functions set in parent */
+	set_child_finder_name(NULL);
+
+	/* Child process part, write pidfile */
+	if (!pidfile_write(bfd_pidfile, getpid())) {
+		/* Fatal error */
+		log_message(LOG_INFO,
+			    "BFD child process: cannot write pidfile");
+		exit(0);
+	}
+
+	/* Create the new master thread */
+	thread_destroy_master(master);
+	master = thread_make_master();
+
+	/* change to / dir */
+	ret = chdir("/");
+	if (ret < 0) {
+		log_message(LOG_INFO, "BFD child process: error chdir");
+	}
+#endif
+
+	/* If last process died during a reload, we can get there and we
+	 * don't want to loop again, because we're not reloading anymore.
+	 */
+	UNSET_RELOAD;
+
+#ifndef _DEBUG_
+	/* Signal handling initialization */
+	bfd_signal_init();
+#endif
+
+	/* Start BFD daemon */
+	start_bfd(NULL);
+
+#ifdef _DEBUG_
+	return 0;
+#else
+
+#ifdef THREAD_DUMP
+	register_bfd_thread_addresses();
+#endif
+
+	/* Launch the scheduling I/O multiplexer */
+	launch_thread_scheduler(master);
+
+#ifdef THREAD_DUMP
+	deregister_thread_addresses();
+#endif
+
+	/* Finish BFD daemon process */
+	stop_bfd(EXIT_SUCCESS);
+
+	/* unreachable */
+	exit(EXIT_SUCCESS);
+#endif
+}
+
+#ifdef THREAD_DUMP
+void
+register_bfd_parent_addresses(void)
+{
+#ifndef _DEBUG_
+	register_thread_address("bfd_respawn_thread", bfd_respawn_thread);
+#endif
+}
+#endif
diff --git a/tools/keepalived/keepalived/bfd/bfd_data.c b/tools/keepalived/keepalived/bfd/bfd_data.c
new file mode 100644
index 000000000..c70960712
--- /dev/null
+++ b/tools/keepalived/keepalived/bfd/bfd_data.c
@@ -0,0 +1,360 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Dynamic data structure definition
+ *
+ * Author:      Ilya Voronin, <ivoronin@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include "bfd.h"
+#include "bfd_data.h"
+#include "logger.h"
+#include "parser.h"
+#include "memory.h"
+#include "utils.h"
+#include "main.h"
+#include "assert_debug.h"
+
+/* Global vars */
+bfd_data_t *bfd_data;
+bfd_data_t *old_bfd_data;
+char *bfd_buffer;
+
+/*
+ * bfd_t functions
+ */
+/* Initialize bfd_t */
+bool
+alloc_bfd(const char *name)
+{
+	bfd_t *bfd;
+
+	assert(name);
+
+	if (strlen(name) >= sizeof(bfd->iname)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: BFD instance %s"
+			    " name too long (maximum length is %zu"
+			    " characters) - ignoring", name,
+			    sizeof(bfd->iname) - 1);
+		return false;
+	}
+
+	if (find_bfd_by_name(name)) {
+		report_config_error(CONFIG_GENERAL_ERROR,
+			    "Configuration error: BFD instance %s"
+			    " already configured - ignoring", name);
+		return false;
+	}
+
+	bfd = (bfd_t *) MALLOC(sizeof (bfd_t));
+	strcpy(bfd->iname, name);
+
+	/* Set defaults */
+	bfd->local_min_rx_intv = BFD_MINRX_DEFAULT * 1000;
+	bfd->local_min_tx_intv = BFD_MINTX_DEFAULT * 1000;
+	bfd->local_idle_tx_intv = BFD_IDLETX_DEFAULT * 1000;
+	bfd->local_detect_mult = BFD_MULTIPLIER_DEFAULT;
+
+	bfd->ttl = 0;
+	bfd->max_hops = 0;
+
+	/* Initialize internal variables */
+	bfd->fd_out = -1;
+	bfd->thread_out = NULL;
+	bfd->thread_exp = NULL;
+	bfd->thread_rst = NULL;
+	bfd->sands_out = -1;
+	bfd->sands_exp = -1;
+	bfd->sands_rst = -1;
+
+	list_add(bfd_data->bfd, bfd);
+
+	return true;
+}
+
+static void
+free_bfd(void *data)
+{
+	assert(data);
+	FREE(data);
+}
+
+/* Dump BFD instance configuration parameters */
+static void
+dump_bfd(FILE *fp, const void *data)
+{
+	const bfd_t *bfd;
+
+	assert(data);
+	bfd = (const bfd_t *)data;
+
+	conf_write(fp, " BFD Instance = %s", bfd->iname);
+	conf_write(fp, "   Neighbor IP = %s",
+		    inet_sockaddrtos(&bfd->nbr_addr));
+
+	if (bfd->src_addr.ss_family != AF_UNSPEC)
+		conf_write(fp, "   Source IP = %s",
+			    inet_sockaddrtos(&bfd->src_addr));
+
+	conf_write(fp, "   Required min RX interval = %u ms",
+		    bfd->local_min_rx_intv / (TIMER_HZ / 1000));
+	conf_write(fp, "   Desired min TX interval = %u ms",
+		    bfd->local_min_tx_intv / (TIMER_HZ / 1000));
+	conf_write(fp, "   Desired idle TX interval = %u ms",
+		    bfd->local_idle_tx_intv / (TIMER_HZ / 1000));
+	conf_write(fp, "   Detection multiplier = %d",
+		    bfd->local_detect_mult);
+	conf_write(fp, "   %s = %d",
+		    bfd->nbr_addr.ss_family == AF_INET ? "TTL" : "hoplimit",
+		    bfd->ttl);
+	conf_write(fp, "   max_hops = %d",
+		    bfd->max_hops);
+#ifdef _WITH_VRRP_
+	conf_write(fp, "   send event to VRRP process = %s",
+		    bfd->vrrp ? "Yes" : "No");
+#endif
+#ifdef _WITH_LVS_
+	conf_write(fp, "   send event to checker process = %s",
+		    bfd->checker ? "Yes" : "No");
+#endif
+}
+
+/* Looks up bfd instance by name */
+static bfd_t * __attribute__ ((pure))
+find_bfd_by_name2(const char *name, const bfd_data_t *data)
+{
+	element e;
+	bfd_t *bfd;
+
+	assert(name);
+	assert(data);
+	assert(data->bfd);
+
+	if (LIST_ISEMPTY(data->bfd))
+		return NULL;
+
+	for (e = LIST_HEAD(data->bfd); e; ELEMENT_NEXT(e)) {
+		bfd = ELEMENT_DATA(e);
+		if (!strcmp(name, bfd->iname))
+			return bfd;
+	}
+
+	return NULL;
+}
+
+bfd_t * __attribute__ ((pure))
+find_bfd_by_name(const char *name)
+{
+	return find_bfd_by_name2(name, bfd_data);
+}
+
+/* compares old and new timers, returns 0 if they are the same */
+static int
+bfd_cmp_timers(bfd_t * old_bfd, bfd_t * bfd)
+{
+	return (old_bfd->local_min_rx_intv != bfd->local_min_rx_intv
+		|| old_bfd->local_min_tx_intv != bfd->local_min_tx_intv);
+}
+
+/*
+ * bfd_data_t functions
+ */
+bfd_data_t *
+alloc_bfd_data(void)
+{
+	bfd_data_t *data;
+
+	data = (bfd_data_t *) MALLOC(sizeof (bfd_data_t));
+	data->bfd = alloc_list(free_bfd, dump_bfd);
+
+	/* Initialize internal variables */
+	data->thread_in = NULL;
+	data->fd_in = -1;
+
+	return data;
+}
+
+void
+free_bfd_data(bfd_data_t * data)
+{
+	assert(data);
+
+	free_list(&data->bfd);
+	FREE(data);
+}
+
+void
+dump_bfd_data(FILE *fp, const bfd_data_t * data)
+{
+	assert(data);
+
+	if (!LIST_ISEMPTY(data->bfd)) {
+		conf_write(fp, "------< BFD Topology >------");
+		dump_list(fp, data->bfd);
+	}
+}
+
+void
+bfd_complete_init(void)
+{
+	bfd_t *bfd, *bfd_old;
+	element e;
+
+	assert(bfd_data);
+	assert(bfd_data->bfd);
+
+	/* Build configuration */
+	LIST_FOREACH(bfd_data->bfd, bfd, e) {
+		/* If there was an old instance with the same name
+		   copy its state and thread sands during reload */
+		if (reload && (bfd_old = find_bfd_by_name2(bfd->iname, old_bfd_data))) {
+			bfd_copy_state(bfd, bfd_old, true);
+			bfd_copy_sands(bfd, bfd_old);
+			if (bfd_cmp_timers(bfd_old, bfd))
+				bfd_set_poll(bfd);
+		} else
+			bfd_init_state(bfd);
+	}
+
+	/* Copy old input fd on reload */
+	if (reload)
+		bfd_data->fd_in = old_bfd_data->fd_in;
+}
+
+/*
+ * bfd_buffer functions
+ */
+void
+alloc_bfd_buffer(void)
+{
+	if (!bfd_buffer)
+		bfd_buffer = (char *) MALLOC(BFD_BUFFER_SIZE);
+}
+
+void
+free_bfd_buffer(void)
+{
+	FREE(bfd_buffer);
+	bfd_buffer = NULL;
+}
+
+/*
+ * Lookup functions
+ */
+/* Looks up bfd instance by neighbor address, and optional local address.
+ * If local address is not set, then it is a configuration time check and
+ * the bfd instance is configured without a local address. */
+bfd_t * __attribute__ ((pure))
+find_bfd_by_addr(const struct sockaddr_storage *nbr_addr, const struct sockaddr_storage *local_addr)
+{
+	element e;
+	bfd_t *bfd;
+	assert(nbr_addr);
+	assert(local_addr);
+	assert(bfd_data);
+
+	LIST_FOREACH(bfd_data->bfd, bfd, e) {
+		if (&bfd->nbr_addr == nbr_addr)
+			continue;
+
+		if (inet_sockaddrcmp(&bfd->nbr_addr, nbr_addr))
+			continue;
+
+		if (!bfd->src_addr.ss_family)
+			return bfd;
+
+		if (!local_addr->ss_family) {
+			/* A new bfd instance without an address is being configured,
+			 * but we already have the neighbor address configured. */
+			return bfd;
+		}
+
+		if (!inet_sockaddrcmp(&bfd->src_addr, local_addr))
+			return bfd;
+	}
+
+	return NULL;
+}
+
+/* Looks up bfd instance by local discriminator */
+bfd_t * __attribute__ ((pure))
+find_bfd_by_discr(const uint32_t discr)
+{
+	element e;
+	bfd_t *bfd;
+
+	if (LIST_ISEMPTY(bfd_data->bfd))
+		return NULL;
+
+	for (e = LIST_HEAD(bfd_data->bfd); e; ELEMENT_NEXT(e)) {
+		bfd = ELEMENT_DATA(e);
+		if (bfd->local_discr == discr)
+			return bfd;
+	}
+
+	return NULL;
+}
+
+/*
+ * Utility functions
+ */
+
+/* Check if uint64_t is large enough to hold uint32_t * int */
+#if INT_MAX <= INT32_MAX
+#define CALC_TYPE uint64_t
+#else
+#define CALC_TYPE double
+#endif
+
+/* Generates a random number in the specified interval */
+uint32_t
+rand_intv(uint32_t min, uint32_t max)
+{
+	/* coverity[dont_call] */
+	return (uint32_t)((((CALC_TYPE)max - min + 1) * random()) / (RAND_MAX + 1U)) + min;
+}
+
+#undef CALC_TYPE
+
+/* Returns random disciminator number */
+uint32_t
+bfd_get_random_discr(bfd_data_t *data)
+{
+	bfd_t *bfd;
+	uint32_t discr;
+	element e;
+
+	assert(data);
+
+	do {
+		/* rand_intv(1, UINT32_MAX) only returns even numbers, since
+		 * RAND_MAX == INT32_MAX == UINT32_MAX / 2 */
+		discr = (rand_intv(1, UINT32_MAX) & ~1) | (time_now.tv_sec & 1);
+
+		/* Check for collisions */
+		LIST_FOREACH(data->bfd, bfd, e) {
+			if (bfd->local_discr == discr) {
+				discr = 0;
+				break;
+			}
+		}
+	} while (!discr);
+
+	return discr;
+}
diff --git a/tools/keepalived/keepalived/bfd/bfd_event.c b/tools/keepalived/keepalived/bfd/bfd_event.c
new file mode 100644
index 000000000..1c0e81151
--- /dev/null
+++ b/tools/keepalived/keepalived/bfd/bfd_event.c
@@ -0,0 +1,85 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        BFD event handling
+ *
+ * Author:      Ilya Voronin, <ivoronin@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include <unistd.h>
+
+#include "bfd.h"
+#include "bfd_event.h"
+#include "bfd_daemon.h"
+#include "logger.h"
+#include "main.h"
+#include "memory.h"
+#include "bitops.h"
+#include "utils.h"
+#include "global_data.h"
+#include "assert_debug.h"
+
+void
+bfd_event_send(bfd_t *bfd)
+{
+	bfd_event_t evt;
+	int ret;
+#ifdef _WITH_VRRP_
+	bool vrrp_running = running_vrrp();
+#endif
+#ifdef _WITH_LVS_
+	bool checker_running = running_checker();
+#endif
+
+	assert(bfd);
+
+	/* If there is no VRRP process running, don't write to the pipe */
+	if (true
+#ifdef _WITH_VRRP_
+	    && !vrrp_running
+#endif
+#ifdef _WITH_LVS_
+	    && !checker_running
+#endif
+		)
+		return;
+
+	memset(&evt, 0, sizeof evt);
+	strcpy(evt.iname, bfd->iname);
+	evt.state = bfd->local_state == BFD_STATE_UP ? BFD_STATE_UP : BFD_STATE_DOWN;
+	evt.sent_time = timer_now();
+
+#ifdef _WITH_VRRP_
+	if (vrrp_running && bfd->vrrp) {
+		ret = write(bfd_vrrp_event_pipe[1], &evt, sizeof evt);
+		if (ret == -1 && __test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR, "BFD_Instance(%s) vrrp pipe write() error %m",
+				    bfd->iname);
+	}
+#endif
+
+#ifdef _WITH_LVS_
+	if (checker_running && bfd->checker) {
+		ret = write(bfd_checker_event_pipe[1], &evt, sizeof evt);
+		if (ret == -1 && __test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR, "BFD_Instance(%s) checker pipe write() error %m",
+				    bfd->iname);
+	}
+#endif
+}
diff --git a/tools/keepalived/keepalived/bfd/bfd_parser.c b/tools/keepalived/keepalived/bfd/bfd_parser.c
new file mode 100644
index 000000000..1eb123b3a
--- /dev/null
+++ b/tools/keepalived/keepalived/bfd/bfd_parser.c
@@ -0,0 +1,559 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Configuration file parser/reader.
+ *
+ * Author:      Ilya Voronin, <ivoronin@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include "bfd.h"
+#include "bfd_data.h"
+#include "bfd_parser.h"
+#include "logger.h"
+#include "parser.h"
+#include "global_parser.h"
+#include "utils.h"
+#include "global_data.h"
+
+#include "bitops.h"
+#ifdef _WITH_LVS_
+#include "check_parser.h"
+#include "check_bfd.h"
+#endif
+#ifdef _WITH_VRRP_
+#include "vrrp_parser.h"
+#include "vrrp_track.h"
+#include "vrrp_data.h"
+#endif
+#include "main.h"
+#include "assert_debug.h"
+
+
+static unsigned long specified_event_processes;
+
+/* Allow for English spelling */
+static const char * neighbor_str = "neighbor";
+
+static void
+bfd_handler(const vector_t *strvec)
+{
+	char *name;
+
+	global_data->have_bfd_config = true;
+
+	/* If we are not the bfd process, we don't need any more information */
+	if (!strvec)
+		return;
+
+	name = vector_slot(strvec, 1);
+
+	if (!alloc_bfd(name)) {
+		skip_block(true);
+		return;
+	}
+
+	specified_event_processes = 0;
+}
+
+static void
+bfd_nbrip_handler(const vector_t *strvec)
+{
+	bfd_t *bfd;
+	struct sockaddr_storage nbr_addr;
+
+	assert(strvec);
+	assert(bfd_data);
+
+	bfd = LIST_TAIL_DATA(bfd_data->bfd);
+	assert(bfd);
+
+	if (!strcmp(vector_slot(strvec, 1), "neighbour_ip"))
+		neighbor_str = "neighbour";
+
+	if (inet_stosockaddr(strvec_slot(strvec, 1), BFD_CONTROL_PORT, &nbr_addr)) {
+		report_config_error(CONFIG_GENERAL_ERROR,
+			    "Configuration error: BFD instance %s has"
+			    " malformed %s address %s, ignoring instance",
+			    bfd->iname, neighbor_str, strvec_slot(strvec, 1));
+		list_del(bfd_data->bfd, bfd);
+		skip_block(false);
+		return;
+	} else
+		bfd->nbr_addr = nbr_addr;
+}
+
+static void
+bfd_srcip_handler(const vector_t *strvec)
+{
+	bfd_t *bfd;
+	struct sockaddr_storage src_addr;
+
+	assert(strvec);
+	assert(bfd_data);
+
+	bfd = LIST_TAIL_DATA(bfd_data->bfd);
+	assert(bfd);
+
+	if (inet_stosockaddr(strvec_slot(strvec, 1), NULL, &src_addr)) {
+		report_config_error(CONFIG_GENERAL_ERROR,
+			    "Configuration error: BFD instance %s has"
+			    " malformed source address %s, ignoring",
+			    bfd->iname, strvec_slot(strvec, 1));
+	} else
+		bfd->src_addr = src_addr;
+}
+
+static void
+bfd_minrx_handler(const vector_t *strvec)
+{
+	bfd_t *bfd;
+	unsigned value;
+
+	assert(strvec);
+	assert(bfd_data);
+
+	bfd = LIST_TAIL_DATA(bfd_data->bfd);
+	assert(bfd);
+
+	if (!read_unsigned_strvec(strvec, 1, &value, BFD_MINRX_MIN, BFD_MINRX_MAX, false))
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: BFD instance %s"
+			    " min_rx value %s is not valid (must be in range"
+			    " [%u-%u]), ignoring", bfd->iname, strvec_slot(strvec, 1),
+			    BFD_MINRX_MIN, BFD_MINRX_MAX);
+	else
+		bfd->local_min_rx_intv = value * 1000U;
+
+	if (value > BFD_MINRX_MAX_SENSIBLE)
+		log_message(LOG_INFO, "Configuration warning: BFD instance %s"
+			    " min_rx value %u is larger than max sensible (%u)",
+			    bfd->iname, value, BFD_MINRX_MAX_SENSIBLE);
+}
+
+static void
+bfd_mintx_handler(const vector_t *strvec)
+{
+	bfd_t *bfd;
+	unsigned value;
+
+	assert(strvec);
+	assert(bfd_data);
+
+	bfd = LIST_TAIL_DATA(bfd_data->bfd);
+	assert(bfd);
+
+	if (!read_unsigned_strvec(strvec, 1, &value, BFD_MINTX_MIN, BFD_MINTX_MAX, false))
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: BFD instance %s"
+			    " min_tx value %s is not valid (must be in range"
+			    " [%u-%u]), ignoring", bfd->iname, strvec_slot(strvec, 1),
+			    BFD_MINTX_MIN, BFD_MINTX_MAX);
+	else
+		bfd->local_min_tx_intv = value * 1000U;
+
+	if (value > BFD_MINTX_MAX_SENSIBLE)
+		log_message(LOG_INFO, "Configuration warning: BFD instance %s"
+			    " min_tx value %u is larger than max sensible (%u)",
+			    bfd->iname, value, BFD_MINTX_MAX_SENSIBLE);
+}
+
+static void
+bfd_idletx_handler(const vector_t *strvec)
+{
+	bfd_t *bfd;
+	unsigned value;
+
+	assert(strvec);
+	assert(bfd_data);
+
+	bfd = LIST_TAIL_DATA(bfd_data->bfd);
+	assert(bfd);
+
+	if (!read_unsigned_strvec(strvec, 1, &value,BFD_IDLETX_MIN, BFD_IDLETX_MAX, false))
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: BFD instance %s"
+			    " idle_tx value %s is not valid (must be in range"
+			    " [%u-%u]), ignoring", bfd->iname, strvec_slot(strvec, 1),
+			    BFD_IDLETX_MIN, BFD_IDLETX_MAX);
+	else
+		bfd->local_idle_tx_intv = value * 1000U;
+
+	if (value > BFD_IDLETX_MAX_SENSIBLE)
+		log_message(LOG_INFO, "Configuration warning: BFD instance %s"
+			    " idle_tx value %u is larger than max sensible (%u)",
+			    bfd->iname, value, BFD_IDLETX_MAX_SENSIBLE);
+}
+
+static void
+bfd_multiplier_handler(const vector_t *strvec)
+{
+	bfd_t *bfd;
+	unsigned value;
+
+	assert(strvec);
+	assert(bfd_data);
+
+	bfd = LIST_TAIL_DATA(bfd_data->bfd);
+	assert(bfd);
+
+	if (!read_unsigned_strvec(strvec, 1, &value, BFD_MULTIPLIER_MIN, BFD_MULTIPLIER_MAX, false))
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: BFD instance %s"
+			    " multiplier value %s not valid (must be in range"
+			    " [%u-%u]), ignoring", bfd->iname, strvec_slot(strvec, 1),
+			    BFD_MULTIPLIER_MIN, BFD_MULTIPLIER_MAX);
+	else
+		bfd->local_detect_mult = value;
+}
+
+static void
+bfd_passive_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	bfd_t *bfd;
+
+	assert(bfd_data);
+
+	bfd = LIST_TAIL_DATA(bfd_data->bfd);
+	assert(bfd);
+
+	bfd->passive = true;
+}
+
+static void
+bfd_ttl_handler(const vector_t *strvec)
+{
+	bfd_t *bfd;
+	unsigned value;
+
+	assert(strvec);
+	assert(bfd_data);
+
+	bfd = LIST_TAIL_DATA(bfd_data->bfd);
+	assert(bfd);
+
+	if (!read_unsigned_strvec(strvec, 1, &value, 1, BFD_TTL_MAX, false))
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: BFD instance %s"
+			    " ttl/hoplimit value %s not valid (must be in range"
+			    " [1-%d]), ignoring", bfd->iname,
+			    strvec_slot(strvec, 1), BFD_TTL_MAX);
+	else
+		bfd->ttl = value;
+}
+
+static void
+bfd_maxhops_handler(const vector_t *strvec)
+{
+	bfd_t *bfd;
+	int value;
+
+	assert(strvec);
+	assert(bfd_data);
+
+	bfd = LIST_TAIL_DATA(bfd_data->bfd);
+	assert(bfd);
+
+	if (!read_int_strvec(strvec, 1, &value, -1, BFD_TTL_MAX, false))
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: BFD instance %s"
+			    " max_hops value %s not valid (must be in range"
+			    " [-1-%d]), ignoring", bfd->iname,
+			    strvec_slot(strvec, 1), BFD_TTL_MAX);
+	else
+		bfd->max_hops = value;
+}
+
+/* Checks for minimum configuration requirements */
+#ifdef _WITH_VRRP_
+static void
+bfd_vrrp_end_handler(void)
+{
+	if (specified_event_processes && !__test_bit(DAEMON_VRRP, &specified_event_processes))
+		list_del(vrrp_data->vrrp_track_bfds, LIST_TAIL_DATA(vrrp_data->vrrp_track_bfds));
+}
+#endif
+
+#ifdef _WITH_LVS_
+static void
+bfd_checker_end_handler(void)
+{
+	if (specified_event_processes && !__test_bit(DAEMON_CHECKERS, &specified_event_processes))
+		list_del(check_data->track_bfds, LIST_TAIL_DATA(check_data->track_bfds));
+}
+#endif
+
+static void
+bfd_end_handler(void)
+{
+	bfd_t *bfd = LIST_TAIL_DATA(bfd_data->bfd);
+
+	assert(bfd);
+
+	if (!bfd->nbr_addr.ss_family) {
+		report_config_error(CONFIG_GENERAL_ERROR,
+			    "Configuration error: BFD instance %s has"
+			    " no %s address set, disabling instance",
+			    bfd->iname, neighbor_str);
+		list_del(bfd_data->bfd, bfd);
+		return;
+	}
+
+	if (bfd->src_addr.ss_family
+	    && bfd->nbr_addr.ss_family != bfd->src_addr.ss_family) {
+		report_config_error(CONFIG_GENERAL_ERROR,
+			    "Configuration error: BFD instance %s source"
+			    " address %s and %s address %s"
+			    " are not of the same family, disabling instance",
+			    bfd->iname, inet_sockaddrtos(&bfd->src_addr),
+			    neighbor_str, inet_sockaddrtos(&bfd->nbr_addr));
+		list_del(bfd_data->bfd, bfd);
+		return;
+	}
+
+	if (find_bfd_by_addr(&bfd->nbr_addr, &bfd->src_addr)) {
+		if (bfd->src_addr.ss_family) {
+			char src_addr[INET6_ADDRSTRLEN];
+			strcpy(src_addr, inet_sockaddrtos(&bfd->src_addr));
+			report_config_error(CONFIG_GENERAL_ERROR,
+				    "Configuration error: BFD instance %s has"
+				    " duplicate source/%s address %s/%s, ignoring instance",
+				    bfd->iname, neighbor_str, src_addr, inet_sockaddrtos(&bfd->nbr_addr));
+		} else
+			report_config_error(CONFIG_GENERAL_ERROR,
+				    "Configuration error: BFD instance %s has"
+				    " duplicate %s address %s, ignoring instance",
+				    bfd->iname, neighbor_str, inet_sockaddrtos(&bfd->nbr_addr));
+		list_del(bfd_data->bfd, bfd);
+		return;
+	}
+
+	if (!bfd->ttl)
+		bfd->ttl = bfd->nbr_addr.ss_family == AF_INET ? BFD_CONTROL_TTL : BFD_CONTROL_HOPLIMIT;
+	if (bfd->max_hops > bfd->ttl) {
+		report_config_error(CONFIG_GENERAL_ERROR, "BFD instance %s: max_hops exceeds ttl/hoplimit - setting to ttl/hoplimit", bfd->iname);
+		bfd->max_hops = bfd->ttl;
+	}
+
+#ifdef _WITH_VRRP_
+	if (!specified_event_processes || __test_bit(DAEMON_VRRP, &specified_event_processes))
+		bfd->vrrp = true;
+
+#ifdef _DEBUG_
+	bfd_vrrp_end_handler();
+#endif
+#endif
+#ifdef _WITH_LVS_
+	if (!specified_event_processes || __test_bit(DAEMON_CHECKERS, &specified_event_processes))
+		bfd->checker = true;
+
+#ifdef _DEBUG_
+	bfd_checker_end_handler();
+#endif
+#endif
+}
+
+#ifdef _WITH_VRRP_
+#ifndef _DEBUG_
+static void
+bfd_vrrp_handler(const vector_t *strvec)
+{
+	vrrp_tracked_bfd_t *tbfd;
+	const char *name;
+	element e;
+
+	if (!strvec)
+		return;
+
+	name = strvec_slot(strvec, 1);
+
+	if (strlen(name) >= sizeof tbfd->bname) {
+		report_config_error(CONFIG_GENERAL_ERROR, "BFD name %s too long", name);
+		skip_block(true);
+		return;
+	}
+
+	LIST_FOREACH(vrrp_data->vrrp_track_bfds, tbfd, e) {
+		if (!strcmp(name, tbfd->bname)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "BFD %s already specified", name);
+			skip_block(true);
+			return;
+		}
+	}
+
+	PMALLOC(tbfd);
+	strcpy(tbfd->bname, name);
+	tbfd->weight = 0;
+	tbfd->weight_reverse = false;
+	tbfd->bfd_up = false;
+	list_add(vrrp_data->vrrp_track_bfds, tbfd);
+}
+#endif
+
+static void
+bfd_vrrp_weight_handler(const vector_t *strvec)
+{
+	vrrp_tracked_bfd_t *tbfd;
+	int value;
+
+	assert(strvec);
+	assert(vrrp_data);
+
+	tbfd = LIST_TAIL_DATA(vrrp_data->vrrp_track_bfds);
+	assert(tbfd);
+
+	if (!read_int_strvec(strvec, 1, &value, -253, 253, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: BFD instance %s"
+			    " weight value %s not valid (must be in range"
+			    " [%d-%d]), ignoring", tbfd->bname, strvec_slot(strvec, 1),
+			    -253, 253);
+	} else
+		tbfd->weight = value;
+
+	if (vector_size(strvec) >= 3) {
+		if (strcmp(strvec_slot(strvec, 2), "reverse"))
+			report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: BFD instance %s"
+				    " unknown weight option %s", tbfd->bname, strvec_slot(strvec, 2));
+		else
+			tbfd->weight_reverse = true;
+	}
+}
+
+static void
+bfd_event_vrrp_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	__set_bit(DAEMON_VRRP, &specified_event_processes);
+}
+#endif
+
+#ifdef _WITH_LVS_
+#ifndef _DEBUG_
+static void
+bfd_checker_handler(const vector_t *strvec)
+{
+	checker_tracked_bfd_t *tbfd;
+	char *name;
+	element e;
+
+	if (!strvec)
+		return;
+
+	name = vector_slot(strvec, 1);
+
+	LIST_FOREACH(check_data->track_bfds, tbfd, e) {
+		if (!strcmp(name, tbfd->bname)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "BFD %s already specified", name);
+			skip_block(true);
+			return;
+		}
+	}
+
+	PMALLOC(tbfd);
+	tbfd->bname = STRDUP(name);
+//	tbfd->weight = 0;
+
+	list_add(check_data->track_bfds, tbfd);
+}
+#endif
+
+static void
+bfd_event_checker_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	__set_bit(DAEMON_CHECKERS, &specified_event_processes);
+}
+#endif
+
+static void
+ignore_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	return;
+}
+
+static void
+install_keyword_conditional(const char *string, void (*handler) (const vector_t *), bool want_handler)
+{
+	install_keyword(string, want_handler ? handler : ignore_handler);
+}
+
+void
+init_bfd_keywords(bool active)
+{
+	bool bfd_handlers = false;
+
+	/* This will be called with active == false for parent and checker process,
+	 * for bfd, checker and vrrp process active will be true, but they are only interested
+	 * in different keywords. */
+#ifndef _DEBUG_
+	if (prog_type == PROG_TYPE_BFD || !active)
+#endif
+	{
+		install_keyword_root("bfd_instance", &bfd_handler, active);
+		install_sublevel_end_handler(bfd_end_handler);
+		bfd_handlers = true;
+	}
+#ifndef _DEBUG_
+#ifdef _WITH_VRRP_
+	else if (prog_type == PROG_TYPE_VRRP) {
+		install_keyword_root("bfd_instance", &bfd_vrrp_handler, active);
+		install_sublevel_end_handler(bfd_vrrp_end_handler);
+	}
+#endif
+#ifdef _WITH_LVS_
+	else if (prog_type == PROG_TYPE_CHECKER) {
+		install_keyword_root("bfd_instance", &bfd_checker_handler, active);
+		install_sublevel_end_handler(bfd_checker_end_handler);
+	}
+#endif
+#endif
+
+	install_keyword_conditional("source_ip", &bfd_srcip_handler, bfd_handlers);
+	install_keyword_conditional("neighbor_ip", &bfd_nbrip_handler, bfd_handlers);
+	install_keyword_conditional("neighbour_ip", &bfd_nbrip_handler, bfd_handlers);
+	install_keyword_conditional("min_rx", &bfd_minrx_handler, bfd_handlers);
+	install_keyword_conditional("min_tx", &bfd_mintx_handler, bfd_handlers);
+	install_keyword_conditional("idle_tx", &bfd_idletx_handler, bfd_handlers);
+	install_keyword_conditional("multiplier", &bfd_multiplier_handler, bfd_handlers);
+	install_keyword_conditional("passive", &bfd_passive_handler, bfd_handlers);
+	install_keyword_conditional("ttl", &bfd_ttl_handler, bfd_handlers);
+	install_keyword_conditional("hoplimit", &bfd_ttl_handler, bfd_handlers);
+	install_keyword_conditional("max_hops", &bfd_maxhops_handler, bfd_handlers);
+#ifdef _WITH_VRRP_
+	install_keyword_conditional("weight", &bfd_vrrp_weight_handler,
+#ifdef _DEBUG_
+									true
+#else
+									prog_type == PROG_TYPE_VRRP
+#endif
+												   );
+	install_keyword("vrrp", &bfd_event_vrrp_handler);
+#endif
+#ifdef _WITH_LVS_
+	install_keyword("checker", &bfd_event_checker_handler);
+#endif
+}
+
+const vector_t *
+bfd_init_keywords(void)
+{
+	/* global definitions mapping */
+	init_global_keywords(reload);
+
+	init_bfd_keywords(true);
+#ifdef _WITH_LVS_
+	init_check_keywords(false);
+#endif
+#ifdef _WITH_VRRP_
+	init_vrrp_keywords(false);
+#endif
+
+	return keywords;
+}
diff --git a/tools/keepalived/keepalived/bfd/bfd_scheduler.c b/tools/keepalived/keepalived/bfd/bfd_scheduler.c
new file mode 100644
index 000000000..d51d420fb
--- /dev/null
+++ b/tools/keepalived/keepalived/bfd/bfd_scheduler.c
@@ -0,0 +1,1249 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Scheduling framework for bfd code
+ *
+ * Author:      Ilya Voronin, <ivoronin@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include <sys/socket.h>
+#include <unistd.h>
+#include <netdb.h>
+#include <inttypes.h>
+#include <stdio.h>
+#include <fcntl.h>
+#include <stdlib.h>
+
+#include "bfd.h"
+#include "bfd_data.h"
+#include "bfd_scheduler.h"
+#include "bfd_event.h"
+#include "parser.h"
+#include "logger.h"
+#include "memory.h"
+#include "main.h"
+#include "bitops.h"
+#include "utils.h"
+#include "signals.h"
+#include "assert_debug.h"
+
+/* RFC5881 section 4 */
+#define	BFD_MIN_PORT	49152
+#define	BFD_MAX_PORT	65535
+
+static int bfd_send_packet(int, bfdpkt_t *, bool);
+static void bfd_sender_schedule(bfd_t *);
+
+static void bfd_state_down(bfd_t *, u_char diag);
+static void bfd_state_admindown(bfd_t *);
+static void bfd_state_up(bfd_t *);
+static void bfd_dump_timers(FILE *fp, bfd_t *);
+
+/*
+ * Session sender thread
+ *
+ * Runs every local_tx_intv, or after reception of a packet
+ * with Poll bit set
+ */
+
+inline static long
+thread_time_to_wakeup(thread_ref_t thread)
+{
+	struct timeval tmp_time;
+
+	timersub(&thread->sands, &time_now, &tmp_time);
+
+	return timer_long(tmp_time);
+}
+
+/* Sends one BFD control packet and reschedules itself if needed */
+static int
+bfd_sender_thread(thread_ref_t thread)
+{
+	bfd_t *bfd;
+	bfdpkt_t pkt;
+
+	assert(thread);
+	bfd = THREAD_ARG(thread);
+	assert(bfd);
+	assert(!BFD_ISADMINDOWN(bfd));
+
+	if (thread->type != THREAD_EVENT)
+		bfd->thread_out = NULL;
+
+	bfd_build_packet(&pkt, bfd, bfd_buffer, BFD_BUFFER_SIZE);
+	if (bfd_send_packet(bfd->fd_out, &pkt, !bfd->send_error) == -1) {
+		if (!bfd->send_error) {
+			log_message(LOG_ERR, "BFD_Instance(%s) Error sending packet", bfd->iname);
+			bfd->send_error = true;
+		}
+	} else
+		bfd->send_error = false;
+
+	/* Reset final flag if set */
+	bfd->final = 0;
+
+	/* Schedule next run if not called as an event thread */
+	if (thread->type != THREAD_EVENT)
+		bfd_sender_schedule(bfd);
+
+	return 0;
+}
+
+/* Schedules bfd_sender_thread to run in local_tx_intv minus applied jitter */
+static uint32_t
+get_jitter(bfd_t * bfd)
+{
+	uint32_t min_jitter;
+
+	/*
+	 * RFC5880:
+	 * The periodic transmission of BFD Control packets MUST be jittered
+	 * on a per-packet basis by up to 25%, that is, the interval MUST be
+	 * reduced by a random value of 0 to 25% <...>
+	 *
+	 * If bfd.DetectMult is equal to 1, the interval between transmitted
+	 * BFD Control packets MUST be no more than 90% of the negotiated
+	 * transmission interval, and MUST be no less than 75% of the
+	 * negotiated transmission interval.
+	 */
+	if (bfd->local_detect_mult)
+		min_jitter = bfd->local_tx_intv / 10;	/* 10% <=> / 10 */
+	else
+		min_jitter = 0;
+
+	return rand_intv(min_jitter, bfd->local_tx_intv / 4);	/* 25% <=> / 4 */
+}
+
+/* Schedules bfd_sender_thread to run in local_tx_intv minus applied jitter */
+static void
+bfd_sender_schedule(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(!bfd->thread_out);
+
+	bfd->thread_out =
+	    thread_add_timer(master, bfd_sender_thread, bfd,
+			     bfd->local_tx_intv - get_jitter(bfd));
+}
+
+/* Cancels bfd_sender_thread run */
+static void
+bfd_sender_cancel(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(bfd->thread_out);
+
+	thread_cancel(bfd->thread_out);
+	bfd->thread_out = NULL;
+}
+
+/* Reschedules bfd_sender_thread run (usually after local_tx_intv change) */
+static void
+bfd_sender_reschedule(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(bfd->thread_out);
+
+	timer_thread_update_timeout(bfd->thread_out, bfd->local_tx_intv - get_jitter(bfd));
+}
+
+/* Returns 1 if bfd_sender_thread is scheduled to run, 0 otherwise */
+static int __attribute__ ((pure))
+bfd_sender_scheduled(bfd_t *bfd)
+{
+	assert(bfd);
+
+	return bfd->thread_out != NULL;
+}
+
+/* Suspends sender thread. Needs freshly updated time_now */
+static void
+bfd_sender_suspend(bfd_t * bfd)
+{
+	assert(bfd);
+	assert(bfd->thread_out);
+	assert(bfd->sands_out == -1);
+
+	bfd->sands_out = thread_time_to_wakeup(bfd->thread_out);
+	bfd_sender_cancel(bfd);
+}
+
+/* Resumes sender thread */
+static void
+bfd_sender_resume(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(!bfd->thread_out);
+	assert(bfd->sands_out != -1);
+
+	if (!bfd->passive || bfd->local_state == BFD_STATE_UP)
+		bfd->thread_out =
+		    thread_add_timer(master, bfd_sender_thread, bfd, bfd->sands_out);
+	bfd->sands_out = -1;
+}
+
+/* Returns 1 if bfd_sender_thread is suspended, 0 otherwise */
+static int __attribute__ ((pure))
+bfd_sender_suspended(bfd_t *bfd)
+{
+	assert(bfd);
+
+	return bfd->sands_out != -1;
+}
+
+static void
+bfd_sender_discard(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(bfd->sands_out != -1);
+
+	bfd->sands_out = -1;
+}
+
+/*
+ * Session expiration thread
+ *
+ * Runs after local_detect_time has passed since receipt of last
+ * BFD control packet from neighbor
+ */
+
+/* Marks session as down because of Control Detection Time Expiration */
+static int
+bfd_expire_thread(thread_ref_t thread)
+{
+	bfd_t *bfd;
+	uint32_t dead_time, overdue_time;
+	timeval_t dead_time_tv;
+
+	assert(thread);
+
+	bfd = THREAD_ARG(thread);
+	assert(bfd);
+
+	/* Session cannot expire while not in Up or Init states */
+	assert(BFD_ISUP(bfd) || BFD_ISINIT(bfd));
+
+	bfd->thread_exp = NULL;
+
+	/* Time since last received control packet */
+	timersub(&time_now, &bfd->last_seen, &dead_time_tv);
+	dead_time = timer_long(dead_time_tv);
+
+	/* Difference between expected and actual failure detection time */
+	overdue_time = dead_time - bfd->local_detect_time;
+
+	if (bfd->local_state == BFD_STATE_UP ||
+	    __test_bit(LOG_EXTRA_DETAIL_BIT, &debug))
+		log_message(LOG_WARNING, "BFD_Instance(%s) Expired after"
+			    " %" PRIu32 " ms (%" PRIu32 " usec overdue)",
+			    bfd->iname, dead_time / 1000, overdue_time);
+
+	/*
+	 * RFC5880:
+	 * <...> If a period of a Detection Time passes without the
+	 * receipt of a valid, authenticated BFD packet from the remote
+	 * system, this <bfd.RemoteDiscr> variable MUST be set to zero.
+	 */
+	bfd->remote_discr = 0;
+	bfd_state_down(bfd, BFD_DIAG_EXPIRED);
+
+	return 0;
+}
+
+/* Schedules bfd_expire_thread to run in local_detect_time */
+static void
+bfd_expire_schedule(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(!bfd->thread_exp);
+
+	bfd->thread_exp =
+	    thread_add_timer(master, bfd_expire_thread, bfd,
+			     bfd->local_detect_time);
+}
+
+/* Cancels bfd_expire_thread run */
+static void
+bfd_expire_cancel(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(bfd->thread_exp);
+
+	thread_cancel(bfd->thread_exp);
+	bfd->thread_exp = NULL;
+}
+
+/* Reschedules bfd_expire_thread run (usually after control packet receipt) */
+static void
+bfd_expire_reschedule(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(bfd->thread_exp);
+
+	timer_thread_update_timeout(bfd->thread_exp, bfd->local_detect_time);
+}
+
+/* Returns 1 if bfd_expire_thread is scheduled to run, 0 otherwise */
+static int __attribute__ ((pure))
+bfd_expire_scheduled(bfd_t *bfd)
+{
+	assert(bfd);
+
+	return bfd->thread_exp != NULL;
+}
+
+/* Suspends expire thread. Needs freshly updated time_now */
+static void
+bfd_expire_suspend(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(bfd->thread_exp);
+	assert(bfd->sands_exp == -1);
+
+	bfd->sands_exp = thread_time_to_wakeup(bfd->thread_exp);
+	bfd_expire_cancel(bfd);
+}
+
+/* Resumes expire thread */
+static void
+bfd_expire_resume(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(!bfd->thread_exp);
+	assert(bfd->sands_exp != -1);
+
+	bfd->thread_exp =
+	    thread_add_timer(master, bfd_expire_thread, bfd, bfd->sands_exp);
+	bfd->sands_exp = -1;
+}
+
+/* Returns 1 if bfd_expire_thread is suspended, 0 otherwise */
+static int __attribute__ ((pure))
+bfd_expire_suspended(bfd_t *bfd)
+{
+	assert(bfd);
+
+	return bfd->sands_exp != -1;
+}
+
+static void
+bfd_expire_discard(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(bfd->sands_exp != -1);
+
+	bfd->sands_exp = -1;
+}
+
+/*
+ * Session reset thread
+ *
+ * Runs after local_detect_time has passed after BFD session
+ * gone to Down state.
+ */
+
+/* Resets BFD session to initial state */
+static int
+bfd_reset_thread(thread_ref_t thread)
+{
+	bfd_t *bfd;
+
+	assert(thread);
+
+	bfd = THREAD_ARG(thread);
+	assert(bfd);
+	assert(bfd->thread_rst);
+
+	bfd->thread_rst = NULL;
+
+	bfd_reset_state(bfd);
+
+	return 0;
+}
+
+/* Schedules bfd_reset_thread to run in local_detect_time */
+static void
+bfd_reset_schedule(bfd_t * bfd)
+{
+	assert(bfd);
+	assert(!bfd->thread_rst);
+
+	bfd->thread_rst =
+	    thread_add_timer(master, bfd_reset_thread, bfd,
+			     bfd->local_detect_time);
+}
+
+/* Cancels bfd_reset_thread run */
+static void
+bfd_reset_cancel(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(bfd->thread_rst);
+
+	thread_cancel(bfd->thread_rst);
+	bfd->thread_rst = NULL;
+}
+
+/* Returns 1 if bfd_reset_thread is scheduled to run, 0 otherwise */
+static int __attribute__ ((pure))
+bfd_reset_scheduled(bfd_t *bfd)
+{
+	assert(bfd);
+
+	return bfd->thread_rst != NULL;
+}
+
+/* Suspends reset thread. Needs freshly updated time_now */
+static void
+bfd_reset_suspend(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(bfd->thread_rst);
+	assert(bfd->sands_rst == -1);
+
+	bfd->sands_rst = thread_time_to_wakeup(bfd->thread_rst);
+	bfd_reset_cancel(bfd);
+}
+
+/* Resumes reset thread */
+static void
+bfd_reset_resume(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(!bfd->thread_rst);
+	assert(bfd->sands_rst != -1);
+
+	bfd->thread_rst =
+	    thread_add_timer(master, bfd_reset_thread, bfd, bfd->sands_rst);
+	bfd->sands_rst = -1;
+}
+
+/* Returns 1 if bfd_reset_thread is suspended, 0 otherwise */
+static int __attribute__ ((pure))
+bfd_reset_suspended(bfd_t *bfd)
+{
+	assert(bfd);
+
+	return bfd->sands_rst != -1;
+}
+
+static void
+bfd_reset_discard(bfd_t *bfd)
+{
+	assert(bfd);
+	assert(bfd->sands_rst != -1);
+
+	bfd->sands_rst = -1;
+}
+
+/*
+ * State change handlers
+ */
+/* Common actions for Down and AdminDown states */
+static void
+bfd_state_fall(bfd_t *bfd, bool send_event)
+{
+	assert(bfd);
+
+	/*
+	 * RFC5880:
+	 * When bfd.SessionState is not Up, the system MUST set
+	 * bfd.DesiredMinTxInterval to a value of not less than
+	 * one second (1,000,000 microseconds)
+	 */
+	bfd_idle_local_tx_intv(bfd);
+
+	if (bfd_expire_scheduled(bfd))
+		bfd_expire_cancel(bfd);
+
+	if (send_event &&
+	    bfd->remote_state != BFD_STATE_ADMINDOWN)
+		bfd_event_send(bfd);
+}
+
+/* Runs when BFD session state goes Down */
+static void
+bfd_state_down(bfd_t *bfd, u_char diag)
+{
+	assert(bfd);
+	assert(BFD_VALID_DIAG(diag));
+	int old_state = bfd->local_state;
+
+	if (bfd->local_state == BFD_STATE_UP)
+		bfd->local_discr = bfd_get_random_discr(bfd_data);
+
+	if (bfd->local_state == BFD_STATE_UP ||
+	    __test_bit(LOG_EXTRA_DETAIL_BIT, &debug))
+		log_message(LOG_WARNING, "BFD_Instance(%s) Entering %s state"
+			    " (Local diagnostic - %s, Remote diagnostic - %s)",
+			    bfd->iname, BFD_STATE_STR(BFD_STATE_DOWN),
+			    BFD_DIAG_STR(diag),
+			    BFD_DIAG_STR(bfd->remote_diag));
+
+	bfd->local_state = BFD_STATE_DOWN;
+	bfd->local_diag = diag;
+
+	bfd_reset_schedule(bfd);
+
+	if (bfd->passive && bfd_sender_scheduled(bfd))
+		bfd_sender_cancel(bfd);
+
+	bfd_state_fall(bfd, old_state == BFD_STATE_UP);
+}
+
+/* Runs when BFD session state goes AdminDown */
+static void
+bfd_state_admindown(bfd_t *bfd)
+{
+	assert(bfd);
+
+	bfd->local_state = BFD_STATE_ADMINDOWN;
+	bfd->local_diag = BFD_DIAG_ADMIN_DOWN;
+
+	if (bfd_sender_scheduled(bfd))
+		bfd_sender_cancel(bfd);
+
+	log_message(LOG_WARNING, "BFD_Instance(%s) Entering %s state",
+		    bfd->iname, BFD_STATE_STR(bfd->local_state));
+
+	bfd_state_fall(bfd, false);
+}
+
+/* Common actions for Init and Up states */
+static void
+bfd_state_rise(bfd_t *bfd)
+{
+	/* RFC5880 doesn't state if this must be done or not */
+	bfd->local_diag = BFD_DIAG_NO_DIAG;
+
+	if (bfd->local_state == BFD_STATE_UP ||
+	    __test_bit(LOG_EXTRA_DETAIL_BIT, &debug))
+		log_message(LOG_INFO, "BFD_Instance(%s) Entering %s state",
+			    bfd->iname, BFD_STATE_STR(bfd->local_state));
+
+	if (bfd_reset_scheduled(bfd))
+		bfd_reset_cancel(bfd);
+
+	if (!bfd_expire_scheduled(bfd))
+		bfd_expire_schedule(bfd);
+}
+
+/* Runs when BFD session state goes Up */
+static void
+bfd_state_up(bfd_t *bfd)
+{
+	assert(bfd);
+
+	bfd->local_state = BFD_STATE_UP;
+	bfd_state_rise(bfd);
+
+	if (bfd->local_idle_tx_intv != bfd->local_min_tx_intv)
+		bfd_set_poll(bfd);
+
+	bfd_event_send(bfd);
+}
+
+/* Runs when BFD session state goes Init */
+static void
+bfd_state_init(bfd_t *bfd)
+{
+	assert(bfd);
+
+	/* According to RFC5880 session cannot directly
+	   transition from Init to Up state */
+	assert(!BFD_ISUP(bfd));
+
+	bfd->local_state = BFD_STATE_INIT;
+	bfd_state_rise(bfd);
+
+	if (bfd->passive && !bfd_sender_scheduled(bfd))
+		bfd_sender_schedule(bfd);
+}
+
+/* Dumps current timers values */
+static void
+bfd_dump_timers(FILE *fp, bfd_t *bfd)
+{
+	assert(bfd);
+
+	conf_write(fp, "BFD_Instance(%s)"
+		    " --------------< Session parameters >-------------",
+		    bfd->iname);
+	conf_write(fp, "BFD_Instance(%s)"
+		    "        min_tx  min_rx  tx_intv  mult  detect_time",
+		    bfd->iname);
+	conf_write(fp, "BFD_Instance(%s)"
+		    " local %7u %7u %8u %5u %12" PRIu64,
+		    bfd->iname, (bfd->local_state == BFD_STATE_UP ? bfd->local_min_tx_intv : bfd->local_idle_tx_intv) / 1000,
+		    bfd->local_min_rx_intv / 1000,
+		    bfd->local_tx_intv / 1000, bfd->local_detect_mult,
+		    bfd->local_detect_time / 1000);
+	conf_write(fp, "BFD_Instance(%s)" " remote %6u %7u %8u %5u %12" PRIu64,
+		    bfd->iname, bfd->remote_min_tx_intv / 1000,
+		    bfd->remote_min_rx_intv / 1000,
+		    bfd->remote_tx_intv / 1000, bfd->remote_detect_mult,
+		    bfd->remote_detect_time / 1000);
+}
+
+/*
+ * Packet handling functions
+ */
+
+/* Sends a control packet to the neighbor (called from bfd_sender_thread)
+   returns -1 on error */
+static int
+bfd_send_packet(int fd, bfdpkt_t *pkt, bool log_error)
+{
+	int ret;
+	socklen_t dstlen;
+
+	assert(fd >= 0);
+	assert(pkt);
+
+	if (pkt->dst_addr.ss_family == AF_INET)
+		dstlen = sizeof (struct sockaddr_in);
+	else
+		dstlen = sizeof (struct sockaddr_in6);
+
+	ret =
+	    sendto(fd, pkt->buf, pkt->len, 0,
+		   (struct sockaddr *) &pkt->dst_addr, dstlen);
+	if (ret == -1 && log_error)
+		log_message(LOG_ERR, "sendto() error (%m)");
+
+	return ret;
+}
+
+/* Handles incoming control packet (called from bfd_receiver_thread) and
+   processes it through a BFD state machine. */
+static void
+bfd_handle_packet(bfdpkt_t *pkt)
+{
+	uint32_t old_local_tx_intv;
+	uint32_t old_remote_rx_intv;
+	uint32_t old_remote_tx_intv;
+	uint8_t old_remote_detect_mult;
+	uint64_t old_local_detect_time;
+	bfd_t *bfd;
+
+	assert(pkt);
+	assert(pkt->hdr);
+
+	/* Perform sanity checks on a packet */
+	if (bfd_check_packet(pkt)) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR,
+				    "Discarding bogus packet from %s",
+				    inet_sockaddrtopair(&pkt->src_addr));
+
+		return;
+	}
+
+	/* Lookup session */
+	if (!pkt->hdr->remote_discr)
+		bfd = find_bfd_by_addr(&pkt->src_addr, &pkt->dst_addr);
+	else
+		bfd = find_bfd_by_discr(ntohl(pkt->hdr->remote_discr));
+
+	if (!bfd) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR, "Discarding packet from %s"
+				    " (session is not found - your"
+				    " discriminator field is %u)",
+				    inet_sockaddrtopair(&pkt->src_addr),
+				    pkt->hdr->remote_discr);
+
+		return;
+	}
+
+	/* We can't check the TTL any earlier, since we need to know what
+	 * is configured for this particular instance */
+	if (bfd->max_hops != UCHAR_MAX && bfd_check_packet_ttl(pkt, bfd))
+		return;
+
+	/* Authentication is not supported for now */
+	if (pkt->hdr->auth != 0) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_ERR, "Discarding packet from %s"
+				    " (auth bit is set, but no authentication"
+				    "  is in use)",
+				    inet_sockaddrtopair(&pkt->src_addr));
+
+		return;
+	}
+
+	/* Discard all packets while in AdminDown state */
+	if (bfd->local_state == BFD_STATE_ADMINDOWN) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_INFO, "Discarding packet from %s"
+				    " (session is in AdminDown state)",
+				    inet_sockaddrtopair(&pkt->src_addr));
+
+		return;
+	}
+
+	/* Save old timers */
+	old_remote_rx_intv = bfd->remote_min_rx_intv;
+	old_remote_tx_intv = bfd->remote_min_tx_intv;
+	old_remote_detect_mult = bfd->remote_detect_mult;
+	old_local_detect_time = bfd->local_detect_time ;
+	old_local_tx_intv = bfd->local_tx_intv ;
+
+	/* Update state variables */
+	bfd->remote_discr = ntohl(pkt->hdr->local_discr);
+	bfd->remote_state = pkt->hdr->state;
+	bfd->remote_diag = pkt->hdr->diag;
+	bfd->remote_min_rx_intv = ntohl(pkt->hdr->min_rx_intv);
+	bfd->remote_min_tx_intv = ntohl(pkt->hdr->min_tx_intv);
+	bfd->remote_demand = pkt->hdr->demand;
+	bfd->remote_detect_mult = pkt->hdr->detect_mult;
+
+	/* Terminate poll sequence */
+	if (pkt->hdr->final)
+		bfd->poll = 0;
+
+	/*
+	 * Recalculate local and remote TX intervals if:
+	 *  Control packet with 'Final' bit is received OR
+	 *  Control packet with 'Poll' bit is received OR
+	 *  Session is not UP
+	 */
+	if ((bfd->local_state == BFD_STATE_UP &&
+	     (pkt->hdr->poll || pkt->hdr->final)) ||
+	    bfd->local_state != BFD_STATE_UP) {
+		if (bfd->remote_state == BFD_STATE_UP &&
+		    (bfd->local_state == BFD_STATE_INIT || bfd->local_state == BFD_STATE_UP))
+			bfd_update_local_tx_intv(bfd);
+		else
+			bfd_idle_local_tx_intv(bfd);
+		bfd_update_remote_tx_intv(bfd);
+	}
+
+	/* Update the Detection Time */
+	bfd->local_detect_time = bfd->remote_detect_mult * bfd->remote_tx_intv;
+	bfd->remote_detect_time = bfd->local_detect_mult * bfd->local_tx_intv;
+
+	/* Check if timers are changed */
+	if (__test_bit(LOG_EXTRA_DETAIL_BIT, &debug) ||
+	    (__test_bit(LOG_DETAIL_BIT, &debug) &&
+	     (bfd->remote_min_rx_intv != old_remote_rx_intv ||
+	      bfd->remote_min_tx_intv != old_remote_tx_intv ||
+	      bfd->remote_detect_mult != old_remote_detect_mult ||
+	      bfd->local_tx_intv != old_local_tx_intv)))
+		bfd_dump_timers(NULL, bfd);
+
+	/* Reschedule sender if local_tx_intv is being reduced */
+	if (bfd->local_tx_intv < old_local_tx_intv &&
+	    bfd_sender_scheduled(bfd))
+		bfd_sender_reschedule(bfd);
+
+	/* Report detection time changes */
+	if (bfd->local_detect_time != old_local_detect_time)
+		log_message(LOG_INFO, "BFD_Instance(%s) Detection time"
+			    " is %" PRIu64 " ms (was %" PRIu64 " ms)", bfd->iname,
+			    bfd->local_detect_time / 1000,
+			    old_local_detect_time / 1000);
+
+	/* BFD state machine */
+	if (bfd->remote_state == BFD_STATE_ADMINDOWN &&
+	    bfd->local_state != BFD_STATE_DOWN)
+		bfd_state_down(bfd, BFD_DIAG_NBR_SIGNALLED_DOWN);
+	else {
+		if (bfd->local_state == BFD_STATE_DOWN) {
+			if (bfd->remote_state == BFD_STATE_DOWN)
+				bfd_state_init(bfd);
+			else if (bfd->remote_state == BFD_STATE_INIT)
+				bfd_state_up(bfd);
+		} else if (bfd->local_state == BFD_STATE_INIT) {
+			if (bfd->remote_state == BFD_STATE_INIT ||
+			    bfd->remote_state == BFD_STATE_UP)
+				bfd_state_up(bfd);
+		} else if (bfd->local_state == BFD_STATE_UP)
+			if (bfd->remote_state == BFD_STATE_DOWN)
+				bfd_state_down(bfd, BFD_DIAG_NBR_SIGNALLED_DOWN);
+	}
+
+	if (bfd->remote_demand &&
+	    bfd->local_state == BFD_STATE_UP &&
+	    bfd->remote_state == BFD_STATE_UP)
+		if (bfd_sender_scheduled(bfd))
+			bfd_sender_cancel(bfd);
+
+	if (!bfd->remote_demand ||
+	    bfd->local_state != BFD_STATE_UP ||
+	    bfd->remote_state != BFD_STATE_UP)
+		if (!bfd_sender_scheduled(bfd))
+			bfd_sender_schedule(bfd);
+
+	if (pkt->hdr->poll) {
+		bfd->final = 1;
+		thread_add_event(master, bfd_sender_thread, bfd, 0);
+	}
+
+	/* Update last seen timer */
+	bfd->last_seen = timer_now();
+
+	/* Delay expiration if scheduled */
+	if (bfd->local_state == BFD_STATE_UP &&
+	    bfd_expire_scheduled(bfd))
+		bfd_expire_reschedule(bfd);
+}
+
+/* Reads one packet from input socket */
+static int
+bfd_receive_packet(bfdpkt_t *pkt, int fd, char *buf, ssize_t bufsz)
+{
+	ssize_t len;
+	unsigned int ttl = 0;
+	struct msghdr msg;
+	struct cmsghdr *cmsg = NULL;
+	char cbuf[CMSG_SPACE(sizeof (struct in6_pktinfo)) + CMSG_SPACE(sizeof(ttl))];
+	struct iovec iov[1];
+	struct in6_pktinfo *pktinfo;
+
+	assert(pkt);
+	assert(fd >= 0);
+	assert(buf);
+	assert(bufsz);
+
+	iov[0].iov_base = buf;
+	iov[0].iov_len = bufsz;
+
+	msg.msg_name = &pkt->src_addr;
+	msg.msg_namelen = sizeof (pkt->src_addr);
+	msg.msg_iov = iov;
+	msg.msg_iovlen = 1;
+	msg.msg_control = cbuf;
+	msg.msg_controllen = sizeof (cbuf);
+	msg.msg_flags = 0;	/* Unnecessary, but keep coverity happy */
+
+	len = recvmsg(fd, &msg, MSG_DONTWAIT);
+	if (len == -1) {
+		log_message(LOG_ERR, "recvmsg() error (%m)");
+		return 1;
+	}
+
+	if (msg.msg_flags & MSG_TRUNC) {
+		log_message(LOG_WARNING, "recvmsg() message truncated");
+		return 1;
+	}
+
+	if (msg.msg_flags & MSG_CTRUNC)
+		log_message(LOG_WARNING, "recvmsg() control message truncated");
+
+	for (cmsg = CMSG_FIRSTHDR(&msg); cmsg != NULL;
+	     cmsg = CMSG_NXTHDR(&msg, cmsg)) {
+		if ((cmsg->cmsg_level == IPPROTO_IP && cmsg->cmsg_type == IP_TTL) ||
+		    (cmsg->cmsg_level == IPPROTO_IPV6 && cmsg->cmsg_type == IPV6_HOPLIMIT))
+			ttl = *CMSG_DATA(cmsg);
+		else if (cmsg->cmsg_level == IPPROTO_IPV6 && cmsg->cmsg_type == IPV6_PKTINFO) {
+			pktinfo = (struct in6_pktinfo *)CMSG_DATA(cmsg);
+			if (IN6_IS_ADDR_V4MAPPED(&pktinfo->ipi6_addr)) {
+				((struct sockaddr_in *)&pkt->dst_addr)->sin_addr.s_addr = pktinfo->ipi6_addr.s6_addr32[3];
+				pkt->dst_addr.ss_family = AF_INET;
+			} else {
+				memcpy(&((struct sockaddr_in6 *)&pkt->dst_addr)->sin6_addr, &pktinfo->ipi6_addr, sizeof(pktinfo->ipi6_addr));
+				pkt->dst_addr.ss_family = AF_INET6;
+			}
+		}
+		else
+			log_message(LOG_WARNING, "recvmsg() received"
+				    " unexpected control message (level %d type %d)",
+				    cmsg->cmsg_level, cmsg->cmsg_type);
+	}
+
+	if (!ttl)
+		log_message(LOG_WARNING, "recvmsg() returned no TTL control message");
+
+	pkt->hdr = (bfdhdr_t *) buf;
+	pkt->len = len;
+	pkt->ttl = ttl;
+
+	/* Convert an IPv4-mapped IPv6 address to a real IPv4 address */
+	if (IN6_IS_ADDR_V4MAPPED(&((struct sockaddr_in6 *)&pkt->src_addr)->sin6_addr)) {
+		((struct sockaddr_in *)&pkt->src_addr)->sin_addr.s_addr = ((struct sockaddr_in6 *)&pkt->src_addr)->sin6_addr.s6_addr32[3];
+		pkt->src_addr.ss_family = AF_INET;
+	}
+
+	return 0;
+}
+
+/*
+ * Reciever thread
+ */
+
+/* Runs when data is available in listening socket */
+static int
+bfd_receiver_thread(thread_ref_t thread)
+{
+	bfd_data_t *data;
+	bfdpkt_t pkt;
+	int fd;
+
+	assert(thread);
+
+	data = THREAD_ARG(thread);
+	assert(data);
+
+	fd = thread->u.f.fd;
+	assert(fd >= 0);
+
+	data->thread_in = NULL;
+
+	/* Ignore THREAD_READ_TIMEOUT */
+	if (thread->type == THREAD_READY_READ_FD) {
+		if (!bfd_receive_packet(&pkt, fd, bfd_buffer, BFD_BUFFER_SIZE))
+			bfd_handle_packet(&pkt);
+	}
+
+	data->thread_in =
+	    thread_add_read(thread->master, bfd_receiver_thread, data,
+			    fd, TIMER_NEVER, false);
+
+	return 0;
+}
+
+/*
+ * Initialization functions
+ */
+
+/* Prepares UDP socket for listening on *:3784 (both IPv4 and IPv6) */
+static int
+bfd_open_fd_in(bfd_data_t *data)
+{
+	struct addrinfo hints;
+	struct addrinfo *ai_in;
+	int ret;
+	int yes = 1;
+
+	assert(data);
+	assert(data->fd_in == -1);
+
+	memset(&hints, 0, sizeof hints);
+	hints.ai_family = AF_INET6;
+	hints.ai_flags = AI_NUMERICSERV | AI_PASSIVE;
+	hints.ai_protocol = IPPROTO_UDP;
+	hints.ai_socktype = SOCK_DGRAM;
+
+	if ((ret = getaddrinfo(NULL, BFD_CONTROL_PORT, &hints, &ai_in)))
+		log_message(LOG_ERR, "getaddrinfo() error %d (%s)", ret, gai_strerror(ret));
+	else if ((data->fd_in = socket(AF_INET6, ai_in->ai_socktype, ai_in->ai_protocol)) == -1)
+		log_message(LOG_ERR, "socket() error %d (%m)", errno);
+	else if ((ret = setsockopt(data->fd_in, IPPROTO_IP, IP_RECVTTL, &yes, sizeof (yes))) == -1)
+		log_message(LOG_ERR, "setsockopt(IP_RECVTTL) error %d (%m)", errno);
+	else if ((ret = setsockopt(data->fd_in, IPPROTO_IPV6, IPV6_RECVHOPLIMIT, &yes, sizeof (yes))) == -1)
+		log_message(LOG_ERR, "setsockopt(IPV6_RECVHOPLIMIT) error %d (%m)", errno);
+	else if ((ret = setsockopt(data->fd_in, IPPROTO_IPV6, IPV6_RECVPKTINFO, &yes, sizeof (yes))) == -1)
+		log_message(LOG_ERR, "setsockopt(IPV6_RECVPKTINFO) error %d (%m)", errno);
+	else if ((ret = bind(data->fd_in, ai_in->ai_addr, ai_in->ai_addrlen)) == -1)
+		log_message(LOG_ERR, "bind() error %d (%m)", errno);
+
+	if (ret)
+		ret = 1;
+
+	freeaddrinfo(ai_in);
+	return ret;
+}
+
+static bool
+read_local_port_range(uint32_t port_limits[2])
+{
+	char buf[5 + 1 + 5 + 1 + 1];	/* 32768<TAB>60999<NL> */
+	int fd;
+	ssize_t len;
+	long val[2];
+	char *endptr;
+
+	/* Default to sensible values */
+	port_limits[0] = 49152;
+	port_limits[1] = 60999;
+
+	fd = open("/proc/sys/net/ipv4/ip_local_port_range", O_RDONLY);
+	if (fd == -1)
+		return false;
+	len = read(fd, buf, sizeof(buf));
+	close(fd);
+
+	if (len == -1 || len == sizeof(buf))
+		return false;
+
+	buf[len] = '\0';
+
+	val[0] = strtol(buf, &endptr, 10);
+	if (val[0] <= 0 || val[0] == LONG_MAX || (*endptr != '\t' && *endptr != ' '))
+		return false;
+	val[1] = strtol(buf, &endptr, 10);
+	if (val[1] <= 0 || val[0] == LONG_MAX || *endptr != '\n')
+		return false;
+
+	port_limits[0] = val[0];
+	port_limits[1] = val[1];
+
+	return true;
+}
+
+/* Prepares UDP socket for sending data to neighbor */
+static int
+bfd_open_fd_out(bfd_t *bfd)
+{
+	int ttl;
+	int ret;
+	uint32_t port_limits[2];
+	uint16_t orig_port, port;
+
+	assert(bfd);
+	assert(bfd->fd_out == -1);
+
+	bfd->fd_out = socket(bfd->nbr_addr.ss_family, SOCK_DGRAM, IPPROTO_UDP);
+	if (bfd->fd_out == -1) {
+		log_message(LOG_ERR, "BFD_Instance(%s) socket() error (%m)",
+			    bfd->iname);
+		return 1;
+	}
+
+	if (bfd->src_addr.ss_family) {
+		/* Generate a random port number within the valid range */
+		read_local_port_range(port_limits);
+		if (port_limits[0] < BFD_MIN_PORT)
+			port_limits[0] = BFD_MIN_PORT;
+		if (port_limits[1] > BFD_MAX_PORT)
+			port_limits[1] = BFD_MAX_PORT;
+
+		/* Ensure we have a range of at least 1024 ports (an arbitrary number)
+		 * to try. */
+		if (port_limits[0] + 1023 > port_limits[1]) {
+			/* Just use the BFD defaults */
+			port_limits[0] = BFD_MIN_PORT;
+			port_limits[1] = BFD_MAX_PORT;
+		}
+
+		orig_port = port = rand_intv(port_limits[0], port_limits[1]);
+		do {
+			/* Try binding socket to the address until we find one available */
+			if (bfd->src_addr.ss_family == AF_INET)
+				((struct sockaddr_in *)&bfd->src_addr)->sin_port = htons(port);
+			else
+				((struct sockaddr_in6 *)&bfd->src_addr)->sin6_port = htons(port);
+
+			ret = bind(bfd->fd_out, (struct sockaddr *) &bfd->src_addr,
+				   sizeof (struct sockaddr));
+
+			if (ret == -1 && errno == EADDRINUSE) {
+				/* Port already in use, try next */
+				if (++port > port_limits[1])
+					port = port_limits[0];
+				if (port == orig_port)
+					break;
+				continue;
+			}
+
+			break;
+		} while (true);
+
+		if (ret == -1) {
+			log_message(LOG_ERR,
+				    "BFD_Instance(%s) bind() error (%m)",
+				    bfd->iname);
+			return 1;
+		}
+	} else {
+		/* We have a problem here - we do not have a source address, and so
+		 * cannot bind the socket. That means that we will get a system allocated
+		 * port, which may be outside the range [49152, 65535], as specified in
+		 * RFC5881. */
+	}
+
+	ttl = bfd->ttl;
+	if (bfd->nbr_addr.ss_family == AF_INET)
+		ret = setsockopt(bfd->fd_out, IPPROTO_IP, IP_TTL, &ttl, sizeof (ttl));
+	else
+		ret = setsockopt(bfd->fd_out, IPPROTO_IPV6, IPV6_UNICAST_HOPS, &ttl, sizeof (ttl));
+
+	if (ret == -1) {
+		log_message(LOG_ERR, "BFD_Instance(%s) setsockopt() "
+			    " error (%m)", bfd->iname);
+		return 1;
+	}
+
+	return 0;
+}
+
+/* Opens all needed sockets */
+static int
+bfd_open_fds(bfd_data_t *data)
+{
+	bfd_t *bfd;
+	element e;
+
+	assert(data);
+	assert(data->bfd);
+
+	/* Do not reopen input socket on reload */
+	if (bfd_data->fd_in == -1) {
+		if (bfd_open_fd_in(data)) {
+			log_message(LOG_ERR, "Unable to open listening socket");
+
+			/* There is no point to stay alive w/o listening socket */
+			return 1;
+		}
+	}
+
+	for (e = LIST_HEAD(data->bfd); e; ELEMENT_NEXT(e)) {
+		bfd = ELEMENT_DATA(e);
+		assert(bfd);
+
+		if (bfd_open_fd_out(bfd)) {
+			log_message(LOG_ERR, "BFD_Instance(%s) Unable to"
+				    " open output socket, disabling instance",
+				    bfd->iname);
+			bfd_state_admindown(bfd);
+		}
+	}
+
+	return 0;
+}
+
+/* Registers sender and receiver threads */
+static void
+bfd_register_workers(bfd_data_t *data)
+{
+	bfd_t *bfd;
+	element e;
+
+	assert(data);
+	assert(!data->thread_in);
+
+	/* Set timeout to not expire */
+	data->thread_in = thread_add_read(master, bfd_receiver_thread,
+					  data, data->fd_in, TIMER_NEVER, false);
+
+	/* Resume or schedule threads */
+	for (e = LIST_HEAD(data->bfd); e; ELEMENT_NEXT(e)) {
+		bfd = ELEMENT_DATA(e);
+
+		/* Do not start anything if instance is in AdminDown state.
+		   Discard saved state if any */
+		if (bfd_sender_suspended(bfd)) {
+			if (BFD_ISADMINDOWN(bfd))
+				bfd_sender_discard(bfd);
+			else
+				bfd_sender_resume(bfd);
+		} else if (!BFD_ISADMINDOWN(bfd) && !bfd->passive)
+			bfd_sender_schedule(bfd);
+
+		if (bfd_expire_suspended(bfd)) {
+			if (BFD_ISADMINDOWN(bfd))
+				bfd_expire_discard(bfd);
+			else
+				bfd_expire_resume(bfd);
+		}
+
+		if (bfd_reset_suspended(bfd)) {
+			if (BFD_ISADMINDOWN(bfd))
+				bfd_reset_discard(bfd);
+			else
+				bfd_reset_resume(bfd);
+		}
+
+		/* Send our status to VRRP process */
+		bfd_event_send(bfd);
+
+		/* If we are starting up, send a packet */
+		if (!reload && !bfd->passive)
+			thread_add_event(master, bfd_sender_thread, bfd, 0);
+	}
+}
+
+/* Suspends threads, closes sockets */
+void
+bfd_dispatcher_release(bfd_data_t *data)
+{
+	bfd_t *bfd;
+	element e;
+
+	assert(data);
+
+	/* Looks like dispatcher wasn't initialized yet
+	   This can happen is case of a configuration error */
+	if (!data->thread_in)
+		return;
+
+	assert(data->fd_in != -1);
+
+	thread_cancel(data->thread_in);
+	data->thread_in = NULL;
+
+	/* Do not close fd_in on reload */
+	if (!reload) {
+		close(data->fd_in);
+		data->fd_in = -1;
+	}
+
+	/* Suspend threads for possible resuming after reconfiguration */
+	set_time_now();
+	for (e = LIST_HEAD(data->bfd); e; ELEMENT_NEXT(e)) {
+		bfd = ELEMENT_DATA(e);
+
+		if (bfd_sender_scheduled(bfd))
+			bfd_sender_suspend(bfd);
+
+		if (bfd_expire_scheduled(bfd))
+			bfd_expire_suspend(bfd);
+
+		if (bfd_reset_scheduled(bfd))
+			bfd_reset_suspend(bfd);
+
+		assert(bfd->fd_out != -1);
+
+		close(bfd->fd_out);
+		bfd->fd_out = -1;
+	}
+
+	cancel_signal_read_thread();
+}
+
+/* Starts BFD dispatcher */
+int
+bfd_dispatcher_init(thread_ref_t thread)
+{
+	bfd_data_t *data;
+
+	assert(thread);
+
+	data = THREAD_ARG(thread);
+	if (bfd_open_fds(data))
+		exit(EXIT_FAILURE);
+
+	bfd_register_workers(data);
+
+	return 0;
+}
+
+
+#ifdef THREAD_DUMP
+void
+register_bfd_scheduler_addresses(void)
+{
+	register_thread_address("bfd_sender_thread", bfd_sender_thread);
+	register_thread_address("bfd_expire_thread", bfd_expire_thread);
+	register_thread_address("bfd_reset_thread", bfd_reset_thread);
+	register_thread_address("bfd_receiver_thread", bfd_receiver_thread);
+}
+#endif
diff --git a/tools/keepalived/keepalived/check/Makefile.am b/tools/keepalived/keepalived/check/Makefile.am
new file mode 100644
index 000000000..27d1ed314
--- /dev/null
+++ b/tools/keepalived/keepalived/check/Makefile.am
@@ -0,0 +1,36 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2018 Alexandre Cassen, <acassen@gmail.com>
+
+AM_CPPFLAGS		= $(KA_CPPFLAGS) $(DEBUG_CPPFLAGS)
+AM_CFLAGS		= $(KA_CFLAGS) $(DEBUG_CFLAGS)
+AM_LDFLAGS		= $(KA_LDFLAGS) $(DEBUG_LDFLAGS)
+# AM_LIBS		= $(KA_LIBS)
+# AM_LIBTOOLFLAGS	= $(KA_LIBTOOLFLAGS)
+
+noinst_LIBRARIES	= libcheck.a
+
+libcheck_a_SOURCES = \
+	check_daemon.c check_data.c check_parser.c \
+	check_api.c check_tcp.c check_http.c check_ssl.c \
+	check_smtp.c check_misc.c check_dns.c check_print.c \
+	ipwrapper.c ipvswrapper.c libipvs.c sockopt.c
+
+AM_CPPFLAGS		+= -I$(srcdir)/../include -I$(srcdir)/../../lib
+
+EXTRA_libcheck_a_SOURCES =
+libcheck_a_LIBADD =
+
+if SNMP_CHECKER
+  libcheck_a_LIBADD	+= check_snmp.o
+  EXTRA_libcheck_a_SOURCES += check_snmp.c
+endif
+
+if WITH_BFD
+  libcheck_a_LIBADD	+= check_bfd.o
+  EXTRA_libcheck_a_SOURCES += check_bfd.c
+endif
+
+MAINTAINERCLEANFILES	= @MAINTAINERCLEANFILES@
diff --git a/tools/keepalived/keepalived/check/Makefile.in b/tools/keepalived/keepalived/check/Makefile.in
index 9d45506f8..ed7d3534c 100644
--- a/tools/keepalived/keepalived/check/Makefile.in
+++ b/tools/keepalived/keepalived/check/Makefile.in
@@ -1,71 +1,584 @@
-# Makefile
+# Makefile.in generated by automake 1.13.4 from Makefile.am.
+# @configure_input@
+
+# Copyright (C) 1994-2013 Free Software Foundation, Inc.
+
+# This Makefile.in is free software; the Free Software Foundation
+# gives unlimited permission to copy and/or distribute it,
+# with or without modifications, as long as this notice is preserved.
+
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
+# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
+# PARTICULAR PURPOSE.
+
+@SET_MAKE@
+
+# Makefile.am
 #
 # Keepalived OpenSource project.
 #
-# Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
-
-CC	 = @CC@
-SNMP_FLAG = @SNMP_SUPPORT@
-INCLUDES = -I../include -I../../lib
-CFLAGS	 = @CFLAGS@ @CPPFLAGS@ $(INCLUDES) \
-	   -Wall -Wunused -Wstrict-prototypes
-CFLAGS += -I ../../../../include
-DEFS	 = -D@KERN@ -D@IPVS_SUPPORT@ -D@IPVS_SYNCD@ -D@VRRP_SUPPORT@ -D@SNMP_SUPPORT@ -D@SO_MARK_SUPPORT@ @DFLAGS@
-COMPILE	 = $(CC) $(CFLAGS) $(DEFS)
-
-OBJS = 	check_daemon.o check_data.o check_parser.o \
-	check_api.o check_tcp.o check_http.o check_ssl.o \
-	check_smtp.o check_misc.o ipwrapper.o ipvswrapper.o
-ifeq ($(SNMP_FLAG),_WITH_SNMP_)
-  OBJS += check_snmp.o
-endif
-
-HEADERS = $(OBJS:.o=.h)
+# Copyright (C) 2001-2018 Alexandre Cassen, <acassen@gmail.com>
+
+VPATH = @srcdir@
+am__is_gnu_make = test -n '$(MAKEFILE_LIST)' && test -n '$(MAKELEVEL)'
+am__make_running_with_option = \
+  case $${target_option-} in \
+      ?) ;; \
+      *) echo "am__make_running_with_option: internal error: invalid" \
+              "target option '$${target_option-}' specified" >&2; \
+         exit 1;; \
+  esac; \
+  has_opt=no; \
+  sane_makeflags=$$MAKEFLAGS; \
+  if $(am__is_gnu_make); then \
+    sane_makeflags=$$MFLAGS; \
+  else \
+    case $$MAKEFLAGS in \
+      *\\[\ \	]*) \
+        bs=\\; \
+        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
+          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
+    esac; \
+  fi; \
+  skip_next=no; \
+  strip_trailopt () \
+  { \
+    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
+  }; \
+  for flg in $$sane_makeflags; do \
+    test $$skip_next = yes && { skip_next=no; continue; }; \
+    case $$flg in \
+      *=*|--*) continue;; \
+        -*I) strip_trailopt 'I'; skip_next=yes;; \
+      -*I?*) strip_trailopt 'I';; \
+        -*O) strip_trailopt 'O'; skip_next=yes;; \
+      -*O?*) strip_trailopt 'O';; \
+        -*l) strip_trailopt 'l'; skip_next=yes;; \
+      -*l?*) strip_trailopt 'l';; \
+      -[dEDm]) skip_next=yes;; \
+      -[JT]) skip_next=yes;; \
+    esac; \
+    case $$flg in \
+      *$$target_option*) has_opt=yes; break;; \
+    esac; \
+  done; \
+  test $$has_opt = yes
+am__make_dryrun = (target_option=n; $(am__make_running_with_option))
+am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
+pkgdatadir = $(datadir)/@PACKAGE@
+pkgincludedir = $(includedir)/@PACKAGE@
+pkglibdir = $(libdir)/@PACKAGE@
+pkglibexecdir = $(libexecdir)/@PACKAGE@
+am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
+install_sh_DATA = $(install_sh) -c -m 644
+install_sh_PROGRAM = $(install_sh) -c
+install_sh_SCRIPT = $(install_sh) -c
+INSTALL_HEADER = $(INSTALL_DATA)
+transform = $(program_transform_name)
+NORMAL_INSTALL = :
+PRE_INSTALL = :
+POST_INSTALL = :
+NORMAL_UNINSTALL = :
+PRE_UNINSTALL = :
+POST_UNINSTALL = :
+@SNMP_CHECKER_TRUE@am__append_1 = check_snmp.o
+@SNMP_CHECKER_TRUE@am__append_2 = check_snmp.c
+@WITH_BFD_TRUE@am__append_3 = check_bfd.o
+@WITH_BFD_TRUE@am__append_4 = check_bfd.c
+subdir = keepalived/check
+DIST_COMMON = $(srcdir)/Makefile.in $(srcdir)/Makefile.am \
+	$(top_srcdir)/depcomp
+ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
+am__aclocal_m4_deps = $(top_srcdir)/configure.ac
+am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
+	$(ACLOCAL_M4)
+mkinstalldirs = $(install_sh) -d
+CONFIG_HEADER = $(top_builddir)/lib/config.h \
+	$(top_builddir)/lib/config_warnings.h
+CONFIG_CLEAN_FILES =
+CONFIG_CLEAN_VPATH_FILES =
+LIBRARIES = $(noinst_LIBRARIES)
+AM_V_AR = $(am__v_AR_@AM_V@)
+am__v_AR_ = $(am__v_AR_@AM_DEFAULT_V@)
+am__v_AR_0 = @echo "  AR      " $@;
+am__v_AR_1 = 
+libcheck_a_AR = $(AR) $(ARFLAGS)
+libcheck_a_DEPENDENCIES = $(am__append_1) $(am__append_3)
+am_libcheck_a_OBJECTS = check_daemon.$(OBJEXT) check_data.$(OBJEXT) \
+	check_parser.$(OBJEXT) check_api.$(OBJEXT) check_tcp.$(OBJEXT) \
+	check_http.$(OBJEXT) check_ssl.$(OBJEXT) check_smtp.$(OBJEXT) \
+	check_misc.$(OBJEXT) check_dns.$(OBJEXT) check_print.$(OBJEXT) \
+	ipwrapper.$(OBJEXT) ipvswrapper.$(OBJEXT) libipvs.$(OBJEXT) \
+	sockopt.$(OBJEXT)
+am__EXTRA_libcheck_a_SOURCES_DIST = check_snmp.c check_bfd.c
+libcheck_a_OBJECTS = $(am_libcheck_a_OBJECTS)
+AM_V_P = $(am__v_P_@AM_V@)
+am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
+am__v_P_0 = false
+am__v_P_1 = :
+AM_V_GEN = $(am__v_GEN_@AM_V@)
+am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
+am__v_GEN_0 = @echo "  GEN     " $@;
+am__v_GEN_1 = 
+AM_V_at = $(am__v_at_@AM_V@)
+am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
+am__v_at_0 = @
+am__v_at_1 = 
+DEFAULT_INCLUDES = -I.@am__isrc@ -I$(top_builddir)/lib
+depcomp = $(SHELL) $(top_srcdir)/depcomp
+am__depfiles_maybe = depfiles
+am__mv = mv -f
+COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \
+	$(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
+AM_V_CC = $(am__v_CC_@AM_V@)
+am__v_CC_ = $(am__v_CC_@AM_DEFAULT_V@)
+am__v_CC_0 = @echo "  CC      " $@;
+am__v_CC_1 = 
+CCLD = $(CC)
+LINK = $(CCLD) $(AM_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@
+AM_V_CCLD = $(am__v_CCLD_@AM_V@)
+am__v_CCLD_ = $(am__v_CCLD_@AM_DEFAULT_V@)
+am__v_CCLD_0 = @echo "  CCLD    " $@;
+am__v_CCLD_1 = 
+SOURCES = $(libcheck_a_SOURCES) $(EXTRA_libcheck_a_SOURCES)
+DIST_SOURCES = $(libcheck_a_SOURCES) \
+	$(am__EXTRA_libcheck_a_SOURCES_DIST)
+am__can_run_installinfo = \
+  case $$AM_UPDATE_INFO_DIR in \
+    n|no|NO) false;; \
+    *) (install-info --version) >/dev/null 2>&1;; \
+  esac
+am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
+# Read a list of newline-separated strings from the standard input,
+# and print each of them once, without duplicates.  Input order is
+# *not* preserved.
+am__uniquify_input = $(AWK) '\
+  BEGIN { nonempty = 0; } \
+  { items[$$0] = 1; nonempty = 1; } \
+  END { if (nonempty) { for (i in items) print i; }; } \
+'
+# Make sure the list of sources is unique.  This is necessary because,
+# e.g., the same source file might be shared among _SOURCES variables
+# for different programs/libraries.
+am__define_uniq_tagged_files = \
+  list='$(am__tagged_files)'; \
+  unique=`for i in $$list; do \
+    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
+  done | $(am__uniquify_input)`
+ETAGS = etags
+CTAGS = ctags
+DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
+ACLOCAL = @ACLOCAL@
+AMTAR = @AMTAR@
+AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
+AR = @AR@
+ARFLAGS = @ARFLAGS@
+AUTOCONF = @AUTOCONF@
+AUTOHEADER = @AUTOHEADER@
+AUTOMAKE = @AUTOMAKE@
+AWK = @AWK@
+CC = @CC@
+CCDEPMODE = @CCDEPMODE@
+CFLAGS = @CFLAGS@
+CPP = @CPP@
+CPPFLAGS = @CPPFLAGS@
+CYGPATH_W = @CYGPATH_W@
+DEFAULT_CONFIG_FILE = @DEFAULT_CONFIG_FILE@
+DEFS = @DEFS@
+DEPDIR = @DEPDIR@
+ECHO_C = @ECHO_C@
+ECHO_N = @ECHO_N@
+ECHO_T = @ECHO_T@
+EGREP = @EGREP@
+EXEEXT = @EXEEXT@
+GENHASH_LIBS = @GENHASH_LIBS@
+GREP = @GREP@
+HAVE_RPM = @HAVE_RPM@
+HAVE_RPMBUILD = @HAVE_RPMBUILD@
+HAVE_SPHINX_BUILD = @HAVE_SPHINX_BUILD@
+INSTALL = @INSTALL@
+INSTALL_DATA = @INSTALL_DATA@
+INSTALL_PROGRAM = @INSTALL_PROGRAM@
+INSTALL_SCRIPT = @INSTALL_SCRIPT@
+INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
+KA_CFLAGS = @KA_CFLAGS@
+KA_CPPFLAGS = @KA_CPPFLAGS@
+KA_LDFLAGS = @KA_LDFLAGS@
+KA_LIBS = @KA_LIBS@
+LDD = @LDD@
+LDFLAGS = @LDFLAGS@
+LIBOBJS = @LIBOBJS@
+LIBS = @LIBS@
+LN_S = @LN_S@
+LTLIBOBJS = @LTLIBOBJS@
+MAINTAINERCLEANFILES = @MAINTAINERCLEANFILES@
+MAKEINFO = @MAKEINFO@
+MKDIR_P = @MKDIR_P@
+NETSNMP_CONFIG = @NETSNMP_CONFIG@
+OBJEXT = @OBJEXT@
+PACKAGE = @PACKAGE@
+PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
+PACKAGE_NAME = @PACKAGE_NAME@
+PACKAGE_STRING = @PACKAGE_STRING@
+PACKAGE_TARNAME = @PACKAGE_TARNAME@
+PACKAGE_URL = @PACKAGE_URL@
+PACKAGE_VERSION = @PACKAGE_VERSION@
+PATH_SEPARATOR = @PATH_SEPARATOR@
+PID_DIR = @PID_DIR@
+PKG_CONFIG = @PKG_CONFIG@
+PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
+PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
+RANLIB = @RANLIB@
+SED = @SED@
+SET_MAKE = @SET_MAKE@
+SHELL = @SHELL@
+SNMP_SERVICE = @SNMP_SERVICE@
+SPHINXBUILDNAME = @SPHINXBUILDNAME@
+STRIP = @STRIP@
+VERSION = @VERSION@
+abs_builddir = @abs_builddir@
+abs_srcdir = @abs_srcdir@
+abs_top_builddir = @abs_top_builddir@
+abs_top_srcdir = @abs_top_srcdir@
+ac_ct_AR = @ac_ct_AR@
+ac_ct_CC = @ac_ct_CC@
+am__include = @am__include@
+am__leading_dot = @am__leading_dot@
+am__quote = @am__quote@
+am__tar = @am__tar@
+am__untar = @am__untar@
+bindir = @bindir@
+build_alias = @build_alias@
+builddir = @builddir@
+datadir = @datadir@
+datarootdir = @datarootdir@
+docdir = @docdir@
+dvidir = @dvidir@
+exec_prefix = @exec_prefix@
+host_alias = @host_alias@
+htmldir = @htmldir@
+includedir = @includedir@
+infodir = @infodir@
+install_sh = @install_sh@
+libdir = @libdir@
+libexecdir = @libexecdir@
+localedir = @localedir@
+localstatedir = @localstatedir@
+mandir = @mandir@
+mkdir_p = @mkdir_p@
+oldincludedir = @oldincludedir@
+pdfdir = @pdfdir@
+prefix = @prefix@
+program_transform_name = @program_transform_name@
+psdir = @psdir@
+sbindir = @sbindir@
+sharedstatedir = @sharedstatedir@
+srcdir = @srcdir@
+sysconfdir = @sysconfdir@
+systemdsystemunitdir = @systemdsystemunitdir@
+target_alias = @target_alias@
+top_build_prefix = @top_build_prefix@
+top_builddir = @top_builddir@
+top_srcdir = @top_srcdir@
+AM_CPPFLAGS = $(KA_CPPFLAGS) $(DEBUG_CPPFLAGS) -I$(srcdir)/../include \
+	-I$(srcdir)/../../lib
+AM_CFLAGS = $(KA_CFLAGS) $(DEBUG_CFLAGS)
+AM_LDFLAGS = $(KA_LDFLAGS) $(DEBUG_LDFLAGS)
+# AM_LIBS		= $(KA_LIBS)
+# AM_LIBTOOLFLAGS	= $(KA_LIBTOOLFLAGS)
+noinst_LIBRARIES = libcheck.a
+libcheck_a_SOURCES = \
+	check_daemon.c check_data.c check_parser.c \
+	check_api.c check_tcp.c check_http.c check_ssl.c \
+	check_smtp.c check_misc.c check_dns.c check_print.c \
+	ipwrapper.c ipvswrapper.c libipvs.c sockopt.c
+
+EXTRA_libcheck_a_SOURCES = $(am__append_2) $(am__append_4)
+libcheck_a_LIBADD = $(am__append_1) $(am__append_3)
+all: all-am
+
+.SUFFIXES:
+.SUFFIXES: .c .o .obj
+$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
+	@for dep in $?; do \
+	  case '$(am__configure_deps)' in \
+	    *$$dep*) \
+	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
+	        && { if test -f $@; then exit 0; else break; fi; }; \
+	      exit 1;; \
+	  esac; \
+	done; \
+	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign keepalived/check/Makefile'; \
+	$(am__cd) $(top_srcdir) && \
+	  $(AUTOMAKE) --foreign keepalived/check/Makefile
+.PRECIOUS: Makefile
+Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
+	@case '$?' in \
+	  *config.status*) \
+	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
+	  *) \
+	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe)'; \
+	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe);; \
+	esac;
+
+$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+
+$(top_srcdir)/configure:  $(am__configure_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+$(am__aclocal_m4_deps):
+
+clean-noinstLIBRARIES:
+	-test -z "$(noinst_LIBRARIES)" || rm -f $(noinst_LIBRARIES)
+
+libcheck.a: $(libcheck_a_OBJECTS) $(libcheck_a_DEPENDENCIES) $(EXTRA_libcheck_a_DEPENDENCIES) 
+	$(AM_V_at)-rm -f libcheck.a
+	$(AM_V_AR)$(libcheck_a_AR) libcheck.a $(libcheck_a_OBJECTS) $(libcheck_a_LIBADD)
+	$(AM_V_at)$(RANLIB) libcheck.a
+
+mostlyclean-compile:
+	-rm -f *.$(OBJEXT)
+
+distclean-compile:
+	-rm -f *.tab.c
+
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/check_api.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/check_bfd.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/check_daemon.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/check_data.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/check_dns.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/check_http.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/check_misc.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/check_parser.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/check_print.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/check_smtp.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/check_snmp.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/check_ssl.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/check_tcp.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/ipvswrapper.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/ipwrapper.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/libipvs.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/sockopt.Po@am__quote@
 
 .c.o:
-	$(COMPILE) -c $<
-
-all:	$(OBJS)
-
-clean:
-	rm -f *.a *.o *~
-
-distclean: clean
-	rm -f Makefile
-
-check_daemon.o: check_daemon.c ../include/check_daemon.h \
-  ../include/check_parser.h ../include/check_data.h ../include/check_api.h \
-  ../include/global_data.h ../include/ipwrapper.h ../include/ipwrapper.h \
-  ../include/pidfile.h ../include/daemon.h ../../lib/list.h ../../lib/memory.h \
-  ../../lib/parser.h ../../lib/signals.h ../include/vrrp_netlink.h \
-  ../include/vrrp_if.h ../include/snmp.h ../include/check_snmp.h
-check_data.o: check_data.c ../include/check_data.h \
-  ../include/check_api.h ../../lib/memory.h ../../lib/utils.h
-check_parser.o: check_parser.c ../include/check_parser.h \
-  ../include/check_data.h ../include/check_api.h ../include/global_data.h \
-  ../include/global_parser.h ../../lib/parser.h ../../lib/memory.h \
-  ../../lib/utils.h
-check_api.o: check_api.c ../include/check_api.h ../../lib/parser.h \
-  ../../lib/memory.h ../../lib/utils.h ../include/check_misc.h \
-  ../include/check_tcp.h ../include/check_http.h ../include/check_ssl.h
-check_tcp.o: check_tcp.c ../include/check_tcp.h ../include/check_api.h \
-  ../../lib/memory.h ../include/ipwrapper.h ../include/layer4.h \
-  ../include/smtp.h ../../lib/utils.h ../../lib/parser.h
-check_http.o: check_http.c ../include/check_http.h ../include/check_ssl.h \
-  ../include/check_api.h ../../lib/memory.h ../../lib/parser.h \
-  ../../lib/utils.h
-check_ssl.o: check_ssl.c ../include/check_ssl.h ../include/check_api.h \
-  ../../lib/memory.h ../../lib/parser.h ../include/smtp.h \
-  ../../lib/utils.h
-check_smtp.o: check_smtp.c ../include/check_smtp.h ../include/check_api.h \
-  ../../lib/memory.h ../include/ipwrapper.h ../include/smtp.h \
-  ../../lib/utils.h ../../lib/notify.h ../../lib/parser.h ../include/daemon.h
-check_misc.o: check_misc.c ../include/check_misc.h ../include/check_api.h \
-  ../../lib/memory.h ../include/ipwrapper.h ../include/smtp.h \
-  ../../lib/utils.h ../../lib/notify.h ../../lib/parser.h ../include/daemon.h
-ipwrapper.o: ipwrapper.c ../include/ipwrapper.h ../../lib/memory.h \
-  ../../lib/utils.h ../../lib/notify.h ../include/snmp.h ../include/check_snmp.h
-ipvswrapper.o: ipvswrapper.c ../include/ipvswrapper.h ../../lib/utils.h \
-  ../../lib/memory.h
-check_snmp.o: check_snmp.c ../include/check_snmp.h ../include/check_data.h \
-  ../../lib/list.h ../include/ipvswrapper.h ../include/ipwrapper.h ../include/global_data.h
+@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
+@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c $<
+
+.c.obj:
+@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ `$(CYGPATH_W) '$<'`
+@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c `$(CYGPATH_W) '$<'`
+
+ID: $(am__tagged_files)
+	$(am__define_uniq_tagged_files); mkid -fID $$unique
+tags: tags-am
+TAGS: tags
+
+tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	set x; \
+	here=`pwd`; \
+	$(am__define_uniq_tagged_files); \
+	shift; \
+	if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
+	  test -n "$$unique" || unique=$$empty_fix; \
+	  if test $$# -gt 0; then \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      "$$@" $$unique; \
+	  else \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      $$unique; \
+	  fi; \
+	fi
+ctags: ctags-am
+
+CTAGS: ctags
+ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	$(am__define_uniq_tagged_files); \
+	test -z "$(CTAGS_ARGS)$$unique" \
+	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
+	     $$unique
+
+GTAGS:
+	here=`$(am__cd) $(top_builddir) && pwd` \
+	  && $(am__cd) $(top_srcdir) \
+	  && gtags -i $(GTAGS_ARGS) "$$here"
+cscopelist: cscopelist-am
+
+cscopelist-am: $(am__tagged_files)
+	list='$(am__tagged_files)'; \
+	case "$(srcdir)" in \
+	  [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
+	  *) sdir=$(subdir)/$(srcdir) ;; \
+	esac; \
+	for i in $$list; do \
+	  if test -f "$$i"; then \
+	    echo "$(subdir)/$$i"; \
+	  else \
+	    echo "$$sdir/$$i"; \
+	  fi; \
+	done >> $(top_builddir)/cscope.files
+
+distclean-tags:
+	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
+
+distdir: $(DISTFILES)
+	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	list='$(DISTFILES)'; \
+	  dist_files=`for file in $$list; do echo $$file; done | \
+	  sed -e "s|^$$srcdirstrip/||;t" \
+	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
+	case $$dist_files in \
+	  */*) $(MKDIR_P) `echo "$$dist_files" | \
+			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
+			   sort -u` ;; \
+	esac; \
+	for file in $$dist_files; do \
+	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
+	  if test -d $$d/$$file; then \
+	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
+	    if test -d "$(distdir)/$$file"; then \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
+	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
+	  else \
+	    test -f "$(distdir)/$$file" \
+	    || cp -p $$d/$$file "$(distdir)/$$file" \
+	    || exit 1; \
+	  fi; \
+	done
+check-am: all-am
+check: check-am
+all-am: Makefile $(LIBRARIES)
+installdirs:
+install: install-am
+install-exec: install-exec-am
+install-data: install-data-am
+uninstall: uninstall-am
+
+install-am: all-am
+	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
+
+installcheck: installcheck-am
+install-strip:
+	if test -z '$(STRIP)'; then \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	      install; \
+	else \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
+	fi
+mostlyclean-generic:
+
+clean-generic:
+
+distclean-generic:
+	-test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES)
+	-test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES)
+
+maintainer-clean-generic:
+	@echo "This command is intended for maintainers to use"
+	@echo "it deletes files that may require special tools to rebuild."
+	-test -z "$(MAINTAINERCLEANFILES)" || rm -f $(MAINTAINERCLEANFILES)
+clean: clean-am
+
+clean-am: clean-generic clean-noinstLIBRARIES mostlyclean-am
+
+distclean: distclean-am
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+distclean-am: clean-am distclean-compile distclean-generic \
+	distclean-tags
+
+dvi: dvi-am
+
+dvi-am:
+
+html: html-am
+
+html-am:
+
+info: info-am
+
+info-am:
+
+install-data-am:
+
+install-dvi: install-dvi-am
+
+install-dvi-am:
+
+install-exec-am:
+
+install-html: install-html-am
+
+install-html-am:
+
+install-info: install-info-am
+
+install-info-am:
+
+install-man:
+
+install-pdf: install-pdf-am
+
+install-pdf-am:
+
+install-ps: install-ps-am
+
+install-ps-am:
+
+installcheck-am:
+
+maintainer-clean: maintainer-clean-am
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+maintainer-clean-am: distclean-am maintainer-clean-generic
+
+mostlyclean: mostlyclean-am
+
+mostlyclean-am: mostlyclean-compile mostlyclean-generic
+
+pdf: pdf-am
+
+pdf-am:
+
+ps: ps-am
+
+ps-am:
+
+uninstall-am:
+
+.MAKE: install-am install-strip
+
+.PHONY: CTAGS GTAGS TAGS all all-am check check-am clean clean-generic \
+	clean-noinstLIBRARIES cscopelist-am ctags ctags-am distclean \
+	distclean-compile distclean-generic distclean-tags distdir dvi \
+	dvi-am html html-am info info-am install install-am \
+	install-data install-data-am install-dvi install-dvi-am \
+	install-exec install-exec-am install-html install-html-am \
+	install-info install-info-am install-man install-pdf \
+	install-pdf-am install-ps install-ps-am install-strip \
+	installcheck installcheck-am installdirs maintainer-clean \
+	maintainer-clean-generic mostlyclean mostlyclean-compile \
+	mostlyclean-generic pdf pdf-am ps ps-am tags tags-am uninstall \
+	uninstall-am
+
+
+# Tell versions [3.59,3.63) of GNU make to not export all variables.
+# Otherwise a system limit (for SysV at least) may be exceeded.
+.NOEXPORT:
diff --git a/tools/keepalived/keepalived/check/check_api.c b/tools/keepalived/keepalived/check/check_api.c
index bae40304b..3eec3dcee 100644
--- a/tools/keepalived/keepalived/check/check_api.c
+++ b/tools/keepalived/keepalived/check/check_api.c
@@ -17,110 +17,204 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <dirent.h>
+#include "config.h"
+
 #include <dlfcn.h>
+#include <stdint.h>
+#include <stdio.h>
+#include <arpa/inet.h>
+
 #include "check_api.h"
 #include "main.h"
 #include "parser.h"
-#include "memory.h"
 #include "utils.h"
 #include "logger.h"
+#include "bitops.h"
 #include "global_data.h"
+#include "keepalived_netlink.h"
 #include "check_misc.h"
 #include "check_smtp.h"
 #include "check_tcp.h"
 #include "check_http.h"
 #include "check_ssl.h"
+#include "check_dns.h"
+#include "ipwrapper.h"
+#include "check_daemon.h"
+#ifdef _WITH_BFD_
+#include "check_bfd.h"
+#include "bfd_event.h"
+#include "bfd_daemon.h"
+#endif
 
 /* Global vars */
-static checker_id_t ncheckers = 0;
 list checkers_queue;
 
 /* free checker data */
 static void
 free_checker(void *data)
 {
-	checker_t *checker= data;
+	checker_t *checker = data;
 	(*checker->free_func) (checker);
 }
 
 /* dump checker data */
 static void
-dump_checker(void *data)
+dump_checker(FILE *fp, const void *data)
 {
-	checker_t *checker = data;
-	log_message(LOG_INFO, " %s", FMT_CHK(checker));
-	(*checker->dump_func) (checker);
+	const checker_t *checker = data;
+
+	conf_write(fp, " %s -> %s", FMT_VS(checker->vs), FMT_CHK(checker));
+
+	(*checker->dump_func) (fp, checker);
 }
 
 void
-dump_conn_opts (conn_opts_t *conn)
+dump_connection_opts(FILE *fp, const void *data)
 {
-	log_message(LOG_INFO, "   Connection dest = %s", inet_sockaddrtopair(&conn->dst));
+	const conn_opts_t *conn = data;
+
+	conf_write(fp, "     Dest = %s", inet_sockaddrtopair(&conn->dst));
 	if (conn->bindto.ss_family)
-		log_message(LOG_INFO, "   Bind to = %s", inet_sockaddrtopair(&conn->bindto));
-	log_message(LOG_INFO, "   Connection timeout = %d", conn->connection_to/TIMER_HZ);
+		conf_write(fp, "     Bind to = %s", inet_sockaddrtopair(&conn->bindto));
+	if (conn->bind_if[0])
+		conf_write(fp, "     Bind i/f = %s", conn->bind_if);
+#ifdef _WITH_SO_MARK_
+	if (conn->fwmark != 0)
+		conf_write(fp, "     Mark = %u", conn->fwmark);
+#endif
+	conf_write(fp, "     Timeout = %f", (double)conn->connection_to / TIMER_HZ);
 }
 
-/* Queue a checker into the checkers_queue */
 void
-queue_checker(void (*free_func) (void *), void (*dump_func) (void *)
-	      , int (*launch) (thread_t *)
+dump_checker_opts(FILE *fp, const void *data)
+{
+	const checker_t *checker = data;
+	const conn_opts_t *conn = checker->co;
+
+	if (conn) {
+		conf_write(fp, "   Connection");
+		dump_connection_opts(fp, conn);
+	}
+
+	conf_write(fp, "   Alpha is %s", checker->alpha ? "ON" : "OFF");
+	conf_write(fp, "   Log all failures %s", checker->log_all_failures ? "ON" : "OFF");
+	conf_write(fp, "   Delay loop = %f" , (double)checker->delay_loop / TIMER_HZ);
+	if (checker->retry) {
+		conf_write(fp, "   Retry count = %u" , checker->retry);
+		conf_write(fp, "   Retry delay = %f" , (double)checker->delay_before_retry / TIMER_HZ);
+	}
+	conf_write(fp, "   Warmup = %f", (double)checker->warmup / TIMER_HZ);
+
+	conf_write(fp, "   Enabled = %d", checker->enabled);
+	conf_write(fp, "   Is up = %d", checker->is_up);
+	conf_write(fp, "   Has run = %d", checker->has_run);
+	conf_write(fp, "   Retries left before fail = %u", checker->retry_it);
+	conf_write(fp, "   Delay before retry = %f", (double)checker->default_delay_before_retry / TIMER_HZ);
+}
+
+/* Queue a checker into the checkers_queue */
+checker_t *
+queue_checker(void (*free_func) (checker_t *), void (*dump_func) (FILE *, const checker_t *)
+	      , thread_func_t launch
+	      , bool (*compare) (const checker_t *, const checker_t *)
 	      , void *data
-	      , conn_opts_t *co)
+	      , conn_opts_t *co
+	      , bool fd_required)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
 	checker_t *checker = (checker_t *) MALLOC(sizeof (checker_t));
 
-	/* Set default dst = RS, timeout = 5 */
+	/* Set default dst = RS, timeout = default */
 	if (co) {
 		co->dst = rs->addr;
-		co->connection_to = 5 * TIMER_HZ;
+		co->connection_to = UINT_MAX;
 	}
 
 	checker->free_func = free_func;
 	checker->dump_func = dump_func;
 	checker->launch = launch;
+	checker->compare = compare;
 	checker->vs = vs;
 	checker->rs = rs;
 	checker->data = data;
 	checker->co = co;
-	checker->id = ncheckers++;
-	checker->enabled = (vs->vfwmark) ? 1 : 0;
-	checker->warmup = vs->delay_loop;
-#ifdef _WITHOUT_VRRP_
-	checker->enabled = 1;
-#endif
+	checker->enabled = true;
+	checker->alpha = -1;
+	checker->delay_loop = ULONG_MAX;
+	checker->warmup = ULONG_MAX;
+	checker->retry = UINT_MAX;
+	checker->delay_before_retry = ULONG_MAX;
+	checker->retry_it = 0;
+	checker->is_up = true;
+	checker->default_delay_before_retry = 1 * TIMER_HZ;
+	checker->default_retry = 1 ;
 
 	/* queue the checker */
 	list_add(checkers_queue, checker);
 
-	/* In Alpha mode also mark the check as failed. */
-	if (vs->alpha) {
-		list fc = rs->failed_checkers;
-		checker_id_t *id = (checker_id_t *) MALLOC(sizeof(checker_id_t));
-		*id = checker->id;
-		list_add (fc, id);
-	}
+	if (fd_required)
+		check_data->num_checker_fd_required++;
+
+	return checker;
 }
 
-/* Set dst */
 void
-checker_set_dst(struct sockaddr_storage *dst)
+dequeue_new_checker(void)
 {
-	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
+	checker_t *checker = ELEMENT_DATA(checkers_queue->tail);
 
-	*dst = rs->addr;
+	if (!checker->is_up)
+		set_checker_state(checker, true);
+
+	free_list_element(checkers_queue, checkers_queue->tail);
+}
+
+bool
+check_conn_opts(conn_opts_t *co)
+{
+	if (co->dst.ss_family == AF_INET6 &&
+	    IN6_IS_ADDR_LINKLOCAL(&((struct sockaddr_in6*)&co->dst)->sin6_addr) &&
+	    !co->bind_if[0]) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Checker link local address %s requires a bind_if", inet_sockaddrtos(&co->dst));
+		return false;
+	}
+
+	return true;
+}
+
+bool __attribute__ ((pure))
+compare_conn_opts(const conn_opts_t *a, const conn_opts_t *b)
+{
+	if (a == b)
+		return true;
+
+	if (!a || !b)
+		return false;
+	if (!sockstorage_equal(&a->dst, &b->dst))
+		return false;
+	if (!sockstorage_equal(&a->bindto, &b->bindto))
+		return false;
+	if (strcmp(a->bind_if, b->bind_if))
+		return false;
+	if (a->connection_to != b->connection_to)
+		return false;
+#ifdef _WITH_SO_MARK_
+	if (a->fwmark != b->fwmark)
+		return false;
+#endif
+
+	return true;
 }
 
 void
 checker_set_dst_port(struct sockaddr_storage *dst, uint16_t port)
 {
+	/* NOTE: we are relying on the offset of sin_port and sin6_port being
+	 * the same if an IPv6 address is specified after the port */
 	if (dst->ss_family == AF_INET6) {
 		struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) dst;
 		addr6->sin6_port = port;
@@ -132,85 +226,223 @@ checker_set_dst_port(struct sockaddr_storage *dst, uint16_t port)
 
 /* "connect_ip" keyword */
 static void
-co_ip_handler(vector_t *strvec)
+co_ip_handler(const vector_t *strvec)
 {
 	conn_opts_t *co = CHECKER_GET_CO();
-	inet_stosockaddr(vector_slot(strvec, 1), 0, &co->dst);
+
+	if (inet_stosockaddr(strvec_slot(strvec, 1), NULL, &co->dst))
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid connect_ip address %s - ignoring", strvec_slot(strvec, 1));
+	else if (co->bindto.ss_family != AF_UNSPEC &&
+		 co->bindto.ss_family != co->dst.ss_family) {
+		report_config_error(CONFIG_GENERAL_ERROR, "connect_ip address %s does not match address family of bindto - skipping", strvec_slot(strvec, 1));
+		co->dst.ss_family = AF_UNSPEC;
+	}
 }
 
 /* "connect_port" keyword */
 static void
-co_port_handler(vector_t *strvec)
+co_port_handler(const vector_t *strvec)
 {
 	conn_opts_t *co = CHECKER_GET_CO();
-	checker_set_dst_port(&co->dst, htons(CHECKER_VALUE_INT(strvec)));
+	unsigned port;
+
+	if (!read_unsigned_strvec(strvec, 1, &port, 1, 65535, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid checker connect_port '%s'", strvec_slot(strvec, 1));
+		return;
+	}
+
+	checker_set_dst_port(&co->dst, htons(port));
 }
 
 /* "bindto" keyword */
 static void
-co_srcip_handler(vector_t *strvec)
+co_srcip_handler(const vector_t *strvec)
 {
 	conn_opts_t *co = CHECKER_GET_CO();
-	inet_stosockaddr(vector_slot(strvec, 1), 0, &co->bindto);
+	if (inet_stosockaddr(strvec_slot(strvec, 1), NULL, &co->bindto))
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid bindto address %s - ignoring", strvec_slot(strvec, 1));
+	else if (co->dst.ss_family != AF_UNSPEC &&
+		 co->dst.ss_family != co->bindto.ss_family) {
+		report_config_error(CONFIG_GENERAL_ERROR, "bindto address %s does not match address family of connect_ip - skipping", strvec_slot(strvec, 1));
+		co->bindto.ss_family = AF_UNSPEC;
+	}
 }
 
 /* "bind_port" keyword */
 static void
-co_srcport_handler(vector_t *strvec)
+co_srcport_handler(const vector_t *strvec)
 {
 	conn_opts_t *co = CHECKER_GET_CO();
-	checker_set_dst_port(&co->bindto, htons(CHECKER_VALUE_INT(strvec)));
+	unsigned port;
+
+	if (!read_unsigned_strvec(strvec, 1, &port, 1, 65535, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid checker bind_port '%s'", strvec_slot(strvec, 1));
+		return;
+	}
+
+	checker_set_dst_port(&co->bindto, htons(port));
+}
+
+/* "bind_if" keyword */
+static void
+co_srcif_handler(const vector_t *strvec)
+{
+	// This is needed for link local IPv6 bindto address
+	conn_opts_t *co = CHECKER_GET_CO();
+
+	if (strlen(strvec_slot(strvec, 1)) > sizeof(co->bind_if) - 1) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Interface name %s is too long - ignoring", strvec_slot(strvec, 1));
+		return;
+	}
+	strcpy(co->bind_if, strvec_slot(strvec, 1));
 }
 
 /* "connect_timeout" keyword */
 static void
-co_timeout_handler(vector_t *strvec)
+co_timeout_handler(const vector_t *strvec)
 {
 	conn_opts_t *co = CHECKER_GET_CO();
-	co->connection_to = CHECKER_VALUE_INT(strvec) * TIMER_HZ;
+	unsigned long timer;
 
-	/* do not allow 0 timeout */
-	if (! co->connection_to)
-		co->connection_to = TIMER_HZ;
+	if (!read_timer(strvec, 1, &timer, 1, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "connect_timeout %s invalid - ignoring", strvec_slot(strvec, 1));
+		return;
+	}
+	co->connection_to = timer;
 }
 
 #ifdef _WITH_SO_MARK_
 /* "fwmark" keyword */
 static void
-co_fwmark_handler(vector_t *strvec)
+co_fwmark_handler(const vector_t *strvec)
 {
 	conn_opts_t *co = CHECKER_GET_CO();
-	co->fwmark = CHECKER_VALUE_INT(strvec);
+	unsigned fwmark;
+
+	if (!read_unsigned_strvec(strvec, 1, &fwmark, 0, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid fwmark connection value '%s'", strvec_slot(strvec, 1));
+		return;
+	}
+	co->fwmark = fwmark;
 }
 #endif
 
-void
-install_connect_keywords(void)
+static void
+retry_handler(const vector_t *strvec)
 {
-	install_keyword("connect_ip", &co_ip_handler);
-	install_keyword("connect_port", &co_port_handler);
-	install_keyword("bindto", &co_srcip_handler);
-	install_keyword("bind_port", &co_srcport_handler);
-	install_keyword("connect_timeout", &co_timeout_handler);
-#ifdef _WITH_SO_MARK_
-	install_keyword("fwmark", &co_fwmark_handler);
-#endif
+	checker_t *checker = CHECKER_GET_CURRENT();
+	unsigned retry;
+
+	if (!read_unsigned_strvec(strvec, 1, &retry, 0, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid retry connection value '%s'", strvec_slot(strvec, 1));
+		return;
+	}
+
+	checker->retry = retry;
+}
+
+static void
+delay_before_retry_handler(const vector_t *strvec)
+{
+	checker_t *checker = CHECKER_GET_CURRENT();
+	unsigned long delay;
+
+	if (!read_timer(strvec, 1, &delay, 0, 0, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid delay_before_retry connection value '%s'", strvec_slot(strvec, 1));
+		return;
+	}
+
+	checker->delay_before_retry = delay;
 }
 
 /* "warmup" keyword */
-void warmup_handler(vector_t *strvec)
+static void
+warmup_handler(const vector_t *strvec)
+{
+	checker_t *checker = CHECKER_GET_CURRENT();
+	unsigned long warmup;
+
+	if (!read_timer(strvec, 1, &warmup, 0, 0, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid warmup connection value '%s'", strvec_slot(strvec, 1));
+		return;
+	}
+
+	checker->warmup = warmup;
+}
+
+static void
+delay_handler(const vector_t *strvec)
+{
+	checker_t *checker = CHECKER_GET_CURRENT();
+	unsigned long delay_loop;
+
+	if (!read_timer(strvec, 1, &delay_loop, 1, 0, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "delay_loop '%s' is invalid - ignoring", strvec_slot(strvec, 1));
+		return;
+	}
+
+	checker->delay_loop = delay_loop;
+}
+
+static void
+alpha_handler(const vector_t *strvec)
 {
 	checker_t *checker = CHECKER_GET_CURRENT();
-	checker->warmup = (long)CHECKER_VALUE_INT (strvec) * TIMER_HZ;
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res == -1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid alpha parameter %s", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+	checker->alpha = res;
+}
+static void
+log_all_failures_handler(const vector_t *strvec)
+{
+	checker_t *checker = CHECKER_GET_CURRENT();
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res == -1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid log_all_failures parameter %s", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+	checker->log_all_failures = res;
+}
+void
+install_checker_common_keywords(bool connection_keywords)
+{
+	if (connection_keywords) {
+		install_keyword("connect_ip", &co_ip_handler);
+		install_keyword("connect_port", &co_port_handler);
+		install_keyword("bindto", &co_srcip_handler);
+		install_keyword("bind_port", &co_srcport_handler);
+		install_keyword("bind_if", &co_srcif_handler);
+		install_keyword("connect_timeout", &co_timeout_handler);
+#ifdef _WITH_SO_MARK_
+		install_keyword("fwmark", &co_fwmark_handler);
+#endif
+	}
+	install_keyword("retry", &retry_handler);
+	install_keyword("delay_before_retry", &delay_before_retry_handler);
+	install_keyword("warmup", &warmup_handler);
+	install_keyword("delay_loop", &delay_handler);
+	install_keyword("alpha", &alpha_handler);
+	install_keyword("log_all_failures", &log_all_failures_handler);
 }
 
 /* dump the checkers_queue */
 void
-dump_checkers_queue(void)
+dump_checkers_queue(FILE *fp)
 {
 	if (!LIST_ISEMPTY(checkers_queue)) {
-		log_message(LOG_INFO, "------< Health checkers >------");
-		dump_list(checkers_queue);
+		conf_write(fp, "------< Health checkers >------");
+		dump_list(fp, checkers_queue);
 	}
 }
 
@@ -221,13 +453,36 @@ init_checkers_queue(void)
 	checkers_queue = alloc_list(free_checker, dump_checker);
 }
 
+/* release the checkers for a virtual server */
+void
+free_vs_checkers(virtual_server_t *vs)
+{
+	element e;
+	element next;
+	checker_t *checker;
+
+	if (LIST_ISEMPTY(checkers_queue))
+		return;
+
+	for (e = LIST_HEAD(checkers_queue); e; e = next) {
+		next = e->next;
+
+		checker = ELEMENT_DATA(e);
+		if (checker->vs != vs)
+			continue;
+
+		free_list_element(checkers_queue, e);
+	}
+}
+
 /* release the checkers_queue */
 void
 free_checkers_queue(void)
 {
-	free_list(checkers_queue);
-	checkers_queue = NULL;
-	ncheckers = 0;
+	if (!checkers_queue)
+		return;
+
+	free_list(&checkers_queue);
 }
 
 /* register checkers to the global I/O scheduler */
@@ -236,68 +491,185 @@ register_checkers_thread(void)
 {
 	checker_t *checker;
 	element e;
-	long warmup;
+	unsigned long warmup;
 
-	for (e = LIST_HEAD(checkers_queue); e; ELEMENT_NEXT(e)) {
-		checker = ELEMENT_DATA(e);
-		log_message(LOG_INFO, "Activating healthchecker for service %s"
-				    , FMT_CHK(checker));
-		CHECKER_ENABLE(checker);
+	LIST_FOREACH(checkers_queue, checker, e) {
 		if (checker->launch)
 		{
+			if (checker->vs->ha_suspend && !checker->vs->ha_suspend_addr_count)
+				checker->enabled = false;
+
+			log_message(LOG_INFO, "%sctivating healthchecker for service %s for VS %s"
+					    , checker->enabled ? "A" : "Dea", FMT_RS(checker->rs, checker->vs), FMT_VS(checker->vs));
+
 			/* wait for a random timeout to begin checker thread.
 			   It helps avoiding multiple simultaneous checks to
 			   the same RS.
 			*/
 			warmup = checker->warmup;
-			if (warmup)
-				warmup = warmup * rand() / RAND_MAX;
+			if (warmup) {
+				/* coverity[dont_call] */
+				warmup = warmup * (unsigned)random() / RAND_MAX;
+			}
 			thread_add_timer(master, checker->launch, checker,
 					 BOOTSTRAP_DELAY + warmup);
 		}
 	}
+
+#ifdef _WITH_BFD_
+	log_message(LOG_INFO, "Activating BFD healthchecker");
+
+	/* We need to always enable this, since the bfd process may write to the pipe, and we
+	 * need to ensure that messages are stripped out. */
+	start_bfd_monitoring(master);
+#endif
 }
 
 /* Sync checkers activity with netlink kernel reflection */
+static bool __attribute__ ((pure))
+addr_matches(const virtual_server_t *vs, void *address)
+{
+	const void *addr;
+	virtual_server_group_entry_t *vsg_entry;
+
+	if (vs->addr.ss_family != AF_UNSPEC) {
+		if (vs->addr.ss_family == AF_INET6)
+			addr = (const void *) &((const struct sockaddr_in6 *)&vs->addr)->sin6_addr;
+		else
+			addr = (const void *) &((const struct sockaddr_in *)&vs->addr)->sin_addr;
+
+		return inaddr_equal(vs->addr.ss_family, addr, address);
+	}
+
+	if (!vs->vsg)
+		return false;
+
+	if (vs->vsg->addr_range) {
+		element e;
+		struct in_addr mask_addr = {0};
+		struct in6_addr mask_addr6 = {{{0}}};
+		unsigned addr_base;
+
+		if (vs->af == AF_INET) {
+			mask_addr = *(struct in_addr*)address;
+			addr_base = ntohl(mask_addr.s_addr) & 0xFF;
+			mask_addr.s_addr &= htonl(0xFFFFFF00);
+		}
+		else {
+			mask_addr6 = *(struct in6_addr*)address;
+			addr_base = ntohs(mask_addr6.s6_addr16[7]);
+			mask_addr6.s6_addr16[7] = 0;
+		}
+
+		for (e = LIST_HEAD(vs->vsg->addr_range); e; ELEMENT_NEXT(e)) {
+			vsg_entry = ELEMENT_DATA(e);
+			struct sockaddr_storage range_addr = vsg_entry->addr;
+			uint32_t ra_base;
+
+			if (!vsg_entry->range) {
+				if (vsg_entry->addr.ss_family == AF_INET6)
+					addr = (void *) &((struct sockaddr_in6 *)&vsg_entry->addr)->sin6_addr;
+				else
+					addr = (void *) &((struct sockaddr_in *)&vsg_entry->addr)->sin_addr;
+
+				if (inaddr_equal(vsg_entry->addr.ss_family, addr, address))
+					return true;
+			}
+			else {
+				if (range_addr.ss_family == AF_INET) {
+					struct in_addr ra;
+
+					ra = ((struct sockaddr_in *)&range_addr)->sin_addr;
+					ra_base = ntohl(ra.s_addr) & 0xFF;
+
+					if (addr_base < ra_base || addr_base > ra_base + vsg_entry->range)
+						continue;
+
+					ra.s_addr &= htonl(0xFFFFFF00);
+					if (ra.s_addr != mask_addr.s_addr)
+						continue;
+				}
+				else
+				{
+					struct in6_addr ra = ((struct sockaddr_in6 *)&range_addr)->sin6_addr;
+					ra_base = ntohs(ra.s6_addr16[7]);
+
+					if (addr_base < ra_base || addr_base > ra_base + vsg_entry->range)
+						continue;
+
+					ra.s6_addr16[7] = 0;
+					if (!inaddr_equal(AF_INET6, &ra, &mask_addr6))
+						continue;
+				}
+
+				return true;
+			}
+		}
+	}
+
+	return false;
+}
+
 void
-update_checker_activity(sa_family_t family, void *address, int enable)
+update_checker_activity(sa_family_t family, void *address, bool enable)
 {
 	checker_t *checker;
-	sa_family_t vip_family;
-	element e;
+	virtual_server_t *vs;
+	element e, e1;
 	char addr_str[INET6_ADDRSTRLEN];
-	void *addr;
+	bool address_logged = false;
 
-	/* Display netlink operation */
-	if (debug & 32) {
+	if (__test_bit(LOG_ADDRESS_CHANGES, &debug)) {
 		inet_ntop(family, address, addr_str, sizeof(addr_str));
 		log_message(LOG_INFO, "Netlink reflector reports IP %s %s"
 				    , addr_str, (enable) ? "added" : "removed");
+		address_logged = true;
 	}
 
-	/* Processing Healthcheckers queue */
-	if (!LIST_ISEMPTY(checkers_queue)) {
-		for (e = LIST_HEAD(checkers_queue); e; ELEMENT_NEXT(e)) {
-			checker = ELEMENT_DATA(e);
-			vip_family = checker->vs->addr.ss_family;
+	if (!using_ha_suspend)
+		return;
 
-			if (vip_family != family)
-				continue;
+	if (LIST_ISEMPTY(checkers_queue))
+		return;
 
-			if (family == AF_INET6) {
-				addr = (void *) &((struct sockaddr_in6 *)&checker->vs->addr)->sin6_addr;
-			} else {
-				addr = (void *) &((struct sockaddr_in *)&checker->vs->addr)->sin_addr;
-			}
+	/* Check if any of the virtual servers are using this address, and have ha_suspend */
+	LIST_FOREACH(check_data->vs, vs, e) {
+		if (!vs->ha_suspend)
+			continue;
+
+		/* If there is no address configured, the family will be AF_UNSPEC */
+		if (vs->af != family)
+			continue;
+
+		if (!addr_matches(vs, address))
+			continue;
 
-			if (inaddr_equal(family, addr, address) &&
-			    CHECKER_HA_SUSPEND(checker)) {
-				if (!CHECKER_ENABLED(checker) && enable)
-					log_message(LOG_INFO, "Activating healthchecker for service %s"
-							    , FMT_CHK(checker));
-				if (CHECKER_ENABLED(checker) && !enable)
-					log_message(LOG_INFO, "Suspending healthchecker for service %s"
-							    , FMT_CHK(checker));
+		if (!address_logged &&
+		    __test_bit(LOG_DETAIL_BIT, &debug)) {
+			inet_ntop(family, address, addr_str, sizeof(addr_str));
+			log_message(LOG_INFO, "Netlink reflector reports IP %s %s"
+					    , addr_str, (enable) ? "added" : "removed");
+		}
+		address_logged = true;
+
+		/* If we have that same address (IPv6 link local) on multiple interfaces,
+		 * we want to count them multiple times so that we only suspend the checkers
+		 * if they are all deleted */
+		if (enable)
+			vs->ha_suspend_addr_count++;
+		else
+			vs->ha_suspend_addr_count--;
+
+		/* Processing Healthcheckers queue for this vs */
+		LIST_FOREACH(checkers_queue, checker, e1) {
+			if (checker->vs != vs)
+				continue;
+
+			if (enable != checker->enabled &&
+			    (enable || vs->ha_suspend_addr_count == 0)) {
+				log_message(LOG_INFO, "%sing healthchecker for service %s for VS %s",
+							!checker->enabled ? "Activat" : "Suspend",
+							FMT_RS(checker->rs, checker->vs), FMT_VS(checker->vs));
 				checker->enabled = enable;
 			}
 		}
@@ -313,4 +685,8 @@ install_checkers_keyword(void)
 	install_tcp_check_keyword();
 	install_http_check_keyword();
 	install_ssl_check_keyword();
+	install_dns_check_keyword();
+#ifdef _WITH_BFD_
+	install_bfd_check_keyword();
+#endif
 }
diff --git a/tools/keepalived/keepalived/check/check_bfd.c b/tools/keepalived/keepalived/check/check_bfd.c
new file mode 100644
index 000000000..f9590c306
--- /dev/null
+++ b/tools/keepalived/keepalived/check/check_bfd.c
@@ -0,0 +1,321 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        BFD CHECK. Perform a system call to run an extra
+ *              system prog or script.
+ *
+ * Authors:     Quentin Armitage <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include <unistd.h>
+#include <stdio.h>
+#include <inttypes.h>
+
+#include "main.h"
+#include "check_bfd.h"
+#include "check_api.h"
+#include "ipwrapper.h"
+#include "logger.h"
+#include "smtp.h"
+#include "parser.h"
+#include "global_data.h"
+#include "global_parser.h"
+#include "bfd.h"
+#include "bfd_event.h"
+#include "bfd_daemon.h"
+#include "bitops.h"
+#ifdef THREAD_DUMP
+#include "scheduler.h"
+#endif
+
+/* local data */
+static thread_ref_t bfd_thread;
+static checker_t *new_checker;
+
+static int bfd_check_thread(thread_ref_t);
+
+/* Configuration stream handling */
+static void
+free_bfd_check(checker_t *checker)
+{
+	bfd_checker_t *bfd_checker = checker->data;
+
+	FREE(bfd_checker);
+	FREE(checker);
+}
+
+static void
+dump_bfd_check(FILE *fp, const checker_t *checker)
+{
+	const bfd_checker_t *bfd_checker = checker->data;
+
+	conf_write(fp, "   Keepalive method = BFD_CHECK");
+	conf_write(fp, "   Name = %s", bfd_checker->bfd->bname);
+	conf_write(fp, "   Alpha is %s", checker->alpha ? "ON" : "OFF");
+
+//	conf_write(fp, "   weight = %d", bfd_checker->weight);
+}
+
+/* Dump a real server on a BFD's list */
+static void
+dump_bfds_rs(FILE *fp, const void *data)
+{
+	const checker_t *checker = data;
+
+	conf_write(fp, "   %s", FMT_RS(checker->rs, checker->vs));
+}
+
+static bool
+bfd_check_compare(const checker_t *old_c, const checker_t *new_c)
+{
+	const bfd_checker_t *old = old_c->data;
+	const bfd_checker_t *new = new_c->data;
+
+	if (strcmp(old->bfd->bname, new->bfd->bname))
+		return false;
+
+	return true;
+}
+
+static checker_tracked_bfd_t * __attribute__ ((pure))
+find_checker_tracked_bfd_by_name(char *name)
+{
+	element e;
+	checker_tracked_bfd_t *bfd;
+
+	LIST_FOREACH(check_data->track_bfds, bfd, e) {
+		if (!strcmp(bfd->bname, name))
+			return bfd;
+	}
+
+	return NULL;
+}
+
+static void
+bfd_check_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	bfd_checker_t *new_bfd_checker;
+
+	PMALLOC(new_bfd_checker);
+
+	/* queue new checker */
+	new_checker = queue_checker(free_bfd_check, dump_bfd_check, NULL, bfd_check_compare, new_bfd_checker, NULL, false);
+}
+
+static void
+bfd_name_handler(const vector_t *strvec)
+{
+	checker_tracked_bfd_t *tbfd;
+	bfd_checker_t *cbfd, *bfd_c;
+	bool config_error = true;
+	char *name;
+	element e;
+
+	if (!new_checker)
+		return;
+
+	cbfd = CHECKER_DATA(new_checker);
+
+	if (vector_size(strvec) >= 2)
+		name = vector_slot(strvec, 1);
+
+	if (vector_size(strvec) != 2)
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) BFD_CHECK - No or too many names specified - skipping checker", FMT_RS(new_checker->rs, new_checker->vs));
+	else if (!(tbfd = find_checker_tracked_bfd_by_name(name)))
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) BFD_CHECK - BFD %s not configured", FMT_RS(new_checker->rs, new_checker->vs), name);
+	else if (cbfd->bfd)
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) BFD_CHECK - BFD %s already specified as %s", FMT_RS(new_checker->rs, new_checker->vs), name, cbfd->bfd->bname);
+	else if (strlen(name) >= BFD_INAME_MAX)
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) BFD_CHECK - BFD name %s too long", FMT_RS(new_checker->rs, new_checker->vs), name);
+	else
+		config_error = false;
+
+	/* Now check we are not already monitoring it */
+	if (!config_error) {
+		LIST_FOREACH(new_checker->rs->tracked_bfds, bfd_c, e) {
+			if (tbfd == bfd_c->bfd) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) BFD_CHECK - RS already monitoring %s", FMT_RS(new_checker->rs, new_checker->vs), strvec_slot(strvec, 1));
+				config_error = true;
+				break;
+			}
+		}
+	}
+
+	if (config_error) {
+		dequeue_new_checker();
+		new_checker = NULL;
+		return;
+	}
+
+	cbfd->bfd = tbfd;
+}
+
+static void
+bfd_alpha_handler(const vector_t *strvec)
+{
+	int res;
+
+	if (!new_checker)
+		return;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res == -1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid alpha parameter %s", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+	else
+		res = true;
+
+	new_checker->alpha = res;
+}
+
+static void
+bfd_end_handler(void)
+{
+	bfd_checker_t *cbfd;
+       
+	if (!new_checker)
+		return;
+
+	cbfd = CHECKER_DATA(new_checker);
+
+	if (!cbfd->bfd) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) No name has been specified for BFD_CHECKER - skipping", FMT_RS(new_checker->rs, new_checker->vs));
+		dequeue_new_checker();
+		new_checker = NULL;
+		return;
+	}
+
+//	if (!bdfc->weight)
+//		bdfc->weight = 
+
+	/* Add the bfd to the RS's list */
+	if (!LIST_EXISTS(new_checker->rs->tracked_bfds))
+		new_checker->rs->tracked_bfds = alloc_list(NULL, NULL);
+	list_add(new_checker->rs->tracked_bfds, cbfd);
+
+	/* Add the checker to the BFD */
+	if (!LIST_EXISTS(cbfd->bfd->tracking_rs))
+		cbfd->bfd->tracking_rs = alloc_list(NULL, dump_bfds_rs);
+	list_add(cbfd->bfd->tracking_rs, new_checker);
+
+	new_checker = NULL;
+}
+
+void
+install_bfd_check_keyword(void)
+{
+	install_keyword("BFD_CHECK", &bfd_check_handler);
+	install_sublevel();
+	install_keyword("name", &bfd_name_handler);
+	install_keyword("alpha", &bfd_alpha_handler);
+	install_sublevel_end_handler(&bfd_end_handler);
+	install_sublevel_end();
+}
+
+static void
+bfd_check_handle_event(bfd_event_t * evt)
+{
+	element e, e1;
+	struct timeval cur_time;
+	struct timeval timer_tmp;
+	uint32_t delivery_time;
+	checker_tracked_bfd_t *cbfd;
+	checker_t *checker;
+	char message[80];
+	bool checker_was_up;
+	bool rs_was_alive;
+
+	if (__test_bit(LOG_DETAIL_BIT, &debug)) {
+		cur_time = timer_now();
+		timersub(&cur_time, &evt->sent_time, &timer_tmp);
+		delivery_time = timer_long(timer_tmp);
+		log_message(LOG_INFO, "Received BFD event: instance %s is in"
+			    " state %s (delivered in %" PRIu32 " usec)",
+			    evt->iname, BFD_STATE_STR(evt->state), delivery_time);
+	}
+
+	LIST_FOREACH(check_data->track_bfds, cbfd, e) {
+		if (strcmp(cbfd->bname, evt->iname))
+			continue;
+
+		/* We can't assume the state of the bfd instance up state
+		 * matches the checker up state due to the potential of
+		 * alpha state for some checkers and not others */
+		LIST_FOREACH(cbfd->tracking_rs, checker, e1) {
+			if ((evt->state == BFD_STATE_UP) == checker->is_up &&
+			    checker->has_run)
+				continue;
+
+			log_message(LOG_INFO, "BFD check of [%s] RS(%s) is %s",
+				    evt->iname, FMT_RS(checker->rs, checker->vs), evt->state == BFD_STATE_UP ? "UP" : "DOWN");
+
+			checker_was_up = checker->is_up;
+			rs_was_alive = checker->rs->alive;
+			update_svr_checker_state(evt->state == BFD_STATE_UP ? UP : DOWN, checker);
+			if (checker->rs->smtp_alert &&
+			    (rs_was_alive != checker->rs->alive || !global_data->no_checker_emails) &&
+			    (evt->state == BFD_STATE_UP) != checker_was_up) {
+				snprintf(message, sizeof(message), "=> BFD CHECK %s %s on service <=", evt->iname, evt->state == BFD_STATE_UP ? "succeeded" : "failed");
+				smtp_alert(SMTP_MSG_RS, checker, NULL, message);
+			}
+		}
+		break;
+	}
+}
+
+static int
+bfd_check_thread(thread_ref_t thread)
+{
+	bfd_event_t evt;
+
+	bfd_thread = thread_add_read(master, bfd_check_thread, NULL,
+				     thread->u.f.fd, TIMER_NEVER, false);
+
+	if (thread->type != THREAD_READY_READ_FD)
+		return 0;
+
+	while (read(thread->u.f.fd, &evt, sizeof(bfd_event_t)) != -1)
+		bfd_check_handle_event(&evt);
+
+	return 0;
+}
+
+void
+start_bfd_monitoring(thread_master_t *thread_master)
+{
+	thread_add_read(thread_master, bfd_check_thread, NULL, bfd_checker_event_pipe[0], TIMER_NEVER, false);
+}
+
+void
+checker_bfd_dispatcher_release(void)
+{
+	thread_cancel(bfd_thread);
+	bfd_thread = NULL;
+}
+
+#ifdef THREAD_DUMP
+void
+register_check_bfd_addresses(void)
+{
+	register_thread_address("bfd_check_thread", bfd_check_thread);
+}
+#endif
diff --git a/tools/keepalived/keepalived/check/check_daemon.c b/tools/keepalived/keepalived/check/check_daemon.c
index 6e070e78e..3e9ba93b5 100644
--- a/tools/keepalived/keepalived/check/check_daemon.c
+++ b/tools/keepalived/keepalived/check/check_daemon.c
@@ -17,49 +17,135 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#ifdef _HAVE_SCHED_RT_
+#include <sched.h>
+#endif
+#include <errno.h>
+#include <signal.h>
+#include <unistd.h>
+#include <sys/prctl.h>
+#include <sys/time.h>
+#include <sys/resource.h>
+
+#ifdef THREAD_DUMP
+#ifdef _WITH_SNMP_
+#include "snmp.h"
+#endif
+#include "scheduler.h"
+#include "smtp.h"
+#include "check_dns.h"
+#include "check_http.h"
+#include "check_misc.h"
+#include "check_smtp.h"
+#include "check_tcp.h"
+#endif
 #include "check_daemon.h"
 #include "check_parser.h"
 #include "ipwrapper.h"
-#include "ipvswrapper.h"
-#include "check_data.h"
 #include "check_ssl.h"
 #include "check_api.h"
 #include "global_data.h"
-#include "ipwrapper.h"
-#include "ipvswrapper.h"
 #include "pidfile.h"
-#include "daemon.h"
 #include "signals.h"
+#include "process.h"
+#include "memory.h"
 #include "logger.h"
-#include "list.h"
 #include "main.h"
-#include "memory.h"
 #include "parser.h"
-#include "vrrp_netlink.h"
-#include "vrrp_if.h"
-#ifdef _WITH_SNMP_
+#include "bitops.h"
+#include "keepalived_netlink.h"
+#include "check_print.h"
+#ifdef _WITH_SNMP_CHECKER_
   #include "check_snmp.h"
 #endif
+#include "utils.h"
+#ifdef _WITH_BFD_
+#include "bfd_daemon.h"
+#include "check_bfd.h"
+#endif
+#include "timer.h"
+#ifdef _WITH_CN_PROC_
+#include "track_process.h"
+#endif
 
-extern char *checkers_pidfile;
+/* Global variables */
+bool using_ha_suspend;
+
+#define CHECKERS_CHILD_NUM_MAX 1000
+
+/* local variables */
+static const char *check_syslog_ident;
+static bool two_phase_terminate;
+
+/* set fd ulimits  */
+static void
+set_checker_max_fds(void)
+{
+	/* Allow for:
+	 *   0	stdin
+	 *   1	stdout
+	 *   2	strerr
+	 *   3	memcheck log (debugging)
+	 *   4	log file
+	 *   5	epoll
+	 *   6	timerfd
+	 *   7	signalfd
+	 *   8	bfd pipe
+	 *   9	closed
+	 *   10	closed
+	 *   11	FIFO
+	 *   12	closed
+	 *   13	passwd file
+	 *   14	Unix domain socket
+	 *   One per checker using UDP/TCP
+	 *   One per SMTP alert
+	 *   qty 10 spare
+	 */
+	set_max_file_limit(14 + check_data->num_checker_fd_required + check_data->num_smtp_alert + 10);
+}
+
+static int
+lvs_notify_fifo_script_exit(__attribute__((unused)) thread_ref_t thread)
+{
+	log_message(LOG_INFO, "lvs notify fifo script terminated");
+
+	return 0;
+}
 
-/* Daemon stop sequence */
 static void
-stop_check(void)
+checker_dispatcher_release(void)
+{
+#ifdef _WITH_BFD_
+	checker_bfd_dispatcher_release();
+#endif
+	cancel_signal_read_thread();
+}
+
+
+/* Daemon stop sequence */
+static int
+checker_terminate_phase2(void)
 {
+	struct rusage usage;
+
+	/* Remove the notify fifo */
+	notify_fifo_close(&global_data->notify_fifo, &global_data->lvs_notify_fifo);
+
 	/* Destroy master thread */
-	signal_handler_destroy();
+	checker_dispatcher_release();
 	thread_destroy_master(master);
+	master = NULL;
 	free_checkers_queue();
 	free_ssl();
-	if (!(debug & 16))
-		clear_services();
+
 	ipvs_stop();
-#ifdef _WITH_SNMP_
-	if (snmp)
+#ifdef _WITH_SNMP_CHECKER_
+	if (global_data && global_data->enable_snmp_checker)
 		check_snmp_agent_close();
 #endif
 
@@ -67,189 +153,441 @@ stop_check(void)
 	pidfile_rm(checkers_pidfile);
 
 	/* Clean data */
-	free_global_data(global_data);
-	free_check_data(check_data);
-#ifdef _WITH_VRRP_
-	free_interface_queue();
-#endif
-
-#ifdef _DEBUG_
-	keepalived_free_final("Healthcheck child process");
-#endif
+	if (global_data)
+		free_global_data(global_data);
+	if (check_data)
+		free_check_data(check_data);
+	free_parent_mallocs_exit();
 
 	/*
 	 * Reached when terminate signal catched.
 	 * finally return to parent process.
 	 */
+	if (__test_bit(LOG_DETAIL_BIT, &debug)) {
+		getrusage(RUSAGE_SELF, &usage);
+		log_message(LOG_INFO, "Stopped - used %ld.%6.6ld user time, %ld.%6.6ld system time", usage.ru_utime.tv_sec, usage.ru_utime.tv_usec, usage.ru_stime.tv_sec, usage.ru_stime.tv_usec);
+	}
+	else
+		log_message(LOG_INFO, "Stopped");
+
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		close_log_file();
+#endif
 	closelog();
-	exit(0);
+
+#ifndef _MEM_CHECK_LOG_
+	FREE_CONST_PTR(check_syslog_ident);
+#else
+	if (check_syslog_ident)
+		free(no_const_char_p(check_syslog_ident));
+#endif
+	close_std_fd();
+
+	return 0;
+}
+
+static int
+checker_shutdown_backstop_thread(thread_ref_t thread)
+{
+	int count = 0;
+	thread_ref_t t;
+
+	/* Force terminate all script processes */
+	if (thread->master->child.rb_root.rb_node)
+		script_killall(thread->master, SIGKILL, true);
+
+	rb_for_each_entry_cached_const(t, &thread->master->child, n)
+		count++;
+
+	log_message(LOG_ERR, "backstop thread invoked: shutdown timer %srunning, child count %d",
+			thread->master->shutdown_timer_running ? "" : "not ", count);
+
+	if (thread->master->shutdown_timer_running)
+		thread_add_timer_shutdown(thread->master, checker_shutdown_backstop_thread, NULL, TIMER_HZ / 10);
+	else
+		thread_add_terminate_event(thread->master);
+
+	return 0;
 }
 
-/* Daemon init sequence */
 static void
-start_check(void)
+checker_terminate_phase1(bool schedule_next_thread)
 {
-	/* Initialize sub-system */
-	if (ipvs_start() != IPVS_SUCCESS) {
-		stop_check();
-		return;
+	if (using_ha_suspend || __test_bit(LOG_ADDRESS_CHANGES, &debug))
+		kernel_netlink_close();
+
+	/* Terminate all script processes */
+	if (master->child.rb_root.rb_node)
+		script_killall(master, SIGTERM, true);
+
+	/* Send shutdown messages */
+	if (!__test_bit(DONT_RELEASE_IPVS_BIT, &debug)) {
+		if (global_data->lvs_flush_onstop == LVS_FLUSH_FULL) {
+			log_message(LOG_INFO, "Flushing lvs on shutdown in oneshot");
+			ipvs_flush_cmd();
+		} else
+			clear_services();
 	}
-	init_checkers_queue();
-#ifdef _WITH_VRRP_
-	init_interface_queue();
-#endif
-#ifdef _WITH_SNMP_
-	if (!reload && snmp)
-		check_snmp_agent_init();
+
+	if (schedule_next_thread) {
+		/* If there are no child processes, we can terminate immediately,
+		 * otherwise add a thread to allow reasonable time for children to terminate */
+		if (master->child.rb_root.rb_node) {
+			/* Add a backstop timer for the shutdown */
+			thread_add_timer_shutdown(master, checker_shutdown_backstop_thread, NULL, TIMER_HZ);
+		}
+		else
+			thread_add_terminate_event(master);
+	}
+}
+
+#ifndef _DEBUG_
+static int
+start_checker_termination_thread(__attribute__((unused)) thread_ref_t thread)
+{
+	/* This runs in the context of a thread */
+	two_phase_terminate = true;
+
+	checker_terminate_phase1(true);
+
+	return 0;
+}
 #endif
 
+static void checker_queue_adj(void)
+{
+    unsigned i_checker;
+    unsigned checkers_total = LIST_SIZE(checkers_queue);
+    unsigned checkers_child_all = global_data->checker_queue_num? global_data->checker_queue_num : LIST_SIZE(checkers_queue);
+    
+    if (checkers_child_all > CHECKERS_CHILD_NUM_MAX) {
+          unsigned trim_tail = checkers_child_all - CHECKERS_CHILD_NUM_MAX;
+          unsigned trim_head = checkers_total - checkers_child_all;
+    
+          for (i_checker=0; i_checker<trim_tail; i_checker++)
+                  free_list_element(checkers_queue, checkers_queue->tail);
+          for (i_checker=0; i_checker<trim_head; i_checker++)
+                  free_list_element(checkers_queue, checkers_queue->head);
+          global_data->checker_queue_num = trim_tail;
+    
+          start_check_child();
+    } else {
+          unsigned trim_head = checkers_total - checkers_child_all;
+          
+          for (i_checker=0; i_checker<trim_head; i_checker++)
+                   free_list_element(checkers_queue, checkers_queue->head);
+          global_data->checker_queue_num = checkers_child_all;
+    }
+}
+
+/* Daemon stop sequence */
+static void
+stop_check(int status)
+{
+	if (__test_bit(CONFIG_TEST_BIT, &debug))
+		return;
+
+	/* This runs in the main process, not in the context of a thread */
+	checker_terminate_phase1(false);
+
+	checker_terminate_phase2();
+
+	/* unreachable */
+	exit(status);
+}
+
+/* Daemon init sequence */
+static void
+start_check(list old_checkers_queue, data_t *prev_global_data)
+{
+	init_checkers_queue();
+
 	/* Parse configuration file */
-	global_data = alloc_global_data();
+	if (reload)
+		global_data = alloc_global_data();
 	check_data = alloc_check_data();
-	init_data(conf_file, check_init_keywords);
 	if (!check_data) {
-		stop_check();
+		stop_check(KEEPALIVED_EXIT_FATAL);
 		return;
 	}
-	init_global_data(global_data);
+
+	init_data(conf_file, check_init_keywords);
+
+	if (reload)
+		init_global_data(global_data, prev_global_data, true);
+
+	/* Update process name if necessary */
+	if ((!reload && global_data->lvs_process_name) ||
+	    (reload &&
+	     (!global_data->lvs_process_name != !prev_global_data->lvs_process_name ||
+	      (global_data->lvs_process_name && strcmp(global_data->lvs_process_name, prev_global_data->lvs_process_name)))))
+		set_process_name(global_data->lvs_process_name);
+
+	/* fill 'vsg' members of the virtual_server_t structure.
+	 * We must do that after parsing config, because
+	 * vs and vsg declarations may appear in any order,
+	 * but we must do it before validate_check_config().
+	 */
+	link_vsg_to_vs();
 
 	/* Post initializations */
-	log_message(LOG_INFO, "Configuration is using : %lu Bytes", mem_allocated);
+	if (!validate_check_config()) {
+		stop_check(KEEPALIVED_EXIT_CONFIG);
+		return;
+	}
 
-	/* SSL load static data & initialize common ctx context */
-	if (!init_ssl_ctx()) {
-		stop_check();
+#ifdef _MEM_CHECK_
+	log_message(LOG_INFO, "Configuration is using : %zu Bytes", mem_allocated);
+#endif
+
+	/* If we are just testing the configuration, then we terminate now */
+	if (__test_bit(CONFIG_TEST_BIT, &debug))
+		return;
+
+	/* Initialize sub-system if any virtual servers are configured */
+	if ((!LIST_ISEMPTY(check_data->vs) || (reload && !LIST_ISEMPTY(old_check_data->vs))) &&
+	    ipvs_start() != IPVS_SUCCESS) {
+		stop_check(KEEPALIVED_EXIT_FATAL);
 		return;
 	}
 
+	/* Ensure we can open sufficient file descriptors */
+	set_checker_max_fds();
+
+	/* Create a notify FIFO if needed, and open it */
+	notify_fifo_open(&global_data->notify_fifo, &global_data->lvs_notify_fifo, lvs_notify_fifo_script_exit, "lvs_");
+
+	/* Get current active addresses, and start update process */
+	if (using_ha_suspend || __test_bit(LOG_ADDRESS_CHANGES, &debug)) {
+		if (reload)
+			kernel_netlink_set_recv_bufs();
+		else
+			kernel_netlink_init();
+	}
+	else if (reload)
+		kernel_netlink_close();
+
+	/* Remove any entries left over from previous invocation */
+	if (!reload && global_data->lvs_flush)
+		ipvs_flush_cmd();
+
+#ifdef _WITH_SNMP_CHECKER_
+	if (!reload && global_data->enable_snmp_checker)
+		check_snmp_agent_init(global_data->snmp_socket);
+#endif
+
+	/* SSL load static data & initialize common ctx context */
+	if (check_data->ssl_required && !init_ssl_ctx())
+		stop_check(KEEPALIVED_EXIT_FATAL);
+
 	/* Processing differential configuration parsing */
 	if (reload) {
-		clear_diff_services();
-		copy_srv_states();
+		clear_diff_services(old_checkers_queue);
+		check_new_rs_state();
 		clear_diff_tunnel();
 	}
 
 	/* Initialize tunnel */
 	if (!init_tunnel()) {
-		stop_check();
+		stop_check(KEEPALIVED_EXIT_FATAL);
 		return;
 	}
 
-	/* Initialize IPVS topology */
-	if (!init_services()) {
-		stop_check();
-		return;
-	}
+	/* We can send SMTP messages from here so set the time */
+	set_time_now();
 
-	/* Dump configuration */
-	if (debug & 4) {
-		dump_global_data(global_data);
-		dump_check_data(check_data);
+	if (!global_data->checker_queue_num) {
+		/* Initialize IPVS topology */
+		if (!init_services())
+			stop_check(KEEPALIVED_EXIT_FATAL);
 	}
+	
+	checker_queue_adj();
 
-#ifdef _WITH_VRRP_
-	/* Initialize linkbeat */
-	init_interface_linkbeat();
-#endif
+	/* Dump configuration */
+	if (__test_bit(DUMP_CONF_BIT, &debug))
+		dump_data_check(NULL);
 
 	/* Register checkers thread */
 	register_checkers_thread();
-}
 
-/* Reload handler */
-int reload_check_thread(thread_t *);
-void
-sighup_check(void *v, int sig)
-{
-	thread_add_event(master, reload_check_thread, NULL, 0);
-}
+	/* Set the process priority and non swappable if configured */
+	set_process_priorities(
+#ifdef _HAVE_SCHED_RT_
+			       global_data->checker_realtime_priority,
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+			       global_data->checker_rlimit_rt,
+#endif
+#endif
+			       global_data->checker_process_priority, global_data->checker_no_swap ? 4096 : 0);
 
-/* Terminate handler */
-void
-sigend_check(void *v, int sig)
-{
-	if (master)
-		thread_add_terminate_event(master);
+#ifdef _HAVE_SCHED_RT_
+	/* Set the process cpu affinity if configured */
+	set_process_cpu_affinity(&global_data->checker_cpu_mask, "checker");
+#endif
 }
 
-/* CHECK Child signal handling */
 void
-check_signal_init(void)
+check_validate_config(void)
 {
-	signal_handler_init();
-	signal_set(SIGHUP, sighup_check, NULL);
-	signal_set(SIGINT, sigend_check, NULL);
-	signal_set(SIGTERM, sigend_check, NULL);
-	signal_ignore(SIGPIPE);
+	start_check(NULL, NULL);
 }
 
+#ifndef _DEBUG_
 /* Reload thread */
-int
-reload_check_thread(thread_t * thread)
+static int
+reload_check_thread(__attribute__((unused)) thread_ref_t thread)
 {
+	list old_checkers_queue;
+	bool with_snmp = false;
+
+	log_message(LOG_INFO, "Reloading");
+
+	/* Use standard scheduling while reloading */
+	reset_process_priorities();
+
 	/* set the reloading flag */
 	SET_RELOAD;
 
 	log_message(LOG_INFO, "Got SIGHUP, reloading checker configuration");
 
-	/* Signals handling */
-	signal_reset();
-	signal_handler_destroy();
+	/* Terminate all script process */
+	script_killall(master, SIGTERM, false);
 
-	/* Destroy master thread */
-	thread_destroy_master(master);
-	master = thread_make_master();
-	free_global_data(global_data);
-	free_checkers_queue();
-#ifdef _WITH_VRRP_
-	free_interface_queue();
+	/* Remove the notify fifo - we don't know if it will be the same after a reload */
+	notify_fifo_close(&global_data->notify_fifo, &global_data->lvs_notify_fifo);
+
+#if !defined _DEBUG_ && defined _WITH_SNMP_CHECKER_
+	if (prog_type == PROG_TYPE_CHECKER && global_data->enable_snmp_checker)
+		with_snmp = true;
 #endif
+
+	/* Destroy master thread */
+	checker_dispatcher_release();
+	thread_cleanup_master(master);
+	thread_add_base_threads(master, with_snmp);
+
+	/* Save previous checker data */
+	old_checkers_queue = checkers_queue;
+	checkers_queue = NULL;
+
 	free_ssl();
 	ipvs_stop();
 
 	/* Save previous conf data */
 	old_check_data = check_data;
 	check_data = NULL;
+	old_global_data = global_data;
+	global_data = NULL;
 
 	/* Reload the conf */
-	mem_allocated = 0;
-	check_signal_init();
-	signal_set(SIGCHLD, thread_child_handler, master);
-	start_check();
+	start_check(old_checkers_queue, old_global_data);
 
 	/* free backup data */
 	free_check_data(old_check_data);
+	free_global_data(old_global_data);
+	free_list(&old_checkers_queue);
 	UNSET_RELOAD;
 
 	return 0;
 }
 
-/* CHECK Child respawning thread */
-int
-check_respawn_thread(thread_t * thread)
+static int
+print_check_data(__attribute__((unused)) thread_ref_t thread)
 {
-	pid_t pid;
+        check_print_data();
+        return 0;
+}
 
-	/* Fetch thread args */
-	pid = THREAD_CHILD_PID(thread);
+static void
+sigusr1_check(__attribute__((unused)) void *v, __attribute__((unused)) int sig)
+{
+	log_message(LOG_INFO, "Printing checker data for process(%d) on signal",
+		    getpid());
+	thread_add_event(master, print_check_data, NULL, 0);
+}
 
-	/* Restart respawning thread */
-	if (thread->type == THREAD_CHILD_TIMEOUT) {
-		thread_add_child(master, check_respawn_thread, NULL,
-				 pid, RESPAWN_TIMER);
-		return 0;
-	}
+static void
+sigreload_check(__attribute__((unused)) void *v, __attribute__((unused)) int sig)
+{
+	thread_add_event(master, reload_check_thread, NULL, 0);
+}
+
+/* Terminate handler */
+static void
+sigend_check(__attribute__((unused)) void *v, __attribute__((unused)) int sig)
+{
+	if (master)
+		thread_add_start_terminate_event(master, start_checker_termination_thread);
+}
 
+/* CHECK Child signal handling */
+static void
+check_signal_init(void)
+{
+	signal_set(SIGHUP, sigreload_check, NULL);
+	signal_set(SIGINT, sigend_check, NULL);
+	signal_set(SIGTERM, sigend_check, NULL);
+	signal_set(SIGUSR1, sigusr1_check, NULL);
+	signal_ignore(SIGPIPE);
+}
+
+/* CHECK Child respawning thread */
+static int
+check_respawn_thread(thread_ref_t thread)
+{
 	/* We catch a SIGCHLD, handle it */
-	if (!(debug & 64)) {
-		log_message(LOG_ALERT, "Healthcheck child process(%d) died: Respawning", pid);
+	checkers_child = 0;
+
+	if (!__test_bit(DONT_RESPAWN_BIT, &debug)) {
+		log_message(LOG_ALERT, "Healthcheck child process(%d) died: Respawning", thread->u.c.pid);
 		start_check_child();
 	} else {
-		log_message(LOG_ALERT, "Healthcheck child process(%d) died: Exiting", pid);
+		log_message(LOG_ALERT, "Healthcheck child process(%d) died: Exiting", thread->u.c.pid);
 		raise(SIGTERM);
 	}
 	return 0;
 }
+#endif
+
+#ifdef THREAD_DUMP
+static void
+register_check_thread_addresses(void)
+{
+	register_scheduler_addresses();
+	register_signal_thread_addresses();
+	register_notify_addresses();
+
+	register_smtp_addresses();
+	register_keepalived_netlink_addresses();
+#ifdef _WITH_SNMP_
+	register_snmp_addresses();
+#endif
+
+	register_check_dns_addresses();
+	register_check_http_addresses();
+	register_check_misc_addresses();
+	register_check_smtp_addresses();
+	register_check_ssl_addresses();
+	register_check_tcp_addresses();
+#ifdef _WITH_BFD_
+	register_check_bfd_addresses();
+#endif
+
+#ifndef _DEBUG_
+	register_thread_address("reload_check_thread", reload_check_thread);
+	register_thread_address("start_checker_termination_thread", start_checker_termination_thread);
+#endif
+	register_thread_address("lvs_notify_fifo_script_exit", lvs_notify_fifo_script_exit);
+	register_thread_address("checker_shutdown_backstop_thread", checker_shutdown_backstop_thread);
+
+#ifndef _DEBUG_
+	register_signal_handler_address("sigreload_check", sigreload_check);
+	register_signal_handler_address("sigend_check", sigend_check);
+#endif
+}
+#endif
 
 /* Register CHECK thread */
 int
@@ -257,9 +595,14 @@ start_check_child(void)
 {
 #ifndef _DEBUG_
 	pid_t pid;
-	int ret;
+	const char *syslog_ident;
 
 	/* Initialize child process */
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		flush_log_file();
+#endif
+
 	pid = fork();
 
 	if (pid < 0) {
@@ -273,33 +616,74 @@ start_check_child(void)
 
 		/* Start respawning thread */
 		thread_add_child(master, check_respawn_thread, NULL,
-				 pid, RESPAWN_TIMER);
+				 pid, TIMER_NEVER);
+
 		return 0;
 	}
+	prctl(PR_SET_PDEATHSIG, SIGTERM);
+
+	prog_type = PROG_TYPE_CHECKER;
+
+	initialise_debug_options();
+
+#ifdef _WITH_BFD_
+	/* Close the write end of the BFD checker event notification pipe and the track_process fd */
+	close(bfd_checker_event_pipe[1]);
+
+#ifdef _WITH_VRRP_
+	close(bfd_vrrp_event_pipe[0]);
+	close(bfd_vrrp_event_pipe[1]);
+#endif
+#endif
+#ifdef _WITH_CN_PROC_
+	close_track_processes();
+#endif
+
+	if ((global_data->instance_name
+#if HAVE_DECL_CLONE_NEWNET
+			   || global_data->network_namespace
+#endif
+					       ) &&
+	     (check_syslog_ident = make_syslog_ident(PROG_CHECK)))
+		syslog_ident = check_syslog_ident;
+	else
+		syslog_ident = PROG_CHECK;
 
 	/* Opening local CHECK syslog channel */
-	openlog(PROG_CHECK, LOG_PID | ((debug & 1) ? LOG_CONS : 0),
-		(log_facility==LOG_DAEMON) ? LOG_LOCAL2 : log_facility);
+	if (!__test_bit(NO_SYSLOG_BIT, &debug))
+		openlog(syslog_ident, LOG_PID | ((__test_bit(LOG_CONSOLE_BIT, &debug)) ? LOG_CONS : 0)
+				    , (log_facility==LOG_DAEMON) ? LOG_LOCAL2 : log_facility);
+
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		open_log_file(log_file_name,
+				"check",
+#if HAVE_DECL_CLONE_NEWNET
+				global_data->network_namespace,
+#else
+				NULL,
+#endif
+				global_data->instance_name);
+#endif
+
+#ifdef _MEM_CHECK_
+	mem_log_init(PROG_CHECK, "Healthcheck child process");
+#endif
+
+	free_parent_mallocs_startup(true);
+
+	/* Clear any child finder functions set in parent */
+	set_child_finder_name(NULL);
 
 	/* Child process part, write pidfile */
 	if (!pidfile_write(checkers_pidfile, getpid())) {
 		log_message(LOG_INFO, "Healthcheck child process: cannot write pidfile");
-		exit(0);
+		exit(KEEPALIVED_EXIT_FATAL);
 	}
 
 	/* Create the new master thread */
-	signal_handler_destroy();
-	thread_destroy_master(master);
+	thread_destroy_master(master);	/* This destroys any residual settings from the parent */
 	master = thread_make_master();
-
-	/* change to / dir */
-	ret = chdir("/");
-	if (ret < 0) {
-		log_message(LOG_INFO, "Healthcheck child process: error chdir");
-	}
-
-	/* Set mask */
-	umask(0);
 #endif
 
 	/* If last process died during a reload, we can get there and we
@@ -307,16 +691,46 @@ start_check_child(void)
 	 */
 	UNSET_RELOAD;
 
+#ifndef _DEBUG_
 	/* Signal handling initialization */
 	check_signal_init();
+#endif
 
 	/* Start Healthcheck daemon */
-	start_check();
+	start_check(NULL, NULL);
+
+#ifdef _DEBUG_
+	return 0;
+#endif
+
+#ifdef THREAD_DUMP
+	register_check_thread_addresses();
+#endif
 
 	/* Launch the scheduling I/O multiplexer */
-	launch_scheduler();
+	launch_thread_scheduler(master);
 
 	/* Finish healthchecker daemon process */
-	stop_check();
-	exit(0);
+	if (two_phase_terminate)
+		checker_terminate_phase2();
+	else
+		stop_check(KEEPALIVED_EXIT_OK);
+
+#ifdef THREAD_DUMP
+	deregister_thread_addresses();
+#endif
+
+	/* unreachable */
+	exit(KEEPALIVED_EXIT_OK);
 }
+
+#ifdef THREAD_DUMP
+void
+register_check_parent_addresses(void)
+{
+#ifndef _DEBUG_
+	register_thread_address("print_check_data", print_check_data);
+	register_thread_address("check_respawn_thread", check_respawn_thread);
+#endif
+}
+#endif
diff --git a/tools/keepalived/keepalived/check/check_data.c b/tools/keepalived/keepalived/check/check_data.c
index e2e964f2c..feeb116ea 100644
--- a/tools/keepalived/keepalived/check/check_data.c
+++ b/tools/keepalived/keepalived/check/check_data.c
@@ -17,16 +17,31 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <netdb.h>
+#include "config.h"
+
+#include <stdint.h>
+#include <stdio.h>
+#include <inttypes.h>
+
+#include "main.h"
 #include "check_data.h"
 #include "check_api.h"
+#include "check_misc.h"
+#include "check_daemon.h"
+#include "global_data.h"
+#include "check_ssl.h"
 #include "logger.h"
-#include "memory.h"
 #include "utils.h"
 #include "ipwrapper.h"
+#include "parser.h"
+#include "libipvs.h"
+#include "keepalived_magic.h"
+#ifdef _WITH_BFD_
+#include "check_bfd.h"
+#endif
 
 /* global vars */
 check_data_t *check_data = NULL;
@@ -36,185 +51,44 @@ check_data_t *old_check_data = NULL;
 ssl_data_t *
 alloc_ssl(void)
 {
-	ssl_data_t *ssl = (ssl_data_t *) MALLOC(sizeof(ssl_data_t));
-	return ssl;
+	return (ssl_data_t *) MALLOC(sizeof(ssl_data_t));
 }
 void
 free_ssl(void)
 {
-	if (!check_data)
+	ssl_data_t *ssl;
+
+	if (!check_data || !check_data->ssl)
 		return;
 
-	ssl_data_t *ssl = check_data->ssl;
+	ssl = check_data->ssl;
 
-	if (!ssl)
-		return;
-	FREE_PTR(ssl->password);
-	FREE_PTR(ssl->cafile);
-	FREE_PTR(ssl->certfile);
-	FREE_PTR(ssl->keyfile);
+	clear_ssl(ssl);
+	FREE_CONST_PTR(ssl->password);
+	FREE_CONST_PTR(ssl->cafile);
+	FREE_CONST_PTR(ssl->certfile);
+	FREE_CONST_PTR(ssl->keyfile);
 	FREE(ssl);
+	check_data->ssl = NULL;
 }
 static void
-dump_ssl(void)
+dump_ssl(FILE *fp)
 {
-	if (!check_data)
-      return;
-
 	ssl_data_t *ssl = check_data->ssl;
 
+	if (!ssl->password && !ssl->cafile && !ssl->certfile && !ssl->keyfile) {
+		conf_write(fp, " Using autogen SSL context");
+		return;
+	}
+
 	if (ssl->password)
-		log_message(LOG_INFO, " Password : %s", ssl->password);
+		conf_write(fp, " Password : %s", ssl->password);
 	if (ssl->cafile)
-		log_message(LOG_INFO, " CA-file : %s", ssl->cafile);
+		conf_write(fp, " CA-file : %s", ssl->cafile);
 	if (ssl->certfile)
-		log_message(LOG_INFO, " Certificate file : %s", ssl->certfile);
+		conf_write(fp, " Certificate file : %s", ssl->certfile);
 	if (ssl->keyfile)
-		log_message(LOG_INFO, " Key file : %s", ssl->keyfile);
-	if (!ssl->password && !ssl->cafile && !ssl->certfile && !ssl->keyfile)
-		log_message(LOG_INFO, " Using autogen SSL context");
-}
-
-/* local IP address group facility functions */
-static void
-free_laddr_group(void *data)
-{
-	local_addr_group *laddr_group = data;
-	FREE_PTR(laddr_group->gname);
-	free_list(laddr_group->addr_ip);
-	free_list(laddr_group->range);
-	FREE(laddr_group);
-}
-static void
-dump_laddr_group(void *data)
-{
-	local_addr_group *laddr_group = data;
-
-	log_message(LOG_INFO, " local IP address group = %s", laddr_group->gname);
-	dump_list(laddr_group->addr_ip);
-	dump_list(laddr_group->range);
-}
-static void
-free_laddr_entry(void *data)
-{
-	FREE(data);
-}
-static void
-dump_laddr_entry(void *data)
-{
-	local_addr_entry *laddr_entry = data;
-
-	if (laddr_entry->range)
-		log_message(LOG_INFO, "   IP Range = %s-%d"
-				    , inet_sockaddrtos(&laddr_entry->addr)
-				    , laddr_entry->range);
-	else
-		log_message(LOG_INFO, "   IP = %s"
-				    , inet_sockaddrtos(&laddr_entry->addr));
-}
-void
-alloc_laddr_group(char *gname)
-{
-	int size = strlen(gname);
-	local_addr_group *new;
-
-	new = (local_addr_group *) MALLOC(sizeof (local_addr_group));
-	new->gname = (char *) MALLOC(size + 1);
-	memcpy(new->gname, gname, size);
-	new->addr_ip = alloc_list(free_laddr_entry, dump_laddr_entry);
-	new->range = alloc_list(free_laddr_entry, dump_laddr_entry);
-
-	list_add(check_data->laddr_group, new);
-}
-void
-alloc_laddr_entry(vector_t *strvec)
-{
-	local_addr_group *laddr_group = LIST_TAIL_DATA(check_data->laddr_group);
-	local_addr_entry *new;
-
-	new = (local_addr_entry *) MALLOC(sizeof (local_addr_entry));
-
-
-	new->range = inet_stor(vector_slot(strvec, 0));
-	inet_stosockaddr(vector_slot(strvec, 0), NULL, &new->addr);
-	strncpy(new->ifname, vector_slot(strvec, 1), sizeof(new->ifname));
-    
-	if (!new->range)
-		list_add(laddr_group->addr_ip, new);
-	else if ( (0 < new->range) && (new->range < 255) )
-		list_add(laddr_group->range, new);
-	else
-		log_message(LOG_INFO, "invalid: local IP address range %d", new->range);
-}
-
-/* blacklist IP address group facility functions */
-static void
-free_blklst_group(void *data)
-{
-        blklst_addr_group *blklst_group = data;
-        FREE_PTR(blklst_group->gname);
-        free_list(blklst_group->addr_ip);
-        free_list(blklst_group->range);
-        FREE(blklst_group);
-}
-static void
-dump_blklst_group(void *data)
-{
-        blklst_addr_group *blklst_group = data;
-
-        log_message(LOG_INFO, " blacllist IP address group = %s", blklst_group->gname);
-        dump_list(blklst_group->addr_ip);
-        dump_list(blklst_group->range);
-}
-static void
-free_blklst_entry(void *data)
-{
-        FREE(data);
-}
-static void
-dump_blklst_entry(void *data)
-{
-        blklst_addr_entry *blklst_entry = data;
-
-        if (blklst_entry->range)
-                log_message(LOG_INFO, "   IP Range = %s-%d"
-                                    , inet_sockaddrtos(&blklst_entry->addr)
-                                    , blklst_entry->range);
-        else
-                log_message(LOG_INFO, "   IP = %s"
-                                    , inet_sockaddrtos(&blklst_entry->addr));
-}
-void
-alloc_blklst_group(char *gname)
-{
-        int size = strlen(gname);
-        blklst_addr_group *new;
-
-        new = (blklst_addr_group *) MALLOC(sizeof (blklst_addr_group));
-        new->gname = (char *) MALLOC(size + 1);
-        memcpy(new->gname, gname, size);
-        new->addr_ip = alloc_list(free_blklst_entry, dump_blklst_entry);
-        new->range = alloc_list(free_blklst_entry, dump_blklst_entry);
-
-        list_add(check_data->blklst_group, new);
-}
-void
-alloc_blklst_entry(vector_t *strvec)
-{
-        blklst_addr_group *blklst_group = LIST_TAIL_DATA(check_data->blklst_group);
-        blklst_addr_entry *new;
-
-        new = (blklst_addr_entry *) MALLOC(sizeof (blklst_addr_entry));
-
-        new->range = inet_stor(vector_slot(strvec, 0));
-        inet_stosockaddr(vector_slot(strvec, 0), NULL, &new->addr);
-
-        if (!new->range)
-                list_add(blklst_group->addr_ip, new);
-        else if ( (0 < new->range) && (new->range < 255) )
-                list_add(blklst_group->range, new);
-        else
-                log_message(LOG_INFO, "invalid: blacklist IP address range %d", new->range);
+		conf_write(fp, " Key file : %s", ssl->keyfile);
 }
 
 /* Virtual server group facility functions */
@@ -223,20 +97,21 @@ free_vsg(void *data)
 {
 	virtual_server_group_t *vsg = data;
 	FREE_PTR(vsg->gname);
-	free_list(vsg->addr_ip);
-	free_list(vsg->range);
-	free_list(vsg->vfwmark);
+	free_list(&vsg->addr_range);
+	free_list(&vsg->addr_ip);
+	free_list(&vsg->vfwmark);
 	FREE(vsg);
 }
 static void
-dump_vsg(void *data)
+dump_vsg(FILE *fp, const void *data)
 {
-	virtual_server_group_t *vsg = data;
+	const virtual_server_group_t *vsg = data;
 
-	log_message(LOG_INFO, " Virtual Server Group = %s", vsg->gname);
-	dump_list(vsg->addr_ip);
-	dump_list(vsg->range);
-	dump_list(vsg->vfwmark);
+	conf_write(fp, " ------< Virtual server group >------");
+	conf_write(fp, " Virtual Server Group = %s", vsg->gname);
+	dump_list(fp, vsg->addr_range);
+	dump_list(fp, vsg->addr_ip); 
+	dump_list(fp, vsg->vfwmark);
 }
 static void
 free_vsg_entry(void *data)
@@ -244,55 +119,134 @@ free_vsg_entry(void *data)
 	FREE(data);
 }
 static void
-dump_vsg_entry(void *data)
+dump_vsg_entry(FILE *fp, const void *data)
 {
-	virtual_server_group_entry_t *vsg_entry = data;
+	const virtual_server_group_entry_t *vsg_entry = data;
+	uint16_t start;
 
-	if (vsg_entry->vfwmark)
-		log_message(LOG_INFO, "   FWMARK = %d", vsg_entry->vfwmark);
-	else if (vsg_entry->range)
-		log_message(LOG_INFO, "   VIP Range = %s-%d, VPORT = %d"
-				    , inet_sockaddrtos(&vsg_entry->addr)
-				    , vsg_entry->range
-				    , ntohs(inet_sockaddrport(&vsg_entry->addr)));
-	else
-		log_message(LOG_INFO, "   VIP = %s, VPORT = %d"
-				    , inet_sockaddrtos(&vsg_entry->addr)
-				    , ntohs(inet_sockaddrport(&vsg_entry->addr)));
+	if (vsg_entry->is_fwmark) {
+		conf_write(fp, "   FWMARK = %u", vsg_entry->vfwmark);
+		conf_write(fp, "   Alive: %u IPv4, %u IPv6",
+				vsg_entry->fwm4_alive, vsg_entry->fwm6_alive);
+	} else {
+		if (vsg_entry->range) {
+			start = vsg_entry->addr.ss_family == AF_INET ?
+				  ntohl(((const struct sockaddr_in*)&vsg_entry->addr)->sin_addr.s_addr) & 0xFF :
+				  ntohs(((const struct sockaddr_in6*)&vsg_entry->addr)->sin6_addr.s6_addr16[7]);
+			conf_write(fp,
+				    vsg_entry->addr.ss_family == AF_INET ?
+					"   VIP Range = %s-%u, VPORT = %d" :
+					"   VIP Range = %s-%x, VPORT = %d",
+				    inet_sockaddrtos(&vsg_entry->addr),
+				    start + vsg_entry->range,
+				    ntohs(inet_sockaddrport(&vsg_entry->addr)));
+		} else
+			conf_write(fp, "   VIP = %s, VPORT = %d"
+					    , inet_sockaddrtos(&vsg_entry->addr)
+					    , ntohs(inet_sockaddrport(&vsg_entry->addr)));
+		conf_write(fp, "     Alive: %u tcp, %u udp, %u sctp",
+			    vsg_entry->tcp_alive, vsg_entry->udp_alive, vsg_entry->sctp_alive);
+	}
+	conf_write(fp, "     reloaded = %s", vsg_entry->reloaded ? "True" : "False");
 }
 void
-alloc_vsg(char *gname)
+alloc_vsg(const char *gname)
 {
-	int size = strlen(gname);
 	virtual_server_group_t *new;
 
 	new = (virtual_server_group_t *) MALLOC(sizeof(virtual_server_group_t));
-	new->gname = (char *) MALLOC(size + 1);
-	memcpy(new->gname, gname, size);
+	new->gname = STRDUP(gname);
+	new->addr_range = alloc_list(free_vsg_entry, dump_vsg_entry);
 	new->addr_ip = alloc_list(free_vsg_entry, dump_vsg_entry);
-	new->range = alloc_list(free_vsg_entry, dump_vsg_entry);
 	new->vfwmark = alloc_list(free_vsg_entry, dump_vsg_entry);
 
 	list_add(check_data->vs_group, new);
 }
 void
-alloc_vsg_entry(vector_t *strvec)
+alloc_vsg_entry(const vector_t *strvec)
 {
 	virtual_server_group_t *vsg = LIST_TAIL_DATA(check_data->vs_group);
 	virtual_server_group_entry_t *new;
+	virtual_server_group_entry_t *old;
+	uint32_t start;
+	element e;
+	const char *port_str;
+	uint32_t range;
+	unsigned fwmark;
 
 	new = (virtual_server_group_entry_t *) MALLOC(sizeof(virtual_server_group_entry_t));
 
-	if (!strcmp(vector_slot(strvec, 0), "fwmark")) {
-		new->vfwmark = atoi(vector_slot(strvec, 1));
+	if (!strcmp(strvec_slot(strvec, 0), "fwmark")) {
+		if (!read_unsigned_strvec(strvec, 1, &fwmark, 0, UINT32_MAX, true)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s): fwmark '%s' must be in [0, %u] - ignoring", vsg->gname, strvec_slot(strvec, 1), UINT32_MAX);
+			FREE(new);
+			return;
+		}
+		new->vfwmark = fwmark;
+		new->is_fwmark = true;
 		list_add(vsg->vfwmark, new);
 	} else {
-		new->range = inet_stor(vector_slot(strvec, 0));
-		inet_stosockaddr(vector_slot(strvec, 0), vector_slot(strvec, 1), &new->addr);
-		if (!new->range)
-			list_add(vsg->addr_ip, new);
+		if (!inet_stor(strvec_slot(strvec, 0), &range)) {
+			FREE(new);
+			return;
+		}
+		new->range = (uint32_t)range;
+
+		if (vector_size(strvec) >= 2) {
+			/* Don't pass a port number of 0. This was added v2.0.7 to support legacy
+			 * configuration since previously having no port wasn't allowed. */
+			port_str = strvec_slot(strvec, 1);
+			if (!port_str[strspn(port_str, "0")])
+				port_str = NULL;
+		}
 		else
-			list_add(vsg->range, new);
+			port_str = NULL;
+
+		if (inet_stosockaddr(strvec_slot(strvec, 0), port_str, &new->addr)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid virtual server group IP address%s %s%s%s - skipping", strvec_slot(strvec, 0),
+						port_str ? "/port" : "", port_str ? "/" : "", port_str ? port_str : "");
+			FREE(new);
+			return;
+		}
+#ifndef LIBIPVS_USE_NL
+		if (new->addr.ss_family != AF_INET) {
+			report_config_error(CONFIG_GENERAL_ERROR, "IPVS does not support IPv6 in this build - skipping %s", strvec_slot(strvec, 0));
+			FREE(new);
+			return;
+		}
+#endif
+
+		/* Ensure the address family matches any previously configured addresses */
+		if (!LIST_ISEMPTY(vsg->addr_range)) {
+			e = LIST_HEAD(vsg->addr_range);
+			old = ELEMENT_DATA(e);
+			if (old->addr.ss_family != new->addr.ss_family) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Cannot mix IPv4 and IPv6 in virtual server group - %s", vsg->gname);
+				FREE(new);
+				return;
+			}
+		}
+
+		/* If no range specified, new->range == UINT32_MAX */
+		if (new->range == UINT32_MAX)
+			new->range = 0;
+		else {
+			if (new->addr.ss_family == AF_INET)
+				start = ntohl(((struct sockaddr_in *)&new->addr)->sin_addr.s_addr) & 0xFF;
+			else
+				start = ntohs(((struct sockaddr_in6 *)&new->addr)->sin6_addr.s6_addr16[7]);
+
+			if (start >= new->range) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Address range end is not greater than address range start - %s - skipping", strvec_slot(strvec, 0));
+				FREE(new);
+				return;
+			}
+			new->range -= start;
+		}
+
+		new->is_fwmark = false;
+		list_add(vsg->addr_ip, new);
+		list_add(vsg->addr_range, new);
 	}
 }
 
@@ -301,292 +255,627 @@ static void
 free_vs(void *data)
 {
 	virtual_server_t *vs = data;
-	FREE_PTR(vs->vsgname);
-	FREE_PTR(vs->virtualhost);
+	FREE_CONST_PTR(vs->vsgname);
+	FREE_CONST_PTR(vs->virtualhost);
 	FREE_PTR(vs->s_svr);
-	free_list(vs->rs);
-	FREE_PTR(vs->quorum_up);
-	FREE_PTR(vs->quorum_down);
+	free_list(&vs->rs);
+	free_notify_script(&vs->notify_quorum_up);
+	free_notify_script(&vs->notify_quorum_down);
 	FREE_PTR(vs->local_addr_gname);
 	FREE_PTR(vs->blklst_addr_gname);
 	FREE_PTR(vs->vip_bind_dev);
 	FREE(vs);
 }
+
 static void
-dump_vs(void *data)
+dump_forwarding_method(FILE *fp, const char *prefix, const real_server_t *rs)
 {
-	virtual_server_t *vs = data;
-
-	if (vs->vsgname)
-		log_message(LOG_INFO, " VS GROUP = %s", vs->vsgname);
-	else if (vs->vfwmark)
-		log_message(LOG_INFO, " VS FWMARK = %d", vs->vfwmark);
-	else
-		log_message(LOG_INFO, " VIP = %s, VPORT = %d"
-				    , inet_sockaddrtos(&vs->addr), ntohs(inet_sockaddrport(&vs->addr)));
-	if (vs->virtualhost)
-		log_message(LOG_INFO, "   VirtualHost = %s", vs->virtualhost);
-	log_message(LOG_INFO, "   delay_loop = %lu, lb_algo = %s",
-	       (vs->delay_loop >= TIMER_MAX_SEC) ? vs->delay_loop/TIMER_HZ :
-						   vs->delay_loop,
-	       vs->sched);
-	if (atoi(vs->timeout_persistence) > 0)
-		log_message(LOG_INFO, "   persistence timeout = %s",
-		       vs->timeout_persistence);
-	if (vs->granularity_persistence)
-		log_message(LOG_INFO, "   persistence granularity = %s",
-		       inet_ntop2(vs->granularity_persistence));
-	if (atoi(vs->bps) > 0)
-		log_message(LOG_INFO, "   in bytes per second = %s",
-			vs->bps);
-        if (atoi(vs->limit_proportion) > 0 && atoi(vs->limit_proportion) < 100)
-                log_message(LOG_INFO, "   limit proportion = %s",
-                        vs->limit_proportion);
-	log_message(LOG_INFO, "   protocol = %s",
-	       (vs->service_type == IPPROTO_TCP) ? "TCP" : "UDP");
-	log_message(LOG_INFO, "   alpha is %s, omega is %s",
-		    vs->alpha ? "ON" : "OFF", vs->omega ? "ON" : "OFF");
-	log_message(LOG_INFO, "   SYN proxy is %s", 
-		    vs->syn_proxy ? "ON" : "OFF");
-	log_message(LOG_INFO, "   quorum = %lu, hysteresis = %lu", vs->quorum, vs->hysteresis);
-	if (vs->quorum_up)
-		log_message(LOG_INFO, "   -> Notify script UP = %s",
-			    vs->quorum_up);
-	if (vs->quorum_down)
-		log_message(LOG_INFO, "   -> Notify script DOWN = %s",
-			    vs->quorum_down);
-	if (vs->ha_suspend)
-		log_message(LOG_INFO, "   Using HA suspend");
+	const char *fwd_method = "forwarding method = ";
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	const char *csum_str = "";
+	const char *tun_type = "TUN, type = ";
+#endif
 
-	switch (vs->loadbalancing_kind) {
-#ifdef _WITH_LVS_
+	switch (rs->forwarding_method) {
 	case IP_VS_CONN_F_MASQ:
-		log_message(LOG_INFO, "   lb_kind = NAT");
+		conf_write(fp, "   %s%sNAT", prefix, fwd_method);
 		break;
 	case IP_VS_CONN_F_DROUTE:
-		log_message(LOG_INFO, "   lb_kind = DR");
+		conf_write(fp, "   %s%sDR", prefix, fwd_method);
 		break;
 	case IP_VS_CONN_F_TUNNEL:
-		log_message(LOG_INFO, "   lb_kind = TUN");
+#ifdef _HAVE_IPVS_TUN_TYPE_
+		if (rs->tun_type == IP_VS_CONN_F_TUNNEL_TYPE_IPIP)
+			conf_write(fp, "   %s%s%sIPIP", prefix, fwd_method, tun_type);
+		else {
+#ifdef _HAVE_IPVS_TUN_CSUM_
+			csum_str = rs->tun_flags == IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM ? ", no checksum" :
+				   rs->tun_flags == IP_VS_TUNNEL_ENCAP_FLAG_CSUM ? ", checksum" :
+				   rs->tun_flags == IP_VS_TUNNEL_ENCAP_FLAG_REMCSUM ? ", remote checksum" :
+				   ", unknown checksum type";
+#endif
+			if (rs->tun_type == IP_VS_CONN_F_TUNNEL_TYPE_GUE)
+				conf_write(fp, "   %s%sGUE, port = %u%s", fwd_method, tun_type, ntohs(rs->tun_port), csum_str);
+#ifdef _HAVE_IPVS_TUN_GRE_
+			else if (rs->tun_type == IP_VS_CONN_F_TUNNEL_TYPE_GRE)
+				conf_write(fp, "   %s%sGRE%s", fwd_method, tun_type, csum_str);
+#endif
+		}
+#else
+		conf_write(fp, "   %s%sTUN", prefix, fwd_method);
+#endif
 		break;
 	case IP_VS_CONN_F_FULLNAT:
-		log_message(LOG_INFO, "   lb_kind = FNAT");
+		conf_write(fp, "default forwarding method = FNAT");
 		break;
 	case IP_VS_CONN_F_SNAT:
-		log_message(LOG_INFO, "   lb_kind = SNAT");
+		conf_write(fp, "default forwarding method = SNAT");
 		break;
+	}
+	
+}
+
+static void
+dump_vs(FILE *fp, const void *data)
+{
+	const virtual_server_t *vs = data;
+
+	conf_write(fp, " ------< Virtual server >------");
+	if (vs->vsgname)
+		conf_write(fp, " VS GROUP = %s", FMT_VS(vs));
+	else if (vs->vfwmark)
+		conf_write(fp, " VS FWMARK = %u", vs->vfwmark);
+	else
+		conf_write(fp, " VS VIP = %s, VPORT = %d"
+				    , inet_sockaddrtos(&vs->addr), ntohs(inet_sockaddrport(&vs->addr)));
+	if (vs->virtualhost)
+		conf_write(fp, "   VirtualHost = %s", vs->virtualhost);
+	if (vs->af != AF_UNSPEC)
+		conf_write(fp, "   Address family = inet%s", vs->af == AF_INET ? "" : "6");
+	conf_write(fp, "   connection timeout = %f", (double)vs->connection_to / TIMER_HZ);
+	conf_write(fp, "   delay_loop = %f", (double)vs->delay_loop / TIMER_HZ);
+	conf_write(fp, "   lvs_sched = %s", vs->sched);
+	conf_write(fp, "   Hashed = %sabled", vs->flags & IP_VS_SVC_F_HASHED ? "en" : "dis");
+#ifdef IP_VS_SVC_F_SCHED1
+	if (!strcmp(vs->sched, "sh"))
+	{
+		conf_write(fp, "   sh-port = %sabled", vs->flags & IP_VS_SVC_F_SCHED_SH_PORT ? "en" : "dis");
+		conf_write(fp, "   sh-fallback = %sabled", vs->flags & IP_VS_SVC_F_SCHED_SH_FALLBACK ? "en" : "dis");
+	}
+	else if (!strcmp(vs->sched, "mh"))
+	{
+		conf_write(fp, "   mh-port = %sabled", vs->flags & IP_VS_SVC_F_SCHED_MH_PORT ? "en" : "dis");
+		conf_write(fp, "   mh-fallback = %sabled", vs->flags & IP_VS_SVC_F_SCHED_MH_FALLBACK ? "en" : "dis");
+	}
+	else
+	{
+		conf_write(fp, "   flag-1 = %sabled", vs->flags & IP_VS_SVC_F_SCHED1 ? "en" : "dis");
+		conf_write(fp, "   flag-2 = %sabled", vs->flags & IP_VS_SVC_F_SCHED2 ? "en" : "dis");
+		conf_write(fp, "   flag-3 = %sabled", vs->flags & IP_VS_SVC_F_SCHED3 ? "en" : "dis");
+	}
 #endif
+#ifdef IP_VS_SVC_F_ONEPACKET
+	conf_write(fp, "   One packet scheduling = %sabled%s",
+			(vs->flags & IP_VS_SVC_F_ONEPACKET) ? "en" : "dis",
+			((vs->flags & IP_VS_SVC_F_ONEPACKET) && vs->service_type != IPPROTO_UDP) ? " (inactive due to not UDP)" : "");
+#endif
+
+	if (vs->persistence_timeout)
+		conf_write(fp, "   persistence timeout = %u", vs->persistence_timeout);
+	if (vs->persistence_granularity) {
+		if (vs->af == AF_INET6)
+			conf_write(fp, "   persistence granularity = %" PRIu32,
+				       vs->persistence_granularity);
+		else
+			conf_write(fp, "   persistence granularity = %s",
+				       inet_ntop2(vs->persistence_granularity));
 	}
+	if (vs->service_type == IPPROTO_TCP)
+		conf_write(fp, "   protocol = TCP");
+	else if (vs->service_type == IPPROTO_UDP)
+		conf_write(fp, "   protocol = UDP");
+	else if (vs->service_type == IPPROTO_SCTP)
+		conf_write(fp, "   protocol = SCTP");
+	else if (vs->service_type == 0)
+		conf_write(fp, "   protocol = none");
+	else
+		conf_write(fp, "   protocol = %d", vs->service_type);
+	conf_write(fp, "   alpha is %s", vs->alpha ? "ON" : "OFF");
+	conf_write(fp, "   omega is %s", vs->omega ? "ON" : "OFF");
+	if (vs->retry != UINT_MAX)
+		conf_write(fp, "   Retry count = %u" , vs->retry);
+	if (vs->delay_before_retry != ULONG_MAX)
+		conf_write(fp, "   Retry delay = %f" , (double)vs->delay_before_retry / TIMER_HZ);
+	if (vs->warmup != ULONG_MAX)
+		conf_write(fp, "   Warmup = %f", (double)vs->warmup / TIMER_HZ);
+	conf_write(fp, "   Inhibit on failure is %s", vs->inhibit ? "ON" : "OFF");
+	conf_write(fp, "   quorum = %u, hysteresis = %u", vs->quorum, vs->hysteresis);
+	if (vs->notify_quorum_up)
+		conf_write(fp, "   Quorum up notify script = %s, uid:gid %u:%u",
+			    cmd_str(vs->notify_quorum_up), vs->notify_quorum_up->uid, vs->notify_quorum_up->gid);
+	if (vs->notify_quorum_down)
+		conf_write(fp, "   Quorum down notify script = %s, uid:gid %u:%u",
+			    cmd_str(vs->notify_quorum_down), vs->notify_quorum_down->uid, vs->notify_quorum_down->gid);
+	if (vs->ha_suspend)
+		conf_write(fp, "   Using HA suspend");
+	conf_write(fp, "   Using smtp notification = %s", vs->smtp_alert ? "yes" : "no");
+
+	real_server_t rs = { .forwarding_method = vs->forwarding_method };
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	rs.tun_type = vs->tun_type;
+	rs.tun_port = vs->tun_port;
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	rs.tun_flags = vs->tun_flags;
+#endif
+#endif
+	dump_forwarding_method(fp, "default ", &rs);
 
-	switch (vs->hash_target) {
+	if (vs->s_svr) {
+		conf_write(fp, "   sorry server = %s"
+				    , FMT_RS(vs->s_svr, vs));
+		dump_forwarding_method(fp, "sorry server ", vs->s_svr);
+	}
+
+	if (vs->bps > 0)
+		conf_write(fp, " in bytes per second = %d", vs->bps);
+
+	if (vs->limit_proportion > 0
+		&& vs->limit_proportion < 100)
+		conf_write(fp, "   limit proportion = %d", vs->limit_proportion);
+
+	if (vs->local_addr_gname)
+		conf_write(fp, "   LOCAL_ADDR GROUP = %s", vs->local_addr_gname);
+
+	if (vs->blklst_addr_gname)
+		conf_write(fp, "   BLACK_LIST GROUP = %s", vs->blklst_addr_gname);
 
+	if (vs->vip_bind_dev)
+		conf_write(fp, "   vip_bind_dev = %s", vs->blklst_addr_gname);
+
+	conf_write(fp, " SYN proxy is %s", vs->syn_proxy ? "ON" : "OFF");
+
+        switch (vs->hash_target) {
 	case IP_VS_SVC_F_SIP_HASH:
-		log_message(LOG_INFO, "   hash target = sip");
+		conf_write(fp, "   hash target = sip");
 		break;
 	case IP_VS_SVC_F_QID_HASH:
-		log_message(LOG_INFO, "   hash target = quicid");
+		conf_write(fp, "   hash target = quicid");
 		break;
 	default:
-		log_message(LOG_INFO, "   hash target not support");
+		conf_write(fp, "   hash target not support");
 		break;
 	}
 
-	if (vs->s_svr) {
-		log_message(LOG_INFO, "   sorry server = %s"
-				    , FMT_RS(vs->s_svr));
-	}
-	if (!LIST_ISEMPTY(vs->rs))
-		dump_list(vs->rs);
-	if (vs->local_addr_gname)
-		log_message(LOG_INFO, " LOCAL_ADDR GROUP = %s", vs->local_addr_gname);
-        if (vs->blklst_addr_gname)
-                log_message(LOG_INFO, " BLACK_LIST GROUP = %s", vs->blklst_addr_gname);
-	if (vs->vip_bind_dev)
-		log_message(LOG_INFO, " vip_bind_dev = %s", vs->vip_bind_dev);
+	conf_write(fp, "   alive = %d", vs->alive);
+	conf_write(fp, "   quorum_state_up = %d", vs->quorum_state_up);
+	conf_write(fp, "   reloaded = %d", vs->reloaded);
+
+	dump_list(fp, vs->rs);
 }
 
 void
-alloc_vs(char *ip, char *port)
+alloc_vs(const char *param1, const char *param2)
 {
-	int size = strlen(port);
 	virtual_server_t *new;
+	const char *port_str;
+	unsigned fwmark;
 
 	new = (virtual_server_t *) MALLOC(sizeof(virtual_server_t));
 
-	if (!strcmp(ip, "group")) {
-		new->vsgname = (char *) MALLOC(size + 1);
-		memcpy(new->vsgname, port, size);
-	} else if (!strcmp(ip, "fwmark")) {
-		new->vfwmark = atoi(port);
-	} else if (!strcmp(ip, "match")) {
-		new->loadbalancing_kind = IP_VS_CONN_F_SNAT;
+	new->af = AF_UNSPEC;
+
+	if (!strcmp(param1, "group"))
+		new->vsgname = STRDUP(param2);
+	else if (!strcmp(param1, "fwmark")) {
+		if (!read_unsigned(param2, &fwmark, 0, UINT32_MAX, true)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "virtual server fwmark '%s' must be in [0, %u] - ignoring", param2, UINT32_MAX);
+			skip_block(true);
+			FREE(new);
+			return;
+		}
+		new->vfwmark = fwmark;
+	}
+	else if (!strcmp(param1, "match")) {
+		new->forwarding_method = IP_VS_CONN_F_SNAT; 
+
 	} else {
-		inet_stosockaddr(ip, port, &new->addr);
+		/* Don't pass a zero for port number to inet_stosockaddr. This was added in v2.0.7
+		 * to support legacy configuration since previously having no port wasn't allowed. */
+		port_str = (param2 && param2[strspn(param2, "0")]) ? param2 : NULL;
+		if (inet_stosockaddr(param1, port_str, &new->addr)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid virtual server IP address%s %s%s%s - skipping",
+						port_str ? "/port" : "", param1, port_str ? "/" : "", port_str ? port_str : "");
+			skip_block(true);
+			FREE(new);
+			return;
+		}
+
+		new->af = new->addr.ss_family;
+#ifndef LIBIPVS_USE_NL
+		if (new->af != AF_INET && new->af != AF_INET6) {
+			report_config_error(CONFIG_GENERAL_ERROR, "IPVS with IPv4 & IPv6 is supported only by this build");
+			FREE(new);
+			skip_block(true);
+			return;
+		}
+#endif
 	}
 
-	new->delay_loop = KEEPALIVED_DEFAULT_DELAY;
-	strncpy(new->timeout_persistence, "0", 1);
-	strncpy(new->bps, "0", 1);
-	strncpy(new->limit_proportion, "100", 3);
-	new->conn_timeout = 0;
 	new->virtualhost = NULL;
-	new->alpha = 0;
-	new->omega = 0;
-	new->syn_proxy = 0;
-	new->quorum_up = NULL;
-	new->quorum_down = NULL;
+	new->alpha = false;
+	new->omega = false;
+	new->notify_quorum_up = NULL;
+	new->notify_quorum_down = NULL;
 	new->quorum = 1;
 	new->hysteresis = 0;
-	new->quorum_state = UP;
+	new->quorum_state_up = true;
+	new->flags = 0;
+	new->forwarding_method = IP_VS_CONN_F_FWD_MASK;		/* So we can detect if it has been set */
+	new->connection_to = 5 * TIMER_HZ;
+	new->delay_loop = KEEPALIVED_DEFAULT_DELAY;
+	new->warmup = ULONG_MAX;
+	new->retry = UINT_MAX;
+	new->delay_before_retry = ULONG_MAX;
+	new->weight = 1;
+	new->smtp_alert = -1;
+	new->conn_timeout = 0;
+	new->syn_proxy = 0;
 	new->local_addr_gname = NULL;
 	new->blklst_addr_gname = NULL;
 	new->vip_bind_dev = NULL;
 	new->hash_target = 0;
+	new->bps = 0;
+	new->limit_proportion = 100;
 	memset(new->srange, 0, 256);
 	memset(new->drange, 0, 256);
 	memset(new->iifname, 0, IFNAMSIZ);
 	memset(new->oifname, 0, IFNAMSIZ);
 
+
 	list_add(check_data->vs, new);
 }
 
-/* Sorry server facility functions */
-void
-alloc_ssvr(char *ip, char *port)
+/*local address group facility functions*/
+static void 
+free_laddr_group(void *data) 
 {
-	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-
-	vs->s_svr = (real_server_t *) MALLOC(sizeof(real_server_t));
-	vs->s_svr->weight = 1;
-	vs->s_svr->iweight = 1;
-	inet_stosockaddr(ip, port, &vs->s_svr->addr);
+    local_addr_group *laddr_group = (local_addr_group*)data;
+    FREE_PTR(laddr_group->gname);
+    free_list(&laddr_group->addr_ip);
+    free_list(&laddr_group->range);
+    FREE(laddr_group);
 }
 
-/* Real server facility functions */
 static void
-free_rs(void *data)
+dump_laddr_group(FILE *fp, const void *data)
 {
-	real_server_t *rs = data;
-	FREE_PTR(rs->notify_up);
-	FREE_PTR(rs->notify_down);
-	free_list(rs->failed_checkers);
-	FREE(rs);
+	const local_addr_group *laddr_group = data;
+
+	log_message(LOG_INFO, " local IP address group = %s", laddr_group->gname);
+	dump_list(fp, laddr_group->addr_ip);
+	dump_list(fp, laddr_group->range);
 }
 static void
-dump_rs(void *data)
+free_laddr_entry(void *data)
 {
-	real_server_t *rs = data;
-
-	log_message(LOG_INFO, "   RIP = %s, RPORT = %d, WEIGHT = %d"
-			    , inet_sockaddrtos(&rs->addr)
-			    , ntohs(inet_sockaddrport(&rs->addr))
-			    , rs->weight);
-	if (rs->inhibit)
-		log_message(LOG_INFO, "     -> Inhibit service on failure");
-	if (rs->notify_up)
-		log_message(LOG_INFO, "     -> Notify script UP = %s",
-		       rs->notify_up);
-	if (rs->notify_down)
-		log_message(LOG_INFO, "     -> Notify script DOWN = %s",
-		       rs->notify_down);
+	FREE(data);
 }
-
 static void
-free_failed_checkers(void *data)
+dump_laddr_entry(FILE *fp, const void *data)
 {
-	FREE(data);
+	const local_addr_entry *laddr_entry = data;
+
+	if (laddr_entry->range)
+	    conf_write(fp, "   IP Range = %s-%d"
+				    , inet_sockaddrtos(&laddr_entry->addr)
+				    , laddr_entry->range);
+	else
+	    conf_write(fp, "   IP = %s"
+				    , inet_sockaddrtos(&laddr_entry->addr));
 }
+void
+alloc_laddr_group(char *gname)
+{
+	int size = strlen(gname);
+	local_addr_group *new;
+
+	new = (local_addr_group *) MALLOC(sizeof (local_addr_group));
+	new->gname = (char *) MALLOC(size + 1);
+	memcpy(new->gname, gname, size);
+	new->addr_ip = alloc_list(free_laddr_entry, dump_laddr_entry);
+	new->range = alloc_list(free_laddr_entry, dump_laddr_entry);
 
+	list_add(check_data->laddr_group, new);
+}
 void
-alloc_rs(char *ip, char *port)
+alloc_laddr_entry(const vector_t *strvec)
 {
-	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	real_server_t *new;
+	local_addr_group *laddr_group = LIST_TAIL_DATA(check_data->laddr_group);
+	local_addr_entry *new;
 
-	new = (real_server_t *) MALLOC(sizeof(real_server_t));
-	inet_stosockaddr(ip, port, &new->addr);
+	new = (local_addr_entry *) MALLOC(sizeof (local_addr_entry));
 
-	new->weight = 1;
-	new->iweight = 1;
-	new->failed_checkers = alloc_list(free_failed_checkers, NULL);
+	inet_stor(vector_slot(strvec, 0), &new->range);
+	/* If no range specified, new->range == UINT32_MAX */
+	if (new->range == UINT32_MAX)
+		new->range = 0;
+	inet_stosockaddr(vector_slot(strvec, 0), NULL, &new->addr);
+	strncpy(new->ifname, vector_slot(strvec, 1), sizeof(new->ifname));
 
-	if (LIST_ISEMPTY(vs->rs))
-		vs->rs = alloc_list(free_rs, dump_rs);
-	list_add(vs->rs, new);
+	if (!new->range)
+		list_add(laddr_group->addr_ip, new);
+	else if ( (0 < new->range) && (new->range < 255) )
+		list_add(laddr_group->range, new);
+	else
+		log_message(LOG_INFO, "invalid: local IP address range %d", new->range);
 }
 
+/* blacklist IP address group facility functions */
 static void
-free_tunnel_group(void *data)
+free_blklst_group(void *data)
 {
-	tunnel_group *group = data;
-	if (!group)
-		return;
-
-	FREE_PTR(group->gname);
-	free_list(group->tunnel_entry);
-	FREE(group);
+	blklst_addr_group *blklst_group = data;
+	FREE_PTR(blklst_group->gname);
+	free_list(&blklst_group->addr_ip);
+	free_list(&blklst_group->range);
+	FREE(blklst_group);
 }
 
 static void
-dump_tunnel_group(void *data)
+dump_blklst_group(FILE *fp, const void *data)
 {
-	tunnel_group *group = data;
-	if (!group)
-		return;
+	const blklst_addr_group *blklst_group = data;
 
-	log_message(LOG_INFO, "tunnel group = %s", group->gname);
-	dump_list(group->tunnel_entry);
+	log_message(LOG_INFO, " blacllist IP address group = %s", blklst_group->gname);
+	dump_list(fp, blklst_group->addr_ip);
+	dump_list(fp, blklst_group->range);
 }
 
 static void
-free_tunnel_entry(void *data)
+free_blklst_entry(void *data)
 {
-	if (!data)
-		return;
-
 	FREE(data);
 }
 
 static void
-dump_tunnel_entry(void *data)
+dump_blklst_entry(FILE *fp, const void *data)
 {
-    tunnel_entry *entry = data;
-    if (!entry)
-       return;
+	const blklst_addr_entry *blklst_entry = data;
 
-    log_message(LOG_INFO, "tunnel name = %s, local_ip = %s, remote_ip = %s,"
-				" kind = %s, dev = %s",
-				entry->ifname,
-				inet_sockaddrtos(&entry->local),
-				inet_sockaddrtos(&entry->remote),
-				entry->kind,
-				entry->link);
+	if (blklst_entry->range)
+	    conf_write(fp, "   IP Range = %s-%d"
+			, inet_sockaddrtos(&blklst_entry->addr)
+			, blklst_entry->range);
+	else
+	    conf_write(fp, "   IP = %s"
+			, inet_sockaddrtos(&blklst_entry->addr));
 }
 
-void alloc_tunnel(char *gname)
+void
+alloc_blklst_group(char *gname)
 {
 	int size = strlen(gname);
-	tunnel_group *new;
+	blklst_addr_group *new;
 
-	new = (tunnel_group *) MALLOC(sizeof(tunnel_group));
+	new = (blklst_addr_group *) MALLOC(sizeof (blklst_addr_group));
 	new->gname = (char *) MALLOC(size + 1);
 	memcpy(new->gname, gname, size);
-	new->tunnel_entry = alloc_list(free_tunnel_entry, dump_tunnel_entry);
-	list_add(check_data->tunnel_group, new);
+	new->addr_ip = alloc_list(free_blklst_entry, dump_blklst_entry);
+	new->range = alloc_list(free_blklst_entry, dump_blklst_entry);
+
+	list_add(check_data->blklst_group, new);
+}
+
+void
+alloc_blklst_entry(const vector_t *strvec)
+{
+	blklst_addr_group *blklst_group = LIST_TAIL_DATA(check_data->blklst_group);
+	blklst_addr_entry *new;
+
+	new = (blklst_addr_entry *) MALLOC(sizeof (blklst_addr_entry));
+
+	inet_stor(vector_slot(strvec, 0), &new->range);
+	/* If no range specified, new->range == UINT32_MAX */
+	if (new->range == UINT32_MAX)
+		new->range = 0;
+	inet_stosockaddr(vector_slot(strvec, 0), NULL, &new->addr);
+
+	if (!new->range)
+		list_add(blklst_group->addr_ip, new);
+	else if ( (0 < new->range) && (new->range < 255) )
+		list_add(blklst_group->range, new);
+	else
+		log_message(LOG_INFO, "invalid: blacklist IP address range %d", new->range);
+}
+
+/* Sorry server facility functions */
+void
+alloc_ssvr(const char *ip, const char *port)
+{
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	const char *port_str;
+
+	/* inet_stosockaddr rejects port 0 */
+	port_str = (port && port[strspn(port, "0")]) ? port : NULL;
+
+	vs->s_svr = (real_server_t *) MALLOC(sizeof(real_server_t));
+	vs->s_svr->weight = 1;
+	vs->s_svr->iweight = 1;
+	vs->s_svr->forwarding_method = vs->forwarding_method;
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	vs->s_svr->tun_type = vs->tun_type;
+	vs->s_svr->tun_port = vs->tun_port;
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	vs->s_svr->tun_flags = vs->tun_flags;
+#endif
+#endif
+	if (inet_stosockaddr(ip, port_str, &vs->s_svr->addr)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid sorry server IP address %s - skipping", ip);
+		FREE(vs->s_svr);
+		vs->s_svr = NULL;
+		return;
+	}
+}
+
+/* Real server facility functions */
+static void
+free_rs(void *data)
+{
+	real_server_t *rs = data;
+
+	free_notify_script(&rs->notify_up);
+	free_notify_script(&rs->notify_down);
+#ifdef _WITH_BFD_
+	free_list(&rs->tracked_bfds);
+#endif
+	FREE_CONST_PTR(rs->virtualhost);
+	FREE(rs);
+}
+
+static void
+dump_rs(FILE *fp, const void *data)
+{
+	const real_server_t *rs = data;
+#ifdef _WITH_BFD_
+	bfd_checker_t *cbfd;
+	element e;
+#endif
+
+	conf_write(fp, "   ------< Real server >------");
+	conf_write(fp, "   RIP = %s, RPORT = %d, WEIGHT = %d"
+			    , inet_sockaddrtos(&rs->addr)
+			    , ntohs(inet_sockaddrport(&rs->addr))
+			    , rs->weight);
+	dump_forwarding_method(fp, "", rs);
+
+	conf_write(fp, "   Alpha is %s", rs->alpha ? "ON" : "OFF");
+	conf_write(fp, "   connection timeout = %f", ((double)rs->connection_to) / TIMER_HZ);
+	conf_write(fp, "   connection limit range = %" PRIu32 " -> %" PRIu32, rs->l_threshold, rs->u_threshold);
+	conf_write(fp, "   Delay loop = %f" , (double)rs->delay_loop / TIMER_HZ);
+	if (rs->retry != UINT_MAX)
+		conf_write(fp, "   Retry count = %u" , rs->retry);
+	if (rs->delay_before_retry != ULONG_MAX)
+		conf_write(fp, "   Retry delay = %f" , (double)rs->delay_before_retry / TIMER_HZ);
+	if (rs->warmup != ULONG_MAX)
+		conf_write(fp, "   Warmup = %f", (double)rs->warmup / TIMER_HZ);
+	conf_write(fp, "   Inhibit on failure is %s", rs->inhibit ? "ON" : "OFF");
+
+	if (rs->notify_up)
+		conf_write(fp, "     RS up notify script = %s, uid:gid %u:%u",
+				cmd_str(rs->notify_up), rs->notify_up->uid, rs->notify_up->gid);
+	if (rs->notify_down)
+		conf_write(fp, "     RS down notify script = %s, uid:gid %u:%u",
+				cmd_str(rs->notify_down), rs->notify_down->uid, rs->notify_down->gid);
+	if (rs->virtualhost)
+		conf_write(fp, "    VirtualHost = %s", rs->virtualhost);
+	conf_write(fp, "   Using smtp notification = %s", rs->smtp_alert ? "yes" : "no");
+
+	conf_write(fp, "   initial weight = %d", rs->iweight);
+	conf_write(fp, "   previous weight = %d", rs->pweight);
+	conf_write(fp, "   alive = %d", rs->alive);
+	conf_write(fp, "   num failed checkers = %u", rs->num_failed_checkers);
+	conf_write(fp, "   RS set = %d", rs->set);
+	conf_write(fp, "   reloaded = %d", rs->reloaded);
+
+#ifdef _WITH_BFD_
+	if (!LIST_ISEMPTY(rs->tracked_bfds)) {
+		conf_write(fp, "=== Tracked BFDs ===");
+		LIST_FOREACH(rs->tracked_bfds, cbfd, e)
+			conf_write(fp, "     %s", cbfd->bfd->bname);
+	}
+#endif
 }
 
-void alloc_tunnel_entry(char *name)
+void
+alloc_rs(const char *ip, const char *port)
 {
-	tunnel_group *gtunnel = LIST_TAIL_DATA(check_data->tunnel_group);
-	tunnel_entry *new;
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	real_server_t *new;
+	const char *port_str;
+
+	/* inet_stosockaddr rejects port 0 */
+	port_str = (port && port[strspn(port, "0")]) ? port : NULL;
 
-	new = (tunnel_entry *) MALLOC(sizeof(tunnel_entry));
-	strncpy(new->ifname, name, sizeof(new->ifname) - 1);
+	new = (real_server_t *) MALLOC(sizeof(real_server_t));
+	if (inet_stosockaddr(ip, port_str, &new->addr)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid real server ip address/port %s/%s - skipping", ip, port);
+		skip_block(true);
+		FREE(new);
+		return;
+	}
+
+#ifndef LIBIPVS_USE_NL
+	if (new->addr.ss_family != AF_INET && new->addr.ss_family != AF_INET6) {
+		report_config_error(CONFIG_GENERAL_ERROR, "IPVS does with IPv4 & ipV6 is supported only in this build - skipping %s/%s", ip, port);
+		skip_block(true);
+		FREE(new);
+		return;
+	}
+#else
+#if !HAVE_DECL_IPVS_DEST_ATTR_ADDR_FAMILY
+	if (vs->af != AF_UNSPEC && new->addr.ss_family != vs->af) {
+		if (!(new->addr.ss_family == AF_INET && vs->af == AF_INET6)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Your dpvs with NAT4to4 or NAT6to6 or NAT6to4 is supported only by this build");
+			skip_block(true);
+			FREE(new);
+			return;
+		}
+	}
+#endif
+#endif
 
-	if (gtunnel->tunnel_entry)
-		list_add(gtunnel->tunnel_entry, new);
+	new->weight = INT_MAX;
+	new->forwarding_method = vs->forwarding_method;
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	new->tun_type = vs->tun_type;
+	new->tun_port = vs->tun_port;
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	new->tun_flags = vs->tun_flags;
+#endif
+#endif
+	new->alpha = -1;
+	new->inhibit = -1;
+	new->connection_to = UINT_MAX;
+	new->delay_loop = ULONG_MAX;
+	new->warmup = ULONG_MAX;
+	new->retry = UINT_MAX;
+	new->delay_before_retry = ULONG_MAX;
+	new->virtualhost = NULL;
+	new->smtp_alert = -1;
+
+// ??? alloc list in alloc_vs
+	if (!LIST_EXISTS(vs->rs))
+		vs->rs = alloc_list(free_rs, dump_rs);
+	list_add(vs->rs, new);
+
+	clear_dynamic_misc_check_flag();
+}
+
+#ifdef _WITH_BFD_
+/* Track bfd dump */
+static void
+dump_checker_bfd(FILE *fp, const void *track_data)
+{
+	const checker_tracked_bfd_t *cbfd = track_data;
+
+	conf_write(fp, " Checker Track BFD = %s", cbfd->bname);
+//	conf_write(fp, "   Weight = %d", cbfd->weight);
+	conf_write(fp, "   Tracking RS = %u", cbfd->tracking_rs ? LIST_SIZE(cbfd->tracking_rs) : 0);
+	if (cbfd->tracking_rs)
+		dump_list(fp, cbfd->tracking_rs);
 }
 
+static void
+free_checker_bfd(void *track_data)
+{
+	checker_tracked_bfd_t *cbfd = track_data;
+
+	FREE(cbfd->bname);
+	free_list(&cbfd->tracking_rs);
+	FREE(track_data);
+}
+#endif
+
 /* data facility functions */
 check_data_t *
 alloc_check_data(void)
@@ -596,9 +885,11 @@ alloc_check_data(void)
 	new = (check_data_t *) MALLOC(sizeof(check_data_t));
 	new->vs = alloc_list(free_vs, dump_vs);
 	new->vs_group = alloc_list(free_vsg, dump_vsg);
+#ifdef _WITH_BFD_
+	new->track_bfds = alloc_list(free_checker_bfd, dump_checker_bfd);
+#endif
 	new->laddr_group = alloc_list(free_laddr_group, dump_laddr_group);
 	new->blklst_group = alloc_list(free_blklst_group, dump_blklst_group);
-	new->tunnel_group = alloc_list(free_tunnel_group, dump_tunnel_group);
 
 	return new;
 }
@@ -608,47 +899,56 @@ free_check_data(check_data_t *data)
 {
 	if (!check_data)
 		return;
-	free_list(data->vs);
-	free_list(data->vs_group);
-	free_list(data->laddr_group);
-	free_list(data->blklst_group);
-	free_list(data->tunnel_group);
-
+	free_list(&data->vs);
+	free_list(&data->vs_group);
+#ifdef _WITH_BFD_
+	free_list(&data->track_bfds);
+#endif
+	free_list(&data->laddr_group);
+	free_list(&data->blklst_group);
 	FREE(data);
 }
 
 void
-dump_check_data(check_data_t *data)
+dump_check_data(FILE *fp, check_data_t *data)
 {
 	if (data->ssl) {
-		log_message(LOG_INFO, "------< SSL definitions >------");
-		dump_ssl();
+		conf_write(fp, "------< SSL definitions >------");
+		dump_ssl(fp);
 	}
 	if (!LIST_ISEMPTY(data->vs)) {
-		log_message(LOG_INFO, "------< LVS Topology >------");
-		log_message(LOG_INFO, " System is compiled with LVS v%d.%d.%d",
+		conf_write(fp, "------< LVS Topology >------");
+		conf_write(fp, " System is compiled with LVS v%d.%d.%d",
 		       NVERSION(IP_VS_VERSION_CODE));
 		if (!LIST_ISEMPTY(data->laddr_group))
-			dump_list(data->laddr_group);
+			dump_list(fp, data->laddr_group);
 		if (!LIST_ISEMPTY(data->blklst_group))
-			dump_list(data->blklst_group);
+			dump_list(fp, data->blklst_group);
 		if (!LIST_ISEMPTY(data->vs_group))
-			dump_list(data->vs_group);
-		dump_list(data->vs);
+			dump_list(fp, data->vs_group);
+		dump_list(fp, data->vs);
 	}
+	dump_checkers_queue(fp);
 
-	if (!LIST_ISEMPTY(data->tunnel_group)) {
-		log_message(LOG_INFO, "------< Tunnel definitions >------");
-		dump_list(data->tunnel_group);
+#ifdef _WITH_BFD_
+	if (!LIST_ISEMPTY(data->track_bfds)) {
+		conf_write(fp, "------< Checker track BFDs >------");
+		dump_list(fp, data->track_bfds);
 	}
+#endif
+}
+
+void
+dump_data_check(FILE *fp)
+{
+	dump_global_data(fp, global_data);
 
-	dump_checkers_queue();
+	dump_check_data(fp, check_data);
 }
 
-char *
-format_vs (virtual_server_t *vs)
+const char *
+format_vs(const virtual_server_t *vs)
 {
-	static char addr_str[INET6_ADDRSTRLEN + 1];
 	/* alloc large buffer because of unknown length of vs->vsgname */
 	static char ret[512];
 
@@ -657,12 +957,374 @@ format_vs (virtual_server_t *vs)
 			, vs->vsgname
 			, ntohs(inet_sockaddrport(&vs->addr)));
 	else if (vs->vfwmark)
-		snprintf (ret, sizeof (ret) - 1, "FWM %d", vs->vfwmark);
-	else {
-		inet_sockaddrtos2(&vs->addr, addr_str);
-		snprintf(ret, sizeof(ret) - 1, "[%s]:%d"
-			, addr_str
-			, ntohs(inet_sockaddrport(&vs->addr)));
-	}
+		snprintf (ret, sizeof (ret) - 1, "FWM %u", vs->vfwmark);
+	else
+		snprintf(ret, sizeof(ret) - 1, "%s"
+			, inet_sockaddrtotrio(&vs->addr, vs->service_type));
+
+	return ret;
+}
+
+const char *
+format_vsge(const virtual_server_group_entry_t *vsge)
+{
+	/* alloc large buffer because of unknown length of vs->vsgname */
+	static char ret[INET6_ADDRSTRLEN + 1 + 4 + 1 + 5]; /* IPv6 addr + -abcd:ppppp */
+	uint16_t start;
+
+	if (vsge->is_fwmark)
+		snprintf(ret, sizeof(ret), "FWM %u", vsge->vfwmark);
+	else if (vsge->range) {
+		start = vsge->addr.ss_family == AF_INET ?
+			  ntohl(((const struct sockaddr_in*)&vsge->addr)->sin_addr.s_addr) & 0xFF :
+			  ntohs(((const struct sockaddr_in6*)&vsge->addr)->sin6_addr.s6_addr16[7]);
+		snprintf(ret, sizeof(ret),
+			    vsge->addr.ss_family == AF_INET ?  "%s-%u,%d" : "%s-%x,%d",
+			    inet_sockaddrtos(&vsge->addr),
+			    start + vsge->range,
+			    ntohs(inet_sockaddrport(&vsge->addr)));
+	} else
+		snprintf(ret, sizeof(ret), "%s:%d",
+			    inet_sockaddrtos(&vsge->addr), ntohs(inet_sockaddrport(&vsge->addr)));
+
 	return ret;
 }
+
+const char *
+format_rs(const real_server_t *rs, const virtual_server_t *vs)
+{
+	static char buf[SOCKADDRTRIO_STR_LEN];
+
+	inet_sockaddrtotrio_r(&rs->addr, vs->service_type, buf);
+
+	return buf;
+}
+
+static void
+check_check_script_security(void)
+{
+	element e, e1;
+	virtual_server_t *vs;
+	real_server_t *rs;
+	int script_flags;
+	magic_t magic;
+
+	if (LIST_ISEMPTY(check_data->vs))
+		return;
+
+	magic = ka_magic_open();
+
+	script_flags = check_misc_script_security(magic);
+
+	for (e = LIST_HEAD(check_data->vs); e; ELEMENT_NEXT(e)) {
+		vs = ELEMENT_DATA(e);
+
+		script_flags |= check_notify_script_secure(&vs->notify_quorum_up, magic);
+		script_flags |= check_notify_script_secure(&vs->notify_quorum_down, magic);
+
+		for (e1 = LIST_HEAD(vs->rs); e1; ELEMENT_NEXT(e1)) {
+			rs = ELEMENT_DATA(e1);
+
+			script_flags |= check_notify_script_secure(&rs->notify_up, magic);
+			script_flags |= check_notify_script_secure(&rs->notify_down, magic);
+		}
+	}
+
+	if (global_data->notify_fifo.script)
+		script_flags |= check_notify_script_secure(&global_data->notify_fifo.script, magic);
+	if (global_data->lvs_notify_fifo.script)
+		script_flags |= check_notify_script_secure(&global_data->lvs_notify_fifo.script, magic);
+
+	if (!script_security && script_flags & SC_ISSCRIPT) {
+		report_config_error(CONFIG_SECURITY_ERROR, "SECURITY VIOLATION - check scripts are being executed but script_security not enabled.%s",
+				script_flags & SC_INSECURE ? " There are insecure scripts." : "");
+	}
+
+	if (magic)
+		ka_magic_close(magic);
+}
+
+bool validate_check_config(void)
+{
+	element e, e1, e2;
+	virtual_server_t *vs;
+	virtual_server_group_entry_t *vsge;
+	real_server_t *rs;
+	checker_t *checker;
+	element next;
+	unsigned weight_sum;
+
+	using_ha_suspend = false;
+	LIST_FOREACH_NEXT(check_data->vs, vs, e, next) {
+		if (!vs->rs || LIST_ISEMPTY(vs->rs)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Virtual server %s has no real servers - ignoring", FMT_VS(vs));
+			free_list_element(check_data->vs, e);
+			continue;
+		}
+
+		/* Ensure that ha_suspend is not set for any virtual server using fwmarks */
+		if (vs->ha_suspend &&
+		    (vs->vfwmark || (vs->vsg && !LIST_ISEMPTY(vs->vsg->vfwmark)))) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Virtual server %s: cannot use ha_suspend with fwmarks - clearing ha_suspend", FMT_VS(vs));
+			vs->ha_suspend = false;
+		}
+
+		if (vs->ha_suspend)
+			using_ha_suspend = true;
+
+		/* If the virtual server is specified by address (rather than fwmark), make some further checks */
+		if ((vs->vsg && !LIST_ISEMPTY(vs->vsg->addr_range)) ||
+		    (!vs->vsg && !vs->vfwmark)) {
+			/* Check protocol set */
+			if (!vs->service_type) {
+				/* If the protocol is 0, the kernel defaults to UDP, so set it explicitly */
+				log_message(LOG_INFO, "Virtual server %s: no protocol set - defaulting to UDP", FMT_VS(vs));
+				vs->service_type = IPPROTO_UDP;
+			}
+
+#ifdef IP_VS_SVC_F_ONEPACKET
+			/* Check OPS not set for TCP or SCTP */
+			if (vs->flags & IP_VS_SVC_F_ONEPACKET &&
+			    vs->service_type != IPPROTO_UDP) {
+				/* OPS is only valid for UDP, or with a firewall mark */
+				report_config_error(CONFIG_GENERAL_ERROR, "Virtual server %s: one packet scheduling requires UDP - resetting", FMT_VS(vs));
+				vs->flags &= ~(unsigned)IP_VS_SVC_F_ONEPACKET;
+			}
+#endif
+
+			/* Check port specified for udp/tcp/sctp unless persistent */
+			if (!vs->persistence_timeout &&
+			    !vs->vsg &&
+			    !inet_sockaddrport(&vs->addr)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Virtual server %s: zero port only valid for persistent services - setting", FMT_VS(vs));
+				vs->persistence_timeout = IPVS_SVC_PERSISTENT_TIMEOUT;
+			}
+		}
+
+		/* If a virtual server group with addresses has persistence not set,
+		 * make sure all the address blocks have a port, otherwise set
+		 * persistence. */
+		if (!vs->persistence_timeout && vs->vsg) {
+			LIST_FOREACH(vs->vsg->addr_range, vsge, e1) {
+				if (!inet_sockaddrport(&vsge->addr)) {
+					report_config_error(CONFIG_GENERAL_ERROR, "Virtual server %s: zero port only valid for persistent services - setting", FMT_VS(vs));
+					vs->persistence_timeout = IPVS_SVC_PERSISTENT_TIMEOUT;
+					break;
+				}
+			}
+		}
+
+		/* A virtual server using fwmarks will ignore any protocol setting, so warn if one is set */
+		if (vs->service_type &&
+		    ((vs->vsg && LIST_ISEMPTY(vs->vsg->addr_range) && !LIST_ISEMPTY(vs->vsg->vfwmark)) ||
+		     (!vs->vsg && vs->vfwmark)))
+			report_config_error(CONFIG_GENERAL_ERROR, "Warning: Virtual server %s: protocol specified for fwmark - protocol will be ignored", FMT_VS(vs));
+
+		/* Check scheduler set */
+		if (!vs->sched[0]) {
+			log_message(LOG_INFO, "Virtual server %s: no scheduler set, setting default '%s'", FMT_VS(vs), IPVS_DEF_SCHED);
+			strcpy(vs->sched, IPVS_DEF_SCHED);
+		}
+
+		/* Set default values */
+		if (vs->smtp_alert == -1) {
+			if (global_data->smtp_alert_checker != -1)
+				vs->smtp_alert = global_data->smtp_alert_checker;
+			else if (global_data->smtp_alert != -1)
+				vs->smtp_alert = global_data->smtp_alert;
+			else
+				vs->smtp_alert = false;
+		}
+
+		/* Spin through all the real servers */
+		weight_sum = 0;
+		LIST_FOREACH(vs->rs, rs, e1) {
+			/* Set the forwarding method if necessary */
+			if (rs->forwarding_method == IP_VS_CONN_F_FWD_MASK) {
+				if (vs->forwarding_method == IP_VS_CONN_F_FWD_MASK) {
+					log_message(LOG_INFO, "Virtual server %s: no forwarding method set, setting default NAT", FMT_VS(vs));
+					vs->forwarding_method = IP_VS_CONN_F_MASQ;
+				}
+				rs->forwarding_method = vs->forwarding_method;
+#ifdef _HAVE_IPVS_TUN_TYPE_
+				rs->tun_type = vs->tun_type;
+				rs->tun_port = vs->tun_port;
+#ifdef _HAVE_IPVS_TUN_CSUM_
+				rs->tun_flags = vs->tun_flags;
+#endif
+#endif
+			}
+
+			/* Take default values from virtual server */
+			if (rs->alpha == -1)
+				rs->alpha = vs->alpha;
+			if (rs->inhibit == -1)
+				rs->inhibit = vs->inhibit;
+			if (rs->retry == UINT_MAX)
+				rs->retry = vs->retry;
+			if (rs->connection_to == UINT_MAX)
+				rs->connection_to = vs->connection_to;
+			if (rs->delay_loop == ULONG_MAX)
+				rs->delay_loop = vs->delay_loop;
+			if (rs->warmup == ULONG_MAX)
+				rs->warmup = vs->warmup;
+			if (rs->delay_before_retry == ULONG_MAX)
+				rs->delay_before_retry = vs->delay_before_retry;
+			if (rs->weight == INT_MAX) {
+				rs->weight = vs->weight;
+				rs->iweight = rs->weight;
+			}
+
+			if (rs->smtp_alert == -1) {
+				if (global_data->smtp_alert_checker != -1)
+					rs->smtp_alert = global_data->smtp_alert_checker;
+				else if (global_data->smtp_alert != -1)
+					rs->smtp_alert = global_data->smtp_alert;
+				else {
+					/* This is inconsistent with the defaults for other smtp_alerts
+					 * in order to maintain backwards compatibility */
+					rs->smtp_alert = true;
+				}
+			}
+			weight_sum += rs->weight;
+		}
+
+		/* Check that the quorum isn't higher than the total weight of
+		 * the real servers, otherwise we will never be able to come up. */
+		if (vs->quorum > weight_sum) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Warning - quorum %u for %s exceeds total weight of real servers %u, reducing quorum to %u", vs->quorum, FMT_VS(vs), weight_sum, weight_sum);
+			vs->quorum = weight_sum;
+		}
+
+		/* Ensure that no virtual server hysteresis >= quorum */
+		if (vs->hysteresis >= vs->quorum) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Virtual server %s: hysteresis %u >= quorum %u; setting hysteresis to %u",
+					FMT_VS(vs), vs->hysteresis, vs->quorum, vs->quorum -1);
+			vs->hysteresis = vs->quorum - 1;
+		}
+
+		/* Now check that, unless using NAT, real and virtual servers have the same port.
+		 * Also if a fwmark is used, ensure that unless NAT, the real server port is 0. */
+		if (vs->vsg) {
+			if (!LIST_ISEMPTY(vs->vsg->vfwmark)) {
+				LIST_FOREACH(vs->rs, rs, e1) {
+					if (rs->forwarding_method == IP_VS_CONN_F_MASQ)
+						continue;
+					if (inet_sockaddrport(&rs->addr))
+						log_message(LOG_INFO, "WARNING - fwmark virtual server %s, real server %s has port specified - port will be ignored", FMT_VS(vs), FMT_RS(rs, vs));
+				}
+				if (vs->s_svr && vs->s_svr->forwarding_method != IP_VS_CONN_F_MASQ &&
+				    inet_sockaddrport(&vs->s_svr->addr))
+					log_message(LOG_INFO, "WARNING - fwmark virtual server %s, sorry server has port specified - port will be ignored", FMT_VS(vs));
+			}
+			LIST_FOREACH(vs->vsg->addr_range, vsge, e1) {
+				LIST_FOREACH(vs->rs, rs, e2) {
+					if (rs->forwarding_method == IP_VS_CONN_F_MASQ)
+						continue;
+					if (inet_sockaddrport(&rs->addr) &&
+					    inet_sockaddrport(&vsge->addr) != inet_sockaddrport(&rs->addr))
+						report_config_error(CONFIG_GENERAL_ERROR, "virtual server %s:[%s] and real server %s ports don't match", FMT_VS(vs), format_vsge(vsge), FMT_RS(rs, vs));
+				}
+				if (vs->s_svr && vs->s_svr->forwarding_method != IP_VS_CONN_F_MASQ &&
+				    inet_sockaddrport(&vs->s_svr->addr) &&
+				    inet_sockaddrport(&vsge->addr) != inet_sockaddrport(&vs->s_svr->addr))
+					log_message(LOG_INFO, "WARNING - virtual server %s, sorry server has port specified - port will be ignored", FMT_VS(vs));
+			}
+		} else {
+			/* We can also correct errors here */
+			LIST_FOREACH(vs->rs, rs, e1) {
+				if (rs->forwarding_method == IP_VS_CONN_F_MASQ) {
+					if (!vs->vfwmark && !inet_sockaddrport(&rs->addr))
+						inet_set_sockaddrport(&rs->addr, inet_sockaddrport(&vs->addr));
+					continue;
+				}
+
+				if (vs->vfwmark) {
+					if (inet_sockaddrport(&rs->addr)) {
+						report_config_error(CONFIG_GENERAL_ERROR, "WARNING - fwmark virtual server %s, real server %s has port specified - clearing", FMT_VS(vs), FMT_RS(rs, vs));
+						inet_set_sockaddrport(&rs->addr, 0);
+					}
+				} else {
+					if (!inet_sockaddrport(&rs->addr))
+						inet_set_sockaddrport(&rs->addr, inet_sockaddrport(&vs->addr));
+					else if (inet_sockaddrport(&vs->addr) != inet_sockaddrport(&rs->addr)) {
+						report_config_error(CONFIG_GENERAL_ERROR, "WARNING - virtual server %s and real server %s ports don't match - resetting", FMT_VS(vs), FMT_RS(rs, vs));
+						inet_set_sockaddrport(&rs->addr, inet_sockaddrport(&vs->addr));
+					}
+				}
+			}
+
+			/* Check any sorry server */
+			if (vs->s_svr && vs->s_svr->forwarding_method != IP_VS_CONN_F_MASQ) {
+				if (vs->vfwmark) {
+					if (inet_sockaddrport(&vs->s_svr->addr)) {
+						log_message(LOG_INFO, "WARNING - virtual server %s, sorry server has port specified - clearing", FMT_VS(vs));
+						inet_set_sockaddrport(&vs->s_svr->addr, 0);
+					}
+				} else {
+					if (!inet_sockaddrport(&vs->s_svr->addr))
+						inet_set_sockaddrport(&vs->s_svr->addr, inet_sockaddrport(&vs->addr));
+					else if (inet_sockaddrport(&vs->addr) != inet_sockaddrport(&vs->s_svr->addr)) {
+						report_config_error(CONFIG_GENERAL_ERROR, "WARNING - virtual server %s and sorry server ports don't match - resetting", FMT_VS(vs));
+						inet_set_sockaddrport(&vs->s_svr->addr, inet_sockaddrport(&vs->addr));
+					}
+				}
+			}
+		}
+	}
+
+	LIST_FOREACH(checkers_queue, checker, e)
+	{
+		/* Ensure any checkers that don't have ha_suspend set are enabled */
+		if (!checker->vs->ha_suspend)
+			checker->enabled = true;
+
+		/* Take default values from real server */
+		if (checker->alpha == -1)
+			checker->alpha = checker->rs->alpha;
+		if (checker->launch) {
+			if (checker->retry == UINT_MAX)
+				checker->retry = checker->rs->retry != UINT_MAX ? checker->rs->retry : checker->default_retry;
+			if (checker->co && checker->co->connection_to == UINT_MAX)
+				checker->co->connection_to = checker->rs->connection_to;
+			if (checker->delay_loop == ULONG_MAX)
+				checker->delay_loop = checker->rs->delay_loop;
+			if (checker->warmup == ULONG_MAX)
+				checker->warmup = checker->rs->warmup != ULONG_MAX ? checker->rs->warmup : checker->delay_loop;
+			if (checker->delay_before_retry == ULONG_MAX) {
+				checker->delay_before_retry =
+					checker->rs->delay_before_retry != ULONG_MAX ?
+						checker->rs->delay_before_retry :
+					checker->default_delay_before_retry ?
+						checker->default_delay_before_retry :
+						checker->delay_loop;
+			}
+		}
+
+		/* In Alpha mode also mark any checker that hasn't run as failed.
+		 * Reloading is handled in migrate_checkers() */
+		if (!reload) {
+			if (checker->alpha) {
+				set_checker_state(checker, false);
+				UNSET_ALIVE(checker->rs);
+			}
+
+			/* For non alpha mode, one failure is enough initially.
+			 * For alpha mode, log failure after one failure */
+			checker->retry_it = checker->retry;
+		}
+	}
+
+	/* Add the FIFO name to the end of the parameter list */
+	if (global_data->notify_fifo.script)
+		add_script_param(global_data->notify_fifo.script, global_data->notify_fifo.name);
+	if (global_data->lvs_notify_fifo.script)
+		add_script_param(global_data->lvs_notify_fifo.script, global_data->lvs_notify_fifo.name);
+
+// ??? This should probably be done in check_daemon after clear_diff_services()
+	set_quorum_states();
+
+	check_check_script_security();
+
+	return true;
+}
diff --git a/tools/keepalived/keepalived/check/check_dns.c b/tools/keepalived/keepalived/check/check_dns.c
new file mode 100644
index 000000000..d0ce9d7c1
--- /dev/null
+++ b/tools/keepalived/keepalived/check/check_dns.c
@@ -0,0 +1,548 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        DNS checker
+ *
+ * Author:      Masanobu Yasui, <yasui-m@klab.com>
+ *              Masaya Yamamoto, <yamamoto-ma@klab.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2016 KLab Inc.
+ * Copyright (C) 2016-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include <errno.h>
+#include <unistd.h>
+#include <stdint.h>
+#include <stdio.h>
+
+#include "check_dns.h"
+#include "check_api.h"
+#include "memory.h"
+#include "ipwrapper.h"
+#include "logger.h"
+#include "smtp.h"
+#include "utils.h"
+#include "parser.h"
+#if !HAVE_DECL_SOCK_CLOEXEC
+#include "old_socket.h"
+#endif
+#include "layer4.h"
+#include "scheduler.h"
+
+#ifdef _DEBUG_
+#define DNS_DBG(args...) dns_log_message(thread, LOG_DEBUG, ## args)
+#else
+#define DNS_DBG(args...)
+#endif
+
+const dns_type_t DNS_TYPE[] = {
+	{DNS_TYPE_A, "A"},
+	{DNS_TYPE_NS, "NS"},
+	{DNS_TYPE_CNAME, "CNAME"},
+	{DNS_TYPE_SOA, "SOA"},
+	{DNS_TYPE_MX, "MX"},
+	{DNS_TYPE_TXT, "TXT"},
+	{DNS_TYPE_AAAA, "AAAA"},
+	{DNS_TYPE_RRSIG, "RRSIG"},
+	{DNS_TYPE_DNSKEY, "DNSKEY"},
+	{0, NULL}
+};
+
+static int dns_connect_thread(thread_ref_t);
+static int dns_send_thread(thread_ref_t);
+
+static uint16_t __attribute__ ((pure))
+dns_type_lookup(const char *label)
+{
+	const dns_type_t *t;
+
+	for (t = DNS_TYPE; t->type; t++) {
+		if (!strcasecmp(label, t->label)) {
+			return t->type;
+		}
+	}
+	return 0;
+}
+
+static const char * __attribute__ ((pure))
+dns_type_name(uint16_t type)
+{
+	const dns_type_t *t;
+
+	for (t = DNS_TYPE; t->type; t++) {
+		if (type == t->type) {
+			return t->label;
+		}
+	}
+	return "(unknown)";
+}
+
+static void __attribute__ ((format (printf, 3, 4)))
+dns_log_message(thread_ref_t thread, int level, const char *fmt, ...)
+{
+	char buf[MAX_LOG_MSG];
+	va_list args;
+
+	checker_t *checker = THREAD_ARG(thread);
+
+	va_start(args, fmt);
+	vsnprintf(buf, sizeof (buf), fmt, args);
+	va_end(args);
+
+	log_message(level, "DNS_CHECK (%s) %s", FMT_CHK(checker), buf);
+}
+
+static int __attribute__ ((format (printf, 3, 4)))
+dns_final(thread_ref_t thread, int error, const char *fmt, ...)
+{
+	char buf[MAX_LOG_MSG];
+	va_list args;
+	int len;
+	bool checker_was_up;
+	bool rs_was_alive;
+
+	checker_t *checker = THREAD_ARG(thread);
+
+	DNS_DBG("final error=%d attempts=%d retry=%d", error,
+		checker->retry_it, checker->retry);
+
+	if (thread->type != THREAD_TIMER)
+		thread_close_fd(thread);
+
+	if (error) {
+		if (checker->is_up || !checker->has_run) {
+			if (fmt &&
+			    (global_data->checker_log_all_failures ||
+			     checker->log_all_failures ||
+			     checker->retry_it >= checker->retry)) {
+				va_start(args, fmt);
+				len = vsnprintf(buf, sizeof (buf), fmt, args);
+				va_end(args);
+				if (checker->has_run && checker->retry_it >= checker->retry && !checker->has_run)
+					snprintf(buf + len, sizeof(buf) - len, " after %u retries", checker->retry);
+				dns_log_message(thread, LOG_INFO, "%s", buf);
+			}
+			if (checker->retry_it < checker->retry) {
+				checker->retry_it++;
+				checker->has_run = true;
+				thread_add_timer(thread->master,
+						 dns_connect_thread, checker,
+						 checker->delay_before_retry);
+				return 0;
+			}
+			checker_was_up = checker->is_up;
+			rs_was_alive = checker->rs->alive;
+			update_svr_checker_state(DOWN, checker);
+			if (checker_was_up && checker->rs->smtp_alert &&
+			    (rs_was_alive != checker->rs->alive || !global_data->no_checker_emails))
+				smtp_alert(SMTP_MSG_RS, checker, NULL,
+					   "=> DNS_CHECK: failed on service <=");
+		}
+	} else {
+		if (!checker->is_up || !checker->has_run) {
+			checker_was_up = checker->is_up;
+			rs_was_alive = checker->rs->alive;
+			update_svr_checker_state(UP, checker);
+			if (!checker_was_up && checker->rs->smtp_alert &&
+			    (rs_was_alive != checker->rs->alive || !global_data->no_checker_emails))
+				smtp_alert(SMTP_MSG_RS, checker, NULL,
+					   "=> DNS_CHECK: succeed on service <=");
+		}
+	}
+
+	checker->retry_it = 0;
+	thread_add_timer(thread->master, dns_connect_thread, checker,
+			 checker->delay_loop);
+
+	return 0;
+}
+
+static int
+dns_recv_thread(thread_ref_t thread)
+{
+	unsigned long timeout;
+	ssize_t ret;
+	char rbuf[DNS_BUFFER_SIZE];
+	dns_header_t *s_header, *r_header;
+	int flags, rcode;
+
+	checker_t *checker = THREAD_ARG(thread);
+	dns_check_t *dns_check = CHECKER_ARG(checker);
+
+	if (thread->type == THREAD_READ_TIMEOUT) {
+		dns_final(thread, 1, "read timeout from socket");
+		return 0;
+	}
+
+	timeout = timer_long(thread->sands) - timer_long(time_now);
+
+	ret = recv(thread->u.f.fd, rbuf, sizeof (rbuf), 0);
+	if (ret == -1) {
+		if (check_EAGAIN(errno) || check_EINTR(errno)) {
+			thread_add_read(thread->master, dns_recv_thread,
+					checker, thread->u.f.fd, timeout, true);
+			return 0;
+		}
+		dns_final(thread, 1, "failed to read socket. %s", strerror(errno));
+		return 0;
+	}
+
+	if (ret < (ssize_t) sizeof (r_header)) {
+		DNS_DBG("too small message. (%d bytes)", ret);
+		thread_add_read(thread->master, dns_recv_thread, checker,
+				thread->u.f.fd, timeout, true);
+		return 0;
+	}
+
+	s_header = (dns_header_t *) dns_check->sbuf;
+	r_header = (dns_header_t *) rbuf;
+
+	if (s_header->id != r_header->id) {
+		DNS_DBG("ID does not match. (%04x != %04x)",
+			ntohs(s_header->id), ntohs(r_header->id));
+		thread_add_read(thread->master, dns_recv_thread, checker,
+				thread->u.f.fd, timeout, true);
+		return 0;
+	}
+
+	flags = ntohs(r_header->flags);
+
+	if (!DNS_QR(flags)) {
+		DNS_DBG("receive query message?");
+		thread_add_read(thread->master, dns_recv_thread, checker,
+				thread->u.f.fd, timeout, true);
+		return 0;
+	}
+
+	if ((rcode = DNS_RC(flags)) != 0) {
+		dns_final(thread, 1, "read error occurred. (rcode = %d)", rcode);
+		return 0;
+	}
+
+	/* success */
+	dns_final(thread, 0, NULL);
+
+	return 0;
+}
+
+#define APPEND16(x, y) do { \
+		*(uint16_t *) (x) = htons(y); \
+		(x) = (uint8_t *) (x) + 2; \
+	} while(0)
+
+static int
+dns_make_query(thread_ref_t thread)
+{
+	uint16_t flags = 0;
+	uint8_t *p;
+	const char *s, *e;
+	size_t n;
+	checker_t *checker = THREAD_ARG(thread);
+	dns_check_t *dns_check = CHECKER_ARG(checker);
+	dns_header_t *header = (dns_header_t *) dns_check->sbuf;
+
+	DNS_SET_RD(flags, 1);	/* Recursion Desired */
+
+	/* coverity[dont_call] */
+	header->id = htons(random());
+	header->flags = htons(flags);
+	header->qdcount = htons(1);
+	header->ancount = htons(0);
+	header->nscount = htons(0);
+	header->arcount = htons(0);
+
+	p = (uint8_t *) (header + 1);
+
+	/* QNAME */
+	for (s = dns_check->name; *s; s = *e ? ++e : e) {
+		if (!(e = strchr(s, '.'))) {
+			e = s + strlen(s);
+		}
+		n = (size_t)(e - s);
+		*(p++) = (uint8_t)n;
+		memcpy(p, s, n);
+		p += n;
+	}
+	n = strlen(dns_check->name);
+	if (n && dns_check->name[--n] != '.') {
+		*(p++) = 0;
+	}
+
+	APPEND16(p, dns_check->type);
+	APPEND16(p, 1);		/* IN */
+
+	dns_check->slen = (size_t)(p - (uint8_t *)header);
+
+	return 0;
+}
+
+static void
+dns_send(thread_ref_t thread)
+{
+	checker_t *checker = THREAD_ARG(thread);
+	dns_check_t *dns_check = CHECKER_ARG(checker);
+	unsigned long timeout;
+	ssize_t ret;
+
+	timeout = timer_long(thread->sands) - timer_long(time_now);
+
+	ret = send(thread->u.f.fd, dns_check->sbuf, dns_check->slen, 0);
+	if (ret == -1) {
+		if (check_EAGAIN(errno) || check_EINTR(errno)) {
+			thread_add_write(thread->master, dns_send_thread,
+					 checker, thread->u.f.fd, timeout, true);
+			return;
+		}
+		dns_final(thread, 1, "failed to write socket.");
+		return;
+	}
+
+	if (ret != (ssize_t) dns_check->slen) {
+		dns_final(thread, 1, "failed to write all of the datagram.");
+		return;
+	}
+
+	thread_add_read(thread->master, dns_recv_thread, checker, thread->u.f.fd, timeout, true);
+
+	return;
+}
+
+static int
+dns_send_thread(thread_ref_t thread)
+{
+	if (thread->type == THREAD_WRITE_TIMEOUT) {
+		dns_final(thread, 1, "write timeout to socket.");
+		return 0;
+	}
+
+	dns_send(thread);
+
+	return 0;
+}
+
+static int
+dns_check_thread(thread_ref_t thread)
+{
+	int status;
+
+	if (thread->type == THREAD_WRITE_TIMEOUT) {
+		dns_final(thread, 1, "write timeout to socket.");
+		return 0;
+	}
+
+	status = socket_state(thread, dns_check_thread);
+
+	/* If status = connect_in_progress, next thread is already registered.
+	 * If it is connect_success, the fd is still open.
+	 * Otherwise we have a real connection error or connection timeout.
+	 */
+	switch (status) {
+	case connect_error:
+		dns_final(thread, 1, "connection error.");
+		break;
+	case connect_timeout:
+		dns_final(thread, 1, "connection timeout.");
+		break;
+	case connect_fail:
+		dns_final(thread, 1, "connection failure.");
+		break;
+	case connect_success:
+		dns_make_query(thread);
+		dns_send(thread);
+
+		/* Cancel the write after the read is added to avoid the
+		 * file descriptor being removed */
+		thread_del_write(thread);
+		break;
+	}
+
+	return 0;
+}
+
+static int
+dns_connect_thread(thread_ref_t thread)
+{
+	int fd, status;
+	thread_t thread_fd;
+
+	checker_t *checker = THREAD_ARG(thread);
+	conn_opts_t *co = checker->co;
+
+	if (!checker->enabled) {
+		thread_add_timer(thread->master, dns_connect_thread, checker,
+				 checker->delay_loop);
+		return 0;
+	}
+
+	if ((fd = socket(co->dst.ss_family, SOCK_DGRAM | SOCK_CLOEXEC | SOCK_NONBLOCK, IPPROTO_UDP)) == -1) {
+		dns_log_message(thread, LOG_INFO,
+				"failed to create socket. Rescheduling.");
+		thread_add_timer(thread->master, dns_connect_thread, checker,
+				 checker->delay_loop);
+		return 0;
+	}
+
+#if !HAVE_DECL_SOCK_NONBLOCK
+	if (set_sock_flags(fd, F_SETFL, O_NONBLOCK))
+		dns_log_message(thread, LOG_INFO,
+				"unable to set NONBLOCK on socket - %s (%d)",
+				strerror(errno), errno);
+#endif
+
+#if !HAVE_DECL_SOCK_CLOEXEC
+	if (set_sock_flags(fd, F_SETFD, FD_CLOEXEC))
+		dns_log_message(thread, LOG_INFO,
+				"unable to set CLOEXEC on socket - %s (%d)",
+				strerror(errno), errno);
+#endif
+
+	status = socket_bind_connect(fd, co);
+
+	if (status == connect_success) {
+		thread_fd = *thread;
+		thread_fd.u.f.fd = fd;
+		dns_make_query(&thread_fd);
+		dns_send(&thread_fd);
+
+		return 0;
+	}
+
+	if (status == connect_fail) {
+		close(fd);
+		dns_final(thread, 1, "network unreachable for %s", inet_sockaddrtopair(&co->dst));
+
+		return 0;
+	}
+
+	/* handle connection status & register check worker thread */
+	if (socket_connection_state(fd, status, thread, dns_check_thread, co->connection_to)) {
+		close(fd);
+		dns_log_message(thread, LOG_INFO,
+				"UDP socket bind failed. Rescheduling.");
+		thread_add_timer(thread->master, dns_connect_thread, checker,
+				 checker->delay_loop);
+	}
+
+	return 0;
+}
+
+static void
+dns_free(checker_t *checker)
+{
+	dns_check_t *dns_check = checker->data;
+
+	FREE_CONST(dns_check->name);
+	FREE(checker->co);
+	FREE(checker->data);
+	FREE(checker);
+}
+
+static void
+dns_dump(FILE *fp, const checker_t *checker)
+{
+	const dns_check_t *dns_check = checker->data;
+
+	conf_write(fp, "   Keepalive method = DNS_CHECK");
+	dump_checker_opts(fp, checker);
+	conf_write(fp, "   Type = %s", dns_type_name(dns_check->type));
+	conf_write(fp, "   Name = %s", dns_check->name);
+}
+
+static bool
+dns_check_compare(const checker_t *old_c, const checker_t *new_c)
+{
+	const dns_check_t *old = old_c->data;
+	const dns_check_t *new = new_c->data;
+
+	if (!compare_conn_opts(old_c->co, new_c->co))
+		return false;
+	if (old->type != new->type)
+		return false;
+	if (strcmp(old->name, new->name) != 0)
+		return false;
+
+	return true;
+}
+
+static void
+dns_check_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	checker_t *checker;
+
+	dns_check_t *dns_check = (dns_check_t *) MALLOC(sizeof (dns_check_t));
+	dns_check->type = DNS_DEFAULT_TYPE;
+	dns_check->name = DNS_DEFAULT_NAME;
+	checker = queue_checker(dns_free, dns_dump, dns_connect_thread,
+				dns_check_compare, dns_check, CHECKER_NEW_CO(), true);
+
+	/* Set the non-standard retry time */
+	checker->default_retry = DNS_DEFAULT_RETRY;
+	checker->default_delay_before_retry = 0;	/* This will default to delay_loop */
+}
+
+static void
+dns_type_handler(const vector_t *strvec)
+{
+	uint16_t dns_type;
+	dns_check_t *dns_check = CHECKER_GET();
+
+	dns_type = dns_type_lookup(strvec_slot(strvec, 1));
+	if (!dns_type)
+		report_config_error(CONFIG_GENERAL_ERROR, "Unknown DNS check type %s - ignoring",
+				    strvec_slot(strvec, 1));
+	else
+		dns_check->type = dns_type;
+}
+
+static void
+dns_name_handler(const vector_t *strvec)
+{
+	dns_check_t *dns_check = CHECKER_GET();
+	dns_check->name = set_value(strvec);
+}
+
+static void
+dns_check_end(void)
+{
+	if (!check_conn_opts(CHECKER_GET_CO())) {
+		dequeue_new_checker();
+	}
+// Is name needed?
+}
+
+void
+install_dns_check_keyword(void)
+{
+	install_keyword("DNS_CHECK", &dns_check_handler);
+	install_sublevel();
+	install_checker_common_keywords(true);
+	install_keyword("type", &dns_type_handler);
+	install_keyword("name", &dns_name_handler);
+	install_sublevel_end_handler(dns_check_end);
+	install_sublevel_end();
+}
+
+#ifdef THREAD_DUMP
+void
+register_check_dns_addresses(void)
+{
+	register_thread_address("dns_check_thread", dns_check_thread);
+	register_thread_address("dns_connect_thread", dns_connect_thread);
+	register_thread_address("dns_recv_thread", dns_recv_thread);
+	register_thread_address("dns_send_thread", dns_send_thread);
+}
+#endif
diff --git a/tools/keepalived/keepalived/check/check_http.c b/tools/keepalived/keepalived/check/check_http.c
index 810b8255c..c490ff026 100644
--- a/tools/keepalived/keepalived/check/check_http.c
+++ b/tools/keepalived/keepalived/check/check_http.c
@@ -18,118 +18,451 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
 #include <openssl/err.h>
+#include <unistd.h>
+#include <stdint.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <stdbool.h>
+
+#ifdef _WITH_REGEX_CHECK_
+#define PCRE2_CODE_UNIT_WIDTH 8
+#include <pcre2.h>
+#endif
+
 #include "check_http.h"
-#include "check_ssl.h"
 #include "check_api.h"
+#include "check_ssl.h"
+#include "bitops.h"
 #include "logger.h"
-#include "memory.h"
 #include "parser.h"
 #include "utils.h"
 #include "html.h"
+#if !HAVE_DECL_SOCK_CLOEXEC
+#include "old_socket.h"
+#include "string.h"
+#endif
+#include "layer4.h"
+#include "ipwrapper.h"
+#include "smtp.h"
+#ifdef THREAD_DUMP
+#include "scheduler.h"
+#endif
 
-int http_connect_thread(thread_t *);
+typedef enum {
+	REGISTER_CHECKER_NEW,
+	REGISTER_CHECKER_RETRY,
+	REGISTER_CHECKER_FAILED
+} register_checker_t;
+
+
+#ifdef _WITH_REGEX_CHECK_
+typedef struct {
+	const char *option;
+	unsigned option_bit ;
+} regex_option_t;
+
+regex_option_t regex_options[] = {
+	{"allow_empty_class", PCRE2_ALLOW_EMPTY_CLASS},
+	{"alt_bsux", PCRE2_ALT_BSUX},
+	{"auto_callout", PCRE2_AUTO_CALLOUT},
+	{"caseless", PCRE2_CASELESS},
+	{"dollar_endonly", PCRE2_DOLLAR_ENDONLY},
+	{"dotall", PCRE2_DOTALL},
+	{"dupnames", PCRE2_DUPNAMES},
+	{"extended", PCRE2_EXTENDED},
+	{"firstline", PCRE2_FIRSTLINE},
+	{"match_unset_backref", PCRE2_MATCH_UNSET_BACKREF},
+	{"multiline", PCRE2_MULTILINE},
+	{"never_ucp", PCRE2_NEVER_UCP},
+	{"never_utf", PCRE2_NEVER_UTF},
+	{"no_auto_capture", PCRE2_NO_AUTO_CAPTURE},
+	{"no_auto_possess", PCRE2_NO_AUTO_POSSESS},
+	{"no_dotstar_anchor", PCRE2_NO_DOTSTAR_ANCHOR},
+	{"no_start_optimize", PCRE2_NO_START_OPTIMIZE},
+	{"ucp", PCRE2_UCP},
+	{"ungreedy", PCRE2_UNGREEDY},
+	{"utf", PCRE2_UTF},
+	{"never_backslash_c", PCRE2_NEVER_BACKSLASH_C},
+	{"alt_circumflex", PCRE2_ALT_CIRCUMFLEX},
+	{"alt_verbnames", PCRE2_ALT_VERBNAMES},
+	{"use_offset_limit", PCRE2_USE_OFFSET_LIMIT},
+	{NULL, 0}
+};
+
+/* Used for holding regex details during configuration */
+static const unsigned char *conf_regex_pattern;
+static int conf_regex_options;
+
+#ifndef PCRE2_DONT_USE_JIT
+static PCRE2_SIZE jit_stack_start;
+static PCRE2_SIZE jit_stack_max;
+
+static pcre2_match_context *mcontext;
+static pcre2_jit_stack *jit_stack;
+#endif
 
-/* Configuration stream handling */
-void
+static list regexs;	/* list of regex_t */
+
+#ifdef _WITH_REGEX_TIMERS_
+struct timespec total_regex_times;
+unsigned total_num_matches;
+unsigned total_regex_urls;
+bool do_regex_timers;
+#endif
+#endif
+
+#ifdef _REGEX_DEBUG_
+bool do_regex_debug;
+#endif
+
+/* GET processing command */
+static const char *request_template =
+			"GET %s HTTP/1.%d\r\n"
+			"User-Agent: KeepAliveClient\r\n"
+			"%s"
+			"Host: %s%s\r\n\r\n";
+
+static const char *request_template_ipv6 =
+			"GET %s HTTP/1.%d\r\n"
+			"User-Agent: KeepAliveClient\r\n"
+			"%s"
+			"Host: [%s]%s\r\n\r\n";
+
+static int http_connect_thread(thread_ref_t);
+
+#ifdef _WITH_REGEX_CHECK_
+static void
+free_regex(void *data)
+{
+	regex_t *regex = data;
+
+	// Free up the regular expression.
+	FREE_CONST_PTR(regex->pattern);
+	pcre2_code_free(regex->pcre2_reCompiled);
+	pcre2_match_data_free(regex->pcre2_match_data);
+
+#ifdef _WITH_REGEX_TIMERS_
+	total_regex_times.tv_sec += regex->regex_time.tv_sec;
+	total_regex_times.tv_nsec += regex->regex_time.tv_nsec;
+	if (total_regex_times.tv_nsec >= 1000000000L) {
+		total_regex_times.tv_sec += total_regex_times.tv_nsec / 1000000000L;
+		total_regex_times.tv_nsec %= 1000000000L;
+	}
+	total_num_matches += regex->num_match_calls;
+	total_regex_urls += regex->num_regex_urls;
+#endif
+
+	FREE(regex);
+}
+#endif
+
+static void
 free_url(void *data)
 {
 	url_t *url = data;
-	FREE(url->path);
-	FREE(url->digest);
+
+	FREE_CONST_PTR(url->path);
+	FREE_CONST_PTR(url->digest);
+	FREE_CONST_PTR(url->virtualhost);
+#ifdef _WITH_REGEX_CHECK_
+	if (url->regex) {
+		if (!--url->regex->use_count) {
+			free_list_data(regexs, url->regex);
+
+			if (LIST_ISEMPTY(regexs)) {
+				/* This is the last regex to be freed, so free up one-off resources */
+				free_list(&regexs);
+
+#ifndef PCRE2_DONT_USE_JIT
+				if (mcontext) {
+					pcre2_match_context_free(mcontext);
+					mcontext = NULL;
+				}
+				if (jit_stack) {
+					pcre2_jit_stack_free(jit_stack);
+					jit_stack = NULL;
+				}
+#endif
+
+#ifdef _WITH_REGEX_TIMERS_
+				if (do_regex_timers)
+					log_message(LOG_INFO, "Total regex time %ld.%9.9ld, num match calls %u, num url checks %u", total_regex_times.tv_sec, total_regex_times.tv_nsec, total_num_matches, total_regex_urls);
+#endif
+			}
+		}
+	}
+#endif
 	FREE(url);
 }
 
-void
-dump_url(void *data)
+static char *
+format_digest(const uint8_t *digest, char *buf)
 {
-	url_t *url = data;
-	log_message(LOG_INFO, "   Checked url = %s", url->path);
-	if (url->digest)
-		log_message(LOG_INFO, "           digest = %s",
-		       url->digest);
-	if (url->status_code)
-		log_message(LOG_INFO, "           HTTP Status Code = %d",
-		       url->status_code);
+	int i;
+
+	for (i = 0; i < MD5_DIGEST_LENGTH; i++)
+		snprintf(buf + 2 * i, 2 + 1, "%2.2x", digest[i]);
+
+	return buf;
 }
 
-void
-free_http_get_check(void *data)
+static void
+dump_url(FILE *fp, const void *data)
 {
-	http_checker_t *http_get_chk = CHECKER_DATA(data);
+	const url_t *url = data;
+	char digest_buf[2 * MD5_DIGEST_LENGTH + 1];
+	unsigned int i = 0;
+	unsigned min = 0;
+
+	conf_write(fp, "   Checked url = %s", url->path);
+	if (url->digest)
+		conf_write(fp, "     digest = %s", format_digest(url->digest, digest_buf));
 
-	free_list(http_get_chk->url);
-	FREE(http_get_chk->arg);
-	FREE(http_get_chk);
-	FREE(CHECKER_CO(data));
-	FREE(data);
+	conf_write(fp, "     HTTP Status Code(s)");
+	for (i = HTTP_STATUS_CODE_MIN; i <= HTTP_STATUS_CODE_MAX; i++) {
+		if (__test_bit(i - HTTP_STATUS_CODE_MIN, url->status_code)) {
+			if (!min)
+				min = i;
+		} else {
+			if (!min)
+				continue;
+			if (i - 1 == min)
+				conf_write(fp, "       %u", min);
+			else
+				conf_write(fp, "       %u-%u", min, i - 1);
+			min = 0;
+		}
+	}
+	if (min == HTTP_STATUS_CODE_MAX)
+		conf_write(fp, "       %u", min);
+	else if (min)
+		conf_write(fp, "       %u-%d", min, HTTP_STATUS_CODE_MAX);
+
+	if (url->virtualhost)
+		conf_write(fp, "     Virtual host = %s", url->virtualhost);
+
+#ifdef _WITH_REGEX_CHECK_
+	if (url->regex) {
+		char options_buf[512];
+		char *op;
+
+		conf_write(fp, "     Regex = \"%s\"", url->regex->pattern);
+		if (url->regex_no_match)
+			conf_write(fp, "     Regex no match");
+		if (url->regex_min_offset || url->regex_max_offset) {
+			if (url->regex_max_offset)
+				conf_write(fp, "     Regex min offset = %zu, max_offset = %zu", url->regex_min_offset, url->regex_max_offset - 1);
+			else
+				conf_write(fp, "     Regex min offset = %zu", url->regex_min_offset);
+		}
+		if (url->regex->pcre2_options) {
+			op = options_buf;
+			for (i = 0; regex_options[i].option; i++) {
+				if (url->regex->pcre2_options & regex_options[i].option_bit) {
+					*op++ = ' ';
+					strcpy(op, regex_options[i].option);
+					op += strlen(op);
+				}
+			}
+		}
+		else
+			options_buf[0] = '\0';
+		conf_write(fp, "     Regex options:%s", options_buf);
+		conf_write(fp, "     Regex use count = %u", url->regex->use_count);
+#ifndef PCRE2_DONT_USE_JIT
+		if (url->regex_use_stack)
+			conf_write(fp, "     Regex stack start %zu, max %zu", jit_stack_start, jit_stack_max);
+#endif
+	}
+#endif
 }
 
-void
-dump_http_get_check(void *data)
+static void
+free_http_request(request_t *req)
 {
-	if (!data)
+	if(!req)
 		return;
-	http_checker_t *http_get_chk = CHECKER_DATA(data);
+	if (req->ssl)
+		SSL_free(req->ssl);
+	if (req->buffer)
+		FREE(req->buffer);
+	FREE(req);
+}
+
+static void
+free_http_get_check(checker_t *checker)
+{
+	http_checker_t *http_get_chk = checker->data;
+
+	free_list(&http_get_chk->url);
+	free_http_request(http_get_chk->req);
+	FREE_CONST_PTR(http_get_chk->virtualhost);
+	FREE_PTR(http_get_chk);
+	FREE(checker->co);
+	FREE(checker);
+}
+
+static void
+dump_http_get_check(FILE *fp, const checker_t *checker)
+{
+	const http_checker_t *http_get_chk = checker->data;
+
+	conf_write(fp, "   Keepalive method = %s_GET, http protocol %s",
+			http_get_chk->proto == PROTO_HTTP ? "HTTP" : "SSL",
+			http_get_chk->http_protocol == HTTP_PROTOCOL_1_0C ? "1.0C" :
+			  http_get_chk->http_protocol == HTTP_PROTOCOL_1_1 ? "1.1" : "1.0");
+	dump_checker_opts(fp, checker);
+	if (http_get_chk->virtualhost)
+		conf_write(fp, "   Virtualhost = %s", http_get_chk->virtualhost);
+#ifdef _HAVE_SSL_SET_TLSEXT_HOST_NAME_
+	conf_write(fp, "   Enable SNI %sset", http_get_chk->enable_sni ? "" : "un");
+#endif
+ 	conf_write(fp, "   Fast recovery %sset", http_get_chk->fast_recovery ? "" : "un");
+	dump_list(fp, http_get_chk->url);
+	if (http_get_chk->failed_url)
+		conf_write(fp, "   Failed URL = %s", http_get_chk->failed_url->path);
 
-	if (http_get_chk->proto == PROTO_HTTP)
-		log_message(LOG_INFO, "   Keepalive method = HTTP_GET");
-	else
-		log_message(LOG_INFO, "   Keepalive method = SSL_GET");
-	if (CHECKER_CO(data))
-		dump_conn_opts(CHECKER_CO(data));
-	log_message(LOG_INFO, "   Nb get retry = %d", http_get_chk->nb_get_retry);
-	log_message(LOG_INFO, "   Delay before retry = %lu",
-	       http_get_chk->delay_before_retry/TIMER_HZ);
-	dump_list(http_get_chk->url);
 }
 static http_checker_t *
-alloc_http_get(char *proto)
+alloc_http_get(const char *proto)
 {
 	http_checker_t *http_get_chk;
 
 	http_get_chk = (http_checker_t *) MALLOC(sizeof (http_checker_t));
-	http_get_chk->arg = (http_t *) MALLOC(sizeof (http_t));
 	http_get_chk->proto =
 	    (!strcmp(proto, "HTTP_GET")) ? PROTO_HTTP : PROTO_SSL;
+	http_get_chk->http_protocol = HTTP_PROTOCOL_1_0;
 	http_get_chk->url = alloc_list(free_url, dump_url);
-	http_get_chk->nb_get_retry = 1;
-	http_get_chk->delay_before_retry = 3 * TIMER_HZ;
+	http_get_chk->virtualhost = NULL;
+
+	if (http_get_chk->proto == PROTO_SSL)
+		check_data->ssl_required = true;
 
 	return http_get_chk;
 }
 
-void
-http_get_handler(vector_t *strvec)
+static bool __attribute__((pure))
+http_get_check_compare(const checker_t *old_c, const checker_t *new_c)
 {
+	const http_checker_t *old = old_c->data;
+	const http_checker_t *new = new_c->data;
+	size_t n;
+	const url_t *u1, *u2;
+	unsigned i;
+
+	if (!compare_conn_opts(old_c->co, new_c->co))
+		return false;
+	if (LIST_SIZE(old->url) != LIST_SIZE(new->url))
+		return false;
+	if (!old->virtualhost != !new->virtualhost)
+		return false;
+	if (old->virtualhost && strcmp(old->virtualhost, new->virtualhost))
+		return false;
+	for (n = 0; n < LIST_SIZE(new->url); n++) {
+		u1 = (const url_t *)list_element(old->url, n);
+		u2 = (const url_t *)list_element(new->url, n);
+		if (strcmp(u1->path, u2->path))
+			return false;
+		if (!u1->digest != !u2->digest)
+			return false;
+		if (u1->digest && memcmp(u1->digest, u2->digest, MD5_DIGEST_LENGTH))
+			return false;
+		for (i = 0; i < sizeof(u1->status_code) / sizeof(u1->status_code[0]); i++) {
+			if (u1->status_code[i] != u2->status_code[i])
+				return false;
+		}
+		if (!u1->virtualhost != !u2->virtualhost)
+			return false;
+		if (u1->virtualhost && strcmp(u1->virtualhost, u2->virtualhost))
+			return false;
+#ifdef _WITH_REGEX_CHECK_
+		if (!u1->regex != !u2->regex)
+			return false;
+		if (u1->regex) {
+			if (strcmp((const char *)u1->regex->pattern, (const char *)u2->regex->pattern))
+				return false;
+			if (u1->regex->pcre2_options != u2->regex->pcre2_options)
+				return false;
+			if (u1->regex_no_match != u2->regex_no_match)
+				return false;
+			if (u1->regex_min_offset != u2->regex_min_offset ||
+			    u1->regex_max_offset != u2->regex_max_offset)
+				return false;
+		}
+#endif
+	}
+
+	return true;
+}
+
+/* Configuration stream handling */
+static void
+http_get_handler(const vector_t *strvec)
+{
+	checker_t *checker;
 	http_checker_t *http_get_chk;
-	char *str = vector_slot(strvec, 0);
+	const char *str = strvec_slot(strvec, 0);
 
 	/* queue new checker */
 	http_get_chk = alloc_http_get(str);
-	queue_checker(free_http_get_check, dump_http_get_check,
-		      http_connect_thread, http_get_chk, CHECKER_NEW_CO());
+	checker = queue_checker(free_http_get_check, dump_http_get_check,
+		      http_connect_thread, http_get_check_compare,
+		      http_get_chk, CHECKER_NEW_CO(), true);
+	checker->default_delay_before_retry = 3 * TIMER_HZ;
 }
 
-void
-nb_get_retry_handler(vector_t *strvec)
+static void
+http_get_retry_handler(const vector_t *strvec)
+{
+	checker_t *checker = LIST_TAIL_DATA(checkers_queue);
+	unsigned retry;
+
+	report_config_error(CONFIG_GENERAL_ERROR, "nb_get_retry is deprecated - please use 'retry'");
+
+	if (!read_unsigned_strvec(strvec, 1, &retry, 0, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid nb_get_retry value '%s'", strvec_slot(strvec, 1));
+		return;
+	}
+
+	checker->retry = retry;
+}
+
+static void
+virtualhost_handler(const vector_t *strvec)
 {
 	http_checker_t *http_get_chk = CHECKER_GET();
-	http_get_chk->nb_get_retry = CHECKER_VALUE_INT(strvec);
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "HTTP_GET virtualhost name missing");
+		return;
+	}
+
+	http_get_chk->virtualhost = set_value(strvec);
 }
 
-void
-delay_before_retry_handler(vector_t *strvec)
+static void
+http_get_check_end(void)
 {
 	http_checker_t *http_get_chk = CHECKER_GET();
-	http_get_chk->delay_before_retry = CHECKER_VALUE_INT(strvec) * TIMER_HZ;
+
+	if (LIST_ISEMPTY(http_get_chk->url)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "HTTP/SSL_GET checker has no urls specified - ignoring");
+		dequeue_new_checker();
+	}
+
+	if (!check_conn_opts(CHECKER_GET_CO())) {
+		dequeue_new_checker();
+	}
 }
 
-void
-url_handler(vector_t *strvec)
+static void
+url_handler(__attribute__((unused)) const vector_t *strvec)
 {
 	http_checker_t *http_get_chk = CHECKER_GET();
 	url_t *new;
@@ -138,82 +471,457 @@ url_handler(vector_t *strvec)
 	new = (url_t *) MALLOC(sizeof (url_t));
 
 	list_add(http_get_chk->url, new);
+
+#ifdef _WITH_REGEX_CHECK_
+	conf_regex_options = 0;
+#endif
+
+	http_get_chk->url_it = LIST_HEAD(http_get_chk->url);
 }
 
-void
-path_handler(vector_t *strvec)
+static void
+path_handler(const vector_t *strvec)
 {
 	http_checker_t *http_get_chk = CHECKER_GET();
 	url_t *url = LIST_TAIL_DATA(http_get_chk->url);
 
-	url->path = CHECKER_VALUE_STRING(strvec);
+	url->path = set_value(strvec);
 }
 
-void
-digest_handler(vector_t *strvec)
+static void
+digest_handler(const vector_t *strvec)
+{
+	http_checker_t *http_get_chk = CHECKER_GET();
+	url_t *url = LIST_TAIL_DATA(http_get_chk->url);
+	char *digest;
+	char *endptr;
+	int i;
+	uint8_t *digest_buf;
+
+	digest = STRDUP(strvec_slot(strvec, 1));
+
+	if (url->digest) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Digest '%s' is a duplicate", digest);
+		FREE(digest);
+		return;
+	}
+
+	if (strlen(digest) != 2 * MD5_DIGEST_LENGTH) {
+		report_config_error(CONFIG_GENERAL_ERROR, "digest '%s' character length should be %d rather than %zu", digest, 2 * MD5_DIGEST_LENGTH, strlen(digest));
+		FREE(digest);
+		return;
+	}
+
+	digest_buf = MALLOC(MD5_DIGEST_LENGTH);
+
+	for (i = MD5_DIGEST_LENGTH - 1; i >= 0; i--) {
+		digest[2 * i + 2] = '\0';
+		digest_buf[i] = strtoul(digest + 2 * i, &endptr, 16);
+		if (endptr != digest + 2 * i + 2) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Unable to interpret hex digit in '%s' at offset %d/%d", digest, 2 * i, 2 * i + 1);
+			FREE(digest_buf);
+			FREE(digest);
+			return;
+		}
+	}
+
+	url->digest = digest_buf;
+
+	FREE_CONST(digest);
+}
+
+static void
+status_code_handler(const vector_t *strvec)
 {
 	http_checker_t *http_get_chk = CHECKER_GET();
 	url_t *url = LIST_TAIL_DATA(http_get_chk->url);
+	const char *str;
+	unsigned int i, j;
+	char *endptr;
+	unsigned min, max;
+
+	for (i = 1; i < vector_size(strvec); i++) {
+		str = vector_slot(strvec, i);
 
-	url->digest = CHECKER_VALUE_STRING(strvec);
+		min = strtoul(str, &endptr, 10);
+		if (*endptr == '-')
+			max = strtoul(endptr + 1, &endptr, 10);
+		else
+			max = min;
+		if (*endptr ||
+		    min < HTTP_STATUS_CODE_MIN || min > HTTP_STATUS_CODE_MAX ||
+		    max < HTTP_STATUS_CODE_MIN || max > HTTP_STATUS_CODE_MAX ||
+		    min > max) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid HTTP_GET status code '%s'", str);
+			continue;
+		}
+
+		for (j = min; j <= max; j++)
+			__set_bit(j - HTTP_STATUS_CODE_MIN, url->status_code);
+	}
 }
 
-void
-status_code_handler(vector_t *strvec)
+static void
+url_virtualhost_handler(const vector_t *strvec)
 {
 	http_checker_t *http_get_chk = CHECKER_GET();
 	url_t *url = LIST_TAIL_DATA(http_get_chk->url);
 
-	url->status_code = CHECKER_VALUE_INT(strvec);
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Missing HTTP_GET virtualhost name");
+		return;
+	}
+
+	url->virtualhost = set_value(strvec);
 }
 
-void
-install_http_check_keyword(void)
+static void
+http_protocol_handler(const vector_t *strvec)
+{
+	http_checker_t *http_get_chk = CHECKER_GET();
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Missing http_protocol version");
+		return;
+	}
+
+	if (!strcmp(strvec_slot(strvec, 1), "1.0"))
+		http_get_chk->http_protocol = HTTP_PROTOCOL_1_0;
+	else if (!strcmp(strvec_slot(strvec, 1), "1.1"))
+		http_get_chk->http_protocol = HTTP_PROTOCOL_1_1;
+	else if (!strcmp(strvec_slot(strvec, 1), "1.0C") ||
+		 !strcmp(strvec_slot(strvec, 1), "1.0c"))
+		http_get_chk->http_protocol = HTTP_PROTOCOL_1_0C;
+	else {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid http_protocol version %s", strvec_slot(strvec, 1));
+		return;
+	}
+}
+
+#ifdef _WITH_REGEX_CHECK_
+static void
+regex_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	const vector_t *strvec_qe = alloc_strvec_quoted_escaped(NULL);
+
+	if (vector_size(strvec_qe) != 2) {
+		log_message(LOG_INFO, "regex missing or too many fields");
+		free_strvec(strvec_qe);
+		return;
+	}
+
+	conf_regex_pattern = (const unsigned char *)set_value(strvec_qe);
+	free_strvec(strvec_qe);
+}
+
+static void
+regex_no_match_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	http_checker_t *http_get_chk = CHECKER_GET();
+	url_t *url = LIST_TAIL_DATA(http_get_chk->url);
+
+	url->regex_no_match = true;
+}
+
+static void
+regex_options_handler(const vector_t *strvec)
+{
+	unsigned i, j;
+	const char *str;
+
+	for (i = 1; i < vector_size(strvec); i++) {
+		str = strvec_slot(strvec, i);
+
+		for (j = 0; regex_options[j].option; j++) {
+			if (!strcmp(str, regex_options[j].option)) {
+				conf_regex_options |= regex_options[j].option_bit;
+				break;
+			}
+		}
+	}
+}
+
+static size_t
+regex_offset_handler(const vector_t *strvec, const char *type)
+{
+	char *endptr;
+	unsigned long val;
+
+	if (vector_size(strvec) != 2) {
+		log_message(LOG_INFO, "Missing or too may options for regex_%s_offset", type);
+		return 0;
+	}
+
+	val = strtoul(vector_slot(strvec, 1), &endptr, 10);
+	if (*endptr) {
+		log_message(LOG_INFO, "Invalid regex_%s_offset %s specified", type, strvec_slot(strvec, 1));
+		return 0;
+	}
+
+	return (size_t)val;
+}
+
+static void
+regex_min_offset_handler(const vector_t *strvec)
+{
+	http_checker_t *http_get_chk = CHECKER_GET();
+	url_t *url = LIST_TAIL_DATA(http_get_chk->url);
+
+	url->regex_min_offset = regex_offset_handler(strvec, "min");
+}
+
+static void
+regex_max_offset_handler(const vector_t *strvec)
+{
+	http_checker_t *http_get_chk = CHECKER_GET();
+	url_t *url = LIST_TAIL_DATA(http_get_chk->url);
+
+	/* regex_max_offset is one beyond last acceptable position */
+	url->regex_max_offset = regex_offset_handler(strvec, "max") + 1;
+}
+
+#ifndef PCRE2_DONT_USE_JIT
+static void
+regex_stack_handler(const vector_t *strvec)
+{
+	http_checker_t *http_get_chk = CHECKER_GET();
+	url_t *url = LIST_TAIL_DATA(http_get_chk->url);
+	unsigned long stack_start, stack_max;
+	char *endptr;
+
+	if (vector_size(strvec) != 3) {
+		log_message(LOG_INFO, "regex_stack requires start and max values");
+		return;
+	}
+
+	stack_start = strtoul(vector_slot(strvec, 1), &endptr, 10);
+	if (*endptr) {
+		log_message(LOG_INFO, "regex_stack invalid start value");
+		return;
+	}
+
+	stack_max = strtoul(vector_slot(strvec, 2), &endptr, 10);
+	if (*endptr) {
+		log_message(LOG_INFO, "regex_stack invalid max value");
+		return;
+	}
+
+	if (stack_start > stack_max) {
+		log_message(LOG_INFO, "regex stack start cannot exceed max value");
+		return;
+	}
+
+	if (stack_start > jit_stack_start)
+		jit_stack_start = stack_start;
+	if (stack_max > jit_stack_max)
+		jit_stack_max = stack_max;
+	url->regex_use_stack = true;
+}
+#endif
+
+static void
+prepare_regex(url_t *url)
+{
+	int pcreErrorNumber;
+	PCRE2_SIZE pcreErrorOffset;
+	PCRE2_UCHAR buffer[256];
+	regex_t *r;
+	element e;
+
+	if (!LIST_EXISTS(regexs))
+		regexs = alloc_list(free_regex, NULL);
+
+	/* See if this regex has already been specified */
+	LIST_FOREACH(regexs, r, e) {
+		if (r->pcre2_options == conf_regex_options &&
+		    !strcmp((const char *)r->pattern, (const char *)conf_regex_pattern)) {
+			url->regex = r;
+			FREE_CONST_PTR(conf_regex_pattern);
+
+			url->regex->use_count++;
+
+			return;
+		}
+	}
+
+	/* This is a new regex */
+	url->regex = MALLOC(sizeof *r);
+	url->regex->pattern = conf_regex_pattern;
+	url->regex->pcre2_options = conf_regex_options;
+	conf_regex_pattern = NULL;
+	url->regex->use_count = 1;
+
+	url->regex->pcre2_reCompiled = pcre2_compile(url->regex->pattern, PCRE2_ZERO_TERMINATED, url->regex->pcre2_options, &pcreErrorNumber, &pcreErrorOffset, NULL);
+
+	/* pcre_compile returns NULL on error, and sets pcreErrorOffset & pcreErrorStr */
+	if(url->regex->pcre2_reCompiled == NULL) {
+		pcre2_get_error_message(pcreErrorNumber, buffer, sizeof buffer);
+		log_message(LOG_INFO, "Invalid regex: '%s' at offset %zu: %s\n", url->regex->pattern, pcreErrorOffset, (char *)buffer);
+
+		FREE_CONST_PTR(url->regex->pattern);
+		FREE_PTR(url->regex);
+
+		return;
+	}
+
+	url->regex->pcre2_match_data = pcre2_match_data_create_from_pattern(url->regex->pcre2_reCompiled, NULL);
+	pcre2_pattern_info(url->regex->pcre2_reCompiled, PCRE2_INFO_MAXLOOKBEHIND, &url->regex->pcre2_max_lookbehind);
+
+#ifndef PCRE2_DONT_USE_JIT
+	if ((pcreErrorNumber = pcre2_jit_compile(url->regex->pcre2_reCompiled, PCRE2_JIT_PARTIAL_HARD /* | PCRE2_JIT_COMPLETE */))) {
+		pcre2_get_error_message(pcreErrorNumber, buffer, sizeof buffer);
+		log_message(LOG_INFO, "Regex JIT compilation failed: '%s': %s\n", url->regex->pattern, (char *)buffer);
+
+		return;
+	}
+#endif
+
+	list_add(regexs, url->regex);
+}
+#endif
+
+#ifdef _HAVE_SSL_SET_TLSEXT_HOST_NAME_
+static void
+enable_sni_handler(const vector_t *strvec)
 {
-	install_keyword("HTTP_GET", &http_get_handler);
+	http_checker_t *http_get_chk = CHECKER_GET();
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res == -1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid enable_sni parameter %s", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+	http_get_chk->enable_sni = res;
+}
+#endif
+
+static void
+fast_recovery_handler(const vector_t *strvec)
+{
+	http_checker_t *http_get_chk = CHECKER_GET();
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res == -1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid fast_recovery parameter %s", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+	http_get_chk->fast_recovery = res;
+}
+
+static void
+url_check(void)
+{
+	http_checker_t *http_get_chk = CHECKER_GET();
+	url_t *url = LIST_TAIL_DATA(http_get_chk->url);
+	unsigned i;
+
+	if (!url->path) {
+		report_config_error(CONFIG_GENERAL_ERROR, "HTTP/SSL_GET checker url has no path - ignoring");
+		free_list_element(http_get_chk->url, http_get_chk->url->tail);
+		return;
+	}
+
+	/* Set default status codes if none set */
+	for (i = 0; i < sizeof(url->status_code) / sizeof(url->status_code[0]); i++) {
+		if (url->status_code[i])
+			break;
+	}
+	if (i >= sizeof(url->status_code) / sizeof(url->status_code[0])) {
+		for (i = HTTP_DEFAULT_STATUS_CODE_MIN; i <= HTTP_DEFAULT_STATUS_CODE_MAX; i++)
+			__set_bit(i - HTTP_STATUS_CODE_MIN, url->status_code);
+	}
+
+#ifdef _WITH_REGEX_CHECK_
+	if (conf_regex_pattern)
+		prepare_regex(url);
+	else if (conf_regex_options
+		 || url->regex_no_match
+		 || url->regex_min_offset
+		 || url->regex_max_offset
+#ifndef PCRE2_DONT_USE_JIT
+		 || url->regex_use_stack
+#endif
+					 ) {
+		log_message(LOG_INFO, "regex parameters specified without regex");
+		conf_regex_options = 0;
+		url->regex_no_match = false;
+		url->regex_min_offset = 0;
+		url->regex_max_offset = 0;
+#ifndef PCRE2_DONT_USE_JIT
+		url->regex_use_stack = false;
+#endif
+	}
+
+	if (url->regex_max_offset && url->regex_min_offset >= url->regex_max_offset) {
+		log_message(LOG_INFO, "regex min offset %zu > regex_max_offset %zu - ignoring", url->regex_min_offset, url->regex_max_offset - 1);
+		url->regex_min_offset = url->regex_max_offset = 0;
+	}
+#endif
+}
+
+static void
+install_http_ssl_check_keyword(const char *keyword)
+{
+	install_keyword(keyword, &http_get_handler);
 	install_sublevel();
-	install_connect_keywords();
-	install_keyword("warmup", &warmup_handler);
-	install_keyword("nb_get_retry", &nb_get_retry_handler);
-	install_keyword("delay_before_retry", &delay_before_retry_handler);
+	install_checker_common_keywords(true);
+	install_keyword("nb_get_retry", &http_get_retry_handler);	/* Deprecated */
+	install_keyword("virtualhost", &virtualhost_handler);
+	install_keyword("http_protocol", &http_protocol_handler);
+#ifdef _HAVE_SSL_SET_TLSEXT_HOST_NAME_
+	install_keyword("enable_sni", &enable_sni_handler);
+#endif
+	install_keyword("fast_recovery", &fast_recovery_handler);
 	install_keyword("url", &url_handler);
 	install_sublevel();
 	install_keyword("path", &path_handler);
 	install_keyword("digest", &digest_handler);
 	install_keyword("status_code", &status_code_handler);
+	install_keyword("virtualhost", &url_virtualhost_handler);
+#ifdef _WITH_REGEX_CHECK_
+	install_keyword("regex", &regex_handler);
+	install_keyword("regex_no_match", &regex_no_match_handler);
+	install_keyword("regex_options", &regex_options_handler);
+	install_keyword("regex_min_offset", &regex_min_offset_handler);
+	install_keyword("regex_max_offset", &regex_max_offset_handler);
+#ifndef PCRE2_DONT_USE_JIT
+	install_keyword("regex_stack", &regex_stack_handler);
+#endif
+#endif
+	install_sublevel_end_handler(url_check);
 	install_sublevel_end();
+	install_sublevel_end_handler(http_get_check_end);
 	install_sublevel_end();
 }
 
-/* a little code duplication :/ */
+void
+install_http_check_keyword(void)
+{
+	install_http_ssl_check_keyword("HTTP_GET");
+}
+
 void
 install_ssl_check_keyword(void)
 {
-	install_keyword("SSL_GET", &http_get_handler);
-	install_sublevel();
-	install_connect_keywords();
-	install_keyword("warmup", &warmup_handler);
-	install_keyword("nb_get_retry", &nb_get_retry_handler);
-	install_keyword("delay_before_retry", &delay_before_retry_handler);
-	install_keyword("url", &url_handler);
-	install_sublevel();
-	install_keyword("path", &path_handler);
-	install_keyword("digest", &digest_handler);
-	install_keyword("status_code", &status_code_handler);
-	install_sublevel_end();
-	install_sublevel_end();
+	install_http_ssl_check_keyword("SSL_GET");
 }
 
-/* 
+/*
  * The global design of this checker is the following :
- * 
+ *
  * - All the actions are done asynchronously.
  * - All the actions handle timeout connection.
  * - All the actions handle error from low layer to upper
  *   layers.
- * 
+ *
  * The global synopsis of the inter-thread-call is :
- *     
+ *
  *     http_connect_thread (handle layer4 connect)
  *            v
  *     http_check_thread (handle SSL connect)
@@ -231,340 +939,488 @@ install_ssl_check_keyword(void)
 
 /*
  * Simple epilog functions. Handling event timeout.
- * Finish the checker with memory managment or url rety check.
+ * Finish the checker with memory management or url rety check.
  *
- * c == 0 => reset to 0 retry_it counter
- * t == 0 => reset to 0 url_it counter
- * method == 1 => register a new checker thread
- * method == 2 => register a retry on url checker thread
+ * method == REGISTER_CHECKER_NEW => register a new checker thread
+ * method == REGISTER_CHECKER_RETRY => register a retry on url checker thread
+ * method == REGISTER_CHECKER_FAILED => register a checker on the failed URL
  */
-int
-epilog(thread_t * thread, int method, int t, int c)
+static int
+epilog(thread_ref_t thread, register_checker_t method)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	http_checker_t *http_get_check = CHECKER_ARG(checker);
-	http_t *http = HTTP_ARG(http_get_check);
-	request_t *req = HTTP_REQ(http);
-	long delay = 0;
+	request_t *req = http_get_check->req;
+	unsigned long delay = 0;
+	bool checker_was_up;
+	bool rs_was_alive;
+
+	if (method == REGISTER_CHECKER_NEW) {
+		ELEMENT_NEXT(http_get_check->url_it);
+		checker->retry_it = 0;
+	} else if (method == REGISTER_CHECKER_RETRY)
+		checker->retry_it++;
+
+	if (method == REGISTER_CHECKER_NEW && !http_get_check->url_it && !http_get_check->failed_url) {
+		/* Check completed. All the url have been successfully checked.
+		 * check if server is currently alive.
+		 */
+		if (!checker->is_up || !checker->has_run) {
+			log_message(LOG_INFO, "Remote Web server %s succeed on service."
+					    , FMT_CHK(checker));
+			checker_was_up = checker->is_up;
+			rs_was_alive = checker->rs->alive;
+			update_svr_checker_state(UP, checker);
+			if (!checker_was_up && checker->rs->smtp_alert &&
+			    (rs_was_alive != checker->rs->alive || !global_data->no_checker_emails))
+				smtp_alert(SMTP_MSG_RS, checker, NULL,
+					   "=> CHECK succeed on service <=");
+
+			/* We have done all the checks, so mark as has run */
+			checker->has_run = true;
+		}
 
-	if (method) {
-		http->url_it += t ? t : -http->url_it;
-		http->retry_it += c ? c : -http->retry_it;
+		/* Reset it counters */
+		http_get_check->url_it = LIST_HEAD(http_get_check->url);
+		checker->retry_it = 0;
 	}
-
 	/*
 	 * The get retry implementation mean that we retry performing
-	 * a GET on the same url until the remote web server return 
+	 * a GET on the same url until the remote web server return
 	 * html buffer. This is sometime needed with some applications
 	 * servers.
 	 */
-	if (http->retry_it > http_get_check->nb_get_retry-1) {
-		if (svr_checker_up(checker->id, checker->rs)) {
-			log_message(LOG_INFO, "Check on service %s failed after %d retry."
-			       , FMT_HTTP_RS(checker));
-			smtp_alert(checker->rs, NULL, NULL,
-				   "DOWN",
-				   "=> CHECK failed on service"
-				   " : MD5 digest mismatch <=");
-			update_svr_checker_state(DOWN, checker->id
-						     , checker->vs
-						     , checker->rs);
+	else if (method == REGISTER_CHECKER_RETRY && checker->retry_it > checker->retry) {
+		if (checker->is_up || !checker->has_run) {
+			if (checker->has_run && checker->retry)
+				log_message(LOG_INFO
+				   , "HTTP_CHECK on service %s failed after %u retry."
+				   , FMT_CHK(checker)
+				   , checker->retry_it - 1);
+			else
+				log_message(LOG_INFO
+				   , "HTTP_CHECK on service %s failed."
+				   , FMT_CHK(checker));
+			checker_was_up = checker->is_up;
+			rs_was_alive = checker->rs->alive;
+			update_svr_checker_state(DOWN, checker);
+			if (checker_was_up && checker->rs->smtp_alert &&
+			    (rs_was_alive != checker->rs->alive || !global_data->no_checker_emails))
+				smtp_alert(SMTP_MSG_RS, checker, NULL,
+					   "=> CHECK failed on service"
+					   " : HTTP request failed <=");
 		}
 
-		/* Reset it counters */
-		http->url_it = 0;
-		http->retry_it = 0;
+		/* Mark we have a failed URL */
+		http_get_check->failed_url = ELEMENT_DATA(http_get_check->url_it);
+	}
+	else if (method == REGISTER_CHECKER_NEW && http_get_check->failed_url) {
+		/* If the failed URL is now up, check all the URLs */
+		http_get_check->failed_url = NULL;
+		http_get_check->url_it = LIST_HEAD(http_get_check->url);
+		checker->retry_it = 0;
 	}
 
 	/* register next timer thread */
-	switch (method) {
-	case 1:
-		if (req)
-			delay = checker->vs->delay_loop;
-		else
-			delay =
-			    http_get_check->delay_before_retry;
-		break;
-	case 2:
-		if (http->url_it == 0 && http->retry_it == 0)
-			delay = checker->vs->delay_loop;
-		else
-			delay = http_get_check->delay_before_retry;
-		break;
+	if (method == REGISTER_CHECKER_NEW) {
+		delay = checker->delay_loop;
+		if (!checker->has_run)
+			checker->retry_it = checker->retry;
 	}
+	else if (http_get_check->failed_url)
+		delay = checker->delay_before_retry > checker->delay_loop ? checker->delay_before_retry : checker->delay_loop;
+	else
+		delay = checker->delay_before_retry;
 
 	/* If req == NULL, fd is not created */
 	if (req) {
-		if (req->ssl)
-			SSL_free(req->ssl);
-		if (req->buffer)
-			FREE(req->buffer);
-		FREE(req);
-		http->req = NULL;
-		close(thread->u.fd);
+		free_http_request(req);
+		http_get_check->req = NULL;
+		thread_close_fd(thread);
 	}
 
-	/* Register next checker thread */
-	thread_add_timer(thread->master, http_connect_thread, checker, delay);
+	/* Register next checker thread.
+	 * If the checker is not up, but we are not aware of any failure,
+	 * don't delay the checks if fast_recovery option specified. */
+	if (http_get_check->fast_recovery &&
+	    (!checker->has_run ||
+	     (!checker->is_up && !http_get_check->failed_url)))
+		thread_add_event(thread->master, http_connect_thread, checker, 0);
+	else
+		thread_add_timer(thread->master, http_connect_thread, checker, delay);
+
 	return 0;
 }
 
 int
-timeout_epilog(thread_t * thread, char *smtp_msg, char *debug_msg)
+timeout_epilog(thread_ref_t thread, const char *debug_msg)
 {
 	checker_t *checker = THREAD_ARG(thread);
 
-	log_message(LOG_INFO, "Timeout %s server %s."
-			    , debug_msg
-			    , FMT_HTTP_RS(checker));
-
 	/* check if server is currently alive */
-	if (svr_checker_up(checker->id, checker->rs)) {
-		smtp_alert(checker->rs, NULL, NULL,
-			   "DOWN", smtp_msg);
-		update_svr_checker_state(DOWN, checker->id
-					     , checker->vs
-					     , checker->rs);
+	if (checker->is_up || !checker->has_run) {
+		if (global_data->checker_log_all_failures || checker->log_all_failures)
+			log_message(LOG_INFO, "%s server %s."
+					    , debug_msg
+					    , FMT_CHK(checker));
+		checker->has_run = true;
+		return epilog(thread, REGISTER_CHECKER_RETRY);
 	}
 
-	return epilog(thread, 1, 0, 0);
+	/* do not retry if server is already known as dead */
+	return epilog(thread, REGISTER_CHECKER_FAILED);
 }
 
 /* return the url pointer of the current url iterator  */
-url_t *
+static inline url_t *
 fetch_next_url(http_checker_t * http_get_check)
 {
-	http_t *http = HTTP_ARG(http_get_check);
+	return ELEMENT_DATA(http_get_check->url_it);
+}
+
+#ifdef _WITH_REGEX_CHECK_
+/* Returns true to indicate buffer must be preserved */
+static bool
+check_regex(url_t *url, request_t *req)
+{
+	PCRE2_SIZE *ovector;
+	int pcreExecRet;
+	size_t keep;
+	size_t start_offset = 0;
+
+#ifdef _REGEX_DEBUG_
+	if (do_regex_debug)
+		log_message(LOG_INFO, "matched %d, min_offset %zu max_offset %zu, subject_offset %zu req->len %zu lookbehind %u start_offset %zu"
+#ifdef _WITH_REGEX_TIMERS_
+				", num_match_calls %u"
+#endif
+							,
+				req->regex_matched, url->regex_min_offset, url->regex_max_offset, req->regex_subject_offset,
+				req->len, url->regex->pcre2_max_lookbehind, req->start_offset
+#ifdef _WITH_REGEX_TIMERS_
+				, req->num_match_calls
+#endif
+			);
+#endif
+
+	/* If we have already matched the regex, there is no point in checking
+	 * any further */
+	if (req->regex_matched)
+		return false;
+
+	/* If the end of the current buffer doesn't reach the start offset specified,
+	 * then skip the check */
+	if (url->regex_min_offset) {
+		if (req->regex_subject_offset + req->len < url->regex_min_offset - url->regex->pcre2_max_lookbehind) {
+			req->regex_subject_offset += req->len;
+			return false;
+		}
+
+		if (req->regex_subject_offset < url->regex_min_offset)
+			start_offset = url->regex_min_offset - req->regex_subject_offset;
+	}
+
+	/* If we are beyond the end of where we want to check, then don't try matching */
+	if (url->regex_max_offset &&
+	    req->regex_subject_offset + req->start_offset >= url->regex_max_offset) {
+		req->regex_subject_offset += req->len;
+		return false;
+	}
+
+#ifndef PCRE2_DONT_USE_JIT
+	if (url->regex_use_stack && !mcontext) {
+		mcontext = pcre2_match_context_create(NULL);
+		jit_stack = pcre2_jit_stack_create(jit_stack_start, jit_stack_max, NULL);
+		pcre2_jit_stack_assign(mcontext, NULL, jit_stack);
+	}
+#endif
+
+	if (req->start_offset > start_offset)
+		start_offset = req->start_offset;
+
+#ifdef _WITH_REGEX_TIMERS_
+	struct timespec time_before, time_after;
+	clock_gettime(CLOCK_MONOTONIC_RAW, &time_before);
+#endif
+
+#ifndef PCRE2_DONT_USE_JIT
+	pcreExecRet = pcre2_jit_match
+#else
+	pcreExecRet = pcre2_match
+#endif
+				(url->regex->pcre2_reCompiled,
+				 (unsigned char *)req->buffer,
+				 req->len,
+				 start_offset,
+				 PCRE2_PARTIAL_HARD,
+				 url->regex->pcre2_match_data,
+#ifndef PCRE2_DONT_USE_JIT
+				 url->regex_use_stack ? mcontext : NULL
+#else
+				 NULL
+#endif
+				);			// context
+
+#ifdef _WITH_REGEX_TIMERS_
+	clock_gettime(CLOCK_MONOTONIC_RAW, &time_after);
+	req->req_time.tv_sec += time_after.tv_sec - time_before.tv_sec;
+	req->req_time.tv_nsec += time_after.tv_nsec - time_before.tv_nsec;
+	if (req->req_time.tv_nsec >= 1000000000L) {
+		req->req_time.tv_sec += req->req_time.tv_nsec / 1000000000L;
+		req->req_time.tv_nsec %= 1000000000L;
+	}
+	req->num_match_calls++;
+#endif
+	req->start_offset = 0;
+
+	if (pcreExecRet == PCRE2_ERROR_PARTIAL) {
+		ovector = pcre2_get_ovector_pointer(url->regex->pcre2_match_data);
+#ifdef _REGEX_DEBUG_
+		if (do_regex_debug)
+			log_message(LOG_INFO, "Partial returned, ovector %zu, max_lookbehind %u", ovector[0], url->regex->pcre2_max_lookbehind);
+#endif
+		if ((keep = ovector[0] - url->regex->pcre2_max_lookbehind) <= 0)
+			keep = 0;
+
+		if (keep) {
+			req->start_offset = url->regex->pcre2_max_lookbehind;
+			req->len -= keep;
+			memmove(req->buffer, req->buffer + keep, req->len);
+			req->regex_subject_offset += keep;
+		} else if (req->len == MAX_BUFFER_LENGTH - 1) {
+			req->regex_subject_offset += req->len;
+			log_message(LOG_INFO, "Regex partial match preserve too large - discarding");
+			return false;
+		}
+
+		return true;
+	}
+
+	/* Report what happened in the pcre2_match call. */
+	if(pcreExecRet < 0) {
+		req->regex_subject_offset += req->len;
+
+		switch(pcreExecRet)
+		{
+		case PCRE2_ERROR_NOMATCH:
+			/* This is not an error while doing partial matches */
+#ifdef _REGEX_DEBUG_
+			if (do_regex_debug)
+				log_message(LOG_INFO, "String did not match the regex pattern");
+#endif
+			break;
+		case PCRE2_ERROR_NULL:
+			log_message(LOG_INFO, "Something was null in regex match");
+			break;
+		case PCRE2_ERROR_BADOPTION:
+			log_message(LOG_INFO, "A bad option was passed to regex");
+			break;
+		case PCRE2_ERROR_BADMAGIC:
+			log_message(LOG_INFO, "Magic number bad (compiled regex corrupt?)");
+			break;
+		case PCRE2_ERROR_NOMEMORY:
+			log_message(LOG_INFO, "Regex an out of memory");
+			break;
+		default:
+			log_message(LOG_INFO, "Unknown regex error %d", pcreExecRet);
+			break;
+		}
+
+		return false;
+	}
 
-	return list_element(http_get_check->url, http->url_it);
+	if(pcreExecRet == 0)
+		log_message(LOG_INFO, "Too many substrings found");
+
+	ovector = pcre2_get_ovector_pointer(url->regex->pcre2_match_data);
+
+	/* Check if there was a match at or before regex_max_offset */
+	if (!url->regex_max_offset ||
+	    (req->regex_subject_offset + ovector[0] < url->regex_max_offset)) {
+		req->regex_matched = true;
+#ifdef _REGEX_DEBUG_
+		if (do_regex_debug)
+			log_message(LOG_INFO, "Result: We have a match at offset %zu - \"%.*s\"", req->regex_subject_offset + ovector[0], (int)(ovector[1] - ovector[0]), req->buffer + ovector[0]);
+	}
+	else {
+		log_message(LOG_INFO, "Match found but %zu bytes beyond regex_max_offset(%zu)", req->regex_subject_offset + ovector[0] - (url->regex_max_offset - 1), url->regex_max_offset - 1);
+#endif
+	}
+
+	req->regex_subject_offset += req->len;
+
+	return false;
 }
+#endif
 
 /* Handle response */
 int
-http_handle_response(thread_t * thread, unsigned char digest[16]
-		     , int empty_buffer)
+http_handle_response(thread_ref_t thread, unsigned char digest[MD5_DIGEST_LENGTH]
+		     , bool empty_buffer)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	http_checker_t *http_get_check = CHECKER_ARG(checker);
-	http_t *http = HTTP_ARG(http_get_check);
-	request_t *req = HTTP_REQ(http);
-	int r, di = 0;
-	char *digest_tmp;
-	url_t *fetched_url = fetch_next_url(http_get_check);
-	enum {
-		none,
-		on_status,
-		on_digest
-	} last_success = none; /* the source of last considered success */
+	request_t *req = http_get_check->req;
+	int r;
+	url_t *url = fetch_next_url(http_get_check);
+	const char *msg = "HTTP status code";
 
 	/* First check if remote webserver returned data */
 	if (empty_buffer)
-		return timeout_epilog(thread, "=> CHECK failed on service"
-				      " : empty buffer received <=\n\n",
-				      "Read, no data received from ");
+		return timeout_epilog(thread, "Read, no data received from ");
 
 	/* Next check the HTTP status code */
-	if (fetched_url->status_code) {
-		if (req->status_code != fetched_url->status_code) {
-			/* check if server is currently alive */
-			if (svr_checker_up(checker->id, checker->rs)) {
-				log_message(LOG_INFO,
-				       "HTTP status code error to %s url(%s)"
-				       ", status_code [%d].",
-				       FMT_HTTP_RS(checker),
-				       fetched_url->path,
-				       req->status_code);
-				smtp_alert(checker->rs, NULL, NULL,
-					   "DOWN",
-					   "=> CHECK failed on service"
-					   " : HTTP status code mismatch <=");
-				update_svr_checker_state(DOWN, checker->id
-							     , checker->vs
-							     , checker->rs);
-			} else {
-				DBG("HTTP Status_code to %s url(%d) = [%d]."
-				    , FMT_HTTP_RS(checker)
-				    , http->url_it + 1
-				    , req->status_code);
-				/*
-				 * We set retry iterator to max value to not retry
-				 * when service is already know as die.
-				 */
-				http->retry_it = http_get_check->nb_get_retry;
-			}
-			return epilog(thread, 2, 0, 1);
-		} else {
-			last_success = on_status;
+	if (req->status_code < HTTP_STATUS_CODE_MIN ||
+		req->status_code > HTTP_STATUS_CODE_MAX ||
+		!__test_bit(req->status_code - HTTP_STATUS_CODE_MIN, url->status_code))
+		return timeout_epilog(thread, "HTTP status code error to");
+
+	/* Report a length mismatch the first time we get the specific difference */
+	if (req->content_len != SIZE_MAX && req->content_len != req->rx_bytes) {
+		if (url->len_mismatch != (ssize_t)req->content_len - (ssize_t)req->rx_bytes) {
+			log_message(LOG_INFO, "http_check for RS %s VS %s url %s%s: content_length (%zu) does not match received bytes (%zu)",
+				    FMT_RS(checker->rs, checker->vs), FMT_VS(checker->vs), url->virtualhost ? url->virtualhost : "",
+				    url->path, req->content_len, req->rx_bytes);
+			url->len_mismatch = (ssize_t)req->content_len - (ssize_t)req->rx_bytes;
 		}
 	}
+	else
+		url->len_mismatch = 0;
 
 	/* Continue with MD5SUM */
-	if (fetched_url->digest) {
+	if (url->digest) {
 		/* Compute MD5SUM */
-		digest_tmp = (char *) MALLOC(MD5_BUFFER_LENGTH + 1);
-		for (di = 0; di < 16; di++)
-			sprintf(digest_tmp + 2 * di, "%02x", digest[di]);
-
-		r = strcmp(fetched_url->digest, digest_tmp);
-
-		if (r) {
-			/* check if server is currently alive */
-			if (svr_checker_up(checker->id, checker->rs)) {
-				log_message(LOG_INFO,
-				       "MD5 digest error to %s url[%s]"
-				       ", MD5SUM [%s].",
-				       FMT_HTTP_RS(checker),
-				       fetched_url->path,
-				       digest_tmp);
-				smtp_alert(checker->rs, NULL, NULL,
-					   "DOWN",
-					   "=> CHECK failed on service"
-					   " : HTTP MD5SUM mismatch <=");
-				update_svr_checker_state(DOWN, checker->id
-							     , checker->vs
-							     , checker->rs);
-			} else {
-				DBG("MD5SUM to %s url(%d) = [%s]."
-				    , FMT_HTTP_RS(checker)
-				    , http->url_it + 1
-				    , digest_tmp);
-				/*
-				 * We set retry iterator to max value to not retry
-				 * when service is already know as die.
-				 */
-				http->retry_it = http_get_check->nb_get_retry;
-			}
-			FREE(digest_tmp);
-			return epilog(thread, 2, 0, 1);
-		} else {
-			last_success = on_digest;
-			FREE(digest_tmp);
-		}
+		r = memcmp(url->digest, digest, MD5_DIGEST_LENGTH);
+
+		if (r)
+			return timeout_epilog(thread, "MD5 digest error to");
+		msg = "MD5 digest";
 	}
 
-	if (!svr_checker_up(checker->id, checker->rs)) {
-		switch (last_success) {
-			case none:
-				break;
-			case on_status:
-				log_message(LOG_INFO,
-				       "HTTP status code success to %s url(%d)."
-				       , FMT_HTTP_RS(checker)
-				       , http->url_it + 1);
-				return epilog(thread, 1, 1, 0) + 1;
-			case on_digest:
-				if (!svr_checker_up(checker->id, checker->rs))
-					log_message(LOG_INFO, "MD5 digest success to %s url(%d)."
-						   , FMT_HTTP_RS(checker)
-						   , http->url_it + 1);
-				return epilog(thread, 1, 1, 0) + 1;
+#ifdef _WITH_REGEX_CHECK_
+	/* Did a regex match? */
+	if (url->regex) {
+#ifdef _WITH_REGEX_TIMERS_
+		url->regex->regex_time.tv_sec += req->req_time.tv_sec;
+		url->regex->regex_time.tv_nsec += req->req_time.tv_nsec;
+		if (url->regex->regex_time.tv_nsec >= 1000000000L) {
+			url->regex->regex_time.tv_sec += url->regex->regex_time.tv_nsec / 1000000000L;
+			url->regex->regex_time.tv_nsec %= 1000000000L;
 		}
+		url->regex->num_match_calls += req->num_match_calls;
+		url->regex->num_regex_urls++;
+#endif
+
+		if (req->regex_matched == url->regex_no_match)
+			return timeout_epilog(thread, "Regex match failed");
+		msg = "Regex match";
+	}
+#endif
+
+	if (!checker->is_up) {
+		log_message(LOG_INFO,
+			"%s success to %s url(%s)", msg
+			, FMT_CHK(checker)
+			, url->path);
+		return epilog(thread, REGISTER_CHECKER_NEW) + 1;
 	}
 
-	return epilog(thread, 1, 0, 0) + 1;
+	return epilog(thread, REGISTER_CHECKER_NEW) + 1;
 }
 
 /* Handle response stream performing MD5 updates */
-int
-http_process_response(request_t *req, int r)
+void
+http_process_response(request_t *req, size_t r, url_t *url)
 {
+	size_t old_req_len = req->len;
+
 	req->len += r;
+	req->buffer[req->len] = '\0';	/* Terminate the received data since it is used as a string */
+
 	if (!req->extracted) {
-		if ((req->extracted =
-		     extract_html(req->buffer, req->len))) {
+		if ((req->extracted = extract_html(req->buffer, req->len))) {
 			req->status_code = extract_status_code(req->buffer, req->len);
-			r = req->len - (req->extracted - req->buffer);
-			if (r) {
-				memmove(req->buffer, req->extracted, r);
-				MD5_Update(&req->context, req->buffer, r);
-				r = 0;
+			req->content_len = extract_content_length(req->buffer, req->len);
+			r = req->len - (size_t)(req->extracted - req->buffer);
+			if (r && url->digest) {
+				if (req->content_len == SIZE_MAX || req->content_len > req->rx_bytes)
+					MD5_Update(&req->context, req->extracted,
+						   req->content_len == SIZE_MAX || req->content_len >= req->rx_bytes + r ? r : req->content_len - req->rx_bytes);
 			}
-			req->len = r;
+
+			req->rx_bytes = r;
+#ifdef _WITH_REGEX_CHECK_
+			if (!r || !url->regex || !check_regex(url, req))
+#endif
+				req->len = 0;
 		}
 	} else if (req->len) {
-		MD5_Update(&req->context, req->buffer,
-			   req->len);
-		req->len = 0;
-	}
+		if (url->digest &&
+		    (req->content_len == SIZE_MAX || req->content_len > req->rx_bytes)) {
+			MD5_Update(&req->context, req->buffer + old_req_len,
+				   req->content_len == SIZE_MAX || req->content_len >= req->rx_bytes + r ? r : req->content_len - req->rx_bytes);
+		}
 
-	return 0;
+		req->rx_bytes += req->len;
+#ifdef _WITH_REGEX_CHECK_
+		if (!url->regex || !check_regex(url, req))
+#endif
+			req->len = 0;
+	}
 }
 
 /* Asynchronous HTTP stream reader */
-int
-http_read_thread(thread_t * thread)
+static int
+http_read_thread(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	http_checker_t *http_get_check = CHECKER_ARG(checker);
-	http_t *http = HTTP_ARG(http_get_check);
-	request_t *req = HTTP_REQ(http);
+	request_t *req = http_get_check->req;
+	url_t *url = fetch_next_url(http_get_check);
 	unsigned timeout = checker->co->connection_to;
-	unsigned char digest[16];
-	int r = 0;
-	int val;
+	unsigned char digest[MD5_DIGEST_LENGTH];
+	ssize_t r = 0;
 
 	/* Handle read timeout */
 	if (thread->type == THREAD_READ_TIMEOUT)
-		return timeout_epilog(thread, "=> HTTP CHECK failed on service"
-				      " : recevice data <=\n\n", "HTTP read");
-
-	/* Set descriptor non blocking */
-	val = fcntl(thread->u.fd, F_GETFL, 0);
-	fcntl(thread->u.fd, F_SETFL, val | O_NONBLOCK);
+		return timeout_epilog(thread, "Timeout HTTP read");
 
 	/* read the HTTP stream */
-	r = read(thread->u.fd, req->buffer + req->len,
-		 MAX_BUFFER_LENGTH - req->len);
-
-	/* restore descriptor flags */
-	fcntl(thread->u.fd, F_SETFL, val);
+	r = read(thread->u.f.fd, req->buffer + req->len,
+		 MAX_BUFFER_LENGTH - 1 - req->len);	/* Allow space for adding '\0' */
 
 	/* Test if data are ready */
-	if (r == -1 && (errno == EAGAIN || errno == EINTR)) {
+	if (r == -1 && (check_EAGAIN(errno) || check_EINTR(errno))) {
 		log_message(LOG_INFO, "Read error with server %s: %s"
-				    , FMT_HTTP_RS(checker)
+				    , FMT_CHK(checker)
 				    , strerror(errno));
 		thread_add_read(thread->master, http_read_thread, checker,
-				thread->u.fd, timeout);
+				thread->u.f.fd, timeout, true);
 		return 0;
 	}
 
-	if (r == -1 || r == 0) {	/* -1:error , 0:EOF */
-
+	if (r <= 0) {	/* -1:error , 0:EOF */
 		/* All the HTTP stream has been parsed */
-		MD5_Final(digest, &req->context);
+		if (url->digest)
+			MD5_Final(digest, &req->context);
 
 		if (r == -1) {
-			/* We have encourred a real read error */
-			if (svr_checker_up(checker->id, checker->rs)) {
-				log_message(LOG_INFO, "Read error with server %s: %s"
-				       , FMT_HTTP_RS(checker)
-				       , strerror(errno));
-				smtp_alert(checker->rs, NULL, NULL,
-					   "DOWN",
-					   "=> HTTP CHECK failed on service"
-					   " : cannot receive data <=");
-				update_svr_checker_state(DOWN, checker->id
-							     , checker->vs
-							     , checker->rs);
-			}
-			return epilog(thread, 1, 0, 0);
+			/* We have encountered a real read error */
+			return timeout_epilog(thread, "Read error with");
 		}
 
 		/* Handle response stream */
-		http_handle_response(thread, digest, (!req->extracted) ? 1 : 0);
-
+		http_handle_response(thread, digest, !req->extracted);
 	} else {
-
 		/* Handle response stream */
-		http_process_response(req, r);
+		http_process_response(req, (size_t)r, url);
 
 		/*
 		 * Register next http stream reader.
 		 * Register itself to not perturbe global I/O multiplexer.
 		 */
 		thread_add_read(thread->master, http_read_thread, checker,
-				thread->u.fd, timeout);
+				thread->u.f.fd, timeout, true);
 	}
 
 	return 0;
@@ -574,254 +1430,209 @@ http_read_thread(thread_t * thread)
  * Read get result from the remote web server.
  * Apply trigger check to this result.
  */
-int
-http_response_thread(thread_t * thread)
+static int
+http_response_thread(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	http_checker_t *http_get_check = CHECKER_ARG(checker);
-	http_t *http = HTTP_ARG(http_get_check);
-	request_t *req = HTTP_REQ(http);
+	request_t *req = http_get_check->req;
+	url_t *url = fetch_next_url(http_get_check);
 	unsigned timeout = checker->co->connection_to;
 
 	/* Handle read timeout */
 	if (thread->type == THREAD_READ_TIMEOUT)
-		return timeout_epilog(thread, "=> CHECK failed on service"
-				      " : recevice data <=\n\n", "WEB read");
+		return timeout_epilog(thread, "Timeout WEB read");
 
 	/* Allocate & clean the get buffer */
 	req->buffer = (char *) MALLOC(MAX_BUFFER_LENGTH);
 	req->extracted = NULL;
 	req->len = 0;
 	req->error = 0;
-	MD5_Init(&req->context);
+#ifdef _WITH_REGEX_CHECK_
+	req->regex_matched = false;
+	req->regex_subject_offset = 0;
+#ifdef _WITH_REGEX_TIMERS_
+	req->num_match_calls = 0;
+#endif
+#endif
+	if (url->digest)
+		MD5_Init(&req->context);
 
 	/* Register asynchronous http/ssl read thread */
 	if (http_get_check->proto == PROTO_SSL)
 		thread_add_read(thread->master, ssl_read_thread, checker,
-				thread->u.fd, timeout);
+				thread->u.f.fd, timeout, true);
 	else
 		thread_add_read(thread->master, http_read_thread, checker,
-				thread->u.fd, timeout);
+				thread->u.f.fd, timeout, true);
 	return 0;
 }
 
 /* remote Web server is connected, send it the get url query.  */
-int
-http_request_thread(thread_t * thread)
+static int
+http_request_thread(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	http_checker_t *http_get_check = CHECKER_ARG(checker);
-	http_t *http = HTTP_ARG(http_get_check);
-	request_t *req = HTTP_REQ(http);
+	request_t *req = http_get_check->req;
 	struct sockaddr_storage *addr = &checker->co->dst;
 	unsigned timeout = checker->co->connection_to;
-	char *vhost = CHECKER_VHOST(checker);
-	char *request_host = 0;
-	char *request_host_port = 0;
+	const char *vhost;
+	const char *request_host;
+	char request_host_port[7];	/* ":" [0-9][0-9][0-9][0-9][0-9] "\0" */
 	char *str_request;
 	url_t *fetched_url;
 	int ret = 0;
-	int val;
 
-	/* Handle read timeout */
+	/* Handle write timeout */
 	if (thread->type == THREAD_WRITE_TIMEOUT)
-		return timeout_epilog(thread, "=> CHECK failed on service"
-				      " : read timeout <=\n\n",
-				      "Web read, timeout");
+		return timeout_epilog(thread, "Timeout WEB write");
 
 	/* Allocate & clean the GET string */
 	str_request = (char *) MALLOC(GET_BUFFER_LENGTH);
 
 	fetched_url = fetch_next_url(http_get_check);
 
+	if (fetched_url->virtualhost)
+		vhost = fetched_url->virtualhost;
+	else if (http_get_check->virtualhost)
+		vhost = http_get_check->virtualhost;
+	else if (checker->rs->virtualhost)
+		vhost = checker->rs->virtualhost;
+	else if (checker->vs->virtualhost)
+		vhost = checker->vs->virtualhost;
+	else
+		vhost = NULL;
+
 	if (vhost) {
 		/* If vhost was defined we don't need to override it's port */
 		request_host = vhost;
-		request_host_port = (char*) MALLOC(1);
-		*request_host_port = 0;
+		request_host_port[0] = '\0';
 	} else {
 		request_host = inet_sockaddrtos(addr);
 
-		/* Allocate a buffer for the port string ( ":" [0-9][0-9][0-9][0-9][0-9] "\0" ) */
-		request_host_port = (char*) MALLOC(7);
-		snprintf(request_host_port, 7, ":%d", 
+		snprintf(request_host_port, sizeof(request_host_port), ":%d",
 			 ntohs(inet_sockaddrport(addr)));
 	}
 
-	if(addr->ss_family == AF_INET6 && !vhost){
 		/* if literal ipv6 address, use ipv6 template, see RFC 2732 */
-		snprintf(str_request, GET_BUFFER_LENGTH, REQUEST_TEMPLATE_IPV6,
-			fetched_url->path, request_host, request_host_port);
-	} else {
-		snprintf(str_request, GET_BUFFER_LENGTH, REQUEST_TEMPLATE,
-			fetched_url->path, request_host, request_host_port);
-	}
-
-	FREE(request_host_port);
+	snprintf(str_request, GET_BUFFER_LENGTH, (addr->ss_family == AF_INET6 && !vhost) ? request_template_ipv6 : request_template,
+			fetched_url->path,
+			http_get_check->http_protocol == HTTP_PROTOCOL_1_1 ? 1 : 0,
+			http_get_check->http_protocol == HTTP_PROTOCOL_1_0C || http_get_check->http_protocol == HTTP_PROTOCOL_1_1 ? "Connection: close\r\n" : "",
+			request_host, request_host_port);
 
-	DBG("Processing url(%d) of %s.",
-	    http->url_it + 1
-	    , FMT_HTTP_RS(checker));
-
-	/* Set descriptor non blocking */
-	val = fcntl(thread->u.fd, F_GETFL, 0);
-	fcntl(thread->u.fd, F_SETFL, val | O_NONBLOCK);
+	DBG("Processing url(%s) of %s.", url->path, FMT_CHK(checker));
 
 	/* Send the GET request to remote Web server */
-	if (http_get_check->proto == PROTO_SSL) {
-		ret = ssl_send_request(req->ssl, str_request,
-				       strlen(str_request));
-	} else {
-		ret = (send(thread->u.fd, str_request, strlen(str_request), 0) !=
-		       -1) ? 1 : 0;
-	}
-
-	/* restore descriptor flags */
-	fcntl(thread->u.fd, F_SETFL, val);
+	if (http_get_check->proto == PROTO_SSL)
+		ret = ssl_send_request(req->ssl, str_request, (int)strlen(str_request));
+	else
+		ret = (send(thread->u.f.fd, str_request, strlen(str_request), 0) != -1);
 
 	FREE(str_request);
 
-	if (!ret) {
-		log_message(LOG_INFO, "Cannot send get request to %s."
-				    , FMT_HTTP_RS(checker));
-
-		/* check if server is currently alive */
-		if (svr_checker_up(checker->id, checker->rs)) {
-			smtp_alert(checker->rs, NULL, NULL,
-				   "DOWN",
-				   "=> CHECK failed on service"
-				   " : cannot send data <=");
-			update_svr_checker_state(DOWN, checker->id
-						     , checker->vs
-						     , checker->rs);
-		}
-		return epilog(thread, 1, 0, 0);
-	}
+	if (!ret)
+		return timeout_epilog(thread, "Cannot send get request to");
 
 	/* Register read timeouted thread */
 	thread_add_read(thread->master, http_response_thread, checker,
-			thread->u.fd, timeout);
+			thread->u.f.fd, timeout, true);
+	thread_del_write(thread);
 	return 1;
 }
 
 /* WEB checkers threads */
-int
-http_check_thread(thread_t * thread)
+static int
+http_check_thread(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	http_checker_t *http_get_check = CHECKER_ARG(checker);
-	http_t *http = HTTP_ARG(http_get_check);
 #ifdef _DEBUG_
-	request_t *req = HTTP_REQ(http);
+	request_t *req = http_get_check->req;
 #endif
 	int ret = 1;
 	int status;
-	long timeout = 0;
+	unsigned long timeout = 0;
 	int ssl_err = 0;
-	int new_req = 0;
+	bool new_req = false;
 
-	status = tcp_socket_state(thread->u.fd, thread, http_check_thread);
+	status = tcp_socket_state(thread, http_check_thread);
 	switch (status) {
 	case connect_error:
-		/* check if server is currently alive */
-		if (svr_checker_up(checker->id, checker->rs)) {
-			log_message(LOG_INFO, "Error connecting server %s."
-					 , FMT_HTTP_RS(checker));
-			smtp_alert(checker->rs, NULL, NULL,
-				   "DOWN",
-				   "=> CHECK failed on service"
-				   " : connection error <=");
-			update_svr_checker_state(DOWN, checker->id
-						 , checker->vs
-						 , checker->rs);
-		}
-		return epilog(thread, 1, 0, 0);
+		return timeout_epilog(thread, "Error connecting");
 		break;
 
 	case connect_timeout:
-		return timeout_epilog(thread, "==> CHECK failed on service"
-				      " : connection timeout <=\n\n",
-				      "connect, timeout");
+		return timeout_epilog(thread, "Timeout connecting");
 		break;
 
-	case connect_success:{
-			if (!http->req) {
-				http->req = (request_t *) MALLOC(sizeof (request_t));
-				new_req = 1;
-			} else
-				new_req = 0;
-
-			if (http_get_check->proto == PROTO_SSL) {
-				timeout = timer_long(thread->sands) - timer_long(time_now);
-				if (thread->type != THREAD_WRITE_TIMEOUT &&
-				    thread->type != THREAD_READ_TIMEOUT)
-					ret = ssl_connect(thread, new_req);
-				else {
-					return timeout_epilog(thread, "==> CHECK failed on service"
-							      " : connection timeout <=\n\n",
-							      "connect, timeout");
-				}
+	case connect_fail:
+		return timeout_epilog(thread, "Connection failed");
+		break;
 
-				if (ret == -1) {
-					switch ((ssl_err = SSL_get_error(http->req->ssl,
-									 ret))) {
-					case SSL_ERROR_WANT_READ:
-						thread_add_read(thread->master,
-								http_check_thread,
-								THREAD_ARG(thread),
-								thread->u.fd, timeout);
-						break;
-					case SSL_ERROR_WANT_WRITE:
-						thread_add_write(thread->master,
-								 http_check_thread,
-								 THREAD_ARG(thread),
-								 thread->u.fd, timeout);
-						break;
-					default:
-						ret = 0;
-						break;
-					}
-					if (ret == -1)
-						break;
-				} else if (ret != 1)
+	case connect_success:
+		if (!http_get_check->req) {
+			http_get_check->req = (request_t *) MALLOC(sizeof (request_t));
+			new_req = true;
+		} else
+			new_req = false;
+
+		if (http_get_check->proto == PROTO_SSL) {
+			timeout = timer_long(thread->sands) - timer_long(time_now);
+			if (thread->type != THREAD_WRITE_TIMEOUT &&
+			    thread->type != THREAD_READ_TIMEOUT)
+				ret = ssl_connect(thread, new_req);
+			else
+				return timeout_epilog(thread, "Timeout connecting");
+
+			if (ret == -1) {
+				switch ((ssl_err = SSL_get_error(http_get_check->req->ssl,
+								 ret))) {
+				case SSL_ERROR_WANT_READ:
+					thread_add_read(thread->master,
+							http_check_thread,
+							THREAD_ARG(thread),
+							thread->u.f.fd, timeout, true);
+					thread_del_write(thread);
+					break;
+				case SSL_ERROR_WANT_WRITE:
+					thread_add_write(thread->master,
+							 http_check_thread,
+							 THREAD_ARG(thread),
+							 thread->u.f.fd, timeout, true);
+					thread_del_read(thread);
+					break;
+				default:
 					ret = 0;
-			}
-
-			if (ret) {
-				/* Remote WEB server is connected.
-				 * Register the next step thread ssl_request_thread.
-				 */
-				DBG("Remote Web server %s connected.", FMT_HTTP_RS(checker));
-				thread_add_write(thread->master,
-						 http_request_thread, checker,
-						 thread->u.fd,
-						 checker->co->connection_to);
-			} else {
-				DBG("Connection trouble to: %s."
-						 , FMT_HTTP_RS(checker));
-#ifdef _DEBUG_
-				if (http_get_check->proto == PROTO_SSL)
-					ssl_printerr(SSL_get_error
-						     (req->ssl, ret));
-#endif
-				if ((http_get_check->proto == PROTO_SSL) &&
-				    (svr_checker_up(checker->id, checker->rs))) {
-					log_message(LOG_INFO, "SSL handshake/communication error"
-							 " connecting to server"
-							 " (openssl errno: %d) %s."
-						       , SSL_get_error (http->req->ssl, ret)
-						       , FMT_HTTP_RS(checker));
-					smtp_alert(checker->rs, NULL, NULL,
-						   "DOWN",
-						   "=> CHECK failed on service"
-						   " : SSL connection error <=");
-					update_svr_checker_state(DOWN, checker->id
-								 , checker->vs
-								 , checker->rs);
+					break;
 				}
+				if (ret == -1)
+					break;
+			} else if (ret != 1)
+				ret = 0;
+		}
 
-				return epilog(thread, 1, 0, 0);
-			}
+		if (ret) {
+			/* Remote WEB server is connected.
+			 * Register the next step thread ssl_request_thread.
+			 */
+			DBG("Remote Web server %s connected.", FMT_CHK(checker));
+			thread_add_write(thread->master,
+					 http_request_thread, checker,
+					 thread->u.f.fd,
+					 checker->co->connection_to, true);
+			thread_del_read(thread);
+		} else {
+			DBG("Connection trouble to: %s."
+					 , FMT_CHK(checker));
+#ifdef _DEBUG_
+			if (http_get_check->proto == PROTO_SSL)
+				ssl_printerr(SSL_get_error
+					     (req->ssl, ret));
+#endif
+			return timeout_epilog(thread, "SSL handshake/communication error"
+						 " connecting to");
 		}
 		break;
 	}
@@ -829,12 +1640,11 @@ http_check_thread(thread_t * thread)
 	return 0;
 }
 
-int
-http_connect_thread(thread_t * thread)
+static int
+http_connect_thread(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	http_checker_t *http_get_check = CHECKER_ARG(checker);
-	http_t *http = HTTP_ARG(http_get_check);
 	conn_opts_t *co = checker->co;
 	url_t *fetched_url;
 	enum connect_result status;
@@ -844,52 +1654,62 @@ http_connect_thread(thread_t * thread)
 	 * Register a new checker thread & return
 	 * if checker is disabled
 	 */
-	if (!CHECKER_ENABLED(checker)) {
+	if (!checker->enabled) {
 		thread_add_timer(thread->master, http_connect_thread, checker,
-				 checker->vs->delay_loop);
+				 checker->delay_loop);
 		return 0;
 	}
 
-	/* Find eventual url end */
+	/* if there are no URLs in list, enable server w/o checking */
 	fetched_url = fetch_next_url(http_get_check);
-
-	if (!fetched_url) {
-		/* All the url have been successfully checked.
-		 * Check completed.
-		 * check if server is currently alive.
-		 */
-		if (!svr_checker_up(checker->id, checker->rs)) {
-			log_message(LOG_INFO, "Remote Web server %s succeed on service."
-					    , FMT_HTTP_RS(checker));
-			smtp_alert(checker->rs, NULL, NULL, "UP",
-				   "=> CHECK succeed on service <=");
-			update_svr_checker_state(UP, checker->id
-						   , checker->vs
-						   , checker->rs);
-		}
-		http->req = NULL;
-		return epilog(thread, 1, 0, 0) + 1;
-	}
+	if (!fetched_url)
+		return epilog(thread, REGISTER_CHECKER_NEW) + 1;
 
 	/* Create the socket */
-	if ((fd = socket(co->dst.ss_family, SOCK_STREAM, IPPROTO_TCP)) == -1) {
+	if ((fd = socket(co->dst.ss_family, SOCK_STREAM | SOCK_CLOEXEC | SOCK_NONBLOCK, IPPROTO_TCP)) == -1) {
 		log_message(LOG_INFO, "WEB connection fail to create socket. Rescheduling.");
 		thread_add_timer(thread->master, http_connect_thread, checker,
-				checker->vs->delay_loop);
+				checker->delay_loop);
 
 		return 0;
 	}
 
+#if !HAVE_DECL_SOCK_NONBLOCK
+	if (set_sock_flags(fd, F_SETFL, O_NONBLOCK))
+		log_message(LOG_INFO, "Unable to set NONBLOCK on http_connect socket - %s (%d)", strerror(errno), errno);
+#endif
+
+#if !HAVE_DECL_SOCK_CLOEXEC
+	if (set_sock_flags(fd, F_SETFD, FD_CLOEXEC))
+		log_message(LOG_INFO, "Unable to set CLOEXEC on http_connect socket - %s (%d)", strerror(errno), errno);
+#endif
+
 	status = tcp_bind_connect(fd, co);
 
 	/* handle tcp connection status & register check worker thread */
 	if(tcp_connection_state(fd, status, thread, http_check_thread,
 			co->connection_to)) {
 		close(fd);
-		log_message(LOG_INFO, "WEB socket bind failed. Rescheduling");
-		thread_add_timer(thread->master, http_connect_thread, checker,
-				checker->vs->delay_loop);
+		if (status == connect_fail) {
+			timeout_epilog(thread, "HTTP_CHECK - network unreachable");
+		} else {
+			log_message(LOG_INFO, "WEB socket bind failed. Rescheduling");
+			thread_add_timer(thread->master, http_connect_thread, checker,
+					checker->delay_loop);
+		}
 	}
 
 	return 0;
 }
+
+#ifdef THREAD_DUMP
+void
+register_check_http_addresses(void)
+{
+	register_thread_address("http_check_thread", http_check_thread);
+	register_thread_address("http_connect_thread", http_connect_thread);
+	register_thread_address("http_read_thread", http_read_thread);
+	register_thread_address("http_request_thread", http_request_thread);
+	register_thread_address("http_response_thread", http_response_thread);
+}
+#endif
diff --git a/tools/keepalived/keepalived/check/check_misc.c b/tools/keepalived/keepalived/check/check_misc.c
index 53e08e98d..1763bd1ce 100644
--- a/tools/keepalived/keepalived/check/check_misc.c
+++ b/tools/keepalived/keepalived/check/check_misc.c
@@ -20,75 +20,188 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <errno.h>
+#include <signal.h>
+#include <stdio.h>
+
+#include "main.h"
 #include "check_misc.h"
 #include "check_api.h"
-#include "memory.h"
 #include "ipwrapper.h"
 #include "logger.h"
 #include "smtp.h"
 #include "utils.h"
 #include "parser.h"
-#include "notify.h"
 #include "daemon.h"
-#include "signals.h"
+#include "global_data.h"
+#include "global_parser.h"
+#include "keepalived_magic.h"
+#ifdef THREAD_DUMP
+#include "scheduler.h"
+#endif
 
-int misc_check_thread(thread_t *);
-int misc_check_child_thread(thread_t *);
-int misc_check_child_timeout_thread(thread_t *);
+static int misc_check_thread(thread_ref_t);
+static int misc_check_child_thread(thread_ref_t);
+
+static bool script_user_set;
+static misc_checker_t *new_misck_checker;
+static bool have_dynamic_misc_checker;
 
-/* Configuration stream handling */
 void
-free_misc_check(void *data)
+clear_dynamic_misc_check_flag(void)
+{
+	have_dynamic_misc_checker = false;
+}
+
+/* Configuration stream handling */
+static void
+free_misc_check(checker_t *checker)
 {
-	misc_checker_t *misck_checker = CHECKER_DATA(data);
+	misc_checker_t *misck_checker = checker->data;
 
-	FREE(misck_checker->path);
+	FREE(misck_checker->script.args);
 	FREE(misck_checker);
-	FREE(data);
+	FREE(checker);
 }
 
-void
-dump_misc_check(void *data)
+static void
+dump_misc_check(FILE *fp, const checker_t *checker)
 {
-	misc_checker_t *misck_checker = CHECKER_DATA(data);
-	log_message(LOG_INFO, "   Keepalive method = MISC_CHECK");
-	log_message(LOG_INFO, "   script = %s", misck_checker->path);
-	log_message(LOG_INFO, "   timeout = %lu", misck_checker->timeout/TIMER_HZ);
-	log_message(LOG_INFO, "   dynamic = %s", misck_checker->dynamic ? "YES" : "NO");
+	const misc_checker_t *misck_checker = checker->data;
+
+	conf_write(fp, "   Keepalive method = MISC_CHECK");
+	conf_write(fp, "   script = %s", cmd_str(&misck_checker->script));
+	conf_write(fp, "   timeout = %lu", misck_checker->timeout/TIMER_HZ);
+	conf_write(fp, "   dynamic = %s", misck_checker->dynamic ? "YES" : "NO");
+	conf_write(fp, "   uid:gid = %u:%u", misck_checker->script.uid, misck_checker->script.gid);
+	dump_checker_opts(fp, checker);
 }
 
-void
-misc_check_handler(vector_t *strvec)
+static bool
+misc_check_compare(const checker_t *old_c, const checker_t *new_c)
 {
-	misc_checker_t *misck_checker = (misc_checker_t *) MALLOC(sizeof (misc_checker_t));
+	const misc_checker_t *old = old_c->data;
+	const misc_checker_t *new = new_c->data;
+
+	return notify_script_compare(&old->script, &new->script);
+}
+
+static void
+misc_check_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	checker_t *checker;
+
+	new_misck_checker = (misc_checker_t *) MALLOC(sizeof (misc_checker_t));
+	new_misck_checker->state = SCRIPT_STATE_IDLE;
+
+	script_user_set = false;
 
 	/* queue new checker */
-	queue_checker(free_misc_check, dump_misc_check, misc_check_thread,
-		      misck_checker, NULL);
+	checker = queue_checker(free_misc_check, dump_misc_check, misc_check_thread, misc_check_compare, new_misck_checker, NULL, false);
+
+	/* Set non-standard default value */
+	checker->default_retry = 0;
 }
 
-void
-misc_path_handler(vector_t *strvec)
+static void
+misc_path_handler(__attribute__((unused)) const vector_t *strvec)
 {
-	misc_checker_t *misck_checker = CHECKER_GET();
-	misck_checker->path = CHECKER_VALUE_STRING(strvec);
+	const vector_t *strvec_qe;
+
+	if (!new_misck_checker)
+		return;
+
+	/* We need to allow quoted and escaped strings for the script and parameters */
+	strvec_qe = alloc_strvec_quoted_escaped(NULL);
+
+	set_script_params_array(strvec_qe, &new_misck_checker->script, 0);
+
+	free_strvec(strvec_qe);
 }
 
-void
-misc_timeout_handler(vector_t *strvec)
+static void
+misc_timeout_handler(const vector_t *strvec)
 {
-	misc_checker_t *misck_checker = CHECKER_GET();
-	misck_checker->timeout = CHECKER_VALUE_INT(strvec) * TIMER_HZ;
+	unsigned timeout;
+
+	if (!new_misck_checker)
+		return;
+
+	if (!read_unsigned_strvec(strvec, 1, &timeout, 0, UINT_MAX / TIMER_HZ, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid misc_timeout value '%s'", strvec_slot(strvec, 1));
+		return;
+	}
+
+	new_misck_checker->timeout = timeout * TIMER_HZ;
 }
 
-void
-misc_dynamic_handler(vector_t *strvec)
+static void
+misc_dynamic_handler(__attribute__((unused)) const vector_t *strvec)
 {
-	misc_checker_t *misck_checker = CHECKER_GET();
-	misck_checker->dynamic = 1;
+	if (!new_misck_checker)
+		return;
+
+	new_misck_checker->dynamic = true;
+
+	if (have_dynamic_misc_checker)
+		report_config_error(CONFIG_GENERAL_ERROR, "Warning - more than one dynamic misc checker per real server will cause problems");
+	else
+		have_dynamic_misc_checker = true;
+}
+
+static void
+misc_user_handler(const vector_t *strvec)
+{
+	if (!new_misck_checker)
+		return;
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No user specified for misc checker script %s", cmd_str(&new_misck_checker->script));
+		return;
+	}
+
+	if (set_script_uid_gid(strvec, 1, &new_misck_checker->script.uid, &new_misck_checker->script.gid)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Failed to set uid/gid for misc checker script %s - removing", cmd_str(&new_misck_checker->script));
+		dequeue_new_checker();
+		FREE(new_misck_checker);
+		new_misck_checker = NULL;
+	}
+	else
+		script_user_set = true;
+}
+
+static void
+misc_end_handler(void)
+{
+	if (!new_misck_checker)
+		return;
+
+	if (!new_misck_checker->script.args) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No script path has been specified for MISC_CHECKER - skipping");
+		dequeue_new_checker();
+		new_misck_checker = NULL;
+		return;
+	}
+
+	if (!script_user_set)
+	{
+		if (set_default_script_user(NULL, NULL)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Unable to set default user for misc script %s - removing", cmd_str(&new_misck_checker->script));
+			FREE(new_misck_checker);
+			new_misck_checker = NULL;
+			return;
+		}
+
+		new_misck_checker->script.uid = default_script_uid;
+		new_misck_checker->script.gid = default_script_gid;
+	}
+
+	new_misck_checker = NULL;
 }
 
 void
@@ -96,181 +209,296 @@ install_misc_check_keyword(void)
 {
 	install_keyword("MISC_CHECK", &misc_check_handler);
 	install_sublevel();
+	install_checker_common_keywords(false);
 	install_keyword("misc_path", &misc_path_handler);
 	install_keyword("misc_timeout", &misc_timeout_handler);
 	install_keyword("misc_dynamic", &misc_dynamic_handler);
-	install_keyword("warmup", &warmup_handler);
+	install_keyword("user", &misc_user_handler);
+	install_sublevel_end_handler(&misc_end_handler);
 	install_sublevel_end();
 }
 
+/* Check that the scripts are secure */
 int
-misc_check_thread(thread_t * thread)
+check_misc_script_security(magic_t magic)
 {
+	element e, next;
 	checker_t *checker;
+	misc_checker_t *misc_script;
+	int script_flags = 0;
+	int flags;
+	bool insecure;
+
+	if (LIST_ISEMPTY(checkers_queue))
+		return 0;
+
+	for (e = LIST_HEAD(checkers_queue); e; e = next) {
+		next = e->next;
+		checker = ELEMENT_DATA(e);
+
+		if (checker->launch != misc_check_thread)
+			continue;
+
+		misc_script = CHECKER_ARG(checker);
+
+		script_flags |= (flags = check_script_secure(&misc_script->script, magic));
+
+		/* Mark not to run if needs inhibiting */
+		insecure = false;
+		if (flags & SC_INHIBIT) {
+			log_message(LOG_INFO, "Disabling misc script %s due to insecure", cmd_str(&misc_script->script));
+			insecure = true;
+		}
+		else if (flags & SC_NOTFOUND) {
+			log_message(LOG_INFO, "Disabling misc script %s since not found/accessible", cmd_str(&misc_script->script));
+			insecure = true;
+		}
+		else if (!(flags & (SC_EXECUTABLE | SC_SYSTEM)))
+			insecure = true;
+
+		if (insecure) {
+			/* Remove the script */
+			free_list_element(checkers_queue, e);
+		}
+	}
+
+	return script_flags;
+}
+
+static int
+misc_check_thread(thread_ref_t thread)
+{
+	checker_t *checker = THREAD_ARG(thread);
 	misc_checker_t *misck_checker;
-	int status, ret;
-	pid_t pid;
+	int ret;
 
-	checker = THREAD_ARG(thread);
 	misck_checker = CHECKER_ARG(checker);
 
 	/*
 	 * Register a new checker thread & return
 	 * if checker is disabled
 	 */
-	if (!CHECKER_ENABLED(checker)) {
+	if (!checker->enabled) {
 		/* Register next timer checker */
 		thread_add_timer(thread->master, misc_check_thread, checker,
-				 checker->vs->delay_loop);
+				 checker->delay_loop);
 		return 0;
 	}
 
-	/* Register next timer checker */
-	thread_add_timer(thread->master, misc_check_thread, checker,
-			 checker->vs->delay_loop);
-
-	/* Daemonization to not degrade our scheduling timer */
-	pid = fork();
-
-	/* In case of fork is error. */
-	if (pid < 0) {
-		log_message(LOG_INFO, "Failed fork process");
-		return -1;
+	/* Execute the script in a child process. Parent returns, child doesn't */
+	ret = system_call_script(thread->master, misc_check_child_thread,
+				  checker, (misck_checker->timeout) ? misck_checker->timeout : checker->vs->delay_loop,
+				  &misck_checker->script);
+	if (!ret) {
+		misck_checker->last_ran = time_now;
+		misck_checker->state = SCRIPT_STATE_RUNNING;
 	}
 
-	/* In case of this is parent process */
-	if (pid) {
-		long timeout;
-		timeout = (misck_checker->timeout) ? misck_checker->timeout : checker->vs->delay_loop;
-
-		thread_add_child(thread->master, misc_check_child_thread,
-				 checker, pid, timeout);
-		return 0;
-	}
-
-	/* Child part */
-	signal_handler_destroy();
-	closeall(0);
-
-	open("/dev/null", O_RDWR);
-	ret = dup(0);
-	if (ret < 0) {
-		log_message(LOG_INFO, "dup(0) error");
-	}
-
-	ret = dup(0);
-	if (ret < 0) {
-		log_message(LOG_INFO, "dup(0) error");
-	}
-
-	status = system_call(misck_checker->path);
-
-	if (status < 0 || !WIFEXITED(status))
-		status = 0; /* Script errors aren't server errors */
-	else
-		status = WEXITSTATUS(status);
-
-	exit(status);
+	return ret;
 }
 
-int
-misc_check_child_thread(thread_t * thread)
+static int
+misc_check_child_thread(thread_ref_t thread)
 {
 	int wait_status;
+	pid_t pid;
 	checker_t *checker;
 	misc_checker_t *misck_checker;
+	timeval_t next_time;
+	int sig_num;
+	unsigned timeout = 0;
+	const char *script_exit_type = NULL;
+	bool script_success = false;
+	const char *reason = NULL;
+	int reason_code = 0;	/* Avoid uninitialised warning by older versions of gcc */
+	bool rs_was_alive;
+	bool message_only = false;
 
 	checker = THREAD_ARG(thread);
 	misck_checker = CHECKER_ARG(checker);
 
 	if (thread->type == THREAD_CHILD_TIMEOUT) {
-		pid_t pid;
-
 		pid = THREAD_CHILD_PID(thread);
 
-		/* The child hasn't responded. Kill it off. */
-		if (svr_checker_up(checker->id, checker->rs)) {
-			log_message(LOG_INFO, "Misc check to [%s] for [%s] timed out"
-					    , inet_sockaddrtos(&checker->rs->addr)
-					    , misck_checker->path);
-			smtp_alert(checker->rs, NULL, NULL,
-				   "DOWN",
-				   "=> MISC CHECK script timeout on service <=");
-			update_svr_checker_state(DOWN, checker->id
-						     , checker->vs
-						     , checker->rs);
+		if (misck_checker->state == SCRIPT_STATE_RUNNING) {
+			misck_checker->state = SCRIPT_STATE_REQUESTING_TERMINATION;
+			sig_num = SIGTERM;
+			timeout = 2;
+		} else if (misck_checker->state == SCRIPT_STATE_REQUESTING_TERMINATION) {
+			misck_checker->state = SCRIPT_STATE_FORCING_TERMINATION;
+			sig_num = SIGKILL;
+			timeout = 2;
+		} else if (misck_checker->state == SCRIPT_STATE_FORCING_TERMINATION) {
+			log_message(LOG_INFO, "Child (PID %d) failed to terminate after kill", pid);
+			sig_num = SIGKILL;
+			timeout = 10;	/* Give it longer to terminate */
 		}
 
-		kill(pid, SIGTERM);
-		thread_add_child(thread->master, misc_check_child_timeout_thread,
-				 checker, pid, 2);
+		if (timeout) {
+			/* If kill returns an error, we can't kill the process since either the process has terminated,
+			 * or we don't have permission. If we can't kill it, there is no point trying again. */
+			if (!kill(-pid, sig_num)) {
+				if (errno == ESRCH) {
+					/* The process does not exist, and we should
+					 * have reaped its exit status, otherwise it
+					 * would exist as a zombie process. */
+					log_message(LOG_INFO, "Misc script %s child (PID %d) lost", misck_checker->script.args[0], pid);
+					misck_checker->state = SCRIPT_STATE_IDLE;
+					timeout = 0;
+				} else {
+					log_message(LOG_INFO, "kill -%d of process %s(%d) with new state %u failed with errno %d", sig_num, misck_checker->script.args[0], pid, misck_checker->state, errno);
+					timeout = 1000;
+				}
+			}
+		} else if (misck_checker->state != SCRIPT_STATE_IDLE) {
+			log_message(LOG_INFO, "Child thread pid %d timeout with unknown script state %u", pid, misck_checker->state);
+			timeout = 10;	/* We need some timeout */
+		}
+
+		if (timeout)
+			thread_add_child(thread->master, misc_check_child_thread, checker, pid, timeout * TIMER_HZ);
+
 		return 0;
 	}
 
 	wait_status = THREAD_CHILD_STATUS(thread);
 
 	if (WIFEXITED(wait_status)) {
-		int status;
-		status = WEXITSTATUS(wait_status);
+		unsigned status = WEXITSTATUS(wait_status);
+		unsigned effective_weight;
+
 		if (status == 0 ||
-                    (misck_checker->dynamic == 1 && status >= 2 && status <= 255)) {
+		    (misck_checker->dynamic && status >= 2 && status <= 255)) {
 			/*
 			 * The actual weight set when using misc_dynamic is two less than
 			 * the exit status returned.  Effective range is 0..253.
 			 * Catch legacy case of status being 0 but misc_dynamic being set.
 			 */
-			if (misck_checker->dynamic == 1 && status != 0)
-				update_svr_wgt(status - 2, checker->vs, checker->rs);
+			if (status >= 2)
+				effective_weight = status - 2;
+			else
+				effective_weight = checker->rs->iweight;
+			if (status != misck_checker->last_exit_code) {
+				update_svr_wgt(effective_weight, checker->vs,
+					       checker->rs, true);
+				misck_checker->last_exit_code = status;
+			}
 
 			/* everything is good */
-			if (!svr_checker_up(checker->id, checker->rs)) {
-				log_message(LOG_INFO, "Misc check to [%s] for [%s] success."
-						    , inet_sockaddrtos(&checker->rs->addr)
-						    , misck_checker->path);
-				smtp_alert(checker->rs, NULL, NULL,
-					   "UP",
-					   "=> MISC CHECK succeed on service <=");
-				update_svr_checker_state(UP, checker->id
-							   , checker->vs
-							   , checker->rs);
+			if (!checker->is_up || !checker->has_run) {
+				script_exit_type = "succeeded";
+				script_success = true;
 			}
-		} else {
-			if (svr_checker_up(checker->id, checker->rs)) {
-				log_message(LOG_INFO, "Misc check to [%s] for [%s] failed."
-						    , inet_sockaddrtos(&checker->rs->addr)
-						    , misck_checker->path);
-				smtp_alert(checker->rs, NULL, NULL,
-					   "DOWN",
-					   "=> MISC CHECK failed on service <=");
-				update_svr_checker_state(DOWN, checker->id
-							     , checker->vs
-							     , checker->rs);
+
+			checker->retry_it = 0;
+		} else if (checker->is_up || !checker->has_run) {
+			script_exit_type = "failed";
+			reason = "exited with status";
+			reason_code = status;
+
+			if (checker->retry_it < checker->retry) {
+				checker->retry_it++;
+				if (global_data->checker_log_all_failures || checker->log_all_failures)
+					message_only = true;
+				else
+					script_exit_type = NULL;
+			} else {
+				checker->retry_it = 0;
+				misck_checker->last_exit_code = status;
 			}
 		}
 	}
+	else if (WIFSIGNALED(wait_status)) {
+		if (misck_checker->state == SCRIPT_STATE_REQUESTING_TERMINATION && WTERMSIG(wait_status) == SIGTERM) {
+			/* The script terminated due to a SIGTERM, and we sent it a SIGTERM to
+			 * terminate the process. Now make sure any children it created have
+			 * died too. */
+			pid = THREAD_CHILD_PID(thread);
+			kill(-pid, SIGKILL);
+		}
 
-	return 0;
-}
-
-int
-misc_check_child_timeout_thread(thread_t * thread)
-{
-	pid_t pid;
+		/* We treat forced termination as a failure */
+		if (checker->is_up || !checker->has_run) {
+			if ((misck_checker->state == SCRIPT_STATE_REQUESTING_TERMINATION &&
+			     WTERMSIG(wait_status) == SIGTERM) ||
+			    (misck_checker->state == SCRIPT_STATE_FORCING_TERMINATION &&
+			     (WTERMSIG(wait_status) == SIGTERM || WTERMSIG(wait_status) == SIGKILL)))
+				script_exit_type = "timed out";
+			else {
+				script_exit_type = "failed";
+				reason = "due to signal";
+				reason_code = WTERMSIG(wait_status);
+			}
 
-	if (thread->type != THREAD_CHILD_TIMEOUT)
-		return 0;
+			if (checker->retry_it < checker->retry) {
+				checker->retry_it++;
+				if (global_data->checker_log_all_failures || checker->log_all_failures)
+					message_only = true;
+				else
+					script_exit_type = NULL;
+			} else
+				checker->retry_it = 0;
+		}
+	}
 
-	/* OK, it still hasn't exited. Now really kill it off. */
-	pid = THREAD_CHILD_PID(thread);
-	if (kill(pid, SIGKILL) < 0) {
-		/* Its possible it finished while we're handing this */
-		if (errno != ESRCH)
-			DBG("kill error: %s", strerror(errno));
-		return 0;
+	if (script_exit_type) {
+		char message[40];
+
+		if (!script_success && checker->retry)
+			snprintf(message, sizeof(message), " after %u retries", checker->retry);
+		else
+			message[0] = '\0';
+
+		if (reason)
+			log_message(LOG_INFO, "Misc check for [%s VS %s] by [%s] %s%s (%s %d)."
+					    , FMT_CHK(checker)
+					    , FMT_VS(checker->vs)
+					    , misck_checker->script.args[0]
+					    , script_exit_type
+					    , message
+					    , reason
+					    , reason_code);
+		else
+			log_message(LOG_INFO, "Misc check for [%s VS %s] by [%s] %s%s."
+					    , FMT_CHK(checker)
+					    , FMT_VS(checker->vs)
+					    , misck_checker->script.args[0]
+					    , script_exit_type
+					    , message);
+
+		if (!message_only) {
+			rs_was_alive = checker->rs->alive;
+			update_svr_checker_state(script_success ? UP : DOWN, checker);
+
+			if (checker->rs->smtp_alert &&
+			    (rs_was_alive != checker->rs->alive || !global_data->no_checker_emails)) {
+				snprintf(message, sizeof(message), "=> MISC CHECK %s on service <=", script_exit_type);
+				smtp_alert(SMTP_MSG_RS, checker, NULL, message);
+			}
+		}
 	}
 
-	log_message(LOG_WARNING, "Process [%d] didn't respond to SIGTERM", pid);
-	waitpid(pid, NULL, 0);
+	/* Register next timer checker */
+	next_time = timer_add_long(misck_checker->last_ran, checker->retry_it ? checker->delay_before_retry : checker->delay_loop);
+	next_time = timer_sub_now(next_time);
+	if (next_time.tv_sec < 0 ||
+	    (next_time.tv_sec == 0 && next_time.tv_usec == 0))
+		next_time.tv_sec = 0, next_time.tv_usec = 1;
+
+	thread_add_timer(thread->master, misc_check_thread, checker, timer_long(next_time));
+
+	misck_checker->state = SCRIPT_STATE_IDLE;
+
+	checker->has_run = true;
 
 	return 0;
 }
+
+#ifdef THREAD_DUMP
+void
+register_check_misc_addresses(void)
+{
+	register_thread_address("misc_check_child_thread", misc_check_child_thread);
+	register_thread_address("misc_check_thread", misc_check_thread);
+}
+#endif
diff --git a/tools/keepalived/keepalived/check/check_parser.c b/tools/keepalived/keepalived/check/check_parser.c
index 15e697223..fc8c62137 100644
--- a/tools/keepalived/keepalived/check/check_parser.c
+++ b/tools/keepalived/keepalived/check/check_parser.c
@@ -1,14 +1,14 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        Configuration file parser/reader. Place into the dynamic
  *              data structure representation the conf file representing
  *              the loadbalanced server pool.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
@@ -19,438 +19,1037 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <errno.h>
+#include <stdint.h>
+#include <arpa/inet.h>
+
 #include "check_parser.h"
 #include "check_data.h"
 #include "check_api.h"
 #include "global_data.h"
 #include "global_parser.h"
+#include "main.h"
 #include "logger.h"
 #include "parser.h"
-#include "memory.h"
 #include "utils.h"
 #include "ipwrapper.h"
+#if defined _WITH_VRRP_
+#include "vrrp_parser.h"
+#endif
+#if defined _WITH_BFD_
+#include "bfd_parser.h"
+#endif
+#include "libipvs.h"
 
+#define ESTABLISH_TIMEOUT_MAX 3600
+#define ESTABLISH_TIMEOUT_MIN 1
 
-#define ESTABLISH_TIMOUT_MAX 3600
-#define ESTABLISH_TIMOUT_MIN 1
+/* List of valid schedulers */
+static const char *lvs_schedulers[] =
+	{"rr", "wrr", "lc", "wlc", "lblc", "sh", "mh", "dh", "fo", "ovf", "lblcr", "sed", "nq", NULL};
 
 /* SSL handlers */
 static void
-ssl_handler(vector_t *strvec)
+ssl_handler(const vector_t *strvec)
 {
+	if (!strvec)
+		return;
+
+	if (check_data->ssl) {
+		free_ssl();
+		report_config_error(CONFIG_GENERAL_ERROR, "SSL context already specified - replacing");
+	}
 	check_data->ssl = alloc_ssl();
 }
 static void
-sslpass_handler(vector_t *strvec)
+sslpass_handler(const vector_t *strvec)
 {
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "SSL password missing");
+		return;
+	}
+
+	if (check_data->ssl->password) {
+		report_config_error(CONFIG_GENERAL_ERROR, "SSL password already specified - replacing");
+		FREE_CONST(check_data->ssl->password);
+	}
 	check_data->ssl->password = set_value(strvec);
 }
 static void
-sslca_handler(vector_t *strvec)
+sslca_handler(const vector_t *strvec)
 {
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "SSL cafile missing");
+		return;
+	}
+
+	if (check_data->ssl->cafile) {
+		report_config_error(CONFIG_GENERAL_ERROR, "SSL cafile already specified - replacing");
+		FREE_CONST(check_data->ssl->cafile);
+	}
 	check_data->ssl->cafile = set_value(strvec);
 }
 static void
-sslcert_handler(vector_t *strvec)
+sslcert_handler(const vector_t *strvec)
 {
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "SSL certfile missing");
+		return;
+	}
+
+	if (check_data->ssl->certfile) {
+		report_config_error(CONFIG_GENERAL_ERROR, "SSL certfile already specified - replacing");
+		FREE_CONST(check_data->ssl->certfile);
+	}
 	check_data->ssl->certfile = set_value(strvec);
 }
 static void
-sslkey_handler(vector_t *strvec)
+sslkey_handler(const vector_t *strvec)
 {
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "SSL keyfile missing");
+		return;
+	}
+
+	if (check_data->ssl->keyfile) {
+		report_config_error(CONFIG_GENERAL_ERROR, "SSL keyfile already specified - replacing");
+		FREE_CONST(check_data->ssl->keyfile);
+	}
 	check_data->ssl->keyfile = set_value(strvec);
 }
 
 /* Virtual Servers handlers */
 static void
-vsg_handler(vector_t *strvec)
+vsg_handler(const vector_t *strvec)
 {
+	virtual_server_group_t *vsg;
+
+	if (!strvec)
+		return;
+
 	/* Fetch queued vsg */
-	alloc_vsg(vector_slot(strvec, 1));
-	alloc_value_block(strvec, alloc_vsg_entry);
+	alloc_vsg(strvec_slot(strvec, 1));
+	alloc_value_block(alloc_vsg_entry, strvec_slot(strvec, 0));
+
+	/* Ensure the virtual server group has some configuration */
+	vsg = LIST_TAIL_DATA(check_data->vs_group);
+	if (LIST_ISEMPTY(vsg->vfwmark) && LIST_ISEMPTY(vsg->addr_range)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "virtual server group %s has no entries - removing", vsg->gname);
+		free_list_element(check_data->vs_group, check_data->vs_group->tail);
+	}
 }
+
 static void
-laddr_group_handler(vector_t *strvec)
+laddr_group_handler(const vector_t *strvec)
 {
+	if (!strvec)
+		return;
 	alloc_laddr_group(vector_slot(strvec, 1));
-	alloc_value_block(strvec, alloc_laddr_entry);
+	alloc_value_block(alloc_laddr_entry, strvec_slot(strvec, 0));
+}
+
+static void
+vs_handler(const vector_t *strvec)
+{
+	global_data->have_checker_config = true;
+
+	/* If we are not in the checker process, we don't want any more info */
+	if (!strvec)
+		return;
+
+	alloc_vs(strvec_slot(strvec, 1), vector_size(strvec) >= 3 ? strvec_slot(strvec, 2) : NULL);
+}
+static void
+vs_end_handler(void)
+{
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	real_server_t *rs;
+	element e;
+	bool mixed_af;
+
+	/* If the real (sorry) server uses tunnel forwarding, the address family
+	 * does not have to match the address family of the virtual server */
+	if (vs->s_svr
+#if HAVE_DECL_IPVS_DEST_ATTR_ADDR_FAMILY
+		      && vs->s_svr->forwarding_method != IP_VS_CONN_F_TUNNEL
+#endif
+									    )
+	{
+		if (vs->af == AF_UNSPEC)
+			vs->af = vs->s_svr->addr.ss_family;
+		else if (vs->af != vs->s_svr->addr.ss_family) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Address family of virtual server and sorry server %s don't match - skipping sorry server.", inet_sockaddrtos(&vs->s_svr->addr));
+			FREE(vs->s_svr);
+			vs->s_svr = NULL;
+		}
+	}
+
+	if (vs->af == AF_UNSPEC) {
+		/* This only occurs if the virtual server uses a fwmark, all the
+		 * real/sorry servers are tunnelled, and the address family has not
+		 * been specified.
+		 *
+		 * Maintain backward compatibility. Prior to the commit following 17fa4a3c
+		 * the address family of the virtual server was set from any of its
+		 * real or sorry servers, even if they were tunnelled. However, all the real
+		 * and sorry servers had to be the same address family, even if tunnelled,
+		 * so only set the address family from the tunnelled real/sorry servers
+		 * if all the real/sorry servers are of the same address family. */
+		mixed_af = false;
+
+		if (vs->s_svr)
+			vs->af = vs->s_svr->addr.ss_family;
+
+		LIST_FOREACH(vs->rs, rs, e) {
+			if (vs->af == AF_UNSPEC)
+				vs->af = rs->addr.ss_family;
+			else if (vs->af != rs->addr.ss_family) {
+				mixed_af = true;
+				break;
+			}
+		}
+
+		if (mixed_af || vs->af == AF_UNSPEC) {
+			/* We have a mixture of IPv4 and IPv6 tunnelled real/sorry servers.
+			 * Default to IPv4. */
+			vs->af = AF_INET;
+		}
+	}
 }
 static void
-vs_handler(vector_t *strvec)
+ip_family_handler(const vector_t *strvec)
 {
-	alloc_vs(vector_slot(strvec, 1), vector_slot(strvec, 2));
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	uint16_t af;
+
+	if (!strcmp(strvec_slot(strvec, 1), "inet"))
+		af = AF_INET;
+	else if (!strcmp(strvec_slot(strvec, 1), "inet6")) {
+#ifndef LIBIPVS_USE_NL
+		report_config_error(CONFIG_GENERAL_ERROR, "IPVS with IPv6 is not supported by this build");
+		skip_block(false);
+		return;
+#endif
+		af = AF_INET6;
+	}
+	else {
+		report_config_error(CONFIG_GENERAL_ERROR, "unknown address family %s", strvec_slot(strvec, 1));
+		return;
+	}
+
+	if (vs->af != AF_UNSPEC &&
+	    af != vs->af) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Virtual server specified family %s conflicts with server family", strvec_slot(strvec, 1));
+		return;
+	}
+
+	vs->af = af;
 }
 static void
-delay_handler(vector_t *strvec)
+vs_co_timeout_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	vs->delay_loop = atoi(vector_slot(strvec, 1)) * TIMER_HZ;
-	if (vs->delay_loop < TIMER_HZ)
-		vs->delay_loop = TIMER_HZ;
+	unsigned long timer;
+
+	if (!read_timer(strvec, 1, &timer, 1, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "virtual server connect_timeout %s invalid - ignoring", strvec_slot(strvec, 1));
+		return;
+	}
+	vs->connection_to = timer;
 }
 static void
-lbalgo_handler(vector_t *strvec)
+vs_delay_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	char *str = vector_slot(strvec, 1);
-	int size = sizeof (vs->sched);
-	int str_len = strlen(str);
+	unsigned long delay;
 
-	if (size > str_len)
-		size = str_len;
+	if (read_timer(strvec, 1, &delay, 1, 0, true))
+		vs->delay_loop = delay;
+	else
+		report_config_error(CONFIG_GENERAL_ERROR, "virtual server delay loop '%s' invalid - ignoring", strvec_slot(strvec, 1));
+}
+static void
+vs_delay_before_retry_handler(const vector_t *strvec)
+{
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	unsigned long delay;
 
-	memcpy(vs->sched, str, size);
+	if (read_timer(strvec, 1, &delay, 0, 0, true))
+		vs->delay_before_retry = delay;
+	else
+		report_config_error(CONFIG_GENERAL_ERROR, "virtual server delay before retry '%s' invalid - ignoring", strvec_slot(strvec, 1));
 }
 static void
-lbkind_handler(vector_t *strvec)
+vs_retry_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	char *str = vector_slot(strvec, 1);
+	unsigned retry;
+
+	if (!read_unsigned_strvec(strvec, 1, &retry, 1, UINT32_MAX, false)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "retry value invalid - %s", strvec_slot(strvec, 1));
+		return;
+	}
+	vs->retry = retry;
+}
+static void
+vs_warmup_handler(const vector_t *strvec)
+{
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	unsigned long delay;
+
+	if (read_timer(strvec, 1, &delay, 0, 0, true))
+		vs->warmup = delay;
+	else
+		report_config_error(CONFIG_GENERAL_ERROR, "virtual server warmup '%s' invalid - ignoring", strvec_slot(strvec, 1));
+}
+static void
+lbalgo_handler(const vector_t *strvec)
+{
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	const char *str = strvec_slot(strvec, 1);
+	int i;
+
+	/* Check valid scheduler name */
+	for (i = 0; lvs_schedulers[i] && strcmp(str, lvs_schedulers[i]); i++);
+
+	if (!lvs_schedulers[i] || strlen(str) >= sizeof(vs->sched)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid lvs_scheduler '%s' - ignoring", strvec_slot(strvec, 1));
+		return;
+	}
+
+	strcpy(vs->sched, str);
+}
+
+static void
+lbflags_handler(const vector_t *strvec)
+{
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	const char *str = strvec_slot(strvec, 0);
+
+	if (!strcmp(str, "hashed"))
+		vs->flags |= IP_VS_SVC_F_HASHED;
+#ifdef IP_VS_SVC_F_ONEPACKET
+	else if (!strcmp(str, "ops"))
+		vs->flags |= IP_VS_SVC_F_ONEPACKET;
+#endif
+#ifdef IP_VS_SVC_F_SCHED1		/* From Linux 3.11 */
+	else if (!strcmp(str, "flag-1"))
+		vs->flags |= IP_VS_SVC_F_SCHED1;
+	else if (!strcmp(str, "flag-2"))
+		vs->flags |= IP_VS_SVC_F_SCHED2;
+	else if (!strcmp(str, "flag-3"))
+		vs->flags |= IP_VS_SVC_F_SCHED3;
+	else if (!strcmp(vs->sched , "sh") )
+	{
+		/* sh-port and sh-fallback flags are relevant for sh scheduler only */
+		if (!strcmp(str, "sh-port")  )
+			vs->flags |= IP_VS_SVC_F_SCHED_SH_PORT;
+		if (!strcmp(str, "sh-fallback"))
+			vs->flags |= IP_VS_SVC_F_SCHED_SH_FALLBACK;
+	}
+	else if (!strcmp(vs->sched , "mh") )
+	{
+		/* mh-port and mh-fallback flags are relevant for mh scheduler only */
+		if (!strcmp(str, "mh-port")  )
+			vs->flags |= IP_VS_SVC_F_SCHED_MH_PORT;
+		if (!strcmp(str, "mh-fallback"))
+			vs->flags |= IP_VS_SVC_F_SCHED_MH_FALLBACK;
+	}
+	else
+		report_config_error(CONFIG_GENERAL_ERROR, "%s only applies to sh scheduler - ignoring", str);
+#endif
+}
+
+static void
+svr_forwarding_handler(real_server_t *rs, const vector_t *strvec, const char *s_type)
+{
+	const char *str = strvec_slot(strvec, 1);
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	size_t i;
+	int tun_type = IP_VS_CONN_F_TUNNEL_TYPE_IPIP;
+	unsigned port = 0;
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	int csum = IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM;
+#endif
+#endif
 
 	if (!strcmp(str, "NAT"))
-		vs->loadbalancing_kind = IP_VS_CONN_F_MASQ;
+		rs->forwarding_method = IP_VS_CONN_F_MASQ;
 	else if (!strcmp(str, "DR"))
-		vs->loadbalancing_kind = IP_VS_CONN_F_DROUTE;
+		rs->forwarding_method = IP_VS_CONN_F_DROUTE;
 	else if (!strcmp(str, "TUN"))
-		vs->loadbalancing_kind = IP_VS_CONN_F_TUNNEL;
+		rs->forwarding_method = IP_VS_CONN_F_TUNNEL;
 	else if (!strcmp(str, "FNAT"))
-		vs->loadbalancing_kind = IP_VS_CONN_F_FULLNAT;
+		rs->forwarding_method = IP_VS_CONN_F_FULLNAT;
 	else if (!strcmp(str, "SNAT"))
-		vs->loadbalancing_kind = IP_VS_CONN_F_SNAT;
-	else
-		log_message(LOG_INFO, "PARSER : unknown [%s] routing method.", str);
+                rs->forwarding_method = IP_VS_CONN_F_SNAT;
+	else {
+		report_config_error(CONFIG_GENERAL_ERROR, "PARSER : unknown [%s] routing method for %s server.", str, s_type);
+		return;
+	}
+
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	for (i = 2; i < vector_size(strvec); i++) {
+		if (!strcmp(strvec_slot(strvec, i), "type")) {
+			if (vector_size(strvec) == i + 1) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Missing tunnel type for %s server.", s_type);
+				return;
+			}
+			if (!strcmp(strvec_slot(strvec, i + 1), "ipip"))
+				tun_type = IP_VS_CONN_F_TUNNEL_TYPE_IPIP;
+			else if (!strcmp(strvec_slot(strvec, i + 1), "gue"))
+				tun_type = IP_VS_CONN_F_TUNNEL_TYPE_GUE;
+#ifdef _HAVE_IPVS_TUN_GRE_
+			else if (!strcmp(strvec_slot(strvec, i + 1), "gre"))
+				tun_type = IP_VS_CONN_F_TUNNEL_TYPE_GRE;
+#endif
+			else {
+				report_config_error(CONFIG_GENERAL_ERROR, "Unknown tunnel type %s for %s server.", strvec_slot(strvec, i + 1), s_type);
+				return;
+			}
+			i++;
+		} else if (!strcmp(strvec_slot(strvec, i), "port")) {
+			if (vector_size(strvec) == i + 1) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Missing port for %s server gue tunnel.", s_type);
+				return;
+			}
+			if (!read_unsigned_strvec(strvec, i + 1, &port, 1, 65535, false)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid gue tunnel port %s for %s server.", strvec_slot(strvec, i + 1), s_type);
+				return;
+			}
+			i++;
+		}
+#ifdef _HAVE_IPVS_TUN_CSUM_
+		else if (!strcmp(strvec_slot(strvec, i), "nocsum"))
+			csum = IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM;
+		else if (!strcmp(strvec_slot(strvec, i), "csum"))
+			csum = IP_VS_TUNNEL_ENCAP_FLAG_CSUM;
+		else if (!strcmp(strvec_slot(strvec, i), "remcsum"))
+			csum = IP_VS_TUNNEL_ENCAP_FLAG_REMCSUM;
+#endif
+		else {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid tunnel option %s for %s server.", strvec_slot(strvec, i), s_type);
+			return;
+		}
+	}
+
+	if ((tun_type == IP_VS_CONN_F_TUNNEL_TYPE_GUE) != (port != 0)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "gue tunnels require port, otherwise cannot have port.");
+		return;
+	}
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	if (tun_type == IP_VS_CONN_F_TUNNEL_TYPE_IPIP && csum != IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM) {
+		report_config_error(CONFIG_GENERAL_ERROR, "ipip tunnels do not support checksum option.");
+		return;
+	}
+#endif
+#ifdef _HAVE_IPVS_TUN_GRE_
+	if (tun_type == IP_VS_CONN_F_TUNNEL_TYPE_GRE && csum == IP_VS_TUNNEL_ENCAP_FLAG_REMCSUM) {
+		report_config_error(CONFIG_GENERAL_ERROR, "gre tunnels do not support remote checksum option.");
+		return;
+	}
+#endif
+
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	rs->tun_type = tun_type;
+	rs->tun_port = htons(port);
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	rs->tun_flags = csum;
+#endif
+#endif
+#endif
 }
+
 static void
-natmask_handler(vector_t *strvec)
+forwarding_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	inet_ston(vector_slot(strvec, 1), &vs->nat_mask);
+	real_server_t rs;	// dummy for setting parameters
+
+	svr_forwarding_handler(&rs, strvec, "virtual");
+	vs->forwarding_method = rs.forwarding_method;
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	vs->tun_type = rs.tun_type;
+	vs->tun_port = rs.tun_port;
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	vs->tun_flags = rs.tun_flags;
+#endif
+#endif
 }
+
 static void
-pto_handler(vector_t *strvec)
+pto_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	char *str = vector_slot(strvec, 1);
-	int size = sizeof (vs->timeout_persistence);
-	int str_len = strlen(str);
+	unsigned timeout;
+
+	if (vector_size(strvec) < 2) {
+		vs->persistence_timeout = IPVS_SVC_PERSISTENT_TIMEOUT;
+		return;
+	}
+
+	if (!read_unsigned_strvec(strvec, 1, &timeout, 1, UINT32_MAX, false)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "persistence_timeout invalid");
+		return;
+	}
 
-	if (size > str_len)
-		size = str_len;
+	vs->persistence_timeout = (uint32_t)timeout;
+}
+#ifdef _HAVE_PE_NAME_
+static void
+pengine_handler(const vector_t *strvec)
+{
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	const char *str = strvec_slot(strvec, 1);
+	size_t size = sizeof (vs->pe_name);
 
-	memcpy(vs->timeout_persistence, str, size);
+	strncpy(vs->pe_name, str, size - 1);
+	vs->pe_name[size - 1] = '\0';
 }
+#endif
 static void
-pgr_handler(vector_t *strvec)
+pgr_handler(const vector_t *strvec)
 {
+	struct in_addr addr;
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	if (vs->addr.ss_family == AF_INET6)
-		vs->granularity_persistence = atoi(vector_slot(strvec, 1));
-	else
-		inet_ston(vector_slot(strvec, 1), &vs->granularity_persistence);
+	uint16_t af = vs->af;
+	unsigned granularity;
+
+	if (af == AF_UNSPEC)
+		af = strchr(strvec_slot(strvec, 1), '.') ? AF_INET : AF_INET6;
+
+	if (af == AF_INET6) {
+		if (!read_unsigned_strvec(strvec, 1, &granularity, 1, 128, false)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid IPv6 persistence_granularity specified - %s", strvec_slot(strvec, 1));
+			return;
+		}
+		vs->persistence_granularity = granularity;
+	} else {
+		if (!inet_aton(strvec_slot(strvec, 1), &addr)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid IPv4 persistence_granularity specified - %s", strvec_slot(strvec, 1));
+			return;
+		}
+
+		/* Ensure the netmask is solid */
+		uint32_t haddr = ntohl(addr.s_addr);
+		while (!(haddr & 1))
+			haddr = (haddr >> 1) | 0x80000000;
+		if (haddr != 0xffffffff) {
+			report_config_error(CONFIG_GENERAL_ERROR, "IPv4 persistence_granularity netmask is not solid - %s", strvec_slot(strvec, 1));
+			return;
+		}
+
+		vs->persistence_granularity = addr.s_addr;
+	}
+
+	if (vs->af == AF_UNSPEC)
+		vs->af = af;
+
+	if (!vs->persistence_timeout)
+		vs->persistence_timeout = IPVS_SVC_PERSISTENT_TIMEOUT;
 }
 static void
-proto_handler(vector_t *strvec)
+proto_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	char *str = vector_slot(strvec, 1);
-	if(!strcmp(str, "UDP"))
+	const char *str = strvec_slot(strvec, 1);
+
+	if (!strcasecmp(str, "TCP"))
+		vs->service_type = IPPROTO_TCP;
+	else if (!strcasecmp(str, "SCTP"))
+		vs->service_type = IPPROTO_SCTP;
+	else if (!strcasecmp(str, "UDP"))
 		vs->service_type = IPPROTO_UDP;
-	else if(!strcmp(str, "ICMP"))
-		vs->service_type = IPPROTO_ICMP;
-	else if (!strcmp(str, "ICMPV6"))
-		vs->service_type = IPPROTO_ICMPV6;
+	else if (!strcasecmp(str, "ICMP"))
+                vs->service_type = IPPROTO_ICMP;
 	else
-		vs->service_type = IPPROTO_TCP; /*default*/
+		report_config_error(CONFIG_GENERAL_ERROR, "Unknown protocol %s - ignoring", str);
 }
 static void
-hasuspend_handler(vector_t *strvec)
+hasuspend_handler(__attribute__((unused)) const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	vs->ha_suspend = 1;
+	vs->ha_suspend = true;
 }
+
 static void
-ops_handler(vector_t *strvec)
+vs_smtp_alert_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	vs->ops = 1;
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res == -1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid virtual_server smtp_alert parameter %s", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+	vs->smtp_alert = res;
+	check_data->num_smtp_alert++;
 }
+
 static void
-virtualhost_handler(vector_t *strvec)
+vs_virtualhost_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "virtual server virtualhost missing");
+		return;
+	}
+
 	vs->virtualhost = set_value(strvec);
 }
 
 /* Sorry Servers handlers */
 static void
-ssvr_handler(vector_t *strvec)
+ssvr_handler(const vector_t *strvec)
 {
-	alloc_ssvr(vector_slot(strvec, 1), vector_slot(strvec, 2));
+	alloc_ssvr(strvec_slot(strvec, 1), vector_size(strvec) >= 3 ? strvec_slot(strvec, 2) : NULL);
 }
 static void
-ssvri_handler(vector_t *strvec)
+ssvri_handler(__attribute__((unused)) const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	if (vs->s_svr) {
-		vs->s_svr->inhibit = 1;
-	} else {
-		log_message(LOG_ERR, "Ignoring sorry_server_inhibit used before or without sorry_server");
-	}
+	if (vs->s_svr)
+		vs->s_svr->inhibit = true;
+	else
+		report_config_error(CONFIG_GENERAL_ERROR, "Ignoring sorry_server inhibit used before or without sorry_server");
+}
+static void
+ss_forwarding_handler(const vector_t *strvec)
+{
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+
+	if (vs->s_svr)
+		svr_forwarding_handler(vs->s_svr, strvec, "sorry");
+	else
+		report_config_error(CONFIG_GENERAL_ERROR, "sorry_server forwarding used without sorry_server");
 }
 
 /* Real Servers handlers */
 static void
-rs_handler(vector_t *strvec)
+rs_handler(const vector_t *strvec)
 {
-	alloc_rs(vector_slot(strvec, 1), vector_slot(strvec, 2));
+	alloc_rs(strvec_slot(strvec, 1), vector_size(strvec) >= 3 ? strvec_slot(strvec, 2) : NULL);
 }
 static void
-weight_handler(vector_t *strvec)
+rs_end_handler(void)
+{
+	virtual_server_t *vs;
+	real_server_t *rs;
+	virtual_server_group_t *vsg;
+	virtual_server_group_entry_t *vsge;
+
+	if (LIST_ISEMPTY(check_data->vs))
+		return;
+
+	vs = LIST_TAIL_DATA(check_data->vs);
+
+	if (LIST_ISEMPTY(vs->rs))
+		return;
+
+	rs = LIST_TAIL_DATA(vs->rs);
+
+	/* For tunnelled forwarding, the address families don't have to be the same, so
+	 * long as the kernel supports IPVS_DEST_ATTR_ADDR_FAMILY */
+#if HAVE_DECL_IPVS_DEST_ATTR_ADDR_FAMILY
+	if (rs->forwarding_method != IP_VS_CONN_F_TUNNEL)
+#endif
+	{
+		if (vs->af == AF_UNSPEC) {
+			vsg = ipvs_get_group_by_name(vs->vsgname, check_data->vs_group);
+			if (vsg) {
+				vsge = ELEMENT_DATA(LIST_HEAD(vsg->addr_range));
+				vs->af = vsge->addr.ss_family;
+			} else {
+				vs->af = rs->addr.ss_family;
+			}			
+		}
+		else if (vs->af != rs->addr.ss_family) {
+			/*report_config_error(CONFIG_GENERAL_ERROR, "Address family of virtual server and real server %s don't match - skipping real server.", inet_sockaddrtos(&rs->addr));
+			free_list_element(vs->rs, vs->rs->tail);*/
+		}
+	}
+}
+static void
+rs_weight_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
-	rs->weight = atoi(vector_slot(strvec, 1));
-	rs->iweight = rs->weight;
+	unsigned weight;
+
+	if (!read_unsigned_strvec(strvec, 1, &weight, 0, 65535, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Real server weight %s is outside range 0-65535", strvec_slot(strvec, 1));
+		return;
+	}
+	rs->weight = weight;
+	rs->iweight = weight;
 }
-#ifdef _KRNL_2_6_
 static void
-uthreshold_handler(vector_t *strvec)
+rs_forwarding_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
-	rs->u_threshold = atoi(vector_slot(strvec, 1));
+
+	svr_forwarding_handler(rs, strvec, "real");
 }
 static void
-lthreshold_handler(vector_t *strvec)
+uthreshold_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
-	rs->l_threshold = atoi(vector_slot(strvec, 1));
+	unsigned threshold;
+
+	if (!read_unsigned_strvec(strvec, 1, &threshold, 0, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid real_server uthreshold '%s' - ignoring", strvec_slot(strvec, 1));
+		return;
+	}
+	rs->u_threshold = threshold;
 }
-#endif
 static void
-inhibit_handler(vector_t *strvec)
+lthreshold_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
-	rs->inhibit = 1;
+	unsigned threshold;
+
+	if (!read_unsigned_strvec(strvec, 1, &threshold, 0, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid real_server lthreshold '%s' - ignoring", strvec_slot(strvec, 1));
+		return;
+	}
+	rs->l_threshold = threshold;
 }
 static void
-notify_up_handler(vector_t *strvec)
+vs_inhibit_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	vs->inhibit = true;
+}
+static inline notify_script_t*
+set_check_notify_script(__attribute__((unused)) const vector_t *strvec, const char *type)
+{
+	return notify_script_init(0, type);
+}
+static void
+notify_up_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
-	rs->notify_up = set_value(strvec);
+	if (rs->notify_up) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) notify_up script already specified - ignoring %s", vs->vsgname, strvec_slot(strvec,1));
+		return;
+	}
+	rs->notify_up = set_check_notify_script(strvec, "notify");
 }
 static void
-notify_down_handler(vector_t *strvec)
+notify_down_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
-	rs->notify_down = set_value(strvec);
+	if (rs->notify_down) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) notify_down script already specified - ignoring %s", vs->vsgname, strvec_slot(strvec,1));
+		return;
+	}
+	rs->notify_down = set_check_notify_script(strvec, "notify");
 }
 static void
-alpha_handler(vector_t *strvec)
+rs_co_timeout_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	vs->alpha = 1;
-	vs->quorum_state = DOWN;
+	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
+	unsigned long timer;
+
+	if (!read_timer(strvec, 1, &timer, 1, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "real server connect_timeout %s invalid - ignoring", strvec_slot(strvec, 1));
+		return;
+	}
+	rs->connection_to = timer;
+}
+static void
+rs_delay_handler(const vector_t *strvec)
+{
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
+	unsigned long delay;
+
+	if (read_timer(strvec, 1, &delay, 1, 0, true))
+		rs->delay_loop = delay;
+	else
+		report_config_error(CONFIG_GENERAL_ERROR, "real server delay_loop '%s' invalid - ignoring", strvec_slot(strvec, 1));
 }
 static void
-omega_handler(vector_t *strvec)
+rs_delay_before_retry_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	vs->omega = 1;
+	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
+	unsigned long delay;
+
+	if (read_timer(strvec, 1, &delay, 0, 0, true))
+		rs->delay_before_retry = delay;
+	else
+		report_config_error(CONFIG_GENERAL_ERROR, "real server delay_before_retry '%s' invalid - ignoring", strvec_slot(strvec, 1));
 }
 static void
-quorum_up_handler(vector_t *strvec)
+rs_retry_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	vs->quorum_up = set_value(strvec);
+	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
+	unsigned retry;
+
+	if (!read_unsigned_strvec(strvec, 1, &retry, 1, UINT32_MAX, false)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "retry value invalid - %s", strvec_slot(strvec, 1));
+		return;
+	}
+	rs->retry = (unsigned)retry;
 }
 static void
-quorum_down_handler(vector_t *strvec)
+rs_warmup_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	vs->quorum_down = set_value(strvec);
+	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
+	unsigned long delay;
+
+	if (read_timer(strvec, 1, &delay, 0, 0, true))
+		rs->warmup = delay;
+	else
+		report_config_error(CONFIG_GENERAL_ERROR, "real server warmup '%s' invalid - ignoring", strvec_slot(strvec, 1));
 }
 static void
-quorum_handler(vector_t *strvec)
+rs_inhibit_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	long tmp = atol (vector_slot(strvec, 1));
-	if (tmp < 1) {
-		log_message(LOG_ERR, "Condition not met: Quorum >= 1");
-		log_message(LOG_ERR, "Ignoring requested value %s, using 1 instead",
-		  (char *) vector_slot(strvec, 1));
-		tmp = 1;
+	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res == -1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid inhibit_on_failure parameter %s", strvec_slot(strvec, 1));
+			return;
+		}
 	}
-	vs->quorum = tmp;
+	rs->inhibit = res;
 }
 static void
-hysteresis_handler(vector_t *strvec)
+rs_alpha_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	long tmp = atol (vector_slot(strvec, 1));
-	if (tmp < 0) {
-		log_message(LOG_ERR, "Condition not met: 0 <= Hysteresis");
-		log_message(LOG_ERR, "Ignoring requested value %s, using 0 instead",
-		       (char *) vector_slot(strvec, 1));
-		tmp = 0;
+	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res == -1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid alpha parameter %s", strvec_slot(strvec, 1));
+			return;
+		}
 	}
-	vs->hysteresis = tmp;
+	rs->alpha = res;
 }
-static void 
-laddr_gname_handler(vector_t *strvec)
+static void
+rs_smtp_alert_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	
-	vs->local_addr_gname = set_value(strvec);
+	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res == -1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid real_server smtp_alert parameter %s", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+	rs->smtp_alert = res;
+	check_data->num_smtp_alert++;
 }
-static void 
-syn_proxy_handler(vector_t *strvec)
+static void
+rs_virtualhost_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	vs->syn_proxy = 1;
+	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "real server virtualhost missing");
+		return;
+	}
+
+	rs->virtualhost = set_value(strvec);
 }
 static void
-bind_dev_handler(vector_t *strvec)
+vs_alpha_handler(__attribute__((unused)) const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	vs->vip_bind_dev = set_value(strvec);
+	vs->alpha = true;
 }
 static void
-blklst_group_handler(vector_t *strvec)
+omega_handler(__attribute__((unused)) const vector_t *strvec)
 {
-	alloc_blklst_group(vector_slot(strvec, 1));
-	alloc_value_block(strvec, alloc_blklst_entry);
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	vs->omega = true;
 }
 static void
-blklst_gname_handler(vector_t *strvec)
+quorum_up_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-	vs->blklst_addr_gname = set_value(strvec);
+	if (vs->notify_quorum_up) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) quorum_up script already specified - ignoring %s", vs->vsgname, strvec_slot(strvec,1));
+		return;
+	}
+	vs->notify_quorum_up = set_check_notify_script(strvec, "quorum");
 }
-
 static void
-tunnel_handler(vector_t *strvec)
+quorum_down_handler(const vector_t *strvec)
 {
-	alloc_tunnel(vector_slot(strvec, 1));
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	if (vs->notify_quorum_down) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) quorum_down script already specified - ignoring %s", vs->vsgname, strvec_slot(strvec,1));
+		return;
+	}
+	vs->notify_quorum_down = set_check_notify_script(strvec, "quorum");
 }
-
 static void
-tunnel_entry_handler(vector_t *strvec)
+quorum_handler(const vector_t *strvec)
 {
-	alloc_tunnel_entry(vector_slot(strvec, 1));
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	unsigned quorum;
+
+	if (!read_unsigned_strvec(strvec, 1, &quorum, 1, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Quorum %s must be in [1, %u]. Setting to 1.", strvec_slot(strvec, 1), UINT_MAX);
+		quorum = 1;
+	}
+
+	vs->quorum = quorum;
 }
+static void
+hysteresis_handler(const vector_t *strvec)
+{
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	unsigned hysteresis;
+
+	if (!read_unsigned_strvec(strvec, 1, &hysteresis, 0, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Hysteresis %s must be in [0, %u] - ignoring", strvec_slot(strvec, 1), UINT_MAX);
+		return;
+	}
 
+	vs->hysteresis = hysteresis;
+}
 static void
-kind_handler(vector_t *strvec)
+vs_weight_handler(const vector_t *strvec)
 {
-	tunnel_group *gtunnel = LIST_TAIL_DATA(check_data->tunnel_group);
-	tunnel_entry *entry = LIST_TAIL_DATA(gtunnel->tunnel_entry);
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	unsigned weight;
 
-	strncpy(entry->kind, vector_slot(strvec, 1), sizeof(entry->kind) - 1);
+	if (!read_unsigned_strvec(strvec, 1, &weight, 1, 65535, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Virtual server weight %s is outside range 1-65535", strvec_slot(strvec, 1));
+		return;
+	}
+	vs->weight = weight;
 }
 
-static void
-remote_handler(vector_t *strvec)
+static void 
+laddr_gname_handler(const vector_t *strvec)
 {
-	tunnel_group *gtunnel = LIST_TAIL_DATA(check_data->tunnel_group);
-	tunnel_entry *entry = LIST_TAIL_DATA(gtunnel->tunnel_entry);
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	vs->local_addr_gname = set_value(strvec);
+}
 
-	inet_stosockaddr(vector_slot(strvec, 1), NULL, &entry->remote);
+static void 
+syn_proxy_handler(const vector_t *strvec)
+{
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	vs->syn_proxy = 1;
 }
 
 static void
-local_handler(vector_t *strvec)
+bind_dev_handler(const vector_t *strvec)
 {
-	tunnel_group *gtunnel = LIST_TAIL_DATA(check_data->tunnel_group);
-	tunnel_entry *entry = LIST_TAIL_DATA(gtunnel->tunnel_entry);
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	vs->vip_bind_dev = set_value(strvec);
+}
 
-	inet_stosockaddr(vector_slot(strvec, 1), NULL, &entry->local);
+static void
+blklst_group_handler(const vector_t *strvec)
+{
+	if (!strvec)
+		return;
+	alloc_blklst_group(vector_slot(strvec, 1));
+	alloc_value_block(alloc_blklst_entry, strvec_slot(strvec, 0));
 }
 
 static void
-if_handler(vector_t *strvec)
+blklst_gname_handler(const vector_t *strvec)
 {
-	tunnel_group *gtunnel = LIST_TAIL_DATA(check_data->tunnel_group);
-	tunnel_entry *entry = LIST_TAIL_DATA(gtunnel->tunnel_entry);
-	snprintf(entry->link, sizeof(entry->link), "%s", (char *)vector_slot(strvec, 1));
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	vs->blklst_addr_gname = set_value(strvec);
 }
 
 static void
-bps_handler(vector_t *strvec)
+bps_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	char *str = vector_slot(strvec, 1);
-	int size = sizeof (vs->bps);
-	int str_len = strlen(str);
-
-	if (size > str_len)
-		size = str_len;
-	memcpy(vs->bps, str, size);
+	vs->bps = atoi(str);
 }
 
 static void
-limit_proportion_handler(vector_t *strvec)
+limit_proportion_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-        char *str = vector_slot(strvec, 1); 
-        int size = sizeof (vs->limit_proportion);
-        int str_len = strlen(str);
-        memset(vs->limit_proportion,0,size);
-        if (size > str_len)
-                size = str_len;
-        memcpy(vs->limit_proportion, str, size);
+    char *str = vector_slot(strvec, 1); 
+    vs->limit_proportion = atoi(str);
 }
 
 static void
-establish_timeout_handler(vector_t *strvec)
+establish_timeout_handler(const vector_t *strvec)
 {
-    int conn_timeout;
-    virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
-    conn_timeout = atoi(vector_slot(strvec, 1));
-    if (conn_timeout > ESTABLISH_TIMOUT_MAX)
-        conn_timeout = ESTABLISH_TIMOUT_MAX;
-    if (conn_timeout < ESTABLISH_TIMOUT_MIN)
-        conn_timeout = ESTABLISH_TIMOUT_MIN;
-    vs->conn_timeout = conn_timeout;
+	int conn_timeout;
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	conn_timeout = atoi(vector_slot(strvec, 1));
+	if (conn_timeout > ESTABLISH_TIMEOUT_MAX)
+		conn_timeout = ESTABLISH_TIMEOUT_MAX;
+	if (conn_timeout < ESTABLISH_TIMEOUT_MIN)
+		conn_timeout = ESTABLISH_TIMEOUT_MIN;
+	vs->conn_timeout = conn_timeout;
 }
 
 static void
-src_range_handler(vector_t *strvec)
+src_range_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	snprintf(vs->srange, sizeof(vs->srange), "%s", (char *)vector_slot(strvec, 1));
 }
 
 static void
-dst_range_handler(vector_t *strvec)
+dst_range_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	snprintf(vs->drange, sizeof(vs->drange), "%s", (char *)vector_slot(strvec, 1));
 }
 
 static void
-oif_handler(vector_t *strvec)
+oif_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	snprintf(vs->oifname, sizeof(vs->oifname), "%s", (char *)vector_slot(strvec, 1));
 }
 
 static void
-iif_handler(vector_t *strvec)
+iif_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	snprintf(vs->iifname, sizeof(vs->iifname), "%s", (char *)vector_slot(strvec, 1));
 }
 
 static void
-hash_target_handler(vector_t *strvec)
+hash_target_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	char *str = vector_slot(strvec, 1);
@@ -465,52 +1064,60 @@ hash_target_handler(vector_t *strvec)
 	}
 }
 
-vector_t *
-check_init_keywords(void)
+void
+init_check_keywords(bool active)
 {
-	/* global definitions mapping */
-	global_init_keywords();
-
 	/* SSL mapping */
-	install_keyword_root("SSL", &ssl_handler);
+	install_keyword_root("SSL", &ssl_handler, active);
 	install_keyword("password", &sslpass_handler);
 	install_keyword("ca", &sslca_handler);
 	install_keyword("certificate", &sslcert_handler);
 	install_keyword("key", &sslkey_handler);
 
-	/* tunnel process */
-	install_keyword_root("tunnel_group", &tunnel_handler);
-	install_keyword("tunnel_entry", &tunnel_entry_handler);
-	install_sublevel();
-	install_keyword("kind", &kind_handler);
-	install_keyword("remote", &remote_handler);
-	install_keyword("local", &local_handler);
-	install_keyword("if", &if_handler);
-	install_sublevel_end();
-
 	/* local IP address mapping */
-	install_keyword_root("local_address_group", &laddr_group_handler);
+	install_keyword_root("local_address_group", &laddr_group_handler, active);
 	/* blacklist IP */
-	install_keyword_root("deny_address_group", &blklst_group_handler);
+	install_keyword_root("deny_address_group", &blklst_group_handler, active);
 
 	/* Virtual server mapping */
-	install_keyword_root("virtual_server_group", &vsg_handler);
-	install_keyword_root("virtual_server", &vs_handler);
-	install_keyword("delay_loop", &delay_handler);
+	install_keyword_root("virtual_server_group", &vsg_handler, active);
+	install_keyword_root("virtual_server", &vs_handler, active);
+	install_root_end_handler(&vs_end_handler);
+	install_keyword("ip_family", &ip_family_handler);
+	install_keyword("retry", &vs_retry_handler);
+	install_keyword("delay_before_retry", &vs_delay_before_retry_handler);
+	install_keyword("warmup", &vs_warmup_handler);
+	install_keyword("connect_timeout", &vs_co_timeout_handler);
+	install_keyword("delay_loop", &vs_delay_handler);
+	install_keyword("inhibit_on_failure", &vs_inhibit_handler);
 	install_keyword("lb_algo", &lbalgo_handler);
 	install_keyword("lvs_sched", &lbalgo_handler);
-	install_keyword("lb_kind", &lbkind_handler);
+
+	install_keyword("hashed", &lbflags_handler);
+#ifdef IP_VS_SVC_F_ONEPACKET
+	install_keyword("ops", &lbflags_handler);
+#endif
+#ifdef IP_VS_SVC_F_SCHED1
+	install_keyword("flag-1", &lbflags_handler);
+	install_keyword("flag-2", &lbflags_handler);
+	install_keyword("flag-3", &lbflags_handler);
+	install_keyword("sh-port", &lbflags_handler);
+	install_keyword("sh-fallback", &lbflags_handler);
+#endif
+	install_keyword("lb_kind", &forwarding_handler);
 	install_keyword("establish_timeout", &establish_timeout_handler);
-	install_keyword("lvs_method", &lbkind_handler);
-	install_keyword("nat_mask", &natmask_handler);
+	install_keyword("lvs_method", &forwarding_handler);
+#ifdef _HAVE_PE_NAME_
+	install_keyword("persistence_engine", &pengine_handler);
+#endif
 	install_keyword("persistence_timeout", &pto_handler);
 	install_keyword("persistence_granularity", &pgr_handler);
 	install_keyword("bps", &bps_handler);
 	install_keyword("limit_proportion", &limit_proportion_handler);
 	install_keyword("protocol", &proto_handler);
 	install_keyword("ha_suspend", &hasuspend_handler);
-	install_keyword("ops", &ops_handler);
-	install_keyword("virtualhost", &virtualhost_handler);
+	install_keyword("smtp_alert", &vs_smtp_alert_handler);
+	install_keyword("virtualhost", &vs_virtualhost_handler);
 	install_keyword("src-range", &src_range_handler);
 	install_keyword("dst-range", &dst_range_handler);
 	install_keyword("oif", &oif_handler);
@@ -518,35 +1125,59 @@ check_init_keywords(void)
 	install_keyword("hash_target", &hash_target_handler);
 
 	/* Pool regression detection and handling. */
-	install_keyword("alpha", &alpha_handler);
+	install_keyword("alpha", &vs_alpha_handler);
 	install_keyword("omega", &omega_handler);
 	install_keyword("quorum_up", &quorum_up_handler);
 	install_keyword("quorum_down", &quorum_down_handler);
 	install_keyword("quorum", &quorum_handler);
 	install_keyword("hysteresis", &hysteresis_handler);
+	install_keyword("weight", &vs_weight_handler);
 
 	/* Real server mapping */
 	install_keyword("sorry_server", &ssvr_handler);
 	install_keyword("sorry_server_inhibit", &ssvri_handler);
+	install_keyword("sorry_server_lvs_method", &ss_forwarding_handler);
 	install_keyword("real_server", &rs_handler);
 	install_sublevel();
-	install_keyword("weight", &weight_handler);
-#ifdef _KRNL_2_6_
+	install_keyword("weight", &rs_weight_handler);
+	install_keyword("lvs_method", &rs_forwarding_handler);
 	install_keyword("uthreshold", &uthreshold_handler);
 	install_keyword("lthreshold", &lthreshold_handler);
-#endif
-	install_keyword("inhibit_on_failure", &inhibit_handler);
+	install_keyword("inhibit_on_failure", &rs_inhibit_handler);
 	install_keyword("notify_up", &notify_up_handler);
 	install_keyword("notify_down", &notify_down_handler);
+	install_keyword("alpha", &rs_alpha_handler);
+	install_keyword("retry", &rs_retry_handler);
+	install_keyword("delay_before_retry", &rs_delay_before_retry_handler);
+	install_keyword("warmup", &rs_warmup_handler);
+	install_keyword("connect_timeout", &rs_co_timeout_handler);
+	install_keyword("delay_loop", &rs_delay_handler);
+	install_keyword("smtp_alert", &rs_smtp_alert_handler);
+	install_keyword("virtualhost", &rs_virtualhost_handler);
+
+	install_sublevel_end_handler(&rs_end_handler);
 
 	/* Checkers mapping */
 	install_checkers_keyword();
 	install_sublevel_end();
-
 	install_keyword("laddr_group_name", &laddr_gname_handler);
 	install_keyword("daddr_group_name", &blklst_gname_handler);
 	install_keyword("syn_proxy", &syn_proxy_handler);
 	install_keyword("vip_bind_dev", &bind_dev_handler);
+}
+
+const vector_t *
+check_init_keywords(void)
+{
+	/* global definitions mapping */
+	init_global_keywords(reload);
 
+	init_check_keywords(true);
+#ifdef _WITH_VRRP_
+	init_vrrp_keywords(false);
+#endif
+#ifdef _WITH_BFD_
+	init_bfd_keywords(true);
+#endif
 	return keywords;
 }
diff --git a/tools/keepalived/keepalived/check/check_print.c b/tools/keepalived/keepalived/check/check_print.c
new file mode 100644
index 000000000..581e7fc39
--- /dev/null
+++ b/tools/keepalived/keepalived/check/check_print.c
@@ -0,0 +1,50 @@
+/*
+ * Soft:        Vrrpd is an implementation of VRRPv2 as specified in rfc2338.
+ *              VRRP is a protocol which elect a master server on a LAN. If the
+ *              master fails, a backup server takes over.
+ *              The original implementation has been made by jerome etienne.
+ *
+ * Part:        Print running LVS/checker state information
+ *
+ * Author:      Quentin Armitage <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2019-2019 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include <string.h>
+
+#include "logger.h"
+
+#include "check_print.h"
+#include "check_data.h"
+#include "utils.h"
+
+static const char *dump_file = "/tmp/keepalived_check.data";
+
+void
+check_print_data(void)
+{
+	FILE *file = fopen_safe(dump_file, "w");
+
+	if (!file) {
+		log_message(LOG_INFO, "Can't open %s (%d: %s)",
+			dump_file, errno, strerror(errno));
+		return;
+	}
+
+	dump_data_check(file);
+
+	fclose(file);
+}
diff --git a/tools/keepalived/keepalived/check/check_smtp.c b/tools/keepalived/keepalived/check/check_smtp.c
index a52b755c6..9368402d8 100644
--- a/tools/keepalived/keepalived/check/check_smtp.c
+++ b/tools/keepalived/keepalived/check/check_smtp.c
@@ -18,263 +18,319 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <errno.h>
+#include <unistd.h>
+#include <stdio.h>
 #include <ctype.h>
 
 #include "check_smtp.h"
-#include "check_api.h"
 #include "logger.h"
-#include "memory.h"
 #include "ipwrapper.h"
 #include "utils.h"
 #include "parser.h"
-#include "daemon.h"
-
-int smtp_connect_thread(thread_t *);
-
-/* module variables */
-static smtp_host_t *default_host = NULL;
-
-/*
- * Used as a callback from free_list() to free all
- * the list elements in smtp_checker->host before we
- * free smtp_checker itself.
- */
-void
-smtp_free_host(void *data)
-{
-        FREE(data);
-}
+#if !HAVE_DECL_SOCK_CLOEXEC
+#include "old_socket.h"
+#endif
+#include "layer4.h"
+#include "smtp.h"
+#ifdef THREAD_DUMP
+#include "scheduler.h"
+#endif
+
+/* Specifying host blocks within the SMTP checker is deprecated, but currently
+ * still supported. All code to support it is in WITH_HOST_ENTRIES conditional
+ * compilation, so it is easy to remove all the code eventually. */
+#define WITH_HOST_ENTRIES
+
+#ifdef WITH_HOST_ENTRIES
+static list host_list;
+static conn_opts_t *sav_co;	/* Saved conn_opts while host{} block processed */
+#endif
+//*** default_co is pointless
+static conn_opts_t* default_co;	/* Default conn_opts for SMTP_CHECK */
+
+static int smtp_connect_thread(thread_ref_t);
+static int smtp_start_check_thread(thread_ref_t);
+static int smtp_engine_thread(thread_ref_t);
 
 /* Used as a callback from the checker api, queue_checker(),
  * to free up a checker entry and all its associated data.
  */
-void
-free_smtp_check(void *data)
+static void
+free_smtp_check(checker_t *checker)
 {
-  	smtp_checker_t *smtp_checker = CHECKER_DATA(data);
-	free_list(smtp_checker->host);
-	FREE(smtp_checker->helo_name);
+	smtp_checker_t *smtp_checker = checker->data;
+
+	FREE_PTR(checker->co);
+	FREE_CONST(smtp_checker->helo_name);
 	FREE(smtp_checker);
-	FREE(data);
+	FREE(checker);
 }
 
 /*
- * Used as a callback from dump_list() to print out all
- * the list elements in smtp_checker->host.
- */
-void
-smtp_dump_host(void *data)
-{
-	dump_conn_opts (data);
-}
-
-/* 
  * Callback for whenever we've been requested to dump our
  * configuration.
  */
-void
-dump_smtp_check(void *data)
+static void
+dump_smtp_check(FILE *fp, const checker_t *checker)
 {
-	smtp_checker_t *smtp_checker = CHECKER_DATA(data);
-	log_message(LOG_INFO, "   Keepalive method = SMTP_CHECK");
-        log_message(LOG_INFO, "           helo = %s", smtp_checker->helo_name);
-        log_message(LOG_INFO, "           timeout = %ld", smtp_checker->timeout/TIMER_HZ);
-        log_message(LOG_INFO, "           retry = %d", smtp_checker->retry);
-        log_message(LOG_INFO, "           delay before retry = %ld", smtp_checker->db_retry/TIMER_HZ);
-	dump_list(smtp_checker->host);
+	const smtp_checker_t *smtp_checker = checker->data;
+
+	conf_write(fp, "   Keepalive method = SMTP_CHECK");
+	conf_write(fp, "   helo = %s", smtp_checker->helo_name);
+	dump_checker_opts(fp, checker);
 }
 
-/* Allocates a default host structure */
-smtp_host_t *
-smtp_alloc_host(void)
+static bool
+smtp_check_compare(const checker_t *old_c, const checker_t *new_c)
 {
-	smtp_host_t *new;
-	smtp_checker_t *smtp_checker = CHECKER_GET();
+	const smtp_checker_t *old = old_c->data;
+	const smtp_checker_t *new = new_c->data;
 
-	/* Allocate the new host data structure */
-	new = (smtp_host_t *)MALLOC(sizeof(smtp_host_t));
+	if (strcmp(old->helo_name, new->helo_name) != 0)
+		return false;
+	if (!compare_conn_opts(old_c->co, new_c->co))
+		return false;
 
-	/* 
-	 * By default we set the ip to connect to as the same ip as the current real server
-	 * in the rs config. This might be overridden later on by a "connect_ip" keyword.
-	 */
-	checker_set_dst(&new->dst);
-	checker_set_dst_port(&new->dst, htons(SMTP_DEFAULT_PORT));
-	new->connection_to = smtp_checker->timeout;
-	return new;
+	return true;
 }
 
-/* 
+/*
  * Callback for whenever an SMTP_CHECK keyword is encountered
- * in the config file. 
+ * in the config file.
  */
-void
-smtp_check_handler(vector_t *strvec)
+static void
+smtp_check_handler(__attribute__((unused)) const vector_t *strvec)
 {
 	smtp_checker_t *smtp_checker = (smtp_checker_t *)MALLOC(sizeof(smtp_checker_t));
+	conn_opts_t *co;
 
-	/* 
-	 * Set something sane for the default HELO banner
-	 * May be overridden by a "helo_name" keyword later.
-	 */
-	smtp_checker->helo_name = (char *)MALLOC(strlen(SMTP_DEFAULT_HELO) + 1);
-	memcpy(smtp_checker->helo_name, SMTP_DEFAULT_HELO, strlen(SMTP_DEFAULT_HELO) + 1);
+#ifdef WITH_HOST_ENTRIES
+	/* We keep a copy of the default settings for completing incomplete settings */
+	host_list = alloc_list(free_list_element_simple, NULL);
+#endif
 
-	/* some other sane values */
-	smtp_checker->timeout = 5 * TIMER_HZ;
-	smtp_checker->db_retry = 1 * TIMER_HZ;
-	smtp_checker->retry = 1;
+	co = MALLOC(sizeof(conn_opts_t));
+	co->connection_to = UINT_MAX;
 
-	/*
-	 * Have the checker queue code put our checker into the checkers_queue
-	 * list.
-	 *
-	 * queue_checker(void (*free) (void *), void (*dump) (void *),
-	 *               int (*launch) (thread_t *),
-	 *               void *data, conn_opts_t *)
-	 */
-	queue_checker(free_smtp_check, dump_smtp_check, smtp_connect_thread,
-		      smtp_checker, NULL);
-
-	/* 
-	 * Last, allocate/setup the list that will hold all the per host 
-	 * configuration structures. We'll set a "default host", which
-	 * is the same ip as the real server. If there are additional "host"
-	 * sections in the config, the default will be deleted and overridden.
-	 * If the default is still set by a previous "SMTP_CHECK" section,
-	 * we must simply overwrite the old value:
-	 * - it must not be reused, because it was probably located in a
-	 *   different "real_server" section and
-	 * - it must not be freed, because it is still referenced
-	 *   by some other smtp_checker->host.
-	 * This must come after queue_checker()!
-	 */
-	smtp_checker->host = alloc_list(smtp_free_host, smtp_dump_host);
-	default_host = smtp_alloc_host();
-	list_add(smtp_checker->host, default_host);
+	/* Have the checker queue code put our checker into the checkers_queue list. */
+	queue_checker(free_smtp_check, dump_smtp_check, smtp_start_check_thread,
+		      smtp_check_compare, smtp_checker, co, true);
 }
 
-/* 
- * Callback for whenever the "host" keyword is encountered
- * in the config file. 
- */
-void
-smtp_host_handler(vector_t *strvec)
+static void
+smtp_check_end_handler(void)
 {
-        smtp_checker_t *smtp_checker = CHECKER_GET();
+	checker_t *checker = CHECKER_GET_CURRENT();
+	smtp_checker_t *smtp_checker = CHECKER_ARG(checker);
+	checker_t *new_checker;
+	smtp_checker_t *new_smtp_checker;
+	element e, n;
+	conn_opts_t *co;
+
+	if (!smtp_checker->helo_name)
+		smtp_checker->helo_name = STRDUP(SMTP_DEFAULT_HELO);
+
+	/* If any connection component has been configured, we want to add it to the host list */
+	if (checker->co->dst.ss_family != AF_UNSPEC ||
+	    ((struct sockaddr_in *)&checker->co->dst)->sin_port ||
+	    checker->co->bindto.ss_family != AF_UNSPEC ||
+	    ((struct sockaddr_in *)&checker->co->bindto)->sin_port ||
+	    checker->co->bind_if[0] ||
+#ifdef _WITH_SO_MARK_
+	    checker->co->fwmark ||
+#endif
+	    checker->co->connection_to) {
+		/* Set any necessary defaults */
+		if (checker->co->dst.ss_family == AF_UNSPEC) {
+			if (((struct sockaddr_in *)&checker->co->dst)->sin_port) {
+				uint16_t saved_port = ((struct sockaddr_in *)&checker->co->dst)->sin_port;
+				checker->co->dst = default_co->dst;
+				checker_set_dst_port(&checker->co->dst, saved_port);
+			}
+			else
+				checker->co->dst = default_co->dst;
+		}
 
-	/*
-	 * If the default host is still allocated, delete it
-	 * before we stick user defined hosts in the list.
-	 */
-	if (default_host) {
-		list_del(smtp_checker->host, default_host);
-		FREE(default_host);
-		default_host = NULL;
+		if (!check_conn_opts(checker->co)) {
+			dequeue_new_checker();
+			return;
+		}
 	}
+	else
+		FREE(checker->co);
+
+	/* If there was no host{} section, add a single host to the list */
+	if (!checker->co
+#ifdef WITH_HOST_ENTRIES
+			 && LIST_ISEMPTY(host_list)
+#endif
+						   ) {
+		checker->co = default_co;
+		default_co = NULL;
+	} else {
+#ifdef WITH_HOST_ENTRIES
+		if (!checker->co) {
+			checker->co = LIST_HEAD_DATA(host_list);
+			list_extract(host_list, LIST_HEAD(host_list));
+		}
+#endif
 
-        /* add an empty host to the list, smtp_checker->host */
-        list_add(smtp_checker->host, smtp_alloc_host());
-}
+		FREE(default_co);
+	}
 
-/* "helo_name" keyword */
-void
-smtp_helo_name_handler(vector_t *strvec)
-{
-	smtp_checker_t *smtp_checker = CHECKER_GET();
-	smtp_checker->helo_name = CHECKER_VALUE_STRING(strvec);
+	/* Set the conection timeout if not set */
+	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
+	real_server_t *rs = LIST_TAIL_DATA(vs->rs);
+	unsigned conn_to = rs->connection_to;
+	if (conn_to == UINT_MAX)
+		conn_to = vs->connection_to;
+
+	if (checker->co->connection_to == UINT_MAX)
+		checker->co->connection_to = conn_to;
+
+#ifdef WITH_HOST_ENTRIES
+	/* Create a new checker for each host on the host list */
+	LIST_FOREACH_NEXT(host_list, co, e, n) {
+		new_smtp_checker = MALLOC(sizeof(smtp_checker_t));
+		*new_smtp_checker = *smtp_checker;
+
+		if (co->connection_to == UINT_MAX)
+			co->connection_to = conn_to;
+
+		new_smtp_checker->helo_name = STRDUP(smtp_checker->helo_name);
+
+		queue_checker(free_smtp_check, dump_smtp_check, smtp_start_check_thread,
+			      smtp_check_compare, new_smtp_checker, NULL, true);
+
+		new_checker = CHECKER_GET_CURRENT();
+		*new_checker = *checker;
+		new_checker->co = co;
+		new_checker->data = new_smtp_checker;
+
+		list_extract(host_list, e);
+	}
+
+	/* The list is now empty */
+	free_list(&host_list);
+#endif
 }
 
-/* "connect_timeout" keyword */
-void
-smtp_timeout_handler(vector_t *strvec)
+#ifdef WITH_HOST_ENTRIES
+/* Callback for "host" keyword */
+static void
+smtp_host_handler(__attribute__((unused)) const vector_t *strvec)
 {
-	smtp_checker_t *smtp_checker = CHECKER_GET();
-	smtp_checker->timeout = CHECKER_VALUE_INT(strvec) * TIMER_HZ;
-	if (smtp_checker->timeout < TIMER_HZ)
-		smtp_checker->timeout = TIMER_HZ;
+	checker_t *checker = CHECKER_GET_CURRENT();
+
+	/* save the main conn_opts_t and set a new default for the host */
+	sav_co = checker->co;
+	checker->co = (conn_opts_t*)MALLOC(sizeof(conn_opts_t));
+	*checker->co = *sav_co;
+
+	log_message(LOG_INFO, "The SMTP_CHECK host block is deprecated. Please define additional checkers.");
 }
 
-/* "retry" keyword */
-void
-smtp_retry_handler(vector_t *strvec)
+static void
+smtp_host_end_handler(void)
 {
-        smtp_checker_t *smtp_checker = CHECKER_GET();
-	smtp_checker->retry = CHECKER_VALUE_INT(strvec);
+	checker_t *checker = CHECKER_GET_CURRENT();
+
+	if (!check_conn_opts(checker->co))
+		FREE(checker->co);
+	else
+		list_add(host_list, checker->co);
+
+	checker->co = sav_co;
 }
+#endif
 
-/* "delay_before_retry" keyword */
-void
-smtp_db_retry_handler(vector_t *strvec)
+/* "helo_name" keyword */
+static void
+smtp_helo_name_handler(const vector_t *strvec)
 {
-        smtp_checker_t *smtp_checker = CHECKER_GET();
-	smtp_checker->db_retry = CHECKER_VALUE_INT(strvec) * TIMER_HZ;
+	smtp_checker_t *smtp_checker = CHECKER_GET();
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "SMTP_CHECK helo name missing");
+		return;
+	}
+
+	if (smtp_checker->helo_name)
+		FREE_CONST(smtp_checker->helo_name);
+
+	smtp_checker->helo_name = set_value(strvec);
 }
 
 /* Config callback installer */
 void
 install_smtp_check_keyword(void)
 {
-        /* 
-         * Notify the config log parser that we need to be notified via
+	/*
+	 * Notify the config log parser that we need to be notified via
 	 * callbacks when the following keywords are encountered in the
 	 * keepalive.conf file.
-         */
+	 */
 	install_keyword("SMTP_CHECK", &smtp_check_handler);
 	install_sublevel();
 	install_keyword("helo_name", &smtp_helo_name_handler);
 
-	/* This is kept for backward compatibility.
-	Used as default value for per-host timeout */
- 	install_keyword("connect_timeout", &smtp_timeout_handler);
+	install_checker_common_keywords(true);
 
-	install_keyword("warmup", &warmup_handler);
-	install_keyword("delay_before_retry", &smtp_db_retry_handler);
-	install_keyword("retry", &smtp_retry_handler);
+	/*
+	 * The host list feature is deprecated. It makes config fussy by
+	 * adding another nesting level and is excessive since it is possible
+	 * to attach multiple checkers to a RS.
+	 * So these keywords below are kept for compatibility with users'
+	 * existing configs.
+	 */
 	install_keyword("host", &smtp_host_handler);
 	install_sublevel();
-	install_connect_keywords();
+	install_checker_common_keywords(true);
+	install_sublevel_end_handler(smtp_host_end_handler);
 	install_sublevel_end();
+
+	install_sublevel_end_handler(&smtp_check_end_handler);
 	install_sublevel_end();
 }
 
 /*
- * Final handler. Determines if we need a retry or not. 
+ * Final handler. Determines if we need a retry or not.
  * Also has to make a decision if we need to bring the resulting
  * service down in case of error.
  */
-int
-smtp_final(thread_t *thread, int error, const char *format, ...)
+static int __attribute__ ((format (printf, 2, 3)))
+smtp_final(thread_ref_t thread, const char *format, ...)
 {
 	checker_t *checker = THREAD_ARG(thread);
-	smtp_checker_t *smtp_checker = CHECKER_ARG(checker);
 	char error_buff[512];
 	char smtp_buff[542];
 	va_list varg_list;
+	bool checker_was_up;
+	bool rs_was_alive;
 
 	/* Error or no error we should always have to close the socket */
-	close(thread->u.fd);
+	if (thread->type != THREAD_TIMER)
+		thread_close_fd(thread);
 
-	/* If we're here, an attempt HAS been made already for the current host */
-	smtp_checker->attempts++;
-	
-	if (error) {
+	if (format) {
 		/* Always syslog the error when the real server is up */
-                if (svr_checker_up(checker->id, checker->rs)) {
-			if (format != NULL) {
-				memcpy(error_buff, "SMTP_CHECK ", 11);
-				va_start(varg_list, format);
-				vsnprintf(error_buff + 11, 512 - 11, format, varg_list);
-				va_end(varg_list);
-				error_buff[512 - 1] = '\0';
-
-				log_message(LOG_INFO, error_buff);
-			} else {
-				log_message(LOG_INFO, "SMTP_CHECK Unknown error");
-			}
+		if ((checker->is_up || !checker->has_run) &&
+		    (global_data->checker_log_all_failures ||
+		     checker->log_all_failures ||
+		     checker->retry_it >= checker->retry)) {
+			/* prepend format with the "SMTP_CHECK " string */
+			strcpy_safe(error_buff, "SMTP_CHECK ");
+			strncat(error_buff, format, sizeof(error_buff) - 11 - 1);
+
+			va_start(varg_list, format);
+			vlog_message(LOG_INFO, error_buff, varg_list);
+			va_end(varg_list);
 		}
 
 		/*
@@ -282,9 +338,9 @@ smtp_final(thread_t *thread, int error, const char *format, ...)
 		 * scheduling the main thread to check it again after the
 		 * configured backoff delay. Otherwise down the RS.
 		 */
-		if (smtp_checker->attempts < smtp_checker->retry) {
+		if (++checker->retry_it <= checker->retry) {
 			thread_add_timer(thread->master, smtp_connect_thread, checker,
-					 smtp_checker->db_retry);
+					 checker->delay_before_retry);
 			return 0;
 		}
 
@@ -294,52 +350,64 @@ smtp_final(thread_t *thread, int error, const char *format, ...)
 		 * be noted that smtp_alert makes a copy of the string arguments, so
 		 * we don't have to keep them statically allocated.
 		 */
-                if (svr_checker_up(checker->id, checker->rs)) {
-			if (format != NULL) {
-				snprintf(smtp_buff, 542, "=> CHECK failed on service : %s <=",
-					 error_buff + 11);
-			} else {
-				snprintf(smtp_buff, 542, "=> CHECK failed on service <=");
+		if (checker->is_up || !checker->has_run) {
+			checker_was_up = checker->is_up;
+			rs_was_alive = checker->rs->alive;
+			update_svr_checker_state(DOWN, checker);
+			if (checker->rs->smtp_alert && checker_was_up &&
+			    (rs_was_alive != checker->rs->alive || !global_data->no_checker_emails)) {
+				if (format != NULL) {
+					snprintf(error_buff, sizeof(error_buff), "=> CHECK failed on service : %s <=", format);
+					va_start(varg_list, format);
+					vsnprintf(smtp_buff, sizeof(smtp_buff), error_buff, varg_list);
+					va_end(varg_list);
+				} else
+					strncpy(smtp_buff, "=> CHECK failed on service <=", sizeof(smtp_buff));
+
+				smtp_buff[sizeof(smtp_buff) - 1] = '\0';
+				smtp_alert(SMTP_MSG_RS, checker, NULL, smtp_buff);
 			}
-
-			smtp_buff[542 - 1] = '\0';
-			smtp_alert(checker->rs, NULL, NULL, "DOWN", smtp_buff);
-			update_svr_checker_state(DOWN, checker->id, checker->vs, checker->rs);
 		}
 
-		/* Reset everything back to the first host in the list */
-		smtp_checker->attempts = 0;
-		smtp_checker->host_ctr = 0;
-
-		/* Reschedule the main thread using the configured delay loop */;
-		thread_add_timer(thread->master, smtp_connect_thread, checker, checker->vs->delay_loop);
+		/* Reschedule the main thread using the configured delay loop */
+		thread_add_timer(thread->master, smtp_start_check_thread, checker, checker->delay_loop);
 
 		return 0;
-	}	
+	}
 
 	/*
 	 * Ok this host was successful, increment to the next host in the list
-	 * and reset the attempts counter. We'll then reschedule the main thread again.
-	 * If host_ctr exceeds the number of hosts in the list, http_main_thread will
+	 * and reset the retry_it counter. We'll then reschedule the main thread again.
+	 * If host_ptr exceeds the end of the list, smtp_connect_main_thread will
 	 * take note and bring up the real server as well as inject the delay_loop.
 	 */
-	smtp_checker->attempts = 0;
-	smtp_checker->host_ctr++;
+	checker->retry_it = 0;
 
-	thread_add_timer(thread->master, smtp_connect_thread, checker, 1);
-	return 0;
-}
+	/*
+	 * Set the internal host pointer to the host that we'll be
+	 * working on. If it's NULL, we've successfully tested all hosts.
+	 * We'll bring the service up (if it's not already), reset the host list,
+	 * and insert the delay loop. When we get scheduled again the host list
+	 * will be reset and we will continue on checking them one by one.
+	 */
+	if (!checker->is_up || !checker->has_run) {
+		log_message(LOG_INFO, "Remote SMTP server %s succeed on service."
+				    , FMT_CHK(checker));
+
+		checker_was_up = checker->is_up;
+		rs_was_alive = checker->rs->alive;
+		update_svr_checker_state(UP, checker);
+		if (checker->rs->smtp_alert && !checker_was_up &&
+		    (rs_was_alive != checker->rs->alive || !global_data->no_checker_emails))
+			smtp_alert(SMTP_MSG_RS, checker, NULL,
+				   "=> CHECK succeed on service <=");
+	}
 
-/* 
- * Zeros out the rx/tx buffer
- */
-void
-smtp_clear_buff(thread_t *thread)
-{
-        checker_t *checker = THREAD_ARG(thread);
-        smtp_checker_t *smtp_checker = CHECKER_ARG(checker);
-	memset(smtp_checker->buff, 0, SMTP_BUFF_MAX);
-	smtp_checker->buff_ctr = 0;
+	checker->has_run = true;
+
+	thread_add_timer(thread->master, smtp_start_check_thread, checker, checker->delay_loop);
+
+	return 0;
 }
 
 /*
@@ -348,61 +416,38 @@ smtp_clear_buff(thread_t *thread)
  * single packet, but we don't care. We are only looking at the
  * SMTP response codes at the beginning anyway.
  */
-int
-smtp_get_line_cb(thread_t *thread)
+static int
+smtp_get_line_cb(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	smtp_checker_t *smtp_checker = CHECKER_ARG(checker);
-	smtp_host_t *smtp_host = smtp_checker->host_ptr;
-	int f, r, x;
+	conn_opts_t *smtp_host = checker->co;
+	ssize_t r;
+	char *nl;
 
-        /* Handle read timeout */
-        if (thread->type == THREAD_READ_TIMEOUT) {
-		smtp_final(thread, 1, "Read timeout from server %s"
+	/* Handle read timeout */
+	if (thread->type == THREAD_READ_TIMEOUT) {
+		smtp_final(thread, "Read timeout from server %s"
 				    , FMT_SMTP_RS(smtp_host));
 		return 0;
 	}
 
 	/* wrap the buffer, if full, by clearing it */
-	if (SMTP_BUFF_MAX - smtp_checker->buff_ctr <= 0) {
+	if (smtp_checker->buff_ctr >= SMTP_BUFF_MAX - 1) {
 		log_message(LOG_INFO, "SMTP_CHECK Buffer overflow reading from server %s. "
-				      "Increase SMTP_BUFF_MAX in smtp_check.h"
+				      "Increase SMTP_BUFF_MAX in check_smtp.h"
 				    , FMT_SMTP_RS(smtp_host));
-		smtp_clear_buff(thread);
+		smtp_checker->buff_ctr = 0;
 	}
 
-	/* Set descriptor non blocking */
-	f = fcntl(thread->u.fd, F_GETFL, 0);
-	fcntl(thread->u.fd, F_SETFL, f | O_NONBLOCK);
-
 	/* read the data */
-	r = read(thread->u.fd, smtp_checker->buff + smtp_checker->buff_ctr,
-		 SMTP_BUFF_MAX - smtp_checker->buff_ctr);
+	r = read(thread->u.f.fd, smtp_checker->buff + smtp_checker->buff_ctr,
+		 SMTP_BUFF_MAX - smtp_checker->buff_ctr - 1);
 
-	if (r == -1 && (errno == EAGAIN || errno == EINTR)) {
+	if (r == -1 && (check_EAGAIN(errno) || check_EINTR(errno))) {
 		thread_add_read(thread->master, smtp_get_line_cb, checker,
-				thread->u.fd, smtp_host->connection_to);
-        	fcntl(thread->u.fd, F_SETFL, f);
+				thread->u.f.fd, smtp_host->connection_to, true);
 		return 0;
-	} else if (r > 0)
-		smtp_checker->buff_ctr += r;
-
-        /* restore descriptor flags */
-        fcntl(thread->u.fd, F_SETFL, f);
-
-	/* check if we have a newline, if so, callback */
-	for (x = 0; x < SMTP_BUFF_MAX; x++) {
-		if (smtp_checker->buff[x] == '\n') {
-			smtp_checker->buff[SMTP_BUFF_MAX - 1] = '\0';
-
-			DBG("SMTP_CHECK %s < %s"
-			    , FMT_SMTP_RS(smtp_host)
-			    , smtp_checker->buff);
-
-			(smtp_checker->buff_cb)(thread);
-
-			return 0;
-		}
 	}
 
 	/*
@@ -410,46 +455,60 @@ smtp_get_line_cb(thread_t *thread)
 	 * some sort of error, notify smtp_final()
 	 */
 	if (r <= 0) {
-		smtp_final(thread, 1, "Read failure from server %s"
+		smtp_final(thread, "Read failure from server %s"
 				     , FMT_SMTP_RS(smtp_host));
 		return 0;
 	}
 
+	smtp_checker->buff_ctr += (size_t)r;
+	smtp_checker->buff[smtp_checker->buff_ctr] = '\0';
+
+	/* check if we have a newline, if so, callback */
+	if ((nl = strchr(smtp_checker->buff, '\n'))) {
+		*nl = '\0';
+
+		DBG("SMTP_CHECK %s < %s"
+		    , FMT_SMTP_RS(smtp_host)
+		    , smtp_checker->buff);
+
+		smtp_engine_thread(thread);
+
+		return 0;
+	}
+
 	/*
 	 * Last case, we haven't read enough data yet
 	 * to pull a newline. Schedule ourselves for
 	 * another round.
 	 */
 	thread_add_read(thread->master, smtp_get_line_cb, checker,
-			thread->u.fd, smtp_host->connection_to);
+			thread->u.f.fd, smtp_host->connection_to, true);
 	return 0;
 }
 
-/* 
+/*
  * Ok a caller has asked us to asyncronously schedule a single line
  * to be received from the server. They have also passed us a call back
  * function that we'll call once we have the newline. If something bad
  * happens, the caller assumes we'll pass the error off to smtp_final(),
  * which will either down the real server or schedule a retry. The
  * function smtp_get_line_cb is what does the dirty work since the
- * sceduler can only accept a single *thread argument.
+ * scheduler can only accept a single *thread argument.
  */
-void
-smtp_get_line(thread_t *thread, int (*callback) (thread_t *))
+static void
+smtp_get_line(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	smtp_checker_t *smtp_checker = CHECKER_ARG(checker);
-	smtp_host_t *smtp_host = smtp_checker->host_ptr;
+	conn_opts_t *smtp_host = checker->co;
 
 	/* clear the buffer */
-	smtp_clear_buff(thread);
-
-	/* set the callback */
-	smtp_checker->buff_cb = callback;
+	smtp_checker->buff_ctr = 0;
 
 	/* schedule the I/O with our helper function  */
 	thread_add_read(thread->master, smtp_get_line_cb, checker,
-		thread->u.fd, smtp_host->connection_to);
+		thread->u.f.fd, smtp_host->connection_to, true);
+	thread_del_write(thread);
 	return;
 }
 
@@ -457,41 +516,32 @@ smtp_get_line(thread_t *thread, int (*callback) (thread_t *))
  * The scheduler function that puts the data out on the wire.
  * All our data will fit into one packet, so we only check if
  * the current write would block or not. If it wants to block,
- * we'll return to the scheduler and try again later. 
+ * we'll return to the scheduler and try again later.
  */
-int
-smtp_put_line_cb(thread_t *thread)
+static int
+smtp_put_line_cb(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	smtp_checker_t *smtp_checker = CHECKER_ARG(checker);
-	smtp_host_t *smtp_host = smtp_checker->host_ptr;
-	int f, w;
-
+	conn_opts_t *smtp_host = checker->co;
+	ssize_t w;
 
-        /* Handle read timeout */
-        if (thread->type == THREAD_WRITE_TIMEOUT) {
-		smtp_final(thread, 1, "Write timeout to server %s"
+	/* Handle read timeout */
+	if (thread->type == THREAD_WRITE_TIMEOUT) {
+		smtp_final(thread, "Write timeout to server %s"
 				     , FMT_SMTP_RS(smtp_host));
 		return 0;
 	}
 
-	/* Set descriptor non blocking */
-        f = fcntl(thread->u.fd, F_GETFL, 0);
-        fcntl(thread->u.fd, F_SETFL, f | O_NONBLOCK);
+	/* write the data */
+	w = write(thread->u.f.fd, smtp_checker->buff, smtp_checker->buff_ctr);
 
-        /* write the data */
-        w = write(thread->u.fd, smtp_checker->buff, smtp_checker->buff_ctr);
-
-	if (w == -1 && (errno == EAGAIN || errno == EINTR)) {
+	if (w == -1 && (check_EAGAIN(errno) || check_EINTR(errno))) {
 		thread_add_write(thread->master, smtp_put_line_cb, checker,
-				 thread->u.fd, smtp_host->connection_to);
-        	fcntl(thread->u.fd, F_SETFL, f);
+				 thread->u.f.fd, smtp_host->connection_to, true);
 		return 0;
 	}
 
-        /* restore descriptor flags */
-        fcntl(thread->u.fd, F_SETFL, f);
-
 	DBG("SMTP_CHECK %s > %s"
 	    , FMT_SMTP_RS(smtp_host)
 	    , smtp_checker->buff);
@@ -501,36 +551,31 @@ smtp_put_line_cb(thread_t *thread)
 	 * some sort of error, notify smtp_final()
 	 */
 	if (w <= 0) {
-		smtp_final(thread, 1, "Write failure to server %s"
+		smtp_final(thread, "Write failure to server %s"
 				     , FMT_SMTP_RS(smtp_host));
 		return 0;
 	}
 
 	/* Execute the callback */
-	(smtp_checker->buff_cb)(thread);
+	smtp_engine_thread(thread);
 	return 0;
 }
 
-/* 
+/*
  * This is the same as smtp_get_line() except that we're sending a
  * line of data instead of receiving one.
  */
-void
-smtp_put_line(thread_t *thread, int (*callback) (thread_t *))
+static void
+smtp_put_line(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	smtp_checker_t *smtp_checker = CHECKER_ARG(checker);
-	smtp_host_t *smtp_host = smtp_checker->host_ptr;
 
-	smtp_checker->buff[SMTP_BUFF_MAX - 1] = '\0';
 	smtp_checker->buff_ctr = strlen(smtp_checker->buff);
 
-	/* set the callback */
-	smtp_checker->buff_cb = callback;
-
 	/* schedule the I/O with our helper function  */
-	thread_add_write(thread->master, smtp_put_line_cb, checker,
-			 thread->u.fd, smtp_host->connection_to);
+	smtp_put_line_cb(thread);
+
 	return;
 }
 
@@ -539,37 +584,34 @@ smtp_put_line(thread_t *thread, int (*callback) (thread_t *))
  * buffer and return it as an integer. If it's not legible,
  * return -1.
  */
-int
-smtp_get_status(thread_t *thread)
+static int
+smtp_get_status(smtp_checker_t *smtp_checker)
 {
-	checker_t *checker = THREAD_ARG(thread);
-	smtp_checker_t *smtp_checker = CHECKER_ARG(checker);
 	char *buff = smtp_checker->buff;
+	int status;
+	char *endptr;
 
-	/* First make sure they're all digits */	
-	if (isdigit(buff[0]) && isdigit(buff[1]) &&
-	    isdigit(buff[2])) {
-		/* Truncate the string and convert */	
-		buff[3] = '\0';
-		return atoi(buff);
-	}
+	status = strtoul(buff, &endptr, 10);
+	if (endptr - buff != 3 ||
+	    (*endptr && *endptr != ' '))
+		return -1;
 
-	return -1;
+	return status;
 }
 
-/* 
- * We have a connected socket and are ready to begin 
- * the conversation. This function schedules itself to 
- * be called via callbacks and tracking state in 
- * smtp_checker->state. Upon first calling, smtp_checker->state 
+/*
+ * We have a connected socket and are ready to begin
+ * the conversation. This function schedules itself to
+ * be called via callbacks and tracking state in
+ * smtp_checker->state. Upon first calling, smtp_checker->state
  * should be set to SMTP_START.
  */
-int
-smtp_engine_thread(thread_t *thread)
+static int
+smtp_engine_thread(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	smtp_checker_t *smtp_checker = CHECKER_ARG(checker);
-	smtp_host_t *smtp_host = smtp_checker->host_ptr;
+	conn_opts_t *smtp_host = checker->co;
 
 	switch (smtp_checker->state) {
 
@@ -581,97 +623,93 @@ smtp_engine_thread(thread_t *thread)
 			 * will defer directly to smtp_final.
 			 */
 			smtp_checker->state = SMTP_HAVE_BANNER;
-			smtp_get_line(thread, smtp_engine_thread);
-			return 0;
+			smtp_get_line(thread);
 			break;
 
 		/* Second step, analyze banner, send HELO */
 		case SMTP_HAVE_BANNER:
 			/* Check for "220 some.mailserver.com" in the greeting */
-			if (smtp_get_status(thread) != 220) {
-				smtp_final(thread, 1, "Bad greeting banner from server %s"
+			if (smtp_get_status(smtp_checker) != 220) {
+				smtp_final(thread, "Bad greeting banner from server %s"
 						     , FMT_SMTP_RS(smtp_host));
-
-				return 0;
+			} else {
+				/*
+				 * Schedule to send the HELO, smtp_put_line will
+				 * defer directly to smtp_final on error.
+				 */
+				smtp_checker->state = SMTP_SENT_HELO;
+				snprintf(smtp_checker->buff, SMTP_BUFF_MAX, "HELO %s\r\n",
+					 smtp_checker->helo_name);
+				smtp_put_line(thread);
 			}
-
-			/*
-			 * Schedule to send the HELO, smtp_put_line will
-			 * defer directly to smtp_final on error.
-			 */
-			smtp_checker->state = SMTP_SENT_HELO;
-			snprintf(smtp_checker->buff, SMTP_BUFF_MAX, "HELO %s\r\n",
-				 smtp_checker->helo_name);
-			smtp_put_line(thread, smtp_engine_thread);
-			return 0;
 			break;
 
 		/* Third step, schedule to read the HELO response */
 		case SMTP_SENT_HELO:
 			smtp_checker->state = SMTP_RECV_HELO;
-			smtp_get_line(thread, smtp_engine_thread);
-			return 0;
+			smtp_get_line(thread);
 			break;
 
 		/* Fourth step, analyze HELO return, send QUIT */
 		case SMTP_RECV_HELO:
 			/* Check for "250 Please to meet you..." */
-			if (smtp_get_status(thread) != 250) {
-				smtp_final(thread, 1, "Bad HELO response from server %s"
+			if (smtp_get_status(smtp_checker) != 250) {
+				smtp_final(thread, "Bad HELO response from server %s"
 						     , FMT_SMTP_RS(smtp_host));
-
-				return 0;
+			} else {
+				smtp_checker->state = SMTP_SENT_QUIT;
+				snprintf(smtp_checker->buff, SMTP_BUFF_MAX, "QUIT\r\n");
+				smtp_put_line(thread);
 			}
-
-			smtp_checker->state = SMTP_SENT_QUIT;
-			snprintf(smtp_checker->buff, SMTP_BUFF_MAX, "QUIT\r\n");
-			smtp_put_line(thread, smtp_engine_thread);
-			return 0;
 			break;
 
 		/* Fifth step, schedule to receive QUIT confirmation */
 		case SMTP_SENT_QUIT:
 			smtp_checker->state = SMTP_RECV_QUIT;
-			smtp_get_line(thread, smtp_engine_thread);
-			return 0;
+			smtp_get_line(thread);
 			break;
 
 		/* Sixth step, wrap up success to smtp_final */
 		case SMTP_RECV_QUIT:
-			smtp_final(thread, 0, NULL);
-			return 0;
+			smtp_final(thread, NULL);
+			break;
+
+		default:
+			/* We shouldn't be here */
+			smtp_final(thread, "Unknown smtp engine state encountered");
 			break;
 	}
 
-	/* We shouldn't be here */
-	smtp_final(thread, 1, "Unknown smtp engine state encountered");
 	return 0;
 }
-		
-/* 
+
+/*
  * Second step in the process. Here we'll see if the connection
  * to the host we're checking was successful or not.
  */
-int
-smtp_check_thread(thread_t *thread)
+static int
+smtp_check_thread(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	smtp_checker_t *smtp_checker = CHECKER_ARG(checker);
-	smtp_host_t *smtp_host = smtp_checker->host_ptr;
+	conn_opts_t *smtp_host = checker->co;
 	int status;
 
-	status = tcp_socket_state(thread->u.fd, thread, smtp_check_thread);
+	status = tcp_socket_state(thread, smtp_check_thread);
 	switch (status) {
 		case connect_error:
-			smtp_final(thread, 1, "Error connecting to server %s"
+			smtp_final(thread, "Error connecting to server %s"
 					     , FMT_SMTP_RS(smtp_host));
-			return 0;
 			break;
 
 		case connect_timeout:
-			smtp_final(thread, 1, "Connection timeout to server %s"
+			smtp_final(thread, "Connection timeout to server %s"
+					     , FMT_SMTP_RS(smtp_host));
+			break;
+
+		case connect_fail:
+			smtp_final(thread, "Could not connect to server %s"
 					     , FMT_SMTP_RS(smtp_host));
-			return 0;
 			break;
 
 		case connect_success:
@@ -681,58 +719,56 @@ smtp_check_thread(thread_t *thread)
 			/* Enter the engine at SMTP_START */
 			smtp_checker->state = SMTP_START;
 			smtp_engine_thread(thread);
-			return 0;
+			break;
+
+		default:
+			/* we shouldn't be here */
+			smtp_final(thread, "Unknown connection error to server %s"
+					     , FMT_SMTP_RS(smtp_host));
 			break;
 	}
 
-	/* we shouldn't be here */		
-	smtp_final(thread, 1, "Unknown connection error to server %s"
-			     , FMT_SMTP_RS(smtp_host));
 	return 0;
 }
 
-/* 
+/*
  * This is the main thread, where all the action starts.
  * When the check daemon comes up, it goes down the checkers_queue
  * and launches a thread for each checker that got registered.
  * This is the callback/event function for that initial thread.
  *
- * It should be noted that we ARE responsible for sceduling 
+ * It should be noted that we ARE responsible for scheduling
  * ourselves to run again. It doesn't have to be right here,
  * but eventually has to happen.
  */
-int
-smtp_connect_thread(thread_t *thread)
+static int
+smtp_connect_thread(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
-	smtp_checker_t *smtp_checker = CHECKER_ARG(checker);
-	smtp_host_t *smtp_host;
+	conn_opts_t *smtp_host;
 	enum connect_result status;
 	int sd;
 
 	/* Let's review our data structures.
 	 *
 	 * Thread is the structure used by the sceduler
-	 * for sceduling many types of events. thread->arg in this
+	 * for scheduling many types of events. thread->arg in this
 	 * case points to a checker structure. The checker
 	 * structure holds data about the vs and rs configurations
-	 * as well as the delay loop, etc. Each real server 
-         * defined in the keepalived.conf will more than likely have
+	 * as well as the delay loop, etc. Each real server
+	 * defined in the keepalived.conf will more than likely have
 	 * a checker structure assigned to it. Each checker structure
-         * has a data element that is meant to hold per checker 
+	 * has a data element that is meant to hold per checker
 	 * configurations. So thread->arg(checker)->data points to
- 	 * a smtp_checker structure. In the smtp_checker structure
+	 * a smtp_checker structure. In the smtp_checker structure
 	 * we hold global configuration data for the smtp check.
-	 * Smtp_checker has a list of per host (smtp_host) configuration
-	 * data in smtp_checker->host.
 	 *
 	 * So this whole thing looks like this:
 	 * thread->arg(checker)->data(smtp_checker)->host(smtp_host)
-	 * 
+	 *
 	 * To make life simple, we'll break the structures out so
 	 * that "checker" always points to the current checker structure,
-	 * "smtp_checker" points to the current smtp_checker structure, 
-	 * and "smtp_host" points to the current smtp_host structure.
+	 * "smtp_checker" points to the current smtp_checker structure.
 	 */
 
 	/*
@@ -740,56 +776,72 @@ smtp_connect_thread(thread_t *thread)
 	 * But we still have to register ourselves again so
 	 * we don't fall of the face of the earth.
 	 */
-	if (!CHECKER_ENABLED(checker)) {
-		thread_add_timer(thread->master, smtp_connect_thread, checker,
-				 checker->vs->delay_loop);
+	if (!checker->enabled) {
+		thread_add_timer(thread->master, smtp_start_check_thread, checker,
+				 checker->delay_loop);
 		return 0;
 	}
 
-	/*
-	 * Set the internal host pointer to the host that well be 
-	 * working on. If it's NULL, we've successfully tested all hosts.
-	 * We'll bring the service up (if it's not already), reset the host list,
-	 * and insert the delay loop. When we get scheduled again the host list
-	 * will be reset and we will continue on checking them one by one.
-	 */
-	if ((smtp_checker->host_ptr = list_element(smtp_checker->host, smtp_checker->host_ctr)) == NULL) {
-		if (!svr_checker_up(checker->id, checker->rs)) {
-			log_message(LOG_INFO, "Remote SMTP server %s succeed on service."
-					    , FMT_CHK(checker));
-
-			smtp_alert(checker->rs, NULL, NULL, "UP",
-				   "=> CHECK succeed on service <=");
-			update_svr_checker_state(UP, checker->id, checker->vs, checker->rs);
-		}
-
-		smtp_checker->attempts = 0;
-		smtp_checker->host_ctr = 0;
-		smtp_checker->host_ptr = list_element(smtp_checker->host, 0);
+	smtp_host = checker->co;
 
-		thread_add_timer(thread->master, smtp_connect_thread, checker, checker->vs->delay_loop);
+	/* Create the socket, failing here should be an oddity */
+	if ((sd = socket(smtp_host->dst.ss_family, SOCK_STREAM | SOCK_CLOEXEC | SOCK_NONBLOCK, IPPROTO_TCP)) == -1) {
+		log_message(LOG_INFO, "SMTP_CHECK connection failed to create socket. Rescheduling.");
+		thread_add_timer(thread->master, smtp_start_check_thread, checker,
+				 checker->delay_loop);
 		return 0;
 	}
 
-	smtp_host = smtp_checker->host_ptr;
+#if !HAVE_DECL_SOCK_NONBLOCK
+	if (set_sock_flags(sd, F_SETFL, O_NONBLOCK))
+		log_message(LOG_INFO, "Unable to set NONBLOCK on smtp socket - %s (%d)", strerror(errno), errno);
+#endif
 
-	/* Create the socket, failling here should be an oddity */
-	if ((sd = socket(smtp_host->dst.ss_family, SOCK_STREAM, IPPROTO_TCP)) == -1) {
-		log_message(LOG_INFO, "SMTP_CHECK connection failed to create socket. Rescheduling.");
-		thread_add_timer(thread->master, smtp_connect_thread, checker,
-				 checker->vs->delay_loop);
-		return 0;
-	}
+#if !HAVE_DECL_SOCK_CLOEXEC
+	if (set_sock_flags(sd, F_SETFD, FD_CLOEXEC))
+		log_message(LOG_INFO, "Unable to set CLOEXEC on smtp socket - %s (%d)", strerror(errno), errno);
+#endif
 
 	status = tcp_bind_connect(sd, smtp_host);
 
-	/* handle tcp connection status & register callback the next setp in the process */
+	/* handle tcp connection status & register callback the next step in the process */
 	if(tcp_connection_state(sd, status, thread, smtp_check_thread, smtp_host->connection_to)) {
-		close(sd);
-		log_message(LOG_INFO, "SMTP_CHECK socket bind failed. Rescheduling.");
-		thread_add_timer(thread->master, smtp_connect_thread, checker,
-			checker->vs->delay_loop);
+                if (status == connect_fail) {
+                        close(sd);
+                        smtp_final(thread, "Network unreachable for server %s - real server %s",
+                                           inet_sockaddrtos(&checker->co->dst),
+                                           inet_sockaddrtopair(&checker->rs->addr));
+                } else {
+			close(sd);
+			log_message(LOG_INFO, "SMTP_CHECK socket bind failed. Rescheduling.");
+			thread_add_timer(thread->master, smtp_start_check_thread, checker,
+				checker->delay_loop);
+		}
 	}
- 
+
 	return 0;
 }
+
+static int
+smtp_start_check_thread(thread_ref_t thread)
+{
+	checker_t *checker = THREAD_ARG(thread);
+
+	checker->retry_it = 0;
+
+	smtp_connect_thread(thread);
+
+	return 0;
+}
+
+#ifdef THREAD_DUMP
+void
+register_check_smtp_addresses(void)
+{
+	register_thread_address("smtp_start_check_thread", smtp_start_check_thread);
+	register_thread_address("smtp_check_thread", smtp_check_thread);
+	register_thread_address("smtp_connect_thread", smtp_connect_thread);
+	register_thread_address("smtp_get_line_cb", smtp_get_line_cb);
+	register_thread_address("smtp_put_line_cb", smtp_put_line_cb);
+}
+#endif
diff --git a/tools/keepalived/keepalived/check/check_snmp.c b/tools/keepalived/keepalived/check/check_snmp.c
index 7728cb71d..3e83754f6 100644
--- a/tools/keepalived/keepalived/check/check_snmp.c
+++ b/tools/keepalived/keepalived/check/check_snmp.c
@@ -17,15 +17,225 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include "check_data.h"
+#include "config.h"
+
+#include <stdint.h>
+
 #include "check_snmp.h"
-#include "list.h"
-#include "ipvswrapper.h"
 #include "ipwrapper.h"
 #include "global_data.h"
+#include "snmp.h"
+#include "utils.h"
+#include "parser.h"
+
+/* CHECK SNMP defines */
+#define CHECK_OID KEEPALIVED_OID, 3
+
+enum check_snmp_vsgroup_magic {
+	CHECK_SNMP_VSGROUPNAME = 2
+};
+
+enum check_snmp_vsgroupmember_magic {
+	CHECK_SNMP_VSGROUPMEMBERTYPE = 2,
+	CHECK_SNMP_VSGROUPMEMBERFWMARK,
+	CHECK_SNMP_VSGROUPMEMBERADDRTYPE,
+	CHECK_SNMP_VSGROUPMEMBERADDRESS,
+	CHECK_SNMP_VSGROUPMEMBERADDR1,
+	CHECK_SNMP_VSGROUPMEMBERADDR2,
+	CHECK_SNMP_VSGROUPMEMBERPORT
+};
+
+enum check_snmp_virtualserver_magic {
+	CHECK_SNMP_VSTYPE = 2,
+	CHECK_SNMP_VSNAMEGROUP,
+	CHECK_SNMP_VSFWMARK,
+	CHECK_SNMP_VSADDRTYPE,
+	CHECK_SNMP_VSADDRESS,
+	CHECK_SNMP_VSPORT,
+	CHECK_SNMP_VSPROTOCOL,
+	CHECK_SNMP_VSLOADBALANCINGALGO,
+	CHECK_SNMP_VSLOADBALANCINGKIND,
+	CHECK_SNMP_VSSTATUS,
+	CHECK_SNMP_VSVIRTUALHOST,
+	CHECK_SNMP_VSPERSIST,
+	CHECK_SNMP_VSPERSISTTIMEOUT,
+	CHECK_SNMP_VSPERSISTGRANULARITY,
+	CHECK_SNMP_VSPERSISTGRANULARITY6,
+	CHECK_SNMP_VSDELAYLOOP,
+	CHECK_SNMP_VSHASUSPEND,
+	CHECK_SNMP_VSOPS,
+	CHECK_SNMP_VSALPHA,
+	CHECK_SNMP_VSOMEGA,
+	CHECK_SNMP_VSQUORUM,
+	CHECK_SNMP_VSQUORUMSTATUS,
+	CHECK_SNMP_VSQUORUMUP,
+	CHECK_SNMP_VSQUORUMDOWN,
+	CHECK_SNMP_VSHYSTERESIS,
+	CHECK_SNMP_VSREALTOTAL,
+	CHECK_SNMP_VSREALUP,
+	CHECK_SNMP_VSSTATSCONNS,
+	CHECK_SNMP_VSSTATSINPKTS,
+	CHECK_SNMP_VSSTATSOUTPKTS,
+	CHECK_SNMP_VSSTATSINBYTES,
+	CHECK_SNMP_VSSTATSOUTBYTES,
+	CHECK_SNMP_VSRATECPS,
+	CHECK_SNMP_VSRATEINPPS,
+	CHECK_SNMP_VSRATEOUTPPS,
+	CHECK_SNMP_VSRATEINBPS,
+	CHECK_SNMP_VSRATEOUTBPS,
+#ifdef _WITH_LVS_64BIT_STATS_
+	CHECK_SNMP_VSSTATSCONNS64,
+	CHECK_SNMP_VSSTATSINPKTS64,
+	CHECK_SNMP_VSSTATSOUTPKTS64,
+	CHECK_SNMP_VSRATECPSLOW,
+	CHECK_SNMP_VSRATECPSHIGH,
+	CHECK_SNMP_VSRATEINPPSLOW,
+	CHECK_SNMP_VSRATEINPPSHIGH,
+	CHECK_SNMP_VSRATEOUTPPSLOW,
+	CHECK_SNMP_VSRATEOUTPPSHIGH,
+	CHECK_SNMP_VSRATEINBPSLOW,
+	CHECK_SNMP_VSRATEINBPSHIGH,
+	CHECK_SNMP_VSRATEOUTBPSLOW,
+	CHECK_SNMP_VSRATEOUTBPSHIGH,
+#endif
+	CHECK_SNMP_VSHASHED,
+	CHECK_SNMP_VSSHFALLBACK,
+	CHECK_SNMP_VSSHPORT,
+	CHECK_SNMP_VSMHFALLBACK,
+	CHECK_SNMP_VSMHPORT,
+	CHECK_SNMP_VSSCHED3,
+	CHECK_SNMP_VSACTIONWHENDOWN,
+	CHECK_SNMP_VSRETRY,
+	CHECK_SNMP_VSDELAYBEFORERETRY,
+	CHECK_SNMP_VSWARMUP,
+	CHECK_SNMP_VSWEIGHT,
+	CHECK_SNMP_VSSMTPALERT,
+	CHECK_SNMP_VSDELAYLOOPUSEC,
+	CHECK_SNMP_VSDELAYBEFORERETRYUSEC,
+	CHECK_SNMP_VSWARMUPUSEC,
+	CHECK_SNMP_VSCONNTIMEOUTUSEC,
+	CHECK_SNMP_VSTUNNELTYPE,
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	CHECK_SNMP_VSTUNNELPORT,
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	CHECK_SNMP_VSTUNNELCSUM,
+#endif
+#endif
+};
+
+enum check_snmp_realserver_magic {
+	CHECK_SNMP_RSTYPE,
+	CHECK_SNMP_RSADDRTYPE,
+	CHECK_SNMP_RSADDRESS,
+	CHECK_SNMP_RSPORT,
+	CHECK_SNMP_RSSTATUS,
+	CHECK_SNMP_RSWEIGHT,
+	CHECK_SNMP_RSUPPERCONNECTIONLIMIT,
+	CHECK_SNMP_RSLOWERCONNECTIONLIMIT,
+	CHECK_SNMP_RSACTIONWHENDOWN,
+	CHECK_SNMP_RSNOTIFYUP,
+	CHECK_SNMP_RSNOTIFYDOWN,
+	CHECK_SNMP_RSFAILEDCHECKS,
+	CHECK_SNMP_RSSTATSCONNS,
+	CHECK_SNMP_RSSTATSACTIVECONNS,
+	CHECK_SNMP_RSSTATSINACTIVECONNS,
+	CHECK_SNMP_RSSTATSPERSISTENTCONNS,
+	CHECK_SNMP_RSSTATSINPKTS,
+	CHECK_SNMP_RSSTATSOUTPKTS,
+	CHECK_SNMP_RSSTATSINBYTES,
+	CHECK_SNMP_RSSTATSOUTBYTES,
+	CHECK_SNMP_RSRATECPS,
+	CHECK_SNMP_RSRATEINPPS,
+	CHECK_SNMP_RSRATEOUTPPS,
+	CHECK_SNMP_RSRATEINBPS,
+	CHECK_SNMP_RSRATEOUTBPS,
+#ifdef _WITH_LVS_64BIT_STATS_
+	CHECK_SNMP_RSSTATSCONNS64,
+	CHECK_SNMP_RSSTATSINPKTS64,
+	CHECK_SNMP_RSSTATSOUTPKTS64,
+	CHECK_SNMP_RSRATECPSLOW,
+	CHECK_SNMP_RSRATECPSHIGH,
+	CHECK_SNMP_RSRATEINPPSLOW,
+	CHECK_SNMP_RSRATEINPPSHIGH,
+	CHECK_SNMP_RSRATEOUTPPSLOW,
+	CHECK_SNMP_RSRATEOUTPPSHIGH,
+	CHECK_SNMP_RSRATEINBPSLOW,
+	CHECK_SNMP_RSRATEINBPSHIGH,
+	CHECK_SNMP_RSRATEOUTBPSLOW,
+	CHECK_SNMP_RSRATEOUTBPSHIGH,
+#endif
+	CHECK_SNMP_RSLOADBALANCINGKIND,
+	CHECK_SNMP_RSVIRTUALHOST,
+	CHECK_SNMP_RSALPHA,
+	CHECK_SNMP_RSRETRY,
+	CHECK_SNMP_RSDELAYBEFORERETRY,
+	CHECK_SNMP_RSWARMUP,
+	CHECK_SNMP_RSDELAYLOOP,
+	CHECK_SNMP_RSSMTPALERT,
+	CHECK_SNMP_RSDELAYBEFORERETRYUSEC,
+	CHECK_SNMP_RSWARMUPUSEC,
+	CHECK_SNMP_RSDELAYLOOPUSEC,
+	CHECK_SNMP_RSCONNTIMEOUTUSEC,
+	CHECK_SNMP_RSTUNNELTYPE,
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	CHECK_SNMP_RSTUNNELPORT,
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	CHECK_SNMP_RSTUNNELCSUM,
+#endif
+#endif
+};
+
+#define STATE_VSGM_FWMARK 1
+#define STATE_VSGM_ADDRESS_RANGE 2
+#define STATE_VSGM_END 3
+
+#define STATE_RS_SORRY 1
+#define STATE_RS_REGULAR_FIRST 2
+#define STATE_RS_REGULAR_NEXT 3
+#define STATE_RS_END 4
+
+#ifdef _WITH_VRRP_
+enum check_snmp_lvs_sync_daemon {
+	CHECK_SNMP_LVSSYNCDAEMONENABLED,
+	CHECK_SNMP_LVSSYNCDAEMONINTERFACE,
+	CHECK_SNMP_LVSSYNCDAEMONVRRPINSTANCE,
+	CHECK_SNMP_LVSSYNCDAEMONSYNCID,
+#ifdef _HAVE_IPVS_SYNCD_ATTRIBUTES_
+	CHECK_SNMP_LVSSYNCDAEMONMAXLEN,
+	CHECK_SNMP_LVSSYNCDAEMONPORT,
+	CHECK_SNMP_LVSSYNCDAEMONTTL,
+	CHECK_SNMP_LVSSYNCDAEMONMCASTGROUPADDRTYPE,
+	CHECK_SNMP_LVSSYNCDAEMONMCASTGROUPADDRVALUE,
+#endif
+};
+#endif
+
+enum check_snmp_lvs_timeouts {
+	CHECK_SNMP_LVSTIMEOUTTCP,
+	CHECK_SNMP_LVSTIMEOUTTCPFIN,
+	CHECK_SNMP_LVSTIMEOUTUDP,
+};
+
+/* Macro */
+#define RETURN_IP46ADDRESS(entity)					\
+do {									\
+  if (entity->addr.ss_family == AF_INET6) {				\
+    struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&entity->addr;	\
+    *var_len = 16;							\
+    return (u_char *)&addr6->sin6_addr;					\
+  } else {								\
+    struct sockaddr_in *addr4 = (struct sockaddr_in *)&entity->addr;	\
+    *var_len = 4;							\
+    return (u_char *)&addr4->sin_addr;					\
+  }									\
+} while(0)
+
+/* Static return value */
+static longret_t long_ret;
+static char buf[MAXBUF];
 
 static u_char*
 check_snmp_vsgroup(struct variable *vp, oid *name, size_t *length,
@@ -45,20 +255,20 @@ check_snmp_vsgroup(struct variable *vp, oid *name, size_t *length,
 		return (u_char *)g->gname;
 	default:
 		break;
-        }
-        return NULL;
+	}
+	return NULL;
 }
 
 static u_char*
 check_snmp_vsgroupmember(struct variable *vp, oid *name, size_t *length,
 			 int exact, size_t *var_len, WriteMethod **write_method)
 {
-	static unsigned long long_ret;
 	static uint32_t ip;
 	static struct in6_addr ip6;
-        oid *target, current[2], best[2];
-        int result, target_len;
-	int curgroup = 0, curentry;
+	oid *target, current[2], best[2];
+	int result;
+	size_t target_len;
+	unsigned curgroup = 0, curentry;
 	element e1, e2;
 	virtual_server_group_t *group;
 	virtual_server_group_entry_t *e, *be = NULL;
@@ -66,10 +276,10 @@ check_snmp_vsgroupmember(struct variable *vp, oid *name, size_t *length,
 	list l;
 
 
-        if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
-                memcpy(name, vp->name, sizeof(oid) * vp->namelen);
-                *length = vp->namelen;
-        }
+	if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
+		memcpy(name, vp->name, sizeof(oid) * vp->namelen);
+		*length = vp->namelen;
+	}
 
 	*write_method = 0;
 	*var_len = sizeof(long);
@@ -80,38 +290,29 @@ check_snmp_vsgroupmember(struct variable *vp, oid *name, size_t *length,
 	/* We search the best match: equal if exact, the lower OID in
 	   the set of the OID strictly superior to the target
 	   otherwise. */
-        best[0] = best[1] = MAX_SUBID; /* Our best match */
-        target = &name[vp->namelen];   /* Our target match */
-        target_len = *length - vp->namelen;
-	for (e1 = LIST_HEAD(check_data->vs_group); e1; ELEMENT_NEXT(e1)) {
-		group = ELEMENT_DATA(e1);
+	best[0] = best[1] = MAX_SUBID; /* Our best match */
+	target = &name[vp->namelen];   /* Our target match */
+	target_len = *length - vp->namelen;
+	LIST_FOREACH(check_data->vs_group, group, e1) {
 		curgroup++;
 		curentry = 0;
 		if (target_len && (curgroup < target[0]))
 			continue; /* Optimization: cannot be part of our set */
-		if (be)
-			break; /* Optimization: cannot be the lower anymore */
 		state = STATE_VSGM_FWMARK;
-		while (state != STATE_VSGM_END) {
+		while (state < STATE_VSGM_END) {
 			switch (state) {
 			case STATE_VSGM_FWMARK:
 				l = group->vfwmark;
 				break;
-			case STATE_VSGM_ADDRESS:
-				l = group->addr_ip;
-				break;
-			case STATE_VSGM_RANGE:
-				l = group->range;
+			case STATE_VSGM_ADDRESS_RANGE:
+				l = group->addr_range;
 				break;
 			default:
 				/* Dunno? */
 				return NULL;
 			}
 			state++;
-			if (LIST_ISEMPTY(l))
-				continue;
-			for (e2 = LIST_HEAD(l); e2; ELEMENT_NEXT(e2)) {
-				e = ELEMENT_DATA(e2);
+			LIST_FOREACH(l, e, e2) {
 				curentry++;
 				/* We build our current match */
 				current[0] = curgroup;
@@ -136,62 +337,59 @@ check_snmp_vsgroupmember(struct variable *vp, oid *name, size_t *length,
 			}
 		}
 	}
-	if (be == NULL)
-		/* No best match */
-		return NULL;
-	if (exact)
-		/* No exact match */
-		return NULL;
+
+	/* Nothing found */
+	return NULL;
+
  vsgmember_be_found:
 	/* Let's use our best match */
-        memcpy(target, best, sizeof(oid) * 2);
-        *length = vp->namelen + 2;
+	memcpy(target, best, sizeof(oid) * 2);
+	*length = (unsigned)vp->namelen + 2;
  vsgmember_found:
 	switch (vp->magic) {
 	case CHECK_SNMP_VSGROUPMEMBERTYPE:
-		if (be->vfwmark)
-			long_ret = 1;
+		if (be->is_fwmark)
+			long_ret.u = 1;
 		else if (be->range)
-			long_ret = 3;
+			long_ret.u = 3;
 		else
-			long_ret = 2;
+			long_ret.u = 2;
 		return (u_char *)&long_ret;
 	case CHECK_SNMP_VSGROUPMEMBERFWMARK:
-		if (!be->vfwmark) break;
-		long_ret = be->vfwmark;
+		if (!be->is_fwmark) break;
+		long_ret.u = be->vfwmark;
 		return (u_char *)&long_ret;
 	case CHECK_SNMP_VSGROUPMEMBERADDRTYPE:
-		if (be->vfwmark) break;
-		long_ret = (be->addr.ss_family == AF_INET6) ? 2:1;
+		if (be->is_fwmark) break;
+		long_ret.u = (be->addr.ss_family == AF_INET6) ? 2:1;
 		return (u_char *)&long_ret;
 	case CHECK_SNMP_VSGROUPMEMBERADDRESS:
-		if (be->vfwmark || be->range) break;
+		if (be->is_fwmark || be->range) break;
 		RETURN_IP46ADDRESS(be);
 		break;
 	case CHECK_SNMP_VSGROUPMEMBERADDR1:
-		if (!be->range) break;
+		if (be->is_fwmark || !be->range) break;
 		RETURN_IP46ADDRESS(be);
 		break;
 	case CHECK_SNMP_VSGROUPMEMBERADDR2:
-		if (!be->range) break;
+		if (!be->range || be->is_fwmark) break;
 		if (be->addr.ss_family == AF_INET6) {
 			struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&be->addr;
 			*var_len = 16;
 			memcpy(&ip6, &addr6->sin6_addr, sizeof(ip6));
-			ip6.s6_addr32[3] &= htonl(0xFFFFFF00);
-			ip6.s6_addr32[3] += htonl(be->range);
+			ip6.s6_addr16[7] = htons(ntohs(ip6.s6_addr16[7]) + be->range);
 			return (u_char *)&ip6;
 		} else {
 			struct sockaddr_in *addr4 = (struct sockaddr_in *)&be->addr;
 			*var_len = 4;
-			ip = (*(u_int32_t *)&addr4->sin_addr) & htonl(0xFFFFFF00);
+			ip = *(uint32_t *)&addr4->sin_addr;
 			ip += htonl(be->range);
 			return (u_char *)&ip;
 		}
 		break;
 	case CHECK_SNMP_VSGROUPMEMBERPORT:
-		if (be->vfwmark) break;
-		long_ret = htons(inet_sockaddrport(&be->addr));
+		if (be->is_fwmark) break;
+		long_ret.u = htons(inet_sockaddrport(&be->addr));
 		return (u_char *)&long_ret;
 	default:
 		return NULL;
@@ -201,19 +399,17 @@ check_snmp_vsgroupmember(struct variable *vp, oid *name, size_t *length,
 	if (!exact && (name[*length-1] < MAX_SUBID))
 		return check_snmp_vsgroupmember(vp, name, length,
 						exact, var_len, write_method);
-        return NULL;
+	return NULL;
 }
 
 static u_char*
 check_snmp_virtualserver(struct variable *vp, oid *name, size_t *length,
 			 int exact, size_t *var_len, WriteMethod **write_method)
 {
-	static unsigned long long_ret;
-#ifdef _KRNL_2_6_
-	static U64 counter64_ret;
-#endif
+	static struct counter64 counter64_ret;
 	virtual_server_t *v;
 	element e;
+	snmp_ret_t ret;
 
 	if ((v = (virtual_server_t *)
 	     snmp_header_list_table(vp, name, length, exact,
@@ -223,219 +419,361 @@ check_snmp_virtualserver(struct variable *vp, oid *name, size_t *length,
 
 	switch (vp->magic) {
 	case CHECK_SNMP_VSTYPE:
-		if (v->vsgname)
-			long_ret = 3;
+		if (v->vsg)
+			long_ret.u = 3;
 		else if (v->vfwmark)
-			long_ret = 1;
+			long_ret.u = 1;
 		else
-			long_ret = 2;
+			long_ret.u = 2;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSNAMEGROUP:
-		if (!v->vsgname) break;
-		*var_len = strlen(v->vsgname);
-		return (u_char*)v->vsgname;
+		if (!v->vsg) break;
+		ret.cp = v->vsgname;
+		*var_len = strlen(ret.cp);
+		return ret.p;
 	case CHECK_SNMP_VSFWMARK:
 		if (!v->vfwmark) break;
-		long_ret = v->vfwmark;
+		long_ret.u = v->vfwmark;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSADDRTYPE:
-		if (v->vfwmark || v->vsgname) break;
-		long_ret = (v->addr.ss_family == AF_INET6) ? 2:1;
+		long_ret.u = (v->af == AF_INET6) ? 2:1;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSADDRESS:
-		if (v->vfwmark || v->vsgname) break;
+		if (v->vfwmark || v->vsg) break;
 		RETURN_IP46ADDRESS(v);
 		break;
 	case CHECK_SNMP_VSPORT:
-		if (v->vfwmark || v->vsgname) break;
-		long_ret = htons(inet_sockaddrport(&v->addr));
+		if (v->vfwmark || v->vsg) break;
+		long_ret.u = htons(inet_sockaddrport(&v->addr));
 		return (u_char *)&long_ret;
 	case CHECK_SNMP_VSPROTOCOL:
-		long_ret = (v->service_type == IPPROTO_TCP)?1:2;
+		if (v->vfwmark) break;
+		long_ret.u = (v->service_type == IPPROTO_TCP) ? 1 :
+			     (v->service_type == IPPROTO_UDP) ? 2 :
+			     (v->service_type == IPPROTO_SCTP) ? 3 : 4;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSLOADBALANCINGALGO:
-		if (strncmp(v->sched, "rr", SCHED_MAX_LENGTH) == 0)
-			long_ret = 1;
-		else if (strncmp(v->sched, "wrr", SCHED_MAX_LENGTH) == 0)
-			long_ret = 2;
-		else if (strncmp(v->sched, "lc", SCHED_MAX_LENGTH) == 0)
-			long_ret = 3;
-		else if (strncmp(v->sched, "wlc", SCHED_MAX_LENGTH) == 0)
-			long_ret = 4;
-		else if (strncmp(v->sched, "lblc", SCHED_MAX_LENGTH) == 0)
-			long_ret = 5;
-		else if (strncmp(v->sched, "lblcr", SCHED_MAX_LENGTH) == 0)
-			long_ret = 6;
-		else if (strncmp(v->sched, "dh", SCHED_MAX_LENGTH) == 0)
-			long_ret = 7;
-		else if (strncmp(v->sched, "sh", SCHED_MAX_LENGTH) == 0)
-			long_ret = 8;
-		else if (strncmp(v->sched, "sed", SCHED_MAX_LENGTH) == 0)
-			long_ret = 9;
-		else if (strncmp(v->sched, "nq", SCHED_MAX_LENGTH) == 0)
-			long_ret = 10;
-		else long_ret = 99;
+		if (!strcmp(v->sched, "rr"))
+			long_ret.u = 1;
+		else if (!strcmp(v->sched, "wrr"))
+			long_ret.u = 2;
+		else if (!strcmp(v->sched, "lc"))
+			long_ret.u = 3;
+		else if (!strcmp(v->sched, "wlc"))
+			long_ret.u = 4;
+		else if (!strcmp(v->sched, "lblc"))
+			long_ret.u = 5;
+		else if (!strcmp(v->sched, "lblcr"))
+			long_ret.u = 6;
+		else if (!strcmp(v->sched, "dh"))
+			long_ret.u = 7;
+		else if (!strcmp(v->sched, "sh"))
+			long_ret.u = 8;
+		else if (!strcmp(v->sched, "sed"))
+			long_ret.u = 9;
+		else if (!strcmp(v->sched, "nq"))
+			long_ret.u = 10;
+		else if (!strcmp(v->sched, "fo"))
+			long_ret.u = 11;
+		else if (!strcmp(v->sched, "ovf"))
+			long_ret.u = 12;
+		else if (!strcmp(v->sched, "mh"))
+			long_ret.u = 13;
+		else
+			long_ret.u = 99;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSLOADBALANCINGKIND:
-		long_ret = 0;
-		switch (v->loadbalancing_kind) {
-#ifdef _WITH_LVS_
-#ifdef _KRNL_2_2_
-		case 0:
-			long_ret = 1;
-			break;
-		case IP_MASQ_F_VS_DROUTE:
-			long_ret = 2;
-			break;
-		case IP_MASQ_F_VS_TUNNEL:
-			long_ret = 3;
-			break;
-#else
+		long_ret.u = 0;
+		switch (v->forwarding_method) {
 		case IP_VS_CONN_F_MASQ:
-			long_ret = 1;
+			long_ret.u = 1;
 			break;
 		case IP_VS_CONN_F_DROUTE:
-			long_ret = 2;
+			long_ret.u = 2;
 			break;
 		case IP_VS_CONN_F_TUNNEL:
-			long_ret = 3;
+			long_ret.u = 3;
 			break;
-#endif
-#endif
 		}
-		if (!long_ret) break;
+		if (!long_ret.u) break;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSSTATUS:
-		long_ret = v->alive?1:2;
+		long_ret.u = v->alive?1:2;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSVIRTUALHOST:
 		if (!v->virtualhost) break;
 		*var_len = strlen(v->virtualhost);
-		return (u_char*)v->virtualhost;
+		ret.cp = v->virtualhost;
+		return ret.p;
 	case CHECK_SNMP_VSPERSIST:
-		long_ret = (atol(v->timeout_persistence) > 0)?1:2;
+		long_ret.u = (v->persistence_timeout)?1:2;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSPERSISTTIMEOUT:
-		if (atol(v->timeout_persistence) <= 0) break;
-		long_ret = atol(v->timeout_persistence);
+		if (!v->persistence_timeout) break;
+		long_ret.u = v->persistence_timeout;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSPERSISTGRANULARITY:
-		if (atol(v->timeout_persistence) <= 0) break;
-		if (!v->granularity_persistence) break;
-		*var_len = 4;
-		return (u_char*)&v->granularity_persistence;
+		if (!v->persistence_granularity || v->addr.ss_family == AF_INET6) break;
+		*var_len = sizeof(v->persistence_granularity);
+		return (u_char*)&v->persistence_granularity;
+	case CHECK_SNMP_VSPERSISTGRANULARITY6:
+		if (!v->persistence_granularity || v->addr.ss_family == AF_INET) break;
+		*var_len = sizeof(v->persistence_granularity);
+		return (u_char*)&v->persistence_granularity;
 	case CHECK_SNMP_VSDELAYLOOP:
-		if (v->delay_loop >= TIMER_MAX_SEC)
-			long_ret = v->delay_loop/TIMER_HZ;
-		else
-			long_ret = v->delay_loop;
+		long_ret.u = v->delay_loop/TIMER_HZ;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSHASUSPEND:
-		long_ret = v->ha_suspend?1:2;
+		long_ret.u = v->ha_suspend?1:2;
 		return (u_char*)&long_ret;
+#ifdef IP_VS_SVC_F_ONEPACKET
 	case CHECK_SNMP_VSOPS:
-		long_ret = v->ops?1:2;
+		long_ret.u = v->flags & IP_VS_SVC_F_ONEPACKET?1:2;
 		return (u_char*)&long_ret;
+#endif
 	case CHECK_SNMP_VSALPHA:
-		long_ret = v->alpha?1:2;
+		long_ret.u = v->alpha?1:2;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSOMEGA:
-		long_ret = v->omega?1:2;
+		long_ret.u = v->omega?1:2;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSQUORUM:
-		long_ret = v->quorum;
+		long_ret.u = v->quorum;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSQUORUMSTATUS:
-		long_ret = v->quorum_state?1:2;
+		long_ret.u = v->quorum_state_up ? 1 : 2;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSQUORUMUP:
-		if (!v->quorum_up) break;
-		*var_len = strlen(v->quorum_up);
-		return (u_char*)v->quorum_up;
+		if (!v->notify_quorum_up) break;
+		cmd_str_r(v->notify_quorum_up, buf, sizeof(buf));
+		*var_len = strlen(buf);
+		return (u_char*)buf;
 	case CHECK_SNMP_VSQUORUMDOWN:
-		if (!v->quorum_down) break;
-		*var_len = strlen(v->quorum_down);
-		return (u_char*)v->quorum_down;
+		if (!v->notify_quorum_down) break;
+		cmd_str_r(v->notify_quorum_down, buf, sizeof(buf));
+		*var_len = strlen(buf);
+		return (u_char*)buf;
 	case CHECK_SNMP_VSHYSTERESIS:
-		long_ret = v->hysteresis;
+		long_ret.u = v->hysteresis;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSREALTOTAL:
 		if (LIST_ISEMPTY(v->rs))
-			long_ret = 0;
+			long_ret.u = 0;
 		else
-			long_ret = LIST_SIZE(v->rs);
+			long_ret.u = LIST_SIZE(v->rs);
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSREALUP:
-		long_ret = 0;
+		long_ret.u = 0;
 		if (!LIST_ISEMPTY(v->rs))
 			for (e = LIST_HEAD(v->rs); e; ELEMENT_NEXT(e))
 				if (((real_server_t *)ELEMENT_DATA(e))->alive)
-					long_ret++;
+					long_ret.u++;
 		return (u_char*)&long_ret;
-#if defined(_KRNL_2_6_) && defined(_WITH_LVS_)
 	case CHECK_SNMP_VSSTATSCONNS:
 		ipvs_update_stats(v);
-		long_ret = v->stats.conns;
+		long_ret.u = v->stats.conns;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSSTATSINPKTS:
 		ipvs_update_stats(v);
-		long_ret = v->stats.inpkts;
+		long_ret.u = v->stats.inpkts;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSSTATSOUTPKTS:
 		ipvs_update_stats(v);
-		long_ret = v->stats.outpkts;
+		long_ret.u = v->stats.outpkts;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSSTATSINBYTES:
 		ipvs_update_stats(v);
 		counter64_ret.low = v->stats.inbytes & 0xffffffff;
 		counter64_ret.high = v->stats.inbytes >> 32;
-		*var_len = sizeof(U64);
+		*var_len = sizeof(struct counter64);
 		return (u_char*)&counter64_ret;
 	case CHECK_SNMP_VSSTATSOUTBYTES:
 		ipvs_update_stats(v);
 		counter64_ret.low = v->stats.outbytes & 0xffffffff;
 		counter64_ret.high = v->stats.outbytes >> 32;
-		*var_len = sizeof(U64);
+		*var_len = sizeof(struct counter64);
 		return (u_char*)&counter64_ret;
 	case CHECK_SNMP_VSRATECPS:
 		ipvs_update_stats(v);
-		long_ret = v->stats.cps;
+		long_ret.u = v->stats.cps;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSRATEINPPS:
 		ipvs_update_stats(v);
-		long_ret = v->stats.inpps;
+		long_ret.u = v->stats.inpps;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSRATEOUTPPS:
 		ipvs_update_stats(v);
-		long_ret = v->stats.outpps;
+		long_ret.u = v->stats.outpps;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSRATEINBPS:
 		ipvs_update_stats(v);
-		long_ret = v->stats.inbps;
+		long_ret.u = v->stats.inbps;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_VSRATEOUTBPS:
 		ipvs_update_stats(v);
-		long_ret = v->stats.outbps;
+		long_ret.u = v->stats.outbps;
+		return (u_char*)&long_ret;
+#ifdef _WITH_LVS_64BIT_STATS_
+	case CHECK_SNMP_VSSTATSCONNS64:
+		ipvs_update_stats(v);
+		counter64_ret.low = v->stats.conns & 0xffffffff;
+		counter64_ret.high = v->stats.conns >> 32;
+		*var_len = sizeof(struct counter64);
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_VSSTATSINPKTS64:
+		ipvs_update_stats(v);
+		counter64_ret.low = v->stats.inpkts & 0xffffffff;
+		counter64_ret.high = v->stats.inpkts >> 32;
+		*var_len = sizeof(struct counter64);
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_VSSTATSOUTPKTS64:
+		ipvs_update_stats(v);
+		counter64_ret.low = v->stats.outpkts & 0xffffffff;
+		counter64_ret.high = v->stats.outpkts >> 32;
+		*var_len = sizeof(struct counter64);
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_VSRATECPSLOW:
+		ipvs_update_stats(v);
+		long_ret.u = v->stats.cps & 0xffffffff;
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_VSRATECPSHIGH:
+		ipvs_update_stats(v);
+		long_ret.u = v->stats.cps >> 32;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSRATEINPPSLOW:
+		ipvs_update_stats(v);
+		long_ret.u = v->stats.inpps & 0xffffffff;
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_VSRATEINPPSHIGH:
+		ipvs_update_stats(v);
+		long_ret.u = v->stats.inpps >> 32;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSRATEOUTPPSLOW:
+		ipvs_update_stats(v);
+		long_ret.u = v->stats.outpps & 0xffffffff;
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_VSRATEOUTPPSHIGH:
+		ipvs_update_stats(v);
+		long_ret.u = v->stats.outpps >> 32;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSRATEINBPSLOW:
+		ipvs_update_stats(v);
+		long_ret.u = v->stats.inbps & 0xffffffff;
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_VSRATEINBPSHIGH:
+		ipvs_update_stats(v);
+		long_ret.u = v->stats.inbps >> 32;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSRATEOUTBPSLOW:
+		ipvs_update_stats(v);
+		long_ret.u = v->stats.outbps & 0xffffffff;
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_VSRATEOUTBPSHIGH:
+		ipvs_update_stats(v);
+		long_ret.u = v->stats.outbps >> 32;
+		return (u_char*)&long_ret;
+#endif
+#ifdef IP_VS_SVC_F_SCHED1
+	case CHECK_SNMP_VSHASHED:
+		long_ret.u = v->flags & IP_VS_SVC_F_HASHED ? 1 : 2;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSSHFALLBACK:
+		long_ret.u = v->flags & IP_VS_SVC_F_SCHED_SH_FALLBACK ? 1 : 2;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSSHPORT:
+		long_ret.u = v->flags & IP_VS_SVC_F_SCHED_SH_PORT ? 1 : 2;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSMHFALLBACK:
+		long_ret.u = v->flags & IP_VS_SVC_F_SCHED_MH_FALLBACK ? 1 : 2;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSMHPORT:
+		long_ret.u = v->flags & IP_VS_SVC_F_SCHED_MH_PORT ? 1 : 2;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSSCHED3:
+		long_ret.u = v->flags & IP_VS_SVC_F_SCHED3 ? 1 : 2;
 		return (u_char*)&long_ret;
+#endif
+	case CHECK_SNMP_VSACTIONWHENDOWN:
+		long_ret.u = v->inhibit?2:1;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSRETRY:
+		long_ret.u = v->retry == UINT_MAX ? 0 : v->retry;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSDELAYBEFORERETRY:
+		long_ret.u = v->delay_before_retry == ULONG_MAX ? 0 : v->delay_before_retry / TIMER_HZ;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSWARMUP:
+		long_ret.u = v->warmup == ULONG_MAX ? 0 : v->warmup / TIMER_HZ;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSWEIGHT:
+		long_ret.s = v->weight;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSSMTPALERT:
+		long_ret.u = v->smtp_alert?1:2;
+		return (u_char *)&long_ret;
+	case CHECK_SNMP_VSDELAYLOOPUSEC:
+		long_ret.u = v->delay_loop;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSDELAYBEFORERETRYUSEC:
+		long_ret.u = v->delay_before_retry == ULONG_MAX ? 0 : v->delay_before_retry;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSWARMUPUSEC:
+		long_ret.u = v->warmup == ULONG_MAX ? 0 : v->warmup;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSCONNTIMEOUTUSEC:
+		long_ret.u = v->connection_to;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_VSTUNNELTYPE:
+		if (v->forwarding_method != IP_VS_CONN_F_TUNNEL)
+			break;
+#ifndef _HAVE_IPVS_TUN_TYPE_
+		long_ret.u = 1;		/* IPIP */
+#else
+		long_ret.u = v->tun_type == IP_VS_CONN_F_TUNNEL_TYPE_IPIP ? 1
+			   : v->tun_type == IP_VS_CONN_F_TUNNEL_TYPE_GUE ? 2
+#ifdef _HAVE_IPVS_TUN_GRE_
+			   : v->tun_type == IP_VS_CONN_F_TUNNEL_TYPE_GRE ? 3
+#endif
+			   : 0;
+#endif
+		return (u_char*)&long_ret;
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	case CHECK_SNMP_VSTUNNELPORT:
+		if (v->forwarding_method != IP_VS_CONN_F_TUNNEL ||
+		    v->tun_type != IP_VS_CONN_F_TUNNEL_TYPE_GUE)
+			break;
+		long_ret.u = ntohs(v->tun_port);
+		return (u_char*)&long_ret;
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	case CHECK_SNMP_VSTUNNELCSUM:
+		if (v->forwarding_method != IP_VS_CONN_F_TUNNEL ||
+		    v->tun_type == IP_VS_CONN_F_TUNNEL_TYPE_IPIP)
+			break;
+		long_ret.u = v->tun_flags == IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM ? 1
+			   : v->tun_flags == IP_VS_TUNNEL_ENCAP_FLAG_CSUM ? 2
+			   : v->tun_flags == IP_VS_TUNNEL_ENCAP_FLAG_REMCSUM ? 3
+			   : 0;
+		return (u_char*)&long_ret;
+#endif
 #endif
 	default:
 		return NULL;
-        }
+	}
 	if (!exact && (name[*length-1] < MAX_SUBID))
 		return check_snmp_virtualserver(vp, name, length,
 						exact, var_len, write_method);
-        return NULL;
+	return NULL;
 }
 
 static int
 check_snmp_realserver_weight(int action,
 			     u_char *var_val, u_char var_val_type, size_t var_val_len,
-			     u_char *statP, oid *name, size_t name_len)
+			     __attribute__((unused)) u_char *statP, oid *name, size_t name_len)
 {
 	element e1, e2;
 	virtual_server_t *vs = NULL;
 	real_server_t *rs = NULL;
-	int ivs, irs;
+	oid ivs, irs;
 	switch (action) {
 	case RESERVE1:
 		/* Check that the proposed value is acceptable */
@@ -443,8 +781,6 @@ check_snmp_realserver_weight(int action,
 			return SNMP_ERR_WRONGTYPE;
 		if (var_val_len > sizeof(long))
 			return SNMP_ERR_WRONGLENGTH;
-		if ((long)(*var_val) < 0)
-			return SNMP_ERR_WRONGVALUE;
 		break;
 	case RESERVE2:		/* Check that we can find the instance. We should. */
 	case COMMIT:
@@ -456,7 +792,6 @@ check_snmp_realserver_weight(int action,
 		for (e1 = LIST_HEAD(check_data->vs); e1; ELEMENT_NEXT(e1)) {
 			vs = ELEMENT_DATA(e1);
 			if (--ivs == 0) {
-				if (LIST_ISEMPTY(vs->rs)) return SNMP_ERR_NOSUCHNAME;
 				if (vs->s_svr) {
 					/* We don't want to set weight
 					   of sorry server */
@@ -476,7 +811,7 @@ check_snmp_realserver_weight(int action,
 		if (action == RESERVE2)
 			break;
 		/* Commit: change values. There is no way to fail. */
-		update_svr_wgt((long)(*var_val), vs, rs);
+		update_svr_wgt((unsigned)(*var_val), vs, rs, true);
 		break;
 	}
 	return SNMP_ERR_NOERROR;
@@ -486,23 +821,22 @@ static u_char*
 check_snmp_realserver(struct variable *vp, oid *name, size_t *length,
 		      int exact, size_t *var_len, WriteMethod **write_method)
 {
-	static unsigned long long_ret;
-#ifdef _KRNL_2_6_
-	static U64 counter64_ret;
-#endif
-        oid *target, current[2], best[2];
-        int result, target_len;
-	int curvirtual = 0, curreal;
+	static struct counter64 counter64_ret;
+	oid *target, current[2], best[2];
+	int result;
+	size_t target_len;
+	unsigned curvirtual = 0, curreal;
 	real_server_t *e = NULL, *be = NULL;
 	element e1, e2 = NULL;
 	virtual_server_t *vs, *bvs = NULL;
 	int state;
 	int type, btype;
+	snmp_ret_t ret;
 
-        if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
-                memcpy(name, vp->name, sizeof(oid) * vp->namelen);
-                *length = vp->namelen;
-        }
+	if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
+		memcpy(name, vp->name, sizeof(oid) * vp->namelen);
+		*length = vp->namelen;
+	}
 
 	*write_method = 0;
 	*var_len = sizeof(long);
@@ -513,9 +847,9 @@ check_snmp_realserver(struct variable *vp, oid *name, size_t *length,
 	/* We search the best match: equal if exact, the lower OID in
 	   the set of the OID strictly superior to the target
 	   otherwise. */
-        best[0] = best[1] = MAX_SUBID; /* Our best match */
-        target = &name[vp->namelen];   /* Our target match */
-        target_len = *length - vp->namelen;
+	best[0] = best[1] = MAX_SUBID; /* Our best match */
+	target = &name[vp->namelen];   /* Our target match */
+	target_len = *length - vp->namelen;
 	for (e1 = LIST_HEAD(check_data->vs); e1; ELEMENT_NEXT(e1)) {
 		vs = ELEMENT_DATA(e1);
 		curvirtual++;
@@ -532,12 +866,12 @@ check_snmp_realserver(struct variable *vp, oid *name, size_t *length,
 				type = state++;
 				break;
 			case STATE_RS_REGULAR_FIRST:
-				if (LIST_ISEMPTY(vs->rs)) {
+				e2 = LIST_HEAD(vs->rs);
+				if (!e2) {
 					e = NULL;
 					state = STATE_RS_END;
 					break;
 				}
-				e2 = LIST_HEAD(vs->rs);
 				e = ELEMENT_DATA(e2);
 				type = state++;
 				break;
@@ -565,9 +899,10 @@ check_snmp_realserver(struct variable *vp, oid *name, size_t *length,
 			if ((result = snmp_oid_compare(current, 2, target,
 						       target_len)) < 0)
 				continue;
-			if ((result == 0) && !exact)
-				continue;
 			if (result == 0) {
+				if (!exact)
+					continue;
+
 				/* Got an exact match and asked for it */
 				be = e;
 				bvs = vs;
@@ -590,123 +925,263 @@ check_snmp_realserver(struct variable *vp, oid *name, size_t *length,
 	if (exact)
 		/* No exact match */
 		return NULL;
+
  real_be_found:
 	/* Let's use our best match */
-        memcpy(target, best, sizeof(oid) * 2);
-        *length = vp->namelen + 2;
+	memcpy(target, best, sizeof(oid) * 2);
+	*length = (unsigned)vp->namelen + 2;
+
  real_found:
 	switch (vp->magic) {
 	case CHECK_SNMP_RSTYPE:
-		long_ret = (btype == STATE_RS_SORRY)?2:1;
+		long_ret.u = (btype == STATE_RS_SORRY)?2:1;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSADDRTYPE:
-		long_ret = (be->addr.ss_family == AF_INET6) ? 2:1;
+		long_ret.u = (be->addr.ss_family == AF_INET6) ? 2:1;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSADDRESS:
 		RETURN_IP46ADDRESS(be);
 		break;
 	case CHECK_SNMP_RSPORT:
-		long_ret = htons(inet_sockaddrport(&be->addr));
+		long_ret.u = htons(inet_sockaddrport(&be->addr));
 		return (u_char *)&long_ret;
+	case CHECK_SNMP_RSLOADBALANCINGKIND:
+		long_ret.u = 0;
+		switch (be->forwarding_method) {
+		case IP_VS_CONN_F_MASQ:
+			long_ret.u = 1;
+			break;
+		case IP_VS_CONN_F_DROUTE:
+			long_ret.u = 2;
+			break;
+		case IP_VS_CONN_F_TUNNEL:
+			long_ret.u = 3;
+			break;
+		}
+		if (!long_ret.u) break;
+		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSSTATUS:
 		if (btype == STATE_RS_SORRY) break;
-		long_ret = be->alive?1:2;
+		long_ret.u = be->alive?1:2;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSWEIGHT:
 		if (btype == STATE_RS_SORRY) break;
-		long_ret = be->weight;
+		long_ret.s = be->weight;
 		*write_method = check_snmp_realserver_weight;
 		return (u_char*)&long_ret;
-#ifdef _KRNL_2_6_
 	case CHECK_SNMP_RSUPPERCONNECTIONLIMIT:
 		if (btype == STATE_RS_SORRY) break;
 		if (!be->u_threshold) break;
-		long_ret = be->u_threshold;
+		long_ret.u = be->u_threshold;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSLOWERCONNECTIONLIMIT:
 		if (btype == STATE_RS_SORRY) break;
 		if (!be->l_threshold) break;
-		long_ret = be->l_threshold;
+		long_ret.u = be->l_threshold;
 		return (u_char*)&long_ret;
-#endif
 	case CHECK_SNMP_RSACTIONWHENDOWN:
 		if (btype == STATE_RS_SORRY) break;
-		long_ret = be->inhibit?2:1;
+		long_ret.u = be->inhibit?2:1;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSNOTIFYUP:
 		if (btype == STATE_RS_SORRY) break;
 		if (!be->notify_up) break;
-		*var_len = strlen(be->notify_up);
-		return (u_char*)be->notify_up;
+		cmd_str_r(be->notify_up, buf, sizeof(buf));
+		*var_len = strlen(buf);
+		return (u_char*)buf;
 	case CHECK_SNMP_RSNOTIFYDOWN:
 		if (btype == STATE_RS_SORRY) break;
 		if (!be->notify_down) break;
-		*var_len = strlen(be->notify_down);
-		return (u_char*)be->notify_down;
+		cmd_str_r(be->notify_down, buf, sizeof(buf));
+		*var_len = strlen(buf);
+		return (u_char*)buf;
+	case CHECK_SNMP_RSVIRTUALHOST:
+		if (!be->virtualhost) break;
+		*var_len = strlen(be->virtualhost);
+		ret.cp = be->virtualhost;
+		return ret.p;
 	case CHECK_SNMP_RSFAILEDCHECKS:
 		if (btype == STATE_RS_SORRY) break;
-		if (LIST_ISEMPTY(be->failed_checkers))
-			long_ret = 0;
-		else
-			long_ret = LIST_SIZE(be->failed_checkers);
+		long_ret.u = be->num_failed_checkers;
 		return (u_char*)&long_ret;
-#if defined(_KRNL_2_6_) && defined(_WITH_LVS_)
 	case CHECK_SNMP_RSSTATSCONNS:
 		ipvs_update_stats(bvs);
-		long_ret = be->stats.conns;
+		long_ret.u = be->stats.conns;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSSTATSACTIVECONNS:
 		ipvs_update_stats(bvs);
-		long_ret = be->activeconns;
+		long_ret.u = be->activeconns;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSSTATSINACTIVECONNS:
 		ipvs_update_stats(bvs);
-		long_ret = be->inactconns;
+		long_ret.u = be->inactconns;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSSTATSPERSISTENTCONNS:
 		ipvs_update_stats(bvs);
-		long_ret = be->persistconns;
+		long_ret.u = be->persistconns;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSSTATSINPKTS:
 		ipvs_update_stats(bvs);
-		long_ret = be->stats.inpkts;
+		long_ret.u = be->stats.inpkts;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSSTATSOUTPKTS:
 		ipvs_update_stats(bvs);
-		long_ret = be->stats.outpkts;
+		long_ret.u = be->stats.outpkts;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSSTATSINBYTES:
 		ipvs_update_stats(bvs);
 		counter64_ret.low = be->stats.inbytes & 0xffffffff;
 		counter64_ret.high = be->stats.inbytes >> 32;
-		*var_len = sizeof(U64);
+		*var_len = sizeof(struct counter64);
 		return (u_char*)&counter64_ret;
 	case CHECK_SNMP_RSSTATSOUTBYTES:
 		ipvs_update_stats(bvs);
 		counter64_ret.low = be->stats.outbytes & 0xffffffff;
 		counter64_ret.high = be->stats.outbytes >> 32;
-		*var_len = sizeof(U64);
+		*var_len = sizeof(struct counter64);
 		return (u_char*)&counter64_ret;
 	case CHECK_SNMP_RSRATECPS:
 		ipvs_update_stats(bvs);
-		long_ret = be->stats.cps;
+		long_ret.u = be->stats.cps;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSRATEINPPS:
 		ipvs_update_stats(bvs);
-		long_ret = be->stats.inpps;
+		long_ret.u = be->stats.inpps;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSRATEOUTPPS:
 		ipvs_update_stats(bvs);
-		long_ret = be->stats.outpps;
+		long_ret.u = be->stats.outpps;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSRATEINBPS:
 		ipvs_update_stats(bvs);
-		long_ret = be->stats.inbps;
+		long_ret.u = be->stats.inbps;
 		return (u_char*)&long_ret;
 	case CHECK_SNMP_RSRATEOUTBPS:
 		ipvs_update_stats(bvs);
-		long_ret = be->stats.outbps;
+		long_ret.u = be->stats.outbps;
+		return (u_char*)&long_ret;
+#ifdef _WITH_LVS_64BIT_STATS_
+	case CHECK_SNMP_RSSTATSCONNS64:
+		ipvs_update_stats(bvs);
+		counter64_ret.low = be->stats.conns & 0xffffffff;
+		counter64_ret.high = be->stats.conns >> 32;
+		*var_len = sizeof(struct counter64);
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_RSSTATSINPKTS64:
+		ipvs_update_stats(bvs);
+		counter64_ret.low = be->stats.inpkts & 0xffffffff;
+		counter64_ret.high = be->stats.inpkts >> 32;
+		*var_len = sizeof(struct counter64);
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_RSSTATSOUTPKTS64:
+		ipvs_update_stats(bvs);
+		counter64_ret.low = be->stats.outpkts & 0xffffffff;
+		counter64_ret.high = be->stats.outpkts >> 32;
+		*var_len = sizeof(struct counter64);
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_RSRATECPSLOW:
+		ipvs_update_stats(bvs);
+		long_ret.u = be->stats.cps & 0xffffffff;
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_RSRATECPSHIGH:
+		ipvs_update_stats(bvs);
+		long_ret.u = be->stats.cps >> 32;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_RSRATEINPPSLOW:
+		ipvs_update_stats(bvs);
+		long_ret.u = be->stats.inpps & 0xffffffff;
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_RSRATEINPPSHIGH:
+		ipvs_update_stats(bvs);
+		long_ret.u = be->stats.inpps >> 32;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_RSRATEOUTPPSLOW:
+		ipvs_update_stats(bvs);
+		long_ret.u = be->stats.outpps & 0xffffffff;
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_RSRATEOUTPPSHIGH:
+		ipvs_update_stats(bvs);
+		long_ret.u = be->stats.outpps >> 32;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_RSRATEINBPSLOW:
+		ipvs_update_stats(bvs);
+		long_ret.u = be->stats.inbps & 0xffffffff;
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_RSRATEINBPSHIGH:
+		ipvs_update_stats(bvs);
+		long_ret.u = be->stats.inbps >> 32;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_RSRATEOUTBPSLOW:
+		ipvs_update_stats(bvs);
+		long_ret.u = be->stats.outbps & 0xffffffff;
+		return (u_char*)&counter64_ret;
+	case CHECK_SNMP_RSRATEOUTBPSHIGH:
+		ipvs_update_stats(bvs);
+		long_ret.u = be->stats.outbps >> 32;
 		return (u_char*)&long_ret;
+#endif
+	case CHECK_SNMP_RSALPHA:
+		long_ret.u = be->alpha?1:2;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_RSRETRY:
+		long_ret.u = be->retry == UINT_MAX ? 0 : be->retry;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_RSDELAYBEFORERETRY:
+		long_ret.u = be->delay_before_retry == ULONG_MAX ? 0 : be->delay_before_retry / TIMER_HZ;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_RSWARMUP:
+		long_ret.u = be->warmup == ULONG_MAX ? 0 : be->warmup / TIMER_HZ;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_RSDELAYLOOP:
+		long_ret.u = be->delay_loop == ULONG_MAX ? 0 : be->delay_loop / TIMER_HZ;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_RSSMTPALERT:
+		long_ret.u = be->smtp_alert?1:2;
+		return (u_char *)&long_ret;
+	case CHECK_SNMP_RSDELAYBEFORERETRYUSEC:
+		long_ret.u = be->delay_before_retry == ULONG_MAX ? 0 : be->delay_before_retry;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_RSWARMUPUSEC:
+		long_ret.u = be->warmup == ULONG_MAX ? 0 : be->warmup;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_RSDELAYLOOPUSEC:
+		long_ret.u = be->delay_loop == ULONG_MAX ? 0 : be->delay_loop;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_RSCONNTIMEOUTUSEC:
+		long_ret.u = be->connection_to;
+		return (u_char*)&long_ret;
+	case CHECK_SNMP_RSTUNNELTYPE:
+		if (be->forwarding_method != IP_VS_CONN_F_TUNNEL)
+			break;
+#ifndef _HAVE_IPVS_TUN_TYPE_
+		long_ret.u = 1;		/* IPIP */
+#else
+		long_ret.u = be->tun_type == IP_VS_CONN_F_TUNNEL_TYPE_IPIP ? 1
+			   : be->tun_type == IP_VS_CONN_F_TUNNEL_TYPE_GUE ? 2
+#ifdef _HAVE_IPVS_TUN_GRE_
+			   : be->tun_type == IP_VS_CONN_F_TUNNEL_TYPE_GRE ? 3
+#endif
+			   : 0;
+#endif
+		return (u_char*)&long_ret;
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	case CHECK_SNMP_RSTUNNELPORT:
+		if (be->forwarding_method != IP_VS_CONN_F_TUNNEL ||
+		    be->tun_type != IP_VS_CONN_F_TUNNEL_TYPE_GUE)
+			break;
+		long_ret.u = ntohs(be->tun_port);
+		return (u_char*)&long_ret;
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	case CHECK_SNMP_RSTUNNELCSUM:
+		if (be->forwarding_method != IP_VS_CONN_F_TUNNEL ||
+		    be->tun_type == IP_VS_CONN_F_TUNNEL_TYPE_IPIP)
+			break;
+		long_ret.u = be->tun_flags == IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM ? 1
+			   : be->tun_flags == IP_VS_TUNNEL_ENCAP_FLAG_CSUM ? 2
+			   : be->tun_flags == IP_VS_TUNNEL_ENCAP_FLAG_REMCSUM ? 3
+			   : 0;
+		return (u_char*)&long_ret;
+#endif
 #endif
 	default:
 		return NULL;
@@ -716,7 +1191,104 @@ check_snmp_realserver(struct variable *vp, oid *name, size_t *length,
 	if (!exact && (name[*length-1] < MAX_SUBID))
 		return check_snmp_realserver(vp, name, length,
 					     exact, var_len, write_method);
-        return NULL;
+	return NULL;
+}
+
+#ifdef _WITH_VRRP_
+static u_char*
+check_snmp_lvs_sync_daemon(struct variable *vp, oid *name, size_t *length,
+				 int exact, size_t *var_len, WriteMethod **write_method)
+{
+	snmp_ret_t ret;
+
+	if (header_generic(vp, name, length, exact, var_len, write_method))
+		return NULL;
+
+	switch (vp->magic) {
+	case CHECK_SNMP_LVSSYNCDAEMONENABLED:
+		long_ret.u = global_data->lvs_syncd.syncid != PARAMETER_UNSET ? 1 : 2;
+		return (u_char *)&long_ret;
+	case CHECK_SNMP_LVSSYNCDAEMONINTERFACE:
+		if (global_data->lvs_syncd.syncid == PARAMETER_UNSET)
+			return NULL;
+		*var_len = strlen(global_data->lvs_syncd.ifname);
+		ret.cp = global_data->lvs_syncd.ifname;
+		return ret.p;
+	case CHECK_SNMP_LVSSYNCDAEMONVRRPINSTANCE:
+		if (global_data->lvs_syncd.syncid == PARAMETER_UNSET)
+			return NULL;
+		*var_len = strlen(global_data->lvs_syncd.vrrp_name);
+		ret.cp = global_data->lvs_syncd.vrrp_name;
+		return ret.p;
+	case CHECK_SNMP_LVSSYNCDAEMONSYNCID:
+		if (global_data->lvs_syncd.syncid == PARAMETER_UNSET)
+			return NULL;
+		long_ret.u = global_data->lvs_syncd.syncid;
+		return (u_char *)&long_ret;
+#ifdef _HAVE_IPVS_SYNCD_ATTRIBUTES_
+	case CHECK_SNMP_LVSSYNCDAEMONMAXLEN:
+		if (global_data->lvs_syncd.syncid == PARAMETER_UNSET)
+			return NULL;
+		long_ret.u = global_data->lvs_syncd.sync_maxlen;
+		return (u_char *)&long_ret;
+	case CHECK_SNMP_LVSSYNCDAEMONPORT:
+		if (global_data->lvs_syncd.syncid == PARAMETER_UNSET)
+			return NULL;
+		long_ret.u = global_data->lvs_syncd.mcast_port;
+		return (u_char *)&long_ret;
+	case CHECK_SNMP_LVSSYNCDAEMONTTL:
+		if (global_data->lvs_syncd.syncid == PARAMETER_UNSET)
+			return NULL;
+		long_ret.u = global_data->lvs_syncd.mcast_ttl;
+		return (u_char *)&long_ret;
+	case CHECK_SNMP_LVSSYNCDAEMONMCASTGROUPADDRTYPE:
+		if (global_data->lvs_syncd.syncid == PARAMETER_UNSET)
+			return NULL;
+		long_ret.u = (global_data->lvs_syncd.mcast_group.ss_family == AF_INET6) ? 2:1;
+		return (u_char *)&long_ret;
+	case CHECK_SNMP_LVSSYNCDAEMONMCASTGROUPADDRVALUE:
+		if (global_data->lvs_syncd.syncid == PARAMETER_UNSET)
+			return NULL;
+		if (global_data->lvs_syncd.mcast_group.ss_family == AF_INET6) {
+			struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&global_data->lvs_syncd.mcast_group;
+			*var_len = 16;
+			return (u_char *)&addr6->sin6_addr;
+		} else {
+			struct sockaddr_in *addr4 = (struct sockaddr_in *)&global_data->lvs_syncd.mcast_group;
+			*var_len = 4;
+			return (u_char *)&addr4->sin_addr;
+		}
+#endif
+	}
+	return NULL;
+}
+#endif
+
+static u_char*
+check_snmp_lvs_timeouts(struct variable *vp, oid *name, size_t *length,
+				 int exact, size_t *var_len, WriteMethod **write_method)
+{
+	if (header_generic(vp, name, length, exact, var_len, write_method))
+		return NULL;
+
+	switch (vp->magic) {
+	case CHECK_SNMP_LVSTIMEOUTTCP:
+		if (!global_data->lvs_tcp_timeout)
+			return NULL;
+		long_ret.s = global_data->lvs_tcp_timeout;
+		return (u_char *)&long_ret;
+	case CHECK_SNMP_LVSTIMEOUTTCPFIN:
+		if (!global_data->lvs_tcpfin_timeout)
+			return NULL;
+		long_ret.s = global_data->lvs_tcpfin_timeout;
+		return (u_char *)&long_ret;
+	case CHECK_SNMP_LVSTIMEOUTUDP:
+		if (!global_data->lvs_udp_timeout)
+			return NULL;
+		long_ret.s = global_data->lvs_udp_timeout;
+		return (u_char *)&long_ret;
+	}
+	return NULL;
 }
 
 static oid check_oid[] = {CHECK_OID};
@@ -792,7 +1364,6 @@ static struct variable8 check_vars[] = {
 	 check_snmp_virtualserver, 3, {3, 1, 25}},
 	{CHECK_SNMP_VSHYSTERESIS, ASN_UNSIGNED, RONLY,
 	 check_snmp_virtualserver, 3, {3, 1, 26}},
-#if defined(_KRNL_2_6_) && defined(_WITH_LVS_)
 	{CHECK_SNMP_VSSTATSCONNS, ASN_GAUGE, RONLY,
 	 check_snmp_virtualserver, 3, {3, 1, 27}},
 	{CHECK_SNMP_VSSTATSINPKTS, ASN_COUNTER, RONLY,
@@ -813,7 +1384,79 @@ static struct variable8 check_vars[] = {
 	 check_snmp_virtualserver, 3, {3, 1, 35}},
 	{CHECK_SNMP_VSRATEOUTBPS, ASN_GAUGE, RONLY,
 	 check_snmp_virtualserver, 3, {3, 1, 36}},
+#ifdef _WITH_LVS_64BIT_STATS_
+	{CHECK_SNMP_VSSTATSCONNS64, ASN_COUNTER64, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 38}},
+	{CHECK_SNMP_VSSTATSINPKTS64, ASN_COUNTER64, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 39}},
+	{CHECK_SNMP_VSSTATSOUTPKTS64, ASN_COUNTER64, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 40}},
+	{CHECK_SNMP_VSRATECPSLOW, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 41}},
+	{CHECK_SNMP_VSRATECPSHIGH, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 42}},
+	{CHECK_SNMP_VSRATEINPPSLOW, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 43}},
+	{CHECK_SNMP_VSRATEINPPSHIGH, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 44}},
+	{CHECK_SNMP_VSRATEOUTPPSLOW, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 45}},
+	{CHECK_SNMP_VSRATEOUTPPSHIGH, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 46}},
+	{CHECK_SNMP_VSRATEINBPSLOW, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 47}},
+	{CHECK_SNMP_VSRATEINBPSHIGH, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 48}},
+	{CHECK_SNMP_VSRATEOUTBPSLOW, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 49}},
+	{CHECK_SNMP_VSRATEOUTBPSHIGH, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 50}},
+#endif
+	{CHECK_SNMP_VSPERSISTGRANULARITY6, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 51}},
+	{CHECK_SNMP_VSHASHED, ASN_INTEGER, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 52}},
+	{CHECK_SNMP_VSSHFALLBACK, ASN_INTEGER, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 53}},
+	{CHECK_SNMP_VSSHPORT, ASN_INTEGER, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 54}},
+	{CHECK_SNMP_VSSCHED3, ASN_INTEGER, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 55}},
+	{CHECK_SNMP_VSACTIONWHENDOWN, ASN_INTEGER, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 56}},
+	{CHECK_SNMP_VSRETRY, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 57}},
+	{CHECK_SNMP_VSDELAYBEFORERETRY, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 58}},
+	{CHECK_SNMP_VSWARMUP, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 59}},
+	{CHECK_SNMP_VSWEIGHT, ASN_INTEGER, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 60}},
+	{CHECK_SNMP_VSSMTPALERT, ASN_INTEGER, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 61}},
+	{CHECK_SNMP_VSMHFALLBACK, ASN_INTEGER, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 62}},
+	{CHECK_SNMP_VSMHPORT, ASN_INTEGER, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 63}},
+	{CHECK_SNMP_VSDELAYLOOPUSEC, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 64}},
+	{CHECK_SNMP_VSDELAYBEFORERETRYUSEC, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 65}},
+	{CHECK_SNMP_VSWARMUPUSEC, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 66}},
+	{CHECK_SNMP_VSCONNTIMEOUTUSEC, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 67}},
+	{CHECK_SNMP_VSTUNNELTYPE, ASN_INTEGER, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 68}},
+#ifdef _HAVE_IPSV_TUN_TYPE_
+	{CHECK_SNMP_VSTUNNELPORT, ASN_UNSIGNED, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 69}},
 #endif
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	{CHECK_SNMP_VSTUNNELCSUM, ASN_INTEGER, RONLY,
+	 check_snmp_virtualserver, 3, {3, 1, 70}},
+#endif
+
 	/* realServerTable */
 	{CHECK_SNMP_RSTYPE, ASN_INTEGER, RONLY,
 	 check_snmp_realserver, 3, {4, 1, 2}},
@@ -827,12 +1470,10 @@ static struct variable8 check_vars[] = {
 	 check_snmp_realserver, 3, {4, 1, 6}},
 	{CHECK_SNMP_RSWEIGHT, ASN_INTEGER, RWRITE,
 	 check_snmp_realserver, 3, {4, 1, 7}},
-#ifdef _KRNL_2_6_
 	{CHECK_SNMP_RSUPPERCONNECTIONLIMIT, ASN_UNSIGNED, RONLY,
 	 check_snmp_realserver, 3, {4, 1, 8}},
 	{CHECK_SNMP_RSLOWERCONNECTIONLIMIT, ASN_UNSIGNED, RONLY,
 	 check_snmp_realserver, 3, {4, 1, 9}},
-#endif
 	{CHECK_SNMP_RSACTIONWHENDOWN, ASN_INTEGER, RONLY,
 	 check_snmp_realserver, 3, {4, 1, 10}},
 	{CHECK_SNMP_RSNOTIFYUP, ASN_OCTET_STR, RONLY,
@@ -841,7 +1482,6 @@ static struct variable8 check_vars[] = {
 	 check_snmp_realserver, 3, {4, 1, 12}},
 	{CHECK_SNMP_RSFAILEDCHECKS, ASN_UNSIGNED, RONLY,
 	 check_snmp_realserver, 3, {4, 1, 13}},
-#if defined(_KRNL_2_6_) && defined(_WITH_LVS_)
 	{CHECK_SNMP_RSSTATSCONNS, ASN_GAUGE, RONLY,
 	 check_snmp_realserver, 3, {4, 1, 14}},
 	{CHECK_SNMP_RSSTATSACTIVECONNS, ASN_GAUGE, RONLY,
@@ -868,28 +1508,130 @@ static struct variable8 check_vars[] = {
 	 check_snmp_realserver, 3, {4, 1, 25}},
 	{CHECK_SNMP_RSRATEOUTBPS, ASN_GAUGE, RONLY,
 	 check_snmp_realserver, 3, {4, 1, 26}},
+#ifdef _WITH_LVS_64BIT_STATS_
+	{CHECK_SNMP_RSSTATSCONNS64, ASN_COUNTER64, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 27}},
+	{CHECK_SNMP_RSSTATSINPKTS64, ASN_COUNTER64, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 28}},
+	{CHECK_SNMP_RSSTATSOUTPKTS64, ASN_COUNTER64, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 29}},
+	{CHECK_SNMP_RSRATECPSLOW, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 30}},
+	{CHECK_SNMP_RSRATECPSHIGH, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 31}},
+	{CHECK_SNMP_RSRATEINPPSLOW, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 32}},
+	{CHECK_SNMP_RSRATEINPPSHIGH, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 33}},
+	{CHECK_SNMP_RSRATEOUTPPSLOW, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 34}},
+	{CHECK_SNMP_RSRATEOUTPPSHIGH, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 35}},
+	{CHECK_SNMP_RSRATEINBPSLOW, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 36}},
+	{CHECK_SNMP_RSRATEINBPSHIGH, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 37}},
+	{CHECK_SNMP_RSRATEOUTBPSLOW, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 38}},
+	{CHECK_SNMP_RSRATEOUTBPSHIGH, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 39}},
+#endif
+	{CHECK_SNMP_RSLOADBALANCINGKIND, ASN_INTEGER, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 40}},
+	{CHECK_SNMP_RSVIRTUALHOST, ASN_OCTET_STR, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 41}},
+	{CHECK_SNMP_RSALPHA, ASN_INTEGER, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 42}},
+	{CHECK_SNMP_RSRETRY, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 43}},
+	{CHECK_SNMP_RSDELAYBEFORERETRY, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 44}},
+	{CHECK_SNMP_RSWARMUP, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 45}},
+	{CHECK_SNMP_RSDELAYLOOP, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 46}},
+	{CHECK_SNMP_RSSMTPALERT, ASN_INTEGER, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 47}},
+	{CHECK_SNMP_RSDELAYBEFORERETRYUSEC, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 48}},
+	{CHECK_SNMP_RSWARMUPUSEC, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 49}},
+	{CHECK_SNMP_RSDELAYLOOPUSEC, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 50}},
+	{CHECK_SNMP_RSCONNTIMEOUTUSEC, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 51}},
+	{CHECK_SNMP_RSTUNNELTYPE, ASN_INTEGER, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 52}},
+#ifdef _HAVE_IPSV_TUN_TYPE_
+	{CHECK_SNMP_RSTUNNELPORT, ASN_UNSIGNED, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 53}},
+#endif
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	{CHECK_SNMP_RSTUNNELCSUM, ASN_INTEGER, RONLY,
+	 check_snmp_realserver, 3, {4, 1, 54}},
 #endif
+
+#ifdef _WITH_VRRP_
+	/* LVS sync daemon configuration */
+	{CHECK_SNMP_LVSSYNCDAEMONENABLED, ASN_INTEGER, RONLY,
+	 check_snmp_lvs_sync_daemon, 2, {6, 1}},
+	{CHECK_SNMP_LVSSYNCDAEMONINTERFACE, ASN_OCTET_STR, RONLY,
+	 check_snmp_lvs_sync_daemon, 2, {6, 2}},
+	{CHECK_SNMP_LVSSYNCDAEMONVRRPINSTANCE, ASN_OCTET_STR, RONLY,
+	 check_snmp_lvs_sync_daemon, 2, {6, 3}},
+	{CHECK_SNMP_LVSSYNCDAEMONSYNCID, ASN_INTEGER, RONLY,
+	 check_snmp_lvs_sync_daemon, 2, {6, 4}},
+#ifdef _HAVE_IPVS_SYNCD_ATTRIBUTES_
+	{CHECK_SNMP_LVSSYNCDAEMONMAXLEN, ASN_INTEGER, RONLY,
+	 check_snmp_lvs_sync_daemon, 2, {6, 5}},
+	{CHECK_SNMP_LVSSYNCDAEMONPORT, ASN_INTEGER, RONLY,
+	 check_snmp_lvs_sync_daemon, 2, {6, 6}},
+	{CHECK_SNMP_LVSSYNCDAEMONTTL, ASN_INTEGER, RONLY,
+	 check_snmp_lvs_sync_daemon, 2, {6, 7}},
+	{CHECK_SNMP_LVSSYNCDAEMONMCASTGROUPADDRTYPE, ASN_INTEGER, RONLY,
+	 check_snmp_lvs_sync_daemon, 2, {6, 8}},
+	{CHECK_SNMP_LVSSYNCDAEMONMCASTGROUPADDRVALUE, ASN_OCTET_STR, RONLY,
+	 check_snmp_lvs_sync_daemon, 2, {6, 9}},
+#endif
+#endif
+	/* LVS timeouts */
+	{CHECK_SNMP_LVSTIMEOUTTCP, ASN_INTEGER, RONLY,
+	 check_snmp_lvs_timeouts, 2, {7, 1}},
+	{CHECK_SNMP_LVSTIMEOUTTCPFIN, ASN_INTEGER, RONLY,
+	 check_snmp_lvs_timeouts, 2, {7, 2}},
+	{CHECK_SNMP_LVSTIMEOUTUDP, ASN_INTEGER, RONLY,
+	 check_snmp_lvs_timeouts, 2, {7, 3}},
 };
 
 void
-check_snmp_agent_init()
+check_snmp_agent_init(const char *snmp_socket)
 {
-	snmp_agent_init(check_oid, OID_LENGTH(check_oid), "Healthchecker",
-			(struct variable *)check_vars,
-			sizeof(struct variable8),
-			sizeof(check_vars)/sizeof(struct variable8));
+	if (snmp_running)
+		return;
+
+	/* We handle the global oid if we are running SNMP */
+	snmp_agent_init(snmp_socket, true);
+	snmp_register_mib(check_oid, OID_LENGTH(check_oid), "Healthchecker",
+			  (struct variable *)check_vars,
+			  sizeof(struct variable8),
+			  sizeof(check_vars)/sizeof(struct variable8));
 }
 
 void
-check_snmp_agent_close()
+check_snmp_agent_close(void)
 {
-	snmp_agent_close(check_oid, OID_LENGTH(check_oid), "Healthchecker");
+	if (!snmp_running)
+		return;
+
+	snmp_unregister_mib(check_oid, OID_LENGTH(check_oid));
+	snmp_agent_close(true);
 }
 
 void
-check_snmp_rs_trap(real_server_t *rs, virtual_server_t *vs)
+check_snmp_rs_trap(real_server_t *rs, virtual_server_t *vs, bool stopping)
 {
 	element e;
+	snmp_ret_t ptr_conv;
 
 	/* OID of the notification */
 	oid notification_oid[] = { CHECK_OID, 5, 0, 1 };
@@ -951,15 +1693,11 @@ check_snmp_rs_trap(real_server_t *rs, virtual_server_t *vs)
 		notification_oid[notification_oid_len - 1] = 2;
 
 	/* Initialize data */
-	if (LIST_ISEMPTY(vs->rs))
-		realtotal = 0;
-	else
-		realtotal = LIST_SIZE(vs->rs);
+	realtotal = LIST_SIZE(vs->rs);
 	realup = 0;
-	if (!LIST_ISEMPTY(vs->rs))
-		for (e = LIST_HEAD(vs->rs); e; ELEMENT_NEXT(e))
-			if (((real_server_t *)ELEMENT_DATA(e))->alive)
-				realup++;
+	for (e = LIST_HEAD(vs->rs); e; ELEMENT_NEXT(e))
+		if (((real_server_t *)ELEMENT_DATA(e))->alive)
+			realup++;
 
 	/* snmpTrapOID */
 	snmp_varlist_add_variable(&notification_vars,
@@ -1016,7 +1754,7 @@ check_snmp_rs_trap(real_server_t *rs, virtual_server_t *vs)
 		snmp_varlist_add_variable(&notification_vars,
 					  vsgroupname_oid, vsgroupname_oid_len,
 					  ASN_OCTET_STR,
-					  (u_char *)vs->vsgname,
+					  (const u_char *)vs->vsgname,
 					  strlen(vs->vsgname));
 	} else if (vs->vfwmark) {
 		vsfwmark = vs->vfwmark;
@@ -1053,7 +1791,7 @@ check_snmp_rs_trap(real_server_t *rs, virtual_server_t *vs)
 				  (u_char *)&vsprotocol,
 				  sizeof(vsprotocol));
 	if (!rs) {
-		quorumstatus = vs->quorum_state?1:2;
+		quorumstatus = stopping ? 3 : vs->quorum_state_up ? 1 : 2;
 		snmp_varlist_add_variable(&notification_vars,
 					  quorumstatus_oid, quorumstatus_oid_len,
 					  ASN_INTEGER,
@@ -1078,10 +1816,11 @@ check_snmp_rs_trap(real_server_t *rs, virtual_server_t *vs)
 				  sizeof(realtotal));
 
 	/* routerId */
+	ptr_conv.cp = global_data->router_id,
 	snmp_varlist_add_variable(&notification_vars,
 				  routerId_oid, routerId_oid_len,
 				  ASN_OCTET_STR,
-				  (u_char *)global_data->router_id,
+				  ptr_conv.p,
 				  strlen(global_data->router_id));
 
 	send_v2trap(notification_vars);
@@ -1089,7 +1828,7 @@ check_snmp_rs_trap(real_server_t *rs, virtual_server_t *vs)
 }
 
 void
-check_snmp_quorum_trap(virtual_server_t *vs)
+check_snmp_quorum_trap(virtual_server_t *vs, bool stopping)
 {
-	check_snmp_rs_trap(NULL, vs);
+	check_snmp_rs_trap(NULL, vs, stopping);
 }
diff --git a/tools/keepalived/keepalived/check/check_ssl.c b/tools/keepalived/keepalived/check/check_ssl.c
index aa19011ae..c7fb2ca4c 100644
--- a/tools/keepalived/keepalived/check/check_ssl.c
+++ b/tools/keepalived/keepalived/check/check_ssl.c
@@ -20,64 +20,87 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <fcntl.h>
 #include <openssl/err.h>
+
 #include "check_ssl.h"
 #include "check_api.h"
+#include "check_http.h"
 #include "logger.h"
-#include "memory.h"
-#include "parser.h"
-#include "smtp.h"
-#include "utils.h"
-#include "html.h"
+#ifdef THREAD_DUMP
+#include "scheduler.h"
+#endif
 
 /* SSL primitives */
 /* Free an SSL context */
 void
 clear_ssl(ssl_data_t *ssl)
 {
-	if (ssl)
-		if (ssl->ctx)
-			SSL_CTX_free(ssl->ctx);
+	if (ssl && ssl->ctx) {
+		SSL_CTX_free(ssl->ctx);
+		ssl->ctx = NULL;
+	}
 }
 
 /* PEM password callback function */
 static int
-password_cb(char *buf, int num, int rwflag, void *userdata)
+password_cb(char *buf, int num, __attribute__((unused)) int rwflag, void *userdata)
 {
 	ssl_data_t *ssl = (ssl_data_t *) userdata;
-	unsigned int plen = strlen(ssl->password);
+	size_t plen = strlen(ssl->password);
 
-	if (num < plen + 1)
+	if ((unsigned)num < plen + 1)
 		return (0);
 
-	strncpy(buf, ssl->password, plen);
-	return (plen);
+	strcpy(buf, ssl->password);
+	return (int)plen;
 }
 
 /* Inititalize global SSL context */
-static BIO *bio_err = 0;
-static int
+static bool
 build_ssl_ctx(void)
 {
 	ssl_data_t *ssl;
 
 	/* Library initialization */
+#ifdef HAVE_OPENSSL_INIT_CRYPTO
+#ifndef HAVE_OPENSSL_INIT_NO_LOAD_CONFIG_BUG
+	/* In OpenSSL v1.1.1 if the following is called, SSL_CTX_new() below fails.
+	 * It works in v1.1.0h and v1.1.1b.
+	 * It transpires that it works without setting NO_LOAD_CONFIG, but it is
+	 * presumably more efficient not to load it. */
+	if (!OPENSSL_init_crypto(OPENSSL_INIT_NO_LOAD_CONFIG, NULL))
+		log_message(LOG_INFO, "OPENSSL_init_crypto failed");
+#endif
+#else
 	SSL_library_init();
-
 	SSL_load_error_strings();
-	bio_err = BIO_new_fp(stderr, BIO_NOCLOSE);
+#endif
 
 	if (!check_data->ssl)
 		ssl = (ssl_data_t *) MALLOC(sizeof(ssl_data_t));
 	else
 		ssl = check_data->ssl;
 
-	/* Initialize SSL context for SSL v2/3 */
-	ssl->meth = (SSL_METHOD *) SSLv23_method();
-	ssl->ctx = SSL_CTX_new(ssl->meth);
+	/* Initialize SSL context */
+#ifdef HAVE_TLS_METHOD
+	ssl->meth = TLS_method();
+#else
+	ssl->meth = SSLv23_method();
+#endif
+	if (!(ssl->ctx = SSL_CTX_new(ssl->meth))) {
+		log_message(LOG_INFO, "SSL error: cannot create new SSL context");
+
+		if (!check_data->ssl)
+			FREE(ssl);
+
+		return false;
+	}
 
 	/* return for autogen context */
 	if (!check_data->ssl) {
@@ -92,7 +115,7 @@ build_ssl_ctx(void)
 		     (ssl->ctx, check_data->ssl->certfile))) {
 			log_message(LOG_INFO,
 			       "SSL error : Cant load certificate file...");
-			return 0;
+			return false;
 		}
 
 	/* Handle password callback using userdata ssl */
@@ -107,7 +130,7 @@ build_ssl_ctx(void)
 		    (SSL_CTX_use_PrivateKey_file
 		     (ssl->ctx, check_data->ssl->keyfile, SSL_FILETYPE_PEM))) {
 			log_message(LOG_INFO, "SSL error : Cant load key file...");
-			return 0;
+			return false;
 		}
 
 	/* Load the CAs we trust */
@@ -116,22 +139,22 @@ build_ssl_ctx(void)
 		    (SSL_CTX_load_verify_locations
 		     (ssl->ctx, check_data->ssl->cafile, 0))) {
 			log_message(LOG_INFO, "SSL error : Cant load CA file...");
-			return 0;
+			return false;
 		}
 
       end:
-#if (OPENSSL_VERSION_NUMBER < 0x00905100L)
+#if HAVE_SSL_CTX_SET_VERIFY_DEPTH
 	SSL_CTX_set_verify_depth(ssl->ctx, 1);
 #endif
 
-	return 1;
+	return true;
 }
 
 /*
  * Initialize the SSL context, with or without specific
  * configuration files.
  */
-int
+bool
 init_ssl_ctx(void)
 {
 	ssl_data_t *ssl = check_data->ssl;
@@ -143,18 +166,15 @@ init_ssl_ctx(void)
 		log_message(LOG_INFO, "  SSL   cafile:%s", ssl->cafile);
 		log_message(LOG_INFO, "Terminate...");
 		clear_ssl(ssl);
-		return 0;
+		return false;
 	}
-	return 1;
+	return true;
 }
 
 /* Display SSL error to readable string */
 int
 ssl_printerr(int err)
 {
-	unsigned long extended_error = 0;
-	char *ssl_strerr;
-
 	switch (err) {
 	case SSL_ERROR_ZERO_RETURN:
 		log_message(LOG_INFO, "  SSL error: (zero return)");
@@ -174,54 +194,75 @@ ssl_printerr(int err)
 	case SSL_ERROR_SYSCALL:
 		log_message(LOG_INFO, "  SSL error: (syscall error)");
 		break;
-	case SSL_ERROR_SSL:{
-			ssl_strerr = (char *) MALLOC(500);
-
-			extended_error = ERR_get_error();
-			ERR_error_string(extended_error, ssl_strerr);
-			log_message(LOG_INFO, "  SSL error: (%s)", ssl_strerr);
-			FREE(ssl_strerr);
-			break;
-		}
+	case SSL_ERROR_SSL:
+		/* Note: the following is not thread safe. Use MALLOC(256) and ERR_error_string_n if need thread safety */
+		log_message(LOG_INFO, "  SSL error: (%s)", ERR_error_string(ERR_get_error(), NULL));
+		break;
 	}
 	return 0;
 }
 
 int
-ssl_connect(thread_t * thread, int new_req)
+ssl_connect(thread_ref_t thread, int new_req)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	http_checker_t *http_get_check = CHECKER_ARG(checker);
-	http_t *http = HTTP_ARG(http_get_check);
-	request_t *req = HTTP_REQ(http);
+	request_t *req = http_get_check->req;
+#ifdef _HAVE_SSL_SET_TLSEXT_HOST_NAME_
+	url_t *url = ELEMENT_DATA(http_get_check->url_it);
+	const char* vhost = NULL;
+#endif
 	int ret = 0;
-	int val = 0;
 
 	/* First round, create SSL context */
 	if (new_req) {
-		req->ssl = SSL_new(check_data->ssl->ctx);
-		req->bio = BIO_new_socket(thread->u.fd, BIO_NOCLOSE);
+		int bio_fd;
+
+		if (!(req->ssl = SSL_new(check_data->ssl->ctx))) {
+			log_message(LOG_INFO, "Unable to establish ssl connection - SSL_new() failed");
+			return 0;
+		}
+
+		if (!(req->bio = BIO_new_socket(thread->u.f.fd, BIO_NOCLOSE))) {
+			log_message(LOG_INFO, "Unable to establish ssl connection - BIO_new_socket() failed");
+			return 0;
+		}
+
+		BIO_get_fd(req->bio, &bio_fd);
+		if (fcntl(bio_fd, F_SETFD, fcntl(bio_fd, F_GETFD) | FD_CLOEXEC) == -1)
+			log_message(LOG_INFO, "Setting CLOEXEC failed on ssl socket - errno %d", errno);
+#ifdef HAVE_SSL_SET0_RBIO
+		BIO_up_ref(req->bio);
+		SSL_set0_rbio(req->ssl, req->bio);
+		SSL_set0_wbio(req->ssl, req->bio);
+#else
 		SSL_set_bio(req->ssl, req->bio, req->bio);
+#endif
+#ifdef _HAVE_SSL_SET_TLSEXT_HOST_NAME_
+		if (http_get_check->enable_sni) {
+			if (url && url->virtualhost)
+				vhost = url->virtualhost;
+			else if (http_get_check->virtualhost)
+				vhost = http_get_check->virtualhost;
+			else if (checker->vs->virtualhost)
+				vhost = checker->vs->virtualhost;
+			if (vhost)
+				SSL_set_tlsext_host_name(req->ssl, vhost);
+		}
+#endif
 	}
 
-	/* Set descriptor non blocking */
-	val = fcntl(thread->u.fd, F_GETFL, 0);
-	fcntl(thread->u.fd, F_SETFL, val | O_NONBLOCK);
-
 	ret = SSL_connect(req->ssl);
 
-	/* restore descriptor flags */
-	fcntl(thread->u.fd, F_SETFL, val);
-
 	return ret;
 }
 
-int
-ssl_send_request(SSL * ssl, char *str_request, int request_len)
+bool
+ssl_send_request(SSL * ssl, const char *str_request, int request_len)
 {
 	int err, r = 0;
 
-	while (1) {
+	while (true) {
 		err = 1;
 		r = SSL_write(ssl, str_request, request_len);
 		if (SSL_ERROR_NONE != SSL_get_error(ssl, r))
@@ -233,80 +274,67 @@ ssl_send_request(SSL * ssl, char *str_request, int request_len)
 		break;
 	}
 
-	return (err == 3) ? 1 : 0;
+	return (err == 3);
 }
 
 /* Asynchronous SSL stream reader */
 int
-ssl_read_thread(thread_t * thread)
+ssl_read_thread(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	http_checker_t *http_get_check = CHECKER_ARG(checker);
-	http_t *http = HTTP_ARG(http_get_check);
-	request_t *req = HTTP_REQ(http);
+	request_t *req = http_get_check->req;
+	url_t *url = ELEMENT_DATA(http_get_check->url_it);
 	unsigned timeout = checker->co->connection_to;
-	unsigned char digest[16];
+	unsigned char digest[MD5_DIGEST_LENGTH];
 	int r = 0;
-	int val;
 
 	/* Handle read timeout */
 	if (thread->type == THREAD_READ_TIMEOUT && !req->extracted)
-		return timeout_epilog(thread, "=> SSL CHECK failed on service"
-				      " : recevice data <=\n\n", "SSL read");
-
-	/* Set descriptor non blocking */
-	val = fcntl(thread->u.fd, F_GETFL, 0);
-	fcntl(thread->u.fd, F_SETFL, val | O_NONBLOCK);
+		return timeout_epilog(thread, "Timeout SSL read");
 
-	/* read the SSL stream */
-	r = SSL_read(req->ssl, req->buffer + req->len,
-		     MAX_BUFFER_LENGTH - req->len);
-
-	/* restore descriptor flags */
-	fcntl(thread->u.fd, F_SETFL, val);
+	/* read the SSL stream - allow for terminating the data with '\0 */
+	r = SSL_read(req->ssl, req->buffer + req->len, (int)(MAX_BUFFER_LENGTH - 1 - req->len));
 
 	req->error = SSL_get_error(req->ssl, r);
 
 	if (req->error == SSL_ERROR_WANT_READ) {
-		 /* async read unfinished */ 
+		 /* async read unfinished */
 		thread_add_read(thread->master, ssl_read_thread, checker,
-				thread->u.fd, timeout);
+				thread->u.f.fd, timeout, false);
 	} else if (r > 0 && req->error == 0) {
 		/* Handle response stream */
-		http_process_response(req, r);
+		http_process_response(req, (size_t)r, url);
 
 		/*
 		 * Register next ssl stream reader.
 		 * Register itself to not perturbe global I/O multiplexer.
 		 */
 		thread_add_read(thread->master, ssl_read_thread, checker,
-				thread->u.fd, timeout);
+				thread->u.f.fd, timeout, false);
 	} else if (req->error) {
 
 		/* All the SSL streal has been parsed */
-		MD5_Final(digest, &req->context);
+		if (url->digest)
+			MD5_Final(digest, &req->context);
 		SSL_set_quiet_shutdown(req->ssl, 1);
 
 		r = (req->error == SSL_ERROR_ZERO_RETURN) ? SSL_shutdown(req->ssl) : 0;
 
-		if (r && !req->extracted) {
-			/* check if server is currently alive */
-			if (svr_checker_up(checker->id, checker->rs)) {
-				smtp_alert(checker->rs, NULL, NULL,
-					   "DOWN",
-					   "=> SSL CHECK failed on service"
-					   " : cannot receive data <=\n\n");
-				update_svr_checker_state(DOWN, checker->id
-							     , checker->vs
-							     , checker->rs);
-			}
-			return epilog(thread, 1, 0, 0);
-		}
+		if (r && !req->extracted)
+			return timeout_epilog(thread, "SSL read error from");
 
 		/* Handle response stream */
-		http_handle_response(thread, digest, (!req->extracted) ? 1 : 0);
-
+		http_handle_response(thread, digest, !req->extracted);
 	}
 
 	return 0;
 }
+
+#ifdef THREAD_DUMP
+void
+register_check_ssl_addresses(void)
+{
+	register_thread_address("ssl_read_thread", ssl_read_thread);
+}
+#endif
diff --git a/tools/keepalived/keepalived/check/check_tcp.c b/tools/keepalived/keepalived/check/check_tcp.c
index 8acde3b53..67779fa57 100644
--- a/tools/keepalived/keepalived/check/check_tcp.c
+++ b/tools/keepalived/keepalived/check/check_tcp.c
@@ -17,9 +17,14 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <unistd.h>
+#include <stdio.h>
+
 #include "check_tcp.h"
 #include "check_api.h"
 #include "memory.h"
@@ -29,35 +34,50 @@
 #include "smtp.h"
 #include "utils.h"
 #include "parser.h"
+#if !HAVE_DECL_SOCK_CLOEXEC
+#include "old_socket.h"
+#endif
+#ifdef THREAD_DUMP
+#include "scheduler.h"
+#endif
 
-int tcp_connect_thread(thread_t *);
+static int tcp_connect_thread(thread_ref_t);
 
 /* Configuration stream handling */
-void
-free_tcp_check(void *data)
+static void
+free_tcp_check(checker_t *checker)
 {
-	if (!data)
-		return;
-	if (!CHECKER_CO(data))
-		return;
-	FREE(CHECKER_CO(data));
-	FREE(data);
+	FREE(checker->co);
+	FREE(checker);
 }
 
-void
-dump_tcp_check(void *data)
+static void
+dump_tcp_check(FILE *fp, const checker_t *checker)
 {
-	log_message(LOG_INFO, "   Keepalive method = TCP_CHECK");
-	if (!data || !CHECKER_CO(data))
-		return;
-	dump_conn_opts(CHECKER_CO(data));
+	conf_write(fp, "   Keepalive method = TCP_CHECK");
+	dump_checker_opts(fp, checker);
 }
 
-void
-tcp_check_handler(vector_t *strvec)
+static bool
+tcp_check_compare(const checker_t *old_c, const checker_t *new_c)
+{
+	return compare_conn_opts(old_c->co, new_c->co);
+}
+
+static void
+tcp_check_handler(__attribute__((unused)) const vector_t *strvec)
 {
 	/* queue new checker */
-	queue_checker(free_tcp_check, dump_tcp_check, tcp_connect_thread, NULL, CHECKER_NEW_CO());
+	queue_checker(free_tcp_check, dump_tcp_check, tcp_connect_thread,
+		      tcp_check_compare, NULL, CHECKER_NEW_CO(), true);
+}
+
+static void
+tcp_check_end_handler(void)
+{
+	if (!check_conn_opts(CHECKER_GET_CO())) {
+		dequeue_new_checker();
+	}
 }
 
 void
@@ -65,62 +85,104 @@ install_tcp_check_keyword(void)
 {
 	install_keyword("TCP_CHECK", &tcp_check_handler);
 	install_sublevel();
-	install_connect_keywords();
-	install_keyword("warmup", &warmup_handler);
+	install_checker_common_keywords(true);
+	install_sublevel_end_handler(tcp_check_end_handler);
 	install_sublevel_end();
 }
 
-int
-tcp_check_thread(thread_t * thread)
+static void
+tcp_epilog(thread_ref_t thread, bool is_success)
 {
 	checker_t *checker;
-	int status;
+	unsigned long delay;
+	bool checker_was_up;
+	bool rs_was_alive;
 
 	checker = THREAD_ARG(thread);
 
-	status = tcp_socket_state(thread->u.fd, thread, tcp_check_thread);
-
-	/* If status = connect_success, TCP connection to remote host is established.
-	 * Otherwise we have a real connection error or connection timeout.
-	 */
-	if (status == connect_success) {
-		close(thread->u.fd);
+	if (is_success || checker->retry_it >= checker->retry) {
+		delay = checker->delay_loop;
+		checker->retry_it = 0;
 
-		if (!svr_checker_up(checker->id, checker->rs)) {
+		if (is_success && (!checker->is_up || !checker->has_run)) {
 			log_message(LOG_INFO, "TCP connection to %s success."
-					, FMT_TCP_RS(checker));
-			smtp_alert(checker->rs, NULL, NULL,
-				   "UP",
-				   "=> TCP CHECK succeed on service <=");
-			update_svr_checker_state(UP, checker->id
-						   , checker->vs
-						   , checker->rs);
+					, FMT_CHK(checker));
+			checker_was_up = checker->is_up;
+			rs_was_alive = checker->rs->alive;
+			update_svr_checker_state(UP, checker);
+			if (checker->rs->smtp_alert && !checker_was_up &&
+			    (rs_was_alive != checker->rs->alive || !global_data->no_checker_emails))
+				smtp_alert(SMTP_MSG_RS, checker, NULL,
+					   "=> TCP CHECK succeed on service <=");
+		} else if (!is_success && 
+			   (checker->is_up || !checker->has_run)) {
+			if (checker->retry && checker->has_run)
+				log_message(LOG_INFO
+				    , "TCP_CHECK on service %s failed after %u retries."
+				    , FMT_CHK(checker)
+				    , checker->retry);
+			else
+				log_message(LOG_INFO
+				    , "TCP_CHECK on service %s failed."
+				    , FMT_CHK(checker));
+			checker_was_up = checker->is_up;
+			rs_was_alive = checker->rs->alive;
+			update_svr_checker_state(DOWN, checker);
+			if (checker->rs->smtp_alert && checker_was_up &&
+			    (rs_was_alive != checker->rs->alive || !global_data->no_checker_emails))
+				smtp_alert(SMTP_MSG_RS, checker, NULL,
+					   "=> TCP CHECK failed on service <=");
 		}
-
 	} else {
+		delay = checker->delay_before_retry;
+		++checker->retry_it;
+	}
 
-		if (svr_checker_up(checker->id, checker->rs)) {
-			log_message(LOG_INFO, "TCP connection to %s failed !!!"
-					, FMT_TCP_RS(checker));
-			smtp_alert(checker->rs, NULL, NULL,
-				   "DOWN",
-				   "=> TCP CHECK failed on service <=");
-			update_svr_checker_state(DOWN, checker->id
-						     , checker->vs
-						     , checker->rs);
-		}
+	checker->has_run = true;
+
+	/* Register next timer checker */
+	thread_add_timer(thread->master, tcp_connect_thread, checker, delay);
+}
+
+static int
+tcp_check_thread(thread_ref_t thread)
+{
+	checker_t *checker = THREAD_ARG(thread);
+	int status;
+
+	status = tcp_socket_state(thread, tcp_check_thread);
 
+	/* If status = connect_in_progress, next thread is already registered.
+	 * If it is connect_success, the fd is still open.
+	 * Otherwise we have a real connection error or connection timeout.
+	 */
+	switch(status) {
+	case connect_in_progress:
+		break;
+	case connect_success:
+		thread_close_fd(thread);
+		tcp_epilog(thread, true);
+		break;
+	case connect_timeout:
+		if (checker->is_up &&
+		    (global_data->checker_log_all_failures || checker->log_all_failures))
+			log_message(LOG_INFO, "TCP connection to %s timedout."
+					, FMT_CHK(checker));
+		tcp_epilog(thread, false);
+		break;
+	default:
+		if (checker->is_up &&
+		    (global_data->checker_log_all_failures || checker->log_all_failures))
+			log_message(LOG_INFO, "TCP connection to %s failed."
+					, FMT_CHK(checker));
+		tcp_epilog(thread, false);
 	}
 
-	/* Register next timer checker */
-	if (status != connect_in_progress)
-		thread_add_timer(thread->master, tcp_connect_thread, checker,
-				 checker->vs->delay_loop);
 	return 0;
 }
 
-int
-tcp_connect_thread(thread_t * thread)
+static int
+tcp_connect_thread(thread_ref_t thread)
 {
 	checker_t *checker = THREAD_ARG(thread);
 	conn_opts_t *co = checker->co;
@@ -131,30 +193,54 @@ tcp_connect_thread(thread_t * thread)
 	 * Register a new checker thread & return
 	 * if checker is disabled
 	 */
-	if (!CHECKER_ENABLED(checker)) {
+	if (!checker->enabled) {
 		thread_add_timer(thread->master, tcp_connect_thread, checker,
-				 checker->vs->delay_loop);
+				 checker->delay_loop);
 		return 0;
 	}
 
-	if ((fd = socket(co->dst.ss_family, SOCK_STREAM, IPPROTO_TCP)) == -1) {
+	if ((fd = socket(co->dst.ss_family, SOCK_STREAM | SOCK_CLOEXEC | SOCK_NONBLOCK, IPPROTO_TCP)) == -1) {
 		log_message(LOG_INFO, "TCP connect fail to create socket. Rescheduling.");
 		thread_add_timer(thread->master, tcp_connect_thread, checker,
-				checker->vs->delay_loop);
+				checker->delay_loop);
 
 		return 0;
 	}
 
+#if !HAVE_DECL_SOCK_NONBLOCK
+	if (set_sock_flags(fd, F_SETFL, O_NONBLOCK))
+		log_message(LOG_INFO, "Unable to set NONBLOCK on tcp_connect socket - %s (%d)", strerror(errno), errno);
+#endif
+
+#if !HAVE_DECL_SOCK_CLOEXEC
+	if (set_sock_flags(fd, F_SETFD, FD_CLOEXEC))
+		log_message(LOG_INFO, "Unable to set CLOEXEC on tcp_connect socket - %s (%d)", strerror(errno), errno);
+#endif
+
 	status = tcp_bind_connect(fd, co);
 
 	/* handle tcp connection status & register check worker thread */
 	if(tcp_connection_state(fd, status, thread, tcp_check_thread,
 			co->connection_to)) {
 		close(fd);
-		log_message(LOG_INFO, "TCP socket bind failed. Rescheduling.");
-		thread_add_timer(thread->master, tcp_connect_thread, checker,
-				checker->vs->delay_loop);
+
+		if (status == connect_fail) {
+			tcp_epilog(thread, false);
+		} else {
+			log_message(LOG_INFO, "TCP socket bind failed. Rescheduling.");
+			thread_add_timer(thread->master, tcp_connect_thread, checker,
+					checker->delay_loop);
+		}
 	}
 
 	return 0;
 }
+
+#ifdef THREAD_DUMP
+void
+register_check_tcp_addresses(void)
+{
+	register_thread_address("tcp_check_thread", tcp_check_thread);
+	register_thread_address("tcp_connect_thread", tcp_connect_thread);
+}
+#endif
diff --git a/tools/keepalived/keepalived/check/ipvswrapper.c b/tools/keepalived/keepalived/check/ipvswrapper.c
old mode 100755
new mode 100644
index 9a9612c33..337f3c608
--- a/tools/keepalived/keepalived/check/ipvswrapper.c
+++ b/tools/keepalived/keepalived/check/ipvswrapper.c
@@ -1,13 +1,12 @@
-/* 
- * Soft:        Keepalived is a failover program for the LVS project
+/* Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        IPVS Kernel wrapper. Use setsockopt call to add/remove
  *              server to/from the loadbalanced server pool.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *               This program is distributed in the hope that it will be useful,
  *               but WITHOUT ANY WARRANTY; without even the implied warranty of
  *               MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
@@ -18,38 +17,51 @@
  *               as published by the Free Software Foundation; either version
  *               2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <errno.h>
+#include <fcntl.h>
+#include <unistd.h>
+#include <sys/wait.h>
+#include <stdint.h>
+#include <stdbool.h>
+
+#ifndef O_CLOEXEC	/* Since Linux 2.6.23 and glibc 2.7 */
+#define O_CLOEXEC 0	/* It doesn't really matter if O_CLOEXEC isn't set here */
+#endif
+
 #include "ipvswrapper.h"
-#include "check_data.h"
+#include "global_data.h"
 #include "list.h"
-#include "utils.h"
-#include "memory.h"
 #include "logger.h"
+#include "libipvs.h"
+#include "main.h"
 
-/* local helpers functions */
-static int parse_timeout(char *, unsigned *);
-static int string_to_number(const char *, int, int);
-static int parse_bps(char *, unsigned *);
-static int parse_limit_proportion(char *, unsigned *);
+static bool no_ipvs = false;
+
+static void ipvs_set_srule(int cmd, ipvs_service_t *srule, virtual_server_t *vs);
+/*
+ *  * Utility functions coming from Wensong code
+ *   */
 
 /* fetch virtual server group from group name */
-virtual_server_group_t *
-ipvs_get_group_by_name(char *gname, list l)
+virtual_server_group_t * __attribute__ ((pure))
+ipvs_get_group_by_name(const char *gname, list l)
 {
 	element e;
 	virtual_server_group_t *vsg;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vsg = ELEMENT_DATA(e);
+	LIST_FOREACH(l, vsg, e) {
 		if (!strcmp(vsg->gname, gname))
 			return vsg;
 	}
 	return NULL;
 }
 
-local_addr_group *
+local_addr_group * __attribute__ ((pure))
 ipvs_get_laddr_group_by_name(char *gname, list l)
 {
 	element e;
@@ -64,7 +76,7 @@ ipvs_get_laddr_group_by_name(char *gname, list l)
 }
 
 
-blklst_addr_group *
+blklst_addr_group * __attribute__ ((pure))
 ipvs_get_blklst_group_by_name(char *gname, list l)
 {
         element e;
@@ -78,27 +90,34 @@ ipvs_get_blklst_group_by_name(char *gname, list l)
         return NULL;
 }
 
-#ifdef _KRNL_2_4_			/* KERNEL 2.4 IPVS handling */
-
 /* Global module def IPVS rules */
-static struct ip_vs_rule_user *urule;
+//static ipvs_service_t *srule;
+//static ipvs_dest_t *drule;
+//static ipvs_daemon_t *daemonrule;
+//static ipvs_laddr_t *laddr_rule;
+//static ipvs_blklst_t *blklst_rule;
+//static ipvs_tunnel_t *tunnel_rule;
 
 /* Initialization helpers */
 int
 ipvs_start(void)
 {
-	log_message(LOG_DEBUG, "Initializing ipvs 2.4");
-	/* Init IPVS kernel channel */
+	log_message(LOG_DEBUG, "Initializing ipvs 2.6");
+	/* Initialize IPVS module */
 	if (ipvs_init()) {
-		log_message(LOG_INFO,
-				"IPVS : Can't initialize ipvs: %s",
+		log_message(LOG_INFO, "IPVS: Can't initialize ipvs: %s",
 				ipvs_strerror(errno));
-			return IPVS_ERROR;
-		}
+		return IPVS_ERROR;
 	}
 
 	/* Allocate global user rules */
-	urule = (struct ip_vs_rule_user *) MALLOC(sizeof (struct ip_vs_rule_user));
+	//srule = (ipvs_service_t *) MALLOC(sizeof(ipvs_service_t));
+	//drule = (ipvs_dest_t *) MALLOC(sizeof(ipvs_dest_t));
+	//daemonrule = (ipvs_daemon_t *) MALLOC(sizeof(ipvs_daemon_t));
+	//laddr_rule = (ipvs_laddr_t *) MALLOC(sizeof(ipvs_laddr_t));
+	//blklst_rule = (ipvs_blklst_t *) MALLOC(sizeof(ipvs_blklst_t));
+	//tunnel_rule = (ipvs_tunnel_t *) MALLOC(sizeof(ipvs_tunnel_t));
+
 	return IPVS_SUCCESS;
 }
 
@@ -106,312 +125,47 @@ void
 ipvs_stop(void)
 {
 	/* Clean up the room */
-	if (urule)
-		FREE(urule);
-	ipvs_close();
-}
-
-static int
-ipvs_talk(int cmd)
-{
-	int result;
-	if (result = ipvs_command(cmd, urule))
-		if ((cmd == IP_VS_SO_SET_EDITDEST) &&
-		    (errno == ENOENT))
-			result = ipvs_command(IP_VS_SO_SET_ADDDEST, urule);
-	if (result)
-		log_message(LOG_INFO, "IPVS : %s", ipvs_strerror(errno));
-	return IPVS_SUCCESS;
-}
-
-int
-ipvs_syncd_cmd(int cmd, char *ifname, int state, int syncid)
-{
-#ifdef _HAVE_IPVS_SYNCD_
-
-	memset(urule, 0, sizeof (struct ip_vs_rule_user));
-
-	/* prepare user rule */
-	urule->state = state;
-	urule->syncid = syncid;
-	if (ifname != NULL)
-		strncpy(urule->mcast_ifn, ifname, IP_VS_IFNAME_MAXLEN);
-
-	/* Talk to the IPVS channel */
-	return ipvs_talk(cmd);
-
-#else
-	log_message(LOG_INFO, "IPVS : Sync daemon not supported");
-	return IPVS_ERROR;
-#endif
-}
-
-/* IPVS group range rule */
-static int
-ipvs_group_range_cmd(int cmd, virtual_server_group_entry_t *vsg_entry)
-{
-	uint32_t addr_ip;
-	int err = 0;
-
-	/* Parse the whole range */
-	for (addr_ip = inet_sockaddrip4(&vsg_entry->addr);
-	     ((addr_ip >> 24) & 0xFF) <= vsg_entry->range;
-	     addr_ip += 0x01000000) {
-		urule->vaddr = addr_ip;
-		urule->vport = inet_sockaddrport(&vsg_entry->addr);
-
-		/* Talk to the IPVS channel */
-		err = ipvs_talk(cmd);
-	}
-
-	return err;
-}
-
-/* set IPVS group rules */
-static int
-ipvs_group_cmd(int cmd, list vs_group, real_server_t * rs, char * vsgname)
-{
-	virtual_server_group_t *vsg = ipvs_get_group_by_name(vsgname, vs_group);
-	virtual_server_group_entry_t *vsg_entry;
-	list l;
-	element e;
-	int err = 1;
-
-	/* return if jointure fails */
-	if (!vsg) return -1;
-
-	/* visit addr_ip list */
-	l = vsg->addr_ip;
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vsg_entry = ELEMENT_DATA(e);
-		urule->vaddr = inet_sockaddrip4(&vsg_entry->addr);
-		urule->vport = inet_sockaddrport(&vsg_entry->addr);
-
-		/* Talk to the IPVS channel */
-		if (IPVS_ALIVE(cmd, vsg_entry, rs)) {
-			err = ipvs_talk(cmd);
-			IPVS_SET_ALIVE(cmd, vsg_entry);
-		}
-	}
-
-	/* visit vfwmark list */
-	l = vsg->vfwmark;
-	urule->vaddr = 0;
-	urule->vport = 0;
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vsg_entry = ELEMENT_DATA(e);
-		urule->vfwmark = vsg_entry->vfwmark;
-
-		/* Talk to the IPVS channel */
-		if (IPVS_ALIVE(cmd, vsg_entry, rs)) {
-			err = ipvs_talk(cmd);
-			IPVS_SET_ALIVE(cmd, vsg_entry);
-		}
-	}
-
-	/* visit range list */
-	l = vsg->range;
-	urule->vfwmark = 0;
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vsg_entry = ELEMENT_DATA(e);
+	//FREE(srule);
+	//FREE(drule);
+	//FREE(daemonrule);
+	//FREE(laddr_rule);
+	//FREE(blklst_rule);
+	//FREE(tunnel_rule);
 
-		/* Talk to the IPVS channel */
-		if (IPVS_ALIVE(cmd, vsg_entry, rs)) {
-			err = ipvs_group_range_cmd(cmd, vsg_entry);
-			IPVS_SET_ALIVE(cmd, vsg_entry);
-		}
-	}
-
-	return err;
+	ipvs_close();
 }
 
-/* Fill IPVS rule with root vs infos */
 void
-ipvs_set_rule(int cmd, virtual_server_t * vs, real_server_t * rs)
-{
-	/* Clean up target rule */
-	memset(urule, 0, sizeof (struct ip_vs_rule_user));
-
-	strncpy(urule->sched_name, vs->sched, IP_VS_SCHEDNAME_MAXLEN);
-	urule->weight = 1;
-	urule->conn_flags = vs->loadbalancing_kind;
-	urule->netmask = ((u_int32_t) 0xffffffff);
-	urule->protocol = vs->service_type;
-
-	if (!parse_timeout(vs->timeout_persistence, &urule->timeout))
-		log_message(LOG_INFO, "IPVS : Virtual service %s illegal timeout."
-					, FMT_VS(vs));
-
-	if (!parse_bps(vs->bps, &urule->bps))
-		log_message(LOG_INFO, "IPVS : Virtual service [%s]:%d illegal bps."
-					, FMT_VS(vs));
-
-        if (!parse_limit_proportion(vs->limit_proportion, &urule->limit_proportion))
-                log_message(LOG_INFO, "IPVS : Virtual service [%s]:%d illegal limit_proportion."
-                                        , FMT_VS(vs));
-
-	if (urule->timeout != 0 || vs->granularity_persistence)
-		urule->vs_flags = IP_VS_SVC_F_PERSISTENT;
-
-	if (cmd == IP_VS_SO_SET_ADD || cmd == IP_VS_SO_SET_DEL)
-		if (vs->granularity_persistence)
-			urule->netmask = vs->granularity_persistence;
-
-	/* SVR specific */
-	if (rs) {
-		if (cmd == IP_VS_SO_SET_ADDDEST
-		    || cmd == IP_VS_SO_SET_DELDEST
-		    || cmd == IP_VS_SO_SET_EDITDEST) {
-			urule->weight = rs->weight;
-			urule->daddr = inet_sockaddrip4(&rs->addr);
-			urule->dport = inet_sockaddrport(&rs->addr);
-		}
-	}
-}
-
-/* Set/Remove a RS from a VS */
-int
-ipvs_cmd(int cmd, list vs_group, virtual_server_t * vs, real_server_t * rs)
+ipvs_set_timeouts(int tcp_timeout, int tcpfin_timeout, int udp_timeout)
 {
-	int err = 0;
-
-	/* Prepare target rule */
-	ipvs_set_rule(cmd, vs, rs);
-
-	/* Does the service use inhibit flag ? */
-	if (cmd == IP_VS_SO_SET_DELDEST && rs->inhibit) {
-		urule->weight = 0;
-		cmd = IP_VS_SO_SET_EDITDEST;
-	}
-	if (cmd == IP_VS_SO_SET_ADDDEST && rs->inhibit && rs->set)
-		cmd = IP_VS_SO_SET_EDITDEST;
-
-	/* Set flag */
-	if (cmd == IP_VS_SO_SET_ADDDEST && !rs->set)
-		rs->set = 1;
-	if (cmd == IP_VS_SO_SET_DELDEST && rs->set)
-		rs->set = 0;
+	ipvs_timeout_t to;
 
-	/* Set vs rule and send to kernel */
-	if (vs->vsgname) {
-		err = ipvs_group_cmd(cmd, vs_group, rs, vs->vsgname);
-	} else {
-		if (vs->vfwmark) {
-			urule->vfwmark = vs->vfwmark;
-		} else {
-			urule->vaddr = inet_sockaddrip4(&vs->addr);
-			urule->vport = inet_sockaddrport(&vs->addr);
-		}
-
-		/* Talk to the IPVS channel */
-		err = ipvs_talk(cmd);
-	}
-
-	return err;
-}
-
-/* Remove a specific vs group entry */
-int
-ipvs_group_remove_entry(virtual_server_t *vs, virtual_server_group_entry_t *vsge)
-{
-	real_server_t *rs;
-	int err = 0;
-	element e;
-	list l = vs->rs;
-
-	/* Clean target rules */
-	memset(urule, 0, sizeof (struct ip_vs_rule_user));
-
-	/* Process realserver queue */
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		rs = ELEMENT_DATA(e);
-
-		if (rs->alive) {
-			/* Prepare the IPVS rule */
-			if (urule->daddr) {
-				/* Setting IPVS rule with vs root rs */
-				ipvs_set_rule(IP_VS_SO_SET_DELDEST, vs, rs);
-			} else {
-				urule->weight = rs->weight;
-				urule->daddr = inet_sockaddrip4(&rs->addr);
-				urule->dport = inet_sockaddrport(&rs->addr);
-			}
-
-			/* Set vs rule */
-			if (vsge->range) {
-				ipvs_group_range_cmd(IP_VS_SO_SET_DELDEST, vsge);
-			} else {
-				urule->vfwmark = vsge->vfwmark;
-				urule->vaddr = inet_sockaddrip4(&vsge->addr);
-				urule->vport = inet_sockaddrport(&vsge->addr);
-
-				/* Talk to the IPVS channel */
-				err = ipvs_talk(IP_VS_SO_SET_DELDEST);
-			}
-		}
-	}
-
-	/* Remove VS entry */
-	if (vsge->range)
-		err = ipvs_group_range_cmd(IP_VS_SO_SET_DEL, vsge);
-	else
-		err = ipvs_talk(IP_VS_SO_SET_DEL);
-	return err;
-}
-
-#else					/* KERNEL 2.6 IPVS handling */
-
-/* Global module def IPVS rules */
-static ipvs_service_t *srule;
-static ipvs_dest_t *drule;
-static ipvs_daemon_t *daemonrule;
-static ipvs_laddr_t *laddr_rule;
-static ipvs_blklst_t *blklst_rule;
-static ipvs_tunnel_t *tunnel_rule;
-
-/* Initialization helpers */
-int
-ipvs_start(void)
-{
-	log_message(LOG_DEBUG, "Initializing ipvs 2.6");
-	/* Initialize IPVS module */
-	if (ipvs_init()) {
-		log_message(LOG_INFO, "IPVS: Can't initialize ipvs: %s",
-				ipvs_strerror(errno));
-		return IPVS_ERROR;
-	}
+	if (!tcp_timeout && !tcpfin_timeout && !udp_timeout)
+		return;
 
-	/* Allocate global user rules */
-	srule = (ipvs_service_t *) MALLOC(sizeof(ipvs_service_t));
-	drule = (ipvs_dest_t *) MALLOC(sizeof(ipvs_dest_t));
-	daemonrule = (ipvs_daemon_t *) MALLOC(sizeof(ipvs_daemon_t));
-	laddr_rule = (ipvs_laddr_t *) MALLOC(sizeof(ipvs_laddr_t));
-	blklst_rule = (ipvs_blklst_t *) MALLOC(sizeof(ipvs_blklst_t));
-	tunnel_rule = (ipvs_tunnel_t *) MALLOC(sizeof(ipvs_tunnel_t));
+	to.tcp_timeout = tcp_timeout;
+	to.tcp_fin_timeout = tcpfin_timeout;
+	to.udp_timeout = udp_timeout;
 
-	return IPVS_SUCCESS;
-}
-
-void
-ipvs_stop(void)
-{
-	/* Clean up the room */
-	FREE(srule);
-	FREE(drule);
-	FREE(daemonrule);
-	FREE(laddr_rule);
-	FREE(blklst_rule);
-	FREE(tunnel_rule);
-
-	ipvs_close();
+	ipvs_set_timeout(&to);
 }
 
 /* Send user rules to IPVS module */
 static int
-ipvs_talk(int cmd)
+ipvs_talk(int cmd, 
+	  ipvs_service_t *srule, 
+	  ipvs_dest_t *drule, 
+	  ipvs_daemon_t *daemonrule, 
+	  ipvs_laddr_t *laddr_rule, 
+	  ipvs_blklst_t *blklst_rule,
+	  ipvs_tunnel_t *tunnel_rule, 
+	  bool ignore_error)
 {
 	int result = -1;
 
+	if (no_ipvs)
+		return result;
+
 	switch (cmd) {
 		case IP_VS_SO_SET_STARTDAEMON:
 			result = ipvs_start_daemon(daemonrule);
@@ -419,6 +173,9 @@ ipvs_talk(int cmd)
 		case IP_VS_SO_SET_STOPDAEMON:
 			result = ipvs_stop_daemon(daemonrule);
 			break;
+		case IP_VS_SO_SET_FLUSH:
+			result = ipvs_flush();
+			break;
 		case IP_VS_SO_SET_ADD:
 			result = ipvs_add_service(srule);
 			break;
@@ -431,18 +188,6 @@ ipvs_talk(int cmd)
 		case IP_VS_SO_SET_ZERO:
 			result = ipvs_zero_service(srule);
 			break;
-		case IP_VS_SO_SET_ADDLADDR:
-			result = ipvs_add_laddr(srule, laddr_rule);
-			break;
-		case IP_VS_SO_SET_DELLADDR:
-			result = ipvs_del_laddr(srule, laddr_rule);
-			break;
-                case IP_VS_SO_SET_ADDBLKLST:
-                        result = ipvs_add_blklst(srule, blklst_rule);
-                        break;
-                case IP_VS_SO_SET_DELBLKLST:
-                        result = ipvs_del_blklst(srule, blklst_rule);
-			break;
 		case IP_VS_SO_SET_ADDDEST:
 			result = ipvs_add_dest(srule, drule);
 			break;
@@ -451,8 +196,22 @@ ipvs_talk(int cmd)
 			break;
 		case IP_VS_SO_SET_EDITDEST:
 			if ((result = ipvs_update_dest(srule, drule)) &&
-			    (result == EDPVS_NOTEXIST))
+			    (errno == EDPVS_NOTEXIST)) {
+				cmd = IP_VS_SO_SET_ADDDEST;
 				result = ipvs_add_dest(srule, drule);
+			}
+			break;
+		case IP_VS_SO_SET_ADDLADDR:
+			result = ipvs_add_laddr(srule, laddr_rule);
+			break;
+		case IP_VS_SO_SET_DELLADDR:
+			result = ipvs_del_laddr(srule, laddr_rule);
+			break;
+		case IP_VS_SO_SET_ADDBLKLST:
+			result = ipvs_add_blklst(srule, blklst_rule);
+			break;
+		case IP_VS_SO_SET_DELBLKLST:
+			result = ipvs_del_blklst(srule, blklst_rule);
 			break;
 		case IP_VS_SO_SET_ADDTUNNEL:
 			result = ipvs_add_tunnel(tunnel_rule);
@@ -462,224 +221,242 @@ ipvs_talk(int cmd)
 			break;
 	}
 
-	if (result) {
-		if (result == EDPVS_EXIST && (cmd == IP_VS_SO_SET_ADD || cmd == IP_VS_SO_SET_ADDDEST))
+	if (ignore_error)
+		result = 0;
+	else if (result) {
+		if (errno == EEXIST &&
+			(cmd == IP_VS_SO_SET_ADD || cmd == IP_VS_SO_SET_ADDDEST))
 			result = 0;
-		else if (result == EDPVS_NOTEXIST && (cmd == IP_VS_SO_SET_DEL || cmd == IP_VS_SO_SET_DELDEST))
+		else if (errno == ENOENT &&
+			(cmd == IP_VS_SO_SET_DEL || cmd == IP_VS_SO_SET_DELDEST))
 			result = 0;
-		log_message(LOG_INFO, "IPVS: %s", ipvs_strerror(errno));
+		log_message(LOG_INFO, "IPVS (cmd %d, errno %d): %s", cmd, errno, ipvs_strerror(errno));
 	}
-	return result? IPVS_ERROR:IPVS_SUCCESS;
+	return result;
 }
 
-int
-ipvs_syncd_cmd(int cmd, char *ifname, int state, int syncid)
+#ifdef _WITH_VRRP_
+/* Note: This function is called in the context of the vrrp child process, not the checker process */
+void
+ipvs_syncd_cmd(int cmd, const struct lvs_syncd_config *config, int state, bool ignore_interface, bool ignore_error)
 {
-	memset(daemonrule, 0, sizeof(ipvs_daemon_t));
+	ipvs_daemon_t daemonrule;
+
+	memset(&daemonrule, 0, sizeof(ipvs_daemon_t));
 
 	/* prepare user rule */
-	daemonrule->state = state;
-	daemonrule->syncid = syncid;
-	if (ifname != NULL)
-		strncpy(daemonrule->mcast_ifn, ifname, IP_VS_IFNAME_MAXLEN);
+	daemonrule.state = state;
+	if (config) {
+		daemonrule.syncid = (int)config->syncid;
+		if (!ignore_interface)
+			strcpy_safe(daemonrule.mcast_ifn, config->ifname);
+#ifdef _HAVE_IPVS_SYNCD_ATTRIBUTES_
+		if (cmd == IPVS_STARTDAEMON) {
+			if (config->sync_maxlen)
+				daemonrule.sync_maxlen = config->sync_maxlen;
+			if (config->mcast_port)
+				daemonrule.mcast_port = config->mcast_port;
+			if (config->mcast_ttl)
+				daemonrule.mcast_ttl = config->mcast_ttl;
+			if (config->mcast_group.ss_family == AF_INET) {
+				daemonrule.mcast_af = AF_INET;
+				daemonrule.mcast_group.ip = ((const struct sockaddr_in *)&config->mcast_group)->sin_addr.s_addr;
+			}
+			else if (config->mcast_group.ss_family == AF_INET6) {
+				daemonrule.mcast_af = AF_INET6;
+				memcpy(&daemonrule.mcast_group.in6, &((const struct sockaddr_in6 *)&config->mcast_group)->sin6_addr, sizeof(daemonrule.mcast_group.in6));
+			}
+		}
+#endif
+	}
 
 	/* Talk to the IPVS channel */
-	ipvs_talk(cmd);
-	return IPVS_SUCCESS;
+	ipvs_talk(cmd, NULL, NULL, &daemonrule, NULL, NULL, NULL, ignore_error);
 }
+#endif
 
-/* IPVS group range rule */
-static void
-ipvs_group_range_cmd(int cmd, virtual_server_group_entry_t *vsg_entry)
+void
+ipvs_flush_cmd(void)
 {
-	uint32_t addr_ip, ip;
-
-	if (vsg_entry->addr.ss_family == AF_INET6) {
-		inet_sockaddrip6(&vsg_entry->addr, &srule->addr.in6);
-		ip = srule->addr.in6.s6_addr32[3];
-	} else {
-		ip = inet_sockaddrip4(&vsg_entry->addr);
-	}
+	ipvs_talk(IP_VS_SO_SET_FLUSH, NULL, NULL, NULL, NULL, NULL, NULL, false);
+}
 
-	/* Set Address Family */
-	srule->af = vsg_entry->addr.ss_family;
+/* IPVS group range rule */
+static int
+ipvs_group_range_cmd(int cmd, ipvs_service_t *srule, ipvs_dest_t *drule, virtual_server_group_entry_t *vsg_entry)
+{
+	uint32_t i;
 
-	/* Parse the whole range */
-	for (addr_ip = ip;
-	     ((addr_ip >> 24) & 0xFF) <= vsg_entry->range;
-	     addr_ip += 0x01000000) {
-		if (srule->af == AF_INET6) {
-			if (srule->netmask == 0xffffffff)
-				srule->netmask = 128;
-			srule->addr.in6.s6_addr32[3] = addr_ip;
-		} else {
-			srule->addr.ip = addr_ip;
-		}
-		srule->port = inet_sockaddrport(&vsg_entry->addr);
+	/* Set address and port */
+	if (vsg_entry->addr.ss_family == AF_INET6)
+		inet_sockaddrip6(&vsg_entry->addr, &srule->nf_addr.in6);
+	else
+		srule->nf_addr.ip = inet_sockaddrip4(&vsg_entry->addr);
 
+	/* Process the whole range */
+	for (i = 0; i <= vsg_entry->range; i++) {
 		/* Talk to the IPVS channel */
-		ipvs_talk(cmd);
+		if (ipvs_talk(cmd, srule, drule, NULL, NULL, NULL, NULL, false))
+			return -1;
+
+		if (srule->af == AF_INET)
+			srule->nf_addr.ip += htonl(1);
+		else
+			srule->nf_addr.in6.s6_addr16[7] = htons(ntohs(srule->nf_addr.in6.s6_addr16[7]) + 1);
 	}
+
+	return 0;
 }
 
 /* set IPVS group rules */
-static int
-ipvs_group_cmd(int cmd, list vs_group, real_server_t * rs, virtual_server_t * vs)
+static bool
+is_vsge_alive(virtual_server_group_entry_t *vsge, virtual_server_t *vs)
 {
-	virtual_server_group_t *vsg = ipvs_get_group_by_name(vs->vsgname, vs_group);
-	virtual_server_group_entry_t *vsg_entry;
-	list l;
-	element e;
-
-	/* return if jointure fails */
-	if (!vsg) return IPVS_ERROR;
+	if (vsge->is_fwmark) {
+		if (vs->af == AF_INET)
+			return !!vsge->fwm4_alive;
+		else
+			return !!vsge->fwm6_alive;
+	}
+	else if (vs->service_type == IPPROTO_TCP)
+		return !!vsge->tcp_alive;
+	else if (vs->service_type == IPPROTO_UDP)
+		return !!vsge->udp_alive;
+	else
+		return !!vsge->sctp_alive;
+}
 
-	/* visit addr_ip list */
-	l = vsg->addr_ip;
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vsg_entry = ELEMENT_DATA(e);
-		srule->af = vsg_entry->addr.ss_family;
-		if (vsg_entry->addr.ss_family == AF_INET6) {
-			if (srule->netmask == 0xffffffff)
-				srule->netmask = 128;
-			inet_sockaddrip6(&vsg_entry->addr, &srule->addr.in6);
-		} else
-			srule->addr.ip = inet_sockaddrip4(&vsg_entry->addr);
-		srule->port = inet_sockaddrport(&vsg_entry->addr);
+static void
+update_vsge_alive_count(virtual_server_group_entry_t *vsge, const virtual_server_t *vs, bool up)
+{
+	unsigned *alive_p;
 
-		/* Talk to the IPVS channel */
-		if (IPVS_ALIVE(cmd, vsg_entry, rs)) {
-			if (ipvs_talk(cmd) != IPVS_SUCCESS)
-				return IPVS_ERROR;
-			IPVS_SET_ALIVE(cmd, vsg_entry);
-		}
+	if (vsge->is_fwmark) {
+		if (vs->af == AF_INET)
+			alive_p = &vsge->fwm4_alive;
+		else
+			alive_p = &vsge->fwm6_alive;
 	}
+	else if (vs->service_type == IPPROTO_TCP)
+		alive_p = &vsge->tcp_alive;
+	else if (vs->service_type == IPPROTO_UDP)
+		alive_p = &vsge->udp_alive;
+	else
+		alive_p = &vsge->sctp_alive;
 
-	/* visit vfwmark list */
-	l = vsg->vfwmark;
-	srule->addr.ip = 0;
-	srule->af = 0;
-	srule->port = 0;
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vsg_entry = ELEMENT_DATA(e);
-		srule->af = AF_INET;
-		/* Need to get address family from first real server */
-		if (vs->rs && !LIST_ISEMPTY(vs->rs) &&
-		    (((real_server_t *)ELEMENT_DATA(LIST_HEAD(vs->rs)))->addr.ss_family == AF_INET6)) {
-			srule->af = AF_INET6;
-			srule->netmask = 128;
-		}
-		srule->fwmark = vsg_entry->vfwmark;
+	if (up)
+		(*alive_p)++;
+	else
+		(*alive_p)--;
+}
 
-		/* Talk to the IPVS channel */
-		if (IPVS_ALIVE(cmd, vsg_entry, rs)) {
-			if (ipvs_talk(cmd) != IPVS_SUCCESS)
-				return IPVS_ERROR;
-			IPVS_SET_ALIVE(cmd, vsg_entry);
-		}
-	}
+static void
+set_vsge_alive(virtual_server_group_entry_t *vsge, const virtual_server_t *vs)
+{
+	update_vsge_alive_count(vsge, vs, true);
+}
 
-	/* visit range list */
-	l = vsg->range;
-	srule->fwmark = 0;
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vsg_entry = ELEMENT_DATA(e);
+static void
+unset_vsge_alive(virtual_server_group_entry_t *vsge, const virtual_server_t *vs)
+{
+	update_vsge_alive_count(vsge, vs, false);
+}
 
-		/* Talk to the IPVS channel */
-		if (IPVS_ALIVE(cmd, vsg_entry, rs)) {
-			ipvs_group_range_cmd(cmd, vsg_entry);
-			IPVS_SET_ALIVE(cmd, vsg_entry);
-		}
+static bool
+ipvs_change_needed(int cmd, virtual_server_group_entry_t *vsge, virtual_server_t *vs, real_server_t *rs)
+{
+	unsigned count;
+
+	if (cmd == IP_VS_SO_SET_ADD)
+		return !is_vsge_alive(vsge, vs);
+	else if (cmd == IP_VS_SO_SET_DEL) {
+		count = vsge->is_fwmark ? (vs->af == AF_INET ? vsge->fwm4_alive : vsge->fwm6_alive) :
+			vs->service_type == IPPROTO_TCP ? vsge->tcp_alive :
+			vs->service_type == IPPROTO_UDP ? vsge->udp_alive : vsge->sctp_alive;
+
+		return (count == 1);
 	}
-	return IPVS_SUCCESS;
+	else if (cmd == IP_VS_SO_SET_ADDDEST)
+		return !rs->alive;
+	else if (cmd == IP_VS_SO_SET_DELDEST)
+		return rs->alive;
+	else /* cmd == IP_VS_SO_SET_EDITDEST */
+		return true;
 }
 
-/* Fill IPVS rule with root vs infos */
-void
-ipvs_set_rule(int cmd, virtual_server_t * vs, real_server_t * rs)
+static void
+ipvs_set_vsge_alive_state(int cmd, virtual_server_group_entry_t *vsge, virtual_server_t *vs)
 {
-	/* Clean target rule */
-	memset(drule, 0, sizeof(ipvs_dest_t));
+	if (cmd == IP_VS_SO_SET_ADD)
+		set_vsge_alive(vsge, vs);
+	else if (cmd == IP_VS_SO_SET_DEL)
+		unset_vsge_alive(vsge, vs);
+}
+
+static int
+ipvs_group_cmd(int cmd, ipvs_service_t *srule, ipvs_dest_t *drule, virtual_server_t *vs, real_server_t *rs)
+{
+	virtual_server_group_t *vsg = vs->vsg;
+	virtual_server_group_entry_t *vsg_entry;
+	element e;
 
-	drule->weight = 1;
-	drule->u_threshold = 0;
-	drule->l_threshold = 0;
-	drule->conn_flags = vs->loadbalancing_kind;
-	strncpy(srule->sched_name, vs->sched, IP_VS_SCHEDNAME_MAXLEN);
-	srule->netmask = (vs->addr.ss_family == AF_INET6) ? 128 : ((u_int32_t) 0xffffffff);
-	srule->protocol = vs->service_type;
-	srule->conn_timeout = vs->conn_timeout;
-	snprintf(srule->srange, 256, "%s", vs->srange);
-	snprintf(srule->drange, 256, "%s", vs->drange);
-	snprintf(srule->iifname, IFNAMSIZ, "%s", vs->iifname);
-	snprintf(srule->oifname, IFNAMSIZ, "%s", vs->oifname);
-
-	if (!parse_timeout(vs->timeout_persistence, &srule->timeout))
-		log_message(LOG_INFO, "IPVS : Virtual service %s illegal timeout."
-				    , FMT_VS(vs));
-
-	if (!parse_bps(vs->bps, &srule->bps))
-		log_message(LOG_INFO, "IPVS : Virtual service [%s]:%d illegal bps."
-				 	, FMT_VS(vs));
-
-	if (!parse_limit_proportion(vs->limit_proportion, &srule->limit_proportion))
-		log_message(LOG_INFO, "IPVS : Virtual service [%s]:%d illegal limit_proportion."
-					, FMT_VS(vs));
-
-	if (srule->timeout != 0 || vs->granularity_persistence)
-		srule->flags |= IP_VS_SVC_F_PERSISTENT;
-
-	/* Only for UDP services */
-	if (vs->ops == 1 && srule->protocol == IPPROTO_UDP)
-		srule->flags |= IP_VS_SVC_F_ONEPACKET;
-
-	if (cmd == IP_VS_SO_SET_ADD || cmd == IP_VS_SO_SET_DEL)
-		if (vs->granularity_persistence)
-			srule->netmask = vs->granularity_persistence;
-
-	if (vs->syn_proxy)
-		srule->flags |= IP_VS_CONN_F_SYNPROXY;
+	/* return if jointure fails */
+	if (!vsg)
+		return 0;
+	/* visit addr_ip list */
+	LIST_FOREACH(vsg->addr_range, vsg_entry, e) {
+		if (ipvs_change_needed(cmd, vsg_entry, vs, rs)) {
+			srule->user.port = inet_sockaddrport(&vsg_entry->addr);
 
-	if (!strcmp(vs->sched, "conhash")) {
-		if (vs->hash_target) {
-			if ((srule->protocol != IPPROTO_UDP) &&
-			    (vs->hash_target == IP_VS_SVC_F_QID_HASH)) {
-				log_message(LOG_ERR, "qid hash can only be set in udp service");
+			if (vsg_entry->range) {
+				if (ipvs_group_range_cmd(cmd, srule, drule, vsg_entry))
+					return -1;
 			} else {
-				srule->flags |= vs->hash_target;
+				if (vsg_entry->addr.ss_family == AF_INET6)
+					inet_sockaddrip6(&vsg_entry->addr, &srule->nf_addr.in6);
+				else
+					srule->nf_addr.ip = inet_sockaddrip4(&vsg_entry->addr);
+
+				/* Talk to the IPVS channel */
+				if (ipvs_talk(cmd, srule, drule, NULL, NULL, NULL, NULL, false))
+					return -1;
 			}
-		} else {
-			srule->flags |= IP_VS_SVC_F_SIP_HASH; //default
 		}
+		ipvs_set_vsge_alive_state(cmd, vsg_entry, vs);
 	}
 
-	/* SVR specific */
-	if (rs) {
-		if (cmd == IP_VS_SO_SET_ADDDEST || cmd == IP_VS_SO_SET_DELDEST ||
-		    cmd == IP_VS_SO_SET_EDITDEST) {
-			drule->af = rs->addr.ss_family;
-			if (rs->addr.ss_family == AF_INET6)
-				inet_sockaddrip6(&rs->addr, &drule->addr.in6);
-			else
-				drule->addr.ip = inet_sockaddrip4(&rs->addr);
-			drule->port = inet_sockaddrport(&rs->addr);
-			drule->weight = rs->weight;	
-			drule->u_threshold = rs->u_threshold;
-			drule->l_threshold = rs->l_threshold;
+	/* visit vfwmark list */
+	memset(&srule->nf_addr, 0, sizeof(srule->nf_addr));
+	srule->user.port = 0;
+	LIST_FOREACH(vsg->vfwmark, vsg_entry, e) {
+		srule->user.fwmark = vsg_entry->vfwmark;
+
+		/* Talk to the IPVS channel */
+		if (ipvs_change_needed(cmd, vsg_entry, vs, rs)) {
+			if (ipvs_talk(cmd, srule, drule, NULL, NULL, NULL, NULL, false))
+				return -1;
 		}
+		ipvs_set_vsge_alive_state(cmd, vsg_entry, vs);
 	}
+
+	return 0;
 }
 
 static void
-ipvs_laddr_range_cmd(int cmd, local_addr_entry *laddr_entry)
+ipvs_laddr_range_cmd(int cmd, local_addr_entry *laddr_entry, virtual_server_t *vs)
 {
 	uint32_t addr_ip, ip;
+	ipvs_laddr_t laddr_rule;
+	ipvs_service_t srule;
 
-	memset(laddr_rule, 0, sizeof(ipvs_laddr_t));
-	laddr_rule->af = laddr_entry->addr.ss_family;
+	/* Allocate the room */
+	ipvs_set_srule(cmd, &srule, vs);
+
+	memset(&laddr_rule, 0, sizeof(ipvs_laddr_t));
+	laddr_rule.af = laddr_entry->addr.ss_family;
 	if (laddr_entry->addr.ss_family == AF_INET6) {
-		inet_sockaddrip6(&laddr_entry->addr, &laddr_rule->addr.in6);
-		ip = laddr_rule->addr.in6.s6_addr32[3];
+		inet_sockaddrip6(&laddr_entry->addr, &laddr_rule.addr.in6);
+		ip = laddr_rule.addr.in6.s6_addr32[3];
 	} else {
 		ip = inet_sockaddrip4(&laddr_entry->addr);
 	}
@@ -688,47 +465,50 @@ ipvs_laddr_range_cmd(int cmd, local_addr_entry *laddr_entry)
 	for (addr_ip = ip; ((addr_ip >> 24) & 0xFF) <= laddr_entry->range;
 						     addr_ip += 0x01000000) {
 		if (laddr_entry->addr.ss_family == AF_INET6)
-			laddr_rule->addr.in6.s6_addr32[3] = addr_ip;
+			laddr_rule.addr.in6.s6_addr32[3] = addr_ip;
 		else
-			laddr_rule->addr.ip = addr_ip;
-		strncpy(laddr_rule->ifname, laddr_entry->ifname, sizeof(laddr_rule->ifname));
+			laddr_rule.addr.ip = addr_ip;
+		strncpy(laddr_rule.ifname, laddr_entry->ifname, sizeof(laddr_rule.ifname));
 
-		ipvs_talk(cmd);
+		ipvs_talk(cmd, &srule, NULL, NULL, &laddr_rule, NULL, NULL, false);
 	}
 }
 
 static void
-ipvs_laddr_group_cmd(int cmd, local_addr_group *laddr_group)
+ipvs_laddr_group_cmd(int cmd, local_addr_group *laddr_group, virtual_server_t *vs, ipvs_service_t *srule)
 {
-	local_addr_entry *laddr_entry;
-	list l;
-	element e;
+        local_addr_entry *laddr_entry;
+        ipvs_laddr_t laddr_rule;
+        list l;
+        element e;
 
-	if (!laddr_group)
-		return;
+        if (!laddr_group)
+                return;
 
-	l = laddr_group->addr_ip;
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		laddr_entry = ELEMENT_DATA(e);
-		memset(laddr_rule, 0, sizeof(ipvs_laddr_t));
-		laddr_rule->af = laddr_entry->addr.ss_family;
-		if (laddr_entry->addr.ss_family == AF_INET6)
-			inet_sockaddrip6(&laddr_entry->addr, &laddr_rule->addr.in6);
-		else
-			laddr_rule->addr.ip = inet_sockaddrip4(&laddr_entry->addr);
-		strncpy(laddr_rule->ifname, laddr_entry->ifname, sizeof(laddr_rule->ifname));
-		ipvs_talk(cmd);
-	}
+        l = laddr_group->addr_ip;
+        for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+                laddr_entry = ELEMENT_DATA(e);
+                memset(&laddr_rule, 0, sizeof(ipvs_laddr_t));
+                laddr_rule.af = laddr_entry->addr.ss_family;
+                if (laddr_entry->addr.ss_family == AF_INET6)
+                        inet_sockaddrip6(&laddr_entry->addr, &laddr_rule.addr.in6);
+                else
+                        laddr_rule.addr.ip = inet_sockaddrip4(&laddr_entry->addr);
+                strncpy(laddr_rule.ifname, laddr_entry->ifname, sizeof(laddr_rule.ifname));
 
-	l = laddr_group->range;
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		laddr_entry = ELEMENT_DATA(e);
-		ipvs_laddr_range_cmd(cmd, laddr_entry);
-	}
+                ipvs_talk(cmd, srule, NULL, NULL, &laddr_rule, NULL, NULL, false);
+        }
+
+        l = laddr_group->range;
+        for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+                laddr_entry = ELEMENT_DATA(e);
+                ipvs_laddr_range_cmd(cmd, laddr_entry, vs);
+        }
 }
 
+
 static void
-ipvs_laddr_vsg_cmd(int cmd, list vs_group, virtual_server_t * vs, local_addr_group *laddr_group)
+ipvs_laddr_vsg_cmd(int cmd, list vs_group, virtual_server_t * vs, local_addr_group *laddr_group, ipvs_service_t *srule)
 {
 	virtual_server_group_t *vsg = ipvs_get_group_by_name(vs->vsgname, vs_group);
 	virtual_server_group_entry_t *vsg_entry;
@@ -745,27 +525,27 @@ ipvs_laddr_vsg_cmd(int cmd, list vs_group, virtual_server_t * vs, local_addr_gro
 
 		srule->af = vsg_entry->addr.ss_family;
 		if (srule->af == AF_INET6) {
-			if (srule->netmask == 0xffffffff)
-				srule->netmask = 128;
-			inet_sockaddrip6(&vsg_entry->addr, &srule->addr.in6);
+			if (srule->user.netmask == 0xffffffff)
+				srule->user.netmask = 128;
+			inet_sockaddrip6(&vsg_entry->addr, &srule->nf_addr.in6);
 		} else
-			srule->addr.ip = inet_sockaddrip4(&vsg_entry->addr);
-		srule->port = inet_sockaddrport(&vsg_entry->addr);
+			srule->nf_addr.ip = inet_sockaddrip4(&vsg_entry->addr);
+		srule->user.port = inet_sockaddrport(&vsg_entry->addr);
 
 		/* local address group channel */
-		ipvs_laddr_group_cmd(cmd, laddr_group);
+		ipvs_laddr_group_cmd(cmd, laddr_group, vs, srule);
 	}
 
 	/* visit range list */
-	l = vsg->range;
+	l = vsg->addr_range;
 	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
 		vsg_entry = ELEMENT_DATA(e);
 		uint32_t addr_ip, ip;
 		
 		srule->af = vsg_entry->addr.ss_family;
 		if (srule->af == AF_INET6) {
-			inet_sockaddrip6(&vsg_entry->addr, &srule->addr.in6);
-			ip = srule->addr.in6.s6_addr32[3];
+			inet_sockaddrip6(&vsg_entry->addr, &srule->nf_addr.in6);
+			ip = srule->nf_addr.in6.s6_addr32[3];
 		} else {
 			ip = inet_sockaddrip4(&vsg_entry->addr);
 		}
@@ -775,84 +555,79 @@ ipvs_laddr_vsg_cmd(int cmd, list vs_group, virtual_server_t * vs, local_addr_gro
 		     ((addr_ip >> 24) & 0xFF) <= vsg_entry->range;
 		     addr_ip += 0x01000000) {
 			if (srule->af == AF_INET6) {
-				if (srule->netmask == 0xffffffff)
-					srule->netmask = 128;
-				srule->addr.in6.s6_addr32[3] = addr_ip;
+				if (srule->user.netmask == 0xffffffff)
+					srule->user.netmask = 128;
+				srule->nf_addr.in6.s6_addr32[3] = addr_ip;
 			} else {
-				srule->addr.ip = addr_ip;
+				srule->nf_addr.ip = addr_ip;
 			}
-			srule->port = inet_sockaddrport(&vsg_entry->addr);
+			srule->user.port = inet_sockaddrport(&vsg_entry->addr);
 
-			ipvs_laddr_group_cmd(cmd, laddr_group);
+			ipvs_laddr_group_cmd(cmd, laddr_group, vs, srule);
 		}
 	}
 }
 
 static int
-ipvs_laddr_cmd(int cmd, list vs_group, virtual_server_t * vs)
+ipvs_laddr_cmd(int cmd, ipvs_service_t *srule, virtual_server_t *vs)
 {
-	local_addr_group *laddr_group = ipvs_get_laddr_group_by_name(vs->local_addr_gname, 
-							check_data->laddr_group);
-	if (!laddr_group) {
-		log_message(LOG_ERR, "No address in group %s", vs->local_addr_gname);
-		return IPVS_ERROR;
-	}
-
-	memset(srule, 0, sizeof(ipvs_service_t));
-	srule->netmask = (vs->addr.ss_family == AF_INET6) ? 128 : ((u_int32_t) 0xffffffff);
-	srule->protocol = vs->service_type;
-
-	if(vs->vsgname) {
-		ipvs_laddr_vsg_cmd(cmd, vs_group, vs, laddr_group);
-	} else {
-		if (!vs->vfwmark) {
-			srule->af = vs->addr.ss_family;
-			if (vs->addr.ss_family == AF_INET6)
-				inet_sockaddrip6(&vs->addr, &srule->addr.in6);
-			else
-				srule->addr.ip = inet_sockaddrip4(&vs->addr);
-			srule->port = inet_sockaddrport(&vs->addr);
+        local_addr_group *laddr_group;
+        laddr_group = ipvs_get_laddr_group_by_name(vs->local_addr_gname, check_data->laddr_group);
+        if (!laddr_group) {
+                log_message(LOG_ERR, "No address in group %s", vs->local_addr_gname);
+                return -1;// return IPVS_ERROR;
+        }
 
-			ipvs_laddr_group_cmd(cmd, laddr_group);
-		}
-	}
+        if (vs->vsgname) {
+                ipvs_laddr_vsg_cmd(cmd, check_data->vs_group, vs, laddr_group, srule);
+        } else {
+                if (!vs->vfwmark) {
+                        srule->af = vs->addr.ss_family;
+                        if (vs->addr.ss_family == AF_INET6)
+                                inet_sockaddrip6(&vs->addr, &srule->nf_addr.in6);
+                        else
+                                srule->nf_addr.ip = inet_sockaddrip4(&vs->addr);
+                        srule->user.port = inet_sockaddrport(&vs->addr);
+                        ipvs_laddr_group_cmd(cmd, laddr_group, vs, srule);
+                }
+        }
 
-	return IPVS_SUCCESS;
+        return IPVS_SUCCESS;
 }
 
-
-/*check blacklist addr*/
-
 static void
-ipvs_blklst_range_cmd(int cmd, blklst_addr_entry *blklst_entry)
+ipvs_blklst_range_cmd(int cmd, blklst_addr_entry *blklst_entry, ipvs_service_t *srule)
 {
         uint32_t addr_ip, ip;
+	ipvs_blklst_t blklst_rule;
 
-        memset(blklst_rule, 0, sizeof(ipvs_blklst_t));
-        blklst_rule->af = blklst_entry->addr.ss_family;
+        memset(&blklst_rule, 0, sizeof(ipvs_blklst_t));
+        blklst_rule.af = blklst_entry->addr.ss_family;
         if (blklst_entry->addr.ss_family == AF_INET6) {
-                inet_sockaddrip6(&blklst_entry->addr, &blklst_rule->addr.in6);
-                ip = blklst_rule->addr.in6.s6_addr32[3];
+                inet_sockaddrip6(&blklst_entry->addr, &blklst_rule.addr.in6);
+                ip = blklst_rule.addr.in6.s6_addr32[3];
         } else {
                 ip = inet_sockaddrip4(&blklst_entry->addr);
         }
 
 
-        for (addr_ip = ip; ((addr_ip >> 24) & 0xFF) <= blklst_entry->range;
-                                                     addr_ip += 0x01000000) {
+        for (addr_ip = ip;
+            ((addr_ip >> 24) & 0xFF) <= blklst_entry->range;
+            addr_ip += 0x01000000) {
                 if (blklst_entry->addr.ss_family == AF_INET6)
-                        blklst_rule->addr.in6.s6_addr32[3] = addr_ip;
+                        blklst_rule.addr.in6.s6_addr32[3] = addr_ip;
                 else
-                        blklst_rule->addr.ip = addr_ip;
+                        blklst_rule.addr.ip = addr_ip;
 
-                ipvs_talk(cmd);
+		ipvs_talk(cmd, srule, NULL, NULL, NULL, &blklst_rule, NULL, false);
         }
 }
 
 static void
-ipvs_blklst_group_cmd(int cmd, blklst_addr_group *blklst_group)
+ipvs_blklst_group_cmd(int cmd, blklst_addr_group *blklst_group, ipvs_service_t *srule)
 {
         blklst_addr_entry *blklst_entry;
+	ipvs_blklst_t blklst_rule;
         list l;
         element e;
 
@@ -862,24 +637,28 @@ ipvs_blklst_group_cmd(int cmd, blklst_addr_group *blklst_group)
         l = blklst_group->addr_ip;
         for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
                 blklst_entry = ELEMENT_DATA(e);
-                memset(blklst_rule, 0, sizeof(ipvs_blklst_t));
-                blklst_rule->af = blklst_entry->addr.ss_family;
+                memset(&blklst_rule, 0, sizeof(ipvs_blklst_t));
+                blklst_rule.af = blklst_entry->addr.ss_family;
                 if (blklst_entry->addr.ss_family == AF_INET6)
-                        inet_sockaddrip6(&blklst_entry->addr, &blklst_rule->addr.in6);
+                        inet_sockaddrip6(&blklst_entry->addr, &blklst_rule.addr.in6);
                 else
-                        blklst_rule->addr.ip = inet_sockaddrip4(&blklst_entry->addr);
-                ipvs_talk(cmd);
+                        blklst_rule.addr.ip = inet_sockaddrip4(&blklst_entry->addr);
+		ipvs_talk(cmd, srule, NULL, NULL, NULL, &blklst_rule, NULL, false);
         }
 
         l = blklst_group->range;
         for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
                 blklst_entry = ELEMENT_DATA(e);
-                ipvs_blklst_range_cmd(cmd, blklst_entry);
+                ipvs_blklst_range_cmd(cmd, blklst_entry, srule);
         }
 }
 
 static void
-ipvs_blklst_vsg_cmd(int cmd, list vs_group, virtual_server_t * vs, blklst_addr_group *blklst_group)
+ipvs_blklst_vsg_cmd(int cmd, 
+		list vs_group, 
+		virtual_server_t *vs, 
+		blklst_addr_group *blklst_group, 
+		ipvs_service_t *srule)
 {
         virtual_server_group_t *vsg = ipvs_get_group_by_name(vs->vsgname, vs_group);
         virtual_server_group_entry_t *vsg_entry;
@@ -895,27 +674,27 @@ ipvs_blklst_vsg_cmd(int cmd, list vs_group, virtual_server_t * vs, blklst_addr_g
 
                 srule->af = vsg_entry->addr.ss_family;
                 if (srule->af == AF_INET6) {
-                        if (srule->netmask == 0xffffffff)
-                                srule->netmask = 128;
-                        inet_sockaddrip6(&vsg_entry->addr, &srule->addr.in6);
+                        if (srule->user.netmask == 0xffffffff)
+                                srule->user.netmask = 128;
+                        inet_sockaddrip6(&vsg_entry->addr, &srule->nf_addr.in6);
                 } else
-                        srule->addr.ip = inet_sockaddrip4(&vsg_entry->addr);
-                srule->port = inet_sockaddrport(&vsg_entry->addr);
+                        srule->nf_addr.ip = inet_sockaddrip4(&vsg_entry->addr);
+                srule->user.port = inet_sockaddrport(&vsg_entry->addr);
 
                 /* blacklist address group channel */
-                ipvs_blklst_group_cmd(cmd, blklst_group);
+                ipvs_blklst_group_cmd(cmd, blklst_group, srule);
         }
 
         /* visit range list */
-        l = vsg->range;
+        l = vsg->addr_range;
         for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
                 vsg_entry = ELEMENT_DATA(e);
                 uint32_t addr_ip, ip;
 
                 srule->af = vsg_entry->addr.ss_family;
                 if (srule->af == AF_INET6) {
-                        inet_sockaddrip6(&vsg_entry->addr, &srule->addr.in6);
-                        ip = srule->addr.in6.s6_addr32[3];
+                        inet_sockaddrip6(&vsg_entry->addr, &srule->nf_addr.in6);
+                        ip = srule->nf_addr.in6.s6_addr32[3];
                 } else {
                         ip = inet_sockaddrip4(&vsg_entry->addr);
                 }
@@ -925,23 +704,22 @@ ipvs_blklst_vsg_cmd(int cmd, list vs_group, virtual_server_t * vs, blklst_addr_g
                      ((addr_ip >> 24) & 0xFF) <= vsg_entry->range;
                      addr_ip += 0x01000000) {
                         if (srule->af == AF_INET6) {
-                                if (srule->netmask == 0xffffffff)
-                                        srule->netmask = 128;
-                                srule->addr.in6.s6_addr32[3] = addr_ip;
+                                if (srule->user.netmask == 0xffffffff)
+                                        srule->user.netmask = 128;
+                                srule->nf_addr.in6.s6_addr32[3] = addr_ip;
                         } else {
-                                srule->addr.ip = addr_ip;
+                                srule->nf_addr.ip = addr_ip;
                         }
-                        srule->port = inet_sockaddrport(&vsg_entry->addr);
+                        srule->user.port = inet_sockaddrport(&vsg_entry->addr);
 
-                        ipvs_blklst_group_cmd(cmd, blklst_group);
+                        ipvs_blklst_group_cmd(cmd, blklst_group, srule);
                 }
         }
 }
 
 static int
-ipvs_blklst_cmd(int cmd, list vs_group, virtual_server_t * vs)
+ipvs_blklst_cmd(int cmd, ipvs_service_t *srule, virtual_server_t * vs)
 {
-        uint32_t ip_addr = 0;
         blklst_addr_group *blklst_group = ipvs_get_blklst_group_by_name(vs->blklst_addr_gname,
                                                         check_data->blklst_group);
         if (!blklst_group) {
@@ -950,155 +728,276 @@ ipvs_blklst_cmd(int cmd, list vs_group, virtual_server_t * vs)
         }
 
         memset(srule, 0, sizeof(ipvs_service_t));
-        srule->netmask = (vs->addr.ss_family == AF_INET6) ? 128 : ((u_int32_t) 0xffffffff);
-        srule->protocol = vs->service_type;
+        srule->user.netmask = (vs->addr.ss_family == AF_INET6) ? 128 : ((u_int32_t) 0xffffffff);
+        srule->user.protocol = vs->service_type;
 
         if(vs->vsgname) {
-                ipvs_blklst_vsg_cmd(cmd, vs_group, vs, blklst_group);
+                ipvs_blklst_vsg_cmd(cmd, check_data->vs_group, vs, blklst_group, srule);
         } else {
                 if (!vs->vfwmark) {
                         srule->af = vs->addr.ss_family;
                         if (vs->addr.ss_family == AF_INET6)
-                                inet_sockaddrip6(&vs->addr, &srule->addr.in6);
-                        else {
-                            ip_addr = inet_sockaddrip4(&vs->addr);
-                            if (ip_addr == 0xffffffff)
-                                srule->addr.ip = 0;
-                            else
-                                srule->addr.ip = ip_addr;
-                        }
-                        srule->port = inet_sockaddrport(&vs->addr);
-                        ipvs_blklst_group_cmd(cmd, blklst_group);
+                                inet_sockaddrip6(&vs->addr, &srule->nf_addr.in6);
+                        else
+                                srule->nf_addr.ip = inet_sockaddrip4(&vs->addr);
+                        srule->user.port = inet_sockaddrport(&vs->addr);
+                        ipvs_blklst_group_cmd(cmd, blklst_group, srule);
                 }
         }
         return IPVS_SUCCESS;
 }
 
+/* Fill IPVS rule with root vs infos */
+static void
+ipvs_set_srule(int cmd, ipvs_service_t *srule, virtual_server_t *vs)
+{
+	/* Clean service rule */
+	memset(srule, 0, sizeof(ipvs_service_t));
+
+	strncpy(srule->user.sched_name, vs->sched, IP_VS_SCHEDNAME_MAXLEN);
+	srule->af = vs->af;
+	srule->user.flags = vs->flags;
+	srule->user.netmask = (vs->af == AF_INET6) ? 128 : ((uint32_t) 0xffffffff);
+	srule->user.protocol = vs->service_type;
+	srule->user.bps = vs->bps;
+	srule->user.limit_proportion = vs->limit_proportion;
+	snprintf(srule->user.srange, 256, "%s", vs->srange);
+	snprintf(srule->user.drange, 256, "%s", vs->drange);
+	snprintf(srule->user.iifname, IFNAMSIZ, "%s", vs->iifname);
+	snprintf(srule->user.oifname, IFNAMSIZ, "%s", vs->oifname);
+
+	if (vs->persistence_timeout &&
+	    (cmd == IP_VS_SO_SET_ADD || cmd == IP_VS_SO_SET_DEL)) {
+		srule->user.timeout = vs->persistence_timeout;
+		srule->user.flags |= IP_VS_SVC_F_PERSISTENT;
+
+		if (vs->persistence_granularity)
+			srule->user.netmask = vs->persistence_granularity;
+	}
+
+	if (vs->syn_proxy) {
+		srule->user.flags |= IP_VS_CONN_F_SYNPROXY;
+	}
+
+	if (!strcmp(vs->sched, "conhash")) {
+		if (vs->hash_target) {
+			if ((srule->user.protocol != IPPROTO_UDP) &&
+			    (vs->hash_target == IP_VS_SVC_F_QID_HASH)) {
+				; // print error log
+			} else {
+				srule->user.flags |= vs->hash_target;
+			}
+		} else {
+			srule->user.flags |= IP_VS_SVC_F_SIP_HASH; // default
+		}
+	}
+
+	if (cmd == IP_VS_SO_SET_ADDLADDR || cmd == IP_VS_SO_SET_DELLADDR)
+		ipvs_laddr_cmd(cmd, srule, vs);
+	if (cmd == IP_VS_SO_SET_ADDBLKLST || cmd == IP_VS_SO_SET_DELBLKLST)
+		ipvs_blklst_cmd(cmd, srule, vs);
+
+#ifdef _HAVE_PE_NAME_
+	strcpy(srule->pe_name, vs->pe_name);
+#endif
+}
+
+/* Fill IPVS rule with rs infos */
+static void
+ipvs_set_drule(int cmd, ipvs_dest_t *drule, real_server_t * rs)
+{
+	if (cmd != IP_VS_SO_SET_ADDDEST &&
+	    cmd != IP_VS_SO_SET_DELDEST &&
+	    cmd != IP_VS_SO_SET_EDITDEST)
+		return;
+
+	/* Clean target rule */
+	memset(drule, 0, sizeof(ipvs_dest_t));
+
+	drule->af = rs->addr.ss_family;
+	if (rs->addr.ss_family == AF_INET6)
+		inet_sockaddrip6(&rs->addr, &drule->nf_addr.in6);
+	else
+		drule->nf_addr.ip = inet_sockaddrip4(&rs->addr);
+
+	drule->user.port = inet_sockaddrport(&rs->addr);
+	drule->user.conn_flags = rs->forwarding_method;
+	drule->user.weight = rs->weight;
+	drule->user.u_threshold = rs->u_threshold;
+	drule->user.l_threshold = rs->l_threshold;
+}
+
 int ipvs_tunnel_cmd(int cmd, tunnel_entry *entry)
 {
-    memset(tunnel_rule, 0, sizeof(ipvs_tunnel_t));
-    strncpy(tunnel_rule->ifname, entry->ifname, sizeof(tunnel_rule->ifname));
-    strncpy(tunnel_rule->kind, entry->kind, sizeof(tunnel_rule->kind));
-    strncpy(tunnel_rule->link, entry->link, sizeof(tunnel_rule->link));
+	ipvs_tunnel_t tunnel_rule;
+    	memset(&tunnel_rule, 0, sizeof(ipvs_tunnel_t));
+    	strncpy(tunnel_rule.ifname, entry->ifname, sizeof(tunnel_rule.ifname));
+    	strncpy(tunnel_rule.kind, entry->kind, sizeof(tunnel_rule.kind));
+    	strncpy(tunnel_rule.link, entry->link, sizeof(tunnel_rule.link));
 
-    tunnel_rule->laddr.ip = inet_sockaddrip4(&entry->local);
-    tunnel_rule->raddr.ip = inet_sockaddrip4(&entry->remote);
-    ipvs_talk(cmd);
+    	tunnel_rule.laddr.ip = inet_sockaddrip4(&entry->local);
+    	tunnel_rule.laddr.ip = inet_sockaddrip4(&entry->remote);    	
+	ipvs_talk(cmd, NULL, NULL, NULL, NULL, NULL, &tunnel_rule, false);	
 
     return IPVS_SUCCESS;
 }
 
-/* Set/Remove a RS or a local/deny address group from a VS */
+/* Set/Remove a RS from a VS */
 int
-ipvs_cmd(int cmd, list vs_group, virtual_server_t * vs, real_server_t * rs)
+ipvs_cmd(int cmd, virtual_server_t *vs, real_server_t *rs)
 {
+	ipvs_service_t srule;
+	ipvs_dest_t drule;
+
+	/* Allocate the room */
+	ipvs_set_srule(cmd, &srule, vs);
+
 	/* Set/Remove local address */
 	if (cmd == IP_VS_SO_SET_ADDLADDR || cmd == IP_VS_SO_SET_DELLADDR)	
-		return ipvs_laddr_cmd(cmd, vs_group, vs);
+		return ipvs_laddr_cmd(cmd, &srule, vs);
         /* Set/Remove deny address */
 	if (cmd == IP_VS_SO_SET_ADDBLKLST || cmd == IP_VS_SO_SET_DELBLKLST)
-		return ipvs_blklst_cmd(cmd, vs_group, vs);
-	/* Allocate the room */
-	memset(srule, 0, sizeof(ipvs_service_t));
-	ipvs_set_rule(cmd, vs, rs);
+		return ipvs_blklst_cmd(cmd, &srule, vs);
 
-	/* Does the service use inhibit flag ? */
-	if (cmd == IP_VS_SO_SET_DELDEST && rs->inhibit) {
-		drule->weight = 0;
-		cmd = IP_VS_SO_SET_EDITDEST;
-	}
-	if (cmd == IP_VS_SO_SET_ADDDEST && rs->inhibit && rs->set)
-		cmd = IP_VS_SO_SET_EDITDEST;
+	if (rs) {
+		ipvs_set_drule(cmd, &drule, rs);
 
-	/* Set flag */
-	if (cmd == IP_VS_SO_SET_ADDDEST && !rs->set)
-		rs->set = 1;
-	if (cmd == IP_VS_SO_SET_DELDEST && rs->set)
-		rs->set = 0;
+		/* Does the service use inhibit flag ? */
+		if (cmd == IP_VS_SO_SET_DELDEST && rs->inhibit) {
+			drule.user.weight = 0;
+			cmd = IP_VS_SO_SET_EDITDEST;
+		}
+		else if (cmd == IP_VS_SO_SET_ADDDEST && rs->inhibit && rs->set)
+			cmd = IP_VS_SO_SET_EDITDEST;
+
+		/* Set flag */
+		else if (cmd == IP_VS_SO_SET_ADDDEST && !rs->set) {
+			rs->set = true;
+			if (rs->inhibit && rs->num_failed_checkers)
+				drule.user.weight = 0;
+		}
+		else if (cmd == IP_VS_SO_SET_DELDEST && rs->set)
+			rs->set = false;
+	}
 
 	/* Set vs rule and send to kernel */
-	if (vs->vsgname) {
-		return ipvs_group_cmd(cmd, vs_group, rs, vs);
+	if (vs->vsg)
+		return ipvs_group_cmd(cmd, &srule, &drule, vs, rs);
+
+	if (vs->vfwmark) {
+		srule.user.fwmark = vs->vfwmark;
+	} else if (vs->forwarding_method == IP_VS_CONN_F_SNAT) {
+		srule.af = vs->addr.ss_family;
+		srule.nf_addr.ip = 0;
+		srule.user.port = inet_sockaddrport(&vs->addr);
 	} else {
-		if (vs->vfwmark) {
-			srule->af = AF_INET;
-			/* Need to get address family from first real server */
-			if (vs->rs && !LIST_ISEMPTY(vs->rs) &&
-			    (((real_server_t *)ELEMENT_DATA(LIST_HEAD(vs->rs)))->addr.ss_family == AF_INET6)) {
-				srule->af = AF_INET6;
-				srule->netmask = 128;
+		if (vs->af == AF_INET6)
+			inet_sockaddrip6(&vs->addr, &srule.nf_addr.in6);
+		else
+			srule.nf_addr.ip = inet_sockaddrip4(&vs->addr);
+		srule.user.port = inet_sockaddrport(&vs->addr);
+		srule.af = vs->af;
+	}
+
+	/* Talk to the IPVS channel */
+	return ipvs_talk(cmd, &srule, &drule, NULL, NULL, NULL, NULL, false);
+}
+
+/* at reload, add alive destinations to the newly created vsge */
+void
+ipvs_group_sync_entry(virtual_server_t *vs, virtual_server_group_entry_t *vsge)
+{
+	real_server_t *rs;
+	element e;
+	ipvs_service_t srule;
+	ipvs_dest_t drule;
+
+	ipvs_set_srule(IP_VS_SO_SET_ADDDEST, &srule, vs);
+	if (vsge->is_fwmark)
+		srule.user.fwmark = vsge->vfwmark;
+	else
+		srule.user.port = inet_sockaddrport(&vsge->addr);
+
+	/* Process realserver queue */
+	LIST_FOREACH(vs->rs, rs, e) {
+		if (rs->reloaded && (rs->alive || (rs->inhibit && rs->set))) {
+			/* Prepare the IPVS drule */
+			ipvs_set_drule(IP_VS_SO_SET_ADDDEST, &drule, rs);
+			drule.user.weight = rs->inhibit && !rs->alive ? 0 : rs->weight;
+
+			/* Set vs rule */
+			if (vsge->is_fwmark) {
+				/* Talk to the IPVS channel */
+				ipvs_talk(IP_VS_SO_SET_ADDDEST, &srule, &drule, NULL, NULL, NULL, NULL, false);
 			}
-			srule->fwmark = vs->vfwmark;
-		} else if (vs->loadbalancing_kind == IP_VS_CONN_F_SNAT) {
-			srule->af = vs->addr.ss_family;
-			srule->addr.ip = 0;
-			srule->port = inet_sockaddrport(&vs->addr);
-		} else {
-			srule->af = vs->addr.ss_family;
-			if (vs->addr.ss_family == AF_INET6)
-				inet_sockaddrip6(&vs->addr, &srule->addr.in6);
 			else
-				srule->addr.ip = inet_sockaddrip4(&vs->addr);
-			srule->port = inet_sockaddrport(&vs->addr);
+				ipvs_group_range_cmd(IP_VS_SO_SET_ADDDEST, &srule, &drule, vsge);
 		}
-
-		/* Talk to the IPVS channel */
-		return ipvs_talk(cmd);
 	}
-
-	return IPVS_SUCCESS;
 }
 
 static void 
-ipvs_rm_lentry_from_vsg(local_addr_entry *laddr_entry, char *vsgname)
+ipvs_rm_lentry_from_vsg(local_addr_entry *laddr_entry, virtual_server_t *vs)
 {
 	list l;
 	element e;
+	ipvs_service_t srule;
+	ipvs_laddr_t laddr_rule;
 	virtual_server_group_t *vsg;
 	virtual_server_group_entry_t *vsg_entry;
-
-	vsg = ipvs_get_group_by_name(vsgname, check_data->vs_group);
+	
+	/* Allocate the room */
+	ipvs_set_srule(IP_VS_SO_SET_DELLADDR, &srule, vs);
+	
+	vsg = ipvs_get_group_by_name(vs->vsgname, check_data->vs_group);
 	if (!vsg) return;
 
 	l = vsg->addr_ip;
 	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
 		vsg_entry = ELEMENT_DATA(e);
-		srule->af = vsg_entry->addr.ss_family;
+		srule.af = vsg_entry->addr.ss_family;
 		if (vsg_entry->addr.ss_family == AF_INET6) {
-			srule->netmask = 128;
-			inet_sockaddrip6(&vsg_entry->addr, &srule->addr.in6);
+			srule.user.netmask = 128;
+			inet_sockaddrip6(&vsg_entry->addr, &srule.nf_addr.in6);
 		} else {
-			srule->netmask = 0xffffffff;
-			srule->addr.ip = inet_sockaddrip4(&vsg_entry->addr);
+			srule.user.netmask = 0xffffffff;
+			srule.nf_addr.ip = inet_sockaddrip4(&vsg_entry->addr);
 		}
-		srule->port = inet_sockaddrport(&vsg_entry->addr);
+		srule.user.port = inet_sockaddrport(&vsg_entry->addr);
 
 		if (laddr_entry->range)
-			ipvs_laddr_range_cmd(IP_VS_SO_SET_DELLADDR, laddr_entry);
+			ipvs_laddr_range_cmd(IP_VS_SO_SET_DELLADDR, laddr_entry, vs);
 		else {
-			memset(laddr_rule, 0, sizeof(ipvs_laddr_t));
-			laddr_rule->af = laddr_entry->addr.ss_family;
+			memset(&laddr_rule, 0, sizeof(ipvs_laddr_t));
+			laddr_rule.af = laddr_entry->addr.ss_family;
 			if (laddr_entry->addr.ss_family == AF_INET6)
-				inet_sockaddrip6(&laddr_entry->addr, &laddr_rule->addr.in6);
+				inet_sockaddrip6(&laddr_entry->addr, &laddr_rule.addr.in6);
 			else
-				laddr_rule->addr.ip = inet_sockaddrip4(&laddr_entry->addr);
-			strncpy(laddr_rule->ifname, laddr_entry->ifname, sizeof(laddr_rule->ifname));
-
-			ipvs_talk(IP_VS_SO_SET_DELLADDR);
+				laddr_rule.addr.ip = inet_sockaddrip4(&laddr_entry->addr);
+			strncpy(laddr_rule.ifname, laddr_entry->ifname, sizeof(laddr_rule.ifname));
+
+			ipvs_talk(IP_VS_SO_SET_DELLADDR, 
+				&srule, 
+				NULL/*drule*/, 
+				NULL/*daemonrule*/, 
+				&laddr_rule, 
+				NULL/*blklst_rule*/, 
+				NULL,
+				false);
 		}
 	}
 
-	l = vsg->range;
+	l = vsg->addr_range;
 	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
 		vsg_entry = ELEMENT_DATA(e);
 		uint32_t addr_ip, ip;
 
-		srule->af = vsg_entry->addr.ss_family;
-		srule->netmask = (vsg_entry->addr.ss_family == AF_INET6) ? 128 : ((u_int32_t) 0xffffffff);
-		srule->port = inet_sockaddrport(&vsg_entry->addr);
+		srule.af = vsg_entry->addr.ss_family;
+		srule.user.netmask = (vsg_entry->addr.ss_family == AF_INET6) ? 128 : ((u_int32_t) 0xffffffff);
+		srule.user.port = inet_sockaddrport(&vsg_entry->addr);
 		if (vsg_entry->addr.ss_family == AF_INET6) {
-			inet_sockaddrip6(&vsg_entry->addr, &srule->addr.in6);
-			ip = srule->addr.in6.s6_addr32[3];
+			inet_sockaddrip6(&vsg_entry->addr, &srule.nf_addr.in6);
+			ip = srule.nf_addr.in6.s6_addr32[3];
 		} else {
 			ip = inet_sockaddrip4(&vsg_entry->addr);
 		}
@@ -1106,23 +1005,30 @@ ipvs_rm_lentry_from_vsg(local_addr_entry *laddr_entry, char *vsgname)
 		for (addr_ip = ip;
 		     ((addr_ip >> 24) & 0xFF) <= vsg_entry->range;
 		     addr_ip += 0x01000000) {
-			if (srule->af == AF_INET6)
-				srule->addr.in6.s6_addr32[3] = addr_ip;
+			if (srule.af == AF_INET6)
+				srule.nf_addr.in6.s6_addr32[3] = addr_ip;
 			else
-				srule->addr.ip = addr_ip;
+				srule.nf_addr.ip = addr_ip;
 
 			if (laddr_entry->range)
-				ipvs_laddr_range_cmd(IP_VS_SO_SET_DELLADDR, laddr_entry);
+				ipvs_laddr_range_cmd(IP_VS_SO_SET_DELLADDR, laddr_entry, vs);
 			else {
-				memset(laddr_rule, 0, sizeof(ipvs_laddr_t));
-				laddr_rule->af = laddr_entry->addr.ss_family;
+				memset(&laddr_rule, 0, sizeof(ipvs_laddr_t));
+				laddr_rule.af = laddr_entry->addr.ss_family;
 				if (laddr_entry->addr.ss_family == AF_INET6)
-					inet_sockaddrip6(&laddr_entry->addr, &laddr_rule->addr.in6);
+					inet_sockaddrip6(&laddr_entry->addr, &laddr_rule.addr.in6);
 				else
-					laddr_rule->addr.ip = inet_sockaddrip4(&laddr_entry->addr);
-				strncpy(laddr_rule->ifname, laddr_entry->ifname, sizeof(laddr_rule->ifname));
-
-				ipvs_talk(IP_VS_SO_SET_DELLADDR);
+					laddr_rule.addr.ip = inet_sockaddrip4(&laddr_entry->addr);
+				strncpy(laddr_rule.ifname, laddr_entry->ifname, sizeof(laddr_rule.ifname));
+
+				ipvs_talk(IP_VS_SO_SET_DELLADDR, 
+					&srule, 
+					NULL/*drule*/, 
+					NULL/*daemonrule*/, 
+					&laddr_rule, 
+					NULL/*blklst_rule*/, 
+					NULL,
+					false);
 			}
 		}
 	}
@@ -1131,90 +1037,93 @@ ipvs_rm_lentry_from_vsg(local_addr_entry *laddr_entry, char *vsgname)
 int
 ipvs_laddr_remove_entry(virtual_server_t *vs, local_addr_entry *laddr_entry)
 {
-	memset(srule, 0, sizeof(ipvs_service_t));
-	srule->protocol = vs->service_type;
+	ipvs_laddr_t laddr_rule;
+	ipvs_service_t srule;
+
+	memset(&srule, 0, sizeof(ipvs_service_t));
+	srule.user.protocol = vs->service_type;
 
 	if (vs->vsgname) {
-		ipvs_rm_lentry_from_vsg(laddr_entry, vs->vsgname);
+		ipvs_rm_lentry_from_vsg(laddr_entry, vs);
 	} else if (!vs->vfwmark) {
-		srule->af = vs->addr.ss_family;
+		srule.af = vs->addr.ss_family;
 		if (vs->addr.ss_family == AF_INET6) {
-			srule->netmask = 128;
-			inet_sockaddrip6(&vs->addr, &srule->addr.in6);
+			srule.user.netmask = 128;
+			inet_sockaddrip6(&vs->addr, &srule.nf_addr.in6);
 		} else {
-			srule->netmask = 0xffffffff;
-			srule->addr.ip = inet_sockaddrip4(&vs->addr);
+			srule.user.netmask = 0xffffffff;
+			srule.nf_addr.ip = inet_sockaddrip4(&vs->addr);
 		}
-		srule->port = inet_sockaddrport(&vs->addr);
+		srule.user.port = inet_sockaddrport(&vs->addr);
 
 		if (laddr_entry->range) {
-			ipvs_laddr_range_cmd(IP_VS_SO_SET_DELLADDR, laddr_entry);
+			ipvs_laddr_range_cmd(IP_VS_SO_SET_DELLADDR, laddr_entry, vs);
 		} else {
-			memset(laddr_rule, 0, sizeof(ipvs_laddr_t));
-			laddr_rule->af = laddr_entry->addr.ss_family;
+			memset(&laddr_rule, 0, sizeof(ipvs_laddr_t));
+			laddr_rule.af = laddr_entry->addr.ss_family;
 			if (laddr_entry->addr.ss_family == AF_INET6)
-				inet_sockaddrip6(&laddr_entry->addr, &laddr_rule->addr.in6);
+				inet_sockaddrip6(&laddr_entry->addr, &laddr_rule.addr.in6);
 			else
-				laddr_rule->addr.ip = inet_sockaddrip4(&laddr_entry->addr);
-			strncpy(laddr_rule->ifname, laddr_entry->ifname, sizeof(laddr_rule->ifname));
+				laddr_rule.addr.ip = inet_sockaddrip4(&laddr_entry->addr);
+			strncpy(laddr_rule.ifname, laddr_entry->ifname, sizeof(laddr_rule.ifname));
 
-			ipvs_talk(IP_VS_SO_SET_DELLADDR);
+			ipvs_talk(IP_VS_SO_SET_DELLADDR, &srule, NULL, NULL, &laddr_rule, NULL, NULL, false);
 		}
 	}
 
 	return IPVS_SUCCESS;
 }
 
-
 static void
-ipvs_rm_bentry_from_vsg(blklst_addr_entry *blklst_entry, char *vsgname)
+ipvs_rm_bentry_from_vsg(blklst_addr_entry *blklst_entry, const char *vsgname, ipvs_service_t *srule)
 {
 	list l;
 	element e;
 	virtual_server_group_t *vsg;
 	virtual_server_group_entry_t *vsg_entry;
+	ipvs_blklst_t blklst_rule;
 
 	vsg = ipvs_get_group_by_name(vsgname, check_data->vs_group);
-	if (!vsg) return;
+	if (!vsg) return; 
 
 	l = vsg->addr_ip;
 	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
 		vsg_entry = ELEMENT_DATA(e);
 		srule->af = vsg_entry->addr.ss_family;
 		if (vsg_entry->addr.ss_family == AF_INET6) {
-			srule->netmask = 128;
-			inet_sockaddrip6(&vsg_entry->addr, &srule->addr.in6);
+			srule->user.netmask = 128;
+			inet_sockaddrip6(&vsg_entry->addr, &srule->nf_addr.in6);
 		} else {
-			srule->netmask = 0xffffffff;
-			srule->addr.ip = inet_sockaddrip4(&vsg_entry->addr);
+			srule->user.netmask = 0xffffffff;
+			srule->nf_addr.ip = inet_sockaddrip4(&vsg_entry->addr);
 		}
-		srule->port = inet_sockaddrport(&vsg_entry->addr);
+		srule->user.port = inet_sockaddrport(&vsg_entry->addr);
 
 		if (blklst_entry->range)
-			ipvs_blklst_range_cmd(IP_VS_SO_SET_DELBLKLST, blklst_entry);
+			ipvs_blklst_range_cmd(IP_VS_SO_SET_DELBLKLST, blklst_entry, srule);
 		else {
-			memset(blklst_rule, 0, sizeof(ipvs_blklst_t));
-			blklst_rule->af = blklst_entry->addr.ss_family;
+			memset(&blklst_rule, 0, sizeof(ipvs_blklst_t));
+			blklst_rule.af = blklst_entry->addr.ss_family;
 			if (blklst_entry->addr.ss_family == AF_INET6)
-				inet_sockaddrip6(&blklst_entry->addr, &blklst_rule->addr.in6);
+				inet_sockaddrip6(&blklst_entry->addr, &blklst_rule.addr.in6);
 			else
-				blklst_rule->addr.ip = inet_sockaddrip4(&blklst_entry->addr);
+				blklst_rule.addr.ip = inet_sockaddrip4(&blklst_entry->addr);
 
-			ipvs_talk(IP_VS_SO_SET_DELBLKLST);
+			ipvs_talk(IP_VS_SO_SET_DELBLKLST, srule, NULL, NULL, NULL, &blklst_rule, NULL, false);
 		}
 	}
 
-	l = vsg->range;
+	l = vsg->addr_range;
 	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
 		vsg_entry = ELEMENT_DATA(e);
 		uint32_t addr_ip, ip;
 
 		srule->af = vsg_entry->addr.ss_family;
-		srule->netmask = (vsg_entry->addr.ss_family == AF_INET6) ? 128 : ((u_int32_t) 0xffffffff);
-		srule->port = inet_sockaddrport(&vsg_entry->addr);
+		srule->user.netmask = (vsg_entry->addr.ss_family == AF_INET6) ? 128 : ((u_int32_t) 0xffffffff);
+		srule->user.port = inet_sockaddrport(&vsg_entry->addr);
 		if (vsg_entry->addr.ss_family == AF_INET6) {
-			inet_sockaddrip6(&vsg_entry->addr, &srule->addr.in6);
-			ip = srule->addr.in6.s6_addr32[3];
+			inet_sockaddrip6(&vsg_entry->addr, &srule->nf_addr.in6);
+			ip = srule->nf_addr.in6.s6_addr32[3];
 		} else {
 			ip = inet_sockaddrip4(&vsg_entry->addr);
 		}
@@ -1223,57 +1132,59 @@ ipvs_rm_bentry_from_vsg(blklst_addr_entry *blklst_entry, char *vsgname)
 			((addr_ip >> 24) & 0xFF) <= vsg_entry->range;
 			addr_ip += 0x01000000) {
 			if (srule->af == AF_INET6)
-				srule->addr.in6.s6_addr32[3] = addr_ip;
+				srule->nf_addr.in6.s6_addr32[3] = addr_ip;
 			else
-				srule->addr.ip = addr_ip;
+				srule->nf_addr.ip = addr_ip;
 
 			if (blklst_entry->range)
-				ipvs_blklst_range_cmd(IP_VS_SO_SET_DELBLKLST, blklst_entry);
+				ipvs_blklst_range_cmd(IP_VS_SO_SET_DELBLKLST, blklst_entry, srule);
 			else {
-				memset(blklst_rule, 0, sizeof(ipvs_blklst_t));
-				blklst_rule->af = blklst_entry->addr.ss_family;
+				memset(&blklst_rule, 0, sizeof(ipvs_blklst_t));
+				blklst_rule.af = blklst_entry->addr.ss_family;
 				if (blklst_entry->addr.ss_family == AF_INET6)
-					inet_sockaddrip6(&blklst_entry->addr, &blklst_rule->addr.in6);
+					inet_sockaddrip6(&blklst_entry->addr, &blklst_rule.addr.in6);
 			else
-					blklst_rule->addr.ip = inet_sockaddrip4(&blklst_entry->addr);
+					blklst_rule.addr.ip = inet_sockaddrip4(&blklst_entry->addr);
 
-				ipvs_talk(IP_VS_SO_SET_DELBLKLST);
+				ipvs_talk(IP_VS_SO_SET_DELBLKLST, srule, NULL, NULL, NULL, &blklst_rule, NULL, false);
 			}
 		}
 	}
 }
 
-
 int
 ipvs_blklst_remove_entry(virtual_server_t *vs, blklst_addr_entry *blklst_entry)
 {
-	memset(srule, 0, sizeof(ipvs_service_t));
-	srule->protocol = vs->service_type;
+	ipvs_service_t srule;
+	ipvs_blklst_t blklst_rule;
+
+	memset(&srule, 0, sizeof(ipvs_service_t));
+	srule.user.protocol = vs->service_type;
 
 	if (vs->vsgname) {
-		ipvs_rm_bentry_from_vsg(blklst_entry, vs->vsgname);
+		ipvs_rm_bentry_from_vsg(blklst_entry, vs->vsgname, &srule);
 	} else if (!vs->vfwmark) {
-		srule->af = vs->addr.ss_family;
+		srule.af = vs->addr.ss_family;
 		if (vs->addr.ss_family == AF_INET6) {
-			srule->netmask = 128;
-			inet_sockaddrip6(&vs->addr, &srule->addr.in6);
+			srule.user.netmask = 128;
+			inet_sockaddrip6(&vs->addr, &srule.nf_addr.in6);
 		} else {
-			srule->netmask = 0xffffffff;
-			srule->addr.ip = inet_sockaddrip4(&vs->addr);
+			srule.user.netmask = 0xffffffff;
+			srule.nf_addr.ip = inet_sockaddrip4(&vs->addr);
 		}
-		srule->port = inet_sockaddrport(&vs->addr);
+		srule.user.port = inet_sockaddrport(&vs->addr);
 
 		if (blklst_entry->range) {
-			ipvs_blklst_range_cmd(IP_VS_SO_SET_DELBLKLST, blklst_entry);
+			ipvs_blklst_range_cmd(IP_VS_SO_SET_DELBLKLST, blklst_entry, &srule);
 		} else {
-			memset(blklst_rule, 0, sizeof(ipvs_blklst_t));
-			blklst_rule->af = blklst_entry->addr.ss_family;
+			memset(&blklst_rule, 0, sizeof(ipvs_blklst_t));
+			blklst_rule.af = blklst_entry->addr.ss_family;
 			if (blklst_entry->addr.ss_family == AF_INET6)
-				inet_sockaddrip6(&blklst_entry->addr, &blklst_rule->addr.in6);
+				inet_sockaddrip6(&blklst_entry->addr, &blklst_rule.addr.in6);
 			else
-				blklst_rule->addr.ip = inet_sockaddrip4(&blklst_entry->addr);
+				blklst_rule.addr.ip = inet_sockaddrip4(&blklst_entry->addr);
 
-			ipvs_talk(IP_VS_SO_SET_DELBLKLST);
+			ipvs_talk(IP_VS_SO_SET_DELBLKLST, &srule, NULL, NULL, NULL, &blklst_rule, NULL, false);
 		}
 	}
 
@@ -1281,104 +1192,163 @@ ipvs_blklst_remove_entry(virtual_server_t *vs, blklst_addr_entry *blklst_entry)
 }
 
 /* Remove a specific vs group entry */
-int
+void
 ipvs_group_remove_entry(virtual_server_t *vs, virtual_server_group_entry_t *vsge)
 {
 	real_server_t *rs;
 	element e;
-	list l = vs->rs;
+	ipvs_service_t srule;
+	ipvs_dest_t drule;
 
-	/* Clean target rules */
-	memset(srule, 0, sizeof(ipvs_service_t));
-	memset(drule, 0, sizeof(ipvs_dest_t));
+	/* Prepare target rules */
+	ipvs_set_srule(IP_VS_SO_SET_DELDEST, &srule, vs);
+	if (vsge->is_fwmark)
+		srule.user.fwmark = vsge->vfwmark;
+	else
+		srule.user.port = inet_sockaddrport(&vsge->addr);
 
 	/* Process realserver queue */
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		rs = ELEMENT_DATA(e);
-
+	LIST_FOREACH(vs->rs, rs, e) {
 		if (rs->alive) {
-			/* Prepare the IPVS rule */
-			if (!drule->addr.ip) {
-				/* Setting IPVS rule with vs root rs */
-				ipvs_set_rule(IP_VS_SO_SET_DELDEST, vs, rs);
-			} else {
-				drule->af = rs->addr.ss_family;
-				if (rs->addr.ss_family == AF_INET6)
-					inet_sockaddrip6(&rs->addr, &drule->addr.in6);
-				else
-					drule->addr.ip = inet_sockaddrip4(&rs->addr);
-				drule->port = inet_sockaddrport(&rs->addr);
-				drule->weight = rs->weight;
-			}
+			/* Setting IPVS drule */
+			ipvs_set_drule(IP_VS_SO_SET_DELDEST, &drule, rs);
 
 			/* Set vs rule */
-			if (vsge->range) {
-				ipvs_group_range_cmd(IP_VS_SO_SET_DELDEST, vsge);
-			} else {
-				srule->af = vsge->addr.ss_family;
-				if (vsge->addr.ss_family == AF_INET6)
-					inet_sockaddrip6(&vsge->addr, &srule->addr.in6);
-				else
-					srule->addr.ip = inet_sockaddrip4(&vsge->addr);
-				srule->port = inet_sockaddrport(&vsge->addr);
-				srule->fwmark = vsge->vfwmark;
-				drule->u_threshold = rs->u_threshold;
-				drule->l_threshold = rs->l_threshold;
-
+			if (vsge->is_fwmark) {
 				/* Talk to the IPVS channel */
-				ipvs_talk(IP_VS_SO_SET_DELDEST);
+				ipvs_talk(IP_VS_SO_SET_DELDEST, &srule, &drule, NULL, NULL, NULL, NULL, false);
 			}
+			else
+				ipvs_group_range_cmd(IP_VS_SO_SET_DELDEST, &srule, &drule, vsge);
 		}
 	}
 
-	/* In case of all rs is unalive */
-	ipvs_set_rule(IP_VS_SO_SET_DEL, vs, NULL);
-
-	/* Remove VS entry */
-	if (vsge->range)
-		ipvs_group_range_cmd(IP_VS_SO_SET_DEL, vsge);
-	else {
-		srule->af = vsge->addr.ss_family;
-		if (vsge->addr.ss_family == AF_INET6)
-			inet_sockaddrip6(&vsge->addr, &srule->addr.in6);
-		else
-			srule->addr.ip = inet_sockaddrip4(&vsge->addr);
-		srule->port = inet_sockaddrport(&vsge->addr);
-		srule->fwmark = vsge->vfwmark;
+	/* Remove VS entry if this is the last VS using it */
+	unset_vsge_alive(vsge, vs);
+	if (!is_vsge_alive(vsge, vs)) {
+		if (vsge->range)
+			ipvs_group_range_cmd(IP_VS_SO_SET_DEL, &srule, NULL, vsge);
+		else {
+			srule.af = vsge->addr.ss_family;
+			if (vsge->addr.ss_family == AF_INET6)
+				inet_sockaddrip6(&vsge->addr, &srule.nf_addr.in6);
+			else
+				srule.nf_addr.ip = inet_sockaddrip4(&vsge->addr);
+			srule.user.port = inet_sockaddrport(&vsge->addr);
+			srule.user.fwmark = vsge->vfwmark;
 
-		ipvs_talk(IP_VS_SO_SET_DEL);
+			ipvs_talk(IP_VS_SO_SET_DEL, &srule, NULL, NULL, NULL, NULL, NULL, false);
+		}
 	}
+}
 
-	return IPVS_SUCCESS;
+#ifdef _WITH_SNMP_CHECKER_
+static inline bool
+vsd_equal(real_server_t *rs, struct ip_vs_dest_entry_app *entry)
+{
+	if (entry->af != AF_INET && entry->af != AF_INET6)
+		return false;
+
+	if (rs->addr.ss_family != entry->af)
+		return false;
+
+	if (!inaddr_equal(entry->af, &entry->nf_addr,
+			entry->af == AF_INET ? (void *)&((struct sockaddr_in *)&rs->addr)->sin_addr
+					     : (void *)&((struct sockaddr_in6 *)&rs->addr)->sin6_addr))
+		return false;
+
+	if (entry->user.port != (entry->af == AF_INET ? ((struct sockaddr_in *)&rs->addr)->sin_port
+						      : ((struct sockaddr_in6 *)&rs->addr)->sin6_port))
+		return false;
+
+	return true;
+}
+
+static void
+ipvs_update_vs_stats(virtual_server_t *vs, uint32_t fwmark, union nf_inet_addr *nfaddr, uint16_t port)
+{
+	element e;
+	struct ip_vs_get_dests_app *dests = NULL;
+	real_server_t *rs;
+	unsigned int i;
+	ipvs_service_entry_t *serv;
+
+	if (!(serv = ipvs_get_service(fwmark, vs->af, vs->service_type, nfaddr, port)))
+		return;
+
+	/* Update virtual server stats */
+	vs->stats.conns		+= serv->stats.conns;
+	vs->stats.inpkts	+= serv->stats.inpkts;
+	vs->stats.outpkts	+= serv->stats.outpkts;
+	vs->stats.inbytes	+= serv->stats.inbytes;
+	vs->stats.outbytes	+= serv->stats.outbytes;
+	vs->stats.cps		+= serv->stats.cps;
+	vs->stats.inpps		+= serv->stats.inpps;
+	vs->stats.outpps	+= serv->stats.outpps;
+	vs->stats.inbps		+= serv->stats.inbps;
+	vs->stats.outbps	+= serv->stats.outbps;
+
+	/* Get real servers */
+	dests = ipvs_get_dests(serv);
+	FREE(serv);
+	if (!dests)
+		return;
+
+	for (i = 0; i < dests->user.num_dests; i++) {
+		rs = NULL;
+
+		/* Is it the sorry server? */
+		if (vs->s_svr && vsd_equal(vs->s_svr, &dests->user.entrytable[i]))
+			rs = vs->s_svr;
+		else {
+			/* Search for a match in the list of real servers */
+			for (e = LIST_HEAD(vs->rs); e; ELEMENT_NEXT(e)) {
+				rs = ELEMENT_DATA(e);
+				if (vsd_equal(rs, &dests->user.entrytable[i]))
+					break;
+			}
+			if (!e)
+				rs = NULL;
+		}
+
+		if (rs) {
+			rs->activeconns		+= dests->user.entrytable[i].user.activeconns;
+			rs->inactconns		+= dests->user.entrytable[i].user.inactconns;
+			rs->persistconns	+= dests->user.entrytable[i].user.persistconns;
+			rs->stats.conns		+= dests->user.entrytable[i].stats.conns;
+			rs->stats.inpkts	+= dests->user.entrytable[i].stats.inpkts;
+			rs->stats.outpkts	+= dests->user.entrytable[i].stats.outpkts;
+			rs->stats.inbytes	+= dests->user.entrytable[i].stats.inbytes;
+			rs->stats.outbytes	+= dests->user.entrytable[i].stats.outbytes;
+			rs->stats.cps		+= dests->user.entrytable[i].stats.cps;
+			rs->stats.inpps		+= dests->user.entrytable[i].stats.inpps;
+			rs->stats.outpps	+= dests->user.entrytable[i].stats.outpps;
+			rs->stats.inbps		+= dests->user.entrytable[i].stats.inbps;
+			rs->stats.outbps	+= dests->user.entrytable[i].stats.outbps;
+		}
+	}
+	FREE(dests);
 }
 
-#ifdef _WITH_SNMP_
 /* Update statistics for a given virtual server. This includes
    statistics of real servers. The update is only done if we need
    refreshing. */
 void
 ipvs_update_stats(virtual_server_t *vs)
 {
-	element e, ge = NULL;
-	real_server_t *rs;
-	virtual_server_group_t *vsg = NULL;
-	virtual_server_group_entry_t *vsg_entry = NULL;
-	uint32_t addr_ip = 0;
+	element e, ge;
+	virtual_server_group_entry_t *vsg_entry;
+	uint32_t addr_ip;
+	uint16_t port;
 	union nf_inet_addr nfaddr;
-	ipvs_service_entry_t * serv = NULL;
-	struct ip_vs_get_dests * dests = NULL;
-	int i;
-#define UPDATE_STATS_INIT 1
-#define UPDATE_STATS_VSG_IP 2
-#define UPDATE_STATS_VSG_FWMARK 4
-#define UPDATE_STATS_VSG_RANGE 6
-#define UPDATE_STATS_VSG_RANGE_IP 7
-#define UPDATE_STATS_END 99
-	int state = UPDATE_STATS_INIT;
-
-	if (time(NULL) - vs->lastupdated < STATS_REFRESH)
+	unsigned i;
+	real_server_t *rs;
+	time_t cur_time = time(NULL);
+
+	if (cur_time - vs->lastupdated < STATS_REFRESH)
 		return;
-	vs->lastupdated = time(NULL);
+	vs->lastupdated = cur_time;
+
 	/* Reset stats */
 	memset(&vs->stats, 0, sizeof(vs->stats));
 	if (vs->s_svr) {
@@ -1386,279 +1356,66 @@ ipvs_update_stats(virtual_server_t *vs)
 		vs->s_svr->activeconns =
 			vs->s_svr->inactconns = vs->s_svr->persistconns = 0;
 	}
-	if (!LIST_ISEMPTY(vs->rs)) {
-		for (e = LIST_HEAD(vs->rs); e; ELEMENT_NEXT(e)) {
-			rs = ELEMENT_DATA(e);
-			memset(&rs->stats, 0, sizeof(rs->stats));
-			rs->activeconns = rs->inactconns = rs->persistconns = 0;
-		}
+	for (e = LIST_HEAD(vs->rs); e; ELEMENT_NEXT(e)) {
+		rs = ELEMENT_DATA(e);
+		memset(&rs->stats, 0, sizeof(rs->stats));
+		rs->activeconns = rs->inactconns = rs->persistconns = 0;
 	}
-	/* FSM: at each transition, we process "serv" if it is not NULL */
-	while (state != UPDATE_STATS_END) {
-		serv = NULL;
-		switch (state) {
-		case UPDATE_STATS_INIT:
-			/* We need to know the next state to reach */
-			if (vs->vsgname) {
-				if (!LIST_ISEMPTY(check_data->vs_group))
-					vsg = ipvs_get_group_by_name(vs->vsgname,
-								     check_data->vs_group);
-				else
-					vsg = NULL;
-				if (!vsg)
-					state = UPDATE_STATS_END;
-				else {
-					state = UPDATE_STATS_VSG_IP;
-					ge = NULL;
-				}
-				continue;
-			}
-			state = UPDATE_STATS_END;
-			if (vs->vfwmark) {
-				memset(&nfaddr, 0, sizeof(nfaddr));
-				serv = ipvs_get_service(vs->vfwmark,
-							AF_INET,
-							vs->service_type,
-							nfaddr, 0);
-				break;
-			}
-			memcpy(&nfaddr, (vs->addr.ss_family == AF_INET6)?
-			       (void*)(&((struct sockaddr_in6 *)&vs->addr)->sin6_addr):
-			       (void*)(&((struct sockaddr_in *)&vs->addr)->sin_addr),
-			       sizeof(nfaddr));
-			serv = ipvs_get_service(0,
-						vs->addr.ss_family,
-						vs->service_type,
-						nfaddr,
-						inet_sockaddrport(&vs->addr));
-			break;
-		case UPDATE_STATS_VSG_IP:
-			if (!ge)
-				ge = LIST_HEAD(vsg->addr_ip);
-			else
-				ELEMENT_NEXT(ge);
-			if (!ge) {
-				state = UPDATE_STATS_VSG_FWMARK;
-				continue;
-			}
-			vsg_entry = ELEMENT_DATA(ge);
-			memcpy(&nfaddr, (vsg_entry->addr.ss_family == AF_INET6)?
-			       (void*)(&((struct sockaddr_in6 *)&vsg_entry->addr)->sin6_addr):
-			       (void*)(&((struct sockaddr_in *)&vsg_entry->addr)->sin_addr),
-			       sizeof(nfaddr));
-			serv = ipvs_get_service(0,
-						vsg_entry->addr.ss_family,
-						vs->service_type,
-						nfaddr,
-						inet_sockaddrport(&vsg_entry->addr));
-			break;
-		case UPDATE_STATS_VSG_FWMARK:
-			if (!ge)
-				ge = LIST_HEAD(vsg->vfwmark);
-			else
-				ELEMENT_NEXT(ge);
-			if (!ge) {
-				state = UPDATE_STATS_VSG_RANGE;
-				continue;
-			}
+
+	/* Update the stats */
+	if (vs->vsg) {
+		for (ge = LIST_HEAD(vs->vsg->vfwmark); ge; ELEMENT_NEXT(ge)) {
 			vsg_entry = ELEMENT_DATA(ge);
-			memset(&nfaddr, 0, sizeof(nfaddr));
-			serv = ipvs_get_service(vsg_entry->vfwmark,
-						AF_INET,
-						vs->service_type,
-						nfaddr, 0);
-			break;
-		case UPDATE_STATS_VSG_RANGE:
-			if (!ge)
-				ge = LIST_HEAD(vsg->range);
-			else
-				ELEMENT_NEXT(ge);
-			if (!ge) {
-				state = UPDATE_STATS_END;
-				continue;
-			}
+			ipvs_update_vs_stats(vs, vsg_entry->vfwmark, &nfaddr, 0);
+		}
+		for (ge = LIST_HEAD(vs->vsg->addr_range); ge; ELEMENT_NEXT(ge)) {
 			vsg_entry = ELEMENT_DATA(ge);
 			addr_ip = (vsg_entry->addr.ss_family == AF_INET6) ?
-				  ((struct sockaddr_in6 *)&vsg_entry->addr)->sin6_addr.s6_addr32[3]:
-				  ((struct sockaddr_in *)&vsg_entry->addr)->sin_addr.s_addr;
-			state = UPDATE_STATS_VSG_RANGE_IP;
-			continue;
-		case UPDATE_STATS_VSG_RANGE_IP:
-			if (((addr_ip >> 24) & 0xFF) > vsg_entry->range) {
-				state = UPDATE_STATS_VSG_RANGE;
-				continue;
-			}
-			if (vsg_entry->addr.ss_family == AF_INET6) {
+				    ntohs(((struct sockaddr_in6 *)&vsg_entry->addr)->sin6_addr.s6_addr16[7]) :
+				    ntohl(((struct sockaddr_in *)&vsg_entry->addr)->sin_addr.s_addr);
+			if (vsg_entry->addr.ss_family == AF_INET6)
 				inet_sockaddrip6(&vsg_entry->addr, &nfaddr.in6);
-				nfaddr.in6.s6_addr32[3] = addr_ip;
-			} else {
-				nfaddr.in.s_addr = addr_ip;
-			}
-			serv = ipvs_get_service(0,
-						vsg_entry->addr.ss_family,
-						vs->service_type,
-						nfaddr,
-						inet_sockaddrport(&vsg_entry->addr));
-			addr_ip += 0x01000000;
-			break;
-		}
-		if (!serv)
-			continue;
-
-		/* Update virtual server stats */
-#define ADD_TO_VSSTATS(X) vs->stats.X += serv->stats.X;
-		ADD_TO_VSSTATS(conns);
-		ADD_TO_VSSTATS(inpkts);
-		ADD_TO_VSSTATS(outpkts);
-		ADD_TO_VSSTATS(inbytes);
-		ADD_TO_VSSTATS(outbytes);
-		ADD_TO_VSSTATS(cps);
-		ADD_TO_VSSTATS(inpps);
-		ADD_TO_VSSTATS(outpps);
-		ADD_TO_VSSTATS(inbps);
-		ADD_TO_VSSTATS(outbps);
-
-		/* Get real servers */
-		dests = ipvs_get_dests(serv);
-		if (!dests) {
-			FREE(serv);
-			return;
-		}
-		for (i = 0; i < dests->num_dests; i++) {
-			rs = NULL;
-
-#define VSD_EQUAL(entity) (((entity)->addr.ss_family == AF_INET &&	\
-			    dests->entrytable[i].af == AF_INET &&	\
-			    inaddr_equal(AF_INET,			\
-					 &dests->entrytable[i].addr,    \
-					 &((struct sockaddr_in *)&(entity)->addr)->sin_addr) &&	\
-			    dests->entrytable[i].port == ((struct sockaddr_in *)&(entity)->addr)->sin_port) || \
-			    ((entity)->addr.ss_family == AF_INET6 &&	\
-			    dests->entrytable[i].af == AF_INET6 &&	\
-			    inaddr_equal(AF_INET6,			\
-					 &dests->entrytable[i].addr,	\
-					 &((struct sockaddr_in6 *)&(entity)->addr)->sin6_addr) &&	\
-			    dests->entrytable[i].port == ((struct sockaddr_in6 *)&(entity)->addr)->sin6_port))
-			/* Is it the sorry server? */
-			if (vs->s_svr && VSD_EQUAL(vs->s_svr))
-				rs = vs->s_svr;
-			else if (!LIST_ISEMPTY(vs->rs))
-				/* Search for a match in the list of real servers */
-				for (e = LIST_HEAD(vs->rs); e; ELEMENT_NEXT(e)) {
-					rs = ELEMENT_DATA(e);
-					if (VSD_EQUAL(rs))
-						break;
-				}
-			if (rs) {
-#define ADD_TO_RSSTATS(X) rs->X += dests->entrytable[i].X
-				ADD_TO_RSSTATS(activeconns);
-				ADD_TO_RSSTATS(inactconns);
-				ADD_TO_RSSTATS(persistconns);
-				ADD_TO_RSSTATS(stats.conns);
-				ADD_TO_RSSTATS(stats.inpkts);
-				ADD_TO_RSSTATS(stats.outpkts);
-				ADD_TO_RSSTATS(stats.inbytes);
-				ADD_TO_RSSTATS(stats.outbytes);
-				ADD_TO_RSSTATS(stats.cps);
-				ADD_TO_RSSTATS(stats.inpps);
-				ADD_TO_RSSTATS(stats.outpps);
-				ADD_TO_RSSTATS(stats.inbps);
-				ADD_TO_RSSTATS(stats.outbps);
+
+			port = inet_sockaddrport(&vsg_entry->addr);
+			for (i = 0; i <= vsg_entry->range; i++, addr_ip++) {
+				if (vsg_entry->addr.ss_family == AF_INET6)
+					nfaddr.in6.s6_addr16[7] = htons(addr_ip);
+				else
+					nfaddr.ip = htonl(addr_ip);
+
+				ipvs_update_vs_stats(vs, 0, &nfaddr, port);
 			}
 		}
-		FREE(dests);
-		FREE(serv);
+	} else if (vs->vfwmark) {
+		memset(&nfaddr, 0, sizeof(nfaddr));
+		ipvs_update_vs_stats(vs, vs->vfwmark, &nfaddr, 0);
+	} else {
+		memcpy(&nfaddr, (vs->addr.ss_family == AF_INET6)?
+		       (void*)(&((struct sockaddr_in6 *)&vs->addr)->sin6_addr):
+		       (void*)(&((struct sockaddr_in *)&vs->addr)->sin_addr),
+		       sizeof(nfaddr));
+		ipvs_update_vs_stats(vs, 0, &nfaddr, inet_sockaddrport(&vs->addr));
 	}
 }
-#endif /* _WITH_SNMP_ */
-
-#endif
+#endif /* _WITH_SNMP_CHECKER_ */
 
+#ifdef _WITH_VRRP_
 /*
  * Common IPVS functions
  */
+/* Note: This function is called in the context of the vrrp child process, not the checker process */
 void
-ipvs_syncd_master(char *ifname, int syncid)
+ipvs_syncd_master(const struct lvs_syncd_config *config)
 {
-	ipvs_syncd_cmd(IPVS_STOPDAEMON, ifname, IPVS_BACKUP, syncid);
-	ipvs_syncd_cmd(IPVS_STARTDAEMON, ifname, IPVS_MASTER, syncid);
+	ipvs_syncd_cmd(IPVS_STOPDAEMON, config, IPVS_BACKUP, false, false);
+	ipvs_syncd_cmd(IPVS_STARTDAEMON, config, IPVS_MASTER, false, false);
 }
 
+/* Note: This function is called in the context of the vrrp child process, not the checker process */
 void
-ipvs_syncd_backup(char *ifname, int syncid)
-{
-	ipvs_syncd_cmd(IPVS_STOPDAEMON, ifname, IPVS_MASTER, syncid);
-	ipvs_syncd_cmd(IPVS_STARTDAEMON, ifname, IPVS_BACKUP, syncid);
-}
-
-/*
- * Utility functions coming from Wensong code
- */
-
-static int
-parse_bps(char *buf, unsigned *bps)
-{
-	int i;
-	if (buf == NULL) {
-		*bps = 0;
-		return 1;
-	}
-	/**only support bps in MB??**/
-	if ((i = string_to_number(buf, 0, 1024)) == -1)
-		return 0;
-	*bps = i;
-	return 1;
-}
-
-static int
-parse_limit_proportion(char *buf, unsigned *limit_proportion)
-{
-        int i;
-        if (buf == NULL) {
-                *limit_proportion = 100;
-                return 1;
-        }
-        if ((i = string_to_number(buf, 0, 100)) == -1) {
-                *limit_proportion = 100;
-                return 0;
-        }
-        *limit_proportion = i;
-        return 1;	
-}
-
-static int
-parse_timeout(char *buf, unsigned *timeout)
-{
-	int i;
-
-	if (buf == NULL) {
-		*timeout = IP_VS_TEMPLATE_TIMEOUT;
-		return 1;
-	}
-
-	if ((i = string_to_number(buf, 0, 86400 * 31)) == -1)
-		return 0;
-
-	*timeout = i * (IP_VS_TEMPLATE_TIMEOUT / (6*60));
-	return 1;
-}
-
-static int
-string_to_number(const char *s, int min, int max)
+ipvs_syncd_backup(const struct lvs_syncd_config *config)
 {
-	int number;
-	char *end;
-
-	number = (int) strtol(s, &end, 10);
-	if (*end == '\0' && end != s) {
-		/*
-		 * We parsed a number, let's see if we want this.
-		 * If max <= min then ignore ranges
-		 */
-		if (max <= min || (min <= number && number <= max))
-			return number;
-		else
-			return -1;
-	} else
-		return -1;
+	ipvs_syncd_cmd(IPVS_STOPDAEMON, config, IPVS_MASTER, false, false);
+	ipvs_syncd_cmd(IPVS_STARTDAEMON, config, IPVS_BACKUP, false, false);
 }
+#endif
diff --git a/tools/keepalived/keepalived/check/ipwrapper.c b/tools/keepalived/keepalived/check/ipwrapper.c
index af2bd4b89..a83ec7450 100755
--- a/tools/keepalived/keepalived/check/ipwrapper.c
+++ b/tools/keepalived/keepalived/check/ipwrapper.c
@@ -17,248 +17,366 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <unistd.h>
+#include <inttypes.h>
+
 #include "ipwrapper.h"
-#include "ipvswrapper.h"
+#include "check_api.h"
 #include "logger.h"
-#include "memory.h"
 #include "utils.h"
-#include "notify.h"
 #include "main.h"
-#ifdef _WITH_SNMP_
+#ifdef _WITH_SNMP_CHECKER_
   #include "check_snmp.h"
 #endif
-/* out-of-order functions declarations */
-static void update_quorum_state(virtual_server_t * vs);
+#include "global_data.h"
+#include "smtp.h"
+#include "check_daemon.h"
+
+static bool __attribute((pure))
+vs_iseq(const virtual_server_t *vs_a, const virtual_server_t *vs_b)
+{
+	if (!vs_a->vsgname != !vs_b->vsgname)
+		return false;
+
+	if (vs_a->vsgname) {
+		/* Should we check the vsg entries match? */
+		if (inet_sockaddrport(&vs_a->addr) != inet_sockaddrport(&vs_b->addr))
+			return false;
+
+		return !strcmp(vs_a->vsgname, vs_b->vsgname);
+	} else if (vs_a->af != vs_b->af)
+		return false;
+	else if (vs_a->vfwmark) {
+		if (vs_a->vfwmark != vs_b->vfwmark)
+			return false;
+	} else {
+		if (vs_a->service_type != vs_b->service_type ||
+		    !sockstorage_equal(&vs_a->addr, &vs_b->addr))
+			return false;
+	}
+
+	return true;
+}
+
+static bool __attribute((pure))
+vsge_iseq(const virtual_server_group_entry_t *vsge_a, const virtual_server_group_entry_t *vsge_b)
+{
+	if (vsge_a->is_fwmark != vsge_b->is_fwmark)
+		return false;
+
+	if (vsge_a->is_fwmark)
+		return vsge_a->vfwmark == vsge_b->vfwmark;
+
+	if (!sockstorage_equal(&vsge_a->addr, &vsge_b->addr) ||
+	    vsge_a->range != vsge_b->range)
+		return false;
+
+	return true;
+}
+
+static bool __attribute((pure))
+rs_iseq(const real_server_t *rs_a, const real_server_t *rs_b)
+{
+	return sockstorage_equal(&rs_a->addr, &rs_b->addr);
+}
 
-/* Returns the sum of all RS weight in a virtual server. */
-long unsigned
+/* Returns the sum of all alive RS weight in a virtual server. */
+static unsigned long __attribute__ ((pure))
 weigh_live_realservers(virtual_server_t * vs)
 {
 	element e;
 	real_server_t *svr;
-	long unsigned count = 0;
+	long count = 0;
 
-	if (LIST_ISEMPTY(vs->rs))
-		return count;
-
-	for (e = LIST_HEAD(vs->rs); e; ELEMENT_NEXT(e)) {
-		svr = ELEMENT_DATA(e);
+	LIST_FOREACH(vs->rs, svr, e) {
 		if (ISALIVE(svr))
 			count += svr->weight;
 	}
 	return count;
 }
 
+static void
+notify_fifo_vs(virtual_server_t* vs)
+{
+	const char *state = vs->quorum_state_up ? "UP" : "DOWN";
+	size_t size;
+	char *line;
+	const char *vs_str;
+
+	if (global_data->notify_fifo.fd == -1 &&
+	    global_data->lvs_notify_fifo.fd == -1)
+		return;
+
+	vs_str = FMT_VS(vs);
+	size = strlen(vs_str) + strlen(state) + 5;
+	line = MALLOC(size + 1);
+	if (!line)
+		return;
+
+	snprintf(line, size + 1, "VS %s %s\n", vs_str, state);
+
+	if (global_data->notify_fifo.fd != -1)
+		if (write(global_data->notify_fifo.fd, line, size) == -1) {}
+
+	if (global_data->lvs_notify_fifo.fd != -1)
+		if (write(global_data->lvs_notify_fifo.fd, line, size) == -1) {}
+
+	FREE(line);
+}
+
+static void
+notify_fifo_rs(virtual_server_t* vs, real_server_t* rs)
+{
+	const char *state = rs->alive ? "UP" : "DOWN";
+	size_t size;
+	char *line;
+	const char *rs_str;
+	const char *vs_str;
+
+	if (global_data->notify_fifo.fd == -1 &&
+	    global_data->lvs_notify_fifo.fd == -1)
+		return;
+
+	rs_str = FMT_RS(rs, vs);
+	vs_str = FMT_VS(vs);
+	size = strlen(rs_str) + strlen(vs_str) + strlen(state) + 6;
+	line = MALLOC(size + 1);
+	if (!line)
+		return;
+
+	snprintf(line, size + 1, "RS %s %s %s\n", rs_str, vs_str, state);
+
+	if (global_data->notify_fifo.fd != -1)
+		if (write(global_data->notify_fifo.fd, line, size) == - 1) {}
+
+	if (global_data->lvs_notify_fifo.fd != -1)
+		if (write(global_data->lvs_notify_fifo.fd, line, size) == -1) {}
+
+	FREE(line);
+}
+
+static void
+do_vs_notifies(virtual_server_t* vs, bool init, long threshold, long weight_sum, bool stopping)
+{
+	notify_script_t *notify_script = vs->quorum_state_up ? vs->notify_quorum_up : vs->notify_quorum_down;
+	char message[80];
+
+#ifdef _WITH_SNMP_CHECKER_
+	check_snmp_quorum_trap(vs, stopping);
+#endif
+
+	/* Only send non SNMP notifies when stopping if omega set */
+	if (stopping && !vs->omega)
+		return;
+
+	if (notify_script) {
+		if (stopping)
+			system_call_script(master, child_killed_thread, NULL, TIMER_HZ, notify_script);
+		else
+			notify_exec(notify_script);
+	}
+
+	notify_fifo_vs(vs);
+
+	if (vs->smtp_alert) {
+		if (stopping)
+			snprintf(message, sizeof(message), "=> Shutting down <=");
+		else
+			snprintf(message, sizeof(message), "=> %s %u+%u=%ld <= %ld <=",
+				    vs->quorum_state_up ?
+						   init ? "Starting with quorum up" :
+							  "Gained quorum" :
+						   init ? "Starting with quorum down" :
+							  "Lost quorum",
+				    vs->quorum,
+				    vs->hysteresis,
+				    threshold,
+				    weight_sum);
+		smtp_alert(SMTP_MSG_VS, vs, vs->quorum_state_up ? "UP" : "DOWN", message);
+	}
+}
+
+static void
+do_rs_notifies(virtual_server_t* vs, real_server_t* rs, bool stopping)
+{
+	notify_script_t *notify_script = rs->alive ? rs->notify_up : rs->notify_down;
+
+	if (notify_script) {
+		if (stopping)
+			system_call_script(master, child_killed_thread, NULL, TIMER_HZ, notify_script);
+		else
+			notify_exec(notify_script);
+	}
+
+	notify_fifo_rs(vs, rs);
+
+	/* The sending of smtp_alerts is handled by the individual checker
+	 * so that the message can have context for the checker */
+
+#ifdef _WITH_SNMP_CHECKER_
+	check_snmp_rs_trap(rs, vs, stopping);
+#endif
+}
+
 /* Remove a realserver IPVS rule */
-static int
-clear_service_rs(list vs_group, virtual_server_t * vs, list l)
+static void
+clear_service_rs(virtual_server_t * vs, list l, bool stopping)
 {
 	element e;
 	real_server_t *rs;
-	long unsigned weight_sum;
+	long weight_sum;
+	long threshold = vs->quorum - vs->hysteresis;
+	bool sav_inhibit;
+	smtp_rs rs_info = { .vs = vs };
+
+	LIST_FOREACH(l, rs, e) {
+		if (rs->set || stopping)
+			log_message(LOG_INFO, "%s %sservice %s from VS %s",
+					stopping ? "Shutting down" : "Removing",
+					rs->inhibit && !rs->alive ? "(inhibited) " : "",
+					FMT_RS(rs, vs),
+					FMT_VS(vs));
+
+		if (!rs->set)
+			continue;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		rs = ELEMENT_DATA(e);
-		if (ISALIVE(rs)) {
-			log_message(LOG_INFO, "Removing service %s from VS %s"
-						, FMT_RS(rs)
-						, FMT_VS(vs));
-			if (!ipvs_cmd(LVS_CMD_DEL_DEST, vs_group, vs, rs))
-				return 0;
-			UNSET_ALIVE(rs);
-			if (!vs->omega)
-				continue;
+		/* Force removal of real servers with inhibit_on_failure set */
+		sav_inhibit = rs->inhibit;
+		rs->inhibit = false;
 
-			/* In Omega mode we call VS and RS down notifiers
-			 * all the way down the exit, as necessary.
-			 */
-			if (rs->notify_down) {
-				log_message(LOG_INFO, "Executing [%s] for service %s in VS %s"
-						    , rs->notify_down
-						    , FMT_RS(rs)
-						    , FMT_VS(vs));
-				notify_exec(rs->notify_down);
-			}
-#ifdef _WITH_SNMP_
-			check_snmp_rs_trap(rs, vs);
-#endif
+		ipvs_cmd(LVS_CMD_DEL_DEST, vs, rs);
 
-			/* Sooner or later VS will lose the quorum (if any). However,
-			 * we don't push in a sorry server then, hence the regression
-			 * is intended.
-			 */
-			weight_sum = weigh_live_realservers(vs);
-			if (vs->quorum_state == UP && (
-				!weight_sum ||
-				weight_sum < vs->quorum - vs->hysteresis)
-			) {
-				vs->quorum_state = DOWN;
-				if (vs->quorum_down) {
-					log_message(LOG_INFO, "Executing [%s] for VS %s"
-							    , vs->quorum_down
-							    , FMT_VS(vs));
-					notify_exec(vs->quorum_down);
-				}
-#ifdef _WITH_SNMP_
-				check_snmp_quorum_trap(vs);
+		rs->inhibit = sav_inhibit;	/* Restore inhibit flag */
+
+		if (!rs->alive)
+			continue;
+
+		UNSET_ALIVE(rs);
+
+		/* We always want to send SNMP messages on shutdown */
+		if (!vs->omega && stopping) {
+#ifdef _WITH_SNMP_CHECKER_
+			check_snmp_rs_trap(rs, vs, true);
 #endif
-			}
-		} else if (rs->inhibit) { /* delete dead inhibited entry */
-			log_message(LOG_INFO, "Removing inhibited service %s from VS %s",
-					FMT_RS(rs), FMT_VS(vs));
-
-			/* reset inhibit flag */
-			rs->inhibit = 0;
-			/* set alive flag */
-			SET_ALIVE(rs);
-
-			if (!ipvs_cmd(LVS_CMD_DEL_DEST, vs_group, vs, rs)) {
-				UNSET_ALIVE(rs);
-				rs->inhibit = 1;
-				return 0;
-			}
+			continue;
+		}
 
-			UNSET_ALIVE(rs);
-			rs->inhibit = 1;
+		/* In Omega mode we call VS and RS down notifiers
+		 * all the way down the exit, as necessary.
+		 */
+		do_rs_notifies(vs, rs, stopping);
+
+		/* Send SMTP alert */
+		if (rs->smtp_alert) {
+			rs_info.rs = rs;
+			smtp_alert(SMTP_MSG_RS_SHUT, &rs_info, "DOWN", stopping ? "=> Shutting down <=" : "=> Removing <=");
 		}
 	}
 
-	return 1;
+	/* Sooner or later VS will lose the quorum (if any). However,
+	 * we don't push in a sorry server then, hence the regression
+	 * is intended.
+	 */
+	weight_sum = weigh_live_realservers(vs);
+	if (stopping ||
+	    (vs->quorum_state_up &&
+	     (!weight_sum || weight_sum < threshold))) {
+		vs->quorum_state_up = false;
+		do_vs_notifies(vs, false, threshold, weight_sum, stopping);
+	}
 }
 
 /* Remove a virtualserver IPVS rule */
-static int
-clear_service_vs(list vs_group, virtual_server_t * vs)
+static void
+clear_service_vs(virtual_server_t * vs, bool stopping)
 {
-	/* Processing real server queue */
-	if (!LIST_ISEMPTY(vs->rs)) {
-		if (vs->s_svr) {
-			if (ISALIVE(vs->s_svr))
-				if (!ipvs_cmd(LVS_CMD_DEL_DEST, vs_group, vs, vs->s_svr))
-					return 0;
-		} else if (!clear_service_rs(vs_group, vs, vs->rs))
-			return 0;
-		/* The above will handle Omega case for VS as well. */
+	bool sav_inhibit;
+
+	if (global_data->lvs_flush_onstop == LVS_NO_FLUSH) {
+		/* Processing real server queue */
+		if (vs->s_svr && vs->s_svr->set) {
+			/* Ensure removed if inhibit_on_failure set */
+			sav_inhibit = vs->s_svr->inhibit;
+			vs->s_svr->inhibit = false;
+
+			ipvs_cmd(LVS_CMD_DEL_DEST, vs, vs->s_svr);
+
+			vs->s_svr->inhibit = sav_inhibit;
+
+			UNSET_ALIVE(vs->s_svr);
+		}
+
+		/* Even if the sorry server was configured, if we are using
+		 * inhibit_on_failure, then real servers may be configured. */
+		clear_service_rs(vs, vs->rs, stopping);
 	}
+	else if (vs->s_svr && vs->s_svr->set)
+		UNSET_ALIVE(vs->s_svr);
 
-	if (!ipvs_cmd(LVS_CMD_DEL, vs_group, vs, NULL))
-		return 0;
+	/* The above will handle Omega case for VS as well. */
+
+	ipvs_cmd(LVS_CMD_DEL, vs, NULL);
 
 	UNSET_ALIVE(vs);
-	return 1;
 }
 
 /* IPVS cleaner processing */
-int
+void
 clear_services(void)
 {
 	if (!check_data)
-		return 0;
+		return;
 
 	element e;
-	list l = check_data->vs;
 	virtual_server_t *vs;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vs = ELEMENT_DATA(e);
-		if (!clear_service_vs(check_data->vs_group, vs))
-			return 0;
+	if (!check_data || !check_data->vs)
+		return;
+
+	LIST_FOREACH(check_data->vs, vs, e) {
+		/* Remove the real servers, and clear the vs unless it is
+		 * using a VS group and it is not the last vs of the same
+		 * protocol or address family using the group. */
+		clear_service_vs(vs, true);
 	}
-	return 1;
 }
 
 /* Set a realserver IPVS rules */
-static int
+static bool
 init_service_rs(virtual_server_t * vs)
 {
 	element e;
 	real_server_t *rs;
 
-	for (e = LIST_HEAD(vs->rs); e; ELEMENT_NEXT(e)) {
-		rs = ELEMENT_DATA(e);
-		/* In alpha mode, be pessimistic (or realistic?) and don't
-		 * add real servers into the VS pool. They will get there
-		 * later upon healthchecks recovery (if ever).
-		 */
-		if (vs->alpha) {
-			if (! rs->reloaded)
-				UNSET_ALIVE(rs);
+	LIST_FOREACH(vs->rs, rs, e) {
+		if (rs->reloaded) {
+			if (rs->iweight != rs->pweight)
+				update_svr_wgt(rs->iweight, vs, rs, false);
+			/* Do not re-add failed RS instantly on reload */
 			continue;
 		}
-		if (!ISALIVE(rs)) {
-			if (!ipvs_cmd(LVS_CMD_ADD_DEST, check_data->vs_group, vs, rs))
-				return 0;
-			else
+
+		/* In alpha mode, be pessimistic (or realistic?) and don't
+		 * add real servers into the VS pool unless inhibit_on_failure.
+		 * They will get there later upon healthchecks recovery (if ever).
+		 */
+		if ((!rs->num_failed_checkers && !ISALIVE(rs)) ||
+		    (rs->inhibit && !rs->set)) {
+			ipvs_cmd(LVS_CMD_ADD_DEST, vs, rs);
+			if (!rs->num_failed_checkers) {
 				SET_ALIVE(rs);
-		} else if (vs->vsgname) {
-			UNSET_ALIVE(rs);
-			if (!ipvs_cmd(LVS_CMD_ADD_DEST, check_data->vs_group, vs, rs))
-				return 0;
-			SET_ALIVE(rs);
+				if (global_data->rs_init_notifies)
+					do_rs_notifies(vs, rs, false);
+			}
 		}
 	}
 
-	return 1;
-}
-
-/* Set a virtualserver IPVS rules */
-static int
-init_service_vs(virtual_server_t * vs)
-{
-	/* Init the VS root */
-	if (!ISALIVE(vs) || vs->vsgname) {
-		if (!ipvs_cmd(LVS_CMD_ADD, check_data->vs_group, vs, NULL))
-			return 0;
-		else
-			SET_ALIVE(vs);
-	}
-
-	/* Set local ip address in "FNAT" mode of IPVS */
-	if (vs->local_addr_gname &&
-        (vs->loadbalancing_kind == IP_VS_CONN_F_FULLNAT ||
-         vs->loadbalancing_kind == IP_VS_CONN_F_SNAT)) {
-		if (!ipvs_cmd(LVS_CMD_ADD_LADDR, check_data->vs_group, vs, NULL))
-			return 0; 
-	}
-    
-    /*Set blacklist ip address */
-    if (vs->blklst_addr_gname) {
-        if (!ipvs_cmd(LVS_CMD_ADD_BLKLST, check_data->vs_group, vs, NULL))
-            return 0;
-    }
-        
-	/* Processing real server queue */
-	if (!LIST_ISEMPTY(vs->rs)) {
-		if (vs->alpha && ! vs->reloaded)
-			vs->quorum_state = DOWN;
-		if (!init_service_rs(vs))
-			return 0;
-	}
-
-	/* if the service was reloaded, we may have got/lost quorum due to quorum setting changed */
-	if (vs->reloaded)
-		update_quorum_state(vs);
-
-	return 1;
-}
-
-/* Set IPVS rules */
-int
-init_services(void)
-{
-	element e;
-	list l = check_data->vs;
-	virtual_server_t *vs;
-
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vs = ELEMENT_DATA(e);
-		if (!init_service_vs(vs))
-			return 0;
-	}
-	return 1;
+	return true;
 }
 
 static int init_tunnel_entry(tunnel_entry *entry)
@@ -303,192 +421,261 @@ int init_tunnel(void)
 	return IPVS_SUCCESS;
 }
 
+static void
+sync_service_vsg(virtual_server_t * vs)
+{
+	virtual_server_group_t *vsg;
+	virtual_server_group_entry_t *vsge;
+	list *l;
+	element e;
+
+	vsg = vs->vsg;
+	list ll[] = {
+		vsg->addr_range,
+		vsg->vfwmark,
+		NULL,
+	};
+
+	for (l = ll; *l; l++) {
+		LIST_FOREACH(*l, vsge, e) {
+			if (!vsge->reloaded) {
+				log_message(LOG_INFO, "VS [%s:%" PRIu32 ":%u] added into group %s"
+// Does this work with no address?
+						    , inet_sockaddrtotrio(&vsge->addr, vs->service_type)
+						    , vsge->range
+						    , vsge->vfwmark
+						    , vs->vsgname);
+				/* add all reloaded and alive/inhibit-set dests
+				 * to the newly created vsg item */
+				ipvs_group_sync_entry(vs, vsge);
+			}
+		}
+	}
+}
+
+
+
 /* add or remove _alive_ real servers from a virtual server */
-void
-perform_quorum_state(virtual_server_t *vs, int add)
+static void
+perform_quorum_state(virtual_server_t *vs, bool add)
 {
 	element e;
 	real_server_t *rs;
 
-	if (LIST_ISEMPTY(vs->rs))
-		return;
-
 	log_message(LOG_INFO, "%s the pool for VS %s"
 			    , add?"Adding alive servers to":"Removing alive servers from"
 			    , FMT_VS(vs));
-	for (e = LIST_HEAD(vs->rs); e; ELEMENT_NEXT(e)) {
-		rs = ELEMENT_DATA(e);
+	LIST_FOREACH(vs->rs, rs, e) {
 		if (!ISALIVE(rs)) /* We only handle alive servers */
 			continue;
+// ??? The following seems unnecessary
 		if (add)
-			rs->alive = 0;
-		ipvs_cmd(add?LVS_CMD_ADD_DEST:LVS_CMD_DEL_DEST, check_data->vs_group, vs, rs);
-		rs->alive = 1;
+			rs->alive = false;
+		ipvs_cmd(add?LVS_CMD_ADD_DEST:LVS_CMD_DEL_DEST, vs, rs);
+		rs->alive = true;
+	}
+}
+
+void
+set_quorum_states(void)
+{
+	virtual_server_t *vs;
+	element e;
+
+	if (LIST_ISEMPTY(check_data->vs))
+		return;
+
+	for (e = LIST_HEAD(check_data->vs); e; ELEMENT_NEXT(e)) {
+		vs = ELEMENT_DATA(e);
+
+		vs->quorum_state_up = (weigh_live_realservers(vs) >= vs->quorum + vs->hysteresis);
 	}
 }
 
 /* set quorum state depending on current weight of real servers */
 static void
-update_quorum_state(virtual_server_t * vs)
+update_quorum_state(virtual_server_t * vs, bool init)
 {
-	long unsigned weight_sum = weigh_live_realservers(vs);
+	long weight_sum = weigh_live_realservers(vs);
+	long threshold;
+
+	threshold = vs->quorum + (vs->quorum_state_up ? -1 : 1) * vs->hysteresis;
 
 	/* If we have just gained quorum, it's time to consider notify_up. */
-	if (vs->quorum_state == DOWN &&
-	    weight_sum >= vs->quorum + vs->hysteresis) {
-		vs->quorum_state = UP;
-		log_message(LOG_INFO, "Gained quorum %lu+%lu=%lu <= %u for VS %s"
+	if (!vs->quorum_state_up &&
+	    weight_sum >= threshold) {
+		vs->quorum_state_up = true;
+		log_message(LOG_INFO, "Gained quorum %u+%u=%ld <= %ld for VS %s"
 				    , vs->quorum
 				    , vs->hysteresis
-				    , vs->quorum + vs->hysteresis
+				    , threshold
 				    , weight_sum
 				    , FMT_VS(vs));
 		if (vs->s_svr && ISALIVE(vs->s_svr)) {
+			/* Adding back alive real servers */
+			perform_quorum_state(vs, true);
+
 			log_message(LOG_INFO, "%s sorry server %s from VS %s"
 					    , (vs->s_svr->inhibit ? "Disabling" : "Removing")
-					    , FMT_RS(vs->s_svr)
+					    , FMT_RS(vs->s_svr, vs)
 					    , FMT_VS(vs));
 
-			ipvs_cmd(LVS_CMD_DEL_DEST, check_data->vs_group, vs, vs->s_svr);
-			vs->s_svr->alive = 0;
-
-			/* Adding back alive real servers */
-			perform_quorum_state(vs, 1);
+			ipvs_cmd(LVS_CMD_DEL_DEST, vs, vs->s_svr);
+			vs->s_svr->alive = false;
 		}
-		if (vs->quorum_up) {
-			log_message(LOG_INFO, "Executing [%s] for VS %s"
-					    , vs->quorum_up
-					    , FMT_VS(vs));
-			notify_exec(vs->quorum_up);
-		}
-#ifdef _WITH_SNMP_
-               check_snmp_quorum_trap(vs);
-#endif
+
+		do_vs_notifies(vs, init, threshold, weight_sum, false);
+
 		return;
 	}
-
-	/* If we have just lost quorum for the VS, we need to consider
-	 * VS notify_down and sorry_server cases
-	 */
-	if (vs->quorum_state == UP && (
-		!weight_sum ||
-	    weight_sum < vs->quorum - vs->hysteresis)
-	) {
-		vs->quorum_state = DOWN;
-		log_message(LOG_INFO, "Lost quorum %lu-%lu=%lu > %u for VS %s"
+	else if ((vs->quorum_state_up &&
+		  (!weight_sum || weight_sum < threshold)) ||
+		 (init && !vs->quorum_state_up &&
+		  vs->s_svr && !ISALIVE(vs->s_svr))) {
+		/* We have just lost quorum for the VS, we need to consider
+		 * VS notify_down and sorry_server cases
+		 *   or
+		 * We are starting up and need to add the sorry server
+		 */
+		vs->quorum_state_up = false;
+		log_message(LOG_INFO, "%s %u-%u=%ld > %ld for VS %s"
+				    , init ? "Starting with quorum down" : "Lost quorum"
 				    , vs->quorum
 				    , vs->hysteresis
-				    , vs->quorum - vs->hysteresis
+				    , threshold
 				    , weight_sum
 				    , FMT_VS(vs));
-		if (vs->quorum_down) {
-			log_message(LOG_INFO, "Executing [%s] for VS %s"
-					    , vs->quorum_down
-					    , FMT_VS(vs));
-			notify_exec(vs->quorum_down);
-		}
-		if (vs->s_svr) {
+
+		if (vs->s_svr && !ISALIVE(vs->s_svr)) {
 			log_message(LOG_INFO, "%s sorry server %s to VS %s"
 					    , (vs->s_svr->inhibit ? "Enabling" : "Adding")
-					    , FMT_RS(vs->s_svr)
+					    , FMT_RS(vs->s_svr, vs)
 					    , FMT_VS(vs));
 
 			/* the sorry server is now up in the pool, we flag it alive */
-			ipvs_cmd(LVS_CMD_ADD_DEST, check_data->vs_group, vs, vs->s_svr);
-			vs->s_svr->alive = 1;
+			ipvs_cmd(LVS_CMD_ADD_DEST, vs, vs->s_svr);
+			vs->s_svr->alive = true;
 
 			/* Remove remaining alive real servers */
-			perform_quorum_state(vs, 0);
+			perform_quorum_state(vs, false);
 		}
-#ifdef _WITH_SNMP_
-		check_snmp_quorum_trap(vs);
-#endif
-		return;
+
+		do_vs_notifies(vs, init, threshold, weight_sum, false);
 	}
 }
 
 /* manipulate add/remove rs according to alive state */
-bool
-perform_svr_state(int alive, virtual_server_t * vs, real_server_t * rs)
+static bool
+perform_svr_state(bool alive, checker_t *checker)
 {
 	/*
 	 * | ISALIVE(rs) | alive | context
-	 * | 0           | 0     | first check failed under alpha mode, unreachable here
-	 * | 0           | 1     | RS went up, add it to the pool
-	 * | 1           | 0     | RS went down, remove it from the pool
-	 * | 1           | 1     | first check succeeded w/o alpha mode, unreachable here
+	 * | false       | false | first check failed under alpha mode, unreachable here
+	 * | false       | true  | RS went up, add it to the pool
+	 * | true        | false | RS went down, remove it from the pool
+	 * | true        | true  | first check succeeded w/o alpha mode, unreachable here
 	 */
-	if (!ISALIVE(rs) && alive) {
-		log_message(LOG_INFO, "%s service %s to VS %s"
-				    , (rs->inhibit) ? "Enabling" : "Adding"
-				    , FMT_RS(rs)
-				    , FMT_VS(vs));
-		/* Add only if we have quorum or no sorry server */
-		if (vs->quorum_state == UP || !vs->s_svr || !ISALIVE(vs->s_svr)) {
-			if (ipvs_cmd(LVS_CMD_ADD_DEST, check_data->vs_group, vs, rs) != IPVS_SUCCESS) {
-				log_message(LOG_INFO, "LVS cmd add dest fail!");
-				return false;
-			}
-		}
-		rs->alive = alive;
-		if (rs->notify_up) {
-			log_message(LOG_INFO, "Executing [%s] for service %s in VS %s"
-					    , rs->notify_up
-					    , FMT_RS(rs)
-					    , FMT_VS(vs));
-			notify_exec(rs->notify_up);
-		}
-#ifdef _WITH_SNMP_
-		check_snmp_rs_trap(rs, vs);
-#endif
 
-		/* We may have gained quorum */
-		update_quorum_state(vs);
+	virtual_server_t * vs = checker->vs;
+	real_server_t * rs = checker->rs;
+
+	if (ISALIVE(rs) == alive)
+		return true;
+
+	log_message(LOG_INFO, "%sing service %s to VS %s"
+			    , alive ? (rs->inhibit) ? "Enabl" : "Add" :
+				      (rs->inhibit) ? "Disabl" : "Remov"
+			    , FMT_RS(rs, vs)
+			    , FMT_VS(vs));
+
+	/* Change only if we have quorum or no sorry server */
+	if (vs->quorum_state_up || !vs->s_svr || !ISALIVE(vs->s_svr)) {
+		if (ipvs_cmd(alive ? LVS_CMD_ADD_DEST : LVS_CMD_DEL_DEST, vs, rs))
+			return false;
 	}
+	rs->alive = alive;
+	do_rs_notifies(vs, rs, false);
 
-	if (ISALIVE(rs) && !alive) {
-		log_message(LOG_INFO, "%s service %s from VS %s"
-				    , (rs->inhibit) ? "Disabling" : "Removing"
-				    , FMT_RS(rs)
-				    , FMT_VS(vs));
+	/* We may have changed quorum state. If the quorum wasn't up
+	 * but is now up, this is where the rs is added. */
+	update_quorum_state(vs, false);
 
-		/* server is down, it is removed from the LVS realserver pool
-		 * Remove only if we have quorum or no sorry server
-		 */
-		if (vs->quorum_state == UP || !vs->s_svr || !ISALIVE(vs->s_svr)) {
-			if (ipvs_cmd(LVS_CMD_DEL_DEST, check_data->vs_group, vs, rs) != IPVS_SUCCESS) {
-				log_message(LOG_INFO, "LVS cmd del dest fail!");
-				return false;
-			}
-		}
-		rs->alive = alive;
-		if (rs->notify_down) {
-			log_message(LOG_INFO, "Executing [%s] for service %s in VS %s"
-					    , rs->notify_down
-					    , FMT_RS(rs)
-					    , FMT_VS(vs));
-			notify_exec(rs->notify_down);
-		}
-#ifdef _WITH_SNMP_
-		check_snmp_rs_trap(rs, vs);
-#endif
+	return true;
+}
 
-		/* We may have lost quorum */
-		update_quorum_state(vs);
+/* Set a virtualserver IPVS rules */
+static bool
+init_service_vs(virtual_server_t * vs)
+{
+	/* Init the VS root */
+	if (!ISALIVE(vs) || vs->vsg) {
+		ipvs_cmd(LVS_CMD_ADD, vs, NULL);
+		SET_ALIVE(vs);
+	}
+
+	/*Set local ip address in "FNAT" mode of IPVS */
+	if ((vs->forwarding_method == IP_VS_CONN_F_FULLNAT) && vs->local_addr_gname) { 
+		if (!ipvs_cmd(LVS_CMD_ADD_LADDR, vs, NULL))
+			return 0; 
+	}
+
+        if ((vs->forwarding_method == IP_VS_CONN_F_FULLNAT) && vs->blklst_addr_gname) {
+                if (!ipvs_cmd(LVS_CMD_ADD_BLKLST, vs, NULL))
+                        return 0;
+        }	    
+
+	/* Processing real server queue */
+	if (!init_service_rs(vs))
+		return false;
+
+	if (vs->reloaded && vs->vsgname) {
+		/* add reloaded dests into new vsg entries */
+		sync_service_vsg(vs);
+	}
+
+	/* we may have got/lost quorum due to quorum setting changed */
+	/* also update, in case we need the sorry server in alpha mode */
+	update_quorum_state(vs, true);
+
+	/* If we have a sorry server with inhibit, add it now */
+	if (vs->s_svr && vs->s_svr->inhibit && !vs->s_svr->set) {
+		/* Make sure the sorry server is configured with weight 0 */
+		vs->s_svr->num_failed_checkers = 1;
+
+		ipvs_cmd(LVS_CMD_ADD_DEST, vs, vs->s_svr);
+
+		vs->s_svr->num_failed_checkers = 0;
+	}
+
+	return true;
+}
+
+/* Set IPVS rules */
+bool
+init_services(void)
+{
+	element e;
+	virtual_server_t *vs;
+
+	LIST_FOREACH(check_data->vs, vs, e) {
+		if (!init_service_vs(vs))
+			return false;
 	}
+
 	return true;
 }
 
 /* Store new weight in real_server struct and then update kernel. */
 void
-update_svr_wgt(int weight, virtual_server_t * vs, real_server_t * rs)
+update_svr_wgt(int weight, virtual_server_t * vs, real_server_t * rs
+		, bool update_quorum)
 {
 	if (weight != rs->weight) {
-		log_message(LOG_INFO, "Changing weight from %d to %d for %s service %s of VS %s"
+		log_message(LOG_INFO, "Changing weight from %d to %d for %sactive service %s of VS %s"
 				    , rs->weight
 				    , weight
-				    , ISALIVE(rs) ? "active" : "inactive"
-				    , FMT_RS(rs)
+				    , ISALIVE(rs) ? "" : "in"
+				    , FMT_RS(rs, vs)
 				    , FMT_VS(vs));
 		rs->weight = weight;
 		/*
@@ -498,290 +685,355 @@ update_svr_wgt(int weight, virtual_server_t * vs, real_server_t * rs)
 		 * effect later when it becomes alive.
 		 */
 		if (rs->set && ISALIVE(rs) &&
-		    (vs->quorum_state == UP || !vs->s_svr || !ISALIVE(vs->s_svr)))
-			ipvs_cmd(LVS_CMD_EDIT_DEST, check_data->vs_group, vs, rs);
-		update_quorum_state(vs);
+		    (vs->quorum_state_up || !vs->s_svr || !ISALIVE(vs->s_svr)))
+			ipvs_cmd(LVS_CMD_EDIT_DEST, vs, rs);
+		if (update_quorum)
+			update_quorum_state(vs, false);
 	}
 }
 
-/* Test if realserver is marked UP for a specific checker */
-int
-svr_checker_up(checker_id_t cid, real_server_t *rs)
+void
+set_checker_state(checker_t *checker, bool up)
 {
-	element e;
-	list l = rs->failed_checkers;
-	checker_id_t *id;
+	if (checker->is_up == up)
+		return;
 
-	/*
-	 * We assume there is not too much checker per
-	 * real server, so we consider this lookup as
-	 * o(1).
-	 */
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		id = ELEMENT_DATA(e);
-		if (*id == cid)
-			return 0;
-	}
+	checker->is_up = up;
 
-	return 1;
+	if (!up)
+		checker->rs->num_failed_checkers++;
+	else if (checker->rs->num_failed_checkers)
+		checker->rs->num_failed_checkers--;
 }
 
-static int
-remove_failed_checker_list(checker_id_t cid, real_server_t *rs)
+/* Update checker's state */
+void
+update_svr_checker_state(bool alive, checker_t *checker)
 {
-	element e;
-	list l = rs->failed_checkers;
-	checker_id_t *id;
-
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		id = ELEMENT_DATA(e);
-		if (*id == cid) {
-			free_list_element(l, e);
-			/* If we don't break, the next iteration will trigger
-			 * a SIGSEGV.
-			 */
-			break;
+	if (checker->is_up == alive) {
+		if (!checker->has_run) {
+			if (checker->alpha || !alive)
+				do_rs_notifies(checker->vs, checker->rs, false);
+			checker->has_run = true;
 		}
+		return;
 	}
-	return 0;
-}
 
-static int
-add_failed_checker_list(checker_id_t cid, real_server_t *rs)
-{
-	list l = rs->failed_checkers;
-	checker_id_t *id;
+	checker->has_run = true;
 
-	id = (checker_id_t *) MALLOC(sizeof(checker_id_t));
-	*id = cid;
-	list_add(l, id);
-
-	return 0;
-}
-
-/* Update checker's state */
-void
-update_svr_checker_state(int alive, checker_id_t cid, virtual_server_t *vs, real_server_t *rs)
-{
-	/* Handle alive state. Depopulate failed_checkers and call
-	 * perform_svr_state() independently, letting the latter sort
-	 * things out itself.
-	 */
 	if (alive) {
-		/* Remove the succeeded check from failed_checkers list. */
-		remove_failed_checker_list(cid, rs);
-		if (LIST_SIZE(rs->failed_checkers) == 0) {
-			if (!perform_svr_state(alive, vs, rs))
-				add_failed_checker_list(cid, rs);
+		/* call the UP handler unless any more failed checks found */
+		if (checker->rs->num_failed_checkers <= 1) {
+			if (!perform_svr_state(true, checker))
+				return;
 		}
 	}
-	/* Handle not alive state */
 	else {
-		add_failed_checker_list(cid, rs);
-		if (LIST_SIZE(rs->failed_checkers) == 1) {
-			if (!perform_svr_state(alive, vs, rs))
-				remove_failed_checker_list(cid, rs);
+		/* Handle not alive state */
+		if (checker->rs->num_failed_checkers == 0) {
+			if (!perform_svr_state(false, checker))
+				return;
 		}
 	}
+
+	set_checker_state(checker, alive);
 }
 
 /* Check if a vsg entry is in new data */
-static int
+static virtual_server_group_entry_t * __attribute__ ((pure))
 vsge_exist(virtual_server_group_entry_t *vsg_entry, list l)
 {
 	element e;
 	virtual_server_group_entry_t *vsge;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vsge = ELEMENT_DATA(e);
-		if (VSGE_ISEQ(vsg_entry, vsge)) {
-			/*
-			 * If vsge exist this entry
-			 * is alive since only rs entries
-			 * are changing from alive state.
-			 */
-			SET_ALIVE(vsge);
-			return 1;
-		}
+	LIST_FOREACH(l, vsge, e) {
+		if (vsge_iseq(vsg_entry, vsge))
+			return vsge;
 	}
 
-	return 0;
+	return NULL;
 }
 
 /* Clear the diff vsge of old group */
-static int
+static void
 clear_diff_vsge(list old, list new, virtual_server_t * old_vs)
 {
-	virtual_server_group_entry_t *vsge;
+	virtual_server_group_entry_t *vsge, *new_vsge;
 	element e;
 
-	for (e = LIST_HEAD(old); e; ELEMENT_NEXT(e)) {
-		vsge = ELEMENT_DATA(e);
-		if (!vsge_exist(vsge, new)) {
-			log_message(LOG_INFO, "VS [[%s]:%d:%d:%d] in group %s no longer exist" 
-					    , inet_sockaddrtos(&vsge->addr)
-					    , ntohs(inet_sockaddrport(&vsge->addr))
-					    , vsge->range
-					    , vsge->vfwmark
-					    , old_vs->vsgname);
-
-			if (!ipvs_group_remove_entry(old_vs, vsge))
-				return 0;
+	LIST_FOREACH(old, vsge, e) {
+		new_vsge = vsge_exist(vsge, new);
+		if (new_vsge)
+			new_vsge->reloaded = true;
+		else {
+			if (vsge->is_fwmark)
+				log_message(LOG_INFO, "VS [%u] in group %s no longer exists",
+						      vsge->vfwmark, old_vs->vsgname);
+			else
+				log_message(LOG_INFO, "VS [%s:%" PRIu32 "] in group %s no longer exists"
+						    , inet_sockaddrtotrio(&vsge->addr, old_vs->service_type)
+						    , vsge->range
+						    , old_vs->vsgname);
+
+			ipvs_group_remove_entry(old_vs, vsge);
 		}
 	}
+}
 
-	return 1;
+static void
+update_alive_counts(virtual_server_t *old, virtual_server_t *new)
+{
+	virtual_server_group_entry_t *vsge, *new_vsge;
+	list *old_l, *new_l;
+	element e;
+
+	if (!old->vsg || !new->vsg)
+	 	return ;
+
+	list old_ll[] = {
+		old->vsg->addr_range,
+		old->vsg->vfwmark,
+		NULL,
+	};
+	list new_ll[] = {
+		new->vsg->addr_range,
+		new->vsg->vfwmark,
+		NULL,
+	};
+
+	for (old_l = old_ll, new_l = new_ll; *old_l; old_l++, new_l++) {
+		LIST_FOREACH(*old_l, vsge, e) {
+			new_vsge = vsge_exist(vsge, *new_l);
+			if (new_vsge) {
+				if (vsge->is_fwmark) {
+					new_vsge->fwm4_alive = vsge->fwm4_alive;
+					new_vsge->fwm6_alive = vsge->fwm6_alive;
+				} else {
+					new_vsge->tcp_alive = vsge->tcp_alive;
+					new_vsge->udp_alive = vsge->udp_alive;
+					new_vsge->sctp_alive = vsge->sctp_alive;
+				}
+			}
+		}
+	}
 }
 
 /* Clear the diff vsg of the old vs */
-static int
-clear_diff_vsg(virtual_server_t * old_vs)
+static void
+clear_diff_vsg(virtual_server_t * old_vs, virtual_server_t * new_vs)
 {
-	virtual_server_group_t *old;
-	virtual_server_group_t *new;
-
-	/* Fetch group */
-	old = ipvs_get_group_by_name(old_vs->vsgname, old_check_data->vs_group);
-	new = ipvs_get_group_by_name(old_vs->vsgname, check_data->vs_group);
+	virtual_server_group_t *old = old_vs->vsg;
+	virtual_server_group_t *new = new_vs->vsg;
 
 	/* Diff the group entries */
-	if (!clear_diff_vsge(old->addr_ip, new->addr_ip, old_vs))
-		return 0;
-	if (!clear_diff_vsge(old->range, new->range, old_vs))
-		return 0;
-	if (!clear_diff_vsge(old->vfwmark, new->vfwmark, old_vs))
-		return 0;
-
-	return 1;
+	clear_diff_vsge(old->addr_range, new->addr_range, old_vs);
+	clear_diff_vsge(old->vfwmark, new->vfwmark, old_vs);
 }
 
 /* Check if a vs exist in new data and returns pointer to it */
-static virtual_server_t*
-vs_exist(virtual_server_t * old_vs, bool* empty_vsg)
+static virtual_server_t* __attribute__ ((pure))
+vs_exist(virtual_server_t * old_vs)
 {
 	element e;
-	list l = check_data->vs;
 	virtual_server_t *vs;
-	virtual_server_group_t *vsg, *old_vsg;
-
-	if (LIST_ISEMPTY(l))
-		return NULL;
-
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vs = ELEMENT_DATA(e);
-		if (VS_ISEQ(old_vs, vs)) {
-			/* Check if group exist */
-			if (vs->vsgname) {
-				vsg = ipvs_get_group_by_name(old_vs->vsgname,
-							    check_data->vs_group);
-				old_vsg = ipvs_get_group_by_name(old_vs->vsgname,
-								old_check_data->vs_group);
-				if (!vsg)
-					return NULL;
-				if (!old_vsg){
-					*empty_vsg = true;
-					return NULL;
-				}
-					
-				else
-					if (!clear_diff_vsg(old_vs))
-						return NULL;
-			}
 
-			/*
-			 * Exist so set alive.
-			 */
-			SET_ALIVE(vs);
+	LIST_FOREACH(check_data->vs, vs, e) {
+		if (vs_iseq(old_vs, vs))
 			return vs;
-		}
 	}
 
 	return NULL;
 }
 
 /* Check if rs is in new vs data */
-static int
+static real_server_t * __attribute__ ((pure))
 rs_exist(real_server_t * old_rs, list l)
 {
 	element e;
 	real_server_t *rs;
 
 	if (LIST_ISEMPTY(l))
-		return 0;
+		return NULL;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		rs = ELEMENT_DATA(e);
-		if (RS_ISEQ(rs, old_rs)) {
-			/*
-			 * We reflect the previous alive
-			 * flag value to not try to set
-			 * already set IPVS rule.
-			 */
-			rs->alive = old_rs->alive;
-			rs->set = old_rs->set;
-			rs->weight = old_rs->weight;
-			return 1;
-		}
+	LIST_FOREACH(l, rs, e) {
+		if (rs_iseq(rs, old_rs))
+			return rs;
 	}
 
-	return 0;
+	return NULL;
 }
 
-/* get rs list for a specific vs */
-static list
-get_rs_list(virtual_server_t * vs)
+static void
+migrate_checkers(virtual_server_t *vs, real_server_t *old_rs, real_server_t *new_rs, list old_checkers_queue)
 {
-	element e;
-	list l = check_data->vs;
-	virtual_server_t *vsvr;
+	list l;
+	element e, e1;
+	checker_t *old_c, *new_c;
+	checker_t dummy_checker;
+	bool a_checker_has_run = false;
+
+	l = alloc_list(NULL, NULL);
+	LIST_FOREACH(old_checkers_queue, old_c, e) {
+		if (old_c->rs == old_rs)
+			list_add(l, old_c);
+	}
 
-	if (LIST_ISEMPTY(l))
-		return NULL;
+	if (!LIST_ISEMPTY(l)) {
+		LIST_FOREACH(checkers_queue, new_c, e) {
+			if (new_c->rs != new_rs || !new_c->compare)
+				continue;
+			LIST_FOREACH(l, old_c, e1) {
+				if (old_c->compare == new_c->compare && new_c->compare(old_c, new_c)) {
+					/* Update status if different */
+					if (old_c->has_run && old_c->is_up != new_c->is_up)
+						set_checker_state(new_c, old_c->is_up);
+
+					/* Transfer some other state flags */
+					new_c->has_run = old_c->has_run;
+// retry_it needs fixing -  if retry changes, we may already have exceeded count
+					new_c->retry_it = old_c->retry_it;
+
+					break;
+				}
+			}
+		}
+	}
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vsvr = ELEMENT_DATA(e);
-		if (VS_ISEQ(vs, vsvr))
-			return vsvr->rs;
+	/* Find out how many checkers are really failed */
+	new_rs->num_failed_checkers = 0;
+	LIST_FOREACH(checkers_queue, new_c, e) {
+		if (new_c->rs != new_rs)
+			continue;
+		if (new_c->has_run && !new_c->is_up)
+			new_rs->num_failed_checkers++;
+		if (new_c->has_run)
+			a_checker_has_run = true;
 	}
 
-	/* most of the time never reached */
-	return NULL;
+	/* If a checker has failed, set new alpha checkers to be down until
+	 * they have run. */
+	if (new_rs->num_failed_checkers || (!new_rs->alive && !a_checker_has_run)) {
+		LIST_FOREACH(checkers_queue, new_c, e) {
+			if (new_c->rs != new_rs)
+				continue;
+			if (!new_c->has_run) {
+				if (new_c->alpha)
+					set_checker_state(new_c, false);
+				/* One failure is enough */
+				new_c->retry_it = new_c->retry;
+			}
+		}
+	}
+
+	/* If there are no failed checkers, the RS needs to be up */
+	if (!new_rs->num_failed_checkers && !new_rs->alive) {
+		dummy_checker.vs = vs;
+		dummy_checker.rs = new_rs;
+		perform_svr_state(true, &dummy_checker);
+	} else if (new_rs->num_failed_checkers && new_rs->set != new_rs->inhibit)
+		ipvs_cmd(new_rs->inhibit ? IP_VS_SO_SET_ADDDEST : IP_VS_SO_SET_DELDEST, vs, new_rs);
+
+	free_list(&l);
 }
 
 /* Clear the diff rs of the old vs */
-static int
-clear_diff_rs(list old_vs_group, virtual_server_t * old_vs)
+static void
+clear_diff_rs(virtual_server_t *old_vs, virtual_server_t *new_vs, list old_checkers_queue)
 {
 	element e;
-	list l = old_vs->rs;
-	list new = get_rs_list(old_vs);
-	real_server_t *rs;
+	real_server_t *rs, *new_rs;
+	list rs_to_remove;
 
 	/* If old vs didn't own rs then nothing return */
-	if (LIST_ISEMPTY(l))
-		return 1;
+	if (LIST_ISEMPTY(old_vs->rs))
+		return;
 
 	/* remove RS from old vs which are not found in new vs */
-	list rs_to_remove = alloc_list (NULL, NULL);
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		rs = ELEMENT_DATA(e);
-		if (!rs_exist(rs, new)) {
-			/* Reset inhibit flag to delete inhibit entries */
+	rs_to_remove = alloc_list (NULL, NULL);
+	LIST_FOREACH(old_vs->rs, rs, e) {
+		new_rs = rs_exist(rs, new_vs->rs);
+		if (!new_rs) {
 			log_message(LOG_INFO, "service %s no longer exist"
-					    , FMT_RS(rs));
-			if (ISALIVE(rs))
-				rs->inhibit = 0;
+					    , FMT_RS(rs, old_vs));
+
 			list_add (rs_to_remove, rs);
+		} else {
+			/*
+			 * We reflect the previous alive
+			 * flag value to not try to set
+			 * already set IPVS rule.
+			 */
+			new_rs->alive = rs->alive;
+			new_rs->set = rs->set;
+			new_rs->weight = rs->weight;
+			new_rs->pweight = rs->iweight;
+			new_rs->reloaded = true;
+
+			/*
+			 * We must migrate the state of the old checkers.
+			 * If we do not, the new RS is in a state where it’s reported
+			 * as down with no check failed. As a result, the server will never
+			 * be put back up when it’s alive again in check_tcp.c#83 because
+			 * of the check that put a rs up only if it was not previously up.
+			 * For alpha mode checkers, if it was up, we don't need another
+			 * success to say it is now up.
+			 */
+			migrate_checkers(new_vs, rs, new_rs, old_checkers_queue);
+
+			/* Do we need to update the RS configuration? */
+			if (false ||
+#ifdef _HAVE_IPVS_TUN_TYPE_
+			    rs->tun_type != new_rs->tun_type ||
+			    rs->tun_port != new_rs->tun_port ||
+#ifdef _HAVE_IPVS_TUN_CSUM_
+			    rs->tun_flags != new_rs->tun_flags ||
+#endif
+#endif
+			    rs->forwarding_method != new_rs->forwarding_method)
+				ipvs_cmd(LVS_CMD_EDIT_DEST, new_vs, new_rs);
+		}
+	}
+	clear_service_rs(old_vs, rs_to_remove, false);
+	free_list(&rs_to_remove);
+}
+
+/* clear sorry server, but only if changed */
+static void
+clear_diff_s_srv(virtual_server_t *old_vs, real_server_t *new_rs)
+{
+	real_server_t *old_rs = old_vs->s_svr;
+
+	if (!old_rs)
+		return;
+
+	if (new_rs && rs_iseq(old_rs, new_rs)) {
+		/* which fields are really used on s_svr? */
+		new_rs->alive = old_rs->alive;
+		new_rs->set = old_rs->set;
+		new_rs->weight = old_rs->weight;
+		new_rs->pweight = old_rs->iweight;
+		new_rs->reloaded = true;
+	}
+	else {
+		if (old_rs->inhibit) {
+			if (!ISALIVE(old_rs) && old_rs->set)
+				SET_ALIVE(old_rs);
+			old_rs->inhibit = 0;
+		}
+		if (ISALIVE(old_rs)) {
+			log_message(LOG_INFO, "Removing sorry server %s from VS %s"
+					    , FMT_RS(old_rs, old_vs)
+					    , FMT_VS(old_vs));
+			ipvs_cmd(LVS_CMD_DEL_DEST, old_vs, old_rs);
 		}
 	}
-	int ret = clear_service_rs (old_vs_group, old_vs, rs_to_remove);
-	free_list (rs_to_remove);
 
-	return ret;
 }
 
+/* When reloading configuration, remove negative diff entries
+ * and copy status of existing entries to the new ones */
 /* Check if a local address entry is in list */
-static int
+static int __attribute((pure))
 laddr_entry_exist(local_addr_entry *laddr_entry, list l)
 {
 	element e;
@@ -831,7 +1083,7 @@ clear_diff_laddr(virtual_server_t * old_vs)
  	 *  If old vs was not in fulllnat mod or didn't own local address group, 
  	 * then do nothing and return 
  	 */
-	if ((old_vs->loadbalancing_kind != IP_VS_CONN_F_FULLNAT) || 
+	if ((old_vs->forwarding_method != IP_VS_CONN_F_FULLNAT) || 
 						!old_vs->local_addr_gname)
 		return 1;
 
@@ -850,7 +1102,7 @@ clear_diff_laddr(virtual_server_t * old_vs)
 }
 
 /* Check if a blacklist address entry is in list */
-static int
+static int __attribute((pure))
 blklst_entry_exist(blklst_addr_entry *blklst_entry, list l)
 {
         element e;
@@ -917,117 +1169,151 @@ clear_diff_blklst(virtual_server_t * old_vs)
 }
 
 /* When reloading configuration, remove negative diff entries */
-int
-clear_diff_services(void)
+void
+clear_diff_services(list old_checkers_queue)
 {
 	element e;
-	list l = old_check_data->vs;
-	virtual_server_t *vs;
-	bool empty_vsg = false;
-
-	/* If old config didn't own vs then nothing return */
-	if (LIST_ISEMPTY(l))
-		return 1;
+	virtual_server_t *vs, *new_vs;
 
 	/* Remove diff entries from previous IPVS rules */
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vs = ELEMENT_DATA(e);
-
+	LIST_FOREACH(old_check_data->vs, vs, e) {
 		/*
 		 * Try to find this vs into the new conf data
 		 * reloaded.
 		 */
-		if (!vs_exist(vs, &empty_vsg)) {
+		new_vs = vs_exist(vs);
+		if (!new_vs) {
 			if (vs->vsgname) {
-				if (empty_vsg)
-					continue;
 				log_message(LOG_INFO, "Removing Virtual Server Group [%s]"
 						    , vs->vsgname);
 			}
 			else
-				log_message(LOG_INFO, "Removing Virtual Server %s"
-						    , FMT_VS(vs));
+				log_message(LOG_INFO, "Removing Virtual Server %s", FMT_VS(vs));
 
 			/* Clear VS entry */
-			if (!clear_service_vs(old_check_data->vs_group, vs))
-				return 0;
+			clear_service_vs(vs, false);
 		} else {
+			/* copy status fields from old VS */
+			new_vs->alive = vs->alive;
+			new_vs->quorum_state_up = vs->quorum_state_up;
+			new_vs->reloaded = true;
+			if (using_ha_suspend)
+				new_vs->ha_suspend_addr_count = vs->ha_suspend_addr_count;
+
+			if (vs->vsgname)
+				clear_diff_vsg(vs, new_vs);
+
 			/* If vs exist, perform rs pool diff */
-			/* omega = 0 must not prevent the notifiers from being called,
+			/* omega = false must not prevent the notifiers from being called,
 			   because the VS still exists in new configuration */
-			vs->omega = 1;
-			if (!clear_diff_rs(old_check_data->vs_group, vs))
-				return 0;
-			if (vs->s_svr)
-				if (ISALIVE(vs->s_svr))
-					if (!ipvs_cmd(LVS_CMD_DEL_DEST
-						      , check_data->vs_group
-						      , vs
-						      , vs->s_svr))
-						return 0;
+			if (strcmp(vs->sched, new_vs->sched) ||
+			    vs->flags != new_vs->flags ||
+			    vs->persistence_granularity != new_vs->persistence_granularity ||
+			    vs->persistence_timeout != new_vs->persistence_timeout) {
+				ipvs_cmd(IP_VS_SO_SET_EDIT, new_vs, NULL);
+			}
+
+			vs->omega = true;
+			clear_diff_rs(vs, new_vs, old_checkers_queue);
+			clear_diff_s_srv(vs, new_vs->s_svr);
+
+			update_alive_counts(vs, new_vs);
 			/* perform local address diff */
 			if (!clear_diff_laddr(vs))
-				return 0;
+				return;
                         /* perform blacklist address diff */
                         if (!clear_diff_blklst(vs))
-                                return 0;
+                                return;
 		}
 	}
-
-	return 1;
 }
 
-/* When reloading configuration, copy still alive RS/VS alive/set attributes into corresponding new config items */
-int
-copy_srv_states (void)
+/* This is only called during a reload. Any new real server with
+ * alpha mode checkers should start in down state */
+void
+check_new_rs_state(void)
 {
 	element e;
-	list l = old_check_data->vs;
-	virtual_server_t *old_vs, *new_vs;
-	bool empty_vsg = false;
+	checker_t *checker;
 
-	/* If old config didn't own vs then nothing return */
-	if (LIST_ISEMPTY(l))
-		return 1;
+	LIST_FOREACH(checkers_queue, checker, e) {
+		if (checker->rs->reloaded)
+			continue;
+		if (!checker->alpha)
+			continue;
+		set_checker_state(checker, false);
+		UNSET_ALIVE(checker->rs);
+	}
+}
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		old_vs = ELEMENT_DATA(e);
-		new_vs = vs_exist (old_vs, &empty_vsg);
-		if (new_vs) {
-			/* copy quorum_state field of VS */
-			new_vs->quorum_state = old_vs->quorum_state;
-			new_vs->reloaded = 1;
-
-			list old_rsl = old_vs->rs;
-			list new_rsl = new_vs->rs;
-			if (LIST_ISEMPTY(old_rsl) || LIST_ISEMPTY (new_rsl))
+void
+link_vsg_to_vs(void)
+{
+	element e, e1, next;
+	virtual_server_t *vs;
+	int vsg_af;
+	virtual_server_group_t *vsg;
+	virtual_server_group_entry_t *vsge;
+	unsigned vsg_member_no;
+
+	if (LIST_ISEMPTY(check_data->vs))
+		return;
+
+	LIST_FOREACH_NEXT(check_data->vs, vs, e, next) {
+		if (vs->vsgname) {
+			vs->vsg = ipvs_get_group_by_name(vs->vsgname, check_data->vs_group);
+			if (!vs->vsg) {
+				log_message(LOG_INFO, "Virtual server group %s specified but not configured - ignoring virtual server %s", vs->vsgname, FMT_VS(vs));
+				free_vs_checkers(vs);
+				free_list_element(check_data->vs, e);
 				continue;
-			element oe, ne;
-			real_server_t *old_rs, *new_rs;
-			/* iterate over equal rs */
-			for (oe = LIST_HEAD(old_rsl); oe; ELEMENT_NEXT (oe)) {
-				old_rs = ELEMENT_DATA(oe);
-				for (ne = LIST_HEAD(new_rsl); ne; ELEMENT_NEXT(ne)) {
-					new_rs = ELEMENT_DATA(ne);
-					if (RS_ISEQ (old_rs, new_rs)) {
-						/* copy alive, set fields of RS */
-						new_rs->alive = old_rs->alive;
-						new_rs->set = old_rs->set;
-						new_rs->reloaded = 1;
-						if (new_rs->alive) {
-							/* clear failed_checkers list */
-							free_list_elements(new_rs->failed_checkers);
-						}
-						break;
-					}
-				}
+			}
+
+			/* Check the vsg has some configuration */
+			if (LIST_ISEMPTY(vs->vsg->addr_range) &&
+			    LIST_ISEMPTY(vs->vsg->vfwmark)) {
+				log_message(LOG_INFO, "Virtual server group %s has no configuration - ignoring virtual server %s", vs->vsgname, FMT_VS(vs));
+				free_vs_checkers(vs);
+				free_list_element(check_data->vs, e);
+				continue;
+			}
+
+			/* Check the vs and vsg address families match */
+			if (!LIST_ISEMPTY(vs->vsg->addr_range)) {
+				vsge = ELEMENT_DATA(LIST_HEAD(vs->vsg->addr_range));
+				vsg_af = vsge->addr.ss_family;
+			}
+			else {
+				/* fwmark only */
+				vsg_af = AF_UNSPEC;
+			}
+
+			if (vsg_af != AF_UNSPEC && vsg_af != vs->af) {
+				log_message(LOG_INFO, "Virtual server group %s address family doesn't match virtual server %s - ignoring", vs->vsgname, FMT_VS(vs));
+				free_vs_checkers(vs);
+				free_list_element(check_data->vs, e);
+			}
+		}
+	}
+
+	/* The virtual server port number is used to identify the sequence number of the virtual server in the group */
+	LIST_FOREACH(check_data->vs_group, vsg, e) {
+		vsg_member_no = 0;
+
+		LIST_FOREACH(check_data->vs, vs, e1) {
+			if (!vs->vsgname)
+				continue;
+
+			if (!strcmp(vs->vsgname, vsg->gname)) {
+				/* We use the IPv4 port since there is no address family */
+				((struct sockaddr_in *)&vs->addr)->sin_port = htons(vsg_member_no);
+				vsg_member_no++;
 			}
 		}
 	}
-	return 0;
 }
 
-static tunnel_group *
+static tunnel_group * __attribute((pure))
 get_tunnel_group_by_name(char *gname, list l)
 {
 	element e;
@@ -1045,7 +1331,7 @@ get_tunnel_group_by_name(char *gname, list l)
 	return NULL;
 }
 
-static int
+static int __attribute((pure))
 tunnel_entry_exist(tunnel_entry* old_entry, tunnel_group* new_group)
 {
 	element e;
diff --git a/tools/keepalived/keepalived/check/ipwrapper.c.TODO b/tools/keepalived/keepalived/check/ipwrapper.c.TODO
new file mode 100644
index 000000000..2e5840ced
--- /dev/null
+++ b/tools/keepalived/keepalived/check/ipwrapper.c.TODO
@@ -0,0 +1,917 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Manipulation functions for IPVS & IPFW wrappers.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include <unistd.h>
+
+#include "ipwrapper.h"
+#include "check_api.h"
+#include "logger.h"
+#include "utils.h"
+#include "main.h"
+#ifdef _WITH_SNMP_CHECKER_
+  #include "check_snmp.h"
+#endif
+#include "global_data.h"
+#include "smtp.h"
+
+/* Returns the sum of all alive RS weight in a virtual server. */
+static unsigned long
+weigh_live_realservers(virtual_server_t * vs)
+{
+	element e;
+	real_server_t *svr;
+	long count = 0;
+
+	for (e = LIST_HEAD(vs->rs); e; ELEMENT_NEXT(e)) {
+		svr = ELEMENT_DATA(e);
+		if (ISALIVE(svr))
+			count += svr->weight;
+	}
+	return count;
+}
+
+static void
+notify_fifo_vs(virtual_server_t* vs)
+{
+	char *state = vs->quorum_state_up ? "UP" : "DOWN";
+	size_t size;
+	char *line;
+	char *vs_str;
+
+	if (global_data->notify_fifo.fd == -1 &&
+	    global_data->lvs_notify_fifo.fd == -1)
+		return;
+
+	vs_str = FMT_VS(vs);
+	size = strlen(vs_str) + strlen(state) + 6;
+	line = MALLOC(size);
+	if (!line)
+		return;
+
+	snprintf(line, size, "VS %s %s\n", vs_str, state);
+
+	if (global_data->notify_fifo.fd != -1) {
+		if (write(global_data->notify_fifo.fd, line, size - 1) == -1) {}
+	}
+	if (global_data->lvs_notify_fifo.fd != -1) {
+		if (write(global_data->lvs_notify_fifo.fd, line, size - 1) == -1) {}
+	}
+
+	FREE(line);
+}
+
+static void
+notify_fifo_rs(virtual_server_t* vs, real_server_t* rs)
+{
+	char *state = rs->alive ? "UP" : "DOWN";
+	size_t size;
+	char *line;
+	char *str;
+	char *rs_str;
+	char *vs_str;
+
+	if (global_data->notify_fifo.fd == -1 &&
+	    global_data->lvs_notify_fifo.fd == -1)
+		return;
+
+	str = FMT_RS(rs, vs);
+	rs_str = MALLOC(strlen(str)+1);
+	strcpy(rs_str, str);
+	vs_str = FMT_VS(vs);
+	size = strlen(rs_str) + strlen(vs_str) + strlen(state) + 7;
+	line = MALLOC(size);
+	if (!line)
+		return;
+
+	snprintf(line, size, "RS %s %s %s\n", rs_str, vs_str, state);
+	FREE(rs_str);
+
+	if (global_data->notify_fifo.fd != -1) {
+		if (write(global_data->notify_fifo.fd, line, size - 1) == - 1) {}
+	}
+	if (global_data->lvs_notify_fifo.fd != -1) {
+		if (write(global_data->lvs_notify_fifo.fd, line, size - 1) == -1) {}
+	}
+
+	FREE(line);
+}
+
+static void
+do_vs_notifies(virtual_server_t* vs, bool init, long threshold, long weight_sum)
+{
+	notify_script_t *notify_script = vs->quorum_state_up ? vs->notify_quorum_up : vs->notify_quorum_down;
+	char message[80];
+
+	if (notify_script)
+		notify_exec(notify_script);
+
+	notify_fifo_vs(vs);
+
+	if (vs->smtp_alert) {
+		snprintf(message, sizeof(message), "=> %s %u+%u=%ld <= %ld <=",
+			    vs->quorum_state_up ? "Gained quorum" :
+					   init ? "Starting with quorum down" :
+						  "Lost quorum",
+			    vs->quorum,
+			    vs->hysteresis,
+			    threshold,
+			    weight_sum);
+		smtp_alert(SMTP_MSG_VS, vs, vs->quorum_state_up ? "UP" : "DOWN", message);
+	}
+
+#ifdef _WITH_SNMP_CHECKER_
+	check_snmp_quorum_trap(vs);
+#endif
+}
+
+static void
+do_rs_notifies(virtual_server_t* vs, real_server_t* rs)
+{
+	notify_script_t *notify_script = rs->alive ? rs->notify_up : rs->notify_down;
+
+	if (notify_script)
+		notify_exec(notify_script);
+
+	notify_fifo_rs(vs, rs);
+
+	/* The sending of smtp_alerts is handled by the individual checker
+	 * so that the message can have context for the checker */
+// TODO - we want a function in the RS to call for smtp alerts, so it can all be done here
+//        but then we would need a flag so don't email if removing vs or clear_diff
+
+#ifdef _WITH_SNMP_CHECKER_
+	check_snmp_rs_trap(rs, vs);
+#endif
+}
+
+/* Remove a realserver IPVS rule */
+static void
+clear_service_rs(virtual_server_t * vs, list l)
+{
+	element e;
+	real_server_t *rs;
+	long weight_sum;
+	long threshold = vs->quorum - vs->hysteresis;
+
+	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+		rs = ELEMENT_DATA(e);
+// ??? What about inhibit_on_failre mode. Use ->set TODOTODO
+		if (!ISALIVE(rs))
+			continue;
+
+		log_message(LOG_INFO, "Removing service %s from VS %s"
+					, FMT_RS(rs, vs)
+					, FMT_VS(vs));
+		ipvs_cmd(LVS_CMD_DEL_DEST, vs, rs);
+		UNSET_ALIVE(rs);
+		if (!vs->omega)
+			continue;
+
+		/* In Omega mode we call VS and RS down notifiers
+		 * all the way down the exit, as necessary.
+		 */
+		do_rs_notifies(vs, rs);
+
+		/* Sooner or later VS will lose the quorum (if any). However,
+		 * we don't push in a sorry server then, hence the regression
+		 * is intended.
+		 */
+		weight_sum = weigh_live_realservers(vs);
+		if (vs->quorum_state_up &&
+		    (!weight_sum || weight_sum < threshold)) {
+			vs->quorum_state_up = false;
+			do_vs_notifies(vs, false, threshold, weight_sum);
+		}
+	}
+}
+
+/* Remove a virtualserver IPVS rule */
+static void
+clear_service_vs(virtual_server_t * vs)
+{
+// TODO - If we remove the vs, we don't need to remove the individual RSs
+	/* Processing real server queue */
+	if (vs->s_svr) {
+		if (ISALIVE(vs->s_svr)) {
+			ipvs_cmd(LVS_CMD_DEL_DEST, vs, vs->s_svr);
+			UNSET_ALIVE(vs->s_svr);
+		}
+	}
+	//
+// ??? what about inhibit_on_failure mode ? TODOTODO
+	clear_service_rs(vs, vs->rs);
+
+	/* The above will handle Omega case for VS as well. */
+
+	ipvs_cmd(LVS_CMD_DEL, vs, NULL);
+
+	UNSET_ALIVE(vs);
+}
+
+/* IPVS cleaner processing */
+void
+clear_services(void)
+{
+	element e;
+	virtual_server_t *vs;
+
+	if (!check_data || !check_data->vs)
+		return;
+
+	for (e = LIST_HEAD(check_data->vs); e; ELEMENT_NEXT(e)) {
+		vs = ELEMENT_DATA(e);
+
+		/* If it is a virtual server group, only clear the vs if it is the last vs using the group
+		 * of the same protocol or address family. */
+		clear_service_vs(vs);
+	}
+}
+
+/* Set a realserver IPVS rules */
+static bool
+init_service_rs(virtual_server_t * vs)
+{
+	element e;
+	real_server_t *rs;
+
+	for (e = LIST_HEAD(vs->rs); e; ELEMENT_NEXT(e)) {
+		rs = ELEMENT_DATA(e);
+
+		if (rs->reloaded) {
+			if (rs->iweight != rs->pweight)
+				update_svr_wgt(rs->iweight, vs, rs, false);
+			/* Do not re-add failed RS instantly on reload */
+			continue;
+		}
+
+		/* In alpha mode, be pessimistic (or realistic?) and don't
+		 * add real servers into the VS pool unless inhibit_on_failure.
+		 * They will get there later upon healthchecks recovery (if ever).
+		 */
+		if ((!rs->num_failed_checkers && !ISALIVE(rs)) ||
+		    (rs->inhibit && !rs->set)) {
+			ipvs_cmd(LVS_CMD_ADD_DEST, vs, rs);
+			if (!rs->num_failed_checkers)
+				SET_ALIVE(rs);
+		}
+	}
+
+	return true;
+}
+
+static void
+sync_service_vsg(virtual_server_t * vs)
+{
+	virtual_server_group_t *vsg;
+	virtual_server_group_entry_t *vsge;
+	list *l;
+	element e;
+
+	vsg = vs->vsg;
+	list ll[] = {
+		vsg->addr_range,
+		vsg->vfwmark,
+		NULL,
+	};
+
+	for (l = ll; *l; l++)
+		for (e = LIST_HEAD(*l); e; ELEMENT_NEXT(e)) {
+			vsge = ELEMENT_DATA(e);
+			if (vs->reloaded && !vsge->reloaded) {
+				log_message(LOG_INFO, "VS [%s:%d:%u] added into group %s"
+// Does this work with no address?
+						    , inet_sockaddrtotrio(&vsge->addr, vs->service_type)
+						    , vsge->range
+						    , vsge->vfwmark
+						    , vs->vsgname);
+				/* add all reloaded and alive/inhibit-set dests
+				 * to the newly created vsg item */
+				ipvs_group_sync_entry(vs, vsge);
+			}
+		}
+}
+
+/* add or remove _alive_ real servers from a virtual server */
+static void
+perform_quorum_state(virtual_server_t *vs, bool add)
+{
+	element e;
+	real_server_t *rs;
+
+	log_message(LOG_INFO, "%s the pool for VS %s"
+			    , add?"Adding alive servers to":"Removing alive servers from"
+			    , FMT_VS(vs));
+	for (e = LIST_HEAD(vs->rs); e; ELEMENT_NEXT(e)) {
+		rs = ELEMENT_DATA(e);
+		if (!ISALIVE(rs)) /* We only handle alive servers */
+			continue;
+// ??? The following seems unnecessary
+		if (add)
+			rs->alive = false;
+		ipvs_cmd(add?LVS_CMD_ADD_DEST:LVS_CMD_DEL_DEST, vs, rs);
+		rs->alive = true;
+	}
+}
+
+void
+set_quorum_states(void)
+{
+	virtual_server_t *vs;
+	element e;
+
+	if (LIST_ISEMPTY(check_data->vs))
+		return;
+
+	for (e = LIST_HEAD(check_data->vs); e; ELEMENT_NEXT(e)) {
+		vs = ELEMENT_DATA(e);
+
+		vs->quorum_state_up = (weigh_live_realservers(vs) >= vs->quorum + vs->hysteresis);
+	}
+}
+
+/* set quorum state depending on current weight of real servers */
+static void
+update_quorum_state(virtual_server_t * vs, bool init)
+{
+	long weight_sum = weigh_live_realservers(vs);
+	long threshold;
+
+	threshold = vs->quorum + (vs->quorum_state_up ? -1 : 1) * vs->hysteresis;
+
+	/* If we have just gained quorum, it's time to consider notify_up. */
+	if (!vs->quorum_state_up &&
+	    weight_sum >= threshold) {
+		vs->quorum_state_up = true;
+		log_message(LOG_INFO, "Gained quorum %u+%u=%ld <= %ld for VS %s"
+				    , vs->quorum
+				    , vs->hysteresis
+				    , threshold
+				    , weight_sum
+				    , FMT_VS(vs));
+		if (vs->s_svr && ISALIVE(vs->s_svr)) {
+			/* Adding back alive real servers */
+			perform_quorum_state(vs, true);
+
+			log_message(LOG_INFO, "%s sorry server %s from VS %s"
+					    , (vs->s_svr->inhibit ? "Disabling" : "Removing")
+					    , FMT_RS(vs->s_svr, vs)
+					    , FMT_VS(vs));
+
+			ipvs_cmd(LVS_CMD_DEL_DEST, vs, vs->s_svr);
+			vs->s_svr->alive = false;
+		}
+
+		do_vs_notifies(vs, init, threshold, weight_sum);
+
+		return;
+	}
+	else if ((vs->quorum_state_up &&
+		  (!weight_sum || weight_sum < threshold)) ||
+		 (init && !vs->quorum_state_up &&
+		  vs->s_svr && !ISALIVE(vs->s_svr))) {
+		/* We have just lost quorum for the VS, we need to consider
+		 * VS notify_down and sorry_server cases
+		 *   or
+		 * We are starting up and need to add the sorry server
+		 */
+		vs->quorum_state_up = false;
+		log_message(LOG_INFO, "%s %u-%u=%ld > %ld for VS %s"
+				    , init ? "Starting with quorum down" : "Lost quorum"
+				    , vs->quorum
+				    , vs->hysteresis
+				    , threshold
+				    , weight_sum
+				    , FMT_VS(vs));
+
+		if (vs->s_svr && !ISALIVE(vs->s_svr)) {
+			log_message(LOG_INFO, "%s sorry server %s to VS %s"
+					    , (vs->s_svr->inhibit ? "Enabling" : "Adding")
+					    , FMT_RS(vs->s_svr, vs)
+					    , FMT_VS(vs));
+
+			/* the sorry server is now up in the pool, we flag it alive */
+			ipvs_cmd(LVS_CMD_ADD_DEST, vs, vs->s_svr);
+			vs->s_svr->alive = true;
+
+			/* Remove remaining alive real servers */
+			perform_quorum_state(vs, false);
+		}
+
+		do_vs_notifies(vs, init, threshold, weight_sum);
+	}
+}
+
+/* manipulate add/remove rs according to alive state */
+static bool
+perform_svr_state(bool alive, virtual_server_t * vs, real_server_t * rs)
+{
+	/*
+	 * | ISALIVE(rs) | alive | context
+	 * | false       | false | first check failed under alpha mode, unreachable here
+	 * | false       | true  | RS went up, add it to the pool
+	 * | true        | false | RS went down, remove it from the pool
+	 * | true        | true  | first check succeeded w/o alpha mode, unreachable here
+	 */
+
+	if (ISALIVE(rs) == alive)
+		return true;
+
+	log_message(LOG_INFO, "%sing service %s to VS %s"
+			    , alive ? (rs->inhibit) ? "Enabl" : "Add" :
+				      (rs->inhibit) ? "Disabl" : "Remov"
+			    , FMT_RS(rs, vs)
+			    , FMT_VS(vs));
+
+	/* Change only if we have quorum or no sorry server */
+	if (vs->quorum_state_up || !vs->s_svr || !ISALIVE(vs->s_svr)) {
+		if (ipvs_cmd(alive ? LVS_CMD_ADD_DEST : LVS_CMD_DEL_DEST, vs, rs))
+			return false;
+	}
+	rs->alive = alive;
+	do_rs_notifies(vs, rs);
+
+	/* We may have changed quorum state. If the quorum wasn't up
+	 * but is now up, this is where the rs is added. */
+	update_quorum_state(vs, false);
+
+	return true;
+}
+
+/* Set a virtualserver IPVS rules */
+static bool
+init_service_vs(virtual_server_t * vs)
+{
+	/* Init the VS root */
+	if (!ISALIVE(vs) || vs->vsgname) {
+		ipvs_cmd(LVS_CMD_ADD, vs, NULL);
+		SET_ALIVE(vs);
+	}
+
+	/* Processing real server queue */
+	if (!init_service_rs(vs))
+		return false;
+
+	if (vs->reloaded && vs->vsgname) {
+		/* add reloaded dests into new vsg entries */
+		sync_service_vsg(vs);
+	}
+
+	/* we may have got/lost quorum due to quorum setting changed */
+	/* also update, in case we need the sorry server in alpha mode */
+	update_quorum_state(vs, true);
+
+	return true;
+}
+
+/* Set IPVS rules */
+bool
+init_services(void)
+{
+	element e;
+	list l = check_data->vs;
+	virtual_server_t *vs;
+
+	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+		vs = ELEMENT_DATA(e);
+		if (!init_service_vs(vs))
+			return false;
+	}
+	return true;
+}
+
+/* Store new weight in real_server struct and then update kernel. */
+void
+update_svr_wgt(int weight, virtual_server_t * vs, real_server_t * rs
+		, bool update_quorum)
+{
+	if (weight != rs->weight) {
+		log_message(LOG_INFO, "Changing weight from %d to %d for %s service %s of VS %s"
+				    , rs->weight
+				    , weight
+				    , ISALIVE(rs) ? "active" : "inactive"
+				    , FMT_RS(rs, vs)
+				    , FMT_VS(vs));
+		rs->weight = weight;
+		/*
+		 * Have weight change take effect now only if rs is in
+		 * the pool and alive and the quorum is met (or if
+		 * there is no sorry server). If not, it will take
+		 * effect later when it becomes alive.
+		 */
+		if (rs->set && ISALIVE(rs) &&
+		    (vs->quorum_state_up || !vs->s_svr || !ISALIVE(vs->s_svr)))
+			ipvs_cmd(LVS_CMD_EDIT_DEST, vs, rs);
+		if (update_quorum)
+			update_quorum_state(vs, false);
+	}
+}
+
+void
+set_checker_state(checker_t *checker, bool up)
+{
+	if (checker->is_up == up)
+		return;
+
+	checker->is_up = up;
+
+	if (!up)
+		checker->rs->num_failed_checkers++;
+	else if (checker->rs->num_failed_checkers)
+		checker->rs->num_failed_checkers--;
+}
+
+/* Update checker's state */
+void
+update_svr_checker_state(bool alive, checker_t *checker)
+{
+	if (checker->is_up == alive)
+		return;
+
+	if (alive) {
+		/* call the UP handler unless any more failed checks found */
+		if (checker->rs->num_failed_checkers <= 1) {
+			if (!perform_svr_state(true, checker->vs, checker->rs))
+				return;
+		}
+	}
+	else {
+		/* Handle not alive state */
+		if (checker->rs->num_failed_checkers == 0) {
+			if (!perform_svr_state(false, checker->vs, checker->rs))
+				return;
+		}
+	}
+
+	set_checker_state(checker, alive);
+}
+
+/* Check if a vsg entry is in new data */
+static virtual_server_group_entry_t *
+vsge_exist(virtual_server_group_entry_t *vsg_entry, list l)
+{
+	element e;
+	virtual_server_group_entry_t *vsge;
+
+	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+		vsge = ELEMENT_DATA(e);
+		if (VSGE_ISEQ(vsg_entry, vsge))
+			return vsge;
+	}
+
+	return NULL;
+}
+
+/* Clear the diff vsge of old group */
+static void
+clear_diff_vsge(list old, list new, virtual_server_t * old_vs)
+{
+	virtual_server_group_entry_t *vsge, *new_vsge;
+	element e;
+
+	for (e = LIST_HEAD(old); e; ELEMENT_NEXT(e)) {
+		vsge = ELEMENT_DATA(e);
+		new_vsge = vsge_exist(vsge, new);
+		if (new_vsge) {
+			new_vsge->tcp_alive = vsge->tcp_alive;
+			new_vsge->udp_alive = vsge->udp_alive;
+			new_vsge->sctp_alive = vsge->sctp_alive;
+			new_vsge->fwm4_alive = vsge->fwm4_alive;
+			new_vsge->fwm6_alive = vsge->fwm6_alive;
+			new_vsge->reloaded = true;
+		}
+		else {
+			log_message(LOG_INFO, "VS [%s:%d:%u] in group %s no longer exists"
+					    , inet_sockaddrtotrio(&vsge->addr, old_vs->service_type)
+					    , vsge->range
+					    , vsge->vfwmark
+					    , old_vs->vsgname);
+
+			ipvs_group_remove_entry(old_vs, vsge);
+		}
+	}
+}
+
+/* Clear the diff vsg of the old vs */
+static void
+clear_diff_vsg(virtual_server_t * old_vs, virtual_server_t * new_vs)
+{
+	virtual_server_group_t *old = old_vs->vsg;
+	virtual_server_group_t *new = new_vs->vsg;
+
+	/* Diff the group entries */
+	clear_diff_vsge(old->addr_range, new->addr_range, old_vs);
+	clear_diff_vsge(old->vfwmark, new->vfwmark, old_vs);
+}
+
+/* Check if a vs exist in new data and returns pointer to it */
+static virtual_server_t*
+vs_exist(virtual_server_t * old_vs)
+{
+	element e;
+	list l = check_data->vs;
+	virtual_server_t *vs;
+
+	if (LIST_ISEMPTY(l))
+		return NULL;
+
+	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+		vs = ELEMENT_DATA(e);
+		if (VS_ISEQ(old_vs, vs))
+			return vs;
+	}
+
+	return NULL;
+}
+
+/* Check if rs is in new vs data */
+static real_server_t *
+rs_exist(real_server_t * old_rs, list l)
+{
+	element e;
+	real_server_t *rs;
+
+	if (LIST_ISEMPTY(l))
+		return NULL;
+
+	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+		rs = ELEMENT_DATA(e);
+		if (RS_ISEQ(rs, old_rs))
+			return rs;
+	}
+
+	return NULL;
+}
+
+static void
+migrate_checkers(real_server_t *old_rs, real_server_t *new_rs, list old_checkers_queue)
+{
+	list l;
+	element e, e1;
+	checker_t *old_c, *new_c;
+
+	l = alloc_list(NULL, NULL);
+	for (e = LIST_HEAD(old_checkers_queue); e; ELEMENT_NEXT(e)) {
+		old_c = ELEMENT_DATA(e);
+		if (old_c->rs == old_rs) {
+			list_add(l, old_c);
+		}
+	}
+
+	if (!LIST_ISEMPTY(l)) {
+		for (e = LIST_HEAD(checkers_queue); e; ELEMENT_NEXT(e)) {
+			new_c = ELEMENT_DATA(e);
+			if (new_c->rs != new_rs || !new_c->compare)
+				continue;
+			for (e1 = LIST_HEAD(l); e1; ELEMENT_NEXT(e1)) {
+				old_c = ELEMENT_DATA(e1);
+				if (old_c->compare == new_c->compare && new_c->compare(old_c, new_c)) {
+					/* Update status if different */
+					if (old_c->is_up != new_c->is_up)
+						set_checker_state(new_c, old_c->is_up);
+					break;
+				}
+			}
+		}
+
+		if (!new_rs->num_failed_checkers)
+			SET_ALIVE(new_rs);
+	}
+
+	free_list(&l);
+}
+
+/* Clear the diff rs of the old vs */
+static void
+clear_diff_rs(virtual_server_t *old_vs, virtual_server_t *new_vs, list old_checkers_queue)
+{
+	element e;
+	list l = old_vs->rs;
+	real_server_t *rs, *new_rs;
+
+	/* If old vs didn't own rs then nothing return */
+	if (LIST_ISEMPTY(l))
+		return;
+
+	/* remove RS from old vs which are not found in new vs */
+	list rs_to_remove = alloc_list (NULL, NULL);
+	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+		rs = ELEMENT_DATA(e);
+		new_rs = rs_exist(rs, new_vs->rs);
+		if (!new_rs) {
+			log_message(LOG_INFO, "service %s no longer exist"
+					    , FMT_RS(rs, old_vs));
+
+			/* Reset inhibit flag to delete inhibit entries */
+			if (rs->inhibit) {
+				if (!ISALIVE(rs) && rs->set)
+					SET_ALIVE(rs);
+				rs->inhibit = false;
+			}
+			list_add (rs_to_remove, rs);
+		} else {
+			/*
+			 * We reflect the previous alive
+			 * flag value to not try to set
+			 * already set IPVS rule.
+			 */
+			if (new_rs->alive)
+				new_rs->alive = rs->alive;
+			new_rs->set = rs->set;
+			new_rs->weight = rs->weight;
+			new_rs->pweight = rs->iweight;
+			new_rs->reloaded = true;
+
+			/*
+			 * We must migrate the state of the old checkers.
+			 * If we do not, the new RS is in a state where it’s reported
+			 * as down with no check failed. As a result, the server will never
+			 * be put back up when it’s alive again in check_tcp.c#83 because
+			 * of the check that put a rs up only if it was not previously up.
+			 * For alpha mode checkers, if it was up, we don't need another
+			 * success to say it is now up.
+			 */
+			migrate_checkers(rs, new_rs, old_checkers_queue);
+		}
+	}
+	clear_service_rs(old_vs, rs_to_remove);
+	free_list(&rs_to_remove);
+}
+
+/* clear sorry server, but only if changed */
+static void
+clear_diff_s_srv(virtual_server_t *old_vs, real_server_t *new_rs)
+{
+	real_server_t *old_rs = old_vs->s_svr;
+
+	if (!old_rs)
+		return;
+
+	if (new_rs && RS_ISEQ(old_rs, new_rs)) {
+		/* which fields are really used on s_svr? */
+		new_rs->alive = old_rs->alive;
+		new_rs->set = old_rs->set;
+		new_rs->weight = old_rs->weight;
+		new_rs->pweight = old_rs->iweight;
+		new_rs->reloaded = true;
+	}
+	else {
+		if (old_rs->inhibit) {
+			if (!ISALIVE(old_rs) && old_rs->set)
+				SET_ALIVE(old_rs);
+			old_rs->inhibit = 0;
+		}
+		if (ISALIVE(old_rs)) {
+			log_message(LOG_INFO, "Removing sorry server %s from VS %s"
+					    , FMT_RS(old_rs, old_vs)
+					    , FMT_VS(old_vs));
+			ipvs_cmd(LVS_CMD_DEL_DEST, old_vs, old_rs);
+		}
+	}
+
+}
+
+/* When reloading configuration, remove negative diff entries
+ * and copy status of existing entries to the new ones */
+void
+clear_diff_services(list old_checkers_queue)
+{
+	element e;
+	list l = old_check_data->vs;
+	virtual_server_t *vs, *new_vs;
+
+	/* If old config didn't own vs then nothing return */
+	if (LIST_ISEMPTY(l))
+		return;
+
+	/* Remove diff entries from previous IPVS rules */
+	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+		vs = ELEMENT_DATA(e);
+
+		/*
+		 * Try to find this vs into the new conf data
+		 * reloaded.
+		 */
+		new_vs = vs_exist(vs);
+		if (!new_vs) {
+			if (vs->vsgname)
+				log_message(LOG_INFO, "Removing Virtual Server Group [%s]", vs->vsgname);
+			else
+				log_message(LOG_INFO, "Removing Virtual Server %s", FMT_VS(vs));
+
+			/* Clear VS entry */
+			clear_service_vs(vs);
+		} else {
+			/* copy status fields from old VS */
+			SET_ALIVE(new_vs);
+			new_vs->quorum_state_up = vs->quorum_state_up;
+			new_vs->reloaded = true;
+
+			if (vs->vsgname)
+				clear_diff_vsg(vs, new_vs);
+
+			/* If vs exist, perform rs pool diff */
+			/* omega = false must not prevent the notifiers from being called,
+			   because the VS still exists in new configuration */
+			vs->omega = true;
+			clear_diff_rs(vs, new_vs, old_checkers_queue);
+			clear_diff_s_srv(vs, new_vs->s_svr);
+		}
+	}
+}
+
+void
+link_vsg_to_vs(void)
+{
+	element e, e1, next;
+	virtual_server_t *vs;
+	int vsg_af;
+	virtual_server_group_t *vsg;
+	virtual_server_group_entry_t *vsge;
+	unsigned vsg_member_no;
+
+	if (LIST_ISEMPTY(check_data->vs))
+		return;
+
+	for (e = LIST_HEAD(check_data->vs); e; e = next) {
+		next = e->next;
+		vs = ELEMENT_DATA(e);
+
+		if (vs->vsgname) {
+			vs->vsg = ipvs_get_group_by_name(vs->vsgname, check_data->vs_group);
+			if (!vs->vsg) {
+				log_message(LOG_INFO, "Virtual server group %s specified but not configured - ignoring virtual server %s", vs->vsgname, FMT_VS(vs));
+				free_vs_checkers(vs);
+				free_list_element(check_data->vs, e);
+				continue;
+			}
+
+			/* Check the vsg has some configuration */
+			if (LIST_ISEMPTY(vs->vsg->addr_range) &&
+			    LIST_ISEMPTY(vs->vsg->vfwmark)) {
+				log_message(LOG_INFO, "Virtual server group %s has no configuration - ignoring virtual server %s", vs->vsgname, FMT_VS(vs));
+				free_vs_checkers(vs);
+				free_list_element(check_data->vs, e);
+				continue;
+			}
+
+			/* Check the vs and vsg address families match */
+			if (!LIST_ISEMPTY(vs->vsg->addr_range)) {
+				vsge = ELEMENT_DATA(LIST_HEAD(vs->vsg->addr_range));
+				vsg_af = vsge->addr.ss_family;
+			}
+			else {
+				/* fwmark only */
+				vsg_af = AF_UNSPEC;
+			}
+
+			if (vsg_af != AF_UNSPEC && vsg_af != vs->af) {
+				log_message(LOG_INFO, "Virtual server group %s address family doesn't match virtual server %s - ignoring", vs->vsgname, FMT_VS(vs));
+				free_vs_checkers(vs);
+				free_list_element(check_data->vs, e);
+			}
+		}
+	}
+
+	/* The virtual server port number is used to identify the sequence number of the virtual server in the group */
+	if (LIST_ISEMPTY(check_data->vs_group))
+		return;
+
+	for (e = LIST_HEAD(check_data->vs_group); e; ELEMENT_NEXT(e)) {
+		vsg_member_no = 0;
+		vsg = ELEMENT_DATA(e);
+
+		for (e1 = LIST_HEAD(check_data->vs); e1; ELEMENT_NEXT(e1)) {
+			vs = ELEMENT_DATA(e1);
+
+			if (!vs->vsgname)
+				continue;
+
+			if (!strcmp(vs->vsgname, vsg->gname)) {
+				/* We use the IPv4 port since there is no address family */
+				((struct sockaddr_in *)&vs->addr)->sin_port = htons(vsg_member_no);
+				vsg_member_no++;
+			}
+		}
+	}
+}
diff --git a/tools/keepalived/keepalived/libipvs-2.6/libipvs.c b/tools/keepalived/keepalived/check/libipvs.c
similarity index 50%
rename from tools/keepalived/keepalived/libipvs-2.6/libipvs.c
rename to tools/keepalived/keepalived/check/libipvs.c
index 8e532d937..507cce3ec 100644
--- a/tools/keepalived/keepalived/libipvs-2.6/libipvs.c
+++ b/tools/keepalived/keepalived/check/libipvs.c
@@ -1,32 +1,63 @@
 /*
- * libipvs:	Library for manipulating IPVS through [gs]etsockopt
+ * libipvs:	Library for manipulating IPVS through netlink or [gs]etsockopt
  *
- * Version:     $Id: libipvs.c,v 1.7 2003/06/08 09:31:39 wensong Exp $
+ *		This code is copied from the ipvsadm sources, with the unused
+ *		code removed. It is available at:
+ *		https://git.kernel.org/cgit/utils/kernel/ipvsadm/ipvsadm.git
  *
- * Authors:     Wensong Zhang <wensong@linuxvirtualserver.org>
+ *		The upstream code should periodically be checked for updates,
+ *		which should then be applied to this code.
  *
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
+ * Authors:	Wensong Zhang <wensong@linuxvirtualserver.org>
+ *
+ *		This program is free software; you can redistribute it and/or
+ *		modify it under the terms of the GNU General Public License
+ *		as published by the Free Software Foundation; either version
+ *		2 of the License, or (at your option) any later version.
  */
 
-#include <stdio.h>
+#include "config.h"
+
 #include <stdlib.h>
 #include <unistd.h>
-#include <string.h>
 #include <errno.h>
-#include <netinet/in.h>
 #include <sys/socket.h>
-#include <arpa/inet.h>
+#include <string.h>
+#include <stdint.h>
+#include <stdbool.h>
+
+#ifdef LIBIPVS_USE_NL
+#include <netlink/netlink.h>
+#include <netlink/genl/genl.h>
+#include <netlink/genl/ctrl.h>
+
+#ifdef _HAVE_LIBNL1_
+#define nl_sock		nl_handle
+#ifndef _LIBNL_DYNAMIC_
+#define nl_socket_alloc	nl_handle_alloc
+#define nl_socket_free	nl_handle_destroy
+#endif  // _LIBNL_DYNAMIC_
+#endif  // _HAVE_LIBNL1_
+
+#ifdef _LIBNL_DYNAMIC_
+#include "libnl_link.h"
+#endif // _LIBNL_DYNAMIC_
+#endif // LIBIPVS_USE_NL
 
 #include "libipvs.h"
 #include "sockopt.h"
 #include "dp_vs.h"
 
+#include "memory.h"
+#if !HAVE_DECL_SOCK_CLOEXEC
+#include "old_socket.h"
+#endif
+#include "logger.h"
+
+typedef int (*qsort_cmp_t)(const void *, const void *);
 typedef struct ipvs_servicedest_s {
-	struct ip_vs_service_kern	svc;
-	struct ip_vs_dest_kern		dest;
+	struct ip_vs_service_app	svc;
+	struct ip_vs_dest_user		dest;
 } ipvs_servicedest_t;
 
 typedef struct ipvs_serviceladdr_s {
@@ -36,23 +67,128 @@ typedef struct ipvs_serviceladdr_s {
 
 static int sockfd = -1;
 static void* ipvs_func = NULL;
-struct ip_vs_getinfo ipvs_info;
-
 
-#define CHECK_IPV4(s, ret) if (s->af && s->af != AF_INET)	\
-	{ errno = EAFNOSUPPORT; goto out_err; }			\
-	s->__addr_v4 = s->addr.ip;				\
 
-#define CHECK_PE(s, ret) if (s->pe_name[0] != 0)		\
-	{ errno = EAFNOSUPPORT; goto out_err; }
-
-#define CHECK_COMPAT_DEST(s, ret) CHECK_IPV4(s, ret)
-
-#define CHECK_COMPAT_SVC(s, ret)				\
-	CHECK_IPV4(s, ret);					\
-	CHECK_PE(s, ret);
+#ifdef LIBIPVS_USE_NL
+//static struct nl_sock *sock = NULL;
+//static int family;
+//static bool try_nl = true;
+
+/* Policy definitions */
+#ifdef _WITH_SNMP_CHECKER_
+static struct nla_policy ipvs_cmd_policy[IPVS_CMD_ATTR_MAX + 1] = {
+	[IPVS_CMD_ATTR_SERVICE]		= { .type = NLA_NESTED },
+	[IPVS_CMD_ATTR_DEST]		= { .type = NLA_NESTED },
+	[IPVS_CMD_ATTR_DAEMON]		= { .type = NLA_NESTED },
+	[IPVS_CMD_ATTR_TIMEOUT_TCP]	= { .type = NLA_U32 },
+	[IPVS_CMD_ATTR_TIMEOUT_TCP_FIN]	= { .type = NLA_U32 },
+	[IPVS_CMD_ATTR_TIMEOUT_UDP]	= { .type = NLA_U32 },
+	[IPVS_CMD_ATTR_LADDR]		= { .type = NLA_NESTED },
+};
+
+static struct nla_policy ipvs_service_policy[IPVS_SVC_ATTR_MAX + 1] = {
+	[IPVS_SVC_ATTR_AF]		= { .type = NLA_U16 },
+	[IPVS_SVC_ATTR_PROTOCOL]	= { .type = NLA_U16 },
+	[IPVS_SVC_ATTR_ADDR]		= { .type = NLA_UNSPEC,
+					    .maxlen = sizeof(struct in6_addr) },
+	[IPVS_SVC_ATTR_PORT]		= { .type = NLA_U16 },
+	[IPVS_SVC_ATTR_FWMARK]		= { .type = NLA_U32 },
+	[IPVS_SVC_ATTR_SCHED_NAME]	= { .type = NLA_STRING,
+					    .maxlen = IP_VS_SCHEDNAME_MAXLEN },
+	[IPVS_SVC_ATTR_FLAGS]		= { .type = NLA_UNSPEC,
+					    .minlen = sizeof(struct ip_vs_flags),
+					    .maxlen = sizeof(struct ip_vs_flags) },
+	[IPVS_SVC_ATTR_TIMEOUT]		= { .type = NLA_U32 },
+	[IPVS_SVC_ATTR_NETMASK]		= { .type = NLA_U32 },
+	[IPVS_SVC_ATTR_STATS]		= { .type = NLA_NESTED },
+#ifdef _HAVE_PE_NAME_
+	[IPVS_SVC_ATTR_PE_NAME]		= { .type = NLA_STRING,
+					    .maxlen = IP_VS_PENAME_MAXLEN },
+#endif // _HAVE_PE_NAME
+#ifdef _WITH_LVS_64BIT_STATS_
+	[IPVS_SVC_ATTR_STATS64]		= { .type = NLA_NESTED },
+#endif // _WITH_LVS_64BIT_STATS_
+	[IPVS_SVC_ATTR_BPS] 		= { .type = NLA_U32},
+};
+
+static struct nla_policy ipvs_dest_policy[IPVS_DEST_ATTR_MAX + 1] = {
+	[IPVS_DEST_ATTR_ADDR]		= { .type = NLA_UNSPEC,
+					    .maxlen = sizeof(struct in6_addr) },
+	[IPVS_DEST_ATTR_PORT]		= { .type = NLA_U16 },
+	[IPVS_DEST_ATTR_FWD_METHOD]	= { .type = NLA_U32 },
+	[IPVS_DEST_ATTR_WEIGHT]		= { .type = NLA_U32 },
+	[IPVS_DEST_ATTR_U_THRESH]	= { .type = NLA_U32 },
+	[IPVS_DEST_ATTR_L_THRESH]	= { .type = NLA_U32 },
+	[IPVS_DEST_ATTR_ACTIVE_CONNS]	= { .type = NLA_U32 },
+	[IPVS_DEST_ATTR_INACT_CONNS]	= { .type = NLA_U32 },
+	[IPVS_DEST_ATTR_PERSIST_CONNS]	= { .type = NLA_U32 },
+	[IPVS_DEST_ATTR_STATS]		= { .type = NLA_NESTED },
+#if HAVE_DECL_IPVS_DEST_ATTR_ADDR_FAMILY
+	[IPVS_DEST_ATTR_ADDR_FAMILY]	= { .type = NLA_U16 },
+#endif // HAVE_DECL_IPVS_DEST_ATTR_ADDR_FAMILY
+#ifdef _WITH_LVS_64BIT_STATS_
+	[IPVS_DEST_ATTR_STATS64]	= {.type = NLA_NESTED },
+#endif //_WITH_LVS_64BIT_STATS_
+};
+
+struct nla_policy ipvs_laddr_policy[IPVS_LADDR_ATTR_MAX + 1] = {
+	[IPVS_LADDR_ATTR_ADDR]		= { .type = NLA_UNSPEC,
+					    .maxlen = sizeof(struct in6_addr) },
+	[IPVS_LADDR_ATTR_PORT_CONFLICT]   = { .type = NLA_U64 },
+	[IPVS_LADDR_ATTR_CONN_COUNTS]   = { .type = NLA_U32 },
+};
+
+#ifdef _WITH_LVS_64BIT_STATS_
+static struct nla_policy ipvs_stats64_policy[IPVS_STATS_ATTR_MAX + 1] = {
+	[IPVS_STATS_ATTR_CONNS]		= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_INPKTS]	= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_OUTPKTS]	= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_INBYTES]	= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_OUTBYTES]	= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_CPS]		= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_INPPS]		= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_OUTPPS]	= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_INBPS]		= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_OUTBPS]	= { .type = NLA_U64 },
+};
+#endif // _WITH_LVS_64BIT_STATS_
+
+static struct nla_policy ipvs_stats_policy[IPVS_STATS_ATTR_MAX + 1] = {
+	[IPVS_STATS_ATTR_CONNS]		= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_INPKTS]	= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_OUTPKTS]	= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_INBYTES]	= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_OUTBYTES]	= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_CPS]		= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_INPPS]		= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_OUTPPS]	= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_INBPS]		= { .type = NLA_U64 },
+	[IPVS_STATS_ATTR_OUTBPS]	= { .type = NLA_U64 },
+};
+#endif	/* _WITH_SNMP_CHECKER_ */
+
+#if 0
+static struct nla_policy ipvs_info_policy[IPVS_INFO_ATTR_MAX + 1] = {
+	[IPVS_INFO_ATTR_VERSION]	= { .type = NLA_U32 },
+	[IPVS_INFO_ATTR_CONN_TAB_SIZE]  = { .type = NLA_U32 },
+};
+#endif
+#endif // LIBIPVS_USE_NL
+
+
+#ifdef LIBIPVS_USE_NL
+#ifndef NLA_PUT_S32
+#define NLA_PUT_S32(msg, attrtype, value) \
+	NLA_PUT_TYPE(msg, int32_t, attrtype, value)
+
+static inline int32_t
+nla_get_s32(struct nlattr *attr)
+{
+	return (int32_t)nla_get_u32(attr);
+}
+#endif // NLA_PUT_S32
+#endif // LIBIPVS_USE_NL
 
-#define CHECK_COMPAT_LADDR(s, ret) CHECK_IPV4(s, ret)
 
 /* ipv6 support */
 typedef struct dpvs_servicedest_s {
@@ -60,181 +196,186 @@ typedef struct dpvs_servicedest_s {
 	struct dp_vs_dest_user		dest; 
 } dpvs_servicedest_t;
 
-#define SVC_CONVERT(X, Y) {					\
-	X->af               = Y->af; 				\
-	memcpy(&X->addr, &Y->addr, sizeof(X->addr)); 		\
-	X->port             = Y->port; 				\
-	X->fwmark           = Y->fwmark; 			\
-	snprintf(X->sched_name, IP_VS_SCHEDNAME_MAXLEN, "%s", Y->sched_name); \
-	X->flags            = Y->flags; 			\
-	X->timeout          = Y->timeout; 			\
-	X->conn_timeout     = Y->conn_timeout; 			\
-	X->netmask          = Y->netmask; 			\
-	X->bps              = Y->bps; 				\
-	X->limit_proportion = Y->limit_proportion; 		\
-	snprintf(X->srange, sizeof(X->srange), "%s", Y->srange); \
-	snprintf(X->drange, sizeof(X->drange), "%s", Y->drange); \
-	snprintf(X->iifname, sizeof(X->iifname), "%s", Y->iifname); \
-	snprintf(X->oifname, sizeof(X->oifname), "%s", Y->oifname);}
+typedef struct dp_vs_service_entry_app {
+    struct dp_vs_service_entry user;
+}dpvs_service_entry_t;
 
+// IPVS_2_DPVS(dp_vs_service_user, ip_vs_service_app/ipvs_service_t)
 #define IPVS_2_DPVS(X, Y) {					\
-	SVC_CONVERT(X, Y) 					\
-	X->proto = Y->protocol;}
-
-#define DPVS_2_IPVS(X, Y) {					\
-	SVC_CONVERT(X, Y) 					\
-	X->num_dests        = Y->num_dests;			\
-	X->num_laddrs       = Y->num_laddrs;			\
-	memcpy(&X->stats, &Y->stats, sizeof(X->stats));		\
-	X->protocol = Y->proto;}
-
-#define DST_CONVERT(X, Y) {					\
 	X->af               = Y->af; 				\
-	memcpy(&X->addr, &Y->addr, sizeof(X->addr)); 		\
-	X->port             = Y->port; 				\
-	X->conn_flags       = Y->conn_flags; 			\
-	X->weight           = Y->weight;}
+	X->proto 	    = Y->user.protocol; 		\
+	memcpy(&X->addr, &Y->nf_addr, sizeof(X->addr)); 	\
+	X->port             = Y->user.port; 			\
+	X->fwmark           = Y->user.fwmark; 			\
+	X->flags            = Y->user.flags; 			\
+	X->timeout          = Y->user.timeout; 			\
+	X->conn_timeout     = Y->user.conn_timeout; 		\
+	X->netmask          = Y->user.netmask; 			\
+	X->bps              = Y->user.bps; 			\
+	X->limit_proportion = Y->user.limit_proportion; 	\
+	snprintf(X->sched_name, IP_VS_SCHEDNAME_MAXLEN, "%s", Y->user.sched_name); \
+	snprintf(X->srange, sizeof(X->srange), "%s", Y->user.srange); \
+	snprintf(X->drange, sizeof(X->drange), "%s", Y->user.drange); \
+	snprintf(X->iifname, sizeof(X->iifname), "%s", Y->user.iifname); \
+	snprintf(X->oifname, sizeof(X->oifname), "%s", Y->user.oifname);}
+
+// DPVS_2_IPVS(ipvs_service_entry_t, dpvs_service_entry_t)
+#define DPVS_2_IPVS(X, Y) {					\
+	X->af               	= Y->user.af; 				\
+	memcpy(&X->nf_addr, &Y->user.addr, sizeof(X->nf_addr)); 	\
+	X->user.protocol 	= Y->user.proto; 			\
+	X->user.port            = Y->user.port; 			\
+	X->user.fwmark          = Y->user.fwmark; 			\
+	snprintf(X->user.sched_name, IP_VS_SCHEDNAME_MAXLEN, "%s", Y->user.sched_name); \
+	X->user.flags           = Y->user.flags; 			\
+	X->user.timeout         = Y->user.timeout; 			\
+	X->user.conn_timeout    = Y->user.conn_timeout; 			\
+	X->user.netmask         = Y->user.netmask; 			\
+	X->user.bps             = Y->user.bps; 				\
+	X->user.limit_proportion= Y->user.limit_proportion; 		\
+	X->user.num_dests        = Y->user.num_dests;			\
+	X->user.num_laddrs       = Y->user.num_laddrs;			\
+	snprintf(X->user.srange, sizeof(X->user.srange), "%s", Y->user.srange); \
+	snprintf(X->user.drange, sizeof(X->user.drange), "%s", Y->user.drange); \
+	snprintf(X->user.iifname, sizeof(X->user.iifname), "%s", Y->user.iifname); \
+	snprintf(X->user.oifname, sizeof(X->user.oifname), "%s", Y->user.oifname); \
+	memcpy(&X->user.stats, &Y->user.stats, sizeof(X->user.stats));}
 
 #define IPRS_2_DPRS(X, Y) {					\
-	DST_CONVERT(X, Y) 					\
-	X->max_conn         = Y->u_threshold; 			\
-	X->min_conn         = Y->l_threshold;}
-
+	X->af               = Y->af; 				\
+	memcpy(&X->addr, &Y->nf_addr, sizeof(X->addr)); 	\
+	X->port             = Y->user.port; 			\
+	X->conn_flags       = Y->user.conn_flags; 		\
+	X->weight           = Y->user.weight; 			\
+	X->max_conn         = Y->user.u_threshold; 		\
+	X->min_conn         = Y->user.l_threshold;}
+
+// DPRS_2_IPRS(ip_vs_dest_entry_app, dp_vs_dest_entry)
 #define DPRS_2_IPRS(X, Y) {					\
-	DST_CONVERT(X, Y)					\
-	X->u_threshold      = Y->max_conn; 			\
-	X->l_threshold      = Y->min_conn;			\
-	X->activeconns      = Y->actconns;			\
-	X->inactconns       = Y->inactconns;			\
-	X->persistconns     = Y->persistconns;			\
+	X->af               = Y->af; 				\
+	memcpy(&X->nf_addr, &Y->addr, sizeof(X->nf_addr)); 		\
+	X->user.port             = Y->port; 				\
+	X->user.conn_flags       = Y->conn_flags; 			\
+	X->user.weight           = Y->weight; 			\
+	X->user.u_threshold      = Y->max_conn; 			\
+	X->user.l_threshold      = Y->min_conn;			\
+	X->user.activeconns      = Y->actconns;			\
+	X->user.inactconns       = Y->inactconns;			\
+	X->user.persistconns     = Y->persistconns;			\
 	memcpy(&X->stats, &Y->stats, sizeof(X->stats));}
 
 void ipvs_service_entry_2_user(const ipvs_service_entry_t *entry, ipvs_service_t *user);
+struct ip_vs_getinfo g_ipvs_info;
 
 int ipvs_init(void)
 {
-	socklen_t len;
+	//socklen_t len, len_rcv;
+	size_t len, len_rcv;
 	struct ip_vs_getinfo *ipvs_info_rcv;
-	size_t len_rcv;
 
 	ipvs_func = ipvs_init;
-	len = sizeof(ipvs_info);
-	len_rcv = len;
 
-	if (dpvs_getsockopt(DPVS_SO_GET_INFO, (const void *)&ipvs_info, len,
-                        (void **)&ipvs_info_rcv, &len_rcv))
+#if !HAVE_DECL_SOCK_CLOEXEC
+	if (set_sock_flags(sockfd, F_SETFD, FD_CLOEXEC)) {
+		close(sockfd);
 		return -1;
-	ipvs_info = *ipvs_info_rcv;
-	dpvs_sockopt_msg_free(ipvs_info_rcv);
-	return 0;
-}
-
+	}
+#endif
+	len_rcv = len = sizeof(g_ipvs_info);
 
-int ipvs_getinfo(void)
-{
-	socklen_t len;
-	struct ip_vs_getinfo *ipvs_info_rcv;
-	size_t len_rcv;
+	if (dpvs_getsockopt(DPVS_SO_GET_INFO, (const void*)&g_ipvs_info, len, (void **)&ipvs_info_rcv, &len_rcv)) {
+		return -1;
+	}
 
-	ipvs_func = ipvs_getinfo;
-	len = sizeof(ipvs_info);
-	len_rcv = len;
+	memcpy(&g_ipvs_info, ipvs_info_rcv, sizeof(g_ipvs_info));
 
-	int ret = dpvs_getsockopt(DPVS_SO_GET_INFO, (const void *)&ipvs_info, len,
-			       (void **)&ipvs_info_rcv, &len_rcv);
-	ipvs_info = *ipvs_info_rcv;
 	dpvs_sockopt_msg_free(ipvs_info_rcv);
-	return ret;
-}
-
 
-unsigned int ipvs_version(void)
-{
-	return ipvs_info.version;
+	return 0;
 }
 
-
 int ipvs_flush(void)
 {
 	return dpvs_setsockopt(DPVS_SO_SET_FLUSH, NULL, 0);
 }
 
-
 int ipvs_add_service(ipvs_service_t *svc)
 {
 	struct dp_vs_service_user dpvs_svc;
-	struct dp_vs_service_user *dpvs_svc_ptr = &dpvs_svc;
 
-	IPVS_2_DPVS(dpvs_svc_ptr, svc);
+	ipvs_func = ipvs_add_service;
+
+	IPVS_2_DPVS((&dpvs_svc), svc);
 
-	return dpvs_setsockopt(DPVS_SO_SET_ADD, dpvs_svc_ptr, sizeof(dpvs_svc));
+	return dpvs_setsockopt(DPVS_SO_SET_ADD, &dpvs_svc, sizeof(dpvs_svc));
 }
 
 
 int ipvs_update_service(ipvs_service_t *svc)
 {
 	struct dp_vs_service_user dpvs_svc;
-	struct dp_vs_service_user *dpvs_svc_ptr = &dpvs_svc;
 
-	IPVS_2_DPVS(dpvs_svc_ptr, svc);
+	ipvs_func = ipvs_update_service;
 
-	return dpvs_setsockopt(DPVS_SO_SET_EDIT, dpvs_svc_ptr, sizeof(dpvs_svc));
+	IPVS_2_DPVS((&dpvs_svc), svc);
+
+	return dpvs_setsockopt(DPVS_SO_SET_ADD, &dpvs_svc, sizeof(dpvs_svc));
 }
 
 int ipvs_update_service_by_options(ipvs_service_t *svc, unsigned int options)
 {
 	ipvs_service_entry_t *entry;
-	ipvs_service_t user;
+	ipvs_service_t app;
 
 	if (!(entry = ipvs_get_service(svc))) {
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		exit(1);
 	}
-	ipvs_service_entry_2_user(entry, &user);
+	ipvs_service_entry_2_user(entry, &app);
 
 	if( options & OPT_SCHEDULER ) {
-		strcpy(user.sched_name, svc->sched_name);
-		if (strcmp(svc->sched_name, "conhash")) {
-			user.flags &= ~IP_VS_SVC_F_QID_HASH;
-			user.flags &= ~IP_VS_SVC_F_SIP_HASH;
+		strcpy(app.user.sched_name, svc->user.sched_name);
+		if (strcmp(svc->user.sched_name, "conhash")) {
+			app.user.flags &= ~IP_VS_SVC_F_QID_HASH;
+			app.user.flags &= ~IP_VS_SVC_F_SIP_HASH;
 		}
 		else {
-			user.flags |= IP_VS_SVC_F_SIP_HASH;
+			app.user.flags |= IP_VS_SVC_F_SIP_HASH;
 		}
 	}
 
 	if( options & OPT_PERSISTENT ) {
-		user.flags  |= IP_VS_SVC_F_PERSISTENT;
-		user.timeout = svc->timeout;
+		app.user.flags  |= IP_VS_SVC_F_PERSISTENT;
+		app.user.timeout = svc->user.timeout;
 	}
 
 	if( options & OPT_NETMASK ) {
-		user.netmask = svc->netmask;
+		app.user.netmask = svc->user.netmask;
 	}
 
 	if( options & OPT_SYNPROXY ) {
-		if( svc->flags & IP_VS_CONN_F_SYNPROXY ) {
-			user.flags |= IP_VS_CONN_F_SYNPROXY;
+		if( svc->user.flags & IP_VS_CONN_F_SYNPROXY ) {
+			app.user.flags |= IP_VS_CONN_F_SYNPROXY;
 		} else {
-			user.flags &= ~IP_VS_CONN_F_SYNPROXY;
+			app.user.flags &= ~IP_VS_CONN_F_SYNPROXY;
 		}
 	}
 
 	if( options & OPT_ONEPACKET ) {
-		user.flags |= IP_VS_SVC_F_ONEPACKET;
+		app.user.flags |= IP_VS_SVC_F_ONEPACKET;
 	}
 
-	if( options & OPT_HASHTAG ) {
-		if ( svc->flags & IP_VS_SVC_F_SIP_HASH ) {
-			user.flags |= IP_VS_SVC_F_SIP_HASH;
-		} else if ( svc->flags & IP_VS_SVC_F_QID_HASH ) {
-			user.flags |= IP_VS_SVC_F_QID_HASH;
-		} else {
-			user.flags |= IP_VS_SVC_F_SIP_HASH;
-		}
+	if( options & OPT_SIPHASH ) {
+		app.user.flags |= IP_VS_SVC_F_SIP_HASH;
+		app.user.flags &= ~IP_VS_SVC_F_QID_HASH;
 	}
 
-	return ipvs_update_service(&user);
+	if( options & OPT_QIDHASH ) {
+		app.user.flags |= IP_VS_SVC_F_QID_HASH;
+		app.user.flags &= ~IP_VS_SVC_F_SIP_HASH;
+	}
+
+	return ipvs_update_service(&app);
 }
 
 int ipvs_update_service_synproxy(ipvs_service_t *svc , int enable)
@@ -246,17 +387,17 @@ int ipvs_update_service_synproxy(ipvs_service_t *svc , int enable)
 		exit(1);
 	}
 	
-	strcpy(svc->sched_name , entry->sched_name);
+	strcpy(svc->user.sched_name , entry->user.sched_name);
 	strcpy(svc->pe_name , entry->pe_name);
-	svc->flags = entry->flags;
-	svc->timeout = entry->timeout;
-	svc->conn_timeout = entry->conn_timeout;
-	svc->netmask = entry->netmask;
+	svc->user.flags = entry->user.flags;
+	svc->user.timeout = entry->user.timeout;
+	svc->user.conn_timeout = entry->user.conn_timeout;
+	svc->user.netmask = entry->user.netmask;
 	
 	if(enable)
-		svc->flags = svc->flags | IP_VS_CONN_F_SYNPROXY;
+		svc->user.flags = svc->user.flags | IP_VS_CONN_F_SYNPROXY;
 	else
-		svc->flags = svc->flags & (~IP_VS_CONN_F_SYNPROXY);
+		svc->user.flags = svc->user.flags & (~IP_VS_CONN_F_SYNPROXY);
 	
 	return 0;
 }
@@ -264,21 +405,24 @@ int ipvs_update_service_synproxy(ipvs_service_t *svc , int enable)
 int ipvs_del_service(ipvs_service_t *svc)
 {
 	struct dp_vs_service_user dpvs_svc;
-	struct dp_vs_service_user *dpvs_svc_ptr = &dpvs_svc;
 
-	IPVS_2_DPVS(dpvs_svc_ptr, svc);
+	ipvs_func = ipvs_del_service;
 
-	return dpvs_setsockopt(DPVS_SO_SET_DEL, dpvs_svc_ptr, sizeof(dpvs_svc));
+	IPVS_2_DPVS((&dpvs_svc), svc);
+
+	return dpvs_setsockopt(DPVS_SO_SET_DEL, &dpvs_svc, sizeof(dpvs_svc));
 }
 
+
 int ipvs_zero_service(ipvs_service_t *svc)
 {
 	struct dp_vs_service_user dpvs_svc;
-	struct dp_vs_service_user *dpvs_svc_ptr = &dpvs_svc;
 
-	IPVS_2_DPVS(dpvs_svc_ptr, svc);
+	ipvs_func = ipvs_zero_service;
 
-	return dpvs_setsockopt(DPVS_SO_SET_ZERO, dpvs_svc_ptr, sizeof(dpvs_svc));
+	IPVS_2_DPVS((&dpvs_svc), svc);
+
+	return dpvs_setsockopt(DPVS_SO_SET_ZERO, &dpvs_svc, sizeof(dpvs_svc));
 }
 
 int ipvs_add_dest(ipvs_service_t *svc, ipvs_dest_t *dest)
@@ -287,81 +431,82 @@ int ipvs_add_dest(ipvs_service_t *svc, ipvs_dest_t *dest)
 	struct dp_vs_service_user *dpvs_svc_ptr = &svcdest.svc;
 	struct dp_vs_dest_user *dpvs_dest_ptr = &svcdest.dest;
 
+	ipvs_func = ipvs_add_dest;
+
 	IPVS_2_DPVS(dpvs_svc_ptr, svc);
 	IPRS_2_DPRS(dpvs_dest_ptr, dest);
 
 	return dpvs_setsockopt(DPVS_SO_SET_ADDDEST, &svcdest, sizeof(svcdest));
 }
 
+
 int ipvs_update_dest(ipvs_service_t *svc, ipvs_dest_t *dest)
 {
 	dpvs_servicedest_t svcdest;
 	struct dp_vs_service_user *dpvs_svc_ptr = &svcdest.svc;
 	struct dp_vs_dest_user *dpvs_dest_ptr = &svcdest.dest;
 
+	ipvs_func = ipvs_update_dest;
+
 	IPVS_2_DPVS(dpvs_svc_ptr, svc);
 	IPRS_2_DPRS(dpvs_dest_ptr, dest);
 
 	return dpvs_setsockopt(DPVS_SO_SET_EDITDEST, &svcdest, sizeof(svcdest));
 }
 
+
 int ipvs_del_dest(ipvs_service_t *svc, ipvs_dest_t *dest)
 {
 	dpvs_servicedest_t svcdest;
 	struct dp_vs_service_user *dpvs_svc_ptr = &svcdest.svc;
 	struct dp_vs_dest_user *dpvs_dest_ptr = &svcdest.dest;
 
+	ipvs_func = ipvs_del_dest;
+
 	IPVS_2_DPVS(dpvs_svc_ptr, svc);
 	IPRS_2_DPRS(dpvs_dest_ptr, dest);
 
-	return dpvs_setsockopt(DPVS_SO_SET_DELDEST, &svcdest, sizeof(svcdest)); 
+	return dpvs_setsockopt(DPVS_SO_SET_DELDEST, &svcdest, sizeof(svcdest));
 }
 
 static void ipvs_fill_laddr_conf(ipvs_service_t *svc, ipvs_laddr_t *laddr, 
                                  struct dp_vs_laddr_conf *conf)
 {
 	memset(conf, 0, sizeof(*conf));
+
 	conf->af_s      = svc->af;
-	conf->proto     = svc->protocol;
-	conf->vport     = svc->port;
-	conf->fwmark    = svc->fwmark;
 	conf->af_l      = laddr->af;
+	conf->proto     = svc->user.protocol;
+	conf->vport     = svc->user.port;
+	conf->fwmark    = svc->user.fwmark;
+
 	if (strlen(laddr->ifname))
 		snprintf(conf->ifname, sizeof(conf->ifname), "%s", laddr->ifname);
 
 	if (svc->af == AF_INET) {
-		conf->vaddr.in = svc->addr.in;
-	} else {
-		conf->vaddr.in6 = svc->addr.in6;
-	}
-
-	if (laddr->af == AF_INET) {
+		conf->vaddr.in = svc->nf_addr.in;
 		conf->laddr.in = laddr->addr.in;
 	} else {
+		conf->vaddr.in6 = svc->nf_addr.in6;
 		conf->laddr.in6 = laddr->addr.in6;
-	}
+	}    
 
-	return;
+	return ;
 }
 
 static void ipvs_fill_ipaddr_conf(ipvs_laddr_t *laddr, struct inet_addr_param *param)
 {
 	memset(param, 0, sizeof(*param));
-	param->af = laddr->af;
+	param->af = AF_INET;
 	if (strlen(laddr->ifname))
 		snprintf(param->ifname, sizeof(param->ifname), "%s", laddr->ifname);
-	if (laddr->af == AF_INET) {
-		param->addr.in = laddr->addr.in;
-		param->plen = 32;
-	} else {
-		param->plen = 128;
-		param->addr.in6 = laddr->addr.in6;
-	}
+	param->addr.in = laddr->addr.in;
+	param->plen = 32;
 	param->flags |= IFA_F_SAPOOL;
 	return;
 }
 
-int ipvs_add_laddr(ipvs_service_t *svc, ipvs_laddr_t *laddr)
+int ipvs_add_laddr(ipvs_service_t *svc, ipvs_laddr_t * laddr)
 {
 	struct dp_vs_laddr_conf conf;
 	struct inet_addr_param param;
@@ -373,7 +518,7 @@ int ipvs_add_laddr(ipvs_service_t *svc, ipvs_laddr_t *laddr)
 	return dpvs_setsockopt(SOCKOPT_SET_LADDR_ADD, &conf, sizeof(conf));
 }
 
-int ipvs_del_laddr(ipvs_service_t *svc, ipvs_laddr_t *laddr)
+int ipvs_del_laddr(ipvs_service_t *svc, ipvs_laddr_t * laddr)
 {
 	struct dp_vs_laddr_conf conf;
 	struct inet_addr_param param;
@@ -391,14 +536,14 @@ static void ipvs_fill_blklst_conf(ipvs_service_t *svc, ipvs_blklst_t *blklst,
 {
 	memset(conf, 0, sizeof(*conf));
 	conf->af        = svc->af;
-	conf->proto     = svc->protocol;
-	conf->vport     = svc->port;
-	conf->fwmark    = svc->fwmark;
+	conf->proto     = svc->user.protocol;
+	conf->vport     = svc->user.port;
+	conf->fwmark    = svc->user.fwmark;
 	if (svc->af == AF_INET) {
-		conf->vaddr.in = svc->addr.in;
+		conf->vaddr.in = svc->nf_addr.in;
 		conf->blklst.in = blklst->addr.in;
 	} else {
-		conf->vaddr.in6 = svc->addr.in6;
+		conf->vaddr.in6 = svc->nf_addr.in6;
 		conf->blklst.in6 = blklst->addr.in6;
 	}
 
@@ -465,8 +610,9 @@ int ipvs_set_timeout(ipvs_timeout_t *to)
 int ipvs_start_daemon(ipvs_daemon_t *dm)
 {
 	ipvs_func = ipvs_start_daemon;
+
 	return setsockopt(sockfd, IPPROTO_IP, IP_VS_SO_SET_STARTDAEMON,
-			  (char *)dm, sizeof(*dm));
+			  (char *)&dm, sizeof(dm));
 }
 
 
@@ -475,21 +621,20 @@ int ipvs_stop_daemon(ipvs_daemon_t *dm)
 	ipvs_func = ipvs_stop_daemon;
 
 	return setsockopt(sockfd, IPPROTO_IP, IP_VS_SO_SET_STOPDAEMON,
-			  (char *)dm, sizeof(*dm));
+			  (char *)&dm, sizeof(dm));
 }
 
-
-struct ip_vs_get_services *ipvs_get_services(void)
+struct ip_vs_get_services_app *ipvs_get_services(void)
 {
-	struct ip_vs_get_services *get;
+	struct ip_vs_get_services_app *get;
+	struct ip_vs_service_entry_app *ipvs_entry;
 	struct dp_vs_get_services *dpvs_get, *dpvs_get_rcv;
-	struct dp_vs_service_entry *dpvs_entry;
-	struct ip_vs_service_entry *ipvs_entry;
+	dpvs_service_entry_t *dpvs_entry;
 	size_t len = 0, len_rcv = 0;
-	int i;
+	unsigned int i;
 
-	len = sizeof(struct ip_vs_get_services) +
-		sizeof(ipvs_service_entry_t) * ipvs_info.num_services;
+	len = sizeof(struct ip_vs_get_services_app) +
+		sizeof(ipvs_service_entry_t) * g_ipvs_info.num_services;
 	if (!(get = calloc(len, 1)))
 		return NULL;
 
@@ -498,22 +643,23 @@ struct ip_vs_get_services *ipvs_get_services(void)
 		free(get);
 		return NULL;
 	}
-	dpvs_get->num_services = ipvs_info.num_services;
+	dpvs_get->num_services = g_ipvs_info.num_services;
 	
-	if (dpvs_getsockopt(DPVS_SO_GET_SERVICES, dpvs_get, len, (void **)&dpvs_get_rcv, &len_rcv)) {
+	if (dpvs_getsockopt(DPVS_SO_GET_SERVICES, dpvs_get, len, (void **)&dpvs_get_rcv, &len_rcv) < 0) {
 		free(get);
 		free(dpvs_get);
 		return NULL;
 	}
 
-	get->num_services = dpvs_get_rcv->num_services;
+	get->user.num_services = dpvs_get_rcv->num_services;
+        g_ipvs_info.num_services = dpvs_get_rcv->num_services;
 	for (i = 0; i < dpvs_get_rcv->num_services; i++) {
-		ipvs_entry = &get->entrytable[i];
-		dpvs_entry = &dpvs_get_rcv->entrytable[i];
+		ipvs_entry = &get->user.entrytable[i];
+		dpvs_entry = (dpvs_service_entry_t*)&dpvs_get_rcv->entrytable[i];
 		DPVS_2_IPVS(ipvs_entry, dpvs_entry);
 		if (dpvs_get_rcv->entrytable[i].af == AF_INET) {
-			get->entrytable[i].__addr_v4 = get->entrytable[i].addr.ip;
-			get->entrytable[i].pe_name[0] = '\0';
+			get->user.entrytable[i].user.__addr_v4 = get->user.entrytable[i].nf_addr.ip;
+			get->user.entrytable[i].pe_name[0] = '\0';
 		}
 	}
 
@@ -522,21 +668,124 @@ struct ip_vs_get_services *ipvs_get_services(void)
 	return get;
 }
 
+#ifdef _WITH_SNMP_CHECKER_
+#endif	/* _WITH_SNMP_CHECKER_ */
 
-void ipvs_free_services(struct ip_vs_get_services * p)
+struct ip_vs_get_dests_app *ipvs_get_dests(ipvs_service_entry_t *svc)
 {
-	free(p);
+	struct ip_vs_get_dests_app *d;
+	struct dp_vs_get_dests *dpvs_dests, *dpvs_dests_rcv;
+	struct ip_vs_dest_entry_app *ipvs_entry;
+	struct dp_vs_dest_entry *dpvs_entry;
+	size_t len = 0, len_rcv = 0;
+	unsigned i;
+
+	len = sizeof(struct ip_vs_get_dests_app) + 
+		sizeof(ipvs_dest_entry_t) * svc->user.num_dests;
+	if (!(d = calloc(len, 1)))
+		return NULL;
+
+	len = sizeof(struct dp_vs_get_dests);
+	if (!(dpvs_dests = calloc(len, 1))) {
+		free(d);
+		return NULL;
+	}
+
+	dpvs_dests->af = svc->af;
+	dpvs_dests->fwmark = svc->user.fwmark;
+	dpvs_dests->proto = svc->user.protocol;
+	memcpy(&dpvs_dests->addr, &svc->nf_addr, sizeof(svc->nf_addr));
+	dpvs_dests->port = svc->user.port;
+	dpvs_dests->num_dests = svc->user.num_dests;
+	snprintf(dpvs_dests->srange, sizeof(dpvs_dests->srange), "%s", svc->user.srange);
+	snprintf(dpvs_dests->drange, sizeof(dpvs_dests->drange), "%s", svc->user.drange);
+	snprintf(dpvs_dests->iifname, sizeof(dpvs_dests->iifname), "%s", svc->user.iifname);
+	snprintf(dpvs_dests->oifname, sizeof(dpvs_dests->oifname), "%s", svc->user.oifname);
+
+	if (dpvs_getsockopt(DPVS_SO_GET_DESTS, dpvs_dests, len, (void **)&dpvs_dests_rcv, &len_rcv) < 0) {
+		free(d);
+		free(dpvs_dests);
+		return NULL;
+	}
+
+	d->af = dpvs_dests_rcv->af;
+	memcpy(&d->nf_addr, &dpvs_dests_rcv->addr, sizeof(d->nf_addr));
+	d->user.protocol  = dpvs_dests_rcv->proto;
+	d->user.port = dpvs_dests_rcv->port;
+	d->user.fwmark = dpvs_dests_rcv->fwmark;
+	d->user.num_dests = dpvs_dests_rcv->num_dests;
+	snprintf(d->user.srange, sizeof(dpvs_dests_rcv->srange), "%s", dpvs_dests_rcv->srange);
+	snprintf(d->user.drange, sizeof(dpvs_dests_rcv->drange), "%s", dpvs_dests_rcv->drange);
+	snprintf(d->user.iifname, sizeof(dpvs_dests_rcv->iifname), "%s", dpvs_dests_rcv->iifname);
+	snprintf(d->user.oifname, sizeof(dpvs_dests_rcv->oifname), "%s", dpvs_dests_rcv->oifname);
+	if (d->af == AF_INET) {
+		d->user.__addr_v4 = d->nf_addr.ip;
+	}
+	for (i = 0; i < dpvs_dests_rcv->num_dests; i++) {
+		ipvs_entry = &d->user.entrytable[i];
+		dpvs_entry = &dpvs_dests_rcv->entrytable[i];
+		DPRS_2_IPRS(ipvs_entry, dpvs_entry);
+		if (d->user.entrytable[i].af == AF_INET)
+			d->user.entrytable[i].user.__addr_v4 = d->user.entrytable[i].nf_addr.ip;
+	}
+	free(dpvs_dests);	
+	dpvs_sockopt_msg_free(dpvs_dests_rcv);
+	return d;
 }
 
 
-typedef int (*qsort_cmp_t)(const void *, const void *);
+ipvs_service_entry_t *
+ipvs_get_service(ipvs_service_t *hint)
+{
+	ipvs_service_entry_t *svc;
+	size_t len, len_rcv;
+	dpvs_service_entry_t dpvs_svc, *dpvs_svc_rcv;
+	struct dp_vs_service_user dpvs_app, *dpvs_app_ptr;
+
+	ipvs_func = ipvs_get_service;
+
+	len = sizeof(*svc);
+	svc = calloc(1, len);
+	if (!svc)
+		return NULL;
+	memset((void*)svc, 0x00, len);
+
+	len = sizeof(dpvs_svc);
+	len_rcv = sizeof(*dpvs_svc_rcv);
+	memset(&dpvs_svc, 0, len);
+
+	dpvs_app_ptr = &dpvs_app;
+	memset(dpvs_app_ptr, 0, sizeof(dpvs_app));
+	IPVS_2_DPVS(dpvs_app_ptr, hint);
+	memcpy(&dpvs_svc, dpvs_app_ptr, sizeof(dpvs_app));
+
+	if (dpvs_getsockopt(DPVS_SO_GET_SERVICE, 
+		&dpvs_svc, 
+		len, 
+		(void **)&dpvs_svc_rcv, 
+		&len_rcv)) {
+		goto out_err;
+	}
+	
+	DPVS_2_IPVS(svc, dpvs_svc_rcv)
+	if (svc->af == AF_INET) {
+		svc->pe_name[0] = '\0';
+		svc->user.__addr_v4 = svc->nf_addr.ip;
+	}
 
-int
+	dpvs_sockopt_msg_free(dpvs_svc_rcv);
+	return svc;
+out_err:
+	FREE(svc);
+	return NULL;
+}
+
+int __attribute__ ((pure))
 ipvs_cmp_services(ipvs_service_entry_t *s1, ipvs_service_entry_t *s2)
 {
 	int r, i;
 
-	r = s1->fwmark - s2->fwmark;
+	r = s1->user.fwmark - s2->user.fwmark;
 	if (r != 0)
 		return r;
 
@@ -544,22 +793,143 @@ ipvs_cmp_services(ipvs_service_entry_t *s1, ipvs_service_entry_t *s2)
 	if (r != 0)
 		return r;
 
-	r = s1->protocol - s2->protocol;
+	r = s1->user.protocol - s2->user.protocol;
 	if (r != 0)
 		return r;
 
 	if (s1->af == AF_INET6)
 		for (i = 0; !r && (i < 4); i++)
-			r = ntohl(s1->addr.in6.s6_addr32[i]) - ntohl(s2->addr.in6.s6_addr32[i]);
+			r = ntohl(s1->nf_addr.in6.s6_addr32[i]) - ntohl(s2->nf_addr.in6.s6_addr32[i]);
 	else
-		r = ntohl(s1->addr.ip) - ntohl(s2->addr.ip);
+		r = ntohl(s1->nf_addr.ip) - ntohl(s2->nf_addr.ip);
 	if (r != 0)
 		return r;
 
-	return ntohs(s1->port) - ntohs(s2->port);
+	return ntohs(s1->user.port) - ntohs(s2->user.port);
+}
+
+int __attribute__ ((pure))
+ipvs_cmp_dests(ipvs_dest_entry_t *d1, ipvs_dest_entry_t *d2)
+{
+	int r = 0, i;
+
+	if (d1->af == AF_INET6)
+		for (i = 0; !r && (i < 4); i++)
+			r = ntohl(d1->nf_addr.in6.s6_addr32[i]) -
+			    ntohl(d2->nf_addr.in6.s6_addr32[i]);
+	else
+		r = ntohl(d1->nf_addr.ip) - ntohl(d2->nf_addr.ip);
+	if (r != 0)
+		return r;
+
+	return ntohs(d1->user.port) - ntohs(d2->user.port);
+}
+
+void
+ipvs_sort_services(struct ip_vs_get_services_app *s, ipvs_service_cmp_t f)
+{
+	qsort(s->user.entrytable, s->user.num_services,
+	      sizeof(ipvs_service_entry_t), (qsort_cmp_t)f);
+}
+
+void ipvs_sort_dests(struct ip_vs_get_dests_app *d, ipvs_dest_cmp_t f)
+{
+	qsort(d->user.entrytable, d->user.num_dests,
+	      sizeof(ipvs_dest_entry_t), (qsort_cmp_t)f);
+}
+
+int ipvs_set_route(struct dp_vs_route_conf* rt, int cmd)
+{
+    int err = -1;
+    if (cmd == IPROUTE_DEL){
+        err = dpvs_setsockopt(SOCKOPT_SET_ROUTE_DEL, rt, sizeof(struct dp_vs_route_conf));
+        free(rt);
+    }
+    else if (cmd == IPROUTE_ADD){
+        err = dpvs_setsockopt(SOCKOPT_SET_ROUTE_ADD, rt, sizeof(struct dp_vs_route_conf));
+        free(rt);
+    }
+    return err;
+}
+
+int ipvs_set_route6(struct dp_vs_route6_conf *rt6_cfg, int cmd)
+{
+    int err = -1;
+    if (cmd == IPROUTE_DEL) {
+        rt6_cfg->ops = RT6_OPS_DEL;
+        err = dpvs_setsockopt(SOCKOPT_SET_ROUTE6_ADD_DEL, rt6_cfg, 
+                              sizeof(struct dp_vs_route6_conf));
+    } else if (cmd == IPROUTE_ADD) {
+        rt6_cfg->ops = RT6_OPS_ADD;
+        err = dpvs_setsockopt(SOCKOPT_SET_ROUTE6_ADD_DEL, rt6_cfg,
+                              sizeof(struct dp_vs_route6_conf));
+    }
+    return err;
 }
 
-struct ip_vs_conn_array* ip_vs_get_conns(const struct ip_vs_conn_req *req) {
+int ipvs_set_ipaddr(struct inet_addr_param *param, int cmd)
+{
+   int err = -1;
+   if (cmd == IPADDRESS_DEL)
+       err = dpvs_setsockopt(SOCKOPT_SET_IFADDR_DEL, param, sizeof(struct inet_addr_param)); 
+   else if (cmd == IPADDRESS_ADD)
+       err = dpvs_setsockopt(SOCKOPT_SET_IFADDR_ADD, param, sizeof(struct inet_addr_param));
+   return err;
+}
+
+int ipvs_send_gratuitous_arp(struct in_addr *in)
+{
+    return dpvs_setsockopt(DPVS_SO_SET_GRATARP, in, sizeof(in));
+}
+
+ipvs_timeout_t *ipvs_get_timeout(void)
+{
+	ipvs_timeout_t *u;
+	socklen_t len;
+
+	len = sizeof(*u);
+	if (!(u = malloc(len)))
+		return NULL;
+
+	ipvs_func = ipvs_get_timeout;
+	if (getsockopt(sockfd, IPPROTO_IP, IP_VS_SO_GET_TIMEOUT,
+		       (char *)u, &len)) {
+		free(u);
+		return NULL;
+	}
+
+	return NULL;
+}	
+
+ipvs_daemon_t *ipvs_get_daemon(void)
+{
+	ipvs_daemon_t *u;
+	socklen_t len;
+
+	/* note that we need to get the info about two possible
+	   daemons, master and backup. */
+	len = sizeof(*u) * 2;
+	if (!(u = malloc(len)))
+		return NULL;
+
+	ipvs_func = ipvs_get_daemon;
+	if (getsockopt(sockfd, IPPROTO_IP, IP_VS_SO_GET_DAEMON, (char *)u, &len)) {
+		free(u);
+		return NULL;
+	}
+
+	return NULL;
+}
+void ipvs_close(void)
+{
+	if (sockfd != -1) {
+		close(sockfd);
+		sockfd = -1;
+	}
+}
+
+struct ip_vs_conn_array* ip_vs_get_conns(const struct ip_vs_conn_req *req) 
+{
     int res;
     size_t arrlen, rcvlen;
     struct ip_vs_conn_array *conn_arr, *arr_rcv;
@@ -602,33 +972,27 @@ struct ip_vs_conn_array* ip_vs_get_conns(const struct ip_vs_conn_req *req) {
     return conn_arr;
 }
 
-void
-ipvs_sort_services(struct ip_vs_get_services *s, ipvs_service_cmp_t f)
-{
-	qsort(s->entrytable, s->num_services,
-	      sizeof(ipvs_service_entry_t), (qsort_cmp_t)f);
-}
-
 struct ip_vs_get_laddrs *ipvs_get_laddrs(ipvs_service_entry_t *svc)
 {
 	struct ip_vs_get_laddrs *laddrs;
 	struct dp_vs_laddr_conf conf, *result;
-	size_t res_size, i;
+	size_t res_size;
+	int i;
 
 	memset(&conf, 0, sizeof(struct dp_vs_laddr_conf));
 	conf.af_s = svc->af;
-	conf.proto = svc->protocol;
+	conf.proto = svc->user.protocol;
 	if (svc->af == AF_INET)
-		conf.vaddr.in = svc->addr.in;
+		conf.vaddr.in = svc->nf_addr.in;
 	else
-		conf.vaddr.in6 = svc->addr.in6;
-	conf.vport = svc->port;
-	conf.fwmark = svc->fwmark;
+		conf.vaddr.in6 = svc->nf_addr.in6;
+	conf.vport = svc->user.port;
+	conf.fwmark = svc->user.fwmark;
 
-	snprintf(conf.srange, sizeof(conf.srange), "%s", svc->srange);
-	snprintf(conf.drange, sizeof(conf.drange), "%s", svc->drange);
-	snprintf(conf.iifname, sizeof(conf.iifname), "%s", svc->iifname);
-	snprintf(conf.iifname, sizeof(conf.oifname), "%s", svc->oifname);
+	snprintf(conf.srange, sizeof(conf.srange), "%s", svc->user.srange);
+	snprintf(conf.drange, sizeof(conf.drange), "%s", svc->user.drange);
+	snprintf(conf.iifname, sizeof(conf.iifname), "%s", svc->user.iifname);
+	snprintf(conf.iifname, sizeof(conf.oifname), "%s", svc->user.oifname);
 
 	if (dpvs_getsockopt(SOCKOPT_GET_LADDR_GETALL, &conf, sizeof(conf),
 				(void **)&result, &res_size) != 0)
@@ -666,12 +1030,6 @@ struct ip_vs_get_laddrs *ipvs_get_laddrs(ipvs_service_entry_t *svc)
 	return laddrs;
 }
 
-
-void ipvs_free_lddrs(struct ip_vs_get_laddrs* p)
-{
-	free(p);
-}
-
 struct dp_vs_blklst_conf_array *ipvs_get_blklsts(void)
 {
 	struct dp_vs_blklst_conf_array *array, *result;
@@ -700,224 +1058,6 @@ struct dp_vs_blklst_conf_array *ipvs_get_blklsts(void)
 	return array;
 }
 
-struct ip_vs_get_dests *ipvs_get_dests(ipvs_service_entry_t *svc)
-{
-	struct ip_vs_get_dests *d;
-	struct dp_vs_get_dests *dpvs_dests, *dpvs_dests_rcv;
-	struct ip_vs_dest_entry *ipvs_entry;
-	struct dp_vs_dest_entry *dpvs_entry;
-	size_t len = 0, len_rcv = 0;
-	int i;
-
-	len = sizeof(struct ip_vs_get_dests) + 
-		sizeof(ipvs_dest_entry_t) * svc->num_dests;
-	if (!(d = calloc(len, 1)))
-		return NULL;
-
-	len = sizeof(struct dp_vs_get_dests);
-	if (!(dpvs_dests = calloc(len, 1))) {
-		free(d);
-		return NULL;
-	}
-
-	dpvs_dests->af = svc->af;
-	dpvs_dests->fwmark = svc->fwmark;
-	dpvs_dests->proto = svc->protocol;
-	memcpy(&dpvs_dests->addr, &svc->addr, sizeof(svc->addr));
-	dpvs_dests->port = svc->port;
-	dpvs_dests->num_dests = svc->num_dests;
-	snprintf(dpvs_dests->srange, sizeof(dpvs_dests->srange), "%s", svc->srange);
-	snprintf(dpvs_dests->drange, sizeof(dpvs_dests->drange), "%s", svc->drange);
-	snprintf(dpvs_dests->iifname, sizeof(dpvs_dests->iifname), "%s", svc->iifname);
-	snprintf(dpvs_dests->oifname, sizeof(dpvs_dests->oifname), "%s", svc->oifname);
-
-	if (dpvs_getsockopt(DPVS_SO_GET_DESTS, dpvs_dests, len, (void **)&dpvs_dests_rcv, &len_rcv)) {
-		free(d);
-		free(dpvs_dests);
-		return NULL;
-	}
-
-	d->af = dpvs_dests_rcv->af;
-	memcpy(&d->addr, &dpvs_dests_rcv->addr, sizeof(d->addr));
-	d->protocol  = dpvs_dests_rcv->proto;
-	d->port = dpvs_dests_rcv->port;
-	d->fwmark = dpvs_dests_rcv->fwmark;
-	d->num_dests = dpvs_dests_rcv->num_dests;
-	snprintf(d->srange, sizeof(dpvs_dests_rcv->srange), "%s", dpvs_dests_rcv->srange);
-	snprintf(d->drange, sizeof(dpvs_dests_rcv->drange), "%s", dpvs_dests_rcv->drange);
-	snprintf(d->iifname, sizeof(dpvs_dests_rcv->iifname), "%s", dpvs_dests_rcv->iifname);
-	snprintf(d->oifname, sizeof(dpvs_dests_rcv->oifname), "%s", dpvs_dests_rcv->oifname);
-	if (d->af == AF_INET) {
-		d->__addr_v4 = d->addr.ip;
-	}
-	for (i = 0; i < dpvs_dests_rcv->num_dests; i++) {
-		ipvs_entry = &d->entrytable[i];
-		dpvs_entry = &dpvs_dests_rcv->entrytable[i];
-		DPRS_2_IPRS(ipvs_entry, dpvs_entry);
-		if (d->entrytable[i].af == AF_INET)
-			d->entrytable[i].__addr_v4= d->entrytable[i].addr.ip;
-	}
-	free(dpvs_dests);	
-	dpvs_sockopt_msg_free(dpvs_dests_rcv);
-	return d;
-}
-
-
-int ipvs_cmp_dests(ipvs_dest_entry_t *d1, ipvs_dest_entry_t *d2)
-{
-	int r = 0, i;
-
-	if (d1->af == AF_INET6)
-		for (i = 0; !r && (i < 4); i++)
-			r = ntohl(d1->addr.in6.s6_addr32[i]) -
-			    ntohl(d2->addr.in6.s6_addr32[i]);
-	else
-		r = ntohl(d1->addr.ip) - ntohl(d2->addr.ip);
-	if (r != 0)
-		return r;
-
-	return ntohs(d1->port) - ntohs(d2->port);
-}
-
-
-void ipvs_sort_dests(struct ip_vs_get_dests *d, ipvs_dest_cmp_t f)
-{
-	qsort(d->entrytable, d->num_dests,
-	      sizeof(ipvs_dest_entry_t), (qsort_cmp_t)f);
-}
-
-
-ipvs_service_entry_t *
-ipvs_get_service(struct ip_vs_service_user *hint)
-{
-	ipvs_service_entry_t *svc;
-	struct dp_vs_service_entry dpvs_svc, *dpvs_svc_ptr, *dpvs_svc_rcv;
-	socklen_t len;
-	size_t len_rcv;
-
-	len = sizeof(*svc);
-	svc = calloc(1, len);
-	if (!svc)
-		return NULL;
-	memset((void *)svc, 0x00, len);
-
-	len = sizeof(dpvs_svc);
-	len_rcv = sizeof(*dpvs_svc_rcv);
-	memset(&dpvs_svc, 0, len);
-	dpvs_svc_ptr = &dpvs_svc;
-	IPVS_2_DPVS(dpvs_svc_ptr, hint);
-
-	if (dpvs_getsockopt(DPVS_SO_GET_SERVICE,
-		       &dpvs_svc, len, (void **)&dpvs_svc_rcv, &len_rcv)) {
-		goto out_err;
-	}
-
-	DPVS_2_IPVS(svc, dpvs_svc_rcv)
-	if (svc->af == AF_INET) {
-		svc->pe_name[0] = '\0';
-		svc->__addr_v4 = svc->addr.ip;
-	}
-	dpvs_sockopt_msg_free(dpvs_svc_rcv);
-	return svc;
-out_err:
-	free(svc);
-	return NULL;
-}
-
-
-void ipvs_free_service(ipvs_service_entry_t* p)
-{
-	free(p);
-}
-
-int ipvs_set_route(struct dp_vs_route_conf *rt, int cmd)
-{
-    int err = -1;
-    if (cmd == IPROUTE_DEL){
-        err = dpvs_setsockopt(SOCKOPT_SET_ROUTE_DEL, rt, sizeof(struct dp_vs_route_conf));
-    } else if (cmd == IPROUTE_ADD){
-        err = dpvs_setsockopt(SOCKOPT_SET_ROUTE_ADD, rt, sizeof(struct dp_vs_route_conf));
-    }
-    return err;
-}
-
-int ipvs_set_route6(struct dp_vs_route6_conf *rt6_cfg, int cmd)
-{
-    int err = -1;
-    if (cmd == IPROUTE_DEL) {
-        rt6_cfg->ops = RT6_OPS_DEL;
-        err = dpvs_setsockopt(SOCKOPT_SET_ROUTE6_ADD_DEL, rt6_cfg, 
-                              sizeof(struct dp_vs_route6_conf));
-    } else if (cmd == IPROUTE_ADD) {
-        rt6_cfg->ops = RT6_OPS_ADD;
-        err = dpvs_setsockopt(SOCKOPT_SET_ROUTE6_ADD_DEL, rt6_cfg,
-                              sizeof(struct dp_vs_route6_conf));
-    }
-    return err;
-}
-
-int ipvs_set_ipaddr(struct inet_addr_param *param, int cmd)
-{
-   int err = -1;
-   if (cmd == IPADDRESS_DEL)
-       err = dpvs_setsockopt(SOCKOPT_SET_IFADDR_DEL, param, sizeof(struct inet_addr_param)); 
-   else if (cmd == IPADDRESS_ADD)
-       err = dpvs_setsockopt(SOCKOPT_SET_IFADDR_ADD, param, sizeof(struct inet_addr_param));
-   return err;
-}
-
-int ipvs_send_gratuitous_arp(struct in_addr *in)
-{
-    return dpvs_setsockopt(DPVS_SO_SET_GRATARP, in, sizeof(in));
-}
-
-ipvs_timeout_t *ipvs_get_timeout(void)
-{
-	ipvs_timeout_t *u;
-	socklen_t len;
-
-	len = sizeof(*u);
-	if (!(u = malloc(len)))
-		return NULL;
-
-	ipvs_func = ipvs_get_timeout;
-	if (getsockopt(sockfd, IPPROTO_IP, IP_VS_SO_GET_TIMEOUT,
-		       (char *)u, &len)) {
-		free(u);
-		return NULL;
-	}
-	//return u;
-    return NULL;
-}
-
-
-ipvs_daemon_t *ipvs_get_daemon(void)
-{
-	ipvs_daemon_t *u;
-	socklen_t len;
-
-	/* note that we need to get the info about two possible
-	   daemons, master and backup. */
-	len = sizeof(*u) * 2;
-	if (!(u = malloc(len)))
-		return NULL;
-
-	ipvs_func = ipvs_get_daemon;
-	if (getsockopt(sockfd, IPPROTO_IP, IP_VS_SO_GET_DAEMON, (char *)u, &len)) {
-		free(u);
-		return NULL;
-	}
-	//return u;
-    return NULL;
-}
-
-
-void ipvs_close(void)
-{
-    //close(sockfd);
-}
-
-
 const char *ipvs_strerror(int err)
 {
 	unsigned int i;
@@ -940,9 +1080,6 @@ const char *ipvs_strerror(int err)
 		{ ipvs_del_dest, ENOENT, "No such destination" },
 		{ ipvs_start_daemon, EEXIST, "Daemon has already run" },
 		{ ipvs_stop_daemon, ESRCH, "No daemon is running" },
-		{ ipvs_get_services, ESRCH, "No such service" },
-		{ ipvs_get_dests, ESRCH, "No such service" },
-		{ ipvs_get_service, ESRCH, "No such service" },
 		{ ipvs_add_laddr, ESRCH, "Service not defined" },
 		{ ipvs_add_laddr, EEXIST, "Local address already exists" },
 		{ ipvs_del_laddr, ESRCH, "Service not defined" },
@@ -953,6 +1090,10 @@ const char *ipvs_strerror(int err)
 		{ ipvs_del_blklst, ESRCH, "Service not defined" },
 		{ ipvs_del_blklst, ENOENT, "No such deny address" },
 		{ ipvs_get_blklsts, ESRCH, "Service not defined" },
+		{ ipvs_get_dests, ESRCH, "No such service" },
+		{ ipvs_get_service, ESRCH, "No such service" },
+#ifdef _WITH_SNMP_CHECKER_
+#endif
 		{ 0, EPERM, "Permission denied (you must be root)" },
 		{ 0, EINVAL, "Invalid operation.  Possibly wrong module version, address not unicast, ..." },
 		{ 0, ENOPROTOOPT, "Protocol not available" },
@@ -971,24 +1112,23 @@ const char *ipvs_strerror(int err)
 	return strerror(err);
 }
 
-
-void ipvs_service_entry_2_user(const ipvs_service_entry_t *entry, ipvs_service_t *user)
-{
-	user->protocol  = entry->protocol;
-	user->__addr_v4 = entry->__addr_v4;
-	user->port      = entry->port;
-	user->fwmark    = entry->fwmark;
-	strcpy(user->sched_name, entry->sched_name);
-	user->flags     = entry->flags;
-	user->timeout   = entry->timeout;
-	user->conn_timeout = entry->conn_timeout;
-	user->netmask   = entry->netmask;
-	user->af        = entry->af;
-	user->addr      = entry->addr;
-	strcpy(user->pe_name, entry->pe_name);
-	strcpy(user->srange, entry->srange);
-	strcpy(user->drange, entry->drange);
-	strcpy(user->iifname, entry->iifname);
-	strcpy(user->iifname, entry->iifname);
+void ipvs_service_entry_2_user(const ipvs_service_entry_t *entry, ipvs_service_t *rule)
+{
+	rule->user.protocol  = entry->user.protocol;
+	rule->user.__addr_v4 = entry->user.__addr_v4;
+	rule->user.port      = entry->user.port;
+	rule->user.fwmark    = entry->user.fwmark;
+	strcpy(rule->user.sched_name, entry->user.sched_name);
+	rule->user.flags     = entry->user.flags;
+	rule->user.timeout   = entry->user.timeout;
+	rule->user.conn_timeout = entry->user.conn_timeout;
+	rule->user.netmask   = entry->user.netmask;
+	rule->af        = entry->af;
+	rule->nf_addr      = entry->nf_addr;
+	strcpy(rule->pe_name, entry->pe_name);
+	strcpy(rule->user.srange, entry->user.srange);
+	strcpy(rule->user.drange, entry->user.drange);
+	strcpy(rule->user.iifname, entry->user.iifname);
+	strcpy(rule->user.iifname, entry->user.iifname);
 }
 
diff --git a/tools/keepalived/keepalived/check/sockopt.c b/tools/keepalived/keepalived/check/sockopt.c
new file mode 100644
index 000000000..b6b8d982d
--- /dev/null
+++ b/tools/keepalived/keepalived/check/sockopt.c
@@ -0,0 +1,285 @@
+#include "sockopt.h"
+#include <stdio.h>
+#include <errno.h>
+#include <malloc.h>
+#include <pthread.h>
+#include <unistd.h>
+#include "../include/common.h"
+
+#define UNIX_DOMAIN "/var/run/dpvs_ctrl"
+
+/* send "n" bytes to a descriptor */
+ssize_t send_n(int fd, const void *vptr, size_t n, int flags)
+{
+    size_t nleft;
+    ssize_t nwritten;
+    const char *ptr;
+
+    ptr = vptr;
+    nleft = n;
+
+    while (nleft > 0) {
+        if ((nwritten = send(fd, ptr, nleft, flags)) <= 0) {
+            if (nwritten < 0 && errno == EINTR)
+                nwritten = 0;       /* and call send() again */
+            else
+                return (-1);        /* error */
+        }
+
+        nleft -= nwritten;
+        ptr += nwritten;
+    }
+
+    return (n);
+}
+
+ssize_t read_n(int fd, void *vptr, size_t n)
+{
+    size_t nleft;
+    ssize_t nread;
+    char *ptr;
+
+    ptr = vptr;
+    nleft = n;
+    while (nleft > 0) {
+        if ((nread = read(fd, ptr, nleft)) < 0) {
+            if (errno == EINTR)
+                nread = 0;      /* and call read() again */
+            else
+                return (-1);
+        } else if (nread == 0)
+            break;      /* EOF */
+
+        nleft -= nread;
+        ptr += nread;
+    }
+
+    return (n - nleft);     /* return >= 0 */
+}
+
+static inline int sockopt_msg_send(int clt_fd,
+        const struct dpvs_sock_msg *hdr,
+        const char *data, int data_len)
+{
+    int len, res;
+
+    if (!hdr) {
+        fprintf(stderr, "[%s] empty socket msg header\n", __func__);
+        return -ESOCKOPT_INVAL;
+    }
+
+    len = sizeof(struct dpvs_sock_msg);
+    res = send_n(clt_fd, hdr, len, MSG_NOSIGNAL);
+    if (len != res) {
+        fprintf(stderr, "[%s] socket msg header send error -- %d/%d sent\n",
+                __func__, res, len);
+        return -ESOCKOPT_IO;
+    }
+
+    if (data && data_len) {
+        res = send_n(clt_fd, data, data_len, MSG_NOSIGNAL);
+        if (data_len != res) {
+            fprintf(stderr, "[%s] scoket msg body send error -- %d/%d sent\n",
+                    __func__, res, data_len);
+            return -ESOCKOPT_IO;
+        }
+    }
+
+    return 0;
+}
+
+static inline int sockopt_msg_recv(int clt_fd, struct dpvs_sock_msg_reply *reply_hdr, 
+        void **out, size_t *out_len)
+{
+    void *msg = NULL;
+    size_t len, res;
+
+    if (!reply_hdr) {
+        fprintf(stderr, "[%s] empty reply msg pointer\n", __func__);
+        return -ESOCKOPT_INVAL;
+    }
+
+    if (out)
+        *out = NULL; // struct ip_vs_getinfo *ipvs_info_rcv ; out = &ipvs_info_rcv; *out = ipvs_info_rcv = NULL;
+    if (out_len)
+        *out_len = 0;
+
+    len = sizeof(struct dpvs_sock_msg_reply);
+    memset(reply_hdr, 0, len);
+    res = read_n(clt_fd, reply_hdr, len);
+    if (len != res) {
+        fprintf(stderr, "[%s] socket msg header recv error -- %zu/%zu recieved\n",
+                __func__, res, len);
+        return -ESOCKOPT_IO;
+    }
+
+    if (reply_hdr->errcode) {
+        fprintf(stderr, "[%s] errcode set in socket msg#%d header: %s(%d)\n", __func__,
+                reply_hdr->id, reply_hdr->errstr, reply_hdr->errcode);
+        return reply_hdr->errcode;
+    }
+
+    if (reply_hdr->len > 0) {
+        msg = malloc(reply_hdr->len);
+        if (NULL == msg) {
+            fprintf(stderr, "[%s] no memory\n", __func__);
+            return -ESOCKOPT_NOMEM;
+        }
+
+        res = read_n(clt_fd, msg, reply_hdr->len);
+        if (res != reply_hdr->len) {
+            fprintf(stderr, "[%s] socket msg body recv error -- %zu/%zu recieved\n",
+                    __func__, res, reply_hdr->len);
+            free(msg);
+            return -ESOCKOPT_IO;
+        }
+    }
+
+    if (SOCKOPT_VERSION != reply_hdr->version) {
+        fprintf(stderr, "[%s] socket msg version not match\n", __func__);
+        if (reply_hdr->len > 0)
+            free(msg);
+        return -ESOCKOPT_VERSION;
+    }
+
+    if (out && out_len) {
+        *out = msg; // ipvs_info_rcv = msg;
+        *out_len = reply_hdr->len;
+    } else if (reply_hdr->len > 0) {
+        free(msg);
+        if (out)
+            *out = NULL;
+        if (out_len)
+            *out_len = 0;
+    }
+
+    return ESOCKOPT_OK;
+}
+
+int dpvs_setsockopt(sockoptid_t cmd, const void *in, size_t in_len)
+{
+    struct dpvs_sock_msg *msg;
+    struct dpvs_sock_msg_reply reply_hdr;
+    struct sockaddr_un clt_addr;
+    int clt_fd;
+    int res;
+    size_t msg_len;
+
+    memset(&clt_addr, 0, sizeof(struct sockaddr_un));
+    clt_addr.sun_family = AF_UNIX;
+    strncpy(clt_addr.sun_path, UNIX_DOMAIN, sizeof(clt_addr.sun_path) - 1);
+
+    msg_len = sizeof(struct dpvs_sock_msg);
+    msg = malloc(msg_len);
+    if (NULL == msg) {
+        fprintf(stderr, "[%s] no memory\n", __func__);
+        return -ESOCKOPT_INVAL;
+    }
+
+    clt_fd = socket(PF_UNIX, SOCK_STREAM, 0);
+    res = connect(clt_fd, (struct sockaddr *)&clt_addr, sizeof(clt_addr));
+    if (-1 == res) {
+        fprintf(stderr, "[%s] scoket msg connection error: %s\n",
+                __func__, strerror(errno));
+        free(msg);
+        return -ESOCKOPT_IO;
+    }
+
+    memset(msg, 0, msg_len);
+    msg->version = SOCKOPT_VERSION;
+    msg->id = cmd;
+    msg->type = SOCKOPT_SET;
+    msg->len = in_len;
+    res = sockopt_msg_send(clt_fd, msg, in, in_len);
+
+    free(msg);
+    msg = NULL;
+
+    if (res) {
+        close(clt_fd);
+        return res;
+    }
+
+    res = sockopt_msg_recv(clt_fd, &reply_hdr, NULL, NULL);
+    if (res) {
+        close(clt_fd);
+        return res;
+    }
+
+    if (reply_hdr.errcode) {
+        fprintf(stderr, "[%s] Server error: %s\n", __func__, reply_hdr.errstr);
+        close(clt_fd);
+        return reply_hdr.errcode;
+    }
+
+    close(clt_fd);
+    return ESOCKOPT_OK;
+}
+
+int dpvs_getsockopt(sockoptid_t cmd, const void *in, size_t in_len,
+        void **out, size_t *out_len)
+{
+    struct dpvs_sock_msg *msg;
+    struct dpvs_sock_msg_reply reply_hdr;
+    struct sockaddr_un clt_addr;
+    int clt_fd;
+    int res;
+    size_t msg_len;
+
+    if (NULL == out || NULL == out_len) {
+        fprintf(stderr, "[%s] no pointer for info return\n", __func__);
+        return -1;
+    }
+    *out = NULL; // struct ip_vs_getinfo *ipvs_info_rcv ; out = &ipvs_info_rcv; *out = ipvs_info_rcv = NULL;
+    *out_len = 0;
+
+    memset(&clt_addr, 0, sizeof(struct sockaddr_un));
+    clt_addr.sun_family = AF_UNIX;
+    strncpy(clt_addr.sun_path, UNIX_DOMAIN, sizeof(clt_addr.sun_path) - 1);
+
+    msg_len = sizeof(struct dpvs_sock_msg);
+    msg = malloc(msg_len);
+    if (NULL == msg) {
+        fprintf(stderr, "[%s] no memory\n", __func__);
+        return -ESOCKOPT_NOMEM;
+    }
+
+    clt_fd = socket(PF_UNIX, SOCK_STREAM, 0);
+    res = connect(clt_fd, (struct sockaddr*)&clt_addr, sizeof(clt_addr));
+    if (-1 == res) {
+        fprintf(stderr, "[%s] scoket msg connection error: %s\n",
+                __func__, strerror(errno));
+        free(msg);
+        return -ESOCKOPT_IO;
+    }
+
+    memset(msg, 0, msg_len);
+    msg->version = SOCKOPT_VERSION;
+    msg->id = cmd;
+    msg->type = SOCKOPT_GET;
+    msg->len = in_len;
+    res = sockopt_msg_send(clt_fd, msg, in, in_len);
+
+    free(msg);
+    msg = NULL;
+
+    if (res) {
+        close(clt_fd);
+        return res;
+    }
+
+    res = sockopt_msg_recv(clt_fd, &reply_hdr, out, out_len);
+    if (res) {
+        close(clt_fd);
+        return res;
+    }
+
+    if (reply_hdr.errcode) {
+        fprintf(stderr, "[%s] Server error: %s\n", __func__, reply_hdr.errstr);
+        close(clt_fd);
+        return reply_hdr.errcode;
+    }
+
+    close(clt_fd);
+    return ESOCKOPT_OK;
+}
diff --git a/tools/keepalived/keepalived/core/Makefile.am b/tools/keepalived/keepalived/core/Makefile.am
new file mode 100644
index 000000000..e9ce01493
--- /dev/null
+++ b/tools/keepalived/keepalived/core/Makefile.am
@@ -0,0 +1,43 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+AM_CPPFLAGS		= $(KA_CPPFLAGS) $(DEBUG_CPPFLAGS) -DLOCAL_STATE_DIR=\"@localstatedir@\"
+AM_CFLAGS		= $(KA_CFLAGS) $(DEBUG_CFLAGS)
+AM_LDFLAGS		= $(KA_LDFLAGS) $(DEBUG_LDFLAGS)
+# AM_LIBS		= $(KA_LIBS)
+# AM_LIBTOOLFLAGS	= $(KA_LIBTOOLFLAGS)
+
+noinst_LIBRARIES	= libcore.a
+
+libcore_a_SOURCES	= main.c daemon.c pidfile.c layer4.c smtp.c \
+			  global_data.c global_parser.c keepalived_netlink.c
+
+AM_CPPFLAGS		+= -I$(srcdir)/../include -I$(srcdir)/../../lib
+
+libcore_a_LIBADD =
+EXTRA_libcore_a_SOURCES =
+
+if SNMP
+  libcore_a_LIBADD	+= snmp.o
+  EXTRA_libcore_a_SOURCES += snmp.c
+endif
+
+if WITH_NAMESPACES
+  libcore_a_LIBADD	+= namespaces.o
+  EXTRA_libcore_a_SOURCES += namespaces.c
+endif
+
+if LIBNL_DYNAMIC
+  libcore_a_LIBADD	+= libnl_link.o
+  EXTRA_libcore_a_SOURCES += libnl_link.c
+endif
+
+if CN_PROC
+  libcore_a_LIBADD	+= track_process.o
+  EXTRA_libcore_a_SOURCES += track_process.c
+endif
+
+MAINTAINERCLEANFILES	= @MAINTAINERCLEANFILES@
diff --git a/tools/keepalived/keepalived/core/Makefile.in b/tools/keepalived/keepalived/core/Makefile.in
index 96614de36..2592e6a1d 100644
--- a/tools/keepalived/keepalived/core/Makefile.in
+++ b/tools/keepalived/keepalived/core/Makefile.in
@@ -1,47 +1,583 @@
-# Makefile
+# Makefile.in generated by automake 1.13.4 from Makefile.am.
+# @configure_input@
+
+# Copyright (C) 1994-2013 Free Software Foundation, Inc.
+
+# This Makefile.in is free software; the Free Software Foundation
+# gives unlimited permission to copy and/or distribute it,
+# with or without modifications, as long as this notice is preserved.
+
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
+# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
+# PARTICULAR PURPOSE.
+
+@SET_MAKE@
+
+# Makefile.am
 #
 # Keepalived OpenSource project.
 #
-# Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
-
-CC	 = @CC@
-SNMP_FLAG = @SNMP_SUPPORT@
-INCLUDES = -I../include -I../../lib
-CFLAGS	 = @CFLAGS@ @CPPFLAGS@ $(INCLUDES) \
-	   -Wall -Wunused -Wstrict-prototypes
-CFLAGS += -I ../../../../include
-DEFS	 = -D@KERN@ -D@IPVS_SUPPORT@ -D@VRRP_SUPPORT@ -D@SNMP_SUPPORT@ -D@SO_MARK_SUPPORT@ @DFLAGS@
-COMPILE	 = $(CC) $(CFLAGS) $(DEFS)
-
-OBJS = 	main.o daemon.o pidfile.o layer4.o smtp.o \
-	global_data.o global_parser.o
-ifeq ($(SNMP_FLAG),_WITH_SNMP_)
-  OBJS += snmp.o
-endif
-HEADERS = $(OBJS:.o=.h)
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+VPATH = @srcdir@
+am__is_gnu_make = test -n '$(MAKEFILE_LIST)' && test -n '$(MAKELEVEL)'
+am__make_running_with_option = \
+  case $${target_option-} in \
+      ?) ;; \
+      *) echo "am__make_running_with_option: internal error: invalid" \
+              "target option '$${target_option-}' specified" >&2; \
+         exit 1;; \
+  esac; \
+  has_opt=no; \
+  sane_makeflags=$$MAKEFLAGS; \
+  if $(am__is_gnu_make); then \
+    sane_makeflags=$$MFLAGS; \
+  else \
+    case $$MAKEFLAGS in \
+      *\\[\ \	]*) \
+        bs=\\; \
+        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
+          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
+    esac; \
+  fi; \
+  skip_next=no; \
+  strip_trailopt () \
+  { \
+    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
+  }; \
+  for flg in $$sane_makeflags; do \
+    test $$skip_next = yes && { skip_next=no; continue; }; \
+    case $$flg in \
+      *=*|--*) continue;; \
+        -*I) strip_trailopt 'I'; skip_next=yes;; \
+      -*I?*) strip_trailopt 'I';; \
+        -*O) strip_trailopt 'O'; skip_next=yes;; \
+      -*O?*) strip_trailopt 'O';; \
+        -*l) strip_trailopt 'l'; skip_next=yes;; \
+      -*l?*) strip_trailopt 'l';; \
+      -[dEDm]) skip_next=yes;; \
+      -[JT]) skip_next=yes;; \
+    esac; \
+    case $$flg in \
+      *$$target_option*) has_opt=yes; break;; \
+    esac; \
+  done; \
+  test $$has_opt = yes
+am__make_dryrun = (target_option=n; $(am__make_running_with_option))
+am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
+pkgdatadir = $(datadir)/@PACKAGE@
+pkgincludedir = $(includedir)/@PACKAGE@
+pkglibdir = $(libdir)/@PACKAGE@
+pkglibexecdir = $(libexecdir)/@PACKAGE@
+am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
+install_sh_DATA = $(install_sh) -c -m 644
+install_sh_PROGRAM = $(install_sh) -c
+install_sh_SCRIPT = $(install_sh) -c
+INSTALL_HEADER = $(INSTALL_DATA)
+transform = $(program_transform_name)
+NORMAL_INSTALL = :
+PRE_INSTALL = :
+POST_INSTALL = :
+NORMAL_UNINSTALL = :
+PRE_UNINSTALL = :
+POST_UNINSTALL = :
+@SNMP_TRUE@am__append_1 = snmp.o
+@SNMP_TRUE@am__append_2 = snmp.c
+@WITH_NAMESPACES_TRUE@am__append_3 = namespaces.o
+@WITH_NAMESPACES_TRUE@am__append_4 = namespaces.c
+@LIBNL_DYNAMIC_TRUE@am__append_5 = libnl_link.o
+@LIBNL_DYNAMIC_TRUE@am__append_6 = libnl_link.c
+@CN_PROC_TRUE@am__append_7 = track_process.o
+@CN_PROC_TRUE@am__append_8 = track_process.c
+subdir = keepalived/core
+DIST_COMMON = $(srcdir)/Makefile.in $(srcdir)/Makefile.am \
+	$(top_srcdir)/depcomp
+ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
+am__aclocal_m4_deps = $(top_srcdir)/configure.ac
+am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
+	$(ACLOCAL_M4)
+mkinstalldirs = $(install_sh) -d
+CONFIG_HEADER = $(top_builddir)/lib/config.h \
+	$(top_builddir)/lib/config_warnings.h
+CONFIG_CLEAN_FILES =
+CONFIG_CLEAN_VPATH_FILES =
+LIBRARIES = $(noinst_LIBRARIES)
+AM_V_AR = $(am__v_AR_@AM_V@)
+am__v_AR_ = $(am__v_AR_@AM_DEFAULT_V@)
+am__v_AR_0 = @echo "  AR      " $@;
+am__v_AR_1 = 
+libcore_a_AR = $(AR) $(ARFLAGS)
+libcore_a_DEPENDENCIES = $(am__append_1) $(am__append_3) \
+	$(am__append_5) $(am__append_7)
+am_libcore_a_OBJECTS = main.$(OBJEXT) daemon.$(OBJEXT) \
+	pidfile.$(OBJEXT) layer4.$(OBJEXT) smtp.$(OBJEXT) \
+	global_data.$(OBJEXT) global_parser.$(OBJEXT) \
+	keepalived_netlink.$(OBJEXT)
+am__EXTRA_libcore_a_SOURCES_DIST = snmp.c namespaces.c libnl_link.c \
+	track_process.c
+libcore_a_OBJECTS = $(am_libcore_a_OBJECTS)
+AM_V_P = $(am__v_P_@AM_V@)
+am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
+am__v_P_0 = false
+am__v_P_1 = :
+AM_V_GEN = $(am__v_GEN_@AM_V@)
+am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
+am__v_GEN_0 = @echo "  GEN     " $@;
+am__v_GEN_1 = 
+AM_V_at = $(am__v_at_@AM_V@)
+am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
+am__v_at_0 = @
+am__v_at_1 = 
+DEFAULT_INCLUDES = -I.@am__isrc@ -I$(top_builddir)/lib
+depcomp = $(SHELL) $(top_srcdir)/depcomp
+am__depfiles_maybe = depfiles
+am__mv = mv -f
+COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \
+	$(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
+AM_V_CC = $(am__v_CC_@AM_V@)
+am__v_CC_ = $(am__v_CC_@AM_DEFAULT_V@)
+am__v_CC_0 = @echo "  CC      " $@;
+am__v_CC_1 = 
+CCLD = $(CC)
+LINK = $(CCLD) $(AM_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@
+AM_V_CCLD = $(am__v_CCLD_@AM_V@)
+am__v_CCLD_ = $(am__v_CCLD_@AM_DEFAULT_V@)
+am__v_CCLD_0 = @echo "  CCLD    " $@;
+am__v_CCLD_1 = 
+SOURCES = $(libcore_a_SOURCES) $(EXTRA_libcore_a_SOURCES)
+DIST_SOURCES = $(libcore_a_SOURCES) \
+	$(am__EXTRA_libcore_a_SOURCES_DIST)
+am__can_run_installinfo = \
+  case $$AM_UPDATE_INFO_DIR in \
+    n|no|NO) false;; \
+    *) (install-info --version) >/dev/null 2>&1;; \
+  esac
+am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
+# Read a list of newline-separated strings from the standard input,
+# and print each of them once, without duplicates.  Input order is
+# *not* preserved.
+am__uniquify_input = $(AWK) '\
+  BEGIN { nonempty = 0; } \
+  { items[$$0] = 1; nonempty = 1; } \
+  END { if (nonempty) { for (i in items) print i; }; } \
+'
+# Make sure the list of sources is unique.  This is necessary because,
+# e.g., the same source file might be shared among _SOURCES variables
+# for different programs/libraries.
+am__define_uniq_tagged_files = \
+  list='$(am__tagged_files)'; \
+  unique=`for i in $$list; do \
+    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
+  done | $(am__uniquify_input)`
+ETAGS = etags
+CTAGS = ctags
+DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
+ACLOCAL = @ACLOCAL@
+AMTAR = @AMTAR@
+AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
+AR = @AR@
+ARFLAGS = @ARFLAGS@
+AUTOCONF = @AUTOCONF@
+AUTOHEADER = @AUTOHEADER@
+AUTOMAKE = @AUTOMAKE@
+AWK = @AWK@
+CC = @CC@
+CCDEPMODE = @CCDEPMODE@
+CFLAGS = @CFLAGS@
+CPP = @CPP@
+CPPFLAGS = @CPPFLAGS@
+CYGPATH_W = @CYGPATH_W@
+DEFAULT_CONFIG_FILE = @DEFAULT_CONFIG_FILE@
+DEFS = @DEFS@
+DEPDIR = @DEPDIR@
+ECHO_C = @ECHO_C@
+ECHO_N = @ECHO_N@
+ECHO_T = @ECHO_T@
+EGREP = @EGREP@
+EXEEXT = @EXEEXT@
+GENHASH_LIBS = @GENHASH_LIBS@
+GREP = @GREP@
+HAVE_RPM = @HAVE_RPM@
+HAVE_RPMBUILD = @HAVE_RPMBUILD@
+HAVE_SPHINX_BUILD = @HAVE_SPHINX_BUILD@
+INSTALL = @INSTALL@
+INSTALL_DATA = @INSTALL_DATA@
+INSTALL_PROGRAM = @INSTALL_PROGRAM@
+INSTALL_SCRIPT = @INSTALL_SCRIPT@
+INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
+KA_CFLAGS = @KA_CFLAGS@
+KA_CPPFLAGS = @KA_CPPFLAGS@
+KA_LDFLAGS = @KA_LDFLAGS@
+KA_LIBS = @KA_LIBS@
+LDD = @LDD@
+LDFLAGS = @LDFLAGS@
+LIBOBJS = @LIBOBJS@
+LIBS = @LIBS@
+LN_S = @LN_S@
+LTLIBOBJS = @LTLIBOBJS@
+MAINTAINERCLEANFILES = @MAINTAINERCLEANFILES@
+MAKEINFO = @MAKEINFO@
+MKDIR_P = @MKDIR_P@
+NETSNMP_CONFIG = @NETSNMP_CONFIG@
+OBJEXT = @OBJEXT@
+PACKAGE = @PACKAGE@
+PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
+PACKAGE_NAME = @PACKAGE_NAME@
+PACKAGE_STRING = @PACKAGE_STRING@
+PACKAGE_TARNAME = @PACKAGE_TARNAME@
+PACKAGE_URL = @PACKAGE_URL@
+PACKAGE_VERSION = @PACKAGE_VERSION@
+PATH_SEPARATOR = @PATH_SEPARATOR@
+PID_DIR = @PID_DIR@
+PKG_CONFIG = @PKG_CONFIG@
+PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
+PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
+RANLIB = @RANLIB@
+SED = @SED@
+SET_MAKE = @SET_MAKE@
+SHELL = @SHELL@
+SNMP_SERVICE = @SNMP_SERVICE@
+SPHINXBUILDNAME = @SPHINXBUILDNAME@
+STRIP = @STRIP@
+VERSION = @VERSION@
+abs_builddir = @abs_builddir@
+abs_srcdir = @abs_srcdir@
+abs_top_builddir = @abs_top_builddir@
+abs_top_srcdir = @abs_top_srcdir@
+ac_ct_AR = @ac_ct_AR@
+ac_ct_CC = @ac_ct_CC@
+am__include = @am__include@
+am__leading_dot = @am__leading_dot@
+am__quote = @am__quote@
+am__tar = @am__tar@
+am__untar = @am__untar@
+bindir = @bindir@
+build_alias = @build_alias@
+builddir = @builddir@
+datadir = @datadir@
+datarootdir = @datarootdir@
+docdir = @docdir@
+dvidir = @dvidir@
+exec_prefix = @exec_prefix@
+host_alias = @host_alias@
+htmldir = @htmldir@
+includedir = @includedir@
+infodir = @infodir@
+install_sh = @install_sh@
+libdir = @libdir@
+libexecdir = @libexecdir@
+localedir = @localedir@
+localstatedir = @localstatedir@
+mandir = @mandir@
+mkdir_p = @mkdir_p@
+oldincludedir = @oldincludedir@
+pdfdir = @pdfdir@
+prefix = @prefix@
+program_transform_name = @program_transform_name@
+psdir = @psdir@
+sbindir = @sbindir@
+sharedstatedir = @sharedstatedir@
+srcdir = @srcdir@
+sysconfdir = @sysconfdir@
+systemdsystemunitdir = @systemdsystemunitdir@
+target_alias = @target_alias@
+top_build_prefix = @top_build_prefix@
+top_builddir = @top_builddir@
+top_srcdir = @top_srcdir@
+AM_CPPFLAGS = $(KA_CPPFLAGS) $(DEBUG_CPPFLAGS) \
+	-DLOCAL_STATE_DIR=\"@localstatedir@\" -I$(srcdir)/../include \
+	-I$(srcdir)/../../lib
+AM_CFLAGS = $(KA_CFLAGS) $(DEBUG_CFLAGS)
+AM_LDFLAGS = $(KA_LDFLAGS) $(DEBUG_LDFLAGS)
+# AM_LIBS		= $(KA_LIBS)
+# AM_LIBTOOLFLAGS	= $(KA_LIBTOOLFLAGS)
+noinst_LIBRARIES = libcore.a
+libcore_a_SOURCES = main.c daemon.c pidfile.c layer4.c smtp.c \
+			  global_data.c global_parser.c keepalived_netlink.c
+
+libcore_a_LIBADD = $(am__append_1) $(am__append_3) $(am__append_5) \
+	$(am__append_7)
+EXTRA_libcore_a_SOURCES = $(am__append_2) $(am__append_4) \
+	$(am__append_6) $(am__append_8)
+all: all-am
+
+.SUFFIXES:
+.SUFFIXES: .c .o .obj
+$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
+	@for dep in $?; do \
+	  case '$(am__configure_deps)' in \
+	    *$$dep*) \
+	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
+	        && { if test -f $@; then exit 0; else break; fi; }; \
+	      exit 1;; \
+	  esac; \
+	done; \
+	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign keepalived/core/Makefile'; \
+	$(am__cd) $(top_srcdir) && \
+	  $(AUTOMAKE) --foreign keepalived/core/Makefile
+.PRECIOUS: Makefile
+Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
+	@case '$?' in \
+	  *config.status*) \
+	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
+	  *) \
+	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe)'; \
+	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe);; \
+	esac;
+
+$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+
+$(top_srcdir)/configure:  $(am__configure_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+$(am__aclocal_m4_deps):
+
+clean-noinstLIBRARIES:
+	-test -z "$(noinst_LIBRARIES)" || rm -f $(noinst_LIBRARIES)
+
+libcore.a: $(libcore_a_OBJECTS) $(libcore_a_DEPENDENCIES) $(EXTRA_libcore_a_DEPENDENCIES) 
+	$(AM_V_at)-rm -f libcore.a
+	$(AM_V_AR)$(libcore_a_AR) libcore.a $(libcore_a_OBJECTS) $(libcore_a_LIBADD)
+	$(AM_V_at)$(RANLIB) libcore.a
+
+mostlyclean-compile:
+	-rm -f *.$(OBJEXT)
+
+distclean-compile:
+	-rm -f *.tab.c
+
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/daemon.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/global_data.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/global_parser.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/keepalived_netlink.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/layer4.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/libnl_link.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/main.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/namespaces.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/pidfile.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/smtp.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/snmp.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/track_process.Po@am__quote@
 
 .c.o:
-	$(COMPILE) -c $<
-
-all:	$(OBJS)
-
-clean:
-	rm -f *.a *.o *~
-
-distclean: clean
-	rm -f Makefile
-
-
-main.o: main.c ../include/main.h ../../lib/config.h ../../lib/signals.h
-daemon.o: daemon.c ../include/daemon.h ../../lib/utils.h
-pidfile.o: pidfile.c ../include/pidfile.h
-layer4.o: layer4.c ../include/layer4.h ../include/check_api.h ../../lib/utils.h
-smtp.o: smtp.c ../include/smtp.h ../include/global_data.h ../../lib/memory.h \
-  ../../lib/list.h ../../lib/utils.h
-global_data.o: global_data.c ../include/global_data.h ../../lib/memory.h \
-  ../../lib/list.h ../../lib/utils.h
-global_parser.o: global_parser.c ../include/global_parser.h \
-  ../include/global_data.h ../../lib/parser.h ../../lib/memory.h \
-  ../../lib/utils.h
-snmp.o: snmp.c ../include/snmp.h ../../lib/logger.h ../../lib/list.h \
-  ../../lib/config.h ../include/global_data.h
+@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
+@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c $<
+
+.c.obj:
+@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ `$(CYGPATH_W) '$<'`
+@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c `$(CYGPATH_W) '$<'`
+
+ID: $(am__tagged_files)
+	$(am__define_uniq_tagged_files); mkid -fID $$unique
+tags: tags-am
+TAGS: tags
+
+tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	set x; \
+	here=`pwd`; \
+	$(am__define_uniq_tagged_files); \
+	shift; \
+	if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
+	  test -n "$$unique" || unique=$$empty_fix; \
+	  if test $$# -gt 0; then \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      "$$@" $$unique; \
+	  else \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      $$unique; \
+	  fi; \
+	fi
+ctags: ctags-am
+
+CTAGS: ctags
+ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	$(am__define_uniq_tagged_files); \
+	test -z "$(CTAGS_ARGS)$$unique" \
+	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
+	     $$unique
+
+GTAGS:
+	here=`$(am__cd) $(top_builddir) && pwd` \
+	  && $(am__cd) $(top_srcdir) \
+	  && gtags -i $(GTAGS_ARGS) "$$here"
+cscopelist: cscopelist-am
+
+cscopelist-am: $(am__tagged_files)
+	list='$(am__tagged_files)'; \
+	case "$(srcdir)" in \
+	  [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
+	  *) sdir=$(subdir)/$(srcdir) ;; \
+	esac; \
+	for i in $$list; do \
+	  if test -f "$$i"; then \
+	    echo "$(subdir)/$$i"; \
+	  else \
+	    echo "$$sdir/$$i"; \
+	  fi; \
+	done >> $(top_builddir)/cscope.files
+
+distclean-tags:
+	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
+
+distdir: $(DISTFILES)
+	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	list='$(DISTFILES)'; \
+	  dist_files=`for file in $$list; do echo $$file; done | \
+	  sed -e "s|^$$srcdirstrip/||;t" \
+	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
+	case $$dist_files in \
+	  */*) $(MKDIR_P) `echo "$$dist_files" | \
+			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
+			   sort -u` ;; \
+	esac; \
+	for file in $$dist_files; do \
+	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
+	  if test -d $$d/$$file; then \
+	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
+	    if test -d "$(distdir)/$$file"; then \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
+	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
+	  else \
+	    test -f "$(distdir)/$$file" \
+	    || cp -p $$d/$$file "$(distdir)/$$file" \
+	    || exit 1; \
+	  fi; \
+	done
+check-am: all-am
+check: check-am
+all-am: Makefile $(LIBRARIES)
+installdirs:
+install: install-am
+install-exec: install-exec-am
+install-data: install-data-am
+uninstall: uninstall-am
+
+install-am: all-am
+	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
+
+installcheck: installcheck-am
+install-strip:
+	if test -z '$(STRIP)'; then \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	      install; \
+	else \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
+	fi
+mostlyclean-generic:
+
+clean-generic:
+
+distclean-generic:
+	-test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES)
+	-test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES)
+
+maintainer-clean-generic:
+	@echo "This command is intended for maintainers to use"
+	@echo "it deletes files that may require special tools to rebuild."
+	-test -z "$(MAINTAINERCLEANFILES)" || rm -f $(MAINTAINERCLEANFILES)
+clean: clean-am
+
+clean-am: clean-generic clean-noinstLIBRARIES mostlyclean-am
+
+distclean: distclean-am
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+distclean-am: clean-am distclean-compile distclean-generic \
+	distclean-tags
+
+dvi: dvi-am
+
+dvi-am:
+
+html: html-am
+
+html-am:
+
+info: info-am
+
+info-am:
+
+install-data-am:
+
+install-dvi: install-dvi-am
+
+install-dvi-am:
+
+install-exec-am:
+
+install-html: install-html-am
+
+install-html-am:
+
+install-info: install-info-am
+
+install-info-am:
+
+install-man:
+
+install-pdf: install-pdf-am
+
+install-pdf-am:
+
+install-ps: install-ps-am
+
+install-ps-am:
+
+installcheck-am:
+
+maintainer-clean: maintainer-clean-am
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+maintainer-clean-am: distclean-am maintainer-clean-generic
+
+mostlyclean: mostlyclean-am
+
+mostlyclean-am: mostlyclean-compile mostlyclean-generic
+
+pdf: pdf-am
+
+pdf-am:
+
+ps: ps-am
+
+ps-am:
+
+uninstall-am:
+
+.MAKE: install-am install-strip
+
+.PHONY: CTAGS GTAGS TAGS all all-am check check-am clean clean-generic \
+	clean-noinstLIBRARIES cscopelist-am ctags ctags-am distclean \
+	distclean-compile distclean-generic distclean-tags distdir dvi \
+	dvi-am html html-am info info-am install install-am \
+	install-data install-data-am install-dvi install-dvi-am \
+	install-exec install-exec-am install-html install-html-am \
+	install-info install-info-am install-man install-pdf \
+	install-pdf-am install-ps install-ps-am install-strip \
+	installcheck installcheck-am installdirs maintainer-clean \
+	maintainer-clean-generic mostlyclean mostlyclean-compile \
+	mostlyclean-generic pdf pdf-am ps ps-am tags tags-am uninstall \
+	uninstall-am
+
+
+# Tell versions [3.59,3.63) of GNU make to not export all variables.
+# Otherwise a system limit (for SysV at least) may be exceeded.
+.NOEXPORT:
diff --git a/tools/keepalived/keepalived/core/daemon.c b/tools/keepalived/keepalived/core/daemon.c
index 23692e3b4..0e3621df1 100644
--- a/tools/keepalived/keepalived/core/daemon.c
+++ b/tools/keepalived/keepalived/core/daemon.c
@@ -17,21 +17,31 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <syslog.h>
+#include "config.h"
+
+#include <stdlib.h>
+#include <unistd.h>
+#include <stdbool.h>
+
 #include "daemon.h"
 #include "logger.h"
 #include "utils.h"
 
 /* Daemonization function coming from zebra source code */
 pid_t
-xdaemon(int nochdir, int noclose, int exitflag)
+xdaemon(bool nochdir, bool noclose, bool exitflag)
 {
 	pid_t pid;
 	int ret;
 
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		flush_log_file();
+#endif
+
 	/* In case of fork is error. */
 	pid = fork();
 	if (pid < 0) {
@@ -63,19 +73,8 @@ xdaemon(int nochdir, int noclose, int exitflag)
 	}
 
 	/* File descriptor close. */
-	if (!noclose) {
-		int fd;
-
-		fd = open("/dev/null", O_RDWR, 0);
-		if (fd != -1) {
-			dup2(fd, STDIN_FILENO);
-			dup2(fd, STDOUT_FILENO);
-			dup2(fd, STDERR_FILENO);
-			if (fd > 2)
-				close(fd);
-		}
-	}
+	if (!noclose)
+		set_std_fd(true);
 
-	umask(0);
 	return 0;
 }
diff --git a/tools/keepalived/keepalived/core/global_data.c b/tools/keepalived/keepalived/core/global_data.c
index 0467e50ed..9696da15c 100644
--- a/tools/keepalived/keepalived/core/global_data.c
+++ b/tools/keepalived/keepalived/core/global_data.c
@@ -17,49 +17,52 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <syslog.h>
+#include "config.h"
+
 #include <unistd.h>
 #include <pwd.h>
-#include <netdb.h>
+
 #include "global_data.h"
-#include "memory.h"
 #include "list.h"
 #include "logger.h"
+#include "parser.h"
 #include "utils.h"
+#include "main.h"
+#include "memory.h"
+#ifdef _WITH_VRRP_
+#include "vrrp.h"
+#include "vrrp_ipaddress.h"
+#endif
+#ifdef _HAVE_SCHED_RT_
+#include "process.h"
+#endif
+#ifdef _WITH_FIREWALL_
+#include "vrrp_firewall.h"
+#endif
 
 /* global vars */
 data_t *global_data = NULL;
+data_t *old_global_data = NULL;
 
 /* Default settings */
 static void
-set_default_router_id(data_t * data)
+set_default_router_id(data_t *data, const char *new_id)
 {
-	char *new_id = NULL;
-	int len = 0;
-
-	new_id = get_local_name();
 	if (!new_id || !new_id[0])
 		return;
 
-	len = strlen(new_id);
-	data->router_id = MALLOC(len + 1);
-	if (!data->router_id)
-		return;
-
-	memcpy(data->router_id, new_id, len);
+	data->router_id = STRDUP(new_id);
 }
 
 static void
-set_default_email_from(data_t * data)
+set_default_email_from(data_t * data, const char *hostname)
 {
 	struct passwd *pwd = NULL;
-	char *hostname = NULL;
-	int len = 0;
-
-	hostname = get_local_name();
+	size_t len;
+	char *str;
 	if (!hostname || !hostname[0])
 		return;
 
@@ -68,11 +71,11 @@ set_default_email_from(data_t * data)
 		return;
 
 	len = strlen(hostname) + strlen(pwd->pw_name) + 2;
-	data->email_from = MALLOC(len);
+	data->email_from = str = MALLOC(len);
 	if (!data->email_from)
 		return;
 
-	snprintf(data->email_from, len, "%s@%s", pwd->pw_name, hostname);
+	snprintf(str, len, "%s@%s", pwd->pw_name, hostname);
 }
 
 static void
@@ -81,13 +84,45 @@ set_default_smtp_connection_timeout(data_t * data)
 	data->smtp_connection_to = DEFAULT_SMTP_CONNECTION_TIMEOUT;
 }
 
+#ifdef _WITH_VRRP_
 static void
 set_default_mcast_group(data_t * data)
 {
-	inet_stosockaddr("224.0.0.18", 0, &data->vrrp_mcast_group4);
-	inet_stosockaddr("ff02::12", 0, &data->vrrp_mcast_group6);
+	/* coverity[check_return] */
+	inet_stosockaddr(INADDR_VRRP_GROUP, 0, (struct sockaddr_storage *)&data->vrrp_mcast_group4);
+	/* coverity[check_return] */
+	inet_stosockaddr(INADDR6_VRRP_GROUP, 0, (struct sockaddr_storage *)&data->vrrp_mcast_group6);
 }
 
+static void
+set_vrrp_defaults(data_t * data)
+{
+	data->vrrp_garp_rep = VRRP_GARP_REP;
+	data->vrrp_garp_refresh.tv_sec = VRRP_GARP_REFRESH;
+	data->vrrp_garp_refresh_rep = VRRP_GARP_REFRESH_REP;
+	data->vrrp_garp_delay = VRRP_GARP_DELAY;
+	data->vrrp_garp_lower_prio_delay = PARAMETER_UNSET;
+	data->vrrp_garp_lower_prio_rep = PARAMETER_UNSET;
+	data->vrrp_lower_prio_no_advert = false;
+	data->vrrp_higher_prio_send_advert = false;
+	data->vrrp_version = VRRP_VERSION_2;
+#ifdef _HAVE_LIBIPSET_
+	data->using_ipsets = true;
+	strcpy(data->vrrp_ipset_address, DEFAULT_IPSET_NAME);
+	strcpy(data->vrrp_ipset_address6, DEFAULT_IPSET_NAME "6");
+	strcpy(data->vrrp_ipset_address_iface6, DEFAULT_IPSET_NAME "if6");
+	strcpy(data->vrrp_ipset_igmp, DEFAULT_IPSET_NAME "_igmp");
+	strcpy(data->vrrp_ipset_mld, DEFAULT_IPSET_NAME "_mld");
+#endif
+	data->vrrp_check_unicast_src = false;
+	data->vrrp_skip_check_adv_addr = false;
+	data->vrrp_strict = false;
+#ifdef _WITH_NFTABLES_
+	data->vrrp_nf_chain_priority = -1;
+#endif
+}
+#endif
+
 /* email facility functions */
 static void
 free_email(void *data)
@@ -95,22 +130,16 @@ free_email(void *data)
 	FREE(data);
 }
 static void
-dump_email(void *data)
+dump_email(FILE *fp, const void *data)
 {
-	char *addr = data;
-	log_message(LOG_INFO, " Email notification = %s", addr);
+	const char *addr = data;
+	conf_write(fp, "   %s", addr);
 }
 
 void
-alloc_email(char *addr)
+alloc_email(const char *addr)
 {
-	int size = strlen(addr);
-	char *new;
-
-	new = (char *) MALLOC(size + 1);
-	memcpy(new, addr, size + 1);
-
-	list_add(global_data->email, new);
+	list_add(global_data->email, STRDUP(addr));
 }
 
 /* data facility functions */
@@ -119,29 +148,172 @@ alloc_global_data(void)
 {
 	data_t *new;
 
-	new = (data_t *) MALLOC(sizeof(data_t));
+	if (global_data)
+		return global_data;
+
+	new = MALLOC(sizeof(data_t));
 	new->email = alloc_list(free_email, dump_email);
+	new->smtp_alert = -1;
+#ifdef _WITH_VRRP_
+	new->smtp_alert_vrrp = -1;
+#endif
+#ifdef _WITH_LVS_
+	new->smtp_alert_checker = -1;
+#endif
 
+#ifdef _WITH_VRRP_
 	set_default_mcast_group(new);
+	set_vrrp_defaults(new);
+#endif
+	new->notify_fifo.fd = -1;
+#ifdef _WITH_VRRP_
+	new->vrrp_notify_fifo.fd = -1;
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+	new->vrrp_rlimit_rt = RT_RLIMIT_DEFAULT;
+#endif
+	new->vrrp_rx_bufs_multiples = 3;
+#endif
+#ifdef _WITH_LVS_
+	new->lvs_notify_fifo.fd = -1;
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+	new->checker_rlimit_rt = RT_RLIMIT_DEFAULT;
+#endif
+#ifdef _WITH_BFD_
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+	new->bfd_rlimit_rt = RT_RLIMIT_DEFAULT;
+#endif
+#endif
+#endif
+
+#ifdef _WITH_SNMP_
+	if (snmp_option) {
+#ifdef _WITH_SNMP_VRRP_
+		new->enable_snmp_vrrp = true;
+#endif
+#ifdef _WITH_SNMP_RFCV2_
+		new->enable_snmp_rfcv2 = true;
+#endif
+#ifdef _WITH_SNMP_RFCV3_
+		new->enable_snmp_rfcv3 = true;
+#endif
+#ifdef _WITH_SNMP_CHECKER_
+		new->enable_snmp_checker = true;
+#endif
+	}
+
+	if (snmp_socket)
+		new->snmp_socket = STRDUP(snmp_socket);
+#endif
+
+#ifdef _WITH_LVS_
+#ifdef _WITH_VRRP_
+	new->lvs_syncd.syncid = PARAMETER_UNSET;
+#ifdef _HAVE_IPVS_SYNCD_ATTRIBUTES_
+	new->lvs_syncd.mcast_group.ss_family = AF_UNSPEC;
+#endif
+#endif
+#endif
 
 	return new;
 }
 
 void
-init_global_data(data_t * data)
+init_global_data(data_t * data, data_t *prev_global_data, bool copy_unchangeable_config)
 {
-	if (!data->router_id) {
-		set_default_router_id(data);
+	/* If this is a reload and we are running in a network namespace,
+	 * we may not be able to get local_name, so preserve it */
+	const char unknown_name[] = "[unknown]";
+
+	/* If we are running in a network namespace, we may not be
+	 * able to get our local name now, so re-use original */
+	if (prev_global_data) {
+		data->local_name = prev_global_data->local_name;
+		prev_global_data->local_name = NULL;
+
+		if (copy_unchangeable_config) {
+			FREE_CONST_PTR(data->network_namespace);
+			data->network_namespace = prev_global_data->network_namespace;
+			prev_global_data->network_namespace = NULL;
+
+			FREE_CONST_PTR(data->instance_name);
+			data->instance_name = prev_global_data->instance_name;
+			prev_global_data->instance_name = NULL;
+		}
+	}
+
+	if (!data->local_name &&
+	    (!data->router_id ||
+	     (data->smtp_server.ss_family &&
+	      (!data->smtp_helo_name ||
+	       !data->email_from)))) {
+		data->local_name = get_local_name();
+
+		/* If for some reason get_local_name() fails, we need to have
+		 * some string in local_name, otherwise keepalived can segfault */
+		if (!data->local_name)
+			data->local_name = STRDUP(unknown_name);
 	}
 
+	if (!data->router_id)
+		set_default_router_id(data, data->local_name);
+
 	if (data->smtp_server.ss_family) {
-		if (!data->smtp_connection_to) {
+		if (!data->smtp_connection_to)
 			set_default_smtp_connection_timeout(data);
+
+		if (data->local_name && strcmp(data->local_name, unknown_name)) {
+			if (!data->email_from)
+				set_default_email_from(data, data->local_name);
+
+			if (!data->smtp_helo_name)
+				data->smtp_helo_name = STRDUP(data->local_name);
+		}
+	}
+
+	/* Check that there aren't conflicts with the notify FIFOs */
+#ifdef _WITH_VRRP_
+	/* If the global and vrrp notify FIFOs are the same, then data will be
+	 * duplicated on the FIFO */
+	if (
+#ifndef _DEBUG_
+	    prog_type == PROG_TYPE_VRRP &&
+#endif
+	    data->notify_fifo.name && data->vrrp_notify_fifo.name &&
+	    !strcmp(data->notify_fifo.name, data->vrrp_notify_fifo.name)) {
+		log_message(LOG_INFO, "notify FIFO %s has been specified for global and vrrp FIFO - ignoring vrrp FIFO", data->vrrp_notify_fifo.name);
+		FREE_CONST_PTR(data->vrrp_notify_fifo.name);
+		data->vrrp_notify_fifo.name = NULL;
+		free_notify_script(&data->vrrp_notify_fifo.script);
+	}
+#endif
+#ifdef _WITH_LVS_
+	/* If the global and LVS notify FIFOs are the same, then data will be
+	 * duplicated on the FIFO */
+#ifndef _DEBUG_
+	if (prog_type == PROG_TYPE_CHECKER)
+#endif
+	{
+		if (data->notify_fifo.name && data->lvs_notify_fifo.name &&
+		    !strcmp(data->notify_fifo.name, data->lvs_notify_fifo.name)) {
+			log_message(LOG_INFO, "notify FIFO %s has been specified for global and LVS FIFO - ignoring LVS FIFO", data->lvs_notify_fifo.name);
+			FREE_CONST_PTR(data->lvs_notify_fifo.name);
+			data->lvs_notify_fifo.name = NULL;
+			free_notify_script(&data->lvs_notify_fifo.script);
 		}
-		if (!data->email_from) {
-			set_default_email_from(data);
+
+#ifdef _WITH_VRRP_
+		/* If LVS and VRRP use the same FIFO, they cannot both have a script for the FIFO.
+		 * Use the VRRP script and ignore the LVS script */
+		if (data->lvs_notify_fifo.name && data->vrrp_notify_fifo.name &&
+		    !strcmp(data->lvs_notify_fifo.name, data->vrrp_notify_fifo.name) &&
+		    data->lvs_notify_fifo.script &&
+		    data->vrrp_notify_fifo.script) {
+			log_message(LOG_INFO, "LVS notify FIFO and vrrp FIFO are the same both with scripts - ignoring LVS FIFO script");
+			free_notify_script(&data->lvs_notify_fifo.script);
 		}
+#endif
 	}
+#endif
 }
 
 void
@@ -149,49 +321,343 @@ free_global_data(data_t * data)
 {
 	if (!data)
 		return;
-	free_list(data->email);
-	FREE_PTR(data->router_id);
-	FREE_PTR(data->plugin_dir);
-	FREE_PTR(data->email_from);
+
+	free_list(&data->email);
+#if HAVE_DECL_CLONE_NEWNET
+	FREE_CONST_PTR(data->network_namespace);
+#endif
+	FREE_CONST_PTR(data->instance_name);
+	FREE_CONST_PTR(data->process_name);
+#ifdef _WITH_VRRP_
+	FREE_CONST_PTR(data->vrrp_process_name);
+#endif
+#ifdef _WITH_LVS_
+	FREE_CONST_PTR(data->lvs_process_name);
+#endif
+#ifdef _WITH_BFD_
+	FREE_CONST_PTR(data->bfd_process_name);
+#endif
+	FREE_CONST_PTR(data->router_id);
+	FREE_CONST_PTR(data->email_from);
+	FREE_CONST_PTR(data->smtp_helo_name);
+	FREE_CONST_PTR(data->local_name);
+#ifdef _WITH_SNMP_
+	FREE_CONST_PTR(data->snmp_socket);
+#endif
+#if defined _WITH_LVS_ && defined _WITH_VRRP_
+	FREE_CONST_PTR(data->lvs_syncd.ifname);
+	FREE_CONST_PTR(data->lvs_syncd.vrrp_name);
+#endif
+	FREE_CONST_PTR(data->notify_fifo.name);
+	free_notify_script(&data->notify_fifo.script);
+#ifdef _WITH_VRRP_
+	FREE_CONST_PTR(data->default_ifname);
+	FREE_CONST_PTR(data->vrrp_notify_fifo.name);
+	free_notify_script(&data->vrrp_notify_fifo.script);
+#ifdef _WITH_NFTABLES_
+	FREE_CONST_PTR(data->vrrp_nf_table_name);
+#endif
+#endif
+#ifdef _WITH_LVS_
+	FREE_CONST_PTR(data->lvs_notify_fifo.name);
+	free_notify_script(&data->lvs_notify_fifo.script);
+#endif
+#ifdef _WITH_DBUS_
+	FREE_CONST_PTR(data->dbus_service_name);
+#endif
 	FREE(data);
 }
 
 void
-dump_global_data(data_t * data)
+dump_global_data(FILE *fp, data_t * data)
 {
+#ifdef _HAVE_SCHED_RT_
+	char cpu_str[64];
+#endif
+#ifdef _WITH_VRRP_
+	char buf[64];
+#endif
+
 	if (!data)
 		return;
 
-	if (data->router_id ||
-	    data->smtp_server.ss_family || data->smtp_connection_to || data->email_from) {
-		log_message(LOG_INFO, "------< Global definitions >------");
-	}
+	conf_write(fp, "------< Global definitions >------");
+
+#if HAVE_DECL_CLONE_NEWNET
+	conf_write(fp, " Network namespace = %s", data->network_namespace ? data->network_namespace : "(default)");
+#endif
+	if (data->instance_name)
+		conf_write(fp, " Instance name = %s", data->instance_name);
+	if (data->process_name)
+		conf_write(fp, " Parent process name = %s", data->process_name);
+#ifdef _WITH_VRRP_
+	if (data->vrrp_process_name)
+		conf_write(fp, " VRRP process name = %s", data->vrrp_process_name);
+#endif
+#ifdef _WITH_LVS_
+	if (data->lvs_process_name)
+		conf_write(fp, " LVS process name = %s", data->lvs_process_name);
+#endif
+#ifdef _WITH_BFD_
+	if (data->bfd_process_name)
+		conf_write(fp, " BFD process name = %s", data->bfd_process_name);
+#endif
 	if (data->router_id)
-		log_message(LOG_INFO, " Router ID = %s", data->router_id);
-	if (data->plugin_dir)
-		log_message(LOG_INFO, " Plugin dir = %s", data->plugin_dir);
-	if (data->smtp_server.ss_family)
-		log_message(LOG_INFO, " Smtp server = %s", inet_sockaddrtos(&data->smtp_server));
+		conf_write(fp, " Router ID = %s", data->router_id);
+	if (data->smtp_server.ss_family) {
+		conf_write(fp, " Smtp server = %s", inet_sockaddrtos(&data->smtp_server));
+		conf_write(fp, " Smtp server port = %u", ntohs(inet_sockaddrport(&data->smtp_server)));
+	}
+	if (data->smtp_helo_name)
+		conf_write(fp, " Smtp HELO name = %s" , data->smtp_helo_name);
 	if (data->smtp_connection_to)
-		log_message(LOG_INFO, " Smtp server connection timeout = %lu"
-				    , data->smtp_connection_to / TIMER_HZ);
+		conf_write(fp, " Smtp server connection timeout = %lu"
+			     , data->smtp_connection_to / TIMER_HZ);
 	if (data->email_from) {
-		log_message(LOG_INFO, " Email notification from = %s"
+		conf_write(fp, " Email notification from = %s"
 				    , data->email_from);
-		dump_list(data->email);
+		conf_write(fp, " Email notification to:");
+		dump_list(fp, data->email);
+	}
+	conf_write(fp, " Default smtp_alert = %s",
+			data->smtp_alert == -1 ? "unset" : data->smtp_alert ? "on" : "off");
+#ifdef _WITH_VRRP_
+	conf_write(fp, " Default smtp_alert_vrrp = %s",
+			data->smtp_alert_vrrp == -1 ? "unset" : data->smtp_alert_vrrp ? "on" : "off");
+#endif
+#ifdef _WITH_LVS_
+	conf_write(fp, " Default smtp_alert_checker = %s",
+			data->smtp_alert_checker == -1 ? "unset" : data->smtp_alert_checker ? "on" : "off");
+	conf_write(fp, " Checkers log all failures = %s", data->checker_log_all_failures ? "true" : "false");
+#endif
+#ifdef _WITH_VRRP_
+	conf_write(fp, " Dynamic interfaces = %s", data->dynamic_interfaces ? "true" : "false");
+	if (data->dynamic_interfaces)
+		conf_write(fp, " Allow interface changes = %s", data->allow_if_changes ? "true" : "false");
+	if (data->no_email_faults)
+		conf_write(fp, " Send emails for fault transitions = off");
+#endif
+#ifdef _WITH_LVS_
+	if (data->lvs_tcp_timeout)
+		conf_write(fp, " LVS TCP timeout = %d", data->lvs_tcp_timeout);
+	if (data->lvs_tcpfin_timeout)
+		conf_write(fp, " LVS TCP FIN timeout = %d", data->lvs_tcpfin_timeout);
+	if (data->lvs_udp_timeout)
+		conf_write(fp, " LVS TCP timeout = %d", data->lvs_udp_timeout);
+#ifdef _WITH_VRRP_
+#ifndef _DEBUG_
+	if (prog_type == PROG_TYPE_VRRP)
+#endif
+		conf_write(fp, " Default interface = %s", data->default_ifp ? data->default_ifp->ifname : DFLT_INT);
+	if (data->lvs_syncd.vrrp) {
+		conf_write(fp, " LVS syncd vrrp instance = %s"
+				    , data->lvs_syncd.vrrp->iname);
+		if (data->lvs_syncd.ifname)
+			conf_write(fp, " LVS syncd interface = %s"
+				    , data->lvs_syncd.ifname);
+		conf_write(fp, " LVS syncd syncid = %u"
+				    , data->lvs_syncd.syncid);
+#ifdef _HAVE_IPVS_SYNCD_ATTRIBUTES_
+		if (data->lvs_syncd.sync_maxlen)
+			conf_write(fp, " LVS syncd maxlen = %u", data->lvs_syncd.sync_maxlen);
+		if (data->lvs_syncd.mcast_group.ss_family != AF_UNSPEC)
+			conf_write(fp, " LVS mcast group %s", inet_sockaddrtos(&data->lvs_syncd.mcast_group));
+		if (data->lvs_syncd.mcast_port)
+			conf_write(fp, " LVS syncd mcast port = %d", data->lvs_syncd.mcast_port);
+		if (data->lvs_syncd.mcast_ttl)
+			conf_write(fp, " LVS syncd mcast ttl = %u", data->lvs_syncd.mcast_ttl);
+#endif
+	}
+#endif
+	conf_write(fp, " LVS flush = %s", data->lvs_flush ? "true" : "false");
+	conf_write(fp, " LVS flush on stop = %s", data->lvs_flush_onstop == LVS_FLUSH_FULL ? "full" :
+						  data->lvs_flush_onstop == LVS_FLUSH_VS ? "VS" : "disabled");
+#endif
+	if (data->notify_fifo.name) {
+		conf_write(fp, " Global notify fifo = %s, uid:gid %u:%u", data->notify_fifo.name, data->notify_fifo.uid, data->notify_fifo.gid);
+		if (data->notify_fifo.script)
+			conf_write(fp, " Global notify fifo script = %s, uid:gid %u:%u",
+				    cmd_str(data->notify_fifo.script),
+				    data->notify_fifo.script->uid,
+				    data->notify_fifo.script->gid);
 	}
-	if (data->vrrp_mcast_group4.ss_family) {
-		log_message(LOG_INFO, " VRRP IPv4 mcast group = %s"
-				    , inet_sockaddrtos(&data->vrrp_mcast_group4));
+#ifdef _WITH_VRRP_
+	if (data->vrrp_notify_fifo.name) {
+		conf_write(fp, " VRRP notify fifo = %s, uid:gid %u:%u", data->vrrp_notify_fifo.name, data->vrrp_notify_fifo.uid, data->vrrp_notify_fifo.gid);
+		if (data->vrrp_notify_fifo.script)
+			conf_write(fp, " VRRP notify fifo script = %s, uid:gid %u:%u",
+				    cmd_str(data->vrrp_notify_fifo.script),
+				    data->vrrp_notify_fifo.script->uid,
+				    data->vrrp_notify_fifo.script->gid);
 	}
-	if (data->vrrp_mcast_group6.ss_family) {
-		log_message(LOG_INFO, " VRRP IPv6 mcast group = %s"
-				    , inet_sockaddrtos(&data->vrrp_mcast_group4));
+#endif
+#ifdef _WITH_LVS_
+	if (data->lvs_notify_fifo.name) {
+		conf_write(fp, " LVS notify fifo = %s, uid:gid %u:%u", data->lvs_notify_fifo.name, data->lvs_notify_fifo.uid, data->lvs_notify_fifo.gid);
+		if (data->lvs_notify_fifo.script)
+			conf_write(fp, " LVS notify fifo script = %s, uid:gid %u:%u",
+				    cmd_str(data->lvs_notify_fifo.script),
+				    data->lvs_notify_fifo.script->uid,
+				    data->lvs_notify_fifo.script->gid);
+	}
+#endif
+#ifdef _WITH_VRRP_
+	conf_write(fp, " VRRP notify priority changes = %s", data->vrrp_notify_priority_changes ? "true" : "false");
+	if (data->vrrp_mcast_group4.sin_family) {
+		conf_write(fp, " VRRP IPv4 mcast group = %s"
+				    , inet_sockaddrtos((struct sockaddr_storage *)&data->vrrp_mcast_group4));
+	}
+	if (data->vrrp_mcast_group6.sin6_family) {
+		conf_write(fp, " VRRP IPv6 mcast group = %s"
+				    , inet_sockaddrtos((struct sockaddr_storage *)&data->vrrp_mcast_group6));
+	}
+	conf_write(fp, " Gratuitous ARP delay = %u",
+		       data->vrrp_garp_delay/TIMER_HZ);
+	conf_write(fp, " Gratuitous ARP repeat = %u", data->vrrp_garp_rep);
+	conf_write(fp, " Gratuitous ARP refresh timer = %ld", data->vrrp_garp_refresh.tv_sec);
+	conf_write(fp, " Gratuitous ARP refresh repeat = %u", data->vrrp_garp_refresh_rep);
+	conf_write(fp, " Gratuitous ARP lower priority delay = %u", data->vrrp_garp_lower_prio_delay == PARAMETER_UNSET ? PARAMETER_UNSET : data->vrrp_garp_lower_prio_delay / TIMER_HZ);
+	conf_write(fp, " Gratuitous ARP lower priority repeat = %u", data->vrrp_garp_lower_prio_rep);
+	conf_write(fp, " Send advert after receive lower priority advert = %s", data->vrrp_lower_prio_no_advert ? "false" : "true");
+	conf_write(fp, " Send advert after receive higher priority advert = %s", data->vrrp_higher_prio_send_advert ? "true" : "false");
+	conf_write(fp, " Gratuitous ARP interval = %f", data->vrrp_garp_interval / TIMER_HZ_DOUBLE);
+	conf_write(fp, " Gratuitous NA interval = %f", data->vrrp_gna_interval / TIMER_HZ_DOUBLE);
+	conf_write(fp, " VRRP default protocol version = %d", data->vrrp_version);
+#ifdef _WITH_IPTABLES_
+	if (data->vrrp_iptables_inchain[0]) {
+		conf_write(fp," Iptables input chain = %s", data->vrrp_iptables_inchain);
+		if (data->vrrp_iptables_outchain[0])
+			conf_write(fp," Iptables output chain = %s", data->vrrp_iptables_outchain);
+#ifdef _HAVE_LIBIPSET_
+		conf_write(fp, " Using ipsets = %s", data->using_ipsets ? "true" : "false");
+		if (data->using_ipsets) {
+			if (data->vrrp_ipset_address[0])
+				conf_write(fp," ipset IPv4 address set = %s", data->vrrp_ipset_address);
+			if (data->vrrp_ipset_address6[0])
+				conf_write(fp," ipset IPv6 address set = %s", data->vrrp_ipset_address6);
+			if (data->vrrp_ipset_address_iface6[0])
+				conf_write(fp," ipset IPv6 address,iface set = %s", data->vrrp_ipset_address_iface6);
+			if (data->vrrp_ipset_igmp[0])
+				conf_write(fp," ipset IGMP set = %s", data->vrrp_ipset_igmp);
+			if (data->vrrp_ipset_mld[0])
+				conf_write(fp," ipset MLD set = %s", data->vrrp_ipset_mld);
+		}
+#endif
+	}
+#endif
+#ifdef _WITH_NFTABLES_
+	if (data->vrrp_nf_table_name) {
+		conf_write(fp," nftables table name = %s", data->vrrp_nf_table_name);
+		conf_write(fp," nftables base chain priority = %d", data->vrrp_nf_chain_priority);
+		conf_write(fp," nftables with%s counters", data->vrrp_nf_counters ? "" : "out");
+		conf_write(fp," nftables %sforce use ifindex for link local IPv6", data->vrrp_nf_ifindex ? "" : "don't ");
+		if (data->nft_version)
+			conf_write(fp," nft version %u.%u.%u", data->nft_version >> 16,
+					(data->nft_version >> 8) & 0xff, data->nft_version & 0xff);
+		conf_write(fp," libnftnl version %u.%u.%u", LIBNFTNL_VERSION >> 16,
+			       (LIBNFTNL_VERSION >> 8) & 0xff, LIBNFTNL_VERSION & 0xff);
+	}
+#endif
+
+	conf_write(fp, " VRRP check unicast_src = %s", data->vrrp_check_unicast_src ? "true" : "false");
+	conf_write(fp, " VRRP skip check advert addresses = %s", data->vrrp_skip_check_adv_addr ? "true" : "false");
+	conf_write(fp, " VRRP strict mode = %s", data->vrrp_strict ? "true" : "false");
+	conf_write(fp, " VRRP process priority = %d", data->vrrp_process_priority);
+	conf_write(fp, " VRRP don't swap = %s", data->vrrp_no_swap ? "true" : "false");
+#ifdef _HAVE_SCHED_RT_
+	conf_write(fp, " VRRP realtime priority = %u", data->vrrp_realtime_priority);
+	if (CPU_COUNT(&data->vrrp_cpu_mask)) {
+		get_process_cpu_affinity_string(&data->vrrp_cpu_mask, cpu_str, 63);
+		conf_write(fp, " VRRP CPU Affinity = %s", cpu_str);
+	}
+#if HAVE_DECL_RLIMIT_RTTIME
+	conf_write(fp, " VRRP realtime limit = %" PRI_rlim_t, data->vrrp_rlimit_rt);
+#endif
+#endif
+#endif
+#ifdef _WITH_LVS_
+	conf_write(fp, " Checker process priority = %d", data->checker_process_priority);
+	conf_write(fp, " Checker don't swap = %s", data->checker_no_swap ? "true" : "false");
+#ifdef _HAVE_SCHED_RT_
+	conf_write(fp, " Checker realtime priority = %u", data->checker_realtime_priority);
+	if (CPU_COUNT(&data->checker_cpu_mask)) {
+		get_process_cpu_affinity_string(&data->checker_cpu_mask, cpu_str, 63);
+		conf_write(fp, " Checker CPU Affinity = %s", cpu_str);
 	}
+#if HAVE_DECL_RLIMIT_RTTIME
+	conf_write(fp, " Checker realtime limit = %" PRI_rlim_t, data->checker_rlimit_rt);
+#endif
+#endif
+#endif
+#ifdef _WITH_BFD_
+	conf_write(fp, " BFD process priority = %d", data->bfd_process_priority);
+	conf_write(fp, " BFD don't swap = %s", data->bfd_no_swap ? "true" : "false");
+#ifdef _HAVE_SCHED_RT_
+	conf_write(fp, " BFD realtime priority = %u", data->bfd_realtime_priority);
+	if (CPU_COUNT(&data->bfd_cpu_mask)) {
+		get_process_cpu_affinity_string(&data->bfd_cpu_mask, cpu_str, 63);
+		conf_write(fp, " BFD CPU Affinity = %s", cpu_str);
+	}
+#if HAVE_DECL_RLIMIT_RTTIME
+	conf_write(fp, " BFD realtime limit = %" PRI_rlim_t, data->bfd_rlimit_rt);
+#endif
+#endif
+#endif
+#ifdef _WITH_SNMP_VRRP_
+	conf_write(fp, " SNMP vrrp %s", data->enable_snmp_vrrp ? "enabled" : "disabled");
+#endif
+#ifdef _WITH_SNMP_CHECKER_
+	conf_write(fp, " SNMP checker %s", data->enable_snmp_checker ? "enabled" : "disabled");
+#endif
+#ifdef _WITH_SNMP_RFCV2_
+	conf_write(fp, " SNMP RFCv2 %s", data->enable_snmp_rfcv2 ? "enabled" : "disabled");
+#endif
+#ifdef _WITH_SNMP_RFCV3_
+	conf_write(fp, " SNMP RFCv3 %s", data->enable_snmp_rfcv3 ? "enabled" : "disabled");
+#endif
 #ifdef _WITH_SNMP_
-	if (data->enable_traps)
-		log_message(LOG_INFO, " SNMP Trap enabled");
-	else
-		log_message(LOG_INFO, " SNMP Trap disabled");
+	conf_write(fp, " SNMP traps %s", data->enable_traps ? "enabled" : "disabled");
+	conf_write(fp, " SNMP socket = %s", data->snmp_socket ? data->snmp_socket : "default (unix:/var/agentx/master)");
+#endif
+#ifdef _WITH_DBUS_
+	conf_write(fp, " DBus %s", data->enable_dbus ? "enabled" : "disabled");
+	conf_write(fp, " DBus service name = %s", data->dbus_service_name ? data->dbus_service_name : "");
+#endif
+	conf_write(fp, " Script security %s", script_security ? "enabled" : "disabled");
+	conf_write(fp, " Default script uid:gid %u:%u", default_script_uid, default_script_gid);
+#ifdef _WITH_VRRP_
+	conf_write(fp, " vrrp_netlink_cmd_rcv_bufs = %u", global_data->vrrp_netlink_cmd_rcv_bufs);
+	conf_write(fp, " vrrp_netlink_cmd_rcv_bufs_force = %d", global_data->vrrp_netlink_cmd_rcv_bufs_force);
+	conf_write(fp, " vrrp_netlink_monitor_rcv_bufs = %u", global_data->vrrp_netlink_monitor_rcv_bufs);
+	conf_write(fp, " vrrp_netlink_monitor_rcv_bufs_force = %d", global_data->vrrp_netlink_monitor_rcv_bufs_force);
+#ifdef _WITH_CN_PROC_
+	conf_write(fp, " process_monitor_rcv_bufs = %u", global_data->process_monitor_rcv_bufs);
+	conf_write(fp, " process_monitor_rcv_bufs_force = %d", global_data->process_monitor_rcv_bufs_force);
+#endif
+#endif
+#ifdef _WITH_LVS_
+	conf_write(fp, " lvs_netlink_cmd_rcv_bufs = %u", global_data->lvs_netlink_cmd_rcv_bufs);
+	conf_write(fp, " lvs_netlink_cmd_rcv_bufs_force = %d", global_data->lvs_netlink_cmd_rcv_bufs_force);
+	conf_write(fp, " lvs_netlink_monitor_rcv_bufs = %u", global_data->lvs_netlink_monitor_rcv_bufs);
+	conf_write(fp, " lvs_netlink_monitor_rcv_bufs_force = %d", global_data->lvs_netlink_monitor_rcv_bufs_force);
+	conf_write(fp, " rs_init_notifies = %d", global_data->rs_init_notifies);
+	conf_write(fp, " no_checker_emails = %d", global_data->no_checker_emails);
+#endif
+#ifdef _WITH_VRRP_
+	buf[0] = '\0';
+	if (global_data->vrrp_rx_bufs_policy & RX_BUFS_POLICY_MTU)
+		strcpy(buf, " rx_bufs_policy = MTU");
+	else if (global_data->vrrp_rx_bufs_policy & RX_BUFS_POLICY_ADVERT)
+		strcpy(buf, " rx_bufs_policy = ADVERT");
+	else if (global_data->vrrp_rx_bufs_policy & RX_BUFS_SIZE)
+		sprintf(buf, " rx_bufs_size = %zu", global_data->vrrp_rx_bufs_size);
+	if (buf[0])
+		conf_write(fp, "%s", buf);
+	conf_write(fp, " rx_bufs_multiples = %d", global_data->vrrp_rx_bufs_multiples);
+	conf_write(fp, " umask = 0%o", umask_val);
+	if (global_data->vrrp_startup_delay)
+		conf_write(fp, " vrrp_startup_delay = %g", global_data->vrrp_startup_delay / TIMER_HZ_DOUBLE);
+	if (global_data->log_unknown_vrids)
+		conf_write(fp, " log_unknown_vrids");
 #endif
 }
diff --git a/tools/keepalived/keepalived/core/global_parser.c b/tools/keepalived/keepalived/core/global_parser.c
index eed2eacf6..27170ff53 100644
--- a/tools/keepalived/keepalived/core/global_parser.c
+++ b/tools/keepalived/keepalived/core/global_parser.c
@@ -1,14 +1,14 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        Configuration file parser/reader. Place into the dynamic
  *              data structure representation the conf file representing
  *              the loadbalanced server pool.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
@@ -19,60 +19,230 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <netdb.h>
+#include "config.h"
+
+#include <stdlib.h>
+#include <stdint.h>
+#include <stdbool.h>
+#include <unistd.h>
+#include <pwd.h>
+#include <grp.h>
+#include <ctype.h>
+#ifdef _HAVE_SCHED_RT_
+#include <sched.h>
+#endif
+#include <strings.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+
+#ifdef _WITH_SNMP_
+#include "snmp.h"
+#endif
+
 #include "global_parser.h"
 #include "global_data.h"
-#include "check_data.h"
+#include "main.h"
 #include "parser.h"
-#include "memory.h"
 #include "smtp.h"
 #include "utils.h"
 #include "logger.h"
+#ifdef _WITH_FIREWALL_
+#include "vrrp_firewall.h"
+#endif
+#include "memory.h"
+
+#if HAVE_DECL_CLONE_NEWNET
+#include "namespaces.h"
+#endif
+
+/* Defined in kernel source file include/linux/sched.h but
+ * not currently exposed to userspace */
+#ifndef TASK_COMM_LEN
+#define TASK_COMM_LEN	16
+#endif
+
+#ifdef _WITH_LVS_
+#define LVS_MAX_TIMEOUT		(86400*31)	/* 31 days */
+#endif
 
 /* data handlers */
 /* Global def handlers */
+#ifdef _WITH_LINKBEAT_
 static void
-use_polling_handler(vector_t *strvec)
+use_polling_handler(const vector_t *strvec)
 {
-	global_data->linkbeat_use_polling = 1;
+	if (!strvec)
+		return;
+
+	global_data->linkbeat_use_polling = true;
 }
+#endif
 static void
-routerid_handler(vector_t *strvec)
+save_process_name(char const **dest, const char *src)
 {
-	FREE_PTR(global_data->router_id);
-	global_data->router_id = set_value(strvec);
+	size_t len;
+
+	if (!src) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Process name missing");
+		return;
+	}
+
+	if (*dest)
+		FREE_CONST_PTR(*dest);
+
+	if ((len = strlen(src)) >= TASK_COMM_LEN) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Process name %s more than %d characters, truncating", src, TASK_COMM_LEN - 1);
+		len = TASK_COMM_LEN - 1;
+	}
+
+	*dest = STRNDUP(src, len);
+}
+static void
+process_names_handler(__attribute__((unused)) const vector_t *strvec)
+{
+#ifdef _WITH_VRRP_
+	save_process_name(&global_data->vrrp_process_name, "keepalived_vrrp");
+#endif
+#ifdef _WITH_LVS_
+	save_process_name(&global_data->lvs_process_name, "keepalived_lvs");
+#endif
+#ifdef _WITH_BFD_
+	save_process_name(&global_data->bfd_process_name, "keepalived_bfd");
+#endif
+}
+static void
+process_name_handler(const vector_t *strvec)
+{
+	save_process_name(&global_data->process_name, strvec_slot(strvec, 1));
+}
+#ifdef _WITH_VRRP_
+static void
+vrrp_process_name_handler(const vector_t *strvec)
+{
+	save_process_name(&global_data->vrrp_process_name, strvec_slot(strvec, 1));
+}
+#endif
+#ifdef _WITH_LVS_
+static void
+lvs_process_name_handler(const vector_t *strvec)
+{
+	save_process_name(&global_data->lvs_process_name, strvec_slot(strvec, 1));
+}
+#endif
+#ifdef _WITH_BFD_
+static void
+bfd_process_name_handler(const vector_t *strvec)
+{
+	save_process_name(&global_data->bfd_process_name, strvec_slot(strvec, 1));
 }
+#endif
 static void
-plugin_handler(vector_t *strvec)
+routerid_handler(const vector_t *strvec)
 {
-	global_data->plugin_dir = set_value(strvec);
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "routerid name missing - ignoring");
+		return;
+	}
+
+	FREE_CONST_PTR(global_data->router_id);
+	global_data->router_id = set_value(strvec);
 }
 static void
-emailfrom_handler(vector_t *strvec)
+emailfrom_handler(const vector_t *strvec)
 {
-	FREE_PTR(global_data->email_from);
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "emailfrom missing - ignoring");
+		return;
+	}
+
+	FREE_CONST_PTR(global_data->email_from);
 	global_data->email_from = set_value(strvec);
 }
 static void
-smtpto_handler(vector_t *strvec)
+smtpto_handler(const vector_t *strvec)
+{
+	unsigned timeout;
+
+	/* The min value should be 1, but allow 0 to maintain backward compatibility
+	 * with pre v2.0.7 */
+	if (!read_unsigned_strvec(strvec, 1, &timeout, 0, UINT_MAX / TIMER_HZ, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "smtp_connect_timeout '%s' must be in [0, %u] - ignoring", strvec_slot(strvec, 1), UINT_MAX / TIMER_HZ);
+		return;
+	}
+
+	if (timeout == 0) {
+		report_config_error(CONFIG_GENERAL_ERROR, "smtp_conect_timeout must be greater than 0, setting to 1");
+		timeout = 1;
+	}
+
+	global_data->smtp_connection_to = timeout * TIMER_HZ;
+}
+#ifdef _WITH_VRRP_
+static void
+dynamic_interfaces_handler(const vector_t *strvec)
+{
+	const char *str;
+
+	global_data->dynamic_interfaces = true;
+
+	if (vector_size(strvec) >= 2) {
+		str = strvec_slot(strvec, 1);
+
+		if (!strcmp(str, "allow_if_changes"))
+			global_data->allow_if_changes = true;
+		else
+			report_config_error(CONFIG_GENERAL_ERROR, "Unknown dynamic_interfaces option '%s'",str);
+	}
+}
+static void
+no_email_faults_handler(__attribute__((unused))const vector_t *strvec)
+{
+	global_data->no_email_faults = true;
+}
+#endif
+static void
+smtpserver_handler(const vector_t *strvec)
 {
-	global_data->smtp_connection_to = atoi(vector_slot(strvec, 1)) * TIMER_HZ;
+	bool ret = true;
+	const char *port_str = SMTP_PORT_STR;
+
+	/* Has a port number been specified? */
+	if (vector_size(strvec) >= 3)
+		port_str = strvec_slot(strvec,2);
+
+	/* It can't be an IP address if it contains '-' or '/' */
+	if (!strpbrk(strvec_slot(strvec, 1), "-/"))
+		ret = inet_stosockaddr(strvec_slot(strvec, 1), port_str, &global_data->smtp_server);
+
+	if (ret)
+		domain_stosockaddr(strvec_slot(strvec, 1), port_str, &global_data->smtp_server);
+
+	if (global_data->smtp_server.ss_family == AF_UNSPEC)
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid smtp server %s %s", strvec_slot(strvec, 1), port_str);
 }
 static void
-smtpip_handler(vector_t *strvec)
+smtphelo_handler(const vector_t *strvec)
 {
-	inet_stosockaddr(vector_slot(strvec, 1), SMTP_PORT_STR, &global_data->smtp_server);
+	if (vector_size(strvec) < 2)
+		return;
+
+	global_data->smtp_helo_name = STRDUP(strvec_slot(strvec, 1));
 }
 static void
-email_handler(vector_t *strvec)
+email_handler(const vector_t *strvec)
 {
-	vector_t *email_vec = read_value_block();
-	int i;
+	const vector_t *email_vec = read_value_block(strvec);
+	unsigned int i;
 	char *str;
 
+	if (!email_vec) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Warning - empty notification_email block");
+		return;
+	}
+
 	for (i = 0; i < vector_size(email_vec); i++) {
 		str = vector_slot(email_vec, i);
 		alloc_email(str);
@@ -81,52 +251,1711 @@ email_handler(vector_t *strvec)
 	free_strvec(email_vec);
 }
 static void
-vrrp_mcast_group4_handler(vector_t *strvec)
+smtp_alert_handler(const vector_t *strvec)
+{
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value '%s' for global smtp_alert specified", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+
+	global_data->smtp_alert = res;
+}
+#ifdef _WITH_VRRP_
+static void
+smtp_alert_vrrp_handler(const vector_t *strvec)
+{
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value '%s' for global smtp_alert_vrrp specified", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+
+	global_data->smtp_alert_vrrp = res;
+}
+#endif
+#ifdef _WITH_LVS_
+static void
+smtp_alert_checker_handler(const vector_t *strvec)
+{
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value '%s' for global smtp_alert_checker specified", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+
+	global_data->smtp_alert_checker = res;
+}
+static void
+checker_log_all_failures_handler(const vector_t *strvec)
+{
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value for checker_log_all_failures specified");
+			return;
+		}
+	}
+
+	global_data->checker_log_all_failures = res;
+}
+#endif
+#ifdef _WITH_VRRP_
+static void
+default_interface_handler(const vector_t *strvec)
+{
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "default_interface requires interface name");
+		return;
+	}
+	FREE_CONST_PTR(global_data->default_ifname);
+	global_data->default_ifname = set_value(strvec);
+
+	/* On a reload, the VRRP process needs the default_ifp */
+#ifndef _DEBUG_
+	if (prog_type == PROG_TYPE_VRRP)
+#endif
+	{
+		global_data->default_ifp = if_get_by_ifname(global_data->default_ifname, IF_CREATE_IF_DYNAMIC);
+		if (!global_data->default_ifp)
+			report_config_error(CONFIG_GENERAL_ERROR, "WARNING - default interface %s doesn't exist", global_data->default_ifname);
+	}
+}
+#endif
+#ifdef _WITH_LVS_
+static void
+lvs_timeouts(const vector_t *strvec)
+{
+	unsigned val;
+	size_t i;
+
+	if (vector_size(strvec) < 3) {
+		report_config_error(CONFIG_GENERAL_ERROR, "lvs_timeouts requires at least one option");
+		return;
+	}
+
+	for (i = 1; i < vector_size(strvec); i++) {
+		if (!strcmp(strvec_slot(strvec, i), "tcp")) {
+			if (i == vector_size(strvec) - 1) {
+				report_config_error(CONFIG_GENERAL_ERROR, "No value specified for lvs_timeout tcp - ignoring");
+				continue;
+			}
+			if (!read_unsigned_strvec(strvec, i + 1, &val, 0, LVS_MAX_TIMEOUT, false))
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid lvs_timeout tcp (%s) - ignoring", strvec_slot(strvec, i+1));
+			else
+				global_data->lvs_tcp_timeout = val;
+			i++;	/* skip over value */
+			continue;
+		}
+		if (!strcmp(strvec_slot(strvec, i), "tcpfin")) {
+			if (i == vector_size(strvec) - 1) {
+				report_config_error(CONFIG_GENERAL_ERROR, "No value specified for lvs_timeout tcpfin - ignoring");
+				continue;
+			}
+			if (!read_unsigned_strvec(strvec, i + 1, &val, 0, LVS_MAX_TIMEOUT, false))
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid lvs_timeout tcpfin (%s) - ignoring", strvec_slot(strvec, i+1));
+			else
+				global_data->lvs_tcpfin_timeout = val;
+			i++;	/* skip over value */
+			continue;
+		}
+		if (!strcmp(strvec_slot(strvec, i), "udp")) {
+			if (i == vector_size(strvec) - 1) {
+				report_config_error(CONFIG_GENERAL_ERROR, "No value specified for lvs_timeout udp - ignoring");
+				continue;
+			}
+			if (!read_unsigned_strvec(strvec, i + 1, &val, 0, LVS_MAX_TIMEOUT, false))
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid lvs_timeout udp (%s) - ignoring", strvec_slot(strvec, i+1));
+			else
+				global_data->lvs_udp_timeout = val;
+			i++;	/* skip over value */
+			continue;
+		}
+		report_config_error(CONFIG_GENERAL_ERROR, "Unknown option %s specified for lvs_timeouts", strvec_slot(strvec, i));
+	}
+}
+#if defined _WITH_LVS_ && defined _WITH_VRRP_
+static void
+lvs_syncd_handler(const vector_t *strvec)
+{
+	unsigned val;
+	size_t i;
+
+	if (global_data->lvs_syncd.ifname) {
+		report_config_error(CONFIG_GENERAL_ERROR, "lvs_sync_daemon has already been specified as %s %s - ignoring", global_data->lvs_syncd.ifname, global_data->lvs_syncd.vrrp_name);
+		return;
+	}
+
+	if (vector_size(strvec) < 3) {
+		report_config_error(CONFIG_GENERAL_ERROR, "lvs_sync_daemon requires interface, VRRP instance");
+		return;
+	}
+
+	if (strlen(strvec_slot(strvec, 1)) >= IP_VS_IFNAME_MAXLEN) {
+		report_config_error(CONFIG_GENERAL_ERROR, "lvs_sync_daemon interface name '%s' too long - ignoring", strvec_slot(strvec, 1));
+		return;
+	}
+
+	if (strlen(strvec_slot(strvec, 2)) >= IP_VS_IFNAME_MAXLEN) {
+		report_config_error(CONFIG_GENERAL_ERROR, "lvs_sync_daemon vrrp interface name '%s' too long - ignoring", strvec_slot(strvec, 2));
+		return;
+	}
+
+	global_data->lvs_syncd.ifname = set_value(strvec);
+
+	if (!(global_data->lvs_syncd.vrrp_name = STRDUP(strvec_slot(strvec, 2))))
+		return;
+
+	/* This is maintained for backwards compatibility, prior to adding "id" option */
+	if (vector_size(strvec) >= 4 && isdigit(strvec_slot(strvec, 3)[0])) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Please use keyword \"id\" before lvs_sync_daemon syncid value");
+		if (!read_unsigned_strvec(strvec, 3, &val, 0, 255, false))
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid syncid (%s) - defaulting to vrid", strvec_slot(strvec, 3));
+		else
+			global_data->lvs_syncd.syncid = val;
+		i = 4;
+	}
+	else
+		i = 3;
+
+	for ( ; i < vector_size(strvec); i++) {
+		if (!strcmp(strvec_slot(strvec, i), "id")) {
+			if (i == vector_size(strvec) - 1) {
+				report_config_error(CONFIG_GENERAL_ERROR, "No value specified for lvs_sync_daemon id, defaulting to vrid");
+				continue;
+			}
+			if (!read_unsigned_strvec(strvec, i + 1, &val, 0, 255, false))
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid syncid (%s) - defaulting to vrid", strvec_slot(strvec, i+1));
+			else
+				global_data->lvs_syncd.syncid = val;
+			i++;	/* skip over value */
+			continue;
+		}
+#ifdef _HAVE_IPVS_SYNCD_ATTRIBUTES_
+		if (!strcmp(strvec_slot(strvec, i), "maxlen")) {
+			if (i == vector_size(strvec) - 1) {
+				report_config_error(CONFIG_GENERAL_ERROR, "No value specified for lvs_sync_daemon maxlen - ignoring");
+				continue;
+			}
+			if (!read_unsigned_strvec(strvec, i + 1, &val, 0, 65535 - 20 - 8, false))
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid lvs_sync_daemon maxlen (%s) - ignoring", strvec_slot(strvec, i+1));
+			else
+				global_data->lvs_syncd.sync_maxlen = (uint16_t)val;
+			i++;	/* skip over value */
+			continue;
+		}
+		if (!strcmp(strvec_slot(strvec, i), "port")) {
+			if (i == vector_size(strvec) - 1) {
+				report_config_error(CONFIG_GENERAL_ERROR, "No value specified for lvs_sync_daemon port - ignoring");
+				continue;
+			}
+			if (!read_unsigned_strvec(strvec, i + 1, &val, 0, 65535, false))
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid lvs_sync_daemon port (%s) - ignoring", strvec_slot(strvec, i+1));
+			else
+				global_data->lvs_syncd.mcast_port = (uint16_t)val;
+			i++;	/* skip over value */
+			continue;
+		}
+		if (!strcmp(strvec_slot(strvec, i), "ttl")) {
+			if (i == vector_size(strvec) - 1) {
+				report_config_error(CONFIG_GENERAL_ERROR, "No value specified for lvs_sync_daemon ttl - ignoring");
+				continue;
+			}
+			if (!read_unsigned_strvec(strvec, i + 1, &val, 0, 255, false))
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid lvs_sync_daemon ttl (%s) - ignoring", strvec_slot(strvec, i+1));
+			else
+				global_data->lvs_syncd.mcast_ttl = (uint8_t)val;
+			i++;	/* skip over value */
+			continue;
+		}
+		if (!strcmp(strvec_slot(strvec, i), "group")) {
+			if (i == vector_size(strvec) - 1) {
+				report_config_error(CONFIG_GENERAL_ERROR, "No value specified for lvs_sync_daemon group - ignoring");
+				continue;
+			}
+
+			if (inet_stosockaddr(strvec_slot(strvec, i+1), NULL, &global_data->lvs_syncd.mcast_group))
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid lvs_sync_daemon group (%s) - ignoring", strvec_slot(strvec, i+1));
+
+			if ((global_data->lvs_syncd.mcast_group.ss_family == AF_INET  && !IN_MULTICAST(htonl(((struct sockaddr_in *)&global_data->lvs_syncd.mcast_group)->sin_addr.s_addr))) ||
+			    (global_data->lvs_syncd.mcast_group.ss_family == AF_INET6 && !IN6_IS_ADDR_MULTICAST(&((struct sockaddr_in6 *)&global_data->lvs_syncd.mcast_group)->sin6_addr))) {
+				report_config_error(CONFIG_GENERAL_ERROR, "lvs_sync_daemon group address %s is not multicast - ignoring", strvec_slot(strvec, i+1));
+				global_data->lvs_syncd.mcast_group.ss_family = AF_UNSPEC;
+			}
+
+			i++;	/* skip over value */
+			continue;
+		}
+#endif
+		report_config_error(CONFIG_GENERAL_ERROR, "Unknown option %s specified for lvs_sync_daemon", strvec_slot(strvec, i));
+	}
+}
+#endif
+static void
+lvs_flush_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->lvs_flush = true;
+}
+
+static void
+lvs_flush_onstop_handler(const vector_t *strvec)
+{
+	if (vector_size(strvec) == 1)
+		global_data->lvs_flush_onstop = LVS_FLUSH_FULL;
+	else if (!strcmp(strvec_slot(strvec, 1), "VS"))
+		global_data->lvs_flush_onstop = LVS_FLUSH_VS;
+	else
+		report_config_error(CONFIG_GENERAL_ERROR, "Unknown lvs_flush_onstop type %s", strvec_slot(strvec, 1));
+}
+#endif
+#ifdef _HAVE_SCHED_RT_
+static int
+get_realtime_priority(const vector_t *strvec, const char *process)
+{
+	int min_priority;
+	int max_priority;
+	int priority;
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No %s process real-time priority specified", process);
+		return -1;
+	}
+
+	min_priority = sched_get_priority_min(SCHED_RR);
+	max_priority = sched_get_priority_max(SCHED_RR);
+
+	if (!read_int_strvec(strvec, 1, &priority, INT_MIN, INT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "%s process real-time priority '%s' invalid", process, strvec_slot(strvec, 1));
+		return -1;
+	}
+
+	if (priority < min_priority) {
+		report_config_error(CONFIG_GENERAL_ERROR, "%s process real-time priority %d less than minimum %d - setting to minimum", process, priority, min_priority);
+		priority = min_priority;
+	}
+	else if (priority > max_priority) {
+		report_config_error(CONFIG_GENERAL_ERROR, "%s process real-time priority %d greater than maximum %d - setting to maximum", process, priority, max_priority);
+		priority = max_priority;
+	}
+
+	return priority;
+}
+static int
+get_cpu_affinity(const vector_t *strvec, cpu_set_t *set, const char *process)
+{
+	int cpu_id, num_cpus;
+	unsigned i;
+
+	if (!strvec)
+		return -1;
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No %s cpu_id set specified", process);
+		return -1;
+	}
+
+	CPU_ZERO(set);
+	/* TODO: instead of sysconf, maybe we could fetch current cpu_set via
+	 * sched_getaffinity and use CPU_COUNT */
+	num_cpus = sysconf(_SC_NPROCESSORS_ONLN);
+	for (i = 1; i < vector_size(strvec); i++) {
+		if (!read_int_strvec(strvec, i, &cpu_id, 0, num_cpus-1, true)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid cpu_id:%d specified for %s process"
+								, cpu_id, process);
+			/* Reset cpu_set at first error */
+			CPU_ZERO(set);
+			return -1;
+		}
+
+		CPU_SET(cpu_id, set);
+	}
+
+	return 0;
+}
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+static rlim_t
+get_rt_rlimit(const vector_t *strvec, const char *process)
+{
+	unsigned limit;
+	rlim_t rlim;
+
+	if (!read_unsigned_strvec(strvec, 1, &limit, 1, UINT32_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid %s real-time limit - %s", process, strvec_slot(strvec, 1));
+		return 0;
+	}
+
+	rlim = limit;
+	return rlim;
+}
+#endif
+#endif
+static int8_t
+get_priority(const vector_t *strvec, const char *process)
+{
+	int priority;
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No %s process priority specified", process);
+		return 0;
+	}
+
+	if (!read_int_strvec(strvec, 1, &priority, -20, 19, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid %s process priority specified", process);
+		return 0;
+	}
+
+	return (int8_t)priority;
+}
+
+#ifdef _WITH_VRRP_
+static void
+vrrp_mcast_group4_handler(const vector_t *strvec)
 {
-	struct sockaddr_storage *mcast = &global_data->vrrp_mcast_group4;
+	struct sockaddr_in *mcast = &global_data->vrrp_mcast_group4;
 	int ret;
 
-	ret = inet_stosockaddr(vector_slot(strvec, 1), 0, mcast);
+	ret = inet_stosockaddr(strvec_slot(strvec, 1), 0, (struct sockaddr_storage *)mcast);
 	if (ret < 0) {
-		log_message(LOG_ERR, "Configuration error: Cant parse vrrp_mcast_group4 [%s]. Skipping"
-				   , vector_slot(strvec, 1));
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: Cant parse vrrp_mcast_group4 [%s]. Skipping"
+				   , strvec_slot(strvec, 1));
 	}
 }
 static void
-vrrp_mcast_group6_handler(vector_t *strvec)
+vrrp_mcast_group6_handler(const vector_t *strvec)
 {
-	struct sockaddr_storage *mcast = &global_data->vrrp_mcast_group6;
+	struct sockaddr_in6 *mcast = &global_data->vrrp_mcast_group6;
 	int ret;
 
-	ret = inet_stosockaddr(vector_slot(strvec, 1), 0, mcast);
+	ret = inet_stosockaddr(strvec_slot(strvec, 1), 0, (struct sockaddr_storage *)mcast);
 	if (ret < 0) {
-		log_message(LOG_ERR, "Configuration error: Cant parse vrrp_mcast_group6 [%s]. Skipping"
-				   , vector_slot(strvec, 1));
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: Cant parse vrrp_mcast_group6 [%s]. Skipping"
+				   , strvec_slot(strvec, 1));
 	}
 }
-#ifdef _WITH_SNMP_
 static void
-trap_handler(vector_t *strvec)
+vrrp_garp_delay_handler(const vector_t *strvec)
 {
-	global_data->enable_traps = 1;
+	unsigned timeout;
+
+        if (!read_unsigned_strvec(strvec, 1, &timeout, 0, UINT_MAX / TIMER_HZ, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp_garp_master_delay '%s' invalid - ignoring", strvec_slot(strvec, 1));
+                return;
+        }
+
+	global_data->vrrp_garp_delay = timeout * TIMER_HZ;
 }
-#endif
+static void
+vrrp_garp_rep_handler(const vector_t *strvec)
+{
+	unsigned repeats;
 
-void
-global_init_keywords(void)
+	/* The min value should be 1, but allow 0 to maintain backward compatibility
+	 * with pre v2.0.7 */
+	if (!read_unsigned_strvec(strvec, 1, &repeats, 0, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp_garp_master_repeat '%s' invalid - ignoring", strvec_slot(strvec, 1));
+		return;
+	}
+
+	if (repeats == 0) {
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp_garp_master_repeat must be greater than 0, setting to 1");
+		repeats = 1;
+	}
+
+	global_data->vrrp_garp_rep = repeats;
+
+}
+static void
+vrrp_garp_refresh_handler(const vector_t *strvec)
 {
-	/* global definitions mapping */
-	install_keyword_root("linkbeat_use_polling", use_polling_handler);
-	install_keyword_root("global_defs", NULL);
-	install_keyword("router_id", &routerid_handler);
-	install_keyword("plugin_dir", &plugin_handler);
-	install_keyword("notification_email_from", &emailfrom_handler);
-	install_keyword("smtp_server", &smtpip_handler);
-	install_keyword("smtp_connect_timeout", &smtpto_handler);
-	install_keyword("notification_email", &email_handler);
-	install_keyword("vrrp_mcast_group4", &vrrp_mcast_group4_handler);
-	install_keyword("vrrp_mcast_group6", &vrrp_mcast_group6_handler);
-#ifdef _WITH_SNMP_
-	install_keyword("enable_traps", &trap_handler);
+        unsigned refresh;
+
+        if (!read_unsigned_strvec(strvec, 1, &refresh, 0, UINT_MAX, true)) {
+                report_config_error(CONFIG_GENERAL_ERROR, "Invalid vrrp_garp_master_refresh '%s' - ignoring", strvec_slot(strvec, 1));
+                global_data->vrrp_garp_refresh.tv_sec = 0;
+        }
+        else
+		global_data->vrrp_garp_refresh.tv_sec = refresh;
+
+        global_data->vrrp_garp_refresh.tv_usec = 0;
+}
+static void
+vrrp_garp_refresh_rep_handler(const vector_t *strvec)
+{
+        unsigned repeats;
+
+        /* The min value should be 1, but allow 0 to maintain backward compatibility
+         * with pre v2.0.7 */
+        if (!read_unsigned_strvec(strvec, 1, &repeats, 0, UINT_MAX, true)) {
+                report_config_error(CONFIG_GENERAL_ERROR, "vrrp_garp_master_refresh_repeat '%s' invalid - ignoring", strvec_slot(strvec, 1));
+                return;
+        }
+
+        if (repeats == 0) {
+                report_config_error(CONFIG_GENERAL_ERROR, "vrrp_garp_master_refresh_repeat must be greater than 0, setting to 1");
+                repeats = 1;
+        }
+
+	global_data->vrrp_garp_refresh_rep = repeats;
+
+}
+static void
+vrrp_garp_lower_prio_delay_handler(const vector_t *strvec)
+{
+        unsigned delay;
+
+        if (!read_unsigned_strvec(strvec, 1, &delay, 0, UINT_MAX / TIMER_HZ, true)) {
+                report_config_error(CONFIG_GENERAL_ERROR, "vrrp_garp_lower_prio_delay '%s' invalid - ignoring", strvec_slot(strvec, 1));
+                return;
+        }
+
+	global_data->vrrp_garp_lower_prio_delay = delay * TIMER_HZ;
+}
+static void
+vrrp_garp_lower_prio_rep_handler(const vector_t *strvec)
+{
+	unsigned garp_lower_prio_rep;
+
+        if (!read_unsigned_strvec(strvec, 1, &garp_lower_prio_rep, 0, INT_MAX, true)) {
+                report_config_error(CONFIG_GENERAL_ERROR, "Invalid vrrp_garp_lower_prio_repeat '%s'", strvec_slot(strvec, 1));
+                return;
+        }
+
+	global_data->vrrp_garp_lower_prio_rep = garp_lower_prio_rep;
+}
+static void
+vrrp_garp_interval_handler(const vector_t *strvec)
+{
+	double interval;
+
+	if (!read_double_strvec(strvec, 1, &interval, 1.0F / TIMER_HZ, (unsigned)(UINT_MAX / TIMER_HZ), true))
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp_garp_interval '%s' is invalid", strvec_slot(strvec, 1));
+	else
+		global_data->vrrp_garp_interval = (unsigned)(interval * TIMER_HZ);
+
+	if (global_data->vrrp_garp_interval >= 1 * TIMER_HZ)
+		log_message(LOG_INFO, "The vrrp_garp_interval is very large - %s seconds", strvec_slot(strvec, 1));
+}
+static void
+vrrp_gna_interval_handler(const vector_t *strvec)
+{
+	double interval;
+
+	if (!read_double_strvec(strvec, 1, &interval, 1.0F / TIMER_HZ, (unsigned)(UINT_MAX / TIMER_HZ), true))
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp_gna_interval '%s' is invalid", strvec_slot(strvec, 1));
+	else
+		global_data->vrrp_gna_interval = (unsigned)(interval * TIMER_HZ);
+
+	if (global_data->vrrp_gna_interval >= 1 * TIMER_HZ)
+		log_message(LOG_INFO, "The vrrp_gna_interval is very large - %s seconds", strvec_slot(strvec, 1));
+}
+static void
+vrrp_min_garp_handler(const vector_t *strvec)
+{
+	int res = false;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value for vrrp_min_garp specified");
+			return;
+		}
+
+		if (!res)
+			return;
+	}
+
+	/* Set to only send 1 gratuitous ARP/NA message with no repeat, but don't
+	 * overwrite any parameters already set. */
+	if (global_data->vrrp_garp_rep == VRRP_GARP_REP)
+		global_data->vrrp_garp_rep = 1;
+	if (global_data->vrrp_garp_refresh.tv_sec == VRRP_GARP_REFRESH)
+		global_data->vrrp_garp_refresh.tv_sec = 0;
+	if (global_data->vrrp_garp_refresh_rep == VRRP_GARP_REFRESH_REP)
+		global_data->vrrp_garp_refresh_rep = 0;
+	if (global_data->vrrp_garp_delay == VRRP_GARP_DELAY)
+		global_data->vrrp_garp_delay = 0;
+}
+static void
+vrrp_lower_prio_no_advert_handler(const vector_t *strvec)
+{
+	int res;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0)
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value for vrrp_lower_prio_no_advert specified");
+		else
+			global_data->vrrp_lower_prio_no_advert = res;
+	}
+	else
+		global_data->vrrp_lower_prio_no_advert = true;
+}
+static void
+vrrp_higher_prio_send_advert_handler(const vector_t *strvec)
+{
+	int res;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0)
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value for vrrp_higher_prio_send_advert specified");
+		else
+			global_data->vrrp_higher_prio_send_advert = res;
+	}
+	else
+		global_data->vrrp_higher_prio_send_advert = true;
+}
+#ifdef _WITH_IPTABLES_
+static void
+vrrp_iptables_handler(const vector_t *strvec)
+{
+	if (vector_size(strvec) >= 2) {
+		if (strlen(strvec_slot(strvec,1)) >= sizeof(global_data->vrrp_iptables_inchain)-1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "VRRP Error : iptables in chain name too long - ignored");
+			return;
+		}
+		strcpy(global_data->vrrp_iptables_inchain, strvec_slot(strvec,1));
+		if (vector_size(strvec) >= 3) {
+			if (strlen(strvec_slot(strvec,2)) >= sizeof(global_data->vrrp_iptables_outchain)-1) {
+				report_config_error(CONFIG_GENERAL_ERROR, "VRRP Error : iptables out chain name too long - ignored");
+				return;
+			}
+			strcpy(global_data->vrrp_iptables_outchain, strvec_slot(strvec,2));
+		}
+	} else {
+		strcpy(global_data->vrrp_iptables_inchain, DEFAULT_IPTABLES_CHAIN_IN);
+		strcpy(global_data->vrrp_iptables_outchain, DEFAULT_IPTABLES_CHAIN_OUT);
+	}
+}
+#ifdef _HAVE_LIBIPSET_
+static void
+vrrp_ipsets_handler(const vector_t *strvec)
+{
+	size_t len;
+
+	if (vector_size(strvec) >= 2) {
+		if (strlen(strvec_slot(strvec,1)) >= sizeof(global_data->vrrp_ipset_address)-1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "VRRP Error : ipset address name too long - ignored");
+			return;
+		}
+		strcpy(global_data->vrrp_ipset_address, strvec_slot(strvec,1));
+	}
+	else {
+		global_data->using_ipsets = false;
+		return;
+	}
+
+	if (vector_size(strvec) >= 3) {
+		if (strlen(strvec_slot(strvec,2)) >= sizeof(global_data->vrrp_ipset_address6)-1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "VRRP Error : ipset IPv6 address name too long - ignored");
+			return;
+		}
+		strcpy(global_data->vrrp_ipset_address6, strvec_slot(strvec,2));
+	}
+	else {
+		/* No second set specified, copy first name and add "6" */
+		strcpy(global_data->vrrp_ipset_address6, global_data->vrrp_ipset_address);
+		global_data->vrrp_ipset_address6[sizeof(global_data->vrrp_ipset_address6) - 2] = '\0';
+		strcat(global_data->vrrp_ipset_address6, "6");
+	}
+	if (vector_size(strvec) >= 4) {
+		if (strlen(strvec_slot(strvec,3)) >= sizeof(global_data->vrrp_ipset_address_iface6)-1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "VRRP Error : ipset IPv6 address_iface name too long - ignored");
+			return;
+		}
+		strcpy(global_data->vrrp_ipset_address_iface6, strvec_slot(strvec,3));
+	}
+	else {
+		/* No third set specified, copy second name and add "_if6" */
+		strcpy(global_data->vrrp_ipset_address_iface6, global_data->vrrp_ipset_address6);
+		len = strlen(global_data->vrrp_ipset_address_iface6);
+		if (global_data->vrrp_ipset_address_iface6[len-1] == '6')
+			global_data->vrrp_ipset_address_iface6[--len] = '\0';
+		global_data->vrrp_ipset_address_iface6[sizeof(global_data->vrrp_ipset_address_iface6) - 5] = '\0';
+		strcat(global_data->vrrp_ipset_address_iface6, "_if6");
+	}
+	if (vector_size(strvec) >= 5) {
+		if (strlen(strvec_slot(strvec,4)) >= sizeof(global_data->vrrp_ipset_igmp)-1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "VRRP Error : ipset IGMP name too long - ignored");
+			return;
+		}
+		strcpy(global_data->vrrp_ipset_igmp, strvec_slot(strvec,4));
+	}
+	else {
+		/* No second set specified, copy first name and add "_igmp" */
+		strcpy(global_data->vrrp_ipset_igmp, global_data->vrrp_ipset_address);
+		global_data->vrrp_ipset_address6[sizeof(global_data->vrrp_ipset_igmp) - 6] = '\0';
+		strcat(global_data->vrrp_ipset_igmp, "_igmp");
+	}
+	if (vector_size(strvec) >= 6) {
+		if (strlen(strvec_slot(strvec,5)) >= sizeof(global_data->vrrp_ipset_mld)-1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "VRRP Error : ipset MLD name too long - ignored");
+			return;
+		}
+		strcpy(global_data->vrrp_ipset_mld, strvec_slot(strvec,5));
+	}
+	else {
+		/* No second set specified, copy first name and add "_mld" */
+		strcpy(global_data->vrrp_ipset_mld, global_data->vrrp_ipset_address);
+		global_data->vrrp_ipset_mld[sizeof(global_data->vrrp_ipset_mld) - 5] = '\0';
+		strcat(global_data->vrrp_ipset_mld, "_mld");
+	}
+}
+#endif
+#endif
+#ifdef _WITH_NFTABLES_
+static void
+vrrp_nftables_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	const char *name;
+
+	if (global_data->vrrp_nf_table_name) {
+		report_config_error(CONFIG_GENERAL_ERROR, "nftables already specified - ignoring");
+		return;
+	}
+
+	if (vector_size(strvec) >= 2) {
+		if (strlen(strvec_slot(strvec, 1)) >= NFT_TABLE_MAXNAMELEN) {
+			report_config_error(CONFIG_GENERAL_ERROR, "nftables table name too long - ignoring");
+			return;
+		}
+		name = strvec_slot(strvec, 1);
+	}
+	else {
+		/* Table named defaults to "keepalived" */
+		name = DEFAULT_NFTABLES_TABLE;
+	}
+
+	global_data->vrrp_nf_table_name = STRDUP(name);
+	global_data->vrrp_nf_chain_priority = -1;
+}
+static void
+vrrp_nftables_priority_handler(const vector_t *strvec)
+{
+	int priority;
+
+	if (read_int_strvec(strvec, 1, &priority, INT32_MIN, INT32_MAX, false))
+		global_data->vrrp_nf_chain_priority = priority;
+	else
+		report_config_error(CONFIG_INVALID_NUMBER, "invalid nftables chain priority '%s'", strvec_slot(strvec, 1));
+}
+static void
+vrrp_nftables_counters_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->vrrp_nf_counters = true;
+}
+static void
+vrrp_nftables_ifindex_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->vrrp_nf_ifindex = true;
+}
+#endif
+static void
+vrrp_version_handler(const vector_t *strvec)
+{
+	int version;
+
+	if (!read_int_strvec(strvec, 1, &version, 2, 3, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "VRRP Error: Version must be either 2 or 3");
+		return;
+	}
+
+	global_data->vrrp_version = version;
+}
+static void
+vrrp_check_unicast_src_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->vrrp_check_unicast_src = 1;
+}
+static void
+vrrp_check_adv_addr_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->vrrp_skip_check_adv_addr = 1;
+}
+static void
+vrrp_strict_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->vrrp_strict = 1;
+}
+static void
+vrrp_prio_handler(const vector_t *strvec)
+{
+	global_data->vrrp_process_priority = get_priority(strvec, "vrrp");
+}
+static void
+vrrp_no_swap_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->vrrp_no_swap = true;
+}
+#ifdef _HAVE_SCHED_RT_
+static void
+vrrp_rt_priority_handler(const vector_t *strvec)
+{
+	int priority = get_realtime_priority(strvec, "vrrp");
+
+	if (priority >= 0)
+		global_data->vrrp_realtime_priority = priority;
+}
+static void
+vrrp_cpu_affinity_handler(const vector_t *strvec)
+{
+	get_cpu_affinity(strvec, &global_data->vrrp_cpu_mask, "vrrp");
+}
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+static void
+vrrp_rt_rlimit_handler(const vector_t *strvec)
+{
+	global_data->vrrp_rlimit_rt = get_rt_rlimit(strvec, "vrrp");
+}
+#endif
+#endif
+#endif
+static void
+notify_fifo(const vector_t *strvec, const char *type, notify_fifo_t *fifo)
+{
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No %snotify_fifo name specified", type);
+		return;
+	}
+
+	if (fifo->name) {
+		report_config_error(CONFIG_GENERAL_ERROR, "%snotify_fifo already specified - ignoring %s", type, strvec_slot(strvec,1));
+		return;
+	}
+
+	if (vector_size(strvec) > 2) {
+		if (set_script_uid_gid(strvec, 2, &fifo->uid, &fifo->gid)) {
+			log_message(LOG_INFO, "Invalid user/group for %s fifo %s - ignoring", type, fifo->name);
+			return;
+		}
+	}
+	else {
+		if (set_default_script_user(NULL, NULL)) {
+			log_message(LOG_INFO, "Failed to set default user for %s fifo %s - ignoring", type, fifo->name);
+			return;
+		}
+
+		fifo->uid = default_script_uid;
+		fifo->gid = default_script_gid;
+	}
+
+	fifo->name = STRDUP(strvec_slot(strvec, 1));
+}
+static void
+notify_fifo_script(const vector_t *strvec, const char *type, notify_fifo_t *fifo)
+{
+	char *id_str;
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No %snotify_fifo_script specified", type);
+		return;
+	}
+
+	if (fifo->script) {
+		report_config_error(CONFIG_GENERAL_ERROR, "%snotify_fifo_script already specified - ignoring %s", type, strvec_slot(strvec,1));
+		return;
+	}
+
+	id_str = MALLOC(strlen(type) + strlen("notify_fifo") + 1);
+	strcpy(id_str, type);
+	strcat(id_str, "notify_fifo");
+	fifo->script = notify_script_init(1, id_str);
+
+	FREE(id_str);
+}
+static void
+global_notify_fifo(const vector_t *strvec)
+{
+	notify_fifo(strvec, "", &global_data->notify_fifo);
+}
+static void
+global_notify_fifo_script(const vector_t *strvec)
+{
+	notify_fifo_script(strvec, "", &global_data->notify_fifo);
+}
+#ifdef _WITH_VRRP_
+static void
+vrrp_notify_fifo(const vector_t *strvec)
+{
+	notify_fifo(strvec, "vrrp_", &global_data->vrrp_notify_fifo);
+}
+static void
+vrrp_notify_fifo_script(const vector_t *strvec)
+{
+	notify_fifo_script(strvec, "vrrp_", &global_data->vrrp_notify_fifo);
+}
+static void
+vrrp_notify_priority_changes(const vector_t *strvec)
+{
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value '%s' for global vrrp_notify_priority_changes specified", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+
+	global_data->vrrp_notify_priority_changes = res;
+}
+#endif
+#ifdef _WITH_LVS_
+static void
+lvs_notify_fifo(const vector_t *strvec)
+{
+	notify_fifo(strvec, "lvs_", &global_data->lvs_notify_fifo);
+}
+static void
+lvs_notify_fifo_script(const vector_t *strvec)
+{
+	notify_fifo_script(strvec, "lvs_", &global_data->lvs_notify_fifo);
+}
+#endif
+#ifdef _WITH_LVS_
+static void
+checker_prio_handler(const vector_t *strvec)
+{
+	global_data->checker_process_priority = get_priority(strvec, "checker");
+}
+static void
+checker_no_swap_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->checker_no_swap = true;
+}
+#ifdef _HAVE_SCHED_RT_
+static void
+checker_rt_priority_handler(const vector_t *strvec)
+{
+	int priority = get_realtime_priority(strvec, "checker");
+
+	if (priority >= 0)
+		global_data->checker_realtime_priority = priority;
+}
+static void
+checker_cpu_affinity_handler(const vector_t *strvec)
+{
+	get_cpu_affinity(strvec, &global_data->checker_cpu_mask, "checker");
+}
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+static void
+checker_rt_rlimit_handler(const vector_t *strvec)
+{
+	global_data->checker_rlimit_rt = get_rt_rlimit(strvec, "checker");
+}
+#endif
+#endif
+#endif
+#ifdef _WITH_BFD_
+static void
+bfd_prio_handler(const vector_t *strvec)
+{
+	global_data->bfd_process_priority = get_priority(strvec, "bfd");
+}
+static void
+bfd_no_swap_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->bfd_no_swap = true;
+}
+#ifdef _HAVE_SCHED_RT_
+static void
+bfd_rt_priority_handler(const vector_t *strvec)
+{
+	int priority = get_realtime_priority(strvec, "bfd");
+
+	if (priority >= 0)
+		global_data->bfd_realtime_priority = priority;
+}
+static void
+bfd_cpu_affinity_handler(const vector_t *strvec)
+{
+	get_cpu_affinity(strvec, &global_data->bfd_cpu_mask, "bfd");
+}
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+static void
+bfd_rt_rlimit_handler(const vector_t *strvec)
+{
+	global_data->bfd_rlimit_rt = get_rt_rlimit(strvec, "bfd");
+}
+#endif
+#endif
+#endif
+#ifdef _WITH_SNMP_
+static void
+snmp_socket_handler(const vector_t *strvec)
+{
+	if (vector_size(strvec) > 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Too many parameters specified for snmp_socket - ignoring");
+		return;
+	}
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "SNMP error : snmp socket name missing");
+		return;
+	}
+
+	if (strlen(strvec_slot(strvec,1)) > PATH_MAX - 1) {
+		report_config_error(CONFIG_GENERAL_ERROR, "SNMP error : snmp socket name too long - ignored");
+		return;
+	}
+
+	if (global_data->snmp_socket) {
+		report_config_error(CONFIG_GENERAL_ERROR, "SNMP socket already set to %s - ignoring", global_data->snmp_socket);
+		return;
+	}
+
+	global_data->snmp_socket = STRDUP(strvec_slot(strvec, 1));
+}
+static void
+trap_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->enable_traps = true;
+}
+#ifdef _WITH_SNMP_VRRP_
+static void
+snmp_vrrp_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->enable_snmp_vrrp = true;
+}
+#endif
+#ifdef _WITH_SNMP_RFC_
+static void
+snmp_rfc_handler(__attribute__((unused)) const vector_t *strvec)
+{
+#ifdef _WITH_SNMP_RFCV2_
+	global_data->enable_snmp_rfcv2 = true;
+#endif
+#ifdef _WITH_SNMP_RFCV3_
+	global_data->enable_snmp_rfcv3 = true;
+#endif
+}
+#endif
+#ifdef _WITH_SNMP_RFCV2_
+static void
+snmp_rfcv2_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->enable_snmp_rfcv2 = true;
+}
+#endif
+#ifdef _WITH_SNMP_RFCV3_
+static void
+snmp_rfcv3_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->enable_snmp_rfcv3 = true;
+}
+#endif
+#ifdef _WITH_SNMP_CHECKER_
+static void
+snmp_checker_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->enable_snmp_checker = true;
+}
+#endif
+#endif
+#if HAVE_DECL_CLONE_NEWNET
+static void
+net_namespace_handler(const vector_t *strvec)
+{
+	if (!strvec)
+		return;
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "net_namespace name missing - ignoring");
+		return;
+	}
+
+	if (!global_data->network_namespace) {
+		global_data->network_namespace = set_value(strvec);
+		use_pid_dir = true;
+	}
+	else
+		report_config_error(CONFIG_GENERAL_ERROR, "Duplicate net_namespace definition %s - ignoring", strvec_slot(strvec, 1));
+}
+
+static void
+namespace_ipsets_handler(const vector_t *strvec)
+{
+	if (!strvec)
+		return;
+
+	global_data->namespace_with_ipsets = true;
+}
+#endif
+
+#ifdef _WITH_DBUS_
+static void
+enable_dbus_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->enable_dbus = true;
+}
+
+static void
+dbus_service_name_handler(const vector_t *strvec)
+{
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "dbus_service_name missing - ignoring");
+		return;
+	}
+
+	FREE_CONST_PTR(global_data->dbus_service_name);
+	global_data->dbus_service_name = set_value(strvec);
+}
+#endif
+
+static void
+instance_handler(const vector_t *strvec)
+{
+	if (!strvec)
+		return;
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "instance name missing - ignoring");
+		return;
+	}
+
+	if (!reload) {
+		if (!global_data->instance_name) {
+			global_data->instance_name = set_value(strvec);
+			use_pid_dir = true;
+		}
+		else
+			report_config_error(CONFIG_GENERAL_ERROR, "Duplicate instance definition %s - ignoring", strvec_slot(strvec, 1));
+	}
+}
+
+static void
+use_pid_dir_handler(const vector_t *strvec)
+{
+	if (!strvec)
+		return;
+
+	use_pid_dir = true;
+}
+
+static void
+script_user_handler(const vector_t *strvec)
+{
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No script username specified");
+		return;
+	}
+
+	if (set_default_script_user(strvec_slot(strvec, 1), vector_size(strvec) > 2 ? strvec_slot(strvec, 2) : NULL))
+		report_config_error(CONFIG_GENERAL_ERROR, "Error setting global script uid/gid");
+}
+
+static void
+script_security_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	script_security = true;
+}
+
+static void
+child_wait_handler(const vector_t *strvec)
+{
+	unsigned secs;
+
+	if (!strvec)
+		return;
+
+	if (!read_unsigned_strvec(strvec, 1, &secs, 0, UINT_MAX, false)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid child_wait_time %s", strvec_slot(strvec, 1));
+		return;
+	}
+
+	child_wait_time = secs;
+}
+
+#ifdef _WITH_VRRP_
+static void
+vrrp_rx_bufs_policy_handler(const vector_t *strvec)
+{
+	unsigned rx_buf_size;
+	unsigned i;
+
+	if (!strvec)
+		return;
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp_rx_bufs_policy missing");
+		return;
+	}
+
+	for (i = 1; i < vector_size(strvec); i++) {
+		if (!strcasecmp(strvec_slot(strvec, i), "MTU"))
+			global_data->vrrp_rx_bufs_policy |= RX_BUFS_POLICY_MTU;
+		else if (!strcasecmp(strvec_slot(strvec, i), "ADVERT"))
+			global_data->vrrp_rx_bufs_policy |= RX_BUFS_POLICY_ADVERT;
+		else {
+			if (!read_unsigned_strvec(strvec, 1, &rx_buf_size, 0, UINT_MAX, false))
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid vrrp_rx_bufs_policy %s", strvec_slot(strvec, i));
+			else {
+				global_data->vrrp_rx_bufs_size = rx_buf_size;
+				global_data->vrrp_rx_bufs_policy |= RX_BUFS_SIZE;
+			}
+		}
+	}
+
+	if ((global_data->vrrp_rx_bufs_policy & RX_BUFS_SIZE) &&
+	    (global_data->vrrp_rx_bufs_policy & (RX_BUFS_POLICY_MTU | RX_BUFS_POLICY_ADVERT))) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Cannot set vrrp_rx_bufs_policy size and policy, ignoring policy");
+		global_data->vrrp_rx_bufs_policy &= ~(RX_BUFS_POLICY_MTU | RX_BUFS_POLICY_ADVERT);
+	}
+	else if ((global_data->vrrp_rx_bufs_policy & RX_BUFS_POLICY_MTU) &&
+		 (global_data->vrrp_rx_bufs_policy & RX_BUFS_POLICY_ADVERT)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Cannot set both vrrp_rx_bufs_policy MTU and ADVERT, ignoring ADVERT");
+		global_data->vrrp_rx_bufs_policy &= ~RX_BUFS_POLICY_ADVERT;
+	}
+}
+
+static void
+vrrp_rx_bufs_multiplier_handler(const vector_t *strvec)
+{
+	unsigned rx_buf_mult;
+
+	if (!strvec)
+		return;
+
+	if (vector_size(strvec) != 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid vrrp_rx_bufs_multiplier");
+		return;
+	}
+
+	if (!read_unsigned_strvec(strvec, 1, &rx_buf_mult, 1, UINT_MAX, false))
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid vrrp_rx_bufs_multiplier %s", strvec_slot(strvec, 1));
+	else
+		global_data->vrrp_rx_bufs_multiples = rx_buf_mult;
+}
+#endif
+
+#if defined _WITH_VRRP_ || defined _WITH_LVS_
+static unsigned
+get_netlink_rcv_bufs_size(const vector_t *strvec, const char *type)
+{
+	unsigned val;
+
+	if (!strvec)
+		return 0;
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "%s_rcv_bufs size missing", type);
+		return 0;
+	}
+
+	if (!read_unsigned_strvec(strvec, 1, &val, 0, UINT_MAX, false)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "%s_rcv_bufs size (%s) invalid", type, strvec_slot(strvec, 1));
+		return 0;
+	}
+
+	return val;
+}
+#endif
+
+#ifdef _WITH_VRRP_
+static void
+vrrp_netlink_monitor_rcv_bufs_handler(const vector_t *strvec)
+{
+	unsigned val;
+
+	if (!strvec)
+		return;
+
+	val = get_netlink_rcv_bufs_size(strvec, "vrrp_netlink_monitor");
+
+	if (val)
+		global_data->vrrp_netlink_monitor_rcv_bufs = val;
+}
+
+static void
+vrrp_netlink_monitor_rcv_bufs_force_handler(const vector_t *strvec)
+{
+	int res = true;
+
+	if (!strvec)
+		return;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value '%s' for global vrrp_netlink_monitor_rcv_bufs_force specified", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+
+	global_data->vrrp_netlink_monitor_rcv_bufs_force = res;
+}
+
+static void
+vrrp_netlink_cmd_rcv_bufs_handler(const vector_t *strvec)
+{
+	unsigned val;
+
+	if (!strvec)
+		return;
+
+	val = get_netlink_rcv_bufs_size(strvec, "vrrp_netlink_cmd");
+
+	if (val)
+		global_data->vrrp_netlink_cmd_rcv_bufs = val;
+}
+
+static void
+vrrp_netlink_cmd_rcv_bufs_force_handler(const vector_t *strvec)
+{
+	int res = true;
+
+	if (!strvec)
+		return;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value '%s' for global vrrp_netlink_cmd_rcv_bufs_force specified", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+
+	global_data->vrrp_netlink_cmd_rcv_bufs_force = res;
+}
+
+#ifdef _WITH_CN_PROC_
+static void
+process_monitor_rcv_bufs_handler(const vector_t *strvec)
+{
+	unsigned val;
+
+	if (!strvec)
+		return;
+
+	val = get_netlink_rcv_bufs_size(strvec, "process_monitor");
+
+	if (val)
+		global_data->process_monitor_rcv_bufs = val;
+}
+
+static void
+process_monitor_rcv_bufs_force_handler(const vector_t *strvec)
+{
+	int res = true;
+
+	if (!strvec)
+		return;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value '%s' for global process_monitor_rcv_bufs_force specified", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+
+	global_data->process_monitor_rcv_bufs_force = res;
+}
+#endif
+#endif
+
+#ifdef _WITH_LVS_
+static void
+lvs_netlink_monitor_rcv_bufs_handler(const vector_t *strvec)
+{
+	unsigned val;
+
+	if (!strvec)
+		return;
+
+	val = get_netlink_rcv_bufs_size(strvec, "lvs_netlink_monitor");
+
+	if (val)
+		global_data->lvs_netlink_monitor_rcv_bufs = val;
+}
+
+static void
+lvs_netlink_monitor_rcv_bufs_force_handler(const vector_t *strvec)
+{
+	int res = true;
+
+	if (!strvec)
+		return;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value '%s' for global lvs_netlink_monitor_rcv_bufs_force specified", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+
+	global_data->lvs_netlink_monitor_rcv_bufs_force = res;
+}
+
+static void
+lvs_netlink_cmd_rcv_bufs_handler(const vector_t *strvec)
+{
+	unsigned val;
+
+	if (!strvec)
+		return;
+
+	val = get_netlink_rcv_bufs_size(strvec, "lvs_netlink_cmd");
+
+	if (val)
+		global_data->lvs_netlink_cmd_rcv_bufs = val;
+}
+
+static void
+lvs_netlink_cmd_rcv_bufs_force_handler(const vector_t *strvec)
+{
+	int res = true;
+
+	if (!strvec)
+		return;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value '%s' for global lvs_netlink_cmd_rcv_bufs_force specified", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+
+	global_data->lvs_netlink_cmd_rcv_bufs_force = res;
+}
+
+static void
+rs_init_notifies_handler(const vector_t *strvec)
+{
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value '%s' for global rs_init_notifies specified", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+
+	global_data->rs_init_notifies = res;
+}
+
+static void
+no_checker_emails_handler(const vector_t *strvec)
+{
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec,1));
+		if (res < 0) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid value '%s' for global no_checker_emails specified", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+
+	global_data->no_checker_emails = res;
+}
+#endif
+
+static void
+umask_handler(const vector_t *strvec)
+{
+	long umask_long;
+	mode_t umask_bits = 0;
+	const char *mask = strvec_slot(strvec, 1);
+	char *endptr;
+	unsigned i;
+	const char *p;
+
+	if (umask_cmdline) {
+		log_message(LOG_INFO, "umask command line option specified, ignoring config option");
+		return;
+	}
+
+	if (isdigit(mask[0])) {
+		if (vector_size(strvec) != 2) {
+			report_config_error(CONFIG_GENERAL_ERROR, "%s parameter(s) to umask option", vector_size(strvec) == 1 ? "Missing" : "Extra");
+			return;
+		}
+		umask_long = strtol(mask, &endptr, 0);
+		if (*endptr || umask_long < 0 || umask_long & ~(S_IRWXU | S_IRWXG | S_IRWXO)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "invalid umask value %s", mask);
+			return;
+		}
+		umask_bits = umask_long & (S_IRWXU | S_IRWXG | S_IRWXO);
+	}
+	else {
+		bool need_or = false;
+		for (i = 1; i < vector_size(strvec); i++) {
+			for (p = strvec_slot(strvec, i); *p; ) {
+				if (need_or) {
+					if (*p == '|') {
+						need_or = false;
+						p++;
+						continue;
+					}
+
+					report_config_error(CONFIG_GENERAL_ERROR, "Invalid umask syntax %s", strvec_slot(strvec, i));
+					return;
+				}
+
+				if      (!strncmp(p, "IRUSR", 5)) umask_bits |= S_IRUSR;
+				else if (!strncmp(p, "IWUSR", 5)) umask_bits |= S_IWUSR;
+				else if (!strncmp(p, "IXUSR", 5)) umask_bits |= S_IXUSR;
+				else if (!strncmp(p, "IRGRP", 5)) umask_bits |= S_IRGRP;
+				else if (!strncmp(p, "IWGRP", 5)) umask_bits |= S_IWGRP;
+				else if (!strncmp(p, "IXGRP", 5)) umask_bits |= S_IXGRP;
+				else if (!strncmp(p, "IROTH", 5)) umask_bits |= S_IROTH;
+				else if (!strncmp(p, "IWOTH", 5)) umask_bits |= S_IWOTH;
+				else if (!strncmp(p, "IXOTH", 5)) umask_bits |= S_IXOTH;
+				else {
+					report_config_error(CONFIG_GENERAL_ERROR, "Unknown umask bit %s", p);
+					return;
+				}
+
+				p += 5;
+				need_or = true;
+			}
+		}
+		if (!need_or) {
+			report_config_error(CONFIG_GENERAL_ERROR, "umask missing bit value");
+			return;
+		}
+	}
+
+	umask_val = umask_bits;
+	umask(umask_bits);
+
+#ifdef _MEM_CHECK_
+	update_mem_check_log_perms(umask_bits);
+#endif
+#ifdef ENABLE_LOG_TO_FILE
+	update_log_file_perms(umask_bits);
+#endif
+}
+
+#ifdef _WITH_VRRP_
+static void
+vrrp_startup_delay_handler(const vector_t *strvec)
+{
+	double startup_delay;
+
+	if (!read_double_strvec(strvec, 1, &startup_delay, 0.001F / TIMER_HZ, (unsigned)(UINT_MAX / TIMER_HZ), true))
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp_startup_delay '%s' is invalid", strvec_slot(strvec, 1));
+	else
+		global_data->vrrp_startup_delay = (unsigned)(startup_delay * TIMER_HZ);
+
+	if (global_data->vrrp_startup_delay >= 60 * TIMER_HZ)
+		log_message(LOG_INFO, "The vrrp_startup_delay is very large - %s seconds", strvec_slot(strvec, 1));
+}
+
+static void
+vrrp_log_unknown_vrids_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	global_data->log_unknown_vrids = true;
+}
+#endif
+
+static void
+random_seed_handler(const vector_t *strvec)
+{
+	unsigned val;
+
+	if (!read_unsigned_strvec(strvec, 1, &val, 0, UINT_MAX, false)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "random_seed %s invalid", strvec_slot(strvec, 1));
+		return;
+	}
+
+	set_random_seed(val);
+}
+
+void
+init_global_keywords(bool global_active)
+{
+	/* global definitions mapping */
+#ifdef _WITH_LINKBEAT_
+	install_keyword_root("linkbeat_use_polling", use_polling_handler, global_active);
+#endif
+#if HAVE_DECL_CLONE_NEWNET
+	install_keyword_root("net_namespace", &net_namespace_handler, global_active);
+	install_keyword_root("namespace_with_ipsets", &namespace_ipsets_handler, global_active);
+#endif
+	install_keyword_root("use_pid_dir", &use_pid_dir_handler, global_active);
+	install_keyword_root("instance", &instance_handler, global_active);
+	install_keyword_root("child_wait_time", &child_wait_handler, global_active);
+	install_keyword_root("global_defs", NULL, global_active);
+	install_keyword("process_names", &process_names_handler);
+	install_keyword("process_name", &process_name_handler);
+#ifdef _WITH_VRRP_
+	install_keyword("vrrp_process_name", &vrrp_process_name_handler);
+#endif
+#ifdef _WITH_LVS_
+	install_keyword("lvs_process_name", &lvs_process_name_handler);
+#endif
+#ifdef _WITH_BFD_
+	install_keyword("bfd_process_name", &bfd_process_name_handler);
+#endif
+	install_keyword("router_id", &routerid_handler);
+	install_keyword("notification_email_from", &emailfrom_handler);
+	install_keyword("smtp_server", &smtpserver_handler);
+	install_keyword("smtp_helo_name", &smtphelo_handler);
+	install_keyword("smtp_connect_timeout", &smtpto_handler);
+	install_keyword("notification_email", &email_handler);
+	install_keyword("smtp_alert", &smtp_alert_handler);
+#ifdef _WITH_VRRP_
+	install_keyword("smtp_alert_vrrp", &smtp_alert_vrrp_handler);
+#endif
+#ifdef _WITH_LVS_
+	install_keyword("smtp_alert_checker", &smtp_alert_checker_handler);
+	install_keyword("checker_log_all_failures", &checker_log_all_failures_handler);
+#endif
+#ifdef _WITH_VRRP_
+	install_keyword("dynamic_interfaces", &dynamic_interfaces_handler);
+	install_keyword("no_email_faults", &no_email_faults_handler);
+	install_keyword("default_interface", &default_interface_handler);
+#endif
+#ifdef _WITH_LVS_
+	install_keyword("lvs_timeouts", &lvs_timeouts);
+	install_keyword("lvs_flush", &lvs_flush_handler);
+	install_keyword("lvs_flush_onstop", &lvs_flush_onstop_handler);
+#ifdef _WITH_VRRP_
+	install_keyword("lvs_sync_daemon", &lvs_syncd_handler);
+#endif
+#endif
+#ifdef _WITH_VRRP_
+	install_keyword("vrrp_mcast_group4", &vrrp_mcast_group4_handler);
+	install_keyword("vrrp_mcast_group6", &vrrp_mcast_group6_handler);
+	install_keyword("vrrp_garp_master_delay", &vrrp_garp_delay_handler);
+	install_keyword("vrrp_garp_master_repeat", &vrrp_garp_rep_handler);
+	install_keyword("vrrp_garp_master_refresh", &vrrp_garp_refresh_handler);
+	install_keyword("vrrp_garp_master_refresh_repeat", &vrrp_garp_refresh_rep_handler);
+	install_keyword("vrrp_garp_lower_prio_delay", &vrrp_garp_lower_prio_delay_handler);
+	install_keyword("vrrp_garp_lower_prio_repeat", &vrrp_garp_lower_prio_rep_handler);
+	install_keyword("vrrp_garp_interval", &vrrp_garp_interval_handler);
+	install_keyword("vrrp_gna_interval", &vrrp_gna_interval_handler);
+	install_keyword("vrrp_min_garp", &vrrp_min_garp_handler);
+	install_keyword("vrrp_lower_prio_no_advert", &vrrp_lower_prio_no_advert_handler);
+	install_keyword("vrrp_higher_prio_send_advert", &vrrp_higher_prio_send_advert_handler);
+	install_keyword("vrrp_version", &vrrp_version_handler);
+#ifdef _WITH_IPTABLES_
+	install_keyword("vrrp_iptables", &vrrp_iptables_handler);
+#ifdef _HAVE_LIBIPSET_
+	install_keyword("vrrp_ipsets", &vrrp_ipsets_handler);
+#endif
+#endif
+#ifdef _WITH_NFTABLES_
+	install_keyword("nftables", &vrrp_nftables_handler);
+	install_keyword("nftables_priority", &vrrp_nftables_priority_handler);
+	install_keyword("nftables_counters", &vrrp_nftables_counters_handler);
+	install_keyword("nftables_ifindex", &vrrp_nftables_ifindex_handler);
+#endif
+	install_keyword("vrrp_check_unicast_src", &vrrp_check_unicast_src_handler);
+	install_keyword("vrrp_skip_check_adv_addr", &vrrp_check_adv_addr_handler);
+	install_keyword("vrrp_strict", &vrrp_strict_handler);
+	install_keyword("vrrp_priority", &vrrp_prio_handler);
+	install_keyword("vrrp_no_swap", &vrrp_no_swap_handler);
+#ifdef _HAVE_SCHED_RT_
+	install_keyword("vrrp_rt_priority", &vrrp_rt_priority_handler);
+	install_keyword("vrrp_cpu_affinity", &vrrp_cpu_affinity_handler);
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+	install_keyword("vrrp_rlimit_rtime", &vrrp_rt_rlimit_handler);
+#endif
+#endif
+#endif
+	install_keyword("notify_fifo", &global_notify_fifo);
+	install_keyword("notify_fifo_script", &global_notify_fifo_script);
+#ifdef _WITH_VRRP_
+	install_keyword("vrrp_notify_fifo", &vrrp_notify_fifo);
+	install_keyword("vrrp_notify_fifo_script", &vrrp_notify_fifo_script);
+	install_keyword("vrrp_notify_priority_changes", &vrrp_notify_priority_changes);
+#endif
+#ifdef _WITH_LVS_
+	install_keyword("lvs_notify_fifo", &lvs_notify_fifo);
+	install_keyword("lvs_notify_fifo_script", &lvs_notify_fifo_script);
+	install_keyword("checker_priority", &checker_prio_handler);
+	install_keyword("checker_no_swap", &checker_no_swap_handler);
+#ifdef _HAVE_SCHED_RT_
+	install_keyword("checker_rt_priority", &checker_rt_priority_handler);
+	install_keyword("checker_cpu_affinity", &checker_cpu_affinity_handler);
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+	install_keyword("checker_rlimit_rtime", &checker_rt_rlimit_handler);
+#endif
+#endif
+#endif
+#ifdef _WITH_BFD_
+	install_keyword("bfd_priority", &bfd_prio_handler);
+	install_keyword("bfd_no_swap", &bfd_no_swap_handler);
+#ifdef _HAVE_SCHED_RT_
+	install_keyword("bfd_rt_priority", &bfd_rt_priority_handler);
+	install_keyword("bfd_cpu_affinity", &bfd_cpu_affinity_handler);
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+	install_keyword("bfd_rlimit_rtime", &bfd_rt_rlimit_handler);
+#endif
+#endif
+#endif
+#ifdef _WITH_SNMP_
+	install_keyword("snmp_socket", &snmp_socket_handler);
+	install_keyword("enable_traps", &trap_handler);
+#ifdef _WITH_SNMP_VRRP_
+	install_keyword("enable_snmp_vrrp", &snmp_vrrp_handler);
+	install_keyword("enable_snmp_keepalived", &snmp_vrrp_handler);	/* Deprecated v2.0.0 */
+#endif
+#ifdef _WITH_SNMP_RFC_
+	install_keyword("enable_snmp_rfc", &snmp_rfc_handler);
+#endif
+#ifdef _WITH_SNMP_RFCV2_
+	install_keyword("enable_snmp_rfcv2", &snmp_rfcv2_handler);
+#endif
+#ifdef _WITH_SNMP_RFCV3_
+	install_keyword("enable_snmp_rfcv3", &snmp_rfcv3_handler);
+#endif
+#ifdef _WITH_SNMP_CHECKER_
+	install_keyword("enable_snmp_checker", &snmp_checker_handler);
+#endif
+#endif
+#ifdef _WITH_DBUS_
+	install_keyword("enable_dbus", &enable_dbus_handler);
+	install_keyword("dbus_service_name", &dbus_service_name_handler);
+#endif
+	install_keyword("script_user", &script_user_handler);
+	install_keyword("enable_script_security", &script_security_handler);
+#ifdef _WITH_VRRP_
+	install_keyword("vrrp_netlink_cmd_rcv_bufs", &vrrp_netlink_cmd_rcv_bufs_handler);
+	install_keyword("vrrp_netlink_cmd_rcv_bufs_force", &vrrp_netlink_cmd_rcv_bufs_force_handler);
+	install_keyword("vrrp_netlink_monitor_rcv_bufs", &vrrp_netlink_monitor_rcv_bufs_handler);
+	install_keyword("vrrp_netlink_monitor_rcv_bufs_force", &vrrp_netlink_monitor_rcv_bufs_force_handler);
+#ifdef _WITH_CN_PROC_
+	install_keyword("process_monitor_rcv_bufs", &process_monitor_rcv_bufs_handler);
+	install_keyword("process_monitor_rcv_bufs_force", &process_monitor_rcv_bufs_force_handler);
+#endif
+#endif
+#ifdef _WITH_LVS_
+	install_keyword("lvs_netlink_cmd_rcv_bufs", &lvs_netlink_cmd_rcv_bufs_handler);
+	install_keyword("lvs_netlink_cmd_rcv_bufs_force", &lvs_netlink_cmd_rcv_bufs_force_handler);
+	install_keyword("lvs_netlink_monitor_rcv_bufs", &lvs_netlink_monitor_rcv_bufs_handler);
+	install_keyword("lvs_netlink_monitor_rcv_bufs_force", &lvs_netlink_monitor_rcv_bufs_force_handler);
+#endif
+#ifdef _WITH_LVS_
+	install_keyword("rs_init_notifies", &rs_init_notifies_handler);
+	install_keyword("no_checker_emails", &no_checker_emails_handler);
+#endif
+#ifdef _WITH_VRRP_
+	install_keyword("vrrp_rx_bufs_policy", &vrrp_rx_bufs_policy_handler);
+	install_keyword("vrrp_rx_bufs_multiplier", &vrrp_rx_bufs_multiplier_handler);
+	install_keyword("vrrp_startup_delay", &vrrp_startup_delay_handler);
+	install_keyword("log_unknown_vrids", &vrrp_log_unknown_vrids_handler);
 #endif
+	install_keyword("umask", &umask_handler);
+	install_keyword("random_seed", &random_seed_handler);
 }
diff --git a/tools/keepalived/keepalived/core/keepalived_netlink.c b/tools/keepalived/keepalived/core/keepalived_netlink.c
new file mode 100644
index 000000000..fbc7ec5f8
--- /dev/null
+++ b/tools/keepalived/keepalived/core/keepalived_netlink.c
@@ -0,0 +1,2482 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        NETLINK kernel command channel.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+/* global include */
+#include <stdlib.h>
+#include <fcntl.h>
+#include <sys/socket.h>
+#include <string.h>
+#include <errno.h>
+#include <sys/uio.h>
+#include <net/if_arp.h>
+#include <arpa/inet.h>
+#include <time.h>
+#ifdef _WITH_VRRP_
+#include <linux/version.h>
+#ifdef _HAVE_FIB_ROUTING_
+#include <linux/fib_rules.h>
+#endif
+#endif
+//#include <linux/ip.h>
+#include <unistd.h>
+#include <inttypes.h>
+#include <linux/if_link.h>
+
+#ifdef THREAD_DUMP
+#include "scheduler.h"
+#endif
+
+/* local include */
+#include "keepalived_netlink.h"
+#ifdef _WITH_LVS_
+#include "check_api.h"
+#endif
+#ifdef _WITH_VRRP_
+#include "vrrp_scheduler.h"
+#include "vrrp_track.h"
+#include "vrrp_data.h"
+#ifdef _HAVE_VRRP_VMAC_
+#include "vrrp_vmac.h"
+#endif
+#ifdef _HAVE_FIB_ROUTING_
+#include "vrrp_iproute.h"
+#include "vrrp_iprule.h"
+#endif
+#endif
+#include "logger.h"
+#include "scheduler.h"
+#include "utils.h"
+#include "bitops.h"
+#if !HAVE_DECL_SOCK_NONBLOCK
+#include "old_socket.h"
+#endif
+#include "vrrp_ipaddress.h"
+#include "global_data.h"
+
+/* This seems a nasty hack, but it's what iproute2 does */
+#ifndef SOL_NETLINK
+#define SOL_NETLINK 270
+#endif
+
+/* Default values */
+#define IF_DEFAULT_BUFSIZE	(64*1024)
+
+/* Global vars */
+nl_handle_t nl_cmd = { .fd = -1 };	/* Command channel */
+#ifdef _WITH_VRRP_
+int netlink_error_ignore;	/* If we get this error, ignore it */
+#endif
+
+/* Static vars */
+static nl_handle_t nl_kernel = { .fd = -1 };	/* Kernel reflection channel */
+
+#ifdef _NETLINK_TIMERS_
+/* The maximum netlink command we use is RTM_DELRULE.
+ * If that changes, the following definition will need changing. */
+#define MAX_NETLINK_TIMER	RTM_DELRULE
+
+static struct timeval netlink_times[MAX_NETLINK_TIMER+1];
+static unsigned netlink_count[MAX_NETLINK_TIMER+1];
+#ifdef _WITH_VRRP_
+static struct timeval start_time, end_time;
+#endif
+
+bool do_netlink_timers;
+#endif
+
+#ifdef _NETLINK_TIMERS_
+void
+report_and_clear_netlink_timers(const char * str)
+{
+	int i;
+
+	log_message(LOG_INFO, "Netlink timers - %s", str);
+	for (i = 0; i <= MAX_NETLINK_TIMER; i++) {
+		if (netlink_count[i]) {
+			log_message(LOG_INFO, "  netlink cmd %d (%u calls), time %ld.%6.6ld", i, netlink_count[i], netlink_times[i].tv_sec, netlink_times[i].tv_usec);
+			netlink_times[i].tv_sec = netlink_times[i].tv_usec = netlink_count[i] = 0;
+		}
+	}
+}
+#endif
+
+static const char *
+get_nl_msg_type(unsigned type)
+{
+	switch (type) {
+                switch_define_str(RTM_NEWLINK);
+                switch_define_str(RTM_DELLINK);
+                switch_define_str(RTM_NEWADDR);
+                switch_define_str(RTM_DELADDR);
+                switch_define_str(RTM_NEWROUTE);
+                switch_define_str(RTM_DELROUTE);
+                switch_define_str(RTM_NEWRULE);
+                switch_define_str(RTM_DELRULE);
+                switch_define_str(RTM_GETLINK);
+                switch_define_str(RTM_GETADDR);
+        };
+
+        return "";
+}
+
+static inline bool
+addr_is_equal2(struct ifaddrmsg* ifa, void* addr, ip_address_t* vip_addr, interface_t *ifp, vrrp_t *vrrp)
+{
+	struct in_addr* sin_addr;
+	struct in6_addr* sin6_addr;
+
+	/* If vrrp is specified, we also want to make sure the matching address isn't
+	 * being added to the base interface of the vrrp instance */
+
+	if (vip_addr->ifa.ifa_family != ifa->ifa_family)
+		return false;
+	if (vip_addr->ifp != ifp &&
+	    !(vrrp && vip_addr->ifp == vrrp->ifp && VRRP_CONFIGURED_IFP(vrrp) == ifp))
+		return false;
+	if (vip_addr->ifa.ifa_family == AF_INET) {
+		sin_addr = (struct in_addr *)addr;
+		return vip_addr->u.sin.sin_addr.s_addr == sin_addr->s_addr;
+	}
+
+	sin6_addr = (struct in6_addr*)addr;
+	return vip_addr->u.sin6_addr.s6_addr32[0] == sin6_addr->s6_addr32[0] &&
+	       vip_addr->u.sin6_addr.s6_addr32[1] == sin6_addr->s6_addr32[1] &&
+	       vip_addr->u.sin6_addr.s6_addr32[2] == sin6_addr->s6_addr32[2] &&
+	       vip_addr->u.sin6_addr.s6_addr32[3] == sin6_addr->s6_addr32[3];
+}
+
+static inline bool
+addr_is_equal(struct ifaddrmsg* ifa, void* addr, ip_address_t* vip_addr, interface_t *ifp)
+{
+	return addr_is_equal2(ifa, addr, vip_addr, ifp, NULL);
+}
+
+#ifdef _WITH_VRRP_
+static vrrp_t * __attribute__ ((pure))
+address_is_ours(struct ifaddrmsg* ifa, struct in_addr* addr, interface_t* ifp)
+{
+	element e, e1;
+	tracking_vrrp_t* tvp;
+	vrrp_t* vrrp;
+	ip_address_t* vaddr;
+
+	LIST_FOREACH(ifp->tracking_vrrp, tvp, e) {
+		vrrp = tvp->vrrp;
+
+		/* If we are not master, then we won't have the address configured */
+		if (vrrp->state != VRRP_STATE_MAST)
+			continue;
+
+		if (ifa->ifa_family == vrrp->family) {
+			LIST_FOREACH(vrrp->vip, vaddr, e1) {
+				if (addr_is_equal(ifa, addr, vaddr, ifp))
+					return vaddr->dont_track ? NULL : vrrp;
+			}
+		}
+
+		LIST_FOREACH(vrrp->evip, vaddr, e1) {
+			if (addr_is_equal(ifa, addr, vaddr, ifp))
+				return vaddr->dont_track ? NULL : vrrp;
+		}
+	}
+
+	return NULL;
+}
+
+static bool __attribute__ ((pure))
+ignore_address_if_ours_or_link_local(struct ifaddrmsg* ifa, struct in_addr* addr, interface_t* ifp)
+{
+	element e, e1;
+	tracking_vrrp_t* tvp;
+	vrrp_t* vrrp;
+	ip_address_t* vaddr;
+
+	/* We are only interested in link local for IPv6 */
+	if (ifa->ifa_family == AF_INET6 &&
+	    ifa->ifa_scope != RT_SCOPE_LINK)
+		return true;
+
+	LIST_FOREACH(ifp->tracking_vrrp, tvp, e) {
+		vrrp = tvp->vrrp;
+
+		if (ifa->ifa_family == vrrp->family) {
+			LIST_FOREACH(vrrp->vip, vaddr, e1) {
+				if (addr_is_equal2(ifa, addr, vaddr, ifp, vrrp))
+					return true;
+			}
+		}
+
+		LIST_FOREACH(vrrp->evip, vaddr, e1) {
+			if (addr_is_equal2(ifa, addr, vaddr, ifp, vrrp))
+				return true;
+		}
+	}
+
+	return false;
+}
+
+#ifdef _HAVE_FIB_ROUTING_
+static bool
+compare_addr(int family, void *addr1, ip_address_t *addr2)
+{
+	union {
+		struct in_addr *in;
+		struct in6_addr *in6;
+	} addr1_p = { .in = addr1 };
+
+	if (family == AF_INET)
+		return addr1_p.in->s_addr != addr2->u.sin.sin_addr.s_addr;
+
+	return addr1_p.in6->s6_addr32[0] != addr2->u.sin6_addr.s6_addr32[0] ||
+	       addr1_p.in6->s6_addr32[1] != addr2->u.sin6_addr.s6_addr32[1] ||
+	       addr1_p.in6->s6_addr32[2] != addr2->u.sin6_addr.s6_addr32[2] ||
+	       addr1_p.in6->s6_addr32[3] != addr2->u.sin6_addr.s6_addr32[3];
+}
+
+static ip_route_t *
+route_is_ours(struct rtmsg* rt, struct rtattr *tb[RTA_MAX + 1], vrrp_t** ret_vrrp)
+{
+	uint32_t table;
+	int family;
+	int mask_len = rt->rtm_dst_len;
+	uint32_t priority = 0;
+	uint8_t tos = rt->rtm_tos;
+	element e, e1;
+	vrrp_t *vrrp;
+	ip_route_t *route;
+	union {
+		struct in_addr in;
+		struct in6_addr in6;
+	} default_addr;
+
+	*ret_vrrp = NULL;
+
+	table = tb[RTA_TABLE] ? *(uint32_t *)RTA_DATA(tb[RTA_TABLE]) : rt->rtm_table;
+	family = rt->rtm_family;
+	if (tb[RTA_PRIORITY])
+		priority = *(uint32_t *)RTA_DATA(tb[RTA_PRIORITY]);
+
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		LIST_FOREACH(vrrp->vroutes, route, e1) {
+			if (table != route->table ||
+			    family != route->family ||
+			    mask_len != route->dst->ifa.ifa_prefixlen ||
+			    priority != route->metric ||
+			    tos != route->tos)
+				continue;
+
+			if (route->oif) {
+				if (!tb[RTA_OIF] || route->oif->ifindex != *(uint32_t *)RTA_DATA(tb[RTA_OIF]))
+					continue;
+			} else {
+				if (route->set && route->configured_ifindex &&
+				    (!tb[RTA_OIF] || route->configured_ifindex != *(uint32_t *)RTA_DATA(tb[RTA_OIF])))
+					continue;
+			}
+
+			if (!tb[RTA_DST])
+				memset(&default_addr, 0, sizeof(default_addr));
+
+			if (compare_addr(family, tb[RTA_DST] ? RTA_DATA(tb[RTA_DST]) : &default_addr, route->dst))
+				continue;
+
+			*ret_vrrp = vrrp;
+			return route;
+		}
+	}
+
+	/* Now check the static routes */
+	LIST_FOREACH(vrrp_data->static_routes, route, e) {
+		if (table != route->table ||
+		    family != route->family ||
+		    mask_len != route->dst->ifa.ifa_prefixlen ||
+		    tos != route->tos)
+			continue;
+
+		if (compare_addr(family, RTA_DATA(tb[RTA_DST]), route->dst))
+			continue;
+
+		return route;
+	}
+
+	return NULL;
+}
+
+static bool
+compare_rule(struct fib_rule_hdr *frh, struct rtattr *tb[FRA_MAX + 1], ip_rule_t *rule)
+{
+	if (rule->dont_track)
+		return false;
+
+	if (rule->family != frh->family)
+		return false;
+
+	/* This is a very good descriminator, since our rules will always have a priority */
+	if (!tb[FRA_PRIORITY] ||
+	    rule->priority != *(uint32_t*)RTA_DATA(tb[FRA_PRIORITY]))
+		return false;
+
+	if (frh->action != rule->action)
+		return false;
+
+	if (frh->action == FR_ACT_GOTO &&
+	    (!tb[FRA_GOTO] ||
+	     *(uint32_t *)RTA_DATA(tb[FRA_GOTO]) != rule->goto_target))
+		return false;
+
+	if (tb[FRA_TABLE] && rule->table != *(uint32_t *)RTA_DATA(tb[FRA_TABLE]))
+		return false;
+	if (!tb[FRA_TABLE] && rule->table != frh->table)
+		return false;
+
+	if (!rule->invert != !((frh->flags & FIB_RULE_INVERT)))
+		return false;
+
+	if (!rule->from_addr != !tb[FRA_SRC])
+		return false;
+	if (rule->from_addr) {
+		if (frh->src_len != rule->from_addr->ifa.ifa_prefixlen)
+			return false;
+		if (compare_addr(rule->family, RTA_DATA(tb[FRA_SRC]), rule->from_addr))
+			return false;
+	}
+
+	if (!rule->to_addr != !tb[FRA_DST])
+		return false;
+	if (rule->to_addr) {
+		if (frh->dst_len != rule->to_addr->ifa.ifa_prefixlen)
+			return false;
+		if (compare_addr(rule->family, RTA_DATA(tb[FRA_DST]), rule->to_addr))
+			return false;
+	}
+
+	if (rule->tos != frh->tos)
+		return false;
+
+	if (!tb[FRA_FWMARK] != !(rule->mask & IPRULE_BIT_FWMARK))
+		return false;
+	if (rule->mask & IPRULE_BIT_FWMARK &&
+	    *(uint32_t*)RTA_DATA(tb[FRA_FWMARK]) != rule->fwmark)
+		return false;
+
+	if (!tb[FRA_FWMASK] && (rule->mask & IPRULE_BIT_FWMASK))
+		return false;
+	if (rule->mask & IPRULE_BIT_FWMASK) {
+		if (*(uint32_t*)RTA_DATA(tb[FRA_FWMASK]) != rule->fwmask)
+			return false;
+	}
+	else if (tb[FRA_FWMASK]) {
+		if (*(uint32_t *)RTA_DATA(tb[FRA_FWMASK]) != 0xffffffff)
+			return false;
+	}
+
+	if (!tb[FRA_FLOW] != !rule->realms)
+		return false;
+	if (rule->realms &&
+	    *(uint32_t*)RTA_DATA(tb[FRA_FLOW]) != rule->realms)
+		return false;
+
+#if HAVE_DECL_FRA_SUPPRESS_PREFIXLEN
+	if (!tb[FRA_SUPPRESS_PREFIXLEN]) {
+		if (rule->suppress_prefix_len != -1)
+			return false;
+	} else if (*(int32_t*)RTA_DATA(tb[FRA_SUPPRESS_PREFIXLEN]) != rule->suppress_prefix_len)
+		return false;
+#endif
+
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+	if (!tb[FRA_SUPPRESS_IFGROUP] != !(rule->mask & IPRULE_BIT_SUP_GROUP))
+		return false;
+	if (rule->mask & IPRULE_BIT_SUP_GROUP &&
+	    *(uint32_t*)RTA_DATA(tb[FRA_SUPPRESS_IFGROUP]) != rule->suppress_group)
+		return false;
+#endif
+
+	if (!tb[FRA_IFNAME] != !(rule->iif))
+		return false;
+	if (rule->iif &&
+	    strcmp(RTA_DATA(tb[FRA_IFNAME]), rule->iif->ifname))
+		return false;
+
+#if HAVE_DECL_FRA_OIFNAME
+	if (!tb[FRA_OIFNAME] != !(rule->oif))
+		return false;
+	if (rule->oif &&
+	    strcmp(RTA_DATA(tb[FRA_OIFNAME]), rule->oif->ifname))
+		return false;
+#endif
+
+#if HAVE_DECL_FRA_TUN_ID
+	uint64_t tunnel_id;
+	if (!tb[FRA_TUN_ID] != !(rule->tunnel_id))
+		return false;
+	if (rule->tunnel_id) {
+		tunnel_id = be64toh(*(uint64_t *)RTA_DATA(tb[FRA_TUN_ID]));
+		if (tunnel_id != rule->tunnel_id)
+			return false;
+	}
+#endif
+
+#if HAVE_DECL_FRA_UID_RANGE
+	if (!tb[FRA_UID_RANGE] != !(rule->mask & IPRULE_BIT_UID_RANGE))
+		return false;
+	if ((rule->mask & IPRULE_BIT_UID_RANGE) &&
+	    memcmp(RTA_DATA(tb[FRA_UID_RANGE]), &rule->uid_range, sizeof rule->uid_range))
+		return false;
+#endif
+
+#if HAVE_DECL_FRA_L3MDEV
+	if (!tb[FRA_L3MDEV] && rule->l3mdev)
+		return false;
+	if (tb[FRA_L3MDEV] &&
+	    *(uint8_t *)RTA_DATA(tb[FRA_L3MDEV]) != rule->l3mdev)
+		return false;
+#endif
+
+#if HAVE_DECL_FRA_IP_PROTO
+	if (!tb[FRA_IP_PROTO] != !(rule->mask & IPRULE_BIT_IP_PROTO))
+		return false;
+	if (rule->mask & IPRULE_BIT_IP_PROTO &&
+	    *(uint8_t *)RTA_DATA(tb[FRA_IP_PROTO]) != rule->ip_proto)
+		return false;
+#endif
+
+#if HAVE_DECL_FRA_SPORT_RANGE
+	if (!tb[FRA_SPORT_RANGE] != !(rule->mask & IPRULE_BIT_SPORT_RANGE))
+		return false;
+	if (rule->mask & IPRULE_BIT_SPORT_RANGE &&
+	    memcmp(RTA_DATA(tb[FRA_SPORT_RANGE]), &rule->src_port, sizeof rule->src_port))
+		return false;
+#endif
+
+#if HAVE_DECL_FRA_DPORT_RANGE
+	if (!tb[FRA_DPORT_RANGE] != !(rule->mask & IPRULE_BIT_DPORT_RANGE))
+		return false;
+	if (rule->mask & IPRULE_BIT_DPORT_RANGE &&
+	    memcmp(RTA_DATA(tb[FRA_DPORT_RANGE]), &rule->dst_port, sizeof rule->dst_port))
+		return false;
+#endif
+
+	return true;
+}
+
+static ip_rule_t *
+rule_is_ours(struct fib_rule_hdr* frh, struct rtattr *tb[FRA_MAX + 1], vrrp_t **ret_vrrp)
+{
+	element e, e1;
+	vrrp_t *vrrp;
+	ip_rule_t *rule;
+
+	*ret_vrrp = NULL;
+
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		LIST_FOREACH(vrrp->vrules, rule, e1) {
+			if (compare_rule(frh, tb, rule)) {
+				*ret_vrrp = vrrp;
+				return rule;
+			}
+		}
+	}
+
+	LIST_FOREACH(vrrp_data->static_rules, rule, e) {
+		if (compare_rule(frh, tb, rule))
+			return rule;
+	}
+
+	return NULL;
+}
+#endif
+#endif
+
+/* Update the netlink socket receive buffer sizes */
+static void
+netlink_set_rx_buf_size(nl_handle_t *nl, unsigned rcvbuf_size, bool force)
+{
+	if (!rcvbuf_size)
+		rcvbuf_size = IF_DEFAULT_BUFSIZE;
+
+	/* Set rcvbuf size */
+	if (force) {
+		if (setsockopt(nl->fd, SOL_SOCKET, SO_RCVBUFFORCE, &rcvbuf_size, sizeof(rcvbuf_size)) < 0)
+			log_message(LOG_INFO, "cant set SO_RCVBUFFORCE IP option. errno=%d (%m)", errno);
+	} else {
+		if (setsockopt(nl->fd, SOL_SOCKET, SO_RCVBUF, &rcvbuf_size, sizeof(rcvbuf_size)) < 0)
+			log_message(LOG_INFO, "Cannot set SO_RCVBUF IP option. errno=%d (%m)", errno);
+	}
+}
+
+#ifdef _HAVE_FIB_ROUTING_
+static void
+kernel_netlink_set_membership(int group, bool add)
+{
+	if (setsockopt(nl_kernel.fd, SOL_NETLINK, add ? NETLINK_ADD_MEMBERSHIP : NETLINK_DROP_MEMBERSHIP,
+			&group, sizeof(group)) < 0)
+		log_message(LOG_INFO, "Netlink: Cannot add membership on netlink socket : (%s)", strerror(errno));
+}
+
+void
+set_extra_netlink_monitoring(bool ipv4_routes, bool ipv6_routes, bool ipv4_rules, bool ipv6_rules)
+{
+	kernel_netlink_set_membership(RTNLGRP_IPV4_ROUTE, ipv4_routes);
+	kernel_netlink_set_membership(RTNLGRP_IPV6_ROUTE, ipv6_routes);
+	kernel_netlink_set_membership(RTNLGRP_IPV4_RULE, ipv4_rules);
+	kernel_netlink_set_membership(RTNLGRP_IPV6_RULE, ipv6_rules);
+}
+#endif
+
+/* Create a socket to netlink interface_t */
+static void
+netlink_socket(nl_handle_t *nl, unsigned rcvbuf_size, bool force, int flags, unsigned group, ...)
+{
+	int ret;
+	va_list gp;
+
+	memset(nl, 0, sizeof (*nl));
+
+	socklen_t addr_len;
+	struct sockaddr_nl snl;
+	int sock_flags = flags;
+#if !HAVE_DECL_SOCK_NONBLOCK
+	sock_flags &= ~SOCK_NONBLOCK;
+#endif
+
+	nl->fd = socket(AF_NETLINK, SOCK_RAW | SOCK_CLOEXEC | sock_flags, NETLINK_ROUTE);
+	if (nl->fd < 0) {
+		log_message(LOG_INFO, "Netlink: Cannot open netlink socket : (%s)",
+		       strerror(errno));
+		return;
+	}
+
+#if !HAVE_DECL_SOCK_NONBLOCK
+	if ((flags & SOCK_NONBLOCK) && set_sock_flags(nl->fd, F_SETFL, O_NONBLOCK))
+		log_message(LOG_INFO, "Unable to set NONBLOCK on netlink socket - %s (%d)", strerror(errno), errno);
+#endif
+
+#if !HAVE_DECL_SOCK_CLOEXEC
+	if (set_sock_flags(nl->fd, F_SETFD, FD_CLOEXEC))
+		log_message(LOG_INFO, "Unable to set CLOEXEC on netlink socket - %s (%d)", strerror(errno), errno);
+#endif
+
+	memset(&snl, 0, sizeof (snl));
+	snl.nl_family = AF_NETLINK;
+
+	ret = bind(nl->fd, (struct sockaddr *) &snl, sizeof (snl));
+	if (ret < 0) {
+		log_message(LOG_INFO, "Netlink: Cannot bind netlink socket : (%s)",
+		       strerror(errno));
+		close(nl->fd);
+		nl->fd = -1;
+		return;
+	}
+
+	/* Join the requested groups */
+	va_start(gp, group);
+	while (group) {
+		ret = setsockopt(nl->fd, SOL_NETLINK, NETLINK_ADD_MEMBERSHIP, &group, sizeof(group));
+		if (ret < 0)
+			log_message(LOG_INFO, "Netlink: Cannot add group %u membership on netlink socket : (%s)",
+			       group, strerror(errno));
+
+		group = va_arg(gp, unsigned);
+	}
+	va_end(gp);
+
+	addr_len = sizeof (snl);
+	ret = getsockname(nl->fd, (struct sockaddr *) &snl, &addr_len);
+	if (ret < 0 || addr_len != sizeof (snl)) {
+		log_message(LOG_INFO, "Netlink: Cannot getsockname : (%s)",
+		       strerror(errno));
+		close(nl->fd);
+		nl->fd = -1;
+		return;
+	}
+
+	if (snl.nl_family != AF_NETLINK) {
+		log_message(LOG_INFO, "Netlink: Wrong address family %d",
+		       snl.nl_family);
+		close(nl->fd);
+		nl->fd = -1;
+		return;
+	}
+
+	/* Save the port id for checking message source later */
+	nl->nl_pid = snl.nl_pid;
+
+
+#ifdef _INCLUDE_UNUSED_CODE_
+	/* There appears to be a kernel bug that manifests itself when we have a large number
+	 * of VMAC interfaces to add (i.e. 200 or more). After approx 200 interfaces have been
+	 * added the kernel will return ENOBUFS on the nl_kernel socket, and then repeat the
+	 * first 30 or so RTM_NEWLINK messages, omitting the first one. Then, at the end of
+	 * creating all the interfaces, i.e. after a slight delay with no new messages,
+	 * we get another ENOBUFS and all the RTM_NEWLINK messages from the time of the
+	 * first ENOBUFS message repeated.
+	 *
+	 * This problem also happens if the system already has a large (e.g. 200 or more)
+	 * number of interfaces configured before keepalived starts.
+	 *
+	 * This problem feels as though a circular buffer is wrapping around, and causes
+	 * all the old messages in the buffer to be resent, but the first one is omitted.
+	 * Note that it is only the interfaces that keepalived creates that are resent,
+	 * not interfaces that already existed on the system before keepalived starts.
+	 *
+	 * We can also get ENOBUFS on the nl_cmd socket if the NLM_F_ECHO flag is set as well as
+	 * the NLM_F_ACK flag when a command is sent on the nl_cmd socket.
+	 *
+	 * It appears that this must be a kernel bug, since when it happens on interface creation,
+	 * if we are also running `ip -ts monitor link addr route`, i.e. the same as the nl_kernel
+	 * socket, then precisely the same messages are repeated (provided we have set the
+	 * vrrp_netlink_cmd_rcv_bufs global configuration option to 1048576 (1024k) to match what
+	 * ip monitor does).
+	 *
+	 * NETLINK_NO_ENOBUFS was introduced in Linux 2.6.30
+	 */
+	int one = 1;
+	if ((ret = setsockopt(nl->fd, SOL_NETLINK, NETLINK_NO_ENOBUFS, &one, sizeof(one))) < 0)
+		log_message(LOG_INFO, "Cannot set NETLINK_NO_ENOBUFS option. errno=%d (%m)", errno);
+#endif
+
+	nl->seq = (uint32_t)time(NULL);
+
+	if (nl->fd < 0)
+		return;
+
+	netlink_set_rx_buf_size(nl, rcvbuf_size, force);
+}
+
+/* Close a netlink socket */
+static void
+netlink_close(nl_handle_t *nl)
+{
+	if (!nl)
+		return;
+
+	/* First of all release pending thread. There is no thread
+	 * for nl_cmd since it is used synchronously. */
+	if (nl->thread) {
+		thread_cancel(nl->thread);
+		nl->thread = NULL;
+	}
+
+	if (nl->fd != -1)
+		close(nl->fd);
+
+	nl->fd = -1;
+}
+
+/* iproute2 utility function */
+int
+addattr_l(struct nlmsghdr *n, size_t maxlen, unsigned short type, const void *data, size_t alen)
+{
+	size_t len = RTA_LENGTH(alen);
+	size_t align_len = NLMSG_ALIGN(len);
+	struct rtattr *rta;
+
+	if (n->nlmsg_len + align_len > maxlen)
+		return -1;
+
+	rta = (struct rtattr *) (((char *) n) + n->nlmsg_len);
+	rta->rta_type = type;
+	rta->rta_len = (unsigned short)len;
+	memcpy(RTA_DATA(rta), data, alen);
+	n->nlmsg_len += (uint32_t)align_len;
+
+	return 0;
+}
+
+#ifdef _WITH_VRRP_
+int
+addattr_l2(struct nlmsghdr *n, size_t maxlen, unsigned short type, const void *data, size_t alen, const void *data2, size_t alen2)
+{
+	size_t len = RTA_LENGTH(alen + alen2);
+	size_t align_len = NLMSG_ALIGN(len);
+	struct rtattr *rta;
+
+	if (n->nlmsg_len + align_len > maxlen)
+		return -1;
+
+	rta = (struct rtattr *) (((char *) n) + n->nlmsg_len);
+	rta->rta_type = type;
+	rta->rta_len = (unsigned short)len;
+	memcpy(RTA_DATA(rta), data, alen);
+	memcpy((char *)RTA_DATA(rta) + alen, data2, alen2);
+	n->nlmsg_len += (uint32_t)align_len;
+
+	return 0;
+}
+
+int
+addraw_l(struct nlmsghdr *n, size_t maxlen, const void *data, size_t len)
+{
+	size_t align_len = NLMSG_ALIGN(len);
+
+	if (n->nlmsg_len + align_len > maxlen)
+		return -1;
+
+	memcpy(NLMSG_TAIL(n), data, len);
+	memset((char *) NLMSG_TAIL(n) + len, 0, align_len - len);
+	n->nlmsg_len += (uint32_t)align_len;
+	return 0;
+}
+
+size_t
+rta_addattr_l(struct rtattr *rta, size_t maxlen, unsigned short type,
+		  const void *data, size_t alen)
+{
+	struct rtattr *subrta;
+	size_t len = RTA_LENGTH(alen);
+	size_t align_len = RTA_ALIGN(len);
+
+	if (rta->rta_len + align_len > maxlen)
+		return 0;
+
+	subrta = (struct rtattr*)(((char *)rta) + rta->rta_len);
+	subrta->rta_type = type;
+	subrta->rta_len = (unsigned short)len;
+	memcpy(RTA_DATA(subrta), data, alen);
+	rta->rta_len = (unsigned short)(rta->rta_len + align_len);
+	return align_len;
+}
+
+size_t
+rta_addattr_l2(struct rtattr *rta, size_t maxlen, unsigned short type,
+		  const void *data, size_t alen,
+		  const void *data2, size_t alen2)
+{
+	struct rtattr *subrta;
+	size_t len = RTA_LENGTH(alen + alen2);
+	size_t align_len = RTA_ALIGN(len);
+
+	if (rta->rta_len + align_len > maxlen)
+		return 0;
+
+	subrta = (struct rtattr*)(((char*)rta) + rta->rta_len);
+	subrta->rta_type = type;
+	subrta->rta_len = (unsigned short)len;
+	memcpy(RTA_DATA(subrta), data, alen);
+	memcpy((char *)RTA_DATA(subrta) + alen, data2, alen2);
+	rta->rta_len = (unsigned short)(rta->rta_len + align_len);
+	return align_len;
+}
+
+struct rtattr *
+rta_nest(struct rtattr *rta, size_t maxlen, unsigned short type)
+{
+	struct rtattr *nest = RTA_TAIL(rta);
+
+	rta_addattr_l(rta, maxlen, type, NULL, 0);
+
+	return nest;
+}
+
+size_t
+rta_nest_end(struct rtattr *rta, struct rtattr *nest)
+{
+	nest->rta_len = (unsigned short)((char *)RTA_TAIL(rta) - (char *)nest);
+
+	return rta->rta_len;
+}
+#endif
+
+static void
+parse_rtattr(struct rtattr **tb, int max, struct rtattr *rta, size_t len)
+{
+	memset(tb, 0, sizeof(struct rtattr *) * (max + 1));
+
+	while (RTA_OK(rta, len)) {
+		if (rta->rta_type <= max)
+			tb[rta->rta_type] = rta;
+		rta = RTA_NEXT(rta, len);
+	}
+}
+
+#ifdef _WITH_VRRP_
+static void
+parse_rtattr_nested(struct rtattr **tb, int max, struct rtattr *rta)
+{
+	parse_rtattr(tb, max, RTA_DATA(rta), RTA_PAYLOAD(rta));
+}
+
+static void
+set_vrrp_backup(vrrp_t *vrrp)
+{
+	vrrp_t *sync_vrrp;
+	element e;
+
+	vrrp->wantstate = VRRP_STATE_BACK;
+	vrrp_state_leave_master(vrrp, true);
+	if (vrrp->sync) {
+		LIST_FOREACH(vrrp->sync->vrrp_instances, sync_vrrp, e) {
+			if (sync_vrrp->state == VRRP_STATE_MAST) {
+				sync_vrrp->wantstate = VRRP_STATE_BACK;
+				vrrp_state_leave_master(sync_vrrp, true);
+
+				/* We want a quick transition back to master */
+				sync_vrrp->ms_down_timer = VRRP_TIMER_SKEW(sync_vrrp);
+				vrrp_init_instance_sands(sync_vrrp);
+				vrrp_thread_requeue_read(sync_vrrp);
+			}
+		}
+		vrrp->sync->state = VRRP_STATE_BACK;
+	}
+
+	/* We want a quick transition back to master */
+	vrrp->ms_down_timer = VRRP_TIMER_SKEW(vrrp);
+	vrrp_init_instance_sands(vrrp);
+	vrrp_thread_requeue_read(vrrp);
+}
+#endif
+
+/*
+ * Netlink interface address lookup filter
+ * We need to handle multiple primary address and
+ * multiple secondary address to the same interface.
+ * We also need to handle the same address on
+ * multiple interfaces, for IPv6 link local addresses.
+ */
+static int
+netlink_if_address_filter(__attribute__((unused)) struct sockaddr_nl *snl, struct nlmsghdr *h)
+{
+	struct ifaddrmsg *ifa;
+	struct rtattr *tb[IFA_MAX + 1];
+#ifdef _WITH_VRRP_
+	interface_t *ifp;
+	ip_address_t *ipaddr;
+#endif
+	size_t len;
+	union {
+		void *addr;
+		struct in_addr *in;
+		struct in6_addr *in6;
+	} addr;
+#ifdef _WITH_VRRP_
+	struct in_addr *addr_p;
+	struct in6_addr *addr6_p;
+	char addr_str[INET6_ADDRSTRLEN];
+	bool addr_chg = false;
+	element e;
+	vrrp_t *vrrp;
+	vrrp_t *address_vrrp;
+	tracking_vrrp_t *tvp;
+	bool is_tracking_saddr;
+#endif
+
+	if (h->nlmsg_type != RTM_NEWADDR && h->nlmsg_type != RTM_DELADDR)
+		return 0;
+
+	if (h->nlmsg_len < NLMSG_LENGTH(sizeof (struct ifaddrmsg)))
+		return -1;
+
+	ifa = NLMSG_DATA(h);
+
+	/* Only IPv4 and IPv6 are valid for us */
+	if (ifa->ifa_family != AF_INET && ifa->ifa_family != AF_INET6)
+		return 0;
+
+	len = h->nlmsg_len - NLMSG_LENGTH(sizeof (struct ifaddrmsg));
+
+	parse_rtattr(tb, IFA_MAX, IFA_RTA(ifa), len);
+
+	if (tb[IFA_LOCAL] == NULL)
+		tb[IFA_LOCAL] = tb[IFA_ADDRESS];
+	if (tb[IFA_ADDRESS] == NULL)
+		tb[IFA_ADDRESS] = tb[IFA_LOCAL];
+
+	/* local interface address */
+	addr.addr = (tb[IFA_LOCAL] ? RTA_DATA(tb[IFA_LOCAL]) : NULL);
+
+	if (addr.addr == NULL)
+		return -1;
+
+#ifdef _WITH_VRRP_
+#ifndef _DEBUG_
+	if (prog_type == PROG_TYPE_VRRP || __test_bit(CONFIG_TEST_BIT, &debug))
+#endif
+	{
+		/* Fetch interface_t */
+		ifp = if_get_by_ifindex(ifa->ifa_index);
+		if (!ifp)
+			return 0;
+
+// ?? Only interested in link-local for IPv6 unless unicast
+// we take address from vrrp->ifp->base_ifp, unless we have made an IPv6 address
+// do we want to set a flag to say it is a generated link local address (or set saddr and track_saddr, but not saddr_from_config)
+// or can we just compare address to vrrp->ifp->base_ifp address.
+// We still need to consider non-vmac IPv6 if interface doesn't have a
+// link local address.
+		if (h->nlmsg_type == RTM_NEWADDR) {
+			if (!ignore_address_if_ours_or_link_local(ifa, addr.addr, ifp)) {
+				/* If no address is set on interface then set the first time */
+// TODO if saddr from config && track saddr, addresses must match
+				if (ifa->ifa_family == AF_INET) {
+					if (!ifp->sin_addr.s_addr) {
+						ifp->sin_addr = *addr.in;
+						if (!LIST_ISEMPTY(ifp->tracking_vrrp))
+							addr_chg = true;
+					} else {
+						addr_p = MALLOC(sizeof(*addr.in));
+						*addr_p = *addr.in;
+						list_add(ifp->sin_addr_l, addr_p);
+					}
+				} else {
+					if (!ifp->sin6_addr.s6_addr32[0]) {
+						ifp->sin6_addr = *addr.in6;
+						if (!LIST_ISEMPTY(ifp->tracking_vrrp))
+							addr_chg = true;
+					}
+#if defined _HAVE_VRRP_VMAC_ && !HAVE_DECL_IFLA_INET6_ADDR_GEN_MODE
+					else if (ifp->is_ours && ifp->if_type == IF_TYPE_MACVLAN) {
+						/* We already have an address; is this an auto generated link local address?
+						 * For some reason if we recreate the VMAC when the underlying interface is
+						 * recreated, deleting the autogenerated address doesn't get rid of the address */
+						remove_vmac_auto_gen_addr(ifp, addr.in6);
+					}
+#endif
+					else {
+						addr6_p = MALLOC(sizeof(*addr.in6));
+						*addr6_p = *addr.in6;
+						list_add(ifp->sin6_addr_l, addr6_p);
+					}
+				}
+
+				if (addr_chg) {
+					if (__test_bit(LOG_DETAIL_BIT, &debug)) {
+						inet_ntop(ifa->ifa_family, addr.addr, addr_str, sizeof(addr_str));
+						log_message(LOG_INFO, "Assigned address %s for interface %s"
+								    , addr_str, ifp->ifname);
+					}
+
+					/* Now see if any vrrp instances were missing an interface address
+					 * and see if they can be brought up */
+					LIST_FOREACH(ifp->tracking_vrrp, tvp, e) {
+						vrrp = tvp->vrrp;
+
+						if (vrrp->track_saddr && vrrp->family == ifa->ifa_family)
+							is_tracking_saddr = inaddr_equal(ifa->ifa_family, &vrrp->saddr, addr.addr);
+						else
+							is_tracking_saddr = false;
+
+						if (ifp == (vrrp->family == AF_INET ? VRRP_CONFIGURED_IFP(vrrp) : vrrp->ifp) &&
+						    vrrp->num_script_if_fault &&
+						    vrrp->family == ifa->ifa_family &&
+						    vrrp->saddr.ss_family == AF_UNSPEC &&
+						    (!vrrp->saddr_from_config || is_tracking_saddr)) {
+							/* Copy the address */
+							if (ifa->ifa_family == AF_INET)
+								inet_ip4tosockaddr(addr.in, &vrrp->saddr);
+							else
+								inet_ip6tosockaddr(addr.in6, &vrrp->saddr);
+							try_up_instance(vrrp, false);
+						}
+#ifdef _HAVE_VRRP_VMAC_
+						/* If IPv6 link local and vmac doesn't have an address, add it to the vmac */
+						else if (vrrp->family == AF_INET6 &&
+							 ifp == vrrp->ifp->base_ifp &&
+							 IS_VLAN(vrrp->ifp) &&
+							 !__test_bit(VRRP_VMAC_XMITBASE_BIT, &vrrp->vmac_flags) &&
+							 vrrp->num_script_if_fault &&
+							 vrrp->family == ifa->ifa_family &&
+							 vrrp->saddr.ss_family == AF_UNSPEC &&
+							 (!vrrp->saddr_from_config || is_tracking_saddr)) {
+							if (add_link_local_address(vrrp->ifp, addr.in6)) {
+								inet_ip6tosockaddr(addr.in6, &vrrp->saddr);
+								try_up_instance(vrrp, false);
+							}
+						}
+#endif
+					}
+				}
+			}
+		} else {
+			/* Mark the address as needing to go. We can't delete the address
+			 * until after down_instance is called, since it sends a prio 0 message */
+			if (ifa->ifa_family == AF_INET) {
+				if (inaddr_equal(AF_INET, &ifp->sin_addr, addr.in)) {
+					if (LIST_ISEMPTY(ifp->sin_addr_l))
+						addr_chg = true;
+					else {
+						ifp->sin_addr = *(struct in_addr *)ELEMENT_DATA(LIST_HEAD(ifp->sin_addr_l));
+						list_remove(ifp->sin_addr_l, LIST_HEAD(ifp->sin_addr_l));
+						LIST_FOREACH(ifp->tracking_vrrp, tvp, e) {
+							vrrp = tvp->vrrp;
+							if (VRRP_CONFIGURED_IFP(vrrp) != ifp)
+								continue;
+							if (vrrp->family != AF_INET || vrrp->saddr_from_config)
+								continue;
+							inet_ip4tosockaddr(&ifp->sin_addr, &vrrp->saddr);
+						}
+					}
+				} else {
+					LIST_FOREACH(ifp->sin_addr_l, addr_p, e) {
+						if (addr_p->s_addr == addr.in->s_addr) {
+							list_remove(ifp->sin_addr_l, e);
+							break;
+						}
+					}
+				}
+			}
+			else if (ifa->ifa_scope == RT_SCOPE_LINK) {
+				if (inaddr_equal(AF_INET6, &ifp->sin6_addr, addr.in6)) {
+					if (LIST_ISEMPTY(ifp->sin6_addr_l))
+						addr_chg = true;
+					else {
+						ifp->sin6_addr = *(struct in6_addr *)ELEMENT_DATA(LIST_HEAD(ifp->sin6_addr_l));
+						list_remove(ifp->sin6_addr_l, LIST_HEAD(ifp->sin6_addr_l));
+						LIST_FOREACH(ifp->tracking_vrrp, tvp, e) {
+							vrrp = tvp->vrrp;
+							if (vrrp->ifp != ifp)
+								continue;
+							if (vrrp->family != AF_INET6 || vrrp->saddr_from_config)
+								continue;
+							inet_ip6tosockaddr(&ifp->sin6_addr, &vrrp->saddr);
+						}
+					}
+				} else {
+					LIST_FOREACH(ifp->sin6_addr_l, addr6_p, e) {
+						if (inaddr_equal(AF_INET6, addr6_p, addr.in6)) {
+							list_remove(ifp->sin6_addr_l, e);
+							break;
+						}
+					}
+				}
+			}
+
+			if (addr_chg && !LIST_ISEMPTY(ifp->tracking_vrrp)) {
+				if (__test_bit(LOG_DETAIL_BIT, &debug)) {
+					inet_ntop(ifa->ifa_family, addr.addr, addr_str, sizeof(addr_str));
+					log_message(LOG_INFO, "Deassigned address %s from interface %s"
+							    , addr_str, ifp->ifname);
+				}
+				if (ifa->ifa_family == AF_INET)
+					ifp->sin_addr.s_addr = 0;
+				else
+					ifp->sin6_addr.s6_addr32[0] = 0;
+
+				/* See if any vrrp instances need to be downed */
+				LIST_FOREACH(ifp->tracking_vrrp, tvp, e) {
+					vrrp = tvp->vrrp;
+
+					if (ifp != vrrp->ifp && ifp != VRRP_CONFIGURED_IFP(vrrp))
+						continue;
+					if (vrrp->family != ifa->ifa_family)
+						continue;
+					if (!inaddr_equal(ifa->ifa_family, vrrp->family == AF_INET ? &((struct sockaddr_in *)&vrrp->saddr)->sin_addr : (void *)&((struct sockaddr_in6 *)&vrrp->saddr)->sin6_addr, addr.addr))
+						continue;
+
+					is_tracking_saddr = vrrp->track_saddr &&
+							    vrrp->family == ifa->ifa_family &&
+							    inaddr_equal(ifa->ifa_family, &vrrp->saddr, addr.addr);
+#ifdef _HAVE_VRRP_VMAC_
+					/* If we are a VMAC and took this address from the parent interface, we need to
+					 * release the address and create one for ourself */
+					if (ifa->ifa_family == AF_INET6 &&
+					    __test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags) &&
+					    ifp == vrrp->ifp->base_ifp &&
+					    !__test_bit(VRRP_VMAC_XMITBASE_BIT, &vrrp->vmac_flags) &&
+					    !vrrp->saddr_from_config) {
+// This is rubbish if base i/f addr changed. Check against address generated from base i/f's MAC
+						if (IF_ISUP(ifp) && replace_link_local_address(vrrp->ifp))
+						{
+							addr_chg = false;
+							inet_ip6tosockaddr(&vrrp->ifp->sin6_addr, &vrrp->saddr);
+						}
+						else if (IF_ISUP(ifp)) {
+							/* We failed to add an address, so down the instance */
+							down_instance(vrrp);
+							vrrp->saddr.ss_family = AF_UNSPEC;
+						}
+					}
+					else
+#endif
+					     if (ifp == (vrrp->family == AF_INET ? VRRP_CONFIGURED_IFP(vrrp) : vrrp->ifp) &&
+						 vrrp->family == ifa->ifa_family &&
+						 vrrp->saddr.ss_family != AF_UNSPEC &&
+						 (!vrrp->saddr_from_config || is_tracking_saddr)) {
+						down_instance(vrrp);
+						vrrp->saddr.ss_family = AF_UNSPEC;
+					}
+				}
+			}
+
+			if (addr_chg) {
+				/* Now we can remove the address */
+				if (ifa->ifa_family == AF_INET)
+					ifp->sin_addr.s_addr = 0;
+				else
+					ifp->sin6_addr.s6_addr32[0] = 0;
+			}
+		}
+
+		if (!addr_chg || LIST_ISEMPTY(ifp->tracking_vrrp)) {
+			if (h->nlmsg_type == RTM_DELADDR)
+				address_vrrp = address_is_ours(ifa, addr.addr, ifp);
+			else
+				address_vrrp = NULL;
+
+			/* Display netlink operation */
+			if (
+#ifdef _WITH_LVS_
+			    __test_bit(LOG_ADDRESS_CHANGES, &debug) ||
+#endif
+			    (__test_bit(LOG_DETAIL_BIT, &debug) && address_vrrp)) {
+				inet_ntop(ifa->ifa_family, addr.addr, addr_str, sizeof(addr_str));
+				log_message(LOG_INFO, "Netlink reflector reports IP %s %s %s"
+						    , addr_str, h->nlmsg_type == RTM_NEWADDR ? "added to" : "removed from", ifp->ifname);
+			}
+
+			/* If one of our VIPs/eVIPs has been deleted, transition to backup */
+			if (address_vrrp && address_vrrp->state == VRRP_STATE_MAST) {
+				set_vrrp_backup(address_vrrp);
+			}
+		}
+
+		if (h->nlmsg_type == RTM_DELADDR) {
+			/* Check if a static address has been deleted */
+			LIST_FOREACH(vrrp_data->static_addresses, ipaddr, e) {
+				if (!ipaddr->dont_track && addr_is_equal(ifa, addr.addr, ipaddr, ifp)) {
+					reinstate_static_address(ipaddr, NULL);
+					break;
+				}
+			}
+		}
+	}
+#endif
+
+#ifdef _WITH_LVS_
+#ifndef _DEBUG_
+	if (prog_type == PROG_TYPE_CHECKER)
+#endif
+	{
+		/* Refresh checkers state */
+		update_checker_activity(ifa->ifa_family, addr.addr,
+					(h->nlmsg_type == RTM_NEWADDR));
+	}
+#endif
+
+	return 0;
+}
+
+/* Our netlink parser */
+static int
+netlink_parse_info(int (*filter) (struct sockaddr_nl *, struct nlmsghdr *),
+		   nl_handle_t *nl, struct nlmsghdr *n, bool read_all)
+{
+	ssize_t len;
+	int ret = 0;
+	int error;
+	char *nlmsg_buf = NULL;
+	int nlmsg_buf_size = 0;
+
+	while (true) {
+		struct iovec iov = {
+			.iov_len = 0
+		};
+		struct sockaddr_nl snl;
+		struct msghdr msg = {
+			.msg_name = &snl,
+			.msg_namelen = sizeof(snl),
+			.msg_iov = &iov,
+			.msg_iovlen = 1,
+			.msg_control = NULL,
+			.msg_controllen = 0,
+			.msg_flags = 0
+		};
+		struct nlmsghdr *h;
+
+		/* Find out how big our receive buffer needs to be */
+		do {
+			len = recvmsg(nl->fd, &msg, MSG_PEEK | MSG_TRUNC);
+		} while (len < 0 && check_EINTR(errno));
+
+		if (len < 0) {
+			ret = -1;
+			break;
+		}
+
+		if (len == 0)
+			break;
+
+		if (len > nlmsg_buf_size) {
+			FREE_PTR(nlmsg_buf);
+			nlmsg_buf = MALLOC(len);
+			nlmsg_buf_size = len;
+		}
+
+		iov.iov_base = nlmsg_buf;
+		iov.iov_len = nlmsg_buf_size;
+
+		do {
+			len = recvmsg(nl->fd, &msg, 0);
+		} while (len < 0 && check_EINTR(errno));
+
+		if (len < 0) {
+			if (check_EAGAIN(errno))
+				break;
+			if (errno == ENOBUFS) {
+				log_message(LOG_INFO, "Netlink: Receive buffer overrun on %s socket - (%m)", nl == &nl_kernel ? "monitor" : "cmd");
+				log_message(LOG_INFO, "  - increase the relevant netlink_rcv_bufs global parameter and/or set force");
+			}
+			else
+				log_message(LOG_INFO, "Netlink: recvmsg error on %s socket  - %d (%m)", nl == &nl_kernel ? "monitor" : "cmd", errno);
+			continue;
+		}
+
+		if (len == 0) {
+			log_message(LOG_INFO, "Netlink: EOF");
+			ret = -1;
+			break;
+		}
+
+		if (msg.msg_namelen != sizeof snl) {
+			log_message(LOG_INFO,
+			       "Netlink: Sender address length error: length %u",
+			       msg.msg_namelen);
+			ret = -1;
+			break;
+		}
+
+		for (h = (struct nlmsghdr *) nlmsg_buf; NLMSG_OK(h, (size_t)len); h = NLMSG_NEXT(h, len)) {
+			/* Finish off reading. */
+			if (h->nlmsg_type == NLMSG_DONE) {
+				FREE(nlmsg_buf);
+				return ret;
+			}
+
+			/* Error handling. */
+			if (h->nlmsg_type == NLMSG_ERROR) {
+				struct nlmsgerr *err = (struct nlmsgerr *) NLMSG_DATA(h);
+
+				/*
+				 * If error == 0 then this is a netlink ACK.
+				 * return if not related to multipart message.
+				 */
+				if (err->error == 0) {
+					if (!(h->nlmsg_flags & NLM_F_MULTI) && !read_all) {
+						FREE(nlmsg_buf);
+						return 0;
+					}
+					continue;
+				}
+
+				if (h->nlmsg_len < NLMSG_LENGTH(sizeof (struct nlmsgerr))) {
+					log_message(LOG_INFO,
+					       "Netlink: error: message truncated");
+					FREE(nlmsg_buf);
+					return -1;
+				}
+
+				if (n && (err->error == -EEXIST) &&
+				    ((n->nlmsg_type == RTM_NEWROUTE) ||
+				     (n->nlmsg_type == RTM_NEWADDR))) {
+					FREE(nlmsg_buf);
+					return 0;
+				}
+
+				/* If have more than one IPv4 address in the same CIDR
+				 * and the "primary" address is removed, unless promote_secondaries
+				 * is configured on the interface, all the "secondary" addresses
+				 * in the same CIDR are deleted */
+				if (n && err->error == -EADDRNOTAVAIL &&
+				    n->nlmsg_type == RTM_DELADDR) {
+					if (!(h->nlmsg_flags & NLM_F_MULTI)) {
+						FREE(nlmsg_buf);
+						return 0;
+					}
+					continue;
+				}
+#ifdef _WITH_VRRP_
+				if (netlink_error_ignore != -err->error)
+#endif
+					log_message(LOG_INFO,
+					       "Netlink: error: %s(%d), type=%s(%u), seq=%u, pid=%u",
+					       strerror(-err->error), -err->error,
+					       get_nl_msg_type(err->msg.nlmsg_type), err->msg.nlmsg_type,
+					       err->msg.nlmsg_seq, err->msg.nlmsg_pid);
+
+				FREE(nlmsg_buf);
+				return -1;
+			}
+
+#ifdef _WITH_VRRP_
+			/* Skip unsolicited messages from cmd channel */
+			if (
+#ifndef _DEBUG_
+			    prog_type == PROG_TYPE_VRRP &&
+#endif
+			    h->nlmsg_type != RTM_NEWLINK &&
+			    h->nlmsg_type != RTM_DELLINK &&
+			    h->nlmsg_type != RTM_NEWROUTE &&
+			    nl != &nl_cmd && h->nlmsg_pid == nl_cmd.nl_pid)
+				continue;
+#endif
+
+			error = (*filter) (&snl, h);
+			if (error < 0) {
+				log_message(LOG_INFO, "Netlink: filter function error");
+				ret = error;
+			}
+
+			if (!(h->nlmsg_flags & NLM_F_MULTI) && !read_all) {
+				FREE(nlmsg_buf);
+				return ret;
+			}
+		}
+
+		/* After error care. */
+		if (msg.msg_flags & MSG_TRUNC) {
+			log_message(LOG_INFO, "Netlink: error: message truncated");
+			continue;
+		}
+		if (len) {
+			log_message(LOG_INFO, "Netlink: error: data remnant size %zd",
+			       len);
+
+			ret = -1;
+			break;
+		}
+	}
+
+	if (nlmsg_buf)
+		FREE(nlmsg_buf);
+
+	return ret;
+}
+
+#ifdef _WITH_VRRP_
+/* Out talk filter */
+static int
+netlink_talk_filter(__attribute__((unused)) struct sockaddr_nl *snl, struct nlmsghdr *h)
+{
+	log_message(LOG_INFO, "Netlink: ignoring message type 0x%04x", h->nlmsg_type);
+
+	return 0;
+}
+
+/* send message to netlink kernel socket, then receive response */
+ssize_t
+netlink_talk(nl_handle_t *nl, struct nlmsghdr *n)
+{
+	ssize_t status;
+	struct sockaddr_nl snl;
+	struct iovec iov = {
+		.iov_base = n,
+		.iov_len = n->nlmsg_len
+	};
+	struct msghdr msg = {
+		.msg_name = &snl,
+		.msg_namelen = sizeof(snl),
+		.msg_iov = &iov,
+		.msg_iovlen = 1,
+		.msg_control = NULL,
+		.msg_controllen = 0,
+		.msg_flags = 0
+	};
+
+	memset(&snl, 0, sizeof snl);
+	snl.nl_family = AF_NETLINK;
+
+	n->nlmsg_seq = ++nl->seq;
+
+	/* Request Netlink acknowledgement */
+	n->nlmsg_flags |= NLM_F_ACK;
+
+#ifdef _NETLINK_TIMERS_
+	gettimeofday(&start_time, NULL);
+#endif
+
+	/* Send message to netlink interface. */
+	status = sendmsg(nl->fd, &msg, 0);
+	if (status < 0) {
+		log_message(LOG_INFO, "Netlink: sendmsg(%d) cmd %d error: %s", nl->fd, n->nlmsg_type,
+		       strerror(errno));
+		return -1;
+	}
+
+	status = netlink_parse_info(netlink_talk_filter, nl, n, false);
+
+#ifdef _NETLINK_TIMERS_
+	/* Special case for NEWLINK - treat create separately; it is also used to up an interface etc. */
+	int index = n->nlmsg_type == RTM_NEWLINK && (n->nlmsg_flags & NLM_F_CREATE) ? 0 : n->nlmsg_type;
+	gettimeofday(&end_time, NULL);
+	if (index <= MAX_NETLINK_TIMER) {
+		netlink_times[index].tv_sec += end_time.tv_sec - start_time.tv_sec;
+		netlink_times[index].tv_usec += end_time.tv_usec - start_time.tv_usec;
+		netlink_count[index]++;
+		if (netlink_times[index].tv_usec < 0)
+			netlink_times[index].tv_usec += 1000000, netlink_times[index].tv_sec--;
+		else if (netlink_times[index].tv_usec > 1000000)
+			netlink_times[index].tv_usec -= 1000000, netlink_times[index].tv_sec++;
+	}
+#endif
+
+	return status;
+}
+#endif
+
+/* Fetch a specific type of information from netlink kernel */
+static int
+netlink_request(nl_handle_t *nl,
+		unsigned char family,
+		uint16_t type,
+#ifndef _WITH_VRRP_
+		__attribute__((unused))
+#endif
+					char *name)
+{
+	ssize_t status;
+	struct sockaddr_nl snl;
+	struct {
+		struct nlmsghdr nlh;
+		struct ifinfomsg i;
+		char buf[64];
+	} req;
+
+	/* Cleanup the room */
+	memset(&snl, 0, sizeof (snl));
+	snl.nl_family = AF_NETLINK;
+
+	memset(&req, 0, sizeof req);
+	req.nlh.nlmsg_len = NLMSG_LENGTH(sizeof req.i);
+	req.nlh.nlmsg_type = type;
+	req.nlh.nlmsg_flags = NLM_F_REQUEST;
+	req.nlh.nlmsg_pid = 0;
+	req.nlh.nlmsg_seq = ++nl->seq;
+	req.i.ifi_family = family;
+
+#ifdef _WITH_VRRP_
+	if (name)
+		addattr_l(&req.nlh, sizeof req, IFLA_IFNAME, name, strlen(name) + 1);
+	else
+#endif
+		req.nlh.nlmsg_flags |= NLM_F_DUMP;
+#if HAVE_DECL_RTEXT_FILTER_SKIP_STATS
+	addattr32(&req.nlh, sizeof req, IFLA_EXT_MASK, RTEXT_FILTER_SKIP_STATS);
+#endif
+
+	status = sendto(nl->fd, (void *) &req, sizeof (req)
+			, 0, (struct sockaddr *) &snl, sizeof (snl));
+	if (status < 0) {
+		log_message(LOG_INFO, "Netlink: sendto() failed: %s",
+		       strerror(errno));
+		return -1;
+	}
+	return 0;
+}
+
+#ifdef _WITH_VRRP_
+void
+process_if_status_change(interface_t *ifp)
+{
+	vrrp_t *vrrp;
+	element e;
+	tracking_vrrp_t *tvp;
+	bool now_up = FLAGS_UP(ifp->ifi_flags);
+
+	/* The state of the interface has changed from up to down or vice versa.
+	 * Find which vrrp instances are affected */
+	LIST_FOREACH(ifp->tracking_vrrp, tvp, e) {
+		vrrp = tvp->vrrp;
+
+		if (tvp->weight == VRRP_NOT_TRACK_IF) {
+			/* We might want to restore things to the interface if it is coming up */
+			continue;
+		}
+
+		if (tvp->weight) {
+			if (now_up)
+				vrrp->total_priority += abs(tvp->weight) * tvp->weight_multiplier;
+			else
+				vrrp->total_priority -= abs(tvp->weight) * tvp->weight_multiplier;
+			vrrp_set_effective_priority(vrrp);
+
+			continue;
+		}
+
+		/* This vrrp's interface or underlying interface has changed */
+		if (now_up == (tvp->weight_multiplier == 1))
+			try_up_instance(vrrp, false);
+		else
+			down_instance(vrrp);
+	}
+}
+
+static void
+update_interface_flags(interface_t *ifp, unsigned ifi_flags)
+{
+	bool was_up, now_up;
+
+	if (ifi_flags == ifp->ifi_flags)
+		return;
+
+	if (!vrrp_data)
+		return;
+
+	/* We get called after a VMAC is created, but before tracking_vrrp is set */
+
+	/* For an interface to be really up, any underlying interface must also be up */
+	was_up = IF_FLAGS_UP(ifp);
+	now_up = FLAGS_UP(ifi_flags);
+	ifp->ifi_flags = ifi_flags;
+
+	if (was_up == now_up)
+		return;
+
+	if (ifp->tracking_vrrp) {
+		log_message(LOG_INFO, "Netlink reports %s %s", ifp->ifname, now_up ? "up" : "down");
+
+		process_if_status_change(ifp);
+	}
+
+	if (!now_up)
+		interface_down(ifp);
+	else
+		interface_up(ifp);
+}
+
+static const char *
+get_mac_string(int type)
+ {
+	switch (type) {
+	case IFLA_BROADCAST:
+		return "Broadcast";
+	case IFLA_ADDRESS:
+		return "Address";
+	default:
+		return "Unknown Type";
+	}
+}
+
+static bool
+netlink_if_get_ll_addr(interface_t *ifp, struct rtattr *tb[],
+				  int type, char *name)
+{
+	size_t i;
+
+	if (tb[type]) {
+		size_t hw_addr_len = RTA_PAYLOAD(tb[type]);
+
+		if (hw_addr_len > sizeof(ifp->hw_addr)) {
+			log_message(LOG_ERR,
+				    " %s MAC address for %s is too large: %zu",
+				    get_mac_string(type), name, hw_addr_len);
+			return false;
+		}
+
+		switch (type) {
+
+		case IFLA_ADDRESS:
+			ifp->hw_addr_len = hw_addr_len;
+			memcpy(ifp->hw_addr, RTA_DATA(tb[type]), hw_addr_len);
+			/*
+			 * Don't allow a hardware address of all zeroes
+			 * Mark hw_addr_len as 0 to warn
+			 */
+			for (i = 0; i < hw_addr_len; i++)
+				if (ifp->hw_addr[i] != 0)
+					break;
+			if (i == hw_addr_len)
+				ifp->hw_addr_len = 0;
+			else
+				ifp->hw_addr_len = hw_addr_len;
+			break;
+
+		case IFLA_BROADCAST:
+			memcpy(ifp->hw_addr_bcast, RTA_DATA(tb[type]),
+			       hw_addr_len);
+			break;
+
+		default:
+			return false;
+		}
+	}
+
+	return true;
+}
+
+#ifdef _HAVE_IPV4_DEVCONF_
+static void
+parse_af_spec(struct rtattr* attr, interface_t *ifp)
+{
+	struct rtattr* afspec[AF_INET6 + 1];
+	struct rtattr* inet[IFLA_INET_MAX + 1];
+	uint32_t* inet_devconf;
+
+	if (!attr)
+		return;
+
+	parse_rtattr_nested(afspec, AF_INET6, attr);
+	if (afspec[AF_INET]) {
+		parse_rtattr_nested(inet, IFLA_INET_MAX, afspec[AF_INET]);
+		if (inet[IFLA_INET_CONF]) {
+			inet_devconf = RTA_DATA(inet[IFLA_INET_CONF]);
+#ifdef _HAVE_VRRP_VMAC_
+			ifp->arp_ignore = inet_devconf[IPV4_DEVCONF_ARP_IGNORE - 1];
+			ifp->arp_filter = inet_devconf[IPV4_DEVCONF_ARPFILTER - 1];
+			if (ifp->rp_filter == UINT_MAX)
+				ifp->rp_filter = inet_devconf[IPV4_DEVCONF_RP_FILTER - 1];
+#endif
+			ifp->promote_secondaries = inet_devconf[IPV4_DEVCONF_PROMOTE_SECONDARIES - 1];
+		}
+	}
+}
+#endif
+
+static bool
+netlink_if_link_populate(interface_t *ifp, struct rtattr *tb[], struct ifinfomsg *ifi)
+{
+	char *name;
+#ifdef _HAVE_VRRP_VMAC_
+	struct rtattr* linkinfo[IFLA_INFO_MAX+1];
+#ifdef _HAVE_VRRP_IPVLAN_
+	struct rtattr* linkattr[max(max(IFLA_MACVLAN_MAX, IFLA_IPVLAN_MAX), IFLA_VRF_MAX) + 1];
+#elif defined _HAVE_VRF_
+	struct rtattr* linkattr[max(IFLA_MACVLAN_MAX, IFLA_VRF_MAX) + 1];
+#else
+	struct rtattr* linkattr[IFLA_MACVLAN_MAX + 1];
+#endif
+	bool was_vlan;
+#ifdef _HAVE_VRF_
+	struct rtattr *vrf_attr[IFLA_VRF_MAX + 1];
+	bool is_vrf = false;
+	uint32_t new_vrf_master_index;
+	bool is_vrf_master = false;
+#endif
+#endif
+
+#ifdef _HAVE_VRRP_VMAC_
+	was_vlan = IS_VLAN(ifp);
+#endif
+
+	name = (char *)RTA_DATA(tb[IFLA_IFNAME]);
+
+	/* Fill the interface structure */
+	strcpy_safe(ifp->ifname, name);
+	ifp->ifindex = (ifindex_t)ifi->ifi_index;
+	ifp->if_type = IF_TYPE_STANDARD;
+#ifdef HAVE_IFLA_LINK_NETNSID						/* from Linux v4.0 */
+	ifp->base_netns_id = -1;
+#endif
+
+#ifdef _HAVE_VRRP_VMAC_
+	if (tb[IFLA_LINKINFO]) {
+		parse_rtattr_nested(linkinfo, IFLA_INFO_MAX, tb[IFLA_LINKINFO]);
+
+		if (linkinfo[IFLA_INFO_KIND]) {
+			if (!strcmp((char *)RTA_DATA(linkinfo[IFLA_INFO_KIND]), "macvlan") ||
+			    !strcmp((char *)RTA_DATA(linkinfo[IFLA_INFO_KIND]), "macvtap")) {
+				ifp->if_type = IF_TYPE_MACVLAN;
+				parse_rtattr_nested(linkattr, IFLA_MACVLAN_MAX, linkinfo[IFLA_INFO_DATA]);
+			}
+#ifdef _HAVE_VRRP_IPVLAN_
+			else if (!strcmp((char *)RTA_DATA(linkinfo[IFLA_INFO_KIND]), "ipvlan") ||
+				 !strcmp((char *)RTA_DATA(linkinfo[IFLA_INFO_KIND]), "ipvtap")) {
+				ifp->if_type = IF_TYPE_IPVLAN;
+				parse_rtattr_nested(linkattr, IFLA_IPVLAN_MAX, linkinfo[IFLA_INFO_DATA]);
+			}
+#endif
+#ifdef _HAVE_VRF_
+			else if (!strcmp((char *)RTA_DATA(linkinfo[IFLA_INFO_KIND]), "vrf") ) {
+				is_vrf = true;
+				ifp->if_type = IF_TYPE_VRF;
+				parse_rtattr_nested(vrf_attr, IFLA_VRF_MAX, linkinfo[IFLA_INFO_DATA]);
+			}
+#endif
+		}
+	}
+
+#ifdef _HAVE_IPV4_DEVCONF_
+	if (tb[IFLA_AF_SPEC])
+		parse_af_spec(tb[IFLA_AF_SPEC], ifp);
+#endif
+
+	/* Check there hasn't been an unsupported interface type change */
+	if (!global_data->allow_if_changes && ifp->seen_interface) {
+		/* If it was a macvlan and now isn't, or vice versa,
+		 * then the interface type has changed */
+		if (IS_VLAN(ifp) != was_vlan)
+			return false;
+
+		/* If a macvlan, check the underlying interface hasn't changed */
+		if (IS_VLAN(ifp) &&
+		    (!tb[IFLA_LINK] || ifp->base_ifp->ifindex != *(uint32_t *)RTA_DATA(tb[IFLA_LINK])))
+			return false;
+	}
+#endif
+
+	ifp->mtu = *(uint32_t *)RTA_DATA(tb[IFLA_MTU]);
+	ifp->hw_type = ifi->ifi_type;
+
+	if (!netlink_if_get_ll_addr(ifp, tb, IFLA_ADDRESS, name))
+		return false;
+	if (!netlink_if_get_ll_addr(ifp, tb, IFLA_BROADCAST, name))
+		return false;
+
+#ifdef _HAVE_VRRP_VMAC_
+	ifp->base_ifp = ifp;
+	ifp->base_ifindex = 0;
+
+	if (tb[IFLA_LINKINFO]) {
+		if (linkinfo[IFLA_INFO_KIND]) {
+			/* See if this interface is a MACVLAN */
+			if (IS_VLAN(ifp)) {
+				if (((ifp->if_type == IF_TYPE_MACVLAN && linkattr[IFLA_MACVLAN_MODE])
+#ifdef _HAVE_VRRP_IPVLAN_
+				     || (ifp->if_type == IF_TYPE_IPVLAN && linkattr[IFLA_IPVLAN_MODE])
+#endif
+												      )	&&
+				    tb[IFLA_LINK]) {
+					if (ifp->if_type == IF_TYPE_MACVLAN)
+						ifp->vmac_type = *(uint32_t*)RTA_DATA(linkattr[IFLA_MACVLAN_MODE]);
+#ifdef _HAVE_VRRP_IPVLAN_
+					else
+						ifp->vmac_type = *(uint32_t*)RTA_DATA(linkattr[IFLA_IPVLAN_MODE]);
+#endif
+					ifp->base_ifindex = *(uint32_t *)RTA_DATA(tb[IFLA_LINK]);
+#ifdef HAVE_IFLA_LINK_NETNSID						/* from Linux v4.0 */
+					if (tb[IFLA_LINK_NETNSID])	/* Only use link details if in same network namespace */
+						ifp->base_netns_id = *(int32_t *)RTA_DATA(tb[IFLA_LINK_NETNSID]);
+					else
+#endif
+					{
+						ifp->base_ifp = if_get_by_ifindex(ifp->base_ifindex);
+						if (ifp->base_ifp)
+							ifp->base_ifindex = 0;	/* Make sure this isn't used at runtime */
+						else
+							ifp->base_ifp = ifp;
+					}
+				}
+			}
+#ifdef _HAVE_VRF_
+			else if (is_vrf) {
+				if (vrf_attr[IFLA_VRF_TABLE])
+				{
+					ifp->vrf_master_ifp = ifp;
+					is_vrf_master = true;
+				}
+			}
+#endif
+
+#ifdef _FIXED_IF_TYPE_
+			if (strcmp(_FIXED_IF_TYPE_, (char *)RTA_DATA(linkinfo[IFLA_INFO_KIND])))
+#endif
+				ifp->changeable_type = true;
+		}
+	}
+
+#ifdef _HAVE_VRF_
+	/* If we don't have the master interface details yet, we won't know
+	 * if the master is a VRF master, but we sort that out later */
+	if (!is_vrf_master) {
+		if (tb[IFLA_MASTER]) {
+			new_vrf_master_index = *(uint32_t*)RTA_DATA(tb[IFLA_MASTER]);
+			if (!ifp->vrf_master_ifp ||
+			    new_vrf_master_index != ifp->vrf_master_ifp->ifindex) {
+				ifp->vrf_master_ifindex = new_vrf_master_index;
+				ifp->vrf_master_ifp = if_get_by_ifindex(ifp->vrf_master_ifindex);
+				if (ifp->vrf_master_ifp) {
+					if (ifp->vrf_master_ifp->vrf_master_ifp != ifp->vrf_master_ifp)
+						ifp->vrf_master_ifp = NULL;
+					ifp->vrf_master_ifindex = 0;	/* Make sure this isn't used at runtime */
+
+					update_vmac_vrfs(ifp);
+				}
+			}
+		} else {
+			ifp->vrf_master_ifindex = 0;
+			if (ifp->vrf_master_ifp) {
+				ifp->vrf_master_ifp = NULL;
+
+				update_vmac_vrfs(ifp);
+			}
+		}
+	}
+#endif
+
+	ifp->rp_filter = UINT_MAX;	/* We have not read it yet */
+#endif
+
+	ifp->ifi_flags = ifi->ifi_flags;
+
+	return true;
+}
+
+/* Netlink interface link lookup filter */
+static int
+netlink_if_link_filter(__attribute__((unused)) struct sockaddr_nl *snl, struct nlmsghdr *h)
+{
+	struct ifinfomsg *ifi;
+	struct rtattr *tb[IFLA_MAX + 1];
+	interface_t *ifp;
+	size_t len;
+	char *name;
+
+	ifi = NLMSG_DATA(h);
+
+	if (h->nlmsg_type != RTM_NEWLINK)
+		return 0;
+
+	if (h->nlmsg_len < NLMSG_LENGTH(sizeof (struct ifinfomsg)))
+		return -1;
+	len = h->nlmsg_len - NLMSG_LENGTH(sizeof (struct ifinfomsg));
+
+	/* Interface name lookup */
+	parse_rtattr(tb, IFLA_MAX, IFLA_RTA(ifi), len);
+
+	if (tb[IFLA_IFNAME] == NULL)
+		return -1;
+	name = (char *) RTA_DATA(tb[IFLA_IFNAME]);
+
+	/* Skip it if already exists */
+	ifp = if_get_by_ifname(name, IF_CREATE_NETLINK);
+
+	/* Fill the interface structure */
+	if (!netlink_if_link_populate(ifp, tb, ifi))
+		return -1;
+
+	if (ifp->ifindex)
+		update_interface_flags(ifp, ifi->ifi_flags);
+
+	return 0;
+}
+
+/* Interfaces lookup bootstrap function */
+int
+netlink_interface_lookup(char *name)
+{
+	/* Interface lookup */
+
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,33)
+	/* RTM_NETLINK didn't support selecting by
+	 * interface name until Linux v2.6.33 */
+	name = NULL;
+#endif
+
+	if (netlink_request(&nl_cmd, AF_PACKET, RTM_GETLINK, name) < 0)
+		return -1;
+
+	return netlink_parse_info(netlink_if_link_filter, &nl_cmd, NULL, false);
+}
+#endif
+
+/* Addresses lookup bootstrap function */
+static int
+netlink_address_lookup(void)
+{
+	int status;
+
+	/* IPv4 Address lookup */
+	if (netlink_request(&nl_cmd, AF_INET, RTM_GETADDR, NULL) < 0)
+		return -1;
+
+	if ((status = netlink_parse_info(netlink_if_address_filter, &nl_cmd, NULL, false)))
+		return status;
+
+	/* IPv6 Address lookup */
+	if (netlink_request(&nl_cmd, AF_INET6, RTM_GETADDR, NULL) < 0)
+		return -1;
+
+	return netlink_parse_info(netlink_if_address_filter, &nl_cmd, NULL, false);
+}
+
+#ifdef _WITH_VRRP_
+/* Netlink flag Link update */
+static int
+netlink_link_filter(__attribute__((unused)) struct sockaddr_nl *snl, struct nlmsghdr *h)
+{
+	struct ifinfomsg *ifi;
+	struct rtattr *tb[IFLA_MAX + 1];
+	interface_t *ifp;
+	size_t len;
+	char *name;
+#ifdef _HAVE_VRF_
+	uint32_t new_master_index;
+	interface_t *new_master_ifp;
+#endif
+	uint32_t old_mtu;
+	size_t hw_addr_len;
+	char mac_buf[3 * sizeof(ifp->hw_addr)];
+	char old_mac_buf[3 * sizeof(ifp->hw_addr)];
+	list old_tracking_vrrp;
+
+	if (!(h->nlmsg_type == RTM_NEWLINK || h->nlmsg_type == RTM_DELLINK))
+		return 0;
+
+	if (h->nlmsg_len < NLMSG_LENGTH(sizeof (struct ifinfomsg)))
+		return -1;
+	len = h->nlmsg_len - NLMSG_LENGTH(sizeof (struct ifinfomsg));
+
+	/* Interface name lookup */
+	ifi = NLMSG_DATA(h);
+	parse_rtattr(tb, IFLA_MAX, IFLA_RTA(ifi), len);
+	if (tb[IFLA_IFNAME] == NULL)
+		return -1;
+	name = (char *)RTA_DATA(tb[IFLA_IFNAME]);
+
+	/* Ignore NEWLINK messages with ifi_change == 0 and IFLA_WIRELESS set
+	   See for example https://bugs.chromium.org/p/chromium/issues/detail?id=501982 */
+	if (!ifi->ifi_change && tb[IFLA_WIRELESS] && h->nlmsg_type == RTM_NEWLINK)
+		return 0;
+
+	/* find the interface_t. If the interface doesn't exist in the interface
+	 * list and this is a new interface add it to the interface list.
+	 * If an interface with the same name exists overwrite the older
+	 * structure and fill it with the new interface information.
+	 */
+	ifp = if_get_by_ifindex((ifindex_t)ifi->ifi_index);
+
+	if (ifp) {
+		if (h->nlmsg_type == RTM_DELLINK) {
+			if (!LIST_ISEMPTY(ifp->tracking_vrrp) || __test_bit(LOG_DETAIL_BIT, &debug))
+				log_message(LOG_INFO, "Interface %s deleted", ifp->ifname);
+#ifndef _DEBUG_
+			if (prog_type != PROG_TYPE_VRRP) {
+				ifp->ifi_flags = 0;
+				ifp->ifindex = 0;
+			} else
+#endif
+				cleanup_lost_interface(ifp);
+
+#ifdef _HAVE_VRRP_VMAC_
+			/* If this was a vmac we created, create it again, so long as the underlying i/f exists */
+			if (ifp->is_ours
+#ifndef _DEBUG_
+			    && prog_type == PROG_TYPE_VRRP
+#endif
+							  )
+				thread_add_event(master, recreate_vmac_thread, ifp, 0);
+#endif
+		} else {
+			if (tb[IFLA_ADDRESS]) {
+				hw_addr_len = RTA_PAYLOAD(tb[IFLA_ADDRESS]);
+
+				if (ifp->hw_addr_len != hw_addr_len || memcmp(ifp->hw_addr, RTA_DATA(tb[IFLA_ADDRESS]), hw_addr_len)) {
+					if (hw_addr_len > sizeof(ifp->hw_addr)) {
+						log_message(LOG_ERR,
+							    "MAC %s for %s is too large: %zu",
+							    get_mac_string(IFLA_ADDRESS), ifp->ifname, hw_addr_len);
+					} else {
+						if (__test_bit(LOG_DETAIL_BIT, &debug))
+							format_mac_buf(old_mac_buf, sizeof old_mac_buf, ifp->hw_addr, ifp->hw_addr_len);
+						ifp->hw_addr_len = hw_addr_len;
+						memcpy(ifp->hw_addr, RTA_DATA(tb[IFLA_ADDRESS]), hw_addr_len);
+						if (__test_bit(LOG_DETAIL_BIT, &debug)) {
+							format_mac_buf(mac_buf, sizeof mac_buf, ifp->hw_addr, ifp->hw_addr_len);
+							log_message(LOG_INFO, "(%s) MAC %s changed from %s to %s",
+								    ifp->ifname, get_mac_string(IFLA_ADDRESS), old_mac_buf, mac_buf);
+						}
+					}
+				}
+			}
+
+			if (tb[IFLA_BROADCAST]) {
+				hw_addr_len = RTA_PAYLOAD(tb[IFLA_BROADCAST]);
+
+				if (ifp->hw_addr_len && ifp->hw_addr_len != hw_addr_len)
+					log_message(LOG_ERR, "MAC broadcast address length %zu does not match MAC address length %zu", hw_addr_len, ifp->hw_addr_len);
+				else if(memcmp(ifp->hw_addr_bcast, RTA_DATA(tb[IFLA_BROADCAST]), hw_addr_len)) {
+					if (hw_addr_len > sizeof(ifp->hw_addr_bcast)) {
+						log_message(LOG_ERR, "MAC %s for %s is too large: %zu",
+							    get_mac_string(IFLA_BROADCAST), ifp->ifname, hw_addr_len);
+					} else {
+						if (__test_bit(LOG_DETAIL_BIT, &debug))
+							format_mac_buf(old_mac_buf, sizeof old_mac_buf, ifp->hw_addr_bcast, ifp->hw_addr_len);
+						ifp->hw_addr_len = hw_addr_len;
+						memcpy(ifp->hw_addr_bcast, RTA_DATA(tb[IFLA_BROADCAST]), hw_addr_len);
+						if (__test_bit(LOG_DETAIL_BIT, &debug)) {
+							format_mac_buf(mac_buf, sizeof mac_buf, ifp->hw_addr_bcast, ifp->hw_addr_len);
+							log_message(LOG_INFO, "(%s) MAC %s changed from %s to %s", ifp->ifname, get_mac_string(IFLA_BROADCAST), old_mac_buf, mac_buf);
+						}
+					}
+				}
+			}
+
+			if (strcmp(ifp->ifname, name)) {
+				/* The name can change, so handle that here */
+				log_message(LOG_INFO, "Interface name has changed from %s to %s", ifp->ifname, name);
+
+#ifndef _DEBUG_
+				if (prog_type != PROG_TYPE_VRRP) {
+					ifp->ifi_flags = 0;
+					ifp->ifindex = 0;
+				} else
+#endif
+					cleanup_lost_interface(ifp);
+
+#ifdef _HAVE_VRRP_VMAC_
+				/* If this was one of our vmacs, create it again */
+				if (ifp->is_ours
+#ifndef _DEBUG_
+				    && prog_type == PROG_TYPE_VRRP
+#endif
+								)
+				{
+					/* Change the mac address on the interface, so we can create a new vmac */
+
+					/* Now create our VMAC again */
+					if (ifp->base_ifp->ifindex)
+						thread_add_event(master, recreate_vmac_thread, ifp, 0);
+				}
+				else
+#endif
+					ifp = NULL;	/* Set ifp to null, to force creating a new interface_t */
+			} else if (ifp->ifindex) {
+#ifdef _HAVE_VRF_
+				/* Now check if the VRF info is changed */
+				if (tb[IFLA_MASTER]) {
+					new_master_index = *(uint32_t *)RTA_DATA(tb[IFLA_MASTER]);
+					new_master_ifp = if_get_by_ifindex(new_master_index);
+				} else
+					new_master_ifp = NULL;
+				if (new_master_ifp != ifp->vrf_master_ifp) {
+					ifp->vrf_master_ifp = new_master_ifp;
+					update_vmac_vrfs(ifp);
+				}
+#endif
+
+				/* Check if the MTU has increased */
+				if (
+#ifndef _DEBUG_
+				    prog_type == PROG_TYPE_VRRP &&
+#endif
+				    tb[IFLA_MTU]) {
+					old_mtu = ifp->mtu;
+					ifp->mtu = *(uint32_t *)RTA_DATA(tb[IFLA_MTU]);
+					if (!LIST_ISEMPTY(ifp->tracking_vrrp))
+						update_mtu(ifp);
+				}
+
+#ifdef _HAVE_IPV4_DEVCONF_
+				if (tb[IFLA_AF_SPEC])
+					parse_af_spec(tb[IFLA_AF_SPEC], ifp);
+#endif
+
+#ifdef _WITH_LINKBEAT_
+				/* Ignore interface if we are using linkbeat on it */
+				if (ifp->linkbeat_use_polling)
+					return 0;
+#endif
+			} else
+				ifp = NULL;
+		}
+	}
+
+	if (!ifp) {
+		if (h->nlmsg_type == RTM_NEWLINK) {
+			ifp = if_get_by_ifname(name, IF_CREATE_NETLINK);
+
+			/* Since the garp_delay and tracking_vrrp are set up by name,
+			 * it is reasonable to preserve them.
+			 * If what is created is a vmac, we could end up in a complete mess. */
+			garp_delay_t *sav_garp_delay = ifp->garp_delay;
+			list sav_tracking_vrrp = ifp->tracking_vrrp;
+
+			old_mtu = ifp->mtu;
+			free_list(&ifp->sin_addr_l);
+			free_list(&ifp->sin6_addr_l);
+			old_tracking_vrrp = ifp->tracking_vrrp;
+
+			memset(ifp, 0, sizeof(interface_t));
+
+			/* Re-establish lists */
+			ifp->sin_addr_l = alloc_list(free_list_element_simple, NULL);
+			ifp->sin6_addr_l = alloc_list(free_list_element_simple, NULL);
+			ifp->tracking_vrrp = old_tracking_vrrp;
+
+			ifp->garp_delay = sav_garp_delay;
+			ifp->tracking_vrrp = sav_tracking_vrrp;
+
+			if (!netlink_if_link_populate(ifp, tb, ifi))
+				return -1;
+
+			if (__test_bit(LOG_DETAIL_BIT, &debug))
+				log_message(LOG_INFO, "Interface %s added", ifp->ifname);
+
+			update_added_interface(ifp);
+
+#ifndef _DEBUG_
+			if (prog_type == PROG_TYPE_VRRP)
+#endif
+				if (ifp->mtu > old_mtu)
+					alloc_vrrp_buffer(ifp->mtu);
+
+			/* We need to see a transition to up, so mark it down for now */
+			ifp->ifi_flags &= ~(IFF_UP | IFF_RUNNING);
+		} else {
+			if (__test_bit(LOG_DETAIL_BIT, &debug))
+				log_message(LOG_INFO, "Unknown interface %s deleted", (char *)tb[IFLA_IFNAME]);
+			return 0;
+		}
+	}
+
+	/* Update flags. Flags == 0 means interface deleted. */
+	update_interface_flags(ifp, (h->nlmsg_type == RTM_DELLINK) ? 0 : ifi->ifi_flags);
+
+	return 0;
+}
+
+#ifdef _HAVE_FIB_ROUTING_
+static int
+netlink_route_filter(__attribute__((unused)) struct sockaddr_nl *snl, struct nlmsghdr *h)
+{
+	struct rtmsg *rt;
+	struct rtattr *tb[RTA_MAX + 1];
+	size_t len;
+	vrrp_t *vrrp;
+	ip_route_t *route;
+
+	if (h->nlmsg_type != RTM_NEWROUTE && h->nlmsg_type != RTM_DELROUTE)
+		return 0;
+
+	if (h->nlmsg_len < NLMSG_LENGTH(sizeof(*rt)))
+		return -1;
+
+	rt = NLMSG_DATA(h);
+
+	if (rt->rtm_protocol != RTPROT_KEEPALIVED) {
+		/* It is not a route we are monitoring - ignore it */
+		return 0;
+	}
+
+	/* Only IPv4 and IPv6 are valid for us */
+	if (rt->rtm_family != AF_INET && rt->rtm_family != AF_INET6)
+		return 0;
+
+	len = h->nlmsg_len - NLMSG_LENGTH(sizeof (struct rtmsg));
+
+	parse_rtattr(tb, RTA_MAX, RTM_RTA(rt), len);
+
+	if (!(route = route_is_ours(rt, tb, &vrrp)))
+		return 0;
+
+	route->set = (h->nlmsg_type == RTM_NEWROUTE);
+
+	/* Matching route */
+	if (h->nlmsg_type == RTM_NEWROUTE) {
+		/* If we haven't specified a dev for the route, save the link the route
+		 * has been added to. */
+		if (tb[RTA_OIF]) {
+			route->configured_ifindex = *(uint32_t*)RTA_DATA(tb[RTA_OIF]);
+			if (route->oif && route->oif->ifindex != route->configured_ifindex)
+				log_message(LOG_INFO, "route added index %" PRIu32 " != config index %u", route->configured_ifindex, route->oif->ifindex);
+		}
+		else
+			log_message(LOG_INFO, "New route doesn't have i/f index");
+
+		return 0;
+	}
+
+	/* We are only interested in route deletions now */
+
+	if (route->dont_track)
+		return 0;
+
+	if (vrrp) {
+		if (vrrp->state != VRRP_STATE_MAST)
+			return 0;
+
+		set_vrrp_backup(vrrp);
+	}
+	else
+		reinstate_static_route(route);
+
+	return 0;
+}
+
+static int
+netlink_rule_filter(__attribute__((unused)) struct sockaddr_nl *snl, struct nlmsghdr *h)
+{
+	struct fib_rule_hdr *frh;
+	struct rtattr *tb[FRA_MAX + 1];
+	size_t len;
+	vrrp_t *vrrp;
+	ip_rule_t *ip_rule;
+
+	if (h->nlmsg_type != RTM_NEWRULE && h->nlmsg_type != RTM_DELRULE)
+		return 0;
+
+	if (h->nlmsg_len < NLMSG_LENGTH(sizeof(*frh)))
+		return -1;
+
+	frh = NLMSG_DATA(h);
+
+	/* Only IPv4 and IPv6 are valid for us */
+	if (frh->family != AF_INET && frh->family != AF_INET6)
+		return 0;
+
+	len = h->nlmsg_len - NLMSG_LENGTH(sizeof (struct rtmsg));
+
+	parse_rtattr(tb, FRA_MAX, RTM_RTA(frh), len);
+
+#if HAVE_DECL_FRA_PROTOCOL
+	if (tb[FRA_PROTOCOL] &&
+	    *(uint8_t *)RTA_DATA(tb[FRA_PROTOCOL]) != RTPROT_KEEPALIVED) {
+		/* It is not a rule we are monitoring - ignore it */
+		return 0;
+	}
+#endif
+
+	/* We are only interested in rule deletions now */
+	if (h->nlmsg_type != RTM_DELRULE)
+		return 0;
+
+	if (!(ip_rule = rule_is_ours(frh, tb, &vrrp)))
+		return 0;
+
+	ip_rule->set = false;
+
+	if (ip_rule->dont_track)
+		return 0;
+
+	if (vrrp)
+		set_vrrp_backup(vrrp);
+	else
+		reinstate_static_rule(ip_rule);
+
+	return 0;
+}
+#endif
+#endif
+
+/* Netlink kernel message reflection */
+static int
+netlink_broadcast_filter(struct sockaddr_nl *snl, struct nlmsghdr *h)
+{
+	switch (h->nlmsg_type) {
+	case RTM_NEWLINK:
+	case RTM_DELLINK:
+		/* It appears that older kernels (certainly 2.6.32) can
+		 * send RTM_NEWLINK (but not RTM_DELLINK) messages even
+		 * when RTNLGRP_LINK has not been subscribed to. This
+		 * occurs when the link is set to up state.
+		 * Only the VRRP process is interested in link messages. */
+#ifdef _WITH_VRRP_
+#ifndef _DEBUG_
+		if (prog_type == PROG_TYPE_VRRP)
+#endif
+			return netlink_link_filter(snl, h);
+#endif
+		break;
+	case RTM_NEWADDR:
+	case RTM_DELADDR:
+		return netlink_if_address_filter(snl, h);
+		break;
+#ifdef _HAVE_FIB_ROUTING_
+	case RTM_NEWROUTE:
+	case RTM_DELROUTE:
+		return netlink_route_filter(snl, h);
+	case RTM_NEWRULE:
+	case RTM_DELRULE:
+		return netlink_rule_filter(snl, h);
+#endif
+	default:
+		log_message(LOG_INFO,
+		       "Kernel is reflecting an unknown netlink nlmsg_type: %d",
+		       h->nlmsg_type);
+		break;
+	}
+	return 0;
+}
+
+static int
+kernel_netlink(thread_ref_t thread)
+{
+	nl_handle_t *nl = THREAD_ARG(thread);
+
+	if (thread->type != THREAD_READ_TIMEOUT)
+		netlink_parse_info(netlink_broadcast_filter, nl, NULL, true);
+	nl->thread = thread_add_read(master, kernel_netlink, nl, nl->fd,
+				      TIMER_NEVER, false);
+	return 0;
+}
+
+#ifdef _WITH_VRRP_
+void
+kernel_netlink_poll(void)
+{
+	if (!nl_kernel.fd)
+		return;
+
+	netlink_parse_info(netlink_broadcast_filter, &nl_kernel, NULL, true);
+}
+#endif
+
+void
+kernel_netlink_set_recv_bufs(void)
+{
+#ifdef _DEBUG_
+#ifdef _WITH_VRRP_
+	netlink_set_rx_buf_size(&nl_kernel, global_data->vrrp_netlink_monitor_rcv_bufs, global_data->vrrp_netlink_monitor_rcv_bufs_force);
+	netlink_set_rx_buf_size(&nl_cmd, global_data->vrrp_netlink_cmd_rcv_bufs, global_data->vrrp_netlink_cmd_rcv_bufs_force);
+#else
+	netlink_set_rx_buf_size(&nl_kernel, global_data->lvs_netlink_monitor_rcv_bufs, global_data->lvs_netlink_monitor_rcv_bufs_force);
+	netlink_set_rx_buf_size(&nl_cmd, global_data->lvs_netlink_cmd_rcv_bufs, global_data->lvs_netlink_cmd_rcv_bufs_force);
+#endif
+#else
+#ifdef _WITH_VRRP_
+	if (prog_type == PROG_TYPE_VRRP) {
+		netlink_set_rx_buf_size(&nl_kernel, global_data->vrrp_netlink_monitor_rcv_bufs, global_data->vrrp_netlink_monitor_rcv_bufs_force);
+		netlink_set_rx_buf_size(&nl_cmd, global_data->vrrp_netlink_cmd_rcv_bufs, global_data->vrrp_netlink_cmd_rcv_bufs_force);
+	}
+#endif
+#ifdef _WITH_LVS_
+	if (prog_type == PROG_TYPE_CHECKER)
+		netlink_set_rx_buf_size(&nl_kernel, global_data->lvs_netlink_monitor_rcv_bufs, global_data->lvs_netlink_monitor_rcv_bufs_force);
+#endif
+#endif
+}
+
+void
+kernel_netlink_close_monitor(void)
+{
+	netlink_close(&nl_kernel);
+}
+
+void
+kernel_netlink_close_cmd(void)
+{
+	netlink_close(&nl_cmd);
+}
+
+void
+kernel_netlink_close(void)
+{
+	kernel_netlink_close_monitor();
+	kernel_netlink_close_cmd();
+}
+
+void
+kernel_netlink_init(void)
+{
+	/*
+	 * Prepare netlink kernel broadcast channel
+	 * subscription. We subscribe to LINK, ADDR,
+	 * and ROUTE netlink broadcast messages, but
+	 * the checker process does not need the
+	 * route or link messages.
+	 */
+
+	/* If the netlink kernel fd is already open, just register a read thread.
+	 * This will happen at reload. */
+	if (nl_kernel.fd > 0) {
+		nl_kernel.thread = thread_add_read(master, kernel_netlink, &nl_kernel, nl_kernel.fd, TIMER_NEVER, false);
+		return;
+	}
+
+#ifdef _DEBUG_
+#ifdef _WITH_VRRP_
+	netlink_socket(&nl_kernel, global_data->vrrp_netlink_monitor_rcv_bufs, global_data->vrrp_netlink_monitor_rcv_bufs_force,
+			SOCK_NONBLOCK, RTNLGRP_LINK, RTNLGRP_IPV4_IFADDR, RTNLGRP_IPV6_IFADDR, 0);
+#else
+	netlink_socket(&nl_kernel, global_data->lvs_netlink_monitor_rcv_bufs, global_data->lvs_netlink_monitor_rcv_bufs_force,
+			SOCK_NONBLOCK, RTNLGRP_IPV4_IFADDR, RTNLGRP_IPV6_IFADDR, 0);
+#endif
+#else
+#ifdef _WITH_VRRP_
+	if (prog_type == PROG_TYPE_VRRP)
+		netlink_socket(&nl_kernel, global_data->vrrp_netlink_monitor_rcv_bufs, global_data->vrrp_netlink_monitor_rcv_bufs_force,
+				SOCK_NONBLOCK, RTNLGRP_LINK, RTNLGRP_IPV4_IFADDR, RTNLGRP_IPV6_IFADDR, 0);
+#endif
+#ifdef _WITH_LVS_
+	if (prog_type == PROG_TYPE_CHECKER)
+		netlink_socket(&nl_kernel, global_data->lvs_netlink_monitor_rcv_bufs, global_data->lvs_netlink_monitor_rcv_bufs_force,
+				SOCK_NONBLOCK, RTNLGRP_IPV4_IFADDR, RTNLGRP_IPV6_IFADDR, 0);
+#endif
+#endif
+
+	if (nl_kernel.fd >= 0) {
+		log_message(LOG_INFO, "Registering Kernel netlink reflector");
+		nl_kernel.thread = thread_add_read(master, kernel_netlink, &nl_kernel, nl_kernel.fd,
+						   TIMER_NEVER, false);
+	} else
+		log_message(LOG_INFO, "Error while registering Kernel netlink reflector channel");
+
+	/* Prepare netlink command channel. The cmd socket is used synchronously.*/
+#ifdef _DEBUG_
+#ifdef _WITH_VRRP_
+	netlink_socket(&nl_cmd, global_data->vrrp_netlink_cmd_rcv_bufs, global_data->vrrp_netlink_cmd_rcv_bufs_force, 0, 0);
+#else
+	netlink_socket(&nl_cmd, global_data->lvs_netlink_cmd_rcv_bufs, global_data->lvs_netlink_cmd_rcv_bufs_force, 0, 0);
+#endif
+#else
+#ifdef _WITH_VRRP_
+	if (prog_type == PROG_TYPE_VRRP)
+		netlink_socket(&nl_cmd, global_data->vrrp_netlink_cmd_rcv_bufs, global_data->vrrp_netlink_cmd_rcv_bufs_force, 0, 0);
+#endif
+#ifdef _WITH_LVS_
+	if (prog_type == PROG_TYPE_CHECKER)
+		netlink_socket(&nl_cmd, global_data->lvs_netlink_cmd_rcv_bufs, global_data->lvs_netlink_cmd_rcv_bufs_force, 0, 0);
+#endif
+#endif
+	if (nl_cmd.fd >= 0)
+		log_message(LOG_INFO, "Registering Kernel netlink command channel");
+	else
+		log_message(LOG_INFO, "Error while registering Kernel netlink cmd channel");
+
+	/* Start with netlink interface and address lookup */
+#ifdef _WITH_VRRP_
+#ifndef _DEBUG_
+	if (prog_type == PROG_TYPE_VRRP)
+#endif
+		init_interface_queue();
+#endif
+
+	netlink_address_lookup();
+
+#if !defined _DEBUG_ && defined _WITH_LVS_
+	if (prog_type == PROG_TYPE_CHECKER)
+		kernel_netlink_close_cmd();
+#endif
+}
+
+#ifdef _WITH_VRRP_
+void
+kernel_netlink_read_interfaces(void)
+{
+	int ret;
+
+#ifdef _WITH_VRRP_
+	netlink_socket(&nl_cmd, global_data->vrrp_netlink_cmd_rcv_bufs, global_data->vrrp_netlink_cmd_rcv_bufs_force, 0, 0);
+#else
+	netlink_socket(&nl_cmd, global_data->lvs_netlink_cmd_rcv_bufs, global_data->lvs_netlink_cmd_rcv_bufs_force, 0, 0);
+#endif
+
+	if (nl_cmd.fd < 0)
+		fprintf(stderr, "Error while registering Kernel netlink cmd channel\n");
+
+	init_interface_queue();
+
+	if ((ret = netlink_address_lookup()))
+		fprintf(stderr, "netlink_address_lookup() returned %d\n", ret);
+
+	kernel_netlink_close_cmd();
+}
+#endif
+
+#ifdef THREAD_DUMP
+void
+register_keepalived_netlink_addresses(void)
+{
+	register_thread_address("kernel_netlink", kernel_netlink);
+}
+#endif
diff --git a/tools/keepalived/keepalived/core/layer4.c b/tools/keepalived/keepalived/core/layer4.c
index 77290c7ca..1aa930719 100644
--- a/tools/keepalived/keepalived/core/layer4.c
+++ b/tools/keepalived/keepalived/core/layer4.c
@@ -18,46 +18,69 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <errno.h>
+#include <unistd.h>
+
 #include "layer4.h"
-#include "utils.h"
 #include "logger.h"
+#include "scheduler.h"
 
+#ifndef _WITH_LVS_
+static
+#endif
 enum connect_result
-tcp_bind_connect(int fd, conn_opts_t *co)
+socket_bind_connect(int fd, conn_opts_t *co)
 {
-	struct linger li = { 0 };
+	int opt;
+	socklen_t optlen;
+	struct linger li;
 	socklen_t addrlen;
 	int ret;
-	int val;
 	struct sockaddr_storage *addr = &co->dst;
 	struct sockaddr_storage *bind_addr = &co->bindto;
 
-	/* free the tcp port after closing the socket descriptor */
-	li.l_onoff = 1;
-	li.l_linger = 0;
-	setsockopt(fd, SOL_SOCKET, SO_LINGER, (char *) &li, sizeof (struct linger));
-
-	/* Make socket non-block. */
-	val = fcntl(fd, F_GETFL, 0);
-	fcntl(fd, F_SETFL, val | O_NONBLOCK);
+	optlen = sizeof(opt);
+	if (getsockopt(fd, SOL_SOCKET, SO_TYPE, (void *) &opt, &optlen) < 0) {
+		log_message(LOG_ERR, "Can't get socket type: %s", strerror(errno));
+		return connect_error;
+	}
+	if (opt == SOCK_STREAM) {
+		/* free the tcp port after closing the socket descriptor, but
+		 * allow time for a proper shutdown. */
+		li.l_onoff = 1;
+		li.l_linger = 5;
+		if (setsockopt(fd, SOL_SOCKET, SO_LINGER, (char *) &li, sizeof (struct linger)))
+			log_message(LOG_INFO, "Failed to set SO_LINGER for socket %d - errno %d (%m)", fd, errno);
+	}
 
 #ifdef _WITH_SO_MARK_
 	if (co->fwmark) {
 		if (setsockopt (fd, SOL_SOCKET, SO_MARK, &co->fwmark, sizeof (co->fwmark)) < 0) {
-			log_message(LOG_ERR, "Error setting fwmark %d to socket: %s", co->fwmark, strerror(errno));
+			log_message(LOG_ERR, "Error setting fwmark %u to socket: %s", co->fwmark, strerror(errno));
 			return connect_error;
 		}
 	}
 #endif
 
+	if (co->bind_if[0]) {
+		if (setsockopt(fd, SOL_SOCKET, SO_BINDTODEVICE, co->bind_if, (unsigned)strlen(co->bind_if) + 1) < 0) {
+			log_message(LOG_INFO, "Checker can't bind to device %s: %s", co->bind_if, strerror(errno));
+			return connect_error;
+		}
+	}
+
 	/* Bind socket */
 	if (((struct sockaddr *) bind_addr)->sa_family != AF_UNSPEC) {
 		addrlen = sizeof(*bind_addr);
-		if (bind(fd, (struct sockaddr *) bind_addr, addrlen) != 0)
+		if (bind(fd, (struct sockaddr *) bind_addr, addrlen) != 0) {
+			log_message(LOG_INFO, "Checker bind failed: %s", strerror(errno));
 			return connect_error;
+		}
 	}
 
 	/* Set remote IP and connect */
@@ -65,53 +88,52 @@ tcp_bind_connect(int fd, conn_opts_t *co)
 	ret = connect(fd, (struct sockaddr *) addr, addrlen);
 
 	/* Immediate success */
-	if (ret == 0) {
-		fcntl(fd, F_SETFL, val);
+	if (ret == 0)
 		return connect_success;
-	}
 
 	/* If connect is in progress then return 1 else it's real error. */
-	if (ret < 0) {
-		if (errno != EINPROGRESS)
-			return connect_error;
-	}
+	if (errno == EINPROGRESS)
+		return connect_in_progress;
 
-	/* restore previous fd args */
-	fcntl(fd, F_SETFL, val);
-	return connect_in_progress;
+	/* ENETUNREACH can be returned here. I'm not sure
+	 * about any of the others, but play safe. These
+	 * should all be considered to be a failure to connect
+	 * rather than a failure to run the check. */
+	if (errno == ENETUNREACH || errno == EHOSTUNREACH ||
+	    errno == ECONNREFUSED || errno == EHOSTDOWN ||
+	    errno == ENETDOWN || errno == ECONNRESET ||
+	    errno == ECONNABORTED || errno == ETIMEDOUT)
+		return connect_fail;
+
+	return connect_error;
 }
 
 enum connect_result
-tcp_connect(int fd, struct sockaddr_storage *addr)
+socket_connect(int fd, struct sockaddr_storage *addr)
 {
-	conn_opts_t co;
-	memset(&co, 0, sizeof(co));
-	co.dst = *addr;
-	return tcp_bind_connect(fd, &co);
+	conn_opts_t co = { .dst = *addr };
+
+	return socket_bind_connect(fd, &co);
 }
 
 enum connect_result
-tcp_socket_state(int fd, thread_t * thread, int (*func) (thread_t *))
+socket_state(thread_ref_t thread, thread_func_t func)
 {
 	int status;
 	socklen_t addrlen;
-	int ret = 0;
 	timeval_t timer_min;
 
 	/* Handle connection timeout */
 	if (thread->type == THREAD_WRITE_TIMEOUT) {
-		close(thread->u.fd);
+		thread_close_fd(thread);
 		return connect_timeout;
 	}
 
 	/* Check file descriptor */
 	addrlen = sizeof(status);
-	if (getsockopt(thread->u.fd, SOL_SOCKET, SO_ERROR, (void *) &status, &addrlen) < 0)
-		ret = errno;
-
-	/* Connection failed !!! */
-	if (ret) {
-		close(thread->u.fd);
+	if (getsockopt(thread->u.f.fd, SOL_SOCKET, SO_ERROR, (void *) &status, &addrlen) < 0) {
+		/* getsockopt failed !!! */
+		thread_close_fd(thread);
 		return connect_error;
 	}
 
@@ -120,38 +142,41 @@ tcp_socket_state(int fd, thread_t * thread, int (*func) (thread_t *))
 	 * and other error code until connection is established.
 	 * Recompute the write timeout (or pending connection).
 	 */
+	if (status == 0)
+		return connect_success;
+
 	if (status == EINPROGRESS) {
 		timer_min = timer_sub_now(thread->sands);
 		thread_add_write(thread->master, func, THREAD_ARG(thread),
-				 thread->u.fd, timer_long(timer_min));
+				 thread->u.f.fd, -timer_long(timer_min), true);
 		return connect_in_progress;
-	} else if (status != 0) {
-		close(thread->u.fd);
-		return connect_error;
 	}
 
-	return connect_success;
+	thread_close_fd(thread);
+
+	if (status == ETIMEDOUT)
+		return connect_timeout;
+
+	/* Since the connect() call succeeded, treat this as a
+	 * failure to establish a connection. */
+	return connect_fail;
 }
 
-int
-tcp_connection_state(int fd, enum connect_result status, thread_t * thread,
-		     int (*func) (thread_t *), long timeout)
+#ifdef _WITH_LVS_
+bool
+socket_connection_state(int fd, enum connect_result status, thread_ref_t thread,
+		     thread_func_t func, unsigned long timeout)
 {
-	checker_t *checker;
+	void *checker;
 
 	checker = THREAD_ARG(thread);
 
-	switch (status) {
-	case connect_success:
-		thread_add_write(thread->master, func, checker, fd, timeout);
-		return 0;
-
-		/* Checking non-blocking connect, we wait until socket is writable */
-	case connect_in_progress:
-		thread_add_write(thread->master, func, checker, fd, timeout);
-		return 0;
-
-	default:
-		return 1;
+	if (status == connect_success ||
+	    status == connect_in_progress) {
+		thread_add_write(thread->master, func, checker, fd, timeout, true);
+		return false;
 	}
+
+	return true;
 }
+#endif
diff --git a/tools/keepalived/keepalived/core/libnl_link.c b/tools/keepalived/keepalived/core/libnl_link.c
new file mode 100644
index 000000000..904975a23
--- /dev/null
+++ b/tools/keepalived/keepalived/core/libnl_link.c
@@ -0,0 +1,137 @@
+/*
+ * libnl_link:	Handle dynamic linking to netlink libraries
+ *
+ * Authors:	P. Quentin Armitage <Quentin@Armitage.org.uk>
+ *
+ *		This program is free software; you can redistribute it and/or
+ *		modify it under the terms of the GNU General Public License
+ *		as published by the Free Software Foundation; either version
+ *		2 of the License, or (at your option) any later version.
+ *
+ *  Copyright (C) 2017-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#ifdef _LIBNL_DYNAMIC_
+
+#include <stdbool.h>
+
+#include <dlfcn.h>
+#include <netlink/netlink.h>
+#include <netlink/socket.h>
+
+#ifdef LIBIPVS_USE_NL
+#include <netlink/genl/genl.h>
+#include <netlink/genl/ctrl.h>
+#endif
+
+#include "libnl_link.h"
+#include "logger.h"
+
+
+/* The addresses of the functions we want */
+struct nl_sock * (*nl_socket_alloc_addr)(void);
+void (*nl_socket_free_addr)(struct nl_sock *);
+#ifdef LIBIPVS_USE_NL
+int (*genl_connect_addr)(struct nl_sock *);
+int (*genl_ctrl_resolve_addr)(struct nl_sock *, const char *);
+int (*genlmsg_parse_addr)(struct nlmsghdr *, int, struct nlattr **, int, struct nla_policy *);
+void * (*genlmsg_put_addr)(struct nl_msg *, uint32_t, uint32_t, int, int, int, uint8_t, uint8_t);
+int (*nla_nest_end_addr)(struct nl_msg *, struct nlattr *);
+struct nlattr * (*nla_nest_start_addr)(struct nl_msg *, int);
+int (*nla_put_daddr)(struct nl_msg *, int, int, const void *);
+struct nl_msg * (*nlmsg_alloc_addr)(void);
+void (*nlmsg_free_addr)(struct nl_msg *);
+struct nlmsghdr * (*nlmsg_hdr_addr)(struct nl_msg *);
+int (*nl_recvmsgs_default_addr)(struct nl_sock *);
+int (*nl_send_auto_complete_addr)(struct nl_sock *,  struct nl_msg *);
+int (*nl_socket_modify_cb_addr)(struct nl_sock *, enum nl_cb_type, enum nl_cb_kind, nl_recvmsg_msg_cb_t, void *);
+#ifdef _HAVE_LIBNL3_
+void * (*nla_data_addr)(const struct nlattr *);
+int32_t (*nla_get_s32_addr)(const struct nlattr *);
+char * (*nla_get_string_addr)(const struct nlattr *);
+uint16_t (*nla_get_u16_addr)(const struct nlattr *);
+uint32_t (*nla_get_u32_addr)(const struct nlattr *);
+uint64_t (*nla_get_u64_addr)(const struct nlattr *);
+int (*nla_memcpy_addr)(void *, const struct nlattr *, int);
+int (*nla_parse_nested_addr)(struct nlattr **, int, struct nlattr *, struct nla_policy *);
+#endif
+#endif
+
+
+static void* libnl_handle;
+#ifdef LIBIPVS_USE_NL
+static void* libnl_genl_handle;
+#endif
+
+bool
+libnl_init(void)
+{
+	if (libnl_handle)
+		return true;
+
+	/* Attempt to open the necessary libraries */
+#ifdef _HAVE_LIBNL1_
+#ifdef _WITH_LVS_
+	if (!(libnl_handle = dlopen("libnl.so", RTLD_NOW)) &&
+	    !(libnl_handle = dlopen(NL_LIB_NAME, RTLD_NOW))) {
+		log_message(LOG_INFO, "Unable to load nl library - %s", dlerror());
+		return false;
+	}
+	libnl_genl_handle = libnl_handle;
+#endif
+#else
+	if (!(libnl_handle = dlopen("libnl-3.so", RTLD_NOW)) &&
+	    !(libnl_handle = dlopen(NL3_LIB_NAME, RTLD_NOW))) {
+		log_message(LOG_INFO, "Unable to load nl-3 library - %s", dlerror());
+		return false;
+	}
+#ifdef _WITH_LVS_
+	if (!(libnl_genl_handle = dlopen("libnl-genl-3.so", RTLD_NOW)) &&
+	    !(libnl_genl_handle = dlopen(NL3_GENL_LIB_NAME, RTLD_NOW))) {
+		log_message(LOG_INFO, "Unable to load nl-genl-3 library - %s", dlerror());
+		return false;
+	}
+#endif
+#endif
+
+	if (
+#ifdef _HAVE_LIBNL1_
+	    !(nl_socket_alloc_addr = dlsym(libnl_handle, "nl_handle_alloc")) ||
+	    !(nl_socket_free_addr = dlsym(libnl_handle, "nl_handle_destroy")) ||
+#else
+	    !(nl_socket_alloc_addr = dlsym(libnl_handle, "nl_socket_alloc")) ||
+	    !(nl_socket_free_addr = dlsym(libnl_handle, "nl_socket_free")) ||
+#endif
+#ifdef _WITH_LVS_
+	    !(genl_connect_addr = dlsym(libnl_genl_handle, "genl_connect")) ||
+	    !(genl_ctrl_resolve_addr = dlsym(libnl_genl_handle, "genl_ctrl_resolve")) ||
+	    !(genlmsg_parse_addr = dlsym(libnl_genl_handle, "genlmsg_parse")) ||
+	    !(genlmsg_put_addr = dlsym(libnl_genl_handle, "genlmsg_put")) ||
+	    !(nla_nest_end_addr = dlsym(libnl_handle, "nla_nest_end")) ||
+	    !(nla_nest_start_addr = dlsym(libnl_handle, "nla_nest_start")) ||
+	    !(nla_put_daddr = dlsym(libnl_handle, "nla_put")) ||
+	    !(nlmsg_alloc_addr = dlsym(libnl_handle, "nlmsg_alloc")) ||
+	    !(nlmsg_free_addr = dlsym(libnl_handle, "nlmsg_free")) ||
+	    !(nlmsg_hdr_addr = dlsym(libnl_handle, "nlmsg_hdr")) ||
+	    !(nl_recvmsgs_default_addr = dlsym(libnl_handle, "nl_recvmsgs_default")) ||
+	    !(nl_send_auto_complete_addr = dlsym(libnl_handle, "nl_send_auto_complete")) ||
+	    !(nl_socket_modify_cb_addr = dlsym(libnl_handle, "nl_socket_modify_cb")) ||
+#ifdef _HAVE_LIBNL3_
+	    !(nla_data_addr = dlsym(libnl_handle, "nla_data")) ||
+	    !(nla_get_s32_addr = dlsym(libnl_handle, "nla_get_s32")) ||
+	    !(nla_get_string_addr = dlsym(libnl_handle, "nla_get_string")) ||
+	    !(nla_get_u16_addr = dlsym(libnl_handle, "nla_get_u16")) ||
+	    !(nla_get_u32_addr = dlsym(libnl_handle, "nla_get_u32")) ||
+	    !(nla_get_u64_addr = dlsym(libnl_handle, "nla_get_u64")) ||
+	    !(nla_memcpy_addr = dlsym(libnl_handle, "nla_memcpy")) ||
+	    !(nla_parse_nested_addr = dlsym(libnl_handle, "nla_parse_nested")) ||
+#endif
+#endif
+	    false)
+		log_message(LOG_INFO, "Failed to dynamic link a libnli/libnl-3 function");
+
+	return true;
+}
+#endif
diff --git a/tools/keepalived/keepalived/core/main.c b/tools/keepalived/keepalived/core/main.c
index 154ab9966..7f4a1c6c6 100644
--- a/tools/keepalived/keepalived/core/main.c
+++ b/tools/keepalived/keepalived/core/main.c
@@ -17,179 +17,1477 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <stdlib.h>
+#include <sys/utsname.h>
+#include <sys/resource.h>
+#include <stdbool.h>
+#ifdef HAVE_SIGNALFD
+#include <sys/signalfd.h>
+#include <sys/epoll.h>
+#endif
+#include <errno.h>
+#include <signal.h>
+#include <fcntl.h>
+#include <sys/wait.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <unistd.h>
+#include <getopt.h>
+#include <linux/version.h>
+#include <ctype.h>
+#include <stdlib.h>
+
 #include "main.h"
+#include "global_data.h"
+#include "daemon.h"
 #include "config.h"
+#include "git-commit.h"
+#include "utils.h"
 #include "signals.h"
 #include "pidfile.h"
+#include "bitops.h"
 #include "logger.h"
+#include "parser.h"
+#include "notify.h"
+#include "utils.h"
+#ifdef _WITH_LVS_
+#include "check_parser.h"
+#include "check_daemon.h"
+#endif
+#ifdef _WITH_VRRP_
+#include "vrrp_daemon.h"
+#include "vrrp_parser.h"
+#include "vrrp_if.h"
+#ifdef _WITH_CN_PROC_
+#include "track_process.h"
+#endif
+#ifdef _WITH_JSON_
+#include "vrrp_json.h"
+#endif
+#ifdef _WITH_NFTABLES_
+#include "vrrp_nftables.h"
+#endif
+#endif
+#ifdef _WITH_BFD_
+#include "bfd_daemon.h"
+#include "bfd_parser.h"
+#endif
+#include "global_parser.h"
+#if HAVE_DECL_CLONE_NEWNET
+#include "namespaces.h"
+#endif
+#include "scheduler.h"
+#include "keepalived_netlink.h"
+#include "git-commit.h"
+#if defined THREAD_DUMP || defined _EPOLL_DEBUG_ || defined _EPOLL_THREAD_DUMP_
+#include "scheduler.h"
+#endif
+#include "process.h"
+#ifdef _TIMER_CHECK_
+#include "timer.h"
+#endif
+#ifdef _SMTP_ALERT_DEBUG_
+#include "smtp.h"
+#endif
+#if defined _REGEX_DEBUG_ || defined _WITH_REGEX_TIMERS_
+#include "check_http.h"
+#endif
+#ifdef _TSM_DEBUG_
+#include "vrrp_scheduler.h"
+#endif
+#if defined _PARSER_DEBUG_ || defined _DUMP_KEYWORDS_
+#include "parser.h"
+#endif
+#include "warnings.h"
+
+/* musl libc doesn't define the following */
+#ifndef	W_EXITCODE
+#define	W_EXITCODE(ret, sig)	((ret) << 8 | (sig))
+#endif
+#ifndef	WCOREFLAG
+#define	WCOREFLAG		((int32_t)WCOREDUMP(0xffffffff))
+#endif
+
+#define CHILD_WAIT_SECS	5
 
 /* global var */
-char *conf_file = NULL;		/* Configuration file */
-int log_facility = LOG_DAEMON;	/* Optional logging facilities */
-pid_t vrrp_child = -1;		/* VRRP child process ID */
-pid_t checkers_child = -1;	/* Healthcheckers child process ID */
-int daemon_mode = 0;		/* VRRP/CHECK subsystem selection */
-int linkwatch = 0;		/* Use linkwatch kernel netlink reflection */
-char *main_pidfile = KEEPALIVED_PID_FILE;	/* overrule default pidfile */
-char *checkers_pidfile = CHECKERS_PID_FILE;	/* overrule default pidfile */
-char *vrrp_pidfile = VRRP_PID_FILE;	/* overrule default pidfile */
+const char *version_string = VERSION_STRING;		/* keepalived version */
+const char *conf_file = KEEPALIVED_CONFIG_FILE;		/* Configuration file */
+int log_facility = LOG_DAEMON;				/* Optional logging facilities */
+bool reload;						/* Set during a reload */
+const char *main_pidfile;				/* overrule default pidfile */
+static bool free_main_pidfile;
+#ifdef _WITH_LVS_
+pid_t checkers_child;					/* Healthcheckers child process ID */
+const char *checkers_pidfile;				/* overrule default pidfile */
+static bool free_checkers_pidfile;
+#endif
+#ifdef _WITH_VRRP_
+pid_t vrrp_child;					/* VRRP child process ID */
+const char *vrrp_pidfile;				/* overrule default pidfile */
+static bool free_vrrp_pidfile;
+#endif
+#ifdef _WITH_BFD_
+pid_t bfd_child;					/* BFD child process ID */
+const char *bfd_pidfile;				/* overrule default pidfile */
+static bool free_bfd_pidfile;
+#endif
+unsigned long daemon_mode;				/* VRRP/CHECK/BFD subsystem selection */
 #ifdef _WITH_SNMP_
-int snmp = 0;			/* Enable SNMP support */
+bool snmp_option;					/* Enable SNMP support */
+const char *snmp_socket;				/* Socket to use for SNMP agent */
 #endif
+static const char *syslog_ident;			/* syslog ident if not default */
+bool use_pid_dir;					/* Put pid files in /var/run/keepalived or @localstatedir@/run/keepalived */
+
+unsigned os_major;					/* Kernel version */
+unsigned os_minor;
+unsigned os_release;
+char *hostname;						/* Initial part of hostname */
+
+#if HAVE_DECL_CLONE_NEWNET
+static char *override_namespace;			/* If namespace specified on command line */
+#endif
+
+unsigned child_wait_time = CHILD_WAIT_SECS;		/* Time to wait for children to exit */
 
 /* Log facility table */
 static struct {
 	int facility;
-} LOG_FACILITY[LOG_FACILITY_MAX + 1] = {
+} LOG_FACILITY[] = {
 	{LOG_LOCAL0}, {LOG_LOCAL1}, {LOG_LOCAL2}, {LOG_LOCAL3},
 	{LOG_LOCAL4}, {LOG_LOCAL5}, {LOG_LOCAL6}, {LOG_LOCAL7}
 };
+#define	LOG_FACILITY_MAX	((sizeof(LOG_FACILITY) / sizeof(LOG_FACILITY[0])) - 1)
+
+/* umask settings */
+bool umask_cmdline;
+
+/* Control producing core dumps */
+static bool set_core_dump_pattern = false;
+static bool create_core_dump = false;
+static const char *core_dump_pattern = "core";
+static char *orig_core_dump_pattern = NULL;
+
+/* debug flags */
+#if defined _TIMER_CHECK_ || defined _SMTP_ALERT_DEBUG_ || defined _EPOLL_DEBUG_ || defined _EPOLL_THREAD_DUMP_ || defined _REGEX_DEBUG_ || defined _WITH_REGEX_TIMERS_ || defined _TSM_DEBUG_ || defined _VRRP_FD_DEBUG_ || defined _NETLINK_TIMERS_ || defined _NETWORK_TIMESTAMP_ || defined _TRACK_PROCESS_DEBUG_ || defined _PARSER_DEBUG_ || defined _DUMP_KEYWORDS_
+#define WITH_DEBUG_OPTIONS 1
+#endif
+
+#ifdef _TIMER_CHECK_
+static char timer_debug;
+#endif
+#ifdef _SMTP_ALERT_DEBUG_
+static char smtp_debug;
+#endif
+#ifdef _EPOLL_DEBUG_
+static char epoll_debug;
+#endif
+#ifdef _EPOLL_THREAD_DUMP_
+static char epoll_thread_debug;
+#endif
+#ifdef _REGEX_DEBUG_
+static char regex_debug;
+#endif
+#ifdef _WITH_REGEX_TIMERS_
+static char regex_timers;
+#endif
+#ifdef _TSM_DEBUG_
+static char tsm_debug;
+#endif
+#ifdef _VRRP_FD_DEBUG_
+static char vrrp_fd_debug;
+#endif
+#ifdef _NETLINK_TIMERS_
+static char netlink_timer_debug;
+#endif
+#ifdef _NETWORK_TIMESTAMP_
+static char network_timestamp_debug;
+#endif
+#ifdef _TRACK_PROCESS_DEBUG_
+static char track_process_debug;
+static char track_process_debug_detail;
+#endif
+#ifdef _PARSER_DEBUG_
+static char parser_debug;
+#endif
+#ifdef _DUMP_KEYWORDS_
+static char dump_keywords;
+#endif
+
+void
+free_parent_mallocs_startup(bool am_child)
+{
+	if (am_child) {
+#if HAVE_DECL_CLONE_NEWNET
+		free_dirname();
+#endif
+#ifndef _MEM_CHECK_LOG_
+		FREE_CONST_PTR(syslog_ident);
+#else
+		free(no_const_char_p(syslog_ident));
+#endif
+		syslog_ident = NULL;
+
+		FREE_PTR(orig_core_dump_pattern);
+	}
+
+	if (free_main_pidfile) {
+		FREE_CONST_PTR(main_pidfile);
+		free_main_pidfile = false;
+	}
+}
+
+void
+free_parent_mallocs_exit(void)
+{
+#ifdef _WITH_VRRP_
+	if (free_vrrp_pidfile)
+		FREE_CONST_PTR(vrrp_pidfile);
+#endif
+#ifdef _WITH_LVS_
+	if (free_checkers_pidfile)
+		FREE_CONST_PTR(checkers_pidfile);
+#endif
+#ifdef _WITH_BFD_
+	if (free_bfd_pidfile)
+		FREE_CONST_PTR(bfd_pidfile);
+#endif
+
+	FREE_CONST_PTR(config_id);
+}
+
+const char *
+make_syslog_ident(const char* name)
+{
+	size_t ident_len = strlen(name) + 1;
+	char *ident;
+
+#if HAVE_DECL_CLONE_NEWNET
+	if (global_data->network_namespace)
+		ident_len += strlen(global_data->network_namespace) + 1;
+#endif
+	if (global_data->instance_name)
+		ident_len += strlen(global_data->instance_name) + 1;
+
+	/* If we are writing MALLOC/FREE info to the log, we have
+	 * trouble FREEing the syslog_ident */
+#ifndef _MEM_CHECK_LOG_
+	ident = MALLOC(ident_len);
+#else
+	ident = malloc(ident_len);
+#endif
+
+	if (!ident)
+		return NULL;
+
+	strcpy(ident, name);
+#if HAVE_DECL_CLONE_NEWNET
+	if (global_data->network_namespace) {
+		strcat(ident, "_");
+		strcat(ident, global_data->network_namespace);
+	}
+#endif
+	if (global_data->instance_name) {
+		strcat(ident, "_");
+		strcat(ident, global_data->instance_name);
+	}
+
+	return ident;
+}
+
+static char *
+make_pidfile_name(const char* start, const char* instance, const char* extn)
+{
+	size_t len;
+	char *name;
+
+	len = strlen(start) + 1;
+	if (instance)
+		len += strlen(instance) + 1;
+	if (extn)
+		len += strlen(extn);
+
+	name = MALLOC(len);
+	if (!name) {
+		log_message(LOG_INFO, "Unable to make pidfile name for %s", start);
+		return NULL;
+	}
+
+	strcpy(name, start);
+	if (instance) {
+		strcat(name, "_");
+		strcat(name, instance);
+	}
+	if (extn)
+		strcat(name, extn);
+
+	return name;
+}
+
+#ifdef _WITH_VRRP_
+bool __attribute__ ((pure))
+running_vrrp(void)
+{
+	return (__test_bit(DAEMON_VRRP, &daemon_mode) &&
+	    (global_data->have_vrrp_config ||
+	     __test_bit(RUN_ALL_CHILDREN, &daemon_mode)));
+}
+#endif
+
+#ifdef _WITH_LVS_
+bool __attribute__ ((pure))
+running_checker(void)
+{
+	return (__test_bit(DAEMON_CHECKERS, &daemon_mode) &&
+	    (global_data->have_checker_config ||
+	     __test_bit(RUN_ALL_CHILDREN, &daemon_mode)));
+}
+#endif
+
+#ifdef _WITH_BFD_
+static bool __attribute__ ((pure))
+running_bfd(void)
+{
+	return (__test_bit(DAEMON_BFD, &daemon_mode) &&
+	    (global_data->have_bfd_config ||
+	     __test_bit(RUN_ALL_CHILDREN, &daemon_mode)));
+}
+#endif
+
+static char const *
+find_keepalived_child_name(pid_t pid)
+{
+#ifdef _WITH_LVS_
+	if (pid == checkers_child)
+		return PROG_CHECK;
+#endif
+#ifdef _WITH_VRRP_
+	if (pid == vrrp_child)
+		return PROG_VRRP;
+#endif
+#ifdef _WITH_BFD_
+	if (pid == bfd_child)
+		return PROG_BFD;
+#endif
+
+	return NULL;
+}
+
+static const vector_t *
+global_init_keywords(void)
+{
+	/* global definitions mapping */
+	init_global_keywords(true);
+
+#ifdef _WITH_VRRP_
+	init_vrrp_keywords(false);
+#endif
+#ifdef _WITH_LVS_
+	init_check_keywords(false);
+#endif
+#ifdef _WITH_BFD_
+	init_bfd_keywords(false);
+#endif
+
+	return keywords;
+}
 
-/* Daemon stop sequence */
 static void
+read_config_file(void)
+{
+	init_data(conf_file, global_init_keywords);
+}
+
+/* Daemon stop sequence */
+void
 stop_keepalived(void)
 {
-	log_message(LOG_INFO, "Stopping " VERSION_STRING);
+#ifndef _DEBUG_
 	/* Just cleanup memory & exit */
-	signal_handler_destroy();
 	thread_destroy_master(master);
 
-	pidfile_rm(main_pidfile);
-
-	if (daemon_mode & 1 || !daemon_mode)
+#ifdef _WITH_VRRP_
+	if (__test_bit(DAEMON_VRRP, &daemon_mode))
 		pidfile_rm(vrrp_pidfile);
+#endif
 
-	if (daemon_mode & 2 || !daemon_mode)
+#ifdef _WITH_LVS_
+	if (__test_bit(DAEMON_CHECKERS, &daemon_mode))
 		pidfile_rm(checkers_pidfile);
+#endif
 
-#ifdef _DEBUG_
-	keepalived_free_final("Parent process");
+#ifdef _WITH_BFD_
+	if (__test_bit(DAEMON_BFD, &daemon_mode))
+		pidfile_rm(bfd_pidfile);
+#endif
+
+	pidfile_rm(main_pidfile);
 #endif
 }
 
 /* Daemon init sequence */
-static void
+static int
 start_keepalived(void)
 {
+	bool have_child = false;
+
+#ifdef _WITH_BFD_
+	/* must be opened before vrrp and bfd start */
+	open_bfd_pipes();
+#endif
+
 #ifdef _WITH_LVS_
 	/* start healthchecker child */
-	if (daemon_mode & 2 || !daemon_mode)
+	if (running_checker()) {
 		start_check_child();
+		have_child = true;
+	}
 #endif
 #ifdef _WITH_VRRP_
 	/* start vrrp child */
-	if (daemon_mode & 1 || !daemon_mode)
+	if (running_vrrp()) {
 		start_vrrp_child();
+		have_child = true;
+	}
 #endif
+#ifdef _WITH_BFD_
+	/* start bfd child */
+	if (running_bfd()) {
+		start_bfd_child();
+		have_child = true;
+	}
+#endif
+
+	return have_child;
 }
 
-/* SIGHUP handler */
-void
-sighup(void *v, int sig)
+static void
+validate_config(void)
+{
+#ifdef _WITH_VRRP_
+	kernel_netlink_read_interfaces();
+#endif
+
+#ifdef _WITH_LVS_
+	/* validate healthchecker config */
+#ifndef _DEBUG_
+	prog_type = PROG_TYPE_CHECKER;
+#endif
+	check_validate_config();
+#endif
+#ifdef _WITH_VRRP_
+	/* validate vrrp config */
+#ifndef _DEBUG_
+	prog_type = PROG_TYPE_VRRP;
+#endif
+	vrrp_validate_config();
+#endif
+#ifdef _WITH_BFD_
+	/* validate bfd config */
+#ifndef _DEBUG_
+	prog_type = PROG_TYPE_BFD;
+#endif
+	bfd_validate_config();
+#endif
+}
+
+static void
+config_test_exit(void)
+{
+	config_err_t config_err = get_config_status();
+
+	switch (config_err) {
+	case CONFIG_OK:
+		exit(KEEPALIVED_EXIT_OK);
+	case CONFIG_FILE_NOT_FOUND:
+	case CONFIG_BAD_IF:
+	case CONFIG_FATAL:
+		exit(KEEPALIVED_EXIT_CONFIG);
+	case CONFIG_SECURITY_ERROR:
+		exit(KEEPALIVED_EXIT_CONFIG_TEST_SECURITY);
+	default:
+		exit(KEEPALIVED_EXIT_CONFIG_TEST);
+	}
+}
+
+#ifndef _DEBUG_
+static bool reload_config(void)
+{
+	bool unsupported_change = false;
+
+	log_message(LOG_INFO, "Reloading ...");
+
+	/* Make sure there isn't an attempt to change the network namespace or instance name */
+	old_global_data = global_data;
+	global_data = NULL;
+	global_data = alloc_global_data();
+
+	read_config_file();
+
+	init_global_data(global_data, old_global_data, false);
+
+	/* Update process name if necessary */
+	if (!global_data->process_name != !old_global_data->process_name ||
+	    (global_data->process_name && strcmp(global_data->process_name, old_global_data->process_name)))
+		set_process_name(global_data->process_name);
+
+#if HAVE_DECL_CLONE_NEWNET
+	if (override_namespace) {
+		FREE_CONST_PTR(global_data->network_namespace);
+		global_data->network_namespace = STRDUP(override_namespace);
+	}
+
+	if (!!old_global_data->network_namespace != !!global_data->network_namespace ||
+	    (global_data->network_namespace && strcmp(old_global_data->network_namespace, global_data->network_namespace))) {
+		log_message(LOG_INFO, "Cannot change network namespace at a reload - please restart %s", PACKAGE);
+		unsupported_change = true;
+	}
+	FREE_CONST_PTR(global_data->network_namespace);
+	global_data->network_namespace = old_global_data->network_namespace;
+	old_global_data->network_namespace = NULL;
+#endif
+
+	if (!!old_global_data->instance_name != !!global_data->instance_name ||
+	    (global_data->instance_name && strcmp(old_global_data->instance_name, global_data->instance_name))) {
+		log_message(LOG_INFO, "Cannot change instance name at a reload - please restart %s", PACKAGE);
+		unsupported_change = true;
+	}
+	FREE_CONST_PTR(global_data->instance_name);
+	global_data->instance_name = old_global_data->instance_name;
+	old_global_data->instance_name = NULL;
+
+#ifdef _WITH_NFTABLES_
+	if (!!old_global_data->vrrp_nf_table_name != !!global_data->vrrp_nf_table_name ||
+	    (global_data->vrrp_nf_table_name && strcmp(old_global_data->vrrp_nf_table_name, global_data->vrrp_nf_table_name))) {
+		log_message(LOG_INFO, "Cannot change nftables table name at a reload - please restart %s", PACKAGE);
+		unsupported_change = true;
+	}
+	FREE_CONST_PTR(global_data->vrrp_nf_table_name);
+	global_data->vrrp_nf_table_name = old_global_data->vrrp_nf_table_name;
+	old_global_data->vrrp_nf_table_name = NULL;
+#endif
+
+	if (unsupported_change) {
+		/* We cannot reload the configuration, so continue with the old config */
+		free_global_data (global_data);
+		global_data = old_global_data;
+	}
+	else
+		free_global_data (old_global_data);
+
+
+	return !unsupported_change;
+}
+
+/* SIGHUP/USR1/USR2 handler */
+static void
+propagate_signal(__attribute__((unused)) void *v, int sig)
 {
-	/* Signal child process */
+	if (sig == SIGHUP) {
+		if (!reload_config())
+			return;
+	}
+
+	/* Signal child processes */
+#ifdef _WITH_VRRP_
 	if (vrrp_child > 0)
-		kill(vrrp_child, SIGHUP);
-	if (checkers_child > 0)
-		kill(checkers_child, SIGHUP);
+		kill(vrrp_child, sig);
+	else if (sig == SIGHUP && running_vrrp())
+		start_vrrp_child();
+#endif
+#ifdef _WITH_LVS_
+	if (sig == SIGHUP || sig == SIGUSR1) {
+		if (checkers_child > 0)
+			kill(checkers_child, sig);
+		else if (running_checker())
+			start_check_child();
+	}
+#endif
+#ifdef _WITH_BFD_
+	if (sig == SIGHUP) {
+		if (bfd_child > 0)
+			kill(bfd_child, sig);
+		else if (running_bfd())
+			start_bfd_child();
+	}
+#endif
 }
 
 /* Terminate handler */
-void
-sigend(void *v, int sig)
+static void
+sigend(__attribute__((unused)) void *v, __attribute__((unused)) int sig)
 {
 	int status;
+	int ret;
+	int wait_count = 0;
+	struct timeval start_time, now;
+#ifdef HAVE_SIGNALFD
+	int timeout = child_wait_time * 1000;
+	int signal_fd = master->signal_fd;
+	struct signalfd_siginfo siginfo;
+	sigset_t sigmask;
+	struct epoll_event ev = { .events = EPOLLIN, .data.fd = master->signal_fd };
+	int efd;
+	int wstatus;
+#else
+	sigset_t old_set, child_wait;
+	struct timespec timeout = {
+		.tv_sec = child_wait_time,
+		.tv_nsec = 0
+	};
+#endif
 
 	/* register the terminate thread */
 	thread_add_terminate_event(master);
 
+	log_message(LOG_INFO, "Stopping");
+
+#ifdef HAVE_SIGNALFD
+	/* We only want to receive SIGCHLD now */
+	sigemptyset(&sigmask);
+	sigaddset(&sigmask, SIGCHLD);
+	signalfd(signal_fd, &sigmask, 0);
+#else
+	sigmask_func(0, NULL, &old_set);
+	if (!sigismember(&old_set, SIGCHLD)) {
+		sigemptyset(&child_wait);
+		sigaddset(&child_wait, SIGCHLD);
+		sigmask_func(SIG_BLOCK, &child_wait, NULL);
+	}
+#endif
+
+#ifdef _WITH_VRRP_
 	if (vrrp_child > 0) {
-		kill(vrrp_child, SIGTERM);
-		waitpid(vrrp_child, &status, WNOHANG);
+		if (kill(vrrp_child, SIGTERM)) {
+			/* ESRCH means no such process */
+			if (errno == ESRCH)
+				vrrp_child = 0;
+		}
+		else
+			wait_count++;
 	}
+#endif
+#ifdef _WITH_LVS_
 	if (checkers_child > 0) {
-		kill(checkers_child, SIGTERM);
-		waitpid(checkers_child, &status, WNOHANG);
+		if (kill(checkers_child, SIGTERM)) {
+			if (errno == ESRCH)
+				checkers_child = 0;
+		}
+		else
+			wait_count++;
 	}
+#endif
+#ifdef _WITH_BFD_
+	if (bfd_child > 0) {
+		if (kill(bfd_child, SIGTERM)) {
+			if (errno == ESRCH)
+				bfd_child = 0;
+		}
+		else
+			wait_count++;
+	}
+#endif
+
+#ifdef HAVE_SIGNALFD
+	efd = epoll_create(1);
+	epoll_ctl(efd, EPOLL_CTL_ADD, signal_fd, &ev);
+#endif
+
+	gettimeofday(&start_time, NULL);
+	while (wait_count) {
+#ifdef HAVE_SIGNALFD
+		ret = epoll_wait(efd, &ev, 1, timeout);
+		if (ret == 0)
+			break;
+		if (ret == -1) {
+			if (check_EINTR(errno))
+				continue;
+
+			log_message(LOG_INFO, "Terminating epoll_wait returned errno %d", errno);
+			break;
+		}
+
+		if (ev.data.fd != signal_fd) {
+			log_message(LOG_INFO, "Terminating epoll_wait did not return signal_fd");
+			continue;
+		}
+
+		if (read(signal_fd, &siginfo, sizeof(siginfo)) != sizeof(siginfo)) {
+			log_message(LOG_INFO, "Terminating signal read did not read entire siginfo");
+			break;
+		}
+
+		status = siginfo.ssi_code == CLD_EXITED ? W_EXITCODE(siginfo.ssi_status, 0) :
+			 siginfo.ssi_code == CLD_KILLED ? W_EXITCODE(0, siginfo.ssi_status) :
+							   WCOREFLAG;
+
+#ifdef _WITH_VRRP_
+		if (vrrp_child > 0 && vrrp_child == (pid_t)siginfo.ssi_pid) {
+			report_child_status(status, vrrp_child, PROG_VRRP);
+			ret = waitpid(vrrp_child, &wstatus, WNOHANG);
+			if (ret == 0)
+				continue;
+			if (ret == -1) {
+				if (check_EINTR(errno))
+					continue;
+				log_message(LOG_INFO, "Wait for vrrp child return errno %d", errno);
+			}
+
+			/* We could check ret == vrrp_child, but it seems unneccessary */
+
+			vrrp_child = 0;
+			wait_count--;
+		}
+#endif
+
+#ifdef _WITH_LVS_
+		if (checkers_child > 0 && checkers_child == (pid_t)siginfo.ssi_pid) {
+			report_child_status(status, checkers_child, PROG_CHECK);
+			ret = waitpid(checkers_child, &wstatus, WNOHANG);
+			if (ret == 0)
+				continue;
+			if (ret == -1) {
+				if (check_EINTR(errno))
+					continue;
+				log_message(LOG_INFO, "Wait for checker child return errno %d", errno);
+			}
+			checkers_child = 0;
+			wait_count--;
+		}
+#endif
+#ifdef _WITH_BFD_
+		if (bfd_child > 0 && bfd_child == (pid_t)siginfo.ssi_pid) {
+			report_child_status(status, bfd_child, PROG_BFD);
+			ret = waitpid(bfd_child, &wstatus, WNOHANG);
+			if (ret == 0)
+				continue;
+			if (ret == -1) {
+				if (check_EINTR(errno))
+					continue;
+				log_message(LOG_INFO, "Wait for bfd child return errno %d", errno);
+			}
+			bfd_child = 0;
+			wait_count--;
+		}
+#endif
+
+#else
+		ret = sigtimedwait(&child_wait, NULL, &timeout);
+		if (ret == -1) {
+			if (check_EINTR(errno))
+				continue;
+			if (check_EAGAIN(errno))
+				break;
+		}
+
+#ifdef _WITH_VRRP_
+		if (vrrp_child > 0 && vrrp_child == waitpid(vrrp_child, &status, WNOHANG)) {
+			report_child_status(status, vrrp_child, PROG_VRRP);
+			vrrp_child = 0;
+			wait_count--;
+		}
+#endif
+
+#ifdef _WITH_LVS_
+		if (checkers_child > 0 && checkers_child == waitpid(checkers_child, &status, WNOHANG)) {
+			report_child_status(status, checkers_child, PROG_CHECK);
+			checkers_child = 0;
+			wait_count--;
+		}
+#endif
+#ifdef _WITH_BFD_
+		if (bfd_child > 0 && bfd_child == waitpid(bfd_child, &status, WNOHANG)) {
+			report_child_status(status, bfd_child, PROG_BFD);
+			bfd_child = 0;
+			wait_count--;
+		}
+#endif
+#endif
+
+		if (wait_count) {
+			gettimeofday(&now, NULL);
+#ifdef HAVE_SIGNALFD
+			timeout = (child_wait_time - (now.tv_sec - start_time.tv_sec)) * 1000 + (start_time.tv_usec - now.tv_usec) / 1000;
+			if (timeout < 0)
+				break;
+#else
+			timeout.tv_sec = child_wait_time - (now.tv_sec - start_time.tv_sec);
+			timeout.tv_nsec = (start_time.tv_usec - now.tv_usec) * 1000;
+			if (timeout.tv_nsec < 0) {
+				timeout.tv_nsec += 1000000000L;
+				timeout.tv_sec--;
+			}
+			if (timeout.tv_sec < 0)
+				break;
+#endif
+		}
+	}
+#ifdef HAVE_SIGNALFD
+	close(efd);
+#endif
+
+	/* A child may not have terminated, so force its termination */
+#ifdef _WITH_VRRP_
+	if (vrrp_child) {
+		log_message(LOG_INFO, "vrrp process failed to die - forcing termination");
+		kill(vrrp_child, SIGKILL);
+	}
+#endif
+#ifdef _WITH_LVS_
+	if (checkers_child) {
+		log_message(LOG_INFO, "checker process failed to die - forcing termination");
+		kill(checkers_child, SIGKILL);
+	}
+#endif
+#ifdef _WITH_BFD_
+	if (bfd_child) {
+		log_message(LOG_INFO, "bfd process failed to die - forcing termination");
+		kill(bfd_child, SIGKILL);
+	}
+#endif
+
+#ifndef HAVE_SIGNALFD
+	if (!sigismember(&old_set, SIGCHLD))
+		sigmask_func(SIG_UNBLOCK, &child_wait, NULL);
+#endif
 }
+#endif
 
 /* Initialize signal handler */
-void
+static void
 signal_init(void)
 {
-	signal_handler_init();
-	signal_set(SIGHUP, sighup, NULL);
+#ifndef _DEBUG_
+	signal_set(SIGHUP, propagate_signal, NULL);
+	signal_set(SIGUSR1, propagate_signal, NULL);
+	signal_set(SIGUSR2, propagate_signal, NULL);
+#ifdef _WITH_JSON_
+	signal_set(SIGJSON, propagate_signal, NULL);
+#endif
 	signal_set(SIGINT, sigend, NULL);
 	signal_set(SIGTERM, sigend, NULL);
+#endif
 	signal_ignore(SIGPIPE);
 }
 
+static void
+signals_ignore(void) {
+#ifndef _DEBUG_
+	signal_ignore(SIGHUP);
+	signal_ignore(SIGUSR1);
+	signal_ignore(SIGUSR2);
+#ifdef _WITH_JSON_
+	signal_ignore(SIGJSON);
+#endif
+#endif
+}
+
+/* To create a core file when abrt is running (a RedHat distribution),
+ * and keepalived isn't installed from an RPM package, edit the file
+ * “/etc/abrt/abrt.conf�, and change the value of the field
+ * “ProcessUnpackaged� to “yes�.
+ *
+ * Alternatively, use the -M command line option. */
+static void
+update_core_dump_pattern(const char *pattern_str)
+{
+	int fd;
+	bool initialising = (orig_core_dump_pattern == NULL);
+
+	/* CORENAME_MAX_SIZE in kernel source include/linux/binfmts.h defines
+	 * the maximum string length, * see core_pattern[CORENAME_MAX_SIZE] in
+	 * fs/coredump.c. Currently (Linux 4.10) defines it to be 128, but the
+	 * definition is not exposed to user-space. */
+#define	CORENAME_MAX_SIZE	128
+
+	if (initialising)
+		orig_core_dump_pattern = MALLOC(CORENAME_MAX_SIZE);
+
+	fd = open ("/proc/sys/kernel/core_pattern", O_RDWR);
+
+	if (fd == -1 ||
+	    (initialising && read(fd, orig_core_dump_pattern, CORENAME_MAX_SIZE - 1) == -1) ||
+	    write(fd, pattern_str, strlen(pattern_str)) == -1) {
+		log_message(LOG_INFO, "Unable to read/write core_pattern");
+
+		if (fd != -1)
+			close(fd);
+
+		FREE(orig_core_dump_pattern);
+
+		return;
+	}
+
+	close(fd);
+
+	if (!initialising)
+		FREE_PTR(orig_core_dump_pattern);
+}
+
+static void
+core_dump_init(void)
+{
+	struct rlimit orig_rlim, rlim;
+
+	if (set_core_dump_pattern) {
+		/* If we set the core_pattern here, we will attempt to restore it when we
+		 * exit. This will be fine if it is a child of ours that core dumps,
+		 * but if we ourself core dump, then the core_pattern will not be restored */
+		update_core_dump_pattern(core_dump_pattern);
+	}
+
+	if (create_core_dump) {
+		rlim.rlim_cur = RLIM_INFINITY;
+		rlim.rlim_max = RLIM_INFINITY;
+
+		if (getrlimit(RLIMIT_CORE, &orig_rlim) == -1)
+			log_message(LOG_INFO, "Failed to get core file size");
+		else if (setrlimit(RLIMIT_CORE, &rlim) == -1)
+			log_message(LOG_INFO, "Failed to set core file size");
+		else
+			set_child_rlimit(RLIMIT_CORE, &orig_rlim);
+	}
+}
+
+static mode_t
+set_umask(const char *optarg)
+{
+	long umask_long;
+	mode_t umask_bits;
+	char *endptr;
+
+	umask_long = strtoll(optarg, &endptr, 0);
+
+	if (*endptr || umask_long < 0 || umask_long & ~(S_IRWXU | S_IRWXG | S_IRWXO)) {
+		fprintf(stderr, "Invalid --umask option %s", optarg);
+		return 0;
+	}
+
+	umask_bits = umask_long & (S_IRWXU | S_IRWXG | S_IRWXO);
+	umask(umask_bits);
+
+	umask_cmdline = true;
+
+#ifdef _MEM_CHECK_
+	update_mem_check_log_perms(umask_bits);
+#endif
+#ifdef ENABLE_LOG_TO_FILE
+	update_log_file_perms(umask_bits);
+#endif
+
+	return umask_bits;
+}
+
+RELAX_SUGGEST_ATTRIBUTE_CONST_START
+void
+initialise_debug_options(void)
+{
+#if defined WITH_DEBUG_OPTIONS && !defined _DEBUG_
+	char mask = 0;
+
+	if (prog_type == PROG_TYPE_PARENT)
+		mask = 1 << PROG_TYPE_PARENT;
+#ifdef _WITH_BFD_
+	else if (prog_type == PROG_TYPE_BFD)
+		mask = 1 << PROG_TYPE_BFD;
+#endif
+#ifdef _WITH_LVS_
+	else if (prog_type == PROG_TYPE_CHECKER)
+		mask = 1 << PROG_TYPE_CHECKER;
+#endif
+#ifdef _WITH_VRRP_
+	else if (prog_type == PROG_TYPE_VRRP)
+		mask = 1 << PROG_TYPE_VRRP;
+#endif
+
+#ifdef _TIMER_CHECK_
+	do_timer_check = !!(timer_debug & mask);
+#endif
+#ifdef _SMTP_ALERT_DEBUG_
+	do_smtp_alert_debug = !!(smtp_debug & mask);
+#endif
+#ifdef _EPOLL_DEBUG_
+	do_epoll_debug = !!(epoll_debug & mask);
+#endif
+#ifdef _EPOLL_THREAD_DUMP_
+	do_epoll_thread_dump = !!(epoll_thread_debug & mask);
+#endif
+#ifdef _REGEX_DEBUG_
+	do_regex_debug = !!(regex_debug & mask);
+#endif
+#ifdef _WITH_REGEX_TIMERS_
+	do_regex_timers = !!(regex_timers & mask);
+#endif
+#ifdef _TSM_DEBUG_
+	do_tsm_debug = !!(tsm_debug & mask);
+#endif
+#ifdef _VRRP_FD_DEBUG_
+	do_vrrp_fd_debug = !!(vrrp_fd_debug & mask);
+#endif
+#ifdef _NETLINK_TIMERS_
+	do_netlink_timers = !!(netlink_timer_debug & mask);
+#endif
+#ifdef _NETWORK_TIMESTAMP_
+	do_network_timestamp = !!(network_timestamp_debug & mask);
+#endif
+#ifdef _WITH_CN_PROC_
+#ifdef _TRACK_PROCESS_DEBUG_
+	do_track_process_debug_detail = !!(track_process_debug_detail & mask);
+	do_track_process_debug = !!(track_process_debug & mask) | do_track_process_debug_detail;
+#endif
+#endif
+#ifdef _PARSER_DEBUG_
+	do_parser_debug = !!(parser_debug & mask);
+#endif
+#ifdef _DUMP_KEYWORDS_
+	do_dump_keywords = !!(dump_keywords & mask);
+#endif
+#endif
+}
+RELAX_SUGGEST_ATTRIBUTE_CONST_END
+
+#ifdef  WITH_DEBUG_OPTIONS
+static void
+set_debug_options(const char *options)
+{
+	char all_processes, processes;
+	char opt;
+	const char *opt_p = options;
+
+#ifdef _DEBUG_
+	all_processes = 1;
+#else
+	all_processes = (1 << PROG_TYPE_PARENT);
+#ifdef _WITH_BFD_
+	all_processes |= (1 << PROG_TYPE_BFD);
+#endif
+#ifdef _WITH_LVS_
+	all_processes |= (1 << PROG_TYPE_CHECKER);
+#endif
+#ifdef _WITH_VRRP_
+	all_processes |= (1 << PROG_TYPE_VRRP);
+#endif
+#endif
+
+	if (!options) {
+#ifdef _TIMER_CHECK_
+		timer_debug = all_processes;
+#endif
+#ifdef _SMTP_ALERT_DEBUG_
+		smtp_debug = all_processes;
+#endif
+#ifdef _EPOLL_DEBUG_
+		epoll_debug = all_processes;
+#endif
+#ifdef _EPOLL_THREAD_DUMP_
+		epoll_thread_debug = all_processes;
+#endif
+#ifdef _REGEX_DEBUG_
+		regex_debug = all_processes;
+#endif
+#ifdef _WITH_REGEX_TIMERS_
+		regex_timers = all_processes;
+#endif
+#ifdef _TSM_DEBUG_
+		tsm_debug = all_processes;
+#endif
+#ifdef _VRRP_FD_DEBUG_
+		vrrp_fd_debug = all_processes;
+#endif
+#ifdef _NETLINK_TIMERS_
+		netlink_timer_debug = all_processes;
+#endif
+#ifdef _NETWORK_TIMESTAMP_
+		network_timestamp_debug = all_processes;
+#endif
+#ifdef _TRACK_PROCESS_DEBUG_
+		track_process_debug = all_processes;
+		track_process_debug_detail = all_processes;
+#endif
+#ifdef _PARSER_DEBUG_
+		parser_debug = all_processes;
+#endif
+#ifdef _DUMP_KEYWORDS_
+		dump_keywords = all_processes;
+#endif
+
+		return;
+	}
+
+	opt_p = options;
+	while (*opt_p) {
+		if (!isupper(*opt_p)) {
+			fprintf(stderr, "Unknown debug option'%c' in '%s'\n", *opt_p, options);
+			return;
+		}
+		opt = *opt_p++;
+
+#ifdef _DEBUG_
+		processes = all_processes;
+#else
+		if (!*opt_p || isupper(*opt_p))
+			processes = all_processes;
+		else {
+			processes = 0;
+			while (*opt_p && !isupper(*opt_p)) {
+				switch (*opt_p) {
+				case 'p':
+					processes |= (1 << PROG_TYPE_PARENT);
+					break;
+#ifdef _WITH_BFD_
+				case 'b':
+					processes |= (1 << PROG_TYPE_BFD);
+					break;
+#endif
+#ifdef _WITH_LVS_
+				case 'c':
+					processes |= (1 << PROG_TYPE_CHECKER);
+					break;
+#endif
+#ifdef _WITH_VRRP_
+				case 'v':
+					processes |= (1 << PROG_TYPE_VRRP);
+					break;
+#endif
+				default:
+					fprintf(stderr, "Unknown debug process '%c' in '%s'\n", *opt_p, options);
+					return;
+				}
+				opt_p++;
+			}
+		}
+#endif
+
+		switch (opt) {
+#ifdef _TIMER_CHECK_
+		case 'T':
+			timer_debug = processes;
+			break;
+#endif
+#ifdef _SMTP_ALERT_DEBUG_
+		case 'M':
+			smtp_debug = processes;
+			break;
+#endif
+#ifdef _EPOLL_DEBUG_
+		case 'E':
+			epoll_debug = processes;
+			break;
+#endif
+#ifdef _EPOLL_THREAD_DUMP_
+		case 'D':
+			epoll_thread_debug = processes;
+			break;
+#endif
+#ifdef _REGEX_DEBUG_
+		case 'R':
+			regex_debug = processes;
+			break;
+#endif
+#ifdef _WITH_REGEX_TIMERS_
+		case 'X':
+			regex_timers = processes;
+			break;
+#endif
+#ifdef _TSM_DEBUG_
+		case 'S':
+			tsm_debug = processes;
+			break;
+#endif
+#ifdef _VRRP_FD_DEBUG_
+		case 'F':
+			vrrp_fd_debug = processes;
+			break;
+#endif
+#ifdef _NETLINK_TIMERS_
+		case 'N':
+			netlink_timer_debug = processes;
+			break;
+#endif
+#ifdef _NETWORK_TIMESTAMP_
+		case 'P':
+			network_timestamp_debug = processes;
+			break;
+#endif
+#ifdef _TRACK_PROCESS_DEBUG_
+		case 'O':
+			track_process_debug = processes;
+			break;
+		case 'A':
+			track_process_debug_detail = processes;
+			break;
+#endif
+#ifdef _PARSER_DEBUG_
+		case 'C':
+			parser_debug = processes;
+			break;
+#endif
+#ifdef _DUMP_KEYWORDS_
+		case 'K':
+			dump_keywords = processes;
+			break;
+#endif
+		default:
+			fprintf(stderr, "Unknown debug type '%c' in '%s'\n", opt, options);
+			return;
+		}
+	}
+}
+#endif
+
 /* Usage function */
 static void
 usage(const char *prog)
 {
 	fprintf(stderr, "Usage: %s [OPTION...]\n", prog);
 	fprintf(stderr, "  -f, --use-file=FILE          Use the specified configuration file\n");
+#if defined _WITH_VRRP_ && defined _WITH_LVS_
 	fprintf(stderr, "  -P, --vrrp                   Only run with VRRP subsystem\n");
 	fprintf(stderr, "  -C, --check                  Only run with Health-checker subsystem\n");
+#endif
+#ifdef _WITH_BFD_
+	fprintf(stderr, "  -B, --no_bfd                 Don't run BFD subsystem\n");
+#endif
+	fprintf(stderr, "      --all                    Force all child processes to run, even if have no configuration\n");
 	fprintf(stderr, "  -l, --log-console            Log messages to local console\n");
 	fprintf(stderr, "  -D, --log-detail             Detailed log messages\n");
 	fprintf(stderr, "  -S, --log-facility=[0-7]     Set syslog facility to LOG_LOCAL[0-7]\n");
+#ifdef ENABLE_LOG_TO_FILE
+	fprintf(stderr, "  -g, --log-file=FILE          Also log to FILE (default /tmp/keepalived.log)\n");
+	fprintf(stderr, "      --flush-log-file         Flush log file on write\n");
+#endif
+	fprintf(stderr, "  -G, --no-syslog              Don't log via syslog\n");
+	fprintf(stderr, "  -u, --umask=MASK             umask for file creation (in numeric form)\n");
+#ifdef _WITH_VRRP_
+	fprintf(stderr, "  -X, --release-vips           Drop VIP on transition from signal.\n");
 	fprintf(stderr, "  -V, --dont-release-vrrp      Don't remove VRRP VIPs and VROUTEs on daemon stop\n");
+#endif
+#ifdef _WITH_LVS_
 	fprintf(stderr, "  -I, --dont-release-ipvs      Don't remove IPVS topology on daemon stop\n");
+#endif
 	fprintf(stderr, "  -R, --dont-respawn           Don't respawn child processes\n");
 	fprintf(stderr, "  -n, --dont-fork              Don't fork the daemon process\n");
 	fprintf(stderr, "  -d, --dump-conf              Dump the configuration data\n");
 	fprintf(stderr, "  -p, --pid=FILE               Use specified pidfile for parent process\n");
+#ifdef _WITH_VRRP_
 	fprintf(stderr, "  -r, --vrrp_pid=FILE          Use specified pidfile for VRRP child process\n");
+#endif
+#ifdef _WITH_LVS_
 	fprintf(stderr, "  -c, --checkers_pid=FILE      Use specified pidfile for checkers child process\n");
+	fprintf(stderr, "  -a, --address-monitoring     Report all address additions/deletions notified via netlink\n");
+#endif
+#ifdef _WITH_BFD_
+	fprintf(stderr, "  -b, --bfd_pid=FILE           Use specified pidfile for BFD child process\n");
+#endif
 #ifdef _WITH_SNMP_
 	fprintf(stderr, "  -x, --snmp                   Enable SNMP subsystem\n");
+	fprintf(stderr, "  -A, --snmp-agent-socket=FILE Use the specified socket for master agent\n");
+#endif
+#if HAVE_DECL_CLONE_NEWNET
+	fprintf(stderr, "  -s, --namespace=NAME         Run in network namespace NAME (overrides config)\n");
+#endif
+	fprintf(stderr, "  -m, --core-dump              Produce core dump if terminate abnormally\n");
+	fprintf(stderr, "  -M, --core-dump-pattern=PATN Also set /proc/sys/kernel/core_pattern to PATN (default 'core')\n");
+#ifdef _MEM_CHECK_LOG_
+	fprintf(stderr, "  -L, --mem-check-log          Log malloc/frees to syslog\n");
+#endif
+	fprintf(stderr, "  -i, --config-id id           Skip any configuration lines beginning '@' that don't match id\n"
+			"                                or any lines beginning @^ that do match.\n"
+			"                                The config-id defaults to the node name if option not used\n");
+	fprintf(stderr, "      --signum=SIGFUNC         Return signal number for STOP, RELOAD, DATA, STATS"
+#ifdef _WITH_JSON_
+								", JSON"
+#endif
+								"\n");
+	fprintf(stderr, "  -t, --config-test[=LOG_FILE] Check the configuration for obvious errors, output to\n"
+			"                                stderr by default\n");
+#ifdef _WITH_PERF_
+	fprintf(stderr, "      --perf[=PERF_TYPE]       Collect perf data, PERF_TYPE=all, run(default) or end\n");
+#endif
+#ifdef WITH_DEBUG_OPTIONS
+	fprintf(stderr, "      --debug[=...]            Enable debug options. p, b, c, v specify parent, bfd, checker and vrrp processes\n");
+#ifdef _TIMER_CHECK_
+	fprintf(stderr, "                                   T - timer debug\n");
+#endif
+#ifdef _SMTP_ALERT_DEBUG_
+	fprintf(stderr, "                                   M - email alert debug\n");
+#endif
+#ifdef _EPOLL_DEBUG_
+	fprintf(stderr, "                                   E - epoll debug\n");
+#endif
+#ifdef _EPOLL_THREAD_DUMP_
+	fprintf(stderr, "                                   D - epoll thread dump debug\n");
+#endif
+#ifdef _VRRP_FD_DEBUG_
+	fprintf(stderr, "                                   F - vrrp fd dump debug\n");
+#endif
+#ifdef _REGEX_DEBUG_
+	fprintf(stderr, "                                   R - regex debug\n");
+#endif
+#ifdef _WITH_REGEX_TIMERS_
+	fprintf(stderr, "                                   X - regex timers\n");
+#endif
+#ifdef _TSM_DEBUG_
+	fprintf(stderr, "                                   S - TSM debug\n");
+#endif
+#ifdef _NETLINK_TIMERS_
+	fprintf(stderr, "                                   N - netlink timer debug\n");
+#endif
+#ifdef _NETWORK_TIMESTAMP_
+	fprintf(stderr, "                                   P - network timestamp debug\n");
+#endif
+#ifdef _TRACK_PROCESS_DEBUG_
+	fprintf(stderr, "                                   O - track process debug\n");
+	fprintf(stderr, "                                   A - track process debug with extra detail\n");
+#endif
+#ifdef _PARSER_DEBUG_
+	fprintf(stderr, "                                   C - parser (config) debug\n");
+#endif
+#ifdef _DUMP_KEYWORDS_
+	fprintf(stderr, "                                   K - dump keywords\n");
+#endif
+	fprintf(stderr, "                                 Example --debug=TpMEvcp\n");
 #endif
 	fprintf(stderr, "  -v, --version                Display the version number\n");
 	fprintf(stderr, "  -h, --help                   Display this help message\n");
 }
 
 /* Command line parser */
-static void
+static bool
 parse_cmdline(int argc, char **argv)
 {
 	int c;
+	bool reopen_log = false;
+	int signum;
+	struct utsname uname_buf;
+	int longindex;
+	int curind;
+	bool bad_option = false;
+	unsigned facility;
+	mode_t new_umask_val;
 
 	struct option long_options[] = {
-		{"use-file",          required_argument, 0, 'f'},
-		{"vrrp",              no_argument,       0, 'P'},
-		{"check",             no_argument,       0, 'C'},
-		{"log-console",       no_argument,       0, 'l'},
-		{"log-detail",        no_argument,       0, 'D'},
-		{"log-facility",      required_argument, 0, 'S'},
-		{"dont-release-vrrp", no_argument,       0, 'V'},
-		{"dont-release-ipvs", no_argument,       0, 'I'},
-		{"dont-respawn",      no_argument,       0, 'R'},
-		{"dont-fork",         no_argument,       0, 'n'},
-		{"dump-conf",         no_argument,       0, 'd'},
-		{"pid",               required_argument, 0, 'p'},
-		{"vrrp_pid",          required_argument, 0, 'r'},
-		{"checkers_pid",      required_argument, 0, 'c'},
- #ifdef _WITH_SNMP_
-		{"snmp",              no_argument,       0, 'x'},
- #endif
-		{"version",           no_argument,       0, 'v'},
-		{"help",              no_argument,       0, 'h'},
-		{0, 0, 0, 0}
+		{"use-file",		required_argument,	NULL, 'f'},
+#if defined _WITH_VRRP_ && defined _WITH_LVS_
+		{"vrrp",		no_argument,		NULL, 'P'},
+		{"check",		no_argument,		NULL, 'C'},
+#endif
+#ifdef _WITH_BFD_
+		{"no_bfd",		no_argument,		NULL, 'B'},
+#endif
+		{"all",			no_argument,		NULL,  3 },
+		{"log-console",		no_argument,		NULL, 'l'},
+		{"log-detail",		no_argument,		NULL, 'D'},
+		{"log-facility",	required_argument,	NULL, 'S'},
+		{"log-file",		optional_argument,	NULL, 'g'},
+#ifdef ENABLE_LOG_TO_FILE
+		{"flush-log-file",	no_argument,		NULL,  2 },
+#endif
+		{"no-syslog",		no_argument,		NULL, 'G'},
+		{"umask",		required_argument,	NULL, 'u'},
+#ifdef _WITH_VRRP_
+		{"release-vips",	no_argument,		NULL, 'X'},
+		{"dont-release-vrrp",	no_argument,		NULL, 'V'},
+#endif
+#ifdef _WITH_LVS_
+		{"dont-release-ipvs",	no_argument,		NULL, 'I'},
+#endif
+		{"dont-respawn",	no_argument,		NULL, 'R'},
+		{"dont-fork",		no_argument,		NULL, 'n'},
+		{"dump-conf",		no_argument,		NULL, 'd'},
+		{"pid",			required_argument,	NULL, 'p'},
+#ifdef _WITH_VRRP_
+		{"vrrp_pid",		required_argument,	NULL, 'r'},
+#endif
+#ifdef _WITH_LVS_
+		{"checkers_pid",	required_argument,	NULL, 'c'},
+		{"address-monitoring",	no_argument,		NULL, 'a'},
+#endif
+#ifdef _WITH_BFD_
+		{"bfd_pid",		required_argument,	NULL, 'b'},
+#endif
+#ifdef _WITH_SNMP_
+		{"snmp",		no_argument,		NULL, 'x'},
+		{"snmp-agent-socket",	required_argument,	NULL, 'A'},
+#endif
+		{"core-dump",		no_argument,		NULL, 'm'},
+		{"core-dump-pattern",	optional_argument,	NULL, 'M'},
+#ifdef _MEM_CHECK_LOG_
+		{"mem-check-log",	no_argument,		NULL, 'L'},
+#endif
+#if HAVE_DECL_CLONE_NEWNET
+		{"namespace",		required_argument,	NULL, 's'},
+#endif
+		{"config-id",		required_argument,	NULL, 'i'},
+		{"signum",		required_argument,	NULL,  4 },
+		{"config-test",		optional_argument,	NULL, 't'},
+#ifdef _WITH_PERF_
+		{"perf",		optional_argument,	NULL,  5 },
+#endif
+#ifdef WITH_DEBUG_OPTIONS
+		{"debug",		optional_argument,	NULL,  6 },
+#endif
+		{"version",		no_argument,		NULL, 'v'},
+		{"help",		no_argument,		NULL, 'h'},
+
+		{NULL,			0,			NULL,  0 }
 	};
 
+	/* Unfortunately, if a short option is used, getopt_long() doesn't change the value
+	 * of longindex, so we need to ensure that before calling getopt_long(), longindex
+	 * is set to a known invalid value */
+	curind = optind;
+	while (longindex = -1, (c = getopt_long(argc, argv, ":vhlndu:DRS:f:p:i:mM::g::Gt::"
+#if defined _WITH_VRRP_ && defined _WITH_LVS_
+					    "PC"
+#endif
+#ifdef _WITH_VRRP_
+					    "r:VX"
+#endif
+#ifdef _WITH_LVS_
+					    "ac:I"
+#endif
+#ifdef _WITH_BFD_
+					    "Bb:"
+#endif
 #ifdef _WITH_SNMP_
-	while ((c = getopt_long(argc, argv, "vhlndVIDRS:f:PCp:c:r:x", long_options, NULL)) != EOF) {
-#else
-	while ((c = getopt_long(argc, argv, "vhlndVIDRS:f:PCp:c:r:", long_options, NULL)) != EOF) {
+					    "xA:"
+#endif
+#ifdef _MEM_CHECK_LOG_
+					    "L"
+#endif
+#if HAVE_DECL_CLONE_NEWNET
+					    "s:"
 #endif
+				, long_options, &longindex)) != -1) {
+
+		/* Check for an empty option argument. For example --use-file= returns
+		 * a 0 length option, which we don't want */
+		if (longindex >= 0 && long_options[longindex].has_arg == required_argument && optarg && !optarg[0])
+			c = ':';
+
 		switch (c) {
 		case 'v':
-			fprintf(stderr, VERSION_STRING);
+			fprintf(stderr, "%s", version_string);
+#ifdef GIT_COMMIT
+			fprintf(stderr, ", git commit %s", GIT_COMMIT);
+#endif
+			fprintf(stderr, "\n\n%s\n\n", COPYRIGHT_STRING);
+			fprintf(stderr, "Built with kernel headers for Linux %d.%d.%d\n",
+						(LINUX_VERSION_CODE >> 16) & 0xff,
+						(LINUX_VERSION_CODE >>  8) & 0xff,
+						(LINUX_VERSION_CODE      ) & 0xff);
+			uname(&uname_buf);
+			fprintf(stderr, "Running on %s %s %s\n\n", uname_buf.sysname, uname_buf.release, uname_buf.version);
+			fprintf(stderr, "configure options: %s\n\n", KEEPALIVED_CONFIGURE_OPTIONS);
+			fprintf(stderr, "Config options: %s\n\n", CONFIGURATION_OPTIONS);
+			fprintf(stderr, "System options: %s\n", SYSTEM_OPTIONS);
 			exit(0);
 			break;
 		case 'h':
@@ -197,56 +1495,218 @@ parse_cmdline(int argc, char **argv)
 			exit(0);
 			break;
 		case 'l':
-			debug |= 1;
+			__set_bit(LOG_CONSOLE_BIT, &debug);
+			reopen_log = true;
 			break;
 		case 'n':
-			debug |= 2;
+			__set_bit(DONT_FORK_BIT, &debug);
 			break;
 		case 'd':
-			debug |= 4;
+			__set_bit(DUMP_CONF_BIT, &debug);
 			break;
+#ifdef _WITH_VRRP_
 		case 'V':
-			debug |= 8;
+			__set_bit(DONT_RELEASE_VRRP_BIT, &debug);
 			break;
+#endif
+#ifdef _WITH_LVS_
 		case 'I':
-			debug |= 16;
+			__set_bit(DONT_RELEASE_IPVS_BIT, &debug);
 			break;
+#endif
 		case 'D':
-			debug |= 32;
+			if (__test_bit(LOG_DETAIL_BIT, &debug))
+				__set_bit(LOG_EXTRA_DETAIL_BIT, &debug);
+			else
+				__set_bit(LOG_DETAIL_BIT, &debug);
 			break;
 		case 'R':
-			debug |= 64;
+			__set_bit(DONT_RESPAWN_BIT, &debug);
+			break;
+#ifdef _WITH_VRRP_
+		case 'X':
+			__set_bit(RELEASE_VIPS_BIT, &debug);
 			break;
+#endif
 		case 'S':
-			log_facility = LOG_FACILITY[atoi(optarg)].facility;
+			if (!read_unsigned(optarg, &facility, 0, LOG_FACILITY_MAX, false))
+				fprintf(stderr, "Invalid log facility '%s'\n", optarg);
+			else {
+				log_facility = LOG_FACILITY[facility].facility;
+				reopen_log = true;
+			}
+			break;
+		case 'g':
+#ifdef ENABLE_LOG_TO_FILE
+			if (optarg && optarg[0])
+				log_file_name = optarg;
+			else
+				log_file_name = "/tmp/keepalived.log";
+			open_log_file(log_file_name, NULL, NULL, NULL);
+#else
+			fprintf(stderr, "-g requires configure option --enable-log-file\n");
+			bad_option = true;
+#endif
+			break;
+#ifdef ENABLE_LOG_TO_FILE
+		case 2:		/* --flush-log-file */
+			set_flush_log_file();
+			break;
+#endif
+		case 'G':
+			__set_bit(NO_SYSLOG_BIT, &debug);
+			reopen_log = true;
+			break;
+		case 'u':
+			new_umask_val = set_umask(optarg);
+			if (umask_cmdline)
+				umask_val = new_umask_val;
+			break;
+		case 't':
+			__set_bit(CONFIG_TEST_BIT, &debug);
+			__set_bit(DONT_RESPAWN_BIT, &debug);
+			__set_bit(DONT_FORK_BIT, &debug);
+			__set_bit(NO_SYSLOG_BIT, &debug);
+			if (optarg && optarg[0]) {
+				int fd = open(optarg, O_WRONLY | O_APPEND | O_CREAT | O_NOFOLLOW, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH);
+				if (fd == -1) {
+					fprintf(stderr, "Unable to open config-test log file %s\n", optarg);
+					exit(EXIT_FAILURE);
+				}
+				dup2(fd, STDERR_FILENO);
+				close(fd);
+			}
 			break;
 		case 'f':
 			conf_file = optarg;
 			break;
+#if defined _WITH_VRRP_ && defined _WITH_LVS_
 		case 'P':
-			daemon_mode |= 1;
+			__clear_bit(DAEMON_CHECKERS, &daemon_mode);
 			break;
 		case 'C':
-			daemon_mode |= 2;
+			__clear_bit(DAEMON_VRRP, &daemon_mode);
+			break;
+#endif
+#ifdef _WITH_BFD_
+		case 'B':
+			__clear_bit(DAEMON_BFD, &daemon_mode);
 			break;
+#endif
 		case 'p':
 			main_pidfile = optarg;
 			break;
+#ifdef _WITH_LVS_
 		case 'c':
 			checkers_pidfile = optarg;
 			break;
+		case 'a':
+			__set_bit(LOG_ADDRESS_CHANGES, &debug);
+			break;
+#endif
+#ifdef _WITH_VRRP_
 		case 'r':
 			vrrp_pidfile = optarg;
 			break;
+#endif
+#ifdef _WITH_BFD_
+		case 'b':
+			bfd_pidfile = optarg;
+			break;
+#endif
 #ifdef _WITH_SNMP_
 		case 'x':
-			snmp = 1;
+			snmp_option = true;
+			break;
+		case 'A':
+			snmp_socket = optarg;
 			break;
 #endif
-		default:
+		case 'M':
+			set_core_dump_pattern = true;
+			if (optarg && optarg[0])
+				core_dump_pattern = optarg;
+			/* ... falls through ... */
+		case 'm':
+			create_core_dump = true;
+			break;
+#ifdef _MEM_CHECK_LOG_
+		case 'L':
+			__set_bit(MEM_CHECK_LOG_BIT, &debug);
+			break;
+#endif
+#if HAVE_DECL_CLONE_NEWNET
+		case 's':
+			override_namespace = optarg;
+			break;
+#endif
+		case 'i':
+			FREE_CONST_PTR(config_id);
+			config_id = STRDUP(optarg);
+			break;
+		case 4:			/* --signum */
+			signum = get_signum(optarg);
+			if (signum == -1) {
+				fprintf(stderr, "Unknown sigfunc %s\n", optarg);
+				exit(1);
+			}
+
+			printf("%d\n", signum);
 			exit(0);
 			break;
+		case 3:			/* --all */
+			__set_bit(RUN_ALL_CHILDREN, &daemon_mode);
+#ifdef _WITH_VRRP_
+			__set_bit(DAEMON_VRRP, &daemon_mode);
+#endif
+#ifdef _WITH_LVS_
+			__set_bit(DAEMON_CHECKERS, &daemon_mode);
+#endif
+#ifdef _WITH_BFD_
+			__set_bit(DAEMON_BFD, &daemon_mode);
+#endif
+			break;
+#ifdef _WITH_PERF_
+		case 5:
+			if (optarg && optarg[0]) {
+				if (!strcmp(optarg, "run"))
+					perf_run = PERF_RUN;
+				else if (!strcmp(optarg, "all"))
+					perf_run = PERF_ALL;
+				else if (!strcmp(optarg, "end"))
+					perf_run = PERF_END;
+				else
+					log_message(LOG_INFO, "Unknown perf start point %s", optarg);
+			}
+			else
+				perf_run = PERF_RUN;
+
+			break;
+#endif
+#ifdef WITH_DEBUG_OPTIONS
+		case 6:
+			set_debug_options(optarg && optarg[0] ? optarg : NULL);
+			break;
+#endif
+		case '?':
+			if (optopt && argv[curind][1] != '-')
+				fprintf(stderr, "Unknown option -%c\n", optopt);
+			else
+				fprintf(stderr, "Unknown option %s\n", argv[curind]);
+			bad_option = true;
+			break;
+		case ':':
+			if (optopt && argv[curind][1] != '-')
+				fprintf(stderr, "Missing parameter for option -%c\n", optopt);
+			else
+				fprintf(stderr, "Missing parameter for option --%s\n", long_options[longindex].name);
+			bad_option = true;
+			break;
+		default:
+			exit(1);
+			break;
 		}
+		curind = optind;
 	}
 
 	if (optind < argc) {
@@ -255,59 +1715,380 @@ parse_cmdline(int argc, char **argv)
 			printf("%s ", argv[optind++]);
 		printf("\n");
 	}
+
+	if (bad_option)
+		exit(1);
+
+	return reopen_log;
+}
+
+#ifdef THREAD_DUMP
+static void
+register_parent_thread_addresses(void)
+{
+	register_scheduler_addresses();
+	register_signal_thread_addresses();
+
+#ifdef _WITH_LVS_
+	register_check_parent_addresses();
+#endif
+#ifdef _WITH_VRRP_
+	register_vrrp_parent_addresses();
+#endif
+#ifdef _WITH_BFD_
+	register_bfd_parent_addresses();
+#endif
+
+#ifndef _DEBUG_
+	register_signal_handler_address("propagate_signal", propagate_signal);
+	register_signal_handler_address("sigend", sigend);
+#endif
+	register_signal_handler_address("thread_child_handler", thread_child_handler);
 }
+#endif
 
 /* Entry point */
 int
-main(int argc, char **argv)
+keepalived_main(int argc, char **argv)
 {
+	bool report_stopped = true;
+	struct utsname uname_buf;
+	char *end;
+	int exit_code = KEEPALIVED_EXIT_OK;
+#ifdef _WITH_NFTABLES_
+	FILE *fp;
+	char nft_ver_buf[128];
+	char *p;
+	unsigned nft_major = 0, nft_minor = 0, nft_release = 0;
+#endif
+
+	/* Ignore reloading signals till signal_init call */
+	signals_ignore();
+
+	/* Ensure time_now is set. We then don't have to check anywhere
+	 * else if it is set. */
+	set_time_now();
+
+	/* Save command line options in case need to log them later */
+	save_cmd_line_options(argc, argv);
+
 	/* Init debugging level */
-	mem_allocated = 0;
 	debug = 0;
 
+	/* We are the parent process */
+#ifndef _DEBUG_
+	prog_type = PROG_TYPE_PARENT;
+#endif
+
+	/* Initialise daemon_mode */
+#ifdef _WITH_VRRP_
+	__set_bit(DAEMON_VRRP, &daemon_mode);
+#endif
+#ifdef _WITH_LVS_
+	__set_bit(DAEMON_CHECKERS, &daemon_mode);
+#endif
+#ifdef _WITH_BFD_
+	__set_bit(DAEMON_BFD, &daemon_mode);
+#endif
+
+	/* Set default file creation mask */
+	umask(umask_val);
+
+	/* Open log with default settings so we can log initially */
+	openlog(PACKAGE_NAME, LOG_PID, log_facility);
+
+#ifdef _MEM_CHECK_
+	mem_log_init(PACKAGE_NAME, "Parent process");
+#endif
+
+	/* Some functionality depends on kernel version, so get the version here */
+	if (uname(&uname_buf))
+		log_message(LOG_INFO, "Unable to get uname() information - error %d", errno);
+	else {
+		os_major = (unsigned)strtoul(uname_buf.release, &end, 10);
+		if (*end != '.')
+			os_major = 0;
+		else {
+			os_minor = (unsigned)strtoul(end + 1, &end, 10);
+			if (*end != '.')
+				os_major = 0;
+			else {
+				if (!isdigit(end[1]))
+					os_major = 0;
+				else
+					os_release = (unsigned)strtoul(end + 1, &end, 10);
+			}
+		}
+		if (!os_major)
+			log_message(LOG_INFO, "Unable to parse kernel version %s", uname_buf.release);
+
+		/* config_id defaults to hostname */
+		if (!config_id) {
+			end = strchrnul(uname_buf.nodename, '.');
+			config_id = STRNDUP(uname_buf.nodename, (size_t)(end - uname_buf.nodename));
+		}
+	}
+
 	/*
 	 * Parse command line and set debug level.
 	 * bits 0..7 reserved by main.c
 	 */
-	parse_cmdline(argc, argv);
+	if (parse_cmdline(argc, argv)) {
+		closelog();
+		if (!__test_bit(NO_SYSLOG_BIT, &debug))
+			openlog(PACKAGE_NAME, LOG_PID | ((__test_bit(LOG_CONSOLE_BIT, &debug)) ? LOG_CONS : 0) , log_facility);
+	}
+
+	if (__test_bit(LOG_CONSOLE_BIT, &debug))
+		enable_console_log();
+
+#ifdef GIT_COMMIT
+	log_message(LOG_INFO, "Starting %s, git commit %s", version_string, GIT_COMMIT);
+#else
+	log_message(LOG_INFO, "Starting %s", version_string);
+#endif
+
+	/* Handle any core file requirements */
+	core_dump_init();
+
+	if (os_major) {
+		if (KERNEL_VERSION(os_major, os_minor, os_release) < LINUX_VERSION_CODE) {
+			/* keepalived was build for a later kernel version */
+			log_message(LOG_INFO, "WARNING - keepalived was build for newer Linux %d.%d.%d, running on %s %s %s",
+					(LINUX_VERSION_CODE >> 16) & 0xff,
+					(LINUX_VERSION_CODE >>  8) & 0xff,
+					(LINUX_VERSION_CODE      ) & 0xff,
+					uname_buf.sysname, uname_buf.release, uname_buf.version);
+		} else {
+			/* keepalived was build for a later kernel version */
+			log_message(LOG_INFO, "Running on %s %s %s (built for Linux %d.%d.%d)",
+					uname_buf.sysname, uname_buf.release, uname_buf.version,
+					(LINUX_VERSION_CODE >> 16) & 0xff,
+					(LINUX_VERSION_CODE >>  8) & 0xff,
+					(LINUX_VERSION_CODE      ) & 0xff);
+		}
+	}
+
+#ifndef _DEBUG_
+	log_command_line(0);
+#endif
 
-	openlog(PROG, LOG_PID | ((debug & 1) ? LOG_CONS : 0), log_facility);
-	log_message(LOG_INFO, "Starting " VERSION_STRING);
+	/* Check we can read the configuration file(s).
+	   NOTE: the working directory will be / if we
+	   forked, but will be the current working directory
+	   when keepalived was run if we haven't forked.
+	   This means that if any config file names are not
+	   absolute file names, the behaviour will be different
+	   depending on whether we forked or not. */
+	if (!check_conf_file(conf_file)) {
+		if (__test_bit(CONFIG_TEST_BIT, &debug))
+			config_test_exit();
 
-	/* Check if keepalived is already running */
-	if (keepalived_running(daemon_mode)) {
-		log_message(LOG_INFO, "daemon is already running");
+		exit_code = KEEPALIVED_EXIT_NO_CONFIG;
 		goto end;
 	}
 
-	if (debug & 1)
-		enable_console_log();
+	global_data = alloc_global_data();
+
+	read_config_file();
+
+	init_global_data(global_data, NULL, false);
+
+#ifdef _WITH_NFTABLES_
+	if (global_data->vrrp_nf_table_name) {
+		/* We are using nftables. Find the version of nft. */
+		fp = popen("nft -v 2>/dev/null", "r");
+		if (fgets(nft_ver_buf, sizeof(nft_ver_buf) - 1, fp)) {
+			p = strchr(nft_ver_buf, ' ');
+			while (*p == ' ')
+				p++;
+			if (*p == 'v')
+				p++;
+
+			if (sscanf(p, "%u.%u.%u", &nft_major, &nft_minor, &nft_release) >= 2)
+				global_data->nft_version = (nft_major * 0x100 + nft_minor) * 0x100 + nft_release;
+		}
+		pclose(fp);
+
+		set_nf_ifname_type();
+	}
+#endif
+
+	/* Update process name if necessary */
+	if (global_data->process_name)
+		set_process_name(global_data->process_name);
+
+#if HAVE_DECL_CLONE_NEWNET
+	if (override_namespace) {
+		if (global_data->network_namespace) {
+			log_message(LOG_INFO, "Overriding config net_namespace '%s' with command line namespace '%s'", global_data->network_namespace, override_namespace);
+			FREE_CONST(global_data->network_namespace);
+		}
+		global_data->network_namespace = STRDUP(override_namespace);
+	}
+#endif
+
+	if (!__test_bit(CONFIG_TEST_BIT, &debug) &&
+	    (global_data->instance_name
+#if HAVE_DECL_CLONE_NEWNET
+	     || global_data->network_namespace
+#endif
+					      )) {
+		if ((syslog_ident = make_syslog_ident(PACKAGE_NAME))) {
+			log_message(LOG_INFO, "Changing syslog ident to %s", syslog_ident);
+			closelog();
+			openlog(syslog_ident, LOG_PID | ((__test_bit(LOG_CONSOLE_BIT, &debug)) ? LOG_CONS : 0), log_facility);
+		}
+		else
+			log_message(LOG_INFO, "Unable to change syslog ident");
+
+		use_pid_dir = true;
+
+#ifdef ENABLE_LOG_TO_FILE
+		open_log_file(log_file_name,
+				NULL,
+#if HAVE_DECL_CLONE_NEWNET
+				global_data->network_namespace,
+#else
+				NULL,
+#endif
+				global_data->instance_name);
+#endif
+	}
+
+	/* Initialise pointer to child finding function */
+	set_child_finder_name(find_keepalived_child_name);
+
+	if (!__test_bit(CONFIG_TEST_BIT, &debug)) {
+		if (use_pid_dir) {
+			/* Create the directory for pid files */
+			create_pid_dir();
+		}
+	}
+
+	/* If we want to monitor processes, we have to do it before calling
+	 * setns() */
+#ifdef _WITH_CN_PROC_
+	open_track_processes();
+#endif
+
+#if HAVE_DECL_CLONE_NEWNET
+	if (global_data->network_namespace) {
+		if (global_data->network_namespace && !set_namespaces(global_data->network_namespace)) {
+			log_message(LOG_ERR, "Unable to set network namespace %s - exiting", global_data->network_namespace);
+			goto end;
+		}
+	}
+#endif
+
+	if (!__test_bit(CONFIG_TEST_BIT, &debug)) {
+		if (global_data->instance_name) {
+			if (!main_pidfile && (main_pidfile = make_pidfile_name(KEEPALIVED_PID_DIR KEEPALIVED_PID_FILE, global_data->instance_name, PID_EXTENSION)))
+				free_main_pidfile = true;
+#ifdef _WITH_LVS_
+			if (!checkers_pidfile && (checkers_pidfile = make_pidfile_name(KEEPALIVED_PID_DIR CHECKERS_PID_FILE, global_data->instance_name, PID_EXTENSION)))
+				free_checkers_pidfile = true;
+#endif
+#ifdef _WITH_VRRP_
+			if (!vrrp_pidfile && (vrrp_pidfile = make_pidfile_name(KEEPALIVED_PID_DIR VRRP_PID_FILE, global_data->instance_name, PID_EXTENSION)))
+				free_vrrp_pidfile = true;
+#endif
+#ifdef _WITH_BFD_
+			if (!bfd_pidfile && (bfd_pidfile = make_pidfile_name(KEEPALIVED_PID_DIR VRRP_PID_FILE, global_data->instance_name, PID_EXTENSION)))
+				free_bfd_pidfile = true;
+#endif
+		}
+
+		if (use_pid_dir) {
+			if (!main_pidfile)
+				main_pidfile = KEEPALIVED_PID_DIR KEEPALIVED_PID_FILE PID_EXTENSION;
+#ifdef _WITH_LVS_
+			if (!checkers_pidfile)
+				checkers_pidfile = KEEPALIVED_PID_DIR CHECKERS_PID_FILE PID_EXTENSION;
+#endif
+#ifdef _WITH_VRRP_
+			if (!vrrp_pidfile)
+				vrrp_pidfile = KEEPALIVED_PID_DIR VRRP_PID_FILE PID_EXTENSION;
+#endif
+#ifdef _WITH_BFD_
+			if (!bfd_pidfile)
+				bfd_pidfile = KEEPALIVED_PID_DIR BFD_PID_FILE PID_EXTENSION;
+#endif
+		}
+		else
+		{
+			if (!main_pidfile)
+				main_pidfile = PID_DIR KEEPALIVED_PID_FILE PID_EXTENSION;
+#ifdef _WITH_LVS_
+			if (!checkers_pidfile)
+				checkers_pidfile = PID_DIR CHECKERS_PID_FILE PID_EXTENSION;
+#endif
+#ifdef _WITH_VRRP_
+			if (!vrrp_pidfile)
+				vrrp_pidfile = PID_DIR VRRP_PID_FILE PID_EXTENSION;
+#endif
+#ifdef _WITH_BFD_
+			if (!bfd_pidfile)
+				bfd_pidfile = PID_DIR BFD_PID_FILE PID_EXTENSION;
+#endif
+		}
+
+		/* Check if keepalived is already running */
+		if (keepalived_running(daemon_mode)) {
+			log_message(LOG_INFO, "daemon is already running");
+			report_stopped = false;
+			goto end;
+		}
+	}
 
 	/* daemonize process */
-	if (!(debug & 2))
-		xdaemon(0, 0, 0);
+	if (!__test_bit(DONT_FORK_BIT, &debug) &&
+	    xdaemon(false, false, true) > 0) {
+		closelog();
+		FREE_CONST_PTR(config_id);
+		FREE_PTR(orig_core_dump_pattern);
+		close_std_fd();
+		exit(0);
+	}
+
+#ifdef _MEM_CHECK_
+	enable_mem_log_termination();
+#endif
+
+	if (__test_bit(CONFIG_TEST_BIT, &debug)) {
+		validate_config();
+
+		config_test_exit();
+	}
 
 	/* write the father's pidfile */
 	if (!pidfile_write(main_pidfile, getpid()))
 		goto end;
 
-#ifndef _DEBUG_
-	/* Signal handling initialization  */
-	signal_init();
-#endif
-
 	/* Create the master thread */
 	master = thread_make_master();
 
+	/* Signal handling initialization  */
+	signal_init();
+
 	/* Init daemon */
-	start_keepalived();
+	if (!start_keepalived())
+		log_message(LOG_INFO, "Warning - keepalived has no configuration to run");
+
+	initialise_debug_options();
+
+#ifdef THREAD_DUMP
+	register_parent_thread_addresses();
+#endif
 
-#ifndef _DEBUG_
 	/* Launch the scheduling I/O multiplexer */
-	launch_scheduler();
+	launch_thread_scheduler(master);
 
 	/* Finish daemon process */
 	stop_keepalived();
+
+#ifdef THREAD_DUMP
+	deregister_thread_addresses();
 #endif
 
 	/*
@@ -315,6 +2096,39 @@ main(int argc, char **argv)
 	 * finally return from system
 	 */
 end:
+	if (report_stopped) {
+#ifdef GIT_COMMIT
+		log_message(LOG_INFO, "Stopped %s, git commit %s", version_string, GIT_COMMIT);
+#else
+		log_message(LOG_INFO, "Stopped %s", version_string);
+#endif
+	}
+
+#if HAVE_DECL_CLONE_NEWNET
+	if (global_data && global_data->network_namespace)
+		clear_namespaces();
+#endif
+
+	if (use_pid_dir)
+		remove_pid_dir();
+
+	/* Restore original core_pattern if necessary */
+	if (orig_core_dump_pattern)
+		update_core_dump_pattern(orig_core_dump_pattern);
+
+	free_parent_mallocs_startup(false);
+	free_parent_mallocs_exit();
+	free_global_data(global_data);
+
 	closelog();
-	exit(0);
+
+#ifndef _MEM_CHECK_LOG_
+	FREE_CONST_PTR(syslog_ident);
+#else
+	if (syslog_ident)
+		free(no_const_char_p(syslog_ident));
+#endif
+	close_std_fd();
+
+	return exit_code;
 }
diff --git a/tools/keepalived/keepalived/core/namespaces.c b/tools/keepalived/keepalived/core/namespaces.c
new file mode 100644
index 000000000..2cd940c34
--- /dev/null
+++ b/tools/keepalived/keepalived/core/namespaces.c
@@ -0,0 +1,302 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Linux namespace handling.
+ *
+ * Author:      Quentin Armitage <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2016-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+/*******************************************************************************
+ *
+ * Running keepalived in a namespace provides isolation from other instances of
+ * keepalived running on the same system, and is useful for a variety of reasons.
+ *
+ * In order not to have to specify different pid files for each instance of
+ * keepalived, if keepalived is running in a network namespace it will also create
+ * its own mount namespace, and will slave bind mount a unique directory
+ * (/var/run/keepalived/NAMESPACE) on /var/run/keepalived, so keepalived will
+ * write its usual pid files (but to /var/run/keepalived rather than to /var/run),
+ * and outside the mount namespace these will be visible at
+ * /var/run/keepalived/NAMESPACE.
+ *
+ * If you are familiar with network namespaces, then you will know what you can do
+ * with them. If not, then the following scenarios should give you an idea of what
+ * can be done, and why they might be helpful.
+ *
+ * If you wish to test keepalived, but don't wish to interfere with the
+ * networking on a live system, or you wish to test multiple instances, but all
+ * in one machine, then the following will set up such an environment.
+ *
+ * Three "machine" configuration:
+ *
+ *      netns1                       netns2                       netns3
+ * ------------------           ------------------           ------------------
+ * |                |           |  -----------   |           |                |
+ * |                |           |  |   br0   |   |           |                |
+ * |                |           |  -----------   |           |                |
+ * |                |           |    |     |     |           |                |
+ * |       e        |           |    e     e     |           |       e        |
+ * |       t        |           |    t     t     |           |       t        |
+ * |       h        |           |    h     h     |           |       h        |
+ * |       0        |           |    0     1     |           |       0        |
+ * |       |        |           |    |     |     |           |       |        |
+ * ------------------           ------------------           ------------------
+ *         |                         |     |                         |
+ *         ---------------------------     ---------------------------
+ *
+ * NOTE: it is possible that `ip netns add NAME` will create the namespace but
+ * include all the network links, rather than just lo. To check this, after
+ * creating a namespace, run `ip netns exec NAME ip link show` and if it shows
+ * all the network links, then you have this problem. To work around the problem,
+ * prefix all the `ip netns add NAME` commands with unshare --net, e.g.
+ *   unshare --net ip netns add NAME
+ *
+ * Create the namespaces
+ * # ip netns add netns1
+ * # ip netns add netns2
+ * # ip netns add netns3
+ *
+ * Bring up the loopback interfaces
+ * # ip netns exec netns1 ip link set lo up
+ * # ip netns exec netns2 ip link set lo up
+ * # ip netns exec netns3 ip link set lo up
+ *
+ * Create link between netns1 and netns2
+ * # ip netns exec netns2 ip link add 1.eth0 type veth peer name eth0
+ * # ip netns exec netns2 ip link set eth0 netns netns1
+ *
+ * Create link between netns2 and netns3
+ * # ip netns exec netns2 ip link add 3.eth1 type veth peer name eth0
+ * # ip netns exec netns2 ip link set eth0 netns netns3
+ *
+ * Make the link names in netns2 easier to remember
+ * # ip netns exec netns2 ip link set 1.eth0 name eth0
+ * # ip netns exec netns2 ip link set 3.eth1 name eth1
+ *
+ * Bring up the interfaces
+ * # ip netns exec netns1 ip link set eth0 up
+ * # ip netns exec netns2 ip link set eth0 up
+ * # ip netns exec netns2 ip link set eth1 up
+ * # ip netns exec netns3 ip link set eth0 up
+ *
+ * Bridge eth0 and eth1 in netns2
+ * # ip netns exec netns2 ip link add br0 type bridge
+ * # ip netns exec netns2 ip link set br0 up
+ *
+ * Connect eth0 and eth1 to br0 in netns2
+ * # ip netns exec netns2 ip link set eth0 master br0
+ * # ip netns exec netns2 ip link set eth1 master br0
+ *
+ * Configure some addresses
+ * # ip netns exec netns1 ip addr add 10.2.0.1/24 broadcast 10.2.0.255 dev eth0
+ * # ip netns exec netns2 ip addr add 10.2.0.2/24 broadcast 10.2.0.255 dev br0
+ * # ip netns exec netns3 ip addr add 10.2.0.3/24 broadcast 10.2.0.255 dev eth0
+ *
+ * Test it
+ * # ip netns exec netns1 ping 10.2.0.2		# netns1 can talk to netns2
+ * # ip netns exec netns1 ping 10.2.0.3		# netns1 can talk to netns3 (bridge is working)
+ *
+ * If you want to enter multiple commands in a net namespace, then try:
+ * # ip netns exec netns1 bash
+ * # PS1="netns1 # "
+ * netns1 #
+ *
+ * Create three configuration files, keepalived.netns1.conf etc
+ * and in each config file in the global_defs section specify
+ * net_namespace netns1        # or netns2 or netns3 as appropriate
+ * global_defs {
+ *		....
+ *
+ * Now run three instances of keepalived. Note, keepalived handles
+ * joining the appropriate network namespace, and so the commands don't
+ * need to be prefixed with 'ip netns exec netns1'.
+ * # keepalived -f /etc/keepalived/keepalived.netns1.conf
+ * # keepalived -f /etc/keepalived/keepalived.netns2.conf
+ * # keepalived -f /etc/keepalived/keepalived.netns3.conf
+ *
+ * The syslog output will have the network namespace name appended to the
+ * ident.
+ *
+ * If you want to connect the setup above to the real world, add the following:
+ * # ip link add veth0 type veth peer name veth1
+ * # ip link set veth1 netns netns2
+ * # ip link set up veth0
+ * # ip link set veth1 netns netns2
+ * # ip netns exec netns2 ip link set up veth1
+ * # ip netns exec netns2 ip link set veth1 master br0
+ * # ip link add br0 type bridge
+ * # ip link set br0 up
+ * # ip link set veth0 master br0
+ * # ip link set eth0 master br0
+ * # ip link add addr 10.2.0.4/24 broadcast 10.2.0.255 dev br0
+ *
+ * There are further possibilities. If the above configuration is set up on two
+ * separate machines, a tunnel could be established between the two netns2 instances
+ * and the masters of each end of the tunnels set to br0. Alternatively, a new vlan
+ * could be set up in (or moved to) the two netns2 instances, and added to the br0
+ * bridges.
+ *
+ ******************************************************************************/
+
+#include "config.h"
+
+#include <fcntl.h>
+#include <sched.h>
+#include <string.h>
+#include <errno.h>
+#include <unistd.h>
+#include <sys/stat.h>
+#include <stdio.h>
+#include <sys/mount.h>
+#include <stdbool.h>
+
+#ifndef HAVE_SETNS
+//#include "linux/unistd.h"
+//_syscall2(int, setns, int, fd, int, nstype)
+#include <unistd.h>
+#ifndef SYS_setns
+#define SYS_setns __NR_setns
+#endif
+
+#include <sys/syscall.h>
+
+/* For some reason Centos 6.5 doesn't define SYS_setns */
+#ifndef SYS_setns
+#define SYS_setns __NR_setns
+#endif
+
+#ifndef MS_SLAVE	/* Since glibc 2.12, but Linux since 2.6.15 */
+#include <linux/fs.h>
+#endif
+static int
+setns(int fd, int nstype)
+{
+	return (int)syscall(SYS_setns, fd, nstype);
+}
+#endif
+
+#include "namespaces.h"
+#include "memory.h"
+#include "logger.h"
+#include "pidfile.h"
+
+/* Local data */
+static const char *netns_dir = "/var/run/netns/";
+static char *mount_dirname;
+
+void
+free_dirname(void)
+{
+	FREE_PTR(mount_dirname);
+	mount_dirname = NULL;
+}
+
+static void
+set_run_mount(const char *net_namespace)
+{
+	/* /var/run/keepalived/NAMESPACE */
+	mount_dirname = MALLOC(strlen(KEEPALIVED_PID_DIR) + 1 + strlen(net_namespace));
+	if (!mount_dirname) {
+		log_message(LOG_INFO, "Unable to allocate memory for pid file dirname");
+		return;
+	}
+
+	strcpy(mount_dirname, KEEPALIVED_PID_DIR);
+	strcat(mount_dirname, net_namespace);
+
+	if (mkdir(mount_dirname, S_IRWXU | S_IRGRP | S_IXGRP | S_IROTH | S_IXOTH) && errno != EEXIST) {
+		log_message(LOG_INFO, "Unable to create directory %s", mount_dirname);
+		free_dirname();
+		return;
+	}
+
+	if (unshare(CLONE_NEWNS)) {
+		log_message(LOG_INFO, "mount unshare failed (%d) '%s'", errno, strerror(errno));
+		return;
+	}
+
+#ifdef MS_SLAVE		/* Since Linux 2.6.15. Prior to that mounts weren't shared */
+	/* Make all mounts unshared - systemd makes them shared by default */
+	if (mount("", "/", NULL, MS_REC | MS_SLAVE, NULL))
+		log_message(LOG_INFO, "Mount slave failed, error (%d) '%s'", errno, strerror(errno));
+#endif
+
+	if (mount(mount_dirname, pid_directory, NULL, MS_BIND, NULL))
+		log_message(LOG_INFO, "Mount failed, error (%d) '%s'", errno, strerror(errno));
+}
+
+static void
+unmount_run(void)
+{
+	if (umount(pid_directory))
+		log_message(LOG_INFO, "unmount of %s failed - errno %d", pid_directory, errno);
+	if (mount_dirname) {
+		if (rmdir(mount_dirname) && errno != ENOTEMPTY && errno != EBUSY)
+			log_message(LOG_INFO, "unlink of %s failed - error (%d) '%s'", mount_dirname, errno, strerror(errno));
+		free_dirname();
+	}
+}
+
+bool
+set_namespaces(const char* net_namespace)
+{
+	char *netns_path;
+	int fd;
+
+	netns_path = MALLOC(strlen(netns_dir) + strlen(net_namespace) + 1);
+	if (!netns_path) {
+		log_message(LOG_INFO, "Unable to malloc for set_namespaces()");
+		return false;
+	}
+
+	strcpy(netns_path, netns_dir);
+	strcat(netns_path, net_namespace);
+
+	fd = open(netns_path, O_RDONLY);
+	if (fd == -1) {
+		log_message(LOG_INFO, "Failed to open %s", netns_path);
+		goto err;
+	}
+
+	if (setns(fd, CLONE_NEWNET)) {
+		log_message(LOG_INFO, "setns() failed with error %d", errno);
+		goto err;
+	}
+
+	close(fd);
+
+	set_run_mount(net_namespace);
+
+	FREE_PTR(netns_path);
+	netns_path = NULL;
+
+	return true;
+
+err:
+	if (fd != -1)
+		close(fd);
+	FREE_PTR(netns_path);
+	netns_path = NULL;
+
+	return false;
+}
+
+void
+clear_namespaces(void)
+{
+	unmount_run();
+}
diff --git a/tools/keepalived/keepalived/core/pidfile.c b/tools/keepalived/keepalived/core/pidfile.c
index a3f4959ea..ad40c4242 100644
--- a/tools/keepalived/keepalived/core/pidfile.c
+++ b/tools/keepalived/keepalived/core/pidfile.c
@@ -17,31 +17,63 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <sys/types.h>
-#include <sys/stat.h>
+#include "config.h"
+
+#include <errno.h>
 #include <fcntl.h>
+#include <signal.h>
+#include <stdio.h>
+#include <string.h>
+#include <unistd.h>
+#include <sys/stat.h>
+
 #include "logger.h"
 #include "pidfile.h"
-extern char *main_pidfile;
-extern char *checkers_pidfile;
-extern char *vrrp_pidfile;
+#include "main.h"
+#include "bitops.h"
+#include "utils.h"
+
+const char *pid_directory = KEEPALIVED_PID_DIR;
+
+/* Create the directory for non-standard pid files */
+void
+create_pid_dir(void)
+{
+	if (mkdir(pid_directory, S_IRWXU | S_IRGRP | S_IXGRP | S_IROTH | S_IXOTH) && errno != EEXIST) {
+		log_message(LOG_INFO, "Unable to create directory %s", pid_directory);
+		return;
+	}
+}
+
+void
+remove_pid_dir(void)
+{
+	if (rmdir(pid_directory) && errno != ENOTEMPTY && errno != EBUSY)
+		log_message(LOG_INFO, "unlink of %s failed - error (%d) '%s'", pid_directory, errno, strerror(errno));
+}
 
-/* Create the runnnig daemon pidfile */
+/* Create the running daemon pidfile */
 int
-pidfile_write(char *pid_file, int pid)
+pidfile_write(const char *pid_file, int pid)
 {
 	FILE *pidfile = NULL;
-	int pidfd = creat(pid_file, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH);
+	int pidfd = open(pid_file, O_NOFOLLOW | O_CREAT | O_WRONLY | O_TRUNC, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH);
+
 	if (pidfd != -1) pidfile = fdopen(pidfd, "w");
 
 	if (!pidfile) {
-		log_message(LOG_INFO, "pidfile_write : Can not open %s pidfile",
+		log_message(LOG_INFO, "pidfile_write : Cannot open %s pidfile",
 		       pid_file);
 		return 0;
 	}
+
+	/* Override the umask setting to force the permission bits above */
+	if (umask_val & (S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH))
+		fchmod(pidfd, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH);
+
 	fprintf(pidfile, "%d\n", pid);
 	fclose(pidfile);
 	return 1;
@@ -49,17 +81,17 @@ pidfile_write(char *pid_file, int pid)
 
 /* Remove the running daemon pidfile */
 void
-pidfile_rm(char *pid_file)
+pidfile_rm(const char *pid_file)
 {
 	unlink(pid_file);
 }
 
 /* return the daemon running state */
-int
-process_running(char *pid_file)
+static int
+process_running(const char *pid_file)
 {
 	FILE *pidfile = fopen(pid_file, "r");
-	pid_t pid;
+	pid_t pid = 0;
 	int ret;
 
 	/* No pidfile */
@@ -67,10 +99,16 @@ process_running(char *pid_file)
 		return 0;
 
 	ret = fscanf(pidfile, "%d", &pid);
-	if (ret == EOF && ferror(pidfile) != 0) {
-		log_message(LOG_INFO, "Error opening pid file %s", pid_file);
-	}
 	fclose(pidfile);
+	if (ret != 1) {
+		log_message(LOG_INFO, "Error reading pid file %s", pid_file);
+		pid = 0;
+		pidfile_rm(pid_file);
+	}
+
+	/* What should we return - we don't know if it is running or not. */
+	if (!pid)
+		return 1;
 
 	/* If no process is attached to pidfile, remove it */
 	if (kill(pid, 0)) {
@@ -83,17 +121,22 @@ process_running(char *pid_file)
 }
 
 /* Return parent process daemon state */
-int
-keepalived_running(int mode)
+bool
+keepalived_running(unsigned long mode)
 {
 	if (process_running(main_pidfile))
-		return 1;
-	else if (mode & 1 || mode & 2)
-		return process_running((mode & 1) ? vrrp_pidfile :
-				       checkers_pidfile);
-
-	if (process_running(vrrp_pidfile) ||
-	    process_running(checkers_pidfile))
-		return 1;
-	return 0;
+		return true;
+#ifdef _WITH_VRRP_
+	if (__test_bit(DAEMON_VRRP, &mode) && process_running(vrrp_pidfile))
+		return true;
+#endif
+#ifdef _WITH_LVS_
+	if (__test_bit(DAEMON_CHECKERS, &mode) && process_running(checkers_pidfile))
+		return true;
+#endif
+#ifdef _WITH_BFD_
+	if (__test_bit(DAEMON_BFD, &mode) && process_running(bfd_pidfile))
+		return true;
+#endif
+	return false;
 }
diff --git a/tools/keepalived/keepalived/core/smtp.c b/tools/keepalived/keepalived/core/smtp.c
index 6b1cf7e00..a99d7dc49 100644
--- a/tools/keepalived/keepalived/core/smtp.c
+++ b/tools/keepalived/keepalived/core/smtp.c
@@ -19,59 +19,73 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <errno.h>
+#include <unistd.h>
 #include <time.h>
 
 #include "smtp.h"
-#include "global_data.h"
-#include "check_data.h"
-#include "scheduler.h"
 #include "memory.h"
-#include "list.h"
+#include "layer4.h"
 #include "logger.h"
 #include "utils.h"
+#if !HAVE_DECL_SOCK_CLOEXEC
+#include "old_socket.h"
+#endif
+#ifdef _WITH_LVS_
+#include "check_api.h"
+#endif
+#ifdef THREAD_DUMP
+#include "scheduler.h"
+#endif
+#ifdef _SMTP_ALERT_DEBUG_
+bool do_smtp_alert_debug;
+#endif
 
 /* SMTP FSM definition */
-static int connection_error(thread_t *);
-static int connection_in_progress(thread_t *);
-static int connection_timeout(thread_t *);
-static int connection_success(thread_t *);
-static int helo_cmd(thread_t *);
-static int mail_cmd(thread_t *);
-static int rcpt_cmd(thread_t *);
-static int data_cmd(thread_t *);
-static int body_cmd(thread_t *);
-static int quit_cmd(thread_t *);
-
-static int connection_code(thread_t *, int);
-static int helo_code(thread_t *, int);
-static int mail_code(thread_t *, int);
-static int rcpt_code(thread_t *, int);
-static int data_code(thread_t *, int);
-static int body_code(thread_t *, int);
-static int quit_code(thread_t *, int);
-
-static int smtp_read_thread(thread_t *);
-static int smtp_send_thread(thread_t *);
+static int connection_error(thread_ref_t);
+static int connection_in_progress(thread_ref_t);
+static int connection_timeout(thread_ref_t);
+static int connection_success(thread_ref_t);
+static int helo_cmd(thread_ref_t);
+static int mail_cmd(thread_ref_t);
+static int rcpt_cmd(thread_ref_t);
+static int data_cmd(thread_ref_t);
+static int body_cmd(thread_ref_t);
+static int quit_cmd(thread_ref_t);
+
+static int connection_code(thread_ref_t , int);
+static int helo_code(thread_ref_t , int);
+static int mail_code(thread_ref_t , int);
+static int rcpt_code(thread_ref_t , int);
+static int data_code(thread_ref_t , int);
+static int body_code(thread_ref_t , int);
+static int quit_code(thread_ref_t , int);
+
+static int smtp_read_thread(thread_ref_t);
+static int smtp_send_thread(thread_ref_t);
 
 struct {
-	int (*send) (thread_t *);
-	int (*read) (thread_t *, int);
+	int (*send) (thread_ref_t);
+	int (*read) (thread_ref_t, int);
 } SMTP_FSM[SMTP_MAX_FSM_STATE] = {
-/*      Stream Write Handlers    |   Stream Read handlers   *
- *-------------------------------+--------------------------*/
-	{connection_error,		NULL},			/* connect_error */
-	{connection_in_progress,	NULL},			/* connect_in_progress */
-	{connection_timeout,		NULL},			/* connect_timeout */
-	{connection_success,		connection_code},	/* connect_success */
-	{helo_cmd,			helo_code},		/* HELO */
-	{mail_cmd,			mail_code},		/* MAIL */
-	{rcpt_cmd,			rcpt_code},		/* RCPT */
-	{data_cmd,			data_code},		/* DATA */
-	{body_cmd,			body_code},		/* BODY */
-	{quit_cmd,			quit_code}		/* QUIT */
+/*       Code			  Stream Write Handlers		Stream Read handlers *
+ *------------------------------+----------------------------------------------------*/
+	[connect_error]		= {connection_error,		NULL},
+	[connect_in_progress]	= {connection_in_progress,	NULL},
+	[connect_timeout]	= {connection_timeout,		NULL},
+	[connect_fail]		= {connection_error,		NULL},
+	[connect_success]	= {connection_success,		connection_code},
+	[HELO]			= {helo_cmd,			helo_code},
+	[MAIL]			= {mail_cmd,			mail_code},
+	[RCPT]			= {rcpt_cmd,			rcpt_code},
+	[DATA]			= {data_cmd,			data_code},
+	[BODY]			= {body_cmd,			body_code},
+	[QUIT]			= {quit_cmd,			quit_code}
 };
 
 static void
@@ -84,46 +98,40 @@ free_smtp_all(smtp_t * smtp)
 	FREE(smtp);
 }
 
-static char *
-fetch_next_email(smtp_t * smtp)
-{
-	return list_element(global_data->email, smtp->email_it);
-}
-
 /* layer4 connection handlers */
 static int
-connection_error(thread_t * thread)
+connection_error(thread_ref_t thread)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 
-	log_message(LOG_INFO, "SMTP connection ERROR to [%s]:%d."
-			    , inet_sockaddrtos(&global_data->smtp_server), SMTP_PORT);
+	log_message(LOG_INFO, "SMTP connection ERROR to %s."
+			    , FMT_SMTP_HOST());
 	free_smtp_all(smtp);
 	return 0;
 }
 static int
-connection_timeout(thread_t * thread)
+connection_timeout(thread_ref_t thread)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 
-	log_message(LOG_INFO, "Timeout connecting SMTP server [%s]:%d."
-			    , inet_sockaddrtos(&global_data->smtp_server), SMTP_PORT);
+	log_message(LOG_INFO, "Timeout connecting SMTP server %s."
+			    , FMT_SMTP_HOST());
 	free_smtp_all(smtp);
 	return 0;
 }
 static int
-connection_in_progress(thread_t * thread)
+connection_in_progress(thread_ref_t thread)
 {
 	int status;
 
-	DBG("SMTP connection to [%s]:%d now IN_PROGRESS.",
-	    inet_sockaddrtos(&global_data->smtp_server), SMTP_PORT);
+	DBG("SMTP connection to %s now IN_PROGRESS.",
+	    FMT_SMTP_HOST());
 
 	/*
 	 * Here we use the propriety of a union structure,
 	 * each element of the structure have the same value.
 	 */
-	status = tcp_socket_state(thread->u.fd, thread, connection_in_progress);
+	status = tcp_socket_state(thread, connection_in_progress);
 
 	if (status != connect_in_progress)
 		SMTP_FSM_SEND(status, thread);
@@ -131,81 +139,90 @@ connection_in_progress(thread_t * thread)
 	return 0;
 }
 static int
-connection_success(thread_t * thread)
+connection_success(thread_ref_t thread)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 
-	log_message(LOG_INFO, "Remote SMTP server [%s]:%d connected."
-			    , inet_sockaddrtos(&global_data->smtp_server), SMTP_PORT);
+	log_message(LOG_INFO, "Remote SMTP server %s connected."
+			    , FMT_SMTP_HOST());
 
 	smtp->stage = connect_success;
 	thread_add_read(thread->master, smtp_read_thread, smtp,
-			smtp->fd, global_data->smtp_connection_to);
+			smtp->fd, global_data->smtp_connection_to, true);
 	return 0;
 }
 
 /* SMTP protocol handlers */
 static int
-smtp_read_thread(thread_t * thread)
+smtp_read_thread(thread_ref_t thread)
 {
 	smtp_t *smtp;
 	char *buffer;
 	char *reply;
-	int rcv_buffer_size = 0;
+	ssize_t rcv_buffer_size;
 	int status = -1;
 
 	smtp = THREAD_ARG(thread);
 
 	if (thread->type == THREAD_READ_TIMEOUT) {
-		log_message(LOG_INFO, "Timeout reading data to remote SMTP server [%s]:%d."
-				    , inet_sockaddrtos(&global_data->smtp_server), SMTP_PORT);
+		log_message(LOG_INFO, "Timeout reading data to remote SMTP server %s."
+				    , FMT_SMTP_HOST());
 		SMTP_FSM_READ(QUIT, thread, 0);
 		return -1;
 	}
 
 	buffer = smtp->buffer;
 
-	rcv_buffer_size = read(thread->u.fd, buffer + smtp->buflen,
-			       SMTP_BUFFER_LENGTH - smtp->buflen);
+	rcv_buffer_size = read(thread->u.f.fd, buffer + smtp->buflen,
+			       SMTP_BUFFER_LENGTH - 1 - smtp->buflen);
 
 	if (rcv_buffer_size == -1) {
-		if (errno == EAGAIN)
-			goto end;
-		log_message(LOG_INFO, "Error reading data from remote SMTP server [%s]:%d."
-				    , inet_sockaddrtos(&global_data->smtp_server), SMTP_PORT);
+		if (check_EAGAIN(errno)) {
+			thread_add_read(thread->master, smtp_read_thread, smtp,
+					thread->u.f.fd, global_data->smtp_connection_to, true);
+			return 0;
+		}
+
+		log_message(LOG_INFO, "Error reading data from remote SMTP server %s."
+				    , FMT_SMTP_HOST());
+		SMTP_FSM_READ(QUIT, thread, 0);
+		return 0;
+	}
+
+	if (rcv_buffer_size == 0) {
+		log_message(LOG_INFO, "Remote SMTP server %s has closed the connection."
+				    , FMT_SMTP_HOST());
 		SMTP_FSM_READ(QUIT, thread, 0);
 		return 0;
 	}
 
 	/* received data overflow buffer size ? */
 	if (smtp->buflen >= SMTP_BUFFER_MAX) {
-		log_message(LOG_INFO, "Received buffer from remote SMTP server [%s]:%d"
+		log_message(LOG_INFO, "Received buffer from remote SMTP server %s"
 				      " overflow our get read buffer length."
-				    , inet_sockaddrtos(&global_data->smtp_server), SMTP_PORT);
+				    , FMT_SMTP_HOST());
 		SMTP_FSM_READ(QUIT, thread, 0);
 		return 0;
-	} else {
-		smtp->buflen += rcv_buffer_size;
-		buffer[smtp->buflen] = 0;	/* NULL terminate */
 	}
 
-      end:
+	smtp->buflen += (size_t)rcv_buffer_size;
+	buffer[smtp->buflen] = 0;	/* NULL terminate */
 
 	/* parse the buffer, finding the last line of the response for the code */
 	reply = buffer;
-	while (reply < buffer + smtp->buflen) {
+	while (reply < buffer + smtp->buflen) {		// This line causes a strict-overflow=4 warning with gcc 5.4.0
 		char *p;
 
 		p = strstr(reply, "\r\n");
 		if (!p) {
 			memmove(buffer, reply,
-				smtp->buflen - (reply - buffer));
-			smtp->buflen -= (reply - buffer);
+				smtp->buflen - (size_t)(reply - buffer));
+			smtp->buflen -= (size_t)(reply - buffer);
 			buffer[smtp->buflen] = 0;
 
 			thread_add_read(thread->master, smtp_read_thread,
-					smtp, thread->u.fd,
-					global_data->smtp_connection_to);
+					smtp, thread->u.f.fd,
+					global_data->smtp_connection_to, true);
 			return 0;
 		}
 
@@ -221,13 +238,13 @@ smtp_read_thread(thread_t * thread)
 		break;
 	}
 
-	memmove(buffer, reply, smtp->buflen - (reply - buffer));
-	smtp->buflen -= (reply - buffer);
+	memmove(buffer, reply, smtp->buflen - (size_t)(reply - buffer));
+	smtp->buflen -= (size_t)(reply - buffer);
 	buffer[smtp->buflen] = 0;
 
 	if (status == -1) {
 		thread_add_read(thread->master, smtp_read_thread, smtp,
-				thread->u.fd, global_data->smtp_connection_to);
+				thread->u.f.fd, global_data->smtp_connection_to, true);
 		return 0;
 	}
 
@@ -236,10 +253,10 @@ smtp_read_thread(thread_t * thread)
 	/* Registering next smtp command processing thread */
 	if (smtp->stage != ERROR) {
 		thread_add_write(thread->master, smtp_send_thread, smtp,
-				 smtp->fd, global_data->smtp_connection_to);
+				 smtp->fd, global_data->smtp_connection_to, true);
 	} else {
-		log_message(LOG_INFO, "Can not read data from remote SMTP server [%s]:%d."
-				    , inet_sockaddrtos(&global_data->smtp_server), SMTP_PORT);
+		log_message(LOG_INFO, "Can not read data from remote SMTP server %s."
+				    , FMT_SMTP_HOST());
 		SMTP_FSM_READ(QUIT, thread, 0);
 	}
 
@@ -247,13 +264,13 @@ smtp_read_thread(thread_t * thread)
 }
 
 static int
-smtp_send_thread(thread_t * thread)
+smtp_send_thread(thread_ref_t thread)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 
 	if (thread->type == THREAD_WRITE_TIMEOUT) {
-		log_message(LOG_INFO, "Timeout sending data to remote SMTP server [%s]:%d."
-				    , inet_sockaddrtos(&global_data->smtp_server), SMTP_PORT);
+		log_message(LOG_INFO, "Timeout sending data to remote SMTP server %s."
+				    , FMT_SMTP_HOST());
 		SMTP_FSM_READ(QUIT, thread, 0);
 		return 0;
 	}
@@ -269,11 +286,11 @@ smtp_send_thread(thread_t * thread)
 	/* Registering next smtp command processing thread */
 	if (smtp->stage != ERROR) {
 		thread_add_read(thread->master, smtp_read_thread, smtp,
-				thread->u.fd, global_data->smtp_connection_to);
+				thread->u.f.fd, global_data->smtp_connection_to, true);
+		thread_del_write(thread);
 	} else {
-		log_message(LOG_INFO, "Can not send data to remote SMTP server [%s]:%d."
-				    , inet_sockaddrtos(&global_data->smtp_server)
-				    , SMTP_PORT);
+		log_message(LOG_INFO, "Can not send data to remote SMTP server %s."
+				    , FMT_SMTP_HOST());
 		SMTP_FSM_READ(QUIT, thread, 0);
 	}
 
@@ -281,17 +298,17 @@ smtp_send_thread(thread_t * thread)
 }
 
 static int
-connection_code(thread_t * thread, int status)
+connection_code(thread_ref_t thread, int status)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 
 	if (status == 220) {
 		smtp->stage++;
 	} else {
-		log_message(LOG_INFO, "Error connecting SMTP server[%s]:%d."
+		log_message(LOG_INFO, "Error connecting SMTP server %s."
 				      " SMTP status code = %d"
-				    , inet_sockaddrtos(&global_data->smtp_server)
-				    , SMTP_PORT, status);
+				    , FMT_SMTP_HOST()
+				    , status);
 		smtp->stage = ERROR;
 	}
 
@@ -300,31 +317,31 @@ connection_code(thread_t * thread, int status)
 
 /* HELO command processing */
 static int
-helo_cmd(thread_t * thread)
+helo_cmd(thread_ref_t thread)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 	char *buffer;
 
 	buffer = (char *) MALLOC(SMTP_BUFFER_MAX);
-	snprintf(buffer, SMTP_BUFFER_MAX, SMTP_HELO_CMD, get_local_name());
-	if (send(thread->u.fd, buffer, strlen(buffer), 0) == -1)
+	snprintf(buffer, SMTP_BUFFER_MAX, SMTP_HELO_CMD, (global_data->smtp_helo_name) ? global_data->smtp_helo_name : "localhost");
+	if (send(thread->u.f.fd, buffer, strlen(buffer), 0) == -1)
 		smtp->stage = ERROR;
 	FREE(buffer);
 
 	return 0;
 }
 static int
-helo_code(thread_t * thread, int status)
+helo_code(thread_ref_t thread, int status)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 
 	if (status == 250) {
 		smtp->stage++;
 	} else {
-		log_message(LOG_INFO, "Error processing HELO cmd on SMTP server [%s]:%d."
+		log_message(LOG_INFO, "Error processing HELO cmd on SMTP server %s."
 				      " SMTP status code = %d"
-				    , inet_sockaddrtos(&global_data->smtp_server)
-				    , SMTP_PORT, status);
+				    , FMT_SMTP_HOST()
+				    , status);
 		smtp->stage = ERROR;
 	}
 
@@ -333,31 +350,31 @@ helo_code(thread_t * thread, int status)
 
 /* MAIL command processing */
 static int
-mail_cmd(thread_t * thread)
+mail_cmd(thread_ref_t thread)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 	char *buffer;
 
 	buffer = (char *) MALLOC(SMTP_BUFFER_MAX);
 	snprintf(buffer, SMTP_BUFFER_MAX, SMTP_MAIL_CMD, global_data->email_from);
-	if (send(thread->u.fd, buffer, strlen(buffer), 0) == -1)
+	if (send(thread->u.f.fd, buffer, strlen(buffer), 0) == -1)
 		smtp->stage = ERROR;
 	FREE(buffer);
 
 	return 0;
 }
 static int
-mail_code(thread_t * thread, int status)
+mail_code(thread_ref_t thread, int status)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 
 	if (status == 250) {
 		smtp->stage++;
 	} else {
-		log_message(LOG_INFO, "Error processing MAIL cmd on SMTP server [%s]:%d."
+		log_message(LOG_INFO, "Error processing MAIL cmd on SMTP server %s."
 				      " SMTP status code = %d"
-				    , inet_sockaddrtos(&global_data->smtp_server)
-				    , SMTP_PORT, status);
+				    , FMT_SMTP_HOST()
+				    , status);
 		smtp->stage = ERROR;
 	}
 
@@ -366,7 +383,7 @@ mail_code(thread_t * thread, int status)
 
 /* RCPT command processing */
 static int
-rcpt_cmd(thread_t * thread)
+rcpt_cmd(thread_ref_t thread)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 	char *buffer;
@@ -376,33 +393,29 @@ rcpt_cmd(thread_t * thread)
 	/* We send RCPT TO command multiple time to add all our email receivers.
 	 * --rfc821.3.1
 	 */
-	fetched_email = fetch_next_email(smtp);
+	fetched_email = ELEMENT_DATA(smtp->next_email_element);
+	ELEMENT_NEXT(smtp->next_email_element);
 
 	snprintf(buffer, SMTP_BUFFER_MAX, SMTP_RCPT_CMD, fetched_email);
-	if (send(thread->u.fd, buffer, strlen(buffer), 0) == -1)
+	if (send(thread->u.f.fd, buffer, strlen(buffer), 0) == -1)
 		smtp->stage = ERROR;
 	FREE(buffer);
 
 	return 0;
 }
 static int
-rcpt_code(thread_t * thread, int status)
+rcpt_code(thread_ref_t thread, int status)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
-	char *fetched_email;
 
 	if (status == 250) {
-		smtp->email_it++;
-
-		fetched_email = fetch_next_email(smtp);
-
-		if (!fetched_email)
+		if (!smtp->next_email_element)
 			smtp->stage++;
 	} else {
-		log_message(LOG_INFO, "Error processing RCPT cmd on SMTP server [%s]:%d."
+		log_message(LOG_INFO, "Error processing RCPT cmd on SMTP server %s."
 				      " SMTP status code = %d"
-				    , inet_sockaddrtos(&global_data->smtp_server)
-				    , SMTP_PORT, status);
+				    , FMT_SMTP_HOST()
+				    , status);
 		smtp->stage = ERROR;
 	}
 
@@ -411,109 +424,74 @@ rcpt_code(thread_t * thread, int status)
 
 /* DATA command processing */
 static int
-data_cmd(thread_t * thread)
+data_cmd(thread_ref_t thread)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 
-	if (send(thread->u.fd, SMTP_DATA_CMD, strlen(SMTP_DATA_CMD), 0) == -1)
+	if (send(thread->u.f.fd, SMTP_DATA_CMD, strlen(SMTP_DATA_CMD), 0) == -1)
 		smtp->stage = ERROR;
 	return 0;
 }
 static int
-data_code(thread_t * thread, int status)
+data_code(thread_ref_t thread, int status)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 
 	if (status == 354) {
 		smtp->stage++;
 	} else {
-		log_message(LOG_INFO, "Error processing DATA cmd on SMTP server [%s]:%d."
+		log_message(LOG_INFO, "Error processing DATA cmd on SMTP server %s."
 				      " SMTP status code = %d"
-				    , inet_sockaddrtos(&global_data->smtp_server)
-				    , SMTP_PORT, status);
+				    , FMT_SMTP_HOST()
+				    , status);
 		smtp->stage = ERROR;
 	}
 
 	return 0;
 }
 
-/* 
- * Build a comma separated string of smtp recipient email addresses
- * for the email message To-header.
- */
-void
-build_to_header_rcpt_addrs(smtp_t *smtp)
-{
-	char *fetched_email;
-	char *email_to_addrs;
-	int email_addrs_max;
-
-	if (smtp == NULL) return;
-	email_to_addrs = smtp->email_to;
-	smtp->email_it = 0;
-
-	email_addrs_max = (SMTP_BUFFER_MAX / SMTP_EMAIL_ADDR_MAX_LENGTH) - 1;
-
-	while ((fetched_email = fetch_next_email(smtp)) != NULL) {
-
-		/* First email address, so no need for "," */
-		if (smtp->email_it == 0) {
-			snprintf(email_to_addrs, SMTP_EMAIL_ADDR_MAX_LENGTH, "%s", fetched_email);
-		}
-		else {
-			strcat(email_to_addrs, ", ");
-			strncat(email_to_addrs, fetched_email, SMTP_EMAIL_ADDR_MAX_LENGTH);
-		}
-	
-		smtp->email_it++;
-		if (smtp->email_it >= email_addrs_max)
-			break;
-				
-	}
-
-	smtp->email_it = 0;
-}
-
 /* BODY command processing.
  * Do we need to use mutli-thread for multi-part body
  * handling ? Don t really think :)
  */
 static int
-body_cmd(thread_t * thread)
+body_cmd(thread_ref_t thread)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 	char *buffer;
 	char rfc822[80];
-	time_t tm;
+	time_t now;
+	struct tm *t;
 
 	buffer = (char *) MALLOC(SMTP_BUFFER_MAX);
 
-	time(&tm);
-	strftime(rfc822, sizeof(rfc822), "%a, %d %b %Y %H:%M:%S %z", gmtime(&tm));
+	time(&now);
+	t = localtime(&now);
+	strftime(rfc822, sizeof(rfc822), "%a, %d %b %Y %H:%M:%S %z", t);
 
 	snprintf(buffer, SMTP_BUFFER_MAX, SMTP_HEADERS_CMD,
 		 rfc822, global_data->email_from, smtp->subject, smtp->email_to);
 
 	/* send the subject field */
-	if (send(thread->u.fd, buffer, strlen(buffer), 0) == -1)
+	if (send(thread->u.f.fd, buffer, strlen(buffer), 0) == -1)
 		smtp->stage = ERROR;
 
 	memset(buffer, 0, SMTP_BUFFER_MAX);
 	snprintf(buffer, SMTP_BUFFER_MAX, SMTP_BODY_CMD, smtp->body);
 
 	/* send the the body field */
-	if (send(thread->u.fd, buffer, strlen(buffer), 0) == -1)
+	if (send(thread->u.f.fd, buffer, strlen(buffer), 0) == -1)
 		smtp->stage = ERROR;
 
 	/* send the sending dot */
-	if (send(thread->u.fd, SMTP_SEND_CMD, strlen(SMTP_SEND_CMD), 0) == -1)
+	if (send(thread->u.f.fd, SMTP_SEND_CMD, strlen(SMTP_SEND_CMD), 0) == -1)
 		smtp->stage = ERROR;
 
 	FREE(buffer);
 	return 0;
 }
 static int
-body_code(thread_t * thread, int status)
+body_code(thread_ref_t thread, int status)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 
@@ -521,10 +499,10 @@ body_code(thread_t * thread, int status)
 		log_message(LOG_INFO, "SMTP alert successfully sent.");
 		smtp->stage++;
 	} else {
-		log_message(LOG_INFO, "Error processing DOT cmd on SMTP server [%s]:%d."
+		log_message(LOG_INFO, "Error processing DOT cmd on SMTP server %s."
 				      " SMTP status code = %d"
-				    , inet_sockaddrtos(&global_data->smtp_server)
-				    , SMTP_PORT, status);
+				    , FMT_SMTP_HOST()
+				    , status);
 		smtp->stage = ERROR;
 	}
 
@@ -533,88 +511,232 @@ body_code(thread_t * thread, int status)
 
 /* QUIT command processing */
 static int
-quit_cmd(thread_t * thread)
+quit_cmd(thread_ref_t thread)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 
-	if (send(thread->u.fd, SMTP_QUIT_CMD, strlen(SMTP_QUIT_CMD), 0) == -1)
+	if (send(thread->u.f.fd, SMTP_QUIT_CMD, strlen(SMTP_QUIT_CMD), 0) == -1)
 		smtp->stage = ERROR;
 	else
 		smtp->stage++;
 	return 0;
 }
+
 static int
-quit_code(thread_t * thread, int status)
+quit_code(thread_ref_t thread, __attribute__((unused)) int status)
 {
 	smtp_t *smtp = THREAD_ARG(thread);
 
 	/* final state, we are disconnected from the remote host */
 	free_smtp_all(smtp);
-	close(thread->u.fd);
+	thread_close_fd(thread);
 	return 0;
 }
 
 /* connect remote SMTP server */
 static void
-smtp_connect(smtp_t * smtp)
+smtp_connect(smtp_t *smtp)
 {
 	enum connect_result status;
 
-	if ((smtp->fd = socket(global_data->smtp_server.ss_family, SOCK_STREAM, IPPROTO_TCP)) == -1) {
+	smtp->next_email_element = LIST_HEAD(global_data->email);
+
+	if ((smtp->fd = socket(global_data->smtp_server.ss_family, SOCK_STREAM | SOCK_CLOEXEC | SOCK_NONBLOCK, IPPROTO_TCP)) == -1) {
 		DBG("SMTP connect fail to create socket.");
 		free_smtp_all(smtp);
 		return;
 	}
 
+#if !HAVE_DECL_SOCK_NONBLOCK
+	if (set_sock_flags(smtp->fd, F_SETFL, O_NONBLOCK))
+		log_message(LOG_INFO, "Unable to set NONBLOCK on smtp_connect socket - %s (%d)", strerror(errno), errno);
+#endif
+
+#if !HAVE_DECL_SOCK_CLOEXEC
+	if (set_sock_flags(smtp->fd, F_SETFD, FD_CLOEXEC))
+		log_message(LOG_INFO, "Unable to set CLOEXEC on smtp_connect socket - %s (%d)", strerror(errno), errno);
+#endif
+
 	status = tcp_connect(smtp->fd, &global_data->smtp_server);
 
 	/* Handle connection status code */
 	thread_add_event(master, SMTP_FSM[status].send, smtp, smtp->fd);
 }
 
+#ifdef _SMTP_ALERT_DEBUG_
+static void
+smtp_log_to_file(smtp_t *smtp)
+{
+	FILE *fp = fopen_safe("/tmp/smtp-alert.log", "a");
+	time_t now;
+	struct tm tm;
+	char time_buf[25];
+	int time_buf_len;
+
+	time(&now);
+	localtime_r(&now, &tm);
+	time_buf_len = strftime(time_buf, sizeof time_buf, "%a %b %e %X %Y", &tm);
+
+	fprintf(fp, "%s: %s -> %s\n"
+		    "%*sSubject: %s\n"
+		    "%*sBody:    %s\n\n",
+		    time_buf, global_data->email_from, smtp->email_to,
+		    time_buf_len - 7, "", smtp->subject,
+		    time_buf_len - 7, "", smtp->body);
+
+	fclose(fp);
+
+	free_smtp_all(smtp);
+}
+#endif
+
+/*
+ * Build a comma separated string of smtp recipient email addresses
+ * for the email message To-header.
+ */
+static void
+build_to_header_rcpt_addrs(smtp_t *smtp)
+{
+	const char *fetched_email;
+	char *email_to_addrs;
+	size_t bytes_available = SMTP_BUFFER_MAX - 1;
+	size_t bytes_to_write;
+	bool done_addr = false;
+	element e;
+
+	if (smtp == NULL)
+		return;
+
+	email_to_addrs = smtp->email_to;
+
+	LIST_FOREACH(global_data->email, fetched_email, e) {
+		bytes_to_write = strlen(fetched_email);
+		if (done_addr) {
+			if (bytes_available < 2)
+				break;
+
+			/* Prepend with a comma and space to all non-first email addresses */
+			*email_to_addrs++ = ',';
+			*email_to_addrs++ = ' ';
+			bytes_available -= 2;
+		}
+		else
+			done_addr = true;
+
+		if (bytes_available < bytes_to_write)
+			break;
+
+		strcpy(email_to_addrs, fetched_email);
+
+		email_to_addrs += bytes_to_write;
+		bytes_available -= bytes_to_write;
+	}
+}
+
 /* Main entry point */
 void
-smtp_alert(real_server_t * rs, vrrp_t * vrrp,
-	   vrrp_sgroup_t * vgroup, const char *subject, const char *body)
+smtp_alert(smtp_msg_t msg_type, void* data, const char *subject, const char *body)
 {
 	smtp_t *smtp;
+#ifdef _WITH_VRRP_
+	vrrp_t *vrrp;
+	vrrp_sgroup_t *vgroup;
+#endif
+#ifdef _WITH_LVS_
+	checker_t *checker;
+	virtual_server_t *vs;
+	smtp_rs *rs_info;
+#endif
 
 	/* Only send mail if email specified */
-	if (!LIST_ISEMPTY(global_data->email) && global_data->smtp_server.ss_family != 0) {
-		/* allocate & initialize smtp argument data structure */
-		smtp = (smtp_t *) MALLOC(sizeof(smtp_t));
-		smtp->subject = (char *) MALLOC(MAX_HEADERS_LENGTH);
-		smtp->body = (char *) MALLOC(MAX_BODY_LENGTH);
-		smtp->buffer = (char *) MALLOC(SMTP_BUFFER_MAX);
-		smtp->email_to = (char *) MALLOC(SMTP_BUFFER_MAX);
-
-		/* format subject if rserver is specified */
-		if (rs) {
-			snprintf(smtp->subject, MAX_HEADERS_LENGTH, "[%s] Realserver [%s]:%d - %s"
-					      , global_data->router_id
-					      , inet_sockaddrtos(&rs->addr)
-					      , ntohs(inet_sockaddrport(&rs->addr))
-					      , subject);
-		} else if (vrrp)
-			snprintf(smtp->subject, MAX_HEADERS_LENGTH, "[%s] VRRP Instance %s - %s"
-					      , global_data->router_id
-					      , vrrp->iname
-					      , subject);
-		else if (vgroup)
-			snprintf(smtp->subject, MAX_HEADERS_LENGTH, "[%s] VRRP Group %s - %s"
-					      , global_data->router_id
-					      , vgroup->gname
-					      , subject);
-		else if (global_data->router_id)
-			snprintf(smtp->subject, MAX_HEADERS_LENGTH, "[%s] %s"
-					      , global_data->router_id
-					      , subject);
-		else
-			snprintf(smtp->subject, MAX_HEADERS_LENGTH, "%s", subject);
-
-		strncpy(smtp->body, body, MAX_BODY_LENGTH);
-		build_to_header_rcpt_addrs(smtp);
+	if (LIST_ISEMPTY(global_data->email) || !global_data->smtp_server.ss_family)
+		return;
 
-		smtp_connect(smtp);
+	/* allocate & initialize smtp argument data structure */
+	smtp = (smtp_t *) MALLOC(sizeof(smtp_t));
+	smtp->subject = (char *) MALLOC(MAX_HEADERS_LENGTH);
+	smtp->body = (char *) MALLOC(MAX_BODY_LENGTH);
+	smtp->buffer = (char *) MALLOC(SMTP_BUFFER_MAX);
+	smtp->email_to = (char *) MALLOC(SMTP_BUFFER_MAX);
+
+	/* format subject if rserver is specified */
+#ifdef _WITH_LVS_
+	if (msg_type == SMTP_MSG_RS) {
+		checker = (checker_t *)data;
+		snprintf(smtp->subject, MAX_HEADERS_LENGTH, "[%s] Realserver %s of virtual server %s - %s",
+					global_data->router_id,
+					FMT_RS(checker->rs, checker->vs),
+					FMT_VS(checker->vs),
+					checker->rs->alive ? "UP" : "DOWN");
+	}
+	else if (msg_type == SMTP_MSG_VS) {
+		vs = (virtual_server_t *)data;
+		snprintf(smtp->subject, MAX_HEADERS_LENGTH, "[%s] Virtualserver %s - %s",
+					global_data->router_id,
+					FMT_VS(vs),
+					subject);
+	}
+	else if (msg_type == SMTP_MSG_RS_SHUT) {
+		rs_info = (smtp_rs *)data;
+		snprintf(smtp->subject, MAX_HEADERS_LENGTH, "[%s] Realserver %s of virtual server %s - %s",
+					global_data->router_id,
+					FMT_RS(rs_info->rs, rs_info->vs),
+					FMT_VS(rs_info->vs),
+					subject);
+	}
+	else
+#endif
+#ifdef _WITH_VRRP_
+	if (msg_type == SMTP_MSG_VRRP) {
+		vrrp = (vrrp_t *)data;
+		snprintf(smtp->subject, MAX_HEADERS_LENGTH, "[%s] VRRP Instance %s - %s",
+					global_data->router_id,
+					vrrp->iname,
+					subject);
+	} else if (msg_type == SMTP_MSG_VGROUP) {
+		vgroup = (vrrp_sgroup_t *)data;
+		snprintf(smtp->subject, MAX_HEADERS_LENGTH, "[%s] VRRP Group %s - %s",
+					global_data->router_id,
+					vgroup->gname,
+					subject);
 	}
+	else
+#endif
+	if (global_data->router_id)
+		snprintf(smtp->subject, MAX_HEADERS_LENGTH, "[%s] %s"
+				      , global_data->router_id
+				      , subject);
+	else
+		snprintf(smtp->subject, MAX_HEADERS_LENGTH, "%s", subject);
+
+	strncpy(smtp->body, body, MAX_BODY_LENGTH - 1);
+	smtp->body[MAX_BODY_LENGTH - 1]= '\0';
+
+	build_to_header_rcpt_addrs(smtp);
+
+#ifdef _SMTP_ALERT_DEBUG_
+	if (do_smtp_alert_debug)
+		smtp_log_to_file(smtp);
+	else
+#endif
+	smtp_connect(smtp);
+}
+
+#ifdef THREAD_DUMP
+void
+register_smtp_addresses(void)
+{
+	register_thread_address("body_cmd", body_cmd);
+	register_thread_address("connection_error", connection_error);
+	register_thread_address("connection_in_progress", connection_in_progress);
+	register_thread_address("connection_success", connection_success);
+	register_thread_address("connection_timeout", connection_timeout);
+	register_thread_address("data_cmd", data_cmd);
+	register_thread_address("helo_cmd", helo_cmd);
+	register_thread_address("mail_cmd", mail_cmd);
+	register_thread_address("quit_cmd", quit_cmd);
+	register_thread_address("rcpt_cmd", rcpt_cmd);
+	register_thread_address("smtp_read_thread", smtp_read_thread);
+	register_thread_address("smtp_send_thread", smtp_send_thread);
 }
+#endif
diff --git a/tools/keepalived/keepalived/core/snmp.c b/tools/keepalived/keepalived/core/snmp.c
index 32999856a..dc730639d 100644
--- a/tools/keepalived/keepalived/core/snmp.c
+++ b/tools/keepalived/keepalived/core/snmp.c
@@ -17,19 +17,36 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include "scheduler.h"
 #include "snmp.h"
 #include "logger.h"
-#include "config.h"
 #include "global_data.h"
+#include "main.h"
+#include "utils.h"
+#include "warnings.h"
+
+#include <net-snmp/agent/agent_sysORTable.h>
 
 static int
-snmp_keepalived_log(int major, int minor, void *serverarg, void *clientarg)
+snmp_keepalived_log(__attribute__((unused)) int major, __attribute__((unused)) int minor, void *serverarg, __attribute__((unused)) void *clientarg)
 {
 	struct snmp_log_message *slm = (struct snmp_log_message*)serverarg;
-	log_message(slm->priority, "%s", slm->msg);
+	int slm_len = strlen(slm->msg);
+
+	if (slm_len && slm->msg[slm_len-1] == '\n')
+		slm_len--;
+	log_message(slm->priority, "%.*s", slm_len, slm->msg);
+
+	/* If we get an AgentX subagent connected message when we think
+	 * we are connected, we need to re-register the fds for epoll */
+	if (master->snmp_fdsetsize && slm->priority == 6)
+		snmp_epoll_reset(master);
+
 	return 0;
 }
 
@@ -54,9 +71,9 @@ snmp_header_list_table(struct variable *vp, oid *name, size_t *length,
 {
 	element e;
 	void *scr;
-	unsigned int target, current;
+	oid target, current;
 
-	if (header_simple_table(vp, name, length, exact, var_len, write_method, -1))
+	if (header_simple_table(vp, name, length, exact, var_len, write_method, -1) != MATCH_SUCCEEDED)
 		return NULL;
 
 	if (LIST_ISEMPTY(dlist))
@@ -65,15 +82,17 @@ snmp_header_list_table(struct variable *vp, oid *name, size_t *length,
 	target = name[*length - 1];
 	current = 0;
 
-	for (e = LIST_HEAD(dlist); e; ELEMENT_NEXT(e)) {
-		scr = ELEMENT_DATA(e);
-		current++;
+	/* If there are insufficent entries in the list, just return no match */
+	if (LIST_SIZE(dlist) < target)
+		return NULL;
+
+	LIST_FOREACH(dlist, scr, e) {
+		if (++current < target)
+			/* No match found yet */
+			continue;
 		if (current == target)
 			/* Exact match */
 			return scr;
-		if (current < target)
-			/* No match found yet */
-			continue;
 		if (exact)
 			/* No exact match found */
 			return NULL;
@@ -81,38 +100,146 @@ snmp_header_list_table(struct variable *vp, oid *name, size_t *length,
 		name[*length - 1] = current;
 		return scr;
 	}
-	/* No macth found at end */
+
+	/* No match found at end */
 	return NULL;
 }
 
-#define SNMP_KEEPALIVEDVERSION 1
-#define SNMP_ROUTERID 2
-#define SNMP_MAIL_SMTPSERVERADDRESSTYPE 3
-#define SNMP_MAIL_SMTPSERVERADDRESS 4
-#define SNMP_MAIL_SMTPSERVERTIMEOUT 5
-#define SNMP_MAIL_EMAILFROM 6
-#define SNMP_MAIL_EMAILADDRESS 7
-#define SNMP_TRAPS 8
-#define SNMP_LINKBEAT 9
+/* This is the equivalent of snmp_header_list_table where each element of the first
+ * list has a list itself for which each element in turn needs to be returned. */
+element
+snmp_find_element(struct variable *vp, oid *name, size_t *length,
+	     int exact, size_t *var_len, WriteMethod **write_method,
+	     list list1, size_t list2_offset)
+{
+	oid *target, current[2];
+	int result;
+	size_t target_len;
+	element e, e1;
+	void *element_data;
+	__attribute__((unused)) void *dummy;
+	list list2;
+
+	*write_method = 0;
+	*var_len = sizeof(long);
+
+	if (LIST_ISEMPTY(list1))
+		return NULL;
+
+	if (exact && *length != (size_t)vp->namelen + 2)
+		return NULL;
+
+	if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
+		memcpy(name, vp->name, sizeof(oid) * vp->namelen);
+		*length = vp->namelen;
+	}
+
+	/* We search the best match: equal if exact, the lower OID in
+	   the set of the OID strictly superior to the target
+	   otherwise. */
+	target = &name[vp->namelen];   /* Our target match */
+	target_len = *length - vp->namelen;
+	current[0] = 0;
+
+	if (target_len && LIST_SIZE(list1) < target[0])
+		return NULL;
+
+	LIST_FOREACH(list1, element_data, e) {
+		current[0]++;
+
+		if (target_len) {
+			if (current[0] < target[0])
+				continue; /* Optimization: cannot be part of our set */
+			if (exact && current[0] > target[0])
+				return NULL;
+		}
+
+		list2 = *(list *)((char *)element_data + list2_offset);
+
+		if (target_len && LIST_SIZE(list2) < target[1]) {
+			if (exact)
+				return NULL;
+			continue;
+		}
+
+		current[1] = 0;
+		LIST_FOREACH(list2, dummy, e1) {
+			current[1]++;
+
+			/* Compare to our target match */
+			if (target_len) {
+				if ((result = snmp_oid_compare(current, 2, target,
+							       target_len)) < 0)
+					continue;
+
+				if (result == 0) {
+					if (!exact)
+						continue;
+
+					/* Got an exact match and asked for it */
+					return e1;
+				}
+
+				if (exact) {
+					/* result > 0, so no match */
+					return NULL;
+				}
+			}
+
+			/* This is our best match */
+			memcpy(target, current, sizeof(oid) * 2);
+			*length = (unsigned)vp->namelen + 2;
+			return e1;
+		}
+	}
+
+	/* No match at all */
+	return NULL;
+}
+
+enum snmp_global_magic {
+	SNMP_KEEPALIVEDVERSION,
+	SNMP_ROUTERID,
+	SNMP_MAIL_SMTPSERVERADDRESSTYPE,
+	SNMP_MAIL_SMTPSERVERADDRESS,
+	SNMP_MAIL_SMTPSERVERTIMEOUT,
+	SNMP_MAIL_EMAILFROM,
+	SNMP_MAIL_EMAILADDRESS,
+	SNMP_MAIL_EMAILFAULTS,
+	SNMP_MAIL_SMTPSERVERPORT,
+	SNMP_TRAPS,
+	SNMP_LINKBEAT,
+	SNMP_LVSFLUSH,
+	SNMP_LVSFLUSH_ONSTOP,
+	SNMP_IPVS_64BIT_STATS,
+	SNMP_NET_NAMESPACE,
+	SNMP_DBUS,
+	SNMP_DYNAMIC_INTERFACES,
+	SNMP_SMTP_ALERT,
+	SNMP_SMTP_ALERT_VRRP,
+	SNMP_SMTP_ALERT_CHECKER,
+};
 
 static u_char*
 snmp_scalar(struct variable *vp, oid *name, size_t *length,
 		 int exact, size_t *var_len, WriteMethod **write_method)
 {
 	static unsigned long long_ret;
-	static char version[] = VERSION_STRING;
+	snmp_ret_t ret;
 
 	if (header_generic(vp, name, length, exact, var_len, write_method))
 		return NULL;
-	
+
 	switch (vp->magic) {
 	case SNMP_KEEPALIVEDVERSION:
-		*var_len = sizeof(version) - 2;
-		return (u_char *)version;
+		*var_len = strlen(version_string);
+		ret.cp = version_string;
+		return ret.p;
 	case SNMP_ROUTERID:
 		if (!global_data->router_id) return NULL;
 		*var_len = strlen(global_data->router_id);
-		return (u_char *)global_data->router_id;
+		ret.cp = global_data->router_id;
+		return ret.p;
 	case SNMP_MAIL_SMTPSERVERADDRESSTYPE:
 		long_ret = (global_data->smtp_server.ss_family == AF_INET6)?2:1;
 		return (u_char *)&long_ret;
@@ -127,19 +254,83 @@ snmp_scalar(struct variable *vp, oid *name, size_t *length,
 			return (u_char *)&addr4->sin_addr;
 		}
 		return NULL;
+	case SNMP_MAIL_SMTPSERVERPORT:
+		long_ret = ntohs(inet_sockaddrport(&global_data->smtp_server));
+		return (u_char *)&long_ret;
 	case SNMP_MAIL_SMTPSERVERTIMEOUT:
 		long_ret = global_data->smtp_connection_to / TIMER_HZ;
 		return (u_char *)&long_ret;
 	case SNMP_MAIL_EMAILFROM:
 		if (!global_data->email_from) return NULL;
 		*var_len = strlen(global_data->email_from);
-		return (u_char *)global_data->email_from;
+		ret.cp = global_data->email_from;
+		return ret.p;
+#ifdef _WITH_VRRP_
+	case SNMP_MAIL_EMAILFAULTS:
+		long_ret = global_data->no_email_faults?2:1;
+		return (u_char *)&long_ret;
+#endif
 	case SNMP_TRAPS:
 		long_ret = global_data->enable_traps?1:2;
 		return (u_char *)&long_ret;
+#ifdef _WITH_LINKBEAT_
 	case SNMP_LINKBEAT:
 		long_ret = global_data->linkbeat_use_polling?2:1;
 		return (u_char *)&long_ret;
+#endif
+#ifdef _WITH_LVS_
+	case SNMP_LVSFLUSH:
+		long_ret = global_data->lvs_flush?1:2;
+		return (u_char *)&long_ret;
+	case SNMP_LVSFLUSH_ONSTOP:
+		long_ret = global_data->lvs_flush_onstop == LVS_FLUSH_FULL ? 1 :
+			   global_data->lvs_flush_onstop == LVS_FLUSH_VS ? 3 : 2;
+		return (u_char *)&long_ret;
+#endif
+	case SNMP_IPVS_64BIT_STATS:
+#ifdef _WITH_LVS_64BIT_STATS_
+		long_ret = 1;
+#else
+		long_ret = 2;
+#endif
+		return (u_char *)&long_ret;
+	case SNMP_NET_NAMESPACE:
+#if HAVE_DECL_CLONE_NEWNET
+		if (global_data->network_namespace) {
+			*var_len = strlen(global_data->network_namespace);
+			ret.cp = global_data->network_namespace;
+			return ret.p;
+		}
+#endif
+		*var_len = 0;
+		ret.cp = "";
+		return ret.p;
+	case SNMP_DBUS:
+#ifdef _WITH_DBUS_
+		if (global_data->enable_dbus)
+			long_ret = 1;
+		else
+#endif
+			long_ret = 2;
+		return (u_char *)&long_ret;
+#ifdef _WITH_VRRP_
+	case SNMP_DYNAMIC_INTERFACES:
+		long_ret = global_data->dynamic_interfaces ? 1 : 2;
+		return (u_char *)&long_ret;
+#endif
+	case SNMP_SMTP_ALERT:
+		long_ret = global_data->smtp_alert == -1 ? 3 : global_data->smtp_alert ? 1 : 2;
+		return (u_char *)&long_ret;
+#ifdef _WITH_VRRP_
+	case SNMP_SMTP_ALERT_VRRP:
+		long_ret = global_data->smtp_alert_vrrp == -1 ? 3 : global_data->smtp_alert_vrrp ? 1 : 2;
+		return (u_char *)&long_ret;
+#endif
+#ifdef _WITH_LVS_
+	case SNMP_SMTP_ALERT_CHECKER:
+		long_ret = global_data->smtp_alert_checker == -1 ? 3 : global_data->smtp_alert_checker ? 1 : 2;
+		return (u_char *)&long_ret;
+#endif
 	default:
 		break;
 	}
@@ -162,10 +353,11 @@ snmp_mail(struct variable *vp, oid *name, size_t *length,
 		return (u_char *)m;
 	default:
 		break;
-        }
-        return NULL;
+	}
+	return NULL;
 }
 
+static const char global_name[] = "Keepalived";
 static oid global_oid[] = GLOBAL_OID;
 static struct variable8 global_vars[] = {
 	/* version */
@@ -179,31 +371,84 @@ static struct variable8 global_vars[] = {
 	{SNMP_MAIL_EMAILFROM, ASN_OCTET_STR, RONLY, snmp_scalar, 2, {3, 4}},
 	/* emailTable */
 	{SNMP_MAIL_EMAILADDRESS, ASN_OCTET_STR, RONLY, snmp_mail, 4, {3, 5, 1, 2}},
+	/* SMTP server port */
+	{SNMP_MAIL_SMTPSERVERPORT, ASN_UNSIGNED, RONLY, snmp_scalar, 2, {3, 6}},
+	/* are vrrp fault state transitions emailed */
+	{SNMP_MAIL_EMAILFAULTS, ASN_INTEGER, RONLY, snmp_scalar, 2, {3, 7}},
+	{SNMP_SMTP_ALERT, ASN_INTEGER, RONLY, snmp_scalar, 2, {3, 8}},
+#ifdef _WITH_VRRP_
+	{SNMP_SMTP_ALERT_VRRP, ASN_INTEGER, RONLY, snmp_scalar, 2, {3, 9}},
+#endif
+#ifdef _WITH_LVS_
+	{SNMP_SMTP_ALERT_CHECKER, ASN_INTEGER, RONLY, snmp_scalar, 2, {3, 10}},
+#endif
 	/* trapEnable */
 	{SNMP_TRAPS, ASN_INTEGER, RONLY, snmp_scalar, 1, {4}},
 	/* linkBeat */
 	{SNMP_LINKBEAT, ASN_INTEGER, RONLY, snmp_scalar, 1, {5}},
+#ifdef _WITH_LVS_
+	/* lvsFlush */
+	{SNMP_LVSFLUSH, ASN_INTEGER, RONLY, snmp_scalar, 1, {6}},
+#endif
+#ifdef _WITH_LVS_64BIT_STATS_
+	/* LVS 64-bit stats */
+	{SNMP_IPVS_64BIT_STATS, ASN_INTEGER, RONLY, snmp_scalar, 1, {7}},
+#endif
+	{SNMP_NET_NAMESPACE, ASN_OCTET_STR, RONLY, snmp_scalar, 1, {8}},
+#ifdef _WITH_DBUS_
+	{SNMP_DBUS, ASN_INTEGER, RONLY, snmp_scalar, 1, {9}},
+#endif
+#ifdef _WITH_VRRP_
+	{SNMP_DYNAMIC_INTERFACES, ASN_INTEGER, RONLY, snmp_scalar, 1, {10}},
+#endif
+#ifdef _WITH_LVS_
+	/* lvsFlushOnStop */
+	{SNMP_LVSFLUSH_ONSTOP, ASN_INTEGER, RONLY, snmp_scalar, 1, {11}},
+#endif
 };
 
 static int
-snmp_setup_session_cb(int majorID, int minorID,
-		      void *serverarg, void *clientarg)
+snmp_setup_session_cb(__attribute__((unused)) int majorID, __attribute__((unused)) int minorID,
+		      void *serverarg, __attribute__((unused)) void *clientarg)
 {
 	netsnmp_session *sess = serverarg;
 	if (serverarg == NULL)
 		return 0;
-	/* Because ping are done synchronously, we do everything to
-	   avoid to block too long. Better disconnect from the master
-	   agent than waiting for him... */
+	/*
+	 * Because ping are done synchronously, we do everything to
+	 * avoid to block too long. Better disconnect from the master
+	 * agent than waiting for him...
+	 */
 	sess->timeout = ONE_SEC / 3;
 	sess->retries = 0;
 	return 0;
 }
 
+void snmp_register_mib(oid *myoid, size_t len, const char *name,
+		       struct variable *variables, size_t varsize, size_t varlen)
+{
+	char name_buf[80];
+
+	if (register_mib(name, (struct variable *) variables, varsize,
+			 varlen, myoid, len) != MIB_REGISTERED_OK)
+		log_message(LOG_WARNING, "Unable to register %s MIB", name);
+
+	snprintf(name_buf, sizeof(name_buf), "The MIB module for %s", name);
+	register_sysORTable(myoid, len, name_buf);
+}
+
 void
-snmp_agent_init(oid *myoid, int len, char *name, struct variable *variables,
-		int varsize, int varlen)
+snmp_unregister_mib(oid *myoid, size_t len)
 {
+	unregister_sysORTable(myoid, len);
+}
+
+void
+snmp_agent_init(const char *snmp_socket_name, bool base_mib)
+{
+	if (snmp_running)
+		return;
+
 	log_message(LOG_INFO, "Starting SNMP subagent");
 	netsnmp_enable_subagent();
 	snmp_disable_log();
@@ -218,33 +463,59 @@ snmp_agent_init(oid *myoid, int len, char *name, struct variable *variables,
 	    NETSNMP_DS_LIB_DONT_PERSIST_STATE, TRUE);
 	/* Do not load any MIB */
 	setenv("MIBS", "", 1);
-	/* We also register a callback to modify default timeout and
-	   retries value. */
+	/*
+	 * We also register a callback to modify default timeout and
+	 * retries value.
+	 */
 	snmp_register_callback(SNMP_CALLBACK_LIBRARY,
 			       SNMP_CALLBACK_SESSION_INIT,
 			       snmp_setup_session_cb, NULL);
-
-	init_agent(name);
-	/* Ping AgentX less often than every 15 seconds: pinging can
-	   block keepalived. We check every 2 minutes. */
+	/* Specify the socket to master agent, if provided */
+	if (snmp_socket_name != NULL) {
+		netsnmp_ds_set_string(NETSNMP_DS_APPLICATION_ID,
+				      NETSNMP_DS_AGENT_X_SOCKET,
+				      snmp_socket_name);
+	}
+	/*
+	 * Ping AgentX less often than every 15 seconds: pinging can
+	 * block keepalived. We check every 2 minutes.
+	 */
 	netsnmp_ds_set_int(NETSNMP_DS_APPLICATION_ID,
 			   NETSNMP_DS_AGENT_AGENTX_PING_INTERVAL, 120);
-	if (register_mib(name, (struct variable *) variables, varsize,
-			 varlen, myoid, len) != MIB_REGISTERED_OK)
-		log_message(LOG_WARNING, "Unable to register MIB");
-	register_mib("Keepalived", (struct variable *) global_vars,
-		     sizeof(struct variable8),
-		     sizeof(global_vars)/sizeof(struct variable8),
-		     global_oid, OID_LENGTH(global_oid));
-	init_snmp(name);
-
-	register_sysORTable(global_oid, OID_LENGTH(global_oid) - 1,
-			    "The MIB module for Keepalived");
+
+	/* Tell library not to raise SIGALRM */
+	netsnmp_ds_set_boolean(NETSNMP_DS_LIBRARY_ID, NETSNMP_DS_LIB_ALARM_DONT_USE_SIG, 1);
+
+	init_agent(global_name);
+	if (base_mib)
+		snmp_register_mib(global_oid, OID_LENGTH(global_oid), global_name,
+				  (struct variable *)global_vars,
+				  sizeof(struct variable8),
+				  sizeof(global_vars)/sizeof(struct variable8));
+	init_snmp(global_name);
+
+	master->snmp_timer_thread = thread_add_timer(master, snmp_timeout_thread, 0, TIMER_NEVER);
+
+	snmp_running = true;
 }
 
 void
-snmp_agent_close(oid *myoid, int len, char *name)
+snmp_agent_close(bool base_mib)
 {
-	unregister_sysORTable(myoid, len);
-	snmp_shutdown(name);
+	if (!snmp_running)
+		return;
+
+	if (base_mib)
+		snmp_unregister_mib(global_oid, OID_LENGTH(global_oid));
+	snmp_shutdown(global_name);
+
+	snmp_running = false;
+}
+
+#ifdef THREAD_DUMP
+void
+register_snmp_addresses(void)
+{
+	register_thread_address("snmp_timeout_thread", snmp_timeout_thread);
 }
+#endif
diff --git a/tools/keepalived/keepalived/core/track_process.c b/tools/keepalived/keepalived/core/track_process.c
new file mode 100644
index 000000000..b5b84e629
--- /dev/null
+++ b/tools/keepalived/keepalived/core/track_process.c
@@ -0,0 +1,1193 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Process tracking framework.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2018-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+/* For details on the proc connector, see:
+ *
+ * https://stackoverflow.com/questions/26852228/detect-new-process-creation-instantly-in-linux
+ * https://unix.stackexchange.com/questions/260162/how-to-track-newly-created-processes-in-linux
+ * http://netsplit.com/the-proc-connector-and-socket-filters
+ */
+
+#include "config.h"
+
+#include <sys/socket.h>
+#include <linux/netlink.h>
+#include <linux/connector.h>
+#include <linux/cn_proc.h>
+#include <signal.h>
+#include <errno.h>
+#include <stdbool.h>
+#include <unistd.h>
+#include <string.h>
+#include <stdlib.h>
+#include <stdio.h>
+#include <dirent.h>
+#include <string.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <fcntl.h>
+#include <inttypes.h>
+
+#include "track_process.h"
+#include "global_data.h"
+#include "list.h"
+#if !HAVE_DECL_SOCK_NONBLOCK
+#include "old_socket.h"
+#endif
+#include "rbtree.h"
+#include "vrrp_data.h"
+#include "utils.h"
+#include "bitops.h"
+#include "logger.h"
+#include "main.h"
+
+
+static thread_ref_t read_thread;
+static thread_ref_t reload_thread;
+static rb_root_t process_tree = RB_ROOT;
+static int nl_sock = -1;
+static unsigned num_cpus;
+static int64_t *cpu_seq;
+static bool need_reinitialise;
+bool proc_events_not_supported;
+
+#ifdef _TRACK_PROCESS_DEBUG_
+bool do_track_process_debug;
+bool do_track_process_debug_detail;
+#endif
+
+static void
+set_rcv_buf(unsigned buf_size, bool force)
+{
+	if (setsockopt(nl_sock, SOL_SOCKET, force ? SO_RCVBUFFORCE : SO_RCVBUF, &buf_size, sizeof(buf_size)) < 0)
+		log_message(LOG_INFO, "Cannot set process monitor SO_RCVBUF%s option. errno=%d (%m)", force ? "FORCE" : "", errno);
+}
+
+static int
+pid_compare(const tracked_process_instance_t *tpi1, const tracked_process_instance_t *tpi2)
+{
+	return tpi1->pid - tpi2->pid;
+}
+
+static inline tracked_process_instance_t *
+add_process(pid_t pid, vrrp_tracked_process_t *tpr, tracked_process_instance_t *tpi)
+{
+	tracked_process_instance_t tp = { .pid = pid };
+
+	if (!tpi && !(tpi = rb_search(&process_tree, &tp, pid_tree, pid_compare))) {
+		PMALLOC(tpi);
+		tpi->pid = tp.pid;
+		tpi->processes = alloc_list(NULL, NULL);
+		RB_CLEAR_NODE(&tpi->pid_tree);
+		rb_insert_sort(&process_tree, tpi, pid_tree, pid_compare);
+	}
+
+	list_add(tpi->processes, tpr);
+	++tpr->num_cur_proc;
+
+	return tpi;
+}
+
+#ifdef _INCLUDE_UNUSED_CODE_
+static int scandir_filter(const struct dirent *dirent)
+{
+	if (dirent->d_type != DT_DIR)
+		return false;
+
+	if (dirent->d_name[0] <= '0' || dirent->d_name[0] > '9')
+		return false;
+
+	return true;
+}
+
+static int
+scandir_sort(const struct dirent **a, const struct dirent **b)
+{
+	return 0;
+}
+
+static pid_t
+read_procs(const char *name)
+{
+	struct dirent **namelist;
+	struct dirent **ent_p;
+	struct dirent *ent;
+	int ret;
+
+	ret = scandir("/proc", &namelist, scandir_filter, scandir_sort);
+	log_message(LOG_INFO, "scandir returned %d\n", ret);
+
+	for (ent_p = namelist, ent = *namelist; ret--; ent = *++ent_p) {
+		log_message(LOG_INFO, "0x%p: %s\n", ent, ent->d_name);
+		free(ent);
+	}
+
+	free(namelist);
+}
+#endif
+
+static bool
+check_params(vrrp_tracked_process_t *tpr, const char *params, size_t params_len)
+{
+	if (tpr->param_match == PARAM_MATCH_EXACT &&
+	    !tpr->process_params &&
+	    params_len == 0)
+		return true;
+
+	if (params_len < tpr->process_params_len)
+		return false;
+
+	if (tpr->param_match == PARAM_MATCH_EXACT)
+		return (params_len == tpr->process_params_len &&
+			(!tpr->process_params ||
+			 !memcmp(params, tpr->process_params, tpr->process_params_len)));
+
+	if (!tpr->process_params)
+		return true;
+
+	if (tpr->param_match == PARAM_MATCH_PARTIAL)
+		return !memcmp(params, tpr->process_params, tpr->process_params_len);
+
+	/* tpr->param_match == PARAM_MATCH_INITIAL */
+	return tpr->process_params_len == 1 ||
+	       !memcmp(params, tpr->process_params, tpr->process_params_len - 1);
+}
+
+static void
+read_procs(list processes)
+{
+	/* /proc/PID/status has line State: which can be Z for zombie process (but cmdline is empty then)
+	 * /proc/PID/stat has cmd name as 2nd field in (), and state as third field. For states see
+	 * man proc(5)
+	 * pgrep uses status and cmdline files. Without -f, pgrep looks at comm (in status/stat/comm). If
+	 * -f is specified, it reads cmdline.
+	 * To change comm for a process, use prctl(PR_SET_NAME). */
+	DIR *proc_dir = opendir("/proc");
+	struct dirent *ent;
+	char cmdline[22];	/* "/proc/xxxxxxx/cmdline" */
+	int fd;
+	char *cmd_buf;
+	size_t cmd_buf_len;
+	char stat_buf[128];
+	char *p;
+	char *comm;
+	ssize_t len = 0;
+	ssize_t cmdline_len = 0;
+	char *proc_name;
+	vrrp_tracked_process_t *tpr;
+	element e;
+	const char *param_start;
+
+	cmd_buf_len = vrrp_data->vrrp_max_process_name_len + 2;
+	cmd_buf = MALLOC(cmd_buf_len);
+
+	while ((ent = readdir(proc_dir))) {
+		if (ent->d_type != DT_DIR)
+			continue;
+		if (ent->d_name[0] <= '0' || ent->d_name[0] > '9')
+			continue;
+
+		/* We want to avoid reading /proc/PID/cmdline, since it reads the process
+		 * address space, and if the process is swapped out, then it will have to be
+		 * swapped in to read it. */
+		if (vrrp_data->vrrp_use_process_cmdline) {
+			snprintf(cmdline, sizeof(cmdline), "/proc/%.7s/cmdline", ent->d_name);
+
+			if ((fd = open(cmdline, O_RDONLY)) == -1)
+				continue;
+
+			/* Read max name len + null byte + 1 extra char */
+			cmdline_len = read(fd, cmd_buf, vrrp_data->vrrp_max_process_name_len + 1);
+			close(fd);
+			if (cmdline_len < 0)
+				continue;
+			cmd_buf[cmdline_len] = '\0';
+		}
+
+		if (vrrp_data->vrrp_use_process_comm) {
+			snprintf(cmdline, sizeof(cmdline), "/proc/%.7s/stat", ent->d_name);
+
+			if ((fd = open(cmdline, O_RDONLY)) == -1)
+				continue;
+
+			len = read(fd, stat_buf, sizeof(stat_buf) - 1);
+			close(fd);
+			if (len < 0)
+				continue;
+			stat_buf[len] = '\0';
+			if (len && stat_buf[len-1] == '\n')
+				stat_buf[len - 1] = '\0';
+
+			/* Find the comm field, terminate it and check not a zombie process */
+			p = strchr(stat_buf + 2, '(');
+			if (!p)
+				continue;
+
+			comm = p + 1;
+			p = strchr(p, ')');
+			if (!p)
+				continue;
+			*p = '\0';
+			if (p[2] == 'Z')
+				continue;
+		}
+		else
+			comm = NULL;	/* Avoid compiler warning */
+
+		LIST_FOREACH(processes, tpr, e) {
+			if (tpr->full_command)
+				proc_name = cmd_buf;
+			else if (comm)
+				proc_name = comm;
+			else /* This should never happen, but coverity produces a "Explicit null dereference" error */
+				continue;
+
+			if (!strcmp(proc_name, tpr->process_path)) {
+				/* We have got a match */
+
+				/* Do we need to check parameters? */
+				if (tpr->param_match != PARAM_MATCH_NONE) {
+					param_start = proc_name + strlen(proc_name) + 1;
+					if (!check_params(tpr, param_start, proc_name + cmdline_len - param_start))
+						continue;
+				}
+
+				add_process(atoi(ent->d_name), tpr, NULL);
+			}
+		}
+	}
+
+	closedir(proc_dir);
+	FREE(cmd_buf);
+}
+
+static void
+update_process_status(vrrp_tracked_process_t *tpr, bool now_up)
+{
+	if (now_up == tpr->have_quorum) {
+#ifdef _TRACK_PROCESS_DEBUG_
+		if (do_track_process_debug_detail)
+			log_message(LOG_INFO, "update process status no change for %s", tpr->pname);
+#endif
+		return;
+	}
+
+	tpr->have_quorum = now_up;
+
+	process_update_track_process_status(tpr, now_up);
+}
+
+static void
+remove_process_from_track(tracked_process_instance_t *tpi, vrrp_tracked_process_t *tpr)
+{
+	vrrp_tracked_process_t *proc;
+	element e;
+
+	LIST_FOREACH(tpi->processes, proc, e) {
+		if (proc == tpr) {
+			free_list_element(tpi->processes, e);
+			if (tpr->num_cur_proc-- == tpr->quorum ||
+			    tpr->num_cur_proc == tpr->quorum_max) {
+				if (tpr->fork_timer_thread) {
+					thread_cancel(tpr->fork_timer_thread);
+					tpr->fork_timer_thread = NULL;
+				}
+				update_process_status(tpr, tpr->num_cur_proc == tpr->quorum_max);
+			}
+			return;
+		}
+	}
+}
+
+static void
+check_process(pid_t pid, char *comm, tracked_process_instance_t *tpi)
+{
+	char cmdline[22];	/* "/proc/xxxxxxx/cmdline" */
+	int fd;
+	char *cmd_buf = NULL;
+	size_t cmd_buf_len;
+	char comm_buf[17];
+	ssize_t len = 0;
+	ssize_t cmdline_len = 0;
+	char *proc_name;
+	const char *param_start;
+	vrrp_tracked_process_t *tpr;
+	element e;
+	bool had_process;
+	tracked_process_instance_t tp = { .pid = pid };
+	bool have_comm = !!comm;
+#ifdef _TRACK_PROCESS_DEBUG_
+	int sav_errno;
+#endif
+
+	/* Are we counting this process now? */
+	if (!tpi)
+		tpi = rb_search(&process_tree, &tp, pid_tree, pid_compare);
+	had_process = !!tpi;
+
+	/* We want to avoid reading /proc/PID/cmdline, since it reads the process
+	 * address space, and if the process is swapped out, then it will have to be
+	 * swapped in to read it. */
+	if (!have_comm) {
+		if (vrrp_data->vrrp_use_process_cmdline) {
+			snprintf(cmdline, sizeof(cmdline), "/proc/%d/cmdline", pid);
+
+			if ((fd = open(cmdline, O_RDONLY)) == -1) {
+#ifdef _TRACK_PROCESS_DEBUG_
+				if (do_track_process_debug_detail)
+					log_message(LOG_INFO, "check_process failed to open %s, errno %d", cmdline, errno);
+#endif
+				return;
+			}
+
+			cmd_buf_len = vrrp_data->vrrp_max_process_name_len + 3;
+			cmd_buf = MALLOC(cmd_buf_len);
+			cmdline_len = read(fd, cmd_buf, vrrp_data->vrrp_max_process_name_len + 2);
+#ifdef _TRACK_PROCESS_DEBUG_
+			sav_errno = errno;
+#endif
+			close(fd);
+			if (cmdline_len < 0) {
+#ifdef _TRACK_PROCESS_DEBUG_
+				if (do_track_process_debug_detail)
+					log_message(LOG_INFO, "check_process failed to read %s, errno %d", cmdline, sav_errno);
+#endif
+				FREE(cmd_buf);
+				return;
+			}
+			cmd_buf[cmdline_len] = '\0';
+		}
+
+		if (vrrp_data->vrrp_use_process_comm) {
+			snprintf(cmdline, sizeof(cmdline), "/proc/%d/comm", pid);
+
+			if ((fd = open(cmdline, O_RDONLY)) == -1) {
+#ifdef _TRACK_PROCESS_DEBUG_
+				if (do_track_process_debug_detail)
+					log_message(LOG_INFO, "check_process failed to open %s, errno %d", cmdline, errno);
+#endif
+				FREE_PTR(cmd_buf);
+				return;
+			}
+
+			len = read(fd, comm_buf, sizeof(comm_buf) - 1);
+#ifdef _TRACK_PROCESS_DEBUG_
+			sav_errno = errno;
+#endif
+			close(fd);
+			if (len < 0) {
+#ifdef _TRACK_PROCESS_DEBUG_
+				if (do_track_process_debug_detail)
+					log_message(LOG_INFO, "check_process failed to read %s, errno %d", cmdline, sav_errno);
+#endif
+				FREE_PTR(cmd_buf);
+				return;
+			}
+			comm_buf[len] = '\0';
+			if (len && comm_buf[len-1] == '\n')
+				comm_buf[len-1] = '\0';
+			comm = comm_buf;
+		}
+	}
+
+#ifdef _TRACK_PROCESS_DEBUG_
+	if (do_track_process_debug_detail)
+		log_message(LOG_INFO, "check_process %s (cmdline %s)", comm, cmd_buf ? cmd_buf : "[none]");
+#endif
+
+	LIST_FOREACH(vrrp_data->vrrp_track_processes, tpr, e) {
+		if (tpr->full_command) {
+			/* If this is a PROC_EVENT_COMM, we aren't dealing with the command line */
+			if (have_comm)
+				continue;
+			proc_name = cmd_buf;
+		} else if (comm)
+			proc_name = comm;
+		else /* This should never happen, but coverity produces a "Dereference after null check" error */
+			continue;
+
+		if (!strcmp(proc_name, tpr->process_path)) {
+			/* We have got a match */
+
+			/* Do we need to check parameters? */
+			if (tpr->param_match != PARAM_MATCH_NONE) {
+				param_start = proc_name + strlen(proc_name) + 1;
+				if (!check_params(tpr, param_start, proc_name + cmdline_len - param_start)) {
+#ifdef _TRACK_PROCESS_DEBUG_
+					if (do_track_process_debug_detail)
+						log_message(LOG_INFO, "check_process parameter mis-match");
+#endif
+					if (had_process)
+						remove_process_from_track(tpi, tpr);
+					continue;
+				}
+			}
+
+			tpi = add_process(pid, tpr, tpi);
+
+#ifdef _TRACK_PROCESS_DEBUG_
+			if (do_track_process_debug_detail)
+				log_message(LOG_INFO, "check_process adding process %d to %s", pid, tpr->pname);
+#endif
+
+			if (tpr->num_cur_proc == tpr->quorum ||
+			    tpr->num_cur_proc == tpr->quorum_max + 1) {
+				/* Cancel terminate timer thread if any, otherwise update status */
+#ifdef _TRACK_PROCESS_DEBUG_
+				if (do_track_process_debug_detail)
+					log_message(LOG_INFO, "check_process %s num_proc now %u, quorum [%u:%u]", tpr->pname, tpr->num_cur_proc, tpr->quorum, tpr->quorum_max);
+#endif
+
+				if (tpr->terminate_timer_thread) {
+					thread_cancel(tpr->terminate_timer_thread);
+					tpr->terminate_timer_thread = NULL;
+				}
+				update_process_status(tpr, tpr->num_cur_proc == tpr->quorum);
+			}
+		}
+		else if (had_process && !have_comm) {
+#ifdef _TRACK_PROCESS_DEBUG_
+			if (do_track_process_debug_detail)
+				log_message(LOG_INFO, "check_process removing %d from %s", pid, tpr->pname);
+#endif
+			remove_process_from_track(tpi, tpr);
+		}
+	}
+
+	FREE_PTR(cmd_buf);
+
+	if (!tpi)
+		return;
+
+	/* If we were monitoring the process, and are no longer,
+	 * remove it */
+	if (LIST_ISEMPTY(tpi->processes)) {
+		free_list(&tpi->processes);
+		rb_erase(&tpi->pid_tree, &process_tree);
+		FREE(tpi);
+	}
+}
+
+static int
+process_gained_quorum_timer_thread(thread_ref_t thread)
+{
+	vrrp_tracked_process_t *tpr = thread->arg;
+
+#ifdef _TRACK_PROCESS_DEBUG_
+	if (do_track_process_debug_detail)
+		log_message(LOG_INFO, "quorum gained timer for %s expired", tpr->pname);
+#endif
+
+	update_process_status(tpr,
+			      tpr->num_cur_proc >= tpr->quorum &&
+			      tpr->num_cur_proc <= tpr->quorum_max);
+	tpr->fork_timer_thread = NULL;
+
+	return 0;
+}
+
+static void
+check_process_fork(pid_t parent_pid, pid_t child_pid)
+{
+	tracked_process_instance_t tp = { .pid = parent_pid };
+	tracked_process_instance_t *tpi, *tpi_child;
+	vrrp_tracked_process_t *tpr;
+	element e;
+
+	/* If we aren't interested in the parent, we aren't interested in the child */
+	if (!(tpi = rb_search(&process_tree, &tp, pid_tree, pid_compare))) {
+#ifdef _TRACK_PROCESS_DEBUG_
+		if (do_track_process_debug_detail)
+			log_message(LOG_INFO, "Ignoring fork for untracked pid %d", parent_pid);
+#endif
+		return;
+	}
+
+	PMALLOC(tpi_child);
+	tpi_child->pid = child_pid;
+	tpi_child->processes = alloc_list(NULL, NULL);
+	RB_CLEAR_NODE(&tpi_child->pid_tree);
+	rb_insert_sort(&process_tree, tpi_child, pid_tree, pid_compare);
+#ifdef _TRACK_PROCESS_DEBUG_
+	if (do_track_process_debug_detail)
+		log_message(LOG_INFO, "Adding new child %d of parent %d", child_pid, parent_pid);
+#endif
+
+	LIST_FOREACH(tpi->processes, tpr, e)
+	{
+#ifdef _TRACK_PROCESS_DEBUG_
+		if (do_track_process_debug_detail)
+			log_message(LOG_INFO, "Adding new child %d to track_process %s", child_pid, tpr->pname);
+#endif
+		list_add(tpi_child->processes, tpr);
+		if (++tpr->num_cur_proc == tpr->quorum ||
+		    tpr->num_cur_proc == tpr->quorum_max + 1) {
+#ifdef _TRACK_PROCESS_DEBUG_
+		if (do_track_process_debug_detail)
+			log_message(LOG_INFO, "track_process %s num_proc now %u, quorum [%u:%u]", tpr->pname, tpr->num_cur_proc, tpr->quorum, tpr->quorum_max);
+#endif
+			if (tpr->terminate_timer_thread) {
+				thread_cancel(tpr->terminate_timer_thread);	// Cancel terminate timer
+				tpr->terminate_timer_thread = NULL;
+			} else if (tpr->fork_delay) {
+				tpr->fork_timer_thread = thread_add_timer(master, process_gained_quorum_timer_thread, tpr, tpr->fork_delay);
+#ifdef _TRACK_PROCESS_DEBUG_
+				if (do_track_process_debug_detail)
+					log_message(LOG_INFO, "Adding timer %d for %s up", tpr->fork_delay, tpr->pname);
+#endif
+				continue;
+			}
+			update_process_status(tpr, tpr->num_cur_proc == tpr->quorum);
+		}
+	}
+}
+
+static int
+process_lost_quorum_timer_thread(thread_ref_t thread)
+{
+	vrrp_tracked_process_t *tpr = thread->arg;
+
+#ifdef _TRACK_PROCESS_DEBUG_
+	if (do_track_process_debug_detail)
+		log_message(LOG_INFO, "quorum lost timer for %s expired", tpr->pname);
+#endif
+
+	update_process_status(tpr,
+			      tpr->num_cur_proc >= tpr->quorum &&
+			      tpr->num_cur_proc <= tpr->quorum_max);
+	tpr->terminate_timer_thread = NULL;
+
+	return 0;
+}
+
+static void
+check_process_termination(pid_t pid)
+{
+	tracked_process_instance_t tp = { .pid = pid };
+	tracked_process_instance_t *tpi;
+	vrrp_tracked_process_t *tpr;
+	element e;
+
+	tpi = rb_search(&process_tree, &tp, pid_tree, pid_compare);
+
+	if (!tpi) {
+#ifdef _TRACK_PROCESS_DEBUG_
+		if (do_track_process_debug_detail)
+			log_message(LOG_INFO, "Ignoring exit of untracked pid %d", pid);
+#endif
+		return;
+	}
+
+	LIST_FOREACH(tpi->processes, tpr, e) {
+		if (tpr->num_cur_proc-- == tpr->quorum ||
+		    tpr->num_cur_proc == tpr->quorum_max) {
+#ifdef _TRACK_PROCESS_DEBUG_
+			if (do_track_process_debug_detail)
+				log_message(LOG_INFO, "process exit %s num_proc now %u, quorum [%u:%u]", tpr->pname, tpr->num_cur_proc, tpr->quorum, tpr->quorum_max);
+#endif
+			if (tpr->fork_timer_thread) {
+				thread_cancel(tpr->fork_timer_thread);	// Cancel fork timer
+				tpr->fork_timer_thread = NULL;
+			} else if (tpr->terminate_delay) {
+				tpr->terminate_timer_thread = thread_add_timer(master, process_lost_quorum_timer_thread, tpr, tpr->terminate_delay);
+#ifdef _TRACK_PROCESS_DEBUG_
+				if (do_track_process_debug_detail)
+					log_message(LOG_INFO, "Adding timer %d for %s termination", tpr->fork_delay, tpr->pname);
+#endif
+				continue;
+			}
+			update_process_status(tpr, tpr->num_cur_proc == tpr->quorum_max);
+		}
+	}
+
+	free_list(&tpi->processes);
+	rb_erase(&tpi->pid_tree, &process_tree);
+	FREE(tpi);
+}
+
+#if HAVE_DECL_PROC_EVENT_COMM
+static void
+check_process_comm_change(pid_t pid, char *comm)
+{
+	tracked_process_instance_t tp = { .pid = pid };
+	tracked_process_instance_t *tpi;
+	vrrp_tracked_process_t *tpr;
+	element e, next;
+
+	tpi = rb_search(&process_tree, &tp, pid_tree, pid_compare);
+
+	if (tpi) {
+		/* The process was being monitored by its old name */
+		LIST_FOREACH_NEXT(tpi->processes, tpr, e, next) {
+			if (tpr->full_command)
+				continue;
+
+			/* Check that the name really has changed */
+			if (!strcmp(comm, tpr->process_path))
+				return;
+
+#ifdef _TRACK_PROCESS_DEBUG_
+			if (do_track_process_debug_detail)
+				log_message(LOG_INFO, "comm change remove pid %d", pid);
+#endif
+			list_remove(tpi->processes, e);
+			if (tpr->num_cur_proc-- == tpr->quorum ||
+			    tpr->num_cur_proc == tpr->quorum_max) {
+#ifdef _TRACK_PROCESS_DEBUG_
+				if (do_track_process_debug_detail)
+					log_message(LOG_INFO, "comm change %s num_proc now %u, quorum [%u:%u]", tpr->pname, tpr->num_cur_proc, tpr->quorum, tpr->quorum_max);
+#endif
+				if (tpr->fork_timer_thread) {
+					thread_cancel(tpr->fork_timer_thread);	// Cancel fork timer
+					tpr->fork_timer_thread = NULL;
+				}
+				update_process_status(tpr, tpr->num_cur_proc == tpr->quorum_max);
+			}
+		}
+	}
+#ifdef _TRACK_PROCESS_DEBUG_
+	else if (do_track_process_debug_detail)
+		log_message(LOG_INFO, "comm_change pid %d not found", pid);
+#endif
+
+	/* Handle the new process name */
+	check_process(pid, comm, tpi);
+}
+#endif
+
+/*
+ * connect to netlink
+ * returns netlink socket, or -1 on error
+ */
+static int
+nl_connect(void)
+{
+	int rc;
+	int nl_sd;
+	struct sockaddr_nl sa_nl;
+
+	nl_sd = socket(PF_NETLINK, SOCK_DGRAM | SOCK_CLOEXEC | SOCK_NONBLOCK, NETLINK_CONNECTOR);
+	if (nl_sd == -1) {
+		if (errno == EPROTONOSUPPORT) {
+			if (__test_bit(LOG_DETAIL_BIT, &debug))
+				log_message(LOG_INFO, "track_process not available - is CONFIG_PROC_EVENTS enabled in kernel config?");
+			proc_events_not_supported = true;
+		} else
+			log_message(LOG_INFO, "Failed to open process monitoring socket - errno %d - %m", errno);
+		return -1;
+	}
+
+#if !HAVE_DECL_SOCK_NONBLOCK
+	if (set_sock_flags(nl_sd, F_SETFL, O_NONBLOCK))
+		log_message(LOG_INFO, "Unable to set NONBLOCK on netlink process socket - %s (%d)", strerror(errno), errno);
+#endif
+
+#if !HAVE_DECL_SOCK_CLOEXEC
+	if (set_sock_flags(nl_sd, F_SETFD, FD_CLOEXEC))
+		log_message(LOG_INFO, "Unable to set CLOEXEC on netlink process socket - %s (%d)", strerror(errno), errno);
+#endif
+
+	sa_nl.nl_family = AF_NETLINK;
+	sa_nl.nl_groups = CN_IDX_PROC;
+	sa_nl.nl_pid = getpid();
+
+	rc = bind(nl_sd, (struct sockaddr *)&sa_nl, sizeof(sa_nl));
+	if (rc == -1) {
+		log_message(LOG_INFO, "Failed to bind to process monitoring socket - errno %d - %m", errno);
+		close(nl_sd);
+		return -1;
+	}
+
+	return nl_sd;
+}
+
+/*
+ * subscribe on proc events (process notifications)
+ */
+static int set_proc_ev_listen(int nl_sd, bool enable)
+{
+	int rc;
+	struct __attribute__ ((aligned(NLMSG_ALIGNTO))) {
+		struct nlmsghdr nl_hdr;
+		struct __attribute__ ((__packed__)) {
+			struct cn_msg cn_msg;
+			enum proc_cn_mcast_op cn_mcast;
+		};
+	} nlcn_msg;
+
+	memset(&nlcn_msg, 0, sizeof(nlcn_msg));
+	nlcn_msg.nl_hdr.nlmsg_len = sizeof(nlcn_msg);
+	nlcn_msg.nl_hdr.nlmsg_pid = getpid();
+	nlcn_msg.nl_hdr.nlmsg_type = NLMSG_DONE;
+
+	nlcn_msg.cn_msg.id.idx = CN_IDX_PROC;
+	nlcn_msg.cn_msg.id.val = CN_VAL_PROC;
+	nlcn_msg.cn_msg.len = sizeof(enum proc_cn_mcast_op);
+
+	nlcn_msg.cn_mcast = enable ? PROC_CN_MCAST_LISTEN : PROC_CN_MCAST_IGNORE;
+
+	rc = send(nl_sd, &nlcn_msg, sizeof(nlcn_msg), 0);
+	if (rc == -1) {
+		log_message(LOG_INFO, "Failed to set/clear process event listen - errno %d - %m", errno);
+		return -1;
+	}
+
+	return 0;
+}
+
+static void
+reinitialise_track_processes(void)
+{
+	reload_thread = NULL;
+	unsigned buf_size;
+	socklen_t buf_size_len = sizeof(buf_size);
+	unsigned i;
+	vrrp_tracked_process_t *tpr;
+	element e;
+	tracked_process_instance_t *tpi, *next;
+
+	need_reinitialise = false;
+
+	if (getsockopt(nl_sock, SOL_SOCKET, SO_RCVBUF, &buf_size, &buf_size_len) < 0) {
+		log_message(LOG_INFO, "Cannot get process monitor SO_RCVBUF option. errno=%d (%m)", errno);
+		return;
+	}
+
+	buf_size *= 2;
+	set_rcv_buf(buf_size, global_data->process_monitor_rcv_bufs_force);
+
+	log_message(LOG_INFO, "Setting global_def process_monitor_rcv_bufs to %u - recommend updating configuration file", buf_size);
+
+	/* Reset the sequence numbers */
+	for (i = 0; i < num_cpus; i++)
+		cpu_seq[i] = -1;
+
+	/* Remove the existing process tree */
+	rb_for_each_entry_safe(tpi, next, &process_tree, pid_tree) {
+		free_list(&tpi->processes);
+		rb_erase(&tpi->pid_tree, &process_tree);
+		FREE(tpi);
+	}
+
+	/* Save process counters, and clear any down timers */
+	LIST_FOREACH(vrrp_data->vrrp_track_processes, tpr, e) {
+		tpr->sav_num_cur_proc = tpr->num_cur_proc;
+		tpr->num_cur_proc = 0;
+		if (tpr->fork_timer_thread) {
+			thread_cancel(tpr->fork_timer_thread);
+			tpr->fork_timer_thread = NULL;
+		}
+		if (tpr->terminate_timer_thread) {
+			thread_cancel(tpr->terminate_timer_thread);
+			tpr->terminate_timer_thread = NULL;
+		}
+	}
+
+	/* Re read processes */
+	read_procs(vrrp_data->vrrp_track_processes);
+
+	/* See if anything changed */
+	LIST_FOREACH(vrrp_data->vrrp_track_processes, tpr, e) {
+		if (tpr->sav_num_cur_proc != tpr->num_cur_proc) {
+			if ((tpr->sav_num_cur_proc < tpr->quorum) == (tpr->num_cur_proc < tpr->quorum) &&
+			    (tpr->sav_num_cur_proc > tpr->quorum_max) == (tpr->num_cur_proc > tpr->quorum_max)) {
+				if (__test_bit(LOG_DETAIL_BIT, &debug))
+					log_message(LOG_INFO, "Process %s, number of current processes changed from %u to %u", tpr->pname, tpr->sav_num_cur_proc, tpr->num_cur_proc);
+				continue;
+			}
+			if (tpr->num_cur_proc >= tpr->quorum &&
+			    tpr->num_cur_proc <= tpr->quorum_max) {
+				if (__test_bit(LOG_DETAIL_BIT, &debug))
+					log_message(LOG_INFO, "Process %s, number of current processes changed from %u to %u, quorum up", tpr->pname, tpr->sav_num_cur_proc, tpr->num_cur_proc);
+				if (tpr->fork_delay)
+					tpr->fork_timer_thread = thread_add_timer(master, process_gained_quorum_timer_thread, tpr, tpr->terminate_delay);
+				process_update_track_process_status(tpr, true);
+			} else {
+				if (__test_bit(LOG_DETAIL_BIT, &debug))
+					log_message(LOG_INFO, "Process %s, number of current processes changed from %u to %u, quorum down", tpr->pname, tpr->sav_num_cur_proc, tpr->num_cur_proc);
+				if (tpr->terminate_delay)
+					tpr->terminate_timer_thread = thread_add_timer(master, process_lost_quorum_timer_thread, tpr, tpr->terminate_delay);
+				else
+					process_update_track_process_status(tpr, false);
+			}
+		}
+	}
+
+	return;
+}
+
+static int
+process_lost_messages_timer_thread(__attribute__((unused)) thread_ref_t thread)
+{
+	reinitialise_track_processes();
+
+	return 0;
+}
+
+/*
+ * handle a single process event
+ */
+static int handle_proc_ev(int nl_sd)
+{
+	struct nlmsghdr *nlmsghdr;
+	ssize_t len;
+	char __attribute__ ((aligned(NLMSG_ALIGNTO)))buf[4096];
+	struct cn_msg *cn_msg;
+	struct proc_event *proc_ev;
+	struct sockaddr_nl addr;
+	socklen_t addrlen = sizeof(addr);
+
+	while ((len = recvfrom(nl_sd, &buf, sizeof(buf), 0, (struct sockaddr *)&addr, &addrlen))) {
+		if (len == -1) {
+			if (check_EINTR(errno))
+				continue;
+			if (check_EAGAIN(errno))
+				return 0;
+
+			if (errno == ENOBUFS) {
+				/* We have missed some messages. Allow time for
+				 * things to settle down, and reinitialise. */
+				if (reload_thread)
+					thread_cancel(reload_thread);
+				reload_thread = thread_add_timer(master, process_lost_messages_timer_thread, NULL, TIMER_HZ);
+				need_reinitialise = true;
+			}
+			else
+				log_message(LOG_INFO, "process monitor netlink recv error %d - %m", errno);
+
+			return -1;
+		}
+
+		/* Ensure the message has been sent by the kernel */
+		if (addrlen != sizeof(addr) || addr.nl_pid != 0) {
+			log_message(LOG_INFO, "addrlen %u, expect %zu, pid %u", addrlen, sizeof addr, addr.nl_pid);
+			return -1;
+		}
+
+		for (nlmsghdr = (struct nlmsghdr *)buf;
+			NLMSG_OK (nlmsghdr, len);
+			nlmsghdr = NLMSG_NEXT (nlmsghdr, len)) {
+
+			if (nlmsghdr->nlmsg_type == NLMSG_ERROR ||
+			    nlmsghdr->nlmsg_type == NLMSG_NOOP)
+				continue;
+
+			cn_msg = NLMSG_DATA(nlmsghdr);
+			if (cn_msg->id.idx != CN_IDX_PROC ||
+			    cn_msg->id.val != CN_VAL_PROC ||
+			    cn_msg->ack)
+				continue;
+
+			proc_ev = (struct proc_event *)cn_msg->data;
+
+			/* On 3.10 kernel, proc_ev->cpu can be UINT32_MAX */
+			if (proc_ev->cpu >= num_cpus)
+				continue;
+
+			if (cpu_seq) {
+				if ((!need_reinitialise || __test_bit(LOG_DETAIL_BIT, &debug)) &&
+				    cpu_seq[proc_ev->cpu] != -1 &&
+				    !(cpu_seq[proc_ev->cpu] + 1 == cn_msg->seq ||
+				      (cn_msg->seq == 0 && cpu_seq[proc_ev->cpu] == UINT32_MAX)))
+					log_message(LOG_INFO, "Missed %" PRIi64 " messages on CPU %u", cn_msg->seq - cpu_seq[proc_ev->cpu] - 1, proc_ev->cpu);
+
+				cpu_seq[proc_ev->cpu] = cn_msg->seq;
+			}
+
+#ifdef _TRACK_PROCESS_DEBUG_
+			if (do_track_process_debug) {
+				switch (proc_ev->what)
+				{
+				case PROC_EVENT_NONE:
+					log_message(LOG_INFO, "set mcast listen ok");
+					break;
+				case PROC_EVENT_FORK:
+					/* See if we have parent pid, in which case this is a new process */
+					log_message(LOG_INFO, "fork: parent tid=%d pid=%d -> child tid=%d pid=%d",
+							proc_ev->event_data.fork.parent_pid,
+							proc_ev->event_data.fork.parent_tgid,
+							proc_ev->event_data.fork.child_pid,
+							proc_ev->event_data.fork.child_tgid);
+					break;
+				case PROC_EVENT_EXEC:
+					log_message(LOG_INFO, "exec: tid=%d pid=%d",
+							proc_ev->event_data.exec.process_pid,
+							proc_ev->event_data.exec.process_tgid);
+					break;
+				case PROC_EVENT_UID:
+					log_message(LOG_INFO, "uid change: tid=%d pid=%d from %" PRIu32 " to %" PRIu32,
+							proc_ev->event_data.id.process_pid,
+							proc_ev->event_data.id.process_tgid,
+							proc_ev->event_data.id.r.ruid,
+							proc_ev->event_data.id.e.euid);
+					break;
+				case PROC_EVENT_GID:
+					log_message(LOG_INFO, "gid change: tid=%d pid=%d from %" PRIu32 " to %" PRIu32,
+							proc_ev->event_data.id.process_pid,
+							proc_ev->event_data.id.process_tgid,
+							proc_ev->event_data.id.r.rgid,
+							proc_ev->event_data.id.e.egid);
+					break;
+#if HAVE_DECL_PROC_EVENT_SID	/* Since Linux v2.6.32 */
+				case PROC_EVENT_SID:
+					log_message(LOG_INFO, "sid change: tid=%d pid=%d",
+							proc_ev->event_data.sid.process_pid,
+							proc_ev->event_data.sid.process_tgid);
+					break;
+#endif
+#if HAVE_DECL_PROC_EVENT_PTRACE	/* Since Linux v3.1 */
+				case PROC_EVENT_PTRACE:
+					log_message(LOG_INFO, "ptrace change: tid=%d pid=%d tracer tid=%d, pid=%d",
+							proc_ev->event_data.ptrace.process_pid,
+							proc_ev->event_data.ptrace.process_tgid,
+							proc_ev->event_data.ptrace.tracer_pid,
+							proc_ev->event_data.ptrace.tracer_tgid);
+					break;
+#endif
+#if HAVE_DECL_PROC_EVENT_COMM		/* Since Linux v3.2 */
+				case PROC_EVENT_COMM:
+					log_message(LOG_INFO, "comm: tid=%d pid=%d comm %s",
+							proc_ev->event_data.comm.process_pid,
+							proc_ev->event_data.comm.process_tgid,
+							proc_ev->event_data.comm.comm);
+					break;
+#endif
+#if HAVE_DECL_PROC_EVENT_COREDUMP	/* Since Linux v3.10 */
+				case PROC_EVENT_COREDUMP:
+					log_message(LOG_INFO, "coredump: tid=%d pid=%d",
+							proc_ev->event_data.coredump.process_pid,
+							proc_ev->event_data.coredump.process_tgid);
+					break;
+#endif
+				case PROC_EVENT_EXIT:
+					log_message(LOG_INFO, "exit: tid=%d pid=%d exit_code=%u, signal=%u,",
+							proc_ev->event_data.exit.process_pid,
+							proc_ev->event_data.exit.process_tgid,
+							proc_ev->event_data.exit.exit_code,
+							proc_ev->event_data.exit.exit_signal);
+					break;
+				default:
+					log_message(LOG_INFO, "unhandled proc event %u", proc_ev->what);
+					break;
+				}
+			}
+#endif
+
+			switch (proc_ev->what)
+			{
+			case PROC_EVENT_FORK:
+				/* See if we have parent pid, in which case this is a new process.
+				 * For a process fork, child_pid == child_tgid.
+				 * For a new thread, child_pid != child_tgid and parent_pid/tgid is
+				 * the parent process of the process doing the pthread_create(). */
+				if (proc_ev->event_data.fork.child_tgid == proc_ev->event_data.fork.child_pid)
+					check_process_fork(proc_ev->event_data.fork.parent_tgid, proc_ev->event_data.fork.child_tgid);
+#ifdef _TRACK_PROCESS_DEBUG_
+				else if (do_track_process_debug_detail)
+					log_message(LOG_INFO, "Ignoring new thread %d for pid %d", proc_ev->event_data.fork.child_tgid, proc_ev->event_data.fork.child_pid);
+#endif
+				break;
+			case PROC_EVENT_EXEC:
+				/* We may be losing a process. Check if have pid, and check new cmdline */
+				if (proc_ev->event_data.exec.process_tgid == proc_ev->event_data.exec.process_pid)
+					check_process(proc_ev->event_data.exec.process_tgid, NULL, NULL);
+#ifdef _TRACK_PROCESS_DEBUG_
+				else if (do_track_process_debug_detail)
+					log_message(LOG_INFO, "Ignoring exec of thread %d of pid %d", proc_ev->event_data.exec.process_tgid, proc_ev->event_data.exec.process_pid);
+#endif
+				break;
+#if HAVE_DECL_PROC_EVENT_COMM		/* Since Linux v3.2 */
+			/* NOTE: not having PROC_EVENT_COMM means that changes to /proc/PID/comm
+			 * will not be detected */
+			case PROC_EVENT_COMM:
+				if (proc_ev->event_data.comm.process_tgid == proc_ev->event_data.comm.process_pid)
+					check_process_comm_change(proc_ev->event_data.comm.process_tgid, proc_ev->event_data.comm.comm);
+#ifdef _TRACK_PROCESS_DEBUG_
+				else if (do_track_process_debug_detail)
+					log_message(LOG_INFO, "Ignoring COMM event of thread %d of pid %d", proc_ev->event_data.comm.process_tgid, proc_ev->event_data.comm.process_pid);
+#endif
+				break;
+#endif
+			case PROC_EVENT_EXIT:
+				/* We aren't interested in thread termination */
+				if (proc_ev->event_data.exit.process_tgid == proc_ev->event_data.exit.process_pid)
+					check_process_termination(proc_ev->event_data.exit.process_tgid);
+#ifdef _TRACK_PROCESS_DEBUG_
+				else if (do_track_process_debug_detail)
+					log_message(LOG_INFO, "Ignoring exit of thread %d of pid %d", proc_ev->event_data.exit.process_tgid, proc_ev->event_data.exit.process_pid);
+#endif
+				break;
+			default:
+				break;
+			}
+		}
+	}
+	if (len == 0)
+		log_message(LOG_INFO, "recvfrom returned %zd", len);
+
+	return 0;
+}
+
+static int
+read_process_update(thread_ref_t thread)
+{
+	int rc = EXIT_SUCCESS;
+
+	rc = handle_proc_ev(thread->u.f.fd);
+
+	read_thread = thread_add_read(thread->master, read_process_update, NULL, thread->u.f.fd, TIMER_NEVER, false);
+
+	return rc;
+}
+
+bool
+open_track_processes(void)
+{
+	nl_sock = nl_connect();
+	if (nl_sock == -1)
+		return true ;
+
+	return false;
+}
+
+bool
+close_track_processes(void)
+{
+	if (nl_sock == -1)
+		return true;
+
+	close(nl_sock);
+
+	nl_sock = -1;
+
+	return false;
+}
+
+bool
+init_track_processes(list processes)
+{
+	int rc = EXIT_SUCCESS;
+	unsigned i;
+	long num;
+
+	if (global_data->process_monitor_rcv_bufs)
+		set_rcv_buf(global_data->process_monitor_rcv_bufs, global_data->process_monitor_rcv_bufs_force);
+
+	rc = set_proc_ev_listen(nl_sock, true);
+	if (rc == -1) {
+		close(nl_sock);
+		nl_sock = -1;
+		return EXIT_FAILURE;
+	}
+
+	if (!cpu_seq) {
+		num = sysconf(_SC_NPROCESSORS_CONF);
+		if (num > 0) {
+			num_cpus = num;
+			cpu_seq = MALLOC(num_cpus * sizeof(*cpu_seq));
+			for (i = 0; i < num_cpus; i++)
+				cpu_seq[i] = -1;
+		}
+		else
+			log_message(LOG_INFO, "sysconf returned %ld CPUs - ignoring and won't track process event sequence numbers", num);
+	}
+
+	read_procs(processes);
+
+	read_thread = thread_add_read(master, read_process_update, NULL, nl_sock, TIMER_NEVER, false);
+
+	return rc;
+}
+
+void
+reload_track_processes(void)
+{
+	tracked_process_instance_t *tpi, *next;
+
+	/* Remove the existing process tree */
+	rb_for_each_entry_safe(tpi, next, &process_tree, pid_tree) {
+		free_list(&tpi->processes);
+		rb_erase(&tpi->pid_tree, &process_tree);
+		FREE(tpi);
+	}
+
+	/* Re read processes */
+	read_procs(vrrp_data->vrrp_track_processes);
+
+	/* Add read thread */
+	read_thread = thread_add_read(master, read_process_update, NULL, nl_sock, TIMER_NEVER, false);
+
+	return;
+}
+
+void
+end_process_monitor(void)
+{
+	vrrp_tracked_process_t *tpr;
+	element e;
+	tracked_process_instance_t *tpi, *next;
+
+	if (!cpu_seq)
+		return;
+
+	if (nl_sock != -1) {
+		set_proc_ev_listen(nl_sock, false);
+
+		if (read_thread) {
+			thread_cancel(read_thread);
+			read_thread = NULL;
+		}
+
+		close(nl_sock);
+		nl_sock = -1;
+	}
+
+	FREE_PTR(cpu_seq);
+
+	/* Cancel any timer threads */
+	LIST_FOREACH(vrrp_data->vrrp_track_processes, tpr, e) {
+		if (tpr->fork_timer_thread) {
+			thread_cancel(tpr->fork_timer_thread);
+			tpr->fork_timer_thread = NULL;
+		}
+		if (tpr->terminate_timer_thread) {
+			thread_cancel(tpr->terminate_timer_thread);
+			tpr->terminate_timer_thread = NULL;
+		}
+	}
+
+	rb_for_each_entry_safe(tpi, next, &process_tree, pid_tree) {
+		free_list(&tpi->processes);
+		rb_erase(&tpi->pid_tree, &process_tree);
+		FREE(tpi);
+	}
+}
+
+#ifdef THREAD_DUMP
+void
+register_process_monitor_addresses(void)
+{
+	register_thread_address("process_lost_quorum", process_lost_quorum_timer_thread);
+	register_thread_address("process_lost_messages", process_lost_messages_timer_thread);
+	register_thread_address("monitor_processes", read_process_update);
+}
+#endif
diff --git a/tools/keepalived/keepalived/dbus/.gitignore b/tools/keepalived/keepalived/dbus/.gitignore
new file mode 100644
index 000000000..8df13f678
--- /dev/null
+++ b/tools/keepalived/keepalived/dbus/.gitignore
@@ -0,0 +1 @@
+org.keepalived.Vrrp1.Vrrp.xml
diff --git a/tools/keepalived/keepalived/dbus/Makefile.am b/tools/keepalived/keepalived/dbus/Makefile.am
new file mode 100644
index 000000000..6e00fd376
--- /dev/null
+++ b/tools/keepalived/keepalived/dbus/Makefile.am
@@ -0,0 +1,46 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+# XML_MATCH is used for converting an .xml_template file into an
+# .xml file. Any lines in the .xml_template file that don't start with
+# a string of capital letters followed by a tab or new line will be passed
+# through to the .xml file. If XML_FILE comprises a capital letter, then lines
+# that have that capital letter in an initial string of capitals will also be
+# passed to the .xml file, but with the initial capitals and tab removed.
+# e.g. if XML_MATCH = C, then
+# ABCD	fred		# will be passed through as 'fred' and
+# ABXY	joe		# will not be passed
+#
+# Below are further more complex examples:
+# XML_MATCH = C[A-Z]*X	# pass lines that have a C followed by an X (possibly with other letters in between)
+# XML_MATCH = [CX]	# pass lines their have C or X (or both)
+# XML_MATCH = [CX][A-Z]*[CX] # pass lines with C and X in either order (or two C's or two X's)
+#			     # C[A-Z]*X is preferred if all option letters are in alphabetical order
+
+if DBUS_CREATE_INSTANCE
+XML_MATCH	= C
+else
+XML_MATCH	= None
+endif
+
+org.@PACKAGE@.Vrrp1.Vrrp.xml:	Makefile
+
+.xml_template.xml:
+	@echo "  SED      $@"
+	@@SED@ -e "s/^[A-Z]*$(XML_MATCH)[A-Z]*	//" -e "s/^[A-Z]*$(XML_MATCH)[A-Z]*$$//" -e "/^[A-Z]/d" $< >$@
+
+EXTRA_DIST		= org.@PACKAGE@.Vrrp1.Vrrp.xml_template
+
+dbusinterfacedir	= @datadir@/dbus-1/interfaces
+dist_dbusinterface_DATA	= org.@PACKAGE@.Vrrp1.Instance.xml
+inst_dbusinterfacedir	= @datadir@/dbus-1/interfaces
+inst_dbusinterface_DATA	= org.@PACKAGE@.Vrrp1.Vrrp.xml
+
+dbussystemdir		= @sysconfdir@/dbus-1/system.d
+dist_dbussystem_DATA	= org.@PACKAGE@.Vrrp1.conf
+
+mostlyclean-local:
+	-rm -rf org.@PACKAGE@.Vrrp1.Vrrp.xml
diff --git a/tools/keepalived/keepalived/dbus/org.keepalived.Vrrp1.Instance.xml b/tools/keepalived/keepalived/dbus/org.keepalived.Vrrp1.Instance.xml
new file mode 100644
index 000000000..ed5798a56
--- /dev/null
+++ b/tools/keepalived/keepalived/dbus/org.keepalived.Vrrp1.Instance.xml
@@ -0,0 +1,31 @@
+<!DOCTYPE node PUBLIC "-//freedesktop//DTD D-BUS Object Introspection 1.0//EN"
+"http://www.freedesktop.org/standards/dbus/1.0/introspect.dtd">
+<node>
+  <!--
+	org.keepalived.Vrrp1.Instance:
+	@short_description: interface for a single VRRP instance
+
+	Exposes methods, signals and properties for a VRRP instance,
+	uniquely identified by its interface, group and family.
+  -->
+  <interface name='org.keepalived.Vrrp1.Instance'>
+	<!--
+	  SendGarp:
+
+	  Sends a single gratuitious ARP request from the instance.
+	-->
+	<method name='SendGarp'>
+	</method>
+	<!--
+	  VrrpStatusChange:
+	  @status: numerical value defining the state.
+
+	  Emitted whenever the instance transitions to a new state.
+	-->
+	<signal name='VrrpStatusChange'>
+	  <arg type='u' name='status' />
+	</signal>
+	<property type='s' name='Name' access='read' />
+	<property type='(us)' name='State' access='read' />
+  </interface>
+</node>
diff --git a/tools/keepalived/keepalived/dbus/org.keepalived.Vrrp1.Vrrp.xml_template b/tools/keepalived/keepalived/dbus/org.keepalived.Vrrp1.Vrrp.xml_template
new file mode 100644
index 000000000..db3e5263c
--- /dev/null
+++ b/tools/keepalived/keepalived/dbus/org.keepalived.Vrrp1.Vrrp.xml_template
@@ -0,0 +1,94 @@
+<!DOCTYPE node PUBLIC "-//freedesktop//DTD D-BUS Object Introspection 1.0//EN"
+"http://www.freedesktop.org/standards/dbus/1.0/introspect.dtd">
+<node>
+  <!--
+	   org.freedesktop.DBus.Properties:
+	   @short_description: General VRRP interface
+
+	   Interface implemented by a single VRRP object,
+	   exposes some VRRP utility methods and signals.
+  -->
+  <interface name='org.keepalived.Vrrp1.Vrrp'>
+	<!--
+	  PrintData:
+
+	  Signals VRRP process to print contents of vrrp_data
+	  in file /tmp/keepalived.data
+	-->
+	<method name='PrintData'>
+	</method>
+	<!--
+	  PrintStats:
+
+	  Signals VRRP process to print stats in file
+	  /tmp/keepalived.stats
+	-->
+	<method name='PrintStats'>
+	</method>
+	<!--
+	  ReloadConfig:
+
+	  Signals keepalvied process to reload its configuration
+	-->
+	<method name='ReloadConfig'>
+	</method>
+C		<!--
+C		  CreateInstance:
+C		  @iname: unique name for the new instance.
+C		  @interface: interface the instance will use.
+C		  @vrid: VRRP vrid for the new instance.
+C		  @family: IPv\# version (either 4 or 6).
+C
+C		  Creates new VRRP instance object at the path built
+C		  from the given parameters, implementing interface
+C		  org.keepalived.Vrrp1.Instance.
+C		  @iname must be unique to this object.
+C		  For every object created, there must also be an
+C		  actual VRRP instance, else all methods called on
+C		  this object will fail.
+C		-->
+C		<method name='CreateInstance'>
+C		  <arg name="iname" type="s" direction="in" />
+C		  <arg name="interface" type="s" direction="in" />
+C		  <arg name="vrid" type="u" direction="in" />
+C		  <arg name="family" type="u" direction="in" />
+C		</method>
+C		<!--
+C		  DestroyInstance:
+C		  @iname: name of the instance to be destroyed.
+C
+C		  Deletes from the bus a VRRP instance object
+C		  identified by the iname value. If no such object
+C		  exists, method has no effect.
+C		  Only deletes the DBus object for the instance, to
+C		  successfully remove an instance it must also be
+C		  deleted from VRRP.
+C		-->
+C		<method name='DestroyInstance'>
+C			<arg name="iname" type="s" direction="in" />
+C		</method>
+	<!--
+	  VrrpStarted:
+
+	  Emitted when VRRP process is started, just after
+	  the bus is connected.
+	-->
+	<signal name="VrrpStarted">
+	</signal>
+	<!--
+	  VrrpReloaded:
+
+	  Emitted when VRRP process reloads its configuration
+	-->
+	<signal name="VrrpReloaded">
+	</signal>
+	<!--
+	  VrrpStopped:
+
+	  Emitted when VRRP process is terminated, just before
+	  the bus is disconnected.
+	-->
+	<signal name="VrrpStopped">
+	</signal>
+  </interface>
+</node>
diff --git a/tools/keepalived/keepalived/dbus/org.keepalived.Vrrp1.conf b/tools/keepalived/keepalived/dbus/org.keepalived.Vrrp1.conf
new file mode 100644
index 000000000..2b78a575c
--- /dev/null
+++ b/tools/keepalived/keepalived/dbus/org.keepalived.Vrrp1.conf
@@ -0,0 +1,14 @@
+<!DOCTYPE busconfig PUBLIC
+"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+	<policy user="root">
+		<allow own="org.keepalived.Vrrp1"/>
+		<allow send_destination="org.keepalived.Vrrp1"/>
+	</policy>
+	<policy context="default">
+		<allow send_interface="org.freedesktop.DBus.Introspectable" />
+		<allow send_interface="org.freedesktop.DBus.Peer" />
+		<allow send_interface="org.freedesktop.DBus.Properties" />
+	</policy>
+</busconfig>
diff --git a/tools/keepalived/keepalived/etc/.gitignore b/tools/keepalived/keepalived/etc/.gitignore
new file mode 100644
index 000000000..0b9ef43e1
--- /dev/null
+++ b/tools/keepalived/keepalived/etc/.gitignore
@@ -0,0 +1 @@
+!keepalived
diff --git a/tools/keepalived/keepalived/etc/Makefile.am b/tools/keepalived/keepalived/etc/Makefile.am
new file mode 100644
index 000000000..533155b78
--- /dev/null
+++ b/tools/keepalived/keepalived/etc/Makefile.am
@@ -0,0 +1,9 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+EXTRA_DIST	= keepalived openrc sysconfig
+
+SUBDIRS		= init init.d
diff --git a/tools/keepalived/keepalived/etc/init.d/.gitignore b/tools/keepalived/keepalived/etc/init.d/.gitignore
new file mode 100644
index 000000000..db0ff6b3f
--- /dev/null
+++ b/tools/keepalived/keepalived/etc/init.d/.gitignore
@@ -0,0 +1 @@
+keepalived.suse.init
diff --git a/tools/keepalived/keepalived/etc/init.d/Makefile.am b/tools/keepalived/keepalived/etc/init.d/Makefile.am
new file mode 100644
index 000000000..78d0414ea
--- /dev/null
+++ b/tools/keepalived/keepalived/etc/init.d/Makefile.am
@@ -0,0 +1,31 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+EXTRA_DIST		= keepalived.suse.init.in keepalived keepalived.rh.init
+
+edit = echo "  EDIT     $@"; \
+	sed \
+	 -e 's|@sbindir[@]|$(sbindir)|g' \
+	 -e 's|@sysconfdir[@]|$(sysconfdir)|g' \
+	 -e 's|@localstatedir[@]|$(localstatedir)|g'
+
+keepalived.suse.init: Makefile
+	@rm -f $@ $@.tmp
+	@$(edit) '$(srcdir)/$@.in' >$@
+
+keepalived.suse.init: $(srcdir)/keepalived.suse.init.in
+
+if INIT_SYSV
+initdir			= $(sysconfdir)/rc.d/init.d
+init_DATA		= keepalived
+endif
+
+if INIT_SUSE
+susedir			= $(sysconfdir)/init
+suse_DATA		= keepalived.suse.init
+endif
+
+MOSTLYCLEANFILES	= keepalived.suse.init
diff --git a/tools/keepalived/keepalived/etc/init.d/keepalived.init b/tools/keepalived/keepalived/etc/init.d/keepalived
similarity index 100%
rename from tools/keepalived/keepalived/etc/init.d/keepalived.init
rename to tools/keepalived/keepalived/etc/init.d/keepalived
diff --git a/tools/keepalived/keepalived/etc/init.d/keepalived.suse.init b/tools/keepalived/keepalived/etc/init.d/keepalived.suse.init.in
similarity index 91%
rename from tools/keepalived/keepalived/etc/init.d/keepalived.suse.init
rename to tools/keepalived/keepalived/etc/init.d/keepalived.suse.init.in
index 94939a395..4a03be530 100644
--- a/tools/keepalived/keepalived/etc/init.d/keepalived.suse.init
+++ b/tools/keepalived/keepalived/etc/init.d/keepalived.suse.init.in
@@ -12,14 +12,13 @@
 
 
 DAEMON="Keepalived daemon"
-DAEMON_BIN="/usr/local/sbin/keepalived"
-DAEMON_CONF="/etc/keepalived/keepalived.conf"
-DAEMON_PIDFILE="/var/run/keepalived.pid"
+DAEMON_BIN="@sbindir@/keepalived"
+DAEMON_CONF="@sysconfdir@/keepalived/keepalived.conf"
+DAEMON_PIDFILE="@localstatedir@/run/keepalived.pid"
 DAEMON_OPT="-d"
 #DAEMON_USER="root"
-SUPPORTS_HUP="yes"    
-# "yes" if exist next values in freshclam.conf
-#       PidFile /var/run/keepalived.pid
+SUPPORTS_HUP="yes"
+#       PidFile @localstatedir@/run/keepalived.pid
 #       DatabaseOwner root
 
 pid_par=${DAEMON_PIDFILE:+"-p $DAEMON_PIDFILE"}
@@ -50,7 +49,7 @@ rc_reset
 # 5 - program is not installed
 # 6 - program is not configured
 # 7 - program is not running
-# 
+#
 # Note that starting an already running service, stopping
 # or restarting a not-running service as well as the restart
 # with force-reload (in case signalling is not supported) are
@@ -66,11 +65,11 @@ case "$1" in
 		if test ! -f ${DAEMON_CONF}; then
 		    echo -n >&2 "Configuration file, ${DAEMON_CONF} does not exist. "
 		    rc_status -s
-	    	    exit 6
+		    exit 6
 		fi
 		checkproc $pid_par ${DAEMON_BIN}
 		case $? in
-	    	    0) echo -n "- Warning: daemon already running. " ;;
+		    0) echo -n "- Warning: daemon already running. " ;;
 		    1) echo -n "- Warning: ${DAEMON_PIDFILE} exists. " ;;
 		esac
 #		echo "startproc $usr_par $pid_par ${DAEMON_BIN} ${DAEMON_OPT}"
@@ -91,7 +90,7 @@ case "$1" in
 		$0 status
 		if test $? = 0; then
 			$0 restart
-		else 
+		else
 			rc_reset
 		fi
 		rc_status
diff --git a/tools/keepalived/keepalived/etc/init/.gitignore b/tools/keepalived/keepalived/etc/init/.gitignore
new file mode 100644
index 000000000..ddec9ccf4
--- /dev/null
+++ b/tools/keepalived/keepalived/etc/init/.gitignore
@@ -0,0 +1 @@
+keepalived.conf
diff --git a/tools/keepalived/keepalived/etc/init/Makefile.am b/tools/keepalived/keepalived/etc/init/Makefile.am
new file mode 100644
index 000000000..df4851b09
--- /dev/null
+++ b/tools/keepalived/keepalived/etc/init/Makefile.am
@@ -0,0 +1,25 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+EXTRA_DIST		= keepalived.conf.in
+
+edit = echo "  EDIT     $@"; \
+	sed \
+	 -e 's|@sbindir[@]|$(sbindir)|g' \
+	 -e 's|@sysconfdir[@]|$(sysconfdir)|g'
+
+keepalived.conf: Makefile
+	@rm -f $@ $@.tmp
+	@$(edit) '$(srcdir)/$@.in' >$@
+
+keepalived.conf: $(srcdir)/keepalived.conf.in
+
+if INIT_UPSTART
+initdir			= $(sysconfdir)/init
+init_DATA		= keepalived.conf
+endif
+
+MOSTLYCLEANFILES	= keepalived.conf
diff --git a/tools/keepalived/keepalived/etc/init/keepalived.conf.in b/tools/keepalived/keepalived/etc/init/keepalived.conf.in
new file mode 100644
index 000000000..7e30d3209
--- /dev/null
+++ b/tools/keepalived/keepalived/etc/init/keepalived.conf.in
@@ -0,0 +1,11 @@
+description "load-balancing and high-availability service"
+
+start on runlevel [2345]
+stop on runlevel [!2345]
+
+respawn
+
+script
+	. @sysconfdir@/sysconfig/keepalived
+	exec @sbindir@/keepalived --dont-fork ${KEEPALIVED_OPTIONS}
+end script
diff --git a/tools/keepalived/keepalived/etc/keepalived/keepalived.conf b/tools/keepalived/keepalived/etc/keepalived/keepalived.conf
index 4c11472a3..75b1db44c 100644
--- a/tools/keepalived/keepalived/etc/keepalived/keepalived.conf
+++ b/tools/keepalived/keepalived/etc/keepalived/keepalived.conf
@@ -10,6 +10,10 @@ global_defs {
    smtp_server 192.168.200.1
    smtp_connect_timeout 30
    router_id LVS_DEVEL
+   vrrp_skip_check_adv_addr
+   vrrp_strict
+   vrrp_garp_interval 0
+   vrrp_gna_interval 0
 }
 
 vrrp_instance VI_1 {
@@ -33,7 +37,6 @@ virtual_server 192.168.200.100 443 {
     delay_loop 6
     lb_algo rr
     lb_kind NAT
-    nat_mask 255.255.255.0
     persistence_timeout 50
     protocol TCP
 
@@ -49,7 +52,7 @@ virtual_server 192.168.200.100 443 {
               digest 9b3a0c85a887a256d6939da88aabd8cd
             }
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
@@ -57,7 +60,7 @@ virtual_server 192.168.200.100 443 {
 
 virtual_server 10.10.10.2 1358 {
     delay_loop 6
-    lb_algo rr 
+    lb_algo rr
     lb_kind NAT
     persistence_timeout 50
     protocol TCP
@@ -67,20 +70,20 @@ virtual_server 10.10.10.2 1358 {
     real_server 192.168.200.2 1358 {
         weight 1
         HTTP_GET {
-            url { 
+            url {
               path /testurl/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334d
             }
-            url { 
+            url {
               path /testurl2/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334d
             }
-            url { 
+            url {
               path /testurl3/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334d
             }
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
@@ -88,16 +91,16 @@ virtual_server 10.10.10.2 1358 {
     real_server 192.168.200.3 1358 {
         weight 1
         HTTP_GET {
-            url { 
+            url {
               path /testurl/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334c
             }
-            url { 
+            url {
               path /testurl2/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334c
             }
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
@@ -105,29 +108,28 @@ virtual_server 10.10.10.2 1358 {
 
 virtual_server 10.10.10.3 1358 {
     delay_loop 3
-    lb_algo rr 
+    lb_algo rr
     lb_kind NAT
-    nat_mask 255.255.255.0
     persistence_timeout 50
     protocol TCP
 
     real_server 192.168.200.4 1358 {
         weight 1
         HTTP_GET {
-            url { 
+            url {
               path /testurl/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334d
             }
-            url { 
+            url {
               path /testurl2/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334d
             }
-            url { 
+            url {
               path /testurl3/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334d
             }
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
@@ -135,20 +137,20 @@ virtual_server 10.10.10.3 1358 {
     real_server 192.168.200.5 1358 {
         weight 1
         HTTP_GET {
-            url { 
+            url {
               path /testurl/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334d
             }
-            url { 
+            url {
               path /testurl2/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334d
             }
-            url { 
+            url {
               path /testurl3/test.jsp
               digest 640205b7b0fc66c1ea91c463fac6334d
             }
             connect_timeout 3
-            nb_get_retry 3
+            retry 3
             delay_before_retry 3
         }
     }
diff --git a/tools/keepalived/keepalived/etc/openrc/keepalived b/tools/keepalived/keepalived/etc/openrc/keepalived
new file mode 100644
index 000000000..ff056e95a
--- /dev/null
+++ b/tools/keepalived/keepalived/etc/openrc/keepalived
@@ -0,0 +1,11 @@
+#!/sbin/openrc-run
+
+command="/sbin/$SVCNAME"
+command_args="$KEEPALIVED_OPTS"
+pidfile="/var/run/$SVCNAME.pid"
+
+depend() {
+	need net
+	after firewall
+}
+
diff --git a/tools/keepalived/keepalived/etc/init.d/keepalived.sysconfig b/tools/keepalived/keepalived/etc/sysconfig/keepalived
similarity index 100%
rename from tools/keepalived/keepalived/etc/init.d/keepalived.sysconfig
rename to tools/keepalived/keepalived/etc/sysconfig/keepalived
diff --git a/tools/keepalived/keepalived/include/bfd.h b/tools/keepalived/keepalived/include/bfd.h
new file mode 100644
index 000000000..980094bfa
--- /dev/null
+++ b/tools/keepalived/keepalived/include/bfd.h
@@ -0,0 +1,244 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        bfd.c include file.
+ *
+ * Author:      Ilya Voronin, <ivoronin@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+#ifndef _BFD_H_
+#define _BFD_H_
+
+#include <stdbool.h>
+#include <stdint.h>
+#include <sys/socket.h>
+
+#include "scheduler.h"
+#include "timer.h"
+
+/*
+ * RFC5881
+ */
+#define BFD_CONTROL_PORT	"3784"
+#define BFD_CONTROL_TTL		255
+#define BFD_CONTROL_HOPLIMIT	64
+
+/*
+ * Default parameters and limits
+ */
+#define BFD_MINRX_MIN		1U
+#define BFD_MINRX_MAX_SENSIBLE	1000U
+#define BFD_MINRX_MAX		(UINT32_MAX / 1000U)
+#define BFD_MINRX_DEFAULT	10U
+
+#define BFD_MINTX_MIN		1U
+#define BFD_MINTX_MAX_SENSIBLE	1000U
+#define BFD_MINTX_MAX		(UINT32_MAX / 1000U)
+#define BFD_MINTX_DEFAULT	10U
+
+#define BFD_IDLETX_MIN		1000U
+#define BFD_IDLETX_MAX_SENSIBLE	10000U
+#define BFD_IDLETX_MAX		(UINT32_MAX / 1000U)
+#define BFD_IDLETX_DEFAULT	1000U
+
+#define BFD_MULTIPLIER_MIN	1U
+#define BFD_MULTIPLIER_MAX_SENSIBLE 10U
+#define BFD_MULTIPLIER_MAX	255U
+#define BFD_MULTIPLIER_DEFAULT	5U
+
+#define BFD_WEIGHT_MIN		-253
+#define BFD_WEIGHT_MAX		253
+#define BFD_WEIGHT_DEFAULT	0
+
+#define BFD_TTL_MAX		255
+
+/*
+ * BFD Session
+ */
+/* Maximum instance name length including \0 */
+#define BFD_INAME_MAX 32
+
+typedef struct _bfd {
+	/* Configuration parameters */
+	char iname[BFD_INAME_MAX];	/* Instance name */
+	struct sockaddr_storage nbr_addr;	/* Neighbor address */
+	struct sockaddr_storage src_addr;	/* Source address */
+	uint32_t local_min_rx_intv;	/* Required min RX interval */
+	uint32_t local_min_tx_intv;	/* Desired min TX interval */
+	uint32_t local_idle_tx_intv;	/* Desired idle TX interval */
+	uint8_t local_detect_mult;	/* Local detection multiplier */
+	uint8_t ttl;			/* TTL/hopcount to send */
+	uint8_t max_hops;		/* Maximum number of hops allowed to be traversed by received packet */
+	bool passive;			/* Operate in passive mode */
+#ifdef _WITH_VRRP_
+	bool vrrp;			/* Only send events to VRRP process */
+#endif
+#ifdef _WITH_LVS_
+	bool checker;			/* Only send events to checker process */
+#endif
+
+	/* Internal variables */
+	int fd_out;		/* Output socket fd */
+	thread_ref_t thread_out; /* Output socket thread */
+	long sands_out;		/* Output thread sands, used for suspend/resume */
+	thread_ref_t thread_exp; /* Expire thread */
+	long sands_exp;		/* Expire thread sands, used for suspend/resume */
+	thread_ref_t thread_rst; /* Reset thread */
+	long sands_rst;		/* Reset thread sands, used for suspend/resume */
+	bool send_error;	/* Set if last send had an error */
+
+	/* State variables */
+	u_char local_state:2;	/* Local state */
+	u_char remote_state:2;	/* Remote state */
+	uint32_t local_discr;	/* Local discriminator */
+	uint32_t remote_discr;	/* Remote discriminator */
+	u_char local_diag:5;	/* Local diagnostic code */
+	u_char remote_diag:5;	/* Local diagnostic code */
+	uint32_t remote_min_tx_intv;	/* Remote min TX interval */
+	uint32_t remote_min_rx_intv;	/* Remote min RX interval */
+	uint8_t local_demand;	/* Local demand mode */
+	uint8_t remote_demand;	/* Remote demand mode */
+	uint8_t remote_detect_mult;	/* Remote detection multiplier */
+	bool poll;		/* Poll sequence flag */
+	bool final;		/* Final flag */
+
+	/* Calculated values */
+	uint32_t local_tx_intv;	/* Local transmit interval */
+	uint32_t remote_tx_intv;	/* Remote transmit interval */
+	uint64_t local_detect_time;	/* Local detection time */
+	uint64_t remote_detect_time;	/* Remote detection time */
+	timeval_t last_seen;	/* Time of the last packet received */
+} bfd_t;
+
+/*
+ * BFD Control Packet Header
+ */
+typedef struct _bfdhdr {
+#if __BYTE_ORDER == __LITTLE_ENDIAN
+	u_char diag:5;
+	u_char version:3;
+
+	/* flags */
+	u_char multipoint:1;
+	u_char demand:1;
+	u_char auth:1;
+	u_char cplane:1;
+	u_char final:1;
+	u_char poll:1;
+	u_char state:2;
+#elif __BYTE_ORDER == __BIG_ENDIAN
+	u_char version:3;
+	u_char diag:5;
+
+	/* flags */
+	u_char state:2;
+	u_char poll:1;
+	u_char final:1;
+	u_char cplane:1;
+	u_char auth:1;
+	u_char demand:1;
+	u_char multipoint:1;
+#else
+#error "Unsupported byte order"
+#endif
+	u_char detect_mult;
+	u_char len;
+
+	uint32_t local_discr;
+	uint32_t remote_discr;
+	uint32_t min_tx_intv;
+	uint32_t min_rx_intv;
+	uint32_t min_echo_rx_intv;
+} bfdhdr_t;
+
+/*
+  Version
+*/
+#define BFD_VERSION_1			1U
+
+/*
+   State (Sta)
+*/
+
+#define BFD_STATE_ADMINDOWN		0U
+#define BFD_STATE_DOWN			1U
+#define BFD_STATE_INIT			2U
+#define BFD_STATE_UP			3U
+
+#define	BFD_STATE_STR(s) \
+	(BFD_STATE_ADMINDOWN == s ? "AdminDown" : \
+	(BFD_STATE_DOWN == s ? "Down" : \
+	(BFD_STATE_INIT == s ? "Init" : \
+	(BFD_STATE_UP == s ? "Up" : "Unknown"))))
+
+#define BFD_ISADMINDOWN(b) (b->local_state == BFD_STATE_ADMINDOWN)
+#define BFD_ISDOWN(b) (b->local_state == BFD_STATE_DOWN)
+#define BFD_ISINIT(b) (b->local_state == BFD_STATE_INIT)
+#define BFD_ISUP(b) (b->local_state == BFD_STATE_UP)
+
+/*
+   Diagnostic (Diag)
+*/
+
+#define BFD_DIAG_NO_DIAG		0U
+#define BFD_DIAG_EXPIRED		1U
+#define BFD_DIAG_ECHO_FAILED		2U
+#define BFD_DIAG_NBR_SIGNALLED_DOWN	3U
+#define BFD_DIAG_FWD_PLANE_RESET	4U
+#define BFD_DIAG_PATH_DOWN		5U
+#define BFD_DIAG_CAT_PATH_DOWN		6U
+#define BFD_DIAG_ADMIN_DOWN		7U
+#define BFD_DIAG_RCAT_PATH_DOWN		8U
+
+#define	BFD_DIAG_STR(d) \
+	(BFD_DIAG_NO_DIAG == d ? "No Diagnostic" : \
+	(BFD_DIAG_EXPIRED == d ? "Control Detection Time Expired" : \
+	(BFD_DIAG_ECHO_FAILED == d ? "Echo Function Failed" : \
+	(BFD_DIAG_NBR_SIGNALLED_DOWN == d ? "Neighbor Signaled Session Down" : \
+	(BFD_DIAG_FWD_PLANE_RESET == d ? "Forwarding Plane Reset" : \
+	(BFD_DIAG_PATH_DOWN == d ? "Path Down" : \
+	(BFD_DIAG_CAT_PATH_DOWN == d ? "Concatenated Path Down" : \
+	(BFD_DIAG_ADMIN_DOWN == d ? "Administratively Down" : \
+	(BFD_DIAG_RCAT_PATH_DOWN == d ? "Reverse Concatenated Path Down" : "Unknown")))))))))
+
+#define BFD_VALID_DIAG(d)    (d <= 8)
+
+/*
+ * BFD Packet structure
+ */
+typedef struct _bfdpkt {
+	bfdhdr_t *hdr;
+	struct sockaddr_storage src_addr;
+	struct sockaddr_storage dst_addr;
+	unsigned int ttl;
+	unsigned int len;
+	const char *buf;
+} bfdpkt_t;
+
+extern void bfd_update_local_tx_intv(bfd_t *);
+extern void bfd_update_remote_tx_intv(bfd_t *);
+extern void bfd_idle_local_tx_intv(bfd_t * bfd);
+extern void bfd_set_poll(bfd_t *);
+extern void bfd_reset_state(bfd_t *);
+extern void bfd_init_state(bfd_t *);
+extern void bfd_copy_state(bfd_t *, const bfd_t *, bool);
+extern void bfd_copy_sands(bfd_t *, const bfd_t *);
+extern bool bfd_check_packet(const bfdpkt_t *);
+extern bool bfd_check_packet_ttl(const bfdpkt_t *, const bfd_t *);
+extern void bfd_build_packet(bfdpkt_t * pkt, bfd_t *, char *,
+			     const ssize_t);
+
+#endif				/* _BFD_H_ */
diff --git a/tools/keepalived/keepalived/include/bfd_daemon.h b/tools/keepalived/keepalived/include/bfd_daemon.h
new file mode 100644
index 000000000..edc0f9caa
--- /dev/null
+++ b/tools/keepalived/keepalived/include/bfd_daemon.h
@@ -0,0 +1,42 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        bfd_daemon.c include file.
+ *
+ * Author:      Ilya Voronin, <ivoronin@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _BFD_DAEMON_H_
+#define _BFD_DAEMON_H_
+
+#define PROG_BFD "Keepalived_bfd"
+
+#ifdef _WITH_VRRP_
+extern int bfd_vrrp_event_pipe[2];
+#endif
+#ifdef _WITH_LVS_
+extern int bfd_checker_event_pipe[2];
+#endif
+
+extern void open_bfd_pipes(void);
+extern int start_bfd_child(void);
+extern void bfd_validate_config(void);
+#ifdef THREAD_DUMP
+extern void register_bfd_parent_addresses(void);
+#endif
+
+#endif				/* _BFD_DAEMON_H_ */
diff --git a/tools/keepalived/keepalived/include/bfd_data.h b/tools/keepalived/keepalived/include/bfd_data.h
new file mode 100644
index 000000000..88be692f6
--- /dev/null
+++ b/tools/keepalived/keepalived/include/bfd_data.h
@@ -0,0 +1,58 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        bfd_data.c include file.
+ *
+ * Author:      Ilya Voronin, <ivoronin@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _BFD_DATA_H_
+#define _BFD_DATA_H_
+
+#include <stdbool.h>
+#include <stdio.h>
+
+#include "list.h"
+#include "bfd.h"
+
+typedef struct _bfd_data {
+	list bfd;		/* List of BFD instances */
+	int fd_in;		/* Input socket fd */
+	thread_ref_t thread_in;	/* Input socket thread */
+} bfd_data_t;
+
+#define BFD_BUFFER_SIZE 32
+
+/* Global Vars exported */
+extern bfd_data_t *bfd_data;
+extern bfd_data_t *old_bfd_data;
+extern char *bfd_buffer;
+
+extern bool alloc_bfd(const char *);
+extern bfd_data_t *alloc_bfd_data(void);
+extern void dump_bfd_data(FILE *, const bfd_data_t *);
+extern void free_bfd_data(bfd_data_t *);
+extern void bfd_complete_init(void);
+extern void alloc_bfd_buffer(void);
+extern void free_bfd_buffer(void);
+extern bfd_t *find_bfd_by_addr(const struct sockaddr_storage *, const struct sockaddr_storage *) __attribute__ ((pure));
+extern bfd_t *find_bfd_by_discr(const uint32_t) __attribute__ ((pure));
+extern bfd_t *find_bfd_by_name(const char *) __attribute__ ((pure));
+extern uint32_t rand_intv(uint32_t, uint32_t);
+extern uint32_t bfd_get_random_discr(bfd_data_t *);
+
+#endif				/* _BFD_DATA_H_ */
diff --git a/tools/keepalived/keepalived/include/bfd_event.h b/tools/keepalived/keepalived/include/bfd_event.h
new file mode 100644
index 000000000..f660de3fc
--- /dev/null
+++ b/tools/keepalived/keepalived/include/bfd_event.h
@@ -0,0 +1,36 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        bfd_event.c include file.
+ *
+ * Author:      Ilya Voronin, <ivoronin@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _BFD_EVENT_H_
+#define _BFD_EVENT_H_
+
+#include "bfd.h"
+
+typedef struct _bfd_event {
+	char iname[BFD_INAME_MAX];
+	u_char state;
+	timeval_t sent_time;
+} bfd_event_t;
+
+extern void bfd_event_send(bfd_t *);
+
+#endif				/* _BFD_EVENT_H_ */
diff --git a/tools/keepalived/keepalived/include/bfd_parser.h b/tools/keepalived/keepalived/include/bfd_parser.h
new file mode 100644
index 000000000..e1fe72b0a
--- /dev/null
+++ b/tools/keepalived/keepalived/include/bfd_parser.h
@@ -0,0 +1,32 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        bfd_parser.c include file.
+ *
+ * Author:      Ilya Voronin, <ivoronin@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+#ifndef _BFD_PARSER_H_
+#define _BFD_PARSER_H_
+
+#include <stdbool.h>
+
+#include "vector.h"
+
+extern void init_bfd_keywords(bool);
+extern const vector_t *bfd_init_keywords(void);
+
+#endif				/* _BFD_PARSER_H_ */
diff --git a/tools/keepalived/keepalived/include/bfd_scheduler.h b/tools/keepalived/keepalived/include/bfd_scheduler.h
new file mode 100644
index 000000000..be95b9e33
--- /dev/null
+++ b/tools/keepalived/keepalived/include/bfd_scheduler.h
@@ -0,0 +1,34 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        bfd_scheduler.c include file.
+ *
+ * Author:      Ilya Voronin, <ivoronin@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+#ifndef _BFD_SCHEDULER_H_
+#define _BFD_SCHEDULER_H_
+
+#include "scheduler.h"
+#include "bfd_data.h"
+
+extern int bfd_dispatcher_init(thread_ref_t);
+extern void bfd_dispatcher_release(bfd_data_t *);
+#ifdef THREAD_DUMP
+extern void register_bfd_scheduler_addresses(void);
+#endif
+
+#endif				/* _BFD_SCHEDULER_H_ */
diff --git a/tools/keepalived/keepalived/include/check_api.h b/tools/keepalived/keepalived/include/check_api.h
index 3dd5d7829..16aad2d03 100644
--- a/tools/keepalived/keepalived/include/check_api.h
+++ b/tools/keepalived/keepalived/include/check_api.h
@@ -17,39 +17,47 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _CHECK_API_H
 #define _CHECK_API_H
 
+#include "config.h"
+
+/* global includes */
+#include <stdbool.h>
+#include <stdio.h>
+#include <sys/socket.h>
+
 /* local includes */
+#include "list.h"
 #include "check_data.h"
-#include "scheduler.h"
-
-/* connection options structure definition */
-typedef struct _conn_opts {
-	struct sockaddr_storage		dst;
-	struct sockaddr_storage		bindto;
-	unsigned int			connection_to; /* connection time-out */
-#ifdef _WITH_SO_MARK_
-	unsigned int			fwmark; /* to mark packets going out of the socket using SO_MARK */
-#endif
-} conn_opts_t;
+#include "vector.h"
+#include "layer4.h"
 
 /* Checkers structure definition */
 typedef struct _checker {
-	void				(*free_func) (void *);
-	void				(*dump_func) (void *);
-	int				(*launch) (struct _thread *);
-	int				(*plugin_launch) (void *);
-	virtual_server_t		*vs;	/* pointer to the checker thread virtualserver */
-	real_server_t			*rs;	/* pointer to the checker thread realserver */
+	void				(*free_func) (struct _checker *);
+	void				(*dump_func) (FILE *, const struct _checker *);
+	thread_func_t			launch;
+	bool				(*compare) (const struct _checker *, const struct _checker *);
+	virtual_server_t		*vs;			/* pointer to the checker thread virtualserver */
+	real_server_t			*rs;			/* pointer to the checker thread realserver */
 	void				*data;
-	checker_id_t			id;	/* Checker identifier */
-	int				enabled;/* Activation flag */
-	conn_opts_t			*co; /* connection options */
-	long				warmup;	/* max random timeout to start checker */
+	bool				enabled;		/* Activation flag */
+	bool				is_up;			/* Set if checker is up */
+	bool				has_run;		/* Set if the checker has completed at least once */
+	conn_opts_t			*co;			/* connection options */
+	int				alpha;			/* Alpha mode enabled */
+	unsigned long			delay_loop;		/* Interval between running checker */
+	unsigned long			warmup;			/* max random timeout to start checker */
+	unsigned			retry;			/* number of retries before failing */
+	unsigned long			delay_before_retry;	/* interval between retries */
+	unsigned			retry_it;		/* number of successive failures */
+	unsigned			default_retry;		/* number of retries before failing */
+	unsigned long			default_delay_before_retry; /* interval between retries */
+	bool				log_all_failures;	/* Log all failures when checker up */
 } checker_t;
 
 /* Checkers queue */
@@ -62,31 +70,30 @@ extern list checkers_queue;
 #define CHECKER_GET_CURRENT() (LIST_TAIL_DATA(checkers_queue))
 #define CHECKER_GET() (CHECKER_DATA(CHECKER_GET_CURRENT()))
 #define CHECKER_GET_CO() (((checker_t *)CHECKER_GET_CURRENT())->co)
-#define CHECKER_VALUE_INT(X) (atoi(vector_slot(X,1)))
-#define CHECKER_VALUE_STRING(X) (set_value(X))
-#define CHECKER_VHOST(C) (VHOST((C)->vs))
-#define CHECKER_ENABLED(C) ((C)->enabled)
-#define CHECKER_ENABLE(C)  ((C)->enabled = 1)
-#define CHECKER_DISABLE(C) ((C)->enabled = 0)
 #define CHECKER_HA_SUSPEND(C) ((C)->vs->ha_suspend)
 #define CHECKER_NEW_CO() ((conn_opts_t *) MALLOC(sizeof (conn_opts_t)))
-#define FMT_CHK(C) FMT_RS((C)->rs)
+#define FMT_CHK(C) FMT_RS((C)->rs, (C)->vs)
 
 /* Prototypes definition */
 extern void init_checkers_queue(void);
-extern void dump_conn_opts (conn_opts_t *);
-extern void queue_checker(void (*free_func) (void *), void (*dump_func) (void *)
-			  , int (*launch) (thread_t *)
+extern void free_vs_checkers(virtual_server_t *);
+extern void dump_connection_opts(FILE *, const void *);
+extern void dump_checker_opts(FILE *, const void *);
+extern checker_t *queue_checker(void (*) (checker_t *), void (*) (FILE *, const checker_t *)
+			  , thread_func_t
+			  , bool (*) (const checker_t *, const checker_t *)
 			  , void *
-			  , conn_opts_t *);
-extern void dump_checkers_queue(void);
+			  , conn_opts_t *
+			  , bool);
+extern void dequeue_new_checker(void);
+extern bool check_conn_opts(conn_opts_t *);
+extern bool compare_conn_opts(const conn_opts_t *, const conn_opts_t *) __attribute__ ((pure));
+extern void dump_checkers_queue(FILE *);
 extern void free_checkers_queue(void);
 extern void register_checkers_thread(void);
 extern void install_checkers_keyword(void);
-extern void install_connect_keywords(void);
-extern void warmup_handler(vector_t *);
-extern void update_checker_activity(sa_family_t, void *, int);
-extern void checker_set_dst(struct sockaddr_storage *);
 extern void checker_set_dst_port(struct sockaddr_storage *, uint16_t);
+extern void install_checker_common_keywords(bool);
+extern void update_checker_activity(sa_family_t, void *, bool);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/check_bfd.h b/tools/keepalived/keepalived/include/check_bfd.h
new file mode 100644
index 000000000..b61ca1f3c
--- /dev/null
+++ b/tools/keepalived/keepalived/include/check_bfd.h
@@ -0,0 +1,62 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        check_bfd.c include file.
+ *
+ * Author:      Quentin Armitage <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _CHECK_BFD_H
+#define _CHECK_BFD_H
+
+#include "scheduler.h"
+#include "check_data.h"
+
+/* external bfd we read to track forwarding to remote systems */
+typedef struct _checker_bfd {
+	char			*bname;		/* bfd name */
+//	int			weight;		/* Default weight */
+	list			tracking_rs;	/* List of checker_t */
+} checker_tracked_bfd_t;
+
+///* List structure from bfds to tracking rs */
+//typedef struct _tracking_checker_bfd {
+////	int			weight;		/* Tracking weight, or zero for down instance */
+//	checker_t		*checker;	/* The real server */
+//} tracking_rs_t;
+
+///* Tracked bfd structure definition */
+//typedef struct _tracked_bfd {
+//	checker_tracked_bfd_t	*bfd;		/* track bfd pointer, cannot be NULL */
+////	int			weight;		/* Weight for bfd */
+//} tracked_bfd_t;
+
+/* bfd_checker structure */
+typedef struct _bfd_checker {
+	checker_tracked_bfd_t	*bfd;		/* track bfd pointer, cannot be NULL */
+//	int			weight;		// Set in bfd_weight_handler
+} bfd_checker_t;
+
+/* Prototypes defs */
+extern void install_bfd_check_keyword(void);
+extern void start_bfd_monitoring(thread_master_t *);
+extern void checker_bfd_dispatcher_release(void);
+#ifdef THREAD_DUMP
+extern void register_check_bfd_addresses(void);
+#endif
+
+#endif
diff --git a/tools/keepalived/keepalived/include/check_daemon.h b/tools/keepalived/keepalived/include/check_daemon.h
index b98366721..26e3a34f8 100644
--- a/tools/keepalived/keepalived/include/check_daemon.h
+++ b/tools/keepalived/keepalived/include/check_daemon.h
@@ -4,34 +4,39 @@
  *              a loadbalanced server pool using multi-layer checks.
  *
  * Part:        check_daemon.c include file.
- * 
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
- *              
+ *
  *              This program is free software; you can redistribute it and/or
  *              modify it under the terms of the GNU General Public License
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _CHECK_DAEMON_H
 #define _CHECK_DAEMON_H
 
 /* system include */
-#include <stdlib.h>
-#include <signal.h>
+#include <stdbool.h>
 
 /* Daemon define */
 #define PROG_CHECK	"Keepalived_healthcheckers"
-#define WDOG_CHECK	"/tmp/.healthcheckers"
+
+/* Global data */
+extern bool using_ha_suspend;
 
 /* Prototypes */
 extern int start_check_child(void);
+extern void check_validate_config(void);
+#ifdef THREAD_DUMP
+extern void register_check_parent_addresses(void);
+#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/include/check_data.h b/tools/keepalived/keepalived/include/check_data.h
index 7efb6a9e1..8c65f06b9 100644
--- a/tools/keepalived/keepalived/include/check_data.h
+++ b/tools/keepalived/keepalived/include/check_data.h
@@ -17,55 +17,45 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _CHECK_DATA_H
 #define _CHECK_DATA_H
 
+#include "config.h"
+
 /* system includes */
-#include <stdlib.h>
-#include <string.h>
 #include <stdint.h>
-#include <syslog.h>
-#include <arpa/inet.h>
+#include <stdbool.h>
+#include <stdio.h>
+#include <sys/socket.h>
+#include <netinet/in.h>
 #include <openssl/ssl.h>
 
 #ifdef _WITH_LVS_
-  #ifdef _KRNL_2_4_
-    #include <net/ip_vs.h>
-  #elif _KRNL_2_6_
-    #include "../libipvs-2.6/ip_vs.h"
-  #endif
-  #define SCHED_MAX_LENGTH IP_VS_SCHEDNAME_MAXLEN
-#else
-  #define SCHED_MAX_LENGTH   1
+  #include "ip_vs.h"
 #endif
 
 /* local includes */
 #include "list.h"
 #include "vector.h"
-#include "timer.h"
-
-/* Typedefs */
-typedef unsigned int checker_id_t;
+#include "notify.h"
+#include "utils.h"
 
 /* Daemon dynamic data structure definition */
-#define MAX_TIMEOUT_LENGTH		5
-#define MAX_BPS_LENGTH			5
-#define MAX_LIMIT_PROPORTION_LENGTH     5
-#define KEEPALIVED_DEFAULT_DELAY	(60 * TIMER_HZ) 
-
+#define KEEPALIVED_DEFAULT_DELAY	(60 * TIMER_HZ)
+#define TNLKINDSIZ 			16
 /* SSL specific data */
 typedef struct _ssl_data {
 	int				enable;
 	int				strong_check;
 	SSL_CTX				*ctx;
-	SSL_METHOD			*meth;
-	char				*password;
-	char				*cafile;
-	char				*certfile;
-	char				*keyfile;
+	const SSL_METHOD		*meth;
+	const char			*password;
+	const char			*cafile;
+	const char			*certfile;
+	const char			*keyfile;
 } ssl_data_t;
 
 /* Real Server definition */
@@ -73,32 +63,56 @@ typedef struct _real_server {
 	struct sockaddr_storage		addr;
 	int				weight;
 	int				iweight;	/* Initial weight */
-#ifdef _KRNL_2_6_
+	int				pweight;	/* previous weight
+							 * used for reloading */
+	unsigned			forwarding_method; /* NAT/TUN/DR */
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	int				tun_type;	/* tunnel type */
+	unsigned			tun_port;	/* tunnel port for gue tunnels */
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	int				tun_flags;	/* tunnel checksum type for gue/gre tunnels */
+#endif
+#endif
 	uint32_t			u_threshold;   /* Upper connection limit. */
 	uint32_t			l_threshold;   /* Lower connection limit. */
-#endif
 	int				inhibit;	/* Set weight to 0 instead of removing
 							 * the service from IPVS topology.
 							 */
-	char				*notify_up;	/* Script to launch when RS is added to LVS */
-	char				*notify_down;	/* Script to launch when RS is removed from LVS */
-	int				alive;
-	list				failed_checkers;/* List of failed checkers */
-	int				set;		/* in the IPVS table */
-	int				reloaded;   /* active state was copied from old config while reloading */
-#if defined(_WITH_SNMP_) && defined(_KRNL_2_6_) && defined(_WITH_LVS_)
+	notify_script_t			*notify_up;	/* Script to launch when RS is added to LVS */
+	notify_script_t			*notify_down;	/* Script to launch when RS is removed from LVS */
+	int				alpha;		/* true if alpha mode is default. */
+	unsigned int			connection_to;	/* connection time-out */
+	unsigned long			delay_loop;	/* Interval between running checker */
+	unsigned long			warmup;		/* max random timeout to start checker */
+	unsigned			retry;		/* number of retries before failing */
+	unsigned long			delay_before_retry; /* interval between retries */
+	int				smtp_alert;	/* Send email on status change */
+
+	bool				alive;
+	unsigned			num_failed_checkers;/* Number of failed checkers */
+	bool				set;		/* in the IPVS table */
+	bool				reloaded;	/* active state was copied from old config while reloading */
+	const char			*virtualhost;	/* Default virtualhost for HTTP and SSL health checkers */
+#if defined(_WITH_SNMP_CHECKER_) && defined(_WITH_LVS_)
 	/* Statistics */
 	uint32_t			activeconns;	/* active connections */
 	uint32_t			inactconns;	/* inactive connections */
 	uint32_t			persistconns;	/* persistent connections */
+#ifndef _WITH_LVS_64BIT_STATS_
 	struct ip_vs_stats_user		stats;
+#else
+	struct ip_vs_stats64		stats;
+#endif
+#endif
+#ifdef _WITH_BFD_
+	list				tracked_bfds;	/* list of bfd_checker_t */
 #endif
 } real_server_t;
 
 /* local ip address group definition */
 typedef struct _local_addr_entry {
 	struct sockaddr_storage addr;
-	uint8_t range;
+	uint32_t range;
 	char ifname[IFNAMSIZ];
 } local_addr_entry;
 
@@ -111,9 +125,10 @@ typedef struct _local_addr_group {
 /* blacklist ip group*/
 typedef struct _blklst_addr_entry {
         struct sockaddr_storage addr;
-        uint8_t range;
+        uint32_t range;
 } blklst_addr_entry;
 
+
 typedef struct _blklst_addr_group {
         char *gname;
         list addr_ip;
@@ -133,203 +148,163 @@ typedef struct _tunnel_group {
         list tunnel_entry;
 } tunnel_group;
 
+
 /* Virtual Server group definition */
 typedef struct _virtual_server_group_entry {
-	struct sockaddr_storage		addr;
-	uint8_t				range;
-	uint32_t			vfwmark;
-	int				alive;
+	bool 				is_fwmark;
+	union {
+		struct {
+			struct sockaddr_storage	addr;
+			uint32_t	range;
+			unsigned	tcp_alive;
+			unsigned	udp_alive;
+			unsigned	sctp_alive;
+		};
+		struct {
+			uint32_t	vfwmark;
+			unsigned	fwm4_alive;
+			unsigned	fwm6_alive;
+		};
+	};
+	bool				reloaded;
 } virtual_server_group_entry_t;
 
 typedef struct _virtual_server_group {
 	char				*gname;
 	list				addr_ip;
-	list				range;
+	list				addr_range;
 	list				vfwmark;
 } virtual_server_group_t;
 
 /* Virtual Server definition */
 typedef struct _virtual_server {
-	char				*vsgname;
+	const char			*vsgname;
+	virtual_server_group_t		*vsg;
 	struct sockaddr_storage		addr;
-	real_server_t			*s_svr;
 	uint32_t			vfwmark;
+	real_server_t			*s_svr;
+	uint16_t			af;
 	uint16_t			service_type;
-	long				delay_loop;
-	int				ha_suspend;
-	int				ops;
-	char				sched[SCHED_MAX_LENGTH];
-	char				timeout_persistence[MAX_TIMEOUT_LENGTH];
-	char 				bps[MAX_BPS_LENGTH];
-	char 				limit_proportion[MAX_LIMIT_PROPORTION_LENGTH];
-	unsigned			loadbalancing_kind;
-	unsigned			conn_timeout;
-	uint32_t			nat_mask;
-	uint32_t			granularity_persistence;
-	char				*virtualhost;
+	bool				ha_suspend;
+	int				ha_suspend_addr_count;
+#ifdef _WITH_LVS_
+	char				sched[IP_VS_SCHEDNAME_MAXLEN];
+	uint32_t			flags;
+	uint32_t			persistence_timeout;
+	uint32_t			bps;
+	uint32_t			limit_proportion;
+	uint32_t 			conn_timeout;
+#ifdef _HAVE_PE_NAME_
+	char				pe_name[IP_VS_PENAME_MAXLEN];
+#endif
+	unsigned			forwarding_method;
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	int				tun_type;	/* tunnel type */
+	unsigned			tun_port;	/* tunnel port for gue tunnels */
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	int				tun_flags;	/* tunnel checksum type for gue/gre tunnels */
+#endif
+#endif
+	uint32_t			persistence_granularity;
+#endif
+	const char			*virtualhost;	/* Default virtualhost for HTTP and SSL healthcheckers
+							   if not set on real servers */
+	int				weight;
 	list				rs;
 	int				alive;
-	unsigned			alpha;		/* Alpha mode enabled. */
-	unsigned			omega;		/* Omega mode enabled. */
-	unsigned			syn_proxy;		/* Syn_proxy mode enabled. */
-	char				*quorum_up;	/* A hook to call when the VS gains quorum. */
-	char				*quorum_down;	/* A hook to call when the VS loses quorum. */
-	long unsigned			quorum;		/* Minimum live RSs to consider VS up. */
-
-	long unsigned			hysteresis;	/* up/down events "lag" WRT quorum. */
-	unsigned			quorum_state;	/* Reflects result of the last transition done. */
-	int					reloaded;   /* quorum_state was copied from old config while reloading */
-	char				*local_addr_gname;		/* local ip address group name */
-	char				*vip_bind_dev;		/* the interface name,vip bindto */
-	char				*blklst_addr_gname;	/* black list ip group name */
-
-	char				srange[256];
-	char				drange[256];
-	char				iifname[IFNAMSIZ];
-	char				oifname[IFNAMSIZ];
-	unsigned			hash_target;
-#if defined(_WITH_SNMP_) && defined(_KRNL_2_6_) && defined(_WITH_LVS_)
+	bool				alpha;		/* Set if alpha mode is default. */
+	bool				omega;		/* Omega mode enabled. */
+	bool				inhibit;	/* Set weight to 0 instead of removing
+							 * the service from IPVS topology. */
+	unsigned int			connection_to;	/* connection time-out */
+	unsigned long			delay_loop;	/* Interval between running checker */
+	unsigned long			warmup;		/* max random timeout to start checker */
+	unsigned			retry;		/* number of retries before failing */
+	unsigned long			delay_before_retry; /* interval between retries */
+	notify_script_t			*notify_quorum_up;	/* A hook to call when the VS gains quorum. */
+	notify_script_t			*notify_quorum_down;	/* A hook to call when the VS loses quorum. */
+	unsigned			quorum;		/* Minimum live RSs to consider VS up. */
+	unsigned			hysteresis;	/* up/down events "lag" WRT quorum. */
+	int				smtp_alert;	/* Send email on status change */
+	bool				quorum_state_up; /* Reflects result of the last transition done. */
+	bool				reloaded;	/* quorum_state was copied from old config while reloading */
+#if defined(_WITH_SNMP_CHECKER_) && defined(_WITH_LVS_)
 	/* Statistics */
 	time_t				lastupdated;
+#ifndef _WITH_LVS_64BIT_STATS_
 	struct ip_vs_stats_user		stats;
+#else
+	struct ip_vs_stats64		stats;
 #endif
+#endif
+	char 	srange[256];
+	char 	drange[256];
+	char 	iifname[IFNAMSIZ];
+	char 	oifname[IFNAMSIZ];
+	unsigned hash_target;
+	unsigned syn_proxy;
+	char 	*local_addr_gname; 	/*local ip address group name*/
+	char 	*blklst_addr_gname; 	/*black list ip group name*/	
+	char 	*vip_bind_dev; 		/*the interface name, vip bindto*/
 } virtual_server_t;
 
 /* Configuration data root */
 typedef struct _check_data {
+	bool				ssl_required;
 	ssl_data_t			*ssl;
 	list				vs_group;
 	list				vs;
+#ifdef _WITH_BFD_
+	list				track_bfds;	/* list of checker_tracked_bfd_t */
+#endif
+	unsigned			num_checker_fd_required;
+	unsigned			num_smtp_alert;
 	list laddr_group;
 	list blklst_group;
 	list tunnel_group;
 } check_data_t;
 
-/* inline stuff */
-static inline int __ip6_addr_equal(const struct in6_addr *a1,
-				   const struct in6_addr *a2)
-{
-	return (((a1->s6_addr32[0] ^ a2->s6_addr32[0]) |
-		 (a1->s6_addr32[1] ^ a2->s6_addr32[1]) |
-		 (a1->s6_addr32[2] ^ a2->s6_addr32[2]) |
-		 (a1->s6_addr32[3] ^ a2->s6_addr32[3])) == 0);
-}
-
-static inline int sockstorage_equal(const struct sockaddr_storage *s1,
-				    const struct sockaddr_storage *s2)
-{
-	if (s1->ss_family != s2->ss_family)
-		return 0;
-
-	if (s1->ss_family == AF_INET6) {
-		struct sockaddr_in6 *a1 = (struct sockaddr_in6 *) s1;
-		struct sockaddr_in6 *a2 = (struct sockaddr_in6 *) s2;
-
-//		if (IN6_ARE_ADDR_EQUAL(a1, a2) && (a1->sin6_port == a2->sin6_port))
-		if (__ip6_addr_equal(&a1->sin6_addr, &a2->sin6_addr) &&
-		    (a1->sin6_port == a2->sin6_port))
-			return 1;
-	} else if (s1->ss_family == AF_INET) {
-		struct sockaddr_in *a1 = (struct sockaddr_in *) s1;
-		struct sockaddr_in *a2 = (struct sockaddr_in *) s2;
-
-		if ((a1->sin_addr.s_addr == a2->sin_addr.s_addr) &&
-		    (a1->sin_port == a2->sin_port))
-			return 1;
-	} else if (s1->ss_family == AF_UNSPEC)
-		return 1;
-
-	return 0;
-}
-
-static inline int inaddr_equal(sa_family_t family, void *addr1, void *addr2)
-{
-	if (family == AF_INET6) {
-		struct in6_addr *a1 = (struct in6_addr *) addr1;
-		struct in6_addr *a2 = (struct in6_addr *) addr2;
-
-		if (__ip6_addr_equal(a1, a2))
-			return 1;
-	} else if (family == AF_INET) {
-		struct in_addr *a1 = (struct in_addr *) addr1;
-		struct in_addr *a2 = (struct in_addr *) addr2;
-
-		if (a1->s_addr == a2->s_addr)
-			return 1;
-	}
-
-	return 0;
-}
-
 /* macro utility */
-#define ISALIVE(S)	((S)->alive)
-#define SET_ALIVE(S)	((S)->alive = 1)
-#define UNSET_ALIVE(S)	((S)->alive = 0)
-#define VHOST(V)	((V)->virtualhost)
-#define FMT_RS(R) (inet_sockaddrtopair (&(R)->addr))
+#define ISALIVE(S)		((S)->alive)
+#define SET_ALIVE(S)		((S)->alive = true)
+#define UNSET_ALIVE(S)		((S)->alive = false)
+#define FMT_RS(R, V) (format_rs(R, V))
 #define FMT_VS(V) (format_vs((V)))
 
-#define VS_ISEQ(X,Y)	(sockstorage_equal(&(X)->addr,&(Y)->addr)			&&\
-			 (X)->vfwmark                 == (Y)->vfwmark			&&\
-			 (X)->service_type            == (Y)->service_type		&&\
-			 (X)->loadbalancing_kind      == (Y)->loadbalancing_kind	&&\
-			 (X)->hash_target             == (Y)->hash_target		&&\
-			 (X)->nat_mask                == (Y)->nat_mask			&&\
-			 (X)->granularity_persistence == (Y)->granularity_persistence	&&\
-			 (X)->syn_proxy		      == (Y)->syn_proxy			&&\
-			 (  (!(X)->quorum_up && !(Y)->quorum_up) || \
-			    ((X)->quorum_up && (Y)->quorum_up && !strcmp ((X)->quorum_up, (Y)->quorum_up)) \
-			 ) &&\
-			 !strcmp((X)->sched, (Y)->sched)				&&\
-			 !strcmp((X)->timeout_persistence, (Y)->timeout_persistence)	&&\
-			 (X)->conn_timeout == (Y)->conn_timeout  &&\
-			 !strcmp((X)->bps, (Y)->bps)					&&\
-			 !strcmp((X)->limit_proportion, (Y)->limit_proportion)          &&\
-			 (((X)->vsgname && (Y)->vsgname &&				\
-			   !strcmp((X)->vsgname, (Y)->vsgname)) || 			\
-			  (!(X)->vsgname && !(Y)->vsgname))				&&\
-			 (((X)->local_addr_gname && (Y)->local_addr_gname &&		\
-			   !strcmp((X)->local_addr_gname, (Y)->local_addr_gname)) ||	\
-			  (!(X)->local_addr_gname && !(Y)->local_addr_gname))		&&\
-			 (((X)->blklst_addr_gname && (Y)->blklst_addr_gname &&		\
-			   !strcmp((X)->blklst_addr_gname, (Y)->blklst_addr_gname)) ||	\
-			 (!(X)->blklst_addr_gname && !(Y)->blklst_addr_gname))		&&\
-			 !strcmp((X)->srange, (Y)->srange)				&&\
-			 !strcmp((X)->drange, (Y)->drange)				&&\
-			 !strcmp((X)->iifname, (Y)->iifname)				&&\
-			 !strcmp((X)->oifname, (Y)->oifname))
-
-#define VSGE_ISEQ(X,Y)	(sockstorage_equal(&(X)->addr,&(Y)->addr) &&	\
-			 (X)->range     == (Y)->range &&		\
-			 (X)->vfwmark   == (Y)->vfwmark)
-
-#define RS_ISEQ(X,Y)	(sockstorage_equal(&(X)->addr,&(Y)->addr) &&	\
-			 (X)->iweight   == (Y)->iweight) &&    \
-                         (X)->u_threshold == (Y)->u_threshold
+#ifndef IP_VS_SVC_F_SCHED_MH_PORT
+#define IP_VS_SVC_F_SCHED_MH_PORT IP_VS_SVC_F_SCHED_SH_PORT
+#endif
+#ifndef IP_VS_SVC_F_SCHED_MH_FALLBACK
+#define IP_VS_SVC_F_SCHED_MH_FALLBACK IP_VS_SVC_F_SCHED_SH_FALLBACK
+#endif
 
 /* Global vars exported */
 extern check_data_t *check_data;
 extern check_data_t *old_check_data;
 
 /* prototypes */
-extern ssl_data_t *alloc_ssl(void);
+extern ssl_data_t *alloc_ssl(void) __attribute((malloc));
 extern void free_ssl(void);
+extern void alloc_vsg(const char *);
+extern void alloc_vsg_entry(const vector_t *);
+extern void alloc_vs(const char *, const char *);
+extern void alloc_rs(const char *, const char *);
+extern void alloc_ssvr(const char *, const char *);
+extern check_data_t *alloc_check_data(void);
+extern void free_check_data(check_data_t *);
+extern void dump_data_check(FILE *);
+extern const char *format_vs (const virtual_server_t *);
+extern const char *format_vsge (const virtual_server_group_entry_t *);
+extern const char *format_rs(const real_server_t *, const virtual_server_t *);
+extern bool validate_check_config(void);
 extern void alloc_laddr_group(char *);
-extern void alloc_laddr_entry(vector_t *);
-extern void alloc_vsg(char *);
-extern void alloc_vsg_entry(vector_t *);
-extern void alloc_vs(char *, char *);
-extern void alloc_rs(char *, char *);
-extern void alloc_ssvr(char *, char *);
+extern void alloc_laddr_entry(const vector_t *);
 extern void alloc_group(char *);
 extern void alloc_rsgroup(char *, char *);
 extern void set_rsgroup(char *);
-extern check_data_t *alloc_check_data(void);
-extern void free_check_data(check_data_t *);
-extern void dump_check_data(check_data_t *);
-extern char *format_vs (virtual_server_t *);
+extern void dump_check_data(FILE *, check_data_t *);
 extern void alloc_blklst_group(char *);
-extern void alloc_blklst_entry(vector_t *);
+extern void alloc_blklst_entry(const vector_t *);
 
 extern void alloc_tunnel_entry(char *name);
 extern void alloc_tunnel(char *gname);
diff --git a/tools/keepalived/keepalived/include/check_dns.h b/tools/keepalived/keepalived/include/check_dns.h
new file mode 100644
index 000000000..7bfa0e012
--- /dev/null
+++ b/tools/keepalived/keepalived/include/check_dns.h
@@ -0,0 +1,98 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        check_dns.c include file.
+ *
+ * Author:      Masanobu Yasui, <yasui-m@klab.com>
+ *              Masaya Yamamoto, <yamamoto-ma@klab.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2016 KLab Inc.
+ * Copyright (C) 2016-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _CHECK_DNS_CHECK_H
+#define _CHECK_DNS_CHECK_H
+
+#include <stdint.h>
+#include <sys/types.h>
+
+#define DNS_DEFAULT_RETRY    3
+#define DNS_DEFAULT_TYPE  DNS_TYPE_SOA
+#define DNS_DEFAULT_NAME    "."
+#define DNS_BUFFER_SIZE    768
+
+#define DNS_QR(flags) ((flags >> 15) & 0x0001)
+/* UNUSED
+#define DNS_OP(flags) ((flags >> 11) & 0x000F)
+#define DNS_AA(flags) ((flags >> 10) & 0x0001)
+#define DNS_TC(flags) ((flags >>  9) & 0x0001)
+#define DNS_RD(flags) ((flags >>  8) & 0x0001)
+#define DNS_RA(flags) ((flags >>  7) & 0x0001)
+#define DNS_Z(flags)  ((flags >>  4) & 0x0007)
+*/
+#define DNS_RC(flags) ((flags >>  0) & 0x000F)
+
+/* UNUSED
+#define DNS_SET_QR(flags, val) (flags |= ((val & 0x0001) << 15))
+#define DNS_SET_OP(flags, val) (flags |= ((val & 0x000F) << 11))
+#define DNS_SET_AA(flags, val) (flags |= ((val & 0x0001) << 10))
+#define DNS_SET_TC(flags, val) (flags |= ((val & 0x0001) <<  9))
+*/
+#define DNS_SET_RD(flags, val) (flags |= ((val & 0x0001) <<  8))
+/* UNUSED
+#define DNS_SET_RA(flags, val) (flags |= ((val & 0x0001) <<  7))
+#define DNS_SET_Z(flags, val)  (flags |= ((val & 0x0007) <<  4))
+#define DNS_SET_RC(flags, val) (flags |= ((val & 0x000F) <<  0))
+*/
+
+#define DNS_TYPE_A       1
+#define DNS_TYPE_NS      2
+#define DNS_TYPE_CNAME   5
+#define DNS_TYPE_SOA     6
+#define DNS_TYPE_MX     15
+#define DNS_TYPE_TXT    16
+#define DNS_TYPE_AAAA   28
+#define DNS_TYPE_RRSIG  46
+#define DNS_TYPE_DNSKEY 48
+
+typedef struct _dns_type {
+	uint16_t type;
+	const char * const label;
+} dns_type_t;
+
+extern const dns_type_t DNS_TYPE[];
+
+typedef struct _dns_header {
+	uint16_t id;
+	uint16_t flags;
+	uint16_t qdcount;
+	uint16_t ancount;
+	uint16_t nscount;
+	uint16_t arcount;
+} dns_header_t;
+
+typedef struct _dns_check {
+	uint16_t type;
+	const char *name;
+	uint8_t sbuf[DNS_BUFFER_SIZE];
+	size_t slen;
+} dns_check_t;
+
+extern void install_dns_check_keyword(void);
+#ifdef THREAD_DUMP
+extern void register_check_dns_addresses(void);
+#endif
+
+#endif
diff --git a/tools/keepalived/keepalived/include/check_http.h b/tools/keepalived/keepalived/include/check_http.h
index 0bbb127ed..57dc3fa6c 100644
--- a/tools/keepalived/keepalived/include/check_http.h
+++ b/tools/keepalived/keepalived/include/check_http.h
@@ -18,85 +18,132 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _CHECK_HTTP_H
 #define _CHECK_HTTP_H
 
 /* system includes */
-#include <stdio.h>
+#include <sys/types.h>
+#include <stdbool.h>
 #include <openssl/md5.h>
 #include <openssl/ssl.h>
+#ifdef _WITH_REGEX_CHECK_
+#define PCRE2_CODE_UNIT_WIDTH 8
+#include <pcre2.h>
+#ifdef _WITH_REGEX_TIMERS_
+#include <time.h>
+#endif
+#endif
+#include <stdbool.h>
 
 /* local includes */
-#include "check_data.h"
-#include "ipwrapper.h"
 #include "scheduler.h"
-#include "layer4.h"
 #include "list.h"
 
+typedef enum {
+        HTTP_PROTOCOL_1_0,
+        HTTP_PROTOCOL_1_0C,
+        HTTP_PROTOCOL_1_1,
+} http_protocol_t;
+
+#define HTTP_STATUS_CODE_MIN		100
+#define HTTP_STATUS_CODE_MAX		599
+#define HTTP_DEFAULT_STATUS_CODE_MIN	200
+#define HTTP_DEFAULT_STATUS_CODE_MAX	299
+
 /* Checker argument structure  */
 /* ssl specific thread arguments defs */
 typedef struct _request {
 	char				*buffer;
-	char				*extracted;
+	const char			*extracted;
 	int				error;
 	int				status_code;
-	int				len;
+	size_t				len;
 	SSL				*ssl;
 	BIO				*bio;
 	MD5_CTX				context;
+	size_t				content_len;
+	size_t				rx_bytes;
+#ifdef _WITH_REGEX_CHECK_
+	bool				regex_matched;
+	size_t				start_offset;	/* Offset into buffer to match from */
+	size_t				regex_subject_offset;	/* Offset into web page of start of buffer */
+#ifdef _WITH_REGEX_TIMERS_
+	struct timespec			req_time;
+	unsigned			num_match_calls;
+#endif
+#endif
 } request_t;
 
-/* http specific thread arguments defs */
-typedef struct _http {
-	int				retry_it;	/* current number of get retry */
-	int				url_it;		/* current url checked index */
-	request_t			*req;		/* GET buffer and SSL args */
-} http_t ;
+#ifdef _WITH_REGEX_CHECK_
+typedef struct _regex {
+	const unsigned char		*pattern;
+	int				pcre2_options;
+	pcre2_code			*pcre2_reCompiled;
+	pcre2_match_data		*pcre2_match_data;
+	uint32_t			pcre2_max_lookbehind;
+	unsigned			use_count;
+#ifdef _WITH_REGEX_TIMERS_
+	struct timespec			regex_time;
+	unsigned			num_match_calls;
+	unsigned			num_regex_urls;
+#endif
+} regex_t;
+#endif
 
 typedef struct _url {
-	char				*path;
-	char				*digest;
-	int				status_code;
+	const char			*path;
+	const uint8_t			*digest;
+	unsigned long			status_code[(HTTP_STATUS_CODE_MAX - HTTP_STATUS_CODE_MIN + 1 - 1) / (sizeof(unsigned long) * CHAR_BIT) + 1];
+	const char			*virtualhost;
+	ssize_t				len_mismatch;
+#ifdef _WITH_REGEX_CHECK_
+	bool				regex_no_match;
+	regex_t				*regex;
+	size_t				regex_min_offset;
+	size_t				regex_max_offset;	/* One beyond max offset */
+#ifndef PCRE2_DONT_USE_JIT
+	bool				regex_use_stack;
+#endif
+#endif
 } url_t;
 
 typedef struct _http_checker {
-	int				proto;
-	int				nb_get_retry;
-	long				delay_before_retry;
+	unsigned			proto;
+	element				url_it;		/* current url checked list element */
+	url_t				*failed_url;	/* the url that is currently failing, if any */
+	request_t			*req;		/* GET buffer and SSL args */
 	list				url;
-	http_t				*arg;
+	http_protocol_t			http_protocol;
+	const char			*virtualhost;
+#ifdef _HAVE_SSL_SET_TLSEXT_HOST_NAME_
+	bool				enable_sni;
+#endif
+	bool				fast_recovery;
 } http_checker_t;
 
 /* global defs */
-#define MD5_BUFFER_LENGTH 32
-#define GET_BUFFER_LENGTH 2048
-#define MAX_BUFFER_LENGTH 4096
+#define GET_BUFFER_LENGTH 2048U
+#define MAX_BUFFER_LENGTH 4096U
 #define PROTO_HTTP	0x01
 #define PROTO_SSL	0x02
 
-/* GET processing command */
-#define REQUEST_TEMPLATE "GET %s HTTP/1.0\r\n" \
-                         "User-Agent:KeepAliveClient\r\n" \
-                         "Host: %s%s\r\n\r\n"
-
-#define REQUEST_TEMPLATE_IPV6 "GET %s HTTP/1.0\r\n" \
-                         "User-Agent:KeepAliveClient\r\n" \
-                         "Host: [%s]%s\r\n\r\n"
-
-/* macro utility */
-#define HTTP_ARG(X) ((X)->arg)
-#define HTTP_REQ(X) ((X)->req)
-#define FMT_HTTP_RS(C) FMT_CHK(C)
+#ifdef _REGEX_DEBUG_
+extern bool do_regex_debug;
+#endif
+#ifdef _WITH_REGEX_TIMERS_
+extern bool do_regex_timers;
+#endif
 
 /* Define prototypes */
 extern void install_http_check_keyword(void);
-extern int epilog(thread_t *, int, int, int);
-extern int timeout_epilog(thread_t *, char *, char *);
-extern url_t *fetch_next_url(http_checker_t *);
-extern int http_process_response(request_t *, int);
-extern int http_handle_response(thread_t *, unsigned char digest[16]
-				, int);
+extern int timeout_epilog(thread_ref_t, const char *);
+extern void http_process_response(request_t *, size_t, url_t *);
+extern int http_handle_response(thread_ref_t, unsigned char digest[16], bool);
+#ifdef THREAD_DUMP
+extern void register_check_http_addresses(void);
+#endif
+
 #endif
diff --git a/tools/keepalived/keepalived/include/check_misc.h b/tools/keepalived/keepalived/include/check_misc.h
index 335f103d3..81d75e405 100644
--- a/tools/keepalived/keepalived/include/check_misc.h
+++ b/tools/keepalived/keepalived/include/check_misc.h
@@ -18,26 +18,36 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _CHECK_MISC_H
 #define _CHECK_MISC_H
 
 /* system includes */
-#include <stdlib.h>
+#include <stdbool.h>
+#include <sys/types.h>
 
-/* local includes */
-#include "scheduler.h"
+/* user includes */
+#include "notify.h"
+#include "keepalived_magic.h"
 
 /* Checker argument structure  */
 typedef struct _misc_checker {
-	char			*path;
-	long			timeout;
-	int			dynamic;  /* 0: old-style, 1: exit code from checker affects weight */
+	notify_script_t		script;		/* The script details */
+	unsigned long		timeout;
+	bool			dynamic;	/* false: old-style, true: exit code from checker affects weight */
+	script_state_t		state;		/* current state of script */
+	unsigned		last_exit_code;	/* The last exit code of the script */
+	timeval_t		last_ran;	/* Time script last ran */
 } misc_checker_t;
 
 /* Prototypes defs */
+extern void clear_dynamic_misc_check_flag(void);
 extern void install_misc_check_keyword(void);
+extern int check_misc_script_security(magic_t);
+#ifdef THREAD_DUMP
+extern void register_check_misc_addresses(void);
+#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/include/check_parser.h b/tools/keepalived/keepalived/include/check_parser.h
index 49e3e10cf..bb0348d3d 100644
--- a/tools/keepalived/keepalived/include/check_parser.h
+++ b/tools/keepalived/keepalived/include/check_parser.h
@@ -1,10 +1,10 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        check_parser.c include file.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -17,16 +17,20 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2016 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _CHECK_PARSER_H
 #define _CHECK_PARSER_H
 
+/* Global include */
+#include <stdbool.h>
+
 /* local include */
 #include "vector.h"
 
 /* Prototypes */
-extern vector_t *check_init_keywords(void);
+extern const vector_t *check_init_keywords(void);
+extern void init_check_keywords(bool);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/check_print.h b/tools/keepalived/keepalived/include/check_print.h
new file mode 100644
index 000000000..407785ba1
--- /dev/null
+++ b/tools/keepalived/keepalived/include/check_print.h
@@ -0,0 +1,29 @@
+/*
+ * Soft:        Vrrpd is an implementation of VRRPv2 as specified in rfc2338.
+ *              VRRP is a protocol which elect a master server on a LAN. If the
+ *              master fails, a backup server takes over.
+ *              The original implementation has been made by jerome etienne.
+ *
+ * Part:        check_print.c program include file.
+ *
+ * Author:      Quentin Armitage <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2019-2019 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _CHECK_PRINT_H
+#define _CHECK_PRINT_H
+
+extern void check_print_data(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/check_smtp.h b/tools/keepalived/keepalived/include/check_smtp.h
index 588b2c527..3cd9b6ba4 100644
--- a/tools/keepalived/keepalived/include/check_smtp.h
+++ b/tools/keepalived/keepalived/include/check_smtp.h
@@ -18,56 +18,43 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _CHECK_SMTP_H
 #define _CHECK_SMTP_H
 
 /* system includes */
-#include <stdlib.h>
+#include <sys/types.h>
 
 /* local includes */
-#include "check_data.h"
 #include "scheduler.h"
 #include "list.h"
 #include "check_api.h"
 
-#define SMTP_BUFF_MAX		512
+#define SMTP_BUFF_MAX		512U
 
-#define SMTP_START		1
-#define SMTP_HAVE_BANNER	2
-#define SMTP_SENT_HELO		3
-#define SMTP_RECV_HELO		4
-#define SMTP_SENT_QUIT		5
-#define SMTP_RECV_QUIT		6
+typedef enum {
+	SMTP_START,
+	SMTP_HAVE_BANNER,
+	SMTP_SENT_HELO,
+	SMTP_RECV_HELO,
+	SMTP_SENT_QUIT,
+	SMTP_RECV_QUIT
+} smtp_state_t;
 
 #define SMTP_DEFAULT_HELO	"smtpchecker.keepalived.org"
-#define SMTP_DEFAULT_PORT	25
-
-/* Per host configuration structure  */
-typedef conn_opts_t smtp_host_t;
 
 /* Checker argument structure  */
 typedef struct _smtp_checker {
 	/* non per host config data goes here */
-	char				*helo_name;
-	long				timeout;
-	long				db_retry;
-	int				retry;
-	int				attempts;
-	int				host_ctr;
-	smtp_host_t			*host_ptr;
+	const char			*helo_name;
 
 	/* data buffer */
 	char				buff[SMTP_BUFF_MAX];
-	int				buff_ctr;
-	int				(*buff_cb) (thread_t *);
-
-	int				state;
+	size_t				buff_ctr;
 
-	/* list holding the host config data */
-	list				host;
+	smtp_state_t			state;
 } smtp_checker_t;
 
 /* macro utility */
@@ -75,5 +62,8 @@ typedef struct _smtp_checker {
 
 /* Prototypes defs */
 extern void install_smtp_check_keyword(void);
+#ifdef THREAD_DUMP
+extern void register_check_smtp_addresses(void);
+#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/include/check_snmp.h b/tools/keepalived/keepalived/include/check_snmp.h
index 0c163649b..a19194dd4 100644
--- a/tools/keepalived/keepalived/include/check_snmp.h
+++ b/tools/keepalived/keepalived/include/check_snmp.h
@@ -8,9 +8,9 @@
  *
  * Author:      Vincent Bernat <bernat@luffy.cx>
  *
- *              This program is distributed in the hope that it will be useful, 
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of 
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
  *
  *              This program is free software; you can redistribute it and/or
@@ -18,116 +18,20 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _CHECK_SNMP_H
 #define _CHECK_SNMP_H
 
-#include "snmp.h"
-
-/* CHECK SNMP defines */
-#define CHECK_OID KEEPALIVED_OID, 3
-
-#define CHECK_SNMP_VSGROUPNAME 1
-#define CHECK_SNMP_VSGROUPMEMBERTYPE 3
-#define CHECK_SNMP_VSGROUPMEMBERFWMARK 4
-#define CHECK_SNMP_VSGROUPMEMBERADDRTYPE 5
-#define CHECK_SNMP_VSGROUPMEMBERADDRESS 6
-#define CHECK_SNMP_VSGROUPMEMBERADDR1 7
-#define CHECK_SNMP_VSGROUPMEMBERADDR2 8
-#define CHECK_SNMP_VSGROUPMEMBERPORT 9
-#define CHECK_SNMP_VSTYPE 10
-#define CHECK_SNMP_VSNAMEGROUP 14
-#define CHECK_SNMP_VSFWMARK 11
-#define CHECK_SNMP_VSADDRTYPE 12
-#define CHECK_SNMP_VSADDRESS 13
-#define CHECK_SNMP_VSPORT 16
-#define CHECK_SNMP_VSPROTOCOL 17
-#define CHECK_SNMP_VSLOADBALANCINGALGO 18
-#define CHECK_SNMP_VSLOADBALANCINGKIND 19
-#define CHECK_SNMP_VSSTATUS 20
-#define CHECK_SNMP_VSVIRTUALHOST 21
-#define CHECK_SNMP_VSPERSIST 22
-#define CHECK_SNMP_VSPERSISTTIMEOUT 23
-#define CHECK_SNMP_VSPERSISTGRANULARITY 24
-#define CHECK_SNMP_VSDELAYLOOP 25
-#define CHECK_SNMP_VSHASUSPEND 26
-#define CHECK_SNMP_VSALPHA 27
-#define CHECK_SNMP_VSOMEGA 28
-#define CHECK_SNMP_VSQUORUM 29
-#define CHECK_SNMP_VSQUORUMSTATUS 30
-#define CHECK_SNMP_VSQUORUMUP 31
-#define CHECK_SNMP_VSQUORUMDOWN 32
-#define CHECK_SNMP_VSHYSTERESIS 33
-#define CHECK_SNMP_VSREALTOTAL 34
-#define CHECK_SNMP_VSREALUP 35
-#define CHECK_SNMP_VSSTATSCONNS 61
-#define CHECK_SNMP_VSSTATSINPKTS 62
-#define CHECK_SNMP_VSSTATSOUTPKTS 63
-#define CHECK_SNMP_VSSTATSINBYTES 64
-#define CHECK_SNMP_VSSTATSOUTBYTES 65
-#define CHECK_SNMP_VSRATECPS 66
-#define CHECK_SNMP_VSRATEINPPS 67
-#define CHECK_SNMP_VSRATEOUTPPS 68
-#define CHECK_SNMP_VSRATEINBPS 69
-#define CHECK_SNMP_VSRATEOUTBPS 70
-#define CHECK_SNMP_RSTYPE 36
-#define CHECK_SNMP_RSADDRTYPE 37
-#define CHECK_SNMP_RSADDRESS 38
-#define CHECK_SNMP_RSPORT 39
-#define CHECK_SNMP_RSSTATUS 40
-#define CHECK_SNMP_RSWEIGHT 41
-#define CHECK_SNMP_RSUPPERCONNECTIONLIMIT 42
-#define CHECK_SNMP_RSLOWERCONNECTIONLIMIT 43
-#define CHECK_SNMP_RSACTIONWHENDOWN 44
-#define CHECK_SNMP_RSNOTIFYUP 45
-#define CHECK_SNMP_RSNOTIFYDOWN 46
-#define CHECK_SNMP_RSFAILEDCHECKS 47
-#define CHECK_SNMP_RSSTATSCONNS 48
-#define CHECK_SNMP_RSSTATSACTIVECONNS 49
-#define CHECK_SNMP_RSSTATSINACTIVECONNS 50
-#define CHECK_SNMP_RSSTATSPERSISTENTCONNS 51
-#define CHECK_SNMP_RSSTATSINPKTS 52
-#define CHECK_SNMP_RSSTATSOUTPKTS 53
-#define CHECK_SNMP_RSSTATSINBYTES 54
-#define CHECK_SNMP_RSSTATSOUTBYTES 55
-#define CHECK_SNMP_RSRATECPS 56
-#define CHECK_SNMP_RSRATEINPPS 57
-#define CHECK_SNMP_RSRATEOUTPPS 58
-#define CHECK_SNMP_RSRATEINBPS 59
-#define CHECK_SNMP_RSRATEOUTBPS 60
-#define CHECK_SNMP_VSOPS 71
-
-#define STATE_VSGM_FWMARK 1
-#define STATE_VSGM_ADDRESS 2
-#define STATE_VSGM_RANGE 3
-#define STATE_VSGM_END 4
-
-#define STATE_RS_SORRY 1
-#define STATE_RS_REGULAR_FIRST 2
-#define STATE_RS_REGULAR_NEXT 3
-#define STATE_RS_END 4
-
-/* Macro */
-#define RETURN_IP46ADDRESS(entity)					\
-do {									\
-  if (entity->addr.ss_family == AF_INET6) {				\
-    struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&entity->addr;	\
-    *var_len = 16;							\
-    return (u_char *)&addr6->sin6_addr;					\
-  } else {								\
-    struct sockaddr_in *addr4 = (struct sockaddr_in *)&entity->addr;	\
-    *var_len = 4;							\
-    return (u_char *)&addr4->sin_addr;					\
-  }									\
-} while(0)
+#include <stdbool.h>
 
+#include "check_data.h"
 
 /* Prototypes */
-extern void check_snmp_agent_init(void);
+extern void check_snmp_agent_init(const char *);
 extern void check_snmp_agent_close(void);
-extern void check_snmp_rs_trap(real_server_t *, virtual_server_t *);
-extern void check_snmp_quorum_trap(virtual_server_t *);
+extern void check_snmp_rs_trap(real_server_t *, virtual_server_t *, bool);
+extern void check_snmp_quorum_trap(virtual_server_t *, bool);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/check_ssl.h b/tools/keepalived/keepalived/include/check_ssl.h
index f7e8cf843..0f8be6de4 100644
--- a/tools/keepalived/keepalived/include/check_ssl.h
+++ b/tools/keepalived/keepalived/include/check_ssl.h
@@ -18,22 +18,29 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _CHECK_SSL_H
 #define _CHECK_SSL_H
 
+/* system includes */
+#include <openssl/ssl.h>
+
 /* local includes */
-#include "check_http.h"
+#include "check_data.h"
+#include "scheduler.h"
 
 /* Prototypes */
 extern void install_ssl_check_keyword(void);
-extern int init_ssl_ctx(void);
+extern bool init_ssl_ctx(void);
 extern void clear_ssl(ssl_data_t *);
-extern int ssl_connect(thread_t *, int);
+extern int ssl_connect(thread_ref_t, int);
 extern int ssl_printerr(int);
-extern int ssl_send_request(SSL *, char *, int);
-extern int ssl_read_thread(thread_t *);
+extern bool ssl_send_request(SSL *, const char *, int);
+extern int ssl_read_thread(thread_ref_t);
+#ifdef THREAD_DUMP
+extern void register_check_ssl_addresses(void);
+#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/include/check_tcp.h b/tools/keepalived/keepalived/include/check_tcp.h
index 247043913..f522aab1b 100644
--- a/tools/keepalived/keepalived/include/check_tcp.h
+++ b/tools/keepalived/keepalived/include/check_tcp.h
@@ -17,24 +17,16 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _CHECK_TCP_H
 #define _CHECK_TCP_H
 
-/* system includes */
-#include <unistd.h>
-#include <netdb.h>
-#include <arpa/inet.h>
-
-/* local includes */
-#include "scheduler.h"
-
-/* macro utility */
-#define FMT_TCP_RS(C) FMT_CHK(C)
-
 /* Prototypes defs */
 extern void install_tcp_check_keyword(void);
+#ifdef THREAD_DUMP
+extern void register_check_tcp_addresses(void);
+#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/include/common.h b/tools/keepalived/keepalived/include/common.h
new file mode 100644
index 000000000..66f69df2b
--- /dev/null
+++ b/tools/keepalived/keepalived/include/common.h
@@ -0,0 +1,152 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_COMMON_H__
+#define __DPVS_COMMON_H__
+#include <stdbool.h>
+#include <stdint.h>
+#include <unistd.h>
+#include <ctype.h>
+#include <sys/types.h>
+#include <linux/if_ether.h>
+
+#ifndef NELEMS
+#define NELEMS(a)       (sizeof(a) / sizeof((a)[0]))
+#endif
+
+#ifndef min
+#define min(x,y) ({ \
+	typeof(x) _x = (x);	\
+	typeof(y) _y = (y);	\
+	(void) (&_x == &_y);	\
+	_x < _y ? _x : _y; })
+#endif
+
+#ifndef max
+#define max(x,y) ({ \
+	typeof(x) _x = (x);	\
+	typeof(y) _y = (y);	\
+	(void) (&_x == &_y);	\
+	_x > _y ? _x : _y; })
+#endif
+
+#ifndef min_t
+#define min_t(type, a, b) min(((type) a), ((type) b))
+#endif
+#ifndef max_t
+#define max_t(type, a, b) max(((type) a), ((type) b))
+#endif
+
+#ifndef __be32
+typedef uint32_t    __be32;
+#endif
+
+#ifndef __be16
+typedef uint16_t    __be16;
+#endif
+
+#ifndef __u8
+typedef uint8_t     __u8;
+#endif
+
+#ifndef __u16
+typedef uint16_t    __u16;
+#endif
+
+#ifndef __u32
+typedef uint32_t    __u32;
+#endif
+
+typedef enum {
+    DPVS_STATE_STOP = 1,
+    DPVS_STATE_INIT,
+    DPVS_STATE_NORMAL,
+    DPVS_STATE_FINISH,
+} dpvs_state_t;
+
+void dpvs_state_set(dpvs_state_t stat);
+dpvs_state_t dpvs_state_get(void);
+
+bool is_power2(int num, int offset, int *lower);
+
+enum {
+    EDPVS_OK            = 0,
+    EDPVS_INVAL         = -1,       /* invalid parameter */
+    EDPVS_NOMEM         = -2,       /* no memory */
+    EDPVS_EXIST         = -3,       /* already exist */
+    EDPVS_NOTEXIST      = -4,       /* not exist */
+    EDPVS_INVPKT        = -5,       /* invalid packet */
+    EDPVS_DROP          = -6,       /* packet dropped */
+    EDPVS_NOPROT        = -7,       /* no protocol */
+    EDPVS_NOROUTE       = -8,       /* no route */
+    EDPVS_DEFRAG        = -9,       /* defragment error */
+    EDPVS_FRAG          = -10,      /* fragment error */
+    EDPVS_DPDKAPIFAIL   = -11,      /* DPDK error */
+    EDPVS_IDLE          = -12,      /* nothing to do */
+    EDPVS_BUSY          = -13,      /* resource busy */
+    EDPVS_NOTSUPP       = -14,      /* not support */
+    EDPVS_RESOURCE      = -15,      /* no resource */
+    EDPVS_OVERLOAD      = -16,      /* overloaded */
+    EDPVS_NOSERV        = -17,      /* no service */
+    EDPVS_DISABLED      = -18,      /* disabled */
+    EDPVS_NOROOM        = -19,      /* no room */
+    EDPVS_NONEALCORE    = -20,      /* non-eal thread lcore */
+    EDPVS_CALLBACKFAIL  = -21,      /* callbacks fail */
+    EDPVS_IO            = -22,      /* I/O error */
+    EDPVS_MSG_FAIL      = -23,      /* msg callback failed */
+    EDPVS_MSG_DROP      = -24,      /* msg callback dropped */
+    EDPVS_PKTSTOLEN     = -25,      /* stolen packet */
+    EDPVS_SYSCALL       = -26,      /* system call failed */
+    EDPVS_NODEV         = -27,      /* no such device */
+
+    /* positive code for non-error */
+    EDPVS_KNICONTINUE   = 1,        /* KNI to continue */
+    EDPVS_INPROGRESS    = 2,        /* in progress */
+};
+
+extern const char *dpvs_strerror(int err);
+
+int get_numa_nodes(void);
+
+int linux_set_if_mac(const char *ifname, const unsigned char mac[ETH_ALEN]);
+int linux_hw_mc_add(const char *ifname, const uint8_t hwma[ETH_ALEN]);
+int linux_hw_mc_del(const char *ifname, const uint8_t hwma[ETH_ALEN]);
+
+/* read "n" bytes from a descriptor */
+ssize_t readn(int fd, void *vptr, size_t n);
+
+/* write "n" bytes to a descriptor */
+ssize_t writen(int fd, const void *vptr, size_t n);
+
+/* send "n" bytes to a descriptor */
+ssize_t sendn(int fd, const void *vptr, size_t n, int flags);
+
+static inline char *strupr(char *str) {
+    char *s;
+    for (s = str; *s != '\0'; s++)
+        *s = toupper(*s);
+    return str;
+}
+
+static inline char *strlwr(char *str) {
+    char *s;
+    for (s = str; *s != '\0'; s++)
+        *s = tolower(*s);
+    return str;
+}
+
+#endif /* __DPVS_COMMON_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/blklst.h b/tools/keepalived/keepalived/include/conf/blklst.h
new file mode 100644
index 000000000..9efce8c5c
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/blklst.h
@@ -0,0 +1,56 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+/**
+ * Note: control plane only
+ * based on dpvs_sockopt.
+ */
+#ifndef __DPVS_BLKLST_CONF_H__
+#define __DPVS_BLKLST_CONF_H__
+#include "inet.h"
+
+enum {
+    /* set */
+    SOCKOPT_SET_BLKLST_ADD  = 700,
+    SOCKOPT_SET_BLKLST_DEL,
+    SOCKOPT_SET_BLKLST_FLUSH,
+    /* get */
+    SOCKOPT_GET_BLKLST_GETALL,
+};
+
+struct dp_vs_blklst_entry {
+    union inet_addr addr;
+};
+
+struct dp_vs_blklst_conf {
+    /* identify service */
+    int                 af;
+    uint8_t             proto;
+    union inet_addr     vaddr;
+    uint16_t            vport;
+    uint32_t            fwmark;
+
+    /* for set */
+    union inet_addr     blklst;
+};
+
+struct dp_vs_blklst_conf_array {
+    int                 naddr;
+    struct dp_vs_blklst_conf   blklsts[0];
+} __attribute__((__packed__));
+
+#endif /* __DPVS_BLKLST_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/conn.h b/tools/keepalived/keepalived/include/conf/conn.h
new file mode 100644
index 000000000..c7ffd3511
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/conn.h
@@ -0,0 +1,91 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+
+#ifndef __DPVS_CONN_CONF_H__
+#define __DPVS_CONN_CONF_H__
+#include "list.h"
+#include "inet.h"
+
+/* How many connections returned at most for one sockopt ctrl msg.
+ * Decrease it for saving memory, increase it for better performace.
+ */
+#define MAX_CTRL_CONN_GET_ENTRIES       1024
+
+
+enum conn_get_flags {
+    GET_IPVS_CONN_FLAG_ALL          = 1,
+    GET_IPVS_CONN_FLAG_MORE         = 2,
+    GET_IPVS_CONN_FLAG_SPECIFIED    = 4,
+    GET_IPVS_CONN_FLAG_TEMPLATE     = 8,
+};
+
+enum conn_get_result {
+    GET_IPVS_CONN_RESL_OK           = 1,
+    GET_IPVS_CONN_RESL_MORE         = 2,
+    GET_IPVS_CONN_RESL_FAIL         = 4,
+    GET_IPVS_CONN_RESL_NOTEXIST     = 8,
+};
+
+enum {
+    /* get */
+    SOCKOPT_GET_CONN_ALL = 1000,
+    SOCKOPT_GET_CONN_SPECIFIED,
+};
+
+struct ip_vs_sockpair {
+    uint16_t af;
+    uint16_t proto;
+    __be16 sport;
+    __be16 tport;
+    union inet_addr sip;
+    union inet_addr tip;
+};
+
+typedef struct ip_vs_sockpair ipvs_sockpair_t;
+
+struct ip_vs_conn_entry {
+    uint16_t            af;
+    uint16_t            proto;
+    union inet_addr     caddr;
+    union inet_addr     vaddr;
+    union inet_addr     laddr;
+    union inet_addr     daddr;
+    uint16_t            cport;
+    uint16_t            vport;
+    uint16_t            lport;
+    uint16_t            dport;
+    uint32_t            timeout;
+    uint8_t             lcoreid;
+    char                state[16];
+};
+typedef struct ip_vs_conn_entry ipvs_conn_entry_t;
+
+struct ip_vs_conn_req {
+    uint32_t flag;
+    uint32_t whence;
+    ipvs_sockpair_t sockpair;
+};
+
+struct ip_vs_conn_array {
+    uint32_t nconns;
+    uint32_t resl;
+    uint8_t curcid;
+    ipvs_conn_entry_t array[0];
+} __attribute__((__packed__));
+
+#endif /* __DPVS_BLKLST_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/inetaddr.h b/tools/keepalived/keepalived/include/conf/inetaddr.h
new file mode 100644
index 000000000..16a5e79c4
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/inetaddr.h
@@ -0,0 +1,68 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_INETADDR_CONF_H__
+#define __DPVS_INETADDR_CONF_H__
+#include <stdint.h>
+#include <linux/if_addr.h>
+#include "inet.h"
+#include "net/if.h"
+
+enum {
+    /* set */
+    SOCKOPT_SET_IFADDR_ADD  = 400,
+    SOCKOPT_SET_IFADDR_DEL,
+    SOCKOPT_SET_IFADDR_SET,
+    SOCKOPT_SET_IFADDR_FLUSH,
+
+    /* get */
+    SOCKOPT_GET_IFADDR_SHOW,
+};
+
+enum {
+    IFA_SCOPE_GLOBAL        = 0,
+    IFA_SCOPE_SITE,         /* IPv6 only */
+    IFA_SCOPE_LINK,         /* link local */
+    IFA_SCOPE_HOST,         /* valid inside the host */
+    IFA_SCOPE_NONE          = 255,
+};
+
+/* leverage IFA_F_XXX in linux/if_addr.h*/
+#define IFA_F_SAPOOL        0x10000 /* if address with sockaddr pool */
+
+struct inet_addr_param {
+    int                 af;
+    char                ifname[IFNAMSIZ];
+    union inet_addr     addr;
+    uint8_t             plen;
+    union inet_addr     bcast;
+    uint32_t            valid_lft;
+    uint32_t            prefered_lft;
+    uint8_t             scope;
+    uint32_t            flags;
+
+    uint32_t            sa_used;
+    uint32_t            sa_free;
+    uint32_t            sa_miss;
+} __attribute__((__packed__));
+
+struct inet_addr_param_array {
+    int                 naddr;
+    struct inet_addr_param addrs[0];
+};
+
+#endif /* __DPVS_INETADDR_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/ip_tunnel.h b/tools/keepalived/keepalived/include/conf/ip_tunnel.h
new file mode 100644
index 000000000..9eb610acc
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/ip_tunnel.h
@@ -0,0 +1,154 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+/*
+ * dpvs IPv4 tunnel common codes.
+ * refer linux:include/net/ip_tunnels.h
+ *       linux:include/uapi/linux/if_tunnel.h
+ *
+ * raychen@qiyi.com, Dec 2017, initial.
+ */
+#ifndef __DPVS_TUNNEL_H__
+#define __DPVS_TUNNEL_H__
+#include <net/if.h>
+#include <netinet/ip.h>
+#include <endian.h>
+
+#include "list.h"
+#include "netif.h"
+#include "route.h"
+
+#define TNLKINDSIZ              16
+
+#define TUNNEL_F_CSUM           htobe16(0x01)
+#define TUNNEL_F_ROUTING        htobe16(0x02)
+#define TUNNEL_F_KEY            htobe16(0x04)
+#define TUNNEL_F_SEQ            htobe16(0x08)
+#define TUNNEL_F_STRICT         htobe16(0x10)
+#define TUNNEL_F_REC            htobe16(0x20)
+#define TUNNEL_F_VERSION        htobe16(0x40)
+#define TUNNEL_F_NO_KEY         htobe16(0x80)
+#define TUNNEL_F_DONT_FRAGMENT  htobe16(0x0100)
+#define TUNNEL_F_OAM            htobe16(0x0200)
+#define TUNNEL_F_CRIT_OPT       htobe16(0x0400)
+#define TUNNEL_F_GENEVE_OPT     htobe16(0x0800)
+#define TUNNEL_F_VXLAN_OPT      htobe16(0x1000)
+#define TUNNEL_F_NOCACHE        htobe16(0x2000)
+#define TUNNEL_F_ERSPAN_OPT     htobe16(0x4000)
+
+enum {
+    /* set */
+    SOCKOPT_TUNNEL_ADD          = 1000,
+    SOCKOPT_TUNNEL_DEL,
+    SOCKOPT_TUNNEL_CHANGE,
+    SOCKOPT_TUNNEL_REPLACE,
+
+    /* get */
+    SOCKOPT_TUNNEL_SHOW,
+};
+
+struct ip_tunnel_param {
+    char            ifname[IFNAMSIZ];
+    char            kind[TNLKINDSIZ];
+    char            link[IFNAMSIZ];
+    __be16          i_flags;
+    __be16          o_flags;
+    __be32          i_key;
+    __be32          o_key;
+    struct iphdr    iph;
+} __attribute__((__packed__));
+
+#if defined(__DPVS__)
+
+struct ip_tunnel_tab;
+
+struct ip_tunnel_ops {
+    const char              *kind;
+    uint32_t                priv_size;
+    struct list_head        list;
+    struct ip_tunnel_tab    *tab;
+    void                    (*setup)(struct netif_port *dev);
+    int                     (*change)(struct netif_port *dev,
+                                      const struct ip_tunnel_param *params);
+};
+
+#define IP_TNL_HASH_BITS    7
+#define IP_TNL_HASH_SIZE    (1 << IP_TNL_HASH_BITS)
+
+/* table of tunnels for each kind. */
+struct ip_tunnel_tab {
+    struct netif_port       *fb_tunnel_dev; /* fullback device */
+    struct hlist_head       tunnels[IP_TNL_HASH_SIZE];
+    int                     nb_tnl; /* total number of tunnel */
+    struct ip_tunnel_ops    *ops;
+};
+
+struct ip_tunnel {
+    struct hlist_node       hlist;
+    struct netif_port       *dev;
+    struct netif_port       *link;
+    struct ip_tunnel_tab    *tab;
+    struct ip_tunnel_param  params;
+    int                     hlen;
+
+    struct route_entry      *rt_cache;
+
+    /* GRE only */
+    uint32_t                i_seqno;
+    uint32_t                o_seqno;
+};
+
+struct ip_tunnel_pktinfo {
+    __be16  flags;
+    __be16  proto;
+    __be32  key;
+    __be32  seq;
+    int     hdr_len;
+};
+
+int ip_tunnel_init(void);
+int ip_tunnel_term(void);
+
+int ip_tunnel_init_tab(struct ip_tunnel_tab *tab, struct ip_tunnel_ops *ops,
+                       const char *fbname);
+int ip_tunnel_term_tab(struct ip_tunnel_tab *tab);
+
+struct ip_tunnel *ip_tunnel_lookup(struct ip_tunnel_tab *tab,
+                                   portid_t link, __be16 flags,
+                                   __be32 remote, __be32 local,
+                                   __be32 key);
+
+int ip_tunnel_rcv(struct ip_tunnel *tnl, struct ip_tunnel_pktinfo *tpi,
+                  struct rte_mbuf *mbuf);
+
+int ip_tunnel_xmit(struct rte_mbuf *mbuf, struct netif_port *dev,
+                   const struct iphdr *tiph, uint8_t proto);
+
+int ip_tunnel_pull_header(struct rte_mbuf *mbuf, int hlen, __be16 in_proto);
+
+int ip_tunnel_get_link(struct netif_port *dev, struct rte_eth_link *link);
+int ip_tunnel_get_stats(struct netif_port *dev, struct rte_eth_stats *stats);
+int ip_tunnel_get_promisc(struct netif_port *dev, bool *promisc);
+
+int ipip_init(void);
+int ipip_term(void);
+
+int gre_init(void);
+int gre_term(void);
+
+#endif /* __DPVS__ */
+#endif /* __DPVS_TUNNEL_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/ipv6.h b/tools/keepalived/keepalived/include/conf/ipv6.h
new file mode 100644
index 000000000..4f893ed1c
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/ipv6.h
@@ -0,0 +1,39 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+/**
+ * IPv6 protocol control plane.
+ *
+ * Lei Chen <raychen@qiyi.com>, initial, Jul 2018.
+ */
+#ifndef __DPVS_IPV6_CONF_H__
+#define __DPVS_IPV6_CONF_H__
+#include "inet.h"
+
+enum {
+    /* set */
+    SOCKOPT_IP6_SET = 1100,
+    /* get */
+    SOCKOPT_IP6_STATS,
+};
+
+struct ip6_stats_param {
+    struct inet_stats stats;
+    struct inet_stats stats_cpus[DPVS_MAX_LCORE];
+} __attribute__((__packed__));
+
+#endif /* __DPVS_IPV6_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/laddr.h b/tools/keepalived/keepalived/include/conf/laddr.h
new file mode 100644
index 000000000..32097eff4
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/laddr.h
@@ -0,0 +1,66 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+/**
+ * Note: control plane only
+ * based on dpvs_sockopt.
+ */
+#ifndef __DPVS_LADDR_CONF_H__
+#define __DPVS_LADDR_CONF_H__
+#include "inet.h"
+#include "net/if.h"
+
+enum {
+    /* set */
+    SOCKOPT_SET_LADDR_ADD   = 100,
+    SOCKOPT_SET_LADDR_DEL,
+    SOCKOPT_SET_LADDR_FLUSH,
+
+    /* get */
+    SOCKOPT_GET_LADDR_GETALL,
+};
+
+struct dp_vs_laddr_entry {
+    int af;
+    union inet_addr addr;
+    uint64_t    nport_conflict;
+    uint32_t    nconns;
+};
+
+struct dp_vs_laddr_conf {
+    /* identify service */
+    int                 af_s;
+    uint8_t             proto;
+    union inet_addr     vaddr;
+    uint16_t            vport;
+    uint32_t            fwmark;
+    char                srange[256];
+    char                drange[256];
+    char                iifname[IFNAMSIZ];
+    char                oifname[IFNAMSIZ];
+
+    /* for set */
+    int                 af_l;
+    union inet_addr     laddr;
+    char                ifname[IFNAMSIZ];
+
+    /* for get */
+    int                 nladdrs;
+    struct dp_vs_laddr_entry laddrs[0];
+};
+
+#endif /* __DPVS_LADDR_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/neigh.h b/tools/keepalived/keepalived/include/conf/neigh.h
new file mode 100644
index 000000000..fca935c79
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/neigh.h
@@ -0,0 +1,86 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_ROUTE_CONF_H__
+#define __DPVS_ROUTE_CONF_H__
+
+#include <arpa/inet.h>
+#include <net/if.h>
+#include "inet.h"
+
+enum {
+    /* get */
+    SOCKOPT_GET_NEIGH_SHOW = 600,
+
+    /* set */
+    SOCKOPT_SET_NEIGH_ADD,
+    SOCKOPT_SET_NEIGH_DEL,
+};
+
+enum {
+    DPVS_NUD_S_NONE        = 0, 
+    DPVS_NUD_S_SEND,
+    DPVS_NUD_S_REACHABLE,
+    DPVS_NUD_S_PROBE,
+    DPVS_NUD_S_DELAY,
+    DPVS_NUD_S_MAX /*Reserved*/
+};
+
+struct dp_vs_neigh_conf {
+    int               af;
+    uint8_t           flag;
+    uint32_t          state;
+    union inet_addr   ip_addr;
+    struct ether_addr eth_addr;
+    uint32_t          que_num;
+    char              ifname[IFNAMSIZ];
+    uint8_t           cid;
+}__attribute__((__packed__));
+
+struct dp_vs_neigh_conf_array {
+    int  neigh_nums;
+    struct dp_vs_neigh_conf addrs[0];
+}__attribute__((__packed__));
+
+#define sNNO DPVS_NUD_S_NONE
+#define sNSD DPVS_NUD_S_SEND
+#define sNRE DPVS_NUD_S_REACHABLE
+#define sNPR DPVS_NUD_S_PROBE
+#define sNDE DPVS_NUD_S_DELAY
+
+#define DPVS_NUD_S_KEEP DPVS_NUD_S_MAX
+#define sNKP DPVS_NUD_S_KEEP /*Keep state and do not reset timer*/
+
+static const char *nud_state_names[] = {
+    [DPVS_NUD_S_NONE]      = "NONE",
+    [DPVS_NUD_S_SEND]      = "SEND",
+    [DPVS_NUD_S_REACHABLE] = "REACHABLE",
+    [DPVS_NUD_S_PROBE]     = "PROBE",
+    [DPVS_NUD_S_DELAY]     = "DELAY",
+};
+
+static inline const char *nud_state_name(int state)
+{
+    if (state >= DPVS_NUD_S_KEEP)
+         return "ERR!";
+    return nud_state_names[state] ? nud_state_names[state] :"<Unknown>";
+}
+
+#define NEIGHBOUR_HASHED     0x01
+#define NEIGHBOUR_STATIC     0x02
+
+#endif 
diff --git a/tools/keepalived/keepalived/include/conf/netif.h b/tools/keepalived/keepalived/include/conf/netif.h
new file mode 100644
index 000000000..ed4e6c813
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/netif.h
@@ -0,0 +1,281 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __NETIF_CONF_H__
+#define __NETIF_CONF_H__
+#include <linux/if_ether.h>
+#include <net/if.h>
+
+#define NETIF_MAX_PORTS     4096
+
+/*** type from dpdk.h ***
+ * All types defined here must be the same as in dpdk.h,
+ * error would occur otherwise */
+
+#define RTE_ETHDEV_QUEUE_STAT_CNTRS     16
+#define NETIF_MAX_BOND_SLAVES           32
+
+typedef uint8_t lcoreid_t;
+typedef uint16_t portid_t;
+typedef uint16_t queueid_t;
+
+/*** end of type from dpdk.h ***/
+
+enum {
+    /* get */
+    SOCKOPT_NETIF_GET_LCORE_MASK = 500,
+    SOCKOPT_NETIF_GET_LCORE_BASIC,
+    SOCKOPT_NETIF_GET_LCORE_STATS,
+    SOCKOPT_NETIF_GET_PORT_LIST,
+    SOCKOPT_NETIF_GET_PORT_BASIC,
+    SOCKOPT_NETIF_GET_PORT_STATS,
+    SOCKOPT_NETIF_GET_PORT_EXT_INFO,
+    SOCKOPT_NETIF_GET_BOND_STATUS,
+    SOCKOPT_NETIF_GET_MAX,
+    /* set */
+    SOCKOPT_NETIF_SET_LCORE = 500,
+    SOCKOPT_NETIF_SET_PORT,
+    SOCKOPT_NETIF_SET_BOND,
+    SOCKOPT_NETIF_SET_MAX,
+};
+
+/* all lcores in use */
+typedef struct netif_lcore_mask_get
+{
+    lcoreid_t master_lcore_id;
+    uint8_t slave_lcore_num;
+    uint8_t isol_rx_lcore_num;
+    uint64_t slave_lcore_mask;
+    uint64_t isol_rx_lcore_mask;
+} netif_lcore_mask_get_t;
+
+/* basic lcore info specified by lcore_id  */
+typedef struct netif_lcore_basic_get
+{
+    lcoreid_t lcore_id;
+    uint8_t socket_id;
+    uint32_t queue_data_len;
+    char queue_data[0];
+} netif_lcore_basic_get_t;
+
+/* statistics info of lcore_id */
+typedef struct netif_lcore_stats_get
+{
+    lcoreid_t lcore_id;
+    uint64_t lcore_loop;
+    uint64_t pktburst;
+    uint64_t zpktburst;
+    uint64_t fpktburst;
+    uint64_t z2hpktburst;
+    uint64_t h2fpktburst;
+    uint64_t ipackets;
+    uint64_t ibytes;
+    uint64_t opackets;
+    uint64_t obytes;
+    uint64_t dropped; // software packet drop
+} netif_lcore_stats_get_t;
+
+struct port_id_name
+{
+    portid_t id;
+    char name[IFNAMSIZ];
+} __attribute__((__packed__));
+
+/* all nics in use */
+typedef struct netif_nic_list_get
+{
+    uint16_t nic_num;
+    portid_t phy_pid_base;
+    portid_t phy_pid_end;
+    portid_t bond_pid_base;
+    portid_t bond_pid_end;
+    struct port_id_name idname[0];
+} netif_nic_list_get_t;
+
+/* basic nic info specified by port_id */
+typedef struct netif_nic_basic_get
+{
+    portid_t port_id;
+    char name[32];
+    uint8_t nrxq;
+    uint8_t ntxq;
+    char addr[32];
+    uint8_t socket_id;
+    uint16_t mtu;
+    uint32_t link_speed; /* ETH_SPEED_NUM_ */
+    char link_status[16];
+    char link_duplex[16];
+    char link_autoneg[16];
+    uint16_t promisc:1; /* promiscuous mode */
+    uint16_t fwd2kni:1;
+    uint16_t tc_egress:1;
+    uint16_t tc_ingress:1;
+    uint16_t ol_rx_ip_csum:1;
+    uint16_t ol_tx_ip_csum:1;
+    uint16_t ol_tx_tcp_csum:1;
+    uint16_t ol_tx_udp_csum:1;
+} netif_nic_basic_get_t;
+
+/* nic statistics specified by port_id */
+typedef struct netif_nic_stats_get {
+    portid_t port_id;
+    uint32_t mbuf_avail;/* Number of available mbuf in pktmempool */
+    uint32_t mbuf_inuse;/* Number of used mbuf in pktmempool */
+    uint64_t ipackets;  /* Total number of successfully received packets. */
+    uint64_t opackets;  /* Total number of successfully transmitted packets.*/
+    uint64_t ibytes;    /* Total number of successfully received bytes. */
+    uint64_t obytes;    /* Total number of successfully transmitted bytes. */
+    uint64_t imissed;
+    /* Total of RX packets dropped by the HW,
+     * because there are no available mbufs (i.e. RX queues are full). */
+    uint64_t ierrors;   /* Total number of erroneous received packets. */
+    uint64_t oerrors;   /* Total number of failed transmitted packets. */
+    uint64_t rx_nombuf; /* Total number of RX mbuf allocation failures. */
+    uint64_t q_ipackets[RTE_ETHDEV_QUEUE_STAT_CNTRS];
+    /* Total number of queue RX packets. */
+    uint64_t q_opackets[RTE_ETHDEV_QUEUE_STAT_CNTRS];
+    /* Total number of queue TX packets. */
+    uint64_t q_ibytes[RTE_ETHDEV_QUEUE_STAT_CNTRS];
+    /* Total number of successfully received queue bytes. */
+    uint64_t q_obytes[RTE_ETHDEV_QUEUE_STAT_CNTRS];
+    /* Total number of successfully transmitted queue bytes. */
+    uint64_t q_errors[RTE_ETHDEV_QUEUE_STAT_CNTRS];
+    /* Total number of queue packets received that are dropped. */
+} netif_nic_stats_get_t;
+
+/* dev info specified by port_id */
+struct netif_nic_dev_get
+{
+    char pci_addr[32]; /* pci address */
+    char driver_name[32]; /* device driver name */
+    uint32_t if_index; /* index to bound host interface, or 0 if none */
+    uint32_t min_rx_bufsize; /* minimum size of RX buffer */
+    uint32_t max_rx_pktlen; /* maximum configurable length of RX pkt */
+    uint16_t max_rx_queues; /* maximum number of RX queues */
+    uint16_t max_tx_queues; /* maximum number of TX queues */
+    uint32_t max_mac_addrs; /* maximum number of MAC addressses */
+    uint32_t max_hash_mac_addrs; /* maximum number of hash MAC addresses for MTA and UTA */
+    uint16_t max_vfs; /* maximum unmber of VFs */
+    uint16_t max_vmdq_pools;/* maximum number of VMDq pools */
+    uint32_t rx_offload_capa; /* device RX offload capabilities */
+    uint32_t tx_offload_capa; /* device TX offload capabilities */
+    uint32_t reta_size; /* device redirection table size ,the toatal number of entries */
+    uint8_t hash_key_size; /* Hash key size in bytes */
+    uint64_t flow_type_rss_offloads;
+    /* bit mask of RSS offloads, the bit offset also means flow type*/
+    uint16_t vmdq_queue_base; /* first queue ID for VMDQ pools */
+    uint16_t vmdq_queue_num; /* queue number ofr VMDQ pools */
+    uint16_t vmdq_pool_base; /* first ID of VMDQ pools */
+    uint16_t rx_desc_lim_nb_max; /* max allowed number of rx descriptors */
+    uint16_t rx_desc_lim_nb_min; /* min allowed number of rx descriptors */
+    uint16_t rx_desc_lim_nb_align; /* number of rx desciptors should be aligned to */
+    uint16_t tx_desc_lim_nb_max; /* max allowed number of tx descriptors */
+    uint16_t tx_desc_lim_nb_min; /* min allowed number of tx descriptors */
+    uint16_t tx_desc_lim_nb_align; /* number of tx desciptors should be aligned to */
+    uint32_t speed_capa; /* supported speed bitmap (ETH_LINK_SPEED_) */
+} __attribute__((__packed__));
+
+struct netif_nic_conf_queues
+{
+    size_t data_offset;
+    size_t data_len;
+} __attribute__((__packed__));
+
+struct netif_mc_list_conf {
+    size_t              data_offset;
+    size_t              data_len;
+    int                 naddr;
+} __attribute__((__packed__));
+
+typedef struct netif_nic_ext_get
+{
+    portid_t port_id;
+    struct netif_nic_dev_get dev_info;
+    struct netif_nic_conf_queues cfg_queues;
+    struct netif_mc_list_conf mc_list;
+    size_t datalen;
+    char data[0]; /* data string format: cfg_queues\0mc_list\0 */
+} netif_nic_ext_get_t;
+
+struct bond_slave_node {
+    char name[32];
+    char macaddr[32];
+    int is_active;
+    int is_primary;
+};
+
+typedef struct netif_bond_status_get {
+    int mode;
+    int slave_nb;
+    int active_nb;
+    struct bond_slave_node slaves[NETIF_MAX_BOND_SLAVES];
+    char macaddr[32];
+    char xmit_policy[32];
+    int link_monitor_interval;
+    int link_down_prop_delay;
+    int link_up_prop_delay;
+} netif_bond_status_get_t;
+
+/* lcore configure struct */
+typedef struct netif_lcore_set {
+    lcoreid_t cid;
+} netif_lcore_set_t;
+
+/* port configure struct */
+typedef struct netif_nic_set {
+    char pname[32];
+    char macaddr[18];
+    uint16_t promisc_on:1;
+    uint16_t promisc_off:1;
+    uint16_t link_status_up:1;
+    uint16_t link_status_down:1;
+    uint16_t forward2kni_on:1;
+    uint16_t forward2kni_off:1;
+    uint16_t tc_egress_on:1;
+    uint16_t tc_egress_off:1;
+    uint16_t tc_ingress_on:1;
+    uint16_t tc_ingress_off:1;
+} netif_nic_set_t;
+
+typedef struct netif_bond_set {
+    char name[32];
+    union {
+        int mode;
+        char slave[32];
+        char primary[32];
+        char xmit_policy[32];
+        int link_monitor_interval;
+        int link_down_prop;
+        int link_up_prop;
+    } param;
+    enum {
+        ACT_ADD = 1,
+        ACT_DEL,
+        ACT_SET,
+    } act;
+    enum {
+        OPT_MODE = 1,
+        OPT_SLAVE,
+        OPT_PRIMARY,
+        OPT_XMIT_POLICY,
+        OPT_LINK_MONITOR_INTERVAL,
+        OPT_LINK_DOWN_PROP,
+        OPT_LINK_UP_PROP,
+    } opt;
+} netif_bond_set_t;
+
+#endif
diff --git a/tools/keepalived/keepalived/include/conf/route.h b/tools/keepalived/keepalived/include/conf/route.h
new file mode 100644
index 000000000..60fea80f7
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/route.h
@@ -0,0 +1,79 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+/**
+ * Note: control plane only
+ * based on dpvs_sockopt.
+ */
+#ifndef __DPVS_ROUTE_CONF_H__
+#define __DPVS_ROUTE_CONF_H__
+#include "inet.h"
+#include "net/if.h"
+#include "flow.h"
+
+enum {
+    /* set */
+    SOCKOPT_SET_ROUTE_ADD   = 300,
+    SOCKOPT_SET_ROUTE_DEL,
+    SOCKOPT_SET_ROUTE_SET,
+    SOCKOPT_SET_ROUTE_FLUSH,
+
+    /* get */
+    SOCKOPT_GET_ROUTE_SHOW,
+};
+
+enum {
+    ROUTE_CF_SCOPE_NONE     = 0,
+    ROUTE_CF_SCOPE_HOST,
+    ROUTE_CF_SCOPE_KNI,
+    ROUTE_CF_SCOPE_LINK,
+    ROUTE_CF_SCOPE_GLOBAL,
+};
+
+enum {
+    ROUTE_CF_PROTO_AUTO     = 0,
+    ROUTE_CF_PROTO_BOOT,
+    ROUTE_CF_PROTO_STATIC,
+    ROUTE_CF_PROTO_RA,
+    ROUTE_CF_PROTO_REDIRECT,
+};
+
+enum {
+    ROUTE_CF_FLAG_ONLINK,
+};
+
+struct dp_vs_route_conf {
+    int             af;
+    union inet_addr dst;    /* all-zero for default */
+    uint8_t         plen;   /* prefix length */
+    union inet_addr via;
+    union inet_addr src;
+    char            ifname[IFNAMSIZ];
+    uint32_t        mtu;
+    uint8_t         tos;
+    uint8_t         scope;
+    uint8_t         metric;
+    uint8_t         proto;  /* routing protocol */
+    uint32_t        flags;
+} __attribute__((__packed__));
+
+struct dp_vs_route_conf_array {
+    int                 nroute;
+    struct dp_vs_route_conf   routes[0];
+} __attribute__((__packed__));
+
+#endif /* __DPVS_ROUTE_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/route6.h b/tools/keepalived/keepalived/include/conf/route6.h
new file mode 100644
index 000000000..b85dee151
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/route6.h
@@ -0,0 +1,56 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2018 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+
+#ifndef __DPVS_ROUTE6_CONF_H__
+#define __DPVS_ROUTE6_CONF_H__
+
+#include "flow.h"
+
+enum {
+    /* set */
+    SOCKOPT_SET_ROUTE6_ADD_DEL  = 6300,
+    SOCKOPT_SET_ROUTE6_FLUSH,
+
+    /* get */
+    SOCKOPT_GET_ROUTE6_SHOW     = 6300,
+};
+
+enum {
+    RT6_OPS_GET = 1,
+    RT6_OPS_ADD,
+    RT6_OPS_DEL,
+    RT6_OPS_FLUSH,
+};
+
+struct dp_vs_route6_conf {
+    int                 ops;
+    struct rt6_prefix   dst;
+    struct rt6_prefix   src;
+    struct rt6_prefix   prefsrc;
+    char                ifname[IFNAMSIZ];
+    struct in6_addr     gateway;
+    uint32_t            mtu;
+    uint32_t            flags;
+} __attribute__((__packed__));
+
+struct dp_vs_route6_conf_array {
+    int                         nroute;
+    struct dp_vs_route6_conf    routes[0];
+} __attribute__((__packed__));
+
+#endif /* __DPVS_ROUTE6_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/tc.h b/tools/keepalived/keepalived/include/conf/tc.h
new file mode 100644
index 000000000..16d32d297
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/tc.h
@@ -0,0 +1,139 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+/**
+ * traffic control config.
+ * see iproute2 tc modules.
+ *
+ * raychen@qiyi.com, Aug. 2017, initial.
+ */
+#ifndef __DPVS_TC_CONF_H__
+#define __DPVS_TC_CONF_H__
+
+#include <linux/pkt_sched.h>
+#include "tc/tc.h"
+#include "tc/sch.h"
+#include "tc/cls.h"
+
+typedef enum {
+    /* set */
+    SOCKOPT_TC_ADD = 900,
+    SOCKOPT_TC_DEL,
+    SOCKOPT_TC_CHANGE,
+    SOCKOPT_TC_REPLACE,
+
+    /* get */
+    SOCKOPT_TC_SHOW = 900,
+} tc_oper_t;
+
+typedef enum {
+    TC_OBJ_QSCH,
+    TC_OBJ_CLS,
+} tc_obj_t;
+
+/**
+ * scheduler section
+ */
+struct tc_qsch_param {
+    tc_handle_t     handle;
+    tc_handle_t     where;              /* TC_H_ROOT | TC_H_INGRESS | parent */
+    char            kind[TCNAMESIZ];    /* qsch type: bfifo, tbf, ... */
+
+    union {
+        struct tc_tbf_qopt tbf;
+        struct tc_fifo_qopt fifo;
+        struct tc_prio_qopt prio;       /* pfifo_fast ... */
+    } qopt;
+
+    /* get only */
+    struct qsch_qstats qstats;
+    struct qsch_bstats bstats;
+
+    /* master only, to fill stats from workers. */
+    struct qsch_qstats qstats_cpus[DPVS_MAX_LCORE];
+    struct qsch_bstats bstats_cpus[DPVS_MAX_LCORE];
+} __attribute__((__packed__));
+
+struct tc_qsch_stats {
+    struct qsch_qstats qstats;
+    struct qsch_bstats bstats;
+} __attribute__((__packed__));
+
+/**
+ * classifier section
+ */
+struct tc_cls_param {
+    tc_handle_t     sch_id;             /* ID of Qsch attached to */
+    tc_handle_t     handle;             /* or class-id */
+    char            kind[TCNAMESIZ];    /* tc_cls type: "match", ... */
+    __be16          pkt_type;           /* ETH_P_XXX */
+    int             priority;
+
+    union {
+        struct tc_cls_match_copt match;
+    } copt;
+} __attribute__((__packed__));
+
+/**
+ * general section
+ */
+union tc_param {
+    struct tc_qsch_param qsch;
+    struct tc_cls_param cls;
+} __attribute__((__packed__));
+
+struct tc_conf {
+    tc_obj_t        obj;                /* schedler, classifier, ... */
+    char            ifname[IFNAMSIZ];
+    union tc_param  param;              /* object specific parameters */
+} __attribute__((__packed__));
+
+static inline tc_handle_t tc_handle_atoi(const char *handle)
+{
+    uint32_t maj, min;
+
+    if (sscanf(handle, "%x:%x", &maj, &min) == 2)
+        return (maj << 16) | min;
+
+    if (sscanf(handle, "%x:", &maj) == 1)
+        return (maj << 16);
+
+    return TC_H_UNSPEC;
+}
+
+static inline char *tc_handle_itoa(tc_handle_t handle, char *buf, size_t size)
+{
+    switch (handle) {
+    case TC_H_ROOT:
+        snprintf(buf, size, "%s", "root");
+        break;
+    case TC_H_INGRESS:
+        snprintf(buf, size, "%s", "ingress");
+        break;
+    default:
+        if (TC_H_MIN(handle))
+            snprintf(buf, size, "%x:%x",
+                     TC_H_MAJ(handle) >> 16, TC_H_MIN(handle));
+        else
+            snprintf(buf, size, "%x:", TC_H_MAJ(handle) >> 16);
+        break;
+    }
+
+    return buf;
+}
+
+#endif /* __DPVS_TC_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/vlan.h b/tools/keepalived/keepalived/include/conf/vlan.h
new file mode 100644
index 000000000..d4b9d6841
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/vlan.h
@@ -0,0 +1,46 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_VLAN_CONF_H__
+#define __DPVS_VLAN_CONF_H__
+#include <stdint.h>
+#include <net/if.h>
+#include "vlan.h"
+
+enum {
+    /* set */
+    SOCKOPT_SET_VLAN_ADD    = 800,
+    SOCKOPT_SET_VLAN_DEL,
+
+    /* get */
+    SOCKOPT_GET_VLAN_SHOW,
+};
+
+struct vlan_param {
+    char        real_dev[IFNAMSIZ]; /* underlying device name */
+    char        ifname[IFNAMSIZ];   /* vlan device name, e.g., dpdk0.100
+                                       leave it empty auto-generate when add. */
+    uint16_t    vlan_proto;         /* ETH_P_8021Q ... */
+    uint16_t    vlan_id;            /* host byte order */
+} __attribute__((__packed__));
+
+struct vlan_param_array {
+    int         nparam;
+    struct vlan_param params[0];
+};
+
+#endif /* __DPVS_VLAN_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/daemon.h b/tools/keepalived/keepalived/include/daemon.h
index 43bc5b4a5..0257c6f3a 100644
--- a/tools/keepalived/keepalived/include/daemon.h
+++ b/tools/keepalived/keepalived/include/daemon.h
@@ -17,23 +17,16 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _DAEMON_H
 #define _DAEMON_H
 
 /* System includes */
-#include <stdio.h>
-#include <stdlib.h>
-#include <sys/stat.h>
-#include <sys/wait.h>
-#include <sys/types.h>
-#include <unistd.h>
-#include <errno.h>
-#include <fcntl.h>
+#include <stdbool.h>
 
 /* prototype */
-extern pid_t xdaemon(int, int, int);
+extern pid_t xdaemon(bool, bool, bool);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/dp_vs.h b/tools/keepalived/keepalived/include/dp_vs.h
new file mode 100644
index 000000000..2bf81bb95
--- /dev/null
+++ b/tools/keepalived/keepalived/include/dp_vs.h
@@ -0,0 +1,35 @@
+#ifndef _DP_VS_H
+#define _DP_VS_H
+
+#include <netinet/in.h>
+#include "conf/route.h"
+#include "conf/route6.h"
+#include "conf/inetaddr.h"
+#include "conf/laddr.h"
+#include "conf/blklst.h"
+#include "conf/conn.h"
+#include "conf/ip_tunnel.h"
+#include "ipvs/service.h"
+#include "ipvs/dest.h"
+
+enum{
+    DPVS_SO_SET_FLUSH = 200,
+    DPVS_SO_SET_ZERO,
+    DPVS_SO_SET_ADD,
+    DPVS_SO_SET_EDIT,
+    DPVS_SO_SET_DEL,
+    DPVS_SO_SET_ADDDEST,
+    DPVS_SO_SET_EDITDEST,
+    DPVS_SO_SET_DELDEST,
+    DPVS_SO_SET_GRATARP,
+};
+
+enum{
+    DPVS_SO_GET_VERSION = 200,
+    DPVS_SO_GET_INFO,
+    DPVS_SO_GET_SERVICES,
+    DPVS_SO_GET_SERVICE,
+    DPVS_SO_GET_DESTS,
+};
+
+#endif
diff --git a/tools/keepalived/keepalived/include/flow.h b/tools/keepalived/keepalived/include/flow.h
new file mode 100644
index 000000000..849ce9c06
--- /dev/null
+++ b/tools/keepalived/keepalived/include/flow.h
@@ -0,0 +1,122 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2018 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+/**
+ * flow for IPv4/IPv6 route lookup.
+ * Linux Kernel is referred.
+ *
+ * Lei Chen <raychen@qiyi.com>, initial, Jul 2018.
+ */
+#ifndef __DPVS_FLOW_H__
+#define __DPVS_FLOW_H__
+
+#include "common.h"
+#include "conf/netif.h"
+#include "inet.h"
+
+/* linux:include/uapi/route.h */
+#define RTF_UP          0x0001      /* route usable                 */
+#define RTF_GATEWAY     0x0002      /* destination is a gateway     */
+#define RTF_HOST        0x0004      /* host entry (net otherwise)   */
+#define RTF_REINSTATE   0x0008      /* reinstate route after tmout  */
+#define RTF_DYNAMIC     0x0010      /* created dyn. (by redirect)   */
+#define RTF_MODIFIED    0x0020      /* modified dyn. (by redirect)  */
+#define RTF_MTU         0x0040      /* specific MTU for this route  */
+#define RTF_MSS         RTF_MTU     /* Compatibility :-(            */
+#define RTF_WINDOW      0x0080      /* per route window clamping    */
+#define RTF_IRTT        0x0100      /* Initial round trip time      */
+#define RTF_REJECT      0x0200      /* Reject route                 */
+
+/* dpvs defined. */
+#define RTF_FORWARD     0x0400
+#define RTF_LOCALIN     0x0800
+#define RTF_DEFAULT     0x1000
+#define RTF_KNI         0X2000
+#define RTF_OUTWALL     0x4000
+
+struct rt6_prefix {
+    struct in6_addr     addr;
+    int                 plen;
+};
+
+/* common flow info of upper layer (l4) */
+union flow_ul {
+    struct {
+        __be16          dport;
+        __be16          sport;
+    } ports;
+
+    struct {
+        __u8            type;
+        __u8            code;
+    } icmpt;
+
+    __be32              gre_key;
+};
+
+/* common flow info */
+struct flow_common {
+    struct netif_port   *flc_oif;
+    struct netif_port   *flc_iif;
+    uint8_t             flc_tos;
+    uint8_t             flc_proto;
+    uint8_t             flc_scope;
+    uint8_t             flc_ttl;
+    uint32_t            flc_mark;
+    uint32_t            flc_flags;
+};
+
+struct flow4 {
+    struct flow_common  __fl_common;
+#define fl4_oif         __fl_common.flc_oif
+#define fl4_iif         __fl_common.flc_iif
+#define fl4_tos         __fl_common.flc_tos
+#define fl4_proto       __fl_common.flc_proto
+#define fl4_scope       __fl_common.flc_scope
+#define fl4_ttl         __fl_common.flc_ttl
+#define fl4_mark        __fl_common.flc_mark
+#define fl4_flags       __fl_common.flc_flags
+
+    struct in_addr      fl4_saddr;
+    struct in_addr      fl4_daddr;
+
+    union flow_ul       __fl_ul;
+#define fl4_sport       __fl_ul.ports.sport
+#define fl4_dport       __fl_ul.ports.dport
+};
+
+struct flow6 {
+    struct flow_common  __fl_common;
+#define fl6_oif         __fl_common.flc_oif
+#define fl6_iif         __fl_common.flc_iif
+#define fl6_tos         __fl_common.flc_tos
+#define fl6_proto       __fl_common.flc_proto
+#define fl6_scope       __fl_common.flc_scope
+#define fl6_ttl         __fl_common.flc_ttl
+#define fl6_mark        __fl_common.flc_mark
+#define fl6_flags       __fl_common.flc_flags
+
+    struct in6_addr     fl6_daddr;
+    struct in6_addr     fl6_saddr;
+    __be32              fl6_flow;
+
+    union flow_ul       __fl_ul;
+#define fl6_sport       __fl_ul.ports.sport
+#define fl6_dport       __fl_ul.ports.dport
+};
+
+#endif /* __DPVS_FLOW_H__ */
diff --git a/tools/keepalived/keepalived/include/global_data.h b/tools/keepalived/keepalived/include/global_data.h
index 3e429da9f..25b5f49c1 100644
--- a/tools/keepalived/keepalived/include/global_data.h
+++ b/tools/keepalived/keepalived/include/global_data.h
@@ -17,55 +17,271 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _GLOBAL_DATA_H
 #define _GLOBAL_DATA_H
 
+#include "config.h"
+
 /* system includes */
-#include <stdlib.h>
-#include <string.h>
-#include <stdint.h>
+#include <stdbool.h>
+#include <stdio.h>
+#include <sys/socket.h>
+
+#ifdef _HAVE_SCHED_RT_
+#include <sched.h>
+#endif
+
+#ifdef HAVE_LINUX_NETFILTER_X_TABLES_H
+#include <linux/netfilter/x_tables.h>
+#endif
+
+#ifdef _HAVE_LIBIPSET_
+#include <linux/netfilter/ipset/ip_set.h>
+#endif
+
+#ifdef _WITH_NFTABLES_
+#include <linux/netfilter/nf_tables.h>
+#endif
+
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+#include <sys/resource.h>
+#endif
 
 /* local includes */
 #include "list.h"
+#include "vrrp_if.h"
 #include "timer.h"
+#ifdef _WITH_VRRP_
+#include "vrrp.h"
+#endif
+#ifdef _WITH_LVS_
+#include "ipvswrapper.h"
+#endif
+#include "notify.h"
+
+#ifndef _HAVE_LIBIPTC_
+#define	XT_EXTENSION_MAXNAMELEN		29
+#endif
 
 /* constants */
-#define DEFAULT_SMTP_SERVER 0x7f000001
 #define DEFAULT_SMTP_CONNECTION_TIMEOUT (30 * TIMER_HZ)
-#define DEFAULT_PLUGIN_DIR "/etc/keepalived/plugins"
+
+#ifdef _WITH_VRRP_
+#define RX_BUFS_POLICY_MTU		0x01
+#define RX_BUFS_POLICY_ADVERT		0x02
+#define RX_BUFS_SIZE			0x04
+#endif
 
 /* email link list */
 typedef struct _email {
 	char				*addr;
 } email_t;
 
+#ifdef _WITH_LVS_
+typedef enum {
+	LVS_NO_FLUSH,
+	LVS_FLUSH_FULL,
+	LVS_FLUSH_VS
+} lvs_flush_t;
+#endif
+
 /* Configuration data root */
 typedef struct _data {
-	int				linkbeat_use_polling;
-	char				*router_id;
-	char				*plugin_dir;
-	char				*email_from;
+	const char 			*process_name;
+#ifdef _WITH_VRRP_
+	const char			*vrrp_process_name;
+#endif
+#ifdef _WITH_LVS_
+	const char			*lvs_process_name;
+#endif
+#ifdef _WITH_BFD_
+	const char			*bfd_process_name;
+#endif
+#if HAVE_DECL_CLONE_NEWNET
+	const char			*network_namespace;	/* network namespace name */
+	bool				namespace_with_ipsets;	/* override for namespaces with ipsets on Linux < 3.13 */
+#endif
+	const char			*local_name;
+	const char			*instance_name;		/* keepalived instance name */
+#ifdef _WITH_LINKBEAT_
+	bool				linkbeat_use_polling;
+#endif
+	const char			*router_id;
+	const char			*email_from;
 	struct sockaddr_storage		smtp_server;
-	long				smtp_connection_to;
+	const char			*smtp_helo_name;
+	unsigned long			smtp_connection_to;
 	list				email;
-	struct sockaddr_storage		vrrp_mcast_group4;
-	struct sockaddr_storage		vrrp_mcast_group6;
+	int				smtp_alert;
+#ifdef _WITH_VRRP_
+	bool				dynamic_interfaces;
+	bool				allow_if_changes;
+	bool				no_email_faults;
+	int				smtp_alert_vrrp;
+	const char			*default_ifname;	/* Name of default interface */
+	interface_t			*default_ifp;		/* Default interface for static addresses */
+#endif
+#ifdef _WITH_LVS_
+	int				lvs_tcp_timeout;
+	int				lvs_tcpfin_timeout;
+	int				lvs_udp_timeout;
+	int				smtp_alert_checker;
+	bool				checker_log_all_failures;
+#ifdef _WITH_VRRP_
+	struct lvs_syncd_config		lvs_syncd;
+#endif
+	bool				lvs_flush;		/* flush any residual LVS config at startup */
+	lvs_flush_t			lvs_flush_onstop;	/* flush any LVS config at shutdown */
+#endif
+#ifdef _WITH_VRRP_
+	struct sockaddr_in		vrrp_mcast_group4;
+	struct sockaddr_in6		vrrp_mcast_group6;
+	unsigned			vrrp_garp_delay;
+	timeval_t			vrrp_garp_refresh;
+	unsigned			vrrp_garp_rep;
+	unsigned			vrrp_garp_refresh_rep;
+	unsigned			vrrp_garp_lower_prio_delay;
+	unsigned			vrrp_garp_lower_prio_rep;
+	unsigned			vrrp_garp_interval;
+	unsigned			vrrp_gna_interval;
+	bool				vrrp_lower_prio_no_advert;
+	bool				vrrp_higher_prio_send_advert;
+	int				vrrp_version;		/* VRRP version (2 or 3) */
+#ifdef _WITH_IPTABLES_
+	char				vrrp_iptables_inchain[XT_EXTENSION_MAXNAMELEN];
+	char				vrrp_iptables_outchain[XT_EXTENSION_MAXNAMELEN];
+#ifdef _HAVE_LIBIPSET_
+	bool				using_ipsets;
+	char				vrrp_ipset_address[IPSET_MAXNAMELEN];
+	char				vrrp_ipset_address6[IPSET_MAXNAMELEN];
+	char				vrrp_ipset_address_iface6[IPSET_MAXNAMELEN];
+#ifdef HAVE_IPSET_ATTR_IFACE
+	char				vrrp_ipset_igmp[IPSET_MAXNAMELEN];
+	char				vrrp_ipset_mld[IPSET_MAXNAMELEN];
+#endif
+#endif
+#endif
+#ifdef _WITH_NFTABLES_
+	const char			*vrrp_nf_table_name;
+	int				vrrp_nf_chain_priority;
+	bool				vrrp_nf_counters;
+	bool				vrrp_nf_ifindex;
+	unsigned			nft_version;
+#endif
+	bool				vrrp_check_unicast_src;
+	bool				vrrp_skip_check_adv_addr;
+	bool				vrrp_strict;
+	bool				have_vrrp_config;
+	char				vrrp_process_priority;
+	bool				vrrp_no_swap;
+#ifdef _HAVE_SCHED_RT_
+	unsigned			vrrp_realtime_priority;
+	cpu_set_t			vrrp_cpu_mask;
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+	rlim_t				vrrp_rlimit_rt;
+#endif
+#endif
+#endif
+#ifdef _WITH_LVS_
+	bool				have_checker_config;
+	char				checker_process_priority;
+	bool				checker_no_swap;
+#ifdef _HAVE_SCHED_RT_
+	unsigned			checker_realtime_priority;
+	cpu_set_t			checker_cpu_mask;
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+	rlim_t				checker_rlimit_rt;
+#endif
+#endif
+#endif
+#ifdef _WITH_BFD_
+	bool				have_bfd_config;
+	char				bfd_process_priority;
+	bool				bfd_no_swap;
+#ifdef _HAVE_SCHED_RT_
+	unsigned			bfd_realtime_priority;
+	cpu_set_t			bfd_cpu_mask;
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+	rlim_t				bfd_rlimit_rt;
+#endif
+#endif
+#endif
+	notify_fifo_t			notify_fifo;
+#ifdef _WITH_VRRP_
+	notify_fifo_t			vrrp_notify_fifo;
+#endif
+#ifdef _WITH_LVS_
+	notify_fifo_t			lvs_notify_fifo;
+#endif
+#ifdef _WITH_VRRP_
+	int				vrrp_notify_priority_changes;
+#endif
 #ifdef _WITH_SNMP_
-	int				enable_traps;
+	bool				enable_traps;
+	const char			*snmp_socket;
+#ifdef _WITH_VRRP_
+#ifdef _WITH_SNMP_VRRP_
+	bool				enable_snmp_vrrp;
+#endif
+#ifdef _WITH_SNMP_RFCV2_
+	bool				enable_snmp_rfcv2;
+#endif
+#ifdef _WITH_SNMP_RFCV3_
+	bool				enable_snmp_rfcv3;
+#endif
+#endif
+#ifdef _WITH_LVS_
+	bool				enable_snmp_checker;
+#endif
+#endif
+#ifdef _WITH_DBUS_
+	bool				enable_dbus;
+	const char			*dbus_service_name;
+#endif
+#ifdef _WITH_VRRP_
+	unsigned			vrrp_netlink_cmd_rcv_bufs;
+	bool				vrrp_netlink_cmd_rcv_bufs_force;
+	unsigned			vrrp_netlink_monitor_rcv_bufs;
+	bool				vrrp_netlink_monitor_rcv_bufs_force;
+#ifdef _WITH_CN_PROC_
+	unsigned			process_monitor_rcv_bufs;
+	bool				process_monitor_rcv_bufs_force;
+#endif
+#endif
+#ifdef _WITH_LVS_
+	unsigned			lvs_netlink_cmd_rcv_bufs;
+	bool				lvs_netlink_cmd_rcv_bufs_force;
+	unsigned			lvs_netlink_monitor_rcv_bufs;
+	bool				lvs_netlink_monitor_rcv_bufs_force;
+#endif
+#ifdef _WITH_LVS_
+	bool				rs_init_notifies;
+	bool				no_checker_emails;
+#endif
+#ifdef _WITH_VRRP_
+	int				vrrp_rx_bufs_policy;
+	size_t				vrrp_rx_bufs_size;
+	int				vrrp_rx_bufs_multiples;
+	unsigned			vrrp_startup_delay;
+	bool				log_unknown_vrids;
+#endif
+#ifdef _WITH_LVS_
+	unsigned			checker_queue_num;
 #endif
 } data_t;
 
 /* Global vars exported */
-extern data_t *global_data; /* Global configuration data */
+extern data_t *global_data;	/* Global configuration data */
+extern data_t *old_global_data;	/* Old global configuration data - used during reload */
 
 /* Prototypes */
-extern void alloc_email(char *);
+extern void alloc_email(const char *);
 extern data_t *alloc_global_data(void);
-extern void init_global_data(data_t *);
+extern void init_global_data(data_t *, data_t *, bool);
 extern void free_global_data(data_t *);
-extern void dump_global_data(data_t *);
+extern void dump_global_data(FILE *, data_t *);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/global_parser.h b/tools/keepalived/keepalived/include/global_parser.h
index 0cde4253f..108edd02b 100644
--- a/tools/keepalived/keepalived/include/global_parser.h
+++ b/tools/keepalived/keepalived/include/global_parser.h
@@ -1,10 +1,10 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        vrrp_parser.c include file.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -17,15 +17,18 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2016 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _GLOBAL_PARSER_H
 #define _GLOBAL_PARSER_H
 
-/* local include */
+#include <stdbool.h>
+#include <sys/types.h>
+
+#include "vector.h"
 
 /* Prototypes */
-extern void global_init_keywords(void);
+extern void init_global_keywords(bool);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/inet.h b/tools/keepalived/keepalived/include/inet.h
new file mode 100644
index 000000000..bff82a3ce
--- /dev/null
+++ b/tools/keepalived/keepalived/include/inet.h
@@ -0,0 +1,338 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_INET_H__
+#define __DPVS_INET_H__
+#include <stdio.h>
+#include <stdlib.h>
+#include <stdbool.h>
+#include <string.h>
+#include <netinet/in.h>
+#include <arpa/inet.h>
+#include "common.h"
+
+#define INET_DEF_TTL        64
+
+#define INET_MAX_PROTS      256     /* cannot change */
+
+union inet_addr {
+    struct in_addr      in;
+    struct in6_addr     in6;
+};
+
+struct inet_prefix {
+    int                 plen;
+    union inet_addr     addr;
+};
+
+struct inet_addr_range {
+    union inet_addr     min_addr;
+    union inet_addr     max_addr;
+    __be16              min_port;
+    __be16              max_port;
+};
+
+struct inet_stats {
+    uint64_t inpkts;            /* InReceives */
+    uint64_t inoctets;          /* InOctets */
+    uint64_t indelivers;        /* InDelivers */
+    uint64_t outforwdatagrams;  /* OutForwDatagrams */
+    uint64_t outpkts;           /* OutRequests */
+    uint64_t outoctets;         /* OutOctets */
+    uint64_t inhdrerrors;       /* InHdrErrors */
+    uint64_t intoobigerrors;    /* InTooBigErrors */
+    uint64_t innoroutes;        /* InNoRoutes */
+    uint64_t inaddrerrors;      /* InAddrErrors */
+    uint64_t inunknownprotos;   /* InUnknownProtos */
+    uint64_t intruncatedpkts;   /* InTruncatedPkts */
+    uint64_t indiscards;        /* InDiscards */
+    uint64_t outdiscards;       /* OutDiscards */
+    uint64_t outnoroutes;       /* OutNoRoutes */
+    uint64_t reasmtimeout;      /* ReasmTimeout */
+    uint64_t reasmreqds;        /* ReasmReqds */
+    uint64_t reasmoks;          /* ReasmOKs */
+    uint64_t reasmfails;        /* ReasmFails */
+    uint64_t fragoks;           /* FragOKs */
+    uint64_t fragfails;         /* FragFails */
+    uint64_t fragcreates;       /* FragCreates */
+    uint64_t inmcastpkts;       /* InMcastPkts */
+    uint64_t outmcastpkts;      /* OutMcastPkts */
+    uint64_t inbcastpkts;       /* InBcastPkts */
+    uint64_t outbcastpkts;      /* OutBcastPkts */
+    uint64_t inmcastoctets;     /* InMcastOctets */
+    uint64_t outmcastoctets;    /* OutMcastOctets */
+    uint64_t inbcastoctets;     /* InBcastOctets */
+    uint64_t outbcastoctets;    /* OutBcastOctets */
+    uint64_t csumerrors;        /* InCsumErrors */
+    uint64_t noectpkts;         /* InNoECTPkts */
+    uint64_t ect1pkts;          /* InECT1Pkts */
+    uint64_t ect0pkts;          /* InECT0Pkts */
+    uint64_t cepkts;            /* InCEPkts */
+};
+
+static inline const char *inet_proto_name(uint8_t proto)
+{
+    static const char *proto_names[256] = {
+        [IPPROTO_TCP]     = "TCP",
+        [IPPROTO_UDP]     = "UDP",
+        [IPPROTO_ICMP]    = "ICMP",
+        [IPPROTO_ICMPV6]  = "ICMPV6",
+    };
+
+    return proto_names[proto] ? proto_names[proto] : "<unknow>";
+}
+
+static inline uint32_t inet_addr_fold(int af, const union inet_addr *addr)
+{
+    uint32_t addr_fold = 0; 
+
+    if (af == AF_INET) {
+        addr_fold = addr->in.s_addr;
+    } else if (af == AF_INET6) {
+        addr_fold = addr->in6.s6_addr32[0] ^ addr->in6.s6_addr32[1] ^
+                    addr->in6.s6_addr32[2] ^ addr->in6.s6_addr32[3];
+    } else {
+        return 0;
+    }
+
+    return addr_fold; 
+}
+
+/* ip1[-ip2][:port1[-port2]] */
+static inline int inet_addr_range_parse(const char *param,
+                                        struct inet_addr_range *range,
+                                        int *af)
+{
+    char _param[256], *ips, *ports = NULL;
+    char *ip1, *ip2, *port1, *port2;
+
+    if (strlen(param) == 0)
+        return EDPVS_OK; /* return asap */
+
+    snprintf(_param, sizeof(_param), "%s", param);
+
+    ips = _param;
+    if (_param[0] == '[') {
+        ips++;
+        ports = strrchr(_param, ']');
+        if (ports == NULL)
+            return EDPVS_INVAL;
+        *ports++ = '\0';
+        if (*ports == ':')
+            *ports++ = '\0';
+        else
+            return EDPVS_INVAL;
+    }
+
+    /* judge ipv4 */
+    if (strrchr(_param, ':') == strchr(_param, ':')) {
+        ports = strrchr(_param, ':');
+        if (ports)
+            *ports++ = '\0';
+    }
+
+    ip1 = ips;
+    ip2 = strrchr(ips, '-');
+    if (ip2)
+        *ip2++ = '\0';
+
+    if (ports) {
+        port1 = ports;
+        port2 = strrchr(ports, '-');
+        if (port2)
+            *port2++ = '\0';
+    } else {
+        port1 = port2 = NULL;
+    }
+
+    memset(range, 0, sizeof(*range));
+
+    if (strlen(ip1) && inet_pton(AF_INET6, ip1, &range->min_addr.in6) > 0) {
+        if (ip2 && strlen(ip2)) {
+            if (inet_pton(AF_INET6, ip2, &range->max_addr.in6) <= 0)
+                return EDPVS_INVAL;
+        } else {
+            range->max_addr = range->min_addr;
+        }
+        *af = AF_INET6;
+    } else {
+        if (strlen(ip1) && inet_pton(AF_INET, ip1, &range->min_addr.in) <= 0)
+            return EDPVS_INVAL;
+
+        if (ip2 && strlen(ip2)) {
+           if (inet_pton(AF_INET, ip2, &range->max_addr.in) <= 0)
+               return EDPVS_INVAL;
+        } else {
+            range->max_addr = range->min_addr;
+        }
+        *af = AF_INET;
+    }
+
+    if (port1 && strlen(port1))
+        range->min_port = htons(atoi(port1));
+
+    if (port2 && strlen(port2))
+        range->max_port = htons(atoi(port2));
+    else
+        range->max_port = range->min_port;
+
+    return EDPVS_OK;
+}
+
+static inline int inet_addr_range_dump(int af,
+                                       const struct inet_addr_range *range,
+                                       char *buf, size_t size)
+{
+    char min_ip[64], max_ip[64];
+    char min_port[16], max_port[16];
+
+    inet_ntop(af, &range->min_addr, min_ip, sizeof(min_ip));
+    inet_ntop(af, &range->max_addr, max_ip, sizeof(max_ip));
+    snprintf(min_port, sizeof(min_port), "%u",  ntohs(range->min_port));
+    snprintf(max_port, sizeof(max_port), "%u",  ntohs(range->max_port));
+
+    if (af == AF_INET)
+        return snprintf(buf, size, "%s-%s:%s-%s",
+                    min_ip, max_ip, min_port, max_port);
+    return snprintf(buf, size, "[%s-%s]:%s-%s",
+                    min_ip, max_ip, min_port, max_port);
+}
+
+static inline void inet_stats_dump(const char *title, const char *prefix,
+                                   const struct inet_stats *st)
+{
+    if (!st)
+        return;
+
+    if (title)
+        printf("%s\n", title);
+
+    printf("%s%-18s %lu\n", prefix ? : "", "InReceives:", st->inpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InOctets:", st->inoctets);
+    printf("%s%-18s %lu\n", prefix ? : "", "InDelivers:", st->indelivers);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutForwDatagrams:", st->outforwdatagrams);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutRequests:", st->outpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutOctets:", st->outoctets);
+    printf("%s%-18s %lu\n", prefix ? : "", "InHdrErrors:", st->inhdrerrors);
+    printf("%s%-18s %lu\n", prefix ? : "", "InTooBigErrors:", st->intoobigerrors);
+    printf("%s%-18s %lu\n", prefix ? : "", "InNoRoutes:", st->innoroutes);
+    printf("%s%-18s %lu\n", prefix ? : "", "InAddrErrors:", st->inaddrerrors);
+    printf("%s%-18s %lu\n", prefix ? : "", "InUnknownProtos:", st->inunknownprotos);
+    printf("%s%-18s %lu\n", prefix ? : "", "InTruncatedPkts:", st->intruncatedpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InDiscards:", st->indiscards);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutDiscards:", st->outdiscards);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutNoRoutes:", st->outnoroutes);
+    printf("%s%-18s %lu\n", prefix ? : "", "ReasmTimeout:", st->reasmtimeout);
+    printf("%s%-18s %lu\n", prefix ? : "", "ReasmReqds:", st->reasmreqds);
+    printf("%s%-18s %lu\n", prefix ? : "", "ReasmOKs:", st->reasmoks);
+    printf("%s%-18s %lu\n", prefix ? : "", "ReasmFails:", st->reasmfails);
+    printf("%s%-18s %lu\n", prefix ? : "", "FragOKs:", st->fragoks);
+    printf("%s%-18s %lu\n", prefix ? : "", "FragFails:", st->fragfails);
+    printf("%s%-18s %lu\n", prefix ? : "", "FragCreates:", st->fragcreates);
+    printf("%s%-18s %lu\n", prefix ? : "", "InMcastPkts:", st->inmcastpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutMcastPkts:", st->outmcastpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InBcastPkts:", st->inbcastpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutBcastPkts:", st->outbcastpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InMcastOctets:", st->inmcastoctets);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutMcastOctets:", st->outmcastoctets);
+    printf("%s%-18s %lu\n", prefix ? : "", "InBcastOctets:", st->inbcastoctets);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutBcastOctets:", st->outbcastoctets);
+    printf("%s%-18s %lu\n", prefix ? : "", "InCsumErrors:", st->csumerrors);
+    printf("%s%-18s %lu\n", prefix ? : "", "InNoECTPkts:", st->noectpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InECT1Pkts:", st->ect1pkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InECT0Pkts:", st->ect0pkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InCEPkts:", st->cepkts);
+}
+
+#ifdef __DPVS__
+#include "dpdk.h"
+#include "netif.h"
+/*
+ * Inet Hooks
+ */
+enum {
+    INET_HOOK_PRE_ROUTING,
+    INET_HOOK_LOCAL_IN,
+    INET_HOOK_FORWARD,
+    INET_HOOK_LOCAL_OUT,
+    INET_HOOK_POST_ROUTING,
+    INET_HOOK_NUMHOOKS,
+};
+
+struct inet_hook_state {
+    unsigned int        hook;
+} __rte_cache_aligned;
+
+enum {
+    INET_DROP           = 0,
+    INET_ACCEPT,
+    INET_STOLEN,
+    INET_REPEAT,
+    INET_STOP,
+    INET_VERDICT_NUM,
+};
+
+typedef int (*inet_hook_fn)(void *priv, struct rte_mbuf *mbuf,
+                            const struct inet_hook_state *state);
+
+struct inet_hook_ops {
+    inet_hook_fn        hook;
+    unsigned int        hooknum;
+    int                 af;
+    void                *priv;
+    int                 priority;
+
+    struct list_head    list;
+};
+
+struct netif_port;
+
+int INET_HOOK(int af, unsigned int hook, struct rte_mbuf *mbuf,
+              struct netif_port *in, struct netif_port *out,
+              int (*okfn)(struct rte_mbuf *mbuf));
+
+int inet_init(void);
+int inet_term(void);
+
+bool inet_addr_equal(int af, const union inet_addr *a1, 
+                     const union inet_addr *a2);
+
+const char *inet_proto_name(uint8_t proto);
+
+bool inet_is_addr_any(int af, const union inet_addr *addr);
+
+int inet_plen_to_mask(int af, uint8_t plen, union inet_addr *mask);
+
+int inet_addr_net(int af, const union inet_addr *addr, 
+                  const union inet_addr *mask,
+                  union inet_addr *net);
+
+bool inet_addr_same_net(int af, uint8_t plen,
+                        const union inet_addr *addr1,
+                        const union inet_addr *addr2);
+
+int inet_addr_range_dump(int af, const struct inet_addr_range *range,
+                         char *buf, size_t size);
+
+int inet_register_hooks(struct inet_hook_ops *reg, size_t n);
+int inet_unregister_hooks(struct inet_hook_ops *reg, size_t n);
+
+void inet_stats_add(struct inet_stats *stats, const struct inet_stats *diff);
+
+#endif /* __DPVS__ */
+
+#endif /* __DPVS_INET_H__ */
diff --git a/tools/keepalived/keepalived/libipvs-2.6/ip_vs.h b/tools/keepalived/keepalived/include/ip_vs.h
similarity index 64%
rename from tools/keepalived/keepalived/libipvs-2.6/ip_vs.h
rename to tools/keepalived/keepalived/include/ip_vs.h
index 9c4cd9466..9ba04c4f1 100644
--- a/tools/keepalived/keepalived/libipvs-2.6/ip_vs.h
+++ b/tools/keepalived/keepalived/include/ip_vs.h
@@ -3,29 +3,24 @@
  *      data structure and functionality definitions
  */
 
-#ifndef _IP_VS_H
-#define _IP_VS_H
+#ifndef KEEPALIVED_IP_VS_H
+#define KEEPALIVED_IP_VS_H
 
+/* #include "config.h" */
+
+/* System includes */
+#include <net/if.h>	/* Force inclusion of net/if.h before linux/if.h */
+#include <sys/types.h>
 #include <netinet/in.h>
-#include <sys/socket.h>
-#include <arpa/inet.h>
-#include <linux/types.h>	/* For __beXX types in userland */
+/* Prior to Linux 4.2 have to include linux/in.h and linux/in6.h
+ * or linux/netlink.h to include linux/netfilter.h */
+#include <linux/netfilter.h>	/* For nf_inet_addr */
+#include <stdint.h>
+
+#include <linux/types.h>
 #include <stdbool.h>
 #include "dp_vs.h"
 
-#ifdef LIBIPVS_USE_NL
-#include <netlink/netlink.h>
-#include <netlink/genl/genl.h>
-#include <netlink/genl/ctrl.h>
-#endif
-
-/* Userland compatibility with kernel */
-#define __u32 u_int32_t
-#define __be32 u_int32_t
-#define __u16 u_int16_t
-#define __be16 u_int16_t
-#define __u64 u_int64_t
-
 #define IP_VS_VERSION_CODE	0x010201
 #define NVERSION(version)			\
 	(version >> 16) & 0xFF,			\
@@ -33,33 +28,36 @@
 	version & 0xFF
 
 /*
- *      Virtual Service Flags
- */
+ *  *      Virtual Service Flags
+ *   */
 #define IP_VS_SVC_F_PERSISTENT	0x0001		/* persistent port */
 #define IP_VS_SVC_F_HASHED	0x0002		/* hashed entry */
 #define IP_VS_SVC_F_ONEPACKET	0x0004		/* one-packet scheduling */
 #define IP_VS_CONN_F_SYNPROXY	0x8000		/* synproxy switch flag*/
-#define IP_VS_SVC_F_SCHED1	0x0008		/* scheduler flag 1 */
-#define IP_VS_SVC_F_SCHED2	0x0010		/* scheduler flag 2 */
-#define IP_VS_SVC_F_SCHED3	0x0020		/* scheduler flag 3 */
-
-#define IP_VS_SVC_F_SIP_HASH    0x0100          /* sip hash target */
-#define IP_VS_SVC_F_QID_HASH    0x0200          /* quic cid hash target */
+#define IP_VS_SVC_F_SCHED1 	0x0008
+#define IP_VS_SVC_F_SCHED2 	0x0010
+#define IP_VS_SVC_F_SCHED3 	0x0020
+#define IP_VS_SVC_F_SIP_HASH 	0x0100
+#define IP_VS_SVC_F_QID_HASH 	0x0200
 
 #define IP_VS_SVC_F_SCHED_SH_FALLBACK	IP_VS_SVC_F_SCHED1 /* SH fallback */
 #define IP_VS_SVC_F_SCHED_SH_PORT	IP_VS_SVC_F_SCHED2 /* SH use port */
-
+/*
+ *  *      Destination Server Flags
+ *   */
+#define IP_VS_DEST_F_AVAILABLE	0x0001		/* server is available */
+#define IP_VS_DEST_F_OVERLOAD	0x0002		/* server is overloaded */
 
 /*
- *      IPVS sync daemon states
- */
+ *  *      IPVS sync daemon states
+ *   */
 #define IP_VS_STATE_NONE	0x0000		/* daemon is stopped */
 #define IP_VS_STATE_MASTER	0x0001		/* started as master */
 #define IP_VS_STATE_BACKUP	0x0002		/* started as backup */
 
 /*
- *      IPVS socket options
- */
+ *  *      IPVS socket options
+ *   */
 #define IP_VS_BASE_CTL		(64+1024+64)		/* base */
 
 #define IP_VS_SO_SET_NONE	IP_VS_BASE_CTL		/* just peek */
@@ -84,7 +82,7 @@
 #define IP_VS_SO_SET_DELBLKLST  (IP_VS_BASE_CTL+19)
 #define IP_VS_SO_SET_ADDTUNNEL	 (IP_VS_BASE_CTL+20)
 #define IP_VS_SO_SET_DELTUNNEL	 (IP_VS_BASE_CTL+21)
-#define IP_VS_SO_SET_MAX	IP_VS_SO_SET_DELTUNNEL
+#define IP_VS_SO_SET_MAX	IP_VS_SO_SET_DELBLKLST
 
 #define IP_VS_SO_GET_VERSION	IP_VS_BASE_CTL
 #define IP_VS_SO_GET_INFO	(IP_VS_BASE_CTL+1)
@@ -99,8 +97,9 @@
 
 
 /*
- *      IPVS Connection Flags
- */
+ *  *      IPVS Connection Flags
+ *   *      Only flags 0..15 are sent to backup server
+ *    */
 #define IP_VS_CONN_F_FWD_MASK	0x0007		/* mask for the fwd methods */
 #define IP_VS_CONN_F_MASQ	0x0000		/* masquerading/NAT */
 #define IP_VS_CONN_F_LOCALNODE	0x0001		/* local node */
@@ -109,7 +108,6 @@
 #define IP_VS_CONN_F_BYPASS	0x0004		/* cache bypass */
 #define IP_VS_CONN_F_FULLNAT	0x0005		/* full nat mode */
 #define IP_VS_CONN_F_SNAT	0x0006		/* SNAT mode */
-
 #define IP_VS_CONN_F_SYNC	0x0020		/* entry created by sync */
 #define IP_VS_CONN_F_HASHED	0x0040		/* hashed entry */
 #define IP_VS_CONN_F_NOOUTPUT	0x0080		/* no output packets */
@@ -121,70 +119,53 @@
 #define IP_VS_CONN_F_TEMPLATE	0x1000		/* template, not connection */
 #define IP_VS_CONN_F_ONE_PACKET	0x2000		/* forward only one packet */
 
-#define IP_VS_SCHEDNAME_MAXLEN	16
-#define IP_VS_PENAME_MAXLEN	16
-#define IP_VS_IFNAME_MAXLEN	16
+/* Initial bits allowed in backup server */
+#define IP_VS_CONN_F_BACKUP_MASK (IP_VS_CONN_F_FWD_MASK | \
+				  IP_VS_CONN_F_NOOUTPUT | \
+				  IP_VS_CONN_F_INACTIVE | \
+				  IP_VS_CONN_F_SEQ_MASK | \
+				  IP_VS_CONN_F_NO_CPORT | \
+				  IP_VS_CONN_F_TEMPLATE \
+				 )
 
-#define IP_VS_PEDATA_MAXLEN	255
+/* Bits allowed to update in backup server */
+#define IP_VS_CONN_F_BACKUP_UPD_MASK (IP_VS_CONN_F_INACTIVE | \
+				      IP_VS_CONN_F_SEQ_MASK)
 
-union nf_inet_addr {
-        __u32           all[4];
-        __be32          ip;
-        __be32          ip6[4];
-        struct in_addr  in;
-        struct in6_addr in6;
-};
+/* Flags that are not sent to backup server start from bit 16 */
+#define IP_VS_CONN_F_NFCT	(1 << 16)	/* use netfilter conntrack */
 
-/*
- *	The struct ip_vs_service_user and struct ip_vs_dest_user are
- *	used to set IPVS rules through setsockopt.
- */
-struct ip_vs_service_kern {
-	/* virtual service addresses */
-	u_int16_t		protocol;
-	__be32			addr;	/* virtual ip address */
-	__be16			port;
-	u_int32_t		fwmark;		/* firwall mark of service */
+/* Connection flags from destination that can be changed by user space */
+#define IP_VS_CONN_F_DEST_MASK (IP_VS_CONN_F_FWD_MASK | \
+				IP_VS_CONN_F_ONE_PACKET | \
+				IP_VS_CONN_F_NFCT | \
+				0)
 
-	/* virtual service options */
-	char			sched_name[IP_VS_SCHEDNAME_MAXLEN];
-	unsigned		flags;		/* virtual service flags */
-	unsigned		timeout;	/* persistent timeout in sec */
-	unsigned		conn_timeout;
-	__be32			netmask;	/* persistent netmask */
-	unsigned		bps;
-	unsigned		limit_proportion;
-
-	char			srange[256];
-	char			drange[256];
-	char			iifname[IFNAMSIZ];
-	char			oifname[IFNAMSIZ];
-};
-
-struct ip_vs_service_user {
-	/* virtual service addresses */
-	u_int16_t		protocol;
-	__be32			__addr_v4;	/* virtual ip address - internal use only */
-	__be16			port;
-	u_int32_t		fwmark;		/* firwall mark of service */
-
-	/* virtual service options */
-	char			sched_name[IP_VS_SCHEDNAME_MAXLEN];
-	unsigned		flags;		/* virtual service flags */
-	unsigned		timeout;	/* persistent timeout in sec */
-	unsigned		conn_timeout;
-	__be32			netmask;	/* persistent netmask */
-	unsigned		bps;
-	unsigned		limit_proportion;
-
-	char			srange[256];
-	char			drange[256];
-	char			iifname[IFNAMSIZ];
-	char			oifname[IFNAMSIZ];
+#define IP_VS_SCHEDNAME_MAXLEN	16
+#define IP_VS_PENAME_MAXLEN	16
+#define IP_VS_IFNAME_MAXLEN	16
+#define IP_VS_PEDATA_MAXLEN     255
 
-	u_int16_t		af;
-	union nf_inet_addr	addr;
-	char			pe_name[IP_VS_PENAME_MAXLEN];
+struct ip_vs_service_kern {
+        /* virtual service addresses */
+        u_int16_t               protocol;
+        __be32                  __addr_v4;   /* virtual ip address */
+        __be16                  port;
+        u_int32_t               fwmark;         /* firwall mark of service */
+
+        /* virtual service options */
+        char                    sched_name[IP_VS_SCHEDNAME_MAXLEN];
+        unsigned                flags;          /* virtual service flags */
+        unsigned                timeout;        /* persistent timeout in sec */
+        unsigned                conn_timeout;
+        __be32                  netmask;        /* persistent netmask */
+        unsigned                bps;
+        unsigned                limit_proportion;
+
+        char                    srange[256];
+        char                    drange[256];
+        char                    iifname[IFNAMSIZ];
+        char                    oifname[IFNAMSIZ];
 };
 
 struct ip_vs_dest_kern {
@@ -203,36 +184,33 @@ struct ip_vs_dest_kern {
 
 struct ip_vs_dest_user {
 	/* destination server address */
-	__be32			__addr_v4; /* internal use only */
+	__be32			addr;
 	__be16			port;
 
 	/* real server options */
-	unsigned		conn_flags;	/* connection flags */
+	unsigned int		conn_flags;	/* connection flags */
 	int			weight;		/* destination weight */
 
 	/* thresholds for active connections */
-	u_int32_t		u_threshold;	/* upper threshold */
-	u_int32_t		l_threshold;	/* lower threshold */
-	u_int16_t		af;
-	union nf_inet_addr	addr;
+	__u32		u_threshold;	/* upper threshold */
+	__u32		l_threshold;	/* lower threshold */
 };
 
+
 struct ip_vs_laddr_kern {
-	__be32			addr;	/* ipv4 address */
+	__be32 			addr;
 };
 
-
 struct ip_vs_laddr_user {
-	__be32			__addr_v4;	/* ipv4 address */
-	u_int16_t		af;
-	union nf_inet_addr	addr;
-	char			ifname[IFNAMSIZ];
+	__be32 			__addr_v4;
+	u_int16_t 		af;
+	union nf_inet_addr 	addr;
+	char 			ifname[IFNAMSIZ];
 };
-
 struct ip_vs_blklst_user {
-	__be32                  __addr_v4;      /* ipv4 address */
-	u_int16_t               af;
-	union nf_inet_addr      addr;
+	__be32 			__addr_v4;
+	u_int16_t 		af;
+	union nf_inet_addr 	addr;
 };
 
 struct ip_vs_tunnel_user {
@@ -244,14 +222,13 @@ struct ip_vs_tunnel_user {
 };
 
 /*
- *	IPVS statistics object (for user space)
- */
-struct ip_vs_stats_user
-{
+ *  *	IPVS statistics object (for user space)
+ *   */
+struct ip_vs_stats_user {
 	__u64                   conns;          /* connections scheduled */
 	__u64                   inpkts;         /* incoming packets */
-	__u64                   inbytes;        /* incoming bytes */
 	__u64                   outpkts;        /* outgoing packets */
+	__u64                   inbytes;        /* incoming bytes */
 	__u64                   outbytes;       /* outgoing bytes */
 
 	__u32			cps;		/* current connection rate */
@@ -261,7 +238,6 @@ struct ip_vs_stats_user
 	__u32			outbps;		/* current out byte rate */
 };
 
-
 /* The argument to IP_VS_SO_GET_INFO */
 struct ip_vs_getinfo {
 	/* version number */
@@ -274,7 +250,6 @@ struct ip_vs_getinfo {
 	unsigned int		num_services;
 };
 
-
 /* The argument to IP_VS_SO_GET_SERVICE */
 struct ip_vs_service_entry_kern {
 	/* which service: user fills in these */
@@ -306,26 +281,26 @@ struct ip_vs_service_entry_kern {
 	char			oifname[IFNAMSIZ];
 };
 
+/* The argument to IP_VS_SO_GET_SERVICE */
 struct ip_vs_service_entry {
 	/* which service: user fills in these */
-	u_int16_t		protocol;
-	__be32			__addr_v4;	/* virtual address - internal use only*/
+	__u16		protocol;
+	__be32			__addr_v4;		/* virtual address */
 	__be16			port;
-	u_int32_t		fwmark;		/* firwall mark of service */
+	__u32		fwmark;		/* firwall mark of service */
 
 	/* service options */
 	char			sched_name[IP_VS_SCHEDNAME_MAXLEN];
-	unsigned		flags;          /* virtual service flags */
-	unsigned		timeout;	/* persistent timeout */
-	unsigned		conn_timeout;
+	unsigned int		flags;          /* virtual service flags */
+	unsigned int		timeout;	/* persistent timeout */
+	unsigned int		conn_timeout;
 	__be32			netmask;	/* persistent netmask */
-	unsigned		bps;
-	unsigned		limit_proportion;
 
 	/* number of real servers */
 	unsigned int		num_dests;
-	/* number of local address*/
 	unsigned int		num_laddrs;
+	unsigned int		bps;
+	unsigned int		limit_proportion;
 
 	/* statistics */
 	struct ip_vs_stats_user stats;
@@ -334,11 +309,6 @@ struct ip_vs_service_entry {
 	char			drange[256];
 	char			iifname[IFNAMSIZ];
 	char			oifname[IFNAMSIZ];
-
-	u_int16_t		af;
-	union nf_inet_addr	addr;
-	char			pe_name[IP_VS_PENAME_MAXLEN];
-
 };
 
 struct ip_vs_dest_entry_kern {
@@ -359,22 +329,17 @@ struct ip_vs_dest_entry_kern {
 };
 
 struct ip_vs_dest_entry {
-	__be32			__addr_v4;	/* destination address - internal use only */
+	__be32			__addr_v4;		/* destination address */
 	__be16			port;
-	unsigned		conn_flags;	/* connection flags */
+	unsigned int		conn_flags;	/* connection flags */
 	int			weight;		/* destination weight */
 
-	u_int32_t		u_threshold;	/* upper threshold */
-	u_int32_t		l_threshold;	/* lower threshold */
-
-	u_int32_t		activeconns;	/* active connections */
-	u_int32_t		inactconns;	/* inactive connections */
-	u_int32_t		persistconns;	/* persistent connections */
+	__u32		u_threshold;	/* upper threshold */
+	__u32		l_threshold;	/* lower threshold */
 
-	/* statistics */
-	struct ip_vs_stats_user stats;
-	u_int16_t		af;
-	union nf_inet_addr	addr;
+	__u32		activeconns;	/* active connections */
+	__u32		inactconns;	/* inactive connections */
+	__u32		persistconns;	/* persistent connections */
 };
 
 struct ip_vs_laddr_entry_kern {
@@ -442,36 +407,21 @@ struct ip_vs_get_dests_kern {
 	struct ip_vs_dest_entry_kern	entrytable[0];
 };
 
+/* The argument to IP_VS_SO_GET_DESTS */
 struct ip_vs_get_dests {
 	/* which service: user fills in these */
-	u_int16_t		protocol;
-	__be32			__addr_v4;	/* virtual address - internal use only */
+	__u16		protocol;
+	__be32			addr;		/* virtual address */
 	__be16			port;
-	u_int32_t		fwmark;		/* firwall mark of service */
+	__u32		fwmark;		/* firwall mark of service */
 
 	/* number of real servers */
 	unsigned int		num_dests;
 
-	char			srange[256];
-	char			drange[256];
-	char			iifname[IFNAMSIZ];
-	char			oifname[IFNAMSIZ];
-
-	u_int16_t		af;
-	union nf_inet_addr	addr;
-
 	/* the real servers */
 	struct ip_vs_dest_entry	entrytable[0];
 };
 
-/* The argument to IP_VS_SO_GET_SERVICES */
-struct ip_vs_get_services {
-	/* number of virtual services */
-	unsigned int		num_services;
-
-	/* service table */
-	struct ip_vs_service_entry entrytable[0];
-};
 
 struct ip_vs_get_services_kern {
 	/* number of virtual services */
@@ -501,7 +451,6 @@ struct ip_vs_daemon_user {
 	int			syncid;
 };
 
-
 #define IPROUTE_DEL 0
 #define IPROUTE_ADD 1
 
@@ -509,10 +458,10 @@ struct ip_vs_daemon_user {
 #define IPADDRESS_ADD 1
 
 /*
- *
- * IPVS Generic Netlink interface definitions
- *
- */
+ *  *
+ *   * IPVS Generic Netlink interface definitions
+ *    *
+ *     */
 
 /* Generic Netlink family info */
 
@@ -520,8 +469,8 @@ struct ip_vs_daemon_user {
 #define IPVS_GENL_VERSION	0x1
 
 struct ip_vs_flags {
-	__be32 flags;
-	__be32 mask;
+	__u32 flags;
+	__u32 mask;
 };
 
 /* Generic Netlink command attributes */
@@ -531,19 +480,19 @@ enum {
 	IPVS_CMD_NEW_SERVICE,		/* add service */
 	IPVS_CMD_SET_SERVICE,		/* modify service */
 	IPVS_CMD_DEL_SERVICE,		/* delete service */
-	IPVS_CMD_GET_SERVICE,		/* get info about specific service */
+	IPVS_CMD_GET_SERVICE,		/* get service info */
 
 	IPVS_CMD_NEW_DEST,		/* add destination */
 	IPVS_CMD_SET_DEST,		/* modify destination */
 	IPVS_CMD_DEL_DEST,		/* delete destination */
-	IPVS_CMD_GET_DEST,		/* get list of all service dests */
+	IPVS_CMD_GET_DEST,		/* get destination info */
 
 	IPVS_CMD_NEW_DAEMON,		/* start sync daemon */
 	IPVS_CMD_DEL_DAEMON,		/* stop sync daemon */
 	IPVS_CMD_GET_DAEMON,		/* get sync daemon status */
 
-	IPVS_CMD_SET_TIMEOUT,		/* set TCP and UDP timeouts */
-	IPVS_CMD_GET_TIMEOUT,		/* get TCP and UDP timeouts */
+	IPVS_CMD_SET_CONFIG,		/* set config settings */
+	IPVS_CMD_GET_CONFIG,		/* get config settings */
 
 	IPVS_CMD_SET_INFO,		/* only used in GET_INFO reply */
 	IPVS_CMD_GET_INFO,		/* get general IPVS info */
@@ -551,10 +500,6 @@ enum {
 	IPVS_CMD_ZERO,			/* zero all counters and stats */
 	IPVS_CMD_FLUSH,			/* flush services and dests */
 
-	IPVS_CMD_NEW_LADDR , 
-	IPVS_CMD_DEL_LADDR , 
-	IPVS_CMD_GET_LADDR , 
-
 	__IPVS_CMD_MAX,
 };
 
@@ -569,17 +514,16 @@ enum {
 	IPVS_CMD_ATTR_TIMEOUT_TCP,	/* TCP connection timeout */
 	IPVS_CMD_ATTR_TIMEOUT_TCP_FIN,	/* TCP FIN wait timeout */
 	IPVS_CMD_ATTR_TIMEOUT_UDP,	/* UDP timeout */
-	IPVS_CMD_ATTR_LADDR , 		/* local address */
 	__IPVS_CMD_ATTR_MAX,
 };
 
-#define IPVS_CMD_ATTR_MAX (__IPVS_CMD_ATTR_MAX - 1)
+#define IPVS_CMD_ATTR_MAX (__IPVS_SVC_ATTR_MAX - 1)
 
 /*
- * Attributes used to describe a service
- *
- * Used inside nested attribute IPVS_CMD_ATTR_SERVICE
- */
+ *  * Attributes used to describe a service
+ *   *
+ *    * Used inside nested attribute IPVS_CMD_ATTR_SERVICE
+ *     */
 enum {
 	IPVS_SVC_ATTR_UNSPEC = 0,
 	IPVS_SVC_ATTR_AF,		/* address family */
@@ -594,11 +538,8 @@ enum {
 	IPVS_SVC_ATTR_NETMASK,		/* persistent netmask */
 
 	IPVS_SVC_ATTR_STATS,		/* nested attribute for service stats */
-	IPVS_SVC_ATTR_BPS, 
-	IPVS_SVC_ATTR_LIMIT_PROPORTION,
-	IPVS_SVC_ATTR_ESTIMEOUT, 
 
-	IPVS_SVC_ATTR_PE_NAME,		/* name of scheduler */
+	IPVS_SVC_ATTR_PE_NAME,		/* name of ct retriever */
 
 	__IPVS_SVC_ATTR_MAX,
 };
@@ -606,10 +547,10 @@ enum {
 #define IPVS_SVC_ATTR_MAX (__IPVS_SVC_ATTR_MAX - 1)
 
 /*
- * Attributes used to describe a destination (real server)
- *
- * Used inside nested attribute IPVS_CMD_ATTR_DEST
- */
+ *  * Attributes used to describe a destination (real server)
+ *   *
+ *    * Used inside nested attribute IPVS_CMD_ATTR_DEST
+ *     */
 enum {
 	IPVS_DEST_ATTR_UNSPEC = 0,
 	IPVS_DEST_ATTR_ADDR,		/* real server address */
@@ -632,25 +573,10 @@ enum {
 #define IPVS_DEST_ATTR_MAX (__IPVS_DEST_ATTR_MAX - 1)
 
 /*
- * Attirbutes used to describe a local address
- *
- */
-
-enum {
-	IPVS_LADDR_ATTR_UNSPEC = 0 , 
-	IPVS_LADDR_ATTR_ADDR,
-	IPVS_LADDR_ATTR_PORT_CONFLICT,
-	IPVS_LADDR_ATTR_CONN_COUNTS, 
-	__IPVS_LADDR_ATTR_MAX , 
-};
-
-#define IPVS_LADDR_ATTR_MAX (__IPVS_LADDR_ATTR_MAX - 1)
-
-/*
- * Attributes describing a sync daemon
- *
- * Used inside nested attribute IPVS_CMD_ATTR_DAEMON
- */
+ *  * Attributes describing a sync daemon
+ *   *
+ *    * Used inside nested attribute IPVS_CMD_ATTR_DAEMON
+ *     */
 enum {
 	IPVS_DAEMON_ATTR_UNSPEC = 0,
 	IPVS_DAEMON_ATTR_STATE,		/* sync daemon state (master/backup) */
@@ -662,10 +588,10 @@ enum {
 #define IPVS_DAEMON_ATTR_MAX (__IPVS_DAEMON_ATTR_MAX - 1)
 
 /*
- * Attributes used to describe service or destination entry statistics
- *
- * Used inside nested attributes IPVS_SVC_ATTR_STATS and IPVS_DEST_ATTR_STATS
- */
+ *  * Attributes used to describe service or destination entry statistics
+ *   *
+ *    * Used inside nested attributes IPVS_SVC_ATTR_STATS and IPVS_DEST_ATTR_STATS
+ *     */
 enum {
 	IPVS_STATS_ATTR_UNSPEC = 0,
 	IPVS_STATS_ATTR_CONNS,		/* connections scheduled */
@@ -694,22 +620,145 @@ enum {
 
 #define IPVS_INFO_ATTR_MAX (__IPVS_INFO_ATTR_MAX - 1)
 
-#ifdef LIBIPVS_USE_NL
-extern struct nla_policy ipvs_cmd_policy[IPVS_CMD_ATTR_MAX + 1];
-extern struct nla_policy ipvs_service_policy[IPVS_SVC_ATTR_MAX + 1];
-extern struct nla_policy ipvs_dest_policy[IPVS_DEST_ATTR_MAX + 1];
-extern struct nla_policy ipvs_stats_policy[IPVS_STATS_ATTR_MAX + 1];
-extern struct nla_policy ipvs_info_policy[IPVS_INFO_ATTR_MAX + 1];
-extern struct nla_policy ipvs_daemon_policy[IPVS_DAEMON_ATTR_MAX + 1];
-extern struct nla_policy ipvs_laddr_policy[IPVS_LADDR_ATTR_MAX + 1];
+#ifdef _WITH_LVS_64BIT_STATS_
+struct ip_vs_stats64 {
+	__u64	conns;		/* connections scheduled */
+	__u64	inpkts;		/* incoming packets */
+	__u64	outpkts;	/* outgoing packets */
+	__u64	inbytes;	/* incoming bytes */
+	__u64	outbytes;	/* outgoing bytes */
+
+	__u64	cps;		/* current connection rate */
+	__u64	inpps;		/* current in packet rate */
+	__u64	outpps;		/* current out packet rate */
+	__u64	inbps;		/* current in byte rate */
+	__u64	outbps;		/* current out byte rate */
+};
+typedef struct ip_vs_stats64 ip_vs_stats_t;
+#else
+typedef struct ip_vs_stats_user ip_vs_stats_t;
+#endif
+
+struct ip_vs_service_app {
+	struct ip_vs_service_kern user;
+	uint16_t		af;
+	union nf_inet_addr	nf_addr;
+	char			pe_name[IP_VS_PENAME_MAXLEN];
+};
+
+struct ip_vs_dest_app {
+	struct ip_vs_dest_user	user;
+	uint16_t		af;
+	union nf_inet_addr	nf_addr;
+#ifdef _HAVE_IPVS_TUN_TYPE_
+	int			tun_type;
+	int			tun_port;
+#ifdef _HAVE_IPVS_TUN_CSUM_
+	int			tun_flags;
+#endif
 #endif
+};
+
+
+struct ip_vs_service_entry_app {
+	struct ip_vs_service_entry user;
+	ip_vs_stats_t		stats;
+	uint16_t		af;
+	union nf_inet_addr	nf_addr;
+	char			pe_name[IP_VS_PENAME_MAXLEN];
+
+};
 
-/* End of Generic Netlink interface definitions */
+struct ip_vs_dest_entry_app {
+	struct ip_vs_dest_entry user;
+	ip_vs_stats_t		stats;
+	uint16_t		af;
+	union nf_inet_addr	nf_addr;
 
-#undef __u32
-#undef __be32
-#undef __u16
-#undef __be16
-#undef __u64
+};
+
+struct ip_vs_get_dests_app {
+	struct {	// Can we avoid this duplication of definition?
+	/* which service: user fills in these */
+	__u16			protocol;
+	__be32			__addr_v4;	/* virtual address */
+	__be16			port;
+	__u32			fwmark;		/* firwall mark of service */
+
+	/* number of real servers */
+	unsigned int		num_dests;
+	char 			srange[256];
+	char 			drange[256];
+	char 			iifname[IFNAMSIZ];
+	char 			oifname[IFNAMSIZ];
+
+	/* the real servers */
+	struct ip_vs_dest_entry_app	entrytable[0];
+	} user;
+
+	uint16_t		af;
+	union nf_inet_addr	nf_addr;
+};
+
+struct ip_vs_get_services {
+	unsigned int num_services;
+	struct ip_vs_service_entry entrytable[0];
+};
+
+/* The argument to IP_VS_SO_GET_SERVICES */
+struct ip_vs_get_services_app {
+	struct {
+	/* number of virtual services */
+	unsigned int		num_services;
+
+	/* service table */
+	struct ip_vs_service_entry_app entrytable[0];
+	} user;
+};
+
+/* Make sure we don't have an inconsistent definition */
+#if IP_VS_IFNAME_MAXLEN > IFNAMSIZ
+	#error The code assumes that IP_VS_IFNAME_MAXLEN <= IFNAMSIZ
+#endif
+
+/* The argument to IP_VS_SO_GET_DAEMON */
+struct ip_vs_daemon_kern {
+	/* sync daemon state (master/backup) */
+	int			state;
+
+	/* multicast interface name */
+	char			mcast_ifn[IP_VS_IFNAME_MAXLEN];
+
+	/* SyncID we belong to */
+	int			syncid;
+};
+
+struct ip_vs_daemon_app {
+	/* sync daemon state (master/backup) */
+	int			state;
+
+	/* multicast interface name */
+	char			mcast_ifn[IP_VS_IFNAME_MAXLEN];
+
+	/* SyncID we belong to */
+	int			syncid;
+
+#ifdef _HAVE_IPVS_SYNCD_ATTRIBUTES_
+	/* UDP Payload Size */
+	uint16_t		sync_maxlen;
+
+	/* Multicast Port (base) */
+	uint16_t		mcast_port;
+
+	/* Multicast TTL */
+	uint8_t			mcast_ttl;
+
+	/* Multicast Address Family */
+	uint16_t		mcast_af;
+
+	/* Multicast Address */
+	union nf_inet_addr	mcast_group;
+#endif
+};
 
-#endif	/* _IP_VS_H */
+#endif	/* KEEPALIVED_IP_VS_H */
diff --git a/tools/keepalived/keepalived/include/ipvs/blklst.h b/tools/keepalived/keepalived/include/ipvs/blklst.h
new file mode 100644
index 000000000..30a02ff09
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/blklst.h
@@ -0,0 +1,39 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_BLKLST_H__
+#define __DPVS_BLKLST_H__
+#include "common.h"
+#include "ipvs/service.h"
+#include "timer.h"
+
+struct blklst_entry {
+    struct list_head    list;
+    union inet_addr     vaddr;
+    uint16_t            vport;
+    uint8_t             proto; 
+    union inet_addr     blklst;
+};
+
+struct blklst_entry *dp_vs_blklst_lookup(uint8_t proto, const union inet_addr *vaddr,
+                                         uint16_t vport, const union inet_addr *blklst);
+void dp_vs_blklst_flush(struct dp_vs_service *svc);
+
+int dp_vs_blklst_init(void);
+int dp_vs_blklst_term(void);
+
+#endif /* __DPVS_BLKLST_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/conhash.h b/tools/keepalived/keepalived/include/ipvs/conhash.h
new file mode 100644
index 000000000..effa2d515
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/conhash.h
@@ -0,0 +1,28 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_CH_H__
+#define __DPVS_CH_H__
+
+#include "ipvs/service.h"
+#include "ipvs/dest.h"
+#include "ipvs/sched.h"
+
+int dp_vs_conhash_init(void);
+int dp_vs_conhash_term(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/conn.h b/tools/keepalived/keepalived/include/ipvs/conn.h
new file mode 100644
index 000000000..28db75daf
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/conn.h
@@ -0,0 +1,273 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_CONN_H__
+#define __DPVS_CONN_H__
+#include <arpa/inet.h>
+#include "common.h"
+#include "list.h"
+#include "dpdk.h"
+#include "timer.h"
+#include "inet.h"
+#include "ipv4.h"
+#include "ipvs/conn.h"
+#include "ipvs/proto.h"
+#include "ipvs/service.h"
+
+enum {
+    DPVS_CONN_DIR_INBOUND = 0,
+    DPVS_CONN_DIR_OUTBOUND,
+    DPVS_CONN_DIR_MAX,
+};
+
+enum {
+    DPVS_CONN_F_HASHED      = 0x0040,
+    DPVS_CONN_F_INACTIVE    = 0x0100,
+    DPVS_CONN_F_SYNPROXY    = 0x8000,
+    DPVS_CONN_F_TEMPLATE    = 0x1000,
+    DPVS_CONN_F_NOFASTXMIT  = 0x2000,
+};
+
+struct dp_vs_conn_param {
+    int                 af;
+    uint16_t            proto;
+    const union inet_addr *caddr;
+    const union inet_addr *vaddr;
+    uint16_t            cport;
+    uint16_t            vport;
+    uint16_t            ct_dport; /* RS port for template connection */
+};
+
+struct conn_tuple_hash {
+    struct list_head    list;
+    int                 direct; /* inbound/outbound */
+
+    /* tuple info */
+    int                 af;
+    uint16_t            proto;
+    union inet_addr     saddr;  /* pkt's source addr */
+    union inet_addr     daddr;  /* pkt's dest addr */
+    uint16_t            sport;
+    uint16_t            dport;
+} __rte_cache_aligned;
+
+struct dp_vs_conn_stats {
+    rte_atomic64_t      inpkts;
+    rte_atomic64_t      inbytes;
+    rte_atomic64_t      outpkts;
+    rte_atomic64_t      outbytes;
+} __rte_cache_aligned;
+
+struct dp_vs_fdir_filt;
+struct dp_vs_proto;
+
+struct dp_vs_conn {
+    int                     af;
+    uint8_t                 proto;
+    union inet_addr         caddr;  /* Client address */
+    union inet_addr         vaddr;  /* Virtual address */
+    union inet_addr         laddr;  /* director Local address */
+    union inet_addr         daddr;  /* Destination (RS) address */
+    uint16_t                cport;
+    uint16_t                vport;
+    uint16_t                lport;
+    uint16_t                dport;
+
+    struct rte_mempool      *connpool;
+    struct conn_tuple_hash  tuplehash[DPVS_CONN_DIR_MAX];
+    rte_atomic32_t          refcnt;
+    struct dpvs_timer       timer;
+    struct timeval          timeout;
+    lcoreid_t               lcore;
+    struct dp_vs_dest       *dest;  /* real server */
+    void                    *prot_data;  /* protocol specific data */
+
+    /* for FNAT */
+    struct dp_vs_laddr      *local; /* local address */
+    struct dp_vs_seq        fnat_seq;
+
+    /* save last SEQ/ACK from RS for RST when conn expire*/
+    uint32_t                rs_end_seq;
+    uint32_t                rs_end_ack;
+
+    int (*packet_xmit)(struct dp_vs_proto *prot,
+                        struct dp_vs_conn *conn,
+                        struct rte_mbuf *mbuf);
+    int (*packet_out_xmit)(struct dp_vs_proto *prot,
+                        struct dp_vs_conn *conn,
+                        struct rte_mbuf *mbuf);
+
+    /* L2 fast xmit */
+    struct ether_addr       in_smac;
+    struct ether_addr       in_dmac;
+    struct ether_addr       out_smac;
+    struct ether_addr       out_dmac;
+
+    /* route for neigbour */
+    struct netif_port       *in_dev;    /* inside to rs*/
+    struct netif_port       *out_dev;   /* outside to client*/
+    union inet_addr         in_nexthop;  /* to rs*/
+    union inet_addr         out_nexthop; /* to client*/
+
+    /* statistics */
+    struct dp_vs_conn_stats stats;
+
+    /* synproxy related members */
+    struct dp_vs_seq syn_proxy_seq;     /* seq used in synproxy */
+    struct list_head ack_mbuf;          /* ack mbuf saved in step2 */
+    uint32_t ack_num;                   /* ack mbuf number stored */
+    struct rte_mbuf *syn_mbuf;          /* saved rs syn packet for retransmition */
+    rte_atomic32_t syn_retry_max;       /* syn retransmition max packets */
+
+    /* add for stopping ack storm */
+    uint32_t last_seq;                  /* seq of the last ack packet */
+    uint32_t last_ack_seq;              /* ack seq of the last ack packet */
+    rte_atomic32_t dup_ack_cnt;         /* count of repeated ack packets */
+
+    /* flags and state transition */
+    volatile uint16_t       flags;
+    volatile uint16_t       state;
+    volatile uint16_t       old_state;  /* old state, to be used for state transition
+                                           triggered synchronization */
+    /* controll members */
+    struct dp_vs_conn *control;         /* master who controlls me */
+    rte_atomic32_t n_control;           /* number of connections controlled by me*/
+    uint64_t ctime;                     /* create time */
+} __rte_cache_aligned;
+
+/* for syn-proxy to save all ack packet in conn before rs's syn-ack arrives */
+struct dp_vs_synproxy_ack_pakcet {
+    struct list_head list;
+    struct rte_mbuf *mbuf;
+} __rte_cache_aligned;
+
+/* helpers */
+#define tuplehash_in(c)         ((c)->tuplehash[DPVS_CONN_DIR_INBOUND])
+#define tuplehash_out(c)        ((c)->tuplehash[DPVS_CONN_DIR_OUTBOUND])
+
+int dp_vs_conn_init(void);
+int dp_vs_conn_term(void);
+
+struct dp_vs_conn * 
+dp_vs_conn_new(struct rte_mbuf *mbuf, 
+               const struct dp_vs_iphdr *iph,
+               struct dp_vs_conn_param *param,
+               struct dp_vs_dest *dest,
+               uint32_t flags);
+int dp_vs_conn_del(struct dp_vs_conn *conn);
+
+struct dp_vs_conn *
+dp_vs_conn_get(int af, uint16_t proto, 
+                const union inet_addr *saddr, 
+                const union inet_addr *daddr, 
+                uint16_t sport, uint16_t dport,
+                int *dir, bool reverse);
+
+struct dp_vs_conn *
+dp_vs_ct_in_get(int af, uint16_t proto,
+                const union inet_addr *saddr,
+                const union inet_addr *daddr,
+                uint16_t sport, uint16_t dport);
+
+void dp_vs_conn_put(struct dp_vs_conn *conn);
+/* put conn without reset the timer */
+void dp_vs_conn_put_no_reset(struct dp_vs_conn *conn);
+
+void ipvs_conn_keyword_value_init(void);
+void install_ipvs_conn_keywords(void);
+
+static inline void dp_vs_conn_fill_param(int af, uint8_t proto, 
+        const union inet_addr *caddr, const union inet_addr *vaddr, 
+        uint16_t cport, uint16_t vport, uint16_t ct_dport,
+        struct dp_vs_conn_param *param)
+{
+    param->af       = af;
+    param->proto    = proto;
+    param->caddr    = caddr;
+    param->vaddr    = vaddr;
+    param->cport    = cport;
+    param->vport    = vport;
+    param->ct_dport = ct_dport; /* only for template connection */
+}
+
+
+int dp_vs_check_template(struct dp_vs_conn *ct);
+
+static inline void dp_vs_control_del(struct dp_vs_conn *conn)
+{
+    struct dp_vs_conn *ctl_conn = conn->control;
+    char cbuf[64], vbuf[64];
+
+    if (!ctl_conn) {
+#ifdef CONFIG_DPVS_IPVS_DEBUG
+        RTE_LOG(DEBUG, IPVS, "%s: request control DEL for uncontrolled: "
+                "%s:%u to %s:%u\n", __func__,
+                inet_ntop(conn->af, &conn->caddr, cbuf, sizeof(cbuf)),
+                ntohs(conn->cport),
+                inet_ntop(conn->af, &conn->vaddr, vbuf, sizeof(vbuf)),
+                ntohs(conn->vport));
+#endif
+        return;
+    }
+
+#ifdef CONFIG_DPVS_IPVS_DEBUG
+    RTE_LOG(DEBUG, IPVS, "%s: deleting control for: conn.client=%s:%u "
+            "ctrl_conn.client=%s:%u\n", __func__,
+            inet_ntop(conn->af, &conn->caddr, cbuf, sizeof(cbuf)),
+            ntohs(conn->cport),
+            inet_ntop(conn->af, &ctl_conn->vaddr, cbuf, sizeof(cbuf)),
+            ntohs(conn->vport));
+#endif
+    conn->control = NULL;
+    if (rte_atomic32_read(&ctl_conn->n_control) == 0) {
+        RTE_LOG(ERR, IPVS, "%s: BUG control DEL with zero n_control: "
+                "%s:%u to %s:%u\n", __func__,
+                inet_ntop(conn->af, &conn->caddr, cbuf, sizeof(cbuf)),
+                ntohs(conn->cport),
+                inet_ntop(conn->af, &conn->vaddr, vbuf, sizeof(vbuf)),
+                ntohs(conn->vport));
+        return;
+    }
+    rte_atomic32_dec(&ctl_conn->n_control);
+}
+
+static inline void dp_vs_control_add(struct dp_vs_conn *conn, struct dp_vs_conn *ctl_conn)
+{
+    char cbuf[64], vbuf[64];
+
+    if (unlikely(conn->control != NULL)) {
+        RTE_LOG(ERR, IPVS, "%s: request control ADD for already controlled conn: "
+                "%s:%u to %s:%u\n", __func__,
+                inet_ntop(conn->af, &conn->caddr, cbuf, sizeof(cbuf)) ? cbuf : "::",
+                ntohs(conn->cport),
+                inet_ntop(conn->af, &conn->vaddr, vbuf, sizeof(vbuf)) ? vbuf : "::",
+                ntohs(conn->vport));
+        dp_vs_control_del(conn);
+    }
+#ifdef CONFIG_OPVS_IPVS_DEBUG
+    RTE_LOG(DEBUG, IPVS, "%s: Adding control for: conn.client=%s:%u "
+            "ctrl_conn.client=%s:%u\n", __func__,
+            inet_ntop(conn->af, &conn->caddr, cbuf, sizeof(cbuf)) ? cbuf : "::",
+            ntohs(conn->cport),
+            inet_ntop(conn->af, &ctl_conn->caddr, vbuf, sizeof(cbuf)) ? cbuf : "::",
+            ntohs(ctl_conn->cport));
+#endif
+    conn->control = ctl_conn;
+    rte_atomic32_inc(&ctl_conn->n_control);
+}
+
+#endif /* __DPVS_CONN_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/dest.h b/tools/keepalived/keepalived/include/ipvs/dest.h
new file mode 100644
index 000000000..d27d041cf
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/dest.h
@@ -0,0 +1,210 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_DEST_H__
+#define __DPVS_DEST_H__
+
+#include "ipvs/service.h"
+
+/* must consistent with IP_VS_CONN_F_XXX (libipvs-2.6/ip_vs.h) */
+enum dpvs_fwd_mode {
+    DPVS_FWD_MASQ           = 0,
+    DPVS_FWD_LOCALNODE      = 1,
+    DPVS_FWD_MODE_TUNNEL    = 2,
+    DPVS_FWD_MODE_DR        = 3,
+    DPVS_FWD_MODE_BYPASS    = 4,
+    DPVS_FWD_MODE_FNAT      = 5,
+    DPVS_FWD_MODE_NAT       = DPVS_FWD_MASQ,
+    DPVS_FWD_MODE_SNAT      = 6,
+};
+
+enum {
+    DPVS_DEST_F_AVAILABLE       = 0x1<<0,
+    DPVS_DEST_F_OVERLOAD        = 0x1<<1,
+};
+
+#ifdef __DPVS__
+#include "common.h"
+#include "list.h"
+#include "dpdk.h"
+
+struct dp_vs_dest {
+    struct list_head    n_list;     /* for the dests in the service */
+    struct list_head    d_list;     /* for table with all the dests */
+
+    int                 af;         /* address family */
+    /*
+     * normally, addr/port is for Real Server,
+     * but for SNAT, addr/port is the "to-source"
+     * (the target source ip/port translated to).
+     */
+    union inet_addr     addr;       /* IP address of the server */
+    uint16_t            port;       /* port number of the server */
+
+    volatile unsigned   flags;      /* dest status flags */
+    rte_atomic16_t      conn_flags; /* flags to copy to conn */
+    rte_atomic16_t      weight;     /* server weight */
+
+    rte_atomic32_t      refcnt;     /* reference counter */
+    struct dp_vs_stats  *stats;     /* Use per-cpu statistics for destination server */
+
+    enum dpvs_fwd_mode  fwdmode;
+
+    /* connection counters and thresholds */
+    rte_atomic32_t      actconns;   /* active connections */
+    rte_atomic32_t      inactconns; /* inactive connections */
+    rte_atomic32_t      persistconns;   /* persistent connections */
+    uint32_t            max_conn;   /* upper threshold */
+    uint32_t            min_conn;   /* lower threshold */
+
+    /* for virtual service */
+    uint16_t            proto;      /* which protocol (TCP/UDP) */
+    uint16_t            vport;      /* virtual port number */
+    uint32_t            vfwmark;    /* firewall mark of service */
+    struct dp_vs_service *svc;      /* service it belongs to */
+    union inet_addr     vaddr;      /* virtual IP address */
+    unsigned            conn_timeout; /* conn timeout copied from svc*/
+    unsigned            limit_proportion; /* limit copied from svc*/
+} __rte_cache_aligned;
+#endif
+
+struct dp_vs_dest_conf {
+    /* destination server address */
+    int                af;
+    union inet_addr    addr;
+    uint16_t           port;
+
+    enum dpvs_fwd_mode fwdmode;
+    /* real server options */
+    unsigned           conn_flags;    /* connection flags */
+    int                weight;     /* destination weight */
+
+    /* thresholds for active connections */
+    uint32_t           max_conn;    /* upper threshold */
+    uint32_t           min_conn;    /* lower threshold */
+};
+
+struct dp_vs_dest_entry {
+    int             af;
+    union inet_addr addr;        /* destination address */
+    uint16_t        port;
+    unsigned        conn_flags;    /* connection flags */
+    int             weight;     /* destination weight */
+
+    uint32_t        max_conn;  /* upper threshold */
+    uint32_t        min_conn;  /* lower threshold */
+
+    uint32_t        actconns;  /* active connections */
+    uint32_t        inactconns;   /* inactive connections */
+    uint32_t        persistconns; /* persistent connections */
+
+    /* statistics */
+    struct dp_vs_stats stats;
+};
+
+struct dp_vs_get_dests {
+    /* which service: user fills in these */
+    int              af;
+    uint16_t         proto;
+    union inet_addr  addr;        /* virtual address */
+    uint16_t         port;
+    uint32_t         fwmark;       /* firwall mark of service */
+
+    /* number of real servers */
+    unsigned int num_dests;
+
+    char        srange[256];
+    char        drange[256];
+    char        iifname[IFNAMSIZ];
+    char        oifname[IFNAMSIZ];
+
+    /* the real servers */
+    struct dp_vs_dest_entry entrytable[0];
+};
+
+struct dp_vs_dest_user{
+    int             af;
+    union inet_addr addr;
+    uint16_t        port;
+
+    unsigned        conn_flags;
+    int             weight;
+
+    uint32_t        max_conn;
+    uint32_t        min_conn;
+};
+
+#ifdef __DPVS__
+static inline bool
+dp_vs_dest_is_avail(struct dp_vs_dest *dest)
+{
+    return (dest->flags & DPVS_DEST_F_AVAILABLE) ? true : false;
+}
+
+static inline bool
+dp_vs_dest_is_overload(struct dp_vs_dest *dest)
+{
+    return (dest->flags & DPVS_DEST_F_OVERLOAD) ? true : false;
+}
+
+static inline int16_t
+dp_vs_dest_get_weight(struct dp_vs_dest *dest)
+{
+    return rte_atomic16_read(&dest->weight);
+}
+
+static inline bool
+dp_vs_dest_is_valid(struct dp_vs_dest *dest)
+{
+    return (dest
+            && dp_vs_dest_is_avail(dest)
+            && !dp_vs_dest_is_overload(dest)
+            && dp_vs_dest_get_weight(dest) > 0) ? true : false;
+}
+
+int dp_vs_new_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest,
+                                              struct dp_vs_dest **dest_p);
+
+struct dp_vs_dest *dp_vs_lookup_dest(int af, struct dp_vs_service *svc,
+                                     const union inet_addr *daddr, uint16_t dport);
+
+struct dp_vs_dest *dp_vs_trash_get_dest(struct dp_vs_service *svc,
+                                        const union inet_addr *daddr, uint16_t dport);
+
+void dp_vs_trash_cleanup(void);
+
+int dp_vs_add_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest);
+
+int dp_vs_edit_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest);
+
+void __dp_vs_unlink_dest(struct dp_vs_service *svc,
+                        struct dp_vs_dest *dest, int svcupd);
+
+void __dp_vs_del_dest(struct dp_vs_dest *dest);
+
+int dp_vs_del_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest);
+
+int dp_vs_get_dest_entries(const struct dp_vs_service *svc,
+                           const struct dp_vs_get_dests *get,
+                           struct dp_vs_get_dests *uptr);
+
+int dp_vs_dest_init(void);
+
+int dp_vs_dest_term(void);
+#endif
+
+#endif /* __DPVS_DEST_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/ipvs.h b/tools/keepalived/keepalived/include/ipvs/ipvs.h
new file mode 100644
index 000000000..07305a954
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/ipvs.h
@@ -0,0 +1,58 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_IPVS_H__
+#define __DPVS_IPVS_H__
+#include "common.h"
+#include "inet.h"
+#include "ipvs/service.h"
+
+#ifndef IPVS
+#define IPVS
+#define RTE_LOGTYPE_IPVS    RTE_LOGTYPE_USER1
+#endif
+
+#define IPVS_TIMEOUT_MIN    0
+#define IPVS_TIMEOUT_MAX    31536000 /* one year */
+
+struct dp_vs_iphdr {
+    int             af;
+    int             len;
+    uint8_t         proto;
+    union inet_addr saddr;
+    union inet_addr daddr;
+};
+
+/* for sequence number adjusting */
+struct dp_vs_seq {
+    uint32_t        isn;
+    uint32_t        delta;
+    uint32_t        fdata_seq;
+    uint32_t        prev_delta;
+};
+
+int dp_vs_init(void);
+int dp_vs_term(void);
+
+struct dp_vs_service;
+
+struct dp_vs_conn *dp_vs_schedule(struct dp_vs_service *svc,
+                                  const struct dp_vs_iphdr *iph,
+                                  struct rte_mbuf *mbuf,
+                                  bool is_synproxy_on);
+
+#endif /* __DPVS_IPVS_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/laddr.h b/tools/keepalived/keepalived/include/ipvs/laddr.h
new file mode 100644
index 000000000..9dbc830c7
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/laddr.h
@@ -0,0 +1,35 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_LADDR_H__
+#define __DPVS_LADDR_H__
+#include "common.h"
+#include "ipvs/conn.h"
+#include "ipvs/service.h"
+
+int dp_vs_laddr_bind(struct dp_vs_conn *conn, struct dp_vs_service *svc);
+int dp_vs_laddr_unbind(struct dp_vs_conn *conn);
+
+int dp_vs_laddr_add(struct dp_vs_service *svc, int af, const union inet_addr *addr,
+                    const char *ifname);
+int dp_vs_laddr_del(struct dp_vs_service *svc, int af, const union inet_addr *addr);
+int dp_vs_laddr_flush(struct dp_vs_service *svc);
+
+int dp_vs_laddr_init(void);
+int dp_vs_laddr_term(void);
+
+#endif /* __DPVS_LADDR_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/nat64.h b/tools/keepalived/keepalived/include/ipvs/nat64.h
new file mode 100644
index 000000000..ac6e44d02
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/nat64.h
@@ -0,0 +1,49 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_NAT64_H__
+#define __DPVS_NAT64_H__
+
+#include "ipv4.h"
+#include "ipv6.h"
+
+static inline int mbuf_nat6to4_len(struct rte_mbuf *mbuf)
+{
+    int offset = sizeof(struct ip6_hdr);
+    uint8_t nexthdr = ip6_hdr(mbuf)->ip6_nxt;
+    int len;
+
+    offset = ip6_skip_exthdr(mbuf, offset, &nexthdr);
+    len = mbuf->pkt_len - offset + sizeof(struct ipv4_hdr);
+
+    return len;
+}
+
+static inline int mbuf_nat4to6_len(struct rte_mbuf *mbuf)
+{
+    return (mbuf->pkt_len - ip4_hdrlen(mbuf) + sizeof(struct ip6_hdr));
+}
+
+int mbuf_6to4(struct rte_mbuf *mbuf, 
+              const struct in_addr *saddr,
+              const struct in_addr *daddr);
+
+int mbuf_4to6(struct rte_mbuf *mbuf,
+              const struct in6_addr *saddr,
+              const struct in6_addr *daddr);
+
+#endif /* __DPVS_NAT64_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/proto.h b/tools/keepalived/keepalived/include/ipvs/proto.h
new file mode 100644
index 000000000..2a364e3c1
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/proto.h
@@ -0,0 +1,108 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_PROTO_H__
+#define __DPVS_PROTO_H__
+#include "list.h"
+#include "dpdk.h"
+#include "common.h"
+#include "ipvs/ipvs.h"
+#include "ipvs/conn.h"
+
+struct dp_vs_conn;
+#define IPV6_ADDR_LEN_IN_BYTES 16
+#define IPV4_ADDR_LEN_IN_BYTES 4
+
+struct dp_vs_proto {
+    char                    *name;
+    uint8_t                 proto;
+    int                     *timeout_table; /* protocol timeout table */
+
+    int (*init)(struct dp_vs_proto *proto);
+    int (*exit)(struct dp_vs_proto *proto);
+
+    /* schedule RS and create new conn */
+    int (*conn_sched)(struct dp_vs_proto *proto, 
+                      const struct dp_vs_iphdr *iph,
+                      struct rte_mbuf *mbuf,
+                      struct dp_vs_conn **conn,
+                      int *verdict);
+
+    /* lookup conn by <proto, saddr, sport, daddr, dport>
+     * return conn and direction or NULL if miss */
+    struct dp_vs_conn *
+        (*conn_lookup)(struct dp_vs_proto *proto, 
+                       const struct dp_vs_iphdr *iph,
+                       struct rte_mbuf *mbuf, int *direct, 
+                       bool reverse, bool *drop);
+
+    int (*conn_expire)(struct dp_vs_proto *proto, 
+                       struct dp_vs_conn *conn);
+
+    /* for NAT mode */
+    int (*nat_in_handler)(struct dp_vs_proto *proto,
+                       struct dp_vs_conn *conn,
+                       struct rte_mbuf *mbuf);
+    int (*nat_out_handler)(struct dp_vs_proto *proto,
+                       struct dp_vs_conn *conn,
+                       struct rte_mbuf *mbuf);
+
+    /* for FNAT mode */
+    int (*fnat_in_handler)(struct dp_vs_proto *proto,
+                       struct dp_vs_conn *conn,
+                       struct rte_mbuf *mbuf);
+    int (*fnat_out_handler)(struct dp_vs_proto *proto,
+                       struct dp_vs_conn *conn,
+                       struct rte_mbuf *mbuf);
+    /* pre-handler for FNAT */
+    int (*fnat_in_pre_handler)(struct dp_vs_proto *proto,
+                       struct dp_vs_conn *conn,
+                       struct rte_mbuf *mbuf);
+    int (*fnat_out_pre_handler)(struct dp_vs_proto *proto,
+                       struct dp_vs_conn *conn,
+                       struct rte_mbuf *mbuf);
+
+    /* for SNAT mode */
+    int (*snat_in_handler)(struct dp_vs_proto *proto,
+                       struct dp_vs_conn *conn,
+                       struct rte_mbuf *mbuf);
+    int (*snat_out_handler)(struct dp_vs_proto *proto,
+                       struct dp_vs_conn *conn,
+                       struct rte_mbuf *mbuf);
+
+    int (*csum_check)(struct dp_vs_proto *proto, int af,
+                       struct rte_mbuf *mbuf);
+    int (*dump_packet)(struct dp_vs_proto *proto, int af,
+                       struct rte_mbuf *mbuf, int off, 
+                       const char *msg);
+
+    /* try trans connn's states by packet and direction */
+    int (*state_trans)(struct dp_vs_proto *proto, 
+                       struct dp_vs_conn *conn, 
+                       struct rte_mbuf *mbuf, 
+                       int direct);
+
+    const char *
+        (*state_name)(int state);
+} __rte_cache_aligned;
+
+int dp_vs_proto_init(void);
+int dp_vs_proto_term(void);
+
+struct dp_vs_proto *dp_vs_proto_lookup(uint8_t proto);
+
+#endif /* __DPVS_PROTO_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/proto_icmp.h b/tools/keepalived/keepalived/include/ipvs/proto_icmp.h
new file mode 100644
index 000000000..caa810909
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/proto_icmp.h
@@ -0,0 +1,24 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+
+#ifndef __DP_VS_PROTO_ICMP_H__
+#define __DP_VS_PROTO_ICMP_H__
+
+enum {
+    DPVS_ICMP_S_NORMAL      = 0,
+    DPVS_ICMP_S_LAST
+};
+
+#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/proto_tcp.h b/tools/keepalived/keepalived/include/ipvs/proto_tcp.h
new file mode 100644
index 000000000..541f38bd7
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/proto_tcp.h
@@ -0,0 +1,109 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DP_VS_PROTO_TCP_H__
+#define __DP_VS_PROTO_TCP_H__
+
+#include <netinet/in.h>
+
+enum {
+    TCP_OPT_EOL         = 0,
+    TCP_OPT_NOP         = 1,
+    TCP_OPT_MSS         = 2,
+    TCP_OPT_WINDOW      = 3,
+    TCP_OPT_SACK_PERM   = 4,
+    TCP_OPT_SACK        = 5,
+    TCP_OPT_TIMESTAMP   = 8,
+    TCP_OPT_ADDR        = 254, /* non-standard */
+};
+
+#define TCP_OLEN_MSS                4
+#define TCP_OLEN_TIMESTAMP          10
+#define TCP_OLEN_IP4_ADDR           8
+#define TCP_OLEN_IP6_ADDR           20
+
+#define TCP_OLEN_TSTAMP_ALIGNED     12
+#define TCP_OLEN_SACK_BASE          2
+#define TCP_OLEN_SACK_PERBLOCK      8
+
+#define TCP_OLEN_WSCALE_ALIGNED      4
+#define TCP_OLEN_SACKPERMITTED_ALIGNED   4
+
+#define TCP_OPT_TIMESTAMP(tm_spec) \
+    (((tm_spec).tv_sec % 100) * 1000000 + \
+     ((tm_spec).tv_nsec / 1000))
+
+struct tcpopt_ip4_addr {
+    uint8_t opcode;
+    uint8_t opsize;
+    __be16 port;
+    struct in_addr  addr;
+} __attribute__((__packed__));
+
+struct tcpopt_ip6_addr {
+    uint8_t opcode;
+    uint8_t opsize;
+    __be16 port;
+    struct in6_addr addr;
+} __attribute__((__packed__));
+
+struct tcpopt_addr {
+    uint8_t opcode;
+    uint8_t opsize;
+    __be16 port;
+    uint8_t addr[16];
+} __attribute__((__packed__));
+
+enum {
+    DPVS_TCP_S_NONE         = 0,
+    DPVS_TCP_S_ESTABLISHED,
+    DPVS_TCP_S_SYN_SENT,
+    DPVS_TCP_S_SYN_RECV,
+    DPVS_TCP_S_FIN_WAIT,
+    DPVS_TCP_S_TIME_WAIT,
+    DPVS_TCP_S_CLOSE,
+    DPVS_TCP_S_CLOSE_WAIT,
+    DPVS_TCP_S_LAST_ACK,
+    DPVS_TCP_S_LISTEN,
+    DPVS_TCP_S_SYNACK,
+    DPVS_TCP_S_LAST
+};
+
+struct tcp_state {
+    int next_state[DPVS_TCP_S_LAST];
+};
+
+#define sNO DPVS_TCP_S_NONE
+#define sES DPVS_TCP_S_ESTABLISHED
+#define sSS DPVS_TCP_S_SYN_SENT
+#define sSR DPVS_TCP_S_SYN_RECV
+#define sFW DPVS_TCP_S_FIN_WAIT
+#define sTW DPVS_TCP_S_TIME_WAIT
+#define sCL DPVS_TCP_S_CLOSE
+#define sCW DPVS_TCP_S_CLOSE_WAIT
+#define sLA DPVS_TCP_S_LAST_ACK
+#define sLI DPVS_TCP_S_LISTEN
+#define sSA DPVS_TCP_S_SYNACK
+
+struct tcphdr *tcp_hdr(const struct rte_mbuf *mbuf);
+void tcp4_send_csum(struct ipv4_hdr *iph, struct tcphdr *th);
+void tcp6_send_csum(struct ipv6_hdr *iph, struct tcphdr *th);
+struct rte_mempool *get_mbuf_pool(const struct dp_vs_conn *conn, int dir);
+void install_proto_tcp_keywords(void);
+void tcp_keyword_value_init(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/proto_udp.h b/tools/keepalived/keepalived/include/ipvs/proto_udp.h
new file mode 100644
index 000000000..8b28c6b71
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/proto_udp.h
@@ -0,0 +1,36 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DP_VS_PROTO_UDP_H__
+#define __DP_VS_PROTO_UDP_H__
+
+#include <netinet/udp.h>
+
+enum {
+    DPVS_UDP_S_NORMAL   = 0,
+    DPVS_UDP_S_LAST
+};
+
+extern int g_defence_udp_drop;
+
+void install_proto_udp_keywords(void);
+void udp_keyword_value_init(void);
+
+void udp4_send_csum(struct ipv4_hdr *iph, struct udp_hdr *uh);
+void udp6_send_csum(struct ipv6_hdr *iph, struct udp_hdr *uh);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/rr.h b/tools/keepalived/keepalived/include/ipvs/rr.h
new file mode 100644
index 000000000..025af4c66
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/rr.h
@@ -0,0 +1,28 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_RR_H__
+#define __DPVS_RR_H__
+
+#include "ipvs/service.h"
+#include "ipvs/dest.h"
+#include "ipvs/sched.h"
+
+int dp_vs_rr_init(void);
+int dp_vs_rr_term(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/sched.h b/tools/keepalived/keepalived/include/ipvs/sched.h
new file mode 100644
index 000000000..b525e273b
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/sched.h
@@ -0,0 +1,59 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_SCHED_H__
+#define __DPVS_SCHED_H__
+#include "list.h"
+#include "dpdk.h"
+#include "common.h"
+#include "ctrl.h"
+#include "ipvs/service.h"
+
+
+struct dp_vs_scheduler {
+    struct list_head    n_list;
+    char                *name;
+//    rte_atomic32_t      refcnt;
+
+    struct dp_vs_dest *
+        (*schedule)(struct dp_vs_service *svc, 
+                    const struct rte_mbuf *mbuf);
+
+    int (*init_service)(struct dp_vs_service *svc);
+    int (*exit_service)(struct dp_vs_service *svc);
+    int (*update_service)(struct dp_vs_service *svc, struct dp_vs_dest *dest,
+            sockoptid_t opt);
+} __rte_cache_aligned;
+
+int dp_vs_sched_init(void);
+int dp_vs_sched_term(void);
+
+struct dp_vs_scheduler *
+dp_vs_scheduler_get(const char *name);
+
+int dp_vs_bind_scheduler(struct dp_vs_service *svc,
+                     struct dp_vs_scheduler *scheduler);
+
+int dp_vs_unbind_scheduler(struct dp_vs_service *svc);
+
+void dp_vs_scheduler_put(struct dp_vs_scheduler *scheduler);
+
+int register_dp_vs_scheduler(struct dp_vs_scheduler *scheduler);
+
+int unregister_dp_vs_scheduler(struct dp_vs_scheduler *scheduler);
+
+#endif /* __DPVS_SCHED_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/service.h b/tools/keepalived/keepalived/include/ipvs/service.h
new file mode 100644
index 000000000..34385cb2e
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/service.h
@@ -0,0 +1,255 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_SVC_H__
+#define __DPVS_SVC_H__
+
+#include <stdint.h>
+#include <net/if.h>
+#include "match.h"
+#include "ipvs/stats.h"
+#include "ipvs/dest.h"
+#include "inet.h"
+
+#define DP_VS_SCHEDNAME_MAXLEN      16
+
+#ifdef __DPVS__
+#include "list.h"
+#include "dpdk.h"
+#include "netif.h"
+#include "ipvs/ipvs.h"
+#include "ipvs/sched.h"
+
+#define RTE_LOGTYPE_SERVICE RTE_LOGTYPE_USER3
+#define DP_VS_SVC_F_PERSISTENT      0x0001      /* peristent port */
+#define DP_VS_SVC_F_HASHED          0x0002      /* hashed entry */
+#define DP_VS_SVC_F_SYNPROXY        0x8000      /* synrpoxy flag */
+
+#define DP_VS_SVC_F_SIP_HASH        0x0100      /* sip hash target */
+#define DP_VS_SVC_F_QID_HASH        0x0200      /* quic cid hash target */
+
+rte_rwlock_t __dp_vs_svc_lock;
+
+/* virtual service */
+struct dp_vs_service {
+    struct list_head    s_list;     /* node for normal service table */
+    struct list_head    f_list;     /* node for fwmark service table */
+    struct list_head    m_list;     /* node for match  service table */
+    rte_atomic32_t      refcnt;
+    rte_atomic32_t      usecnt;
+
+    /*
+     * to identify a service
+     * 1. <af, proto, vip, vport>
+     * 2. fwmark (no use now).
+     * 3. match.
+     */
+    int                 af;
+    uint8_t             proto;      /* TCP/UDP/... */
+    union inet_addr     addr;       /* virtual IP address */
+    uint16_t            port;
+    uint32_t            fwmark;
+    struct dp_vs_match  *match;
+
+    unsigned            flags;
+    unsigned            timeout;
+    unsigned            conn_timeout;
+    unsigned            bps;
+    unsigned            limit_proportion;
+    uint32_t            netmask;
+
+    struct list_head    dests;      /* real services (dp_vs_dest{}) */
+    uint32_t            num_dests;
+    long                weight;     /* sum of servers weight */
+
+    struct dp_vs_scheduler  *scheduler;
+    void                *sched_data;
+    rte_rwlock_t        sched_lock;
+
+    struct dp_vs_stats  *stats;
+
+    /* FNAT only */
+    struct list_head    laddr_list; /* local address (LIP) pool */
+    struct list_head    *laddr_curr;
+    rte_rwlock_t        laddr_lock;
+    uint32_t            num_laddrs;
+
+    /* ... flags, timer ... */
+} __rte_cache_aligned;
+#endif
+
+struct dp_vs_service_conf {
+    /* virtual service addresses */
+    uint16_t            af;
+    uint16_t            protocol;
+    union inet_addr     addr;       /* virtual ip address */
+    uint16_t            port;
+    uint32_t            fwmark;     /* firwall mark of service */
+    struct dp_vs_match  match;
+
+    /* virtual service options */
+    char                *sched_name;
+    unsigned            flags;     /* virtual service flags */
+    unsigned            timeout;   /* persistent timeout in sec */
+    unsigned            conn_timeout;
+    uint32_t            netmask;        /* persistent netmask */
+    unsigned            bps;
+    unsigned            limit_proportion;
+};
+
+struct dp_vs_service_entry {
+    int                 af;
+    uint16_t            proto;
+    union inet_addr     addr;
+    uint16_t            port;
+    uint32_t            fwmark;
+
+    char                sched_name[DP_VS_SCHEDNAME_MAXLEN];
+    unsigned            flags;
+    unsigned            timeout;
+    unsigned            conn_timeout;
+    uint32_t            netmask;
+    unsigned            bps;
+    unsigned            limit_proportion;
+
+    unsigned int        num_dests;
+    unsigned int        num_laddrs;
+
+    struct dp_vs_stats  stats;
+
+    char                srange[256];
+    char                drange[256];
+    char                iifname[IFNAMSIZ];
+    char                oifname[IFNAMSIZ];
+};
+
+struct dp_vs_get_services {
+    unsigned int        num_services;
+    struct dp_vs_service_entry entrytable[0];
+};
+
+struct dp_vs_service_user{
+    int               af;
+    uint16_t          proto;
+    union inet_addr   addr;
+    uint16_t          port;
+    uint32_t          fwmark;
+
+    char              sched_name[DP_VS_SCHEDNAME_MAXLEN];
+    unsigned          flags;
+    unsigned          timeout;
+    unsigned          conn_timeout;
+    uint32_t          netmask;
+    unsigned          bps;
+    unsigned          limit_proportion;
+
+    char              srange[256];
+    char              drange[256];
+    char              iifname[IFNAMSIZ];
+    char              oifname[IFNAMSIZ];
+};
+
+struct dp_vs_getinfo {
+    unsigned int version;
+    unsigned int size;
+    unsigned int num_services;
+};
+
+#ifdef __DPVS__
+int dp_vs_service_init(void);
+int dp_vs_service_term(void);
+
+int dp_vs_add_service(struct dp_vs_service_conf *u,
+                      struct dp_vs_service **svc_p);
+
+int dp_vs_del_service(struct dp_vs_service *svc);
+
+int dp_vs_edit_service(struct dp_vs_service *svc, 
+                       struct dp_vs_service_conf *u);
+
+struct dp_vs_service *
+dp_vs_service_lookup(int af, uint16_t protocol,
+                     const union inet_addr *vaddr, 
+                     uint16_t vport, uint32_t fwmark,
+                     const struct rte_mbuf *mbuf,
+                     const struct dp_vs_match *match);
+
+int dp_vs_match_parse(const char *srange, const char *drange,
+                      const char *iifname, const char *oifname,
+                      struct dp_vs_match *match);
+
+void __dp_vs_bind_svc(struct dp_vs_dest *dest, struct dp_vs_service *svc);
+
+void __dp_vs_unbind_svc(struct dp_vs_dest *dest);
+
+struct dp_vs_service *dp_vs_lookup_vip(int af, uint16_t protocol,
+                                    const union inet_addr *vaddr);
+
+static inline void dp_vs_service_put(struct dp_vs_service *svc)
+{
+    rte_atomic32_dec(&svc->usecnt);
+}
+
+struct dp_vs_service *__dp_vs_service_get(int af, uint16_t protocol,
+                       const union inet_addr *vaddr, uint16_t vport);
+
+struct dp_vs_service *__dp_vs_svc_fwm_get(int af, uint32_t fwmark);
+
+int dp_vs_get_service_entries(const struct dp_vs_get_services *get,
+        struct dp_vs_get_services *uptr);
+
+unsigned dp_vs_get_conn_timeout(struct dp_vs_conn *conn);
+
+/* flush all services */
+int dp_vs_flush(void);
+
+int dp_vs_zero_service(struct dp_vs_service *svc);
+
+int dp_vs_zero_all(void);
+
+enum{
+    DPVS_SO_SET_FLUSH = 200,
+    DPVS_SO_SET_ZERO,
+    DPVS_SO_SET_ADD,
+    DPVS_SO_SET_EDIT,
+    DPVS_SO_SET_DEL,
+    DPVS_SO_SET_ADDDEST,
+    DPVS_SO_SET_EDITDEST,
+    DPVS_SO_SET_DELDEST,
+    DPVS_SO_SET_GRATARP,
+};
+
+enum{
+    DPVS_SO_GET_VERSION = 200,
+    DPVS_SO_GET_INFO,
+    DPVS_SO_GET_SERVICES,
+    DPVS_SO_GET_SERVICE,
+    DPVS_SO_GET_DESTS,
+};
+
+
+#define SOCKOPT_SVC_BASE         DPVS_SO_SET_FLUSH
+#define SOCKOPT_SVC_SET_CMD_MAX  DPVS_SO_SET_GRATARP
+#define SOCKOPT_SVC_GET_CMD_MAX  DPVS_SO_GET_DESTS
+
+#define MAX_ARG_LEN    (sizeof(struct dp_vs_service_user) +    \
+                         sizeof(struct dp_vs_dest_user))
+
+#define DPVS_WAIT_WHILE(expr) while(expr){;}
+#endif
+
+#endif /* __DPVS_SVC_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/stats.h b/tools/keepalived/keepalived/include/ipvs/stats.h
new file mode 100644
index 000000000..665ae04f1
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/stats.h
@@ -0,0 +1,118 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_STATS_H__
+#define __DPVS_STATS_H__
+#include <stdint.h>
+#include "ipvs/service.h"
+
+struct dp_vs_stats {
+    uint64_t            conns;
+    uint64_t            inpkts;
+    uint64_t            inbytes;
+    uint64_t            outpkts;
+    uint64_t            outbytes;
+
+    uint32_t cps;
+    uint32_t inpps;
+    uint32_t inbps;
+    uint32_t outpps;
+    uint32_t outbps;
+};
+
+#ifdef __DPVS__
+#include "dpdk.h"
+
+struct dp_vs_conn;
+
+/* statistics for FULLNAT and SYNPROXY */
+enum  dp_vs_estats_type {
+    FULLNAT_ADD_TOA_OK = 1,
+    FULLNAT_ADD_TOA_FAIL_LEN,
+    FULLNAT_ADD_TOA_HEAD_FULL,
+    FULLNAT_ADD_TOA_FAIL_MEM,
+    FULLNAT_ADD_TOA_FAIL_PROTO,
+    FULLNAT_CONN_REUSED,
+    FULLNAT_CONN_REUSED_CLOSE,
+    FULLNAT_CONN_REUSED_TIMEWAIT,
+    FULLNAT_CONN_REUSED_FINWAIT,
+    FULLNAT_CONN_REUSED_CLOSEWAIT,
+    FULLNAT_CONN_REUSED_LASTACK,
+    FULLNAT_CONN_REUSED_ESTAB,
+    SYNPROXY_RS_ERROR,
+    SYNPROXY_NULL_ACK,
+    SYNPROXY_BAD_ACK,
+    SYNPROXY_OK_ACK,
+    SYNPROXY_SYN_CNT,
+    SYNPROXY_ACK_STORM,
+    SYNPROXY_SYNSEND_QLEN,
+    SYNPROXY_CONN_REUSED,
+    SYNPROXY_CONN_REUSED_CLOSE,
+    SYNPROXY_CONN_REUSED_TIMEWAIT,
+    SYNPROXY_CONN_REUSED_FINWAIT,
+    SYNPROXY_CONN_REUSED_CLOSEWAIT,
+    SYNPROXY_CONN_REUSED_LASTACK,
+    DEFENCE_IP_FRAG_DROP,
+    DEFENCE_TCP_DROP,
+    DEFENCE_UDP_DROP,
+    FAST_XMIT_REJECT,
+    FAST_XMIT_PASS,
+    FAST_XMIT_SKB_COPY,
+    FAST_XMIT_NO_MAC,
+    FAST_XMIT_SYNPROXY_SAVE,
+    FAST_XMIT_DEV_LOST,
+    FAST_XMIT_REJECT_INSIDE,
+    FAST_XMIT_PASS_INSIDE,
+    FAST_XMIT_SYNPROXY_SAVE_INSIDE,
+    RST_IN_SYN_SENT,
+    RST_OUT_SYN_SENT,
+    RST_IN_ESTABLISHED,
+    RST_OUT_ESTABLISHED,
+    GRO_PASS,
+    LRO_REJECT,
+    XMIT_UNEXPECTED_MTU,
+    CONN_SCHED_UNREACH,
+    SYNPROXY_NO_DEST,
+    CONN_EXCEEDED,
+    DP_VS_EXT_STAT_LAST
+};
+
+struct dp_vs_estats {
+    unsigned long mibs[DP_VS_EXT_STAT_LAST];
+} __rte_cache_aligned;
+
+int dp_vs_stats_init(void);
+int dp_vs_stats_term(void);
+
+void dp_vs_stats_clear(void);
+void dp_svc_stats_clear(struct dp_vs_stats *stats);
+
+int dp_vs_stats_in(struct dp_vs_conn *conn, struct rte_mbuf *mbuf);
+int dp_vs_stats_out(struct dp_vs_conn *conn, struct rte_mbuf *mbuf);
+void dp_vs_stats_conn(struct dp_vs_conn *conn);
+
+void dp_vs_estats_inc(enum dp_vs_estats_type field);
+void dp_vs_estats_clear(void);
+uint64_t dp_vs_estats_get(enum dp_vs_estats_type field);
+
+int dp_vs_new_stats(struct dp_vs_stats **p);
+void dp_vs_del_stats(struct dp_vs_stats *p);
+void dp_vs_zero_stats(struct dp_vs_stats* stats);
+int dp_vs_copy_stats(struct dp_vs_stats* dst, struct dp_vs_stats* src);
+#endif
+
+#endif /* __DPVS_STATS_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/synproxy.h b/tools/keepalived/keepalived/include/ipvs/synproxy.h
new file mode 100644
index 000000000..412e981d7
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/synproxy.h
@@ -0,0 +1,128 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#include <netinet/tcp.h>
+/*
+ *  DPDK IP Virtual Server Syn-Proxy
+ *  data structure and functionality definitions
+ *
+ */
+
+#ifndef __DPVS_SYNPROXY_H__
+#define __DPVS_SYNPROXY_H__
+
+#include "dpdk.h"
+#include "ipvs/ipvs.h"
+#include "ipvs/conn.h"
+#include "ipvs/dest.h"
+#include "ipvs/service.h"
+
+/* Add MASKs for TCP OPT in "data" coded in cookie */
+/* |[21][20][19-16][15-0]|
+ * [21]     SACK
+ * [20]     TimeStamp
+ * [19-16]  snd_wscale
+ * [15-0]   MSSIND
+ */
+#define DP_VS_SYNPROXY_OTHER_BITS   12
+#define DP_VS_SYNPROXY_OTHER_MASK   (((uint32_t)1 << DP_VS_SYNPROXY_OTHER_BITS) - 1)
+
+#define DP_VS_SYNPROXY_MSS_BITS     12
+#define DP_VS_SYNPROXY_MSS_MASK     ((uint32_t)0xf << DP_VS_SYNPROXY_MSS_BITS)
+
+#define DP_VS_SYNPROXY_SACKOK_BIT   21
+#define DP_VS_SYNPROXY_SACKOK_MASK  ((uint32_t)1 << DP_VS_SYNPROXY_SACKOK_BIT)
+
+#define DP_VS_SYNPROXY_TSOK_BIT     20
+#define DP_VS_SYNPROXY_TSOK_MASK    ((uint32_t)1 << DP_VS_SYNPROXY_TSOK_BIT)
+
+#define DP_VS_SYNPROXY_SND_WSCALE_BITS  16
+#define DP_VS_SYNPROXY_SND_WSCALE_MASK  ((uint32_t)0xf << DP_VS_SYNPROXY_SND_WSCALE_BITS)
+#define DP_VS_SYNPROXY_WSCALE_MAX       14
+
+extern struct rte_mempool *dp_vs_synproxy_ack_mbufpool[DPVS_MAX_SOCKET];
+#define this_ack_mbufpool (dp_vs_synproxy_ack_mbufpool[rte_socket_id()])
+
+extern int dp_vs_synproxy_ctrl_conn_reuse;
+
+#ifdef CONFIG_SYNPROXY_DEBUG
+extern rte_atomic32_t sp_syn_saved;
+extern rte_atomic32_t sp_ack_saved;
+extern rte_atomic64_t sp_ack_refused;
+#endif
+
+#ifdef CONFIG_SYNPROXY_DEBUG
+#define sp_dbg_stats32_inc(x) (rte_atomic32_inc(&x))
+#define sp_dbg_stats32_dec(x) (rte_atomic32_dec(&x))
+#define sp_dbg_stats64_inc(x) (rte_atomic64_inc(&x))
+#define sp_dbg_stats64_dec(x) (rte_atomic64_dec(&x))
+#else
+#define sp_dbg_stats32_inc(x)
+#define sp_dbg_stats32_dec(x)
+#define sp_dbg_stats64_inc(x)
+#define sp_dbg_stats64_dec(x)
+#endif
+
+/* add for supporting tcp options in syn-proxy */
+struct dp_vs_synproxy_opt {
+    uint16_t snd_wscale:8,  /* Window scaling received from sender */
+             tstamp_ok:1,   /* TIMESTAMP seen on SYN packet */
+             wscale_ok:1,   /* Wscale seen on SYN packet */
+             sack_ok:1;     /* SACK seen on SYN packet */
+    uint16_t mss_clamp;     /* Max mss, negotiated at connectons setup */
+} __rte_cache_aligned;
+
+/* synproxy(syncookies and one-minute-timer) init & cleanup */
+int dp_vs_synproxy_init(void);
+int dp_vs_synproxy_term(void);
+
+/* Syn-proxy step 1 logic: receive client's Syn. */
+int dp_vs_synproxy_syn_rcv(int af, struct rte_mbuf *mbuf,
+        const struct dp_vs_iphdr *iph, int *verdict);
+
+/* Syn-proxy step 2 logic: receive client's Ack */
+int dp_vs_synproxy_ack_rcv(int af, struct rte_mbuf *mbuf,
+        struct tcphdr *th, struct dp_vs_proto *pp,
+        struct dp_vs_conn **cpp,
+        const struct dp_vs_iphdr *iph, int *verdict);
+
+/* Syn-proxy step 3 logic: receive rs's Syn/Ack. */
+int dp_vs_synproxy_synack_rcv(struct rte_mbuf *mbuf, struct dp_vs_conn *cp,
+        struct dp_vs_proto *pp, int th_offset, int *verdict);
+
+/* Syn-proxy conn reuse logic: receive client's Ack */
+int dp_vs_synproxy_reuse_conn(int af, struct rte_mbuf *mbuf,
+        struct dp_vs_conn *cp,
+        struct dp_vs_proto *pp,
+        const struct dp_vs_iphdr *iph, int *verdict);
+
+/* Store or drop client's ack packet, when dpvs is waiting for rs's Syn/Ack packet */
+int dp_vs_synproxy_filter_ack(struct rte_mbuf *mbuf, struct dp_vs_conn *cp,
+        struct dp_vs_proto *pp,
+        const struct dp_vs_iphdr *iph, int *verdict);
+
+/* Transfer ack seq and sack opt for Out-In packet */
+void dp_vs_synproxy_dnat_handler(struct tcphdr *tcph, struct dp_vs_seq *sp_seq);
+
+/* Transer seq for In-Out packet */
+int dp_vs_synproxy_snat_handler(struct tcphdr *tcph, struct dp_vs_conn *cp);
+
+/* configuration file support */
+void synproxy_keyword_value_init(void);
+void install_synproxy_keywords(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/wlc.h b/tools/keepalived/keepalived/include/ipvs/wlc.h
new file mode 100644
index 000000000..82fd6420a
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/wlc.h
@@ -0,0 +1,28 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_WLC_H__
+#define __DPVS_WLC_H__
+
+#include "ipvs/service.h"
+#include "ipvs/dest.h"
+#include "ipvs/sched.h"
+
+int dp_vs_wlc_init(void);
+int dp_vs_wlc_term(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/wrr.h b/tools/keepalived/keepalived/include/ipvs/wrr.h
new file mode 100644
index 000000000..7514ccbb6
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/wrr.h
@@ -0,0 +1,28 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_WRR_H__
+#define __DPVS_WRR_H__
+
+#include "ipvs/service.h"
+#include "ipvs/dest.h"
+#include "ipvs/sched.h"
+
+int dp_vs_wrr_init(void);
+int dp_vs_wrr_term(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/xmit.h b/tools/keepalived/keepalived/include/ipvs/xmit.h
new file mode 100644
index 000000000..f23e0f292
--- /dev/null
+++ b/tools/keepalived/keepalived/include/ipvs/xmit.h
@@ -0,0 +1,63 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_XMIT_H__
+#define __DPVS_XMIT_H__
+#include "dpdk.h"
+#include "ipvs/proto.h"
+#include "ipvs/conn.h"
+
+int dp_vs_xmit_fnat(struct dp_vs_proto *proto,
+                        struct dp_vs_conn *conn,
+                        struct rte_mbuf *mbuf);
+
+int dp_vs_out_xmit_fnat(struct dp_vs_proto *prot,
+                        struct dp_vs_conn *conn,
+                        struct rte_mbuf *mbuf);
+
+void dp_vs_xmit_icmp(struct rte_mbuf *mbuf, 
+                     struct dp_vs_proto *prot,
+                     struct dp_vs_conn *conn, 
+                     int dir);
+
+int dp_vs_xmit_dr(struct dp_vs_proto *proto,
+                        struct dp_vs_conn *conn,
+                        struct rte_mbuf *mbuf);
+
+int dp_vs_xmit_snat(struct dp_vs_proto *proto,
+                        struct dp_vs_conn *conn,
+                        struct rte_mbuf *mbuf);
+
+int dp_vs_out_xmit_snat(struct dp_vs_proto *proto,
+                        struct dp_vs_conn *conn,
+                        struct rte_mbuf *mbuf);
+
+int dp_vs_xmit_nat(struct dp_vs_proto *proto,
+                        struct dp_vs_conn *conn,
+                        struct rte_mbuf *mbuf);
+
+int dp_vs_out_xmit_nat(struct dp_vs_proto *proto,
+                        struct dp_vs_conn *conn,
+                        struct rte_mbuf *mbuf);
+
+int dp_vs_xmit_tunnel(struct dp_vs_proto *proto,
+                        struct dp_vs_conn *conn,
+                        struct rte_mbuf *mbuf);
+
+void install_xmit_keywords(void);
+
+#endif /* __DPVS_XMIT_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvswrapper.h b/tools/keepalived/keepalived/include/ipvswrapper.h
index 1aa2833f7..d03c76838 100644
--- a/tools/keepalived/keepalived/include/ipvswrapper.h
+++ b/tools/keepalived/keepalived/include/ipvswrapper.h
@@ -17,52 +17,29 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _IPVSWRAPPER_H
 #define _IPVSWRAPPER_H
 
-/* system includes */
-#include <unistd.h>
-#include <errno.h>
-#include <sys/socket.h>
-#include <sys/param.h>
-#include <arpa/inet.h>
-#include <asm/types.h>
+#include "config.h"
 
-#include <net/if.h>
-#include <netinet/ip_icmp.h>
-#include <netinet/udp.h>
-#include <netinet/tcp.h>
-#include <sys/wait.h>
-
-#ifdef _WITH_LVS_
-#ifdef _KRNL_2_4_
-  #include "../libipvs-2.4/libipvs.h"
-  #include <net/ip_vs.h>
-#elif _KRNL_2_6_
-  #include "../libipvs-2.6/ip_vs.h"
-  #include "../libipvs-2.6/libipvs.h"
-#endif
-//  #include <net/ip_vs.h>
+#ifdef _WITH_VRRP_
+  #include "vrrp.h"
 #endif
 
-#ifndef IP_VS_TEMPLATE_TIMEOUT
-#define IP_VS_TEMPLATE_TIMEOUT IPVS_SVC_PERSISTENT_TIMEOUT
-#endif
-
-/* locale includes */
-#include "scheduler.h"
+#ifdef _WITH_LVS_
 #include "check_data.h"
+#endif
 
 #define IPVS_ERROR	0
 #define IPVS_SUCCESS	1
-#define IPVS_CMD_DELAY	3
 
-#ifdef _HAVE_IPVS_SYNCD_
+#ifdef _WITH_LVS_
 #define IPVS_STARTDAEMON	IP_VS_SO_SET_STARTDAEMON
 #define IPVS_STOPDAEMON		IP_VS_SO_SET_STOPDAEMON
+#define IPVS_FLUSH		IP_VS_SO_SET_FLUSH
 #define IPVS_MASTER		IP_VS_STATE_MASTER
 #define IPVS_BACKUP		IP_VS_STATE_BACKUP
 #else
@@ -70,43 +47,48 @@
 #define IPVS_STOPDAEMON		2
 #define IPVS_MASTER		3
 #define IPVS_BACKUP		4
+#define IPVS_FLUSH		5
 #endif
 
-/* Macro */
-#define IPVS_ALIVE(X,Y,Z)	(((X) == IP_VS_SO_SET_ADD && !(Y)->alive)	|| \
-				 ((X) == IP_VS_SO_SET_DEL && (Y)->alive)	|| \
-				 ((X) == IP_VS_SO_SET_ADDDEST && !(Z)->alive)	|| \
-				 ((X) == IP_VS_SO_SET_DELDEST && (Z)->alive)	|| \
-				 (X) == IP_VS_SO_SET_EDITDEST			   \
-				)
+#define IPVS_DEF_SCHED		"wlc"
 
-#define IPVS_SET_ALIVE(C,V)			\
-do {						\
-	if ((C) == IP_VS_SO_SET_ADD)		\
-		SET_ALIVE((V));			\
-	if ((C) == IP_VS_SO_SET_DEL)		\
-		UNSET_ALIVE((V));		\
-} while (0)
+#if defined _WITH_VRRP_ && defined _WITH_LVS_
+struct lvs_syncd_config {
+	const char			*ifname;	/* handle LVS sync daemon state using this */
+	vrrp_t				*vrrp;		/* instance FSM & running on specific interface */
+	unsigned			syncid;		/* 0 .. 255 */
+#ifdef _HAVE_IPVS_SYNCD_ATTRIBUTES_
+	uint16_t			sync_maxlen;
+	struct sockaddr_storage		mcast_group;
+	uint16_t			mcast_port;
+	uint8_t				mcast_ttl;
+#endif
+	const char			*vrrp_name;	/* used during configuration and SNMP */
+};
+#endif
 
 /* prototypes */
 extern int ipvs_start(void);
 extern void ipvs_stop(void);
-extern virtual_server_group_t *ipvs_get_group_by_name(char *, list);
-extern int ipvs_group_remove_entry(virtual_server_t *, virtual_server_group_entry_t *);
+extern void ipvs_set_timeouts(int, int, int);
+extern void ipvs_flush_cmd(void);
+extern virtual_server_group_t *ipvs_get_group_by_name(const char *, list) __attribute__ ((pure));
+extern void ipvs_group_sync_entry(virtual_server_t *vs, virtual_server_group_entry_t *vsge);
+extern void ipvs_group_remove_entry(virtual_server_t *, virtual_server_group_entry_t *);
+extern int ipvs_cmd(int, virtual_server_t *, real_server_t *);
+#ifdef _WITH_VRRP_
+extern void ipvs_syncd_cmd(int, const struct lvs_syncd_config *, int, bool, bool);
+extern void ipvs_syncd_master(const struct lvs_syncd_config *);
+extern void ipvs_syncd_backup(const struct lvs_syncd_config *);
+#endif
 extern local_addr_group *ipvs_get_laddr_group_by_name(char *, list);
 extern int ipvs_laddr_remove_entry(virtual_server_t *, local_addr_entry *);
 extern blklst_addr_group *ipvs_get_blklst_group_by_name(char *, list);
 extern int ipvs_blklst_remove_entry(virtual_server_t *, blklst_addr_entry *);
-extern int ipvs_cmd(int, list, virtual_server_t *, real_server_t *);
-extern int ipvs_syncd_cmd(int, char *, int, int);
-extern void ipvs_syncd_master(char *, int);
-extern void ipvs_syncd_backup(char *, int);
 extern int ipvs_tunnel_cmd(int cmd, tunnel_entry *entry);
 
-#ifdef _KRNL_2_6_
 /* Refresh statistics at most every 5 seconds */
 #define STATS_REFRESH 5
 extern void ipvs_update_stats(virtual_server_t * vs);
-#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/include/ipwrapper.h b/tools/keepalived/keepalived/include/ipwrapper.h
index 612e782a7..440858764 100755
--- a/tools/keepalived/keepalived/include/ipwrapper.h
+++ b/tools/keepalived/keepalived/include/ipwrapper.h
@@ -17,29 +17,22 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _IPWRAPPER_H
 #define _IPWRAPPER_H
 
 /* system includes */
-#include <syslog.h>
+#include <stdbool.h>
 
-/* locale includes */
+/* local includes */
 #include "check_data.h"
-#include "smtp.h"
-
-/* NAT netmask */
-#define HOST_NETMASK   0xffffffff
-
-/* firewall rules framework command */
-#define IP_FW_CMD_ADD 0x0001
-#define IP_FW_CMD_DEL 0x0002
+#include "check_api.h"
 
 /* UP & DOWN value */
-#define UP   1
-#define DOWN 0
+#define UP   true
+#define DOWN false
 
 /* LVS command set by kernel */
 #define LVS_CMD_ADD		IP_VS_SO_SET_ADD
@@ -55,13 +48,16 @@
 #define LVS_CMD_DEL_TUNNEL	IP_VS_SO_SET_DELTUNNEL
 
 /* prototypes */
-extern bool perform_svr_state(int, virtual_server_t *, real_server_t *);
-extern void update_svr_wgt(int, virtual_server_t *, real_server_t *);
-extern int svr_checker_up(checker_id_t, real_server_t *);
-extern void update_svr_checker_state(int, checker_id_t, virtual_server_t *, real_server_t *);
-extern int init_services(void);
-extern int clear_services(void);
-extern int clear_diff_services(void);
+extern void update_svr_wgt(int, virtual_server_t *, real_server_t *, bool);
+extern void set_checker_state(checker_t *, bool);
+extern void update_svr_checker_state(bool, checker_t *);
+extern bool init_services(void);
+extern void clear_services(void);
+extern void set_quorum_states(void);
+extern void clear_diff_services(list);
+extern void check_new_rs_state(void);
+extern void link_vsg_to_vs(void);
+extern int svr_checker_up(bool, real_server_t *);
 extern int copy_srv_states(void);
 
 extern int init_tunnel(void);
diff --git a/tools/keepalived/keepalived/include/keepalived_netlink.h b/tools/keepalived/keepalived/include/keepalived_netlink.h
new file mode 100644
index 000000000..c693810b8
--- /dev/null
+++ b/tools/keepalived/keepalived/include/keepalived_netlink.h
@@ -0,0 +1,152 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        keepalived_netlink.c include file.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_NETLINK_H
+#define _VRRP_NETLINK_H 1
+
+#include "config.h"
+
+/* global includes */
+#include <stdint.h>
+#include <stdbool.h>
+#include <sys/types.h>
+#include <linux/netlink.h>
+#include <linux/rtnetlink.h>
+
+/* local includes */
+#include "scheduler.h"
+#ifdef _WITH_VRRP_
+#include "vrrp_if.h"
+#endif
+
+/* types definitions */
+typedef struct _nl_handle {
+	int			fd;
+	uint32_t		nl_pid;
+	__u32			seq;
+	thread_ref_t		thread;
+} nl_handle_t;
+
+/* Define types */
+#ifndef NLMSG_TAIL
+#define NLMSG_TAIL(nmsg) ((void *)(((char *) (nmsg)) + NLMSG_ALIGN((nmsg)->nlmsg_len)))
+#endif
+#if !defined SOL_NETLINK
+#define SOL_NETLINK 270
+#endif
+
+#define RTA_TAIL(rta)	((struct rtattr *)(((char *) (rta)) + RTA_ALIGN((rta)->rta_len)))
+
+/* Global vars exported */
+#ifdef _WITH_VRRP_
+extern nl_handle_t nl_cmd;	/* Command channel */
+extern int netlink_error_ignore; /* If we get this error, ignore it */
+#endif
+
+#ifdef _NETLINK_TIMERS_
+extern bool do_netlink_timers;
+#endif
+
+/* prototypes */
+#ifdef _NETLINK_TIMERS_
+extern void report_and_clear_netlink_timers(const char *);
+#endif
+
+extern int addattr_l(struct nlmsghdr *, size_t, unsigned short, const void *, size_t);
+extern int addattr_l2(struct nlmsghdr *, size_t, unsigned short, const void *, size_t, const void *, size_t);
+extern int addraw_l(struct nlmsghdr *, size_t, const void *, size_t);
+
+static inline int
+addattr8(struct nlmsghdr *n, size_t maxlen, unsigned short type, uint8_t data)
+{
+	return addattr_l(n, maxlen, type, &data, sizeof data);
+}
+
+static inline int
+addattr16(struct nlmsghdr *n, size_t maxlen, unsigned short type, uint16_t data)
+{
+	return addattr_l(n, maxlen, type, &data, sizeof data);
+}
+
+static inline int
+addattr32(struct nlmsghdr *n, size_t maxlen, unsigned short type, uint32_t data)
+{
+	return addattr_l(n, maxlen, type, &data, sizeof data);
+}
+
+static inline int
+addattr64(struct nlmsghdr *n, size_t maxlen, unsigned short type, uint64_t data)
+{
+	return addattr_l(n, maxlen, type, &data, sizeof(data));
+}
+
+#ifdef _WITH_VRRP_
+extern size_t rta_addattr_l(struct rtattr *, size_t, unsigned short, const void *, size_t);
+extern size_t rta_addattr_l2(struct rtattr *, size_t, unsigned short, const void *, size_t, const void*, size_t);
+
+static inline size_t
+rta_addattr8(struct rtattr *rta, size_t maxlen, unsigned short type, uint8_t data)
+{
+	return rta_addattr_l(rta, maxlen, type, &data, sizeof data);
+}
+
+static inline size_t
+rta_addattr16(struct rtattr *rta, size_t maxlen, unsigned short type, uint16_t data)
+{
+	return rta_addattr_l(rta, maxlen, type, &data, sizeof data);
+}
+
+static inline size_t
+rta_addattr32(struct rtattr *rta, size_t maxlen, unsigned short type, uint32_t data)
+{
+	return rta_addattr_l(rta, maxlen, type, &data, sizeof data);
+}
+
+static inline size_t
+rta_addattr64(struct rtattr *rta, size_t maxlen, unsigned short type, uint64_t data)
+{
+	return rta_addattr_l(rta, maxlen, type, &data, sizeof data);
+}
+
+extern struct rtattr *rta_nest(struct rtattr *, size_t, unsigned short);
+extern size_t rta_nest_end(struct rtattr *, struct rtattr *);
+extern ssize_t netlink_talk(nl_handle_t *, struct nlmsghdr *);
+extern int netlink_interface_lookup(char *);
+extern void kernel_netlink_poll(void);
+extern void process_if_status_change(interface_t *);
+#endif
+extern void kernel_netlink_set_recv_bufs(void);
+#ifdef _HAVE_FIB_ROUTING_
+extern void set_extra_netlink_monitoring(bool, bool, bool, bool);
+#endif
+extern void kernel_netlink_init(void);
+#if defined _WITH_VRRP_ || defined _WITH_LVS_
+extern void kernel_netlink_read_interfaces(void);
+#endif
+extern void kernel_netlink_close(void);
+extern void kernel_netlink_close_monitor(void);
+extern void kernel_netlink_close_cmd(void);
+#ifdef THREAD_DUMP
+extern void register_keepalived_netlink_addresses(void);
+#endif
+
+#endif
diff --git a/tools/keepalived/keepalived/include/layer4.h b/tools/keepalived/keepalived/include/layer4.h
index b44796978..3e66f1d3a 100644
--- a/tools/keepalived/keepalived/include/layer4.h
+++ b/tools/keepalived/keepalived/include/layer4.h
@@ -17,44 +17,87 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _LAYER4_H
 #define _LAYER4_H
 
 /* system includes */
-#include <unistd.h>
-#include <string.h>
-#include <stdint.h>
-#include <netdb.h>
-#include <arpa/inet.h>
-#include <sys/types.h>
 #include <sys/socket.h>
+#include <net/if.h>
+#include <stdbool.h>
 
 /* local includes */
 #include "scheduler.h"
-#include "check_api.h"
 
 enum connect_result {
 	connect_error,
 	connect_in_progress,
 	connect_timeout,
-	connect_success
+	connect_fail,
+	connect_success,
+	connect_result_next
 };
 
+/* connection options structure definition */
+typedef struct _conn_opts {
+	struct sockaddr_storage		dst;
+	struct sockaddr_storage		bindto;
+	char				bind_if[IFNAMSIZ];
+	unsigned int			connection_to; /* connection time-out */
+#ifdef _WITH_SO_MARK_
+	unsigned int			fwmark; /* to mark packets going out of the socket using SO_MARK */
+#endif
+} conn_opts_t;
+
 /* Prototypes defs */
+#ifdef _WITH_LVS_
 extern enum connect_result
- tcp_bind_connect(int, conn_opts_t *);
+socket_bind_connect(int, conn_opts_t *);
+#endif
 
 extern enum connect_result
- tcp_connect(int, struct sockaddr_storage *);
+socket_connect(int, struct sockaddr_storage *);
 
 extern enum connect_result
- tcp_socket_state(int, thread_t *, int (*func) (thread_t *));
+socket_state(thread_ref_t, thread_func_t);
+
+#ifdef _WITH_LVS_
+extern bool
+socket_connection_state(int, enum connect_result
+		      , thread_ref_t, thread_func_t
+		      , unsigned long);
+#endif
+
+/* Backward compatibility */
+#ifdef _WITH_LVS_
+static inline enum connect_result
+tcp_bind_connect(int fd, conn_opts_t *co)
+{
+	return socket_bind_connect(fd, co);
+}
+#endif
+
+static inline enum connect_result
+tcp_connect(int fd, struct sockaddr_storage *addr)
+{
+	return socket_connect(fd, addr);
+}
+
+static inline enum connect_result
+tcp_socket_state(thread_ref_t thread, thread_func_t func)
+{
+	return socket_state(thread, func);
+}
+
+#ifdef _WITH_LVS_
+static inline bool
+tcp_connection_state(int fd, enum connect_result status, thread_ref_t thread,
+		     thread_func_t func, unsigned long timeout)
+{
+	return socket_connection_state(fd, status, thread, func, timeout);
+}
+#endif
 
-extern int
- tcp_connection_state(int, enum connect_result
-		      , thread_t *, int (*func) (thread_t *)
-		      , long);
 #endif
diff --git a/tools/keepalived/keepalived/libipvs-2.6/libipvs.h b/tools/keepalived/keepalived/include/libipvs.h
similarity index 80%
rename from tools/keepalived/keepalived/libipvs-2.6/libipvs.h
rename to tools/keepalived/keepalived/include/libipvs.h
index 4c46fa2f0..b638ef625 100644
--- a/tools/keepalived/keepalived/libipvs-2.6/libipvs.h
+++ b/tools/keepalived/keepalived/include/libipvs.h
@@ -1,8 +1,6 @@
 /*
  * libipvs.h:	header file for the library ipvs
  *
- * Version:	$Id: libipvs.h,v 1.7 2003/06/08 09:31:39 wensong Exp $
- *
  * Authors:	Wensong Zhang <wensong@linuxvirtualserver.org>
  *
  */
@@ -10,6 +8,7 @@
 #ifndef _LIBIPVS_H
 #define _LIBIPVS_H
 
+//#include "config.h"
 #include "ip_vs.h"
 
 #define OPT_NONE		0x000000
@@ -41,16 +40,11 @@
 #define OPT_SYNPROXY		0x2000000
 #define OPT_IFNAME		0x4000000
 #define OPT_SOCKPAIR		0x8000000
-#define OPT_HASHTAG		0x10000000
-#define NUMBER_OF_OPT		29
-
-#define MINIMUM_IPVS_VERSION_MAJOR      1
-#define MINIMUM_IPVS_VERSION_MINOR      1
-#define MINIMUM_IPVS_VERSION_PATCH      4
+#define OPT_SIPHASH		0x10000000
+#define OPT_QIDHASH		0x20000000
+#define OPT_HASHTAG		0x40000000
+#define NUMBER_OF_OPT		31
 
-#ifndef IPVS_VERSION
-#define IPVS_VERSION(x,y,z)		(((x)<<16)+((y)<<8)+(z))
-#endif
 
 /*
  * The default IPVS_SVC_PERSISTENT_TIMEOUT is a little larger than average
@@ -64,34 +58,32 @@
  */
 #define IPVS_SVC_PERSISTENT_TIMEOUT	(6*60)
 
+extern struct ip_vs_getinfo g_ipvs_info;
 
-typedef struct ip_vs_service_user	ipvs_service_t;
-typedef struct ip_vs_dest_user		ipvs_dest_t;
+typedef struct ip_vs_service_app	ipvs_service_t;
+typedef struct ip_vs_dest_app		ipvs_dest_t;
+typedef struct ip_vs_timeout_user	ipvs_timeout_t;
+typedef struct ip_vs_daemon_app		ipvs_daemon_t;
+typedef struct ip_vs_service_entry_app	ipvs_service_entry_t;
+typedef struct ip_vs_dest_entry_app	ipvs_dest_entry_t;
 typedef struct ip_vs_laddr_user 	ipvs_laddr_t;
 typedef struct ip_vs_blklst_user        ipvs_blklst_t;
-typedef struct ip_vs_timeout_user	ipvs_timeout_t;
-typedef struct ip_vs_daemon_user	ipvs_daemon_t;
 typedef struct ip_vs_tunnel_user	ipvs_tunnel_t;
-typedef struct ip_vs_service_entry	ipvs_service_entry_t;
-typedef struct ip_vs_dest_entry		ipvs_dest_entry_t;
 typedef struct ip_vs_laddr_entry	ipvs_laddr_entry_t;
 typedef struct ip_vs_blklst_entry       ipvs_blklst_entry_t;
 
-/* ipvs info variable */
-extern struct ip_vs_getinfo ipvs_info;
 
 /* init socket and get ipvs info */
 extern int ipvs_init(void);
 
-/* get ipvs info separately */
-extern int ipvs_getinfo(void);
-
-/* get the version number */
-extern unsigned int ipvs_version(void);
+/* Set timeout parameters */
+extern int ipvs_set_timeout(ipvs_timeout_t *to);
 
 /* flush all the rules */
 extern int ipvs_flush(void);
 
+extern struct ip_vs_get_services_app *ipvs_get_services(void);
+
 /* add a virtual service */
 extern int ipvs_add_service(ipvs_service_t *svc);
 
@@ -133,40 +125,17 @@ extern int ipvs_del_blklst(ipvs_service_t *svc, ipvs_blklst_t * blklst);
 extern int ipvs_add_tunnel(ipvs_tunnel_t * tunnel_entry);
 extern int ipvs_del_tunnel(ipvs_tunnel_t * tunnel_entry);
 
-/* set timeout */
-extern int ipvs_set_timeout(ipvs_timeout_t *to);
-
 /* start a connection synchronizaiton daemon (master/backup) */
 extern int ipvs_start_daemon(ipvs_daemon_t *dm);
 
 /* stop a connection synchronizaiton daemon (master/backup) */
 extern int ipvs_stop_daemon(ipvs_daemon_t *dm);
 
-
-/* get all the ipvs services */
-extern struct ip_vs_get_services *ipvs_get_services(void);
-
-/* sort the service entries */
-typedef int (*ipvs_service_cmp_t)(ipvs_service_entry_t *,
-				  ipvs_service_entry_t *);
-extern int ipvs_cmp_services(ipvs_service_entry_t *s1,
-			     ipvs_service_entry_t *s2);
-extern void ipvs_sort_services(struct ip_vs_get_services *s,
-			       ipvs_service_cmp_t f);
-
 /* get the destination array of the specified service */
-extern struct ip_vs_get_dests *ipvs_get_dests(ipvs_service_entry_t *svc);
-
-/* sort the destination entries */
-typedef int (*ipvs_dest_cmp_t)(ipvs_dest_entry_t *,
-			       ipvs_dest_entry_t *);
-extern int ipvs_cmp_dests(ipvs_dest_entry_t *d1,
-			  ipvs_dest_entry_t *d2);
-extern void ipvs_sort_dests(struct ip_vs_get_dests *d,
-			    ipvs_dest_cmp_t f);
-
+extern struct ip_vs_get_dests_app *ipvs_get_dests(ipvs_service_entry_t *svc);
 /* get an ipvs service entry */
-extern ipvs_service_entry_t *ipvs_get_service(struct ip_vs_service_user *hint);
+extern ipvs_service_entry_t *
+ipvs_get_service(struct ip_vs_service_app *hint);
 
 /* get ipvs timeout */
 extern ipvs_timeout_t *ipvs_get_timeout(void);
@@ -189,4 +158,19 @@ extern int ipvs_set_ipaddr(struct inet_addr_param *param, int cmd);
 
 extern struct dp_vs_blklst_conf_array *ipvs_get_blklsts(void);
 
+typedef int (*ipvs_service_cmp_t)(ipvs_service_entry_t *,
+				  ipvs_service_entry_t *);
+extern int ipvs_cmp_services(ipvs_service_entry_t *s1,
+			     ipvs_service_entry_t *s2);
+extern void ipvs_sort_services(struct ip_vs_get_services_app *s,
+			       ipvs_service_cmp_t f);
+
+typedef int (*ipvs_dest_cmp_t)(ipvs_dest_entry_t *,
+			       ipvs_dest_entry_t *);
+extern int ipvs_cmp_dests(ipvs_dest_entry_t *d1,
+			  ipvs_dest_entry_t *d2);
+extern void ipvs_sort_dests(struct ip_vs_get_dests_app *d,
+			    ipvs_dest_cmp_t f);
+
+
 #endif /* _LIBIPVS_H */
diff --git a/tools/keepalived/keepalived/include/libnl_link.h b/tools/keepalived/keepalived/include/libnl_link.h
new file mode 100644
index 000000000..4ea254e6b
--- /dev/null
+++ b/tools/keepalived/keepalived/include/libnl_link.h
@@ -0,0 +1,92 @@
+/*
+ * libnl_link: Handle dynamic linking to netlink libraries
+ *
+ * Authors:	P. Quentin Armitage <Quentin@Armitage.org.uk>
+ *
+ *		This program is free software; you can redistribute it and/or
+ *		modify it under the terms of the GNU General Public License
+ *		as published by the Free Software Foundation; either version
+ *		2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2017-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _LIBNL_LINK_H
+#define _LIBNL_LINK_H
+
+#include "config.h"
+
+#include <stdbool.h>
+
+#include <netlink/socket.h>
+#include <netlink/netlink.h>
+#ifdef LIBIPVS_USE_NL
+#include <netlink/genl/genl.h>
+#include <netlink/genl/ctrl.h>
+#endif
+
+/* The addresses of the functions we want */
+extern struct nl_sock * (*nl_socket_alloc_addr)(void);
+extern void (*nl_socket_free_addr)(struct nl_sock *);
+#ifdef LIBIPVS_USE_NL
+extern int (*genl_connect_addr)(struct nl_sock *);
+extern int (*genl_ctrl_resolve_addr)(struct nl_sock *, const char *);
+extern int (*genlmsg_parse_addr)(struct nlmsghdr *, int, struct nlattr **, int, struct nla_policy *);
+extern void * (*genlmsg_put_addr)(struct nl_msg *, uint32_t, uint32_t, int, int, int, uint8_t, uint8_t);
+extern int (*nla_nest_end_addr)(struct nl_msg *, struct nlattr *);
+extern struct nlattr * (*nla_nest_start_addr)(struct nl_msg *, int);
+extern int (*nla_put_daddr)(struct nl_msg *, int, int, const void *);
+extern struct nl_msg * (*nlmsg_alloc_addr)(void);
+extern void (*nlmsg_free_addr)(struct nl_msg *);
+extern struct nlmsghdr * (*nlmsg_hdr_addr)(struct nl_msg *);
+extern int (*nl_recvmsgs_default_addr)(struct nl_sock *);
+extern int (*nl_send_auto_complete_addr)(struct nl_sock *,  struct nl_msg *);
+extern int (*nl_socket_modify_cb_addr)(struct nl_sock *, enum nl_cb_type, enum nl_cb_kind, nl_recvmsg_msg_cb_t, void *);
+#ifdef _HAVE_LIBNL3_
+extern void * (*nla_data_addr)(const struct nlattr *);
+#ifdef NLA_PUT_S32
+extern int32_t (*nla_get_s32_addr)(const struct nlattr *);
+#endif
+extern char * (*nla_get_string_addr)(const struct nlattr *);
+extern uint16_t (*nla_get_u16_addr)(const struct nlattr *);
+extern uint32_t (*nla_get_u32_addr)(const struct nlattr *);
+extern uint64_t (*nla_get_u64_addr)(const struct nlattr *);
+extern int (*nla_memcpy_addr)(void *, const struct nlattr *, int);
+extern int (*nla_parse_nested_addr)(struct nlattr **, int, struct nlattr *, struct nla_policy *);
+#endif
+#endif
+
+/* We can make it look as though normal linking is being used */
+#define nl_socket_alloc (*nl_socket_alloc_addr)
+#define nl_socket_free (*nl_socket_free_addr)
+#ifdef LIBIPVS_USE_NL
+#define genl_connect (*genl_connect_addr)
+#define genl_ctrl_resolve (*genl_ctrl_resolve_addr)
+#define genlmsg_parse (*genlmsg_parse_addr)
+#define genlmsg_put (*genlmsg_put_addr)
+#define nla_nest_end (*nla_nest_end_addr)
+#define nla_nest_start (*nla_nest_start_addr)
+#define nla_put (*nla_put_daddr)
+#define nlmsg_alloc (*nlmsg_alloc_addr)
+#define nlmsg_free (*nlmsg_free_addr)
+#define nlmsg_hdr (*nlmsg_hdr_addr)
+#define nl_recvmsgs_default (*nl_recvmsgs_default_addr)
+#define nl_send_auto_complete (*nl_send_auto_complete_addr)
+#define nl_socket_modify_cb (*nl_socket_modify_cb_addr)
+#ifdef _HAVE_LIBNL3_
+#define nla_data (*nla_data_addr)
+#ifdef NLA_PUT_S32
+#define nla_get_s32 (*nla_get_s32_addr)
+#endif
+#define nla_get_string (*nla_get_string_addr)
+#define nla_get_u16 (*nla_get_u16_addr)
+#define nla_get_u32 (*nla_get_u32_addr)
+#define nla_get_u64 (*nla_get_u64_addr)
+#define nla_memcpy (*nla_memcpy_addr)
+#define nla_parse_nested (*nla_parse_nested_addr)
+#endif
+#endif
+
+extern bool libnl_init(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/main.h b/tools/keepalived/keepalived/include/main.h
index 498ba3b02..8e3b2b3b1 100644
--- a/tools/keepalived/keepalived/include/main.h
+++ b/tools/keepalived/keepalived/include/main.h
@@ -17,37 +17,82 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _MAIN_H
 #define _MAIN_H
 
+#include "config.h"
+
 /* global includes */
-#include <sys/stat.h>
-#include <sys/wait.h>
-#include <getopt.h>
-
-/* local includes */
-#include "daemon.h"
-#include "memory.h"
-#include "utils.h"
-#include "pidfile.h"
-#include "scheduler.h"
-#include "parser.h"
-#include "vrrp_daemon.h"
-#include "check_daemon.h"
-#include "global_data.h"
+#include <stdbool.h>
+#include <sys/types.h>
+
+/* State flags */
+enum daemon_bits {
+#ifdef _WITH_VRRP_
+	DAEMON_VRRP,
+#endif
+#ifdef _WITH_LVS_
+	DAEMON_CHECKERS,
+#endif
+#ifdef _WITH_BFD_
+	DAEMON_BFD,
+#endif
+	RUN_ALL_CHILDREN,
+};
+
+/* Reloading helpers */
+#define SET_RELOAD      (reload = 1)
+#define UNSET_RELOAD    (reload = 0)
 
 /* Global vars exported */
-extern char *conf_file;		/* Configuration file */
-extern int log_facility;	/* Optional logging facilities */
-extern pid_t vrrp_child;	/* VRRP child process ID */
-extern pid_t checkers_child;	/* Healthcheckers child process ID */
-extern int daemon_mode;		/* VRRP/CHECK subsystem selection */
-extern int linkwatch;		/* Use linkwatch kernel netlink reflection */
+extern const char *version_string;	/* keepalived version */
+extern unsigned long daemon_mode;	/* Which child processes are run */
+extern const char *conf_file;		/* Configuration file */
+extern int log_facility;		/* Optional logging facilities */
+#ifdef _WITH_VRRP_
+extern pid_t vrrp_child;		/* VRRP child process ID */
+extern const char *vrrp_pidfile;	/* overrule default pidfile */
+extern bool have_vrrp_instances;	/* vrrp instances configured */
+#endif
+#ifdef _WITH_LVS_
+extern pid_t checkers_child;		/* Healthcheckers child process ID */
+extern const char *checkers_pidfile;	/* overrule default pidfile */
+extern bool have_virtual_servers;	/* virtual servers configured */
+#endif
+#ifdef _WITH_BFD_
+extern pid_t bfd_child;			/* BFD child process ID */
+extern const char *bfd_pidfile;		/* overrule default pidfile */
+extern bool have_bfd_instances;		/* bfd instances configured */
+#endif
+extern bool reload;			/* Set during a reload */
+extern const char *main_pidfile;	/* overrule default pidfile */
 #ifdef _WITH_SNMP_
-extern int snmp;		/* Enable SNMP support */
+extern bool snmp_option;		/* Enable SNMP support */
+extern const char *snmp_socket;		/* Socket to use for SNMP agent */
+#endif
+extern bool use_pid_dir;		/* pid files in /var/run/keepalived */
+extern unsigned os_major;		/* Kernel version */
+extern unsigned os_minor;
+extern unsigned os_release;
+
+extern void free_parent_mallocs_startup(bool);
+extern void free_parent_mallocs_exit(void);
+extern const char *make_syslog_ident(const char*);
+#ifdef _WITH_VRRP_
+extern bool running_vrrp(void) __attribute__ ((pure));
 #endif
+#ifdef _WITH_LVS_
+extern bool running_checker(void) __attribute__ ((pure));
+#endif
+
+extern void stop_keepalived(void);
+extern void initialise_debug_options(void);
+extern int keepalived_main(int, char**); /* The "real" main function */
+
+extern unsigned child_wait_time;
+extern bool umask_cmdline;
 
 #endif
diff --git a/tools/keepalived/keepalived/include/match.h b/tools/keepalived/keepalived/include/match.h
new file mode 100644
index 000000000..f94dfed9c
--- /dev/null
+++ b/tools/keepalived/keepalived/include/match.h
@@ -0,0 +1,143 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+/**
+ * packet "matcher" of DPVS.
+ *
+ * raychen@qiyi.com, Aug. 2017, initial.
+ */
+#ifndef __DPVS_MATCH_H__
+#define __DPVS_MATCH_H__
+#include <string.h>
+#include <net/if.h>
+#include "inet.h"
+
+struct dp_vs_match {
+    /* TODO: add proto, ... */
+    int  af;
+    /* range is more flexible than prefix. */
+    struct inet_addr_range srange;      /* source range */
+    struct inet_addr_range drange;      /* dest range */
+    char iifname[IFNAMSIZ];
+    char oifname[IFNAMSIZ];
+};
+
+static inline bool is_empty_match(const struct dp_vs_match *match)
+{
+    static const struct dp_vs_match zero_match = {
+        .af = 0,
+        .srange = {
+            .min_addr.in = {0},
+            .max_addr.in = {0},
+            .min_port = 0,
+            .max_port = 0,
+        },
+        .drange = {
+            .min_addr.in = {0},
+            .max_addr.in = {0},
+            .min_port = 0,
+            .max_port = 0,
+        }
+    };
+    return !memcmp(match, &zero_match, sizeof(*match));
+}
+
+static inline int parse_match(const char *pattern, uint8_t *proto,
+                              struct dp_vs_match *match)
+{
+    char _pat[256];
+    char *start, *tok, *sp;
+    int err;
+
+    *proto = 0;
+    memset(match, 0, sizeof(*match));
+    snprintf(_pat, sizeof(_pat), "%s", pattern);
+
+    for (start = _pat; (tok = strtok_r(start, ",", &sp)); start = NULL) {
+        if (strcmp(tok, "tcp") == 0) {
+            *proto = IPPROTO_TCP;
+        } else if (strcmp(tok, "udp") == 0) {
+            *proto = IPPROTO_UDP;
+        } else if (strncmp(tok, "from=", strlen("from=")) == 0) {
+            tok += strlen("from=");
+
+            err = inet_addr_range_parse(tok, &match->srange, &match->af);
+            if (err != EDPVS_OK)
+                return err;
+        } else if (strncmp(tok, "to=", strlen("to=")) == 0) {
+            tok += strlen("to=");
+
+            err = inet_addr_range_parse(tok, &match->drange, &match->af);
+            if (err != EDPVS_OK)
+                return err;
+        } else if (strncmp(tok, "iif=", strlen("iif=")) == 0) {
+            tok += strlen("iif=");
+            snprintf(match->iifname, IFNAMSIZ, "%s", tok);
+        } else if (strncmp(tok, "oif=", strlen("oif=")) == 0) {
+            tok += strlen("oif=");
+            snprintf(match->oifname, IFNAMSIZ, "%s", tok);
+        } else {
+            return EDPVS_INVAL;
+        }
+    }
+
+    return EDPVS_OK;
+}
+
+static inline char *dump_match(uint8_t proto, const struct dp_vs_match *match,
+                               char *buf, size_t size)
+{
+    //static const struct inet_addr_range zero_range = {{{0}}};
+    static const struct inet_addr_range zero_range = {
+        .min_addr.in = {0},
+        .max_addr.in = {0},
+        .min_port = 0,
+        .max_port = 0
+    };
+    size_t left = size;
+
+    if (!match || !buf || size < 1)
+        return NULL;
+
+    buf[0] = '\0';
+    left -= snprintf(buf + strlen(buf), left, "%s",
+                     proto ? inet_proto_name(proto) : "unspec");
+
+    if (memcmp(&match->srange, &zero_range, sizeof(zero_range)) != 0) {
+        left -= snprintf(buf + strlen(buf), left, ",from=");
+        left -= inet_addr_range_dump(match->af, &match->srange,
+                                     buf + strlen(buf), left);
+    }
+
+    if (memcmp(&match->drange, &zero_range, sizeof(zero_range)) != 0) {
+        left -= snprintf(buf + strlen(buf), left, ",to=");
+        left -= inet_addr_range_dump(match->af, &match->drange,
+                                     buf + strlen(buf), left);
+    }
+
+    if (strlen(match->iifname)) {
+        left -= snprintf(buf + strlen(buf), left, ",iif=%s", match->iifname);
+    }
+
+    if (strlen(match->oifname)) {
+        left -= snprintf(buf + strlen(buf), left, ",oif=%s", match->oifname);
+    }
+
+    return buf;
+}
+
+#endif /* __DPVS_MATCH_H__ */
diff --git a/tools/keepalived/keepalived/include/namespaces.h b/tools/keepalived/keepalived/include/namespaces.h
new file mode 100644
index 000000000..09baf8ee6
--- /dev/null
+++ b/tools/keepalived/keepalived/include/namespaces.h
@@ -0,0 +1,32 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Linux namespace handling.
+ *
+ * Author:      Quentin Armitage <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2016-2016 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _NAMESPACE_H_
+#define _NAMESPACE_H_
+
+#include <stdbool.h>
+
+extern void free_dirname(void);
+extern bool set_namespaces(const char*);
+extern void clear_namespaces(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/pidfile.h b/tools/keepalived/keepalived/include/pidfile.h
index e16650a76..df919e78b 100644
--- a/tools/keepalived/keepalived/include/pidfile.h
+++ b/tools/keepalived/keepalived/include/pidfile.h
@@ -17,29 +17,46 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _PIDFILE_H
 #define _PIDFILE_H
 
 /* system include */
-#include <unistd.h>
-#include <stdio.h>
-#include <signal.h>
-#include <sys/types.h>
-#include <syslog.h>
+#include <stdbool.h>
+#include <paths.h>
 
 /* lock pidfile */
-#define KEEPALIVED_PID_FILE "/var/run/keepalived.pid"
-#define KEEPALIVED_VRRP_PID_FILE "/var/run/keepalived_vrrp.pid"
-#define KEEPALIVED_CHECKERS_PID_FILE "/var/run/keepalived_checkers.pid"
-#define VRRP_PID_FILE "/var/run/vrrp.pid"
-#define CHECKERS_PID_FILE "/var/run/checkers.pid"
+#if defined PID_DIR_ROOT
+#define	PID_DIR			PID_DIR_ROOT "/run/"
+#elif defined GNU_STD_PATHS
+#define PID_DIR			LOCAL_STATE_DIR "/run/"
+#else
+#define PID_DIR			_PATH_VARRUN
+#endif
+
+#define KEEPALIVED_PID_DIR	PID_DIR PACKAGE "/"
+#define KEEPALIVED_PID_FILE	PACKAGE
+
+#ifdef _WITH_VRRP_
+#define VRRP_PID_FILE		"vrrp"
+#endif
+#ifdef _WITH_LVS_
+#define CHECKERS_PID_FILE	"checkers"
+#endif
+#ifdef _WITH_BFD_
+#define BFD_PID_FILE		"bfd"
+#endif
+#define	PID_EXTENSION		".pid"
+
+extern const char *pid_directory;
 
 /* Prototypes */
-extern int pidfile_write(char *, int);
-extern void pidfile_rm(char *);
-extern int keepalived_running(int);
+extern void create_pid_dir(void);
+extern void remove_pid_dir(void);
+extern int pidfile_write(const char *, int);
+extern void pidfile_rm(const char *);
+extern bool keepalived_running(unsigned long);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/smtp.h b/tools/keepalived/keepalived/include/smtp.h
index 42a41c963..b3ec18ef6 100644
--- a/tools/keepalived/keepalived/include/smtp.h
+++ b/tools/keepalived/keepalived/include/smtp.h
@@ -17,39 +17,58 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _SMTP_H
 #define _SMTP_H
 
 /* globales includes */
-#include <netdb.h>
+#include <sys/types.h>
+#include <stdbool.h>
 
 /* local includes */
-#include "check_data.h"
-#include "vrrp_data.h"
-#include "scheduler.h"
+#include "global_data.h"
 #include "layer4.h"
+#ifdef _WITH_LVS_
+#include "check_data.h"
+#include "check_api.h"
+#endif
+#ifdef _WITH_VRRP_
 #include "vrrp.h"
+#endif
 
 /* global defs */
 #define SMTP_PORT_STR		"25"
-#define SMTP_PORT		25
-#define SMTP_BUFFER_LENGTH	512
-#define SMTP_BUFFER_MAX		1024
-#define SMTP_MAX_FSM_STATE	10
-#define SMTP_EMAIL_ADDR_MAX_LENGTH	64
-
-/* SMTP command stage */
-#define HELO	4
-#define MAIL	5
-#define RCPT	6
-#define DATA	7
-#define BODY	8
-#define QUIT	9
-#define END	10
-#define ERROR	11
+#define SMTP_BUFFER_LENGTH	512U
+#define SMTP_BUFFER_MAX		1024U
+
+/* SMTP command stage. This values are used along with the enum connect_result
+ * values in the SMTP FSM, and so need to follow them. */
+enum smtp_cmd_state {
+	HELO = connect_result_next,
+	MAIL,
+	RCPT,
+	DATA,
+	BODY,
+	QUIT,
+	END,
+	ERROR
+};
+#define SMTP_MAX_FSM_STATE	END
+
+/* SMTP mesage type format */
+typedef enum {
+#ifdef _WITH_LVS_
+	SMTP_MSG_RS,
+	SMTP_MSG_VS,
+	SMTP_MSG_RS_SHUT,
+#endif
+#ifdef _WITH_VRRP_
+	SMTP_MSG_VGROUP,
+	SMTP_MSG_VRRP,
+#endif
+} smtp_msg_t;
 
 /* SMTP thread argument structure */
 #define MAX_HEADERS_LENGTH 256
@@ -72,12 +91,12 @@ do {					\
 typedef struct _smtp {
 	int		fd;
 	int		stage;
-	int		email_it;
+	element		next_email_element;
 	char		*subject;
 	char		*body;
 	char		*buffer;
 	char		*email_to;
-	long		buflen;
+	size_t		buflen;
 } smtp_t;
 
 /* SMTP command string processing */
@@ -91,7 +110,29 @@ typedef struct _smtp {
 #define SMTP_SEND_CMD    "\r\n.\r\n"
 #define SMTP_QUIT_CMD    "QUIT\r\n"
 
+#define FMT_SMTP_HOST()	inet_sockaddrtopair(&global_data->smtp_server)
+
+#ifdef _WITH_LVS_
+typedef struct _smtp_rs {
+	real_server_t *rs;
+	virtual_server_t *vs;
+} smtp_rs;
+#else
+typedef void real_server_t;
+#endif
+#ifndef _WITH_VRRP_
+typedef void vrrp_t;
+typedef void vrrp_sgroup_t;
+#endif
+
+#ifdef _SMTP_ALERT_DEBUG_
+extern bool do_smtp_alert_debug;
+#endif
+
 /* Prototypes defs */
-extern void smtp_alert(real_server_t *, vrrp_t *, vrrp_sgroup_t *,
-		       const char *, const char *);
+extern void smtp_alert(smtp_msg_t, void *data, const char *, const char *);
+#ifdef THREAD_DUMP
+extern void register_smtp_addresses(void);
+#endif
+
 #endif
diff --git a/tools/keepalived/keepalived/include/snmp.h b/tools/keepalived/keepalived/include/snmp.h
index 4c8b5401d..a887387ff 100644
--- a/tools/keepalived/keepalived/include/snmp.h
+++ b/tools/keepalived/keepalived/include/snmp.h
@@ -17,12 +17,17 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _SNMP_H
 #define _SNMP_H
 
+#include "config.h"
+
+#include <sys/types.h>
+#include <stdbool.h>
+
 #define USING_AGENTX_SUBAGENT_MODULE
 
 #include <net-snmp/net-snmp-config.h>
@@ -34,31 +39,47 @@
 #else
 /* The above header may be buggy. We just need those two functions. */
 int header_simple_table(struct variable *, oid *, size_t *,
-			int, size_t *,
-			WriteMethod ** write_method, int);
+			int, size_t *, WriteMethod **, int);
 int header_generic(struct variable *, oid *, size_t *, int,
 		   size_t *, WriteMethod **);
 #endif
 #undef FREE
 
 #include "list.h"
-#include "utils.h"
+
+#define SNMP_DEFAULT_NETWORK_SOCKET	"udp:localhost:705"
 
 #define KEEPALIVED_OID 1, 3, 6, 1, 4, 1, 9586, 100, 5
 #define SNMPTRAP_OID 1, 3, 6, 1, 6, 3, 1, 1, 4, 1, 0
 #define GLOBAL_OID {KEEPALIVED_OID, 1}
 
-/* For net-snmp */
-extern int register_sysORTable(oid *, size_t, const char *);
-extern int unregister_sysORTable(oid *, size_t);
+typedef union {
+	unsigned char uc;
+	unsigned long u;
+	long s;
+} longret_t;
+/* The type of a FindVarMethod function should be const unsigned char *, but
+ * it is declared unsigned char *. We use this simple work around to be able
+ * to return const char *, and other types. */
+typedef union {
+	const char *cp;
+	u_char *p;
+} snmp_ret_t;
 
-extern unsigned long snmp_scope(int scope);
-extern void* snmp_header_list_table(struct variable *vp, oid *name, size_t *length,
-				    int exact, size_t *var_len, WriteMethod **write_method,
-				    list dlist);
-extern void snmp_agent_init(oid *myoid, int len,
-			    char *name, struct variable *variables,
-			    int varsize, int varlen);
-extern void snmp_agent_close(oid *myoid, int len, char *name);
+extern unsigned long snmp_scope(int ) __attribute__ ((const));
+extern void* snmp_header_list_table(struct variable *, oid *, size_t *,
+				    int, size_t *, WriteMethod **,
+				    list);
+extern element snmp_find_element(struct variable *, oid *, size_t *,
+				 int, size_t *, WriteMethod **,
+				 list, size_t);
+extern void snmp_agent_init(const char *, bool);
+extern void snmp_register_mib(oid *, size_t, const char *,
+			      struct variable *, size_t, size_t);
+extern void snmp_unregister_mib(oid *, size_t);
+extern void snmp_agent_close(bool);
+#ifdef THREAD_DUMP
+extern void register_snmp_addresses(void);
+#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/include/sockopt.h b/tools/keepalived/keepalived/include/sockopt.h
new file mode 100644
index 000000000..ffa3ae0fc
--- /dev/null
+++ b/tools/keepalived/keepalived/include/sockopt.h
@@ -0,0 +1,63 @@
+#ifndef __DPVS_SOCK_OPT_H__
+#define __DPVS_SOCK_OPT_H__
+
+#include <stdint.h>
+#include <stdlib.h>
+#include <sys/socket.h>
+#include <sys/un.h>
+
+#define SOCKOPT_VERSION_MAJOR           1
+#define SOCKOPT_VERSION_MINOR           0
+#define SOCKOPT_VERSION_PATCH           0
+#define SOCKOPT_VERSION     ((SOCKOPT_VERSION_MAJOR << 16) + \
+        (SOCKOPT_VERSION_MINOR << 8) + SOCKOPT_VERSION_PATCH)
+
+#define SOCKOPT_MSG_BUFFER_SIZE         (1UL << 12)
+#define SOCKOPT_ERRSTR_LEN              64
+
+enum {
+    ESOCKOPT_INVAL = -16385,
+    ESOCKOPT_IO,
+    ESOCKOPT_NOMEM,
+    ESOCKOPT_VERSION,
+    ESOCKOPT_UNKOWN = 65535,
+    ESOCKOPT_OK = 0,
+};
+
+typedef uint32_t sockoptid_t;
+
+enum sockopt_type {
+    SOCKOPT_GET = 0,
+    SOCKOPT_SET,
+    SOCKOPT_TYPE_MAX,
+};
+
+struct dpvs_sock_msg {
+    uint32_t version;
+    sockoptid_t id;
+    enum sockopt_type type;
+    size_t len;
+    char data[0];
+};
+
+struct dpvs_sock_msg_reply {
+    uint32_t version;
+    sockoptid_t id;
+    enum sockopt_type type;
+    int errcode;
+    char errstr[SOCKOPT_ERRSTR_LEN];
+    size_t len;
+    char data[0];
+};
+
+extern int dpvs_setsockopt(sockoptid_t cmd, const void *in, size_t in_len);
+extern int dpvs_getsockopt(sockoptid_t cmd, const void *in, size_t in_len,
+        void **out, size_t *out_len);
+
+static inline void dpvs_sockopt_msg_free(void *msg)
+{
+    free(msg);
+    msg = NULL;
+}
+
+#endif
diff --git a/tools/keepalived/keepalived/include/track_process.h b/tools/keepalived/keepalived/include/track_process.h
new file mode 100644
index 000000000..dbe6d6ebb
--- /dev/null
+++ b/tools/keepalived/keepalived/include/track_process.h
@@ -0,0 +1,49 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        track_process.c include file.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2018-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_TRACK_PROCESS_H
+#define _VRRP_TRACK_PROCESS_H
+
+/* global includes */
+#include <stdbool.h>
+
+/* local includes */
+#include "list.h"
+#include "vrrp.h"
+
+#ifdef _TRACK_PROCESS_DEBUG_
+extern bool do_track_process_debug;
+extern bool do_track_process_debug_detail;
+#endif
+extern bool proc_events_not_supported;
+
+/* prototypes */
+extern void reload_track_processes(void);
+extern bool open_track_processes(void);
+extern bool close_track_processes(void);
+extern bool init_track_processes(list);
+extern void end_process_monitor(void);
+#ifdef THREAD_DUMP
+extern void register_process_monitor_addresses(void);
+#endif
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp.h b/tools/keepalived/keepalived/include/vrrp.h
index 1110bb9c4..2290e903a 100644
--- a/tools/keepalived/keepalived/include/vrrp.h
+++ b/tools/keepalived/keepalived/include/vrrp.h
@@ -8,9 +8,9 @@
  *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
  *
- *              This program is distributed in the hope that it will be useful, 
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of 
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
  *
  *              This program is free software; you can redistribute it and/or
@@ -18,148 +18,333 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_H
 #define _VRRP_H
 
+#include "config.h"
+
 /* system include */
-#include <unistd.h>
+#include <stdint.h>
+#include <stdbool.h>
+#include <net/if.h>
+#include <sys/types.h>
+#include <sys/socket.h>
+#include <arpa/inet.h>
+#include <netinet/ip6.h>
 
 /* local include */
-#include "vrrp_ipaddress.h"
-#include "vrrp_iproute.h"
+#include "vector.h"
+#include "list.h"
+#include "timer.h"
+#include "notify.h"
+#if defined _WITH_VRRP_AUTH_
 #include "vrrp_ipsecah.h"
+#endif
 #include "vrrp_if.h"
+#include "vrrp_sock.h"
 #include "vrrp_track.h"
-#include "timer.h"
-#include "utils.h"
-#include "vector.h"
-#include "list.h"
+
+/* Special value for parameters when we want to know they haven't been set */
+#define	PARAMETER_UNSET		UINT_MAX
+
+struct _ip_address;
 
 typedef struct _vrrphdr {			/* rfc2338.5.1 */
 	uint8_t			vers_type;	/* 0-3=type, 4-7=version */
 	uint8_t			vrid;		/* virtual router id */
 	uint8_t			priority;	/* router priority */
 	uint8_t			naddr;		/* address counter */
-	uint8_t			auth_type;	/* authentification type */
-	uint8_t			adver_int;	/* advertissement interval(in sec) */
+	union {
+		struct {
+			uint8_t	auth_type;	/* authentification type */
+			uint8_t adver_int;	/* advertisement interval (in sec) */
+		} v2;
+		struct {
+			uint16_t adver_int;	/* advertisement interval (in centi-sec (100ms)) */
+		} v3;
+	};
 	uint16_t		chksum;		/* checksum (ip-like one) */
 	/* here <naddr> ip addresses */
 	/* here authentification infos */
 } vrrphdr_t;
 
+typedef struct {
+	uint32_t src;
+	uint32_t dst;
+	uint8_t  zero;
+	uint8_t  proto;
+	uint16_t len;
+} ipv4_phdr_t;
+
 /* protocol constants */
-#define INADDR_VRRP_GROUP	0xe0000012	/* multicast addr - rfc2338.5.2.2 */
+#define INADDR_VRRP_GROUP	"224.0.0.18"	/* multicast IPv4 addr - rfc2338.5.2.2 */
+#define INADDR6_VRRP_GROUP	"ff02::12"	/* multicast IPv6 addr - rfc5798.5.1.2.2 */
 #define VRRP_IP_TTL		255		/* in and out pkt ttl -- rfc2338.5.2.3 */
 #define IPPROTO_VRRP		112		/* IP protocol number -- rfc2338.5.2.4 */
-#define VRRP_VERSION		2		/* current version -- rfc2338.5.3.1 */
+#define VRRP_VERSION_2		2		/* VRRP version 2 -- rfc2338.5.3.1 */
+#define VRRP_VERSION_3		3		/* VRRP version 3 -- rfc5798.5.2.1 */
 #define VRRP_PKT_ADVERT		1		/* packet type -- rfc2338.5.3.2 */
 #define VRRP_PRIO_OWNER		255		/* priority of the ip owner -- rfc2338.5.3.4 */
 #define VRRP_PRIO_DFL		100		/* default priority -- rfc2338.5.3.4 */
 #define VRRP_PRIO_STOP		0		/* priority to stop -- rfc2338.5.3.4 */
+#define VRRP_MAX_ADDR		0xFF		/* count addr field is 8 bits wide */
 #define VRRP_AUTH_NONE		0		/* no authentification -- rfc2338.5.3.6 */
+#ifdef _WITH_VRRP_AUTH_
 #define VRRP_AUTH_PASS		1		/* password authentification -- rfc2338.5.3.6 */
 #define VRRP_AUTH_AH		2		/* AH(IPSec) authentification - rfc2338.5.3.6 */
+#endif
 #define VRRP_ADVER_DFL		1		/* advert. interval (in sec) -- rfc2338.5.3.7 */
-#define VRRP_GARP_DELAY 	(5 * TIMER_HZ)	/* Default delay to launch gratuitous arp */
+#define VRRP_GARP_DELAY		(5 * TIMER_HZ)	/* Default delay to launch gratuitous arp */
+#define VRRP_GARP_REP		5		/* Default repeat value for MASTER state gratuitous arp */
+#define VRRP_GARP_REFRESH	0		/* Default interval for refresh gratuitous arp (0 = none) */
+#define VRRP_GARP_REFRESH_REP	1		/* Default repeat value for refresh gratuitous arp */
 
 /*
  * parameters per vrrp sync group. A vrrp_sync_group is a set
  * of VRRP instances that need to be state sync together.
  */
 typedef struct _vrrp_sgroup {
-	char			*gname;			/* Group name */
-	vector_t		*iname;			/* Set of VRRP instances in this group */
-	list			index_list;		/* List of VRRP instances */
+	const char		*gname;			/* Group name */
+	const vector_t		*iname;			/* Set of VRRP instances in this group, only used during initialisation */
+	list			vrrp_instances;		/* List of VRRP instances */
+	unsigned		num_member_fault;	/* Number of members of group in fault state */
+	unsigned		num_member_init;	/* Number of members of group in pending state */
 	int			state;			/* current stable state */
-	int			global_tracking;	/* Use floating priority and scripts
-							 * All VRRP must share same tracking conf
-							 */
+	bool			sgroup_tracking_weight;	/* Use floating priority and scripts
+							 * Used if need different priorities needed on a track object in a sync group.
+							 * It probably won't work properly. */
+	list			track_ifp;		/* Interface state we monitor */
+	list			track_script;		/* Script state we monitor */
+	list			track_file;		/* Files whose value we monitor (list of tracked_file_t) */
+#ifdef _WITH_CN_PROC_
+	list			track_process;		/* Processes we monitor (list of tracked_process_t) */
+#endif
+#ifdef _WITH_BFD_
+	list			track_bfd;		/* List of tracked_bfd_t */
+#endif
 
 	/* State transition notification */
-	int			notify_exec;
-	char			*script_backup;
-	char			*script_master;
-	char			*script_fault;
-	char			*script;
+	bool			notify_exec;
+	notify_script_t		*script_backup;
+	notify_script_t		*script_master;
+	notify_script_t		*script_fault;
+	notify_script_t		*script_stop;
+	notify_script_t		*script;
 	int			smtp_alert;
+	int			last_email_state;
 } vrrp_sgroup_t;
 
+/* Statistics */
+typedef struct _vrrp_stats {
+	uint64_t	advert_rcvd;
+	uint32_t	advert_sent;
+
+	uint32_t	become_master;
+	uint32_t	release_master;
+
+	uint64_t	packet_len_err;
+	uint64_t	advert_interval_err;
+	uint64_t	ip_ttl_err;
+	uint64_t	invalid_type_rcvd;
+	uint64_t	addr_list_err;
+
+	uint32_t	invalid_authtype;
+#ifdef _WITH_VRRP_AUTH_
+	uint32_t	authtype_mismatch;
+	uint32_t	auth_failure;
+#endif
+
+	uint64_t	pri_zero_rcvd;
+	uint64_t	pri_zero_sent;
+
+#ifdef _WITH_SNMP_RFC_
+	uint32_t	chk_err;
+	uint32_t	vers_err;
+	uint32_t	vrid_err;
+	timeval_t	uptime;
+#ifdef _WITH_SNMP_RFCV3_
+	uint32_t	master_reason;
+	uint32_t	next_master_reason;
+	uint32_t	proto_err_reason;
+#endif
+#endif
+} vrrp_stats;
+
+#ifdef _WITH_UNICAST_CHKSUM_COMPAT_
+/* Whether we are using v1.3.6 and earlier VRRPv3 unicast checksums */
+typedef enum chksum_compatibility {
+	CHKSUM_COMPATIBILITY_NONE,		/* Default setting, will revert to old if receive advert with old */
+	CHKSUM_COMPATIBILITY_NEVER,		/* Do not auto set old checksum mode */
+	CHKSUM_COMPATIBILITY_MIN_COMPAT,	/* Values before this are new chksum, values after are old */
+	CHKSUM_COMPATIBILITY_CONFIG,		/* Configuration specifies old chksum */
+	CHKSUM_COMPATIBILITY_AUTO,		/* Use old chksum mode due to received advert with old mode */
+} chksum_compatibility_t;
+#endif
+
+#ifdef CHECKSUM_DIAGNOSTICS
+typedef struct {
+	uint32_t		last_rx_checksum;
+	uint32_t		last_tx_checksum;
+	uint8_t			last_rx_priority;
+	uint8_t			last_tx_priority;
+	in_addr_t		last_rx_from;
+	bool			sent_to;
+	bool			received_from;
+} checksum_check_t;
+#endif
+
+typedef struct {
+	struct sockaddr_storage	address;
+#ifdef CHECKSUM_DIAGNOSTICS
+	checksum_check_t	chk;
+#endif
+} unicast_peer_t;
+
 /* parameters per virtual router -- rfc2338.6.1.2 */
 typedef struct _vrrp_t {
 	sa_family_t		family;			/* AF_INET|AF_INET6 */
-	char			*iname;			/* Instance Name */
+	const char		*iname;			/* Instance Name */
 	vrrp_sgroup_t		*sync;			/* Sync group we belong to */
+	vrrp_stats		*stats;			/* Statistics */
 	interface_t		*ifp;			/* Interface we belong to */
-    char        dpdk_ifp[16];
-	int			dont_track_primary;	/* If set ignores ifp faults */
-	int			vmac_flags;		/* VRRP VMAC flags */
+	bool			dont_track_primary;	/* If set ignores ifp faults */
+	bool			linkbeat_use_polling;	/* Don't use netlink for interface status */
+	bool			skip_check_adv_addr;	/* If set, don't check the VIPs in subsequent
+							 * adverts from the same master */
+	unsigned		strict_mode;		/* Enforces strict VRRP compliance */
+#ifdef _HAVE_VRRP_VMAC_
+	unsigned long		vmac_flags;		/* VRRP VMAC flags */
+    	char        dpdk_ifp[16];
 	char			vmac_ifname[IFNAMSIZ];	/* Name of VRRP VMAC interface */
-	unsigned int		vmac_ifindex;		/* ifindex of vmac interface */
+	bool			duplicate_vrid_fault;	/* Set if we have a fault due to duplicate VRID */
+#ifdef _HAVE_VRRP_IPVLAN_
+	struct _ip_address	*ipvlan_addr;		/* Address to configure on an ipvlan interface */
+	int			ipvlan_type;		/* Bridge, private or VEPA mode */
+#endif
+#endif
+	interface_t		*configured_ifp;	/* Interface the configuration says we are on */
 	list			track_ifp;		/* Interface state we monitor */
 	list			track_script;		/* Script state we monitor */
+	list			track_file;		/* list of tracked_file_t - Files whose value we monitor */
+#ifdef _WITH_CN_PROC_
+	list			track_process;		/* list of tracked_process_t - Processes we monitor */
+#endif
+#ifdef _WITH_BFD_
+	list			track_bfd;		/* List of tracked_bfd_t */
+#endif
+	unsigned		num_script_if_fault;	/* Number of scripts and interfaces in fault state */
+	unsigned		num_script_init;	/* Number of scripts in init state */
+	bool			notifies_sent;		/* Set when initial notifies have been sent */
 	struct sockaddr_storage	saddr;			/* Src IP address to use in VRRP IP header */
+	bool			saddr_from_config;	/* Set if the source address is from configuration */
+	bool			track_saddr;		/* Fault state if configured saddr is missing */
+	struct sockaddr_storage	pkt_saddr;		/* Src IP address received in VRRP IP header */
+#ifdef IPV6_RECVHOPLIMIT
+	int			hop_limit;		/* IPv6 hop limit returned via ancillary data */
+#endif
+#ifdef IPV6_RECVPKTINFO
+	bool			multicast_pkt;		/* Last IPv6 packet received was multicast */
+#endif
 	list			unicast_peer;		/* List of Unicast peer to send advert to */
-	char			*lvs_syncd_if;		/* handle LVS sync daemon state using this
-							 * instance FSM & running on specific interface
-							 * => eth0 for example.
-							 */
-	int			garp_delay;		/* Delay to launch gratuitous ARP */
-	int			garp_refresh;		/* Next scheduled gratuitous ARP refresh */
+#ifdef _WITH_UNICAST_CHKSUM_COMPAT_
+	chksum_compatibility_t	unicast_chksum_compat;	/* Whether v1.3.6 and earlier chksum is used */
+#endif
+#ifdef CHECKSUM_DIAGNOSTICS
+	checksum_check_t	chk;
+#endif
+	struct sockaddr_storage master_saddr;		/* Store last heard Master address */
+	uint8_t			master_priority;	/* Store last heard priority */
+	timeval_t		last_transition;	/* Store transition time */
+	unsigned		garp_delay;		/* Delay to launch gratuitous ARP */
+	timeval_t		garp_refresh;		/* Next scheduled gratuitous ARP refresh */
 	timeval_t		garp_refresh_timer;	/* Next scheduled gratuitous ARP timer */
-	int			vrid;			/* virtual id. from 1(!) to 255 */
-	int			base_priority;		/* configured priority value */
-	int			effective_priority;	/* effective priority value */
-	int			vipset;			/* All the vips are set ? */
+	unsigned		garp_rep;		/* gratuitous ARP repeat value */
+	unsigned		garp_refresh_rep;	/* refresh gratuitous ARP repeat value */
+	unsigned		garp_lower_prio_delay;	/* Delay to second set or ARP messages */
+	bool			garp_pending;		/* Are there gratuitous ARP messages still to be sent */
+	bool			gna_pending;		/* Are there gratuitous NA messages still to be sent */
+	unsigned		garp_lower_prio_rep;	/* Number of ARP messages to send at a time */
+	unsigned		lower_prio_no_advert;	/* Don't send advert after lower prio advert received */
+	unsigned		higher_prio_send_advert; /* Send advert after higher prio advert received */
+	uint8_t			vrid;			/* virtual id. from 1(!) to 255 */
+	uint8_t			base_priority;		/* configured priority value */
+	uint8_t			effective_priority;	/* effective priority value */
+	int			total_priority;		/* base_priority +/- track_script, track_interface and track_file weights.
+							   effective_priority is this within the range [1,254]. */
+	bool			vipset;			/* All the vips are set ? */
 	list			vip;			/* list of virtual ip addresses */
 	list			evip;			/* list of protocol excluded VIPs.
 							 * Those VIPs will not be presents into the
 							 * VRRP adverts
 							 */
+	bool			promote_secondaries;	/* Set promote_secondaries option on interface */
+	bool			evip_other_family;	/* There are eVIPs of the different address family from the vrrp family */
 	list			vroutes;		/* list of virtual routes */
-	int			adver_int;		/* delay between advertisements(in sec) */
-	int			nopreempt;		/* true if higher prio does not preempt lower */
-	long			preempt_delay;		/* Seconds*TIMER_HZ after startup until
+	list			vrules;			/* list of virtual rules */
+	unsigned		adver_int;		/* locally configured delay between advertisements*/
+	unsigned		master_adver_int;	/* In v3, when we become BACKUP, we use the MASTER's
+							 * adver_int. If we become MASTER again, we use the
+							 * value we were originally configured with.
+							 * In v2, this will always be the configured adver_int.
+							 */
+	size_t			kernel_rx_buf_size;	/* Socket receive buffer size */
+
+#ifdef _WITH_FIREWALL_
+	unsigned		accept;			/* Allow the non-master owner to process
+							 * the packets destined to VIP. */
+	bool			firewall_rules_set;	/* Firewall drop rules set to VIP list ? */
+#endif
+	bool			nopreempt;		/* true if higher prio does not preempt lower */
+	unsigned long		preempt_delay;		/* Seconds*TIMER_HZ after startup until
 							 * preemption based on higher prio over lower
 							 * prio is allowed.  0 means no delay.
 							 */
 	timeval_t		preempt_time;		/* Time after which preemption can happen */
-	int			state;			/* internal state (init/backup/master) */
-	int			init_state;		/* the initial state of the instance */
+	int			state;			/* internal state (init/backup/master/fault) */
+#ifdef _WITH_SNMP_VRRP_
+	int			configured_state;	/* the configured state of the instance */
+#endif
 	int			wantstate;		/* user explicitly wants a state (back/mast) */
-	int			fd_in;			/* IN socket descriptor */
-	int			fd_out;			/* OUT socket descriptor */
+	bool			reload_master;		/* set if the instance is a master being reloaded */
+	sock_t			*sockets;		/* In and out socket descriptors */
 
 	int			debug;			/* Debug level 0-4 */
 
-	int			quick_sync;		/* Will be set when waiting for the other members
-							 * in the sync group to become master.
-							 * If set the next check will occur in one interval
-							 * instead of three intervals.
-							 */
+	int			version;		/* VRRP version (2 or 3) */
+
 	/* State transition notification */
 	int			smtp_alert;
-	int			notify_exec;
-	char			*script_backup;
-	char			*script_master;
-	char			*script_fault;
-	char			*script_stop;
-	char			*script;
-
-	/* rfc2336.6.2 */
+	int			last_email_state;
+	bool			notify_exec;
+	notify_script_t		*script_backup;
+	notify_script_t		*script_master;
+	notify_script_t		*script_fault;
+	notify_script_t		*script_stop;
+	notify_script_t		*script_master_rx_lower_pri;
+	notify_script_t		*script;
+	int			notify_priority_changes;
+
+	/* rfc2338.6.2 */
 	uint32_t		ms_down_timer;
 	timeval_t		sands;
 
 	/* Sending buffer */
 	char			*send_buffer;		/* Allocated send buffer */
-	int			send_buffer_size;
+	size_t			send_buffer_size;
+	uint32_t		ipv4_csum;		/* Checksum ip IPv4 pseudo header for VRRPv3 */
 
-	/* Authentication data */
-	int			auth_type;		/* authentification type. VRRP_AUTH_* */
+#if defined _WITH_VRRP_AUTH_
+	/* Authentication data (only valid for VRRPv2) */
+	uint8_t			auth_type;		/* authentification type. VRRP_AUTH_* */
 	uint8_t			auth_data[8];		/* authentification data */
 
+	/* IPSEC AH counter def (only valid for VRRPv2) --rfc2402.3.3.2 */
+	seq_counter_t		ipsecah_counter;
+#endif
+
 	/*
 	 * To have my own ip_id creates collision with kernel ip->id
 	 * but it should be ok because the packets are unlikely to be
@@ -169,8 +354,11 @@ typedef struct _vrrp_t {
 	 */
 	int			ip_id;
 
-	/* IPSEC AH counter def --rfc2402.3.3.2 */
-	seq_counter_t		*ipsecah_counter;
+	/* RB tree on a sock_t for receiving data */
+	rb_node_t		rb_vrid;
+
+	/* RB tree on a sock_t for vrrp sands */
+	rb_node_t		rb_sands;
 } vrrp_t;
 
 /* VRRP state machine -- rfc2338.6.4 */
@@ -178,71 +366,76 @@ typedef struct _vrrp_t {
 #define VRRP_STATE_BACK			1	/* rfc2338.6.4.2 */
 #define VRRP_STATE_MAST			2	/* rfc2338.6.4.3 */
 #define VRRP_STATE_FAULT		3	/* internal */
-#define VRRP_STATE_GOTO_MASTER		4	/* internal */
-#define VRRP_STATE_LEAVE_MASTER		5	/* internal */
-#define VRRP_STATE_GOTO_FAULT 		98	/* internal */
-#define VRRP_DISPATCHER 		99	/* internal */
-#define VRRP_MCAST_RETRY		10	/* internal */
-#define VRRP_MAX_FSM_STATE		4	/* internal */
+#define VRRP_STATE_STOP			98	/* internal */
+#define VRRP_EVENT_MASTER_RX_LOWER_PRI	1000	/* Dummy state for sending event notify */
+#define VRRP_EVENT_MASTER_PRIORITY_CHANGE 1001	/* Dummy state for sending event notify */
+#define VRRP_EVENT_BACKUP_PRIORITY_CHANGE 1002	/* Dummy state for sending event notify */
 
 /* VRRP packet handling */
 #define VRRP_PACKET_OK       0
 #define VRRP_PACKET_KO       1
 #define VRRP_PACKET_DROP     2
 #define VRRP_PACKET_NULL     3
-#define VRRP_PACKET_OTHER    4	/* Muliple VRRP on LAN, Identify "other" VRRP */
+#define VRRP_PACKET_OTHER    4	/* Multiple VRRP on LAN, Identify "other" VRRP */
 
 /* VRRP Packet fixed length */
-#define VRRP_MAX_VIP		20
-#define VRRP_PACKET_TEMP_LEN	1024
 #define VRRP_AUTH_LEN		8
 #define VRRP_VIP_TYPE		(1 << 0)
 #define VRRP_EVIP_TYPE		(1 << 1)
 
-/* VRRP macro */
-#define VRRP_IS_BAD_VID(id)		((id)<1 || (id)>255)	/* rfc2338.6.1.vrid */
-#define VRRP_IS_BAD_PRIORITY(p)		((p)<1 || (p)>255)	/* rfc2338.6.1.prio */
-#define VRRP_IS_BAD_ADVERT_INT(d) 	((d)<1)
-#define VRRP_IS_BAD_DEBUG_INT(d)	((d)<0 || (d)>4)
-#define VRRP_IS_BAD_PREEMPT_DELAY(d)	((d)<0 || (d)>TIMER_MAX_SEC)
-#define VRRP_SEND_BUFFER(V)		((V)->send_buffer)
-#define VRRP_SEND_BUFFER_SIZE(V)	((V)->send_buffer_size)
-
-#define VRRP_TIMER_SKEW(svr)	((256-(svr)->base_priority)*TIMER_HZ/256)
+/* We have to do some reduction of the calculation for VRRPv3 in order not to overflow a uint32; 625 / 16 == TIMER_CENTI_HZ / 256 */
+#define VRRP_TIMER_SKEW(svr)	((svr)->version == VRRP_VERSION_3 ? (((256U-(svr)->effective_priority) * ((svr)->master_adver_int / TIMER_CENTI_HZ) * 625U) / 16U) : ((256U-(svr)->effective_priority) * TIMER_HZ/256U))
+#define VRRP_TIMER_SKEW_MIN(svr)	((svr)->version == VRRP_VERSION_3 ? ((((svr)->master_adver_int / TIMER_CENTI_HZ) * 625U) / 16U) : (TIMER_HZ/256U))
 #define VRRP_VIP_ISSET(V)	((V)->vipset)
 
 #define VRRP_MIN(a, b)	((a) < (b)?(a):(b))
 #define VRRP_MAX(a, b)	((a) > (b)?(a):(b))
 
-#define VRRP_PKT_SADDR(V) (((V)->saddr.ss_family) ? ((struct sockaddr_in *) &(V)->saddr)->sin_addr.s_addr : IF_ADDR((V)->ifp))
+#ifdef _HAVE_VRRP_VMAC_
+#define VRRP_CONFIGURED_IFP(V)	((V)->configured_ifp)
+#else
+#define VRRP_CONFIGURED_IFP(V)	((V)->ifp)
+#endif
+#define VRRP_PKT_SADDR(V) (((V)->saddr.ss_family) ? ((struct sockaddr_in *) &(V)->saddr)->sin_addr.s_addr : IF_ADDR(VRRP_CONFIGURED_IFP(V)))
 
-#define VRRP_IF_ISUP(V)        ((IF_ISUP((V)->ifp) || (V)->dont_track_primary) & \
-                               ((!LIST_ISEMPTY((V)->track_ifp)) ? TRACK_ISUP((V)->track_ifp) : 1))
+#define VRRP_ISUP(V)		(!(V)->num_script_if_fault)
 
-#define VRRP_SCRIPT_ISUP(V)    ((!LIST_ISEMPTY((V)->track_script)) ? SCRIPT_ISUP((V)->track_script) : 1)
 
-#define VRRP_ISUP(V)           (VRRP_IF_ISUP(V) && VRRP_SCRIPT_ISUP(V))
+/* Configuration summary flags */
+extern bool have_ipv4_instance;
+extern bool have_ipv6_instance;
+
+#ifdef _NETWORK_TIMESTAMP_
+extern bool do_network_timestamp;
+#endif
 
 /* prototypes */
-extern vrrphdr_t *vrrp_get_header(sa_family_t, char *, int *, uint32_t *);
-extern int open_vrrp_send_socket(sa_family_t, int, int, int);
-extern int open_vrrp_socket(sa_family_t, int, int, int);
+extern void clear_summary_flags(void);
+extern size_t vrrp_adv_len(const vrrp_t *) __attribute__ ((pure));
+extern const vrrphdr_t *vrrp_get_header(sa_family_t, const char *, size_t);
+extern int open_vrrp_send_socket(sa_family_t, int, interface_t *, bool);
+extern int open_vrrp_read_socket(sa_family_t, int, interface_t *, bool, int);
 extern int new_vrrp_socket(vrrp_t *);
-extern void close_vrrp_socket(vrrp_t *);
-extern void vrrp_send_link_update(vrrp_t *);
-extern int vrrp_send_adv(vrrp_t *, int);
-extern int vrrp_state_fault_rx(vrrp_t *, char *, int);
-extern int vrrp_state_master_rx(vrrp_t *, char *, int);
-extern int vrrp_state_master_tx(vrrp_t *, const int);
-extern void vrrp_state_backup(vrrp_t *, char *, int);
+extern void vrrp_send_adv(vrrp_t *, uint8_t);
+extern void vrrp_send_link_update(vrrp_t *, unsigned);
+extern void add_vrrp_to_interface(vrrp_t *, interface_t *, int, bool, bool, track_t);
+extern void del_vrrp_from_interface(vrrp_t *, interface_t *);
+extern bool vrrp_state_master_rx(vrrp_t *, const vrrphdr_t *, const char *, ssize_t);
+extern void vrrp_state_master_tx(vrrp_t *);
+extern void vrrp_state_backup(vrrp_t *, const vrrphdr_t *, const char *, ssize_t);
 extern void vrrp_state_goto_master(vrrp_t *);
-extern void vrrp_state_leave_master(vrrp_t *);
-extern int vrrp_ipsecah_len(void);
-extern int vrrp_complete_init(void);
-extern int vrrp_ipvs_needed(void);
+extern void vrrp_state_leave_master(vrrp_t *, bool);
+extern void vrrp_state_leave_fault(vrrp_t *);
+extern bool vrrp_complete_init(void);
+extern void vrrp_restore_interfaces_startup(void);
+extern void restore_vrrp_interfaces(void);
 extern void shutdown_vrrp_instances(void);
 extern void clear_diff_vrrp(void);
 extern void clear_diff_script(void);
-extern void vrrp_restore_interface(vrrp_t *, int);
+extern void clear_diff_bfd(void);
+extern void vrrp_restore_interface(vrrp_t *, bool, bool);
+#ifdef THREAD_DUMP
+extern void register_vrrp_fifo_addresses(void);
+#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_arp.h b/tools/keepalived/keepalived/include/vrrp_arp.h
index 3a07f594c..e5a3a64d5 100644
--- a/tools/keepalived/keepalived/include/vrrp_arp.h
+++ b/tools/keepalived/keepalived/include/vrrp_arp.h
@@ -11,53 +11,49 @@
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
- *              
+ *
  *              This program is free software; you can redistribute it and/or
  *              modify it under the terms of the GNU General Public License
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_ARP_H
 #define _VRRP_ARP_H
 
 /* system includes */
-#include <net/ethernet.h>
-#include <net/if_arp.h>
+#include <sys/types.h>
+#include <linux/if_infiniband.h>
 
 /* local includes */
+#include "vrrp.h"
+#include "vrrp_if.h"
 #include "vrrp_ipaddress.h"
-
-#include "../libipvs-2.6/libipvs.h"
-
-/* local definitions */
-#define ETHERNET_HW_LEN		6
-#define IPPROTO_ADDR_LEN	4
-
-/* types definition */
-typedef struct _arphdr {
-	unsigned short int	ar_hrd;	/* Format of hardware address.  */
-	unsigned short int	ar_pro;	/* Format of protocol address.  */
-	unsigned char		ar_hln;	/* Length of hardware address.  */
-	unsigned char		ar_pln;	/* Length of protocol address.  */
-	unsigned short int	ar_op;	/* ARP opcode (command).  */
-
-	/* Ethernet looks like this : This bit is variable sized however...  */
-	unsigned char		__ar_sha[ETH_ALEN];	/* Sender hardware address.  */
-	unsigned char		__ar_sip[4];		/* Sender IP address.  */
-	unsigned char		__ar_tha[ETH_ALEN];	/* Target hardware address.  */
-	unsigned char		__ar_tip[4];		/* Target IP address.  */
-} arphdr_t;
-
-/* Global vars exported */
-extern char *garp_buffer;
-extern int garp_fd;
+#include "libipvs.h"
+
+typedef struct inf_arphdr {
+	unsigned short int ar_hrd;
+	unsigned short int ar_pro;
+	unsigned char      ar_hln;
+	unsigned char      ar_pln;
+	unsigned short int ar_op;
+
+	/* Infiniband arp looks like this */
+	unsigned char     __ar_sha[INFINIBAND_ALEN];
+	unsigned char     __ar_sip[4];
+	unsigned char     __ar_tha[INFINIBAND_ALEN];
+	unsigned char     __ar_tip[4];
+} inf_arphdr_t;
+
+typedef struct ipoib_hdr {
+	u_int16_t proto;
+	u_int16_t reserved;
+} ipoib_hdr_t;
 
 /* prototypes */
 extern void gratuitous_arp_init(void);
 extern void gratuitous_arp_close(void);
-extern int send_gratuitous_arp(ip_address_t *);
-
+extern void send_gratuitous_arp(ip_address_t *);
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_daemon.h b/tools/keepalived/keepalived/include/vrrp_daemon.h
index 00c09df92..b389c2ef4 100644
--- a/tools/keepalived/keepalived/include/vrrp_daemon.h
+++ b/tools/keepalived/keepalived/include/vrrp_daemon.h
@@ -4,34 +4,41 @@
  *              a loadbalanced server pool using multi-layer checks.
  *
  * Part:        vrrp_daemon.c include file.
- * 
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
- *              
+ *
  *              This program is free software; you can redistribute it and/or
  *              modify it under the terms of the GNU General Public License
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_DAEMON_H
 #define _VRRP_DAEMON_H
 
-/* system include */
-#include <stdlib.h>
-#include <signal.h>
+#include <stdbool.h>
 
 /* Daemon define */
 #define PROG_VRRP	"Keepalived_vrrp"
-#define WDOG_VRRP	"/tmp/.vrrp"
+
+extern bool non_existent_interface_specified;
+
+#ifdef _VRRP_FD_DEBUG_
+extern bool do_vrrp_fd_debug;
+#endif
 
 /* Prototypes */
 extern int start_vrrp_child(void);
+extern void vrrp_validate_config(void);
+#ifdef THREAD_DUMP
+extern void register_vrrp_parent_addresses(void);
+#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_data.h b/tools/keepalived/keepalived/include/vrrp_data.h
index d2362ccff..e2b9e19e1 100644
--- a/tools/keepalived/keepalived/include/vrrp_data.h
+++ b/tools/keepalived/keepalived/include/vrrp_data.h
@@ -17,72 +17,90 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_DATA_H
 #define _VRRP_DATA_H
 
 /* system includes */
-#include <stdlib.h>
-#include <string.h>
-#include <stdint.h>
-#include <syslog.h>
-#include <arpa/inet.h>
+#include <sys/types.h>
+#include <stdio.h>
+#include <stdbool.h>
 
 /* local includes */
 #include "list.h"
 #include "vector.h"
-#include "scheduler.h"
-
-/*
- * Our instance dispatcher use a socket pool.
- * That way we handle VRRP protocol type per
- * physical interface.
- */
-typedef struct _sock {
-	sa_family_t		family;
-	int			proto;
-	int			ifindex;
-	int			unicast;
-	int			fd_in;
-	int			fd_out;
-	thread_t		*thread;
-} sock_t;
 
 /* Configuration data root */
 typedef struct _vrrp_data {
+	list			static_track_groups;
 	list			static_addresses;
+#ifdef _HAVE_FIB_ROUTING_
 	list			static_routes;
+	list			static_rules;
+#endif
 	list			vrrp_sync_group;
-	list			vrrp;
-	list			vrrp_index;
-	list			vrrp_index_fd;
+	list			vrrp;			/* vrrp_t */
 	list			vrrp_socket_pool;
-	list			vrrp_script;
+	list			vrrp_script;		/* vrrp_script_t */
+	list			vrrp_track_files;	/* vrrp_tracked_file_t */
+#ifdef _WITH_CN_PROC_
+	list			vrrp_track_processes;	/* vrrp_tracked_process_t */
+	size_t			vrrp_max_process_name_len;
+	bool			vrrp_use_process_cmdline;
+	bool			vrrp_use_process_comm;
+#endif
+#ifdef _WITH_BFD_
+	list			vrrp_track_bfds;	/* vrrp_tracked_bfd_t */
+#endif
+	unsigned		num_smtp_alert;		/* No of smtp_alerts configured */
 } vrrp_data_t;
 
 /* Global Vars exported */
 extern vrrp_data_t *vrrp_data;
 extern vrrp_data_t *old_vrrp_data;
 extern char *vrrp_buffer;
+extern size_t vrrp_buffer_len;
 
 /* prototypes */
-extern void alloc_saddress(vector_t *);
-extern void alloc_sroute(vector_t *);
-extern void alloc_vrrp_sync_group(char *);
-extern void alloc_vrrp(char *);
-extern void alloc_vrrp_unicast_peer(vector_t *);
-extern void alloc_vrrp_track(vector_t *);
-extern void alloc_vrrp_script(char *);
-extern void alloc_vrrp_track_script(vector_t *);
-extern void alloc_vrrp_vip(vector_t *);
-extern void alloc_vrrp_evip(vector_t *);
-extern void alloc_vrrp_vroute(vector_t *);
-extern void alloc_vrrp_buffer(void);
+extern void alloc_static_track_group(const char *);
+extern void alloc_saddress(const vector_t *);
+extern void alloc_sroute(const vector_t *);
+extern void alloc_srule(const vector_t *);
+extern void alloc_vrrp_sync_group(const char *);
+extern void alloc_vrrp(const char *);
+extern void alloc_vrrp_unicast_peer(const vector_t *);
+extern void alloc_vrrp_track_if(const vector_t *);
+extern void alloc_vrrp_script(const char *);
+extern void alloc_vrrp_track_script(const vector_t *);
+extern void alloc_vrrp_file(const char *);
+extern void alloc_vrrp_track_file(const vector_t *);
+#ifdef _WITH_CN_PROC_
+extern void alloc_vrrp_process(const char *);
+extern void alloc_vrrp_track_process(const vector_t *);
+#endif
+#ifdef _WITH_BFD_
+extern void alloc_vrrp_track_bfd(const vector_t *);
+#endif
+extern void alloc_vrrp_group_track_if(const vector_t *);
+extern void alloc_vrrp_group_track_script(const vector_t *);
+extern void alloc_vrrp_group_track_file(const vector_t *);
+#ifdef _WITH_CN_PROC_
+extern void alloc_vrrp_group_track_process(const vector_t *);
+#endif
+#ifdef _WITH_BFD_
+extern void alloc_vrrp_group_track_bfd(const vector_t *);
+#endif
+extern void alloc_vrrp_vip(const vector_t *);
+extern void alloc_vrrp_evip(const vector_t *);
+extern void alloc_vrrp_vroute(const vector_t *);
+extern void alloc_vrrp_vrule(const vector_t *);
+extern void alloc_vrrp_buffer(size_t);
 extern void free_vrrp_buffer(void);
 extern vrrp_data_t *alloc_vrrp_data(void);
 extern void free_vrrp_data(vrrp_data_t *);
-extern void dump_vrrp_data(vrrp_data_t *);
+extern void dump_tracking_vrrp(FILE *, const void *);
+extern void dump_data_vrrp(FILE *);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_dbus.h b/tools/keepalived/keepalived/include/vrrp_dbus.h
new file mode 100644
index 000000000..ed5152d21
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_dbus.h
@@ -0,0 +1,43 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        vrrp_dbus.c include file.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2016-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef VRRP_DBUS_H
+#define VRRP_DBUS_H
+
+/* System includes */
+#include <stdbool.h>
+
+/* Local includes */
+#include "vrrp.h"
+#include "list.h"
+
+
+void dbus_send_state_signal(vrrp_t *);
+void dbus_remove_object(const vrrp_t *);
+void dbus_reload(const list, const list);
+bool dbus_start(void);
+void dbus_stop(void);
+#ifdef THREAD_DUMP
+extern void register_vrrp_dbus_addresses(void);
+#endif
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_index.h b/tools/keepalived/keepalived/include/vrrp_firewall.h
similarity index 61%
rename from tools/keepalived/keepalived/include/vrrp_index.h
rename to tools/keepalived/keepalived/include/vrrp_firewall.h
index d7536896a..c9598cb40 100644
--- a/tools/keepalived/keepalived/include/vrrp_index.h
+++ b/tools/keepalived/keepalived/include/vrrp_firewall.h
@@ -3,7 +3,7 @@
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
  *
- * Part:        vrrp_index.c include file.
+ * Part:        vrrp_firewall.c include file.
  *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
  *
@@ -11,35 +11,41 @@
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
- *              
+ *
  *              This program is free software; you can redistribute it and/or
  *              modify it under the terms of the GNU General Public License
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2018 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#ifndef _VRRP_INDEX_H
-#define _VRRP_INDEX_H
+#ifndef _VRRP_FIREWALL_H
+#define _VRRP_FIREWALL_H
+
+#include "config.h"
 
 /* global includes */
-#include <stdio.h>
-#include <stdlib.h>
-#include <arpa/inet.h>
-#include <string.h>
-#include <syslog.h>
+#include <stdbool.h>
 
 /* local includes */
 #include "vrrp.h"
+#include "list.h"
 
-/* Macro definition */
+#ifdef _WITH_IPTABLES_
+#include "vrrp_iptables.h"
+#endif
+#ifdef _WITH_NFTABLES_
+#include "vrrp_nftables.h"
+#endif
 
 /* prototypes */
-extern void alloc_vrrp_bucket(vrrp_t *);
-extern void alloc_vrrp_fd_bucket(vrrp_t *);
-extern void remove_vrrp_fd_bucket(vrrp_t *);
-extern void set_vrrp_fd_bucket(int, vrrp_t *);
-extern vrrp_t *vrrp_index_lookup(const int, const int);
+extern void firewall_handle_accept_mode(vrrp_t *, int, bool);
+extern void firewall_remove_rule_to_iplist(list);
+#ifdef _HAVE_VRRP_VMAC_
+extern void firewall_add_vmac(const vrrp_t *);
+extern void firewall_remove_vmac(const vrrp_t *);
+#endif
+extern void firewall_fini(void);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_if.h b/tools/keepalived/keepalived/include/vrrp_if.h
index 61dcdddd6..50c90f106 100644
--- a/tools/keepalived/keepalived/include/vrrp_if.h
+++ b/tools/keepalived/keepalived/include/vrrp_if.h
@@ -11,127 +11,228 @@
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
- *              
+ *
  *              This program is free software; you can redistribute it and/or
  *              modify it under the terms of the GNU General Public License
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_IF_H
 #define _VRRP_IF_H
 
+#include "config.h"
+
 /* global includes */
+#include <netinet/in.h>
+#include <stdint.h>
+#include <stdbool.h>
+#include <stdint.h>
+#include <sys/types.h>
 #include <net/if.h>
-
-/* needed to get correct values for SIOC* */
-#include <linux/sockios.h>
+#include <stdio.h>
+#ifdef _HAVE_NET_LINUX_IF_H_COLLISION_
+#define _LINUX_IF_H
+#endif
+#include <linux/netdevice.h>
+#ifdef _HAVE_VRRP_VMAC_
+#include <linux/if_link.h>
+#endif
 
 /* local includes */
 #include "scheduler.h"
 #include "list.h"
+#include "timer.h"
 
-/* types definition */
-#ifndef SIOCETHTOOL
-/* should not happen, otherwise we have a broken toolchain */
-#warning "SIOCETHTOOL not defined. Defaulting to 0x8946, which is probably wrong !"
-#define SIOCETHTOOL     0x8946
-#endif
-#ifndef SIOCGMIIPHY
-/* should not happen, otherwise we have a broken toolchain */
-#warning "SIOCGMIIPHY not defined. Defaulting to SIOCDEVPRIVATE, which is probably wrong !"
-#define SIOCGMIIPHY (SIOCDEVPRIVATE)	/* Get the PHY in use. */
-#define SIOCGMIIREG (SIOCGMIIPHY+1)	/* Read a PHY register. */
-#endif
-
-/* ethtool.h cannot be included because old versions use kernel-only types
- * which cannot be included from user-land. We don't need much anyway.
- */
-#ifndef ETHTOOL_GLINK
-#define ETHTOOL_GLINK   0x0000000a
-/* for passing single values */
-struct ethtool_value {
-        uint32_t   cmd;
-        uint32_t   data;
-};
-#endif
 #define LINK_UP   1
 #define LINK_DOWN 0
-#define IF_NAMESIZ    20	/* Max interface lenght size */
-#define IF_HWADDR_MAX 20	/* Max MAC address length size */
-#define ARPHRD_ETHER 1
-#define ARPHRD_LOOPBACK 772
 #define POLLING_DELAY TIMER_HZ
 
+#ifdef _WITH_LINKBEAT_
 /* Interface Linkbeat code selection */
 #define LB_IOCTL   0x1
 #define LB_MII     0x2
 #define LB_ETHTOOL 0x4
+#endif
+
+/* I don't know what the correct type is.
+ * The kernel has ifindex in the range [1, INT_MAX], but IFLA_LINK is defined
+ * to be __u32. See dev_new_index() in net/core/dev.c and net/core/rtnetlink.c.
+ * ifaddrmsg.ifa_index (See /usr/include/linux/if_addr.h> is __u32.
+ * /usr/include/linux/rtnetlink.h has them as ints.
+ * RTA_OIF and RTA_IIF are u32.
+ * RFC2553 defines sin6_scopeid to be a uint32_t, and it can hold an ifindex */
+typedef uint32_t ifindex_t;
+
+/* Structure for delayed sending of gratuitous ARP/NA messages */
+typedef struct _garp_delay {
+	timeval_t		garp_interval;		/* Delay between sending gratuitous ARP messages on an interface */
+	bool			have_garp_interval;	/* True if delay */
+	timeval_t		gna_interval;		/* Delay between sending gratuitous NA messages on an interface */
+	bool			have_gna_interval;	/* True if delay */
+	timeval_t		garp_next_time;		/* Time when next gratuitous ARP message can be sent */
+	timeval_t		gna_next_time;		/* Time when next gratuitous NA message can be sent */
+	int			aggregation_group;	/* Index of multi-interface group */
+} garp_delay_t;
+
+#ifdef _HAVE_VRRP_VMAC_
+typedef enum {
+	IF_TYPE_STANDARD,
+	IF_TYPE_MACVLAN,
+#ifdef _HAVE_VRRP_IPVLAN_
+	IF_TYPE_IPVLAN,
+#endif
+#ifdef _HAVE_VRF_
+	IF_TYPE_VRF,
+#endif
+} if_type_t;
+
+#ifdef _HAVE_VRRP_IPVLAN_
+#define IS_VLAN(IFP)	((IFP)->if_type == IF_TYPE_MACVLAN || (IFP)->if_type == IF_TYPE_IPVLAN)
+#else
+#define IS_VLAN(IFP)	((IFP)->if_type == IF_TYPE_MACVLAN)
+#endif
 
-/* Default values */
-#define IF_DEFAULT_BUFSIZE	(65*1024)
+#endif
+
+/* <net/if_arp.h> defines MAX_ADDR_LEN as 7, whereas <linux/netdevice.h> defines it as 32.
+ * Make sure we have the right definition. */
+#if MAX_ADDR_LEN == 7
+#error "MAX_ADDR_LEN == 7 - probably <net/if_arp.h> was included after <linux/netdevice.h>"
+#elif MAX_ADDR_LEN != 32
+#error "MAX_ADDR_LEN != 32 - probably <net/if_arp.h> was included after <linux/netdevice.h>"
+#endif
 
 /* Interface structure definition */
 typedef struct _interface {
-	char			ifname[IF_NAMESIZ + 1];	/* Interface name */
-	unsigned int		ifindex;		/* Interface index */
+	char			ifname[IFNAMSIZ];	/* Interface name */
+	ifindex_t		ifindex;		/* Interface index */
+#ifdef _WITH_VRRP_
 	struct in_addr		sin_addr;		/* IPv4 primary IPv4 address */
-	struct in6_addr		sin6_addr;		/* IPv6 link address */
-	unsigned long		flags;			/* flags */
-	unsigned int		mtu;			/* MTU for this interface_t */
+	struct in6_addr		sin6_addr;		/* IPv6 primary link local address */
+	list			sin_addr_l;		/* List of extra IPv4 interface addresses - struct in_addr */
+	list			sin6_addr_l;		/* List of extra IPv6 interface addresses - struct in6_addr */
+#endif
+	unsigned		ifi_flags;		/* Kernel flags */
+	uint32_t		mtu;			/* MTU for this interface_t */
 	unsigned short		hw_type;		/* Type of hardware address */
-	u_char			hw_addr[IF_HWADDR_MAX];	/* MAC address */
-	int			hw_addr_len;		/* MAC addresss length */
+	u_char			hw_addr[MAX_ADDR_LEN];	/* MAC address */
+	u_char			hw_addr_bcast[MAX_ADDR_LEN]; /* broadcast address */
+	size_t			hw_addr_len;		/* MAC addresss length */
+#ifdef _WITH_LINKBEAT_
+	bool			linkbeat_use_polling;	/* Poll the interface for status, rather than use netlink */
 	int			lb_type;		/* Interface regs selection */
-	int			linkbeat;		/* LinkBeat from MII BMSR req */
-	int			vmac;			/* Set if interface is a VMAC interface */
-	unsigned int		base_ifindex;		/* Base interface index (if interface is a VMAC interface) */
+#endif
+#ifdef _HAVE_VRRP_VMAC_
+	if_type_t		if_type;		/* interface type */
+	int			vmac_type;		/* Type of macvlan or ipvlan */
+	ifindex_t		base_ifindex;		/* Only used at startup if we find vmac i/f before base i/f */
+#ifdef HAVE_IFLA_LINK_NETNSID
+	int			base_netns_id;		/* Network namespace of the parent interface */
+#endif
+	struct _interface	*base_ifp;		/* Base interface (if interface is a VMAC interface),
+							   otherwise the physical interface */
+	bool			is_ours;		/* keepalived created the interface */
+	bool			seen_interface;		/* The interface has existed at some point since we started */
+	bool			changeable_type;	/* The interface type or underlying interface can be changed */
+#ifdef _HAVE_VRF_
+	ifindex_t		vrf_master_ifindex;	/* Only used at startup if we find i/f before master i/f */
+	struct _interface	*vrf_master_ifp;	/* VRF master interface - pointer to self if VRF master */
+#endif
+	int			reset_arp_config;	/* Count of how many vrrps have changed arp parameters on interface */
+	bool			arp_ignore;		/* Original value of arp_ignore to be restored */
+	bool			arp_filter;		/* Original value of arp_filter to be restored */
+	unsigned		rp_filter;		/* < UINT_MAX if we have changed the value */
+#endif
+	garp_delay_t		*garp_delay;		/* Delays for sending gratuitous ARP/NA */
+	timeval_t		last_gna_router_check;	/* Time we last checked if IPv6 forwarding set on interface */
+	bool			gna_router;		/* Router flag for NA messages */
+	bool			promote_secondaries;	/* Original value of promote_secondaries to be restored */
+	uint32_t		reset_promote_secondaries; /* Count of how many vrrps have changed promote_secondaries on interface */
+	list			tracking_vrrp;		/* List of tracking_vrrp_t for vrrp instances tracking this interface */
 } interface_t;
 
 /* Tracked interface structure definition */
 typedef struct _tracked_if {
 	int			weight;		/* tracking weight when non-zero */
+	bool			weight_reverse; /* which direction is the weight applied */
 	interface_t		*ifp;		/* interface backpointer, cannot be NULL */
 } tracked_if_t;
 
 /* Macros */
 #define IF_NAME(X) ((X)->ifname)
 #define IF_INDEX(X) ((X)->ifindex)
-#define IF_BASE_INDEX(X) ((X)->base_ifindex)
+#ifdef _HAVE_VRRP_VMAC_
+#define IF_BASE_INDEX(X) ((X)->base_ifp->ifindex)
+#define IF_BASE_IFP(X) ((X)->base_ifp)
+#else
+#define IF_BASE_INDEX(X) ((X)->ifindex)
+#define IF_BASE_IFP(X) (X)
+#endif
 #define IF_ADDR(X) ((X)->sin_addr.s_addr)
-#define IF_MTU(X) ((X)->mtu)
+#define IF_ADDR6(X)	((X)->sin6_addr)
 #define IF_HWADDR(X) ((X)->hw_addr)
+#ifdef _WITH_LINKBEAT_
 #define IF_MII_SUPPORTED(X) ((X)->lb_type & LB_MII)
 #define IF_ETHTOOL_SUPPORTED(X) ((X)->lb_type & LB_ETHTOOL)
-#define IF_LINKBEAT(X) ((X)->linkbeat)
-#define IF_ISUP(X) (((X)->flags & IFF_UP)      && \
-                    ((X)->flags & IFF_RUNNING) && \
-                    if_linkbeat(X))
+#endif
+#define FLAGS_UP(X) (((X) & (IFF_UP | IFF_RUNNING)) == (IFF_UP | IFF_RUNNING))
+#define IF_FLAGS_UP(X) (FLAGS_UP((X)->ifi_flags))
+#ifdef _HAVE_VRRP_VMAC_
+#define IF_ISUP(X) (IF_FLAGS_UP(X) && (!(X)->vmac_type || IF_FLAGS_UP((X)->base_ifp)))
+#else
+#define IF_ISUP(X) (IF_FLAGS_UP(X))
+#endif
+
+typedef enum if_lookup {
+	IF_NO_CREATE,
+	IF_CREATE_IF_DYNAMIC,
+	IF_CREATE_ALWAYS,
+	IF_CREATE_NETLINK
+} if_lookup_t;
+
+/* Global data */
+extern list garp_delay;
 
 /* prototypes */
-extern interface_t *if_get_by_ifindex(const int);
-extern interface_t *if_get_by_vmac_base_ifindex(const int);
-extern interface_t *if_get_by_ifname(const char *);
-extern int if_linkbeat(const interface_t *);
-extern int if_mii_probe(const char *);
-extern int if_ethtool_probe(const char *);
+extern interface_t *if_get_by_ifindex(ifindex_t) __attribute__ ((pure));
+extern interface_t *if_get_by_ifname(const char *, if_lookup_t);
+extern list get_if_list(void) __attribute__ ((pure));
+extern void reset_interface_queue(void);
+extern void alloc_garp_delay(void);
+extern void set_default_garp_delay(void);
 extern void if_add_queue(interface_t *);
-extern int if_monitor_thread(thread_t *);
 extern void init_interface_queue(void);
+#ifdef _WITH_LINKBEAT_
 extern void init_interface_linkbeat(void);
+extern void close_interface_linkbeat(void);
+#endif
 extern void free_interface_queue(void);
-extern void dump_if(void *);
-extern int if_join_vrrp_group(sa_family_t, int *, interface_t *, int);
+extern void free_old_interface_queue(void);
+extern int if_join_vrrp_group(sa_family_t, int *, interface_t *);
 extern int if_leave_vrrp_group(sa_family_t, int, interface_t *);
 extern int if_setsockopt_bindtodevice(int *, interface_t *);
 extern int if_setsockopt_hdrincl(int *);
+extern int if_setsockopt_ipv6_checksum(int *);
+#if HAVE_DECL_IP_MULTICAST_ALL  /* Since Linux 2.6.31 */
+extern int if_setsockopt_mcast_all(sa_family_t, int *);
+#endif
 extern int if_setsockopt_mcast_loop(sa_family_t, int *);
 extern int if_setsockopt_mcast_hops(sa_family_t, int *);
 extern int if_setsockopt_mcast_if(sa_family_t, int *, interface_t *);
-extern int if_setsockopt_priority(int *);
-extern int if_setsockopt_sndbuf(int *, int);
+extern int if_setsockopt_priority(int *, int);
 extern int if_setsockopt_rcvbuf(int *, int);
+extern int if_setsockopt_no_receive(int *);
+extern void interface_up(interface_t *);
+extern void interface_down(interface_t *);
+extern void cleanup_lost_interface(interface_t *);
+extern int recreate_vmac_thread(thread_ref_t);
+void update_mtu(interface_t *);
+extern void update_added_interface(interface_t *);
+#ifdef THREAD_DUMP
+extern void register_vrrp_if_addresses(void);
+#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_if_config.h b/tools/keepalived/keepalived/include/vrrp_if_config.h
new file mode 100644
index 000000000..35465cdd5
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_if_config.h
@@ -0,0 +1,43 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        vrrp_if_config.c include file.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_IF_CONFIG_H
+#define _VRRP_IF_CONFIG_H 1
+
+#include "config.h"
+
+#include <stdbool.h>
+
+#include "vrrp_if.h"
+
+/* prototypes */
+extern void set_promote_secondaries(interface_t*);
+extern void reset_promote_secondaries(interface_t*);
+#ifdef _HAVE_VRRP_VMAC_
+extern void restore_rp_filter(void);
+extern void set_interface_parameters(const interface_t*, interface_t*);
+extern void reset_interface_parameters(interface_t*);
+extern void link_set_ipv6(const interface_t*, bool);
+#endif
+extern void set_ipv6_forwarding(interface_t *);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_ip_rule_route_parser.h b/tools/keepalived/keepalived/include/vrrp_ip_rule_route_parser.h
new file mode 100644
index 000000000..c712d0d9c
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_ip_rule_route_parser.h
@@ -0,0 +1,44 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        iprule and iproute parser
+ *
+ * Author:      Quentin Armitage, <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2016 Quentin Armitage, <quentin@armitage.org.uk>
+ * Copyright (C) 2016-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_IP_RULE_ROUTE_PARSER_H
+#define _VRRP_IP_RULE_ROUTE_PARSER_H
+
+#include <stdint.h>
+#include <stdbool.h>
+#if HAVE_DECL_RTA_ENCAP && HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+#include "vrrp_iproute.h"
+#endif
+
+extern bool get_realms(uint32_t *, const char *);
+extern bool get_u8(uint8_t *, const char *, uint8_t, const char*);
+extern bool get_u32(uint32_t *, const char *, uint32_t, const char*);
+extern bool get_u16(uint16_t *, const char *, uint16_t, const char*);
+extern bool get_u64(uint64_t *, const char *, uint64_t, const char*);
+extern bool get_time_rtt(uint32_t *, const char *, bool *);
+extern bool get_addr64(uint64_t *, const char *);
+#if HAVE_DECL_RTA_ENCAP && HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+extern bool parse_mpls_address(const char *, encap_mpls_t *);
+#endif
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_ipaddress.h b/tools/keepalived/keepalived/include/vrrp_ipaddress.h
index c4fcde003..0a9fdf810 100644
--- a/tools/keepalived/keepalived/include/vrrp_ipaddress.h
+++ b/tools/keepalived/keepalived/include/vrrp_ipaddress.h
@@ -11,32 +11,33 @@
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
- *              
+ *
  *              This program is free software; you can redistribute it and/or
  *              modify it under the terms of the GNU General Public License
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_IPADDR_H
 #define _VRRP_IPADDR_H
 
+#include "config.h"
+
 /* global includes */
-#include <stdio.h>
-#include <stdlib.h>
-#define __USE_GNU
 #include <netinet/in.h>
-#include <string.h>
-#include <syslog.h>
 #include <linux/if_addr.h>
+#include <stdbool.h>
+#include <stdio.h>
 
 /* local includes */
+#include "vrrp.h"
 #include "vrrp_if.h"
 #include "list.h"
 #include "vector.h"
-#include "../libipvs-2.6/libipvs.h"
+#include "vrrp_static_track.h"
+#include "libipvs.h"
 
 /* types definition */
 typedef struct _ip_address {
@@ -50,9 +51,32 @@ typedef struct _ip_address {
 		struct in6_addr sin6_addr;
 	} u;
 
-	interface_t		*ifp;	/* Interface owning IP address */
-	char			*label;	/* Alias name, e.g. eth0:1 */
-	int			set;	/* TRUE if addr is set */
+	interface_t		*ifp;			/* Interface owning IP address */
+	char			*label;			/* Alias name, e.g. eth0:1 */
+#if HAVE_DECL_IFA_FLAGS
+	uint32_t		flags;			/* Address flags */
+	uint32_t		flagmask;		/* Bitmaps of flags set */
+#else
+	uint8_t			flags;			/* Address flags */
+	uint8_t			flagmask;		/* Bitmaps of flags set */
+#endif
+	bool			have_peer;
+	union {
+		struct in_addr sin_addr;
+		struct in6_addr sin6_addr;
+	} peer;
+	bool			dont_track;		/* Don't leave master state if address is deleted */
+	static_track_group_t	*track_group;		/* used for static addresses */
+
+	bool			set;			/* TRUE if addr is set */
+#ifdef _WITH_IPTABLES_
+	bool			iptable_rule_set;	/* TRUE if iptable drop rule
+							 * set to addr */
+#endif
+#ifdef _WITH_NFTABLES_
+	bool			nftable_rule_set;	/* TRUE if in nftables set */
+#endif
+	bool			garp_gna_pending;	/* Is a gratuitous ARP/NA message still to be sent */
 } ip_address_t;
 
 #define IPADDRESS_DEL 0
@@ -62,33 +86,43 @@ typedef struct _ip_address {
 /* Macro definition */
 #define IP_FAMILY(X)	(X)->ifa.ifa_family
 #define IP_IS6(X)	((X)->ifa.ifa_family == AF_INET6)
-#define IP_SIZE(X)      (IP_IS6(X) ? sizeof((X)->u.sin6_addr) : sizeof((X)->u.sin.sin_addr))
+#define IP_IS4(X)	((X)->ifa.ifa_family == AF_INET)
 
-#define IP4_ISEQ(X,Y)   ((X)->u.sin.sin_addr.s_addr == (Y)->u.sin.sin_addr.s_addr	&& \
-			 (X)->ifa.ifa_prefixlen     == (Y)->ifa.ifa_prefixlen		&& \
-			 (X)->ifa.ifa_index         == (Y)->ifa.ifa_index		&& \
-			 (X)->ifa.ifa_scope         == (Y)->ifa.ifa_scope		&& \
+#define IPcommon_ISEQ(X,Y) \
+			((X)->ifa.ifa_prefixlen     == (Y)->ifa.ifa_prefixlen		&& \
+			 !(X)->ifp                  == !(Y)->ifp                        && \
+			 (!(X)->ifp                                                     || \
+			  (X)->ifp->ifindex	    == (Y)->ifp->ifindex)		&& \
+			 (X)->ifa.ifa_scope	    == (Y)->ifa.ifa_scope		&& \
 			 string_equal((X)->label, (Y)->label))
 
+#define IP4_ISEQ(X,Y)   ((X)->u.sin.sin_addr.s_addr == (Y)->u.sin.sin_addr.s_addr	&& \
+			 IPcommon_ISEQ((X),(Y)))
+
 #define IP6_ISEQ(X,Y)   ((X)->u.sin6_addr.s6_addr32[0] == (Y)->u.sin6_addr.s6_addr32[0]	&& \
 			 (X)->u.sin6_addr.s6_addr32[1] == (Y)->u.sin6_addr.s6_addr32[1]	&& \
 			 (X)->u.sin6_addr.s6_addr32[2] == (Y)->u.sin6_addr.s6_addr32[2]	&& \
 			 (X)->u.sin6_addr.s6_addr32[3] == (Y)->u.sin6_addr.s6_addr32[3]	&& \
-			 (X)->ifa.ifa_prefixlen     == (Y)->ifa.ifa_prefixlen		&& \
-			 (X)->ifa.ifa_index         == (Y)->ifa.ifa_index		&& \
-			 (X)->ifa.ifa_scope         == (Y)->ifa.ifa_scope		&& \
-			 string_equal((X)->label, (Y)->label))
+			 IPcommon_ISEQ((X),(Y)))
+
+#define IP_ISEQ(X,Y)    (!(X) && !(Y) ? true : !(X) != !(Y) ? false : (IP_FAMILY(X) != IP_FAMILY(Y) ? false : IP_IS6(X) ? IP6_ISEQ(X, Y) : IP4_ISEQ(X, Y)))
 
-#define IP_ISEQ(X,Y)    (((X) && (Y)) ? ((IP_FAMILY(X) == IP_FAMILY(Y)) ? (IP_IS6(X) ? IP6_ISEQ(X, Y) : IP4_ISEQ(X, Y)) : 0) : (((!(X) && (Y))||((X) && !(Y))) ? 0 : 1))
+/* Forward reference */
+struct ipt_handle;
 
 /* prototypes */
-extern void netlink_iplist(list, int, char*);
+extern char *ipaddresstos(char *, const ip_address_t *);
+extern int netlink_ipaddress(ip_address_t *, char *, int);
+extern bool netlink_iplist(list, int, bool, char*);
 extern void free_ipaddress(void *);
-extern char *ipaddresstos(ip_address_t *);
-extern void dump_ipaddress(void *);
-extern ip_address_t *parse_ipaddress(ip_address_t *, char *);
-extern void alloc_ipaddress(list, vector_t *, interface_t *);
-extern void clear_diff_address(list, list, char* , char*);
+extern void format_ipaddress(const ip_address_t *, char *, size_t);
+extern void dump_ipaddress(FILE *, const void *);
+extern ip_address_t *parse_ipaddress(ip_address_t *, const char *, bool);
+extern ip_address_t *parse_route(const char *);
+extern void alloc_ipaddress(list, const vector_t *, const interface_t *, bool);
+extern void get_diff_address(vrrp_t *, vrrp_t *, list);
+extern void clear_address_list(list, bool, char *);
 extern void clear_diff_saddresses(void);
+extern void reinstate_static_address(ip_address_t *, char *);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_iproute.h b/tools/keepalived/keepalived/include/vrrp_iproute.h
index dc4154847..8f7a72183 100644
--- a/tools/keepalived/keepalived/include/vrrp_iproute.h
+++ b/tools/keepalived/keepalived/include/vrrp_iproute.h
@@ -11,64 +11,257 @@
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
- *              
+ *
  *              This program is free software; you can redistribute it and/or
  *              modify it under the terms of the GNU General Public License
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_IPROUTE_H
 #define _VRRP_IPROUTE_H
 
 /* global includes */
+#include <stdbool.h>
+#include <stdint.h>
 #include <stdio.h>
-#include <stdlib.h>
-#include <arpa/inet.h>
+#include <sys/types.h>
+#if HAVE_DECL_RTA_ENCAP && HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+#include <linux/mpls.h>
+#endif
+#ifdef RTNETLINK_H_NEEDS_SYS_SOCKET_H
+#include <sys/socket.h>
+#endif
+#include <linux/rtnetlink.h>
 
 /* local includes */
 #include "list.h"
 #include "vector.h"
-#include "../libipvs-2.6/libipvs.h"
+#include "vrrp_ipaddress.h"
+#include "vrrp_if.h"
+#include "vrrp_static_track.h"
+
+/* We hope to get an official definion for this, but until then make a private one */
+#ifndef RTPROT_KEEPALIVED
+#define RTPROT_KEEPALIVED       112     /* Keepalived daemon */
+#endif
+
+/* Buffer sizes for printing */
+#define	ROUTE_BUF_SIZE		1024
+#include "libipvs.h"
 
 /* types definition */
+#if HAVE_DECL_RTA_ENCAP	/* Since Linux 4.3 */
+enum iproute_encap {
+	IPROUTE_ENCAP_ID,
+	IPROUTE_ENCAP_DSFIELD,
+	IPROUTE_ENCAP_HOPLIMIT,
+	IPROUTE_ENCAP_TTL = IPROUTE_ENCAP_HOPLIMIT,
+	IPROUTE_ENCAP_FLAGS,
+};
+#define	IPROUTE_BIT_ENCAP_ID		(1<<IPROUTE_ENCAP_ID)
+#define	IPROUTE_BIT_ENCAP_DSFIELD	(1<<IPROUTE_ENCAP_DSFIELD)
+#define	IPROUTE_BIT_ENCAP_HOPLIMIT	(1<<IPROUTE_ENCAP_HOPLIMIT)
+#define	IPROUTE_BIT_ENCAP_TTL		(1<<IPROUTE_ENCAP_TTL)
+#define	IPROUTE_BIT_ENCAP_FLAGS		(1<<IPROUTE_ENCAP_FLAGS)
+
+#if HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+#define MAX_MPLS_LABELS	2
+typedef struct mpls_label mpls_labels[MAX_MPLS_LABELS];
+
+typedef struct _encap_mpls {
+	mpls_labels	addr;
+	size_t		num_labels;
+} encap_mpls_t;
+#endif
+
+typedef struct _encap_ip {
+	uint64_t	id;
+	ip_address_t	*dst;
+	ip_address_t	*src;
+	uint8_t		tos;
+	uint16_t	flags;
+	uint8_t		ttl;
+} encap_ip_t;
+
+#if HAVE_DECL_LWTUNNEL_ENCAP_ILA
+typedef struct _encap_ila {
+	uint64_t	locator;
+} encap_ila_t;
+#endif
+
+typedef struct _encap_ip6 {
+	uint64_t	id;
+	ip_address_t	*dst;
+	ip_address_t	*src;
+	uint8_t		tc;
+	uint16_t	flags;
+	uint8_t		hoplimit;
+} encap_ip6_t;
+
+typedef struct _encap {
+	uint16_t	type;
+	uint32_t	flags;
+	union {
+#if HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+		encap_mpls_t	mpls;
+#endif
+		encap_ip_t	ip;
+#if HAVE_DECL_LWTUNNEL_ENCAP_ILA
+		encap_ila_t	ila;
+#endif
+		encap_ip6_t	ip6;
+	};
+} encap_t;
+#endif
+
+typedef struct _nexthop {
+	uint32_t mask;
+	ip_address_t *addr;
+	interface_t *ifp;
+	uint8_t weight;
+	uint8_t flags;
+	uint32_t realms;
+#if HAVE_DECL_RTA_ENCAP
+	encap_t encap;
+#endif
+//#if HAVE_DECL_RTA_NEWDST
+//	ip_address_t *as_to;
+//#endif
+} nexthop_t;
+
+enum ip_route {
+	IPROUTE_DSFIELD = 0,
+	IPROUTE_TYPE,
+	IPROUTE_PROTOCOL,
+	IPROUTE_SCOPE,
+	IPROUTE_METRIC,
+	IPROUTE_WEIGHT,
+	IPROUTE_EXPIRES,
+	IPROUTE_MTU,
+	IPROUTE_HOPLIMIT,
+	IPROUTE_ADVMSS,
+	IPROUTE_RTT,
+	IPROUTE_RTTVAR,
+	IPROUTE_REORDERING,
+	IPROUTE_WINDOW,
+	IPROUTE_CWND,
+	IPROUTE_SSTHRESH,
+	IPROUTE_RTO_MIN,
+	IPROUTE_INITCWND,
+	IPROUTE_INITRWND,
+	IPROUTE_QUICKACK,
+	IPROUTE_PREF,
+	IPROUTE_FASTOPEN_NO_COOKIE,
+	IPROUTE_TTL_PROPAGATE,
+};
+
+#define	IPROUTE_BIT_DSFIELD	(1<<IPROUTE_DSFIELD)
+#define	IPROUTE_BIT_TYPE	(1<<IPROUTE_TYPE)
+#define	IPROUTE_BIT_PROTOCOL	(1<<IPROUTE_PROTOCOL)
+#define	IPROUTE_BIT_SCOPE	(1<<IPROUTE_SCOPE)
+#define	IPROUTE_BIT_METRIC	(1<<IPROUTE_METRIC)
+#define	IPROUTE_BIT_WEIGHT	(1<<IPROUTE_WEIGHT)
+#define	IPROUTE_BIT_EXPIRES	(1<<IPROUTE_EXPIRES)
+#define	IPROUTE_BIT_MTU		(1<<IPROUTE_MTU)
+#define	IPROUTE_BIT_HOPLIMIT	(1<<IPROUTE_HOPLIMIT)
+#define	IPROUTE_BIT_ADVMSS	(1<<IPROUTE_ADVMSS)
+#define	IPROUTE_BIT_RTT		(1<<IPROUTE_RTT)
+#define	IPROUTE_BIT_RTTVAR	(1<<IPROUTE_RTTVAR)
+#define	IPROUTE_BIT_REORDERING	(1<<IPROUTE_REORDERING)
+#define	IPROUTE_BIT_WINDOW	(1<<IPROUTE_WINDOW)
+#define	IPROUTE_BIT_CWND	(1<<IPROUTE_CWND)
+#define	IPROUTE_BIT_SSTHRESH	(1<<IPROUTE_SSTHRESH)
+#define	IPROUTE_BIT_RTO_MIN	(1<<IPROUTE_RTO_MIN)
+#define	IPROUTE_BIT_INITCWND	(1<<IPROUTE_INITCWND)
+#define	IPROUTE_BIT_INITRWND	(1<<IPROUTE_INITRWND)
+#define	IPROUTE_BIT_QUICKACK	(1<<IPROUTE_QUICKACK)
+#define	IPROUTE_BIT_PREF	(1<<IPROUTE_PREF)
+#define	IPROUTE_BIT_FASTOPEN_NO_COOKIE	(1<<IPROUTE_FASTOPEN_NO_COOKIE)
+#define	IPROUTE_BIT_TTL_PROPAGATE (1<<IPROUTE_TTL_PROPAGATE)
+
 typedef struct _ip_route {
-	ip_address_t		*dst;		/* RTA_DST */
+	ip_address_t		*dst;
+	ip_address_t		*src;
 	uint8_t			dmask;
 	ip_address_t		*gw;		/* RTA_GATEWAY */
 	ip_address_t		*gw2;		/* Will use RTA_MULTIPATH */
-	ip_address_t		*src;		/* RTA_PREFSRC */
-	uint32_t		metric;		/* RTA_PRIORITY */
-//	int			index;		/* RTA_OIF */
-    char        ifname[16];
-	int			blackhole;
-	int			scope;
-	int			table;
-	int			set;
-} ip_route_t;
+	ip_address_t		*pref_src;
+	uint8_t			family;
+	uint8_t			tos;
+	uint32_t		table;
+	uint8_t			protocol;
+	uint8_t			scope;
+	uint32_t		metric;
+	ip_address_t		*via;
+	interface_t		*oif;
+	uint32_t		flags;
+	uint32_t		features;
+#if HAVE_DECL_RTAX_QUICKACK
+	bool			quickack;
+#endif
+#if HAVE_DECL_RTA_EXPIRES
+	uint32_t		expires;
+#endif
+	uint32_t		lock;
+	uint32_t		mtu;
+	uint8_t			hoplimit;
+	uint32_t		advmss;
+//#if HAVE_DECL_RTA_NEWDST
+//	ip_address_t		*as_to;
+//#endif
+	uint32_t		rtt;
+	uint32_t		rttvar;
+	uint32_t		reordering;
+	uint32_t		window;
+	uint32_t		cwnd;
+	uint32_t		ssthresh;
+	uint32_t		rto_min;
+	uint32_t		initcwnd;
+	uint32_t		initrwnd;
+#if HAVE_DECL_RTAX_CC_ALGO
+	char			*congctl;
+#endif
+#if HAVE_DECL_RTA_PREF
+	uint8_t			pref;
+#endif
+#if HAVE_DECL_RTAX_FASTOPEN_NO_COOKIE
+	bool			fastopen_no_cookie;
+#endif
+#if HAVE_DECL_RTA_TTL_PROPAGATE
+	bool			ttl_propagate;
+#endif
+	uint8_t			type;
+	
+	char        ifname[16];
 
-#define IPROUTE_DEL 0
-#define IPROUTE_ADD 1
+	uint32_t		realms;
+#if HAVE_DECL_RTA_ENCAP
+	encap_t			encap;
+#endif
+	list			nhs;
+	uint32_t		mask;
+	bool			dont_track;	/* used for virtual routes */
+	static_track_group_t	*track_group;	/* used for static routes */
+	bool			set;
+	uint32_t		configured_ifindex;	/* Index of interface route is configured on */
+} ip_route_t;
 
-/* Macro definition */
-#define ROUTE_ISEQ(X,Y) (IP_ISEQ((X)->dst, (Y)->dst)	&& \
-                         (X)->dmask  == (Y)->dmask	&& \
-                         IP_ISEQ((X)->gw, (Y)->gw)	&& \
-                         IP_ISEQ((X)->src, (Y)->src)	&& \
-                         (X)->table  == (Y)->table	&& \
-                         (X)->scope  == (Y)->scope	&& \
-                         !strcmp((X)->ifname, (Y)->ifname)) 
-                        // (X)->  == (Y)->index)
+#define IPROUTE_DEL	0
+#define IPROUTE_ADD	1
+#define IPROUTE_REPLACE	2
 
 /* prototypes */
-extern int netlink_route(ip_route_t *, int);
+extern unsigned short add_addr2req(struct nlmsghdr *, size_t, unsigned short, ip_address_t *);
 extern void netlink_rtlist(list, int);
 extern void free_iproute(void *);
-extern void dump_iproute(void *);
-extern void alloc_route(list, vector_t *);
+extern void format_iproute(const ip_route_t *, char *, size_t);
+extern void dump_iproute(FILE *, const void *);
+extern void alloc_route(list, const vector_t *, bool);
 extern void clear_diff_routes(list, list);
 extern void clear_diff_sroutes(void);
+extern void reinstate_static_route(ip_route_t *);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_iprule.h b/tools/keepalived/keepalived/include/vrrp_iprule.h
new file mode 100644
index 000000000..41f4a6183
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_iprule.h
@@ -0,0 +1,129 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        vrrp_iprule.c include file.
+ *
+ * Author:      Chris Riley, <kernelchris@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015 Chris Riley, <kernelchris@gmail.com>
+ * Copyright (C) 2016-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_IPRULE_H
+#define _VRRP_IPRULE_H
+
+/* global includes */
+#include <stdbool.h>
+#include <stdint.h>
+#include <stdio.h>
+#include <sys/types.h>
+#if HAVE_DECL_FRA_UID_RANGE
+#include <linux/fib_rules.h>
+#endif
+
+/* local includes */
+#include "vrrp_if.h"
+#include "vrrp_ipaddress.h"
+#include "vrrp_static_track.h"
+
+/* print buffer sizes */
+#define	RULE_BUF_SIZE	256
+
+enum iprule_param_mask {
+	IPRULE_BIT_PRIORITY = 0x01,
+	IPRULE_BIT_FWMARK = 0x02,
+	IPRULE_BIT_FWMASK = 0x04,
+	IPRULE_BIT_SUP_GROUP = 0x08,
+	IPRULE_BIT_UID_RANGE = 0x10,
+#if HAVE_DECL_FRA_PROTOCOL
+	IPRULE_BIT_PROTOCOL = 0x20,
+#endif
+#if HAVE_DECL_FRA_IP_PROTO
+	IPRULE_BIT_IP_PROTO = 0x40,
+#endif
+#if HAVE_DECL_FRA_SPORT_RANGE
+	IPRULE_BIT_SPORT_RANGE = 0x80,
+#endif
+#if HAVE_DECL_FRA_DPORT_RANGE
+	IPRULE_BIT_DPORT_RANGE = 0x100,
+#endif
+} ;
+
+ /* types definition */
+typedef struct _ip_rule {
+	uint32_t	mask;
+	bool		invert;
+	int		family;
+	ip_address_t	*from_addr;
+	ip_address_t	*to_addr;
+	uint32_t	priority;
+	uint8_t		tos;
+	uint32_t	fwmark;
+	uint32_t	fwmask;
+	uint32_t	realms;
+#if HAVE_DECL_FRA_SUPPRESS_PREFIXLEN
+	int32_t		suppress_prefix_len;
+#endif
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+	uint32_t	suppress_group;
+#endif
+	interface_t	*iif;
+#if HAVE_DECL_FRA_OIFNAME
+	interface_t	*oif;
+#endif
+	uint32_t	goto_target;
+	uint32_t	table;
+	uint8_t		action;
+#if HAVE_DECL_FRA_TUN_ID
+	uint64_t	tunnel_id;
+#endif
+#if HAVE_DECL_FRA_UID_RANGE
+	struct fib_rule_uid_range uid_range;
+#endif
+#if HAVE_DECL_FRA_L3MDEV
+	bool		l3mdev;
+#endif
+#if HAVE_DECL_FRA_PROTOCOL
+	uint8_t		protocol;
+#endif
+#if HAVE_DECL_FRA_IP_PROTO
+	uint8_t		ip_proto;
+#endif
+#if HAVE_DECL_FRA_SPORT_RANGE
+	struct fib_rule_port_range src_port;
+#endif
+#if HAVE_DECL_FRA_DPORT_RANGE
+	struct fib_rule_port_range dst_port;
+#endif
+	bool		dont_track;     /* used for virtual rules */
+	static_track_group_t *track_group;   /* used for static rules */
+	bool		set;
+} ip_rule_t;
+
+#define IPRULE_DEL 0
+#define IPRULE_ADD 1
+
+/* prototypes */
+extern void reinstate_static_rule(ip_rule_t *);
+extern void netlink_rulelist(list, int, bool);
+extern void free_iprule(void *);
+extern void format_iprule(const ip_rule_t *, char *, size_t);
+extern void dump_iprule(FILE *, const void *);
+extern void alloc_rule(list, const vector_t *, bool);
+extern void clear_diff_rules(list, list);
+extern void clear_diff_srules(void);
+extern void reset_next_rule_priority(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_ipsecah.h b/tools/keepalived/keepalived/include/vrrp_ipsecah.h
index 4cb7baf98..dfcb58521 100644
--- a/tools/keepalived/keepalived/include/vrrp_ipsecah.h
+++ b/tools/keepalived/keepalived/include/vrrp_ipsecah.h
@@ -4,30 +4,29 @@
  *              a loadbalanced server pool using multi-layer checks.
  *
  * Part:        vrrp_ipsecah.c include file.
- * 
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
- *              
+ *
  *              This program is free software; you can redistribute it and/or
  *              modify it under the terms of the GNU General Public License
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_IPSEC_AH_H
 #define _VRRP_IPSEC_AH_H
 
-#include <stdlib.h>
-#include <stdio.h>
 #include <sys/types.h>
-#include <string.h>
 #include <stdint.h>
+#include <openssl/md5.h>
+#include <stdbool.h>
 
 /* Predefined values */
 #define HMAC_MD5_TRUNC 0x0C	/* MD5 digest truncate value : 96-bit
@@ -36,7 +35,6 @@
 				   Computed in 32-bit words minus 2
 				   => (HMAC_MD5_TRUNC*8+3*32)/32 - 2
 				   -- rfc2402.2.2 */
-#define IPPROTO_IPSEC_AH 51	/* IP protocol number -- rfc2402.2 */
 
 typedef struct _ipsec_ah {				/* rfc2402.2 */
 	uint8_t			next_header;	/* Next header field */
@@ -44,21 +42,15 @@ typedef struct _ipsec_ah {				/* rfc2402.2 */
 	uint16_t		reserved;	/* Reserved field */
 	uint32_t		spi;		/* Security Parameter Index */
 	uint32_t		seq_number;	/* Sequence number */
-	uint32_t		auth_data[3];	/* Authentication data 128-bit MD5 digest trucated
-						   => HMAC_MD5_TRUNC*8/32 */
+	char			auth_data[HMAC_MD5_TRUNC];
+						/* Authentication data 128-bit MD5 digest trucated */
 } ipsec_ah_t;
 
-typedef struct {		/* rfc2402.3.3.3.1.1.1 */
-	uint8_t			tos;
-	uint16_t		frag_off;
-	uint16_t		check;
-} ICV_mutable_fields;		/* We need to zero this fields to compute the ICV */
-
 typedef struct _seq_counter {
-	int			cycle;
+	bool			cycle;
 	uint32_t		seq_number;
 } seq_counter_t;
 
-extern void hmac_md5(unsigned char *, int, unsigned char *, int, unsigned char *);
+extern void hmac_md5(const unsigned char *, size_t, const unsigned char *, size_t, const unsigned char *, size_t, unsigned char *);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_ipset.h b/tools/keepalived/keepalived/include/vrrp_ipset.h
new file mode 100644
index 000000000..30e08fa5f
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_ipset.h
@@ -0,0 +1,48 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        vrrp_ipset.c include file.
+ *
+ * Author:      Quentin Armitage, <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_IPSET_H
+#define _VRRP_IPSET_H
+
+#define LIBIPSET_NFPROTO_H
+#include "vrrp_ipaddress.h"
+#include "vrrp_iptables.h"
+
+#define DEFAULT_IPSET_NAME	"keepalived"
+
+struct ipset_session;
+
+bool add_vip_ipsets(struct ipset_session **, uint8_t, bool);
+#ifdef HAVE_IPSET_ATTR_IFACE
+bool add_igmp_ipsets(struct ipset_session **, uint8_t, bool);
+#endif
+bool remove_vip_ipsets(struct ipset_session **, uint8_t);
+bool remove_igmp_ipsets(struct ipset_session **, uint8_t);
+bool ipset_initialise(void);
+void* ipset_session_start(void);
+void ipset_session_end(void *);
+void ipset_entry(void *, int, const ip_address_t*);
+#ifdef HAVE_IPSET_ATTR_IFACE
+void ipset_entry_igmp(void*, int, const char *, uint8_t);
+#endif
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_iptables.h b/tools/keepalived/keepalived/include/vrrp_iptables.h
new file mode 100644
index 000000000..0de67bbdb
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_iptables.h
@@ -0,0 +1,58 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        vrrp_iptables.c include file.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_IPTABLES_H
+#define _VRRP_IPTABLES_H
+
+#include "config.h"
+
+/* global includes */
+#include <stdbool.h>
+
+/* local includes */
+#include "list.h"
+#include "vrrp.h"
+#ifdef _HAVE_LIBIPSET_
+#include "vrrp_ipset.h"
+#endif
+
+#define DEFAULT_IPTABLES_CHAIN_IN	"INPUT"
+#define DEFAULT_IPTABLES_CHAIN_OUT	"OUTPUT"
+
+typedef enum {
+        NOT_INIT,
+        INIT_SUCCESS,
+        INIT_FAILED,
+} init_state_t;
+
+/* prototypes */
+extern void handle_iptable_rule_to_iplist(list, list, int, bool force);
+extern void handle_iptables_accept_mode(vrrp_t *, int, bool);
+#ifdef _HAVE_VRRP_VMAC_
+extern void iptables_add_vmac(const vrrp_t *);
+extern void iptables_remove_vmac(const vrrp_t *);
+#endif
+extern void iptables_startup(bool);
+extern void iptables_cleanup(void);
+extern void iptables_fini(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_iptables_calls.h b/tools/keepalived/keepalived/include/vrrp_iptables_calls.h
new file mode 100644
index 000000000..41f04d4d5
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_iptables_calls.h
@@ -0,0 +1,52 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        vrrp_iptables_calls.c include file.
+ *
+ * Author:      Quentin Armitage, <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+
+#ifndef _VRRP_IPTABLES_CALLS_H
+#define	_VRRP_IPTABLES_CALLS_H
+
+#include "config.h"
+
+#include <limits.h>
+#include <stdbool.h>
+#include <stdint.h>
+#include <stdbool.h>
+
+#include "vrrp_ipaddress.h"
+
+#define	APPEND_RULE	UINT_MAX
+
+extern struct iptc_handle* ip4tables_open ( const char*);
+extern int ip4tables_close ( struct iptc_handle*, int);
+extern int ip4tables_is_chain(struct iptc_handle*, const char*);
+extern int ip4tables_process_entry( struct iptc_handle* handle, const char* chain_name, unsigned int rulenum, const char* target_name, const ip_address_t* src_ip_address, const ip_address_t* dst_ip_address, const char* in_iface, const char* out_iface, uint16_t protocol, uint8_t type, int cmd, uint8_t flags, bool force);
+extern struct ip6tc_handle* ip6tables_open ( const char* tablename );
+extern int ip6tables_close ( struct ip6tc_handle* handle, int updated );
+extern int ip6tables_is_chain(struct ip6tc_handle* handle, const char* chain_name);
+extern int ip6tables_process_entry( struct ip6tc_handle* handle, const char* chain_name, unsigned int rulenum, const char* target_name, const ip_address_t* src_ip_address, const ip_address_t* dst_ip_address, const char* in_iface, const char* out_iface, uint16_t protocol, uint8_t type, int cmd, uint8_t flags, bool force);
+extern int ip4tables_add_rules(struct iptc_handle *, const char *, unsigned int, uint8_t, uint8_t, const char *, const ip_address_t *, const ip_address_t *, const char *, uint16_t, uint8_t, int, bool);
+extern int ip6tables_add_rules(struct ip6tc_handle *, const char *, unsigned int, uint8_t, uint8_t, const char *, const ip_address_t *, const ip_address_t *, const char *, uint16_t, uint8_t, int, bool);
+#ifdef _LIBIPTC_DYNAMIC_
+extern bool iptables_lib_init(uint8_t);
+#endif
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_iptables_cmd.h b/tools/keepalived/keepalived/include/vrrp_iptables_cmd.h
new file mode 100644
index 000000000..b510bacbb
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_iptables_cmd.h
@@ -0,0 +1,40 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        vrrp_iptables_cmd.c include file.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_IPTABLES_CMD_H
+#define _VRRP_IPTABLES_CMD_H
+
+#include "config.h"
+
+#include "vrrp_ipaddress.h"
+#include "vrrp_iptables.h"
+
+/* prototypes */
+extern void handle_iptable_rule_to_vip_cmd(ip_address_t *, int, bool);
+#ifdef _HAVE_VRRP_VMAC_
+extern void handle_iptable_rule_for_igmp_cmd(const char *, int, uint8_t);
+#endif
+extern init_state_t check_chains_exist_cmd(uint8_t);
+extern init_state_t iptables_init_cmd(uint8_t);
+extern void iptables_fini_cmd(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_iptables_lib.h b/tools/keepalived/keepalived/include/vrrp_iptables_lib.h
new file mode 100644
index 000000000..bfb100f33
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_iptables_lib.h
@@ -0,0 +1,49 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        vrrp_iptables_lib.c include file.
+ *
+ * Author:      Quentin Armitage, <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_IPTABLES_LIB_H
+#define _VRRP_IPTABLES_LIB_H
+
+#include "config.h"
+
+#include <stdbool.h>
+
+#include "vrrp_ipaddress.h"
+#include "vrrp_iptables.h"
+
+struct ipt_handle;
+
+#define	IPTABLES_MAX_TRIES	3	/* How many times to try adding/deleting when get EAGAIN */
+
+extern struct ipt_handle *iptables_open(int) __attribute__ ((malloc));
+extern int iptables_close(struct ipt_handle *h);
+extern init_state_t check_chains_exist_lib(uint8_t);
+extern void handle_iptable_rule_to_vip_lib(ip_address_t *, int, struct ipt_handle *, bool);
+extern void handle_iptable_rule_for_igmp_lib(const char *, int, uint8_t, struct ipt_handle *);
+#ifdef _HAVE_LIBIPSET_
+extern void iptables_startup_lib(bool);
+extern void iptables_cleanup_lib(void);
+#endif
+extern void iptables_fini_lib(void);
+extern init_state_t iptables_init_lib(uint8_t);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_json.h b/tools/keepalived/keepalived/include/vrrp_json.h
new file mode 100644
index 000000000..7fbebebfd
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_json.h
@@ -0,0 +1,34 @@
+/*
+ * Soft:        Vrrpd is an implementation of VRRPv2 as specified in rfc2338.
+ *              VRRP is a protocol which elect a master server on a LAN. If the
+ *              master fails, a backup server takes over.
+ *              The original implementation has been made by jerome etienne.
+ *
+ * Part:        Output running VRRP state information in JSON format
+ *
+ * Author:      Damien Clabaut, <Damien.Clabaut@corp.ovh.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2017 Damien Clabaut, <Damien.Clabaut@corp.ovh.com>
+ * Copyright (C) 2017-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_JSON_H
+#define _VRRP_JSON_H
+
+/* Static definitions */
+#define SIGJSON (SIGRTMIN + 2)
+
+/* Prototypes */
+extern void vrrp_print_json(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_ndisc.h b/tools/keepalived/keepalived/include/vrrp_ndisc.h
index 4d70b46c7..8e71c53ee 100644
--- a/tools/keepalived/keepalived/include/vrrp_ndisc.h
+++ b/tools/keepalived/keepalived/include/vrrp_ndisc.h
@@ -11,40 +11,31 @@
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
- *              
+ *
  *              This program is free software; you can redistribute it and/or
  *              modify it under the terms of the GNU General Public License
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_NDISC_H
 #define _VRRP_NDISC_H
 
 /* system includes */
-#include <linux/icmpv6.h>
+#include <asm/byteorder.h>
+#include <netinet/icmp6.h>
+#include <netinet/in.h>
+
+/* local includes */
+#include "vrrp.h"
+#include "vrrp_if.h"
+#include "vrrp_ipaddress.h"
 
 /* local definitions */
-#define ETHERNET_HW_LEN 6
-#define NEXTHDR_ICMP	58
 #define NDISC_HOPLIMIT	255
 
-/*
- *	ICMPv6 codes for Neighbour Discovery messages
- */
-#define NDISC_ROUTER_SOLICITATION       133
-#define NDISC_ROUTER_ADVERTISEMENT      134
-#define NDISC_NEIGHBOUR_SOLICITATION    135
-#define NDISC_NEIGHBOUR_ADVERTISEMENT   136
-#define NDISC_REDIRECT                  137
-
-/*
- *	Neighbour Discovery option codes
- */
-#define ND_OPT_TARGET_LL_ADDR	2
-
 /*
  *	IPv6 Header
  */
@@ -68,25 +59,11 @@ struct ip6hdr {
 	struct	in6_addr	daddr;
 };
 
-/*
- *	NDISC Neighbour Advertisement related	
- */
-struct ndhdr {
-	struct icmp6hdr		icmph;
-	struct in6_addr		target;
-	__u8			opt[0];
-};
-
-struct nd_opt_hdr {
-	__u8			nd_opt_type;
-	__u8			nd_opt_len;
-} __attribute__((__packed__));
-
-
 /* prototypes */
 extern void ndisc_init(void);
 extern void ndisc_close(void);
-extern int ndisc_send_unsolicited_na(ip_address_t *);
+extern void ndisc_send_unsolicited_na(vrrp_t *, ip_address_t *);
+extern void ndisc_send_unsolicited_na_immediate(interface_t *, ip_address_t *);
 
 #endif
 
diff --git a/tools/keepalived/keepalived/include/vrrp_netlink.h b/tools/keepalived/keepalived/include/vrrp_netlink.h
deleted file mode 100644
index 2a1d7bf93..000000000
--- a/tools/keepalived/keepalived/include/vrrp_netlink.h
+++ /dev/null
@@ -1,69 +0,0 @@
-/*
- * Soft:        Keepalived is a failover program for the LVS project
- *              <www.linuxvirtualserver.org>. It monitor & manipulate
- *              a loadbalanced server pool using multi-layer checks.
- *
- * Part:        vrrp_netlink.c include file.
- *
- * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *
- *              This program is distributed in the hope that it will be useful,
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
- *              See the GNU General Public License for more details.
- *              
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
- *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
- */
-
-#ifndef _VRRP_NETLINK_H
-#define _VRRP_NETLINK_H 1
-
-/* Hack for GNU libc version 2. */
-#ifndef MSG_TRUNC
-#define MSG_TRUNC      0x20
-#endif				/* MSG_TRUNC */
-
-/* global includes */
-#include <asm/types.h>
-#include <linux/netlink.h>
-#include <linux/rtnetlink.h>
-
-/* local includes */
-#include "timer.h"
-
-/* types definitions */
-typedef struct _nl_handle {
-	int			fd;
-	struct sockaddr_nl	snl;
-	__u32			seq;
-	thread_t		*thread;
-} nl_handle_t;
-
-/* Define types */
-#define NETLINK_TIMER (30 * TIMER_HZ)
-#define NLMSG_TAIL(nmsg) ((struct rtattr *) (((void *) (nmsg)) + NLMSG_ALIGN((nmsg)->nlmsg_len)))
-
-/* Global vars exported */
-extern nl_handle_t nl_kernel;	/* Kernel reflection channel */
-extern nl_handle_t nl_cmd;	/* Command channel */
-
-/* prototypes */
-extern int addattr32(struct nlmsghdr *, int, int, uint32_t);
-extern int addattr_l(struct nlmsghdr *, int, int, void *, int);
-extern int rta_addattr_l(struct rtattr *, int, int, const void *, int);
-extern char *netlink_scope_n2a(int);
-extern int netlink_scope_a2n(char *);
-extern int netlink_socket(nl_handle_t *, unsigned long);
-extern int netlink_close(nl_handle_t *);
-extern int netlink_talk(nl_handle_t *, struct nlmsghdr *);
-extern int netlink_interface_lookup(void);
-extern int netlink_interface_refresh(void);
-extern void kernel_netlink_init(void);
-extern void kernel_netlink_close(void);
-
-#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_nftables.h b/tools/keepalived/keepalived/include/vrrp_nftables.h
new file mode 100644
index 000000000..f646ef2bc
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_nftables.h
@@ -0,0 +1,52 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        vrrp_nftables.c include file.
+ *
+ * Author:      Quentin Armitage, <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_NFTABLES_H
+#define _VRRP_NFTABLES_H
+
+#include "config.h"
+
+/* Include to check NFT_TABLE_MAXNAMELEN defined */
+#include <linux/netfilter/nf_tables.h>
+
+#include "list.h"
+#include "vrrp.h"
+#include "vrrp_ipaddress.h"
+
+#define	DEFAULT_NFTABLES_TABLE	"keepalived"
+
+/* For kernels < 4.1 */
+#ifndef NFT_TABLE_MAXNAMELEN
+#define NFT_TABLE_MAXNAMELEN 32
+#endif
+
+extern void nft_add_addresses(vrrp_t *);
+extern void nft_remove_addresses(vrrp_t *);
+extern void nft_remove_addresses_iplist(list);
+#ifdef _HAVE_VRRP_VMAC_
+extern void nft_add_vmac(const vrrp_t *);
+extern void nft_remove_vmac(const vrrp_t *);
+#endif
+extern void nft_cleanup(void);
+extern void nft_end(void);
+extern void set_nf_ifname_type(void);
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_notify.h b/tools/keepalived/keepalived/include/vrrp_notify.h
index 8f60c4585..5c579b3e9 100644
--- a/tools/keepalived/keepalived/include/vrrp_notify.h
+++ b/tools/keepalived/keepalived/include/vrrp_notify.h
@@ -18,7 +18,7 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_NOTIFY_H
@@ -27,7 +27,10 @@
 /* local include */
 #include "vrrp.h"
 
-extern int notify_instance_exec(vrrp_t *, int);
-extern int notify_group_exec(vrrp_sgroup_t *, int);
+extern void send_event_notify(vrrp_t *, int);
+extern void send_instance_notifies(vrrp_t *);
+extern void send_group_notifies(vrrp_sgroup_t *);
+extern void send_instance_priority_notifies(vrrp_t *);
+extern void notify_shutdown(void);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_parser.h b/tools/keepalived/keepalived/include/vrrp_parser.h
index 9b3d00f58..91c34be94 100644
--- a/tools/keepalived/keepalived/include/vrrp_parser.h
+++ b/tools/keepalived/keepalived/include/vrrp_parser.h
@@ -1,10 +1,10 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        vrrp_parser.c include file.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -17,16 +17,20 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2016 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_PARSER_H
 #define _VRRP_PARSER_H
 
+/* Global include */
+#include <stdbool.h>
+
 /* local include */
 #include "vector.h"
 
 /* Prototypes */
-extern vector_t *vrrp_init_keywords(void);
+extern const vector_t *vrrp_init_keywords(void);
+extern void init_vrrp_keywords(bool);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_print.h b/tools/keepalived/keepalived/include/vrrp_print.h
new file mode 100644
index 000000000..828bfa5ed
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_print.h
@@ -0,0 +1,31 @@
+/*
+ * Soft:        Vrrpd is an implementation of VRRPv2 as specified in rfc2338.
+ *              VRRP is a protocol which elect a master server on a LAN. If the
+ *              master fails, a backup server takes over.
+ *              The original implementation has been made by jerome etienne.
+ *
+ * Part:        vrrp_print.c program include file.
+ *
+ * Author:      John Southworth, <john.southworth@vyatta.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2012 John Southworth, <john.southworth@vyatta.com>
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_PRINT_H
+#define _VRRP_PRINT_H
+
+extern void vrrp_print_data(void);
+extern void vrrp_print_stats(void);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_scheduler.h b/tools/keepalived/keepalived/include/vrrp_scheduler.h
index 4e8692ec4..b3328cec3 100644
--- a/tools/keepalived/keepalived/include/vrrp_scheduler.h
+++ b/tools/keepalived/keepalived/include/vrrp_scheduler.h
@@ -4,62 +4,71 @@
  *              a loadbalanced server pool using multi-layer checks.
  *
  * Part:        vrrp_scheduler.c include file.
- * 
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
- *              
+ *
  *              This program is free software; you can redistribute it and/or
  *              modify it under the terms of the GNU General Public License
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_SCHEDULER_H
 #define _VRRP_SCHEDULER_H
 
 /* system include */
-#include <stdlib.h>
-#include <stdio.h>
-#include <sys/types.h>
-#include <string.h>
 #include <stdint.h>
+#include <unistd.h>
+#include <stdbool.h>
 
 /* local includes */
 #include "scheduler.h"
-#include "list.h"
+#include "timer.h"
 #include "vrrp_data.h"
+#include "vrrp.h"
 
-/* VRRP FSM Macro */
-#define VRRP_FSM_READ_TO(V)			\
-do {						\
-  if ((*(VRRP_FSM[(V)->state].read_to)))	\
-    (*(VRRP_FSM[(V)->state].read_to)) (V);	\
-} while (0)
-
-#define VRRP_FSM_READ(V, B, L)		 	\
-do {						\
-  if ((*(VRRP_FSM[(V)->state].read)))	 	\
-    (*(VRRP_FSM[(V)->state].read)) (V, B, L);	\
-} while (0)
+/* global vars */
+extern timeval_t garp_next_time;
+extern thread_ref_t garp_thread;
+extern bool vrrp_initialised;
 
 /* VRRP TSM Macro */
 #define VRRP_TSM_HANDLE(S,V)			\
 do {						\
-  if ((V)->sync && 				\
-      S != VRRP_STATE_GOTO_MASTER)		\
-    if ((*(VRRP_TSM[S][(V)->state].handler)))	\
+  if ((V)->sync &&				\
+      (*(VRRP_TSM[S][(V)->state].handler)))	\
       (*(VRRP_TSM[S][(V)->state].handler)) (V);	\
 } while (0)
 
+#ifdef _TSM_DEBUG_
+extern bool do_tsm_debug;
+#endif
+
 /* extern prototypes */
+extern void vrrp_init_instance_sands(vrrp_t *);
+extern void vrrp_thread_requeue_read(vrrp_t *);
+extern void vrrp_thread_add_read(vrrp_t *);
+extern int vrrp_dispatcher_init(thread_ref_t);
+#ifdef _WITH_BFD_
+extern void cancel_vrrp_threads(void);
+#endif
 extern void vrrp_dispatcher_release(vrrp_data_t *);
-extern int vrrp_dispatcher_init(thread_t *);
-extern int vrrp_read_dispatcher_thread(thread_t *);
+extern int vrrp_gratuitous_arp_thread(thread_ref_t);
+extern int vrrp_lower_prio_gratuitous_arp_thread(thread_ref_t);
+extern int vrrp_arp_thread(thread_ref_t);
+extern void try_up_instance(vrrp_t *, bool);
+#ifdef _WITH_DUMP_THREADS_
+extern void dump_threads(void);
+#endif
+#ifdef THREAD_DUMP
+extern void register_vrrp_scheduler_addresses(void);
+#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_snmp.h b/tools/keepalived/keepalived/include/vrrp_snmp.h
index 57d66b669..4356a96dc 100644
--- a/tools/keepalived/keepalived/include/vrrp_snmp.h
+++ b/tools/keepalived/keepalived/include/vrrp_snmp.h
@@ -8,9 +8,9 @@
  *
  * Author:      Vincent Bernat <bernat@luffy.cx>
  *
- *              This program is distributed in the hope that it will be useful, 
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of 
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
  *
  *              This program is free software; you can redistribute it and/or
@@ -18,99 +18,76 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_SNMP_H
 #define _VRRP_SNMP_H
 
-#include "snmp.h"
+#include "config.h"
 
-/* VRRP SNMP defines */
-#define VRRP_OID KEEPALIVED_OID, 2
+#ifdef _WITH_SNMP_RFC_
+#include "timer.h"
+#endif
+#include "vrrp.h"
+
+#ifdef _WITH_SNMP_RFCV2_
+enum rfcv2_trap_auth_error_type {
+	invalidAuthType = 1,
+#ifdef _WITH_VRRP_AUTH_
+	authTypeMismatch,
+	authFailure
+#endif
+};
+#endif
 
-#define VRRP_SNMP_SCRIPT_NAME 3
-#define VRRP_SNMP_SCRIPT_COMMAND 4
-#define VRRP_SNMP_SCRIPT_INTERVAL 5
-#define VRRP_SNMP_SCRIPT_WEIGHT 6
-#define VRRP_SNMP_SCRIPT_RESULT 7
-#define VRRP_SNMP_SCRIPT_RISE 8
-#define VRRP_SNMP_SCRIPT_FALL 9
-#define VRRP_SNMP_ADDRESS_ADDRESSTYPE 9
-#define VRRP_SNMP_ADDRESS_VALUE 10
-#define VRRP_SNMP_ADDRESS_BROADCAST 11
-#define VRRP_SNMP_ADDRESS_MASK 12
-#define VRRP_SNMP_ADDRESS_SCOPE 13
-#define VRRP_SNMP_ADDRESS_IFINDEX 14
-#define VRRP_SNMP_ADDRESS_IFNAME 15
-#define VRRP_SNMP_ADDRESS_IFALIAS 16
-#define VRRP_SNMP_ADDRESS_ISSET 17
-#define VRRP_SNMP_ADDRESS_ISADVERTISED 18
-#define VRRP_SNMP_ROUTE_ADDRESSTYPE 19
-#define VRRP_SNMP_ROUTE_DESTINATION 20
-#define VRRP_SNMP_ROUTE_DESTINATIONMASK 21
-#define VRRP_SNMP_ROUTE_GATEWAY 22
-#define VRRP_SNMP_ROUTE_SECONDARYGATEWAY 23
-#define VRRP_SNMP_ROUTE_SOURCE 24
-#define VRRP_SNMP_ROUTE_METRIC 25
-#define VRRP_SNMP_ROUTE_SCOPE 26
-#define VRRP_SNMP_ROUTE_TYPE 27
-#define VRRP_SNMP_ROUTE_IFINDEX 28
-#define VRRP_SNMP_ROUTE_IFNAME 29
-#define VRRP_SNMP_ROUTE_ROUTINGTABLE 30
-#define VRRP_SNMP_ROUTE_ISSET 31
-#define VRRP_SNMP_SYNCGROUP_NAME 33
-#define VRRP_SNMP_SYNCGROUP_STATE 34
-#define VRRP_SNMP_SYNCGROUP_SMTPALERT 35
-#define VRRP_SNMP_SYNCGROUP_NOTIFYEXEC 36
-#define VRRP_SNMP_SYNCGROUP_SCRIPTMASTER 37
-#define VRRP_SNMP_SYNCGROUP_SCRIPTBACKUP 38
-#define VRRP_SNMP_SYNCGROUP_SCRIPTFAULT 39
-#define VRRP_SNMP_SYNCGROUP_SCRIPT 40
-#define VRRP_SNMP_SYNCGROUPMEMBER_INSTANCE 42
-#define VRRP_SNMP_SYNCGROUPMEMBER_NAME 43
-#define VRRP_SNMP_INSTANCE_NAME 45
-#define VRRP_SNMP_INSTANCE_VIRTUALROUTERID 46
-#define VRRP_SNMP_INSTANCE_STATE 47
-#define VRRP_SNMP_INSTANCE_INITIALSTATE 48
-#define VRRP_SNMP_INSTANCE_WANTEDSTATE 49
-#define VRRP_SNMP_INSTANCE_BASEPRIORITY 50
-#define VRRP_SNMP_INSTANCE_EFFECTIVEPRIORITY 51
-#define VRRP_SNMP_INSTANCE_VIPSENABLED 52
-#define VRRP_SNMP_INSTANCE_PRIMARYINTERFACE 53
-#define VRRP_SNMP_INSTANCE_TRACKPRIMARYIF 54
-#define VRRP_SNMP_INSTANCE_ADVERTISEMENTSINT 55
-#define VRRP_SNMP_INSTANCE_PREEMPT 56
-#define VRRP_SNMP_INSTANCE_PREEMPTDELAY 57
-#define VRRP_SNMP_INSTANCE_AUTHTYPE 58
-#define VRRP_SNMP_INSTANCE_USELVSSYNCDAEMON 59
-#define VRRP_SNMP_INSTANCE_LVSSYNCINTERFACE 60
-#define VRRP_SNMP_INSTANCE_SYNCGROUP 61
-#define VRRP_SNMP_INSTANCE_GARPDELAY 62
-#define VRRP_SNMP_INSTANCE_SMTPALERT 63
-#define VRRP_SNMP_INSTANCE_NOTIFYEXEC 64
-#define VRRP_SNMP_INSTANCE_SCRIPTMASTER 65
-#define VRRP_SNMP_INSTANCE_SCRIPTBACKUP 66
-#define VRRP_SNMP_INSTANCE_SCRIPTFAULT 67
-#define VRRP_SNMP_INSTANCE_SCRIPTSTOP 68
-#define VRRP_SNMP_INSTANCE_SCRIPT 69
-#define VRRP_SNMP_TRACKEDINTERFACE_NAME 70
-#define VRRP_SNMP_TRACKEDINTERFACE_WEIGHT 71
-#define VRRP_SNMP_TRACKEDSCRIPT_NAME 73
-#define VRRP_SNMP_TRACKEDSCRIPT_WEIGHT 74
+#ifdef _WITH_SNMP_RFCV3_
+enum rfcv3_notify_proto_error_type {
+	noError = 0,
+	ipTtlError,
+	versionError,
+	checksumError,
+	vrIdError
+};
 
-#define HEADER_STATE_STATIC_ADDRESS 1
-#define HEADER_STATE_VIRTUAL_ADDRESS 2
-#define HEADER_STATE_EXCLUDED_VIRTUAL_ADDRESS 3
-#define HEADER_STATE_STATIC_ROUTE 4
-#define HEADER_STATE_VIRTUAL_ROUTE 5
-#define HEADER_STATE_END 10
+/* RFC6527 isn't clear about the meaning of the following. However,
+ * the only meaning I can see is that PRIORITY means became master
+ * after receiving a priority 0 advert, preempted means that we were
+ * receiving lower priority adverts or we are the address owner, and
+ * so transitioned to master, and MASTER_NO_RESPONSE means that we
+ * didn't receive any adverts for 3 * master advert interval + skew time.
+ * However, it is possible the PRIORITY is meant to mean priority 255
+ * (i.e. the address owner), in which case we don't have a specific
+ * reason for transition following receiving a priority 0 advert. */
+enum rfcv3_master_reason_type {
+	VRRPV3_MASTER_REASON_NOT_MASTER = 0,
+	VRRPV3_MASTER_REASON_PRIORITY,
+	VRRPV3_MASTER_REASON_PREEMPTED,
+	VRRPV3_MASTER_REASON_MASTER_NO_RESPONSE
+};
+#endif
 
+#ifdef _WITH_SNMP_RFC_
+/* Global vars */
+extern timeval_t vrrp_start_time;
+#endif
 
 /* Prototypes */
-extern void vrrp_snmp_agent_init(void);
+extern void vrrp_snmp_agent_init(const char *);
 extern void vrrp_snmp_agent_close(void);
+
+#ifdef _WITH_SNMP_VRRP_
 extern void vrrp_snmp_instance_trap(vrrp_t *);
 extern void vrrp_snmp_group_trap(vrrp_sgroup_t *);
+#endif
+
+#ifdef _WITH_SNMP_RFCV2_
+extern void vrrp_rfcv2_snmp_new_master_trap(vrrp_t *);
+extern void vrrp_rfcv2_snmp_auth_err_trap(vrrp_t *, struct in_addr, enum rfcv2_trap_auth_error_type);
+#endif
+#ifdef _WITH_SNMP_RFCV3_
+extern void vrrp_rfcv3_snmp_new_master_notify(vrrp_t *);
+extern void vrrp_rfcv3_snmp_proto_err_notify(vrrp_t *);
+#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_sock.h b/tools/keepalived/keepalived/include/vrrp_sock.h
new file mode 100644
index 000000000..1e2c68f2b
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_sock.h
@@ -0,0 +1,53 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Dynamic data structure definition.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_SOCK_H
+#define _VRRP_SOCK_H
+
+/* system includes */
+#include <stdbool.h>
+#include <sys/types.h>
+#include <sys/socket.h>
+
+/* local includes */
+#include "scheduler.h"
+#include "vrrp_if.h"
+
+/*
+ * Our instance dispatcher use a socket pool.
+ * That way we handle VRRP protocol type per
+ * physical interface.
+ */
+typedef struct _sock {
+	sa_family_t		family;
+	int			proto;
+	interface_t		*ifp;
+	bool			unicast;
+	int			fd_in;
+	int			fd_out;
+	int			rx_buf_size;
+	thread_ref_t		thread;
+	rb_root_t		rb_vrid;
+	rb_root_cached_t	rb_sands;
+} sock_t;
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_static_track.h b/tools/keepalived/keepalived/include/vrrp_static_track.h
new file mode 100644
index 000000000..a4bf472d8
--- /dev/null
+++ b/tools/keepalived/keepalived/include/vrrp_static_track.h
@@ -0,0 +1,47 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        vrrp_static_track.c include file.
+ *
+ * Author:      Quentin Armitage, <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2018-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _VRRP_STATIC_TRACK_H
+#define _VRRP_STATIC_TRACK_H
+
+/* global includes */
+#include <stdio.h>
+
+/* local includes */
+#include "vector.h"
+#include "list.h"
+#include "vrrp_if.h"
+
+/* Parameters for static track groups */
+typedef struct _static_track_group {
+	const char		*gname;			/* Group name */
+	const vector_t		*iname;			/* Set of VRRP instances in this group, only used during initialisation */
+	list			vrrp_instances;		/* List of VRRP instances */
+} static_track_group_t;
+
+extern void free_tgroup(void *);
+extern void dump_tgroup(FILE *, const void *);
+extern static_track_group_t *find_track_group(const char *);
+extern void static_track_group_init(void);
+extern void static_track_reinstate_config(interface_t *);
+
+#endif
diff --git a/tools/keepalived/keepalived/include/vrrp_sync.h b/tools/keepalived/keepalived/include/vrrp_sync.h
index d79f916f0..f2a397047 100644
--- a/tools/keepalived/keepalived/include/vrrp_sync.h
+++ b/tools/keepalived/keepalived/include/vrrp_sync.h
@@ -4,32 +4,25 @@
  *              a loadbalanced server pool using multi-layer checks.
  *
  * Part:        vrrp_sync.c include file.
- * 
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
- *              
+ *
  *              This program is free software; you can redistribute it and/or
  *              modify it under the terms of the GNU General Public License
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_SYNC_H
 #define _VRRP_SYNC_H
 
-/* system include */
-#include <stdlib.h>
-#include <stdio.h>
-#include <sys/types.h>
-#include <string.h>
-#include <stdint.h>
-
 /* local include */
 #include "vrrp.h"
 
@@ -41,15 +34,11 @@
 #define GROUP_NAME(G)  ((G)->gname)
 
 /* extern prototypes */
-extern void vrrp_init_instance_sands(vrrp_t *);
-extern void vrrp_sync_smtp_notifier(vrrp_sgroup_t *);
+extern vrrp_t *vrrp_get_instance(char *) __attribute__ ((pure));
 extern void vrrp_sync_set_group(vrrp_sgroup_t *);
-extern int vrrp_sync_group_up(vrrp_sgroup_t *);
-extern int vrrp_sync_leave_fault(vrrp_t *);
-extern int vrrp_sync_goto_master(vrrp_t *);
+extern bool vrrp_sync_can_goto_master(vrrp_t *);
 extern void vrrp_sync_backup(vrrp_t *);
 extern void vrrp_sync_master(vrrp_t *);
-extern void vrrp_sync_master_election(vrrp_t *);
 extern void vrrp_sync_fault(vrrp_t *);
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_track.h b/tools/keepalived/keepalived/include/vrrp_track.h
index fc8496e2c..58a1d0042 100644
--- a/tools/keepalived/keepalived/include/vrrp_track.h
+++ b/tools/keepalived/keepalived/include/vrrp_track.h
@@ -11,32 +11,35 @@
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
- *              
+ *
  *              This program is free software; you can redistribute it and/or
  *              modify it under the terms of the GNU General Public License
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_TRACK_H
 #define _VRRP_TRACK_H
 
 /* global includes */
+#include <stdbool.h>
 #include <stdio.h>
-#include <stdlib.h>
-#include <arpa/inet.h>
-#include <string.h>
-#include <syslog.h>
+#include <sys/types.h>
 
 /* local includes */
 #include "vector.h"
 #include "list.h"
-
-/* Macro definition */
-#define TRACK_ISUP(L)	(vrrp_tracked_up((L)))
-#define SCRIPT_ISUP(L)	(vrrp_script_up((L)))
+#include "vrrp_if.h"
+#include "vrrp.h"
+#include "notify.h"
+#ifdef _WITH_BFD_
+#include "bfd.h"
+#endif
+#ifdef _WITH_CN_PROC_
+#include "rbtree.h"
+#endif
 
 /* VRRP script tracking defaults */
 #define VRRP_SCRIPT_DI 1	/* external script track interval (in sec) */
@@ -50,39 +53,177 @@
  * success, we increase result and set it to rise+fall-1 when we pass above
  * rise-1.
  */
-#define VRRP_SCRIPT_STATUS_DISABLED  -3
-#define VRRP_SCRIPT_STATUS_INIT_GOOD -2
-#define VRRP_SCRIPT_STATUS_INIT      -1
+
+/* If a VRRP instance doesn't track it's own interface, we still
+ * want the interface to have a reference to the VRRP instance,
+ * but it needs to know the instance isn't tracking it. */
+#define	VRRP_NOT_TRACK_IF	255
 
 /* external script we call to track local processes */
 typedef struct _vrrp_script {
-	char			*sname;		/* instance name */
-	char			*script;	/* the command to be called */
-	long			interval;	/* interval between script calls */
-	long			timeout;	/* seconds before script timeout */
+	const char		*sname;		/* instance name */
+	notify_script_t		script;		/* The script details */
+	unsigned long		interval;	/* interval between script calls */
+	unsigned long		timeout;	/* microseconds before script timeout */
 	int			weight;		/* weight associated to this script */
+	bool			weight_reverse;	/* which direction is the weight applied */
 	int			result;		/* result of last call to this script: 0..R-1 = KO, R..R+F-1 = OK */
-	int			inuse;		/* how many users have weight>0 ? */
 	int			rise;		/* R: how many successes before OK */
 	int			fall;		/* F: how many failures before KO */
+	list			tracking_vrrp;	/* List of tracking_vrrp_t for vrrp instances tracking this script */
+	int			last_status;	/* Last status returned by script. Used to report changes */
+	script_state_t		state;		/* current state of script */
+	script_init_state_t	init_state;	/* current initialisation state of script */
+	bool			insecure;	/* Set if script is run by root, but is non-root modifiable */
 } vrrp_script_t;
 
 /* Tracked script structure definition */
 typedef struct _tracked_sc {
-	int			weight;		/* tracking weight when non-zero */
 	vrrp_script_t		*scr;		/* script pointer, cannot be NULL */
+	int			weight;		/* tracking weight when non-zero */
+	bool			weight_reverse;	/* which direction is the weight applied */
 } tracked_sc_t;
 
+/* external file we read to track local processes */
+typedef struct _vrrp_file {
+	const char		*fname;		/* File name */
+	const char		*file_path;	/* Path to file */
+	const char		*file_part;	/* Pointer to start of filename without directories */
+	int			weight;		/* Default weight */
+	bool			weight_reverse;	/* which direction is the weight applied */
+	int			wd;		/* Watch descriptor */
+	list			tracking_vrrp;	/* List of tracking_vrrp_t for vrrp instances tracking this file */
+	int			last_status;	/* Last status returned by file. Used to report changes */
+} vrrp_tracked_file_t;
+
+/* Tracked file structure definition */
+typedef struct _tracked_file {
+	vrrp_tracked_file_t	*file;		/* track file pointer, cannot be NULL */
+	int			weight;		/* Multiplier for file value */
+	bool			weight_reverse;	/* which direction is the weight applied */
+} tracked_file_t;
+
+#ifdef _WITH_CN_PROC_
+typedef enum _param_match {
+	PARAM_MATCH_NONE,
+	PARAM_MATCH_EXACT,			/* All parameters must match */
+	PARAM_MATCH_INITIAL,			/* Match initial complete parameters */
+	PARAM_MATCH_PARTIAL,			/* Allow the last parameter to be a partial match */
+} param_match_t;
+
+/* process we track */
+typedef struct _vrrp_process {
+	const char		*pname;		/* Process name */
+	const char		*process_path;	/* Path to process */
+	const char		*process_params; /* NUL separated parameters */
+	size_t			process_params_len; /* Total length of parameters, including NULs */
+	param_match_t		param_match;	/* Full or partial match of parameters */
+	int			weight;		/* Default weight */
+	bool			weight_reverse;	/* which direction is the weight applied */
+	unsigned		quorum;		/* Minimum number of process instances required */
+	unsigned		quorum_max;	/* Maximum number of process instances required */
+	int			fork_delay;	/* Delay before processing process fork */
+	int			terminate_delay; /* Delay before processing process termination */
+	bool			full_command;	/* Set if match against full command line */
+	thread_ref_t		fork_timer_thread; /* For handling delay */
+	thread_ref_t		terminate_timer_thread; /* For handling delay */
+	list			tracking_vrrp;	/* List of tracking_vrrp_t for vrrp instances tracking this process */
+	unsigned		num_cur_proc;
+	bool			have_quorum;	/* Set if quorum is treated as achieved */
+	unsigned		sav_num_cur_proc; /* Used if have ENOBUFS on netlink socket read */
+} vrrp_tracked_process_t;
+
+/* Tracked process structure definition */
+typedef struct _tracked_process {
+	vrrp_tracked_process_t	*process;	/* track process pointer, cannot be NULL */
+	int			weight;		/* Multiplier for process value */
+	bool			weight_reverse;	/* which direction is the weight applied */
+} tracked_process_t;
+
+/* A monitored process instance */
+typedef struct _tracked_process_instance {
+	pid_t			pid;
+	rb_node_t		pid_tree;
+	list			processes;	/* list of vrrp_tracked_process_t* */
+} tracked_process_instance_t;
+#endif
+
+#ifdef _WITH_BFD_
+/* external bfd we read to track forwarding to remote systems */
+typedef struct _vrrp_bfd {
+	char			bname[BFD_INAME_MAX];	/* bfd name */
+	int			weight;		/* Default weight */
+	bool			weight_reverse;	/* apply weight in opposite direction */
+	list			tracking_vrrp;	/* List of tracking_vrrp_t for vrrp instances tracking this bfd */
+	bool			bfd_up;		/* Last status returned by bfd. Used to report changes */
+} vrrp_tracked_bfd_t;
+
+/* Tracked bfd structure definition */
+typedef struct _tracked_bfd {
+	vrrp_tracked_bfd_t	*bfd;		/* track bfd pointer, cannot be NULL */
+	int			weight;		/* Weight for bfd */
+	bool			weight_reverse; /* which direction is the weight applied */
+} tracked_bfd_t;
+#endif
+
+/* Forward references */
+struct _vrrp_t;
+struct _vrrp_sgroup;
+
+typedef enum {
+	TRACK_VRRP = 0x01,
+	TRACK_IF = 0x02,
+	TRACK_SG = 0x04,
+	TRACK_ADDR = 0x08,
+	TRACK_ROUTE = 0x10,
+	TRACK_RULE = 0x20,
+	TRACK_SADDR = 0x40,
+	TRACK_SROUTE = 0x80,
+	TRACK_SRULE = 0x100,
+	TRACK_VRRP_DYNAMIC = 0x200,
+} track_t;
+
+/* List structure from scripts, files and interfaces to tracking vrrp */
+typedef struct _tracking_vrrp {
+	int			weight;		/* Tracking weight, or zero for down instance */
+	int			weight_multiplier; /* Which direction is weight applied */
+	struct _vrrp_t		*vrrp;		/* The vrrp instance */
+	track_t			type;		/* Type of object being tracked */
+} tracking_vrrp_t;
+
 /* prototypes */
-extern void dump_track(void *);
-extern void alloc_track(list, vector_t *);
-extern void dump_track_script(void *);
-extern void alloc_track_script(list, vector_t *);
-extern int vrrp_tracked_up(list);
-extern void vrrp_log_tracked_down(list);
-extern int vrrp_tracked_weight(list);
-extern int vrrp_script_up(list);
-extern int vrrp_script_weight(list);
-extern vrrp_script_t *find_script_by_name(char *);
+extern void dump_track_if(FILE *, const void *);
+extern void free_track_if(void *);
+extern void alloc_track_if(const char *, list, const vector_t *);
+extern void dump_track_script(FILE *, const void *);
+extern void free_track_script(void *);
+extern void alloc_track_script(const char *, list, const vector_t *);
+extern void dump_track_file(FILE *, const void *);
+extern void free_track_file(void *);
+extern void alloc_track_file(const char *, list, const vector_t *);
+#ifdef _WITH_CN_PROC_
+extern void dump_track_process(FILE *, const void *);
+extern void free_track_process(void *);
+extern void alloc_track_process(const char *, list, const vector_t *);
+#endif
+#ifdef _WITH_BFD_
+extern vrrp_tracked_bfd_t *find_vrrp_tracked_bfd_by_name(const char *) __attribute__ ((pure));
+extern void dump_vrrp_tracked_bfd(FILE *, const void *);
+extern void free_vrrp_tracked_bfd(void *);
+extern void alloc_track_bfd(const char *, list, const vector_t *);
+#endif
+extern vrrp_script_t *find_script_by_name(const char *) __attribute__ ((pure));
+extern void update_script_priorities(vrrp_script_t *, bool);
+extern void down_instance(struct _vrrp_t *);
+extern void vrrp_set_effective_priority(struct _vrrp_t *);
+extern void initialise_tracking_priorities(void);
+extern void init_track_files(list);
+extern void stop_track_files(void);
+#ifdef _WITH_CN_PROC_
+extern void process_update_track_process_status(vrrp_tracked_process_t *, bool);
+#endif
+#ifdef THREAD_DUMP
+extern void register_vrrp_inotify_addresses(void);
+#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/include/vrrp_vmac.h b/tools/keepalived/keepalived/include/vrrp_vmac.h
index b7fdc189c..dbf8c3dc9 100644
--- a/tools/keepalived/keepalived/include/vrrp_vmac.h
+++ b/tools/keepalived/keepalived/include/vrrp_vmac.h
@@ -11,37 +11,58 @@
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
- *              
+ *
  *              This program is free software; you can redistribute it and/or
  *              modify it under the terms of the GNU General Public License
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VRRP_VMAC_H
 #define _VRRP_VMAC_H
 
 /* global includes */
-#include <stdio.h>
-#include <stdlib.h>
-#include <arpa/inet.h>
-#include <string.h>
-#include <syslog.h>
+#include <sys/types.h>
+#if defined _HAVE_NETINET_LINUX_IF_ETHER_H_COLLISION_ && \
+    defined _LINUX_IF_ETHER_H && \
+    !defined _NETINET_IF_ETHER_H
+#define _NETINET_IF_ETHER_H
+#endif
 #include <net/ethernet.h>
+#include <stdbool.h>
 
 /* local includes */
 #include "vrrp.h"
 #include "vrrp_if.h"
 
 /* Defines */
-#define VRRP_VMAC_FL_SET	(1 << 0)
-#define VRRP_VMAC_FL_UP		(1 << 1)
-#define VRRP_VMAC_FL_XMITBASE	(1 << 2)
+enum vrrp_vmac_bits {
+	VRRP_VMAC_BIT = 0,
+	VRRP_VMAC_UP_BIT = 1,
+	VRRP_VMAC_XMITBASE_BIT = 2,
+#ifdef _HAVE_VRRP_IPVLAN_
+	VRRP_IPVLAN_BIT = 3,
+#endif
+};
+
+extern const char * const macvlan_ll_kind;
+extern u_char ll_addr[ETH_ALEN];
 
 /* prototypes */
-extern int netlink_link_add_vmac(vrrp_t *);
-extern int netlink_link_del_vmac(vrrp_t *);
+extern bool add_link_local_address(interface_t *, struct in6_addr*);
+extern bool replace_link_local_address(interface_t *);
+#if !HAVE_DECL_IFLA_INET6_ADDR_GEN_MODE
+extern void remove_vmac_auto_gen_addr(interface_t *, struct in6_addr *);
+#endif
+extern bool netlink_link_add_vmac(vrrp_t *);
+extern void netlink_link_del_vmac(vrrp_t *);
+#ifdef _HAVE_VRRP_IPVLAN_
+extern bool netlink_link_add_ipvlan(vrrp_t *);
+#endif
+#ifdef _HAVE_VRF_
+extern void update_vmac_vrfs(interface_t *);
+#endif
 
 #endif
diff --git a/tools/keepalived/keepalived/keepalived.service.in b/tools/keepalived/keepalived/keepalived.service.in
new file mode 100644
index 000000000..e337c9d1f
--- /dev/null
+++ b/tools/keepalived/keepalived/keepalived.service.in
@@ -0,0 +1,15 @@
+[Unit]
+Description=LVS and VRRP High Availability Monitor
+After=network-online.target syslog.target @SNMP_SERVICE@
+Wants=network-online.target @SNMP_SERVICE@
+
+[Service]
+Type=forking
+PIDFile=@PID_DIR@/run/keepalived.pid
+KillMode=process
+EnvironmentFile=-@sysconfdir@/sysconfig/keepalived
+ExecStart=@sbindir@/keepalived $KEEPALIVED_OPTIONS
+ExecReload=/bin/kill -HUP $MAINPID
+
+[Install]
+WantedBy=multi-user.target
diff --git a/tools/keepalived/keepalived/libipvs-2.4/Makefile.in b/tools/keepalived/keepalived/libipvs-2.4/Makefile.in
deleted file mode 100644
index 79ef8cefb..000000000
--- a/tools/keepalived/keepalived/libipvs-2.4/Makefile.in
+++ /dev/null
@@ -1,18 +0,0 @@
-# Makefile to make libipvsc.
-
-CC	= @CC@
-CFLAGS	= @CFLAGS@ @CPPFLAGS@ -Wall -Wunused
-
-export OBJS += libipvs.a
-
-all: libipvs.a
-
-libipvs.a: libipvs.a(libipvs.o)
-
-libipvsc.o: libipvs.h
-
-clean:
-	rm -f *.a *.o *~
-
-distclean: clean
-	rm -f Makefile
diff --git a/tools/keepalived/keepalived/libipvs-2.4/libipvs.c b/tools/keepalived/keepalived/libipvs-2.4/libipvs.c
deleted file mode 100644
index 653625a9c..000000000
--- a/tools/keepalived/keepalived/libipvs-2.4/libipvs.c
+++ /dev/null
@@ -1,230 +0,0 @@
-/*
- * libipvs:	Library for manipulating IPVS through [gs]etsockopt
- *
- * Version:     $Id: libipvs.c,v 1.4 2001/11/23 14:34:17 wensong Exp $
- *
- * Authors:     Wensong Zhang <wensong@linuxvirtualserver.org>
- *
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
- */
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <unistd.h>
-#include <string.h>
-#include <errno.h>
-#include <netinet/in.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-
-#include "libipvs.h"
-
-#define SET_CMD(cmd)	(cmd - IP_VS_BASE_CTL)
-#define GET_CMD(cmd)	(cmd - IP_VS_BASE_CTL + 128)
-
-static int sockfd = -1;
-static int ipvs_cmd = 0;
-struct ip_vs_getinfo ipvs_info;
-
-
-int ipvs_init(void)
-{
-	socklen_t len;
-
-	len = sizeof(ipvs_info);
-	if ((sockfd = socket(AF_INET, SOCK_RAW, IPPROTO_RAW)) == -1)
-		return -1;
-
-	ipvs_cmd = GET_CMD(IP_VS_SO_GET_INFO);
-	if (getsockopt(sockfd, IPPROTO_IP, IP_VS_SO_GET_INFO,
-		       (char *)&ipvs_info, &len))
-		return -1;
-
-	return 0;
-}
-
-
-int ipvs_getinfo(void)
-{
-	socklen_t len;
-
-	len = sizeof(ipvs_info);
-	ipvs_cmd = GET_CMD(IP_VS_SO_GET_INFO);
-	return getsockopt(sockfd, IPPROTO_IP, IP_VS_SO_GET_INFO,
-			  (char *)&ipvs_info, &len);
-}
-
-
-unsigned int ipvs_version(void)
-{
-	return ipvs_info.version;
-}
-
-
-int ipvs_command(int cmd, struct ip_vs_rule_user *urule)
-{
-	ipvs_cmd = SET_CMD(cmd);
-	return setsockopt(sockfd, IPPROTO_IP,
-			  cmd, (char *)urule, sizeof(*urule));
-}
-
-
-struct ip_vs_get_services *ipvs_get_services(void)
-{
-	struct ip_vs_get_services *get;
-	socklen_t len;
-
-	len = sizeof(*get) +
-		sizeof(struct ip_vs_service_user)*ipvs_info.num_services;
-	if (!(get = malloc(len)))
-		return NULL;
-
-	ipvs_cmd = GET_CMD(IP_VS_SO_GET_SERVICES);
-	get->num_services = ipvs_info.num_services;
-	if (getsockopt(sockfd, IPPROTO_IP,
-		       IP_VS_SO_GET_SERVICES, get, &len) < 0) {
-		free(get);
-		return NULL;
-	}
-	return get;
-}
-
-
-struct ip_vs_get_dests *ipvs_get_dests(struct ip_vs_service_user *svc)
-{
-	struct ip_vs_get_dests *d;
-	socklen_t len;
-
-	len = sizeof(*d) + sizeof(struct ip_vs_dest_user)*svc->num_dests;
-	if (!(d = malloc(len)))
-		return NULL;
-
-	ipvs_cmd = GET_CMD(IP_VS_SO_GET_DESTS);
-	d->fwmark = svc->fwmark;
-	d->protocol = svc->protocol;
-	d->addr = svc->addr;
-	d->port = svc->port;
-	d->num_dests = svc->num_dests;
-
-	if (getsockopt(sockfd, IPPROTO_IP,
-		       IP_VS_SO_GET_DESTS, d, &len) < 0) {
-		free(d);
-		return NULL;
-	}
-	return d;
-}
-
-struct ip_vs_service_user *
-ipvs_get_service(u_int32_t fwmark, u_int16_t protocol, u_int32_t vaddr, u_int16_t vport)
-{
-	struct ip_vs_service_user *svc;
-	socklen_t len;
-
-	len = sizeof(*svc);
-	if (!(svc = malloc(len)))
-		return NULL;
-
-	ipvs_cmd = GET_CMD(IP_VS_SO_GET_SERVICE);
-	svc->fwmark = fwmark;
-	svc->protocol = protocol;
-	svc->addr = vaddr;
-	svc->port = vport;
-
-	if (getsockopt(sockfd, IPPROTO_IP, IP_VS_SO_GET_SERVICE,
-		       (char *)svc, &len)) {
-		free(svc);
-		return NULL;
-	}
-	return svc;
-}
-
-struct ip_vs_timeout_user *ipvs_get_timeouts(void)
-{
-	struct ip_vs_timeout_user *u;
-	socklen_t len;
-
-	len = sizeof(*u);
-	if (!(u = malloc(len)))
-		return NULL;
-
-	ipvs_cmd = GET_CMD(IP_VS_SO_GET_TIMEOUTS);
-	if (getsockopt(sockfd, IPPROTO_IP, IP_VS_SO_GET_TIMEOUTS,
-		       (char *)u, &len)) {
-		free(u);
-		return NULL;
-	}
-	return u;
-}
-
-
-struct ip_vs_daemon_user *ipvs_get_daemon(void)
-{
-	struct ip_vs_daemon_user *u;
-	socklen_t len;
-
-	len = sizeof(*u);
-	if (!(u = malloc(len)))
-		return NULL;
-
-	ipvs_cmd = GET_CMD(IP_VS_SO_GET_DAEMON);
-	if (getsockopt(sockfd, IPPROTO_IP,
-		       IP_VS_SO_GET_DAEMON, (char *)u, &len)) {
-		free(u);
-		return NULL;
-	}
-	return u;
-}
-
-
-void ipvs_close(void)
-{
-	close(sockfd);
-}
-
-
-const char *ipvs_strerror(int err)
-{
-	unsigned int i;
-	struct table_struct {
-		int cmd;
-		int err;
-		const char *message;
-	} table [] =
-	  { { 0, EPERM, "Permission denied (you must be root)" },
-	    { 0, EINVAL, "Module is wrong version" },
-	    { 0, ENOPROTOOPT, "Protocol not available" },
-	    { 0, ENOMEM, "Memory allocation problem" },
-	    { SET_CMD(IP_VS_SO_SET_ADD), EEXIST, "Service already exists" },
-	    { SET_CMD(IP_VS_SO_SET_ADD), ENOENT, "Scheduler not found" },
-	    { SET_CMD(IP_VS_SO_SET_EDIT), ESRCH, "No such service" },
-	    { SET_CMD(IP_VS_SO_SET_EDIT), ENOENT, "Scheduler not found" },
-	    { SET_CMD(IP_VS_SO_SET_DEL), ESRCH, "No such service" },
-	    { SET_CMD(IP_VS_SO_SET_ADDDEST), ESRCH, "Service not defined" },
-	    { SET_CMD(IP_VS_SO_SET_ADDDEST), EEXIST,
-	      "Destination already exists" },
-	    { SET_CMD(IP_VS_SO_SET_EDITDEST), ESRCH, "Service not defined" },
-	    { SET_CMD(IP_VS_SO_SET_EDITDEST), ENOENT, "No such destination" },
-	    { SET_CMD(IP_VS_SO_SET_DELDEST), ESRCH, "Service not defined" },
-	    { SET_CMD(IP_VS_SO_SET_DELDEST), ENOENT, "No such destination" },
-	    { SET_CMD(IP_VS_SO_SET_STARTDAEMON), EEXIST,
-	      "Daemon has already run" },
-	    { SET_CMD(IP_VS_SO_SET_STOPDAEMON), ESRCH,
-	      "No daemon is running" },
-	    { SET_CMD(IP_VS_SO_SET_STOPDAEMON), ESRCH,
-	      "No daemon is running" },
-	    { SET_CMD(IP_VS_SO_SET_ZERO), ESRCH, "No such service" },
-	    { GET_CMD(IP_VS_SO_GET_SERVICE), ESRCH, "No such service" },
-	    { GET_CMD(IP_VS_SO_GET_DESTS), ESRCH, "No such service" },
-	  };
-
-	for (i = 0; i < sizeof(table)/sizeof(struct table_struct); i++) {
-		if ((!table[i].cmd || table[i].cmd == ipvs_cmd)
-		    && table[i].err == err)
-			return table[i].message;
-	}
-
-	return strerror(err);
-}
diff --git a/tools/keepalived/keepalived/libipvs-2.4/libipvs.h b/tools/keepalived/keepalived/libipvs-2.4/libipvs.h
deleted file mode 100644
index 7ff8f0dd4..000000000
--- a/tools/keepalived/keepalived/libipvs-2.4/libipvs.h
+++ /dev/null
@@ -1,63 +0,0 @@
-/*
- * libipvs.h:   header file for the library ipvs
- *
- * Version:     $Id: libipvs.h,v 1.3 2002/07/09 14:41:19 wensong Exp $
- *
- * Authors:     Wensong Zhang <wensong@linuxvirtualserver.org>
- *
- */
-
-#ifndef _LIBIPVS_H
-#define _LIBIPVS_H
-
-#include <net/ip_vs.h>
-
-/*
- * The default IPVS_SVC_PERSISTENT_TIMEOUT is a little larger than average
- * connection time plus IPVS TCP FIN timeout (2*60 seconds). Because the
- * connection template won't be released until its controlled connection
- * entries are expired.
- * If IPVS_SVC_PERSISTENT_TIMEOUT is too less, the template will expire
- * soon and will be put in expire again and again, which causes additional
- * overhead. If it is too large, the same will always visit the same
- * server, which may make dynamic load imbalance worse.
- */
-#define IPVS_SVC_PERSISTENT_TIMEOUT     (6*60)
-
-/* ipvs info variable */
-extern struct ip_vs_getinfo ipvs_info;
-
-/* init socket and get ipvs info */
-extern int ipvs_init(void);
-
-/* get ipvs info separately */
-extern int ipvs_getinfo(void);
-
-/* get the version number */
-extern unsigned int ipvs_version(void);
-
-/* set command */
-extern int ipvs_command(int cmd, struct ip_vs_rule_user *urule);
-
-/* get all the ipvs services */
-extern struct ip_vs_get_services *ipvs_get_services(void);
-
-/* get the destination array of the specified service */
-extern struct ip_vs_get_dests *ipvs_get_dests(struct ip_vs_service_user *svc);
-
-/* get ipvs service */
-extern struct ip_vs_service_user *
-ipvs_get_service(u_int32_t fwmark, u_int16_t protocol, u_int32_t vaddr, u_int16_t vport);
-
-/* get ipvs timeout */
-extern struct ip_vs_timeout_user *ipvs_get_timeouts(void);
-
-/* get ipvs daemon information */
-extern struct ip_vs_daemon_user *ipvs_get_daemon(void);
-
-/* close the socket */
-extern void ipvs_close(void);
-
-extern const char *ipvs_strerror(int err);
-
-#endif /* _LIBIPVS_H */
diff --git a/tools/keepalived/keepalived/libipvs-2.6/Makefile.in b/tools/keepalived/keepalived/libipvs-2.6/Makefile.in
deleted file mode 100644
index b1f529679..000000000
--- a/tools/keepalived/keepalived/libipvs-2.6/Makefile.in
+++ /dev/null
@@ -1,28 +0,0 @@
-# Makefile for libipvs
-
-CC		= @CC@
-CFLAGS		= @CFLAGS@ @CPPFLAGS@ -D@USE_NL@ -Wall -Wunused
-
-CFLAGS += -I ../../../../include
-CFLAGS += -I ./libsockopt
-
-export OBJS += libipvs.a
-
-STATIC_LIB	= libipvs.a
-
-all:		$(STATIC_LIB)
-
-test: sockopt.o test.o
-		$(CC) $(CFLAGS) -o $@ $^
-
-$(STATIC_LIB):	sockopt.o libipvs.o ip_vs_nl_policy.o
-		ar rv $@ $^
-		rm $^
-
-%.o:		%.c
-		$(CC) $(CFLAGS) -c -o $@ $<
-
-clean:
-		rm -f *.[ao] *~ *.orig *.rej core
-
-distclean:	clean
diff --git a/tools/keepalived/keepalived/libipvs-2.6/ip_vs_nl_policy.c b/tools/keepalived/keepalived/libipvs-2.6/ip_vs_nl_policy.c
deleted file mode 100644
index 24400c096..000000000
--- a/tools/keepalived/keepalived/libipvs-2.6/ip_vs_nl_policy.c
+++ /dev/null
@@ -1,79 +0,0 @@
-#include "libipvs.h"
-
-#ifdef LIBIPVS_USE_NL
-/* Policy definitions */
-struct nla_policy ipvs_cmd_policy[IPVS_CMD_ATTR_MAX + 1] = {
-	[IPVS_CMD_ATTR_SERVICE]		= { .type = NLA_NESTED },
-	[IPVS_CMD_ATTR_DEST]		= { .type = NLA_NESTED },
-	[IPVS_CMD_ATTR_DAEMON]		= { .type = NLA_NESTED },
-	[IPVS_CMD_ATTR_TIMEOUT_TCP]	= { .type = NLA_U32 },
-	[IPVS_CMD_ATTR_TIMEOUT_TCP_FIN]	= { .type = NLA_U32 },
-	[IPVS_CMD_ATTR_TIMEOUT_UDP]	= { .type = NLA_U32 },
-	[IPVS_CMD_ATTR_LADDR]		= { .type = NLA_NESTED},
-};
-
-struct nla_policy ipvs_service_policy[IPVS_SVC_ATTR_MAX + 1] = {
-	[IPVS_SVC_ATTR_AF]		= { .type = NLA_U16 },
-	[IPVS_SVC_ATTR_PROTOCOL]	= { .type = NLA_U16 },
-	[IPVS_SVC_ATTR_ADDR]		= { .type = NLA_UNSPEC,
-					    .maxlen = sizeof(struct in6_addr) },
-	[IPVS_SVC_ATTR_PORT]		= { .type = NLA_U16 },
-	[IPVS_SVC_ATTR_FWMARK]		= { .type = NLA_U32 },
-	[IPVS_SVC_ATTR_SCHED_NAME]	= { .type = NLA_STRING,
-					    .maxlen = IP_VS_SCHEDNAME_MAXLEN },
-	[IPVS_SVC_ATTR_FLAGS]		= { .type = NLA_UNSPEC,
-					    .minlen = sizeof(struct ip_vs_flags),
-					    .maxlen = sizeof(struct ip_vs_flags) },
-	[IPVS_SVC_ATTR_TIMEOUT]		= { .type = NLA_U32 },
-	[IPVS_SVC_ATTR_NETMASK]		= { .type = NLA_U32 },
-	[IPVS_SVC_ATTR_STATS]		= { .type = NLA_NESTED },
-	[IPVS_SVC_ATTR_BPS]		= { .type = NLA_U32 },
-};
-
-struct nla_policy ipvs_dest_policy[IPVS_DEST_ATTR_MAX + 1] = {
-	[IPVS_DEST_ATTR_ADDR]		= { .type = NLA_UNSPEC,
-					    .maxlen = sizeof(struct in6_addr) },
-	[IPVS_DEST_ATTR_PORT]		= { .type = NLA_U16 },
-	[IPVS_DEST_ATTR_FWD_METHOD]	= { .type = NLA_U32 },
-	[IPVS_DEST_ATTR_WEIGHT]		= { .type = NLA_U32 },
-	[IPVS_DEST_ATTR_U_THRESH]	= { .type = NLA_U32 },
-	[IPVS_DEST_ATTR_L_THRESH]	= { .type = NLA_U32 },
-	[IPVS_DEST_ATTR_ACTIVE_CONNS]	= { .type = NLA_U32 },
-	[IPVS_DEST_ATTR_INACT_CONNS]	= { .type = NLA_U32 },
-	[IPVS_DEST_ATTR_PERSIST_CONNS]	= { .type = NLA_U32 },
-	[IPVS_DEST_ATTR_STATS]		= { .type = NLA_NESTED },
-};
-
-struct nla_policy ipvs_laddr_policy[IPVS_LADDR_ATTR_MAX + 1] = {
-	[IPVS_LADDR_ATTR_ADDR]		= { .type = NLA_UNSPEC,
-					    .maxlen = sizeof(struct in6_addr) },
-	[IPVS_LADDR_ATTR_PORT_CONFLICT]   = { .type = NLA_U64 },
-	[IPVS_LADDR_ATTR_CONN_COUNTS]   = { .type = NLA_U32 },
-};
-
-struct nla_policy ipvs_stats_policy[IPVS_STATS_ATTR_MAX + 1] = {
-	[IPVS_STATS_ATTR_CONNS]		= { .type = NLA_U64 },
-	[IPVS_STATS_ATTR_INPKTS]	= { .type = NLA_U64 },
-	[IPVS_STATS_ATTR_OUTPKTS]	= { .type = NLA_U64 },
-	[IPVS_STATS_ATTR_INBYTES]	= { .type = NLA_U64 },
-	[IPVS_STATS_ATTR_OUTBYTES]	= { .type = NLA_U64 },
-	[IPVS_STATS_ATTR_CPS]		= { .type = NLA_U64 },
-	[IPVS_STATS_ATTR_INPPS]		= { .type = NLA_U64 },
-	[IPVS_STATS_ATTR_OUTPPS]	= { .type = NLA_U64 },
-	[IPVS_STATS_ATTR_INBPS]		= { .type = NLA_U64 },
-	[IPVS_STATS_ATTR_OUTBPS]	= { .type = NLA_U64 },
-};
-
-struct nla_policy ipvs_info_policy[IPVS_INFO_ATTR_MAX + 1] = {
-	[IPVS_INFO_ATTR_VERSION]	= { .type = NLA_U32 },
-	[IPVS_INFO_ATTR_CONN_TAB_SIZE]	= { .type = NLA_U32 },
-};
-
-struct nla_policy ipvs_daemon_policy[IPVS_DAEMON_ATTR_MAX + 1] = {
-	[IPVS_DAEMON_ATTR_STATE]	= { .type = NLA_U32 },
-	[IPVS_DAEMON_ATTR_MCAST_IFN]	= { .type = NLA_STRING,
-					    .maxlen = IP_VS_IFNAME_MAXLEN },
-	[IPVS_DAEMON_ATTR_SYNC_ID]	= { .type = NLA_U32 },
-};
-
-#endif /* LIBIPVS_USE_NL */
diff --git a/tools/keepalived/keepalived/main.c b/tools/keepalived/keepalived/main.c
new file mode 100644
index 000000000..0cd6361a2
--- /dev/null
+++ b/tools/keepalived/keepalived/main.c
@@ -0,0 +1,30 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Main program stub.
+ *
+ * Author:      Quentin Armitage, <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2016-2016 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include "main.h"
+
+int main(int argc, char **argv)
+{
+	return keepalived_main(argc, argv);
+}
diff --git a/tools/keepalived/keepalived/vrrp/Makefile.am b/tools/keepalived/keepalived/vrrp/Makefile.am
new file mode 100644
index 000000000..bf5bdc168
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/Makefile.am
@@ -0,0 +1,87 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+AM_CPPFLAGS		= $(KA_CPPFLAGS) $(DEBUG_CPPFLAGS)
+AM_CFLAGS		= $(KA_CFLAGS) $(DEBUG_CFLAGS)
+AM_LDFLAGS		= $(KA_LDFLAGS) $(DEBUG_LDFLAGS)
+# AM_LIBS		= $(KA_LIBS)
+# AM_LIBTOOLFLAGS	= $(KA_LIBTOOLFLAGS)
+
+AM_CPPFLAGS		+= -I$(srcdir)/../include -I$(srcdir)/../../lib
+
+noinst_LIBRARIES	= libvrrp.a
+
+libvrrp_a_SOURCES	= \
+	vrrp_daemon.c vrrp_print.c vrrp_data.c vrrp_parser.c \
+	vrrp.c vrrp_notify.c vrrp_scheduler.c vrrp_sync.c \
+	vrrp_arp.c vrrp_if.c vrrp_track.c vrrp_ipaddress.c \
+	vrrp_ndisc.c vrrp_if_config.c vrrp_static_track.c
+libvrrp_a_SOURCES	+= ../include/vrrp_daemon.h
+
+libvrrp_a_LIBADD	=
+EXTRA_libvrrp_a_SOURCES	=
+
+if VMAC
+  libvrrp_a_LIBADD	+= vrrp_vmac.o
+  EXTRA_libvrrp_a_SOURCES += vrrp_vmac.c
+endif
+
+if VRRP_AUTH
+  libvrrp_a_LIBADD	+= vrrp_ipsecah.o
+  EXTRA_libvrrp_a_SOURCES += vrrp_ipsecah.c
+endif
+
+if WITH_DBUS
+  libvrrp_a_LIBADD	+= vrrp_dbus.o
+  EXTRA_libvrrp_a_SOURCES += vrrp_dbus.c
+endif
+
+if FIB_ROUTING
+  libvrrp_a_LIBADD	+= vrrp_iproute.o vrrp_iprule.o vrrp_ip_rule_route_parser.o
+  EXTRA_libvrrp_a_SOURCES += vrrp_iproute.c vrrp_iprule.c vrrp_ip_rule_route_parser.c
+endif
+
+if FIREWALL
+  libvrrp_a_LIBADD	+= vrrp_firewall.o vrrp_firewall.o
+  EXTRA_libvrrp_a_SOURCES += vrrp_firewall.c vrrp_firewall.c
+endif
+
+if IPTABLES
+  libvrrp_a_LIBADD	+= vrrp_iptables.o
+  EXTRA_libvrrp_a_SOURCES += vrrp_iptables.c
+endif
+
+if LIBIPTC
+  libvrrp_a_LIBADD	+= vrrp_iptables_lib.o vrrp_iptables_calls.o
+  EXTRA_libvrrp_a_SOURCES += vrrp_iptables_lib.c vrrp_iptables_calls.c
+endif
+
+if IPTABLES_CMD
+  libvrrp_a_LIBADD	+= vrrp_iptables_cmd.o
+  EXTRA_libvrrp_a_SOURCES += vrrp_iptables_cmd.c
+endif
+
+if LIBIPSET
+  libvrrp_a_LIBADD	+= vrrp_ipset.o
+  EXTRA_libvrrp_a_SOURCES += vrrp_ipset.c
+endif
+
+if NFTABLES
+  libvrrp_a_LIBADD	+= vrrp_nftables.o
+  EXTRA_libvrrp_a_SOURCES += vrrp_nftables.c
+endif
+
+if SNMP_VRRP
+  libvrrp_a_LIBADD	+= vrrp_snmp.o
+  EXTRA_libvrrp_a_SOURCES += vrrp_snmp.c
+endif
+
+if WITH_JSON
+  libvrrp_a_LIBADD	+= vrrp_json.o
+  EXTRA_libvrrp_a_SOURCES += vrrp_json.c
+endif
+
+MAINTAINERCLEANFILES	= @MAINTAINERCLEANFILES@
diff --git a/tools/keepalived/keepalived/vrrp/Makefile.in b/tools/keepalived/keepalived/vrrp/Makefile.in
index 910a845de..a8b0599ac 100644
--- a/tools/keepalived/keepalived/vrrp/Makefile.in
+++ b/tools/keepalived/keepalived/vrrp/Makefile.in
@@ -1,86 +1,632 @@
-# Makefile
+# Makefile.in generated by automake 1.13.4 from Makefile.am.
+# @configure_input@
+
+# Copyright (C) 1994-2013 Free Software Foundation, Inc.
+
+# This Makefile.in is free software; the Free Software Foundation
+# gives unlimited permission to copy and/or distribute it,
+# with or without modifications, as long as this notice is preserved.
+
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
+# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
+# PARTICULAR PURPOSE.
+
+@SET_MAKE@
+
+# Makefile.am
 #
 # Keepalived OpenSource project.
 #
-# Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
-
-CC	 = @CC@
-SNMP_FLAG = @SNMP_SUPPORT@
-INCLUDES = -I../include -I../../lib
-CFLAGS	 = @CFLAGS@ @CPPFLAGS@ $(INCLUDES) \
-	   -Wall -Wunused -Wstrict-prototypes
-CFLAGS += -I ../../../../include
-DEFS	 = -D@KERN@ -D@IPVS_SUPPORT@ -D@IPVS_SYNCD@ -D@VRRP_VMAC@ -D@SNMP_SUPPORT@ @DFLAGS@
-COMPILE	 = $(CC) $(CFLAGS) $(DEFS)
-
-OBJS = 	vrrp_daemon.o vrrp_data.o vrrp_parser.o \
-	vrrp.o vrrp_notify.o vrrp_scheduler.o vrrp_sync.o vrrp_index.o \
-	vrrp_netlink.o vrrp_arp.o vrrp_if.o vrrp_track.o vrrp_ipaddress.o \
-	vrrp_iproute.o vrrp_ipsecah.o vrrp_ndisc.o vrrp_vmac.o
-ifeq ($(SNMP_FLAG),_WITH_SNMP_)
-  OBJS += vrrp_snmp.o
-endif
-HEADERS = $(OBJS:.o=.h)
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+VPATH = @srcdir@
+am__is_gnu_make = test -n '$(MAKEFILE_LIST)' && test -n '$(MAKELEVEL)'
+am__make_running_with_option = \
+  case $${target_option-} in \
+      ?) ;; \
+      *) echo "am__make_running_with_option: internal error: invalid" \
+              "target option '$${target_option-}' specified" >&2; \
+         exit 1;; \
+  esac; \
+  has_opt=no; \
+  sane_makeflags=$$MAKEFLAGS; \
+  if $(am__is_gnu_make); then \
+    sane_makeflags=$$MFLAGS; \
+  else \
+    case $$MAKEFLAGS in \
+      *\\[\ \	]*) \
+        bs=\\; \
+        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
+          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
+    esac; \
+  fi; \
+  skip_next=no; \
+  strip_trailopt () \
+  { \
+    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
+  }; \
+  for flg in $$sane_makeflags; do \
+    test $$skip_next = yes && { skip_next=no; continue; }; \
+    case $$flg in \
+      *=*|--*) continue;; \
+        -*I) strip_trailopt 'I'; skip_next=yes;; \
+      -*I?*) strip_trailopt 'I';; \
+        -*O) strip_trailopt 'O'; skip_next=yes;; \
+      -*O?*) strip_trailopt 'O';; \
+        -*l) strip_trailopt 'l'; skip_next=yes;; \
+      -*l?*) strip_trailopt 'l';; \
+      -[dEDm]) skip_next=yes;; \
+      -[JT]) skip_next=yes;; \
+    esac; \
+    case $$flg in \
+      *$$target_option*) has_opt=yes; break;; \
+    esac; \
+  done; \
+  test $$has_opt = yes
+am__make_dryrun = (target_option=n; $(am__make_running_with_option))
+am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
+pkgdatadir = $(datadir)/@PACKAGE@
+pkgincludedir = $(includedir)/@PACKAGE@
+pkglibdir = $(libdir)/@PACKAGE@
+pkglibexecdir = $(libexecdir)/@PACKAGE@
+am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
+install_sh_DATA = $(install_sh) -c -m 644
+install_sh_PROGRAM = $(install_sh) -c
+install_sh_SCRIPT = $(install_sh) -c
+INSTALL_HEADER = $(INSTALL_DATA)
+transform = $(program_transform_name)
+NORMAL_INSTALL = :
+PRE_INSTALL = :
+POST_INSTALL = :
+NORMAL_UNINSTALL = :
+PRE_UNINSTALL = :
+POST_UNINSTALL = :
+@VMAC_TRUE@am__append_1 = vrrp_vmac.o
+@VMAC_TRUE@am__append_2 = vrrp_vmac.c
+@VRRP_AUTH_TRUE@am__append_3 = vrrp_ipsecah.o
+@VRRP_AUTH_TRUE@am__append_4 = vrrp_ipsecah.c
+@WITH_DBUS_TRUE@am__append_5 = vrrp_dbus.o
+@WITH_DBUS_TRUE@am__append_6 = vrrp_dbus.c
+@FIB_ROUTING_TRUE@am__append_7 = vrrp_iproute.o vrrp_iprule.o vrrp_ip_rule_route_parser.o
+@FIB_ROUTING_TRUE@am__append_8 = vrrp_iproute.c vrrp_iprule.c vrrp_ip_rule_route_parser.c
+@FIREWALL_TRUE@am__append_9 = vrrp_firewall.o vrrp_firewall.o
+@FIREWALL_TRUE@am__append_10 = vrrp_firewall.c vrrp_firewall.c
+@IPTABLES_TRUE@am__append_11 = vrrp_iptables.o
+@IPTABLES_TRUE@am__append_12 = vrrp_iptables.c
+@LIBIPTC_TRUE@am__append_13 = vrrp_iptables_lib.o vrrp_iptables_calls.o
+@LIBIPTC_TRUE@am__append_14 = vrrp_iptables_lib.c vrrp_iptables_calls.c
+@IPTABLES_CMD_TRUE@am__append_15 = vrrp_iptables_cmd.o
+@IPTABLES_CMD_TRUE@am__append_16 = vrrp_iptables_cmd.c
+@LIBIPSET_TRUE@am__append_17 = vrrp_ipset.o
+@LIBIPSET_TRUE@am__append_18 = vrrp_ipset.c
+@NFTABLES_TRUE@am__append_19 = vrrp_nftables.o
+@NFTABLES_TRUE@am__append_20 = vrrp_nftables.c
+@SNMP_VRRP_TRUE@am__append_21 = vrrp_snmp.o
+@SNMP_VRRP_TRUE@am__append_22 = vrrp_snmp.c
+@WITH_JSON_TRUE@am__append_23 = vrrp_json.o
+@WITH_JSON_TRUE@am__append_24 = vrrp_json.c
+subdir = keepalived/vrrp
+DIST_COMMON = $(srcdir)/Makefile.in $(srcdir)/Makefile.am \
+	$(top_srcdir)/depcomp
+ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
+am__aclocal_m4_deps = $(top_srcdir)/configure.ac
+am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
+	$(ACLOCAL_M4)
+mkinstalldirs = $(install_sh) -d
+CONFIG_HEADER = $(top_builddir)/lib/config.h \
+	$(top_builddir)/lib/config_warnings.h
+CONFIG_CLEAN_FILES =
+CONFIG_CLEAN_VPATH_FILES =
+LIBRARIES = $(noinst_LIBRARIES)
+AM_V_AR = $(am__v_AR_@AM_V@)
+am__v_AR_ = $(am__v_AR_@AM_DEFAULT_V@)
+am__v_AR_0 = @echo "  AR      " $@;
+am__v_AR_1 = 
+libvrrp_a_AR = $(AR) $(ARFLAGS)
+libvrrp_a_DEPENDENCIES = $(am__append_1) $(am__append_3) \
+	$(am__append_5) $(am__append_7) $(am__append_9) \
+	$(am__append_11) $(am__append_13) $(am__append_15) \
+	$(am__append_17) $(am__append_19) $(am__append_21) \
+	$(am__append_23)
+am_libvrrp_a_OBJECTS = vrrp_daemon.$(OBJEXT) vrrp_print.$(OBJEXT) \
+	vrrp_data.$(OBJEXT) vrrp_parser.$(OBJEXT) vrrp.$(OBJEXT) \
+	vrrp_notify.$(OBJEXT) vrrp_scheduler.$(OBJEXT) \
+	vrrp_sync.$(OBJEXT) vrrp_arp.$(OBJEXT) vrrp_if.$(OBJEXT) \
+	vrrp_track.$(OBJEXT) vrrp_ipaddress.$(OBJEXT) \
+	vrrp_ndisc.$(OBJEXT) vrrp_if_config.$(OBJEXT) \
+	vrrp_static_track.$(OBJEXT)
+am__EXTRA_libvrrp_a_SOURCES_DIST = vrrp_vmac.c vrrp_ipsecah.c \
+	vrrp_dbus.c vrrp_iproute.c vrrp_iprule.c \
+	vrrp_ip_rule_route_parser.c vrrp_firewall.c vrrp_iptables.c \
+	vrrp_iptables_lib.c vrrp_iptables_calls.c vrrp_iptables_cmd.c \
+	vrrp_ipset.c vrrp_nftables.c vrrp_snmp.c vrrp_json.c
+libvrrp_a_OBJECTS = $(am_libvrrp_a_OBJECTS)
+AM_V_P = $(am__v_P_@AM_V@)
+am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
+am__v_P_0 = false
+am__v_P_1 = :
+AM_V_GEN = $(am__v_GEN_@AM_V@)
+am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
+am__v_GEN_0 = @echo "  GEN     " $@;
+am__v_GEN_1 = 
+AM_V_at = $(am__v_at_@AM_V@)
+am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
+am__v_at_0 = @
+am__v_at_1 = 
+DEFAULT_INCLUDES = -I.@am__isrc@ -I$(top_builddir)/lib
+depcomp = $(SHELL) $(top_srcdir)/depcomp
+am__depfiles_maybe = depfiles
+am__mv = mv -f
+COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \
+	$(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
+AM_V_CC = $(am__v_CC_@AM_V@)
+am__v_CC_ = $(am__v_CC_@AM_DEFAULT_V@)
+am__v_CC_0 = @echo "  CC      " $@;
+am__v_CC_1 = 
+CCLD = $(CC)
+LINK = $(CCLD) $(AM_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@
+AM_V_CCLD = $(am__v_CCLD_@AM_V@)
+am__v_CCLD_ = $(am__v_CCLD_@AM_DEFAULT_V@)
+am__v_CCLD_0 = @echo "  CCLD    " $@;
+am__v_CCLD_1 = 
+SOURCES = $(libvrrp_a_SOURCES) $(EXTRA_libvrrp_a_SOURCES)
+DIST_SOURCES = $(libvrrp_a_SOURCES) \
+	$(am__EXTRA_libvrrp_a_SOURCES_DIST)
+am__can_run_installinfo = \
+  case $$AM_UPDATE_INFO_DIR in \
+    n|no|NO) false;; \
+    *) (install-info --version) >/dev/null 2>&1;; \
+  esac
+am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
+# Read a list of newline-separated strings from the standard input,
+# and print each of them once, without duplicates.  Input order is
+# *not* preserved.
+am__uniquify_input = $(AWK) '\
+  BEGIN { nonempty = 0; } \
+  { items[$$0] = 1; nonempty = 1; } \
+  END { if (nonempty) { for (i in items) print i; }; } \
+'
+# Make sure the list of sources is unique.  This is necessary because,
+# e.g., the same source file might be shared among _SOURCES variables
+# for different programs/libraries.
+am__define_uniq_tagged_files = \
+  list='$(am__tagged_files)'; \
+  unique=`for i in $$list; do \
+    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
+  done | $(am__uniquify_input)`
+ETAGS = etags
+CTAGS = ctags
+DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
+ACLOCAL = @ACLOCAL@
+AMTAR = @AMTAR@
+AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
+AR = @AR@
+ARFLAGS = @ARFLAGS@
+AUTOCONF = @AUTOCONF@
+AUTOHEADER = @AUTOHEADER@
+AUTOMAKE = @AUTOMAKE@
+AWK = @AWK@
+CC = @CC@
+CCDEPMODE = @CCDEPMODE@
+CFLAGS = @CFLAGS@
+CPP = @CPP@
+CPPFLAGS = @CPPFLAGS@
+CYGPATH_W = @CYGPATH_W@
+DEFAULT_CONFIG_FILE = @DEFAULT_CONFIG_FILE@
+DEFS = @DEFS@
+DEPDIR = @DEPDIR@
+ECHO_C = @ECHO_C@
+ECHO_N = @ECHO_N@
+ECHO_T = @ECHO_T@
+EGREP = @EGREP@
+EXEEXT = @EXEEXT@
+GENHASH_LIBS = @GENHASH_LIBS@
+GREP = @GREP@
+HAVE_RPM = @HAVE_RPM@
+HAVE_RPMBUILD = @HAVE_RPMBUILD@
+HAVE_SPHINX_BUILD = @HAVE_SPHINX_BUILD@
+INSTALL = @INSTALL@
+INSTALL_DATA = @INSTALL_DATA@
+INSTALL_PROGRAM = @INSTALL_PROGRAM@
+INSTALL_SCRIPT = @INSTALL_SCRIPT@
+INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
+KA_CFLAGS = @KA_CFLAGS@
+KA_CPPFLAGS = @KA_CPPFLAGS@
+KA_LDFLAGS = @KA_LDFLAGS@
+KA_LIBS = @KA_LIBS@
+LDD = @LDD@
+LDFLAGS = @LDFLAGS@
+LIBOBJS = @LIBOBJS@
+LIBS = @LIBS@
+LN_S = @LN_S@
+LTLIBOBJS = @LTLIBOBJS@
+MAINTAINERCLEANFILES = @MAINTAINERCLEANFILES@
+MAKEINFO = @MAKEINFO@
+MKDIR_P = @MKDIR_P@
+NETSNMP_CONFIG = @NETSNMP_CONFIG@
+OBJEXT = @OBJEXT@
+PACKAGE = @PACKAGE@
+PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
+PACKAGE_NAME = @PACKAGE_NAME@
+PACKAGE_STRING = @PACKAGE_STRING@
+PACKAGE_TARNAME = @PACKAGE_TARNAME@
+PACKAGE_URL = @PACKAGE_URL@
+PACKAGE_VERSION = @PACKAGE_VERSION@
+PATH_SEPARATOR = @PATH_SEPARATOR@
+PID_DIR = @PID_DIR@
+PKG_CONFIG = @PKG_CONFIG@
+PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
+PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
+RANLIB = @RANLIB@
+SED = @SED@
+SET_MAKE = @SET_MAKE@
+SHELL = @SHELL@
+SNMP_SERVICE = @SNMP_SERVICE@
+SPHINXBUILDNAME = @SPHINXBUILDNAME@
+STRIP = @STRIP@
+VERSION = @VERSION@
+abs_builddir = @abs_builddir@
+abs_srcdir = @abs_srcdir@
+abs_top_builddir = @abs_top_builddir@
+abs_top_srcdir = @abs_top_srcdir@
+ac_ct_AR = @ac_ct_AR@
+ac_ct_CC = @ac_ct_CC@
+am__include = @am__include@
+am__leading_dot = @am__leading_dot@
+am__quote = @am__quote@
+am__tar = @am__tar@
+am__untar = @am__untar@
+bindir = @bindir@
+build_alias = @build_alias@
+builddir = @builddir@
+datadir = @datadir@
+datarootdir = @datarootdir@
+docdir = @docdir@
+dvidir = @dvidir@
+exec_prefix = @exec_prefix@
+host_alias = @host_alias@
+htmldir = @htmldir@
+includedir = @includedir@
+infodir = @infodir@
+install_sh = @install_sh@
+libdir = @libdir@
+libexecdir = @libexecdir@
+localedir = @localedir@
+localstatedir = @localstatedir@
+mandir = @mandir@
+mkdir_p = @mkdir_p@
+oldincludedir = @oldincludedir@
+pdfdir = @pdfdir@
+prefix = @prefix@
+program_transform_name = @program_transform_name@
+psdir = @psdir@
+sbindir = @sbindir@
+sharedstatedir = @sharedstatedir@
+srcdir = @srcdir@
+sysconfdir = @sysconfdir@
+systemdsystemunitdir = @systemdsystemunitdir@
+target_alias = @target_alias@
+top_build_prefix = @top_build_prefix@
+top_builddir = @top_builddir@
+top_srcdir = @top_srcdir@
+# AM_LIBS		= $(KA_LIBS)
+# AM_LIBTOOLFLAGS	= $(KA_LIBTOOLFLAGS)
+AM_CPPFLAGS = $(KA_CPPFLAGS) $(DEBUG_CPPFLAGS) -I$(srcdir)/../include \
+	-I$(srcdir)/../../lib
+AM_CFLAGS = $(KA_CFLAGS) $(DEBUG_CFLAGS)
+AM_LDFLAGS = $(KA_LDFLAGS) $(DEBUG_LDFLAGS)
+noinst_LIBRARIES = libvrrp.a
+libvrrp_a_SOURCES = vrrp_daemon.c vrrp_print.c vrrp_data.c \
+	vrrp_parser.c vrrp.c vrrp_notify.c vrrp_scheduler.c \
+	vrrp_sync.c vrrp_arp.c vrrp_if.c vrrp_track.c vrrp_ipaddress.c \
+	vrrp_ndisc.c vrrp_if_config.c vrrp_static_track.c \
+	../include/vrrp_daemon.h
+libvrrp_a_LIBADD = $(am__append_1) $(am__append_3) $(am__append_5) \
+	$(am__append_7) $(am__append_9) $(am__append_11) \
+	$(am__append_13) $(am__append_15) $(am__append_17) \
+	$(am__append_19) $(am__append_21) $(am__append_23)
+EXTRA_libvrrp_a_SOURCES = $(am__append_2) $(am__append_4) \
+	$(am__append_6) $(am__append_8) $(am__append_10) \
+	$(am__append_12) $(am__append_14) $(am__append_16) \
+	$(am__append_18) $(am__append_20) $(am__append_22) \
+	$(am__append_24)
+all: all-am
+
+.SUFFIXES:
+.SUFFIXES: .c .o .obj
+$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
+	@for dep in $?; do \
+	  case '$(am__configure_deps)' in \
+	    *$$dep*) \
+	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
+	        && { if test -f $@; then exit 0; else break; fi; }; \
+	      exit 1;; \
+	  esac; \
+	done; \
+	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign keepalived/vrrp/Makefile'; \
+	$(am__cd) $(top_srcdir) && \
+	  $(AUTOMAKE) --foreign keepalived/vrrp/Makefile
+.PRECIOUS: Makefile
+Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
+	@case '$?' in \
+	  *config.status*) \
+	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
+	  *) \
+	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe)'; \
+	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe);; \
+	esac;
+
+$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+
+$(top_srcdir)/configure:  $(am__configure_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+$(am__aclocal_m4_deps):
+
+clean-noinstLIBRARIES:
+	-test -z "$(noinst_LIBRARIES)" || rm -f $(noinst_LIBRARIES)
+
+libvrrp.a: $(libvrrp_a_OBJECTS) $(libvrrp_a_DEPENDENCIES) $(EXTRA_libvrrp_a_DEPENDENCIES) 
+	$(AM_V_at)-rm -f libvrrp.a
+	$(AM_V_AR)$(libvrrp_a_AR) libvrrp.a $(libvrrp_a_OBJECTS) $(libvrrp_a_LIBADD)
+	$(AM_V_at)$(RANLIB) libvrrp.a
+
+mostlyclean-compile:
+	-rm -f *.$(OBJEXT)
+
+distclean-compile:
+	-rm -f *.tab.c
+
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_arp.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_daemon.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_data.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_dbus.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_firewall.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_if.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_if_config.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_ip_rule_route_parser.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_ipaddress.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_iproute.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_iprule.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_ipsecah.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_ipset.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_iptables.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_iptables_calls.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_iptables_cmd.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_iptables_lib.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_json.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_ndisc.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_nftables.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_notify.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_parser.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_print.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_scheduler.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_snmp.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_static_track.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_sync.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_track.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vrrp_vmac.Po@am__quote@
 
 .c.o:
-	$(COMPILE) -c $<
-
-all:	$(OBJS)
-
-clean:
-	rm -f *.a *.o *~
-
-distclean: clean
-	rm -f Makefile
-
-vrrp_daemon.o: vrrp_daemon.c ../include/vrrp_daemon.h ../include/vrrp_scheduler.h \
-  ../include/vrrp_if.h ../include/vrrp_arp.h ../include/vrrp_netlink.h ../include/vrrp_iproute.h \
-  ../include/vrrp_iproute.h ../include/vrrp_parser.h ../include/vrrp_data.h \
-  ../include/vrrp.h ../include/global_data.h ../include/pidfile.h ../include/daemon.h \
-  ../include/ipvswrapper.h ../../lib/list.h ../../lib/memory.h ../../lib/parser.h \
-  ../../lib/signals.h ../include/snmp.h ../include/vrrp_snmp.h
-vrrp_data.o: vrrp_data.c ../include/vrrp_data.h \
-  ../include/vrrp_sync.h ../include/vrrp_if.h ../include/vrrp_vmac.h ../include/vrrp_index.h \
-  ../include/vrrp.h ../../lib/memory.h ../../lib/utils.h ../../lib/notify.h
-vrrp_parser.o: vrrp_parser.c ../include/vrrp_parser.h \
-  ../include/vrrp_data.h ../include/vrrp_sync.h ../include/vrrp_index.h \
-  ../include/vrrp.h ../include/global_data.h ../include/global_parser.h \
-  ../../lib/parser.h ../../lib/memory.h
-vrrp.o: vrrp.c ../include/vrrp.h ../include/vrrp_scheduler.h \
-  ../include/vrrp_notify.h ../include/ipvswrapper.h ../../lib/memory.h \
-  ../../lib/list.h ../include/vrrp_data.h ../include/vrrp_sync.h ../include/vrrp_index.h \
-  ../include/vrrp_arp.h ../../lib/utils.h ../include/vrrp_vmac.h ../include/snmp.h \
-  ../include/vrrp_snmp.h
-vrrp_notify.o: vrrp_notify.c ../include/vrrp_notify.h ../../lib/memory.h \
-  ../../lib/notify.h
-vrrp_scheduler.o: vrrp_scheduler.c ../include/vrrp_scheduler.h \
-  ../include/vrrp_ipsecah.h ../include/vrrp_if.h ../include/vrrp_vmac.h ../include/vrrp.h \
-  ../include/vrrp_sync.h ../include/vrrp_notify.h ../include/ipvswrapper.h \
-  ../../lib/memory.h ../../lib/list.h ../include/vrrp_data.h ../include/vrrp_index.h \
-  ../include/smtp.h ../../lib/notify.h ../include/snmp.h ../include/vrrp_snmp.h
-vrrp_sync.o: vrrp_sync.c ../include/vrrp_sync.h ../include/vrrp_if.h \
-  ../include/vrrp_notify.h ../include/vrrp_data.h
-vrrp_index.o: vrrp_index.c ../include/vrrp_index.h ../include/vrrp.h \
-  ../include/vrrp_data.h ../../lib/memory.h
-vrrp_netlink.o: vrrp_netlink.c ../include/vrrp_netlink.h ../include/check_api.h \
-  ../include/vrrp_if.h ../../lib/memory.h ../../lib/scheduler.h \
-  ../../lib/utils.h
-vrrp_arp.o: vrrp_arp.c ../include/vrrp_arp.h
-vrrp_track.o: vrrp_track.c ../include/vrrp_track.h ../include/vrrp_if.h \
-  ../include/vrrp_data.h ../../lib/memory.h
-vrrp_if.o: vrrp_if.c ../include/vrrp_if.h ../include/vrrp_netlink.h \
-  ../../lib/scheduler.h ../include/vrrp_data.h ../../lib/memory.h \
-  ../../lib/utils.h
-vrrp_ipaddress.o: vrrp_ipaddress.c ../include/vrrp_ipaddress.h ../include/vrrp_netlink.h \
-  ../include/vrrp_if.h  ../include/vrrp_data.h ../../lib/memory.h ../../lib/utils.h
-vrrp_iproute.o: vrrp_iproute.c ../include/vrrp_iproute.h ../include/vrrp_netlink.h \
-  ../include/vrrp_if.h  ../include/vrrp_data.h ../../lib/memory.h ../../lib/utils.h
-vrrp_ipsecah.o: vrrp_ipsecah.c ../include/vrrp_ipsecah.h
-vrrp_ndisc.o: vrrp_ndisc.c ../include/vrrp_ndisc.h ../include/vrrp_ipaddress.h \
-  ../../lib/utils.h ../../lib/memory.h
-vrrp_vmac.o: vrrp_vmac.c ../include/vrrp_vmac.h ../include/vrrp_netlink.h \
-  ../include/vrrp_data.h ../../lib/logger.h ../../lib/memory.h ../../lib/utils.h
-vrrp_snmp.o: vrrp_snmp.c ../include/vrrp_snmp.h ../include/vrrp_track.h \
-  ../include/vrrp_data.h ../include/vrrp_ipaddress.h ../include/vrrp_iproute.h \
-  ../include/vrrp.h ../../lib/vector.h ../../lib/list.h ../include/snmp.h \
-  ../include/global_data.h ../../lib/logger.h
+@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
+@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c $<
+
+.c.obj:
+@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ `$(CYGPATH_W) '$<'`
+@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c `$(CYGPATH_W) '$<'`
+
+ID: $(am__tagged_files)
+	$(am__define_uniq_tagged_files); mkid -fID $$unique
+tags: tags-am
+TAGS: tags
+
+tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	set x; \
+	here=`pwd`; \
+	$(am__define_uniq_tagged_files); \
+	shift; \
+	if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
+	  test -n "$$unique" || unique=$$empty_fix; \
+	  if test $$# -gt 0; then \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      "$$@" $$unique; \
+	  else \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      $$unique; \
+	  fi; \
+	fi
+ctags: ctags-am
+
+CTAGS: ctags
+ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	$(am__define_uniq_tagged_files); \
+	test -z "$(CTAGS_ARGS)$$unique" \
+	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
+	     $$unique
+
+GTAGS:
+	here=`$(am__cd) $(top_builddir) && pwd` \
+	  && $(am__cd) $(top_srcdir) \
+	  && gtags -i $(GTAGS_ARGS) "$$here"
+cscopelist: cscopelist-am
+
+cscopelist-am: $(am__tagged_files)
+	list='$(am__tagged_files)'; \
+	case "$(srcdir)" in \
+	  [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
+	  *) sdir=$(subdir)/$(srcdir) ;; \
+	esac; \
+	for i in $$list; do \
+	  if test -f "$$i"; then \
+	    echo "$(subdir)/$$i"; \
+	  else \
+	    echo "$$sdir/$$i"; \
+	  fi; \
+	done >> $(top_builddir)/cscope.files
+
+distclean-tags:
+	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
+
+distdir: $(DISTFILES)
+	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	list='$(DISTFILES)'; \
+	  dist_files=`for file in $$list; do echo $$file; done | \
+	  sed -e "s|^$$srcdirstrip/||;t" \
+	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
+	case $$dist_files in \
+	  */*) $(MKDIR_P) `echo "$$dist_files" | \
+			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
+			   sort -u` ;; \
+	esac; \
+	for file in $$dist_files; do \
+	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
+	  if test -d $$d/$$file; then \
+	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
+	    if test -d "$(distdir)/$$file"; then \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
+	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
+	  else \
+	    test -f "$(distdir)/$$file" \
+	    || cp -p $$d/$$file "$(distdir)/$$file" \
+	    || exit 1; \
+	  fi; \
+	done
+check-am: all-am
+check: check-am
+all-am: Makefile $(LIBRARIES)
+installdirs:
+install: install-am
+install-exec: install-exec-am
+install-data: install-data-am
+uninstall: uninstall-am
+
+install-am: all-am
+	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
+
+installcheck: installcheck-am
+install-strip:
+	if test -z '$(STRIP)'; then \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	      install; \
+	else \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
+	fi
+mostlyclean-generic:
+
+clean-generic:
+
+distclean-generic:
+	-test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES)
+	-test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES)
+
+maintainer-clean-generic:
+	@echo "This command is intended for maintainers to use"
+	@echo "it deletes files that may require special tools to rebuild."
+	-test -z "$(MAINTAINERCLEANFILES)" || rm -f $(MAINTAINERCLEANFILES)
+clean: clean-am
+
+clean-am: clean-generic clean-noinstLIBRARIES mostlyclean-am
+
+distclean: distclean-am
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+distclean-am: clean-am distclean-compile distclean-generic \
+	distclean-tags
+
+dvi: dvi-am
+
+dvi-am:
+
+html: html-am
+
+html-am:
+
+info: info-am
+
+info-am:
+
+install-data-am:
+
+install-dvi: install-dvi-am
+
+install-dvi-am:
+
+install-exec-am:
+
+install-html: install-html-am
+
+install-html-am:
+
+install-info: install-info-am
+
+install-info-am:
+
+install-man:
+
+install-pdf: install-pdf-am
+
+install-pdf-am:
+
+install-ps: install-ps-am
+
+install-ps-am:
+
+installcheck-am:
+
+maintainer-clean: maintainer-clean-am
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+maintainer-clean-am: distclean-am maintainer-clean-generic
+
+mostlyclean: mostlyclean-am
+
+mostlyclean-am: mostlyclean-compile mostlyclean-generic
+
+pdf: pdf-am
+
+pdf-am:
+
+ps: ps-am
+
+ps-am:
+
+uninstall-am:
+
+.MAKE: install-am install-strip
+
+.PHONY: CTAGS GTAGS TAGS all all-am check check-am clean clean-generic \
+	clean-noinstLIBRARIES cscopelist-am ctags ctags-am distclean \
+	distclean-compile distclean-generic distclean-tags distdir dvi \
+	dvi-am html html-am info info-am install install-am \
+	install-data install-data-am install-dvi install-dvi-am \
+	install-exec install-exec-am install-html install-html-am \
+	install-info install-info-am install-man install-pdf \
+	install-pdf-am install-ps install-ps-am install-strip \
+	installcheck installcheck-am installdirs maintainer-clean \
+	maintainer-clean-generic mostlyclean mostlyclean-compile \
+	mostlyclean-generic pdf pdf-am ps ps-am tags tags-am uninstall \
+	uninstall-am
+
+
+# Tell versions [3.59,3.63) of GNU make to not export all variables.
+# Otherwise a system limit (for SysV at least) may be exceeded.
+.NOEXPORT:
diff --git a/tools/keepalived/keepalived/vrrp/vrrp.c b/tools/keepalived/keepalived/vrrp/vrrp.c
index c11b36598..aeb9f4f03 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp.c
@@ -10,9 +10,9 @@
  *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
  *
- *              This program is distributed in the hope that it will be useful, 
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of 
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
  *
  *              This program is free software; you can redistribute it and/or
@@ -20,418 +20,1215 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+/* System includes */
+#include <errno.h>
+#include <openssl/md5.h>
+#include <unistd.h>
+#include <sys/time.h>
+#include <inttypes.h>
+#ifdef _WITH_VRRP_AUTH_
+#include <netinet/in.h>
+#endif
+#include <netinet/ip.h>
+#include <netinet/ip6.h>
+#include <stdint.h>
+#include <net/if_arp.h>
+#include <net/ethernet.h>
+#ifdef _NETWORK_TIMESTAMP_
+#include <linux/net_tstamp.h>
+#endif
+
 /* local include */
-#include <ctype.h>
-#include <sys/uio.h>
+#include "parser.h"
+
 #include "vrrp_arp.h"
 #include "vrrp_ndisc.h"
 #include "vrrp_scheduler.h"
 #include "vrrp_notify.h"
-#include "ipvswrapper.h"
 #include "vrrp.h"
+#include "global_data.h"
 #include "vrrp_data.h"
 #include "vrrp_sync.h"
-#include "vrrp_index.h"
+#include "vrrp_track.h"
+#ifdef _HAVE_VRRP_VMAC_
 #include "vrrp_vmac.h"
-#ifdef _WITH_SNMP_
+#endif
+#include "vrrp_if_config.h"
+#if defined _WITH_SNMP_RFC_ || defined _WITH_SNMP_VRRP_
 #include "vrrp_snmp.h"
 #endif
-#include "memory.h"
 #include "list.h"
 #include "logger.h"
 #include "main.h"
 #include "utils.h"
-#include "notify.h"
+#include "bitops.h"
+#include "keepalived_netlink.h"
+#if !HAVE_DECL_SOCK_CLOEXEC
+#include "old_socket.h"
+#endif
+#ifdef _HAVE_FIB_ROUTING_
+#include "vrrp_iprule.h"
+#include "vrrp_iproute.h"
+#endif
+#ifdef _WITH_DBUS_
+#include "vrrp_dbus.h"
+#include "global_data.h"
+#endif
+#include "keepalived_magic.h"
+#include "vrrp_static_track.h"
+#ifdef _WITH_FIREWALL_
+#include "vrrp_firewall.h"
+#endif
+#ifdef _WITH_CN_PROC_
+#include "track_process.h"
+#endif
+
+/* If we don't have certain configuration, then we can optimise the
+ * resources that keepalived uses. These are cleared by start_vrrp()
+ * in clear_summary_flags() and set in vrrp_complete_instance()
+ */
+bool have_ipv4_instance;
+bool have_ipv6_instance;
+
+#ifdef _HAVE_FIB_ROUTING_
+static bool monitor_ipv4_routes;
+static bool monitor_ipv6_routes;
+static bool monitor_ipv4_rules;
+static bool monitor_ipv6_rules;
+#endif
+
+#ifdef _NETWORK_TIMESTAMP_
+bool do_network_timestamp;
+#endif
 
-/* add/remove Virtual IP addresses */
 static int
-vrrp_handle_ipaddress(vrrp_t * vrrp, int cmd, int type)
+vrrp_notify_fifo_script_exit(__attribute__((unused)) thread_ref_t thread)
+{
+	log_message(LOG_INFO, "vrrp notify fifo script terminated");
+
+	return 0;
+}
+
+void
+clear_summary_flags(void)
+{
+	have_ipv4_instance = false;
+	have_ipv6_instance = false;
+#ifdef _HAVE_FIB_ROUTING_
+	monitor_ipv4_routes = false;
+	monitor_ipv6_routes = false;
+	monitor_ipv4_rules = false;
+	monitor_ipv6_rules = false;
+#endif
+}
+
+/* add/remove Virtual IP addresses */
+static bool
+vrrp_handle_ipaddress(vrrp_t * vrrp, int cmd, int type, bool force)
 {
-	if (debug & 32)
-		log_message(LOG_INFO, "VRRP_Instance(%s) %s protocol %s", vrrp->iname,
+	if (__test_bit(LOG_DETAIL_BIT, &debug))
+		log_message(LOG_INFO, "(%s) %s %s", vrrp->iname,
 		       (cmd == IPADDRESS_ADD) ? "setting" : "removing",
 		       (type == VRRP_VIP_TYPE) ? "VIPs." : "E-VIPs.");
-	netlink_iplist((type == VRRP_VIP_TYPE) ? vrrp->vip : vrrp->evip, cmd, vrrp->dpdk_ifp);
-	return 1;
+	return netlink_iplist((type == VRRP_VIP_TYPE) ? vrrp->vip : vrrp->evip, cmd, force, vrrp->dpdk_ifp);
 }
 
+#ifdef _HAVE_FIB_ROUTING_
 /* add/remove Virtual routes */
-static int
+static void
 vrrp_handle_iproutes(vrrp_t * vrrp, int cmd)
 {
-	if (debug & 32)
-		log_message(LOG_INFO, "VRRP_Instance(%s) %s protocol Virtual Routes",
+	if (__test_bit(LOG_DETAIL_BIT, &debug))
+		log_message(LOG_INFO, "(%s) %s Virtual Routes",
 		       vrrp->iname,
 		       (cmd == IPROUTE_ADD) ? "setting" : "removing");
 	netlink_rtlist(vrrp->vroutes, cmd);
-	return 1;
 }
 
-/* IP header length */
-static int
-vrrp_iphdr_len(vrrp_t * vrrp)
+/* add/remove Virtual rules */
+static void
+vrrp_handle_iprules(vrrp_t * vrrp, int cmd, bool force)
 {
-	return sizeof(struct iphdr);
+	if (__test_bit(LOG_DETAIL_BIT, &debug))
+		log_message(LOG_INFO, "(%s) %s Virtual Rules",
+		       vrrp->iname,
+		       (cmd == IPRULE_ADD) ? "setting" : "removing");
+	netlink_rulelist(vrrp->vrules, cmd, force);
 }
+#endif
 
-/* IPSEC AH header length */
-int
-vrrp_ipsecah_len(void)
+#ifdef _WITH_FIREWALL_
+static void
+vrrp_handle_accept_mode(vrrp_t *vrrp, int cmd, bool force)
 {
-	return sizeof(ipsec_ah_t);
+        if (vrrp->base_priority == VRRP_PRIO_OWNER || vrrp->accept)
+                return;
+
+        if (__test_bit(LOG_DETAIL_BIT, &debug))
+                log_message(LOG_INFO, "(%s) %s%s", vrrp->iname,
+                        (cmd == IPADDRESS_ADD) ? "sett" : "remov", "ing firewall drop rule");
+
+	firewall_handle_accept_mode(vrrp, cmd, force);
 }
+#endif
 
-/* VRRP header length */
+/* Check that the scripts are secure */
 static int
-vrrp_hd_len(vrrp_t * vrrp)
+check_track_script_secure(vrrp_script_t *script, magic_t magic)
 {
-	int len = sizeof(vrrphdr_t);
-	if (vrrp->family == AF_INET)
-		len += VRRP_AUTH_LEN + ((!LIST_ISEMPTY(vrrp->vip)) ? LIST_SIZE(vrrp->vip) * sizeof (uint32_t) : 0);
-        return len;
+	int flags;
+
+	if (script->insecure)
+		return 0;
+
+	flags = check_script_secure(&script->script, magic);
+
+	/* Mark not to run if needs inhibiting */
+	if (flags & SC_INHIBIT) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Disabling track script %s due to insecure", script->sname);
+		script->insecure = true;
+	}
+	else if (flags & SC_NOTFOUND) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Disabling track script %s since not found/accessible", script->sname);
+		script->insecure = true;
+	}
+	else if (!(flags & (SC_EXECUTABLE | SC_SYSTEM)))
+		script->insecure = true;
+
+	return flags;
 }
 
-/* VRRP header pointer from buffer */
-vrrphdr_t *
-vrrp_get_header(sa_family_t family, char *buf, int *proto, uint32_t *saddr)
+static void
+check_vrrp_script_security(void)
 {
-	struct iphdr *iph;
-	vrrphdr_t *hd = NULL;
+	element e, e1, next;
+	vrrp_t *vrrp;
+	vrrp_sgroup_t *sg;
+	tracked_sc_t *track_script;
+	vrrp_script_t *vscript;
+	int script_flags = 0;
+	magic_t magic;
 
-	if (family == AF_INET) {
-		iph = (struct iphdr *) buf;
-		*saddr = iph->saddr;
+	if (LIST_ISEMPTY(vrrp_data->vrrp))
+		return;
 
-		/* Fill the VRRP header */
-		switch (iph->protocol) {
-		case IPPROTO_IPSEC_AH:
-			*proto = IPPROTO_IPSEC_AH;
-			hd = (vrrphdr_t *) ((char *) iph + (iph->ihl << 2) +
-					   vrrp_ipsecah_len());
-			break;
-		case IPPROTO_VRRP:
-			*proto = IPPROTO_VRRP;
-			hd = (vrrphdr_t *) ((char *) iph + (iph->ihl << 2));
-			break;
+	magic = ka_magic_open();
+
+	/* Set the insecure flag of any insecure scripts */
+	if (!LIST_ISEMPTY(vrrp_data->vrrp_script)) {
+		for (e = LIST_HEAD(vrrp_data->vrrp_script); e; ELEMENT_NEXT(e)) {
+			vscript = ELEMENT_DATA(e);
+			script_flags |= check_track_script_secure(vscript, magic);
 		}
-	} else if (family == AF_INET6) {
-		*proto = IPPROTO_VRRP;
-		*saddr = 0;
-		hd = (vrrphdr_t *) buf;
 	}
 
-	return hd;
+	for (e = LIST_HEAD(vrrp_data->vrrp); e; ELEMENT_NEXT(e)) {
+		vrrp = ELEMENT_DATA(e);
+
+		script_flags |= check_notify_script_secure(&vrrp->script_backup, magic);
+		script_flags |= check_notify_script_secure(&vrrp->script_master, magic);
+		script_flags |= check_notify_script_secure(&vrrp->script_fault, magic);
+		script_flags |= check_notify_script_secure(&vrrp->script_stop, magic);
+		script_flags |= check_notify_script_secure(&vrrp->script, magic);
+		script_flags |= check_notify_script_secure(&vrrp->script_master_rx_lower_pri, magic);
+
+		if (LIST_ISEMPTY(vrrp->track_script))
+			continue;
+
+		for (e1 = LIST_HEAD(vrrp->track_script); e1; e1 = next) {
+			next = e1->next;
+			track_script = ELEMENT_DATA(e1);
+
+			if (track_script->scr->insecure) {
+				/* Remove it from the vrrp instance's queue */
+				free_list_element(vrrp->track_script, e1);
+			}
+		}
+	}
+
+	if (!LIST_ISEMPTY(vrrp_data->vrrp_sync_group)) {
+		for (e = LIST_HEAD(vrrp_data->vrrp_sync_group); e; ELEMENT_NEXT(e)) {
+			sg = ELEMENT_DATA(e);
+			script_flags |= check_notify_script_secure(&sg->script_backup, magic);
+			script_flags |= check_notify_script_secure(&sg->script_master, magic);
+			script_flags |= check_notify_script_secure(&sg->script_fault, magic);
+			script_flags |= check_notify_script_secure(&sg->script_stop, magic);
+			script_flags |= check_notify_script_secure(&sg->script, magic);
+
+			for (e1 = LIST_HEAD(sg->track_script); e1; e1 = next) {
+				next = e1->next;
+				track_script = ELEMENT_DATA(e1);
+
+				if (track_script->scr->insecure) {
+					/* Remove it from the vrrp sync group's queue */
+					free_list_element(sg->track_script, e1);
+				}
+			}
+		}
+	}
+
+	if (global_data->notify_fifo.script)
+		script_flags |= check_notify_script_secure(&global_data->notify_fifo.script, magic);
+	if (global_data->vrrp_notify_fifo.script)
+		script_flags |= check_notify_script_secure(&global_data->vrrp_notify_fifo.script, magic);
+
+	if (!script_security && script_flags & SC_ISSCRIPT) {
+		report_config_error(CONFIG_SECURITY_ERROR, "SECURITY VIOLATION - scripts are being executed but script_security not enabled.%s",
+				script_flags & SC_INSECURE ? " There are insecure scripts." : "");
+	}
+
+	if (magic)
+		ka_magic_close(magic);
+
+	/* Now walk through the vrrp_script list, removing any that aren't used */
+	for (e = LIST_HEAD(vrrp_data->vrrp_script); e; e = next) {
+		next = e->next;
+		vscript = ELEMENT_DATA(e);
+
+		if (vscript->insecure)
+			free_list_element(vrrp_data->vrrp_script, e);
+	}
 }
 
-/*
- * IPSEC AH incoming packet check.
- * return 0 for a valid pkt, != 0 otherwise.
- */
-static int
-vrrp_in_chk_ipsecah(vrrp_t * vrrp, char *buffer)
+/* VRRP header length */
+static size_t
+vrrp_pkt_len(const vrrp_t *vrrp)
 {
-	struct iphdr *ip = (struct iphdr *) (buffer);
-	ipsec_ah_t *ah = (ipsec_ah_t *) ((char *) ip + (ip->ihl << 2));
-	unsigned char *digest;
-	uint32_t backup_auth_data[3];
+	size_t len = sizeof(vrrphdr_t);
 
-	/* first verify that the SPI value is equal to src IP */
-	if (ah->spi != ip->saddr) {
-		log_message(LOG_INFO,
-		       "IPSEC AH : invalid IPSEC SPI value. %d and expect %d",
-		       ip->saddr, ah->spi);
-		return 1;
+	if (vrrp->family == AF_INET) {
+		if (vrrp->version == VRRP_VERSION_2)
+			len += VRRP_AUTH_LEN;
+		len += ((!LIST_ISEMPTY(vrrp->vip)) ? LIST_SIZE(vrrp->vip) * sizeof(struct in_addr) : 0);
 	}
+	else if (vrrp->family == AF_INET6)
+		len += ((!LIST_ISEMPTY(vrrp->vip)) ? LIST_SIZE(vrrp->vip) * sizeof(struct in6_addr) : 0);
 
-	/*
-	 * then proceed with the sequence number to prevent against replay attack.
-	 * For inbound processing, we increment seq_number counter to audit 
-	 * sender counter.
-	 */
-	vrrp->ipsecah_counter->seq_number++;
-	if (ntohl(ah->seq_number) >= vrrp->ipsecah_counter->seq_number || vrrp->sync) {
-		vrrp->ipsecah_counter->seq_number = ntohl(ah->seq_number);
-	} else {
-		log_message(LOG_INFO,
-		       "VRRP_Instance(%s) IPSEC-AH : sequence number %d"
-		       " already proceeded. Packet dropped. Local(%d)", vrrp->iname
-		       , ntohl(ah->seq_number), vrrp->ipsecah_counter->seq_number);
-		return 1;
+	return len;
+}
+
+size_t __attribute__ ((pure))
+vrrp_adv_len(const vrrp_t *vrrp)
+{
+	size_t len = vrrp_pkt_len(vrrp);
+
+	if (vrrp->family == AF_INET) {
+		len += sizeof(struct iphdr);
+#ifdef _WITH_VRRP_AUTH_
+		if (vrrp->auth_type == VRRP_AUTH_AH)
+			len += sizeof(ipsec_ah_t);
+#endif
 	}
 
-	/*
-	 * then compute a ICV to compare with the one present in AH pkt.
-	 * alloc a temp memory space to stock the ip mutable fields
-	 */
-	digest = (unsigned char *) MALLOC(16); /*MD5_DIGEST_LENGTH */
+	return len;
+}
 
-	/* zero the ip mutable fields */
-	ip->tos = 0;
-	ip->frag_off = 0;
-	ip->check = 0;
-	memcpy(backup_auth_data, ah->auth_data, sizeof (ah->auth_data));
-	memset(ah->auth_data, 0, sizeof (ah->auth_data));
+/* VRRP header pointer from buffer */
+const vrrphdr_t *
+vrrp_get_header(sa_family_t family, const char *buf, size_t len)
+{
+	const struct iphdr *iph;
 
-	/* Compute the ICV */
-	hmac_md5((unsigned char *) buffer,
-		 vrrp_iphdr_len(vrrp) + vrrp_ipsecah_len() + vrrp_hd_len(vrrp)
-		 , vrrp->auth_data, sizeof (vrrp->auth_data)
-		 , digest);
+	/* Since the raw sockets only specify IPPROTO_VRRP or (for IPv4)
+	 * IPPROTO_AH, it is safe to assume IPPROTO_VRRP if it is not
+	 * IPv4 and IPPROTO_AH. */
+
+	if (family == AF_INET) {
+		iph = (const struct iphdr *)buf;
 
-	if (memcmp(backup_auth_data, digest, HMAC_MD5_TRUNC) != 0) {
-		log_message(LOG_INFO, "VRRP_Instance(%s) IPSEC-AH : invalid"
-		       " IPSEC HMAC-MD5 value. Due to fields mutation"
-		       " or bad password !", vrrp->iname);
-		return 1;
+		/* Ensure we have received the full vrrp header */
+		if (len < sizeof(struct iphdr) ||
+		    len < (iph->ihl << 2) + sizeof(vrrphdr_t)) {
+			log_message(LOG_INFO, "IPv4 VRRP packet too short - %zu bytes", len);
+			return NULL;
+		}
+
+		/* Fill the VRRP header */
+#ifdef _WITH_VRRP_AUTH_
+		if (iph->protocol == IPPROTO_AH) {
+			/* Make sure we have received the full vrrp header */
+			if (len < (iph->ihl << 2) + sizeof(ipsec_ah_t) + sizeof(vrrphdr_t)) {
+				log_message(LOG_INFO, "IPv4 VRRP packet with AH too short - %zu bytes", len);
+				return NULL;
+			}
+
+			return (const vrrphdr_t *)((const char *) iph + (iph->ihl << 2) + sizeof(ipsec_ah_t));
+		}
+#endif
+		return (const vrrphdr_t *)((const char *) iph + (iph->ihl << 2));
 	}
 
-	FREE(digest);
-	return 0;
+	if (family == AF_INET6) {
+		/* Make sure we have received the full vrrp header */
+		if (len < sizeof(vrrphdr_t)) {
+			log_message(LOG_INFO, "IPv6 VRRP packet too short - %zu bytes", len);
+			return NULL;
+		}
+
+		return (const vrrphdr_t *)buf;
+	}
+
+	return NULL;
 }
 
-/* check if ipaddr is present in VIP buffer */
-static int
-vrrp_in_chk_vips(vrrp_t * vrrp, ip_address_t *ipaddress, unsigned char *buffer)
+static size_t
+expected_vrrp_pkt_len(const vrrphdr_t *vh, int family)
 {
-	int i;
-	uint32_t ipbuf;
-
-	/* Just skip IPv6 address, when we are using a mixed v4/v6 vips
-	 * set inside se same VRRP instance.
-	 */
-	if (IP_IS6(ipaddress))
-		return 1;
+	size_t len = sizeof(vrrphdr_t);
 
-	for (i = 0; i < LIST_SIZE(vrrp->vip); i++) {
-		bcopy(buffer + i * sizeof (uint32_t), &ipbuf,
-		      sizeof (uint32_t));
-		if (ipaddress->u.sin.sin_addr.s_addr == ipbuf)
-			return 1;
+	if (family == AF_INET) {
+		if (vh->vers_type >> 4 == VRRP_VERSION_2)
+			len += VRRP_AUTH_LEN;
+		len += vh->naddr * sizeof(struct in_addr);
 	}
+	else if (family == AF_INET6)
+		len += vh->naddr * sizeof(struct in6_addr);
 
-	return 0;
+	return len;
 }
 
-/*
- * VRRP incoming packet check.
- * return 0 if the pkt is valid, != 0 otherwise.
- */
-static int
-vrrp_in_chk(vrrp_t * vrrp, char *buffer)
+static void
+vrrp_update_pkt(vrrp_t *vrrp, uint8_t prio, struct sockaddr_storage* addr)
 {
-	struct iphdr *ip;
-	int ihl, vrrphdr_len;
-	ipsec_ah_t *ah;
+	char *bufptr = vrrp->send_buffer;
 	vrrphdr_t *hd;
-	unsigned char *vips;
-	ip_address_t *ipaddress;
-	element e;
+#ifdef _WITH_VRRP_AUTH_
+	bool final_update;
+#endif
+	uint32_t new_saddr = 0;
+	uint32_t new_daddr;
+
+#ifdef _WITH_VRRP_AUTH_
+	/* We will need to be called again if there is more than one unicast peer, so don't calculate checksums */
+	final_update = (LIST_ISEMPTY(vrrp->unicast_peer) || !LIST_HEAD(vrrp->unicast_peer)->next || addr);
+#endif
 
-	/* IPv4 related */
 	if (vrrp->family == AF_INET) {
+		bufptr += sizeof(struct iphdr);
 
-		ip = (struct iphdr *) (buffer);
-		ihl = ip->ihl << 2;
+#ifdef _WITH_VRRP_AUTH_
+		if (vrrp->auth_type == VRRP_AUTH_AH)
+			bufptr += sizeof(ipsec_ah_t);
+#endif
+	}
 
-		if (vrrp->auth_type == VRRP_AUTH_AH) {
-			ah = (ipsec_ah_t *) (buffer + ihl);
-			hd = (vrrphdr_t *) ((char *) ah + vrrp_ipsecah_len());
-		} else {
-			hd = (vrrphdr_t *) (buffer + ihl);
-		}
-	
-		/* pointer to vrrp vips pkt zone */
-		vips = (unsigned char *) ((char *) hd + sizeof(vrrphdr_t));
-	
-		/* MUST verify that the IP TTL is 255 */
-		if (LIST_ISEMPTY(vrrp->unicast_peer) && ip->ttl != VRRP_IP_TTL) {
-			log_message(LOG_INFO, "invalid ttl. %d and expect %d", ip->ttl,
-			       VRRP_IP_TTL);
-			return VRRP_PACKET_KO;
+	hd = (vrrphdr_t *)bufptr;
+	if (hd->priority != prio) {
+		if (vrrp->family == AF_INET) {
+			/* HC' = ~(~HC + ~m + m') */
+			uint16_t *prio_addr = (uint16_t *)((char *)&hd->priority - (((char *)hd -(char *)&hd->priority) & 1));
+			uint16_t old_val = *prio_addr;
+
+			hd->priority = prio;
+			hd->chksum = csum_incremental_update16(hd->chksum, old_val, *prio_addr);
 		}
-	
-		/*
-		 * MUST verify that the received packet length is greater than or
-		 * equal to the VRRP header
-		 */
-		if ((ntohs(ip->tot_len) - ihl) <= sizeof(vrrphdr_t)) {
-			log_message(LOG_INFO,
-			       "ip payload too short. %d and expect at least %d",
-			       ntohs(ip->tot_len) - ihl, sizeof(vrrphdr_t));
-			return VRRP_PACKET_KO;
+		else
+			hd->priority = prio;
+	}
+
+	if (vrrp->family == AF_INET) {
+		struct iphdr *ip = (struct iphdr *) (vrrp->send_buffer);
+		if (!addr) {
+			/* kernel will fill in ID if left to 0, so we overflow to 1 */
+			if (!++vrrp->ip_id)
+				++vrrp->ip_id;
+			ip->id = htons(vrrp->ip_id);
+		}
+		else {
+			/* If unicast address */
+			if (vrrp->version == VRRP_VERSION_2)
+				ip->daddr = inet_sockaddrip4(addr);
+			else {
+				new_daddr = inet_sockaddrip4(addr);
+
+				if (ip->daddr != new_daddr) {
+#ifdef _WITH_UNICAST_CHKSUM_COMPAT_
+					if (vrrp->unicast_chksum_compat < CHKSUM_COMPATIBILITY_MIN_COMPAT)
+#endif
+						hd->chksum = csum_incremental_update32(hd->chksum, ip->daddr, new_daddr);
+					ip->daddr = new_daddr;
+				}
+			}
 		}
 
-		if (!LIST_ISEMPTY(vrrp->vip)) {
-			/*
-			 * MAY verify that the IP address(es) associated with the
-			 * VRID are valid
-			 */
-			if (hd->naddr != LIST_SIZE(vrrp->vip)) {
-				log_message(LOG_INFO,
-				       "receive an invalid ip number count associated with VRID!");
-				return VRRP_PACKET_KO;
+		/* Has the source address changed? */
+		if (!vrrp->saddr_from_config &&
+		    ip->saddr != ((struct sockaddr_in *)&vrrp->saddr)->sin_addr.s_addr) {
+			if (vrrp->version == VRRP_VERSION_2)
+				ip->saddr = ((struct sockaddr_in *)&vrrp->saddr)->sin_addr.s_addr;
+			else {
+				new_saddr = ((struct sockaddr_in *)&vrrp->saddr)->sin_addr.s_addr;
+				hd->chksum = csum_incremental_update32(hd->chksum, ip->saddr, new_saddr);
+				ip->saddr = new_saddr;
 			}
+		}
 
-			for (e = LIST_HEAD(vrrp->vip); e; ELEMENT_NEXT(e)) {
-				ipaddress = ELEMENT_DATA(e);
-				if (!vrrp_in_chk_vips(vrrp, ipaddress, vips)) {
-					log_message(LOG_INFO, "ip address associated with VRID"
-					       " not present in received packet : %s",
-					       inet_ntop2(ipaddress->u.sin.sin_addr.s_addr));
-					log_message(LOG_INFO,
-					       "one or more VIP associated with"
-					       " VRID mismatch actual MASTER advert");
-					return VRRP_PACKET_KO;
+#ifdef _WITH_VRRP_AUTH_
+		if (vrrp->auth_type == VRRP_AUTH_AH) {
+			unsigned char digest[MD5_DIGEST_LENGTH];
+			ipsec_ah_t *ah = (ipsec_ah_t *) (vrrp->send_buffer + sizeof (struct iphdr));
+
+			if (new_saddr)
+				ah->spi = new_saddr;
+
+			if (!addr) {
+				/* Processing sequence number.
+				   Cycled assumed if 0xFFFFFFFD reached. So the MASTER state is free for another srv.
+				   Here can result a flapping MASTER state owner when max seq_number value reached.
+				   => We REALLY REALLY REALLY don't need to worry about this. We only use authentication
+				   for VRRPv2, for which the adver_int is specified in whole seconds, therefore the minimum
+				   adver_int is 1 second. 2^32-3 seconds is 4294967293 seconds, or in excess of 136 years,
+				   so since the sequence number always starts from 0, we are not going to reach the limit.
+				   In the current implementation if counter has cycled, we stop sending adverts and
+				   become BACKUP. We are ever the optimist and think we might run continuously for over
+				   136 years without someone redesigning their network!
+				   If all the master are down we reset the counter for becoming MASTER.
+				 */
+				if (vrrp->ipsecah_counter.seq_number > 0xFFFFFFFD) {
+					vrrp->ipsecah_counter.cycle = true;
+				} else {
+					vrrp->ipsecah_counter.seq_number++;
 				}
+
+				ah->seq_number = htonl(vrrp->ipsecah_counter.seq_number);
 			}
-		}
 
-		/* check the authentication if it is a passwd */
-		if (hd->auth_type == VRRP_AUTH_PASS) {
-			char *pw = (char *) ip + ntohs(ip->tot_len)
-			    - sizeof (vrrp->auth_data);
-			if (memcmp(pw, vrrp->auth_data, sizeof(vrrp->auth_data)) != 0) {
-				log_message(LOG_INFO, "receive an invalid passwd!");
-				return VRRP_PACKET_KO;
+			if (final_update) {
+				struct iphdr iph = *ip;
+
+				/* zero the ip mutable fields */
+				iph.tos = 0;
+				iph.frag_off = 0;
+				if (!LIST_ISEMPTY(vrrp->unicast_peer))
+					iph.ttl = 0;
+				/* Compute the ICV & trunc the digest to 96bits
+				   => No padding needed.
+				   -- rfc2402.3.3.3.1.1.1 & rfc2401.5
+				 */
+				memset(&ah->auth_data, 0, sizeof(ah->auth_data));
+				hmac_md5((const unsigned char *)&iph, sizeof iph, (const unsigned char *)ah, vrrp->send_buffer_size - sizeof (struct iphdr), vrrp->auth_data, sizeof (vrrp->auth_data), digest);
+				memcpy(ah->auth_data, digest, HMAC_MD5_TRUNC);
 			}
 		}
+#endif
+	}
+}
 
-		/* check the authenicaion if it is ipsec ah */
-		if (hd->auth_type == VRRP_AUTH_AH)
-			return (vrrp_in_chk_ipsecah(vrrp, buffer));
-
-		/* Set expected vrrp packet lenght */
-		vrrphdr_len = sizeof(vrrphdr_t) + VRRP_AUTH_LEN + hd->naddr * sizeof(uint32_t);
+#ifdef _WITH_UNICAST_CHKSUM_COMPAT_
+static void
+vrrp_csum_mcast(vrrp_t *vrrp)
+{
+	char *bufptr = vrrp->send_buffer;
+	vrrphdr_t *hd;
 
-	} else if (vrrp->family == AF_INET6) { /* IPv6 related */
+	bufptr += sizeof(struct iphdr);
 
-		hd = (vrrphdr_t *) buffer;
-		vrrphdr_len = sizeof(vrrphdr_t);
+#ifdef _WITH_VRRP_AUTH_
+	if (vrrp->auth_type == VRRP_AUTH_AH)
+		bufptr += sizeof(ipsec_ah_t);
+#endif
 
-	} else {
-		return VRRP_PACKET_KO;
-	}
+	hd = (vrrphdr_t *)bufptr;
 
-	/* MUST verify the VRRP version */
-	if ((hd->vers_type >> 4) != VRRP_VERSION) {
-		log_message(LOG_INFO, "invalid version. %d and expect %d",
-		       (hd->vers_type >> 4), VRRP_VERSION);
-		return VRRP_PACKET_KO;
+	struct iphdr *ip = (struct iphdr *) (vrrp->send_buffer);
+	if (vrrp->unicast_chksum_compat == CHKSUM_COMPATIBILITY_AUTO &&
+	    ip->daddr != global_data->vrrp_mcast_group4.sin_addr.s_addr) {
+		/* The checksum is calculated using the standard multicast address */
+		hd->chksum = csum_incremental_update32(hd->chksum, ip->daddr, global_data->vrrp_mcast_group4.sin_addr.s_addr);
 	}
+}
+#endif
 
-	/* MUST verify the VRRP checksum */
-	if (in_csum((u_short *) hd, vrrphdr_len, 0)) {
-		log_message(LOG_INFO, "Invalid vrrp checksum");
-		return VRRP_PACKET_KO;
-	}
+#ifdef _WITH_VRRP_AUTH_
+/*
+ * IPSEC AH incoming packet check.
+ * return false for a valid pkt, true otherwise.
+ */
+static bool
+vrrp_in_chk_ipsecah(vrrp_t *vrrp, const struct iphdr *ip, const ipsec_ah_t *ah, const vrrphdr_t *hd, size_t buflen)
+{
+	size_t hdr_len = (const char *)ah - (const char *)ip;
+	unsigned char digest[MD5_DIGEST_LENGTH];
+	unsigned char tmp_buf[(15 << 2) + sizeof(ipsec_ah_t)]; /* Allow for max ip header size */
+	struct iphdr *ip_tmp = (struct iphdr *)tmp_buf;
+	ipsec_ah_t *ah_tmp = (ipsec_ah_t *)((char *)ip_tmp + hdr_len);
 
 	/*
-	 * MUST perform authentication specified by Auth Type 
-	 * check the authentication type
+	 * First compute an ICV to compare with the one present in AH pkt.
+	 * If they don't match, we can't consider any fields in the received
+	 * packet to be valid.
 	 */
-	if (vrrp->auth_type != hd->auth_type) {
-		log_message(LOG_INFO, "receive a %d auth, expecting %d!",
-		       hd->auth_type, vrrp->auth_type);
-		return VRRP_PACKET_KO;
-	}
 
-	/* MUST verify that the VRID is valid on the receiving interface_t */
-	if (vrrp->vrid != hd->vrid) {
-		log_message(LOG_INFO,
-		       "received VRID mismatch. Received %d, Expected %d",
-		       hd->vrid, vrrp->vrid);
-		return VRRP_PACKET_DROP;
+	hdr_len = (const char *)hd - (const char *)ip;
+
+	/* zero the ip mutable fields */
+	memcpy(tmp_buf, ip, hdr_len);
+	ip_tmp->tos = 0;
+	ip_tmp->frag_off = 0;
+	ip_tmp->check = 0;
+	if (!LIST_ISEMPTY(vrrp->unicast_peer))
+		ip_tmp->ttl = 0;
+	memset(ah_tmp->auth_data, 0, sizeof (ah_tmp->auth_data));
+	memset(digest, 0, MD5_DIGEST_LENGTH);
+
+	/* Compute the ICV */
+	hmac_md5((const unsigned char *)ip_tmp, hdr_len,
+		 (const unsigned char *)hd, buflen - ((const unsigned char *)hd - (const unsigned char *)ip)
+		 , vrrp->auth_data, sizeof (vrrp->auth_data) , digest);
+
+	if (memcmp_constant_time(ah->auth_data, digest, HMAC_MD5_TRUNC) != 0) {
+		log_message(LOG_INFO, "(%s) IPSEC-AH : invalid"
+				      " IPSEC HMAC-MD5 value. Due to fields mutation"
+				      " or bad password !",
+			    vrrp->iname);
+		return true;
 	}
 
-	if (LIST_ISEMPTY(vrrp->vip) && hd->naddr > 0) {
-		log_message(LOG_INFO, "receive an invalid ip number count associated with VRID!");
-		return VRRP_PACKET_KO;
+	/* Now verify that the SPI value is equal to src IP */
+	if (ah->spi != ip->saddr) {
+		log_message(LOG_INFO, "IPSEC AH : invalid IPSEC SPI value. %u and expect %u",
+			    ip->saddr, ah->spi);
+		return true;
 	}
 
+// TODO - If SPI doesn't match previous SPI, we are starting again
 	/*
-	 * MUST verify that the Adver Interval in the packet is the same as
-	 * the locally configured for this virtual router
+	 * then proceed with the sequence number to prevent against replay attack.
 	 */
-	if (vrrp->adver_int / TIMER_HZ != hd->adver_int) {
-		log_message(LOG_INFO, "advertissement interval mismatch mine=%d rcved=%d",
-		       vrrp->adver_int, hd->adver_int);
-		/* to prevent concurent VRID running => multiple master in 1 VRID */
-		return VRRP_PACKET_DROP;
+	if (ntohl(ah->seq_number) > vrrp->ipsecah_counter.seq_number)
+		vrrp->ipsecah_counter.seq_number = ntohl(ah->seq_number);
+	else {
+		log_message(LOG_INFO, "(%s) IPSEC-AH : sequence number %u"
+					" already processed. Packet dropped. Local(%" PRIu32 ")",
+					vrrp->iname, ntohl(ah->seq_number),
+					vrrp->ipsecah_counter.seq_number);
+		return true;
 	}
 
-	return VRRP_PACKET_OK;
+	return false;
 }
+#endif
 
-/* build IP header */
-static void
-vrrp_build_ip4(vrrp_t * vrrp, char *buffer, int buflen, uint32_t dst)
+/* check if ipaddr is present in VIP buffer */
+static int
+vrrp_in_chk_vips(const vrrp_t *vrrp, const ip_address_t *ipaddress, const unsigned char *buffer)
 {
-	struct iphdr *ip = (struct iphdr *) (buffer);
-
-	ip->ihl = 5;
-	ip->version = 4;
-	/* set tos to internet network control */
-	ip->tos = 0xc0;
-	ip->tot_len = ip->ihl * 4 + vrrp_hd_len(vrrp);
-	ip->tot_len = htons(ip->tot_len);
-	ip->id = htons(++vrrp->ip_id);
-	/* kernel will fill in ID if left to 0, so we overflow to 1 */
-	if (vrrp->ip_id == 65535)
-		vrrp->ip_id = 1;
-	ip->frag_off = 0;
-	ip->ttl = VRRP_IP_TTL;
+	size_t i;
 
-	/* fill protocol type --rfc2402.2 */
-	ip->protocol = (vrrp->auth_type == VRRP_AUTH_AH) ? IPPROTO_IPSEC_AH : IPPROTO_VRRP;
-	ip->saddr = VRRP_PKT_SADDR(vrrp);
-	ip->daddr = dst;
+	if (vrrp->family == AF_INET) {
+		for (i = 0; i < LIST_SIZE(vrrp->vip); i++) {
+			if (!memcmp(&ipaddress->u.sin.sin_addr.s_addr, buffer + i * sizeof(struct in_addr), sizeof (struct in_addr)))
+				return 1;
+		}
+	} else if (vrrp->family == AF_INET6) {
+		for (i = 0; i < LIST_SIZE(vrrp->vip); i++) {
+			if (!memcmp(&ipaddress->u.sin6_addr, buffer + i * sizeof(struct in6_addr), sizeof (struct in6_addr)))
+				return 1;
+		}
+	}
 
-	/* checksum must be done last */
-	ip->check = in_csum((u_short *) ip, ip->ihl * 4, 0);
+	return 0;
 }
 
-/* build IPSEC AH header */
+#ifdef CHECKSUM_DIAGNOSTICS
 static void
-vrrp_build_ipsecah(vrrp_t * vrrp, char *buffer, int buflen)
+check_tx_checksum(vrrp_t *vrrp, unicast_peer_t *peer)
 {
-	ICV_mutable_fields *ip_mutable_fields;
-	unsigned char *digest;
-	struct iphdr *ip = (struct iphdr *) (buffer);
-	ipsec_ah_t *ah = (ipsec_ah_t *) (buffer + sizeof (struct iphdr));
+	struct iphdr *ip = (struct iphdr *)vrrp->send_buffer;
+	vrrphdr_t *hd = (vrrphdr_t *)((char *)vrrp->send_buffer + sizeof(struct iphdr));
+	size_t vrrppkt_len;
+	uint32_t acc_csum;
+	ipv4_phdr_t ipv4_phdr;
+	uint16_t calc_chksum;
+	uint16_t pkt_chksum;
+	checksum_check_t *chk = peer ? &peer->chk : &vrrp->chk;
+
+#ifdef _WITH_VRRP_AUTH_
+	if (ip->protocol == IPPROTO_AH)
+		hd = (vrrphdr_t *)((char *)hd + sizeof(ipsec_ah_t));
+#endif
+	vrrppkt_len = sizeof(vrrphdr_t) + hd->naddr * sizeof(struct in_addr);
+
+	if (vrrp->version == VRRP_VERSION_3) {
+		/* Create IPv4 pseudo-header */
+		ipv4_phdr.src   = ip->saddr;
+#ifdef _WITH_UNICAST_CHKSUM_COMPAT_
+		ipv4_phdr.dst   = vrrp->unicast_chksum_compat <= CHKSUM_COMPATIBILITY_MIN_COMPAT
+				  ? ip->daddr : global_data->vrrp_mcast_group4.sin_addr.s_addr;
+#else
+		ipv4_phdr.dst   = ip->daddr;
+#endif
+		ipv4_phdr.zero  = 0;
+		ipv4_phdr.proto = IPPROTO_VRRP;
+		ipv4_phdr.len   = htons(vrrppkt_len);
 
-	/* alloc a temp memory space to stock the ip mutable fields */
-	ip_mutable_fields = (ICV_mutable_fields *) MALLOC(sizeof (ICV_mutable_fields));
+		in_csum((uint16_t *) &ipv4_phdr, sizeof(ipv4_phdr), 0, &acc_csum);
+	} else {
+		vrrppkt_len += VRRP_AUTH_LEN;
+		acc_csum = 0;
+	}
 
-	/* fill in next header filed --rfc2402.2.1 */
-	ah->next_header = IPPROTO_VRRP;
+	pkt_chksum = hd->chksum;
+	hd->chksum = 0;
+	calc_chksum = in_csum((uint16_t *) hd, vrrppkt_len, acc_csum, &acc_csum);
+	hd->chksum = pkt_chksum;
+
+	if (calc_chksum != pkt_chksum ||
+	    !chk->sent_to ||
+	    acc_csum != chk->last_tx_checksum) {
+		struct sockaddr_storage *dst_addr;
+		struct sockaddr_storage addr;
+
+		if (peer)
+			dst_addr = &peer->address;
+		else {
+			inet_ip4tosockaddr(&global_data->vrrp_mcast_group4.sin_addr, &addr);
+			dst_addr = &addr;
+		}
 
-	/* update IP header total length value */
-	ip->tot_len = ip->ihl * 4 + vrrp_ipsecah_len() + vrrp_hd_len(vrrp);
-	ip->tot_len = htons(ip->tot_len);
+		if (!chk->sent_to)
+			log_message(LOG_INFO, "(%s): First advert to %s, checksum: pkt 0x%4.4x, calc 0x%4.4x acc 0x%x%s",
+					vrrp->iname, inet_sockaddrtos(dst_addr),
+					pkt_chksum, calc_chksum, acc_csum,
+					pkt_chksum != calc_chksum ? " - MISMATCH" : "");
+		else if (hd->priority != chk->last_tx_priority &&
+			 acc_csum - htons(hd->priority << 8) == (chk->last_tx_checksum - htons(chk->last_tx_priority << 8)))
+			log_message(LOG_INFO, "(%s): Checksum change to %s (priority %d to %d), checksum: pkt 0x%4.4x, calc 0x%4.4x acc 0x%x, previous acc 0x%x",
+					vrrp->iname, inet_sockaddrtos(dst_addr), chk->last_tx_priority, hd->priority,
+					pkt_chksum, calc_chksum, acc_csum, chk->last_tx_checksum);
+		else if (pkt_chksum != hd->chksum ||
+			 acc_csum != chk->last_tx_checksum)
+			log_message(LOG_INFO, "(%s): Checksum ERROR to %s, checksum: pkt 0x%4.4x, calc 0x%4.4x acc 0x%x, previous acc 0x%x",
+					vrrp->iname, inet_sockaddrtos(dst_addr),
+					pkt_chksum, calc_chksum, acc_csum, chk->last_tx_checksum);
+
+		if (vrrp->version == VRRP_VERSION_3)
+			log_buffer("IPv4 pseudo header", &ipv4_phdr, sizeof ipv4_phdr);
+		log_buffer("Advert packet", vrrp->send_buffer, vrrp->send_buffer_size);
+
+		chk->sent_to = true;
+		chk->last_tx_checksum = acc_csum;
+		chk->last_tx_priority = hd->priority;
+	}
+}
 
-	/* update ip checksum */
-	ip->check = 0;
-	ip->check = in_csum((u_short *) ip, ip->ihl * 4, 0);
+static void
+check_rx_checksum(vrrp_t *vrrp, const ipv4_phdr_t *ipv4_phdr, const struct iphdr *iph, size_t pkt_len, const vrrphdr_t *vrrp_pkt, uint16_t calc_chksum, uint32_t acc_csum)
+{
+	unicast_peer_t *peer = NULL;
+	struct in_addr *saddr4;
+	struct sockaddr_storage addr;
+	element e;
+	checksum_check_t *chk;
 
-	/* backup the ip mutable fields */
-	ip_mutable_fields->tos = ip->tos;
-	ip_mutable_fields->frag_off = ip->frag_off;
-	ip_mutable_fields->check = ip->check;
+	/* If unicast, find the sending peer */
+	saddr4 = &((struct sockaddr_in *)&vrrp->pkt_saddr)->sin_addr;
+	LIST_FOREACH(vrrp->unicast_peer, peer, e) {
+		if (saddr4->s_addr == ((struct sockaddr_in *)&peer->address)->sin_addr.s_addr)
+			break;
+	}
 
-	/* zero the ip mutable fields */
-	ip->tos = 0;
-	ip->frag_off = 0;
-	ip->check = 0;
+	chk = peer ? &peer->chk : &vrrp->chk;
+	if (calc_chksum ||
+	    !chk->received_from ||
+	    chk->last_rx_checksum != vrrp_pkt->chksum ||
+	    chk->last_rx_from != saddr4->s_addr ||
+	    chk->last_rx_priority != vrrp_pkt->priority) {
+		inet_ip4tosockaddr(saddr4, &addr);
+
+		if (!chk->received_from)
+			log_message(LOG_INFO, "%s: First received advert from %s, checksum: pkt 0x%4.4x, calc 0x%4.4x, acc 0x%x%s",
+					vrrp->iname, inet_sockaddrtos(&addr), vrrp_pkt->chksum, calc_chksum, acc_csum,
+					calc_chksum ? " - MISMATCH" : "");
+		else if (calc_chksum)
+			log_message(LOG_INFO, "(%s): Checksum ERROR from %s, checksum: pkt 0x%4.4x, previous 0x%4.4x, calc 0x%4.4x acc 0x%x",
+					vrrp->iname, inet_sockaddrtos(&addr), vrrp_pkt->chksum, chk->last_rx_checksum, calc_chksum, acc_csum);
+		else if (chk->last_rx_from != saddr4->s_addr) {
+			char old_addr[INET_ADDRSTRLEN];
+
+			log_message(LOG_INFO, "(%s): Checksum valid change from %s (was %s), checksum: pkt 0x%4.4x, previous 0x%4.4x calc 0x%4.4x acc 0x%x",
+					vrrp->iname, inet_sockaddrtos(&addr), inet_ntop(AF_INET, &chk->last_rx_from, old_addr, sizeof(old_addr)),
+					vrrp_pkt->chksum, chk->last_rx_checksum, calc_chksum, acc_csum);
+		}
+		else if (chk->last_rx_priority != vrrp_pkt->priority)
+			log_message(LOG_INFO, "(%s): Checksum valid change from %s (priority %d to %d), checksum: pkt 0x%4.4x, previous 0x%4.4x, calc 0x%4.4x acc 0x%x",
+					vrrp->iname, inet_sockaddrtos(&addr), chk->last_rx_priority, vrrp_pkt->priority,
+					chk->last_rx_checksum, vrrp_pkt->chksum, calc_chksum, acc_csum);
+		else
+			log_message(LOG_INFO, "(%s): Checksum valid change from %s, checksum: 0x%4.4x, previous 0x%4.4x, acc 0x%x",
+					vrrp->iname, inet_sockaddrtos(&addr), vrrp_pkt->chksum, chk->last_rx_checksum, acc_csum);
+
+		if (ipv4_phdr)
+			log_buffer("IPv4 pseudo header", ipv4_phdr, sizeof(*ipv4_phdr));
+		log_buffer("Advert packet", iph, pkt_len);
+
+		chk->received_from = true;
+		chk->last_rx_checksum = vrrp_pkt->chksum;
+		chk->last_rx_priority = vrrp_pkt->priority;
+		chk->last_rx_from = saddr4->s_addr;
+	}
+}
+#endif
 
-	/* fill in the Payload len field */
-	ah->payload_len = IPSEC_AH_PLEN;
+/*
+ * VRRP incoming packet check.
+ * return VRRP_PACKET_OK if the pkt is valid, or
+ *	  VRRP_PACKET_KO if packet invalid or
+ *	  VRRP_PACKET_DROP if packet not relevant to us
+ *	  VRRP_PACKET_OTHER if packet has wrong vrid
+ *
+ * Note: If we return anything other that VRRP_PACKET_OK, we should log the reason why
+ *
+ * On entry, we have already checked that sufficient data has been received for the
+ * IP header (if IPv4), the ipsec_ah header (if IPv4 and the ip header protocol
+ * is IPPROTO_AH), and the VRRP protocol header. We haven't yet checked that there is
+ * suficient data received for all the VIPs.
+ */
+static int
+vrrp_check_packet(vrrp_t *vrrp, const vrrphdr_t *hd, const char *buffer, ssize_t buflen_ret, bool check_vip_addr)
+{
+	const struct iphdr *ip = (const struct iphdr *)buffer;
+					/* Stop coverity issuing NULL pointer dereference warning */
+	int ihl = 0;	/* Stop compiler issuing possibly uninitialised warning */
+	size_t vrrppkt_len;
+	unsigned adver_int;
+#ifdef _WITH_VRRP_AUTH_
+	const ipsec_ah_t *ah;
+#endif
+	const unsigned char *vips;
+	ip_address_t *ipaddress;
+	element e;
+	char addr_str[INET6_ADDRSTRLEN];
+	ipv4_phdr_t ipv4_phdr;
+	uint32_t acc_csum = 0;
+	unicast_peer_t *up_addr;
+	size_t buflen, expected_len;
+#ifdef _WITH_UNICAST_CHKSUM_COMPAT_
+	bool chksum_error;
+#endif
+	uint16_t csum_calc;
+
+	buflen = (size_t)buflen_ret;
+
+	/* IPv4 related */
+	if (vrrp->family == AF_INET) {
+		/* To begin with, we just concern ourselves with the protocol headers */
+		ihl = ip->ihl << 2;
+
+		expected_len = ihl;
+
+#ifdef _WITH_VRRP_AUTH_
+		/* Check we have an AH header if expect AH, and don't have it if not */
+		if ((ip->protocol == IPPROTO_AH) != (vrrp->auth_type == VRRP_AUTH_AH)) {
+			if (ip->protocol == IPPROTO_AH)
+				log_message(LOG_INFO, "(%s) Received AH header but auth type not AH", vrrp->iname);
+			else
+				log_message(LOG_INFO, "(%s) No AH header but auth type is AH", vrrp->iname);
+			++vrrp->stats->authtype_mismatch;
+#ifdef _WITH_SNMP_RFCV2_
+			vrrp_rfcv2_snmp_auth_err_trap(vrrp, ((struct sockaddr_in *)&vrrp->pkt_saddr)->sin_addr, authTypeMismatch);
+#endif
+			return VRRP_PACKET_KO;
+		}
+
+		if (vrrp->auth_type == VRRP_AUTH_AH)
+			expected_len += sizeof(ipsec_ah_t);
+#endif
+	} else if (vrrp->family == AF_INET6) {
+		expected_len = 0;
+	} else {
+		log_message(LOG_INFO, "(%s) configured address family is %d, which is neither AF_INET or AF_INET6. This is probably a bug - please report", vrrp->iname, vrrp->family);
+		return VRRP_PACKET_KO;
+	}
+
+	/* Now calculate expected_len to include everything */
+	expected_len += expected_vrrp_pkt_len(hd, vrrp->family);
+
+	/*
+	 * MUST verify that the received packet contains the complete VRRP
+	 * packet (including fixed fields, and IPvX address(es)).
+	 */
+	if (buflen != expected_len) {
+		log_message(LOG_INFO, "(%s) vrrp packet too %s, length %zu and expect %zu",
+			      vrrp->iname,
+			      buflen > expected_len ? "long" : "short",
+			      buflen, expected_len);
+		++vrrp->stats->packet_len_err;
+		return VRRP_PACKET_KO;
+	}
+
+	/* MUST verify that the IPv4 TTL/IPv6 HL is 255 (but not if unicast) */
+	if (LIST_ISEMPTY(vrrp->unicast_peer)) {
+		if ((vrrp->family == AF_INET && ip->ttl != VRRP_IP_TTL)
+#ifdef IPV6_RECVHOPLIMIT
+		    || (vrrp->family == AF_INET6 && vrrp->hop_limit != -1 && vrrp->hop_limit != VRRP_IP_TTL)
+#endif
+													    ) {
+			log_message(LOG_INFO, "(%s) invalid TTL/HL. Received %d and expect %d",
+				vrrp->iname,
+#ifdef IPV6_RECVHOPLIMIT
+				vrrp->family == AF_INET ? ip->ttl : vrrp->hop_limit,
+#else
+				ip->ttl,
+#endif
+				VRRP_IP_TTL);
+			++vrrp->stats->ip_ttl_err;
+#ifdef _WITH_SNMP_RFCV3_
+			vrrp->stats->proto_err_reason = ipTtlError;
+			vrrp_rfcv3_snmp_proto_err_notify(vrrp);
+#endif
+			return VRRP_PACKET_KO;
+		}
+	}
+
+	/* MUST verify the VRRP version */
+	if ((hd->vers_type >> 4) != vrrp->version) {
+		log_message(LOG_INFO, "(%s) wrong version. Received %d and expect %d",
+		       vrrp->iname, (hd->vers_type >> 4), vrrp->version);
+#ifdef _WITH_SNMP_RFC_
+		vrrp->stats->vers_err++;
+#ifdef _WITH_SNMP_RFCV3_
+		vrrp->stats->proto_err_reason = versionError;
+		vrrp_rfcv3_snmp_proto_err_notify(vrrp);
+#endif
+#endif
+		return VRRP_PACKET_KO;
+	}
+
+	if (vrrp->version == VRRP_VERSION_2) {
+		/* Check that authentication of packet is correct */
+		if (
+#ifdef _WITH_VRRP_AUTH_
+		    hd->v2.auth_type != VRRP_AUTH_AH &&
+		    hd->v2.auth_type != VRRP_AUTH_PASS &&
+#endif
+		    hd->v2.auth_type != VRRP_AUTH_NONE) {
+			log_message(LOG_INFO, "(%s) Invalid auth type: %d", vrrp->iname, hd->v2.auth_type);
+			++vrrp->stats->invalid_authtype;
+#ifdef _WITH_SNMP_RFCV2_
+			vrrp_rfcv2_snmp_auth_err_trap(vrrp, ((struct sockaddr_in *)&vrrp->pkt_saddr)->sin_addr, invalidAuthType);
+#endif
+			return VRRP_PACKET_KO;
+		}
+
+#ifdef _WITH_VRRP_AUTH_
+		/*
+		 * MUST perform authentication specified by Auth Type
+		 * check the authentication type
+		 */
+		if (vrrp->auth_type != hd->v2.auth_type) {
+			log_message(LOG_INFO, "(%s) received a %d auth, expecting %d!",
+			       vrrp->iname, hd->v2.auth_type, vrrp->auth_type);
+			++vrrp->stats->authtype_mismatch;
+#ifdef _WITH_SNMP_RFCV2_
+			vrrp_rfcv2_snmp_auth_err_trap(vrrp, ((struct sockaddr_in *)&vrrp->pkt_saddr)->sin_addr, authTypeMismatch);
+#endif
+			return VRRP_PACKET_KO;
+		}
+
+		if (vrrp->auth_type == VRRP_AUTH_PASS) {
+			/* check the authentication if it is a passwd */
+			const char *pw = (const char *)ip + ntohs(ip->tot_len) - sizeof (vrrp->auth_data);
+			if (memcmp_constant_time(pw, vrrp->auth_data, sizeof(vrrp->auth_data)) != 0) {
+				log_message(LOG_INFO, "(%s) received an invalid passwd!", vrrp->iname);
+				++vrrp->stats->auth_failure;
+#ifdef _WITH_SNMP_RFCV2_
+				vrrp_rfcv2_snmp_auth_err_trap(vrrp, ((struct sockaddr_in *)&vrrp->pkt_saddr)->sin_addr, authFailure);
+#endif
+				return VRRP_PACKET_KO;
+			}
+		}
+		else if (vrrp->auth_type == VRRP_AUTH_AH) {
+			ah = (const ipsec_ah_t *) (buffer + ihl);
+
+			/* Check that the next header is vrrphdr_t */
+			if (ah->next_header != IPPROTO_VRRP) {
+				/* This is an AH header for some other protocol - ignore packet */
+				return VRRP_PACKET_DROP;
+			}
+
+			/* check the authentication if it is ipsec ah */
+			if (vrrp_in_chk_ipsecah(vrrp, ip, ah, hd, buflen)) {
+				++vrrp->stats->auth_failure;
+#ifdef _WITH_SNMP_RFCV2_
+				vrrp_rfcv2_snmp_auth_err_trap(vrrp, ((struct sockaddr_in *)&vrrp->pkt_saddr)->sin_addr, authFailure);
+#endif
+				return VRRP_PACKET_KO;
+			}
+
+			if (vrrp->state == VRRP_STATE_BACK &&
+			    ntohl(ah->seq_number) >= vrrp->ipsecah_counter.seq_number)
+				vrrp->ipsecah_counter.cycle = false;
+		}
+#endif
+
+		/*
+		 * MUST verify that the Adver Interval in the packet is the same as
+		 * the locally configured for this virtual router if VRRPv2
+		 */
+		if (vrrp->adver_int != hd->v2.adver_int * TIMER_HZ) {
+			log_message(LOG_INFO, "(%s) advertisement interval mismatch mine=%u sec rcv'd=%d sec",
+				vrrp->iname, vrrp->adver_int / TIMER_HZ, hd->v2.adver_int);
+			/* to prevent concurent VRID running => multiple master in 1 VRID */
+			return VRRP_PACKET_DROP;
+		}
+
+	}
+
+	/* verify packet type */
+	if ((hd->vers_type & 0x0f) != VRRP_PKT_ADVERT) {
+		log_message(LOG_INFO, "(%s) Invalid packet type. %d and expect %d",
+			vrrp->iname, (hd->vers_type & 0x0f), VRRP_PKT_ADVERT);
+		++vrrp->stats->invalid_type_rcvd;
+		return VRRP_PACKET_KO;
+	}
+
+	/* Check the number of VIPs matches what we expect */
+	if (check_vip_addr && hd->naddr != LIST_SIZE(vrrp->vip)) {
+		log_message(LOG_INFO, "(%s) received an unexpected ip number count %u, expected %u!",
+			vrrp->iname, hd->naddr, LIST_SIZE(vrrp->vip));
+		++vrrp->stats->addr_list_err;
+		return VRRP_PACKET_KO;
+	}
+
+	/* Check the IP header total packet length matches what we received */
+	if (vrrp->family == AF_INET && ntohs(ip->tot_len) != buflen) {
+		log_message(LOG_INFO,
+		       "(%s) ip_tot_len mismatch against received length. %d and received %zu",
+		       vrrp->iname, ntohs(ip->tot_len), buflen);
+		++vrrp->stats->packet_len_err;
+		return VRRP_PACKET_KO;
+	}
+
+	/* MUST verify the VRRP checksum. Kernel takes care of checksum mismatch incase of IPv6. */
+	if (vrrp->family == AF_INET) {
+		vrrppkt_len = sizeof(vrrphdr_t) + hd->naddr * sizeof(struct in_addr);
+		if (vrrp->version == VRRP_VERSION_3) {
+			/* Create IPv4 pseudo-header */
+			ipv4_phdr.src   = ip->saddr;
+#ifdef _WITH_UNICAST_CHKSUM_COMPAT_
+			ipv4_phdr.dst   = vrrp->unicast_chksum_compat <= CHKSUM_COMPATIBILITY_MIN_COMPAT
+					  ? ip->daddr : global_data->vrrp_mcast_group4.sin_addr.s_addr;
+#else
+			ipv4_phdr.dst	= ip->daddr;
+#endif
+			ipv4_phdr.zero  = 0;
+			ipv4_phdr.proto = IPPROTO_VRRP;
+			ipv4_phdr.len   = htons(vrrppkt_len);
+
+			in_csum((uint16_t *) &ipv4_phdr, sizeof(ipv4_phdr), 0, &acc_csum);
+			if ((csum_calc = in_csum((const uint16_t *) hd, vrrppkt_len, acc_csum, &acc_csum))) {
+#ifdef _WITH_UNICAST_CHKSUM_COMPAT_
+				chksum_error = true;
+				if (!LIST_ISEMPTY(vrrp->unicast_peer) &&
+				    vrrp->unicast_chksum_compat == CHKSUM_COMPATIBILITY_NONE &&
+				    ipv4_phdr.dst != global_data->vrrp_mcast_group4.sin_addr.s_addr) {
+					ipv4_phdr.dst = global_data->vrrp_mcast_group4.sin_addr.s_addr;
+					in_csum((uint16_t *) &ipv4_phdr, sizeof(ipv4_phdr), 0, &acc_csum);
+					if (!(csum_calc = in_csum((const uint16_t *)hd, vrrppkt_len, acc_csum, &acc_csum))) {
+						/* Update the checksum for the pseudo header IP address */
+						vrrp_csum_mcast(vrrp);
+
+						/* Now we can specify that we are going to use the compatibility mode */
+						vrrp->unicast_chksum_compat = CHKSUM_COMPATIBILITY_AUTO;
+
+						log_message(LOG_INFO, "(%s) Setting unicast VRRPv3 checksum to old version", vrrp->iname);
+						chksum_error = false;
+					}
+				}
+
+				if (chksum_error)
+#endif
+				{
+					log_message(LOG_INFO, "(%s) Invalid VRRPv3 checksum", vrrp->iname);
+#ifdef _WITH_SNMP_RFC_
+					vrrp->stats->chk_err++;
+#ifdef _WITH_SNMP_RFCV3_
+					vrrp->stats->proto_err_reason = checksumError;
+					vrrp_rfcv3_snmp_proto_err_notify(vrrp);
+#endif
+#endif
+					return VRRP_PACKET_KO;
+				}
+			}
+
+#ifdef CHECKSUM_DIAGNOSTICS
+			check_rx_checksum(vrrp, &ipv4_phdr, ip, buflen, hd, csum_calc, acc_csum);
+#endif
+		} else {
+			vrrppkt_len += VRRP_AUTH_LEN;
+			csum_calc = in_csum((const uint16_t *) hd, vrrppkt_len, 0, &acc_csum);
+
+#ifdef CHECKSUM_DIAGNOSTICS
+			check_rx_checksum(vrrp, NULL, ip, buflen, hd, csum_calc, acc_csum);
+#endif
+
+			if (csum_calc) {
+				log_message(LOG_INFO, "(%s) Invalid VRRPv2 checksum", vrrp->iname);
+#ifdef _WITH_SNMP_RFC_
+				vrrp->stats->chk_err++;
+#ifdef _WITH_SNMP_RFCV3_
+				vrrp->stats->proto_err_reason = checksumError;
+				vrrp_rfcv3_snmp_proto_err_notify(vrrp);
+#endif
+#endif
+				return VRRP_PACKET_KO;
+			}
+		}
+	}
+
+	/* check that destination address is multicast if don't have any unicast peers
+	 * and vice versa */
+	if (((vrrp->family == AF_INET && IN_MULTICAST(ntohl(ip->daddr)))
+#ifdef IPV6_RECVPKTINFO
+	     || (vrrp->family == AF_INET6 && vrrp->multicast_pkt)
+#endif
+								 ) != LIST_ISEMPTY(vrrp->unicast_peer)) {
+		log_message(LOG_INFO, "(%s) Expected %sicast packet but received %sicast packet",
+				vrrp->iname,
+				LIST_ISEMPTY(vrrp->unicast_peer) ? "mult" : "un",
+				LIST_ISEMPTY(vrrp->unicast_peer) ? "un" : "mult");
+		++vrrp->stats->addr_list_err;
+		return VRRP_PACKET_KO;
+	}
+
+	/* Correct type, version, and length. Count as VRRP advertisement */
+	++vrrp->stats->advert_rcvd;
+
+	/* pointer to vrrp vips pkt zone */
+	vips = (const unsigned char *) ((const char *) hd + sizeof(vrrphdr_t));
+
+	if (check_vip_addr) {
+		/*
+		 * MAY verify that the IP address(es) associated with the
+		 * VRID are valid
+		 */
+		if (hd->naddr != LIST_SIZE(vrrp->vip)) {
+			log_message(LOG_INFO, "(%s) expected %u VIPs but received %u", vrrp->iname, LIST_SIZE(vrrp->vip), hd->naddr);
+			return VRRP_PACKET_KO;
+		}
+
+		LIST_FOREACH(vrrp->vip, ipaddress, e) {
+			if (!vrrp_in_chk_vips(vrrp, ipaddress, vips)) {
+				log_message(LOG_INFO, "(%s) ip address associated with VRID %d"
+					    " not present in MASTER advert : %s",
+					    vrrp->iname, vrrp->vrid,
+					    inet_ntop(vrrp->family,
+						      vrrp->family == AF_INET6 ? &ipaddress->u.sin6_addr : (void *)&ipaddress->u.sin.sin_addr.s_addr,
+						      addr_str, sizeof(addr_str)));
+				++vrrp->stats->addr_list_err;
+				return VRRP_PACKET_KO;
+			}
+		}
+
+		/* check a unicast source address is in the unicast_peer list */
+		if (global_data->vrrp_check_unicast_src && !LIST_ISEMPTY(vrrp->unicast_peer)) {
+			struct in_addr *saddr4;
+			struct in6_addr *saddr6;
+
+			if (vrrp->family == AF_INET6) {
+				saddr6 = &((struct sockaddr_in6 *)&vrrp->pkt_saddr)->sin6_addr;
+				LIST_FOREACH(vrrp->unicast_peer, up_addr, e) {
+					if (IN6_ARE_ADDR_EQUAL(saddr6, &((struct sockaddr_in6 *)&up_addr->address)->sin6_addr))
+						break;
+				}
+			} else {
+				saddr4 = &((struct sockaddr_in *)&vrrp->pkt_saddr)->sin_addr;
+				LIST_FOREACH(vrrp->unicast_peer, up_addr, e) {
+					if (saddr4->s_addr == ((struct sockaddr_in *)&up_addr->address)->sin_addr.s_addr)
+						break;
+				}
+			}
+			if (!e) {
+				log_message(LOG_INFO, "(%s) unicast source address %s not a unicast peer",
+					vrrp->iname,
+					inet_ntop(vrrp->family,
+						  vrrp->family == AF_INET6 ? saddr6 : (void *)saddr4,
+						  addr_str, sizeof(addr_str)));
+				return VRRP_PACKET_KO;
+			}
+		}
+	}
+
+	if (hd->priority == 0)
+		++vrrp->stats->pri_zero_rcvd;
+
+	if (vrrp->version == VRRP_VERSION_3 && vrrp->state == VRRP_STATE_BACK) {
+// TODO - is this the right place to do this? - Probably not, do it below
+		/* In v3 when we are in BACKUP state, we set our
+		 * advertisement interval to match the MASTER's. */
+		adver_int = (ntohs(hd->v3.adver_int) & 0x0FFF) * TIMER_CENTI_HZ;
+		if (vrrp->master_adver_int != adver_int) {
+			log_message(LOG_INFO, "(%s) advertisement interval changed: mine=%u milli-sec, rcved=%u milli-sec",
+				vrrp->iname, vrrp->master_adver_int / (TIMER_HZ / 1000), adver_int / (TIMER_HZ / 1000));
+		}
+	}
+
+	return VRRP_PACKET_OK;
+}
+
+/* build IP header */
+static void
+vrrp_build_ip4(vrrp_t *vrrp, char *buffer)
+{
+	struct iphdr *ip = (struct iphdr *) (buffer);
+
+	ip->ihl = sizeof(struct iphdr) >> 2;
+	ip->version = 4;
+	/* set tos to internet network control */
+	ip->tos = 0xc0;
+	ip->tot_len = (uint16_t)(sizeof (struct iphdr) + vrrp_pkt_len(vrrp));
+	ip->tot_len = htons(ip->tot_len);
+	ip->id = 0;
+	ip->frag_off = 0;
+	ip->ttl = VRRP_IP_TTL;
+
+	/* fill protocol type --rfc2402.2 */
+#ifdef _WITH_VRRP_AUTH_
+	ip->protocol = (vrrp->auth_type == VRRP_AUTH_AH) ? IPPROTO_AH : IPPROTO_VRRP;
+#else
+	ip->protocol = IPPROTO_VRRP;
+#endif
+
+	ip->saddr = VRRP_PKT_SADDR(vrrp);
+
+	/* If using unicast peers, pick the first one */
+	if (!LIST_ISEMPTY(vrrp->unicast_peer)) {
+		unicast_peer_t* peer = ELEMENT_DATA(LIST_HEAD(vrrp->unicast_peer));
+		ip->daddr = inet_sockaddrip4(&peer->address);
+	}
+	else
+		ip->daddr = global_data->vrrp_mcast_group4.sin_addr.s_addr;
+
+	ip->check = 0;
+}
+
+#ifdef _WITH_VRRP_AUTH_
+/* build IPSEC AH header */
+static void
+vrrp_build_ipsecah(vrrp_t * vrrp, char *buffer, size_t buflen)
+{
+	unsigned char digest[MD5_DIGEST_LENGTH];
+	struct iphdr *ip = (struct iphdr *) (buffer);
+	ipsec_ah_t *ah = (ipsec_ah_t *) (buffer + sizeof (struct iphdr));
+
+	/* fill in next header filed --rfc2402.2.1 */
+	ah->next_header = IPPROTO_VRRP;
+
+	/* update IP header total length value */
+	ip->tot_len = htons(ntohs(ip->tot_len) + sizeof(ipsec_ah_t));
+
+	/* fill in the Payload len field */
+	ah->payload_len = IPSEC_AH_PLEN;
 
 	/* The SPI value is filled with the ip header source address.
 	   SPI uniquely identify the Security Association (SA). This value
-	   is chosen by the recipient itself when setting up the SA. In a 
+	   is chosen by the recipient itself when setting up the SA. In a
 	   multicast environment, this becomes unfeasible.
 
 	   If left to the sender, the choice of the SPI value should be done
@@ -444,139 +1241,204 @@ vrrp_build_ipsecah(vrrp_t * vrrp, char *buffer, int buflen)
 	 */
 	ah->spi = ip->saddr;
 
-	/* Processing sequence number.
-	   Cycled assumed if 0xFFFFFFFD reached. So the MASTER state is free for another srv.
-	   Here can result a flapping MASTER state owner when max seq_number value reached.
-	   => Much work needed here.
-	   In the current implementation if counter has cycled, we stop sending adverts and 
-	   become BACKUP. If all the master are down we reset the counter for becoming MASTER.
-	 */
-	if (vrrp->ipsecah_counter->seq_number > 0xFFFFFFFD) {
-		vrrp->ipsecah_counter->cycle = 1;
-	} else {
-		vrrp->ipsecah_counter->seq_number++;
-	}
-
-	ah->seq_number = htonl(vrrp->ipsecah_counter->seq_number);
-
 	/* Compute the ICV & trunc the digest to 96bits
 	   => No padding needed.
 	   -- rfc2402.3.3.3.1.1.1 & rfc2401.5
 	 */
-	digest = (unsigned char *) MALLOC(16); /*MD5_DIGEST_LENGTH */
-	hmac_md5((unsigned char *) buffer, buflen, vrrp->auth_data, sizeof (vrrp->auth_data)
-		 , digest);
+	hmac_md5((unsigned char *) buffer, buflen, NULL, 0, vrrp->auth_data, sizeof (vrrp->auth_data), digest);
 	memcpy(ah->auth_data, digest, HMAC_MD5_TRUNC);
-
-	/* Restore the ip mutable fields */
-	ip->tos = ip_mutable_fields->tos;
-	ip->frag_off = ip_mutable_fields->frag_off;
-	ip->check = ip_mutable_fields->check;
-
-	FREE(ip_mutable_fields);
-	FREE(digest);
 }
+#endif
 
-/* build VRRP header */
-static int
-vrrp_build_vrrp(vrrp_t * vrrp, int prio, char *buffer)
+/* build VRRPv2 header */
+static void
+vrrp_build_vrrp_v2(vrrp_t *vrrp, char *buffer)
 {
 	int i = 0;
 	vrrphdr_t *hd = (vrrphdr_t *) buffer;
-	uint32_t *iparr;
+	struct in_addr *iparr;
+	struct in6_addr *ip6arr;
 	element e;
 	ip_address_t *ip_addr;
 
 	/* Family independant */
-	hd->vers_type = (VRRP_VERSION << 4) | VRRP_PKT_ADVERT;
+	hd->vers_type = (VRRP_VERSION_2 << 4) | VRRP_PKT_ADVERT;
 	hd->vrid = vrrp->vrid;
-	hd->priority = prio;
-	hd->naddr = (!LIST_ISEMPTY(vrrp->vip)) ? LIST_SIZE(vrrp->vip) : 0;
-	hd->auth_type = vrrp->auth_type;
-	hd->adver_int = vrrp->adver_int / TIMER_HZ;
+	hd->priority = vrrp->effective_priority;
+	hd->naddr = (uint8_t)((!LIST_ISEMPTY(vrrp->vip)) ? (uint8_t)LIST_SIZE(vrrp->vip) : 0);
+#ifdef _WITH_VRRP_AUTH_
+	hd->v2.auth_type = vrrp->auth_type;
+#else
+	hd->v2.auth_type = VRRP_AUTH_NONE;
+#endif
+	hd->v2.adver_int = (uint8_t)(vrrp->adver_int / TIMER_HZ);
 
 	/* Family specific */
 	if (vrrp->family == AF_INET) {
 		/* copy the ip addresses */
-		iparr = (uint32_t *) ((char *) hd + sizeof (*hd));
+		iparr = (struct in_addr *) ((char *) hd + sizeof (*hd));
 		if (!LIST_ISEMPTY(vrrp->vip)) {
 			for (e = LIST_HEAD(vrrp->vip); e; ELEMENT_NEXT(e)) {
 				ip_addr = ELEMENT_DATA(e);
-				if (IP_IS6(ip_addr))
-					continue;
-				else
-					iparr[i++] = ip_addr->u.sin.sin_addr.s_addr;
+				iparr[i++] = ip_addr->u.sin.sin_addr;
 			}
 		}
 
+#ifdef _WITH_VRRP_AUTH_
 		/* copy the passwd if the authentication is VRRP_AH_PASS */
 		if (vrrp->auth_type == VRRP_AUTH_PASS) {
-			int vip_count = (!LIST_ISEMPTY(vrrp->vip)) ? LIST_SIZE(vrrp->vip) : 0;
+			unsigned vip_count = (!LIST_ISEMPTY(vrrp->vip)) ? LIST_SIZE(vrrp->vip) : 0;
 			char *pw = (char *) hd + sizeof (*hd) + vip_count * 4;
 			memcpy(pw, vrrp->auth_data, sizeof (vrrp->auth_data));
 		}
+#endif
+
+		/* finally compute vrrp checksum */
+		hd->chksum = 0;
+		hd->chksum = in_csum((uint16_t *)hd, vrrp_pkt_len(vrrp), 0, NULL);
+	} else if (vrrp->family == AF_INET6) {
+		ip6arr = (struct in6_addr *)((char *) hd + sizeof(*hd));
+		if (!LIST_ISEMPTY(vrrp->vip)) {
+			for (e = LIST_HEAD(vrrp->vip); e; ELEMENT_NEXT(e)) {
+				ip_addr = ELEMENT_DATA(e);
+				ip6arr[i++] = ip_addr->u.sin6_addr;
+			}
+		}
+		/* Kernel will update checksum field. let it be 0 now. */
+		hd->chksum = 0;
 	}
+}
+
+/* build VRRPv3 header */
+static void
+vrrp_build_vrrp_v3(vrrp_t *vrrp, char *buffer, struct iphdr *ip)
+{
+	int i = 0;
+	vrrphdr_t *hd = (vrrphdr_t *) buffer;
+	struct in_addr *iparr;
+	struct in6_addr *ip6arr;
+	element e;
+	ip_address_t *ip_addr;
+	ipv4_phdr_t ipv4_phdr;
+
+	/* Family independant */
+	hd->vers_type = (VRRP_VERSION_3 << 4) | VRRP_PKT_ADVERT;
+	hd->vrid = vrrp->vrid;
+	hd->priority = vrrp->effective_priority;
+	hd->naddr = (uint8_t)((!LIST_ISEMPTY(vrrp->vip)) ? LIST_SIZE(vrrp->vip) : 0);
+	hd->v3.adver_int  = htons((vrrp->adver_int / TIMER_CENTI_HZ) & 0x0FFF); /* interval in centiseconds, reserved bits zero */
 
-	/* finaly compute vrrp checksum */
+	/* For IPv4 to calculate the checksum, the value must start as 0.
+	 * For IPv6, the kernel will update checksum field. */
 	hd->chksum = 0;
-	hd->chksum = in_csum((u_short *) hd, vrrp_hd_len(vrrp), 0);
 
-	return 0;
+	/* Family specific */
+	if (vrrp->family == AF_INET) {
+		/* copy the ip addresses */
+		iparr = (struct in_addr *) ((char *) hd + sizeof(*hd));
+		LIST_FOREACH(vrrp->vip, ip_addr, e)
+			iparr[i++] = ip_addr->u.sin.sin_addr;
+
+		/* Create IPv4 pseudo-header */
+		ipv4_phdr.src   = VRRP_PKT_SADDR(vrrp);
+#ifdef _WITH_UNICAST_CHKSUM_COMPAT_
+		if (vrrp->unicast_chksum_compat >= CHKSUM_COMPATIBILITY_MIN_COMPAT)
+			ipv4_phdr.dst = global_data->vrrp_mcast_group4.sin_addr.s_addr;
+		else
+#endif
+			ipv4_phdr.dst = ip->daddr;
+		ipv4_phdr.zero  = 0;
+		ipv4_phdr.proto = IPPROTO_VRRP;
+		ipv4_phdr.len   = htons(vrrp_pkt_len(vrrp));
+
+		/* finally compute vrrp checksum */
+		in_csum((uint16_t *)&ipv4_phdr, sizeof(ipv4_phdr), 0, &vrrp->ipv4_csum);
+		hd->chksum = in_csum((uint16_t *) hd, vrrp_pkt_len(vrrp), vrrp->ipv4_csum, NULL);
+	} else if (vrrp->family == AF_INET6) {
+		ip6arr = (struct in6_addr *)((char *) hd + sizeof(*hd));
+		LIST_FOREACH(vrrp->vip, ip_addr, e)
+			ip6arr[i++] = ip_addr->u.sin6_addr;
+	}
+}
+
+/* build VRRP header */
+static void
+vrrp_build_vrrp(vrrp_t *vrrp, char *buffer, struct iphdr *ip_hdr)
+{
+	if (vrrp->version == VRRP_VERSION_3)
+		vrrp_build_vrrp_v3(vrrp, buffer, ip_hdr);
+	else
+		vrrp_build_vrrp_v2(vrrp, buffer);
 }
 
 /* build VRRP packet */
 static void
-vrrp_build_pkt(vrrp_t * vrrp, int prio, struct sockaddr_storage *addr)
+vrrp_build_pkt(vrrp_t * vrrp)
 {
 	char *bufptr;
-	uint32_t dst;
-	int len;
-
-	/* save reference values */
-	bufptr = VRRP_SEND_BUFFER(vrrp);
-	len = VRRP_SEND_BUFFER_SIZE(vrrp);
 
 	if (vrrp->family == AF_INET) {
+		/* save reference values */
+		bufptr = vrrp->send_buffer;
+
 		/* build the ip header */
-		dst = (addr) ? inet_sockaddrip4(addr) : 
-			       ((struct sockaddr_in *) &global_data->vrrp_mcast_group4)->sin_addr.s_addr;
-		vrrp_build_ip4(vrrp, bufptr, len, dst);
+		vrrp_build_ip4(vrrp, vrrp->send_buffer);
 
 		/* build the vrrp header */
-		vrrp->send_buffer += vrrp_iphdr_len(vrrp);
-
-		if (vrrp->auth_type == VRRP_AUTH_AH)
-			vrrp->send_buffer += vrrp_ipsecah_len();
-		vrrp->send_buffer_size -= vrrp_iphdr_len(vrrp);
+		bufptr += sizeof(struct iphdr);
 
+#ifdef _WITH_VRRP_AUTH_
 		if (vrrp->auth_type == VRRP_AUTH_AH)
-			vrrp->send_buffer_size -= vrrp_ipsecah_len();
-		vrrp_build_vrrp(vrrp, prio, vrrp->send_buffer);
+			bufptr += sizeof(ipsec_ah_t);
+#endif
+		vrrp_build_vrrp(vrrp, bufptr, (struct iphdr *)vrrp->send_buffer);
 
+#ifdef _WITH_VRRP_AUTH_
 		/* build the IPSEC AH header */
-		if (vrrp->auth_type == VRRP_AUTH_AH) {
-			vrrp->send_buffer_size += vrrp_iphdr_len(vrrp) + vrrp_ipsecah_len();
-			vrrp_build_ipsecah(vrrp, bufptr, VRRP_SEND_BUFFER_SIZE(vrrp));
-		}
-	} else if (vrrp->family == AF_INET6) {
-		vrrp_build_vrrp(vrrp, prio, VRRP_SEND_BUFFER(vrrp));
+		if (vrrp->auth_type == VRRP_AUTH_AH)
+			vrrp_build_ipsecah(vrrp, vrrp->send_buffer, vrrp->send_buffer_size);
+#endif
 	}
-
-	/* restore reference values */
-	vrrp->send_buffer = bufptr;
-	vrrp->send_buffer_size = len;
+	else if (vrrp->family == AF_INET6)
+		vrrp_build_vrrp(vrrp, vrrp->send_buffer, NULL);
 }
 
 /* send VRRP packet */
 static int
-vrrp_send_pkt(vrrp_t * vrrp, struct sockaddr_storage *addr)
+vrrp_build_ancillary_data(struct msghdr *msg, char *cbuf, struct sockaddr_storage *src, const vrrp_t *vrrp)
 {
-	struct sockaddr_storage *src = &vrrp->saddr;
-	struct sockaddr_in6 dst6;
+	struct cmsghdr *cmsg;
 	struct in6_pktinfo *pkt;
-	struct sockaddr_in dst4;
+
+	if (src->ss_family != AF_INET6)
+		return -1;
+
+	msg->msg_control = cbuf;
+	msg->msg_controllen = CMSG_SPACE(sizeof(struct in6_pktinfo));
+
+	cmsg = CMSG_FIRSTHDR(msg);
+	cmsg->cmsg_level = IPPROTO_IPV6;
+	cmsg->cmsg_type = IPV6_PKTINFO;
+	cmsg->cmsg_len = CMSG_LEN(sizeof(struct in6_pktinfo));
+
+	pkt = (struct in6_pktinfo *) CMSG_DATA(cmsg);
+	memset(pkt, 0, sizeof(struct in6_pktinfo));
+	pkt->ipi6_addr = ((struct sockaddr_in6 *) src)->sin6_addr;
+#ifdef _HAVE_VRRP_VMAC_
+	if (__test_bit(VRRP_VMAC_XMITBASE_BIT, &vrrp->vmac_flags))
+		pkt->ipi6_ifindex = vrrp->ifp->base_ifp->ifindex;
+	else
+#endif
+		pkt->ipi6_ifindex = vrrp->ifp->ifindex;
+
+	return 0;
+}
+
+static ssize_t
+vrrp_send_pkt(vrrp_t * vrrp, unicast_peer_t *peer)
+{
+	struct sockaddr_storage *src = &vrrp->saddr;
 	struct msghdr msg;
-	struct cmsghdr *cmsg;
 	struct iovec iov;
 	char cbuf[256];
 
@@ -584,147 +1446,120 @@ vrrp_send_pkt(vrrp_t * vrrp, struct sockaddr_storage *addr)
 	memset(&msg, 0, sizeof(msg));
 	msg.msg_iov = &iov;
 	msg.msg_iovlen = 1;
-	iov.iov_base = VRRP_SEND_BUFFER(vrrp);
-	iov.iov_len = VRRP_SEND_BUFFER_SIZE(vrrp);
+	iov.iov_base = vrrp->send_buffer;
+	iov.iov_len = vrrp->send_buffer_size;
 
 	/* Unicast sending path */
-	if (addr && addr->ss_family == AF_INET) {
-		msg.msg_name = (struct sockaddr_in *) addr;
+	if (peer && peer->address.ss_family == AF_INET) {
+		msg.msg_name = &peer->address;
 		msg.msg_namelen = sizeof(struct sockaddr_in);
-	} else if (addr && addr->ss_family == AF_INET6) {
-		msg.msg_name = (struct sockaddr_in6 *) addr;
+	} else if (peer && peer->address.ss_family == AF_INET6) {
+		msg.msg_name = &peer->address;
 		msg.msg_namelen = sizeof(struct sockaddr_in6);
-		if (src->ss_family == AF_INET6) {
-			msg.msg_control = cbuf;
-			msg.msg_controllen = CMSG_SPACE(sizeof(struct in6_pktinfo));
-
-			cmsg = CMSG_FIRSTHDR(&msg);
-			cmsg->cmsg_level = IPPROTO_IPV6;
-			cmsg->cmsg_type = IPV6_PKTINFO;
-			cmsg->cmsg_len = CMSG_LEN(sizeof(struct in6_pktinfo));
-
-			pkt = (struct in6_pktinfo *) CMSG_DATA(cmsg);
-			memset(pkt, 0, sizeof(struct in6_pktinfo));
-			pkt->ipi6_addr = ((struct sockaddr_in6 *) src)->sin6_addr;
-		}
+		vrrp_build_ancillary_data(&msg, cbuf, src, vrrp);
 	} else if (vrrp->family == AF_INET) { /* Multicast sending path */
-		memset(&dst4, 0, sizeof(dst4));
-		dst4.sin_family = AF_INET;
-		dst4.sin_addr = ((struct sockaddr_in *) &global_data->vrrp_mcast_group4)->sin_addr;
-		msg.msg_name = &dst4;
-		msg.msg_namelen = sizeof(dst4);
+		msg.msg_name = &global_data->vrrp_mcast_group4;
+		msg.msg_namelen = sizeof(struct sockaddr_in);
 	} else if (vrrp->family == AF_INET6) {
-		memset(&dst6, 0, sizeof(dst6));
-		dst6.sin6_family = AF_INET6;
-		dst6.sin6_addr = ((struct sockaddr_in6 *) &global_data->vrrp_mcast_group6)->sin6_addr;
-		msg.msg_name = &dst6;
-		msg.msg_namelen = sizeof(dst6);
+		msg.msg_name = &global_data->vrrp_mcast_group6;
+		msg.msg_namelen = sizeof(struct sockaddr_in6);
+		vrrp_build_ancillary_data(&msg, cbuf, src, vrrp);
 	}
 
+#ifdef CHECKSUM_DIAGNOSTICS
+	if (vrrp->family == AF_INET)
+		check_tx_checksum(vrrp, peer);
+#endif
+
 	/* Send the packet */
-	return sendmsg(vrrp->fd_out, &msg, (addr) ? 0 : MSG_DONTROUTE);
+	return sendmsg(vrrp->sockets->fd_out, &msg, (peer) ? 0 : MSG_DONTROUTE);
 }
 
 /* Allocate the sending buffer */
 static void
 vrrp_alloc_send_buffer(vrrp_t * vrrp)
 {
-	vrrp->send_buffer_size = vrrp_hd_len(vrrp);
-
-	if (vrrp->family == AF_INET) {
-		vrrp->send_buffer_size = vrrp_iphdr_len(vrrp) + vrrp_hd_len(vrrp);
-		if (vrrp->auth_type == VRRP_AUTH_AH)
-			vrrp->send_buffer_size += vrrp_ipsecah_len();
-	}
+	vrrp->send_buffer_size = vrrp_adv_len(vrrp);
 
-	vrrp->send_buffer = MALLOC(VRRP_SEND_BUFFER_SIZE(vrrp));
+	vrrp->send_buffer = MALLOC(vrrp->send_buffer_size);
 }
 
-/* send VRRP advertissement */
-int
-vrrp_send_adv(vrrp_t * vrrp, int prio)
+/* send VRRP advertisement */
+void
+vrrp_send_adv(vrrp_t * vrrp, uint8_t prio)
 {
-	struct sockaddr_storage *addr;
-	list l = vrrp->unicast_peer;
+	unicast_peer_t *peer;
 	element e;
-	int ret;
-
-	/* alloc send buffer */
-	if (!vrrp->send_buffer)
-		vrrp_alloc_send_buffer(vrrp);
-	else
-		memset(vrrp->send_buffer, 0, VRRP_SEND_BUFFER_SIZE(vrrp));
 
-	/* build the packet */
-	if (!LIST_ISEMPTY(l)) {
-		for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-			addr = ELEMENT_DATA(e);
-			vrrp_build_pkt(vrrp, prio, addr);
-			ret = vrrp_send_pkt(vrrp, addr);
-			if (ret < 0) {
-				log_message(LOG_INFO, "VRRP_Instance(%s) Cant sent advert to %s (%m)"
-						    , vrrp->iname, inet_sockaddrtos(addr));
-			}
+#ifdef _HAVE_VRRP_IPVLAN_
+	if (__test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags) &&
+	    vrrp->saddr.ss_family == AF_UNSPEC &&
+	    vrrp->family == AF_INET6) {
+		if (!vrrp->ifp->sin6_addr.s6_addr32[0] &&
+		    !vrrp->ifp->sin6_addr.s6_addr32[1] &&
+		    !vrrp->ifp->sin6_addr.s6_addr32[2] &&
+		    !vrrp->ifp->sin6_addr.s6_addr32[3]) {
+			log_message(LOG_INFO, "No address yet for %s", vrrp->ifp->ifname);
+			return;
 		}
-	} else {
-		vrrp_build_pkt(vrrp, prio, NULL);
-		vrrp_send_pkt(vrrp, NULL);
+		inet_ip6tosockaddr(&vrrp->ifp->sin6_addr, &vrrp->saddr);
 	}
+#endif
 
-	/* send it */
-	return 0;
-}
-
-/* Received packet processing */
-int
-vrrp_check_packet(vrrp_t * vrrp, char *buf, int buflen)
-{
-	int ret;
-
-	if (buflen > 0) {
-		ret = vrrp_in_chk(vrrp, buf);
+	/* build the packet */
+	vrrp_update_pkt(vrrp, prio, NULL);
 
-		if (ret == VRRP_PACKET_DROP) {
-			log_message(LOG_INFO, "Sync instance needed on %s !!!",
-			       IF_NAME(vrrp->ifp));
+	/* Send the packet, but don't log an error if it is a prio 0 message
+	 * and the interface is down. */
+	if (LIST_ISEMPTY(vrrp->unicast_peer)) {
+		if (vrrp_send_pkt(vrrp, NULL) == -1 &&
+		    (prio != VRRP_PRIO_STOP || errno != ENETUNREACH || IF_FLAGS_UP(vrrp->ifp)))
+			log_message(LOG_INFO, "(%s): send advert error %d (%m)", vrrp->iname, errno);
+	}
+	else {
+		LIST_FOREACH(vrrp->unicast_peer, peer, e) {
+			if (vrrp->family == AF_INET)
+				vrrp_update_pkt(vrrp, prio, &peer->address);
+			if (vrrp_send_pkt(vrrp, peer) == -1 &&
+			    (prio != VRRP_PRIO_STOP || errno != ENETUNREACH || IF_FLAGS_UP(vrrp->ifp)))
+				log_message(LOG_INFO, "(%s) Cant send advert to %s (%m)"
+						    , vrrp->iname, inet_sockaddrtos(&peer->address));
 		}
-
-		if (ret == VRRP_PACKET_KO)
-			log_message(LOG_INFO, "bogus VRRP packet received on %s !!!",
-			       IF_NAME(vrrp->ifp));
-		return ret;
 	}
 
-	return VRRP_PACKET_NULL;
+	++vrrp->stats->advert_sent;
 }
 
 /* Gratuitous ARP on each VIP */
 static void
-vrrp_send_update(vrrp_t * vrrp, ip_address_t * ipaddress, int idx)
+vrrp_send_update(vrrp_t * vrrp, ip_address_t * ipaddress, bool log_msg)
 {
-	char *msg;
-	char addr_str[41];
+	const char *msg;
+	char addr_str[INET6_ADDRSTRLEN];
 
-	if (!IP_IS6(ipaddress)) {
-		msg = "gratuitous ARPs";
-		inet_ntop(AF_INET, &ipaddress->u.sin.sin_addr, addr_str, 41);
+	if (!IP_IS6(ipaddress))
 		send_gratuitous_arp(ipaddress);
-	} else {
-		msg = "Unsolicited Neighbour Adverts";
-		inet_ntop(AF_INET6, &ipaddress->u.sin6_addr, addr_str, 41);
-		ndisc_send_unsolicited_na(ipaddress);
-	}
+	else
+		ndisc_send_unsolicited_na(vrrp, ipaddress);
+
+	if (log_msg && __test_bit(LOG_DETAIL_BIT, &debug)) {
+		if (!IP_IS6(ipaddress)) {
+			msg = "gratuitous ARPs";
+			inet_ntop(AF_INET, &ipaddress->u.sin.sin_addr, addr_str, sizeof(addr_str));
+		} else {
+			msg = "Unsolicited Neighbour Adverts";
+			inet_ntop(AF_INET6, &ipaddress->u.sin6_addr, addr_str, sizeof(addr_str));
+		}
 
-	if (0 == idx && debug & 32) {
-		log_message(LOG_INFO, "VRRP_Instance(%s) Sending %s on %s for %s",
+		log_message(LOG_INFO, "(%s) Sending/queueing %s on %s for %s",
 			    vrrp->iname, msg, IF_NAME(ipaddress->ifp), addr_str);
 	}
 }
 
 void
-vrrp_send_link_update(vrrp_t * vrrp)
+vrrp_send_link_update(vrrp_t * vrrp, unsigned rep)
 {
-	int j;
+	unsigned j;
 	ip_address_t *ipaddress;
 	element e;
 
@@ -732,625 +1567,2423 @@ vrrp_send_link_update(vrrp_t * vrrp)
 	if (!VRRP_VIP_ISSET(vrrp))
 		return;
 
+	/* If the interface doesn't support ARP, then don't send
+	 * any ARP messages. */
+	if (vrrp->ifp->ifi_flags & IFF_NOARP)
+		return;
+
 	/* send gratuitous arp for each virtual ip */
-	for (j = 0; j < 5; j++) {
+	for (j = 0; j < rep; j++) {
 		if (!LIST_ISEMPTY(vrrp->vip)) {
 			for (e = LIST_HEAD(vrrp->vip); e; ELEMENT_NEXT(e)) {
 				ipaddress = ELEMENT_DATA(e);
-				vrrp_send_update(vrrp, ipaddress, j);
+				vrrp_send_update(vrrp, ipaddress, !j);
 			}
 		}
 
 		if (!LIST_ISEMPTY(vrrp->evip)) {
 			for (e = LIST_HEAD(vrrp->evip); e; ELEMENT_NEXT(e)) {
 				ipaddress = ELEMENT_DATA(e);
-				vrrp_send_update(vrrp, ipaddress, j);
+				vrrp_send_update(vrrp, ipaddress, !j);
 			}
 		}
 	}
 }
 
+static void
+vrrp_remove_delayed_arp(vrrp_t *vrrp)
+{
+	ip_address_t *ipaddress;
+	element e;
+
+	if (!LIST_ISEMPTY(vrrp->vip)) {
+		for (e = LIST_HEAD(vrrp->vip); e; ELEMENT_NEXT(e)) {
+			ipaddress = ELEMENT_DATA(e);
+			ipaddress->garp_gna_pending = false;
+		}
+	}
+
+	if (!LIST_ISEMPTY(vrrp->evip)) {
+		for (e = LIST_HEAD(vrrp->evip); e; ELEMENT_NEXT(e)) {
+			ipaddress = ELEMENT_DATA(e);
+			ipaddress->garp_gna_pending = false;
+		}
+	}
+	vrrp->garp_pending = false;
+	vrrp->gna_pending = false;
+}
+
 /* becoming master */
-void
+static void
 vrrp_state_become_master(vrrp_t * vrrp)
 {
+
+	++vrrp->stats->become_master;
+
+	if (vrrp->version == VRRP_VERSION_3)
+		log_message(LOG_INFO, "(%s) using locally configured advertisement interval (%u milli-sec)",
+					vrrp->iname, vrrp->adver_int / (TIMER_HZ / 1000));
+
 	/* add the ip addresses */
+#ifdef _WITH_FIREWALL_
+	vrrp_handle_accept_mode(vrrp, IPADDRESS_ADD, false);
+#endif
 	if (!LIST_ISEMPTY(vrrp->vip))
-		vrrp_handle_ipaddress(vrrp, IPADDRESS_ADD, VRRP_VIP_TYPE);
+		vrrp_handle_ipaddress(vrrp, IPADDRESS_ADD, VRRP_VIP_TYPE, false);
 	if (!LIST_ISEMPTY(vrrp->evip))
-		vrrp_handle_ipaddress(vrrp, IPADDRESS_ADD, VRRP_EVIP_TYPE);
-	vrrp->vipset = 1;
+		vrrp_handle_ipaddress(vrrp, IPADDRESS_ADD, VRRP_EVIP_TYPE, false);
+	vrrp->vipset = true;
 
+#ifdef _HAVE_FIB_ROUTING_
 	/* add virtual routes */
 	if (!LIST_ISEMPTY(vrrp->vroutes)){
 		vrrp_handle_iproutes(vrrp, IPROUTE_ADD);
     }
 
-	/* remotes neighbour update */
-	vrrp_send_link_update(vrrp);
+	/* add virtual rules */
+	if (!LIST_ISEMPTY(vrrp->vrules))
+		vrrp_handle_iprules(vrrp, IPRULE_ADD, false);
+#endif
+
+	kernel_netlink_poll();
+
+	vrrp_send_link_update(vrrp, vrrp->garp_rep);
 
 	/* set refresh timer */
-	if (vrrp->garp_refresh) {
-		vrrp->garp_refresh_timer = timer_add_long(time_now, vrrp->garp_refresh);
+	if (timerisset(&vrrp->garp_refresh)) {
+		vrrp->garp_refresh_timer = timer_add_now(vrrp->garp_refresh);
 	}
 
 	/* Check if notify is needed */
-	notify_instance_exec(vrrp, VRRP_STATE_MAST);
+	send_instance_notifies(vrrp);
 
-#ifdef _WITH_SNMP_
-	vrrp_snmp_instance_trap(vrrp);
-#endif
-
-#ifdef _HAVE_IPVS_SYNCD_
+#ifdef _WITH_LVS_
 	/* Check if sync daemon handling is needed */
-	if (vrrp->lvs_syncd_if)
-		ipvs_syncd_master(vrrp->lvs_syncd_if, vrrp->vrid);
+	if (global_data->lvs_syncd.vrrp == vrrp)
+		ipvs_syncd_master(&global_data->lvs_syncd);
 #endif
+	vrrp->last_transition = timer_now();
 }
 
 void
 vrrp_state_goto_master(vrrp_t * vrrp)
 {
-	/*
-	 * Send an advertisement. To force a new master
-	 * election.
-	 */
-	if (vrrp->sync && !vrrp_sync_goto_master(vrrp)) {
-		/*
-		 * Set quick sync flag to enable faster transition, i.e. check
-		 * again in the next interval instead of waiting three.
-		 */
-		vrrp->quick_sync = 1;
+	if (vrrp->sync && !vrrp_sync_can_goto_master(vrrp))
+	{
+		vrrp->wantstate = VRRP_STATE_MAST;
 		return;
 	}
 
-	vrrp_send_adv(vrrp, vrrp->effective_priority);
+#if defined _WITH_VRRP_AUTH_
+	/* If becoming MASTER in IPSEC AH AUTH, we reset the anti-replay */
+	if (vrrp->ipsecah_counter.cycle) {
+		vrrp->ipsecah_counter.cycle = false;
+		vrrp->ipsecah_counter.seq_number = 0;
+	}
+#endif
+
+#ifdef _WITH_SNMP_RFCV3_
+	vrrp->stats->master_reason = vrrp->stats->next_master_reason;
+#endif
 
 	vrrp->state = VRRP_STATE_MAST;
-	log_message(LOG_INFO, "VRRP_Instance(%s) Transition to MASTER STATE"
-			    , vrrp->iname);
+	vrrp_init_instance_sands(vrrp);
+	vrrp_state_master_tx(vrrp);
 }
 
 /* leaving master state */
 void
-vrrp_restore_interface(vrrp_t * vrrp, int advF)
+vrrp_restore_interface(vrrp_t * vrrp, bool advF, bool force)
 {
-        /* if we stop vrrp, warn the other routers to speed up the recovery */
+	/* if we stop vrrp, warn the other routers to speed up the recovery */
 	if (advF) {
-	        syslog(LOG_INFO, "VRRP_Instance(%s) sending 0 priority",
-		       vrrp->iname);
 		vrrp_send_adv(vrrp, VRRP_PRIO_STOP);
+		++vrrp->stats->pri_zero_sent;
+		log_message(LOG_INFO, "(%s) sent 0 priority", vrrp->iname);
 	}
 
+#ifdef _HAVE_FIB_ROUTING_
+	/* remove virtual rules */
+	if (!LIST_ISEMPTY(vrrp->vrules))
+		vrrp_handle_iprules(vrrp, IPRULE_DEL, force);
+
 	/* remove virtual routes */
 	if (!LIST_ISEMPTY(vrrp->vroutes))
 		vrrp_handle_iproutes(vrrp, IPROUTE_DEL);
+#endif
+
+	/* empty the delayed arp list */
+	vrrp_remove_delayed_arp(vrrp);
 
 	/*
 	 * Remove the ip addresses.
 	 *
-	 * If started with "--dont-release-vrrp" (debug & 8) then try to remove
+	 * If started with "--dont-release-vrrp" then try to remove
 	 * addresses even if we didn't add them during this run.
+	 *
+	 * If "--release-vips" is set then try to release any virtual addresses.
+	 * kill -1 tells keepalived to reread its config.  If a config change
+	 * (such as lower priority) causes a state transition to backup then
+	 * keepalived doesn't remove the VIPs.  Then we have duplicate IP addresses
+	 * on both master/backup.
 	 */
-	if (debug & 8 || VRRP_VIP_ISSET(vrrp)) {
+	if (force ||
+	    VRRP_VIP_ISSET(vrrp) ||
+	    __test_bit(DONT_RELEASE_VRRP_BIT, &debug) ||
+	    __test_bit(RELEASE_VIPS_BIT, &debug)) {
 		if (!LIST_ISEMPTY(vrrp->vip))
-			vrrp_handle_ipaddress(vrrp, IPADDRESS_DEL,
-					      VRRP_VIP_TYPE);
+			vrrp_handle_ipaddress(vrrp, IPADDRESS_DEL, VRRP_VIP_TYPE, force);
 		if (!LIST_ISEMPTY(vrrp->evip))
-			vrrp_handle_ipaddress(vrrp, IPADDRESS_DEL,
-					      VRRP_EVIP_TYPE);
-		vrrp->vipset = 0;
+			vrrp_handle_ipaddress(vrrp, IPADDRESS_DEL, VRRP_EVIP_TYPE, force);
+#ifdef _WITH_FIREWALL_
+		vrrp_handle_accept_mode(vrrp, IPADDRESS_DEL, force);
+#endif
+		vrrp->vipset = false;
 	}
-
 }
 
 void
-vrrp_state_leave_master(vrrp_t * vrrp)
+vrrp_state_leave_master(vrrp_t * vrrp, bool advF)
 {
+#ifdef _WITH_LVS_
 	if (VRRP_VIP_ISSET(vrrp)) {
-#ifdef _HAVE_IPVS_SYNCD_
 		/* Check if sync daemon handling is needed */
-		if (vrrp->lvs_syncd_if)
-			ipvs_syncd_backup(vrrp->lvs_syncd_if, vrrp->vrid);
+		if (global_data->lvs_syncd.vrrp == vrrp)
+			ipvs_syncd_backup(&global_data->lvs_syncd);
+	}
 #endif
+
+	/* set the new vrrp state */
+	if (vrrp->wantstate == VRRP_STATE_BACK) {
+		log_message(LOG_INFO, "(%s) Entering BACKUP STATE", vrrp->iname);
+		vrrp->preempt_time.tv_sec = 0;
+// TODO - if we are called due to receiving a higher priority advert, do we overwrite master adver int ?
+		vrrp->master_adver_int = vrrp->adver_int;
+	}
+	else if (vrrp->wantstate == VRRP_STATE_FAULT) {
+		log_message(LOG_INFO, "(%s) Entering FAULT STATE", vrrp->iname);
+		vrrp_send_adv(vrrp, VRRP_PRIO_STOP);
+	}
+	else {
+		log_message(LOG_INFO, "(%s) vrrp_state_leave_master called with invalid wantstate %d", vrrp->iname, vrrp->wantstate);
+		return;
 	}
 
+	vrrp_restore_interface(vrrp, advF, false);
+	vrrp->state = vrrp->wantstate;
+
+	send_instance_notifies(vrrp);
+
+	/* Set the down timer */
+	vrrp->ms_down_timer = 3 * vrrp->master_adver_int + VRRP_TIMER_SKEW(vrrp);
+	vrrp_init_instance_sands(vrrp);
+	++vrrp->stats->release_master;
+	vrrp->last_transition = timer_now();
+}
+
+void
+vrrp_state_leave_fault(vrrp_t * vrrp)
+{
 	/* set the new vrrp state */
-	switch (vrrp->wantstate) {
-	case VRRP_STATE_BACK:
-		log_message(LOG_INFO, "VRRP_Instance(%s) Entering BACKUP STATE", vrrp->iname);
-		vrrp_restore_interface(vrrp, 0);
+	if (vrrp->wantstate == VRRP_STATE_MAST)
+		vrrp_state_goto_master(vrrp);
+	else {
+		log_message(LOG_INFO, "(%s) Entering %s STATE", vrrp->iname, vrrp->wantstate == VRRP_STATE_BACK ? "BACKUP" : "FAULT");
+		if (vrrp->wantstate == VRRP_STATE_FAULT && vrrp->state == VRRP_STATE_MAST) {
+			vrrp_send_adv(vrrp, VRRP_PRIO_STOP);
+			vrrp_restore_interface(vrrp, false, false);
+		}
 		vrrp->state = vrrp->wantstate;
-		notify_instance_exec(vrrp, VRRP_STATE_BACK);
-#ifdef _WITH_SNMP_
-		vrrp_snmp_instance_trap(vrrp);
-#endif
-		break;
-	case VRRP_STATE_GOTO_FAULT:
-		log_message(LOG_INFO, "VRRP_Instance(%s) Entering FAULT STATE", vrrp->iname);
-		vrrp_restore_interface(vrrp, 0);
-		vrrp->state = VRRP_STATE_FAULT;
-		notify_instance_exec(vrrp, VRRP_STATE_FAULT);
-		vrrp_send_adv(vrrp, VRRP_PRIO_STOP);
-#ifdef _WITH_SNMP_
-		vrrp_snmp_instance_trap(vrrp);
-#endif
-		break;
+		send_instance_notifies(vrrp);
+
+		if (vrrp->state == VRRP_STATE_BACK) {
+			vrrp->preempt_time.tv_sec = 0;
+			vrrp->master_adver_int = vrrp->adver_int;
+		}
 	}
 
 	/* Set the down timer */
-	vrrp->ms_down_timer = 3 * vrrp->adver_int + VRRP_TIMER_SKEW(vrrp);
+	vrrp->master_adver_int = vrrp->adver_int;
+	vrrp->ms_down_timer = 3 * vrrp->master_adver_int + VRRP_TIMER_SKEW(vrrp);
+	vrrp_init_instance_sands(vrrp);
+	vrrp->last_transition = timer_now();
 }
 
 /* BACKUP state processing */
 void
-vrrp_state_backup(vrrp_t * vrrp, char *buf, int buflen)
+vrrp_state_backup(vrrp_t *vrrp, const vrrphdr_t *hd, const char *buf, ssize_t buflen)
 {
-	vrrphdr_t *hd;
-	uint32_t saddr;
-	int ret = 0, proto;
+	ssize_t ret = 0;
+	unsigned master_adver_int;
+	bool check_addr = false;
+	timeval_t new_ms_down_timer;
+	bool ignore_advert = false;
 
 	/* Process the incoming packet */
-	hd = vrrp_get_header(vrrp->family, buf, &proto, &saddr);
-	ret = vrrp_check_packet(vrrp, buf, buflen);
-
-	if (ret == VRRP_PACKET_KO || ret == VRRP_PACKET_NULL) {
-		log_message(LOG_INFO, "VRRP_Instance(%s) ignoring received advertisment..."
-			            ,  vrrp->iname);
-		vrrp->ms_down_timer = 3 * vrrp->adver_int + VRRP_TIMER_SKEW(vrrp);
-	} else if (hd->priority == 0) {
+	if (!vrrp->skip_check_adv_addr ||
+	    vrrp->master_saddr.ss_family != vrrp->pkt_saddr.ss_family)
+		check_addr = true;
+	else {
+		/* Check if the addresses are different */
+		if (vrrp->pkt_saddr.ss_family == AF_INET) {
+			if (((struct sockaddr_in*)&vrrp->pkt_saddr)->sin_addr.s_addr != ((struct sockaddr_in*)&vrrp->master_saddr)->sin_addr.s_addr)
+				check_addr = true ;
+		} else {
+			if (!IN6_ARE_ADDR_EQUAL(&((struct sockaddr_in6*)&vrrp->pkt_saddr)->sin6_addr, &((struct sockaddr_in6*)&vrrp->master_saddr)->sin6_addr))
+				check_addr = true;
+		}
+	}
+	ret = vrrp_check_packet(vrrp, hd, buf, buflen, check_addr);
+
+	if (ret != VRRP_PACKET_OK)
+		ignore_advert = true;
+	else if (hd->priority == 0) {
+		log_message(LOG_INFO, "(%s) Backup received priority 0 advertisement", vrrp->iname);
 		vrrp->ms_down_timer = VRRP_TIMER_SKEW(vrrp);
-	} else if (vrrp->nopreempt || hd->priority >= vrrp->effective_priority ||
-		   timer_cmp(vrrp->preempt_time, timer_now()) > 0) {
-		vrrp->ms_down_timer = 3 * vrrp->adver_int + VRRP_TIMER_SKEW(vrrp);
-	} else if (hd->priority < vrrp->effective_priority) {
-		log_message(LOG_INFO, "VRRP_Instance(%s) forcing a new MASTER election"
-				    , vrrp->iname);
-		vrrp->wantstate = VRRP_STATE_GOTO_MASTER;
-		vrrp_send_adv(vrrp, vrrp->effective_priority);
+#ifdef _WITH_SNMP_RFCV3_
+		vrrp->stats->next_master_reason = VRRPV3_MASTER_REASON_PRIORITY;
+#endif
+	} else if (vrrp->nopreempt ||
+		   hd->priority >= vrrp->effective_priority ||
+		   (vrrp->preempt_delay &&
+		    (!vrrp->preempt_time.tv_sec ||
+		     timercmp(&vrrp->preempt_time, &time_now, >)))) {
+		if (vrrp->version == VRRP_VERSION_3) {
+			master_adver_int = (ntohs(hd->v3.adver_int) & 0x0FFF) * TIMER_CENTI_HZ;
+			/* As per RFC5798, set Master_Adver_Interval to Adver Interval contained
+			 * in the ADVERTISEMENT
+			 */
+			if (vrrp->master_adver_int != master_adver_int) {
+				log_message(LOG_INFO, "(%s) advertisement interval updated to %u milli-sec from %u milli-sec",
+						vrrp->iname, master_adver_int / (TIMER_HZ / 1000), vrrp->master_adver_int / (TIMER_HZ / 1000));
+				vrrp->master_adver_int = master_adver_int;
+			}
+		}
+		vrrp->ms_down_timer = 3 * vrrp->master_adver_int + VRRP_TIMER_SKEW(vrrp);
+		vrrp->master_saddr = vrrp->pkt_saddr;
+		vrrp->master_priority = hd->priority;
+
+#ifdef _WITH_SNMP_RFCV3_
+		vrrp->stats->next_master_reason = VRRPV3_MASTER_REASON_MASTER_NO_RESPONSE;
+#endif
+		if (vrrp->preempt_delay) {
+			if (hd->priority >= vrrp->effective_priority) {
+				if (vrrp->preempt_time.tv_sec) {
+					if (__test_bit(LOG_DETAIL_BIT, &debug))
+						log_message(LOG_INFO,
+							"(%s) stop preempt delay", vrrp->iname);
+					vrrp->preempt_time.tv_sec = 0;
+				}
+			} else if (!vrrp->preempt_time.tv_sec) {
+				if (__test_bit(LOG_DETAIL_BIT, &debug))
+					log_message(LOG_INFO,
+						"(%s) start preempt delay (%lu.%6.6lu)", vrrp->iname,
+						vrrp->preempt_delay / TIMER_HZ, vrrp->preempt_delay % TIMER_HZ);
+				vrrp->preempt_time = timer_add_long(timer_now(), vrrp->preempt_delay);
+			}
+		}
+
+		/* We might have been held in backup by a sync group, but if
+		 * ms_down_timer had expired, we would have wanted MASTER state.
+		 * Now we have received a backup, we want to be in BACKUP state. */
+		vrrp->wantstate = VRRP_STATE_BACK;
+	} else {
+		/* !nopreempt and lower priority advert and any preempt delay timer has expired */
+		log_message(LOG_INFO, "(%s) received lower priority (%d) advert from %s - discarding", vrrp->iname, hd->priority, inet_sockaddrtos(&vrrp->pkt_saddr));
+
+		ignore_advert = true;
+
+#ifdef _WITH_SNMP_RFCV3_
+		vrrp->stats->next_master_reason = VRRPV3_MASTER_REASON_PREEMPTED;
+#endif
+
+		/* We still want to record the master's address for SNMP purposes */
+		vrrp->master_saddr = vrrp->pkt_saddr;
+	}
+
+	if (ignore_advert) {
+		/* We need to reduce the down timer since we have ignored the advert */
+		set_time_now();
+		timersub(&vrrp->sands, &time_now, &new_ms_down_timer);
+		vrrp->ms_down_timer = new_ms_down_timer.tv_sec < 0 ? 0 : (uint32_t)(new_ms_down_timer.tv_sec * TIMER_HZ + new_ms_down_timer.tv_usec);
 	}
 }
 
 /* MASTER state processing */
-int
-vrrp_state_master_tx(vrrp_t * vrrp, const int prio)
+void
+vrrp_state_master_tx(vrrp_t * vrrp)
 {
-	int ret = 0;
-
 	if (!VRRP_VIP_ISSET(vrrp)) {
-		log_message(LOG_INFO, "VRRP_Instance(%s) Entering MASTER STATE"
+		log_message(LOG_INFO, "(%s) Entering MASTER STATE"
 				    , vrrp->iname);
 		vrrp_state_become_master(vrrp);
-		ret = 1;
-	} else if (vrrp->garp_refresh && timer_cmp(time_now, vrrp->garp_refresh_timer) > 0) {
-		vrrp_send_link_update(vrrp);
-		vrrp->garp_refresh_timer = timer_add_long(time_now, vrrp->garp_refresh);
+		/*
+		 * If we catch the master transition
+		 * register a gratuitous arp thread delayed to garp_delay secs.
+		 */
+		if (vrrp->garp_delay)
+			thread_add_timer(master, vrrp_gratuitous_arp_thread,
+					 vrrp, vrrp->garp_delay);
+	} else if (timerisset(&vrrp->garp_refresh) &&
+		   timercmp(&time_now, &vrrp->garp_refresh_timer, >)) {
+		vrrp_send_link_update(vrrp, vrrp->garp_refresh_rep);
+		vrrp->garp_refresh_timer = timer_add_now(vrrp->garp_refresh);
+	}
+
+	vrrp_send_adv(vrrp, vrrp->effective_priority);
+}
+
+static int
+vrrp_saddr_cmp(struct sockaddr_storage *addr, vrrp_t *vrrp)
+{
+	interface_t *ifp = vrrp->ifp;
+
+	/* Simple sanity */
+	if (vrrp->saddr.ss_family && addr->ss_family != vrrp->saddr.ss_family)
+		return 0;
+
+	/* Configured source IP address */
+	if (vrrp->saddr.ss_family)
+		return inet_sockaddrcmp(addr, &vrrp->saddr);
+
+	/* Default interface source IP address */
+	if (addr->ss_family == AF_INET)
+		return inet_inaddrcmp(addr->ss_family,
+				      &((struct sockaddr_in *) addr)->sin_addr,
+				      &ifp->sin_addr);
+	if (addr->ss_family == AF_INET6)
+		return inet_inaddrcmp(addr->ss_family,
+				      &((struct sockaddr_in6 *) addr)->sin6_addr,
+				      &ifp->sin6_addr);
+	return 0;
+}
+
+// TODO Return true to leave master state, false to remain master
+// TODO check all uses of master_adver_int (and simplify for VRRPv2)
+// TODO check all uses of effective_priority
+// TODO wantstate must be >= state
+// TODO SKEW_TIME should use master_adver_int USUALLY!!!
+// TODO check all use of ipsecah_counter, including cycle, and when we set seq_number
+bool
+vrrp_state_master_rx(vrrp_t * vrrp, const vrrphdr_t *hd, const char *buf, ssize_t buflen)
+{
+	ssize_t ret;
+#ifdef _WITH_VRRP_AUTH_
+	const ipsec_ah_t *ah;
+#endif
+	unsigned master_adver_int;
+	int addr_cmp;
+	vrrp_t *gvrrp;
+	element e;
+
+// TODO - could we get here with wantstate == FAULT and STATE != FAULT?
+	/* return on link failure */
+// TODO - not needed???
+	if (vrrp->wantstate == VRRP_STATE_FAULT) {
+		vrrp->master_adver_int = vrrp->adver_int;
+		vrrp->ms_down_timer = 3 * vrrp->master_adver_int + VRRP_TIMER_SKEW(vrrp);
+		vrrp->state = VRRP_STATE_FAULT;
+		send_instance_notifies(vrrp);
+		vrrp->last_transition = timer_now();
+		return true;
+	}
+
+	/* Process the incoming packet */
+	ret = vrrp_check_packet(vrrp, hd, buf, buflen, true);
+
+	if (ret != VRRP_PACKET_OK)
+		return false;
+
+	addr_cmp = vrrp_saddr_cmp(&vrrp->pkt_saddr, vrrp);
+
+	if (hd->priority == 0 ||
+	    (vrrp->higher_prio_send_advert &&
+	     (hd->priority > vrrp->effective_priority ||
+	      (hd->priority == vrrp->effective_priority && addr_cmp > 0)))) {
+		log_message(LOG_INFO, "(%s) Master received priority 0 or lower priority advert", vrrp->iname);
+		vrrp_send_adv(vrrp, vrrp->effective_priority);
+
+		if (hd->priority == 0)
+			return false;
+	}
+
+	if (hd->priority == vrrp->effective_priority) {
+		if (addr_cmp == 0)
+			log_message(LOG_INFO, "(%s) WARNING - equal priority advert received from remote host with our IP address.", vrrp->iname);
+		else if (vrrp->effective_priority == VRRP_PRIO_OWNER) {
+			/* If we are configured as the address owner (priority == 255), and we receive an advertisement
+			 * from another system indicating it is also the address owner, then there is a clear conflict.
+			 * Report a configuration error, and drop our priority as a workaround. */
+			log_message(LOG_INFO, "(%s) CONFIGURATION ERROR: local instance and a remote instance are both configured as address owner, please fix - reducing local priority", vrrp->iname);
+			vrrp->effective_priority = VRRP_PRIO_OWNER - 1;
+			vrrp->base_priority = VRRP_PRIO_OWNER - 1;
+		}
+	}
+
+	if (hd->priority < vrrp->effective_priority ||
+	    (hd->priority == vrrp->effective_priority &&
+	     addr_cmp < 0)) {
+		/* We receive a lower prio adv we just refresh remote ARP cache */
+		log_message(LOG_INFO, "(%s) Received advert from %s with lower priority %d, ours %d%s",
+					vrrp->iname,
+					inet_sockaddrtos(&vrrp->pkt_saddr),
+					hd->priority,
+					vrrp->effective_priority,
+					!vrrp->lower_prio_no_advert ? ", forcing new election" : "");
+#ifdef _WITH_VRRP_AUTH_
+		if (vrrp->auth_type == VRRP_AUTH_AH) {
+			ah = (const ipsec_ah_t *) (buf + sizeof(struct iphdr));
+			log_message(LOG_INFO, "(%s) IPSEC-AH : Syncing seq_num"
+					      " - Increment seq"
+					    , vrrp->iname);
+// TODO - why is seq_number taken from lower priority advert?
+			vrrp->ipsecah_counter.seq_number = ntohl(ah->seq_number) + 1;
+			vrrp->ipsecah_counter.cycle = false;
+		}
+#endif
+		if (!vrrp->lower_prio_no_advert)
+			vrrp_send_adv(vrrp, vrrp->effective_priority);
+		if (vrrp->garp_lower_prio_rep) {
+			vrrp_send_link_update(vrrp, vrrp->garp_lower_prio_rep);
+			if (vrrp->garp_lower_prio_delay)
+				thread_add_timer(master, vrrp_lower_prio_gratuitous_arp_thread,
+						 vrrp, vrrp->garp_lower_prio_delay);
+
+			/* If we are a member of a sync group, send GARP messages
+			 * for any other member of the group that has
+			 * garp_lower_prio_rep set */
+			if (vrrp->sync) {
+				LIST_FOREACH(vrrp->sync->vrrp_instances, gvrrp, e) {
+					if (gvrrp == vrrp)
+						continue;
+					if (!gvrrp->garp_lower_prio_rep)
+						continue;
+
+					vrrp_send_link_update(gvrrp, gvrrp->garp_lower_prio_rep);
+					if (gvrrp->garp_lower_prio_delay)
+						thread_add_timer(master, vrrp_lower_prio_gratuitous_arp_thread,
+								 gvrrp, gvrrp->garp_lower_prio_delay);
+				}
+			}
+		}
+
+		/* If a lower priority router has transitioned to master, there has presumably
+		 * been an intermittent communications break between the master and backup. It
+		 * appears that servers in an Amazon AWS environment can experience this.
+		 * The problem then occurs if a notify_master script is executed on the backup
+		 * that has just transitioned to master and the script executes something like
+		 * a `aws ec2 assign-private-ip-addresses` command, thereby removing the address
+		 * from the 'proper' master. Executing notify_master_rx_lower_pri notification
+		 * allows the 'proper' master to recover the secondary addresses. */
+		send_event_notify(vrrp, VRRP_EVENT_MASTER_RX_LOWER_PRI);
+
+		return false;
+	}
+
+	if (hd->priority > vrrp->effective_priority ||
+	    (hd->priority == vrrp->effective_priority && addr_cmp > 0)) {
+		if (hd->priority > vrrp->effective_priority)
+			log_message(LOG_INFO, "(%s) Master received advert from %s with higher priority %d, ours %d",
+						vrrp->iname,
+						inet_sockaddrtos(&vrrp->pkt_saddr),
+						hd->priority,
+						vrrp->effective_priority);
+		else
+			log_message(LOG_INFO, "(%s) Master received advert from %s with same priority %d but higher IP address than ours",
+						vrrp->iname,
+						inet_sockaddrtos(&vrrp->pkt_saddr),
+						hd->priority);
+#ifdef _WITH_VRRP_AUTH_
+		if (vrrp->auth_type == VRRP_AUTH_AH)
+			vrrp->ipsecah_counter.cycle = false;
+#endif
+
+		if (vrrp->version == VRRP_VERSION_3) {
+			master_adver_int = (ntohs(hd->v3.adver_int) & 0x0FFF) * TIMER_CENTI_HZ;
+			/* As per RFC5798, set Master_Adver_Interval to Adver Interval contained
+			 * in the ADVERTISEMENT
+			 */
+			if (vrrp->master_adver_int != master_adver_int) {
+				log_message(LOG_INFO, "(%s) advertisement interval updated from %u to %u milli-sec from higher priority master",
+						vrrp->iname, vrrp->master_adver_int / (TIMER_HZ / 1000), master_adver_int / (TIMER_HZ / 1000));
+				vrrp->master_adver_int = master_adver_int;
+			}
+		}
+		vrrp->ms_down_timer = 3 * vrrp->master_adver_int + VRRP_TIMER_SKEW(vrrp);
+		vrrp->master_priority = hd->priority;
+		vrrp->wantstate = VRRP_STATE_BACK;
+		vrrp->state = VRRP_STATE_BACK;
+		return true;
+	}
+
+	return false;
+}
+
+static void
+free_tracking_vrrp(void *data)
+{
+	FREE(data);
+}
+
+void
+add_vrrp_to_interface(vrrp_t *vrrp, interface_t *ifp, int weight, bool reverse, bool log_addr, track_t type)
+{
+	tracking_vrrp_t *etvp = NULL;
+	element e;
+	char addr_str[INET6_ADDRSTRLEN];
+
+	if (!LIST_EXISTS(ifp->tracking_vrrp)) {
+		ifp->tracking_vrrp = alloc_list(free_tracking_vrrp, dump_tracking_vrrp);
+
+		if (log_addr && __test_bit(LOG_DETAIL_BIT, &debug)) {
+			if (ifp->sin_addr.s_addr) {
+				inet_ntop(AF_INET, &ifp->sin_addr, addr_str, sizeof(addr_str));
+				log_message(LOG_INFO, "Assigned address %s for interface %s"
+						    , addr_str, ifp->ifname);
+			}
+			if (ifp->sin6_addr.s6_addr32[0]) {
+				inet_ntop(AF_INET6, &ifp->sin6_addr, addr_str, sizeof(addr_str));
+				log_message(LOG_INFO, "Assigned address %s for interface %s"
+						    , addr_str, ifp->ifname);
+			}
+		}
+	}
+	else if (type != TRACK_VRRP_DYNAMIC) {
+		/* Check if this is already in the list, and adjust the weight appropriately */
+		LIST_FOREACH(ifp->tracking_vrrp, etvp, e) {
+			if (etvp->vrrp == vrrp) {
+				if (etvp->type & (TRACK_VRRP | TRACK_IF | TRACK_SG) &&
+				    type & (TRACK_VRRP | TRACK_IF | TRACK_SG))
+					log_message(LOG_INFO, "(%s) track_interface %s is configured on VRRP instance and sync group. Remove vrrp instance or sync group config",
+							vrrp->iname, ifp->ifname);
+
+				/* Update the weight appropriately. We will use the sync group's
+				 * weight unless the vrrp setting is unweighted. */
+				if (etvp->weight && weight != VRRP_NOT_TRACK_IF) {
+					etvp->weight = weight;
+					etvp->weight_multiplier = reverse ? -1 : 1;
+				}
+
+				etvp->type |= type;
+
+				return;
+			}
+		}
+	}
+
+	/* Not in list so add */
+	etvp = MALLOC(sizeof *etvp);
+	etvp->vrrp = vrrp;
+	etvp->weight = weight;
+	etvp->weight_multiplier = reverse ? -1 : 1;
+	etvp->type = type;
+
+	/* We want the dynamic entries at the start of the list, so that it
+	 * will be processed before a weighted track */
+	if (type == TRACK_VRRP_DYNAMIC)
+		list_add_head(ifp->tracking_vrrp, etvp);
+	else
+		list_add(ifp->tracking_vrrp, etvp);
+
+	/* if vrrp->num_if_script_fault needs incrementing, it will be
+	 * done in initialise_tracking_priorities() */
+}
+
+void
+del_vrrp_from_interface(vrrp_t *vrrp, interface_t *ifp)
+{
+	tracking_vrrp_t *tvp;
+	element e, next;
+
+	LIST_FOREACH_NEXT(ifp->tracking_vrrp, tvp, e, next) {
+		if (tvp->vrrp == vrrp && tvp->type == TRACK_VRRP_DYNAMIC) {
+			if (!IF_ISUP(ifp) && !vrrp->dont_track_primary)
+				vrrp->num_script_if_fault--;
+			list_remove(ifp->tracking_vrrp, e);
+			break;
+		}
+
+		/* The dynamic entries are at the start of the list */
+		if (tvp->type != TRACK_VRRP_DYNAMIC)
+			break;
+	}
+}
+
+/* check for minimum configuration requirements */
+static bool
+chk_min_cfg(vrrp_t * vrrp)
+{
+	if (vrrp->vrid == 0) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) the virtual router id must be set", vrrp->iname);
+		return false;
+	}
+	if (!vrrp->ifp) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Unknown interface!", vrrp->iname);
+		return false;
 	}
 
-	vrrp_send_adv(vrrp,
-		      (prio == VRRP_PRIO_OWNER) ? VRRP_PRIO_OWNER :
-						  vrrp->effective_priority);
-	return ret;
+	return true;
 }
 
+/* open a VRRP sending socket */
 int
-vrrp_state_master_rx(vrrp_t * vrrp, char *buf, int buflen)
+open_vrrp_send_socket(sa_family_t family, int proto, interface_t *ifp, bool unicast)
 {
-	vrrphdr_t *hd = NULL;
-	int ret = 0, proto = 0;
-	uint32_t saddr = 0;
-	ipsec_ah_t *ah;
+	int fd = -1;
+	int val = 0;
+	socklen_t len = sizeof(val);
+
+	if (family != AF_INET && family != AF_INET6) {
+		log_message(LOG_INFO, "cant open raw socket. unknown family=%d"
+				    , family);
+		return -1;
+	}
+
+	/* Create and init socket descriptor */
+	fd = socket(family, SOCK_RAW | SOCK_CLOEXEC | SOCK_NONBLOCK, proto);
+	if (fd < 0) {
+		log_message(LOG_INFO, "cant open raw socket. errno=%d", errno);
+		return -1;
+	}
+#if !HAVE_DECL_SOCK_CLOEXEC
+	set_sock_flags(fd, F_SETFD, FD_CLOEXEC);
+#endif
+#if !HAVE_DECL_SOCK_NONBLOCK
+	set_sock_flags(fd, F_SETFL, O_NONBLOCK);
+#endif
+
+	/* We are not receiving on the send socket, there is no
+	 * point allocating any buffers to it */
+	if (setsockopt(fd, SOL_SOCKET, SO_RCVBUF, &val, len))
+		log_message(LOG_INFO, "vrrp set send socket buffer size error %d", errno);
+
+	if (family == AF_INET) {
+		/* Set v4 related */
+
+		/* It doesn't really matter if IP_MULTICAST_ALL is not supported
+		 * since we set a BPF filter to stop any packet being received
+		 * on the send socket */
+#if HAVE_DECL_IP_MULTICAST_ALL  /* Since Linux 2.6.31 */
+		if_setsockopt_mcast_all(family, &fd);
+#endif
+		if_setsockopt_hdrincl(&fd);
+		if (unicast)
+			if_setsockopt_bindtodevice(&fd, ifp);
+	} else if (family == AF_INET6) {
+		/* Set v6 related */
+		if_setsockopt_ipv6_checksum(&fd);
+		if (!unicast)
+			if_setsockopt_mcast_hops(family, &fd);
+	}
+
+	if (!unicast) {
+		if_setsockopt_mcast_if(family, &fd, ifp);
+		if_setsockopt_mcast_loop(family, &fd);
+	}
+
+	if_setsockopt_priority(&fd, family);
+
+	if_setsockopt_no_receive(&fd);
+
+	if (fd < 0)
+		return -1;
+
+	return fd;
+}
+
+/* open a VRRP socket and join the multicast group. */
+int
+open_vrrp_read_socket(sa_family_t family, int proto, interface_t *ifp, bool unicast, int rx_buf_size)
+{
+	int fd = -1;
+	int val = rx_buf_size;
+	socklen_t len = sizeof(val);
+	int on = 1;
+
+	/* open the socket */
+	fd = socket(family, SOCK_RAW | SOCK_CLOEXEC | SOCK_NONBLOCK, proto);
+	if (fd < 0) {
+		int err = errno;
+		log_message(LOG_INFO, "cant open raw socket. errno=%d", err);
+		return -1;
+	}
+#if !HAVE_DECL_SOCK_CLOEXEC
+	set_sock_flags(fd, F_SETFD, FD_CLOEXEC);
+#endif
+#if !HAVE_DECL_SOCK_NONBLOCK
+	set_sock_flags(fd, F_SETFL, O_NONBLOCK);
+#endif
+
+	if (rx_buf_size) {
+		if (setsockopt(fd, SOL_SOCKET, SO_RCVBUF, &val, len))
+			log_message(LOG_INFO, "vrrp set receive socket buffer size error %d", errno);
+	}
+
+#if HAVE_DECL_IP_MULTICAST_ALL  /* Since Linux 2.6.31 */
+	/* Ensure no unwanted multicast packets are queued to this interface */
+	if (family == AF_INET)
+		if_setsockopt_mcast_all(family, &fd);
+#endif
+
+	if (!unicast) {
+		/* Join the VRRP multicast group */
+		if_join_vrrp_group(family, &fd, ifp);
+
+#ifdef IPV6_RECVHOPLIMIT	/* Since Linux 2.6.14 */
+		/* IPv6 we need to receive the hop count as ancillary data */
+		if (family == AF_INET6) {
+			if (setsockopt(fd, IPPROTO_IPV6, IPV6_RECVHOPLIMIT, &on, sizeof on))
+				log_message(LOG_INFO, "fd %d - set IPV6_RECVHOPLIMIT error %d (%m)", fd, errno);
+		}
+#endif
+	}
+
+#ifdef IPV6_RECVPKTINFO		/* Since Linux 2.6.14 */
+	/* Receive the destination address as ancillary data to determine if packet multicast */
+	if (family == AF_INET6) {
+		if (setsockopt(fd, IPPROTO_IPV6, IPV6_RECVPKTINFO, &on, sizeof on))
+			log_message(LOG_INFO, "fd %d - set IPV6_RECVPKTINFO error %d (%m)", fd, errno);
+	}
+#endif
+
+#ifdef _NETWORK_TIMESTAMP_
+	if (do_network_timestamp) {
+#if 0
+		int flags   = SOF_TIMESTAMPING_RX_HARDWARE | SOF_TIMESTAMPING_RX_SOFTWARE ;
+		if (setsockopt(fd, SOL_SOCKET, SO_TIMESTAMPING, &flags, sizeof(flags)) < 0)
+			log_message(LOG_INFO, "ERROR: setsockopt %d SO_TIMESTAMPING", fd);
+		if (setsockopt(fd, SOL_SOCKET, SO_TIMESTAMP, &on, sizeof(on)) < 0)
+			log_message(LOG_INFO, "ERROR: setsockopt %d SO_TIMESTAMP", fd);
+#endif
+		if (setsockopt(fd, SOL_SOCKET, SO_TIMESTAMPNS, &on, sizeof(on)) < 0)	// This overrides SO_TIMESTAMP
+			log_message(LOG_INFO, "ERROR: setsockopt %d SO_TIMESTAMPNS", fd);
+	}
+#endif
+
+	/* Need to bind read socket so only process packets for interface we're
+	 * interested in.
+	 *
+	 * This is applicable for both unicast and multicast operation as well as
+	 * IPv4 and IPv6.
+	 */
+	if_setsockopt_bindtodevice(&fd, ifp);
+
+	if (fd < 0)
+		return -1;
+
+	if (family == AF_INET6) {
+		/* Let kernel calculate checksum. */
+		if_setsockopt_ipv6_checksum(&fd);
+	}
+
+	return fd;
+}
+
+/* Try to find a VRRP instance */
+static vrrp_t * __attribute__ ((pure))
+vrrp_exist(vrrp_t *old_vrrp, list *vrrp_list)
+{
+	element e;
+	vrrp_t *vrrp;
+
+	LIST_FOREACH(*vrrp_list, vrrp, e) {
+		if (vrrp->vrid != old_vrrp->vrid ||
+		    vrrp->family != old_vrrp->family)
+			continue;
+
+#ifndef _HAVE_VRRP_VMAC_
+		if (vrrp->ifp->ifindex == old_vrrp->ifp->ifindex)
+			return vrrp;
+#else
+		if (__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags) != __test_bit(VRRP_VMAC_BIT, &old_vrrp->vmac_flags))
+			continue;
+		if (!__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags)) {
+			if (vrrp->ifp->ifindex == old_vrrp->ifp->ifindex)
+				return vrrp;
+			continue;
+		}
+
+		if (vrrp->ifp->base_ifp->ifindex == old_vrrp->ifp->base_ifp->ifindex)
+			return vrrp;
+#endif
+	}
+
+	return NULL;
+}
+
+/* handle terminate state phase 1 */
+void
+restore_vrrp_interfaces(void)
+{
+	element e;
+	vrrp_t *vrrp;
+
+	/* Ensure any interfaces are in backup mode,
+	 * sending a priority 0 vrrp message
+	 */
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		/* Remove VIPs/VROUTEs/VRULEs */
+		if (vrrp->state == VRRP_STATE_MAST)
+			vrrp_restore_interface(vrrp, true, false);
+	}
+}
+
+/* handle terminate state */
+void
+shutdown_vrrp_instances(void)
+{
+	element e;
+	vrrp_t *vrrp;
+
+#ifdef _HAVE_VRRP_VMAC_
+	restore_rp_filter();
+#endif
+
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		/* We may not have an ifp if we are aborting at startup */
+		if (vrrp->ifp) {
+#ifdef _HAVE_VRRP_VMAC_
+			/* Remove VMAC. If we are shutting down due to a configuration
+			 * error, the VMACs may not be set up yet, and vrrp->ifp may
+			 * still point to the physical interface. */
+			if (vrrp->ifp->is_ours)
+				netlink_link_del_vmac(vrrp);
+#endif
+
+			if (vrrp->ifp->promote_secondaries)
+				reset_promote_secondaries(vrrp->ifp);
+		}
+	}
+}
+
+static void
+add_vrrp_to_track_script(vrrp_t *vrrp, tracked_sc_t *sc)
+{
+	tracking_vrrp_t *tvp, *etvp;
+	element e;
+
+	if (!LIST_EXISTS(sc->scr->tracking_vrrp))
+		sc->scr->tracking_vrrp = alloc_list(free_tracking_vrrp, dump_tracking_vrrp);
+	else {
+		/* Is this script already tracking the vrrp instance directly?
+		 * For this to be the case, the script was added directly on the vrrp instance,
+		 * and now we are adding it for a sync group. */
+		LIST_FOREACH(sc->scr->tracking_vrrp, etvp, e) {
+			if (etvp->vrrp == vrrp) {
+				/* Update the weight appropriately. We will use the sync group's
+				 * weight unless the vrrp setting is unweighted. */
+				log_message(LOG_INFO, "(%s) track_script %s is configured on VRRP instance and sync group. Remove vrrp instance config",
+						vrrp->iname, sc->scr->sname);
+
+				if (etvp->weight) {
+					etvp->weight = sc->weight;
+					etvp->weight_multiplier = sc->weight_reverse ? -1 : 1;
+				}
+				return;
+			}
+		}
+	}
+
+	tvp = MALLOC(sizeof(tracking_vrrp_t));
+	tvp->vrrp = vrrp;
+	tvp->weight = sc->weight;
+	tvp->weight_multiplier = sc->weight_reverse ? -1 : 1;
+	list_add(sc->scr->tracking_vrrp, tvp);
+}
+
+static void
+add_vrrp_to_track_file(vrrp_t *vrrp, tracked_file_t *tfl)
+{
+	tracking_vrrp_t *tvp, *etvp;
+	element e;
+
+	if (!LIST_EXISTS(tfl->file->tracking_vrrp))
+		tfl->file->tracking_vrrp = alloc_list(free_tracking_vrrp, dump_tracking_vrrp);
+	else {
+		/* Is this file already tracking the vrrp instance directly?
+		 * For this to be the case, the file was added directly on the vrrp instance,
+		 * and now we are adding it for a sync group. */
+		LIST_FOREACH(tfl->file->tracking_vrrp, etvp, e) {
+			if (etvp->vrrp == vrrp) {
+				/* Update the weight appropriately. We will use the sync group's
+				 * weight unless the vrrp setting is unweighted. */
+				log_message(LOG_INFO, "(%s) track_file %s is configured on VRRP instance and sync group. Remove vrrp instance config",
+						vrrp->iname, tfl->file->fname);
+
+				if (etvp->weight) {
+					etvp->weight = tfl->weight;
+					etvp->weight_multiplier = tfl->weight_reverse ? -1 : 1;
+				}
+				return;
+			}
+		}
+	}
+
+	tvp = MALLOC(sizeof(tracking_vrrp_t));
+	tvp->vrrp = vrrp;
+	tvp->weight = tfl->weight;
+	tvp->weight_multiplier = tfl->weight_reverse ? -1 : 1;
+	list_add(tfl->file->tracking_vrrp, tvp);
+}
+
+#ifdef _WITH_CN_PROC_
+static void
+add_vrrp_to_track_process(vrrp_t *vrrp, tracked_process_t *tpr)
+{
+	tracking_vrrp_t *tvp, *etvp;
+	element e;
+
+	if (!LIST_EXISTS(tpr->process->tracking_vrrp))
+		tpr->process->tracking_vrrp = alloc_list(free_tracking_vrrp, dump_tracking_vrrp);
+	else {
+		/* Is this process already tracking the vrrp instance directly?
+		 * For this to be the case, the file was added directly on the vrrp instance,
+		 * and now we are adding it for a sync group. */
+		LIST_FOREACH(tpr->process->tracking_vrrp, etvp, e) {
+			if (etvp->vrrp == vrrp) {
+				/* Update the weight appropriately. We will use the sync group's
+				 * weight unless the vrrp setting is unweighted. */
+				log_message(LOG_INFO, "(%s) track_process %s is configured on VRRP instance and sync group. Remove vrrp instance config",
+						vrrp->iname, tpr->process->pname);
+
+				if (etvp->weight)
+					etvp->weight = tpr->weight;
+				return;
+			}
+		}
+	}
+
+	tvp = MALLOC(sizeof(tracking_vrrp_t));
+	tvp->vrrp = vrrp;
+	tvp->weight = tpr->weight;
+	tvp->weight_multiplier = tpr->weight_reverse ? -1 : 1;
+	list_add(tpr->process->tracking_vrrp, tvp);
+}
+#endif
+
+#ifdef _WITH_BFD_
+static void
+add_vrrp_to_track_bfd(vrrp_t *vrrp, tracked_bfd_t *tbfd)
+{
+	tracking_vrrp_t *tvp, *etvp;
+	element e;
+
+	if (!LIST_EXISTS(tbfd->bfd->tracking_vrrp))
+		tbfd->bfd->tracking_vrrp = alloc_list(free_tracking_vrrp, dump_tracking_vrrp);
+	else {
+		/* Is this bfd already tracking the vrrp instance directly?
+		 * For this to be the case, the bfd was added directly on the vrrp instance,
+		 * and now we are adding it for a sync group. */
+		LIST_FOREACH(tbfd->bfd->tracking_vrrp, etvp, e) {
+			if (etvp->vrrp == vrrp) {
+				/* Update the weight appropriately. We will use the sync group's
+				 * weight unless the vrrp setting is unweighted. */
+				log_message(LOG_INFO, "(%s) track_bfd %s is configured on VRRP instance and sync group. Remove vrrp instance config",
+						vrrp->iname, tbfd->bfd->bname);
+
+				if (etvp->weight) {
+					etvp->weight = tbfd->weight;
+					etvp->weight_multiplier = tbfd->weight_reverse ? -1 : 1;
+				}
+				return;
+			}
+		}
+	}
+
+	PMALLOC(tvp);
+	tvp->vrrp = vrrp;
+	tvp->weight = tbfd->weight;
+	tvp->weight_multiplier = tbfd->weight_reverse ? -1 : 1;
+	list_add(tbfd->bfd->tracking_vrrp, tvp);
+}
+#endif
+
+/* complete vrrp structure */
+static bool
+vrrp_complete_instance(vrrp_t * vrrp)
+{
+#ifdef _HAVE_VRRP_VMAC_
+	char ifname[IFNAMSIZ];
+	interface_t *ifp;
+	const char *if_type;
+#endif
+	element e;
+	ip_address_t *vip;
+	size_t hdr_len;
+	size_t max_addr;
+	size_t i;
+	element next;
+	bool interface_already_existed = false;
+	tracked_sc_t *sc;
+	tracked_if_t *tip;
+	tracked_file_t *tfl;
+#ifdef _WITH_CN_PROC_
+	tracked_process_t *tpr;
+#endif
+#ifdef _WITH_BFD_
+	tracked_bfd_t *tbfd;
+#endif
+#ifdef _HAVE_FIB_ROUTING_
+	ip_route_t *vroute;
+	ip_rule_t *vrule;
+#endif
+
+	if (vrrp->strict_mode == PARAMETER_UNSET)
+		vrrp->strict_mode = global_data->vrrp_strict;
+
+	if (vrrp->family == AF_INET6) {
+		if (vrrp->version == VRRP_VERSION_2 && vrrp->strict_mode) {
+			report_config_error(CONFIG_GENERAL_ERROR,"(%s) cannot use IPv6 with VRRP version 2; setting version 3", vrrp->iname);
+			vrrp->version = VRRP_VERSION_3;
+		}
+		else if (!vrrp->version)
+			vrrp->version = VRRP_VERSION_3;
+	}
+
+	/* Default to IPv4. This can only happen if no VIPs are specified. */
+	if (vrrp->family == AF_UNSPEC)
+		vrrp->family = AF_INET;
+
+	if (vrrp->family == AF_INET)
+		have_ipv4_instance = true;
+	else
+		have_ipv6_instance = true;
+
+	if (vrrp->version == 0) {
+		if (vrrp->family == AF_INET6)
+			vrrp->version = VRRP_VERSION_3;
+		else
+			vrrp->version = global_data->vrrp_version;
+	}
+
+	if (LIST_ISEMPTY(vrrp->vip) && (vrrp->version == VRRP_VERSION_3 || vrrp->family == AF_INET6 || vrrp->strict_mode)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) No VIP specified; at least one is required", vrrp->iname);
+		return false;
+	}
+
+	/* If no priority has been set, derive it from the initial state */
+	if (vrrp->base_priority == 0) {
+		if (vrrp->wantstate == VRRP_STATE_MAST)
+			vrrp->base_priority = VRRP_PRIO_OWNER;
+		else
+			vrrp->base_priority = VRRP_PRIO_DFL;
+	}
+
+	/* If no initial state has been set, derive it from the priority */
+	if (vrrp->wantstate == VRRP_STATE_INIT)
+		vrrp->wantstate = (vrrp->base_priority == VRRP_PRIO_OWNER ? VRRP_STATE_MAST : VRRP_STATE_BACK);
+	else if (vrrp->strict_mode &&
+		 ((vrrp->wantstate == VRRP_STATE_MAST) != (vrrp->base_priority == VRRP_PRIO_OWNER))) {
+			report_config_error(CONFIG_GENERAL_ERROR,"(%s) State MASTER must match being address owner", vrrp->iname);
+			vrrp->wantstate = (vrrp->base_priority == VRRP_PRIO_OWNER ? VRRP_STATE_MAST : VRRP_STATE_BACK);
+	}
+
+#ifdef _WITH_VRRP_AUTH_
+	if (vrrp->strict_mode && vrrp->auth_type != VRRP_AUTH_NONE) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Strict mode does not support authentication. Ignoring.", vrrp->iname);
+		vrrp->auth_type = VRRP_AUTH_NONE;
+	}
+	else if (vrrp->version == VRRP_VERSION_3 && vrrp->auth_type != VRRP_AUTH_NONE) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) VRRP version 3 does not support authentication. Ignoring.", vrrp->iname);
+		vrrp->auth_type = VRRP_AUTH_NONE;
+	}
+	else if (vrrp->auth_type != VRRP_AUTH_NONE && !vrrp->auth_data[0]) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Authentication specified but no password given. Ignoring", vrrp->iname);
+		vrrp->auth_type = VRRP_AUTH_NONE;
+	}
+	else if (vrrp->family == AF_INET6 && vrrp->auth_type == VRRP_AUTH_AH) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Cannot use AH authentication with IPv6 - ignoring", vrrp->iname);
+		vrrp->auth_type = VRRP_AUTH_NONE;
+	}
+	else if (vrrp->auth_type == VRRP_AUTH_AH && vrrp->wantstate == VRRP_STATE_MAST && vrrp->base_priority != VRRP_PRIO_OWNER) {
+		/* We need to have received an advert to get the AH sequence no before taking over, if possible */
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Initial state master is incompatible with AH authentication - clearing", vrrp->iname);
+		vrrp->wantstate = VRRP_STATE_BACK;
+	}
+#endif
+
+	if (!chk_min_cfg(vrrp))
+		return false;
+
+	/* unicast peers aren't allowed in strict mode if the interface supports multicast */
+	if (vrrp->strict_mode && vrrp->ifp->ifindex && (vrrp->ifp->ifi_flags & IFF_MULTICAST) && !LIST_ISEMPTY(vrrp->unicast_peer)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Unicast peers are not supported in strict mode", vrrp->iname);
+		return false;
+	}
+
+#ifdef _HAVE_VRRP_VMAC_
+	/* Check that the underlying interface type is Ethernet if using a VMAC */
+	if ((__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags)
+#ifdef _HAVE_VRRP_IPVLAN_
+	     || __test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags)
+#endif
+							      ) &&
+	    vrrp->ifp->ifindex && vrrp->ifp->hw_type != ARPHRD_ETHER) {
+		__clear_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags);
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): vmacs are only supported on Ethernet type interfaces", vrrp->iname);
+		vrrp->num_script_if_fault++;	/* Stop the vrrp instance running */
+	}
+#endif
+
+	/* If the interface doesn't support multicast, then we need to use unicast */
+	if (vrrp->ifp->ifindex && !(vrrp->ifp->ifi_flags & IFF_MULTICAST) && LIST_ISEMPTY(vrrp->unicast_peer)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) interface %s does not support multicast, specify unicast peers - disabling", vrrp->iname, vrrp->ifp->ifname);
+		vrrp->num_script_if_fault++;	/* Stop the vrrp instance running */
+	}
+
+	/* Warn if ARP not supported on interface */
+	if (__test_bit(LOG_DETAIL_BIT, &debug) &&
+	    vrrp->ifp->ifindex &&
+	    (vrrp->ifp->ifi_flags & IFF_NOARP) &&
+	    !(vrrp->ifp->ifi_flags & IFF_POINTOPOINT))
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) disabling ARP since interface does not support it", vrrp->iname);
+
+	/* If the addresses are IPv6, then the first one must be link local */
+	if (vrrp->family == AF_INET6 && LIST_ISEMPTY(vrrp->unicast_peer) &&
+		  !LIST_ISEMPTY(vrrp->vip) &&
+		  LIST_HEAD(vrrp->vip)->data &&
+		  !IN6_IS_ADDR_LINKLOCAL(&((ip_address_t *)LIST_HEAD(vrrp->vip)->data)->u.sin6_addr)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) the first IPv6 VIP address must be link local", vrrp->iname);
+	}
+
+	/* Check we can fit the VIPs into a packet */
+	if (vrrp->family == AF_INET) {
+		hdr_len = sizeof(struct ether_header) + sizeof(struct iphdr) + sizeof(vrrphdr_t);
+
+		if (vrrp->version == VRRP_VERSION_2) {
+			hdr_len += VRRP_AUTH_LEN;
+
+#ifdef _WITH_VRRP_AUTH_
+			if (vrrp->auth_type == VRRP_AUTH_AH)
+				hdr_len += sizeof(ipsec_ah_t);
+#endif
+		}
+
+		max_addr = (vrrp->ifp->mtu - hdr_len) / sizeof(struct in_addr);
+	} else {
+		hdr_len = sizeof(struct ether_header) + sizeof(struct ip6_hdr) + sizeof(vrrphdr_t);
+		max_addr = (vrrp->ifp->mtu - hdr_len) / sizeof(struct in6_addr);
+	}
+
+	/* Count IP addrs field is 8 bits wide, giving a maximum address count of 255 */
+	if (max_addr > VRRP_MAX_ADDR)
+		max_addr = VRRP_MAX_ADDR;
+
+	/* Move any extra addresses to be evips. We won't advertise them, but at least we can respond to them */
+	if (!LIST_ISEMPTY(vrrp->vip) && LIST_SIZE(vrrp->vip) > max_addr) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Number of VIPs (%u) exceeds maximum/space available in packet (max %zu addresses) - excess moved to eVIPs",
+				vrrp->iname, LIST_SIZE(vrrp->vip), max_addr);
+		for (i = 0, e = LIST_HEAD(vrrp->vip); e; i++, e = next) {
+			next = e->next;
+			if (i < max_addr)
+				continue;
+			if (!LIST_EXISTS(vrrp->evip))
+				vrrp->evip = alloc_list(free_ipaddress, dump_ipaddress);
+			list_transfer(e, vrrp->vip, vrrp->evip);
+		}
+	}
+
+	if (vrrp->base_priority == VRRP_PRIO_OWNER && vrrp->nopreempt) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) nopreempt is incompatible with priority %d - resetting nopreempt", vrrp->iname, VRRP_PRIO_OWNER);
+		vrrp->nopreempt = false;
+	}
+
+	vrrp->effective_priority = vrrp->base_priority;
+	vrrp->total_priority = vrrp->base_priority;
+
+	if (vrrp->wantstate == VRRP_STATE_MAST) {
+		if (vrrp->nopreempt) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) Warning - nopreempt will not work with initial state MASTER - clearing", vrrp->iname);
+			vrrp->nopreempt = false;
+		}
+		if (vrrp->preempt_delay) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) Warning - preempt delay will not work with initial state MASTER - clearing", vrrp->iname);
+			vrrp->preempt_delay = false;
+		}
+	}
+	if (vrrp->preempt_delay) {
+		if (vrrp->strict_mode) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) preempt_delay is incompatible with strict mode - resetting", vrrp->iname);
+			vrrp->preempt_delay = 0;
+		}
+		if (vrrp->nopreempt) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) preempt_delay is incompatible with nopreempt mode - resetting", vrrp->iname);
+			vrrp->preempt_delay = 0;
+		}
+	}
+
+	vrrp->state = VRRP_STATE_INIT;
+#ifdef _WITH_SNMP_VRRP_
+	vrrp->configured_state = vrrp->wantstate;
+#endif
+
+#ifdef _WITH_FIREWALL_
+	/* Set default for accept mode if not specified. If we are running in strict mode,
+	 * default is to disable accept mode, otherwise default is to enable it.
+	 * At some point we might want to change this to make non accept_mode the default,
+	 * to comply with the RFCs. */
+	if (vrrp->accept == PARAMETER_UNSET)
+		vrrp->accept = !vrrp->strict_mode;
+
+	if (vrrp->accept &&
+	    vrrp->base_priority != VRRP_PRIO_OWNER &&
+	    vrrp->strict_mode &&
+	    vrrp->version == VRRP_VERSION_2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) warning - accept mode for VRRP version 2 does not comply with RFC3768 - resetting", vrrp->iname);
+		vrrp->accept = 0;
+	}
+#endif
+
+	if (vrrp->garp_lower_prio_rep == PARAMETER_UNSET)
+		vrrp->garp_lower_prio_rep = vrrp->strict_mode ? 0 : global_data->vrrp_garp_lower_prio_rep;
+	else if (vrrp->strict_mode && vrrp->garp_lower_prio_rep) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Strict mode requires no repeat garps - resetting", vrrp->iname);
+		vrrp->garp_lower_prio_rep = 0;
+	}
+	if (vrrp->garp_lower_prio_delay == PARAMETER_UNSET)
+		vrrp->garp_lower_prio_delay = vrrp->strict_mode ? 0 : global_data->vrrp_garp_lower_prio_delay;
+	else if (vrrp->strict_mode && vrrp->garp_lower_prio_delay) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Strict mode requires no repeat garp delay - resetting", vrrp->iname);
+		vrrp->garp_lower_prio_delay = 0;
+	}
+	if (vrrp->lower_prio_no_advert == PARAMETER_UNSET)
+		vrrp->lower_prio_no_advert = vrrp->strict_mode ? true : global_data->vrrp_lower_prio_no_advert;
+	else if (vrrp->strict_mode && !vrrp->lower_prio_no_advert) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Strict mode requires no lower priority advert - resetting", vrrp->iname);
+		vrrp->lower_prio_no_advert = true;
+	}
+	if (vrrp->higher_prio_send_advert == PARAMETER_UNSET)
+		vrrp->higher_prio_send_advert = vrrp->strict_mode ? false : global_data->vrrp_higher_prio_send_advert;
+	else if (vrrp->strict_mode && vrrp->higher_prio_send_advert) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) strict mode requires higher_prio_send_advert to be clear - resetting", vrrp->iname);
+		vrrp->higher_prio_send_advert = false;
+	}
+
+	if (vrrp->smtp_alert == -1) {
+		if (global_data->smtp_alert_vrrp != -1)
+			vrrp->smtp_alert = global_data->smtp_alert_vrrp;
+		else if (global_data->smtp_alert != -1)
+			vrrp->smtp_alert = global_data->smtp_alert;
+		else
+			vrrp->smtp_alert = false;
+	}
+
+	if (vrrp->notify_priority_changes == -1)
+		vrrp->notify_priority_changes = global_data->vrrp_notify_priority_changes;
+
+	/* Check that the advertisement interval is valid */
+	if (!vrrp->adver_int)
+		vrrp->adver_int = VRRP_ADVER_DFL * TIMER_HZ;
+	if (vrrp->version == VRRP_VERSION_2) {
+		if (vrrp->adver_int >= (1<<8) * TIMER_HZ) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) VRRPv2 advertisement interval %.2fs is out of range. Must be less than %ds. Setting to %ds",
+					vrrp->iname, vrrp->adver_int / TIMER_HZ_DOUBLE, 1<<8, (1<<8) - 1);
+			vrrp->adver_int = ((1<<8) - 1) * TIMER_HZ;
+		}
+		else if (vrrp->adver_int % TIMER_HZ) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) VRRPv2 advertisement interval %fs must be an integer - rounding",
+					vrrp->iname, vrrp->adver_int / TIMER_HZ_DOUBLE);
+			vrrp->adver_int = vrrp->adver_int + (TIMER_HZ / 2);
+			vrrp->adver_int -= vrrp->adver_int % TIMER_HZ;
+			if (vrrp->adver_int == 0)
+				vrrp->adver_int = TIMER_HZ;
+		}
+	}
+	else
+	{
+		if (vrrp->adver_int >= (1<<12) * TIMER_CENTI_HZ) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) VRRPv3 advertisement interval %.2fs is out of range. Must be less than %.2fs. Setting to %.2fs",
+					vrrp->iname, vrrp->adver_int / TIMER_HZ_DOUBLE, (double)(1<<12) / 100, (double)((1<<12) - 1) / 100);
+			vrrp->adver_int = ((1<<12) - 1) * TIMER_CENTI_HZ;
+		}
+		else if (vrrp->adver_int % TIMER_CENTI_HZ) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) VRRPv3 advertisement interval %fs must be in units of 10ms - rounding",
+					vrrp->iname, vrrp->adver_int / TIMER_HZ_DOUBLE);
+			vrrp->adver_int = vrrp->adver_int + (TIMER_CENTI_HZ / 2);
+			vrrp->adver_int -= vrrp->adver_int % TIMER_CENTI_HZ;
+
+			if (vrrp->adver_int == 0)
+				vrrp->adver_int = TIMER_CENTI_HZ;
+		}
+	}
+	vrrp->master_adver_int = vrrp->adver_int;
+
+#ifdef _WITH_LINKBEAT_
+	/* Set linkbeat polling on interface if wanted */
+	if (vrrp->linkbeat_use_polling || global_data->linkbeat_use_polling)
+		vrrp->ifp->linkbeat_use_polling = true;
+#endif
+
+	/* Clear track_saddr if no saddr specified */
+	if (!vrrp->saddr_from_config)
+		vrrp->track_saddr = false;
+
+#ifdef _HAVE_VRRP_VMAC_
+	/* Set a default interface name for the vmac if needed */
+	if (__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags)
+#ifdef _HAVE_VRRP_IPVLAN_
+	    || __test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags)
+#endif
+							    ) {
+		/* The same vrid can be used for both IPv4 and IPv6, and also on multiple underlying
+		 * interfaces. */
+
+		if_type =
+#ifdef _HAVE_VRRP_IPVLAN_
+			  __test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags) ? "IPVLAN" :
+#endif
+			  "VMAC";
+
+		/* Look to see if an existing interface matches. If so, use that name */
+		list if_list = get_if_list();
+		if (!LIST_ISEMPTY(if_list)) {		/* If the list were empty we would have a real problem! */
+			LIST_FOREACH(if_list, ifp, e) {
+				/* Check if this interface could be the macvlan/ipvlan for this vrrp */
+				if (ifp->ifindex &&
+				    (ifp->base_ifp == vrrp->configured_ifp->base_ifp
+#ifdef HAVE_IFLA_LINK_NETNSID
+				     || (ifp == ifp->base_ifp && vrrp->configured_ifp->base_netns_id == ifp->base_netns_id)
+#endif
+															   ) &&
+				    ((__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags) &&
+				      ifp->vmac_type == MACVLAN_MODE_PRIVATE &&
+				      !memcmp(ifp->hw_addr, ll_addr, sizeof(ll_addr) - 2) &&
+				      ((vrrp->family == AF_INET && ifp->hw_addr[sizeof(ll_addr) - 2] == 0x01) ||
+				       (vrrp->family == AF_INET6 && ifp->hw_addr[sizeof(ll_addr) - 2] == 0x02)) &&
+				      ifp->hw_addr[sizeof(ll_addr) - 1] == vrrp->vrid)
+#ifdef _HAVE_VRRP_IPVLAN_
+				     ||  /* We should probably check if any VIPs match for IPv6 when no i/f name or address configured */
+				     (__test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags) &&
+				      ifp->if_type == IF_TYPE_IPVLAN &&
+				      /* coverity[mixed_enums] */
+				      ifp->vmac_type == IPVLAN_MODE_L2 &&
+				      !(vrrp->family == AF_INET6 && !vrrp->vmac_ifname[0] && !vrrp->ipvlan_addr) &&
+				      (!vrrp->vmac_ifname[0] || !strcmp(vrrp->vmac_ifname, ifp->ifname)) &&
+				      (!vrrp->ipvlan_addr ||
+				       (vrrp->ipvlan_addr->ifa.ifa_family == AF_INET &&
+					!inet_inaddrcmp(AF_INET, &vrrp->ipvlan_addr->u.sin.sin_addr.s_addr, &ifp->sin_addr.s_addr)) ||
+				       (vrrp->ipvlan_addr->ifa.ifa_family == AF_INET6 &&
+					!inet_inaddrcmp(AF_INET6, &vrrp->ipvlan_addr->u.sin6_addr, &ifp->sin6_addr))))
+#endif
+					    ))
+				{
+					log_message(LOG_INFO, "(%s) Found matching interface %s", vrrp->iname, ifp->ifname);
+					if (vrrp->vmac_ifname[0] &&
+					    strcmp(vrrp->vmac_ifname, ifp->ifname))
+						log_message(LOG_INFO, "(%s) vmac name mismatch %s <=> %s; changing to %s.", vrrp->iname, vrrp->vmac_ifname, ifp->ifname, ifp->ifname);
+
+					strcpy(vrrp->vmac_ifname, ifp->ifname);
+					vrrp->ifp = ifp;
+					__set_bit(VRRP_VMAC_UP_BIT, &vrrp->vmac_flags);
+					ifp->is_ours = true;
+
+					/* The interface existed, so it may have config set on it */
+					interface_already_existed = true;
+
+					break;
+				}
+			}
+
+			if (!interface_already_existed &&
+			    vrrp->vmac_ifname[0] &&
+			    (ifp = if_get_by_ifname(vrrp->vmac_ifname, IF_NO_CREATE)) &&
+			     ifp->ifindex) {
+				/* An interface with the same name exists, but it doesn't match */
+				if (IS_VLAN(ifp))
+					log_message(LOG_INFO, "(%s) %s %s already exists but is incompatible. It will be deleted", vrrp->iname,
+							if_type, vrrp->vmac_ifname);
+				else {
+					report_config_error(CONFIG_GENERAL_ERROR, "(%s) %s interface name %s already exists as a non %s interface - ignoring configured name",
+						    vrrp->iname, if_type, vrrp->vmac_ifname, if_type);
+					vrrp->vmac_ifname[0] = 0;
+				}
+			}
+		}
+
+		/* No interface found, find an unused name */
+		if (!vrrp->vmac_ifname[0]) {
+			unsigned short num=0;
+			snprintf(ifname, IFNAMSIZ, "vrrp.%d", vrrp->vrid);
+
+			while (true) {
+				/* If there is no VMAC with the name and no existing
+				 * interface with the name, we can use it.
+				 * It we are using dynamic interfaces, the interface entry
+				 * may have been created by the configuration, but in that
+				 * case the ifindex will be 0. */
+				if (!e && (!(ifp = if_get_by_ifname(ifname, IF_NO_CREATE)) || !ifp->ifindex))
+					break;
+
+				/* For IPv6 try vrrp6 as second attempt */
+				if (vrrp->family == AF_INET6) {
+					if (num == 0)
+						num = 6;
+					else if (num == 6)
+						num = 1;
+					else if (++num == 6)
+						num++;
+				}
+				else
+					num++;
+
+				snprintf(ifname, IFNAMSIZ, "vrrp%d.%d", num, vrrp->vrid);
+			}
+
+			/* We've found a unique name */
+			strncpy(vrrp->vmac_ifname, ifname, IFNAMSIZ);
+		}
+
+		if (!interface_already_existed) {
+			ifp = if_get_by_ifname(vrrp->vmac_ifname, IF_CREATE_ALWAYS);
+			ifp->base_ifp = vrrp->ifp;
+			vrrp->ifp = ifp;
+		}
+
+		if (__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags)) {
+			if (vrrp->strict_mode && __test_bit(VRRP_VMAC_XMITBASE_BIT, &vrrp->vmac_flags)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) xmit_base is incompatible with strict mode - resetting", vrrp->iname);
+				__clear_bit(VRRP_VMAC_XMITBASE_BIT, &vrrp->vmac_flags);
+			}
+		}
+
+		if (vrrp->promote_secondaries &&
+		    (__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags)
+#ifdef _HAVE_VRRP_IPVLAN_
+		    || __test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags)
+#endif
+		    )) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) promote_secondaries is automatically set for vmacs - ignoring", vrrp->iname);
+			vrrp->promote_secondaries = false;
+		}
+	}
+	else
+#endif
+	{
+		/* We are using a "physical" interface, so it may have configuration on it
+		 * left over from a previous run. */
+		interface_already_existed = true;
+	}
+
+#ifdef _HAVE_VRRP_IPVLAN_
+	if (__test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags)) {
+		if (vrrp->family == AF_INET && !vrrp->ipvlan_addr) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) IPv4 ipvlan requires a source ip address to be configured - setting instance to fault state",
+								  vrrp->iname);
+			vrrp->num_script_if_fault++;
+		} else if (vrrp->ipvlan_addr) {
+			if (vrrp->family != vrrp->ipvlan_addr->ifa.ifa_family) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) IPv4 ipvlan address family does not match instance - setting instance to fault state",
+									  vrrp->iname);
+				vrrp->num_script_if_fault++;
+			} else
+				vrrp->ipvlan_addr->ifp = vrrp->ifp;
+		}
+	}
+#endif
+
+	/* Add us to the interfaces we are tracking */
+	LIST_FOREACH_NEXT(vrrp->track_ifp, tip, e, next) {
+		/* Check the configuration doesn't explicitly state to track our own interface */
+		if (tip->ifp == IF_BASE_IFP(vrrp->ifp)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) Ignoring track_interface %s since own interface", vrrp->iname, IF_BASE_IFP(vrrp->ifp)->ifname);
+			free_list_element(vrrp->track_ifp, e);
+		}
+		else
+			add_vrrp_to_interface(vrrp, tip->ifp, tip->weight, tip->weight_reverse, false, TRACK_IF);
+	}
+
+	/* Add this instance to the physical interface and vice versa */
+	add_vrrp_to_interface(vrrp, VRRP_CONFIGURED_IFP(vrrp), vrrp->dont_track_primary ? VRRP_NOT_TRACK_IF : 0, false, true, TRACK_VRRP);
+
+#ifdef _HAVE_VRRP_VMAC_
+	/* If the interface is configured onto a VMAC/IPVLAN interface, we want to track
+	 * the underlying interface too */
+	if (vrrp->configured_ifp != vrrp->configured_ifp->base_ifp && vrrp->configured_ifp->base_ifp)
+		add_vrrp_to_interface(vrrp, vrrp->configured_ifp->base_ifp, vrrp->dont_track_primary ? VRRP_NOT_TRACK_IF : 0, false, true, TRACK_VRRP_DYNAMIC);
+
+	if (__test_bit(VRRP_VMAC_XMITBASE_BIT, &vrrp->vmac_flags) &&
+	    !__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) vmac_xmit_base is only valid with a vmac", vrrp->iname);
+		__clear_bit(VRRP_VMAC_XMITBASE_BIT, &vrrp->vmac_flags);
+	}
+
+	if (__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags)
+#ifdef _HAVE_VRRP_IPVLAN_
+	    || __test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags)
+#endif
+							     )
+	{
+		/* We need to know if we have eVIPs of the other address family */
+		LIST_FOREACH(vrrp->evip, vip, e) {
+			if (vip->ifa.ifa_family != vrrp->family) {
+				vrrp->evip_other_family = true;
+				break;
+			}
+		}
+
+		/* Create the interface if it doesn't already exist and
+		 * the underlying interface does exist */
+		if (vrrp->ifp->base_ifp->ifindex &&
+		    !__test_bit(VRRP_VMAC_UP_BIT, &vrrp->vmac_flags) &&
+		    !__test_bit(CONFIG_TEST_BIT, &debug)) {
+#ifdef _HAVE_VRRP_IPVLAN_
+			if (__test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags))
+				netlink_link_add_ipvlan(vrrp);
+			else
+#endif
+				netlink_link_add_vmac(vrrp);
+		}
+
+		/* Add this instance to the vmac interface */
+		add_vrrp_to_interface(vrrp, vrrp->ifp, vrrp->dont_track_primary ? VRRP_NOT_TRACK_IF : 0, false, true, TRACK_VRRP);
+	}
+#endif
+
+	/* See if we need to enable the firewall */
+//TODO = we have a problem since SNMP may change accept mode
+//it can also change priority
+#ifdef _WITH_FIREWALL_
+	if ((vrrp->base_priority != VRRP_PRIO_OWNER && !vrrp->accept)
+#ifdef _HAVE_VRRP_VMAC_
+	    || __test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags)
+#endif
+			) {
+		bool have_firewall = false;
+
+#ifdef _WITH_IPTABLES_
+		if (global_data->vrrp_iptables_inchain[0])
+			have_firewall = true;
+#endif
+#ifdef _WITH_NFTABLES_
+		if (global_data->vrrp_nf_table_name)
+			have_firewall = true;
+#endif
+
+		if (!have_firewall) {
+#ifdef _WITH_NFTABLES_
+			/* str is needed since vrrp_nf_table_name is const char * */
+			char *str;
+			str = MALLOC(strlen(DEFAULT_NFTABLES_TABLE) + 1);
+			strcpy(str, DEFAULT_NFTABLES_TABLE);
+			global_data->vrrp_nf_table_name = str;
+#else
+			log_message(LOG_INFO, "Adding iptables rules to default chains, but chains not configured");
+			strcpy(global_data->vrrp_iptables_inchain, DEFAULT_IPTABLES_CHAIN_IN);
+			strcpy(global_data->vrrp_iptables_outchain, DEFAULT_IPTABLES_CHAIN_OUT);
+#endif
+		}
+	}
+#endif
+
+	/* Add each VIP/eVIP's interface to the interface list, unless we aren't tracking it.
+	 * If the interface goes down, then we will not be able to re-add the address, and so
+	 * we should go to fault state. */
+	LIST_FOREACH(vrrp->vip, vip, e) {
+		if (!vip->ifp)
+			vip->ifp = vrrp->ifp;
+		if (!vip->dont_track)
+			add_vrrp_to_interface(vrrp, vip->ifp, 0, false, false, TRACK_ADDR);
+	}
+	LIST_FOREACH(vrrp->evip, vip, e) {
+		if (!vip->ifp)
+			vip->ifp = vrrp->ifp;
+		if (!vip->dont_track)
+			add_vrrp_to_interface(vrrp, vip->ifp, 0, false, false, TRACK_ADDR);
+
+		if (vip->ifa.ifa_family == AF_INET)
+			have_ipv4_instance = true;
+		else
+			have_ipv6_instance = true;
+	}
+
+	/* In case of VRRP SYNC, we have to carefully check that we are
+	 * not running floating priorities on any VRRP instance, unless
+	 * sgroup_tracking_weight is set.
+	 * If address owner, then we must totally ignore weights.
+	 */
+	if ((vrrp->sync && !vrrp->sync->sgroup_tracking_weight) ||
+	    vrrp->base_priority == VRRP_PRIO_OWNER) {
+		bool sync_no_tracking_weight = (vrrp->sync && !vrrp->sync->sgroup_tracking_weight);
+
+		/* Set weight to 0 of any interface we are tracking,
+		 * unless we are the address owner, in which case stop tracking it */
+		LIST_FOREACH_NEXT(vrrp->track_ifp, tip, e, next) {
+			if (tip->weight && tip->weight != VRRP_NOT_TRACK_IF) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) ignoring %s"
+						 " tracked interface %sdue to %s",
+						 vrrp->iname, tip->ifp->ifname,
+						 sync_no_tracking_weight ? "weight " : "",
+						 sync_no_tracking_weight ? "SYNC group" : "address owner");
+				if (sync_no_tracking_weight)
+					tip->weight = 0;
+				else
+					free_list_element(vrrp->track_ifp, e);
+			}
+		}
+		if (LIST_ISEMPTY(vrrp->track_ifp))
+			free_list(&vrrp->track_ifp);
+
+		/* Ignore any weighted script */
+		LIST_FOREACH_NEXT(vrrp->track_script, sc, e, next) {
+			if (sc->weight) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) ignoring "
+						 "tracked script %s with weights due to %s",
+						 vrrp->iname, sc->scr->sname,
+						 sync_no_tracking_weight ? "SYNC group" : "address_owner");
+				free_list_element(vrrp->track_script, e);
+			}
+		}
+		if (LIST_ISEMPTY(vrrp->track_script))
+			free_list(&vrrp->track_script);
+
+		/* Set tracking files to unweighted if weight not explicitly set, otherwise ignore */
+		LIST_FOREACH_NEXT(vrrp->track_file, tfl, e, next) {
+			if (tfl->weight == 1) {		/* weight == 1 is the default */
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) ignoring weight from "
+						 "tracked file %s due to %s - specify weight 0",
+						 vrrp->iname, tfl->file->fname,
+						 sync_no_tracking_weight ? "SYNC group" : "address_owner");
+				tfl->weight = 0;
+			}
+			else if (tfl->weight) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) ignoring "
+						 "tracked file %s with weight %d due to %s",
+						 vrrp->iname, tfl->file->fname, tfl->weight,
+						 sync_no_tracking_weight ? "SYNC group" : "address_owner");
+				free_list_element(vrrp->track_file, e);
+			}
+		}
+		if (LIST_ISEMPTY(vrrp->track_file))
+			free_list(&vrrp->track_file);
+
+#ifdef _WITH_BFD_
+		/* Ignore any weighted tracked bfd */
+		LIST_FOREACH_NEXT(vrrp->track_bfd, tbfd, e, next) {
+			if (tbfd->weight) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) ignoring "
+						 "tracked bfd %s with weight %d due to %s",
+						 vrrp->iname, tbfd->bfd->bname, tbfd->weight,
+						 sync_no_tracking_weight ? "SYNC group" : "address_owner");
+				free_list_element(vrrp->track_bfd, e);
+			}
+		}
+		if (LIST_ISEMPTY(vrrp->track_bfd))
+			free_list(&vrrp->track_bfd);
+#endif
+	}
+
+	/* Add us to the vrrp list of the script, and update
+	 * effective_priority and num_script_if_fault */
+	LIST_FOREACH_NEXT(vrrp->track_script, sc, e, next) {
+		vrrp_script_t *vsc = sc->scr;
+
+		if (vrrp->base_priority == VRRP_PRIO_OWNER && sc->weight) {
+			/* Is this duplicating the code with comment "Ignore any weighted script"? */
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) Cannot have weighted track script '%s' with priority %d", vrrp->iname, vsc->sname, VRRP_PRIO_OWNER);
+			list_del(vrrp->track_script, sc);
+			continue;
+		}
+
+		add_vrrp_to_track_script(vrrp, sc);
+	}
+
+	/* Add our track files to the tracking file tracking_vrrp list */
+	LIST_FOREACH(vrrp->track_file, tfl, e)
+		add_vrrp_to_track_file(vrrp, tfl);
+
+#ifdef _WITH_CN_PROC_
+	/* Add our track processes to the tracking process tracking_vrrp list */
+	LIST_FOREACH(vrrp->track_process, tpr, e)
+		add_vrrp_to_track_process(vrrp, tpr);
+#endif
+
+#ifdef _WITH_BFD_
+	/* Add our track bfd to the tracking bfd tracking_vrrp list */
+	LIST_FOREACH(vrrp->track_bfd, tbfd, e)
+		add_vrrp_to_track_bfd(vrrp, tbfd);
+#endif
+
+	if (vrrp->ifp->ifindex) {
+		if (!reload && interface_already_existed) {
+			vrrp->vipset = true;	/* Set to force address removal */
+		}
+
+		/* See if we need to set promote_secondaries */
+		if (vrrp->promote_secondaries &&
+		    !vrrp->ifp->promote_secondaries &&
+		    !__test_bit(CONFIG_TEST_BIT, &debug))
+			set_promote_secondaries(vrrp->ifp);
+	}
+
+#ifdef _HAVE_FIB_ROUTING_
+	/* Check if there are any route/rules we need to monitor */
+	LIST_FOREACH(vrrp->vroutes, vroute, e) {
+		if (!vroute->dont_track) {
+			if (vroute->family == AF_INET)
+				monitor_ipv4_routes = true;
+			else
+				monitor_ipv6_routes = true;
+
+			/* If the route specifies an interface, this vrrp instance should track the interface */
+			if (vroute->oif)
+				add_vrrp_to_interface(vrrp, vroute->oif, 0, false, false, TRACK_ROUTE);
+		}
+	}
+	LIST_FOREACH(vrrp->vrules, vrule, e) {
+		if (!vrule->dont_track) {
+			if (vrule->family == AF_INET)
+				monitor_ipv4_rules = true;
+			else
+				monitor_ipv6_rules = true;
+
+			/* If the rule specifies an interface, this vrrp instance should track the interface */
+			if (vrule->iif)
+				add_vrrp_to_interface(vrrp, vrule->iif, 0, false, false, TRACK_RULE);
+#if HAVE_DECL_FRA_OIFNAME
+			if (vrule->oif)
+				add_vrrp_to_interface(vrrp, vrule->oif, 0, false, false, TRACK_RULE);
+#endif
+		}
+	}
+#endif
+
+	/* alloc send buffer */
+	vrrp_alloc_send_buffer(vrrp);
+	vrrp_build_pkt(vrrp);
+
+	return true;
+}
+
+static void
+sync_group_tracking_init(void)
+{
+	element e, e1, e2;
+	vrrp_sgroup_t *sgroup;
+	tracked_sc_t *sc;
+	vrrp_script_t *vsc;
+	tracked_if_t *tif;
+	tracked_file_t *tfl;
+#ifdef _WITH_BFD_
+	tracked_bfd_t *tbfd;
+#endif
+	vrrp_t *vrrp;
+	bool sgroup_has_prio_owner;
+
+	if (LIST_ISEMPTY(vrrp_data->vrrp_sync_group))
+		return;
+
+	/* Add sync group members to the vrrp list of the script, file, i/f,
+	 * and update effective_priority and num_script_if_fault */
+	LIST_FOREACH(vrrp_data->vrrp_sync_group, sgroup, e) {
+		if (LIST_ISEMPTY(sgroup->vrrp_instances))
+			continue;
+
+		/* Find out if any of the sync group members are address owners, since then
+		 * we cannot have weights */
+		sgroup_has_prio_owner = false;
+		LIST_FOREACH(sgroup->vrrp_instances, vrrp, e1) {
+			if (vrrp->base_priority == VRRP_PRIO_OWNER) {
+				sgroup_has_prio_owner = true;
+				break;
+			}
+		}
+
+		LIST_FOREACH(sgroup->track_script, sc, e1) {
+			vsc = sc->scr;
+
+			if (sgroup_has_prio_owner && sc->weight) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) Cannot have weighted track script '%s' with member having priority %d - clearing weight", sgroup->gname, vsc->sname, VRRP_PRIO_OWNER);
+				sc->weight = 0;
+			}
+
+			LIST_FOREACH(sgroup->vrrp_instances, vrrp, e2)
+				add_vrrp_to_track_script(vrrp, sc);
+		}
 
-	/* return on link failure */
-	if (vrrp->wantstate == VRRP_STATE_GOTO_FAULT) {
-		vrrp->ms_down_timer = 3 * vrrp->adver_int + VRRP_TIMER_SKEW(vrrp);
-		vrrp->state = VRRP_STATE_FAULT;
-		notify_instance_exec(vrrp, VRRP_STATE_FAULT);
-		return 1;
-	}
+		/* tracked files */
+		LIST_FOREACH(sgroup->track_file, tfl, e1) {
+			if (sgroup_has_prio_owner && tfl->weight) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) Cannot have weighted track file '%s' with member having priority %d - setting weight 0", sgroup->gname, tfl->file->fname, VRRP_PRIO_OWNER);
+				tfl->weight = 0;
+			}
 
-	/* Process the incoming packet */
-	hd = vrrp_get_header(vrrp->family, buf, &proto, &saddr);
-	ret = vrrp_check_packet(vrrp, buf, buflen);
+			LIST_FOREACH(sgroup->vrrp_instances, vrrp, e2)
+				add_vrrp_to_track_file(vrrp, tfl);
+		}
 
-	if (ret == VRRP_PACKET_KO ||
-	    ret == VRRP_PACKET_NULL || ret == VRRP_PACKET_DROP) {
-		log_message(LOG_INFO,
-		       "VRRP_Instance(%s) Dropping received VRRP packet...",
-		       vrrp->iname);
-		return 0;
-	} else if (hd->priority < vrrp->effective_priority) {
-		/* We receive a lower prio adv we just refresh remote ARP cache */
-		log_message(LOG_INFO, "VRRP_Instance(%s) Received lower prio advert"
-				      ", forcing new election", vrrp->iname);
-		if (proto == IPPROTO_IPSEC_AH) {
-			ah = (ipsec_ah_t *) (buf + sizeof(struct iphdr));
-			log_message(LOG_INFO, "VRRP_Instance(%s) IPSEC-AH : Syncing seq_num"
-					      " - Increment seq"
-					    , vrrp->iname);
-			vrrp->ipsecah_counter->seq_number = ntohl(ah->seq_number) + 1;
-			vrrp->ipsecah_counter->cycle = 0;
+#ifdef _WITH_BFD_
+		/* tracked files */
+		LIST_FOREACH(sgroup->track_bfd, tbfd, e1) {
+			if (sgroup_has_prio_owner && tbfd->weight) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) Cannot have weighted track bfd '%s' with member having priority %d - setting weight 0", sgroup->gname, tbfd->bfd->bname, VRRP_PRIO_OWNER);
+				tbfd->weight = 0;
+			}
+
+			LIST_FOREACH(sgroup->vrrp_instances, vrrp, e2)
+				add_vrrp_to_track_bfd(vrrp, tbfd);
 		}
-		vrrp_send_adv(vrrp, vrrp->effective_priority);
-		vrrp_send_link_update(vrrp);
-		return 0;
-	} else if (hd->priority == 0) {
-		vrrp_send_adv(vrrp, vrrp->effective_priority);
-		return 0;
-	} else if (vrrp->family == AF_INET) {
-		if (hd->priority > vrrp->effective_priority ||
-		    (hd->priority == vrrp->effective_priority &&
-		     ntohl(saddr) > ntohl(VRRP_PKT_SADDR(vrrp)))) {
-			/* We send a last advert here in order to refresh remote MASTER
-			 * coming up to force link update at MASTER side.
-			 */
-			vrrp_send_adv(vrrp, vrrp->effective_priority);
+#endif
 
-			log_message(LOG_INFO, "VRRP_Instance(%s) Received higher prio advert"
-					    , vrrp->iname);
-			if (proto == IPPROTO_IPSEC_AH) {
-				ah = (ipsec_ah_t *) (buf + sizeof(struct iphdr));
-				log_message(LOG_INFO, "VRRP_Instance(%s) IPSEC-AH : Syncing seq_num"
-						      " - Decrement seq"
-						    , vrrp->iname);
-				vrrp->ipsecah_counter->seq_number = ntohl(ah->seq_number) - 1;
-				vrrp->ipsecah_counter->cycle = 0;
+		/* tracked interfaces */
+		LIST_FOREACH(sgroup->track_ifp, tif, e1) {
+			if (sgroup_has_prio_owner && tif->weight) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) Cannot have weighted track interface '%s' with member having priority %d - clearing weight", sgroup->gname, tif->ifp->ifname, VRRP_PRIO_OWNER);
+				tif->weight = 0;
 			}
-			vrrp->ms_down_timer = 3 * vrrp->adver_int + VRRP_TIMER_SKEW(vrrp);
-			vrrp->wantstate = VRRP_STATE_BACK;
-			vrrp->state = VRRP_STATE_BACK;
-			return 1;
+
+			LIST_FOREACH(sgroup->vrrp_instances, vrrp, e2)
+				add_vrrp_to_interface(vrrp, tif->ifp, tif->weight, tif->weight_reverse, true, TRACK_SG);
 		}
-	} else if (vrrp->family == AF_INET6) {
-		/* FIXME: compare v6 saddr to link local when prio are equal !!! */
-		if (hd->priority > vrrp->effective_priority) {
-			/* We send a last advert here in order to refresh remote MASTER
-			 * coming up to force link update at MASTER side.
-			 */
-			vrrp_send_adv(vrrp, vrrp->effective_priority);
 
-			log_message(LOG_INFO, "VRRP_Instance(%s) Received higher prio advert"
-					    , vrrp->iname);
-			vrrp->ms_down_timer = 3 * vrrp->adver_int + VRRP_TIMER_SKEW(vrrp);
-			vrrp->wantstate = VRRP_STATE_BACK;
-			vrrp->state = VRRP_STATE_BACK;
-			return 1;
+		/* Set default smtp_alert */
+		if (sgroup->smtp_alert == -1) {
+			if (global_data->smtp_alert_vrrp != -1)
+				sgroup->smtp_alert = global_data->smtp_alert_vrrp;
+			else if (global_data->smtp_alert != -1)
+				sgroup->smtp_alert = global_data->smtp_alert;
+			else
+				sgroup->smtp_alert = false;
 		}
 	}
-
-	return 0;
 }
 
-int
-vrrp_state_fault_rx(vrrp_t * vrrp, char *buf, int buflen)
+#ifdef _HAVE_FIB_ROUTING_
+static void
+process_static_entries(void)
 {
-	vrrphdr_t *hd;
-	uint32_t saddr;
-	int ret = 0, proto;
+	element e;
+	ip_route_t *sroute;
+	ip_rule_t *srule;
 
-	/* Process the incoming packet */
-	hd = vrrp_get_header(vrrp->family, buf, &proto, &saddr);
-	ret = vrrp_check_packet(vrrp, buf, buflen);
+	LIST_FOREACH(vrrp_data->static_routes, sroute, e) {
+		if (!sroute->track_group)
+			continue;
 
-	if (ret == VRRP_PACKET_KO || ret == VRRP_PACKET_NULL || ret == VRRP_PACKET_DROP) {
-		log_message(LOG_INFO, "VRRP_Instance(%s) Dropping received VRRP packet..."
-				    , vrrp->iname);
-		return 0;
-	} else if (vrrp->effective_priority > hd->priority ||
-		   hd->priority == VRRP_PRIO_OWNER) {
-		if (!vrrp->nopreempt)
-			return 1;
+		if (sroute->family == AF_INET)
+			monitor_ipv4_routes = true;
+		else
+			monitor_ipv6_routes = true;
+	}
+	LIST_FOREACH(vrrp_data->static_rules, srule, e) {
+		if (!srule->track_group)
+			continue;
+
+		if (srule->family == AF_INET)
+			monitor_ipv4_rules = true;
+		else
+			monitor_ipv6_rules = true;
 	}
-
-	return 0;
 }
+#endif
 
-/* check for minimum configuration requirements */
-static int
-chk_min_cfg(vrrp_t * vrrp)
+static void
+remove_residual_vips(void)
 {
-	if (vrrp->vrid == 0) {
-		log_message(LOG_INFO, "VRRP_Instance(%s) the virtual id must be set!",
-		       vrrp->iname);
-		return 0;
-	}
-	if (!vrrp->ifp) {
-		log_message(LOG_INFO, "VRRP_Instance(%s) Unknown interface !",
-		       vrrp->iname);
-		return 0;
+	element e, e1, e2, n2;
+	vrrp_t *vrrp;
+	ip_address_t *ip_addr;
+	struct in_addr *ip_addr4;
+	struct in6_addr *ip_addr6;
+	list *vip_list;
+	interface_t *ifp;
+
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		if (vrrp->vipset) {
+			/* Remove any addresses configured on interfaces if they match any
+			 * VIP/eVIP addresses since we must not use them as source addresses
+			 * of adverts. They could exist if keepalived crashed the last time
+			 * it ran and it wasn't able to clean up. */
+			vip_list = &vrrp->vip;
+			do {
+				LIST_FOREACH(*vip_list, ip_addr, e1) {
+					/* Check primary address for family, then check list */
+					if (ip_addr->ifa.ifa_family == AF_INET) {
+						if (inaddr_equal(AF_INET, &ip_addr->ifp->sin_addr, &ip_addr->u.sin.sin_addr)) {
+							ip_addr->ifp->sin_addr.s_addr = 0;
+							continue;
+						}
+						LIST_FOREACH_NEXT(ip_addr->ifp->sin_addr_l, ip_addr4, e2, n2) {
+							if (inaddr_equal(AF_INET, &ip_addr->u.sin.sin_addr, ip_addr4)) {
+								list_remove(ip_addr->ifp->sin_addr_l, e2);
+								break;
+							}
+						}
+					} else {
+						if (!IN6_IS_ADDR_LINKLOCAL(&ip_addr->u.sin6_addr))
+							continue;
+
+						if (inaddr_equal(AF_INET6, &ip_addr->ifp->sin6_addr, &ip_addr->u.sin6_addr)) {
+							ip_addr->ifp->sin6_addr.s6_addr32[0] = 0;
+							continue;
+						}
+						LIST_FOREACH_NEXT(ip_addr->ifp->sin6_addr_l, ip_addr6, e2, n2) {
+							if (inaddr_equal(AF_INET6, &ip_addr->u.sin6_addr, ip_addr6)) {
+								list_remove(ip_addr->ifp->sin6_addr_l, e2);
+								break;
+							}
+						}
+					}
+				}
+				vip_list = vip_list == &vrrp->vip ? &vrrp->evip : NULL;
+			} while (vip_list);
+		}
 	}
 
-	return 1;
+	/* Promote address from list to i/f if none on i/f */
+	LIST_FOREACH(get_if_list(), ifp, e) {
+		if (ifp->sin_addr.s_addr == 0 && !LIST_ISEMPTY(ifp->sin_addr_l)) {
+			if (ELEMENT_DATA(LIST_HEAD(ifp->sin_addr_l))) {
+				ifp->sin_addr = *(struct in_addr *)ELEMENT_DATA(LIST_HEAD(ifp->sin_addr_l));
+				list_remove(ifp->sin_addr_l, LIST_HEAD(ifp->sin_addr_l));
+			}
+		}
+		if (ifp->sin6_addr.s6_addr32[0] == 0 && !LIST_ISEMPTY(ifp->sin6_addr_l)) {
+			if (ELEMENT_DATA(LIST_HEAD(ifp->sin6_addr_l))) {
+				ifp->sin6_addr = *(struct in6_addr *)ELEMENT_DATA(LIST_HEAD(ifp->sin6_addr_l));
+				list_remove(ifp->sin6_addr_l, LIST_HEAD(ifp->sin6_addr_l));
+			}
+		}
+	}
 }
 
-/* open a VRRP sending socket */
-int
-open_vrrp_send_socket(sa_family_t family, int proto, int idx, int unicast)
+static void
+set_vrrp_src_addr(void)
 {
-	interface_t *ifp;
-	int fd = -1;
-
-	/* Retreive interface_t */
-	ifp = if_get_by_ifindex(idx);
+	element e;
+	vrrp_t *vrrp;
 
-	/* Create and init socket descriptor */
-	fd = socket(family, SOCK_RAW, proto);
-	if (fd < 0) {
-		log_message(LOG_INFO, "cant open raw socket. errno=%d", errno);
-		return -1;
-	}
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e)
+	{
+		if (vrrp->saddr_from_config)
+			continue;
+
+		/* Make sure we have an IP address as needed */
+		if (VRRP_CONFIGURED_IFP(vrrp)->ifindex /* && vrrp->saddr.ss_family == AF_UNSPEC */) {
+			/* Check the physical interface has a suitable address we can use.
+			 * We don't need an IPv6 address on the underlying interface if it is
+			 * a VMAC since we can create our own. */
+			bool addr_missing = false;
+
+			if (vrrp->family == AF_INET) {
+				if (!(VRRP_CONFIGURED_IFP(vrrp))->sin_addr.s_addr)
+					addr_missing = true;
+			}
+			else {
+#ifdef _HAVE_VRRP_VMAC_
+				if (!__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags))
+#endif
+					if (!VRRP_CONFIGURED_IFP(vrrp)->sin6_addr.s6_addr32[0])
+						addr_missing = true;
+			}
 
-	if (family == AF_INET) {
-		/* Set v4 related */
-		if_setsockopt_hdrincl(&fd);
-		if_setsockopt_bindtodevice(&fd, ifp);
-		if (!unicast)
-			if_setsockopt_mcast_loop(family, &fd);
-		if_setsockopt_priority(&fd);
-		if (fd < 0)
-			return -1;
-	} else if (family == AF_INET6) {
-		/* Set v6 related */
-		if (!unicast) {
-			if_setsockopt_mcast_hops(family, &fd);
-			if_setsockopt_mcast_if(family, &fd, ifp);
-			if_setsockopt_mcast_loop(family, &fd);
+			if (addr_missing) {
+				if (vrrp->saddr.ss_family != AF_UNSPEC) {
+					if (!global_data->dynamic_interfaces)
+						report_config_error(CONFIG_GENERAL_ERROR, "(%s) Cannot find an IP address to use for interface %s", vrrp->iname, VRRP_CONFIGURED_IFP(vrrp)->ifname);
+					vrrp->saddr.ss_family = AF_UNSPEC;
+				}
+			}
+			else if (vrrp->family == AF_INET)
+				inet_ip4tosockaddr(&VRRP_CONFIGURED_IFP(vrrp)->sin_addr, &vrrp->saddr);
+			else if (vrrp->family == AF_INET6) {
+#ifdef _HAVE_VRRP_IPVLAN_
+				if (__test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags)) {
+					if (vrrp->ifp->sin6_addr.s6_addr32[0] ||
+					    vrrp->ifp->sin6_addr.s6_addr32[1] ||
+					    vrrp->ifp->sin6_addr.s6_addr32[2] ||
+					    vrrp->ifp->sin6_addr.s6_addr32[3])
+					inet_ip6tosockaddr(&vrrp->ifp->sin6_addr, &vrrp->saddr);
+				} else
+#endif
+					inet_ip6tosockaddr(&VRRP_CONFIGURED_IFP(vrrp)->sin6_addr, &vrrp->saddr);
+			}
 		}
-		if_setsockopt_priority(&fd);
-		if (fd < 0)
-			return -1;
-	} else {
-		log_message(LOG_INFO, "cant open raw socket. unknow family=%d"
-				    , family);
-		close(fd);
-		return -1;
 	}
-
-	return fd;
 }
 
-/* open a VRRP socket and join the multicast group. */
-int
-open_vrrp_socket(sa_family_t family, int proto, int idx, int unicast)
+bool
+vrrp_complete_init(void)
 {
-	interface_t *ifp;
-	int fd = -1;
+	/*
+	 * e - Element equal to a specific VRRP instance
+	 * eo- Element equal to a specific group within old global group list
+	 */
+	element e, e1;
+	vrrp_t *vrrp, *old_vrrp;
+	vrrp_sgroup_t *sgroup;
+	element next;
+	vrrp_t *vrrp1;
+	size_t max_mtu_len = 0;
+	bool have_master, have_backup;
+	vrrp_script_t *scr;
+
+	/* Set defaults of not specified, depending on strict mode */
+	if (global_data->vrrp_garp_lower_prio_rep == PARAMETER_UNSET)
+		global_data->vrrp_garp_lower_prio_rep = global_data->vrrp_garp_rep;
+	if (global_data->vrrp_garp_lower_prio_delay == PARAMETER_UNSET)
+		global_data->vrrp_garp_lower_prio_delay = global_data->vrrp_garp_delay;
+
+	/* Add the FIFO name to the end of the parameter list */
+	if (global_data->notify_fifo.script)
+		add_script_param(global_data->notify_fifo.script, global_data->notify_fifo.name);
+	if (global_data->vrrp_notify_fifo.script)
+		add_script_param(global_data->vrrp_notify_fifo.script, global_data->vrrp_notify_fifo.name);
+
+	/* Mark any scripts as insecure */
+	check_vrrp_script_security();
+
+#if !defined _DEBUG_ && defined _WITH_LVS_
+	/* Only one process must run the script to process the global fifo,
+	 * so let the checker process do so. */
+	if (running_checker())
+		free_notify_script(&global_data->notify_fifo.script);
+#endif
 
-	/* Retreive interface_t */
-	ifp = if_get_by_ifindex(idx);
+	/* Make sure don't have same vrid on same interface with the same address family */
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		/* If we don't know about the interface this is on, skip */
+		if (!vrrp->ifp || !IF_BASE_IFP(VRRP_CONFIGURED_IFP(vrrp))->ifindex)
+			continue;
+		/* Check none of the rest of the entries conflict */
+		LIST_FOREACH_FROM(e->next, vrrp1, e1) {
+			/* If we don't know about the interface this is on, skip */
+			if (!IF_BASE_IFP(VRRP_CONFIGURED_IFP(vrrp1))->ifindex)
+				continue;
+
+			if (vrrp->family == vrrp1->family &&
+			    vrrp->vrid == vrrp1->vrid &&
+			    IF_BASE_IFP(VRRP_CONFIGURED_IFP(vrrp)) == IF_BASE_IFP(VRRP_CONFIGURED_IFP(vrrp1))) {
+#ifdef _HAVE_VRRP_VMAC_
+				if (global_data->allow_if_changes &&
+				    (VRRP_CONFIGURED_IFP(vrrp)->changeable_type ||
+				     VRRP_CONFIGURED_IFP(vrrp1)->changeable_type)) {
+					if (VRRP_CONFIGURED_IFP(vrrp)->changeable_type) {
+						vrrp->num_script_if_fault++;
+						vrrp->duplicate_vrid_fault = true;
+					} else {
+						vrrp1->num_script_if_fault++;
+						vrrp1->duplicate_vrid_fault = true;
+					}
+					log_message(LOG_INFO, "(%s) - warning, VRID %d for IPv%d is currently duplicated on %s",
+							vrrp->iname, vrrp->vrid, vrrp->family == AF_INET ? 4 : 6, vrrp1->iname);
+				}
+				else
+#endif
+				     if (VRRP_CONFIGURED_IFP(vrrp)->ifindex) {
+					report_config_error(CONFIG_GENERAL_ERROR, "%s and %s both use VRID %d with IPv%d on interface %s",
+								vrrp->iname, vrrp1->iname, vrrp->vrid, vrrp->family == AF_INET ? 4 : 6, IF_BASE_IFP(VRRP_CONFIGURED_IFP(vrrp))->ifname);
+					return false;
+				}
+			}
 
-	/* open the socket */
-	fd = socket(family, SOCK_RAW, proto);
-	if (fd < 0) {
-		int err = errno;
-		log_message(LOG_INFO, "cant open raw socket. errno=%d", err);
-		return -1;
+#ifdef _HAVE_VRRP_VMAC_
+			VRRP_CONFIGURED_IFP(vrrp)->seen_interface = true;
+			IF_BASE_IFP(VRRP_CONFIGURED_IFP(vrrp))->seen_interface = true;
+#endif
+		}
 	}
 
-	/* Join the VRRP MCAST group */
-	if (!unicast)
-		if_join_vrrp_group(family, &fd, ifp, proto);
-	if (fd < 0)
-		return -1;
+	/* Build synchronization group index, and remove any
+	 * empty groups */
+	LIST_FOREACH_NEXT(vrrp_data->vrrp_sync_group, sgroup, e, next) {
+		if (!sgroup->iname) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Sync group %s has no virtual router(s) - removing", sgroup->gname);
+			free_list_element(vrrp_data->vrrp_sync_group, e);
+			continue;
+		}
 
-	if (family == AF_INET) {
-		/* Bind inbound stream */
-		if_setsockopt_bindtodevice(&fd, ifp);
+		vrrp_sync_set_group(sgroup);
+
+		if (!sgroup->vrrp_instances) {
+			free_list_element(vrrp_data->vrrp_sync_group, e);
+			continue;
+		}
 	}
 
-	return fd;
-}
+	/* Complete VRRP instance initialization */
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		if (!vrrp_complete_instance(vrrp))
+			return false;
 
-void
-close_vrrp_socket(vrrp_t * vrrp)
-{
-	if (LIST_ISEMPTY(vrrp->unicast_peer)) {
-		if_leave_vrrp_group(vrrp->family, vrrp->fd_in, vrrp->ifp);
-	} else {
-		close(vrrp->fd_in);
+		if (vrrp->ifp->mtu > max_mtu_len)
+			max_mtu_len = vrrp->ifp->mtu;
 	}
-	close(vrrp->fd_out);
-}
 
-int
-new_vrrp_socket(vrrp_t * vrrp)
-{
-	int old_fd = vrrp->fd_in;
-	int proto, ifindex, unicast;
+	/* Remove any VIPs from the list of default addresses for interfaces */
+	if (!reload)
+		remove_residual_vips();
 
-	/* close the desc & open a new one */
-	close_vrrp_socket(vrrp);
-	remove_vrrp_fd_bucket(vrrp);
-	proto = (vrrp->auth_type == VRRP_AUTH_AH) ? IPPROTO_IPSEC_AH : IPPROTO_VRRP;
-	ifindex = (vrrp->vmac_flags & VRRP_VMAC_FL_XMITBASE) ? IF_BASE_INDEX(vrrp->ifp) :
-							       IF_INDEX(vrrp->ifp);
-	unicast = !LIST_ISEMPTY(vrrp->unicast_peer);
-	vrrp->fd_in = open_vrrp_socket(vrrp->family, proto, ifindex, unicast);
-	vrrp->fd_out = open_vrrp_send_socket(vrrp->family, proto, ifindex, unicast);
-	alloc_vrrp_fd_bucket(vrrp);
+	set_vrrp_src_addr();
 
-	/* Sync the other desc */
-	set_vrrp_fd_bucket(old_fd, vrrp);
+	/* Build static track groups and remove empty groups */
+	static_track_group_init();
 
-	return vrrp->fd_in;
-}
+	/* Add pointers from sync group tracked scripts, file and interfaces
+	 * to members of the sync groups.
+	 * This must be called after vrrp_complete_instance() since this adds
+	 * (possibly weighted) tracking objects to vrrp instances, but any
+	 * weighted tracking objects configured directly against a vrrp instance
+	 * in a sync group must have the tracking objects removed unless
+	 * sgroup_tracking_weight is set */
+	sync_group_tracking_init();
 
-/* handle terminate state */
-void
-shutdown_vrrp_instances(void)
-{
-	list l = vrrp_data->vrrp;
-	element e;
-	vrrp_t *vrrp;
+	/* All the checks that can be done without actually loading the config
+	 * have been done now */
+	if (__test_bit(CONFIG_TEST_BIT, &debug))
+		return true;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vrrp = ELEMENT_DATA(e);
+	/* Create a notify FIFO if needed, and open it */
+	notify_fifo_open(&global_data->notify_fifo, &global_data->vrrp_notify_fifo, vrrp_notify_fifo_script_exit, "vrrp_");
 
-		/* Remove VIPs/VROUTEs */
-		if (vrrp->state == VRRP_STATE_MAST)
-			vrrp_restore_interface(vrrp, 1);
+	/* If we have a global garp_delay add it to any interfaces without a garp_delay */
+	if (global_data->vrrp_garp_interval || global_data->vrrp_gna_interval)
+		set_default_garp_delay();
 
-		/* Remove VMAC */
-		if (vrrp->vmac_flags & VRRP_VMAC_FL_SET)
-			netlink_link_del_vmac(vrrp);
+#ifdef _HAVE_FIB_ROUTING_
+	/* See if any static routes or rules need monitoring */
+	process_static_entries();
 
-		/* Run stop script */
-		if (vrrp->script_stop)
-			notify_exec(vrrp->script_stop);
+	/* If we are tracking any routes/rules, ask netlink to monitor them */
+	set_extra_netlink_monitoring(monitor_ipv4_routes, monitor_ipv6_routes, monitor_ipv4_rules, monitor_ipv6_rules);
+#endif
 
-#ifdef _HAVE_IPVS_SYNCD_
-		/*
-		 * Stop stalled syncd. IPVS syncd state is the
-		 * same as VRRP instance one. We need here to
-		 * stop stalled syncd thread according to last
-		 * VRRP instance state.
-		 */
-		if (vrrp->lvs_syncd_if)
-			ipvs_syncd_cmd(IPVS_STOPDAEMON, NULL,
-				       (vrrp->state == VRRP_STATE_MAST) ? IPVS_MASTER:
-									  IPVS_BACKUP,
-				       vrrp->vrid);
+#ifdef _WITH_LINKBEAT_
+	/* We need to know the state of interfaces for the next loop */
+	init_interface_linkbeat();
 #endif
+
+	/* Initialise any tracking files */
+	if (!LIST_ISEMPTY(vrrp_data->vrrp_track_files))
+		init_track_files(vrrp_data->vrrp_track_files);
+
+#ifdef _WITH_CN_PROC_
+	/* Initialise any process tracking */
+	if (!LIST_ISEMPTY(vrrp_data->vrrp_track_processes)) {
+		if (reload)
+			reload_track_processes();
+		else
+			init_track_processes(vrrp_data->vrrp_track_processes);
 	}
-}
+#endif
 
-/* complete vrrp structure */
-static int
-vrrp_complete_instance(vrrp_t * vrrp)
-{
-	vrrp->state = VRRP_STATE_INIT;
-	if (!vrrp->adver_int)
-		vrrp->adver_int = VRRP_ADVER_DFL * TIMER_HZ;
-	if (!vrrp->effective_priority)
-		vrrp->effective_priority = VRRP_PRIO_DFL;
+	/* Check for instance down or changed priority due to an interface, script, file or bfd */
+	initialise_tracking_priorities();
+
+	/* Make sure that if any sync group has member wanting to start in
+	 * master state, then all can start in master state. */
+	LIST_FOREACH(vrrp_data->vrrp_sync_group, sgroup, e1) {
+		have_backup = false;
+		have_master = false;
+		LIST_FOREACH(sgroup->vrrp_instances, vrrp, e) {
+			if (vrrp->wantstate == VRRP_STATE_BACK || vrrp->base_priority != VRRP_PRIO_OWNER)
+				have_backup = true;
+			if (vrrp->wantstate == VRRP_STATE_MAST)
+				have_master = true;
+			if (have_master && have_backup) {
+				/* This looks wrong using the same loop variables as a containing
+				 * loop, but we break out of the outer loop after this loop */
+				LIST_FOREACH(sgroup->vrrp_instances, vrrp, e) {
+					if (vrrp->wantstate == VRRP_STATE_MAST)
+						vrrp->wantstate = VRRP_STATE_BACK;
+				}
+				break;
+			}
+		}
+	}
 
-	return (chk_min_cfg(vrrp));
-}
+// What we want to do is make all the settings for vrrp instances, including scripts in init
+// Then copy old vrrp master/backup in !fault or num_script_init
+//   and then go through and set up sync groups in fault or init with counts
+// TODO-PQA
+	/* Set all sync group members to fault state if sync group is in fault state */
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		if (vrrp->state == VRRP_STATE_FAULT ||
+		    (vrrp->sync && vrrp->sync->state == VRRP_STATE_FAULT)) {
+			vrrp->state = VRRP_STATE_FAULT;
+
+			/* If we are reloading and the vrrp instance was already
+			 * in fault state, we don't need to notify again */
+			if (reload) {
+				old_vrrp = vrrp_exist(vrrp, &old_vrrp_data->vrrp);
+				if (old_vrrp && old_vrrp->state == VRRP_STATE_FAULT)
+					continue;
+			}
 
-int
-vrrp_complete_init(void)
-{
-	list l;
-	element e;
-	vrrp_t *vrrp;
-	vrrp_sgroup_t *sgroup;
+			log_message(LOG_INFO, "(%s) entering FAULT state", vrrp->iname);
 
-	/* Complete VRRP instance initialization */
-	l = vrrp_data->vrrp;
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vrrp = ELEMENT_DATA(e);
-		if (!vrrp_complete_instance(vrrp))
-			return 0;
+			send_instance_notifies(vrrp);
+		}
 	}
 
-	/* Build synchronization group index */
-	l = vrrp_data->vrrp_sync_group;
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		sgroup = ELEMENT_DATA(e);
-		vrrp_sync_set_group(sgroup);
+	if (reload) {
+		/* Now step through the old vrrp to set the status on matching new instances */
+		LIST_FOREACH(old_vrrp_data->vrrp, old_vrrp, e) {
+			/* We work out for ourselves if the vrrp instance
+			 * should be in fault state, so it doesn't matter
+			 * if it was before */
+			if (old_vrrp->state == VRRP_STATE_FAULT)
+				continue;
+
+			vrrp = vrrp_exist(old_vrrp, &vrrp_data->vrrp);
+			if (vrrp) {
+				/* If we have detected a fault, don't override it */
+				if (vrrp->state == VRRP_STATE_FAULT || vrrp->num_script_init)
+					continue;
+
+				vrrp->state = old_vrrp->state;
+				vrrp->wantstate = old_vrrp->state;
+			}
+		}
+
+		/* Now see if any sync groups should be master */
+		LIST_FOREACH(vrrp_data->vrrp_sync_group, sgroup, e) {
+			if (sgroup->num_member_fault || sgroup->num_member_init)
+				continue;
+
+			have_master = true;
+			LIST_FOREACH(sgroup->vrrp_instances, vrrp, e1) {
+				if (vrrp->state != VRRP_STATE_MAST) {
+					have_master = false;
+					break;
+				}
+			}
+			if (have_master)
+				sgroup->state = VRRP_STATE_MAST;
+		}
 	}
 
-	return 1;
-}
+#ifdef _WITH_LVS_
+	/* Set up the lvs_syncd vrrp */
+	if (global_data->lvs_syncd.vrrp_name) {
+		LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+			if (!strcmp(global_data->lvs_syncd.vrrp_name, vrrp->iname)) {
+				global_data->lvs_syncd.vrrp = vrrp;
 
-int
-vrrp_ipvs_needed(void)
-{
-	vrrp_t *vrrp;
-	element e;
+				break;
+			}
+		}
 
-	if (!vrrp_data)
-		return 0;
+		if (!global_data->lvs_syncd.vrrp) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Unable to find vrrp instance %s for lvs_syncd - clearing lvs_syncd config", global_data->lvs_syncd.vrrp_name);
+			FREE_CONST_PTR(global_data->lvs_syncd.ifname);
+			global_data->lvs_syncd.ifname = NULL;
+			global_data->lvs_syncd.syncid = PARAMETER_UNSET;
+		}
+		else if (global_data->lvs_syncd.syncid == PARAMETER_UNSET) {
+			/* If no syncid configured, use vrid */
+			global_data->lvs_syncd.syncid = global_data->lvs_syncd.vrrp->vrid;
+		}
 
-	for (e = LIST_HEAD(vrrp_data->vrrp); e; ELEMENT_NEXT(e)) {
-		vrrp = ELEMENT_DATA(e);
-		if (vrrp->lvs_syncd_if) {
-			return 1;
+		/* vrrp_name is no longer used */
+		FREE_CONST_PTR(global_data->lvs_syncd.vrrp_name);
+		global_data->lvs_syncd.vrrp_name = NULL;
+	}
+#endif
+
+	/* Identify and remove any unused tracking scripts */
+	LIST_FOREACH_NEXT(vrrp_data->vrrp_script, scr, e, next) {
+		if (LIST_ISEMPTY(scr->tracking_vrrp)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Warning - script %s is not used", scr->sname);
+			free_list_element(vrrp_data->vrrp_script, e);
 		}
 	}
 
-	return 0;
+	alloc_vrrp_buffer(max_mtu_len);
+
+	return true;
 }
 
-/* Try to find a VRRP instance */
-static vrrp_t *
-vrrp_exist(vrrp_t * old_vrrp)
+void vrrp_restore_interfaces_startup(void)
 {
 	element e;
-	list l = vrrp_data->vrrp;
 	vrrp_t *vrrp;
 
-	if (LIST_ISEMPTY(l))
-		return NULL;
-
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vrrp = ELEMENT_DATA(e);
-		if (!strcmp(vrrp->iname, old_vrrp->iname))
-			return vrrp;
+/* We don't know which VMACs are ours at startup. Delete all irrelevant addresses from VMACs here. But,
+ * since if we configure a VMAC on a VMAC, it ends up on the underlying interface, we don't need to
+ * have addresses for VMACs, accept the link local address based on the MAC of the underlying i/f. */
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		if (vrrp->vipset)
+			vrrp_restore_interface(vrrp, false, true);
 	}
-
-	return NULL;
 }
 
-/* Clear VIP|EVIP not present into the new data */
+/* Clear VIP|EVIP not present in the new data */
 static void
-clear_diff_vrrp_vip(vrrp_t * old_vrrp, int type)
+clear_diff_vrrp_vip(vrrp_t *old_vrrp, vrrp_t *vrrp)
 {
-    char old_dpdk_port[16];
-    char dpdk_port[16];
-	vrrp_t *vrrp = vrrp_exist(old_vrrp);
-	list l = (type == VRRP_VIP_TYPE) ? old_vrrp->vip : old_vrrp->evip;
-	list n = (type == VRRP_VIP_TYPE) ? vrrp->vip : vrrp->evip;
-    strcpy (old_dpdk_port, old_vrrp->dpdk_ifp);
-    strcpy (dpdk_port, vrrp->dpdk_ifp);
+	list addr_list;
+	bool fw_set = false;
+
+// !!!! TODO need to handle accept_mode changing - either remove all or add all. Do new entries get added for new VIPs?
+	if (!old_vrrp->vipset)
+		return;
 
-	clear_diff_address(l, n, old_dpdk_port, dpdk_port);
+	addr_list = alloc_list(NULL, NULL);
+	get_diff_address(old_vrrp, vrrp, addr_list);
+
+#ifdef _WITH_FIREWALL_
+	fw_set = (old_vrrp->base_priority != VRRP_PRIO_OWNER && !old_vrrp->accept);
+	vrrp->firewall_rules_set = fw_set;
+#endif
+	clear_address_list(addr_list, fw_set, old_vrrp->dpdk_ifp);
+
+	free_list(&addr_list);
 }
 
+#ifdef _HAVE_FIB_ROUTING_
 /* Clear virtual routes not present in the new data */
 static void
-clear_diff_vrrp_vroutes(vrrp_t * old_vrrp)
+clear_diff_vrrp_vroutes(vrrp_t *old_vrrp, vrrp_t *vrrp)
 {
-	vrrp_t *vrrp = vrrp_exist(old_vrrp);
 	clear_diff_routes(old_vrrp->vroutes, vrrp->vroutes);
 }
 
-/* Keep the state from before reload */
+/* Clear virtual rules not present in the new data */
 static void
-reset_vrrp_state(vrrp_t * old_vrrp)
-{
-	/* Keep VRRP state, ipsec AH seq_number */
-	vrrp_t *vrrp = vrrp_exist(old_vrrp);
-	vrrp->state = old_vrrp->state;
-	vrrp->init_state = old_vrrp->state;
-	vrrp->wantstate = old_vrrp->state;
-	if (!old_vrrp->sync)
-		vrrp->effective_priority = old_vrrp->effective_priority;
-	memcpy(vrrp->ipsecah_counter, old_vrrp->ipsecah_counter, sizeof(seq_counter_t));
-
-#ifdef _HAVE_IPVS_SYNCD_
-	if (old_vrrp->lvs_syncd_if)
-		ipvs_syncd_cmd(IPVS_STOPDAEMON, NULL,
-			       (old_vrrp->state == VRRP_STATE_MAST) ? IPVS_MASTER:
-								      IPVS_BACKUP,
-			       old_vrrp->vrid);
-	if (vrrp->lvs_syncd_if)
-		ipvs_syncd_cmd(IPVS_STARTDAEMON, NULL,
-			       (vrrp->state == VRRP_STATE_MAST) ? IPVS_MASTER:
-								  IPVS_BACKUP,
-			       vrrp->vrid);
+clear_diff_vrrp_vrules(vrrp_t *old_vrrp, vrrp_t *vrrp)
+{
+	clear_diff_rules(old_vrrp->vrules, vrrp->vrules);
+}
+#endif
+
+/* Keep the state from before reload */
+static bool
+restore_vrrp_state(vrrp_t *old_vrrp, vrrp_t *vrrp)
+{
+	bool added_ip_addr = false;
+
+	/* If the new state is master, we must be reloading from master */
+	vrrp->reload_master = vrrp->state == VRRP_STATE_MAST;
+
+	/* Save old stats */
+	memcpy(vrrp->stats, old_vrrp->stats, sizeof(vrrp_stats));
+
+#ifdef _WITH_VRRP_AUTH_
+	/* Keep ipsec AH seq_number */
+	memcpy(&vrrp->ipsecah_counter, &old_vrrp->ipsecah_counter, sizeof(seq_counter_t));
 #endif
 
 	/* Remember if we had vips up and add new ones if needed */
 	vrrp->vipset = old_vrrp->vipset;
 	if (vrrp->vipset) {
+#ifdef _WITH_FIREWALL_
+		vrrp_handle_accept_mode(vrrp, IPADDRESS_ADD, false);
+#endif
 		if (!LIST_ISEMPTY(vrrp->vip))
-			vrrp_handle_ipaddress(vrrp, IPADDRESS_ADD, VRRP_VIP_TYPE);
-		if (!LIST_ISEMPTY(vrrp->evip))
-			vrrp_handle_ipaddress(vrrp, IPADDRESS_ADD, VRRP_EVIP_TYPE);
+			added_ip_addr = vrrp_handle_ipaddress(vrrp, IPADDRESS_ADD, VRRP_VIP_TYPE, false);
+		if (!LIST_ISEMPTY(vrrp->evip)) {
+			if (vrrp_handle_ipaddress(vrrp, IPADDRESS_ADD, VRRP_EVIP_TYPE, false))
+				added_ip_addr = true;
+		}
+#ifdef _HAVE_FIB_ROUTING_
 		if (!LIST_ISEMPTY(vrrp->vroutes))
 			vrrp_handle_iproutes(vrrp, IPROUTE_ADD);
+		if (!LIST_ISEMPTY(vrrp->vrules))
+			vrrp_handle_iprules(vrrp, IPRULE_ADD, false);
+#endif
 	}
+
+	return added_ip_addr;
 }
 
 /* Diff when reloading configuration */
@@ -1358,51 +3991,88 @@ void
 clear_diff_vrrp(void)
 {
 	element e;
-	list l = old_vrrp_data->vrrp;
 	vrrp_t *vrrp;
 
-	if (LIST_ISEMPTY(l))
-		return;
-
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vrrp = ELEMENT_DATA(e);
+	LIST_FOREACH(old_vrrp_data->vrrp, vrrp, e) {
 		vrrp_t *new_vrrp;
 
 		/*
-		 * Try to find this vrrp into the new conf data
+		 * Try to find this vrrp in the new conf data
 		 * reloaded.
 		 */
-		new_vrrp = vrrp_exist(vrrp);
+		new_vrrp = vrrp_exist(vrrp, &vrrp_data->vrrp);
 		if (!new_vrrp) {
-			vrrp_restore_interface(vrrp, 1);
-
+			if (vrrp->state != VRRP_STATE_FAULT) {
+				if (vrrp->state == VRRP_STATE_MAST)
+					vrrp_restore_interface(vrrp, true, false);
+
+				/* We don't have a way of saying that an instance is deleted;
+				 * the nearest thing is to say the instance is in fault state,
+				 * i.e. it cannot run, which it certainly can't if it isr
+				 * deleted. */
+				vrrp->state = VRRP_STATE_FAULT;
+				send_instance_notifies(vrrp);
+			}
+#ifdef _HAVE_VRRP_VMAC_
+// TODO - the vmac may be being used by another instance
 			/* Remove VMAC if one was created */
-			if (vrrp->vmac_flags & VRRP_VMAC_FL_SET) 
+			if (vrrp->ifp->is_ours /*__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags)*/)
 				netlink_link_del_vmac(vrrp);
+#endif
+#ifdef _WITH_DBUS_
+			/* Remove DBus object */
+			if (global_data->enable_dbus)
+				dbus_remove_object(vrrp);
+#endif
 		} else {
 			/*
 			 * If this vrrp instance exist in new
 			 * data, then perform a VIP|EVIP diff.
 			 */
-			clear_diff_vrrp_vip(vrrp, VRRP_VIP_TYPE);
-			clear_diff_vrrp_vip(vrrp, VRRP_EVIP_TYPE);
+#ifdef _HAVE_FIB_ROUTING_
+			/* virtual rules diff */
+			clear_diff_vrrp_vrules(vrrp, new_vrrp);
 
 			/* virtual routes diff */
-			clear_diff_vrrp_vroutes(vrrp);
+			clear_diff_vrrp_vroutes(vrrp, new_vrrp);
+#endif
+
+			clear_diff_vrrp_vip(vrrp, new_vrrp);
 
-			/* 
-			 * Remove VMAC if it existed in old vrrp instance,
+#ifdef _HAVE_VRRP_VMAC_
+			/*
+			 * Remove VMAC/IPVLAN if it existed in old vrrp instance,
 			 * but not the new one.
 			 */
-			if (vrrp->vmac_flags & VRRP_VMAC_FL_SET &&
-			    !(new_vrrp->vmac_flags & VRRP_VMAC_FL_SET)) {
+			if (vrrp->ifp->is_ours &&
+			    ((__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags) &&
+			      !__test_bit(VRRP_VMAC_BIT, &new_vrrp->vmac_flags))
+#ifdef _HAVE_VRRP_IPVLAN_
+			     || (__test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags) &&
+				 !__test_bit(VRRP_IPVLAN_BIT, &new_vrrp->vmac_flags))
+#endif
+										     )) {
 				netlink_link_del_vmac(vrrp);
 			}
+#endif
 
 			/* reset the state */
-			reset_vrrp_state(vrrp);
+			if (restore_vrrp_state(vrrp, new_vrrp)) {
+				/* There were addresses added, so set GARP/GNA for them.
+				 * This is a bit over the top since it will send GARPs/GNAs for
+				 * all the addresses, but at least we will do so for the new addresses. */
+				vrrp_send_link_update(new_vrrp, new_vrrp->garp_rep);
+
+				/* set refresh timer */
+				if (timerisset(&new_vrrp->garp_refresh))
+					new_vrrp->garp_refresh_timer = timer_add_now(new_vrrp->garp_refresh);
+			}
 		}
 	}
+
+#ifdef _WITH_FIREWALL_
+//XXX	firewall_close();
+#endif
 }
 
 /* Set script status to a sensible value on reload */
@@ -1410,21 +4080,57 @@ void
 clear_diff_script(void)
 {
 	element e;
-	list l = old_vrrp_data->vrrp_script;
 	vrrp_script_t *vscript, *nvscript;
 
-	if (LIST_ISEMPTY(l))
-		return;
-
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vscript = ELEMENT_DATA(e);
-		if (vscript->result >= vscript->rise) {
-			nvscript = find_script_by_name(vscript->sname);
-			if (nvscript) {
-				log_message(LOG_INFO, "VRRP_Script(%s) considered successful on reload",
-					   nvscript->sname);
-				nvscript->result = VRRP_SCRIPT_STATUS_INIT_GOOD;
+	LIST_FOREACH(old_vrrp_data->vrrp_script, vscript, e) {
+		nvscript = find_script_by_name(vscript->sname);
+		if (nvscript) {
+			/* Set the script result to match the previous result */
+			if (vscript->result < vscript->rise) {
+				if (!vscript->result)
+					nvscript->result = 0;
+				else {
+					nvscript->result = nvscript->rise - (vscript->rise - vscript->result);
+					if (nvscript->result < 0)
+						nvscript->result = 0;
+				}
+				log_message(LOG_INFO, "VRRP_Script(%s) considered unsuccessful on reload", nvscript->sname);
+			} else {
+				if (vscript->result == vscript->rise + vscript->fall - 1)
+					nvscript->result = nvscript->rise + nvscript->fall - 1;
+				else {
+					nvscript->result = nvscript->rise + (vscript->result - vscript->rise);
+					if (nvscript->result >= nvscript->rise + nvscript->fall)
+						nvscript->result = nvscript->rise + nvscript->fall - 1;
+				}
+				log_message(LOG_INFO, "VRRP_Script(%s) considered successful on reload", nvscript->sname);
 			}
+			nvscript->last_status = vscript->last_status;
+			nvscript->init_state = SCRIPT_INIT_STATE_DONE;
 		}
 	}
 }
+
+#ifdef _WITH_BFD_
+/* Set bfd status to match old instance */
+void
+clear_diff_bfd(void)
+{
+	element e;
+	vrrp_tracked_bfd_t *vbfd, *nvbfd;
+
+	LIST_FOREACH(old_vrrp_data->vrrp_track_bfds, vbfd, e) {
+		nvbfd = find_vrrp_tracked_bfd_by_name(vbfd->bname);
+		if (nvbfd)
+			vbfd->bfd_up = nvbfd->bfd_up;
+	}
+}
+#endif
+
+#ifdef THREAD_DUMP
+void
+register_vrrp_fifo_addresses(void)
+{
+	register_thread_address("vrrp_notify_fifo_script_exit", vrrp_notify_fifo_script_exit);
+}
+#endif
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_arp.c b/tools/keepalived/keepalived/vrrp/vrrp_arp.c
index 7b504014b..6a92302ba 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_arp.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_arp.c
@@ -17,29 +17,36 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
 /* system includes */
 #include <unistd.h>
-#include <netpacket/packet.h>
+#include <net/ethernet.h>
+#include <net/if_arp.h>
+#include <linux/if_packet.h>
+#include <errno.h>
 
 /* local includes */
 #include "logger.h"
 #include "memory.h"
 #include "utils.h"
+#include "bitops.h"
+#include "vrrp_scheduler.h"
 #include "vrrp_arp.h"
+#if !HAVE_DECL_SOCK_CLOEXEC
+#include "old_socket.h"
+#endif
 
-
-/* Build a gratuitous ARP message over a specific interface */
-int send_gratuitous_arp(ip_address_t *ipaddress)
+void send_gratuitous_arp(ip_address_t *ipaddress)
 {
     log_message(LOG_INFO, "send garp for addr %s.\n", 
             inet_ntop2(ipaddress->u.sin.sin_addr.s_addr));
-    return ipvs_send_gratuitous_arp(&(ipaddress->u.sin.sin_addr));
+    ipvs_send_gratuitous_arp(&(ipaddress->u.sin.sin_addr));
 }
 
-
 /*
  *	Gratuitous ARP init/close
  */
@@ -47,6 +54,7 @@ void gratuitous_arp_init(void)
 {
 	log_message(LOG_INFO, "Registering DPVS gratuitous ARP.\n");
 }
+
 void gratuitous_arp_close(void)
 {
 	log_message(LOG_INFO, "Unregistering DPVS gratuitous ARP.\n");
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_daemon.c b/tools/keepalived/keepalived/vrrp/vrrp_daemon.c
index b10645dc7..5958173e2 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_daemon.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_daemon.c
@@ -17,59 +17,212 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#ifdef _HAVE_SCHED_RT_
+#include <sched.h>
+#endif
+#include <errno.h>
+#include <signal.h>
+#include <stdlib.h>
+#include <unistd.h>
+#include <sys/prctl.h>
+#include <sys/time.h>
+#include <sys/resource.h>
+
+#ifdef THREAD_DUMP
+#ifdef _WITH_SNMP_
+#include "snmp.h"
+#endif
+#include "scheduler.h"
+#include "smtp.h"
+#include "vrrp_track.h"
+#endif
 #include "vrrp_daemon.h"
 #include "vrrp_scheduler.h"
-#include "vrrp_if.h"
 #include "vrrp_arp.h"
 #include "vrrp_ndisc.h"
-#include "vrrp_netlink.h"
-#include "vrrp_ipaddress.h"
+#include "keepalived_netlink.h"
+#ifdef _HAVE_FIB_ROUTING_
+#include "vrrp_iprule.h"
 #include "vrrp_iproute.h"
+#endif
 #include "vrrp_parser.h"
-#include "vrrp_data.h"
 #include "vrrp.h"
+#include "vrrp_print.h"
 #include "global_data.h"
 #include "pidfile.h"
-#include "daemon.h"
 #include "logger.h"
 #include "signals.h"
-#ifdef _WITH_LVS_
-  #include "ipvswrapper.h"
-#endif
-#ifdef _WITH_SNMP_
+#include "process.h"
+#include "memory.h"
+#include "bitops.h"
+#include "rttables.h"
+#if defined _WITH_SNMP_RFC_ || defined _WITH_SNMP_VRRP_
   #include "vrrp_snmp.h"
 #endif
+#ifdef _WITH_DBUS_
+  #include "vrrp_dbus.h"
+#endif
 #include "list.h"
 #include "main.h"
-#include "memory.h"
 #include "parser.h"
+#include "utils.h"
+#include "vrrp_notify.h"
+#include "vrrp_track.h"
+#ifdef _WITH_JSON_
+#include "vrrp_json.h"
+#endif
+#ifdef _WITH_BFD_
+#include "bfd_daemon.h"
+#endif
+#ifdef _WITH_FIREWALL_
+#include "vrrp_firewall.h"
+#endif
+#ifdef _WITH_CN_PROC_
+#include "track_process.h"
+#endif
 
-extern char *vrrp_pidfile;
+/* Global variables */
+bool non_existent_interface_specified;
 
-/* Daemon stop sequence */
+/* Forward declarations */
+#ifndef _DEBUG_
+static int print_vrrp_data(thread_ref_t);
+static int print_vrrp_stats(thread_ref_t);
+static int reload_vrrp_thread(thread_ref_t);
+#ifdef _WITH_JSON_
+static int print_vrrp_json(thread_ref_t);
+#endif
+#endif
+#ifdef _WITH_PERF_
+perf_t perf_run = PERF_NONE;
+#endif
+
+/* local variables */
+static const char *vrrp_syslog_ident;
+#ifndef _DEBUG_
+static bool two_phase_terminate;
+#endif
+
+#ifdef _VRRP_FD_DEBUG_
+bool do_vrrp_fd_debug;
+#endif
+
+#ifndef _DEBUG_
+#ifdef _VRRP_FD_DEBUG_
 static void
-stop_vrrp(void)
+dump_vrrp_fd(void)
+{
+	element e;
+	sock_t *sock;
+	vrrp_t *vrrp;
+	timeval_t time_diff;
+
+	log_message(LOG_INFO, "----[ Begin VRRP fd dump ]----");
+
+	LIST_FOREACH(vrrp_data->vrrp_socket_pool, sock, e) {
+		log_message(LOG_INFO, "  Sockets %d, %d", sock->fd_in, sock->fd_out);
+
+		rb_for_each_entry_cached(vrrp, &sock->rb_sands, rb_sands) {
+			if (vrrp->sands.tv_sec == TIMER_DISABLED)
+				log_message(LOG_INFO, "    %s: sands DISABLED", vrrp->iname);
+			else {
+				timersub(&vrrp->sands, &time_now, &time_diff);
+				if (time_diff.tv_sec >= 0)
+					log_message(LOG_INFO, "    %s: sands %ld.%6.6ld", vrrp->iname, time_diff.tv_sec, time_diff.tv_usec);
+				else
+					log_message(LOG_INFO, "    %s: sands -%ld.%6.6ld", vrrp->iname, -time_diff.tv_sec - (time_diff.tv_usec ? 1 : 0), time_diff.tv_usec ? 1000000 - time_diff.tv_usec : 0);
+			}
+		}
+
+		rb_for_each_entry(vrrp, &sock->rb_vrid, rb_vrid)
+			log_message(LOG_INFO, "    %s: vrid %d", vrrp->iname, vrrp->vrid);
+	}
+
+	log_message(LOG_INFO, "----[ End VRRP fd dump ]----");
+}
+#endif
+#endif
+
+static void
+set_vrrp_max_fds(void)
+{
+	if (!vrrp_data->vrrp)
+		return;
+
+	/* Allow:
+	 * 2 per vrrp instance - always needed for VMAC instances
+	 *
+	 * plus:
+	 *
+	 * stdin/stdout/stderr
+	 * logger
+	 * logger file
+	 * timer fd
+	 * inotify fd
+	 * signal fd
+	 * epoll fd
+	 * 3 for SNMP
+	 * 2 for netlink
+	 * bfd pipe
+	 * 2 * notify fifo pipes
+	 * track_file (only one open at a time)
+	 * mem_check file
+	 * USR1/USR2/JSON data
+	 * smtp-alert file
+	 *
+	 * plus:
+	 *
+	 * 20 spare (in case we have forgotten anything)
+	 */
+	set_max_file_limit(LIST_SIZE(vrrp_data->vrrp) * 2 + vrrp_data->num_smtp_alert + 21 + 20);
+}
+
+#ifdef _WITH_LVS_
+static bool
+vrrp_ipvs_needed(void)
+{
+	return !!(global_data->lvs_syncd.ifname);
+}
+#endif
+
+static int
+vrrp_terminate_phase2(int exit_status)
 {
-	signal_handler_destroy();
+	struct rusage usage;
+
+#ifdef _NETLINK_TIMERS_
+	if (do_netlink_timers)
+		report_and_clear_netlink_timers("Starting shutdown instances");
+#endif
 
-	if (!(debug & 8))
+	if (!__test_bit(DONT_RELEASE_VRRP_BIT, &debug))
 		shutdown_vrrp_instances();
 
-	/* Clear static entries */
-	netlink_rtlist(vrrp_data->static_routes, IPROUTE_DEL);
-	netlink_iplist(vrrp_data->static_addresses, IPADDRESS_DEL, NULL);
+#ifdef _NETLINK_TIMERS_
+	if (do_netlink_timers)
+		report_and_clear_netlink_timers("Completed shutdown instances");
+#endif
 
-#ifdef _WITH_SNMP_
-	if (snmp)
+#if defined _WITH_SNMP_RFC_ || defined _WITH_SNMP_VRRP_
+	if (
+#ifdef _WITH_SNMP_VRRP_
+	    global_data->enable_snmp_vrrp ||
+#endif
+#ifdef _WITH_SNMP_RFCV2_
+	    global_data->enable_snmp_rfcv2 ||
+#endif
+#ifdef _WITH_SNMP_RFCV3_
+	    global_data->enable_snmp_rfcv3 ||
+#endif
+	    snmp_option)
 		vrrp_snmp_agent_close();
 #endif
 
-	/* Stop daemon */
-	pidfile_rm(vrrp_pidfile);
-
 #ifdef _WITH_LVS_
 	if (vrrp_ipvs_needed()) {
 		/* Clean ipvs related */
@@ -77,145 +230,563 @@ stop_vrrp(void)
 	}
 #endif
 
-	/* Clean data */
-	free_global_data(global_data);
-	vrrp_dispatcher_release(vrrp_data);
-	free_vrrp_data(vrrp_data);
-	free_vrrp_buffer();
-	free_interface_queue();
+#ifdef _WITH_FIREWALL_
+	firewall_fini();
+#endif
+
+	kernel_netlink_close_cmd();
 	thread_destroy_master(master);
+	master = NULL;
 	gratuitous_arp_close();
 	ndisc_close();
+#ifdef _WITH_LINKBEAT_
+	close_interface_linkbeat();
+#endif
 
-#ifdef _DEBUG_
-	keepalived_free_final("VRRP Child process");
+#ifdef _WITH_DBUS_
+	if (global_data->enable_dbus)
+		dbus_stop();
 #endif
 
+	if (global_data->vrrp_notify_fifo.fd != -1)
+		notify_fifo_close(&global_data->notify_fifo, &global_data->vrrp_notify_fifo);
+
+	free_global_data(global_data);
+	free_vrrp_data(vrrp_data);
+	free_vrrp_buffer();
+	free_interface_queue();
+	free_parent_mallocs_exit();
+
 	/*
 	 * Reached when terminate signal catched.
 	 * finally return to parent process.
 	 */
+	if (__test_bit(LOG_DETAIL_BIT, &debug)) {
+		getrusage(RUSAGE_SELF, &usage);
+		log_message(LOG_INFO, "Stopped - used %ld.%6.6ld user time, %ld.%6.6ld system time", usage.ru_utime.tv_sec, usage.ru_utime.tv_usec, usage.ru_stime.tv_sec, usage.ru_stime.tv_usec);
+	}
+	else
+		log_message(LOG_INFO, "Stopped");
+
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		close_log_file();
+#endif
 	closelog();
-	exit(0);
+
+#ifndef _MEM_CHECK_LOG_
+	FREE_CONST_PTR(vrrp_syslog_ident);
+#else
+	if (vrrp_syslog_ident)
+		free(no_const_char_p(vrrp_syslog_ident));
+#endif
+	close_std_fd();
+
+	/* Stop daemon */
+	pidfile_rm(vrrp_pidfile);
+
+	exit(exit_status);
+}
+
+static int
+vrrp_shutdown_backstop_thread(thread_ref_t thread)
+{
+	int count = 0;
+	thread_ref_t t;
+
+	/* Force terminate all script processes */
+	if (thread->master->child.rb_root.rb_node)
+		script_killall(thread->master, SIGKILL, true);
+
+	rb_for_each_entry_cached_const(t, &thread->master->child, n)
+		count++;
+
+	log_message(LOG_ERR, "Backstop thread invoked: shutdown timer %srunning, child count %d",
+			thread->master->shutdown_timer_running ? "" : "not ", count);
+
+	thread_add_terminate_event(thread->master);
+
+	return 0;
+}
+
+static int
+vrrp_shutdown_timer_thread(thread_ref_t thread)
+{
+	thread->master->shutdown_timer_running = false;
+
+	if (thread->master->child.rb_root.rb_node)
+		thread_add_timer_shutdown(thread->master, vrrp_shutdown_backstop_thread, NULL, TIMER_HZ / 10);
+	else
+		thread_add_terminate_event(thread->master);
+
+	return 0;
+}
+
+/* Daemon stop sequence */
+static void
+vrrp_terminate_phase1(bool schedule_next_thread)
+{
+#ifdef _WITH_PERF_
+	if (perf_run == PERF_END)
+		run_perf("vrrp", global_data->network_namespace, global_data->instance_name);
+#endif
+
+#ifdef _WITH_CN_PROC_
+	/* Stop monitoring process terminations */
+	end_process_monitor();
+#endif
+
+	/* Terminate all script processes */
+	if (master->child.rb_root.rb_node)
+		script_killall(master, SIGTERM, true);
+
+	kernel_netlink_close_monitor();
+
+#ifdef _NETLINK_TIMERS_
+	if (do_netlink_timers)
+		report_and_clear_netlink_timers("Start shutdown");
+#endif
+
+#ifdef _WITH_LVS_
+        if (global_data->lvs_syncd.vrrp) {
+                /* Stop syncd if controlled by this VRRP instance. */
+                ipvs_syncd_cmd(IPVS_STOPDAEMON, &global_data->lvs_syncd,
+                               (global_data->lvs_syncd.vrrp->state == VRRP_STATE_MAST) ? IPVS_MASTER: IPVS_BACKUP,
+                               true, false);
+        }
+#endif
+
+	/* Ensure any interfaces are in backup mode,
+	 * sending a priority 0 vrrp message
+	 */
+	if (!__test_bit(DONT_RELEASE_VRRP_BIT, &debug))
+		restore_vrrp_interfaces();
+
+#ifdef _NETLINK_TIMERS_
+	if (do_netlink_timers)
+		report_and_clear_netlink_timers("Restored interfaces");
+#endif
+
+	if (vrrp_data->vrrp_track_files)
+		stop_track_files();
+
+	/* Clear static entries */
+#ifdef _HAVE_FIB_ROUTING_
+	netlink_rulelist(vrrp_data->static_rules, IPRULE_DEL, false);
+	netlink_rtlist(vrrp_data->static_routes, IPROUTE_DEL);
+#endif
+	netlink_iplist(vrrp_data->static_addresses, IPADDRESS_DEL, false, NULL);
+
+#ifdef _NETLINK_TIMERS_
+	if (do_netlink_timers)
+		report_and_clear_netlink_timers("Static addresses/routes/rules cleared");
+#endif
+
+	/* Clean data */
+	vrrp_dispatcher_release(vrrp_data);
+
+	/* Send shutdown notifications */
+	notify_shutdown();
+
+	if (schedule_next_thread) {
+		if (!LIST_ISEMPTY(vrrp_data->vrrp)) {
+			/* This is not nice, but it significantly increases the chances
+			 * of an IGMP leave group being sent for some reason.
+			 * Since we are about to exit, it doesn't affect anything else
+			 * running. */
+			thread_add_timer_shutdown(master, vrrp_shutdown_timer_thread, NULL, TIMER_HZ);
+			master->shutdown_timer_running = true;
+		}
+		else if (master->child.rb_root.rb_node) {
+			/* Add a backstop timer for the shutdown */
+			thread_add_timer_shutdown(master, vrrp_shutdown_backstop_thread, NULL, TIMER_HZ);
+		}
+		else
+			thread_add_terminate_event(master);
+	}
+}
+
+#ifndef _DEBUG_
+static int
+start_vrrp_termination_thread(__attribute__((unused)) thread_ref_t thread)
+{
+	/* This runs in the context of a thread */
+	two_phase_terminate = true;
+
+	vrrp_terminate_phase1(true);
+
+	return 0;
+}
+#endif
+
+/* Daemon stop sequence */
+static void
+stop_vrrp(int status)
+{
+	if (__test_bit(CONFIG_TEST_BIT, &debug))
+		return;
+
+	/* This runs in the main process, not in the context of a thread */
+	vrrp_terminate_phase1(false);
+
+	vrrp_terminate_phase2(status);
+
+	/* unreachable */
+	exit(status);
 }
 
 /* Daemon init sequence */
 static void
-start_vrrp(void)
+start_vrrp(data_t *prev_global_data)
 {
+	/* Clear the flags used for optimising performance */
+	clear_summary_flags();
+
 	/* Initialize sub-system */
-	init_interface_queue();
-	gratuitous_arp_init();
-	ndisc_init();
-#ifdef _WITH_SNMP_
-	if (!reload && snmp)
-		vrrp_snmp_agent_init();
-#endif
+	if (!__test_bit(CONFIG_TEST_BIT, &debug))
+		kernel_netlink_init();
+
+	if (!global_data)
+		global_data = alloc_global_data();
+	else if (global_data->default_ifname) {
+		/* We need to set the default_ifp here on startup, since
+		 * the parent process doesn't know about the interfaces */
+		global_data->default_ifp = if_get_by_ifname(global_data->default_ifname, IF_CREATE_IF_DYNAMIC);
+		if (!global_data->default_ifp)
+			log_message(LOG_INFO, "WARNING - default interface %s doesn't exist", global_data->default_ifname);
+	}
 
 	/* Parse configuration file */
-	global_data = alloc_global_data();
 	vrrp_data = alloc_vrrp_data();
-	alloc_vrrp_buffer();
-	init_data(conf_file, vrrp_init_keywords);
 	if (!vrrp_data) {
-		stop_vrrp();
+		stop_vrrp(KEEPALIVED_EXIT_FATAL);
 		return;
 	}
-	init_global_data(global_data);
+
+	init_data(conf_file, vrrp_init_keywords);
+
+	/* Update process name if necessary */
+	if ((!reload && global_data->vrrp_process_name) ||
+	    (reload &&
+	     (!global_data->vrrp_process_name != !prev_global_data->vrrp_process_name ||
+	      (global_data->vrrp_process_name && strcmp(global_data->vrrp_process_name, prev_global_data->vrrp_process_name)))))
+		set_process_name(global_data->vrrp_process_name);
+
+	if (non_existent_interface_specified) {
+		report_config_error(CONFIG_BAD_IF, "Non-existent interface specified in configuration");
+		stop_vrrp(KEEPALIVED_EXIT_CONFIG);
+		return;
+	}
+
+	if (reload)
+		init_global_data(global_data, prev_global_data, true);
+
+	/* Set our copy of time */
+	set_time_now();
+
+	if (!__test_bit(CONFIG_TEST_BIT, &debug)) {
+#if defined _WITH_SNMP_RFC_ || defined _WITH_SNMP_VRRP_
+		if (!reload && (
+#ifdef _WITH_SNMP_VRRP_
+		     global_data->enable_snmp_vrrp ||
+#endif
+#ifdef _WITH_SNMP_RFCV2_
+		     global_data->enable_snmp_rfcv2 ||
+#endif
+#ifdef _WITH_SNMP_RFCV3_
+		     global_data->enable_snmp_rfcv3 ||
+#endif
+		     snmp_option)) {
+			vrrp_snmp_agent_init(global_data->snmp_socket);
+#ifdef _WITH_SNMP_RFC_
+			vrrp_start_time = time_now;
+#endif
+		}
+#endif
 
 #ifdef _WITH_LVS_
-	if (vrrp_ipvs_needed()) {
-		/* Initialize ipvs related */
-		if (ipvs_start() != IPVS_SUCCESS) {
-			stop_vrrp();
-			return;
+		if (vrrp_ipvs_needed()) {
+			/* Initialize ipvs related */
+			if (ipvs_start() != IPVS_SUCCESS) {
+				stop_vrrp(KEEPALIVED_EXIT_FATAL);
+				return;
+			}
+
+			/* Set LVS timeouts */
+			if (global_data->lvs_tcp_timeout ||
+			    global_data->lvs_tcpfin_timeout ||
+			    global_data->lvs_udp_timeout)
+				ipvs_set_timeouts(global_data->lvs_tcp_timeout, global_data->lvs_tcpfin_timeout, global_data->lvs_udp_timeout);
+
+			/* If we are managing the sync daemon, then stop any
+			 * instances of it that may have been running if
+			 * we terminated abnormally */
+			ipvs_syncd_cmd(IPVS_STOPDAEMON, NULL, IPVS_MASTER, true, true);
+			ipvs_syncd_cmd(IPVS_STOPDAEMON, NULL, IPVS_BACKUP, true, true);
 		}
-	}
 #endif
 
-	if (reload) {
-		clear_diff_saddresses();
-		clear_diff_sroutes();
-		clear_diff_vrrp();
-		clear_diff_script();
+		if (reload) {
+			kernel_netlink_set_recv_bufs();
+
+#ifdef _HAVE_FIB_ROUTING_
+			clear_diff_srules();
+			clear_diff_sroutes();
+#endif
+			clear_diff_saddresses();
+			clear_diff_script();
+#ifdef _WITH_BFD_
+			clear_diff_bfd();
+#endif
+		}
+		else {
+			/* Clear leftover static entries */
+			netlink_iplist(vrrp_data->static_addresses, IPADDRESS_DEL, false, NULL);
+#ifdef _HAVE_FIB_ROUTING_
+			netlink_rtlist(vrrp_data->static_routes, IPROUTE_DEL);
+			netlink_error_ignore = ENOENT;
+			netlink_rulelist(vrrp_data->static_rules, IPRULE_DEL, true);
+			netlink_error_ignore = 0;
+#endif
+		}
 	}
 
 	/* Complete VRRP initialization */
 	if (!vrrp_complete_init()) {
-		if (vrrp_ipvs_needed()) {
-			stop_vrrp();
-		}
+		stop_vrrp(KEEPALIVED_EXIT_CONFIG);
 		return;
 	}
 
+	/* If we are just testing the configuration, then we terminate now */
+	if (__test_bit(CONFIG_TEST_BIT, &debug))
+		return;
+
+	/* Start or stop gratuitous arp/ndisc as appropriate */
+	if (have_ipv4_instance)
+		gratuitous_arp_init();
+	else
+		gratuitous_arp_close();
+	if (have_ipv6_instance)
+		ndisc_init();
+	else
+		ndisc_close();
+
+	if (!reload)
+		vrrp_restore_interfaces_startup();
+
+	/* clear_diff_vrrp must be called after vrrp_complete_init, since the latter
+	 * sets ifp on the addresses, which is used for the address comparison */
+	if (reload) {
+		clear_diff_vrrp();
+		vrrp_dispatcher_release(old_vrrp_data);
+	}
+
+#ifdef _WITH_DBUS_
+	if (global_data->enable_dbus) {
+		if (reload && old_global_data->enable_dbus)
+			dbus_reload(old_vrrp_data->vrrp, vrrp_data->vrrp);
+		else {
+			if (!dbus_start())
+				global_data->enable_dbus = false;
+		}
+	}
+	else if (reload && old_global_data->enable_dbus)
+		dbus_stop();
+#endif
+
 	/* Post initializations */
-	log_message(LOG_INFO, "Configuration is using : %lu Bytes", mem_allocated);
+#ifdef _MEM_CHECK_
+	log_message(LOG_INFO, "Configuration is using : %zu Bytes", mem_allocated);
+#endif
 
 	/* Set static entries */
-	netlink_iplist(vrrp_data->static_addresses, IPADDRESS_ADD, NULL);
+	netlink_iplist(vrrp_data->static_addresses, IPADDRESS_ADD, false, NULL);
+#ifdef _HAVE_FIB_ROUTING_
 	netlink_rtlist(vrrp_data->static_routes, IPROUTE_ADD);
+	netlink_rulelist(vrrp_data->static_rules, IPRULE_ADD, false);
+#endif
 
 	/* Dump configuration */
-	if (debug & 4) {
-		dump_global_data(global_data);
-		dump_vrrp_data(vrrp_data);
+	if (__test_bit(DUMP_CONF_BIT, &debug))
+		dump_data_vrrp(NULL);
+
+	/* Init & start the VRRP packet dispatcher */
+	if (!reload && global_data->vrrp_startup_delay) {
+		log_message(LOG_INFO, "Delaying startup for %g seconds", global_data->vrrp_startup_delay / TIMER_HZ_DOUBLE);
+		thread_add_timer(master, vrrp_dispatcher_init, NULL,
+				 global_data->vrrp_startup_delay);
+	} else
+		thread_add_event(master, vrrp_dispatcher_init, NULL, 0);
+
+	/* Set the process priority and non swappable if configured */
+	set_process_priorities(
+#ifdef _HAVE_SCHED_RT_
+			       global_data->vrrp_realtime_priority,
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+			       global_data->vrrp_rlimit_rt,
+#endif
+#endif
+			       global_data->vrrp_process_priority, global_data->vrrp_no_swap ? 4096 : 0);
+
+#ifdef _HAVE_SCHED_RT_
+	/* Set the process cpu affinity if configured */
+	set_process_cpu_affinity(&global_data->vrrp_cpu_mask, "vrrp");
+#endif
+
+	/* Ensure we can open sufficient file descriptors */
+	set_vrrp_max_fds();
+}
+
+#ifndef _DEBUG_
+static int
+send_reload_advert_thread(thread_ref_t thread)
+{
+	vrrp_t *vrrp = THREAD_ARG(thread);
+
+	if (vrrp->state == VRRP_STATE_MAST)
+		vrrp_send_adv(vrrp, vrrp->effective_priority);
+
+	/* If this is the last vrrp instance to send an advert, schedule the
+	 * actual reload. */
+	if (THREAD_VAL(thread))
+		thread_add_event(master, reload_vrrp_thread, NULL, 0);
+
+	return 0;
+}
+
+static void
+sigreload_vrrp(__attribute__((unused)) void *v, __attribute__((unused)) int sig)
+{
+	element e;
+	vrrp_t *vrrp;
+	int num_master_inst = 0;
+	int i;
+
+	/* We want to send adverts for the vrrp instances which are
+	 * in master state. After that the reload can be initiated */
+	if (!LIST_ISEMPTY(vrrp_data->vrrp)) {
+		for (e = LIST_HEAD(vrrp_data->vrrp); e; ELEMENT_NEXT(e)) {
+			vrrp = ELEMENT_DATA(e);
+			if (vrrp->state == VRRP_STATE_MAST)
+				num_master_inst++;
+		}
+
+		for (e = LIST_HEAD(vrrp_data->vrrp), i = 0; e; ELEMENT_NEXT(e)) {
+			vrrp = ELEMENT_DATA(e);
+			if (vrrp->state == VRRP_STATE_MAST) {
+				i++;
+				thread_add_event(master, send_reload_advert_thread, vrrp, i == num_master_inst);
+			}
+		}
 	}
 
-	/* Initialize linkbeat */
-	init_interface_linkbeat();
+	if (num_master_inst == 0)
+		thread_add_event(master, reload_vrrp_thread, NULL, 0);
+}
 
-	/* Init & start the VRRP packet dispatcher */
-	thread_add_event(master, vrrp_dispatcher_init, NULL,
-			 VRRP_DISPATCHER);
+static void
+sigusr1_vrrp(__attribute__((unused)) void *v, __attribute__((unused)) int sig)
+{
+	log_message(LOG_INFO, "Printing VRRP data for process(%d) on signal",
+		    getpid());
+	thread_add_event(master, print_vrrp_data, NULL, 0);
 }
 
-/* Reload handler */
-int reload_vrrp_thread(thread_t * thread);
-void
-sighup_vrrp(void *v, int sig)
+static void
+sigusr2_vrrp(__attribute__((unused)) void *v, __attribute__((unused)) int sig)
+{
+	log_message(LOG_INFO, "Printing VRRP stats for process(%d) on signal",
+		    getpid());
+	thread_add_event(master, print_vrrp_stats, NULL, 0);
+}
+
+#ifdef _WITH_JSON_
+static void
+sigjson_vrrp(__attribute__((unused)) void *v, __attribute__((unused)) int sig)
 {
-	thread_add_event(master, reload_vrrp_thread, NULL, 0);
+	log_message(LOG_INFO, "Printing VRRP as json for process(%d) on signal",
+		getpid());
+	thread_add_event(master, print_vrrp_json, NULL, 0);
 }
+#endif
 
 /* Terminate handler */
-void
-sigend_vrrp(void *v, int sig)
+static void
+sigend_vrrp(__attribute__((unused)) void *v, __attribute__((unused)) int sig)
 {
 	if (master)
-		thread_add_terminate_event(master);
+		thread_add_start_terminate_event(master, start_vrrp_termination_thread);
 }
 
 /* VRRP Child signal handling */
-void
+static void
 vrrp_signal_init(void)
 {
-	signal_handler_init();
-	signal_set(SIGHUP, sighup_vrrp, NULL);
+	signal_set(SIGHUP, sigreload_vrrp, NULL);
 	signal_set(SIGINT, sigend_vrrp, NULL);
 	signal_set(SIGTERM, sigend_vrrp, NULL);
+	signal_set(SIGUSR1, sigusr1_vrrp, NULL);
+	signal_set(SIGUSR2, sigusr2_vrrp, NULL);
+#ifdef _WITH_JSON_
+	signal_set(SIGJSON, sigjson_vrrp, NULL);
+#endif
 	signal_ignore(SIGPIPE);
 }
 
 /* Reload thread */
-int
-reload_vrrp_thread(thread_t * thread)
+static int
+reload_vrrp_thread(__attribute__((unused)) thread_ref_t thread)
 {
+	bool with_snmp = false;
+
+	log_message(LOG_INFO, "Reloading");
+
+	/* Use standard scheduling while reloading */
+	reset_process_priorities();
+
 	/* set the reloading flag */
 	SET_RELOAD;
 
-	/* Signal handling */
-	signal_reset();
-	signal_handler_destroy();
+	/* Terminate all script process */
+	script_killall(master, SIGTERM, false);
+
+	if (vrrp_data->vrrp_track_files)
+		stop_track_files();
+
+	vrrp_initialised = false;
+
+#if !defined _DEBUG_ && defined _WITH_SNMP_VRRP_
+	if (
+#ifdef _WITH_SNMP_VRRP_
+	    global_data->enable_snmp_vrrp ||
+#endif
+#ifdef _WITH_SNMP_RFCV2_
+	    global_data->enable_snmp_rfcv2 ||
+#endif
+#ifdef _WITH_SNMP_RFCV3_
+	    global_data->enable_snmp_rfcv3 ||
+#endif
+	    snmp_option)
+		with_snmp = true;
+#endif
 
 	/* Destroy master thread */
-	vrrp_dispatcher_release(vrrp_data);
-	thread_destroy_master(master);
-	master = thread_make_master();
-	free_global_data(global_data);
-	free_interface_queue();
-	free_vrrp_buffer();
-	gratuitous_arp_close();
-	ndisc_close();
+#ifdef _WITH_BFD_
+	cancel_vrrp_threads();
+#endif
+	thread_cleanup_master(master);
+	thread_add_base_threads(master, with_snmp);
+
+#ifdef _WITH_LVS_
+	if (global_data->lvs_syncd.ifname)
+		ipvs_syncd_cmd(IPVS_STOPDAEMON, &global_data->lvs_syncd,
+		       (global_data->lvs_syncd.vrrp->state == VRRP_STATE_MAST) ? IPVS_MASTER:
+										 IPVS_BACKUP,
+		       true, false);
+#endif
+
+	/* Remove the notify fifo - we don't know if it will be the same after a reload */
+	notify_fifo_close(&global_data->notify_fifo, &global_data->vrrp_notify_fifo);
 
 #ifdef _WITH_LVS_
 	if (vrrp_ipvs_needed()) {
@@ -227,46 +798,122 @@ reload_vrrp_thread(thread_t * thread)
 	/* Save previous conf data */
 	old_vrrp_data = vrrp_data;
 	vrrp_data = NULL;
+	old_global_data = global_data;
+	global_data = NULL;
+	reset_interface_queue();
+#ifdef _HAVE_FIB_ROUTING_
+	reset_next_rule_priority();
+#endif
 
 	/* Reload the conf */
-	mem_allocated = 0;
-	vrrp_signal_init();
-	signal_set(SIGCHLD, thread_child_handler, master);
-	start_vrrp();
+	start_vrrp(old_global_data);
+
+#ifdef _WITH_LVS_
+	if (global_data->lvs_syncd.ifname)
+		ipvs_syncd_cmd(IPVS_STARTDAEMON, &global_data->lvs_syncd,
+			       (global_data->lvs_syncd.vrrp->state == VRRP_STATE_MAST) ? IPVS_MASTER:
+											 IPVS_BACKUP,
+			       true, false);
+#endif
 
 	/* free backup data */
 	free_vrrp_data(old_vrrp_data);
+	free_global_data(old_global_data);
+
+	free_old_interface_queue();
+
 	UNSET_RELOAD;
 
 	return 0;
 }
 
-/* VRRP Child respawning thread */
-int
-vrrp_respawn_thread(thread_t * thread)
+static int
+print_vrrp_data(__attribute__((unused)) thread_ref_t thread)
 {
-	pid_t pid;
+	vrrp_print_data();
+	return 0;
+}
 
-	/* Fetch thread args */
-	pid = THREAD_CHILD_PID(thread);
+static int
+print_vrrp_stats(__attribute__((unused)) thread_ref_t thread)
+{
+	vrrp_print_stats();
+	return 0;
+}
 
-	/* Restart respawning thread */
-	if (thread->type == THREAD_CHILD_TIMEOUT) {
-		thread_add_child(master, vrrp_respawn_thread, NULL,
-				 pid, RESPAWN_TIMER);
-		return 0;
-	}
+#ifdef _WITH_JSON_
+static int
+print_vrrp_json(__attribute__((unused)) thread_ref_t thread)
+{
+	vrrp_print_json();
+	return 0;
+}
+#endif
 
+/* VRRP Child respawning thread */
+static int
+vrrp_respawn_thread(thread_ref_t thread)
+{
 	/* We catch a SIGCHLD, handle it */
-	if (!(debug & 64)) {
-		log_message(LOG_ALERT, "VRRP child process(%d) died: Respawning", pid);
+	vrrp_child = 0;
+
+	if (!__test_bit(DONT_RESPAWN_BIT, &debug)) {
+		log_message(LOG_ALERT, "VRRP child process(%d) died: Respawning", thread->u.c.pid);
 		start_vrrp_child();
 	} else {
-		log_message(LOG_ALERT, "VRRP child process(%d) died: Exiting", pid);
+		log_message(LOG_ALERT, "VRRP child process(%d) died: Exiting", thread->u.c.pid);
 		raise(SIGTERM);
 	}
 	return 0;
 }
+#endif
+
+#ifdef THREAD_DUMP
+static void
+register_vrrp_thread_addresses(void)
+{
+	register_scheduler_addresses();
+	register_signal_thread_addresses();
+	register_notify_addresses();
+
+	register_smtp_addresses();
+	register_keepalived_netlink_addresses();
+#ifdef _WITH_SNMP_
+	register_snmp_addresses();
+#endif
+
+	register_vrrp_if_addresses();
+	register_vrrp_scheduler_addresses();
+#ifdef _WITH_DBUS_
+	register_vrrp_dbus_addresses();
+#endif
+	register_vrrp_fifo_addresses();
+	register_vrrp_inotify_addresses();
+#ifdef _WITH_CN_PROC_
+	register_process_monitor_addresses();
+#endif
+
+#ifndef _DEBUG_
+	register_thread_address("print_vrrp_data", print_vrrp_data);
+	register_thread_address("print_vrrp_stats", print_vrrp_stats);
+	register_thread_address("reload_vrrp_thread", reload_vrrp_thread);
+	register_thread_address("start_vrrp_termination_thread", start_vrrp_termination_thread);
+	register_thread_address("send_reload_advert_thread", send_reload_advert_thread);
+#endif
+	register_thread_address("vrrp_shutdown_backstop_thread", vrrp_shutdown_backstop_thread);
+	register_thread_address("vrrp_shutdown_timer_thread", vrrp_shutdown_timer_thread);
+
+#ifndef _DEBUG_
+	register_signal_handler_address("sigreload_vrrp", sigreload_vrrp);
+	register_signal_handler_address("sigend_vrrp", sigend_vrrp);
+	register_signal_handler_address("sigusr1_vrrp", sigusr1_vrrp);
+	register_signal_handler_address("sigusr2_vrrp", sigusr2_vrrp);
+#ifdef _WITH_JSON_
+	register_signal_handler_address("sigjson_vrrp", sigjson_vrrp);
+#endif
+#endif
+}
+#endif
 
 /* Register VRRP thread */
 int
@@ -274,9 +921,14 @@ start_vrrp_child(void)
 {
 #ifndef _DEBUG_
 	pid_t pid;
-	int ret;
+	const char *syslog_ident;
 
 	/* Initialize child process */
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		flush_log_file();
+#endif
+
 	pid = fork();
 
 	if (pid < 0) {
@@ -290,13 +942,67 @@ start_vrrp_child(void)
 
 		/* Start respawning thread */
 		thread_add_child(master, vrrp_respawn_thread, NULL,
-				 pid, RESPAWN_TIMER);
+				 pid, TIMER_NEVER);
+
 		return 0;
 	}
 
+	prctl(PR_SET_PDEATHSIG, SIGTERM);
+
+#ifdef _WITH_PERF_
+	if (perf_run == PERF_ALL)
+		run_perf("vrrp", global_data->network_namespace, global_data->instance_name);
+#endif
+
+	prog_type = PROG_TYPE_VRRP;
+
+	initialise_debug_options();
+
+#ifdef _WITH_BFD_
+	/* Close the write end of the BFD vrrp event notification pipe */
+	close(bfd_vrrp_event_pipe[1]);
+
+#ifdef _WITH_LVS_
+	close(bfd_checker_event_pipe[0]);
+	close(bfd_checker_event_pipe[1]);
+#endif
+#endif
+
 	/* Opening local VRRP syslog channel */
-	openlog(PROG_VRRP, LOG_PID | ((debug & 1) ? LOG_CONS : 0),
-		(log_facility==LOG_DAEMON) ? LOG_LOCAL1 : log_facility);
+	if ((global_data->instance_name
+#if HAVE_DECL_CLONE_NEWNET
+			   || global_data->network_namespace
+#endif
+					       ) &&
+	    (vrrp_syslog_ident = make_syslog_ident(PROG_VRRP)))
+			syslog_ident = vrrp_syslog_ident;
+	else
+		syslog_ident = PROG_VRRP;
+
+	if (!__test_bit(NO_SYSLOG_BIT, &debug))
+		openlog(syslog_ident, LOG_PID | ((__test_bit(LOG_CONSOLE_BIT, &debug)) ? LOG_CONS : 0)
+				    , (log_facility==LOG_DAEMON) ? LOG_LOCAL1 : log_facility);
+
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		open_log_file(log_file_name,
+				"vrrp",
+#if HAVE_DECL_CLONE_NEWNET
+				global_data->network_namespace,
+#else
+				NULL,
+#endif
+				global_data->instance_name);
+#endif
+
+#ifdef _MEM_CHECK_
+	mem_log_init(PROG_VRRP, "VRRP Child process");
+#endif
+
+	free_parent_mallocs_startup(true);
+
+	/* Clear any child finder functions set in parent */
+	set_child_finder_name(NULL);
 
 	/* Child process part, write pidfile */
 	if (!pidfile_write(vrrp_pidfile, getpid())) {
@@ -305,19 +1011,14 @@ start_vrrp_child(void)
 		exit(0);
 	}
 
+#ifdef _VRRP_FD_DEBUG_
+	if (do_vrrp_fd_debug)
+		set_extra_threads_debug(dump_vrrp_fd);
+#endif
+
 	/* Create the new master thread */
-	signal_handler_destroy();
-	thread_destroy_master(master);
+	thread_destroy_master(master);	/* This destroys any residual settings from the parent */
 	master = thread_make_master();
-
-	/* change to / dir */
-	ret = chdir("/");
-	if (ret < 0) {
-		log_message(LOG_INFO, "VRRP child process: error chdir");
-	}
-
-	/* Set mask */
-	umask(0);
 #endif
 
 	/* If last process died during a reload, we can get there and we
@@ -325,16 +1026,52 @@ start_vrrp_child(void)
 	 */
 	UNSET_RELOAD;
 
+#ifndef _DEBUG_
 	/* Signal handling initialization */
 	vrrp_signal_init();
+#endif
 
 	/* Start VRRP daemon */
-	start_vrrp();
+	start_vrrp(NULL);
+
+#ifdef _DEBUG_
+	return 0;
+#endif
 
+#ifdef THREAD_DUMP
+	register_vrrp_thread_addresses();
+#endif
+
+#ifdef _WITH_PERF_
+	if (perf_run == PERF_RUN)
+		run_perf("vrrp", global_data->network_namespace, global_data->instance_name);
+#endif
 	/* Launch the scheduling I/O multiplexer */
-	launch_scheduler();
+	launch_thread_scheduler(master);
+
+#ifdef THREAD_DUMP
+	deregister_thread_addresses();
+#endif
 
 	/* Finish VRRP daemon process */
-	stop_vrrp();
-	exit(0);
+	vrrp_terminate_phase2(EXIT_SUCCESS);
+
+	/* unreachable */
+	exit(EXIT_SUCCESS);
 }
+
+void
+vrrp_validate_config(void)
+{
+	start_vrrp(NULL);
+}
+
+#ifdef THREAD_DUMP
+void
+register_vrrp_parent_addresses(void)
+{
+#ifndef _DEBUG_
+	register_thread_address("vrrp_respawn_thread", vrrp_respawn_thread);
+#endif
+}
+#endif
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_data.c b/tools/keepalived/keepalived/vrrp/vrrp_data.c
index c051be538..4d86bf0dc 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_data.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_data.c
@@ -17,41 +17,83 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <unistd.h>
+#include <time.h>
+
+#include "utils.h"
+#include "logger.h"
+#include "bitops.h"
+#include "rttables.h"
+
+#include "global_data.h"
+#include "main.h"
 #include "vrrp_data.h"
-#include "vrrp_index.h"
 #include "vrrp_sync.h"
-#include "vrrp_if.h"
+#ifdef _HAVE_VRRP_VMAC_
 #include "vrrp_vmac.h"
-#include "vrrp.h"
-#include "memory.h"
-#include "utils.h"
-#include "logger.h"
+#endif
+#include "vrrp_ipaddress.h"
+#ifdef _HAVE_FIB_ROUTING_
+#include "vrrp_iprule.h"
+#include "vrrp_iproute.h"
+#endif
+#include "vrrp_track.h"
+#include "vrrp_sock.h"
+#ifdef _WITH_SNMP_RFCV3_
+#include "vrrp_snmp.h"
+#endif
+#include "vrrp_static_track.h"
+#include "parser.h"
 
 /* global vars */
 vrrp_data_t *vrrp_data = NULL;
 vrrp_data_t *old_vrrp_data = NULL;
 char *vrrp_buffer;
+size_t vrrp_buffer_len;
+
+static const char *
+get_state_str(int state)
+{
+	if (state == VRRP_STATE_INIT) return "INIT";
+	if (state == VRRP_STATE_BACK) return "BACKUP";
+	if (state == VRRP_STATE_MAST) return "MASTER";
+	if (state == VRRP_STATE_FAULT) return "FAULT";
+	return "unknown";
+}
 
 /* Static addresses facility function */
 void
-alloc_saddress(vector_t *strvec)
+alloc_saddress(const vector_t *strvec)
 {
-	if (LIST_ISEMPTY(vrrp_data->static_addresses))
+	if (!LIST_EXISTS(vrrp_data->static_addresses))
 		vrrp_data->static_addresses = alloc_list(free_ipaddress, dump_ipaddress);
-	alloc_ipaddress(vrrp_data->static_addresses, strvec, NULL);
+	alloc_ipaddress(vrrp_data->static_addresses, strvec, NULL, true);
 }
 
+#ifdef _HAVE_FIB_ROUTING_
 /* Static routes facility function */
 void
-alloc_sroute(vector_t *strvec)
+alloc_sroute(const vector_t *strvec)
 {
-	if (LIST_ISEMPTY(vrrp_data->static_routes))
+	if (!LIST_EXISTS(vrrp_data->static_routes))
 		vrrp_data->static_routes = alloc_list(free_iproute, dump_iproute);
-	alloc_route(vrrp_data->static_routes, strvec);
+	alloc_route(vrrp_data->static_routes, strvec, true);
+}
+
+/* Static rules facility function */
+void
+alloc_srule(const vector_t *strvec)
+{
+	if (!LIST_EXISTS(vrrp_data->static_rules))
+		vrrp_data->static_rules = alloc_list(free_iprule, dump_iprule);
+	alloc_rule(vrrp_data->static_rules, strvec, true);
 }
+#endif
 
 /* VRRP facility functions */
 static void
@@ -59,44 +101,94 @@ free_vgroup(void *data)
 {
 	vrrp_sgroup_t *vgroup = data;
 
-	FREE(vgroup->gname);
-	free_strvec(vgroup->iname);
-	free_list(vgroup->index_list);
-	FREE_PTR(vgroup->script_backup);
-	FREE_PTR(vgroup->script_master);
-	FREE_PTR(vgroup->script_fault);
-	FREE_PTR(vgroup->script);
+	if (vgroup->iname) {
+		log_message(LOG_INFO, "sync group %s - iname vector exists when freeing group", vgroup->gname);
+		free_strvec(vgroup->iname);
+	}
+	FREE_CONST(vgroup->gname);
+	free_list(&vgroup->vrrp_instances);
+	free_list(&vgroup->track_ifp);
+	free_list(&vgroup->track_script);
+	free_list(&vgroup->track_file);
+#ifdef _WITH_CN_PROC_
+	free_list(&vgroup->track_process);
+#endif
+#ifdef _WITH_BFD_
+	free_list(&vgroup->track_bfd);
+#endif
+	free_notify_script(&vgroup->script_backup);
+	free_notify_script(&vgroup->script_master);
+	free_notify_script(&vgroup->script_fault);
+	free_notify_script(&vgroup->script_stop);
+	free_notify_script(&vgroup->script);
 	FREE(vgroup);
 }
+
 static void
-dump_vgroup(void *data)
+dump_notify_script(FILE *fp, const notify_script_t *script, const char *type)
 {
-	vrrp_sgroup_t *vgroup = data;
-	int i;
-	char *str;
-
-	log_message(LOG_INFO, " VRRP Sync Group = %s, %s", vgroup->gname,
-	       (vgroup->state == VRRP_STATE_MAST) ? "MASTER" : "BACKUP");
-	for (i = 0; i < vector_size(vgroup->iname); i++) {
-		str = vector_slot(vgroup->iname, i);
-		log_message(LOG_INFO, "   monitor = %s", str);
-	}
-	if (vgroup->global_tracking)
-		log_message(LOG_INFO, "   Same tracking for all VRRP instances");
-	if (vgroup->script_backup)
-		log_message(LOG_INFO, "   Backup state transition script = %s",
-		       vgroup->script_backup);
-	if (vgroup->script_master)
-		log_message(LOG_INFO, "   Master state transition script = %s",
-		       vgroup->script_master);
-	if (vgroup->script_fault)
-		log_message(LOG_INFO, "   Fault state transition script = %s",
-		       vgroup->script_fault);
-	if (vgroup->script)
-		log_message(LOG_INFO, "   Generic state transition script = '%s'",
-		       vgroup->script);
-	if (vgroup->smtp_alert)
-		log_message(LOG_INFO, "   Using smtp notification");
+	if (!script)
+		return;
+
+	conf_write(fp, "   %s state transition script = %s, uid:gid %u:%u", type,
+	       cmd_str(script), script->uid, script->gid);
+}
+
+static void
+dump_vgroup(FILE *fp, const void *data)
+{
+	const vrrp_sgroup_t *vgroup = data;
+	element e;
+
+	conf_write(fp, " VRRP Sync Group = %s, %s", vgroup->gname, get_state_str(vgroup->state));
+	if (vgroup->vrrp_instances) {
+		conf_write(fp, "   VRRP member instances = %u", LIST_SIZE(vgroup->vrrp_instances));
+		for (e = LIST_HEAD(vgroup->vrrp_instances); e; ELEMENT_NEXT(e)) {
+			vrrp_t *vrrp = ELEMENT_DATA(e);
+			conf_write(fp, "     %s", vrrp->iname);
+		}
+	}
+	if (vgroup->sgroup_tracking_weight)
+		conf_write(fp, "   sync group tracking weight set");
+	conf_write(fp, "   Using smtp notification = %s", vgroup->smtp_alert ? "yes" : "no");
+	if (!LIST_ISEMPTY(vgroup->track_ifp)) {
+		conf_write(fp, "   Tracked interfaces = %u", LIST_SIZE(vgroup->track_ifp));
+		dump_list(fp, vgroup->track_ifp);
+	}
+	if (!LIST_ISEMPTY(vgroup->track_script)) {
+		conf_write(fp, "   Tracked scripts = %u", LIST_SIZE(vgroup->track_script));
+		dump_list(fp, vgroup->track_script);
+	}
+	if (!LIST_ISEMPTY(vgroup->track_file)) {
+		conf_write(fp, "   Tracked files = %u", LIST_SIZE(vgroup->track_file));
+		dump_list(fp, vgroup->track_file);
+	}
+#ifdef _WITH_CN_PROC_
+	if (!LIST_ISEMPTY(vgroup->track_process)) {
+		conf_write(fp, "   Tracked process = %u", LIST_SIZE(vgroup->track_process));
+		dump_list(fp, vgroup->track_process);
+	}
+#endif
+#ifdef _WITH_BFD_
+	if (!LIST_ISEMPTY(vgroup->track_bfd)) {
+		conf_write(fp, "   Tracked BFDs = %u", LIST_SIZE(vgroup->track_bfd));
+		dump_list(fp, vgroup->track_bfd);
+	}
+#endif
+	dump_notify_script(fp, vgroup->script_backup, "Backup");
+	dump_notify_script(fp, vgroup->script_master, "Master");
+	dump_notify_script(fp, vgroup->script_fault, "Fault");
+	dump_notify_script(fp, vgroup->script_stop, "Stop");
+	dump_notify_script(fp, vgroup->script, "Generic");
+}
+
+void
+dump_tracking_vrrp(FILE *fp, const void *data)
+{
+	const tracking_vrrp_t *tvp = (const tracking_vrrp_t *)data;
+	const vrrp_t *vrrp = tvp->vrrp;
+
+	conf_write(fp, "     %s, weight %d%s%s", vrrp->iname, tvp->weight, tvp->weight_multiplier == -1 ? " reverse" : "", tvp->type == TRACK_VRRP_DYNAMIC ? " (dynamic)" : "");
 }
 
 static void
@@ -104,73 +196,204 @@ free_vscript(void *data)
 {
 	vrrp_script_t *vscript = data;
 
-	FREE(vscript->sname);
-	FREE_PTR(vscript->script);
+	free_list(&vscript->tracking_vrrp);
+	FREE_CONST(vscript->sname);
+	FREE_PTR(vscript->script.args);
 	FREE(vscript);
 }
 static void
-dump_vscript(void *data)
+dump_vscript(FILE *fp, const void *data)
 {
-	vrrp_script_t *vscript = data;
-	char *str;
-
-	log_message(LOG_INFO, " VRRP Script = %s", vscript->sname);
-	log_message(LOG_INFO, "   Command = %s", vscript->script);
-	log_message(LOG_INFO, "   Interval = %d sec", vscript->interval / TIMER_HZ);
-	log_message(LOG_INFO, "   Timeout = %d sec", vscript->timeout / TIMER_HZ);
-	log_message(LOG_INFO, "   Weight = %d", vscript->weight);
-	log_message(LOG_INFO, "   Rise = %d", vscript->rise);
-	log_message(LOG_INFO, "   Fall = %d", vscript->fall);
-
-	switch (vscript->result) {
-	case VRRP_SCRIPT_STATUS_INIT:
+	const vrrp_script_t *vscript = data;
+	const char *str;
+
+	conf_write(fp, " VRRP Script = %s", vscript->sname);
+	conf_write(fp, "   Command = %s", cmd_str(&vscript->script));
+	conf_write(fp, "   Interval = %lu sec", vscript->interval / TIMER_HZ);
+	conf_write(fp, "   Timeout = %lu sec", vscript->timeout / TIMER_HZ);
+	conf_write(fp, "   Weight = %d%s", vscript->weight, vscript->weight_reverse ? " reverse" : "");
+	conf_write(fp, "   Rise = %d", vscript->rise);
+	conf_write(fp, "   Fall = %d", vscript->fall);
+	conf_write(fp, "   Insecure = %s", vscript->insecure ? "yes" : "no");
+
+	switch (vscript->init_state) {
+	case SCRIPT_INIT_STATE_INIT:
 		str = "INIT"; break;
-	case VRRP_SCRIPT_STATUS_INIT_GOOD:
-		str = "INIT/GOOD"; break;
-	case VRRP_SCRIPT_STATUS_DISABLED:
-		str = "DISABLED"; break;
+	case SCRIPT_INIT_STATE_FAILED:
+		str = "INIT/FAILED"; break;
 	default:
 		str = (vscript->result >= vscript->rise) ? "GOOD" : "BAD";
 	}
-	log_message(LOG_INFO, "   Status = %s", str);
+	conf_write(fp, "   Status = %s", str);
+	conf_write(fp, "   Script uid:gid = %u:%u", vscript->script.uid, vscript->script.gid);
+	conf_write(fp, "   VRRP instances = %u", vscript->tracking_vrrp ? LIST_SIZE(vscript->tracking_vrrp) : 0);
+	if (vscript->tracking_vrrp)
+		dump_list(fp, vscript->tracking_vrrp);
+	conf_write(fp, "   State = %s",
+			vscript->state == SCRIPT_STATE_IDLE ? "idle" :
+			vscript->state == SCRIPT_STATE_RUNNING ? "running" :
+			vscript->state == SCRIPT_STATE_REQUESTING_TERMINATION ? "requested termination" :
+			vscript->state == SCRIPT_STATE_FORCING_TERMINATION ? "forcing termination" : "unknown");
 }
 
+static void
+free_vfile(void *data)
+{
+	vrrp_tracked_file_t *vfile = data;
+
+	free_list(&vfile->tracking_vrrp);
+	FREE_CONST(vfile->fname);
+	FREE_CONST(vfile->file_path);
+	FREE(vfile);
+}
+static void
+dump_vfile(FILE *fp, const void *data)
+{
+	const vrrp_tracked_file_t *vfile = data;
+
+	conf_write(fp, " VRRP Track file = %s", vfile->fname);
+	conf_write(fp, "   File = %s", vfile->file_path);
+	conf_write(fp, "   Status = %d", vfile->last_status);
+	conf_write(fp, "   Weight = %d%s", vfile->weight, vfile->weight_reverse ? " reverse" : "");
+	conf_write(fp, "   Tracking VRRP instances = %u", vfile->tracking_vrrp ? LIST_SIZE(vfile->tracking_vrrp) : 0);
+	if (vfile->tracking_vrrp)
+		dump_list(fp, vfile->tracking_vrrp);
+}
+
+#ifdef _WITH_CN_PROC_
+static void
+free_vprocess(void *data)
+{
+	vrrp_tracked_process_t *vprocess = data;
+
+	free_list(&vprocess->tracking_vrrp);
+	FREE_CONST(vprocess->pname);
+	FREE_CONST(vprocess->process_path);
+	FREE_CONST_PTR(vprocess->process_params);
+	FREE(vprocess);
+}
+static void
+dump_vprocess(FILE *fp, const void *data)
+{
+	const vrrp_tracked_process_t *vprocess = data;
+	char *params;
+	char *p;
+
+	conf_write(fp, " VRRP Track process = %s", vprocess->pname);
+	conf_write(fp, "   Process = %s", vprocess->process_path);
+	if (vprocess->process_params) {
+		params = MALLOC(vprocess->process_params_len);
+		memcpy(params, vprocess->process_params, vprocess->process_params_len);
+		p = params;
+		for (p = strchr(params, '\0'); p < params + vprocess->process_params_len - 1; p = strchr(params + 1, '\0'))
+			*p = ' ';
+		conf_write(fp, "   Parameters = %s", params);
+		FREE(params);
+	}
+	if (vprocess->param_match != PARAM_MATCH_NONE)
+		conf_write(fp, "   Param match%s",
+			       vprocess->param_match == PARAM_MATCH_EXACT ? "" :
+			       vprocess->param_match == PARAM_MATCH_PARTIAL ? " = partial" :
+			       vprocess->param_match == PARAM_MATCH_INITIAL ? " = initial" :
+			       "unknown");
+	conf_write(fp, "   Min processes = %u", vprocess->quorum);
+	if (vprocess->quorum_max < UINT_MAX)
+		conf_write(fp, "   Max processes = %u", vprocess->quorum_max);
+	conf_write(fp, "   Current processes = %u", vprocess->num_cur_proc);
+	conf_write(fp, "   Have quorum = %s", vprocess->have_quorum ? "true" : "false");
+	conf_write(fp, "   Weight = %d%s", vprocess->weight, vprocess->weight_reverse ? " reverse" : "");
+	conf_write(fp, "   Terminate delay = %fs", (double)vprocess->terminate_delay / TIMER_HZ);
+	conf_write(fp, "   Fork delay = %fs", (double)vprocess->fork_delay / TIMER_HZ);
+	if (fp) {
+		conf_write(fp, "   Fork delay timer %srunning", vprocess->fork_timer_thread ? "" : "not ");
+		conf_write(fp, "   Terminate delay timer %srunning", vprocess->terminate_timer_thread ? "" : "not ");
+	}
+	conf_write(fp, "   Full command = %s", vprocess->full_command ? "true" : "false");
+	conf_write(fp, "   Tracking VRRP instances = %u", vprocess->tracking_vrrp ? LIST_SIZE(vprocess->tracking_vrrp) : 0);
+	if (vprocess->tracking_vrrp)
+		dump_list(fp, vprocess->tracking_vrrp);
+}
+#endif
+
+#ifdef _WITH_BFD_
+/* Track bfd dump */
+static void
+dump_vrrp_bfd(FILE *fp, const void *track_data)
+{
+	const vrrp_tracked_bfd_t *vbfd = track_data;
+
+	conf_write(fp, " VRRP Track BFD = %s", vbfd->bname);
+	conf_write(fp, "   Weight = %d%s", vbfd->weight, vbfd->weight_reverse ? " reverse" : "");
+	conf_write(fp, "   Bfd is %s", vbfd->bfd_up ? "up" : "down");
+	conf_write(fp, "   Tracking VRRP instances = %u", vbfd->tracking_vrrp ? LIST_SIZE(vbfd->tracking_vrrp) : 0);
+	if (vbfd->tracking_vrrp)
+		dump_list(fp, vbfd->tracking_vrrp);
+}
+
+static void
+free_vrrp_bfd(void *track_data)
+{
+	vrrp_tracked_bfd_t *vbfd = track_data;
+
+	free_list(&vbfd->tracking_vrrp);
+	FREE(track_data);
+}
+#endif
+
 /* Socket pool functions */
 static void
 free_sock(void *sock_data)
 {
 	sock_t *sock = sock_data;
-	interface_t *ifp;
 
-	/* First of all cancel pending thread */
-	thread_cancel(sock->thread);
+	/* First of all cancel pending thread. If we are reloading
+	 * thread_cleanup_master() has already been called, and so
+	 * the thread already will have been cancelled. */
+	if (!reload)
+		thread_cancel(sock->thread);
 
 	/* Close related socket */
-	if (sock->fd_in > 0) {
-		ifp = if_get_by_ifindex(sock->ifindex);
-		if (sock->unicast) {
-			close(sock->fd_in);
-		} else {
-			if_leave_vrrp_group(sock->family, sock->fd_in, ifp);
-		}
-	}
+	if (sock->fd_in > 0)
+		close(sock->fd_in);
 	if (sock->fd_out > 0)
 		close(sock->fd_out);
 	FREE(sock_data);
 }
 
 static void
-dump_sock(void *sock_data)
+dump_sock(FILE *fp, const void *sock_data)
 {
-	sock_t *sock = sock_data;
-	log_message(LOG_INFO, "VRRP sockpool: [ifindex(%d), proto(%d), unicast(%d), fd(%d,%d)]"
-			    , sock->ifindex
+	const sock_t *sock = sock_data;
+
+	conf_write(fp, "VRRP sockpool: [ifindex(%u), family(%s), proto(%d), unicast(%d), fd(%d,%d)]"
+			    , sock->ifp->ifindex
+			    , sock->family == AF_INET ? "IPv4" : sock->family == AF_INET6 ? "IPv6" : "unknown"
 			    , sock->proto
 			    , sock->unicast
 			    , sock->fd_in
 			    , sock->fd_out);
 }
 
+static void
+dump_sock_pool(FILE *fp, const list sock_pool)
+{
+	const sock_t *sock;
+	element e;
+	const vrrp_t *vrrp;
+
+	LIST_FOREACH(sock_pool, sock, e) {
+		conf_write(fp, " fd_in %d fd_out = %d", sock->fd_in, sock->fd_out);
+		conf_write(fp, "   Interface = %s", sock->ifp->ifname);
+		conf_write(fp, "   Family = %s", sock->family == AF_INET ? "IPv4" : sock->family == AF_INET6 ? "IPv6" : "unknown");
+		conf_write(fp, "   Protocol = %s", sock->proto == IPPROTO_AH ? "AH" : sock->proto == IPPROTO_VRRP ? "VRRP" : "unknown");
+		conf_write(fp, "   Type = %scast", sock->unicast ? "Uni" : "Multi");
+		conf_write(fp, "   Rx buf size = %d", sock->rx_buf_size);
+		conf_write(fp, "   VRRP instances");
+		rb_for_each_entry_const(vrrp, &sock->rb_vrid, rb_vrid)
+			conf_write(fp, "     %s vrid %d", vrrp->iname, vrrp->vrid);
+	}
+}
+
 static void
 free_unicast_peer(void *data)
 {
@@ -178,205 +401,399 @@ free_unicast_peer(void *data)
 }
 
 static void
-dump_unicast_peer(void *data)
+dump_unicast_peer(FILE *fp, const void *data)
 {
-	struct sockaddr_storage *peer = data;
+	const unicast_peer_t *peer = data;
 
-	log_message(LOG_INFO, "     %s", inet_sockaddrtos(peer));
+	conf_write(fp, "     %s", inet_sockaddrtos(&peer->address));
+#ifdef CHECKSUM_DIAGNOSTICS
+	conf_write(fp, "       last rx checksum = 0x%4.4x, priority %d", peer->chk.last_rx_checksum, peer->chk.last_rx_priority);
+	conf_write(fp, "       last tx checksum = 0x%4.4x, priority %d", peer->chk.last_tx_checksum, peer->chk.last_tx_priority);
+#endif
 }
 
 static void
 free_vrrp(void *data)
 {
 	vrrp_t *vrrp = data;
-	element e;
 
-	FREE(vrrp->iname);
+	FREE_CONST(vrrp->iname);
+#ifdef _HAVE_VRRP_IPVLAN_
+	FREE_PTR(vrrp->ipvlan_addr);
+#endif
 	FREE_PTR(vrrp->send_buffer);
-	FREE_PTR(vrrp->lvs_syncd_if);
-	FREE_PTR(vrrp->script_backup);
-	FREE_PTR(vrrp->script_master);
-	FREE_PTR(vrrp->script_fault);
-	FREE_PTR(vrrp->script_stop);
-	FREE_PTR(vrrp->script);
-	FREE(vrrp->ipsecah_counter);
-
-	if (!LIST_ISEMPTY(vrrp->track_ifp))
-		for (e = LIST_HEAD(vrrp->track_ifp); e; ELEMENT_NEXT(e))
-			FREE(ELEMENT_DATA(e));
-	free_list(vrrp->track_ifp);
-
-	if (!LIST_ISEMPTY(vrrp->track_script))
-		for (e = LIST_HEAD(vrrp->track_script); e; ELEMENT_NEXT(e))
-			FREE(ELEMENT_DATA(e));
-	free_list(vrrp->track_script);
-
-	free_list(vrrp->unicast_peer);
-	free_list(vrrp->vip);
-	free_list(vrrp->evip);
-	free_list(vrrp->vroutes);
+	free_notify_script(&vrrp->script_backup);
+	free_notify_script(&vrrp->script_master);
+	free_notify_script(&vrrp->script_fault);
+	free_notify_script(&vrrp->script_stop);
+	free_notify_script(&vrrp->script);
+	free_notify_script(&vrrp->script_master_rx_lower_pri);
+	FREE_PTR(vrrp->stats);
+
+	free_list(&vrrp->track_ifp);
+	free_list(&vrrp->track_script);
+	free_list(&vrrp->track_file);
+#ifdef _WITH_CN_PROC_
+	free_list(&vrrp->track_process);
+#endif
+#ifdef _WITH_BFD_
+	free_list(&vrrp->track_bfd);
+#endif
+	free_list(&vrrp->unicast_peer);
+	free_list(&vrrp->vip);
+	free_list(&vrrp->evip);
+	free_list(&vrrp->vroutes);
+	free_list(&vrrp->vrules);
 	FREE(vrrp);
 }
+
 static void
-dump_vrrp(void *data)
+dump_vrrp(FILE *fp, const void *data)
 {
-	vrrp_t *vrrp = data;
+	const vrrp_t *vrrp = data;
+#ifdef _WITH_VRRP_AUTH_
 	char auth_data[sizeof(vrrp->auth_data) + 1];
+#endif
+	char time_str[26];
+
+	/* If fp is NULL, we are writing configuration to syslog at
+	 * startup, so there is no point writing transient state information.
+	 */
 
-	log_message(LOG_INFO, " VRRP Instance = %s", vrrp->iname);
+	conf_write(fp, " VRRP Instance = %s", vrrp->iname);
+	conf_write(fp, "   VRRP Version = %d", vrrp->version);
+	if (vrrp->sync)
+		conf_write(fp, "   Sync group = %s", vrrp->sync->gname);
 	if (vrrp->family == AF_INET6)
-		log_message(LOG_INFO, "   Using Native IPv6");
-	if (vrrp->init_state == VRRP_STATE_BACK)
-		log_message(LOG_INFO, "   Want State = BACKUP");
-	else
-		log_message(LOG_INFO, "   Want State = MASTER");
-	log_message(LOG_INFO, "   Runing on device = %s", IF_NAME(vrrp->ifp));
+		conf_write(fp, "   Using Native IPv6");
+	if (fp) {
+		conf_write(fp, "   State = %s", get_state_str(vrrp->state));
+		if (vrrp->state == VRRP_STATE_BACK) {
+			conf_write(fp, "   Master router = %s", inet_sockaddrtos(&vrrp->master_saddr));
+			conf_write(fp, "   Master priority = %d", vrrp->master_priority);
+			if (vrrp->version == VRRP_VERSION_3)
+				conf_write(fp, "   Master advert int = %.2f sec", vrrp->master_adver_int / TIMER_HZ_DOUBLE);
+		}
+	}
+	conf_write(fp, "   Wantstate = %s", get_state_str(vrrp->wantstate));
+	if (fp) {
+		conf_write(fp, "   Number of interface and track script faults = %u", vrrp->num_script_if_fault);
+#ifdef _HAVE_VRRP_VMAC_
+		if (vrrp->duplicate_vrid_fault)
+			conf_write(fp, "   Duplicate VRID");
+#endif
+		conf_write(fp, "   Number of track scripts init = %u", vrrp->num_script_init);
+		ctime_r(&vrrp->last_transition.tv_sec, time_str);
+		conf_write(fp, "   Last transition = %ld.%6.6ld (%.24s.%6.6ld)", vrrp->last_transition.tv_sec, vrrp->last_transition.tv_usec, time_str, vrrp->last_transition.tv_usec);
+		if (!ctime_r(&vrrp->sands.tv_sec, time_str))
+			strcpy(time_str, "invalid time ");
+		if (vrrp->sands.tv_sec == TIMER_DISABLED)
+			conf_write(fp, "   Read timeout = DISABLED");
+		else
+			conf_write(fp, "   Read timeout = %ld.%6.6ld (%.19s.%6.6ld)", vrrp->sands.tv_sec, vrrp->sands.tv_usec, time_str, vrrp->sands.tv_usec);
+		conf_write(fp, "   Master down timer = %u usecs", vrrp->ms_down_timer);
+	}
+#ifdef _HAVE_VRRP_VMAC_
+	if (__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags))
+		conf_write(fp, "   Use VMAC, i/f name %s, is_up = %s, xmit_base = %s",
+				vrrp->vmac_ifname,
+				__test_bit(VRRP_VMAC_UP_BIT, &vrrp->vmac_flags) ? "true" : "false",
+				__test_bit(VRRP_VMAC_XMITBASE_BIT, &vrrp->vmac_flags) ? "true" : "false");
+#ifdef _HAVE_VRRP_IPVLAN_
+	else if (__test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags))
+		conf_write(fp, "   Use IPVLAN, i/f %s, is_up = %s%s%s, type %s",
+				vrrp->vmac_ifname,
+				__test_bit(VRRP_VMAC_UP_BIT, &vrrp->vmac_flags) ? "true" : "false",
+				vrrp->ipvlan_addr ? ", i/f address = " : "",
+				vrrp->ipvlan_addr ? ipaddresstos(NULL, vrrp->ipvlan_addr) : "",
+#ifdef IPVLAN_F_VEPA	/* Since Linux v4.15 */
+				!vrrp->ipvlan_type ? "bridge" : vrrp->ipvlan_type == IPVLAN_F_PRIVATE ? "private" : vrrp->ipvlan_type == IPVLAN_F_VEPA ? "vepa" : "unknown"
+#else
+				"bridge"
+#endif
+					);
+#endif
+	if (vrrp->ifp->is_ours) {
+		conf_write(fp, "   Interface = %s, %s on %s%s", IF_NAME(vrrp->ifp),
+				__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags) ? "vmac" : "ipvlan",
+				vrrp->ifp != vrrp->ifp->base_ifp ? vrrp->ifp->base_ifp->ifname : "(unknown)",
+				__test_bit(VRRP_VMAC_XMITBASE_BIT, &vrrp->vmac_flags) ? ", xmit base i/f" : "");
+	} else
+#endif
+		conf_write(fp, "   Interface = %s", IF_NAME(vrrp->ifp));
+#ifdef _HAVE_VRRP_VMAC_
+	if (vrrp->configured_ifp != vrrp->ifp->base_ifp && vrrp->ifp->is_ours)
+		conf_write(fp, "   Configured interface = %s", vrrp->configured_ifp->ifname);
+#endif
 	if (vrrp->dont_track_primary)
-		log_message(LOG_INFO, "   VRRP interface tracking disabled");
-	if (vrrp->saddr.ss_family)
-		log_message(LOG_INFO, "   Using src_ip = %s"
-				    , inet_sockaddrtos(&vrrp->saddr));
-	if (vrrp->lvs_syncd_if)
-		log_message(LOG_INFO, "   Runing LVS sync daemon on interface = %s",
-		       vrrp->lvs_syncd_if);
-	if (vrrp->garp_delay)
-		log_message(LOG_INFO, "   Gratuitous ARP delay = %d",
+		conf_write(fp, "   VRRP interface tracking disabled");
+	if (vrrp->skip_check_adv_addr)
+		conf_write(fp, "   Skip checking advert IP addresses");
+	if (vrrp->strict_mode)
+		conf_write(fp, "   Enforcing strict VRRP compliance");
+	conf_write(fp, "   Using src_ip = %s%s", vrrp->saddr.ss_family != AF_UNSPEC
+						    ? inet_sockaddrtos(&vrrp->saddr)
+						    : "(none)",
+						  vrrp->saddr_from_config ? " (from configuration)" : "");
+	conf_write(fp, "   Gratuitous ARP delay = %u",
 		       vrrp->garp_delay/TIMER_HZ);
-	if (vrrp->garp_refresh)
-		log_message(LOG_INFO, "   Gratuitous ARP refresh timer = %d",
-		       vrrp->garp_refresh/TIMER_HZ);
-	log_message(LOG_INFO, "   Virtual Router ID = %d", vrrp->vrid);
-	log_message(LOG_INFO, "   Priority = %d", vrrp->base_priority);
-	log_message(LOG_INFO, "   Advert interval = %dsec",
-	       vrrp->adver_int / TIMER_HZ);
-	if (vrrp->nopreempt)
-		log_message(LOG_INFO, "   Preempt disabled");
+	conf_write(fp, "   Gratuitous ARP repeat = %u", vrrp->garp_rep);
+	conf_write(fp, "   Gratuitous ARP refresh = %ld",
+		       vrrp->garp_refresh.tv_sec);
+	conf_write(fp, "   Gratuitous ARP refresh repeat = %u", vrrp->garp_refresh_rep);
+	conf_write(fp, "   Gratuitous ARP lower priority delay = %u", vrrp->garp_lower_prio_delay / TIMER_HZ);
+	conf_write(fp, "   Gratuitous ARP lower priority repeat = %u", vrrp->garp_lower_prio_rep);
+	conf_write(fp, "   Send advert after receive lower priority advert = %s", vrrp->lower_prio_no_advert ? "false" : "true");
+	conf_write(fp, "   Send advert after receive higher priority advert = %s", vrrp->higher_prio_send_advert ? "true" : "false");
+	conf_write(fp, "   Virtual Router ID = %d", vrrp->vrid);
+	conf_write(fp, "   Priority = %d", vrrp->base_priority);
+	if (fp) {
+		conf_write(fp, "   Effective priority = %d", vrrp->effective_priority);
+		conf_write(fp, "   Total priority = %d", vrrp->total_priority);
+	}
+	conf_write(fp, "   Advert interval = %u %s",
+		(vrrp->version == VRRP_VERSION_2) ? (vrrp->adver_int / TIMER_HZ) :
+		(vrrp->adver_int / (TIMER_HZ / 1000)),
+		(vrrp->version == VRRP_VERSION_2) ? "sec" : "milli-sec");
+	if (vrrp->state == VRRP_STATE_BACK && vrrp->version == VRRP_VERSION_3)
+		conf_write(fp, "   Master advert interval = %u milli-sec", vrrp->master_adver_int / (TIMER_HZ / 1000));
+#ifdef _WITH_FIREWALL_
+	conf_write(fp, "   Accept = %s", vrrp->accept ? "enabled" : "disabled");
+#endif
+	conf_write(fp, "   Preempt = %s", vrrp->nopreempt ? "disabled" : "enabled");
 	if (vrrp->preempt_delay)
-		log_message(LOG_INFO, "   Preempt delay = %ld secs",
-		       vrrp->preempt_delay / TIMER_HZ);
+		conf_write(fp, "   Preempt delay = %g secs",
+		       vrrp->preempt_delay / TIMER_HZ_DOUBLE);
+	conf_write(fp, "   Promote_secondaries = %s", vrrp->promote_secondaries ? "enabled" : "disabled");
+#if defined _WITH_VRRP_AUTH_
 	if (vrrp->auth_type) {
-		log_message(LOG_INFO, "   Authentication type = %s",
+		conf_write(fp, "   Authentication type = %s",
 		       (vrrp->auth_type ==
 			VRRP_AUTH_AH) ? "IPSEC_AH" : "SIMPLE_PASSWORD");
-		/* vrrp->auth_data is not \0 terminated */
-		memcpy(auth_data, vrrp->auth_data, sizeof(vrrp->auth_data));
-		auth_data[sizeof(vrrp->auth_data)] = '\0';
-		log_message(LOG_INFO, "   Password = %s", auth_data);
+		if (vrrp->auth_type != VRRP_AUTH_AH) {
+			/* vrrp->auth_data is not \0 terminated */
+			memcpy(auth_data, vrrp->auth_data, sizeof(vrrp->auth_data));
+			auth_data[sizeof(vrrp->auth_data)] = '\0';
+			conf_write(fp, "   Password = %s", auth_data);
+		}
 	}
-	if (!LIST_ISEMPTY(vrrp->track_ifp)) {
-		log_message(LOG_INFO, "   Tracked interfaces = %d", LIST_SIZE(vrrp->track_ifp));
-		dump_list(vrrp->track_ifp);
+	else if (vrrp->version == VRRP_VERSION_2)
+		conf_write(fp, "   Authentication type = none");
+#endif
+	if (vrrp->kernel_rx_buf_size)
+		conf_write(fp, "   Kernel rx buffer size = %zu", vrrp->kernel_rx_buf_size);
+
+	if (vrrp->debug)
+		conf_write(fp, "   Debug level = %d", vrrp->debug);
+
+#ifdef CHECKSUM_DIAGNOSTICS
+	conf_write(fp, "   last rx checksum = 0x%4.4x, priority %d", vrrp->chk.last_rx_checksum, vrrp->chk.last_rx_priority);
+	conf_write(fp, "   last tx checksum = 0x%4.4x, priority %d", vrrp->chk.last_tx_checksum, vrrp->chk.last_tx_priority);
+#endif
+
+	if (!LIST_ISEMPTY(vrrp->vip)) {
+		conf_write(fp, "   Virtual IP = %u", LIST_SIZE(vrrp->vip));
+		dump_list(fp, vrrp->vip);
 	}
-	if (!LIST_ISEMPTY(vrrp->track_script)) {
-		log_message(LOG_INFO, "   Tracked scripts = %d", LIST_SIZE(vrrp->track_script));
-		dump_list(vrrp->track_script);
+	if (!LIST_ISEMPTY(vrrp->evip)) {
+		conf_write(fp, "   Virtual IP Excluded = %u",
+			LIST_SIZE(vrrp->evip));
+		dump_list(fp, vrrp->evip);
 	}
 	if (!LIST_ISEMPTY(vrrp->unicast_peer)) {
-		log_message(LOG_INFO, "   Unicast Peer = %d", LIST_SIZE(vrrp->unicast_peer));
-		dump_list(vrrp->unicast_peer);
+		conf_write(fp, "   Unicast Peer = %u",
+			LIST_SIZE(vrrp->unicast_peer));
+		dump_list(fp, vrrp->unicast_peer);
+#ifdef _WITH_UNICAST_CHKSUM_COMPAT_
+		conf_write(fp, "   Unicast checksum compatibility = %s",
+				vrrp->unicast_chksum_compat == CHKSUM_COMPATIBILITY_NONE ? "no" :
+				vrrp->unicast_chksum_compat == CHKSUM_COMPATIBILITY_NEVER ? "never" :
+				vrrp->unicast_chksum_compat == CHKSUM_COMPATIBILITY_CONFIG ? "config" :
+				vrrp->unicast_chksum_compat == CHKSUM_COMPATIBILITY_AUTO ? "auto" : "unknown");
+#endif
 	}
-	if (!LIST_ISEMPTY(vrrp->vip)) {
-		log_message(LOG_INFO, "   Virtual IP = %d", LIST_SIZE(vrrp->vip));
-		dump_list(vrrp->vip);
+	if (vrrp->sockets)
+		conf_write(fp, "   fd_in %d, fd_out %d", vrrp->sockets->fd_in, vrrp->sockets->fd_out);
+	else
+		conf_write(fp, "   No sockets allocated");
+#ifdef _HAVE_FIB_ROUTING_
+	if (!LIST_ISEMPTY(vrrp->vroutes)) {
+		conf_write(fp, "   Virtual Routes = %u", LIST_SIZE(vrrp->vroutes));
+		dump_list(fp, vrrp->vroutes);
 	}
-	if (!LIST_ISEMPTY(vrrp->evip)) {
-		log_message(LOG_INFO, "   Virtual IP Excluded = %d", LIST_SIZE(vrrp->evip));
-		dump_list(vrrp->evip);
+	if (!LIST_ISEMPTY(vrrp->vrules)) {
+		conf_write(fp, "   Virtual Rules = %u", LIST_SIZE(vrrp->vrules));
+		dump_list(fp, vrrp->vrules);
 	}
-	if (!LIST_ISEMPTY(vrrp->vroutes)) {
-		log_message(LOG_INFO, "   Virtual Routes = %d", LIST_SIZE(vrrp->vroutes));
-		dump_list(vrrp->vroutes);
+#endif
+
+	if (!LIST_ISEMPTY(vrrp->track_ifp)) {
+		conf_write(fp, "   Tracked interfaces = %u", LIST_SIZE(vrrp->track_ifp));
+		dump_list(fp, vrrp->track_ifp);
+	}
+	if (!LIST_ISEMPTY(vrrp->track_script)) {
+		conf_write(fp, "   Tracked scripts = %u", LIST_SIZE(vrrp->track_script));
+		dump_list(fp, vrrp->track_script);
+	}
+	if (!LIST_ISEMPTY(vrrp->track_file)) {
+		conf_write(fp, "   Tracked files = %u", LIST_SIZE(vrrp->track_file));
+		dump_list(fp, vrrp->track_file);
 	}
+#ifdef _WITH_CN_PROC_
+	if (!LIST_ISEMPTY(vrrp->track_process)) {
+		conf_write(fp, "   Tracked processes = %u", LIST_SIZE(vrrp->track_process));
+		dump_list(fp, vrrp->track_process);
+	}
+#endif
+#ifdef _WITH_BFD_
+	if (!LIST_ISEMPTY(vrrp->track_bfd)) {
+		conf_write(fp, "   Tracked BFDs = %u", LIST_SIZE(vrrp->track_bfd));
+		dump_list(fp, vrrp->track_bfd);
+	}
+#endif
+
+	conf_write(fp, "   Using smtp notification = %s", vrrp->smtp_alert ? "yes" : "no");
+
 	if (vrrp->script_backup)
-		log_message(LOG_INFO, "   Backup state transition script = %s",
-		       vrrp->script_backup);
+		dump_notify_script(fp, vrrp->script_backup, "Backup");
 	if (vrrp->script_master)
-		log_message(LOG_INFO, "   Master state transition script = %s",
-		       vrrp->script_master);
+		dump_notify_script(fp, vrrp->script_master, "Master");
 	if (vrrp->script_fault)
-		log_message(LOG_INFO, "   Fault state transition script = %s",
-		       vrrp->script_fault);
+		dump_notify_script(fp, vrrp->script_fault, "Fault");
 	if (vrrp->script_stop)
-		log_message(LOG_INFO, "   Stop state transition script = %s",
-		       vrrp->script_stop);
+		dump_notify_script(fp, vrrp->script_stop, "Stop");
 	if (vrrp->script)
-		log_message(LOG_INFO, "   Generic state transition script = '%s'",
-		       vrrp->script);
-	if (vrrp->smtp_alert)
-		log_message(LOG_INFO, "   Using smtp notification");
-	if (vrrp->vmac_flags & VRRP_VMAC_FL_SET)
-		log_message(LOG_INFO, "   Using VRRP VMAC (flags:%s|%s)"
-				    , (vrrp->vmac_flags & VRRP_VMAC_FL_UP) ? "UP" : "DOWN"
-				    , (vrrp->vmac_flags & VRRP_VMAC_FL_XMITBASE) ? "xmit_base" : "xmit");
+		dump_notify_script(fp, vrrp->script, "Generic");
+	if (vrrp->script_master_rx_lower_pri)
+		dump_notify_script(fp, vrrp->script_master_rx_lower_pri, "Master rx lower pri");
+	conf_write(fp, "   Notify priority changes = %s", vrrp->notify_priority_changes ? "true" : "false");
+}
+
+void
+alloc_static_track_group(const char *gname)
+{
+	static_track_group_t *new;
+
+	if (!LIST_EXISTS(vrrp_data->static_track_groups))
+		vrrp_data->static_track_groups = alloc_list(free_tgroup, dump_tgroup);
+
+	/* Allocate new VRRP group structure */
+	new = (static_track_group_t *) MALLOC(sizeof(*new));
+	new->gname = STRDUP(gname);
+
+	list_add(vrrp_data->static_track_groups, new);
 }
 
 void
-alloc_vrrp_sync_group(char *gname)
+alloc_vrrp_sync_group(const char *gname)
 {
-	int size = strlen(gname);
 	vrrp_sgroup_t *new;
 
 	/* Allocate new VRRP group structure */
 	new = (vrrp_sgroup_t *) MALLOC(sizeof(vrrp_sgroup_t));
-	new->gname = (char *) MALLOC(size + 1);
 	new->state = VRRP_STATE_INIT;
-	memcpy(new->gname, gname, size);
-	new->global_tracking = 0;
+	new->last_email_state = VRRP_STATE_INIT;
+	new->gname = STRDUP(gname);
+	new->sgroup_tracking_weight = false;
+	new->smtp_alert = -1;
 
 	list_add(vrrp_data->vrrp_sync_group, new);
 }
 
+static vrrp_stats *
+alloc_vrrp_stats(void)
+{
+	vrrp_stats *new;
+	new = (vrrp_stats *) MALLOC(sizeof (vrrp_stats));
+	new->become_master = 0;
+	new->release_master = 0;
+	new->invalid_authtype = 0;
+#ifdef _WITH_VRRP_AUTH_
+	new->authtype_mismatch = 0;
+	new->auth_failure = 0;
+#endif
+	new->packet_len_err = 0;
+	new->advert_rcvd = 0;
+	new->advert_sent = 0;
+	new->advert_interval_err = 0;
+	new->ip_ttl_err = 0;
+	new->pri_zero_rcvd = 0;
+	new->pri_zero_sent = 0;
+	new->invalid_type_rcvd = 0;
+	new->addr_list_err = 0;
+#ifdef _WITH_SNMP_RFCV3_
+	new->master_reason = VRRPV3_MASTER_REASON_NOT_MASTER;
+	new->next_master_reason = VRRPV3_MASTER_REASON_MASTER_NO_RESPONSE;
+#endif
+	return new;
+}
+
 void
-alloc_vrrp(char *iname)
+alloc_vrrp(const char *iname)
 {
-	int size = strlen(iname);
-	seq_counter_t *counter;
 	vrrp_t *new;
 
 	/* Allocate new VRRP structure */
 	new = (vrrp_t *) MALLOC(sizeof(vrrp_t));
-	counter = (seq_counter_t *) MALLOC(sizeof(seq_counter_t));
-
-	/* Build the structure */
-	new->ipsecah_counter = counter;
 
 	/* Set default values */
-	new->family = AF_INET;
-	new->wantstate = VRRP_STATE_BACK;
-	new->init_state = VRRP_STATE_BACK;
-	new->adver_int = TIMER_HZ;
-	new->iname = (char *) MALLOC(size + 1);
-	memcpy(new->iname, iname, size);
-	new->quick_sync = 0;
+	new->family = AF_UNSPEC;
+	new->saddr.ss_family = AF_UNSPEC;
+	new->wantstate = VRRP_STATE_INIT;
+	new->last_email_state = VRRP_STATE_INIT;
+	new->version = 0;
+	new->master_priority = 0;
+	new->last_transition = timer_now();
+	new->iname = STRDUP(iname);
+	new->stats = alloc_vrrp_stats();
+#ifdef _WITH_FIREWALL_
+	new->accept = PARAMETER_UNSET;
+#endif
+	new->garp_rep = global_data->vrrp_garp_rep;
+	new->garp_refresh = global_data->vrrp_garp_refresh;
+	new->garp_refresh_rep = global_data->vrrp_garp_refresh_rep;
+	new->garp_delay = global_data->vrrp_garp_delay;
+	new->garp_lower_prio_delay = PARAMETER_UNSET;
+	new->garp_lower_prio_rep = PARAMETER_UNSET;
+	new->lower_prio_no_advert = PARAMETER_UNSET;
+	new->higher_prio_send_advert = PARAMETER_UNSET;
+#ifdef _WITH_UNICAST_CHKSUM_COMPAT_
+	new->unicast_chksum_compat = CHKSUM_COMPATIBILITY_NONE;
+#endif
+	new->smtp_alert = -1;
+	new->notify_priority_changes = -1;
+
+	new->skip_check_adv_addr = global_data->vrrp_skip_check_adv_addr;
+	new->strict_mode = PARAMETER_UNSET;
 
 	list_add(vrrp_data->vrrp, new);
 }
 
 void
-alloc_vrrp_unicast_peer(vector_t *strvec)
+alloc_vrrp_unicast_peer(const vector_t *strvec)
 {
 	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	struct sockaddr_storage *peer = NULL;
-	int ret;
+	unicast_peer_t *peer;
 
-	if (LIST_ISEMPTY(vrrp->unicast_peer))
+	if (!LIST_EXISTS(vrrp->unicast_peer))
 		vrrp->unicast_peer = alloc_list(free_unicast_peer, dump_unicast_peer);
 
 	/* Allocate new unicast peer */
-	peer = (struct sockaddr_storage *) MALLOC(sizeof(struct sockaddr_storage));
-	ret = inet_stosockaddr(vector_slot(strvec, 0), 0, peer);
-	if (ret < 0) {
-		log_message(LOG_ERR, "Configuration error: VRRP instance[%s] malformed unicast"
+	peer = (unicast_peer_t *) MALLOC(sizeof(unicast_peer_t));
+	if (inet_stosockaddr(strvec_slot(strvec, 0), NULL, &peer->address)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: VRRP instance[%s] malformed unicast"
 				     " peer address[%s]. Skipping..."
-				   , vrrp->iname, vector_slot(strvec, 0));
+				   , vrrp->iname, strvec_slot(strvec, 0));
 		FREE(peer);
 		return;
 	}
 
-	if (peer->ss_family != vrrp->family) {
-		log_message(LOG_ERR, "Configuration error: VRRP instance[%s] and unicast peer address"
+	if (!vrrp->family)
+		vrrp->family = peer->address.ss_family;
+	else if (peer->address.ss_family != vrrp->family) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: VRRP instance[%s] and unicast peer address"
 				     "[%s] MUST be of the same family !!! Skipping..."
-				   , vrrp->iname, vector_slot(strvec, 0));
+				   , vrrp->iname, strvec_slot(strvec, 0));
 		FREE(peer);
 		return;
 	}
@@ -385,88 +802,242 @@ alloc_vrrp_unicast_peer(vector_t *strvec)
 }
 
 void
-alloc_vrrp_track(vector_t *strvec)
+alloc_vrrp_track_if(const vector_t *strvec)
 {
 	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
 
-	if (LIST_ISEMPTY(vrrp->track_ifp))
-		vrrp->track_ifp = alloc_list(NULL, dump_track);
-	alloc_track(vrrp->track_ifp, strvec);
+	if (!LIST_EXISTS(vrrp->track_ifp))
+		vrrp->track_ifp = alloc_list(free_track_if, dump_track_if);
+	alloc_track_if(vrrp->iname, vrrp->track_ifp, strvec);
 }
 
 void
-alloc_vrrp_track_script(vector_t *strvec)
+alloc_vrrp_track_script(const vector_t *strvec)
 {
 	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
 
-	if (LIST_ISEMPTY(vrrp->track_script))
-		vrrp->track_script = alloc_list(NULL, dump_track_script);
-	alloc_track_script(vrrp->track_script, strvec);
+	if (!LIST_EXISTS(vrrp->track_script))
+		vrrp->track_script = alloc_list(free_track_script, dump_track_script);
+	alloc_track_script(vrrp->iname, vrrp->track_script, strvec);
 }
 
 void
-alloc_vrrp_vip(vector_t *strvec)
+alloc_vrrp_track_file(const vector_t *strvec)
 {
 	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	if (vrrp->ifp == NULL) {
-		log_message(LOG_ERR, "Configuration error: VRRP definition must belong to an interface");
-	}
 
-	if (LIST_ISEMPTY(vrrp->vip))
+	if (!LIST_EXISTS(vrrp->track_file))
+		vrrp->track_file = alloc_list(free_track_file, dump_track_file);
+	alloc_track_file(vrrp->iname, vrrp->track_file, strvec);
+}
+
+#ifdef _WITH_CN_PROC_
+void
+alloc_vrrp_track_process(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+
+	if (!LIST_EXISTS(vrrp->track_process))
+		vrrp->track_process = alloc_list(free_track_process, dump_track_process);
+	alloc_track_process(vrrp->iname, vrrp->track_process, strvec);
+}
+#endif
+
+#ifdef _WITH_BFD_
+void
+alloc_vrrp_track_bfd(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+
+	if (!LIST_EXISTS(vrrp->track_bfd))
+		vrrp->track_bfd = alloc_list(free_vrrp_tracked_bfd, dump_vrrp_tracked_bfd);
+	alloc_track_bfd(vrrp->iname, vrrp->track_bfd, strvec);
+}
+#endif
+
+void
+alloc_vrrp_group_track_if(const vector_t *strvec)
+{
+	vrrp_sgroup_t *sgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
+
+	if (!LIST_EXISTS(sgroup->track_ifp))
+		sgroup->track_ifp = alloc_list(free_track_if, dump_track_if);
+	alloc_track_if(sgroup->gname, sgroup->track_ifp, strvec);
+}
+
+void
+alloc_vrrp_group_track_script(const vector_t *strvec)
+{
+	vrrp_sgroup_t *sgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
+
+	if (!LIST_EXISTS(sgroup->track_script))
+		sgroup->track_script = alloc_list(free_track_script, dump_track_script);
+	alloc_track_script(sgroup->gname, sgroup->track_script, strvec);
+}
+
+void
+alloc_vrrp_group_track_file(const vector_t *strvec)
+{
+	vrrp_sgroup_t *sgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
+
+	if (!LIST_EXISTS(sgroup->track_file))
+		sgroup->track_file = alloc_list(free_track_file, dump_track_file);
+	alloc_track_file(sgroup->gname, sgroup->track_file, strvec);
+}
+
+#ifdef _WITH_CN_PROC_
+void
+alloc_vrrp_group_track_process(const vector_t *strvec)
+{
+	vrrp_sgroup_t *sgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
+
+	if (!LIST_EXISTS(sgroup->track_process))
+		sgroup->track_process = alloc_list(free_track_process, dump_track_process);
+	alloc_track_process(sgroup->gname, sgroup->track_process, strvec);
+}
+#endif
+
+#ifdef _WITH_BFD_
+void
+alloc_vrrp_group_track_bfd(const vector_t *strvec)
+{
+	vrrp_sgroup_t *sgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
+
+	if (!LIST_EXISTS(sgroup->track_bfd))
+		sgroup->track_bfd = alloc_list(free_vrrp_tracked_bfd, dump_vrrp_tracked_bfd);
+	alloc_track_bfd(sgroup->gname, sgroup->track_bfd, strvec);
+}
+#endif
+
+void
+alloc_vrrp_vip(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	void *list_end = NULL;
+	sa_family_t address_family;
+
+	if (!LIST_EXISTS(vrrp->vip))
 		vrrp->vip = alloc_list(free_ipaddress, dump_ipaddress);
-	alloc_ipaddress(vrrp->vip, strvec, vrrp->ifp);
+	else if (!LIST_ISEMPTY(vrrp->vip))
+		list_end = LIST_TAIL_DATA(vrrp->vip);
+
+	alloc_ipaddress(vrrp->vip, strvec, vrrp->ifp, false);
+
+	if (!LIST_ISEMPTY(vrrp->vip) && LIST_TAIL_DATA(vrrp->vip) != list_end) {
+		address_family = IP_FAMILY((ip_address_t*)LIST_TAIL_DATA(vrrp->vip));
+
+		if (vrrp->family == AF_UNSPEC)
+			vrrp->family = address_family;
+		else if (address_family != vrrp->family) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s): address family must match VRRP instance [%s] - ignoring", vrrp->iname, strvec_slot(strvec, 0));
+			free_list_element(vrrp->vip, vrrp->vip->tail);
+		}
+	}
 }
+
 void
-alloc_vrrp_evip(vector_t *strvec)
+alloc_vrrp_evip(const vector_t *strvec)
 {
 	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
 
-	if (LIST_ISEMPTY(vrrp->evip))
+	if (!LIST_EXISTS(vrrp->evip))
 		vrrp->evip = alloc_list(free_ipaddress, dump_ipaddress);
-	alloc_ipaddress(vrrp->evip, strvec, vrrp->ifp);
+	alloc_ipaddress(vrrp->evip, strvec, vrrp->ifp, false);
 }
 
+#ifdef _HAVE_FIB_ROUTING_
 void
-alloc_vrrp_vroute(vector_t *strvec)
+alloc_vrrp_vroute(const vector_t *strvec)
 {
 	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
 
-	if (LIST_ISEMPTY(vrrp->vroutes))
+	if (!LIST_EXISTS(vrrp->vroutes))
 		vrrp->vroutes = alloc_list(free_iproute, dump_iproute);
-	alloc_route(vrrp->vroutes, strvec);
+	alloc_route(vrrp->vroutes, strvec, false);
 }
 
 void
-alloc_vrrp_script(char *sname)
+alloc_vrrp_vrule(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+
+	if (!LIST_EXISTS(vrrp->vrules))
+		vrrp->vrules = alloc_list(free_iprule, dump_iprule);
+	alloc_rule(vrrp->vrules, strvec, false);
+}
+#endif
+
+void
+alloc_vrrp_script(const char *sname)
 {
-	int size = strlen(sname);
 	vrrp_script_t *new;
 
-	/* Allocate new VRRP group structure */
+	/* Allocate new VRRP script structure */
 	new = (vrrp_script_t *) MALLOC(sizeof(vrrp_script_t));
-	new->sname = (char *) MALLOC(size + 1);
-	memcpy(new->sname, sname, size + 1);
+	new->sname = STRDUP(sname);
 	new->interval = VRRP_SCRIPT_DI * TIMER_HZ;
 	new->timeout = VRRP_SCRIPT_DT * TIMER_HZ;
 	new->weight = VRRP_SCRIPT_DW;
-	new->result = VRRP_SCRIPT_STATUS_INIT;
-	new->inuse = 0;
+//	new->last_status = VRRP_SCRIPT_STATUS_NOT_SET;
+	new->init_state = SCRIPT_INIT_STATE_INIT;
+	new->state = SCRIPT_STATE_IDLE;
 	new->rise = 1;
 	new->fall = 1;
 	list_add(vrrp_data->vrrp_script, new);
 }
 
+void
+alloc_vrrp_file(const char *fname)
+{
+	vrrp_tracked_file_t *new;
+
+	/* Allocate new VRRP file structure */
+	new = (vrrp_tracked_file_t *) MALLOC(sizeof(vrrp_tracked_file_t));
+	new->fname = STRDUP(fname);
+	new->weight = 1;
+	list_add(vrrp_data->vrrp_track_files, new);
+}
+
+#ifdef _WITH_CN_PROC_
+void
+alloc_vrrp_process(const char *pname)
+{
+	vrrp_tracked_process_t *new;
+
+	/* Allocate new VRRP file structure */
+	new = (vrrp_tracked_process_t *) MALLOC(sizeof(vrrp_tracked_process_t));
+	new->pname = STRDUP(pname);
+	new->quorum = 1;
+	new->quorum_max = UINT_MAX;
+	list_add(vrrp_data->vrrp_track_processes, new);
+}
+#endif
+
 /* data facility functions */
 void
-alloc_vrrp_buffer(void)
+alloc_vrrp_buffer(size_t len)
 {
-	vrrp_buffer = (char *) MALLOC(VRRP_PACKET_TEMP_LEN);
+	if (len <= vrrp_buffer_len)
+		return;
+
+	if (vrrp_buffer)
+		FREE(vrrp_buffer);
+
+	vrrp_buffer = (char *) MALLOC(len);
+	vrrp_buffer_len = (vrrp_buffer) ? len : 0;
 }
 
 void
 free_vrrp_buffer(void)
 {
+	/* If the configuration failed, we may not have
+	 * allocated a buffer */
+	if (!vrrp_buffer)
+		return;
+
 	FREE(vrrp_buffer);
+	vrrp_buffer = NULL;
+	vrrp_buffer_len = 0;
 }
 
 vrrp_data_t *
@@ -476,10 +1047,15 @@ alloc_vrrp_data(void)
 
 	new = (vrrp_data_t *) MALLOC(sizeof(vrrp_data_t));
 	new->vrrp = alloc_list(free_vrrp, dump_vrrp);
-	new->vrrp_index = alloc_mlist(NULL, NULL, 255+1);
-	new->vrrp_index_fd = alloc_mlist(NULL, NULL, 1024+1);
 	new->vrrp_sync_group = alloc_list(free_vgroup, dump_vgroup);
 	new->vrrp_script = alloc_list(free_vscript, dump_vscript);
+	new->vrrp_track_files = alloc_list(free_vfile, dump_vfile);
+#ifdef _WITH_CN_PROC_
+	new->vrrp_track_processes = alloc_list(free_vprocess, dump_vprocess);
+#endif
+#ifdef _WITH_BFD_
+	new->vrrp_track_bfds = alloc_list(free_vrrp_bfd, dump_vrrp_bfd);
+#endif
 	new->vrrp_socket_pool = alloc_list(free_sock, dump_sock);
 
 	return new;
@@ -488,37 +1064,99 @@ alloc_vrrp_data(void)
 void
 free_vrrp_data(vrrp_data_t * data)
 {
-	free_list(data->static_addresses);
-	free_list(data->static_routes);
-	free_mlist(data->vrrp_index, 255+1);
-	free_mlist(data->vrrp_index_fd, 1024+1);
-	free_list(data->vrrp);
-	free_list(data->vrrp_sync_group);
-	free_list(data->vrrp_script);
+	free_list(&data->static_addresses);
+#ifdef _HAVE_FIB_ROUTING_
+	free_list(&data->static_routes);
+	free_list(&data->static_rules);
+#endif
+	free_list(&data->static_track_groups);
+	free_list(&data->vrrp);
+	free_list(&data->vrrp_sync_group);
+	free_list(&data->vrrp_script);
+	free_list(&data->vrrp_track_files);
+#ifdef _WITH_CN_PROC_
+	free_list(&data->vrrp_track_processes);
+#endif
+#ifdef _WITH_BFD_
+	free_list(&data->vrrp_track_bfds);
+#endif
 	FREE(data);
 }
 
-void
-dump_vrrp_data(vrrp_data_t * data)
+static void
+dump_vrrp_data(FILE *fp, const vrrp_data_t * data)
 {
 	if (!LIST_ISEMPTY(data->static_addresses)) {
-		log_message(LOG_INFO, "------< Static Addresses >------");
-		dump_list(data->static_addresses);
+		conf_write(fp, "------< Static Addresses >------");
+		dump_list(fp, data->static_addresses);
 	}
+#ifdef _HAVE_FIB_ROUTING_
 	if (!LIST_ISEMPTY(data->static_routes)) {
-		log_message(LOG_INFO, "------< Static Routes >------");
-		dump_list(data->static_routes);
+		conf_write(fp, "------< Static Routes >------");
+		dump_list(fp, data->static_routes);
+	}
+	if (!LIST_ISEMPTY(data->static_rules)) {
+		conf_write(fp, "------< Static Rules >------");
+		dump_list(fp, data->static_rules);
+	}
+#endif
+	if (!LIST_ISEMPTY(data->static_track_groups)) {
+		conf_write(fp, "------< Static Track groups >------");
+		dump_list(fp, data->static_track_groups);
 	}
 	if (!LIST_ISEMPTY(data->vrrp)) {
-		log_message(LOG_INFO, "------< VRRP Topology >------");
-		dump_list(data->vrrp);
+		conf_write(fp, "------< VRRP Topology >------");
+		dump_list(fp, data->vrrp);
+	}
+	if (!LIST_ISEMPTY(data->vrrp_socket_pool)) {
+		conf_write(fp, "------< VRRP Sockpool >------");
+		dump_sock_pool(fp, data->vrrp_socket_pool);
 	}
 	if (!LIST_ISEMPTY(data->vrrp_sync_group)) {
-		log_message(LOG_INFO, "------< VRRP Sync groups >------");
-		dump_list(data->vrrp_sync_group);
+		conf_write(fp, "------< VRRP Sync groups >------");
+		dump_list(fp, data->vrrp_sync_group);
 	}
 	if (!LIST_ISEMPTY(data->vrrp_script)) {
-		log_message(LOG_INFO, "------< VRRP Scripts >------");
-		dump_list(data->vrrp_script);
+		conf_write(fp, "------< VRRP Scripts >------");
+		dump_list(fp, data->vrrp_script);
+	}
+	if (!LIST_ISEMPTY(data->vrrp_track_files)) {
+		conf_write(fp, "------< VRRP Track files >------");
+		dump_list(fp, data->vrrp_track_files);
 	}
+#ifdef _WITH_CN_PROC_
+	if (!LIST_ISEMPTY(data->vrrp_track_processes)) {
+		conf_write(fp, "------< VRRP Track processes >------");
+		dump_list(fp, data->vrrp_track_processes);
+	}
+#endif
+#ifdef _WITH_BFD_
+	if (!LIST_ISEMPTY(data->vrrp_track_bfds)) {
+		conf_write(fp, "------< VRRP Track BFDs >------");
+		dump_list(fp, data->vrrp_track_bfds);
+	}
+#endif
+}
+
+void
+dump_data_vrrp(FILE *fp)
+{
+	list ifl;
+
+	dump_global_data(fp, global_data);
+
+	if (!LIST_ISEMPTY(garp_delay)) {
+		conf_write(fp, "------< Gratuitous ARP delays >------");
+		dump_list(fp, garp_delay);
+	}
+
+	dump_vrrp_data(fp, vrrp_data);
+
+	ifl = get_if_list();
+	if (!LIST_ISEMPTY(ifl)) {
+		conf_write(fp, "------< Interfaces >------");
+		dump_list(fp, ifl);
+	}
+
+	clear_rt_names();
 }
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_dbus.c b/tools/keepalived/keepalived/vrrp/vrrp_dbus.c
new file mode 100644
index 000000000..c3b7c2ca2
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_dbus.c
@@ -0,0 +1,1014 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        DBus server thread for VRRP
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2016-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+/* See https://git.gnome.org/browse/glib/tree/gio/tests/fdbus-example-server.c
+ * and https://developer.gnome.org/gio/stable/GDBusConnection.html#gdbus-server
+ * for examples of coding.
+ *
+ * Create a general /org/keepalived/Vrrp1/Vrrp DBus
+ * object and a /org/keepalived/Vrrp1/Instance/#interface#/#group# object for
+ * each VRRP instance.
+ * Interface org.keepalived.Vrrp1.Vrrp implements methods PrintData,
+ * PrintStats and signal VrrpStopped.
+ * Interface com.keepalived.Vrrp1.Instance implements method SendGarp
+ * (sends a single Gratuitous ARP from the given Instance),
+ * signal VrrpStatusChange, and properties Name and State (retrievable
+ * through calls to org.freedesktop.DBus.Properties.Get)
+ *
+ * Interface files need to be installed in /usr/share/dbus-1/interfaces/
+ * A policy file, which determines who has access to the service, is
+ * installed in /etc/dbus-1/system.d/. Sources for the policy and interface
+ * files are in keepalived/dbus.
+ *
+ * To test the DBus service run a command like: dbus-send --system --dest=org.keepalived.Vrrp1 --print-reply object interface.method type:argument
+ * e.g.
+ * dbus-send --system --dest=org.keepalived.Vrrp1 --print-reply /org/keepalived/Vrrp1/Vrrp org.keepalived.Vrrp1.Vrrp.PrintData
+ * or
+ * dbus-send --system --dest=org.keepalived.Vrrp1 --print-reply /org/keepalived/Vrrp1/Instance/eth0/1/IPv4 org.freedesktop.DBus.Properties.Get string:'org.keepalived.Vrrp1.Instance' string:'State'
+ *
+ * To monitor signals, run:
+ * dbus-monitor --system type='signal'
+ *
+ * d-feet is a useful program for interfacing with DBus
+ */
+
+#include "config.h"
+
+#include <errno.h>
+#include <pthread.h>
+#include <semaphore.h>
+#include <gio/gio.h>
+#include <ctype.h>
+#include <fcntl.h>
+#include <sys/types.h>
+#include <stdlib.h>
+#include <stdint.h>
+
+#include "vrrp_dbus.h"
+#include "vrrp_data.h"
+#include "vrrp_print.h"
+#include "global_data.h"
+#include "main.h"
+#include "logger.h"
+#include "utils.h"
+#ifdef THREAD_DUMP
+#include "scheduler.h"
+#endif
+
+typedef enum dbus_action {
+	DBUS_ACTION_NONE,
+	DBUS_PRINT_DATA,
+	DBUS_PRINT_STATS,
+	DBUS_RELOAD,
+#ifdef _WITH_DBUS_CREATE_INSTANCE_
+	DBUS_CREATE_INSTANCE,
+	DBUS_DESTROY_INSTANCE,
+#endif
+	DBUS_SEND_GARP,
+	DBUS_GET_NAME,
+	DBUS_GET_STATUS,
+} dbus_action_t;
+
+typedef enum dbus_error {
+	DBUS_SUCCESS,
+	DBUS_INTERFACE_NOT_FOUND,
+	DBUS_OBJECT_ALREADY_EXISTS,
+	DBUS_INTERFACE_TOO_LONG,
+	DBUS_INSTANCE_NOT_FOUND,
+} dbus_error_t;
+
+typedef struct dbus_queue_ent {
+	dbus_action_t action;
+	dbus_error_t reply;
+	char *ifname;
+	uint8_t vrid;
+	uint8_t family;
+	GVariant *args;
+} dbus_queue_ent_t;
+
+#define DBUS_SERVICE_NAME			"org.keepalived.Vrrp1"
+#define DBUS_VRRP_INTERFACE			"org.keepalived.Vrrp1.Vrrp"
+#define DBUS_VRRP_OBJECT_ROOT			"/org/keepalived/Vrrp1"
+#define DBUS_VRRP_INSTANCE_PATH_DEFAULT_LENGTH	8
+#define DBUS_VRRP_INSTANCE_INTERFACE		"org.keepalived.Vrrp1.Instance"
+#define DBUS_VRRP_INTERFACE_FILE_PATH		"/usr/share/dbus-1/interfaces/org.keepalived.Vrrp1.Vrrp.xml"
+#define DBUS_VRRP_INSTANCE_INTERFACE_FILE_PATH	"/usr/share/dbus-1/interfaces/org.keepalived.Vrrp1.Instance.xml"
+
+static bool dbus_running;
+
+/* Global file variables */
+static GDBusNodeInfo *vrrp_introspection_data = NULL;
+static GDBusNodeInfo *vrrp_instance_introspection_data = NULL;
+static GDBusConnection *global_connection;
+static GHashTable *objects;
+static GMainLoop *loop;
+
+/* Data passing between main vrrp thread and dbus thread */
+dbus_queue_ent_t *ent_ptr;
+static int dbus_in_pipe[2] = {-1, -1};
+static int dbus_out_pipe[2] = {-1, -1};
+static sem_t thread_end;
+
+/* The only characters that are valid in a dbus path are A-Z, a-z, 0-9, _ */
+static char *
+set_valid_path(char *valid_path, const char *path)
+{
+	const char *str_in;
+	char *str_out;
+
+	for (str_in = path, str_out = valid_path; *str_in; str_in++, str_out++) {
+		if (!isalnum(*str_in))
+			*str_out = '_';
+		else
+			*str_out = *str_in;
+	}
+	*str_out = '\0';
+
+	return valid_path;
+}
+
+static bool __attribute__ ((pure))
+valid_path_cmp(const char *path, const char *valid_path)
+{
+	for ( ; *path && *valid_path; path++, valid_path++) {
+		if (!isalnum(*path)) {
+			if (*valid_path != '_')
+				return true;
+		}
+		else if (*path != *valid_path)
+			return true;
+	}
+
+	return *path != *valid_path;
+}
+
+static const char *
+family_str(int family)
+{
+	if (family == AF_INET)
+		return "IPv4";
+	if (family == AF_INET6)
+		return "IPv6";
+	return "None";
+}
+
+static const char *
+state_str(int state)
+{
+	switch (state) {
+	case VRRP_STATE_INIT:
+		return "Init";
+	case VRRP_STATE_BACK:
+		return "Backup";
+	case VRRP_STATE_MAST:
+		return "Master";
+	case VRRP_STATE_FAULT:
+		return "Fault";
+	}
+	return "Unknown";
+}
+
+static vrrp_t * __attribute__ ((pure))
+get_vrrp_instance(const char *ifname, int vrid, int family)
+{
+	element e;
+	vrrp_t *vrrp;
+
+	if (LIST_ISEMPTY(vrrp_data->vrrp))
+		return NULL;
+
+	for (e = LIST_HEAD(vrrp_data->vrrp); e; ELEMENT_NEXT(e)) {
+		vrrp = ELEMENT_DATA(e);
+
+		if (vrrp->vrid == vrid &&
+		    vrrp->family == family &&
+		    !valid_path_cmp(IF_BASE_IFP(vrrp->ifp)->ifname, ifname))
+			return vrrp;
+	}
+
+	return NULL;
+}
+
+static gboolean
+unregister_object(const void * const key, gpointer value, __attribute__((unused)) gpointer user_data)
+{
+	if (g_hash_table_remove(objects, key))
+		return g_dbus_connection_unregister_object(global_connection, GPOINTER_TO_UINT(value));
+	return false;
+}
+
+static gboolean
+remove_object(__attribute__((unused)) gpointer key, gpointer value, __attribute__((unused)) gpointer user_data)
+{
+	return g_dbus_connection_unregister_object(global_connection, GPOINTER_TO_UINT(value));
+}
+
+static gchar * __attribute__ ((malloc))
+dbus_object_create_path_vrrp(void)
+{
+	return g_strconcat(DBUS_VRRP_OBJECT_ROOT,
+#if HAVE_DECL_CLONE_NEWNET
+			  global_data->network_namespace ? "/" : "", global_data->network_namespace ? global_data->network_namespace : "",
+#endif
+			  global_data->instance_name ? "/" : "", global_data->instance_name ? global_data->instance_name : "",
+
+			  "/Vrrp", NULL);
+}
+
+static gchar * __attribute__ ((malloc))
+dbus_object_create_path_instance(const gchar *interface, int vrid, sa_family_t family)
+{
+	gchar *object_path;
+	char standardized_name[sizeof ((vrrp_t*)NULL)->ifp->ifname];
+	gchar *vrid_str = g_strdup_printf("%d", vrid);
+
+	set_valid_path(standardized_name, interface);
+
+	object_path = g_strconcat(DBUS_VRRP_OBJECT_ROOT,
+#if HAVE_DECL_CLONE_NEWNET
+				  global_data->network_namespace ? "/" : "", global_data->network_namespace ? global_data->network_namespace : "",
+#endif
+				  global_data->instance_name ? "/" : "", global_data->instance_name ? global_data->instance_name : "",
+
+				  "/Instance/",
+				  standardized_name, "/", vrid_str,
+				  "/", family_str(family),
+				  NULL);
+
+	g_free(vrid_str);
+	return object_path;
+}
+
+static dbus_queue_ent_t *
+process_method_call(dbus_queue_ent_t *ent)
+{
+	ssize_t ret;
+	char buf = 0;
+
+	if (!ent)
+		return NULL;
+
+	/* Tell the main thread that a queue entry is waiting. Any data works */
+	ent_ptr = ent;
+	if (write(dbus_in_pipe[1], &buf, 1) != 1)
+		log_message(LOG_INFO, "Write from DBus thread to main thread failed");
+
+	/* Wait for a response */
+	while ((ret = read(dbus_out_pipe[0], &buf, 1)) == -1 && check_EINTR(errno))
+		log_message(LOG_INFO, "dbus_out_pipe read returned EINTR");
+	if (ret == -1)
+		log_message(LOG_INFO, "DBus response read error - errno = %d", errno);
+
+#ifdef DBUS_DEBUG
+	if (ent->reply != DBUS_SUCCESS) {
+		char *iname;
+
+		if (ent->reply == DBUS_INTERFACE_NOT_FOUND)
+			log_message(LOG_INFO, "Unable to find DBus requested instance %s/%d/%s", ent->ifname, ent->vrid, family_str(ent->family));
+		else if (ent->reply == DBUS_OBJECT_ALREADY_EXISTS)
+			log_message(LOG_INFO, "Unable to create DBus requested object with instance %s/%d/%s", ent->ifname, ent->vrid, family_str(ent->family));
+		else if (ent->reply == DBUS_INSTANCE_NOT_FOUND) {
+			g_variant_get(ent->args, "(s)", &iname);
+			log_message(LOG_INFO, "Unable to find DBus requested instance %s", iname);
+		}
+		else
+			log_message(LOG_INFO, "Unknown DBus reply %d", ent->reply);
+	}
+#endif
+
+	return ent;
+}
+
+static void
+get_interface_ids(const gchar *object_path, gchar *interface, uint8_t *vrid, uint8_t *family)
+{
+	int path_length = DBUS_VRRP_INSTANCE_PATH_DEFAULT_LENGTH;
+	gchar **dirs;
+	char *endptr;
+
+#if HAVE_DECL_CLONE_NEWNET
+	if(global_data->network_namespace)
+		path_length++;
+#endif
+	if(global_data->instance_name)
+		path_length++;
+
+	/* object_path will have interface, vrid and family as
+	 * the third to last, second to last and last levels */
+	dirs = g_strsplit(object_path, "/", path_length);
+	strcpy(interface, dirs[path_length-3]);
+	*vrid = (uint8_t)strtoul(dirs[path_length-2], &endptr, 10);
+	if (*endptr)
+		log_message(LOG_INFO, "Dbus unexpected characters '%s' at end of number '%s'", endptr, dirs[path_length-2]);
+	*family = !g_strcmp0(dirs[path_length-1], "IPv4") ? AF_INET : !g_strcmp0(dirs[path_length-1], "IPv6") ? AF_INET6 : AF_UNSPEC;
+
+	/* We are finished with all the object_path strings now */
+	g_strfreev(dirs);
+}
+
+/* handles reply to org.freedesktop.DBus.Properties.Get method on any object*/
+static GVariant *
+handle_get_property(__attribute__((unused)) GDBusConnection *connection,
+		    __attribute__((unused)) const gchar     *sender,
+					    const gchar     *object_path,
+					    const gchar     *interface_name,
+					    const gchar     *property_name,
+					    GError	   **error,
+		    __attribute__((unused)) gpointer	     user_data)
+{
+	GVariant *ret = NULL;
+	dbus_queue_ent_t ent;
+	char ifname_str[sizeof ((vrrp_t*)NULL)->ifp->ifname];
+	int action;
+
+	if (g_strcmp0(interface_name, DBUS_VRRP_INSTANCE_INTERFACE)) {
+		log_message(LOG_INFO, "Interface %s has not been implemented yet", interface_name);
+		return NULL;
+	}
+
+	if (!g_strcmp0(property_name, "Name"))
+		action = DBUS_GET_NAME;
+	else if (!g_strcmp0(property_name, "State"))
+		action = DBUS_GET_STATUS;
+	else {
+		log_message(LOG_INFO, "Property %s does not exist", property_name);
+		return NULL;
+	}
+
+	get_interface_ids(object_path, ifname_str, &ent.vrid, &ent.family);
+
+	ent.action = action;
+	ent.ifname = ifname_str;
+	ent.args = NULL;
+	process_method_call(&ent);
+	if (ent.reply == DBUS_SUCCESS)
+		ret = ent.args;
+	else
+		g_set_error(error, G_DBUS_ERROR, G_DBUS_ERROR_INVALID_ARGS, "Instance '%s/%d/%s' not found", ifname_str, ent.vrid, family_str(ent.family));
+
+	return ret;
+}
+
+/* handles method_calls on any object */
+static void
+handle_method_call(__attribute__((unused)) GDBusConnection *connection,
+		   __attribute__((unused)) const gchar	   *sender,
+					   const gchar	   *object_path,
+					   const gchar	   *interface_name,
+					   const gchar	   *method_name,
+#ifndef _WITH_DBUS_CREATE_INSTANCE_
+		   __attribute__((unused))
+#endif
+					   GVariant *parameters,
+		   GDBusMethodInvocation *invocation,
+		   __attribute__((unused)) gpointer user_data)
+{
+#ifdef _WITH_DBUS_CREATE_INSTANCE_
+	char *iname;
+	char *ifname;
+	size_t len;
+	unsigned family;
+#endif
+	dbus_queue_ent_t ent;
+	char ifname_str[sizeof ((vrrp_t*)NULL)->ifp->ifname];
+
+	if (!g_strcmp0(interface_name, DBUS_VRRP_INTERFACE)) {
+		if (!g_strcmp0(method_name, "PrintData")) {
+			ent.action = DBUS_PRINT_DATA;
+			process_method_call(&ent);
+			g_dbus_method_invocation_return_value(invocation, NULL);
+		}
+		else if (g_strcmp0(method_name, "PrintStats") == 0) {
+			ent.action = DBUS_PRINT_STATS;
+			process_method_call(&ent);
+			g_dbus_method_invocation_return_value(invocation, NULL);
+		}
+		else if (g_strcmp0(method_name, "ReloadConfig") == 0) {
+			g_dbus_method_invocation_return_value(invocation, NULL);
+			kill(getppid(), SIGHUP);
+		}
+#ifdef _WITH_DBUS_CREATE_INSTANCE_
+		else if (g_strcmp0(method_name, "CreateInstance") == 0) {
+			g_variant_get(parameters, "(ssuu)", &iname, &ifname, &ent.vrid, &family);
+			len = strlen(ifname);
+			if (len == 0 || len >= IFNAMSIZ) {
+				log_message(LOG_INFO, "Interface name '%s' too long for CreateInstance", ifname);
+				g_dbus_method_invocation_return_error(invocation, G_DBUS_ERROR, G_DBUS_ERROR_INVALID_ARGS, "Interface name empty or too long");
+				return;
+			}
+			ent.action = DBUS_CREATE_INSTANCE;
+			ent.ifname = ifname;
+			ent.family = family == 4 ? AF_INET : family == 6 ? AF_INET6 : AF_UNSPEC;
+			ent.args = g_variant_new("(s)", iname);
+			process_method_call(&ent);
+			g_variant_unref(ent.args);
+			g_dbus_method_invocation_return_value(invocation, NULL);
+		}
+		else if (g_strcmp0(method_name, "DestroyInstance") == 0) {
+// TODO - this should be on the instance
+			ent.action = DBUS_DESTROY_INSTANCE;
+			ent.args = parameters;
+			process_method_call(&ent);
+
+			if (ent.reply == DBUS_INSTANCE_NOT_FOUND) {
+				g_variant_get(parameters, "(s)", &iname);
+				g_dbus_method_invocation_return_error(invocation, G_DBUS_ERROR, G_DBUS_ERROR_INVALID_ARGS, "Instance '%s' not found", iname);
+			}
+			else
+				g_dbus_method_invocation_return_value(invocation, NULL);
+		}
+#endif
+		else {
+			log_message(LOG_INFO, "Method %s has not been implemented yet", method_name);
+			g_dbus_method_invocation_return_error(invocation, G_DBUS_ERROR, G_DBUS_ERROR_MATCH_RULE_NOT_FOUND, "Method not implemented");
+		}
+
+		return;
+	}
+
+	if (!g_strcmp0(interface_name, DBUS_VRRP_INSTANCE_INTERFACE)) {
+		if (!g_strcmp0(method_name, "SendGarp")) {
+			get_interface_ids(object_path, ifname_str, &ent.vrid, &ent.family);
+			ent.action = DBUS_SEND_GARP;
+			ent.ifname = ifname_str;
+			process_method_call(&ent);
+			if (ent.reply ==  DBUS_INTERFACE_NOT_FOUND)
+				g_dbus_method_invocation_return_error(invocation, G_DBUS_ERROR, G_DBUS_ERROR_INVALID_ARGS, "Instance '%s/%d/%s' not found", ifname_str, ent.vrid, family_str(ent.family));
+			else
+				g_dbus_method_invocation_return_value(invocation, NULL);
+		} else {
+			log_message(LOG_INFO, "Method %s has not been implemented yet", method_name);
+			g_dbus_method_invocation_return_error(invocation, G_DBUS_ERROR, G_DBUS_ERROR_MATCH_RULE_NOT_FOUND, "Method not implemented");
+		}
+
+		return;
+	}
+
+	log_message(LOG_INFO, "Interface %s has not been implemented yet", interface_name);
+	g_dbus_method_invocation_return_error(invocation, G_DBUS_ERROR, G_DBUS_ERROR_MATCH_RULE_NOT_FOUND, "Interface not implemented");
+}
+
+static const GDBusInterfaceVTable interface_vtable =
+{
+	handle_method_call,
+	handle_get_property,
+	NULL, /* handle_set_property is null because we have no writeable property */
+	{}
+};
+
+static int
+dbus_create_object_params(const char *instance_name, const char *interface_name, int vrid, sa_family_t family, bool log_success)
+{
+	gchar *object_path;
+	GError *local_error = NULL;
+
+	if (g_hash_table_lookup(objects, instance_name)) {
+		log_message(LOG_INFO, "An object for instance %s already exists", instance_name);
+		return DBUS_OBJECT_ALREADY_EXISTS;
+	}
+
+	object_path = dbus_object_create_path_instance(interface_name, vrid, family);
+
+	guint instance = g_dbus_connection_register_object(global_connection, object_path,
+						vrrp_instance_introspection_data->interfaces[0],
+						&interface_vtable, NULL, NULL, &local_error);
+	if (local_error != NULL) {
+		log_message(LOG_INFO, "Registering DBus object on %s failed: %s",
+			    object_path, local_error->message);
+		g_clear_error(&local_error);
+	}
+
+	if (instance) {
+		g_hash_table_insert(objects, no_const_char_p(instance_name), GUINT_TO_POINTER(instance));
+		if (log_success)
+			log_message(LOG_INFO, "Added DBus object for instance %s on path %s", instance_name, object_path);
+	}
+	g_free(object_path);
+
+	return DBUS_SUCCESS;
+}
+
+static void
+dbus_create_object(vrrp_t *vrrp)
+{
+	dbus_create_object_params(vrrp->iname, IF_NAME(IF_BASE_IFP(vrrp->ifp)), vrrp->vrid, vrrp->family, false);
+}
+
+static bool
+dbus_emit_signal(GDBusConnection *connection,
+		 const gchar *object_path,
+		 const gchar *interface_name,
+		 const gchar *signal_name,
+		 GVariant *parameters)
+{
+	GError *local_error = NULL;
+
+	g_dbus_connection_emit_signal(connection, NULL, object_path, interface_name, signal_name, parameters,
+				      &local_error);
+
+	if (local_error != NULL) {
+		log_message(LOG_INFO, "Emitting DBus signal %s.%s on %s failed: %s",
+			    interface_name, signal_name, object_path, local_error->message);
+		g_clear_error(&local_error);
+		return false;
+	}
+	return true;
+}
+
+/* first function to be run when trying to own bus,
+ * exports objects to the bus */
+static void
+on_bus_acquired(GDBusConnection *connection,
+		const gchar     *name,
+		__attribute__((unused)) gpointer user_data)
+{
+	global_connection = connection;
+	gchar *path;
+	vrrp_t *vrrp;
+	element e;
+	GError *local_error = NULL;
+	guint vrrp_guint;
+
+	log_message(LOG_INFO, "Acquired DBus bus %s", name);
+
+	/* register VRRP object */
+	path = dbus_object_create_path_vrrp();
+	vrrp_guint = g_dbus_connection_register_object(connection, path,
+							 vrrp_introspection_data->interfaces[0],
+							 &interface_vtable, NULL, NULL, &local_error);
+	g_hash_table_insert(objects, no_const_char_p("__Vrrp__"), GUINT_TO_POINTER(vrrp_guint));
+	if (local_error != NULL) {
+		log_message(LOG_INFO, "Registering VRRP object on %s failed: %s",
+			    path, local_error->message);
+		g_clear_error(&local_error);
+	}
+	g_free(path);
+
+	/* for each available VRRP instance, register an object */
+	if (LIST_ISEMPTY(vrrp_data->vrrp))
+		return;
+
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e)
+		dbus_create_object(vrrp);
+
+	/* Send a signal to say we have started */
+	path = dbus_object_create_path_vrrp();
+	dbus_emit_signal(global_connection, path, DBUS_VRRP_INTERFACE, "VrrpStarted", NULL);
+	g_free(path);
+
+	/* Notify DBus of the state of our instances */
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e)
+		dbus_send_state_signal(vrrp);
+}
+
+/* run if bus name is acquired successfully */
+static void
+on_name_acquired(__attribute__((unused)) GDBusConnection *connection,
+		 const gchar     *name,
+		 __attribute__((unused)) gpointer user_data)
+{
+	log_message(LOG_INFO, "Acquired the name %s on the session bus", name);
+}
+
+/* run if bus name or connection are lost */
+static void
+on_name_lost(GDBusConnection *connection,
+	     const gchar     *name,
+	     __attribute__((unused)) gpointer user_data)
+{
+	log_message(LOG_INFO, "Lost the name %s on the session bus", name);
+	global_connection = connection;
+	g_hash_table_foreach_remove(objects, remove_object, NULL);
+	objects = NULL;
+	global_connection = NULL;
+}
+
+static const gchar*
+read_file(const gchar* filepath)
+{
+	FILE * f;
+	long length;
+	gchar *ret = NULL;
+
+	f = fopen(filepath, "r");
+	if (f) {
+		fseek(f, 0, SEEK_END);
+		length = ftell(f);
+		if (length < 0) {
+			fclose(f);
+			return NULL;
+		}
+		fseek(f, 0, SEEK_SET);
+
+		/* We can't use MALLOC since it isn't thread safe */
+		ret = MALLOC(length + 1);
+		if (ret) {
+			if (fread(ret, length, 1, f) != 1) {
+				log_message(LOG_INFO, "Failed to read all of %s", filepath);
+			}
+			ret[length] = '\0';
+		}
+		else
+			log_message(LOG_INFO, "Unable to read Dbus file %s", filepath);
+
+		fclose(f);
+	}
+	return ret;
+}
+
+static void *
+dbus_main(__attribute__ ((unused)) void *unused)
+{
+	const gchar *introspection_xml;
+	guint owner_id;
+	const char *service_name;
+
+	objects = g_hash_table_new(g_str_hash, g_str_equal);
+
+	/* DBus service org.keepalived.Vrrp1 exposes two interfaces, Vrrp and Instance.
+	 * Vrrp is implemented by a single VRRP object for general purposes, such as printing
+	 * data or signaling that the VRRP process has been stopped.
+	 * Instance is implemented by an Instance object for every VRRP Instance in vrrp_data.
+	 * It exposes instance specific methods and properties.
+	 */
+#ifdef DBUS_NEED_G_TYPE_INIT
+	g_type_init();
+#endif
+	GError *error = NULL;
+
+	/* read service interface data from xml files */
+	introspection_xml = read_file(DBUS_VRRP_INTERFACE_FILE_PATH);
+	if (!introspection_xml)
+		return NULL;
+	vrrp_introspection_data = g_dbus_node_info_new_for_xml(introspection_xml, &error);
+	FREE_CONST(introspection_xml);
+	if (error != NULL) {
+		log_message(LOG_INFO, "Parsing DBus interface %s from file %s failed: %s",
+			    DBUS_VRRP_INTERFACE, DBUS_VRRP_INTERFACE_FILE_PATH, error->message);
+		g_clear_error(&error);
+		return NULL;
+	}
+
+	introspection_xml = read_file(DBUS_VRRP_INSTANCE_INTERFACE_FILE_PATH);
+	if (!introspection_xml)
+		return NULL;
+	vrrp_instance_introspection_data = g_dbus_node_info_new_for_xml(introspection_xml, &error);
+	FREE_CONST(introspection_xml);
+	if (error != NULL) {
+		log_message(LOG_INFO, "Parsing DBus interface %s from file %s failed: %s",
+			    DBUS_VRRP_INSTANCE_INTERFACE, DBUS_VRRP_INSTANCE_INTERFACE_FILE_PATH, error->message);
+		g_clear_error(&error);
+		return NULL;
+	}
+
+	service_name = global_data->dbus_service_name ? global_data->dbus_service_name : DBUS_SERVICE_NAME;
+	owner_id = g_bus_own_name(G_BUS_TYPE_SYSTEM,
+				  service_name,
+				  G_BUS_NAME_OWNER_FLAGS_NONE,
+				  on_bus_acquired,
+				  on_name_acquired,
+				  on_name_lost,
+				  NULL,  /* user_data */
+				  NULL); /* user_data_free_func */
+
+	loop = g_main_loop_new(NULL, FALSE);
+	g_main_loop_run(loop);
+
+	/* cleanup after loop terminates */
+	g_main_loop_unref(loop);
+	g_bus_unown_name(owner_id);
+	global_connection = NULL;
+
+	sem_post(&thread_end);
+	pthread_exit(0);
+}
+
+/* The following functions are run in the context of the main vrrp thread */
+
+/* send signal VrrpStatusChange
+ * containing the new state of vrrp */
+void
+dbus_send_state_signal(vrrp_t *vrrp)
+{
+	gchar *object_path;
+	GVariant *args;
+
+	/* the interface will go through the initial state changes before
+	 * the main loop can be started and global_connection initialised */
+	if (global_connection == NULL)
+		return;
+
+	object_path = dbus_object_create_path_instance(IF_NAME(IF_BASE_IFP(vrrp->ifp)), vrrp->vrid, vrrp->family);
+
+	args = g_variant_new("(u)", vrrp->state);
+	dbus_emit_signal(global_connection, object_path, DBUS_VRRP_INSTANCE_INTERFACE, "VrrpStatusChange", args);
+	g_free(object_path);
+}
+
+/* send signal VrrpRestarted */
+static void
+dbus_send_reload_signal(void)
+{
+	gchar *path;
+
+	if (global_connection == NULL)
+		return;
+
+	path = dbus_object_create_path_vrrp();
+	dbus_emit_signal(global_connection, path, DBUS_VRRP_INTERFACE, "VrrpReloaded", NULL);
+	g_free(path);
+}
+
+static gboolean
+dbus_unregister_object(const char *str)
+{
+	gboolean ret = false;
+
+	gpointer value = g_hash_table_lookup(objects, str);
+	if (value) {
+		ret = unregister_object(str, value, NULL);
+		log_message(LOG_INFO, "Deleted DBus object for instance %s", str);
+	}
+#ifdef DBUS_DEBUG
+	else
+		log_message(LOG_INFO, "DBus object not found for instance %s", str);
+#endif
+
+	return ret;
+}
+
+void
+dbus_remove_object(const vrrp_t *vrrp)
+{
+	dbus_unregister_object(vrrp->iname);
+}
+
+static int
+handle_dbus_msg(__attribute__((unused)) thread_ref_t thread)
+{
+	dbus_queue_ent_t *ent;
+	char recv_buf;
+	vrrp_t *vrrp;
+#ifdef _WITH_DBUS_CREATE_INSTANCE_
+	gchar *name;
+#endif
+
+	if (read(dbus_in_pipe[0], &recv_buf, 1) != 1)
+		log_message(LOG_INFO, "Read from DBus thread to vrrp thread failed");
+
+	if ((ent = ent_ptr) != NULL) {
+		ent->reply = DBUS_SUCCESS;
+
+		if (ent->action == DBUS_PRINT_DATA) {
+			log_message(LOG_INFO, "Printing VRRP data on DBus request");
+			vrrp_print_data();
+
+		}
+		else if (ent->action == DBUS_PRINT_STATS) {
+			log_message(LOG_INFO, "Printing VRRP stats on DBus request");
+			vrrp_print_stats();
+		}
+#ifdef _WITH_DBUS_CREATE_INSTANCE_
+		else if (ent->action == DBUS_CREATE_INSTANCE) {
+			g_variant_get(ent->args, "(s)", &name);
+			ent->reply = dbus_create_object_params(name, ent->ifname, ent->vrid, ent->family, true);
+		}
+		else if (ent->action == DBUS_DESTROY_INSTANCE) {
+			g_variant_get(ent->args, "(s)", &name);
+			if (!dbus_unregister_object(name))
+				ent->reply = DBUS_INSTANCE_NOT_FOUND;
+		}
+#endif
+		else if (ent->action == DBUS_SEND_GARP) {
+			ent->reply = DBUS_INTERFACE_NOT_FOUND;
+			vrrp = get_vrrp_instance(ent->ifname, ent->vrid, ent->family);
+			if (vrrp) {
+				log_message(LOG_INFO, "Sending garps on %s on DBus request", vrrp->iname);
+				vrrp_send_link_update(vrrp, 1);
+				ent->reply = DBUS_SUCCESS;
+			}
+		}
+		else if (ent->action == DBUS_GET_NAME ||
+			 ent->action == DBUS_GET_STATUS) {
+			/* we look for the vrrp instance object that corresponds to our interface and group */
+			ent->reply = DBUS_INTERFACE_NOT_FOUND;
+
+			vrrp = get_vrrp_instance(ent->ifname, ent->vrid, ent->family);
+
+			if (vrrp) {
+				/* the property_name argument is the property we want to Get */
+				if (ent->action == DBUS_GET_NAME)
+					ent->args = g_variant_new("(s)", vrrp->iname);
+				else if (ent->action == DBUS_GET_STATUS)
+					ent->args = g_variant_new("(us)", vrrp->state, state_str(vrrp->state));
+				else
+					ent->args = NULL;	 /* How did we get here? */
+				ent->reply = DBUS_SUCCESS;
+			}
+		}
+		if (write(dbus_out_pipe[1], &recv_buf, 1) != 1)
+			log_message(LOG_INFO, "Write from main thread to DBus thread failed");
+	}
+
+	thread_add_read(master, handle_dbus_msg, NULL, dbus_in_pipe[0], TIMER_NEVER, false);
+
+	return 0;
+}
+
+void
+dbus_reload(list o, list n)
+{
+	element e1, e2;
+	vrrp_t *vrrp_n, *vrrp_o;
+
+	if (!dbus_running)
+		return;
+
+	LIST_FOREACH(n, vrrp_n, e1) {
+		char *n_name;
+		bool match_found;
+
+		n_name = IF_BASE_IFP(vrrp_n->ifp)->ifname;
+
+		/* Try and find an instance with same vrid/family/interface that existed before and now */
+		match_found = false;
+		LIST_FOREACH(o, vrrp_o, e2) {
+			if (vrrp_n->vrid == vrrp_o->vrid &&
+			    vrrp_n->family == vrrp_o->family &&
+			    !strcmp(n_name, IF_BASE_IFP(vrrp_o->ifp)->ifname)) {
+				/* If the old instance exists in the new config,
+				 * then the dbus object will exist */
+				if (!strcmp(vrrp_n->iname, vrrp_o->iname)) {
+					match_found = true;
+					g_hash_table_replace(objects, no_const_char_p(vrrp_n->iname), g_hash_table_lookup(objects, vrrp_o->iname));
+					break;
+				} else {
+					gpointer instance;
+					if ((instance = g_hash_table_lookup(objects, vrrp_o->iname))) {
+						g_hash_table_remove(objects, vrrp_o->iname);
+						g_hash_table_insert(objects, no_const_char_p(vrrp_n->iname), instance);
+					}
+					match_found = true;
+					break;
+				}
+
+#if 0
+				/* The following was in the original code, but I can't work out
+				 * its purpose. Leaving it here for now in case it is really needed. */
+
+				/* Check if the old instance name we found still exists
+				 * (but has a different vrid/family/interface) */
+				LIST_FOREACH(n, vrrp_n3, e3) {
+					if (!strcmp(vrrp_o->iname, vrrp_n3->iname)) {
+						match_found = true;
+						break;
+					}
+				}
+#endif
+			}
+		}
+
+		if (match_found)
+			continue;
+
+		dbus_create_object(vrrp_n);
+	}
+
+	/* Signal we have reloaded */
+	dbus_send_reload_signal();
+
+	/* We need to reinstate the read thread */
+	thread_add_read(master, handle_dbus_msg, NULL, dbus_in_pipe[0], TIMER_NEVER, false);
+}
+
+bool
+dbus_start(void)
+{
+	pthread_t dbus_thread;
+	sigset_t sigset, cursigset;
+	int flags;
+
+	if (dbus_running)
+		return false;
+
+	if (open_pipe(dbus_in_pipe)) {
+		log_message(LOG_INFO, "Unable to create inbound dbus pipe - disabling DBus");
+		return false;
+	}
+	if (open_pipe(dbus_out_pipe)) {
+		log_message(LOG_INFO, "Unable to create outbound dbus pipe - disabling DBus");
+		close(dbus_in_pipe[0]);
+		close(dbus_in_pipe[1]);
+		dbus_in_pipe[0] = -1;
+		dbus_out_pipe[0] = -1;
+		return false;
+	}
+
+	/* We don't want the main thread to block when using the pipes,
+	 * but the other side of the pipes should block. */
+	flags = fcntl(dbus_in_pipe[1], F_GETFL);
+	if (flags == -1 ||
+	    fcntl(dbus_in_pipe[1], F_SETFL, flags & ~O_NONBLOCK) == -1)
+		log_message(LOG_INFO, "Unable to set dbus thread in_pipe blocking - (%d - %m)", errno);
+	flags = fcntl(dbus_out_pipe[0], F_GETFL);
+	if (flags == -1 ||
+	    fcntl(dbus_out_pipe[0], F_SETFL, flags & ~O_NONBLOCK) == -1)
+		log_message(LOG_INFO, "Unable to set dbus thread out_pipe blocking - (%d - %m)", errno);
+
+	thread_add_read(master, handle_dbus_msg, NULL, dbus_in_pipe[0], TIMER_NEVER, false);
+
+	/* Initialise the thread termination semaphore */
+	sem_init(&thread_end, 0, 0);
+
+	/* Block signals (all) we don't want the new thread to process */
+	sigfillset(&sigset);
+	pthread_sigmask(SIG_SETMASK, &sigset, &cursigset);
+
+	/* Now create the dbus thread */
+	pthread_create(&dbus_thread, NULL, &dbus_main, NULL);
+
+	/* Reenable our signals */
+	pthread_sigmask(SIG_SETMASK, &cursigset, NULL);
+
+	dbus_running = true;
+
+	return true;
+}
+
+void
+dbus_stop(void)
+{
+	struct timespec thread_end_wait;
+	int ret;
+	gchar *path;
+
+	if (!dbus_running)
+		return;
+
+	g_hash_table_foreach_remove(objects, remove_object, NULL);
+	objects = NULL;
+
+	if (global_connection != NULL) {
+		path = dbus_object_create_path_vrrp();
+		dbus_emit_signal(global_connection, path, DBUS_VRRP_INTERFACE, "VrrpStopped", NULL);
+		g_free(path);
+	}
+
+	g_main_loop_quit(loop);
+
+	g_dbus_node_info_unref(vrrp_introspection_data);
+	g_dbus_node_info_unref(vrrp_instance_introspection_data);
+
+	clock_gettime(CLOCK_REALTIME, &thread_end_wait);
+	thread_end_wait.tv_sec += 1;
+	while ((ret = sem_timedwait(&thread_end, &thread_end_wait)) == -1 && check_EINTR(errno));
+
+	if (ret == -1 ) {
+		if (errno == ETIMEDOUT)
+			log_message(LOG_INFO, "DBus thread termination timed out");
+		else
+			log_message(LOG_INFO, "sem_timewait error %d", errno);
+	}
+	else {
+		log_message(LOG_INFO, "Released DBus");
+		sem_destroy(&thread_end);
+	}
+
+	dbus_running = false;
+
+	close(dbus_in_pipe[0]);
+	close(dbus_in_pipe[1]);
+	dbus_in_pipe[0] = -1;
+	dbus_in_pipe[0] = -1;
+	close(dbus_out_pipe[0]);
+	close(dbus_out_pipe[1]);
+	dbus_out_pipe[0] = -1;
+	dbus_out_pipe[0] = -1;
+}
+
+#ifdef THREAD_DUMP
+void
+register_vrrp_dbus_addresses(void)
+{
+	register_thread_address("handle_dbus_msg", handle_dbus_msg);
+}
+#endif
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_firewall.c b/tools/keepalived/keepalived/vrrp/vrrp_firewall.c
new file mode 100644
index 000000000..fae731d6e
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_firewall.c
@@ -0,0 +1,118 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        accept mode management
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include "vrrp_firewall.h"
+#ifdef _WITH_IPTABLES_
+#include "vrrp_iptables.h"
+#endif
+#ifdef _WITH_NFTABLES_
+#include "vrrp_nftables.h"
+#endif
+#include "global_data.h"
+#include "vrrp_ipaddress.h"
+
+
+/* add/remove iptables/nftables drop rules */
+void
+firewall_handle_accept_mode(vrrp_t *vrrp, int cmd,
+#ifndef _WITH_IPTABLES_
+			    __attribute__((unused))
+#endif
+						    bool force)
+{
+#ifdef _WITH_IPTABLES_
+	if (global_data->vrrp_iptables_inchain[0])
+		handle_iptables_accept_mode(vrrp, cmd, force);
+#endif
+
+#ifdef _WITH_NFTABLES_
+	if (global_data->vrrp_nf_table_name) {
+		if (cmd == IPADDRESS_ADD)
+			nft_add_addresses(vrrp);
+		else
+			nft_remove_addresses(vrrp);
+	}
+#endif
+
+	vrrp->firewall_rules_set = (cmd == IPADDRESS_ADD);
+}
+
+void
+firewall_remove_rule_to_iplist(list ip_list)
+{
+#ifdef _WITH_IPTABLES_
+	if (global_data->vrrp_iptables_inchain[0])
+		handle_iptable_rule_to_iplist(ip_list, NULL, IPADDRESS_DEL, false);
+#endif
+
+#ifdef _WITH_NFTABLES_
+	if (global_data->vrrp_nf_table_name)
+		nft_remove_addresses_iplist(ip_list);
+#endif
+}
+
+#ifdef _HAVE_VRRP_VMAC_
+void
+firewall_add_vmac(const vrrp_t *vrrp)
+{
+#ifdef _WITH_IPTABLES_
+	if (global_data->vrrp_iptables_outchain[0])
+		iptables_add_vmac(vrrp);
+#endif
+
+#ifdef _WITH_NFTABLES_
+	if (global_data->vrrp_nf_table_name)
+		nft_add_vmac(vrrp);
+#endif
+}
+
+void
+firewall_remove_vmac(const vrrp_t *vrrp)
+{
+#ifdef _WITH_IPTABLES_
+	if (global_data->vrrp_iptables_outchain[0])
+		iptables_remove_vmac(vrrp);
+#endif
+
+#ifdef _WITH_NFTABLES_
+	if (global_data->vrrp_nf_table_name)
+		nft_remove_vmac(vrrp);
+#endif
+}
+#endif
+
+void
+firewall_fini(void)
+{
+#ifdef _WITH_IPTABLES_
+	if (global_data->vrrp_iptables_inchain[0] ||
+	    global_data->vrrp_iptables_outchain[0])
+		iptables_fini();
+#endif
+
+#ifdef _WITH_NFTABLES_
+	if (global_data->vrrp_nf_table_name)
+		nft_end();
+#endif
+}
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_if.c b/tools/keepalived/keepalived/vrrp/vrrp_if.c
index 4bb235603..63994b419 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_if.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_if.c
@@ -17,53 +17,78 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
 /* global include */
 #include <unistd.h>
-#include <string.h>
 #include <stdint.h>
-typedef uint64_t u64;
-typedef uint32_t u32;
-typedef uint16_t u16;
-typedef uint8_t u8;
-#include <sys/socket.h>
+#include <stdio.h>
 #include <sys/ioctl.h>
-#include <netinet/in.h>
 #include <errno.h>
-#include <fcntl.h>
 #include <syslog.h>
-#include <ctype.h>
-#ifdef use_linux_libc5
-#include <linux/if_arp.h>
-#include <linux/if_ether.h>
-#endif
-#include <stdlib.h>
+#include <inttypes.h>
+//#include <linux/ip.h>
+#include <netinet/in.h>
 #include <stdio.h>
-#ifdef _KRNL_2_4_
-#include <linux/ethtool.h>
+#include <linux/mii.h>
+#if defined _HAVE_NETINET_LINUX_IF_ETHER_H_COLLISION_ && \
+    defined _LINUX_IF_ETHER_H && \
+    !defined _NETINET_IF_ETHER_H
+/* musl libc throws an error if <linux/if_ether.h> is included before <netinet/if_ether.h>,
+ * so we stop <netinet/if_ether.h> being included if <linux/if_ether.h> has been included. */
+#define _NETINET_IF_ETHER_H
+#endif
+#if !HAVE_DECL_SOCK_CLOEXEC
+#include "old_socket.h"
 #endif
+#include <linux/sockios.h>	/* needed to get correct values for SIOC* */
+#include <linux/ethtool.h>
+#include <net/if_arp.h>
+#include <time.h>
+#include <linux/filter.h>
 
 /* local include */
-#include "scheduler.h"
 #include "global_data.h"
-#include "vrrp_data.h"
 #include "vrrp.h"
 #include "vrrp_if.h"
-#include "vrrp_netlink.h"
-#include "memory.h"
+#include "vrrp_daemon.h"
+#include "keepalived_netlink.h"
 #include "utils.h"
 #include "logger.h"
+#ifdef _HAVE_VRRP_VMAC_
+#include "vrrp_vmac.h"
+#include "bitops.h"
+#endif
+#include "vrrp_track.h"
+#include "vrrp_scheduler.h"
+#include "vrrp_iproute.h"
+#ifdef THREAD_DUMP
+#include "scheduler.h"
+#endif
+#ifdef _WITH_FIREWALL_
+#include "vrrp_firewall.h"
+#endif
 
-/* Global vars */
+
+/* Local vars */
 static list if_queue;
+#ifdef _WITH_LINKBEAT_
 static struct ifreq ifr;
+static int linkbeat_fd = -1;
+#endif
+
+static list old_garp_delay;
+
+/* Global vars */
+list garp_delay;
 
 /* Helper functions */
 /* Return interface from interface index */
-interface_t *
-if_get_by_ifindex(const int ifindex)
+interface_t * __attribute__ ((pure))
+if_get_by_ifindex(ifindex_t ifindex)
 {
 	interface_t *ifp;
 	element e;
@@ -79,252 +104,494 @@ if_get_by_ifindex(const int ifindex)
 	return NULL;
 }
 
-/* Return interface from VMAC base interface index */
 interface_t *
-if_get_by_vmac_base_ifindex(const int ifindex)
+if_get_by_ifname(const char *ifname, if_lookup_t create)
 {
 	interface_t *ifp;
 	element e;
 
-	if (LIST_ISEMPTY(if_queue) || !ifindex)
+	LIST_FOREACH(if_queue, ifp, e) {
+		if (!strcmp(ifp->ifname, ifname))
+			return ifp;
+	}
+
+	if (create == IF_NO_CREATE ||
+	    (create == IF_CREATE_IF_DYNAMIC && (!global_data || !global_data->dynamic_interfaces))) {
+		if (create == IF_CREATE_IF_DYNAMIC)
+			non_existent_interface_specified = true;
 		return NULL;
+	}
 
-	for (e = LIST_HEAD(if_queue); e; ELEMENT_NEXT(e)) {
-		ifp = ELEMENT_DATA(e);
-		if (ifp->vmac && ifp->base_ifindex == ifindex)
-			return ifp;
+	if (!(ifp = MALLOC(sizeof(interface_t))))
+		return NULL;
+
+	strcpy_safe(ifp->ifname, ifname);
+#ifdef _HAVE_VRRP_VMAC_
+	ifp->base_ifp = ifp;
+#endif
+	ifp->if_type = IF_TYPE_STANDARD;
+	ifp->sin_addr_l = alloc_list(free_list_element_simple, NULL);
+	ifp->sin6_addr_l = alloc_list(free_list_element_simple, NULL);
+
+	if_add_queue(ifp);
+
+	if (create == IF_CREATE_IF_DYNAMIC)
+		log_message(LOG_INFO, "Configuration specifies interface %s which doesn't currently exist - will use if created", ifname);
+
+	return ifp;
+}
+
+#ifdef _HAVE_VRRP_VMAC_
+/* Set the base_ifp for VMACs and IPVLANs and vrf_master_ifp for VRFs - only used at startup */
+static void
+set_base_ifp(void)
+{
+	interface_t *ifp;
+#ifdef _HAVE_VRF_
+	interface_t *master_ifp;
+#endif
+	element e;
+
+	LIST_FOREACH(if_queue, ifp, e) {
+		if ((!ifp->base_ifp || ifp == ifp->base_ifp) &&
+		    ifp->base_ifindex) {
+#ifdef HAVE_IFLA_LINK_NETNSID
+			if (ifp->base_netns_id != -1)
+				ifp->base_ifp = NULL;
+			else
+#endif
+				ifp->base_ifp = if_get_by_ifindex(ifp->base_ifindex);
+
+			/* If this is a MACVLAN/IPVLAN that has been moved into a separate network namespace
+			 * from its parent, then we can't get information about the parent. */
+			if (!ifp->base_ifp)
+				ifp->base_ifp = ifp;
+			else
+				ifp->base_ifindex = 0;	/* This is only used at startup, so ensure not used later */
+		}
+
+#ifdef _HAVE_VRF_
+		/* Now see if the interface is enslaved to a VRF */
+		if (ifp->vrf_master_ifindex) {
+			master_ifp = if_get_by_ifindex(ifp->vrf_master_ifindex);
+			if (master_ifp && master_ifp->vrf_master_ifp == master_ifp)
+				ifp->vrf_master_ifp = master_ifp;
+			ifp->vrf_master_ifindex = 0;
+		}
+#endif
 	}
+}
+#endif
 
-	return NULL;
+/* Return the interface list itself */
+list __attribute__ ((pure))
+get_if_list(void)
+{
+	return if_queue;
 }
 
-interface_t *
-if_get_by_ifname(const char *ifname)
+void
+reset_interface_queue(void)
 {
+	old_garp_delay = garp_delay;
 	interface_t *ifp;
 	element e;
 
-	if (LIST_ISEMPTY(if_queue))
-		return NULL;
+	garp_delay = NULL;
 
-	for (e = LIST_HEAD(if_queue); e; ELEMENT_NEXT(e)) {
-		ifp = ELEMENT_DATA(e);
-		if (!strcmp(ifp->ifname, ifname))
-			return ifp;
+	LIST_FOREACH(if_queue, ifp, e) {
+#ifdef _WITH_LINKBEAT_
+		ifp->linkbeat_use_polling = false;
+#endif
+		ifp->garp_delay = NULL;
+		free_list(&ifp->tracking_vrrp);
 	}
-	return NULL;
 }
 
+#ifdef _WITH_LINKBEAT_
 /* MII Transceiver Registers poller functions */
-static int
-if_mii_read(const int fd, const int phy_id, int location)
+static uint16_t
+if_mii_read(int fd, uint16_t phy_id, uint16_t reg_num)
 {
-	uint16_t *data = (uint16_t *) (&ifr.ifr_data);
+	struct mii_ioctl_data *data = (struct mii_ioctl_data *)&ifr.ifr_data;
 
-	data[0] = phy_id;
-	data[1] = location;
+	data->phy_id = phy_id;
+	data->reg_num = reg_num;
 
 	if (ioctl(fd, SIOCGMIIREG, &ifr) < 0) {
-		log_message(LOG_ERR, "SIOCGMIIREG on %s failed: %s", ifr.ifr_name,
-		       strerror(errno));
-		return -1;
+		log_message(LOG_ERR, "SIOCGMIIREG on %s failed: %s", ifr.ifr_name, strerror(errno));
+		return 0xffff;
 	}
-	return data[3];
+	return data->val_out;
 }
 
-/*
-static void if_mii_dump(const uint16_t mii_regs[32], unsigned phy_id)
+#ifdef _INCLUDE_UNUSED_CODE_
+static void if_mii_dump(const uint16_t *mii_regs, size_t num_regs, unsigned phy_id)
 {
-  int mii_reg;
+	int mii_reg;
 
-  printf(" MII PHY #%d transceiver registers:\n", phy_id);
-  for (mii_reg = 0; mii_reg < 32; mii_reg++)
-    printf("%s %4.4x", (mii_reg % 8) == 0 ? "\n ":"", mii_regs[mii_reg]);
+	printf(" MII PHY #%d transceiver registers:", phy_id);
+	for (mii_reg = 0; mii_reg < num_regs; mii_reg++)
+		printf("%s %4.4x", (mii_reg % 8) == 0 ? "\n ":"", mii_regs[mii_reg]);
+	printf("\n");
 }
-*/
+#endif
 
 static int
 if_mii_status(const int fd)
 {
-	uint16_t *data = (uint16_t *) (&ifr.ifr_data);
-	unsigned phy_id = data[0];
-	uint16_t mii_regs[32];
-	int mii_reg;
+	struct mii_ioctl_data *data = (struct mii_ioctl_data *)&ifr.ifr_data;
+	uint16_t phy_id = data->phy_id;
 	uint16_t bmsr, new_bmsr;
 
-	/* Reset MII registers */
-	memset(mii_regs, 0, sizeof (mii_regs));
-
-	for (mii_reg = 0; mii_reg < 32; mii_reg++)
-		mii_regs[mii_reg] = if_mii_read(fd, phy_id, mii_reg);
-
-// if_mii_dump(mii_regs, phy_id);
-
-	if (mii_regs[0] == 0xffff) {
-		log_message(LOG_ERR, "No MII transceiver present for %s !!!",
-		       ifr.ifr_name);
+	if (if_mii_read(fd, phy_id, MII_BMCR) == 0xffff ||
+	    (bmsr = if_mii_read(fd, phy_id, MII_BMSR)) == 0) {
+		log_message(LOG_ERR, "No MII transceiver present for %s !!!", ifr.ifr_name);
 		return -1;
 	}
 
-	bmsr = mii_regs[1];
+// if_mii_dump(mii_regs, sizeof(mii_regs)/ sizeof(mii_regs[0], phy_id);
 
 	/*
 	 * For Basic Mode Status Register (BMSR).
 	 * Sticky field (Link established & Jabber detected), we need to read
 	 * a second time the BMSR to get current status.
 	 */
-	new_bmsr = if_mii_read(fd, phy_id, 1);
+	new_bmsr = if_mii_read(fd, phy_id, MII_BMSR);
 
 // printf(" \nBasic Mode Status Register 0x%4.4x ... 0x%4.4x\n", bmsr, new_bmsr);
 
-	if (bmsr & 0x0004)
+	if (bmsr & BMSR_LSTATUS ||
+	    new_bmsr & BMSR_LSTATUS)
 		return LINK_UP;
-	else if (new_bmsr & 0x0004)
-		return LINK_UP;
-	else
-		return LINK_DOWN;
+
+	return LINK_DOWN;
 }
 
-int
-if_mii_probe(const char *ifname)
+static int
+if_mii_probe(const int fd, const char *ifname)
 {
-	uint16_t *data = (uint16_t *) (&ifr.ifr_data);
-	int phy_id;
-	int fd = socket(AF_INET, SOCK_DGRAM, 0);
-	int status = 0;
+	struct mii_ioctl_data *data = (struct mii_ioctl_data *)&ifr.ifr_data;
+	uint16_t phy_id;
 
-	if (fd < 0)
-		return -1;
 	memset(&ifr, 0, sizeof (struct ifreq));
-	strncpy(ifr.ifr_name, ifname, sizeof (ifr.ifr_name));
-	if (ioctl(fd, SIOCGMIIPHY, &ifr) < 0) {
-		close(fd);
+	strcpy_safe(ifr.ifr_name, ifname);
+	if (ioctl(fd, SIOCGMIIPHY, &ifr) < 0)
 		return -1;
-	}
 
 	/* check if the driver reports BMSR using the MII interface, as we
 	 * will need this and we already know that some don't support it.
 	 */
-	phy_id = data[0]; /* save it in case it is overwritten */
-	data[1] = 1;
-	if (ioctl(fd, SIOCGMIIREG, &ifr) < 0) {
-		close(fd);
+	phy_id = data->phy_id; /* save it in case it is overwritten */
+	data->reg_num = MII_BMSR;
+	if (ioctl(fd, SIOCGMIIREG, &ifr) < 0)
 		return -1;
-	}
-	data[0] = phy_id;
+	data->phy_id = phy_id;
 
 	/* Dump the MII transceiver */
-	status = if_mii_status(fd);
-	close(fd);
-	return status;
+	return if_mii_status(fd);
 }
 
-static int
+static inline int
 if_ethtool_status(const int fd)
 {
-#ifdef ETHTOOL_GLINK
 	struct ethtool_value edata;
-	int err = 0;
 
 	edata.cmd = ETHTOOL_GLINK;
 	ifr.ifr_data = (caddr_t) & edata;
-	err = ioctl(fd, SIOCETHTOOL, &ifr);
-	if (err == 0)
-		return (edata.data) ? 1 : 0;
-	else
-#endif
+	if (ioctl(fd, SIOCETHTOOL, &ifr))
 		return -1;
+
+	return (edata.data) ? LINK_UP : LINK_DOWN;
 }
 
-int
-if_ethtool_probe(const char *ifname)
+static int
+if_ethtool_probe(const int fd, const interface_t *ifp)
 {
-	int fd = socket(AF_INET, SOCK_DGRAM, 0);
-	int status = 0;
+	int status;
 
-	if (fd < 0)
-		return -1;
 	memset(&ifr, 0, sizeof (struct ifreq));
-	strncpy(ifr.ifr_name, ifname, sizeof (ifr.ifr_name));
+	strcpy_safe(ifr.ifr_name, ifp->ifname);
 
 	status = if_ethtool_status(fd);
-	close(fd);
+
 	return status;
 }
 
-void
-if_ioctl_flags(interface_t * ifp)
+/* Returns false if interface is down */
+static bool
+if_ioctl_flags(const int fd, interface_t *ifp)
 {
-	int fd = socket(AF_INET, SOCK_DGRAM, 0);
-
-	if (fd < 0)
-		return;
 	memset(&ifr, 0, sizeof (struct ifreq));
-	strncpy(ifr.ifr_name, ifp->ifname, sizeof (ifr.ifr_name));
-	if (ioctl(fd, SIOCGIFFLAGS, &ifr) < 0) {
-		close(fd);
-		return;
-	}
-	ifp->flags = ifr.ifr_flags;
-	close(fd);
+	strcpy(ifr.ifr_name, ifp->ifname);
+	if (ioctl(fd, SIOCGIFFLAGS, &ifr) < 0)
+		return (errno != ENODEV) ? LINK_UP : LINK_DOWN;
+
+	return FLAGS_UP(ifr.ifr_flags) ? LINK_UP : LINK_DOWN;
 }
+#endif
 
 /* Interfaces lookup */
 static void
 free_if(void *data)
 {
+	interface_t *ifp = data;
+
+	free_list(&ifp->tracking_vrrp);
+	free_list(&ifp->sin_addr_l);
+	free_list(&ifp->sin6_addr_l);
+
 	FREE(data);
 }
 
+/* garp_delay facility function */
+static void
+free_garp_delay(void *data)
+{
+	FREE(data);
+}
+
+static void
+dump_garp_delay(FILE *fp, const void *data)
+{
+	const garp_delay_t *gd = data;
+	char time_str[26];
+	interface_t *ifp;
+	element e;
+
+	conf_write(fp, "------< GARP delay group %d >------", gd->aggregation_group);
+
+	if (gd->have_garp_interval) {
+		conf_write(fp, " GARP interval = %g", gd->garp_interval.tv_sec + ((double)gd->garp_interval.tv_usec) / 1000000);
+		if (!ctime_r(&gd->garp_next_time.tv_sec, time_str))
+                        strcpy(time_str, "invalid time ");
+		conf_write(fp, " GARP next time %ld.%6.6ld (%.19s.%6.6ld)", gd->garp_next_time.tv_sec, gd->garp_next_time.tv_usec, time_str, gd->garp_next_time.tv_usec);
+	}
+
+	if (gd->have_gna_interval) {
+		conf_write(fp, " GNA interval = %g", gd->gna_interval.tv_sec + ((double)gd->gna_interval.tv_usec) / 1000000);
+		if (!ctime_r(&gd->gna_next_time.tv_sec, time_str))
+                        strcpy(time_str, "invalid time ");
+		conf_write(fp, " GNA next time %ld.%6.6ld (%.19s.%6.6ld)", gd->gna_next_time.tv_sec, gd->gna_next_time.tv_usec, time_str, gd->gna_next_time.tv_usec);
+	}
+	else if (!gd->have_garp_interval)
+		conf_write(fp, " No configuration");
+
+	conf_write(fp, " Interfaces");
+	LIST_FOREACH(if_queue, ifp, e) {
+		if (ifp->garp_delay == gd)
+			conf_write(fp, "  %s", ifp->ifname);
+	}
+}
+
 void
-dump_if(void *data)
+alloc_garp_delay(void)
 {
-	interface_t *ifp = data;
-	char addr_str[41];
+	if (!LIST_EXISTS(garp_delay))
+		garp_delay = alloc_list(free_garp_delay, dump_garp_delay);
 
-	log_message(LOG_INFO, "------< NIC >------");
-	log_message(LOG_INFO, " Name = %s", ifp->ifname);
-	log_message(LOG_INFO, " index = %d", ifp->ifindex);
-	log_message(LOG_INFO, " IPv4 address = %s", inet_ntop2(ifp->sin_addr.s_addr));
-	inet_ntop(AF_INET6, &ifp->sin6_addr, addr_str, 41);
-	log_message(LOG_INFO, " IPv6 address = %s", addr_str);
+	list_add(garp_delay, MALLOC(sizeof(garp_delay_t)));
+}
 
-	/* FIXME: Harcoded for ethernet */
-	if (ifp->hw_type == ARPHRD_ETHER)
-		log_message(LOG_INFO, " MAC = %.2x:%.2x:%.2x:%.2x:%.2x:%.2x",
-		       ifp->hw_addr[0], ifp->hw_addr[1], ifp->hw_addr[2]
-		       , ifp->hw_addr[3], ifp->hw_addr[4], ifp->hw_addr[5]);
+void
+set_default_garp_delay(void)
+{
+	garp_delay_t default_delay = {};
+	element e;
+	interface_t *ifp;
+	garp_delay_t *delay;
+	vrrp_t *vrrp;
+
+	if (global_data->vrrp_garp_interval) {
+		default_delay.garp_interval.tv_sec = global_data->vrrp_garp_interval / 1000000;
+		default_delay.garp_interval.tv_usec = global_data->vrrp_garp_interval % 1000000;
+		default_delay.have_garp_interval = true;
+	}
+	if (global_data->vrrp_gna_interval) {
+		default_delay.gna_interval.tv_sec = global_data->vrrp_gna_interval / 1000000;
+		default_delay.gna_interval.tv_usec = global_data->vrrp_gna_interval % 1000000;
+		default_delay.have_gna_interval = true;
+	}
+
+	/* Allocate a delay structure to each physical interface that doesn't have one and
+	 * is being used by a VRRP instance */
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		ifp = IF_BASE_IFP(vrrp->ifp);
+		if (!ifp->garp_delay) {
+			alloc_garp_delay();
+			delay = LIST_TAIL_DATA(garp_delay);
+			*delay = default_delay;
+			ifp->garp_delay = delay;
+		}
+	}
+}
+
+static void
+dump_if(FILE *fp, const void *data)
+{
+	const interface_t *ifp = data;
+	char addr_str[INET6_ADDRSTRLEN];
+	char mac_buf[3 * sizeof ifp->hw_addr];
+	element e;
+	struct in_addr *addr_p;
+	struct in6_addr *addr6_p;
+	char time_str[26];
+
+	conf_write(fp, " Name = %s", ifp->ifname);
+	conf_write(fp, "   index = %u%s", ifp->ifindex, ifp->ifindex ? "" : " (deleted)");
+	conf_write(fp, "   IPv4 address = %s",
+			ifp->sin_addr.s_addr ? inet_ntop2(ifp->sin_addr.s_addr) : "(none)");
+	if (!LIST_ISEMPTY(ifp->sin_addr_l)) {
+		conf_write(fp, "   Additional IPv4 addresses = %u", LIST_SIZE(ifp->sin_addr_l));
+		LIST_FOREACH(ifp->sin_addr_l, addr_p, e)
+			conf_write(fp, "     %s", inet_ntop2(addr_p->s_addr));
+	}
+	if (ifp->sin6_addr.s6_addr32[0]) {
+		inet_ntop(AF_INET6, &ifp->sin6_addr, addr_str, sizeof(addr_str));
+		conf_write(fp, "   IPv6 address = %s", addr_str);
+	} else
+		conf_write(fp, "   IPv6 address = (none)");
+	if (!LIST_ISEMPTY(ifp->sin6_addr_l)) {
+		conf_write(fp, "   Additional IPv6 addresses = %u", LIST_SIZE(ifp->sin6_addr_l));
+		LIST_FOREACH(ifp->sin6_addr_l, addr6_p, e) {
+			inet_ntop(AF_INET6, addr6_p, addr_str, sizeof(addr_str));
+			conf_write(fp, "     %s", addr_str);
+		}
+	}
 
-	if (ifp->flags & IFF_UP)
-		log_message(LOG_INFO, " is UP");
+	if (ifp->hw_addr_len) {
+		format_mac_buf(mac_buf, sizeof mac_buf, ifp->hw_addr, ifp->hw_addr_len);
+		conf_write(fp, "   MAC = %s", mac_buf);
 
-	if (ifp->flags & IFF_RUNNING)
-		log_message(LOG_INFO, " is RUNNING");
+		format_mac_buf(mac_buf, sizeof mac_buf, ifp->hw_addr_bcast, ifp->hw_addr_len);
+		conf_write(fp, "   MAC broadcast = %s", mac_buf);
+	}
 
-	if (!(ifp->flags & IFF_UP) && !(ifp->flags & IFF_RUNNING))
-		log_message(LOG_INFO, " is DOWN");
+	conf_write(fp, "   State = %sUP, %sRUNNING%s%s%s%s%s%s", ifp->ifi_flags & IFF_UP ? "" : "not ", ifp->ifi_flags & IFF_RUNNING ? "" : "not ",
+			!(ifp->ifi_flags & IFF_BROADCAST) ? ", no broadcast" : "",
+			ifp->ifi_flags & IFF_LOOPBACK ? ", loopback" : "",
+			ifp->ifi_flags & IFF_POINTOPOINT ? ", point to point" : "",
+			ifp->ifi_flags & IFF_NOARP ? ", no arp" : "",
+			!(ifp->ifi_flags & IFF_MULTICAST) ? ", no multicast" : "",
+#ifdef _HAVE_VRRP_VMAC_
+			ifp != ifp->base_ifp && !(ifp->base_ifp->ifi_flags & IFF_UP) ? ", master down" : ""
+#else
+			""
+#endif
+		  );
 
-	log_message(LOG_INFO, " MTU = %d", ifp->mtu);
+#ifdef _HAVE_VRRP_VMAC_
+	if (IS_VLAN(ifp)) {
+		const char *if_type =
+#ifdef _HAVE_VRRP_IPVLAN
+				      ifp->if_type == IF_TYPE_IPVLAN ? "IPVLAN" : 
+#endif
+										  "VMAC";
+		const char *vlan_type =
+				ifp->if_type == IF_TYPE_MACVLAN ?
+					ifp->vmac_type == MACVLAN_MODE_PRIVATE ? "private" :
+					ifp->vmac_type == MACVLAN_MODE_VEPA ? "vepa" :
+					ifp->vmac_type == MACVLAN_MODE_BRIDGE ? "bridge" :
+#ifdef MACVLAN_MODE_PASSTHRU
+					ifp->vmac_type == MACVLAN_MODE_PASSTHRU ? "passthru" :
+#endif
+#ifdef MACVLAN_MODE_SOURCE
+					ifp->vmac_type == MACVLAN_MODE_SOURCE ? "source" :
+#endif
+					"unknown" :
+#ifdef IFLA_IPVLAN_FLAGS
+					ifp->vmac_type == IPVLAN_MODE_PRIVATE ? "private" :
+					ifp->vmac_type == IPVLAN_MODE_VEPA ? "vepa" :
+#endif
+					"bridge";
+		if (ifp != ifp->base_ifp)
+			conf_write(fp, "   %s type %s, underlying interface = %s, state = %sUP, %sRUNNING",
+					if_type, vlan_type,
+					ifp->base_ifp->ifname,
+					ifp->base_ifp->ifi_flags & IFF_UP ? "" : "not ", ifp->base_ifp->ifi_flags & IFF_RUNNING ? "" : "not ");
+		else if (ifp->base_ifindex) {
+#ifdef HAVE_IFLA_LINK_NETNSID
+			conf_write(fp, "   %s type %s, underlying ifindex = %u, netns id = %d", if_type, vlan_type, ifp->base_ifindex, ifp->base_netns_id);
+#else
+			conf_write(fp, "   %s type %s, underlying ifindex = %d", if_type, vlan_type, ifp->base_ifindex);
+#endif
+		}
+		else
+			conf_write(fp, "   %s type %s, underlying interface in different namespace", if_type, vlan_type);
+	}
+	if (ifp->is_ours)
+		conf_write(fp, "   I/f created by keepalived");
+	else if (global_data->allow_if_changes && ifp->changeable_type)
+		conf_write(fp, "   Interface type/base can be changed");
+	if (ifp->seen_interface)
+		conf_write(fp, "   Done VRID check");
+#endif
+	conf_write(fp, "   MTU = %" PRIu32, ifp->mtu);
 
 	switch (ifp->hw_type) {
 	case ARPHRD_LOOPBACK:
-		log_message(LOG_INFO, " HW Type = LOOPBACK");
+		conf_write(fp, "   HW Type = LOOPBACK");
 		break;
 	case ARPHRD_ETHER:
-		log_message(LOG_INFO, " HW Type = ETHERNET");
+		conf_write(fp, "   HW Type = ETHERNET");
+		break;
+	case ARPHRD_INFINIBAND:
+		log_message(LOG_INFO, " HW Type = INFINIBAND");
 		break;
 	default:
-		log_message(LOG_INFO, " HW Type = UNKNOWN");
+		conf_write(fp, "   HW Type = UNKNOWN (%d)", ifp->hw_type);
 		break;
 	}
 
-	/* MII channel supported ? */
-	if (IF_MII_SUPPORTED(ifp))
-		log_message(LOG_INFO, " NIC support MII regs");
+#ifdef _WITH_LINKBEAT_
+	if (!ifp->linkbeat_use_polling)
+		conf_write(fp, "   NIC netlink status update");
+	else if (IF_MII_SUPPORTED(ifp))
+		conf_write(fp, "   NIC support MII regs");
 	else if (IF_ETHTOOL_SUPPORTED(ifp))
-		log_message(LOG_INFO, " NIC support EHTTOOL GLINK interface");
+		conf_write(fp, "   NIC support ETHTOOL GLINK interface");
 	else
-		log_message(LOG_INFO, " Enabling NIC ioctl refresh polling");
+		conf_write(fp, "   NIC ioctl refresh polling");
+#endif
+#ifdef _HAVE_VRF_
+	if (ifp->vrf_master_ifp == ifp)
+		conf_write(fp, "   VRF master");
+	else if (ifp->vrf_master_ifp)
+		conf_write(fp, "   VRF slave of %s", ifp->vrf_master_ifp->ifname);
+#endif
+
+	if (ifp->garp_delay) {
+		if (ifp->garp_delay->have_garp_interval)
+			conf_write(fp, "   Gratuitous ARP interval %ldms",
+				    ifp->garp_delay->garp_interval.tv_sec * 100 +
+				     ifp->garp_delay->garp_interval.tv_usec / (TIMER_HZ / 100));
+
+		if (ifp->garp_delay->have_gna_interval)
+			conf_write(fp, "   Gratuitous NA interval %ldms",
+				    ifp->garp_delay->gna_interval.tv_sec * 100 +
+				     ifp->garp_delay->gna_interval.tv_usec / (TIMER_HZ / 100));
+		if (ifp->garp_delay->aggregation_group)
+			conf_write(fp, "   Gratuitous ARP aggregation group %d", ifp->garp_delay->aggregation_group);
+	}
+
+#ifdef _HAVE_VRRP_VMAC_
+	conf_write(fp, "   Reset ARP config counter %d", ifp->reset_arp_config);
+	conf_write(fp, "   Original arp_ignore %d", ifp->arp_ignore);
+	conf_write(fp, "   Original arp_filter %d", ifp->arp_filter);
+	if (ifp->rp_filter < UINT_MAX)
+		conf_write(fp, "   rp_filter %u", ifp->rp_filter);
+#endif
+	conf_write(fp, "   Original promote_secondaries %d", ifp->promote_secondaries);
+	conf_write(fp, "   Reset promote_secondaries counter %" PRIu32, ifp->reset_promote_secondaries);
+	if (timerisset(&ifp->last_gna_router_check)) {
+		ctime_r(&ifp->last_gna_router_check.tv_sec, time_str);
+		conf_write(fp, "   %sIPv6 forwarding. Last checked %ld.%6.6ld (%.24s.%6.6ld)", ifp->gna_router ? "" : "Not ", ifp->last_gna_router_check.tv_sec, ifp->last_gna_router_check.tv_usec, time_str, ifp->last_gna_router_check.tv_usec);
+
+	}
+
+	conf_write(fp, "   Tracking VRRP instances = %u", !LIST_ISEMPTY(ifp->tracking_vrrp) ? LIST_SIZE(ifp->tracking_vrrp) : 0);
+	if (!LIST_ISEMPTY(ifp->tracking_vrrp))
+		dump_list(fp, ifp->tracking_vrrp);
 }
 
 static void
@@ -339,102 +606,203 @@ if_add_queue(interface_t * ifp)
 	list_add(if_queue, ifp);
 }
 
+#ifdef _WITH_LINKBEAT_
+static bool
+init_linkbeat_status(int fd, interface_t *ifp)
+{
+	int status;
+	bool if_up = false;
+	int configured_type = ifp->lb_type;
+
+	if ((!ifp->lb_type || ifp->lb_type == LB_MII)) {
+		if ((status = if_mii_probe(fd, ifp->ifname)) >= 0) {
+			ifp->lb_type = LB_MII;
+			if_up = !!status;
+		}
+		else
+			ifp->lb_type = 0;
+	}
+
+	if ((!ifp->lb_type || ifp->lb_type == LB_ETHTOOL)) {
+		if ((status = if_ethtool_probe(fd, ifp)) >= 0) {
+			ifp->lb_type = LB_ETHTOOL;
+			if_up = !!status;
+		} else {
+			/* If ETHTOOL was configured on i/f but doesn't work, try MII */
+			if (ifp->lb_type &&
+			    (status = if_mii_probe(fd, ifp->ifname)) >= 0) {
+				ifp->lb_type = LB_MII;
+				if_up = !!status;
+			}
+			else
+				ifp->lb_type = 0;
+		}
+	}
+
+	if ((!ifp->lb_type || ifp->lb_type == LB_IOCTL)) {
+		ifp->lb_type = LB_IOCTL;
+		if_up = true;
+	}
+
+	if (if_up)
+		if_up = if_ioctl_flags(fd, ifp);
+
+	if (configured_type && configured_type != ifp->lb_type)
+		log_message(LOG_INFO, "(%s): Configured linkbeat type %s not supported, using %s",
+				      ifp->ifname,
+				      configured_type == LB_MII ? "MII" : configured_type == LB_ETHTOOL ? "ETHTOOL" : "IOCTL",
+				      ifp->lb_type == LB_MII ? "MII" : ifp->lb_type == LB_ETHTOOL ? "ETHTOOL" : "IOCTL");
+
+	return if_up;
+}
+
 static int
-if_linkbeat_refresh_thread(thread_t * thread)
+if_linkbeat_refresh_thread(thread_ref_t thread)
 {
 	interface_t *ifp = THREAD_ARG(thread);
+	bool if_up = true, was_up;
 
-	if (IF_MII_SUPPORTED(ifp))
-		ifp->linkbeat = (if_mii_probe(ifp->ifname)) ? 1 : 0;
-	else if (IF_ETHTOOL_SUPPORTED(ifp))
-		ifp->linkbeat = (if_ethtool_probe(ifp->ifname)) ? 1 : 0;
-	else
-		ifp->linkbeat = 1;
+	was_up = IF_FLAGS_UP(ifp);
 
-	/*
-	 * update ifp->flags to get the new IFF_RUNNING status.
-	 * Some buggy drivers need this...
-	 */
-	if_ioctl_flags(ifp);
+	if (!ifp->ifindex) {
+		if_up = false;
+	} else {
+		if (!ifp->lb_type) {
+			/* If this is a new interface, we need to find linkbeat type */
+			if_up = init_linkbeat_status(linkbeat_fd, ifp);
+		} else {
+			if (IF_MII_SUPPORTED(ifp))
+				if_up = if_mii_probe(linkbeat_fd, ifp->ifname);
+			else if (IF_ETHTOOL_SUPPORTED(ifp))
+				if_up = if_ethtool_probe(linkbeat_fd, ifp);
+
+			/*
+			 * update ifp->flags to get the new IFF_RUNNING status.
+			 * Some buggy drivers need this...
+			 */
+			if (if_up)
+				if_up = if_ioctl_flags(linkbeat_fd, ifp);
+		}
+	}
+
+	ifp->ifi_flags = if_up ? IFF_UP | IFF_RUNNING : 0;
+
+	if (if_up != was_up) {
+		log_message(LOG_INFO, "Linkbeat reports %s %s", ifp->ifname, if_up ? "up" : "down");
+
+		process_if_status_change(ifp);
+	}
 
 	/* Register next polling thread */
 	thread_add_timer(master, if_linkbeat_refresh_thread, ifp, POLLING_DELAY);
+
 	return 0;
 }
 
-static void
-init_if_linkbeat(void)
+void
+init_interface_linkbeat(void)
 {
 	interface_t *ifp;
 	element e;
-	int status;
+	bool linkbeat_in_use = false;
+	bool if_up;
+
+	LIST_FOREACH(if_queue, ifp, e) {
+		if (!ifp->linkbeat_use_polling)
+			continue;
+
+		/* Don't poll an interface that we aren't using */
+		if (!ifp->tracking_vrrp) {
+			log_message(LOG_INFO, "Turning off linkbeat for %s since not used for tracking", ifp->ifname);
+			ifp->linkbeat_use_polling = false;
+			ifp->lb_type = 0;
+			continue;
+		}
 
-	for (e = LIST_HEAD(if_queue); e; ELEMENT_NEXT(e)) {
-		ifp = ELEMENT_DATA(e);
-		ifp->lb_type = LB_IOCTL;
-		status = if_mii_probe(ifp->ifname);
-		if (status >= 0) {
-			ifp->lb_type = LB_MII;
-			ifp->linkbeat = (status) ? 1 : 0;
-		} else {
-			status = if_ethtool_probe(ifp->ifname);
-			if (status >= 0) {
-				ifp->lb_type = LB_ETHTOOL;
-				ifp->linkbeat = (status) ? 1 : 0;
+#ifdef _HAVE_VRRP_VMAC_
+		/* netlink messages work for vmacs */
+		if (IS_VLAN(ifp)) {
+			log_message(LOG_INFO, "Turning off linkbeat for %s since netlink works for vmacs/ipvlans", ifp->ifname);
+			ifp->linkbeat_use_polling = false;
+			continue;
+		}
+#endif
+
+		if (linkbeat_fd == -1) {
+			if ((linkbeat_fd = socket(AF_INET, SOCK_DGRAM | SOCK_CLOEXEC, 0)) == -1) {
+				log_message(LOG_INFO, "open linkbeat init socket failed - errno %d - %m\n", errno);
+				return;
 			}
+#if !HAVE_DECL_SOCK_CLOEXEC
+			set_sock_flags(linkbeat_fd, F_SETFD, FD_CLOEXEC);
+#endif
+		}
+
+		linkbeat_in_use = true;
+		if (!ifp->ifindex) {
+			/* Interface doesn't exist yet */
+			ifp->ifi_flags = 0;
+		} else {
+			if_up = init_linkbeat_status(linkbeat_fd, ifp);
+
+			ifp->ifi_flags = if_up ? IFF_UP | IFF_RUNNING : 0;
 		}
 
 		/* Register new monitor thread */
 		thread_add_timer(master, if_linkbeat_refresh_thread, ifp, POLLING_DELAY);
 	}
+
+	if (linkbeat_in_use)
+		log_message(LOG_INFO, "Using MII-BMSR/ETHTOOL NIC polling thread(s)...");
 }
 
-int
-if_linkbeat(const interface_t * ifp)
+void
+close_interface_linkbeat(void)
 {
-	if (!global_data->linkbeat_use_polling)
-		return 1;
-
-	if (IF_MII_SUPPORTED(ifp) || IF_ETHTOOL_SUPPORTED(ifp))
-		return IF_LINKBEAT(ifp);
-
-	return 1;
+	if (linkbeat_fd != -1) {
+		close(linkbeat_fd);
+		linkbeat_fd = -1;
+	}
 }
+#endif
 
 /* Interface queue helpers*/
 void
 free_interface_queue(void)
 {
-	if (!LIST_ISEMPTY(if_queue))
-		free_list(if_queue);
-	if_queue = NULL;
+	free_list(&if_queue);
+	free_list(&garp_delay);
 }
 
 void
-init_interface_queue(void)
+free_old_interface_queue(void)
 {
-	init_if_queue();
-//	dump_list(if_queue);
-	netlink_interface_lookup();
+	free_list(&old_garp_delay);
 }
 
 void
-init_interface_linkbeat(void)
+init_interface_queue(void)
 {
-	if (global_data->linkbeat_use_polling) {
-		log_message(LOG_INFO, "Using MII-BMSR NIC polling thread...");
-		init_if_linkbeat();
-	} else {
-		log_message(LOG_INFO, "Using LinkWatch kernel netlink reflector...");
-	}
+	init_if_queue();
+	netlink_interface_lookup(NULL);
+#ifdef _HAVE_VRRP_VMAC_
+	/* Since we are reading all the interfaces, we might have received details of
+	 * a vmac/vrf before the underlying interface, so now we need to ensure the
+	 * interface pointers are all set */
+	set_base_ifp();
+#endif
+//	dump_list(NULL, if_queue);
 }
 
 int
-if_join_vrrp_group(sa_family_t family, int *sd, interface_t *ifp, int proto)
+if_join_vrrp_group(sa_family_t family, int *sd, interface_t *ifp)
 {
 	struct ip_mreqn imr;
 	struct ipv6_mreq imr6;
 	int ret = 0;
+#if defined _HAVE_VRRP_VMAC_
+	bool send_on_base_if;
+#endif
 
 	if (*sd < 0)
 		return -1;
@@ -445,31 +813,86 @@ if_join_vrrp_group(sa_family_t family, int *sd, interface_t *ifp, int proto)
 	 * traffic.
 	 */
 
+	/* We don't really want to send the IGMP/MLD messages on a VMAC
+	 * interface, since that will send using the 00:00:5e:00:0x:xx mac
+	 * address, and snooping switches will then be updated, even if we
+	 * are backup.
+	 * We have to join the group on the VMAC interface, otherwise we cannot
+	 * receive the messages to the multicast address (if we try receiving
+	 * on the base interface we don't see the messages since there is an
+	 * interface on the system with the MAC address matching the source address
+	 * of the packet). If we are using nftables and the dup statement is supported,
+	 * we just let nftables move the IGMP join message to the physical interface,
+	 * otherwise we need to join on both the VMAC interface and the physical
+	 * interface, and use nftables/iptables to drop the packet on the VMAC
+	 * interface.
+	 * If we are using neither nftables or iptables, there is no point in
+	 * duplicating the join, since we can't block it on the VMAC interface.
+	 *
+	 * This might all be better achieved using eBPF.
+	 */
+#if defined _HAVE_VRRP_VMAC_
+	send_on_base_if = false;
+	if (IS_VLAN(ifp) &&
+	    ifp->if_type == IF_TYPE_MACVLAN &&
+	    ifp->is_ours) {
+#ifdef _WITH_IPTABLES_
+		if (global_data->vrrp_iptables_outchain[0])
+			send_on_base_if = true;
+#endif
+#ifdef _WITH_NFTABLES_
+		if (global_data->vrrp_nf_table_name) {
+#if HAVE_DECL_NFTA_DUP_MAX
+			send_on_base_if = false;
+#else
+			send_on_base_if = true;
+#endif
+		}
+#endif
+	}
+#endif
+
 	if (family == AF_INET) {
 		memset(&imr, 0, sizeof(imr));
-		imr.imr_multiaddr = ((struct sockaddr_in *) &global_data->vrrp_mcast_group4)->sin_addr;
-		imr.imr_address.s_addr = IF_ADDR(ifp);
-		imr.imr_ifindex = IF_INDEX(ifp);
+		imr.imr_multiaddr = global_data->vrrp_mcast_group4.sin_addr;
 
 		/* -> Need to handle multicast convergance after takeover.
 		 * We retry until multicast is available on the interface.
 		 */
+#if defined _HAVE_VRRP_VMAC_
+		if (send_on_base_if)
+		{
+			imr.imr_ifindex = IF_INDEX(IF_BASE_IFP(ifp));
+			if (setsockopt(*sd, IPPROTO_IP, IP_ADD_MEMBERSHIP,
+					 (char *) &imr, (socklen_t)sizeof(struct ip_mreqn)) < 0)
+				log_message(LOG_INFO, "Failed to set GARP on base if - errno %d (%m)", errno);
+		}
+#endif
+		imr.imr_ifindex = (int)IF_INDEX(ifp);
 		ret = setsockopt(*sd, IPPROTO_IP, IP_ADD_MEMBERSHIP,
-				 (char *) &imr, sizeof(struct ip_mreqn));
+				 (char *) &imr, (socklen_t)sizeof(struct ip_mreqn));
 	} else {
 		memset(&imr6, 0, sizeof(imr6));
-		imr6.ipv6mr_multiaddr = ((struct sockaddr_in6 *) &global_data->vrrp_mcast_group6)->sin6_addr;
+		imr6.ipv6mr_multiaddr = global_data->vrrp_mcast_group6.sin6_addr;
+#if defined _HAVE_VRRP_VMAC_
+		if (send_on_base_if) {
+			imr6.ipv6mr_interface = IF_INDEX(IF_BASE_IFP(ifp));
+			if (setsockopt(*sd, IPPROTO_IPV6, IPV6_ADD_MEMBERSHIP,
+					 (char *) &imr6, (socklen_t)sizeof(struct ipv6_mreq)) < 0)
+				log_message(LOG_INFO, "Failed to set MLD on base if - errno %d (%m)", errno);
+		}
+#endif
 		imr6.ipv6mr_interface = IF_INDEX(ifp);
 		ret = setsockopt(*sd, IPPROTO_IPV6, IPV6_ADD_MEMBERSHIP,
-				 (char *) &imr6, sizeof(struct ipv6_mreq));
+				 (char *) &imr6, (socklen_t)sizeof(struct ipv6_mreq));
 	}
 
 	if (ret < 0) {
-		log_message(LOG_INFO, "cant do IP%s_ADD_MEMBERSHIP errno=%s (%d)",
-			    (family == AF_INET) ? "" : "V6", strerror(errno), errno);
+		log_message(LOG_INFO, "(%s) cant do IP%s_ADD_MEMBERSHIP errno=%s (%d)",
+			    ifp->ifname, (family == AF_INET) ? "" : "V6", strerror(errno), errno);
 		close(*sd);
 		*sd = -1;
-        }
+	}
 
 	return *sd;
 }
@@ -477,7 +900,7 @@ if_join_vrrp_group(sa_family_t family, int *sd, interface_t *ifp, int proto)
 int
 if_leave_vrrp_group(sa_family_t family, int sd, interface_t *ifp)
 {
-	struct ip_mreq imr;
+	struct ip_mreqn imr;
 	struct ipv6_mreq imr6;
 	int ret = 0;
 
@@ -488,27 +911,44 @@ if_leave_vrrp_group(sa_family_t family, int sd, interface_t *ifp)
 	/* Leaving the VRRP multicast group */
 	if (family == AF_INET) {
 		memset(&imr, 0, sizeof(imr));
-		imr.imr_multiaddr = ((struct sockaddr_in *) &global_data->vrrp_mcast_group4)->sin_addr;
-		imr.imr_interface.s_addr = IF_ADDR(ifp);
+		imr.imr_multiaddr = global_data->vrrp_mcast_group4.sin_addr;
+#if defined _HAVE_VRRP_VMAC_ && defined _WITH_NFTABLES_ && !HAVE_DECL_NFTA_DUP_MAX
+		/* See description in if_join_vrrp_group */
+		if (IS_VLAN(ifp) &&
+		    ifp->if_type == IF_TYPE_MACVLAN &&
+		    ifp->is_ours) {
+			imr.imr_ifindex = IF_INDEX(IF_BASE_IFP(ifp));
+			setsockopt(sd, IPPROTO_IP, IP_DROP_MEMBERSHIP,
+					 (char *) &imr, sizeof(imr));
+		}
+		imr.imr_ifindex = (int)IF_INDEX(ifp);
 		ret = setsockopt(sd, IPPROTO_IP, IP_DROP_MEMBERSHIP,
-				 (char *) &imr, sizeof(struct ip_mreq));
+				 (char *) &imr, sizeof(imr));
+#endif
 	} else {
 		memset(&imr6, 0, sizeof(imr6));
-		imr6.ipv6mr_multiaddr = ((struct sockaddr_in6 *) &global_data->vrrp_mcast_group6)->sin6_addr;
+		imr6.ipv6mr_multiaddr = global_data->vrrp_mcast_group6.sin6_addr;
+#if defined _HAVE_VRRP_VMAC_ && defined _WITH_NFTABLES_ && !HAVE_DECL_NFTA_DUP_MAX
+		/* See description in if_join_vrrp_group */
+		if (IS_VLAN(ifp) &&
+		    ifp->if_type == IF_TYPE_MACVLAN &&
+		    ifp->is_ours) {
+			imr6.ipv6mr_interface = IF_INDEX(IF_BASE_IFP(ifp));
+			setsockopt(sd, IPPROTO_IPV6, IPV6_DROP_MEMBERSHIP,
+					 (char *) &imr6, sizeof(struct ipv6_mreq));
+		}
+#endif
 		imr6.ipv6mr_interface = IF_INDEX(ifp);
 		ret = setsockopt(sd, IPPROTO_IPV6, IPV6_DROP_MEMBERSHIP,
 				 (char *) &imr6, sizeof(struct ipv6_mreq));
 	}
 
 	if (ret < 0) {
-		log_message(LOG_INFO, "cant do IP%s_DROP_MEMBERSHIP errno=%s (%d)",
-			    (family == AF_INET) ? "" : "V6", strerror(errno), errno);
-		close(sd);
+		log_message(LOG_INFO, "(%s) cant do IP%s_DROP_MEMBERSHIP errno=%s (%d)",
+			    ifp->ifname, (family == AF_INET) ? "" : "V6", strerror(errno), errno);
 		return -1;
 	}
 
-	/* Finally close the desc */
-	close(sd);
 	return 0;
 }
 
@@ -529,9 +969,9 @@ if_setsockopt_bindtodevice(int *sd, interface_t *ifp)
 	 * -- If you read this !!! and know the answer to the question
 	 *    please feel free to answer me ! :)
 	 */
-	ret = setsockopt(*sd, SOL_SOCKET, SO_BINDTODEVICE, IF_NAME(ifp), strlen(IF_NAME(ifp)) + 1);
+	ret = setsockopt(*sd, SOL_SOCKET, SO_BINDTODEVICE, IF_NAME(ifp), (socklen_t)strlen(IF_NAME(ifp)) + 1);
 	if (ret < 0) {
-		log_message(LOG_INFO, "cant bind to device %s. errno=%d. (try to run it as root)",
+		log_message(LOG_INFO, "can't bind to device %s. errno=%d. (try to run it as root)",
 			    IF_NAME(ifp), errno);
 		close(*sd);
 		*sd = -1;
@@ -560,6 +1000,52 @@ if_setsockopt_hdrincl(int *sd)
 	return *sd;
 }
 
+int
+if_setsockopt_ipv6_checksum(int *sd)
+{
+	int ret;
+	int offset = 6;
+
+	if (!sd || *sd < 0)
+		return -1;
+
+	ret = setsockopt(*sd, IPPROTO_IPV6, IPV6_CHECKSUM, &offset, sizeof(offset));
+	if (ret < 0) {
+		log_message(LOG_INFO, "cant set IPV6_CHECKSUM IP option. errno=%d (%m)", errno);
+		close(*sd);
+		*sd = -1;
+	}
+
+	return *sd;
+}
+
+#if HAVE_DECL_IP_MULTICAST_ALL	/* Since Linux 2.6.31 */
+int
+if_setsockopt_mcast_all(sa_family_t family, int *sd)
+{
+	int ret;
+	unsigned char no = 0;
+
+	if (*sd < 0)
+		return -1;
+
+	if (family == AF_INET6)
+		return *sd;
+
+	/* Don't accept multicast packets we haven't requested */
+	ret = setsockopt(*sd, IPPROTO_IP, IP_MULTICAST_ALL, &no, sizeof(no));
+
+	if (ret < 0) {
+		log_message(LOG_INFO, "cant set IP_MULTICAST_ALL IP option. errno=%d (%m)",
+			    errno);
+		close(*sd);
+		*sd = -1;
+	}
+
+	return *sd;
+}
+#endif
+
 int
 if_setsockopt_mcast_loop(sa_family_t family, int *sd)
 {
@@ -570,7 +1056,7 @@ if_setsockopt_mcast_loop(sa_family_t family, int *sd)
 	if (*sd < 0)
 		return -1;
 
-	/* Include IP header into RAW protocol packet */
+	/* Set Multicast loop */
 	if (family == AF_INET)
 		ret = setsockopt(*sd, IPPROTO_IP, IP_MULTICAST_LOOP, &loop, sizeof(loop));
 	else
@@ -596,7 +1082,7 @@ if_setsockopt_mcast_hops(sa_family_t family, int *sd)
 	if (*sd < 0 || family == AF_INET)
 		return -1;
 
-	/* Include IP header into RAW protocol packet */
+	/* Set HOP limit */
 	ret = setsockopt(*sd, IPPROTO_IPV6, IPV6_MULTICAST_HOPS, &hops, sizeof(hops));
 	if (ret < 0) {
 		log_message(LOG_INFO, "cant set IPV6_MULTICAST_HOPS IP option. errno=%d (%m)", errno);
@@ -611,17 +1097,29 @@ int
 if_setsockopt_mcast_if(sa_family_t family, int *sd, interface_t *ifp)
 {
 	int ret;
-	unsigned int ifindex;
+	ifindex_t ifindex;
+	int int_ifindex;
 
-	/* Not applicable for IPv4 */
-	if (*sd < 0 || family == AF_INET)
+	if (*sd < 0)
 		return -1;
 
-	/* Include IP header into RAW protocol packet */
+	/* Set interface for sending outbound datagrams */
 	ifindex = IF_INDEX(ifp);
-	ret = setsockopt(*sd, IPPROTO_IPV6, IPV6_MULTICAST_IF, &ifindex, sizeof(ifindex));
+	if ( family == AF_INET)
+	{
+		struct ip_mreqn imr;
+
+		memset(&imr, 0, sizeof(imr));
+		imr.imr_ifindex = (int)IF_INDEX(ifp);
+		ret = setsockopt(*sd, IPPROTO_IP, IP_MULTICAST_IF, &imr, sizeof(imr));
+	}
+	else {
+		int_ifindex = (int)ifindex;
+		ret = setsockopt(*sd, IPPROTO_IPV6, IPV6_MULTICAST_IF, &int_ifindex, sizeof(int_ifindex));
+	}
+
 	if (ret < 0) {
-		log_message(LOG_INFO, "cant set IPV6_MULTICAST_IF IP option. errno=%d (%m)", errno);
+		log_message(LOG_INFO, "cant set IP%s_MULTICAST_IF IP option. errno=%d (%m)", (family == AF_INET) ? "" : "V6", errno);
 		close(*sd);
 		*sd = -1;
 	}
@@ -630,18 +1128,27 @@ if_setsockopt_mcast_if(sa_family_t family, int *sd, interface_t *ifp)
 }
 
 int
-if_setsockopt_priority(int *sd)
+if_setsockopt_priority(int *sd, int family)
 {
 	int ret;
-	int priority = 6;
+	int val;
 
 	if (*sd < 0)
 		return -1;
 
-	/* Set SO_PRIORITY for VRRP traffic */
-	ret = setsockopt(*sd, SOL_SOCKET, SO_PRIORITY, &priority, sizeof(priority));
+	/* Set PRIORITY for VRRP traffic */
+	if (family == AF_INET) {
+		val = IPTOS_PREC_INTERNETCONTROL;
+		ret = setsockopt(*sd, IPPROTO_IP, IP_TOS, &val, sizeof(val));
+	}
+	else {
+		/* set tos to internet network control */
+		val = 0xc0;	/* 192, which translates to DCSP value 48, or cs6 */
+		ret = setsockopt(*sd, IPPROTO_IPV6, IPV6_TCLASS, &val, sizeof(val));
+	}
+
 	if (ret < 0) {
-		log_message(LOG_INFO, "cant set SO_PRIORITY IP option. errno=%d (%m)", errno);
+		log_message(LOG_INFO, "can't set %s option. errno=%d (%m)", (family == AF_INET) ? "IP_TOS" : "IPV6_TCLASS",  errno);
 		close(*sd);
 		*sd = -1;
 	}
@@ -650,39 +1157,412 @@ if_setsockopt_priority(int *sd)
 }
 
 int
-if_setsockopt_sndbuf(int *sd, int val)
+if_setsockopt_rcvbuf(int *sd, int val)
 {
 	int ret;
 
 	if (*sd < 0)
 		return -1;
 
-	/* sndbuf option */
-        ret = setsockopt(*sd, SOL_SOCKET, SO_SNDBUF, &val, sizeof(val));
-        if (ret < 0) {
-		log_message(LOG_INFO, "cant set SO_SNDBUF IP option. errno=%d (%m)", errno);
+	/* rcvbuf option */
+	ret = setsockopt(*sd, SOL_SOCKET, SO_RCVBUF, &val, sizeof(val));
+	if (ret < 0) {
+		log_message(LOG_INFO, "cant set SO_RCVBUF IP option. errno=%d (%m)", errno);
 		close(*sd);
 		*sd = -1;
-        }
+	}
 
-        return *sd;
+	return *sd;
 }
 
 int
-if_setsockopt_rcvbuf(int *sd, int val)
+if_setsockopt_no_receive(int *sd)
 {
 	int ret;
+	struct sock_filter bpfcode[1] = {
+		{0x06, 0, 0, 0},	/* ret #0 - means that all packets will be filtered out */
+	};
+	struct sock_fprog bpf = {1, bpfcode};
 
 	if (*sd < 0)
 		return -1;
 
-	/* rcvbuf option */
-	ret = setsockopt(*sd, SOL_SOCKET, SO_RCVBUF, &val, sizeof(val));
+	ret = setsockopt(*sd, SOL_SOCKET, SO_ATTACH_FILTER, &bpf, sizeof(bpf));
 	if (ret < 0) {
-		log_message(LOG_INFO, "cant set SO_RCVBUF IP option. errno=%d (%m)", errno);
+		log_message(LOG_INFO, "Can't set SO_ATTACH_FILTER option. errno=%d (%m)", errno);
 		close(*sd);
 		*sd = -1;
 	}
 
 	return *sd;
 }
+
+void
+interface_up(interface_t *ifp)
+{
+	/* We need to re-add static addresses and static routes */
+	static_track_reinstate_config(ifp);
+}
+
+void
+interface_down(interface_t *ifp)
+{
+	element e, e1;
+	vrrp_t *vrrp;
+	ip_route_t *route;
+	bool route_found;
+
+	/* Unfortunately the kernel doesn't send RTM_DELROUTE for userspace added
+	 * routes that are deleted when the link goes down (?kernel bug). */
+
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		if (vrrp->state != VRRP_STATE_MAST)
+			continue;
+
+		route_found = false;
+
+		LIST_FOREACH(vrrp->vroutes, route, e1) {
+			if (!route->set)
+				continue;
+
+			/* Any route that has an oif will be tracking the interface,
+			 * so we only need to check for routes that dont specify an
+			 * oif */
+			/* Don't track route if it's not configured with this down
+			 * interface. */
+			if (!route->oif || route->configured_ifindex != ifp->ifindex)
+				continue;
+
+			route->set = false;
+
+			if (route->dont_track)
+				continue;
+
+			route_found = true;
+		}
+
+		if (route_found) {
+			/* Bring down vrrp instance/sync group */
+			down_instance(vrrp);
+		}
+	}
+
+#ifdef _HAVE_FIB_ROUTING_
+	/* Now check the static routes */
+	LIST_FOREACH(vrrp_data->static_routes, route, e) {
+		if (route->set && route->oif == ifp) {
+			/* This route will have been deleted */
+			route->set = false;
+		}
+	}
+#endif
+}
+
+void
+cleanup_lost_interface(interface_t *ifp)
+{
+	vrrp_t *vrrp;
+	tracking_vrrp_t *tvp;
+	element e;
+
+	LIST_FOREACH(ifp->tracking_vrrp, tvp, e) {
+		vrrp = tvp->vrrp;
+
+		/* If this is just a tracking interface, we don't need to do anything */
+		if (vrrp->ifp != ifp && IF_BASE_IFP(vrrp->ifp) != ifp && VRRP_CONFIGURED_IFP(vrrp) != ifp)
+			continue;
+
+		/* If the vrrp instance's interface doesn't exist, skip it */
+		if (!vrrp->ifp->ifindex)
+			continue;
+
+#ifdef _HAVE_VRRP_VMAC_
+		/* If vmac going, clear VMAC_UP_BIT on vrrp instance */
+		if (vrrp->ifp->is_ours) {
+			__clear_bit(VRRP_VMAC_UP_BIT, &vrrp->vmac_flags);
+#ifdef _WITH_FIREWALL_
+			firewall_remove_vmac(vrrp);
+#endif
+		}
+
+		if (vrrp->configured_ifp == ifp &&
+		    vrrp->configured_ifp->base_ifp == vrrp->ifp->base_ifp &&
+		    vrrp->ifp->is_ours) {
+			/* This is a changeable interface that the vrrp instance
+			 * was configured on. Delete the macvlan/ipvlan we created */
+			netlink_link_del_vmac(vrrp);
+		}
+
+		if (vrrp->configured_ifp == ifp &&
+		    vrrp->configured_ifp->base_ifp != vrrp->configured_ifp)
+			del_vrrp_from_interface(vrrp, vrrp->configured_ifp->base_ifp);
+
+		/* If the interface type can be changed, and the vrrp had a
+		 * duplicate VRID, clear the error since when the underlying
+		 * interface is created again, it may be on another underlying
+		 * interface, and there may not be a duplicate VRID. */
+		if (global_data->allow_if_changes &&
+		    ifp->changeable_type &&
+		    vrrp->configured_ifp == ifp &&
+		    vrrp->duplicate_vrid_fault) {
+			vrrp->duplicate_vrid_fault = false;
+			vrrp->num_script_if_fault--;
+		}
+#endif
+
+		/* Find the sockpool entry. If none, then we have closed the socket */
+		if (vrrp->sockets->fd_in != -1) {
+			thread_cancel_read(master, vrrp->sockets->fd_in);
+			close(vrrp->sockets->fd_in);
+			vrrp->sockets->fd_in = -1;
+		}
+		if (vrrp->sockets->fd_out != -1) {
+			close(vrrp->sockets->fd_out);
+			vrrp->sockets->fd_out = -1;
+		}
+
+		if (IF_ISUP(ifp))
+			down_instance(vrrp);
+	}
+
+	interface_down(ifp);
+
+	ifp->ifindex = 0;
+	ifp->ifi_flags = 0;
+#ifdef _HAVE_VRRP_VMAC_
+	if (!ifp->is_ours)
+		ifp->base_ifp = ifp;
+#endif
+#ifdef _HAVE_VRF_
+	ifp->vrf_master_ifp = NULL;
+	ifp->vrf_master_ifindex = 0;
+#endif
+}
+
+static void
+setup_interface(vrrp_t *vrrp)
+{
+	interface_t *ifp;
+	vrrp_t *vrrp_l;
+
+#ifdef _HAVE_VRRP_VMAC_
+	/* If the vrrp instance uses a vmac, and that vmac i/f doesn't
+	 * exist, then create it */
+	if (!vrrp->ifp->ifindex) {
+		if (__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags) &&
+		    !netlink_link_add_vmac(vrrp))
+			return;
+#ifdef _HAVE_VRRP_IPVLAN_
+		else if (__test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags) &&
+		    !netlink_link_add_ipvlan(vrrp))
+			return;
+#endif
+	}
+
+	if (__test_bit(VRRP_VMAC_XMITBASE_BIT, &vrrp->vmac_flags))
+		ifp = vrrp->ifp->base_ifp;
+	else
+#endif
+		ifp = vrrp->ifp;
+
+	/* Find the sockpool entry. If none, then we open the socket */
+	if (vrrp->sockets->fd_in == -1) {
+		/* If the MTU has changed we may need to recalculate the socket receive buffer size */
+		if (global_data->vrrp_rx_bufs_policy & RX_BUFS_POLICY_MTU) {
+			vrrp->sockets->rx_buf_size = 0;
+			rb_for_each_entry(vrrp_l, &vrrp->sockets->rb_vrid, rb_vrid) {
+				if (vrrp_l->kernel_rx_buf_size)
+					vrrp->sockets->rx_buf_size += vrrp_l->kernel_rx_buf_size;
+				else
+					vrrp->sockets->rx_buf_size += global_data->vrrp_rx_bufs_multiples * vrrp_l->ifp->mtu;
+			}
+		}
+
+		vrrp->sockets->fd_in = open_vrrp_read_socket(vrrp->sockets->family, vrrp->sockets->proto,
+							ifp, vrrp->sockets->unicast, vrrp->sockets->rx_buf_size);
+		if (vrrp->sockets->fd_in == -1)
+			vrrp->sockets->fd_out = -1;
+		else
+			vrrp->sockets->fd_out = open_vrrp_send_socket(vrrp->sockets->family, vrrp->sockets->proto,
+							ifp, vrrp->sockets->unicast);
+
+		vrrp->sockets->ifp = vrrp->ifp;
+
+		if (vrrp_initialised) {
+			vrrp->state = vrrp->num_script_if_fault ? VRRP_STATE_FAULT : VRRP_STATE_BACK;
+			vrrp_init_instance_sands(vrrp);
+			vrrp_thread_add_read(vrrp);
+		}
+	}
+
+	return;
+}
+
+#ifdef _HAVE_VRRP_VMAC_
+int
+recreate_vmac_thread(thread_ref_t thread)
+{
+	vrrp_t *vrrp;
+	tracking_vrrp_t *tvp;
+	element e;
+	interface_t *ifp = THREAD_ARG(thread);
+
+	if (LIST_ISEMPTY(ifp->tracking_vrrp))
+		return 0;
+
+	LIST_FOREACH(ifp->tracking_vrrp, tvp, e) {
+		vrrp = tvp->vrrp;
+
+		/* If this isn't the vrrp's interface, skip */
+		if (vrrp->ifp != ifp)
+			continue;
+
+		if (!__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags)
+#ifdef _HAVE_VRRP_IPVLAN_
+		    && !__test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags)
+#endif
+		    						      )
+			continue;
+
+		/* Don't attempt to create the VMAC if the configured
+		 * interface doesn't exist */
+		if (!VRRP_CONFIGURED_IFP(vrrp)->ifindex)
+			continue;
+
+		netlink_error_ignore = ENODEV;
+		setup_interface(vrrp);
+		netlink_error_ignore = 0;
+
+		break;
+	}
+
+	return 0;
+}
+#endif
+
+void update_mtu(interface_t *ifp)
+{
+	sock_t *sock;
+	element e;
+	bool updated_vrrp_buffer = false;
+	vrrp_t *vrrp;
+
+	LIST_FOREACH(vrrp_data->vrrp_socket_pool, sock, e) {
+		if (sock->ifp != ifp ||
+		    sock->fd_in == -1)
+			continue;
+
+		if (!updated_vrrp_buffer) {
+			alloc_vrrp_buffer(ifp->mtu);
+			updated_vrrp_buffer = true;
+		}
+
+		/* If the MTU has changed we may need to recalculate the socket receive buffer size */
+		if (global_data->vrrp_rx_bufs_policy & RX_BUFS_POLICY_MTU) {
+			sock->rx_buf_size = 0;
+			rb_for_each_entry(vrrp, &sock->rb_vrid, rb_vrid) {
+				if (vrrp->kernel_rx_buf_size)
+					sock->rx_buf_size += vrrp->kernel_rx_buf_size;
+				else
+					sock->rx_buf_size += global_data->vrrp_rx_bufs_multiples * ifp->mtu;
+			}
+
+			if (setsockopt(sock->fd_in, SOL_SOCKET, SO_RCVBUF, &sock->rx_buf_size, sizeof(sock->rx_buf_size)))
+				log_message(LOG_INFO, "vrrp update receive socket buffer size error %d", errno);
+		}
+	}
+}
+
+void
+update_added_interface(interface_t *ifp)
+{
+	vrrp_t *vrrp;
+	tracking_vrrp_t *tvp;
+	element e;
+#ifdef _HAVE_VRRP_VMAC_
+	vrrp_t *vrrp1;
+	tracking_vrrp_t *tvp1;
+	element e1;
+#endif
+
+	if (LIST_ISEMPTY(ifp->tracking_vrrp))
+		return;
+
+	LIST_FOREACH(ifp->tracking_vrrp, tvp, e) {
+		vrrp = tvp->vrrp;
+
+#ifdef _HAVE_VRRP_VMAC_
+		/* If this interface is a macvlan that we haven't created,
+		 * and the interface type can be changed or we haven't checked
+		 * this interface before, make sure that there is not VRID
+		 * conflict. */
+		if (!ifp->is_ours &&
+		    (global_data->allow_if_changes || !ifp->seen_interface)) {
+			LIST_FOREACH(ifp->base_ifp->tracking_vrrp, tvp1, e1) {
+				vrrp1 = tvp1->vrrp;
+				if (vrrp == vrrp1)
+					continue;
+
+				if (!VRRP_CONFIGURED_IFP(vrrp1)->ifindex)
+					continue;
+
+				if (IF_BASE_IFP(VRRP_CONFIGURED_IFP(vrrp)) == IF_BASE_IFP(VRRP_CONFIGURED_IFP(vrrp1)) &&
+				    vrrp->family == vrrp1->family &&
+				    vrrp->vrid == vrrp1->vrid) {
+					vrrp->num_script_if_fault++;
+					vrrp->duplicate_vrid_fault = true;
+					log_message(LOG_INFO, "VRID conflict between %s and %s IPv%d vrid %d",
+							vrrp->iname, vrrp1->iname, vrrp->family == AF_INET ? 4 : 6, vrrp->vrid);
+					break;
+				}
+			}
+		}
+
+		if (vrrp->vmac_flags) {
+			if (tvp->type & TRACK_VRRP) {
+				add_vrrp_to_interface(vrrp, ifp->base_ifp, tvp->weight, tvp->weight_multiplier == -1, false, TRACK_VRRP_DYNAMIC);
+				if (!IF_ISUP(vrrp->configured_ifp->base_ifp) && !vrrp->dont_track_primary) {
+					log_message(LOG_INFO, "(%s) interface %s is down",
+							vrrp->iname, vrrp->configured_ifp->base_ifp->ifname);
+					vrrp->num_script_if_fault++;
+				}
+			}
+
+			/* We might be the configured interface for a vrrp instance that itself uses
+			 * a macvlan. If so, we can create the macvlans */
+			if ( vrrp->configured_ifp == ifp &&
+			    !vrrp->ifp->ifindex)
+				thread_add_event(master, recreate_vmac_thread, vrrp->ifp, 0);
+		}
+#endif
+
+		/* If this is just a tracking interface, we don't need to do anything */
+		if (vrrp->ifp != ifp && IF_BASE_IFP(vrrp->ifp) != ifp)
+			continue;
+
+		/* Reopen any socket on this interface if necessary */
+		if (
+#ifdef _HAVE_VRRP_VMAC_
+		    !vrrp->vmac_flags &&
+#endif
+		    vrrp->sockets->fd_in == -1)
+			setup_interface(vrrp);
+	}
+
+#ifdef _HAVE_VRRP_VMAC_
+	ifp->seen_interface = true;
+#endif
+}
+
+#ifdef THREAD_DUMP
+void
+register_vrrp_if_addresses(void)
+{
+#ifdef _WITH_LINKBEAT_
+	register_thread_address("if_linkbeat_refresh_thread", if_linkbeat_refresh_thread);
+#endif
+#ifdef _HAVE_VRRP_VMAC_
+	register_thread_address("recreate_vmac_thread", recreate_vmac_thread);
+#endif
+}
+#endif
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_if_config.c b/tools/keepalived/keepalived/vrrp/vrrp_if_config.c
new file mode 100644
index 000000000..5b610548f
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_if_config.c
@@ -0,0 +1,562 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        vrrp_if_config interface
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+/* The following parameters need to be set on the vmac interface and its parent:
+ *
+ *   vmac interface:
+ *     accept_local=1	// We need to be able to hear another instance multicasting it's presence
+ *     arp_ignore=1	// We mustn't reply to ARP requests on this interface for IP address on parent interface
+ *			// and we mustn't only reply to addresses on the same subnet.
+ *     rp_filter=0	// Allows us to receive on VMAC interface when it has no IP address.
+ *
+ *   parent interface:
+ *     arp_ignore=1	// We mustn't reply to ARP requests on this interface for vrrp IP address
+ *     arp_filter=1	// We mustn't reply to ARP requests for our own IP address
+ */
+
+#include "config.h"
+
+#include <fcntl.h>
+
+#include "vrrp_if_config.h"
+#include "keepalived_netlink.h"
+#include "memory.h"
+
+#ifdef _HAVE_IPV4_DEVCONF_
+
+//#include <linux/ip.h>
+#include <stdint.h>
+
+#include "vrrp_if.h"
+#endif
+
+#include <limits.h>
+#include <unistd.h>
+
+#include "logger.h"
+
+#ifdef _HAVE_VRRP_VMAC_
+static unsigned all_rp_filter = UINT_MAX;
+static unsigned default_rp_filter = UINT_MAX;
+#endif
+
+#ifdef _HAVE_IPV4_DEVCONF_
+
+typedef struct sysctl_opts {
+	uint32_t	param;
+	uint32_t	value;
+} sysctl_opts_t;
+
+#ifdef _HAVE_VRRP_VMAC_
+static sysctl_opts_t parent_sysctl[] = {
+	{ IPV4_DEVCONF_ARP_IGNORE, 1 },
+	{ IPV4_DEVCONF_ARPFILTER, 1 },
+	{ 0, 0 }
+};
+
+static sysctl_opts_t vmac_sysctl[] = {
+	{ IPV4_DEVCONF_ARP_IGNORE, 1 },
+	{ IPV4_DEVCONF_ACCEPT_LOCAL, 1 },
+	{ IPV4_DEVCONF_RP_FILTER, 0 },
+	{ IPV4_DEVCONF_PROMOTE_SECONDARIES, 1 },
+	{ 0, 0}
+};
+
+#endif
+#endif
+
+/* Sysctl get and set functions */
+static void
+make_sysctl_filename(char *dest, const char* prefix, const char* iface, const char* parameter)
+{
+	strcpy(dest, "/proc/sys/");
+	strcat(dest, prefix);
+	strcat(dest, "/");
+	strcat(dest, iface);
+	strcat(dest, "/");
+	strcat(dest, parameter);
+}
+
+#if !defined _HAVE_IPV4_DEVCONF_ || defined _HAVE_VRRP_VMAC_
+static int
+set_sysctl(const char* prefix, const char* iface, const char* parameter, unsigned value)
+{
+	char* filename;
+	char buf[1];
+	int fd;
+	ssize_t len;
+
+	/* Make the filename */
+	filename = MALLOC(PATH_MAX);
+	make_sysctl_filename(filename, prefix, iface, parameter);
+
+	fd = open(filename, O_WRONLY);
+	FREE(filename);
+	if (fd < 0)
+		return -1;
+
+	/* We only write integers 0-9 */
+	buf[0] = (char)('0' + value);
+	len = write(fd, &buf, 1);
+	close(fd);
+
+	if (len != 1)
+		return -1;
+
+	/* Success */
+	return 0;
+}
+#endif
+
+static unsigned
+get_sysctl(const char* prefix, const char* iface, const char* parameter)
+{
+	char *filename;
+	char buf[1];
+	int fd;
+	ssize_t len;
+
+	/* Make the filename */
+	filename = MALLOC(PATH_MAX);
+	make_sysctl_filename(filename, prefix, iface, parameter);
+
+	fd = open(filename, O_RDONLY);
+	FREE(filename);
+	if (fd < 0)
+		return UINT_MAX;
+
+	len = read(fd, &buf, 1);
+	close(fd);
+
+	/* We only read integers 0-9 */
+	if (len <= 0 || buf[0] < '0' || buf[0] > '9')
+		return UINT_MAX;
+
+	/* Return the value of the string read */
+	return (unsigned)buf[0] - '0';
+}
+
+#ifdef _HAVE_IPV4_DEVCONF_
+static struct nlattr *
+nest_start(struct nlmsghdr *nlh, unsigned short type)
+{
+	struct nlattr *nest = NLMSG_TAIL(nlh);
+
+	nest->nla_type = type;
+	nlh->nlmsg_len += sizeof(struct nlattr);
+
+	return nest;
+}
+
+static size_t
+nest_end(struct nlattr *nla, struct nlattr *nest)
+{
+	nest->nla_len = (unsigned short)((char *)nla - (char *)nest);
+
+	return nest->nla_len;
+}
+
+static inline int
+netlink_set_interface_flags(int ifindex, const sysctl_opts_t *sys_opts)
+{
+	int status = 0;
+	struct {
+		struct nlmsghdr n;
+		struct ifinfomsg ifi;
+		char buf[64];
+	} req;
+	struct nlattr *start;
+	struct nlattr *inet_start;
+	struct nlattr *conf_start;
+	const sysctl_opts_t *so;
+
+	memset(&req, 0, sizeof (req));
+
+	req.n.nlmsg_len = NLMSG_LENGTH(sizeof (struct ifinfomsg));
+	req.n.nlmsg_flags = NLM_F_REQUEST;
+	req.n.nlmsg_type = RTM_NEWLINK;
+	req.ifi.ifi_family = AF_UNSPEC;
+	req.ifi.ifi_index = ifindex;
+
+	start = nest_start(&req.n, IFLA_AF_SPEC);
+	inet_start = nest_start(&req.n, AF_INET);
+	conf_start = nest_start(&req.n, IFLA_INET_CONF);
+
+	for (so = sys_opts; so->param; so++)
+		addattr32(&req.n, sizeof req, so->param, so->value);
+
+	nest_end(NLMSG_TAIL(&req.n), conf_start);
+	nest_end(NLMSG_TAIL(&req.n), inet_start);
+	nest_end(NLMSG_TAIL(&req.n), start);
+
+	if (netlink_talk(&nl_cmd, &req.n) < 0)
+		status = 1;
+
+	return status;
+}
+
+#ifdef _HAVE_VRRP_VMAC_
+static inline int
+netlink_set_interface_parameters(const interface_t *ifp, interface_t *base_ifp)
+{
+	if (netlink_set_interface_flags(ifp->ifindex, vmac_sysctl))
+		return -1;
+
+	/* If the underlying interface is a MACVLAN that has been moved into
+	 * a separate network namespace from the parent, we can't access the
+	 * parent. */
+	if (IS_VLAN(ifp) && ifp == base_ifp)
+		return 0;
+
+	/* Set arp_ignore and arp_filter on base interface if needed */
+	if (base_ifp->reset_arp_config)
+		base_ifp->reset_arp_config++;
+	else {
+		if (base_ifp->arp_ignore != 1 ||
+		    base_ifp->arp_filter != 1) {
+			/* We can't use libnl3 since if the base interface type is a bridge, libnl3 sets ifi_family
+			 * to AF_BRIDGE, whereas it should be set to AF_UNSPEC. The kernel function that handles
+			 * RTM_SETLINK messages for AF_BRIDGE doesn't know how to process the IFLA_AF_SPEC attribute. */
+			if (netlink_set_interface_flags(base_ifp->ifindex, parent_sysctl)) {
+				log_message(LOG_INFO, "Set base flags on %s failed for VMAC %s", base_ifp->ifname, ifp->ifname);
+				return -1;
+			}
+			base_ifp->reset_arp_config = 1;
+		}
+	}
+
+	return 0;
+}
+
+static inline int
+netlink_reset_interface_parameters(const interface_t* ifp)
+{
+	int res;
+	sysctl_opts_t reset_parent_sysctl[3];
+
+	/* If the interface doesn't exist, there is nothing we can change */
+	if (!ifp->ifindex)
+		return 0;
+
+	/* See netlink3_set_interface_parameters for why libnl3 can't be used */
+	reset_parent_sysctl[0].param = IPV4_DEVCONF_ARP_IGNORE;
+	reset_parent_sysctl[0].value = ifp->arp_ignore;
+	reset_parent_sysctl[1].param = IPV4_DEVCONF_ARPFILTER;
+	reset_parent_sysctl[1].value = ifp->arp_filter;
+	reset_parent_sysctl[2].param = 0;
+
+	if ((res = netlink_set_interface_flags(ifp->ifindex, reset_parent_sysctl)))
+		log_message(LOG_INFO, "reset interface flags on %s failed", ifp->ifname);
+
+	return res;
+}
+
+static inline void
+set_interface_parameters_devconf(const interface_t *ifp, interface_t *base_ifp)
+{
+	if (netlink_set_interface_parameters(ifp, base_ifp))
+		log_message(LOG_INFO, "Unable to set parameters for %s", ifp->ifname);
+}
+
+static inline void
+reset_interface_parameters_devconf(interface_t *base_ifp)
+{
+	if (base_ifp->reset_arp_config && --base_ifp->reset_arp_config == 0) {
+		if (netlink_reset_interface_parameters(base_ifp))
+			log_message(LOG_INFO, "Unable to reset parameters for %s", base_ifp->ifname);
+	}
+}
+#endif
+
+static inline void
+set_promote_secondaries_devconf(interface_t *ifp)
+{
+	sysctl_opts_t promote_secondaries_sysctl[] = { { IPV4_DEVCONF_PROMOTE_SECONDARIES, 1 }, { 0, 0} };
+
+	if (ifp->promote_secondaries)
+		return;
+
+	netlink_set_interface_flags(ifp->ifindex, promote_secondaries_sysctl);
+}
+
+static inline void
+reset_promote_secondaries_devconf(interface_t *ifp)
+{
+	sysctl_opts_t promote_secondaries_sysctl[] = { { IPV4_DEVCONF_PROMOTE_SECONDARIES, 0 }, { 0, 0} };
+
+	netlink_set_interface_flags(ifp->ifindex, promote_secondaries_sysctl);
+}
+
+#else
+
+#ifdef _HAVE_VRRP_VMAC_
+static inline void
+set_interface_parameters_sysctl(const interface_t *ifp, interface_t *base_ifp)
+{
+	unsigned val;
+
+	set_sysctl("net/ipv4/conf", ifp->ifname, "arp_ignore", 1);
+	set_sysctl("net/ipv4/conf", ifp->ifname, "accept_local", 1);
+	set_sysctl("net/ipv4/conf", ifp->ifname, "rp_filter", 0);
+
+	set_sysctl("net/ipv4/conf", ifp->ifname, "promote_secondaries", 1);
+
+	/* If the underlying interface is a MACVLAN that has been moved into
+	 * a separate network namespace from the parent, we can't access the
+	 * parent. */
+	if (IS_VLAN(ifp) && ifp == base_ifp)
+		return;
+
+	if (base_ifp->reset_arp_config)
+		base_ifp->reset_arp_config++;
+	else {
+		if ((val = get_sysctl("net/ipv4/conf", base_ifp->ifname, "arp_ignore")) != UINT_MAX &&
+		    (base_ifp->arp_ignore = (uint32_t)val) != 1)
+			set_sysctl("net/ipv4/conf", base_ifp->ifname, "arp_ignore", 1);
+
+		if ((val = get_sysctl("net/ipv4/conf", base_ifp->ifname, "arp_filter")) != UINT_MAX &&
+		    (base_ifp->arp_filter = (uint32_t)val) != 1)
+			set_sysctl("net/ipv4/conf", base_ifp->ifname, "arp_filter", 1);
+
+		base_ifp->reset_arp_config = 1;
+	}
+}
+
+static inline void
+reset_interface_parameters_sysctl(interface_t *base_ifp)
+{
+	if (base_ifp->reset_arp_config && --base_ifp->reset_arp_config == 0) {
+		set_sysctl("net/ipv4/conf", base_ifp->ifname, "arp_ignore", (int)base_ifp->arp_ignore);
+		set_sysctl("net/ipv4/conf", base_ifp->ifname, "arp_filter", (int)base_ifp->arp_filter);
+	}
+}
+#endif
+
+static inline void
+set_promote_secondaries_sysctl(interface_t *ifp)
+{
+	if (get_sysctl("net/ipv4/conf", ifp->ifname, "promote_secondaries") == 1) {
+		ifp->promote_secondaries = true;
+		return;
+	}
+	set_sysctl("net/ipv4/conf", ifp->ifname, "promote_secondaries", 1);
+}
+
+static inline void
+reset_promote_secondaries_sysctl(interface_t *ifp)
+{
+	set_sysctl("net/ipv4/conf", ifp->ifname, "promote_secondaries", 0);
+}
+#endif
+
+void
+set_promote_secondaries(interface_t *ifp)
+{
+	if (ifp->promote_secondaries)
+		return;
+
+	if (ifp->reset_promote_secondaries++)
+		return;
+
+#ifdef _HAVE_IPV4_DEVCONF_
+	set_promote_secondaries_devconf(ifp);
+#else
+	set_promote_secondaries_sysctl(ifp);
+#endif
+}
+
+void
+reset_promote_secondaries(interface_t *ifp)
+{
+	if (!ifp->reset_promote_secondaries ||
+	    --ifp->reset_promote_secondaries)
+		return;
+
+#ifdef _HAVE_IPV4_DEVCONF_
+	reset_promote_secondaries_devconf(ifp);
+#else
+	reset_promote_secondaries_sysctl(ifp);
+#endif
+}
+
+#ifdef _HAVE_VRRP_VMAC_
+/* IPv4 VMAC interfaces require rp_filter to be 0; this in turn requires
+ * net.ipv4.conf.all.rp_filter to be 0, but if it is non-zero, then all
+ * interfaces will be operating with a non-zero value of rp_filter.
+ * In this function, if all.rp_filter > 0 and default.rp_filter < all.rp_filter,
+ * we first set default.rp_filter to the current value of all.rp_filter,
+ * so that any new interfaces are created with the current value of all.rp_filter.
+ * We then iterate through all interfaces, and if {interface}.rp_filter < all.rp_filter
+ * we set {interface}.rp_filter = all.rp_filter.
+ * Finally we set all.rp_filter = 0.
+ *
+ * This should not alter the operation of any interface, or any interface
+ * subsequently created, but it does allow us to set rp_filter = 0
+ * on vmac interfaces.
+ */
+static void
+clear_rp_filter(void)
+{
+	list ifs;
+	element e;
+	interface_t *ifp;
+	unsigned rp_filter;
+#ifdef _HAVE_IPV4_DEVCONF_
+	sysctl_opts_t rpfilter_sysctl[] = { { IPV4_DEVCONF_RP_FILTER, 1 }, { 0, 0} };
+#endif
+
+	rp_filter = get_sysctl("net/ipv4/conf", "all", "rp_filter");
+	if (rp_filter == UINT_MAX) {
+		log_message(LOG_INFO, "Unable to read sysctl net.ipv4.conf.all.rp_filter");
+		return;
+	}
+
+	if (rp_filter == 0)
+		return;
+
+	/* Save current value of all/rp_filter */
+	all_rp_filter = rp_filter;
+
+	/* We want to ensure that default/rp_filter is at least the value of all/rp_filter */
+	rp_filter = get_sysctl("net/ipv4/conf", "default", "rp_filter");
+	if (rp_filter < all_rp_filter) {
+		log_message(LOG_INFO, "NOTICE: setting sysctl net.ipv4.conf.default.rp_filter from %u to %u", rp_filter, all_rp_filter);
+		set_sysctl("net/ipv4/conf", "default", "rp_filter", all_rp_filter);
+		default_rp_filter = rp_filter;
+	}
+
+	/* Now ensure rp_filter for all interfaces is at least all/rp_filter. */
+#ifdef _HAVE_IPV4_DEVCONF_
+	rpfilter_sysctl[0].value = all_rp_filter;
+#endif
+	kernel_netlink_poll();		/* Update our view of interfaces first */
+	ifs = get_if_list();
+	LIST_FOREACH(ifs, ifp, e) {
+		if (!ifp->ifindex)
+			continue;
+#ifndef _HAVE_IPV4_DEVCONF_
+		if ((ifp->rp_filter = get_sysctl("net/ipv4/conf", ifp->ifname, "rp_filter")) == UINT_MAX)
+			log_message(LOG_INFO, "Unable to read rp_filter for %s", ifp->ifname);
+		else
+#endif
+		if (ifp->rp_filter < all_rp_filter) {
+#ifdef _HAVE_IPV4_DEVCONF_
+			netlink_set_interface_flags(ifp->ifindex, rpfilter_sysctl);
+#else
+			set_sysctl("net/ipv4/conf", ifp->ifname, "rp_filter", all_rp_filter);
+#endif
+		}
+		else {
+			/* Indicate we are not setting it */
+			ifp->rp_filter = UINT_MAX;
+		}
+	}
+
+	/* We have now made sure that all the interfaces have rp_filter >= all_rp_filter */
+	log_message(LOG_INFO, "NOTICE: setting sysctl net.ipv4.conf.all.rp_filter from %u to 0", all_rp_filter);
+	set_sysctl("net/ipv4/conf", "all", "rp_filter", 0);
+}
+
+void
+restore_rp_filter(void)
+{
+	list ifs;
+	element e;
+	interface_t *ifp;
+	unsigned rp_filter;
+#ifdef _HAVE_IPV4_DEVCONF_
+	sysctl_opts_t rpfilter_sysctl[] = { { IPV4_DEVCONF_RP_FILTER, 1 }, { 0, 0} };
+#endif
+
+	/* Restore the original settings of rp_filter, but only if they
+	 * are the same as what we set them to */
+	if (all_rp_filter == UINT_MAX)
+		return;
+
+	rp_filter = get_sysctl("net/ipv4/conf", "all", "rp_filter");
+	if (rp_filter == 0) {
+		log_message(LOG_INFO, "NOTICE: resetting sysctl net.ipv4.conf.all.rp_filter to %u", all_rp_filter);
+		set_sysctl("net/ipv4/conf", "all", "rp_filter", all_rp_filter);
+	}
+
+	if (default_rp_filter != UINT_MAX) {
+		rp_filter = get_sysctl("net/ipv4/conf", "default", "rp_filter");
+		if (rp_filter == all_rp_filter) {
+			log_message(LOG_INFO, "NOTICE: resetting sysctl net.ipv4.conf.default.rp_filter to %u", default_rp_filter);
+			set_sysctl("net/ipv4/conf", "default", "rp_filter", default_rp_filter);
+		}
+		default_rp_filter = UINT_MAX;
+	}
+
+	ifs = get_if_list();
+	LIST_FOREACH(ifs, ifp, e) {
+		if (ifp->rp_filter != UINT_MAX) {
+			rp_filter = get_sysctl("net/ipv4/conf", ifp->ifname, "rp_filter");
+			if (rp_filter == all_rp_filter) {
+#ifdef _HAVE_IPV4_DEVCONF_
+				rpfilter_sysctl[0].value = ifp->rp_filter;
+				netlink_set_interface_flags(ifp->ifindex, rpfilter_sysctl);
+#else
+				set_sysctl("net/ipv4/conf", ifp->ifname, "rp_filter", ifp->rp_filter);
+#endif
+			}
+		}
+	}
+
+	all_rp_filter = UINT_MAX;
+}
+
+void
+set_interface_parameters(const interface_t *ifp, interface_t *base_ifp)
+{
+	if (all_rp_filter == UINT_MAX)
+		clear_rp_filter();
+
+#ifdef _HAVE_IPV4_DEVCONF_
+	set_interface_parameters_devconf(ifp, base_ifp);
+#else
+	set_interface_parameters_sysctl(ifp, base_ifp);
+#endif
+}
+
+void reset_interface_parameters(interface_t *base_ifp)
+{
+#ifdef _HAVE_IPV4_DEVCONF_
+	reset_interface_parameters_devconf(base_ifp);
+#else
+	reset_interface_parameters_sysctl(base_ifp);
+#endif
+}
+
+void link_set_ipv6(const interface_t* ifp, bool enable)
+{
+	/* There is no direct way to set IPv6 options */
+	set_sysctl("net/ipv6/conf", ifp->ifname, "disable_ipv6", enable ? 0 : 1);
+}
+#endif
+
+void
+set_ipv6_forwarding(interface_t* ifp)
+{
+	ifp->gna_router = !!get_sysctl("net/ipv6/conf", ifp->ifname, "forwarding");
+	ifp->last_gna_router_check = time_now;
+}
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_index.c b/tools/keepalived/keepalived/vrrp/vrrp_index.c
deleted file mode 100644
index f9fe30ad3..000000000
--- a/tools/keepalived/keepalived/vrrp/vrrp_index.c
+++ /dev/null
@@ -1,127 +0,0 @@
-/*
- * Soft:        Keepalived is a failover program for the LVS project
- *              <www.linuxvirtualserver.org>. It monitor & manipulate
- *              a loadbalanced server pool using multi-layer checks.
- *
- * Part:        VRRP instance index table.
- *
- * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *
- *              This program is distributed in the hope that it will be useful,
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
- *              See the GNU General Public License for more details.
- *
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
- *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
- */
-
-/* local include */
-#include "vrrp_index.h"
-#include "vrrp_data.h"
-#include "vrrp.h"
-#include "memory.h"
-#include "list.h"
-
-/* VRID hash table */
-void
-alloc_vrrp_bucket(vrrp_t *vrrp)
-{
-	list_add(&vrrp_data->vrrp_index[vrrp->vrid], vrrp);
-}
-
-vrrp_t *
-vrrp_index_lookup(const int vrid, const int fd)
-{
-	vrrp_t *vrrp;
-	element e;
-	list l = &vrrp_data->vrrp_index[vrid];
-
-	/* return if list is empty */
-	if (LIST_ISEMPTY(l))
-		return NULL;
-
-	/*
-	 * If list size's is 1 then no collisions. So
-	 * Test and return the singleton.
-	 */
-	if (LIST_SIZE(l) == 1) {
-		vrrp = ELEMENT_DATA(LIST_HEAD(l));
-		return (vrrp->fd_in == fd) ? vrrp : NULL;
-	}
-
-	/*
-	 * List collision on the vrid bucket. The same
-	 * vrid is used on a different interface. We perform
-	 * a fd lookup as collisions solver.
-	 */ 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vrrp =  ELEMENT_DATA(e);
-		if (vrrp->fd_in == fd)
-			return vrrp;
-	}
-
-	/* No match */
-	return NULL;
-}
-
-/* FD hash table */
-void
-alloc_vrrp_fd_bucket(vrrp_t *vrrp)
-{
-	/* We use a mod key plus 1 */
-	list_add(&vrrp_data->vrrp_index_fd[vrrp->fd_in%1024 + 1], vrrp);
-}
-
-void
-remove_vrrp_fd_bucket(vrrp_t *vrrp)
-{
-	list l = &vrrp_data->vrrp_index_fd[vrrp->fd_in%1024 + 1];
-	list_del(l, vrrp);
-}
-
-void set_vrrp_fd_bucket(int old_fd, vrrp_t *vrrp)
-{
-	vrrp_t *vrrp_ptr;
-	element e;
-	element next;
-	list l = &vrrp_data->vrrp_index_fd[old_fd%1024 + 1];
-
-	/* Release old stalled entries */
-	for (e = LIST_HEAD(l); e; e = next) {
-		next = e->next;
-		vrrp_ptr =  ELEMENT_DATA(e);
-		if (vrrp_ptr->fd_in == old_fd) {
-			if (e->prev)
-				e->prev->next = e->next;
-			else
-				 l->head = e->next;
-
-			if (e->next)
-				e->next->prev = e->prev;
-			else
-				l->tail = e->prev;
-			l->count--;
-			FREE(e);
-		}
-	}
-	if (LIST_ISEMPTY(l))
-		l->head = l->tail = NULL;
-
-	/* Hash refreshed entries */
-	l = vrrp_data->vrrp;
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vrrp_ptr = ELEMENT_DATA(e);
-
-		if (vrrp_ptr->fd_in == old_fd) {
-			/* Update new hash */
-			vrrp_ptr->fd_in = vrrp->fd_in;
-			vrrp_ptr->fd_out = vrrp->fd_out;
-			alloc_vrrp_fd_bucket(vrrp_ptr);
-		}
-	}
-}
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_ip_rule_route_parser.c b/tools/keepalived/keepalived/vrrp/vrrp_ip_rule_route_parser.c
new file mode 100644
index 000000000..161d061e2
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_ip_rule_route_parser.c
@@ -0,0 +1,308 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        iprule and iproute parser
+ *
+ * Author:      Chris Riley, <kernelchris@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015 Chris Riley, <kernelchris@gmail.com>
+ * Copyright (C) 2016-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include <string.h>
+#include <errno.h>
+#include <limits.h>
+#include <stdlib.h>
+#include <math.h>
+#include <arpa/inet.h>
+#include <stdint.h>
+#include <ctype.h>
+
+#include "logger.h"
+#include "vrrp_ip_rule_route_parser.h"
+#include "rttables.h"
+#if HAVE_DECL_RTA_ENCAP
+#include "vrrp_iproute.h"
+#endif
+#include "parser.h"
+#include "memory.h"
+
+bool
+get_realms(uint32_t *realms, const char *str)
+{
+	uint32_t val, val1;
+	char *end;
+
+	if ((end = strchr(str,'/')))
+		str = STRNDUP(str,  end - str);
+
+	if (!find_rttables_realms(str, &val))
+		goto err;
+
+	if (end) {
+		if (!find_rttables_realms(end + 1, &val1))
+			goto err;
+
+		val <<= 16;
+		val |= val1;
+
+		FREE_CONST(str);
+	}
+
+	*realms = val;
+
+	return false;
+
+err:
+	if (end)
+		FREE_CONST(str);
+	return true;
+}
+
+
+bool
+get_u8(uint8_t *val, const char *str, uint8_t max, const char* errmsg)
+{
+	unsigned t_val;
+
+	if (read_unsigned(str, &t_val, 0, max, false)) {
+		*val = (uint8_t)t_val;
+		return false;
+	}
+
+	report_config_error(CONFIG_GENERAL_ERROR, errmsg, str);
+	return true;
+}
+
+bool
+get_u16(uint16_t *val, const char *str, uint16_t max, const char* errmsg)
+{
+	unsigned t_val;
+
+	if (read_unsigned(str, &t_val, 0, max, false)) {
+		*val = (uint16_t)t_val;
+		return false;
+	}
+
+	report_config_error(CONFIG_GENERAL_ERROR, errmsg, str);
+	return true;
+}
+
+bool
+get_u32(uint32_t *val, const char *str, uint32_t max, const char* errmsg)
+{
+	unsigned t_val;
+
+	if (read_unsigned(str, &t_val, 0, max, false)) {
+		*val = (uint32_t)t_val;
+		return false;
+	}
+
+	report_config_error(CONFIG_GENERAL_ERROR, errmsg, str);
+	return true;
+}
+
+bool
+get_u64(uint64_t *val, const char *str, uint64_t max, const char* errmsg)
+{
+	uint64_t t_val;
+
+	if (read_unsigned64(str, &t_val, 0, max, false)) {
+		*val = (uint64_t)t_val;
+		return false;
+	}
+
+	report_config_error(CONFIG_GENERAL_ERROR, errmsg, str);
+	return true;
+}
+
+bool
+get_time_rtt(uint32_t *val, const char *str, bool *raw)
+{
+	float t;
+	unsigned long res;
+	char *end;
+	size_t offset;
+	int ftype;
+
+	errno = 0;
+	if (strchr(str, '.') ||
+	    (strpbrk(str, "Ee") && !strpbrk(str, "xX"))) {
+		t = strtof(str, &end);
+
+		/* no digits or extra characters */
+		if (end == str)
+			return true;
+
+		ftype = fpclassify(t);
+		if (ftype != FP_ZERO && ftype != FP_SUBNORMAL) {
+			if (errno == ERANGE) /* overflow */
+				return true;
+			if (ftype != FP_NORMAL) /* NaN, infinity */
+				return true;
+		}
+		else
+			t = 0.0F;	/* in case FP_SUBNORMAL */
+
+		if (t <= 0.0F)
+			return true;
+
+		if (t >= UINT32_MAX)
+			return true;
+	} else {
+		/* Skip whitespace */
+		offset = strspn(str, WHITE_SPACE);
+
+		/* strtoul does "nasty" things with negative numbers */
+		if (str[offset] == '-')
+			return true;
+
+		res = strtoul(str, &end, 0);
+
+		/* no digits? */
+		if (end == str)
+			return true;
+
+		/* overflow */
+		if (res == ULONG_MAX && errno == ERANGE)
+			return true;
+
+		if (res > UINT32_MAX)
+			return true;
+
+		t = (float)res;
+	}
+
+	if (*end) {
+		*raw = false;
+		if (!strcasecmp(end, "s") ||
+		    !strcasecmp(end, "sec") ||
+		    !strcasecmp(end, "secs")) {
+			if (t * 1000U >= UINT32_MAX)
+				return false;
+			t *= 1000;
+		}
+		else if (strcasecmp(end, "ms") &&
+			 strcasecmp(end, "msec") &&
+			 strcasecmp(end, "msecs"))
+			return true;
+	}
+	else
+		*raw = true;
+
+	*val = (uint32_t)t;
+	if (*val < t)
+		(*val)++;
+
+	return false;
+}
+
+bool
+get_addr64(uint64_t *ap, const char *cp)
+{
+	int i;
+
+	union {
+		uint16_t v16[4];
+		uint64_t v64;
+	} val;
+
+	/* Skip leading whitespace */
+	cp += strspn(cp, WHITE_SPACE);
+
+	val.v64 = 0;
+	for (i = 0; i < 4; i++) {
+		unsigned long n;
+		char *endp;
+
+		if (!isxdigit(*cp))
+			return true;	/* Not a hex digit */
+
+		n = strtoul(cp, &endp, 16);
+		if (n > 0xffff)
+			return true;	/* bogus network value */
+
+		if (endp == cp) /* no digits */
+			return true;
+
+		val.v16[i] = htons(n);
+
+		if (*endp == '\0') {
+			if (i != 3)	/* address too short */
+				return true;
+			break;
+		}
+
+		if (i == 3 || *endp != ':')
+			return true;	/* extra characters */
+		cp = endp + 1;
+	}
+
+	*ap = val.v64;
+
+	return false;
+}
+
+#if HAVE_DECL_RTA_ENCAP && HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+bool
+parse_mpls_address(const char *str, encap_mpls_t *mpls)
+{
+	char *endp;
+	unsigned count;
+	unsigned long label;
+
+	mpls->num_labels = 0;
+
+	/* Skip leading whitespace */
+	str += strspn(str, WHITE_SPACE);
+
+	for (count = 0; count < MAX_MPLS_LABELS; count++) {
+		if (str[0] == '-')
+			return true;
+
+		if (strspn(str, WHITE_SPACE))	/* No embedded whitespace */
+			return true;
+
+		label = strtoul(str, &endp, 0);
+
+		if (endp == str) /* no digits */
+			return true;
+
+		/* Fail when the label value is out of range */
+		if (label > UINT32_MAX)
+			return true;
+		if (label & ~(MPLS_LS_LABEL_MASK >> MPLS_LS_LABEL_SHIFT))
+			return true;
+
+		mpls->addr[count].entry = htonl((uint32_t)label << MPLS_LS_LABEL_SHIFT);
+		if (*endp == '\0') {
+			mpls->addr[count].entry |= htonl(1 << MPLS_LS_S_SHIFT);
+			mpls->num_labels = count + 1;
+			return false;
+		}
+
+		/* Bad character in the address */
+		if (*endp != '/')
+			return true;
+
+		str = endp + 1;
+	}
+
+	/* The address was too long */
+	return true;
+}
+#endif
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_ipaddress.c b/tools/keepalived/keepalived/vrrp/vrrp_ipaddress.c
index 094c1e77b..bdece488d 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_ipaddress.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_ipaddress.c
@@ -17,82 +17,120 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <string.h>
+#include "config.h"
+
+/* Global include */
+#include <errno.h>
+#include <arpa/inet.h>
+#include <stdio.h>
+
 /* local include */
 #include "vrrp_ipaddress.h"
-#include "vrrp_netlink.h"
+#include "vrrp.h"
+#include "keepalived_netlink.h"
 #include "vrrp_data.h"
 #include "logger.h"
+#include "utils.h"
+#include "bitops.h"
+#include "global_data.h"
+#include "rttables.h"
 #include "memory.h"
+#if !defined _HAVE_LIBIPTC_ || defined _LIBIPTC_DYNAMIC_
 #include "utils.h"
+#endif
+#include "parser.h"
+#ifdef _WITH_FIREWALL_
+#include "vrrp_firewall.h"
+#endif
 
-/* Add/Delete IP address to a specific interface_t */
 
-static void dpvs_fill_addrconf(ip_address_t *ipaddress, char *dpdk_port, struct inet_addr_param *param)
+//#define INFINITY_LIFE_TIME      0xFFFFFFFF
+
+char *
+ipaddresstos(char *buf, const ip_address_t *ipaddress)
 {
-    param->af = ipaddress->ifa.ifa_family;
-    if (dpdk_port) {
-        strcpy(param->ifname, dpdk_port);
-    } else {
-        strcpy(param->ifname, IF_NAME(if_get_by_ifindex(ipaddress->ifa.ifa_index)));
-    }
-    if (param->af == AF_INET)
-        param->addr.in  = ipaddress->u.sin.sin_addr;
-    else
-        param->addr.in6 = ipaddress->u.sin6_addr;
-    param->plen = ipaddress->ifa.ifa_prefixlen;
-    param->flags &= ~IFA_F_SAPOOL;
+	static char addr_str[INET6_ADDRSTRLEN + 4];	/* allow for subnet */
+	char *end;
+
+	if (!buf)
+		buf = addr_str;
+
+	if (IP_IS6(ipaddress))
+		inet_ntop(AF_INET6, &ipaddress->u.sin6_addr, buf, INET6_ADDRSTRLEN);
+	else
+		inet_ntop(AF_INET, &ipaddress->u.sin.sin_addr, buf, INET_ADDRSTRLEN);
+	if ((ipaddress->ifa.ifa_family == AF_INET && ipaddress->ifa.ifa_prefixlen != 32 ) ||
+	    (ipaddress->ifa.ifa_family == AF_INET6 && ipaddress->ifa.ifa_prefixlen != 128 )) {
+		end = addr_str + strlen(addr_str);
+		snprintf(end, addr_str + sizeof(addr_str) - end, "/%u", ipaddress->ifa.ifa_prefixlen);
+	}
+
+	return buf;
 }
 
-static int
-netlink_ipaddress(ip_address_t *ipaddress, char *dpdk_port, int cmd)
+/* Add/Delete IP address to a specific interface_t */
+static void
+dpvs_fill_addrconf(ip_address_t *ipaddress, char *dpdk_port, struct inet_addr_param *param)
 {
-    struct inet_addr_param param;
-    int err;
-    memset(&param, 0, sizeof(param));
-    dpvs_fill_addrconf(ipaddress, dpdk_port, &param);
-    err = ipvs_set_ipaddr(&param, cmd);
-
-    if (err) {
-        char addr_str[64];
-        void *addr = (IP_IS6(ipaddress)) ? (void *) &ipaddress->u.sin6_addr :
-              (void *) &ipaddress->u.sin.sin_addr;
-        inet_ntop(IP_FAMILY(ipaddress), addr, addr_str, 41);
-        log_message(LOG_INFO, "ip address %s cmd %s failed\n", addr_str, \
-                            cmd == IPADDRESS_DEL ? "del" : "add");
-        return -1;
-    }
-    return 1;
+	param->af = ipaddress->ifa.ifa_family;
+	param->addr.in = ipaddress->u.sin.sin_addr;
+	strcpy(param->ifname, dpdk_port);
+	param->plen = ipaddress->ifa.ifa_prefixlen;
+	param->flags &= ~IFA_F_SAPOOL;
+}
+
+int
+netlink_ipaddress(ip_address_t* ipaddress, char *dpdk_port, int cmd)
+{
+	struct inet_addr_param param;
+
+	if (dpdk_port == NULL)
+		return 1;
+	
+	memset(&param, 0, sizeof(param));
+	dpvs_fill_addrconf(ipaddress, dpdk_port, &param);
+	ipvs_set_ipaddr(&param, cmd);
+	return 1;
 }
 
 /* Add/Delete a list of IP addresses */
-void
-netlink_iplist(list ip_list, int cmd, char *dpdk_port)
+bool
+netlink_iplist(list ip_list, int cmd, bool force, char* dpdk_port)
 {
-    ip_address_t *ipaddr;
-    element e;
-
-    /* No addresses in this list */
-    if (LIST_ISEMPTY(ip_list))
-         return;
-
-    /*
-     * If "--dont-release-vrrp" (debug & 8) is set then try to release
-     * addresses that may be there, even if we didn't set them.
-     */
-    for (e = LIST_HEAD(ip_list); e; ELEMENT_NEXT(e)) {
-         ipaddr = ELEMENT_DATA(e);
-         if ((cmd && !ipaddr->set) ||
-             (!cmd && (ipaddr->set || debug & 8))) {
-                 if (netlink_ipaddress(ipaddr, dpdk_port, cmd) > 0)
-                     ipaddr->set = (cmd) ? 1 : 0;
-                 else
-                     ipaddr->set = 0;
-         }
-    }
+	ip_address_t *ipaddr;
+	element e;
+	bool changed_entries = false;
+
+	/* No addresses in this list */
+	if (LIST_ISEMPTY(ip_list))
+		return false;
+
+	/*
+	 * If "--dont-release-vrrp" is set then try to release addresses
+	 * that may be there, even if we didn't set them.
+	 */
+	LIST_FOREACH (ip_list, ipaddr, e) {
+		if ((cmd == IPADDRESS_ADD && !ipaddr->set) ||
+		    (cmd == IPADDRESS_DEL &&
+		     (force || ipaddr->set || __test_bit(DONT_RELEASE_VRRP_BIT, &debug)))) {
+			/* If we are removing addresses left over from previous run
+			 * and they don't exist, don't report an error */
+			if (force)
+				netlink_error_ignore = ENODEV;
+
+			if (netlink_ipaddress(ipaddr, dpdk_port, cmd) > 0) {
+				ipaddr->set = (cmd == IPADDRESS_ADD);
+				changed_entries = true;
+			}
+			else
+				ipaddr->set = false;
+		}
+	}
+
+	return changed_entries;
 }
 
 /* IP address dump/allocation */
@@ -104,237 +142,500 @@ free_ipaddress(void *if_data)
 	FREE_PTR(ipaddr->label);
 	FREE(ipaddr);
 }
-char *
-ipaddresstos(ip_address_t *ipaddress)
-{
-	char *addr_str = (char *) MALLOC(INET6_ADDRSTRLEN);
-
-    if (!ipaddress)
-        return addr_str;
-
-	if (IP_IS6(ipaddress)) {
-		inet_ntop(AF_INET6, &ipaddress->u.sin6_addr, addr_str, INET6_ADDRSTRLEN);
-	} else {
-		inet_ntop(AF_INET, &ipaddress->u.sin.sin_addr, addr_str, INET_ADDRSTRLEN);
-	}
 
-	return addr_str;
-}
 void
-dump_ipaddress(void *if_data)
+format_ipaddress(const ip_address_t *ipaddr, char *buf, size_t buf_len)
 {
-	ip_address_t *ipaddr = if_data;
-	char *broadcast = (char *) MALLOC(INET_ADDRSTRLEN + 5);
-	char *addr_str;
+	char peer[INET6_ADDRSTRLEN + 4];	/* allow for subnet */
+	char *buf_p = buf;
+	char *buf_end = buf + buf_len;
 
-	addr_str = ipaddresstos(ipaddr);
+	buf_p += snprintf(buf_p, buf_end - buf_p, "%s", ipaddresstos(NULL, ipaddr));
 	if (!IP_IS6(ipaddr) && ipaddr->u.sin.sin_brd.s_addr) {
-		snprintf(broadcast, 21, " brd %s",
+		buf_p += snprintf(buf_p, buf_end - buf_p, " brd %s",
 			 inet_ntop2(ipaddr->u.sin.sin_brd.s_addr));
 	}
+	buf_p += snprintf(buf_p, buf_end - buf_p, " dev %s scope %s",
+			    IF_NAME(ipaddr->ifp),
+			    get_rttables_scope(ipaddr->ifa.ifa_scope));
+	if (ipaddr->label)
+		buf_p += snprintf(buf_p, buf_end - buf_p, " label %s", ipaddr->label);
+	if (ipaddr->have_peer) {
+		inet_ntop(ipaddr->ifa.ifa_family, &ipaddr->peer, peer, sizeof(peer));
+		buf_p += snprintf(buf_p, buf_end - buf_p, " peer %s/%d" , peer , ipaddr->ifa.ifa_prefixlen);
+	}
+#ifdef IFA_F_HOMEADDRESS		/* Linux 2.6.19 */
+	if (ipaddr->flags & IFA_F_HOMEADDRESS)
+		buf_p += snprintf(buf_p, buf_end - buf_p, " home");
+#endif
+#ifdef IFA_F_NODAD			/* Linux 2.6.19 */
+	if (ipaddr->flagmask & IFA_F_NODAD)
+		buf_p += snprintf(buf_p, buf_end - buf_p, " -nodad");
+#endif
+#ifdef IFA_F_MANAGETEMPADDR		/* Linux 3.14 */
+	if (ipaddr->flags & IFA_F_MANAGETEMPADDR)
+		buf_p += snprintf(buf_p, buf_end - buf_p, " mngtmpaddr");
+#endif
+#ifdef IFA_F_NOPREFIXROUTE		/* Linux 3.14 */
+	if (ipaddr->flags & IFA_F_NOPREFIXROUTE)
+		buf_p += snprintf(buf_p, buf_end - buf_p, " noprefixroute");
+#endif
+#ifdef IFA_F_MCAUTOJOIN			/* Linux 4.1 */
+	if (ipaddr->flags & IFA_F_MCAUTOJOIN)
+		buf_p += snprintf(buf_p, buf_end - buf_p, " autojoin");
+#endif
+	if (ipaddr->dont_track)
+		buf_p += snprintf(buf_p, buf_end - buf_p, "%s", " no_track");
+
+	if (ipaddr->track_group)
+		buf_p += snprintf(buf_p, buf_end - buf_p, " track_group %s", ipaddr->track_group->gname);
+
+	if (ipaddr->set)
+		buf_p += snprintf(buf_p, buf_end - buf_p, " set");
+#ifdef _WITH_IPTABLES_
+	if (ipaddr->iptable_rule_set)
+		buf_p += snprintf(buf_p, buf_end - buf_p, " iptable_set");
+#endif
+#ifdef _WITH_NFTABLES_
+	if (ipaddr->nftable_rule_set)
+		buf_p += snprintf(buf_p, buf_end - buf_p, " nftable_set");
+#endif
+}
 
-	log_message(LOG_INFO, "     %s/%d%s dev %s scope %s%s%s"
-			    , addr_str
-			    , ipaddr->ifa.ifa_prefixlen
-			    , broadcast
-			    , IF_NAME(ipaddr->ifp)
-			    , netlink_scope_n2a(ipaddr->ifa.ifa_scope)
-			    , ipaddr->label ? " label " : ""
-			    , ipaddr->label ? ipaddr->label : "");
-	FREE(broadcast);
-	FREE(addr_str);
+void
+dump_ipaddress(FILE *fp, const void *if_data)
+{
+	const ip_address_t *ipaddr = if_data;
+	char buf[256];
+
+	format_ipaddress(ipaddr, buf, sizeof(buf));
+
+	conf_write(fp, "     %s", buf);
 }
+
 ip_address_t *
-parse_ipaddress(ip_address_t *ip_address, char *str)
+parse_ipaddress(ip_address_t *ip_address, const char *str, bool allow_subnet_mask)
 {
 	ip_address_t *new = ip_address;
 	void *addr;
-	char *p;
+	const char *p;
+	unsigned prefixlen;
+	const char *str_dup = NULL;
 
 	/* No ip address, allocate a brand new one */
-	if (!new) {
+	if (!new)
 		new = (ip_address_t *) MALLOC(sizeof(ip_address_t));
-	}
-
-	/* Handle the specials */
-	if (!strcmp(str, "default")) {
-		new->ifa.ifa_family = AF_INET;
-		return new;
-	} else if (!strcmp(str, "default6")) {
-		new->ifa.ifa_family = AF_INET6;
-		return new;
-	}
 
 	/* Parse ip address */
 	new->ifa.ifa_family = (strchr(str, ':')) ? AF_INET6 : AF_INET;
 	new->ifa.ifa_prefixlen = (IP_IS6(new)) ? 128 : 32;
-	p = strchr(str, '/');
+
+	if (allow_subnet_mask)
+		p = strchr(str, '/');
+	else
+		p = NULL;
+
 	if (p) {
-		new->ifa.ifa_prefixlen = atoi(p + 1);
-		*p = 0;
+		if (!read_unsigned(p + 1, &prefixlen, 0, new->ifa.ifa_prefixlen, true))
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid address prefix len %s for address %s - using %d", p + 1, str, new->ifa.ifa_prefixlen);
+		else
+			new->ifa.ifa_prefixlen = prefixlen;
+
+		str_dup = STRNDUP(str, p - str);
 	}
 
 	addr = (IP_IS6(new)) ? (void *) &new->u.sin6_addr :
 			       (void *) &new->u.sin.sin_addr;
-	if (!inet_pton(IP_FAMILY(new), str, addr)) {
-		log_message(LOG_INFO, "VRRP parsed invalid IP %s. skipping IP...", str);
-		FREE(new);
+	if (!inet_pton(IP_FAMILY(new), str_dup ? str_dup : str, addr)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "VRRP parsed invalid IP %s. skipping IP...", str);
+		if (!ip_address)
+			FREE(new);
 		new = NULL;
 	}
 
-	/* Restore slash */
-	if (p) {
-		*p = '/';
+	/* Release dup'd string */
+	if (str_dup)
+		FREE_CONST(str_dup);
+
+	return new;
+}
+
+ip_address_t *
+parse_route(const char *str)
+{
+	ip_address_t *new = (ip_address_t *)MALLOC(sizeof(ip_address_t));
+
+	/* Handle the specials */
+	if (!strcmp(str, "default") || !strcmp(str, "any") || !strcmp(str, "all")) {
+		new->ifa.ifa_family = AF_UNSPEC;
+		return new;
+	}
+
+	/* Maintained for backward compatibility v2.0.7 and earlier */
+	if (!strcmp(str, "default6")) {
+		log_message(LOG_INFO, "'default6' is deprecated - please replace with 'inet6 default'");
+		new->ifa.ifa_family = AF_INET6;
+		return new;
+	}
+
+	if (!parse_ipaddress(new, str, true)) {
+		FREE(new);
+		return NULL;
 	}
 
 	return new;
 }
+
 void
-alloc_ipaddress(list ip_list, vector_t *strvec, interface_t *ifp)
+alloc_ipaddress(list ip_list, const vector_t *strvec, const interface_t *ifp, bool allow_track_group)
 {
+/* The way this works is slightly strange.
+ *
+ * If !ifp, then this is being called for a static address, in which
+ * case either dev DEVNAME must be specified, or we will attempt to
+ * add the address to DFTL_INT.
+ * Otherwise, we are being called for a VIP/eVIP. We don't set the
+ * interface for the address unless dev DEVNAME is specified, in case
+ * a VMAC is added later. When the complete configuration is checked,
+ * if the ifindex is 0, then it will be set to the interface of the
+ * vrrp_instance (VMAC or physical interface).
+ */
 	ip_address_t *new;
 	interface_t *ifp_local;
-	char *str;
-	int i = 0, addr_idx =0;
+	const char *str;
+	unsigned int i = 0, addr_idx = 0;
+	uint8_t scope;
+	bool param_avail;
+	bool param_missing = false;
+	const char *param;
+	ip_address_t peer = { .ifa.ifa_family = AF_UNSPEC };
+	int brd_len = 0;
+	uint32_t mask;
+	bool have_broadcast = false;
 
 	new = (ip_address_t *) MALLOC(sizeof(ip_address_t));
-	if (ifp) {
-		new->ifa.ifa_index = IF_INDEX(ifp);
-		new->ifp = ifp;
-	} else {
-		ifp_local = if_get_by_ifname(DFLT_INT);
-		if (!ifp_local) {
-			log_message(LOG_INFO, "Default interface " DFLT_INT
-				    " does not exist and no interface specified. "
-				    "Skip VRRP address.");
-			FREE(new);
-			return;
-		}
-		new->ifa.ifa_index = IF_INDEX(ifp_local);
-		new->ifp = ifp_local;
+
+	/* We expect the address first */
+	if (!parse_ipaddress(new, strvec_slot(strvec,0), true)) {
+		FREE(new);
+		return;
 	}
 
+	addr_idx = i++;
+
 	/* FMT parse */
 	while (i < vector_size(strvec)) {
-		str = vector_slot(strvec, i);
+		str = strvec_slot(strvec, i);
 
 		/* cmd parsing */
+		param_avail = (vector_size(strvec) >= i+2);
+
 		if (!strcmp(str, "dev")) {
-			ifp_local = if_get_by_ifname(vector_slot(strvec, ++i));
-			if (!ifp_local) {
-				log_message(LOG_INFO, "VRRP is trying to assign VIP to unknown %s"
-				       " interface !!! go out and fix your conf !!!",
-				       (char *)vector_slot(strvec, i));
+			if (!param_avail) {
+				param_missing = true;
+				break;
+			}
+
+			if (new->ifp) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Cannot specify static ipaddress device more than once for %s", strvec_slot(strvec, addr_idx));
+				FREE(new);
+				return;
+			}
+			if (!(ifp_local = if_get_by_ifname(strvec_slot(strvec, ++i), IF_CREATE_IF_DYNAMIC))) {
+				report_config_error(CONFIG_GENERAL_ERROR, "WARNING - interface %s for ip address %s doesn't exist",
+						strvec_slot(strvec, i), strvec_slot(strvec, addr_idx));
 				FREE(new);
 				return;
 			}
-			new->ifa.ifa_index = IF_INDEX(ifp_local);
 			new->ifp = ifp_local;
 		} else if (!strcmp(str, "scope")) {
-			new->ifa.ifa_scope = netlink_scope_a2n(vector_slot(strvec, ++i));
+			if (!param_avail) {
+				param_missing = true;
+				break;
+			}
+
+			if (!find_rttables_scope(strvec_slot(strvec, ++i), &scope))
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid scope '%s' specified for %s - ignoring", strvec_slot(strvec,i), strvec_slot(strvec, addr_idx));
+			else
+				new->ifa.ifa_scope = scope;
 		} else if (!strcmp(str, "broadcast") || !strcmp(str, "brd")) {
+			if (!param_avail) {
+				param_missing = true;
+				break;
+			}
+
 			if (IP_IS6(new)) {
-				log_message(LOG_INFO, "VRRP is trying to assign a broadcast %s to the IPv6 address %s !!?? "
+				report_config_error(CONFIG_GENERAL_ERROR, "VRRP is trying to assign a broadcast %s to the IPv6 address %s !!?? "
 						      "WTF... skipping VIP..."
-						    , vector_slot(strvec, i), vector_slot(strvec, addr_idx));
+						    , strvec_slot(strvec, i), strvec_slot(strvec, addr_idx));
 				FREE(new);
 				return;
-			} else if (!inet_pton(AF_INET, vector_slot(strvec, ++i), &new->u.sin.sin_brd)) {
-				log_message(LOG_INFO, "VRRP is trying to assign invalid broadcast %s. "
-						      "skipping VIP...", vector_slot(strvec, i));
+			}
+
+			have_broadcast = true;
+
+			param = strvec_slot(strvec, ++i);
+			if (!strcmp(param, "-"))
+				brd_len = -2;
+			else if (!strcmp(param, "+"))
+				brd_len = -1;
+			else if (!inet_pton(AF_INET, param, &new->u.sin.sin_brd)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "VRRP is trying to assign invalid broadcast %s. "
+						      "skipping VIP...", strvec_slot(strvec, i));
 				FREE(new);
 				return;
 			}
 		} else if (!strcmp(str, "label")) {
+			if (!param_avail) {
+				param_missing = true;
+				break;
+			}
+
 			new->label = MALLOC(IFNAMSIZ);
-			strncpy(new->label, vector_slot(strvec, ++i), IFNAMSIZ);
-		} else {
-			if (!parse_ipaddress(new, str))
+			strncpy(new->label, strvec_slot(strvec, ++i), IFNAMSIZ);
+		} else if (!strcmp(str, "peer")) {
+			if (!param_avail) {
+				param_missing = true;
+				break;
+			}
+
+			i++;
+			if (new->have_peer) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Peer %s - another peer has already been specified", strvec_slot(strvec, i));
+				continue;
+			}
+
+			if (!parse_ipaddress(&peer, strvec_slot(strvec,i), false))
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid peer address %s", strvec_slot(strvec, i));
+			else if (peer.ifa.ifa_family != new->ifa.ifa_family)
+				report_config_error(CONFIG_GENERAL_ERROR, "Peer address %s does not match address family", strvec_slot(strvec, i));
+			else {
+				if ((new->ifa.ifa_family == AF_INET6 && new->ifa.ifa_prefixlen != 128) ||
+				    (new->ifa.ifa_family == AF_INET && new->ifa.ifa_prefixlen != 32))
+					report_config_error(CONFIG_GENERAL_ERROR, "Cannot specify address prefix when specifying peer address - ignoring");
+				new->have_peer = true;
+				new->ifa.ifa_prefixlen = peer.ifa.ifa_prefixlen;
+				if (new->ifa.ifa_family == AF_INET6)
+					new->peer.sin6_addr = peer.u.sin6_addr;
+				else
+					new->peer.sin_addr = peer.u.sin.sin_addr;
+			}
+#ifdef IFA_F_HOMEADDRESS		/* Linux 2.6.19 */
+		} else if (!strcmp(str, "home")) {
+			new->flags |= IFA_F_HOMEADDRESS;
+			new->flagmask |= IFA_F_HOMEADDRESS;
+#endif
+#ifdef IFA_F_NODAD			/* Linux 2.6.19 */
+		} else if (!strcmp(str, "-nodad")) {
+			new->flagmask |= IFA_F_NODAD;
+#endif
+#ifdef IFA_F_MANAGETEMPADDR		/* Linux 3.14 */
+		} else if (!strcmp(str, "mngtmpaddr")) {
+			new->flags |= IFA_F_MANAGETEMPADDR;
+			new->flagmask |= IFA_F_MANAGETEMPADDR;
+#endif
+#ifdef IFA_F_NOPREFIXROUTE		/* Linux 3.14 */
+		} else if (!strcmp(str, "noprefixroute")) {
+			new->flags |= IFA_F_NOPREFIXROUTE;
+			new->flagmask |= IFA_F_NOPREFIXROUTE;
+#endif
+#ifdef IFA_F_MCAUTOJOIN			/* Linux 4.1 */
+		} else if (!strcmp(str, "autojoin")) {
+			new->flags |= IFA_F_MCAUTOJOIN;
+			new->flagmask |= IFA_F_MCAUTOJOIN;
+#endif
+		} else if (!strcmp(str, "no_track")) {
+			new->dont_track = true;
+		} else if (allow_track_group && !strcmp(str, "track_group")) {
+			if (!param_avail) {
+				param_missing = true;
+				break;
+			}
+			i++;
+			if (new->track_group) {
+				report_config_error(CONFIG_GENERAL_ERROR, "track_group %s is a duplicate", strvec_slot(strvec, i));
+				break;
+			}
+			if (!(new->track_group = find_track_group(strvec_slot(strvec, i))))
+                                report_config_error(CONFIG_GENERAL_ERROR, "track_group %s not found", strvec_slot(strvec, i));
+		} else
+			report_config_error(CONFIG_GENERAL_ERROR, "Unknown configuration entry '%s' for ip address - ignoring", str);
+		i++;
+	}
+
+	/* Check if there was a missing parameter for a keyword */
+	if (param_missing) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No %s parameter specified for %s", str, strvec_slot(strvec, addr_idx));
+		free(new);
+		return;
+	}
+
+	/* Set the broadcast address if necessary */
+	if (have_broadcast && new->have_peer) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Cannot specify broadcast and peer addresses - ignoring broadcast address");
+		new->u.sin.sin_brd.s_addr = 0;
+	}
+	else if (brd_len < 0 && new->ifa.ifa_prefixlen <= 30) {
+		new->u.sin.sin_brd = (new->have_peer) ? new->peer.sin_addr : new->u.sin.sin_addr;
+		mask = 0xffffffffU >> new->ifa.ifa_prefixlen;
+		mask = htonl(mask);
+		if (brd_len == -1)	/* '+' */
+			new->u.sin.sin_brd.s_addr |= mask;
+		else
+			new->u.sin.sin_brd.s_addr &= ~mask;
+	}
+	else if (brd_len < 0)
+		report_config_error(CONFIG_GENERAL_ERROR, "Address prefix length %d too long for broadcast", new->ifa.ifa_prefixlen);
+
+	if (!ifp && !new->ifp) {
+		if (!global_data->default_ifp) {
+			global_data->default_ifp = if_get_by_ifname(DFLT_INT, IF_CREATE_IF_DYNAMIC);
+			if (!global_data->default_ifp) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Default interface %s doesn't exist for static address %s.",
+							DFLT_INT, strvec_slot(strvec, addr_idx));
+				FREE(new);
 				return;
+			}
+		}
+		new->ifp = global_data->default_ifp;
+	}
 
-			addr_idx  = i;
+	if (new->ifa.ifa_family == AF_INET6) {
+		if (new->ifa.ifa_scope) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Cannot specify scope for IPv6 addresses (%s) - ignoring scope", strvec_slot(strvec, addr_idx));
+			new->ifa.ifa_scope = 0;
+		}
+		if (new->label) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Cannot specify label for IPv6 addresses (%s) - ignoring label", strvec_slot(strvec, addr_idx));
+			FREE(new->label);
+			new->label = NULL;
 		}
-		i++;
+	}
+
+	if (new->track_group && !new->ifp) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Static route have track_group if interface not specified");
+		new->track_group = NULL;
 	}
 
 	list_add(ip_list, new);
 }
 
-
-
 /* Find an address in a list */
-int
-address_exist(list l, ip_address_t *ipaddress, char *old_dpdk_port, char *dpdk_port)
+static bool
+address_exist(vrrp_t *vrrp, ip_address_t *ipaddress, char *old_dpdk_port, char *new_dpdk_port)
 {
 	ip_address_t *ipaddr;
 	element e;
+	char addr_str[INET6_ADDRSTRLEN];
+	void *addr;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		ipaddr = ELEMENT_DATA(e);
-		if (ipaddr->u.sin.sin_addr.s_addr ==
-            ipaddress->u.sin.sin_addr.s_addr) {
-			if (old_dpdk_port == NULL || dpdk_port == NULL) {
-				if (ipaddr->ifa.ifa_index == ipaddress->ifa.ifa_index) {
-					log_message(LOG_INFO, "interface index: %d is already existed",
-					            ipaddr->ifa.ifa_index);
-					ipaddr->set = ipaddress->set;
-					return 1;
-				}
-			} else if (!strcmp(old_dpdk_port, dpdk_port)) {
-				log_message(LOG_INFO, "interface: %s is already existed",
-					        old_dpdk_port);
-				ipaddr->set = ipaddress->set;
-				return 1;
-			}
+	/* If the following check isn't made, we get lots of compiler warnings */
+	if (!ipaddress)
+		return true;
+
+
+	LIST_FOREACH(vrrp->vip, ipaddr, e) {
+		if (IP_ISEQ(ipaddr, ipaddress) && !strcmp(old_dpdk_port, new_dpdk_port)) {
+			ipaddr->set = ipaddress->set;
+#ifdef _WITH_IPTABLES_
+			ipaddr->iptable_rule_set = ipaddress->iptable_rule_set;
+#endif
+#ifdef _WITH_NFTABLES_
+			ipaddr->nftable_rule_set = ipaddress->nftable_rule_set;
+#endif
+			ipaddr->ifa.ifa_index = ipaddress->ifa.ifa_index;
+			return true;
 		}
     }
 
-	return 0;
+	LIST_FOREACH(vrrp->evip, ipaddr, e) {
+		if (IP_ISEQ(ipaddr, ipaddress) && !strcmp(old_dpdk_port, new_dpdk_port)) {
+			ipaddr->set = ipaddress->set;
+#ifdef _WITH_IPTABLES_
+			ipaddr->iptable_rule_set = ipaddress->iptable_rule_set;
+#endif
+#ifdef _WITH_NFTABLES_
+			ipaddr->nftable_rule_set = ipaddress->nftable_rule_set;
+#endif
+			ipaddr->ifa.ifa_index = ipaddress->ifa.ifa_index;
+			return true;
+		}
+	}
+
+	addr = (IP_IS6(ipaddress)) ? (void *) &ipaddress->u.sin6_addr :
+				  (void *) &ipaddress->u.sin.sin_addr;
+	inet_ntop(IP_FAMILY(ipaddress), addr, addr_str, INET6_ADDRSTRLEN);
+
+	log_message(LOG_INFO, "(%s) ip address %s/%d dev %s, no longer exist"
+			    , vrrp->iname
+			    , addr_str
+			    , ipaddress->ifa.ifa_prefixlen
+			    , ipaddress->ifp->ifname);
+
+	return false;
 }
 
 /* Clear diff addresses */
 void
-clear_diff_address(list l, list n, char *old_dpdk_port,char *dpdk_port)
+get_diff_address(vrrp_t *old, vrrp_t *new, list old_addr)
 {
 	ip_address_t *ipaddr;
 	element e;
-	char *addr_str;
-	void *addr;
 
 	/* No addresses in previous conf */
-	if (LIST_ISEMPTY(l))
+	if (LIST_ISEMPTY(old->vip) && LIST_ISEMPTY(old->evip))
 		return;
 
-	/* All addresses removed */
-	if (LIST_ISEMPTY(n)) {
-		log_message(LOG_INFO, "Removing a VIP|E-VIP block");
-		netlink_iplist(l, IPADDRESS_DEL, old_dpdk_port);
-		return;
+	LIST_FOREACH(old->vip, ipaddr, e) {
+		if (ipaddr->set && !address_exist(new, ipaddr, old->dpdk_ifp, new->dpdk_ifp))
+			list_add(old_addr, ipaddr);
 	}
 
-	addr_str = (char *) MALLOC(41);
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		ipaddr = ELEMENT_DATA(e);
-
-		if (!address_exist(n, ipaddr, old_dpdk_port, dpdk_port)
-                && ipaddr->set) {
-			addr = (IP_IS6(ipaddr)) ? (void *) &ipaddr->u.sin6_addr :
-						  (void *) &ipaddr->u.sin.sin_addr;
-			inet_ntop(IP_FAMILY(ipaddr), addr, addr_str, 41);
-
-			log_message(LOG_INFO, "ip address %s/%d dev %s, no longer exist"
-					    , addr_str
-					    , ipaddr->ifa.ifa_prefixlen
-					    , IF_NAME(if_get_by_ifindex(ipaddr->ifa.ifa_index)));
-			netlink_ipaddress(ipaddr, old_dpdk_port, IPADDRESS_DEL);
-		}
+	LIST_FOREACH(old->evip, ipaddr, e) {
+		if (ipaddr->set && !address_exist(new, ipaddr, old->dpdk_ifp, new->dpdk_ifp))
+			list_add(old_addr, ipaddr);
 	}
-	FREE(addr_str);
+}
+
+/* Clear diff addresses */
+void
+clear_address_list(list delete_addr,
+#ifndef _WITH_FIREWALL_
+				     __attribute__((unused))
+#endif
+		bool remove_from_firewall, char *old_port)
+{
+	/* No addresses to delete */
+	if (LIST_ISEMPTY(delete_addr))
+		return;
+
+	/* All addresses removed */
+	netlink_iplist(delete_addr, IPADDRESS_DEL, false, old_port);
+#ifdef _WITH_FIREWALL_
+	if (remove_from_firewall)
+		firewall_remove_rule_to_iplist(delete_addr);
+#endif
 }
 
 /* Clear static ip address */
 void
 clear_diff_saddresses(void)
 {
-	clear_diff_address(old_vrrp_data->static_addresses, vrrp_data->static_addresses, NULL, NULL);
+	list remove_addr = alloc_list(NULL, NULL);
+	vrrp_t old = { .vip = old_vrrp_data->static_addresses };
+	vrrp_t new = { .vip = vrrp_data->static_addresses };
+
+	get_diff_address(&old, &new, remove_addr);
+	clear_address_list(remove_addr, false, NULL);
+
+	free_list(&remove_addr);
+}
+
+void reinstate_static_address(ip_address_t *ipaddr, char *dpdk_port)
+{
+	char buf[256];
+
+	ipaddr->set = (netlink_ipaddress(ipaddr, dpdk_port, IPADDRESS_ADD) > 0);
+	format_ipaddress(ipaddr, buf, sizeof(buf));
+	log_message(LOG_INFO, "Restoring deleted static address %s", buf);
 }
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_iproute.c b/tools/keepalived/keepalived/vrrp/vrrp_iproute.c
index 42b3c2ff6..a8ad926c7 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_iproute.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_iproute.c
@@ -17,20 +17,286 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <string.h>
+#include "config.h"
+
+#include <linux/icmpv6.h>
+#include <inttypes.h>
+#if HAVE_DECL_RTA_ENCAP
+#include <linux/lwtunnel.h>
+#if HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+#include <linux/mpls_iptunnel.h>
+#endif
+#if HAVE_DECL_LWTUNNEL_ENCAP_ILA
+#include <linux/ila.h>
+#endif
+#endif
+#include <stdbool.h>
+#include <stdio.h>
+#ifdef RTNETLINK_H_NEEDS_SYS_SOCKET_H
+#include <sys/socket.h>
+#endif
+#include <linux/rtnetlink.h>
+
 /* local include */
-#include "vrrp_ipaddress.h"
 #include "vrrp_iproute.h"
-#include "vrrp_netlink.h"
-#include "vrrp_if.h"
+#include "keepalived_netlink.h"
 #include "vrrp_data.h"
 #include "logger.h"
 #include "memory.h"
 #include "utils.h"
+#include "rttables.h"
+#include "vrrp_ip_rule_route_parser.h"
+#include "parser.h"
+
+/* Buffer sizes for netlink messages. Increase if needed. */
+#if 0
+#define	RTM_SIZE		1024
+#define	RTA_SIZE		1024
+#define	ENCAP_RTA_SIZE		 128
+#endif
+
+/* Utility functions */
+unsigned short
+add_addr2req(struct nlmsghdr *n, size_t maxlen, unsigned short type, ip_address_t *ip_address)
+{
+	void *addr;
+	size_t alen;
+
+	if (!ip_address)
+		return 0;
+
+	if (IP_IS6(ip_address)) {
+		addr = (void *) &ip_address->u.sin6_addr;
+		alen = sizeof(ip_address->u.sin6_addr);
+	}
+	else
+	{
+	     addr = (void *) &ip_address->u.sin.sin_addr;
+	     alen = sizeof(ip_address->u.sin.sin_addr);
+	}
+
+	return (unsigned short)addattr_l(n, maxlen, type, addr, alen);
+}
+
+#if 0
+#if HAVE_DECL_RTA_VIA
+static unsigned short
+add_addr_fam2req(struct nlmsghdr *n, size_t maxlen, unsigned short type, ip_address_t *ip_address)
+{
+	void *addr;
+	size_t alen;
+	uint16_t family;
+
+	if (!ip_address)
+		return 0;
+
+	if (IP_IS6(ip_address)) {
+		addr = (void *)&ip_address->u.sin6_addr;
+		alen = sizeof(ip_address->u.sin6_addr);
+	}
+	else {
+		addr = (void *)&ip_address->u.sin.sin_addr;
+		alen = sizeof(ip_address->u.sin.sin_addr);
+	}
+	family = ip_address->ifa.ifa_family;
+
+	return (unsigned short)addattr_l2(n, maxlen, type, &family, sizeof(family), addr, alen);
+}
+#endif
+
+static unsigned short
+add_addr2rta(struct rtattr *rta, size_t maxlen, unsigned short type, ip_address_t *ip_address)
+{
+	void *addr;
+	size_t alen;
+
+	if (!ip_address)
+		return 0;
+
+	if (IP_IS6(ip_address)) {
+		addr = (void *)&ip_address->u.sin6_addr;
+		alen = sizeof(ip_address->u.sin6_addr);
+	}
+	else {
+		addr = (void *)&ip_address->u.sin.sin_addr;
+		alen = sizeof(ip_address->u.sin.sin_addr);
+	}
+
+	return (unsigned short)rta_addattr_l(rta, maxlen, type, addr, alen);
+}
+
+#if HAVE_DECL_RTA_VIA
+static unsigned short
+add_addrfam2rta(struct rtattr *rta, size_t maxlen, unsigned short type, ip_address_t *ip_address)
+{
+	void *addr;
+	size_t alen;
+	uint16_t family;
+
+	if (!ip_address)
+		return 0;
+
+	if (IP_IS6(ip_address)) {
+		addr = (void *)&ip_address->u.sin6_addr;
+		alen = sizeof(ip_address->u.sin6_addr);
+	}
+	else {
+		addr = (void *)&ip_address->u.sin.sin_addr;
+		alen = sizeof(ip_address->u.sin.sin_addr);
+	}
+	family = ip_address->ifa.ifa_family;
+
+	return (unsigned short)rta_addattr_l2(rta, maxlen, type, &family, sizeof(family), addr, alen);
+}
+#endif
+
+#if HAVE_DECL_RTA_ENCAP
+#if HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+static void
+add_encap_mpls(struct rtattr *rta, size_t len, const encap_t *encap)
+{
+	rta_addattr_l(rta, len, MPLS_IPTUNNEL_DST, &encap->mpls.addr, encap->mpls.num_labels * sizeof(encap->mpls.addr[0]));
+}
+#endif
+
+static void
+add_encap_ip(struct rtattr *rta, size_t len, const encap_t *encap)
+{
+	if (encap->flags & IPROUTE_BIT_ENCAP_ID)
+		rta_addattr64(rta, len, LWTUNNEL_IP_ID, htobe64(encap->ip.id));
+	if (encap->ip.dst)
+		rta_addattr_l(rta, len, LWTUNNEL_IP_DST, &encap->ip.dst->u.sin.sin_addr.s_addr, sizeof(encap->ip.dst->u.sin.sin_addr.s_addr));
+	if (encap->ip.src)
+		rta_addattr_l(rta, len, LWTUNNEL_IP_SRC, &encap->ip.src->u.sin.sin_addr.s_addr, sizeof(encap->ip.src->u.sin.sin_addr.s_addr));
+	if (encap->flags & IPROUTE_BIT_ENCAP_DSFIELD)
+		rta_addattr8(rta, len, LWTUNNEL_IP_TOS, encap->ip.tos);
+	if (encap->flags & IPROUTE_BIT_ENCAP_HOPLIMIT)
+		rta_addattr8(rta, len, LWTUNNEL_IP_TTL, encap->ip.ttl);
+	if (encap->flags & IPROUTE_BIT_ENCAP_FLAGS)
+		rta_addattr16(rta, len, LWTUNNEL_IP_FLAGS, encap->ip.flags);
+}
+
+#if HAVE_DECL_LWTUNNEL_ENCAP_ILA
+static void
+add_encap_ila(struct rtattr *rta, size_t len, const encap_t *encap)
+{
+	rta_addattr64(rta, len, ILA_ATTR_LOCATOR, encap->ila.locator);
+}
+#endif
+
+static void
+add_encap_ip6(struct rtattr *rta, size_t len, const encap_t *encap)
+{
+	if (encap->flags & IPROUTE_BIT_ENCAP_ID)
+		rta_addattr64(rta, len, LWTUNNEL_IP6_ID, htobe64(encap->ip6.id));
+	if (encap->ip6.dst)
+		rta_addattr_l(rta, len, LWTUNNEL_IP6_DST, &encap->ip6.dst->u.sin6_addr, sizeof(encap->ip6.dst->u.sin6_addr));
+	if (encap->ip6.src)
+		rta_addattr_l(rta, len, LWTUNNEL_IP6_SRC, &encap->ip6.src->u.sin6_addr, sizeof(encap->ip6.src->u.sin6_addr));
+	if (encap->flags & IPROUTE_BIT_ENCAP_DSFIELD)
+		rta_addattr8(rta, len, LWTUNNEL_IP6_TC, encap->ip6.tc);
+	if (encap->flags & IPROUTE_BIT_ENCAP_HOPLIMIT)
+		rta_addattr8(rta, len, LWTUNNEL_IP6_HOPLIMIT, encap->ip6.hoplimit);
+	if (encap->flags & IPROUTE_BIT_ENCAP_FLAGS)
+		rta_addattr16(rta, len, LWTUNNEL_IP6_FLAGS, encap->ip6.flags);
+}
 
+static bool
+add_encap(struct rtattr *rta, size_t len, encap_t *encap)
+{
+	struct rtattr *nest;
+
+	nest = rta_nest(rta, len, RTA_ENCAP);
+	switch (encap->type) {
+#if HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+	case LWTUNNEL_ENCAP_MPLS:
+		add_encap_mpls(rta, len, encap);
+		break;
+#endif
+	case LWTUNNEL_ENCAP_IP:
+		add_encap_ip(rta, len, encap);
+		break;
+#if HAVE_DECL_LWTUNNEL_ENCAP_ILA
+	case LWTUNNEL_ENCAP_ILA:
+		add_encap_ila(rta, len, encap);
+		break;
+#endif
+	case LWTUNNEL_ENCAP_IP6:
+		add_encap_ip6(rta, len, encap);
+		break;
+	default:
+		log_message(LOG_INFO, "unknown encap type %d", encap->type);
+		break;
+	}
+	rta_nest_end(rta, nest);
+
+	rta_addattr16(rta, len, RTA_ENCAP_TYPE, encap->type);
+
+	return true;
+}
+#endif
+
+static void
+add_nexthop(nexthop_t *nh, struct rtmsg *rtm, struct rtattr *rta, size_t len, struct rtnexthop *rtnh)
+{
+	if (nh->addr) {
+		if (rtm->rtm_family == nh->addr->ifa.ifa_family)
+			rtnh->rtnh_len = (unsigned short)(rtnh->rtnh_len + add_addr2rta(rta, len, RTA_GATEWAY, nh->addr));
+#if HAVE_DECL_RTA_VIA
+		else
+			rtnh->rtnh_len = (unsigned short)(rtnh->rtnh_len + add_addrfam2rta(rta, len, RTA_VIA, nh->addr));
+#endif
+	}
+	if (nh->ifp)
+		rtnh->rtnh_ifindex = (int)nh->ifp->ifindex;
+
+	if (nh->mask & IPROUTE_BIT_WEIGHT)
+		rtnh->rtnh_hops = nh->weight;
+
+	rtnh->rtnh_flags = nh->flags;
+
+	if (nh->realms)
+		rtnh->rtnh_len = (unsigned short)(rtnh->rtnh_len + rta_addattr32(rta, len, RTA_FLOW, nh->realms));
+
+#if HAVE_DECL_RTA_ENCAP
+	if (nh->encap.type != LWTUNNEL_ENCAP_NONE) {
+		unsigned short rta_len = rta->rta_len;
+		add_encap(rta, rta_len, &nh->encap);
+		rtnh->rtnh_len = (unsigned short)(rtnh->rtnh_len + rta->rta_len - rta_len);
+	}
+#endif
+}
+
+static void
+add_nexthops(ip_route_t *route, struct nlmsghdr *nlh, struct rtmsg *rtm)
+{
+	char buf[ENCAP_RTA_SIZE];
+	struct rtattr *rta = (void *)buf;
+	struct rtnexthop *rtnh;
+	nexthop_t *nh;
+	element e;
+
+	rta->rta_type = RTA_MULTIPATH;
+	rta->rta_len = RTA_LENGTH(0);
+	rtnh = RTA_DATA(rta);
+
+	for (e = LIST_HEAD(route->nhs); e; ELEMENT_NEXT(e)) {
+		nh = ELEMENT_DATA(e);
+
+		memset(rtnh, 0, sizeof(*rtnh));
+		rtnh->rtnh_len = sizeof(*rtnh);
+		rta->rta_len = (unsigned short)(rta->rta_len + rtnh->rtnh_len);
+		add_nexthop(nh, rtm, rta, sizeof(buf), rtnh);
+		rtnh = RTNH_NEXT(rtnh);
+	}
+
+	if (rta->rta_len > RTA_LENGTH(0))
+		addattr_l(nlh, sizeof(buf), RTA_MULTIPATH, RTA_DATA(rta), RTA_PAYLOAD(rta));
+}
+#endif
 /*
  * refer to function netlink_scope_a2n
  * */
@@ -54,7 +320,7 @@ static int flag_n2dpvs(int scope)
     return RTF_FORWARD;
 }
 
-void dpvs_fill_rt4conf(ip_route_t *iproute, struct dp_vs_route_conf *route_conf)
+static void dpvs_fill_rt4conf(ip_route_t *iproute, struct dp_vs_route_conf *route_conf)
 {
     route_conf->af = AF_INET;
     (route_conf->dst).in  = (iproute->dst->u).sin.sin_addr;
@@ -78,7 +344,7 @@ void dpvs_fill_rt4conf(ip_route_t *iproute, struct dp_vs_route_conf *route_conf)
     route_conf->metric = 0;
 }
 
-void dpvs_fill_rt6conf(ip_route_t *iproute, struct dp_vs_route6_conf *rt6_cfg) 
+static void dpvs_fill_rt6conf(ip_route_t *iproute, struct dp_vs_route6_conf *rt6_cfg) 
 {
     rt6_cfg->dst.addr = ((iproute->dst)->u).sin6_addr;
     rt6_cfg->dst.plen = iproute->dmask;
@@ -100,13 +366,13 @@ void dpvs_fill_rt6conf(ip_route_t *iproute, struct dp_vs_route6_conf *rt6_cfg)
     rt6_cfg->mtu = 0;
 }
 
-int
+static int
 netlink_route(ip_route_t *iproute, int cmd)
 {
     char *tmp_dst,*tmp_src;
 
-    tmp_dst = ipaddresstos(iproute->dst);
-    tmp_src = ipaddresstos(iproute->src);
+    tmp_dst = ipaddresstos(NULL, iproute->dst);
+    tmp_src = ipaddresstos(NULL, iproute->src);
     
     log_message(LOG_INFO, "ip route %d %s/%d src %s port %s scope %d",
             cmd, tmp_dst, iproute->dmask, tmp_src, iproute->ifname, iproute->scope);
@@ -142,172 +408,1329 @@ netlink_rtlist(list rt_list, int cmd)
 	if (LIST_ISEMPTY(rt_list))
 		return;
 
-	for (e = LIST_HEAD(rt_list); e; ELEMENT_NEXT(e)) {
-		iproute = ELEMENT_DATA(e);
-		if ((cmd && !iproute->set) ||
-		    (!cmd && iproute->set)) {
-			if (netlink_route(iproute, cmd) > 0)
-				iproute->set = (cmd) ? 1 : 0;
+	LIST_FOREACH(rt_list, iproute, e) {
+		if ((cmd == IPROUTE_DEL) == iproute->set) {
+			if (!netlink_route(iproute, cmd))
+				iproute->set = (cmd == IPROUTE_ADD);
 			else
-				iproute->set = 0;
+				iproute->set = false;
 		}
 	}
 }
 
 /* Route dump/allocation */
+static void
+free_nh(void *rt_data)
+{
+	nexthop_t *nh = rt_data;
+
+	FREE_PTR(nh->addr);
+//#if HAVE_DECL_RTA_NEWDST
+//	FREE_PTR(nh->as_to);
+//#endif
+	FREE(rt_data);
+}
+
 void
 free_iproute(void *rt_data)
 {
+	ip_route_t *route = rt_data;
+
+	FREE_PTR(route->dst);
+	FREE_PTR(route->src);
+	FREE_PTR(route->pref_src);
+	FREE_PTR(route->via);
+	free_list(&route->nhs);
+#if HAVE_DECL_RTAX_CC_ALGO
+	FREE_PTR(route->congctl);
+#endif
 	FREE(rt_data);
 }
+
+#if HAVE_DECL_RTA_ENCAP
+#if HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+static size_t
+print_encap_mpls(char *op, size_t len, const encap_t* encap)
+{
+	char *buf = op;
+	const char* buf_end = op + len;
+	unsigned i;
+
+	op += snprintf(op, (size_t)(buf_end - op), " encap mpls");
+	for (i = 0; i < encap->mpls.num_labels; i++)
+		op += snprintf(op, (size_t)(buf_end - op), "%s%x", i ? "/" : " ", ntohl(encap->mpls.addr[i].entry));
+
+	return (size_t)(op - buf);
+}
+#endif
+
+static size_t
+print_encap_ip(char *op, size_t len, const encap_t* encap)
+{
+	char *buf = op;
+	const char *buf_end = op + len;
+
+	op += snprintf(op, (size_t)(buf_end - op), " encap ip");
+
+	if (encap->flags & IPROUTE_BIT_ENCAP_ID)
+		op += snprintf(op, (size_t)(buf_end - op), " id %" PRIu64, encap->ip.id);
+	if (encap->ip.dst)
+		op += snprintf(op, (size_t)(buf_end - op), " dst %s", ipaddresstos(NULL, encap->ip.dst));
+	if (encap->ip.src)
+		op += snprintf(op, (size_t)(buf_end - op), " src %s", ipaddresstos(NULL, encap->ip.src));
+	if (encap->flags & IPROUTE_BIT_ENCAP_DSFIELD)
+		op += snprintf(op, (size_t)(buf_end - op), " tos %d", encap->ip.tos);
+	if (encap->flags & IPROUTE_BIT_ENCAP_TTL)
+		op += snprintf(op, (size_t)(buf_end - op), " ttl %d", encap->ip.ttl);
+	if (encap->flags & IPROUTE_BIT_ENCAP_FLAGS)
+		op += snprintf(op, (size_t)(buf_end - op), " flags 0x%x", encap->ip.flags);
+
+	return (size_t)(op - buf);
+}
+
+#if HAVE_DECL_LWTUNNEL_ENCAP_ILA
+static size_t
+print_encap_ila(char *op, size_t len, const encap_t* encap)
+{
+	return (size_t)snprintf(op, len, " encap ila %" PRIu64, encap->ila.locator);
+}
+#endif
+
+static size_t
+print_encap_ip6(char *op, size_t len, const encap_t* encap)
+{
+	char *buf = op;
+	const char *buf_end = op + len;
+
+	op += snprintf(op, (size_t)(buf_end - op), " encap ip6");
+
+	if (encap->flags & IPROUTE_BIT_ENCAP_ID)
+		op += snprintf(op, (size_t)(buf_end - op), " id %" PRIu64, encap->ip6.id);
+	if (encap->ip.dst)
+		op += snprintf(op, (size_t)(buf_end - op), " dst %s", ipaddresstos(NULL, encap->ip6.dst));
+	if (encap->ip.src)
+		op += snprintf(op, (size_t)(buf_end - op), " src %s", ipaddresstos(NULL, encap->ip6.src));
+	if (encap->flags & IPROUTE_BIT_ENCAP_DSFIELD)
+		op += snprintf(op, (size_t)(buf_end - op), " tc %d", encap->ip6.tc);
+	if (encap->flags & IPROUTE_BIT_ENCAP_HOPLIMIT)
+		op += snprintf(op, (size_t)(buf_end - op), " hoplimit %d", encap->ip6.hoplimit);
+	if (encap->flags & IPROUTE_BIT_ENCAP_FLAGS)
+		op += snprintf(op, (size_t)(buf_end - op), " flags 0x%x", encap->ip6.flags);
+
+	return (size_t)(op - buf);
+}
+
+static size_t
+print_encap(char *op, size_t len, const encap_t* encap)
+{
+	switch (encap->type) {
+#if HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+	case LWTUNNEL_ENCAP_MPLS:
+		return print_encap_mpls(op, len, encap);
+#endif
+	case LWTUNNEL_ENCAP_IP:
+		return print_encap_ip(op, len, encap);
+#if HAVE_DECL_LWTUNNEL_ENCAP_ILA
+	case LWTUNNEL_ENCAP_ILA:
+		return print_encap_ila(op, len, encap);
+#endif
+	case LWTUNNEL_ENCAP_IP6:
+		return print_encap_ip6(op, len, encap);
+	}
+
+	return (size_t)snprintf(op, len, "unknown encap type %d", encap->type);
+}
+#endif
+
 void
-dump_iproute(void *rt_data)
+format_iproute(const ip_route_t *route, char *buf, size_t buf_len)
 {
-	ip_route_t *route = rt_data;
-	char *log_msg = MALLOC(1024);
-	char *tmp = MALLOC(INET6_ADDRSTRLEN + 30);
-	char *tmp_str;
+	char *op = buf;
+	const char *buf_end = buf + buf_len;
+	nexthop_t *nh;
+	interface_t *ifp;
+	element e;
+
+	if (route->type != RTN_UNICAST)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), "%s ", get_rttables_rtntype(route->type));
+	if (route->dst)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), "%s", ipaddresstos(NULL, route->dst));
+	else
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), "%s", "default");
+
+	if (route->src)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " from %s", ipaddresstos(NULL, route->src));
+
+//#if HAVE_DECL_RTA_NEWDST
+//	/* MPLS only */
+//	if (route->as_to)
+//		op += (size_t)snprintf(op, (size_t)(buf_end - op), " as to %s", ipaddresstos(NULL, route->as_to));
+//#endif
+
+	if (route->pref_src)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " src %s", ipaddresstos(NULL, route->pref_src));
+
+	if (route->mask & IPROUTE_BIT_DSFIELD)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " tos %u", route->tos);
+
+#if HAVE_DECL_RTA_ENCAP
+	if (route->encap.type != LWTUNNEL_ENCAP_NONE)
+		op += print_encap(op, (size_t)(buf_end - op), &route->encap);
+#endif
+
+	if (route->via)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " via %s %s", route->via->ifa.ifa_family == AF_INET6 ? "inet6" : "inet", ipaddresstos(NULL, route->via));
+
+	if (route->oif)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " dev %s", route->oif->ifname);
+
+	if (route->table != RT_TABLE_MAIN)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " table %u", route->table);
+
+	if (route->mask & IPROUTE_BIT_PROTOCOL)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " proto %u", route->protocol);
 
-	if (route->blackhole) {
-		strncat(log_msg, "blackhole ", 30);
+	if (route->mask & IPROUTE_BIT_SCOPE)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " scope %u", route->scope);
+
+	if (route->mask & IPROUTE_BIT_METRIC)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " metric %u", route->metric);
+
+	if (route->family == AF_INET && route->flags & RTNH_F_ONLINK)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " %s", "onlink");
+
+	if (route->realms) {
+		if (route->realms & 0xFFFF0000)
+			op += (size_t)snprintf(op, (size_t)(buf_end - op), " realms %" PRIu32 "/", route->realms >> 16);
+		else
+			op += (size_t)snprintf(op, (size_t)(buf_end - op), " realm ");
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), "%u", route->realms & 0xFFFF);
 	}
-	if (route->dst) {
-		tmp_str = ipaddresstos(route->dst);
-		snprintf(tmp, INET6_ADDRSTRLEN + 30, "%s/%d", tmp_str, route->dmask);
-		strncat(log_msg, tmp, INET6_ADDRSTRLEN + 30);
-		FREE(tmp_str);
+
+#if HAVE_DECL_RTA_EXPIRES
+	if (route->mask & IPROUTE_BIT_EXPIRES)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " expires %" PRIu32 "sec", route->expires);
+#endif
+
+#if HAVE_DECL_RTAX_CC_ALGO
+	if (route->congctl)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " congctl %s%s", route->congctl, route->lock & (1<<RTAX_CC_ALGO) ? "lock " : "");
+#endif
+
+	if (route->mask & IPROUTE_BIT_RTT) {
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " %s%s ", "rtt", route->lock & (1<<RTAX_RTT) ? " lock" : "");
+		if (route->rtt >= 8000)
+			op += (size_t)snprintf(op, (size_t)(buf_end - op), "%gs", route->rtt / (double)8000.0F);
+		else
+			op += (size_t)snprintf(op, (size_t)(buf_end - op), "%ums", route->rtt / 8);
 	}
-	if (route->gw) {
-		tmp_str = ipaddresstos(route->gw);
-		snprintf(tmp, INET6_ADDRSTRLEN + 30, " gw %s", tmp_str);
-		strncat(log_msg, tmp, INET6_ADDRSTRLEN + 30);
-		FREE(tmp_str);
+
+	if (route->mask & IPROUTE_BIT_RTTVAR) {
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " %s%s ", "rttvar", route->lock & (1<<RTAX_RTTVAR) ? " lock" : "");
+		if (route->rttvar >= 4000)
+			op += (size_t)snprintf(op, (size_t)(buf_end - op), "%gs", route->rttvar / (double)4000.0F);
+		else
+			op += (size_t)snprintf(op, (size_t)(buf_end - op), "%ums", route->rttvar / 4);
 	}
-	if (route->gw2) {
-		tmp_str = ipaddresstos(route->gw2);
-		snprintf(tmp, INET6_ADDRSTRLEN + 30, " or gw %s", tmp_str);
-		strncat(log_msg, tmp, INET6_ADDRSTRLEN + 30);
-		FREE(tmp_str);
+
+	if (route->mask & IPROUTE_BIT_RTO_MIN) {
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " %s%s ", "rto_min", route->lock & (1<<RTAX_RTO_MIN) ? " lock" : "");
+		if (route->rto_min >= 1000)
+			op += (size_t)snprintf(op, (size_t)(buf_end - op), "%gs", route->rto_min / (double)1000.0F);
+		else
+			op += (size_t)snprintf(op, (size_t)(buf_end - op), "%ums", route->rto_min);
 	}
-	if (route->src) {
-		tmp_str = ipaddresstos(route->src);
-		snprintf(tmp, INET6_ADDRSTRLEN + 30, " src %s", tmp_str);
-		strncat(log_msg, tmp, INET6_ADDRSTRLEN + 30);
-		FREE(tmp_str);
+
+	if (route->features) {
+		if (route->features & RTAX_FEATURE_ECN)
+			op += (size_t)snprintf(op, (size_t)(buf_end - op), " %s", "features ecn");
 	}
-	if (route->ifname) {
-		snprintf(tmp, INET6_ADDRSTRLEN + 30, " dev %s",route->ifname);
-		strncat(log_msg, tmp, INET6_ADDRSTRLEN + 30);
+
+	if (route->mask & IPROUTE_BIT_MTU) {
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " mtu %s%u",
+			route->lock & (1<<RTAX_MTU) ? "lock " : "",
+			route->mtu);
 	}
-	if (route->table) {
-		snprintf(tmp, INET6_ADDRSTRLEN + 30, " table %d", route->table);
-		strncat(log_msg, tmp, INET6_ADDRSTRLEN + 30);
+
+	if (route->mask & IPROUTE_BIT_WINDOW)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " window %u", route->window);
+
+	if (route->mask & IPROUTE_BIT_SSTHRESH) {
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " ssthresh %s%u",
+			route->lock & (1<<RTAX_SSTHRESH) ? "lock " : "",
+			route->ssthresh);
 	}
-	if (route->scope) {
-		snprintf(tmp, INET6_ADDRSTRLEN + 30, " scope %s",
-			 netlink_scope_n2a(route->scope));
-		strncat(log_msg, tmp, INET6_ADDRSTRLEN + 30);
+
+	if (route->mask & IPROUTE_BIT_CWND) {
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " cwnd %s%u",
+			route->lock & (1<<RTAX_CWND) ? "lock " : "",
+			route->cwnd);
+	}
+
+	if (route->mask & IPROUTE_BIT_ADVMSS) {
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " advmss %s%u",
+			route->lock & (1<<RTAX_ADVMSS) ? "lock " : "",
+			route->advmss);
 	}
-	if (route->metric) {
-		snprintf(tmp, INET6_ADDRSTRLEN + 30, " metric %d", route->metric);
-		strncat(log_msg, tmp, INET6_ADDRSTRLEN + 30);
+
+	if (route->mask & IPROUTE_BIT_REORDERING) {
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " reordering %s%u",
+			route->lock & (1<<RTAX_REORDERING) ? "lock " : "",
+			route->reordering);
+	}
+
+	if (route->mask & IPROUTE_BIT_HOPLIMIT)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " hoplimit %u", route->hoplimit);
+
+	if (route->mask & IPROUTE_BIT_INITCWND)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " initcwnd %u", route->initcwnd);
+
+	if (route->mask & IPROUTE_BIT_INITRWND)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " initrwnd %u", route->initrwnd);
+
+#if HAVE_DECL_RTAX_QUICKACK
+	if (route->mask & IPROUTE_BIT_QUICKACK)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " quickack %d", route->quickack);
+#endif
+
+#if HAVE_DECL_RTA_PREF
+	if (route->mask & IPROUTE_BIT_PREF)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " %s %s", "pref",
+			route->pref == ICMPV6_ROUTER_PREF_LOW ? "low" :
+			route->pref == ICMPV6_ROUTER_PREF_MEDIUM ? "medium" :
+			route->pref == ICMPV6_ROUTER_PREF_HIGH ? "high" :
+			"unknown");
+#endif
+
+#if HAVE_DECL_RTAX_FASTOPEN_NO_COOKIE
+	if (route->mask & IPROUTE_BIT_FASTOPEN_NO_COOKIE)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " %s %d", "fastopen_no_cookie", route->fastopen_no_cookie);
+#endif
+
+#if HAVE_DECL_RTA_TTL_PROPAGATE
+	if (route->mask & IPROUTE_BIT_TTL_PROPAGATE)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " %s %sabled", "ttl-propagate", route->ttl_propagate ? "en" : "dis");
+#endif
+
+	if (!LIST_ISEMPTY(route->nhs)) {
+		for (e = LIST_HEAD(route->nhs); e; ELEMENT_NEXT(e)) {
+			nh = ELEMENT_DATA(e);
+
+			op += (size_t)snprintf(op, (size_t)(buf_end - op), " nexthop");
+
+			if (nh->addr)
+				op += (size_t)snprintf(op, (size_t)(buf_end - op), " via inet%s %s",
+					nh->addr->ifa.ifa_family == AF_INET ? "" : "6",
+					ipaddresstos(NULL,nh->addr));
+			if (nh->ifp)
+				op += (size_t)snprintf(op, (size_t)(buf_end - op), " dev %s", nh->ifp->ifname);
+
+			if (nh->mask & IPROUTE_BIT_WEIGHT)
+				op += (size_t)snprintf(op, (size_t)(buf_end - op), " weight %d", nh->weight + 1);
+
+			if (nh->flags & RTNH_F_ONLINK)
+				op += (size_t)snprintf(op, (size_t)(buf_end - op), " onlink");
+
+			if (nh->realms) {
+				if (route->realms & 0xFFFF0000)
+					op += (size_t)snprintf(op, (size_t)(buf_end - op), " realms %" PRIu32 "/", nh->realms >> 16);
+				else
+					op += (size_t)snprintf(op, (size_t)(buf_end - op), " realm ");
+				op += (size_t)snprintf(op, (size_t)(buf_end - op), "%" PRIu32, nh->realms & 0xFFFF);
+			}
+#if HAVE_DECL_RTA_ENCAP
+			if (nh->encap.type != LWTUNNEL_ENCAP_NONE)
+				op += print_encap(op, (size_t)(buf_end - op), &nh->encap);
+#endif
+		}
 	}
 
-	log_message(LOG_INFO, "     %s", log_msg);
+	if (route->dont_track)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " no_track");
 
-	FREE(tmp);
-	FREE(log_msg);
+	if (route->track_group)
+		op += (size_t)snprintf(op, (size_t)(buf_end - op), " track_group %s", route->track_group->gname);
+
+	if (route->set &&
+	    !route->dont_track &&
+	    (!route->oif || route->oif->ifindex != route->configured_ifindex)) {
+		if ((ifp = if_get_by_ifindex(route->configured_ifindex)))
+			op += (size_t)snprintf(op, (size_t)(buf_end - op), " [dev %s]", ifp->ifname);
+		else
+			op += (size_t)snprintf(op, (size_t)(buf_end - op), " [installed ifindex %" PRIu32 "]", route->configured_ifindex);
+	}
 }
+
 void
-alloc_route(list rt_list, vector_t *strvec)
+dump_iproute(FILE *fp, const void *rt_data)
+{
+	const ip_route_t *route = rt_data;
+	char *buf = MALLOC(ROUTE_BUF_SIZE);
+	size_t len;
+	size_t i;
+
+	format_iproute(route, buf, ROUTE_BUF_SIZE);
+
+	if (fp)
+		conf_write(fp, "%*s%s", 5, "", buf);
+	else {
+		for (i = 0, len = strlen(buf); i < len; i += i ? MAX_LOG_MSG - 7 : MAX_LOG_MSG - 5)
+			conf_write(fp, "%*s%s", i ? 6 : 5, "", buf + i);
+	}
+
+	FREE(buf);
+}
+
+#if HAVE_DECL_RTA_ENCAP
+#if HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+static int parse_encap_mpls(const vector_t *strvec, unsigned int *i_ptr, encap_t *encap)
+{
+	const char *str;
+
+	encap->type = LWTUNNEL_ENCAP_MPLS;
+
+	if (*i_ptr >= vector_size(strvec)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "missing address for MPLS encapsulation");
+		return true;
+	}
+
+	str = strvec_slot(strvec, (*i_ptr)++);
+	if (parse_mpls_address(str, &encap->mpls)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "invalid mpls address %s for encapsulation", str);
+		return true;
+	}
+
+	return false;
+}
+#endif
+
+static int parse_encap_ip(const vector_t *strvec, unsigned int *i_ptr, encap_t *encap)
+{
+	unsigned int i = *i_ptr;
+	const char *str, *str1;
+
+	encap->type = LWTUNNEL_ENCAP_IP;
+
+	while (i + 1 < vector_size(strvec)) {
+		str = strvec_slot(strvec, i);
+		str1 = strvec_slot(strvec, i + 1);
+
+		if (!strcmp(str, "id")) {
+			if (get_u64(&encap->ip.id, str1, UINT64_MAX, "encap id %s value is invalid"))
+				goto err;
+			encap->flags |= IPROUTE_BIT_ENCAP_ID;
+		} else if (!strcmp(str, "dst")) {
+			if (encap->ip.dst)
+				FREE_PTR(encap->ip.dst);
+			encap->ip.dst = parse_ipaddress(NULL, str1, false);
+			if (!encap->ip.dst) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid encap ip dst %s", str1);
+				goto err;
+			}
+			if (encap->ip.dst->ifa.ifa_family != AF_INET) {
+				report_config_error(CONFIG_GENERAL_ERROR, "IPv6 address %s not valid for ip encapsulation", str1);
+				goto err;
+			}
+		} else if (!strcmp(str, "src")) {
+			if (encap->ip.src)
+				FREE_PTR(encap->ip.src);
+			encap->ip.src = parse_ipaddress(NULL, str1, false);
+			if (!encap->ip.src) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid encap ip src %s", str1);
+				goto err;
+			}
+			if (encap->ip.src->ifa.ifa_family != AF_INET) {
+				report_config_error(CONFIG_GENERAL_ERROR, "IPv6 address %s not valid for ip encapsulation", str1);
+				goto err;
+			}
+		} else if (!strcmp(str, "tos")) {
+			if (!find_rttables_dsfield(str1, &encap->ip.tos)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "dsfield %s not valid for ip encapsulation", str1);
+				goto err;
+			}
+			encap->flags |= IPROUTE_BIT_ENCAP_DSFIELD;
+		} else if (!strcmp(str, "ttl")) {
+			if (get_u8(&encap->ip.ttl, str1, UINT8_MAX, "ttl %s is not valid for ip encapsulation"))
+				goto err;
+			encap->flags |= IPROUTE_BIT_ENCAP_TTL;
+		} else if (!strcmp(str, "flags")) {
+			if (get_u16(&encap->ip.flags, str1, UINT16_MAX, "flags %s is not valid for ip encapsulation"))
+				goto err;
+			encap->flags |= IPROUTE_BIT_ENCAP_FLAGS;
+		} else
+			break;
+
+		i += 2;
+	}
+
+	if (!encap->ip.dst && !(encap->flags & IPROUTE_BIT_ENCAP_ID)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "address or id missing for ip encapsulation");
+		goto err;
+	}
+
+	*i_ptr = i;
+
+	return false;
+
+err:
+	*i_ptr = i;
+
+	if (encap->ip.dst) {
+		FREE_PTR(encap->ip.dst);
+		encap->ip.dst = NULL;
+	}
+	if (encap->ip.src){
+		FREE_PTR(encap->ip.src);
+		encap->ip.src = NULL;
+	}
+
+	return true;
+}
+
+#if HAVE_DECL_LWTUNNEL_ENCAP_ILA
+static
+int parse_encap_ila(const vector_t *strvec, unsigned int *i_ptr, encap_t *encap)
+{
+	const char *str;
+
+	encap->type = LWTUNNEL_ENCAP_ILA;
+
+	if (*i_ptr >= vector_size(strvec)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "missing locator for ILA encapsulation");
+		return true;
+	}
+
+	str = strvec_slot(strvec, (*i_ptr)++);
+
+	if (get_addr64(&encap->ila.locator, str)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "invalid locator %s for ila encapsulation", str);
+		return true;
+	}
+
+	return false;
+}
+#endif
+
+static
+int parse_encap_ip6(const vector_t *strvec, unsigned int *i_ptr, encap_t *encap)
+{
+	unsigned int i = *i_ptr;
+	const char *str, *str1;
+
+	encap->type = LWTUNNEL_ENCAP_IP6;
+
+	while (i + 1 < vector_size(strvec)) {
+		str = strvec_slot(strvec, i);
+		str1 = strvec_slot(strvec, i + 1);
+
+		if (!strcmp(str, "id")) {
+			if (get_u64(&encap->ip6.id, str1, UINT64_MAX, "id %s value invalid for IPv6 encapsulation"))
+				goto err;
+			encap->flags |= IPROUTE_BIT_ENCAP_ID;
+		} else if (!strcmp(str, "dst")) {
+			if (encap->ip6.dst)
+				FREE_PTR(encap->ip6.dst);
+			encap->ip6.dst = parse_ipaddress(NULL, str1, false);
+			if (!encap->ip6.dst) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid encap ip6 dst %s", str1);
+				goto err;
+			}
+			if (encap->ip6.dst->ifa.ifa_family != AF_INET6) {
+				report_config_error(CONFIG_GENERAL_ERROR, "IPv4 address %s not valid for ip6 encapsulation", str1);
+				goto err;
+			}
+		} else if (!strcmp(str, "src")) {
+			if (encap->ip6.src)
+				FREE_PTR(encap->ip6.src);
+			encap->ip6.src = parse_ipaddress(NULL, str1, false);
+			if (!encap->ip6.src) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid encap ip6 src %s", str1);
+				goto err;
+			}
+			if (encap->ip6.src->ifa.ifa_family != AF_INET6) {
+				report_config_error(CONFIG_GENERAL_ERROR, "IPv4 address %s not valid for ip6 encapsulation", str1);
+				goto err;
+			}
+		} else if (!strcmp(str, "tc")) {
+			if (!find_rttables_dsfield(str1, &encap->ip6.tc)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "tc value %s is invalid for ip6 encapsulation", str);
+				goto err;
+			}
+			encap->flags |= IPROUTE_BIT_ENCAP_DSFIELD;
+		} else if (!strcmp(str, "hoplimit")) {
+			if (get_u8(&encap->ip6.hoplimit, str1, UINT8_MAX, "Invalid hoplimit %s specified for ip6 encapsulation"))
+				goto err;
+			encap->flags |= IPROUTE_BIT_ENCAP_HOPLIMIT;
+		} else if (!strcmp(str, "flags")) {
+			if (get_u16(&encap->ip6.flags, str1, UINT16_MAX, "flags %s is not valid for ip6 encapsulation"))
+				goto err;
+			encap->flags |= IPROUTE_BIT_ENCAP_FLAGS;
+		} else
+			break;
+
+		i += 2;
+	}
+
+	if (!encap->ip.dst && !(encap->flags & IPROUTE_BIT_ENCAP_ID)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "address or id missing for ip6 encapsulation");
+		goto err;
+	}
+
+	*i_ptr = i;
+	return false;
+
+err:
+	*i_ptr = i;
+	if (encap->ip6.dst) {
+		FREE_PTR(encap->ip6.dst);
+		encap->ip6.dst = NULL;
+	}
+	if (encap->ip6.src) {
+		FREE_PTR(encap->ip6.src);
+		encap->ip6.src = NULL;
+	}
+
+	return true;
+}
+
+static bool
+parse_encap(const vector_t *strvec, unsigned int *i, encap_t *encap)
+{
+	const char *str;
+
+	if (vector_size(strvec) <= ++*i) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Missing encap type");
+		return false;
+	}
+
+	str = strvec_slot(strvec, (*i)++);
+
+	if (!strcmp(str, "ip"))
+		parse_encap_ip(strvec, i, encap);
+	else if (!strcmp(str, "ip6"))
+		parse_encap_ip6(strvec, i, encap);
+#if HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+	else if (!strcmp(str, "mpls"))
+		parse_encap_mpls(strvec, i, encap);
+#endif
+#if HAVE_DECL_LWTUNNEL_ENCAP_ILA
+	else if (!strcmp(str, "ila"))
+		parse_encap_ila(strvec, i, encap);
+#endif
+	else {
+		report_config_error(CONFIG_GENERAL_ERROR, "Unknown encap type - %s", str);
+		return false;
+	}
+
+	--*i;
+	return true;
+}
+#endif
+
+static void
+parse_nexthops(const vector_t *strvec, unsigned int i, ip_route_t *route)
+{
+	uint8_t family = AF_UNSPEC;
+	nexthop_t *new;
+	const char *str;
+	uint32_t val;
+
+	if (!LIST_EXISTS(route->nhs))
+		route->nhs = alloc_list(free_nh, NULL);
+
+	while (i < vector_size(strvec) && !strcmp("nexthop", strvec_slot(strvec, i))) {
+		i++;
+		new = MALLOC(sizeof(nexthop_t));
+
+		while (i < vector_size(strvec)) {
+			str = strvec_slot(strvec, i);
+
+			if (!strcmp(str, "via")) {
+				str = strvec_slot(strvec, ++i);
+				if (!strcmp(str, "inet")) {
+					family = AF_INET;
+					str = strvec_slot(strvec, ++i);
+				}
+				else if (!strcmp(str, "inet6")) {
+					family = AF_INET6;
+					str = strvec_slot(strvec, ++i);
+				}
+
+				if (family != AF_UNSPEC) {
+					if (route->family == AF_UNSPEC)
+						route->family = family;
+					else if (route->family != family) {
+						report_config_error(CONFIG_GENERAL_ERROR, "IPv4/6 mismatch for nexthop");
+						goto err;
+					}
+				}
+
+				new->addr = parse_ipaddress(NULL, str, false);
+				if (!new->addr) {
+					report_config_error(CONFIG_GENERAL_ERROR, "invalid nexthop address %s", str);
+					goto err;
+				}
+				if (route->family != AF_UNSPEC && new->addr->ifa.ifa_family != route->family) {
+					report_config_error(CONFIG_GENERAL_ERROR, "Address family mismatch for next hop");
+					goto err;
+				}
+				if (route->family == AF_UNSPEC)
+					route->family = new->addr->ifa.ifa_family;
+			}
+			else if (!strcmp(str, "dev")) {
+				str = strvec_slot(strvec, ++i);
+				new->ifp = if_get_by_ifname(str, IF_CREATE_IF_DYNAMIC);
+				if (!new->ifp) {
+					report_config_error(CONFIG_GENERAL_ERROR, "WARNING - interface %s for VROUTE nexthop doesn't exist", str);
+					goto err;
+				}
+			}
+			else if (!strcmp(str, "weight")) {
+				if (get_u32(&val, strvec_slot(strvec, ++i), 256, "Invalid weight %s specified for route"))
+					goto err;
+				if (!val) {
+					report_config_error(CONFIG_GENERAL_ERROR, "Invalid weight 0 specified for route");
+					goto err;
+				}
+				new->weight = (uint8_t)(--val & 0xff);
+				new->mask |= IPROUTE_BIT_WEIGHT;
+			}
+			else if (!strcmp(str, "onlink")) {
+				/* Note: IPv4 only */
+				new->flags |= RTNH_F_ONLINK;
+			}
+			else if (!strcmp(str, "encap")) {	// New in 4.4
+#if HAVE_DECL_RTA_ENCAP
+				parse_encap(strvec, &i, &new->encap);
+#else
+				report_config_error(CONFIG_GENERAL_ERROR, "%s not supported by kernel", "encap");
+#endif
+			}
+			else if (!strcmp(str, "realms")) {
+				/* Note: IPv4 only */
+				if (get_realms(&new->realms, strvec_slot(strvec, ++i))) {
+					report_config_error(CONFIG_GENERAL_ERROR, "Invalid realms %s for route", strvec_slot(strvec,i));
+					goto err;
+				}
+				if (route->family == AF_UNSPEC)
+					route->family = AF_INET;
+				else if (route->family != AF_INET) {
+					report_config_error(CONFIG_GENERAL_ERROR, "realms are only supported for IPv4");
+					goto err;
+				}
+			}
+			else if (!strcmp(str, "as")) {
+				if (!strcmp("to", strvec_slot(strvec, ++i)))
+					i++;
+				report_config_error(CONFIG_GENERAL_ERROR, "'as [to]' (nat) not supported");
+				goto err;
+			}
+			else
+				break;
+
+			i++;
+		}
+		list_add(route->nhs, new);
+		new = NULL;
+	}
+
+	if (i < vector_size(strvec)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Route has trailing nonsense after nexthops - %s", strvec_slot(strvec, i));
+		goto err;
+	}
+
+	return;
+
+err:
+	FREE_PTR(new);
+}
+
+void
+alloc_route(list rt_list, const vector_t *strvec, bool allow_track_group)
 {
 	ip_route_t *new;
-	char *str;
-	int i = 0;
+	const char *str;
+	uint32_t val;
+	uint8_t val8;
+	unsigned int i = 0;
+	bool do_nexthop = false;
+	bool raw;
+	uint8_t family;
+	const char *dest = NULL;
 
 	new = (ip_route_t *) MALLOC(sizeof(ip_route_t));
 
+	new->table = RT_TABLE_MAIN;
+	new->scope = RT_SCOPE_UNIVERSE;
+	new->type = RTN_UNICAST;
+	new->family = AF_UNSPEC;
+
 	/* FMT parse */
 	while (i < vector_size(strvec)) {
-		str = vector_slot(strvec, i);
+		str = strvec_slot(strvec, i);
 
 		/* cmd parsing */
-		if (!strcmp(str, "blackhole")) {
-			new->blackhole = 1;
-			new->dst = parse_ipaddress(NULL, vector_slot(strvec, ++i));
-			new->dmask = new->dst->ifa.ifa_prefixlen;
-		} else if (!strcmp(str, "via") || !strcmp(str, "gw")) {
-			new->gw = parse_ipaddress(NULL, vector_slot(strvec, ++i));
-		} else if (!strcmp(str, "or")) {
-			new->gw2 = parse_ipaddress(NULL, vector_slot(strvec, ++i));
-		} else if (!strcmp(str, "src")) {
-			new->src = parse_ipaddress(NULL, vector_slot(strvec, ++i));
-		} else if (!strcmp(str, "dev") || !strcmp(str, "oif")) {
-            strcpy (new->ifname, vector_slot(strvec, ++i));
-		} else if (!strcmp(str, "table")) {
-			new->table = atoi(vector_slot(strvec, ++i));
-		} else if (!strcmp(str, "metric")) {
-			new->metric = atoi(vector_slot(strvec, ++i));
-		} else if (!strcmp(str, "scope")) {
-			new->scope = netlink_scope_a2n(vector_slot(strvec, ++i));
-		} else {
-			if (!strcmp(str, "to")) i++;
-
-			new->dst = parse_ipaddress(NULL, vector_slot(strvec, i));
-			if (new->dst) {
-				new->dmask = new->dst->ifa.ifa_prefixlen;
+		if (!strcmp(str, "inet6")) {
+			if (new->family == AF_UNSPEC)
+				new->family = AF_INET6;
+			else if (new->family != AF_INET6) {
+				report_config_error(CONFIG_GENERAL_ERROR, "inet6 specified for IPv4 route");
+				goto err;
+			}
+			i++;
+		}
+		else if (!strcmp(str, "inet")) {
+			if (new->family == AF_UNSPEC)
+				new->family = AF_INET;
+			else if (new->family != AF_INET) {
+				report_config_error(CONFIG_GENERAL_ERROR, "inet specified for IPv6 route");
+				goto err;
+			}
+			i++;
+		}
+		else if (!strcmp(str, "src")) {
+			if (new->pref_src)
+				FREE(new->pref_src);
+			new->pref_src = parse_ipaddress(NULL, strvec_slot(strvec, ++i), false);
+			if (!new->pref_src) {
+				report_config_error(CONFIG_GENERAL_ERROR, "invalid route src address %s", strvec_slot(strvec, i));
+				goto err;
+			}
+			if (new->family == AF_UNSPEC)
+				new->family = new->pref_src->ifa.ifa_family;
+			else if (new->family != new->pref_src->ifa.ifa_family) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Cannot mix IPv4 and IPv6 addresses for route");
+				goto err;
+			}
+		}
+		else if (!strcmp(str, "as")) {
+			if (!strcmp("to", strvec_slot(strvec, ++i)))
+				i++;
+#if HAVE_DECL_RTA_NEWDST
+			report_config_error(CONFIG_GENERAL_ERROR, "\"as to\" for MPLS only - ignoring");
+#else
+			report_config_error(CONFIG_GENERAL_ERROR, "%s not supported by kernel", "'as [to]'");
+#endif
+		}
+		else if (!strcmp(str, "via") || !strcmp(str, "gw")) {
+
+			/* "gw" maintained for backward keepalived compatibility */
+			if (str[0] == 'g')	/* "gw" */
+				report_config_error(CONFIG_GENERAL_ERROR, "\"gw\" for routes is deprecated. Please use \"via\"");
+
+			str = strvec_slot(strvec, ++i);
+			if (!strcmp(str, "inet")) {
+				family = AF_INET;
+				str = strvec_slot(strvec, ++i);
+			}
+			else if (!strcmp(str, "inet6")) {
+				family = AF_INET6;
+				str = strvec_slot(strvec, ++i);
+			}
+			else
+				family = new->family;
+
+			if (new->family == AF_UNSPEC)
+				new->family = family;
+			else if (new->family != family) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Cannot mix IPv4 and IPv6 addresses for route");
+				goto err;
+			}
+
+			if (new->via)
+				FREE(new->via);
+			new->via = parse_ipaddress(NULL, str, false);
+			if (!new->via) {
+				report_config_error(CONFIG_GENERAL_ERROR, "invalid route via address %s", strvec_slot(strvec, i));
+				goto err;
+			}
+			if (new->family == AF_UNSPEC)
+				new->family = new->via->ifa.ifa_family;
+			else if (new->family != new->via->ifa.ifa_family) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Cannot mix IPv4 and IPv6 addresses for route");
+				goto err;
+			}
+		}
+		else if (!strcmp(str, "from")) {
+			if (new->src)
+				FREE(new->src);
+			new->src = parse_route(strvec_slot(strvec, ++i));
+			if (!new->src) {
+				report_config_error(CONFIG_GENERAL_ERROR, "invalid route from address %s", strvec_slot(strvec, i));
+				goto err;
+			}
+			if (new->src->ifa.ifa_family != AF_INET6) {
+				report_config_error(CONFIG_GENERAL_ERROR, "route from address only supported with IPv6 (%s)", strvec_slot(strvec, i));
+				goto err;
+			}
+			if (new->family == AF_UNSPEC)
+				new->family = new->src->ifa.ifa_family;
+			else if (new->family != new->src->ifa.ifa_family) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Cannot mix IPv4 and IPv6 addresses for route");
+				goto err;
+			}
+		}
+		else if (!strcmp(str, "tos") || !strcmp(str,"dsfield")) {
+			/* Note: IPv4 only */
+			if (!find_rttables_dsfield(strvec_slot(strvec, ++i), &val8)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "TOS value %s is invalid", strvec_slot(strvec, i));
+				goto err;
+			}
+
+			new->tos = val8;
+			new->mask |= IPROUTE_BIT_DSFIELD;
+		}
+		else if (!strcmp(str, "table")) {
+			if (!find_rttables_table(strvec_slot(strvec, ++i), &val)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Routing table %s not found for route", strvec_slot(strvec, i));
+				goto err;
+			}
+			new->table = val;
+		}
+		else if (!strcmp(str, "protocol")) {
+			if (!find_rttables_proto(strvec_slot(strvec, ++i), &val8)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Protocol %s not found or invalid for route", strvec_slot(strvec, i));
+				goto err;
+			}
+			new->protocol = val8;
+			new->mask |= IPROUTE_BIT_PROTOCOL;
+		}
+		else if (!strcmp(str, "scope")) {
+			/* Note: IPv4 only */
+			if (!find_rttables_scope(strvec_slot(strvec, ++i), &val8)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Scope %s not found or invalid for route", strvec_slot(strvec, i));
+				goto err;
+			}
+			new->scope = val8;
+			new->mask |= IPROUTE_BIT_SCOPE;
+		}
+		else if (!strcmp(str, "metric") ||
+			 !strcmp(str, "priority") ||
+			 !strcmp(str, "preference")) {
+			if (get_u32(&new->metric, strvec_slot(strvec, ++i), UINT32_MAX, "Invalid metric %s specified for route"))
+				goto err;
+			new->mask |= IPROUTE_BIT_METRIC;
+		}
+		else if (!strcmp(str, "dev") || !strcmp(str, "oif")) {
+			strcpy(new->ifname, strvec_slot(strvec, ++i));
+		}
+		else if (!strcmp(str, "onlink")) {
+			/* Note: IPv4 only */
+			new->flags |= RTNH_F_ONLINK;
+		}
+		else if (!strcmp(str, "encap")) {	// New in 4.4
+#if HAVE_DECL_RTA_ENCAP
+			parse_encap(strvec, &i, &new->encap);
+#else
+			report_config_error(CONFIG_GENERAL_ERROR, "%s not supported by kernel", "encap");
+#endif
+		}
+		else if (!strcmp(str, "expires")) {	// New in 4.4
+			i++;
+#if HAVE_DECL_RTA_EXPIRES
+			if (new->family == AF_INET) {
+				report_config_error(CONFIG_GENERAL_ERROR, "expires is only valid for IPv6");
+				goto err;
+			}
+			new->family = AF_INET6;
+			if (get_u32(&new->expires, strvec_slot(strvec, i), UINT32_MAX, "Invalid expires time %s specified for route"))
+				goto err;
+			new->mask |= IPROUTE_BIT_EXPIRES;
+#else
+			report_config_error(CONFIG_GENERAL_ERROR, "%s not supported by kernel", "expires");
+#endif
+		}
+		else if (!strcmp(str, "mtu")) {
+			if (!strcmp(strvec_slot(strvec, ++i), "lock")) {
+				new->lock |= 1 << RTAX_MTU;
+				i++;
+			}
+			if (get_u32(&new->mtu, strvec_slot(strvec, i), UINT32_MAX, "Invalid MTU %s specified for route"))
+				goto err;
+			new->mask |= IPROUTE_BIT_MTU;
+		}
+		else if (!strcmp(str, "hoplimit")) {
+			if (get_u8(&val8, strvec_slot(strvec, ++i), 255, "Invalid hoplimit %s specified for route"))
+				goto err;
+			new->hoplimit = val8;
+			new->mask |= IPROUTE_BIT_HOPLIMIT;
+		}
+		else if (!strcmp(str, "advmss")) {
+			if (!strcmp(strvec_slot(strvec, ++i), "lock")) {
+				new->lock |= 1 << RTAX_ADVMSS;
+				i++;
+			}
+			if (get_u32(&new->advmss, strvec_slot(strvec, i), UINT32_MAX, "Invalid advmss %s specified for route"))
+				goto err;
+			new->mask |= IPROUTE_BIT_ADVMSS;
+		}
+		else if (!strcmp(str, "rtt")) {
+			if (!strcmp(strvec_slot(strvec, ++i), "lock")) {
+				new->lock |= 1 << RTAX_RTT;
+				i++;
+			}
+			if (get_time_rtt(&new->rtt, strvec_slot(strvec, i), &raw) ||
+			    (!raw && new->rtt >= UINT32_MAX / 8)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid rtt %s for route", strvec_slot(strvec,i));
+				goto err;
+			}
+			if (raw)
+				new->rtt *= 8;
+			new->mask |= IPROUTE_BIT_RTT;
+		}
+		else if (!strcmp(str, "rttvar")) {
+			if (!strcmp(strvec_slot(strvec, ++i), "lock")) {
+				new->lock |= 1 << RTAX_RTTVAR;
+				i++;
+			}
+			if (get_time_rtt(&new->rttvar, strvec_slot(strvec, i), &raw) ||
+			    (!raw && new->rttvar >= UINT32_MAX / 4)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid rttvar %s for route", strvec_slot(strvec,i));
+				goto err;
+			}
+			if (raw)
+				new->rttvar *= 4;
+			new->mask |= IPROUTE_BIT_RTTVAR;
+		}
+		else if (!strcmp(str, "reordering")) {
+			if (!strcmp(strvec_slot(strvec, ++i), "lock")) {
+				new->lock |= 1 << RTAX_REORDERING;
+				i++;
+			}
+			if (get_u32(&new->reordering, strvec_slot(strvec, i), UINT32_MAX, "Invalid reordering value %s specified for route"))
+				goto err;
+			new->mask |= IPROUTE_BIT_REORDERING;
+		}
+		else if (!strcmp(str, "window")) {
+			if (get_u32(&new->window, strvec_slot(strvec, ++i), UINT32_MAX, "Invalid window value %s specified for route"))
+				goto err;
+			new->mask |= IPROUTE_BIT_WINDOW;
+		}
+		else if (!strcmp(str, "cwnd")) {
+			if (!strcmp(strvec_slot(strvec, ++i), "lock")) {
+				new->lock |= 1 << RTAX_CWND;
+				i++;
+			}
+			if (get_u32(&new->cwnd, strvec_slot(strvec, i), UINT32_MAX, "Invalid cwnd value %s specified for route"))
+				goto err;
+			new->mask |= IPROUTE_BIT_CWND;
+		}
+		else if (!strcmp(str, "ssthresh")) {
+			if (!strcmp(strvec_slot(strvec, ++i), "lock")) {
+				new->lock |= 1 << RTAX_SSTHRESH;
+				i++;
+			}
+			if (get_u32(&new->ssthresh, strvec_slot(strvec, i), UINT32_MAX, "Invalid ssthresh value %s specified for route"))
+				goto err;
+			new->mask |= IPROUTE_BIT_SSTHRESH;
+		}
+		else if (!strcmp(str, "realms")) {
+			if (get_realms(&new->realms, strvec_slot(strvec, ++i))) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid realms %s for route", strvec_slot(strvec,i));
+				goto err;
+			}
+			if (new->family == AF_INET6) {
+				report_config_error(CONFIG_GENERAL_ERROR, "realms are only valid for IPv4");
+				goto err;
+			}
+			new->family = AF_INET;
+		}
+		else if (!strcmp(str, "rto_min")) {
+			if (!strcmp(strvec_slot(strvec, ++i), "lock")) {
+				new->lock |= 1 << RTAX_RTO_MIN;
+				i++;
+			}
+			if (get_time_rtt(&new->rto_min, strvec_slot(strvec, i), &raw)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid rto_min value %s specified for route", strvec_slot(strvec, i));
+				goto err;
+			}
+			new->mask |= IPROUTE_BIT_RTO_MIN;
+		}
+		else if (!strcmp(str, "initcwnd")) {
+			if (get_u32(&new->initcwnd, strvec_slot(strvec, ++i), UINT32_MAX, "Invalid initcwnd value %s specified for route"))
+				goto err;
+			new->mask |= IPROUTE_BIT_INITCWND;
+		}
+		else if (!strcmp(str, "initrwnd")) {
+			i++;
+			if (get_u32(&new->initrwnd, strvec_slot(strvec, i), UINT32_MAX, "Invalid initrwnd value %s specified for route"))
+				goto err;
+			new->mask |= IPROUTE_BIT_INITRWND;
+		}
+		else if (!strcmp(str, "features")) {
+			i++;
+			if (!strcmp("ecn", strvec_slot(strvec, i)))
+				new->features |= RTAX_FEATURE_ECN;
+			else
+				report_config_error(CONFIG_GENERAL_ERROR, "feature %s not supported", strvec_slot(strvec,i));
+		}
+		else if (!strcmp(str, "quickack")) {
+			i++;
+#if HAVE_DECL_RTAX_QUICKACK
+			if (get_u32(&val, strvec_slot(strvec, i), 1, "Invalid quickack value %s specified for route"))
+				goto err;
+			new->quickack = val;
+			new->mask |= IPROUTE_BIT_QUICKACK;
+#else
+			report_config_error(CONFIG_GENERAL_ERROR, "%s not supported by kernel", "quickack for route");
+#endif
+		}
+		else if (!strcmp(str, "congctl")) {
+			i++;
+#if HAVE_DECL_RTAX_CC_ALGO
+			if (!strcmp(strvec_slot(strvec, i), "lock")) {
+				new->lock |= 1 << RTAX_CC_ALGO;
+				i++;
+			}
+			str = strvec_slot(strvec, i);
+			new->congctl = malloc(strlen(str) + 1);
+			strcpy(new->congctl, str);
+#else
+			report_config_error(CONFIG_GENERAL_ERROR, "%s not supported by kernel", "congctl for route");
+#endif
+		}
+		else if (!strcmp(str, "pref")) {
+			i++;
+#if HAVE_DECL_RTA_PREF
+			if (new->family == AF_INET) {
+				report_config_error(CONFIG_GENERAL_ERROR, "pref is only valid for IPv6");
+				goto err;
+			}
+			new->family = AF_INET6;
+			str = strvec_slot(strvec, i);
+			if (!strcmp(str, "low"))
+				new->pref = ICMPV6_ROUTER_PREF_LOW;
+			else if (!strcmp(str, "medium"))
+				new->pref = ICMPV6_ROUTER_PREF_MEDIUM;
+			else if (!strcmp(str, "high"))
+				new->pref = ICMPV6_ROUTER_PREF_HIGH;
+			else if (!get_u8(&val8, str, UINT8_MAX, "Invalid pref value %s specified for route"))
+				new->pref = val8;
+			else
+				goto err;
+			new->mask |= IPROUTE_BIT_PREF;
+#else
+			report_config_error(CONFIG_GENERAL_ERROR, "%s not supported by kernel", "pref");
+#endif
+		}
+		else if (!strcmp(str, "ttl-propagate")) {
+			i++;
+#if HAVE_DECL_RTA_TTL_PROPAGATE
+			str = strvec_slot(strvec, i);
+			if (!strcmp(str, "enabled"))
+				new->ttl_propagate = 1;
+			else if (!strcmp(str, "disabled"))
+				new->ttl_propagate = 0;
+			else
+				report_config_error(CONFIG_GENERAL_ERROR, "%s value %s not recognised", "ttl-propagate", str);
+			new->mask |= IPROUTE_BIT_TTL_PROPAGATE;
+#else
+			report_config_error(CONFIG_GENERAL_ERROR, "%s not supported by kernel", "ttl-propagate");
+#endif
+		}
+		else if (!strcmp(str, "fastopen_no_cookie")) {
+			i++;
+#if HAVE_DECL_RTAX_FASTOPEN_NO_COOKIE
+			if (get_u32(&val, strvec_slot(strvec, i), 1, "Invalid fastopen_no_cookie value %s specified for route"))
+				goto err;
+			new->fastopen_no_cookie = !!val;
+			new->mask |= IPROUTE_BIT_FASTOPEN_NO_COOKIE;
+#else
+			report_config_error(CONFIG_GENERAL_ERROR, "%s not supported by kernel", "fastopen_no_cookie");
+#endif
+		}
+		/* Maintained for backward compatibility */
+		else if (!strcmp(str, "or")) {
+			report_config_error(CONFIG_GENERAL_ERROR, "\"or\" for routes is deprecated. Please use \"nexthop\"");
+
+			if (new->nhs) {
+				report_config_error(CONFIG_GENERAL_ERROR, "\"or\" route already specified - ignoring subsequent");
+				i += 2;
+				continue;
+			}
+
+			new->nhs = alloc_list(free_nh, NULL);
+
+			/* Transfer the via address to the first nexthop */
+			nexthop_t *nh = MALLOC(sizeof(nexthop_t));
+			nh->addr = new->via;
+			new->via = NULL;
+			list_add(new->nhs, nh);
+
+			/* Now handle the "or" address */
+			nh = MALLOC(sizeof(nexthop_t));
+			nh->addr = parse_ipaddress(NULL, strvec_slot(strvec, ++i), false);
+			if (!nh->addr) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid \"or\" address %s", strvec_slot(strvec, i));
+				FREE(nh);
+				goto err;
+			}
+			list_add(new->nhs, nh);
+		}
+		else if (!strcmp(str, "nexthop")) {
+			if (new->nhs)
+				report_config_error(CONFIG_GENERAL_ERROR, "Cannot specify nexthops with \"or\" route");
+			else
+				do_nexthop = true;
+			break;
+		}
+		else if (!strcmp(str, "no_track"))
+			new->dont_track = true;
+		else if (allow_track_group && !strcmp(str, "track_group")) {
+			i++;
+			if (new->track_group) {
+				report_config_error(CONFIG_GENERAL_ERROR, "track_group %s is a duplicate", strvec_slot(strvec, i));
+				break;
+			}
+			if (!(new->track_group = find_track_group(strvec_slot(strvec, i))))
+				report_config_error(CONFIG_GENERAL_ERROR, "track_group %s not found", strvec_slot(strvec, i));
+		}
+		else {
+			if (!strcmp(str, "to"))
+				i++;
+
+			if (find_rttables_rtntype(str, &val8)) {
+				new->type = val8;
+				new->mask |= IPROUTE_BIT_TYPE;
+				i++;
+			}
+			if (new->dst)
+				FREE(new->dst);
+			dest = strvec_slot(strvec, i);
+			new->dst = parse_route(dest);
+			if (!new->dst) {
+				report_config_error(CONFIG_GENERAL_ERROR, "unknown route keyword %s", dest);
+				goto err;
+			}
+			if (new->family == AF_UNSPEC)
+				new->family = new->dst->ifa.ifa_family;
+			else if (new->family != new->dst->ifa.ifa_family) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Cannot mix IPv4 and IPv6 addresses for route (%s)", dest);
+				goto err;
 			}
 		}
 		i++;
 	}
 
+	if (do_nexthop)
+		parse_nexthops(strvec, i, new);
+	else if (i < vector_size(strvec)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Route has trailing nonsense - %s", strvec_slot(strvec, i));
+		goto err;
+	}
+
+	if (!new->dst) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Route must have a destination");
+		goto err;
+	}
+
+	if (!new->dont_track) {
+		if ((new->mask & IPROUTE_BIT_PROTOCOL) && new->protocol != RTPROT_KEEPALIVED)
+			report_config_error(CONFIG_GENERAL_ERROR, "Route cannot be tracked if protocol is not RTPROT_KEEPALIVED(%d), resetting protocol", RTPROT_KEEPALIVED);
+		new->protocol = RTPROT_KEEPALIVED;
+		new->mask |= IPROUTE_BIT_PROTOCOL;
+
+		if (!new->oif) {
+			/* Alternative is to track oif from when route last added.
+			 * The interface will need to be added temporarily. tracking_vrrp_t will need
+			 * a flag to specify permanent track, and a counter for number of temporary
+			 * trackers. If the termporary tracker count becomes 0 and there is no permanent
+			 * track, then the tracking_vrrp_t will need to be removed.
+			 *
+			 * We also have a problem if using nexthop, since the route will only be deleted
+			 * when the interfaces for all of the hops have gone down. We would need to track
+			 * all of the interfaces being used, and only mark the route as down if all the
+			 * interfaces are down. */
+			report_config_error(CONFIG_GENERAL_ERROR, "Warning - cannot track route %s with no interface specified, not tracking", dest);
+			new->dont_track = true;
+		}
+	}
+
+	if (new->track_group && !new->oif) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Static route cannot have track group if no oif specified");
+		new->track_group = NULL;
+	}
+
+	/* Check that family is set */
+	if (new->family == AF_UNSPEC)
+		new->family = AF_INET;
+	if (new->dst->ifa.ifa_family == AF_UNSPEC)
+		new->dst->ifa.ifa_family = new->family;
+	if (new->src && new->src->ifa.ifa_family == AF_UNSPEC)
+		new->src->ifa.ifa_family = new->family;
+
 	list_add(rt_list, new);
+
+	return;
+
+err:
+	free_iproute(new);
 }
 
 /* Try to find a route in a list */
-int
+static ip_route_t *
 route_exist(list l, ip_route_t *iproute)
 {
 	ip_route_t *ipr;
 	element e;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		ipr = ELEMENT_DATA(e); 
-		if (ROUTE_ISEQ(ipr, iproute)) {
+	LIST_FOREACH(l, ipr, e) {
+		/* The kernel's key to a route is (to, tos, preference, table) */
+		if (IP_ISEQ(ipr->dst, iproute->dst) &&
+		    ipr->dst->ifa.ifa_prefixlen == iproute->dst->ifa.ifa_prefixlen &&
+		    (!((ipr->mask ^ iproute->mask) & IPROUTE_BIT_METRIC)) &&
+		    (!(ipr->mask & IPROUTE_BIT_METRIC) ||
+		     ipr->metric == iproute->metric) &&
+		    ipr->table == iproute->table) {
 			ipr->set = iproute->set;
-			return 1;
+			return ipr;
 		}
 	}
-	return 0;
+	return NULL;
 }
 
 /* Clear diff routes */
 void
 clear_diff_routes(list l, list n)
 {
-	ip_route_t *iproute;
-	char *tmp_str;
+	ip_route_t *iproute, *new_iproute;
 	element e;
 
 	/* No route in previous conf */
 	if (LIST_ISEMPTY(l))
 		return;
 
-	/* All Static routes removed */
+	/* All routes removed */
 	if (LIST_ISEMPTY(n)) {
 		log_message(LOG_INFO, "Removing a VirtualRoute block");
 		netlink_rtlist(l, IPROUTE_DEL);
 		return;
 	}
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		iproute = ELEMENT_DATA(e);
-		if (!route_exist(n, iproute) && iproute->set) {
-			tmp_str = ipaddresstos(iproute->dst);
-			log_message(LOG_INFO, "ip route %s/%d ... , no longer exist"
-					    , tmp_str, iproute->dmask);
-			FREE(tmp_str);
-			netlink_route(iproute, IPROUTE_DEL);
+	LIST_FOREACH(l, iproute, e) {
+		if (iproute->set) {
+			if (!(new_iproute = route_exist(n, iproute))) {
+				log_message(LOG_INFO, "ip route %s/%d ... , no longer exist"
+						    , ipaddresstos(NULL, iproute->dst), iproute->dst->ifa.ifa_prefixlen);
+				netlink_route(iproute, IPROUTE_DEL);
+			}
+			else {
+				/* There are too many route options to compare to see if the
+				 * routes are the same or not, so just replace the existing route
+				 * with the new one.
+				 * We try replacing the route, but if, for example, it has a src
+				 * address that is a new VIP, then the route won't be able to be
+				 * added (replaced) now. In this case delete the old route, mark
+				 * it as not set, and then it will be added later when any new
+				 * routes are added. */
+				netlink_error_ignore = EINVAL;
+				if (netlink_route(new_iproute, IPROUTE_REPLACE)) {
+					netlink_error_ignore = 0;
+					netlink_route(iproute, IPROUTE_DEL);
+					new_iproute->set = false;
+				} else
+					netlink_error_ignore = 0;
+			}
 		}
 	}
 }
@@ -318,3 +1741,14 @@ clear_diff_sroutes(void)
 {
 	clear_diff_routes(old_vrrp_data->static_routes, vrrp_data->static_routes);
 }
+
+void
+reinstate_static_route(ip_route_t *route)
+{
+	char buf[256];
+
+	route->set = !netlink_route(route, IPROUTE_ADD);
+
+	format_iproute(route, buf, sizeof(buf));
+	log_message(LOG_INFO, "Restoring deleted static route %s", buf);
+}
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_iprule.c b/tools/keepalived/keepalived/vrrp/vrrp_iprule.c
new file mode 100644
index 000000000..becd271ed
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_iprule.c
@@ -0,0 +1,928 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        NETLINK IPv4 rules manipulation.
+ *
+ * Author:      Chris Riley, <kernelchris@gmail.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2015 Chris Riley, <kernelchris@gmail.com>
+ * Copyright (C) 2016-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+/* global includes */
+#include <errno.h>
+#ifdef NETLINK_H_NEEDS_SYS_SOCKET_H
+#include <sys/socket.h>
+#endif
+#include <linux/fib_rules.h>
+#include <inttypes.h>
+#include <stdlib.h>
+#include <stdint.h>
+#include <stdio.h>
+#if HAVE_DECL_FRA_IP_PROTO
+#include <netdb.h>
+#include <inttypes.h>
+#endif
+#include <ctype.h>
+
+/* local include */
+#include "vrrp_iproute.h"
+#include "vrrp_iprule.h"
+#include "keepalived_netlink.h"
+#include "vrrp_data.h"
+#include "logger.h"
+#include "memory.h"
+#include "utils.h"
+#include "rttables.h"
+#include "vrrp_ip_rule_route_parser.h"
+#include "parser.h"
+
+/* Since we will be adding and deleting rules in potentially random
+ * orders due to master/backup transitions, we therefore need to
+ * pre-allocate priorities to ensure the rules are added in a consistent
+ * sequence. Really the configuration should specify a priority for each
+ * rule to ensure they are configured in the order the user wants. */
+#define RULE_START_PRIORITY 16384
+static unsigned next_rule_priority_ipv4 = RULE_START_PRIORITY;
+static unsigned next_rule_priority_ipv6 = RULE_START_PRIORITY;
+
+/* Utility functions */
+static inline bool
+rule_is_equal(const ip_rule_t *x, const ip_rule_t *y)
+{
+	if (x->mask != y->mask ||
+	    x->invert != y->invert ||
+	    !IP_ISEQ(x->from_addr, y->from_addr) ||
+	    !IP_ISEQ(x->to_addr, y->to_addr) ||
+	    x->priority != y->priority ||
+	    x->tos != y->tos ||
+	    x->fwmark != y->fwmark ||
+	    x->fwmask != y->fwmask ||
+	    x->realms != y->realms ||
+#if HAVE_DECL_FRA_SUPPRESS_PREFIXLEN
+	    x->suppress_prefix_len != y->suppress_prefix_len ||
+#endif
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+	    x->suppress_group != y->suppress_group ||
+#endif
+#if HAVE_DECL_FRA_TUN_ID
+	    x->tunnel_id != y->tunnel_id ||
+#endif
+#if HAVE_DECL_FRA_UID_RANGE
+	    x->uid_range.start != y->uid_range.start ||
+	    x->uid_range.end != y->uid_range.end ||
+#endif
+#if HAVE_DECL_FRA_L3MDEV
+	    x->l3mdev != y->l3mdev ||
+#endif
+	    x->iif != y->iif ||
+#if HAVE_DECL_FRA_OIFNAME
+	    x->oif != y->oif ||
+#endif
+#if HAVE_DECL_FRA_PROTOCOL
+	    x->protocol != y->protocol ||
+#endif
+#if HAVE_DECL_FRA_IP_PROTO
+	    x->ip_proto != y->ip_proto ||
+#endif
+#if HAVE_DECL_FRA_SPORT_RANGE
+	    x->src_port.start != y->src_port.start ||
+	    x->src_port.end != y->src_port.end ||
+#endif
+#if HAVE_DECL_FRA_DPORT_RANGE
+	    x->dst_port.start != y->dst_port.start ||
+	    x->dst_port.end != y->dst_port.end ||
+#endif
+	    x->goto_target != y->goto_target ||
+	    x->table != y->table ||
+	    x->action != y->action)
+		return false;
+
+	return true;
+}
+
+#if HAVE_DECL_FRA_IP_PROTO
+static int
+inet_proto_a2n(const char *buf)
+{
+	struct protoent *pe;
+	unsigned long proto_num;
+	char *endptr;
+
+	/* Skip white space */
+	buf += strspn(buf, WHITE_SPACE);
+
+	if (!*buf || *buf == '-')
+		return -1;
+
+	proto_num = strtoul(buf, &endptr, 10);
+	if (proto_num > INT8_MAX)
+		return -1;
+	if (!*endptr)
+		return proto_num;
+
+	pe = getprotobyname(buf);
+	endprotoent();
+
+	if (pe)
+		return pe->p_proto;
+
+	return -1;
+}
+#endif
+
+/* Add/Delete IP rule to/from a specific IP/network */
+static int
+netlink_rule(ip_rule_t *iprule, int cmd)
+{
+	int status = 1;
+	struct {
+		struct nlmsghdr n;
+		struct fib_rule_hdr frh;
+		char buf[1024];
+	} req;
+
+	memset(&req, 0, sizeof (req));
+
+	req.n.nlmsg_len = NLMSG_LENGTH(sizeof(struct rtmsg));
+	req.n.nlmsg_flags = NLM_F_REQUEST;
+
+	if (cmd != IPRULE_DEL) {
+		req.n.nlmsg_flags |= NLM_F_CREATE | NLM_F_EXCL;
+		req.n.nlmsg_type = RTM_NEWRULE;
+		req.frh.action = FR_ACT_UNSPEC;
+	}
+	else {
+		req.frh.action = FR_ACT_UNSPEC;
+		req.n.nlmsg_type = RTM_DELRULE;
+	}
+	req.frh.table = RT_TABLE_UNSPEC;
+	req.frh.flags = 0;
+	req.frh.tos = iprule->tos;	// Hex value - 0xnn <= 255, or name from rt_dsfield
+	req.frh.family = iprule->family;
+
+	if (iprule->action == FR_ACT_TO_TBL
+#if HAVE_DECL_FRA_L3MDEV
+	    && !iprule->l3mdev
+#endif
+					   ) {
+		if (iprule->table < 256)	// "Table" or "lookup"
+			req.frh.table = iprule->table ? iprule->table & 0xff : RT_TABLE_MAIN;
+		else {
+			req.frh.table = RT_TABLE_UNSPEC;
+			addattr32(&req.n, sizeof(req), FRA_TABLE, iprule->table);
+		}
+	}
+
+	if (iprule->invert)
+		req.frh.flags |= FIB_RULE_INVERT;	// "not"
+
+	/* Set rule entry */
+	if (iprule->from_addr) {	// can be "default"/"any"/"all" - and to addr => bytelen == bitlen == 0
+		add_addr2req(&req.n, sizeof(req), FRA_SRC, iprule->from_addr);
+		req.frh.src_len = iprule->from_addr->ifa.ifa_prefixlen;
+	}
+	if (iprule->to_addr) {
+		add_addr2req(&req.n, sizeof(req), FRA_DST, iprule->to_addr);
+		req.frh.dst_len = iprule->to_addr->ifa.ifa_prefixlen;
+	}
+
+	if (iprule->mask & IPRULE_BIT_PRIORITY)	// "priority/order/preference"
+		addattr32(&req.n, sizeof(req), FRA_PRIORITY, iprule->priority);
+
+	if (iprule->mask & IPRULE_BIT_FWMARK)	// "fwmark"
+		addattr32(&req.n, sizeof(req), FRA_FWMARK, iprule->fwmark);
+
+	if (iprule->mask & IPRULE_BIT_FWMASK)	// "fwmark number followed by /nn"
+		addattr32(&req.n, sizeof(req), FRA_FWMASK, iprule->fwmask);
+
+	if (iprule->realms)	// "realms u16[/u16] using rt_realms. after / is 16 msb (src), pre slash is 16 lsb (dest)"
+		addattr32(&req.n, sizeof(req), FRA_FLOW, iprule->realms);
+
+#if HAVE_DECL_FRA_SUPPRESS_PREFIXLEN
+	if (iprule->suppress_prefix_len != -1)	// "suppress_prefixlength" - only valid if table != 0
+		addattr32(&req.n, sizeof(req), FRA_SUPPRESS_PREFIXLEN, iprule->suppress_prefix_len);
+#endif
+
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+	if (iprule->mask & IPRULE_BIT_SUP_GROUP)	// "suppress_ifgroup" or "sup_group" int32 - only valid if table !=0
+		addattr32(&req.n, sizeof(req), FRA_SUPPRESS_IFGROUP, iprule->suppress_group);
+#endif
+
+	if (iprule->iif)	// "dev/iif"
+		addattr_l(&req.n, sizeof(req), FRA_IFNAME, iprule->iif, strlen(iprule->iif->ifname)+1);
+
+#if HAVE_DECL_FRA_OIFNAME
+	if (iprule->oif)	// "oif"
+		addattr_l(&req.n, sizeof(req), FRA_OIFNAME, iprule->oif, strlen(iprule->oif->ifname)+1);
+#endif
+
+#if HAVE_DECL_FRA_TUN_ID
+	if (iprule->tunnel_id)
+		addattr64(&req.n, sizeof(req), FRA_TUN_ID, htobe64(iprule->tunnel_id));
+#endif
+
+#if HAVE_DECL_FRA_UID_RANGE
+	if (iprule->mask & IPRULE_BIT_UID_RANGE)
+		addattr_l(&req.n, sizeof(req), FRA_UID_RANGE, &iprule->uid_range, sizeof(iprule->uid_range));
+#endif
+
+#if HAVE_DECL_FRA_L3MDEV
+	if (iprule->l3mdev)
+		addattr8(&req.n, sizeof(req), FRA_L3MDEV, 1);
+#endif
+
+#if HAVE_DECL_FRA_PROTOCOL
+	if (iprule->mask & IPRULE_BIT_PROTOCOL)
+		addattr8(&req.n, sizeof(req), FRA_PROTOCOL, iprule->protocol);
+#endif
+
+#if HAVE_DECL_FRA_IP_PROTO
+	if (iprule->mask & IPRULE_BIT_IP_PROTO)
+		addattr8(&req.n, sizeof(req), FRA_IP_PROTO, iprule->ip_proto);
+#endif
+
+#if HAVE_DECL_FRA_SPORT_RANGE
+	if (iprule->mask & IPRULE_BIT_SPORT_RANGE)
+		addattr_l(&req.n, sizeof(req), FRA_SPORT_RANGE, &iprule->src_port, sizeof(iprule->src_port));
+#endif
+
+#if HAVE_DECL_FRA_DPORT_RANGE
+	if (iprule->mask & IPRULE_BIT_DPORT_RANGE)
+		addattr_l(&req.n, sizeof(req), FRA_DPORT_RANGE, &iprule->dst_port, sizeof(iprule->dst_port));
+#endif
+
+	if (iprule->action == FR_ACT_GOTO) {	// "goto"
+		addattr32(&req.n, sizeof(req), FRA_GOTO, iprule->goto_target);
+		req.frh.action = FR_ACT_GOTO;
+	}
+
+	req.frh.action = iprule->action;
+
+	if (netlink_talk(&nl_cmd, &req.n) < 0)
+		status = -1;
+
+	return status;
+}
+
+void
+reinstate_static_rule(ip_rule_t *rule)
+{
+	char buf[256];
+
+	rule->set = (netlink_rule(rule, IPRULE_ADD) > 0);
+
+	format_iprule(rule, buf, sizeof(buf));
+	log_message(LOG_INFO, "Restoring deleted static rule %s", buf);
+}
+
+void
+netlink_rulelist(list rule_list, int cmd, bool force)
+{
+	ip_rule_t *iprule;
+	element e;
+
+	/* No rules to add */
+	if (LIST_ISEMPTY(rule_list))
+		return;
+
+	/* If force is set, we try to remove all the rules, but the
+	 * rule might not exist. That's not an error, so indicate not
+	 * to report such a situation */
+	if (force && cmd == IPRULE_DEL)
+		netlink_error_ignore = ENOENT;
+
+	for (e = LIST_HEAD(rule_list); e; ELEMENT_NEXT(e)) {
+		iprule = ELEMENT_DATA(e);
+		if (force ||
+		    (cmd == IPRULE_ADD && !iprule->set) ||
+		    (cmd == IPRULE_DEL && iprule->set)) {
+			if (netlink_rule(iprule, cmd) > 0)
+				iprule->set = (cmd == IPRULE_ADD);
+			else
+				iprule->set = false;
+		}
+	}
+
+	netlink_error_ignore = 0;
+}
+
+/* Rule dump/allocation */
+void
+free_iprule(void *rule_data)
+{
+	ip_rule_t *rule = rule_data;
+
+	FREE_PTR(rule->from_addr);
+	FREE_PTR(rule->to_addr);
+	FREE(rule_data);
+}
+
+void
+format_iprule(const ip_rule_t *rule, char *buf, size_t buf_len)
+{
+	char *op = buf;
+	char *buf_end = buf + buf_len;
+
+	if (!rule->to_addr && !rule->from_addr && rule->family == AF_INET6)
+		op += snprintf(op, (size_t)(buf_end - op), "inet6 ");
+
+	if (rule->invert)
+		op += snprintf(op, (size_t)(buf_end - op), "not ");
+
+	if (rule->from_addr)
+		op += snprintf(op, (size_t)(buf_end - op), "from %s", ipaddresstos(NULL, rule->from_addr));
+	else
+		op += snprintf(op, (size_t)(buf_end - op), "from all" );
+
+	if (rule->to_addr)
+		op += snprintf(op, (size_t)(buf_end - op), " to %s", ipaddresstos(NULL, rule->to_addr));
+
+	if (rule->mask & IPRULE_BIT_PRIORITY)
+		op += snprintf(op, (size_t)(buf_end - op), " priority %u", rule->priority);
+
+	op += snprintf(op, (size_t)(buf_end - op), " tos 0x%x", rule->tos);
+
+	if (rule->mask & (IPRULE_BIT_FWMARK | IPRULE_BIT_FWMASK)) {
+		op += snprintf(op, (size_t)(buf_end - op), " fwmark 0x%x", rule->fwmark);
+
+		if (rule->mask & IPRULE_BIT_FWMASK && rule->fwmask != 0xffffffff)
+			op += snprintf(op, (size_t)(buf_end - op), "/0x%x", rule->fwmask);
+	}
+
+	if (rule->iif)
+#if HAVE_DECL_FRA_OIFNAME
+		op += snprintf(op, (size_t)(buf_end - op), " iif %s", rule->iif->ifname);
+#else
+		op += snprintf(op, (size_t)(buf_end - op), " dev %s", rule->iif->ifname);
+#endif
+
+#if HAVE_DECL_FRA_OIFNAME
+	if (rule->oif)
+		op += snprintf(op, (size_t)(buf_end - op), " oif %s", rule->oif->ifname);
+#endif
+
+#if HAVE_DECL_FRA_SUPPRESS_PREFIXLEN
+	if (rule->suppress_prefix_len != -1)
+		op += snprintf(op, (size_t)(buf_end - op), " suppress_prefixlen %" PRIi32, rule->suppress_prefix_len);
+#endif
+
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+	if (rule->mask & IPRULE_BIT_SUP_GROUP)
+		op += snprintf(op, (size_t)(buf_end - op), " suppress_ifgroup %" PRIu32, rule->suppress_group);
+#endif
+
+#if HAVE_DECL_FRA_TUN_ID
+	if (rule->tunnel_id)
+		op += snprintf(op, (size_t)(buf_end - op), " tunnel-id %" PRIu64, rule->tunnel_id);
+#endif
+
+#if HAVE_DECL_FRA_UID_RANGE
+	if (rule->mask & IPRULE_BIT_UID_RANGE)
+		op += snprintf(op, (size_t)(buf_end - op), " uidrange %" PRIu32 "-%" PRIu32, rule->uid_range.start, rule->uid_range.end);
+#endif
+
+#if HAVE_DECL_FRA_L3MDEV
+	if (rule->l3mdev)
+		op += snprintf(op, (size_t)(buf_end - op), " l3mdev");
+#endif
+
+#if HAVE_DECL_FRA_PROTOCOL
+	if (rule->mask & IPRULE_BIT_PROTOCOL)
+		op += snprintf(op, (size_t)(buf_end - op), " protocol %u", rule->protocol);
+#endif
+
+#if HAVE_DECL_FRA_IP_PROTO
+	if (rule->mask & IPRULE_BIT_IP_PROTO)
+		op += snprintf(op, (size_t)(buf_end - op), " ipproto %u", rule->ip_proto);
+#endif
+
+#if HAVE_DECL_FRA_SPORT_RANGE
+	if (rule->mask & IPRULE_BIT_SPORT_RANGE)
+		op += snprintf(op, (size_t)(buf_end - op), " sport %hu-%hu", rule->src_port.start, rule->src_port.end);
+#endif
+
+#if HAVE_DECL_FRA_DPORT_RANGE
+	if (rule->mask & IPRULE_BIT_DPORT_RANGE)
+		op += snprintf(op, (size_t)(buf_end - op), " dport %hu-%hu", rule->dst_port.start, rule->dst_port.end);
+#endif
+
+	if (rule->realms)
+		op += snprintf(op, (size_t)(buf_end - op), " realms %" PRIu32 "/%u", rule->realms >> 16, rule->realms & 0xffff);
+
+	if (rule->action == FR_ACT_TO_TBL)
+		op += snprintf(op, (size_t)(buf_end - op), " lookup %u", rule->table);
+	else if (rule->action == FR_ACT_GOTO)
+		op += snprintf(op, (size_t)(buf_end - op), " goto %u", rule->goto_target);
+	else if (rule->action == FR_ACT_NOP)
+		op += snprintf(op, (size_t)(buf_end - op), " nop");
+	else
+		op += snprintf(op, (size_t)(buf_end - op), " type %s", get_rttables_rtntype(rule->action));
+	if (rule->dont_track)
+		op += snprintf(op, (size_t)(buf_end - op), " no_track");
+	if (rule->track_group)
+		op += snprintf(op, (size_t)(buf_end - op), " track_group %s", rule->track_group->gname);
+}
+
+void
+dump_iprule(FILE *fp, const void *rule_data)
+{
+	const ip_rule_t *rule = rule_data;
+	char *buf = MALLOC(RULE_BUF_SIZE);
+
+	format_iprule(rule, buf, RULE_BUF_SIZE);
+
+	conf_write(fp, "     %s", buf);
+
+	FREE(buf);
+}
+
+void
+alloc_rule(list rule_list, const vector_t *strvec, __attribute__((unused)) bool allow_track_group)
+{
+	ip_rule_t *new;
+	const char *str;
+	unsigned int i = 0;
+	unsigned long val, val1;
+	unsigned val_unsigned;
+	uint32_t uval32;
+	uint8_t uval8;
+	int family = AF_UNSPEC;
+	interface_t *ifp;
+	char *end;
+	bool table_option = false;
+
+	new = (ip_rule_t *)MALLOC(sizeof(ip_rule_t));
+	if (!new) {
+		log_message(LOG_INFO, "Unable to allocate new rule");
+		goto err;
+	}
+
+	new->action = FR_ACT_UNSPEC;
+#if HAVE_DECL_FRA_SUPPRESS_PREFIXLEN
+	new->suppress_prefix_len = -1;
+#endif
+
+	/* FMT parse */
+	while (i < vector_size(strvec)) {
+		str = strvec_slot(strvec, i);
+
+		/* Check if inet4/6 specified */
+		if (!strcmp(str, "inet6")) {
+			if (family == AF_UNSPEC)
+				family = AF_INET6;
+			else if (family != AF_INET6) {
+				report_config_error(CONFIG_GENERAL_ERROR, "inet6 specified for IPv4 rule");
+				goto err;
+			}
+			i++;
+		}
+		else if (!strcmp(str, "inet")) {
+			if (family == AF_UNSPEC)
+				family = AF_INET;
+			else if (family != AF_INET) {
+				report_config_error(CONFIG_GENERAL_ERROR, "inet specified for IPv6 rule");
+				goto err;
+			}
+			i++;
+		}
+		else if (!strcmp(str, "from")) {
+			if (new->from_addr)
+				FREE(new->from_addr);
+			new->from_addr = parse_route(strvec_slot(strvec, ++i));
+			if (!new->from_addr) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid rule from address %s", strvec_slot(strvec, i));
+				goto err;
+			}
+			if (family == AF_UNSPEC)
+				family = new->from_addr->ifa.ifa_family;
+			else if (new->from_addr->ifa.ifa_family != family)
+			{
+				report_config_error(CONFIG_GENERAL_ERROR, "rule specification has mixed IPv4 and IPv6");
+				goto err;
+			}
+		}
+		else if (!strcmp(str, "to")) {
+			if (new->to_addr)
+				FREE(new->to_addr);
+			new->to_addr = parse_route(strvec_slot(strvec, ++i));
+			if (!new->to_addr) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid rule to address %s", strvec_slot(strvec, i));
+				goto err;
+			}
+			if (family == AF_UNSPEC)
+				family = new->to_addr->ifa.ifa_family;
+			else if (new->to_addr->ifa.ifa_family != family)
+			{
+				report_config_error(CONFIG_GENERAL_ERROR, "rule specification has mixed IPv4 and IPv6");
+				goto err;
+			}
+		}
+		else if (!strcmp(str, "table") ||
+			 !strcmp(str, "lookup")) {
+			if (!find_rttables_table(strvec_slot(strvec, ++i), &uval32)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Routing table %s not found for rule", strvec_slot(strvec, i));
+				goto err;
+			}
+			if (uval32 == 0) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Table 0 is not valid");
+				goto err;
+			}
+			new->table = uval32;
+			if (new->action != FR_ACT_UNSPEC) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Cannot specify more than one of table/nop/goto/blackhole/prohibit/unreachable for rule");
+				goto err;
+			}
+			new->action = FR_ACT_TO_TBL;
+		}
+		else if (!strcmp(str,"not"))
+			new->invert = true;
+		else if (!strcmp(str, "preference") ||
+			 !strcmp(str, "order") ||
+			 !strcmp(str, "priority")) {
+			if (!read_unsigned_base_strvec(strvec, ++i, 0, &val_unsigned, 0, UINT32_MAX, false)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid rule preference %s specified", str);
+				goto err;
+			}
+
+			new->priority = (uint32_t)val_unsigned;
+			new->mask |= IPRULE_BIT_PRIORITY;
+		}
+		else if (!strcmp(str, "tos") || !strcmp(str, "dsfield")) {
+			if (!find_rttables_dsfield(strvec_slot(strvec, ++i), &uval8)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "TOS value %s is invalid", strvec_slot(strvec, i));
+				goto err;
+			}
+
+			new->tos = uval8;
+		}
+		else if (!strcmp(str, "fwmark")) {
+			str = strvec_slot(strvec, ++i);
+			str += strspn(str, WHITE_SPACE);
+			if (str[0] == '-')
+				goto fwmark_err;
+			val = strtoul(str, &end, 0);
+			if (val > UINT32_MAX)
+				goto fwmark_err;
+
+			if (*end == '/') {
+				if (isspace(end[1]) || end[1] == '-')
+					goto fwmark_err;
+
+				val1 = strtoul(end + 1, &end, 0);
+				if (val1 > UINT32_MAX)
+					goto fwmark_err;
+				new->mask |= IPRULE_BIT_FWMASK;
+			}
+			else
+				val1 = 0;
+
+			if (*end)
+				goto fwmark_err;
+
+			new->fwmark = (uint32_t)val;
+			new->fwmask = (uint32_t)val1;
+			new->mask |= IPRULE_BIT_FWMARK;
+
+			if (true) {
+			} else {
+fwmark_err:
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid rule fwmark %s specified", str);
+				new->mask &= (uint32_t)~IPRULE_BIT_FWMASK;
+				goto err;
+			}
+		}
+		else if (!strcmp(str, "realms")) {
+			str = strvec_slot(strvec, ++i);
+			if (get_realms(&uval32, str)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "invalid realms %s for rule", strvec_slot(strvec, i));
+				goto err;
+			}
+
+			new->realms = uval32;
+			table_option = true;
+			if (family == AF_UNSPEC)
+				family = AF_INET;
+			else if (family != AF_INET) {
+				report_config_error(CONFIG_GENERAL_ERROR, "realms is only valid for IPv4");
+				goto err;
+			}
+		}
+#if HAVE_DECL_FRA_SUPPRESS_PREFIXLEN
+		else if (!strcmp(str, "suppress_prefixlength") || !strcmp(str, "sup_pl")) {
+			if (!read_unsigned_strvec(strvec, ++i, &val_unsigned, 0, INT32_MAX, false)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid suppress_prefixlength %s specified", str);
+				goto err;
+			}
+			new->suppress_prefix_len = (int32_t)val_unsigned;
+			table_option = true;
+		}
+#endif
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+		else if (!strcmp(str, "suppress_ifgroup") || !strcmp(str, "sup_group")) {
+			if (!find_rttables_group(strvec_slot(strvec, ++i), &uval32)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "suppress_group %s is invalid", strvec_slot(strvec, i));
+				goto err;
+			}
+			new->suppress_group = uval32;
+			new->mask |= IPRULE_BIT_SUP_GROUP;
+			table_option = true;
+		}
+#endif
+		else if (!strcmp(str, "dev") || !strcmp(str, "iif")) {
+			str = strvec_slot(strvec, ++i);
+			ifp = if_get_by_ifname(str, IF_CREATE_IF_DYNAMIC);
+			if (!ifp) {
+				report_config_error(CONFIG_GENERAL_ERROR, "WARNING - interface %s for rule doesn't exist",  str);
+				goto err;
+			}
+			new->iif = ifp;
+		}
+#if HAVE_DECL_FRA_OIFNAME
+		else if (!strcmp(str, "oif")) {
+			str = strvec_slot(strvec, ++i);
+			ifp = if_get_by_ifname(str, IF_CREATE_IF_DYNAMIC);
+			if (!ifp) {
+				report_config_error(CONFIG_GENERAL_ERROR, "WARNING - interface %s for rule doesn't exist",  str);
+				goto err;
+			}
+			new->oif = ifp;
+		}
+#endif
+#if HAVE_DECL_FRA_TUN_ID
+		else if (!strcmp(str, "tunnel-id")) {
+			uint64_t val64;
+			if (!read_unsigned64_strvec(strvec, ++i, &val64, 0, UINT64_MAX, false)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid tunnel-id %s specified", str);
+				goto err;
+			}
+			new->tunnel_id = val64;
+		}
+#endif
+#if HAVE_DECL_FRA_UID_RANGE
+		else if (!strcmp(str, "uidrange")) {
+			uint32_t range_start, range_end;
+			if (sscanf(strvec_slot(strvec, ++i), "%" PRIu32 "-%" PRIu32, &range_start, &range_end) != 2) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid uidrange %s specified", str);
+				goto err;
+			}
+			new->mask |= IPRULE_BIT_UID_RANGE;
+			new->uid_range.start = range_start;
+			new->uid_range.end = range_end;
+		}
+#endif
+#if HAVE_DECL_FRA_L3MDEV
+		else if (!strcmp(str, "l3mdev")) {
+			new->l3mdev = true;
+			if (new->action != FR_ACT_UNSPEC) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Cannot specify l3mdev with other action");
+				goto err;
+			}
+			new->action = FR_ACT_TO_TBL;
+		}
+#endif
+#if HAVE_DECL_FRA_PROTOCOL
+		else if (!strcmp(str, "protocol")) {
+			if (!read_unsigned_strvec(strvec, ++i, &val_unsigned, 0, UINT8_MAX, false))
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid protocol %s", strvec_slot(strvec, i));
+			else {
+				new->protocol = val_unsigned;
+				new->mask |= IPRULE_BIT_PROTOCOL;
+			}
+		}
+#endif
+#if HAVE_DECL_FRA_IP_PROTO
+		else if (!strcmp(str, "ipproto")) {
+			int ip_proto = inet_proto_a2n(strvec_slot(strvec, ++i));
+			if (ip_proto < 0 || ip_proto > UINT8_MAX)
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid ipproto %s", strvec_slot(strvec, i));
+			else {
+				new->ip_proto = ip_proto;
+				new->mask |= IPRULE_BIT_IP_PROTO;
+			}
+		}
+#endif
+#if HAVE_DECL_FRA_SPORT_RANGE
+		else if (!strcmp(str, "sport")) {
+			struct fib_rule_port_range sport;
+			int ret;
+
+			ret = sscanf(strvec_slot(strvec, ++i), "%hu-%hu", &sport.start, &sport.end);
+			if (ret == 1)
+				sport.end = sport.start;
+			if (ret != 2)
+				report_config_error(CONFIG_GENERAL_ERROR, "invalid sport range %s", strvec_slot(strvec, i));
+			else {
+				new->src_port = sport;
+				new->mask |= IPRULE_BIT_SPORT_RANGE;
+			}
+		}
+#endif
+#if HAVE_DECL_FRA_DPORT_RANGE
+		else if (!strcmp(str, "dport")) {
+			struct fib_rule_port_range dport;
+			int ret;
+
+			ret = sscanf(strvec_slot(strvec, ++i), "%hu-%hu", &dport.start, &dport.end);
+			if (ret == 1)
+				dport.end = dport.start;
+			if (ret != 2)
+				report_config_error(CONFIG_GENERAL_ERROR, "invalid dport range %s", strvec_slot(strvec, i));
+			else {
+				new->dst_port = dport;
+				new->mask |= IPRULE_BIT_DPORT_RANGE;
+			}
+		}
+#endif
+
+		else if (!strcmp(str, "no_track"))
+			new->dont_track = true;
+#if HAVE_DECL_FRA_OIFNAME
+		else if (allow_track_group && !strcmp(str, "track_group")) {
+			i++;
+			if (new->track_group) {
+				report_config_error(CONFIG_GENERAL_ERROR, "track_group %s is a duplicate", strvec_slot(strvec, i));
+				break;
+			}
+			if (!(new->track_group = find_track_group(strvec_slot(strvec, i))))
+                                report_config_error(CONFIG_GENERAL_ERROR, "track_group %s not found", strvec_slot(strvec, i));
+		}
+#endif
+		else {
+			uint8_t action = FR_ACT_UNSPEC;
+
+			if (!strcmp(str, "type"))
+				str = strvec_slot(strvec, ++i);
+
+			if (!strcmp(str, "goto")) {
+				if (!read_unsigned_strvec(strvec, ++i, &val_unsigned, 0, UINT32_MAX, false)) {
+					report_config_error(CONFIG_GENERAL_ERROR, "Invalid target %s specified", str);
+					goto err;
+				}
+				new->goto_target = (uint32_t)val_unsigned;
+				action = FR_ACT_GOTO;
+			}
+			else if (!strcmp(str, "nop")) {
+				action = FR_ACT_NOP;
+			}
+			else if (find_rttables_rtntype(str, &action)) {
+				if (action == RTN_BLACKHOLE)
+					action = FR_ACT_BLACKHOLE;
+				else if (action == RTN_UNREACHABLE)
+					action = FR_ACT_UNREACHABLE;
+				else if (action == RTN_PROHIBIT)
+					action = FR_ACT_PROHIBIT;
+				else {
+					report_config_error(CONFIG_GENERAL_ERROR, "Invalid rule action %s", str);
+					goto err;
+				}
+			}
+			else {
+				report_config_error(CONFIG_GENERAL_ERROR, "Unknown rule option %s", str);
+				goto err;
+			}
+			if (new->action != FR_ACT_UNSPEC) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Cannot specify more than one of table/nop/goto/blackhole/prohibit/unreachable/l3mdev for rule");
+				goto err;
+			}
+			new->action = action;
+		}
+		i++;
+	}
+
+	if (new->action == FR_ACT_GOTO) {
+		if (new->mask & IPRULE_BIT_PRIORITY) {
+			if (new->priority >= new->goto_target) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid rule - preference %u >= goto target %u", new->priority, new->goto_target);
+				goto err;
+			}
+		} else {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid rule - goto target %u specified without preference", new->goto_target);
+			goto err;
+		}
+	}
+
+	if (new->action == FR_ACT_UNSPEC) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No action specified for rule - ignoring");
+		goto err;
+	}
+
+	if (new->action != FR_ACT_TO_TBL && table_option) {
+		report_config_error(CONFIG_GENERAL_ERROR, "suppressor/realm specified for non table action - skipping");
+		goto err;
+	}
+
+#if HAVE_DECL_FRA_L3MDEV
+	if (new->table && new->l3mdev) {
+		report_config_error(CONFIG_GENERAL_ERROR, "table cannot be specified for l3mdev rules");
+		goto err;
+	}
+#endif
+
+#if HAVE_DECL_FRA_PROTOCOL
+	if (!new->dont_track) {
+		if ((new->mask & IPRULE_BIT_PROTOCOL) && new->protocol != RTPROT_KEEPALIVED)
+			report_config_error(CONFIG_GENERAL_ERROR, "Rule cannot be tracked if protocol is not RTPROT_KEEPALIVED(%d), resetting protocol", RTPROT_KEEPALIVED);
+		new->protocol = RTPROT_KEEPALIVED;
+		new->mask |= IPRULE_BIT_PROTOCOL;
+	}
+#endif
+
+	if (new->track_group && !new->iif) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Static rule cannot have track_group if dev/iif not specified");
+		new->track_group = NULL;
+	}
+
+	new->family = (family == AF_UNSPEC) ? AF_INET : family;
+	if (new->to_addr && new->to_addr->ifa.ifa_family == AF_UNSPEC)
+		new->to_addr->ifa.ifa_family = new->family;
+	if (new->from_addr && new->from_addr->ifa.ifa_family == AF_UNSPEC)
+		new->from_addr->ifa.ifa_family = new->family;
+
+	if (!(new->mask & IPRULE_BIT_PRIORITY)) {
+		new->priority = new->family == AF_INET ? next_rule_priority_ipv4-- : next_rule_priority_ipv6--;
+		new->mask |= IPRULE_BIT_PRIORITY;
+		report_config_error(CONFIG_GENERAL_ERROR, "Rule has no preference specified - setting to %u. This is probably not what you want.", new->priority);
+	}
+
+	list_add(rule_list, new);
+	return;
+
+err:
+	FREE_PTR(new->to_addr);
+	FREE_PTR(new->from_addr);
+	FREE_PTR(new);
+}
+
+/* Try to find a rule in a list */
+static int
+rule_exist(list l, ip_rule_t *iprule)
+{
+	ip_rule_t *ipr;
+	element e;
+
+	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+		ipr = ELEMENT_DATA(e);
+		if (rule_is_equal(ipr, iprule)) {
+			ipr->set = iprule->set;
+			return 1;
+		}
+	}
+	return 0;
+}
+
+/* Clear diff rules */
+void
+clear_diff_rules(list l, list n)
+{
+	ip_rule_t *iprule;
+	element e;
+
+	/* No rule in previous conf */
+	if (LIST_ISEMPTY(l))
+		return;
+
+	/* All Static rules removed */
+	if (LIST_ISEMPTY(n)) {
+		log_message(LOG_INFO, "Removing a VirtualRule block");
+		netlink_rulelist(l, IPRULE_DEL, false);
+		return;
+	}
+
+	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+		iprule = ELEMENT_DATA(e);
+		if (!rule_exist(n, iprule) && iprule->set) {
+			log_message(LOG_INFO, "ip rule %s/%d ... , no longer exist"
+					    , ipaddresstos(NULL, iprule->from_addr), iprule->from_addr->ifa.ifa_prefixlen);
+			netlink_rule(iprule, IPRULE_DEL);
+		}
+	}
+}
+
+/* Diff conf handler */
+void
+clear_diff_srules(void)
+{
+	clear_diff_rules(old_vrrp_data->static_rules, vrrp_data->static_rules);
+}
+
+void
+reset_next_rule_priority(void)
+{
+	next_rule_priority_ipv4 = RULE_START_PRIORITY;
+	next_rule_priority_ipv6 = RULE_START_PRIORITY;
+}
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_ipsecah.c b/tools/keepalived/keepalived/vrrp/vrrp_ipsecah.c
index 220690eb4..f8220affb 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_ipsecah.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_ipsecah.c
@@ -19,21 +19,27 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include "vrrp_ipsecah.h"
+#include "config.h"
+
 #include <openssl/md5.h>
+#include <string.h>
+
+#include "vrrp_ipsecah.h"
+
+#define	BLOCK_SIZE	64
 
 /* hmac_md5 computation according to the RFCs 2085 & 2104 */
 void
-hmac_md5(unsigned char *buffer, int buffer_len, unsigned char *key, int key_len,
-	 unsigned char *digest)
+hmac_md5(const unsigned char *buffer1, size_t buffer1_len, const unsigned char *buffer2, size_t buffer2_len,
+	 const unsigned char *key, size_t key_len, unsigned char *digest)
 {
 	MD5_CTX context;
-	unsigned char k_ipad[65];	/* inner padding - key XORd with ipad */
-	unsigned char k_opad[65];	/* outer padding - key XORd with opad */
-	unsigned char tk[16];
+	unsigned char k_ipad[BLOCK_SIZE+1];	/* inner padding - key XORd with ipad */
+	unsigned char k_opad[BLOCK_SIZE+1];	/* outer padding - key XORd with opad */
+	unsigned char tk[MD5_DIGEST_LENGTH];
 	int i;
 
 	/* Initialize data */
@@ -42,7 +48,7 @@ hmac_md5(unsigned char *buffer, int buffer_len, unsigned char *key, int key_len,
 	memset(tk, 0, sizeof (tk));
 
 	/* If the key is longer than 64 bytes => set it to key=MD5(key) */
-	if (key_len > 64) {
+	if (key_len > BLOCK_SIZE) {
 		MD5_CTX tctx;
 
 		/* Compute the MD5 digest */
@@ -51,7 +57,7 @@ hmac_md5(unsigned char *buffer, int buffer_len, unsigned char *key, int key_len,
 		MD5_Final(tk, &tctx);
 
 		key = tk;
-		key_len = 16;
+		key_len = MD5_DIGEST_LENGTH;
 	}
 
 	/* The global HMAC_MD5 algo looks like (rfc2085.2.2) :
@@ -67,20 +73,22 @@ hmac_md5(unsigned char *buffer, int buffer_len, unsigned char *key, int key_len,
 	memcpy(k_opad, key, key_len);
 
 	/* XOR key with ipad and opad values */
-	for (i = 0; i < 64; i++) {
+	for (i = 0; i < BLOCK_SIZE; i++) {
 		k_ipad[i] ^= 0x36;
 		k_opad[i] ^= 0x5c;
 	}
 
 	/* Compute inner MD5 */
 	MD5_Init(&context);				/* Init context for 1st pass */
-	MD5_Update(&context, k_ipad, 64);		/* start with inner pad */
-	MD5_Update(&context, buffer, buffer_len);	/* next with buffer datagram */
+	MD5_Update(&context, k_ipad, BLOCK_SIZE);	/* start with inner pad */
+	MD5_Update(&context, buffer1, buffer1_len);	/* next with buffer datagram */
+	if (buffer2)
+		MD5_Update(&context, buffer2, buffer2_len); /* next with buffer datagram */
 	MD5_Final(digest, &context);			/* Finish 1st pass */
 
 	/* Compute outer MD5 */
-	MD5_Init(&context);			/* Init context for 2nd pass */
-	MD5_Update(&context, k_opad, 64);	/* start with inner pad */
-	MD5_Update(&context, digest, 16);	/* next result of 1st pass */
-	MD5_Final(digest, &context);		/* Finish 2nd pass */
+	MD5_Init(&context);				/* Init context for 2nd pass */
+	MD5_Update(&context, k_opad, BLOCK_SIZE);	/* start with inner pad */
+	MD5_Update(&context, digest, MD5_DIGEST_LENGTH); /* next result of 1st pass */
+	MD5_Final(digest, &context);			/* Finish 2nd pass */
 }
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_ipset.c b/tools/keepalived/keepalived/vrrp/vrrp_ipset.c
new file mode 100644
index 000000000..387f0e71e
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_ipset.c
@@ -0,0 +1,458 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        ipset manipulation used in conjunction with iptables
+ *
+ * Author:      Quentin Armitage, <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+/* We dynamically attempt to load the library "by hand", since keepalived
+ * may have been built on a system with ipsets, but the target system may
+ * not have the ipset libraries installed.
+ *
+ * If the ipset libraries are not installed, keepalived will fallback to
+ * adding entries into iptables.
+ */
+
+#include "config.h"
+
+#include <net/if.h>		/* Force inclusion of net/if.h before linux/if.h */
+#define LIBIPSET_NFPROTO_H
+#define LIBIPSET_NF_INET_ADDR_H
+#if defined LIBIPSET_H_ADD_UAPI_IP_SET_H_GUARD || defined LIBIPSET_H_ADD_IP_SET_H_GUARD
+#include <linux/netfilter/ipset/ip_set.h>
+#if defined LIBIPSET_H_ADD_UAPI_IP_SET_H_GUARD
+#define _UAPI_IP_SET_H
+#else
+#define _IP_SET_H
+#endif
+#endif
+#include <libipset/session.h>
+#include <libipset/types.h>
+#ifndef LIBIPSET_PRE_V7_COMPAT
+#include <libipset/ipset.h>
+#endif
+#include <netinet/in.h>
+#include <linux/types.h>	/* For __beXX types in userland */
+#include <linux/netfilter.h>	/* For nf_inet_addr */
+#include <stdint.h>
+
+#include "logger.h"
+#include "global_data.h"
+#include "vrrp_ipset.h"
+#include "vrrp_firewall.h"
+#include "vrrp_iptables_calls.h"
+#include "main.h"
+#include "utils.h"
+
+#ifdef _LIBIPSET_DYNAMIC_
+#include <dlfcn.h>
+
+/* The addresses of the functions we want */
+#ifdef LIBIPSET_PRE_V7_COMPAT
+struct ipset_session* (*ipset_session_init_addr)(ipset_outfn outfn);
+#else
+struct ipset_session* (*ipset_session_init_addr)(ipset_print_outfn outfn, const void *p);
+#endif
+int (*ipset_session_fini_addr)(struct ipset_session *session);
+struct ipset_data* (*ipset_session_data_addr)(const struct ipset_session *session);
+#ifdef LIBIPSET_PRE_V7_COMPAT
+int (*ipset_envopt_parse_addr)(struct ipset_session *session, int env, const char *str);
+#else
+void (*ipset_envopt_set_addr)(struct ipset_session *session, int env);
+#endif
+const struct ipset_type* (*ipset_type_get_addr)(struct ipset_session *session, enum ipset_cmd cmd);
+int (*ipset_data_set_addr)(struct ipset_data *data, enum ipset_opt opt, const void *value);
+int (*ipset_cmd_addr)(struct ipset_session *session, enum ipset_cmd cmd, uint32_t lineno);
+void (*ipset_load_types_addr)(void);
+
+/* We can (almost) make it look as though normal linking is being used */
+#define ipset_session_init (*ipset_session_init_addr)
+#define ipset_session_fini (*ipset_session_fini_addr)
+#define ipset_session_data (*ipset_session_data_addr)
+#ifdef LIBIPSET_PRE_V7_COMPAT
+#define ipset_envopt_parse (*ipset_envopt_parse_addr)
+#else
+#define ipset_envopt_set (*ipset_envopt_set_addr)
+#endif
+#define ipset_type_get (*ipset_type_get_addr)
+#define ipset_data_set (*ipset_data_set_addr)
+/* Unfortunately ipset_cmd conflicts with struct ipset_cmd */
+#define ipset_cmd1 (*ipset_cmd_addr)
+#define ipset_load_types (*ipset_load_types_addr)
+
+static void* libipset_handle;
+#else
+#define ipset_cmd1 ipset_cmd
+#endif
+
+static int
+#ifdef LIBIPSET_PRE_V7_COMPAT
+__attribute__ ((format(printf, 1, 2)))
+ipset_printf(const char *fmt, ...)
+#else
+__attribute__ ((format(printf, 3, 4)))
+ipset_printf(__attribute ((__unused__)) struct ipset_session *session, void *p, const char *fmt, ...)
+#endif
+{
+	va_list args;
+
+#ifndef LIBIPSET_PRE_V7_COMPAT
+	log_message(LOG_INFO, "libipset message from %s", (const char *)p);
+#endif
+
+	va_start(args, fmt);
+	vlog_message(LOG_INFO, fmt, args);
+	va_end(args);
+
+	return 0;
+}
+
+static bool
+do_ipset_cmd(struct ipset_session* session, enum ipset_cmd cmd, const char *setname,
+		const ip_address_t *addr, int cidr, uint32_t timeout, const char* iface)
+{
+	const struct ipset_type *type;
+	uint8_t family;
+	int r;
+
+	ipset_session_data_set(session, IPSET_SETNAME, setname);
+
+	type = ipset_type_get(session, cmd);
+	if (type == NULL) {
+		/* possible reasons for failure: set name does not exist */
+		return false;
+	}
+
+	family = (addr->ifa.ifa_family == AF_INET) ? NFPROTO_IPV4 : NFPROTO_IPV6;
+	ipset_session_data_set(session, IPSET_OPT_FAMILY, &family);
+	ipset_session_data_set(session, IPSET_OPT_IP, &addr->u);
+	if (cidr >= 0)
+		ipset_session_data_set(session, IPSET_OPT_CIDR, &cidr);
+	if (timeout)
+		ipset_session_data_set(session, IPSET_OPT_TIMEOUT, &timeout);
+	if (iface)
+		ipset_session_data_set(session, IPSET_OPT_IFACE, iface);
+
+	r = ipset_cmd1(session, cmd, 0);
+
+	return r == 0;
+}
+
+static bool
+ipset_create(struct ipset_session* session, const char *setname, const char *typename, uint8_t family)
+{
+	const struct ipset_type *type;
+	int r;
+
+	ipset_session_data_set(session, IPSET_SETNAME, setname);
+
+	ipset_session_data_set(session, IPSET_OPT_TYPENAME, typename);
+
+	type = ipset_type_get(session, IPSET_CMD_CREATE);
+	if (type == NULL)
+		return false;
+
+	ipset_session_data_set(session, IPSET_OPT_TYPE, type);
+	ipset_session_data_set(session, IPSET_OPT_FAMILY, &family);
+
+	r = ipset_cmd1(session, IPSET_CMD_CREATE, 0);
+	return r == 0;
+}
+
+static bool
+ipset_destroy(struct ipset_session* session, const char *setname)
+{
+	int r;
+
+	ipset_session_data_set(session, IPSET_SETNAME, setname);
+
+	r = ipset_cmd1(session, IPSET_CMD_DESTROY, 0);
+	return r == 0;
+}
+
+static bool
+has_ipset_setname(struct ipset_session* session, const char *setname)
+{
+	ipset_session_data_set(session, IPSET_SETNAME, setname);
+
+	return ipset_cmd1(session, IPSET_CMD_HEADER, 0) == 0;
+}
+
+static bool
+create_sets(struct ipset_session **session, const char* addr4, const char* addr6, const char* addr_if6, const char *igmp, const char *mld, bool is_reload)
+{
+	if (!*session)
+#ifdef LIBIPSET_PRE_V7_COMPAT
+		*session = ipset_session_init(ipset_printf);
+#else
+		*session = ipset_session_init(ipset_printf, "create_sets");
+#endif
+	if (!*session) {
+		log_message(LOG_INFO, "Cannot initialize ipset session.");
+		return false;
+	}
+
+	/* If we aren't reloading, don't worry if sets already exists. With the
+	 * IPSET_ENV_EXIST option set, any existing entries in the set are removed. */
+	if (!is_reload)
+#ifdef LIBIPSET_PRE_V7_COMPAT
+		ipset_envopt_parse(*session, IPSET_ENV_EXIST, NULL);
+#else
+		ipset_envopt_set(*session, IPSET_ENV_EXIST);
+#endif
+
+	if (addr4) {
+		if (!is_reload || !has_ipset_setname(*session, addr4))
+			ipset_create(*session, addr4, "hash:ip", NFPROTO_IPV4);
+	}
+
+	if (addr6) {
+		if (!is_reload || !has_ipset_setname(*session, addr6))
+			ipset_create(*session, addr6, "hash:ip", NFPROTO_IPV6);
+		if (!is_reload || !has_ipset_setname(*session, addr_if6)) {
+#ifdef HAVE_IPSET_ATTR_IFACE
+			/* hash:net,iface was introduced in Linux 3.1 */
+			ipset_create(*session, addr_if6, "hash:net,iface", NFPROTO_IPV6);
+#else
+			ipset_create(*session, addr_if6, "hash:ip", NFPROTO_IPV6);
+#endif
+		}
+	}
+
+#ifdef HAVE_IPSET_ATTR_IFACE
+	if (igmp) {
+		if (!is_reload || !has_ipset_setname(*session, igmp))
+			ipset_create(*session, igmp, "hash:net,iface", NFPROTO_IPV4);
+	}
+
+	if (mld) {
+		if (!is_reload || !has_ipset_setname(*session, mld))
+			ipset_create(*session, mld, "hash:net,iface", NFPROTO_IPV6);
+	}
+#endif
+
+	return true;
+}
+
+static
+bool set_match_loaded(void)
+{
+	char buf[XT_FUNCTION_MAXNAMELEN+1];
+	FILE *fp;
+	bool found = false;
+
+	fp = fopen( "/proc/net/ip_tables_matches", "r");
+	if (!fp)
+		return false;
+
+	while (fgets(buf, sizeof(buf), fp)) {
+		if ((buf[3] == '\0' || buf[3] == '\n') &&
+		    !strncmp(buf, "set", 3)) {
+			found = true;
+			break;
+		}
+	}
+
+	fclose(fp);
+
+	return found;
+}
+
+bool ipset_initialise(void)
+{
+#ifdef _LIBIPSET_DYNAMIC_
+	if (libipset_handle)
+		return true;
+#endif
+
+#if HAVE_DECL_CLONE_NEWNET
+	/* Don't attempt to use ipsets if running in a namespace and the default
+	 * set names have not been overridden and the kernel version is less
+	 * than Linux 3.13, since ipsets didn't understand namespaces prior to that. */
+	if (global_data->network_namespace &&
+	    !global_data->namespace_with_ipsets &&
+	    !strcmp(global_data->vrrp_ipset_address, DEFAULT_IPSET_NAME) &&
+	    (os_major <= 2 ||
+	     (os_major == 3 && os_minor < 13))) {
+		log_message(LOG_INFO, "Not using ipsets with network namespace since not supported with kernel version < 3.13");
+		return false;
+	}
+#endif
+
+#ifdef _LIBIPSET_DYNAMIC_
+	/* Attempt to open the ipset library */
+	if (!(libipset_handle = dlopen("libipset.so", RTLD_NOW)) &&
+	    !(libipset_handle = dlopen(IPSET_LIB_NAME, RTLD_NOW))) {
+		log_message(LOG_INFO, "Unable to load ipset library - %s", dlerror());
+		return false;
+	}
+
+	if (!(ipset_session_init_addr = dlsym(libipset_handle, "ipset_session_init")) ||
+	    !(ipset_session_fini_addr = dlsym(libipset_handle, "ipset_session_fini")) ||
+	    !(ipset_session_data_addr = dlsym(libipset_handle,"ipset_session_data")) ||
+#ifdef LIBIPSET_PRE_V7_COMPAT
+	    !(ipset_envopt_parse_addr = dlsym(libipset_handle,"ipset_envopt_parse")) ||
+#else
+	    !(ipset_envopt_set_addr = dlsym(libipset_handle,"ipset_envopt_set")) ||
+#endif
+	    !(ipset_type_get_addr = dlsym(libipset_handle,"ipset_type_get")) ||
+	    !(ipset_data_set_addr = dlsym(libipset_handle,"ipset_data_set")) ||
+	    !(ipset_cmd_addr = dlsym(libipset_handle,"ipset_cmd")) ||
+	    !(ipset_load_types_addr = dlsym(libipset_handle,"ipset_load_types"))) {
+		log_message(LOG_INFO, "Failed to dynamic link an ipset function - %s", dlerror());
+		return false;
+	}
+#endif
+
+	ipset_load_types();
+
+	if (!set_match_loaded() && keepalived_modprobe("xt_set")) {
+		log_message(LOG_INFO, "Unable to load module xt_set - not using ipsets");
+		return false;
+	}
+
+	return true;
+}
+
+// TODO - just revert to single call to remove_ipsets
+static bool
+remove_ipsets(struct ipset_session **session, uint8_t family, bool vip_sets)
+{
+	if (!global_data->using_ipsets)
+		return true;
+
+#ifdef _LIBIPSET_DYNAMIC_
+	if (!libipset_handle)
+		return true;
+#endif
+
+	if (!*session)
+#ifdef LIBIPSET_PRE_V7_COMPAT
+		*session = ipset_session_init(ipset_printf);
+#else
+		*session = ipset_session_init(ipset_printf, "remove_ipsets");
+#endif
+	if (!*session) {
+		log_message(LOG_INFO, "Cannot initialize ipset session.");
+		return false;
+	}
+
+	if (vip_sets) {
+		if (family == AF_INET)
+			ipset_destroy(*session, global_data->vrrp_ipset_address);
+		else {
+			ipset_destroy(*session, global_data->vrrp_ipset_address6);
+			ipset_destroy(*session, global_data->vrrp_ipset_address_iface6);
+		}
+	}
+#ifdef HAVE_IPSET_ATTR_IFACE
+	else {
+		if (family == AF_INET)
+			ipset_destroy(*session, global_data->vrrp_ipset_igmp);
+		else
+			ipset_destroy(*session, global_data->vrrp_ipset_mld);
+	}
+#endif
+
+	return true;
+}
+
+bool
+remove_vip_ipsets(struct ipset_session **session, uint8_t family)
+{
+	return remove_ipsets(session, family, true);
+}
+
+bool
+remove_igmp_ipsets(struct ipset_session **session, uint8_t family)
+{
+	return remove_ipsets(session, family, false);
+}
+
+bool add_vip_ipsets(struct ipset_session **session, uint8_t family, bool is_reload)
+{
+	if (family == AF_INET)
+		return create_sets(session, global_data->vrrp_ipset_address, NULL, NULL, NULL, NULL, is_reload);
+
+	return create_sets(session, NULL, global_data->vrrp_ipset_address6, global_data->vrrp_ipset_address_iface6, NULL, NULL, is_reload);
+}
+
+#ifdef HAVE_IPSET_ATTR_IFACE
+bool add_igmp_ipsets(struct ipset_session **session, uint8_t family, bool is_reload)
+{
+	if (family == AF_INET)
+		return create_sets(session, NULL, NULL, NULL, global_data->vrrp_ipset_igmp, NULL, is_reload);
+
+	return create_sets(session, NULL, NULL, NULL, NULL, global_data->vrrp_ipset_mld, is_reload);
+}
+#endif
+
+void* ipset_session_start(void)
+{
+#ifdef LIBIPSET_PRE_V7_COMPAT
+	return ipset_session_init(ipset_printf);
+#else
+	return ipset_session_init(ipset_printf, "session_start");
+#endif
+}
+
+void ipset_session_end(void* vsession)
+{
+	struct ipset_session *session = vsession;
+
+	ipset_session_fini(session);
+}
+
+void ipset_entry(void* vsession, int cmd, const ip_address_t* addr)
+{
+	const char* set;
+	char *iface = NULL;
+	struct ipset_session *session = vsession;
+
+
+	if (addr->ifa.ifa_family == AF_INET)
+		set = global_data->vrrp_ipset_address;
+	else if (IN6_IS_ADDR_LINKLOCAL(&addr->u.sin6_addr)) {
+		set = global_data->vrrp_ipset_address_iface6;
+#ifdef HAVE_IPSET_ATTR_IFACE
+		iface = addr->ifp->ifname;
+#endif
+	}
+	else
+		set = global_data->vrrp_ipset_address6;
+
+	do_ipset_cmd(session, (cmd == IPADDRESS_DEL) ? IPSET_CMD_DEL : IPSET_CMD_ADD, set, addr, -1, 0, iface);
+}
+
+#ifdef HAVE_IPSET_ATTR_IFACE
+void ipset_entry_igmp(void* vsession, int cmd, const char* ifname, uint8_t family)
+{
+	const char* set;
+	struct ipset_session *session = vsession;
+	ip_address_t addr = { .ifa.ifa_family = AF_INET };
+
+	if (family == AF_INET) {
+		set = global_data->vrrp_ipset_igmp;
+	} else {
+		set = global_data->vrrp_ipset_mld;
+		addr.ifa.ifa_family = AF_INET6;
+	}
+
+	do_ipset_cmd(session, (cmd == IPADDRESS_DEL) ? IPSET_CMD_DEL : IPSET_CMD_ADD, set, &addr, 0, 0, ifname);
+}
+#endif
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_iptables.c b/tools/keepalived/keepalived/vrrp/vrrp_iptables.c
new file mode 100644
index 000000000..933b148a2
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_iptables.c
@@ -0,0 +1,350 @@
+
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        iptables management
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include <errno.h>
+#include <sys/stat.h>
+#include <sys/vfs.h>
+#include <linux/magic.h>
+
+#include "warnings.h"
+#include "logger.h"
+#include "vrrp_iptables.h"
+
+#include "global_data.h"
+#include "vrrp_ipaddress.h"
+#include "vrrp.h"
+#ifdef _HAVE_LIBIPTC_
+#include "vrrp_iptables_lib.h"
+#endif
+#ifdef _USE_IPTABLES_CMD_
+#include "vrrp_iptables_cmd.h"
+#endif
+#include "vrrp_firewall.h"
+
+
+/* Element [0] is IPv4, element [1] is IPv6 */
+static init_state_t setup[2];
+static init_state_t setup_vips[2];
+static init_state_t setup_igmp[2];
+#ifdef _LIBIPTC_DYNAMIC_
+static bool using_libiptc[2];
+#endif
+
+static init_state_t
+check_chains_exist(int family)
+{
+#ifdef _HAVE_LIBIPTC_
+#ifdef _LIBIPTC_DYNAMIC_
+	if (using_libiptc[family != AF_INET])
+#endif
+		return check_chains_exist_lib(family);
+#endif
+
+#if !defined _HAVE_LIBIPTC_ || defined _LIBIPTC_DYNAMIC_
+	return check_chains_exist_cmd(family);
+#endif
+}
+
+/* return true if a given file exists within procfs */
+/* Taken from iptables code */
+static bool
+proc_file_exists(const char *filename)
+{
+	struct stat s;
+	struct statfs f;
+
+	if (lstat(filename, &s))
+		return false;
+	if (!S_ISREG(s.st_mode))
+		return false;
+	if (statfs(filename, &f))
+		return false;
+	if (f.f_type != PROC_SUPER_MAGIC)
+		return false;
+
+	return true;
+}
+
+static bool
+iptables_init(int family)
+{
+	if (family == AF_INET) {
+		if (!proc_file_exists("/proc/net/ip_tables_names"))
+		{
+			log_message(LOG_INFO, "iptables chain not setup");
+			setup[family != AF_INET] = INIT_FAILED;
+			return false;
+		}
+	} else {
+		if (!proc_file_exists("/proc/net/ip6_tables_names"))
+		{
+			log_message(LOG_INFO, "ip6tables chain not setup");
+			setup[family != AF_INET] = INIT_FAILED;
+			return false;
+		}
+	}
+
+#ifdef _HAVE_LIBIPTC_
+	setup[family != AF_INET] = iptables_init_lib(family);
+#ifdef _LIBIPTC_DYNAMIC_
+	using_libiptc[family != AF_INET] = setup[family != AF_INET] == INIT_SUCCESS;
+#endif
+#endif
+
+#if !defined _HAVE_LIBIPTC_ || defined _LIBIPTC_DYNAMIC_
+	if (setup[family != AF_INET] != INIT_SUCCESS)
+		setup[family != AF_INET] = iptables_init_cmd(family);
+#endif
+
+	if (setup[family != AF_INET] != INIT_SUCCESS)
+		return false;
+
+	setup[family != AF_INET] = check_chains_exist(family);
+
+	return setup[family != AF_INET] == INIT_SUCCESS;
+}
+
+RELAX_SUGGEST_ATTRIBUTE_CONST_START
+void
+iptables_fini(void)
+{
+#ifdef _HAVE_LIBIPTC_
+	iptables_fini_lib();
+#endif
+#if !defined _HAVE_LIBIPTC_ || defined _LIBIPTC_DYNAMIC_
+	iptables_fini_cmd();
+#endif
+}
+RELAX_SUGGEST_ATTRIBUTE_CONST_END
+
+static bool
+do_setup_vips(int family)
+{
+	if (setup[family != AF_INET] == NOT_INIT)
+		iptables_init(family);
+
+	if (setup[family != AF_INET] == INIT_FAILED) {
+		setup_vips[family != AF_INET] = INIT_FAILED;
+		return false;
+	}
+
+	setup_vips[family != AF_INET] = INIT_SUCCESS;
+	return true;
+}
+
+static bool
+do_setup_igmp(int family)
+{
+	if (setup[family != AF_INET] == NOT_INIT) {
+		iptables_init(family);
+		return false;
+	}
+
+	if (setup[family != AF_INET] == INIT_FAILED) {
+		setup_igmp[family != AF_INET] = INIT_FAILED;
+		return false;
+	}
+
+	setup_igmp[family != AF_INET] = INIT_SUCCESS;
+	return true;
+}
+
+static inline void
+handle_iptable_rule_to_vip(ip_address_t *ipaddr, int cmd,
+#ifdef _HAVE_LIBIPTC_
+							     struct ipt_handle *h,
+#else
+							     __attribute__((unused)) void *unused,
+#endif
+												   bool force)
+{
+#ifdef _HAVE_LIBIPTC_
+#ifdef _LIBIPTC_DYNAMIC_
+	if (using_libiptc[ipaddr->ifa.ifa_family != AF_INET])
+#endif
+	{
+		handle_iptable_rule_to_vip_lib(ipaddr, cmd, h, force);
+		return;
+	}
+#endif
+
+#if !defined _HAVE_LIBIPTC_ || defined _LIBIPTC_DYNAMIC_
+	handle_iptable_rule_to_vip_cmd(ipaddr, cmd, force);
+#endif
+}
+
+/* add/remove iptable drop rules to iplist */
+static void
+handle_iptable_vip_list(
+#ifdef _HAVE_LIBIPTC_
+		        struct ipt_handle **h,
+#else
+		        void **h,
+#endif
+			list ip_list, int cmd, bool force)
+{
+	ip_address_t *ipaddr;
+	element e;
+
+	LIST_FOREACH(ip_list, ipaddr, e) {
+		if (setup_vips[ipaddr->ifa.ifa_family != AF_INET] == NOT_INIT)
+			do_setup_vips(ipaddr->ifa.ifa_family);
+
+		if (setup_vips[ipaddr->ifa.ifa_family != AF_INET] == INIT_FAILED)
+			continue;
+
+		if ((cmd == IPADDRESS_DEL) == ipaddr->iptable_rule_set || force)
+		{
+#if defined _HAVE_LIBIPTC_ && defined _LIBIPTC_DYNAMIC_
+			if (!*h && using_libiptc[IP_IS6(ipaddr)])
+				*h = iptables_open(cmd);
+#endif
+			handle_iptable_rule_to_vip(ipaddr, cmd, *h, force);
+		}
+	}
+}
+
+void
+handle_iptable_rule_to_iplist(list ip_list1, list ip_list2, int cmd, bool force)
+{
+#ifdef _HAVE_LIBIPTC_
+	struct ipt_handle *h = NULL;
+	int tries = 0;
+	int res = 0;
+#else
+	void *h = NULL;
+#endif
+
+	/* No addresses in this list */
+	if (LIST_ISEMPTY(ip_list1) && LIST_ISEMPTY(ip_list2))
+		return;
+
+#ifdef _HAVE_LIBIPTC_
+        do {
+#ifndef _LIBIPTC_DYNAMIC_
+		h = iptables_open(cmd);
+#endif
+#endif
+		if (!LIST_ISEMPTY(ip_list1))
+			handle_iptable_vip_list(&h, ip_list1, cmd, force);
+		if (!LIST_ISEMPTY(ip_list2))
+			handle_iptable_vip_list(&h, ip_list2, cmd, force);
+
+#ifdef _HAVE_LIBIPTC_
+#ifdef _LIBIPTC_DYNAMIC_
+                if (h)
+#endif
+                        res = iptables_close(h);
+		h = NULL;
+        } while (res == EAGAIN && ++tries < IPTABLES_MAX_TRIES);
+#endif
+}
+
+void
+handle_iptables_accept_mode(vrrp_t *vrrp, int cmd, bool force)
+{
+	handle_iptable_rule_to_iplist(vrrp->vip, vrrp->evip, cmd, force);
+}
+
+#ifdef _HAVE_VRRP_VMAC_
+static inline void
+handle_iptable_rule_for_igmp(const char *ifname, int cmd, int family,
+#ifdef _HAVE_LIBIPTC_
+			     struct ipt_handle **h
+#else
+			     __attribute__((unused)) void *unused
+#endif
+								 )
+{
+	if (setup_igmp[family != AF_INET] == NOT_INIT)
+		do_setup_igmp(family);
+
+	if (setup_igmp[family != AF_INET] == INIT_FAILED)
+		return;
+
+#if defined _HAVE_LIBIPTC_ && defined _LIBIPTC_DYNAMIC_
+	if (!*h && using_libiptc[family == AF_INET6])
+		*h = iptables_open(cmd);
+#endif
+
+#ifdef _HAVE_LIBIPTC_
+#ifdef _LIBIPTC_DYNAMIC_
+	if (using_libiptc[family == AF_INET6])
+#endif
+	{
+		handle_iptable_rule_for_igmp_lib(ifname, cmd, family, *h);
+		return;
+	}
+#endif
+
+#if !defined _HAVE_LIBIPTC_ || defined _LIBIPTC_DYNAMIC_
+	handle_iptable_rule_for_igmp_cmd(ifname, cmd, family);
+#endif
+}
+
+static void
+iptables_update_vmac(const vrrp_t *vrrp, int cmd)
+{
+#ifdef _HAVE_LIBIPTC_
+	struct ipt_handle *h = NULL;
+	int tries = 0;
+	int res = 0;
+#else
+	void *h = NULL;
+#endif
+
+#ifdef _HAVE_LIBIPTC_
+        do {
+// WHY ?
+#ifndef _LIBIPTC_DYNAMIC_
+		h = iptables_open(cmd);
+#endif
+#endif
+
+		handle_iptable_rule_for_igmp(vrrp->ifp->ifname, cmd, vrrp->family, &h);
+
+		if (vrrp->evip_other_family)
+			handle_iptable_rule_for_igmp(vrrp->ifp->ifname, cmd, vrrp->family == AF_INET ? AF_INET6 : AF_INET, &h);
+#ifdef _HAVE_LIBIPTC_
+#ifdef _LIBIPTC_DYNAMIC_
+                if (h)
+#endif
+                        res = iptables_close(h);
+        } while (res == EAGAIN && ++tries < IPTABLES_MAX_TRIES);
+#endif
+}
+
+void
+iptables_add_vmac(const vrrp_t *vrrp)
+{
+	iptables_update_vmac(vrrp, IPADDRESS_ADD);
+}
+
+void
+iptables_remove_vmac(const vrrp_t *vrrp)
+{
+	iptables_update_vmac(vrrp, IPADDRESS_DEL);
+}
+#endif
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_iptables_calls.c b/tools/keepalived/keepalived/vrrp/vrrp_iptables_calls.c
new file mode 100644
index 000000000..af0a3319e
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_iptables_calls.c
@@ -0,0 +1,882 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        iptables manipulation.
+ *
+ * Author:      Quentin Armitage, <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#ifdef _HAVE_LIBIPTC_LINUX_NET_IF_H_COLLISION_
+/* Linux 4.5 introduced a namespace collision when including
+ * libiptc/libiptc.h due to both net/if.h and linux/if.h
+ * being included.
+ *
+ * See: http://bugzilla.netfilter.org/show_bug.cgi?id=1067
+ *
+ * Including net/if.h first stops the problem occuring.
+ */
+#include <net/if.h>
+#endif
+
+#include <libiptc/libiptc.h>
+#include <libiptc/libip6tc.h>
+#ifdef _HAVE_LIBIPSET_
+#ifdef USE_LIBIPSET_LINUX_IP_SET_H
+#include <libipset/linux_ip_set.h>
+#else
+#include <linux/netfilter/ipset/ip_set.h>
+#endif
+#include <linux/netfilter/xt_set.h>
+#endif
+#include <unistd.h>
+#include <signal.h>
+#include <errno.h>
+#include <stdint.h>
+
+#include "vrrp_iptables_calls.h"
+#include "memory.h"
+#include "logger.h"
+#if !HAVE_DECL_SOCK_CLOEXEC
+#include "old_socket.h"
+#endif
+#ifdef _LIBIPTC_DYNAMIC_
+#include "global_data.h"
+#endif
+#include "vrrp_iptables_lib.h"
+#include "vrrp_firewall.h"
+#include "utils.h"
+
+/* We sometimes get a resource_busy on iptc_commit. This appears to happen
+ * when someone else is also updating it.
+ * Tests show that the EAGAIN error is generated if someone else did an
+ * update via iptc_commit between us doing iptc_init and iptc_commit, i.e.
+ * if there had been an update since out init prior to our commit.
+ *
+ * Documentation seems to suggest that iptc_init takes a snapshot of the
+ * state of iptables. This fits with the tests, but also means that we could
+ * be interferred with by anyone else doing an update.
+ */
+
+#ifdef _LIBIPTC_DYNAMIC_
+#include <dlfcn.h>
+
+/* The addresses of the functions we want */
+struct iptc_handle *(*iptc_init_addr)(const char *tablename);
+void (*iptc_free_addr)(struct iptc_handle *h);
+int (*iptc_is_chain_addr)(const char *chain, struct iptc_handle *const handle);
+int (*iptc_insert_entry_addr)(const ipt_chainlabel chain, const struct ipt_entry *e, unsigned int rulenum, struct iptc_handle *handle);
+int (*iptc_append_entry_addr)(const ipt_chainlabel chain, const struct ipt_entry *e, struct iptc_handle *handle);
+int (*iptc_delete_entry_addr)(const ipt_chainlabel chain, const struct ipt_entry *origfw, unsigned char *matchmask, struct iptc_handle *handle);
+int (*iptc_commit_addr)(struct iptc_handle *handle);
+const char *(*iptc_strerror_addr)(int err);
+
+struct ip6tc_handle *(*ip6tc_init_addr)(const char *tablename);
+void (*ip6tc_free_addr)(struct ip6tc_handle *h);
+int (*ip6tc_is_chain_addr)(const char *chain, struct ip6tc_handle *const handle);
+int (*ip6tc_insert_entry_addr)(const ip6t_chainlabel chain, const struct ip6t_entry *e, unsigned int rulenum, struct ip6tc_handle *handle);
+int (*ip6tc_append_entry_addr)(const ip6t_chainlabel chain, const struct ip6t_entry *e, struct ip6tc_handle *handle);
+int (*ip6tc_delete_entry_addr)(const ip6t_chainlabel chain, const struct ip6t_entry *origfw, unsigned char *matchmask, struct ip6tc_handle *handle);
+int (*ip6tc_commit_addr)(struct ip6tc_handle *handle);
+const char *(*ip6tc_strerror_addr)(int err);
+
+/* We can make it look as though normal linking is being used */
+#define iptc_init (*iptc_init_addr)
+#define iptc_free (*iptc_free_addr)
+#define iptc_is_chain (*iptc_is_chain_addr)
+#define iptc_insert_entry (*iptc_insert_entry_addr)
+#define iptc_append_entry (*iptc_append_entry_addr)
+#define iptc_delete_entry (*iptc_delete_entry_addr)
+#define iptc_commit (*iptc_commit_addr)
+#define iptc_strerror (*iptc_strerror_addr)
+
+#define ip6tc_init (*ip6tc_init_addr)
+#define ip6tc_free (*ip6tc_free_addr)
+#define ip6tc_is_chain (*ip6tc_is_chain_addr)
+#define ip6tc_insert_entry (*ip6tc_insert_entry_addr)
+#define ip6tc_append_entry (*ip6tc_append_entry_addr)
+#define ip6tc_delete_entry (*ip6tc_delete_entry_addr)
+#define ip6tc_commit (*ip6tc_commit_addr)
+#define ip6tc_strerror (*ip6tc_strerror_addr)
+
+static void* libip4tc_handle;
+static void* libip6tc_handle;
+#endif
+
+static void
+set_iface(char *vianame, unsigned char *mask, const char *iface)
+{
+	size_t vialen = strlen(iface);
+
+	memset(vianame, 0, IFNAMSIZ);
+	memset(mask, 0, IFNAMSIZ);
+
+	strcpy(vianame, iface);
+	if (!vialen)
+		return;
+
+	memset(mask, 0xFF, vialen + 1);
+}
+
+/* Initializes a new iptables instance and returns an iptables resource associated with the new iptables table */
+struct iptc_handle* ip4tables_open ( const char* tablename )
+{
+	struct iptc_handle *h ;
+
+	if ( !( h = iptc_init ( tablename ) ) )
+		return NULL ;
+
+	return h ;
+}
+
+int ip4tables_close ( struct iptc_handle* handle, int updated )
+{
+	int res = 1;
+	int sav_errno ;
+
+	if (updated) {
+		if ( ( res = iptc_commit ( handle ) ) != 1 )
+		{
+			sav_errno = errno ;
+			log_message(LOG_INFO, "iptc_commit returned %d: %s", res, iptc_strerror (sav_errno) );
+		}
+	}
+
+	iptc_free ( handle ) ;
+
+	if ( res == 1 )
+		return 0 ;
+	else
+		return ( sav_errno ) ;
+}
+
+int ip4tables_is_chain(struct iptc_handle* handle, const char* chain_name)
+{
+	return iptc_is_chain(chain_name, handle);
+}
+
+int ip4tables_process_entry( struct iptc_handle* handle, const char* chain_name, unsigned int rulenum, const char* target_name, const ip_address_t* src_ip_address, const ip_address_t* dst_ip_address, const char* in_iface, const char* out_iface, uint16_t protocol, uint8_t type, int cmd, uint8_t flags, bool force)
+{
+	size_t size;
+	struct ipt_entry *fw;
+	struct xt_entry_target *target;
+	struct xt_entry_match *match ;
+	ipt_chainlabel chain;
+	int res;
+	int sav_errno;
+
+	/* Add an entry */
+
+	memset (chain, 0, sizeof (chain));
+
+	size = XT_ALIGN (sizeof (struct ipt_entry)) +
+			XT_ALIGN (sizeof (struct xt_entry_target) + 1);
+
+	if ( protocol == IPPROTO_ICMP )
+		size += XT_ALIGN ( sizeof(struct xt_entry_match) ) + XT_ALIGN ( sizeof(struct ipt_icmp) ) ;
+
+	fw = (struct ipt_entry*)MALLOC(size);
+
+	fw->target_offset = XT_ALIGN ( sizeof ( struct ipt_entry ) ) ;
+
+	if ( src_ip_address && src_ip_address->ifa.ifa_family != AF_UNSPEC )
+	{
+		memcpy(&fw->ip.src, &src_ip_address->u.sin.sin_addr, sizeof ( src_ip_address->u.sin.sin_addr ) );
+		memset ( &fw->ip.smsk, 0xff, sizeof(fw->ip.smsk));
+	}
+
+	if ( dst_ip_address && dst_ip_address->ifa.ifa_family != AF_UNSPEC )
+	{
+		memcpy(&fw->ip.dst, &dst_ip_address->u.sin.sin_addr, sizeof ( dst_ip_address->u.sin.sin_addr ) );
+		memset ( &fw->ip.dmsk, 0xff, sizeof(fw->ip.dmsk));
+	}
+
+	fw->ip.invflags = flags;
+
+	if (in_iface)
+		set_iface(fw->ip.iniface, fw->ip.iniface_mask, in_iface);
+	if (out_iface)
+		set_iface(fw->ip.outiface, fw->ip.outiface_mask, out_iface);
+
+	if ( protocol != IPPROTO_NONE ) {
+		fw->ip.proto = protocol ;
+
+//		fw->ip.flags |= IP6T_F_PROTO ;		// IPv6 only
+
+		if ( protocol == IPPROTO_ICMP )
+		{
+			match = (struct xt_entry_match*)((char*)fw + fw->target_offset);
+			match->u.match_size = XT_ALIGN(sizeof (struct xt_entry_match)) + XT_ALIGN(sizeof(struct ipt_icmp));
+			match->u.user.revision = 0;
+			fw->target_offset = (uint16_t)(fw->target_offset + match->u.match_size);
+			strcpy ( match->u.user.name, "icmp" ) ;
+
+			struct ipt_icmp *icmpinfo = (struct ipt_icmp *) match->data;
+			icmpinfo->type = type ;		// type to match
+			icmpinfo->code[0] = 0 ;		// code lower
+			icmpinfo->code[1] = 0xff ;	// code upper
+			icmpinfo->invflags = 0 ;	// don't invert
+		}
+	}
+
+// target is XTC_LABEL_DROP/XTC_LABEL_ACCEPT
+	fw->next_offset = (uint16_t)size;
+	target = ipt_get_target(fw);
+	target->u.user.target_size = XT_ALIGN (sizeof (struct xt_entry_target) + 1);
+	strcpy_safe(target->u.user.name, target_name);
+//	fw->ip.flags |= IPT_F_GOTO;
+	strcpy_safe(chain, chain_name);
+	// Use iptc_append_entry to add to the chain
+	if (cmd == IPADDRESS_DEL) {
+		unsigned char *matchmask = MALLOC(fw->next_offset);
+		memset(matchmask, 0xff, fw->next_offset);
+		res = iptc_delete_entry(chain, fw, matchmask, handle);
+		FREE(matchmask);
+	}
+	else if (rulenum == APPEND_RULE)
+		res = iptc_append_entry (chain, fw, handle ) ;
+	else
+		res = iptc_insert_entry (chain, fw, rulenum, handle ) ;
+
+	sav_errno = errno ;
+
+	FREE(fw);
+
+	if (res !=  1 && (!force || sav_errno != ENOENT))
+	{
+		log_message(LOG_INFO, "ip4tables_process_entry for chain %s returned %d: %s", chain, res, iptc_strerror (sav_errno) ) ;
+
+		return sav_errno ;
+	}
+
+	return 0 ;
+}
+
+/* Initializes a new iptables instance and returns an iptables resource associated with the new iptables table */
+struct ip6tc_handle* ip6tables_open ( const char* tablename )
+{
+	struct ip6tc_handle *h ;
+
+	if ( !( h = ip6tc_init ( tablename ) ) )
+		return NULL ;
+
+	return h ;
+}
+
+int ip6tables_close ( struct ip6tc_handle* handle, int updated )
+{
+	int res = 1;
+	int sav_errno ;
+
+	if (updated) {
+		if ( ( res = ip6tc_commit ( handle ) ) != 1 )
+		{
+			sav_errno = errno ;
+			log_message(LOG_INFO, "iptc_commit returned %d: %s", res, ip6tc_strerror (sav_errno) );
+		}
+	}
+
+	ip6tc_free ( handle ) ;
+
+	if ( res == 1 )
+		return 0 ;
+	else
+		return ( sav_errno ) ;
+}
+
+int ip6tables_is_chain(struct ip6tc_handle* handle, const char* chain_name)
+{
+	return ip6tc_is_chain(chain_name, handle);
+}
+
+int ip6tables_process_entry( struct ip6tc_handle* handle, const char* chain_name, unsigned int rulenum, const char* target_name, const ip_address_t* src_ip_address, const ip_address_t* dst_ip_address, const char* in_iface, const char* out_iface, uint16_t protocol, uint8_t type, int cmd, uint8_t flags, bool force)
+{
+	size_t size;
+	struct ip6t_entry *fw;
+	struct xt_entry_target *target;
+	struct xt_entry_match *match ;
+	ip6t_chainlabel chain;
+	int res;
+	int sav_errno;
+
+	/* Add an entry */
+
+	memset (chain, 0, sizeof (chain));
+
+	size = XT_ALIGN (sizeof (struct ip6t_entry)) +
+			XT_ALIGN (sizeof (struct xt_entry_target) + 1);
+
+	if ( protocol == IPPROTO_ICMPV6 )
+		size += XT_ALIGN ( sizeof(struct xt_entry_match) ) + XT_ALIGN ( sizeof(struct ip6t_icmp) ) ;
+
+	fw = (struct ip6t_entry*)MALLOC(size);
+
+	fw->target_offset = XT_ALIGN ( sizeof ( struct ip6t_entry ) ) ;
+
+	if ( src_ip_address && src_ip_address->ifa.ifa_family != AF_UNSPEC ) {
+		memcpy(&fw->ipv6.src, &src_ip_address->u.sin6_addr, sizeof ( src_ip_address->u.sin6_addr ) );
+		memset ( &fw->ipv6.smsk, 0xff, sizeof(fw->ipv6.smsk));
+	}
+
+	if ( dst_ip_address && dst_ip_address->ifa.ifa_family != AF_UNSPEC ) {
+		memcpy(&fw->ipv6.dst, &dst_ip_address->u.sin6_addr, sizeof ( dst_ip_address->u.sin6_addr ) );
+		memset ( &fw->ipv6.dmsk, 0xff, sizeof(fw->ipv6.dmsk));
+	}
+
+	fw->ipv6.invflags = flags;
+
+	if (in_iface)
+		set_iface(fw->ipv6.iniface, fw->ipv6.iniface_mask, in_iface);
+	if (out_iface)
+		set_iface(fw->ipv6.outiface, fw->ipv6.outiface_mask, out_iface);
+
+	if ( protocol != IPPROTO_NONE ) {
+		fw->ipv6.proto = protocol ;
+
+		fw->ipv6.flags |= IP6T_F_PROTO ;		// IPv6 only
+
+		if ( protocol == IPPROTO_ICMPV6 )
+		{
+			match = (struct xt_entry_match*)((char*)fw + fw->target_offset);
+			match->u.match_size = XT_ALIGN ( sizeof (struct xt_entry_match) ) + XT_ALIGN ( sizeof (struct ip6t_icmp) ) ;
+			match->u.user.revision = 0;
+			fw->target_offset = (uint16_t)(fw->target_offset + match->u.match_size);
+			strcpy ( match->u.user.name, "icmp6" ) ;
+
+			struct ip6t_icmp *icmpinfo = (struct ip6t_icmp *) match->data;
+			icmpinfo->type = type ;		// type to match
+			icmpinfo->code[0] = 0 ;		// code lower
+			icmpinfo->code[1] = 0xff ;	// code upper
+			icmpinfo->invflags = 0 ;	// don't invert
+		}
+	}
+
+// target is XTC_LABEL_DROP/XTC_LABEL_ACCEPT
+	fw->next_offset = (uint16_t)size;
+	target = ip6t_get_target ( fw ) ;
+	target->u.user.target_size = XT_ALIGN (sizeof (struct xt_entry_target) + 1);
+	strcpy_safe(target->u.user.name, target_name);
+//	fw->ip.flags |= IPT_F_GOTO;
+	strcpy_safe(chain, chain_name);
+
+	// Use iptc_append_entry to add to the chain
+	if (cmd == IPADDRESS_DEL) {
+		unsigned char *matchmask = MALLOC(fw->next_offset);
+		memset(matchmask, 0xff, fw->next_offset);
+		res = ip6tc_delete_entry ( chain, fw, matchmask, handle);
+		FREE(matchmask);
+	}
+	else if (rulenum == APPEND_RULE)
+		res = ip6tc_append_entry (chain, fw, handle ) ;
+	else
+		res = ip6tc_insert_entry (chain, fw, rulenum, handle ) ;
+
+	sav_errno = errno ;
+
+	FREE(fw);
+
+	if (res !=  1 && (!force || sav_errno != ENOENT))
+	{
+		log_message(LOG_INFO, "ip6tables_process_entry for chain %s returned %d: %s", chain, res, ip6tc_strerror (sav_errno) ) ;
+
+		return sav_errno ;
+	}
+
+	return 0 ;
+}
+
+#ifdef _HAVE_LIBIPSET_
+#ifndef IP_SET_OP_VERSION	/* Exposed to userspace from Linux 3.4 */
+				/* Copied from <linux/netfilter/ipset/ip_set.h> */
+#define SO_IP_SET	83
+union ip_set_name_index {
+ char name[IPSET_MAXNAMELEN];
+ ip_set_id_t index;
+};
+
+#define IP_SET_OP_GET_BYNAME 0x00000006 /* Get set index by name */
+struct ip_set_req_get_set {
+ unsigned op;
+ unsigned version;
+ union ip_set_name_index set;
+};
+
+#define IP_SET_OP_VERSION 0x00000100 /* Ask kernel version */
+struct ip_set_req_version {
+ unsigned op;
+ unsigned version;
+};
+#endif
+
+static int
+get_version(unsigned int* version)
+{
+	int sockfd = socket(AF_INET, SOCK_RAW | SOCK_CLOEXEC, IPPROTO_RAW);
+	struct ip_set_req_version req_version;
+	socklen_t size = sizeof(req_version);
+	int res;
+
+	if (sockfd < 0) {
+		log_message(LOG_INFO, "Can't open socket to ipset.");
+		return -1;
+	}
+
+#if !HAVE_DECL_SOCK_CLOEXEC
+	if (fcntl(sockfd, F_SETFD, FD_CLOEXEC) == -1) {
+		log_message(LOG_INFO, "Could not set close on exec: %s",
+			      strerror(errno));
+	}
+#endif
+
+	req_version.op = IP_SET_OP_VERSION;
+	res = getsockopt(sockfd, SOL_IP, SO_IP_SET, &req_version, &size);
+	if (res != 0)
+		log_message(LOG_INFO, "Kernel module xt_set is not loaded in.");
+
+	*version = req_version.version;
+
+	return sockfd;
+}
+
+static void
+get_set_byname_only(const char *setname, struct xt_set_info *info,
+		    int sockfd, unsigned int version, bool ignore_errors)
+{
+	struct ip_set_req_get_set req = { .version = version };
+	socklen_t size = sizeof(struct ip_set_req_get_set);
+	int res;
+
+	req.op = IP_SET_OP_GET_BYNAME;
+	strncpy(req.set.name, setname, IPSET_MAXNAMELEN);
+	req.set.name[IPSET_MAXNAMELEN - 1] = '\0';
+	res = getsockopt(sockfd, SOL_IP, SO_IP_SET, &req, &size);
+
+	if (res != 0) {
+		if (!ignore_errors)
+			log_message(LOG_INFO, "Problem when communicating with ipset, errno=%d.",
+				errno);
+	}
+	else if (size != sizeof(struct ip_set_req_get_set)) {
+		if (!ignore_errors)
+			log_message(LOG_INFO, "Incorrect return size from kernel during ipset lookup, "
+				"(want %zu, got %zu)",
+				sizeof(struct ip_set_req_get_set), (size_t)size);
+	}
+	else if (req.set.index == IPSET_INVALID_ID) {
+		if (!ignore_errors)
+			log_message(LOG_INFO, "Set %s doesn't exist.", setname);
+	}
+	else
+		info->index = req.set.index;
+}
+
+static void
+get_set_byname(const char *setname, struct xt_set_info *info, unsigned family, bool ignore_errors)
+{
+#if defined IP_SET_OP_GET_FNAME
+	struct ip_set_req_get_set_family req;
+	socklen_t size = sizeof(struct ip_set_req_get_set_family);
+	int res;
+#else
+	if (family) {};		/* Avoid compiler warning */
+#endif
+	int sockfd;
+	unsigned int version;
+
+	info->index = IPSET_INVALID_ID;
+
+	if ((sockfd = get_version(&version)) == -1) {
+		info->index = IPSET_INVALID_ID;
+		return;
+	}
+
+#if defined IP_SET_OP_GET_FNAME		/* Since Linux 3.13 */
+	req.version = version;
+	req.op = IP_SET_OP_GET_FNAME;
+	strncpy(req.set.name, setname, IPSET_MAXNAMELEN);
+	req.set.name[IPSET_MAXNAMELEN - 1] = '\0';
+	res = getsockopt(sockfd, SOL_IP, SO_IP_SET, &req, &size);
+
+	if (res != 0 && errno == EBADMSG)
+#endif
+	{
+		/* Backward compatibility */
+		get_set_byname_only(setname, info, sockfd, version, ignore_errors);
+
+		close(sockfd);
+		return;
+	}
+
+#if defined IP_SET_OP_GET_FNAME
+	close(sockfd);
+	if (res != 0) {
+		if (!ignore_errors)
+			log_message(LOG_INFO, "Problem when communicating with ipset, errno=%d.",
+				errno);
+	}
+	else if (size != sizeof(struct ip_set_req_get_set_family)) {
+		if (!ignore_errors)
+			log_message(LOG_INFO, "Incorrect return size from kernel during ipset lookup, "
+				"(want %zu, got %zu)",
+				sizeof(struct ip_set_req_get_set_family),
+				(size_t)size);
+	}
+	else if (req.set.index == IPSET_INVALID_ID) {
+		if (!ignore_errors)
+			log_message(LOG_INFO, "Set %s doesn't exist.", setname);
+	}
+	else if (!(req.family == family ||
+	      req.family == NFPROTO_UNSPEC)) {
+		if (!ignore_errors)
+			log_message(LOG_INFO, "The protocol family of set %s is %s, "
+				      "which is not applicable.",
+				      setname,
+				      req.family == NFPROTO_IPV4 ? "IPv4" : "IPv6");
+	}
+	else
+		info->index = req.set.index;
+#endif
+}
+
+int ip4tables_add_rules(struct iptc_handle* handle, const char* chain_name, unsigned int rulenum, uint8_t dim, uint8_t src_dst, const char* target_name, const ip_address_t *src_ip_address, const ip_address_t *dst_ip_address, const char* set_name, uint16_t protocol, uint8_t param, int cmd, bool ignore_errors)
+{
+	size_t size;
+	struct ipt_entry *fw;
+	struct xt_entry_target *target;
+	struct xt_entry_match *match;
+#ifdef HAVE_XT_SET_INFO_MATCH_V4
+	struct xt_set_info_match_v4 *setinfo;
+#elif defined HAVE_XT_SET_INFO_MATCH_V3
+	struct xt_set_info_match_v3 *setinfo;
+#elif defined HAVE_XT_SET_INFO_MATCH_V1
+	struct xt_set_info_match_v1 *setinfo;
+#else
+	struct xt_set_info_match *setinfo;
+#endif
+	ipt_chainlabel chain;
+	int res;
+	int sav_errno;
+
+	/* Add an entry */
+	size = XT_ALIGN(sizeof (struct ipt_entry)) +
+			XT_ALIGN(sizeof(struct xt_entry_match)) +
+			XT_ALIGN(sizeof(struct xt_entry_target) + 1) +
+			XT_ALIGN(sizeof(*setinfo));
+
+	if (protocol == IPPROTO_ICMP)
+		size += XT_ALIGN(sizeof(struct xt_entry_match)) + XT_ALIGN(sizeof(struct ipt_icmp));
+
+	fw = (struct ipt_entry*)MALLOC(size);
+
+	fw->target_offset = XT_ALIGN(sizeof(struct ipt_entry));
+
+	if (src_ip_address && src_ip_address->ifa.ifa_family != AF_UNSPEC)
+	{
+		fw->ip.src.s_addr = src_ip_address->u.sin.sin_addr.s_addr;
+		fw->ip.smsk.s_addr = 0xffffffff;
+	}
+
+	if (dst_ip_address && dst_ip_address->ifa.ifa_family != AF_UNSPEC)
+	{
+		fw->ip.dst.s_addr = dst_ip_address->u.sin.sin_addr.s_addr;
+		fw->ip.dmsk.s_addr = 0xffffffff;
+	}
+
+	// set
+	match = (struct xt_entry_match*)((char*)fw + fw->target_offset);
+	match->u.match_size = XT_ALIGN(sizeof(struct xt_entry_match)) + XT_ALIGN(sizeof(*setinfo));
+#ifdef HAVE_XT_SET_INFO_MATCH_V4
+	match->u.user.revision = 4;
+#elif defined HAVE_XT_SET_INFO_MATCH_V3
+	match->u.user.revision = 3;
+#elif defined HAVE_XT_SET_INFO_MATCH_V1
+	match->u.user.revision = 1;
+#else
+	match->u.user.revision = 0;
+#endif
+	fw->target_offset = (uint16_t)(fw->target_offset + match->u.match_size);
+	strcpy(match->u.user.name, "set");
+
+#ifdef HAVE_XT_SET_INFO_MATCH_V4
+	setinfo = (struct xt_set_info_match_v4 *)match->data;
+#elif defined HAVE_XT_SET_INFO_MATCH_V3
+	setinfo = (struct xt_set_info_match_v3 *)match->data;
+#elif defined HAVE_XT_SET_INFO_MATCH_V1
+	setinfo = (struct xt_set_info_match_v1 *)match->data;
+#else
+	setinfo = (struct xt_set_info_match *)match->data;
+#endif
+	memset(setinfo, 0, sizeof (*setinfo));
+
+	get_set_byname(set_name, &setinfo->match_set, NFPROTO_IPV4, ignore_errors);
+	if (setinfo->match_set.index == IPSET_INVALID_ID) {
+		FREE(fw);
+		return -1;
+	}
+
+	setinfo->match_set.dim = dim;
+	setinfo->match_set.flags = src_dst;
+
+	if (protocol != IPPROTO_NONE) {
+		fw->ip.proto = protocol;
+
+//		fw->ip.flags |= IP6T_F_PROTO ;		// IPv6 only
+
+		if (protocol == IPPROTO_ICMP)
+		{
+			match = (struct xt_entry_match*)((char*)fw + fw->target_offset);
+			match->u.match_size = XT_ALIGN(sizeof(struct xt_entry_match)) + XT_ALIGN(sizeof(struct ipt_icmp));
+			match->u.user.revision = 0;
+			fw->target_offset = (uint16_t)(fw->target_offset + match->u.match_size);
+			strcpy(match->u.user.name, "icmp");
+
+			struct ipt_icmp *icmpinfo = (struct ipt_icmp *)match->data;
+			icmpinfo->type = param;		// type to match
+			icmpinfo->code[0] = 0;		// code lower
+			icmpinfo->code[1] = 0xff;	// code upper
+			icmpinfo->invflags = 0;		// don't invert
+		}
+	}
+
+// target is XTC_LABEL_DROP/XTC_LABEL_ACCEPT
+	fw->next_offset = (uint16_t)size;
+	target = ipt_get_target(fw);
+	target->u.user.target_size = XT_ALIGN(sizeof(struct xt_entry_target) + 1);
+	strcpy_safe(target->u.user.name, target_name);
+//	fw->ip.flags |= IPT_F_GOTO;
+	strcpy_safe(chain, chain_name);
+
+	// Use iptc_append_entry to add to the chain
+	if (cmd == IPADDRESS_DEL) {
+		unsigned char *matchmask = MALLOC(fw->next_offset);
+		memset(matchmask, 0xff, fw->next_offset);
+		res = iptc_delete_entry(chain, fw, matchmask, handle);
+		FREE(matchmask);
+	}
+	else if (rulenum == APPEND_RULE)
+		res = iptc_append_entry(chain, fw, handle) ;
+	else
+		res = iptc_insert_entry(chain, fw, rulenum, handle) ;
+
+	sav_errno = errno;
+
+	FREE(fw);
+
+	if (res!= 1)
+	{
+		if (!ignore_errors)
+			log_message(LOG_INFO, "iptc_insert_entry for chain %s returned %d: %s", chain_name, res, iptc_strerror(sav_errno)) ;
+
+		return sav_errno;
+	}
+
+	return 0;
+}
+
+int ip6tables_add_rules(struct ip6tc_handle* handle, const char* chain_name, unsigned int rulenum, uint8_t dim, uint8_t src_dst, const char* target_name, const ip_address_t *src_ip_address, const ip_address_t *dst_ip_address, const char* set_name, uint16_t protocol, uint8_t param, int cmd, bool ignore_errors)
+{
+	size_t size;
+	struct ip6t_entry *fw;
+	struct xt_entry_target *target;
+	struct xt_entry_match *match;
+#ifdef HAVE_XT_SET_INFO_MATCH_V4
+	struct xt_set_info_match_v4 *setinfo;
+#elif defined HAVE_XT_SET_INFO_MATCH_V3
+	struct xt_set_info_match_v3 *setinfo;
+#elif defined HAVE_XT_SET_INFO_MATCH_V1
+	struct xt_set_info_match_v1 *setinfo;
+#else
+	struct xt_set_info_match *setinfo;
+#endif
+	ip6t_chainlabel chain;
+	int res;
+	int sav_errno;
+
+	/* Add an entry */
+
+	memset(chain, 0, sizeof(chain));
+
+	size = XT_ALIGN(sizeof (struct ip6t_entry)) +
+			XT_ALIGN(sizeof(struct xt_entry_match)) +
+			XT_ALIGN(sizeof(struct xt_entry_target) + 1) +
+			XT_ALIGN(sizeof(*setinfo));
+
+	if (protocol == IPPROTO_ICMPV6)
+		size += XT_ALIGN(sizeof(struct xt_entry_match)) + XT_ALIGN(sizeof(struct ip6t_icmp));
+
+	fw = (struct ip6t_entry*)MALLOC(size);
+
+	if (src_ip_address && src_ip_address->ifa.ifa_family != AF_UNSPEC) {
+//		memcpy(&fw->ipv6.src, &src_ip_address->u.sin6_addr, sizeof(src_ip_address->u.sin6_addr));
+		fw->ipv6.src = src_ip_address->u.sin6_addr;
+		memset(&fw->ipv6.smsk, 0xff, sizeof(fw->ipv6.smsk));
+	}
+
+	if ( dst_ip_address && dst_ip_address->ifa.ifa_family != AF_UNSPEC ) {
+//		memcpy(&fw->ipv6.dst, &dst_ip_address->u.sin6_addr, sizeof ( dst_ip_address->u.sin6_addr ) );
+		fw->ipv6.dst = dst_ip_address->u.sin6_addr;
+		memset(&fw->ipv6.dmsk, 0xff, sizeof(fw->ipv6.dmsk));
+	}
+
+	fw->target_offset = XT_ALIGN(sizeof(struct ip6t_entry));
+
+	// set
+	match = (struct xt_entry_match*)((char*)fw + fw->target_offset);
+	match->u.match_size = XT_ALIGN(sizeof(struct xt_entry_match)) + XT_ALIGN(sizeof(*setinfo));
+#ifdef HAVE_XT_SET_INFO_MATCH_V4
+	match->u.user.revision = 4;
+#elif defined HAVE_XT_SET_INFO_MATCH_V3
+	match->u.user.revision = 3;
+#elif defined HAVE_XT_SET_INFO_MATCH_V1
+	match->u.user.revision = 1;
+#else
+	match->u.user.revision = 0;
+#endif
+	fw->target_offset = (uint16_t)(fw->target_offset + match->u.match_size);
+	strcpy(match->u.user.name, "set");
+
+#ifdef HAVE_XT_SET_INFO_MATCH_V4
+	setinfo = (struct xt_set_info_match_v4 *)match->data;
+#elif defined HAVE_XT_SET_INFO_MATCH_V3
+	setinfo = (struct xt_set_info_match_v3 *)match->data;
+#elif defined HAVE_XT_SET_INFO_MATCH_V1
+	setinfo = (struct xt_set_info_match_v1 *)match->data;
+#else
+	setinfo = (struct xt_set_info_match *)match->data;
+#endif
+	memset(setinfo, 0, sizeof(*setinfo));
+
+	get_set_byname (set_name, &setinfo->match_set, NFPROTO_IPV6, ignore_errors);
+	if (setinfo->match_set.index == IPSET_INVALID_ID) {
+		FREE(fw);
+		return -1;
+	}
+
+	setinfo->match_set.dim = dim;
+	setinfo->match_set.flags = src_dst;
+
+	if (protocol != IPPROTO_NONE) {
+		fw->ipv6.proto = protocol;
+
+		fw->ipv6.flags |= IP6T_F_PROTO ;		// IPv6 only
+
+		if (protocol == IPPROTO_ICMPV6)
+		{
+			match = (struct xt_entry_match*)((char*)fw + fw->target_offset);
+			match->u.match_size = XT_ALIGN(sizeof(struct xt_entry_match)) + XT_ALIGN(sizeof(struct ip6t_icmp));
+			match->u.user.revision = 0;
+			fw->target_offset = (uint16_t)(fw->target_offset + match->u.match_size);
+			strcpy(match->u.user.name, "icmp6");
+
+			struct ip6t_icmp *icmpinfo = (struct ip6t_icmp *)match->data;
+			icmpinfo->type = param;		// type to match
+			icmpinfo->code[0] = 0;		// code lower
+			icmpinfo->code[1] = 0xff;	// code upper
+			icmpinfo->invflags = 0;		// don't invert
+		}
+	}
+
+// target is XTC_LABEL_DROP/XTC_LABEL_ACCEPT
+	fw->next_offset = (uint16_t)size;
+	target = ip6t_get_target(fw);
+	target->u.user.target_size = XT_ALIGN(sizeof(struct xt_entry_target) + 1);
+	strcpy_safe(target->u.user.name, target_name);
+//	fw->ip.flags |= IP6T_F_GOTO;
+	strcpy_safe(chain, chain_name);
+
+	// Use iptc_append_entry to add to the chain
+	if (cmd == IPADDRESS_DEL) {
+		unsigned char *matchmask = MALLOC(fw->next_offset);
+		memset(matchmask, 0xff, fw->next_offset);
+		res = ip6tc_delete_entry(chain, fw, matchmask, handle);
+		FREE(matchmask);
+	}
+	else if (rulenum == APPEND_RULE)
+		res = ip6tc_append_entry(chain, fw, handle) ;
+	else
+		res = ip6tc_insert_entry(chain, fw, rulenum, handle) ;
+
+	sav_errno = errno;
+
+	FREE(fw);
+
+	if (res!= 1)
+	{
+		if (!ignore_errors)
+			log_message(LOG_INFO, "ip6tc_insert_entry for chain %s returned %d: %s", chain, res, ip6tc_strerror(sav_errno)) ;
+
+		return sav_errno;
+	}
+
+	return 0;
+}
+#endif
+
+#ifdef _LIBIPTC_DYNAMIC_
+bool
+iptables_lib_init(uint8_t family)
+{
+	if (family == AF_INET) {
+		if (libip4tc_handle)
+			return true;
+
+		/* Attempt to open the ip4tc library */
+		if (!(libip4tc_handle = dlopen("libip4tc.so", RTLD_NOW)) &&
+		    !(libip4tc_handle = dlopen(IP4TC_LIB_NAME, RTLD_NOW))) {
+			log_message(LOG_INFO, "Unable to load ip4tc library - %s", dlerror());
+		}
+		else if (!(iptc_init_addr = dlsym(libip4tc_handle, "iptc_init")) ||
+			 !(iptc_free_addr = dlsym(libip4tc_handle, "iptc_free")) ||
+			 !(iptc_is_chain_addr = dlsym(libip4tc_handle,"iptc_is_chain")) ||
+			 !(iptc_insert_entry_addr = dlsym(libip4tc_handle,"iptc_insert_entry")) ||
+			 !(iptc_append_entry_addr = dlsym(libip4tc_handle,"iptc_append_entry")) ||
+			 !(iptc_delete_entry_addr = dlsym(libip4tc_handle,"iptc_delete_entry")) ||
+			 !(iptc_commit_addr = dlsym(libip4tc_handle,"iptc_commit")) ||
+			 !(iptc_strerror_addr = dlsym(libip4tc_handle,"iptc_strerror"))) {
+			log_message(LOG_INFO, "Failed to dynamic link an iptc function - %s", dlerror());
+			dlclose(libip4tc_handle);
+			libip4tc_handle = NULL;
+		}
+
+		return !!libip4tc_handle;
+	}
+
+	if (libip6tc_handle)
+		return true;
+
+	/* Attempt to open the ip6tc library */
+	if (!(libip6tc_handle = dlopen("libip6tc.so", RTLD_NOW)) &&
+	    !(libip6tc_handle = dlopen(IP6TC_LIB_NAME, RTLD_NOW))) {
+		log_message(LOG_INFO, "Unable to load ip6tc library - %s", dlerror());
+	}
+	else if (!(ip6tc_init_addr = dlsym(libip6tc_handle, "ip6tc_init")) ||
+		 !(ip6tc_free_addr = dlsym(libip6tc_handle, "ip6tc_free")) ||
+		 !(ip6tc_is_chain_addr = dlsym(libip6tc_handle,"ip6tc_is_chain")) ||
+		 !(ip6tc_insert_entry_addr = dlsym(libip6tc_handle,"ip6tc_insert_entry")) ||
+		 !(ip6tc_append_entry_addr = dlsym(libip6tc_handle,"ip6tc_append_entry")) ||
+		 !(ip6tc_delete_entry_addr = dlsym(libip6tc_handle,"ip6tc_delete_entry")) ||
+		 !(ip6tc_commit_addr = dlsym(libip6tc_handle,"ip6tc_commit")) ||
+		 !(ip6tc_strerror_addr = dlsym(libip6tc_handle,"ip6tc_strerror"))) {
+		log_message(LOG_INFO, "Failed to dynamic link an ip6tc function - %s", dlerror());
+		dlclose(libip6tc_handle);
+		libip6tc_handle = NULL;
+	}
+
+	return !!libip6tc_handle;
+}
+#endif
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_iptables_cmd.c b/tools/keepalived/keepalived/vrrp/vrrp_iptables_cmd.c
new file mode 100644
index 000000000..d82196ccb
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_iptables_cmd.c
@@ -0,0 +1,351 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        iptables manipulation by invoking iptables program.
+ *		This does not use ipsets.
+ *
+ * Author:      Quentin Armitage, <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+/* The way iptables appears to work is that when we do an iptc_init, we get a
+ * snapshot of the iptables table, which internally includes an update number.
+ * When iptc_commit is called, it checks the update number, and if it has been
+ * updated by someone else, returns EAGAIN.
+ *
+ * Note: iptc_commit only needs to be called if we are changing something. In
+ *   all cases though, iptc_free must be called.
+ *
+ * Rules are numbered from 0 - despite what some documentation says
+ *
+ * Note: as insertions/deletions are made, rule numbers are changing.
+ *
+ * See http://www.tldp.org/HOWTO/Querying-libiptc-HOWTO/qfunction.html for
+ *   some documentation
+*/
+
+#include "config.h"
+
+/* global includes */
+#include <stdbool.h>
+#include <arpa/inet.h>
+
+/* local includes */
+#include "vrrp_iptables_cmd.h"
+#include "logger.h"
+#include "vrrp_ipaddress.h"
+#include "global_data.h"
+#ifdef _HAVE_LIBIPTC_
+#include "vrrp_iptables_lib.h"
+#endif
+#include "vrrp_firewall.h"
+
+#ifdef _HAVE_VRRP_VMAC_
+static bool igmp_setup[2];
+#endif
+
+static const char *
+ipaddressonlytos(char *buf, const ip_address_t *ipaddress)
+{
+	static char addr_str[INET6_ADDRSTRLEN];
+
+	if (!buf)
+		buf = addr_str;
+
+	if (IP_IS6(ipaddress))
+		inet_ntop(AF_INET6, &ipaddress->u.sin6_addr, buf, INET6_ADDRSTRLEN);
+	else
+		inet_ntop(AF_INET, &ipaddress->u.sin.sin_addr, buf, INET_ADDRSTRLEN);
+
+	return buf;
+}
+
+init_state_t
+check_chains_exist_cmd(uint8_t family)
+{
+	const char *argv[4];
+
+	argv[1] = "-nL";
+	argv[2] = global_data->vrrp_iptables_inchain;
+	argv[3] = NULL;
+
+	if (family == AF_INET)
+	{
+		argv[0] = "iptables";
+
+		if (fork_exec(argv) < 0) {
+			log_message(LOG_INFO, "iptables chain %s does not exist", global_data->vrrp_iptables_inchain);
+			return INIT_FAILED;
+		}
+
+		if (global_data->vrrp_iptables_outchain[0]) {
+			argv[2] = global_data->vrrp_iptables_outchain;
+			if (fork_exec(argv) < 0) {
+				log_message(LOG_INFO, "iptables chain %s does not exist", global_data->vrrp_iptables_outchain);
+				return INIT_FAILED;
+			}
+		}
+
+		return INIT_SUCCESS;
+	}
+
+	argv[0] = "ip6tables";
+	argv[2] = global_data->vrrp_iptables_inchain;
+
+	if (fork_exec(argv) < 0) {
+		log_message(LOG_INFO, "ip6tables chain %s does not exist", global_data->vrrp_iptables_inchain);
+		return INIT_FAILED;
+	}
+
+	if (global_data->vrrp_iptables_outchain[0]) {
+		argv[2] = global_data->vrrp_iptables_outchain;
+		if (fork_exec(argv) < 0) {
+			log_message(LOG_INFO, "ip6tables chain %s does not exist", global_data->vrrp_iptables_outchain);
+			return INIT_FAILED;
+		}
+	}
+
+	return INIT_SUCCESS;
+}
+
+init_state_t
+iptables_init_cmd(uint8_t family)
+{
+	const char *argv[3];
+
+	/* If can't use libiptc, check iptables command available */
+	argv[1] = "-V";
+	argv[2] = NULL;
+
+	if (family == AF_INET)
+	{
+		argv[0] = "iptables";
+		if (fork_exec(argv) < 0) {
+			log_message(LOG_INFO, "iptables command not available - can't filter IPv4 VIP address destinations");
+			return INIT_FAILED;
+		}
+
+	} else {
+		argv[0] = "ip6tables";
+		if (fork_exec(argv) < 0) {
+			log_message(LOG_INFO, "ip6tables command not available - can't filter IPv6 VIP address destinations");
+			return INIT_FAILED;
+		}
+	}
+
+	return INIT_SUCCESS;
+}
+
+static void
+handle_iptable_rule_to_NA_cmd(ip_address_t *ipaddress, const char *ifname, int cmd, bool force)
+{
+	const char *argv[14];
+	int i = 0;
+	int if_specifier = -1;
+	int type_specifier ;
+	const char *addr_str;
+
+	if (global_data->vrrp_iptables_inchain[0] == '\0')
+		return;
+
+	addr_str = ipaddressonlytos(NULL, ipaddress);
+
+	argv[i++] = "ip6tables";
+	argv[i++] = cmd ? "-I" : "-D";
+	argv[i++] = global_data->vrrp_iptables_inchain;
+	argv[i++] = "-d";
+	argv[i++] = addr_str;
+	if (IN6_IS_ADDR_LINKLOCAL(&ipaddress->u.sin6_addr)) {
+		if_specifier = i;
+		argv[i++] = "-i";
+		argv[i++] = ifname;
+	}
+	argv[i++] = "-p";
+	argv[i++] = "icmpv6";
+	argv[i++] = "--icmpv6-type";
+	type_specifier = i;
+	argv[i++] = "136";
+	argv[i++] = "-j";
+	argv[i++] = "ACCEPT";
+	argv[i] = NULL;
+
+	if (fork_exec(argv) < 0 && !force)
+		log_message(LOG_ERR, "Failed to %s ip6table rule to accept NAs sent"
+				     " to vip %s", (cmd) ? "set" : "remove", addr_str);
+
+	argv[type_specifier] = "135";
+
+	if (fork_exec(argv) < 0 && !force)
+		log_message(LOG_ERR, "Failed to %s ip6table rule to accept NSs sent"
+				     " to vip %s", (cmd) ? "set" : "remove", addr_str);
+
+	if (global_data->vrrp_iptables_outchain[0] == '\0')
+		return;
+
+	argv[2] = global_data->vrrp_iptables_outchain;
+	argv[3] = "-s";
+	if (if_specifier >= 0)
+		argv[if_specifier] = "-o";
+
+	/* Allow NSs to be sent - this should only happen if the underlying interface
+	   doesn't have an IPv6 address */
+	if (fork_exec(argv) < 0 && !force)
+		log_message(LOG_ERR, "Failed to %s ip6table rule to allow NSs to be"
+				     " sent from vip %s", (cmd) ? "set" : "remove", addr_str);
+
+	argv[type_specifier] = "136";
+
+	/* Allow NAs to be sent in reply to an NS */
+	if (fork_exec(argv) < 0 && !force)
+		log_message(LOG_ERR, "Failed to %s ip6table rule to allow NAs to be"
+				     " sent from vip %s", (cmd) ? "set" : "remove", addr_str);
+}
+
+/* add/remove iptable drop rule to VIP */
+void
+handle_iptable_rule_to_vip_cmd(ip_address_t *ipaddress, int cmd, bool force)
+{
+	const char *argv[10];
+	int i = 0;
+	int if_specifier = -1;
+	const char *addr_str;
+	const char *ifname = NULL;
+
+	if (IP_IS6(ipaddress)) {
+		if (IN6_IS_ADDR_LINKLOCAL(&ipaddress->u.sin6_addr))
+			ifname = ipaddress->ifp->ifname;
+		argv[i++] = "ip6tables";
+	} else {
+		argv[i++] = "iptables";
+	}
+
+	addr_str = ipaddressonlytos(NULL, ipaddress);
+
+	argv[i++] = cmd ? "-I" : "-D";
+	argv[i++] = global_data->vrrp_iptables_inchain;
+	argv[i++] = "-d";
+	argv[i++] = addr_str;
+	if (ifname) {
+		if_specifier = i;
+		argv[i++] = "-i";
+		argv[i++] = ifname;
+	}
+	argv[i++] = "-j";
+	argv[i++] = "DROP";
+	argv[i] = NULL;
+
+	if (fork_exec(argv) < 0) {
+		if (!force)
+			log_message(LOG_ERR, "Failed to %s ip%stable drop rule"
+					     " to vip %s", (cmd) ? "set" : "remove", IP_IS6(ipaddress) ? "6" : "", addr_str);
+	}
+	else
+		ipaddress->iptable_rule_set = (cmd != IPADDRESS_DEL);
+
+	if (global_data->vrrp_iptables_outchain[0] == '\0')
+		return;
+
+	argv[2] = global_data->vrrp_iptables_outchain ;
+	argv[3] = "-s";
+	if (if_specifier >= 0)
+		argv[if_specifier] = "-o";
+
+	if (fork_exec(argv) < 0 && !force)
+		log_message(LOG_ERR, "Failed to %s ip%stable drop rule"
+				     " from vip %s", (cmd) ? "set" : "remove", IP_IS6(ipaddress) ? "6" : "", addr_str);
+
+	if (IP_IS6(ipaddress))
+		handle_iptable_rule_to_NA_cmd(ipaddress, ifname, cmd, force);
+}
+
+#ifdef _HAVE_VRRP_VMAC_
+static void
+add_del_igmp_rules(uint8_t family, int cmd)
+{
+	const char *argv[9];
+	int i = 0;
+
+	argv[i++] = family == AF_INET ? "iptables" : "ip6tables";
+	argv[i++] = cmd ? "-A" : "-D";
+	argv[i++] = global_data->vrrp_iptables_outchain;
+	argv[i++] = "!";
+	argv[i++] = "-d";
+	argv[i++] = family == AF_INET ? "224.0.0.22" : "ff02::16";
+	argv[i++] = "-j";
+	argv[i++] = "RETURN";
+	argv[i] = NULL;
+
+	if (fork_exec(argv))
+		log_message(LOG_ERR, "Failed to %s ip%stable igmp check rule",
+				     cmd ? "set" : "remove", family == AF_INET6 ? "6" : "");
+log_message(LOG_INFO, "Adding comment for cmd");
+i=3;
+argv[i++] = "-m";
+argv[i++] = "comment";
+argv[i++] = "--comment";
+argv[i++] = "Using_iptables_cmd";
+argv[i] = NULL;
+	if (fork_exec(argv))
+		log_message(LOG_ERR, "Failed to %s ip%stable comment",
+				     cmd ? "set" : "remove", family == AF_INET6 ? "6" : "");
+}
+
+static void
+setup_igmp(uint8_t family)
+{
+	add_del_igmp_rules(family, IPADDRESS_ADD);
+	igmp_setup[family != AF_INET] = true;
+}
+
+void
+handle_iptable_rule_for_igmp_cmd(const char *ifname, int cmd, uint8_t family)
+{
+	const char *argv[8];
+	int i = 0;
+
+	if (!igmp_setup[family != AF_INET])
+		setup_igmp(family);
+
+	argv[i++] = family == AF_INET ? "iptables" : "ip6tables";
+	argv[i++] = cmd ? "-A" : "-D";
+	argv[i++] = global_data->vrrp_iptables_outchain;
+	argv[i++] = "-o";
+	argv[i++] = ifname;
+	argv[i++] = "-j";
+	argv[i++] = "DROP";
+	argv[i] = NULL;
+
+	if (fork_exec(argv))
+		log_message(LOG_ERR, "Failed to %s ip%stable igmp drop rule for %s",
+				     cmd ? "set" : "remove", family == AF_INET6 ? "6" : "", ifname);
+}
+#endif
+
+void
+iptables_fini_cmd(void)
+{
+#ifdef _HAVE_VRRP_VMAC_
+	if (igmp_setup[0]) {
+		add_del_igmp_rules(AF_INET, IPADDRESS_DEL);
+		igmp_setup[0] = false;
+	}
+
+	if (igmp_setup[1]) {
+		add_del_igmp_rules(AF_INET6, IPADDRESS_DEL);
+		igmp_setup[1] = false;
+	}
+#endif
+}
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_iptables_lib.c b/tools/keepalived/keepalived/vrrp/vrrp_iptables_lib.c
new file mode 100644
index 000000000..d7af2b6af
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_iptables_lib.c
@@ -0,0 +1,535 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        iptables manipulation directly without invoking iptables program.
+ *		This will use ipsets if they are available, in preference to
+ *		multiple entries in iptables.
+ *
+ * Author:      Quentin Armitage, <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+/* The way iptables appears to work is that when we do an iptc_init, we get a
+ * snapshot of the iptables table, which internally includes an update number.
+ * When iptc_commit is called, it checks the update number, and if it has been
+ * updated by someone else, returns EAGAIN.
+ *
+ * Note: iptc_commit only needs to be called if we are changing something. In
+ *   all cases though, iptc_free must be called.
+ *
+ * Rules are numbered from 0 - despite what some documentation says
+ *
+ * Note: as insertions/deletions are made, rule numbers are changing.
+ *
+ * See http://www.tldp.org/HOWTO/Querying-libiptc-HOWTO/qfunction.html for
+ *   some documentation
+*/
+
+#include "config.h"
+
+#ifdef _HAVE_LIBIPTC_LINUX_NET_IF_H_COLLISION_
+/* Linux 4.5 introduced a namespace collision when including
+ * libiptc/libiptc.h due to both net/if.h and linux/if.h
+ * being included.
+ *
+ * See: http://bugzilla.netfilter.org/show_bug.cgi?id=1067
+ *
+ * Including net/if.h first resolves the issue.
+ */
+
+#include <net/if.h>
+#endif
+
+#ifdef _HAVE_LIBIPTC_
+#include <libiptc/libxtc.h>
+#endif
+#include <stdint.h>
+#ifdef _HAVE_LIBIPSET_
+#ifdef USE_LIBIPSET_LINUX_IP_SET_H
+#include <libipset/linux_ip_set.h>
+#else
+#include <linux/netfilter/ipset/ip_set.h>
+#endif
+#endif
+#include <stdbool.h>
+#include <linux/netfilter_ipv4/ip_tables.h>
+
+#include "vrrp_iptables_lib.h"
+#include "vrrp_iptables_calls.h"
+#include "vrrp_firewall.h"
+#ifdef _HAVE_LIBIPSET_
+#include "vrrp_ipset.h"
+#endif
+#include "logger.h"
+#include "global_data.h"
+#include "memory.h"
+#include "warnings.h"
+
+struct ipt_handle {
+	struct iptc_handle *h4;
+	struct ip6tc_handle *h6;
+	bool updated_v4;
+	bool updated_v6;
+#ifdef _HAVE_LIBIPSET_
+	struct ipset_session* session;
+#endif
+	int	cmd;
+} ;
+
+/* element 0 is IPv4, element 1 is IPv6 */
+#ifdef _HAVE_LIBIPSET_
+static bool vips_setup[2];
+#endif
+#ifdef _HAVE_VRRP_VMAC_
+static bool igmp_setup[2];
+#endif
+
+static int
+iptables_entry(struct ipt_handle* h, uint8_t family, const char* chain_name, unsigned int rulenum, const char* target_name, const ip_address_t* src_ip_address, const ip_address_t* dst_ip_address, const char* in_iface, const char* out_iface, uint16_t protocol, uint8_t type, int cmd, uint8_t flags, bool force)
+{
+	int res;
+
+	if (family == AF_INET) {
+		if (!h->h4)
+			h->h4 = ip4tables_open ("filter");
+
+		res = ip4tables_process_entry(h->h4, chain_name, rulenum, target_name, src_ip_address, dst_ip_address, in_iface, out_iface, protocol, type, cmd, flags, force);
+		if (!res)
+			h->updated_v4 = true ;
+		return res;
+	}
+	else {
+		if (!h->h6)
+			h->h6 = ip6tables_open ("filter");
+
+		res = ip6tables_process_entry(h->h6, chain_name, rulenum, target_name, src_ip_address, dst_ip_address, in_iface, out_iface, protocol, type, cmd, flags, force);
+		if (!res)
+			h->updated_v6 = true;
+		return res;
+	}
+
+	return 0;
+}
+
+#ifdef _HAVE_LIBIPSET_
+static void
+add_del_vip_sets(struct ipt_handle *h, int cmd, uint8_t family, bool reload)
+{
+	if (!global_data->using_ipsets)
+		return;
+
+	if (cmd == IPADDRESS_ADD)
+		add_vip_ipsets(&h->session, family, reload);
+	else
+		remove_vip_ipsets(&h->session, family);
+}
+
+static void
+add_del_igmp_sets(struct ipt_handle *h, int cmd, uint8_t family, bool reload)
+{
+	if (cmd == IPADDRESS_ADD)
+		add_igmp_ipsets(&h->session, family, reload);
+	else
+		remove_igmp_ipsets(&h->session, family);
+}
+
+static void
+add_del_vip_rules(struct ipt_handle *h, int cmd, uint8_t family, bool ignore_errors)
+{
+	if (family == AF_INET) {
+		if (h->h4 || (h->h4 = ip4tables_open("filter"))) {
+			if (global_data->vrrp_iptables_inchain[0])
+				ip4tables_add_rules(h->h4, global_data->vrrp_iptables_inchain, APPEND_RULE, IPSET_DIM_ONE, 0, XTC_LABEL_DROP, NULL, NULL, global_data->vrrp_ipset_address, IPPROTO_NONE, 0, cmd, ignore_errors);
+			if (global_data->vrrp_iptables_outchain[0])
+				ip4tables_add_rules(h->h4, global_data->vrrp_iptables_outchain, APPEND_RULE, IPSET_DIM_ONE, IPSET_DIM_ONE_SRC, XTC_LABEL_DROP, NULL, NULL, global_data->vrrp_ipset_address, IPPROTO_NONE, 0, cmd, ignore_errors);
+		}
+
+		h->updated_v4 = true;
+		return;
+	}
+
+	if (h->h6 || (h->h6 = ip6tables_open("filter"))) {
+		if (global_data->vrrp_iptables_inchain[0]) {
+#ifdef HAVE_IPSET_ATTR_IFACE
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_inchain, APPEND_RULE, IPSET_DIM_TWO, IPSET_DIM_TWO_SRC, XTC_LABEL_ACCEPT, NULL, NULL, global_data->vrrp_ipset_address_iface6, IPPROTO_ICMPV6, 135, cmd, ignore_errors);
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_inchain, APPEND_RULE, IPSET_DIM_TWO, IPSET_DIM_TWO_SRC, XTC_LABEL_ACCEPT, NULL, NULL, global_data->vrrp_ipset_address_iface6, IPPROTO_ICMPV6, 136, cmd, ignore_errors);
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_inchain, APPEND_RULE, IPSET_DIM_TWO, IPSET_DIM_TWO_SRC, XTC_LABEL_DROP, NULL, NULL, global_data->vrrp_ipset_address_iface6, IPPROTO_NONE, 0, cmd, ignore_errors);
+#else
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_inchain, APPEND_RULE, IPSET_DIM_ONE, 0, XTC_LABEL_ACCEPT, NULL, NULL, global_data->vrrp_ipset_address_iface6, IPPROTO_ICMPV6, 135, cmd, ignore_errors);
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_inchain, APPEND_RULE, IPSET_DIM_ONE, 0, XTC_LABEL_ACCEPT, NULL, NULL, global_data->vrrp_ipset_address_iface6, IPPROTO_ICMPV6, 136, cmd, ignore_errors);
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_inchain, APPEND_RULE, IPSET_DIM_ONE, 0, XTC_LABEL_DROP, NULL, NULL, global_data->vrrp_ipset_address_iface6, IPPROTO_NONE, 0, cmd, ignore_errors);
+#endif
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_inchain, APPEND_RULE, IPSET_DIM_ONE, 0, XTC_LABEL_ACCEPT, NULL, NULL, global_data->vrrp_ipset_address6, IPPROTO_ICMPV6, 135, cmd, ignore_errors);
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_inchain, APPEND_RULE, IPSET_DIM_ONE, 0, XTC_LABEL_ACCEPT, NULL, NULL, global_data->vrrp_ipset_address6, IPPROTO_ICMPV6, 136, cmd, ignore_errors);
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_inchain, APPEND_RULE, IPSET_DIM_ONE, 0, XTC_LABEL_DROP, NULL, NULL, global_data->vrrp_ipset_address6, IPPROTO_NONE, 0, cmd, ignore_errors);
+
+			h->updated_v6 = true;
+		}
+
+		if (global_data->vrrp_iptables_outchain[0]) {
+#ifdef HAVE_IPSET_ATTR_IFACE
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_outchain, APPEND_RULE, IPSET_DIM_TWO, IPSET_DIM_ONE_SRC, XTC_LABEL_ACCEPT, NULL, NULL, global_data->vrrp_ipset_address_iface6, IPPROTO_ICMPV6, 135, cmd, ignore_errors);
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_outchain, APPEND_RULE, IPSET_DIM_TWO, IPSET_DIM_ONE_SRC, XTC_LABEL_ACCEPT, NULL, NULL, global_data->vrrp_ipset_address_iface6, IPPROTO_ICMPV6, 136, cmd, ignore_errors);
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_outchain, APPEND_RULE, IPSET_DIM_TWO, IPSET_DIM_ONE_SRC, XTC_LABEL_DROP, NULL, NULL, global_data->vrrp_ipset_address_iface6, IPPROTO_NONE, 0, cmd, ignore_errors);
+#else
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_outchain, APPEND_RULE, IPSET_DIM_ONE, IPSET_DIM_ONE_SRC, XTC_LABEL_ACCEPT, NULL, NULL, global_data->vrrp_ipset_address_iface6, IPPROTO_ICMPV6, 135, cmd, ignore_errors);
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_outchain, APPEND_RULE, IPSET_DIM_ONE, IPSET_DIM_ONE_SRC, XTC_LABEL_ACCEPT, NULL, NULL, global_data->vrrp_ipset_address_iface6, IPPROTO_ICMPV6, 136, cmd, ignore_errors);
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_outchain, APPEND_RULE, IPSET_DIM_ONE, IPSET_DIM_ONE_SRC, XTC_LABEL_DROP, NULL, NULL, global_data->vrrp_ipset_address_iface6, IPPROTO_NONE, 0, cmd, ignore_errors);
+#endif
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_outchain, APPEND_RULE, IPSET_DIM_ONE, IPSET_DIM_ONE_SRC, XTC_LABEL_ACCEPT, NULL, NULL, global_data->vrrp_ipset_address6, IPPROTO_ICMPV6, 135, cmd, ignore_errors);
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_outchain, APPEND_RULE, IPSET_DIM_ONE, IPSET_DIM_ONE_SRC, XTC_LABEL_ACCEPT, NULL, NULL, global_data->vrrp_ipset_address6, IPPROTO_ICMPV6, 136, cmd, ignore_errors);
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_outchain, APPEND_RULE, IPSET_DIM_ONE, IPSET_DIM_ONE_SRC, XTC_LABEL_DROP, NULL, NULL, global_data->vrrp_ipset_address6, IPPROTO_NONE, 0, cmd, ignore_errors);
+
+			h->updated_v6 = true;
+		}
+	}
+}
+#endif
+
+#ifdef _HAVE_VRRP_VMAC_
+static void
+add_del_igmp_rules(struct ipt_handle *h, int cmd, uint8_t family, bool ignore_errors)
+{
+	ip_address_t igmp_addr;
+
+	if (!global_data->vrrp_iptables_outchain[0])
+		return;
+
+	if (family == AF_INET) {
+		igmp_addr.ifa.ifa_family = AF_INET;
+		igmp_addr.u.sin.sin_addr.s_addr = htonl(0xe0000016);
+	} else {
+		igmp_addr.ifa.ifa_family = AF_INET6;
+		igmp_addr.u.sin6_addr.s6_addr32[0] = htonl(0xff020000);
+		igmp_addr.u.sin6_addr.s6_addr32[1] = 0;
+		igmp_addr.u.sin6_addr.s6_addr32[2] = 0;
+		igmp_addr.u.sin6_addr.s6_addr32[3] = htonl(0x16);
+	}
+
+#ifdef HAVE_IPSET_ATTR_IFACE
+	if (global_data->using_ipsets) {
+		if (family == AF_INET) {
+			if (h->h4 || (h->h4 = ip4tables_open("filter"))) {
+				ip4tables_add_rules(h->h4, global_data->vrrp_iptables_outchain, APPEND_RULE, IPSET_DIM_TWO, 0, XTC_LABEL_DROP, NULL, &igmp_addr, global_data->vrrp_ipset_igmp, IPPROTO_NONE, 0, cmd, ignore_errors);
+				h->updated_v4 = true;
+			}
+
+			return;
+		}
+
+		if (h->h6 || (h->h6 = ip6tables_open("filter"))) {
+			ip6tables_add_rules(h->h6, global_data->vrrp_iptables_outchain, APPEND_RULE, IPSET_DIM_TWO, 0, XTC_LABEL_DROP, NULL, &igmp_addr, global_data->vrrp_ipset_mld, IPPROTO_NONE, 0, cmd, ignore_errors);
+			h->updated_v6 = true;
+		}
+
+		return;
+	}
+#endif
+
+	iptables_entry(h, family, global_data->vrrp_iptables_outchain, APPEND_RULE,
+			XTC_LABEL_RETURN, NULL, &igmp_addr, NULL, NULL,
+			IPPROTO_NONE, 0, cmd, IPT_INV_DSTIP, ignore_errors);
+}
+#endif
+
+struct ipt_handle*
+iptables_open(int cmd)
+{
+	struct ipt_handle *h = MALLOC(sizeof(struct ipt_handle));
+
+	h->cmd = cmd;
+
+	return h;
+}
+
+int
+iptables_close(struct ipt_handle* h)
+{
+	int res = 0;
+
+#ifdef _HAVE_LIBIPSET_
+	if (h->cmd == IPADDRESS_ADD && h->session) {
+		ipset_session_end(h->session);
+		h->session = NULL;
+	}
+#endif
+
+	if (h->h4)
+		res = ip4tables_close(h->h4, h->updated_v4);
+	if (h->h6)
+		res += ip6tables_close(h->h6, h->updated_v6);
+
+#ifdef _HAVE_LIBIPSET_
+	if (h->session)
+		ipset_session_end(h->session);
+#endif
+
+	FREE(h);
+
+	return res;
+}
+
+init_state_t
+check_chains_exist_lib(uint8_t family)
+{
+	struct iptc_handle *h4;
+	struct ip6tc_handle *h6;
+	init_state_t ret = INIT_SUCCESS;
+
+	if (family == AF_INET) {
+		h4 = ip4tables_open("filter");
+
+		if (!h4) {
+			log_message(LOG_INFO, "WARNING, ip_tables module not installed - can't filter IPv4 addresses");
+			return INIT_FAILED;
+		}
+
+		if (global_data->vrrp_iptables_inchain[0] &&
+		    !ip4tables_is_chain(h4, global_data->vrrp_iptables_inchain)) {
+			log_message(LOG_INFO, "iptables chain %s doesn't exist", global_data->vrrp_iptables_inchain);
+			ret = INIT_FAILED;
+		}
+		if (global_data->vrrp_iptables_outchain[0] &&
+		    !ip4tables_is_chain(h4, global_data->vrrp_iptables_outchain)) {
+			log_message(LOG_INFO, "iptables chain %s doesn't exist", global_data->vrrp_iptables_outchain);
+			ret = INIT_FAILED;
+		}
+
+		ip4tables_close(h4, false);
+
+		return ret;
+	}
+
+	h6 = ip6tables_open("filter");
+
+	if (!h6) {
+		log_message(LOG_INFO, "WARNING, ip6_tables module not installed - can't filter IPv6 addresses");
+		return INIT_FAILED;
+	}
+
+	if (global_data->vrrp_iptables_inchain[0] &&
+	    !ip6tables_is_chain(h6, global_data->vrrp_iptables_inchain)) {
+		log_message(LOG_INFO, "ip6tables chain %s doesn't exist", global_data->vrrp_iptables_inchain);
+		ret = INIT_FAILED;
+	}
+	if (global_data->vrrp_iptables_outchain[0] &&
+	    !ip6tables_is_chain(h6, global_data->vrrp_iptables_outchain)) {
+		log_message(LOG_INFO, "ip6tables chain %s doesn't exist", global_data->vrrp_iptables_outchain);
+		ret = INIT_FAILED;
+	}
+
+	ip6tables_close(h6, false);
+
+	return ret;
+}
+
+RELAX_SUGGEST_ATTRIBUTE_CONST_START
+init_state_t
+iptables_init_lib(
+#ifndef _LIBIPTC_DYNAMIC_
+		  __attribute__((unused))
+#endif
+					  uint8_t family)
+{
+#ifdef _LIBIPTC_DYNAMIC_
+	if (!iptables_lib_init(family))
+		return INIT_FAILED;
+#endif
+
+#ifdef _HAVE_LIBIPSET_
+	if (global_data->using_ipsets && !ipset_initialise())
+		global_data->using_ipsets = false;
+#endif
+
+	return INIT_SUCCESS;
+}
+RELAX_SUGGEST_ATTRIBUTE_CONST_END
+
+#ifdef _HAVE_LIBIPSET_
+static bool
+setup_vip(struct ipt_handle *h, uint8_t family)
+{
+// Is last parameter for next two calls ever used ?
+	add_del_vip_sets(h, IPADDRESS_ADD, family, false);
+	add_del_vip_rules(h, IPADDRESS_ADD, family, false);
+
+	vips_setup[family != AF_INET] = true;
+
+	return true;
+}
+#endif
+
+#if defined _HAVE_VRRP_VMAC_
+static bool
+setup_igmp(struct ipt_handle *h, uint8_t family)
+{
+// Is last parameter for next two calls ever used ?
+#ifdef HAVE_IPSET_ATTR_IFACE
+	if (global_data->using_ipsets)
+		add_del_igmp_sets(h, IPADDRESS_ADD, family, false);
+#endif
+
+	add_del_igmp_rules(h, IPADDRESS_ADD, family, false);
+
+	igmp_setup[family != AF_INET] = true;
+
+	return true;
+}
+
+static void
+handle_iptable_rule_to_NA_lib(ip_address_t *ipaddress, const char *ifname, int cmd, void *h, bool force)
+{
+	if (global_data->vrrp_iptables_inchain[0] == '\0')
+		return;
+
+	if (global_data->vrrp_iptables_outchain[0]) {
+		iptables_entry(h, AF_INET6, global_data->vrrp_iptables_outchain, 0,
+				XTC_LABEL_ACCEPT, ipaddress, NULL, NULL, ifname,
+				IPPROTO_ICMPV6, 135, cmd, 0, force);
+		iptables_entry(h, AF_INET6, global_data->vrrp_iptables_outchain, 1,
+				XTC_LABEL_ACCEPT, ipaddress, NULL, NULL, ifname,
+				IPPROTO_ICMPV6, 136, cmd, 0, force);
+	}
+
+	iptables_entry(h, AF_INET6, global_data->vrrp_iptables_inchain, 0,
+			XTC_LABEL_ACCEPT, NULL, ipaddress, ifname, NULL,
+			IPPROTO_ICMPV6, 135, cmd, 0, force);
+	iptables_entry(h, AF_INET6, global_data->vrrp_iptables_inchain, 1,
+			XTC_LABEL_ACCEPT, NULL, ipaddress, ifname, NULL,
+			IPPROTO_ICMPV6, 136, cmd, 0, force);
+
+}
+
+void
+handle_iptable_rule_to_vip_lib(ip_address_t *ipaddress, int cmd, struct ipt_handle *h, bool force)
+{
+	char *ifname = NULL;
+	uint8_t family = ipaddress->ifa.ifa_family;
+
+#ifdef _HAVE_LIBIPSET_
+	if (global_data->using_ipsets)
+	{
+		if (!vips_setup[family != AF_INET])
+			setup_vip(h, ipaddress->ifa.ifa_family);
+
+		if (!h->session)
+			h->session = ipset_session_start();
+
+		ipset_entry(h->session, cmd, ipaddress);
+		ipaddress->iptable_rule_set = (cmd != IPADDRESS_DEL);
+
+		return;
+	}
+#endif
+
+	if (family == AF_INET6 &&
+	    IN6_IS_ADDR_LINKLOCAL(&ipaddress->u.sin6_addr))
+		ifname = ipaddress->ifp->ifname;
+
+	iptables_entry(h, family, global_data->vrrp_iptables_inchain, 0,
+			XTC_LABEL_DROP, NULL, ipaddress, ifname, NULL,
+			IPPROTO_NONE, 0, cmd, 0, force);
+
+	if (global_data->vrrp_iptables_outchain[0])
+		iptables_entry(h, family, global_data->vrrp_iptables_outchain, 0,
+				XTC_LABEL_DROP, ipaddress, NULL, NULL, ifname,
+				IPPROTO_NONE, 0, cmd, 0, force);
+
+	if (family == AF_INET6)
+		handle_iptable_rule_to_NA_lib(ipaddress, ifname, cmd, h, force);
+
+	ipaddress->iptable_rule_set = (cmd != IPADDRESS_DEL);
+}
+
+#ifdef _HAVE_VRRP_VMAC_
+void
+handle_iptable_rule_for_igmp_lib(const char *ifname, int cmd, uint8_t family, struct ipt_handle *h)
+{
+	if (global_data->vrrp_iptables_outchain[0] == '\0')
+		return;
+
+	if (!igmp_setup[family != AF_INET])
+		setup_igmp(h, family);
+
+#ifdef HAVE_IPSET_ATTR_IFACE
+// Check sets with ifname
+	if (global_data->using_ipsets)
+	{
+		if (!h->session)
+			h->session = ipset_session_start();
+
+		ipset_entry_igmp(h->session, cmd, ifname, family);
+
+		return;
+	}
+#endif
+
+	iptables_entry(h, family, global_data->vrrp_iptables_outchain, APPEND_RULE,
+			XTC_LABEL_DROP, NULL, NULL, NULL, ifname,
+			IPPROTO_NONE, 0, cmd, 0, false);
+#endif
+}
+#endif
+
+void
+iptables_fini_lib(void)
+{
+	uint8_t family = AF_INET;
+	struct ipt_handle *h = iptables_open(IPADDRESS_DEL);
+
+// TODO - just have a single call to remove all sets
+	do {
+#ifdef _HAVE_LIBIPSET_
+		if (global_data->using_ipsets) {
+			if (vips_setup[family != AF_INET])
+				add_del_vip_rules(h, IPADDRESS_DEL, family, false);
+			if (igmp_setup[family != AF_INET])
+				add_del_igmp_rules(h, IPADDRESS_DEL, family, false);
+		}
+		else
+#endif
+		{
+			if (igmp_setup[family != AF_INET]) {
+				add_del_igmp_rules(h, IPADDRESS_DEL, family, false);
+				igmp_setup[family != AF_INET] = false;
+			}
+		}
+		family = family == AF_INET ? AF_INET6 : 0;
+	} while (family);
+
+	iptables_close(h);
+
+	/* The sets must not be in use when the ipset session starts */
+#ifdef _HAVE_LIBIPSET_
+	if (global_data->using_ipsets) {
+		h = iptables_open(IPADDRESS_DEL);
+		family = AF_INET;
+		do {
+				if (vips_setup[family != AF_INET]) {
+					add_del_vip_sets(h, IPADDRESS_DEL, family, false);
+					vips_setup[family != AF_INET] = false;
+				}
+				if (igmp_setup[family != AF_INET]) {
+					add_del_igmp_sets(h, IPADDRESS_DEL, family, false);
+					igmp_setup[family != AF_INET] = false;
+				}
+			family = family == AF_INET ? AF_INET6 : 0;
+		} while (family);
+
+		iptables_close(h);
+	}
+#endif
+}
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_json.c b/tools/keepalived/keepalived/vrrp/vrrp_json.c
new file mode 100644
index 000000000..d430a2e5c
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_json.c
@@ -0,0 +1,295 @@
+/*
+ * Soft:        Vrrpd is an implementation of VRRPv2 as specified in rfc2338.
+ *              VRRP is a protocol which elect a master server on a LAN. If the
+ *              master fails, a backup server takes over.
+ *              The original implementation has been made by jerome etienne.
+ *
+ * Part:        Output running VRRP state information in JSON format
+ *
+ * Author:	Alexandre Cassen, <acassen@gmail.com>
+ *		Damien Clabaut, <Damien.Clabaut@corp.ovh.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2019 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+#include "vrrp_json.h"
+
+#include <errno.h>
+#include <stdio.h>
+
+#include "vrrp.h"
+#include "vrrp_track.h"
+#include "list.h"
+#include "vrrp_data.h"
+#include "vrrp_ipaddress.h"
+#include "vrrp_iproute.h"
+#include "vrrp_iprule.h"
+#include "logger.h"
+#include "timer.h"
+#include "utils.h"
+#include "json_writer.h"
+
+static inline double
+timeval_to_double(const timeval_t *t)
+{
+	/* The casts are necessary to avoid conversion warnings */
+	return t->tv_sec + t->tv_usec / TIMER_HZ_DOUBLE;
+}
+
+static int
+vrrp_json_script_dump(json_writer_t *wr, const char *prop, notify_script_t *script)
+{
+	if (!script)
+		return -1;
+
+	jsonw_string_field(wr, prop, cmd_str(script));
+	return 0;
+}
+
+static int
+vrrp_json_ip_dump(json_writer_t *wr, void *data)
+{
+	ip_address_t *ipaddr = data;
+	char buf[256];
+
+	format_ipaddress(ipaddr, buf, sizeof(buf));
+	jsonw_string(wr, buf);
+	return 0;
+}
+
+#ifdef _HAVE_FIB_ROUTING_
+static int
+vrrp_json_vroute_dump(json_writer_t *wr, void *data)
+{
+	ip_route_t *iproute = data;
+	char buf[256];
+
+	format_iproute(iproute, buf, sizeof(buf));
+	jsonw_string(wr, buf);
+	return 0;
+}
+
+static int
+vrrp_json_vrule_dump(json_writer_t *wr, void *data)
+{
+	ip_rule_t *iprule = data;
+	char buf[256];
+
+	format_iprule(iprule, buf, sizeof(buf));
+	jsonw_string(wr, buf);
+	return 0;
+}
+#endif
+
+static int
+vrrp_json_track_ifp_dump(json_writer_t *wr, void *data)
+{
+	tracked_if_t *tip = data;
+	interface_t *ifp = tip->ifp;
+
+	jsonw_string(wr, ifp->ifname);
+	return 0;
+}
+
+static int
+vrrp_json_track_script_dump(json_writer_t *wr, void *data)
+{
+	tracked_sc_t *tsc = data;
+	vrrp_script_t *vscript = tsc->scr;
+
+	jsonw_string(wr, cmd_str(&vscript->script));
+	return 0;
+}
+
+static int
+vrrp_json_array_dump(json_writer_t *wr, const char *prop, list l,
+		     int (*func) (json_writer_t *, void *))
+{
+	void *data;
+	element e;
+
+	if (LIST_ISEMPTY(l))
+		return -1;
+
+	jsonw_name(wr, prop);
+	jsonw_start_array(wr);
+	LIST_FOREACH(l, data, e) {
+		(*func) (wr, data);
+	}
+	jsonw_end_array(wr);
+	return 0;
+}
+
+static int
+vrrp_json_auth_dump(json_writer_t *wr, const char *prop, vrrp_t *vrrp)
+{
+	char buf[256];
+
+	if (!vrrp->auth_type)
+		return -1;
+
+	memcpy(buf, vrrp->auth_data, sizeof(vrrp->auth_data));
+	buf[sizeof(vrrp->auth_data)] = 0;
+	jsonw_string_field(wr, prop, buf);
+	return 0;
+}
+
+static int
+vrrp_json_data_dump(json_writer_t *wr, vrrp_t *vrrp)
+{
+	/* data object */
+	jsonw_name(wr, "data");
+	jsonw_start_object(wr);
+
+	/* Global instance related */
+	jsonw_string_field(wr, "iname", vrrp->iname);
+	jsonw_uint_field(wr, "dont_track_primary", vrrp->dont_track_primary);
+	jsonw_uint_field(wr, "skip_check_adv_addr", vrrp->skip_check_adv_addr);
+	jsonw_uint_field(wr, "strict_mode", vrrp->strict_mode);
+#ifdef _HAVE_VRRP_VMAC_
+	jsonw_string_field(wr, "vmac_ifname", vrrp->vmac_ifname);
+#endif
+	jsonw_string_field(wr, "ifp_ifname", vrrp->ifp->ifname);
+	jsonw_uint_field(wr, "master_priority", vrrp->master_priority);
+	jsonw_float_field_fmt(wr, "last_transition", "%f", timeval_to_double(&vrrp->last_transition));
+	jsonw_float_field(wr, "garp_delay", vrrp->garp_delay / TIMER_HZ_FLOAT);
+	jsonw_uint_field(wr, "garp_refresh", vrrp->garp_refresh.tv_sec);
+	jsonw_uint_field(wr, "garp_rep", vrrp->garp_rep);
+	jsonw_uint_field(wr, "garp_refresh_rep", vrrp->garp_refresh_rep);
+	jsonw_uint_field(wr, "garp_lower_prio_delay", vrrp->garp_lower_prio_delay / TIMER_HZ);
+	jsonw_uint_field(wr, "garp_lower_prio_rep", vrrp->garp_lower_prio_rep);
+	jsonw_uint_field(wr, "lower_prio_no_advert", vrrp->lower_prio_no_advert);
+	jsonw_uint_field(wr, "higher_prio_send_advert", vrrp->higher_prio_send_advert);
+	jsonw_uint_field(wr, "vrid", vrrp->vrid);
+	jsonw_uint_field(wr, "base_priority", vrrp->base_priority);
+	jsonw_uint_field(wr, "effective_priority", vrrp->effective_priority);
+	jsonw_bool_field(wr, "vipset", vrrp->vipset);
+	jsonw_bool_field(wr, "promote_secondaries", vrrp->promote_secondaries);
+	jsonw_float_field(wr, "adver_int", vrrp->adver_int / TIMER_HZ_FLOAT);
+	jsonw_float_field(wr, "master_adver_int", vrrp->master_adver_int / TIMER_HZ_FLOAT);
+#ifdef _WITH_FIREWALL_
+	jsonw_uint_field(wr, "accept", vrrp->accept);
+#endif
+	jsonw_bool_field(wr, "nopreempt", vrrp->nopreempt);
+	jsonw_uint_field(wr, "preempt_delay", vrrp->preempt_delay / TIMER_HZ);
+	jsonw_uint_field(wr, "state", vrrp->state);
+	jsonw_uint_field(wr, "wantstate", vrrp->wantstate);
+	jsonw_uint_field(wr, "version", vrrp->version);
+	jsonw_bool_field(wr, "smtp_alert", vrrp->smtp_alert);
+
+	/* Script related */
+	vrrp_json_script_dump(wr, "script_backup", vrrp->script_backup);
+	vrrp_json_script_dump(wr, "script_master", vrrp->script_master);
+	vrrp_json_script_dump(wr, "script_fault", vrrp->script_fault);
+	vrrp_json_script_dump(wr, "script_stop", vrrp->script_stop);
+	vrrp_json_script_dump(wr, "script", vrrp->script);
+	vrrp_json_script_dump(wr, "script_master_rx_lower_pri"
+				, vrrp->script_master_rx_lower_pri);
+
+	/* Virtual related */
+	vrrp_json_array_dump(wr, "vips", vrrp->vip, vrrp_json_ip_dump);
+	vrrp_json_array_dump(wr, "evips", vrrp->evip, vrrp_json_ip_dump);
+#ifdef _HAVE_FIB_ROUTING_
+	vrrp_json_array_dump(wr, "vroutes", vrrp->vroutes, vrrp_json_vroute_dump);
+	vrrp_json_array_dump(wr, "vrules", vrrp->vrules, vrrp_json_vrule_dump);
+#endif
+
+	/* Tracking related */
+	vrrp_json_array_dump(wr, "track_ifp", vrrp->track_ifp, vrrp_json_track_ifp_dump);
+	vrrp_json_array_dump(wr, "track_script", vrrp->track_script, vrrp_json_track_script_dump);
+
+#ifdef _WITH_VRRP_AUTH_
+	jsonw_uint_field(wr, "auth_type", vrrp->auth_type);
+	vrrp_json_auth_dump(wr, "auth_data", vrrp);
+#endif
+
+	jsonw_end_object(wr);
+	return 0;
+}
+
+static int
+vrrp_json_stats_dump(json_writer_t *wr, vrrp_t *vrrp)
+{
+	vrrp_stats *stats = vrrp->stats;
+
+	if (!stats)
+		return -1;
+
+	/* data object */
+	jsonw_name(wr, "stats");
+	jsonw_start_object(wr);
+	jsonw_uint_field(wr, "advert_rcvd", stats->advert_rcvd);
+	jsonw_uint_field(wr, "advert_sent", stats->advert_sent);
+	jsonw_uint_field(wr, "become_master", stats->become_master);
+	jsonw_uint_field(wr, "release_master", stats->release_master);
+	jsonw_uint_field(wr, "packet_len_err", stats->packet_len_err);
+	jsonw_uint_field(wr, "advert_interval_err", stats->advert_interval_err);
+	jsonw_uint_field(wr, "ip_ttl_err", stats->ip_ttl_err);
+	jsonw_uint_field(wr, "invalid_type_rcvd", stats->invalid_type_rcvd);
+	jsonw_uint_field(wr, "addr_list_err", stats->addr_list_err);
+	jsonw_uint_field(wr, "invalid_authtype", stats->invalid_authtype);
+#ifdef _WITH_VRRP_AUTH_
+	jsonw_uint_field(wr, "authtype_mismatch", stats->authtype_mismatch);
+	jsonw_uint_field(wr, "auth_failure", stats->auth_failure);
+#endif
+	jsonw_uint_field(wr, "pri_zero_rcvd", stats->pri_zero_rcvd);
+	jsonw_uint_field(wr, "pri_zero_sent", stats->pri_zero_sent);
+	jsonw_end_object(wr);
+	return 0;
+}
+
+/*
+ *	Split dump function for future purpose
+ *	this offer generic integration for mapping
+ *	socket fd to a FILE stream.
+ */
+static int
+vrrp_json_dump(FILE *fp)
+{
+	json_writer_t *wr;
+	vrrp_t *vrrp;
+	element e;
+
+	wr = jsonw_new(fp);
+	jsonw_start_array(wr);
+
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		jsonw_start_object(wr);
+		vrrp_json_data_dump(wr, vrrp);
+		vrrp_json_stats_dump(wr, vrrp);
+		jsonw_end_object(wr);
+	}
+
+	jsonw_end_array(wr);
+	jsonw_destroy(&wr);
+	return 0;
+}
+
+void
+vrrp_print_json(void)
+{
+	FILE *fp;
+
+	if (LIST_ISEMPTY(vrrp_data->vrrp))
+		return;
+
+	fp = fopen_safe("/tmp/keepalived.json", "w");
+	if (!fp) {
+		log_message(LOG_INFO, "Can't open /tmp/keepalived.json (%d: %m)", errno);
+		return;
+	}
+
+	vrrp_json_dump(fp);
+	fclose(fp);
+}
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_ndisc.c b/tools/keepalived/keepalived/vrrp/vrrp_ndisc.c
index 139909517..3440cb1dc 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_ndisc.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_ndisc.c
@@ -17,57 +17,81 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
 /* system includes */
 #include <unistd.h>
 #include <net/ethernet.h>
 #include <linux/if_packet.h>
+#include <netinet/icmp6.h>
+#include <netinet/in.h>
+#include <stdint.h>
+#include <errno.h>
 
 /* local includes */
 #include "logger.h"
-#include "memory.h"
 #include "utils.h"
-#include "vrrp_ipaddress.h"
+#include "vrrp_if_config.h"
+#include "vrrp_scheduler.h"
 #include "vrrp_ndisc.h"
+#if !HAVE_DECL_SOCK_CLOEXEC
+#include "old_socket.h"
+#endif
+#include "bitops.h"
 
-/* global vars */
-char *ndisc_buffer;
-int ndisc_fd;
+/* static vars */
+static char *ndisc_buffer;
+static int ndisc_fd = -1;
 
 /*
  *	Neighbour Advertisement sending routine.
  */
-static int
+static void
 ndisc_send_na(ip_address_t *ipaddress)
 {
 	struct sockaddr_ll sll;
-	int len;
+	ssize_t len;
+	char addr_str[INET6_ADDRSTRLEN] = "";
+	interface_t *ifp = ipaddress->ifp;
 
 	/* Build the dst device */
 	memset(&sll, 0, sizeof (sll));
 	sll.sll_family = AF_PACKET;
-	memcpy(sll.sll_addr, IF_HWADDR(ipaddress->ifp), ETH_ALEN);
-	sll.sll_halen = ETHERNET_HW_LEN;
-	sll.sll_ifindex = IF_INDEX(ipaddress->ifp);
+	sll.sll_ifindex = (int)IF_INDEX(ifp);
+
+	/* The values in sll_ha_type, sll_addr and sll_halen appear to be ignored */
+	sll.sll_hatype = ifp->hw_type;
+	sll.sll_halen = ifp->hw_addr_len;
+	sll.sll_protocol = htons(ETH_P_IPV6);
+	memcpy(sll.sll_addr, IF_HWADDR(ifp), ifp->hw_addr_len);
+
+	if (__test_bit(LOG_DETAIL_BIT, &debug)) {
+		inet_ntop(AF_INET6, &ipaddress->u.sin6_addr, addr_str, sizeof(addr_str));
+		log_message(LOG_INFO, "Sending unsolicited Neighbour Advert on %s for %s",
+			    IF_NAME(ifp), addr_str);
+	}
 
 	/* Send packet */
 	len = sendto(ndisc_fd, ndisc_buffer,
-		     ETHER_HDR_LEN + sizeof(struct ip6hdr) + sizeof(struct ndhdr) +
-		     sizeof(struct nd_opt_hdr) + ETH_ALEN, 0,
+		     ETHER_HDR_LEN + sizeof(struct ip6hdr) + sizeof(struct nd_neighbor_advert) +
+		     sizeof(struct nd_opt_hdr) + ifp->hw_addr_len, 0,
 		     (struct sockaddr *) &sll, sizeof (sll));
-	if (len < 0)
-		log_message(LOG_INFO, "VRRP: Error sending ndisc unsolicited neighbour advert on %s",
-			    IF_NAME(ipaddress->ifp));
-	return len;
+	if (len < 0) {
+		if (!addr_str[0])
+			inet_ntop(AF_INET6, &ipaddress->u.sin6_addr, addr_str, sizeof(addr_str));
+		log_message(LOG_INFO, "Error %d sending ndisc unsolicited neighbour advert on %s for %s",
+			    errno, IF_NAME(ifp), addr_str);
+	}
 }
 
 /*
  *	ICMPv6 Checksuming.
  */
-static uint32_t
-ndisc_icmp6_cksum(const struct ip6hdr *ip6, const struct icmp6hdr *icp, uint32_t len)
+static __sum16
+ndisc_icmp6_cksum(const struct ip6hdr *ip6, const struct icmp6_hdr *icp, uint32_t len)
 {
 	size_t i;
 	register const uint16_t *sp;
@@ -85,8 +109,8 @@ ndisc_icmp6_cksum(const struct ip6hdr *ip6, const struct icmp6hdr *icp, uint32_t
 
 	/* pseudo-header */
 	memset(&phu, 0, sizeof(phu));
-	phu.ph.ph_src = ip6->saddr;
-	phu.ph.ph_dst = ip6->daddr;
+	memcpy(&phu.ph.ph_src, &ip6->saddr, sizeof(struct in6_addr));
+	memcpy(&phu.ph.ph_dst, &ip6->daddr, sizeof(struct in6_addr));
 	phu.ph.ph_len = htonl(len);
 	phu.ph.ph_nxt = IPPROTO_ICMPV6;
 
@@ -96,7 +120,7 @@ ndisc_icmp6_cksum(const struct ip6hdr *ip6, const struct icmp6hdr *icp, uint32_t
 
 	sp = (const uint16_t *)icp;
 
-	for (i = 0; i < (len & ~1); i += 2)
+	for (i = 1; i < len; i += 2)
 		sum += *sp++;
 
 	if (len & 1)
@@ -104,9 +128,8 @@ ndisc_icmp6_cksum(const struct ip6hdr *ip6, const struct icmp6hdr *icp, uint32_t
 
 	while (sum > 0xffff)
 		sum = (sum & 0xffff) + (sum >> 16);
-	sum = ~sum & 0xffff;
 
-	return (sum);
+	return ~sum & 0xffff;
 }
 
 /*
@@ -115,17 +138,19 @@ ndisc_icmp6_cksum(const struct ip6hdr *ip6, const struct icmp6hdr *icp, uint32_t
  *	Neighbor Advertisements in order to (unreliably) propagate
  *	new information quickly.
  */
-int
-ndisc_send_unsolicited_na(ip_address_t *ipaddress)
+void
+ndisc_send_unsolicited_na_immediate(interface_t *ifp, ip_address_t *ipaddress)
 {
 	struct ether_header *eth = (struct ether_header *) ndisc_buffer;
 	struct ip6hdr *ip6h = (struct ip6hdr *) ((char *)eth + ETHER_HDR_LEN);
-	struct ndhdr *ndh = (struct ndhdr*) ((char *)ip6h + sizeof(struct ip6hdr));
-	struct icmp6hdr *icmp6h = &ndh->icmph;
-	struct nd_opt_hdr *nd_opt_h = (struct nd_opt_hdr *) ((char *)ndh + sizeof(struct ndhdr));
+	struct nd_neighbor_advert *ndh = (struct nd_neighbor_advert*) ((char *)ip6h + sizeof(struct ip6hdr));
+	struct icmp6_hdr *icmp6h = &ndh->nd_na_hdr;
+	struct nd_opt_hdr *nd_opt_h = (struct nd_opt_hdr *) ((char *)ndh + sizeof(struct nd_neighbor_advert));
 	char *nd_opt_lladdr = (char *) ((char *)nd_opt_h + sizeof(struct nd_opt_hdr));
 	char *lladdr = (char *) IF_HWADDR(ipaddress->ifp);
-	int len;
+
+	/* This needs updating to support IPv6 over Infiniband
+	 * (see vrrp_arp.c) */
 
 	/* Ethernet header:
 	 * Destination ethernet address MUST use specific address Mapping
@@ -139,42 +164,92 @@ ndisc_send_unsolicited_na(ip_address_t *ipaddress)
 
 	/* IPv6 Header */
 	ip6h->version = 6;
-	ip6h->payload_len = htons(sizeof(struct ndhdr) + sizeof(struct nd_opt_hdr) + ETH_ALEN);
-	ip6h->nexthdr = NEXTHDR_ICMP;
+	ip6h->payload_len = htons(sizeof(struct nd_neighbor_advert) + sizeof(struct nd_opt_hdr) + ETH_ALEN);
+	ip6h->nexthdr = IPPROTO_ICMPV6;
 	ip6h->hop_limit = NDISC_HOPLIMIT;
-	ip6h->saddr = ipaddress->u.sin6_addr;
+	memcpy(&ip6h->saddr, &ipaddress->u.sin6_addr, sizeof(struct in6_addr));
 	ip6h->daddr.s6_addr16[0] = htons(0xff02);
 	ip6h->daddr.s6_addr16[7] = htons(1);
 
 	/* ICMPv6 Header */
-	icmp6h->icmp6_type = NDISC_NEIGHBOUR_ADVERTISEMENT;
+	ndh->nd_na_type = ND_NEIGHBOR_ADVERT;
+
+	/* Set the router flag if necessary. We recheck each interface if not
+	 * checked in the last 5 seconds. */
+	if (timer_cmp_now_diff(ifp->last_gna_router_check, 5 * TIMER_HZ))
+		set_ipv6_forwarding(ifp);
+	if (ifp->gna_router)
+		ndh->nd_na_flags_reserved |= ND_NA_FLAG_ROUTER;
 
 	/* Override flag is set to indicate that the advertisement
 	 * should override an existing cache entry and update the
 	 * cached link-layer address.
 	 */
-	icmp6h->icmp6_override = 1;
-	ndh->target = ipaddress->u.sin6_addr;
+//	icmp6h->icmp6_override = 1;
+	ndh->nd_na_flags_reserved |= ND_NA_FLAG_OVERRIDE;
+	ndh->nd_na_target = ipaddress->u.sin6_addr;
 
 	/* NDISC Option header */
-	nd_opt_h->nd_opt_type = ND_OPT_TARGET_LL_ADDR;
+	nd_opt_h->nd_opt_type = ND_OPT_TARGET_LINKADDR;
 	nd_opt_h->nd_opt_len = 1;
 	memcpy(nd_opt_lladdr, lladdr, ETH_ALEN);
 
 	/* Compute checksum */
 	icmp6h->icmp6_cksum = ndisc_icmp6_cksum(ip6h, icmp6h,
-						sizeof(struct ndhdr) + sizeof(struct nd_opt_hdr) + ETH_ALEN);
+						sizeof(struct nd_neighbor_advert) + sizeof(struct nd_opt_hdr) + ETH_ALEN);
 
 	/* Send the neighbor advertisement message */
-	len = ndisc_send_na(ipaddress);
+	ndisc_send_na(ipaddress);
 
 	/* Cleanup room for next round */
 	memset(ndisc_buffer, 0, ETHER_HDR_LEN + sizeof(struct ip6hdr) +
-	       sizeof(struct ndhdr) + sizeof(struct nd_opt_hdr) + ETH_ALEN);
+	       sizeof(struct nd_neighbor_advert) + sizeof(struct nd_opt_hdr) + ETH_ALEN);
+
+	/* If we have to delay between sending NAs, note the next time we can */
+	if (ifp->garp_delay && ifp->garp_delay->have_gna_interval)
+		ifp->garp_delay->gna_next_time = timer_add_now(ifp->garp_delay->gna_interval);
+}
+
+static void
+queue_ndisc(vrrp_t *vrrp, interface_t *ifp, ip_address_t *ipaddress)
+{
+	timeval_t next_time = timer_add_now(ifp->garp_delay->gna_interval);
+
+	vrrp->gna_pending = true;
+	ipaddress->garp_gna_pending = true;
 
-	return len;
+	/* Do we need to schedule/reschedule the garp thread? */
+	if (!garp_thread || timercmp(&next_time, &garp_next_time, <)) {
+		if (garp_thread)
+			thread_cancel(garp_thread);
+
+		garp_next_time = next_time;
+
+		garp_thread = thread_add_timer(master, vrrp_arp_thread, NULL, timer_long(ifp->garp_delay->gna_interval));
+	}
 }
 
+void
+ndisc_send_unsolicited_na(vrrp_t *vrrp, ip_address_t *ipaddress)
+{
+	interface_t *ifp = IF_BASE_IFP(ipaddress->ifp);
+
+	/* If the interface doesn't support NDISC, don't try sending */
+        if (ifp->ifi_flags & IFF_NOARP)
+                return;
+
+	set_time_now();
+
+	/* Do we need to delay sending the ndisc? */
+	if (ifp->garp_delay && ifp->garp_delay->have_gna_interval && ifp->garp_delay->gna_next_time.tv_sec) {
+		if (timercmp(&time_now, &ifp->garp_delay->gna_next_time, <)) {
+			queue_ndisc(vrrp, ifp, ipaddress);
+			return;
+		}
+	}
+
+	ndisc_send_unsolicited_na_immediate(ifp, ipaddress);
+}
 
 /*
  *	Neighbour Discovery init/close
@@ -182,17 +257,43 @@ ndisc_send_unsolicited_na(ip_address_t *ipaddress)
 void
 ndisc_init(void)
 {
-	/* Initalize shared buffer */
-	ndisc_buffer = (char *) MALLOC(ETHER_HDR_LEN + sizeof(struct ip6hdr) +
-				       sizeof(struct ndhdr) + sizeof(struct nd_opt_hdr) + ETH_ALEN);
+	if (ndisc_buffer)
+		return;
 
 	/* Create the socket descriptor */
-	ndisc_fd = socket(PF_PACKET, SOCK_RAW, htons(ETH_P_IPV6));
+	ndisc_fd = socket(PF_PACKET, SOCK_RAW | SOCK_CLOEXEC | SOCK_NONBLOCK, htons(ETH_P_IPV6));
+
+	if (ndisc_fd >= 0)
+		log_message(LOG_INFO, "Registering gratuitous NDISC shared channel");
+	else {
+		log_message(LOG_INFO, "Error %d while registering gratuitous NDISC shared channel", errno);
+		return;
+	}
+
+#if !HAVE_DECL_SOCK_CLOEXEC
+	if (set_sock_flags(ndisc_fd, F_SETFD, FD_CLOEXEC))
+		log_message(LOG_INFO, "Unable to set CLOEXEC on gratuitous NA socket");
+#endif
+#if !HAVE_DECL_SOCK_NONBLOCK
+	if (set_sock_flags(garp_fd, F_SETFL, O_NONBLOCK))
+		log_message(LOG_INFO, "Unable to set NONBLOCK on gratuitous NA socket");
+#endif
+
+	/* Initalize shared buffer */
+	ndisc_buffer = (char *) MALLOC(ETHER_HDR_LEN + sizeof(struct ip6hdr) +
+				       sizeof(struct nd_neighbor_advert) + sizeof(struct nd_opt_hdr) + sizeof(((interface_t *)NULL)->hw_addr));
 }
 
 void
 ndisc_close(void)
 {
-	FREE(ndisc_buffer);
-	close(ndisc_fd);
+	if (ndisc_buffer) {
+		FREE(ndisc_buffer);
+		ndisc_buffer = NULL;
+	}
+
+	if (ndisc_fd != -1) {
+		close(ndisc_fd);
+		ndisc_fd = -1;
+	}
 }
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_netlink.c b/tools/keepalived/keepalived/vrrp/vrrp_netlink.c
deleted file mode 100644
index 23f4e2c6f..000000000
--- a/tools/keepalived/keepalived/vrrp/vrrp_netlink.c
+++ /dev/null
@@ -1,774 +0,0 @@
-/*
- * Soft:        Keepalived is a failover program for the LVS project
- *              <www.linuxvirtualserver.org>. It monitor & manipulate
- *              a loadbalanced server pool using multi-layer checks.
- *
- * Part:        NETLINK kernel command channel.
- *
- * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *
- *              This program is distributed in the hope that it will be useful,
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
- *              See the GNU General Public License for more details.
- *
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
- *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
- */
-
-/* global include */
-#include <stdio.h>
-#include <stdlib.h>
-#include <unistd.h>
-#include <syslog.h>
-#include <fcntl.h>
-#include <net/if_arp.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <string.h>
-#include <errno.h>
-#include <time.h>
-#include <sys/uio.h>
-
-/* local include */
-#include "check_api.h"
-#include "vrrp_netlink.h"
-#include "vrrp_if.h"
-#include "logger.h"
-#include "memory.h"
-#include "scheduler.h"
-#include "utils.h"
-
-/* Global vars */
-nl_handle_t nl_kernel;	/* Kernel reflection channel */
-nl_handle_t nl_cmd;	/* Command channel */
-
-/* Create a socket to netlink interface_t */
-int
-netlink_socket(nl_handle_t *nl, unsigned long groups)
-{
-	socklen_t addr_len;
-	int ret;
-
-	memset(nl, 0, sizeof (*nl));
-
-	nl->fd = socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE);
-	if (nl->fd < 0) {
-		log_message(LOG_INFO, "Netlink: Cannot open netlink socket : (%s)",
-		       strerror(errno));
-		return -1;
-	}
-
-	ret = fcntl(nl->fd, F_SETFL, O_NONBLOCK);
-	if (ret < 0) {
-		log_message(LOG_INFO,
-		       "Netlink: Cannot set netlink socket flags : (%s)",
-		       strerror(errno));
-		close(nl->fd);
-		return -1;
-	}
-
-	memset(&nl->snl, 0, sizeof (nl->snl));
-	nl->snl.nl_family = AF_NETLINK;
-	nl->snl.nl_groups = groups;
-
-	ret = bind(nl->fd, (struct sockaddr *) &nl->snl, sizeof (nl->snl));
-	if (ret < 0) {
-		log_message(LOG_INFO, "Netlink: Cannot bind netlink socket : (%s)",
-		       strerror(errno));
-		close(nl->fd);
-		return -1;
-	}
-
-	addr_len = sizeof (nl->snl);
-	ret = getsockname(nl->fd, (struct sockaddr *) &nl->snl, &addr_len);
-	if (ret < 0 || addr_len != sizeof (nl->snl)) {
-		log_message(LOG_INFO, "Netlink: Cannot getsockname : (%s)",
-		       strerror(errno));
-		close(nl->fd);
-		return -1;
-	}
-
-	if (nl->snl.nl_family != AF_NETLINK) {
-		log_message(LOG_INFO, "Netlink: Wrong address family %d",
-		       nl->snl.nl_family);
-		close(nl->fd);
-		return -1;
-	}
-
-	nl->seq = time(NULL);
-
-	/* Set default rcvbuf size */
-	if_setsockopt_rcvbuf(&nl->fd, IF_DEFAULT_BUFSIZE);
-	if (nl->fd < 0)
-		return -1;
-
-	return ret;
-}
-
-/* Close a netlink socket */
-int
-netlink_close(nl_handle_t *nl)
-{
-	/* First of all release pending thread */
-	thread_cancel(nl->thread);
-	close(nl->fd);
-	return 0;
-}
-
-/* Set netlink socket channel as blocking */
-int
-netlink_set_block(nl_handle_t *nl, int *flags)
-{
-	if ((*flags = fcntl(nl->fd, F_GETFL, 0)) < 0) {
-		log_message(LOG_INFO, "Netlink: Cannot F_GETFL socket : (%s)",
-		       strerror(errno));
-		return -1;
-	}
-	*flags &= ~O_NONBLOCK;
-	if (fcntl(nl->fd, F_SETFL, *flags) < 0) {
-		log_message(LOG_INFO, "Netlink: Cannot F_SETFL socket : (%s)",
-		       strerror(errno));
-		return -1;
-	}
-	return 0;
-}
-
-/* Set netlink socket channel as non-blocking */
-int
-netlink_set_nonblock(nl_handle_t *nl, int *flags)
-{
-	*flags |= O_NONBLOCK;
-	if (fcntl(nl->fd, F_SETFL, *flags) < 0) {
-		log_message(LOG_INFO, "Netlink: Cannot F_SETFL socket : (%s)",
-		       strerror(errno));
-		return -1;
-	}
-	return 0;
-}
-
-/* iproute2 utility function */
-int
-addattr32(struct nlmsghdr *n, int maxlen, int type, uint32_t data)
-{
-	int len = RTA_LENGTH(4);
-	struct rtattr *rta;
-	if (NLMSG_ALIGN(n->nlmsg_len) + len > maxlen)
-		return -1;
-	rta = (struct rtattr*)(((char*)n) + NLMSG_ALIGN(n->nlmsg_len));
-	rta->rta_type = type;
-	rta->rta_len = len;
-	memcpy(RTA_DATA(rta), &data, 4);
-	n->nlmsg_len = NLMSG_ALIGN(n->nlmsg_len) + len;
-	return 0;
-}
-
-int
-addattr_l(struct nlmsghdr *n, int maxlen, int type, void *data, int alen)
-{
-	int len = RTA_LENGTH(alen);
-	struct rtattr *rta;
-
-	if (NLMSG_ALIGN(n->nlmsg_len) + len > maxlen)
-		return -1;
-
-	rta = (struct rtattr *) (((char *) n) + NLMSG_ALIGN(n->nlmsg_len));
-	rta->rta_type = type;
-	rta->rta_len = len;
-	memcpy(RTA_DATA(rta), data, alen);
-	n->nlmsg_len = NLMSG_ALIGN(n->nlmsg_len) + len;
-
-	return 0;
-}
-
-int rta_addattr_l(struct rtattr *rta, int maxlen, int type,
-		  const void *data, int alen)
-{
-	struct rtattr *subrta;
-	int len = RTA_LENGTH(alen);
-
-	if (RTA_ALIGN(rta->rta_len) + RTA_ALIGN(len) > maxlen) {
-		return -1;
-	}
-	subrta = (struct rtattr*)(((char*)rta) + RTA_ALIGN(rta->rta_len));
-	subrta->rta_type = type;
-	subrta->rta_len = len;
-	memcpy(RTA_DATA(subrta), data, alen);
-	rta->rta_len = NLMSG_ALIGN(rta->rta_len) + RTA_ALIGN(len);
-	return 0;
-}
-
-static void
-parse_rtattr(struct rtattr **tb, int max, struct rtattr *rta, int len)
-{
-	while (RTA_OK(rta, len)) {
-		if (rta->rta_type <= max)
-			tb[rta->rta_type] = rta;
-		rta = RTA_NEXT(rta, len);
-	}
-}
-
-char *
-netlink_scope_n2a(int scope)
-{
-	if (scope == 0)
-		return "global";
-	if (scope == 255)
-		return "nowhere";
-	if (scope == 254)
-		return "host";
-	if (scope == 253)
-		return "link";
-	if (scope == 200)
-		return "site";
-	return "unknown";
-}
-
-int
-netlink_scope_a2n(char *scope)
-{
-	if (!strcmp(scope, "global"))
-		return 0;
-	if (!strcmp(scope, "nowhere"))
-		return 255;
-	if (!strcmp(scope, "host"))
-		return 254;
-	if (!strcmp(scope, "link"))
-		return 253;
-	if (!strcmp(scope, "site"))
-		return 200;
-	return -1;
-}
-
-/*
- * Reflect base interface flags on VMAC interface.
- * VMAC interfaces should never update it own flags, only be reflected
- * by the base interface flags.
- */
-static void
-vmac_reflect_flags(struct ifinfomsg *ifi)
-{
-	interface_t *ifp;
-
-	/* find the VMAC interface (if any) */
-	ifp = if_get_by_vmac_base_ifindex(ifi->ifi_index);
-
-	/* if found, reflect base interface flags on VMAC interface */
-	if (ifp) {
-		ifp->flags = ifi->ifi_flags;
-	}
-}
-
-/* Our netlink parser */
-static int
-netlink_parse_info(int (*filter) (struct sockaddr_nl *, struct nlmsghdr *),
-		   nl_handle_t *nl, struct nlmsghdr *n)
-{
-	int status;
-	int ret = 0;
-	int error;
-
-	while (1) {
-		char buf[4096];
-		struct iovec iov = { buf, sizeof buf };
-		struct sockaddr_nl snl;
-		struct msghdr msg =
-		    { (void *) &snl, sizeof snl, &iov, 1, NULL, 0, 0 };
-		struct nlmsghdr *h;
-
-		status = recvmsg(nl->fd, &msg, 0);
-
-		if (status < 0) {
-			if (errno == EINTR)
-				continue;
-			if (errno == EWOULDBLOCK || errno == EAGAIN)
-				break;
-			log_message(LOG_INFO, "Netlink: Received message overrun (%m)");
-			continue;
-		}
-
-		if (status == 0) {
-			log_message(LOG_INFO, "Netlink: EOF");
-			return -1;
-		}
-
-		if (msg.msg_namelen != sizeof snl) {
-			log_message(LOG_INFO,
-			       "Netlink: Sender address length error: length %d",
-			       msg.msg_namelen);
-			return -1;
-		}
-
-		for (h = (struct nlmsghdr *) buf; NLMSG_OK(h, status);
-		     h = NLMSG_NEXT(h, status)) {
-			/* Finish of reading. */
-			if (h->nlmsg_type == NLMSG_DONE)
-				return ret;
-
-			/* Error handling. */
-			if (h->nlmsg_type == NLMSG_ERROR) {
-				struct nlmsgerr *err = (struct nlmsgerr *) NLMSG_DATA(h);
-
-				/*
-				 * If error == 0 then this is a netlink ACK.
-				 * return if not related to multipart message.
-				 */
-				if (err->error == 0) {
-					if (!(h->nlmsg_flags & NLM_F_MULTI))
-						return 0;
-					continue;
-				}
-
-				if (h->nlmsg_len < NLMSG_LENGTH(sizeof (struct nlmsgerr))) {
-					log_message(LOG_INFO,
-					       "Netlink: error: message truncated");
-					return -1;
-				}
-
-				if (n && (err->error == -EEXIST) &&
-				    ((n->nlmsg_type == RTM_NEWROUTE) ||
-				     (n->nlmsg_type == RTM_NEWADDR)))
-					return 0;
-
-				log_message(LOG_INFO,
-				       "Netlink: error: %s, type=(%u), seq=%u, pid=%d",
-				       strerror(-err->error),
-				       err->msg.nlmsg_type,
-				       err->msg.nlmsg_seq, err->msg.nlmsg_pid);
-
-				return -1;
-			}
-
-			/* Skip unsolicited messages from cmd channel */
-			if (nl != &nl_cmd && h->nlmsg_pid == nl_cmd.snl.nl_pid)
-				continue;
-
-			error = (*filter) (&snl, h);
-			if (error < 0) {
-				log_message(LOG_INFO, "Netlink: filter function error");
-				ret = error;
-			}
-		}
-
-		/* After error care. */
-		if (msg.msg_flags & MSG_TRUNC) {
-			log_message(LOG_INFO, "Netlink: error: message truncated");
-			continue;
-		}
-		if (status) {
-			log_message(LOG_INFO, "Netlink: error: data remnant size %d",
-			       status);
-			return -1;
-		}
-	}
-
-	return ret;
-}
-
-/* Out talk filter */
-static int
-netlink_talk_filter(struct sockaddr_nl *snl, struct nlmsghdr *h)
-{
-	log_message(LOG_INFO, "Netlink: ignoring message type 0x%04x",
-	       h->nlmsg_type);
-	return 0;
-}
-
-/* send message to netlink kernel socket, then receive response */
-int
-netlink_talk(nl_handle_t *nl, struct nlmsghdr *n)
-{
-	int status;
-	int ret, flags;
-	struct sockaddr_nl snl;
-	struct iovec iov = { (void *) n, n->nlmsg_len };
-	struct msghdr msg = { (void *) &snl, sizeof snl, &iov, 1, NULL, 0, 0 };
-
-	memset(&snl, 0, sizeof snl);
-	snl.nl_family = AF_NETLINK;
-
-	n->nlmsg_seq = ++nl->seq;
-
-	/* Request Netlink acknowledgement */
-	n->nlmsg_flags |= NLM_F_ACK;
-
-	/* Send message to netlink interface. */
-	status = sendmsg(nl->fd, &msg, 0);
-	if (status < 0) {
-		log_message(LOG_INFO, "Netlink: sendmsg() error: %s",
-		       strerror(errno));
-		return -1;
-	}
-
-	/* Set blocking flag */
-	ret = netlink_set_block(nl, &flags);
-	if (ret < 0)
-		log_message(LOG_INFO, "Netlink: Warning, couldn't set "
-		       "blocking flag to netlink socket...");
-
-	status = netlink_parse_info(netlink_talk_filter, nl, n);
-
-	/* Restore previous flags */
-	if (ret == 0)
-		netlink_set_nonblock(nl, &flags);
-	return status;
-}
-
-/* Fetch a specific type information from netlink kernel */
-static int
-netlink_request(nl_handle_t *nl, int family, int type)
-{
-	int status;
-	struct sockaddr_nl snl;
-	struct {
-		struct nlmsghdr nlh;
-		struct rtgenmsg g;
-	} req;
-
-	/* Cleanup the room */
-	memset(&snl, 0, sizeof (snl));
-	snl.nl_family = AF_NETLINK;
-
-	req.nlh.nlmsg_len = sizeof (req);
-	req.nlh.nlmsg_type = type;
-	req.nlh.nlmsg_flags = NLM_F_ROOT | NLM_F_MATCH | NLM_F_REQUEST;
-	req.nlh.nlmsg_pid = 0;
-	req.nlh.nlmsg_seq = ++nl->seq;
-	req.g.rtgen_family = family;
-
-	status = sendto(nl->fd, (void *) &req, sizeof (req)
-			, 0, (struct sockaddr *) &snl, sizeof (snl));
-	if (status < 0) {
-		log_message(LOG_INFO, "Netlink: sendto() failed: %s",
-		       strerror(errno));
-		return -1;
-	}
-	return 0;
-}
-
-/* Netlink interface link lookup filter */
-static int
-netlink_if_link_filter(struct sockaddr_nl *snl, struct nlmsghdr *h)
-{
-	struct ifinfomsg *ifi;
-	struct rtattr *tb[IFLA_MAX + 1];
-	interface_t *ifp;
-	int i, len;
-	char *name;
-
-	ifi = NLMSG_DATA(h);
-
-	if (h->nlmsg_type != RTM_NEWLINK)
-		return 0;
-
-	len = h->nlmsg_len - NLMSG_LENGTH(sizeof (struct ifinfomsg));
-	if (len < 0)
-		return -1;
-
-	/* Interface name lookup */
-	memset(tb, 0, sizeof (tb));
-	parse_rtattr(tb, IFLA_MAX, IFLA_RTA(ifi), len);
-	if (tb[IFLA_IFNAME] == NULL)
-		return -1;
-	name = (char *) RTA_DATA(tb[IFLA_IFNAME]);
-
-	/* Return if loopback */
-	if (ifi->ifi_type == ARPHRD_LOOPBACK)
-		return 0;
-
-	/* Skip it if already exist */
-	ifp = if_get_by_ifname(name);
-	if (ifp) {
-		if (!ifp->vmac) {
-			vmac_reflect_flags(ifi);
-			ifp->flags = ifi->ifi_flags;
-		}
-		return 0;
-	}
-
-	/* Fill the interface structure */
-	ifp = (interface_t *) MALLOC(sizeof(interface_t));
-	memset(ifp, 0, sizeof(*ifp));
-	memcpy(ifp->ifname, name, strlen(name));
-	ifp->ifindex = ifi->ifi_index;
-	ifp->mtu = *(int *) RTA_DATA(tb[IFLA_MTU]);
-	ifp->hw_type = ifi->ifi_type;
-
-	if (!ifp->vmac) {
-		vmac_reflect_flags(ifi);
-		ifp->flags = ifi->ifi_flags;
-		ifp->base_ifindex = ifi->ifi_index;
-	}
-
-	if (tb[IFLA_ADDRESS]) {
-		int hw_addr_len = RTA_PAYLOAD(tb[IFLA_ADDRESS]);
-
-		if (hw_addr_len > IF_HWADDR_MAX)
-			log_message(LOG_ERR, "MAC address for %s is too large: %d",
-			       name, hw_addr_len);
-		else {
-			ifp->hw_addr_len = hw_addr_len;
-			memcpy(ifp->hw_addr, RTA_DATA(tb[IFLA_ADDRESS]),
-			       hw_addr_len);
-			for (i = 0; i < hw_addr_len; i++)
-				if (ifp->hw_addr[i] != 0)
-					break;
-			if (i == hw_addr_len)
-				ifp->hw_addr_len = 0;
-			else
-				ifp->hw_addr_len = hw_addr_len;
-		}
-	}
-
-	/* Queue this new interface_t */
-	if_add_queue(ifp);
-	return 0;
-}
-
-/*
- * Netlink interface address lookup filter
- * We need to handle multiple primary address and
- * multiple secondary address to the same interface.
- */
-static int
-netlink_if_address_filter(struct sockaddr_nl *snl, struct nlmsghdr *h)
-{
-	struct ifaddrmsg *ifa;
-	struct rtattr *tb[IFA_MAX + 1];
-	interface_t *ifp;
-	int len;
-	void *addr;
-
-	ifa = NLMSG_DATA(h);
-
-	/* Only IPV4 are valid us */
-	if (ifa->ifa_family != AF_INET && ifa->ifa_family != AF_INET6)
-		return 0;
-
-	if (h->nlmsg_type != RTM_NEWADDR && h->nlmsg_type != RTM_DELADDR)
-		return 0;
-
-	len = h->nlmsg_len - NLMSG_LENGTH(sizeof (struct ifaddrmsg));
-	if (len < 0)
-		return -1;
-
-	memset(tb, 0, sizeof (tb));
-	parse_rtattr(tb, IFA_MAX, IFA_RTA(ifa), len);
-
-	/* Fetch interface_t */
-	ifp = if_get_by_ifindex(ifa->ifa_index);
-	if (!ifp)
-		return 0;
-	if (tb[IFA_LOCAL] == NULL)
-		tb[IFA_LOCAL] = tb[IFA_ADDRESS];
-	if (tb[IFA_ADDRESS] == NULL)
-		tb[IFA_ADDRESS] = tb[IFA_LOCAL];
-
-	/* local interface address */
-	addr = (tb[IFA_LOCAL] ? RTA_DATA(tb[IFA_LOCAL]) : NULL);
-
-	if (addr == NULL)
-		return -1;
-
-	/* If no address is set on interface then set the first time */
-	if (ifa->ifa_family == AF_INET) {
-		if (!ifp->sin_addr.s_addr)
-			ifp->sin_addr = *(struct in_addr *) addr;
-	} else {
-		if (!ifp->sin6_addr.s6_addr16[0] && ifa->ifa_scope == RT_SCOPE_LINK)
-			ifp->sin6_addr = *(struct in6_addr *) addr;
-	}
-
-#ifdef _WITH_LVS_
-	/* Refresh checkers state */
-	update_checker_activity(ifa->ifa_family, addr,
-				(h->nlmsg_type == RTM_NEWADDR) ? 1 : 0);
-#endif
-	return 0;
-}
-
-/* Interfaces lookup bootstrap function */
-int
-netlink_interface_lookup(void)
-{
-	nl_handle_t nlh;
-	int status = 0;
-	int ret, flags;
-
-	if (netlink_socket(&nlh, 0) < 0)
-		return -1;
-
-	/* Set blocking flag */
-	ret = netlink_set_block(&nlh, &flags);
-	if (ret < 0)
-		log_message(LOG_INFO, "Netlink: Warning, couldn't set "
-		       "blocking flag to netlink socket...");
-
-	/* Interface lookup */
-	if (netlink_request(&nlh, AF_PACKET, RTM_GETLINK) < 0) {
-		status = -1;
-		goto end_int;
-	}
-	status = netlink_parse_info(netlink_if_link_filter, &nlh, NULL);
-
-end_int:
-	netlink_close(&nlh);
-	return status;
-}
-
-/* Adresses lookup bootstrap function */
-static int
-netlink_address_lookup(void)
-{
-	nl_handle_t nlh;
-	int status = 0;
-	int ret, flags;
-
-	if (netlink_socket(&nlh, 0) < 0)
-		return -1;
-
-	/* Set blocking flag */
-	ret = netlink_set_block(&nlh, &flags);
-	if (ret < 0)
-		log_message(LOG_INFO, "Netlink: Warning, couldn't set "
-		       "blocking flag to netlink socket...");
-
-	/* IPv4 Address lookup */
-	if (netlink_request(&nlh, AF_INET, RTM_GETADDR) < 0) {
-		status = -1;
-		goto end_addr;
-	}
-	status = netlink_parse_info(netlink_if_address_filter, &nlh, NULL);
-
-	/* IPv6 Address lookup */
-	if (netlink_request(&nlh, AF_INET6, RTM_GETADDR) < 0) {
-		status = -1;
-		goto end_addr;
-	}
-	status = netlink_parse_info(netlink_if_address_filter, &nlh, NULL);
-
-end_addr:
-	netlink_close(&nlh);
-	return status;
-}
-
-/* Netlink flag Link update */
-static int
-netlink_reflect_filter(struct sockaddr_nl *snl, struct nlmsghdr *h)
-{
-	struct ifinfomsg *ifi;
-	struct rtattr *tb[IFLA_MAX + 1];
-	interface_t *ifp;
-	int len;
-
-	ifi = NLMSG_DATA(h);
-	if (!(h->nlmsg_type == RTM_NEWLINK || h->nlmsg_type == RTM_DELLINK))
-		return 0;
-
-	len = h->nlmsg_len - NLMSG_LENGTH(sizeof (struct ifinfomsg));
-	if (len < 0)
-		return -1;
-
-	/* Interface name lookup */
-	memset(tb, 0, sizeof (tb));
-	parse_rtattr(tb, IFLA_MAX, IFLA_RTA(ifi), len);
-	if (tb[IFLA_IFNAME] == NULL)
-		return -1;
-
-	/* ignore loopback device */
-	if (ifi->ifi_type == ARPHRD_LOOPBACK)
-		return 0;
-
-	/* find the interface_t */
-	ifp = if_get_by_ifindex(ifi->ifi_index);
-	if (!ifp)
-		return -1;
-
-	/*
-	 * Update flags.
-	 * VMAC interfaces should never update it own flags, only be reflected
-	 * by the base interface flags.
-	 */
-	if (!ifp->vmac) {
-		vmac_reflect_flags(ifi);
-		ifp->flags = ifi->ifi_flags;
-	}
-
-	return 0;
-}
-
-/* Netlink kernel message reflection */
-static int
-netlink_broadcast_filter(struct sockaddr_nl *snl, struct nlmsghdr *h)
-{
-	switch (h->nlmsg_type) {
-	case RTM_NEWLINK:
-	case RTM_DELLINK:
-		return netlink_reflect_filter(snl, h);
-		break;
-	case RTM_NEWADDR:
-	case RTM_DELADDR:
-		return netlink_if_address_filter(snl, h);
-		break;
-	default:
-		log_message(LOG_INFO,
-		       "Kernel is reflecting an unknown netlink nlmsg_type: %d",
-		       h->nlmsg_type);
-		break;
-	}
-	return 0;
-}
-
-int
-kernel_netlink(thread_t * thread)
-{
-	nl_handle_t *nl = THREAD_ARG(thread);
-
-	if (thread->type != THREAD_READ_TIMEOUT)
-		netlink_parse_info(netlink_broadcast_filter, nl, NULL);
-	nl->thread = thread_add_read(master, kernel_netlink, nl, nl->fd,
-				      NETLINK_TIMER);
-	return 0;
-}
-
-void
-kernel_netlink_init(void)
-{
-	unsigned long groups;
-
-	/* Start with a netlink address lookup */
-	netlink_address_lookup();
-
-	/*
-	 * Prepare netlink kernel broadcast channel
-	 * subscribtion. We subscribe to LINK and ADDR
-	 * netlink broadcast messages.
-	 */
-	groups = RTMGRP_LINK | RTMGRP_IPV4_IFADDR | RTMGRP_IPV6_IFADDR;
-	netlink_socket(&nl_kernel, groups);
-
-	if (nl_kernel.fd > 0) {
-		log_message(LOG_INFO, "Registering Kernel netlink reflector");
-		nl_kernel.thread = thread_add_read(master, kernel_netlink, &nl_kernel, nl_kernel.fd,
-						   NETLINK_TIMER);
-	} else
-		log_message(LOG_INFO, "Error while registering Kernel netlink reflector channel");
-
-	/* Prepare netlink command channel. */
-	netlink_socket(&nl_cmd, 0);
-	if (nl_cmd.fd > 0)
-		log_message(LOG_INFO, "Registering Kernel netlink command channel");
-	else
-		log_message(LOG_INFO, "Error while registering Kernel netlink cmd channel");
-}
-
-void
-kernel_netlink_close(void)
-{
-	netlink_close(&nl_kernel);
-	netlink_close(&nl_cmd);
-}
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_nftables.c b/tools/keepalived/keepalived/vrrp/vrrp_nftables.c
new file mode 100644
index 000000000..4ed80b61a
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_nftables.c
@@ -0,0 +1,1997 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        vrrp_nftables.c
+ *
+ * Author:      Quentin Armitage, <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+/* Up to commit 0ec6c01f this used libnftnl/libmnl, but that had overheads,
+ * and constructing the netlink packets directly works just as well.
+ */
+
+#include "config.h"
+
+#include <stdlib.h>
+#include <stddef.h>
+#include <time.h>
+#include <string.h>
+#include <netinet/in.h>
+
+#include <net/if.h>
+#include <linux/netfilter.h>
+#include <linux/netfilter/nf_tables.h>
+#include <linux/netfilter/nfnetlink.h>
+
+#ifdef HAVE_LIBNFTNL_UDATA_H
+#include <libnftnl/udata.h>
+#endif
+#include <libmnl/libmnl.h>
+#include <libnftnl/table.h>
+#include <libnftnl/chain.h>
+#include <libnftnl/set.h>
+#include <libnftnl/rule.h>
+#include <libnftnl/expr.h>
+
+#include <netinet/ip.h>
+#include <netinet/ip6.h>
+#include <netinet/icmp6.h>
+
+#include <errno.h>
+
+#include "vrrp_nftables.h"
+#include "logger.h"
+#include "vrrp.h"
+#include "vrrp_ipaddress.h"
+#include "global_data.h"
+#include "list.h"
+#include "utils.h"
+
+
+/* nft supports ifnames in sets from commit 8c61fa7 (release v0.8.3, libnftnl v1.0.9 (but 0.8.2 also uses that, 0.8.4 uses v1.1.0)) */
+
+/* The following are from nftables source code (include/datatype.h)
+ * and are used for it to determine how to display the entries in
+ * the set. */
+#define TYPE_STRING		5
+#define TYPE_IPADDR		7
+#define TYPE_IP6ADDR		8
+#define TYPE_IFINDEX		20
+#define TYPE_ICMPV6_TYPE	29
+#define TYPE_IFNAME		41
+
+#define TYPE_BITS               6
+#define TYPE_MASK               ((1 << TYPE_BITS) - 1)
+
+#ifdef HAVE_LIBNFTNL_UDATA_H
+/* This should be declared in /usr/include/libnftnl/udata.h */
+enum byteorder {
+        BYTEORDER_INVALID,
+        BYTEORDER_HOST_ENDIAN,
+        BYTEORDER_BIG_ENDIAN,
+};
+
+#ifndef NFTNL_UDATA_SET_MAX
+/* libnftnl declared this from v1.1.3 */
+enum udata_set_type {
+	NFTNL_UDATA_SET_KEYBYTEORDER,
+	NFTNL_UDATA_SET_DATABYTEORDER,
+	NFTNL_UDATA_SET_MERGE_ELEMENTS,
+	__NFTNL_UDATA_SET_MAX,
+};
+/* #define NFTNL_UDATA_SET_MAX (__NFTNL_UDATA_SET_MAX - 1) */
+#endif
+#endif
+
+/* Local definitions */
+#define NO_REG (NFT_REG_MAX+1)
+
+static const char vmac_map_name[] = "vmac_map";
+
+static struct mnl_socket *nl;
+static unsigned int portid;
+static uint32_t seq;
+
+static int ifname_type;
+
+static bool ipv4_table_setup;
+static bool ipv4_vips_setup;
+static bool ipv6_table_setup;
+static bool ipv6_vips_setup;
+static bool setup_ll_ifname;
+static bool setup_ll_ifindex;
+#ifdef _HAVE_VRRP_VMAC_
+static bool ipv4_igmp_setup;
+static bool ipv6_igmp_setup;
+#endif
+
+#ifdef _INCLUDE_UNUSED_CODE_
+static int
+table_cb(const struct nlattr *attr, void *data)
+{
+	const struct nlattr **tb = (const struct nlattr **)data;
+
+	tb[attr->nla_type & NLA_TYPE_MASK] = attr;
+	return MNL_CB_OK;
+}
+
+static void
+new_table(const struct nlmsghdr *nlh)
+{
+	struct nlattr *tb[NFTA_TABLE_MAX+1] = {};
+	struct nfgenmsg *nfg = mnl_nlmsg_get_payload(nlh);
+
+	if (mnl_attr_parse(nlh, sizeof(*nfg), table_cb, tb) < 0) {
+		log_message(LOG_INFO, "table parse failed");
+		return;
+	}
+
+	if (tb[NFTA_TABLE_NAME] && tb[NFTA_TABLE_HANDLE])
+		log_message(LOG_INFO, "Table %s: handle %lu", mnl_attr_get_str(tb[NFTA_TABLE_NAME]), be64toh(mnl_attr_get_u64(tb[NFTA_TABLE_HANDLE])));
+}
+
+static int
+cb_func(const struct nlmsghdr *nlh, void *data)
+{
+	if (NFNL_SUBSYS_ID(nlh->nlmsg_type) != NFNL_SUBSYS_NFTABLES)
+		return 1;
+	switch NFNL_MSG_TYPE(nlh->nlmsg_type) {
+		case NFT_MSG_NEWTABLE: log_message(LOG_INFO, "%s", "NFT_MSG_NEWTABLE"); new_table(nlh);break;
+		case NFT_MSG_NEWCHAIN: log_message(LOG_INFO, "%s", "NFT_MSG_NEWCHAIN"); break;
+		case NFT_MSG_NEWSET: log_message(LOG_INFO, "%s", "NFT_MSG_NEWSET"); break;
+		case NFT_MSG_NEWRULE: log_message(LOG_INFO, "%s", "NFT_MSG_NEWRULE"); break;
+		case NFT_MSG_NEWSETELEM: log_message(LOG_INFO, "%s", "NFT_MSG_NEWSETELEM"); break;
+		default: log_message(LOG_INFO, "Unknown msg type"); break;
+	}
+
+	return 1;
+}
+#endif
+
+#if defined HAVE_LIBNFTNL_UDATA_H && !defined HAVE_NFTNL_UDATA_PUT_U32
+static uint8_t
+nftnl_udata_put_u32(struct nftnl_udata_buf *buf, uint8_t type, uint32_t data)
+{
+	return nftnl_udata_put(buf, type, sizeof(data), &data);
+}
+#endif
+
+
+static bool
+nl_socket_open(void)
+{
+	nl = mnl_socket_open(NETLINK_NETFILTER);
+	if (nl == NULL) {
+		log_message(LOG_INFO, "mnl_socket_open failed - %d", errno);
+		return false;
+	}
+
+	if (mnl_socket_bind(nl, 0, MNL_SOCKET_AUTOPID) < 0) {
+		log_message(LOG_INFO, "mnl_socket_bind error - %d", errno);
+		mnl_socket_close(nl);
+		nl = NULL;
+		return false;
+	}
+
+	portid = mnl_socket_get_portid(nl);
+
+	return true;
+}
+
+static void
+exchange_nl_msg(struct mnl_nlmsg_batch *batch)
+{
+	int ret;
+	char *buf;
+	size_t buf_size;
+	long mnl_buf_size;
+
+	if (mnl_nlmsg_batch_is_empty(batch))
+		return;
+
+#if 0
+	FILE *fp = fopen("/tmp/nftrace", "a");
+	mnl_nlmsg_fprintf(fp, (char *)mnl_nlmsg_batch_head(batch), mnl_nlmsg_batch_size(batch), sizeof( struct nfgenmsg));
+	fclose(fp);
+#endif
+	if (!nl && !nl_socket_open())
+		return;
+
+	if (mnl_socket_sendto(nl, mnl_nlmsg_batch_head(batch),
+			      mnl_nlmsg_batch_size(batch)) < 0) {
+		log_message(LOG_INFO, "mnl_socket_send error - %d", errno);
+		return;
+	}
+
+	mnl_buf_size = MNL_SOCKET_BUFFER_SIZE;
+	if (mnl_buf_size < 1)
+		buf_size = 8192L;
+	else
+		buf_size = (size_t)mnl_buf_size;
+
+	buf = MALLOC(buf_size);
+	while ((ret = mnl_socket_recvfrom(nl, buf, buf_size)) > 0) {
+		ret = mnl_cb_run(buf, ret, 0, portid, NULL, NULL);
+		if (ret <= 0)
+			break;
+	}
+	FREE(buf);
+
+	if (ret == -1)
+		log_message(LOG_INFO, "mnl_socket_recvfrom error - %d", errno);
+}
+
+static int
+table_cb(__attribute__((unused)) const struct nlmsghdr *nlh, void *data)
+{
+	*(bool *)data = true;
+
+        return MNL_CB_OK;
+}
+
+static void
+exchange_nl_msg_single(struct nlmsghdr *nlm, int (*cb_func)(const struct nlmsghdr *, void*), bool *success)
+{
+	int ret;
+	char buf[256];
+
+#if 0
+	FILE *fp = fopen("/tmp/nftrace", "a");
+	mnl_nlmsg_fprintf(fp, (char *)nlm, nlm->nlmsg_len, 0);
+	fclose(fp);
+#endif
+
+	if (!nl && !nl_socket_open())
+		return;
+
+	if (mnl_socket_sendto(nl, nlm, nlm->nlmsg_len) < 0) {
+		log_message(LOG_INFO, "mnl_socket_send error - %d", errno);
+		return ;
+	}
+
+	*success = false;
+	while ((ret = mnl_socket_recvfrom(nl, buf, sizeof(buf))) > 0) {
+		ret = mnl_cb_run(buf, ret, 0, portid, cb_func, success);
+		if (ret <= 0)
+			break;
+	}
+
+	if (ret == -1 && errno != ENOENT)
+		log_message(LOG_INFO, "mnl_socket_recvfrom single error - %d", errno);
+}
+
+static void
+my_mnl_nlmsg_batch_next(struct mnl_nlmsg_batch *batch)
+{
+	if (!mnl_nlmsg_batch_next(batch)) {
+		exchange_nl_msg(batch);
+		mnl_nlmsg_batch_reset(batch);
+	}
+}
+
+static void
+add_payload(struct nftnl_rule *r, uint32_t base, uint32_t dreg,
+			uint32_t offset, uint32_t len)
+{
+	struct nftnl_expr *e;
+
+	e = nftnl_expr_alloc("payload");
+	if (e == NULL) {
+		log_message(LOG_INFO, "expr payload oom error - %d", errno);
+		return;
+	}
+
+	nftnl_expr_set_u32(e, NFTNL_EXPR_PAYLOAD_BASE, base);
+	nftnl_expr_set_u32(e, NFTNL_EXPR_PAYLOAD_DREG, dreg);
+	nftnl_expr_set_u32(e, NFTNL_EXPR_PAYLOAD_OFFSET, offset);
+	nftnl_expr_set_u32(e, NFTNL_EXPR_PAYLOAD_LEN, len);
+
+	nftnl_rule_add_expr(r, e);
+}
+
+static void
+add_meta(struct nftnl_rule *r, uint32_t ifindex, uint32_t dreg)
+{
+	struct nftnl_expr *e;
+
+	e = nftnl_expr_alloc("meta");
+	if (e == NULL) {
+		log_message(LOG_INFO, "expr payload oom error - %d", errno);
+		return;
+	}
+
+	nftnl_expr_set_u32(e, NFTNL_EXPR_META_DREG, dreg);
+	nftnl_expr_set_u32(e, NFTNL_EXPR_META_KEY, ifindex);
+
+	nftnl_rule_add_expr(r, e);
+}
+
+static void
+add_lookup(struct nftnl_rule *r, uint32_t base, uint32_t dreg, const char *set_name,
+			uint32_t set_id,
+#ifndef HAVE_NFTNL_EXPR_LOOKUP_FLAGS
+			__attribute__((unused))
+#endif
+						bool neg)
+{
+	struct nftnl_expr *e;
+
+	e = nftnl_expr_alloc("lookup");
+	if (e == NULL) {
+		log_message(LOG_INFO, "expr lookup oom error - %d", errno);
+		return;
+	}
+
+	nftnl_expr_set_u32(e, NFTNL_EXPR_LOOKUP_SREG, base);
+	if (dreg != NO_REG)
+		nftnl_expr_set_u32(e, NFTNL_EXPR_LOOKUP_DREG, dreg);
+#ifdef HAVE_NFTNL_EXPR_LOOKUP_FLAGS
+	if (neg)
+		nftnl_expr_set_u32(e, NFTNL_EXPR_LOOKUP_FLAGS, NFT_LOOKUP_F_INV);
+#endif
+	nftnl_expr_set_str(e, NFTNL_EXPR_LOOKUP_SET, set_name);
+	if (set_id)
+		nftnl_expr_set_u32(e, NFTNL_EXPR_LOOKUP_SET_ID, set_id);
+
+	nftnl_rule_add_expr(r, e);
+}
+
+#if HAVE_DECL_NFTA_DUP_MAX
+static void
+add_dup(struct nftnl_rule *r, uint32_t addr_reg, uint32_t dev_reg)
+{
+	struct nftnl_expr *e;
+
+	e = nftnl_expr_alloc("dup");
+	if (e == NULL) {
+		log_message(LOG_INFO, "dup payload oom error - %d", errno);
+		return;
+	}
+
+	nftnl_expr_set_u32(e, NFTNL_EXPR_DUP_SREG_ADDR, addr_reg);
+	nftnl_expr_set_u32(e, NFTNL_EXPR_DUP_SREG_DEV, dev_reg);
+
+	nftnl_rule_add_expr(r, e);
+}
+#endif
+
+/* verdict shoud be NF_DROP, NF_ACCEPT, NFT_RETURN, ... */
+/* "The nf_tables verdicts share their numeric space with the netfilter verdicts." */
+static void
+add_immediate_verdict(struct nftnl_rule *r, uint32_t verdict, const char *chain)
+{
+	struct nftnl_expr *e;
+
+	e = nftnl_expr_alloc("immediate");
+	if (e == NULL) {
+		log_message(LOG_INFO, "expr immediate oom error - %d", errno);
+		return;
+	}
+
+	nftnl_expr_set_u32(e, NFTNL_EXPR_IMM_DREG, NFT_REG_VERDICT);
+	if (chain)
+		nftnl_expr_set_str(e, NFTNL_EXPR_IMM_CHAIN, chain);
+	nftnl_expr_set_u32(e, NFTNL_EXPR_IMM_VERDICT, verdict);
+
+	nftnl_rule_add_expr(r, e);
+}
+
+#if HAVE_DECL_NFTA_DUP_MAX
+static void
+add_immediate_data(struct nftnl_rule *r, uint32_t reg, const void *data, uint32_t data_len)
+{
+	struct nftnl_expr *e;
+
+	e = nftnl_expr_alloc("immediate");
+	if (e == NULL) {
+		log_message(LOG_INFO, "expr immediate oom error - %d", errno);
+		return;
+	}
+
+	nftnl_expr_set_u32(e, NFTNL_EXPR_IMM_DREG, reg);
+	nftnl_expr_set(e, NFTNL_EXPR_IMM_DATA, data, data_len);
+
+	nftnl_rule_add_expr(r, e);
+}
+#endif
+
+static void
+add_cmp(struct nftnl_rule *r, uint32_t sreg, uint32_t op,
+		    const void *data, uint32_t data_len)
+{
+	struct nftnl_expr *e;
+
+	e = nftnl_expr_alloc("cmp");
+	if (e == NULL) {
+		log_message(LOG_INFO, "expr cmp oom error - %d", errno);
+		return;
+	}
+
+	nftnl_expr_set_u32(e, NFTNL_EXPR_CMP_SREG, sreg);
+	nftnl_expr_set_u32(e, NFTNL_EXPR_CMP_OP, op);
+	nftnl_expr_set(e, NFTNL_EXPR_CMP_DATA, data, data_len);
+
+	nftnl_rule_add_expr(r, e);
+}
+
+static void
+add_counter(struct nftnl_rule *r)
+{
+	struct nftnl_expr *e;
+
+	if (!global_data->vrrp_nf_counters)
+		return;
+
+	e = nftnl_expr_alloc("counter");
+	if (e == NULL) {
+		log_message(LOG_INFO, "expr counter oom error - %d", errno);
+		return;
+	}
+
+	nftnl_rule_add_expr(r, e);
+}
+
+static struct nftnl_table *
+table_add_parse(uint16_t family, const char *table)
+{
+	struct nftnl_table *t;
+
+	t = nftnl_table_alloc();
+	if (t == NULL) {
+		log_message(LOG_INFO, "OOM error - %d", errno);
+		return NULL;
+	}
+
+	nftnl_table_set_u32(t, NFTNL_TABLE_FAMILY, family);
+	nftnl_table_set_str(t, NFTNL_TABLE_NAME, table);
+
+	return t;
+}
+
+static struct
+nftnl_chain *chain_add_parse(const char *table, const char *name)
+{
+	struct nftnl_chain *t;
+
+	t = nftnl_chain_alloc();
+	if (t == NULL) {
+		log_message(LOG_INFO, "OOM error - %d", errno);
+		return NULL;
+	}
+	nftnl_chain_set(t, NFTNL_CHAIN_TABLE, table);
+	nftnl_chain_set(t, NFTNL_CHAIN_NAME, name);
+
+	return t;
+}
+
+/* For an anonymous set use set name "__set%d", and retrieve set_id with:
+        set_id = nftnl_set_get_u32(s, NFTNL_SET_ID);
+ *
+ * To add a rule referencing the set, setname is "__set%d", and set set_id:
+	if (set_id)
+		nftnl_expr_set_u32(e, NFTNL_EXPR_LOOKUP_SET_ID, set_id);
+
+ * It works similarly for maps
+*/
+static struct
+nftnl_set *setup_set(uint8_t family, const char *table,
+				 const char *name, int type,
+				 int set_type, int data_type)
+{
+	struct nftnl_set *s = NULL;
+#ifdef HAVE_LIBNFTNL_UDATA_H
+	struct nftnl_udata_buf *udbuf;
+#endif
+	static int set_id = 0;
+	int type_copy = type;
+	int size = 0;
+	int data_size = 0;
+
+	s = nftnl_set_alloc();
+	if (s == NULL) {
+		log_message(LOG_INFO, "OOM error - %d", errno);
+		return NULL;
+	}
+
+	while (type_copy) {
+		switch (type_copy & TYPE_MASK)
+		{
+		case TYPE_IPADDR:
+			size += sizeof(struct in_addr);
+			break;
+		case TYPE_IP6ADDR:
+			size += sizeof(struct in6_addr);
+			break;
+		case TYPE_IFINDEX:
+			size += sizeof(uint32_t);
+			break;
+		case TYPE_ICMPV6_TYPE:
+			size++;
+			break;
+		case TYPE_IFNAME:
+		case TYPE_STRING:	/* Used if nft doesn't support ifname type */
+			size += IFNAMSIZ;
+			break;
+		default:
+			log_message(LOG_INFO, "Unsupported type %d\n", type_copy & TYPE_MASK);
+			break;
+		}
+		type_copy >>= TYPE_BITS;
+	}
+
+	if (set_type & NFT_SET_MAP) {
+		switch (data_type)
+		{
+		case TYPE_IPADDR:
+			data_size = sizeof(struct in_addr);
+			break;
+		case TYPE_IP6ADDR:
+			data_size = sizeof(struct in6_addr);
+			break;
+		case TYPE_IFINDEX:
+			data_size = sizeof(uint32_t);
+			break;
+		case TYPE_ICMPV6_TYPE:
+			data_size = 1;
+			break;
+		case TYPE_IFNAME:
+			data_size = IFNAMSIZ;
+			break;
+		default:
+			log_message(LOG_INFO, "Unsupported type %d\n", data_type);
+			break;
+		}
+	}
+
+	nftnl_set_set_str(s, NFTNL_SET_TABLE, table);
+	nftnl_set_set_str(s, NFTNL_SET_NAME, name);
+	nftnl_set_set_u32(s, NFTNL_SET_FAMILY, family);
+	nftnl_set_set_u32(s, NFTNL_SET_KEY_LEN, size);
+	/* inet service type, see nftables/include/datatypes.h */
+	nftnl_set_set_u32(s, NFTNL_SET_KEY_TYPE, type);
+	if (set_type & NFT_SET_MAP) {
+		nftnl_set_set_u32(s, NFTNL_SET_FLAGS, set_type);
+		nftnl_set_set_u32(s, NFTNL_SET_DATA_TYPE, data_type);
+		nftnl_set_set_u32(s, NFTNL_SET_DATA_LEN, data_size);
+	}
+	nftnl_set_set_u32(s, NFTNL_SET_ID, ++set_id);
+
+#ifdef HAVE_LIBNFTNL_UDATA_H
+	if (set_type & NFT_SET_MAP) {
+		udbuf = nftnl_udata_buf_alloc(NFT_USERDATA_MAXLEN);
+		if (!udbuf) {
+			log_message(LOG_INFO, "OOM error - %d", errno);
+			return NULL;
+		}
+
+		nftnl_udata_put_u32(udbuf, NFTNL_UDATA_SET_KEYBYTEORDER, BYTEORDER_HOST_ENDIAN);
+		nftnl_udata_put_u32(udbuf, NFTNL_UDATA_SET_DATABYTEORDER, BYTEORDER_HOST_ENDIAN);
+
+		nftnl_set_set_data(s, NFTNL_SET_USERDATA, nftnl_udata_buf_data(udbuf),
+				   nftnl_udata_buf_len(udbuf));
+		nftnl_udata_buf_free(udbuf);
+	}
+#endif
+
+	return s;
+}
+
+static struct
+nftnl_rule *setup_rule(uint8_t family, const char *table,
+		   const char *chain, const char *handle,
+		   const char *set, bool saddr, uint32_t verdict, bool neg)
+{
+	struct nftnl_rule *r = NULL;
+	uint64_t handle_num;
+
+	r = nftnl_rule_alloc();
+	if (r == NULL) {
+		log_message(LOG_INFO, "OOM error - %d", errno);
+		return NULL;
+	}
+
+	nftnl_rule_set(r, NFTNL_RULE_TABLE, table);
+	nftnl_rule_set(r, NFTNL_RULE_CHAIN, chain);
+	nftnl_rule_set_u32(r, NFTNL_RULE_FAMILY, family);
+
+	if (handle != NULL) {
+		handle_num = atoll(handle);
+		nftnl_rule_set_u64(r, NFTNL_RULE_POSITION, handle_num);
+	}
+
+	/* Use nft --debug netlink,mnl to see the netlink message for an nft command.
+	 * nft --debug all gives more info
+	 * nft monitor --debug all - allows monitoring of iptables-nft etc.
+	 * mnl_nlmsg_fprintf is the function that prints it if
+	 * we want to view what we have constructed
+	 *
+	 * The indentation is added to show the nesting. To indent a nested block,
+	 * the number of lines to indent is (length / 4 - 1).
+	 *
+	----------------	------------------
+	|  0000000020  |	| message length |
+	| 00016 | R--- |	|  type | flags  |	NFNL_MSG_BATCH_BEGIN | REQUEST
+	|  0000000003  |	| sequence number|
+	|  0000000000  |	|     port ID    |
+	----------------	------------------
+	| 00 00 0a 00  |	|  extra header  |	family = AF_UNSPEC, version = NFNETLINK_V0 , res_id = NFNL_SUBSYS_NFTABLES
+	----------------	------------------
+	----------------	------------------
+	|  0000000208  |	| message length |
+	| 02566 | R--- |	|  type | flags  |	NEWRULE | REQUEST
+	|  0000000004  |	| sequence number|
+	|  0000000000  |	|     port ID    |
+	----------------	------------------
+	|00011|--|00001|	|len |flags| type|	NFTA_RULE_TABLE	nftnl_rule_set_str(r, NFTNL_RULE_TABLE, str);
+	| 66 69 6c 74  |	|      data      |	 f i l t
+	| 65 72 00 00  |	|      data      |	 e r
+	|00018|--|00002|	|len |flags| type|	NFTA_RULE_CHAIN
+	| 6b 65 65 70  |	|      data      |	 k e e p
+	| 61 6c 69 76  |	|      data      |	 a l i v
+	| 65 64 5f 69  |	|      data      |	 e d _ i
+	| 6e 00 00 00  |	|      data      |	 n
+	|00156|N-|00004|	|len |flags| type|	NFT_RULE_EXPRESSIONS	(see nftnl_rule_nlmsg_build_payload, netlink_gen_expr)
+	  |00052|N-|00001|	|len |flags| type|		NFTA_LIST_ELEM | NEST (to add - nftnl_rule_add_expr)
+	    |00012|--|00001|	|len |flags| type|	NFTA_EXPR_NAME	(see netlink_gen_payload)
+	    | 70 61 79 6c  |	|      data      |	 p a y l
+	    | 6f 61 64 00  |	|      data      |	 o a d
+	    |00036|N-|00002|	|len |flags| type| 	NFTA_EXPR_DATA | NEST
+	      |00008|--|00001|	|len |flags| type|	NFTNL_EXPR_PAYLOAD_DREG
+	      | 00 00 00 01  |	|      data      |	  NFT_REG_1
+	      |00008|--|00002|	|len |flags| type|	NFTNL_EXPR_PAYLOAD_BASE
+	      | 00 00 00 01  |	|      data      |	  NFT_PAYLOAD_NETWORK_HEADER
+	      |00008|--|00003|	|len |flags| type|	NFTNL_EXPR_PAYLOAD_OFFSET
+	      | 00 00 00 10  |	|      data      |	  offset 16
+	      |00008|--|00004|	|len |flags| type|	NFTNL_EXPR_PAYLOAD_LEN
+	      | 00 00 00 04  |	|      data      | 	  length 4
+	  |00052|N-|00001|	|len |flags| type| 		NFTA_LIST_ELEM | NEST (netlink_gen_set_stmt)
+	    |00011|--|00001|	|len |flags| type|	NFTA_EXPR_NAME	(see netlink_gen_lookup)
+	    | 6c 6f 6f 6b  |	|      data      |	 l o o k
+	    | 75 70 00 00  |	|      data      |	 u p
+	    |00036|N-|00002|	|len |flags| type|	NFTA_EXPR_DATA | NEST
+	      |00008|--|00002|	|len |flags| type|	NFTNL_EXPR_LOOKUP_SREG
+	      | 00 00 00 01  |	|      data      |	  NFT_REG_1
+	      |00015|--|00001|	|len |flags| type|	NFTNL_EXPR_LOOKUP_SET
+	      | 6b 65 65 70  |	|      data      |	 k e e p
+	      | 61 6c 69 76  |	|      data      |	 a l i v
+	      | 65 64 00 00  |	|      data      |	 e d
+	      |00008|--|00004|	|len |flags| type|	NFTNL_EXPR_LOOKUP_SET_ID
+	      | 00 00 00 01  |	|      data      |	 set 1 (Appears not needed)
+	  |00048|N-|00001|	|len |flags| type|		NFTA_LIST_ELEM | NEST (netlink_get_verdict_stmt from netlink_gen_stmt)
+	    |00014|--|00001|	|len |flags| type|	NFTA_EXPR_NAME (see netlink_gen_immediate)
+	    | 69 6d 6d 65  |	|      data      |	 i m m e
+	    | 64 69 61 74  |	|      data      |	 d i a t
+	    | 65 00 00 00  |	|      data      |	 e
+	    |00028|N-|00002|	|len |flags| type|	NFTA_EXPR_DATA | NEST
+	      |00008|--|00001|	|len |flags| type| NFTNL_EXPR_IMM_DREG = NFTA_IMMEDIATE_DREG
+	      | 00 00 00 00  |	|      data      |  NFT_REG_VERDICT
+	      |00016|N-|00002|	|len |flags| type| NFTNL_EXPR_IMM_VERDICT = NFTA_IMMEDIATE_DATA
+	        |00012|N-|00002|	|len |flags| type|  NFTA_DATA_VERDICT
+	          |00008|--|00001|	|len |flags| type|  NFTA_VERDICT_CODE
+	          | 00 00 00 00  |	|      data      |  NF_DROP
+	----------------	------------------
+	----------------	------------------
+	|  0000000020  |	| message length |
+	| 00017 | R--- |	|  type | flags  |	NFNL_MSG_BATCH_END | REQUEST
+	|  0000000005  |	| sequence number|
+	|  0000000000  |	|     port ID    |
+	----------------	------------------
+	| 00 00 0a 00  |	|  extra header  |	family = AF_UNSPEC, version = NFNETLINK_V0 , res_id = NFNL_SUBSYS_NFTABLES
+	----------------	------------------
+	*/
+	if (family == NFPROTO_IPV4)
+		add_payload(r, NFT_PAYLOAD_NETWORK_HEADER, NFT_REG_1,
+			    saddr ? offsetof(struct iphdr, saddr) : offsetof(struct iphdr, daddr), sizeof(uint32_t));
+	else
+		add_payload(r, NFT_PAYLOAD_NETWORK_HEADER, NFT_REG_1,
+			    saddr ? offsetof(struct ip6_hdr, ip6_src) : offsetof(struct ip6_hdr, ip6_dst), sizeof(struct in6_addr));
+
+	add_lookup(r, NFT_REG_1, NO_REG, set, 0, neg);
+
+	add_counter(r);
+
+	add_immediate_verdict(r, verdict, NULL);
+
+	return r;
+}
+
+static struct
+nftnl_rule *setup_rule_if(uint8_t family, const char *table,
+				   const char *chain, const char *handle,
+				   const char *set, bool saddr, bool use_name, uint32_t verdict, bool neg)
+{
+	struct nftnl_rule *r = NULL;
+	uint64_t handle_num;
+
+	/*
+	----------------	------------------
+	|  0000000264  |	| message length |
+	| 02566 | R--- |	|  type | flags  |
+	|  0000000004  |	| sequence number|
+	|  0000000000  |	|     port ID    |
+	----------------	------------------
+	| 0a 00 00 00  |	|  extra header  |
+	|00015|--|00001|	|len |flags| type| NFTA_RULE_TABLE
+	| 6b 65 65 70  |	|      data      |	 k e e p
+	| 61 6c 69 76  |	|      data      |	 a l i v
+	| 65 64 00 00  |	|      data      |	 e d
+	|00018|--|00002|	|len |flags| type| NFTA_RULE_CHAIN
+	| 69 6e 5f 6c  |	|      data      |	 i n _ l
+	| 69 6e 6b 5f  |	|      data      |	 i n k _
+	| 6c 6f 63 61  |	|      data      |	 l o c a
+	| 6c 00 00 00  |	|      data      |	 l
+	|00208|N-|00004|	|len |flags| type| NFTA_RULE_EXPRESSIONS
+	  |00052|N-|00001|	|len |flags| type| NFTA_LIST_ELEM
+	    |00012|--|00001|	|len |flags| type| NFTA_EXPR_NAME
+	      | 70 61 79 6c  |	|      data      |	 p a y l
+	      | 6f 61 64 00  |	|      data      |	 o a d
+	    |00036|N-|00002|	|len |flags| type| NFTA_EXPR_DATA
+	      |00008|--|00001|	|len |flags| type| DREG
+	      | 00 00 00 01  |	|      data      | NFT_REG_1
+	      |00008|--|00002|	|len |flags| type| BASE
+	      | 00 00 00 01  |	|      data      |  NFT_PAYLOAD_NETWORK_HEADER
+	      |00008|--|00003|	|len |flags| type| OFFSET
+	      | 00 00 00 18  |	|      data      |
+	      |00008|--|00004|	|len |flags| type| LEN
+	      | 00 00 00 10  |	|      data      |
+	  |00036|N-|00001|	|len |flags| type| NFTA_LIST_ELEM
+	    |00009|--|00001|	|len |flags| type| NFTA_EXPR_NAME
+	    | 6d 65 74 61  |	|      data      |	 m e t a
+	    | 00 00 00 00  |	|      data      |
+	    |00020|N-|00002|	|len |flags| type| NFTA_EXPR_DATA
+	      |00008|--|00002|	|len |flags| type| NFTA_META_KEY
+	      | 00 00 00 06  |	|      data      | NFT_META_IIFNAME
+	      |00008|--|00001|	|len |flags| type| NFTA_META_DREG
+	      | 00 00 00 02  |	|      data      |NFT_REG_2
+	  |00048|N-|00001|	|len |flags| type| NFTA_LIST_ELEM
+	    |00011|--|00001|	|len |flags| type| NFTA_EXPR_NAME
+	    | 6c 6f 6f 6b  |	|      data      |	 l o o k
+	    | 75 70 00 00  |	|      data      |	 u p
+	    |00032|N-|00002|	|len |flags| type| NFTA_EXPR_DATA
+	      |00008|--|00002|	|len |flags| type| NFTA_LOOKUP_SREG
+	      | 00 00 00 01  |	|      data      | NFT_REG_1
+	      |00010|--|00001|	|len |flags| type| NFTA_LOOKUP_SET
+	      | 69 66 5f 6c  |	|      data      |	 i f _ l
+	      | 6c 00 00 00  |	|      data      |	 l
+	      |00008|--|00004|	|len |flags| type| NFTA_LOOKUP_SET_ID
+	      | 00 00 00 06  |	|      data      |
+	  |00020|N-|00001|	|len |flags| type| NFTA_LIST_ELEM
+	    |00012|--|00001|	|len |flags| type| NFTA_EXPR_NAME
+	    | 63 6f 75 6e  |	|      data      |	 c o u n
+	    | 74 65 72 00  |	|      data      |	 t e r
+	    |00004|N-|00002|	|len |flags| type| NFTA_COUNTER_PACKETS
+	  |00048|N-|00001|	|len |flags| type| NFTA_LIST_ELEM
+	    |00014|--|00001|	|len |flags| type| NFTA_EXPR_NAME
+	    | 69 6d 6d 65  |	|      data      |	 i m m e
+	    | 64 69 61 74  |	|      data      |	 d i a t
+	    | 65 00 00 00  |	|      data      |	 e
+	    |00028|N-|00002|	|len |flags| type| NFTA_EXPR_DATA
+	      |00008|--|00001|	|len |flags| type| NFTA_IMMEDIATE_DREG
+	      | 00 00 00 00  |	|      data      | NFT_REG_VERDICT
+	      |00016|N-|00002|	|len |flags| type| NFTA_IMMEDIATE_DATA
+	        |00012|N-|00002|	|len |flags| type| NFTA_DATA_VERDICT
+	          |00008|--|00001|	|len |flags| type| NFTA_VERDICT_CODE
+	          | 00 00 00 00  |	|      data      | NF_DROP
+	----------------	------------------
+	*/
+	r = nftnl_rule_alloc();
+	if (r == NULL) {
+		log_message(LOG_INFO, "OOM error - %d", errno);
+		return NULL;
+	}
+
+	nftnl_rule_set(r, NFTNL_RULE_TABLE, table);
+	nftnl_rule_set(r, NFTNL_RULE_CHAIN, chain);
+	nftnl_rule_set_u32(r, NFTNL_RULE_FAMILY, family);
+
+	if (handle != NULL) {
+		handle_num = atoll(handle);
+		nftnl_rule_set_u64(r, NFTNL_RULE_POSITION, handle_num);
+	}
+
+	if (family == NFPROTO_IPV4)
+		add_payload(r, NFT_PAYLOAD_NETWORK_HEADER, NFT_REG_1,
+			    saddr ? offsetof(struct iphdr, saddr) : offsetof(struct iphdr, daddr), sizeof(uint32_t));
+	else
+		add_payload(r, NFT_PAYLOAD_NETWORK_HEADER, NFT_REG_1,
+			    saddr ? offsetof(struct ip6_hdr, ip6_src) : offsetof(struct ip6_hdr, ip6_dst), sizeof(struct in6_addr));
+
+	if (saddr)
+		add_meta(r, use_name ? NFT_META_OIFNAME : NFT_META_OIF, NFT_REG_2);
+	else
+		add_meta(r, use_name ? NFT_META_IIFNAME : NFT_META_IIF, NFT_REG_2);
+
+	add_lookup(r, NFT_REG_1, NO_REG, set, 0, neg);
+
+	add_counter(r);
+
+	add_immediate_verdict(r, verdict, NULL);
+
+	return r;
+}
+
+static struct nftnl_rule
+*setup_rule_range_goto(uint8_t family, const char *table,
+				   const char *chain, const char *handle,
+				   const char *chain_dest, bool saddr)
+{
+	struct nftnl_rule *r = NULL;
+	uint64_t handle_num;
+	struct in6_addr ip6;
+
+	r = nftnl_rule_alloc();
+	if (r == NULL) {
+		log_message(LOG_INFO, "OOM error - %d", errno);
+		return NULL;
+	}
+
+	nftnl_rule_set(r, NFTNL_RULE_TABLE, table);
+	nftnl_rule_set(r, NFTNL_RULE_CHAIN, chain);
+	nftnl_rule_set_u32(r, NFTNL_RULE_FAMILY, family);
+
+	/*
+	----------------	------------------
+	|  0000000020  |	| message length |
+	| 00016 | R--- |	|  type | flags  |
+	|  0000000003  |	| sequence number|
+	|  0000000000  |	|     port ID    |
+	----------------	------------------
+	| 00 00 0a 00  |	|  extra header  |
+	----------------	------------------
+	----------------	------------------
+	|  0000000292  |	| message length |
+	| 02566 | R--- |	|  type | flags  | NFT_MSG_NEWRULE
+	|  0000000004  |	| sequence number|
+	|  0000000000  |	|     port ID    |
+	----------------	------------------
+	| 0a 00 00 00  |	|  extra header  |
+	|00011|--|00001|	|len |flags| type|
+	| 66 69 6c 74  |	|      data      |	 f i l t
+	| 65 72 00 00  |	|      data      |	 e r
+	|00018|--|00002|	|len |flags| type|
+	| 6b 65 65 70  |	|      data      |	 k e e p
+	| 61 6c 69 76  |	|      data      |	 a l i v
+	| 65 64 5f 69  |	|      data      |	 e d _ i
+	| 6e 00 00 00  |	|      data      |	 n
+	|00240|N-|00004|	|len |flags| type|
+	  |00052|N-|00001|	|len |flags| type|
+	  |00012|--|00001|	|len |flags| type|
+	  | 70 61 79 6c  |	|      data      |	 p a y l
+	  | 6f 61 64 00  |	|      data      |	 o a d
+	    |00036|N-|00002|	|len |flags| type|     EXPR_DATA
+	      |00008|--|00001|	|len |flags| type|	NFTNL_EXPR_PAYLOAD_DREG 1
+	      | 00 00 00 01  |	|      data      |
+	      |00008|--|00002|	|len |flags| type|	NFTNL_EXPR_PAYLOAD_BASE 1
+	      | 00 00 00 01  |	|      data      |	NFT_PAYLOAD_NETWORK_HEADER
+	      |00008|--|00003|	|len |flags| type|   NFTNL_EXPR_PAYLOAD_PAYLOAD OFFSET 24
+	      | 00 00 00 18  |	|      data      |
+	      |00008|--|00004|	|len |flags| type|	NFTNL_EXPR_PAYLOAD_PAYLOAD_LEN 16
+	      | 00 00 00 10  |	|      data      |
+
+	  |00056|N-|00001|	|len |flags| type|		LIST_ELEM
+	    |00008|--|00001|	|len |flags| type|	NFTNL_EXPR_NAME
+	    | 63 6d 70 00  |	|      data      |	 c m p
+	    |00044|N-|00002|	|len |flags| type|	EXPR_DATA
+	      |00008|--|00001|	|len |flags| type|	NFTNL_EXPR_CMP_SREG = NFTA_CMP_SREG - look at nftnl_expr_***_build
+	      | 00 00 00 01  |	|      data      |	NFT_REG_1
+	      |00008|--|00002|	|len |flags| type|	NFTNL_EXPR_CMP_OP = NFTA_CMP_OP
+	      | 00 00 00 05  |	|      data      |	NFT_CMP_GTE
+	      |00024|N-|00003|	|len |flags| type|	NFTNL_EXPR_CMP_DATA = NFTA_CMP_DATA
+	        |00020|--|00001|	|len |flags| type| NFTA_DATA_VALUE
+	        | fe 80 00 00  |	|      data      |
+	        | 00 00 00 00  |	|      data      |
+	        | 00 00 00 00  |	|      data      |
+	        | 00 00 00 00  |	|      data      |
+	  |00056|N-|00001|	|len |flags| type| NFTA_LIST_ELEM
+	    |00008|--|00001|	|len |flags| type|
+	    | 63 6d 70 00  |	|      data      |	 c m p
+	    |00044|N-|00002|	|len |flags| type|
+	      |00008|--|00001|	|len |flags| type|
+	      | 00 00 00 01  |	|      data      |
+	      |00008|--|00002|	|len |flags| type|
+	      | 00 00 00 03  |	|      data      |	NFT_CMP_LTE
+	      |00024|N-|00003|	|len |flags| type|
+	        |00020|--|00001|	|len |flags| type|
+	        | fe bf 00 00  |	|      data      |
+	        | 00 00 00 00  |	|      data      |
+	        | 00 00 00 00  |	|      data      |
+	      | 00 00 ff ff  |	|      data      |
+	|00072|N-|00001|	|len |flags| type| NFTA_LIST_ELEM
+	    |00014|--|00001|	|len |flags| type|	NFTA_EXPR_NAME
+	    | 69 6d 6d 65  |	|      data      |	 i m m e
+	    | 64 69 61 74  |	|      data      |	 d i a t
+	    | 65 00 00 00  |	|      data      |	 e
+
+	    |00052|N-|00002|	|len |flags| type| NFTA_EXPR_DATA
+	      |00008|--|00001|	|len |flags| type| NFTA_IMMEDIATE_DREG
+	      | 00 00 00 00  |	|      data      | NFT_REG_VERDICT
+
+	      |00040|N-|00002|	|len |flags| type| NFTNL_EXPR_IMM_VERDICT
+	        |00036|N-|00002|	|len |flags| type| NFTA_DATA_VERDICT
+	          |00008|--|00001|	|len |flags| type| NFTA_VERDICT_CODE
+	          | ff ff ff fc  |	|      data      | NFT_GOTO
+	          |00021|--|00002|	|len |flags| type| NFTA_VERDICT_DATA
+	          | 6b 65 65 70  |	|      data      |	 k e e p
+	          | 61 6c 69 76  |	|      data      |	 a l i v
+	          | 65 64 5f 69  |	|      data      |	 e d _ i
+	          | 6e 5f 6c 6c  |	|      data      |	 n _ l l
+	          | 00 00 00 00  |	|      data      |
+	----------------	------------------
+	----------------	------------------
+	|  0000000020  |	| message length |
+	| 00017 | R--- |	|  type | flags  |
+	|  0000000005  |	| sequence number|
+	|  0000000000  |	|     port ID    |
+	----------------	------------------
+	| 00 00 0a 00  |	|  extra header  |
+	----------------	------------------
+	*/
+
+	if (handle != NULL) {
+		handle_num = atoll(handle);
+		nftnl_rule_set_u64(r, NFTNL_RULE_POSITION, handle_num);
+	}
+
+	add_payload(r, NFT_PAYLOAD_NETWORK_HEADER, NFT_REG_1,
+		    saddr ? offsetof(struct ip6_hdr, ip6_src) : offsetof(struct ip6_hdr, ip6_dst), sizeof(struct in6_addr));
+
+	/* The following is interpreted as a range by nftables */
+	ip6.s6_addr32[0] = htonl(0xfe800000);
+	ip6.s6_addr32[1] = ip6.s6_addr32[2] = ip6.s6_addr32[3] = 0;
+	add_cmp(r, NFT_REG_1, NFT_CMP_GTE, &ip6, sizeof(ip6));
+
+	ip6.s6_addr32[0] = htonl(0xfebfffff);
+	ip6.s6_addr32[1] = ip6.s6_addr32[2] = ip6.s6_addr32[3] = 0xffffffff;
+	add_cmp(r, NFT_REG_1, NFT_CMP_LTE, &ip6, sizeof(ip6));
+
+	add_counter(r);
+
+	add_immediate_verdict(r, NFT_GOTO, chain_dest);
+
+	return r;
+}
+
+static struct nftnl_rule *
+setup_rule_icmpv6(uint8_t family, const char *table,
+				   const char *chain, const char *handle,
+				   const char *set, uint32_t set_id, uint32_t verdict, bool neg)
+{
+	struct nftnl_rule *r = NULL;
+	uint64_t handle_num;
+	struct ip6_hdr ip6;
+	struct icmp6_hdr icmp6;
+
+	r = nftnl_rule_alloc();
+	if (r == NULL) {
+		log_message(LOG_INFO, "OOM error - %d", errno);
+		return NULL;
+	}
+
+	nftnl_rule_set(r, NFTNL_RULE_TABLE, table);
+	nftnl_rule_set(r, NFTNL_RULE_CHAIN, chain);
+	nftnl_rule_set_u32(r, NFTNL_RULE_FAMILY, family);
+
+	if (handle != NULL) {
+		handle_num = atoll(handle);
+		nftnl_rule_set_u64(r, NFTNL_RULE_POSITION, handle_num);
+	}
+
+	ip6.ip6_ctlun.ip6_un1.ip6_un1_nxt = IPPROTO_ICMPV6;
+	add_payload(r, NFT_PAYLOAD_NETWORK_HEADER, NFT_REG_1,
+		    offsetof(struct ip6_hdr, ip6_ctlun.ip6_un1.ip6_un1_nxt), sizeof(ip6.ip6_ctlun.ip6_un1.ip6_un1_nxt));
+	add_cmp(r, NFT_REG_1, NFT_CMP_EQ, &ip6.ip6_ctlun.ip6_un1.ip6_un1_nxt, sizeof(ip6.ip6_ctlun.ip6_un1.ip6_un1_nxt));
+
+	add_payload(r, NFT_PAYLOAD_TRANSPORT_HEADER, NFT_REG_1,
+		    offsetof(struct icmp6_hdr, icmp6_type), sizeof(icmp6.icmp6_type));
+	add_lookup(r, NFT_REG_1, NO_REG, set, set_id, neg);
+
+	add_counter(r);
+
+	add_immediate_verdict(r, verdict, NULL);
+
+	return r;
+}
+
+#ifdef _INCLUDE_UNUSED_CODE_
+static struct nftnl_rule *setup_rule_simple(uint8_t family, const char *table,
+				   const char *chain, const char *handle,
+				   uint32_t verdict)
+{
+	struct nftnl_rule *r = NULL;
+	uint64_t handle_num;
+
+	r = nftnl_rule_alloc();
+	if (r == NULL) {
+		log_message(LOG_INFO, "OOM error - %d", errno);
+		return NULL;
+	}
+
+	nftnl_rule_set(r, NFTNL_RULE_TABLE, table);
+	nftnl_rule_set(r, NFTNL_RULE_CHAIN, chain);
+	nftnl_rule_set_u32(r, NFTNL_RULE_FAMILY, family);
+
+	if (handle != NULL) {
+		handle_num = atoll(handle);
+		nftnl_rule_set_u64(r, NFTNL_RULE_POSITION, handle_num);
+	}
+
+	add_counter(r);
+
+	add_immediate_verdict(r, verdict, NULL);
+
+	return r;
+}
+#endif
+
+static void
+setup_link_local_checks(struct mnl_nlmsg_batch *batch, bool concat_ifname)
+{
+	const char *set_name = concat_ifname ? "vips_link_local_name" : "vips_link_local";
+	struct nlmsghdr *nlh;
+	struct nftnl_set *s;
+	struct nftnl_rule *r;
+	int type_for_if = !concat_ifname ? TYPE_IFINDEX : ifname_type;
+
+	s = setup_set(NFPROTO_IPV6, global_data->vrrp_nf_table_name, set_name, (TYPE_IP6ADDR << TYPE_BITS) | type_for_if, 0, 0);
+
+	nlh = nftnl_set_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+				      NFT_MSG_NEWSET, NFPROTO_IPV6,
+				      NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_set_nlmsg_build_payload(nlh, s);
+	nftnl_set_free(s);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add rule ip6 keepalived in_link_local ip6 daddr . iifname @set_name drop */
+	r = setup_rule_if(NFPROTO_IPV6, global_data->vrrp_nf_table_name, "in_link_local", NULL, set_name,
+			false, concat_ifname, NF_DROP, false);
+	nlh = nftnl_rule_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+			NFT_MSG_NEWRULE,
+			nftnl_rule_get_u32(r, NFTNL_RULE_FAMILY),
+			NLM_F_APPEND|NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_rule_nlmsg_build_payload(nlh, r);
+	nftnl_rule_free(r);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add rule ip6 keepalived out_link_local ip6 saddr . oifname @set_name drop */
+	r = setup_rule_if(NFPROTO_IPV6, global_data->vrrp_nf_table_name, "out_link_local", NULL, set_name,
+			true, concat_ifname, NF_DROP, false);
+	nlh = nftnl_rule_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+			NFT_MSG_NEWRULE,
+			nftnl_rule_get_u32(r, NFTNL_RULE_FAMILY),
+			NLM_F_APPEND|NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_rule_nlmsg_build_payload(nlh, r);
+	nftnl_rule_free(r);
+	my_mnl_nlmsg_batch_next(batch);
+}
+
+static struct mnl_nlmsg_batch *
+nft_start_batch(void)
+{
+	struct mnl_nlmsg_batch *batch;
+	char *buf = MALLOC(2 * MNL_SOCKET_BUFFER_SIZE);
+	time_t time_ret;
+
+	if (!seq) {
+		time_ret = time(NULL);
+		if (time_ret == -1)
+			seq = 1;
+		else
+			seq = (uint32_t)time_ret;
+	}
+
+	batch = mnl_nlmsg_batch_start(buf, 2 * MNL_SOCKET_BUFFER_SIZE);
+
+	nftnl_batch_begin(mnl_nlmsg_batch_current(batch), seq++);
+	my_mnl_nlmsg_batch_next(batch);
+
+	return batch;
+}
+
+static void
+nft_end_batch(struct mnl_nlmsg_batch *batch, bool more)
+{
+	void *buf;
+
+	nftnl_batch_end(mnl_nlmsg_batch_current(batch), seq++);
+	my_mnl_nlmsg_batch_next(batch);
+
+	exchange_nl_msg(batch);
+
+	if (more) {
+		mnl_nlmsg_batch_reset(batch);
+
+		nftnl_batch_begin(mnl_nlmsg_batch_current(batch), seq++);
+		my_mnl_nlmsg_batch_next(batch);
+	}
+	else {
+		buf = mnl_nlmsg_batch_head(batch);
+		FREE(buf);
+		mnl_nlmsg_batch_stop(batch);
+	}
+}
+
+static bool
+check_table(uint8_t family, const char *table)
+{
+	struct nlmsghdr *nlh;
+	struct nftnl_table *t;
+	char buf[64];
+	bool have_table = false;
+
+	t = table_add_parse(family, table);
+	nlh = nftnl_table_nlmsg_build_hdr(buf, NFT_MSG_GETTABLE, family, NLM_F_ACK, seq++);
+	nftnl_table_nlmsg_build_payload(nlh, t);
+	nftnl_table_free(t);
+
+	exchange_nl_msg_single(nlh, table_cb, &have_table);
+
+	return have_table;
+}
+
+static void
+delete_table(struct mnl_nlmsg_batch *batch, uint8_t family, const char *table)
+{
+	struct nlmsghdr *nlh;
+	struct nftnl_table *t;
+
+	log_message(LOG_INFO, "Deleting old ip%s %s table", family == NFPROTO_IPV4 ? "" : "6", table);
+
+	/* nft delete table ip keepalived - make sure there is no residue*/
+	t = table_add_parse(family, table);
+	nlh = nftnl_table_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+					NFT_MSG_DELTABLE, family,
+					NLM_F_ACK, seq++);
+	nftnl_table_nlmsg_build_payload(nlh, t);
+	nftnl_table_free(t);
+
+	my_mnl_nlmsg_batch_next(batch);
+}
+
+static void
+check_and_delete_tables(struct mnl_nlmsg_batch *batch, const char *table)
+{
+	bool have_ipv4_table;
+	bool have_ipv6_table;
+
+	/* We have to check the tables before adding the delete table entries
+	 * into the batch in order to ensure that the seq number doesn't get
+	 * out of step in the batch. */
+	have_ipv4_table = check_table(NFPROTO_IPV4, table);
+	have_ipv6_table = check_table(NFPROTO_IPV6, table);
+
+	if (have_ipv4_table)
+		delete_table(batch, NFPROTO_IPV4, table);
+	if (have_ipv6_table)
+		delete_table(batch, NFPROTO_IPV6, table);
+}
+
+/* To get the netlink message returned (with the handle), set NLM_F_ECHO in nftnl_..._nlmsg_build_hdr
+ * For some reason, it isn't working for the second batch sent.
+ */
+static void
+nft_setup_ipv4(struct mnl_nlmsg_batch *batch)
+{
+	struct nlmsghdr *nlh;
+	struct nftnl_table *ta;
+	struct nftnl_chain *t;
+
+	if (!ipv6_table_setup)
+		check_and_delete_tables(batch, global_data->vrrp_nf_table_name);
+
+	/* nft add table ip keepalived */
+	ta = table_add_parse(NFPROTO_IPV4, global_data->vrrp_nf_table_name);
+	nlh = nftnl_table_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+					NFT_MSG_NEWTABLE, NFPROTO_IPV4,
+					NLM_F_CREATE|NLM_F_ACK, seq++);
+	nftnl_table_nlmsg_build_payload(nlh, ta);
+	nftnl_table_free(ta);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add chain ip keepalived out { type filter hook output priority -1; policy accept } */
+	t = chain_add_parse(global_data->vrrp_nf_table_name, "out");
+	if (t == NULL)
+		exit(EXIT_FAILURE);
+
+	nlh = nftnl_chain_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+					NFT_MSG_NEWCHAIN, NFPROTO_IPV4,
+					NLM_F_CREATE|NLM_F_ACK, seq++);
+	nftnl_chain_set_u32(t, NFTNL_CHAIN_HOOKNUM, NF_INET_LOCAL_OUT);
+	nftnl_chain_set_str(t, NFTNL_CHAIN_TYPE, "filter");
+	nftnl_chain_set_s32(t, NFTNL_CHAIN_PRIO, global_data->vrrp_nf_chain_priority);
+	nftnl_chain_set_u32(t, NFTNL_CHAIN_POLICY, NF_ACCEPT);
+	nftnl_chain_nlmsg_build_payload(nlh, t);
+	nftnl_chain_free(t);
+	my_mnl_nlmsg_batch_next(batch);
+
+	ipv4_table_setup = true;
+}
+
+static void
+nft_setup_ipv4_vips(struct mnl_nlmsg_batch *batch)
+{
+	struct nlmsghdr *nlh;
+	struct nftnl_chain *t;
+	struct nftnl_set *s;
+	struct nftnl_rule *r;
+
+	if (!ipv4_table_setup)
+		nft_setup_ipv4(batch);
+
+	/* nft add chain ip keepalived in { type filter hook input priority -1; policy accept; } */
+	t = chain_add_parse(global_data->vrrp_nf_table_name, "in");
+	if (t == NULL)
+		exit(EXIT_FAILURE);
+
+	nlh = nftnl_chain_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+					NFT_MSG_NEWCHAIN, NFPROTO_IPV4,
+					NLM_F_CREATE|NLM_F_ACK, seq++);
+	nftnl_chain_set_u32(t, NFTNL_CHAIN_HOOKNUM, NF_INET_LOCAL_IN);	// input
+	nftnl_chain_set_str(t, NFTNL_CHAIN_TYPE, "filter");
+	nftnl_chain_set_s32(t, NFTNL_CHAIN_PRIO, global_data->vrrp_nf_chain_priority);
+	nftnl_chain_set_u32(t, NFTNL_CHAIN_POLICY, NF_ACCEPT);
+	nftnl_chain_nlmsg_build_payload(nlh, t);
+	nftnl_chain_free(t);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add set ip keepalived vips { type ipv4_addr; } */
+	s = setup_set(NFPROTO_IPV4, global_data->vrrp_nf_table_name, "vips", TYPE_IPADDR, 0, 0);
+
+	nlh = nftnl_set_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+				      NFT_MSG_NEWSET, NFPROTO_IPV4,
+				      NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_set_nlmsg_build_payload(nlh, s);
+	nftnl_set_free(s);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add rule ip keepalived in ip daddr @vips drop */
+	r = setup_rule(NFPROTO_IPV4, global_data->vrrp_nf_table_name, "in", NULL, "vips", false, NF_DROP, false);
+	nlh = nftnl_rule_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+			NFT_MSG_NEWRULE,
+			nftnl_rule_get_u32(r, NFTNL_RULE_FAMILY),
+			NLM_F_APPEND|NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_rule_nlmsg_build_payload(nlh, r);
+	nftnl_rule_free(r);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add rule ip keepalived out ip saddr @vips drop */
+	r = setup_rule(NFPROTO_IPV4, global_data->vrrp_nf_table_name, "out", NULL, "vips", true, NF_DROP, false);
+	nlh = nftnl_rule_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+			NFT_MSG_NEWRULE,
+			nftnl_rule_get_u32(r, NFTNL_RULE_FAMILY),
+			NLM_F_APPEND|NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_rule_nlmsg_build_payload(nlh, r);
+	nftnl_rule_free(r);
+	my_mnl_nlmsg_batch_next(batch);
+
+	ipv4_vips_setup = true;
+}
+
+static void
+nft_setup_ipv6(struct mnl_nlmsg_batch *batch)
+{
+	struct nlmsghdr *nlh;
+	struct nftnl_table *ta;
+	struct nftnl_chain *t;
+	const char *table = global_data->vrrp_nf_table_name;
+
+	if (!ipv4_table_setup)
+		check_and_delete_tables(batch, global_data->vrrp_nf_table_name);
+
+	/* nft add table ip6 keepalived */
+	ta = table_add_parse(NFPROTO_IPV6, table);
+	nlh = nftnl_table_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+					NFT_MSG_NEWTABLE, NFPROTO_IPV6,
+					NLM_F_CREATE|NLM_F_ACK, seq++);
+	nftnl_table_nlmsg_build_payload(nlh, ta);
+	nftnl_table_free(ta);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add chain ip6 keepalived out { type filter hook output priority PRIORITY; policy accept; } */
+	t = chain_add_parse(table, "out");
+	if (t == NULL)
+		exit(EXIT_FAILURE);
+
+	nlh = nftnl_chain_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+					NFT_MSG_NEWCHAIN, NFPROTO_IPV6,
+					NLM_F_CREATE|NLM_F_ACK, seq++);
+	nftnl_chain_set_u32(t, NFTNL_CHAIN_HOOKNUM, NF_INET_LOCAL_OUT);
+	nftnl_chain_set_str(t, NFTNL_CHAIN_TYPE, "filter");
+	nftnl_chain_set_s32(t, NFTNL_CHAIN_PRIO, global_data->vrrp_nf_chain_priority);
+	nftnl_chain_set_u32(t, NFTNL_CHAIN_POLICY, NF_ACCEPT);
+	nftnl_chain_nlmsg_build_payload(nlh, t);
+	nftnl_chain_free(t);
+	my_mnl_nlmsg_batch_next(batch);
+
+	ipv6_table_setup = true;
+}
+
+static void
+nft_setup_ipv6_vips(struct mnl_nlmsg_batch *batch)
+{
+	struct nlmsghdr *nlh;
+	struct nftnl_set *s;
+	struct nftnl_rule *r;
+	struct nftnl_chain *t;
+	struct nftnl_set_elem *e;
+	struct icmp6_hdr icmp6;
+
+	if (!ipv6_table_setup)
+		nft_setup_ipv6(batch);
+
+	/* nft add chain ip6 keepalived in { type filter hook input priority PRIORITY; policy accept; } */
+	t = chain_add_parse(global_data->vrrp_nf_table_name, "in");
+	nlh = nftnl_chain_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+					NFT_MSG_NEWCHAIN, NFPROTO_IPV6,
+					NLM_F_CREATE|NLM_F_ACK, seq++);
+	nftnl_chain_set_u32(t, NFTNL_CHAIN_HOOKNUM, NF_INET_LOCAL_IN);
+	nftnl_chain_set_str(t, NFTNL_CHAIN_TYPE, "filter");
+	nftnl_chain_set_s32(t, NFTNL_CHAIN_PRIO, global_data->vrrp_nf_chain_priority);
+	nftnl_chain_set_u32(t, NFTNL_CHAIN_POLICY, NF_ACCEPT);
+	nftnl_chain_nlmsg_build_payload(nlh, t);
+	nftnl_chain_free(t);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add chain ip6 keepalived in_link_local */
+	t = chain_add_parse(global_data->vrrp_nf_table_name, "in_link_local");
+	if (t == NULL)
+		exit(EXIT_FAILURE);
+
+	nlh = nftnl_chain_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+					NFT_MSG_NEWCHAIN, NFPROTO_IPV6,
+					NLM_F_CREATE|NLM_F_ACK, seq++);
+	nftnl_chain_nlmsg_build_payload(nlh, t);
+	nftnl_chain_free(t);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add chain ip6 keepalived out_link_local */
+	t = chain_add_parse(global_data->vrrp_nf_table_name, "out_link_local");
+	nlh = nftnl_chain_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+					NFT_MSG_NEWCHAIN, NFPROTO_IPV6,
+					NLM_F_CREATE|NLM_F_ACK, seq++);
+	nftnl_chain_nlmsg_build_payload(nlh, t);
+	nftnl_chain_free(t);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add set ip6 keepalived vips {type ipv6_addr; } */
+	s = setup_set(NFPROTO_IPV6, global_data->vrrp_nf_table_name, "vips", TYPE_IP6ADDR, 0, 0);
+
+	nlh = nftnl_set_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+				      NFT_MSG_NEWSET, NFPROTO_IPV6,
+				      NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_set_nlmsg_build_payload(nlh, s);
+	nftnl_set_free(s);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add set ip6 keepalived neighbor-discovery { type icmpv6_type; } */
+	s = setup_set(NFPROTO_IPV6, global_data->vrrp_nf_table_name, "neighbor-discovery", TYPE_ICMPV6_TYPE, 0, 0);
+
+	nlh = nftnl_set_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+				      NFT_MSG_NEWSET, NFPROTO_IPV6,
+				      NLM_F_CREATE|NLM_F_ACK, seq++);
+	/* set_id = nftnl_set_get_u32(s, NFTNL_SET_ID); */
+
+	nftnl_set_set_u32(s, NFTNL_SET_FLAGS, NFT_SET_CONSTANT);
+	nftnl_set_set_u32(s, NFTNL_SET_KEY_LEN, sizeof(icmp6.icmp6_type));
+
+	nftnl_set_nlmsg_build_payload(nlh, s);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add element ip6 keepalived neighbor-discovery { nd-neighbor-solicit, nd-neighbor-advert } */
+	nlh = nftnl_set_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+				      NFT_MSG_NEWSETELEM, NFPROTO_IPV6,
+				      NLM_F_CREATE|NLM_F_ACK, seq++);
+	e = nftnl_set_elem_alloc();
+	icmp6.icmp6_type = ND_NEIGHBOR_SOLICIT;
+	nftnl_set_elem_set(e, NFTNL_SET_ELEM_KEY, &icmp6.icmp6_type, sizeof(icmp6.icmp6_type));
+	nftnl_set_elem_add(s, e);
+
+	e = nftnl_set_elem_alloc();
+	icmp6.icmp6_type = ND_NEIGHBOR_ADVERT;
+	nftnl_set_elem_set(e, NFTNL_SET_ELEM_KEY, &icmp6.icmp6_type, sizeof(icmp6.icmp6_type));
+	nftnl_set_elem_add(s, e);
+
+	nftnl_set_elems_nlmsg_build_payload(nlh, s);
+	nftnl_set_free(s);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add rule ip6 keepalived in icmpv6 @neighbor-discovery accept */
+	r = setup_rule_icmpv6(NFPROTO_IPV6, global_data->vrrp_nf_table_name, "in", NULL,
+			"neighbor-discovery", 0, NF_ACCEPT, false);
+	nlh = nftnl_rule_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+			NFT_MSG_NEWRULE,
+			nftnl_rule_get_u32(r, NFTNL_RULE_FAMILY),
+			NLM_F_APPEND|NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_rule_nlmsg_build_payload(nlh, r);
+	nftnl_rule_free(r);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add rule ip6 keepalived in ip6 daddr fe80::-febf:ffff:ffff:ffff:ffff:ffff:ffff:ffff goto in_link_local */
+	r = setup_rule_range_goto(NFPROTO_IPV6, global_data->vrrp_nf_table_name, "in", NULL, "in_link_local", false);
+	nlh = nftnl_rule_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+			NFT_MSG_NEWRULE,
+			nftnl_rule_get_u32(r, NFTNL_RULE_FAMILY),
+			NLM_F_APPEND|NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_rule_nlmsg_build_payload(nlh, r);
+	nftnl_rule_free(r);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add rule ip6 keepalived in icmpv6 @neighbor-discovery accept */
+	r = setup_rule_icmpv6(NFPROTO_IPV6, global_data->vrrp_nf_table_name, "out", NULL,
+			"neighbor-discovery", 0, NF_ACCEPT, false);
+	nlh = nftnl_rule_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+			NFT_MSG_NEWRULE,
+			nftnl_rule_get_u32(r, NFTNL_RULE_FAMILY),
+			NLM_F_APPEND|NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_rule_nlmsg_build_payload(nlh, r);
+	nftnl_rule_free(r);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add rule ip6 keepalived out ip6 saddr fe80::-febf:ffff:ffff:ffff:ffff:ffff:ffff:ffff goto out_link_local */
+	r = setup_rule_range_goto(NFPROTO_IPV6, global_data->vrrp_nf_table_name, "out", NULL, "out_link_local", true);
+	nlh = nftnl_rule_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+			NFT_MSG_NEWRULE,
+			nftnl_rule_get_u32(r, NFTNL_RULE_FAMILY),
+			NLM_F_APPEND|NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_rule_nlmsg_build_payload(nlh, r);
+	nftnl_rule_free(r);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add rule ip6 keepalived in ip6 daddr @vips drop */
+	r = setup_rule(NFPROTO_IPV6, global_data->vrrp_nf_table_name, "in", NULL, "vips", false, NF_DROP, false);
+	nlh = nftnl_rule_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+			NFT_MSG_NEWRULE,
+			nftnl_rule_get_u32(r, NFTNL_RULE_FAMILY),
+			NLM_F_APPEND|NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_rule_nlmsg_build_payload(nlh, r);
+	nftnl_rule_free(r);
+	my_mnl_nlmsg_batch_next(batch);
+
+	/* nft add rule ip6 keepalived out ip6 saddr @vips drop */
+	r = setup_rule(NFPROTO_IPV6, global_data->vrrp_nf_table_name, "out", NULL, "vips", true, NF_DROP, false);
+	nlh = nftnl_rule_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+			NFT_MSG_NEWRULE,
+			nftnl_rule_get_u32(r, NFTNL_RULE_FAMILY),
+			NLM_F_APPEND|NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_rule_nlmsg_build_payload(nlh, r);
+	nftnl_rule_free(r);
+	my_mnl_nlmsg_batch_next(batch);
+
+	ipv6_vips_setup = true;
+}
+
+static void
+nft_update_ipv4_address(struct mnl_nlmsg_batch *batch, ip_address_t *addr, struct nftnl_set **s)
+{
+	struct nftnl_set_elem *e;
+
+	if (!ipv4_vips_setup)
+		nft_setup_ipv4_vips(batch);
+
+	if (!*s) {
+		*s = nftnl_set_alloc();
+		if (*s == NULL) {
+			log_message(LOG_INFO, "OOM error - %d", errno);
+			return;
+		}
+
+		nftnl_set_set(*s, NFTNL_SET_TABLE, global_data->vrrp_nf_table_name);
+		nftnl_set_set(*s, NFTNL_SET_NAME, "vips");
+	}
+
+	/* nft add element ip keepalived vips { ADDR } */
+	e = nftnl_set_elem_alloc();
+	if (e == NULL) {
+		log_message(LOG_INFO, "OOM error - %d", errno);
+		return;
+	}
+
+	nftnl_set_elem_set(e, NFTNL_SET_ELEM_KEY, &addr->u.sin.sin_addr.s_addr, sizeof(in_addr_t));
+	nftnl_set_elem_add(*s, e);
+}
+
+static void
+nft_update_ipv6_address(struct mnl_nlmsg_batch *batch, ip_address_t *addr, bool dont_track_primary, interface_t *ifp,
+			struct nftnl_set **set_global, struct nftnl_set **set_ll, struct nftnl_set **set_ll_ifname)
+{
+	struct nftnl_set_elem *e;
+	uint32_t data_buf[sizeof(struct in6_addr) + IFNAMSIZ];
+	struct nftnl_set **s;
+	const char *set_name;
+	bool use_link_name = false;
+	bool is_link_local;
+	uint32_t len;
+
+	if (!ipv6_vips_setup)
+		nft_setup_ipv6_vips(batch);
+
+	is_link_local = IN6_IS_ADDR_LINKLOCAL(&addr->u.sin6_addr);
+	if (!is_link_local) {
+		s = set_global;
+		set_name = "vips";
+	} else if (!global_data->vrrp_nf_ifindex &&
+		   dont_track_primary &&
+		   (addr->ifp == ifp || addr->dont_track)) {
+		s = set_ll_ifname;
+		set_name = "vips_link_local_name";
+		use_link_name = true;
+	} else {
+		s = set_ll;
+		set_name = "vips_link_local";
+	}
+
+	/* Create the specific set if not already done so */
+	if (is_link_local) {
+		if (use_link_name) {
+			if (!setup_ll_ifname) {
+				setup_link_local_checks(batch, true);
+				setup_ll_ifname = true;
+			}
+		} else {
+			if (!setup_ll_ifindex) {
+				setup_link_local_checks(batch, false);
+				setup_ll_ifindex = true;
+			}
+		}
+	}
+
+	/* Create set structure if it doesn't already exist */
+	if (!*s) {
+		*s = nftnl_set_alloc();
+		if (*s == NULL) {
+			log_message(LOG_INFO, "OOM error - %d", errno);
+			return;
+		}
+
+		nftnl_set_set(*s, NFTNL_SET_TABLE, global_data->vrrp_nf_table_name);
+		nftnl_set_set(*s, NFTNL_SET_NAME, set_name);
+	}
+
+	/* Add element to set
+	 * nft add element ip6 keepalived vips ADDR or
+	 * nft add element ip6 keepalived vips_link_local ADDR . IF or
+	 * nft add element ip6 keepalived vips_link_local_name ADDR . IF */
+	e = nftnl_set_elem_alloc();
+	if (e == NULL) {
+		log_message(LOG_INFO, "OOM error - %d", errno);
+		return;
+	}
+
+	data_buf[0] = addr->u.sin6_addr.s6_addr32[0];
+	data_buf[1] = addr->u.sin6_addr.s6_addr32[1];
+	data_buf[2] = addr->u.sin6_addr.s6_addr32[2];
+	data_buf[3] = addr->u.sin6_addr.s6_addr32[3];
+	len = sizeof(struct in6_addr);
+
+	if (is_link_local) {
+		if (use_link_name) {
+			memset(&data_buf[4], 0, IFNAMSIZ);
+			memcpy(&data_buf[4], addr->ifp->ifname, strlen(addr->ifp->ifname));
+			len += IFNAMSIZ;
+		} else {
+			data_buf[4] = addr->ifp->ifindex;
+			len += sizeof(data_buf[4]);
+		}
+	}
+
+	nftnl_set_elem_set(e, NFTNL_SET_ELEM_KEY, &data_buf, len);
+	nftnl_set_elem_add(*s, e);
+}
+
+static void
+nft_update_addresses(vrrp_t *vrrp, int cmd)
+{
+	struct mnl_nlmsg_batch *batch;
+	struct nlmsghdr *nlh;
+	ip_address_t *ip_addr;
+	element e;
+	struct nftnl_set *ipv4_set = NULL;
+	struct nftnl_set *ipv6_set = NULL;
+	struct nftnl_set *ipv6_ll_index_set = NULL;
+	struct nftnl_set *ipv6_ll_name_set = NULL;
+	bool set_rule = (cmd == NFT_MSG_NEWSETELEM);
+	uint16_t type = (cmd == NFT_MSG_NEWSETELEM) ? NLM_F_CREATE | NLM_F_EXCL | NLM_F_ACK : NLM_F_ACK;
+
+	batch = nft_start_batch();
+
+	LIST_FOREACH(vrrp->vip, ip_addr, e) {
+		if (set_rule == ip_addr->nftable_rule_set)
+			continue;
+
+		if (ip_addr->ifa.ifa_family == AF_INET)
+			nft_update_ipv4_address(batch, ip_addr, &ipv4_set);
+		else
+			nft_update_ipv6_address(batch, ip_addr, vrrp->dont_track_primary, vrrp->ifp,
+					&ipv6_set, &ipv6_ll_index_set, &ipv6_ll_name_set);
+
+		ip_addr->nftable_rule_set = set_rule;
+	}
+
+	LIST_FOREACH(vrrp->evip, ip_addr, e) {
+		if (set_rule == ip_addr->nftable_rule_set)
+			continue;
+
+		if (ip_addr->ifa.ifa_family == AF_INET)
+			nft_update_ipv4_address(batch, ip_addr, &ipv4_set);
+		else
+			nft_update_ipv6_address(batch, ip_addr, vrrp->dont_track_primary, vrrp->ifp,
+					&ipv6_set, &ipv6_ll_index_set, &ipv6_ll_name_set);
+
+		ip_addr->nftable_rule_set = set_rule;
+	}
+
+	if (ipv4_set) {
+		nlh = nftnl_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+					    cmd, NFPROTO_IPV4,
+					    type,
+					    seq++);
+		nftnl_set_elems_nlmsg_build_payload(nlh, ipv4_set);
+		nftnl_set_free(ipv4_set);
+		my_mnl_nlmsg_batch_next(batch);
+	}
+
+	if (ipv6_set) {
+		nlh = nftnl_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+					    cmd, NFPROTO_IPV6,
+					    type,
+					    seq++);
+		nftnl_set_elems_nlmsg_build_payload(nlh, ipv6_set);
+		nftnl_set_free(ipv6_set);
+		my_mnl_nlmsg_batch_next(batch);
+	}
+
+	if (ipv6_ll_index_set) {
+		nlh = nftnl_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+					    cmd, NFPROTO_IPV6,
+					    type,
+					    seq++);
+		nftnl_set_elems_nlmsg_build_payload(nlh, ipv6_ll_index_set);
+		nftnl_set_free(ipv6_ll_index_set);
+		my_mnl_nlmsg_batch_next(batch);
+	}
+
+	if (ipv6_ll_name_set) {
+		nlh = nftnl_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+					    cmd, NFPROTO_IPV6,
+					    type,
+					    seq++);
+		nftnl_set_elems_nlmsg_build_payload(nlh, ipv6_ll_name_set);
+		nftnl_set_free(ipv6_ll_name_set);
+		my_mnl_nlmsg_batch_next(batch);
+	}
+
+	nft_end_batch(batch, false);
+}
+
+void
+nft_add_addresses(vrrp_t *vrrp)
+{
+	nft_update_addresses(vrrp, NFT_MSG_NEWSETELEM);
+}
+
+void
+nft_remove_addresses(vrrp_t *vrrp)
+{
+if (!nl) return;	// Should delete tables
+	nft_update_addresses(vrrp, NFT_MSG_DELSETELEM);
+}
+
+void
+nft_remove_addresses_iplist(list l)
+{
+	vrrp_t vrrp = { .vip = l };
+
+	nft_update_addresses(&vrrp, NFT_MSG_DELSETELEM);
+}
+
+#ifdef _HAVE_VRRP_VMAC_
+static struct nftnl_rule
+*setup_rule_move_igmp(uint8_t family, const char *table,
+				   const char *chain, const char *handle,
+				   const char *set_map)
+{
+	/* If have nft dup statement:
+	     nft add rule ip keepalived out ip daddr 224.0.0.22 dup to 224.0.0.22 device oifname map @imap drop
+	   otherwise:
+	     nft add rule ip keepalived out ip daddr 224.0.0.22 oifname @imap drop
+	 */
+	struct nftnl_rule *r = NULL;
+	struct in_addr ip;
+	struct in6_addr ip6;
+	uint64_t handle_num;
+
+	r = nftnl_rule_alloc();
+	if (r == NULL) {
+		log_message(LOG_INFO, "OOM error - %d", errno);
+		return NULL;
+	}
+
+	nftnl_rule_set(r, NFTNL_RULE_TABLE, table);
+	nftnl_rule_set(r, NFTNL_RULE_CHAIN, chain);
+	nftnl_rule_set_u32(r, NFTNL_RULE_FAMILY, family);
+
+	if (handle != NULL) {
+		handle_num = atoll(handle);
+		nftnl_rule_set_u64(r, NFTNL_RULE_POSITION, handle_num);
+	}
+
+	if (family == NFPROTO_IPV4) {
+		add_payload(r, NFT_PAYLOAD_NETWORK_HEADER, NFT_REG_1,
+			    offsetof(struct iphdr, daddr), sizeof(struct in_addr));
+
+		ip.s_addr = htonl(0xe0000016);
+		add_cmp(r, NFT_REG_1, NFT_CMP_EQ, &ip, sizeof(ip));
+#if HAVE_DECL_NFTA_DUP_MAX
+		add_immediate_data(r, NFT_REG_1, &ip, sizeof(ip));
+#endif
+	} else {
+		add_payload(r, NFT_PAYLOAD_NETWORK_HEADER, NFT_REG_1,
+			    offsetof(struct ip6_hdr, ip6_dst), sizeof(struct in6_addr));
+
+		ip6.s6_addr32[0] = htonl(0xff020000);
+		ip6.s6_addr32[1] = ip6.s6_addr32[2] = 0;
+		ip6.s6_addr32[3] = htonl(0x00000016);
+		add_cmp(r, NFT_REG_1, NFT_CMP_EQ, &ip6, sizeof(ip6));
+#if HAVE_DECL_NFTA_DUP_MAX
+		add_immediate_data(r, NFT_REG_1, &ip6, sizeof(ip6));
+#endif
+	}
+
+	add_meta(r, NFT_META_OIF, NFT_REG_2);
+#if HAVE_DECL_NFTA_DUP_MAX
+	add_lookup(r, NFT_REG_2, NFT_REG_2, set_map, 1, false);
+	add_dup(r, NFT_REG_1, NFT_REG_2);
+#else
+	add_lookup(r, NFT_REG_2, NO_REG, set_map, 1, false);
+#endif
+	add_counter(r);
+	add_immediate_verdict(r, NF_DROP, NULL);
+
+	return r;
+}
+
+static void
+nft_setup_igmp(struct mnl_nlmsg_batch *batch, struct nftnl_set **s, uint8_t nfproto)
+{
+	struct nlmsghdr *nlh;
+	struct nftnl_rule *r;
+
+	if (nfproto == NFPROTO_IPV4) {
+		if (!ipv4_table_setup)
+			nft_setup_ipv4(batch);
+	} else {
+		if (!ipv6_table_setup)
+			nft_setup_ipv6(batch);
+	}
+
+	/* nft add map ip keepalived imap { type ifname : ifindex } */
+#if HAVE_DECL_NFTA_DUP_MAX
+	*s = setup_set(nfproto, global_data->vrrp_nf_table_name, vmac_map_name, TYPE_IFINDEX, NFT_SET_MAP, TYPE_IFINDEX);
+#else
+	*s = setup_set(nfproto, global_data->vrrp_nf_table_name, vmac_map_name, TYPE_IFINDEX, 0, 0);
+#endif
+
+	nlh = nftnl_set_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+				      NFT_MSG_NEWSET, nfproto,
+				      NLM_F_CREATE|NLM_F_ACK, seq++);
+
+	nftnl_set_nlmsg_build_payload(nlh, *s);
+	my_mnl_nlmsg_batch_next(batch);
+
+	r = setup_rule_move_igmp(nfproto, global_data->vrrp_nf_table_name, "out", NULL, vmac_map_name);
+	nlh = nftnl_rule_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+			NFT_MSG_NEWRULE,
+			nftnl_rule_get_u32(r, NFTNL_RULE_FAMILY),
+			NLM_F_APPEND|NLM_F_CREATE|NLM_F_ACK, seq++);
+	nftnl_rule_nlmsg_build_payload(nlh, r);
+	nftnl_rule_free(r);
+	my_mnl_nlmsg_batch_next(batch);
+
+	if (nfproto == NFPROTO_IPV4)
+		ipv4_igmp_setup = true;
+	else
+		ipv6_igmp_setup = true;
+}
+
+static void
+nft_update_vmac_element(struct mnl_nlmsg_batch *batch, struct nftnl_set *s, ifindex_t vmac_ifindex,
+#if !HAVE_DECL_NFTA_DUP_MAX
+		__attribute__((unused))
+#endif
+					ifindex_t base_ifindex, int cmd, uint8_t nfproto)
+{
+	struct nlmsghdr *nlh;
+	struct nftnl_set_elem *e;
+	uint16_t type = cmd == NFT_MSG_NEWSETELEM ? NLM_F_CREATE | NLM_F_ACK : NLM_F_ACK;
+
+	/* nft add element ip keepalived imap { "vrrp.253", "eth0" } */
+	nlh = nftnl_set_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+				      cmd, nfproto,
+				      type, seq++);
+	e = nftnl_set_elem_alloc();
+	nftnl_set_elem_set(e, NFTNL_SET_ELEM_KEY, &vmac_ifindex, sizeof(vmac_ifindex));
+#if HAVE_DECL_NFTA_DUP_MAX
+	nftnl_set_elem_set(e, NFTNL_SET_ELEM_DATA, &base_ifindex, sizeof(base_ifindex));
+#endif
+	nftnl_set_elem_add(s, e);
+
+	nftnl_set_elems_nlmsg_build_payload(nlh, s);
+	my_mnl_nlmsg_batch_next(batch);
+}
+
+static void
+nft_update_vmac_family(struct mnl_nlmsg_batch *batch, const vrrp_t *vrrp, uint8_t nfproto, int cmd)
+{
+	struct nftnl_set *s;
+
+	if ((nfproto == NFPROTO_IPV4 && !ipv4_igmp_setup) ||
+	    (nfproto == NFPROTO_IPV6 && !ipv6_igmp_setup))
+		nft_setup_igmp(batch, &s, nfproto);
+	else {
+		s = nftnl_set_alloc();
+		if (s == NULL) {
+			log_message(LOG_INFO, "OOM error - %d", errno);
+			return;
+		}
+
+		nftnl_set_set(s, NFTNL_SET_TABLE, global_data->vrrp_nf_table_name);
+		nftnl_set_set(s, NFTNL_SET_NAME, vmac_map_name);
+	}
+
+	nft_update_vmac_element(batch, s, vrrp->ifp->ifindex, vrrp->ifp->base_ifp->ifindex, cmd, nfproto);
+
+	nftnl_set_free(s);
+}
+
+static void
+nft_update_vmac(const vrrp_t *vrrp, int cmd)
+{
+	struct mnl_nlmsg_batch *batch;
+	uint8_t nfproto = vrrp->family == AF_INET ? NFPROTO_IPV4 : NFPROTO_IPV6;
+
+	batch = nft_start_batch();
+
+	nft_update_vmac_family(batch, vrrp, nfproto, cmd);
+
+	if (vrrp->evip_other_family)
+		nft_update_vmac_family(batch, vrrp, nfproto == NFPROTO_IPV4 ? NFPROTO_IPV6 : NFPROTO_IPV4, cmd);
+
+	nft_end_batch(batch, false);
+}
+
+void
+nft_add_vmac(const vrrp_t *vrrp)
+{
+	nft_update_vmac(vrrp, NFT_MSG_NEWSETELEM);
+}
+
+void
+nft_remove_vmac(const vrrp_t *vrrp)
+{
+	nft_update_vmac(vrrp, NFT_MSG_DELSETELEM);
+}
+#endif
+
+void
+nft_cleanup(void)
+{
+	/*
+	----------------	------------------
+	|  0000000020  |	| message length |
+	| 00016 | R--- |	|  type | flags  |
+	|  0000000003  |	| sequence number|
+	|  0000000000  |	|     port ID    |
+	----------------	------------------
+	| 00 00 0a 00  |	|  extra header  |
+	----------------	------------------
+	----------------	------------------
+	|  0000000036  |	| message length |
+	| 02562 | R-A- |	|  type | flags  | NFT_MSG_DELTABLE
+	|  0000000004  |	| sequence number|
+	|  0000000000  |	|     port ID    |
+	----------------	------------------
+	| 02 00 00 00  |	|  extra header  |
+	|00015|--|00001|	|len |flags| type|
+	| 6b 65 65 70  |	|      data      |	 k e e p
+	| 61 6c 69 76  |	|      data      |	 a l i v
+	| 65 64 00 00  |	|      data      |	 e d
+	----------------	------------------
+	----------------	------------------
+	|  0000000020  |	| message length |
+	| 00017 | R--- |	|  type | flags  |
+	|  0000000005  |	| sequence number|
+	|  0000000000  |	|     port ID    |
+	----------------	------------------
+	| 00 00 0a 00  |	|  extra header  |
+	----------------	------------------
+	*/
+	struct nftnl_table *t;
+	struct nlmsghdr *nlh;
+	struct mnl_nlmsg_batch *batch;
+
+	if (!ipv4_table_setup && !ipv6_table_setup)
+		return;
+
+	batch = nft_start_batch();
+
+	/* nft delete table ip keepalived */
+	t = nftnl_table_alloc();
+	nftnl_table_set_str(t, NFTNL_TABLE_NAME, global_data->vrrp_nf_table_name);
+
+	if (ipv4_table_setup) {
+		nlh = nftnl_table_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+						NFT_MSG_DELTABLE, NFPROTO_IPV4,
+						NLM_F_ACK, seq++);
+		nftnl_table_nlmsg_build_payload(nlh, t);
+
+		my_mnl_nlmsg_batch_next(batch);
+	}
+
+	/* nft delete table ip6 keepalived */
+	if (ipv6_table_setup) {
+		nlh = nftnl_table_nlmsg_build_hdr(mnl_nlmsg_batch_current(batch),
+						NFT_MSG_DELTABLE, NFPROTO_IPV6,
+						NLM_F_ACK, seq++);
+		nftnl_table_nlmsg_build_payload(nlh, t);
+
+		my_mnl_nlmsg_batch_next(batch);
+	}
+
+	nftnl_table_free(t);
+
+	nft_end_batch(batch, false);
+
+	ipv4_table_setup = false;
+	ipv4_vips_setup = false;
+	ipv4_igmp_setup = false;
+	ipv6_table_setup = false;
+	ipv6_vips_setup = false;
+	ipv6_igmp_setup = false;
+	setup_ll_ifname = false;
+	setup_ll_ifindex = false;
+}
+
+void
+nft_end(void)
+{
+	nft_cleanup();
+
+	mnl_socket_close(nl);
+	nl = NULL;
+}
+
+void
+set_nf_ifname_type(void)
+{
+	if (global_data->nft_version)
+		ifname_type = global_data->nft_version >= 0x000803 ? TYPE_IFNAME : TYPE_STRING;
+	else
+		ifname_type = LIBNFTNL_VERSION > 0x010009 ? TYPE_IFNAME : TYPE_STRING;
+
+}
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_notify.c b/tools/keepalived/keepalived/vrrp/vrrp_notify.c
index 61bc7a3f5..5a994c0d6 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_notify.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_notify.c
@@ -17,39 +17,47 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
 /* system include */
-#include <ctype.h>
+#include <errno.h>
+#include <unistd.h>
+#include <main.h>
 
 /* local include */
 #include "vrrp_notify.h"
-#include "memory.h"
+#include "vrrp_data.h"
+#ifdef _WITH_DBUS_
+#include "vrrp_dbus.h"
+#endif
+#include "global_data.h"
 #include "notify.h"
 #include "logger.h"
+#if defined _WITH_SNMP_RFC_ || defined _WITH_SNMP_VRRP_
+#include "vrrp_snmp.h"
+#endif
+#include "smtp.h"
 
-static char *
-get_iscript(vrrp_t * vrrp, int state)
+static notify_script_t*
+get_iscript(vrrp_t * vrrp)
 {
 	if (!vrrp->notify_exec)
 		return NULL;
-	if (state == VRRP_STATE_BACK)
+	if (vrrp->state == VRRP_STATE_BACK)
 		return vrrp->script_backup;
-	if (state == VRRP_STATE_MAST)
+	if (vrrp->state == VRRP_STATE_MAST)
 		return vrrp->script_master;
-	if (state == VRRP_STATE_FAULT)
+	if (vrrp->state == VRRP_STATE_FAULT)
 		return vrrp->script_fault;
+	if (vrrp->state == VRRP_STATE_STOP)
+		return vrrp->script_stop;
 	return NULL;
 }
 
-static char *
-get_igscript(vrrp_t * vrrp)
-{
-	return vrrp->script;
-}
-
-static char *
+static notify_script_t*
 get_gscript(vrrp_sgroup_t * vgroup, int state)
 {
 	if (!vgroup->notify_exec)
@@ -60,152 +68,288 @@ get_gscript(vrrp_sgroup_t * vgroup, int state)
 		return vgroup->script_master;
 	if (state == VRRP_STATE_FAULT)
 		return vgroup->script_fault;
+	if (state == VRRP_STATE_STOP)
+		return vgroup->script_stop;
 	return NULL;
 }
 
-static char *
+static inline notify_script_t*
+get_igscript(vrrp_t *vrrp)
+{
+	return vrrp->script;
+}
+
+static inline notify_script_t*
 get_ggscript(vrrp_sgroup_t * vgroup)
 {
 	return vgroup->script;
 }
 
-static char *
-notify_script_name(char *cmdline)
+static void
+notify_fifo(const char *name, int state_num, bool group, uint8_t priority)
 {
-	char *cp = cmdline;
-	char *script;
-	int str_len;
+	const char *state = "{UNKNOWN}";
+	size_t size;
+	char *line;
+	const char *type;
 
-	if (!cmdline)
-		return NULL;
-	while (!isspace((int) *cp) && *cp != '\0')
-		cp++;
-	str_len = cp - cmdline;
-	script = MALLOC(str_len + 1);
-	memcpy(script, cmdline, str_len);
-	*(script + str_len) = '\0';
-
-	return script;
+	if (global_data->notify_fifo.fd == -1 &&
+	    global_data->vrrp_notify_fifo.fd == -1)
+		return;
+
+	switch (state_num) {
+	case VRRP_STATE_MAST:
+		state = "MASTER";
+		break;
+	case VRRP_STATE_BACK:
+		state = "BACKUP";
+		break;
+	case VRRP_STATE_FAULT:
+		state = "FAULT";
+		break;
+	case VRRP_STATE_STOP:
+		state = "STOP";
+		break;
+	case VRRP_EVENT_MASTER_RX_LOWER_PRI:
+		state = "MASTER_RX_LOWER_PRI";
+		break;
+	case VRRP_EVENT_MASTER_PRIORITY_CHANGE:
+		state = "MASTER_PRIORITY";
+		break;
+	case VRRP_EVENT_BACKUP_PRIORITY_CHANGE:
+		state = "BACKUP_PRIORITY";
+		break;
+	}
+
+	type = group ? "GROUP" : "INSTANCE";
+
+	size = strlen(type) + strlen(state) + strlen(name) + 10;
+	line = MALLOC(size);
+	if (!line)
+		return;
+
+	snprintf(line, size, "%s \"%s\" %s %d\n", type, name, state, priority);
+
+	if (global_data->notify_fifo.fd != -1) {
+		if (write(global_data->notify_fifo.fd, line, strlen(line)) == -1) {}
+	}
+	if (global_data->vrrp_notify_fifo.fd != -1) {
+		if (write(global_data->vrrp_notify_fifo.fd, line, strlen(line)) == -1) {}
+	}
+
+	FREE(line);
 }
 
-static int
-script_open_litteral(char *script)
+static void
+notify_instance_fifo(const vrrp_t *vrrp)
 {
-	log_message(LOG_DEBUG, "Opening script file %s",script);
-	FILE *fOut = fopen(script, "r");;
-	if (!fOut) {
-		log_message(LOG_INFO, "Can't open %s (errno %d %s)", script,
-		       errno, strerror(errno));
-		return 0;
-	}
-	fclose(fOut);
-	return 1;
+	notify_fifo(vrrp->iname, vrrp->state, false, vrrp->effective_priority);
 }
 
-static int
-script_open(char *script)
+static void
+notify_group_fifo(const vrrp_sgroup_t *vgroup)
 {
-	char *name = notify_script_name(script);
-	int ret = name ? script_open_litteral(name) : 0;
-	if (name)
-		FREE(name);
-	return ret;
+	notify_fifo(vgroup->gname, vgroup->state, true, 0);
 }
 
-static int
-notify_script_exec(char* script, char *type, int state_num, char* name, int prio)
+static void
+notify_script_exec(notify_script_t* script, const char *type, int state_num, const char* name, int prio)
 {
-	char *state = "{UNKNOWN}";
-	char *command_line = NULL;
-	int size = 0;
+	char prio_buf[4];
 
 	/*
-	 * Determine the length of the buffer that we'll need to generate the command
-	 * to run:
-	 *
-	 * "script" {GROUP|INSTANCE} "NAME" {MASTER|BACKUP|FAULT} PRIO
-	 *
-	 * Thus, the length of the buffer will be:
-	 *
-	 *     ( strlen(script) + 3 ) + ( strlen(type) + 1 ) + ( strlen(name) + 1 ) +
-	 *      ( strlen(state) + 2 ) + ( strlen(prio) + 1 ) + 1 
+	 * script {GROUP|INSTANCE} NAME {MASTER|BACKUP|FAULT|STOP} PRIO
 	 *
 	 * Note that the prio will be indicated as zero for a group.
 	 *
-	 * Which is:
-	 *     - The length of the script plus two enclosing quotes plus adjacent space
-	 *     - The length of the type string plus the adjacent space
-	 *     - The length of the name of the instance or group, plus two enclosing
-	 *       quotes (just in case)
-	 *     - The length of the state string plus the adjacent space
-	 *     - The length of the priority value (3 digits) plus the adjacent
-	 *       space
-	 *     - The null-terminator
-	 *
-	 * Which results in:
-	 *
-	 *     strlen(script) + strlen(type) + strlen(state) + strlen(name) + 12
 	 */
+	script->args[script->num_args] = type;
+	script->args[script->num_args+1] = name;
 	switch (state_num) {
-		case VRRP_STATE_MAST  : state = "MASTER" ; break;
-		case VRRP_STATE_BACK  : state = "BACKUP" ; break;
-		case VRRP_STATE_FAULT : state = "FAULT" ; break;
+		case VRRP_STATE_MAST  : script->args[script->num_args+2] = "MASTER" ; break;
+		case VRRP_STATE_BACK  : script->args[script->num_args+2] = "BACKUP" ; break;
+		case VRRP_STATE_FAULT : script->args[script->num_args+2] = "FAULT" ; break;
+		case VRRP_STATE_STOP  : script->args[script->num_args+2] = "STOP" ; break;
+		default:		script->args[script->num_args+2] = "{UNKNOWN}"; break;
 	}
-
-	size = strlen(script) + strlen(type) + strlen(state) + strlen(name) + 12;
-	command_line = MALLOC(size);
-	if (!command_line)
-		return 0;
+	snprintf(prio_buf, sizeof(prio_buf), "%d", prio);
+	script->args[script->num_args+3] = prio_buf;
+	script->num_args += 4;
 
 	/* Launch the script */
-	snprintf(command_line, size, "\"%s\" %s \"%s\" %s %d",
-		 script, type, name, state, prio);
-	notify_exec(command_line);
-	FREE(command_line);
-	return 1;
+	if (state_num == VRRP_STATE_STOP)
+		system_call_script(master, child_killed_thread, NULL, TIMER_HZ, script);
+	else
+		notify_exec(script);
+	script->num_args -= 4;
 }
 
-int
-notify_instance_exec(vrrp_t * vrrp, int state)
+/* SMTP alert notifier */
+static void
+vrrp_smtp_notifier(vrrp_t * vrrp)
 {
-	char *script = get_iscript(vrrp, state);
-	char *gscript = get_igscript(vrrp);
-	int ret = 0;
+	if (vrrp->smtp_alert &&
+	    (!global_data->no_email_faults || vrrp->state != VRRP_STATE_FAULT) &&
+	    vrrp->last_email_state != vrrp->state) {
+		if (vrrp->state == VRRP_STATE_MAST)
+			smtp_alert(SMTP_MSG_VRRP, vrrp,
+				   "Entering MASTER state",
+				   "=> VRRP Instance is now owning VRRP VIPs <=");
+		else if (vrrp->state == VRRP_STATE_BACK)
+			smtp_alert(SMTP_MSG_VRRP, vrrp,
+				   "Entering BACKUP state",
+				   "=> VRRP Instance is no longer owning VRRP VIPs <=");
+		else if (vrrp->state == VRRP_STATE_FAULT)
+			smtp_alert(SMTP_MSG_VRRP, vrrp,
+				   "Entering FAULT state",
+				   "=> VRRP Instance is no longer owning VRRP VIPs <=");
+		else if (vrrp->state == VRRP_STATE_STOP)
+			smtp_alert(SMTP_MSG_VRRP, vrrp,
+				   "Stopping",
+				   "=> VRRP Instance stopping <=");
+		else
+			return;
+
+		vrrp->last_email_state = vrrp->state;
+	}
+}
+
+/* SMTP alert group notifier */
+static void
+vrrp_sync_smtp_notifier(vrrp_sgroup_t *vgroup)
+{
+	if (vgroup->smtp_alert &&
+	    (!global_data->no_email_faults || vgroup->state != VRRP_STATE_FAULT) &&
+	    vgroup->last_email_state != vgroup->state) {
+		if (vgroup->state == VRRP_STATE_MAST)
+			smtp_alert(SMTP_MSG_VGROUP, vgroup,
+				   "Entering MASTER state",
+				   "=> All VRRP group instances are now in MASTER state <=");
+		else if (vgroup->state == VRRP_STATE_BACK)
+			smtp_alert(SMTP_MSG_VGROUP, vgroup,
+				   "Entering BACKUP state",
+				   "=> All VRRP group instances are now in BACKUP state <=");
+		else if (vgroup->state == VRRP_STATE_FAULT)
+			smtp_alert(SMTP_MSG_VGROUP, vgroup,
+				   "Entering FAULT state",
+				   "=> All VRRP group instances are now in FAULT state <=");
+		else if (vgroup->state == VRRP_STATE_STOP)
+			smtp_alert(SMTP_MSG_VGROUP, vgroup,
+				   "Stopping",
+				   "=> All VRRP group instances are now stopping <=");
+		else
+			return;
+
+		vgroup->last_email_state = vgroup->state;
+	}
+}
+
+void
+send_event_notify(vrrp_t *vrrp, int event)
+{
+	notify_script_t *script = vrrp->script_master_rx_lower_pri;
 
 	/* Launch the notify_* script */
-	if (script && script_open(script)) {
+	if (script)
 		notify_exec(script);
-		ret = 1;
+
+	notify_fifo(vrrp->iname, event, false, vrrp->effective_priority);
+}
+
+void
+send_instance_notifies(vrrp_t *vrrp)
+{
+	notify_script_t *script = get_iscript(vrrp);
+	notify_script_t *gscript = get_igscript(vrrp);
+
+	if (vrrp->notifies_sent && vrrp->sync && vrrp->state == vrrp->sync->state) {
+		/* We are already in the required state due to our sync group,
+		 * so don't send further notifies. */
+		return;
+	}
+
+	vrrp->notifies_sent = true;
+
+	/* Launch the notify_* script */
+	if (script) {
+		if (vrrp->state == VRRP_STATE_STOP)
+			system_call_script(master, child_killed_thread, NULL, TIMER_HZ, script);
+		else
+			notify_exec(script);
 	}
 
 	/* Launch the generic notify script */
-	if (gscript && script_open_litteral(gscript)) {
-		notify_script_exec(gscript, "INSTANCE", state, vrrp->iname,
+	if (gscript)
+		notify_script_exec(gscript, "INSTANCE", vrrp->state, vrrp->iname,
 				   vrrp->effective_priority);
-		ret = 1;
-	}
 
-	return ret;
+	notify_instance_fifo(vrrp);
+
+#ifdef _WITH_DBUS_
+	if (global_data->enable_dbus)
+		dbus_send_state_signal(vrrp); // send signal to all subscribers
+#endif
+
+#ifdef _WITH_SNMP_VRRP_
+	vrrp_snmp_instance_trap(vrrp);
+#endif
+	if (vrrp->state == VRRP_STATE_MAST) {
+#ifdef _WITH_SNMP_RFCV2_
+		vrrp_rfcv2_snmp_new_master_trap(vrrp);
+#endif
+#ifdef _WITH_SNMP_RFCV3_
+		vrrp_rfcv3_snmp_new_master_notify(vrrp);
+#endif
+	}
+	vrrp_smtp_notifier(vrrp);
 }
 
-int
-notify_group_exec(vrrp_sgroup_t * vgroup, int state)
+void
+send_group_notifies(vrrp_sgroup_t *vgroup)
 {
-	char *script = get_gscript(vgroup, state);
-	char *gscript = get_ggscript(vgroup);
-	int ret = 0;
+	notify_script_t *script = get_gscript(vgroup, vgroup->state);
+	notify_script_t *gscript = get_ggscript(vgroup);
 
 	/* Launch the notify_* script */
-	if (script && script_open(script)) {
+	if (script)
 		notify_exec(script);
-		ret = 1;
-	}
 
 	/* Launch the generic notify script */
-	if (gscript && script_open_litteral(gscript)) {
-		notify_script_exec(gscript, "GROUP", state, vgroup->gname, 0);
-		ret = 1;
+	if (gscript)
+		notify_script_exec(gscript, "GROUP", vgroup->state, vgroup->gname, 0);
+
+	notify_group_fifo(vgroup);
+
+#ifdef _WITH_SNMP_VRRP_
+	vrrp_snmp_group_trap(vgroup);
+#endif
+	vrrp_sync_smtp_notifier(vgroup);
+}
+
+void
+send_instance_priority_notifies(vrrp_t *vrrp)
+{
+	notify_fifo(vrrp->iname,
+		    vrrp->state == VRRP_STATE_MAST ? VRRP_EVENT_MASTER_PRIORITY_CHANGE : VRRP_EVENT_BACKUP_PRIORITY_CHANGE,
+		    false,
+		    vrrp->effective_priority);
+}
+
+/* handle terminate state */
+void
+notify_shutdown(void)
+{
+	element e;
+	vrrp_t *vrrp;
+	vrrp_sgroup_t *vgroup;
+
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		vrrp->state = VRRP_STATE_STOP;
+		send_instance_notifies(vrrp);
 	}
 
-	return ret;
+	LIST_FOREACH(vrrp_data->vrrp_sync_group, vgroup, e) {
+		vgroup->state = VRRP_STATE_STOP;
+		send_group_notifies(vgroup);
+	}
 }
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_parser.c b/tools/keepalived/keepalived/vrrp/vrrp_parser.c
index e85634b85..dae6f9817 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_parser.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_parser.c
@@ -1,14 +1,14 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        Configuration file parser/reader. Place into the dynamic
  *              data structure representation the conf file representing
  *              the loadbalanced server pool.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
@@ -19,168 +19,1269 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <unistd.h>
+#include <string.h>
+#include <stdint.h>
+#include <net/if_arp.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+//#include <unistd.h>
+#include <stdio.h>
+#include <ctype.h>
+#include <net/if.h>
+
 #include "vrrp_parser.h"
+#include "logger.h"
+#include "parser.h"
+#include "bitops.h"
+#include "utils.h"
+
+#include "main.h"
+#include "global_data.h"
+#include "global_parser.h"
+
 #include "vrrp_data.h"
+#include "vrrp_ipaddress.h"
 #include "vrrp_sync.h"
-#include "vrrp_index.h"
-#include "vrrp_if.h"
+#include "vrrp_track.h"
+#ifdef _HAVE_VRRP_VMAC_
 #include "vrrp_vmac.h"
-#include "vrrp.h"
-#include "global_data.h"
-#include "global_parser.h"
-#include "logger.h"
-#include "parser.h"
-#include "memory.h"
+#endif
+#include "vrrp_static_track.h"
+
+#ifdef _WITH_LVS_
+#include "check_parser.h"
+#endif
+#ifdef _WITH_BFD_
+#include "bfd_parser.h"
+#endif
+#ifdef _WITH_CN_PROC_
+#include "track_process.h"
+#endif
+
+enum process_delay {
+	PROCESS_DELAY,
+	PROCESS_TERMINATE_DELAY,
+	PROCESS_FORK_DELAY,
+};
+
+/* Used for initialising track files */
+static enum {
+	TRACK_FILE_NO_INIT,
+	TRACK_FILE_CREATE,
+	TRACK_FILE_INIT,
+} track_file_init;
+static int track_file_init_value;
+
+static bool script_user_set;
+static bool remove_script;
+
+/* track groups for static items */
+static void
+static_track_group_handler(const vector_t *strvec)
+{
+	element e;
+	static_track_group_t *tg;
+	const char *gname;
+
+	if (!strvec)
+		return;
+
+	if (vector_count(strvec) != 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "track_group must have a name - skipping");
+		skip_block(true);
+		return;
+	}
+
+	gname = strvec_slot(strvec, 1);
+
+	/* check group doesn't already exist */
+	LIST_FOREACH(vrrp_data->static_track_groups, tg, e) {
+		if (!strcmp(gname,tg->gname)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "track_group %s already defined", gname);
+			skip_block(true);
+			return;
+		}
+	}
+
+	alloc_static_track_group(gname);
+}
+
+static void
+static_track_group_group_handler(const vector_t *strvec)
+{
+	static_track_group_t *tgroup = LIST_TAIL_DATA(vrrp_data->static_track_groups);
+
+	if (tgroup->iname) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Group list already specified for sync group %s", tgroup->gname);
+		skip_block(true);
+		return;
+	}
+
+	tgroup->iname = read_value_block(strvec);
+
+	if (!tgroup->iname)
+		report_config_error(CONFIG_GENERAL_ERROR, "Warning - track group %s has empty group block", tgroup->gname);
+}
 
 /* Static addresses handler */
 static void
-static_addresses_handler(vector_t *strvec)
+static_addresses_handler(const vector_t *strvec)
 {
-	alloc_value_block(strvec, alloc_saddress);
+	global_data->have_vrrp_config = true;
+
+	if (!strvec)
+		return;
+
+	alloc_value_block(alloc_saddress, vector_slot(strvec, 0));
 }
 
+#ifdef _HAVE_FIB_ROUTING_
 /* Static routes handler */
 static void
-static_routes_handler(vector_t *strvec)
+static_routes_handler(const vector_t *strvec)
+{
+	global_data->have_vrrp_config = true;
+
+	if (!strvec)
+		return;
+
+	alloc_value_block(alloc_sroute, vector_slot(strvec, 0));
+}
+
+/* Static rules handler */
+static void
+static_rules_handler(const vector_t *strvec)
+{
+	global_data->have_vrrp_config = true;
+
+	if (!strvec)
+		return;
+
+	alloc_value_block(alloc_srule, vector_slot(strvec, 0));
+}
+#endif
+
+#ifdef _WITH_LINKBEAT_
+static void
+alloc_linkbeat_interface(const vector_t *strvec)
+{
+	interface_t *ifp;
+	int lb_type = 0;
+
+	if (!(ifp = if_get_by_ifname(vector_slot(strvec, 0), global_data->dynamic_interfaces))) {
+		report_config_error(CONFIG_FATAL, "unknown interface %s specified for linkbeat interface", strvec_slot(strvec, 0));
+		return;
+	}
+
+#ifdef _HAVE_VRRP_VMAC_
+	/* netlink messages work for vmacs */
+	if (IS_VLAN(ifp)) {
+		log_message(LOG_INFO, "(%s): linkbeat not supported for vmacs since netlink works", ifp->ifname);
+		return;
+	}
+#endif
+
+	if (vector_size(strvec) > 1) {
+		if (!strcmp(strvec_slot(strvec, 1), "MII"))
+			lb_type = LB_MII;
+		else if (!strcmp(strvec_slot(strvec, 1), "ETHTOOL"))
+			lb_type = LB_ETHTOOL;
+		else if (!strcmp(strvec_slot(strvec, 1), "IOCTL"))
+			lb_type = LB_IOCTL;
+
+		if (!lb_type || vector_size(strvec) > 2)
+			report_config_error(CONFIG_GENERAL_ERROR, "extra characters %s in linkbeat interface", strvec_slot(strvec, 1));
+	}
+
+	ifp->linkbeat_use_polling = true;
+	ifp->lb_type = lb_type;
+}
+
+static void
+linkbeat_interfaces_handler(const vector_t *strvec)
 {
-	alloc_value_block(strvec, alloc_sroute);
+	if (!strvec)
+		return;
+	alloc_value_block(alloc_linkbeat_interface, vector_slot(strvec, 0));
 }
+#endif
 
 /* VRRP handlers */
 static void
-vrrp_sync_group_handler(vector_t *strvec)
+vrrp_sync_group_handler(const vector_t *strvec)
+{
+	list l;
+	element e;
+	vrrp_sgroup_t *sg;
+	const char *gname;
+
+	if (!strvec)
+		return;
+
+	if (vector_count(strvec) != 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp_sync_group must have a name - skipping");
+		skip_block(true);
+		return;
+	}
+
+	gname = strvec_slot(strvec, 1);
+
+	/* check group doesn't already exist */
+	if (!LIST_ISEMPTY(vrrp_data->vrrp_sync_group)) {
+		l = vrrp_data->vrrp_sync_group;
+		for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+			sg = ELEMENT_DATA(e);
+			if (!strcmp(gname,sg->gname)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "vrrp sync group %s already defined", gname);
+				skip_block(true);
+				return;
+			}
+		}
+	}
+
+	alloc_vrrp_sync_group(gname);
+}
+
+static void
+vrrp_group_handler(const vector_t *strvec)
+{
+	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
+
+	if (vgroup->iname) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Group list already specified for sync group %s", vgroup->gname);
+		skip_block(true);
+		return;
+	}
+
+	vgroup->iname = read_value_block(strvec);
+
+	if (!vgroup->iname)
+		report_config_error(CONFIG_GENERAL_ERROR, "Warning - sync group %s has empty group block", vgroup->gname);
+}
+
+static void
+vrrp_group_track_if_handler(const vector_t *strvec)
+{
+	alloc_value_block(alloc_vrrp_group_track_if, vector_slot(strvec, 0));
+}
+
+static void
+vrrp_group_track_scr_handler(const vector_t *strvec)
+{
+	alloc_value_block(alloc_vrrp_group_track_script, vector_slot(strvec, 0));
+}
+
+static void
+vrrp_group_track_file_handler(const vector_t *strvec)
+{
+	alloc_value_block(alloc_vrrp_group_track_file, vector_slot(strvec, 0));
+}
+
+#ifdef _WITH_CN_PROC_
+static void
+vrrp_group_track_process_handler(const vector_t *strvec)
+{
+	alloc_value_block(alloc_vrrp_group_track_process, vector_slot(strvec, 0));
+}
+#endif
+
+#if defined _WITH_BFD_
+static void
+vrrp_group_track_bfd_handler(const vector_t *strvec)
+{
+	alloc_value_block(alloc_vrrp_group_track_bfd, vector_slot(strvec, 0));
+}
+#endif
+
+static inline notify_script_t*
+set_vrrp_notify_script(__attribute__((unused)) const vector_t *strvec, int extra_params)
+{
+	return notify_script_init(extra_params, "notify");
+}
+
+static void
+vrrp_gnotify_backup_handler(const vector_t *strvec)
+{
+	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
+	if (vgroup->script_backup) {
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp group %s: notify_backup script already specified - ignoring %s", vgroup->gname, strvec_slot(strvec,1));
+		return;
+	}
+	vgroup->script_backup = set_vrrp_notify_script(strvec, 0);
+	vgroup->notify_exec = true;
+}
+static void
+vrrp_gnotify_master_handler(const vector_t *strvec)
 {
-	alloc_vrrp_sync_group(vector_slot(strvec, 1));
+	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
+	if (vgroup->script_master) {
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp group %s: notify_master script already specified - ignoring %s", vgroup->gname, strvec_slot(strvec,1));
+		return;
+	}
+	vgroup->script_master = set_vrrp_notify_script(strvec, 0);
+	vgroup->notify_exec = true;
+}
+static void
+vrrp_gnotify_fault_handler(const vector_t *strvec)
+{
+	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
+	if (vgroup->script_fault) {
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp group %s: notify_fault script already specified - ignoring %s", vgroup->gname, strvec_slot(strvec,1));
+		return;
+	}
+	vgroup->script_fault = set_vrrp_notify_script(strvec, 0);
+	vgroup->notify_exec = true;
+}
+static void
+vrrp_gnotify_stop_handler(const vector_t *strvec)
+{
+	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
+	if (vgroup->script_stop) {
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp group %s: notify_stop script already specified - ignoring %s", vgroup->gname, strvec_slot(strvec,1));
+		return;
+	}
+	vgroup->script_stop = set_vrrp_notify_script(strvec, 0);
+	vgroup->notify_exec = true;
+}
+static void
+vrrp_gnotify_handler(const vector_t *strvec)
+{
+	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
+	if (vgroup->script) {
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp group %s: notify script already specified - ignoring %s", vgroup->gname, strvec_slot(strvec,1));
+		return;
+	}
+	vgroup->script = set_vrrp_notify_script(strvec, 4);
+	vgroup->notify_exec = true;
+}
+static void
+vrrp_gsmtp_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res == -1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid vrrp_group smtp_alert parameter %s", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+	vgroup->smtp_alert = res;
+	vrrp_data->num_smtp_alert++;
+}
+static void
+vrrp_gglobal_tracking_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
+
+	report_config_error(CONFIG_GENERAL_ERROR, "(%s) global_tracking is deprecated. Use track_interface/script/file on the sync group", vgroup->gname);
+	vgroup->sgroup_tracking_weight = true;
 }
 static void
-vrrp_group_handler(vector_t *strvec)
+vrrp_sg_tracking_weight_handler(__attribute__((unused)) const vector_t *strvec)
 {
 	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
-	vgroup->iname = read_value_block();
+	vgroup->sgroup_tracking_weight = true;
+}
+static void
+vrrp_handler(const vector_t *strvec)
+{
+	list l;
+	element e;
+	vrrp_t *vrrp;
+	const char *iname;
+
+	global_data->have_vrrp_config = true;
+
+	if (!strvec)
+		return;
+
+	if (vector_count(strvec) != 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp_instance must have a name");
+		skip_block(true);
+		return;
+	}
+
+	iname = strvec_slot(strvec,1);
+
+	/* Make sure the vrrp instance doesn't already exist */
+	if (!LIST_ISEMPTY(vrrp_data->vrrp)) {
+		l = vrrp_data->vrrp;
+		for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+			vrrp = ELEMENT_DATA(e);
+			if (!strcmp(iname,vrrp->iname)) {
+				report_config_error(CONFIG_GENERAL_ERROR, "vrrp instance %s already defined", iname );
+				skip_block(true);
+				return;
+			}
+		}
+	}
+
+	alloc_vrrp(iname);
+}
+#ifdef _HAVE_VRRP_VMAC_
+static void
+vrrp_vmac_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	interface_t *ifp;
+
+	__set_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags);
+
+	if (vector_size(strvec) >= 2) {
+		if (strlen(strvec_slot(strvec, 1)) >= IFNAMSIZ) {
+			report_config_error(CONFIG_GENERAL_ERROR, "VMAC interface name '%s' too long - ignoring", strvec_slot(strvec, 1));
+			return;
+		}
+
+		strcpy(vrrp->vmac_ifname, strvec_slot(strvec, 1));
+
+		/* Check if the interface exists and is a macvlan we can use */
+		if ((ifp = if_get_by_ifname(vrrp->vmac_ifname, IF_NO_CREATE)) &&
+		    ifp->vmac_type != MACVLAN_MODE_PRIVATE) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) interface %s already exists and is not a private macvlan; ignoring vmac if_name", vrrp->iname, vrrp->vmac_ifname);
+			vrrp->vmac_ifname[0] = '\0';
+		}
+	}
+}
+static void
+vrrp_vmac_xmit_base_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+
+	__set_bit(VRRP_VMAC_XMITBASE_BIT, &vrrp->vmac_flags);
+}
+#endif
+#ifdef _HAVE_VRRP_IPVLAN_
+static void
+vrrp_ipvlan_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	interface_t *ifp;
+	bool had_flags = false;
+	ip_address_t addr = {};
+	size_t i;
+
+	if (__test_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) use_ipvlan already specified", vrrp->iname);
+		return;
+	}
+
+	__set_bit(VRRP_IPVLAN_BIT, &vrrp->vmac_flags);
+
+	for (i = 1; i < vector_size(strvec); i++) {
+		if (!strcmp(strvec_slot(strvec, i), "bridge")) {
+			if (had_flags)
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) ipvlan type already specified - ignoring '%s'", vrrp->iname, strvec_slot(strvec, i));
+			else {
+				vrrp->ipvlan_type = 0;
+				had_flags = true;
+			}
+
+			continue;
+		}
+
+		if (!strcmp(strvec_slot(strvec, i), "private")) {
+			if (had_flags)
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) ipvlan type already specified - ignoring '%s'", vrrp->iname, strvec_slot(strvec, i));
+			else {
+#ifdef IPVLAN_F_PRIVATE
+				vrrp->ipvlan_type = IPVLAN_F_PRIVATE;
+#else
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) kernel doesn't support ipvlan type %s", vrrp->iname, strvec_slot(strvec, i));
+#endif
+				had_flags = true;
+			}
+
+			continue;
+		}
+
+		if (!strcmp(strvec_slot(strvec, i), "vepa")) {
+			if (had_flags)
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) ipvlan type already specified - ignoring '%s'", vrrp->iname, strvec_slot(strvec, i));
+			else {
+#ifdef IPVLAN_F_VEPA
+				vrrp->ipvlan_type = IPVLAN_F_VEPA;
+#else
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) kernel doesn't support ipvlan type %s", vrrp->iname, strvec_slot(strvec, i));
+#endif
+				had_flags = true;
+			}
+
+			continue;
+		}
+
+		if (check_valid_ipaddress(strvec_slot(strvec, i), true)) {
+			parse_ipaddress(&addr, strvec_slot(strvec, i), true);
+			if (vrrp->ipvlan_addr) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) ipvlan address already specified - ignoring '%s'", vrrp->iname, strvec_slot(strvec, i));
+				continue;
+			}
+
+			if (vrrp->family == AF_UNSPEC)
+				vrrp->family = addr.ifa.ifa_family;
+			else if (addr.ifa.ifa_family != vrrp->family) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) ipvlan address"
+						     "[%s] MUST match vrrp instance family !!! Skipping..."
+						   , vrrp->iname, strvec_slot(strvec, i));
+				continue;
+			}
+
+			vrrp->ipvlan_addr = MALLOC(sizeof(*vrrp->ipvlan_addr));
+			*vrrp->ipvlan_addr = addr;
+
+			/* We also want to use this address as the source address */
+			if (vrrp->saddr.ss_family == AF_UNSPEC) {
+				vrrp->saddr.ss_family = vrrp->ipvlan_addr->ifa.ifa_family;
+				if (vrrp->saddr.ss_family == AF_INET)
+					((struct sockaddr_in *)&vrrp->saddr)->sin_addr = vrrp->ipvlan_addr->u.sin.sin_addr;
+				else
+					((struct sockaddr_in6 *)&vrrp->saddr)->sin6_addr = vrrp->ipvlan_addr->u.sin6_addr;
+				vrrp->saddr_from_config = true;
+			}
+
+			continue;
+		}
+
+		if (vrrp->vmac_ifname[0]) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) IPVLAN interface already specified - ignoring '%s'", vrrp->iname, strvec_slot(strvec, i));
+			continue;
+		}
+
+		if (strlen(strvec_slot(strvec, i)) >= IFNAMSIZ) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) IPVLAN interface name '%s' too long - ignoring", vrrp->iname, strvec_slot(strvec, i));
+			continue;
+		}
+
+		strcpy(vrrp->vmac_ifname, strvec_slot(strvec, i));
+
+		/* Check if the interface exists and is ipvlan we can use */
+		if ((ifp = if_get_by_ifname(vrrp->vmac_ifname, IF_NO_CREATE)) &&
+		    (ifp->if_type != IF_TYPE_IPVLAN ||
+		     ifp->vmac_type != IPVLAN_MODE_L2)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) interface %s already exists and is not an l2 ipvlan; ignoring ipvlan if_name", vrrp->iname, vrrp->vmac_ifname);
+			vrrp->vmac_ifname[0] = '\0';
+		}
+	}
+}
+#endif
+static void
+vrrp_unicast_peer_handler(const vector_t *strvec)
+{
+	alloc_value_block(alloc_vrrp_unicast_peer, vector_slot(strvec, 0));
+}
+#ifdef _WITH_UNICAST_CHKSUM_COMPAT_
+static void
+vrrp_unicast_chksum_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+
+	if (vector_size(strvec) >= 2) {
+		if (!strcmp(strvec_slot(strvec, 1), "never"))
+			vrrp->unicast_chksum_compat = CHKSUM_COMPATIBILITY_NEVER;
+		else
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) Unknown old_unicast_chksum mode %s - ignoring", vrrp->iname, strvec_slot(strvec, 1));
+	}
+	else
+		vrrp->unicast_chksum_compat = CHKSUM_COMPATIBILITY_CONFIG;
+}
+#endif
+static void
+vrrp_native_ipv6_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+
+	if (vrrp->family == AF_INET) {
+		report_config_error(CONFIG_GENERAL_ERROR,"(%s) Cannot specify native_ipv6 with IPv4 addresses", vrrp->iname);
+		return;
+	}
+
+	vrrp->family = AF_INET6;
+	vrrp->version = VRRP_VERSION_3;
+}
+static void
+vrrp_state_handler(const vector_t *strvec)
+{
+	const char *str = strvec_slot(strvec, 1);
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+
+	if (!strcmp(str, "MASTER"))
+		vrrp->wantstate = VRRP_STATE_MAST;
+	else if (!strcmp(str, "BACKUP"))
+	{
+		if (vrrp->wantstate == VRRP_STATE_MAST)
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) state previously set as MASTER - ignoring BACKUP", vrrp->iname);
+		else
+			vrrp->wantstate = VRRP_STATE_BACK;
+	}
+	else {
+		report_config_error(CONFIG_GENERAL_ERROR,"(%s) unknown state '%s', defaulting to BACKUP", vrrp->iname, str);
+		vrrp->wantstate = VRRP_STATE_BACK;
+	}
+}
+static void
+vrrp_int_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	const char *name = strvec_slot(strvec, 1);
+
+	if (strlen(name) >= IFNAMSIZ) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Interface name '%s' too long - ignoring", name);
+		return;
+	}
+
+	vrrp->ifp = if_get_by_ifname(name, IF_CREATE_IF_DYNAMIC);
+	if (!vrrp->ifp)
+		report_config_error(CONFIG_GENERAL_ERROR, "WARNING - interface %s for vrrp_instance %s doesn't exist", name, vrrp->iname);
+	else if (vrrp->ifp->hw_type == ARPHRD_LOOPBACK) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) cannot use a loopback interface (%s) for vrrp - ignoring", vrrp->iname, vrrp->ifp->ifname);
+		vrrp->ifp = NULL;
+	}
+
+#ifdef _HAVE_VRRP_VMAC_
+	vrrp->configured_ifp = vrrp->ifp;
+#endif
+}
+#ifdef _WITH_LINKBEAT_
+static void
+vrrp_linkbeat_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+
+	vrrp->linkbeat_use_polling = true;
+	report_config_error(CONFIG_GENERAL_ERROR, "(%s) 'linkbeat_use_polling' in vrrp instance deprecated - use linkbeat_interfaces block", vrrp->iname);
+}
+#endif
+static void
+vrrp_track_if_handler(const vector_t *strvec)
+{
+	alloc_value_block(alloc_vrrp_track_if, vector_slot(strvec, 0));
+}
+static void
+vrrp_track_scr_handler(const vector_t *strvec)
+{
+	alloc_value_block(alloc_vrrp_track_script, vector_slot(strvec, 0));
+}
+static void
+vrrp_track_file_handler(const vector_t *strvec)
+{
+	alloc_value_block(alloc_vrrp_track_file, vector_slot(strvec, 0));
+}
+#ifdef _WITH_CN_PROC_
+static void
+vrrp_track_process_handler(const vector_t *strvec)
+{
+	alloc_value_block(alloc_vrrp_track_process, vector_slot(strvec, 0));
+}
+#endif
+static void
+vrrp_dont_track_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	vrrp->dont_track_primary = true;
+}
+#ifdef _WITH_BFD_
+static void
+vrrp_track_bfd_handler(const vector_t *strvec)
+{
+	alloc_value_block(alloc_vrrp_track_bfd, vector_slot(strvec, 0));
+}
+#endif
+static void
+vrrp_srcip_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	struct sockaddr_storage *saddr = &vrrp->saddr;
+
+	if (inet_stosockaddr(strvec_slot(strvec, 1), NULL, saddr)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: VRRP instance[%s] malformed"
+				     " src address[%s]. Skipping..."
+				   , vrrp->iname, strvec_slot(strvec, 1));
+		return;
+	}
+
+	vrrp->saddr_from_config = true;
+
+	if (vrrp->family == AF_UNSPEC)
+		vrrp->family = saddr->ss_family;
+	else if (saddr->ss_family != vrrp->family) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Configuration error: VRRP instance[%s] and src address"
+				     "[%s] MUST be of the same family !!! Skipping..."
+				   , vrrp->iname, strvec_slot(strvec, 1));
+		saddr->ss_family = AF_UNSPEC;
+		vrrp->saddr_from_config = false;
+	}
+}
+static void
+vrrp_track_srcip_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+
+	vrrp->track_saddr = true;
+}
+static void
+vrrp_vrid_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	unsigned vrid;
+
+	if (!read_unsigned_strvec(strvec, 1, &vrid, 1, 255, false)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): VRID '%s' not valid - must be between 1 & 255", vrrp->iname, strvec_slot(strvec, 1));
+		return;
+	}
+
+	vrrp->vrid = (uint8_t)vrid;
+}
+static void
+vrrp_prio_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	unsigned base_priority;
+
+	if (!read_unsigned_strvec(strvec, 1, &base_priority, 1, VRRP_PRIO_OWNER, false)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Priority not valid! must be between 1 & %d. Using default %d", vrrp->iname, VRRP_PRIO_OWNER, VRRP_PRIO_DFL);
+		vrrp->base_priority = VRRP_PRIO_DFL;
+	}
+	else
+		vrrp->base_priority = (uint8_t)base_priority;
+}
+static void
+vrrp_adv_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	double adver_int;
+	bool res;
+
+	res = read_double_strvec(strvec, 1, &adver_int, 0.01F, 255.0F, true);
+
+	/* Simple check - just positive */
+	if (!res || adver_int <= 0)
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Advert interval (%s) not valid! Must be > 0 - ignoring", vrrp->iname, strvec_slot(strvec, 1));
+	else
+		vrrp->adver_int = (unsigned)(adver_int * TIMER_HZ);
+}
+static void
+vrrp_debug_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	unsigned debug_val;
+
+	if (!read_unsigned_strvec(strvec, 1, &debug_val, 0, 4, true))
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Debug value '%s' not valid; must be between 0-4", vrrp->iname, strvec_slot(strvec, 1));
+	else
+		vrrp->debug = debug_val;
+}
+static void
+vrrp_skip_check_adv_addr_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	int res;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res >= 0)
+			vrrp->skip_check_adv_addr = (bool)res;
+		else
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) invalid skip_check_adv_addr %s specified", vrrp->iname, strvec_slot(strvec, 1));
+	} else {
+		/* Defaults to true */
+		vrrp->skip_check_adv_addr = true;
+	}
+}
+static void
+vrrp_strict_mode_handler(const vector_t *strvec)
+{
+	int res;
+
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res >= 0)
+			vrrp->strict_mode = (bool)res;
+		else
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) invalid strict_mode %s specified", vrrp->iname, strvec_slot(strvec, 1));
+	} else {
+		/* Defaults to true */
+		vrrp->strict_mode = true;
+	}
+}
+static void
+vrrp_nopreempt_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	vrrp->nopreempt = 1;
+}
+static void	/* backwards compatibility */
+vrrp_preempt_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	vrrp->nopreempt = 0;
+}
+static void
+vrrp_preempt_delay_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	double preempt_delay;
+
+	if (!read_double_strvec(strvec, 1, &preempt_delay, 0, TIMER_MAX_SEC, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) Preempt_delay not valid! must be between 0-%u", vrrp->iname, TIMER_MAX_SEC);
+		vrrp->preempt_delay = 0;
+	}
+	else
+		vrrp->preempt_delay = (unsigned long)(preempt_delay * TIMER_HZ);
+}
+static void
+vrrp_notify_backup_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	if (vrrp->script_backup) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) notify_backup script already specified - ignoring %s", vrrp->iname, strvec_slot(strvec,1));
+		return;
+	}
+	vrrp->script_backup = set_vrrp_notify_script(strvec, 0);
+	vrrp->notify_exec = true;
+}
+static void
+vrrp_notify_master_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	if (vrrp->script_master) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) notify_master script already specified - ignoring %s", vrrp->iname, strvec_slot(strvec,1));
+		return;
+	}
+	vrrp->script_master = set_vrrp_notify_script(strvec, 0);
+	vrrp->notify_exec = true;
+}
+static void
+vrrp_notify_fault_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	if (vrrp->script_fault) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) notify_fault script already specified - ignoring %s", vrrp->iname, strvec_slot(strvec,1));
+		return;
+	}
+	vrrp->script_fault = set_vrrp_notify_script(strvec, 0);
+	vrrp->notify_exec = true;
+}
+static void
+vrrp_notify_stop_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	if (vrrp->script_stop) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) notify_stop script already specified - ignoring %s", vrrp->iname, strvec_slot(strvec,1));
+		return;
+	}
+	vrrp->script_stop = set_vrrp_notify_script(strvec, 0);
+	vrrp->notify_exec = true;
+}
+static void
+vrrp_notify_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	if (vrrp->script) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) notify script already specified - ignoring %s", vrrp->iname, strvec_slot(strvec,1));
+		return;
+	}
+	vrrp->script = set_vrrp_notify_script(strvec, 4);
+	vrrp->notify_exec = true;
+}
+static void
+vrrp_notify_master_rx_lower_pri(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	if (vrrp->script_master_rx_lower_pri) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) notify_master_rx_lower_pri script already specified - ignoring %s", vrrp->iname, strvec_slot(strvec,1));
+		return;
+	}
+	vrrp->script_master_rx_lower_pri = set_vrrp_notify_script(strvec, 0);
+	vrrp->notify_exec = true;
+}
+static void
+vrrp_smtp_handler(__attribute__((unused)) const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	int res = true;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res == -1) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid vrrp_instance smtp_alert parameter %s", strvec_slot(strvec, 1));
+			return;
+		}
+	}
+	vrrp->smtp_alert = res;
+	vrrp_data->num_smtp_alert++;
+}
+static void
+vrrp_notify_priority_changes_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+        int res = true;
+
+        if (vector_size(strvec) >= 2) {
+                res = check_true_false(strvec_slot(strvec,1));
+                if (res < 0) {
+                        report_config_error(CONFIG_GENERAL_ERROR, "(%s) Invalid value '%s' for notify_priority_changes specified", vrrp->iname, strvec_slot(strvec, 1));
+                        return;
+                }
+        }
+
+        vrrp->notify_priority_changes = res;
+}
+#ifdef _WITH_LVS_
+static void
+vrrp_lvs_syncd_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+
+	report_config_error(CONFIG_GENERAL_ERROR, "(%s) Specifying lvs_sync_daemon_interface against a vrrp is deprecated.", vrrp->iname);  /* Deprecated after v1.2.19 */
+	report_config_error(CONFIG_GENERAL_ERROR, "      %*sPlease use global lvs_sync_daemon", (int)strlen(vrrp->iname) - 2, "");
+
+	if (global_data->lvs_syncd.ifname) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) lvs_sync_daemon_interface has already been specified as %s - ignoring", vrrp->iname, global_data->lvs_syncd.ifname);
+		return;
+	}
+
+	global_data->lvs_syncd.ifname = set_value(strvec);
+	global_data->lvs_syncd.vrrp = vrrp;
+}
+#endif
+static void
+vrrp_garp_delay_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	unsigned delay;
+
+	if (!read_unsigned_strvec(strvec, 1, &delay, 0, UINT_MAX / TIMER_HZ, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): garp_master_delay '%s' invalid - ignoring", vrrp->iname, strvec_slot(strvec, 1));
+		return;
+	}
+
+	vrrp->garp_delay = delay * TIMER_HZ;
+}
+static void
+vrrp_garp_refresh_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	unsigned refresh;
+
+	if (!read_unsigned_strvec(strvec, 1, &refresh, 0, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): Invalid garp_master_refresh '%s' - ignoring", vrrp->iname, strvec_slot(strvec, 1));
+		vrrp->garp_refresh.tv_sec = 0;
+	}
+	else
+		vrrp->garp_refresh.tv_sec = refresh;
+	vrrp->garp_refresh.tv_usec = 0;
+}
+static void
+vrrp_garp_rep_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	unsigned repeats;
+
+	/* The min value should be 1, but allow 0 to maintain backward compatibility
+	 * with pre v2.0.7 */
+	if (!read_unsigned_strvec(strvec, 1, &repeats, 0, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): garp_master_repeat '%s' invalid - ignoring", vrrp->iname, strvec_slot(strvec, 1));
+		return;
+	}
+
+	if (repeats == 0) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): garp_master_repeat must be greater than 0, setting to 1", vrrp->iname);
+		repeats = 1;
+	}
+
+	vrrp->garp_rep = repeats;
+}
+static void
+vrrp_garp_refresh_rep_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	unsigned repeats;
+
+	/* The min value should be 1, but allow 0 to maintain backward compatibility
+	 * with pre v2.0.7 */
+	if (!read_unsigned_strvec(strvec, 1, &repeats, 0, UINT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): garp_master_refresh_repeat '%s' invalid - ignoring", vrrp->iname, strvec_slot(strvec, 1));
+		return;
+	}
+
+	if (repeats == 0) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): garp_master_refresh_repeat must be greater than 0, setting to 1", vrrp->iname);
+		repeats = 1;
+	}
+
+	vrrp->garp_refresh_rep = repeats;
+}
+
+static void
+vrrp_garp_lower_prio_delay_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	unsigned delay;
+
+	if (!read_unsigned_strvec(strvec, 1, &delay, 0, UINT_MAX / TIMER_HZ, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): garp_lower_prio_delay '%s' invalid - ignoring", vrrp->iname, strvec_slot(strvec, 1));
+		return;
+	}
+
+	vrrp->garp_lower_prio_delay = delay * TIMER_HZ;
+}
+static void
+vrrp_garp_lower_prio_rep_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	unsigned garp_lower_prio_rep;
+
+	if (!read_unsigned_strvec(strvec, 1, &garp_lower_prio_rep, 0, INT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): Invalid garp_lower_prio_repeat '%s'", vrrp->iname, strvec_slot(strvec, 1));
+		return;
+	}
+
+	vrrp->garp_lower_prio_rep = garp_lower_prio_rep;
+}
+static void
+vrrp_lower_prio_no_advert_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	int res;
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res >= 0)
+			vrrp->lower_prio_no_advert = (unsigned)res;
+		else
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) invalid lower_prio_no_advert %s specified", vrrp->iname, strvec_slot(strvec, 1));
+	} else {
+		/* Defaults to true */
+		vrrp->lower_prio_no_advert = true;
+	}
+}
+
+static void
+vrrp_higher_prio_send_advert_handler(const vector_t *strvec)
+{
+	int res;
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+
+	if (vector_size(strvec) >= 2) {
+		res = check_true_false(strvec_slot(strvec, 1));
+		if (res >= 0)
+			vrrp->higher_prio_send_advert = (unsigned)res;
+		else
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) invalid higher_prio_send_advert %s specified", vrrp->iname, strvec_slot(strvec, 1));
+	} else {
+		/* Defaults to true */
+		vrrp->higher_prio_send_advert = true;
+	}
+}
+
+
+static void
+kernel_rx_buf_size_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	unsigned rx_buf_size;
+
+	if (vector_size(strvec) == 2 &&
+	    read_unsigned_strvec(strvec, 1, &rx_buf_size, 0, UINT_MAX, false)) {
+		vrrp->kernel_rx_buf_size = rx_buf_size;
+		return;
+	}
+
+	report_config_error(CONFIG_GENERAL_ERROR, "(%s) invalid kernel_rx_buf_size specified", vrrp->iname);
+}
+
+#if defined _WITH_VRRP_AUTH_
+static void
+vrrp_auth_type_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	const char *str = strvec_slot(strvec, 1);
+
+	if (!strcmp(str, "AH"))
+		vrrp->auth_type = VRRP_AUTH_AH;
+	else if (!strcmp(str, "PASS"))
+		vrrp->auth_type = VRRP_AUTH_PASS;
+	else
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) unknown authentication type '%s'", vrrp->iname, str);
+}
+static void
+vrrp_auth_pass_handler(const vector_t *strvec)
+{
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+	const char *str = strvec_slot(strvec, 1);
+	size_t max_size = sizeof (vrrp->auth_data);
+	size_t str_len = strlen(str);
+
+	if (str_len > max_size) {
+		str_len = max_size;
+		report_config_error(CONFIG_GENERAL_ERROR,
+			    "Truncating auth_pass to %zu characters", max_size);
+	}
+
+	memset(vrrp->auth_data, 0, max_size);
+	memcpy(vrrp->auth_data, str, str_len);
 }
+#endif
 static void
-vrrp_gnotify_backup_handler(vector_t *strvec)
+vrrp_vip_handler(const vector_t *strvec)
 {
-	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
-	vgroup->script_backup = set_value(strvec);
-	vgroup->notify_exec = 1;
+	alloc_value_block(alloc_vrrp_vip, vector_slot(strvec, 0));
 }
 static void
-vrrp_gnotify_master_handler(vector_t *strvec)
+vrrp_evip_handler(const vector_t *strvec)
 {
-	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
-	vgroup->script_master = set_value(strvec);
-	vgroup->notify_exec = 1;
+	alloc_value_block(alloc_vrrp_evip, vector_slot(strvec, 0));
 }
 static void
-vrrp_gnotify_fault_handler(vector_t *strvec)
+vrrp_promote_secondaries_handler(__attribute__((unused)) const vector_t *strvec)
 {
-	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
-	vgroup->script_fault = set_value(strvec);
-	vgroup->notify_exec = 1;
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+
+	vrrp->promote_secondaries = true;
 }
+#ifdef _HAVE_FIB_ROUTING_
 static void
-vrrp_gnotify_handler(vector_t *strvec)
+vrrp_vroutes_handler(const vector_t *strvec)
 {
-	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
-	vgroup->script = set_value(strvec);
-	vgroup->notify_exec = 1;
+	alloc_value_block(alloc_vrrp_vroute, vector_slot(strvec, 0));
 }
 static void
-vrrp_gsmtp_handler(vector_t *strvec)
+vrrp_vrules_handler(const vector_t *strvec)
 {
-	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
-	vgroup->smtp_alert = 1;
+	alloc_value_block(alloc_vrrp_vrule, vector_slot(strvec, 0));
 }
+#endif
 static void
-vrrp_gglobal_tracking_handler(vector_t *strvec)
+vrrp_script_handler(const vector_t *strvec)
 {
-	vrrp_sgroup_t *vgroup = LIST_TAIL_DATA(vrrp_data->vrrp_sync_group);
-	vgroup->global_tracking = 1;
+	if (!strvec)
+		return;
+
+	alloc_vrrp_script(strvec_slot(strvec, 1));
+	script_user_set = false;
+	remove_script = false;
 }
 static void
-vrrp_handler(vector_t *strvec)
+vrrp_vscript_script_handler(__attribute__((unused)) const vector_t *strvec)
 {
-	alloc_vrrp(vector_slot(strvec, 1));
+	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
+	const vector_t *strvec_qe;
+
+	/* We need to allow quoted and escaped strings for the script and parameters */
+	strvec_qe = alloc_strvec_quoted_escaped(NULL);
+
+	set_script_params_array(strvec_qe, &vscript->script, 0);
+	free_strvec(strvec_qe);
 }
 static void
-vrrp_vmac_handler(vector_t *strvec)
+vrrp_vscript_interval_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->vmac_flags |= VRRP_VMAC_FL_SET;
-	if (!vrrp->saddr.ss_family && vrrp->family == AF_INET)
-		inet_ip4tosockaddr(IF_ADDR(vrrp->ifp), &vrrp->saddr);
-	if (vector_size(strvec) == 2) {
-		strncpy(vrrp->vmac_ifname, vector_slot(strvec, 1),
-			IFNAMSIZ - 1);
-	} else if (vrrp->vrid) {
-		snprintf(vrrp->vmac_ifname, IFNAMSIZ, "vrrp.%d", vrrp->vrid);
-	} else {
+	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
+	unsigned interval;
+
+	/* The min value should be 1, but allow 0 to maintain backward compatibility
+	 * with pre v2.0.7 */
+	if (!read_unsigned_strvec(strvec, 1, &interval, 0, UINT_MAX / TIMER_HZ, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): vrrp script interval '%s' must be between 1 and %u - ignoring", vscript->sname, strvec_slot(strvec, 1), UINT_MAX / TIMER_HZ);
 		return;
 	}
 
-	netlink_link_add_vmac(vrrp);
+	if (interval == 0) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): vrrp script interval must be greater than 0, setting to 1", vscript->sname);
+		interval = 1;
+	}
+
+	vscript->interval = interval * TIMER_HZ;
 }
 static void
-vrrp_vmac_xmit_base_handler(vector_t *strvec)
+vrrp_vscript_timeout_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	if (vrrp->vmac_flags & VRRP_VMAC_FL_SET)
-		vrrp->vmac_flags |= VRRP_VMAC_FL_XMITBASE;
+	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
+	unsigned timeout;
+
+	/* The min value should be 1, but allow 0 to maintain backward compatibility
+	 * with pre v2.0.7 */
+	if (!read_unsigned_strvec(strvec, 1, &timeout, 0, UINT_MAX / TIMER_HZ, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): vrrp script timeout '%s' invalid - ignoring", vscript->sname, strvec_slot(strvec, 1));
+		return;
+	}
+
+	if (timeout == 0) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): vrrp script timeout must be greater than 0, setting to 1", vscript->sname);
+		timeout = 1;
+	}
+
+	vscript->timeout = timeout * TIMER_HZ;
 }
 static void
-vrrp_unicast_peer_handler(vector_t *strvec)
+vrrp_vscript_weight_handler(const vector_t *strvec)
 {
-	alloc_value_block(strvec, alloc_vrrp_unicast_peer);
+	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
+	int weight;
+
+	if (!read_int_strvec(strvec, 1, &weight, -253, 253, true))
+		report_config_error(CONFIG_GENERAL_ERROR, "vrrp_script %s weight %s must be in [-253, 253]", vscript->sname, strvec_slot(strvec, 1));
+	vscript->weight = weight;
+
+	if (vector_size(strvec) >= 3) {
+		if (!strcmp(strvec_slot(strvec, 2), "reverse"))
+			vscript->weight_reverse = true;
+		else
+			report_config_error(CONFIG_GENERAL_ERROR, "vrrp_script %s unknown weight option %s", vscript->sname, strvec_slot(strvec, 2));
+	}
 }
 static void
-vrrp_native_ipv6_handler(vector_t *strvec)
+vrrp_vscript_rise_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->family = AF_INET6;
+	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
+	unsigned rise;
 
-	if (vrrp->auth_type != VRRP_AUTH_NONE)
-		vrrp->auth_type = VRRP_AUTH_NONE;
+	if (!read_unsigned_strvec(strvec, 1, &rise, 1, INT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): vrrp script rise value '%s' invalid, defaulting to 1", vscript->sname, strvec_slot(strvec, 1));
+		vscript->rise = 1;
+	}
+	else
+		vscript->rise = rise;
 }
 static void
-vrrp_state_handler(vector_t *strvec)
+vrrp_vscript_fall_handler(const vector_t *strvec)
 {
-	char *str = vector_slot(strvec, 1);
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp_sgroup_t *vgroup = vrrp->sync;
+	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
+	unsigned fall;
 
-	if (!strcmp(str, "MASTER")) {
-		vrrp->wantstate = VRRP_STATE_MAST;
-		vrrp->init_state = VRRP_STATE_MAST;
+	if (!read_unsigned_strvec(strvec, 1, &fall, 1, INT_MAX, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): vrrp script fall value '%s' invalid, defaulting to 1", vscript->sname, strvec_slot(strvec, 1));
+		vscript->fall = 1;
 	}
-
-	/* set eventual sync group */
-	if (vgroup)
-		vgroup->state = vrrp->wantstate;
+	else
+		vscript->fall = fall;
 }
 static void
-vrrp_int_handler(vector_t *strvec)
+vrrp_vscript_user_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	char *name = vector_slot(strvec, 1);
+	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
 
-	vrrp->ifp = if_get_by_ifname(name);
-	if (!vrrp->ifp) {
-		log_message(LOG_INFO, "Cant find interface %s for vrrp_instance %s !!!"
-				    , name, vrrp->iname);
-		return;
+	if (set_script_uid_gid(strvec, 1, &vscript->script.uid, &vscript->script.gid)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Unable to set uid/gid for script %s", cmd_str(&vscript->script));
+		remove_script = true;
 	}
-
-	if (vrrp->vmac_flags & VRRP_VMAC_FL_SET) {
-		netlink_link_add_vmac(vrrp);
+	else {
+		remove_script = false;
+		script_user_set = true;
 	}
 }
 //for dpdk port
 static void
-vrrp_dpdk_int_handler(vector_t *strvec)
+vrrp_dpdk_int_handler(const vector_t *strvec)
 {
     vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
     strcpy (vrrp->dpdk_ifp, vector_slot(strvec, 1));
@@ -188,357 +1289,647 @@ vrrp_dpdk_int_handler(vector_t *strvec)
 }
 
 static void
-vrrp_track_int_handler(vector_t *strvec)
+vrrp_vscript_end_handler(void)
 {
-	alloc_value_block(strvec, alloc_vrrp_track);
+	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
+
+	if (!vscript->script.args || !vscript->script.args[0]) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No script set for vrrp_script %s - removing", vscript->sname);
+		remove_script = true;
+	}
+	else if (!remove_script) {
+		if (script_user_set)
+			return;
+
+		if (set_default_script_user(NULL, NULL)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Unable to set default user for vrrp script %s - removing", vscript->sname);
+			remove_script = true;
+		}
+	}
+
+	if (remove_script) {
+		free_list_element(vrrp_data->vrrp_script, vrrp_data->vrrp_script->tail);
+		return;
+	}
+
+	vscript->script.uid = default_script_uid;
+	vscript->script.gid = default_script_gid;
 }
 static void
-vrrp_track_scr_handler(vector_t *strvec)
+vrrp_tfile_handler(const vector_t *strvec)
 {
-	alloc_value_block(strvec, alloc_vrrp_track_script);
+	if (!strvec)
+		return;
+
+	alloc_vrrp_file(strvec_slot(strvec, 1));
+
+	track_file_init = TRACK_FILE_NO_INIT;
 }
 static void
-vrrp_dont_track_handler(vector_t *strvec)
+vrrp_tfile_file_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->dont_track_primary = 1;
+	vrrp_tracked_file_t *tfile = LIST_TAIL_DATA(vrrp_data->vrrp_track_files);
+
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "track file file name missing");
+		return;
+	}
+
+	if (tfile->file_path) {
+		report_config_error(CONFIG_GENERAL_ERROR, "File already set for track file %s - ignoring %s", tfile->fname, strvec_slot(strvec, 1));
+		return;
+	}
+
+	tfile->file_path = set_value(strvec);
 }
 static void
-vrrp_srcip_handler(vector_t *strvec)
+vrrp_tfile_weight_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	struct sockaddr_storage *saddr = &vrrp->saddr;
-	int ret;
+	int weight;
+	vrrp_tracked_file_t *tfile = LIST_TAIL_DATA(vrrp_data->vrrp_track_files);
 
-	ret = inet_stosockaddr(vector_slot(strvec, 1), 0, saddr);
-	if (ret < 0) {
-		log_message(LOG_ERR, "Configuration error: VRRP instance[%s] malformed unicast"
-				     " src address[%s]. Skipping..."
-				   , vrrp->iname, vector_slot(strvec, 1));
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No weight specified for track file %s - ignoring", tfile->fname);
 		return;
 	}
 
-	if (saddr->ss_family != vrrp->family) {
-		log_message(LOG_ERR, "Configuration error: VRRP instance[%s] and unicast src address"
-				     "[%s] MUST be of the same family !!! Skipping..."
-				   , vrrp->iname, vector_slot(strvec, 1));
-		memset(saddr, 0, sizeof(struct sockaddr_storage));
+	if (tfile->weight != 1) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Weight already set for track file %s - ignoring %s", tfile->fname, strvec_slot(strvec, 1));
+		return;
+	}
+
+	if (!read_int_strvec(strvec, 1, &weight, -254, 254, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Weight (%s) for vrrp_track_file %s must be between "
+				 "[-254..254] inclusive. Ignoring...", strvec_slot(strvec, 1), tfile->fname);
+		weight = 1;
+	}
+	tfile->weight = weight;
+
+	if (vector_size(strvec) >= 3) {
+		if (!strcmp(strvec_slot(strvec, 2), "reverse"))
+			tfile->weight_reverse = true;
+		else
+			report_config_error(CONFIG_GENERAL_ERROR, "track_file %s unknown weight option %s", tfile->fname, strvec_slot(strvec, 2));
 	}
 }
 static void
-vrrp_vrid_handler(vector_t *strvec)
+vrrp_tfile_init_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->vrid = atoi(vector_slot(strvec, 1));
+	unsigned i;
+	const char *word;
+	vrrp_tracked_file_t *tfile = LIST_TAIL_DATA(vrrp_data->vrrp_track_files);
+	int value;
 
-	if (VRRP_IS_BAD_VID(vrrp->vrid)) {
-		log_message(LOG_INFO, "VRRP Error : VRID not valid !");
-		log_message(LOG_INFO,
-		       "             must be between 1 & 255. reconfigure !");
-	} else {
-		alloc_vrrp_bucket(vrrp);
-		if (vrrp->vmac_flags & VRRP_VMAC_FL_SET) {
-			if (strlen(vrrp->vmac_ifname) == 0)
-				snprintf(vrrp->vmac_ifname, IFNAMSIZ, "vrrp.%d", vrrp->vrid);
-			netlink_link_add_vmac(vrrp);
+	track_file_init = TRACK_FILE_CREATE;
+	track_file_init_value = 0;
+
+	for (i = 1; i < vector_size(strvec); i++) {
+		word = strvec_slot(strvec, i);
+		word += strspn(word, WHITE_SPACE);
+		if (isdigit(word[0]) || word[0] == '-') {
+			if (!read_int_strvec(strvec, i, &value, INT_MIN, INT_MAX, false)) {
+				/* It is not a valid integer */
+				report_config_error(CONFIG_GENERAL_ERROR, "Track file %s init value %s is invalid", tfile->fname, word);
+				value = 0;
+			}
+			else if (value < -254 || value > 254)
+				report_config_error(CONFIG_GENERAL_ERROR, "Track file %s init value %d is outside sensible range [%d, %d]", tfile->fname, value, -254, 254);
+			track_file_init_value = value;
 		}
+		else if (!strcmp(word, "overwrite"))
+			track_file_init = TRACK_FILE_INIT;
+		else
+			report_config_error(CONFIG_GENERAL_ERROR, "Unknown track file init option %s", word);
 	}
 }
 static void
-vrrp_prio_handler(vector_t *strvec)
+vrrp_tfile_end_handler(void)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->effective_priority = vrrp->base_priority = atoi(vector_slot(strvec, 1));
+	vrrp_tracked_file_t *tfile = LIST_TAIL_DATA(vrrp_data->vrrp_track_files);
+	struct stat statb;
+	FILE *tf;
+	int ret;
+
+	if (!tfile->file_path) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No file set for track_file %s - removing", tfile->fname);
+		free_list_element(vrrp_data->vrrp_track_files, vrrp_data->vrrp_track_files->tail);
+		return;
+	}
+
+	if (track_file_init == TRACK_FILE_NO_INIT)
+		return;
+
+	ret = stat(tfile->file_path, &statb);
+	if (!ret) {
+		if (track_file_init == TRACK_FILE_CREATE) {
+			/* The file exists */
+			return;
+		}
+		if ((statb.st_mode & S_IFMT) != S_IFREG) {
+			/* It is not a regular file */
+			report_config_error(CONFIG_GENERAL_ERROR, "Cannot initialise track file %s - it is not a regular file", tfile->fname);
+			return;
+		}
+
+		/* Don't overwrite a file on reload */
+		if (reload)
+			return;
+	}
 
-	if (VRRP_IS_BAD_PRIORITY(vrrp->base_priority)) {
-		log_message(LOG_INFO, "VRRP Error : Priority not valid !");
-		log_message(LOG_INFO,
-		       "             must be between 1 & 255. reconfigure !");
-		log_message(LOG_INFO,
-			    "             Using default value : %d\n", VRRP_PRIO_DFL);
-		vrrp->effective_priority = vrrp->base_priority = VRRP_PRIO_DFL;
+	if (!__test_bit(CONFIG_TEST_BIT, &debug)) {
+		/* Write the value to the file */
+		if ((tf = fopen_safe(tfile->file_path, "w"))) {
+			fprintf(tf, "%d\n", track_file_init_value);
+			fclose(tf);
+		}
+		else
+			report_config_error(CONFIG_GENERAL_ERROR, "Unable to initialise track file %s", tfile->fname);
 	}
 }
+#ifdef _WITH_CN_PROC_
 static void
-vrrp_adv_handler(vector_t *strvec)
+vrrp_tprocess_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->adver_int = atoi(vector_slot(strvec, 1));
+	if (!strvec)
+		return;
 
-	if (VRRP_IS_BAD_ADVERT_INT(vrrp->adver_int)) {
-		log_message(LOG_INFO, "VRRP Error : Advert interval not valid !");
-		log_message(LOG_INFO,
-		       "             must be between less than 1sec.");
-		log_message(LOG_INFO, "             Using default value : 1sec");
-		vrrp->adver_int = 1;
-	}
-	vrrp->adver_int *= TIMER_HZ;
+	if (proc_events_not_supported)
+		report_config_error(CONFIG_GENERAL_ERROR, "no kernel support for track_process (CONFIG_PROC_EVENTS)");
+
+	alloc_vrrp_process(strvec_slot(strvec, 1));
 }
 static void
-vrrp_debug_handler(vector_t *strvec)
+vrrp_tprocess_process_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->debug = atoi(vector_slot(strvec, 1));
+	vrrp_tracked_process_t *tprocess = LIST_TAIL_DATA(vrrp_data->vrrp_track_processes);
+	size_t len = 0;
+	size_t i;
+	char *p;
+
+	if (tprocess->process_path) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Process already set for track process %s - ignoring %s", tprocess->pname, strvec_slot(strvec, 1));
+		return;
+	}
+
+	tprocess->process_path = set_value(strvec);
+
+	if (vector_size(strvec) > 2) {
+		for (i = 2; i < vector_size(strvec); i++)
+			len += strlen(strvec_slot(strvec, i)) + 1;
+
+		tprocess->process_params = p = MALLOC(len);
+		tprocess->process_params_len = len;
+		for (i = 2; i < vector_size(strvec); i++) {
+			strcpy(p, strvec_slot(strvec, i));
+			p += strlen(strvec_slot(strvec, i)) + 1;
+		}
+
+		if (tprocess->param_match == PARAM_MATCH_NONE)
+			tprocess->param_match = PARAM_MATCH_EXACT;
 
-	if (VRRP_IS_BAD_DEBUG_INT(vrrp->debug)) {
-		log_message(LOG_INFO, "VRRP Error : Debug interval not valid !");
-		log_message(LOG_INFO, "             must be between 0-4");
-		vrrp->debug = 0;
+		tprocess->full_command = true;
 	}
+
+	len += strlen(tprocess->process_path) + 1;
+	if (len > vrrp_data->vrrp_max_process_name_len)
+		vrrp_data->vrrp_max_process_name_len = len;
 }
 static void
-vrrp_nopreempt_handler(vector_t *strvec)
-{
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->nopreempt = 1;
-}
-static void	/* backwards compatibility */
-vrrp_preempt_handler(vector_t *strvec)
+vrrp_tprocess_match_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->nopreempt = 0;
+	vrrp_tracked_process_t *tprocess = LIST_TAIL_DATA(vrrp_data->vrrp_track_processes);
+
+	if (vector_size(strvec) == 1) {
+		tprocess->param_match = PARAM_MATCH_EXACT;
+		tprocess->full_command = true;
+	} else if (!strcmp(strvec_slot(strvec, 1), "initial")) {
+		tprocess->param_match = PARAM_MATCH_INITIAL;
+		tprocess->full_command = true;
+	} else if (!strcmp(strvec_slot(strvec, 1), "partial")) {
+		tprocess->param_match = PARAM_MATCH_PARTIAL;
+		tprocess->full_command = true;
+	} else
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid param_match type %s - ignoring", strvec_slot(strvec, 1));
+
 }
 static void
-vrrp_preempt_delay_handler(vector_t *strvec)
+vrrp_tprocess_weight_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->preempt_delay = atoi(vector_slot(strvec, 1));
+	int weight;
+	vrrp_tracked_process_t *tprocess = LIST_TAIL_DATA(vrrp_data->vrrp_track_processes);
 
-	if (VRRP_IS_BAD_PREEMPT_DELAY(vrrp->preempt_delay)) {
-		log_message(LOG_INFO, "VRRP Error : Preempt_delay not valid !");
-		log_message(LOG_INFO, "             must be between 0-%d",
-		       TIMER_MAX_SEC);
-		vrrp->preempt_delay = 0;
+	if (vector_size(strvec) < 2) {
+		report_config_error(CONFIG_GENERAL_ERROR, "No weight specified for track process %s - ignoring", tprocess->pname);
+		return;
+	}
+
+	if (tprocess->weight) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Weight already set for track process %s - ignoring %s", tprocess->pname, strvec_slot(strvec, 1));
+		return;
+	}
+
+	if (!read_int_strvec(strvec, 1, &weight, -254, 254, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Weight (%s) for vrrp_track_process %s must be between "
+				 "[-254..254] inclusive. Ignoring...", strvec_slot(strvec, 1), tprocess->pname);
+		return;
+	}
+
+	if (vector_size(strvec) >= 3) {
+		if (!strcmp(strvec_slot(strvec, 2), "reverse"))
+			tprocess->weight_reverse = true;
+		else
+			report_config_error(CONFIG_GENERAL_ERROR, "vrrp_track_process %s unknown weight option %s", tprocess->pname, strvec_slot(strvec, 2));
 	}
-	vrrp->preempt_delay *= TIMER_HZ;
-	vrrp->preempt_time = timer_add_long(timer_now(), vrrp->preempt_delay);
+
+	tprocess->weight = weight;
 }
 static void
-vrrp_notify_backup_handler(vector_t *strvec)
+vrrp_tprocess_quorum_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->script_backup = set_value(strvec);
-	vrrp->notify_exec = 1;
+	vrrp_tracked_process_t *tprocess = LIST_TAIL_DATA(vrrp_data->vrrp_track_processes);
+	unsigned quorum;
+
+	if (!read_unsigned_strvec(strvec, 1, &quorum, 1, 65535, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Quorum (%s) for vrrp_track_process %s must be between "
+				 "[1..65535] inclusive. Ignoring...", strvec_slot(strvec, 1), tprocess->pname);
+		return;
+	}
+
+	if (quorum > tprocess->quorum_max) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Quorum is greater than quorum_max - ignoring");
+		return;
+	}
+
+	tprocess->quorum = quorum;
 }
 static void
-vrrp_notify_master_handler(vector_t *strvec)
+vrrp_tprocess_quorum_max_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->script_master = set_value(strvec);
-	vrrp->notify_exec = 1;
+	vrrp_tracked_process_t *tprocess = LIST_TAIL_DATA(vrrp_data->vrrp_track_processes);
+	unsigned quorum_max;
+
+	if (!read_unsigned_strvec(strvec, 1, &quorum_max, 0, 65535, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "quorum_max (%s) for vrrp_track_process %s must be between "
+				 "[0..65535] inclusive. Ignoring...", strvec_slot(strvec, 1), tprocess->pname);
+		return;
+	}
+
+	/* Allow quorum_max = 0 if quorum not specified */
+	if (quorum_max || tprocess->quorum > 1) {
+		if (quorum_max < tprocess->quorum) {
+			report_config_error(CONFIG_GENERAL_ERROR, "quorum_max is less than quorum - ignoring");
+			return;
+		}
+	}
+
+	tprocess->quorum_max = quorum_max;
+	if (quorum_max == 0)
+		tprocess->quorum = 0;
+	else if (!tprocess->quorum)
+		tprocess->quorum = 1;
 }
 static void
-vrrp_notify_fault_handler(vector_t *strvec)
+vrrp_tprocess_delay_general(const vector_t *strvec, enum process_delay delay_type)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->script_fault = set_value(strvec);
-	vrrp->notify_exec = 1;
+	vrrp_tracked_process_t *tprocess = LIST_TAIL_DATA(vrrp_data->vrrp_track_processes);
+	double delay;
+
+	if (!read_double_strvec(strvec, 1, &delay, 0.000001F, 3600.F, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "%sdelay (%s) for vrrp_track_process %s must be between "
+				 "[0.000001..3600] inclusive. Ignoring...",
+				 delay_type == PROCESS_TERMINATE_DELAY ? "terminate_" :
+				 delay_type == PROCESS_FORK_DELAY ? "fork_" : "",
+				 strvec_slot(strvec, 1), tprocess->pname);
+		return;
+	}
+
+	if (delay_type != PROCESS_FORK_DELAY)
+		tprocess->terminate_delay = (unsigned)(delay * TIMER_HZ);
+	if (delay_type != PROCESS_TERMINATE_DELAY)
+		tprocess->fork_delay = (unsigned)(delay * TIMER_HZ);
 }
 static void
-vrrp_notify_stop_handler(vector_t *strvec)
+vrrp_tprocess_terminate_delay_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->script_stop = set_value(strvec);
-	vrrp->notify_exec = 1;
+	vrrp_tprocess_delay_general(strvec, PROCESS_TERMINATE_DELAY);
 }
 static void
-vrrp_notify_handler(vector_t *strvec)
+vrrp_tprocess_fork_delay_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->script = set_value(strvec);
-	vrrp->notify_exec = 1;
+	vrrp_tprocess_delay_general(strvec, PROCESS_FORK_DELAY);
 }
 static void
-vrrp_smtp_handler(vector_t *strvec)
+vrrp_tprocess_delay_handler(const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->smtp_alert = 1;
+	vrrp_tprocess_delay_general(strvec, PROCESS_DELAY);
 }
 static void
-vrrp_lvs_syncd_handler(vector_t *strvec)
+vrrp_tprocess_full_handler(__attribute__((unused)) const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->lvs_syncd_if = set_value(strvec);
+	vrrp_tracked_process_t *tprocess = LIST_TAIL_DATA(vrrp_data->vrrp_track_processes);
+
+	tprocess->full_command = true;
 }
 static void
-vrrp_garp_delay_handler(vector_t *strvec)
+vrrp_tprocess_end_handler(void)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->garp_delay = atoi(vector_slot(strvec, 1)) * TIMER_HZ;
-	if (vrrp->garp_delay < TIMER_HZ)
-		vrrp->garp_delay = TIMER_HZ;
+	vrrp_tracked_process_t *tprocess = LIST_TAIL_DATA(vrrp_data->vrrp_track_processes);
+
+	if (proc_events_not_supported) {
+		list_remove(vrrp_data->vrrp_track_processes, LIST_TAIL(vrrp_data->vrrp_track_processes));
+		return;
+	}
+
+	if (!tprocess->process_path) {
+		report_config_error(CONFIG_GENERAL_ERROR, "track process '%s' process name not specified", tprocess->pname);
+		list_remove(vrrp_data->vrrp_track_processes, LIST_TAIL(vrrp_data->vrrp_track_processes));
+		return;
+	}
+
+	if (tprocess->full_command)
+		vrrp_data->vrrp_use_process_cmdline = true;
+	else
+		vrrp_data->vrrp_use_process_comm = true;
 }
+#endif
 static void
-vrrp_garp_refresh_handler(vector_t *strvec)
+vrrp_vscript_init_fail_handler(__attribute__((unused)) const vector_t *strvec)
 {
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	vrrp->garp_refresh = atoi(vector_slot(strvec, 1)) * TIMER_HZ;
+	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
+	vscript->init_state = SCRIPT_INIT_STATE_FAILED;
 }
 static void
-vrrp_auth_type_handler(vector_t *strvec)
+vrrp_version_handler(const vector_t *strvec)
 {
 	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	char *str = vector_slot(strvec, 1);
+	int version;
 
-	if (!strcmp(str, "AH") && vrrp->family == AF_INET)
-		vrrp->auth_type = VRRP_AUTH_AH;
-	else if (!strcmp(str, "PASS") && vrrp->family == AF_INET)
-		vrrp->auth_type = VRRP_AUTH_PASS;
-}
-static void
-vrrp_auth_pass_handler(vector_t *strvec)
-{
-	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	char *str = vector_slot(strvec, 1);
-	int max_size = sizeof (vrrp->auth_data);
-	int str_len = strlen(str);
+	if (!read_int_strvec(strvec, 1, &version, 2, 3, true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s): Version must be either 2 or 3", vrrp->iname);
+		return;
+	}
 
-	if (str_len > max_size) {
-		str_len = max_size;
-		log_message(LOG_INFO,
-			    "Truncating auth_pass to %d characters", max_size);
+	if ((vrrp->version && vrrp->version != version) ||
+	    (version == VRRP_VERSION_2 && vrrp->family == AF_INET6)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) vrrp_version %d conflicts with configured or deduced version %d; ignoring.", vrrp->iname, version, vrrp->version);
+		return;
 	}
 
-	memset(vrrp->auth_data, 0, max_size);
-	memcpy(vrrp->auth_data, str, str_len);
+	vrrp->version = version;
 }
+
 static void
-vrrp_vip_handler(vector_t *strvec)
+vrrp_accept_handler(__attribute__((unused)) const vector_t *strvec)
 {
+#ifdef _WITH_FIREWALL_
 	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
-	char *buf;
-	char *str = NULL;
-	vector_t *vec = NULL;
-	int nbvip = 0;
-
-	buf = (char *) MALLOC(MAXBUF);
-	while (read_line(buf, MAXBUF)) {
-		vec = alloc_strvec(buf);
-		if (vec) {
-			str = vector_slot(vec, 0);
-			if (!strcmp(str, EOB)) {
-				free_strvec(vec);
-				break;
-			}
 
-			if (vector_size(vec)) {
-				nbvip++;
-				if (nbvip > VRRP_MAX_VIP) {
-					log_message(LOG_INFO,
-					       "VRRP_Instance(%s) "
-					       "trunc to the first %d VIPs.",
-					       vrrp->iname, VRRP_MAX_VIP);
-					log_message(LOG_INFO,
-					       "  => Declare others VIPs into"
-					       " the excluded vip block");
-				} else
-					alloc_vrrp_vip(vec);
-			}
-
-			free_strvec(vec);
-		}
-		memset(buf, 0, MAXBUF);
-	}
-	FREE(buf);
-}
-static void
-vrrp_evip_handler(vector_t *strvec)
-{
-	alloc_value_block(strvec, alloc_vrrp_evip);
-}
-static void
-vrrp_vroutes_handler(vector_t *strvec)
-{
-	alloc_value_block(strvec, alloc_vrrp_vroute);
+	vrrp->accept = true;
+#endif
 }
+
+#ifdef _WITH_FIREWALL_
 static void
-vrrp_script_handler(vector_t *strvec)
+vrrp_no_accept_handler(__attribute__((unused)) const vector_t *strvec)
 {
-	alloc_vrrp_script(vector_slot(strvec, 1));
+	vrrp_t *vrrp = LIST_TAIL_DATA(vrrp_data->vrrp);
+
+	vrrp->accept = false;
 }
+#endif
+
 static void
-vrrp_vscript_script_handler(vector_t *strvec)
+garp_group_handler(const vector_t *strvec)
 {
-	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
-	vscript->script = set_value(strvec);
+	if (!strvec)
+		return;
+
+	alloc_garp_delay();
 }
 static void
-vrrp_vscript_interval_handler(vector_t *strvec)
+garp_group_garp_interval_handler(const vector_t *strvec)
 {
-	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
-	vscript->interval = atoi(vector_slot(strvec, 1)) * TIMER_HZ;
-	if (vscript->interval < TIMER_HZ)
-		vscript->interval = TIMER_HZ;
+	garp_delay_t *delay = LIST_TAIL_DATA(garp_delay);
+	double val;
+
+	if (!read_double_strvec(strvec, 1, &val, 0, (int)(INT_MAX / 1000000), true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "garp_group garp_interval '%s' invalid", strvec_slot(strvec, 1));
+		return;
+	}
+
+	delay->garp_interval.tv_sec = (time_t)val;
+	delay->garp_interval.tv_usec = (suseconds_t)((val - delay->garp_interval.tv_sec) * 1000000);
+	delay->have_garp_interval = true;
+
+	if (delay->garp_interval.tv_sec >= 1)
+		log_message(LOG_INFO, "The garp_interval is very large - %s seconds", strvec_slot(strvec,1));
 }
 static void
-vrrp_vscript_timeout_handler(vector_t *strvec)
+garp_group_gna_interval_handler(const vector_t *strvec)
 {
-	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
-	vscript->timeout = atoi(vector_slot(strvec, 1)) * TIMER_HZ;
-	if (vscript->timeout < TIMER_HZ)
-		vscript->timeout = TIMER_HZ;
+	garp_delay_t *delay = LIST_TAIL_DATA(garp_delay);
+	double val;
+
+	if (!read_double_strvec(strvec, 1, &val, 0, (int)(INT_MAX / 1000000), true)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "garp_group gna_interval '%s' invalid", strvec_slot(strvec, 1));
+		return;
+	}
+
+	delay->gna_interval.tv_sec = (time_t)val;
+	delay->gna_interval.tv_usec = (suseconds_t)((val - delay->gna_interval.tv_sec) * 1000000);
+	delay->have_gna_interval = true;
+
+	if (delay->gna_interval.tv_sec >= 1)
+		log_message(LOG_INFO, "The gna_interval is very large - %s seconds", strvec_slot(strvec,1));
 }
 static void
-vrrp_vscript_weight_handler(vector_t *strvec)
+garp_group_interface_handler(const vector_t *strvec)
 {
-	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
-	vscript->weight = atoi(vector_slot(strvec, 1));
+	interface_t *ifp = if_get_by_ifname(strvec_slot(strvec, 1), IF_CREATE_IF_DYNAMIC);
+	if (!ifp) {
+		report_config_error(CONFIG_GENERAL_ERROR, "WARNING - interface %s specified for garp_group doesn't exist", strvec_slot(strvec, 1));
+		return;
+	}
+
+	if (ifp->garp_delay) {
+		report_config_error(CONFIG_GENERAL_ERROR, "garp_group already specified for %s - ignoring", strvec_slot(strvec, 1));
+		return;
+	}
+
+#ifdef _HAVE_VRRP_VMAC_
+	/* We cannot have a group on a vmac interface */
+	if (IS_VLAN(ifp)) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Cannot specify garp_delay on a vmac (%s) - ignoring", ifp->ifname);
+		return;
+	}
+#endif
+	ifp->garp_delay = LIST_TAIL_DATA(garp_delay);
 }
 static void
-vrrp_vscript_rise_handler(vector_t *strvec)
+garp_group_interfaces_handler(const vector_t *strvec)
 {
-	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
-	vscript->rise = atoi(vector_slot(strvec, 1));
-	if (vscript->rise < 1)
-		vscript->rise = 1;
+	garp_delay_t *delay = LIST_TAIL_DATA(garp_delay);
+	interface_t *ifp;
+	const vector_t *interface_vec = read_value_block(strvec);
+	size_t i;
+	garp_delay_t *gd;
+	element e;
+
+	/* Handle the interfaces block being empty */
+	if (!interface_vec) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Warning - empty garp_group interfaces block");
+		return;
+	}
+
+	/* First set the next aggregation group number */
+	delay->aggregation_group = 1;
+	for (e = LIST_HEAD(garp_delay); e; ELEMENT_NEXT(e)) {
+		gd = ELEMENT_DATA(e);
+		if (gd->aggregation_group && gd != delay)
+			delay->aggregation_group++;
+	}
+
+	for (i = 0; i < vector_size(interface_vec); i++) {
+		ifp = if_get_by_ifname(vector_slot(interface_vec, i), IF_CREATE_IF_DYNAMIC);
+		if (!ifp) {
+			if (global_data->dynamic_interfaces)
+				log_message(LOG_INFO, "WARNING - interface %s specified for garp_group doesn't exist", strvec_slot(strvec, i));
+			else
+				report_config_error(CONFIG_GENERAL_ERROR, "WARNING - interface %s specified for garp_group doesn't exist", strvec_slot(strvec, i));
+			continue;
+		}
+
+		if (ifp->garp_delay) {
+			report_config_error(CONFIG_GENERAL_ERROR, "garp_group already specified for %s - ignoring", strvec_slot(strvec, 1));
+			continue;
+		}
+
+#ifdef _HAVE_VRRP_VMAC_
+		if (IS_VLAN(ifp)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Cannot specify garp_delay on a vmac (%s) - ignoring", ifp->ifname);
+			continue;
+		}
+#endif
+		ifp->garp_delay = delay;
+	}
+
+	free_strvec(interface_vec);
 }
 static void
-vrrp_vscript_fall_handler(vector_t *strvec)
+garp_group_end_handler(void)
 {
-	vrrp_script_t *vscript = LIST_TAIL_DATA(vrrp_data->vrrp_script);
-	vscript->fall = atoi(vector_slot(strvec, 1));
-	if (vscript->fall < 1)
-		vscript->fall = 1;
+	garp_delay_t *delay = LIST_TAIL_DATA(garp_delay);
+	element e, next;
+	interface_t *ifp;
+
+	if (!delay->have_garp_interval && !delay->have_gna_interval) {
+		report_config_error(CONFIG_GENERAL_ERROR, "garp group %d does not have any delay set - removing", delay->aggregation_group);
+
+		/* Remove the garp_delay from any interfaces that are using it */
+		LIST_FOREACH_NEXT(get_if_list(), ifp, e, next) {
+			if (ifp->garp_delay == delay)
+				ifp->garp_delay = NULL;
+		}
+
+		free_list_element(garp_delay, garp_delay->tail);
+	}
 }
 
-vector_t *
-vrrp_init_keywords(void)
+void
+init_vrrp_keywords(bool active)
 {
-	/* global definitions mapping */
-	global_init_keywords();
+	/* Static addresses/routes/rules */
+	install_keyword_root("track_group", &static_track_group_handler, active);
+	install_keyword("group", &static_track_group_group_handler);
+	install_keyword_root("static_ipaddress", &static_addresses_handler, active);
+#ifdef _HAVE_FIB_ROUTING_
+	install_keyword_root("static_routes", &static_routes_handler, active);
+	install_keyword_root("static_rules", &static_rules_handler, active);
+#endif
 
-	/* Static routes mapping */
-	install_keyword_root("static_ipaddress", &static_addresses_handler);
-	install_keyword_root("static_routes", &static_routes_handler);
-
-	/* VRRP Instance mapping */
-	install_keyword_root("vrrp_sync_group", &vrrp_sync_group_handler);
+	/* Sync group declarations */
+	install_keyword_root("vrrp_sync_group", &vrrp_sync_group_handler, active);
 	install_keyword("group", &vrrp_group_handler);
+	install_keyword("track_interface", &vrrp_group_track_if_handler);
+	install_keyword("track_script", &vrrp_group_track_scr_handler);
+	install_keyword("track_file", &vrrp_group_track_file_handler);
+#ifdef _WITH_CN_PROC_
+	install_keyword("track_process", &vrrp_group_track_process_handler);
+#endif
+#ifdef _WITH_BFD_
+	install_keyword("track_bfd", &vrrp_group_track_bfd_handler);
+#endif
 	install_keyword("notify_backup", &vrrp_gnotify_backup_handler);
 	install_keyword("notify_master", &vrrp_gnotify_master_handler);
 	install_keyword("notify_fault", &vrrp_gnotify_fault_handler);
+	install_keyword("notify_stop", &vrrp_gnotify_stop_handler);
 	install_keyword("notify", &vrrp_gnotify_handler);
 	install_keyword("smtp_alert", &vrrp_gsmtp_handler);
 	install_keyword("global_tracking", &vrrp_gglobal_tracking_handler);
-	install_keyword_root("vrrp_instance", &vrrp_handler);
+	install_keyword("sync_group_tracking_weight", &vrrp_sg_tracking_weight_handler);
+
+	install_keyword_root("garp_group", &garp_group_handler, active);
+	install_keyword("garp_interval", &garp_group_garp_interval_handler);
+	install_keyword("gna_interval", &garp_group_gna_interval_handler);
+	install_keyword("interface", &garp_group_interface_handler);
+	install_keyword("interfaces", &garp_group_interfaces_handler);
+	install_sublevel_end_handler(&garp_group_end_handler);
+
+#ifdef _WITH_LINKBEAT_
+	/* Linkbeat interfaces */
+	install_keyword_root("linkbeat_interfaces", &linkbeat_interfaces_handler, active);
+#endif
+
+	/* VRRP Instance mapping */
+	install_keyword_root("vrrp_instance", &vrrp_handler, active);
+#ifdef _HAVE_VRRP_VMAC_
 	install_keyword("use_vmac", &vrrp_vmac_handler);
 	install_keyword("vmac_xmit_base", &vrrp_vmac_xmit_base_handler);
+#endif
+#ifdef _HAVE_VRRP_IPVLAN_
+	install_keyword("use_ipvlan", &vrrp_ipvlan_handler);
+#endif
 	install_keyword("unicast_peer", &vrrp_unicast_peer_handler);
+#ifdef _WITH_UNICAST_CHKSUM_COMPAT_
+	install_keyword("old_unicast_checksum", &vrrp_unicast_chksum_handler);
+#endif
 	install_keyword("native_ipv6", &vrrp_native_ipv6_handler);
 	install_keyword("state", &vrrp_state_handler);
 	install_keyword("interface", &vrrp_int_handler);
     install_keyword("dpdk_interface", &vrrp_dpdk_int_handler);//port of dpdk
 	install_keyword("dont_track_primary", &vrrp_dont_track_handler);
-	install_keyword("track_interface", &vrrp_track_int_handler);
+	install_keyword("track_interface", &vrrp_track_if_handler);
 	install_keyword("track_script", &vrrp_track_scr_handler);
+	install_keyword("track_file", &vrrp_track_file_handler);
+#ifdef _WITH_CN_PROC_
+	install_keyword("track_process", &vrrp_track_process_handler);
+#endif
+#ifdef _WITH_BFD_
+	install_keyword("track_bfd", &vrrp_track_bfd_handler);
+#endif
 	install_keyword("mcast_src_ip", &vrrp_srcip_handler);
 	install_keyword("unicast_src_ip", &vrrp_srcip_handler);
+	install_keyword("track_src_ip", &vrrp_track_srcip_handler);
 	install_keyword("virtual_router_id", &vrrp_vrid_handler);
+	install_keyword("version", &vrrp_version_handler);
 	install_keyword("priority", &vrrp_prio_handler);
 	install_keyword("advert_int", &vrrp_adv_handler);
 	install_keyword("virtual_ipaddress", &vrrp_vip_handler);
 	install_keyword("virtual_ipaddress_excluded", &vrrp_evip_handler);
+	install_keyword("promote_secondaries", &vrrp_promote_secondaries_handler);
+#ifdef _WITH_LINKBEAT_
+	install_keyword("linkbeat_use_polling", &vrrp_linkbeat_handler);
+#endif
+#ifdef _HAVE_FIB_ROUTING_
 	install_keyword("virtual_routes", &vrrp_vroutes_handler);
+	install_keyword("virtual_rules", &vrrp_vrules_handler);
+#endif
+	install_keyword("accept", &vrrp_accept_handler);
+#ifdef _WITH_FIREWALL_
+	install_keyword("no_accept", &vrrp_no_accept_handler);
+#endif
+	install_keyword("skip_check_adv_addr", &vrrp_skip_check_adv_addr_handler);
+	install_keyword("strict_mode", &vrrp_strict_mode_handler);
 	install_keyword("preempt", &vrrp_preempt_handler);
 	install_keyword("nopreempt", &vrrp_nopreempt_handler);
 	install_keyword("preempt_delay", &vrrp_preempt_delay_handler);
@@ -548,22 +1939,75 @@ vrrp_init_keywords(void)
 	install_keyword("notify_fault", &vrrp_notify_fault_handler);
 	install_keyword("notify_stop", &vrrp_notify_stop_handler);
 	install_keyword("notify", &vrrp_notify_handler);
+	install_keyword("notify_master_rx_lower_pri", vrrp_notify_master_rx_lower_pri);
 	install_keyword("smtp_alert", &vrrp_smtp_handler);
+	install_keyword("notify_priority_changes", &vrrp_notify_priority_changes_handler);
+#ifdef _WITH_LVS_
 	install_keyword("lvs_sync_daemon_interface", &vrrp_lvs_syncd_handler);
+#endif
 	install_keyword("garp_master_delay", &vrrp_garp_delay_handler);
 	install_keyword("garp_master_refresh", &vrrp_garp_refresh_handler);
+	install_keyword("garp_master_repeat", &vrrp_garp_rep_handler);
+	install_keyword("garp_master_refresh_repeat", &vrrp_garp_refresh_rep_handler);
+	install_keyword("garp_lower_prio_delay", &vrrp_garp_lower_prio_delay_handler);
+	install_keyword("garp_lower_prio_repeat", &vrrp_garp_lower_prio_rep_handler);
+	install_keyword("lower_prio_no_advert", &vrrp_lower_prio_no_advert_handler);
+	install_keyword("higher_prio_send_advert", &vrrp_higher_prio_send_advert_handler);
+	install_keyword("kernel_rx_buf_size", &kernel_rx_buf_size_handler);
+#if defined _WITH_VRRP_AUTH_
 	install_keyword("authentication", NULL);
 	install_sublevel();
 	install_keyword("auth_type", &vrrp_auth_type_handler);
 	install_keyword("auth_pass", &vrrp_auth_pass_handler);
 	install_sublevel_end();
-	install_keyword_root("vrrp_script", &vrrp_script_handler);
+#endif
+	install_keyword_root("vrrp_script", &vrrp_script_handler, active);
 	install_keyword("script", &vrrp_vscript_script_handler);
 	install_keyword("interval", &vrrp_vscript_interval_handler);
 	install_keyword("timeout", &vrrp_vscript_timeout_handler);
 	install_keyword("weight", &vrrp_vscript_weight_handler);
 	install_keyword("rise", &vrrp_vscript_rise_handler);
 	install_keyword("fall", &vrrp_vscript_fall_handler);
+	install_keyword("user", &vrrp_vscript_user_handler);
+	install_keyword("init_fail", &vrrp_vscript_init_fail_handler);
+	install_sublevel_end_handler(&vrrp_vscript_end_handler);
+
+	/* Track file declarations */
+	install_keyword_root("vrrp_track_file", &vrrp_tfile_handler, active);
+	install_keyword("file", &vrrp_tfile_file_handler);
+	install_keyword("weight", &vrrp_tfile_weight_handler);
+	install_keyword("init_file", &vrrp_tfile_init_handler);
+	install_sublevel_end_handler(&vrrp_tfile_end_handler);
+
+#ifdef _WITH_CN_PROC_
+	/* Track process declarations */
+	install_keyword_root("vrrp_track_process", &vrrp_tprocess_handler, active);
+	install_keyword("process", &vrrp_tprocess_process_handler);
+	install_keyword("param_match", vrrp_tprocess_match_handler);
+	install_keyword("weight", &vrrp_tprocess_weight_handler);
+	install_keyword("quorum", &vrrp_tprocess_quorum_handler);
+	install_keyword("quorum_max", &vrrp_tprocess_quorum_max_handler);
+	install_keyword("delay", &vrrp_tprocess_delay_handler);
+	install_keyword("terminate_delay", &vrrp_tprocess_terminate_delay_handler);
+	install_keyword("fork_delay", &vrrp_tprocess_fork_delay_handler);
+	install_keyword("full_command", &vrrp_tprocess_full_handler);
+	install_sublevel_end_handler(&vrrp_tprocess_end_handler);
+#endif
+}
+
+const vector_t *
+vrrp_init_keywords(void)
+{
+	/* global definitions mapping */
+	init_global_keywords(reload);
+
+	init_vrrp_keywords(true);
+#ifdef _WITH_LVS_
+	init_check_keywords(false);
+#endif
+#ifdef _WITH_BFD_
+	init_bfd_keywords(true);
+#endif
 
 	return keywords;
 }
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_print.c b/tools/keepalived/keepalived/vrrp/vrrp_print.c
new file mode 100644
index 000000000..c1a383563
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_print.c
@@ -0,0 +1,100 @@
+/*
+ * Soft:        Vrrpd is an implementation of VRRPv2 as specified in rfc2338.
+ *              VRRP is a protocol which elect a master server on a LAN. If the
+ *              master fails, a backup server takes over.
+ *              The original implementation has been made by jerome etienne.
+ *
+ * Part:        Print running VRRP state information
+ *
+ * Author:      John Southworth, <john.southworth@vyatta.com>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2012 John Southworth, <john.southworth@vyatta.com>
+ * Copyright (C) 2015-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include <errno.h>
+#include <inttypes.h>
+
+#include "logger.h"
+
+#include "vrrp.h"
+#include "vrrp_data.h"
+#include "vrrp_print.h"
+#include "utils.h"
+
+static const char *dump_file = "/tmp/keepalived.data";
+static const char *stats_file = "/tmp/keepalived.stats";
+
+void
+vrrp_print_data(void)
+{
+	FILE *file = fopen_safe(dump_file, "w");
+
+	if (!file) {
+		log_message(LOG_INFO, "Can't open %s (%d: %s)",
+			dump_file, errno, strerror(errno));
+		return;
+	}
+
+	dump_data_vrrp(file);
+
+	fclose(file);
+}
+
+void
+vrrp_print_stats(void)
+{
+	FILE *file = fopen_safe(stats_file, "w");
+	element e;
+	vrrp_t *vrrp;
+
+	if (!file) {
+		log_message(LOG_INFO, "Can't open %s (%d: %s)",
+			stats_file, errno, strerror(errno));
+		return;
+	}
+
+
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		fprintf(file, "VRRP Instance: %s\n", vrrp->iname);
+		fprintf(file, "  Advertisements:\n");
+		fprintf(file, "    Received: %" PRIu64 "\n", vrrp->stats->advert_rcvd);
+		fprintf(file, "    Sent: %u\n", vrrp->stats->advert_sent);
+		fprintf(file, "  Became master: %u\n", vrrp->stats->become_master);
+		fprintf(file, "  Released master: %u\n", vrrp->stats->release_master);
+		fprintf(file, "  Packet Errors:\n");
+		fprintf(file, "    Length: %" PRIu64 "\n", vrrp->stats->packet_len_err);
+		fprintf(file, "    TTL: %" PRIu64 "\n", vrrp->stats->ip_ttl_err);
+		fprintf(file, "    Invalid Type: %" PRIu64 "\n",
+			vrrp->stats->invalid_type_rcvd);
+		fprintf(file, "    Advertisement Interval: %" PRIu64 "\n",
+			vrrp->stats->advert_interval_err);
+		fprintf(file, "    Address List: %" PRIu64 "\n",
+			vrrp->stats->addr_list_err);
+		fprintf(file, "  Authentication Errors:\n");
+		fprintf(file, "    Invalid Type: %u\n",
+			vrrp->stats->invalid_authtype);
+#ifdef _WITH_VRRP_AUTH_
+		fprintf(file, "    Type Mismatch: %u\n",
+			vrrp->stats->authtype_mismatch);
+		fprintf(file, "    Failure: %u\n",
+			vrrp->stats->auth_failure);
+#endif
+		fprintf(file, "  Priority Zero:\n");
+		fprintf(file, "    Received: %" PRIu64 "\n", vrrp->stats->pri_zero_rcvd);
+		fprintf(file, "    Sent: %" PRIu64 "\n", vrrp->stats->pri_zero_sent);
+	}
+	fclose(file);
+}
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_scheduler.c b/tools/keepalived/keepalived/vrrp/vrrp_scheduler.c
index 10d953951..617cdc063 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_scheduler.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_scheduler.c
@@ -17,30 +17,68 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <errno.h>
+#include <netinet/ip.h>
+#include <signal.h>
+#if defined _WITH_VRRP_AUTH_
+#include <netinet/in.h>
+#endif
+#include <stdint.h>
+#include <stdio.h>
+#include <inttypes.h>
+
 #include "vrrp_scheduler.h"
-#include "vrrp_ipsecah.h"
-#include "vrrp_if.h"
+#include "vrrp_track.h"
+#ifdef _HAVE_VRRP_VMAC_
 #include "vrrp_vmac.h"
-#include "vrrp.h"
+#endif
 #include "vrrp_sync.h"
 #include "vrrp_notify.h"
-#include "vrrp_netlink.h"
 #include "vrrp_data.h"
-#include "vrrp_index.h"
-#include "ipvswrapper.h"
+#include "vrrp_arp.h"
+#include "vrrp_ndisc.h"
+#include "vrrp_if.h"
+#include "global_data.h"
 #include "memory.h"
-#include "notify.h"
 #include "list.h"
 #include "logger.h"
 #include "main.h"
-#include "smtp.h"
 #include "signals.h"
-#ifdef _WITH_SNMP_
+#include "utils.h"
+#include "bitops.h"
+#include "vrrp_sock.h"
+#ifdef _WITH_SNMP_RFCV3_
 #include "vrrp_snmp.h"
 #endif
+#ifdef _WITH_BFD_
+#include "bfd_event.h"
+#include "bfd_daemon.h"
+#endif
+#ifdef THREAD_DUMP
+#include "scheduler.h"
+#endif
+
+/* For load testing recvmsg() */
+/* #define DEBUG_RECVMSG */
+
+/* global vars */
+timeval_t garp_next_time;
+thread_ref_t garp_thread;
+bool vrrp_initialised;
+
+#ifdef _TSM_DEBUG_
+bool do_tsm_debug;
+#endif
+
+/* local variables */
+#ifdef _WITH_BFD_
+static thread_ref_t bfd_thread;		 /* BFD control pipe read thread */
+#endif
 
 /* VRRP FSM (Finite State Machine) design.
  *
@@ -66,39 +104,20 @@
  *     |               |<----------------------|               |
  *     +---------------+                       +---------------+
  */
-static void vrrp_backup(vrrp_t *, char *, int);
-static void vrrp_leave_master(vrrp_t *, char *, int);
-static void vrrp_leave_fault(vrrp_t *, char *, int);
-static void vrrp_become_master(vrrp_t *, char *, int);
-
-static void vrrp_goto_master(vrrp_t *);
-static void vrrp_master(vrrp_t *);
-static void vrrp_fault(vrrp_t *);
-
-static int vrrp_update_priority(thread_t * thread);
-static int vrrp_script_child_timeout_thread(thread_t * thread);
-static int vrrp_script_child_thread(thread_t * thread);
-static int vrrp_script_thread(thread_t * thread);
-
-struct {
-	void (*read) (vrrp_t *, char *, int);
-	void (*read_to) (vrrp_t *);
-} VRRP_FSM[VRRP_MAX_FSM_STATE + 1] =
-{
-/*    Stream Read Handlers      |    Stream Read_to handlers   *
- *------------------------------+------------------------------*/
-	{NULL, 				NULL},
-	{vrrp_backup,			vrrp_goto_master},	/*  BACKUP          */
-	{vrrp_leave_master,		vrrp_master},		/*  MASTER          */
-	{vrrp_leave_fault,		vrrp_fault},		/*  FAULT           */
-	{vrrp_become_master,		vrrp_goto_master}	/*  GOTO_MASTER     */
-};
+
+static int vrrp_script_child_thread(thread_ref_t);
+static int vrrp_script_thread(thread_ref_t);
+#ifdef _WITH_BFD_
+static int vrrp_bfd_thread(thread_ref_t);
+#endif
+
+static int vrrp_read_dispatcher_thread(thread_ref_t);
 
 /* VRRP TSM (Transition State Matrix) design.
  *
  * Introducing the Synchronization extension to VRRP
  * protocol, introduce the need for a transition machinery.
- * This mecanism can be designed using a diagonal matrix.
+ * This mechanism can be designed using a diagonal matrix.
  * We call this matrix the VRRP TSM:
  *
  *   \ E |  B  |  M  |  F  |
@@ -121,61 +140,29 @@ struct {
  *
  * This matrix is the strict implementation way. For readability and
  * performance we have implemented some handlers directly into the VRRP
- * FSM. For instance the handlers (5) & (6) are directly into the VRRP
- * FSM since it will speed up convergence to init state.
- * Additionnaly, we have implemented some other handlers into the matrix
+ * FSM or they are handled when the trigger events to/from FAULT state occur.
+ * For instance the handlers (2), (4), (5) & (6) are handled when it is
+ * detected that a script or an interface has failed or recovered since
+ * it will speed up convergence to init state.
+ * Additionaly, we have implemented some other handlers into the matrix
  * in order to speed up group synchronization takeover. For instance
- * transitions : 
+ * transition:
  *    o B->B: To catch wantstate MASTER transition to force sync group
  *            to this transition state too.
  *    o F->F: To speed up FAULT state transition if group is not already
  *            synced to FAULT state.
  */
-struct {
+static struct {
 	void (*handler) (vrrp_t *);
 } VRRP_TSM[VRRP_MAX_TSM_STATE + 1][VRRP_MAX_TSM_STATE + 1] =
 {
-  { {NULL}, {NULL},                      {NULL},             {NULL}            },
-  { {NULL}, {vrrp_sync_master_election}, {vrrp_sync_master}, {vrrp_sync_fault} },
-  { {NULL}, {vrrp_sync_backup},          {vrrp_sync_master}, {vrrp_sync_fault} },
-  { {NULL}, {vrrp_sync_backup},          {vrrp_sync_master}, {vrrp_sync_fault} }
+/* From:	  To: >	  BACKUP			MASTER		    FAULT */
+/*   v    */	{ {NULL}, {NULL},			{NULL},		   {NULL} },
+/* BACKUP */	{ {NULL}, {NULL},			{vrrp_sync_master}, {NULL} },
+/* MASTER */	{ {NULL}, {vrrp_sync_backup},		{vrrp_sync_master}, {NULL} },
+/* FAULT  */	{ {NULL}, {NULL},			{vrrp_sync_master}, {NULL} }
 };
 
-/* SMTP alert notifier */
-static void
-vrrp_smtp_notifier(vrrp_t * vrrp)
-{
-	if (vrrp->smtp_alert) {
-		if (vrrp->state == VRRP_STATE_MAST)
-			smtp_alert(NULL, vrrp, NULL,
-				   "Entering MASTER state",
-				   "=> VRRP Instance is now owning VRRP VIPs <=");
-		if (vrrp->state == VRRP_STATE_BACK)
-			smtp_alert(NULL, vrrp, NULL,
-				   "Entering BACKUP state",
-				   "=> VRRP Instance is nolonger owning VRRP VIPs <=");
-	}
-}
-
-/* Log interface message */
-static void vrrp_log_int_down(vrrp_t *vrrp)
-{
-	if (!IF_ISUP(vrrp->ifp))
-		log_message(LOG_INFO, "Kernel is reporting: interface %s DOWN",
-		       IF_NAME(vrrp->ifp));
-	if (!LIST_ISEMPTY(vrrp->track_ifp))
-		vrrp_log_tracked_down(vrrp->track_ifp);
-}
-
-static void vrrp_log_int_up(vrrp_t *vrrp)
-{
-	if (IF_ISUP(vrrp->ifp))
-		log_message(LOG_INFO, "Kernel is reporting: interface %s UP",
-		       IF_NAME(vrrp->ifp));
-	if (!LIST_ISEMPTY(vrrp->track_ifp))
-		log_message(LOG_INFO, "Kernel is reporting: tracked interface are UP");
-}
-
 /*
  * Initialize state handling
  * --rfc2338.6.4.1
@@ -186,95 +173,134 @@ vrrp_init_state(list l)
 	vrrp_t *vrrp;
 	vrrp_sgroup_t *vgroup;
 	element e;
+	bool is_up;
+	int new_state;
+
+	/* We can send SMTP messages from this point, so set the time */
+	set_time_now();
+
+	/* Do notifications for any sync groups in fault or backup state */
+	LIST_FOREACH(vrrp_data->vrrp_sync_group, vgroup, e) {
+		/* Init group if needed  */
+		if (vgroup->state == VRRP_STATE_FAULT ||
+		    vgroup->state == VRRP_STATE_BACK)
+			send_group_notifies(vgroup);
+	}
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vrrp = ELEMENT_DATA(e);
+	LIST_FOREACH(l, vrrp, e) {
+		int vrrp_begin_state = vrrp->state;
 
-		/* In case of VRRP SYNC, we have to carefully check that we are
-		 * not running floating priorities on any VRRP instance.
-		 */
-		if (vrrp->sync && !vrrp->sync->global_tracking) {
-			element e2;
-			tracked_sc_t *sc;
-			tracked_if_t *tip;
-			int warning = 0;
-
-			if (!LIST_ISEMPTY(vrrp->track_ifp)) {
-				for (e2 = LIST_HEAD(vrrp->track_ifp); e2; ELEMENT_NEXT(e2)) {
-					tip = ELEMENT_DATA(e2);
-					if (tip->weight) {
-						tip->weight = 0;
-						warning++;
-					}
-				}
-			}
+		/* wantstate is the state we would be in disregarding any sync group */
+		if (vrrp->state == VRRP_STATE_FAULT)
+			vrrp->wantstate = VRRP_STATE_FAULT;
 
-			if (!LIST_ISEMPTY(vrrp->track_script)) {
-				for (e2 = LIST_HEAD(vrrp->track_script); e2; ELEMENT_NEXT(e2)) {
-					sc = ELEMENT_DATA(e2);
-					if (sc->weight) {
-						sc->scr->inuse--;
-						warning++;
-					}
-				}
-			}
+		new_state = vrrp->sync ? vrrp->sync->state : vrrp->wantstate;
 
-			if (warning > 0) {
-				log_message(LOG_INFO, "VRRP_Instance(%s) : ignoring "
-						 "tracked script with weights due to SYNC group",
-				       vrrp->iname);
-			}
-		} else {
-			/* Register new priority update thread */
-			thread_add_timer(master, vrrp_update_priority,
-					 vrrp, vrrp->adver_int);
-		}
+		is_up = VRRP_ISUP(vrrp);
 
-		if (vrrp->base_priority == VRRP_PRIO_OWNER ||
+		if (is_up &&
+		    new_state == VRRP_STATE_MAST &&
+		    !vrrp->num_script_init && (!vrrp->sync || !vrrp->sync->num_member_init) &&
+		    (vrrp->base_priority == VRRP_PRIO_OWNER ||
+		     vrrp->reload_master) &&
 		    vrrp->wantstate == VRRP_STATE_MAST) {
-#ifdef _HAVE_IPVS_SYNCD_
+#ifdef _WITH_LVS_
 			/* Check if sync daemon handling is needed */
-			if (vrrp->lvs_syncd_if)
+			if (global_data->lvs_syncd.ifname &&
+			    global_data->lvs_syncd.vrrp == vrrp)
 				ipvs_syncd_cmd(IPVS_STARTDAEMON,
-					       vrrp->lvs_syncd_if, IPVS_MASTER,
-					       vrrp->vrid);
+					       &global_data->lvs_syncd,
+					       vrrp->state == VRRP_STATE_MAST ? IPVS_MASTER : IPVS_BACKUP,
+					       false,
+					       false);
 #endif
-			vrrp->state = VRRP_STATE_GOTO_MASTER;
+			if (!vrrp->reload_master) {
+#ifdef _WITH_SNMP_RFCV3_
+				vrrp->stats->next_master_reason = VRRPV3_MASTER_REASON_PREEMPTED;
+#endif
+
+				/* The simplest way to become master is to timeout from the backup state
+				 * very quickly (1usec) */
+				vrrp->state = VRRP_STATE_BACK;
+				vrrp->ms_down_timer = 1;
+			}
+
+// TODO Do we need ->	vrrp_restore_interface(vrrp, false, false);
+// It removes everything, so probably if !reload
 		} else {
-			vrrp->ms_down_timer = 3 * vrrp->adver_int
-			    + VRRP_TIMER_SKEW(vrrp);
-#ifdef _HAVE_IPVS_SYNCD_
+			if (new_state == VRRP_STATE_BACK && vrrp->wantstate == VRRP_STATE_MAST)
+				vrrp->ms_down_timer = vrrp->master_adver_int + VRRP_TIMER_SKEW_MIN(vrrp);
+			else
+				vrrp->ms_down_timer = 3 * vrrp->master_adver_int + VRRP_TIMER_SKEW(vrrp);
+
+#ifdef _WITH_SNMP_RFCV3_
+			vrrp->stats->next_master_reason = VRRPV3_MASTER_REASON_MASTER_NO_RESPONSE;
+#endif
+
+#ifdef _WITH_LVS_
 			/* Check if sync daemon handling is needed */
-			if (vrrp->lvs_syncd_if)
+			if (global_data->lvs_syncd.ifname &&
+			    global_data->lvs_syncd.vrrp == vrrp)
 				ipvs_syncd_cmd(IPVS_STARTDAEMON,
-					       vrrp->lvs_syncd_if, IPVS_BACKUP,
-					       vrrp->vrid);
-#endif
-			log_message(LOG_INFO, "VRRP_Instance(%s) Entering BACKUP STATE",
-			       vrrp->iname);
-
-			/* Set BACKUP state */
-			vrrp_restore_interface(vrrp, 0);
-			vrrp->state = VRRP_STATE_BACK;
-			vrrp_smtp_notifier(vrrp);
-			notify_instance_exec(vrrp, VRRP_STATE_BACK);
-#ifdef _WITH_SNMP_
-			vrrp_snmp_instance_trap(vrrp);
+					       &global_data->lvs_syncd,
+					       IPVS_BACKUP,
+					       false,
+					       false);
 #endif
 
-			/* Init group if needed  */
-			if ((vgroup = vrrp->sync)) {
-				if (GROUP_STATE(vgroup) != VRRP_STATE_BACK) {
-					vgroup->state = VRRP_STATE_BACK;
-					vrrp_sync_smtp_notifier(vgroup);
-					notify_group_exec(vgroup, VRRP_STATE_BACK);
-#ifdef _WITH_SNMP_
-					vrrp_snmp_group_trap(vgroup);
-#endif
+			/* Set interface state */
+			vrrp_restore_interface(vrrp, false, false);
+			if (is_up && new_state != VRRP_STATE_FAULT && !vrrp->num_script_init && (!vrrp->sync || !vrrp->sync->num_member_init)) {
+				if (vrrp->state != VRRP_STATE_BACK) {
+					log_message(LOG_INFO, "(%s) Entering BACKUP STATE (init)", vrrp->iname);
+					vrrp->state = VRRP_STATE_BACK;
 				}
+			} else {
+				/* Note: if we have alpha mode scripts, we enter fault state, but don't want
+				 * to log it here */
+				if (vrrp_begin_state != vrrp->state)
+					log_message(LOG_INFO, "(%s) Entering FAULT STATE (init)", vrrp->iname);
+				vrrp->state = VRRP_STATE_FAULT;
+			}
+			if (vrrp_begin_state != vrrp->state) {
+				if (vrrp->state != VRRP_STATE_FAULT || vrrp->num_script_if_fault)
+					send_instance_notifies(vrrp);
+				vrrp->last_transition = timer_now();
 			}
 		}
+#ifdef _WITH_SNMP_RFC_
+		vrrp->stats->uptime = timer_now();
+#endif
+	}
+}
+
+/* Declare vrrp_timer_cmp() rbtree compare function */
+RB_TIMER_CMP(vrrp);
+
+/* Compute the new instance sands */
+void
+vrrp_init_instance_sands(vrrp_t * vrrp)
+{
+	set_time_now();
+
+	if (vrrp->state == VRRP_STATE_MAST) {
+		if (vrrp->reload_master)
+			vrrp->sands = time_now;
+		else
+			vrrp->sands = timer_add_long(time_now, vrrp->adver_int);
+	}
+	else if (vrrp->state == VRRP_STATE_BACK) {
+		/*
+		 * When in the BACKUP state the expiry timer should be updated to
+		 * time_now plus the Master Down Timer, when a non-preemptable packet is
+		 * received.
+		 */
+		vrrp->sands = timer_add_long(time_now, vrrp->ms_down_timer);
 	}
+	else if (vrrp->state == VRRP_STATE_FAULT || vrrp->state == VRRP_STATE_INIT)
+		vrrp->sands.tv_sec = TIMER_DISABLED;
+
+	rb_move_cached(&vrrp->sockets->rb_sands, vrrp, rb_sands, vrrp_timer_cmp);
 }
 
 static void
@@ -283,90 +309,46 @@ vrrp_init_sands(list l)
 	vrrp_t *vrrp;
 	element e;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vrrp = ELEMENT_DATA(e);
+	LIST_FOREACH(l, vrrp, e) {
+		vrrp->sands.tv_sec = TIMER_DISABLED;
+		rb_insert_sort_cached(&vrrp->sockets->rb_sands, vrrp, rb_sands, vrrp_timer_cmp);
 		vrrp_init_instance_sands(vrrp);
+		vrrp->reload_master = false;
 	}
 }
 
-/* if run after vrrp_init_state(), it will be able to detect scripts that
- * have been disabled because of a sync group and will avoid to start them.
- */
 static void
 vrrp_init_script(list l)
 {
 	vrrp_script_t *vscript;
 	element e;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vscript = ELEMENT_DATA(e);
-		if (vscript->inuse == 0)
-			vscript->result = VRRP_SCRIPT_STATUS_DISABLED;
-
-		if (vscript->result == VRRP_SCRIPT_STATUS_INIT) {
+	LIST_FOREACH(l, vscript, e) {
+		if (vscript->init_state == SCRIPT_INIT_STATE_INIT)
 			vscript->result = vscript->rise - 1; /* one success is enough */
-			thread_add_event(master, vrrp_script_thread, vscript, vscript->interval);
-		} else if (vscript->result == VRRP_SCRIPT_STATUS_INIT_GOOD) {
-			vscript->result = vscript->rise; /* one failure is enough */
-			thread_add_event(master, vrrp_script_thread, vscript, vscript->interval);
-		}
+		else if (vscript->init_state == SCRIPT_INIT_STATE_FAILED)
+			vscript->result = 0; /* assume failed by config */
+
+		thread_add_event(master, vrrp_script_thread, vscript, (int)vscript->interval);
 	}
 }
 
 /* Timer functions */
-static timeval_t
-vrrp_compute_timer(const int fd)
+static timeval_t *
+vrrp_compute_timer(const sock_t *sock)
 {
 	vrrp_t *vrrp;
-	element e;
-	list l = &vrrp_data->vrrp_index_fd[fd%1024 + 1];
-	timeval_t timer;
 
-	/* Multiple instances on the same interface */
-	timer_reset(timer);
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vrrp = ELEMENT_DATA(e);
-		if (timer_cmp(vrrp->sands, timer) < 0 ||
-		    timer_isnull(timer))
-			timer = timer_dup(vrrp->sands);
-	}
-
-	return timer;
+	/* The sock won't exist if there isn't a vrrp instance on it,
+	 * so rb_first will always exist. */
+	vrrp = rb_entry(rb_first_cached(&sock->rb_sands), vrrp_t, rb_sands);
+	return &vrrp->sands;
 }
 
-static long
-vrrp_timer_fd(const int fd)
+void
+vrrp_thread_requeue_read(vrrp_t *vrrp)
 {
-	timeval_t timer, vrrp_timer;
-	long vrrp_long;
-
-	timer = vrrp_compute_timer(fd);
-	vrrp_timer = timer_sub(timer, time_now);
-	vrrp_long = timer_long(vrrp_timer);
-
-	return (vrrp_long < 0) ? TIMER_MAX_SEC : vrrp_long;
-}
-
-static int
-vrrp_timer_vrid_timeout(const int fd)
-{
-	vrrp_t *vrrp;
-	element e;
-	list l = &vrrp_data->vrrp_index_fd[fd%1024 + 1];
-	timeval_t timer;
-	int vrid = 0;
-
-	/* Multiple instances on the same interface */
-	timer_reset(timer);
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vrrp = ELEMENT_DATA(e);
-		if (timer_cmp(vrrp->sands, timer) < 0 ||
-		    timer_isnull(timer)) {
-			timer = timer_dup(vrrp->sands);
-			vrid = vrrp->vrid;
-		}
-	}
-	return vrid;
+	thread_requeue_read(master, vrrp->sockets->fd_in, vrrp_compute_timer(vrrp->sockets));
 }
 
 /* Thread functions */
@@ -375,11 +357,10 @@ vrrp_register_workers(list l)
 {
 	sock_t *sock;
 	timeval_t timer;
-	long vrrp_timer = 0;
 	element e;
 
 	/* Init compute timer */
-	memset(&timer, 0, sizeof (struct timeval));
+	memset(&timer, 0, sizeof(timer));
 
 	/* Init the VRRP instances state */
 	vrrp_init_state(vrrp_data->vrrp);
@@ -391,75 +372,111 @@ vrrp_register_workers(list l)
 	if (!LIST_ISEMPTY(vrrp_data->vrrp_script))
 		vrrp_init_script(vrrp_data->vrrp_script);
 
-	/* Register VRRP workers threads */
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		sock = ELEMENT_DATA(e);
-		/* jump to asynchronous handling */
-		vrrp_timer = vrrp_timer_fd(sock->fd_in);
+#ifdef _WITH_BFD_
+	if (!LIST_ISEMPTY(vrrp_data->vrrp)) {
+// TODO - should we only do this if we have track_bfd? Probably not
+		/* Init BFD tracking thread */
+		bfd_thread = thread_add_read(master, vrrp_bfd_thread, NULL,
+					     bfd_vrrp_event_pipe[0], TIMER_NEVER, false);
+	}
+#endif
 
-		/* Register a timer thread if interface is shut */
-		if (sock->fd_in == -1)
-			sock->thread = thread_add_timer(master, vrrp_read_dispatcher_thread,
-							sock, vrrp_timer);
-		else
-			sock->thread = thread_add_read(master, vrrp_read_dispatcher_thread,
-						       sock, sock->fd_in, vrrp_timer);
+	/* Register VRRP workers threads */
+	LIST_FOREACH(l, sock, e) {
+		/* Register a timer thread if interface exists */
+		if (sock->fd_in != -1)
+			sock->thread = thread_add_read_sands(master, vrrp_read_dispatcher_thread,
+						       sock, sock->fd_in, vrrp_compute_timer(sock), false);
 	}
 }
 
+void
+vrrp_thread_add_read(vrrp_t *vrrp)
+{
+	vrrp->sockets->thread = thread_add_read_sands(master, vrrp_read_dispatcher_thread,
+						vrrp->sockets, vrrp->sockets->fd_in, vrrp_compute_timer(vrrp->sockets), false);
+}
+
 /* VRRP dispatcher functions */
-static int
-already_exist_sock(list l, sa_family_t family, int proto, int ifindex, int unicast)
+static sock_t * __attribute__ ((pure))
+already_exist_sock(list l, sa_family_t family, int proto, interface_t *ifp, bool unicast)
 {
 	sock_t *sock;
 	element e;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		sock = ELEMENT_DATA(e);
+	LIST_FOREACH(l, sock, e) {
 		if ((sock->family == family)	&&
 		    (sock->proto == proto)	&&
-		    (sock->ifindex == ifindex)	&&
+		    (sock->ifp == ifp)		&&
 		    (sock->unicast == unicast))
-			return 1;
+			return sock;
 	}
-	return 0;
+
+	return NULL;
 }
 
-void
-alloc_sock(sa_family_t family, list l, int proto, int ifindex, int unicast)
+static sock_t *
+alloc_sock(sa_family_t family, list l, int proto, interface_t *ifp, bool unicast)
 {
 	sock_t *new;
 
-	new = (sock_t *) MALLOC(sizeof (sock_t));
+	new = (sock_t *)MALLOC(sizeof (sock_t));
 	new->family = family;
 	new->proto = proto;
-	new->ifindex = ifindex;
+	new->ifp = ifp;
 	new->unicast = unicast;
+	new->rb_vrid = RB_ROOT;
+	new->rb_sands = RB_ROOT_CACHED;
 
 	list_add(l, new);
+
+	return new;
+}
+
+static inline int
+vrrp_vrid_cmp(const vrrp_t *v1, const vrrp_t *v2)
+{
+	return v1->vrid - v2->vrid;
 }
 
 static void
 vrrp_create_sockpool(list l)
 {
 	vrrp_t *vrrp;
-	list p = vrrp_data->vrrp;
 	element e;
-	int ifindex, proto, unicast;
+	interface_t *ifp;
+	int proto;
+	bool unicast;
+	sock_t *sock;
 
-	for (e = LIST_HEAD(p); e; ELEMENT_NEXT(e)) {
-		vrrp = ELEMENT_DATA(e);
-		ifindex = (vrrp->vmac_flags & VRRP_VMAC_FL_XMITBASE) ? IF_BASE_INDEX(vrrp->ifp) :
-								       IF_INDEX(vrrp->ifp);
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		ifp =
+#ifdef _HAVE_VRRP_VMAC_
+			  (__test_bit(VRRP_VMAC_XMITBASE_BIT, &vrrp->vmac_flags)) ? vrrp->ifp->base_ifp :
+#endif
+										    vrrp->ifp;
 		unicast = !LIST_ISEMPTY(vrrp->unicast_peer);
+		proto = IPPROTO_VRRP;
+#if defined _WITH_VRRP_AUTH_
 		if (vrrp->auth_type == VRRP_AUTH_AH)
-			proto = IPPROTO_IPSEC_AH;
-		else
-			proto = IPPROTO_VRRP;
+			proto = IPPROTO_AH;
+#endif
 
 		/* add the vrrp element if not exist */
-		if (!already_exist_sock(l, vrrp->family, proto, ifindex, unicast))
-			alloc_sock(vrrp->family, l, proto, ifindex, unicast);
+		if (!(sock = already_exist_sock(l, vrrp->family, proto, ifp, unicast)))
+			sock = alloc_sock(vrrp->family, l, proto, ifp, unicast);
+
+		/* Add the vrrp_t indexed by vrid to the socket */
+		rb_insert_sort(&sock->rb_vrid, vrrp, rb_vrid, vrrp_vrid_cmp);
+
+		if (vrrp->kernel_rx_buf_size)
+			sock->rx_buf_size += vrrp->kernel_rx_buf_size;
+		else if (global_data->vrrp_rx_bufs_policy & RX_BUFS_SIZE)
+			sock->rx_buf_size += global_data->vrrp_rx_bufs_size;
+		else if (global_data->vrrp_rx_bufs_policy & RX_BUFS_POLICY_ADVERT)
+			sock->rx_buf_size += global_data->vrrp_rx_bufs_multiples * vrrp_adv_len(vrrp);
+		else if (global_data->vrrp_rx_bufs_policy & RX_BUFS_POLICY_MTU)
+			sock->rx_buf_size += global_data->vrrp_rx_bufs_multiples * vrrp->ifp->mtu;
 	}
 }
 
@@ -469,15 +486,18 @@ vrrp_open_sockpool(list l)
 	sock_t *sock;
 	element e;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		sock = ELEMENT_DATA(e);
-		sock->fd_in = open_vrrp_socket(sock->family, sock->proto,
-					       sock->ifindex, sock->unicast);
+	LIST_FOREACH(l, sock, e) {
+		if (!sock->ifp->ifindex) {
+			sock->fd_in = sock->fd_out = -1;
+			continue;
+		}
+		sock->fd_in = open_vrrp_read_socket(sock->family, sock->proto,
+					       sock->ifp, sock->unicast, sock->rx_buf_size);
 		if (sock->fd_in == -1)
 			sock->fd_out = -1;
 		else
 			sock->fd_out = open_vrrp_send_socket(sock->family, sock->proto,
-							     sock->ifindex, sock->unicast);
+							     sock->ifp, sock->unicast);
 	}
 }
 
@@ -486,33 +506,11 @@ vrrp_set_fds(list l)
 {
 	sock_t *sock;
 	vrrp_t *vrrp;
-	list p = vrrp_data->vrrp;
-	element e_sock;
-	element e_vrrp;
-	int proto, ifindex, unicast;
-
-	for (e_sock = LIST_HEAD(l); e_sock; ELEMENT_NEXT(e_sock)) {
-		sock = ELEMENT_DATA(e_sock);
-		for (e_vrrp = LIST_HEAD(p); e_vrrp; ELEMENT_NEXT(e_vrrp)) {
-			vrrp = ELEMENT_DATA(e_vrrp);
-			ifindex = (vrrp->vmac_flags & VRRP_VMAC_FL_XMITBASE) ? IF_BASE_INDEX(vrrp->ifp) :
-									       IF_INDEX(vrrp->ifp);
-			unicast = !LIST_ISEMPTY(vrrp->unicast_peer);
-			if (vrrp->auth_type == VRRP_AUTH_AH)
-				proto = IPPROTO_IPSEC_AH;
-			else
-				proto = IPPROTO_VRRP;
-
-			if ((sock->ifindex == ifindex)	&&
-			    (sock->proto == proto)	&&
-			    (sock->unicast == unicast)) {
-				vrrp->fd_in = sock->fd_in;
-				vrrp->fd_out = sock->fd_out;
+	element e;
 
-				/* append to hash index */
-				alloc_vrrp_fd_bucket(vrrp);
-			}
-		}
+	LIST_FOREACH(l, sock, e) {
+		rb_for_each_entry(vrrp, &sock->rb_vrid, rb_vrid)
+			vrrp->sockets = sock;
 	}
 }
 
@@ -525,15 +523,15 @@ vrrp_set_fds(list l)
  *    | ETH0 |    | ETH1 |          | ETHn |
  *    +------+    +------+          +------+
  *
+ * TODO TODO - this description is way out of date
  * Here we have n physical NIC. Each NIC own a maximum of 2 fds.
  * (one for VRRP the other for IPSEC_AH). All our VRRP instances
  * are multiplexed through this fds. So our design can handle 2*n
  * multiplexing points.
  */
 int
-vrrp_dispatcher_init(thread_t * thread)
+vrrp_dispatcher_init(__attribute__((unused)) thread_ref_t thread)
 {
-	/* create the VRRP socket pool list */
 	vrrp_create_sockpool(vrrp_data->vrrp_socket_pool);
 
 	/* open the VRRP socket pool */
@@ -542,392 +540,481 @@ vrrp_dispatcher_init(thread_t * thread)
 	/* set VRRP instance fds to sockpool */
 	vrrp_set_fds(vrrp_data->vrrp_socket_pool);
 
+	/* create the VRRP socket pool list */
 	/* register read dispatcher worker thread */
 	vrrp_register_workers(vrrp_data->vrrp_socket_pool);
 
 	/* Dump socket pool */
-	if (debug & 32)
-		dump_list(vrrp_data->vrrp_socket_pool);
+	if (__test_bit(LOG_DETAIL_BIT, &debug))
+		dump_list(NULL, vrrp_data->vrrp_socket_pool);
+
+	vrrp_initialised = true;
+
 	return 1;
 }
 
+#ifdef _WITH_BFD_
 void
-vrrp_dispatcher_release(vrrp_data_t *data)
+cancel_vrrp_threads(void)
 {
-	free_list(data->vrrp_socket_pool);
+	if (bfd_thread) {
+		thread_cancel(bfd_thread);
+		bfd_thread = NULL;
+	}
 }
+#endif
 
-static void
-vrrp_backup(vrrp_t * vrrp, char *buffer, int len)
+void
+vrrp_dispatcher_release(vrrp_data_t *data)
 {
-	struct iphdr *iph;
-	ipsec_ah_t *ah;
-
-	if (vrrp->family == AF_INET) {
-		iph = (struct iphdr *) buffer;
-
-		if (iph->protocol == IPPROTO_IPSEC_AH) {
-			ah = (ipsec_ah_t *) (buffer + sizeof (struct iphdr));
-			if (ntohl(ah->seq_number) >= vrrp->ipsecah_counter->seq_number)
-				vrrp->ipsecah_counter->cycle = 0;
-		}
-	}
+	free_list(&data->vrrp_socket_pool);
 
-	vrrp_state_backup(vrrp, buffer, len);
+#ifdef _WITH_BFD_
+	cancel_vrrp_threads();
+#endif
 }
 
 static void
-vrrp_become_master(vrrp_t * vrrp, char *buffer, int len)
+vrrp_goto_master(vrrp_t * vrrp)
 {
-	struct iphdr *iph;
-	ipsec_ah_t *ah;
+	/* handle master state transition */
+	vrrp->wantstate = VRRP_STATE_MAST;
+	vrrp_state_goto_master(vrrp);
+}
 
-	if (vrrp->family == AF_INET) {
-		iph = (struct iphdr *) buffer;
+/* Delayed gratuitous ARP thread */
+int
+vrrp_gratuitous_arp_thread(thread_ref_t thread)
+{
+	vrrp_t *vrrp = THREAD_ARG(thread);
 
-		/*
-		 * If we are in IPSEC AH mode, we must be sync
-		 * with the remote IPSEC AH VRRP instance counter.
-		 */
-		if (iph->protocol == IPPROTO_IPSEC_AH) {
-			log_message(LOG_INFO, "VRRP_Instance(%s) IPSEC-AH : seq_num sync",
-			       vrrp->iname);
-			ah = (ipsec_ah_t *) (buffer + sizeof (struct iphdr));
-			vrrp->ipsecah_counter->seq_number = ntohl(ah->seq_number) + 1;
-			vrrp->ipsecah_counter->cycle = 0;
-		}
-	}
+	/* Simply broadcast the gratuitous ARP */
+	vrrp_send_link_update(vrrp, vrrp->garp_rep);
 
-	/* Then jump to master state */
-	vrrp->wantstate = VRRP_STATE_MAST;
-	vrrp_state_goto_master(vrrp);
+	return 0;
 }
 
-static void
-vrrp_leave_master(vrrp_t * vrrp, char *buffer, int len)
+/* Delayed gratuitous ARP thread after receiving a lower priority advert */
+int
+vrrp_lower_prio_gratuitous_arp_thread(thread_ref_t thread)
 {
-	if (!VRRP_ISUP(vrrp)) {
-		vrrp_log_int_down(vrrp);
-		vrrp->wantstate = VRRP_STATE_GOTO_FAULT;
-		vrrp_state_leave_master(vrrp);
-	} else if (vrrp_state_master_rx(vrrp, buffer, len)) {
-		vrrp_state_leave_master(vrrp);
-		vrrp_smtp_notifier(vrrp);
-	}
+	vrrp_t *vrrp = THREAD_ARG(thread);
+
+	/* Simply broadcast the gratuitous ARP */
+	vrrp_send_link_update(vrrp, vrrp->garp_lower_prio_rep);
+
+	return 0;
 }
 
 static void
-vrrp_ah_sync(vrrp_t *vrrp)
+vrrp_master(vrrp_t * vrrp)
 {
-	/*
-	 * Transition to BACKUP state for AH
-	 * seq number synchronization.
-	 */
-	log_message(LOG_INFO, "VRRP_Instance(%s) in FAULT state jump to AH sync",
-	       vrrp->iname);
-	vrrp->wantstate = VRRP_STATE_BACK;
-	vrrp_state_leave_master(vrrp);
+	/* Send the VRRP advert */
+	vrrp_state_master_tx(vrrp);
 }
 
-static void
-vrrp_leave_fault(vrrp_t * vrrp, char *buffer, int len)
+void
+try_up_instance(vrrp_t *vrrp, bool leaving_init)
 {
-	if (!VRRP_ISUP(vrrp))
+	int wantstate;
+	ip_address_t ipaddress = {0};
+
+	if (leaving_init) {
+		if (vrrp->num_script_if_fault)
+			return;
+	}
+	else if (--vrrp->num_script_if_fault || vrrp->num_script_init)
 		return;
 
-	if (vrrp_state_fault_rx(vrrp, buffer, len)) {
-		if (vrrp->sync) {
-			if (vrrp_sync_leave_fault(vrrp)) {
-				log_message(LOG_INFO,
-				       "VRRP_Instance(%s) prio is higher than received advert",
-				       vrrp->iname);
-				vrrp_become_master(vrrp, buffer, len);
-			}
-		} else {
-			log_message(LOG_INFO,
-			       "VRRP_Instance(%s) prio is higher than received advert",
-			       vrrp->iname);
-			vrrp_become_master(vrrp, buffer, len);
-		}
+	if (vrrp->wantstate == VRRP_STATE_MAST && vrrp->base_priority == VRRP_PRIO_OWNER) {
+		vrrp->wantstate = VRRP_STATE_MAST;
+#ifdef _WITH_SNMP_RFCV3_
+		vrrp->stats->next_master_reason = VRRPV3_MASTER_REASON_PREEMPTED;
+#endif
 	} else {
-		if (vrrp->sync) {
-			if (vrrp_sync_leave_fault(vrrp)) {
-				log_message(LOG_INFO, "VRRP_Instance(%s) Entering BACKUP STATE",
-				       vrrp->iname);
-				vrrp->state = VRRP_STATE_BACK;
-				vrrp_smtp_notifier(vrrp);
-				notify_instance_exec(vrrp, VRRP_STATE_BACK);
-#ifdef _WITH_SNMP_
-				vrrp_snmp_instance_trap(vrrp);
+		vrrp->wantstate = VRRP_STATE_BACK;
+#ifdef _WITH_SNMP_RFCV3_
+		vrrp->stats->next_master_reason = VRRPV3_MASTER_REASON_MASTER_NO_RESPONSE;
 #endif
-			}
+	}
+
+	vrrp->master_adver_int = vrrp->adver_int;
+	if (vrrp->wantstate == VRRP_STATE_MAST && vrrp->base_priority == VRRP_PRIO_OWNER)
+		vrrp->ms_down_timer = vrrp->master_adver_int + VRRP_TIMER_SKEW(vrrp);
+	else
+		vrrp->ms_down_timer = 3 * vrrp->master_adver_int + VRRP_TIMER_SKEW(vrrp);
+
+	if (vrrp->sync) {
+		if (leaving_init) {
+			if (vrrp->sync->num_member_fault)
+				return;
+		}
+		else if (--vrrp->sync->num_member_fault || vrrp->sync->num_member_init)
+			return;
+	}
+
+	/* If the sync group can't go to master, we must go to backup state */
+	wantstate = vrrp->wantstate;
+	if (vrrp->sync && vrrp->wantstate == VRRP_STATE_MAST && !vrrp_sync_can_goto_master(vrrp))
+		vrrp->wantstate = VRRP_STATE_BACK;
+
+	/* We can come up */
+	vrrp_state_leave_fault(vrrp);
+
+	/* If we are using unicast, the master may have lost us from its ARP cache.
+	 * We want to renew the ARP cache on the master, so that it can send adverts
+	 * to us straight away, without a delay before it sends an ARP request message
+	 * and we respond. If we don't do this, we can time out and transition to master
+	 * before the master renews its ARP entry, since the master cannot send us adverts
+	 * until it has done so. */
+	if (!LIST_ISEMPTY(vrrp->unicast_peer) &&
+	    vrrp->saddr.ss_family != AF_UNSPEC) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_INFO, "%s: sending gratuitous %s for %s", vrrp->iname, vrrp->family == AF_INET ? "ARP" : "NA", inet_sockaddrtos(&vrrp->saddr));
+
+		ipaddress.ifp = IF_BASE_IFP(vrrp->ifp);
+
+		if (vrrp->saddr.ss_family == AF_INET) {
+			ipaddress.u.sin.sin_addr.s_addr = ((struct sockaddr_in *)&vrrp->saddr)->sin_addr.s_addr;
+			/* send_gratuitous_arp_immediate(ipaddress.ifp, &ipaddress); */
+			send_gratuitous_arp(&ipaddress);
 		} else {
-			log_message(LOG_INFO, "VRRP_Instance(%s) Entering BACKUP STATE",
-			       vrrp->iname);
-			vrrp->state = VRRP_STATE_BACK;
-			vrrp_smtp_notifier(vrrp);
-			notify_instance_exec(vrrp, VRRP_STATE_BACK);
-#ifdef _WITH_SNMP_
-			vrrp_snmp_instance_trap(vrrp);
-#endif
+			/* IPv6 */
+			ipaddress.u.sin6_addr = ((struct sockaddr_in6 *)&vrrp->saddr)->sin6_addr;
+			ndisc_send_unsolicited_na_immediate(ipaddress.ifp, &ipaddress);
 		}
 	}
+
+	vrrp_init_instance_sands(vrrp);
+	vrrp_thread_requeue_read(vrrp);
+
+	vrrp->wantstate = wantstate;
+
+	if (vrrp->sync) {
+		if (vrrp->state == VRRP_STATE_MAST)
+			vrrp_sync_master(vrrp);
+		else
+			vrrp_sync_backup(vrrp);
+	}
 }
 
+#ifdef _WITH_BFD_
 static void
-vrrp_goto_master(vrrp_t * vrrp)
+vrrp_handle_bfd_event(bfd_event_t * evt)
 {
-	if (!VRRP_ISUP(vrrp)) {
-		vrrp_log_int_down(vrrp);
-		log_message(LOG_INFO, "VRRP_Instance(%s) Now in FAULT state",
-		       vrrp->iname);
-		if (vrrp->state != VRRP_STATE_FAULT)
-			notify_instance_exec(vrrp, VRRP_STATE_FAULT);
-		vrrp->state = VRRP_STATE_FAULT;
-		vrrp->ms_down_timer = 3 * vrrp->adver_int + VRRP_TIMER_SKEW(vrrp);
-		notify_instance_exec(vrrp, VRRP_STATE_FAULT);
-#ifdef _WITH_SNMP_
-		vrrp_snmp_instance_trap(vrrp);
-#endif
-	} else {
-		/* If becoming MASTER in IPSEC AH AUTH, we reset the anti-replay */
-		if (vrrp->ipsecah_counter->cycle) {
-			vrrp->ipsecah_counter->cycle = 0;
-			vrrp->ipsecah_counter->seq_number = 0;
+	vrrp_tracked_bfd_t *vbfd;
+	tracking_vrrp_t *tbfd;
+	vrrp_t * vrrp;
+	element e, e1;
+	struct timeval cur_time;
+	struct timeval timer_tmp;
+	uint32_t delivery_time;
+
+	if (__test_bit(LOG_DETAIL_BIT, &debug)) {
+		cur_time = timer_now();
+		timersub(&cur_time, &evt->sent_time, &timer_tmp);
+		delivery_time = timer_long(timer_tmp);
+		log_message(LOG_INFO, "Received BFD event: instance %s is in"
+			    " state %s (delivered in %" PRIu32 " usec)",
+			    evt->iname, BFD_STATE_STR(evt->state), delivery_time);
+	}
+
+	LIST_FOREACH(vrrp_data->vrrp_track_bfds, vbfd, e) {
+		if (strcmp(vbfd->bname, evt->iname))
+			continue;
+
+		if ((vbfd->bfd_up && evt->state == BFD_STATE_UP) ||
+		    (!vbfd->bfd_up && evt->state == BFD_STATE_DOWN))
+			continue;
+
+		vbfd->bfd_up = (evt->state == BFD_STATE_UP);
+
+		LIST_FOREACH(vbfd->tracking_vrrp, tbfd, e1) {
+			vrrp = tbfd->vrrp;
+
+			log_message(LOG_INFO, "VRRP_Instance(%s) Tracked BFD"
+				    " instance %s is %s", vrrp->iname, evt->iname, vbfd->bfd_up ? "UP" : "DOWN");
+
+			if (tbfd->weight) {
+				if (vbfd->bfd_up)
+					vrrp->total_priority += abs(tbfd->weight) * tbfd->weight_multiplier;
+				else
+					vrrp->total_priority -= abs(tbfd->weight) * tbfd->weight_multiplier;
+				vrrp_set_effective_priority(vrrp);
+
+				continue;
+			}
+
+			if (!!vbfd->bfd_up == (tbfd->weight_multiplier == 1))
+				try_up_instance(vrrp, false);
+			else
+				down_instance(vrrp);
 		}
 
-		/* handle master state transition */
-		vrrp->wantstate = VRRP_STATE_MAST;
-		vrrp_state_goto_master(vrrp);
+		break;
 	}
 }
 
-/* Delayed gratuitous ARP thread */
-int
-vrrp_gratuitous_arp_thread(thread_t * thread)
+static int
+vrrp_bfd_thread(thread_ref_t thread)
 {
-	vrrp_t *vrrp = THREAD_ARG(thread);
+	bfd_event_t evt;
 
-	/* Simply broadcast the gratuitous ARP */
-	vrrp_send_link_update(vrrp);
+	bfd_thread = thread_add_read(master, vrrp_bfd_thread, NULL,
+				     thread->u.f.fd, TIMER_NEVER, false);
+
+	if (thread->type != THREAD_READY_READ_FD)
+		return 0;
+
+	while (read(thread->u.f.fd, &evt, sizeof(bfd_event_t)) != -1)
+		vrrp_handle_bfd_event(&evt);
 
 	return 0;
 }
+#endif
 
-/* Update VRRP effective priority based on multiple checkers.
- * This is a thread which is executed every adver_int.
- */
+/* Handle dispatcher read timeout */
 static int
-vrrp_update_priority(thread_t * thread)
+vrrp_dispatcher_read_timeout(sock_t *sock)
 {
-	vrrp_t *vrrp = THREAD_ARG(thread);
-	int prio_offset, new_prio;
+	vrrp_t *vrrp;
+	int prev_state;
 
-	/* compute prio_offset right here */
-	prio_offset = 0;
+	set_time_now();
 
-	/* Now we will sum the weights of all interfaces which are tracked. */
-	if ((!vrrp->sync || vrrp->sync->global_tracking) && !LIST_ISEMPTY(vrrp->track_ifp))
-		 prio_offset += vrrp_tracked_weight(vrrp->track_ifp);
+	rb_for_each_entry_cached(vrrp, &sock->rb_sands, rb_sands) {
+		if (vrrp->sands.tv_sec == TIMER_DISABLED ||
+		    timercmp(&vrrp->sands, &time_now, >))
+			break;
 
-	/* Now we will sum the weights of all scripts which are tracked. */
-	if ((!vrrp->sync || vrrp->sync->global_tracking) && !LIST_ISEMPTY(vrrp->track_script))
-		prio_offset += vrrp_script_weight(vrrp->track_script);
+		prev_state = vrrp->state;
 
-	if (vrrp->base_priority == VRRP_PRIO_OWNER) {
-		/* we will not run a PRIO_OWNER into a non-PRIO_OWNER */
-		vrrp->effective_priority = VRRP_PRIO_OWNER;
-	} else {
-		/* WARNING! we must compute new_prio on a signed int in order
-		   to detect overflows and avoid wrapping. */
-		new_prio = vrrp->base_priority + prio_offset;
-		if (new_prio < 1)
-			new_prio = 1;
-		else if (new_prio > 254)
-			new_prio = 254;
-		vrrp->effective_priority = new_prio;
+		if (vrrp->state == VRRP_STATE_BACK) {
+			if (__test_bit(LOG_DETAIL_BIT, &debug))
+				log_message(LOG_INFO, "(%s) Receive advertisement timeout", vrrp->iname);
+			vrrp_goto_master(vrrp);
+		}
+		else if (vrrp->state == VRRP_STATE_MAST)
+			vrrp_master(vrrp);
+
+		/* handle instance synchronization */
+#ifdef _TSM_DEBUG_
+		if (do_tsm_debug)
+			log_message(LOG_INFO, "Send [%s] TSM transition : [%d,%d] Wantstate = [%d]",
+				vrrp->iname, prev_state, vrrp->state, vrrp->wantstate);
+#endif
+		VRRP_TSM_HANDLE(prev_state, vrrp);
+
+		vrrp_init_instance_sands(vrrp);
 	}
 
-	/* Register next priority update thread */
-	thread_add_timer(master, vrrp_update_priority, vrrp, vrrp->adver_int);
-	return 0;
+	return sock->fd_in;
 }
 
-static void
-vrrp_master(vrrp_t * vrrp)
+/* Handle dispatcher read packet */
+static int
+vrrp_dispatcher_read(sock_t *sock)
 {
-	/* Check if interface we are running on is UP */
-	if (vrrp->wantstate != VRRP_STATE_GOTO_FAULT) {
-		if (!VRRP_ISUP(vrrp)) {
-			vrrp_log_int_down(vrrp);
-			vrrp->wantstate = VRRP_STATE_GOTO_FAULT;
+	vrrp_t *vrrp;
+	const vrrphdr_t *hd;
+	ssize_t len = 0;
+	int prev_state = 0;
+	struct sockaddr_storage src_addr = { .ss_family = AF_UNSPEC };
+	vrrp_t vrrp_lookup;
+#ifdef _NETWORK_TIMESTAMP_
+	char control_buf[128];
+#else
+	char control_buf[64];
+#endif
+	struct iovec iovec = { .iov_base = vrrp_buffer, .iov_len = vrrp_buffer_len };
+	struct msghdr msghdr = { .msg_name = &src_addr, .msg_namelen = sizeof(src_addr),
+				 .msg_iov = &iovec, .msg_iovlen = 1,
+				 .msg_control = control_buf, .msg_controllen = sizeof(control_buf) };
+	struct cmsghdr *cmsg;
+	bool expected_cmsg;
+	unsigned eintr_count;
+	unsigned long rx_vrid_map[BIT_WORD(256 + BIT_PER_LONG - 1)] = { 0 };
+	bool terminate_receiving = false;
+#ifdef DEBUG_RECVMSG
+	unsigned recv_data_count = 0;
+#endif
+
+	/* Strategy here is to handle incoming adverts pending into socket recvq
+	 * but stop if receive 2nd advert for a VRID on socket (this applies to
+	 * both configured and unconfigured VRIDs).
+	 * Seems a good tradeoff while simulating */
+	while (!terminate_receiving) {
+		/* read & affect received buffer */
+		eintr_count = 0;
+		while ((len = recvmsg(sock->fd_in, &msghdr, MSG_TRUNC | MSG_CTRUNC)) == -1 &&
+		       check_EINTR(errno) && eintr_count++ < 10);
+		if (len < 0) {
+#ifdef DEBUG_RECVMSG
+			if (check_EINTR(errno))
+				log_message(LOG_INFO, "recvmsg(%d) looped %u times due to EINTR before terminating loop"
+						    , sock->fd_in, eintr_count);
+#endif
+
+			if (!check_EAGAIN(errno))
+				log_message(LOG_INFO, "recvmsg(%d) returned %d (%m)"
+						    , sock->fd_in, errno);
+#ifdef DEBUG_RECVMSG
+			else if (recv_data_count == 0)
+				log_message(LOG_INFO, "recvmsg(%d) returned EAGAIN without any data being received"
+						    , sock->fd_in);
+
+			if (recv_data_count != 1)
+				log_message(LOG_INFO, "recvmsg(%d) loop received %u packets"
+						    , sock->fd_in, recv_data_count);
+#endif
+			break;
 		}
-	}
 
-	/* Then perform the state transition */
-	if (vrrp->wantstate == VRRP_STATE_GOTO_FAULT ||
-	    vrrp->wantstate == VRRP_STATE_BACK ||
-	    vrrp->ipsecah_counter->cycle) {
-		vrrp->ms_down_timer = 3 * vrrp->adver_int + VRRP_TIMER_SKEW(vrrp);
+#ifdef DEBUG_RECVMSG
+		if (eintr_count)
+			log_message(LOG_INFO, "recvmsg(%d) looped %u times due to EINTR before returning %ld"
+					    , sock->fd_in, eintr_count, len);
+#endif
+
+		/* Don't attempt to process data if no data received */
+		if (len == 0) {
+			log_message(LOG_INFO, "recvmsg(%d) returned data length 0", sock->fd_in);
+			continue;
+		}
 
-		/* handle backup state transition */
-		vrrp_state_leave_master(vrrp);
+#ifdef DEBUG_RECVMSG
+		recv_data_count++;
+#endif
 
-		if (vrrp->state == VRRP_STATE_BACK)
-			log_message(LOG_INFO, "VRRP_Instance(%s) Now in BACKUP state",
-				    vrrp->iname);
-		if (vrrp->state == VRRP_STATE_FAULT)
-			log_message(LOG_INFO, "VRRP_Instance(%s) Now in FAULT state",
-				    vrrp->iname);
-	} else if (vrrp->state == VRRP_STATE_MAST) {
-		/*
-		 * Send the VRRP advert.
-		 * If we catch the master transition
-		 * <=> vrrp_state_master_tx(...) = 1
-		 * register a gratuitous arp thread delayed to 5 secs.
-		 */
-		if (vrrp_state_master_tx(vrrp, 0)) {
-			thread_add_timer(master, vrrp_gratuitous_arp_thread,
-					 vrrp,
-					 (vrrp->garp_delay) ?
-						vrrp->garp_delay : VRRP_GARP_DELAY);
-			vrrp_smtp_notifier(vrrp);
+		if (msghdr.msg_flags & MSG_TRUNC) {
+			log_message(LOG_INFO, "recvmsg(%d) message truncated from %zd to %zu bytes"
+					    , sock->fd_in, len, vrrp_buffer_len);
+			continue;
 		}
-	}
-}
 
-static void
-vrrp_fault(vrrp_t * vrrp)
-{
-	vrrp_sgroup_t *vgroup = vrrp->sync;
+		if (msghdr.msg_flags & MSG_CTRUNC) {
+			log_message(LOG_INFO, "recvmsg(%d), control message truncated from %zu to %zu bytes"
+					    , sock->fd_in, sizeof(control_buf), msghdr.msg_controllen);
+			msghdr.msg_controllen = 0;
+		}
 
-	if (vgroup) {
-		if (!vrrp_sync_leave_fault(vrrp))
-			return;
-	} else if (VRRP_ISUP(vrrp))
-		vrrp_log_int_up(vrrp);
-	else
-		return;
+		/* Check the received data includes at least the IP, possibly
+		 * the AH header and the VRRP header */
+		if (!(hd = vrrp_get_header(sock->family, vrrp_buffer, len)))
+			break;
+
+		/* Defense strategy here is to handle no more than one advert
+		 * per VRID in order to flush socket rcvq...
+		 * This is a best effort mitigation */
+		if (__test_and_set_bit(hd->vrid, rx_vrid_map))
+			terminate_receiving = true;
+
+		vrrp_lookup.vrid = hd->vrid;
+		vrrp = rb_search(&sock->rb_vrid, &vrrp_lookup, rb_vrid, vrrp_vrid_cmp);
+
+		/* No instance found => ignore the advert */
+		if (!vrrp) {
+			if (global_data->log_unknown_vrids)
+				log_message(LOG_INFO, "Unknown VRID(%d) received on interface(%s). ignoring..."
+						    , hd->vrid, IF_NAME(sock->ifp));
+			continue;
+		}
 
-	/* refresh the multicast fd */
-	if (new_vrrp_socket(vrrp) < 0)
-		return;
+		if (vrrp->state == VRRP_STATE_FAULT || vrrp->state == VRRP_STATE_INIT) {
+			/* We just ignore a message received when we are in fault state or
+			 * not yet fully initialised */
+			continue;
+		}
 
-	/*
-	 * We force the IPSEC AH seq_number sync
-	 * to be done in read advert handler.
-	 * So we ignore this timeouted state until remote
-	 * VRRP MASTER send its advert for the concerned
-	 * instance.
-	 */
-	if (vrrp->auth_type == VRRP_AUTH_AH) {
-		vrrp_ah_sync(vrrp);
-	} else {
-		/* Otherwise, we transit to init state */
-		if (vrrp->init_state == VRRP_STATE_BACK) {
-			vrrp->state = VRRP_STATE_BACK;
-			notify_instance_exec(vrrp, VRRP_STATE_BACK);
-#ifdef _WITH_SNMP_
-			vrrp_snmp_instance_trap(vrrp);
+		/* Save non packet data */
+		vrrp->pkt_saddr = src_addr;
+		vrrp->hop_limit = -1;           /* Default to not received */
+		vrrp->multicast_pkt = false;
+		for (cmsg = CMSG_FIRSTHDR(&msghdr); cmsg; cmsg = CMSG_NXTHDR(&msghdr, cmsg)) {
+			expected_cmsg = false;
+			if (cmsg->cmsg_level == IPPROTO_IPV6) {
+				expected_cmsg = true;
+
+#ifdef IPV6_RECVHOPLIMIT
+				if (cmsg->cmsg_type == IPV6_HOPLIMIT &&
+				    cmsg->cmsg_len - sizeof(struct cmsghdr) == sizeof(unsigned int))
+					vrrp->hop_limit = *(unsigned int *)CMSG_DATA(cmsg);
+				else
+#endif
+#ifdef IPV6_RECVPKTINFO
+				if (cmsg->cmsg_type == IPV6_PKTINFO &&
+				    cmsg->cmsg_len - sizeof(struct cmsghdr) == sizeof(struct in6_pktinfo))
+					vrrp->multicast_pkt = IN6_IS_ADDR_MULTICAST(&((struct in6_pktinfo *)CMSG_DATA(cmsg))->ipi6_addr);
+				else
+#endif
+					expected_cmsg = false;
+			}
+#ifdef _NETWORK_TIMESTAMP_
+			else if (do_network_timestamp && cmsg->cmsg_level == SOL_SOCKET) {
+				struct timespec *ts = (void *)CMSG_DATA(cmsg);
+				char time_buf[9];
+
+				expected_cmsg = true;
+				if (cmsg->cmsg_type == SO_TIMESTAMPNS) {
+					strftime(time_buf, sizeof time_buf, "%T", localtime(&ts->tv_sec));
+					log_message(LOG_INFO, "TIMESTAMPNS (socket %d - VRID %u) %s.%9.9ld"
+							    , sock->fd_in, hd->vrid, time_buf, ts->tv_nsec);
+				}
+#if 0
+				if (cmsg->cmsg_type == SO_TIMESTAMP) {
+					struct timeval *tv = (void *)CMSG_DATA(cmsg);
+					log_message(LOG_INFO, "TIMESTAMP message (%d - %u)  %ld.%9.9ld"
+							    , sock->fd_in, hd->vrid, tv->tv_sec, tv->tv_usec);
+				}
+				else if (cmsg->cmsg_type == SO_TIMESTAMPING) {
+					struct timespec *ts = (void *)CMSG_DATA(cmsg);
+					log_message(LOG_INFO, "TIMESTAMPING message (%d - %u)  %ld.%9.9ld, raw %ld.%9.9ld"
+							    , sock->fd_in, hd->vrid, ts->tv_sec, ts->tv_nsec, (ts+2)->tv_sec, (ts+2)->tv_nsec);
+				}
+#endif
+				else
+					expected_cmsg = false;
+			}
 #endif
-		} else {
-			vrrp_goto_master(vrrp);
-		}
-	}
-}
 
-/* Handle dispatcher read timeout */
-static int
-vrrp_dispatcher_read_to(int fd)
-{
-	vrrp_t *vrrp;
-	int vrid = 0;
-	int prev_state = 0;
+			if (!expected_cmsg)
+				log_message(LOG_INFO, "fd %d, unexpected control msg len %zu, level %d, type %d"
+						    , sock->fd_in, cmsg->cmsg_len
+						    , cmsg->cmsg_level, cmsg->cmsg_type);
+		}
 
-	/* Searching for matching instance */
-	vrid = vrrp_timer_vrid_timeout(fd);
-	vrrp = vrrp_index_lookup(vrid, fd);
-
-	/* Run the FSM handler */
-	prev_state = vrrp->state;
-	VRRP_FSM_READ_TO(vrrp);
-
-	/* handle instance synchronization */
-//	printf("Send [%s] TSM transtition : [%d,%d] Wantstate = [%d]\n"
-//	       , vrrp->iname
-//	       , prev_state
-//	       , vrrp->state
-//	       , vrrp->wantstate);
-	VRRP_TSM_HANDLE(prev_state, vrrp);
-
-	/*
-	 * We are sure the instance exist. So we can
-	 * compute new sands timer safely.
-	 */
-	vrrp_init_instance_sands(vrrp);
+		prev_state = vrrp->state;
 
-	/*
-	 * If quick sync is set, refresh sands to one advert interval, i.e. the next
-	 * timeout will occur in one interval instead of three, and a check for a
-	 * possible transition check will perform more quickly.
-	 */
-	if (vrrp->quick_sync) {
-		vrrp->sands = timer_add_long(time_now, vrrp->adver_int);
-		vrrp->quick_sync = 0;
-        }
-
-	return vrrp->fd_in;
-}
+		if (vrrp->state == VRRP_STATE_BACK)
+			vrrp_state_backup(vrrp, hd, vrrp_buffer, len);
+		else if (vrrp->state == VRRP_STATE_MAST) {
+			if (vrrp_state_master_rx(vrrp, hd, vrrp_buffer, len))
+				vrrp_state_leave_master(vrrp, false);
+		} else
+			log_message(LOG_INFO, "(%s) In dispatcher_read with state %d"
+					    , vrrp->iname, vrrp->state);
+
+
+		/* handle instance synchronization */
+#ifdef _TSM_DEBUG_
+		if (do_tsm_debug)
+			log_message(LOG_INFO, "Read [%s] TSM transition : [%d,%d] Wantstate = [%d]"
+					    , vrrp->iname, prev_state, vrrp->state, vrrp->wantstate);
+#endif
+		VRRP_TSM_HANDLE(prev_state, vrrp);
 
-/* Handle dispatcher read packet */
-static int
-vrrp_dispatcher_read(sock_t * sock)
-{
-	vrrp_t *vrrp;
-	vrrphdr_t *hd;
-	int len = 0, prev_state = 0, proto = 0;
-	uint32_t saddr;
-
-	/* Clean the read buffer */
-	memset(vrrp_buffer, 0, VRRP_PACKET_TEMP_LEN);
-
-	/* read & affect received buffer */
-	len = read(sock->fd_in, vrrp_buffer, VRRP_PACKET_TEMP_LEN);
-	hd = vrrp_get_header(sock->family, vrrp_buffer, &proto, &saddr);
-
-	/* Searching for matching instance */
-	vrrp = vrrp_index_lookup(hd->vrid, sock->fd_in);
-
-	/* If no instance found => ignore the advert */
-	if (!vrrp)
-		return sock->fd_in;
-
-	/* Run the FSM handler */
-	prev_state = vrrp->state;
-	VRRP_FSM_READ(vrrp, vrrp_buffer, len);
-
-	/* handle instance synchronization */
-//	printf("Read [%s] TSM transtition : [%d,%d] Wantstate = [%d]\n"
-//	       , vrrp->iname
-//	       , prev_state
-//	       , vrrp->state
-//	       , vrrp->wantstate);
-	VRRP_TSM_HANDLE(prev_state, vrrp);
-
-	/*
-	 * Refresh sands only if found matching instance.
-	 * Otherwize the packet is simply ignored...
-	 */
-	vrrp_init_instance_sands(vrrp);
+		/* If we have sent an advert, reset the timer */
+		if (vrrp->state != VRRP_STATE_MAST || !vrrp->lower_prio_no_advert)
+			vrrp_init_instance_sands(vrrp);
+	}
 
 	return sock->fd_in;
 }
 
 /* Our read packet dispatcher */
-int
-vrrp_read_dispatcher_thread(thread_t * thread)
+static int
+vrrp_read_dispatcher_thread(thread_ref_t thread)
 {
-	long vrrp_timer = 0;
 	sock_t *sock;
 	int fd;
 
@@ -936,148 +1023,332 @@ vrrp_read_dispatcher_thread(thread_t * thread)
 
 	/* Dispatcher state handler */
 	if (thread->type == THREAD_READ_TIMEOUT || sock->fd_in == -1)
-		fd = vrrp_dispatcher_read_to(sock->fd_in);
+		fd = vrrp_dispatcher_read_timeout(sock);
 	else
 		fd = vrrp_dispatcher_read(sock);
 
 	/* register next dispatcher thread */
-	vrrp_timer = vrrp_timer_fd(fd);
-	if (fd == -1)
-		sock->thread = thread_add_timer(thread->master, vrrp_read_dispatcher_thread,
-						sock, vrrp_timer);
-	else
-		sock->thread = thread_add_read(thread->master, vrrp_read_dispatcher_thread,
-					       sock, fd, vrrp_timer);
+	if (fd != -1)
+		sock->thread = thread_add_read_sands(thread->master, vrrp_read_dispatcher_thread,
+						     sock, fd, vrrp_compute_timer(sock), false);
 
 	return 0;
 }
 
-/* Script tracking threads */
 static int
-vrrp_script_thread(thread_t * thread)
+vrrp_script_thread(thread_ref_t thread)
 {
 	vrrp_script_t *vscript = THREAD_ARG(thread);
-	int status, ret;
-	pid_t pid;
+	int ret;
 
 	/* Register next timer tracker */
 	thread_add_timer(thread->master, vrrp_script_thread, vscript,
 			 vscript->interval);
 
-	/* Daemonization to not degrade our scheduling timer */
-	pid = fork();
-
-	/* In case of fork is error. */
-	if (pid < 0) {
-		log_message(LOG_INFO, "Failed fork process");
-		return -1;
-	}
+	if (vscript->state != SCRIPT_STATE_IDLE) {
+		/* We don't want the system to be overloaded with scripts that we are executing */
+		log_message(LOG_INFO, "Track script %s is %s, expect idle - skipping run",
+			    vscript->sname, vscript->state == SCRIPT_STATE_RUNNING ? "already running" : "being timed out");
 
-	/* In case of this is parent process */
-	if (pid) {
-		thread_add_child(thread->master, vrrp_script_child_thread,
-				 vscript, pid,
-				 (vscript->timeout) ? vscript->timeout : vscript->interval);
 		return 0;
 	}
 
-	/* Child part */
-	signal_handler_destroy();
-	closeall(0);
-	open("/dev/null", O_RDWR);
-	ret = dup(0);
-	if (ret < 0) {
-		log_message(LOG_INFO, "dup(0) error");
-	}
-
-	ret = dup(0);
-	if (ret < 0) {
-		log_message(LOG_INFO, "dup(0) error");
-	}
-
-	status = system_call(vscript->script);
+	/* Execute the script in a child process. Parent returns, child doesn't */
+	ret = system_call_script(thread->master, vrrp_script_child_thread,
+				  vscript, (vscript->timeout) ? vscript->timeout : vscript->interval,
+				  &vscript->script);
+	if (!ret)
+		vscript->state = SCRIPT_STATE_RUNNING;
 
-	if (status < 0 || !WIFEXITED(status))
-		status = 0; /* Script errors aren't server errors */
-	else
-		status = WEXITSTATUS(status);
-
-	exit(status);
+	return ret;
 }
 
 static int
-vrrp_script_child_thread(thread_t * thread)
+vrrp_script_child_thread(thread_ref_t thread)
 {
 	int wait_status;
+	pid_t pid;
 	vrrp_script_t *vscript = THREAD_ARG(thread);
+	int sig_num;
+	unsigned timeout = 0;
+	const char *script_exit_type = NULL;
+	bool script_success;
+	const char *reason = NULL;
+	int reason_code;
 
 	if (thread->type == THREAD_CHILD_TIMEOUT) {
-		pid_t pid;
-
 		pid = THREAD_CHILD_PID(thread);
 
-		/* The child hasn't responded. Kill it off. */
-		if (vscript->result > vscript->rise) {
-			vscript->result--;
-		} else {
-			if (vscript->result == vscript->rise)
-				log_message(LOG_INFO, "VRRP_Script(%s) timed out", vscript->sname);
-			vscript->result = 0;
+		if (vscript->state == SCRIPT_STATE_RUNNING) {
+			vscript->state = SCRIPT_STATE_REQUESTING_TERMINATION;
+			sig_num = SIGTERM;
+			timeout = 2;
+		} else if (vscript->state == SCRIPT_STATE_REQUESTING_TERMINATION) {
+			vscript->state = SCRIPT_STATE_FORCING_TERMINATION;
+			sig_num = SIGKILL;
+			timeout = 2;
+		} else if (vscript->state == SCRIPT_STATE_FORCING_TERMINATION) {
+			log_message(LOG_INFO, "Script %s child (PID %d) failed to terminate after kill", vscript->sname, pid);
+			sig_num = SIGKILL;
+			timeout = 10;	/* Give it longer to terminate */
+		}
+
+		/* Kill it off. */
+		if (timeout) {
+			/* If kill returns an error, we can't kill the process since either the process has terminated,
+			 * or we don't have permission. If we can't kill it, there is no point trying again. */
+			if (kill(-pid, sig_num)) {
+				if (errno == ESRCH) {
+					/* The process does not exist, and we should
+					 * have reaped its exit status, otherwise it
+					 * would exist as a zombie process. */
+					log_message(LOG_INFO, "Script %s child (PID %d) lost", vscript->sname, THREAD_CHILD_PID(thread));
+					vscript->state = SCRIPT_STATE_IDLE;
+					timeout = 0;
+				} else {
+					log_message(LOG_INFO, "kill -%d of process %s(%d) with new state %u failed with errno %d", sig_num, vscript->script.args[0], pid, vscript->state, errno);
+					timeout = 1000;
+				}
+			}
+		} else if (vscript->state != SCRIPT_STATE_IDLE) {
+			log_message(LOG_INFO, "Script %s child thread pid %d timeout with unknown script state %u", vscript->sname, pid, vscript->state);
+			timeout = 10;	/* We need some timeout */
 		}
-		kill(pid, SIGTERM);
-		thread_add_child(thread->master, vrrp_script_child_timeout_thread,
-				 vscript, pid, 2);
+
+		if (timeout)
+			thread_add_child(thread->master, vrrp_script_child_thread, vscript, pid, timeout * TIMER_HZ);
+
 		return 0;
 	}
 
 	wait_status = THREAD_CHILD_STATUS(thread);
 
 	if (WIFEXITED(wait_status)) {
-		int status;
-		status = WEXITSTATUS(wait_status);
+		int status = WEXITSTATUS(wait_status);
+
+		/* Report if status has changed */
+		if (status != vscript->last_status)
+			log_message(LOG_INFO, "Script `%s` now returning %d", vscript->sname, status);
+
 		if (status == 0) {
 			/* success */
+			script_exit_type = "succeeded";
+			script_success = true;
+		} else {
+			/* failure */
+			script_exit_type = "failed";
+			script_success = false;
+			reason = "exited with status";
+			reason_code = status;
+		}
+
+		vscript->last_status = status;
+	}
+	else if (WIFSIGNALED(wait_status)) {
+		if (vscript->state == SCRIPT_STATE_REQUESTING_TERMINATION && WTERMSIG(wait_status) == SIGTERM) {
+			/* The script terminated due to a SIGTERM, and we sent it a SIGTERM to
+			 * terminate the process. Now make sure any children it created have
+			 * died too. */
+			pid = THREAD_CHILD_PID(thread);
+			kill(-pid, SIGKILL);
+		}
+
+		/* We treat forced termination as a failure */
+		if ((vscript->state == SCRIPT_STATE_REQUESTING_TERMINATION && WTERMSIG(wait_status) == SIGTERM) ||
+		    (vscript->state == SCRIPT_STATE_FORCING_TERMINATION && (WTERMSIG(wait_status) == SIGKILL || WTERMSIG(wait_status) == SIGTERM)))
+			script_exit_type = "timed_out";
+		else {
+			script_exit_type = "failed";
+			reason = "due to signal";
+			reason_code = WTERMSIG(wait_status);
+		}
+		script_success = false;
+	}
+
+	if (script_exit_type) {
+		if (script_success) {
 			if (vscript->result < vscript->rise - 1) {
 				vscript->result++;
-			} else {
-				if (vscript->result < vscript->rise)
-					log_message(LOG_INFO, "VRRP_Script(%s) succeeded", vscript->sname);
+			} else if (vscript->result != vscript->rise + vscript->fall - 1) {
+				if (vscript->result < vscript->rise) {	/* i.e. == vscript->rise - 1 */
+					log_message(LOG_INFO, "VRRP_Script(%s) %s", vscript->sname, script_exit_type);
+					update_script_priorities(vscript, true);
+				}
 				vscript->result = vscript->rise + vscript->fall - 1;
 			}
 		} else {
-			/* failure */
 			if (vscript->result > vscript->rise) {
 				vscript->result--;
 			} else {
-				if (vscript->result >= vscript->rise)
-					log_message(LOG_INFO, "VRRP_Script(%s) failed", vscript->sname);
+				if (vscript->result == vscript->rise ||
+				    vscript->init_state == SCRIPT_INIT_STATE_INIT) {
+					if (reason)
+						log_message(LOG_INFO, "VRRP_Script(%s) %s (%s %d)", vscript->sname, script_exit_type, reason, reason_code);
+					else
+						log_message(LOG_INFO, "VRRP_Script(%s) %s", vscript->sname, script_exit_type);
+					update_script_priorities(vscript, false);
+				}
 				vscript->result = 0;
 			}
 		}
 	}
 
+	vscript->state = SCRIPT_STATE_IDLE;
+	vscript->init_state = SCRIPT_INIT_STATE_DONE;
+
 	return 0;
 }
 
+/* Delayed ARP/NA thread */
 static int
-vrrp_script_child_timeout_thread(thread_t * thread)
+vrrp_arpna_send(vrrp_t *vrrp, list l, timeval_t *n)
 {
-	pid_t pid;
+	ip_address_t *ipaddress;
+	interface_t *ifp;
+	element e;
 
-	if (thread->type != THREAD_CHILD_TIMEOUT)
-		return 0;
+	if (LIST_ISEMPTY(l))
+		return -1;
 
-	/* OK, it still hasn't exited. Now really kill it off. */
-	pid = THREAD_CHILD_PID(thread);
-	if (kill(pid, SIGKILL) < 0) {
-		/* Its possible it finished while we're handing this */
-		if (errno != ESRCH)
-			DBG("kill error: %s", strerror(errno));
-		return 0;
+	LIST_FOREACH(l, ipaddress, e) {
+		if (!ipaddress->garp_gna_pending)
+			continue;
+
+		if (!ipaddress->set) {
+			ipaddress->garp_gna_pending = false;
+			continue;
+		}
+
+		ifp = IF_BASE_IFP(ipaddress->ifp);
+
+		/* This should never happen */
+		if (!ifp->garp_delay) {
+			ipaddress->garp_gna_pending = false;
+			continue;
+		}
+
+		/* IPv4 handling */
+		if (!IP_IS6(ipaddress)) {
+			if (timercmp(&time_now, &ifp->garp_delay->garp_next_time, >=)) {
+				/* send_gratuitous_arp_immediate(ifp, ipaddress); */
+				send_gratuitous_arp(ipaddress);
+				ipaddress->garp_gna_pending = false;
+			} else {
+				vrrp->garp_pending = true;
+				if (timercmp(&ifp->garp_delay->garp_next_time, n, <))
+					*n = ifp->garp_delay->garp_next_time;
+			}
+			continue;
+		}
+
+		/* IPv6 handling */
+		if (timercmp(&time_now, &ifp->garp_delay->gna_next_time, >=)) {
+			ndisc_send_unsolicited_na_immediate(ifp, ipaddress);
+			ipaddress->garp_gna_pending = false;
+		} else {
+			vrrp->gna_pending = true;
+			if (timercmp(&ifp->garp_delay->gna_next_time, n, <))
+				*n = ifp->garp_delay->gna_next_time;
+		}
+	}
+
+	return 0;
+}
+
+int
+vrrp_arp_thread(thread_ref_t thread)
+{
+	vrrp_t *vrrp;
+	element e;
+	timeval_t next_time = {
+		.tv_sec = INT_MAX	/* We're never going to delay this long - I hope! */
+	};
+
+	set_time_now();
+
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		if (!vrrp->garp_pending && !vrrp->gna_pending)
+			continue;
+
+		vrrp->garp_pending = false;
+		vrrp->gna_pending = false;
+
+		if (vrrp->state != VRRP_STATE_MAST || !vrrp->vipset)
+			continue;
+
+		vrrp_arpna_send(vrrp, vrrp->vip, &next_time);
+		vrrp_arpna_send(vrrp, vrrp->evip, &next_time);
 	}
 
-	log_message(LOG_WARNING, "Process [%d] didn't respond to SIGTERM", pid);
-	waitpid(pid, NULL, 0);
+	if (next_time.tv_sec != INT_MAX) {
+		/* Register next timer tracker */
+		garp_next_time = next_time;
+		garp_thread = thread_add_timer(thread->master, vrrp_arp_thread, NULL,
+					       timer_long(timer_sub_now(next_time)));
+		return 0;
+	}
 
+	garp_thread = NULL;
 	return 0;
 }
+
+#ifdef _WITH_DUMP_THREADS_
+void
+dump_threads(void)
+{
+	FILE *fp;
+	char time_buf[26];
+	element e;
+	vrrp_t *vrrp;
+	const char *file_name;
+
+	file_name = make_file_name("/tmp/thread_dump.dat",
+					"vrrp",
+#if HAVE_DECL_CLONE_NEWNET
+					global_data->network_namespace,
+#else
+					NULL,
+#endif
+					global_data->instance_name);
+	fp = fopen_safe(file_name, "a");
+	FREE_CONST(file_name);
+
+	set_time_now();
+	ctime_r(&time_now.tv_sec, time_buf);
+
+	fprintf(fp, "\n%.19s.%6.6ld: Thread dump\n", time_buf, time_now.tv_usec);
+
+	dump_thread_data(master, fp);
+
+	fprintf(fp, "alloc = %lu\n", master->alloc);
+
+	fprintf(fp, "\n");
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		ctime_r(&vrrp->sands.tv_sec, time_buf);
+		fprintf(fp, "VRRP instance %s, sands %.19s.%6.6lu, status %s\n", vrrp->iname, time_buf, vrrp->sands.tv_usec,
+				vrrp->state == VRRP_STATE_INIT ? "INIT" :
+				vrrp->state == VRRP_STATE_BACK ? "BACKUP" :
+				vrrp->state == VRRP_STATE_MAST ? "MASTER" :
+				vrrp->state == VRRP_STATE_FAULT ? "FAULT" :
+				vrrp->state == VRRP_STATE_STOP ? "STOP" : "unknown");
+	}
+	fclose(fp);
+}
+#endif
+
+#ifdef THREAD_DUMP
+void
+register_vrrp_scheduler_addresses(void)
+{
+	register_thread_address("vrrp_arp_thread", vrrp_arp_thread);
+	register_thread_address("vrrp_dispatcher_init", vrrp_dispatcher_init);
+	register_thread_address("vrrp_gratuitous_arp_thread", vrrp_gratuitous_arp_thread);
+	register_thread_address("vrrp_lower_prio_gratuitous_arp_thread", vrrp_lower_prio_gratuitous_arp_thread);
+	register_thread_address("vrrp_script_child_thread", vrrp_script_child_thread);
+	register_thread_address("vrrp_script_thread", vrrp_script_thread);
+	register_thread_address("vrrp_read_dispatcher_thread", vrrp_read_dispatcher_thread);
+#ifdef _WITH_BFD_
+	register_thread_address("vrrp_bfd_thread", vrrp_bfd_thread);
+#endif
+}
+#endif
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_snmp.c b/tools/keepalived/keepalived/vrrp/vrrp_snmp.c
index 6df7795fe..a27ab7c31 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_snmp.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_snmp.c
@@ -17,35 +17,547 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+/*
+ * To test this code, one can use the following:
+ *
+ * Build keepalived with SNMP support with one or more of the following options
+     ./configure--enable-snmp-vrrp --enable-snmp-checker [or --enable-snmp to enable previous two options] \
+		 --enable-snmp-rfcv2 --enable-snmp-rfcv3 [or --enable-snmp-rfc to enable previous two options]
+
+ * Edit /etc/snmp/snmpd.conf to contain the following:
+     rocommunity public
+     rwcommunity private
+     master agentx
+
+     # agentaddress is what clients such as snmpwalk talk over to make SNMP requests and receive responses.
+     #   This can be specified as the "LISTENING ADDRESS" option to snmpd, and is the AGENT parameter to most
+     #   SNMP client commands. Processes using udp or tcp addresses will need to be in the same network
+     #    namespace.
+     # agentaddress udp:localhost:161		# default
+
+     # agentxsocket is what sub-agents (such as keepalived) communicate via with snmp. This is what keepalived
+     #   needs to match with its snmp_socket parameter, and can be specified to snmpd with the -x option.
+     # agentxsocket unix:/var/agentx/master	# default
+
+     trapcommunity public
+     trap2sink localhost:162
+
+ * Edit /etc/snmp/snmptrapd.conf to uncomment the following line:
+     authCommunity  log,execute,net public
+
+ * Put the MIB definition files in a place that will be found:
+     cp doc/[VK]*-MIB.txt /usr/share/snmp/mibs
+ *  or
+     cp doc/[VK]*-MIB.txt ~/.snmp/mibs
+
+ * Run snmpd (in background)
+     snmpd -LS0-6d [-x agentxsocket] [AGENT]
+    If running in a network namespace, run snmpd, snmptrapd etc in that network namespace. To specify
+    a different port/socket to listen on, see above in sample snmpd.conf
+
+ * Run snmptrapd (in foreground)
+     MIBS="+KEEPALIVED-MIB:VRRP-MIB:VRRPV3-MIB" snmptrapd -f -Lo
+ *  or if MIB files copied to ~/.snmp/mibs
+     MIBS="+KEEPALIVED-MIB:VRRP-MIB:VRRPV3-MIB" snmptrapd -f -M "+$HOME/.snmp/mibs" -Lo
+
+ * Enable SNMP in config file, by adding some or all of the following, depending on which configure options were chosen
+     enable_snmp	(enables enable_snmp_vrrp and enable_snmp_checker)
+     enable_snmp_vrrp
+     enable_snmp_checker
+     enable_snmp_rfc	(enables enable_snmp_rfcv2 enable_snmp_rfcv3)
+     enable_snmp_rfcv2
+     enable_snmp_rfcv3
+     enable_traps
+
+ * Run keepalived. Some traps/notifications should be generated which will be displayed on the terminal running snmptrapd
+
+ * To see the MIB trees, where localhost can be replaced by an appropriate AGENT, run (in the same namespace as snmpd)
+     MIBS="+KEEPALIVED-MIB" snmpwalk -v2c -c public localhost KEEPALIVED-MIB::keepalived
+    or
+     MIBS="+VRRP-MIB" snmpwalk -v2c -c public localhost VRRP-MIB::vrrpMIB
+    or
+     MIBS="+VRRPV3-MIB" snmpwalk -v2c -c public localhost VRRPV3-MIB::vrrpv3MIB
+
+ * To check the validity of a MIB file:
+     smilint doc/KEEPALIVED-MIB.txt
+
+ * Multiple instances of keepalived cannot register the same MIB
+     with the same instance of snmpd. In order for snmpd to work
+     with multiple instances of keepalived, there would need to be
+     one instance of snmpd per keepalived instance. Using unix domain
+     sockets will not work for this, unless each instance of snmpd
+     is configured to use a different socket, so use network domain
+     sockets e.g. to udp:localhost:705 which will enable keepalived to communicate
+     with its own instance of snmpd running in the same network namespace,
+     and then set snmp_socket in the keepalived global configuration.
+     To run snmpd use snmpd -LS0-6d -x udp:localhost:705, which it appears
+     should work but it doesn't seem to.
+
+ */
+
+#include "config.h"
+
+#if HAVE_DECL_RTA_PREF
+#include <linux/icmpv6.h>
+#endif
+#if HAVE_DECL_RTA_ENCAP
+#include <linux/lwtunnel.h>
+#endif
+#ifdef NETLINK_H_NEEDS_SYS_SOCKET_H
+#include <sys/socket.h>
+#endif
+#include <linux/fib_rules.h>
+#include <stdint.h>
+#include <inttypes.h>
+
 #include "vrrp.h"
 #include "vrrp_snmp.h"
-#include "vrrp_data.h"
 #include "vrrp_track.h"
 #include "vrrp_ipaddress.h"
+#ifdef _HAVE_FIB_ROUTING_
 #include "vrrp_iproute.h"
+#include "vrrp_iprule.h"
+#endif
+#include "vrrp_scheduler.h"
 #include "config.h"
-#include "vector.h"
 #include "list.h"
 #include "logger.h"
 #include "global_data.h"
+#include "bitops.h"
+#include "main.h"
+#include "rttables.h"
+#include "parser.h"
+#include "warnings.h"
+#include "utils.h"
+
+#include "snmp.h"
+
+#ifdef _WITH_SNMP_VRRP_
+/* VRRP SNMP defines */
+#define VRRP_OID KEEPALIVED_OID, 2
+
+enum snmp_vrrp_magic {
+	VRRP_SNMP_SCRIPT_NAME = 3,
+	VRRP_SNMP_SCRIPT_COMMAND,
+	VRRP_SNMP_SCRIPT_INTERVAL,
+	VRRP_SNMP_SCRIPT_WEIGHT,
+	VRRP_SNMP_SCRIPT_WEIGHT_REVERSE,
+	VRRP_SNMP_SCRIPT_RESULT,
+	VRRP_SNMP_SCRIPT_RISE,
+	VRRP_SNMP_SCRIPT_FALL,
+	VRRP_SNMP_FILE_NAME,
+	VRRP_SNMP_FILE_PATH,
+	VRRP_SNMP_FILE_RESULT,
+	VRRP_SNMP_FILE_WEIGHT,
+	VRRP_SNMP_FILE_WEIGHT_REVERSE,
+	VRRP_SNMP_BFD_NAME,
+	VRRP_SNMP_BFD_RESULT,
+	VRRP_SNMP_BFD_WEIGHT,
+	VRRP_SNMP_BFD_WEIGHT_REVERSE,
+	VRRP_SNMP_PROCESS_NAME,
+	VRRP_SNMP_PROCESS_PATH,
+	VRRP_SNMP_PROCESS_PARAMS,
+	VRRP_SNMP_PROCESS_PARAM_MATCH,
+	VRRP_SNMP_PROCESS_WEIGHT,
+	VRRP_SNMP_PROCESS_WEIGHT_REVERSE,
+	VRRP_SNMP_PROCESS_QUORUM,
+	VRRP_SNMP_PROCESS_QUORUM_MAX,
+	VRRP_SNMP_PROCESS_FORKDELAY,
+	VRRP_SNMP_PROCESS_TERMINATEDELAY,
+	VRRP_SNMP_PROCESS_FULLCOMMAND,
+	VRRP_SNMP_PROCESS_CURPROC,
+	VRRP_SNMP_PROCESS_RESULT,
+	VRRP_SNMP_ADDRESS_ADDRESSTYPE,
+	VRRP_SNMP_ADDRESS_VALUE,
+	VRRP_SNMP_ADDRESS_BROADCAST,
+	VRRP_SNMP_ADDRESS_MASK,
+	VRRP_SNMP_ADDRESS_SCOPE,
+	VRRP_SNMP_ADDRESS_IFINDEX,
+	VRRP_SNMP_ADDRESS_IFNAME,
+	VRRP_SNMP_ADDRESS_IFALIAS,
+	VRRP_SNMP_ADDRESS_ISSET,
+	VRRP_SNMP_ADDRESS_ISADVERTISED,
+	VRRP_SNMP_ADDRESS_PEER,
+	VRRP_SNMP_SYNCGROUP_NAME,
+	VRRP_SNMP_SYNCGROUP_STATE,
+	VRRP_SNMP_SYNCGROUP_TRACKINGWEIGHT,
+	VRRP_SNMP_SYNCGROUP_SMTPALERT,
+	VRRP_SNMP_SYNCGROUP_NOTIFYEXEC,
+	VRRP_SNMP_SYNCGROUP_SCRIPTMASTER,
+	VRRP_SNMP_SYNCGROUP_SCRIPTBACKUP,
+	VRRP_SNMP_SYNCGROUP_SCRIPTFAULT,
+	VRRP_SNMP_SYNCGROUP_SCRIPTSTOP,
+	VRRP_SNMP_SYNCGROUP_SCRIPT,
+	VRRP_SNMP_SYNCGROUPMEMBER_INSTANCE,
+	VRRP_SNMP_SYNCGROUPMEMBER_NAME,
+	VRRP_SNMP_INSTANCE_NAME,
+	VRRP_SNMP_INSTANCE_VIRTUALROUTERID,
+	VRRP_SNMP_INSTANCE_STATE,
+	VRRP_SNMP_INSTANCE_INITIALSTATE,
+	VRRP_SNMP_INSTANCE_WANTEDSTATE,
+	VRRP_SNMP_INSTANCE_BASEPRIORITY,
+	VRRP_SNMP_INSTANCE_EFFECTIVEPRIORITY,
+	VRRP_SNMP_INSTANCE_VIPSENABLED,
+	VRRP_SNMP_INSTANCE_PRIMARYINTERFACE,
+	VRRP_SNMP_INSTANCE_TRACKPRIMARYIF,
+	VRRP_SNMP_INSTANCE_ADVERTISEMENTSINT,
+	VRRP_SNMP_INSTANCE_PREEMPT,
+	VRRP_SNMP_INSTANCE_PREEMPTDELAY,
+	VRRP_SNMP_INSTANCE_AUTHTYPE,
+	VRRP_SNMP_INSTANCE_USELVSSYNCDAEMON,
+	VRRP_SNMP_INSTANCE_LVSSYNCINTERFACE,
+	VRRP_SNMP_INSTANCE_SYNCGROUP,
+	VRRP_SNMP_INSTANCE_GARPDELAY,
+	VRRP_SNMP_INSTANCE_SMTPALERT,
+	VRRP_SNMP_INSTANCE_NOTIFYEXEC,
+	VRRP_SNMP_INSTANCE_SCRIPTMASTER,
+	VRRP_SNMP_INSTANCE_SCRIPTBACKUP,
+	VRRP_SNMP_INSTANCE_SCRIPTFAULT,
+	VRRP_SNMP_INSTANCE_SCRIPTSTOP,
+	VRRP_SNMP_INSTANCE_SCRIPT,
+	VRRP_SNMP_INSTANCE_ACCEPT,
+	VRRP_SNMP_INSTANCE_PROMOTE_SECONDARIES,
+	VRRP_SNMP_INSTANCE_USE_LINKBEAT,
+	VRRP_SNMP_INSTANCE_VRRP_VERSION,
+	VRRP_SNMP_INSTANCE_SCRIPTMASTER_RX_LOWER_PRI,
+	VRRP_SNMP_TRACKEDINTERFACE_NAME,
+	VRRP_SNMP_TRACKEDINTERFACE_WEIGHT,
+	VRRP_SNMP_TRACKEDINTERFACE_WEIGHT_REVERSE,
+	VRRP_SNMP_TRACKEDSCRIPT_NAME,
+	VRRP_SNMP_TRACKEDSCRIPT_WEIGHT,
+	VRRP_SNMP_TRACKEDSCRIPT_WEIGHT_REVERSE,
+	VRRP_SNMP_TRACKEDFILE_NAME,
+	VRRP_SNMP_TRACKEDFILE_WEIGHT,
+	VRRP_SNMP_TRACKEDFILE_WEIGHT_REVERSE,
+	VRRP_SNMP_TRACKEDBFD_NAME,
+	VRRP_SNMP_TRACKEDBFD_WEIGHT,
+	VRRP_SNMP_TRACKEDBFD_WEIGHT_REVERSE,
+	VRRP_SNMP_TRACKEDPROCESS_NAME,
+	VRRP_SNMP_TRACKEDPROCESS_WEIGHT,
+	VRRP_SNMP_TRACKEDPROCESS_WEIGHT_REVERSE,
+	VRRP_SNMP_SGROUPTRACKEDINTERFACE_NAME,
+	VRRP_SNMP_SGROUPTRACKEDINTERFACE_WEIGHT,
+	VRRP_SNMP_SGROUPTRACKEDINTERFACE_WEIGHT_REVERSE,
+	VRRP_SNMP_SGROUPTRACKEDSCRIPT_NAME,
+	VRRP_SNMP_SGROUPTRACKEDSCRIPT_WEIGHT,
+	VRRP_SNMP_SGROUPTRACKEDSCRIPT_WEIGHT_REVERSE,
+	VRRP_SNMP_SGROUPTRACKEDFILE_NAME,
+	VRRP_SNMP_SGROUPTRACKEDFILE_WEIGHT,
+	VRRP_SNMP_SGROUPTRACKEDFILE_WEIGHT_REVERSE,
+	VRRP_SNMP_SGROUPTRACKEDBFD_NAME,
+	VRRP_SNMP_SGROUPTRACKEDBFD_WEIGHT,
+	VRRP_SNMP_SGROUPTRACKEDBFD_WEIGHT_REVERSE,
+	VRRP_SNMP_SGROUPTRACKEDPROCESS_NAME,
+	VRRP_SNMP_SGROUPTRACKEDPROCESS_WEIGHT,
+	VRRP_SNMP_SGROUPTRACKEDPROCESS_WEIGHT_REVERSE,
+};
+
+#ifdef _HAVE_FIB_ROUTING_
+enum snmp_rule_magic {
+	VRRP_SNMP_RULE_DIRECTION = 2,
+	VRRP_SNMP_RULE_ADDRESSTYPE,
+	VRRP_SNMP_RULE_ADDRESS,
+	VRRP_SNMP_RULE_ADDRESSMASK,
+	VRRP_SNMP_RULE_ROUTINGTABLE,
+	VRRP_SNMP_RULE_ISSET,
+	VRRP_SNMP_RULE_INVERT,
+	VRRP_SNMP_RULE_DESTINATIONADDRESSTYPE,
+	VRRP_SNMP_RULE_DESTINATIONADDRESS,
+	VRRP_SNMP_RULE_DESTINATIONADDRESSMASK,
+	VRRP_SNMP_RULE_SOURCEADDRESSTYPE,
+	VRRP_SNMP_RULE_SOURCEADDRESS,
+	VRRP_SNMP_RULE_SOURCEADDRESSMASK,
+	VRRP_SNMP_RULE_TOS,
+	VRRP_SNMP_RULE_FWMARK,
+	VRRP_SNMP_RULE_FWMASK,
+	VRRP_SNMP_RULE_REALM_DST,
+	VRRP_SNMP_RULE_REALM_SRC,
+	VRRP_SNMP_RULE_ININTERFACE,
+	VRRP_SNMP_RULE_OUTINTERFACE,
+	VRRP_SNMP_RULE_TARGET,
+	VRRP_SNMP_RULE_ACTION,
+	VRRP_SNMP_RULE_TABLE_NO,
+	VRRP_SNMP_RULE_PREFERENCE,
+	VRRP_SNMP_RULE_SUPPRESSPREFIXLEN,
+	VRRP_SNMP_RULE_SUPPRESSGROUP,
+	VRRP_SNMP_RULE_TUNNELID_HIGH,
+	VRRP_SNMP_RULE_TUNNELID_LOW,
+	VRRP_SNMP_RULE_UID_RANGE_START,
+	VRRP_SNMP_RULE_UID_RANGE_END,
+	VRRP_SNMP_RULE_L3MDEV,
+	VRRP_SNMP_RULE_PROTOCOL,
+	VRRP_SNMP_RULE_IP_PROTO,
+	VRRP_SNMP_RULE_SRC_PORT_START,
+	VRRP_SNMP_RULE_SRC_PORT_END,
+	VRRP_SNMP_RULE_DST_PORT_START,
+	VRRP_SNMP_RULE_DST_PORT_END,
+};
+
+enum snmp_route_magic {
+	VRRP_SNMP_ROUTE_ADDRESSTYPE = 2,
+	VRRP_SNMP_ROUTE_DESTINATION,
+	VRRP_SNMP_ROUTE_DESTINATIONMASK,
+	VRRP_SNMP_ROUTE_GATEWAY,
+	VRRP_SNMP_ROUTE_SECONDARYGATEWAY,
+	VRRP_SNMP_ROUTE_SOURCE,
+	VRRP_SNMP_ROUTE_METRIC,
+	VRRP_SNMP_ROUTE_SCOPE,
+	VRRP_SNMP_ROUTE_TYPE,
+	VRRP_SNMP_ROUTE_IFINDEX,
+	VRRP_SNMP_ROUTE_IFNAME,
+	VRRP_SNMP_ROUTE_ROUTINGTABLE,
+	VRRP_SNMP_ROUTE_ISSET,
+	VRRP_SNMP_ROUTE_FROM_ADDRESS,
+	VRRP_SNMP_ROUTE_FROM_ADDRESS_MASK,
+	VRRP_SNMP_ROUTE_TOS,
+	VRRP_SNMP_ROUTE_PROTOCOL,
+	VRRP_SNMP_ROUTE_ECN,
+	VRRP_SNMP_ROUTE_QUICK_ACK,
+	VRRP_SNMP_ROUTE_EXPIRES,
+	VRRP_SNMP_ROUTE_MTU,
+	VRRP_SNMP_ROUTE_MTU_LOCK,
+	VRRP_SNMP_ROUTE_HOP_LIMIT,
+	VRRP_SNMP_ROUTE_ADVMSS,
+	VRRP_SNMP_ROUTE_ADVMSS_LOCK,
+	VRRP_SNMP_ROUTE_RTT,
+	VRRP_SNMP_ROUTE_RTT_LOCK,
+	VRRP_SNMP_ROUTE_RTTVAR,
+	VRRP_SNMP_ROUTE_RTTVAR_LOCK,
+	VRRP_SNMP_ROUTE_REORDERING,
+	VRRP_SNMP_ROUTE_REORDERING_LOCK,
+	VRRP_SNMP_ROUTE_WINDOW,
+	VRRP_SNMP_ROUTE_CWND,
+	VRRP_SNMP_ROUTE_CWND_LOCK,
+	VRRP_SNMP_ROUTE_SSTHRESH,
+	VRRP_SNMP_ROUTE_SSTHRESH_LOCK,
+	VRRP_SNMP_ROUTE_RTOMIN,
+	VRRP_SNMP_ROUTE_RTOMIN_LOCK,
+	VRRP_SNMP_ROUTE_INIT_CWND,
+	VRRP_SNMP_ROUTE_INIT_RWND,
+	VRRP_SNMP_ROUTE_CONG_CTL,
+	VRRP_SNMP_ROUTE_PREF,
+	VRRP_SNMP_ROUTE_REALM_DST,
+	VRRP_SNMP_ROUTE_REALM_SRC,
+	VRRP_SNMP_ROUTE_ENCAP_TYPE,
+	VRRP_SNMP_ROUTE_ENCAP_MPLS_LABELS,
+	VRRP_SNMP_ROUTE_ENCAP_ID,
+	VRRP_SNMP_ROUTE_ENCAP_DST_ADDRESS,
+	VRRP_SNMP_ROUTE_ENCAP_SRC_ADDRESS,
+	VRRP_SNMP_ROUTE_ENCAP_TOS,
+	VRRP_SNMP_ROUTE_ENCAP_TTL,
+	VRRP_SNMP_ROUTE_ENCAP_FLAGS,
+	VRRP_SNMP_ROUTE_ENCAP_ILA_LOCATOR,
+	VRRP_SNMP_ROUTE_FASTOPEN_NO_COOKIE,
+};
+
+enum snmp_next_hop_magic {
+	VRRP_SNMP_ROUTE_NEXT_HOP_ADDRESS_TYPE = 2,
+	VRRP_SNMP_ROUTE_NEXT_HOP_ADDRESS,
+	VRRP_SNMP_ROUTE_NEXT_HOP_IF_INDEX,
+	VRRP_SNMP_ROUTE_NEXT_HOP_IF_NAME,
+	VRRP_SNMP_ROUTE_NEXT_HOP_WEIGHT,
+	VRRP_SNMP_ROUTE_NEXT_HOP_ONLINK,
+	VRRP_SNMP_ROUTE_NEXT_HOP_REALM_DST,
+	VRRP_SNMP_ROUTE_NEXT_HOP_REALM_SRC,
+	VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_TYPE,
+	VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_MPLS_LABELS,
+	VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_ID,
+	VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_DST_ADDRESS,
+	VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_SRC_ADDRESS,
+	VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_TOS,
+	VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_TTL,
+	VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_FLAGS,
+	VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_ILA_LOCATOR,
+};
+#endif
+
+#define HEADER_STATE_STATIC_ADDRESS 1
+#define HEADER_STATE_VIRTUAL_ADDRESS 2
+#define HEADER_STATE_EXCLUDED_VIRTUAL_ADDRESS 3
+#ifdef _HAVE_FIB_ROUTING_
+#define HEADER_STATE_STATIC_ROUTE 4
+#define HEADER_STATE_VIRTUAL_ROUTE 5
+#define HEADER_STATE_STATIC_RULE 6
+#define HEADER_STATE_VIRTUAL_RULE 7
+#endif
+#define HEADER_STATE_END 12
+
+#endif
+
+#ifdef _WITH_SNMP_RFCV2_
+/* RFC SNMP defines */
+#define VRRP_RFC_OID SNMP_OID_MIB2, 68
+#define VRRP_RFC_TRAP_OID VRRP_RFC_OID, 0
+
+/* Magic for RFC MIB functions */
+enum rfcv2_snmp_node_magic {
+	VRRP_RFC_SNMP_NODE_VER = 2,
+	VRRP_RFC_SNMP_NOTIF_CNTL
+};
+
+enum rfcv2_snmp_oper_magic {
+	VRRP_RFC_SNMP_OPER_AUTH_KEY = 3,
+	VRRP_RFC_SNMP_OPER_ADVERT_INT,
+	VRRP_RFC_SNMP_OPER_PREEMPT,
+	VRRP_RFC_SNMP_OPER_VR_UPTIME,
+	VRRP_RFC_SNMP_OPER_PROTO,
+	VRRP_RFC_SNMP_OPER_ROW_STAT,
+	VRRP_RFC_SNMP_OPER_VMAC,
+	VRRP_RFC_SNMP_OPER_STATE,
+	VRRP_RFC_SNMP_OPER_ADM_STATE,
+	VRRP_RFC_SNMP_OPER_PRI,
+	VRRP_RFC_SNMP_OPER_ADDR_CNT,
+	VRRP_RFC_SNMP_OPER_MIP,
+	VRRP_RFC_SNMP_OPER_PIP,
+	VRRP_RFC_SNMP_OPER_AUTH_TYPE
+};
+
+enum rfcv2_snmp_assoc_ip_magic {
+	VRRP_RFC_SNMP_ASSOC_IP_ADDR_ROW = 3
+};
+
+enum rfcv2_snmp_stats_err_magic {
+	VRRP_RFC_SNMP_STATS_CHK_ERR = 2,
+	VRRP_RFC_SNMP_STATS_VER_ERR,
+	VRRP_RFC_SNMP_STATS_VRID_ERR
+};
+
+enum rfcv2_snmp_stats_magic {
+	VRRP_RFC_SNMP_STATS_MASTER = 2,
+	VRRP_RFC_SNMP_STATS_AUTH_INV,
+	VRRP_RFC_SNMP_STATS_AUTH_MIS,
+	VRRP_RFC_SNMP_STATS_PL_ERR,
+	VRRP_RFC_SNMP_STATS_ADV_RCVD,
+	VRRP_RFC_SNMP_STATS_ADV_INT_ERR,
+	VRRP_RFC_SNMP_STATS_AUTH_FAIL,
+	VRRP_RFC_SNMP_STATS_TTL_ERR,
+	VRRP_RFC_SNMP_STATS_PRI_0_RCVD,
+	VRRP_RFC_SNMP_STATS_PRI_0_SENT,
+	VRRP_RFC_SNMP_STATS_INV_TYPE_RCVD,
+	VRRP_RFC_SNMP_STATS_ADDR_LIST_ERR
+};
+
+/*
+	VRRP_RFC_SNMP_CNFRM_MIB,
+	VRRP_RFC_SNMP_GRP_OPER,
+	VRRP_RFC_SNMP_GRP_STATS,
+	VRRP_RFC_SNMP_GRP_TRAP,
+	VRRP_RFC_SNMP_GRP_NOTIF
+*/
+#endif
+
+#ifdef _WITH_SNMP_RFCV3_
+/* RFC SNMP defines */
+#define VRRP_RFCv3_OID SNMP_OID_MIB2, 207
+#define VRRP_RFCv3_NOTIFY_OID VRRP_RFCv3_OID, 0
+
+/* Magic for RFC MIB functions */
+enum rfcv3_snmp_oper_magic {
+	VRRP_RFCv3_SNMP_OPER_MIP,
+	VRRP_RFCv3_SNMP_OPER_PIP,
+	VRRP_RFCv3_SNMP_OPER_VMAC,
+	VRRP_RFCv3_SNMP_OPER_STATE,
+	VRRP_RFCv3_SNMP_OPER_PRI,
+	VRRP_RFCv3_SNMP_OPER_ADDR_CNT,
+	VRRP_RFCv3_SNMP_OPER_ADVERT_INT,
+	VRRP_RFCv3_SNMP_OPER_PREEMPT,
+	VRRP_RFCv3_SNMP_OPER_ACCEPT,
+	VRRP_RFCv3_SNMP_OPER_VR_UPTIME,
+	VRRP_RFCv3_SNMP_OPER_ROW_STATUS
+};
+
+enum rfcv3_snmp_assoc_ip_magic {
+	VRRP_RFCv3_SNMP_ASSOC_IP_ADDR_ROW_STATUS = 3
+};
+
+enum rfcv3_snmp_stats_err_magic {
+	VRRP_RFCv3_SNMP_STATS_CHK_ERR = 2,
+	VRRP_RFCv3_SNMP_STATS_VER_ERR,
+	VRRP_RFCv3_SNMP_STATS_VRID_ERR,
+	VRRP_RFCv3_SNMP_STATS_DISC_TIME
+};
+
+enum rfcv3_snmp_stats_magic {
+	VRRP_RFCv3_SNMP_STATS_MASTER = 2,
+	VRRP_RFCv3_SNMP_STATS_MASTER_REASON,
+	VRRP_RFCv3_SNMP_STATS_ADV_RCVD,
+	VRRP_RFCv3_SNMP_STATS_ADV_INT_ERR,
+	VRRP_RFCv3_SNMP_STATS_TTL_ERR,
+	VRRP_RFCv3_SNMP_STATS_PROTO_ERR_REASON,
+	VRRP_RFCv3_SNMP_STATS_PRI_0_RCVD,
+	VRRP_RFCv3_SNMP_STATS_PRI_0_SENT,
+	VRRP_RFCv3_SNMP_STATS_INV_TYPE_RCVD,
+	VRRP_RFCv3_SNMP_STATS_ADDR_LIST_ERR,
+	VRRP_RFCv3_SNMP_STATS_PL_ERR,
+	VRRP_RFCv3_SNMP_STATS_ROW_DISC_TIME,
+	VRRP_RFCv3_SNMP_STATS_REFRESH_RATE
+};
+
+/*
+	VRRP_RFCv3_SNMP_CNFRM_MIB,
+	VRRP_RFCv3_SNMP_GRP_OPER,
+	VRRP_RFCv3_SNMP_GRP_STATS,
+	VRRP_RFCv3_SNMP_GRP_TRAP,
+	VRRP_RFCv3_SNMP_GRP_NOTIF
+*/
+#endif
+
+/* Static return value */
+static longret_t long_ret;
+#ifdef _WITH_SNMP_VRRP_
+static char buf[MAXBUF];
+#endif
+
+/* global variable */
+#ifdef _WITH_SNMP_RFC_
+timeval_t vrrp_start_time;
+#endif
+
+
+/* For some reason net-snmp doesn't use a uint64_t for 64 bit counters, but rather uses
+ * a struct, with the high word at the lower address, so we need to assign values according. */
+inline static void
+set_counter64 (struct counter64 *c64, uint64_t val)
+{
+	c64->high = val >> 32;
+	c64->low = val & 0xffffffff;
+}
+
+#ifdef _FOR_DEBUGGING_
+static void
+sprint_oid(char *str, const oid* oid, int len)
+{
+	int offs = 0;
+	int i;
+
+	if (!len) {
+		str[0] = '.';
+		str[1] = 0;
+		return;
+	}
 
+	for (i = 0; i < len; i++)
+		offs += sprintf(str + offs, ".%lu", oid[i]);
+}
+#endif
 
+#ifdef _WITH_SNMP_VRRP_
 /* Convert VRRP state to SNMP state */
-static unsigned long
+static int
 vrrp_snmp_state(int state)
 {
-	return (state<VRRP_STATE_GOTO_MASTER)?state:4;
+	return state <= VRRP_STATE_FAULT ? state : 4;
 }
 
 static u_char*
 vrrp_snmp_script(struct variable *vp, oid *name, size_t *length,
 		 int exact, size_t *var_len, WriteMethod **write_method)
 {
-        static unsigned long long_ret;
 	vrrp_script_t *scr;
+	snmp_ret_t ret;
 
 	if ((scr = (vrrp_script_t *)snmp_header_list_table(vp, name, length, exact,
 							   var_len, write_method,
@@ -55,70 +567,225 @@ vrrp_snmp_script(struct variable *vp, oid *name, size_t *length,
 	switch (vp->magic) {
 	case VRRP_SNMP_SCRIPT_NAME:
 		*var_len = strlen(scr->sname);
-		return (u_char *)scr->sname;
+		ret.cp = scr->sname;
+		return ret.p;
 	case VRRP_SNMP_SCRIPT_COMMAND:
-		*var_len = strlen(scr->script);
-		return (u_char *)scr->script;
+		cmd_str_r(&scr->script, buf, sizeof(buf));
+		*var_len = strlen(buf);
+		return (u_char *)buf;
 	case VRRP_SNMP_SCRIPT_INTERVAL:
-		long_ret = scr->interval / TIMER_HZ;
+		long_ret.u = scr->interval / TIMER_HZ;
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_SCRIPT_WEIGHT:
-		long_ret = scr->weight;
+		long_ret.s = scr->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_SCRIPT_WEIGHT_REVERSE:
+		long_ret.u = scr->weight_reverse ? 1 : 2;
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_SCRIPT_RESULT:
-		switch (scr->result) {
-		case VRRP_SCRIPT_STATUS_INIT:
-			long_ret = 1; break;
-		case VRRP_SCRIPT_STATUS_INIT_GOOD:
-			long_ret = 4; break;
-		case VRRP_SCRIPT_STATUS_DISABLED:
-			long_ret = 0; break;
+		switch (scr->init_state) {
+		case SCRIPT_INIT_STATE_INIT:
+			long_ret.u = 1; break;
+		case SCRIPT_INIT_STATE_FAILED:
+			long_ret.u = 5; break;
 		default:
-			long_ret = (scr->result >= scr->rise) ? 3 : 2;
+			long_ret.u = (scr->result >= scr->rise) ? 3 : 2;
 		}
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_SCRIPT_RISE:
-		long_ret = scr->rise;
+		long_ret.s = scr->rise;
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_SCRIPT_FALL:
-		long_ret = scr->fall;
+		long_ret.s = scr->fall;
+		return (u_char *)&long_ret;
+	default:
+		break;
+	}
+	return NULL;
+}
+
+static u_char*
+vrrp_snmp_file(struct variable *vp, oid *name, size_t *length,
+		 int exact, size_t *var_len, WriteMethod **write_method)
+{
+	vrrp_tracked_file_t *file;
+	snmp_ret_t ret;
+
+	if ((file = (vrrp_tracked_file_t *)snmp_header_list_table(vp, name, length, exact,
+							   var_len, write_method,
+							   vrrp_data->vrrp_track_files)) == NULL)
+		return NULL;
+
+	switch (vp->magic) {
+	case VRRP_SNMP_FILE_NAME:
+		*var_len = strlen(file->fname);
+		ret.cp = file->fname;
+		return ret.p;
+	case VRRP_SNMP_FILE_PATH:
+		*var_len = strlen(file->file_path);
+		ret.cp = file->file_path;
+		return ret.p;
+	case VRRP_SNMP_FILE_RESULT:
+		long_ret.s = file->last_status;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_FILE_WEIGHT:
+		long_ret.s = file->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_FILE_WEIGHT_REVERSE:
+		long_ret.u = file->weight_reverse ? 1 : 2;
+		return (u_char *)&long_ret;
+	default:
+		break;
+	}
+	return NULL;
+}
+
+#ifdef _WITH_BFD_
+static u_char*
+vrrp_snmp_bfd(struct variable *vp, oid *name, size_t *length,
+		 int exact, size_t *var_len, WriteMethod **write_method)
+{
+	vrrp_tracked_bfd_t *bfd;
+	snmp_ret_t ret;
+
+	if ((bfd = (vrrp_tracked_bfd_t *)snmp_header_list_table(vp, name, length, exact,
+							   var_len, write_method,
+							   vrrp_data->vrrp_track_bfds)) == NULL)
+		return NULL;
+
+	switch (vp->magic) {
+	case VRRP_SNMP_BFD_NAME:
+		*var_len = strlen(bfd->bname);
+		ret.cp = bfd->bname;
+		return ret.p;
+	case VRRP_SNMP_BFD_RESULT:
+		long_ret.s = bfd->bfd_up;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_BFD_WEIGHT:
+		long_ret.s = bfd->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_BFD_WEIGHT_REVERSE:
+		long_ret.u = bfd->weight_reverse ? 1 : 2;
+		return (u_char *)&long_ret;
+	default:
+		break;
+	}
+	return NULL;
+}
+#endif
+
+#ifdef _WITH_CN_PROC_
+static u_char*
+vrrp_snmp_process(struct variable *vp, oid *name, size_t *length,
+		 int exact, size_t *var_len, WriteMethod **write_method)
+{
+	vrrp_tracked_process_t *proc;
+	snmp_ret_t ret;
+
+	if ((proc = (vrrp_tracked_process_t *)snmp_header_list_table(vp, name, length, exact,
+							   var_len, write_method,
+							   vrrp_data->vrrp_track_processes)) == NULL)
+		return NULL;
+
+	switch (vp->magic) {
+	case VRRP_SNMP_PROCESS_NAME:
+		*var_len = strlen(proc->pname);
+		ret.cp = proc->pname;
+		return ret.p;
+	case VRRP_SNMP_PROCESS_PATH:
+		*var_len = strlen(proc->process_path);
+		ret.cp = proc->process_path;
+		return ret.p;
+	case VRRP_SNMP_PROCESS_PARAMS:
+		if (!proc->process_params_len) {
+			*var_len = 0;
+			ret.cp = "";
+		} else {
+			/* We need to replace the nul terminators with spaces */
+			size_t len;
+			unsigned i;
+
+			len = proc->process_params_len - 1 < sizeof(buf) ? proc->process_params_len - 1 : sizeof(buf);
+			memcpy(buf, proc->process_params, len);
+			buf[sizeof(buf) - 1] = '\0';
+
+			for (i = strlen(buf); i < len; i += strlen(buf + i)) {
+				buf[i++] = ' ';
+				if (i >= len)
+					break;
+			}
+			*var_len = len;
+			ret.cp = buf;
+		}
+		return ret.p;
+	case VRRP_SNMP_PROCESS_PARAM_MATCH:
+		long_ret.u = proc->param_match;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_PROCESS_WEIGHT:
+		long_ret.u = proc->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_PROCESS_WEIGHT_REVERSE:
+		long_ret.u = proc->weight_reverse ? 1 : 2;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_PROCESS_QUORUM:
+		long_ret.u = proc->quorum;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_PROCESS_QUORUM_MAX:
+		long_ret.u = proc->quorum_max;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_PROCESS_FORKDELAY:
+		long_ret.u = proc->fork_delay;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_PROCESS_TERMINATEDELAY:
+		long_ret.u = proc->terminate_delay;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_PROCESS_FULLCOMMAND:
+		long_ret.u = proc->full_command ? 1 : 2;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_PROCESS_CURPROC:
+		long_ret.u = proc->num_cur_proc;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_PROCESS_RESULT:
+		long_ret.u = proc->have_quorum ? 1 : 2;
 		return (u_char *)&long_ret;
 	default:
 		break;
-        }
-        return NULL;
+	}
+	return NULL;
 }
+#endif
 
 /* Header function using a FSM. `state' is the initial state, either
-   HEADER_STATE_STATIC_ADDRESS or HEADER_STATE_STATIC_ROUTE. We return
-   the matching address or route. */
+   HEADER_STATE_STATIC_ADDRESS, HEADER_STATE_STATIC_ROUTE or
+   HEADER_STATE_STATIC_RULE. We return the matching address, route or rule. */
 static void*
 vrrp_header_ar_table(struct variable *vp, oid *name, size_t *length,
 		     int exact, size_t *var_len, WriteMethod **write_method,
 		     int *state)
 {
-        oid *target, current[2], best[2];
-        int result, target_len;
+	oid *target, current[2], best[2];
+	int result;
+	size_t target_len;
 	element e1 = NULL, e2;
 	void *el, *bel = NULL;
 	list l2;
-	int curinstance = 0;
+	unsigned curinstance = 0;
 	int curstate, nextstate;
 
-        if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
-                memcpy(name, vp->name, sizeof(oid) * vp->namelen);
-                *length = vp->namelen;
-        }
+	if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
+		memcpy(name, vp->name, sizeof(oid) * vp->namelen);
+		*length = vp->namelen;
+	}
 
 	*write_method = 0;
-	*var_len = sizeof(long);
+	*var_len = sizeof(unsigned long);
 
 	/* We search the best match: equal if exact, the lower OID in
 	   the set of the OID strictly superior to the target
 	   otherwise. */
-        best[0] = best[1] = MAX_SUBID; /* Our best match */
-        target = &name[vp->namelen];   /* Our target match */
-        target_len = *length - vp->namelen;
+	best[0] = best[1] = MAX_SUBID; /* Our best match */
+	target = &name[vp->namelen];   /* Our target match */
+	target_len = *length - vp->namelen;
 
 	nextstate = *state;
 	while (nextstate != HEADER_STATE_END) {
@@ -152,9 +819,11 @@ vrrp_header_ar_table(struct variable *vp, oid *name, size_t *length,
 			break;
 		case HEADER_STATE_EXCLUDED_VIRTUAL_ADDRESS:
 			/* Try excluded virtual addresses */
+			/* coverity[var_deref_op] */
 			l2 = ((vrrp_t *)ELEMENT_DATA(e1))->evip;
 			nextstate = HEADER_STATE_VIRTUAL_ADDRESS;
 			break;
+#ifdef _HAVE_FIB_ROUTING_
 		case HEADER_STATE_STATIC_ROUTE:
 			/* Try static routes */
 			l2 = vrrp_data->static_routes;
@@ -175,6 +844,27 @@ vrrp_header_ar_table(struct variable *vp, oid *name, size_t *length,
 			current[1] = 0;
 			nextstate = HEADER_STATE_VIRTUAL_ROUTE;
 			break;
+		case HEADER_STATE_STATIC_RULE:
+			/* Try static routes */
+			l2 = vrrp_data->static_rules;
+			current[1] = 0;
+			nextstate = HEADER_STATE_VIRTUAL_RULE;
+			break;
+		case HEADER_STATE_VIRTUAL_RULE:
+			/* Try virtual rules */
+			if (LIST_ISEMPTY(vrrp_data->vrrp) ||
+			    ((e1 != NULL) && (ELEMENT_NEXT(e1), !e1))) {
+				nextstate = HEADER_STATE_END;
+				continue;
+			}
+			curinstance++;
+			if (e1 == NULL)
+				e1 = LIST_HEAD(vrrp_data->vrrp);
+			l2 = ((vrrp_t *)ELEMENT_DATA(e1))->vrules;
+			current[1] = 0;
+			nextstate = HEADER_STATE_VIRTUAL_RULE;
+			break;
+#endif
 		default:
 			return NULL; /* Big problem! */
 		}
@@ -214,16 +904,84 @@ vrrp_header_ar_table(struct variable *vp, oid *name, size_t *length,
 		/* No exact match */
 		return NULL;
 	/* Let's use our best match */
-        memcpy(target, best, sizeof(oid) * 2);
-        *length = vp->namelen + 2;
+	memcpy(target, best, sizeof(oid) * 2);
+	*length = (unsigned)vp->namelen + 2;
+
 	return bel;
 }
 
+#ifdef _HAVE_FIB_ROUTING_
+#define MAX_PTR ((void*)((char *)NULL - 1))
+static nexthop_t*
+vrrp_header_nh_table(struct variable *vp, oid *name, size_t *length,
+		     int exact, size_t *var_len, WriteMethod **write_method)
+{
+	oid *target;
+	int result;
+	size_t target_len;
+	element e1, e2, e3;
+	list l2, l3;
+	oid curinstance[3];
+	bool same;
+
+	if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
+		memcpy(name, vp->name, sizeof(oid) * vp->namelen);
+		*length = vp->namelen;
+	}
+
+	*write_method = 0;
+	*var_len = sizeof(unsigned long);
+
+	/* We search the best match: equal if exact, the lower OID in
+	   the set of the OID strictly superior to the target
+	   otherwise. */
+	target = &name[vp->namelen];   /* Our target match */
+	target_len = *length - vp->namelen;
+	if (exact && !target_len)
+		return NULL;
+
+	for (e1 = MAX_PTR, curinstance[0] = 0; e1; e1 = ((e1 == MAX_PTR) ? (LIST_ISEMPTY(vrrp_data->vrrp) ? NULL : LIST_HEAD(vrrp_data->vrrp)) : e1->next), curinstance[0]++) {
+		if (exact && curinstance[0] > target[0])
+			return NULL;
+		if (target_len && curinstance[0] < target[0])
+			continue;
+		same = (target_len && curinstance[0] == target[0]);
+		l2 = (e1 == MAX_PTR) ? vrrp_data->static_routes : ((vrrp_t *)ELEMENT_DATA(e1))->vroutes;
+		if (LIST_ISEMPTY(l2))
+			continue;
+		for (e2 = LIST_HEAD(l2), curinstance[1] = 1; e2; ELEMENT_NEXT(e2), curinstance[1]++) {
+			if (exact && curinstance[1] > target[1])
+				return NULL;
+			if (same && curinstance[1] < target[1])
+				continue;
+			same = (same && curinstance[1] == target[1]);
+			l3 = ((ip_route_t *)ELEMENT_DATA(e2))->nhs;
+			if (LIST_ISEMPTY(l3))
+				continue;
+			for (e3 = LIST_HEAD(l3), curinstance[2] = 1; e3; ELEMENT_NEXT(e3), curinstance[2]++) {
+				if (exact && target_len && curinstance[2] > target[2])
+					return NULL;
+				if (same && curinstance[2] < target[2])
+					continue;
+
+				if (target_len && !exact && curinstance[0] == target[0] && curinstance[1] == target[1] && curinstance[2] == target[2])
+					continue;
+
+				memcpy(target, curinstance, sizeof(oid) * 3);
+				*length = (unsigned)vp->namelen + 3;
+
+				return ELEMENT_DATA(e3);
+			}
+		}
+	}
+	return NULL;
+}
+#endif
+
 static u_char*
 vrrp_snmp_address(struct variable *vp, oid *name, size_t *length,
 		 int exact, size_t *var_len, WriteMethod **write_method)
 {
-        static unsigned long long_ret;
 	ip_address_t *addr;
 	int state = HEADER_STATE_STATIC_ADDRESS;
 
@@ -235,29 +993,29 @@ vrrp_snmp_address(struct variable *vp, oid *name, size_t *length,
 
 	switch (vp->magic) {
 	case VRRP_SNMP_ADDRESS_ADDRESSTYPE:
-		long_ret = (addr->ifa.ifa_family == AF_INET6)?2:1;
-		return (u_char *)&long_ret;		
+		long_ret.u = (addr->ifa.ifa_family == AF_INET6)?2:1;
+		return (u_char *)&long_ret;
 	case VRRP_SNMP_ADDRESS_VALUE:
 		if (addr->ifa.ifa_family == AF_INET6) {
-			*var_len = 16;
+			*var_len = sizeof addr->u.sin6_addr;
 			return (u_char *)&addr->u.sin6_addr;
 		} else {
-			*var_len = 4;
+			*var_len = sizeof addr->u.sin.sin_addr;
 			return (u_char *)&addr->u.sin.sin_addr;
 		}
 		break;
 	case VRRP_SNMP_ADDRESS_BROADCAST:
 		if (addr->ifa.ifa_family == AF_INET6) break;
-		*var_len = 4;
+		*var_len = sizeof addr->u.sin.sin_brd;
 		return (u_char *)&addr->u.sin.sin_brd;
 	case VRRP_SNMP_ADDRESS_MASK:
-		long_ret = addr->ifa.ifa_prefixlen;
+		long_ret.u = addr->ifa.ifa_prefixlen;
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_ADDRESS_SCOPE:
-		long_ret = snmp_scope(addr->ifa.ifa_scope);
+		long_ret.u = snmp_scope(addr->ifa.ifa_scope);
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_ADDRESS_IFINDEX:
-		long_ret = addr->ifa.ifa_index;
+		long_ret.u = addr->ifp->ifindex;
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_ADDRESS_IFNAME:
 		*var_len = strlen(addr->ifp->ifname);
@@ -269,29 +1027,41 @@ vrrp_snmp_address(struct variable *vp, oid *name, size_t *length,
 		}
 		break;
 	case VRRP_SNMP_ADDRESS_ISSET:
-		long_ret = (addr->set)?1:2;
+		long_ret.u = (addr->set)?1:2;
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_ADDRESS_ISADVERTISED:
-		long_ret = (state == HEADER_STATE_VIRTUAL_ADDRESS)?1:2;
+		long_ret.u = (state == HEADER_STATE_VIRTUAL_ADDRESS)?1:2;
 		return (u_char *)&long_ret;
+	case VRRP_SNMP_ADDRESS_PEER:
+		if (!addr->have_peer)
+			break;
+		if (addr->ifa.ifa_family == AF_INET6) {
+			*var_len = sizeof addr->peer.sin6_addr;
+			return (u_char *)&addr->peer.sin6_addr;
+		} else {
+			*var_len = sizeof addr->peer.sin_addr;
+			return (u_char *)&addr->peer.sin_addr;
+		}
+		break;
 	default:
 		return NULL;
-        }
+	}
 	/* If we are here, we asked for a non existent data. Try the
 	   next one. */
 	if (!exact && (name[*length-1] < MAX_SUBID))
 		return vrrp_snmp_address(vp, name, length,
 					 exact, var_len, write_method);
-        return NULL;
+	return NULL;
 }
 
+#ifdef _HAVE_FIB_ROUTING_
 static u_char*
 vrrp_snmp_route(struct variable *vp, oid *name, size_t *length,
 		 int exact, size_t *var_len, WriteMethod **write_method)
 {
-        static unsigned long long_ret;
 	ip_route_t *route;
 	int state = HEADER_STATE_STATIC_ROUTE;
+	nexthop_t *gw2;
 
 	if ((route = (ip_route_t *)
 	     vrrp_header_ar_table(vp, name, length, exact,
@@ -301,784 +1071,3315 @@ vrrp_snmp_route(struct variable *vp, oid *name, size_t *length,
 
 	switch (vp->magic) {
 	case VRRP_SNMP_ROUTE_ADDRESSTYPE:
-		long_ret = 1;	/* IPv4 only */
+		long_ret.u = AF_INET;	/* IPv4 only */
+		if (route->dst)
+			long_ret.u = route->dst->ifa.ifa_family;
+		else if (route->src)
+			long_ret.u = route->src->ifa.ifa_family;
+		else if (route->pref_src)
+			long_ret.u = route->pref_src->ifa.ifa_family;
+		if (long_ret.u == AF_INET6)
+			long_ret.u = 2;
+		else
+			long_ret.u = 1;
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_ROUTE_DESTINATION:
-		*var_len = 4;
-		return (u_char *)&route->dst;
+		if (!route->dst)
+			break;
+		if (route->dst->ifa.ifa_family == AF_INET6) {
+			*var_len = sizeof route->dst->u.sin6_addr;
+			return (u_char *)&route->dst->u.sin6_addr;
+		}
+		*var_len = sizeof route->dst->u.sin.sin_addr;
+		return (u_char *)&route->dst->u.sin.sin_addr;
 	case VRRP_SNMP_ROUTE_DESTINATIONMASK:
-		long_ret = route->dmask;
+		if (!route->dst)
+			break;
+		long_ret.u = route->dst->ifa.ifa_prefixlen;
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_ROUTE_GATEWAY:
-		*var_len = 4;
-		return (u_char *)&route->gw;
+		if (!route->via)
+			break;
+		if (route->via->ifa.ifa_family == AF_INET6) {
+			*var_len = sizeof route->via->u.sin6_addr;
+			return (u_char *)&route->via->u.sin6_addr;
+		}
+		*var_len = sizeof route->via->u.sin.sin_addr;
+		return (u_char *)&route->via->u.sin.sin_addr;
 	case VRRP_SNMP_ROUTE_SECONDARYGATEWAY:
-		if (route->gw2) {
-			*var_len = 4;
-			return (u_char *)&route->gw2;
+		if (LIST_ISEMPTY(route->nhs) || LIST_SIZE(route->nhs) != 1)
+			break;
+		gw2 = LIST_HEAD(route->nhs)->data;
+#if HAVE_DECL_RTA_ENCAP
+		if (gw2->encap.type != LWTUNNEL_ENCAP_NONE)
+			break;
+#endif
+		if (gw2->addr->ifa.ifa_family == AF_INET6) {
+			*var_len = sizeof gw2->addr->u.sin6_addr;
+			return (u_char *)&gw2->addr->u.sin6_addr;
 		}
-		break;
+		*var_len = sizeof gw2->addr->u.sin.sin_addr;
+		return (u_char *)&gw2->addr->u.sin.sin_addr;
 	case VRRP_SNMP_ROUTE_SOURCE:
-		*var_len = 4;
-		return (u_char *)&route->src;
+		if (!route->pref_src)
+			break;
+		if (route->pref_src->ifa.ifa_family == AF_INET6) {
+			*var_len = sizeof route->pref_src->u.sin6_addr;
+			return (u_char *)&route->pref_src->u.sin6_addr;
+		}
+		*var_len = sizeof route->pref_src->u.sin.sin_addr;
+		return (u_char *)&route->pref_src->u.sin.sin_addr;
 	case VRRP_SNMP_ROUTE_METRIC:
-		long_ret = route->metric;
+		long_ret.u = route->metric;
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_ROUTE_SCOPE:
-		long_ret = snmp_scope(route->scope);
+		long_ret.u = snmp_scope(route->scope);
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_ROUTE_TYPE:
-		if (route->blackhole)
-			long_ret = 3;
-		else if (route->gw2)
-			long_ret = 2;
-		else long_ret = 1;
+		if (!LIST_ISEMPTY(route->nhs))
+			long_ret.u = 2;
+		else if (route->type == RTN_BLACKHOLE)
+			long_ret.u = 3;
+		else if (route->type == RTN_ANYCAST)
+			long_ret.u = 4;
+		else if (route->type == RTN_MULTICAST)
+			long_ret.u = 5;
+		else if (route->type == RTN_BROADCAST)
+			long_ret.u = 6;
+		else if (route->type == RTN_UNREACHABLE)
+			long_ret.u = 7;
+		else if (route->type == RTN_PROHIBIT)
+			long_ret.u = 8;
+		else if (route->type == RTN_THROW)
+			long_ret.u = 9;
+		else if (route->type == RTN_NAT)
+			long_ret.u = 10;
+		else if (route->type == RTN_XRESOLVE)
+			long_ret.u = 11;
+		else
+			long_ret.u = 1;
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_ROUTE_IFINDEX:
-		long_ret = route->index;
+		if (!route->oif)
+			break;
+		long_ret.u = route->oif->ifindex;
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_ROUTE_IFNAME:
-		if (route->index) {
-			*var_len = strlen(IF_NAME(if_get_by_ifindex(route->index)));
-			return (u_char *)&IF_NAME(if_get_by_ifindex(route->index));
-		}
-		break;
+		if (!route->oif)
+			break;
+		*var_len = strlen(IF_NAME(route->oif));
+		return (u_char *)&IF_NAME(route->oif);
 	case VRRP_SNMP_ROUTE_ROUTINGTABLE:
-		long_ret = route->table;
+		long_ret.u = route->table;
 		return (u_char *)&long_ret;
 	case VRRP_SNMP_ROUTE_ISSET:
-		long_ret = (route->set)?1:2;
+		long_ret.u = (route->set)?1:2;
 		return (u_char *)&long_ret;
-	default:
-		return NULL;
-        }
-	/* If we are here, we asked for a non existent data. Try the
-	   next one. */
-	if (!exact && (name[*length-1] < MAX_SUBID))
-		return vrrp_snmp_route(vp, name, length,
-				       exact, var_len, write_method);
-        return NULL;
-}
-
-static u_char*
-vrrp_snmp_syncgroup(struct variable *vp, oid *name, size_t *length,
-		 int exact, size_t *var_len, WriteMethod **write_method)
-{
-        static unsigned long long_ret;
-	vrrp_sgroup_t *group;
-
-	if ((group = (vrrp_sgroup_t *)
-	     snmp_header_list_table(vp, name, length, exact,
-				    var_len, write_method,
-				    vrrp_data->vrrp_sync_group)) == NULL)
-		return NULL;
-
-	switch (vp->magic) {
-	case VRRP_SNMP_SYNCGROUP_NAME:
-		*var_len = strlen(group->gname);
-		return (u_char *)group->gname;
-	case VRRP_SNMP_SYNCGROUP_STATE:
-		long_ret = vrrp_snmp_state(group->state);
+	case VRRP_SNMP_ROUTE_FROM_ADDRESS:
+		if (!route->src)
+			break;
+		if (route->src->ifa.ifa_family == AF_INET6) {
+			*var_len = sizeof route->src->u.sin6_addr;
+			return (u_char *)&route->src->u.sin6_addr;
+		} else {
+			*var_len = sizeof route->src->u.sin.sin_addr;
+			return (u_char *)&route->src->u.sin.sin_addr;
+		}
+	case VRRP_SNMP_ROUTE_FROM_ADDRESS_MASK:
+		if (!route->src)
+			break;
+		long_ret.u = route->src->ifa.ifa_prefixlen;
 		return (u_char *)&long_ret;
-	case VRRP_SNMP_SYNCGROUP_SMTPALERT:
-		long_ret = group->smtp_alert?1:2;
+	case VRRP_SNMP_ROUTE_TOS:
+		if (!(route->mask & IPROUTE_BIT_DSFIELD))
+			break;
+		long_ret.u = route->tos;
 		return (u_char *)&long_ret;
-	case VRRP_SNMP_SYNCGROUP_NOTIFYEXEC:
-		long_ret = group->notify_exec?1:2;
+	case VRRP_SNMP_ROUTE_PROTOCOL:
+		if (!(route->mask & IPROUTE_BIT_PROTOCOL))
+			break;
+		long_ret.s = route->protocol + 1;
 		return (u_char *)&long_ret;
-	case VRRP_SNMP_SYNCGROUP_SCRIPTMASTER:
-		if (group->script_master) {
-			*var_len = strlen(group->script_master);
-			return (u_char *)group->script_master;
-		}
-		break;
-	case VRRP_SNMP_SYNCGROUP_SCRIPTBACKUP:
-		if (group->script_backup) {
-			*var_len = strlen(group->script_backup);
-			return (u_char *)group->script_backup;
-		}
-		break;
-	case VRRP_SNMP_SYNCGROUP_SCRIPTFAULT:
-		if (group->script_fault) {
-			*var_len = strlen(group->script_fault);
-			return (u_char *)group->script_fault;
-		}
-		break;
-	case VRRP_SNMP_SYNCGROUP_SCRIPT:
-		if (group->script) {
-			*var_len = strlen(group->script);
-			return (u_char *)group->script;
-		}
+	case VRRP_SNMP_ROUTE_ECN:
+		long_ret.s = 2 - !!(route->features & RTAX_FEATURE_ECN);
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_QUICK_ACK:
+		long_ret.u = 2 - !!(route->mask & IPROUTE_BIT_QUICKACK);
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_EXPIRES:
+#if !HAVE_DECL_RTA_EXPIRES
 		break;
-	default:
-		return NULL;
-        }
-	/* If we are here, we asked for a non existent data. Try the
-	   next one. */
-	if (!exact && (name[*length-1] < MAX_SUBID))
-		return vrrp_snmp_syncgroup(vp, name, length,
-					   exact, var_len, write_method);
-        return NULL;
-}
+#else
+		if (!(route->mask & IPROUTE_BIT_EXPIRES))
+			break;
+		long_ret.u = route->expires;
+		return (u_char *)&long_ret;
+#endif
+	case VRRP_SNMP_ROUTE_MTU:
+		if (!(route->mask & IPROUTE_BIT_MTU))
+			break;
+		long_ret.u = route->mtu;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_MTU_LOCK:
+		if (!(route->mask & IPROUTE_BIT_MTU))
+			break;
+		long_ret.u = 2 - !!(route->lock & (1<<RTAX_MTU));
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_HOP_LIMIT:
+		if (!(route->mask & IPROUTE_BIT_HOPLIMIT))
+			break;
+		long_ret.u = route->hoplimit;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_ADVMSS:
+		if (!(route->mask & IPROUTE_BIT_HOPLIMIT))
+			break;
+		long_ret.u = route->advmss;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_ADVMSS_LOCK:
+		if (!(route->mask & IPROUTE_BIT_ADVMSS))
+			break;
+		long_ret.u = 2 - !!(route->lock & (1<<RTAX_ADVMSS));
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_RTT:
+		if (!(route->mask & IPROUTE_BIT_RTT))
+			break;
+		long_ret.u = route->rtt / 8;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_RTT_LOCK:
+		if (!(route->mask & IPROUTE_BIT_RTT))
+			break;
+		long_ret.u = 2 - !!(route->lock & (1<<RTAX_RTT));
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_RTTVAR:
+		if (!(route->mask & IPROUTE_BIT_RTTVAR))
+			break;
+		long_ret.u = route->rttvar / 4;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_RTTVAR_LOCK:
+		if (!(route->mask & IPROUTE_BIT_RTTVAR))
+			break;
+		long_ret.u = 2 - !!(route->lock & (1<<RTAX_RTTVAR));
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_REORDERING:
+		if (!(route->mask & IPROUTE_BIT_REORDERING))
+			break;
+		long_ret.u = route->reordering;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_REORDERING_LOCK:
+		if (!(route->mask & IPROUTE_BIT_REORDERING))
+			break;
+		long_ret.u = 2 - !!(route->lock & (1<<RTAX_REORDERING));
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_WINDOW:
+		if (!(route->mask & IPROUTE_BIT_WINDOW))
+			break;
+		long_ret.u = route->window;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_CWND:
+		if (!(route->mask & IPROUTE_BIT_CWND))
+			break;
+		long_ret.u = route->cwnd;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_CWND_LOCK:
+		if (!(route->mask & IPROUTE_BIT_CWND))
+			break;
+		long_ret.u = 2 - !!(route->lock & (1<<RTAX_CWND));
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_SSTHRESH:
+		if (!(route->mask & IPROUTE_BIT_SSTHRESH))
+			break;
+		long_ret.u = route->ssthresh;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_SSTHRESH_LOCK:
+		if (!(route->mask & IPROUTE_BIT_SSTHRESH))
+			break;
+		long_ret.u = 2 - !!(route->lock & (1<<RTAX_SSTHRESH));
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_RTOMIN:
+		if (!(route->mask & IPROUTE_BIT_RTO_MIN))
+			break;
+		long_ret.u = route->rto_min;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_RTOMIN_LOCK:
+		if (!(route->mask & IPROUTE_BIT_RTO_MIN))
+			break;
+		long_ret.u = 2 - !!(route->lock & (1<<RTAX_RTO_MIN));
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_INIT_CWND:
+		if (!(route->mask & IPROUTE_BIT_INITCWND))
+			break;
+		long_ret.u = route->initcwnd;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_INIT_RWND:
+		if (!(route->mask & IPROUTE_BIT_INITRWND))
+			break;
+		long_ret.u = route->initrwnd;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_CONG_CTL:
+#if !HAVE_DECL_RTAX_CC_ALGO
+		break;
+#else
+		if (!route->congctl)
+			break;
+		*var_len = strlen(route->congctl);
+		return (u_char *)route->congctl;
+#endif
+	case VRRP_SNMP_ROUTE_PREF:
+#if !HAVE_DECL_RTA_PREF
+		break;
+#else
+		if (!(route->mask & IPROUTE_BIT_PREF))
+			break;
+		long_ret.u =
+			route->pref == ICMPV6_ROUTER_PREF_LOW ? 1 :
+			route->pref == ICMPV6_ROUTER_PREF_MEDIUM ? 2 :
+			route->pref == ICMPV6_ROUTER_PREF_HIGH ? 3 : 0;
+		return (u_char *)&long_ret;
+#endif
+	case VRRP_SNMP_ROUTE_FASTOPEN_NO_COOKIE:
+#if !HAVE_DECL_RTAX_FASTOPEN_NO_COOKIE
+		break;
+#else
+		if (!(route->mask & IPROUTE_BIT_FASTOPEN_NO_COOKIE))
+			break;
+		long_ret.u = route->fastopen_no_cookie;
+		return (u_char *)&long_ret;
+#endif
+	case VRRP_SNMP_ROUTE_REALM_DST:
+		if (!route->realms)
+			break;
+		long_ret.u = route->realms & 0xFFFF;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_REALM_SRC:
+		if (!(route->realms & 0xFFFF0000))
+			break;
+		long_ret.u = route->realms >> 16;
+		return (u_char *)&long_ret;
+	default:
+		return NULL;
+	}
+
+	/* If we are here, we asked for a non existent data. Try the
+	   next one. */
+	if (!exact && (name[*length-1] < MAX_SUBID))
+		return vrrp_snmp_route(vp, name, length,
+				       exact, var_len, write_method);
+	return NULL;
+}
+
+#if HAVE_DECL_RTA_ENCAP
+static u_char*
+vrrp_snmp_encap(struct variable *vp, oid *name, size_t *length,
+		 int exact, size_t *var_len, WriteMethod **write_method)
+{
+	ip_route_t *route;
+	nexthop_t *nh;
+	encap_t *encap;
+	int state = HEADER_STATE_STATIC_ROUTE;
+	static struct counter64 c64;
+#if HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+	static char labels[11*MAX_MPLS_LABELS];
+	char *op;
+	unsigned i;
+#endif
+
+	if (vp->name[vp->namelen - 3] == 7) {
+		if ((route = (ip_route_t *)vrrp_header_ar_table(vp, name, length, exact,
+					  var_len, write_method,
+					  &state)) == NULL)
+			return NULL;
+		encap = &route->encap;
+	}
+	else {
+		if ((nh = vrrp_header_nh_table(vp, name, length, exact,
+					  var_len, write_method)) == NULL)
+			return NULL;
+		encap = &nh->encap;
+	}
+
+// TODO - enable this to work for main route or next hop - following in a separate function callable by both
+	if (encap->type != LWTUNNEL_ENCAP_NONE) {
+		if (vp->magic == VRRP_SNMP_ROUTE_ENCAP_TYPE) {
+			long_ret.s = encap->type + 1;
+			return (u_char *)&long_ret;
+		}
+
+		if (encap->type == LWTUNNEL_ENCAP_IP ||
+			 encap->type == LWTUNNEL_ENCAP_IP6) {
+			switch(vp->magic) {
+			case VRRP_SNMP_ROUTE_ENCAP_ID:
+				if (!(encap->flags & IPROUTE_BIT_ENCAP_ID))
+					break;
+				*var_len = sizeof(c64);
+				set_counter64 (&c64, encap->ip.id);
+				return (u_char *)&c64;
+			case VRRP_SNMP_ROUTE_ENCAP_DST_ADDRESS:
+				if (!encap->ip.dst)
+					break;
+				if (encap->ip.dst->ifa.ifa_family == AF_INET6) {
+					*var_len = sizeof(encap->ip.dst->u.sin6_addr);
+					return (u_char *)&encap->ip.dst->u.sin6_addr;
+				}
+				*var_len = sizeof(encap->ip.dst->u.sin.sin_addr.s_addr);
+				return (u_char *)&encap->ip.dst->u.sin.sin_addr.s_addr;
+			case VRRP_SNMP_ROUTE_ENCAP_SRC_ADDRESS:
+				if (!encap->ip.src)
+					break;
+				if (encap->ip.src->ifa.ifa_family == AF_INET6) {
+					*var_len = sizeof(encap->ip.src->u.sin6_addr);
+					return (u_char *)&encap->ip.src->u.sin6_addr;
+				}
+				*var_len = sizeof(encap->ip.src->u.sin.sin_addr.s_addr);
+				return (u_char *)&encap->ip.src->u.sin.sin_addr.s_addr;
+			case VRRP_SNMP_ROUTE_ENCAP_TOS:
+				if (!(encap->flags & IPROUTE_BIT_ENCAP_DSFIELD))
+					break;
+				long_ret.u = encap->ip.tos;
+				return (u_char *)&long_ret;
+			case VRRP_SNMP_ROUTE_ENCAP_TTL:
+				if (!(encap->flags & IPROUTE_BIT_ENCAP_TTL))
+					break;
+				long_ret.u = encap->ip.ttl;
+				return (u_char *)&long_ret;
+			case VRRP_SNMP_ROUTE_ENCAP_FLAGS:
+				if (!(encap->flags & IPROUTE_BIT_ENCAP_FLAGS))
+					break;
+				long_ret.u = encap->ip.flags;
+				return (u_char *)&long_ret;
+			}
+		}
+#if HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+		else if (encap->type == LWTUNNEL_ENCAP_MPLS) {
+			if (vp->magic == VRRP_SNMP_ROUTE_ENCAP_MPLS_LABELS) {
+				op = labels;
+				for (i = 0; i < encap->mpls.num_labels; i++)
+					op += snprintf(op, (size_t)(labels + sizeof(labels) - op), "%s%u", i ? "/" : "", encap->mpls.addr[i].entry);
+				*var_len = strlen(labels);
+				return (u_char *)labels;
+			}
+		}
+#endif
+#if HAVE_DECL_LWTUNNEL_ENCAP_ILA
+		else if (encap->type == LWTUNNEL_ENCAP_ILA) {
+			if (vp->magic == VRRP_SNMP_ROUTE_ENCAP_ILA_LOCATOR) {
+				*var_len = sizeof(c64);
+				set_counter64 (&c64, encap->ila.locator);
+				return (u_char *)&c64;
+			}
+		}
+#endif
+	}
+
+	/* If we are here, we asked for a non existent data. Try the
+	   next one. */
+	if (!exact && (name[*length-1] < MAX_SUBID))
+		return vrrp_snmp_encap(vp, name, length,
+				       exact, var_len, write_method);
+	return NULL;
+}
+#endif
+
+static u_char*
+vrrp_snmp_next_hop(struct variable *vp, oid *name, size_t *length,
+		 int exact, size_t *var_len, WriteMethod **write_method)
+{
+	nexthop_t *nh;
+
+	if ((nh = vrrp_header_nh_table(vp, name, length, exact,
+				  var_len, write_method)) == NULL)
+		return NULL;
+
+	switch (vp->magic) {
+	case VRRP_SNMP_ROUTE_NEXT_HOP_ADDRESS_TYPE:
+		if (!nh->addr)
+			break;
+		long_ret.u = (nh->addr->ifa.ifa_family == AF_INET6) ? 2 : 1;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_NEXT_HOP_ADDRESS:
+		if (!nh->addr)
+			break;
+		if (nh->addr->ifa.ifa_family == AF_INET6) {
+			*var_len = sizeof nh->addr->u.sin6_addr;
+			return (u_char *)&nh->addr->u.sin6_addr;
+		}
+		*var_len = sizeof nh->addr->u.sin.sin_addr;
+		return (u_char *)&nh->addr->u.sin.sin_addr;
+	case VRRP_SNMP_ROUTE_NEXT_HOP_IF_INDEX:
+		if (!nh->ifp)
+			break;
+		long_ret.u = nh->ifp->ifindex;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_NEXT_HOP_IF_NAME:
+		if (!nh->ifp)
+			break;
+		*var_len = strlen(nh->ifp->ifname);
+		return (u_char *)&nh->ifp->ifname;
+	case VRRP_SNMP_ROUTE_NEXT_HOP_WEIGHT:
+		 if (!(nh->mask & IPROUTE_BIT_WEIGHT))
+			break;
+		long_ret.s = nh->weight + 1;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_NEXT_HOP_ONLINK:
+		long_ret.u = 2 - !!(nh->flags & RTNH_F_ONLINK);
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_NEXT_HOP_REALM_DST:
+		if (!nh->realms)
+			break;
+		long_ret.u = nh->realms & 0xFFFF;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_ROUTE_NEXT_HOP_REALM_SRC:
+		if (!(nh->realms & 0xFFFF0000))
+			break;
+		long_ret.u = nh->realms >> 16;
+		return (u_char *)&long_ret;
+	default:
+		break;
+	}
+
+	/* If we are here, we asked for a non existent data. Try the
+	   next one. */
+	if (!exact && (name[*length-1] < MAX_SUBID))
+		return vrrp_snmp_next_hop(vp, name, length,
+				       exact, var_len, write_method);
+	return NULL;
+}
+
+static u_char*
+vrrp_snmp_rule(struct variable *vp, oid *name, size_t *length,
+		 int exact, size_t *var_len, WriteMethod **write_method)
+{
+	ip_rule_t *rule;
+	int state = HEADER_STATE_STATIC_RULE;
+	const char *str;
+	ip_address_t *addr;
+
+	if ((rule = (ip_rule_t *)
+	     vrrp_header_ar_table(vp, name, length, exact,
+				  var_len, write_method,
+				  &state)) == NULL)
+		return NULL;
+
+	switch (vp->magic) {
+	case VRRP_SNMP_RULE_DIRECTION:	/* obsolete */
+		str = rule->to_addr ? rule->from_addr ? "both" : "to" : rule->from_addr ? "from" : "";
+		*var_len = strlen(str);
+		return (u_char *)no_const_char_p(str);
+	case VRRP_SNMP_RULE_ADDRESSTYPE:	/* obsolete */
+		addr = rule->to_addr ? rule->to_addr : rule->from_addr;
+		if (!addr)
+			break;
+		long_ret.u = addr->ifa.ifa_family == AF_INET6 ? 2 : 1;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_ADDRESS:	/* obsolete */
+		addr = rule->to_addr ? rule->to_addr : rule->from_addr;
+		if (!addr)
+			break;
+		if (addr->ifa.ifa_family == AF_INET6) {
+			*var_len = sizeof(addr->u.sin6_addr);
+			return (u_char *)&addr->u.sin6_addr;
+		}
+		*var_len = sizeof(addr->u.sin.sin_addr);
+		return (u_char *)&addr->u.sin.sin_addr;
+	case VRRP_SNMP_RULE_ADDRESSMASK:	/* obsolete */
+		addr = rule->to_addr ? rule->to_addr : rule->from_addr;
+		if (!addr)
+			break;
+		long_ret.u = addr->ifa.ifa_prefixlen;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_ROUTINGTABLE:
+		if (rule->action != FR_ACT_TO_TBL)
+			break;
+		long_ret.u = rule->table;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_ISSET:
+		long_ret.u = (rule->set)?1:2;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_INVERT:
+		long_ret.s = 2 - rule->invert;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_DESTINATIONADDRESSTYPE:
+		if (!rule->to_addr)
+			break;
+		long_ret.u = (rule->to_addr->ifa.ifa_family == AF_INET6) ? 2 : 1;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_DESTINATIONADDRESS:
+		if (!rule->to_addr)
+			break;
+		if (rule->to_addr->ifa.ifa_family == AF_INET6) {
+			*var_len = sizeof(rule->to_addr->u.sin6_addr);
+			return (u_char *)&rule->to_addr->u.sin6_addr;
+		}
+		*var_len = sizeof(rule->to_addr->u.sin.sin_addr);
+		return (u_char *)&rule->to_addr->u.sin.sin_addr;
+	case VRRP_SNMP_RULE_DESTINATIONADDRESSMASK:
+		if (!rule->to_addr)
+			break;
+		long_ret.u = rule->to_addr->ifa.ifa_prefixlen;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_SOURCEADDRESSTYPE:
+		if (!rule->from_addr)
+			break;
+		long_ret.u = (rule->from_addr->ifa.ifa_family == AF_INET6) ? 2 : 1;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_SOURCEADDRESS:
+		if (!rule->from_addr)
+			break;
+		if (rule->from_addr->ifa.ifa_family == AF_INET6) {
+			*var_len = sizeof(rule->from_addr->u.sin6_addr);
+			return (u_char *)&rule->from_addr->u.sin6_addr;
+		}
+		*var_len = sizeof(rule->from_addr->u.sin.sin_addr);
+		return (u_char *)&rule->from_addr->u.sin.sin_addr;
+	case VRRP_SNMP_RULE_SOURCEADDRESSMASK:
+		if (!rule->from_addr)
+			break;
+		long_ret.u = rule->from_addr->ifa.ifa_prefixlen;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_TOS:
+		long_ret.u = rule->tos;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_FWMARK:
+		if (rule->mask & IPRULE_BIT_FWMARK)
+			long_ret.u = rule->fwmark;
+		else
+			break;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_FWMASK:
+		if (rule->mask & IPRULE_BIT_FWMASK)
+			long_ret.u = rule->fwmask;
+		else
+			break;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_REALM_DST:
+		if (!rule->realms)
+			break;
+		long_ret.u = rule->realms & 0xFFFF;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_REALM_SRC:
+		if (!(rule->realms & 0xFFFF0000))
+			break;
+		long_ret.u = rule->realms >> 16;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_ININTERFACE:
+		if (!rule->iif)
+			break;
+		*var_len = strlen(rule->iif->ifname);
+		return (u_char *)rule->iif->ifname;
+#if HAVE_DECL_FRA_OIFNAME
+	case VRRP_SNMP_RULE_OUTINTERFACE:
+		if (!rule->oif)
+			break;
+		*var_len = strlen(rule->oif->ifname);
+		return (u_char *)rule->oif->ifname;
+#endif
+	case VRRP_SNMP_RULE_TARGET:
+		if (!(rule->action == FR_ACT_GOTO))
+			break;
+		long_ret.u = rule->goto_target;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_ACTION:
+		long_ret.u = rule->action;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_TABLE_NO:
+		if (rule->action != FR_ACT_TO_TBL)
+			break;
+		long_ret.u = rule->table;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_PREFERENCE:
+		if (!rule->priority)
+			break;
+		long_ret.u = rule->priority;
+		return (u_char *)&long_ret;
+#if HAVE_DECL_FRA_SUPPRESS_PREFIXLEN
+	case VRRP_SNMP_RULE_SUPPRESSPREFIXLEN:
+		if (rule->suppress_prefix_len != -1)
+			long_ret.u = rule->suppress_prefix_len;
+		else
+			break;
+		return (u_char *)&long_ret;
+#endif
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+	case VRRP_SNMP_RULE_SUPPRESSGROUP:
+		if (rule->mask & IPRULE_BIT_SUP_GROUP) {
+RELAX_CAST_QUAL_START
+			str = (char *)get_rttables_group(rule->suppress_group);
+RELAX_CAST_QUAL_END
+			*var_len = strlen(str);
+		}
+		else
+			break;
+		return (u_char *)no_const_char_p(str);
+#endif
+#if HAVE_DECL_FRA_TUN_ID
+	case VRRP_SNMP_RULE_TUNNELID_HIGH:
+		if (rule->tunnel_id)
+			long_ret.u = rule->tunnel_id >> 32;
+		else
+			break;
+		return (u_char *)&long_ret;
+#endif
+#if HAVE_DECL_FRA_TUN_ID
+	case VRRP_SNMP_RULE_TUNNELID_LOW:
+		if (rule->tunnel_id)
+			long_ret.u = rule->tunnel_id & 0xffffffff;
+		else
+			break;
+		return (u_char *)&long_ret;
+#endif
+#if HAVE_DECL_FRA_UID_RANGE
+	case VRRP_SNMP_RULE_UID_RANGE_START:
+		if (rule->mask & IPRULE_BIT_UID_RANGE)
+			long_ret.u = rule->uid_range.start;
+		else
+			break;
+		return (u_char *)&long_ret;
+#endif
+#if HAVE_DECL_FRA_UID_RANGE
+	case VRRP_SNMP_RULE_UID_RANGE_END:
+		if (rule->mask & IPRULE_BIT_UID_RANGE)
+			long_ret.u = rule->uid_range.end;
+		else
+			break;
+		return (u_char *)&long_ret;
+#endif
+#if HAVE_DECL_FRA_L3MDEV
+	case VRRP_SNMP_RULE_L3MDEV:
+		if (rule->l3mdev)
+			long_ret.u = 1;
+		else
+			break;
+		return (u_char *)&long_ret;
+#endif
+#if HAVE_DECL_FRA_PROTOCOL
+	case VRRP_SNMP_RULE_PROTOCOL:
+		if (rule->mask & IPRULE_BIT_PROTOCOL)
+			long_ret.u = rule->protocol;
+		else
+			break;
+		return (u_char *)&long_ret;
+#endif
+#if HAVE_DECL_FRA_IP_PROTO
+	case VRRP_SNMP_RULE_IP_PROTO:
+		if (rule->mask & IPRULE_BIT_IP_PROTO)
+			long_ret.u = rule->ip_proto;
+		else
+			break;
+		return (u_char *)&long_ret;
+#endif
+#if HAVE_DECL_FRA_SPORT_RANGE
+	case VRRP_SNMP_RULE_SRC_PORT_START:
+		if (rule->mask & IPRULE_BIT_SPORT_RANGE)
+			long_ret.u = rule->src_port.start;
+		else
+			break;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_SRC_PORT_END:
+		if (rule->mask & IPRULE_BIT_SPORT_RANGE)
+			long_ret.u = rule->src_port.end;
+		else
+			break;
+		return (u_char *)&long_ret;
+#endif
+#if HAVE_DECL_FRA_DPORT_RANGE
+	case VRRP_SNMP_RULE_DST_PORT_START:
+		if (rule->mask & IPRULE_BIT_DPORT_RANGE)
+			long_ret.u = rule->dst_port.start;
+		else
+			break;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_RULE_DST_PORT_END:
+		if (rule->mask & IPRULE_BIT_DPORT_RANGE)
+			long_ret.u = rule->dst_port.end;
+		else
+			break;
+		return (u_char *)&long_ret;
+#endif
+	default:
+		return NULL;
+	}
+	/* If we are here, we asked for a non existent data. Try the
+	   next one. */
+	if (!exact && (name[*length-1] < MAX_SUBID))
+		return vrrp_snmp_rule(vp, name, length,
+				       exact, var_len, write_method);
+	return NULL;
+}
+#endif	// _HAVE_FIB_ROUTING_
+
+static u_char*
+vrrp_snmp_syncgroup(struct variable *vp, oid *name, size_t *length,
+		 int exact, size_t *var_len, WriteMethod **write_method)
+{
+	vrrp_sgroup_t *group;
+	snmp_ret_t ret;
+
+	if ((group = (vrrp_sgroup_t *)
+	     snmp_header_list_table(vp, name, length, exact,
+				    var_len, write_method,
+				    vrrp_data->vrrp_sync_group)) == NULL)
+		return NULL;
+
+	switch (vp->magic) {
+	case VRRP_SNMP_SYNCGROUP_NAME:
+		*var_len = strlen(group->gname);
+		ret.cp = group->gname;
+		return ret.p;
+	case VRRP_SNMP_SYNCGROUP_STATE:
+		long_ret.s = vrrp_snmp_state(group->state);
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_SYNCGROUP_TRACKINGWEIGHT:
+		long_ret.u = group->sgroup_tracking_weight?1:2;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_SYNCGROUP_SMTPALERT:
+		long_ret.u = group->smtp_alert?1:2;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_SYNCGROUP_NOTIFYEXEC:
+		long_ret.u = group->notify_exec?1:2;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_SYNCGROUP_SCRIPTMASTER:
+		if (group->script_master) {
+			cmd_str_r(group->script_master, buf, sizeof(buf));
+			*var_len = strlen(buf);
+			return (u_char *)buf;
+		}
+		break;
+	case VRRP_SNMP_SYNCGROUP_SCRIPTBACKUP:
+		if (group->script_backup) {
+			cmd_str_r(group->script_backup, buf, sizeof(buf));
+			*var_len = strlen(buf);
+			return (u_char *)buf;
+		}
+		break;
+	case VRRP_SNMP_SYNCGROUP_SCRIPTFAULT:
+		if (group->script_fault) {
+			cmd_str_r(group->script_fault, buf, sizeof(buf));
+			*var_len = strlen(buf);
+			return (u_char *)buf;
+		}
+		break;
+	case VRRP_SNMP_SYNCGROUP_SCRIPTSTOP:
+		if (group->script_stop) {
+			cmd_str_r(group->script_stop, buf, sizeof(buf));
+			*var_len = strlen(buf);
+			return (u_char *)buf;
+		}
+		break;
+	case VRRP_SNMP_SYNCGROUP_SCRIPT:
+		if (group->script) {
+			cmd_str_r(group->script, buf, sizeof(buf));
+			*var_len = strlen(buf);
+			return (u_char *)buf;
+		}
+		break;
+	default:
+		return NULL;
+	}
+	/* If we are here, we asked for a non existent data. Try the
+	   next one. */
+	if (!exact && (name[*length-1] < MAX_SUBID))
+		return vrrp_snmp_syncgroup(vp, name, length,
+					   exact, var_len, write_method);
+	return NULL;
+}
+
+static u_char*
+vrrp_snmp_syncgroupmember(struct variable *vp, oid *name, size_t *length,
+			  int exact, size_t *var_len, WriteMethod **write_method)
+{
+	snmp_ret_t ret;
+	vrrp_t *vrrp;
+	element e;
+
+	e = snmp_find_element(vp, name, length, exact, var_len, write_method, vrrp_data->vrrp_sync_group, offsetof(vrrp_sgroup_t, vrrp_instances));
+	if (!e)
+		return NULL;
+
+	vrrp = ELEMENT_DATA(e);
+	ret.cp = vrrp->iname;
+	*var_len = strlen(ret.cp);
+	return ret.p;
+}
+
+static vrrp_t *
+_get_instance(oid *name, size_t name_len)
+{
+	oid instance;
+	element e;
+	vrrp_t *vrrp = NULL;
+
+	if (name_len < 1) return NULL;
+	instance = name[name_len - 1];
+
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		if (--instance == 0) break;
+	}
+	return vrrp;
+}
+
+#ifdef _WITH_FIREWALL_
+static int
+#ifndef ALLOW_SNMP_SET_ACCEPT
+vrrp_snmp_instance_accept(__attribute__((unused)) int action,
+			  __attribute__((unused)) u_char *var_val, __attribute__((unused)) u_char var_val_type,
+			  __attribute__((unused)) size_t var_val_len, __attribute__((unused)) u_char *statP,
+			  __attribute__((unused)) oid *name, __attribute__((unused)) size_t name_len)
+{
+	return SNMP_ERR_NOACCESS;
+}
+
+#else
+vrrp_snmp_instance_accept(int action,
+			  u_char *var_val, u_char var_val_type,
+			  size_t var_val_len, __attribute__((unused)) u_char *statP,
+			  oid *name, size_t name_len)
+{
+	vrrp_t *vrrp = NULL;
+
+	switch (action) {
+	case RESERVE1:
+		/* Check that the proposed value is acceptable */
+		if (var_val_type != ASN_INTEGER)
+			return SNMP_ERR_WRONGTYPE;
+		if (var_val_len > sizeof(long))
+			return SNMP_ERR_WRONGLENGTH;
+		switch ((long)(*var_val)) {
+// TODO - We must check that we are not address owner (especially if disabling)
+		case 1:		/* enable accept */
+		case 2:		/* disable accept */
+			break;
+		default:
+			return SNMP_ERR_WRONGVALUE;
+		}
+		break;
+	case RESERVE2:	/* Check that we can find the instance.*/
+	case COMMIT:
+		/* Find the instance */
+		vrrp = _get_instance(name, name_len);
+		if (!vrrp)
+			return SNMP_ERR_NOSUCHNAME;
+		if (action == RESERVE2)
+			break;
+		/* Commit: change values. There is no way to fail. */
+		switch ((long)(*var_val)) {
+		case 1:
+			log_message(LOG_INFO,
+				    "(%s) accept mode enabled with SNMP",
+				     vrrp->iname);
+// TODO - What do we do about adding/removing iptables blocks?
+// RFC6527 requires the instance to be down to change this - can't find now where it says that
+			vrrp->accept = true;
+			break;
+		case 2:
+			log_message(LOG_INFO,
+				    "(%s) accept mode disabled with SNMP",
+				    vrrp->iname);
+			vrrp->accept = false;
+			break;
+			}
+		break;
+		}
+	return SNMP_ERR_NOERROR;
+}
+#endif
+#endif
+
+static int
+vrrp_snmp_instance_priority(int action,
+			    u_char *var_val, u_char var_val_type, size_t var_val_len,
+			    __attribute__((unused)) u_char *statP, oid *name, size_t name_len)
+{
+	vrrp_t *vrrp = NULL;
+
+	switch (action) {
+	case RESERVE1:
+		/* Check that the proposed priority is acceptable */
+		if (var_val_type != ASN_INTEGER)
+			return SNMP_ERR_WRONGTYPE;
+		if (var_val_len > sizeof(long))
+			return SNMP_ERR_WRONGLENGTH;
+		if (*var_val == 0)
+			return SNMP_ERR_WRONGVALUE;
+		break;
+	case RESERVE2:		/* Check that we can find the instance. We should. */
+	case COMMIT:
+		/* Find the instance */
+		vrrp = _get_instance(name, name_len);
+		if (!vrrp)
+			return SNMP_ERR_NOSUCHNAME;
+		if (action == RESERVE2)
+			break;
+		/* Commit: change values. There is no way to fail. */
+		log_message(LOG_INFO,
+			    "(%s) base priority changed from"
+			    " %u to %u via SNMP.",
+			    vrrp->iname, vrrp->base_priority, *var_val);
+		vrrp->total_priority += *var_val - vrrp->base_priority;
+		vrrp->base_priority = *var_val;
+		vrrp_set_effective_priority(vrrp);
+//TODO - could affect accept
+		break;
+	}
+	return SNMP_ERR_NOERROR;
+}
+
+static int
+vrrp_snmp_instance_preempt(int action,
+			   u_char *var_val, u_char var_val_type, size_t var_val_len,
+			   __attribute__((unused)) u_char *statP, oid *name, size_t name_len)
+{
+	vrrp_t *vrrp = NULL;
+	switch (action) {
+	case RESERVE1:
+		/* Check that the proposed value is acceptable */
+		if (var_val_type != ASN_INTEGER)
+			return SNMP_ERR_WRONGTYPE;
+		if (var_val_len > sizeof(long))
+			return SNMP_ERR_WRONGLENGTH;
+		switch ((long)(*var_val)) {
+		case 1:		/* enable preemption */
+		case 2:		/* disable preemption */
+			break;
+		default:
+			return SNMP_ERR_WRONGVALUE;
+		}
+		break;
+	case RESERVE2:		/* Check that we can find the instance. We should. */
+	case COMMIT:
+		/* Find the instance */
+		vrrp = _get_instance(name, name_len);
+		if (!vrrp) return SNMP_ERR_NOSUCHNAME;
+		if (action == RESERVE2)
+			break;
+		/* Commit: change values. There is no way to fail. */
+		switch ((long)(*var_val)) {
+		case 1:
+			log_message(LOG_INFO,
+				    "(%s) preemption enabled with SNMP",
+				    vrrp->iname);
+			vrrp->nopreempt = 0;
+			break;
+		case 2:
+			log_message(LOG_INFO,
+				    "(%s) preemption disabled with SNMP",
+				    vrrp->iname);
+			vrrp->nopreempt = 1;
+			break;
+		}
+		break;
+	}
+	return SNMP_ERR_NOERROR;
+}
+
+static u_char*
+vrrp_snmp_instance(struct variable *vp, oid *name, size_t *length,
+		   int exact, size_t *var_len, WriteMethod **write_method)
+{
+	vrrp_t *rt;
+	snmp_ret_t ret;
+
+	if ((rt = (vrrp_t *)snmp_header_list_table(vp, name, length, exact,
+						    var_len, write_method,
+						    vrrp_data->vrrp)) == NULL)
+		return NULL;
+
+	switch (vp->magic) {
+	case VRRP_SNMP_INSTANCE_NAME:
+		*var_len = strlen(rt->iname);
+		ret.cp = rt->iname;
+		return ret.p;
+	case VRRP_SNMP_INSTANCE_VIRTUALROUTERID:
+		long_ret.u = rt->vrid;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_STATE:
+		long_ret.s = vrrp_snmp_state(rt->state);
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_INITIALSTATE:
+		long_ret.s = vrrp_snmp_state(rt->configured_state);
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_WANTEDSTATE:
+		long_ret.s = vrrp_snmp_state(rt->wantstate);
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_BASEPRIORITY:
+		long_ret.u = rt->base_priority;
+		*write_method = vrrp_snmp_instance_priority;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_EFFECTIVEPRIORITY:
+		long_ret.u = rt->effective_priority;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_VIPSENABLED:
+		long_ret.u = rt->vipset?1:2;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_PRIMARYINTERFACE:
+		*var_len = strlen(rt->ifp->ifname);
+		return (u_char *)&rt->ifp->ifname;
+	case VRRP_SNMP_INSTANCE_TRACKPRIMARYIF:
+		long_ret.u = rt->track_ifp?1:2;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_ADVERTISEMENTSINT:
+		long_ret.u = (rt->version == VRRP_VERSION_2) ?
+			    rt->adver_int / TIMER_HZ :
+			    rt->adver_int / TIMER_CENTI_HZ;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_PREEMPT:
+		long_ret.u = rt->nopreempt?2:1;
+		*write_method = vrrp_snmp_instance_preempt;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_PREEMPTDELAY:
+		long_ret.u = rt->preempt_delay / TIMER_HZ;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_AUTHTYPE:
+		long_ret.u = 0;
+		if (rt->version == VRRP_VERSION_2) {
+#ifdef _WITH_VRRP_AUTH_
+			long_ret.u = rt->auth_type;
+#endif
+		}
+		return (u_char *)&long_ret;
+#ifdef _WITH_LVS_
+	case VRRP_SNMP_INSTANCE_USELVSSYNCDAEMON:
+		long_ret.u = (global_data->lvs_syncd.vrrp == rt)?1:2;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_LVSSYNCINTERFACE:
+		if (global_data->lvs_syncd.vrrp == rt) {
+			*var_len = strlen(global_data->lvs_syncd.ifname);
+			ret.cp = global_data->lvs_syncd.ifname;
+			return ret.p;
+		}
+		break;
+#endif
+	case VRRP_SNMP_INSTANCE_SYNCGROUP:
+		if (rt->sync) {
+			*var_len = strlen(rt->sync->gname);
+			ret.cp = rt->sync->gname;
+			return ret.p;
+		}
+		break;
+	case VRRP_SNMP_INSTANCE_GARPDELAY:
+		long_ret.u = rt->garp_delay / TIMER_HZ;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_SMTPALERT:
+		long_ret.u = rt->smtp_alert?1:2;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_NOTIFYEXEC:
+		long_ret.u = rt->notify_exec?1:2;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_SCRIPTMASTER:
+		if (rt->script_master) {
+			cmd_str_r(rt->script_master, buf, sizeof(buf));
+			*var_len = strlen(buf);
+			return (u_char *)buf;
+		}
+		break;
+	case VRRP_SNMP_INSTANCE_SCRIPTBACKUP:
+		if (rt->script_backup) {
+			cmd_str_r(rt->script_backup, buf, sizeof(buf));
+			*var_len = strlen(buf);
+			return (u_char *)buf;
+		}
+		break;
+	case VRRP_SNMP_INSTANCE_SCRIPTFAULT:
+		if (rt->script_fault) {
+			cmd_str_r(rt->script_fault, buf, sizeof(buf));
+			*var_len = strlen(buf);
+			return (u_char *)buf;
+		}
+		break;
+	case VRRP_SNMP_INSTANCE_SCRIPTSTOP:
+		if (rt->script_stop) {
+			cmd_str_r(rt->script_stop, buf, sizeof(buf));
+			*var_len = strlen(buf);
+			return (u_char *)buf;
+		}
+		break;
+	case VRRP_SNMP_INSTANCE_SCRIPTMASTER_RX_LOWER_PRI:
+		if (rt->script_master_rx_lower_pri) {
+			cmd_str_r(rt->script_master_rx_lower_pri, buf, sizeof(buf));
+			*var_len = strlen(buf);
+			return (u_char *)buf;
+		}
+		break;
+	case VRRP_SNMP_INSTANCE_SCRIPT:
+		if (rt->script) {
+			cmd_str_r(rt->script, buf, sizeof(buf));
+			*var_len = strlen(buf);
+			return (u_char *)buf;
+		}
+		break;
+	case VRRP_SNMP_INSTANCE_ACCEPT:
+		long_ret.u = 0;
+#ifdef _WITH_FIREWALL_
+		if (rt->version == VRRP_VERSION_3) {
+			long_ret.u = rt->accept ? 1:2;
+			*write_method = vrrp_snmp_instance_accept;
+		}
+#endif
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_PROMOTE_SECONDARIES:
+		long_ret.u = rt->promote_secondaries ? 1:2;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_USE_LINKBEAT:
+		long_ret.u = rt->linkbeat_use_polling ? 1:2;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_INSTANCE_VRRP_VERSION:
+		long_ret.u = rt->version;
+		return (u_char *)&long_ret;
+	default:
+		return NULL;
+	}
+	/* If we are here, we asked for a non existent data. Try the
+	   next one. */
+	if (!exact && (name[*length-1] < MAX_SUBID))
+		return vrrp_snmp_instance(vp, name, length,
+					  exact, var_len, write_method);
+	return NULL;
+}
+
+static u_char*
+vrrp_snmp_trackedinterface(struct variable *vp, oid *name, size_t *length,
+			   int exact, size_t *var_len, WriteMethod **write_method)
+{
+	const tracked_if_t *bifp;
+	snmp_ret_t ret;
+	const element e = snmp_find_element(vp, name, length, exact, var_len, write_method, vrrp_data->vrrp, offsetof(vrrp_t, track_ifp));
+
+	if (!e)
+		return NULL;
+
+	bifp = ELEMENT_DATA(e);
+
+	switch (vp->magic) {
+	case VRRP_SNMP_TRACKEDINTERFACE_NAME:
+		ret.cp = bifp->ifp->ifname;
+		*var_len = strlen(ret.cp);
+		return ret.p;
+	case VRRP_SNMP_TRACKEDINTERFACE_WEIGHT:
+		long_ret.s = bifp->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_TRACKEDINTERFACE_WEIGHT_REVERSE:
+		long_ret.s = bifp->weight_reverse ? 1 : 2;
+		return (u_char *)&long_ret;
+	}
+	return NULL;
+}
+
+static u_char*
+vrrp_snmp_trackedscript(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
+{
+	const tracked_sc_t *bscr;
+	snmp_ret_t ret;
+	const element e = snmp_find_element(vp, name, length, exact, var_len, write_method, vrrp_data->vrrp, offsetof(vrrp_t, track_script));
+
+	if (!e)
+		return NULL;
+
+	bscr = ELEMENT_DATA(e);
+
+	switch (vp->magic) {
+	case VRRP_SNMP_TRACKEDSCRIPT_NAME:
+		ret.cp = bscr->scr->sname;
+		*var_len = strlen(ret.cp);
+		return ret.p;
+	case VRRP_SNMP_TRACKEDSCRIPT_WEIGHT:
+		long_ret.s = bscr->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_TRACKEDSCRIPT_WEIGHT_REVERSE:
+		long_ret.s = bscr->weight_reverse ? 1 : 2;
+		return (u_char *)&long_ret;
+	}
+	return NULL;
+}
+
+static u_char*
+vrrp_snmp_trackedfile(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
+{
+	const tracked_file_t *bfile;
+	snmp_ret_t ret;
+	const element e = snmp_find_element(vp, name, length, exact, var_len, write_method, vrrp_data->vrrp, offsetof(vrrp_t, track_file));
+
+	if (!e)
+		return NULL;
+
+	bfile = ELEMENT_DATA(e);
+
+	switch(vp->magic) {
+	case VRRP_SNMP_TRACKEDFILE_NAME:
+		ret.cp = bfile->file->fname;
+		*var_len = strlen(ret.cp);
+		return ret.p;
+	case VRRP_SNMP_TRACKEDFILE_WEIGHT:
+		long_ret.s = bfile->file->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_TRACKEDFILE_WEIGHT_REVERSE:
+		long_ret.s = bfile->file->weight_reverse ? 1 : 2;
+		return (u_char *)&long_ret;
+	}
+
+	return NULL;
+}
+
+#ifdef _WITH_BFD_
+static u_char*
+vrrp_snmp_trackedbfd(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
+{
+	const tracked_bfd_t *bbfd;
+	snmp_ret_t ret;
+	const element e = snmp_find_element(vp, name, length, exact, var_len, write_method, vrrp_data->vrrp, offsetof(vrrp_t, track_bfd));
+
+	if (!e)
+		return NULL;
+
+	bbfd = ELEMENT_DATA(e);
+
+	switch(vp->magic) {
+	case VRRP_SNMP_TRACKEDBFD_NAME:
+		ret.cp = bbfd->bfd->bname;
+		*var_len = strlen(ret.cp);
+		return ret.p;
+	case VRRP_SNMP_TRACKEDBFD_WEIGHT:
+		long_ret.s = bbfd->bfd->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_TRACKEDBFD_WEIGHT_REVERSE:
+		long_ret.s = bbfd->bfd->weight_reverse ? 1 : 2;
+		return (u_char *)&long_ret;
+	}
+
+	return NULL;
+}
+#endif
+
+#ifdef _WITH_CN_PROC_
+static u_char*
+vrrp_snmp_trackedprocess(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
+{
+	const tracked_process_t *bproc;
+	snmp_ret_t ret;
+	const element e = snmp_find_element(vp, name, length, exact, var_len, write_method, vrrp_data->vrrp, offsetof(vrrp_t, track_process));
+
+	if (!e)
+		return NULL;
+
+	bproc = ELEMENT_DATA(e);
+
+	switch(vp->magic) {
+	case VRRP_SNMP_TRACKEDPROCESS_NAME:
+		ret.cp = bproc->process->pname;
+		*var_len = strlen(ret.cp);
+		return ret.p;
+	case VRRP_SNMP_TRACKEDPROCESS_WEIGHT:
+		long_ret.s = bproc->process->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_TRACKEDPROCESS_WEIGHT_REVERSE:
+		long_ret.s = bproc->process->weight_reverse ? 1 : 2;
+		return (u_char *)&long_ret;
+	}
+
+	return NULL;
+}
+#endif
+
+static u_char*
+vrrp_snmp_group_trackedinterface(struct variable *vp, oid *name, size_t *length,
+			   int exact, size_t *var_len, WriteMethod **write_method)
+{
+	const tracked_if_t *bifp;
+	snmp_ret_t ret;
+	const element e = snmp_find_element(vp, name, length, exact, var_len, write_method, vrrp_data->vrrp_sync_group, offsetof(vrrp_sgroup_t, track_ifp));
+
+	if (!e)
+		return NULL;
+
+	bifp = ELEMENT_DATA(e);
+
+	switch (vp->magic) {
+	case VRRP_SNMP_SGROUPTRACKEDINTERFACE_NAME:
+		ret.cp = bifp->ifp->ifname;
+		*var_len = strlen(ret.cp);
+		return ret.p;
+	case VRRP_SNMP_SGROUPTRACKEDINTERFACE_WEIGHT:
+		long_ret.s = bifp->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_SGROUPTRACKEDINTERFACE_WEIGHT_REVERSE:
+		long_ret.s = bifp->weight_reverse ? 1 : 2;
+		return (u_char *)&long_ret;
+	}
+	return NULL;
+}
+
+static u_char*
+vrrp_snmp_group_trackedscript(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
+{
+	const tracked_sc_t *bscr;
+	snmp_ret_t ret;
+	const element e = snmp_find_element(vp, name, length, exact, var_len, write_method, vrrp_data->vrrp_sync_group, offsetof(vrrp_sgroup_t, track_script));
+
+	if (!e)
+		return NULL;
+
+	bscr = ELEMENT_DATA(e);
+
+	switch (vp->magic) {
+	case VRRP_SNMP_SGROUPTRACKEDSCRIPT_NAME:
+		ret.cp = bscr->scr->sname;
+		*var_len = strlen(ret.cp);
+		return ret.p;
+	case VRRP_SNMP_SGROUPTRACKEDSCRIPT_WEIGHT:
+		long_ret.s = bscr->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_SGROUPTRACKEDSCRIPT_WEIGHT_REVERSE:
+		long_ret.s = bscr->weight_reverse ? 1 : 2;
+		return (u_char *)&long_ret;
+	}
+	return NULL;
+}
+
+static u_char*
+vrrp_snmp_group_trackedfile(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
+{
+	const tracked_file_t *bfile;
+	snmp_ret_t ret;
+	const element e = snmp_find_element(vp, name, length, exact, var_len, write_method, vrrp_data->vrrp_sync_group, offsetof(vrrp_sgroup_t, track_file));
+
+	if (!e)
+		return NULL;
+
+	bfile = ELEMENT_DATA(e);
+
+	switch(vp->magic) {
+	case VRRP_SNMP_SGROUPTRACKEDFILE_NAME:
+		ret.cp = bfile->file->fname;
+		*var_len = strlen(ret.cp);
+		return ret.p;
+	case VRRP_SNMP_SGROUPTRACKEDFILE_WEIGHT:
+		long_ret.s = bfile->file->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_SGROUPTRACKEDFILE_WEIGHT_REVERSE:
+		long_ret.s = bfile->file->weight_reverse ? 1 : 2;
+		return (u_char *)&long_ret;
+	}
+
+	return NULL;
+}
+
+#ifdef _WITH_BFD_
+static u_char*
+vrrp_snmp_group_trackedbfd(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
+{
+	const tracked_bfd_t *bbfd;
+	snmp_ret_t ret;
+	const element e = snmp_find_element(vp, name, length, exact, var_len, write_method, vrrp_data->vrrp_sync_group, offsetof(vrrp_sgroup_t, track_bfd));
+
+	if (!e)
+		return NULL;
+
+	bbfd = ELEMENT_DATA(e);
+
+	switch(vp->magic) {
+	case VRRP_SNMP_SGROUPTRACKEDBFD_NAME:
+		ret.cp = bbfd->bfd->bname;
+		*var_len = strlen(ret.cp);
+		return ret.p;
+	case VRRP_SNMP_SGROUPTRACKEDBFD_WEIGHT:
+		long_ret.s = bbfd->bfd->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_SGROUPTRACKEDBFD_WEIGHT_REVERSE:
+		long_ret.s = bbfd->bfd->weight_reverse ? 1 : 2;
+		return (u_char *)&long_ret;
+	}
+
+	return NULL;
+}
+#endif
+
+#ifdef _WITH_CN_PROC_
+static u_char*
+vrrp_snmp_group_trackedprocess(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
+{
+	const tracked_process_t *bproc;
+	snmp_ret_t ret;
+	const element e = snmp_find_element(vp, name, length, exact, var_len, write_method, vrrp_data->vrrp_sync_group, offsetof(vrrp_sgroup_t, track_process));
+
+	if (!e)
+		return NULL;
+
+	bproc = ELEMENT_DATA(e);
+
+	switch(vp->magic) {
+	case VRRP_SNMP_SGROUPTRACKEDPROCESS_NAME:
+		ret.cp = bproc->process->pname;
+		*var_len = strlen(ret.cp);
+		return ret.p;
+	case VRRP_SNMP_SGROUPTRACKEDPROCESS_WEIGHT:
+		long_ret.s = bproc->process->weight;
+		return (u_char *)&long_ret;
+	case VRRP_SNMP_SGROUPTRACKEDPROCESS_WEIGHT_REVERSE:
+		long_ret.s = bproc->process->weight_reverse ? 1 : 2;
+		return (u_char *)&long_ret;
+	}
+
+	return NULL;
+}
+#endif
+
+static oid vrrp_oid[] = {VRRP_OID};
+static struct variable8 vrrp_vars[] = {
+	/* vrrpSyncGroupTable */
+	{VRRP_SNMP_SYNCGROUP_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_syncgroup, 3, {1, 1, 2}},
+	{VRRP_SNMP_SYNCGROUP_STATE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_syncgroup, 3, {1, 1, 3}},
+	{VRRP_SNMP_SYNCGROUP_SMTPALERT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_syncgroup, 3, {1, 1, 4}},
+	{VRRP_SNMP_SYNCGROUP_NOTIFYEXEC, ASN_INTEGER, RONLY,
+	 vrrp_snmp_syncgroup, 3, {1, 1, 5}},
+	{VRRP_SNMP_SYNCGROUP_SCRIPTMASTER, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_syncgroup, 3, {1, 1, 6}},
+	{VRRP_SNMP_SYNCGROUP_SCRIPTBACKUP, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_syncgroup, 3, {1, 1, 7}},
+	{VRRP_SNMP_SYNCGROUP_SCRIPTFAULT, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_syncgroup, 3, {1, 1, 8}},
+	{VRRP_SNMP_SYNCGROUP_SCRIPT, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_syncgroup, 3, {1, 1, 9}},
+	{VRRP_SNMP_SYNCGROUP_TRACKINGWEIGHT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_syncgroup, 3, {1, 1, 10}},
+	{VRRP_SNMP_SYNCGROUP_SCRIPTSTOP, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_syncgroup, 3, {1, 1, 11}},
+
+	/* vrrpSyncGroupMemberTable */
+	{VRRP_SNMP_SYNCGROUPMEMBER_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_syncgroupmember, 3, {2, 1, 2}},
+
+	/* vrrpInstanceTable */
+	{VRRP_SNMP_INSTANCE_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 2}},
+	{VRRP_SNMP_INSTANCE_VIRTUALROUTERID, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 3}},
+	{VRRP_SNMP_INSTANCE_STATE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 4}},
+	{VRRP_SNMP_INSTANCE_INITIALSTATE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 5}},
+	{VRRP_SNMP_INSTANCE_WANTEDSTATE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 6}},
+	{VRRP_SNMP_INSTANCE_BASEPRIORITY, ASN_INTEGER, RWRITE,
+	 vrrp_snmp_instance, 3, {3, 1, 7}},
+	{VRRP_SNMP_INSTANCE_EFFECTIVEPRIORITY, ASN_INTEGER, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 8}},
+	{VRRP_SNMP_INSTANCE_VIPSENABLED, ASN_INTEGER, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 9}},
+	{VRRP_SNMP_INSTANCE_PRIMARYINTERFACE, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 10}},
+	{VRRP_SNMP_INSTANCE_TRACKPRIMARYIF, ASN_INTEGER, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 11}},
+	{VRRP_SNMP_INSTANCE_ADVERTISEMENTSINT, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 12}},
+	{VRRP_SNMP_INSTANCE_PREEMPT, ASN_INTEGER, RWRITE,
+	 vrrp_snmp_instance, 3, {3, 1, 13}},
+	{VRRP_SNMP_INSTANCE_PREEMPTDELAY, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 14}},
+	{VRRP_SNMP_INSTANCE_AUTHTYPE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 15}},
+	{VRRP_SNMP_INSTANCE_USELVSSYNCDAEMON, ASN_INTEGER, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 16}},
+	{VRRP_SNMP_INSTANCE_LVSSYNCINTERFACE, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 17}},
+	{VRRP_SNMP_INSTANCE_SYNCGROUP, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 18}},
+	{VRRP_SNMP_INSTANCE_GARPDELAY, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 19}},
+	{VRRP_SNMP_INSTANCE_SMTPALERT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 20}},
+	{VRRP_SNMP_INSTANCE_NOTIFYEXEC, ASN_INTEGER, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 21}},
+	{VRRP_SNMP_INSTANCE_SCRIPTMASTER, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 22}},
+	{VRRP_SNMP_INSTANCE_SCRIPTBACKUP, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 23}},
+	{VRRP_SNMP_INSTANCE_SCRIPTFAULT, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 24}},
+	{VRRP_SNMP_INSTANCE_SCRIPTSTOP, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 25}},
+	{VRRP_SNMP_INSTANCE_SCRIPT, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 26}},
+	{VRRP_SNMP_INSTANCE_ACCEPT, ASN_INTEGER, RWRITE,
+	 vrrp_snmp_instance, 3, {3, 1, 27} },
+	{VRRP_SNMP_INSTANCE_PROMOTE_SECONDARIES, ASN_INTEGER, RWRITE,
+	 vrrp_snmp_instance, 3, {3, 1, 28} },
+	{VRRP_SNMP_INSTANCE_USE_LINKBEAT, ASN_INTEGER, RWRITE,
+	 vrrp_snmp_instance, 3, {3, 1, 29} },
+	{VRRP_SNMP_INSTANCE_VRRP_VERSION, ASN_INTEGER, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 30} },
+	{VRRP_SNMP_INSTANCE_SCRIPTMASTER_RX_LOWER_PRI, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_instance, 3, {3, 1, 31}},
+
+	/* vrrpTrackedInterfaceTable */
+	{VRRP_SNMP_TRACKEDINTERFACE_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_trackedinterface, 3, {4, 1, 1}},
+	{VRRP_SNMP_TRACKEDINTERFACE_WEIGHT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_trackedinterface, 3, {4, 1, 2}},
+	{VRRP_SNMP_TRACKEDINTERFACE_WEIGHT_REVERSE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_trackedinterface, 3, {4, 1, 3}},
+
+	/* vrrpTrackedScriptTable */
+	{VRRP_SNMP_TRACKEDSCRIPT_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_trackedscript, 3, {5, 1, 2}},
+	{VRRP_SNMP_TRACKEDSCRIPT_WEIGHT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_trackedscript, 3, {5, 1, 3}},
+	{VRRP_SNMP_TRACKEDSCRIPT_WEIGHT_REVERSE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_trackedscript, 3, {5, 1, 4}},
+
+	/* vrrpAddressTable */
+	{VRRP_SNMP_ADDRESS_ADDRESSTYPE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_address, 3, {6, 1, 2}},
+	{VRRP_SNMP_ADDRESS_VALUE, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_address, 3, {6, 1, 3}},
+	{VRRP_SNMP_ADDRESS_BROADCAST, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_address, 3, {6, 1, 4}},
+	{VRRP_SNMP_ADDRESS_MASK, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_address, 3, {6, 1, 5}},
+	{VRRP_SNMP_ADDRESS_SCOPE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_address, 3, {6, 1, 6}},
+	{VRRP_SNMP_ADDRESS_IFINDEX, ASN_INTEGER, RONLY,
+	 vrrp_snmp_address, 3, {6, 1, 7}},
+	{VRRP_SNMP_ADDRESS_IFNAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_address, 3, {6, 1, 8}},
+	{VRRP_SNMP_ADDRESS_IFALIAS, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_address, 3, {6, 1, 9}},
+	{VRRP_SNMP_ADDRESS_ISSET, ASN_INTEGER, RONLY,
+	 vrrp_snmp_address, 3, {6, 1, 10}},
+	{VRRP_SNMP_ADDRESS_ISADVERTISED, ASN_INTEGER, RONLY,
+	 vrrp_snmp_address, 3, {6, 1, 11}},
+	{VRRP_SNMP_ADDRESS_PEER, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_address, 3, {6, 1, 12}},
+
+#ifdef _HAVE_FIB_ROUTING_
+	/* vrrpRouteTable */
+	{VRRP_SNMP_ROUTE_ADDRESSTYPE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 2}},
+	{VRRP_SNMP_ROUTE_DESTINATION, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 3}},
+	{VRRP_SNMP_ROUTE_DESTINATIONMASK, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 4}},
+	{VRRP_SNMP_ROUTE_GATEWAY, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 5}},
+	{VRRP_SNMP_ROUTE_SECONDARYGATEWAY, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 6}},
+	{VRRP_SNMP_ROUTE_SOURCE, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 7}},
+	{VRRP_SNMP_ROUTE_METRIC, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 8}},
+	{VRRP_SNMP_ROUTE_SCOPE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 9}},
+	{VRRP_SNMP_ROUTE_TYPE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 10}},
+	{VRRP_SNMP_ROUTE_IFINDEX, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 11}},
+	{VRRP_SNMP_ROUTE_IFNAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 12}},
+	{VRRP_SNMP_ROUTE_ROUTINGTABLE, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 13}},
+	{VRRP_SNMP_ROUTE_ISSET, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 14}},
+	{VRRP_SNMP_ROUTE_FROM_ADDRESS, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 15}},
+	{VRRP_SNMP_ROUTE_FROM_ADDRESS_MASK, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 16}},
+	{VRRP_SNMP_ROUTE_TOS, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 17}},
+	{VRRP_SNMP_ROUTE_PROTOCOL, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 18}},
+	{VRRP_SNMP_ROUTE_ECN, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 19}},
+	{VRRP_SNMP_ROUTE_QUICK_ACK, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 20}},
+	{VRRP_SNMP_ROUTE_EXPIRES, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 21}},
+	{VRRP_SNMP_ROUTE_MTU, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 22}},
+	{VRRP_SNMP_ROUTE_MTU_LOCK, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 23}},
+	{VRRP_SNMP_ROUTE_HOP_LIMIT, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 24}},
+	{VRRP_SNMP_ROUTE_ADVMSS, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 25}},
+	{VRRP_SNMP_ROUTE_ADVMSS_LOCK, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 26}},
+	{VRRP_SNMP_ROUTE_RTT, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 27}},
+	{VRRP_SNMP_ROUTE_RTT_LOCK, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 28}},
+	{VRRP_SNMP_ROUTE_RTTVAR, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 29}},
+	{VRRP_SNMP_ROUTE_RTTVAR_LOCK, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 30}},
+	{VRRP_SNMP_ROUTE_REORDERING, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 31}},
+	{VRRP_SNMP_ROUTE_REORDERING_LOCK, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 32}},
+	{VRRP_SNMP_ROUTE_WINDOW, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 33}},
+	{VRRP_SNMP_ROUTE_CWND, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 34}},
+	{VRRP_SNMP_ROUTE_CWND_LOCK, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 35}},
+	{VRRP_SNMP_ROUTE_SSTHRESH, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 36}},
+	{VRRP_SNMP_ROUTE_SSTHRESH_LOCK, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 37}},
+	{VRRP_SNMP_ROUTE_RTOMIN, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 38}},
+	{VRRP_SNMP_ROUTE_RTOMIN_LOCK, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 39}},
+	{VRRP_SNMP_ROUTE_INIT_CWND, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 40}},
+	{VRRP_SNMP_ROUTE_INIT_RWND, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 41}},
+	{VRRP_SNMP_ROUTE_CONG_CTL, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 42}},
+	{VRRP_SNMP_ROUTE_PREF, ASN_INTEGER, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 43}},
+	{VRRP_SNMP_ROUTE_REALM_DST, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 44}},
+	{VRRP_SNMP_ROUTE_REALM_SRC, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 45}},
+#if HAVE_DECL_RTA_ENCAP
+	{VRRP_SNMP_ROUTE_ENCAP_TYPE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_encap, 3, {7, 1, 46}},
+#if HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+	{VRRP_SNMP_ROUTE_ENCAP_MPLS_LABELS, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_encap, 3, {7, 1, 47}},
+#endif
+	{VRRP_SNMP_ROUTE_ENCAP_ID, ASN_COUNTER64, RONLY,
+	 vrrp_snmp_encap, 3, {7, 1, 48}},
+	{VRRP_SNMP_ROUTE_ENCAP_DST_ADDRESS, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_encap, 3, {7, 1, 49}},
+	{VRRP_SNMP_ROUTE_ENCAP_SRC_ADDRESS, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_encap, 3, {7, 1, 50}},
+	{VRRP_SNMP_ROUTE_ENCAP_TOS, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_encap, 3, {7, 1, 51}},
+	{VRRP_SNMP_ROUTE_ENCAP_TTL, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_encap, 3, {7, 1, 52}},
+	{VRRP_SNMP_ROUTE_ENCAP_FLAGS, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_encap, 3, {7, 1, 53}},
+#if HAVE_DECL_LWTUNNEL_ENCAP_ILA
+	{VRRP_SNMP_ROUTE_ENCAP_ILA_LOCATOR, ASN_COUNTER64, RONLY,
+	 vrrp_snmp_encap, 3, {7, 1, 54}},
+#endif
+#if HAVE_DECL_RTAX_FASTOPEN_NO_COOKIE
+	{VRRP_SNMP_ROUTE_FASTOPEN_NO_COOKIE, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_route, 3, {7, 1, 55}},
+#endif
+#endif
+
+	 /* vrrpRuleTable */
+	{VRRP_SNMP_RULE_DIRECTION, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 2}},
+	{VRRP_SNMP_RULE_ADDRESSTYPE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 3}},
+	{VRRP_SNMP_RULE_ADDRESS, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 4}},
+	{VRRP_SNMP_RULE_ADDRESSMASK, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 5}},
+	{VRRP_SNMP_RULE_ROUTINGTABLE, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 6}},
+	{VRRP_SNMP_RULE_ISSET, ASN_INTEGER, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 7}},
+	{VRRP_SNMP_RULE_INVERT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 8}},
+	{VRRP_SNMP_RULE_DESTINATIONADDRESSTYPE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 9}},
+	{VRRP_SNMP_RULE_DESTINATIONADDRESS, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 10}},
+	{VRRP_SNMP_RULE_DESTINATIONADDRESSMASK, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 11}},
+	{VRRP_SNMP_RULE_SOURCEADDRESSTYPE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 12}},
+	{VRRP_SNMP_RULE_SOURCEADDRESS, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 13}},
+	{VRRP_SNMP_RULE_SOURCEADDRESSMASK, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 14}},
+	{VRRP_SNMP_RULE_TOS, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 15}},
+	{VRRP_SNMP_RULE_FWMARK, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 16}},
+	{VRRP_SNMP_RULE_FWMASK, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 17}},
+	{VRRP_SNMP_RULE_REALM_DST, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 18}},
+	{VRRP_SNMP_RULE_REALM_SRC, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 19}},
+	{VRRP_SNMP_RULE_ININTERFACE, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 20}},
+	{VRRP_SNMP_RULE_OUTINTERFACE, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 21}},
+	{VRRP_SNMP_RULE_TARGET, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 22}},
+	{VRRP_SNMP_RULE_ACTION, ASN_INTEGER, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 23}},
+	{VRRP_SNMP_RULE_TABLE_NO, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 24}},
+	{VRRP_SNMP_RULE_PREFERENCE, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 25}},
+	{VRRP_SNMP_RULE_SUPPRESSPREFIXLEN, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 26}},
+	{VRRP_SNMP_RULE_SUPPRESSGROUP, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 27}},
+	{VRRP_SNMP_RULE_TUNNELID_HIGH, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 28}},
+	{VRRP_SNMP_RULE_TUNNELID_LOW, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 29}},
+#if HAVE_DECL_FRA_UID_RANGE
+	{VRRP_SNMP_RULE_UID_RANGE_START, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 30}},
+	{VRRP_SNMP_RULE_UID_RANGE_END, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 31}},
+#endif
+#if HAVE_DECL_FRA_L3MDEV
+	{VRRP_SNMP_RULE_L3MDEV, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_rule, 3, {8, 1, 32}},
+#endif
+#endif
+
+	/* vrrpScriptTable */
+	{VRRP_SNMP_SCRIPT_NAME, ASN_OCTET_STR, RONLY, vrrp_snmp_script, 3, {9, 1, 2}},
+	{VRRP_SNMP_SCRIPT_COMMAND, ASN_OCTET_STR, RONLY, vrrp_snmp_script, 3, {9, 1, 3}},
+	{VRRP_SNMP_SCRIPT_INTERVAL, ASN_INTEGER, RONLY, vrrp_snmp_script, 3, {9, 1, 4}},
+	{VRRP_SNMP_SCRIPT_WEIGHT, ASN_INTEGER, RONLY, vrrp_snmp_script, 3, {9, 1, 5}},
+	{VRRP_SNMP_SCRIPT_RESULT, ASN_INTEGER, RONLY, vrrp_snmp_script, 3, {9, 1, 6}},
+	{VRRP_SNMP_SCRIPT_RISE, ASN_UNSIGNED, RONLY, vrrp_snmp_script, 3, {9, 1, 7}},
+	{VRRP_SNMP_SCRIPT_FALL, ASN_UNSIGNED, RONLY, vrrp_snmp_script, 3, {9, 1, 8}},
+	{VRRP_SNMP_SCRIPT_WEIGHT_REVERSE, ASN_INTEGER, RONLY, vrrp_snmp_script, 3, {9, 1, 9}},
+
+#ifdef _HAVE_FIB_ROUTING_
+	/* vrrpRouteNextHopTable */
+	{VRRP_SNMP_ROUTE_NEXT_HOP_ADDRESS_TYPE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_next_hop, 3, {11, 1, 2}},
+	{VRRP_SNMP_ROUTE_NEXT_HOP_ADDRESS, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_next_hop, 3, {11, 1, 3}},
+	{VRRP_SNMP_ROUTE_NEXT_HOP_IF_INDEX, ASN_INTEGER, RONLY,
+	 vrrp_snmp_next_hop, 3, {11, 1, 4}},
+	{VRRP_SNMP_ROUTE_NEXT_HOP_IF_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_next_hop, 3, {11, 1, 5}},
+	{VRRP_SNMP_ROUTE_NEXT_HOP_WEIGHT, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_next_hop, 3, {11, 1, 6}},
+	{VRRP_SNMP_ROUTE_NEXT_HOP_ONLINK, ASN_INTEGER, RONLY,
+	 vrrp_snmp_next_hop, 3, {11, 1, 7}},
+	{VRRP_SNMP_ROUTE_NEXT_HOP_REALM_DST, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_next_hop, 3, {11, 1, 8}},
+	{VRRP_SNMP_ROUTE_NEXT_HOP_REALM_SRC, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_next_hop, 3, {11, 1, 9}},
+#if HAVE_DECL_RTA_ENCAP
+	{VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_TYPE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_encap, 3, {11, 1, 10}},
+#if HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+	{VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_MPLS_LABELS, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_encap, 3, {11, 1, 11}},
+#endif
+	{VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_ID, ASN_COUNTER64, RONLY,
+	 vrrp_snmp_encap, 3, {11, 1, 12}},
+	{VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_DST_ADDRESS, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_encap, 3, {11, 1, 13}},
+	{VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_SRC_ADDRESS, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_encap, 3, {11, 1, 14}},
+	{VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_TOS, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_encap, 3, {11, 1, 15}},
+	{VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_TTL, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_encap, 3, {11, 1, 16}},
+	{VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_FLAGS, ASN_UNSIGNED, RONLY,
+	 vrrp_snmp_encap, 3, {11, 1, 17}},
+#if HAVE_DECL_LWTUNNEL_ENCAP_ILA
+	{VRRP_SNMP_ROUTE_NEXT_HOP_ENCAP_ILA_LOCATOR, ASN_COUNTER64, RONLY,
+	 vrrp_snmp_encap, 3, {11, 1, 18}},
+#endif
+#endif
+#endif
+
+	/* vrrpTrackedFileTable */
+	{VRRP_SNMP_TRACKEDFILE_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_trackedfile, 3, {12, 1, 2}},
+	{VRRP_SNMP_TRACKEDFILE_WEIGHT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_trackedfile, 3, {12, 1, 3}},
+	{VRRP_SNMP_TRACKEDFILE_WEIGHT_REVERSE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_trackedfile, 3, {12, 1, 4}},
+
+	/* vrrpFileTable */
+	{VRRP_SNMP_FILE_NAME, ASN_OCTET_STR, RONLY, vrrp_snmp_file, 3, {13, 1, 2}},
+	{VRRP_SNMP_FILE_PATH, ASN_OCTET_STR, RONLY, vrrp_snmp_file, 3, {13, 1, 3}},
+	{VRRP_SNMP_FILE_RESULT, ASN_INTEGER, RONLY, vrrp_snmp_file, 3, {13, 1, 4}},
+	{VRRP_SNMP_FILE_WEIGHT, ASN_INTEGER, RONLY, vrrp_snmp_file, 3, {13, 1, 5}},
+	{VRRP_SNMP_FILE_WEIGHT_REVERSE, ASN_INTEGER, RONLY, vrrp_snmp_file, 3, {13, 1, 6}},
+
+#ifdef _WITH_BFD_
+	/* vrrpTrackedBfdTable */
+	{VRRP_SNMP_TRACKEDBFD_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_trackedbfd, 3, {17, 1, 2}},
+	{VRRP_SNMP_TRACKEDBFD_WEIGHT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_trackedbfd, 3, {17, 1, 3}},
+	{VRRP_SNMP_TRACKEDBFD_WEIGHT_REVERSE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_trackedbfd, 3, {17, 1, 4}},
+
+	/* vrrpBfdTable */
+	{VRRP_SNMP_BFD_NAME, ASN_OCTET_STR, RONLY, vrrp_snmp_bfd, 3, {18, 1, 2}},
+	{VRRP_SNMP_BFD_RESULT, ASN_INTEGER, RONLY, vrrp_snmp_bfd, 3, {18, 1, 3}},
+	{VRRP_SNMP_BFD_WEIGHT, ASN_INTEGER, RONLY, vrrp_snmp_bfd, 3, {18, 1, 4}},
+	{VRRP_SNMP_BFD_WEIGHT_REVERSE, ASN_INTEGER, RONLY, vrrp_snmp_bfd, 3, {18, 1, 5}},
+#endif
+
+#ifdef _WITH_CN_PROC_
+	/* vrrpTrackedProcessTable */
+	{VRRP_SNMP_TRACKEDPROCESS_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_trackedprocess, 3, {20, 1, 2}},
+	{VRRP_SNMP_TRACKEDPROCESS_WEIGHT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_trackedprocess, 3, {20, 1, 3}},
+	{VRRP_SNMP_TRACKEDPROCESS_WEIGHT_REVERSE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_trackedprocess, 3, {20, 1, 4}},
+
+	/* vrrpProcessTable */
+	{VRRP_SNMP_PROCESS_NAME, ASN_OCTET_STR, RONLY, vrrp_snmp_process, 3, {21, 1, 2}},
+	{VRRP_SNMP_PROCESS_PATH, ASN_OCTET_STR, RONLY, vrrp_snmp_process, 3, {21, 1, 3}},
+	{VRRP_SNMP_PROCESS_PARAMS, ASN_OCTET_STR, RONLY, vrrp_snmp_process, 3, {21, 1, 4}},
+	{VRRP_SNMP_PROCESS_PARAM_MATCH, ASN_INTEGER, RONLY, vrrp_snmp_process, 3, {21, 1, 5}},
+	{VRRP_SNMP_PROCESS_WEIGHT, ASN_INTEGER, RONLY, vrrp_snmp_process, 3, {21, 1, 6}},
+	{VRRP_SNMP_PROCESS_WEIGHT_REVERSE, ASN_INTEGER, RONLY, vrrp_snmp_process, 3, {21, 1, 7}},
+	{VRRP_SNMP_PROCESS_QUORUM, ASN_UNSIGNED, RONLY, vrrp_snmp_process, 3, {21, 1, 8}},
+	{VRRP_SNMP_PROCESS_QUORUM_MAX, ASN_INTEGER, RONLY, vrrp_snmp_process, 3, {21, 1, 9}},
+	{VRRP_SNMP_PROCESS_FORKDELAY, ASN_UNSIGNED, RONLY, vrrp_snmp_process, 3, {21, 1, 10}},
+	{VRRP_SNMP_PROCESS_TERMINATEDELAY, ASN_UNSIGNED, RONLY, vrrp_snmp_process, 3, {21, 1, 11}},
+	{VRRP_SNMP_PROCESS_FULLCOMMAND, ASN_INTEGER, RONLY, vrrp_snmp_process, 3, {21, 1, 12}},
+	{VRRP_SNMP_PROCESS_CURPROC, ASN_INTEGER, RONLY, vrrp_snmp_process, 3, {21, 1, 13}},
+	{VRRP_SNMP_PROCESS_RESULT, ASN_INTEGER, RONLY, vrrp_snmp_process, 3, {21, 1, 14}},
+#endif
+
+	/* syncGroupTrackedInterfaceTable */
+	{VRRP_SNMP_SGROUPTRACKEDINTERFACE_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_group_trackedinterface, 3, {14, 1, 1}},
+	{VRRP_SNMP_SGROUPTRACKEDINTERFACE_WEIGHT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_group_trackedinterface, 3, {14, 1, 2}},
+	{VRRP_SNMP_SGROUPTRACKEDINTERFACE_WEIGHT_REVERSE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_group_trackedinterface, 3, {14, 1, 3}},
+
+	/* syncGroupTrackedScriptTable */
+	{VRRP_SNMP_SGROUPTRACKEDSCRIPT_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_group_trackedscript, 3, {15, 1, 2}},
+	{VRRP_SNMP_SGROUPTRACKEDSCRIPT_WEIGHT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_group_trackedscript, 3, {15, 1, 3}},
+	{VRRP_SNMP_SGROUPTRACKEDSCRIPT_WEIGHT_REVERSE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_group_trackedscript, 3, {15, 1, 4}},
+
+	/* syncGroupTrackedFileTable */
+	{VRRP_SNMP_SGROUPTRACKEDFILE_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_group_trackedfile, 3, {16, 1, 2}},
+	{VRRP_SNMP_SGROUPTRACKEDFILE_WEIGHT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_group_trackedfile, 3, {16, 1, 3}},
+	{VRRP_SNMP_SGROUPTRACKEDFILE_WEIGHT_REVERSE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_group_trackedfile, 3, {16, 1, 4}},
+
+#ifdef _WITH_BFD_
+	/* syncGroupTrackedBfdTable */
+	{VRRP_SNMP_SGROUPTRACKEDBFD_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_group_trackedbfd, 3, {19, 1, 2}},
+	{VRRP_SNMP_SGROUPTRACKEDBFD_WEIGHT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_group_trackedbfd, 3, {19, 1, 3}},
+	{VRRP_SNMP_SGROUPTRACKEDBFD_WEIGHT_REVERSE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_group_trackedbfd, 3, {19, 1, 4}},
+#endif
+
+#ifdef _WITH_CN_PROC_
+	/* syncGroupTrackedProcessTable */
+	{VRRP_SNMP_SGROUPTRACKEDPROCESS_NAME, ASN_OCTET_STR, RONLY,
+	 vrrp_snmp_group_trackedprocess, 3, {22, 1, 2}},
+	{VRRP_SNMP_SGROUPTRACKEDPROCESS_WEIGHT, ASN_INTEGER, RONLY,
+	 vrrp_snmp_group_trackedprocess, 3, {22, 1, 3}},
+	{VRRP_SNMP_SGROUPTRACKEDPROCESS_WEIGHT_REVERSE, ASN_INTEGER, RONLY,
+	 vrrp_snmp_group_trackedprocess, 3, {22, 1, 4}},
+#endif
+
+};
+
+void
+vrrp_snmp_instance_trap(vrrp_t *vrrp)
+{
+	/* OID of the notification */
+	oid notification_oid[] = { VRRP_OID, 10, 0, 2 };
+	size_t notification_oid_len = OID_LENGTH(notification_oid);
+	/* OID for snmpTrapOID.0 */
+	oid objid_snmptrap[] = { SNMPTRAP_OID };
+	size_t objid_snmptrap_len = OID_LENGTH(objid_snmptrap);
+	snmp_ret_t ptr_conv;
+
+	/* Other OID */
+	oid name_oid[] = { VRRP_OID, 3, 1, 2 };
+	size_t name_oid_len = OID_LENGTH(name_oid);
+	oid state_oid[] = { VRRP_OID, 3, 1, 4 };
+	size_t state_oid_len = OID_LENGTH(state_oid);
+	oid initialstate_oid[] = { VRRP_OID, 3, 1, 5};
+	size_t initialstate_oid_len = OID_LENGTH(initialstate_oid);
+	oid routerId_oid[] = { KEEPALIVED_OID, 1, 2, 0 };
+	size_t routerId_oid_len = OID_LENGTH(routerId_oid);
+
+	netsnmp_variable_list *notification_vars = NULL;
+	int state = 4;		/* unknown */
+
+	if (!global_data->enable_traps || !global_data->enable_snmp_vrrp)
+		return;
+
+	if (vrrp->state == VRRP_STATE_INIT ||
+	    vrrp->state == VRRP_STATE_BACK ||
+	    vrrp->state == VRRP_STATE_MAST ||
+	    vrrp->state == VRRP_STATE_FAULT)
+		state = vrrp->state;
+	else if (vrrp->state == VRRP_STATE_STOP)
+		state = 5;
+
+	/* snmpTrapOID */
+	snmp_varlist_add_variable(&notification_vars,
+				  objid_snmptrap, objid_snmptrap_len,
+				  ASN_OBJECT_ID,
+				  (u_char *) notification_oid,
+				  notification_oid_len * sizeof(oid));
+	/* vrrpInstanceName */
+	ptr_conv.cp = vrrp->iname;
+	snmp_varlist_add_variable(&notification_vars,
+				  name_oid, name_oid_len,
+				  ASN_OCTET_STR,
+				  ptr_conv.p,
+				  strlen(vrrp->iname));
+	/* vrrpInstanceState */
+	snmp_varlist_add_variable(&notification_vars,
+				  state_oid, state_oid_len,
+				  ASN_INTEGER,
+				  (u_char *)&state,
+				  sizeof(state));
+	/* vrrpInstanceInitialState */
+	snmp_varlist_add_variable(&notification_vars,
+				  initialstate_oid, initialstate_oid_len,
+				  ASN_INTEGER,
+				  (u_char *)&vrrp->configured_state,
+				  sizeof(vrrp->configured_state));
+
+	/* routerId */
+	ptr_conv.cp = global_data->router_id;
+	snmp_varlist_add_variable(&notification_vars,
+				  routerId_oid, routerId_oid_len,
+				  ASN_OCTET_STR,
+				  ptr_conv.p,
+				  strlen(global_data->router_id));
+
+	log_message(LOG_INFO,
+		    "(%s) Sending SNMP notification",
+		    vrrp->iname);
+	send_v2trap(notification_vars);
+	snmp_free_varbind(notification_vars);
+}
+
+void
+vrrp_snmp_group_trap(vrrp_sgroup_t *group)
+{
+	/* OID of the notification */
+	oid notification_oid[] = { VRRP_OID, 10, 0, 1 };
+	size_t notification_oid_len = OID_LENGTH(notification_oid);
+	/* OID for snmpTrapOID.0 */
+	oid objid_snmptrap[] = { SNMPTRAP_OID };
+	size_t objid_snmptrap_len = OID_LENGTH(objid_snmptrap);
+	snmp_ret_t ptr_conv;
+
+	/* Other OID */
+	oid name_oid[] = { VRRP_OID, 1, 1, 2 };
+	size_t name_oid_len = OID_LENGTH(name_oid);
+	oid state_oid[] = { VRRP_OID, 1, 1, 3 };
+	size_t state_oid_len = OID_LENGTH(state_oid);
+	oid routerId_oid[] = { KEEPALIVED_OID, 1, 2, 0 };
+	size_t routerId_oid_len = OID_LENGTH(routerId_oid);
+
+	netsnmp_variable_list *notification_vars = NULL;
+	int state = 4;		/* unknown */
+
+	if (!global_data->enable_traps || !global_data->enable_snmp_vrrp)
+		return;
+
+	if (group->state == VRRP_STATE_INIT ||
+	    group->state == VRRP_STATE_BACK ||
+	    group->state == VRRP_STATE_MAST ||
+	    group->state == VRRP_STATE_FAULT)
+		state = group->state;
+	else if (group->state == VRRP_STATE_STOP)
+		state = 5;
+
+	/* snmpTrapOID */
+	snmp_varlist_add_variable(&notification_vars,
+				  objid_snmptrap, objid_snmptrap_len,
+				  ASN_OBJECT_ID,
+				  (u_char *) notification_oid,
+				  notification_oid_len * sizeof(oid));
+
+	/* vrrpSyncGroupName */
+	ptr_conv.cp = group->gname;
+	snmp_varlist_add_variable(&notification_vars,
+				  name_oid, name_oid_len,
+				  ASN_OCTET_STR,
+				  ptr_conv.p,
+				  strlen(group->gname));
+	/* vrrpSyncGroupState */
+	snmp_varlist_add_variable(&notification_vars,
+				  state_oid, state_oid_len,
+				  ASN_INTEGER,
+				  (u_char *)&state,
+				  sizeof(state));
+
+	/* routerId */
+	ptr_conv.cp = global_data->router_id;
+	snmp_varlist_add_variable(&notification_vars,
+				  routerId_oid, routerId_oid_len,
+				  ASN_OCTET_STR,
+				  ptr_conv.p,
+				  strlen(global_data->router_id));
 
-static u_char*
-vrrp_snmp_syncgroupmember(struct variable *vp, oid *name, size_t *length,
-			  int exact, size_t *var_len, WriteMethod **write_method)
+	log_message(LOG_INFO,
+		    "VRRP_Group(%s): Sending SNMP notification",
+		    group->gname);
+	send_v2trap(notification_vars);
+	snmp_free_varbind(notification_vars);
+}
+#endif
+
+
+#if defined _WITH_SNMP_RFC_
+/* Convert VRRP state to RFC SNMP state */
+static int
+vrrp_snmp_rfc_state(int state)
 {
-        oid *target, current[2], best[2];
-        int result, target_len;
-	int curgroup, curinstance;
-	char *instance, *binstance = NULL;
-	element e;
-	vrrp_sgroup_t *group;
+	if (state <= VRRP_STATE_MAST)
+		return state + 1;
+	return VRRP_STATE_INIT + 1;
+}
+#endif
+
+#ifdef _WITH_SNMP_RFCV2_
+static bool
+suitable_for_rfc2787(const vrrp_t* vrrp)
+{
+#ifdef _WITH_SNMP_RFCV3_
+	/* We mustn't return any VRRP instances that aren't version 2 */
+	if (vrrp->version != VRRP_VERSION_2)
+		return false;
+#endif
+
+	/* We have to skip VRRPv2 with IPv6 since it won't be understood */
+	if (vrrp->family == AF_INET6)
+		return false;
+
+	/* We are expected to have at least one VIP */
+	if (LIST_ISEMPTY(vrrp->vip))
+		return false;
+
+	return true;
+}
 
-        if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
-                memcpy(name, vp->name, sizeof(oid) * vp->namelen);
-                *length = vp->namelen;
-        }
+static ip_address_t*
+vrrp_rfcv2_header_ar_table(struct variable *vp, oid *name, size_t *length,
+		     int exact, size_t *var_len, WriteMethod **write_method)
+{
+	element e, e2;
+	ip_address_t *vip;
+	vrrp_t *scr;
+	ip_address_t *bel = NULL;
+	oid * target, current[2], best[2];
+	struct in_addr best_addr, target_addr, current_addr;
+	int result, result2 = 0;
+	size_t target_len;
+	bool found_exact = false;
+	bool found_better;
 
 	*write_method = 0;
-	*var_len = sizeof(long);
+	*var_len = sizeof(unsigned long);
 
-	if (LIST_ISEMPTY(vrrp_data->vrrp_sync_group))
+	if (LIST_ISEMPTY(vrrp_data->vrrp))
 		return NULL;
 
+	if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
+		memcpy(name, vp->name, sizeof(oid) * vp->namelen);
+		*length = vp->namelen;
+	}
+
 	/* We search the best match: equal if exact, the lower OID in
 	   the set of the OID strictly superior to the target
 	   otherwise. */
-        best[0] = best[1] = MAX_SUBID; /* Our best match */
-        target = &name[vp->namelen];   /* Our target match */
-        target_len = *length - vp->namelen;
-	curgroup = 0;
-	for (e = LIST_HEAD(vrrp_data->vrrp_sync_group); e; ELEMENT_NEXT(e)) {
-		group = ELEMENT_DATA(e);
-		curgroup++;
-		if (target_len && (curgroup < target[0]))
-			continue; /* Optimization: cannot be part of our set */
-		if (binstance)
-			break; /* Optimization: cannot be the lower
-				  anymore, see break below */
-		vector_foreach_slot(group->iname, instance, curinstance) {
-			/* We build our current match */
-			current[0] = curgroup;
-			current[1] = curinstance + 1;
-			/* And compare it to our target match */
-			if ((result = snmp_oid_compare(current, 2, target,
-						       target_len)) < 0)
+	best[0] = best[1] = MAX_SUBID; /* Our best match */
+	best_addr.s_addr = 0xffffffff;
+	target = &name[vp->namelen];   /* Our target match */
+	target_len = *length - vp->namelen;
+	if (target_len > 2 ) {
+		target_len = 2;
+		target_addr.s_addr = (in_addr_t)(name[*length - 4] << 24 |
+						 name[*length - 3] << 16 |
+						 name[*length - 2] << 8 |
+						 name[*length - 1]);
+	}
+	else
+		target_addr.s_addr = 0;
+
+	LIST_FOREACH(vrrp_data->vrrp, scr, e) {
+		if (!suitable_for_rfc2787(scr))
+			continue;
+
+		current[0] = IF_BASE_INDEX(scr->ifp);
+		current[1] = scr->vrid;
+
+		if ((result = snmp_oid_compare(current, 2, target, target_len)) < 0)
+			continue;
+
+		if (exact) {
+			if (result > 0)
 				continue;
-			if ((result == 0) && !exact)
+		}
+		else {
+			if ((result2 = snmp_oid_compare(current, 2, best, 2)) > 0)
+				continue;
+		}
+
+		if (LIST_ISEMPTY(scr->vip)) {
+			if (exact)
+				return NULL;
+			continue;
+		}
+
+		found_better = false;
+		LIST_FOREACH(scr->vip, vip, e2) {
+			/* We need the address to be MSB first, for numerical comparison */
+			current_addr.s_addr = htonl(vip->u.sin.sin_addr.s_addr);
+
+			if (exact) {
+				if (target_addr.s_addr == current_addr.s_addr) {
+					memcpy(best, current, sizeof(best));
+					best_addr = current_addr;
+					bel = vip;
+					found_exact = true;
+					break;
+				}
+
 				continue;
-			if (result == 0) {
-				/* Got an exact match and asked for it */
-				*var_len = strlen(instance);
-				return (u_char *)instance;
-			}
-			if (snmp_oid_compare(current, 2, best, 2) < 0) {
-				/* This is our best match */
-				memcpy(best, current, sizeof(oid) * 2);
-				binstance = instance;
-				/* (current[0],current[1]) are
-				   strictly increasing, this is our
-				   lower element of our set */
-				break;
 			}
+
+			if (result == 0 && target_len && current_addr.s_addr <= target_addr.s_addr)
+				continue;
+			if (result2 == 0 && current_addr.s_addr >= best_addr.s_addr)
+				continue;
+
+			memcpy(best, current, sizeof(best));
+			best_addr = current_addr;
+			bel = vip;
+			result2 = 0;
+			found_better = true;
+		}
+
+		if (found_exact)
+			break;
+		if (exact)
+			return NULL;
+		if (result == 0 && found_better)
+			break;
+	}
+
+	if (bel == NULL)	/* No best match */
+		return NULL;
+
+	/* Let's use our best match */
+	memcpy(target, best, sizeof(best));
+	*length = (unsigned)vp->namelen + 2;
+	name[*length]   =  best_addr.s_addr >> 24;
+	name[*length+1] = (best_addr.s_addr >> 16) & 0xff;
+	name[*length+2] = (best_addr.s_addr >>  8) & 0xff;
+	name[*length+3] = (best_addr.s_addr      ) & 0xff;
+	*length += 4;
+
+	return bel;
+}
+
+static u_char*
+vrrp_rfcv2_snmp_node_info(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
+{
+
+	if (header_generic(vp, name, length, exact, var_len, write_method))
+		return NULL;
+
+	if (vp->magic == VRRP_RFC_SNMP_NODE_VER) {
+		long_ret.u = 2;
+		return (u_char*)&long_ret;
+	}
+
+	if (vp->magic == VRRP_RFC_SNMP_NOTIF_CNTL) {
+		long_ret.u = global_data->enable_traps ? 1 : 2 ;
+		return (u_char*)&long_ret;
+	}
+
+	return NULL;
+}
+
+static vrrp_t*
+snmp_rfcv2_header_list_table(struct variable *vp, oid *name, size_t *length,
+		  int exact, size_t *var_len, WriteMethod **write_method)
+{
+	element e;
+	vrrp_t *bel = NULL, *scr;
+	oid * target, current[2], best[2];
+	int result;
+	size_t target_len;
+
+	*write_method = 0;
+	*var_len = sizeof (unsigned long);
+
+	if (LIST_ISEMPTY(vrrp_data->vrrp))
+		return NULL;
+
+	if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
+		memcpy(name, vp->name, sizeof(oid) * vp->namelen);
+		*length = vp->namelen;
+	}
+
+	/* We search the best match: equal if exact, the lower OID in
+	   the set of the OID strictly superior to the target
+	   otherwise. */
+	best[0] = best[1] = MAX_SUBID; /* Our best match */
+	target = &name[vp->namelen];   /* Our target match */
+	target_len = *length - vp->namelen;
+
+	LIST_FOREACH(vrrp_data->vrrp, scr, e) {
+		if (!suitable_for_rfc2787(scr))
+			continue;
+
+		if (target_len && (IF_BASE_INDEX(scr->ifp) < target[0]))
+			continue; /* Optimization: cannot be part of our set */
+
+		current[0] = IF_BASE_INDEX(scr->ifp);
+		current[1] = scr->vrid;
+		if ((result = snmp_oid_compare(current, 2, target, target_len)) < 0)
+			continue;
+		if (result == 0) {
+			if (!exact)
+				continue;
+			return scr;
+		}
+
+		if (snmp_oid_compare(current, 2, best, 2) < 0) {
+			/* This is our best match */
+			memcpy(best, current, sizeof(best));
+
+			bel = scr;
 		}
 	}
-	if (binstance == NULL)
+
+	if (bel == NULL)
 		/* No best match */
 		return NULL;
 	if (exact)
 		/* No exact match */
 		return NULL;
 	/* Let's use our best match */
-        memcpy(target, best, sizeof(oid) * 2);
-        *length = vp->namelen + 2;
-	*var_len = strlen(binstance);
-	return (u_char*)binstance;
+	memcpy(target, best, sizeof(best));
+	*length = (unsigned)vp->namelen + 2;
+	return bel;
 }
 
-static vrrp_t *
-_get_instance(oid *name, size_t name_len)
+static u_char*
+vrrp_rfcv2_snmp_opertable(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
 {
-	int instance;
-	element e;
-	vrrp_t *vrrp = NULL;
+	vrrp_t *rt;
+	interface_t* ifp;
+	timeval_t uptime;
 
-	if (name_len < 1) return NULL;
-	instance = name[name_len - 1];
-	if (LIST_ISEMPTY(vrrp_data->vrrp)) return NULL;
-	for (e = LIST_HEAD(vrrp_data->vrrp); e; ELEMENT_NEXT(e)) {
-		vrrp = ELEMENT_DATA(e);
-		if (--instance == 0) break;
+	if ((rt = snmp_rfcv2_header_list_table(vp, name, length, exact,
+					     var_len, write_method)) == NULL)
+		return NULL;
+
+	switch (vp->magic) {
+	case VRRP_RFC_SNMP_OPER_VMAC:
+		*var_len = rt->ifp->hw_addr_len;
+		return (u_char*)&rt->ifp->hw_addr;
+	case VRRP_RFC_SNMP_OPER_STATE:
+		long_ret.s = vrrp_snmp_rfc_state(rt->state);
+		return (u_char*)&long_ret;
+	case VRRP_RFC_SNMP_OPER_ADM_STATE:
+		/* If we implement write access, then this could be 2 for down */
+		long_ret.u = 1;
+		return (u_char*)&long_ret;
+	case VRRP_RFC_SNMP_OPER_PRI:
+		long_ret.u = rt->base_priority;
+		return (u_char*)&long_ret;
+	case VRRP_RFC_SNMP_OPER_ADDR_CNT:
+		if (LIST_ISEMPTY(rt->vip))
+			long_ret.u = 0;
+		else
+			long_ret.u = LIST_SIZE(rt->vip);
+		return (u_char*)&long_ret;
+	case VRRP_RFC_SNMP_OPER_MIP:
+		*var_len = sizeof ((struct sockaddr_in *)&rt->master_saddr)->sin_addr.s_addr;
+		return (u_char*)&((struct sockaddr_in *)&rt->master_saddr)->sin_addr.s_addr;
+	case VRRP_RFC_SNMP_OPER_PIP:
+#ifdef _HAVE_VRRP_VMAC_
+		if (IS_VLAN(rt->ifp))
+			ifp = rt->ifp->base_ifp;
+		else
+#endif
+			ifp = rt->ifp;
+		*var_len = sizeof ifp->sin_addr;
+		return (u_char*)&ifp->sin_addr;
+	case VRRP_RFC_SNMP_OPER_AUTH_TYPE:
+#ifdef _WITH_VRRP_AUTH_
+		long_ret.s = rt->auth_type + 1;
+#else
+		long_ret.s = 1;
+#endif
+		return (u_char*)&long_ret;
+	case VRRP_RFC_SNMP_OPER_AUTH_KEY:
+		*var_len = 0;		// Not readable
+		return NULL;
+	case VRRP_RFC_SNMP_OPER_ADVERT_INT:
+		long_ret.u = rt->adver_int / TIMER_HZ;
+		return (u_char*)&long_ret;
+	case VRRP_RFC_SNMP_OPER_PREEMPT:
+		long_ret.s =  1 + rt->nopreempt;
+		return (u_char*)&long_ret;
+	case VRRP_RFC_SNMP_OPER_VR_UPTIME:
+		if (rt->state == VRRP_STATE_BACK ||
+		    rt->state == VRRP_STATE_MAST) {
+			timersub(&rt->stats->uptime, &vrrp_start_time, &uptime);
+			long_ret.s = uptime.tv_sec * 100 + uptime.tv_usec / 10000;	// unit is centi-seconds
+		}
+		else
+			long_ret.u = 0;
+		return (u_char*)&long_ret;
+	case VRRP_RFC_SNMP_OPER_PROTO:
+		long_ret.u = 1;	// IP
+		return (u_char*)&long_ret;
+	case VRRP_RFC_SNMP_OPER_ROW_STAT:
+		long_ret.u = 1;	// active - 1, notInService - 2, notReady - 3, createAndGo - 4, createAndWait - 5
+		return (u_char*)&long_ret;
 	}
-	return vrrp;
+
+	/* If we are here, we asked for a non existent data. Try the
+	   next one. */
+	if (!exact && (name[*length-1] < MAX_SUBID))
+		return vrrp_rfcv2_snmp_opertable(vp, name, length,
+					  exact, var_len, write_method);
+
+	return NULL;
 }
 
-static int
-vrrp_snmp_instance_priority(int action,
-			    u_char *var_val, u_char var_val_type, size_t var_val_len,
-			    u_char *statP, oid *name, size_t name_len)
+static u_char*
+vrrp_rfcv2_snmp_assoiptable(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
 {
-	vrrp_t *vrrp = NULL;
-	switch (action) {
-	case RESERVE1:
-		/* Check that the proposed priority is acceptable */
-		if (var_val_type != ASN_INTEGER)
-			return SNMP_ERR_WRONGTYPE;
-		if (var_val_len > sizeof(long))
-			return SNMP_ERR_WRONGLENGTH;
-		if (VRRP_IS_BAD_PRIORITY((long)(*var_val)))
-			return SNMP_ERR_WRONGVALUE;
-		break;
-	case RESERVE2:		/* Check that we can find the instance. We should. */
-	case COMMIT:
-		/* Find the instance */
-		vrrp = _get_instance(name, name_len);
-		if (!vrrp)
-			return SNMP_ERR_NOSUCHNAME;
-		if (action == RESERVE2)
-			break;
-		/* Commit: change values. There is no way to fail. */
-		log_message(LOG_INFO,
-			    "VRRP_Instance(%s) base priority changed from"
-			    " %d to %d via SNMP.",
-			    vrrp->iname, vrrp->base_priority, (long)(*var_val));
-		vrrp->base_priority = (long)(*var_val);
-		/* If we the instance is not part of a sync group, the
-		   effective priority will be recomputed by some
-		   thread. Otherwise, we should set it equal to the
-		   base priority. */
-		if (vrrp->sync)
-			vrrp->effective_priority = vrrp->base_priority;
-		break;
+	ip_address_t *addr;
+
+	if (snmp_oid_compare(name, *length, vp->name, vp->namelen) < 0) {
+		memcpy(name, vp->name, sizeof(oid) * vp->namelen);
+		*length = vp->namelen;
+		*var_len = 0;
+		return NULL;
 	}
-	return SNMP_ERR_NOERROR;
+	if ((addr = vrrp_rfcv2_header_ar_table(vp, name, length, exact,
+				  var_len, write_method)) == NULL)
+		return NULL;
+
+	switch (vp->magic) {
+	case VRRP_RFC_SNMP_ASSOC_IP_ADDR_ROW:
+		/* If we implement write access, then this could be 2 for down */
+		long_ret.u = 1;
+		return (u_char*)&long_ret;
+	}
+
+	/* If we are here, we asked for a non existent data. Try the
+	   next one. */
+	if (!exact && (name[*length-1] < MAX_SUBID))
+		return vrrp_rfcv2_snmp_assoiptable(vp, name, length,
+					  exact, var_len, write_method);
+
+	return NULL;
 }
 
-static int
-vrrp_snmp_instance_preempt(int action,
-			   u_char *var_val, u_char var_val_type, size_t var_val_len,
-			   u_char *statP, oid *name, size_t name_len)
+static u_char*
+vrrp_rfcv2_snmp_stats(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
 {
-	vrrp_t *vrrp = NULL;
-	switch (action) {
-	case RESERVE1:
-		/* Check that the proposed value is acceptable */
-		if (var_val_type != ASN_INTEGER)
-			return SNMP_ERR_WRONGTYPE;
-		if (var_val_len > sizeof(long))
-			return SNMP_ERR_WRONGLENGTH;
-		switch ((long)(*var_val)) {
-		case 1:		/* enable preemption */
-		case 2:		/* disable preemption */
-			break;
-		default:
-			return SNMP_ERR_WRONGVALUE;
-		}
-		break;
-	case RESERVE2:		/* Check that we can find the instance. We should. */
-	case COMMIT:
-		/* Find the instance */
-		vrrp = _get_instance(name, name_len);
-		if (!vrrp) return SNMP_ERR_NOSUCHNAME;
-		if (action == RESERVE2)
+	element e;
+	vrrp_t *vrrp;
+
+	if (header_generic(vp, name, length, exact, var_len, write_method))
+		return NULL;
+
+	if (vp->magic != VRRP_RFC_SNMP_STATS_CHK_ERR &&
+	    vp->magic != VRRP_RFC_SNMP_STATS_VER_ERR &&
+	    vp->magic != VRRP_RFC_SNMP_STATS_VRID_ERR)
+		return NULL;
+
+	long_ret.u = 0;
+
+	if (LIST_ISEMPTY(vrrp_data->vrrp))
+		return (u_char*)&long_ret;
+
+	/* Work through all the vrrp instances that we can respond for */
+	for (e = LIST_HEAD(vrrp_data->vrrp); e; ELEMENT_NEXT(e)) {
+		vrrp = ELEMENT_DATA(e);
+
+		if (!suitable_for_rfc2787(vrrp))
+			continue;
+
+		switch (vp->magic) {
+		case VRRP_RFC_SNMP_STATS_CHK_ERR:
+			long_ret.u += vrrp->stats->chk_err;
 			break;
-		/* Commit: change values. There is no way to fail. */
-		switch ((long)(*var_val)) {
-		case 1:
-			log_message(LOG_INFO,
-				    "VRRP_Instance(%s) preemption enabled with SNMP",
-				    vrrp->iname);
-			vrrp->nopreempt = 0;
+		case VRRP_RFC_SNMP_STATS_VER_ERR:
+			long_ret.u += vrrp->stats->vers_err;
 			break;
-		case 2:
-			log_message(LOG_INFO,
-				    "VRRP_Instance(%s) preemption disabled with SNMP",
-				    vrrp->iname);
-			vrrp->nopreempt = 1;
+		case VRRP_RFC_SNMP_STATS_VRID_ERR:
+			long_ret.u += vrrp->stats->vrid_err;
 			break;
 		}
-		break;
 	}
-	return SNMP_ERR_NOERROR;
-}
 
+	return (u_char *)&long_ret;
+}
 static u_char*
-vrrp_snmp_instance(struct variable *vp, oid *name, size_t *length,
-		   int exact, size_t *var_len, WriteMethod **write_method)
+vrrp_rfcv2_snmp_statstable(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
 {
-        static unsigned long long_ret;
 	vrrp_t *rt;
 
-	if ((rt = (vrrp_t *)snmp_header_list_table(vp, name, length, exact,
-						    var_len, write_method,
-						    vrrp_data->vrrp)) == NULL)
+	if ((rt = snmp_rfcv2_header_list_table(vp, name, length, exact,
+					     var_len, write_method)) == NULL)
 		return NULL;
 
 	switch (vp->magic) {
-	case VRRP_SNMP_INSTANCE_NAME:
-		*var_len = strlen(rt->iname);
-		return (u_char *)rt->iname;
-	case VRRP_SNMP_INSTANCE_VIRTUALROUTERID:
-		long_ret = rt->vrid;
-		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_STATE:
-		long_ret = vrrp_snmp_state(rt->state);
-		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_INITIALSTATE:
-		long_ret = vrrp_snmp_state(rt->init_state);
-		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_WANTEDSTATE:
-		long_ret = vrrp_snmp_state(rt->wantstate);
-		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_BASEPRIORITY:
-		long_ret = rt->base_priority;
-		*write_method = vrrp_snmp_instance_priority;
-		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_EFFECTIVEPRIORITY:
-		long_ret = rt->effective_priority;
-		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_VIPSENABLED:
-		long_ret = rt->vipset?1:2;
-		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_PRIMARYINTERFACE:
-		*var_len = strlen(rt->ifp->ifname);
-		return (u_char *)&rt->ifp->ifname;
-	case VRRP_SNMP_INSTANCE_TRACKPRIMARYIF:
-		long_ret = rt->track_ifp?1:2;
+	case VRRP_RFC_SNMP_STATS_MASTER:
+		long_ret.u = rt->stats->become_master;
 		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_ADVERTISEMENTSINT:
-		long_ret = rt->adver_int / TIMER_HZ;
+	case VRRP_RFC_SNMP_STATS_ADV_RCVD:
+		long_ret.u = rt->stats->advert_rcvd;
 		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_PREEMPT:
-		long_ret = rt->nopreempt?2:1;
-		*write_method = vrrp_snmp_instance_preempt;
+	case VRRP_RFC_SNMP_STATS_ADV_INT_ERR:
+		long_ret.u = rt->stats->advert_interval_err;
 		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_PREEMPTDELAY:
-		long_ret = rt->preempt_delay / TIMER_HZ;
+	case VRRP_RFC_SNMP_STATS_AUTH_FAIL:
+#ifdef _WITH_VRRP_AUTH_
+		long_ret.u = rt->stats->auth_failure;
+#else
+		long_ret.u = 0;
+#endif
 		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_AUTHTYPE:
-		long_ret = rt->auth_type;
+	case VRRP_RFC_SNMP_STATS_TTL_ERR:
+		long_ret.u = rt->stats->ip_ttl_err;
 		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_USELVSSYNCDAEMON:
-		long_ret = (rt->lvs_syncd_if)?1:2;
+	case VRRP_RFC_SNMP_STATS_PRI_0_RCVD:
+		long_ret.u = rt->stats->pri_zero_rcvd;
 		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_LVSSYNCINTERFACE:
-		if (rt->lvs_syncd_if) {
-			*var_len = strlen(rt->lvs_syncd_if);
-			return (u_char *)rt->lvs_syncd_if;
-		}
-		break;
-	case VRRP_SNMP_INSTANCE_SYNCGROUP:
-		if (rt->sync) {
-			*var_len = strlen(rt->sync->gname);
-			return (u_char *)rt->sync->gname;
-		}
-		break;
-	case VRRP_SNMP_INSTANCE_GARPDELAY:
-		long_ret = rt->garp_delay / TIMER_HZ;
+	case VRRP_RFC_SNMP_STATS_PRI_0_SENT:
+		long_ret.u = rt->stats->pri_zero_sent;
 		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_SMTPALERT:
-		long_ret = rt->smtp_alert?1:2;
+	case VRRP_RFC_SNMP_STATS_INV_TYPE_RCVD:
+		long_ret.u = rt->stats->invalid_type_rcvd;
 		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_NOTIFYEXEC:
-		long_ret = rt->notify_exec?1:2;
+	case VRRP_RFC_SNMP_STATS_ADDR_LIST_ERR:
+		long_ret.u = rt->stats->addr_list_err;
 		return (u_char *)&long_ret;
-	case VRRP_SNMP_INSTANCE_SCRIPTMASTER:
-		if (rt->script_master) {
-			*var_len = strlen(rt->script_master);
-			return (u_char *)rt->script_master;
-		}
-		break;
-	case VRRP_SNMP_INSTANCE_SCRIPTBACKUP:
-		if (rt->script_backup) {
-			*var_len = strlen(rt->script_backup);
-			return (u_char *)rt->script_backup;
-		}
-		break;
-	case VRRP_SNMP_INSTANCE_SCRIPTFAULT:
-		if (rt->script_fault) {
-			*var_len = strlen(rt->script_fault);
-			return (u_char *)rt->script_fault;
-		}
-		break;
-	case VRRP_SNMP_INSTANCE_SCRIPTSTOP:
-		if (rt->script_stop) {
-			*var_len = strlen(rt->script_stop);
-			return (u_char *)rt->script_stop;
-		}
-		break;
-	case VRRP_SNMP_INSTANCE_SCRIPT:
-		if (rt->script) {
-			*var_len = strlen(rt->script);
-			return (u_char *)rt->script;
-		}
-		break;
-	default:
-		return NULL;
-        }
+	case VRRP_RFC_SNMP_STATS_AUTH_INV:
+		long_ret.u = rt->stats->invalid_authtype;
+		return (u_char *)&long_ret;
+	case VRRP_RFC_SNMP_STATS_AUTH_MIS:
+#ifdef _WITH_VRRP_AUTH_
+		long_ret.u = rt->stats->authtype_mismatch;
+#else
+		long_ret.u = 0;
+#endif
+		return (u_char *)&long_ret;
+	case VRRP_RFC_SNMP_STATS_PL_ERR:
+		long_ret.u = rt->stats->packet_len_err;
+		return (u_char *)&long_ret;
+	}
+
 	/* If we are here, we asked for a non existent data. Try the
 	   next one. */
 	if (!exact && (name[*length-1] < MAX_SUBID))
-		return vrrp_snmp_instance(vp, name, length,
+		return vrrp_rfcv2_snmp_statstable(vp, name, length,
 					  exact, var_len, write_method);
-        return NULL;
+
+	return NULL;
 }
 
-static u_char*
-vrrp_snmp_trackedinterface(struct variable *vp, oid *name, size_t *length,
-			   int exact, size_t *var_len, WriteMethod **write_method)
+static oid vrrp_rfcv2_oid[] = {VRRP_RFC_OID};
+static struct variable8 vrrp_rfcv2_vars[] = {
+	{ VRRP_RFC_SNMP_NODE_VER, ASN_INTEGER, RONLY,
+	  vrrp_rfcv2_snmp_node_info, 2, {1, 1}},
+	{ VRRP_RFC_SNMP_NOTIF_CNTL, ASN_INTEGER, RONLY,
+	  vrrp_rfcv2_snmp_node_info, 2, {1, 2}},
+	/* vrrpOperTable */
+	{ VRRP_RFC_SNMP_OPER_VMAC, ASN_OCTET_STR, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 2}},
+	{ VRRP_RFC_SNMP_OPER_STATE, ASN_INTEGER, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 3}},
+	{ VRRP_RFC_SNMP_OPER_ADM_STATE, ASN_INTEGER, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 4}},
+	{ VRRP_RFC_SNMP_OPER_PRI, ASN_INTEGER, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 5}},
+	{ VRRP_RFC_SNMP_OPER_ADDR_CNT, ASN_INTEGER, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 6}},
+	{ VRRP_RFC_SNMP_OPER_MIP, ASN_IPADDRESS, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 7}},
+	{ VRRP_RFC_SNMP_OPER_PIP, ASN_IPADDRESS, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 8}},
+	{ VRRP_RFC_SNMP_OPER_AUTH_TYPE, ASN_INTEGER, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 9}},
+	{ VRRP_RFC_SNMP_OPER_AUTH_KEY, ASN_OCTET_STR, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 10}},
+	{ VRRP_RFC_SNMP_OPER_ADVERT_INT, ASN_INTEGER, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 11}},
+	{ VRRP_RFC_SNMP_OPER_PREEMPT, ASN_INTEGER, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 12}},
+	{ VRRP_RFC_SNMP_OPER_VR_UPTIME, ASN_TIMETICKS, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 13}},
+	{ VRRP_RFC_SNMP_OPER_PROTO, ASN_INTEGER, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 14}},
+	{ VRRP_RFC_SNMP_OPER_ROW_STAT, ASN_INTEGER, RONLY,
+	  vrrp_rfcv2_snmp_opertable, 4, {1, 3, 1, 15}},
+	/* vrrpAssoIpAddrTable */
+	{ VRRP_RFC_SNMP_ASSOC_IP_ADDR_ROW, ASN_INTEGER, RONLY,
+	  vrrp_rfcv2_snmp_assoiptable, 4, {1, 4, 1, 2}},
+	/* vrrpRouterStats */
+	{ VRRP_RFC_SNMP_STATS_CHK_ERR, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_stats, 2, {2, 1}},
+	{ VRRP_RFC_SNMP_STATS_VER_ERR, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_stats, 2, {2, 2}},
+	{ VRRP_RFC_SNMP_STATS_VRID_ERR, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_stats, 2, {2, 3}},
+	/* vrrpRouterStatsTable */
+	{ VRRP_RFC_SNMP_STATS_MASTER, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_statstable, 4, {2, 4, 1, 1}},
+	{ VRRP_RFC_SNMP_STATS_ADV_RCVD, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_statstable, 4, {2, 4, 1, 2}},
+	{ VRRP_RFC_SNMP_STATS_ADV_INT_ERR, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_statstable, 4, {2, 4, 1, 3}},
+	{ VRRP_RFC_SNMP_STATS_AUTH_FAIL, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_statstable, 4, {2, 4, 1, 4}},
+	{ VRRP_RFC_SNMP_STATS_TTL_ERR, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_statstable, 4, {2, 4, 1, 5}},
+	{ VRRP_RFC_SNMP_STATS_PRI_0_RCVD, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_statstable, 4, {2, 4, 1, 6}},
+	{ VRRP_RFC_SNMP_STATS_PRI_0_SENT, ASN_COUNTER , RONLY,
+	  vrrp_rfcv2_snmp_statstable, 4, {2, 4, 1, 7}},
+	{ VRRP_RFC_SNMP_STATS_INV_TYPE_RCVD, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_statstable, 4, {2, 4, 1, 8}},
+	{ VRRP_RFC_SNMP_STATS_ADDR_LIST_ERR, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_statstable, 4, {2, 4, 1, 9}},
+	{ VRRP_RFC_SNMP_STATS_AUTH_INV, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_statstable, 4, {2, 4, 1, 10}},
+	{ VRRP_RFC_SNMP_STATS_AUTH_MIS, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_statstable, 4, {2, 4, 1, 11}},
+	{ VRRP_RFC_SNMP_STATS_PL_ERR, ASN_COUNTER, RONLY,
+	  vrrp_rfcv2_snmp_statstable, 4, {2, 4, 1, 12}}
+};
+
+void
+vrrp_rfcv2_snmp_new_master_trap(vrrp_t *vrrp)
+{
+	/* OID of the notification vrrpTrapNewMaster */
+	oid notification_oid[] = { VRRP_RFC_TRAP_OID, 1 };
+	size_t notification_oid_len = OID_LENGTH(notification_oid);
+	/* OID for snmpTrapOID.0 */
+	oid objid_snmptrap[] = { SNMPTRAP_OID };
+	size_t objid_snmptrap_len = OID_LENGTH(objid_snmptrap);
+	/* OID for trap data vrrpOperMasterIPAddr */
+	oid masterip_oid[] = { VRRP_RFC_OID, 1, 3, 1, 7, IF_BASE_INDEX(vrrp->ifp), vrrp->vrid };
+	size_t masterip_oid_len = OID_LENGTH(masterip_oid);
+
+	netsnmp_variable_list *notification_vars = NULL;
+
+	if (!global_data->enable_traps || !global_data->enable_snmp_rfcv2)
+		return;
+
+	if (!suitable_for_rfc2787(vrrp))
+		return;
+
+	/* snmpTrapOID */
+	snmp_varlist_add_variable(&notification_vars,
+				  objid_snmptrap, objid_snmptrap_len,
+				  ASN_OBJECT_ID,
+				  (u_char *) notification_oid,
+				  notification_oid_len * sizeof(oid));
+	/* vrrpInstanceName */
+	snmp_varlist_add_variable(&notification_vars,
+				  masterip_oid, masterip_oid_len,
+				  ASN_IPADDRESS,
+				  (u_char *)&((struct sockaddr_in *)&vrrp->saddr)->sin_addr.s_addr,
+				  sizeof(((struct sockaddr_in *)&vrrp->saddr)->sin_addr.s_addr));
+	log_message(LOG_INFO, "(%s) Sending SNMP notification"
+			      " vrrpTrapNewMaster"
+			    , vrrp->iname);
+	send_v2trap(notification_vars);
+	snmp_free_varbind(notification_vars);
+}
+
+void
+vrrp_rfcv2_snmp_auth_err_trap(vrrp_t *vrrp, struct in_addr src, enum rfcv2_trap_auth_error_type auth_err)
+{
+	/* OID of the notification vrrpTrapNewMaster */
+	oid notification_oid[] = { VRRP_RFC_TRAP_OID, 2 };
+	size_t notification_oid_len = OID_LENGTH(notification_oid);
+	/* OID for snmpTrapOID.0 */
+	oid objid_snmptrap[] = { SNMPTRAP_OID };
+	size_t objid_snmptrap_len = OID_LENGTH(objid_snmptrap);
+	/* OID for trap data vrrpTrapPacketSrc */
+	oid packet_src_oid[] = { VRRP_RFC_OID, 1, 5, IF_INDEX(vrrp->ifp), vrrp->vrid };
+	size_t packet_src_oid_len = OID_LENGTH(packet_src_oid);
+	/* OID for trap data vrrpTrapAuthErrorType */
+	oid err_type_oid[] = { VRRP_RFC_OID, 1, 6, IF_INDEX(vrrp->ifp), vrrp->vrid };
+	size_t err_type_oid_len = OID_LENGTH(err_type_oid);
+
+	netsnmp_variable_list *notification_vars = NULL;
+
+	if (!global_data->enable_traps || !global_data->enable_snmp_rfcv2)
+		return;
+
+	if (!suitable_for_rfc2787(vrrp))
+		return;
+
+	/* snmpTrapOID */
+	snmp_varlist_add_variable(&notification_vars,
+				  objid_snmptrap, objid_snmptrap_len,
+				  ASN_OBJECT_ID,
+				  (u_char *) notification_oid,
+				  notification_oid_len * sizeof(oid));
+	/* vrrpPacketSrc */
+	snmp_varlist_add_variable(&notification_vars,
+				  packet_src_oid, packet_src_oid_len,
+				  ASN_IPADDRESS,
+				  (u_char *)&src,
+				  sizeof(src));
+	/* vrrpAuthErrorType */
+	snmp_varlist_add_variable(&notification_vars,
+				  err_type_oid, err_type_oid_len,
+				  ASN_INTEGER,
+				  (u_char *)&auth_err,
+				  sizeof(auth_err));
+	log_message(LOG_INFO, "(%s) Sending SNMP notification"
+			      " vrrpTrapAuthFailure"
+			    , vrrp->iname);
+	send_v2trap(notification_vars);
+	snmp_free_varbind(notification_vars);
+}
+#endif
+
+#ifdef _WITH_SNMP_RFCV3_
+
+static bool
+suitable_for_rfc6527(const vrrp_t* vrrp)
+{
+#ifndef _SNMP_REPLY_V3_FOR_V2_
+	/* We mustn't return any VRRP instances that don't match version */
+	if (vrrp->version != VRRP_VERSION_3)
+		return false;
+#endif
+
+	/* We are expected to have at least one VIP */
+	if (LIST_ISEMPTY(vrrp->vip))
+		return false;
+
+	return true;
+}
+
+static inline int
+inet6_addr_compare(const struct in6_addr* l, const struct in6_addr* r)
+{
+	size_t i;
+	uint32_t l1, r1;
+
+	for (i = 0; i < sizeof(l->s6_addr32) / sizeof(l->s6_addr32[0]); i++)
+	{
+		l1 = htonl(l->s6_addr32[i]);
+		r1 = htonl(r->s6_addr32[i]);
+		if (l1 != r1)
+			return ((l1 > r1) & 1) * 2 - 1;
+	}
+
+	return 0;
+}
+
+static ip_address_t*
+vrrp_rfcv3_header_ar_table(struct variable *vp, oid *name, size_t *length,
+		     int exact, size_t *var_len, WriteMethod **write_method)
 {
-	static unsigned long long_ret;
-        oid *target, current[2], best[2];
-        int result, target_len;
-	int curinstance;
-	element e1, e2;
-	vrrp_t *instance;
-	tracked_if_t *ifp, *bifp = NULL;
-
-        if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
-                memcpy(name, vp->name, sizeof(oid) * vp->namelen);
-                *length = vp->namelen;
-        }
+	element e, e2;
+	ip_address_t *vip;
+	vrrp_t *scr;
+	ip_address_t *bel = NULL;
+	oid * target, current[3], best[3];
+	struct in_addr target_addr, current_addr, best_addr;
+	struct in6_addr target_addr6, current_addr6, best_addr6;
+	int result, result2 = 0;
+	size_t target_len;
+	bool found_exact = false;
+	bool found_better;
+	size_t i;
 
 	*write_method = 0;
-	*var_len = sizeof(long);
+	*var_len = sizeof(unsigned long);
 
 	if (LIST_ISEMPTY(vrrp_data->vrrp))
 		return NULL;
 
+	if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
+		memcpy(name, vp->name, sizeof(oid) * vp->namelen);
+		*length = vp->namelen;
+	}
+
 	/* We search the best match: equal if exact, the lower OID in
 	   the set of the OID strictly superior to the target
 	   otherwise. */
-        best[0] = best[1] = MAX_SUBID; /* Our best match */
-        target = &name[vp->namelen];   /* Our target match */
-        target_len = *length - vp->namelen;
-	curinstance = 0;
-	for (e1 = LIST_HEAD(vrrp_data->vrrp); e1; ELEMENT_NEXT(e1)) {
-		instance = ELEMENT_DATA(e1);
-		curinstance++;
-		if (target_len && (curinstance < target[0]))
-			continue; /* Optimization: cannot be part of our set */
-		if (target_len && bifp && (curinstance > target[0] + 1))
-			break; /* Optimization: cannot be the lower anymore */
-		if (LIST_ISEMPTY(instance->track_ifp))
+	best[0] = best[1] = best[2] = MAX_SUBID; /* Our best match */
+	best_addr.s_addr = 0xffffffff;
+	memset(&best_addr6, 0xff, sizeof(best_addr6));
+	target = &name[vp->namelen];   /* Our target match */
+	target_len = *length - vp->namelen;
+	target_addr.s_addr = 0;		/* Avoid compiler uninitialised warning */
+	if (target_len == 3 + sizeof(struct in_addr)) {
+		target_len = 3;
+		target_addr.s_addr = (in_addr_t)(name[*length - 4] << 24 |
+						 name[*length - 3] << 16 |
+						 name[*length - 2] << 8 |
+						 name[*length - 1]);
+	}
+	else if (target_len == 3 + sizeof(struct in6_addr)) {
+		target_len = 3;
+		for (i = 0; i < sizeof (struct in6_addr); i++)
+			target_addr6.s6_addr[i] = (uint8_t)name[*length - sizeof(struct in6_addr) + i];
+	}
+
+	LIST_FOREACH(vrrp_data->vrrp, scr, e) {
+		if (!suitable_for_rfc6527(scr))
 			continue;
-		for (e2 = LIST_HEAD(instance->track_ifp); e2; ELEMENT_NEXT(e2)) {
-			ifp = ELEMENT_DATA(e2);
-			/* We build our current match */
-			current[0] = curinstance;
-			current[1] = ifp->ifp->ifindex;
-			/* And compare it to our target match */
-			if ((result = snmp_oid_compare(current, 2, target,
-						       target_len)) < 0)
+
+		current[0] = IF_BASE_INDEX(scr->ifp);
+		current[1] = scr->vrid;
+		current[2] = scr->family == AF_INET ? 1 : 2;
+
+		if ((result = snmp_oid_compare(current, 3, target, target_len)) < 0)
+			continue;
+
+		if (exact) {
+			if (result != 0)
 				continue;
-			if ((result == 0) && !exact)
+		}
+		else {
+			if ((result2 = snmp_oid_compare(current, 3, best, 3)) > 0)
 				continue;
-			if (result == 0) {
-				/* Got an exact match and asked for it */
-				bifp = ifp;
-				goto trackedinterface_found;
+		}
+
+		if (LIST_ISEMPTY(scr->vip)) {
+			if (exact)
+				return NULL;
+			continue;
+		}
+
+		found_better = false;
+		LIST_FOREACH(scr->vip, vip, e2) {
+			if (scr->family == AF_INET) {
+				current_addr.s_addr = htonl(vip->u.sin.sin_addr.s_addr);
+
+				if (exact) {
+					if (target_addr.s_addr == current_addr.s_addr) {
+						memcpy(best, current, sizeof(best));
+						best_addr = current_addr;
+						bel = vip;
+						found_exact = true;
+						break;
+					}
+
+					continue;
+				}
+
+				if (result == 0 && target_len && current_addr.s_addr <= target_addr.s_addr)
+					continue;
+				if (result2 == 0 && current_addr.s_addr >= best_addr.s_addr)
+					continue;
+
+				memcpy(best, current, sizeof(best));
+				best_addr = current_addr;
+				bel = vip;
+				result2 = 0;
+				found_better = true;
 			}
-			if (snmp_oid_compare(current, 2, best, 2) < 0) {
-				/* This is our best match */
-				memcpy(best, current, sizeof(oid) * 2);
-				bifp = ifp;
+			else
+			{
+				current_addr6 = vip->u.sin6_addr;
+
+				if (exact) {
+					if (inet6_addr_compare(&target_addr6, &current_addr6) == 0) {
+						memcpy(best, current, sizeof(best));
+						best_addr6 = current_addr6;
+						bel = vip;
+						found_exact = true;
+						break;
+					}
+
+					continue;
+				}
+				if (result == 0 && target_len && inet6_addr_compare(&current_addr6, &target_addr6) <= 0)
+					continue;
+				if (result2 == 0 && inet6_addr_compare(&current_addr6, &best_addr6) >= 0)
+					continue;
+
+				memcpy(best, current, sizeof(best));
+				best_addr6 = current_addr6;
+				bel = vip;
+				result2 = 0;
+				found_better = true;
 			}
 		}
+
+		if (found_exact)
+			break;
+		if (exact)
+			return NULL;
+		if (result == 0 && found_better)
+			break;
 	}
-	if (bifp == NULL)
-		/* No best match */
-		return NULL;
-	if (exact)
-		/* No exact match */
+
+	if (bel == NULL)	/* No best match */
 		return NULL;
+
 	/* Let's use our best match */
-        memcpy(target, best, sizeof(oid) * 2);
-        *length = vp->namelen + 2;
- trackedinterface_found:
-	switch (vp->magic) {
-	case VRRP_SNMP_TRACKEDINTERFACE_NAME:
-		*var_len = strlen(bifp->ifp->ifname);
-		return (u_char *)bifp->ifp->ifname;
-	case VRRP_SNMP_TRACKEDINTERFACE_WEIGHT:
-		long_ret = bifp->weight;
-		return (u_char *)&long_ret;
+	memcpy(target, best, sizeof(best));
+	*length = (unsigned)vp->namelen + 3;
+	if (name[*length - 1] == 1) {
+		name[*length  ] =  best_addr.s_addr >> 24;
+		name[*length+1] = (best_addr.s_addr >> 16) & 0xff;
+		name[*length+2] = (best_addr.s_addr >>  8) & 0xff;
+		name[*length+3] = (best_addr.s_addr      ) & 0xff;
+		*length += sizeof(struct in_addr);
 	}
-	return NULL;
+	else {
+		for (i = 0; i < sizeof(struct in6_addr); i++)
+			name[*length + i] = best_addr6.s6_addr[i];
+		*length += sizeof(struct in6_addr);
+	}
+
+	return bel;
 }
 
-static u_char*
-vrrp_snmp_trackedscript(struct variable *vp, oid *name, size_t *length,
-			int exact, size_t *var_len, WriteMethod **write_method)
+static vrrp_t*
+snmp_rfcv3_header_list_table(struct variable *vp, oid *name, size_t *length,
+		  int exact, size_t *var_len, WriteMethod **write_method)
 {
-	static unsigned long long_ret;
-        oid *target, current[2], best[2];
-        int result, target_len;
-	int curinstance, curscr;
-	element e1, e2;
-	vrrp_t *instance;
-	tracked_sc_t *scr, *bscr = NULL;
-
-        if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
-                memcpy(name, vp->name, sizeof(oid) * vp->namelen);
-                *length = vp->namelen;
-        }
+	element e;
+	vrrp_t *bel = NULL, *scr;
+	oid * target, current[3], best[3];
+	int result;
+	size_t target_len;
 
 	*write_method = 0;
-	*var_len = sizeof(long);
+	*var_len = sizeof (unsigned long);
 
 	if (LIST_ISEMPTY(vrrp_data->vrrp))
 		return NULL;
 
+	if ((result = snmp_oid_compare(name, *length, vp->name, vp->namelen)) < 0) {
+		memcpy(name, vp->name, sizeof(oid) * vp->namelen);
+		*length = vp->namelen;
+	}
+
 	/* We search the best match: equal if exact, the lower OID in
 	   the set of the OID strictly superior to the target
 	   otherwise. */
-        best[0] = best[1] = MAX_SUBID; /* Our best match */
-        target = &name[vp->namelen];   /* Our target match */
-        target_len = *length - vp->namelen;
-	curinstance = 0;
-	for (e1 = LIST_HEAD(vrrp_data->vrrp); e1; ELEMENT_NEXT(e1)) {
-		instance = ELEMENT_DATA(e1);
-		curinstance++;
-		if (target_len && (curinstance < target[0]))
+	best[0] = best[1] = best[2] = MAX_SUBID; /* Our best match */
+	target = &name[vp->namelen];   /* Our target match */
+	target_len = *length - vp->namelen;
+
+	for (e = LIST_HEAD(vrrp_data->vrrp); e; ELEMENT_NEXT(e)) {
+		scr = (vrrp_t *)ELEMENT_DATA(e);
+
+		if (!suitable_for_rfc6527(scr))
+			continue;
+
+		if (target_len && (IF_BASE_INDEX(scr->ifp) < target[0] ||
+				   (IF_BASE_INDEX(scr->ifp) == target[0] &&
+				    scr->vrid < target[1])))
 			continue; /* Optimization: cannot be part of our set */
-		if (bscr)
-			break; /* Optimization, see below */
-		if (LIST_ISEMPTY(instance->track_script))
+
+		current[0] = IF_BASE_INDEX(scr->ifp);
+		current[1] = scr->vrid;
+		current[2] = scr->family == AF_INET ? 1 : 2;
+		if ((result = snmp_oid_compare(current, 3, target, target_len)) < 0)
 			continue;
-		curscr = 0;
-		for (e2 = LIST_HEAD(instance->track_script); e2; ELEMENT_NEXT(e2)) {
-			scr = ELEMENT_DATA(e2);
-			curscr++;
-			/* We build our current match */
-			current[0] = curinstance;
-			current[1] = curscr;
-			/* And compare it to our target match */
-			if ((result = snmp_oid_compare(current, 2, target,
-						       target_len)) < 0)
+		if (result == 0) {
+			if (!exact)
 				continue;
-			if ((result == 0) && !exact)
-				continue;
-			if (result == 0) {
-				/* Got an exact match and asked for it */
-				bscr = scr;
-				goto trackedscript_found;
-			}
-			if (snmp_oid_compare(current, 2, best, 2) < 0) {
-				/* This is our best match */
-				memcpy(best, current, sizeof(oid) * 2);
-				bscr = scr;
-				/* (current[0],current[1]) are
-				   strictly increasing, this is our
-				   lower element of our set */
-				break;
+			return scr;
+		}
+
+		if (snmp_oid_compare(current, 3, best, 3) < 0) {
+			/* This is our best match */
+			memcpy(best, current, sizeof(best));
+
+			bel = scr;
+		}
+	}
+
+	if (bel == NULL)
+		/* No best match */
+		return NULL;
+	if (exact)
+		/* No exact match */
+		return NULL;
+	/* Let's use our best match */
+	memcpy(target, best, sizeof(best));
+	*length = (unsigned)vp->namelen + 3;
+	return bel;
+}
+
+static u_char*
+vrrp_rfcv3_snmp_opertable(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
+{
+	vrrp_t *rt;
+	interface_t* ifp;
+	timeval_t uptime, cur_time;
+
+	if ((rt = snmp_rfcv3_header_list_table(vp, name, length, exact,
+					     var_len, write_method)) == NULL)
+		return NULL;
+
+	switch (vp->magic) {
+	case VRRP_RFCv3_SNMP_OPER_MIP:
+		if (rt->state != VRRP_STATE_MAST) {
+			if (rt->family == AF_INET) {
+				*var_len = sizeof(struct in_addr);
+				return (u_char*)&((struct sockaddr_in *)&rt->master_saddr)->sin_addr;
 			}
+			*var_len = sizeof(struct in6_addr);
+			return (u_char*)&((struct sockaddr_in6 *)&rt->master_saddr)->sin6_addr;
+		}
+		/* If we are master, we want to return the Primary IP address */
+		/* Falls through. */
+	case VRRP_RFCv3_SNMP_OPER_PIP:
+#ifdef _HAVE_VRRP_VMAC_
+		if (IS_VLAN(rt->ifp))
+			ifp = rt->ifp->base_ifp;
+		else
+#endif
+			ifp = rt->ifp;
+		if (rt->family == AF_INET) {
+			*var_len = sizeof(struct in_addr);
+			return (u_char*)&ifp->sin_addr;
+		}
+		*var_len = sizeof(struct in6_addr);
+		return (u_char*)&ifp->sin6_addr;
+	case VRRP_RFCv3_SNMP_OPER_VMAC:
+		*var_len = rt->ifp->hw_addr_len;
+		return (u_char*)&rt->ifp->hw_addr;
+	case VRRP_RFCv3_SNMP_OPER_STATE:
+		long_ret.s = vrrp_snmp_rfc_state(rt->state);
+		return (u_char*)&long_ret;
+	case VRRP_RFCv3_SNMP_OPER_PRI:
+		long_ret.u = rt->base_priority;
+		return (u_char*)&long_ret;
+	case VRRP_RFCv3_SNMP_OPER_ADDR_CNT:
+		if (LIST_ISEMPTY(rt->vip))
+			long_ret.u = 0;
+		else
+			long_ret.u = LIST_SIZE(rt->vip);
+		return (u_char*)&long_ret;
+	case VRRP_RFCv3_SNMP_OPER_ADVERT_INT:
+		long_ret.u = rt->adver_int / TIMER_CENTI_HZ;
+		return (u_char*)&long_ret;
+	case VRRP_RFCv3_SNMP_OPER_PREEMPT:
+		long_ret.s =  1 + rt->nopreempt;
+		return (u_char*)&long_ret;
+#ifdef _WITH_FIREWALL_
+	case VRRP_RFCv3_SNMP_OPER_ACCEPT:
+		long_ret.u =  1 + rt->accept;
+		return (u_char*)&long_ret;
+#endif
+	case VRRP_RFCv3_SNMP_OPER_VR_UPTIME:
+		if (rt->state == VRRP_STATE_BACK ||
+		    rt->state == VRRP_STATE_MAST) {
+			cur_time = timer_now();
+			timersub(&cur_time, &rt->stats->uptime, &uptime);
+			long_ret.s = uptime.tv_sec * 100 + uptime.tv_usec / 10000;	// unit is centi-seconds
+		}
+		else
+			long_ret.s = 0;
+		return (u_char*)&long_ret;
+	case VRRP_RFCv3_SNMP_OPER_ROW_STATUS:
+		long_ret.u = 1;	// active - 1, notInService - 2, notReady - 3, createAndGo - 4, createAndWait - 5
+		return (u_char*)&long_ret;
+	}
+
+	/* If we are here, we asked for a non existent data. Try the
+	   next one. */
+	if (!exact && (name[*length-1] < MAX_SUBID))
+		return vrrp_rfcv3_snmp_opertable(vp, name, length,
+					  exact, var_len, write_method);
+
+	return NULL;
+}
+
+static u_char*
+vrrp_rfcv3_snmp_assoiptable(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
+{
+	ip_address_t *addr;
+
+	if (snmp_oid_compare(name, *length, vp->name, vp->namelen) < 0) {
+		memcpy(name, vp->name, sizeof(oid) * vp->namelen);
+		*length = vp->namelen;
+		*var_len = 0;
+	}
+	if ((addr = vrrp_rfcv3_header_ar_table(vp, name, length, exact,
+				  var_len, write_method)) == NULL)
+		return NULL;
+
+	switch (vp->magic) {
+	case VRRP_RFCv3_SNMP_ASSOC_IP_ADDR_ROW_STATUS:
+		/* If we implement write access, then this could be 2 for down */
+		long_ret.u = 1;
+		return (u_char*)&long_ret;
+	}
+
+	/* If we are here, we asked for a non existent data. Try the
+	   next one.
+	   NOTE: This never appears to be true, so could be removed.
+	 */
+	if (!exact && (name[*length-1] < MAX_SUBID))
+		return vrrp_rfcv3_snmp_assoiptable(vp, name, length,
+					  exact, var_len, write_method);
+
+	return NULL;
+}
+
+static u_char*
+vrrp_rfcv3_snmp_stats(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
+{
+	static struct counter64 c64;
+	static uint32_t ret;
+	element e;
+	vrrp_t *vrrp;
+	uint64_t count;
+
+	if (header_generic(vp, name, length, exact, var_len, write_method))
+		return NULL;
+
+	if (vp->magic != VRRP_RFCv3_SNMP_STATS_CHK_ERR &&
+	    vp->magic != VRRP_RFCv3_SNMP_STATS_VER_ERR &&
+	    vp->magic != VRRP_RFCv3_SNMP_STATS_VRID_ERR &&
+	    vp->magic != VRRP_RFCv3_SNMP_STATS_DISC_TIME)
+		return NULL;
+
+	c64.high = c64.low = 0;
+	*var_len = sizeof(c64);
+
+	if (LIST_ISEMPTY(vrrp_data->vrrp))
+		return (u_char*)&c64;
+
+	count = 0;
+
+	/* We don't do discontinuity time at the moment */
+	if (vp->magic == VRRP_RFCv3_SNMP_STATS_DISC_TIME) {
+		// We don't "do" discontinuities
+		*var_len = sizeof(ret);
+		ret = 0;
+		return (u_char *)&ret;
+	}
+
+	/* Work through all the vrrp instances that we can respond for */
+	for (e = LIST_HEAD(vrrp_data->vrrp); e; ELEMENT_NEXT(e)) {
+		vrrp = ELEMENT_DATA(e);
+
+		if (!suitable_for_rfc6527(vrrp))
+			continue;
+
+		switch (vp->magic) {
+		case VRRP_RFCv3_SNMP_STATS_CHK_ERR:
+			count += vrrp->stats->chk_err;
+			break;
+		case VRRP_RFCv3_SNMP_STATS_VER_ERR:
+			count += vrrp->stats->vers_err;
+			break;
+		case VRRP_RFCv3_SNMP_STATS_VRID_ERR:
+			count += vrrp->stats->vrid_err;
+			break;
 		}
 	}
-	if (bscr == NULL)
-		/* No best match */
-		return NULL;
-	if (exact)
-		/* No exact match */
+
+	set_counter64(&c64, count);
+	return (u_char *)&c64;
+}
+
+static u_char*
+vrrp_rfcv3_snmp_statstable(struct variable *vp, oid *name, size_t *length,
+			int exact, size_t *var_len, WriteMethod **write_method)
+{
+	static uint32_t ret;
+	static struct counter64 c64;
+	vrrp_t *rt;
+
+	if ((rt = snmp_rfcv3_header_list_table(vp, name, length, exact,
+					     var_len, write_method)) == NULL)
 		return NULL;
-	/* Let's use our best match */
-        memcpy(target, best, sizeof(oid) * 2);
-        *length = vp->namelen + 2;
- trackedscript_found:
+
+	*var_len = sizeof(c64);
 	switch (vp->magic) {
-	case VRRP_SNMP_TRACKEDSCRIPT_NAME:
-		*var_len = strlen(bscr->scr->sname);
-		return (u_char *)bscr->scr->sname;
-	case VRRP_SNMP_TRACKEDSCRIPT_WEIGHT:
-		long_ret = bscr->weight;
-		return (u_char *)&long_ret;
+	case VRRP_RFCv3_SNMP_STATS_MASTER:
+		*var_len = sizeof(ret);
+		ret = rt->stats->become_master;
+		return (u_char *)&ret;
+	case VRRP_RFCv3_SNMP_STATS_MASTER_REASON:
+		ret = rt->stats->master_reason;
+		*var_len = sizeof(ret);
+		return (u_char*)&ret;
+	case VRRP_RFCv3_SNMP_STATS_ADV_RCVD:
+		set_counter64(&c64, rt->stats->advert_rcvd);
+		return (u_char *)&c64;
+	case VRRP_RFCv3_SNMP_STATS_ADV_INT_ERR:
+		set_counter64(&c64, rt->stats->advert_interval_err);
+		return (u_char *)&c64;
+	case VRRP_RFCv3_SNMP_STATS_TTL_ERR:
+		set_counter64(&c64, rt->stats->ip_ttl_err);
+		return (u_char *)&c64;
+	case VRRP_RFCv3_SNMP_STATS_PROTO_ERR_REASON:
+		*var_len = sizeof(ret);
+		ret = rt->stats->proto_err_reason;
+		return (u_char *)&ret;
+	case VRRP_RFCv3_SNMP_STATS_PRI_0_RCVD:
+		set_counter64(&c64, rt->stats->pri_zero_rcvd);
+		return (u_char *)&c64;
+	case VRRP_RFCv3_SNMP_STATS_PRI_0_SENT:
+		set_counter64(&c64, rt->stats->pri_zero_sent);
+		return (u_char *)&c64;
+	case VRRP_RFCv3_SNMP_STATS_INV_TYPE_RCVD:
+		set_counter64(&c64, rt->stats->invalid_type_rcvd);
+		return (u_char *)&c64;
+	case VRRP_RFCv3_SNMP_STATS_ADDR_LIST_ERR:
+		set_counter64(&c64, rt->stats->addr_list_err);
+		return (u_char *)&c64;
+	case VRRP_RFCv3_SNMP_STATS_PL_ERR:
+		set_counter64(&c64, rt->stats->packet_len_err);
+		return (u_char *)&c64;
+	case VRRP_RFCv3_SNMP_STATS_ROW_DISC_TIME:
+		// We don't "do" discontinuities
+		*var_len = sizeof(ret);
+		ret = 0;
+		return (u_char *)&ret;
+	case VRRP_RFCv3_SNMP_STATS_REFRESH_RATE:
+		*var_len = sizeof(ret);
+		ret = rt->adver_int / TIMER_CENTI_HZ * 10;	/* milliseconds */
+		return (u_char *)&ret;
 	}
-	return NULL;
-}
 
-static oid vrrp_oid[] = {VRRP_OID};
-static struct variable8 vrrp_vars[] = {
-	/* vrrpSyncGroupTable */
-	{VRRP_SNMP_SYNCGROUP_NAME, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_syncgroup, 3, {1, 1, 2}},
-	{VRRP_SNMP_SYNCGROUP_STATE, ASN_INTEGER, RONLY,
-	 vrrp_snmp_syncgroup, 3, {1, 1, 3}},
-	{VRRP_SNMP_SYNCGROUP_SMTPALERT, ASN_INTEGER, RONLY,
-	 vrrp_snmp_syncgroup, 3, {1, 1, 4}},
-	{VRRP_SNMP_SYNCGROUP_NOTIFYEXEC, ASN_INTEGER, RONLY,
-	 vrrp_snmp_syncgroup, 3, {1, 1, 5}},
-	{VRRP_SNMP_SYNCGROUP_SCRIPTMASTER, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_syncgroup, 3, {1, 1, 6}},
-	{VRRP_SNMP_SYNCGROUP_SCRIPTBACKUP, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_syncgroup, 3, {1, 1, 7}},
-	{VRRP_SNMP_SYNCGROUP_SCRIPTFAULT, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_syncgroup, 3, {1, 1, 8}},
-	{VRRP_SNMP_SYNCGROUP_SCRIPT, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_syncgroup, 3, {1, 1, 9}},
-	/* vrrpSyncGroupMemberTable */
-	{VRRP_SNMP_SYNCGROUPMEMBER_NAME, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_syncgroupmember, 3, {2, 1, 2}},
-	/* vrrpInstanceTable */
-	{VRRP_SNMP_INSTANCE_NAME, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 2}},
-	{VRRP_SNMP_INSTANCE_VIRTUALROUTERID, ASN_UNSIGNED, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 3}},
-	{VRRP_SNMP_INSTANCE_STATE, ASN_INTEGER, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 4}},
-	{VRRP_SNMP_INSTANCE_INITIALSTATE, ASN_INTEGER, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 5}},
-	{VRRP_SNMP_INSTANCE_WANTEDSTATE, ASN_INTEGER, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 6}},
-	{VRRP_SNMP_INSTANCE_BASEPRIORITY, ASN_INTEGER, RWRITE,
-	 vrrp_snmp_instance, 3, {3, 1, 7}},
-	{VRRP_SNMP_INSTANCE_EFFECTIVEPRIORITY, ASN_INTEGER, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 8}},
-	{VRRP_SNMP_INSTANCE_VIPSENABLED, ASN_INTEGER, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 9}},
-	{VRRP_SNMP_INSTANCE_PRIMARYINTERFACE, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 10}},
-	{VRRP_SNMP_INSTANCE_TRACKPRIMARYIF, ASN_INTEGER, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 11}},
-	{VRRP_SNMP_INSTANCE_ADVERTISEMENTSINT, ASN_UNSIGNED, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 12}},
-	{VRRP_SNMP_INSTANCE_PREEMPT, ASN_INTEGER, RWRITE,
-	 vrrp_snmp_instance, 3, {3, 1, 13}},
-	{VRRP_SNMP_INSTANCE_PREEMPTDELAY, ASN_UNSIGNED, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 14}},
-	{VRRP_SNMP_INSTANCE_AUTHTYPE, ASN_INTEGER, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 15}},
-	{VRRP_SNMP_INSTANCE_USELVSSYNCDAEMON, ASN_INTEGER, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 16}},
-	{VRRP_SNMP_INSTANCE_LVSSYNCINTERFACE, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 17}},
-	{VRRP_SNMP_INSTANCE_SYNCGROUP, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 18}},
-	{VRRP_SNMP_INSTANCE_GARPDELAY, ASN_UNSIGNED, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 19}},
-	{VRRP_SNMP_INSTANCE_SMTPALERT, ASN_INTEGER, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 20}},
-	{VRRP_SNMP_INSTANCE_NOTIFYEXEC, ASN_INTEGER, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 21}},
-	{VRRP_SNMP_INSTANCE_SCRIPTMASTER, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 22}},
-	{VRRP_SNMP_INSTANCE_SCRIPTBACKUP, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 23}},
-	{VRRP_SNMP_INSTANCE_SCRIPTFAULT, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 24}},
-	{VRRP_SNMP_INSTANCE_SCRIPTSTOP, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 25}},
-	{VRRP_SNMP_INSTANCE_SCRIPT, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_instance, 3, {3, 1, 26}},
-	/* vrrpTrackedInterfaceTable */
-	{VRRP_SNMP_TRACKEDINTERFACE_NAME, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_trackedinterface, 3, {4, 1, 1}},
-	{VRRP_SNMP_TRACKEDINTERFACE_WEIGHT, ASN_INTEGER, RONLY,
-	 vrrp_snmp_trackedinterface, 3, {4, 1, 2}},
-	/* vrrpTrackedScriptTable */
-	{VRRP_SNMP_TRACKEDSCRIPT_NAME, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_trackedscript, 3, {5, 1, 2}},
-	{VRRP_SNMP_TRACKEDSCRIPT_WEIGHT, ASN_INTEGER, RONLY,
-	 vrrp_snmp_trackedscript, 3, {5, 1, 3}},
-	/* vrrpAddressTable */
-	{VRRP_SNMP_ADDRESS_ADDRESSTYPE, ASN_INTEGER, RONLY,
-	 vrrp_snmp_address, 3, {6, 1, 2}},
-	{VRRP_SNMP_ADDRESS_VALUE, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_address, 3, {6, 1, 3}},
-	{VRRP_SNMP_ADDRESS_BROADCAST, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_address, 3, {6, 1, 4}},
-	{VRRP_SNMP_ADDRESS_MASK, ASN_UNSIGNED, RONLY,
-	 vrrp_snmp_address, 3, {6, 1, 5}},
-	{VRRP_SNMP_ADDRESS_SCOPE, ASN_INTEGER, RONLY,
-	 vrrp_snmp_address, 3, {6, 1, 6}},
-	{VRRP_SNMP_ADDRESS_IFINDEX, ASN_INTEGER, RONLY,
-	 vrrp_snmp_address, 3, {6, 1, 7}},
-	{VRRP_SNMP_ADDRESS_IFNAME, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_address, 3, {6, 1, 8}},
-	{VRRP_SNMP_ADDRESS_IFALIAS, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_address, 3, {6, 1, 9}},
-	{VRRP_SNMP_ADDRESS_ISSET, ASN_INTEGER, RONLY,
-	 vrrp_snmp_address, 3, {6, 1, 10}},
-	{VRRP_SNMP_ADDRESS_ISADVERTISED, ASN_INTEGER, RONLY,
-	 vrrp_snmp_address, 3, {6, 1, 11}},
-	/* vrrpRouteTable */
-	{VRRP_SNMP_ROUTE_ADDRESSTYPE, ASN_INTEGER, RONLY,
-	 vrrp_snmp_route, 3, {7, 1, 2}},
-	{VRRP_SNMP_ROUTE_DESTINATION, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_route, 3, {7, 1, 3}},
-	{VRRP_SNMP_ROUTE_DESTINATIONMASK, ASN_UNSIGNED, RONLY,
-	 vrrp_snmp_route, 3, {7, 1, 4}},
-	{VRRP_SNMP_ROUTE_GATEWAY, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_route, 3, {7, 1, 5}},
-	{VRRP_SNMP_ROUTE_SECONDARYGATEWAY, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_route, 3, {7, 1, 6}},
-	{VRRP_SNMP_ROUTE_SOURCE, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_route, 3, {7, 1, 7}},
-	{VRRP_SNMP_ROUTE_METRIC, ASN_UNSIGNED, RONLY,
-	 vrrp_snmp_route, 3, {7, 1, 8}},
-	{VRRP_SNMP_ROUTE_SCOPE, ASN_INTEGER, RONLY,
-	 vrrp_snmp_route, 3, {7, 1, 9}},
-	{VRRP_SNMP_ROUTE_TYPE, ASN_INTEGER, RONLY,
-	 vrrp_snmp_route, 3, {7, 1, 10}},
-	{VRRP_SNMP_ROUTE_IFINDEX, ASN_INTEGER, RONLY,
-	 vrrp_snmp_route, 3, {7, 1, 11}},
-	{VRRP_SNMP_ROUTE_IFNAME, ASN_OCTET_STR, RONLY,
-	 vrrp_snmp_route, 3, {7, 1, 12}},
-	{VRRP_SNMP_ROUTE_ROUTINGTABLE, ASN_UNSIGNED, RONLY,
-	 vrrp_snmp_route, 3, {7, 1, 13}},
-	{VRRP_SNMP_ROUTE_ISSET, ASN_INTEGER, RONLY,
-	 vrrp_snmp_route, 3, {7, 1, 14}},
-	/* vrrpScriptTable */
-	{VRRP_SNMP_SCRIPT_NAME, ASN_OCTET_STR, RONLY, vrrp_snmp_script, 3, {8, 1, 2}},
-	{VRRP_SNMP_SCRIPT_COMMAND, ASN_OCTET_STR, RONLY, vrrp_snmp_script, 3, {8, 1, 3}},
-	{VRRP_SNMP_SCRIPT_INTERVAL, ASN_INTEGER, RONLY, vrrp_snmp_script, 3, {8, 1, 4}},
-	{VRRP_SNMP_SCRIPT_WEIGHT, ASN_INTEGER, RONLY, vrrp_snmp_script, 3, {8, 1, 5}},
-	{VRRP_SNMP_SCRIPT_RESULT, ASN_INTEGER, RONLY, vrrp_snmp_script, 3, {8, 1, 6}},
-	{VRRP_SNMP_SCRIPT_RISE, ASN_UNSIGNED, RONLY, vrrp_snmp_script, 3, {8, 1, 7}},
-	{VRRP_SNMP_SCRIPT_FALL, ASN_UNSIGNED, RONLY, vrrp_snmp_script, 3, {8, 1, 8}},
-};
+	/* If we are here, we asked for a non existent data. Try the
+	   next one. */
+	if (!exact && (name[*length-1] < MAX_SUBID))
+		return vrrp_rfcv3_snmp_statstable(vp, name, length,
+					  exact, var_len, write_method);
 
-void
-vrrp_snmp_agent_init()
-{
-	snmp_agent_init(vrrp_oid, OID_LENGTH(vrrp_oid), "VRRP",
-			(struct variable *)vrrp_vars,
-			sizeof(struct variable8),
-			sizeof(vrrp_vars)/sizeof(struct variable8));
+	return NULL;
 }
 
-void
-vrrp_snmp_agent_close()
-{
-	snmp_agent_close(vrrp_oid, OID_LENGTH(vrrp_oid), "VRRP");
-}
+static oid vrrp_rfcv3_oid[] = {VRRP_RFCv3_OID};
+static struct variable8 vrrp_rfcv3_vars[] = {
+	/* vrrpOperTable */
+	{ VRRP_RFCv3_SNMP_OPER_MIP, ASN_OCTET_STR, RONLY,
+	  vrrp_rfcv3_snmp_opertable, 5, {1, 1, 1, 1, 3}},
+	{ VRRP_RFCv3_SNMP_OPER_PIP, ASN_OCTET_STR, RONLY,
+	  vrrp_rfcv3_snmp_opertable, 5, {1, 1, 1, 1, 4}},
+	{ VRRP_RFCv3_SNMP_OPER_VMAC, ASN_OCTET_STR, RONLY,
+	  vrrp_rfcv3_snmp_opertable, 5, {1, 1, 1, 1, 5}},
+	{ VRRP_RFCv3_SNMP_OPER_STATE, ASN_INTEGER, RONLY,
+	  vrrp_rfcv3_snmp_opertable, 5, {1, 1, 1, 1, 6}},
+	{ VRRP_RFCv3_SNMP_OPER_PRI, ASN_UNSIGNED, RONLY,
+	  vrrp_rfcv3_snmp_opertable, 5, {1, 1, 1, 1, 7}},
+	{ VRRP_RFCv3_SNMP_OPER_ADDR_CNT, ASN_INTEGER, RONLY,
+	  vrrp_rfcv3_snmp_opertable, 5, {1, 1, 1, 1, 8}},
+	{ VRRP_RFCv3_SNMP_OPER_ADVERT_INT, ASN_INTEGER, RONLY,
+	  vrrp_rfcv3_snmp_opertable, 5, {1, 1, 1, 1, 9}},
+	{ VRRP_RFCv3_SNMP_OPER_PREEMPT, ASN_INTEGER, RONLY,
+	  vrrp_rfcv3_snmp_opertable, 5, {1, 1, 1, 1, 10}},
+	{ VRRP_RFCv3_SNMP_OPER_ACCEPT, ASN_INTEGER, RONLY,
+	  vrrp_rfcv3_snmp_opertable, 5, {1, 1, 1, 1, 11}},
+	{ VRRP_RFCv3_SNMP_OPER_VR_UPTIME, ASN_TIMETICKS, RONLY,
+	  vrrp_rfcv3_snmp_opertable, 5, {1, 1, 1, 1, 12}},
+	{ VRRP_RFCv3_SNMP_OPER_ROW_STATUS, ASN_INTEGER, RONLY,
+	  vrrp_rfcv3_snmp_opertable, 5, {1, 1, 1, 1, 13}},
+	/* vrrpAssoIpAddrTable */
+	{ VRRP_RFCv3_SNMP_ASSOC_IP_ADDR_ROW_STATUS, ASN_INTEGER, RONLY,
+	  vrrp_rfcv3_snmp_assoiptable, 5, {1, 1, 2, 1, 2}},
+	/* vrrpRouterStats */
+	{ VRRP_RFCv3_SNMP_STATS_CHK_ERR, ASN_COUNTER64, RONLY,
+	  vrrp_rfcv3_snmp_stats, 3, {1, 2, 1}},
+	{ VRRP_RFCv3_SNMP_STATS_VER_ERR, ASN_COUNTER64, RONLY,
+	  vrrp_rfcv3_snmp_stats, 3, {1, 2, 2}},
+	{ VRRP_RFCv3_SNMP_STATS_VRID_ERR, ASN_COUNTER64, RONLY,
+	  vrrp_rfcv3_snmp_stats, 3, {1, 2, 3}},
+	{ VRRP_RFCv3_SNMP_STATS_DISC_TIME, ASN_TIMETICKS, RONLY,
+	  vrrp_rfcv3_snmp_stats, 3, {1, 2, 4}},
+	/* vrrpRouterStatsTable */
+	{ VRRP_RFCv3_SNMP_STATS_MASTER, ASN_COUNTER, RONLY,
+	  vrrp_rfcv3_snmp_statstable, 5, {1, 2, 5, 1, 1}},
+	{ VRRP_RFCv3_SNMP_STATS_MASTER_REASON, ASN_INTEGER, RONLY,
+	  vrrp_rfcv3_snmp_statstable, 5, {1, 2, 5, 1, 2}},
+	{ VRRP_RFCv3_SNMP_STATS_ADV_RCVD, ASN_COUNTER64, RONLY,
+	  vrrp_rfcv3_snmp_statstable, 5, {1, 2, 5, 1, 3}},
+	{ VRRP_RFCv3_SNMP_STATS_ADV_INT_ERR, ASN_COUNTER64, RONLY,
+	  vrrp_rfcv3_snmp_statstable, 5, {1, 2, 5, 1, 4}},
+	{ VRRP_RFCv3_SNMP_STATS_TTL_ERR, ASN_COUNTER64, RONLY,
+	  vrrp_rfcv3_snmp_statstable, 5, {1, 2, 5, 1, 5}},
+	{ VRRP_RFCv3_SNMP_STATS_PROTO_ERR_REASON, ASN_INTEGER, RONLY,
+	  vrrp_rfcv3_snmp_statstable, 5, {1, 2, 5, 1, 6}},
+	{ VRRP_RFCv3_SNMP_STATS_PRI_0_RCVD, ASN_COUNTER64, RONLY,
+	  vrrp_rfcv3_snmp_statstable, 5, {1, 2, 5, 1, 7}},
+	{ VRRP_RFCv3_SNMP_STATS_PRI_0_SENT, ASN_COUNTER64 , RONLY,
+	  vrrp_rfcv3_snmp_statstable, 5, {1, 2, 5, 1, 8}},
+	{ VRRP_RFCv3_SNMP_STATS_INV_TYPE_RCVD, ASN_COUNTER64, RONLY,
+	  vrrp_rfcv3_snmp_statstable, 5, {1, 2, 5, 1, 9}},
+	{ VRRP_RFCv3_SNMP_STATS_ADDR_LIST_ERR, ASN_COUNTER64, RONLY,
+	  vrrp_rfcv3_snmp_statstable, 5, {1, 2, 5, 1, 10}},
+	{ VRRP_RFCv3_SNMP_STATS_PL_ERR, ASN_COUNTER64, RONLY,
+	  vrrp_rfcv3_snmp_statstable, 5, {1, 2, 5, 1, 11}},
+	{ VRRP_RFCv3_SNMP_STATS_ROW_DISC_TIME, ASN_TIMETICKS, RONLY,
+	  vrrp_rfcv3_snmp_statstable, 5, {1, 2, 5, 1, 12}},
+	{ VRRP_RFCv3_SNMP_STATS_REFRESH_RATE, ASN_UNSIGNED, RONLY,
+	  vrrp_rfcv3_snmp_statstable, 5, {1, 2, 5, 1, 13}}
+};
 
 void
-vrrp_snmp_instance_trap(vrrp_t *vrrp)
+vrrp_rfcv3_snmp_new_master_notify(vrrp_t *vrrp)
 {
-	/* OID of the notification */
-	oid notification_oid[] = { VRRP_OID, 9, 0, 2 };
+	/* OID of the notification vrrpTrapNewMaster */
+	oid notification_oid[] = { VRRP_RFCv3_NOTIFY_OID, 1 };
 	size_t notification_oid_len = OID_LENGTH(notification_oid);
-	/* OID for snmpTrapOID.0 */
+	/* OID for snmpNotifyOID.0 */
 	oid objid_snmptrap[] = { SNMPTRAP_OID };
 	size_t objid_snmptrap_len = OID_LENGTH(objid_snmptrap);
-
-	/* Other OID */
-	oid name_oid[] = { VRRP_OID, 3, 1, 2 };
-	size_t name_oid_len = OID_LENGTH(name_oid);
-	oid state_oid[] = { VRRP_OID, 3, 1, 4 };
-	size_t state_oid_len = OID_LENGTH(state_oid);
-	oid initialstate_oid[] = { VRRP_OID, 3, 1, 5};
-	size_t initialstate_oid_len = OID_LENGTH(initialstate_oid);
-	oid routerId_oid[] = { KEEPALIVED_OID, 1, 2, 0 };
-	size_t routerId_oid_len = OID_LENGTH(routerId_oid);
+	/* OID for trap data vrrpOperMasterIPAddr */
+	oid masterip_oid[] = { VRRP_RFCv3_OID, 1, 1, 1, 1, 3, IF_BASE_INDEX(vrrp->ifp), vrrp->vrid, vrrp->family == AF_INET ? 1 : 2 };
+	size_t masterip_oid_len = OID_LENGTH(masterip_oid);
+	oid master_reason_oid[] = { VRRP_RFCv3_OID, 1, 2, 5, 1, 2, IF_BASE_INDEX(vrrp->ifp), vrrp->vrid, vrrp->family == AF_INET ? 1 : 2 };
+	size_t master_reason_oid_len = OID_LENGTH(master_reason_oid);
+	uint32_t reason = vrrp->stats->master_reason;
 
 	netsnmp_variable_list *notification_vars = NULL;
 
-        static unsigned long state;
-	static unsigned long istate;
+	if (!global_data->enable_traps || !global_data->enable_snmp_rfcv3)
+		return;
 
-	if (!global_data->enable_traps) return;
+	if (!suitable_for_rfc6527(vrrp))
+		return;
 
 	/* snmpTrapOID */
 	snmp_varlist_add_variable(&notification_vars,
@@ -1087,63 +4388,51 @@ vrrp_snmp_instance_trap(vrrp_t *vrrp)
 				  (u_char *) notification_oid,
 				  notification_oid_len * sizeof(oid));
 	/* vrrpInstanceName */
-	snmp_varlist_add_variable(&notification_vars,
-				  name_oid, name_oid_len,
-				  ASN_OCTET_STR,
-				  (u_char *)vrrp->iname,
-                                  strlen(vrrp->iname));
-	/* vrrpInstanceState */
-	state = vrrp_snmp_state(vrrp->state);
-	snmp_varlist_add_variable(&notification_vars,
-				  state_oid, state_oid_len,
-				  ASN_INTEGER,
-				  (u_char *)&state,
-				  sizeof(state));
-	/* vrrpInstanceInitialState */
-	istate = vrrp_snmp_state(vrrp->init_state);
-	snmp_varlist_add_variable(&notification_vars,
-				  initialstate_oid, initialstate_oid_len,
-				  ASN_INTEGER,
-				  (u_char *)&istate,
-				  sizeof(istate));
+	if (vrrp->family == AF_INET)
+		snmp_varlist_add_variable(&notification_vars,
+					  masterip_oid, masterip_oid_len,
+					  ASN_OCTET_STR,
+					  (u_char *)&((struct sockaddr_in *)&vrrp->saddr)->sin_addr.s_addr,
+					  sizeof(((struct sockaddr_in *)&vrrp->saddr)->sin_addr.s_addr));
+	else
+		snmp_varlist_add_variable(&notification_vars,
+					  masterip_oid, masterip_oid_len,
+					  ASN_OCTET_STR,
+					  (u_char *)&((struct sockaddr_in6 *)&vrrp->saddr)->sin6_addr,
+					  sizeof(((struct sockaddr_in6 *)&vrrp->saddr)->sin6_addr));
 
-	/* routerId */
 	snmp_varlist_add_variable(&notification_vars,
-				  routerId_oid, routerId_oid_len,
-				  ASN_OCTET_STR,
-				  (u_char *)global_data->router_id,
-				  strlen(global_data->router_id));
-
-	log_message(LOG_INFO,
-		    "VRRP_Instance(%s): Sending SNMP notification",
-		    vrrp->iname);
+				  master_reason_oid, master_reason_oid_len,
+				  ASN_INTEGER,
+				  (u_char *)&reason,
+				  sizeof(reason));
+	log_message(LOG_INFO, "(%s) Sending SNMP notification"
+			      " vrrpv3NotifyNewMaster, reason %" PRIu32
+			    , vrrp->iname, reason);
 	send_v2trap(notification_vars);
 	snmp_free_varbind(notification_vars);
 }
 
 void
-vrrp_snmp_group_trap(vrrp_sgroup_t *group)
+vrrp_rfcv3_snmp_proto_err_notify(vrrp_t *vrrp)
 {
-	/* OID of the notification */
-	oid notification_oid[] = { VRRP_OID, 9, 0, 1 };
+	/* OID of the notification vrrpTrapNewMaster */
+	oid notification_oid[] = { VRRP_RFCv3_NOTIFY_OID, 2 };
 	size_t notification_oid_len = OID_LENGTH(notification_oid);
 	/* OID for snmpTrapOID.0 */
 	oid objid_snmptrap[] = { SNMPTRAP_OID };
 	size_t objid_snmptrap_len = OID_LENGTH(objid_snmptrap);
-
-	/* Other OID */
-	oid name_oid[] = { VRRP_OID, 1, 1, 2 };
-	size_t name_oid_len = OID_LENGTH(name_oid);
-	oid state_oid[] = { VRRP_OID, 1, 1, 3 };
-	size_t state_oid_len = OID_LENGTH(state_oid);
-	oid routerId_oid[] = { KEEPALIVED_OID, 1, 2, 0 };
-	size_t routerId_oid_len = OID_LENGTH(routerId_oid);
+	/* OID for notify data vrrpTrapProtoErrorType */
+	oid err_type_oid[] = { VRRP_RFCv3_OID, 1, 2, 5, 1, 6, IF_INDEX(vrrp->ifp), vrrp->vrid, vrrp->family == AF_INET ? 1 : 2 };
+	size_t err_type_oid_len = OID_LENGTH(err_type_oid);
 
 	netsnmp_variable_list *notification_vars = NULL;
 
-        static unsigned long state;
+	if (!global_data->enable_traps || !global_data->enable_snmp_rfcv3)
+		return;
 
-	if (!global_data->enable_traps) return;
+	if (!suitable_for_rfc6527(vrrp))
+		return;
 
 	/* snmpTrapOID */
 	snmp_varlist_add_variable(&notification_vars,
@@ -1151,31 +4440,90 @@ vrrp_snmp_group_trap(vrrp_sgroup_t *group)
 				  ASN_OBJECT_ID,
 				  (u_char *) notification_oid,
 				  notification_oid_len * sizeof(oid));
-
-	/* vrrpSyncGroupName */
-	snmp_varlist_add_variable(&notification_vars,
-				  name_oid, name_oid_len,
-				  ASN_OCTET_STR,
-				  (u_char *)group->gname,
-                                  strlen(group->gname));
-	/* vrrpSyncGroupState */
-	state = vrrp_snmp_state(group->state);
+	/* vrrpProtoErrorType */
 	snmp_varlist_add_variable(&notification_vars,
-				  state_oid, state_oid_len,
+				  err_type_oid, err_type_oid_len,
 				  ASN_INTEGER,
-				  (u_char *)&state,
-				  sizeof(state));
-
-	/* routerId */
-	snmp_varlist_add_variable(&notification_vars,
-				  routerId_oid, routerId_oid_len,
-				  ASN_OCTET_STR,
-				  (u_char *)global_data->router_id,
-				  strlen(global_data->router_id));
-
-	log_message(LOG_INFO,
-		    "VRRP_Group(%s): Sending SNMP notification",
-		    group->gname);
+				  (u_char *)&vrrp->stats->proto_err_reason,
+				  sizeof(vrrp->stats->proto_err_reason));
+	log_message(LOG_INFO, "(%s) Sending SNMP notification"
+			      " vrrpTrapProtoError"
+			    , vrrp->iname);
 	send_v2trap(notification_vars);
 	snmp_free_varbind(notification_vars);
 }
+#endif
+
+static bool
+vrrp_handles_global_oid(void)
+{
+#ifdef _WITH_SNMP_VRRP_
+	if (global_data->enable_snmp_vrrp) {
+#ifdef _WITH_LVS_
+		if (!running_checker())
+			return true;
+#ifdef _WITH_SNMP_CHECKER_
+		if (!global_data->enable_snmp_checker)
+			return true;
+#endif
+#else
+		return true;
+#endif
+	}
+#endif
+
+	return false;
+}
+
+void
+vrrp_snmp_agent_init(const char *snmp_socket_name)
+{
+	if (snmp_running)
+		return;
+
+	/* We let the check process handle the global OID if it is running and with snmp */
+	snmp_agent_init(snmp_socket_name, vrrp_handles_global_oid());
+
+#ifdef _WITH_SNMP_VRRP_
+	if (global_data->enable_snmp_vrrp)
+		snmp_register_mib(vrrp_oid, OID_LENGTH(vrrp_oid), "KEEPALIVED-VRRP",
+				  (struct variable *)vrrp_vars,
+				  sizeof(struct variable8),
+				  sizeof(vrrp_vars)/sizeof(struct variable8));
+#endif
+#ifdef _WITH_SNMP_RFCV2_
+	if (global_data->enable_snmp_rfcv2)
+		snmp_register_mib(vrrp_rfcv2_oid, OID_LENGTH(vrrp_rfcv2_oid), "VRRP",
+				  (struct variable *)vrrp_rfcv2_vars,
+				  sizeof(struct variable8),
+				  sizeof(vrrp_rfcv2_vars)/sizeof(struct variable8));
+#endif
+#ifdef _WITH_SNMP_RFCV3_
+	if (global_data->enable_snmp_rfcv3)
+		snmp_register_mib(vrrp_rfcv3_oid, OID_LENGTH(vrrp_rfcv3_oid), "VRRPV3",
+				  (struct variable *)vrrp_rfcv3_vars,
+				  sizeof(struct variable8),
+				  sizeof(vrrp_rfcv3_vars)/sizeof(struct variable8));
+#endif
+}
+
+void
+vrrp_snmp_agent_close(void)
+{
+	if (!snmp_running)
+		return;
+
+#ifdef _WITH_SNMP_VRRP_
+	if (global_data->enable_snmp_vrrp)
+		snmp_unregister_mib(vrrp_oid, OID_LENGTH(vrrp_oid));
+#endif
+#ifdef _WITH_SNMP_RFCV2_
+	if (global_data->enable_snmp_rfcv2)
+		snmp_unregister_mib(vrrp_rfcv2_oid, OID_LENGTH(vrrp_rfcv2_oid));
+#endif
+#ifdef _WITH_SNMP_RFCV3_
+	if (global_data->enable_snmp_rfcv3)
+		snmp_unregister_mib(vrrp_rfcv3_oid, OID_LENGTH(vrrp_rfcv3_oid));
+#endif
+	snmp_agent_close(vrrp_handles_global_oid());
+}
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_static_track.c b/tools/keepalived/keepalived/vrrp/vrrp_static_track.c
new file mode 100644
index 000000000..ce77c1ce0
--- /dev/null
+++ b/tools/keepalived/keepalived/vrrp/vrrp_static_track.c
@@ -0,0 +1,219 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Tracking static addresses/routes/rules framework.
+ *
+ * Author:      Quentin Armitage, <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2018-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+/* local include */
+#include "vrrp_data.h"
+#include "vrrp.h"
+#include "vrrp_sync.h"
+#include "logger.h"
+#include "vrrp_static_track.h"
+#include "vrrp_ipaddress.h"
+#include "vrrp_track.h"
+#ifdef _HAVE_FIB_ROUTING_
+#include "vrrp_iproute.h"
+#include "vrrp_iprule.h"
+#endif
+
+void
+free_tgroup(void *data)
+{
+	static_track_group_t *tgroup = data;
+
+	if (tgroup->iname) {
+		log_message(LOG_INFO, "track group %s - iname vector exists when freeing group", tgroup->gname);
+		free_strvec(tgroup->iname);
+	}
+	FREE_CONST(tgroup->gname);
+	free_list(&tgroup->vrrp_instances);
+	FREE(tgroup);
+}
+
+void
+dump_tgroup(FILE *fp, const void *data)
+{
+	const static_track_group_t *tgroup = data;
+	vrrp_t *vrrp;
+	element e;
+
+	conf_write(fp, " Static Track Group = %s", tgroup->gname);
+	if (tgroup->vrrp_instances) {
+		conf_write(fp, "   VRRP member instances = %u", LIST_SIZE(tgroup->vrrp_instances));
+		LIST_FOREACH(tgroup->vrrp_instances, vrrp, e)
+			conf_write(fp, "     %s", vrrp->iname);
+	}
+}
+
+static_track_group_t * __attribute__ ((pure))
+find_track_group(const char *gname)
+{
+	element e;
+	static_track_group_t *tg;
+
+	LIST_FOREACH(vrrp_data->static_track_groups, tg, e)
+		if (!strcmp(gname, tg->gname))
+			return tg;
+
+	return NULL;
+}
+
+static void
+static_track_set_group(static_track_group_t *tgroup)
+{
+	vrrp_t *vrrp;
+	char *str;
+	unsigned int i;
+
+	/* Can't handle no members of the group */
+	if (!tgroup->iname)
+		return;
+
+	tgroup->vrrp_instances = alloc_list(NULL, NULL);
+
+	for (i = 0; i < vector_size(tgroup->iname); i++) {
+		str = vector_slot(tgroup->iname, i);
+		vrrp = vrrp_get_instance(str);
+		if (!vrrp) {
+			log_message(LOG_INFO, "vrrp instance %s specified in track group %s doesn't exist - ignoring", str, tgroup->gname);
+			continue;
+		}
+
+		list_add(tgroup->vrrp_instances, vrrp);
+	}
+
+	/* The iname vector is only used for us to set up the sync groups, so delete it */
+	free_strvec(tgroup->iname);
+	tgroup->iname = NULL;
+}
+
+void
+static_track_group_init(void)
+{
+	static_track_group_t *tg;
+	vrrp_t *vrrp;
+	ip_address_t *addr;
+#ifdef _HAVE_FIB_ROUTING_
+	ip_route_t *route;
+	ip_rule_t *rule;
+#endif
+	element e, e1, next;
+
+	LIST_FOREACH_NEXT(vrrp_data->static_track_groups, tg, e, next) {
+		if (!tg->iname) {
+                        log_message(LOG_INFO, "Static track group %s has no virtual router(s) - removing", tg->gname);
+                        free_list_element(vrrp_data->static_track_groups, e);
+                        continue;
+                }
+
+		static_track_set_group(tg);
+
+		if (!tg->vrrp_instances) {
+                        free_list_element(vrrp_data->static_track_groups, e);
+                        continue;
+                }
+	}
+
+	/* Add the tracking vrrps to track the interface of each tracked address */
+	LIST_FOREACH(vrrp_data->static_addresses, addr, e) {
+		if (!addr->track_group)
+			continue;
+		if (addr->dont_track) {
+			log_message(LOG_INFO, "Static address has both track_group and no_track set - not tracking");
+			continue;
+		}
+
+		LIST_FOREACH(addr->track_group->vrrp_instances, vrrp, e1)
+			add_vrrp_to_interface(vrrp, addr->ifp, 0, false, false, TRACK_SADDR);
+	}
+
+#ifdef _HAVE_FIB_ROUTING_
+	/* Add the tracking vrrps to track the interface of each tracked address */
+	LIST_FOREACH(vrrp_data->static_routes, route, e) {
+		if (!route->track_group)
+			continue;
+		if (route->dont_track) {
+			log_message(LOG_INFO, "Static route has both track_group and no_track set - not tracking");
+			continue;
+		}
+
+		LIST_FOREACH(route->track_group->vrrp_instances, vrrp, e1) {
+			if (route->oif)
+				add_vrrp_to_interface(vrrp, route->oif, 0, false, false, TRACK_SROUTE);
+		}
+	}
+
+	LIST_FOREACH(vrrp_data->static_rules, rule, e) {
+		if (!rule->track_group)
+			continue;
+		if (rule->dont_track) {
+			log_message(LOG_INFO, "Static rule has both track_group and no_track set - not tracking");
+			continue;
+		}
+
+		LIST_FOREACH(rule->track_group->vrrp_instances, vrrp, e1) {
+			if (rule->iif)
+				add_vrrp_to_interface(vrrp, rule->iif, 0, false, false, TRACK_SRULE);
+		}
+	}
+#endif
+}
+
+void
+static_track_reinstate_config(interface_t *ifp)
+{
+	ip_address_t *addr;
+#ifdef _HAVE_FIB_ROUTING_
+	ip_route_t *route;
+/*	ip_rule_t *rule; */
+#endif
+	element e;
+
+	LIST_FOREACH(vrrp_data->static_addresses, addr, e) {
+		if (addr->dont_track)
+			continue;
+		if (addr->ifp != ifp)
+			continue;
+		reinstate_static_address(addr, NULL);
+	}
+
+#ifdef _HAVE_FIB_ROUTING_
+	/* Add the tracking vrrps to track the interface of each tracked address */
+	LIST_FOREACH(vrrp_data->static_routes, route, e) {
+		if (route->dont_track)
+			continue;
+		if (route->oif != ifp)
+			continue;
+		reinstate_static_route(route);
+	}
+
+	/* Rules don't get deleted on interface deletion, so we don't need to do anything for them
+	LIST_FOREACH(vrrp_data->static_rules, rule, e) {
+		if (rule->dont_track)
+			continue;
+		if (rule->iif != ifp)
+			continue;
+		reinstate_static_route(route);
+	}
+	*/
+#endif
+}
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_sync.c b/tools/keepalived/keepalived/vrrp/vrrp_sync.c
index ee35b0b82..e6660d02d 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_sync.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_sync.c
@@ -17,40 +17,23 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <stdbool.h>
+
 #include "vrrp_sync.h"
-#include "vrrp_if.h"
+#include "vrrp_track.h"
 #include "vrrp_notify.h"
 #include "vrrp_data.h"
-#ifdef _WITH_SNMP_
-  #include "vrrp_snmp.h"
-#endif
 #include "logger.h"
-#include "smtp.h"
-
-/* Compute the new instance sands */
-void
-vrrp_init_instance_sands(vrrp_t * vrrp)
-{
-	set_time_now();
-
-	if (vrrp->state == VRRP_STATE_MAST	  ||
-	    vrrp->state == VRRP_STATE_GOTO_MASTER ||
-	    vrrp->state == VRRP_STATE_GOTO_FAULT  ||
-	    vrrp->wantstate == VRRP_STATE_GOTO_MASTER) {
-		vrrp->sands.tv_sec = time_now.tv_sec + vrrp->adver_int / TIMER_HZ;
- 		vrrp->sands.tv_usec = time_now.tv_usec;
-		return;
-	}
-
-	if (vrrp->state == VRRP_STATE_BACK || vrrp->state == VRRP_STATE_FAULT)
-		vrrp->sands = timer_add_long(time_now, vrrp->ms_down_timer);
-}
+#include "vrrp_scheduler.h"
+#include "parser.h"
 
 /* Instance name lookup */
-vrrp_t *
+vrrp_t * __attribute__ ((pure))
 vrrp_get_instance(char *iname)
 {
 	vrrp_t *vrrp;
@@ -71,127 +54,85 @@ vrrp_sync_set_group(vrrp_sgroup_t *vgroup)
 {
 	vrrp_t *vrrp;
 	char *str;
-	int i;
+	unsigned int i;
+	bool group_member_down = false;
+
+	/* Can't handle no members of the group */
+	if (!vgroup->iname)
+		return;
+
+	vgroup->vrrp_instances = alloc_list(NULL, NULL);
 
 	for (i = 0; i < vector_size(vgroup->iname); i++) {
 		str = vector_slot(vgroup->iname, i);
 		vrrp = vrrp_get_instance(str);
-		if (vrrp) {
-			if (LIST_ISEMPTY(vgroup->index_list))
-				vgroup->index_list = alloc_list(NULL, NULL);
-			list_add(vgroup->index_list, vrrp);
-			vrrp->sync = vgroup;
+		if (!vrrp) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Virtual router %s specified in sync group %s doesn't exist - ignoring", str, vgroup->gname);
+			continue;
 		}
-	}
-}
 
-/* All interface are UP in the same group */
-int
-vrrp_sync_group_up(vrrp_sgroup_t * vgroup)
-{
-	vrrp_t *vrrp;
-	element e;
-	list l = vgroup->index_list;
-	int is_up = 0;
+		if (vrrp->sync) {
+			report_config_error(CONFIG_GENERAL_ERROR, "Virtual router %s cannot exist in more than one sync group; ignoring %s", str, vgroup->gname);
+			continue;
+		}
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		vrrp = ELEMENT_DATA(e);
-		if (VRRP_ISUP(vrrp))
-			is_up++;
-	}
+		list_add(vgroup->vrrp_instances, vrrp);
+		vrrp->sync = vgroup;
 
-	if (is_up == LIST_SIZE(vgroup->index_list)) {
-		log_message(LOG_INFO, "Kernel is reporting: Group(%s) UP"
-			       , GROUP_NAME(vgroup));
-		return 1;
-	}
-	return 0;
-}
+		/* set eventual sync group state. Unless all members are master and address owner,
+		 * then we must be backup */
+		if (vgroup->state == VRRP_STATE_MAST && vrrp->wantstate == VRRP_STATE_BACK)
+			report_config_error(CONFIG_GENERAL_ERROR, "Sync group %s has some member(s) as address owner and some not as address owner. This won't work.", vgroup->gname);
+		if (vgroup->state != VRRP_STATE_BACK)
+			vgroup->state = (vrrp->wantstate == VRRP_STATE_MAST && vrrp->base_priority == VRRP_PRIO_OWNER) ? VRRP_STATE_MAST : VRRP_STATE_BACK;
 
-/* SMTP alert group notifier */
-void
-vrrp_sync_smtp_notifier(vrrp_sgroup_t *vgroup)
-{
-	if (vgroup->smtp_alert) {
-		if (GROUP_STATE(vgroup) == VRRP_STATE_MAST)
-			smtp_alert(NULL, NULL, vgroup,
-				   "Entering MASTER state",
-				   "=> All VRRP group instances are now in MASTER state <=");
-		if (GROUP_STATE(vgroup) == VRRP_STATE_BACK)
-			smtp_alert(NULL, NULL, vgroup,
-				   "Entering BACKUP state",
-				   "=> All VRRP group instances are now in BACKUP state <=");
+// TODO - what about track scripts down?
+		if (vrrp->state == VRRP_STATE_FAULT)
+			group_member_down = true;
 	}
-}
 
-/* Leaving fault state */
-int
-vrrp_sync_leave_fault(vrrp_t * vrrp)
-{
-	vrrp_sgroup_t *vgroup = vrrp->sync;
+	if (group_member_down)
+		vgroup->state = VRRP_STATE_FAULT;
+
+	if (LIST_SIZE(vgroup->vrrp_instances) <= 1) {
+		/* The sync group will be removed by the calling function if it has no members */
+		report_config_error(CONFIG_GENERAL_ERROR, "Sync group %s has %s virtual router(s) - %s", vgroup->gname, LIST_SIZE(vgroup->vrrp_instances) ? "only 1" : "no",
+				LIST_SIZE(vgroup->vrrp_instances) ? "this probably isn't what you want" : "removing");
 
-	if (vrrp_sync_group_up(vgroup)) {
-		log_message(LOG_INFO, "VRRP_Group(%s) Leaving FAULT state",
-		       GROUP_NAME(vgroup));
-		return 1;
+		if (!LIST_SIZE(vgroup->vrrp_instances))
+			free_list(&vgroup->vrrp_instances);
 	}
-	return 0;
+
+	/* The iname vector is only used for us to set up the sync groups, so delete it */
+	free_strvec(vgroup->iname);
+	vgroup->iname = NULL;
 }
 
 /* Check transition to master state */
-int
-vrrp_sync_goto_master(vrrp_t * vrrp)
+bool
+vrrp_sync_can_goto_master(vrrp_t * vrrp)
 {
 	vrrp_t *isync;
 	vrrp_sgroup_t *vgroup = vrrp->sync;
-	list l = vgroup->index_list;
 	element e;
 
 	if (GROUP_STATE(vgroup) == VRRP_STATE_MAST)
-		return 1;
-	if (GROUP_STATE(vgroup) == VRRP_STATE_GOTO_MASTER)
-		return 1;
+		return true;
 
-        /* Only sync to master if everyone wants to 
+	/* Only sync to master if everyone wants to
 	 * i.e. prefer backup state to avoid thrashing */
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		isync = ELEMENT_DATA(e);
-		if (isync != vrrp && (isync->wantstate != VRRP_STATE_GOTO_MASTER && 
-		                      isync->wantstate != VRRP_STATE_MAST)) {
-			return 0;	
-		}
-	}
-	return 1;
-}
-
-void
-vrrp_sync_master_election(vrrp_t * vrrp)
-{
-	vrrp_t *isync;
-	vrrp_sgroup_t *vgroup = vrrp->sync;
-	list l = vgroup->index_list;
-	element e;
-
-	if (vrrp->wantstate != VRRP_STATE_GOTO_MASTER)
-		return;
-	if (GROUP_STATE(vgroup) == VRRP_STATE_FAULT)
-		return;
-
-	log_message(LOG_INFO, "VRRP_Group(%s) Transition to MASTER state",
-	       GROUP_NAME(vgroup));
-
-	/* Perform sync index */
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		isync = ELEMENT_DATA(e);
-		if (isync != vrrp && isync->wantstate != VRRP_STATE_GOTO_MASTER) {
-			/* Force a new protocol master election */
-			isync->wantstate = VRRP_STATE_GOTO_MASTER;
-			log_message(LOG_INFO,
-			       "VRRP_Instance(%s) forcing a new MASTER election",
-			       isync->iname);
-			vrrp_send_adv(isync, isync->effective_priority);
+	LIST_FOREACH(vgroup->vrrp_instances, isync, e) {
+		if (isync != vrrp && isync->wantstate != VRRP_STATE_MAST) {
+			/* Make sure we give time for other instances to be
+			 * ready to become master. The timer here doesn't
+			 * really matter, since we are waiting for other
+			 * instances to be ready. */
+			vrrp->ms_down_timer = 3 * vrrp->master_adver_int + VRRP_TIMER_SKEW(vrrp);
+			vrrp_init_instance_sands(vrrp);
+			return false;
 		}
 	}
+	return true;
 }
 
 void
@@ -199,7 +140,6 @@ vrrp_sync_backup(vrrp_t * vrrp)
 {
 	vrrp_t *isync;
 	vrrp_sgroup_t *vgroup = vrrp->sync;
-	list l = vgroup->index_list;
 	element e;
 
 	if (GROUP_STATE(vgroup) == VRRP_STATE_BACK)
@@ -209,20 +149,24 @@ vrrp_sync_backup(vrrp_t * vrrp)
 	       GROUP_NAME(vgroup));
 
 	/* Perform sync index */
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		isync = ELEMENT_DATA(e);
-		if (isync != vrrp && isync->state != VRRP_STATE_BACK) {
-			isync->wantstate = VRRP_STATE_BACK;
-			vrrp_state_leave_master(isync);
-			vrrp_init_instance_sands(isync);
+	LIST_FOREACH(vgroup->vrrp_instances, isync, e) {
+		if (isync == vrrp || isync->state == VRRP_STATE_BACK)
+			continue;
+
+		isync->wantstate = VRRP_STATE_BACK;
+// TODO - we may be leaving FAULT, so calling leave_master isn't right. I have
+// had to add vrrp_state_leave_fault() for this
+		if (isync->state == VRRP_STATE_FAULT ||
+		    isync->state == VRRP_STATE_INIT) {
+			vrrp_state_leave_fault(isync);
 		}
+		else
+			vrrp_state_leave_master(isync, false);
+		vrrp_thread_requeue_read(isync);
 	}
+
 	vgroup->state = VRRP_STATE_BACK;
-	vrrp_sync_smtp_notifier(vgroup);
-	notify_group_exec(vgroup, VRRP_STATE_BACK);
-#ifdef _WITH_SNMP_
-	vrrp_snmp_group_trap(vgroup);
-#endif
+	send_group_notifies(vgroup);
 }
 
 void
@@ -230,34 +174,38 @@ vrrp_sync_master(vrrp_t * vrrp)
 {
 	vrrp_t *isync;
 	vrrp_sgroup_t *vgroup = vrrp->sync;
-	list l = vgroup->index_list;
+	list l = vgroup->vrrp_instances;
 	element e;
 
 	if (GROUP_STATE(vgroup) == VRRP_STATE_MAST)
 		return;
-	if (!vrrp_sync_goto_master(vrrp))
+	if (!vrrp_sync_can_goto_master(vrrp))
 		return;
 
-	log_message(LOG_INFO, "VRRP_Group(%s) Syncing instances to MASTER state",
-	       GROUP_NAME(vgroup));
+	log_message(LOG_INFO, "VRRP_Group(%s) Syncing instances to MASTER state", GROUP_NAME(vgroup));
 
 	/* Perform sync index */
 	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
 		isync = ELEMENT_DATA(e);
 
-		/* Send the higher priority advert on all synced instances */
+// TODO		/* Send the higher priority advert on all synced instances */
 		if (isync != vrrp && isync->state != VRRP_STATE_MAST) {
 			isync->wantstate = VRRP_STATE_MAST;
-			vrrp_state_goto_master(isync);
-			vrrp_init_instance_sands(isync);
+// TODO 6 - transition straight to master if PRIO_OWNER
+// TODO 7 - not here, but generally if wantstate == MAST && !owner, ms_down_timer = adver_int + 1 skew and be backup
+//			if (vrrp->wantstate == VRRP_STATE_MAST && vrrp->base_priority == VRRP_PRIO_OWNER) {
+//				/* ??? */
+//			} else {
+#ifdef _WITH_SNMP_RFCV3_
+				isync->stats->next_master_reason = vrrp->stats->master_reason;
+#endif
+				vrrp_state_goto_master(isync);
+				vrrp_thread_requeue_read(isync);
+//			}
 		}
 	}
 	vgroup->state = VRRP_STATE_MAST;
-	vrrp_sync_smtp_notifier(vgroup);
-	notify_group_exec(vgroup, VRRP_STATE_MAST);
-#ifdef _WITH_SNMP_
-	vrrp_snmp_group_trap(vgroup);
-#endif
+	send_group_notifies(vgroup);
 }
 
 void
@@ -265,7 +213,7 @@ vrrp_sync_fault(vrrp_t * vrrp)
 {
 	vrrp_t *isync;
 	vrrp_sgroup_t *vgroup = vrrp->sync;
-	list l = vgroup->index_list;
+	list l = vgroup->vrrp_instances;
 	element e;
 
 	if (GROUP_STATE(vgroup) == VRRP_STATE_FAULT)
@@ -285,15 +233,16 @@ vrrp_sync_fault(vrrp_t * vrrp)
 		 * => Takeover will be less than 3secs !
 		 */
 		if (isync != vrrp && isync->state != VRRP_STATE_FAULT) {
-			if (isync->state == VRRP_STATE_MAST)
-				isync->wantstate = VRRP_STATE_GOTO_FAULT;
-			if (isync->state == VRRP_STATE_BACK)
-				isync->state = VRRP_STATE_FAULT;
+			isync->wantstate = VRRP_STATE_FAULT;
+			if (isync->state == VRRP_STATE_MAST) {
+				vrrp_state_leave_master(isync, false);
+			}
+			else if (isync->state == VRRP_STATE_BACK || isync->state == VRRP_STATE_INIT) {
+				isync->state = VRRP_STATE_FAULT;	/* This is a bit of a bodge */
+				vrrp_state_leave_fault(isync);
+			}
 		}
 	}
 	vgroup->state = VRRP_STATE_FAULT;
-	notify_group_exec(vgroup, VRRP_STATE_FAULT);
-#ifdef _WITH_SNMP_
-	vrrp_snmp_group_trap(vgroup);
-#endif
+	send_group_notifies(vgroup);
 }
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_track.c b/tools/keepalived/keepalived/vrrp/vrrp_track.c
index 55dc12396..3359fc436 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_track.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_track.c
@@ -17,58 +17,124 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <net/if.h>
+#include <stdlib.h>
+#include <sys/stat.h>
+#include <limits.h>
+#include <stdlib.h>
+#include <sys/inotify.h>
+#include <errno.h>
+#include <sys/types.h>
+#include <fcntl.h>
+#include <stdio.h>
+
 /* local include */
-#include "vrrp_track.h"
-#include "vrrp_if.h"
 #include "vrrp_data.h"
+#include "vrrp.h"
+#include "vrrp_track.h"
+#include "vrrp_sync.h"
 #include "logger.h"
 #include "memory.h"
+#include "vrrp_scheduler.h"
+#include "scheduler.h"
+#include "parser.h"
+#include "utils.h"
+#include "vrrp_notify.h"
+#include "bitops.h"
+#ifdef _WITH_CN_PROC_
+#include "track_process.h"
+#endif
+
+static int inotify_fd = -1;
+static thread_ref_t inotify_thread;
 
 /* Track interface dump */
 void
-dump_track(void *track_data)
+dump_track_if(FILE *fp, const void *track_data)
 {
-	tracked_if_t *tip = track_data;
-	log_message(LOG_INFO, "     %s weight %d", IF_NAME(tip->ifp), tip->weight);
+	const tracked_if_t *tip = track_data;
+	conf_write(fp, "     %s weight %d%s", IF_NAME(tip->ifp), tip->weight, tip->weight_reverse ? " reverse" : "");
 }
+
 void
-alloc_track(list track_list, vector_t *strvec)
+free_track_if(void *tip)
 {
-	interface_t *ifp = NULL;
-	tracked_if_t *tip = NULL;
+	FREE(tip);
+}
+
+void
+alloc_track_if(const char *name, list track_ifp, const vector_t *strvec)
+{
+	interface_t *ifp;
+	tracked_if_t *tip;
 	int weight = 0;
-	char *tracked = vector_slot(strvec, 0);
+	const char *tracked = strvec_slot(strvec, 0);
+	element e;
+	bool reverse = false;
 
-	ifp = if_get_by_ifname(tracked);
+	ifp = if_get_by_ifname(tracked, IF_CREATE_IF_DYNAMIC);
 
-	/* Ignoring if no interface found */
 	if (!ifp) {
-		log_message(LOG_INFO, "     %s no match, ignoring...", tracked);
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) tracked interface %s doesn't exist", name, tracked);
 		return;
 	}
 
-	if (vector_size(strvec) >= 3 &&
-	    !strcmp(vector_slot(strvec, 1), "weight")) {
-		weight = atoi(vector_slot(strvec, 2));
-		if (weight < -254 || weight > 254) {
-			log_message(LOG_INFO, "     %s: weight must be between "
-					 "[-254..254] inclusive. Ignoring...", tracked);
+	/* Check this vrrp isn't already tracking the i/f */
+	LIST_FOREACH(track_ifp, tip, e) {
+		if (tip->ifp == ifp) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) duplicate track_interface %s - ignoring", name, tracked);
+			return;
+		}
+	}
+
+	if (vector_size(strvec) >= 2) {
+		if (strcmp(strvec_slot(strvec, 1), "weight")) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) unknown track_interface %s option %s - ignoring",
+					 name, tracked, strvec_slot(strvec, 1));
+			return;
+		}
+
+		if (vector_size(strvec) == 2) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) weight without value specified for track_interface %s - ignoring",
+					name, tracked);
+			return;
+		}
+
+		if (!read_int_strvec(strvec, 2, &weight, -254, 254, true)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) weight %s for %s must be between "
+					 "[-253..253] inclusive. Ignoring...", name, strvec_slot(strvec, 2), tracked);
 			weight = 0;
 		}
+		else if (weight == -254 || weight == 254) {
+			/* This check can be removed once users have migrated away from +/-254 */
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) weight for %s cannot be +/-254. Setting to +/-253", name, tracked);
+			weight = weight == -254 ? -253 : 253;
+		}
+
+		if (vector_size(strvec) >= 4) {
+			if (!strcmp(strvec_slot(strvec, 3), "reverse"))
+				reverse = true;
+			else
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) unknown track_interace %s weight option %s - ignoring",
+						name, tracked, strvec_slot(strvec, 3));
+		}
 	}
 
-	tip         = (tracked_if_t *) MALLOC(sizeof(tracked_if_t));
+	tip	    = (tracked_if_t *) MALLOC(sizeof(tracked_if_t));
 	tip->ifp    = ifp;
 	tip->weight = weight;
+	tip->weight_reverse = reverse;
 
-	list_add(track_list, tip);
+	list_add(track_ifp, tip);
 }
 
-vrrp_script_t *
-find_script_by_name(char *name)
+vrrp_script_t * __attribute__ ((pure))
+find_script_by_name(const char *name)
 {
 	element e;
 	vrrp_script_t *scr;
@@ -76,8 +142,7 @@ find_script_by_name(char *name)
 	if (LIST_ISEMPTY(vrrp_data->vrrp_script))
 		return NULL;
 
-	for (e = LIST_HEAD(vrrp_data->vrrp_script); e; ELEMENT_NEXT(e)) {
-		scr = ELEMENT_DATA(e);
+	LIST_FOREACH(vrrp_data->vrrp_script, scr, e) {
 		if (!strcmp(scr->sname, name))
 			return scr;
 	}
@@ -86,150 +151,1053 @@ find_script_by_name(char *name)
 
 /* Track script dump */
 void
-dump_track_script(void *track_data)
+dump_track_script(FILE *fp, const void *track_data)
 {
-	tracked_sc_t *tsc = track_data;
-	log_message(LOG_INFO, "     %s weight %d", tsc->scr->sname, tsc->weight);
+	const tracked_sc_t *tsc = track_data;
+	conf_write(fp, "     %s weight %d%s", tsc->scr->sname, tsc->weight, tsc->weight_reverse ? " reverse" : "");
 }
+
 void
-alloc_track_script(list track_list, vector_t *strvec)
+free_track_script(void *tsc)
 {
-	vrrp_script_t *vsc = NULL;
-	tracked_sc_t *tsc = NULL;
-	int weight = 0;
-	char *tracked = vector_slot(strvec, 0);
+	FREE(tsc);
+}
+
+void
+alloc_track_script(const char *name, list track_script, const vector_t *strvec)
+{
+	vrrp_script_t *vsc;
+	tracked_sc_t *tsc;
+	int weight;
+	const char *tracked = strvec_slot(strvec, 0);
+	tracked_sc_t *etsc;
+	element e;
+	bool reverse;
 
 	vsc = find_script_by_name(tracked);
 
-	/* Ignoring if no interface found */
+	/* Ignoring if no script found */
 	if (!vsc) {
-		log_message(LOG_INFO, "     %s no match, ignoring...", tracked);
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) track script %s not found, ignoring...", name, tracked);
 		return;
 	}
 
+	/* Check this vrrp isn't already tracking the script */
+	LIST_FOREACH(track_script, etsc, e) {
+		if (etsc->scr == vsc) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) duplicate track_script %s - ignoring", name, tracked);
+			return;
+		}
+	}
+
 	/* default weight */
 	weight = vsc->weight;
+	reverse = vsc->weight_reverse;
 
-	if (vector_size(strvec) >= 3 &&
-	    !strcmp(vector_slot(strvec, 1), "weight")) {
-		weight = atoi(vector_slot(strvec, 2));
-		if (weight < -254 || weight > 254) {
+	if (vector_size(strvec) >= 2) {
+		if (strcmp(strvec_slot(strvec, 1), "weight")) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) unknown track script option %s - ignoring",
+					 name, strvec_slot(strvec, 1));
+			return;
+		}
+
+		if (vector_size(strvec) == 2) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) weight without value specified for track script %s - ignoring",
+					name, tracked);
+			return;
+		}
+
+		if (!read_int_strvec(strvec, 2, &weight, -254, 254, true)) {
 			weight = vsc->weight;
-			log_message(LOG_INFO, "     %s: weight must be between [-254..254]"
-				         " inclusive, ignoring...",
-			       tracked);
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) track script %s: weight must be between [-253..253]"
+					 " inclusive, ignoring...", name, tracked);
+		}
+		else if (weight == -254 || weight == 254) {
+			/* This check can be removed once users have migrated away from +/-254 */
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) weight for %s cannot be +/-254. Setting to +/-253", name, tracked);
+			weight = weight == -254 ? -253 : 253;
+		}
+
+		if (vector_size(strvec) >= 4) {
+			if (!strcmp(strvec_slot(strvec, 3), "reverse"))
+				reverse = true;
+			else if (!strcmp(strvec_slot(strvec, 3), "noreverse"))
+				reverse = false;
+			else
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) unknown track_script %s weight option %s - ignoring",
+						name, tracked, strvec_slot(strvec, 3));
 		}
 	}
 
-	tsc         = (tracked_sc_t *) MALLOC(sizeof(tracked_sc_t));
+	tsc	    = (tracked_sc_t *) MALLOC(sizeof(tracked_sc_t));
 	tsc->scr    = vsc;
 	tsc->weight = weight;
-	vsc->inuse++;
-	list_add(track_list, tsc);
+	tsc->weight_reverse = reverse;
+	vsc->init_state = SCRIPT_INIT_STATE_INIT;
+	list_add(track_script, tsc);
 }
 
-/* Test if all tracked interfaces are either UP or weight-tracked */
-int
-vrrp_tracked_up(list l)
+static vrrp_tracked_file_t * __attribute__ ((pure))
+find_tracked_file_by_name(const char *name)
 {
 	element e;
-	tracked_if_t *tip;
+	vrrp_tracked_file_t *file;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		tip = ELEMENT_DATA(e);
-		if (!tip->weight && !IF_ISUP(tip->ifp))
-			return 0;
+	if (LIST_ISEMPTY(vrrp_data->vrrp_track_files))
+		return NULL;
+
+	for (e = LIST_HEAD(vrrp_data->vrrp_track_files); e; ELEMENT_NEXT(e)) {
+		file = ELEMENT_DATA(e);
+		if (!strcmp(file->fname, name))
+			return file;
 	}
+	return NULL;
+}
 
-	return 1;
+/* Track file dump */
+void
+dump_track_file(FILE *fp, const void *track_data)
+{
+	const tracked_file_t *tfile = track_data;
+	conf_write(fp, "     %s, weight %d%s", tfile->file->fname, tfile->weight, tfile->weight_reverse ? " reverse" : "");
 }
 
-/* Log tracked interface down */
 void
-vrrp_log_tracked_down(list l)
+free_track_file(void *tsf)
 {
+	FREE(tsf);
+}
+
+void
+alloc_track_file(const char *name, list track_file, const vector_t *strvec)
+{
+	vrrp_tracked_file_t *vsf;
+	tracked_file_t *tfile;
+	const char *tracked = strvec_slot(strvec, 0);
+	tracked_file_t *etfile;
 	element e;
-	tracked_if_t *tip;
+	int weight;
+	bool reverse;
+
+	vsf = find_tracked_file_by_name(tracked);
+
+	/* Ignoring if no file found */
+	if (!vsf) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) track file %s not found, ignoring...", name, tracked);
+		return;
+	}
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		tip = ELEMENT_DATA(e);
-		if (!IF_ISUP(tip->ifp))
-			log_message(LOG_INFO, "Kernel is reporting: interface %s DOWN",
-			       IF_NAME(tip->ifp));
+	if (!LIST_ISEMPTY(track_file)) {
+		/* Check this vrrp isn't already tracking the script */
+		LIST_FOREACH(track_file, etfile, e) {
+			if (etfile->file == vsf) {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) duplicate track_file %s - ignoring", name, tracked);
+				return;
+			}
+		}
 	}
+
+	weight = vsf->weight;
+	reverse = vsf->weight_reverse;
+	if (vector_size(strvec) >= 2) {
+		if (strcmp(strvec_slot(strvec, 1), "weight")) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) unknown track file option %s - ignoring",
+					 name, strvec_slot(strvec, 1));
+			return;
+		}
+
+		if (vector_size(strvec) == 2) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) weight without value specified for track file %s - ignoring",
+					name, tracked);
+			return;
+		}
+
+		if (!read_int_strvec(strvec, 2, &weight, -254, 254, true)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) weight for track file %s must be in "
+					 "[-254..254] inclusive. Ignoring...", name, tracked);
+			weight = vsf->weight;
+		}
+
+		if (vector_size(strvec) >= 4) {
+			if (!strcmp(strvec_slot(strvec, 3), "reverse"))
+				reverse = true;
+			else if (!strcmp(strvec_slot(strvec, 3), "noreverse"))
+				reverse = false;
+			else {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) unknown track file %s weight option %s - ignoring",
+						 name, tracked, strvec_slot(strvec, 3));
+				return;
+			}
+		}
+	}
+
+	tfile = (tracked_file_t *) MALLOC(sizeof(tracked_file_t));
+	tfile->file = vsf;
+	tfile->weight = weight;
+	tfile->weight_reverse = reverse;
+	list_add(track_file, tfile);
 }
 
-/* Returns total weights of all tracked interfaces :
- * - a positive interface weight adds to the global weight when the
- *   interface is UP.
- * - a negative interface weight subtracts from the global weight when the
- *   interface is DOWN.
- *
- */
-int
-vrrp_tracked_weight(list l)
+#ifdef _WITH_CN_PROC_
+static vrrp_tracked_process_t * __attribute__ ((pure))
+find_tracked_process_by_name(const char *name)
 {
 	element e;
-	tracked_if_t *tip;
-	int weight = 0;
+	vrrp_tracked_process_t *process;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		tip = ELEMENT_DATA(e);
-		if (IF_ISUP(tip->ifp)) {
-			if (tip->weight > 0)
-				weight += tip->weight;
-		} else {
-			if (tip->weight < 0)
-				weight += tip->weight;
+	if (LIST_ISEMPTY(vrrp_data->vrrp_track_processes))
+		return NULL;
+
+	LIST_FOREACH(vrrp_data->vrrp_track_processes, process, e) {
+		if (!strcmp(process->pname, name))
+			return process;
+	}
+	return NULL;
+}
+
+/* Track process dump */
+void
+dump_track_process(FILE *fp, const void *track_data)
+{
+	const tracked_process_t *tprocess = track_data;
+	conf_write(fp, "     %s, weight %d%s", tprocess->process->pname, tprocess->weight, tprocess->weight_reverse ? " reverse" : "");
+}
+
+void
+free_track_process(void *tsf)
+{
+	FREE(tsf);
+}
+
+void
+alloc_track_process(const char *name, list track_process, const vector_t *strvec)
+{
+	vrrp_tracked_process_t *vsp;
+	tracked_process_t *tprocess;
+	const char *tracked = strvec_slot(strvec, 0);
+	tracked_process_t *etprocess;
+	element e;
+	int weight;
+	bool reverse;
+
+	vsp = find_tracked_process_by_name(tracked);
+
+	/* Ignoring if no process found */
+	if (!vsp) {
+		if (proc_events_not_supported)
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) track process not supported by kernel", name);
+		else
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) track process %s not found, ignoring...", name, tracked);
+		return;
+	}
+
+	/* Check this vrrp isn't already tracking the process */
+	LIST_FOREACH(track_process, etprocess, e) {
+		if (etprocess->process == vsp) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) duplicate track_process %s - ignoring", name, tracked);
+			return;
+		}
+	}
+
+	weight = vsp->weight;
+	reverse = vsp->weight_reverse;
+	if (vector_size(strvec) >= 2) {
+		if (strcmp(strvec_slot(strvec, 1), "weight")) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) unknown track process option %s - ignoring",
+					 name, strvec_slot(strvec, 1));
+			return;
+		}
+
+		if (vector_size(strvec) == 2) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) weight without value specified for track process %s - ignoring",
+					name, tracked);
+			return;
+		}
+
+		if (!read_int_strvec(strvec, 2, &weight, -254, 254, true)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) weight for track process %s must be in "
+					 "[-254..254] inclusive. Ignoring...", name, tracked);
+			weight = vsp->weight;
+		}
+
+		if (vector_size(strvec) >= 4) {
+			if (!strcmp(strvec_slot(strvec, 3), "reverse"))
+				reverse = true;
+			else if (!strcmp(strvec_slot(strvec, 3), "noreverse"))
+				reverse = false;
+			else
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) unknown track_process %s weight option %s - ignoring",
+						name, tracked, strvec_slot(strvec, 3));
 		}
 	}
 
-	return weight;
+	tprocess = (tracked_process_t *) MALLOC(sizeof(tracked_process_t));
+	tprocess->process = vsp;
+	tprocess->weight = weight;
+	tprocess->weight_reverse = reverse;
+	list_add(track_process, tprocess);
 }
+#endif
 
-/* Test if all tracked scripts are either OK or weight-tracked */
-int
-vrrp_script_up(list l)
+#ifdef _WITH_BFD_
+vrrp_tracked_bfd_t * __attribute__ ((pure))
+find_vrrp_tracked_bfd_by_name(const char *name)
 {
 	element e;
-	tracked_sc_t *tsc;
+	vrrp_tracked_bfd_t *bfd;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		tsc = ELEMENT_DATA(e);
-		if ((tsc->scr->result == VRRP_SCRIPT_STATUS_DISABLED) ||
-		    (tsc->scr->result == VRRP_SCRIPT_STATUS_INIT_GOOD))
-			continue;
-		if (!tsc->weight && tsc->scr->result < tsc->scr->rise)
-			return 0;
+	LIST_FOREACH(vrrp_data->vrrp_track_bfds, bfd, e) {
+		if (!strcmp(bfd->bname, name))
+			return bfd;
 	}
+	return NULL;
+}
 
-	return 1;
+/* Track bfd dump */
+void
+dump_vrrp_tracked_bfd(FILE *fp, const void *track_data)
+{
+	const tracked_bfd_t *tbfd = track_data;
+	conf_write(fp, "     %s: weight %d%s", tbfd->bfd->bname, tbfd->weight, tbfd->weight_reverse ? " reverse" : "");
 }
 
-/* Returns total weights of all tracked scripts :
- * - a positive weight adds to the global weight when the result is OK
- * - a negative weight subtracts from the global weight when the result is bad
- *
- */
-int
-vrrp_script_weight(list l)
+void
+free_vrrp_tracked_bfd(void *bfd)
 {
+	FREE(bfd);
+}
+
+void
+alloc_track_bfd(const char *name, list track_bfd, const vector_t *strvec)
+{
+	vrrp_tracked_bfd_t *vtb;
+	tracked_bfd_t *tbfd;
+	const char *tracked = strvec_slot(strvec, 0);
+	tracked_bfd_t *etbfd;
 	element e;
-	tracked_sc_t *tsc;
-	int weight = 0;
+	int weight;
+	bool reverse = false;
 
-	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
-		tsc = ELEMENT_DATA(e);
-		if (tsc->scr->result == VRRP_SCRIPT_STATUS_DISABLED)
-			continue;
+	vtb = find_vrrp_tracked_bfd_by_name(tracked);
+
+	/* Ignoring if no bfd found */
+	if (!vtb) {
+		report_config_error(CONFIG_GENERAL_ERROR, "(%s) track bfd %s not found, ignoring...", name, tracked);
+		return;
+	}
+
+	/* Check this vrrp isn't already tracking the bfd */
+	LIST_FOREACH(track_bfd, etbfd, e) {
+		if (etbfd->bfd == vtb) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) duplicate track_bfd %s - ignoring", name, tracked);
+			return;
+		}
+	}
+
+	weight = vtb->weight;
+	reverse = vtb->weight_reverse;
+	if (vector_size(strvec) >= 2) {
+		if (strcmp(strvec_slot(strvec, 1), "weight")) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) unknown track bfd %s option %s - ignoring",
+					 name, tracked, strvec_slot(strvec, 1));
+			return;
+		}
+
+		if (vector_size(strvec) == 2) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) weight without value specified for track bfd %s - ignoring",
+					name, tracked);
+			return;
+		}
+
+		if (!read_int_strvec(strvec, 2, &weight, -253, 253, true)) {
+			report_config_error(CONFIG_GENERAL_ERROR, "(%s) weight for track bfd %s must be in "
+					 "[-253..253] inclusive. Ignoring...", name, tracked);
+			weight = vtb->weight;
+		}
+
+		if (vector_size(strvec) >= 4) {
+			if (!strcmp(strvec_slot(strvec, 3), "reverse"))
+				reverse = true;
+			else if (!strcmp(strvec_slot(strvec, 3), "noreverse"))
+				reverse = false;
+			else {
+				report_config_error(CONFIG_GENERAL_ERROR, "(%s) unknown track bfd %s weight option %s - ignoring",
+						 name, tracked, strvec_slot(strvec, 3));
+				return;
+			}
+		}
+	}
+
+	tbfd = (tracked_bfd_t *) MALLOC(sizeof(tracked_bfd_t));
+	tbfd->bfd = vtb;
+	tbfd->weight = weight;
+	tbfd->weight_reverse = reverse;
+	list_add(track_bfd, tbfd);
+}
+#endif
+
+void
+down_instance(vrrp_t *vrrp)
+{
+	if (vrrp->num_script_if_fault++ == 0 || vrrp->state == VRRP_STATE_INIT) {
+		vrrp->wantstate = VRRP_STATE_FAULT;
+		if (vrrp->state == VRRP_STATE_MAST)
+			vrrp_state_leave_master(vrrp, true);
+		else
+			vrrp_state_leave_fault(vrrp);
+
+		if (vrrp->sync && vrrp->sync->num_member_fault++ == 0)
+			vrrp_sync_fault(vrrp);
+	}
+}
+
+/* Set effective priorty, issue message on changes */
+void
+vrrp_set_effective_priority(vrrp_t *vrrp)
+{
+	uint8_t new_prio;
+	uint32_t old_down_timer;
+
+	/* Don't change priority if address owner */
+	if (vrrp->base_priority == VRRP_PRIO_OWNER)
+		return;
+
+	if (vrrp->total_priority < 1)
+		new_prio = 1;
+	else if (vrrp->total_priority >= VRRP_PRIO_OWNER)
+		new_prio = VRRP_PRIO_OWNER - 1;
+	else
+		new_prio = (uint8_t)vrrp->total_priority;
+
+	if (vrrp->effective_priority == new_prio)
+		return;
+
+	log_message(LOG_INFO, "(%s) Changing effective priority from %d to %d",
+		    vrrp->iname, vrrp->effective_priority, new_prio);
+
+	vrrp->effective_priority = new_prio;
+	old_down_timer = vrrp->ms_down_timer;
+	vrrp->ms_down_timer = 3 * vrrp->master_adver_int + VRRP_TIMER_SKEW(vrrp);
+
+	if (vrrp->state == VRRP_STATE_BACK) {
+		if (old_down_timer < vrrp->ms_down_timer)
+			vrrp->sands = timer_add_long(vrrp->sands, vrrp->ms_down_timer - old_down_timer);
+		else
+			vrrp->sands = timer_sub_long(vrrp->sands, old_down_timer - vrrp->ms_down_timer);
+		vrrp_thread_requeue_read(vrrp);
+	}
+
+	if (vrrp->notify_priority_changes)
+		send_instance_priority_notifies(vrrp);
+}
+
+static void
+process_script_update_priority(int weight, int multiplier, vrrp_script_t *vscript, bool script_ok, vrrp_t *vrrp)
+{
+	bool instance_left_init = false;
+
+	if (!weight) {
+		if (vscript->init_state == SCRIPT_INIT_STATE_INIT) {
+			/* We need to adjust the number of scripts in init state */
+			if (!--vrrp->num_script_init) {
+				instance_left_init = true;
+				if (vrrp->sync)
+					vrrp->sync->num_member_init--;
+			}
+		}
+
+		if (script_ok != (multiplier == 1)) {
+			/* The instance needs to go down */
+			down_instance(vrrp);
+		} else if (!vrrp->num_script_init &&
+			   (!vrrp->sync || !vrrp->sync->num_member_init)) {
+			/* The instance can come up */
+			try_up_instance(vrrp, instance_left_init);  // Set want_state = BACKUP/MASTER, and check i/fs and sync groups
+		}
+		return;
+	}
+
+	if (vscript->init_state == SCRIPT_INIT_STATE_INIT) {
+		/* If the script hasn't previously exited, we need
+		   to only adjust the priority if the state the script
+		   is now in causes an adjustment to the priority */
+		if (script_ok) {
+			if (weight > 0)
+				vrrp->total_priority += weight * multiplier;
+		} else {
+			if (weight < 0)
+				vrrp->total_priority += weight * multiplier;
+		}
+	} else {
+		if (script_ok)
+			vrrp->total_priority += abs(weight) * multiplier;
+		else
+			vrrp->total_priority -= abs(weight) * multiplier;
+	}
+
+	vrrp_set_effective_priority(vrrp);
+}
+
+void
+update_script_priorities(vrrp_script_t *vscript, bool script_ok)
+{
+	element e;
+	vrrp_t *vrrp;
+	tracking_vrrp_t* tvp;
+
+	/* First process the vrrp instances tracking the script */
+	if (!LIST_ISEMPTY(vscript->tracking_vrrp)) {
+		LIST_FOREACH(vscript->tracking_vrrp, tvp, e) {
+			vrrp = tvp->vrrp;
+
+			process_script_update_priority(tvp->weight, tvp->weight_multiplier, vscript, script_ok, vrrp);
+		}
+	}
+}
+
+static void
+initialise_track_script_state(tracked_sc_t *tsc, vrrp_t *vrrp)
+{
+	if (!tsc->weight) {
+		if (tsc->scr->init_state == SCRIPT_INIT_STATE_INIT)
+			vrrp->num_script_init++;
+		else if (tsc->scr->init_state == SCRIPT_INIT_STATE_FAILED ||
+			 (tsc->scr->result >= 0 && tsc->scr->result < tsc->scr->rise)) {
+			/* The script is in fault state */
+			vrrp->num_script_if_fault++;
+			log_message(LOG_INFO, "(%s): entering FAULT state due to script %s", vrrp->iname, tsc->scr->sname);
+			vrrp->state = VRRP_STATE_FAULT;
+		}
+		return;
+	}
+
+	/* Don't change effective priority if address owner */
+	if (vrrp->base_priority == VRRP_PRIO_OWNER)
+		return;
+
+	if (tsc->scr->init_state != SCRIPT_INIT_STATE_INIT)
+	{
 		if (tsc->scr->result >= tsc->scr->rise) {
 			if (tsc->weight > 0)
-				weight += tsc->weight;
-		} else if (tsc->scr->result < tsc->scr->rise) {
+				vrrp->total_priority += tsc->weight;
+		} else {
 			if (tsc->weight < 0)
-				weight += tsc->weight;
+				vrrp->total_priority += tsc->weight;
+		}
+	}
+}
+
+#ifdef _WITH_BFD_
+static void
+initialise_track_bfd_state(tracked_bfd_t *tbfd, vrrp_t *vrrp)
+{
+	int multiplier = tbfd->weight_reverse ? -1 : 1;
+
+	if (tbfd->weight) {
+		if (tbfd->bfd->bfd_up) {
+			if (tbfd->weight > 0)
+				vrrp->total_priority += tbfd->weight * multiplier;
+		} else {
+			if (tbfd->weight < 0)
+				vrrp->total_priority += tbfd->weight * multiplier;
+			else if (!tbfd->weight) {
+				vrrp->num_script_if_fault++;
+				vrrp->state = VRRP_STATE_FAULT;
+			}
+		}
+	} else if (tbfd->bfd->bfd_up == tbfd->weight_reverse) {
+		vrrp->num_script_if_fault++;
+		vrrp->state = VRRP_STATE_FAULT;
+	}
+}
+#endif
+
+static void
+initialise_interface_tracking_priorities(void)
+{
+	tracking_vrrp_t *tvp;
+	interface_t *ifp;
+	element e, e1;
+
+	LIST_FOREACH(get_if_list(), ifp, e) {
+		LIST_FOREACH(ifp->tracking_vrrp, tvp, e1) {
+			if (tvp->weight == VRRP_NOT_TRACK_IF)
+				continue;
+
+			if (!tvp->weight) {
+				if (IF_FLAGS_UP(ifp) != (tvp->weight_multiplier == 1)) {
+					/* The instance is down */
+					log_message(LOG_INFO, "(%s): entering FAULT state (interface %s down)", tvp->vrrp->iname, ifp->ifname);
+					tvp->vrrp->state = VRRP_STATE_FAULT;
+					tvp->vrrp->num_script_if_fault++;
+				}
+			} else if (IF_FLAGS_UP(ifp)) {
+				if (tvp->weight > 0)
+					tvp->vrrp->total_priority += tvp->weight * tvp->weight_multiplier;
+			} else {
+				if (tvp->weight < 0)
+					tvp->vrrp->total_priority += tvp->weight * tvp->weight_multiplier;
+			}
+		}
+	}
+}
+
+static void
+initialise_file_tracking_priorities(void)
+{
+	vrrp_tracked_file_t *tfile;
+	tracking_vrrp_t *tvp;
+	int status;
+	element e, e1;
+
+	LIST_FOREACH(vrrp_data->vrrp_track_files, tfile, e) {
+		LIST_FOREACH(tfile->tracking_vrrp, tvp, e1) {
+			status = !tvp->weight ? (!!tfile->last_status == (tvp->weight_multiplier == 1) ? -254 : 0 ) : tfile->last_status * tvp->weight * tvp->weight_multiplier;
+
+			if (status <= -254) {
+				/* The instance is down */
+				log_message(LOG_INFO, "(%s): entering FAULT state (tracked file %s has status %i)", tvp->vrrp->iname, tfile->fname, status);
+				tvp->vrrp->state = VRRP_STATE_FAULT;
+				tvp->vrrp->num_script_if_fault++;
+			}
+			else
+				tvp->vrrp->total_priority += (status > 253 ? 253 : status);
 		}
 	}
+}
 
-	return weight;
+#ifdef _WITH_CN_PROC_
+static void
+initialise_process_tracking_priorities(void)
+{
+	vrrp_tracked_process_t *tprocess;
+	tracking_vrrp_t *tvp;
+	element e, e1;
+
+	LIST_FOREACH(vrrp_data->vrrp_track_processes, tprocess, e) {
+		tprocess->have_quorum =
+			(tprocess->num_cur_proc >= tprocess->quorum &&
+			 tprocess->num_cur_proc <= tprocess->quorum_max);
+
+		LIST_FOREACH(tprocess->tracking_vrrp, tvp, e1) {
+			if (!tvp->weight) {
+				if (tprocess->have_quorum != (tvp->weight_multiplier == 1)) {
+					/* The instance is down */
+					log_message(LOG_INFO, "(%s) entering FAULT state (tracked process %s quorum not achieved)", tvp->vrrp->iname, tprocess->pname);
+					tvp->vrrp->state = VRRP_STATE_FAULT;
+					tvp->vrrp->num_script_if_fault++;
+				}
+			}
+			else if (tprocess->have_quorum) {
+				if (tvp->weight > 0)
+					tvp->vrrp->total_priority += tvp->weight * tvp->weight_multiplier;
+			}
+			else {
+				if (tvp->weight < 0)
+					tvp->vrrp->total_priority += tvp->weight * tvp->weight_multiplier;
+			}
+		}
+	}
+}
+#endif
+
+static void
+initialise_vrrp_tracking_priorities(vrrp_t *vrrp)
+{
+	element e;
+	tracked_sc_t *tsc;
+#ifdef _WITH_BFD_
+	tracked_bfd_t *tbfd;
+#endif
+
+	/* If no src address has been specified, and the interface doesn't have
+	 * an appropriate address, put the interface into fault state */
+	if (vrrp->saddr.ss_family == AF_UNSPEC) {
+		/* The instance is down */
+		log_message(LOG_INFO, "(%s) entering FAULT state (no IPv%d address for interface)", vrrp->iname, vrrp->family == AF_INET ? 4 : 6);
+		vrrp->state = VRRP_STATE_FAULT;
+		vrrp->num_script_if_fault++;
+	}
+
+	/* Initialise the vrrp instance's tracked scripts */
+	LIST_FOREACH(vrrp->track_script, tsc, e)
+		initialise_track_script_state(tsc, vrrp);
+
+#ifdef _WITH_BFD_
+	/* Initialise the vrrp instance's tracked scripts */
+	LIST_FOREACH(vrrp->track_bfd, tbfd, e)
+		initialise_track_bfd_state(tbfd, vrrp);
+#endif
+
+	/* If have a sync group, initialise it's tracked scripts and bfds */
+	if (vrrp->sync) {
+		LIST_FOREACH(vrrp->sync->track_script, tsc, e)
+			initialise_track_script_state(tsc, vrrp);
+	}
+
+	vrrp_set_effective_priority(vrrp);
+}
+
+void
+initialise_tracking_priorities(void)
+{
+	vrrp_t *vrrp;
+	element e;
+
+	/* Check for instance down due to an interface */
+	initialise_interface_tracking_priorities();
+
+	initialise_file_tracking_priorities();
+
+#ifdef _WITH_CN_PROC_
+	initialise_process_tracking_priorities();
+#endif
+
+	/* Now check for tracking scripts, files, bfd etc. */
+	LIST_FOREACH(vrrp_data->vrrp, vrrp, e) {
+		/* Set effective priority and fault state */
+		initialise_vrrp_tracking_priorities(vrrp);
+
+		if (vrrp->sync) {
+			if (vrrp->state == VRRP_STATE_FAULT) {
+				if (vrrp->sync->state != VRRP_STATE_FAULT) {
+					vrrp->sync->state = VRRP_STATE_FAULT;
+					log_message(LOG_INFO, "VRRP_Group(%s): Syncing %s to FAULT state", vrrp->sync->gname, vrrp->iname);
+				}
+
+				vrrp->sync->num_member_fault++;
+			}
+			if (vrrp->num_script_init) {
+				/* Update init count on sync group if needed */
+				vrrp->sync->num_member_init++;
+				if (vrrp->sync->state != VRRP_STATE_FAULT)
+					vrrp->sync->state = VRRP_STATE_INIT;
+			}
+		}
+	}
+}
+
+static void
+remove_track_file(list track_files, element e)
+{
+	vrrp_tracked_file_t *tfile = ELEMENT_DATA(e);
+	element e1;
+	element e2, next2;
+	tracking_vrrp_t *tvp;
+	tracked_file_t *tft;
+
+	/* Search through the vrrp instances tracking this file */
+	LIST_FOREACH(tfile->tracking_vrrp, tvp, e1) {
+		/* Search for the matching track file */
+		LIST_FOREACH_NEXT(tvp->vrrp->track_file, tft, e2, next2) {
+			if (tft->file == tfile)
+				free_list_element(tvp->vrrp->track_file, e2);
+		}
+	}
+
+	free_list_element(track_files, e);
+}
+
+static void
+process_update_track_file_status(vrrp_tracked_file_t *tfile, int new_status, tracking_vrrp_t *tvp)
+{
+	int previous_status;
+
+	previous_status = !tvp->weight ? (!!tfile->last_status == (tvp->weight_multiplier == 1) ? -254 : 0 ) : tfile->last_status * tvp->weight * tvp->weight_multiplier;
+	if (previous_status < -254)
+		previous_status = -254;
+	else if (previous_status > 253)
+		previous_status = 253;
+
+	if (previous_status == new_status)
+		return;
+
+	if (new_status == -254) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_INFO, "(%s): tracked file %s now FAULT state", tvp->vrrp->iname, tfile->fname);
+		down_instance(tvp->vrrp);
+	} else if (previous_status == -254) {
+		if (__test_bit(LOG_DETAIL_BIT, &debug))
+			log_message(LOG_INFO, "(%s): tracked file %s leaving FAULT state", tvp->vrrp->iname, tfile->fname);
+		try_up_instance(tvp->vrrp, false);
+	} else if (tvp->vrrp->base_priority != VRRP_PRIO_OWNER) {
+		tvp->vrrp->total_priority += new_status - previous_status;
+		vrrp_set_effective_priority(tvp->vrrp);
+	}
+}
+
+static void
+update_track_file_status(vrrp_tracked_file_t* tfile, int new_status)
+{
+	element e;
+	tracking_vrrp_t *tvp;
+	int status;
+
+	if (new_status == tfile->last_status)
+		return;
+
+	/* Process the VRRP instances tracking the file */
+	LIST_FOREACH(tfile->tracking_vrrp, tvp, e) {
+		/* If the tracking weight is 0, a non-zero value means
+		 * failure, a 0 status means success */
+		if (!tvp->weight)
+			status = !!new_status == (tvp->weight_multiplier == 1) ? -254 : 0;
+		else {
+			status = new_status * tvp->weight * tvp->weight_multiplier;
+			if (status < -254)
+				status = -254;
+			else if (status > 253)
+				status = 253;
+		}
+
+		process_update_track_file_status(tfile, status, tvp);
+	}
+}
+
+static void
+process_track_file(vrrp_tracked_file_t *tfile, bool init)
+{
+	long new_status = 0;
+	char buf[128];
+	int fd;
+	ssize_t len;
+
+	if ((fd = open(tfile->file_path, O_RDONLY | O_NONBLOCK)) != -1) {
+		if ((len = read(fd, buf, sizeof(buf) - 1)) > 0) {
+			buf[len] = '\0';
+			/* If there is an error, we want to use 0,
+			 * so we don't really mind if there is an error */
+			new_status = strtol(buf, NULL, 0);
+		}
+		close(fd);
+	}
+
+	if (new_status > 254)
+		new_status = 254;
+	else if (new_status < -254)
+		new_status = -254;
+
+	if (!init)
+		update_track_file_status(tfile, (int)new_status);
+
+	tfile->last_status = new_status;
+}
+
+static int
+process_inotify(thread_ref_t thread)
+{
+	char buf[sizeof(struct inotify_event) + NAME_MAX + 1];
+	char *buf_ptr;
+	ssize_t len;
+	struct inotify_event* event;
+	vrrp_tracked_file_t *tfile;
+	element e;
+	int fd = thread->u.f.fd;
+
+	inotify_thread = thread_add_read(master, process_inotify, NULL, fd, TIMER_NEVER, false);
+
+	while (true) {
+		if ((len = read(fd, buf, sizeof(buf))) < (ssize_t)sizeof(struct inotify_event)) {
+			if (len == -1) {
+				if (check_EAGAIN(errno))
+					return 0;
+
+				if (check_EINTR(errno))
+					continue;
+
+				log_message(LOG_INFO, "inotify read() returned error %d - %m", errno);
+				return 0;
+			}
+
+			log_message(LOG_INFO, "inotify read() returned short length %zd", len);
+			return 0;
+		}
+
+		/* Try and keep coverity happy. It thinks event->name is not null
+		 * terminated in the strcmp() below */
+		buf[sizeof(buf) - 1] = 0;
+
+		/* The following line causes a strict-overflow=4 warning on gcc 5.4.0 */
+		for (buf_ptr = buf; buf_ptr < buf + len; buf_ptr += event->len + sizeof(struct inotify_event)) {
+			event = (struct inotify_event*)buf_ptr;
+
+			/* We are not interested in directories */
+			if (event->mask & IN_ISDIR)
+				continue;
+
+			if (!(event->mask & (IN_DELETE | IN_CLOSE_WRITE | IN_MOVE))) {
+				log_message(LOG_INFO, "Unknown inotify event 0x%x", event->mask);
+				continue;
+			}
+
+			LIST_FOREACH(vrrp_data->vrrp_track_files, tfile, e) {
+				/* Is this event for our file */
+				if (tfile->wd != event->wd ||
+				    strcmp(tfile->file_part, event->name))
+					continue;
+
+				if (event->mask & (IN_MOVED_FROM | IN_DELETE)) {
+					/* The file has disappeared. Treat as though the value is 0 */
+					update_track_file_status(tfile, 0);
+				}
+				else {	/* event->mask & (IN_MOVED_TO | IN_CLOSE_WRITE) */
+					/* The file has been writted/moved in */
+					process_track_file(tfile, false);
+				}
+			}
+		}
+	}
+
+	/* NOT REACHED */
+}
+
+void
+init_track_files(list track_files)
+{
+	vrrp_tracked_file_t *tfile;
+	char *resolved_path;
+	char *dir_end = NULL;
+	char *new_path;
+	struct stat stat_buf;
+	element e, next;
+
+	inotify_fd = -1;
+
+	if (LIST_ISEMPTY(track_files))
+		return;
+
+#ifdef HAVE_INOTIFY_INIT1
+	inotify_fd = inotify_init1(IN_CLOEXEC | IN_NONBLOCK);
+#else
+	inotify_fd = inotify_init();
+	if (inotify_fd != -1) {
+		fcntl(inotify_fd, F_SETFD, FD_CLOEXEC);
+		fcntl(inotify_fd, F_SETFL, O_NONBLOCK);
+	}
+#endif
+
+	if (inotify_fd == -1) {
+		log_message(LOG_INFO, "Unable to monitor vrrp track files");
+		return ;
+	}
+
+	LIST_FOREACH_NEXT(track_files, tfile, e, next) {
+		if (LIST_ISEMPTY(tfile->tracking_vrrp)) {
+			/* No vrrp instance is tracking this file, so forget it */
+			report_config_error(CONFIG_GENERAL_ERROR, "Track file %s is not being used - removing", tfile->fname);
+			remove_track_file(track_files, e);
+			continue;
+		}
+
+		resolved_path = realpath(tfile->file_path, NULL);
+		if (resolved_path) {
+			if (strcmp(tfile->file_path, resolved_path)) {
+				FREE_CONST(tfile->file_path);
+				tfile->file_path = STRDUP(resolved_path);
+			}
+
+			/* The file exists, so read it now */
+			process_track_file(tfile, true);
+		}
+		else if (errno == ENOENT) {
+			/* Resolve the directory */
+			if (!(dir_end = strrchr(tfile->file_path, '/')))
+				resolved_path = realpath(".", NULL);
+			else {
+				*dir_end = '\0';
+				resolved_path = realpath(tfile->file_path, NULL);
+
+				/* Check it is a directory */
+				if (resolved_path &&
+				    (stat(resolved_path, &stat_buf) ||
+				     !S_ISDIR(stat_buf.st_mode))) {
+					free(resolved_path);
+					resolved_path = NULL;
+				}
+			}
+
+			if (!resolved_path) {
+				report_config_error(CONFIG_GENERAL_ERROR, "Track file directory for %s does not exist - removing", tfile->fname);
+				remove_track_file(track_files, e);
+
+				continue;
+			}
+
+			if (strcmp(tfile->file_path, resolved_path)) {
+				new_path = MALLOC(strlen(resolved_path) + strlen((!dir_end) ? tfile->file_path : dir_end + 1) + 2);
+				strcpy(new_path, resolved_path);
+				strcat(new_path, "/");
+				strcat(new_path, dir_end ? dir_end + 1 : tfile->file_path);
+				FREE_CONST(tfile->file_path);
+				tfile->file_path = new_path;
+			}
+			else if (dir_end)
+				*dir_end = '/';
+		}
+		else {
+			report_config_error(CONFIG_GENERAL_ERROR, "track file %s is not accessible - ignoring", tfile->fname);
+			remove_track_file(track_files, e);
+
+			continue;
+		}
+
+		if (resolved_path)
+			free(resolved_path);
+
+		tfile->file_part = strrchr(tfile->file_path, '/') + 1;
+		new_path = STRNDUP(tfile->file_path, tfile->file_part - tfile->file_path);
+		tfile->wd = inotify_add_watch(inotify_fd, new_path, IN_CLOSE_WRITE | IN_DELETE | IN_MOVE);
+		FREE(new_path);
+	}
+
+	inotify_thread = thread_add_read(master, process_inotify, NULL, inotify_fd, TIMER_NEVER, false);
+}
+
+void
+stop_track_files(void)
+{
+	if (inotify_thread) {
+		thread_cancel(inotify_thread);
+		inotify_thread = NULL;
+	}
+
+	if (inotify_fd != -1) {
+		close(inotify_fd);
+		inotify_fd = -1;
+	}
+}
+
+#ifdef _WITH_CN_PROC_
+void
+process_update_track_process_status(vrrp_tracked_process_t *tprocess, bool now_up)
+{
+	tracking_vrrp_t *tvp;
+	element e;
+
+	log_message(LOG_INFO, "Quorum %s for tracked process %s", now_up ? "gained" : "lost", tprocess->pname);
+
+	LIST_FOREACH(tprocess->tracking_vrrp, tvp, e) {
+		if (!tvp->weight) {
+			if (now_up == (tvp->weight_multiplier == 1))
+				try_up_instance(tvp->vrrp, false);
+			else
+				down_instance(tvp->vrrp);
+		}
+		else if (tvp->vrrp->base_priority != VRRP_PRIO_OWNER) {
+			if ((tvp->weight > 0) == now_up)
+				tvp->vrrp->total_priority += tvp->weight * tvp->weight_multiplier;
+			else
+				tvp->vrrp->total_priority -= tvp->weight * tvp->weight_multiplier;
+			vrrp_set_effective_priority(tvp->vrrp);
+		}
+	}
+}
+#endif
+
+#ifdef THREAD_DUMP
+void
+register_vrrp_inotify_addresses(void)
+{
+	register_thread_address("process_inotify", process_inotify);
 }
+#endif
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_vmac.c b/tools/keepalived/keepalived/vrrp/vrrp_vmac.c
index a5ad17a56..bc68fa7e4 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_vmac.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_vmac.c
@@ -17,93 +17,147 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+/* global include */
+#ifdef NETLINK_H_NEEDS_SYS_SOCKET_H
+#include <sys/socket.h>
+#endif
+#include <linux/if_link.h>
+#include <stdint.h>
+
 /* local include */
 #include "vrrp_vmac.h"
-#include "vrrp_netlink.h"
-#include "vrrp_data.h"
+#include "keepalived_netlink.h"
 #include "logger.h"
-#include "memory.h"
+#include "bitops.h"
 #include "utils.h"
-#include "parser.h"
+#include "vrrp_if_config.h"
+#include "vrrp_ipaddress.h"
+#include "vrrp_firewall.h"
 
-/* private matter */
-static const char *ll_kind = "macvlan";
+const char * const macvlan_ll_kind = "macvlan";
+#ifdef _HAVE_VRRP_IPVLAN_
+const char * const ipvlan_ll_kind = "ipvlan";
+#endif
+u_char ll_addr[ETH_ALEN] = {0x00, 0x00, 0x5e, 0x00, 0x01, 0x00};
 
-#ifdef _HAVE_VRRP_VMAC_
-/* Link layer handling */
-static int
-netlink_link_setlladdr(vrrp_t *vrrp)
+static void
+make_link_local_address(struct in6_addr* l3_addr, const u_char* if_ll_addr)
 {
-	int status = 1;
-	u_char ll_addr[ETH_ALEN] = {0x00, 0x00, 0x5e, 0x00, 0x01, vrrp->vrid};
-	struct {
-		struct nlmsghdr n;
-		struct ifinfomsg ifi;
-		char buf[256];
-	} req;
+	l3_addr->s6_addr[0] = 0xfe;
+	l3_addr->s6_addr[1] = 0x80;
+	l3_addr->s6_addr16[1] = 0;
+	l3_addr->s6_addr32[1] = 0;
+	l3_addr->s6_addr[8] = if_ll_addr[0] ^ 0x02;
+	l3_addr->s6_addr[9] = if_ll_addr[1];
+	l3_addr->s6_addr[10] = if_ll_addr[2];
+	l3_addr->s6_addr[11] = 0xff;
+	l3_addr->s6_addr[12] = 0xfe;
+	l3_addr->s6_addr[13] = if_ll_addr[3];
+	l3_addr->s6_addr[14] = if_ll_addr[4];
+	l3_addr->s6_addr[15] = if_ll_addr[5];
+}
 
-	memset(&req, 0, sizeof (req));
-	
-	req.n.nlmsg_len = NLMSG_LENGTH(sizeof (struct ifinfomsg));
-	req.n.nlmsg_flags = NLM_F_REQUEST;
-	req.n.nlmsg_type = RTM_NEWLINK;
-	req.ifi.ifi_family = AF_INET;
-	req.ifi.ifi_index = IF_INDEX(vrrp->ifp);
+bool
+add_link_local_address(interface_t *ifp, struct in6_addr* sin6_addr)
+{
+	ip_address_t ipaddress;
 
-	addattr_l(&req.n, sizeof(req), IFLA_ADDRESS, ll_addr, ETH_ALEN);
+	memset(&ipaddress, 0, sizeof(ipaddress));
 
-	if (netlink_talk(&nl_cmd, &req.n) < 0)
-		status = -1;
-	else
-		memcpy(vrrp->ifp->hw_addr, ll_addr, ETH_ALEN);
+	/* Delete the old address */
+	ipaddress.ifp = ifp;
+	ipaddress.u.sin6_addr = *sin6_addr;
 
-	return status;
+	ipaddress.ifa.ifa_family = AF_INET6;
+	ipaddress.ifa.ifa_prefixlen = 64;
+	ipaddress.ifa.ifa_index = ifp->ifindex;
+
+	if (netlink_ipaddress(&ipaddress, NULL, IPADDRESS_ADD) != 1) {
+		log_message(LOG_INFO, "Adding link-local address to vmac failed");
+		ifp->sin6_addr.s6_addr32[0] = 0;
+
+		return false;
+	}
+
+	/* Save the new address */
+	ifp->sin6_addr = ipaddress.u.sin6_addr;
+
+	return true;
 }
 
-static int
-netlink_link_setmode(vrrp_t *vrrp)
+bool
+replace_link_local_address(interface_t *ifp)
 {
-	int status = 1;
-	struct {
-		struct nlmsghdr n;
-		struct ifinfomsg ifi;
-		char buf[256];
-	} req;
-	struct rtattr *linkinfo;
-	struct rtattr *data;
+	ip_address_t ipaddress;
+	struct in6_addr ipaddress_new;
 
-	memset(&req, 0, sizeof (req));
+	memset(&ipaddress, 0, sizeof(ipaddress));
 
-	req.n.nlmsg_len = NLMSG_LENGTH(sizeof (struct ifinfomsg));
-	req.n.nlmsg_flags = NLM_F_REQUEST;
-	req.n.nlmsg_type = RTM_NEWLINK;
-	req.ifi.ifi_family = AF_INET;
-	req.ifi.ifi_index = IF_INDEX(vrrp->ifp);
+	/* Create a new address */
+	make_link_local_address(&ipaddress_new, ifp->base_ifp->hw_addr);
 
-	linkinfo = NLMSG_TAIL(&req.n);
-	addattr_l(&req.n, sizeof(req), IFLA_LINKINFO, NULL, 0);
-	addattr_l(&req.n, sizeof(req), IFLA_INFO_KIND, (void *) ll_kind, strlen(ll_kind));
-	data = NLMSG_TAIL(&req.n);
-	addattr_l(&req.n, sizeof(req), IFLA_INFO_DATA, NULL, 0);
+	/* There is no point in replacing the address with the same address */
+	if (inaddr_equal(AF_INET6, &ipaddress_new, &ifp->sin6_addr))
+		return true;
 
-	/*
-	 * In private mode, macvlan will receive frames with same MAC addr
-	 * as configured on the interface.
-	 */
-	addattr32(&req.n, sizeof(req), IFLA_MACVLAN_MODE,
-		  MACVLAN_MODE_PRIVATE);
-	data->rta_len = (void *)NLMSG_TAIL(&req.n) - (void *)data;
-	linkinfo->rta_len = (void *)NLMSG_TAIL(&req.n) - (void *)linkinfo;
+	/* Delete the old address */
+	ipaddress.ifp = ifp;
+	ipaddress.u.sin6_addr = ifp->sin6_addr;
 
-	if (netlink_talk(&nl_cmd, &req.n) < 0)
-		status = -1;
+	ipaddress.ifa.ifa_family = AF_INET6;
+	ipaddress.ifa.ifa_prefixlen = 64;
+	ipaddress.ifa.ifa_index = ifp->ifindex;
 
-	return status;
+	if (netlink_ipaddress(&ipaddress, NULL, IPADDRESS_DEL) != 1)
+		log_message(LOG_INFO, "Deleting link-local address from vmac failed");
+	else
+		ifp->sin6_addr.s6_addr32[0] = 0;
+
+	ipaddress.u.sin6_addr = ipaddress_new;
+	if (netlink_ipaddress(&ipaddress, NULL, IPADDRESS_ADD) != 1) {
+		log_message(LOG_INFO, "Adding link-local address to vmac failed");
+		ifp->sin6_addr.s6_addr32[0] = 0;
+
+		return false;
+	}
+
+	/* Save the new address */
+	ifp->sin6_addr = ipaddress.u.sin6_addr;
+
+	return true;
 }
 
+#if !HAVE_DECL_IFLA_INET6_ADDR_GEN_MODE
+void
+remove_vmac_auto_gen_addr(interface_t *ifp, struct in6_addr *addr)
+{
+	struct in6_addr auto_addr;
+	ip_address_t ipaddress;
+
+	make_link_local_address(&auto_addr, ifp->hw_addr);
+
+	if (!inaddr_equal(AF_INET6, &auto_addr, addr))
+		return;
+
+	/* Delete the new address */
+	memset(&ipaddress, 0, sizeof(ipaddress));
+
+	ipaddress.ifp = ifp;
+	ipaddress.u.sin6_addr = *addr; 
+	ipaddress.ifa.ifa_family = AF_INET6;
+	ipaddress.ifa.ifa_prefixlen = 64;
+	ipaddress.ifa.ifa_index = ifp->ifindex;
+
+	if (netlink_ipaddress(&ipaddress, NULL, IPADDRESS_DEL) != 1)
+		log_message(LOG_INFO, "Deleting auto generated link-local address from vmac failed");
+}
+#endif
+
 static int
 netlink_link_up(vrrp_t *vrrp)
 {
@@ -111,16 +165,15 @@ netlink_link_up(vrrp_t *vrrp)
 	struct {
 		struct nlmsghdr n;
 		struct ifinfomsg ifi;
-		char buf[256];
 	} req;
 
 	memset(&req, 0, sizeof (req));
-	
+
 	req.n.nlmsg_len = NLMSG_LENGTH(sizeof (struct ifinfomsg));
 	req.n.nlmsg_flags = NLM_F_REQUEST;
 	req.n.nlmsg_type = RTM_NEWLINK;
 	req.ifi.ifi_family = AF_UNSPEC;
-	req.ifi.ifi_index = IF_INDEX(vrrp->ifp);
+	req.ifi.ifi_index = (int)IF_INDEX(vrrp->ifp);
 	req.ifi.ifi_change |= IFF_UP;
 	req.ifi.ifi_flags |= IFF_UP;
 
@@ -129,102 +182,418 @@ netlink_link_up(vrrp_t *vrrp)
 
 	return status;
 }
-#endif
 
-int
+bool
 netlink_link_add_vmac(vrrp_t *vrrp)
 {
-#ifdef _HAVE_VRRP_VMAC_
 	struct rtattr *linkinfo;
-	unsigned int base_ifindex;
+	struct rtattr *data;
 	interface_t *ifp;
-	char ifname[IFNAMSIZ];
+	bool create_interface = true;
 	struct {
 		struct nlmsghdr n;
 		struct ifinfomsg ifi;
 		char buf[256];
 	} req;
 
-	if (!vrrp->ifp || vrrp->vmac_flags & VRRP_VMAC_FL_UP || !vrrp->vrid)
-		return -1;
+	if (!vrrp->ifp || __test_bit(VRRP_VMAC_UP_BIT, &vrrp->vmac_flags) || !vrrp->vrid)
+		return false;
+
+	if (vrrp->family == AF_INET6)
+		ll_addr[ETH_ALEN-2] = 0x02;
+	else
+		ll_addr[ETH_ALEN-2] = 0x01;
+
+	ll_addr[ETH_ALEN-1] = vrrp->vrid;
 
 	memset(&req, 0, sizeof (req));
-	memset(ifname, 0, IFNAMSIZ);
-	strncpy(ifname, vrrp->vmac_ifname, IFNAMSIZ - 1);
 
-	/* 
-	 * Check to see if this vmac interface was created 
+	/*
+	 * Check to see if this vmac interface was created
 	 * by a previous instance.
 	 */
-	if (reload && (ifp = if_get_by_ifname(ifname))) {
-		/* (re)set VMAC properties (if deleted on reload) */
-		ifp->base_ifindex = vrrp->ifp->ifindex;
-		ifp->vmac = 1;
-		ifp->flags = vrrp->ifp->flags; /* Copy base interface flags */
-		vrrp->ifp = ifp;
-		/* Save ifindex for use on delete */
-		vrrp->vmac_ifindex = IF_INDEX(vrrp->ifp);
-		vrrp->vmac_flags |= VRRP_VMAC_FL_UP;
-		return 1;
+	ifp = if_get_by_ifname(vrrp->vmac_ifname, IF_CREATE_ALWAYS);
+
+	if (ifp->ifindex) {
+		/* Check to see whether this interface has wrong mac ? */
+		if (memcmp((const void *) ifp->hw_addr, (const void *) ll_addr, ETH_ALEN) != 0 ||
+		     ifp->base_ifindex != vrrp->ifp->ifindex ||
+		     ifp->vmac_type != MACVLAN_MODE_PRIVATE) {
+			/* Be safe here - we don't want to remove a physical interface */
+			if (ifp->vmac_type) {
+				/* We have found a VIF but the vmac or type do not match */
+				log_message(LOG_INFO, "vmac: Removing old VMAC interface %s due to conflicting "
+						      "interface or MAC for vrrp_instance %s!!!"
+						    , vrrp->vmac_ifname, vrrp->iname);
+
+				/* Request that NETLINK remove the VIF interface first */
+				memset(&req, 0, sizeof (req));
+				req.n.nlmsg_len = NLMSG_LENGTH(sizeof (struct ifinfomsg));
+				req.n.nlmsg_flags = NLM_F_REQUEST;
+				req.n.nlmsg_type = RTM_DELLINK;
+				req.ifi.ifi_family = AF_INET;
+				req.ifi.ifi_index = (int)IF_INDEX(ifp);
+
+				if (netlink_talk(&nl_cmd, &req.n) < 0) {
+					log_message(LOG_INFO, "vmac: Error removing VMAC interface %s for "
+							      "vrrp_instance %s!!!"
+							    , vrrp->vmac_ifname, vrrp->iname);
+					return false;
+				}
+
+				kernel_netlink_poll();	/* Update our local info */
+			} else {
+				log_message(LOG_INFO, "VMAC %s conflicts with existing interface", vrrp->vmac_ifname);
+				return false;
+			}
+		}
+		else
+			create_interface = false;
 	}
-	
-	req.n.nlmsg_len = NLMSG_LENGTH(sizeof (struct ifinfomsg));
-	req.n.nlmsg_flags = NLM_F_REQUEST | NLM_F_CREATE | NLM_F_EXCL;
-	req.n.nlmsg_type = RTM_NEWLINK;
-	req.ifi.ifi_family = AF_INET;
 
-	/* macvlan settings */
-	linkinfo = NLMSG_TAIL(&req.n);
-	addattr_l(&req.n, sizeof(req), IFLA_LINKINFO, NULL, 0);
-	addattr_l(&req.n, sizeof(req), IFLA_INFO_KIND, (void *)ll_kind, strlen(ll_kind));
-	linkinfo->rta_len = (void *)NLMSG_TAIL(&req.n) - (void *)linkinfo;
-	addattr_l(&req.n, sizeof(req), IFLA_LINK, &IF_INDEX(vrrp->ifp), sizeof(uint32_t));
-	addattr_l(&req.n, sizeof(req), IFLA_IFNAME, ifname, strlen(ifname));
+	ifp->is_ours = true;
+	if (create_interface && vrrp->configured_ifp->base_ifp->ifindex) {
+		/* Request that NETLINK create the VIF interface */
+		req.n.nlmsg_len = NLMSG_LENGTH(sizeof (struct ifinfomsg));
+		req.n.nlmsg_flags = NLM_F_REQUEST | NLM_F_CREATE | NLM_F_EXCL;
+		req.n.nlmsg_type = RTM_NEWLINK;
+		req.ifi.ifi_family = AF_UNSPEC;
+
+		/* macvlan settings */
+		linkinfo = NLMSG_TAIL(&req.n);
+		addattr_l(&req.n, sizeof(req), IFLA_LINKINFO, NULL, 0);
+		addattr_l(&req.n, sizeof(req), IFLA_INFO_KIND, (const void *)macvlan_ll_kind, strlen(macvlan_ll_kind));
+		data = NLMSG_TAIL(&req.n);
+		addattr_l(&req.n, sizeof(req), IFLA_INFO_DATA, NULL, 0);
+
+		/*
+		 * In private mode, macvlan will receive frames with same MAC addr
+		 * as configured on the interface.
+		 */
+		addattr32(&req.n, sizeof(req), IFLA_MACVLAN_MODE,
+			  MACVLAN_MODE_PRIVATE);
+		data->rta_len = (unsigned short)((char *)NLMSG_TAIL(&req.n) - (char *)data);
+		/* coverity[overrun-local] */
+		linkinfo->rta_len = (unsigned short)((char *)NLMSG_TAIL(&req.n) - (char *)linkinfo);
+
+		/* Note: if the underlying interface is a macvlan, then the kernel will configure the
+		 * interface only the underlying interface of the macvlan */
+		addattr32(&req.n, sizeof(req), IFLA_LINK, vrrp->configured_ifp->ifindex);
+		addattr_l(&req.n, sizeof(req), IFLA_IFNAME, vrrp->vmac_ifname, strlen(vrrp->vmac_ifname));
+		addattr_l(&req.n, sizeof(req), IFLA_ADDRESS, ll_addr, ETH_ALEN);
+
+#ifdef _HAVE_VRF_
+		/* If the underlying interface is enslaved to a VRF master, then this
+		 * interface should be as well. */
+		if (vrrp->configured_ifp->vrf_master_ifp)
+			addattr32(&req.n, sizeof(req), IFLA_MASTER, vrrp->configured_ifp->vrf_master_ifp->ifindex);
+#endif
 
-	if (netlink_talk(&nl_cmd, &req.n) < 0) {
-		log_message(LOG_INFO, "vmac: Error creating VMAC interface %s for vrrp_instance %s!!!"
-				    , ifname, vrrp->iname);
-		return -1;
+		if (netlink_talk(&nl_cmd, &req.n) < 0) {
+			log_message(LOG_INFO, "(%s): Unable to create VMAC interface %s"
+					    , vrrp->iname, vrrp->vmac_ifname);
+			return false;
+		}
+
+		log_message(LOG_INFO, "(%s): Success creating VMAC interface %s"
+				    , vrrp->iname, vrrp->vmac_ifname);
+
+		/*
+		 * Update interface queue and vrrp instance interface binding.
+		 */
+		netlink_interface_lookup(vrrp->vmac_ifname);
+		if (!ifp->ifindex)
+			return false;
+
+		if (!ifp->base_ifp &&
+		    IS_VLAN(vrrp->configured_ifp) &&
+		    vrrp->configured_ifp == vrrp->configured_ifp->base_ifp) {
+			/* If the base interface is a MACVLAN/IPVLAN that has been moved into a
+			 * different network namespace from its parent, we can't find the parent */
+			ifp->base_ifp = ifp;
+		}
+
+		/* If we do anything that might cause the interface state to change, we must
+		 * read the reflected netlink messages to ensure that the link status doesn't
+		 * get updated by out of date queued messages */
+		kernel_netlink_poll();
 	}
 
-	log_message(LOG_INFO, "vmac: Success creating VMAC interface %s for vrrp_instance %s"
-			    , ifname, vrrp->iname);
+	ifp->vmac_type = MACVLAN_MODE_PRIVATE;
 
-	/*
-	 * Update interface queue and vrrp instance interface binding.
-	 * bring it UP !
-	 */
-	netlink_interface_lookup();
-	ifp = if_get_by_ifname(ifname);
-	if (!ifp)
-		return -1;
-	base_ifindex = vrrp->ifp->ifindex;
-	ifp->flags = vrrp->ifp->flags; /* Copy base interface flags */
-	vrrp->ifp = ifp;
-	vrrp->ifp->base_ifindex = base_ifindex;
-	vrrp->ifp->vmac = 1;
-	vrrp->vmac_ifindex = IF_INDEX(vrrp->ifp); /* For use on delete */
-	vrrp->vmac_flags |= VRRP_VMAC_FL_UP;
-	netlink_link_setlladdr(vrrp);
+	if (!ifp->ifindex)
+		return false;
+
+	if (vrrp->family == AF_INET) {
+		/* Set the necessary kernel parameters to make macvlans work for us */
+		if (create_interface)
+			set_interface_parameters(ifp, ifp->base_ifp);
+
+		/* We don't want IPv6 running on the interface unless we have some IPv6
+		 * eVIPs, so disable it if not needed */
+		if (vrrp->family == AF_INET && !vrrp->evip_other_family)
+			link_set_ipv6(ifp, false);
+		else if (!create_interface) {
+			/* If we didn't create the VMAC we don't know what state it is in */
+			link_set_ipv6(ifp, true);
+		}
+	}
+
+	if (vrrp->family == AF_INET6 || vrrp->evip_other_family) {
+		/* Make sure IPv6 is enabled for the interface, in case the
+		 * sysctl net.ipv6.conf.default.disable_ipv6 is set true. */
+		link_set_ipv6(ifp, true);
+
+		/* We don't want a link-local address auto assigned - see RFC5798 paragraph 7.4.
+		 * If we have a sufficiently recent kernel, we can stop a link local address
+		 * based on the MAC address being automatically assigned. If not, then we have
+		 * to delete the generated address after bringing the interface up (see below).
+		 */
+#if HAVE_DECL_IFLA_INET6_ADDR_GEN_MODE
+		memset(&req, 0, sizeof (req));
+		req.n.nlmsg_len = NLMSG_LENGTH(sizeof (struct ifinfomsg));
+		req.n.nlmsg_flags = NLM_F_REQUEST ;
+		req.n.nlmsg_type = RTM_NEWLINK;
+		req.ifi.ifi_family = AF_UNSPEC;
+		req.ifi.ifi_index = (int)vrrp->ifp->ifindex;
+
+		struct rtattr* spec;
+
+		spec = NLMSG_TAIL(&req.n);
+		addattr_l(&req.n, sizeof(req), IFLA_AF_SPEC, NULL,0);
+		data = NLMSG_TAIL(&req.n);
+		addattr_l(&req.n, sizeof(req), AF_INET6, NULL,0);
+		addattr8(&req.n, sizeof(req), IFLA_INET6_ADDR_GEN_MODE, IN6_ADDR_GEN_MODE_NONE);
+		data->rta_len = (unsigned short)((char *)NLMSG_TAIL(&req.n) - (char *)data);
+		spec->rta_len = (unsigned short)((char *)NLMSG_TAIL(&req.n) - (char *)spec);
+
+		if (netlink_talk(&nl_cmd, &req.n) < 0)
+			log_message(LOG_INFO, "vmac: Error setting ADDR_GEN_MODE to NONE");
+#endif
+
+		if (vrrp->family == AF_INET6 &&
+		    !__test_bit(VRRP_VMAC_XMITBASE_BIT, &vrrp->vmac_flags)) {
+			/* Add link-local address. If a source address has been specified, use it,
+			 * else use link-local address from underlying interface to vmac if there is one,
+			 * otherwise construct a link-local address based on underlying interface's
+			 * MAC address.
+			 * This is so that VRRP advertisements will be sent from a non-VIP address, but
+			 * using the VRRP MAC address */
+			ip_address_t ipaddress;
+
+			memset(&ipaddress, 0, sizeof(ipaddress));
+
+			ipaddress.ifp = ifp;
+			if (vrrp->saddr.ss_family == AF_INET6)
+				ipaddress.u.sin6_addr = ((struct sockaddr_in6*)&vrrp->saddr)->sin6_addr;
+			else if (ifp->base_ifp->sin6_addr.s6_addr32[0])
+				ipaddress.u.sin6_addr = ifp->base_ifp->sin6_addr;
+			else
+				make_link_local_address(&ipaddress.u.sin6_addr, ifp->base_ifp->hw_addr);
+			ipaddress.ifa.ifa_family = AF_INET6;
+			ipaddress.ifa.ifa_prefixlen = 64;
+			ipaddress.ifa.ifa_index = vrrp->ifp->ifindex;
+
+			if (netlink_ipaddress(&ipaddress, NULL, IPADDRESS_ADD) != 1 && create_interface)
+				log_message(LOG_INFO, "Adding link-local address to vmac failed");
+		}
+	}
+
+	/* bring it UP ! */
+	__set_bit(VRRP_VMAC_UP_BIT, &vrrp->vmac_flags);
 	netlink_link_up(vrrp);
+	kernel_netlink_poll();
+
+#if !HAVE_DECL_IFLA_INET6_ADDR_GEN_MODE
+	if (vrrp->family == AF_INET6 || vrrp->evip_other_family) {
+		/* Delete the automatically created link-local address based on the
+		 * MAC address if we weren't able to configure the interface not to
+		 * create the address (see above).
+		 * This isn't ideal, since the invalid address will exist momentarily,
+		 * but is there any better way to do it? probably not otherwise
+		 * ADDR_GEN_MODE wouldn't have been added to the kernel. */
+		ip_address_t ipaddress;
+
+		memset(&ipaddress, 0, sizeof(ipaddress));
+
+		ipaddress.u.sin6_addr = ifp->base_ifp->sin6_addr;
+		make_link_local_address(&ipaddress.u.sin6_addr, ll_addr);
+		ipaddress.ifa.ifa_family = AF_INET6;
+		ipaddress.ifa.ifa_prefixlen = 64;
+		ipaddress.ifa.ifa_index = vrrp->ifp->ifindex;
+		ipaddress.ifp = vrrp->ifp;
+
+		if (netlink_ipaddress(&ipaddress, NULL, IPADDRESS_DEL) != 1 && create_interface)
+			log_message(LOG_INFO, "Deleting auto link-local address from vmac failed");
+	}
+#endif
+
+	/* If we are adding a large number of interfaces, the netlink socket
+	 * may run out of buffers if we don't receive the netlink messages
+	 * as we progress */
+	kernel_netlink_poll();
+
+#ifdef _WITH_FIREWALL_
+	firewall_add_vmac(vrrp);
+#endif
+	return true;
+}
+
+#ifdef _INCLUDE_UNUSED_CODE_
+typedef struct {
+	struct nlmsghdr n;
+	struct ifinfomsg ifi;
+	char buf[256];
+} req_t;
+static void
+dump_bufn(const char *msg, req_t *req)
+{
+        size_t i;
+	char buf[3 * req->n.nlmsg_len + 3];
+	char *ptr = buf;
+
+        log_message(LOG_INFO, "%s: message length is %d\n", msg, req->n.nlmsg_len);
+        for (i = 0; i < req->n.nlmsg_len; i++)
+                ptr += snprintf(ptr, buf + sizeof buf - ptr, "%2.2x ", ((unsigned char *)&req->n)[i]);
+        log_message(LOG_INFO, "%s", buf);
+}
+#endif
+
+#ifdef _HAVE_VRRP_IPVLAN_
+bool
+netlink_link_add_ipvlan(vrrp_t *vrrp)
+{
+	struct rtattr *linkinfo;
+	struct rtattr *data;
+	interface_t *ifp;
+	bool create_interface = true;
+	struct {
+		struct nlmsghdr n;
+		struct ifinfomsg ifi;
+		char buf[256];
+	} req;
+
+	if (!vrrp->ifp || __test_bit(VRRP_VMAC_UP_BIT, &vrrp->vmac_flags) || !vrrp->vrid)
+		return false;
+
+	memset(&req, 0, sizeof (req));
 
 	/*
-	 * By default MACVLAN interface are in VEPA mode which filters
-	 * out received packets whose MAC source address matches that
-	 * of the MACVLAN interface. Setting MACVLAN interface in private
-	 * mode will not filter based on source MAC address.
+	 * Check to see if this ipvlan interface was created
+	 * by a previous instance.
 	 */
-	netlink_link_setmode(vrrp);
+	ifp = if_get_by_ifname(vrrp->vmac_ifname, IF_CREATE_ALWAYS);
+
+	if (ifp->ifindex)
+		create_interface = false;
+
+	ifp->is_ours = true;
+	if (create_interface && vrrp->configured_ifp->base_ifp->ifindex) {
+		/* Request that NETLINK create the VIF interface */
+		req.n.nlmsg_len = NLMSG_LENGTH(sizeof (struct ifinfomsg));
+		req.n.nlmsg_flags = NLM_F_REQUEST | NLM_F_CREATE | NLM_F_EXCL;
+		req.n.nlmsg_type = RTM_NEWLINK;
+		req.ifi.ifi_family = AF_UNSPEC;
+
+		/* ipvlan settings */
+
+		/* Note: if the underlying interface is a ipvlan, then the kernel will configure the
+		 * interface only the underlying interface of the ipvlan */
+		addattr32(&req.n, sizeof(req), IFLA_LINK, vrrp->configured_ifp->ifindex);
+		addattr_l(&req.n, sizeof(req), IFLA_IFNAME, vrrp->vmac_ifname, strlen(vrrp->vmac_ifname));
+		linkinfo = NLMSG_TAIL(&req.n);
+		addattr_l(&req.n, sizeof(req), IFLA_LINKINFO, NULL, 0);
+		addattr_l(&req.n, sizeof(req), IFLA_INFO_KIND, (const void *)ipvlan_ll_kind, strlen(ipvlan_ll_kind));
+		data = NLMSG_TAIL(&req.n);
+		addattr_l(&req.n, sizeof(req), IFLA_INFO_DATA, NULL, 0);
+
+		/*
+		 * In l2 mode, ipvlan will receive frames.
+		 */
+		addattr16(&req.n, sizeof(req), IFLA_IPVLAN_MODE, IPVLAN_MODE_L2);
+#ifdef IFLA_IPVLAN_FLAGS
+		addattr16(&req.n, sizeof(req), IFLA_IPVLAN_FLAGS, vrrp->ipvlan_type);
+#endif
+		/* coverity[overrun-local] */
+		data->rta_len = (unsigned short)((char *)NLMSG_TAIL(&req.n) - (char *)data);
+		linkinfo->rta_len = (unsigned short)((char *)NLMSG_TAIL(&req.n) - (char *)linkinfo);
+
+#ifdef _HAVE_VRF_
+		/* If the underlying interface is enslaved to a VRF master, then this
+		 * interface should be as well. */
+		if (vrrp->configured_ifp->vrf_master_ifp)
+			addattr32(&req.n, sizeof(req), IFLA_MASTER, vrrp->configured_ifp->vrf_master_ifp->ifindex);
 #endif
-	return 1;
+
+		if (netlink_talk(&nl_cmd, &req.n) < 0) {
+			log_message(LOG_INFO, "(%s): Unable to create ipvlan interface %s"
+					    , vrrp->iname, vrrp->vmac_ifname);
+			return false;
+		}
+
+		log_message(LOG_INFO, "(%s): Success creating ipvlan interface %s"
+				    , vrrp->iname, vrrp->vmac_ifname);
+
+		/*
+		 * Update interface queue and vrrp instance interface binding.
+		 */
+		netlink_interface_lookup(vrrp->vmac_ifname);
+		if (!ifp->ifindex)
+			return false;
+
+		if (!ifp->base_ifp &&
+		    (vrrp->configured_ifp->if_type == IF_TYPE_MACVLAN ||
+		     vrrp->configured_ifp->if_type == IF_TYPE_IPVLAN) &&
+		    vrrp->configured_ifp == vrrp->configured_ifp->base_ifp) {
+			/* If the base interface is a MACVLAN that has been moved into a
+			 * different network namespace from its parent, we can't find the parent */
+			ifp->base_ifp = ifp;
+		}
+
+		/* If we do anything that might cause the interface state to change, we must
+		 * read the reflected netlink messages to ensure that the link status doesn't
+		 * get updated by out of date queued messages */
+		kernel_netlink_poll();
+	}
+
+	ifp->vmac_type = IPVLAN_MODE_L2;
+
+	if (!ifp->ifindex)
+		return false;
+
+	if (vrrp->family == AF_INET) {
+		/* We don't want IPv6 running on the interface unless we have some IPv6
+		 * eVIPs, so disable it if not needed */
+		if (vrrp->family == AF_INET && !vrrp->evip_other_family)
+			link_set_ipv6(ifp, false);
+		else if (!create_interface) {
+			/* If we didn't create the VMAC we don't know what state it is in */
+			link_set_ipv6(ifp, true);
+		}
+	}
+
+	if (vrrp->family == AF_INET6 || vrrp->evip_other_family) {
+		/* Make sure IPv6 is enabled for the interface, in case the
+		 * sysctl net.ipv6.conf.default.disable_ipv6 is set true. */
+		link_set_ipv6(ifp, true);
+	}
+
+	/* bring it UP ! */
+	__set_bit(VRRP_VMAC_UP_BIT, &vrrp->vmac_flags);
+	netlink_link_up(vrrp);
+	kernel_netlink_poll();
+
+	if (vrrp->ipvlan_addr &&
+	    netlink_ipaddress(vrrp->ipvlan_addr, NULL, IPADDRESS_ADD) != 1)
+		log_message(LOG_INFO, "%s: Failed to add interface address to %s", vrrp->iname, ifp->ifname);
+
+	return true;
 }
+#endif
 
-int
+void
 netlink_link_del_vmac(vrrp_t *vrrp)
 {
-	int status = 1;
-
-#ifdef _HAVE_VRRP_VMAC_
 	struct {
 		struct nlmsghdr n;
 		struct ifinfomsg ifi;
@@ -232,7 +601,25 @@ netlink_link_del_vmac(vrrp_t *vrrp)
 	} req;
 
 	if (!vrrp->ifp)
-		return -1;
+		return;
+
+	/* Don't delete the VMAC if it isn't an interface we created */
+	if (!vrrp->ifp->is_ours) {
+		log_message(LOG_INFO, "BUG - Attempt to remove VMAC interface %s which we didn't create", vrrp->ifp->ifname);
+		return;
+	}
+
+	/* Reset arp_ignore and arp_filter on the base interface if necessary */
+	if (vrrp->family == AF_INET) {
+		if (vrrp->ifp->base_ifp)
+			reset_interface_parameters(vrrp->ifp->base_ifp);
+		else
+			log_message(LOG_INFO, "Unable to find base interface for vrrp instance %s", vrrp->iname);
+	}
+
+	/* If the interface doesn't exist, don't try to delete it */
+	if (!vrrp->ifp->ifindex)
+		return;
 
 	memset(&req, 0, sizeof (req));
 
@@ -240,17 +627,91 @@ netlink_link_del_vmac(vrrp_t *vrrp)
 	req.n.nlmsg_flags = NLM_F_REQUEST;
 	req.n.nlmsg_type = RTM_DELLINK;
 	req.ifi.ifi_family = AF_INET;
-	req.ifi.ifi_index = vrrp->vmac_ifindex;
+	req.ifi.ifi_index = (int)vrrp->ifp->ifindex;
 
 	if (netlink_talk(&nl_cmd, &req.n) < 0) {
 		log_message(LOG_INFO, "vmac: Error removing VMAC interface %s for vrrp_instance %s!!!"
 				    , vrrp->vmac_ifname, vrrp->iname);
-		status = -1;
+		return;
 	}
 
+#ifdef _WITH_FIREWALL_
+	if (__test_bit(VRRP_VMAC_BIT, &vrrp->vmac_flags))
+		firewall_remove_vmac(vrrp);
+#endif
+
 	log_message(LOG_INFO, "vmac: Success removing VMAC interface %s for vrrp_instance %s"
 			    , vrrp->vmac_ifname, vrrp->iname);
-#endif
 
-	return status;
+	return;
+}
+
+#ifdef _HAVE_VRF_
+static void
+netlink_update_vrf(vrrp_t *vrrp)
+{
+	int ifindex = 0;
+	struct {
+		struct nlmsghdr n;
+		struct ifinfomsg ifi;
+		char buf[256];
+	} req;
+
+	if (!vrrp->ifp)
+		return;
+
+	/* Don't update the VMAC if it isn't an interface we created */
+	if (!vrrp->ifp->is_ours) {
+		log_message(LOG_INFO, "BUG - Attempt to update VRF on VMAC interface %s which we didn't create", vrrp->ifp->ifname);
+		return;
+	}
+
+	memset(&req, 0, sizeof (req));
+
+	req.n.nlmsg_len = NLMSG_LENGTH(sizeof (struct ifinfomsg));
+	req.n.nlmsg_flags = NLM_F_REQUEST;
+	req.n.nlmsg_type = RTM_NEWLINK;
+	req.ifi.ifi_family = AF_INET;
+	req.ifi.ifi_index = (int)vrrp->ifp->ifindex;
+
+	if (vrrp->ifp->vrf_master_ifp)
+		ifindex = vrrp->ifp->vrf_master_ifp->ifindex;
+
+	addattr32(&req.n, sizeof(req), IFLA_MASTER, ifindex);
+
+	if (netlink_talk(&nl_cmd, &req.n) < 0) {
+		log_message(LOG_INFO, "vmac: Error changing VRF of VMAC interface %s for vrrp_instance %s!!!", vrrp->ifp->ifname, vrrp->iname);
+		return;
+	}
+
+	log_message(LOG_INFO, "vmac: Success changing VRF of VMAC interface %s for vrrp_instance %s", vrrp->ifp->ifname, vrrp->iname);
+
+	kernel_netlink_poll();
+
+	return;
+}
+
+void
+update_vmac_vrfs(interface_t *ifp)
+{
+	vrrp_t *vrrp;
+        tracking_vrrp_t *tvp;
+        element e;
+
+        LIST_FOREACH(ifp->tracking_vrrp, tvp, e) {
+                vrrp = tvp->vrrp;
+
+                /* We only need to look for vmacs we created that
+		 * are configured on the interface which has changed
+		 * VRF */
+                if (vrrp->configured_ifp != ifp ||
+                    !vrrp->ifp->is_ours)
+			continue;
+
+		vrrp->ifp->vrf_master_ifp = ifp->vrf_master_ifp;
+
+		if (vrrp->ifp->ifindex)
+			netlink_update_vrf(vrrp);
+	}
 }
+#endif
diff --git a/tools/keepalived/kpalive_cluster_test.conf b/tools/keepalived/kpalive_cluster_test.conf
new file mode 100644
index 000000000..7cb599b12
--- /dev/null
+++ b/tools/keepalived/kpalive_cluster_test.conf
@@ -0,0 +1,104953 @@
+############################## 1 ##############################
+virtual_server_group 111.13.235.69-80-TCP_QLB {
+    111.13.235.69 80
+}
+
+deny_address_group 111.13.235.69_deny {
+}
+
+virtual_server  group 111.13.235.69-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.69_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.69 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.69 bond1.kni;"
+
+    real_server 192.168.49.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 2 ##############################
+virtual_server_group 192.168.102.169-80-TCP_QLB {
+    192.168.102.169 80
+}
+
+deny_address_group 192.168.102.169_deny {
+}
+
+virtual_server  group 192.168.102.169-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.169_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.169 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.169 bond1.kni;"
+
+    real_server 192.168.14.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 3 ##############################
+virtual_server_group 192.168.101.63-80-TCP_QLB {
+    192.168.101.63 80
+}
+
+deny_address_group 192.168.101.63_deny {
+}
+
+virtual_server  group 192.168.101.63-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.63_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.63 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.63 bond1.kni;"
+
+    real_server 192.168.31.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 4 ##############################
+virtual_server_group 192.168.102.88-80-TCP_QLB {
+    192.168.102.88 80
+}
+
+deny_address_group 192.168.102.88_deny {
+}
+
+virtual_server  group 192.168.102.88-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.88_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.88 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.88 bond1.kni;"
+
+    real_server 192.168.43.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 5 ##############################
+virtual_server_group 111.13.235.132-80-TCP_QLB {
+    111.13.235.132 80
+}
+
+deny_address_group 111.13.235.132_deny {
+}
+
+virtual_server  group 111.13.235.132-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.132_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.132 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.132 bond1.kni;"
+
+    real_server 192.168.25.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 6 ##############################
+virtual_server_group 192.168.101.61-80-TCP_QLB {
+    192.168.101.61 80
+}
+
+deny_address_group 192.168.101.61_deny {
+}
+
+virtual_server  group 192.168.101.61-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.61_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.61 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.61 bond1.kni;"
+
+    real_server 192.168.35.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 7 ##############################
+virtual_server_group 192.168.101.7-80-TCP_QLB {
+    192.168.101.7 80
+}
+
+deny_address_group 192.168.101.7_deny {
+}
+
+virtual_server  group 192.168.101.7-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.7_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.7 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.7 bond1.kni;"
+
+    real_server 192.168.18.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 8 ##############################
+virtual_server_group 111.13.235.154-80-TCP_QLB {
+    111.13.235.154 80
+}
+
+deny_address_group 111.13.235.154_deny {
+}
+
+virtual_server  group 111.13.235.154-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.154_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.154 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.154 bond1.kni;"
+
+    real_server 192.168.9.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 9 ##############################
+virtual_server_group 192.168.101.167-80-TCP_QLB {
+    192.168.101.167 80
+}
+
+deny_address_group 192.168.101.167_deny {
+}
+
+virtual_server  group 192.168.101.167-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.167_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.167 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.167 bond1.kni;"
+
+    real_server 192.168.58.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 10 ##############################
+virtual_server_group 111.13.235.244-80-TCP_QLB {
+    111.13.235.244 80
+}
+
+deny_address_group 111.13.235.244_deny {
+}
+
+virtual_server  group 111.13.235.244-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.244_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.244 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.244 bond1.kni;"
+
+    real_server 192.168.49.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 11 ##############################
+virtual_server_group 192.168.101.122-80-TCP_QLB {
+    192.168.101.122 80
+}
+
+deny_address_group 192.168.101.122_deny {
+}
+
+virtual_server  group 192.168.101.122-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.122_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.122 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.122 bond1.kni;"
+
+    real_server 192.168.59.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 12 ##############################
+virtual_server_group 192.168.102.135-80-TCP_QLB {
+    192.168.102.135 80
+}
+
+deny_address_group 192.168.102.135_deny {
+}
+
+virtual_server  group 192.168.102.135-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.135_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.135 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.135 bond1.kni;"
+
+    real_server 192.168.7.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 13 ##############################
+virtual_server_group 192.168.102.28-80-TCP_QLB {
+    192.168.102.28 80
+}
+
+deny_address_group 192.168.102.28_deny {
+}
+
+virtual_server  group 192.168.102.28-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.28_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.28 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.28 bond1.kni;"
+
+    real_server 192.168.11.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 14 ##############################
+virtual_server_group 192.168.101.139-80-TCP_QLB {
+    192.168.101.139 80
+}
+
+deny_address_group 192.168.101.139_deny {
+}
+
+virtual_server  group 192.168.101.139-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.139_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.139 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.139 bond1.kni;"
+
+    real_server 192.168.37.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 15 ##############################
+virtual_server_group 192.168.102.62-80-TCP_QLB {
+    192.168.102.62 80
+}
+
+deny_address_group 192.168.102.62_deny {
+}
+
+virtual_server  group 192.168.102.62-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.62_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.62 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.62 bond1.kni;"
+
+    real_server 192.168.15.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 16 ##############################
+virtual_server_group 192.168.101.80-80-TCP_QLB {
+    192.168.101.80 80
+}
+
+deny_address_group 192.168.101.80_deny {
+}
+
+virtual_server  group 192.168.101.80-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.80_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.80 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.80 bond1.kni;"
+
+    real_server 192.168.3.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 17 ##############################
+virtual_server_group 192.168.102.214-80-TCP_QLB {
+    192.168.102.214 80
+}
+
+deny_address_group 192.168.102.214_deny {
+}
+
+virtual_server  group 192.168.102.214-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.214_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.214 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.214 bond1.kni;"
+
+    real_server 192.168.17.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 18 ##############################
+virtual_server_group 111.13.235.85-80-TCP_QLB {
+    111.13.235.85 80
+}
+
+deny_address_group 111.13.235.85_deny {
+}
+
+virtual_server  group 111.13.235.85-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.85_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.85 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.85 bond1.kni;"
+
+    real_server 192.168.11.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 19 ##############################
+virtual_server_group 192.168.101.244-80-TCP_QLB {
+    192.168.101.244 80
+}
+
+deny_address_group 192.168.101.244_deny {
+}
+
+virtual_server  group 192.168.101.244-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.244_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.244 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.244 bond1.kni;"
+
+    real_server 192.168.39.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 20 ##############################
+virtual_server_group 111.13.235.103-80-TCP_QLB {
+    111.13.235.103 80
+}
+
+deny_address_group 111.13.235.103_deny {
+}
+
+virtual_server  group 111.13.235.103-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.103_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.103 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.103 bond1.kni;"
+
+    real_server 192.168.5.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 21 ##############################
+virtual_server_group 192.168.101.82-80-TCP_QLB {
+    192.168.101.82 80
+}
+
+deny_address_group 192.168.101.82_deny {
+}
+
+virtual_server  group 192.168.101.82-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.82_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.82 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.82 bond1.kni;"
+
+    real_server 192.168.37.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 22 ##############################
+virtual_server_group 192.168.102.5-80-TCP_QLB {
+    192.168.102.5 80
+}
+
+deny_address_group 192.168.102.5_deny {
+}
+
+virtual_server  group 192.168.102.5-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.5_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.5 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.5 bond1.kni;"
+
+    real_server 192.168.6.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 23 ##############################
+virtual_server_group 192.168.102.166-80-TCP_QLB {
+    192.168.102.166 80
+}
+
+deny_address_group 192.168.102.166_deny {
+}
+
+virtual_server  group 192.168.102.166-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.166_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.166 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.166 bond1.kni;"
+
+    real_server 192.168.38.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 24 ##############################
+virtual_server_group 192.168.102.33-80-TCP_QLB {
+    192.168.102.33 80
+}
+
+deny_address_group 192.168.102.33_deny {
+}
+
+virtual_server  group 192.168.102.33-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.33_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.33 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.33 bond1.kni;"
+
+    real_server 192.168.19.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 25 ##############################
+virtual_server_group 192.168.102.92-80-TCP_QLB {
+    192.168.102.92 80
+}
+
+deny_address_group 192.168.102.92_deny {
+}
+
+virtual_server  group 192.168.102.92-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.92_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.92 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.92 bond1.kni;"
+
+    real_server 192.168.15.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 26 ##############################
+virtual_server_group 192.168.101.191-80-TCP_QLB {
+    192.168.101.191 80
+}
+
+deny_address_group 192.168.101.191_deny {
+}
+
+virtual_server  group 192.168.101.191-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.191_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.191 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.191 bond1.kni;"
+
+    real_server 192.168.15.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 27 ##############################
+virtual_server_group 192.168.102.170-80-TCP_QLB {
+    192.168.102.170 80
+}
+
+deny_address_group 192.168.102.170_deny {
+}
+
+virtual_server  group 192.168.102.170-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.170_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.170 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.170 bond1.kni;"
+
+    real_server 192.168.6.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 28 ##############################
+virtual_server_group 192.168.102.233-80-TCP_QLB {
+    192.168.102.233 80
+}
+
+deny_address_group 192.168.102.233_deny {
+}
+
+virtual_server  group 192.168.102.233-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.233_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.233 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.233 bond1.kni;"
+
+    real_server 192.168.30.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 29 ##############################
+virtual_server_group 192.168.101.18-80-TCP_QLB {
+    192.168.101.18 80
+}
+
+deny_address_group 192.168.101.18_deny {
+}
+
+virtual_server  group 192.168.101.18-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.18_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.18 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.18 bond1.kni;"
+
+    real_server 192.168.3.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 30 ##############################
+virtual_server_group 192.168.101.42-80-TCP_QLB {
+    192.168.101.42 80
+}
+
+deny_address_group 192.168.101.42_deny {
+}
+
+virtual_server  group 192.168.101.42-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.42_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.42 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.42 bond1.kni;"
+
+    real_server 192.168.13.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 31 ##############################
+virtual_server_group 111.13.235.187-80-TCP_QLB {
+    111.13.235.187 80
+}
+
+deny_address_group 111.13.235.187_deny {
+}
+
+virtual_server  group 111.13.235.187-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.187_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.187 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.187 bond1.kni;"
+
+    real_server 192.168.13.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 32 ##############################
+virtual_server_group 192.168.101.5-80-TCP_QLB {
+    192.168.101.5 80
+}
+
+deny_address_group 192.168.101.5_deny {
+}
+
+virtual_server  group 192.168.101.5-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.5_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.5 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.5 bond1.kni;"
+
+    real_server 192.168.1.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 33 ##############################
+virtual_server_group 111.13.235.174-80-TCP_QLB {
+    111.13.235.174 80
+}
+
+deny_address_group 111.13.235.174_deny {
+}
+
+virtual_server  group 111.13.235.174-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.174_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.174 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.174 bond1.kni;"
+
+    real_server 192.168.46.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 34 ##############################
+virtual_server_group 192.168.102.110-80-TCP_QLB {
+    192.168.102.110 80
+}
+
+deny_address_group 192.168.102.110_deny {
+}
+
+virtual_server  group 192.168.102.110-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.110_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.110 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.110 bond1.kni;"
+
+    real_server 192.168.18.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 35 ##############################
+virtual_server_group 111.13.235.141-80-TCP_QLB {
+    111.13.235.141 80
+}
+
+deny_address_group 111.13.235.141_deny {
+}
+
+virtual_server  group 111.13.235.141-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.141_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.141 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.141 bond1.kni;"
+
+    real_server 192.168.41.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 36 ##############################
+virtual_server_group 192.168.101.150-80-TCP_QLB {
+    192.168.101.150 80
+}
+
+deny_address_group 192.168.101.150_deny {
+}
+
+virtual_server  group 192.168.101.150-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.150_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.150 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.150 bond1.kni;"
+
+    real_server 192.168.6.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 37 ##############################
+virtual_server_group 192.168.101.199-80-TCP_QLB {
+    192.168.101.199 80
+}
+
+deny_address_group 192.168.101.199_deny {
+}
+
+virtual_server  group 192.168.101.199-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.199_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.199 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.199 bond1.kni;"
+
+    real_server 192.168.35.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 38 ##############################
+virtual_server_group 111.13.235.130-80-TCP_QLB {
+    111.13.235.130 80
+}
+
+deny_address_group 111.13.235.130_deny {
+}
+
+virtual_server  group 111.13.235.130-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.130_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.130 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.130 bond1.kni;"
+
+    real_server 192.168.45.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 39 ##############################
+virtual_server_group 192.168.102.94-80-TCP_QLB {
+    192.168.102.94 80
+}
+
+deny_address_group 192.168.102.94_deny {
+}
+
+virtual_server  group 192.168.102.94-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.94_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.94 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.94 bond1.kni;"
+
+    real_server 192.168.14.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 40 ##############################
+virtual_server_group 192.168.102.54-80-TCP_QLB {
+    192.168.102.54 80
+}
+
+deny_address_group 192.168.102.54_deny {
+}
+
+virtual_server  group 192.168.102.54-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.54_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.54 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.54 bond1.kni;"
+
+    real_server 192.168.38.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 41 ##############################
+virtual_server_group 192.168.102.251-80-TCP_QLB {
+    192.168.102.251 80
+}
+
+deny_address_group 192.168.102.251_deny {
+}
+
+virtual_server  group 192.168.102.251-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.251_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.251 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.251 bond1.kni;"
+
+    real_server 192.168.11.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 42 ##############################
+virtual_server_group 111.13.235.220-80-TCP_QLB {
+    111.13.235.220 80
+}
+
+deny_address_group 111.13.235.220_deny {
+}
+
+virtual_server  group 111.13.235.220-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.220_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.220 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.220 bond1.kni;"
+
+    real_server 192.168.22.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 43 ##############################
+virtual_server_group 111.13.235.114-80-TCP_QLB {
+    111.13.235.114 80
+}
+
+deny_address_group 111.13.235.114_deny {
+}
+
+virtual_server  group 111.13.235.114-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.114_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.114 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.114 bond1.kni;"
+
+    real_server 192.168.29.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 44 ##############################
+virtual_server_group 192.168.102.137-80-TCP_QLB {
+    192.168.102.137 80
+}
+
+deny_address_group 192.168.102.137_deny {
+}
+
+virtual_server  group 192.168.102.137-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.137_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.137 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.137 bond1.kni;"
+
+    real_server 192.168.41.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 45 ##############################
+virtual_server_group 111.13.235.241-80-TCP_QLB {
+    111.13.235.241 80
+}
+
+deny_address_group 111.13.235.241_deny {
+}
+
+virtual_server  group 111.13.235.241-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.241_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.241 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.241 bond1.kni;"
+
+    real_server 192.168.26.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 46 ##############################
+virtual_server_group 111.13.235.89-80-TCP_QLB {
+    111.13.235.89 80
+}
+
+deny_address_group 111.13.235.89_deny {
+}
+
+virtual_server  group 111.13.235.89-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.89_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.89 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.89 bond1.kni;"
+
+    real_server 192.168.53.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 47 ##############################
+virtual_server_group 111.13.235.135-80-TCP_QLB {
+    111.13.235.135 80
+}
+
+deny_address_group 111.13.235.135_deny {
+}
+
+virtual_server  group 111.13.235.135-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.135_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.135 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.135 bond1.kni;"
+
+    real_server 192.168.31.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 48 ##############################
+virtual_server_group 192.168.102.109-80-TCP_QLB {
+    192.168.102.109 80
+}
+
+deny_address_group 192.168.102.109_deny {
+}
+
+virtual_server  group 192.168.102.109-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.109_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.109 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.109 bond1.kni;"
+
+    real_server 192.168.39.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 49 ##############################
+virtual_server_group 192.168.102.60-80-TCP_QLB {
+    192.168.102.60 80
+}
+
+deny_address_group 192.168.102.60_deny {
+}
+
+virtual_server  group 192.168.102.60-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.60_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.60 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.60 bond1.kni;"
+
+    real_server 192.168.3.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 50 ##############################
+virtual_server_group 111.13.235.225-80-TCP_QLB {
+    111.13.235.225 80
+}
+
+deny_address_group 111.13.235.225_deny {
+}
+
+virtual_server  group 111.13.235.225-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.225_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.225 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.225 bond1.kni;"
+
+    real_server 192.168.18.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 51 ##############################
+virtual_server_group 192.168.102.189-80-TCP_QLB {
+    192.168.102.189 80
+}
+
+deny_address_group 192.168.102.189_deny {
+}
+
+virtual_server  group 192.168.102.189-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.189_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.189 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.189 bond1.kni;"
+
+    real_server 192.168.27.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 52 ##############################
+virtual_server_group 192.168.101.255-80-TCP_QLB {
+    192.168.101.255 80
+}
+
+deny_address_group 192.168.101.255_deny {
+}
+
+virtual_server  group 192.168.101.255-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.255_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.255 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.255 bond1.kni;"
+
+    real_server 192.168.31.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 53 ##############################
+virtual_server_group 111.13.235.116-80-TCP_QLB {
+    111.13.235.116 80
+}
+
+deny_address_group 111.13.235.116_deny {
+}
+
+virtual_server  group 111.13.235.116-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.116_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.116 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.116 bond1.kni;"
+
+    real_server 192.168.53.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 54 ##############################
+virtual_server_group 111.13.235.101-80-TCP_QLB {
+    111.13.235.101 80
+}
+
+deny_address_group 111.13.235.101_deny {
+}
+
+virtual_server  group 111.13.235.101-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.101_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.101 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.101 bond1.kni;"
+
+    real_server 192.168.53.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 55 ##############################
+virtual_server_group 192.168.101.241-80-TCP_QLB {
+    192.168.101.241 80
+}
+
+deny_address_group 192.168.101.241_deny {
+}
+
+virtual_server  group 192.168.101.241-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.241_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.241 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.241 bond1.kni;"
+
+    real_server 192.168.34.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 56 ##############################
+virtual_server_group 192.168.101.87-80-TCP_QLB {
+    192.168.101.87 80
+}
+
+deny_address_group 192.168.101.87_deny {
+}
+
+virtual_server  group 192.168.101.87-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.87_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.87 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.87 bond1.kni;"
+
+    real_server 192.168.11.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 57 ##############################
+virtual_server_group 111.13.235.74-80-TCP_QLB {
+    111.13.235.74 80
+}
+
+deny_address_group 111.13.235.74_deny {
+}
+
+virtual_server  group 111.13.235.74-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.74_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.74 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.74 bond1.kni;"
+
+    real_server 192.168.11.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 58 ##############################
+virtual_server_group 192.168.102.15-80-TCP_QLB {
+    192.168.102.15 80
+}
+
+deny_address_group 192.168.102.15_deny {
+}
+
+virtual_server  group 192.168.102.15-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.15_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.15 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.15 bond1.kni;"
+
+    real_server 192.168.14.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 59 ##############################
+virtual_server_group 192.168.101.147-80-TCP_QLB {
+    192.168.101.147 80
+}
+
+deny_address_group 192.168.101.147_deny {
+}
+
+virtual_server  group 192.168.101.147-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.147_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.147 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.147 bond1.kni;"
+
+    real_server 192.168.19.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 60 ##############################
+virtual_server_group 192.168.101.173-80-TCP_QLB {
+    192.168.101.173 80
+}
+
+deny_address_group 192.168.101.173_deny {
+}
+
+virtual_server  group 192.168.101.173-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.173_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.173 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.173 bond1.kni;"
+
+    real_server 192.168.41.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 61 ##############################
+virtual_server_group 192.168.101.67-80-TCP_QLB {
+    192.168.101.67 80
+}
+
+deny_address_group 192.168.101.67_deny {
+}
+
+virtual_server  group 192.168.101.67-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.67_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.67 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.67 bond1.kni;"
+
+    real_server 192.168.30.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 62 ##############################
+virtual_server_group 111.13.235.173-80-TCP_QLB {
+    111.13.235.173 80
+}
+
+deny_address_group 111.13.235.173_deny {
+}
+
+virtual_server  group 111.13.235.173-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.173_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.173 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.173 bond1.kni;"
+
+    real_server 192.168.3.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 63 ##############################
+virtual_server_group 192.168.102.22-80-TCP_QLB {
+    192.168.102.22 80
+}
+
+deny_address_group 192.168.102.22_deny {
+}
+
+virtual_server  group 192.168.102.22-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.22_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.22 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.22 bond1.kni;"
+
+    real_server 192.168.23.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 64 ##############################
+virtual_server_group 192.168.102.184-80-TCP_QLB {
+    192.168.102.184 80
+}
+
+deny_address_group 192.168.102.184_deny {
+}
+
+virtual_server  group 192.168.102.184-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.184_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.184 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.184 bond1.kni;"
+
+    real_server 192.168.29.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 65 ##############################
+virtual_server_group 192.168.101.30-80-TCP_QLB {
+    192.168.101.30 80
+}
+
+deny_address_group 192.168.101.30_deny {
+}
+
+virtual_server  group 192.168.101.30-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.30_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.30 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.30 bond1.kni;"
+
+    real_server 192.168.9.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 66 ##############################
+virtual_server_group 192.168.101.111-80-TCP_QLB {
+    192.168.101.111 80
+}
+
+deny_address_group 192.168.101.111_deny {
+}
+
+virtual_server  group 192.168.101.111-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.111_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.111 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.111 bond1.kni;"
+
+    real_server 192.168.51.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 67 ##############################
+virtual_server_group 192.168.101.50-80-TCP_QLB {
+    192.168.101.50 80
+}
+
+deny_address_group 192.168.101.50_deny {
+}
+
+virtual_server  group 192.168.101.50-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.50_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.50 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.50 bond1.kni;"
+
+    real_server 192.168.27.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 68 ##############################
+virtual_server_group 192.168.102.47-80-TCP_QLB {
+    192.168.102.47 80
+}
+
+deny_address_group 192.168.102.47_deny {
+}
+
+virtual_server  group 192.168.102.47-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.47_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.47 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.47 bond1.kni;"
+
+    real_server 192.168.37.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 69 ##############################
+virtual_server_group 192.168.102.145-80-TCP_QLB {
+    192.168.102.145 80
+}
+
+deny_address_group 192.168.102.145_deny {
+}
+
+virtual_server  group 192.168.102.145-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.145_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.145 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.145 bond1.kni;"
+
+    real_server 192.168.30.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 70 ##############################
+virtual_server_group 192.168.101.141-80-TCP_QLB {
+    192.168.101.141 80
+}
+
+deny_address_group 192.168.101.141_deny {
+}
+
+virtual_server  group 192.168.101.141-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.141_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.141 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.141 bond1.kni;"
+
+    real_server 192.168.30.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 71 ##############################
+virtual_server_group 192.168.101.130-80-TCP_QLB {
+    192.168.101.130 80
+}
+
+deny_address_group 192.168.101.130_deny {
+}
+
+virtual_server  group 192.168.101.130-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.130_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.130 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.130 bond1.kni;"
+
+    real_server 192.168.6.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 72 ##############################
+virtual_server_group 192.168.102.253-80-TCP_QLB {
+    192.168.102.253 80
+}
+
+deny_address_group 192.168.102.253_deny {
+}
+
+virtual_server  group 192.168.102.253-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.253_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.253 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.253 bond1.kni;"
+
+    real_server 192.168.25.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 73 ##############################
+virtual_server_group 192.168.101.142-80-TCP_QLB {
+    192.168.101.142 80
+}
+
+deny_address_group 192.168.101.142_deny {
+}
+
+virtual_server  group 192.168.101.142-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.142_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.142 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.142 bond1.kni;"
+
+    real_server 192.168.54.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 74 ##############################
+virtual_server_group 192.168.102.77-80-TCP_QLB {
+    192.168.102.77 80
+}
+
+deny_address_group 192.168.102.77_deny {
+}
+
+virtual_server  group 192.168.102.77-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.77_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.77 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.77 bond1.kni;"
+
+    real_server 192.168.59.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 75 ##############################
+virtual_server_group 111.13.235.80-80-TCP_QLB {
+    111.13.235.80 80
+}
+
+deny_address_group 111.13.235.80_deny {
+}
+
+virtual_server  group 111.13.235.80-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.80_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.80 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.80 bond1.kni;"
+
+    real_server 192.168.43.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 76 ##############################
+virtual_server_group 192.168.102.198-80-TCP_QLB {
+    192.168.102.198 80
+}
+
+deny_address_group 192.168.102.198_deny {
+}
+
+virtual_server  group 192.168.102.198-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.198_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.198 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.198 bond1.kni;"
+
+    real_server 192.168.21.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 77 ##############################
+virtual_server_group 111.13.235.133-80-TCP_QLB {
+    111.13.235.133 80
+}
+
+deny_address_group 111.13.235.133_deny {
+}
+
+virtual_server  group 111.13.235.133-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.133_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.133 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.133 bond1.kni;"
+
+    real_server 192.168.47.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 78 ##############################
+virtual_server_group 192.168.102.7-80-TCP_QLB {
+    192.168.102.7 80
+}
+
+deny_address_group 192.168.102.7_deny {
+}
+
+virtual_server  group 192.168.102.7-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.7_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.7 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.7 bond1.kni;"
+
+    real_server 192.168.59.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 79 ##############################
+virtual_server_group 192.168.102.249-80-TCP_QLB {
+    192.168.102.249 80
+}
+
+deny_address_group 192.168.102.249_deny {
+}
+
+virtual_server  group 192.168.102.249-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.249_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.249 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.249 bond1.kni;"
+
+    real_server 192.168.11.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 80 ##############################
+virtual_server_group 192.168.101.243-80-TCP_QLB {
+    192.168.101.243 80
+}
+
+deny_address_group 192.168.101.243_deny {
+}
+
+virtual_server  group 192.168.101.243-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.243_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.243 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.243 bond1.kni;"
+
+    real_server 192.168.13.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 81 ##############################
+virtual_server_group 192.168.102.35-80-TCP_QLB {
+    192.168.102.35 80
+}
+
+deny_address_group 192.168.102.35_deny {
+}
+
+virtual_server  group 192.168.102.35-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.35_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.35 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.35 bond1.kni;"
+
+    real_server 192.168.18.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 82 ##############################
+virtual_server_group 111.13.235.204-80-TCP_QLB {
+    111.13.235.204 80
+}
+
+deny_address_group 111.13.235.204_deny {
+}
+
+virtual_server  group 111.13.235.204-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.204_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.204 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.204 bond1.kni;"
+
+    real_server 192.168.3.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 83 ##############################
+virtual_server_group 192.168.102.164-80-TCP_QLB {
+    192.168.102.164 80
+}
+
+deny_address_group 192.168.102.164_deny {
+}
+
+virtual_server  group 192.168.102.164-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.164_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.164 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.164 bond1.kni;"
+
+    real_server 192.168.34.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 84 ##############################
+virtual_server_group 111.13.235.213-80-TCP_QLB {
+    111.13.235.213 80
+}
+
+deny_address_group 111.13.235.213_deny {
+}
+
+virtual_server  group 111.13.235.213-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.213_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.213 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.213 bond1.kni;"
+
+    real_server 192.168.51.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 85 ##############################
+virtual_server_group 192.168.102.247-80-TCP_QLB {
+    192.168.102.247 80
+}
+
+deny_address_group 192.168.102.247_deny {
+}
+
+virtual_server  group 192.168.102.247-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.247_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.247 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.247 bond1.kni;"
+
+    real_server 192.168.53.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 86 ##############################
+virtual_server_group 192.168.102.9-80-TCP_QLB {
+    192.168.102.9 80
+}
+
+deny_address_group 192.168.102.9_deny {
+}
+
+virtual_server  group 192.168.102.9-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.9_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.9 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.9 bond1.kni;"
+
+    real_server 192.168.37.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 87 ##############################
+virtual_server_group 192.168.102.213-80-TCP_QLB {
+    192.168.102.213 80
+}
+
+deny_address_group 192.168.102.213_deny {
+}
+
+virtual_server  group 192.168.102.213-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.213_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.213 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.213 bond1.kni;"
+
+    real_server 192.168.29.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 88 ##############################
+virtual_server_group 192.168.102.12-80-TCP_QLB {
+    192.168.102.12 80
+}
+
+deny_address_group 192.168.102.12_deny {
+}
+
+virtual_server  group 192.168.102.12-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.12_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.12 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.12 bond1.kni;"
+
+    real_server 192.168.35.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 89 ##############################
+virtual_server_group 192.168.102.129-80-TCP_QLB {
+    192.168.102.129 80
+}
+
+deny_address_group 192.168.102.129_deny {
+}
+
+virtual_server  group 192.168.102.129-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.129_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.129 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.129 bond1.kni;"
+
+    real_server 192.168.57.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 90 ##############################
+virtual_server_group 111.13.235.211-80-TCP_QLB {
+    111.13.235.211 80
+}
+
+deny_address_group 111.13.235.211_deny {
+}
+
+virtual_server  group 111.13.235.211-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.211_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.211 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.211 bond1.kni;"
+
+    real_server 192.168.17.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 91 ##############################
+virtual_server_group 192.168.102.236-80-TCP_QLB {
+    192.168.102.236 80
+}
+
+deny_address_group 192.168.102.236_deny {
+}
+
+virtual_server  group 192.168.102.236-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.236_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.236 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.236 bond1.kni;"
+
+    real_server 192.168.23.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 92 ##############################
+virtual_server_group 192.168.102.209-80-TCP_QLB {
+    192.168.102.209 80
+}
+
+deny_address_group 192.168.102.209_deny {
+}
+
+virtual_server  group 192.168.102.209-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.209_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.209 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.209 bond1.kni;"
+
+    real_server 192.168.49.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 93 ##############################
+virtual_server_group 192.168.102.40-80-TCP_QLB {
+    192.168.102.40 80
+}
+
+deny_address_group 192.168.102.40_deny {
+}
+
+virtual_server  group 192.168.102.40-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.40_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.40 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.40 bond1.kni;"
+
+    real_server 192.168.22.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 94 ##############################
+virtual_server_group 192.168.101.65-80-TCP_QLB {
+    192.168.101.65 80
+}
+
+deny_address_group 192.168.101.65_deny {
+}
+
+virtual_server  group 192.168.101.65-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.65_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.65 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.65 bond1.kni;"
+
+    real_server 192.168.27.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 95 ##############################
+virtual_server_group 192.168.102.10-80-TCP_QLB {
+    192.168.102.10 80
+}
+
+deny_address_group 192.168.102.10_deny {
+}
+
+virtual_server  group 192.168.102.10-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.10_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.10 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.10 bond1.kni;"
+
+    real_server 192.168.11.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 96 ##############################
+virtual_server_group 192.168.101.194-80-TCP_QLB {
+    192.168.101.194 80
+}
+
+deny_address_group 192.168.101.194_deny {
+}
+
+virtual_server  group 192.168.101.194-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.194_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.194 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.194 bond1.kni;"
+
+    real_server 192.168.31.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 97 ##############################
+virtual_server_group 192.168.102.99-80-TCP_QLB {
+    192.168.102.99 80
+}
+
+deny_address_group 192.168.102.99_deny {
+}
+
+virtual_server  group 192.168.102.99-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.99_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.99 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.99 bond1.kni;"
+
+    real_server 192.168.41.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 98 ##############################
+virtual_server_group 192.168.101.19-80-TCP_QLB {
+    192.168.101.19 80
+}
+
+deny_address_group 192.168.101.19_deny {
+}
+
+virtual_server  group 192.168.101.19-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.19_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.19 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.19 bond1.kni;"
+
+    real_server 192.168.45.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 99 ##############################
+virtual_server_group 192.168.102.226-80-TCP_QLB {
+    192.168.102.226 80
+}
+
+deny_address_group 192.168.102.226_deny {
+}
+
+virtual_server  group 192.168.102.226-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.226_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.226 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.226 bond1.kni;"
+
+    real_server 192.168.46.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 100 ##############################
+virtual_server_group 192.168.102.105-80-TCP_QLB {
+    192.168.102.105 80
+}
+
+deny_address_group 192.168.102.105_deny {
+}
+
+virtual_server  group 192.168.102.105-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.105_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.105 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.105 bond1.kni;"
+
+    real_server 192.168.11.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 101 ##############################
+virtual_server_group 192.168.102.42-80-TCP_QLB {
+    192.168.102.42 80
+}
+
+deny_address_group 192.168.102.42_deny {
+}
+
+virtual_server  group 192.168.102.42-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.42_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.42 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.42 bond1.kni;"
+
+    real_server 192.168.47.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 102 ##############################
+virtual_server_group 192.168.101.113-80-TCP_QLB {
+    192.168.101.113 80
+}
+
+deny_address_group 192.168.101.113_deny {
+}
+
+virtual_server  group 192.168.101.113-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.113_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.113 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.113 bond1.kni;"
+
+    real_server 192.168.39.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 103 ##############################
+virtual_server_group 192.168.102.59-80-TCP_QLB {
+    192.168.102.59 80
+}
+
+deny_address_group 192.168.102.59_deny {
+}
+
+virtual_server  group 192.168.102.59-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.59_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.59 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.59 bond1.kni;"
+
+    real_server 192.168.35.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 104 ##############################
+virtual_server_group 192.168.101.135-80-TCP_QLB {
+    192.168.101.135 80
+}
+
+deny_address_group 192.168.101.135_deny {
+}
+
+virtual_server  group 192.168.101.135-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.135_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.135 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.135 bond1.kni;"
+
+    real_server 192.168.38.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 105 ##############################
+virtual_server_group 111.13.235.120-80-TCP_QLB {
+    111.13.235.120 80
+}
+
+deny_address_group 111.13.235.120_deny {
+}
+
+virtual_server  group 111.13.235.120-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.120_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.120 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.120 bond1.kni;"
+
+    real_server 192.168.41.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 106 ##############################
+virtual_server_group 111.13.235.223-80-TCP_QLB {
+    111.13.235.223 80
+}
+
+deny_address_group 111.13.235.223_deny {
+}
+
+virtual_server  group 111.13.235.223-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.223_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.223 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.223 bond1.kni;"
+
+    real_server 192.168.25.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 107 ##############################
+virtual_server_group 192.168.102.96-80-TCP_QLB {
+    192.168.102.96 80
+}
+
+deny_address_group 192.168.102.96_deny {
+}
+
+virtual_server  group 192.168.102.96-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.96_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.96 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.96 bond1.kni;"
+
+    real_server 192.168.51.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 108 ##############################
+virtual_server_group 111.13.235.104-80-TCP_QLB {
+    111.13.235.104 80
+}
+
+deny_address_group 111.13.235.104_deny {
+}
+
+virtual_server  group 111.13.235.104-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.104_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.104 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.104 bond1.kni;"
+
+    real_server 192.168.37.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 109 ##############################
+virtual_server_group 111.13.235.218-80-TCP_QLB {
+    111.13.235.218 80
+}
+
+deny_address_group 111.13.235.218_deny {
+}
+
+virtual_server  group 111.13.235.218-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.218_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.218 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.218 bond1.kni;"
+
+    real_server 192.168.37.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 110 ##############################
+virtual_server_group 192.168.101.81-80-TCP_QLB {
+    192.168.101.81 80
+}
+
+deny_address_group 192.168.101.81_deny {
+}
+
+virtual_server  group 192.168.101.81-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.81_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.81 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.81 bond1.kni;"
+
+    real_server 192.168.7.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 111 ##############################
+virtual_server_group 111.13.235.248-80-TCP_QLB {
+    111.13.235.248 80
+}
+
+deny_address_group 111.13.235.248_deny {
+}
+
+virtual_server  group 111.13.235.248-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.248_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.248 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.248 bond1.kni;"
+
+    real_server 192.168.10.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 112 ##############################
+virtual_server_group 192.168.102.156-80-TCP_QLB {
+    192.168.102.156 80
+}
+
+deny_address_group 192.168.102.156_deny {
+}
+
+virtual_server  group 192.168.102.156-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.156_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.156 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.156 bond1.kni;"
+
+    real_server 192.168.47.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 113 ##############################
+virtual_server_group 192.168.101.202-80-TCP_QLB {
+    192.168.101.202 80
+}
+
+deny_address_group 192.168.101.202_deny {
+}
+
+virtual_server  group 192.168.101.202-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.202_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.202 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.202 bond1.kni;"
+
+    real_server 192.168.33.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 114 ##############################
+virtual_server_group 111.13.235.206-80-TCP_QLB {
+    111.13.235.206 80
+}
+
+deny_address_group 111.13.235.206_deny {
+}
+
+virtual_server  group 111.13.235.206-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.206_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.206 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.206 bond1.kni;"
+
+    real_server 192.168.50.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 115 ##############################
+virtual_server_group 192.168.102.187-80-TCP_QLB {
+    192.168.102.187 80
+}
+
+deny_address_group 192.168.102.187_deny {
+}
+
+virtual_server  group 192.168.102.187-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.187_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.187 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.187 bond1.kni;"
+
+    real_server 192.168.26.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 116 ##############################
+virtual_server_group 192.168.101.53-80-TCP_QLB {
+    192.168.101.53 80
+}
+
+deny_address_group 192.168.101.53_deny {
+}
+
+virtual_server  group 192.168.101.53-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.53_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.53 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.53 bond1.kni;"
+
+    real_server 192.168.49.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 117 ##############################
+virtual_server_group 111.13.235.71-80-TCP_QLB {
+    111.13.235.71 80
+}
+
+deny_address_group 111.13.235.71_deny {
+}
+
+virtual_server  group 111.13.235.71-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.71_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.71 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.71 bond1.kni;"
+
+    real_server 192.168.37.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 118 ##############################
+virtual_server_group 111.13.235.102-80-TCP_QLB {
+    111.13.235.102 80
+}
+
+deny_address_group 111.13.235.102_deny {
+}
+
+virtual_server  group 111.13.235.102-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.102_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.102 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.102 bond1.kni;"
+
+    real_server 192.168.13.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 119 ##############################
+virtual_server_group 111.13.235.216-80-TCP_QLB {
+    111.13.235.216 80
+}
+
+deny_address_group 111.13.235.216_deny {
+}
+
+virtual_server  group 111.13.235.216-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.216_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.216 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.216 bond1.kni;"
+
+    real_server 192.168.19.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 120 ##############################
+virtual_server_group 192.168.101.207-80-TCP_QLB {
+    192.168.101.207 80
+}
+
+deny_address_group 192.168.101.207_deny {
+}
+
+virtual_server  group 192.168.101.207-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.207_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.207 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.207 bond1.kni;"
+
+    real_server 192.168.38.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 121 ##############################
+virtual_server_group 192.168.101.105-80-TCP_QLB {
+    192.168.101.105 80
+}
+
+deny_address_group 192.168.101.105_deny {
+}
+
+virtual_server  group 192.168.101.105-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.105_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.105 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.105 bond1.kni;"
+
+    real_server 192.168.30.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 122 ##############################
+virtual_server_group 192.168.102.36-80-TCP_QLB {
+    192.168.102.36 80
+}
+
+deny_address_group 192.168.102.36_deny {
+}
+
+virtual_server  group 192.168.102.36-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.36_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.36 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.36 bond1.kni;"
+
+    real_server 192.168.15.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 123 ##############################
+virtual_server_group 192.168.101.79-80-TCP_QLB {
+    192.168.101.79 80
+}
+
+deny_address_group 192.168.101.79_deny {
+}
+
+virtual_server  group 192.168.101.79-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.79_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.79 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.79 bond1.kni;"
+
+    real_server 192.168.22.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 124 ##############################
+virtual_server_group 192.168.101.138-80-TCP_QLB {
+    192.168.101.138 80
+}
+
+deny_address_group 192.168.101.138_deny {
+}
+
+virtual_server  group 192.168.101.138-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.138_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.138 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.138 bond1.kni;"
+
+    real_server 192.168.21.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 125 ##############################
+virtual_server_group 111.13.235.214-80-TCP_QLB {
+    111.13.235.214 80
+}
+
+deny_address_group 111.13.235.214_deny {
+}
+
+virtual_server  group 111.13.235.214-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.214_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.214 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.214 bond1.kni;"
+
+    real_server 192.168.13.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 126 ##############################
+virtual_server_group 192.168.101.24-80-TCP_QLB {
+    192.168.101.24 80
+}
+
+deny_address_group 192.168.101.24_deny {
+}
+
+virtual_server  group 192.168.101.24-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.24_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.24 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.24 bond1.kni;"
+
+    real_server 192.168.5.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 127 ##############################
+virtual_server_group 192.168.101.35-80-TCP_QLB {
+    192.168.101.35 80
+}
+
+deny_address_group 192.168.101.35_deny {
+}
+
+virtual_server  group 192.168.101.35-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.35_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.35 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.35 bond1.kni;"
+
+    real_server 192.168.17.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 128 ##############################
+virtual_server_group 192.168.102.234-80-TCP_QLB {
+    192.168.102.234 80
+}
+
+deny_address_group 192.168.102.234_deny {
+}
+
+virtual_server  group 192.168.102.234-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.234_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.234 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.234 bond1.kni;"
+
+    real_server 192.168.57.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 129 ##############################
+virtual_server_group 192.168.102.30-80-TCP_QLB {
+    192.168.102.30 80
+}
+
+deny_address_group 192.168.102.30_deny {
+}
+
+virtual_server  group 192.168.102.30-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.30_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.30 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.30 bond1.kni;"
+
+    real_server 192.168.23.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 130 ##############################
+virtual_server_group 192.168.101.200-80-TCP_QLB {
+    192.168.101.200 80
+}
+
+deny_address_group 192.168.101.200_deny {
+}
+
+virtual_server  group 192.168.101.200-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.200_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.200 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.200 bond1.kni;"
+
+    real_server 192.168.19.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 131 ##############################
+virtual_server_group 192.168.102.178-80-TCP_QLB {
+    192.168.102.178 80
+}
+
+deny_address_group 192.168.102.178_deny {
+}
+
+virtual_server  group 192.168.102.178-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.178_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.178 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.178 bond1.kni;"
+
+    real_server 192.168.25.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 132 ##############################
+virtual_server_group 192.168.101.48-80-TCP_QLB {
+    192.168.101.48 80
+}
+
+deny_address_group 192.168.101.48_deny {
+}
+
+virtual_server  group 192.168.101.48-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.48_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.48 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.48 bond1.kni;"
+
+    real_server 192.168.45.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 133 ##############################
+virtual_server_group 192.168.102.1-80-TCP_QLB {
+    192.168.102.1 80
+}
+
+deny_address_group 192.168.102.1_deny {
+}
+
+virtual_server  group 192.168.102.1-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.1_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.1 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.1 bond1.kni;"
+
+    real_server 192.168.21.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 134 ##############################
+virtual_server_group 111.13.235.82-80-TCP_QLB {
+    111.13.235.82 80
+}
+
+deny_address_group 111.13.235.82_deny {
+}
+
+virtual_server  group 111.13.235.82-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.82_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.82 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.82 bond1.kni;"
+
+    real_server 192.168.18.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 135 ##############################
+virtual_server_group 192.168.101.71-80-TCP_QLB {
+    192.168.101.71 80
+}
+
+deny_address_group 192.168.101.71_deny {
+}
+
+virtual_server  group 192.168.101.71-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.71_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.71 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.71 bond1.kni;"
+
+    real_server 192.168.27.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 136 ##############################
+virtual_server_group 111.13.235.160-80-TCP_QLB {
+    111.13.235.160 80
+}
+
+deny_address_group 111.13.235.160_deny {
+}
+
+virtual_server  group 111.13.235.160-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.160_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.160 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.160 bond1.kni;"
+
+    real_server 192.168.14.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 137 ##############################
+virtual_server_group 111.13.235.221-80-TCP_QLB {
+    111.13.235.221 80
+}
+
+deny_address_group 111.13.235.221_deny {
+}
+
+virtual_server  group 111.13.235.221-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.221_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.221 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.221 bond1.kni;"
+
+    real_server 192.168.41.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 138 ##############################
+virtual_server_group 192.168.101.158-80-TCP_QLB {
+    192.168.101.158 80
+}
+
+deny_address_group 192.168.101.158_deny {
+}
+
+virtual_server  group 192.168.101.158-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.158_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.158 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.158 bond1.kni;"
+
+    real_server 192.168.26.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 139 ##############################
+virtual_server_group 111.13.235.87-80-TCP_QLB {
+    111.13.235.87 80
+}
+
+deny_address_group 111.13.235.87_deny {
+}
+
+virtual_server  group 111.13.235.87-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.87_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.87 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.87 bond1.kni;"
+
+    real_server 192.168.9.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 140 ##############################
+virtual_server_group 111.13.235.228-80-TCP_QLB {
+    111.13.235.228 80
+}
+
+deny_address_group 111.13.235.228_deny {
+}
+
+virtual_server  group 111.13.235.228-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.228_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.228 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.228 bond1.kni;"
+
+    real_server 192.168.13.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 141 ##############################
+virtual_server_group 192.168.101.83-80-TCP_QLB {
+    192.168.101.83 80
+}
+
+deny_address_group 192.168.101.83_deny {
+}
+
+virtual_server  group 192.168.101.83-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.83_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.83 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.83 bond1.kni;"
+
+    real_server 192.168.59.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 142 ##############################
+virtual_server_group 111.13.235.73-80-TCP_QLB {
+    111.13.235.73 80
+}
+
+deny_address_group 111.13.235.73_deny {
+}
+
+virtual_server  group 111.13.235.73-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.73_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.73 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.73 bond1.kni;"
+
+    real_server 192.168.18.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 143 ##############################
+virtual_server_group 111.13.235.226-80-TCP_QLB {
+    111.13.235.226 80
+}
+
+deny_address_group 111.13.235.226_deny {
+}
+
+virtual_server  group 111.13.235.226-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.226_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.226 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.226 bond1.kni;"
+
+    real_server 192.168.55.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 144 ##############################
+virtual_server_group 192.168.102.191-80-TCP_QLB {
+    192.168.102.191 80
+}
+
+deny_address_group 192.168.102.191_deny {
+}
+
+virtual_server  group 192.168.102.191-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.191_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.191 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.191 bond1.kni;"
+
+    real_server 192.168.39.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 145 ##############################
+virtual_server_group 192.168.101.99-80-TCP_QLB {
+    192.168.101.99 80
+}
+
+deny_address_group 192.168.101.99_deny {
+}
+
+virtual_server  group 192.168.101.99-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.99_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.99 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.99 bond1.kni;"
+
+    real_server 192.168.42.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 146 ##############################
+virtual_server_group 192.168.102.27-80-TCP_QLB {
+    192.168.102.27 80
+}
+
+deny_address_group 192.168.102.27_deny {
+}
+
+virtual_server  group 192.168.102.27-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.27_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.27 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.27 bond1.kni;"
+
+    real_server 192.168.5.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 147 ##############################
+virtual_server_group 192.168.101.169-80-TCP_QLB {
+    192.168.101.169 80
+}
+
+deny_address_group 192.168.101.169_deny {
+}
+
+virtual_server  group 192.168.101.169-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.169_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.169 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.169 bond1.kni;"
+
+    real_server 192.168.49.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 148 ##############################
+virtual_server_group 192.168.102.126-80-TCP_QLB {
+    192.168.102.126 80
+}
+
+deny_address_group 192.168.102.126_deny {
+}
+
+virtual_server  group 192.168.102.126-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.126_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.126 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.126 bond1.kni;"
+
+    real_server 192.168.2.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 149 ##############################
+virtual_server_group 192.168.101.181-80-TCP_QLB {
+    192.168.101.181 80
+}
+
+deny_address_group 192.168.101.181_deny {
+}
+
+virtual_server  group 192.168.101.181-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.181_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.181 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.181 bond1.kni;"
+
+    real_server 192.168.6.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 150 ##############################
+virtual_server_group 192.168.102.44-80-TCP_QLB {
+    192.168.102.44 80
+}
+
+deny_address_group 192.168.102.44_deny {
+}
+
+virtual_server  group 192.168.102.44-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.44_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.44 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.44 bond1.kni;"
+
+    real_server 192.168.6.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 151 ##############################
+virtual_server_group 192.168.101.97-80-TCP_QLB {
+    192.168.101.97 80
+}
+
+deny_address_group 192.168.101.97_deny {
+}
+
+virtual_server  group 192.168.101.97-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.97_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.97 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.97 bond1.kni;"
+
+    real_server 192.168.27.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 152 ##############################
+virtual_server_group 192.168.101.217-80-TCP_QLB {
+    192.168.101.217 80
+}
+
+deny_address_group 192.168.101.217_deny {
+}
+
+virtual_server  group 192.168.101.217-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.217_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.217 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.217 bond1.kni;"
+
+    real_server 192.168.21.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 153 ##############################
+virtual_server_group 111.13.235.238-80-TCP_QLB {
+    111.13.235.238 80
+}
+
+deny_address_group 111.13.235.238_deny {
+}
+
+virtual_server  group 111.13.235.238-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.238_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.238 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.238 bond1.kni;"
+
+    real_server 192.168.22.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 154 ##############################
+virtual_server_group 192.168.101.54-80-TCP_QLB {
+    192.168.101.54 80
+}
+
+deny_address_group 192.168.101.54_deny {
+}
+
+virtual_server  group 192.168.101.54-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.54_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.54 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.54 bond1.kni;"
+
+    real_server 192.168.59.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 155 ##############################
+virtual_server_group 192.168.101.133-80-TCP_QLB {
+    192.168.101.133 80
+}
+
+deny_address_group 192.168.101.133_deny {
+}
+
+virtual_server  group 192.168.101.133-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.133_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.133 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.133 bond1.kni;"
+
+    real_server 192.168.13.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 156 ##############################
+virtual_server_group 192.168.102.190-80-TCP_QLB {
+    192.168.102.190 80
+}
+
+deny_address_group 192.168.102.190_deny {
+}
+
+virtual_server  group 192.168.102.190-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.190_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.190 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.190 bond1.kni;"
+
+    real_server 192.168.3.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 157 ##############################
+virtual_server_group 192.168.101.10-80-TCP_QLB {
+    192.168.101.10 80
+}
+
+deny_address_group 192.168.101.10_deny {
+}
+
+virtual_server  group 192.168.101.10-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.10_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.10 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.10 bond1.kni;"
+
+    real_server 192.168.51.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 158 ##############################
+virtual_server_group 111.13.235.185-80-TCP_QLB {
+    111.13.235.185 80
+}
+
+deny_address_group 111.13.235.185_deny {
+}
+
+virtual_server  group 111.13.235.185-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.185_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.185 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.185 bond1.kni;"
+
+    real_server 192.168.53.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 159 ##############################
+virtual_server_group 192.168.102.91-80-TCP_QLB {
+    192.168.102.91 80
+}
+
+deny_address_group 192.168.102.91_deny {
+}
+
+virtual_server  group 192.168.102.91-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.91_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.91 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.91 bond1.kni;"
+
+    real_server 192.168.59.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 160 ##############################
+virtual_server_group 111.13.235.125-80-TCP_QLB {
+    111.13.235.125 80
+}
+
+deny_address_group 111.13.235.125_deny {
+}
+
+virtual_server  group 111.13.235.125-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.125_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.125 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.125 bond1.kni;"
+
+    real_server 192.168.19.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 161 ##############################
+virtual_server_group 192.168.101.72-80-TCP_QLB {
+    192.168.101.72 80
+}
+
+deny_address_group 192.168.101.72_deny {
+}
+
+virtual_server  group 192.168.101.72-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.72_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.72 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.72 bond1.kni;"
+
+    real_server 192.168.22.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 162 ##############################
+virtual_server_group 192.168.102.210-80-TCP_QLB {
+    192.168.102.210 80
+}
+
+deny_address_group 192.168.102.210_deny {
+}
+
+virtual_server  group 192.168.102.210-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.210_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.210 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.210 bond1.kni;"
+
+    real_server 192.168.41.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 163 ##############################
+virtual_server_group 192.168.101.206-80-TCP_QLB {
+    192.168.101.206 80
+}
+
+deny_address_group 192.168.101.206_deny {
+}
+
+virtual_server  group 192.168.101.206-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.206_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.206 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.206 bond1.kni;"
+
+    real_server 192.168.14.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 164 ##############################
+virtual_server_group 192.168.102.100-80-TCP_QLB {
+    192.168.102.100 80
+}
+
+deny_address_group 192.168.102.100_deny {
+}
+
+virtual_server  group 192.168.102.100-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.100_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.100 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.100 bond1.kni;"
+
+    real_server 192.168.59.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 165 ##############################
+virtual_server_group 192.168.102.19-80-TCP_QLB {
+    192.168.102.19 80
+}
+
+deny_address_group 192.168.102.19_deny {
+}
+
+virtual_server  group 192.168.102.19-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.19_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.19 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.19 bond1.kni;"
+
+    real_server 192.168.29.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 166 ##############################
+virtual_server_group 192.168.102.117-80-TCP_QLB {
+    192.168.102.117 80
+}
+
+deny_address_group 192.168.102.117_deny {
+}
+
+virtual_server  group 192.168.102.117-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.117_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.117 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.117 bond1.kni;"
+
+    real_server 192.168.1.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 167 ##############################
+virtual_server_group 192.168.102.144-80-TCP_QLB {
+    192.168.102.144 80
+}
+
+deny_address_group 192.168.102.144_deny {
+}
+
+virtual_server  group 192.168.102.144-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.144_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.144 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.144 bond1.kni;"
+
+    real_server 192.168.35.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 168 ##############################
+virtual_server_group 192.168.101.58-80-TCP_QLB {
+    192.168.101.58 80
+}
+
+deny_address_group 192.168.101.58_deny {
+}
+
+virtual_server  group 192.168.101.58-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.58_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.58 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.58 bond1.kni;"
+
+    real_server 192.168.30.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 169 ##############################
+virtual_server_group 192.168.101.254-80-TCP_QLB {
+    192.168.101.254 80
+}
+
+deny_address_group 192.168.101.254_deny {
+}
+
+virtual_server  group 192.168.101.254-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.254_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.254 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.254 bond1.kni;"
+
+    real_server 192.168.30.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 170 ##############################
+virtual_server_group 192.168.102.153-80-TCP_QLB {
+    192.168.102.153 80
+}
+
+deny_address_group 192.168.102.153_deny {
+}
+
+virtual_server  group 192.168.102.153-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.153_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.153 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.153 bond1.kni;"
+
+    real_server 192.168.11.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 171 ##############################
+virtual_server_group 111.13.235.81-80-TCP_QLB {
+    111.13.235.81 80
+}
+
+deny_address_group 111.13.235.81_deny {
+}
+
+virtual_server  group 111.13.235.81-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.81_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.81 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.81 bond1.kni;"
+
+    real_server 192.168.19.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 172 ##############################
+virtual_server_group 111.13.235.176-80-TCP_QLB {
+    111.13.235.176 80
+}
+
+deny_address_group 111.13.235.176_deny {
+}
+
+virtual_server  group 111.13.235.176-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.176_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.176 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.176 bond1.kni;"
+
+    real_server 192.168.58.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 173 ##############################
+virtual_server_group 192.168.101.174-80-TCP_QLB {
+    192.168.101.174 80
+}
+
+deny_address_group 192.168.101.174_deny {
+}
+
+virtual_server  group 192.168.101.174-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.174_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.174 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.174 bond1.kni;"
+
+    real_server 192.168.17.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 174 ##############################
+virtual_server_group 192.168.101.68-80-TCP_QLB {
+    192.168.101.68 80
+}
+
+deny_address_group 192.168.101.68_deny {
+}
+
+virtual_server  group 192.168.101.68-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.68_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.68 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.68 bond1.kni;"
+
+    real_server 192.168.41.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 175 ##############################
+virtual_server_group 192.168.102.216-80-TCP_QLB {
+    192.168.102.216 80
+}
+
+deny_address_group 192.168.102.216_deny {
+}
+
+virtual_server  group 192.168.102.216-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.216_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.216 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.216 bond1.kni;"
+
+    real_server 192.168.10.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 176 ##############################
+virtual_server_group 192.168.101.201-80-TCP_QLB {
+    192.168.101.201 80
+}
+
+deny_address_group 192.168.101.201_deny {
+}
+
+virtual_server  group 192.168.101.201-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.201_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.201 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.201 bond1.kni;"
+
+    real_server 192.168.54.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 177 ##############################
+virtual_server_group 192.168.102.217-80-TCP_QLB {
+    192.168.102.217 80
+}
+
+deny_address_group 192.168.102.217_deny {
+}
+
+virtual_server  group 192.168.102.217-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.217_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.217 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.217 bond1.kni;"
+
+    real_server 192.168.31.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 178 ##############################
+virtual_server_group 192.168.101.196-80-TCP_QLB {
+    192.168.101.196 80
+}
+
+deny_address_group 192.168.101.196_deny {
+}
+
+virtual_server  group 192.168.101.196-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.196_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.196 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.196 bond1.kni;"
+
+    real_server 192.168.57.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 179 ##############################
+virtual_server_group 192.168.102.231-80-TCP_QLB {
+    192.168.102.231 80
+}
+
+deny_address_group 192.168.102.231_deny {
+}
+
+virtual_server  group 192.168.102.231-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.231_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.231 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.231 bond1.kni;"
+
+    real_server 192.168.34.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 180 ##############################
+virtual_server_group 111.13.235.212-80-TCP_QLB {
+    111.13.235.212 80
+}
+
+deny_address_group 111.13.235.212_deny {
+}
+
+virtual_server  group 111.13.235.212-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.212_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.212 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.212 bond1.kni;"
+
+    real_server 192.168.53.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 181 ##############################
+virtual_server_group 192.168.101.37-80-TCP_QLB {
+    192.168.101.37 80
+}
+
+deny_address_group 192.168.101.37_deny {
+}
+
+virtual_server  group 192.168.101.37-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.37_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.37 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.37 bond1.kni;"
+
+    real_server 192.168.10.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 182 ##############################
+virtual_server_group 192.168.101.186-80-TCP_QLB {
+    192.168.101.186 80
+}
+
+deny_address_group 192.168.101.186_deny {
+}
+
+virtual_server  group 192.168.101.186-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.186_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.186 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.186 bond1.kni;"
+
+    real_server 192.168.3.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 183 ##############################
+virtual_server_group 192.168.102.32-80-TCP_QLB {
+    192.168.102.32 80
+}
+
+deny_address_group 192.168.102.32_deny {
+}
+
+virtual_server  group 192.168.102.32-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.32_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.32 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.32 bond1.kni;"
+
+    real_server 192.168.26.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 184 ##############################
+virtual_server_group 192.168.101.226-80-TCP_QLB {
+    192.168.101.226 80
+}
+
+deny_address_group 192.168.101.226_deny {
+}
+
+virtual_server  group 192.168.101.226-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.226_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.226 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.226 bond1.kni;"
+
+    real_server 192.168.35.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 185 ##############################
+virtual_server_group 111.13.235.246-80-TCP_QLB {
+    111.13.235.246 80
+}
+
+deny_address_group 111.13.235.246_deny {
+}
+
+virtual_server  group 111.13.235.246-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.246_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.246 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.246 bond1.kni;"
+
+    real_server 192.168.42.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 186 ##############################
+virtual_server_group 192.168.101.109-80-TCP_QLB {
+    192.168.101.109 80
+}
+
+deny_address_group 192.168.101.109_deny {
+}
+
+virtual_server  group 192.168.101.109-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.109_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.109 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.109 bond1.kni;"
+
+    real_server 192.168.33.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 187 ##############################
+virtual_server_group 192.168.101.184-80-TCP_QLB {
+    192.168.101.184 80
+}
+
+deny_address_group 192.168.101.184_deny {
+}
+
+virtual_server  group 192.168.101.184-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.184_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.184 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.184 bond1.kni;"
+
+    real_server 192.168.42.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 188 ##############################
+virtual_server_group 192.168.102.89-80-TCP_QLB {
+    192.168.102.89 80
+}
+
+deny_address_group 192.168.102.89_deny {
+}
+
+virtual_server  group 192.168.102.89-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.89_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.89 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.89 bond1.kni;"
+
+    real_server 192.168.1.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 189 ##############################
+virtual_server_group 192.168.101.73-80-TCP_QLB {
+    192.168.101.73 80
+}
+
+deny_address_group 192.168.101.73_deny {
+}
+
+virtual_server  group 192.168.101.73-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.73_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.73 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.73 bond1.kni;"
+
+    real_server 192.168.47.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 190 ##############################
+virtual_server_group 192.168.101.128-80-TCP_QLB {
+    192.168.101.128 80
+}
+
+deny_address_group 192.168.101.128_deny {
+}
+
+virtual_server  group 192.168.101.128-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.128_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.128 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.128 bond1.kni;"
+
+    real_server 192.168.39.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 191 ##############################
+virtual_server_group 192.168.102.237-80-TCP_QLB {
+    192.168.102.237 80
+}
+
+deny_address_group 192.168.102.237_deny {
+}
+
+virtual_server  group 192.168.102.237-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.237_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.237 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.237 bond1.kni;"
+
+    real_server 192.168.11.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 192 ##############################
+virtual_server_group 111.13.235.153-80-TCP_QLB {
+    111.13.235.153 80
+}
+
+deny_address_group 111.13.235.153_deny {
+}
+
+virtual_server  group 111.13.235.153-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.153_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.153 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.153 bond1.kni;"
+
+    real_server 192.168.17.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 193 ##############################
+virtual_server_group 192.168.102.123-80-TCP_QLB {
+    192.168.102.123 80
+}
+
+deny_address_group 192.168.102.123_deny {
+}
+
+virtual_server  group 192.168.102.123-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.123_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.123 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.123 bond1.kni;"
+
+    real_server 192.168.54.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 194 ##############################
+virtual_server_group 192.168.102.46-80-TCP_QLB {
+    192.168.102.46 80
+}
+
+deny_address_group 192.168.102.46_deny {
+}
+
+virtual_server  group 192.168.102.46-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.46_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.46 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.46 bond1.kni;"
+
+    real_server 192.168.3.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 195 ##############################
+virtual_server_group 111.13.235.243-80-TCP_QLB {
+    111.13.235.243 80
+}
+
+deny_address_group 111.13.235.243_deny {
+}
+
+virtual_server  group 111.13.235.243-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.243_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.243 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.243 bond1.kni;"
+
+    real_server 192.168.6.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 196 ##############################
+virtual_server_group 192.168.101.131-80-TCP_QLB {
+    192.168.101.131 80
+}
+
+deny_address_group 192.168.101.131_deny {
+}
+
+virtual_server  group 192.168.101.131-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.131_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.131 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.131 bond1.kni;"
+
+    real_server 192.168.17.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 197 ##############################
+virtual_server_group 192.168.102.121-80-TCP_QLB {
+    192.168.102.121 80
+}
+
+deny_address_group 192.168.102.121_deny {
+}
+
+virtual_server  group 192.168.102.121-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.121_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.121 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.121 bond1.kni;"
+
+    real_server 192.168.5.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 198 ##############################
+virtual_server_group 111.13.235.127-80-TCP_QLB {
+    111.13.235.127 80
+}
+
+deny_address_group 111.13.235.127_deny {
+}
+
+virtual_server  group 111.13.235.127-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.127_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.127 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.127 bond1.kni;"
+
+    real_server 192.168.19.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 199 ##############################
+virtual_server_group 111.13.235.100-80-TCP_QLB {
+    111.13.235.100 80
+}
+
+deny_address_group 111.13.235.100_deny {
+}
+
+virtual_server  group 111.13.235.100-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.100_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.100 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.100 bond1.kni;"
+
+    real_server 192.168.41.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 200 ##############################
+virtual_server_group 192.168.102.93-80-TCP_QLB {
+    192.168.102.93 80
+}
+
+deny_address_group 192.168.102.93_deny {
+}
+
+virtual_server  group 192.168.102.93-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.93_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.93 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.93 bond1.kni;"
+
+    real_server 192.168.15.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 201 ##############################
+virtual_server_group 192.168.102.248-80-TCP_QLB {
+    192.168.102.248 80
+}
+
+deny_address_group 192.168.102.248_deny {
+}
+
+virtual_server  group 192.168.102.248-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.248_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.248 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.248 bond1.kni;"
+
+    real_server 192.168.46.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 202 ##############################
+virtual_server_group 192.168.102.6-80-TCP_QLB {
+    192.168.102.6 80
+}
+
+deny_address_group 192.168.102.6_deny {
+}
+
+virtual_server  group 192.168.102.6-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.6_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.6 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.6 bond1.kni;"
+
+    real_server 192.168.34.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 203 ##############################
+virtual_server_group 111.13.235.76-80-TCP_QLB {
+    111.13.235.76 80
+}
+
+deny_address_group 111.13.235.76_deny {
+}
+
+virtual_server  group 111.13.235.76-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.76_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.76 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.76 bond1.kni;"
+
+    real_server 192.168.33.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 204 ##############################
+virtual_server_group 111.13.235.109-80-TCP_QLB {
+    111.13.235.109 80
+}
+
+deny_address_group 111.13.235.109_deny {
+}
+
+virtual_server  group 111.13.235.109-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.109_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.109 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.109 bond1.kni;"
+
+    real_server 192.168.54.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 205 ##############################
+virtual_server_group 192.168.101.154-80-TCP_QLB {
+    192.168.101.154 80
+}
+
+deny_address_group 192.168.101.154_deny {
+}
+
+virtual_server  group 192.168.101.154-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.154_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.154 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.154 bond1.kni;"
+
+    real_server 192.168.14.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 206 ##############################
+virtual_server_group 111.13.235.175-80-TCP_QLB {
+    111.13.235.175 80
+}
+
+deny_address_group 111.13.235.175_deny {
+}
+
+virtual_server  group 111.13.235.175-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.175_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.175 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.175 bond1.kni;"
+
+    real_server 192.168.47.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 207 ##############################
+virtual_server_group 111.13.235.224-80-TCP_QLB {
+    111.13.235.224 80
+}
+
+deny_address_group 111.13.235.224_deny {
+}
+
+virtual_server  group 111.13.235.224-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.224_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.224 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.224 bond1.kni;"
+
+    real_server 192.168.30.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 208 ##############################
+virtual_server_group 192.168.101.203-80-TCP_QLB {
+    192.168.101.203 80
+}
+
+deny_address_group 192.168.101.203_deny {
+}
+
+virtual_server  group 192.168.101.203-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.203_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.203 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.203 bond1.kni;"
+
+    real_server 192.168.58.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 209 ##############################
+virtual_server_group 111.13.235.70-80-TCP_QLB {
+    111.13.235.70 80
+}
+
+deny_address_group 111.13.235.70_deny {
+}
+
+virtual_server  group 111.13.235.70-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.70_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.70 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.70 bond1.kni;"
+
+    real_server 192.168.23.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 210 ##############################
+virtual_server_group 111.13.235.210-80-TCP_QLB {
+    111.13.235.210 80
+}
+
+deny_address_group 111.13.235.210_deny {
+}
+
+virtual_server  group 111.13.235.210-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.210_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.210 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.210 bond1.kni;"
+
+    real_server 192.168.45.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 211 ##############################
+virtual_server_group 192.168.101.177-80-TCP_QLB {
+    192.168.101.177 80
+}
+
+deny_address_group 192.168.101.177_deny {
+}
+
+virtual_server  group 192.168.101.177-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.177_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.177 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.177 bond1.kni;"
+
+    real_server 192.168.27.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 212 ##############################
+virtual_server_group 192.168.102.78-80-TCP_QLB {
+    192.168.102.78 80
+}
+
+deny_address_group 192.168.102.78_deny {
+}
+
+virtual_server  group 192.168.102.78-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.78_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.78 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.78 bond1.kni;"
+
+    real_server 192.168.47.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 213 ##############################
+virtual_server_group 111.13.235.139-80-TCP_QLB {
+    111.13.235.139 80
+}
+
+deny_address_group 111.13.235.139_deny {
+}
+
+virtual_server  group 111.13.235.139-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.139_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.139 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.139 bond1.kni;"
+
+    real_server 192.168.35.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 214 ##############################
+virtual_server_group 111.13.235.177-80-TCP_QLB {
+    111.13.235.177 80
+}
+
+deny_address_group 111.13.235.177_deny {
+}
+
+virtual_server  group 111.13.235.177-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.177_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.177 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.177 bond1.kni;"
+
+    real_server 192.168.7.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 215 ##############################
+virtual_server_group 192.168.101.238-80-TCP_QLB {
+    192.168.101.238 80
+}
+
+deny_address_group 192.168.101.238_deny {
+}
+
+virtual_server  group 192.168.101.238-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.238_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.238 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.238 bond1.kni;"
+
+    real_server 192.168.33.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 216 ##############################
+virtual_server_group 111.13.235.155-80-TCP_QLB {
+    111.13.235.155 80
+}
+
+deny_address_group 111.13.235.155_deny {
+}
+
+virtual_server  group 111.13.235.155-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.155_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.155 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.155 bond1.kni;"
+
+    real_server 192.168.29.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 217 ##############################
+virtual_server_group 192.168.102.158-80-TCP_QLB {
+    192.168.102.158 80
+}
+
+deny_address_group 192.168.102.158_deny {
+}
+
+virtual_server  group 192.168.102.158-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.158_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.158 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.158 bond1.kni;"
+
+    real_server 192.168.47.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 218 ##############################
+virtual_server_group 111.13.235.131-80-TCP_QLB {
+    111.13.235.131 80
+}
+
+deny_address_group 111.13.235.131_deny {
+}
+
+virtual_server  group 111.13.235.131-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.131_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.131 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.131 bond1.kni;"
+
+    real_server 192.168.34.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 219 ##############################
+virtual_server_group 192.168.102.67-80-TCP_QLB {
+    192.168.102.67 80
+}
+
+deny_address_group 192.168.102.67_deny {
+}
+
+virtual_server  group 192.168.102.67-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.67_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.67 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.67 bond1.kni;"
+
+    real_server 192.168.39.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 220 ##############################
+virtual_server_group 192.168.102.102-80-TCP_QLB {
+    192.168.102.102 80
+}
+
+deny_address_group 192.168.102.102_deny {
+}
+
+virtual_server  group 192.168.102.102-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.102_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.102 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.102 bond1.kni;"
+
+    real_server 192.168.43.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 221 ##############################
+virtual_server_group 111.13.235.235-80-TCP_QLB {
+    111.13.235.235 80
+}
+
+deny_address_group 111.13.235.235_deny {
+}
+
+virtual_server  group 111.13.235.235-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.235_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.235 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.235 bond1.kni;"
+
+    real_server 192.168.2.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 222 ##############################
+virtual_server_group 192.168.102.115-80-TCP_QLB {
+    192.168.102.115 80
+}
+
+deny_address_group 192.168.102.115_deny {
+}
+
+virtual_server  group 192.168.102.115-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.115_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.115 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.115 bond1.kni;"
+
+    real_server 192.168.5.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 223 ##############################
+virtual_server_group 111.13.235.161-80-TCP_QLB {
+    111.13.235.161 80
+}
+
+deny_address_group 111.13.235.161_deny {
+}
+
+virtual_server  group 111.13.235.161-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.161_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.161 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.161 bond1.kni;"
+
+    real_server 192.168.13.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 224 ##############################
+virtual_server_group 192.168.102.146-80-TCP_QLB {
+    192.168.102.146 80
+}
+
+deny_address_group 192.168.102.146_deny {
+}
+
+virtual_server  group 192.168.102.146-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.146_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.146 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.146 bond1.kni;"
+
+    real_server 192.168.47.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 225 ##############################
+virtual_server_group 192.168.101.55-80-TCP_QLB {
+    192.168.101.55 80
+}
+
+deny_address_group 192.168.101.55_deny {
+}
+
+virtual_server  group 192.168.101.55-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.55_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.55 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.55 bond1.kni;"
+
+    real_server 192.168.15.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 226 ##############################
+virtual_server_group 192.168.102.151-80-TCP_QLB {
+    192.168.102.151 80
+}
+
+deny_address_group 192.168.102.151_deny {
+}
+
+virtual_server  group 192.168.102.151-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.151_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.151 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.151 bond1.kni;"
+
+    real_server 192.168.43.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 227 ##############################
+virtual_server_group 111.13.235.128-80-TCP_QLB {
+    111.13.235.128 80
+}
+
+deny_address_group 111.13.235.128_deny {
+}
+
+virtual_server  group 111.13.235.128-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.128_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.128 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.128 bond1.kni;"
+
+    real_server 192.168.43.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 228 ##############################
+virtual_server_group 111.13.235.237-80-TCP_QLB {
+    111.13.235.237 80
+}
+
+deny_address_group 111.13.235.237_deny {
+}
+
+virtual_server  group 111.13.235.237-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.237_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.237 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.237 bond1.kni;"
+
+    real_server 192.168.51.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 229 ##############################
+virtual_server_group 192.168.102.154-80-TCP_QLB {
+    192.168.102.154 80
+}
+
+deny_address_group 192.168.102.154_deny {
+}
+
+virtual_server  group 192.168.102.154-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.154_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.154 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.154 bond1.kni;"
+
+    real_server 192.168.59.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 230 ##############################
+virtual_server_group 111.13.235.136-80-TCP_QLB {
+    111.13.235.136 80
+}
+
+deny_address_group 111.13.235.136_deny {
+}
+
+virtual_server  group 111.13.235.136-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.136_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.136 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.136 bond1.kni;"
+
+    real_server 192.168.58.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 231 ##############################
+virtual_server_group 192.168.102.254-80-TCP_QLB {
+    192.168.102.254 80
+}
+
+deny_address_group 192.168.102.254_deny {
+}
+
+virtual_server  group 192.168.102.254-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.254_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.254 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.254 bond1.kni;"
+
+    real_server 192.168.54.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 232 ##############################
+virtual_server_group 192.168.102.124-80-TCP_QLB {
+    192.168.102.124 80
+}
+
+deny_address_group 192.168.102.124_deny {
+}
+
+virtual_server  group 192.168.102.124-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.124_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.124 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.124 bond1.kni;"
+
+    real_server 192.168.15.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 233 ##############################
+virtual_server_group 111.13.235.79-80-TCP_QLB {
+    111.13.235.79 80
+}
+
+deny_address_group 111.13.235.79_deny {
+}
+
+virtual_server  group 111.13.235.79-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.79_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.79 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.79 bond1.kni;"
+
+    real_server 192.168.21.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 234 ##############################
+virtual_server_group 192.168.101.153-80-TCP_QLB {
+    192.168.101.153 80
+}
+
+deny_address_group 192.168.101.153_deny {
+}
+
+virtual_server  group 192.168.101.153-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.153_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.153 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.153 bond1.kni;"
+
+    real_server 192.168.6.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 235 ##############################
+virtual_server_group 192.168.101.11-80-TCP_QLB {
+    192.168.101.11 80
+}
+
+deny_address_group 192.168.101.11_deny {
+}
+
+virtual_server  group 192.168.101.11-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.11_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.11 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.11 bond1.kni;"
+
+    real_server 192.168.9.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 236 ##############################
+virtual_server_group 111.13.235.245-80-TCP_QLB {
+    111.13.235.245 80
+}
+
+deny_address_group 111.13.235.245_deny {
+}
+
+virtual_server  group 111.13.235.245-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.245_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.245 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.245 bond1.kni;"
+
+    real_server 192.168.23.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 237 ##############################
+virtual_server_group 192.168.102.188-80-TCP_QLB {
+    192.168.102.188 80
+}
+
+deny_address_group 192.168.102.188_deny {
+}
+
+virtual_server  group 192.168.102.188-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.188_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.188 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.188 bond1.kni;"
+
+    real_server 192.168.35.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 238 ##############################
+virtual_server_group 192.168.102.202-80-TCP_QLB {
+    192.168.102.202 80
+}
+
+deny_address_group 192.168.102.202_deny {
+}
+
+virtual_server  group 192.168.102.202-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.202_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.202 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.202 bond1.kni;"
+
+    real_server 192.168.27.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 239 ##############################
+virtual_server_group 192.168.102.127-80-TCP_QLB {
+    192.168.102.127 80
+}
+
+deny_address_group 192.168.102.127_deny {
+}
+
+virtual_server  group 192.168.102.127-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.127_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.127 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.127 bond1.kni;"
+
+    real_server 192.168.2.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 240 ##############################
+virtual_server_group 111.13.235.122-80-TCP_QLB {
+    111.13.235.122 80
+}
+
+deny_address_group 111.13.235.122_deny {
+}
+
+virtual_server  group 111.13.235.122-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.122_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.122 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.122 bond1.kni;"
+
+    real_server 192.168.46.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 241 ##############################
+virtual_server_group 192.168.102.243-80-TCP_QLB {
+    192.168.102.243 80
+}
+
+deny_address_group 192.168.102.243_deny {
+}
+
+virtual_server  group 192.168.102.243-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.243_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.243 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.243 bond1.kni;"
+
+    real_server 192.168.3.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 242 ##############################
+virtual_server_group 192.168.102.112-80-TCP_QLB {
+    192.168.102.112 80
+}
+
+deny_address_group 192.168.102.112_deny {
+}
+
+virtual_server  group 192.168.102.112-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.112_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.112 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.112 bond1.kni;"
+
+    real_server 192.168.43.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 243 ##############################
+virtual_server_group 192.168.102.95-80-TCP_QLB {
+    192.168.102.95 80
+}
+
+deny_address_group 192.168.102.95_deny {
+}
+
+virtual_server  group 192.168.102.95-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.95_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.95 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.95 bond1.kni;"
+
+    real_server 192.168.29.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 244 ##############################
+virtual_server_group 192.168.101.121-80-TCP_QLB {
+    192.168.101.121 80
+}
+
+deny_address_group 192.168.101.121_deny {
+}
+
+virtual_server  group 192.168.101.121-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.121_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.121 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.121 bond1.kni;"
+
+    real_server 192.168.11.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 245 ##############################
+virtual_server_group 192.168.101.110-80-TCP_QLB {
+    192.168.101.110 80
+}
+
+deny_address_group 192.168.101.110_deny {
+}
+
+virtual_server  group 192.168.101.110-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.110_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.110 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.110 bond1.kni;"
+
+    real_server 192.168.25.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 246 ##############################
+virtual_server_group 111.13.235.83-80-TCP_QLB {
+    111.13.235.83 80
+}
+
+deny_address_group 111.13.235.83_deny {
+}
+
+virtual_server  group 111.13.235.83-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.83_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.83 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.83 bond1.kni;"
+
+    real_server 192.168.18.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 247 ##############################
+virtual_server_group 192.168.101.228-80-TCP_QLB {
+    192.168.101.228 80
+}
+
+deny_address_group 192.168.101.228_deny {
+}
+
+virtual_server  group 192.168.101.228-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.228_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.228 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.228 bond1.kni;"
+
+    real_server 192.168.53.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 248 ##############################
+virtual_server_group 192.168.102.65-80-TCP_QLB {
+    192.168.102.65 80
+}
+
+deny_address_group 192.168.102.65_deny {
+}
+
+virtual_server  group 192.168.102.65-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.65_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.65 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.65 bond1.kni;"
+
+    real_server 192.168.29.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 249 ##############################
+virtual_server_group 192.168.101.249-80-TCP_QLB {
+    192.168.101.249 80
+}
+
+deny_address_group 192.168.101.249_deny {
+}
+
+virtual_server  group 192.168.101.249-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.249_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.249 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.249 bond1.kni;"
+
+    real_server 192.168.39.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 250 ##############################
+virtual_server_group 192.168.101.189-80-TCP_QLB {
+    192.168.101.189 80
+}
+
+deny_address_group 192.168.101.189_deny {
+}
+
+virtual_server  group 192.168.101.189-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.189_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.189 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.189 bond1.kni;"
+
+    real_server 192.168.22.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 251 ##############################
+virtual_server_group 111.13.235.124-80-TCP_QLB {
+    111.13.235.124 80
+}
+
+deny_address_group 111.13.235.124_deny {
+}
+
+virtual_server  group 111.13.235.124-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.124_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.124 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.124 bond1.kni;"
+
+    real_server 192.168.47.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 252 ##############################
+virtual_server_group 111.13.235.230-80-TCP_QLB {
+    111.13.235.230 80
+}
+
+deny_address_group 111.13.235.230_deny {
+}
+
+virtual_server  group 111.13.235.230-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.230_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.230 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.230 bond1.kni;"
+
+    real_server 192.168.43.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 253 ##############################
+virtual_server_group 192.168.102.241-80-TCP_QLB {
+    192.168.102.241 80
+}
+
+deny_address_group 192.168.102.241_deny {
+}
+
+virtual_server  group 192.168.102.241-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.241_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.241 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.241 bond1.kni;"
+
+    real_server 192.168.34.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 254 ##############################
+virtual_server_group 192.168.102.29-80-TCP_QLB {
+    192.168.102.29 80
+}
+
+deny_address_group 192.168.102.29_deny {
+}
+
+virtual_server  group 192.168.102.29-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.29_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.29 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.29 bond1.kni;"
+
+    real_server 192.168.41.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 255 ##############################
+virtual_server_group 192.168.101.123-80-TCP_QLB {
+    192.168.101.123 80
+}
+
+deny_address_group 192.168.101.123_deny {
+}
+
+virtual_server  group 192.168.101.123-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.123_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.123 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.123 bond1.kni;"
+
+    real_server 192.168.47.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 256 ##############################
+virtual_server_group 192.168.102.14-80-TCP_QLB {
+    192.168.102.14 80
+}
+
+deny_address_group 192.168.102.14_deny {
+}
+
+virtual_server  group 192.168.102.14-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.14_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.14 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.14 bond1.kni;"
+
+    real_server 192.168.29.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 257 ##############################
+virtual_server_group 192.168.102.143-80-TCP_QLB {
+    192.168.102.143 80
+}
+
+deny_address_group 192.168.102.143_deny {
+}
+
+virtual_server  group 192.168.102.143-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.143_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.143 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.143 bond1.kni;"
+
+    real_server 192.168.43.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 258 ##############################
+virtual_server_group 192.168.102.255-80-TCP_QLB {
+    192.168.102.255 80
+}
+
+deny_address_group 192.168.102.255_deny {
+}
+
+virtual_server  group 192.168.102.255-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.255_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.255 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.255 bond1.kni;"
+
+    real_server 192.168.42.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 259 ##############################
+virtual_server_group 111.13.235.232-80-TCP_QLB {
+    111.13.235.232 80
+}
+
+deny_address_group 111.13.235.232_deny {
+}
+
+virtual_server  group 111.13.235.232-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.232_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.232 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.232 bond1.kni;"
+
+    real_server 192.168.37.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 260 ##############################
+virtual_server_group 111.13.235.229-80-TCP_QLB {
+    111.13.235.229 80
+}
+
+deny_address_group 111.13.235.229_deny {
+}
+
+virtual_server  group 111.13.235.229-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.229_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.229 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.229 bond1.kni;"
+
+    real_server 192.168.42.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 261 ##############################
+virtual_server_group 192.168.102.152-80-TCP_QLB {
+    192.168.102.152 80
+}
+
+deny_address_group 192.168.102.152_deny {
+}
+
+virtual_server  group 192.168.102.152-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.152_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.152 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.152 bond1.kni;"
+
+    real_server 192.168.49.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 262 ##############################
+virtual_server_group 192.168.102.235-80-TCP_QLB {
+    192.168.102.235 80
+}
+
+deny_address_group 192.168.102.235_deny {
+}
+
+virtual_server  group 192.168.102.235-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.235_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.235 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.235 bond1.kni;"
+
+    real_server 192.168.50.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 263 ##############################
+virtual_server_group 192.168.101.211-80-TCP_QLB {
+    192.168.101.211 80
+}
+
+deny_address_group 192.168.101.211_deny {
+}
+
+virtual_server  group 192.168.101.211-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.211_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.211 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.211 bond1.kni;"
+
+    real_server 192.168.37.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 264 ##############################
+virtual_server_group 192.168.101.62-80-TCP_QLB {
+    192.168.101.62 80
+}
+
+deny_address_group 192.168.101.62_deny {
+}
+
+virtual_server  group 192.168.101.62-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.62_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.62 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.62 bond1.kni;"
+
+    real_server 192.168.6.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 265 ##############################
+virtual_server_group 111.13.235.190-80-TCP_QLB {
+    111.13.235.190 80
+}
+
+deny_address_group 111.13.235.190_deny {
+}
+
+virtual_server  group 111.13.235.190-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.190_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.190 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.190 bond1.kni;"
+
+    real_server 192.168.31.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 266 ##############################
+virtual_server_group 192.168.101.98-80-TCP_QLB {
+    192.168.101.98 80
+}
+
+deny_address_group 192.168.101.98_deny {
+}
+
+virtual_server  group 192.168.101.98-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.98_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.98 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.98 bond1.kni;"
+
+    real_server 192.168.35.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 267 ##############################
+virtual_server_group 192.168.101.180-80-TCP_QLB {
+    192.168.101.180 80
+}
+
+deny_address_group 192.168.101.180_deny {
+}
+
+virtual_server  group 192.168.101.180-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.180_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.180 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.180 bond1.kni;"
+
+    real_server 192.168.47.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 268 ##############################
+virtual_server_group 192.168.101.6-80-TCP_QLB {
+    192.168.101.6 80
+}
+
+deny_address_group 192.168.101.6_deny {
+}
+
+virtual_server  group 192.168.101.6-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.6_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.6 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.6 bond1.kni;"
+
+    real_server 192.168.25.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 269 ##############################
+virtual_server_group 192.168.102.49-80-TCP_QLB {
+    192.168.102.49 80
+}
+
+deny_address_group 192.168.102.49_deny {
+}
+
+virtual_server  group 192.168.102.49-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.49_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.49 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.49 bond1.kni;"
+
+    real_server 192.168.54.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 270 ##############################
+virtual_server_group 192.168.102.63-80-TCP_QLB {
+    192.168.102.63 80
+}
+
+deny_address_group 192.168.102.63_deny {
+}
+
+virtual_server  group 192.168.102.63-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.63_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.63 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.63 bond1.kni;"
+
+    real_server 192.168.29.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 271 ##############################
+virtual_server_group 111.13.235.192-80-TCP_QLB {
+    111.13.235.192 80
+}
+
+deny_address_group 111.13.235.192_deny {
+}
+
+virtual_server  group 111.13.235.192-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.192_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.192 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.192 bond1.kni;"
+
+    real_server 192.168.47.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 272 ##############################
+virtual_server_group 192.168.101.216-80-TCP_QLB {
+    192.168.101.216 80
+}
+
+deny_address_group 192.168.101.216_deny {
+}
+
+virtual_server  group 192.168.101.216-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.216_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.216 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.216 bond1.kni;"
+
+    real_server 192.168.38.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 273 ##############################
+virtual_server_group 111.13.235.247-80-TCP_QLB {
+    111.13.235.247 80
+}
+
+deny_address_group 111.13.235.247_deny {
+}
+
+virtual_server  group 111.13.235.247-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.247_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.247 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.247 bond1.kni;"
+
+    real_server 192.168.1.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 274 ##############################
+virtual_server_group 192.168.102.239-80-TCP_QLB {
+    192.168.102.239 80
+}
+
+deny_address_group 192.168.102.239_deny {
+}
+
+virtual_server  group 192.168.102.239-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.239_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.239 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.239 bond1.kni;"
+
+    real_server 192.168.53.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 275 ##############################
+virtual_server_group 192.168.101.172-80-TCP_QLB {
+    192.168.101.172 80
+}
+
+deny_address_group 192.168.101.172_deny {
+}
+
+virtual_server  group 192.168.101.172-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.172_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.172 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.172 bond1.kni;"
+
+    real_server 192.168.38.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 276 ##############################
+virtual_server_group 192.168.102.125-80-TCP_QLB {
+    192.168.102.125 80
+}
+
+deny_address_group 192.168.102.125_deny {
+}
+
+virtual_server  group 192.168.102.125-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.125_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.125 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.125 bond1.kni;"
+
+    real_server 192.168.57.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 277 ##############################
+virtual_server_group 111.13.235.179-80-TCP_QLB {
+    111.13.235.179 80
+}
+
+deny_address_group 111.13.235.179_deny {
+}
+
+virtual_server  group 111.13.235.179-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.179_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.179 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.179 bond1.kni;"
+
+    real_server 192.168.49.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 278 ##############################
+virtual_server_group 111.13.235.199-80-TCP_QLB {
+    111.13.235.199 80
+}
+
+deny_address_group 111.13.235.199_deny {
+}
+
+virtual_server  group 111.13.235.199-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.199_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.199 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.199 bond1.kni;"
+
+    real_server 192.168.29.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 279 ##############################
+virtual_server_group 192.168.101.4-80-TCP_QLB {
+    192.168.101.4 80
+}
+
+deny_address_group 192.168.101.4_deny {
+}
+
+virtual_server  group 192.168.101.4-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.4_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.4 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.4 bond1.kni;"
+
+    real_server 192.168.10.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 280 ##############################
+virtual_server_group 111.13.235.172-80-TCP_QLB {
+    111.13.235.172 80
+}
+
+deny_address_group 111.13.235.172_deny {
+}
+
+virtual_server  group 111.13.235.172-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.172_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.172 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.172 bond1.kni;"
+
+    real_server 192.168.42.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 281 ##############################
+virtual_server_group 192.168.101.22-80-TCP_QLB {
+    192.168.101.22 80
+}
+
+deny_address_group 192.168.101.22_deny {
+}
+
+virtual_server  group 192.168.101.22-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.22_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.22 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.22 bond1.kni;"
+
+    real_server 192.168.33.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 282 ##############################
+virtual_server_group 192.168.101.101-80-TCP_QLB {
+    192.168.101.101 80
+}
+
+deny_address_group 192.168.101.101_deny {
+}
+
+virtual_server  group 192.168.101.101-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.101_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.101 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.101 bond1.kni;"
+
+    real_server 192.168.53.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 283 ##############################
+virtual_server_group 192.168.101.17-80-TCP_QLB {
+    192.168.101.17 80
+}
+
+deny_address_group 192.168.101.17_deny {
+}
+
+virtual_server  group 192.168.101.17-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.17_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.17 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.17 bond1.kni;"
+
+    real_server 192.168.49.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 284 ##############################
+virtual_server_group 111.13.235.99-80-TCP_QLB {
+    111.13.235.99 80
+}
+
+deny_address_group 111.13.235.99_deny {
+}
+
+virtual_server  group 111.13.235.99-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.99_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.99 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.99 bond1.kni;"
+
+    real_server 192.168.59.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 285 ##############################
+virtual_server_group 192.168.101.115-80-TCP_QLB {
+    192.168.101.115 80
+}
+
+deny_address_group 192.168.101.115_deny {
+}
+
+virtual_server  group 192.168.101.115-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.115_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.115 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.115 bond1.kni;"
+
+    real_server 192.168.38.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 286 ##############################
+virtual_server_group 192.168.102.244-80-TCP_QLB {
+    192.168.102.244 80
+}
+
+deny_address_group 192.168.102.244_deny {
+}
+
+virtual_server  group 192.168.102.244-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.244_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.244 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.244 bond1.kni;"
+
+    real_server 192.168.5.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 287 ##############################
+virtual_server_group 111.13.235.240-80-TCP_QLB {
+    111.13.235.240 80
+}
+
+deny_address_group 111.13.235.240_deny {
+}
+
+virtual_server  group 111.13.235.240-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.240_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.240 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.240 bond1.kni;"
+
+    real_server 192.168.10.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 288 ##############################
+virtual_server_group 111.13.235.72-80-TCP_QLB {
+    111.13.235.72 80
+}
+
+deny_address_group 111.13.235.72_deny {
+}
+
+virtual_server  group 111.13.235.72-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.72_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.72 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.72 bond1.kni;"
+
+    real_server 192.168.10.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 289 ##############################
+virtual_server_group 192.168.101.175-80-TCP_QLB {
+    192.168.101.175 80
+}
+
+deny_address_group 192.168.101.175_deny {
+}
+
+virtual_server  group 192.168.101.175-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.175_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.175 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.175 bond1.kni;"
+
+    real_server 192.168.38.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 290 ##############################
+virtual_server_group 192.168.101.14-80-TCP_QLB {
+    192.168.101.14 80
+}
+
+deny_address_group 192.168.101.14_deny {
+}
+
+virtual_server  group 192.168.101.14-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.14_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.14 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.14 bond1.kni;"
+
+    real_server 192.168.50.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 291 ##############################
+virtual_server_group 111.13.235.68-80-TCP_QLB {
+    111.13.235.68 80
+}
+
+deny_address_group 111.13.235.68_deny {
+}
+
+virtual_server  group 111.13.235.68-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.68_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.68 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.68 bond1.kni;"
+
+    real_server 192.168.37.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 292 ##############################
+virtual_server_group 192.168.101.155-80-TCP_QLB {
+    192.168.101.155 80
+}
+
+deny_address_group 192.168.101.155_deny {
+}
+
+virtual_server  group 192.168.101.155-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.155_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.155 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.155 bond1.kni;"
+
+    real_server 192.168.34.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 293 ##############################
+virtual_server_group 192.168.101.161-80-TCP_QLB {
+    192.168.101.161 80
+}
+
+deny_address_group 192.168.101.161_deny {
+}
+
+virtual_server  group 192.168.101.161-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.161_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.161 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.161 bond1.kni;"
+
+    real_server 192.168.39.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 294 ##############################
+virtual_server_group 111.13.235.157-80-TCP_QLB {
+    111.13.235.157 80
+}
+
+deny_address_group 111.13.235.157_deny {
+}
+
+virtual_server  group 111.13.235.157-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.157_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.157 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.157 bond1.kni;"
+
+    real_server 192.168.17.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 295 ##############################
+virtual_server_group 192.168.101.60-80-TCP_QLB {
+    192.168.101.60 80
+}
+
+deny_address_group 192.168.101.60_deny {
+}
+
+virtual_server  group 192.168.101.60-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.60_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.60 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.60 bond1.kni;"
+
+    real_server 192.168.50.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 296 ##############################
+virtual_server_group 192.168.101.209-80-TCP_QLB {
+    192.168.101.209 80
+}
+
+deny_address_group 192.168.101.209_deny {
+}
+
+virtual_server  group 192.168.101.209-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.209_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.209 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.209 bond1.kni;"
+
+    real_server 192.168.33.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 297 ##############################
+virtual_server_group 192.168.101.74-80-TCP_QLB {
+    192.168.101.74 80
+}
+
+deny_address_group 192.168.101.74_deny {
+}
+
+virtual_server  group 192.168.101.74-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.74_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.74 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.74 bond1.kni;"
+
+    real_server 192.168.49.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 298 ##############################
+virtual_server_group 192.168.102.139-80-TCP_QLB {
+    192.168.102.139 80
+}
+
+deny_address_group 192.168.102.139_deny {
+}
+
+virtual_server  group 192.168.102.139-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.139_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.139 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.139 bond1.kni;"
+
+    real_server 192.168.9.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 299 ##############################
+virtual_server_group 192.168.102.97-80-TCP_QLB {
+    192.168.102.97 80
+}
+
+deny_address_group 192.168.102.97_deny {
+}
+
+virtual_server  group 192.168.102.97-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.97_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.97 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.97 bond1.kni;"
+
+    real_server 192.168.45.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 300 ##############################
+virtual_server_group 111.13.235.197-80-TCP_QLB {
+    111.13.235.197 80
+}
+
+deny_address_group 111.13.235.197_deny {
+}
+
+virtual_server  group 111.13.235.197-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.197_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.197 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.197 bond1.kni;"
+
+    real_server 192.168.37.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 301 ##############################
+virtual_server_group 192.168.102.55-80-TCP_QLB {
+    192.168.102.55 80
+}
+
+deny_address_group 192.168.102.55_deny {
+}
+
+virtual_server  group 192.168.102.55-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.55_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.55 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.55 bond1.kni;"
+
+    real_server 192.168.30.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 302 ##############################
+virtual_server_group 192.168.102.175-80-TCP_QLB {
+    192.168.102.175 80
+}
+
+deny_address_group 192.168.102.175_deny {
+}
+
+virtual_server  group 192.168.102.175-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.175_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.175 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.175 bond1.kni;"
+
+    real_server 192.168.9.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 303 ##############################
+virtual_server_group 192.168.102.204-80-TCP_QLB {
+    192.168.102.204 80
+}
+
+deny_address_group 192.168.102.204_deny {
+}
+
+virtual_server  group 192.168.102.204-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.204_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.204 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.204 bond1.kni;"
+
+    real_server 192.168.31.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 304 ##############################
+virtual_server_group 192.168.101.36-80-TCP_QLB {
+    192.168.101.36 80
+}
+
+deny_address_group 192.168.101.36_deny {
+}
+
+virtual_server  group 192.168.101.36-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.36_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.36 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.36 bond1.kni;"
+
+    real_server 192.168.18.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 305 ##############################
+virtual_server_group 192.168.101.117-80-TCP_QLB {
+    192.168.101.117 80
+}
+
+deny_address_group 192.168.101.117_deny {
+}
+
+virtual_server  group 192.168.101.117-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.117_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.117 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.117 bond1.kni;"
+
+    real_server 192.168.57.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 306 ##############################
+virtual_server_group 192.168.102.108-80-TCP_QLB {
+    192.168.102.108 80
+}
+
+deny_address_group 192.168.102.108_deny {
+}
+
+virtual_server  group 192.168.102.108-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.108_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.108 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.108 bond1.kni;"
+
+    real_server 192.168.45.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 307 ##############################
+virtual_server_group 111.13.235.137-80-TCP_QLB {
+    111.13.235.137 80
+}
+
+deny_address_group 111.13.235.137_deny {
+}
+
+virtual_server  group 111.13.235.137-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.137_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.137 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.137 bond1.kni;"
+
+    real_server 192.168.42.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 308 ##############################
+virtual_server_group 192.168.101.93-80-TCP_QLB {
+    192.168.101.93 80
+}
+
+deny_address_group 192.168.101.93_deny {
+}
+
+virtual_server  group 192.168.101.93-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.93_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.93 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.93 bond1.kni;"
+
+    real_server 192.168.51.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 309 ##############################
+virtual_server_group 192.168.102.18-80-TCP_QLB {
+    192.168.102.18 80
+}
+
+deny_address_group 192.168.102.18_deny {
+}
+
+virtual_server  group 192.168.102.18-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.18_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.18 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.18 bond1.kni;"
+
+    real_server 192.168.59.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 310 ##############################
+virtual_server_group 192.168.101.240-80-TCP_QLB {
+    192.168.101.240 80
+}
+
+deny_address_group 192.168.101.240_deny {
+}
+
+virtual_server  group 192.168.101.240-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.240_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.240 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.240 bond1.kni;"
+
+    real_server 192.168.2.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 311 ##############################
+virtual_server_group 192.168.102.159-80-TCP_QLB {
+    192.168.102.159 80
+}
+
+deny_address_group 192.168.102.159_deny {
+}
+
+virtual_server  group 192.168.102.159-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.159_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.159 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.159 bond1.kni;"
+
+    real_server 192.168.53.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 312 ##############################
+virtual_server_group 111.13.235.96-80-TCP_QLB {
+    111.13.235.96 80
+}
+
+deny_address_group 111.13.235.96_deny {
+}
+
+virtual_server  group 111.13.235.96-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.96_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.96 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.96 bond1.kni;"
+
+    real_server 192.168.5.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 313 ##############################
+virtual_server_group 111.13.235.108-80-TCP_QLB {
+    111.13.235.108 80
+}
+
+deny_address_group 111.13.235.108_deny {
+}
+
+virtual_server  group 111.13.235.108-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.108_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.108 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.108 bond1.kni;"
+
+    real_server 192.168.35.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 314 ##############################
+virtual_server_group 192.168.101.39-80-TCP_QLB {
+    192.168.101.39 80
+}
+
+deny_address_group 192.168.101.39_deny {
+}
+
+virtual_server  group 192.168.101.39-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.39_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.39 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.39 bond1.kni;"
+
+    real_server 192.168.39.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 315 ##############################
+virtual_server_group 192.168.101.86-80-TCP_QLB {
+    192.168.101.86 80
+}
+
+deny_address_group 192.168.101.86_deny {
+}
+
+virtual_server  group 192.168.101.86-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.86_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.86 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.86 bond1.kni;"
+
+    real_server 192.168.1.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 316 ##############################
+virtual_server_group 192.168.101.31-80-TCP_QLB {
+    192.168.101.31 80
+}
+
+deny_address_group 192.168.101.31_deny {
+}
+
+virtual_server  group 192.168.101.31-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.31_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.31 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.31 bond1.kni;"
+
+    real_server 192.168.37.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 317 ##############################
+virtual_server_group 192.168.101.91-80-TCP_QLB {
+    192.168.101.91 80
+}
+
+deny_address_group 192.168.101.91_deny {
+}
+
+virtual_server  group 192.168.101.91-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.91_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.91 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.91 bond1.kni;"
+
+    real_server 192.168.37.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 318 ##############################
+virtual_server_group 192.168.101.242-80-TCP_QLB {
+    192.168.101.242 80
+}
+
+deny_address_group 192.168.101.242_deny {
+}
+
+virtual_server  group 192.168.101.242-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.242_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.242 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.242 bond1.kni;"
+
+    real_server 192.168.50.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 319 ##############################
+virtual_server_group 192.168.101.157-80-TCP_QLB {
+    192.168.101.157 80
+}
+
+deny_address_group 192.168.101.157_deny {
+}
+
+virtual_server  group 192.168.101.157-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.157_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.157 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.157 bond1.kni;"
+
+    real_server 192.168.41.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 320 ##############################
+virtual_server_group 192.168.101.85-80-TCP_QLB {
+    192.168.101.85 80
+}
+
+deny_address_group 192.168.101.85_deny {
+}
+
+virtual_server  group 192.168.101.85-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.85_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.85 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.85 bond1.kni;"
+
+    real_server 192.168.2.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 321 ##############################
+virtual_server_group 192.168.101.182-80-TCP_QLB {
+    192.168.101.182 80
+}
+
+deny_address_group 192.168.101.182_deny {
+}
+
+virtual_server  group 192.168.101.182-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.182_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.182 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.182 bond1.kni;"
+
+    real_server 192.168.29.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 322 ##############################
+virtual_server_group 111.13.235.78-80-TCP_QLB {
+    111.13.235.78 80
+}
+
+deny_address_group 111.13.235.78_deny {
+}
+
+virtual_server  group 111.13.235.78-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.78_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.78 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.78 bond1.kni;"
+
+    real_server 192.168.15.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 323 ##############################
+virtual_server_group 192.168.102.119-80-TCP_QLB {
+    192.168.102.119 80
+}
+
+deny_address_group 192.168.102.119_deny {
+}
+
+virtual_server  group 192.168.102.119-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.119_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.119 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.119 bond1.kni;"
+
+    real_server 192.168.10.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 324 ##############################
+virtual_server_group 111.13.235.156-80-TCP_QLB {
+    111.13.235.156 80
+}
+
+deny_address_group 111.13.235.156_deny {
+}
+
+virtual_server  group 111.13.235.156-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.156_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.156 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.156 bond1.kni;"
+
+    real_server 192.168.45.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 325 ##############################
+virtual_server_group 192.168.102.224-80-TCP_QLB {
+    192.168.102.224 80
+}
+
+deny_address_group 192.168.102.224_deny {
+}
+
+virtual_server  group 192.168.102.224-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.224_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.224 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.224 bond1.kni;"
+
+    real_server 192.168.41.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 326 ##############################
+virtual_server_group 111.13.235.126-80-TCP_QLB {
+    111.13.235.126 80
+}
+
+deny_address_group 111.13.235.126_deny {
+}
+
+virtual_server  group 111.13.235.126-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.126_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.126 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.126 bond1.kni;"
+
+    real_server 192.168.33.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 327 ##############################
+virtual_server_group 111.13.235.170-80-TCP_QLB {
+    111.13.235.170 80
+}
+
+deny_address_group 111.13.235.170_deny {
+}
+
+virtual_server  group 111.13.235.170-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.170_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.170 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.170 bond1.kni;"
+
+    real_server 192.168.18.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 328 ##############################
+virtual_server_group 192.168.101.20-80-TCP_QLB {
+    192.168.101.20 80
+}
+
+deny_address_group 192.168.101.20_deny {
+}
+
+virtual_server  group 192.168.101.20-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.20_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.20 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.20 bond1.kni;"
+
+    real_server 192.168.58.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 329 ##############################
+virtual_server_group 192.168.101.15-80-TCP_QLB {
+    192.168.101.15 80
+}
+
+deny_address_group 192.168.101.15_deny {
+}
+
+virtual_server  group 192.168.101.15-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.15_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.15 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.15 bond1.kni;"
+
+    real_server 192.168.10.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 330 ##############################
+virtual_server_group 192.168.101.143-80-TCP_QLB {
+    192.168.101.143 80
+}
+
+deny_address_group 192.168.101.143_deny {
+}
+
+virtual_server  group 192.168.101.143-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.143_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.143 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.143 bond1.kni;"
+
+    real_server 192.168.30.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 331 ##############################
+virtual_server_group 192.168.102.114-80-TCP_QLB {
+    192.168.102.114 80
+}
+
+deny_address_group 192.168.102.114_deny {
+}
+
+virtual_server  group 192.168.102.114-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.114_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.114 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.114 bond1.kni;"
+
+    real_server 192.168.3.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 332 ##############################
+virtual_server_group 111.13.235.242-80-TCP_QLB {
+    111.13.235.242 80
+}
+
+deny_address_group 111.13.235.242_deny {
+}
+
+virtual_server  group 111.13.235.242-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.242_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.242 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.242 bond1.kni;"
+
+    real_server 192.168.33.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 333 ##############################
+virtual_server_group 192.168.102.242-80-TCP_QLB {
+    192.168.102.242 80
+}
+
+deny_address_group 192.168.102.242_deny {
+}
+
+virtual_server  group 192.168.102.242-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.242_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.242 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.242 bond1.kni;"
+
+    real_server 192.168.39.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 334 ##############################
+virtual_server_group 111.13.235.195-80-TCP_QLB {
+    111.13.235.195 80
+}
+
+deny_address_group 111.13.235.195_deny {
+}
+
+virtual_server  group 111.13.235.195-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.195_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.195 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.195 bond1.kni;"
+
+    real_server 192.168.55.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 335 ##############################
+virtual_server_group 192.168.102.150-80-TCP_QLB {
+    192.168.102.150 80
+}
+
+deny_address_group 192.168.102.150_deny {
+}
+
+virtual_server  group 192.168.102.150-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.150_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.150 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.150 bond1.kni;"
+
+    real_server 192.168.51.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 336 ##############################
+virtual_server_group 192.168.101.8-80-TCP_QLB {
+    192.168.101.8 80
+}
+
+deny_address_group 192.168.101.8_deny {
+}
+
+virtual_server  group 192.168.101.8-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.8_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.8 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.8 bond1.kni;"
+
+    real_server 192.168.58.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 337 ##############################
+virtual_server_group 192.168.102.17-80-TCP_QLB {
+    192.168.102.17 80
+}
+
+deny_address_group 192.168.102.17_deny {
+}
+
+virtual_server  group 192.168.102.17-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.17_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.17 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.17 bond1.kni;"
+
+    real_server 192.168.59.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 338 ##############################
+virtual_server_group 111.13.235.107-80-TCP_QLB {
+    111.13.235.107 80
+}
+
+deny_address_group 111.13.235.107_deny {
+}
+
+virtual_server  group 111.13.235.107-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.107_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.107 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.107 bond1.kni;"
+
+    real_server 192.168.58.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 339 ##############################
+virtual_server_group 192.168.101.229-80-TCP_QLB {
+    192.168.101.229 80
+}
+
+deny_address_group 192.168.101.229_deny {
+}
+
+virtual_server  group 192.168.101.229-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.229_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.229 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.229 bond1.kni;"
+
+    real_server 192.168.58.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 340 ##############################
+virtual_server_group 111.13.235.252-80-TCP_QLB {
+    111.13.235.252 80
+}
+
+deny_address_group 111.13.235.252_deny {
+}
+
+virtual_server  group 111.13.235.252-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.252_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.252 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.252 bond1.kni;"
+
+    real_server 192.168.1.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 341 ##############################
+virtual_server_group 192.168.102.199-80-TCP_QLB {
+    192.168.102.199 80
+}
+
+deny_address_group 192.168.102.199_deny {
+}
+
+virtual_server  group 192.168.102.199-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.199_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.199 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.199 bond1.kni;"
+
+    real_server 192.168.2.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 342 ##############################
+virtual_server_group 111.13.235.236-80-TCP_QLB {
+    111.13.235.236 80
+}
+
+deny_address_group 111.13.235.236_deny {
+}
+
+virtual_server  group 111.13.235.236-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.236_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.236 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.236 bond1.kni;"
+
+    real_server 192.168.23.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 343 ##############################
+virtual_server_group 192.168.102.185-80-TCP_QLB {
+    192.168.102.185 80
+}
+
+deny_address_group 192.168.102.185_deny {
+}
+
+virtual_server  group 192.168.102.185-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.185_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.185 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.185 bond1.kni;"
+
+    real_server 192.168.58.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 344 ##############################
+virtual_server_group 192.168.101.220-80-TCP_QLB {
+    192.168.101.220 80
+}
+
+deny_address_group 192.168.101.220_deny {
+}
+
+virtual_server  group 192.168.101.220-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.220_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.220 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.220 bond1.kni;"
+
+    real_server 192.168.9.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 345 ##############################
+virtual_server_group 111.13.235.105-80-TCP_QLB {
+    111.13.235.105 80
+}
+
+deny_address_group 111.13.235.105_deny {
+}
+
+virtual_server  group 111.13.235.105-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.105_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.105 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.105 bond1.kni;"
+
+    real_server 192.168.11.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 346 ##############################
+virtual_server_group 192.168.101.78-80-TCP_QLB {
+    192.168.101.78 80
+}
+
+deny_address_group 192.168.101.78_deny {
+}
+
+virtual_server  group 192.168.101.78-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.78_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.78 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.78 bond1.kni;"
+
+    real_server 192.168.23.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 347 ##############################
+virtual_server_group 192.168.101.252-80-TCP_QLB {
+    192.168.101.252 80
+}
+
+deny_address_group 192.168.101.252_deny {
+}
+
+virtual_server  group 192.168.101.252-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.252_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.252 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.252 bond1.kni;"
+
+    real_server 192.168.13.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 348 ##############################
+virtual_server_group 192.168.102.3-80-TCP_QLB {
+    192.168.102.3 80
+}
+
+deny_address_group 192.168.102.3_deny {
+}
+
+virtual_server  group 192.168.102.3-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.3_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.3 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.3 bond1.kni;"
+
+    real_server 192.168.55.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 349 ##############################
+virtual_server_group 192.168.101.94-80-TCP_QLB {
+    192.168.101.94 80
+}
+
+deny_address_group 192.168.101.94_deny {
+}
+
+virtual_server  group 192.168.101.94-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.94_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.94 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.94 bond1.kni;"
+
+    real_server 192.168.47.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 350 ##############################
+virtual_server_group 192.168.102.205-80-TCP_QLB {
+    192.168.102.205 80
+}
+
+deny_address_group 192.168.102.205_deny {
+}
+
+virtual_server  group 192.168.102.205-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.205_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.205 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.205 bond1.kni;"
+
+    real_server 192.168.37.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 351 ##############################
+virtual_server_group 192.168.101.231-80-TCP_QLB {
+    192.168.101.231 80
+}
+
+deny_address_group 192.168.101.231_deny {
+}
+
+virtual_server  group 192.168.101.231-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.231_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.231 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.231 bond1.kni;"
+
+    real_server 192.168.13.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 352 ##############################
+virtual_server_group 192.168.102.41-80-TCP_QLB {
+    192.168.102.41 80
+}
+
+deny_address_group 192.168.102.41_deny {
+}
+
+virtual_server  group 192.168.102.41-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.41_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.41 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.41 bond1.kni;"
+
+    real_server 192.168.34.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 353 ##############################
+virtual_server_group 192.168.102.128-80-TCP_QLB {
+    192.168.102.128 80
+}
+
+deny_address_group 192.168.102.128_deny {
+}
+
+virtual_server  group 192.168.102.128-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.128_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.128 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.128 bond1.kni;"
+
+    real_server 192.168.39.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 354 ##############################
+virtual_server_group 192.168.102.98-80-TCP_QLB {
+    192.168.102.98 80
+}
+
+deny_address_group 192.168.102.98_deny {
+}
+
+virtual_server  group 192.168.102.98-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.98_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.98 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.98 bond1.kni;"
+
+    real_server 192.168.5.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 355 ##############################
+virtual_server_group 192.168.101.164-80-TCP_QLB {
+    192.168.101.164 80
+}
+
+deny_address_group 192.168.101.164_deny {
+}
+
+virtual_server  group 192.168.101.164-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.164_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.164 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.164 bond1.kni;"
+
+    real_server 192.168.6.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 356 ##############################
+virtual_server_group 192.168.101.70-80-TCP_QLB {
+    192.168.101.70 80
+}
+
+deny_address_group 192.168.101.70_deny {
+}
+
+virtual_server  group 192.168.101.70-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.70_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.70 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.70 bond1.kni;"
+
+    real_server 192.168.18.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 357 ##############################
+virtual_server_group 192.168.102.207-80-TCP_QLB {
+    192.168.102.207 80
+}
+
+deny_address_group 192.168.102.207_deny {
+}
+
+virtual_server  group 192.168.102.207-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.207_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.207 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.207 bond1.kni;"
+
+    real_server 192.168.47.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 358 ##############################
+virtual_server_group 192.168.101.27-80-TCP_QLB {
+    192.168.101.27 80
+}
+
+deny_address_group 192.168.101.27_deny {
+}
+
+virtual_server  group 192.168.101.27-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.27_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.27 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.27 bond1.kni;"
+
+    real_server 192.168.47.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 359 ##############################
+virtual_server_group 192.168.102.177-80-TCP_QLB {
+    192.168.102.177 80
+}
+
+deny_address_group 192.168.102.177_deny {
+}
+
+virtual_server  group 192.168.102.177-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.177_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.177 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.177 bond1.kni;"
+
+    real_server 192.168.33.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 360 ##############################
+virtual_server_group 192.168.101.148-80-TCP_QLB {
+    192.168.101.148 80
+}
+
+deny_address_group 192.168.101.148_deny {
+}
+
+virtual_server  group 192.168.101.148-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.148_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.148 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.148 bond1.kni;"
+
+    real_server 192.168.41.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 361 ##############################
+virtual_server_group 111.13.235.142-80-TCP_QLB {
+    111.13.235.142 80
+}
+
+deny_address_group 111.13.235.142_deny {
+}
+
+virtual_server  group 111.13.235.142-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.142_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.142 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.142 bond1.kni;"
+
+    real_server 192.168.7.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 362 ##############################
+virtual_server_group 192.168.102.45-80-TCP_QLB {
+    192.168.102.45 80
+}
+
+deny_address_group 192.168.102.45_deny {
+}
+
+virtual_server  group 192.168.102.45-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.45_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.45 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.45 bond1.kni;"
+
+    real_server 192.168.49.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 363 ##############################
+virtual_server_group 192.168.101.102-80-TCP_QLB {
+    192.168.101.102 80
+}
+
+deny_address_group 192.168.101.102_deny {
+}
+
+virtual_server  group 192.168.101.102-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.102_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.102 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.102 bond1.kni;"
+
+    real_server 192.168.31.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 364 ##############################
+virtual_server_group 192.168.101.25-80-TCP_QLB {
+    192.168.101.25 80
+}
+
+deny_address_group 192.168.101.25_deny {
+}
+
+virtual_server  group 192.168.101.25-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.25_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.25 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.25 bond1.kni;"
+
+    real_server 192.168.55.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 365 ##############################
+virtual_server_group 192.168.102.72-80-TCP_QLB {
+    192.168.102.72 80
+}
+
+deny_address_group 192.168.102.72_deny {
+}
+
+virtual_server  group 192.168.102.72-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.72_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.72 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.72 bond1.kni;"
+
+    real_server 192.168.41.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 366 ##############################
+virtual_server_group 192.168.102.172-80-TCP_QLB {
+    192.168.102.172 80
+}
+
+deny_address_group 192.168.102.172_deny {
+}
+
+virtual_server  group 192.168.102.172-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.172_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.172 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.172 bond1.kni;"
+
+    real_server 192.168.34.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 367 ##############################
+virtual_server_group 192.168.101.134-80-TCP_QLB {
+    192.168.101.134 80
+}
+
+deny_address_group 192.168.101.134_deny {
+}
+
+virtual_server  group 192.168.101.134-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.134_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.134 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.134 bond1.kni;"
+
+    real_server 192.168.33.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 368 ##############################
+virtual_server_group 192.168.101.188-80-TCP_QLB {
+    192.168.101.188 80
+}
+
+deny_address_group 192.168.101.188_deny {
+}
+
+virtual_server  group 192.168.101.188-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.188_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.188 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.188 bond1.kni;"
+
+    real_server 192.168.21.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 369 ##############################
+virtual_server_group 192.168.101.76-80-TCP_QLB {
+    192.168.101.76 80
+}
+
+deny_address_group 192.168.101.76_deny {
+}
+
+virtual_server  group 192.168.101.76-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.76_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.76 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.76 bond1.kni;"
+
+    real_server 192.168.38.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 370 ##############################
+virtual_server_group 111.13.235.239-80-TCP_QLB {
+    111.13.235.239 80
+}
+
+deny_address_group 111.13.235.239_deny {
+}
+
+virtual_server  group 111.13.235.239-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.239_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.239 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.239 bond1.kni;"
+
+    real_server 192.168.18.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 371 ##############################
+virtual_server_group 192.168.102.218-80-TCP_QLB {
+    192.168.102.218 80
+}
+
+deny_address_group 192.168.102.218_deny {
+}
+
+virtual_server  group 192.168.102.218-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.218_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.218 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.218 bond1.kni;"
+
+    real_server 192.168.9.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 372 ##############################
+virtual_server_group 192.168.102.240-80-TCP_QLB {
+    192.168.102.240 80
+}
+
+deny_address_group 192.168.102.240_deny {
+}
+
+virtual_server  group 192.168.102.240-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.240_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.240 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.240 bond1.kni;"
+
+    real_server 192.168.26.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 373 ##############################
+virtual_server_group 111.13.235.208-80-TCP_QLB {
+    111.13.235.208 80
+}
+
+deny_address_group 111.13.235.208_deny {
+}
+
+virtual_server  group 111.13.235.208-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.208_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.208 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.208 bond1.kni;"
+
+    real_server 192.168.27.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 374 ##############################
+virtual_server_group 111.13.235.84-80-TCP_QLB {
+    111.13.235.84 80
+}
+
+deny_address_group 111.13.235.84_deny {
+}
+
+virtual_server  group 111.13.235.84-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.84_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.84 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.84 bond1.kni;"
+
+    real_server 192.168.6.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 375 ##############################
+virtual_server_group 111.13.235.93-80-TCP_QLB {
+    111.13.235.93 80
+}
+
+deny_address_group 111.13.235.93_deny {
+}
+
+virtual_server  group 111.13.235.93-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.93_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.93 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.93 bond1.kni;"
+
+    real_server 192.168.45.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 376 ##############################
+virtual_server_group 192.168.101.179-80-TCP_QLB {
+    192.168.101.179 80
+}
+
+deny_address_group 192.168.101.179_deny {
+}
+
+virtual_server  group 192.168.101.179-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.179_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.179 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.179 bond1.kni;"
+
+    real_server 192.168.42.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 377 ##############################
+virtual_server_group 192.168.101.235-80-TCP_QLB {
+    192.168.101.235 80
+}
+
+deny_address_group 192.168.101.235_deny {
+}
+
+virtual_server  group 192.168.101.235-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.235_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.235 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.235 bond1.kni;"
+
+    real_server 192.168.11.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 378 ##############################
+virtual_server_group 192.168.101.250-80-TCP_QLB {
+    192.168.101.250 80
+}
+
+deny_address_group 192.168.101.250_deny {
+}
+
+virtual_server  group 192.168.101.250-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.250_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.250 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.250 bond1.kni;"
+
+    real_server 192.168.18.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 379 ##############################
+virtual_server_group 192.168.102.26-80-TCP_QLB {
+    192.168.102.26 80
+}
+
+deny_address_group 192.168.102.26_deny {
+}
+
+virtual_server  group 192.168.102.26-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.26_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.26 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.26 bond1.kni;"
+
+    real_server 192.168.21.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 380 ##############################
+virtual_server_group 111.13.235.217-80-TCP_QLB {
+    111.13.235.217 80
+}
+
+deny_address_group 111.13.235.217_deny {
+}
+
+virtual_server  group 111.13.235.217-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.217_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.217 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.217 bond1.kni;"
+
+    real_server 192.168.30.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 381 ##############################
+virtual_server_group 192.168.101.132-80-TCP_QLB {
+    192.168.101.132 80
+}
+
+deny_address_group 192.168.101.132_deny {
+}
+
+virtual_server  group 192.168.101.132-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.132_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.132 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.132 bond1.kni;"
+
+    real_server 192.168.9.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 382 ##############################
+virtual_server_group 192.168.101.32-80-TCP_QLB {
+    192.168.101.32 80
+}
+
+deny_address_group 192.168.101.32_deny {
+}
+
+virtual_server  group 192.168.101.32-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.32_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.32 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.32 bond1.kni;"
+
+    real_server 192.168.42.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 383 ##############################
+virtual_server_group 111.13.235.148-80-TCP_QLB {
+    111.13.235.148 80
+}
+
+deny_address_group 111.13.235.148_deny {
+}
+
+virtual_server  group 111.13.235.148-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.148_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.148 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.148 bond1.kni;"
+
+    real_server 192.168.42.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 384 ##############################
+virtual_server_group 192.168.102.200-80-TCP_QLB {
+    192.168.102.200 80
+}
+
+deny_address_group 192.168.102.200_deny {
+}
+
+virtual_server  group 192.168.102.200-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.200_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.200 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.200 bond1.kni;"
+
+    real_server 192.168.34.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 385 ##############################
+virtual_server_group 192.168.102.197-80-TCP_QLB {
+    192.168.102.197 80
+}
+
+deny_address_group 192.168.102.197_deny {
+}
+
+virtual_server  group 192.168.102.197-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.197_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.197 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.197 bond1.kni;"
+
+    real_server 192.168.47.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 386 ##############################
+virtual_server_group 192.168.102.43-80-TCP_QLB {
+    192.168.102.43 80
+}
+
+deny_address_group 192.168.102.43_deny {
+}
+
+virtual_server  group 192.168.102.43-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.43_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.43 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.43 bond1.kni;"
+
+    real_server 192.168.55.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 387 ##############################
+virtual_server_group 192.168.102.221-80-TCP_QLB {
+    192.168.102.221 80
+}
+
+deny_address_group 192.168.102.221_deny {
+}
+
+virtual_server  group 192.168.102.221-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.221_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.221 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.221 bond1.kni;"
+
+    real_server 192.168.55.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 388 ##############################
+virtual_server_group 111.13.235.159-80-TCP_QLB {
+    111.13.235.159 80
+}
+
+deny_address_group 111.13.235.159_deny {
+}
+
+virtual_server  group 111.13.235.159-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.159_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.159 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.159 bond1.kni;"
+
+    real_server 192.168.1.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 389 ##############################
+virtual_server_group 192.168.102.75-80-TCP_QLB {
+    192.168.102.75 80
+}
+
+deny_address_group 192.168.102.75_deny {
+}
+
+virtual_server  group 192.168.102.75-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.75_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.75 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.75 bond1.kni;"
+
+    real_server 192.168.14.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 390 ##############################
+virtual_server_group 111.13.235.193-80-TCP_QLB {
+    111.13.235.193 80
+}
+
+deny_address_group 111.13.235.193_deny {
+}
+
+virtual_server  group 111.13.235.193-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.193_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.193 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.193 bond1.kni;"
+
+    real_server 192.168.26.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 391 ##############################
+virtual_server_group 192.168.101.218-80-TCP_QLB {
+    192.168.101.218 80
+}
+
+deny_address_group 192.168.101.218_deny {
+}
+
+virtual_server  group 192.168.101.218-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.218_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.218 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.218 bond1.kni;"
+
+    real_server 192.168.38.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 392 ##############################
+virtual_server_group 192.168.101.187-80-TCP_QLB {
+    192.168.101.187 80
+}
+
+deny_address_group 192.168.101.187_deny {
+}
+
+virtual_server  group 192.168.101.187-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.187_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.187 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.187 bond1.kni;"
+
+    real_server 192.168.1.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 393 ##############################
+virtual_server_group 192.168.102.206-80-TCP_QLB {
+    192.168.102.206 80
+}
+
+deny_address_group 192.168.102.206_deny {
+}
+
+virtual_server  group 192.168.102.206-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.206_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.206 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.206 bond1.kni;"
+
+    real_server 192.168.59.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 394 ##############################
+virtual_server_group 192.168.102.86-80-TCP_QLB {
+    192.168.102.86 80
+}
+
+deny_address_group 192.168.102.86_deny {
+}
+
+virtual_server  group 192.168.102.86-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.86_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.86 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.86 bond1.kni;"
+
+    real_server 192.168.27.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 395 ##############################
+virtual_server_group 192.168.102.186-80-TCP_QLB {
+    192.168.102.186 80
+}
+
+deny_address_group 192.168.102.186_deny {
+}
+
+virtual_server  group 192.168.102.186-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.186_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.186 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.186 bond1.kni;"
+
+    real_server 192.168.41.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 396 ##############################
+virtual_server_group 192.168.102.116-80-TCP_QLB {
+    192.168.102.116 80
+}
+
+deny_address_group 192.168.102.116_deny {
+}
+
+virtual_server  group 192.168.102.116-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.116_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.116 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.116 bond1.kni;"
+
+    real_server 192.168.59.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 397 ##############################
+virtual_server_group 111.13.235.151-80-TCP_QLB {
+    111.13.235.151 80
+}
+
+deny_address_group 111.13.235.151_deny {
+}
+
+virtual_server  group 111.13.235.151-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.151_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.151 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.151 bond1.kni;"
+
+    real_server 192.168.31.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 398 ##############################
+virtual_server_group 192.168.101.100-80-TCP_QLB {
+    192.168.101.100 80
+}
+
+deny_address_group 192.168.101.100_deny {
+}
+
+virtual_server  group 192.168.101.100-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.100_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.100 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.100 bond1.kni;"
+
+    real_server 192.168.49.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 399 ##############################
+virtual_server_group 192.168.101.224-80-TCP_QLB {
+    192.168.101.224 80
+}
+
+deny_address_group 192.168.101.224_deny {
+}
+
+virtual_server  group 192.168.101.224-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.224_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.224 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.224 bond1.kni;"
+
+    real_server 192.168.50.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 400 ##############################
+virtual_server_group 192.168.102.174-80-TCP_QLB {
+    192.168.102.174 80
+}
+
+deny_address_group 192.168.102.174_deny {
+}
+
+virtual_server  group 192.168.102.174-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.174_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.174 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.174 bond1.kni;"
+
+    real_server 192.168.9.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 401 ##############################
+virtual_server_group 111.13.235.115-80-TCP_QLB {
+    111.13.235.115 80
+}
+
+deny_address_group 111.13.235.115_deny {
+}
+
+virtual_server  group 111.13.235.115-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.115_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.115 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.115 bond1.kni;"
+
+    real_server 192.168.39.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 402 ##############################
+virtual_server_group 192.168.101.92-80-TCP_QLB {
+    192.168.101.92 80
+}
+
+deny_address_group 192.168.101.92_deny {
+}
+
+virtual_server  group 192.168.101.92-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.92_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.92 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.92 bond1.kni;"
+
+    real_server 192.168.54.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 403 ##############################
+virtual_server_group 111.13.235.171-80-TCP_QLB {
+    111.13.235.171 80
+}
+
+deny_address_group 111.13.235.171_deny {
+}
+
+virtual_server  group 111.13.235.171-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.171_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.171 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.171 bond1.kni;"
+
+    real_server 192.168.6.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 404 ##############################
+virtual_server_group 111.13.235.215-80-TCP_QLB {
+    111.13.235.215 80
+}
+
+deny_address_group 111.13.235.215_deny {
+}
+
+virtual_server  group 111.13.235.215-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.215_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.215 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.215 bond1.kni;"
+
+    real_server 192.168.46.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 405 ##############################
+virtual_server_group 192.168.102.232-80-TCP_QLB {
+    192.168.102.232 80
+}
+
+deny_address_group 192.168.102.232_deny {
+}
+
+virtual_server  group 192.168.102.232-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.232_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.232 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.232 bond1.kni;"
+
+    real_server 192.168.23.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 406 ##############################
+virtual_server_group 192.168.101.230-80-TCP_QLB {
+    192.168.101.230 80
+}
+
+deny_address_group 192.168.101.230_deny {
+}
+
+virtual_server  group 192.168.101.230-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.230_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.230 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.230 bond1.kni;"
+
+    real_server 192.168.50.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 407 ##############################
+virtual_server_group 192.168.102.24-80-TCP_QLB {
+    192.168.102.24 80
+}
+
+deny_address_group 192.168.102.24_deny {
+}
+
+virtual_server  group 192.168.102.24-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.24_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.24 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.24 bond1.kni;"
+
+    real_server 192.168.10.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 408 ##############################
+virtual_server_group 192.168.102.180-80-TCP_QLB {
+    192.168.102.180 80
+}
+
+deny_address_group 192.168.102.180_deny {
+}
+
+virtual_server  group 192.168.102.180-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.180_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.180 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.180 bond1.kni;"
+
+    real_server 192.168.30.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 409 ##############################
+virtual_server_group 192.168.101.52-80-TCP_QLB {
+    192.168.101.52 80
+}
+
+deny_address_group 192.168.101.52_deny {
+}
+
+virtual_server  group 192.168.101.52-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.52_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.52 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.52 bond1.kni;"
+
+    real_server 192.168.17.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 410 ##############################
+virtual_server_group 111.13.235.207-80-TCP_QLB {
+    111.13.235.207 80
+}
+
+deny_address_group 111.13.235.207_deny {
+}
+
+virtual_server  group 111.13.235.207-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.207_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.207 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.207 bond1.kni;"
+
+    real_server 192.168.37.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 411 ##############################
+virtual_server_group 192.168.101.214-80-TCP_QLB {
+    192.168.101.214 80
+}
+
+deny_address_group 192.168.101.214_deny {
+}
+
+virtual_server  group 192.168.101.214-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.214_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.214 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.214 bond1.kni;"
+
+    real_server 192.168.50.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 412 ##############################
+virtual_server_group 111.13.235.234-80-TCP_QLB {
+    111.13.235.234 80
+}
+
+deny_address_group 111.13.235.234_deny {
+}
+
+virtual_server  group 111.13.235.234-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.234_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.234 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.234 bond1.kni;"
+
+    real_server 192.168.53.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 413 ##############################
+virtual_server_group 192.168.101.44-80-TCP_QLB {
+    192.168.101.44 80
+}
+
+deny_address_group 192.168.101.44_deny {
+}
+
+virtual_server  group 192.168.101.44-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.44_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.44 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.44 bond1.kni;"
+
+    real_server 192.168.49.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 414 ##############################
+virtual_server_group 192.168.101.127-80-TCP_QLB {
+    192.168.101.127 80
+}
+
+deny_address_group 192.168.101.127_deny {
+}
+
+virtual_server  group 192.168.101.127-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.127_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.127 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.127 bond1.kni;"
+
+    real_server 192.168.15.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 415 ##############################
+virtual_server_group 111.13.235.150-80-TCP_QLB {
+    111.13.235.150 80
+}
+
+deny_address_group 111.13.235.150_deny {
+}
+
+virtual_server  group 111.13.235.150-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.150_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.150 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.150 bond1.kni;"
+
+    real_server 192.168.33.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 416 ##############################
+virtual_server_group 192.168.102.230-80-TCP_QLB {
+    192.168.102.230 80
+}
+
+deny_address_group 192.168.102.230_deny {
+}
+
+virtual_server  group 192.168.102.230-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.230_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.230 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.230 bond1.kni;"
+
+    real_server 192.168.10.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 417 ##############################
+virtual_server_group 192.168.102.39-80-TCP_QLB {
+    192.168.102.39 80
+}
+
+deny_address_group 192.168.102.39_deny {
+}
+
+virtual_server  group 192.168.102.39-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.39_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.39 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.39 bond1.kni;"
+
+    real_server 192.168.31.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 418 ##############################
+virtual_server_group 111.13.235.147-80-TCP_QLB {
+    111.13.235.147 80
+}
+
+deny_address_group 111.13.235.147_deny {
+}
+
+virtual_server  group 111.13.235.147-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.147_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.147 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.147 bond1.kni;"
+
+    real_server 192.168.27.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 419 ##############################
+virtual_server_group 192.168.102.223-80-TCP_QLB {
+    192.168.102.223 80
+}
+
+deny_address_group 192.168.102.223_deny {
+}
+
+virtual_server  group 192.168.102.223-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.223_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.223 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.223 bond1.kni;"
+
+    real_server 192.168.47.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 420 ##############################
+virtual_server_group 192.168.101.129-80-TCP_QLB {
+    192.168.101.129 80
+}
+
+deny_address_group 192.168.101.129_deny {
+}
+
+virtual_server  group 192.168.101.129-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.129_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.129 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.129 bond1.kni;"
+
+    real_server 192.168.49.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 421 ##############################
+virtual_server_group 192.168.102.23-80-TCP_QLB {
+    192.168.102.23 80
+}
+
+deny_address_group 192.168.102.23_deny {
+}
+
+virtual_server  group 192.168.102.23-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.23_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.23 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.23 bond1.kni;"
+
+    real_server 192.168.10.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 422 ##############################
+virtual_server_group 111.13.235.98-80-TCP_QLB {
+    111.13.235.98 80
+}
+
+deny_address_group 111.13.235.98_deny {
+}
+
+virtual_server  group 111.13.235.98-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.98_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.98 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.98 bond1.kni;"
+
+    real_server 192.168.10.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 423 ##############################
+virtual_server_group 192.168.102.90-80-TCP_QLB {
+    192.168.102.90 80
+}
+
+deny_address_group 192.168.102.90_deny {
+}
+
+virtual_server  group 192.168.102.90-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.90_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.90 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.90 bond1.kni;"
+
+    real_server 192.168.45.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 424 ##############################
+virtual_server_group 192.168.102.250-80-TCP_QLB {
+    192.168.102.250 80
+}
+
+deny_address_group 192.168.102.250_deny {
+}
+
+virtual_server  group 192.168.102.250-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.250_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.250 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.250 bond1.kni;"
+
+    real_server 192.168.2.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 425 ##############################
+virtual_server_group 192.168.102.83-80-TCP_QLB {
+    192.168.102.83 80
+}
+
+deny_address_group 192.168.102.83_deny {
+}
+
+virtual_server  group 192.168.102.83-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.83_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.83 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.83 bond1.kni;"
+
+    real_server 192.168.45.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 426 ##############################
+virtual_server_group 111.13.235.169-80-TCP_QLB {
+    111.13.235.169 80
+}
+
+deny_address_group 111.13.235.169_deny {
+}
+
+virtual_server  group 111.13.235.169-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.169_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.169 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.169 bond1.kni;"
+
+    real_server 192.168.11.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 427 ##############################
+virtual_server_group 111.13.235.86-80-TCP_QLB {
+    111.13.235.86 80
+}
+
+deny_address_group 111.13.235.86_deny {
+}
+
+virtual_server  group 111.13.235.86-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.86_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.86 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.86 bond1.kni;"
+
+    real_server 192.168.6.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 428 ##############################
+virtual_server_group 111.13.235.91-80-TCP_QLB {
+    111.13.235.91 80
+}
+
+deny_address_group 111.13.235.91_deny {
+}
+
+virtual_server  group 111.13.235.91-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.91_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.91 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.91 bond1.kni;"
+
+    real_server 192.168.23.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 429 ##############################
+virtual_server_group 192.168.101.223-80-TCP_QLB {
+    192.168.101.223 80
+}
+
+deny_address_group 192.168.101.223_deny {
+}
+
+virtual_server  group 192.168.101.223-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.223_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.223 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.223 bond1.kni;"
+
+    real_server 192.168.31.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 430 ##############################
+virtual_server_group 111.13.235.75-80-TCP_QLB {
+    111.13.235.75 80
+}
+
+deny_address_group 111.13.235.75_deny {
+}
+
+virtual_server  group 111.13.235.75-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.75_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.75 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.75 bond1.kni;"
+
+    real_server 192.168.41.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 431 ##############################
+virtual_server_group 192.168.101.28-80-TCP_QLB {
+    192.168.101.28 80
+}
+
+deny_address_group 192.168.101.28_deny {
+}
+
+virtual_server  group 192.168.101.28-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.28_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.28 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.28 bond1.kni;"
+
+    real_server 192.168.51.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 432 ##############################
+virtual_server_group 192.168.101.9-80-TCP_QLB {
+    192.168.101.9 80
+}
+
+deny_address_group 192.168.101.9_deny {
+}
+
+virtual_server  group 192.168.101.9-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.9_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.9 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.9 bond1.kni;"
+
+    real_server 192.168.21.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 433 ##############################
+virtual_server_group 111.13.235.94-80-TCP_QLB {
+    111.13.235.94 80
+}
+
+deny_address_group 111.13.235.94_deny {
+}
+
+virtual_server  group 111.13.235.94-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.94_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.94 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.94 bond1.kni;"
+
+    real_server 192.168.50.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 434 ##############################
+virtual_server_group 192.168.102.25-80-TCP_QLB {
+    192.168.102.25 80
+}
+
+deny_address_group 192.168.102.25_deny {
+}
+
+virtual_server  group 192.168.102.25-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.25_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.25 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.25 bond1.kni;"
+
+    real_server 192.168.9.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 435 ##############################
+virtual_server_group 192.168.101.90-80-TCP_QLB {
+    192.168.101.90 80
+}
+
+deny_address_group 192.168.101.90_deny {
+}
+
+virtual_server  group 192.168.101.90-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.90_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.90 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.90 bond1.kni;"
+
+    real_server 192.168.38.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 436 ##############################
+virtual_server_group 111.13.235.77-80-TCP_QLB {
+    111.13.235.77 80
+}
+
+deny_address_group 111.13.235.77_deny {
+}
+
+virtual_server  group 111.13.235.77-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.77_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.77 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.77 bond1.kni;"
+
+    real_server 192.168.49.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 437 ##############################
+virtual_server_group 192.168.101.170-80-TCP_QLB {
+    192.168.101.170 80
+}
+
+deny_address_group 192.168.101.170_deny {
+}
+
+virtual_server  group 192.168.101.170-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.170_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.170 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.170 bond1.kni;"
+
+    real_server 192.168.57.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 438 ##############################
+virtual_server_group 192.168.101.118-80-TCP_QLB {
+    192.168.101.118 80
+}
+
+deny_address_group 192.168.101.118_deny {
+}
+
+virtual_server  group 192.168.101.118-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.118_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.118 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.118 bond1.kni;"
+
+    real_server 192.168.41.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 439 ##############################
+virtual_server_group 192.168.102.52-80-TCP_QLB {
+    192.168.102.52 80
+}
+
+deny_address_group 192.168.102.52_deny {
+}
+
+virtual_server  group 192.168.102.52-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.52_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.52 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.52 bond1.kni;"
+
+    real_server 192.168.19.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 440 ##############################
+virtual_server_group 192.168.101.75-80-TCP_QLB {
+    192.168.101.75 80
+}
+
+deny_address_group 192.168.101.75_deny {
+}
+
+virtual_server  group 192.168.101.75-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.75_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.75 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.75 bond1.kni;"
+
+    real_server 192.168.33.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 441 ##############################
+virtual_server_group 192.168.101.185-80-TCP_QLB {
+    192.168.101.185 80
+}
+
+deny_address_group 192.168.101.185_deny {
+}
+
+virtual_server  group 192.168.101.185-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.185_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.185 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.185 bond1.kni;"
+
+    real_server 192.168.55.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 442 ##############################
+virtual_server_group 192.168.102.103-80-TCP_QLB {
+    192.168.102.103 80
+}
+
+deny_address_group 192.168.102.103_deny {
+}
+
+virtual_server  group 192.168.102.103-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.103_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.103 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.103 bond1.kni;"
+
+    real_server 192.168.37.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 443 ##############################
+virtual_server_group 192.168.102.71-80-TCP_QLB {
+    192.168.102.71 80
+}
+
+deny_address_group 192.168.102.71_deny {
+}
+
+virtual_server  group 192.168.102.71-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.71_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.71 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.71 bond1.kni;"
+
+    real_server 192.168.50.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 444 ##############################
+virtual_server_group 192.168.102.84-80-TCP_QLB {
+    192.168.102.84 80
+}
+
+deny_address_group 192.168.102.84_deny {
+}
+
+virtual_server  group 192.168.102.84-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.84_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.84 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.84 bond1.kni;"
+
+    real_server 192.168.55.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 445 ##############################
+virtual_server_group 192.168.101.21-80-TCP_QLB {
+    192.168.101.21 80
+}
+
+deny_address_group 192.168.101.21_deny {
+}
+
+virtual_server  group 192.168.101.21-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.21_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.21 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.21 bond1.kni;"
+
+    real_server 192.168.39.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 446 ##############################
+virtual_server_group 111.13.235.158-80-TCP_QLB {
+    111.13.235.158 80
+}
+
+deny_address_group 111.13.235.158_deny {
+}
+
+virtual_server  group 111.13.235.158-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.158_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.158 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.158 bond1.kni;"
+
+    real_server 192.168.49.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 447 ##############################
+virtual_server_group 111.13.235.178-80-TCP_QLB {
+    111.13.235.178 80
+}
+
+deny_address_group 111.13.235.178_deny {
+}
+
+virtual_server  group 111.13.235.178-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.178_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.178 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.178 bond1.kni;"
+
+    real_server 192.168.33.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 448 ##############################
+virtual_server_group 192.168.102.181-80-TCP_QLB {
+    192.168.102.181 80
+}
+
+deny_address_group 192.168.102.181_deny {
+}
+
+virtual_server  group 192.168.102.181-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.181_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.181 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.181 bond1.kni;"
+
+    real_server 192.168.14.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 449 ##############################
+virtual_server_group 192.168.102.79-80-TCP_QLB {
+    192.168.102.79 80
+}
+
+deny_address_group 192.168.102.79_deny {
+}
+
+virtual_server  group 192.168.102.79-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.79_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.79 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.79 bond1.kni;"
+
+    real_server 192.168.27.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 450 ##############################
+virtual_server_group 192.168.101.137-80-TCP_QLB {
+    192.168.101.137 80
+}
+
+deny_address_group 192.168.101.137_deny {
+}
+
+virtual_server  group 192.168.101.137-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.137_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.137 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.137 bond1.kni;"
+
+    real_server 192.168.25.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 451 ##############################
+virtual_server_group 192.168.102.133-80-TCP_QLB {
+    192.168.102.133 80
+}
+
+deny_address_group 192.168.102.133_deny {
+}
+
+virtual_server  group 192.168.102.133-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.133_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.133 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.133 bond1.kni;"
+
+    real_server 192.168.37.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 452 ##############################
+virtual_server_group 192.168.102.203-80-TCP_QLB {
+    192.168.102.203 80
+}
+
+deny_address_group 192.168.102.203_deny {
+}
+
+virtual_server  group 192.168.102.203-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.203_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.203 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.203 bond1.kni;"
+
+    real_server 192.168.2.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 453 ##############################
+virtual_server_group 192.168.102.113-80-TCP_QLB {
+    192.168.102.113 80
+}
+
+deny_address_group 192.168.102.113_deny {
+}
+
+virtual_server  group 192.168.102.113-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.113_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.113 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.113 bond1.kni;"
+
+    real_server 192.168.34.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 454 ##############################
+virtual_server_group 192.168.102.162-80-TCP_QLB {
+    192.168.102.162 80
+}
+
+deny_address_group 192.168.102.162_deny {
+}
+
+virtual_server  group 192.168.102.162-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.162_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.162 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.162 bond1.kni;"
+
+    real_server 192.168.41.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 455 ##############################
+virtual_server_group 192.168.102.157-80-TCP_QLB {
+    192.168.102.157 80
+}
+
+deny_address_group 192.168.102.157_deny {
+}
+
+virtual_server  group 192.168.102.157-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.157_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.157 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.157 bond1.kni;"
+
+    real_server 192.168.51.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 456 ##############################
+virtual_server_group 192.168.101.221-80-TCP_QLB {
+    192.168.101.221 80
+}
+
+deny_address_group 192.168.101.221_deny {
+}
+
+virtual_server  group 192.168.101.221-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.221_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.221 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.221 bond1.kni;"
+
+    real_server 192.168.25.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 457 ##############################
+virtual_server_group 192.168.102.238-80-TCP_QLB {
+    192.168.102.238 80
+}
+
+deny_address_group 192.168.102.238_deny {
+}
+
+virtual_server  group 192.168.102.238-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.238_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.238 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.238 bond1.kni;"
+
+    real_server 192.168.18.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 458 ##############################
+virtual_server_group 111.13.235.92-80-TCP_QLB {
+    111.13.235.92 80
+}
+
+deny_address_group 111.13.235.92_deny {
+}
+
+virtual_server  group 111.13.235.92-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.92_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.92 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.92 bond1.kni;"
+
+    real_server 192.168.41.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 459 ##############################
+virtual_server_group 192.168.101.163-80-TCP_QLB {
+    192.168.101.163 80
+}
+
+deny_address_group 192.168.101.163_deny {
+}
+
+virtual_server  group 192.168.101.163-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.163_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.163 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.163 bond1.kni;"
+
+    real_server 192.168.18.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 460 ##############################
+virtual_server_group 192.168.101.212-80-TCP_QLB {
+    192.168.101.212 80
+}
+
+deny_address_group 192.168.101.212_deny {
+}
+
+virtual_server  group 192.168.101.212-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.212_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.212 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.212 bond1.kni;"
+
+    real_server 192.168.58.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 461 ##############################
+virtual_server_group 192.168.101.46-80-TCP_QLB {
+    192.168.101.46 80
+}
+
+deny_address_group 192.168.101.46_deny {
+}
+
+virtual_server  group 192.168.101.46-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.46_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.46 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.46 bond1.kni;"
+
+    real_server 192.168.43.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 462 ##############################
+virtual_server_group 192.168.101.33-80-TCP_QLB {
+    192.168.101.33 80
+}
+
+deny_address_group 192.168.101.33_deny {
+}
+
+virtual_server  group 192.168.101.33-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.33_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.33 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.33 bond1.kni;"
+
+    real_server 192.168.39.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 463 ##############################
+virtual_server_group 192.168.101.12-80-TCP_QLB {
+    192.168.101.12 80
+}
+
+deny_address_group 192.168.101.12_deny {
+}
+
+virtual_server  group 192.168.101.12-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.12_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.12 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.12 bond1.kni;"
+
+    real_server 192.168.2.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 464 ##############################
+virtual_server_group 111.13.235.145-80-TCP_QLB {
+    111.13.235.145 80
+}
+
+deny_address_group 111.13.235.145_deny {
+}
+
+virtual_server  group 111.13.235.145-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.145_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.145 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.145 bond1.kni;"
+
+    real_server 192.168.38.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 465 ##############################
+virtual_server_group 192.168.102.21-80-TCP_QLB {
+    192.168.102.21 80
+}
+
+deny_address_group 192.168.102.21_deny {
+}
+
+virtual_server  group 192.168.102.21-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.21_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.21 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.21 bond1.kni;"
+
+    real_server 192.168.34.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 466 ##############################
+virtual_server_group 192.168.101.239-80-TCP_QLB {
+    192.168.101.239 80
+}
+
+deny_address_group 192.168.101.239_deny {
+}
+
+virtual_server  group 192.168.101.239-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.239_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.239 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.239 bond1.kni;"
+
+    real_server 192.168.19.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 467 ##############################
+virtual_server_group 192.168.102.66-80-TCP_QLB {
+    192.168.102.66 80
+}
+
+deny_address_group 192.168.102.66_deny {
+}
+
+virtual_server  group 192.168.102.66-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.66_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.66 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.66 bond1.kni;"
+
+    real_server 192.168.34.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 468 ##############################
+virtual_server_group 111.13.235.255-80-TCP_QLB {
+    111.13.235.255 80
+}
+
+deny_address_group 111.13.235.255_deny {
+}
+
+virtual_server  group 111.13.235.255-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.255_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.255 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.255 bond1.kni;"
+
+    real_server 192.168.33.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 469 ##############################
+virtual_server_group 192.168.101.171-80-TCP_QLB {
+    192.168.101.171 80
+}
+
+deny_address_group 192.168.101.171_deny {
+}
+
+virtual_server  group 192.168.101.171-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.171_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.171 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.171 bond1.kni;"
+
+    real_server 192.168.5.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 470 ##############################
+virtual_server_group 111.13.235.121-80-TCP_QLB {
+    111.13.235.121 80
+}
+
+deny_address_group 111.13.235.121_deny {
+}
+
+virtual_server  group 111.13.235.121-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.121_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.121 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.121 bond1.kni;"
+
+    real_server 192.168.26.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 471 ##############################
+virtual_server_group 192.168.102.120-80-TCP_QLB {
+    192.168.102.120 80
+}
+
+deny_address_group 192.168.102.120_deny {
+}
+
+virtual_server  group 192.168.102.120-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.120_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.120 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.120 bond1.kni;"
+
+    real_server 192.168.21.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 472 ##############################
+virtual_server_group 192.168.102.57-80-TCP_QLB {
+    192.168.102.57 80
+}
+
+deny_address_group 192.168.102.57_deny {
+}
+
+virtual_server  group 192.168.102.57-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.57_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.57 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.57 bond1.kni;"
+
+    real_server 192.168.21.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 473 ##############################
+virtual_server_group 192.168.102.81-80-TCP_QLB {
+    192.168.102.81 80
+}
+
+deny_address_group 192.168.102.81_deny {
+}
+
+virtual_server  group 192.168.102.81-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.81_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.81 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.81 bond1.kni;"
+
+    real_server 192.168.47.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 474 ##############################
+virtual_server_group 192.168.102.252-80-TCP_QLB {
+    192.168.102.252 80
+}
+
+deny_address_group 192.168.102.252_deny {
+}
+
+virtual_server  group 192.168.102.252-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.252_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.252 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.252 bond1.kni;"
+
+    real_server 192.168.29.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 475 ##############################
+virtual_server_group 192.168.102.220-80-TCP_QLB {
+    192.168.102.220 80
+}
+
+deny_address_group 192.168.102.220_deny {
+}
+
+virtual_server  group 192.168.102.220-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.220_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.220 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.220 bond1.kni;"
+
+    real_server 192.168.34.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 476 ##############################
+virtual_server_group 111.13.235.140-80-TCP_QLB {
+    111.13.235.140 80
+}
+
+deny_address_group 111.13.235.140_deny {
+}
+
+virtual_server  group 111.13.235.140-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.140_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.140 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.140 bond1.kni;"
+
+    real_server 192.168.23.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 477 ##############################
+virtual_server_group 192.168.102.134-80-TCP_QLB {
+    192.168.102.134 80
+}
+
+deny_address_group 192.168.102.134_deny {
+}
+
+virtual_server  group 192.168.102.134-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.134_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.134 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.134 bond1.kni;"
+
+    real_server 192.168.30.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 478 ##############################
+virtual_server_group 192.168.102.73-80-TCP_QLB {
+    192.168.102.73 80
+}
+
+deny_address_group 192.168.102.73_deny {
+}
+
+virtual_server  group 192.168.102.73-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.73_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.73 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.73 bond1.kni;"
+
+    real_server 192.168.49.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 479 ##############################
+virtual_server_group 111.13.235.250-80-TCP_QLB {
+    111.13.235.250 80
+}
+
+deny_address_group 111.13.235.250_deny {
+}
+
+virtual_server  group 111.13.235.250-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.250_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.250 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.250 bond1.kni;"
+
+    real_server 192.168.19.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 480 ##############################
+virtual_server_group 192.168.101.246-80-TCP_QLB {
+    192.168.101.246 80
+}
+
+deny_address_group 192.168.101.246_deny {
+}
+
+virtual_server  group 192.168.101.246-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.246_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.246 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.246 bond1.kni;"
+
+    real_server 192.168.13.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 481 ##############################
+virtual_server_group 111.13.235.123-80-TCP_QLB {
+    111.13.235.123 80
+}
+
+deny_address_group 111.13.235.123_deny {
+}
+
+virtual_server  group 111.13.235.123-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.123_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.123 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.123 bond1.kni;"
+
+    real_server 192.168.51.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 482 ##############################
+virtual_server_group 111.13.235.112-80-TCP_QLB {
+    111.13.235.112 80
+}
+
+deny_address_group 111.13.235.112_deny {
+}
+
+virtual_server  group 111.13.235.112-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.112_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.112 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.112 bond1.kni;"
+
+    real_server 192.168.27.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 483 ##############################
+virtual_server_group 192.168.102.20-80-TCP_QLB {
+    192.168.102.20 80
+}
+
+deny_address_group 192.168.102.20_deny {
+}
+
+virtual_server  group 192.168.102.20-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.20_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.20 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.20 bond1.kni;"
+
+    real_server 192.168.5.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 484 ##############################
+virtual_server_group 192.168.101.248-80-TCP_QLB {
+    192.168.101.248 80
+}
+
+deny_address_group 192.168.101.248_deny {
+}
+
+virtual_server  group 192.168.101.248-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.248_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.248 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.248 bond1.kni;"
+
+    real_server 192.168.38.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 485 ##############################
+virtual_server_group 192.168.102.122-80-TCP_QLB {
+    192.168.102.122 80
+}
+
+deny_address_group 192.168.102.122_deny {
+}
+
+virtual_server  group 192.168.102.122-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.122_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.122 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.122 bond1.kni;"
+
+    real_server 192.168.13.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 486 ##############################
+virtual_server_group 192.168.102.192-80-TCP_QLB {
+    192.168.102.192 80
+}
+
+deny_address_group 192.168.102.192_deny {
+}
+
+virtual_server  group 192.168.102.192-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.192_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.192 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.192 bond1.kni;"
+
+    real_server 192.168.53.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 487 ##############################
+virtual_server_group 192.168.101.41-80-TCP_QLB {
+    192.168.101.41 80
+}
+
+deny_address_group 192.168.101.41_deny {
+}
+
+virtual_server  group 192.168.101.41-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.41_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.41 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.41 bond1.kni;"
+
+    real_server 192.168.35.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 488 ##############################
+virtual_server_group 192.168.101.166-80-TCP_QLB {
+    192.168.101.166 80
+}
+
+deny_address_group 192.168.101.166_deny {
+}
+
+virtual_server  group 192.168.101.166-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.166_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.166 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.166 bond1.kni;"
+
+    real_server 192.168.37.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 489 ##############################
+virtual_server_group 192.168.102.131-80-TCP_QLB {
+    192.168.102.131 80
+}
+
+deny_address_group 192.168.102.131_deny {
+}
+
+virtual_server  group 192.168.102.131-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.131_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.131 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.131 bond1.kni;"
+
+    real_server 192.168.15.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 490 ##############################
+virtual_server_group 192.168.102.179-80-TCP_QLB {
+    192.168.102.179 80
+}
+
+deny_address_group 192.168.102.179_deny {
+}
+
+virtual_server  group 192.168.102.179-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.179_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.179 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.179 bond1.kni;"
+
+    real_server 192.168.31.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 491 ##############################
+virtual_server_group 192.168.101.124-80-TCP_QLB {
+    192.168.101.124 80
+}
+
+deny_address_group 192.168.101.124_deny {
+}
+
+virtual_server  group 192.168.101.124-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.124_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.124 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.124 bond1.kni;"
+
+    real_server 192.168.42.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 492 ##############################
+virtual_server_group 192.168.101.43-80-TCP_QLB {
+    192.168.101.43 80
+}
+
+deny_address_group 192.168.101.43_deny {
+}
+
+virtual_server  group 192.168.101.43-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.43_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.43 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.43 bond1.kni;"
+
+    real_server 192.168.55.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 493 ##############################
+virtual_server_group 192.168.101.210-80-TCP_QLB {
+    192.168.101.210 80
+}
+
+deny_address_group 192.168.101.210_deny {
+}
+
+virtual_server  group 192.168.101.210-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.210_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.210 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.210 bond1.kni;"
+
+    real_server 192.168.39.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 494 ##############################
+virtual_server_group 192.168.101.152-80-TCP_QLB {
+    192.168.101.152 80
+}
+
+deny_address_group 192.168.101.152_deny {
+}
+
+virtual_server  group 192.168.101.152-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.152_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.152 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.152 bond1.kni;"
+
+    real_server 192.168.58.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 495 ##############################
+virtual_server_group 192.168.101.145-80-TCP_QLB {
+    192.168.101.145 80
+}
+
+deny_address_group 192.168.101.145_deny {
+}
+
+virtual_server  group 192.168.101.145-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.145_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.145 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.145 bond1.kni;"
+
+    real_server 192.168.31.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 496 ##############################
+virtual_server_group 192.168.101.160-80-TCP_QLB {
+    192.168.101.160 80
+}
+
+deny_address_group 192.168.101.160_deny {
+}
+
+virtual_server  group 192.168.101.160-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.160_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.160 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.160 bond1.kni;"
+
+    real_server 192.168.13.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 497 ##############################
+virtual_server_group 192.168.101.151-80-TCP_QLB {
+    192.168.101.151 80
+}
+
+deny_address_group 192.168.101.151_deny {
+}
+
+virtual_server  group 192.168.101.151-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.151_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.151 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.151 bond1.kni;"
+
+    real_server 192.168.39.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 498 ##############################
+virtual_server_group 192.168.101.219-80-TCP_QLB {
+    192.168.101.219 80
+}
+
+deny_address_group 192.168.101.219_deny {
+}
+
+virtual_server  group 192.168.101.219-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.219_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.219 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.219 bond1.kni;"
+
+    real_server 192.168.42.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 499 ##############################
+virtual_server_group 192.168.101.23-80-TCP_QLB {
+    192.168.101.23 80
+}
+
+deny_address_group 192.168.101.23_deny {
+}
+
+virtual_server  group 192.168.101.23-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.23_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.23 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.23 bond1.kni;"
+
+    real_server 192.168.3.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 500 ##############################
+virtual_server_group 192.168.102.229-80-TCP_QLB {
+    192.168.102.229 80
+}
+
+deny_address_group 192.168.102.229_deny {
+}
+
+virtual_server  group 192.168.102.229-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.229_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.229 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.229 bond1.kni;"
+
+    real_server 192.168.9.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 501 ##############################
+virtual_server_group 111.13.235.146-80-TCP_QLB {
+    111.13.235.146 80
+}
+
+deny_address_group 111.13.235.146_deny {
+}
+
+virtual_server  group 111.13.235.146-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.146_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.146 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.146 bond1.kni;"
+
+    real_server 192.168.46.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 502 ##############################
+virtual_server_group 111.13.235.231-80-TCP_QLB {
+    111.13.235.231 80
+}
+
+deny_address_group 111.13.235.231_deny {
+}
+
+virtual_server  group 111.13.235.231-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.231_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.231 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.231 bond1.kni;"
+
+    real_server 192.168.43.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 503 ##############################
+virtual_server_group 192.168.102.111-80-TCP_QLB {
+    192.168.102.111 80
+}
+
+deny_address_group 192.168.102.111_deny {
+}
+
+virtual_server  group 192.168.102.111-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.111_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.111 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.111 bond1.kni;"
+
+    real_server 192.168.23.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 504 ##############################
+virtual_server_group 111.13.235.200-80-TCP_QLB {
+    111.13.235.200 80
+}
+
+deny_address_group 111.13.235.200_deny {
+}
+
+virtual_server  group 111.13.235.200-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.200_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.200 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.200 bond1.kni;"
+
+    real_server 192.168.22.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 505 ##############################
+virtual_server_group 192.168.102.160-80-TCP_QLB {
+    192.168.102.160 80
+}
+
+deny_address_group 192.168.102.160_deny {
+}
+
+virtual_server  group 192.168.102.160-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.160_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.160 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.160 bond1.kni;"
+
+    real_server 192.168.58.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 506 ##############################
+virtual_server_group 111.13.235.168-80-TCP_QLB {
+    111.13.235.168 80
+}
+
+deny_address_group 111.13.235.168_deny {
+}
+
+virtual_server  group 111.13.235.168-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.168_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.168 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.168 bond1.kni;"
+
+    real_server 192.168.30.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 507 ##############################
+virtual_server_group 192.168.102.155-80-TCP_QLB {
+    192.168.102.155 80
+}
+
+deny_address_group 192.168.102.155_deny {
+}
+
+virtual_server  group 192.168.102.155-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.155_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.155 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.155 bond1.kni;"
+
+    real_server 192.168.13.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 508 ##############################
+virtual_server_group 111.13.235.162-80-TCP_QLB {
+    111.13.235.162 80
+}
+
+deny_address_group 111.13.235.162_deny {
+}
+
+virtual_server  group 111.13.235.162-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.162_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.162 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.162 bond1.kni;"
+
+    real_server 192.168.30.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 509 ##############################
+virtual_server_group 192.168.102.16-80-TCP_QLB {
+    192.168.102.16 80
+}
+
+deny_address_group 192.168.102.16_deny {
+}
+
+virtual_server  group 192.168.102.16-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.16_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.16 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.16 bond1.kni;"
+
+    real_server 192.168.47.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 510 ##############################
+virtual_server_group 192.168.102.212-80-TCP_QLB {
+    192.168.102.212 80
+}
+
+deny_address_group 192.168.102.212_deny {
+}
+
+virtual_server  group 192.168.102.212-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.212_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.212 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.212 bond1.kni;"
+
+    real_server 192.168.22.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 511 ##############################
+virtual_server_group 192.168.101.3-80-TCP_QLB {
+    192.168.101.3 80
+}
+
+deny_address_group 192.168.101.3_deny {
+}
+
+virtual_server  group 192.168.101.3-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.3_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.3 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.3 bond1.kni;"
+
+    real_server 192.168.29.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 512 ##############################
+virtual_server_group 111.13.235.202-80-TCP_QLB {
+    111.13.235.202 80
+}
+
+deny_address_group 111.13.235.202_deny {
+}
+
+virtual_server  group 111.13.235.202-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.202_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.202 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.202 bond1.kni;"
+
+    real_server 192.168.18.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 513 ##############################
+virtual_server_group 192.168.101.156-80-TCP_QLB {
+    192.168.101.156 80
+}
+
+deny_address_group 192.168.101.156_deny {
+}
+
+virtual_server  group 192.168.101.156-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.156_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.156 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.156 bond1.kni;"
+
+    real_server 192.168.46.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 514 ##############################
+virtual_server_group 192.168.101.88-80-TCP_QLB {
+    192.168.101.88 80
+}
+
+deny_address_group 192.168.101.88_deny {
+}
+
+virtual_server  group 192.168.101.88-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.88_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.88 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.88 bond1.kni;"
+
+    real_server 192.168.22.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 515 ##############################
+virtual_server_group 192.168.101.190-80-TCP_QLB {
+    192.168.101.190 80
+}
+
+deny_address_group 192.168.101.190_deny {
+}
+
+virtual_server  group 192.168.101.190-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.190_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.190 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.190 bond1.kni;"
+
+    real_server 192.168.38.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 516 ##############################
+virtual_server_group 192.168.102.219-80-TCP_QLB {
+    192.168.102.219 80
+}
+
+deny_address_group 192.168.102.219_deny {
+}
+
+virtual_server  group 192.168.102.219-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.219_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.219 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.219 bond1.kni;"
+
+    real_server 192.168.38.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 517 ##############################
+virtual_server_group 192.168.101.26-80-TCP_QLB {
+    192.168.101.26 80
+}
+
+deny_address_group 192.168.101.26_deny {
+}
+
+virtual_server  group 192.168.101.26-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.26_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.26 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.26 bond1.kni;"
+
+    real_server 192.168.19.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 518 ##############################
+virtual_server_group 192.168.102.138-80-TCP_QLB {
+    192.168.102.138 80
+}
+
+deny_address_group 192.168.102.138_deny {
+}
+
+virtual_server  group 192.168.102.138-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.138_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.138 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.138 bond1.kni;"
+
+    real_server 192.168.14.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 519 ##############################
+virtual_server_group 192.168.101.126-80-TCP_QLB {
+    192.168.101.126 80
+}
+
+deny_address_group 192.168.101.126_deny {
+}
+
+virtual_server  group 192.168.101.126-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.126_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.126 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.126 bond1.kni;"
+
+    real_server 192.168.5.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 520 ##############################
+virtual_server_group 192.168.101.51-80-TCP_QLB {
+    192.168.101.51 80
+}
+
+deny_address_group 192.168.101.51_deny {
+}
+
+virtual_server  group 192.168.101.51-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.51_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.51 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.51 bond1.kni;"
+
+    real_server 192.168.19.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 521 ##############################
+virtual_server_group 192.168.101.140-80-TCP_QLB {
+    192.168.101.140 80
+}
+
+deny_address_group 192.168.101.140_deny {
+}
+
+virtual_server  group 192.168.101.140-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.140_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.140 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.140 bond1.kni;"
+
+    real_server 192.168.25.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 522 ##############################
+virtual_server_group 192.168.101.108-80-TCP_QLB {
+    192.168.101.108 80
+}
+
+deny_address_group 192.168.101.108_deny {
+}
+
+virtual_server  group 192.168.101.108-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.108_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.108 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.108 bond1.kni;"
+
+    real_server 192.168.15.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 523 ##############################
+virtual_server_group 192.168.101.59-80-TCP_QLB {
+    192.168.101.59 80
+}
+
+deny_address_group 192.168.101.59_deny {
+}
+
+virtual_server  group 192.168.101.59-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.59_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.59 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.59 bond1.kni;"
+
+    real_server 192.168.34.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 524 ##############################
+virtual_server_group 192.168.102.130-80-TCP_QLB {
+    192.168.102.130 80
+}
+
+deny_address_group 192.168.102.130_deny {
+}
+
+virtual_server  group 192.168.102.130-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.130_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.130 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.130 bond1.kni;"
+
+    real_server 192.168.26.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 525 ##############################
+virtual_server_group 111.13.235.117-80-TCP_QLB {
+    111.13.235.117 80
+}
+
+deny_address_group 111.13.235.117_deny {
+}
+
+virtual_server  group 111.13.235.117-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.117_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.117 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.117 bond1.kni;"
+
+    real_server 192.168.2.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 526 ##############################
+virtual_server_group 111.13.235.163-80-TCP_QLB {
+    111.13.235.163 80
+}
+
+deny_address_group 111.13.235.163_deny {
+}
+
+virtual_server  group 111.13.235.163-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.163_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.163 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.163 bond1.kni;"
+
+    real_server 192.168.41.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 527 ##############################
+virtual_server_group 192.168.102.167-80-TCP_QLB {
+    192.168.102.167 80
+}
+
+deny_address_group 192.168.102.167_deny {
+}
+
+virtual_server  group 192.168.102.167-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.167_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.167 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.167 bond1.kni;"
+
+    real_server 192.168.15.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 528 ##############################
+virtual_server_group 192.168.102.82-80-TCP_QLB {
+    192.168.102.82 80
+}
+
+deny_address_group 192.168.102.82_deny {
+}
+
+virtual_server  group 192.168.102.82-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.82_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.82 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.82 bond1.kni;"
+
+    real_server 192.168.58.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 529 ##############################
+virtual_server_group 192.168.101.114-80-TCP_QLB {
+    192.168.101.114 80
+}
+
+deny_address_group 192.168.101.114_deny {
+}
+
+virtual_server  group 192.168.101.114-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.114_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.114 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.114 bond1.kni;"
+
+    real_server 192.168.37.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 530 ##############################
+virtual_server_group 192.168.101.103-80-TCP_QLB {
+    192.168.101.103 80
+}
+
+deny_address_group 192.168.101.103_deny {
+}
+
+virtual_server  group 192.168.101.103-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.103_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.103 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.103 bond1.kni;"
+
+    real_server 192.168.50.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 531 ##############################
+virtual_server_group 111.13.235.90-80-TCP_QLB {
+    111.13.235.90 80
+}
+
+deny_address_group 111.13.235.90_deny {
+}
+
+virtual_server  group 111.13.235.90-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.90_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.90 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.90 bond1.kni;"
+
+    real_server 192.168.21.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 532 ##############################
+virtual_server_group 192.168.101.237-80-TCP_QLB {
+    192.168.101.237 80
+}
+
+deny_address_group 192.168.101.237_deny {
+}
+
+virtual_server  group 192.168.101.237-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.237_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.237 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.237 bond1.kni;"
+
+    real_server 192.168.5.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 533 ##############################
+virtual_server_group 111.13.235.233-80-TCP_QLB {
+    111.13.235.233 80
+}
+
+deny_address_group 111.13.235.233_deny {
+}
+
+virtual_server  group 111.13.235.233-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.233_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.233 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.233 bond1.kni;"
+
+    real_server 192.168.10.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 534 ##############################
+virtual_server_group 192.168.102.165-80-TCP_QLB {
+    192.168.102.165 80
+}
+
+deny_address_group 192.168.102.165_deny {
+}
+
+virtual_server  group 192.168.102.165-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.165_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.165 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.165 bond1.kni;"
+
+    real_server 192.168.59.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 535 ##############################
+virtual_server_group 192.168.101.56-80-TCP_QLB {
+    192.168.101.56 80
+}
+
+deny_address_group 192.168.101.56_deny {
+}
+
+virtual_server  group 192.168.101.56-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.56_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.56 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.56 bond1.kni;"
+
+    real_server 192.168.30.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 536 ##############################
+virtual_server_group 111.13.235.66-80-TCP_QLB {
+    111.13.235.66 80
+}
+
+deny_address_group 111.13.235.66_deny {
+}
+
+virtual_server  group 111.13.235.66-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.66_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.66 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.66 bond1.kni;"
+
+    real_server 192.168.9.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 537 ##############################
+virtual_server_group 111.13.235.111-80-TCP_QLB {
+    111.13.235.111 80
+}
+
+deny_address_group 111.13.235.111_deny {
+}
+
+virtual_server  group 111.13.235.111-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.111_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.111 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.111 bond1.kni;"
+
+    real_server 192.168.33.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 538 ##############################
+virtual_server_group 192.168.102.245-80-TCP_QLB {
+    192.168.102.245 80
+}
+
+deny_address_group 192.168.102.245_deny {
+}
+
+virtual_server  group 192.168.102.245-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.245_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.245 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.245 bond1.kni;"
+
+    real_server 192.168.14.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 539 ##############################
+virtual_server_group 111.13.235.205-80-TCP_QLB {
+    111.13.235.205 80
+}
+
+deny_address_group 111.13.235.205_deny {
+}
+
+virtual_server  group 111.13.235.205-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.205_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.205 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.205 bond1.kni;"
+
+    real_server 192.168.29.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 540 ##############################
+virtual_server_group 192.168.101.29-80-TCP_QLB {
+    192.168.101.29 80
+}
+
+deny_address_group 192.168.101.29_deny {
+}
+
+virtual_server  group 192.168.101.29-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.29_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.29 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.29 bond1.kni;"
+
+    real_server 192.168.38.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 541 ##############################
+virtual_server_group 192.168.101.232-80-TCP_QLB {
+    192.168.101.232 80
+}
+
+deny_address_group 192.168.101.232_deny {
+}
+
+virtual_server  group 192.168.101.232-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.232_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.232 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.232 bond1.kni;"
+
+    real_server 192.168.19.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 542 ##############################
+virtual_server_group 111.13.235.110-80-TCP_QLB {
+    111.13.235.110 80
+}
+
+deny_address_group 111.13.235.110_deny {
+}
+
+virtual_server  group 111.13.235.110-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.110_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.110 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.110 bond1.kni;"
+
+    real_server 192.168.21.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 543 ##############################
+virtual_server_group 192.168.101.116-80-TCP_QLB {
+    192.168.101.116 80
+}
+
+deny_address_group 192.168.101.116_deny {
+}
+
+virtual_server  group 192.168.101.116-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.116_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.116 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.116 bond1.kni;"
+
+    real_server 192.168.50.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 544 ##############################
+virtual_server_group 192.168.102.8-80-TCP_QLB {
+    192.168.102.8 80
+}
+
+deny_address_group 192.168.102.8_deny {
+}
+
+virtual_server  group 192.168.102.8-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.8_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.8 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.8 bond1.kni;"
+
+    real_server 192.168.45.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 545 ##############################
+virtual_server_group 192.168.102.246-80-TCP_QLB {
+    192.168.102.246 80
+}
+
+deny_address_group 192.168.102.246_deny {
+}
+
+virtual_server  group 192.168.102.246-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.246_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.246 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.246 bond1.kni;"
+
+    real_server 192.168.51.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 546 ##############################
+virtual_server_group 111.13.235.249-80-TCP_QLB {
+    111.13.235.249 80
+}
+
+deny_address_group 111.13.235.249_deny {
+}
+
+virtual_server  group 111.13.235.249-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.249_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.249 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.249 bond1.kni;"
+
+    real_server 192.168.7.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 547 ##############################
+virtual_server_group 192.168.102.13-80-TCP_QLB {
+    192.168.102.13 80
+}
+
+deny_address_group 192.168.102.13_deny {
+}
+
+virtual_server  group 192.168.102.13-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.13_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.13 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.13 bond1.kni;"
+
+    real_server 192.168.17.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 548 ##############################
+virtual_server_group 192.168.101.1-80-TCP_QLB {
+    192.168.101.1 80
+}
+
+deny_address_group 192.168.101.1_deny {
+}
+
+virtual_server  group 192.168.101.1-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.1_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.1 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.1 bond1.kni;"
+
+    real_server 192.168.46.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 549 ##############################
+virtual_server_group 192.168.102.208-80-TCP_QLB {
+    192.168.102.208 80
+}
+
+deny_address_group 192.168.102.208_deny {
+}
+
+virtual_server  group 192.168.102.208-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.208_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.208 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.208 bond1.kni;"
+
+    real_server 192.168.35.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 550 ##############################
+virtual_server_group 192.168.101.106-80-TCP_QLB {
+    192.168.101.106 80
+}
+
+deny_address_group 192.168.101.106_deny {
+}
+
+virtual_server  group 192.168.101.106-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.106_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.106 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.106 bond1.kni;"
+
+    real_server 192.168.27.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 551 ##############################
+virtual_server_group 192.168.102.222-80-TCP_QLB {
+    192.168.102.222 80
+}
+
+deny_address_group 192.168.102.222_deny {
+}
+
+virtual_server  group 192.168.102.222-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.222_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.222 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.222 bond1.kni;"
+
+    real_server 192.168.38.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 552 ##############################
+virtual_server_group 111.13.235.194-80-TCP_QLB {
+    111.13.235.194 80
+}
+
+deny_address_group 111.13.235.194_deny {
+}
+
+virtual_server  group 111.13.235.194-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.194_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.194 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.194 bond1.kni;"
+
+    real_server 192.168.38.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 553 ##############################
+virtual_server_group 192.168.102.69-80-TCP_QLB {
+    192.168.102.69 80
+}
+
+deny_address_group 192.168.102.69_deny {
+}
+
+virtual_server  group 192.168.102.69-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.69_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.69 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.69 bond1.kni;"
+
+    real_server 192.168.58.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 554 ##############################
+virtual_server_group 111.13.235.183-80-TCP_QLB {
+    111.13.235.183 80
+}
+
+deny_address_group 111.13.235.183_deny {
+}
+
+virtual_server  group 111.13.235.183-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.183_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.183 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.183 bond1.kni;"
+
+    real_server 192.168.39.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 555 ##############################
+virtual_server_group 192.168.101.34-80-TCP_QLB {
+    192.168.101.34 80
+}
+
+deny_address_group 192.168.101.34_deny {
+}
+
+virtual_server  group 192.168.101.34-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.34_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.34 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.34 bond1.kni;"
+
+    real_server 192.168.11.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 556 ##############################
+virtual_server_group 192.168.101.215-80-TCP_QLB {
+    192.168.101.215 80
+}
+
+deny_address_group 192.168.101.215_deny {
+}
+
+virtual_server  group 192.168.101.215-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.215_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.215 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.215 bond1.kni;"
+
+    real_server 192.168.58.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 557 ##############################
+virtual_server_group 192.168.102.183-80-TCP_QLB {
+    192.168.102.183 80
+}
+
+deny_address_group 192.168.102.183_deny {
+}
+
+virtual_server  group 192.168.102.183-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.183_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.183 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.183 bond1.kni;"
+
+    real_server 192.168.46.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 558 ##############################
+virtual_server_group 192.168.101.245-80-TCP_QLB {
+    192.168.101.245 80
+}
+
+deny_address_group 192.168.101.245_deny {
+}
+
+virtual_server  group 192.168.101.245-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.245_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.245 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.245 bond1.kni;"
+
+    real_server 192.168.45.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 559 ##############################
+virtual_server_group 111.13.235.181-80-TCP_QLB {
+    111.13.235.181 80
+}
+
+deny_address_group 111.13.235.181_deny {
+}
+
+virtual_server  group 111.13.235.181-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.181_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.181 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.181 bond1.kni;"
+
+    real_server 192.168.11.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 560 ##############################
+virtual_server_group 111.13.235.254-80-TCP_QLB {
+    111.13.235.254 80
+}
+
+deny_address_group 111.13.235.254_deny {
+}
+
+virtual_server  group 111.13.235.254-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.254_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.254 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.254 bond1.kni;"
+
+    real_server 192.168.53.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 561 ##############################
+virtual_server_group 192.168.101.165-80-TCP_QLB {
+    192.168.101.165 80
+}
+
+deny_address_group 192.168.101.165_deny {
+}
+
+virtual_server  group 192.168.101.165-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.165_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.165 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.165 bond1.kni;"
+
+    real_server 192.168.14.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 562 ##############################
+virtual_server_group 192.168.102.149-80-TCP_QLB {
+    192.168.102.149 80
+}
+
+deny_address_group 192.168.102.149_deny {
+}
+
+virtual_server  group 192.168.102.149-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.149_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.149 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.149 bond1.kni;"
+
+    real_server 192.168.49.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 563 ##############################
+virtual_server_group 192.168.102.132-80-TCP_QLB {
+    192.168.102.132 80
+}
+
+deny_address_group 192.168.102.132_deny {
+}
+
+virtual_server  group 192.168.102.132-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.132_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.132 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.132 bond1.kni;"
+
+    real_server 192.168.11.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 564 ##############################
+virtual_server_group 192.168.101.233-80-TCP_QLB {
+    192.168.101.233 80
+}
+
+deny_address_group 192.168.101.233_deny {
+}
+
+virtual_server  group 192.168.101.233-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.233_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.233 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.233 bond1.kni;"
+
+    real_server 192.168.11.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 565 ##############################
+virtual_server_group 111.13.235.165-80-TCP_QLB {
+    111.13.235.165 80
+}
+
+deny_address_group 111.13.235.165_deny {
+}
+
+virtual_server  group 111.13.235.165-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.165_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.165 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.165 bond1.kni;"
+
+    real_server 192.168.18.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 566 ##############################
+virtual_server_group 192.168.102.215-80-TCP_QLB {
+    192.168.102.215 80
+}
+
+deny_address_group 192.168.102.215_deny {
+}
+
+virtual_server  group 192.168.102.215-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.215_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.215 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.215 bond1.kni;"
+
+    real_server 192.168.49.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 567 ##############################
+virtual_server_group 111.13.235.129-80-TCP_QLB {
+    111.13.235.129 80
+}
+
+deny_address_group 111.13.235.129_deny {
+}
+
+virtual_server  group 111.13.235.129-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.129_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.129 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.129 bond1.kni;"
+
+    real_server 192.168.58.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 568 ##############################
+virtual_server_group 111.13.235.64-80-TCP_QLB {
+    111.13.235.64 80
+}
+
+deny_address_group 111.13.235.64_deny {
+}
+
+virtual_server  group 111.13.235.64-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.64_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.64 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.64 bond1.kni;"
+
+    real_server 192.168.55.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 569 ##############################
+virtual_server_group 111.13.235.118-80-TCP_QLB {
+    111.13.235.118 80
+}
+
+deny_address_group 111.13.235.118_deny {
+}
+
+virtual_server  group 111.13.235.118-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.118_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.118 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.118 bond1.kni;"
+
+    real_server 192.168.22.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 570 ##############################
+virtual_server_group 111.13.235.253-80-TCP_QLB {
+    111.13.235.253 80
+}
+
+deny_address_group 111.13.235.253_deny {
+}
+
+virtual_server  group 111.13.235.253-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.253_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.253 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.253 bond1.kni;"
+
+    real_server 192.168.29.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 571 ##############################
+virtual_server_group 192.168.102.182-80-TCP_QLB {
+    192.168.102.182 80
+}
+
+deny_address_group 192.168.102.182_deny {
+}
+
+virtual_server  group 192.168.102.182-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.182_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.182 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.182 bond1.kni;"
+
+    real_server 192.168.38.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 572 ##############################
+virtual_server_group 192.168.102.34-80-TCP_QLB {
+    192.168.102.34 80
+}
+
+deny_address_group 192.168.102.34_deny {
+}
+
+virtual_server  group 192.168.102.34-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.34_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.34 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.34 bond1.kni;"
+
+    real_server 192.168.22.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 573 ##############################
+virtual_server_group 192.168.101.183-80-TCP_QLB {
+    192.168.101.183 80
+}
+
+deny_address_group 192.168.101.183_deny {
+}
+
+virtual_server  group 192.168.101.183-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.183_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.183 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.183 bond1.kni;"
+
+    real_server 192.168.46.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 574 ##############################
+virtual_server_group 192.168.101.162-80-TCP_QLB {
+    192.168.101.162 80
+}
+
+deny_address_group 192.168.101.162_deny {
+}
+
+virtual_server  group 192.168.101.162-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.162_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.162 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.162 bond1.kni;"
+
+    real_server 192.168.31.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 575 ##############################
+virtual_server_group 192.168.102.107-80-TCP_QLB {
+    192.168.102.107 80
+}
+
+deny_address_group 192.168.102.107_deny {
+}
+
+virtual_server  group 192.168.102.107-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.107_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.107 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.107 bond1.kni;"
+
+    real_server 192.168.5.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 576 ##############################
+virtual_server_group 192.168.101.192-80-TCP_QLB {
+    192.168.101.192 80
+}
+
+deny_address_group 192.168.101.192_deny {
+}
+
+virtual_server  group 192.168.101.192-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.192_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.192 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.192 bond1.kni;"
+
+    real_server 192.168.31.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 577 ##############################
+virtual_server_group 192.168.101.84-80-TCP_QLB {
+    192.168.101.84 80
+}
+
+deny_address_group 192.168.101.84_deny {
+}
+
+virtual_server  group 192.168.101.84-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.84_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.84 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.84 bond1.kni;"
+
+    real_server 192.168.37.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 578 ##############################
+virtual_server_group 111.13.235.188-80-TCP_QLB {
+    111.13.235.188 80
+}
+
+deny_address_group 111.13.235.188_deny {
+}
+
+virtual_server  group 111.13.235.188-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.188_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.188 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.188 bond1.kni;"
+
+    real_server 192.168.25.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 579 ##############################
+virtual_server_group 192.168.101.146-80-TCP_QLB {
+    192.168.101.146 80
+}
+
+deny_address_group 192.168.101.146_deny {
+}
+
+virtual_server  group 192.168.101.146-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.146_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.146 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.146 bond1.kni;"
+
+    real_server 192.168.9.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 580 ##############################
+virtual_server_group 111.13.235.144-80-TCP_QLB {
+    111.13.235.144 80
+}
+
+deny_address_group 111.13.235.144_deny {
+}
+
+virtual_server  group 111.13.235.144-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.144_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.144 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.144 bond1.kni;"
+
+    real_server 192.168.21.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 581 ##############################
+virtual_server_group 192.168.101.77-80-TCP_QLB {
+    192.168.101.77 80
+}
+
+deny_address_group 192.168.101.77_deny {
+}
+
+virtual_server  group 192.168.101.77-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.77_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.77 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.77 bond1.kni;"
+
+    real_server 192.168.3.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 582 ##############################
+virtual_server_group 111.13.235.186-80-TCP_QLB {
+    111.13.235.186 80
+}
+
+deny_address_group 111.13.235.186_deny {
+}
+
+virtual_server  group 111.13.235.186-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.186_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.186 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.186 bond1.kni;"
+
+    real_server 192.168.31.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 583 ##############################
+virtual_server_group 192.168.102.104-80-TCP_QLB {
+    192.168.102.104 80
+}
+
+deny_address_group 192.168.102.104_deny {
+}
+
+virtual_server  group 192.168.102.104-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.104_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.104 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.104 bond1.kni;"
+
+    real_server 192.168.33.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 584 ##############################
+virtual_server_group 111.13.235.209-80-TCP_QLB {
+    111.13.235.209 80
+}
+
+deny_address_group 111.13.235.209_deny {
+}
+
+virtual_server  group 111.13.235.209-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.209_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.209 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.209 bond1.kni;"
+
+    real_server 192.168.15.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 585 ##############################
+virtual_server_group 111.13.235.184-80-TCP_QLB {
+    111.13.235.184 80
+}
+
+deny_address_group 111.13.235.184_deny {
+}
+
+virtual_server  group 111.13.235.184-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.184_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.184 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.184 bond1.kni;"
+
+    real_server 192.168.18.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 586 ##############################
+virtual_server_group 192.168.101.247-80-TCP_QLB {
+    192.168.101.247 80
+}
+
+deny_address_group 192.168.101.247_deny {
+}
+
+virtual_server  group 192.168.101.247-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.247_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.247 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.247 bond1.kni;"
+
+    real_server 192.168.54.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 587 ##############################
+virtual_server_group 192.168.102.140-80-TCP_QLB {
+    192.168.102.140 80
+}
+
+deny_address_group 192.168.102.140_deny {
+}
+
+virtual_server  group 192.168.102.140-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.140_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.140 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.140 bond1.kni;"
+
+    real_server 192.168.23.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 588 ##############################
+virtual_server_group 192.168.102.228-80-TCP_QLB {
+    192.168.102.228 80
+}
+
+deny_address_group 192.168.102.228_deny {
+}
+
+virtual_server  group 192.168.102.228-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.228_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.228 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.228 bond1.kni;"
+
+    real_server 192.168.30.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 589 ##############################
+virtual_server_group 192.168.101.149-80-TCP_QLB {
+    192.168.101.149 80
+}
+
+deny_address_group 192.168.101.149_deny {
+}
+
+virtual_server  group 192.168.101.149-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.149_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.149 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.149 bond1.kni;"
+
+    real_server 192.168.13.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 590 ##############################
+virtual_server_group 111.13.235.222-80-TCP_QLB {
+    111.13.235.222 80
+}
+
+deny_address_group 111.13.235.222_deny {
+}
+
+virtual_server  group 111.13.235.222-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.222_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.222 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.222 bond1.kni;"
+
+    real_server 192.168.15.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 591 ##############################
+virtual_server_group 192.168.102.195-80-TCP_QLB {
+    192.168.102.195 80
+}
+
+deny_address_group 192.168.102.195_deny {
+}
+
+virtual_server  group 192.168.102.195-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.195_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.195 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.195 bond1.kni;"
+
+    real_server 192.168.33.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 592 ##############################
+virtual_server_group 192.168.101.104-80-TCP_QLB {
+    192.168.101.104 80
+}
+
+deny_address_group 192.168.101.104_deny {
+}
+
+virtual_server  group 192.168.101.104-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.104_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.104 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.104 bond1.kni;"
+
+    real_server 192.168.54.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 593 ##############################
+virtual_server_group 192.168.101.234-80-TCP_QLB {
+    192.168.101.234 80
+}
+
+deny_address_group 192.168.101.234_deny {
+}
+
+virtual_server  group 192.168.101.234-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.234_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.234 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.234 bond1.kni;"
+
+    real_server 192.168.3.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 594 ##############################
+virtual_server_group 111.13.235.201-80-TCP_QLB {
+    111.13.235.201 80
+}
+
+deny_address_group 111.13.235.201_deny {
+}
+
+virtual_server  group 111.13.235.201-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.201_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.201 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.201 bond1.kni;"
+
+    real_server 192.168.18.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 595 ##############################
+virtual_server_group 192.168.101.195-80-TCP_QLB {
+    192.168.101.195 80
+}
+
+deny_address_group 192.168.101.195_deny {
+}
+
+virtual_server  group 192.168.101.195-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.195_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.195 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.195 bond1.kni;"
+
+    real_server 192.168.7.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 596 ##############################
+virtual_server_group 192.168.101.47-80-TCP_QLB {
+    192.168.101.47 80
+}
+
+deny_address_group 192.168.101.47_deny {
+}
+
+virtual_server  group 192.168.101.47-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.47_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.47 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.47 bond1.kni;"
+
+    real_server 192.168.10.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 597 ##############################
+virtual_server_group 192.168.101.253-80-TCP_QLB {
+    192.168.101.253 80
+}
+
+deny_address_group 192.168.101.253_deny {
+}
+
+virtual_server  group 192.168.101.253-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.253_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.253 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.253 bond1.kni;"
+
+    real_server 192.168.15.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 598 ##############################
+virtual_server_group 192.168.102.50-80-TCP_QLB {
+    192.168.102.50 80
+}
+
+deny_address_group 192.168.102.50_deny {
+}
+
+virtual_server  group 192.168.102.50-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.50_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.50 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.50 bond1.kni;"
+
+    real_server 192.168.39.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 599 ##############################
+virtual_server_group 192.168.101.222-80-TCP_QLB {
+    192.168.101.222 80
+}
+
+deny_address_group 192.168.101.222_deny {
+}
+
+virtual_server  group 192.168.101.222-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.222_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.222 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.222 bond1.kni;"
+
+    real_server 192.168.34.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 600 ##############################
+virtual_server_group 192.168.101.197-80-TCP_QLB {
+    192.168.101.197 80
+}
+
+deny_address_group 192.168.101.197_deny {
+}
+
+virtual_server  group 192.168.101.197-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.197_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.197 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.197 bond1.kni;"
+
+    real_server 192.168.33.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 601 ##############################
+virtual_server_group 192.168.102.31-80-TCP_QLB {
+    192.168.102.31 80
+}
+
+deny_address_group 192.168.102.31_deny {
+}
+
+virtual_server  group 192.168.102.31-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.31_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.31 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.31 bond1.kni;"
+
+    real_server 192.168.37.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 602 ##############################
+virtual_server_group 192.168.102.168-80-TCP_QLB {
+    192.168.102.168 80
+}
+
+deny_address_group 192.168.102.168_deny {
+}
+
+virtual_server  group 192.168.102.168-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.168_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.168 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.168 bond1.kni;"
+
+    real_server 192.168.51.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 603 ##############################
+virtual_server_group 192.168.101.95-80-TCP_QLB {
+    192.168.101.95 80
+}
+
+deny_address_group 192.168.101.95_deny {
+}
+
+virtual_server  group 192.168.101.95-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.95_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.95 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.95 bond1.kni;"
+
+    real_server 192.168.21.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 604 ##############################
+virtual_server_group 192.168.101.89-80-TCP_QLB {
+    192.168.101.89 80
+}
+
+deny_address_group 192.168.101.89_deny {
+}
+
+virtual_server  group 192.168.101.89-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.89_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.89 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.89 bond1.kni;"
+
+    real_server 192.168.59.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 605 ##############################
+virtual_server_group 192.168.101.251-80-TCP_QLB {
+    192.168.101.251 80
+}
+
+deny_address_group 192.168.101.251_deny {
+}
+
+virtual_server  group 192.168.101.251-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.251_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.251 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.251 bond1.kni;"
+
+    real_server 192.168.15.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 606 ##############################
+virtual_server_group 192.168.101.144-80-TCP_QLB {
+    192.168.101.144 80
+}
+
+deny_address_group 192.168.101.144_deny {
+}
+
+virtual_server  group 192.168.101.144-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.144_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.144 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.144 bond1.kni;"
+
+    real_server 192.168.18.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 607 ##############################
+virtual_server_group 192.168.101.96-80-TCP_QLB {
+    192.168.101.96 80
+}
+
+deny_address_group 192.168.101.96_deny {
+}
+
+virtual_server  group 192.168.101.96-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.96_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.96 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.96 bond1.kni;"
+
+    real_server 192.168.10.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 608 ##############################
+virtual_server_group 111.13.235.149-80-TCP_QLB {
+    111.13.235.149 80
+}
+
+deny_address_group 111.13.235.149_deny {
+}
+
+virtual_server  group 111.13.235.149-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.149_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.149 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.149 bond1.kni;"
+
+    real_server 192.168.41.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 609 ##############################
+virtual_server_group 111.13.235.138-80-TCP_QLB {
+    111.13.235.138 80
+}
+
+deny_address_group 111.13.235.138_deny {
+}
+
+virtual_server  group 111.13.235.138-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.138_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.138 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.138 bond1.kni;"
+
+    real_server 192.168.2.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 610 ##############################
+virtual_server_group 192.168.101.208-80-TCP_QLB {
+    192.168.101.208 80
+}
+
+deny_address_group 192.168.101.208_deny {
+}
+
+virtual_server  group 192.168.101.208-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.208_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.208 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.208 bond1.kni;"
+
+    real_server 192.168.9.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 611 ##############################
+virtual_server_group 192.168.102.201-80-TCP_QLB {
+    192.168.102.201 80
+}
+
+deny_address_group 192.168.102.201_deny {
+}
+
+virtual_server  group 192.168.102.201-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.201_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.201 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.201 bond1.kni;"
+
+    real_server 192.168.41.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 612 ##############################
+virtual_server_group 111.13.235.113-80-TCP_QLB {
+    111.13.235.113 80
+}
+
+deny_address_group 111.13.235.113_deny {
+}
+
+virtual_server  group 111.13.235.113-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.113_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.113 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.113 bond1.kni;"
+
+    real_server 192.168.34.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 613 ##############################
+virtual_server_group 111.13.235.167-80-TCP_QLB {
+    111.13.235.167 80
+}
+
+deny_address_group 111.13.235.167_deny {
+}
+
+virtual_server  group 111.13.235.167-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.167_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.167 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.167 bond1.kni;"
+
+    real_server 192.168.15.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 614 ##############################
+virtual_server_group 111.13.235.196-80-TCP_QLB {
+    111.13.235.196 80
+}
+
+deny_address_group 111.13.235.196_deny {
+}
+
+virtual_server  group 111.13.235.196-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.196_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.196 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.196 bond1.kni;"
+
+    real_server 192.168.29.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 615 ##############################
+virtual_server_group 192.168.101.136-80-TCP_QLB {
+    192.168.101.136 80
+}
+
+deny_address_group 192.168.101.136_deny {
+}
+
+virtual_server  group 192.168.101.136-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.136_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.136 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.136 bond1.kni;"
+
+    real_server 192.168.42.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 616 ##############################
+virtual_server_group 192.168.102.161-80-TCP_QLB {
+    192.168.102.161 80
+}
+
+deny_address_group 192.168.102.161_deny {
+}
+
+virtual_server  group 192.168.102.161-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.161_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.161 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.161 bond1.kni;"
+
+    real_server 192.168.58.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 617 ##############################
+virtual_server_group 111.13.235.189-80-TCP_QLB {
+    111.13.235.189 80
+}
+
+deny_address_group 111.13.235.189_deny {
+}
+
+virtual_server  group 111.13.235.189-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.189_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.189 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.189 bond1.kni;"
+
+    real_server 192.168.50.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 618 ##############################
+virtual_server_group 111.13.235.251-80-TCP_QLB {
+    111.13.235.251 80
+}
+
+deny_address_group 111.13.235.251_deny {
+}
+
+virtual_server  group 111.13.235.251-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.251_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.251 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.251 bond1.kni;"
+
+    real_server 192.168.41.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 619 ##############################
+virtual_server_group 192.168.102.118-80-TCP_QLB {
+    192.168.102.118 80
+}
+
+deny_address_group 192.168.102.118_deny {
+}
+
+virtual_server  group 192.168.102.118-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.118_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.118 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.118 bond1.kni;"
+
+    real_server 192.168.23.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.83 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 620 ##############################
+virtual_server_group 192.168.101.69-80-TCP_QLB {
+    192.168.101.69 80
+}
+
+deny_address_group 192.168.101.69_deny {
+}
+
+virtual_server  group 192.168.101.69-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.69_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.69 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.69 bond1.kni;"
+
+    real_server 192.168.26.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 621 ##############################
+virtual_server_group 192.168.101.236-80-TCP_QLB {
+    192.168.101.236 80
+}
+
+deny_address_group 192.168.101.236_deny {
+}
+
+virtual_server  group 192.168.101.236-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.236_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.236 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.236 bond1.kni;"
+
+    real_server 192.168.46.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 622 ##############################
+virtual_server_group 111.13.235.227-80-TCP_QLB {
+    111.13.235.227 80
+}
+
+deny_address_group 111.13.235.227_deny {
+}
+
+virtual_server  group 111.13.235.227-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.227_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.227 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.227 bond1.kni;"
+
+    real_server 192.168.13.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 623 ##############################
+virtual_server_group 111.13.235.67-80-TCP_QLB {
+    111.13.235.67 80
+}
+
+deny_address_group 111.13.235.67_deny {
+}
+
+virtual_server  group 111.13.235.67-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.67_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.67 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.67 bond1.kni;"
+
+    real_server 192.168.10.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 624 ##############################
+virtual_server_group 192.168.101.178-80-TCP_QLB {
+    192.168.101.178 80
+}
+
+deny_address_group 192.168.101.178_deny {
+}
+
+virtual_server  group 192.168.101.178-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.178_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.178 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.178 bond1.kni;"
+
+    real_server 192.168.46.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 625 ##############################
+virtual_server_group 111.13.235.152-80-TCP_QLB {
+    111.13.235.152 80
+}
+
+deny_address_group 111.13.235.152_deny {
+}
+
+virtual_server  group 111.13.235.152-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.152_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.152 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.152 bond1.kni;"
+
+    real_server 192.168.11.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 626 ##############################
+virtual_server_group 111.13.235.203-80-TCP_QLB {
+    111.13.235.203 80
+}
+
+deny_address_group 111.13.235.203_deny {
+}
+
+virtual_server  group 111.13.235.203-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.203_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.203 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.203 bond1.kni;"
+
+    real_server 192.168.19.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 627 ##############################
+virtual_server_group 192.168.102.196-80-TCP_QLB {
+    192.168.102.196 80
+}
+
+deny_address_group 192.168.102.196_deny {
+}
+
+virtual_server  group 192.168.102.196-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.196_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.196 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.196 bond1.kni;"
+
+    real_server 192.168.47.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 628 ##############################
+virtual_server_group 192.168.101.45-80-TCP_QLB {
+    192.168.101.45 80
+}
+
+deny_address_group 192.168.101.45_deny {
+}
+
+virtual_server  group 192.168.101.45-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.45_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.45 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.45 bond1.kni;"
+
+    real_server 192.168.30.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 629 ##############################
+virtual_server_group 192.168.101.227-80-TCP_QLB {
+    192.168.101.227 80
+}
+
+deny_address_group 192.168.101.227_deny {
+}
+
+virtual_server  group 192.168.101.227-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.227_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.227 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.227 bond1.kni;"
+
+    real_server 192.168.7.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 630 ##############################
+virtual_server_group 192.168.101.120-80-TCP_QLB {
+    192.168.101.120 80
+}
+
+deny_address_group 192.168.101.120_deny {
+}
+
+virtual_server  group 192.168.101.120-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.120_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.120 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.120 bond1.kni;"
+
+    real_server 192.168.3.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 631 ##############################
+virtual_server_group 192.168.102.74-80-TCP_QLB {
+    192.168.102.74 80
+}
+
+deny_address_group 192.168.102.74_deny {
+}
+
+virtual_server  group 192.168.102.74-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.74_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.74 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.74 bond1.kni;"
+
+    real_server 192.168.59.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 632 ##############################
+virtual_server_group 192.168.101.159-80-TCP_QLB {
+    192.168.101.159 80
+}
+
+deny_address_group 192.168.101.159_deny {
+}
+
+virtual_server  group 192.168.101.159-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.159_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.159 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.159 bond1.kni;"
+
+    real_server 192.168.39.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 633 ##############################
+virtual_server_group 192.168.102.106-80-TCP_QLB {
+    192.168.102.106 80
+}
+
+deny_address_group 192.168.102.106_deny {
+}
+
+virtual_server  group 192.168.102.106-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.106_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.106 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.106 bond1.kni;"
+
+    real_server 192.168.13.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 634 ##############################
+virtual_server_group 111.13.235.182-80-TCP_QLB {
+    111.13.235.182 80
+}
+
+deny_address_group 111.13.235.182_deny {
+}
+
+virtual_server  group 111.13.235.182-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.182_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.182 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.182 bond1.kni;"
+
+    real_server 192.168.55.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 635 ##############################
+virtual_server_group 192.168.102.173-80-TCP_QLB {
+    192.168.102.173 80
+}
+
+deny_address_group 192.168.102.173_deny {
+}
+
+virtual_server  group 192.168.102.173-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.173_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.173 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.173 bond1.kni;"
+
+    real_server 192.168.7.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 636 ##############################
+virtual_server_group 192.168.102.171-80-TCP_QLB {
+    192.168.102.171 80
+}
+
+deny_address_group 192.168.102.171_deny {
+}
+
+virtual_server  group 192.168.102.171-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.171_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.171 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.171 bond1.kni;"
+
+    real_server 192.168.47.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.4 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 637 ##############################
+virtual_server_group 192.168.102.142-80-TCP_QLB {
+    192.168.102.142 80
+}
+
+deny_address_group 192.168.102.142_deny {
+}
+
+virtual_server  group 192.168.102.142-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.142_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.142 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.142 bond1.kni;"
+
+    real_server 192.168.34.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 638 ##############################
+virtual_server_group 192.168.101.49-80-TCP_QLB {
+    192.168.101.49 80
+}
+
+deny_address_group 192.168.101.49_deny {
+}
+
+virtual_server  group 192.168.101.49-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.49_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.49 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.49 bond1.kni;"
+
+    real_server 192.168.53.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 639 ##############################
+virtual_server_group 192.168.101.16-80-TCP_QLB {
+    192.168.101.16 80
+}
+
+deny_address_group 192.168.101.16_deny {
+}
+
+virtual_server  group 192.168.101.16-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.16_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.16 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.16 bond1.kni;"
+
+    real_server 192.168.21.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 640 ##############################
+virtual_server_group 192.168.101.107-80-TCP_QLB {
+    192.168.101.107 80
+}
+
+deny_address_group 192.168.101.107_deny {
+}
+
+virtual_server  group 192.168.101.107-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.107_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.107 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.107 bond1.kni;"
+
+    real_server 192.168.17.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 641 ##############################
+virtual_server_group 192.168.102.61-80-TCP_QLB {
+    192.168.102.61 80
+}
+
+deny_address_group 192.168.102.61_deny {
+}
+
+virtual_server  group 192.168.102.61-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.61_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.61 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.61 bond1.kni;"
+
+    real_server 192.168.7.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 642 ##############################
+virtual_server_group 192.168.102.147-80-TCP_QLB {
+    192.168.102.147 80
+}
+
+deny_address_group 192.168.102.147_deny {
+}
+
+virtual_server  group 192.168.102.147-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.147_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.147 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.147 bond1.kni;"
+
+    real_server 192.168.25.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 643 ##############################
+virtual_server_group 192.168.102.2-80-TCP_QLB {
+    192.168.102.2 80
+}
+
+deny_address_group 192.168.102.2_deny {
+}
+
+virtual_server  group 192.168.102.2-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.2_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.2 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.2 bond1.kni;"
+
+    real_server 192.168.1.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 644 ##############################
+virtual_server_group 111.13.235.95-80-TCP_QLB {
+    111.13.235.95 80
+}
+
+deny_address_group 111.13.235.95_deny {
+}
+
+virtual_server  group 111.13.235.95-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.95_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.95 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.95 bond1.kni;"
+
+    real_server 192.168.49.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 645 ##############################
+virtual_server_group 192.168.102.85-80-TCP_QLB {
+    192.168.102.85 80
+}
+
+deny_address_group 192.168.102.85_deny {
+}
+
+virtual_server  group 192.168.102.85-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.85_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.85 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.85 bond1.kni;"
+
+    real_server 192.168.29.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 646 ##############################
+virtual_server_group 192.168.102.176-80-TCP_QLB {
+    192.168.102.176 80
+}
+
+deny_address_group 192.168.102.176_deny {
+}
+
+virtual_server  group 192.168.102.176-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.176_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.176 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.176 bond1.kni;"
+
+    real_server 192.168.59.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 647 ##############################
+virtual_server_group 111.13.235.97-80-TCP_QLB {
+    111.13.235.97 80
+}
+
+deny_address_group 111.13.235.97_deny {
+}
+
+virtual_server  group 111.13.235.97-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.97_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.97 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.97 bond1.kni;"
+
+    real_server 192.168.17.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 648 ##############################
+virtual_server_group 111.13.235.119-80-TCP_QLB {
+    111.13.235.119 80
+}
+
+deny_address_group 111.13.235.119_deny {
+}
+
+virtual_server  group 111.13.235.119-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.119_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.119 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.119 bond1.kni;"
+
+    real_server 192.168.21.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 649 ##############################
+virtual_server_group 192.168.101.38-80-TCP_QLB {
+    192.168.101.38 80
+}
+
+deny_address_group 192.168.101.38_deny {
+}
+
+virtual_server  group 192.168.101.38-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.38_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.38 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.38 bond1.kni;"
+
+    real_server 192.168.11.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 650 ##############################
+virtual_server_group 192.168.101.225-80-TCP_QLB {
+    192.168.101.225 80
+}
+
+deny_address_group 192.168.101.225_deny {
+}
+
+virtual_server  group 192.168.101.225-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.225_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.225 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.225 bond1.kni;"
+
+    real_server 192.168.43.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 651 ##############################
+virtual_server_group 192.168.102.53-80-TCP_QLB {
+    192.168.102.53 80
+}
+
+deny_address_group 192.168.102.53_deny {
+}
+
+virtual_server  group 192.168.102.53-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.53_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.53 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.53 bond1.kni;"
+
+    real_server 192.168.50.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 652 ##############################
+virtual_server_group 192.168.101.119-80-TCP_QLB {
+    192.168.101.119 80
+}
+
+deny_address_group 192.168.101.119_deny {
+}
+
+virtual_server  group 192.168.101.119-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.119_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.119 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.119 bond1.kni;"
+
+    real_server 192.168.55.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 653 ##############################
+virtual_server_group 192.168.101.198-80-TCP_QLB {
+    192.168.101.198 80
+}
+
+deny_address_group 192.168.101.198_deny {
+}
+
+virtual_server  group 192.168.101.198-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.198_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.198 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.198 bond1.kni;"
+
+    real_server 192.168.6.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.9 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 654 ##############################
+virtual_server_group 192.168.102.211-80-TCP_QLB {
+    192.168.102.211 80
+}
+
+deny_address_group 192.168.102.211_deny {
+}
+
+virtual_server  group 192.168.102.211-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.211_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.211 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.211 bond1.kni;"
+
+    real_server 192.168.14.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.180 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 655 ##############################
+virtual_server_group 192.168.102.194-80-TCP_QLB {
+    192.168.102.194 80
+}
+
+deny_address_group 192.168.102.194_deny {
+}
+
+virtual_server  group 192.168.102.194-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.194_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.194 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.194 bond1.kni;"
+
+    real_server 192.168.27.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 656 ##############################
+virtual_server_group 192.168.102.101-80-TCP_QLB {
+    192.168.102.101 80
+}
+
+deny_address_group 192.168.102.101_deny {
+}
+
+virtual_server  group 192.168.102.101-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.101_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.101 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.101 bond1.kni;"
+
+    real_server 192.168.50.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 657 ##############################
+virtual_server_group 192.168.102.68-80-TCP_QLB {
+    192.168.102.68 80
+}
+
+deny_address_group 192.168.102.68_deny {
+}
+
+virtual_server  group 192.168.102.68-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.68_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.68 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.68 bond1.kni;"
+
+    real_server 192.168.13.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 658 ##############################
+virtual_server_group 192.168.102.38-80-TCP_QLB {
+    192.168.102.38 80
+}
+
+deny_address_group 192.168.102.38_deny {
+}
+
+virtual_server  group 192.168.102.38-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.38_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.38 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.38 bond1.kni;"
+
+    real_server 192.168.9.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.194 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.86 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.96 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 659 ##############################
+virtual_server_group 192.168.101.125-80-TCP_QLB {
+    192.168.101.125 80
+}
+
+deny_address_group 192.168.101.125_deny {
+}
+
+virtual_server  group 192.168.101.125-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.125_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.125 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.125 bond1.kni;"
+
+    real_server 192.168.19.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 660 ##############################
+virtual_server_group 192.168.102.76-80-TCP_QLB {
+    192.168.102.76 80
+}
+
+deny_address_group 192.168.102.76_deny {
+}
+
+virtual_server  group 192.168.102.76-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.76_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.76 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.76 bond1.kni;"
+
+    real_server 192.168.51.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 661 ##############################
+virtual_server_group 192.168.102.70-80-TCP_QLB {
+    192.168.102.70 80
+}
+
+deny_address_group 192.168.102.70_deny {
+}
+
+virtual_server  group 192.168.102.70-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.70_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.70 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.70 bond1.kni;"
+
+    real_server 192.168.54.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 662 ##############################
+virtual_server_group 192.168.102.80-80-TCP_QLB {
+    192.168.102.80 80
+}
+
+deny_address_group 192.168.102.80_deny {
+}
+
+virtual_server  group 192.168.102.80-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.80_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.80 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.80 bond1.kni;"
+
+    real_server 192.168.58.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 663 ##############################
+virtual_server_group 111.13.235.88-80-TCP_QLB {
+    111.13.235.88 80
+}
+
+deny_address_group 111.13.235.88_deny {
+}
+
+virtual_server  group 111.13.235.88-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.88_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.88 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.88 bond1.kni;"
+
+    real_server 192.168.55.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 664 ##############################
+virtual_server_group 192.168.102.148-80-TCP_QLB {
+    192.168.102.148 80
+}
+
+deny_address_group 192.168.102.148_deny {
+}
+
+virtual_server  group 192.168.102.148-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.148_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.148 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.148 bond1.kni;"
+
+    real_server 192.168.27.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 665 ##############################
+virtual_server_group 192.168.102.11-80-TCP_QLB {
+    192.168.102.11 80
+}
+
+deny_address_group 192.168.102.11_deny {
+}
+
+virtual_server  group 192.168.102.11-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.11_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.11 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.11 bond1.kni;"
+
+    real_server 192.168.6.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 666 ##############################
+virtual_server_group 111.13.235.180-80-TCP_QLB {
+    111.13.235.180 80
+}
+
+deny_address_group 111.13.235.180_deny {
+}
+
+virtual_server  group 111.13.235.180-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.180_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.180 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.180 bond1.kni;"
+
+    real_server 192.168.33.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 667 ##############################
+virtual_server_group 111.13.235.191-80-TCP_QLB {
+    111.13.235.191 80
+}
+
+deny_address_group 111.13.235.191_deny {
+}
+
+virtual_server  group 111.13.235.191-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.191_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.191 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.191 bond1.kni;"
+
+    real_server 192.168.1.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.193 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 668 ##############################
+virtual_server_group 192.168.102.37-80-TCP_QLB {
+    192.168.102.37 80
+}
+
+deny_address_group 192.168.102.37_deny {
+}
+
+virtual_server  group 192.168.102.37-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.37_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.37 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.37 bond1.kni;"
+
+    real_server 192.168.17.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.93 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 669 ##############################
+virtual_server_group 192.168.102.163-80-TCP_QLB {
+    192.168.102.163 80
+}
+
+deny_address_group 192.168.102.163_deny {
+}
+
+virtual_server  group 192.168.102.163-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.163_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.163 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.163 bond1.kni;"
+
+    real_server 192.168.22.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 670 ##############################
+virtual_server_group 192.168.102.64-80-TCP_QLB {
+    192.168.102.64 80
+}
+
+deny_address_group 192.168.102.64_deny {
+}
+
+virtual_server  group 192.168.102.64-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.64_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.64 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.64 bond1.kni;"
+
+    real_server 192.168.22.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 671 ##############################
+virtual_server_group 192.168.102.141-80-TCP_QLB {
+    192.168.102.141 80
+}
+
+deny_address_group 192.168.102.141_deny {
+}
+
+virtual_server  group 192.168.102.141-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.141_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.141 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.141 bond1.kni;"
+
+    real_server 192.168.6.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 672 ##############################
+virtual_server_group 111.13.235.106-80-TCP_QLB {
+    111.13.235.106 80
+}
+
+deny_address_group 111.13.235.106_deny {
+}
+
+virtual_server  group 111.13.235.106-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.106_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.106 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.106 bond1.kni;"
+
+    real_server 192.168.31.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.230 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.125 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.34 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 673 ##############################
+virtual_server_group 111.13.235.164-80-TCP_QLB {
+    111.13.235.164 80
+}
+
+deny_address_group 111.13.235.164_deny {
+}
+
+virtual_server  group 111.13.235.164-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.164_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.164 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.164 bond1.kni;"
+
+    real_server 192.168.42.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 674 ##############################
+virtual_server_group 192.168.101.66-80-TCP_QLB {
+    192.168.101.66 80
+}
+
+deny_address_group 192.168.101.66_deny {
+}
+
+virtual_server  group 192.168.101.66-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.66_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.66 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.66 bond1.kni;"
+
+    real_server 192.168.50.8 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 675 ##############################
+virtual_server_group 192.168.101.193-80-TCP_QLB {
+    192.168.101.193 80
+}
+
+deny_address_group 192.168.101.193_deny {
+}
+
+virtual_server  group 192.168.101.193-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.193_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.193 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.193 bond1.kni;"
+
+    real_server 192.168.54.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.72 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.30 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.77 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.237 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 676 ##############################
+virtual_server_group 192.168.101.176-80-TCP_QLB {
+    192.168.101.176 80
+}
+
+deny_address_group 192.168.101.176_deny {
+}
+
+virtual_server  group 192.168.101.176-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.176_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.176 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.176 bond1.kni;"
+
+    real_server 192.168.3.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.163 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 677 ##############################
+virtual_server_group 192.168.101.2-80-TCP_QLB {
+    192.168.101.2 80
+}
+
+deny_address_group 192.168.101.2_deny {
+}
+
+virtual_server  group 192.168.101.2-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.2_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.2 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.2 bond1.kni;"
+
+    real_server 192.168.55.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 678 ##############################
+virtual_server_group 192.168.102.225-80-TCP_QLB {
+    192.168.102.225 80
+}
+
+deny_address_group 192.168.102.225_deny {
+}
+
+virtual_server  group 192.168.102.225-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.225_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.225 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.225 bond1.kni;"
+
+    real_server 192.168.30.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.46 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.130 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.254 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.120 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.61 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.189 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.161 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.13 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.24 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 679 ##############################
+virtual_server_group 192.168.101.64-80-TCP_QLB {
+    192.168.101.64 80
+}
+
+deny_address_group 192.168.101.64_deny {
+}
+
+virtual_server  group 192.168.101.64-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.64_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.64 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.64 bond1.kni;"
+
+    real_server 192.168.2.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.45 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.218 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 680 ##############################
+virtual_server_group 192.168.101.205-80-TCP_QLB {
+    192.168.101.205 80
+}
+
+deny_address_group 192.168.101.205_deny {
+}
+
+virtual_server  group 192.168.101.205-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.205_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.205 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.205 bond1.kni;"
+
+    real_server 192.168.2.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 681 ##############################
+virtual_server_group 192.168.102.51-80-TCP_QLB {
+    192.168.102.51 80
+}
+
+deny_address_group 192.168.102.51_deny {
+}
+
+virtual_server  group 192.168.102.51-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.51_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.51 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.51 bond1.kni;"
+
+    real_server 192.168.55.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 682 ##############################
+virtual_server_group 192.168.102.193-80-TCP_QLB {
+    192.168.102.193 80
+}
+
+deny_address_group 192.168.102.193_deny {
+}
+
+virtual_server  group 192.168.102.193-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.193_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.193 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.193 bond1.kni;"
+
+    real_server 192.168.5.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 683 ##############################
+virtual_server_group 192.168.101.213-80-TCP_QLB {
+    192.168.101.213 80
+}
+
+deny_address_group 192.168.101.213_deny {
+}
+
+virtual_server  group 192.168.101.213-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.213_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.213 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.213 bond1.kni;"
+
+    real_server 192.168.25.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.124 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.119 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.57 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.176 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.248 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.104 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.73 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.97 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.7 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.43 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.5 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.247 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.111 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.39 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 684 ##############################
+virtual_server_group 192.168.102.4-80-TCP_QLB {
+    192.168.102.4 80
+}
+
+deny_address_group 192.168.102.4_deny {
+}
+
+virtual_server  group 192.168.102.4-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.4_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.4 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.4 bond1.kni;"
+
+    real_server 192.168.5.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.205 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 685 ##############################
+virtual_server_group 111.13.235.134-80-TCP_QLB {
+    111.13.235.134 80
+}
+
+deny_address_group 111.13.235.134_deny {
+}
+
+virtual_server  group 111.13.235.134-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.134_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.134 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.134 bond1.kni;"
+
+    real_server 192.168.1.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.109 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.147 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.66 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 686 ##############################
+virtual_server_group 192.168.101.40-80-TCP_QLB {
+    192.168.101.40 80
+}
+
+deny_address_group 192.168.101.40_deny {
+}
+
+virtual_server  group 192.168.101.40-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.40_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.40 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.40 bond1.kni;"
+
+    real_server 192.168.1.199 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 687 ##############################
+virtual_server_group 192.168.102.58-80-TCP_QLB {
+    192.168.102.58 80
+}
+
+deny_address_group 192.168.102.58_deny {
+}
+
+virtual_server  group 192.168.102.58-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.58_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.58 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.58 bond1.kni;"
+
+    real_server 192.168.53.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.54 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.166 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.63 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 688 ##############################
+virtual_server_group 192.168.101.57-80-TCP_QLB {
+    192.168.101.57 80
+}
+
+deny_address_group 192.168.101.57_deny {
+}
+
+virtual_server  group 192.168.101.57-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.57_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.57 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.57 bond1.kni;"
+
+    real_server 192.168.27.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.214 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.244 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.87 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.232 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.223 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 689 ##############################
+virtual_server_group 192.168.101.112-80-TCP_QLB {
+    192.168.101.112 80
+}
+
+deny_address_group 192.168.101.112_deny {
+}
+
+virtual_server  group 192.168.101.112-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.112_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.112 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.112 bond1.kni;"
+
+    real_server 192.168.47.84 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.110 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.185 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.18 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.174 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.143 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.53 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.141 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.177 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.235 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.127 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.33 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.92 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.56 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.213 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.51 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.106 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.19 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.190 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.102 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.144 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.236 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.201 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.240 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.222 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.122 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.117 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 690 ##############################
+virtual_server_group 111.13.235.143-80-TCP_QLB {
+    111.13.235.143 80
+}
+
+deny_address_group 111.13.235.143_deny {
+}
+
+virtual_server  group 111.13.235.143-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.143_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.143 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.143 bond1.kni;"
+
+    real_server 192.168.6.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.16 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 691 ##############################
+virtual_server_group 192.168.102.227-80-TCP_QLB {
+    192.168.102.227 80
+}
+
+deny_address_group 192.168.102.227_deny {
+}
+
+virtual_server  group 192.168.102.227-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.227_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.227 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.227 bond1.kni;"
+
+    real_server 192.168.55.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 692 ##############################
+virtual_server_group 192.168.101.13-80-TCP_QLB {
+    192.168.101.13 80
+}
+
+deny_address_group 192.168.101.13_deny {
+}
+
+virtual_server  group 192.168.101.13-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.13_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.13 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.13 bond1.kni;"
+
+    real_server 192.168.41.62 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.27 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 693 ##############################
+virtual_server_group 192.168.102.56-80-TCP_QLB {
+    192.168.102.56 80
+}
+
+deny_address_group 192.168.102.56_deny {
+}
+
+virtual_server  group 192.168.102.56-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.56_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.56 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.56 bond1.kni;"
+
+    real_server 192.168.31.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.135 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.132 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.186 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.233 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.155 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.139 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.170 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.188 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 694 ##############################
+virtual_server_group 111.13.235.65-80-TCP_QLB {
+    111.13.235.65 80
+}
+
+deny_address_group 111.13.235.65_deny {
+}
+
+virtual_server  group 111.13.235.65-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.65_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.65 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.65 bond1.kni;"
+
+    real_server 192.168.5.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.158 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 695 ##############################
+virtual_server_group 192.168.102.87-80-TCP_QLB {
+    192.168.102.87 80
+}
+
+deny_address_group 192.168.102.87_deny {
+}
+
+virtual_server  group 192.168.102.87-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.87_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.87 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.87 bond1.kni;"
+
+    real_server 192.168.47.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.216 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.224 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.241 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.49 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.6 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.207 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.195 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.113 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.88 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.226 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.58 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.164 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.38 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.115 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.220 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.200 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 696 ##############################
+virtual_server_group 111.13.235.219-80-TCP_QLB {
+    111.13.235.219 80
+}
+
+deny_address_group 111.13.235.219_deny {
+}
+
+virtual_server  group 111.13.235.219-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.219_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.219 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.219 bond1.kni;"
+
+    real_server 192.168.37.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.245 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.21 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.89 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.172 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.168 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 697 ##############################
+virtual_server_group 111.13.235.198-80-TCP_QLB {
+    111.13.235.198 80
+}
+
+deny_address_group 111.13.235.198_deny {
+}
+
+virtual_server  group 111.13.235.198-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.198_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.198 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.198 bond1.kni;"
+
+    real_server 192.168.30.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 698 ##############################
+virtual_server_group 192.168.102.48-80-TCP_QLB {
+    192.168.102.48 80
+}
+
+deny_address_group 192.168.102.48_deny {
+}
+
+virtual_server  group 192.168.102.48-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.48_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.48 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.48 bond1.kni;"
+
+    real_server 192.168.35.3 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.253 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 699 ##############################
+virtual_server_group 192.168.101.168-80-TCP_QLB {
+    192.168.101.168 80
+}
+
+deny_address_group 192.168.101.168_deny {
+}
+
+virtual_server  group 192.168.101.168-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.168_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.168 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.168 bond1.kni;"
+
+    real_server 192.168.30.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.154 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.17 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.10 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 700 ##############################
+virtual_server_group 192.168.102.136-80-TCP_QLB {
+    192.168.102.136 80
+}
+
+deny_address_group 192.168.102.136_deny {
+}
+
+virtual_server  group 192.168.102.136-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.102.136_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.136 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.136 bond1.kni;"
+
+    real_server 192.168.14.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.128 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.160 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.25 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.95 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.118 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 701 ##############################
+virtual_server_group 111.13.235.166-80-TCP_QLB {
+    111.13.235.166 80
+}
+
+deny_address_group 111.13.235.166_deny {
+}
+
+virtual_server  group 111.13.235.166-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 111.13.235.166_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.166 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.166 bond1.kni;"
+
+    real_server 192.168.59.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.98 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.242 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+############################## 702 ##############################
+virtual_server_group 192.168.101.204-80-TCP_QLB {
+    192.168.101.204 80
+}
+
+deny_address_group 192.168.101.204_deny {
+}
+
+virtual_server  group 192.168.101.204-80-TCP_QLB {
+    delay_loop 3
+    lb_algo rr
+    lb_kind FNAT
+    protocol TCP
+
+    daddr_group_name 192.168.101.204_deny
+
+    syn_proxy
+    laddr_group_name laddr_g1
+
+    omega
+    quorum 1
+    hysteresis 0
+    alpha
+    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.204 bond1.kni;"
+    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.204 bond1.kni;"
+
+    real_server 192.168.21.82 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.148 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.145 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.42 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.37 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.47 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.159 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.209 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.215 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.81 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.26 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.126 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.198 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.149 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.146 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.234 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.204 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.2 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.239 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.134 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.99 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.55 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.121 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.79 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.48 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.28 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.156 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.251 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.94 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.181 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.20 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.136 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.252 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.11 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.36 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.219 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.197 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.178 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.196 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.44 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.19.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.150 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.68 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.210 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.105 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.65 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.31 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.107 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.90 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.11.191 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.184 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.64 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.13.142 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.157 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.71 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.169 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.231 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.162 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.212 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.151 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.57.112 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.91 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.74 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.192 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.2.35 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.123 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.203 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.41 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.47.227 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.12 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.75 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.43.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.15.1 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.69 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.206 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.250 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.45.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.67 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.187 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.60 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.229 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.165 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.33.76 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.167 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.10.173 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.228 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.40 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.46.103 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.100 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.137 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.171 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.50 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.211 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.27.15 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.42.221 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.152 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.50.133 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.23.249 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.208 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.80 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.25.179 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.58.246 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.114 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.17.52 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.29.85 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.49.116 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.30.78 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.32 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.53.129 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.5.22 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.35.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.21.29 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.26.183 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.22.243 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.7.225 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.108 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.37.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.51.70 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.9.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.59.217 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.14.202 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.38.175 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.41.59 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.1.140 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.54.182 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.18.14 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.3.153 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.6.238 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.55.131 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.39.101 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.34.23 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+
+    real_server 192.168.31.138 80 {
+        weight 100
+        inhibit_on_failure
+        TCP_CHECK {
+            nb_sock_retry 2
+            connect_timeout 3
+            connect_port 80
+        }
+    }
+}
+
diff --git a/tools/keepalived/lib/.gitignore b/tools/keepalived/lib/.gitignore
new file mode 100644
index 000000000..b6b28c028
--- /dev/null
+++ b/tools/keepalived/lib/.gitignore
@@ -0,0 +1,4 @@
+git-commit.h
+# config.h.in
+config.h
+config_warnings.h
diff --git a/tools/keepalived/lib/Makefile.am b/tools/keepalived/lib/Makefile.am
new file mode 100644
index 000000000..1326d561f
--- /dev/null
+++ b/tools/keepalived/lib/Makefile.am
@@ -0,0 +1,100 @@
+# Makefile.am
+#
+# Keepalived OpenSource project.
+#
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+GIT_COMMIT_FILE		= git-commit.h
+
+AM_CPPFLAGS		= $(KA_CPPFLAGS) $(DEBUG_CPPFLAGS)
+AM_CFLAGS		= $(KA_CFLAGS) $(DEBUG_CFLAGS)
+AM_LDFLAGS		= $(KA_LDFLAGS) $(DEBUG_LDFLAGS)
+# AM_LIBS		= $(KA_LIBS)
+# AM_LIBTOOLFLAGS	= $(KA_LIBTOOLFLAGS)
+BUILT_SOURCES		= $(GIT_COMMIT_FILE)
+
+noinst_LIBRARIES	= liblib.a
+
+liblib_a_SOURCES	= memory.c utils.c notify.c timer.c scheduler.c \
+			  vector.c list.c html.c parser.c signals.c logger.c \
+			  list_head.c rbtree.c process.c json_writer.c \
+			  bitops.h timer.h scheduler.h vector.h parser.h \
+			  signals.h notify.h logger.h list.h memory.h html.h utils.h \
+			  keepalived_magic.h list_head.h rbtree.h process.h \
+			  rbtree_augmented.h assert_debug.h json_writer.h \
+			  warnings.h container.h
+
+liblib_a_LIBADD		=
+EXTRA_liblib_a_SOURCES	=
+
+if WITH_VRRP
+  liblib_a_LIBADD	+= rttables.o
+  EXTRA_liblib_a_SOURCES += rttables.c rttables.h
+endif
+
+if ! SOCK_NONBLOCK
+  liblib_a_LIBADD	+= old_socket.o
+  EXTRA_liblib_a_SOURCES += old_socket.c old_socket.h
+endif
+
+if ASSERTS
+  liblib_a_LIBADD	+= assert.o
+  EXTRA_liblib_a_SOURCES += assert.c old_socket.h
+endif
+
+EXTRA_DIST		= $(GIT_COMMIT_FILE)
+
+MAINTAINERCLEANFILES	= @MAINTAINERCLEANFILES@
+
+CLEANFILES		= $(GIT_COMMIT_FILE)
+
+FORCE:
+
+# The git commit file will contain the git version and date of last commit,
+# unless this is a tagged version, in which case the git commit is omitted.
+# If there have been any local modifications, '+' is appended to the git
+# version.
+# The one file that needs to be ignored is deletion of snap/snapcraft.yaml,
+# since in a snapcraft build that file is deleted
+# (see https://bugs.launchpad.net/snapcraft/+bug/1662388).
+$(GIT_COMMIT_FILE): FORCE
+	@if [ ! -f $(srcdir)/$@ -a ! -f $@ ]; then \
+		echo '#define GIT_DATE	"unknown"' >$@; \
+		echo "#define GIT_YEAR	\"`date +%Y`\"" >>$@; \
+	fi; \
+	if [ -x `type -p git` ]; then \
+		cd $(srcdir); \
+		git rev-parse --is-inside-work-tree >/dev/null 2>&1; \
+		if [ $$? -eq 0 ]; then \
+			GIT_REV=`git describe --tags`; \
+			GIT_TIMESTAMP=`git log -1 --format=%ct`; \
+			GIT_DATE=`date -d "1970-01-01 UTC $${GIT_TIMESTAMP} seconds" +"%m/%d,%Y"`; \
+			if test -n "$${GIT_DATE}"; then \
+				GIT_YEAR=`date -d "1970-01-01 UTC $${GIT_TIMESTAMP} seconds" +"%Y"`; \
+			else \
+				GIT_DATE=`git log -1 --date=iso | grep Date: | sed -e "s/^[^ ]* *\(....\)-\(..\)-\(..\).*/\2\/\3,\1/"`; \
+				GIT_YEAR=`echo $${GIT_DATE} | sed -e "s/.*,//"`; \
+			fi; \
+			if [ "`git status --porcelain | \
+			       grep -v '^??' | \
+			       grep -v "^ D snap/snapcraft.yaml" | \
+			       wc -l`" -ne 0 ]; then \
+				EXTRA="+"; \
+			else \
+				EXTRA=""; \
+			fi; \
+			echo $${GIT_REV} | grep -qE -- "-[1-9][0-9]*-g[0-9a-f]{7,}$$"; \
+			if [ $$? -eq 0 -o -n "$${EXTRA}" ]; then \
+				echo "#define GIT_COMMIT \"$${GIT_REV}$${EXTRA}\"" >$(abs_builddir)/$@.new; \
+			fi; \
+			echo "#define GIT_DATE \"$${GIT_DATE}\"" >>$(abs_builddir)/$@.new; \
+			echo "#define GIT_YEAR \"$${GIT_YEAR}\"" >>$(abs_builddir)/$@.new; \
+			diff -q $(abs_builddir)/$@ $(abs_builddir)/$@.new 2>/dev/null >/dev/null; \
+			if [ $$? -eq 0 ]; then \
+				rm $(abs_builddir)/$@.new; \
+			else \
+				mv $(abs_builddir)/$@.new $(abs_builddir)/$@; \
+			fi; \
+		fi; \
+		cd $(abs_builddir); \
+	fi
diff --git a/tools/keepalived/lib/Makefile.in b/tools/keepalived/lib/Makefile.in
index ee4691f94..1269ddb4a 100644
--- a/tools/keepalived/lib/Makefile.in
+++ b/tools/keepalived/lib/Makefile.in
@@ -1,47 +1,675 @@
-# Makefile
+# Makefile.in generated by automake 1.13.4 from Makefile.am.
+# @configure_input@
+
+# Copyright (C) 1994-2013 Free Software Foundation, Inc.
+
+# This Makefile.in is free software; the Free Software Foundation
+# gives unlimited permission to copy and/or distribute it,
+# with or without modifications, as long as this notice is preserved.
+
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
+# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
+# PARTICULAR PURPOSE.
+
+@SET_MAKE@
+
+# Makefile.am
 #
 # Keepalived OpenSource project.
 #
-# Copyright (C) 2001-2011 Alexandre Cassen, <acassen@linux-vs.org>
+# Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+
+VPATH = @srcdir@
+am__is_gnu_make = test -n '$(MAKEFILE_LIST)' && test -n '$(MAKELEVEL)'
+am__make_running_with_option = \
+  case $${target_option-} in \
+      ?) ;; \
+      *) echo "am__make_running_with_option: internal error: invalid" \
+              "target option '$${target_option-}' specified" >&2; \
+         exit 1;; \
+  esac; \
+  has_opt=no; \
+  sane_makeflags=$$MAKEFLAGS; \
+  if $(am__is_gnu_make); then \
+    sane_makeflags=$$MFLAGS; \
+  else \
+    case $$MAKEFLAGS in \
+      *\\[\ \	]*) \
+        bs=\\; \
+        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
+          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
+    esac; \
+  fi; \
+  skip_next=no; \
+  strip_trailopt () \
+  { \
+    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
+  }; \
+  for flg in $$sane_makeflags; do \
+    test $$skip_next = yes && { skip_next=no; continue; }; \
+    case $$flg in \
+      *=*|--*) continue;; \
+        -*I) strip_trailopt 'I'; skip_next=yes;; \
+      -*I?*) strip_trailopt 'I';; \
+        -*O) strip_trailopt 'O'; skip_next=yes;; \
+      -*O?*) strip_trailopt 'O';; \
+        -*l) strip_trailopt 'l'; skip_next=yes;; \
+      -*l?*) strip_trailopt 'l';; \
+      -[dEDm]) skip_next=yes;; \
+      -[JT]) skip_next=yes;; \
+    esac; \
+    case $$flg in \
+      *$$target_option*) has_opt=yes; break;; \
+    esac; \
+  done; \
+  test $$has_opt = yes
+am__make_dryrun = (target_option=n; $(am__make_running_with_option))
+am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
+pkgdatadir = $(datadir)/@PACKAGE@
+pkgincludedir = $(includedir)/@PACKAGE@
+pkglibdir = $(libdir)/@PACKAGE@
+pkglibexecdir = $(libexecdir)/@PACKAGE@
+am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
+install_sh_DATA = $(install_sh) -c -m 644
+install_sh_PROGRAM = $(install_sh) -c
+install_sh_SCRIPT = $(install_sh) -c
+INSTALL_HEADER = $(INSTALL_DATA)
+transform = $(program_transform_name)
+NORMAL_INSTALL = :
+PRE_INSTALL = :
+POST_INSTALL = :
+NORMAL_UNINSTALL = :
+PRE_UNINSTALL = :
+POST_UNINSTALL = :
+@WITH_VRRP_TRUE@am__append_1 = rttables.o
+@WITH_VRRP_TRUE@am__append_2 = rttables.c rttables.h
+@SOCK_NONBLOCK_FALSE@am__append_3 = old_socket.o
+@SOCK_NONBLOCK_FALSE@am__append_4 = old_socket.c old_socket.h
+@ASSERTS_TRUE@am__append_5 = assert.o
+@ASSERTS_TRUE@am__append_6 = assert.c old_socket.h
+subdir = lib
+DIST_COMMON = $(srcdir)/Makefile.in $(srcdir)/Makefile.am \
+	$(srcdir)/config.h.in $(srcdir)/config_warnings.h.in \
+	$(top_srcdir)/depcomp
+ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
+am__aclocal_m4_deps = $(top_srcdir)/configure.ac
+am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
+	$(ACLOCAL_M4)
+mkinstalldirs = $(install_sh) -d
+CONFIG_HEADER = config.h config_warnings.h
+CONFIG_CLEAN_FILES =
+CONFIG_CLEAN_VPATH_FILES =
+LIBRARIES = $(noinst_LIBRARIES)
+AM_V_AR = $(am__v_AR_@AM_V@)
+am__v_AR_ = $(am__v_AR_@AM_DEFAULT_V@)
+am__v_AR_0 = @echo "  AR      " $@;
+am__v_AR_1 = 
+liblib_a_AR = $(AR) $(ARFLAGS)
+liblib_a_DEPENDENCIES = $(am__append_1) $(am__append_3) \
+	$(am__append_5)
+am_liblib_a_OBJECTS = memory.$(OBJEXT) utils.$(OBJEXT) \
+	notify.$(OBJEXT) timer.$(OBJEXT) scheduler.$(OBJEXT) \
+	vector.$(OBJEXT) list.$(OBJEXT) html.$(OBJEXT) \
+	parser.$(OBJEXT) signals.$(OBJEXT) logger.$(OBJEXT) \
+	list_head.$(OBJEXT) rbtree.$(OBJEXT) process.$(OBJEXT) \
+	json_writer.$(OBJEXT)
+am__EXTRA_liblib_a_SOURCES_DIST = rttables.c rttables.h old_socket.c \
+	old_socket.h assert.c
+liblib_a_OBJECTS = $(am_liblib_a_OBJECTS)
+AM_V_P = $(am__v_P_@AM_V@)
+am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
+am__v_P_0 = false
+am__v_P_1 = :
+AM_V_GEN = $(am__v_GEN_@AM_V@)
+am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
+am__v_GEN_0 = @echo "  GEN     " $@;
+am__v_GEN_1 = 
+AM_V_at = $(am__v_at_@AM_V@)
+am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
+am__v_at_0 = @
+am__v_at_1 = 
+DEFAULT_INCLUDES = -I.@am__isrc@
+depcomp = $(SHELL) $(top_srcdir)/depcomp
+am__depfiles_maybe = depfiles
+am__mv = mv -f
+COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \
+	$(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
+AM_V_CC = $(am__v_CC_@AM_V@)
+am__v_CC_ = $(am__v_CC_@AM_DEFAULT_V@)
+am__v_CC_0 = @echo "  CC      " $@;
+am__v_CC_1 = 
+CCLD = $(CC)
+LINK = $(CCLD) $(AM_CFLAGS) $(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -o $@
+AM_V_CCLD = $(am__v_CCLD_@AM_V@)
+am__v_CCLD_ = $(am__v_CCLD_@AM_DEFAULT_V@)
+am__v_CCLD_0 = @echo "  CCLD    " $@;
+am__v_CCLD_1 = 
+SOURCES = $(liblib_a_SOURCES) $(EXTRA_liblib_a_SOURCES)
+DIST_SOURCES = $(liblib_a_SOURCES) $(am__EXTRA_liblib_a_SOURCES_DIST)
+am__can_run_installinfo = \
+  case $$AM_UPDATE_INFO_DIR in \
+    n|no|NO) false;; \
+    *) (install-info --version) >/dev/null 2>&1;; \
+  esac
+am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) \
+	$(LISP)config.h.in config_warnings.h.in
+# Read a list of newline-separated strings from the standard input,
+# and print each of them once, without duplicates.  Input order is
+# *not* preserved.
+am__uniquify_input = $(AWK) '\
+  BEGIN { nonempty = 0; } \
+  { items[$$0] = 1; nonempty = 1; } \
+  END { if (nonempty) { for (i in items) print i; }; } \
+'
+# Make sure the list of sources is unique.  This is necessary because,
+# e.g., the same source file might be shared among _SOURCES variables
+# for different programs/libraries.
+am__define_uniq_tagged_files = \
+  list='$(am__tagged_files)'; \
+  unique=`for i in $$list; do \
+    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
+  done | $(am__uniquify_input)`
+ETAGS = etags
+CTAGS = ctags
+DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
+ACLOCAL = @ACLOCAL@
+AMTAR = @AMTAR@
+AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
+AR = @AR@
+ARFLAGS = @ARFLAGS@
+AUTOCONF = @AUTOCONF@
+AUTOHEADER = @AUTOHEADER@
+AUTOMAKE = @AUTOMAKE@
+AWK = @AWK@
+CC = @CC@
+CCDEPMODE = @CCDEPMODE@
+CFLAGS = @CFLAGS@
+CPP = @CPP@
+CPPFLAGS = @CPPFLAGS@
+CYGPATH_W = @CYGPATH_W@
+DEFAULT_CONFIG_FILE = @DEFAULT_CONFIG_FILE@
+DEFS = @DEFS@
+DEPDIR = @DEPDIR@
+ECHO_C = @ECHO_C@
+ECHO_N = @ECHO_N@
+ECHO_T = @ECHO_T@
+EGREP = @EGREP@
+EXEEXT = @EXEEXT@
+GENHASH_LIBS = @GENHASH_LIBS@
+GREP = @GREP@
+HAVE_RPM = @HAVE_RPM@
+HAVE_RPMBUILD = @HAVE_RPMBUILD@
+HAVE_SPHINX_BUILD = @HAVE_SPHINX_BUILD@
+INSTALL = @INSTALL@
+INSTALL_DATA = @INSTALL_DATA@
+INSTALL_PROGRAM = @INSTALL_PROGRAM@
+INSTALL_SCRIPT = @INSTALL_SCRIPT@
+INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
+KA_CFLAGS = @KA_CFLAGS@
+KA_CPPFLAGS = @KA_CPPFLAGS@
+KA_LDFLAGS = @KA_LDFLAGS@
+KA_LIBS = @KA_LIBS@
+LDD = @LDD@
+LDFLAGS = @LDFLAGS@
+LIBOBJS = @LIBOBJS@
+LIBS = @LIBS@
+LN_S = @LN_S@
+LTLIBOBJS = @LTLIBOBJS@
+MAINTAINERCLEANFILES = @MAINTAINERCLEANFILES@
+MAKEINFO = @MAKEINFO@
+MKDIR_P = @MKDIR_P@
+NETSNMP_CONFIG = @NETSNMP_CONFIG@
+OBJEXT = @OBJEXT@
+PACKAGE = @PACKAGE@
+PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
+PACKAGE_NAME = @PACKAGE_NAME@
+PACKAGE_STRING = @PACKAGE_STRING@
+PACKAGE_TARNAME = @PACKAGE_TARNAME@
+PACKAGE_URL = @PACKAGE_URL@
+PACKAGE_VERSION = @PACKAGE_VERSION@
+PATH_SEPARATOR = @PATH_SEPARATOR@
+PID_DIR = @PID_DIR@
+PKG_CONFIG = @PKG_CONFIG@
+PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
+PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
+RANLIB = @RANLIB@
+SED = @SED@
+SET_MAKE = @SET_MAKE@
+SHELL = @SHELL@
+SNMP_SERVICE = @SNMP_SERVICE@
+SPHINXBUILDNAME = @SPHINXBUILDNAME@
+STRIP = @STRIP@
+VERSION = @VERSION@
+abs_builddir = @abs_builddir@
+abs_srcdir = @abs_srcdir@
+abs_top_builddir = @abs_top_builddir@
+abs_top_srcdir = @abs_top_srcdir@
+ac_ct_AR = @ac_ct_AR@
+ac_ct_CC = @ac_ct_CC@
+am__include = @am__include@
+am__leading_dot = @am__leading_dot@
+am__quote = @am__quote@
+am__tar = @am__tar@
+am__untar = @am__untar@
+bindir = @bindir@
+build_alias = @build_alias@
+builddir = @builddir@
+datadir = @datadir@
+datarootdir = @datarootdir@
+docdir = @docdir@
+dvidir = @dvidir@
+exec_prefix = @exec_prefix@
+host_alias = @host_alias@
+htmldir = @htmldir@
+includedir = @includedir@
+infodir = @infodir@
+install_sh = @install_sh@
+libdir = @libdir@
+libexecdir = @libexecdir@
+localedir = @localedir@
+localstatedir = @localstatedir@
+mandir = @mandir@
+mkdir_p = @mkdir_p@
+oldincludedir = @oldincludedir@
+pdfdir = @pdfdir@
+prefix = @prefix@
+program_transform_name = @program_transform_name@
+psdir = @psdir@
+sbindir = @sbindir@
+sharedstatedir = @sharedstatedir@
+srcdir = @srcdir@
+sysconfdir = @sysconfdir@
+systemdsystemunitdir = @systemdsystemunitdir@
+target_alias = @target_alias@
+top_build_prefix = @top_build_prefix@
+top_builddir = @top_builddir@
+top_srcdir = @top_srcdir@
+GIT_COMMIT_FILE = git-commit.h
+AM_CPPFLAGS = $(KA_CPPFLAGS) $(DEBUG_CPPFLAGS)
+AM_CFLAGS = $(KA_CFLAGS) $(DEBUG_CFLAGS)
+AM_LDFLAGS = $(KA_LDFLAGS) $(DEBUG_LDFLAGS)
+# AM_LIBS		= $(KA_LIBS)
+# AM_LIBTOOLFLAGS	= $(KA_LIBTOOLFLAGS)
+BUILT_SOURCES = $(GIT_COMMIT_FILE)
+noinst_LIBRARIES = liblib.a
+liblib_a_SOURCES = memory.c utils.c notify.c timer.c scheduler.c \
+			  vector.c list.c html.c parser.c signals.c logger.c \
+			  list_head.c rbtree.c process.c json_writer.c \
+			  bitops.h timer.h scheduler.h vector.h parser.h \
+			  signals.h notify.h logger.h list.h memory.h html.h utils.h \
+			  keepalived_magic.h list_head.h rbtree.h process.h \
+			  rbtree_augmented.h assert_debug.h json_writer.h \
+			  warnings.h container.h
+
+liblib_a_LIBADD = $(am__append_1) $(am__append_3) $(am__append_5)
+EXTRA_liblib_a_SOURCES = $(am__append_2) $(am__append_4) \
+	$(am__append_6)
+EXTRA_DIST = $(GIT_COMMIT_FILE)
+CLEANFILES = $(GIT_COMMIT_FILE)
+all: $(BUILT_SOURCES) config.h config_warnings.h
+	$(MAKE) $(AM_MAKEFLAGS) all-am
+
+.SUFFIXES:
+.SUFFIXES: .c .o .obj
+$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
+	@for dep in $?; do \
+	  case '$(am__configure_deps)' in \
+	    *$$dep*) \
+	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
+	        && { if test -f $@; then exit 0; else break; fi; }; \
+	      exit 1;; \
+	  esac; \
+	done; \
+	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign lib/Makefile'; \
+	$(am__cd) $(top_srcdir) && \
+	  $(AUTOMAKE) --foreign lib/Makefile
+.PRECIOUS: Makefile
+Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
+	@case '$?' in \
+	  *config.status*) \
+	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
+	  *) \
+	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe)'; \
+	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe);; \
+	esac;
+
+$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+
+$(top_srcdir)/configure:  $(am__configure_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
+	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
+$(am__aclocal_m4_deps):
+
+config.h: stamp-h1
+	@if test ! -f $@; then rm -f stamp-h1; else :; fi
+	@if test ! -f $@; then $(MAKE) $(AM_MAKEFLAGS) stamp-h1; else :; fi
+
+stamp-h1: $(srcdir)/config.h.in $(top_builddir)/config.status
+	@rm -f stamp-h1
+	cd $(top_builddir) && $(SHELL) ./config.status lib/config.h
+$(srcdir)/config.h.in:  $(am__configure_deps) 
+	($(am__cd) $(top_srcdir) && $(AUTOHEADER))
+	rm -f stamp-h1
+	touch $@
+
+config_warnings.h: stamp-h2
+	@if test ! -f $@; then rm -f stamp-h2; else :; fi
+	@if test ! -f $@; then $(MAKE) $(AM_MAKEFLAGS) stamp-h2; else :; fi
+
+stamp-h2: $(srcdir)/config_warnings.h.in $(top_builddir)/config.status
+	@rm -f stamp-h2
+	cd $(top_builddir) && $(SHELL) ./config.status lib/config_warnings.h
+
+distclean-hdr:
+	-rm -f config.h stamp-h1 config_warnings.h stamp-h2
+
+clean-noinstLIBRARIES:
+	-test -z "$(noinst_LIBRARIES)" || rm -f $(noinst_LIBRARIES)
+
+liblib.a: $(liblib_a_OBJECTS) $(liblib_a_DEPENDENCIES) $(EXTRA_liblib_a_DEPENDENCIES) 
+	$(AM_V_at)-rm -f liblib.a
+	$(AM_V_AR)$(liblib_a_AR) liblib.a $(liblib_a_OBJECTS) $(liblib_a_LIBADD)
+	$(AM_V_at)$(RANLIB) liblib.a
 
-CC	 = @CC@
-INCLUDES = -I.
-CFLAGS	 = @CFLAGS@ $(INCLUDES) \
-	   -Wall -Wunused -Wstrict-prototypes
-DEFS	 = @DFLAGS@ -D@SNMP_SUPPORT@
-COMPILE	 = $(CC) $(CFLAGS) $(DEFS)
+mostlyclean-compile:
+	-rm -f *.$(OBJEXT)
 
-OBJS = 	memory.o utils.o notify.o timer.o scheduler.o \
-	vector.o list.o html.o parser.o signals.o logger.o \
-	list_head.o buffer.o command.o vty.o
-HEADERS = $(OBJS:.o=.h)
+distclean-compile:
+	-rm -f *.tab.c
+
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/assert.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/html.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/json_writer.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/list.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/list_head.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/logger.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/memory.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/notify.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/old_socket.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/parser.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/process.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/rbtree.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/rttables.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/scheduler.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/signals.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/timer.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/utils.Po@am__quote@
+@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/vector.Po@am__quote@
 
 .c.o:
-	$(COMPILE) -c $<
-
-all:	$(OBJS)
-
-clean:
-	rm -f *.a *.o *~
-
-distclean: clean
-	rm -f config.h
-	rm -f Makefile
-
-memory.o: memory.c memory.h utils.h
-utils.o: utils.c utils.h
-notify.o: notify.c notify.h
-timer.o: timer.c timer.h
-scheduler.o: scheduler.c scheduler.h memory.h utils.h
-vector.o: vector.c vector.h memory.h
-list.o: list.c list.h memory.h
-html.o: html.c html.h memory.h
-parser.o: parser.c parser.h memory.h
-signals.o: signals.c signals.h
-logger.o: logger.c logger.h
-list_head.o: list_head.c list_head.h
-buffer.o: buffer.c buffer.h memory.h
-command.o: command.c command.h vector.h memory.h vty.h timer.h \
-	config.h logger.h
-vty.o: vty.c vty.h scheduler.h timer.h utils.h command.h logger.h \
-	memory.h
+@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
+@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c $<
+
+.c.obj:
+@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ `$(CYGPATH_W) '$<'`
+@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
+@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
+@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c `$(CYGPATH_W) '$<'`
+
+ID: $(am__tagged_files)
+	$(am__define_uniq_tagged_files); mkid -fID $$unique
+tags: tags-am
+TAGS: tags
+
+tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	set x; \
+	here=`pwd`; \
+	$(am__define_uniq_tagged_files); \
+	shift; \
+	if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
+	  test -n "$$unique" || unique=$$empty_fix; \
+	  if test $$# -gt 0; then \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      "$$@" $$unique; \
+	  else \
+	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
+	      $$unique; \
+	  fi; \
+	fi
+ctags: ctags-am
+
+CTAGS: ctags
+ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
+	$(am__define_uniq_tagged_files); \
+	test -z "$(CTAGS_ARGS)$$unique" \
+	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
+	     $$unique
+
+GTAGS:
+	here=`$(am__cd) $(top_builddir) && pwd` \
+	  && $(am__cd) $(top_srcdir) \
+	  && gtags -i $(GTAGS_ARGS) "$$here"
+cscopelist: cscopelist-am
+
+cscopelist-am: $(am__tagged_files)
+	list='$(am__tagged_files)'; \
+	case "$(srcdir)" in \
+	  [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
+	  *) sdir=$(subdir)/$(srcdir) ;; \
+	esac; \
+	for i in $$list; do \
+	  if test -f "$$i"; then \
+	    echo "$(subdir)/$$i"; \
+	  else \
+	    echo "$$sdir/$$i"; \
+	  fi; \
+	done >> $(top_builddir)/cscope.files
+
+distclean-tags:
+	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
+
+distdir: $(DISTFILES)
+	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
+	list='$(DISTFILES)'; \
+	  dist_files=`for file in $$list; do echo $$file; done | \
+	  sed -e "s|^$$srcdirstrip/||;t" \
+	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
+	case $$dist_files in \
+	  */*) $(MKDIR_P) `echo "$$dist_files" | \
+			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
+			   sort -u` ;; \
+	esac; \
+	for file in $$dist_files; do \
+	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
+	  if test -d $$d/$$file; then \
+	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
+	    if test -d "$(distdir)/$$file"; then \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
+	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
+	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
+	    fi; \
+	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
+	  else \
+	    test -f "$(distdir)/$$file" \
+	    || cp -p $$d/$$file "$(distdir)/$$file" \
+	    || exit 1; \
+	  fi; \
+	done
+check-am: all-am
+check: $(BUILT_SOURCES)
+	$(MAKE) $(AM_MAKEFLAGS) check-am
+all-am: Makefile $(LIBRARIES) config.h config_warnings.h
+installdirs:
+install: $(BUILT_SOURCES)
+	$(MAKE) $(AM_MAKEFLAGS) install-am
+install-exec: install-exec-am
+install-data: install-data-am
+uninstall: uninstall-am
+
+install-am: all-am
+	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
+
+installcheck: installcheck-am
+install-strip:
+	if test -z '$(STRIP)'; then \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	      install; \
+	else \
+	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
+	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
+	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
+	fi
+mostlyclean-generic:
+
+clean-generic:
+	-test -z "$(CLEANFILES)" || rm -f $(CLEANFILES)
+
+distclean-generic:
+	-test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES)
+	-test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES)
+
+maintainer-clean-generic:
+	@echo "This command is intended for maintainers to use"
+	@echo "it deletes files that may require special tools to rebuild."
+	-test -z "$(BUILT_SOURCES)" || rm -f $(BUILT_SOURCES)
+	-test -z "$(MAINTAINERCLEANFILES)" || rm -f $(MAINTAINERCLEANFILES)
+clean: clean-am
+
+clean-am: clean-generic clean-noinstLIBRARIES mostlyclean-am
+
+distclean: distclean-am
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+distclean-am: clean-am distclean-compile distclean-generic \
+	distclean-hdr distclean-tags
+
+dvi: dvi-am
+
+dvi-am:
+
+html: html-am
+
+html-am:
+
+info: info-am
+
+info-am:
+
+install-data-am:
+
+install-dvi: install-dvi-am
+
+install-dvi-am:
+
+install-exec-am:
+
+install-html: install-html-am
+
+install-html-am:
+
+install-info: install-info-am
+
+install-info-am:
+
+install-man:
+
+install-pdf: install-pdf-am
+
+install-pdf-am:
+
+install-ps: install-ps-am
+
+install-ps-am:
+
+installcheck-am:
+
+maintainer-clean: maintainer-clean-am
+	-rm -rf ./$(DEPDIR)
+	-rm -f Makefile
+maintainer-clean-am: distclean-am maintainer-clean-generic
+
+mostlyclean: mostlyclean-am
+
+mostlyclean-am: mostlyclean-compile mostlyclean-generic
+
+pdf: pdf-am
+
+pdf-am:
+
+ps: ps-am
+
+ps-am:
+
+uninstall-am:
+
+.MAKE: all check install install-am install-strip
+
+.PHONY: CTAGS GTAGS TAGS all all-am check check-am clean clean-generic \
+	clean-noinstLIBRARIES cscopelist-am ctags ctags-am distclean \
+	distclean-compile distclean-generic distclean-hdr \
+	distclean-tags distdir dvi dvi-am html html-am info info-am \
+	install install-am install-data install-data-am install-dvi \
+	install-dvi-am install-exec install-exec-am install-html \
+	install-html-am install-info install-info-am install-man \
+	install-pdf install-pdf-am install-ps install-ps-am \
+	install-strip installcheck installcheck-am installdirs \
+	maintainer-clean maintainer-clean-generic mostlyclean \
+	mostlyclean-compile mostlyclean-generic pdf pdf-am ps ps-am \
+	tags tags-am uninstall uninstall-am
+
+
+FORCE:
+
+# The git commit file will contain the git version and date of last commit,
+# unless this is a tagged version, in which case the git commit is omitted.
+# If there have been any local modifications, '+' is appended to the git
+# version.
+# The one file that needs to be ignored is deletion of snap/snapcraft.yaml,
+# since in a snapcraft build that file is deleted
+# (see https://bugs.launchpad.net/snapcraft/+bug/1662388).
+$(GIT_COMMIT_FILE): FORCE
+	@if [ ! -f $(srcdir)/$@ -a ! -f $@ ]; then \
+		echo '#define GIT_DATE	"unknown"' >$@; \
+		echo "#define GIT_YEAR	\"`date +%Y`\"" >>$@; \
+	fi; \
+	if [ -x `type -p git` ]; then \
+		cd $(srcdir); \
+		git rev-parse --is-inside-work-tree >/dev/null 2>&1; \
+		if [ $$? -eq 0 ]; then \
+			GIT_REV=`git describe --tags`; \
+			GIT_TIMESTAMP=`git log -1 --format=%ct`; \
+			GIT_DATE=`date -d "1970-01-01 UTC $${GIT_TIMESTAMP} seconds" +"%m/%d,%Y"`; \
+			if test -n "$${GIT_DATE}"; then \
+				GIT_YEAR=`date -d "1970-01-01 UTC $${GIT_TIMESTAMP} seconds" +"%Y"`; \
+			else \
+				GIT_DATE=`git log -1 --date=iso | grep Date: | sed -e "s/^[^ ]* *\(....\)-\(..\)-\(..\).*/\2\/\3,\1/"`; \
+				GIT_YEAR=`echo $${GIT_DATE} | sed -e "s/.*,//"`; \
+			fi; \
+			if [ "`git status --porcelain | \
+			       grep -v '^??' | \
+			       grep -v "^ D snap/snapcraft.yaml" | \
+			       wc -l`" -ne 0 ]; then \
+				EXTRA="+"; \
+			else \
+				EXTRA=""; \
+			fi; \
+			echo $${GIT_REV} | grep -qE -- "-[1-9][0-9]*-g[0-9a-f]{7,}$$"; \
+			if [ $$? -eq 0 -o -n "$${EXTRA}" ]; then \
+				echo "#define GIT_COMMIT \"$${GIT_REV}$${EXTRA}\"" >$(abs_builddir)/$@.new; \
+			fi; \
+			echo "#define GIT_DATE \"$${GIT_DATE}\"" >>$(abs_builddir)/$@.new; \
+			echo "#define GIT_YEAR \"$${GIT_YEAR}\"" >>$(abs_builddir)/$@.new; \
+			diff -q $(abs_builddir)/$@ $(abs_builddir)/$@.new 2>/dev/null >/dev/null; \
+			if [ $$? -eq 0 ]; then \
+				rm $(abs_builddir)/$@.new; \
+			else \
+				mv $(abs_builddir)/$@.new $(abs_builddir)/$@; \
+			fi; \
+		fi; \
+		cd $(abs_builddir); \
+	fi
+
+# Tell versions [3.59,3.63) of GNU make to not export all variables.
+# Otherwise a system limit (for SysV at least) may be exceeded.
+.NOEXPORT:
diff --git a/tools/keepalived/lib/assert.c b/tools/keepalived/lib/assert.c
new file mode 100644
index 000000000..f92bce795
--- /dev/null
+++ b/tools/keepalived/lib/assert.c
@@ -0,0 +1,49 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        assert facility.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2018-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+#include "config.h"
+
+#ifndef  NDEBUG
+
+#include <assert.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "logger.h"
+
+/* This prints an "Assertion failed" message and aborts.  */
+void __assert_fail (const char *__assertion, const char *__file,
+			   LINE_type __line, const char *__function)
+{
+	log_message(LOG_ERR, "assert: %s:%u: %s: Assertion: `%s' failed.", __file, __line, __function, __assertion);
+	abort();
+}
+
+#ifdef __USE_GNU
+/* Likewise, but prints the error text for ERRNUM.  */
+void __assert_perror_fail (int __errnum, const char *__file,
+				  unsigned int __line, const char *__function)
+{
+	log_message(LOG_ERR, "assert: %s:%u: %s: Unexpected error: %s.", __file, __line, __function, strerror(__errnum));
+	abort();
+}
+#endif
+#endif
diff --git a/tools/keepalived/lib/assert_debug.h b/tools/keepalived/lib/assert_debug.h
new file mode 100644
index 000000000..ebc33c5f9
--- /dev/null
+++ b/tools/keepalived/lib/assert_debug.h
@@ -0,0 +1,33 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        assert facility.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2018-2018 Alexandre Cassen, <acassen@gmail.com>
+ */
+#ifndef _KEEPALIVED_ASSERT_DEBUG_H
+#define _KEEPALIVED_ASSERT_DEBUG_H
+
+#include "config.h"
+
+#ifndef _ENABLE_ASSERT_
+#define  NDEBUG
+#endif
+
+#include <assert.h>
+
+#endif
diff --git a/tools/keepalived/lib/bitops.h b/tools/keepalived/lib/bitops.h
new file mode 100644
index 000000000..63199bbe8
--- /dev/null
+++ b/tools/keepalived/lib/bitops.h
@@ -0,0 +1,90 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        bitops.h include file.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _BITOPS_H
+#define _BITOPS_H
+
+#include "config.h"
+
+#include <limits.h>
+#include <stdbool.h>
+
+/* Defines */
+#define BIT_PER_LONG	(CHAR_BIT * sizeof(unsigned long))
+#define BIT_MASK(idx)	(1UL << ((idx) % BIT_PER_LONG))
+#define BIT_WORD(idx)	((idx) / BIT_PER_LONG)
+
+/* Helpers */
+static inline void __set_bit(unsigned idx, unsigned long *bmap)
+{
+	bmap[BIT_WORD(idx)] |= BIT_MASK(idx);
+}
+
+static inline void __clear_bit(unsigned idx, unsigned long *bmap)
+{
+	bmap[BIT_WORD(idx)] &= ~BIT_MASK(idx);
+}
+
+static inline bool __test_bit(unsigned idx, const unsigned long *bmap)
+{
+	return !!(bmap[BIT_WORD(idx)] & BIT_MASK(idx));
+}
+
+static inline bool __test_and_set_bit(unsigned idx, unsigned long *bmap)
+{
+	if (__test_bit(idx, bmap))
+		return true;
+
+	__set_bit(idx, bmap);
+
+	return false;
+}
+
+/* Bits */
+enum global_bits {
+	LOG_CONSOLE_BIT,
+	NO_SYSLOG_BIT,
+	DONT_FORK_BIT,
+	DUMP_CONF_BIT,
+#ifdef _WITH_VRRP_
+	DONT_RELEASE_VRRP_BIT,
+	RELEASE_VIPS_BIT,
+#endif
+#ifdef _WITH_LVS_
+	DONT_RELEASE_IPVS_BIT,
+#endif
+	LOG_DETAIL_BIT,
+	LOG_EXTRA_DETAIL_BIT,
+	DONT_RESPAWN_BIT,
+#ifdef _MEM_CHECK_
+	MEM_ERR_DETECT_BIT,
+#ifdef _MEM_CHECK_LOG_
+	MEM_CHECK_LOG_BIT,
+#endif
+#endif
+#ifdef _WITH_LVS_
+	LOG_ADDRESS_CHANGES,
+#endif
+	CONFIG_TEST_BIT,
+};
+
+#endif
diff --git a/tools/keepalived/lib/buffer.c b/tools/keepalived/lib/buffer.c
deleted file mode 100644
index ced4dba8f..000000000
--- a/tools/keepalived/lib/buffer.c
+++ /dev/null
@@ -1,428 +0,0 @@
-/*
- * Soft:        Keepalived is a failover program for the LVS project
- *              <www.linuxvirtualserver.org>. It monitor & manipulate
- *              a loadbalanced server pool using multi-layer checks.
- *
- * Part:        Buffer structure manipulation.
- *		This code is coming from quagga.net.
- *
- * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *
- *              This program is distributed in the hope that it will be useful,
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
- *              See the GNU General Public License for more details.
- *
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
- *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
- */
-#include <stddef.h>
-#include <unistd.h>
-#include <stdint.h>
-#include <errno.h>
-#include <sys/uio.h>
-
-#include "buffer.h"
-#include "memory.h"
-
-/* Create a new buffer. Memory will be allocated in chunks of the given
- * size.  If the argument is 0, the library will supply a reasonable
- * default size suitable for buffering socket I/O.
- */
-buffer_t *
-buffer_new(size_t size)
-{
-	buffer_t *b;
-
-	b = (buffer_t *) MALLOC(sizeof(buffer_t));
-
-	if (size) {
-		b->size = size;
-	} else {
-		static size_t default_size;
-		if (!default_size) {
-			long pgsz = sysconf(_SC_PAGESIZE);
-			default_size = ((((BUFFER_SIZE_DEFAULT-1)/pgsz)+1)*pgsz);
-		}
-		b->size = default_size;
-	}
-
-	return b;
-}
-
-/* Free all data in the buffer. */
-void
-buffer_free(buffer_t *b)
-{
-	buffer_reset(b);
-	FREE(b);
-}
-
-/* Combine all accumulated (and unflushed) data inside the buffer into a
- * single NUL-terminated string allocated using XMALLOC(MTYPE_TMP).  Note
- * that this function does not alter the state of the buffer, so the data
- * is still inside waiting to be flushed.
- */
-char *
-buffer_getstr(buffer_t *b)
-{
-	size_t totlen = 0;
-	buffer_data_t *data;
-	char *s, *p;
-
-	for (data = b->head; data; data = data->next)
-		totlen += data->cp - data->sp;
-
-	if (!(s = (char *) MALLOC(totlen+1)))
-		return NULL;
-
-	p = s;
-	for (data = b->head; data; data = data->next) {
-		memcpy(p, data->data + data->sp, data->cp - data->sp);
-		p += data->cp - data->sp;
-	}
-	*p = '\0';
-
-	return s;
-}
-
-/* Returns 1 if there is no pending data in the buffer.
- * Otherwise returns 0.
- */
-int
-buffer_empty(buffer_t *b)
-{
-	return (b->head == NULL);
-}
-
-/* Clear and free all allocated data. */
-void
-buffer_reset(buffer_t *b)
-{
-	buffer_data_t *data, *next;
-
-	for (data = b->head; data; data = next) {
-		next = data->next;
-		FREE(data);
-	}
-
-	b->head = b->tail = NULL;
-}
-
-/* Add buffer_data to the end of buffer. */
-static buffer_data_t *
-buffer_add(buffer_t *b)
-{
-	buffer_data_t *d;
-
-	d = (buffer_data_t *) MALLOC(offsetof(buffer_data_t, data[b->size]));
-	d->cp = d->sp = 0;
-	d->next = NULL;
-
-	if (b->tail)
-		b->tail->next = d;
-	else
-		b->head = d;
-	b->tail = d;
-
-	return d;
-}
-
-/* Add the given data to the end of the buffer. */
-void
-buffer_put(buffer_t *b, const void *p, size_t size)
-{
-	buffer_data_t *data = b->tail;
-	const char *ptr = p;
-
-	/* We use even last one byte of data buffer. */
-	while (size) {
-		size_t chunk;
-
-		/* If there is no data buffer add it. */
-		if (data == NULL || data->cp == b->size)
-			data = buffer_add(b);
-
-		chunk = ((size <= (b->size - data->cp)) ? size : (b->size - data->cp));
-		memcpy((data->data + data->cp), ptr, chunk);
-		size -= chunk;
-		ptr += chunk;
-		data->cp += chunk;
-	}
-}
-
-/* Add a single character to the end of the buffer. */
-void
-buffer_putc(buffer_t *b, uint8_t c)
-{
-	buffer_put(b, &c, 1);
-}
-
-/* Add a NUL-terminated string to the end of the buffer. */
-void
-buffer_putstr(buffer_t *b, const char *c)
-{
-	buffer_put(b, c, strlen(c));
-}
-
-/* Call buffer_flush_available repeatedly until either all data has been
- * flushed, or an I/O error has been encountered, or the operation would
- * block.
- */
-buffer_status_t
-buffer_flush_all(buffer_t *b, int fd)
-{
- 	buffer_status_t ret;
-	buffer_data_t *head;
-	size_t head_sp;
-
-	if (!b->head)
-		return BUFFER_EMPTY;
-
-	/* Flush all data. */
-	head_sp = (head = b->head)->sp;
-	while ((ret = buffer_flush_available(b, fd)) == BUFFER_PENDING) {
-		if ((b->head == head) && (head_sp == head->sp) && (errno != EINTR)) {
-			/* No data was flushed, so kernel buffer must be full. */
-			return ret;
-		}
-
-		head_sp = (head = b->head)->sp;
-	}
-
-	return ret;
-}
-
-/* Attempt to write enough data to the given fd to fill a window of the
- * given width and height (and remove the data written from the buffer).
- *
- * If !no_more, then a message saying " --More-- " is appended.
- * If erase is true, then first overwrite the previous " --More-- " message
- * with spaces.
- *
- * Any write error (including EAGAIN or EINTR) will cause this function
- * to return -1 (because the logic for handling the erase and more features
- * is too complicated to retry the write later).
- */
-buffer_status_t
-buffer_flush_window(buffer_t *b, int fd, int width, int height,
-                    int erase_flag, int no_more_flag)
-{
-	int nbytes = 0, iov_alloc, iov_index, column;
-	struct iovec *iov;
-	struct iovec small_iov[3];
-	char more[] = " --More-- ";
-	char erase[] = { 0x08, 0x08, 0x08, 0x08, 0x08, 0x08, 0x08, 0x08, 0x08, 0x08,
-			 ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
-			 0x08, 0x08, 0x08, 0x08, 0x08, 0x08, 0x08, 0x08, 0x08, 0x08};
-	buffer_data_t *data;
-
-	if (!b->head)
-		return BUFFER_EMPTY;
-
-	if (height < 1) {
-		height = 1;
-	} else if (height >= 2) {
-		height--;
-	}
-
-	if (width < 1) {
-		width = 1;
-	}
-
-	/* For erase and more data add two to b's buffer_data count.*/
-	if (b->head->next == NULL) {
-		iov_alloc = sizeof(small_iov)/sizeof(small_iov[0]);
-		iov = small_iov;
-	} else {
-		iov_alloc = ((height*(width+2))/b->size)+10;
-		iov = (struct iovec *) MALLOC(iov_alloc*sizeof(*iov));
-	}
-	iov_index = 0;
-
-	/* Previously print out is performed. */
-	if (erase_flag) {
-		iov[iov_index].iov_base = erase;
-		iov[iov_index].iov_len = sizeof erase;
-		iov_index++;
-	}
-
-	/* Output data. */
-	column = 1;  /* Column position of next character displayed. */
-	for (data = b->head; data && (height > 0); data = data->next) {
-		size_t cp;
-
-		cp = data->sp;
-		while ((cp < data->cp) && (height > 0)) {
-			/* Calculate lines remaining and column position after displaying
-			 * this character. */
-			if (data->data[cp] == '\r') {
-				column = 1;
-			} else if ((data->data[cp] == '\n') || (column == width)) {
-				column = 1;
-				height--;
-			} else {
-				column++;
-			}
-			cp++;
-		}
-
-		iov[iov_index].iov_base = (char *)(data->data + data->sp);
-		iov[iov_index++].iov_len = cp-data->sp;
-		data->sp = cp;
-
-        	/* This should not ordinarily happen. */
-		if (iov_index == iov_alloc) {
-			iov_alloc *= 2;
-			if (iov != small_iov) {
-				iov = REALLOC(iov, iov_alloc*sizeof(*iov));
-			} else {
-				/* This should absolutely never occur. */
-				iov = MALLOC(iov_alloc*sizeof(*iov));
-				memcpy(iov, small_iov, sizeof(small_iov));
-			}
-		}
-	}
-
-	/* In case of `more' display need. */
-	if (b->tail && (b->tail->sp < b->tail->cp) && !no_more_flag) {
-		iov[iov_index].iov_base = more;
-		iov[iov_index].iov_len = sizeof more;
-		iov_index++;
-	}
-
-
-#ifdef IOV_MAX
-	/* IOV_MAX are normally defined in <sys/uio.h> , Posix.1g.
-	 * example: Solaris2.6 are defined IOV_MAX size at 16.
-	 */
-	{
-		struct iovec *c_iov = iov;
-
-		while (iov_index > 0) {
-			int iov_size;
-
-			iov_size = ((iov_index > IOV_MAX) ? IOV_MAX : iov_index);
-			if ((nbytes = writev(fd, c_iov, iov_size)) < 0) {
-				break;
-			}
-
-			/* move pointer io-vector */
-			c_iov += iov_size;
-			iov_index -= iov_size;
-		}
-	}
-#endif /* IOV_MAX */
-
-	/* Free printed buffer data. */
-	while (b->head && (b->head->sp == b->head->cp)) {
-		buffer_data_t *del;
-		if (!(b->head = (del = b->head)->next))
-			b->tail = NULL;
-		FREE(del);
-	}
-
-	if (iov != small_iov)
-		FREE(iov);
-
-	return (nbytes < 0) ? BUFFER_ERROR :
-			      (b->head ? BUFFER_PENDING : BUFFER_EMPTY);
-}
-
-/* This function (unlike other buffer_flush* functions above) is designed
- * to work with non-blocking sockets.  It does not attempt to write out
- * all of the queued data, just a "big" chunk.  It returns 0 if it was
- * able to empty out the buffers completely, 1 if more flushing is
- * required later, or -1 on a fatal write error.
- */
-buffer_status_t
-buffer_flush_available(buffer_t *b, int fd)
-{
-/* These are just reasonable values to make sure a significant amount of
- * data is written.  There's no need to go crazy and try to write it all
- * in one shot. */
-#ifdef IOV_MAX
-#define MAX_CHUNKS ((IOV_MAX >= 16) ? 16 : IOV_MAX)
-#else
-#define MAX_CHUNKS 16
-#endif
-#define MAX_FLUSH 131072
-
-	buffer_data_t *d;
-	size_t written;
-	struct iovec iov[MAX_CHUNKS];
-	size_t iovcnt = 0, nbytes = 0;
-
-	for (d = b->head; d && (iovcnt < MAX_CHUNKS) && (nbytes < MAX_FLUSH);
-	     d = d->next, iovcnt++) {
-		iov[iovcnt].iov_base = d->data+d->sp;
-		nbytes += (iov[iovcnt].iov_len = d->cp-d->sp);
-	}
-
-	/* No data to flush: should we issue a warning message? */
-	if (!nbytes)
-		return BUFFER_EMPTY;
-
-	/* only place where written should be sign compared */
-	if ((ssize_t)(written = writev(fd,iov,iovcnt)) < 0) {
-		/* Calling code should try again later. */
-		if (ERRNO_IO_RETRY(errno))
-			return BUFFER_PENDING;
-		return BUFFER_ERROR;
-	}
-
-	/* Free printed buffer data. */
-	while (written > 0) {
-		buffer_data_t *d;
-		if (!(d = b->head))
-			break;
-		if (written < d->cp-d->sp) {
-			d->sp += written;
-			return BUFFER_PENDING;
-		}
-
-		written -= (d->cp-d->sp);
-		if (!(b->head = d->next))
-			b->tail = NULL;
-		FREE(d);
-	}
-
-	return b->head ? BUFFER_PENDING : BUFFER_EMPTY;
-
-#undef MAX_CHUNKS
-#undef MAX_FLUSH
-}
-
-/* Try to write this data to the file descriptor.
- * Any data that cannot be written immediately is added to
- * the buffer queue.
- */
-buffer_status_t
-buffer_write(buffer_t *b, int fd, const void *p, size_t size)
-{
-	ssize_t nbytes;
-	size_t written;
-
-	/* Buffer is not empty, so do not attempt to write the new data. */
-	if (b->head) {
-		nbytes = 0;
-	} else if ((nbytes = write(fd, p, size)) < 0) {
-		if (ERRNO_IO_RETRY(errno)) {
-			nbytes = 0;
-		} else {
-			return BUFFER_ERROR;
-		}
-	}
-
-	/* Add any remaining data to the buffer. */
-	written = nbytes;
-	if (written < size) {
-		buffer_put(b, ((const char *)p)+written, size-written);
-	}
-
-	return b->head ? BUFFER_PENDING : BUFFER_EMPTY;
-}
diff --git a/tools/keepalived/lib/buffer.h b/tools/keepalived/lib/buffer.h
deleted file mode 100644
index 27b7bbc0c..000000000
--- a/tools/keepalived/lib/buffer.h
+++ /dev/null
@@ -1,84 +0,0 @@
-/*
- * Soft:        Keepalived is a failover program for the LVS project
- *              <www.linuxvirtualserver.org>. It monitor & manipulate
- *              a loadbalanced server pool using multi-layer checks.
- *
- * Part:        buffer.c include file.
- *
- * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *
- *              This program is distributed in the hope that it will be useful,
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
- *              See the GNU General Public License for more details.
- *
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
- *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
- */
-
-#ifndef _BUFFER_H
-#define _BUFFER_H
-
-/* buffer definition */
-typedef struct _buffer_data {
-	struct _buffer_data	*next;
-
-	size_t			cp;	/* Location to add new data. */
-	size_t			sp;	/* Pointer to data not yet flushed. */
-	unsigned char		data[];	/* Actual data stream (variable length).
-					 * real dimension is buffer->size.
-					 */
-} buffer_data_t;
-
-typedef struct _buffer {
-	buffer_data_t		*head;
-	buffer_data_t		*tail;
-
-	size_t			size;	/* Size of each buffer_data chunk. */
-} buffer_t;
-
-typedef enum _buffer_status {
-	BUFFER_ERROR = -1,		/* An I/O error occurred.
-					 * The buffer should be destroyed and the
-					 * file descriptor should be closed.
-					 */
-	BUFFER_EMPTY = 0,		/* The data was written successfully,
-					 * and the buffer is now empty (there is
-					 * no pending data waiting to be flushed).
-					 */
-	BUFFER_PENDING = 1		/* There is pending data in the buffer
-					 * waiting to be flushed. Please try
-					 * flushing the buffer when select
-					 * indicates that the file descriptor
-					 * is writeable.
-					 */
-} buffer_status_t;
-
-/* Some defines */
-#define BUFFER_SIZE_DEFAULT	4096
-
-/* Some usefull macros */
-#define ERRNO_IO_RETRY(EN) \
-	(((EN) == EAGAIN) || ((EN) == EWOULDBLOCK) || ((EN) == EINTR))
-
-/* Prototypes */
-extern buffer_t *buffer_new(size_t);
-extern void buffer_reset(buffer_t *);
-extern void buffer_free(buffer_t *);
-extern void buffer_put(buffer_t *, const void *, size_t);
-extern void buffer_putc(buffer_t *, uint8_t);
-extern void buffer_putstr(buffer_t *, const char *);
-extern char *buffer_getstr(buffer_t *);
-extern int buffer_empty(buffer_t *);
-extern buffer_status_t buffer_write(buffer_t *, int fd,
-                                    const void *, size_t);
-extern buffer_status_t buffer_flush_available(buffer_t *, int fd);
-extern buffer_status_t buffer_flush_all(buffer_t *, int fd);
-extern buffer_status_t buffer_flush_window(buffer_t *, int fd, int width,
-                                           int height, int erase, int no_more);
-
-#endif
diff --git a/tools/keepalived/lib/command.c b/tools/keepalived/lib/command.c
deleted file mode 100644
index 04079b596..000000000
--- a/tools/keepalived/lib/command.c
+++ /dev/null
@@ -1,2681 +0,0 @@
-/*
- * Soft:        Keepalived is a failover program for the LVS project
- *              <www.linuxvirtualserver.org>. It monitor & manipulate
- *              a loadbalanced server pool using multi-layer checks.
- *
- * Part:        Command tree library.
- *              This code is coming from quagga.net.
- *
- * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *
- *              This program is distributed in the hope that it will be useful,
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
- *              See the GNU General Public License for more details.
- *
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
- *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
- */
-
-#include <ctype.h>
-#include <unistd.h>
-#include <time.h>
-#include <arpa/inet.h>
-#include <sys/stat.h>
-
-#include "memory.h"
-#include "config.h"
-#include "vector.h"
-#include "vty.h"
-#include "command.h"
-#include "timer.h"
-#include "logger.h"
-
-/* Command vector which includes some level of command lists. Normally
- * each daemon maintains its own cmdvec. */
-vector_t *cmdvec = NULL;
-
-desc_t desc_cr;
-char *command_cr = NULL;
-
-/* Host information structure. */
-host_t host;
-
-/* Standard command node structures. */
-static cmd_node_t auth_node = {
-	AUTH_NODE,
-	"Password: ",
-};
-
-static cmd_node_t view_node = {
-	VIEW_NODE,
-	"%s> ",
-};
-
-static cmd_node_t auth_enable_node = {
-	AUTH_ENABLE_NODE,
-	"Password: ",
-};
-
-static cmd_node_t enable_node = {
-	ENABLE_NODE,
-	"%s# ",
-};
-
-static cmd_node_t config_node = {
-	CONFIG_NODE,
-	"%s(config)# ",
-	1
-};
-
-/* Default motd string. */
-static const char *default_motd = "\r\n Welcome to Keepalived VTY.\r\n";
-
-
-/* Utility function to concatenate argv argument into a single string
- * with inserting ' ' character between each argument. */
-char *
-argv_concat(const char **argv, int argc, int shift)
-{
-	int i;
-	size_t len = 0, arglen;
-	char *str, *p;
-
-	for (i = shift; i < argc; i++)
-		len += strlen(argv[i])+1;
-	if (!len)
-		return NULL;
-	p = str = (char *) MALLOC(len);
-	for (i = shift; i < argc; i++) {
-		memcpy(p, argv[i], (arglen = strlen(argv[i])));
-		p += arglen;
-		*p++ = ' ';
-	}
-	*(p-1) = '\0';
-	return str;
-}
-
-/* Install top node of command vector. */
-void
-install_node(cmd_node_t *node, int (*func) (vty_t *))
-{
-	vector_set_index(cmdvec, node->node, node);
-	node->func = func;
-	node->cmd_vector = vector_init(VECTOR_DEFAULT_SIZE);
-}
-
-/* Compare two command's string.  Used in sort_node (). */
-static int
-cmp_node(const void *p, const void *q)
-{
-	const cmd_element_t *a = *(cmd_element_t * const *)p;
-	const cmd_element_t *b = *(cmd_element_t * const *)q;
-
-	return strcmp(a->string, b->string);
-}
-
-static int
-cmp_desc(const void *p, const void *q)
-{
-	const desc_t *a = *(desc_t * const *)p;
-	const desc_t *b = *(desc_t * const *)q;
-
-	return strcmp(a->cmd, b->cmd);
-}
-
-/* Sort each node's command element according to command string. */
-void
-sort_node(void)
-{
-	unsigned int i, j;
-	cmd_node_t *cnode;
-	vector_t *descvec;
-	cmd_element_t *cmd_element;
-
-	for (i = 0; i < vector_active(cmdvec); i++) {
-		if ((cnode = vector_slot(cmdvec, i)) != NULL) {	
-			vector_t *cmd_vector = cnode->cmd_vector;
-			qsort(cmd_vector->slot, vector_active(cmd_vector), 
-			      sizeof (void *), cmp_node);
-
-			for (j = 0; j < vector_active(cmd_vector); j++) {
-				if ((cmd_element = vector_slot(cmd_vector, j)) != NULL
-				    && vector_active(cmd_element->strvec)) {
-					descvec = vector_slot(cmd_element->strvec,
-							      vector_active(cmd_element->strvec) - 1);
-					qsort(descvec->slot, vector_active(descvec), 
-					      sizeof (void *), cmp_desc);
-				}
-			}
-		}
-	}
-}
-
-/* Breaking up string into each command piece. I assume given
- * character is separated by a space character. Return value is a
- * vector which includes char ** data element. It supports
- * quoted string as a single slot and commented string at
- * the end of parsed string */
-vector_t *
-cmd_make_strvec(const char *string)
-{
-	const char *cp, *start;
-	char *token;
-	int strlen;
-	vector_t *strvec;
-  
-	if (string == NULL)
-		return NULL;
-  
-	cp = string;
-
-	/* Skip white spaces. */
-	while (isspace((int) *cp) && *cp != '\0')
-		cp++;
-
-	/* Return if there is only white spaces */
-	if (*cp == '\0')
-		return NULL;
-
-	if (*cp == '!' || *cp == '#')
-		return NULL;
-
-	/* Prepare return vector. */
-	strvec = vector_init(VECTOR_DEFAULT_SIZE);
-
-	/* Copy each command piece and set into vector. */
-	while (1) {
-		start = cp;
-		if (*cp == '"') {
-			cp++;
-			token = MALLOC(2);
-			*(token) = '"';
-			*(token + 1) = '\0';
-		} else {
-			while (!(isspace((int) *cp) || *cp == '\r' || *cp == '\n') &&
-			       *cp != '\0' && *cp != '"')
-				cp++;
-			strlen = cp - start;
-			token = (char *) MALLOC(strlen + 1);
-			memcpy(token, start, strlen);
-			*(token + strlen) = '\0';
-		}
-
-		/* Alloc & set the slot */
-		vector_alloc_slot(strvec);
-		vector_set_slot(strvec, token);
-
-		while ((isspace((int) *cp) || *cp == '\n' || *cp == '\r') &&
-		       *cp != '\0')
-			cp++;
-
-		if (*cp == '\0' || *cp == '!' || *cp == '#')
-			return strvec;
-	}
-}
-
-/* Free allocated string vector. */
-void
-cmd_free_strvec(vector_t *v)
-{
-	unsigned int i;
-	char *cp;
-
-	if (!v)
-		return;
-
-	for (i = 0; i < vector_active (v); i++) {
-		if ((cp = vector_slot (v, i)) != NULL) {
-			FREE(cp);
-		}
-	}
-
-	vector_free(v);
-}
-
-/* Fetch next description.  Used in cmd_make_descvec(). */
-static char *
-cmd_desc_str(const char **string)
-{
-	const char *cp, *start;
-	char *token;
-	int strlen;
-  
-	cp = *string;
-
-	if (cp == NULL)
-		return NULL;
-
-	/* Skip white spaces. */
-	while (isspace ((int) *cp) && *cp != '\0')
-		cp++;
-
-	/* Return if there is only white spaces */
-	if (*cp == '\0')
-		return NULL;
-
-	start = cp;
-
-	while (!(*cp == '\r' || *cp == '\n') && *cp != '\0')
-		cp++;
-
-	strlen = cp - start;
-	token = (char *) MALLOC(strlen + 1);
-	memcpy(token, start, strlen);
-	*(token + strlen) = '\0';
-
-	*string = cp;
-
-	return token;
-}
-
-/* New string vector. */
-static vector_t *
-cmd_make_descvec(const char *string, const char *descstr)
-{
-	int multiple = 0;
-	const char *sp;
-	char *token;
-	int len;
-	const char *cp;
-	const char *dp;
-	vector_t *allvec;
-	vector_t *strvec = NULL;
-	desc_t *desc;
-
-	cp = string;
-	dp = descstr;
-
-	if (cp == NULL)
-		return NULL;
-
-	allvec = vector_init(VECTOR_DEFAULT_SIZE);
-
-	while (1) {
-		while (isspace ((int) *cp) && *cp != '\0')
-			cp++;
-
-		if (*cp == '(') {
-			multiple = 1;
-			cp++;
-		}
-
-		if (*cp == ')') {
-			multiple = 0;
-			cp++;
-		}
-
-		if (*cp == '|') {
-			if (!multiple) {
-				log_message(LOG_ERR, "Command parse error!: %s\n", string);
-				exit(1);
-			}
-			cp++;
-		}
-      
-		while (isspace ((int) *cp) && *cp != '\0')
-			cp++;
-
-		if (*cp == '(') {
-			multiple = 1;
-			cp++;
-		}
-
-		if (*cp == '\0') 
-			return allvec;
-
-		sp = cp;
-
-		while (!(isspace ((int) *cp) || *cp == '\r' ||
-		       *cp == '\n' || *cp == ')' || *cp == '|') && *cp != '\0')
-			cp++;
-
-		len = cp - sp;
-
-		token = (char *) MALLOC(len + 1);
-		memcpy (token, sp, len);
-		*(token + len) = '\0';
-
-		desc = (desc_t *) MALLOC(sizeof(desc_t));
-		desc->cmd = token;
-		desc->str = cmd_desc_str(&dp);
-
-		if (multiple) {
-			if (multiple == 1) {
-				strvec = vector_init(VECTOR_DEFAULT_SIZE);
-				vector_set(allvec, strvec);
-			}
-			multiple++;
-		} else {
-			strvec = vector_init(VECTOR_DEFAULT_SIZE);
-			vector_set(allvec, strvec);
-		}
-		vector_set(strvec, desc);
-	}
-}
-
-/* Count mandantory string vector size.  This is to determine inputed
- * command has enough command length. */
-static int
-cmd_cmdsize(vector_t *strvec)
-{
-	unsigned int i;
-	int size = 0;
-	vector_t *descvec;
-	desc_t *desc;
-
-	for (i = 0; i < vector_active (strvec); i++) {
-		if ((descvec = vector_slot (strvec, i)) != NULL) {
-			if ((vector_active (descvec)) == 1
-			    && (desc = vector_slot (descvec, 0)) != NULL) {
-				if (desc->cmd == NULL || CMD_OPTION (desc->cmd))
-					return size;
-				else
-					size++;
-			} else {
-				size++;
-			}
-		}
-	}
-
-	return size;
-}
-
-/* Return prompt character of specified node. */
-const char *
-cmd_prompt(node_type_t node)
-{
-	cmd_node_t *cnode;
-
-	cnode = vector_slot(cmdvec, node);
-	return cnode->prompt;
-}
-
-/* Install a command into a node. */
-void
-install_element(node_type_t ntype, cmd_element_t *cmd)
-{
-	cmd_node_t *cnode;
-  
-	/* cmd_init hasn't been called */
-	if (!cmdvec)
-		return;
-  
-	cnode = vector_slot(cmdvec, ntype);
-
-	if (cnode == NULL) {
-		log_message(LOG_ERR, "Command node %d doesn't exist, please check it\n"
-				   , ntype);
-		exit(1);
-	}
-
-	vector_set(cnode->cmd_vector, cmd);
-
-	if (cmd->strvec == NULL)
-		cmd->strvec = cmd_make_descvec(cmd->string, cmd->doc);
-
-	cmd->cmdsize = cmd_cmdsize(cmd->strvec);
-}
-
-static const unsigned char itoa64[] =
-"./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
-
-static void
-to64(char *s, long v, int n)
-{
-	while (--n >= 0) {
-		*s++ = itoa64[v&0x3f];
-		v >>= 6;
-	}
-}
-
-static char *
-zencrypt (const char *passwd)
-{
-	char salt[6];
-	timeval_t tv;
-	char *crypt(const char *, const char *);
-
-	gettimeofday(&tv,0);
-  
-	to64(&salt[0], random(), 3);
-	to64(&salt[3], tv.tv_usec, 3);
-	salt[5] = '\0';
-
-	return crypt(passwd, salt);
-}
-
-/* This function write configuration of this host. */
-static int
-config_write_host(vty_t *vty)
-{
-	if (host.name)
-		vty_out(vty, "hostname %s%s", host.name, VTY_NEWLINE);
-
-	if (host.encrypt) {
-		if (host.password_encrypt)
-			vty_out(vty, "password 8 %s%s", host.password_encrypt, VTY_NEWLINE); 
-		if (host.enable_encrypt)
-			vty_out(vty, "enable password 8 %s%s", host.enable_encrypt, VTY_NEWLINE); 
-	} else {
-		if (host.password)
-			vty_out(vty, "password %s%s", host.password, VTY_NEWLINE);
-		if (host.enable)
-			vty_out(vty, "enable password %s%s", host.enable, VTY_NEWLINE);
-	}
-
-	if (host.advanced)
-		vty_out(vty, "service advanced-vty%s", VTY_NEWLINE);
-
-	if (host.encrypt)
-		vty_out(vty, "service password-encryption%s", VTY_NEWLINE);
-
-	if (host.lines >= 0)
-		vty_out(vty, "service terminal-length %d%s", host.lines,
-			VTY_NEWLINE);
-
-	if (host.motdfile)
-		vty_out(vty, "banner motd file %s%s", host.motdfile, VTY_NEWLINE);
-	else if (!host.motd)
-		vty_out(vty, "no banner motd%s", VTY_NEWLINE);
-
-	return 1;
-}
-
-/* Utility function for getting command vector. */
-static vector_t *
-cmd_node_vector(vector_t *v, node_type_t ntype)
-{
-	cmd_node_t *cnode = vector_slot(v, ntype);
-
-	return cnode->cmd_vector;
-}
-
-/* Completion match types. */
-static match_type_t
-cmd_ipv4_match(const char *str)
-{
-	const char *sp;
-	int dots = 0, nums = 0;
-	char buf[4];
-
-	if (str == NULL)
-		return partly_match;
-
-	for (;;) {
-		memset(buf, 0, sizeof(buf));
-		sp = str;
-		while (*str != '\0') {
-			if (*str == '.') {
-				if (dots >= 3)
-					return no_match;
-
-				if (*(str + 1) == '.')
-					return no_match;
-
-				if (*(str + 1) == '\0')
-					return partly_match;
-
-				dots++;
-				break;
-			}
-			if (!isdigit ((int) *str))
-				return no_match;
-
-			str++;
-		}
-
-		if (str - sp > 3)
-			return no_match;
-
-		strncpy (buf, sp, str - sp);
-		if (atoi (buf) > 255)
-			return no_match;
-
-		nums++;
-
-		if (*str == '\0')
-			break;
-
-		str++;
-    	}
-
-	if (nums < 4)
-		return partly_match;
-
-	return exact_match;
-}
-
-static match_type_t
-cmd_ipv4_prefix_match(const char *str)
-{
-	const char *sp;
-	int dots = 0;
-	char buf[4];
-
-	if (str == NULL)
-		return partly_match;
-
-	for (;;) {
-		memset (buf, 0, sizeof (buf));
-		sp = str;
-		while (*str != '\0' && *str != '/') {
-			if (*str == '.') {
-				if (dots == 3)
-					return no_match;
-
-				if (*(str + 1) == '.' || *(str + 1) == '/')
-					return no_match;
-
-				if (*(str + 1) == '\0')
-					return partly_match;
-
-				dots++;
-				break;
-			}
-
-			if (!isdigit ((int) *str))
-				return no_match;
-
-			str++;
-		}
-
-		if (str - sp > 3)
-			return no_match;
-
-		strncpy (buf, sp, str - sp);
-		if (atoi (buf) > 255)
-			return no_match;
-
-		if (dots == 3) {
-			if (*str == '/') {
-				if (*(str + 1) == '\0')
-					return partly_match;
-
-				str++;
-				break;
-			} else if (*str == '\0') {
-				return partly_match;
-			}
-		}
-
-		if (*str == '\0')
-			return partly_match;
-
-		str++;
-	}
-
-	sp = str;
-	while (*str != '\0') {
-		if (!isdigit ((int) *str))
-			return no_match;
-
-		str++;
-	}
-
-	if (atoi (sp) > 32)
-		return no_match;
-
-	return exact_match;
-}
-
-static match_type_t
-cmd_ipv6_match(const char *str)
-{
-	struct sockaddr_in6 sin6_dummy;
-	int ret;
-
-	if (str == NULL)
-		return partly_match;
-
-	if (strspn(str, IPV6_ADDR_STR) != strlen (str))
-		return no_match;
-
-	/* use inet_pton that has a better support,
-	 * for example inet_pton can support the automatic addresses:
-	 *  ::1.2.3.4
-	 */
-	ret = inet_pton(AF_INET6, str, &sin6_dummy.sin6_addr);
-	if (ret == 1)
-		return exact_match;
-
-	return no_match;
-}
-
-static match_type_t
-cmd_ipv6_prefix_match(const char *str)
-{
-	int state = STATE_START;
-	int colons = 0, nums = 0, double_colon = 0;
-	int mask;
-	const char *sp = NULL;
-	char *endptr = NULL;
-
-	if (str == NULL)
-		return partly_match;
-
-	if (strspn(str, IPV6_PREFIX_STR) != strlen (str))
-		return no_match;
-
-	while (*str != '\0' && state != STATE_MASK) {
-		switch (state) {
-		case STATE_START:
-			if (*str == ':') {
-				if (*(str + 1) != ':' && *(str + 1) != '\0')
-					return no_match;
-				colons--;
-				state = STATE_COLON;
-			} else {
-				sp = str;
-				state = STATE_ADDR;
-			}
-			continue;
-
-		case STATE_COLON:
-			colons++;
-			if (*(str + 1) == '/')
-				return no_match;
-
-			if (*(str + 1) == ':') {
-				state = STATE_DOUBLE;
-			} else {
-				sp = str + 1;
-				state = STATE_ADDR;
-			}
-			break;
-
-		case STATE_DOUBLE:
-			if (double_colon)
-				return no_match;
-
-			if (*(str + 1) == ':')
-				return no_match;
-
-			if (*(str + 1) != '\0' && *(str + 1) != '/')
-				colons++;
-			sp = str + 1;
-
-			state = (*(str + 1) == '/') ? STATE_SLASH : STATE_ADDR;
-
-			double_colon++;
-			nums += 1;
-			break;
-
-		case STATE_ADDR:
-			if (*(str + 1) == ':' || *(str + 1) == '.' ||
-			    *(str + 1) == '\0' || *(str + 1) == '/') {
-				if (str - sp > 3)
-					return no_match;
-
-				for (; sp <= str; sp++)
-					if (*sp == '/')
-						return no_match;
-
-				nums++;
-
-				if (*(str + 1) == ':') {
-					state = STATE_COLON;
-				} else if (*(str + 1) == '.') {
-					if (!(colons || double_colon))
-						return no_match;
-					state = STATE_DOT;
-				} else if (*(str + 1) == '/') {
-					state = STATE_SLASH;
-				}
-			}
-			break;
-
-		case STATE_DOT:
-			state = STATE_ADDR;
-			break;
-
-		case STATE_SLASH:
-			if (*(str + 1) == '\0')
-				return partly_match;
-
-			state = STATE_MASK;
-			break;
-
-		default:
-			break;
-		}
-
-		if (nums > 11)
-			return no_match;
-
-		if (colons > 7)
-			return no_match;
-
-		str++;
-	}
-
-	if (state < STATE_MASK)
-		return partly_match;
-
-	mask = strtol(str, &endptr, 10);
-	if (*endptr != '\0')
-		return no_match;
-
-	if (mask < 0 || mask > 128)
-		return no_match;
-  
-	return exact_match;
-}
-
-static int
-cmd_range_match(const char *range, const char *str)
-{
-	char *p;
-	char buf[DECIMAL_STRLEN_MAX + 1];
-	char *endptr = NULL;
-	unsigned long min, max, val;
-
-	if (str == NULL)
-		return 1;
-
-	val = strtoul(str, &endptr, 10);
-	if (*endptr != '\0')
-		return 0;
-
-	range++;
-	p = strchr(range, '-');
-	if (p == NULL)
-		return 0;
-	if (p - range > DECIMAL_STRLEN_MAX)
-		return 0;
-	strncpy(buf, range, p - range);
-	buf[p - range] = '\0';
-	min = strtoul(buf, &endptr, 10);
-	if (*endptr != '\0')
-		return 0;
-
-	range = p + 1;
-	p = strchr (range, '>');
-	if (p == NULL)
-		return 0;
-	if (p - range > DECIMAL_STRLEN_MAX)
-		return 0;
-	strncpy(buf, range, p - range);
-	buf[p - range] = '\0';
-	max = strtoul(buf, &endptr, 10);
-	if (*endptr != '\0')
-		return 0;
-
-	if (val < min || val > max)
-		return 0;
-
-	return 1;
-}
-
-/* Make completion match and return match type flag. */
-static match_type_t
-cmd_filter_by_completion(char *command, vector_t *v, unsigned int index)
-{
-	unsigned int i;
-	const char *str;
-	cmd_element_t *cmd_element;
-	match_type_t match_type;
-	vector_t *descvec;
-	desc_t *desc;
-
-	match_type = no_match;
-
-	/* If command and cmd_element string does not match set NULL to vector */
-	for (i = 0; i < vector_active (v); i++) {
-		if ((cmd_element = vector_slot(v, i)) != NULL) {
-			if (index >= vector_active(cmd_element->strvec)) {
-				vector_slot(v, i) = NULL;
-			} else {
-				unsigned int j;
-				int matched = 0;
-
-				descvec = vector_slot(cmd_element->strvec, index);
-
-				for (j = 0; j < vector_active(descvec); j++) {
-					if ((desc = vector_slot(descvec, j))) {
-						str = desc->cmd;
-
-						if (CMD_VARARG(str)) {
-							if (match_type < vararg_match)
-								match_type = vararg_match;
-							matched++;
-						} else if (CMD_RANGE(str)) {
-							if (cmd_range_match(str, command)) {
-								if (match_type < range_match)
-									match_type = range_match;
-								matched++;
-							}
-						} else if (CMD_IPV6(str)) {
-							if (cmd_ipv6_match(command)) {
-								if (match_type < ipv6_match)
-									match_type = ipv6_match;
-								matched++;
-							}
-						} else if (CMD_IPV6_PREFIX(str)) {
-							if (cmd_ipv6_prefix_match(command)) {
-								if (match_type < ipv6_prefix_match)
-									match_type = ipv6_prefix_match;
-								matched++;
-							}
-						} else if (CMD_IPV4(str)) {
-							if (cmd_ipv4_match(command)) {
-								if (match_type < ipv4_match)
-									match_type = ipv4_match;
-								matched++;
-							}
-						} else if (CMD_IPV4_PREFIX(str)) {
-							if (cmd_ipv4_prefix_match(command)) {
-								if (match_type < ipv4_prefix_match)
-									match_type = ipv4_prefix_match;
-								matched++;
-							}
-						} else if (CMD_OPTION(str) || CMD_VARIABLE(str)) {
-							if (match_type < extend_match)
-								match_type = extend_match;
-							matched++;
-						} else if (strncmp(command, str, strlen(command)) == 0) {
-							if (strcmp(command, str) == 0) {
-								match_type = exact_match;
-							} else {
-								if (match_type < partly_match)
-									match_type = partly_match;
-							}
-							matched++;
-						}
-					}
-				}
-
-				if (!matched)
-					vector_slot(v, i) = NULL;
-			}
-		}
-	}
-
-	return match_type;
-}
-
-/* Filter vector by command character with index. */
-static match_type_t
-cmd_filter_by_string(char *command, vector_t *v, unsigned int index)
-{
-	unsigned int i;
-	const char *str;
-	cmd_element_t *cmd_element;
-	match_type_t match_type;
-	vector_t *descvec;
-	desc_t *desc;
-
-	match_type = no_match;
-
-	/* If command and cmd_element string does not match set NULL to vector */
-	for (i = 0; i < vector_active(v); i++) {
-		if ((cmd_element = vector_slot (v, i)) != NULL) {
-			/* If given index is bigger than max string vector of command,
-			 * set NULL */
-			if (index >= vector_active(cmd_element->strvec)) {
-				vector_slot(v, i) = NULL;
-			} else {
-				unsigned int j;
-				int matched = 0;
-
-				descvec = vector_slot(cmd_element->strvec, index);
-
-				for (j = 0; j < vector_active(descvec); j++) {
-					if ((desc = vector_slot(descvec, j))) {
-						str = desc->cmd;
-
-						if (CMD_VARARG(str)) {
-							if (match_type < vararg_match)
-								match_type = vararg_match;
-							matched++;
-						} else if (CMD_RANGE (str)) {
-							if (cmd_range_match(str, command)) {
-								if (match_type < range_match)
-									match_type = range_match;
-								matched++;
-							}
-						} else if (CMD_IPV6(str)) {
-							if (cmd_ipv6_match (command) == exact_match) {
-								if (match_type < ipv6_match)
-									match_type = ipv6_match;
-								matched++;
-							}
-						} else if (CMD_IPV6_PREFIX(str)) {
-							if (cmd_ipv6_prefix_match(command) == exact_match) {
-								if (match_type < ipv6_prefix_match)
-									match_type = ipv6_prefix_match;
-								matched++;
-							}
-						} else if (CMD_IPV4(str)) {
-							if (cmd_ipv4_match (command) == exact_match) {
-								if (match_type < ipv4_match)
-									match_type = ipv4_match;
-								matched++;
-							}
-						} else if (CMD_IPV4_PREFIX(str)) {
-							if (cmd_ipv4_prefix_match(command) == exact_match) {
-								if (match_type < ipv4_prefix_match)
-									match_type = ipv4_prefix_match;
-								matched++;
-							}
-						} else if (CMD_OPTION(str) || CMD_VARIABLE(str)) {
-							if (match_type < extend_match)
-								match_type = extend_match;
-							matched++;
-						} else {
-							if (strcmp(command, str) == 0) {
-								match_type = exact_match;
-								matched++;
-							}
-						}
-					}
-				}
-
-				if (!matched)
-					vector_slot(v, i) = NULL;
-			}
-		}
-	}
-
-	return match_type;
-}
-
-/* Check ambiguous match */
-static int
-is_cmd_ambiguous(char *command, vector_t *v, int index, match_type_t type)
-{
-	unsigned int i, j;
-	const char *str = NULL;
-	cmd_element_t *cmd_element;
-	const char *matched = NULL;
-	vector_t *descvec;
-	desc_t *desc;
-
-	for (i = 0; i < vector_active(v); i++) {
-		if ((cmd_element = vector_slot(v, i)) != NULL) {
-			int match = 0;
-
-			descvec = vector_slot(cmd_element->strvec, index);
-
-			for (j = 0; j < vector_active (descvec); j++) {
-				if ((desc = vector_slot (descvec, j))) {
-					match_type_t ret;
-	      
-					str = desc->cmd;
-
-					switch (type) {
-					case exact_match:
-						if (!(CMD_OPTION(str) || CMD_VARIABLE(str)) &&
-						    strcmp(command, str) == 0)
-							match++;
-						break;
-
-					case partly_match:
-						if (!(CMD_OPTION (str) || CMD_VARIABLE (str)) &&
-						    strncmp(command, str, strlen(command)) == 0) {
-							if (matched && strcmp(matched, str) != 0)
-								return 1;	/* There is ambiguous match. */
-							else
-								matched = str;
-							match++;
-						}
-						break;
-
-					case range_match:
-						if (cmd_range_match(str, command)) {
-							if (matched && strcmp(matched, str) != 0)
-								return 1;
-							else
-								matched = str;
-							match++;
-						}
-						break;
-
-					case ipv6_match:
-						if (CMD_IPV6(str))
-							match++;
-						break;
-
-					case ipv6_prefix_match:
-						if ((ret = cmd_ipv6_prefix_match(command)) != no_match) {
-							if (ret == partly_match)
-								return 2;	/* There is incomplete match. */
-							match++;
-						}
-						break;
-
-					case ipv4_match:
-						if (CMD_IPV4(str))
-							match++;
-						break;
-
-					case ipv4_prefix_match:
-						if ((ret = cmd_ipv4_prefix_match(command)) != no_match) {
-							if (ret == partly_match)
-								return 2;	/* There is incomplete match. */
-							match++;
-						}
-						break;
-
-					case extend_match:
-						if (CMD_OPTION(str) || CMD_VARIABLE(str))
-							match++;
-						break;
-
-					case no_match:
-					default:
-						break;
-					}
-				}
-			}
-
-			if (!match)
-				vector_slot(v, i) = NULL;
-		}
-	}
-
-	return 0;
-}
-
-/* If src matches dst return dst string, otherwise return NULL */
-static const char *
-cmd_entry_function(const char *src, const char *dst)
-{
-	/* Skip variable arguments. */
-	if (CMD_OPTION(dst) || CMD_VARIABLE(dst) || CMD_VARARG(dst) ||
-	    CMD_IPV4(dst) || CMD_IPV4_PREFIX(dst) || CMD_RANGE(dst))
-		return NULL;
-
-	/* In case of 'command \t', given src is NULL string. */
-	if (src == NULL)
-		return dst;
-
-	/* Matched with input string. */
-	if (strncmp(src, dst, strlen (src)) == 0)
-		return dst;
-
-	return NULL;
-}
-
-/* If src matches dst return dst string, otherwise return NULL */
-/* This version will return the dst string always if it is
-   CMD_VARIABLE for '?' key processing */
-static const char *
-cmd_entry_function_desc(const char *src, const char *dst)
-{
-	if (CMD_VARARG(dst))
-		return dst;
-
-	if (CMD_RANGE(dst)) {
-		if (cmd_range_match(dst, src))
-			return dst;
-		return NULL;
-	}
-
-	if (CMD_IPV6 (dst)) {
-		if (cmd_ipv6_match(src))
-			return dst;
-		return NULL;
-	}
-
-	if (CMD_IPV6_PREFIX(dst)) {
-		if (cmd_ipv6_prefix_match(src))
-			return dst;
-		return NULL;
-	}
-
-	if (CMD_IPV4(dst)) {
-		if (cmd_ipv4_match(src))
-			return dst;
-		return NULL;
-	}
-
-	if (CMD_IPV4_PREFIX(dst)) {
-		if (cmd_ipv4_prefix_match(src))
-			return dst;
-		return NULL;
-	}
-
-	/* Optional or variable commands always match on '?' */
-	if (CMD_OPTION(dst) || CMD_VARIABLE(dst))
-		return dst;
-
-	/* In case of 'command \t', given src is NULL string. */
-	if (src == NULL)
-		return dst;
-
-	if (strncmp(src, dst, strlen(src)) == 0)
-		return dst;
-
-	return NULL;
-}
-
-/* Check same string element existence.  If it isn't there return
- *  1. */
-static int
-cmd_unique_string(vector_t *v, const char *str)
-{
-	unsigned int i;
-	char *match;
-
-	for (i = 0; i < vector_active(v); i++) {
-		if ((match = vector_slot(v, i)) != NULL) {
-			if (strcmp(match, str) == 0) {
-				return 0;
-			}
-		}
-	}
-
-	return 1;
-}
-
-/* Compare string to description vector.  If there is same string
- * return 1 else return 0. */
-static int
-desc_unique_string(vector_t *v, const char *str)
-{
-	unsigned int i;
-	desc_t *desc;
-
-	for (i = 0; i < vector_active(v); i++) {
-		if ((desc = vector_slot(v, i)) != NULL) {
-			if (strcmp(desc->cmd, str) == 0) {
-				return 1;
-			}
-		}
-	}
-
-	return 0;
-}
-
-static int 
-cmd_try_do_shortcut(node_type_t node, char* first_word)
-{
-	if (first_word != NULL && node != AUTH_NODE &&
-	    node != VIEW_NODE && node != AUTH_ENABLE_NODE &&
-	    node != ENABLE_NODE &&
-	    strcmp("do", first_word) == 0)
-		return 1;
-
-	return 0;
-}
-
-/* '?' describe command support. */
-static vector_t *
-cmd_describe_command_real(vector_t *vline, vty_t *vty, int *status)
-{
-	vector_t *cmd_vector;
-	vector_t *matchvec;
-	cmd_element_t *cmd_element;
-	unsigned int index, i;
-	int ret;
-	match_type_t match;
-	char *command;
-
-	/* Set index. */
-	if (vector_active(vline) == 0) {
-		*status = CMD_ERR_NO_MATCH;
-		return NULL;
-	}
-
-	index = vector_active (vline) - 1;
-  
-	/* Make copy vector of current node's command vector. */
-	cmd_vector = vector_copy(cmd_node_vector(cmdvec, vty->node));
-
-	/* Prepare match vector */
-	matchvec = vector_init(INIT_MATCHVEC_SIZE);
-
-	/* Filter commands. */
-	/* Only words precedes current word will be checked in this loop. */
-	for (i = 0; i < index; i++) {
-		if ((command = vector_slot(vline, i))) {
-			match = cmd_filter_by_completion(command, cmd_vector, i);
-	
-			if (match == vararg_match) {
-				cmd_element_t *cmd_element;
-				vector_t *descvec;
-				unsigned int j, k;
-
-				for (j = 0; j < vector_active(cmd_vector); j++)
-					if ((cmd_element = vector_slot(cmd_vector, j)) != NULL
-					    && (vector_active(cmd_element->strvec))) {
-						descvec = vector_slot(cmd_element->strvec,
-								      vector_active(cmd_element->strvec) - 1);
-						for (k = 0; k < vector_active(descvec); k++) {
-							desc_t *desc = vector_slot(descvec, k);
-							vector_set(matchvec, desc);
-						}
-					}
-            
-					vector_set(matchvec, &desc_cr);
-					vector_free(cmd_vector);
-
-					return matchvec;
-			}
-
-			if ((ret = is_cmd_ambiguous(command, cmd_vector, i, match)) == 1) {
-				vector_free(cmd_vector);
-				vector_free(matchvec);
-				*status = CMD_ERR_AMBIGUOUS;
-				return NULL;
-			} else if (ret == 2) {
-				vector_free(cmd_vector);
-				vector_free(matchvec);
-				*status = CMD_ERR_NO_MATCH;
-				return NULL;
-			}
-		}
-	}
-
-	/* Prepare match vector:
-	 *  matchvec = vector_init (INIT_MATCHVEC_SIZE); */
-
-	/* Make sure that cmd_vector is filtered based on current word */
-	command = vector_slot(vline, index);
-	if (command)
-		match = cmd_filter_by_completion(command, cmd_vector, index);
-
-	/* Make description vector. */
-	for (i = 0; i < vector_active(cmd_vector); i++) {
-		if ((cmd_element = vector_slot(cmd_vector, i)) != NULL) {
-			vector_t *strvec = cmd_element->strvec;
-
-			/* if command is NULL, index may be equal to vector_active */
-			if (command && index >= vector_active(strvec)) {
-				vector_slot(cmd_vector, i) = NULL;
-			} else {
-				/* Check if command is completed. */
-				if (command == NULL && index == vector_active(strvec)) {
-					if (!desc_unique_string(matchvec, command_cr))
-						vector_set(matchvec, &desc_cr);
-				} else {
-					unsigned int j;
-					vector_t *descvec = vector_slot(strvec, index);
-					desc_t *desc;
-
-					for (j = 0; j < vector_active (descvec); j++) {
-						if ((desc = vector_slot (descvec, j))) {
-							const char *string;
-
-							string = cmd_entry_function_desc(command, desc->cmd);
-							if (string) {
-								/* Uniqueness check */
-								if (!desc_unique_string(matchvec, string))
-									vector_set(matchvec, desc);
-							}
-						}
-					}
-				}
-			}
-		}
-	}
-
-	vector_free(cmd_vector);
-
-	if (vector_slot(matchvec, 0) == NULL) {
-		vector_free(matchvec);
-		*status = CMD_ERR_NO_MATCH;
-		return NULL;
-	}
-
-	*status = CMD_SUCCESS;
-	return matchvec;
-}
-
-vector_t *
-cmd_describe_command(vector_t *vline, vty_t *vty, int *status)
-{
-	vector_t *ret;
-
-	if (cmd_try_do_shortcut(vty->node, vector_slot(vline, 0))) {
-		node_type_t onode;
-		vector_t *shifted_vline;
-		unsigned int index;
-
-		onode = vty->node;
-		vty->node = ENABLE_NODE;
-		/* We can try it on enable node, cos' the vty is authenticated */
-
-		shifted_vline = vector_init(vector_count(vline));
-		/* use memcpy? */
-		for (index = 1; index < vector_active(vline); index++) {
-			vector_set_index(shifted_vline, index-1, vector_lookup(vline, index));
-		}
-
-		ret = cmd_describe_command_real(shifted_vline, vty, status);
-
-		vector_free(shifted_vline);
-		vty->node = onode;
-		return ret;
-	}
-
-
-	return cmd_describe_command_real(vline, vty, status);
-}
-
-
-/* Check LCD of matched command. */
-static int
-cmd_lcd(char **matched)
-{
-	int i, j, lcd = -1;
-	char *s1, *s2;
-	char c1, c2;
-
-	if (matched[0] == NULL || matched[1] == NULL)
-		return 0;
-
-	for (i = 1; matched[i] != NULL; i++) {
-		s1 = matched[i - 1];
-		s2 = matched[i];
-
-		for (j = 0; (c1 = s1[j]) && (c2 = s2[j]); j++) {
-			if (c1 != c2)
-				break;
-		}
-
-		if (lcd < 0) {
-			lcd = j;
-		} else {
-			if (lcd > j)
-				lcd = j;
-		}
-	}
-
-	return lcd;
-}
-
-/* Command line completion support. */
-static char **
-cmd_complete_command_real(vector_t *vline, vty_t *vty, int *status)
-{
-	vector_t *cmd_vector = vector_copy(cmd_node_vector(cmdvec, vty->node));
-	vector_t *matchvec;
-	cmd_element_t *cmd_element;
-	unsigned int index, i;
-	char **match_str;
-	desc_t *desc;
-	vector_t *descvec;
-	char *command;
-	int lcd;
-
-	if (vector_active(vline) == 0) {
-		vector_free(cmd_vector);
-		*status = CMD_ERR_NO_MATCH;
-		return NULL;
-	}
-
-	index = vector_active (vline) - 1;
-
-	/* First, filter by preceeding command string */
-	for (i = 0; i < index; i++) {
-		if ((command = vector_slot(vline, i))) {
-			match_type_t match;
-			int ret;
-
-			/* First try completion match, if there is exactly match return 1 */
-			match = cmd_filter_by_completion(command, cmd_vector, i);
-
-			/* If there is exact match then filter ambiguous match else check
-			 * ambiguousness. */
-			if ((ret = is_cmd_ambiguous(command, cmd_vector, i, match)) == 1) {
-				vector_free(cmd_vector);
-				*status = CMD_ERR_AMBIGUOUS;
-				return NULL;
-			}
-		}
-	}
-  
-	/* Prepare match vector. */
-	matchvec = vector_init(INIT_MATCHVEC_SIZE);
-
-	/* Now we got into completion */
-	for (i = 0; i < vector_active(cmd_vector); i++) {
-		if ((cmd_element = vector_slot(cmd_vector, i))) {
-			const char *string;
-			vector_t *strvec = cmd_element->strvec;
-
-			/* Check field length */
-			if (index >= vector_active(strvec)) {
-				vector_slot(cmd_vector, i) = NULL;
-			} else {
-				unsigned int j;
-
-				descvec = vector_slot(strvec, index);
-				for (j = 0; j < vector_active(descvec); j++) {
-					if ((desc = vector_slot(descvec, j))) {
-						if ((string = 
-							cmd_entry_function(vector_slot(vline, index),
-									   desc->cmd)))
-								if (cmd_unique_string (matchvec, string))
-									vector_set(matchvec, strdup(string));
-					}
-				}
-			}
-		}
-	}
-
-	/* We don't need cmd_vector any more. */
-	vector_free(cmd_vector);
-
-	/* No matched command */
-	if (vector_slot(matchvec, 0) == NULL) {
-		vector_free(matchvec);
-
-		/* In case of 'command \t' pattern.  Do you need '?' command at
-		 * the end of the line. */
-		if (vector_slot(vline, index) == '\0')
-			*status = CMD_ERR_NOTHING_TODO;
-		else
-			*status = CMD_ERR_NO_MATCH;
-		return NULL;
-	}
-
-	/* Only one matched */
-	if (vector_slot(matchvec, 1) == NULL) {
-		match_str = (char **) matchvec->slot;
-		vector_only_wrapper_free(matchvec);
-		*status = CMD_COMPLETE_FULL_MATCH;
-		return match_str;
-	}
-
-	/* Make it sure last element is NULL. */
-	vector_set(matchvec, NULL);
-
-	/* Check LCD of matched strings. */
-	if (vector_slot (vline, index) != NULL) {
-		lcd = cmd_lcd((char **) matchvec->slot);
-
-		if (lcd) {
-			int len = strlen(vector_slot(vline, index));
-
-			if (len < lcd) {
-				char *lcdstr;
-
-				lcdstr = MALLOC(lcd + 1);
-				memcpy(lcdstr, matchvec->slot[0], lcd);
-				lcdstr[lcd] = '\0';
-
-				/* Free matchvec. */
-				for (i = 0; i < vector_active(matchvec); i++) {
-					if (vector_slot(matchvec, i))
-						FREE(vector_slot(matchvec, i));
-				}
-				vector_free(matchvec);
-
-				/* Make new matchvec. */
-				matchvec = vector_init(INIT_MATCHVEC_SIZE);
-				vector_set(matchvec, lcdstr);
-				match_str = (char **) matchvec->slot;
-				vector_only_wrapper_free(matchvec);
-
-				*status = CMD_COMPLETE_MATCH;
-				return match_str;
-			}
-		}
-	}
-
-	match_str = (char **) matchvec->slot;
-	vector_only_wrapper_free(matchvec);
-	*status = CMD_COMPLETE_LIST_MATCH;
-	return match_str;
-}
-
-char **
-cmd_complete_command(vector_t *vline, vty_t *vty, int *status)
-{
-	char **ret;
-
-	if (cmd_try_do_shortcut(vty->node, vector_slot(vline, 0))) {
-		node_type_t onode;
-		vector_t *shifted_vline;
-		unsigned int index;
-
-		onode = vty->node;
-		vty->node = ENABLE_NODE;
-		/* We can try it on enable node, cos' the vty is authenticated */
-
-		shifted_vline = vector_init(vector_count(vline));
-		/* use memcpy? */
-		for (index = 1; index < vector_active(vline); index++) {
-			vector_set_index (shifted_vline, index-1, vector_lookup(vline, index));
-		}
-
-		ret = cmd_complete_command_real(shifted_vline, vty, status);
-
-		vector_free(shifted_vline);
-		vty->node = onode;
-		return ret;
-	}
-
-	return cmd_complete_command_real(vline, vty, status);
-}
-
-/* return parent node */
-/* MUST eventually converge on CONFIG_NODE */
-node_type_t
-node_parent(node_type_t node)
-{
-	return CONFIG_NODE;
-}
-
-/* Execute command by argument vline vector. */
-static int
-cmd_execute_command_real(vector_t *vline, vty_t *vty, cmd_element_t **cmd)
-{
-	unsigned int index, i;
-	vector_t *cmd_vector;
-	cmd_element_t *cmd_element;
-	cmd_element_t *matched_element;
-	unsigned int matched_count, incomplete_count;
-	int argc;
-	const char *argv[CMD_ARGC_MAX];
-	match_type_t match = 0;
-	int varflag;
-	char *command;
-
-	/* Make copy of command elements. */
-	cmd_vector = vector_copy(cmd_node_vector(cmdvec, vty->node));
-
-	for (index = 0; index < vector_active(vline); index++) {
-		if ((command = vector_slot(vline, index))) {
-			int ret;
-
-			match = cmd_filter_by_completion(command, cmd_vector, index);
-
-			if (match == vararg_match)
-				break;
-        
-			ret = is_cmd_ambiguous(command, cmd_vector, index, match);
-			if (ret == 1) {
-				vector_free(cmd_vector);
-				return CMD_ERR_AMBIGUOUS;
-			} else if (ret == 2) {
-				vector_free(cmd_vector);
-				return CMD_ERR_NO_MATCH;
-			}
-		}
-	}
-
-	/* Check matched count. */
-	matched_element = NULL;
-	matched_count = 0;
-	incomplete_count = 0;
-
-	for (i = 0; i < vector_active(cmd_vector); i++) {
-		if ((cmd_element = vector_slot(cmd_vector, i))) {
-			if (match == vararg_match || index >= cmd_element->cmdsize) {
-				matched_element = cmd_element;
-				matched_count++;
-			} else {
-				incomplete_count++;
-			}
-		}
-	}
-
-	/* Finish of using cmd_vector. */
-	vector_free(cmd_vector);
-
-	/* To execute command, matched_count must be 1. */
-	if (matched_count == 0) {
-		if (incomplete_count)
-			return CMD_ERR_INCOMPLETE;
-		return CMD_ERR_NO_MATCH;
-	}
-
-	if (matched_count > 1)
-		return CMD_ERR_AMBIGUOUS;
-
-	/* Argument treatment */
-	varflag = argc = 0;
-
-	for (i = 0; i < vector_active(vline); i++) {
-		if (varflag) {
-			argv[argc++] = vector_slot(vline, i);
-		} else {
-			vector_t *descvec = vector_slot(matched_element->strvec, i);
-
-			if (vector_active(descvec) == 1) {
-				desc_t *desc = vector_slot (descvec, 0);
-
-				if (CMD_VARARG(desc->cmd))
-					varflag = 1;
-
-				if (varflag || CMD_VARIABLE(desc->cmd) || CMD_OPTION(desc->cmd))
-					argv[argc++] = vector_slot (vline, i);
-			} else {
-				argv[argc++] = vector_slot (vline, i);
-			}
-		}
-
-		if (argc >= CMD_ARGC_MAX)
-			return CMD_ERR_EXEED_ARGC_MAX;
-	}
-
-	/* For vtysh execution. */
-	if (cmd)
-		*cmd = matched_element;
-
-	if (matched_element->daemon)
-		return CMD_SUCCESS_DAEMON;
-
-	/* Execute matched command. */
-	return (*matched_element->func) (matched_element, vty, argc, argv);
-}
-
-int
-cmd_execute_command(vector_t *vline, vty_t *vty, cmd_element_t **cmd, int vtysh)
-{
-	int ret, saved_ret, tried = 0;
-	node_type_t onode, try_node;
-
-	onode = try_node = vty->node;
-
-	if (cmd_try_do_shortcut(vty->node, vector_slot(vline, 0))) {
-		vector_t *shifted_vline;
-		unsigned int index;
-
-		vty->node = ENABLE_NODE;
-		/* We can try it on enable node, cos' the vty is authenticated */
-
-		shifted_vline = vector_init(vector_count(vline));
-		/* use memcpy? */
-		for (index = 1; index < vector_active (vline); index++) {
-			vector_set_index(shifted_vline, index-1, vector_lookup(vline, index));
-		}
-
-		ret = cmd_execute_command_real(shifted_vline, vty, cmd);
-
-		vector_free(shifted_vline);
-		vty->node = onode;
-		return ret;
-	}
-
-
-	saved_ret = ret = cmd_execute_command_real(vline, vty, cmd);
-
-	if (vtysh)
-		return saved_ret;
-
-	/* This assumes all nodes above CONFIG_NODE are childs of CONFIG_NODE */
-	while (ret != CMD_SUCCESS && ret != CMD_WARNING  && vty->node > CONFIG_NODE) {
-		try_node = node_parent(try_node);
-		vty->node = try_node;
-		ret = cmd_execute_command_real(vline, vty, cmd);
-		tried = 1;
-		if (ret == CMD_SUCCESS || ret == CMD_WARNING) {
-			/* succesfull command, leave the node as is */
-			return ret;
-		}
-	}
-
-	/* no command succeeded, reset the vty to the original node and
-	 * return the error for this node */
-	if (tried)
-		vty->node = onode;
-
-	return saved_ret;
-}
-
-/* Execute command by argument readline. */
-int
-cmd_execute_command_strict(vector_t *vline, vty_t *vty, cmd_element_t **cmd)
-{
-	unsigned int index, i;
-	vector_t *cmd_vector;
-	cmd_element_t *cmd_element;
-	cmd_element_t *matched_element;
-	unsigned int matched_count, incomplete_count;
-	int argc;
-	const char *argv[CMD_ARGC_MAX];
-	int varflag;
-	match_type_t match = 0;
-	char *command;
-
-	/* Make copy of command element */
-	cmd_vector = vector_copy(cmd_node_vector(cmdvec, vty->node));
-
-	for (index = 0; index < vector_active (vline); index++) {
-		if ((command = vector_slot(vline, index))) {
-			int ret;
-	
-			match = cmd_filter_by_string(vector_slot(vline, index),
-						     cmd_vector, index);
-
-			/* If command meets '.VARARG' then finish matching. */
-			if (match == vararg_match)
-				break;
-        
-			ret = is_cmd_ambiguous(command, cmd_vector, index, match);
-			if (ret == 1) {
-				vector_free(cmd_vector);
-				return CMD_ERR_AMBIGUOUS;
-			} else if (ret == 2) {
-				vector_free(cmd_vector);
-				return CMD_ERR_NO_MATCH;
-			}
-		}
-	}
-
-	/* Check matched count. */
-	matched_element = NULL;
-	matched_count = 0;
-	incomplete_count = 0;
-	for (i = 0; i < vector_active (cmd_vector); i++) {
-		if (vector_slot (cmd_vector, i) != NULL) {
-			cmd_element = vector_slot (cmd_vector, i);
-
-			if (match == vararg_match || index >= cmd_element->cmdsize) {
-				matched_element = cmd_element;
-				matched_count++;
-			} else {
-				incomplete_count++;
-			}
-		}
-	}
-
-	/* Finish of using cmd_vector. */
-	vector_free(cmd_vector);
-
-	/* To execute command, matched_count must be 1. */
-	if (matched_count == 0) {
-		if (incomplete_count)
-			return CMD_ERR_INCOMPLETE;
-		return CMD_ERR_NO_MATCH;
-	}
-
-	if (matched_count > 1)
-		return CMD_ERR_AMBIGUOUS;
-
-	/* Argument treatment */
-	varflag = argc = 0;
-
-	for (i = 0; i < vector_active(vline); i++) {
-		if (varflag) {
-			argv[argc++] = vector_slot(vline, i);
-		} else {
-			vector_t *descvec = vector_slot(matched_element->strvec, i);
-
-			if (vector_active(descvec) == 1) {
-				desc_t *desc = vector_slot(descvec, 0);
-
-				if (CMD_VARARG(desc->cmd))
-					varflag = 1;
-
-				if (varflag || CMD_VARIABLE(desc->cmd) || CMD_OPTION(desc->cmd))
-					argv[argc++] = vector_slot (vline, i);
-				} else {
-					argv[argc++] = vector_slot (vline, i);
-				}
-		}
-
-		if (argc >= CMD_ARGC_MAX)
-			return CMD_ERR_EXEED_ARGC_MAX;
-	}
-
-	/* For vtysh execution. */
-	if (cmd)
-		*cmd = matched_element;
-
-	if (matched_element->daemon)
-		return CMD_SUCCESS_DAEMON;
-
-	/* Now execute matched command */
-	return (*matched_element->func) (matched_element, vty, argc, argv);
-}
-
-/* Configration make from file. */
-int
-config_from_file(vty_t *vty, FILE *fp)
-{
-	int ret;
-	vector_t *vline;
-
-	while (fgets(vty->buf, VTY_BUFSIZ, fp)) {
-		vline = cmd_make_strvec(vty->buf);
-
-		/* In case of comment line */
-		if (vline == NULL)
-			continue;
-
-		/* Execute configuration command : this is strict match */
-		ret = cmd_execute_command_strict(vline, vty, NULL);
-
-		/* Try again with setting node to CONFIG_NODE */
-		while (ret != CMD_SUCCESS && ret != CMD_WARNING &&
-		       ret != CMD_ERR_NOTHING_TODO && vty->node != CONFIG_NODE) {
-			vty->node = node_parent(vty->node);
-			ret = cmd_execute_command_strict (vline, vty, NULL);
-		}
-
-		cmd_free_strvec(vline);
-
-		if (ret != CMD_SUCCESS && ret != CMD_WARNING &&
-		    ret != CMD_ERR_NOTHING_TODO)
-			return ret;
-	}
-
-	return CMD_SUCCESS;
-}
-
-/* Configration from terminal */
-DEFUN(config_terminal,
-      config_terminal_cmd,
-      "configure terminal",
-      "Configuration from vty interface\n"
-      "Configuration terminal\n")
-{
-	if (vty_config_lock (vty)) {
-		vty->node = CONFIG_NODE;
-	} else {
-		vty_out(vty, "VTY configuration is locked by other VTY%s", VTY_NEWLINE);
-			return CMD_WARNING;
-	}
-
-	return CMD_SUCCESS;
-}
-
-/* Enable command */
-DEFUN(enable, 
-      config_enable_cmd,
-      "enable",
-      "Turn on privileged mode command\n")
-{
-	/* If enable password is NULL, change to ENABLE_NODE */
-	if ((host.enable == NULL && host.enable_encrypt == NULL) ||
-	    vty->type == VTY_SHELL_SERV)
-		vty->node = ENABLE_NODE;
-	else
-		vty->node = AUTH_ENABLE_NODE;
-
-	return CMD_SUCCESS;
-}
-
-/* Disable command */
-DEFUN(disable, 
-      config_disable_cmd,
-      "disable",
-      "Turn off privileged mode command\n")
-{
-	if (vty->node == ENABLE_NODE)
-		vty->node = VIEW_NODE;
-	return CMD_SUCCESS;
-}
-
-/* Down vty node level. */
-DEFUN(config_exit,
-      config_exit_cmd,
-      "exit",
-      "Exit current mode and down to previous mode\n")
-{
-	switch (vty->node) {
-	case VIEW_NODE:
-	case ENABLE_NODE:
-		if (vty_shell(vty))
-			exit (0);
-		vty->status = VTY_CLOSE;
-		break;
-	case CONFIG_NODE:
-		vty->node = ENABLE_NODE;
-		vty_config_unlock(vty);
-		break;
-	case VTY_NODE:
-	case CFG_LOG_NODE:
-		vty->node = CONFIG_NODE;
-		break;
-	default:
-		break;
-	}
-
-	return CMD_SUCCESS;
-}
-
-/* quit is alias of exit. */
-ALIAS(config_exit,
-      config_quit_cmd,
-      "quit",
-      "Exit current mode and down to previous mode\n")
-       
-/* End of configuration. */
-DEFUN(config_end,
-      config_end_cmd,
-      "end",
-      "End current mode and change to enable mode.")
-{
-	switch (vty->node) {
-	case VIEW_NODE:
-	case ENABLE_NODE:
-		/* Nothing to do. */
-		break;
-	case CFG_LOG_NODE:
-	case CONFIG_NODE:
-	case VTY_NODE:
-		vty_config_unlock (vty);
-		vty->node = ENABLE_NODE;
-		break;
-	default:
-		break;
-	}
-
-	return CMD_SUCCESS;
-}
-
-/* Show version. */
-DEFUN(show_version,
-      show_version_cmd,
-      "show version",
-      SHOW_STR
-      "Displays Keepalived version\n")
-{
-	vty_out(vty, "%s (%s).%s", VERSION_STRING, host.name?host.name:"",
-		VTY_NEWLINE);
-	vty_out(vty, "%s%s", COPYRIGHT_STRING, VTY_NEWLINE);
-
-	return CMD_SUCCESS;
-}
-
-/* Help display function for all node. */
-DEFUN(config_help,
-      config_help_cmd,
-      "help",
-      "Description of the interactive help system\n")
-{
-	vty_out(vty, "This VTY provides advanced help feature.  When you need help,%s\
-anytime at the command line please press '?'.%s\
-%s\
-If nothing matches, the help list will be empty and you must backup%s\
- until entering a '?' shows the available options.%s\
-Two styles of help are provided:%s\
-1. Full help is available when you are ready to enter a%s\
-   command argument (e.g. 'show ?') and describes each possible%s\
-   argument.%s\
-2. Partial help is provided when an abbreviated argument is entered%s\
-   and you want to know what arguments match the input%s\
-   (e.g. 'show me?'.)%s%s"
-		   , VTY_NEWLINE, VTY_NEWLINE, VTY_NEWLINE
-		   , VTY_NEWLINE, VTY_NEWLINE, VTY_NEWLINE
-		   , VTY_NEWLINE, VTY_NEWLINE, VTY_NEWLINE
-		   , VTY_NEWLINE, VTY_NEWLINE, VTY_NEWLINE, VTY_NEWLINE);
-
-	return CMD_SUCCESS;
-}
-
-/* Help display function for all node. */
-DEFUN(config_list,
-      config_list_cmd,
-      "list",
-      "Print command list\n")
-{
-	unsigned int i;
-	cmd_node_t *cnode = vector_slot(cmdvec, vty->node);
-	cmd_element_t *cmd;
-
-	for (i = 0; i < vector_active (cnode->cmd_vector); i++)
-		if ((cmd = vector_slot (cnode->cmd_vector, i)) != NULL &&
-		    cmd->attr != CMD_ATTR_HIDDEN)
-			vty_out(vty, "  %s%s", cmd->string, VTY_NEWLINE);
-
-	return CMD_SUCCESS;
-}
-
-/* Write current configuration into file. */
-DEFUN(config_write_file, 
-      config_write_file_cmd,
-      "write file",  
-      "Write running configuration to memory, network, or terminal\n"
-      "Write to configuration file\n")
-{
-	unsigned int i;
-	int fd;
-	cmd_node_t *node;
-	char *config_file;
-	char *config_file_tmp = NULL;
-	char *config_file_sav = NULL;
-	int ret = CMD_WARNING;
-	vty_t *file_vty;
-
-	/* Check and see if we are operating under vtysh configuration */
-	if (host.config == NULL) {
-		vty_out(vty, "Can't save to configuration file, using vtysh.%s"
-			   , VTY_NEWLINE);
-		return CMD_WARNING;
-	}
-
-	/* Get filename. */
-	config_file = host.config;
-  
-	config_file_sav = MALLOC(strlen(config_file) + strlen(CONF_BACKUP_EXT) + 1);
-	strcpy(config_file_sav, config_file);
-	strcat(config_file_sav, CONF_BACKUP_EXT);
-
-	config_file_tmp = MALLOC(strlen(config_file) + 8);
-	sprintf(config_file_tmp, "%s.XXXXXX", config_file);
-  
-	/* Open file to configuration write. */
-	fd = mkstemp(config_file_tmp);
-	if (fd < 0) {
-		vty_out(vty, "Can't open configuration file %s.%s", config_file_tmp
-			   , VTY_NEWLINE);
-		goto finished;
-	}
-  
-	/* Make vty for configuration file. */
-	file_vty = vty_new();
-	file_vty->fd = fd;
-	file_vty->type = VTY_FILE;
-
-	/* Config file header print. */
-	vty_out(file_vty, "!\n! Keepalived configuration saved from vty\n!   ");
-	vty_time_print(file_vty, 1);
-	vty_out(file_vty, "!\n");
-
-	for (i = 0; i < vector_active(cmdvec); i++) {
-		if ((node = vector_slot(cmdvec, i)) && node->func) {
-			if ((*node->func) (file_vty))
-				vty_out(file_vty, "!\n");
-		}
-	}
-
-	vty_close (file_vty);
-
-	if (unlink(config_file_sav) != 0) {
-		if (errno != ENOENT) {
-			vty_out(vty, "Can't unlink backup configuration file %s.%s", config_file_sav
-				   , VTY_NEWLINE);
-			goto finished;
-		}
-	}
-
-	if (link(config_file, config_file_sav) != 0) {
-		vty_out(vty, "Can't backup old configuration file %s.%s", config_file_sav
-			   , VTY_NEWLINE);
-		goto finished;
-	}
-
-	sync();
-
-	if (unlink(config_file) != 0) {
-		vty_out(vty, "Can't unlink configuration file %s.%s", config_file
-			   , VTY_NEWLINE);
-		goto finished;
-	}
-
-	if (link(config_file_tmp, config_file) != 0) {
-		vty_out(vty, "Can't save configuration file %s.%s", config_file
-			   , VTY_NEWLINE);
-		goto finished;
-	}
-
-	sync();
-  
-	if (chmod(config_file, 0600) != 0) {
-		vty_out(vty, "Can't chmod configuration file %s: %s (%d).%s" 
-			   , config_file, strerror(errno), errno, VTY_NEWLINE);
-		goto finished;
-	}
-
-	vty_out(vty, "Configuration saved to %s%s", config_file, VTY_NEWLINE);
-	ret = CMD_SUCCESS;
-
-  finished:
-	unlink(config_file_tmp);
-	FREE(config_file_tmp);
-	FREE(config_file_sav);
-	return ret;
-}
-
-ALIAS(config_write_file, 
-      config_write_cmd,
-      "write",  
-      "Write running configuration to memory, network, or terminal\n")
-
-ALIAS(config_write_file, 
-      config_write_memory_cmd,
-      "write memory",  
-      "Write running configuration to memory, network, or terminal\n"
-      "Write configuration to the file (same as write file)\n")
-
-ALIAS(config_write_file, 
-      copy_runningconfig_startupconfig_cmd,
-      "copy running-config startup-config",  
-      "Copy configuration\n"
-      "Copy running config to... \n"
-      "Copy running config to startup config (same as write file)\n")
-
-/* Write current configuration into the terminal. */
-DEFUN(config_write_terminal,
-      config_write_terminal_cmd,
-      "write terminal",
-      "Write running configuration to memory, network, or terminal\n"
-      "Write to terminal\n")
-{
-	unsigned int i;
-	cmd_node_t *node;
-
-	if (vty->type == VTY_SHELL_SERV) {
-		for (i = 0; i < vector_active(cmdvec); i++) {
-			if ((node = vector_slot(cmdvec, i)) && node->func && node->vtysh) {
-				if ((*node->func) (vty))
-					vty_out(vty, "!%s", VTY_NEWLINE);
-			}
-		}
-	} else {
-		vty_out(vty, "%sCurrent configuration:%s", VTY_NEWLINE, VTY_NEWLINE);
-		vty_out(vty, "!%s", VTY_NEWLINE);
-
-		for (i = 0; i < vector_active(cmdvec); i++) {
-			if ((node = vector_slot(cmdvec, i)) && node->func) {
-				if ((*node->func) (vty))
-					vty_out(vty, "!%s", VTY_NEWLINE);
-			}
-		}
-		vty_out (vty, "end%s",VTY_NEWLINE);
-	}
-
-	return CMD_SUCCESS;
-}
-
-/* Write current configuration into the terminal. */
-ALIAS(config_write_terminal,
-      show_running_config_cmd,
-      "show running-config",
-      SHOW_STR
-      "running configuration\n")
-
-/* Write startup configuration into the terminal. */
-DEFUN(show_startup_config,
-      show_startup_config_cmd,
-      "show startup-config",
-      SHOW_STR
-      "Contentes of startup configuration\n")
-{
-	char buf[BUFSIZ];
-	FILE *confp;
-
-	confp = fopen(host.config, "r");
-	if (confp == NULL) {
-		vty_out(vty, "Can't open configuration file [%s]%s"
-			   , host.config, VTY_NEWLINE);
-		return CMD_WARNING;
-	}
-
-	while (fgets(buf, BUFSIZ, confp)) {
-		char *cp = buf;
-
-		while (*cp != '\r' && *cp != '\n' && *cp != '\0')
-			cp++;
-		*cp = '\0';
-
-		vty_out(vty, "%s%s", buf, VTY_NEWLINE);
-	}
-
-	fclose(confp);
-
-	return CMD_SUCCESS;
-}
-
-/* Hostname configuration */
-DEFUN(config_hostname, 
-      hostname_cmd,
-      "hostname WORD",
-      "Set system's network name\n"
-      "This system's network name\n")
-{
-	if (!isalpha((int) *argv[0])) {
-		vty_out(vty, "Please specify string starting with alphabet%s", VTY_NEWLINE);
-		return CMD_WARNING;
-	}
-
-	FREE_PTR(host.name);
-    
-	host.name = strdup(argv[0]);
-	return CMD_SUCCESS;
-}
-
-DEFUN (config_no_hostname, 
-       no_hostname_cmd,
-       "no hostname [HOSTNAME]",
-       NO_STR
-       "Reset system's network name\n"
-       "Host name of this router\n")
-{
-	FREE_PTR(host.name);
-	host.name = NULL;
-	return CMD_SUCCESS;
-}
-
-/* VTY interface password set. */
-DEFUN(config_password, password_cmd,
-      "password (8|) WORD",
-      "Assign the terminal connection password\n"
-      "Specifies a HIDDEN password will follow\n"
-      "dummy string \n"
-      "The HIDDEN line password string\n")
-{
-	/* Argument check. */
-	if (argc == 0) {
-		vty_out(vty, "Please specify password.%s", VTY_NEWLINE);
-		return CMD_WARNING;
-	}
-
-	if (argc == 2) {
-		if (*argv[0] == '8') {
-			FREE_PTR(host.password);
-			host.password = NULL;
-			FREE_PTR(host.password_encrypt);
-			host.password_encrypt = strdup(argv[1]);
-			return CMD_SUCCESS;
-		} else {
-			vty_out(vty, "Unknown encryption type.%s", VTY_NEWLINE);
-			return CMD_WARNING;
-		}
-	}
-
-	if (!isalnum ((int) *argv[0])) {
-		vty_out(vty, "Please specify string starting with alphanumeric%s"
-			   , VTY_NEWLINE);
-		return CMD_WARNING;
-	}
-
-	FREE_PTR(host.password);
-	host.password = NULL;
-
-	if (host.encrypt) {
-		FREE_PTR(host.password_encrypt);
-		host.password_encrypt = strdup(zencrypt(argv[0]));
-	} else
-		host.password = strdup(argv[0]);
-
-	return CMD_SUCCESS;
-}
-
-ALIAS(config_password, password_text_cmd,
-      "password LINE",
-      "Assign the terminal connection password\n"
-      "The UNENCRYPTED (cleartext) line password\n")
-
-/* VTY enable password set. */
-DEFUN(config_enable_password, enable_password_cmd,
-      "enable password (8|) WORD",
-      "Modify enable password parameters\n"
-      "Assign the privileged level password\n"
-      "Specifies a HIDDEN password will follow\n"
-      "dummy string \n"
-      "The HIDDEN 'enable' password string\n")
-{
-	/* Argument check. */
-	if (argc == 0) {
-		vty_out(vty, "Please specify password.%s", VTY_NEWLINE);
-		return CMD_WARNING;
-	}
-
-	/* Crypt type is specified. */
-	if (argc == 2) {
-		if (*argv[0] == '8') {
-			FREE_PTR(host.enable);
-			host.enable = NULL;
-
-			FREE_PTR(host.enable_encrypt);
-			host.enable_encrypt = strdup(argv[1]);
-
-			return CMD_SUCCESS;
-		} else {
-			vty_out(vty, "Unknown encryption type.%s", VTY_NEWLINE);
-			return CMD_WARNING;
-		}
-	}
-
-	if (!isalnum ((int) *argv[0])) {
-		vty_out(vty, "Please specify string starting with alphanumeric%s", VTY_NEWLINE);
-		return CMD_WARNING;
-	}
-
-	FREE_PTR(host.enable);
-	host.enable = NULL;
-
-	/* Plain password input. */
-	if (host.encrypt) {
-		FREE_PTR(host.enable_encrypt);
-		host.enable_encrypt = strdup(zencrypt(argv[0]));
-	} else {
-		host.enable = strdup(argv[0]);
-	}
-
-	return CMD_SUCCESS;
-}
-
-ALIAS(config_enable_password,
-      enable_password_text_cmd,
-      "enable password LINE",
-      "Modify enable password parameters\n"
-      "Assign the privileged level password\n"
-      "The UNENCRYPTED (cleartext) 'enable' password\n")
-
-/* VTY enable password delete. */
-DEFUN(no_config_enable_password, no_enable_password_cmd,
-      "no enable password",
-      NO_STR
-      "Modify enable password parameters\n"
-      "Assign the privileged level password\n")
-{
-	FREE_PTR(host.enable);
-	host.enable = NULL;
-
-	FREE_PTR(host.enable_encrypt);
-	host.enable_encrypt = NULL;
-
-	return CMD_SUCCESS;
-}
-	
-DEFUN(service_password_encrypt,
-      service_password_encrypt_cmd,
-      "service password-encryption",
-      "Set up miscellaneous service\n"
-      "Enable encrypted passwords\n")
-{
-	if (host.encrypt)
-		return CMD_SUCCESS;
-
-	host.encrypt = 1;
-
-	if (host.password) {
-		FREE_PTR(host.password_encrypt);
-		host.password_encrypt = strdup(zencrypt(host.password));
-	}
-
-	if (host.enable) {
-		FREE_PTR(host.enable_encrypt);
-		host.enable_encrypt = strdup(zencrypt(host.enable));
-	}
-
-	return CMD_SUCCESS;
-}
-
-DEFUN(no_service_password_encrypt,
-      no_service_password_encrypt_cmd,
-      "no service password-encryption",
-      NO_STR
-      "Set up miscellaneous service\n"
-      "Enable encrypted passwords\n")
-{
-	if (!host.encrypt)
-		return CMD_SUCCESS;
-
-	host.encrypt = 0;
-
-	FREE_PTR(host.password_encrypt);
-	host.password_encrypt = NULL;
-
-	FREE_PTR(host.enable_encrypt);
-	host.enable_encrypt = NULL;
-
-	return CMD_SUCCESS;
-}
-
-DEFUN(config_terminal_length, config_terminal_length_cmd,
-      "terminal length <0-512>",
-      "Set terminal line parameters\n"
-      "Set number of lines on a screen\n"
-      "Number of lines on screen (0 for no pausing)\n")
-{
-	int lines;
-	char *endptr = NULL;
-
-	lines = strtol(argv[0], &endptr, 10);
-	if (lines < 0 || lines > 512 || *endptr != '\0') {
-		vty_out(vty, "length is malformed%s", VTY_NEWLINE);
-		return CMD_WARNING;
-	}
-	vty->lines = lines;
-
-	return CMD_SUCCESS;
-}
-
-DEFUN(config_terminal_no_length, config_terminal_no_length_cmd,
-      "terminal no length",
-      "Set terminal line parameters\n"
-      NO_STR
-      "Set number of lines on a screen\n")
-{
-	vty->lines = -1;
-	return CMD_SUCCESS;
-}
-
-DEFUN(service_terminal_length, service_terminal_length_cmd,
-      "service terminal-length <0-512>",
-      "Set up miscellaneous service\n"
-      "System wide terminal length configuration\n"
-      "Number of lines of VTY (0 means no line control)\n")
-{
-	int lines;
-	char *endptr = NULL;
-
-	lines = strtol(argv[0], &endptr, 10);
-	if (lines < 0 || lines > 512 || *endptr != '\0') {
-		vty_out(vty, "length is malformed%s", VTY_NEWLINE);
-		return CMD_WARNING;
-	}
-	host.lines = lines;
-
-	return CMD_SUCCESS;
-}
-
-DEFUN(no_service_terminal_length, no_service_terminal_length_cmd,
-      "no service terminal-length [<0-512>]",
-      NO_STR
-      "Set up miscellaneous service\n"
-      "System wide terminal length configuration\n"
-      "Number of lines of VTY (0 means no line control)\n")
-{
-	host.lines = -1;
-	return CMD_SUCCESS;
-}
-
-DEFUN_HIDDEN(do_echo,
-	     echo_cmd,
-	     "echo .MESSAGE",
-	     "Echo a message back to the vty\n"
-	     "The message to echo\n")
-{
-	char *message;
-
-	vty_out(vty, "%s%s", ((message = argv_concat(argv, argc, 0)) ? message : "")
-		   , VTY_NEWLINE);
-	FREE_PTR(message);
-	return CMD_SUCCESS;
-}
-
-DEFUN(banner_motd_file,
-      banner_motd_file_cmd,
-      "banner motd file [FILE]",
-      "Set banner\n"
-      "Banner for motd\n"
-      "Banner from a file\n"
-      "Filename\n")
-{
-	FREE_PTR(host.motdfile);
-	host.motdfile = strdup(argv[0]);
-
-	return CMD_SUCCESS;
-}
-
-DEFUN(banner_motd_default,
-      banner_motd_default_cmd,
-      "banner motd default",
-      "Set banner string\n"
-      "Strings for motd\n"
-      "Default string\n")
-{
-	host.motd = default_motd;
-	return CMD_SUCCESS;
-}
-
-DEFUN(no_banner_motd,
-      no_banner_motd_cmd,
-      "no banner motd",
-      NO_STR
-      "Set banner string\n"
-      "Strings for motd\n")
-{
-	host.motd = NULL;
-	FREE_PTR(host.motdfile);
-	host.motdfile = NULL;
-	return CMD_SUCCESS;
-}
-
-/* Set config filename.  Called from vty.c */
-void
-host_config_set(char *filename)
-{
-	FREE_PTR(host.config);
-	host.config = strdup(filename);
-}
-
-void
-install_default(node_type_t node)
-{
-	install_element(node, &config_exit_cmd);
-	install_element(node, &config_quit_cmd);
-	install_element(node, &config_end_cmd);
-	install_element(node, &config_help_cmd);
-	install_element(node, &config_list_cmd);
-
-	install_element(node, &config_write_terminal_cmd);
-	install_element(node, &config_write_file_cmd);
-	install_element(node, &config_write_memory_cmd);
-	install_element(node, &config_write_cmd);
-	install_element(node, &show_running_config_cmd);
-}
-
-/* Initialize command interface. Install basic nodes and commands. */
-void
-cmd_init(void)
-{
-	command_cr = strdup("<cr>");
-	desc_cr.cmd = command_cr;
-	desc_cr.str = strdup("");
-
-	/* Allocate initial top vector of commands. */
-	cmdvec = vector_init(VECTOR_DEFAULT_SIZE);
-
-	/* Default host value settings. */
-	host.name = NULL;
-	host.password = NULL;
-	host.enable = NULL;
-	host.logfile = NULL;
-	host.config = NULL;
-	host.lines = -1;
-	host.motd = default_motd;
-	host.motdfile = NULL;
-
-	/* Install top nodes. */
-	install_node(&view_node, NULL);
-	install_node(&enable_node, NULL);
-	install_node(&auth_node, NULL);
-	install_node(&auth_enable_node, NULL);
-	install_node(&config_node, config_write_host);
-
-	/* Each node's basic commands. */
-	install_element(VIEW_NODE, &show_version_cmd);
-	install_element(VIEW_NODE, &config_list_cmd);
-	install_element(VIEW_NODE, &config_exit_cmd);
-	install_element(VIEW_NODE, &config_quit_cmd);
-	install_element(VIEW_NODE, &config_help_cmd);
-	install_element(VIEW_NODE, &config_enable_cmd);
-	install_element(VIEW_NODE, &config_terminal_length_cmd);
-	install_element(VIEW_NODE, &config_terminal_no_length_cmd);
-	install_element(VIEW_NODE, &echo_cmd);
-
-	install_default(ENABLE_NODE);
-	install_element(ENABLE_NODE, &config_disable_cmd);
-	install_element(ENABLE_NODE, &config_terminal_cmd);
-	install_element(ENABLE_NODE, &copy_runningconfig_startupconfig_cmd);
-
-	install_element(ENABLE_NODE, &show_startup_config_cmd);
-	install_element(ENABLE_NODE, &show_version_cmd);
-
-	install_element(ENABLE_NODE, &config_terminal_length_cmd);
-	install_element(ENABLE_NODE, &config_terminal_no_length_cmd);
-	install_element(ENABLE_NODE, &echo_cmd);
-
-	install_default(CONFIG_NODE);
-  
-	install_element(CONFIG_NODE, &hostname_cmd);
-	install_element(CONFIG_NODE, &no_hostname_cmd);
-
-	install_element(CONFIG_NODE, &password_cmd);
-	install_element(CONFIG_NODE, &password_text_cmd);
-	install_element(CONFIG_NODE, &enable_password_cmd);
-	install_element(CONFIG_NODE, &enable_password_text_cmd);
-	install_element(CONFIG_NODE, &no_enable_password_cmd);
-
-	install_element(CONFIG_NODE, &service_password_encrypt_cmd);
-	install_element(CONFIG_NODE, &no_service_password_encrypt_cmd);
-	install_element(CONFIG_NODE, &banner_motd_default_cmd);
-	install_element(CONFIG_NODE, &banner_motd_file_cmd);
-	install_element(CONFIG_NODE, &no_banner_motd_cmd);
-	install_element(CONFIG_NODE, &service_terminal_length_cmd);
-	install_element(CONFIG_NODE, &no_service_terminal_length_cmd);
-
-	srand(time(NULL));
-}
-
-void
-cmd_terminate(void)
-{
-	unsigned int i, j, k, l;
-	cmd_node_t *cmd_node;
-	cmd_element_t *cmd_element;
-	desc_t *desc;
-	vector_t *cmd_node_v, *cmd_element_v, *desc_v;
-
-	if (cmdvec) {
-		for (i = 0; i < vector_active(cmdvec); i++) {
-			if ((cmd_node = vector_slot(cmdvec, i)) != NULL) {
-				cmd_node_v = cmd_node->cmd_vector;
-
-				for (j = 0; j < vector_active(cmd_node_v); j++) {
-					if ((cmd_element = vector_slot(cmd_node_v, j)) != NULL &&
-					    cmd_element->strvec != NULL) {
-						cmd_element_v = cmd_element->strvec;
-
-						for (k = 0; k < vector_active(cmd_element_v); k++) {
-							if ((desc_v = vector_slot(cmd_element_v, k)) != NULL) {
-								for (l = 0; l < vector_active(desc_v); l++)
-									if ((desc = vector_slot(desc_v, l)) != NULL) {
-										FREE_PTR(desc->cmd);
-										FREE_PTR(desc->str);
-										FREE(desc);
-									}
-									vector_free(desc_v);
-							}
-						}
-
-						cmd_element->strvec = NULL;
-						vector_free(cmd_element_v);
-					}
-				}
-
-				vector_free(cmd_node_v);
-			}
-		}
-
-		vector_free (cmdvec);
-		cmdvec = NULL;
-	}
-
-	FREE_PTR(command_cr);
-	FREE_PTR(desc_cr.str);
-	FREE_PTR(host.name);
-	FREE_PTR(host.password);
-	FREE_PTR(host.password_encrypt);
-	FREE_PTR(host.enable);
-	FREE_PTR(host.enable_encrypt);
-	FREE_PTR(host.motdfile);
-	FREE_PTR(host.config);
-}
diff --git a/tools/keepalived/lib/command.h b/tools/keepalived/lib/command.h
deleted file mode 100644
index 71191a1bc..000000000
--- a/tools/keepalived/lib/command.h
+++ /dev/null
@@ -1,294 +0,0 @@
-/*
- * Soft:        Keepalived is a failover program for the LVS project
- *              <www.linuxvirtualserver.org>. It monitor & manipulate
- *              a loadbalanced server pool using multi-layer checks.
- *
- * Part:        command.c include file.
- *
- * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *
- *              This program is distributed in the hope that it will be useful,
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
- *              See the GNU General Public License for more details.
- *
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
- *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
- */
-
-#ifndef _COMMAND_H
-#define _COMMAND_H
-
-#include "vector.h"
-#include "vty.h"
-
-/*
- *	command definition
- */
-typedef struct _host {
-	char			*name;			/* Host name of this router. */
-
-	char			*password;		/* Password for vty interface. */
-	char			*password_encrypt;
-
-	char			*enable;		/* Enable password */
-	char			*enable_encrypt;
-
-	int			lines;			/* System wide terminal lines. */
-
-	char			*logfile;		/* Log filename. */
-
-	char			*config;		/* config file name of this host */
-
-	int			advanced;		/* Flags for services */
-	int			encrypt;
-
-	const char		*motd;			/* Banner configuration. */
-	char			*motdfile;
-} host_t;
-
-/* There are some command levels which called from command node. */
-typedef enum _node_type {
-	AUTH_NODE,					/* Authentication mode of vty interface. */
-	VIEW_NODE,					/* View node. Default mode of vty interface. */
-	AUTH_ENABLE_NODE,				/* Authentication mode for change enable. */
-	ENABLE_NODE,					/* Enable node. */
-	CONFIG_NODE,					/* Config node. Default mode of config file. */
-	SERVICE_NODE,					/* Service node. */
-	DEBUG_NODE,					/* Debug node. */
-	CFG_LOG_NODE,					/* Configure the logging */
-
-	VTY_NODE,					/* Vty node. */
-
-	GLOBAL_NODE,					/* Global daemon commands. */
-	CHECK_NODE,					/* Checker framework commands. */
-	VRRP_NODE,					/* VRRP framework commands. */
-} node_type_t;
-
-/* Completion match types. */
-typedef enum _match_type {
-	no_match,
-	extend_match,
-	ipv4_prefix_match,
-	ipv4_match,
-	ipv6_prefix_match,
-	ipv6_match,
-	range_match,
-	vararg_match,
-	partly_match,
-	exact_match
-} match_type_t;
-
-/* Node which has some commands and prompt string and configuration
- * function pointer . */
-typedef struct _cmd_node {
-	node_type_t		node;			/* Node index. */
-	const char		*prompt;		/* Prompt character at vty interface. */
-	int			vtysh;			/* Is this node's configuration goes to vtysh ? */
-	int			(*func) (vty_t *);	/* Node's configuration write function */
-	vector_t		*cmd_vector;		/* Vector of this node's command list. */
-} cmd_node_t;
-
-/* Structure of command element. */
-typedef struct _cmd_element {
-	const char		*string;		/* Command specification by string. */
-	int			(*func) (struct _cmd_element *,
-					 vty_t *, int, const char *[]);
-	const char		*doc;			/* Documentation of this command. */
-	int			daemon;			/* Daemon to which this command belong. */
-	vector_t		*strvec;		/* Pointing out each description vector. */
-	unsigned int		cmdsize;		/* Command index count. */
-	char			*config;		/* Configuration string */
-	vector_t		*subconfig;		/* Sub configuration string */
-	uint8_t			attr;			/* Command attributes */
-} cmd_element_t;
-
-/* Command description structure. */
-typedef struct _desc {
-	char			*cmd;			/* Command string. */
-	char			*str;			/* Command's description. */
-} desc_t;
-
-
-/*
- *	Some defines
- */
-
-enum {
-	CMD_ATTR_HIDDEN = 1,
-};
-
-#define CMD_SUCCESS		0
-#define CMD_WARNING		1
-#define CMD_ERR_NO_MATCH	2
-#define CMD_ERR_AMBIGUOUS	3
-#define CMD_ERR_INCOMPLETE	4
-#define CMD_ERR_EXEED_ARGC_MAX	5
-#define CMD_ERR_NOTHING_TODO	6
-#define CMD_COMPLETE_FULL_MATCH	7
-#define CMD_COMPLETE_MATCH	8
-#define CMD_COMPLETE_LIST_MATCH	9
-#define CMD_SUCCESS_DAEMON	10
-
-#define CMD_ARGC_MAX		256
-
-#define IPV6_ADDR_STR		"0123456789abcdefABCDEF:.%"
-#define IPV6_PREFIX_STR		"0123456789abcdefABCDEF:.%/"
-#define STATE_START		1
-#define STATE_COLON		2
-#define STATE_DOUBLE		3
-#define STATE_ADDR		4
-#define STATE_DOT		5
-#define STATE_SLASH		6
-#define STATE_MASK		7
-
-#define DECIMAL_STRLEN_MAX	10
-#define INIT_MATCHVEC_SIZE	10
-
-
-/*
- *	Some usefull macros
- */
-
-/* helper defines for end-user DEFUN* macros */
-#define DEFUN_CMD_ELEMENT(funcname, cmdname, cmdstr, helpstr, attrs, dnum)	\
-	cmd_element_t cmdname = {						\
-		.string = cmdstr,						\
-		.func = funcname,						\
-		.doc = helpstr,							\
-		.attr = attrs,							\
-		.daemon = dnum,							\
-	};
-
-#define DEFUN_CMD_FUNC_DECL(funcname) \
-	static int funcname(cmd_element_t *, vty_t *, int, const char *[]);
-
-#define DEFUN_CMD_FUNC_TEXT(funcname)						\
-	static int funcname(cmd_element_t *self __attribute__ ((unused)),	\
-			    vty_t *vty __attribute__ ((unused)),		\
-			    int argc __attribute__ ((unused)),			\
-			    const char *argv[] __attribute__ ((unused)))
-
-/* DEFUN for vty command interafce. Little bit hacky ;-). */
-#define DEFUN(funcname, cmdname, cmdstr, helpstr)				\
-	DEFUN_CMD_FUNC_DECL(funcname)						\
-	DEFUN_CMD_ELEMENT(funcname, cmdname, cmdstr, helpstr, 0, 0)		\
-	DEFUN_CMD_FUNC_TEXT(funcname)
-
-#define DEFUN_ATTR(funcname, cmdname, cmdstr, helpstr, attr)			\
-	DEFUN_CMD_FUNC_DECL(funcname)						\
-	DEFUN_CMD_ELEMENT(funcname, cmdname, cmdstr, helpstr, attr, 0)		\
-	DEFUN_CMD_FUNC_TEXT(funcname)
-
-#define DEFUN_HIDDEN(funcname, cmdname, cmdstr, helpstr)			\
-	DEFUN_ATTR (funcname, cmdname, cmdstr, helpstr, CMD_ATTR_HIDDEN)
-
-/* DEFUN_NOSH for commands that vtysh should ignore */
-#define DEFUN_NOSH(funcname, cmdname, cmdstr, helpstr)				\
-	DEFUN(funcname, cmdname, cmdstr, helpstr)
-
-/* DEFSH for vtysh. */
-#define DEFSH(daemon, cmdname, cmdstr, helpstr)					\
-	DEFUN_CMD_ELEMENT(NULL, cmdname, cmdstr, helpstr, 0, daemon)
-
-/* DEFUN + DEFSH */
-#define DEFUNSH(daemon, funcname, cmdname, cmdstr, helpstr)			\
-	DEFUN_CMD_FUNC_DECL(funcname)						\
-	DEFUN_CMD_ELEMENT(funcname, cmdname, cmdstr, helpstr, 0, daemon)	\
-	DEFUN_CMD_FUNC_TEXT(funcname)
-
-/* DEFUN + DEFSH with attributes */
-#define DEFUNSH_ATTR(daemon, funcname, cmdname, cmdstr, helpstr, attr)		\
-	DEFUN_CMD_FUNC_DECL(funcname)						\
-	DEFUN_CMD_ELEMENT(funcname, cmdname, cmdstr, helpstr, attr, daemon)	\
-	DEFUN_CMD_FUNC_TEXT(funcname)
-
-#define DEFUNSH_HIDDEN(daemon, funcname, cmdname, cmdstr, helpstr)		\
-	DEFUNSH_ATTR (daemon, funcname, cmdname, cmdstr, helpstr, CMD_ATTR_HIDDEN)
-
-/* ALIAS macro which define existing command's alias. */
-#define ALIAS(funcname, cmdname, cmdstr, helpstr)				\
-	DEFUN_CMD_ELEMENT(funcname, cmdname, cmdstr, helpstr, 0, 0)
-
-#define ALIAS_ATTR(funcname, cmdname, cmdstr, helpstr, attr)			\
-	DEFUN_CMD_ELEMENT(funcname, cmdname, cmdstr, helpstr, attr, 0)
-
-#define ALIAS_HIDDEN(funcname, cmdname, cmdstr, helpstr)			\
-	DEFUN_CMD_ELEMENT(funcname, cmdname, cmdstr, helpstr, CMD_ATTR_HIDDEN, 0)
-
-#define ALIAS_SH(daemon, funcname, cmdname, cmdstr, helpstr)			\
-	DEFUN_CMD_ELEMENT(funcname, cmdname, cmdstr, helpstr, 0, daemon)
-
-#define ALIAS_SH_HIDDEN(daemon, funcname, cmdname, cmdstr, helpstr)		\
-	DEFUN_CMD_ELEMENT(funcname, cmdname, cmdstr, helpstr, CMD_ATTR_HIDDEN, daemon)
-
-#define CMD_OPTION(S)	((S[0]) == '[')
-#define CMD_VARIABLE(S)	(((S[0]) >= 'A' && (S[0]) <= 'Z') || ((S[0]) == '<'))
-#define CMD_VARARG(S)	((S[0]) == '.')
-#define CMD_RANGE(S)	((S[0] == '<'))
-
-#define CMD_IPV4(S)		((strcmp((S), "A.B.C.D") == 0))
-#define CMD_IPV4_PREFIX(S)	((strcmp((S), "A.B.C.D/M") == 0))
-#define CMD_IPV6(S)		((strcmp((S), "X:X::X:X") == 0))
-#define CMD_IPV6_PREFIX(S)	((strcmp((S), "X:X::X:X/M") == 0))
-
-/* Common descriptions. */
-#define SHOW_STR "Show running system information\n"
-#define IP_STR "IP information\n"
-#define IPV6_STR "IPv6 information\n"
-#define NO_STR "Negate a command or set its defaults\n"
-#define CLEAR_STR "Reset functions\n"
-#define DEBUG_STR "Debugging functions (see also 'undebug')\n"
-#define UNDEBUG_STR "Disable debugging functions (see also 'debug')\n"
-#define ROUTER_STR "Enable a routing process\n"
-#define MATCH_STR "Match values from routing table\n"
-#define SET_STR "Set values in destination routing protocol\n"
-#define OUT_STR "Filter outgoing routing updates\n"
-#define IN_STR  "Filter incoming routing updates\n"
-#define V4NOTATION_STR "specify by IPv4 address notation(e.g. 0.0.0.0)\n"
-#define IP6_STR "IPv6 Information\n"
-#define SECONDS_STR "<1-65535> Seconds\n"
-#define ROUTE_STR "Routing Table\n"
-#define PREFIX_LIST_STR "Build a prefix list\n"
-
-#define CONF_BACKUP_EXT ".sav"
-
-
-/*
- *	Global vars
- */
-extern cmd_element_t config_exit_cmd;
-extern cmd_element_t config_help_cmd;
-extern cmd_element_t config_list_cmd;
-extern host_t host;
-extern char *command_cr;
-
-
-/*
- *	Prototypes
- */
-extern void install_node(cmd_node_t *, int (*) (vty_t *));
-extern void install_default(node_type_t);
-extern void install_element(node_type_t, cmd_element_t *);
-extern void sort_node(void);
-extern char *argv_concat(const char **, int, int);
-extern vector_t *cmd_make_strvec(const char *);
-extern void cmd_free_strvec(vector_t *);
-extern vector_t *cmd_describe_command(vector_t *, vty_t *, int *);
-extern char **cmd_complete_command(vector_t *, vty_t *, int *);
-extern const char *cmd_prompt(node_type_t);
-extern int config_from_file(vty_t *, FILE *);
-extern node_type_t node_parent(node_type_t);
-extern int cmd_execute_command(vector_t *, vty_t *, cmd_element_t **, int);
-extern int cmd_execute_command_strict(vector_t *, vty_t *, cmd_element_t **);
-extern void config_replace_string(cmd_element_t *, char *, ...);
-extern void cmd_init(void);
-extern void cmd_terminate(void);
-extern char *host_config_file(void);
-extern void host_config_set(char *);
-
-#endif
diff --git a/tools/keepalived/lib/config.h.in b/tools/keepalived/lib/config.h.in
index bd8e2d7a9..878ed5c1a 100644
--- a/tools/keepalived/lib/config.h.in
+++ b/tools/keepalived/lib/config.h.in
@@ -1,31 +1,990 @@
-/*
- * Soft:        Keepalived is a failover program for the LVS project
- *              <www.linuxvirtualserver.org>. It monitor & manipulate
- *              a loadbalanced server pool using multi-layer checks.
- *
- * Part:        Global configuration elements.
- *
- * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *
- *              This program is distributed in the hope that it will be useful,
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
- *              See the GNU General Public License for more details.
- *
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
- *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
- */
+/* lib/config.h.in.  Generated from configure.ac by autoheader.  */
+
+
 #ifndef _CONFIG_H
 #define _CONFIG_H
+  
+
+/* Define to enable checksum debugging */
+#undef CHECKSUM_DIAGNOSTICS
+
+/* Define if need to check for EINTR errno */
+#undef CHECK_EINTR
+
+/* The configuration options from which the package is built */
+#undef CONFIGURATION_OPTIONS
+
+/* Define to 1 if need to call g_type_init() */
+#undef DBUS_NEED_G_TYPE_INIT
+
+/* Define to test for and log errno == EINTR when no asynchronous signal
+   handlers */
+#undef DEBUG_EINTR
+
+/* The default configuration file */
+#undef DEFAULT_CONFIG_FILE
+
+/* Define if appending to log files is allowed */
+#undef ENABLE_LOG_FILE_APPEND
+
+/* Define if enabling logging to files */
+#undef ENABLE_LOG_TO_FILE
+
+/* Defined here if not found in <net/ethernet.h>. */
+#undef ETHERTYPE_IPV6
+
+/* set to enforce GNU standard paths, for .pid files etc */
+#undef GNU_STD_PATHS
+
+/* Define to 1 if you have the <arpa/inet.h> header file. */
+#undef HAVE_ARPA_INET_H
+
+/* Define to 1 if you have the <asm/types.h> header file. */
+#undef HAVE_ASM_TYPES_H
+
+/* Define to 1 if you have the declaration of `CLONE_NEWNET', and to 0 if you
+   don't. */
+#undef HAVE_DECL_CLONE_NEWNET
+
+/* Define to 1 if you have the declaration of `ETHERTYPE_IPV6', and to 0 if
+   you don't. */
+#undef HAVE_DECL_ETHERTYPE_IPV6
+
+/* Define to 1 if you have the declaration of `FRA_DPORT_RANGE', and to 0 if
+   you don't. */
+#undef HAVE_DECL_FRA_DPORT_RANGE
+
+/* Define to 1 if you have the declaration of `FRA_IP_PROTO', and to 0 if you
+   don't. */
+#undef HAVE_DECL_FRA_IP_PROTO
+
+/* Define to 1 if you have the declaration of `FRA_L3MDEV', and to 0 if you
+   don't. */
+#undef HAVE_DECL_FRA_L3MDEV
+
+/* Define to 1 if you have the declaration of `FRA_OIFNAME', and to 0 if you
+   don't. */
+#undef HAVE_DECL_FRA_OIFNAME
+
+/* Define to 1 if you have the declaration of `FRA_PROTOCOL', and to 0 if you
+   don't. */
+#undef HAVE_DECL_FRA_PROTOCOL
+
+/* Define to 1 if you have the declaration of `FRA_SPORT_RANGE', and to 0 if
+   you don't. */
+#undef HAVE_DECL_FRA_SPORT_RANGE
+
+/* Define to 1 if you have the declaration of `FRA_SUPPRESS_IFGROUP', and to 0
+   if you don't. */
+#undef HAVE_DECL_FRA_SUPPRESS_IFGROUP
+
+/* Define to 1 if you have the declaration of `FRA_SUPPRESS_PREFIXLEN', and to
+   0 if you don't. */
+#undef HAVE_DECL_FRA_SUPPRESS_PREFIXLEN
+
+/* Define to 1 if you have the declaration of `FRA_TUN_ID', and to 0 if you
+   don't. */
+#undef HAVE_DECL_FRA_TUN_ID
+
+/* Define to 1 if you have the declaration of `FRA_UID_RANGE', and to 0 if you
+   don't. */
+#undef HAVE_DECL_FRA_UID_RANGE
+
+/* Define to 1 if you have the declaration of `GLOB_BRACE', and to 0 if you
+   don't. */
+#undef HAVE_DECL_GLOB_BRACE
+
+/* Define to 1 if you have the declaration of `IFA_FLAGS', and to 0 if you
+   don't. */
+#undef HAVE_DECL_IFA_FLAGS
+
+/* Define to 1 if you have the declaration of `IFLA_INET6_ADDR_GEN_MODE', and
+   to 0 if you don't. */
+#undef HAVE_DECL_IFLA_INET6_ADDR_GEN_MODE
+
+/* Define to 1 if you have the declaration of `IFLA_IPVLAN_MODE', and to 0 if
+   you don't. */
+#undef HAVE_DECL_IFLA_IPVLAN_MODE
+
+/* Define to 1 if you have the declaration of `IFLA_MACVLAN_MODE', and to 0 if
+   you don't. */
+#undef HAVE_DECL_IFLA_MACVLAN_MODE
+
+/* Define to 1 if you have the declaration of `IFLA_VRF_MAX', and to 0 if you
+   don't. */
+#undef HAVE_DECL_IFLA_VRF_MAX
+
+/* Define to 1 if you have the declaration of `IPV4_DEVCONF_ACCEPT_LOCAL', and
+   to 0 if you don't. */
+#undef HAVE_DECL_IPV4_DEVCONF_ACCEPT_LOCAL
+
+/* Define to 1 if you have the declaration of `IPV4_DEVCONF_ARPFILTER', and to
+   0 if you don't. */
+#undef HAVE_DECL_IPV4_DEVCONF_ARPFILTER
+
+/* Define to 1 if you have the declaration of `IPV4_DEVCONF_ARP_IGNORE', and
+   to 0 if you don't. */
+#undef HAVE_DECL_IPV4_DEVCONF_ARP_IGNORE
+
+/* Define to 1 if you have the declaration of `IPV4_DEVCONF_RP_FILTER', and to
+   0 if you don't. */
+#undef HAVE_DECL_IPV4_DEVCONF_RP_FILTER
+
+/* Define to 1 if you have the declaration of `IPV6_RECVHOPLIMIT', and to 0 if
+   you don't. */
+#undef HAVE_DECL_IPV6_RECVHOPLIMIT
+
+/* Define to 1 if you have the declaration of `IPV6_RECVPKTINFO', and to 0 if
+   you don't. */
+#undef HAVE_DECL_IPV6_RECVPKTINFO
+
+/* Define to 1 if you have the declaration of `IPVS_DAEMON_ATTR_MCAST_GROUP',
+   and to 0 if you don't. */
+#undef HAVE_DECL_IPVS_DAEMON_ATTR_MCAST_GROUP
+
+/* Define to 1 if you have the declaration of `IPVS_DAEMON_ATTR_MCAST_GROUP6',
+   and to 0 if you don't. */
+#undef HAVE_DECL_IPVS_DAEMON_ATTR_MCAST_GROUP6
+
+/* Define to 1 if you have the declaration of `IPVS_DAEMON_ATTR_MCAST_PORT',
+   and to 0 if you don't. */
+#undef HAVE_DECL_IPVS_DAEMON_ATTR_MCAST_PORT
+
+/* Define to 1 if you have the declaration of `IPVS_DAEMON_ATTR_MCAST_TTL',
+   and to 0 if you don't. */
+#undef HAVE_DECL_IPVS_DAEMON_ATTR_MCAST_TTL
+
+/* Define to 1 if you have the declaration of `IPVS_DAEMON_ATTR_SYNC_MAXLEN',
+   and to 0 if you don't. */
+#undef HAVE_DECL_IPVS_DAEMON_ATTR_SYNC_MAXLEN
+
+/* Define to 1 if you have the declaration of `IPVS_DEST_ATTR_ADDR_FAMILY',
+   and to 0 if you don't. */
+#undef HAVE_DECL_IPVS_DEST_ATTR_ADDR_FAMILY
+
+/* Define to 1 if you have the declaration of `IPVS_DEST_ATTR_STATS64', and to
+   0 if you don't. */
+#undef HAVE_DECL_IPVS_DEST_ATTR_STATS64
+
+/* Define to 1 if you have the declaration of `IPVS_DEST_ATTR_TUN_TYPE', and
+   to 0 if you don't. */
+#undef HAVE_DECL_IPVS_DEST_ATTR_TUN_TYPE
+
+/* Define to 1 if you have the declaration of `IPVS_SVC_ATTR_STATS64', and to
+   0 if you don't. */
+#undef HAVE_DECL_IPVS_SVC_ATTR_STATS64
+
+/* Define to 1 if you have the declaration of `IP_MULTICAST_ALL', and to 0 if
+   you don't. */
+#undef HAVE_DECL_IP_MULTICAST_ALL
+
+/* Define to 1 if you have the declaration of `IP_VS_CONN_F_TUNNEL_TYPE_GRE',
+   and to 0 if you don't. */
+#undef HAVE_DECL_IP_VS_CONN_F_TUNNEL_TYPE_GRE
+
+/* Define to 1 if you have the declaration of `IP_VS_SVC_F_ONEPACKET', and to
+   0 if you don't. */
+#undef HAVE_DECL_IP_VS_SVC_F_ONEPACKET
+
+/* Define to 1 if you have the declaration of
+   `IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM', and to 0 if you don't. */
+#undef HAVE_DECL_IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM
+
+/* Define to 1 if you have the declaration of `LWTUNNEL_ENCAP_ILA', and to 0
+   if you don't. */
+#undef HAVE_DECL_LWTUNNEL_ENCAP_ILA
+
+/* Define to 1 if you have the declaration of `LWTUNNEL_ENCAP_MPLS', and to 0
+   if you don't. */
+#undef HAVE_DECL_LWTUNNEL_ENCAP_MPLS
+
+/* Define to 1 if you have the declaration of `MACVLAN_MODE_PRIVATE', and to 0
+   if you don't. */
+#undef HAVE_DECL_MACVLAN_MODE_PRIVATE
+
+/* Define to 1 if you have the declaration of `NFTA_DUP_MAX', and to 0 if you
+   don't. */
+#undef HAVE_DECL_NFTA_DUP_MAX
+
+/* Define to 1 if you have the declaration of `O_PATH', and to 0 if you don't.
+   */
+#undef HAVE_DECL_O_PATH
+
+/* Define to 1 if you have the declaration of `PROC_EVENT_COMM', and to 0 if
+   you don't. */
+#undef HAVE_DECL_PROC_EVENT_COMM
+
+/* Define to 1 if you have the declaration of `PROC_EVENT_COREDUMP', and to 0
+   if you don't. */
+#undef HAVE_DECL_PROC_EVENT_COREDUMP
+
+/* Define to 1 if you have the declaration of `PROC_EVENT_PTRACE', and to 0 if
+   you don't. */
+#undef HAVE_DECL_PROC_EVENT_PTRACE
+
+/* Define to 1 if you have the declaration of `PROC_EVENT_SID', and to 0 if
+   you don't. */
+#undef HAVE_DECL_PROC_EVENT_SID
+
+/* Define to 1 if you have the declaration of `RLIMIT_RTTIME', and to 0 if you
+   don't. */
+#undef HAVE_DECL_RLIMIT_RTTIME
+
+/* Define to 1 if you have the declaration of `RTAX_CC_ALGO', and to 0 if you
+   don't. */
+#undef HAVE_DECL_RTAX_CC_ALGO
+
+/* Define to 1 if you have the declaration of `RTAX_FASTOPEN_NO_COOKIE', and
+   to 0 if you don't. */
+#undef HAVE_DECL_RTAX_FASTOPEN_NO_COOKIE
+
+/* Define to 1 if you have the declaration of `RTAX_QUICKACK', and to 0 if you
+   don't. */
+#undef HAVE_DECL_RTAX_QUICKACK
+
+/* Define to 1 if you have the declaration of `RTA_ENCAP', and to 0 if you
+   don't. */
+#undef HAVE_DECL_RTA_ENCAP
+
+/* Define to 1 if you have the declaration of `RTA_EXPIRES', and to 0 if you
+   don't. */
+#undef HAVE_DECL_RTA_EXPIRES
+
+/* Define to 1 if you have the declaration of `RTA_NEWDST', and to 0 if you
+   don't. */
+#undef HAVE_DECL_RTA_NEWDST
+
+/* Define to 1 if you have the declaration of `RTA_PREF', and to 0 if you
+   don't. */
+#undef HAVE_DECL_RTA_PREF
+
+/* Define to 1 if you have the declaration of `RTA_TTL_PROPAGATE', and to 0 if
+   you don't. */
+#undef HAVE_DECL_RTA_TTL_PROPAGATE
+
+/* Define to 1 if you have the declaration of `RTA_VIA', and to 0 if you
+   don't. */
+#undef HAVE_DECL_RTA_VIA
+
+/* Define to 1 if you have the declaration of `RTEXT_FILTER_SKIP_STATS', and
+   to 0 if you don't. */
+#undef HAVE_DECL_RTEXT_FILTER_SKIP_STATS
+
+/* Define to 1 if you have the declaration of `SCHED_RESET_ON_FORK', and to 0
+   if you don't. */
+#undef HAVE_DECL_SCHED_RESET_ON_FORK
+
+/* Define to 1 if you have the declaration of `SCHED_RR', and to 0 if you
+   don't. */
+#undef HAVE_DECL_SCHED_RR
+
+/* Define to 1 if you have the declaration of `SOCK_CLOEXEC', and to 0 if you
+   don't. */
+#undef HAVE_DECL_SOCK_CLOEXEC
+
+/* Define to 1 if you have the declaration of `SOCK_NONBLOCK', and to 0 if you
+   don't. */
+#undef HAVE_DECL_SOCK_NONBLOCK
+
+/* Define to 1 if you have the declaration of `SO_MARK', and to 0 if you
+   don't. */
+#undef HAVE_DECL_SO_MARK
+
+/* Define to 1 if you have the `dup2' function. */
+#undef HAVE_DUP2
+
+/* Define to 1 if you have the `epoll_create1' function. */
+#undef HAVE_EPOLL_CREATE1
+
+/* Define to 1 if you have the <fcntl.h> header file. */
+#undef HAVE_FCNTL_H
+
+/* Define to 1 if you have the `fork' function. */
+#undef HAVE_FORK
+
+/* Define to 1 if you have the `getcwd' function. */
+#undef HAVE_GETCWD
+
+/* Define to 1 if you have the `gettimeofday' function. */
+#undef HAVE_GETTIMEOFDAY
+
+/* Define to 1 if IFLA_LINK_NETNSID supported */
+#undef HAVE_IFLA_LINK_NETNSID
+
+/* Define to 1 if you have the `inotify_init1' function. */
+#undef HAVE_INOTIFY_INIT1
+
+/* Define to 1 if you have the <inttypes.h> header file. */
+#undef HAVE_INTTYPES_H
+
+/* Define to 1 if ipset supports iface type */
+#undef HAVE_IPSET_ATTR_IFACE
+
+/* Define to 1 if you have the `crypto' library (-lcrypto). */
+#undef HAVE_LIBCRYPTO
+
+/* Define to 1 if you have the <libipset/data.h> header file. */
+#undef HAVE_LIBIPSET_DATA_H
+
+/* Define to 1 if you have the <libipset/linux_ip_set.h> header file. */
+#undef HAVE_LIBIPSET_LINUX_IP_SET_H
+
+/* Define to 1 if you have the <libipset/session.h> header file. */
+#undef HAVE_LIBIPSET_SESSION_H
+
+/* Define to 1 if you have the <libipset/types.h> header file. */
+#undef HAVE_LIBIPSET_TYPES_H
+
+/* Define to 1 if you have the <libiptc/libip6tc.h> header file. */
+#undef HAVE_LIBIPTC_LIBIP6TC_H
+
+/* Define to 1 if you have the <libiptc/libiptc.h> header file. */
+#undef HAVE_LIBIPTC_LIBIPTC_H
+
+/* Define to 1 if you have the <libiptc/libxtc.h> header file. */
+#undef HAVE_LIBIPTC_LIBXTC_H
+
+/* Define to 1 if you have the <libnftnl/udata.h> header file. */
+#undef HAVE_LIBNFTNL_UDATA_H
+
+/* Define to 1 if you have the `ssl' library (-lssl). */
+#undef HAVE_LIBSSL
+
+/* Define to 1 if you have the <limits.h> header file. */
+#undef HAVE_LIMITS_H
+
+/* Define to 1 if you have the <linux/ethtool.h> header file. */
+#undef HAVE_LINUX_ETHTOOL_H
+
+/* Define to 1 if you have the <linux/fib_rules.h> header file. */
+#undef HAVE_LINUX_FIB_RULES_H
+
+/* Define to 1 if you have the <linux/icmpv6.h> header file. */
+#undef HAVE_LINUX_ICMPV6_H
+
+/* Define to 1 if you have the <linux/if_addr.h> header file. */
+#undef HAVE_LINUX_IF_ADDR_H
+
+/* Define to 1 if you have the <linux/if_arp.h> header file. */
+#undef HAVE_LINUX_IF_ARP_H
+
+/* Define to 1 if you have the <linux/if_ether.h> header file. */
+#undef HAVE_LINUX_IF_ETHER_H
+
+/* Define to 1 if you have the <linux/if_link.h> header file. */
+#undef HAVE_LINUX_IF_LINK_H
+
+/* Define to 1 if you have the <linux/if_packet.h> header file. */
+#undef HAVE_LINUX_IF_PACKET_H
+
+/* Define to 1 if you have the <linux/ip.h> header file. */
+#undef HAVE_LINUX_IP_H
+
+/* Define to 1 if you have the <linux/ip_vs.h> header file. */
+#undef HAVE_LINUX_IP_VS_H
+
+/* Define to 1 if you have the <linux/netfilter/xt_set.h> header file. */
+#undef HAVE_LINUX_NETFILTER_XT_SET_H
+
+/* Define to 1 if you have the <linux/netfilter/x_tables.h> header file. */
+#undef HAVE_LINUX_NETFILTER_X_TABLES_H
+
+/* Define to 1 if you have the <linux/rtnetlink.h> header file. */
+#undef HAVE_LINUX_RTNETLINK_H
+
+/* Define to 1 if you have the <linux/sockios.h> header file. */
+#undef HAVE_LINUX_SOCKIOS_H
+
+/* Define to 1 if you have the <linux/types.h> header file. */
+#undef HAVE_LINUX_TYPES_H
+
+/* Define to 1 if your system has a GNU libc compatible `malloc' function, and
+   to 0 otherwise. */
+#undef HAVE_MALLOC
+
+/* Define to 1 if you have the `memmove' function. */
+#undef HAVE_MEMMOVE
+
+/* Define to 1 if you have the <memory.h> header file. */
+#undef HAVE_MEMORY_H
+
+/* Define to 1 if you have the `memset' function. */
+#undef HAVE_MEMSET
+
+/* Define to 1 if you have the <netdb.h> header file. */
+#undef HAVE_NETDB_H
+
+/* Define to 1 if you have the <netinet/in.h> header file. */
+#undef HAVE_NETINET_IN_H
+
+/* Define to 1 if you have the <netlink/genl/ctrl.h> header file. */
+#undef HAVE_NETLINK_GENL_CTRL_H
+
+/* Define to 1 if you have the <netlink/genl/genl.h> header file. */
+#undef HAVE_NETLINK_GENL_GENL_H
+
+/* Define to 1 if you have the <netlink/netlink.h> header file. */
+#undef HAVE_NETLINK_NETLINK_H
+
+/* Define to 1 if you have the `netsnmp_enable_subagent' function. */
+#undef HAVE_NETSNMP_ENABLE_SUBAGENT
+
+/* Define to 1 if you have the <net-snmp/agent/agent_sysORTable.h> header
+   file. */
+#undef HAVE_NET_SNMP_AGENT_AGENT_SYSORTABLE_H
+
+/* Define to 1 if you have the <net-snmp/agent/snmp_vars.h> header file. */
+#undef HAVE_NET_SNMP_AGENT_SNMP_VARS_H
+
+/* Define to 1 if you have the <net-snmp/agent/util_funcs.h> header file. */
+#undef HAVE_NET_SNMP_AGENT_UTIL_FUNCS_H
+
+/* Define to 1 if NFTNL_EXPR_LOOKUP_FLAGS defined */
+#undef HAVE_NFTNL_EXPR_LOOKUP_FLAGS
+
+/* Define to 1 if nftnl_udata_put_u32 declared */
+#undef HAVE_NFTNL_UDATA_PUT_U32
+
+/* Define to 1 if you have the <openssl/err.h> header file. */
+#undef HAVE_OPENSSL_ERR_H
+
+/* Define to 1 if you have the `OPENSSL_init_crypto' function. */
+#undef HAVE_OPENSSL_INIT_CRYPTO
+
+/* Define to 1 if OPENSSL_init_crypto(OPENSSL_INIT_NO_LOAD_CONFIG) bug) */
+#undef HAVE_OPENSSL_INIT_NO_LOAD_CONFIG_BUG
+
+/* Define to 1 if you have the <openssl/md5.h> header file. */
+#undef HAVE_OPENSSL_MD5_H
+
+/* Define to 1 if you have the <openssl/sha.h> header file. */
+#undef HAVE_OPENSSL_SHA_H
+
+/* Define to 1 if you have the <openssl/ssl.h> header file. */
+#undef HAVE_OPENSSL_SSL_H
+
+/* Define to 1 if you have the `pipe2' function. */
+#undef HAVE_PIPE2
+
+/* Define to 1 if your system has a GNU libc compatible `realloc' function,
+   and to 0 otherwise. */
+#undef HAVE_REALLOC
+
+/* Define to 1 if you have the `select' function. */
+#undef HAVE_SELECT
+
+/* Define to 1 if you have the `setenv' function. */
+#undef HAVE_SETENV
+
+/* Define to 1 if you have the `setns' function. */
+#undef HAVE_SETNS
+
+/* Define to 1 if you have the `signalfd' function. */
+#undef HAVE_SIGNALFD
+
+/* Define to 1 if you have the `socket' function. */
+#undef HAVE_SOCKET
+
+/* Define to 1 if you have the `SSL_CTX_set_verify_depth' function. */
+#undef HAVE_SSL_CTX_SET_VERIFY_DEPTH
+
+/* Define to 1 if you have the `SSL_set0_rbio' function. */
+#undef HAVE_SSL_SET0_RBIO
+
+/* Define to 1 if stdbool.h conforms to C99. */
+#undef HAVE_STDBOOL_H
+
+/* Define to 1 if you have the <stdint.h> header file. */
+#undef HAVE_STDINT_H
+
+/* Define to 1 if you have the <stdlib.h> header file. */
+#undef HAVE_STDLIB_H
+
+/* Define to 1 if you have the `strcasecmp' function. */
+#undef HAVE_STRCASECMP
+
+/* Define to 1 if you have the `strchr' function. */
+#undef HAVE_STRCHR
+
+/* Define to 1 if you have the `strdup' function. */
+#undef HAVE_STRDUP
+
+/* Define to 1 if you have the `strerror' function. */
+#undef HAVE_STRERROR
+
+/* Define to 1 if you have the <strings.h> header file. */
+#undef HAVE_STRINGS_H
+
+/* Define to 1 if you have the <string.h> header file. */
+#undef HAVE_STRING_H
 
-#define LOG_FACILITY_MAX        7
-#define PROG                    "Keepalived"
-#define VERSION_STRING PROG" v@VERSION@ (@VERSION_DATE@)\n"
-#define COPYRIGHT_STRING	"Copyright (C) 2001-2012 Alexandre Cassen, <acassen@gmail.com>"
+/* Define to 1 if you have the `strpbrk' function. */
+#undef HAVE_STRPBRK
 
+/* Define to 1 if you have the `strstr' function. */
+#undef HAVE_STRSTR
+
+/* Define to 1 if you have the `strtol' function. */
+#undef HAVE_STRTOL
+
+/* Define to 1 if you have the `strtoul' function. */
+#undef HAVE_STRTOUL
+
+/* Define to 1 if you have the <syslog.h> header file. */
+#undef HAVE_SYSLOG_H
+
+/* Define to 1 if you have the <sys/ioctl.h> header file. */
+#undef HAVE_SYS_IOCTL_H
+
+/* Define to 1 if you have the <sys/param.h> header file. */
+#undef HAVE_SYS_PARAM_H
+
+/* Define to 1 if you have the <sys/prctl.h> header file. */
+#undef HAVE_SYS_PRCTL_H
+
+/* Define to 1 if you have the <sys/socket.h> header file. */
+#undef HAVE_SYS_SOCKET_H
+
+/* Define to 1 if you have the <sys/stat.h> header file. */
+#undef HAVE_SYS_STAT_H
+
+/* Define to 1 if you have the <sys/time.h> header file. */
+#undef HAVE_SYS_TIME_H
+
+/* Define to 1 if you have the <sys/types.h> header file. */
+#undef HAVE_SYS_TYPES_H
+
+/* Define to 1 if you have the `TLS_method' function. */
+#undef HAVE_TLS_METHOD
+
+/* Define to 1 if you have the `uname' function. */
+#undef HAVE_UNAME
+
+/* Define to 1 if you have the <unistd.h> header file. */
+#undef HAVE_UNISTD_H
+
+/* Define to 1 if you have the `vfork' function. */
+#undef HAVE_VFORK
+
+/* Define to 1 if you have the <vfork.h> header file. */
+#undef HAVE_VFORK_H
+
+/* Define to 1 if you have the `vsyslog' function. */
+#undef HAVE_VSYSLOG
+
+/* Define to 1 if `fork' works. */
+#undef HAVE_WORKING_FORK
+
+/* Define to 1 if `vfork' works. */
+#undef HAVE_WORKING_VFORK
+
+/* Define to 1 if have struct xt_set_info_match_v1 */
+#undef HAVE_XT_SET_INFO_MATCH_V1
+
+/* Define to 1 if have struct xt_set_info_match_v3 */
+#undef HAVE_XT_SET_INFO_MATCH_V3
+
+/* Define to 1 if have struct xt_set_info_match_v4 */
+#undef HAVE_XT_SET_INFO_MATCH_V4
+
+/* Define to 1 if the system has the type `_Bool'. */
+#undef HAVE__BOOL
+
+/* Define the ip4tc library name */
+#undef IP4TC_LIB_NAME
+
+/* Define the ip6tc library name */
+#undef IP6TC_LIB_NAME
+
+/* Define the ipset library name */
+#undef IPSET_LIB_NAME
+
+/* Defined to value in <linux/in.h> if not in <netinet/in.h> */
+#undef IP_MULTICAST_ALL
+
+/* configure options specified */
+#undef KEEPALIVED_CONFIGURE_OPTIONS
+
+/* Define to add guard _IP_SET_H before including <libipset/linux_ip_set.h> */
+#undef LIBIPSET_H_ADD_IP_SET_H_GUARD
+
+/* Define to add guard _UAPI_IP_SET_H before including
+   <libipset/linux_ip_set.h> */
+#undef LIBIPSET_H_ADD_UAPI_IP_SET_H_GUARD
+
+/* Define to 1 if libipset library version prior to v7 */
+#undef LIBIPSET_PRE_V7_COMPAT
+
+/* Define to 1 if libipvs can use netlink */
+#undef LIBIPVS_USE_NL
+
+/* The type of parameter __line passed to __assert_fail() */
+#undef LINE_type
+
+/* Define to 1 if <linux/netlink.h> needs <sys/socket.h> */
+#undef NETLINK_H_NEEDS_SYS_SOCKET_H
+
+/* Define the nl-genl-3.0 library name */
+#undef NL3_GENL_LIB_NAME
+
+/* Define the nl-3 library name */
+#undef NL3_LIB_NAME
+
+/* Define the nl library name */
+#undef NL_LIB_NAME
+
+/* Name of package */
+#undef PACKAGE
+
+/* Define to the address where bug reports for this package should be sent. */
+#undef PACKAGE_BUGREPORT
+
+/* Define to the full name of this package. */
+#undef PACKAGE_NAME
+
+/* Define to the full name and version of this package. */
+#undef PACKAGE_STRING
+
+/* Define to the one symbol short name of this package. */
+#undef PACKAGE_TARNAME
+
+/* Define to the home page for this package. */
+#undef PACKAGE_URL
+
+/* Define to the version of this package. */
+#undef PACKAGE_VERSION
+
+/* Parent directory of /run */
+#undef PID_DIR_ROOT
+
+/* Define printf format specifier for rlim_t */
+#undef PRI_rlim_t
+
+/* Define to 1 if <linux/rtnetlink.h> needs <sys/socket.h> */
+#undef RTNETLINK_H_NEEDS_SYS_SOCKET_H
+
+/* Dummy definition if not defined in system headers */
+#undef SCHED_RESET_ON_FORK
+
+/* Define to 1 if you have the ANSI C header files. */
+#undef STDC_HEADERS
+
+/* The system options from which the package is built */
+#undef SYSTEM_OPTIONS
+
+/* Define to 1 to build with thread dumping support */
+#undef THREAD_DUMP
+
+/* Define to 1 if <linux/netfilter/xt_set.h> needs <libipset/linux_ip_set.h>
+   */
+#undef USE_LIBIPSET_LINUX_IP_SET_H
+
+/* Version number of package */
+#undef VERSION
+
+/* Define if <linux/netfilter/x_tables.h> doesnt define it */
+#undef XT_EXTENSION_MAXNAMELEN
+
+/* Define to 1 to build with debugging support */
+#undef _DEBUG_
+
+/* Define to enable keyword dumping */
+#undef _DUMP_KEYWORDS_
+
+/* Define to 1 to enable asserts */
+#undef _ENABLE_ASSERT_
+
+/* Define to 1 to build with epoll_wait() debugging support */
+#undef _EPOLL_DEBUG_
+
+/* Define to 1 to build with epoll thread dumping support */
+#undef _EPOLL_THREAD_DUMP_
+
+/* Consider ${with_fixed_if_type} interfaces to be unchangeable */
+#undef _FIXED_IF_TYPE_
+
+/* Define to 1 if can have _Pragma GCC diagnostic push/pop */
+#undef _HAVE_DIAGNOSTIC_PUSH_POP_PRAGMAS_
+
+/* Define to 1 if have FIB routing support */
+#undef _HAVE_FIB_ROUTING_
+
+/* Define to 1 if can have _Pragma GCC diagnostic in functions */
+#undef _HAVE_FUNCTION_DIAGNOSTIC_PRAGMAS_
+
+/* Define to 1 if have IPv4 netlink device configuration */
+#undef _HAVE_IPV4_DEVCONF_
+
+/* Define to 1 if have IPVS syncd attributes */
+#undef _HAVE_IPVS_SYNCD_ATTRIBUTES_
+
+/* Define to 1 if have IPVS tunnel checksum options */
+#undef _HAVE_IPVS_TUN_CSUM_
+
+/* Define to 1 if have IPVS gre tunnel */
+#undef _HAVE_IPVS_TUN_GRE_
+
+/* Define to 1 if have IPVS tunnel type */
+#undef _HAVE_IPVS_TUN_TYPE_
+
+/* Define to 1 if have ipset library */
+#undef _HAVE_LIBIPSET_
+
+/* Define to 1 if have iptables libraries */
+#undef _HAVE_LIBIPTC_
+
+/* Define to 1 if have libiptc/libiptc.h linux/if.h and net/if.h namespace
+   collision */
+#undef _HAVE_LIBIPTC_LINUX_NET_IF_H_COLLISION_
+
+/* Define to 1 if have magic library */
+#undef _HAVE_LIBMAGIC_
+
+/* Define to 1 if using libnl-1 */
+#undef _HAVE_LIBNL1_
+
+/* Define to 1 if using libnl-3 */
+#undef _HAVE_LIBNL3_
+
+/* Define to 1 if have linux/if_ether.h then netinet/if_ether.h namespace
+   collision */
+#undef _HAVE_NETINET_LINUX_IF_ETHER_H_COLLISION_
+
+/* Define to 1 if have linux/if.h followed by net/if.h namespace collision */
+#undef _HAVE_NET_LINUX_IF_H_COLLISION_
+
+/* Define to 1 if have pe selection support */
+#undef _HAVE_PE_NAME_
+
+/* Define to 1 if _Pragma("GCC diagnostic warning \"-Wstrict-overflow=1\"")
+   supported */
+#undef _HAVE_PRAGMA_WARN_STRICT_OVERFLOW_1_
+
+/* Define to 1 if have SCHED_RR */
+#undef _HAVE_SCHED_RT_
+
+/* Define to 1 if have SSL_set_tlsext_host_name() */
+#undef _HAVE_SSL_SET_TLSEXT_HOST_NAME_
+
+/* Define to 1 if have kernel VRF support */
+#undef _HAVE_VRF_
+
+/* Define to 1 if have IP VLAN support */
+#undef _HAVE_VRRP_IPVLAN_
+
+/* Define to 1 if have MAC VLAN support */
+#undef _HAVE_VRRP_VMAC_
+
+/* Define to 1 if building with libipset dynamic linking */
+#undef _LIBIPSET_DYNAMIC_
+
+/* Define to 1 if building with libiptc dynamic linking */
+#undef _LIBIPTC_DYNAMIC_
+
+/* Define to 1 if building with libnl dynamic linking */
+#undef _LIBNL_DYNAMIC_
+
+/* Define to 1 to build with malloc/free checks */
+#undef _MEM_CHECK_
+
+/* Define to 1 to log malloc/free checks to syslog */
+#undef _MEM_CHECK_LOG_
+
+/* Define to 1 to build with netlink command timers support */
+#undef _NETLINK_TIMERS_
+
+/* Define to 1 to build with network timestamp support */
+#undef _NETWORK_TIMESTAMP_
+
+/* Define to 1 if unaligned memory access not supported */
+#undef _NO_UNALIGNED_ACCESS_
+
+/* Define to enable parser debugging */
+#undef _PARSER_DEBUG_
+
+/* Define to 1 to build with regex debugging support */
+#undef _REGEX_DEBUG_
+
+/* Define to 1 to build with smtp-alert debugging support */
+#undef _SMTP_ALERT_DEBUG_
+
+/* Define to 1 to have keepalived send RFC6527 SNMP responses for VRRPv2
+   instances */
+#undef _SNMP_REPLY_V3_FOR_V2_
+
+/* Define to 1 if want stricter configuration checking */
+#undef _STRICT_CONFIG_
+
+/* Define to 1 to build with set time logging */
+#undef _TIMER_CHECK_
+
+/* Define to enable logging all process connector events */
+#undef _TRACK_PROCESS_DEBUG_
+
+/* Define to 1 to build with TSM debugging support */
+#undef _TSM_DEBUG_
+
+/* Define for Solaris 2.5.1 so the uint32_t typedef from <sys/synch.h>,
+   <pthread.h>, or <semaphore.h> is not used. If the typedef were allowed, the
+   #define below would cause a syntax error. */
+#undef _UINT32_T
+
+/* Define for Solaris 2.5.1 so the uint64_t typedef from <sys/synch.h>,
+   <pthread.h>, or <semaphore.h> is not used. If the typedef were allowed, the
+   #define below would cause a syntax error. */
+#undef _UINT64_T
+
+/* Define for Solaris 2.5.1 so the uint8_t typedef from <sys/synch.h>,
+   <pthread.h>, or <semaphore.h> is not used. If the typedef were allowed, the
+   #define below would cause a syntax error. */
+#undef _UINT8_T
+
+/* Define to 1 if using iptables command enabled */
+#undef _USE_IPTABLES_CMD_
+
+/* Define to 1 to build with vrrp fd debugging support */
+#undef _VRRP_FD_DEBUG_
+
+/* Define to 1 if have BFD support */
+#undef _WITH_BFD_
+
+/* Define to 1 if have linux/cn_proc.h and track-process not disabled */
+#undef _WITH_CN_PROC_
+
+/* Define to 1 to have DBUS support */
+#undef _WITH_DBUS_
+
+/* Define to 1 to have DBus create instance support */
+#undef _WITH_DBUS_CREATE_INSTANCE_
+
+/* Define to 1 to build with thread dumping support */
+#undef _WITH_DUMP_THREADS_
+
+/* Define to 1 if using iptables or nftables */
+#undef _WITH_FIREWALL_
+
+/* Define to 1 if want iptables support */
+#undef _WITH_IPTABLES_
+
+/* Define to 1 to build with JSON output support */
+#undef _WITH_JSON_
+
+/* Define to 1 if have linkbeat support */
+#undef _WITH_LINKBEAT_
+
+/* Define to 1 if have IPVS support */
+#undef _WITH_LVS_
+
+/* Define to 1 if have IPVS 64 bit stats */
+#undef _WITH_LVS_64BIT_STATS_
+
+/* Define to 1 if want nftables support */
+#undef _WITH_NFTABLES_
+
+/* Define to 1 to build with perf support */
+#undef _WITH_PERF_
+
+/* Define to 1 if using pthreads */
+#undef _WITH_PTHREADS_
+
+/* Define to 1 to build with HTTP_GET regex checking */
+#undef _WITH_REGEX_CHECK_
+
+/* Define to 1 to include regex timers */
+#undef _WITH_REGEX_TIMERS_
+
+/* Define to 1 to have SHA1 support */
+#undef _WITH_SHA1_
+
+/* Define to 1 to have SNMP support */
+#undef _WITH_SNMP_
+
+/* Define to 1 to have keepalived SNMP checker support */
+#undef _WITH_SNMP_CHECKER_
+
+/* Define to 1 to have keepalived SNMP support */
+#undef _WITH_SNMP_KEEPALIVED_
+
+/* Define to 1 to have RFCv2 SNMP support */
+#undef _WITH_SNMP_RFCV2_
+
+/* Define to 1 to have RFCv3 SNMP support */
+#undef _WITH_SNMP_RFCV3_
+
+/* Define to 1 to have RFC SNMP support */
+#undef _WITH_SNMP_RFC_
+
+/* Define to 1 to have keepalived SNMP VRRP support */
+#undef _WITH_SNMP_VRRP_
+
+/* Define to 1 if have SO_MARK */
+#undef _WITH_SO_MARK_
+
+/* Define to 1 to build with stacktrace support */
+#undef _WITH_STACKTRACE_
+
+/* Define to 1 to enable v1.3.6 and earlier VRRPv3 unicast checksum
+   compatibility */
+#undef _WITH_UNICAST_CHKSUM_COMPAT_
+
+/* Define to 1 if have VRRP support */
+#undef _WITH_VRRP_
+
+/* Define to 1 if want ARRP authentication support */
+#undef _WITH_VRRP_AUTH_
+
+/* Define __always_inline if libc does not define it */
+#undef __always_inline
+
+/* Define to empty if `const' does not conform to ANSI C. */
+#undef const
+
+/* Define to `__inline__' or `__inline' if that's what the C compiler
+   calls it, or to nothing if 'inline' is not supported under any name.  */
+#ifndef __cplusplus
+#undef inline
+#endif
+
+/* Define to the type of a signed integer type of width exactly 64 bits if
+   such a type exists and the standard includes do not define it. */
+#undef int64_t
+
+/* Define to rpl_malloc if the replacement function should be used. */
+#undef malloc
+
+/* Define to `int' if <sys/types.h> does not define. */
+#undef pid_t
+
+/* Define to rpl_realloc if the replacement function should be used. */
+#undef realloc
+
+/* Define to `unsigned int' if <sys/types.h> does not define. */
+#undef size_t
+
+/* Define to the type of an unsigned integer type of width exactly 16 bits if
+   such a type exists and the standard includes do not define it. */
+#undef uint16_t
+
+/* Define to the type of an unsigned integer type of width exactly 32 bits if
+   such a type exists and the standard includes do not define it. */
+#undef uint32_t
+
+/* Define to the type of an unsigned integer type of width exactly 64 bits if
+   such a type exists and the standard includes do not define it. */
+#undef uint64_t
+
+/* Define to the type of an unsigned integer type of width exactly 8 bits if
+   such a type exists and the standard includes do not define it. */
+#undef uint8_t
+
+/* Define as `fork' if `vfork' does not work. */
+#undef vfork
+
+
+#include "config_warnings.h"
+
+#ifndef _GNU_SOURCE
+#define _GNU_SOURCE
+#endif
 
 #endif
diff --git a/tools/keepalived/lib/config_warnings.h.in b/tools/keepalived/lib/config_warnings.h.in
new file mode 100644
index 000000000..daedfd0a5
--- /dev/null
+++ b/tools/keepalived/lib/config_warnings.h.in
@@ -0,0 +1,12 @@
+
+/* The content of the .h.in file is automatically updated by
+ * configure, so in theory the .h.in file does not need to be
+ * in the source tree, but the file must exist, otherwise
+ * automake fails.
+ *
+ * The .h.in is a work-around to AC_DEFINE_UNQUOTED only working
+ * with fixed variable names when using AC_CONFIG_HEADERS.
+ * configure writes the #undef statements to the .h.in file, so
+ * that when AC_OUTPUT is invoked, the .h file is created from
+ * the .h.in file, with the appropriate #define's being set.
+ */
diff --git a/tools/keepalived/lib/container.h b/tools/keepalived/lib/container.h
new file mode 100644
index 000000000..d9af720c2
--- /dev/null
+++ b/tools/keepalived/lib/container.h
@@ -0,0 +1,52 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        container.h include file.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2019-2019 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _CONTAINER_H
+#define _CONTAINER_H
+
+/* Copy from linux kernel 2.6 source (kernel.h, stddef.h) */
+
+#ifndef offsetof
+# define offsetof(TYPE, MEMBER) ((size_t) &((TYPE *)0)->MEMBER)
+#endif
+
+/*
+ * container_of - cast a member of a structure out to the containing structure
+ *
+ * @ptr:	the pointer to the member.
+ * @type:	the type of the container struct this is embedded in.
+ * @member:	the name of the member within the struct.
+ *
+ */
+#ifndef container_of
+# define container_of(ptr, type, member) ({	\
+	 typeof( ((type *)0)->member ) *__mptr = (ptr);  \
+	 (type *)( (char *)__mptr - offsetof(type,member) );})
+#endif
+
+#ifndef container_of_const
+# define container_of_const(ptr, type, member) ({	\
+	 const typeof( ((type *)0)->member ) *__mptr = (ptr);  \
+	 (type *)( (const char *)__mptr - offsetof(type,member) );})
+#endif
+
+#endif
diff --git a/tools/keepalived/lib/html.c b/tools/keepalived/lib/html.c
index d451fbb14..920845d21 100644
--- a/tools/keepalived/lib/html.c
+++ b/tools/keepalived/lib/html.c
@@ -17,40 +17,38 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
 #include <string.h>
 #include <stdlib.h>
+#include <stdint.h>
+
 #include "html.h"
 #include "memory.h"
 
+/* HTTP header tag */
+#define CONTENT_LENGTH	"Content-Length:"
+
 /* Return the http header content length */
-int extract_content_length(char *buffer, int size)
+size_t extract_content_length(const char *buffer, size_t size)
 {
 	char *clen = strstr(buffer, CONTENT_LENGTH);
-	char *content_buffer = NULL;
-	char *buf_len;
-	int inc = 0;
-	int i;
+	size_t len;
+	char *end;
 
 	/* Pattern not found */
-	if (!clen)
-		return 0;
-
-	/* Allocate the room */
-	buf_len = (char *)MALLOC(40);
+	if (!clen || clen > buffer + size)
+		return SIZE_MAX;
 
 	/* Content-Length extraction */
-	while (*(clen++) != ':');
-	content_buffer = clen;
-	while (*(clen++) != '\r' && *clen != '\n')
-		inc++;
-	for (i = 0; i < inc; i++)
-		strncat(buf_len, content_buffer+i, 1);
-	i = atoi(buf_len);
-	FREE(buf_len);
-	return i;
+	len = strtoul(clen + strlen(CONTENT_LENGTH), &end, 10);
+	if (*end)
+		return SIZE_MAX;
+
+	return len;
 }
 
 /*
@@ -58,32 +56,33 @@ int extract_content_length(char *buffer, int size)
  * to rfc2616.6.1 status code is between HTTP_Version
  * and Reason_Phrase, separated by space caracter.
  */
-int extract_status_code(char *buffer, int size)
+#include "logger.h"
+int extract_status_code(const char *buffer, size_t size)
 {
-	char *buf_code;
-	char *begin;
-	char *end = buffer + size;
-	int inc = 0;
-
-	/* Allocate the room */
-	buf_code = (char *)MALLOC(10);
+	const char *buf_end = buffer + size;
+	char *end;
+	unsigned long code;
 
 	/* Status-Code extraction */
-	while (buffer < end && *buffer++ != ' ') ;
-	begin = buffer;
-	while (buffer < end && *buffer++ != ' ')
-		inc++;
-	strncat(buf_code, begin, inc);
-	inc = atoi(buf_code);
-	FREE(buf_code);
-	return inc;
+	while (buffer < buf_end && *buffer != ' ' && *buffer != '\r')
+		buffer++;
+	if (*buffer != ' ')
+		return 0;
+	buffer++;
+	if (buffer + 3 >= buf_end || *buffer == ' ' || buffer[3] != ' ')
+		return 0;
+	code = strtoul(buffer, &end, 10);	// This line causes a strict-overflow=4 warning with gcc 5.4.0
+	if (buffer + 3 != end)
+		return 0;
+	return code;
 }
 
 /* simple function returning a pointer to the html buffer begin */
-char *extract_html(char *buffer, int size_buffer)
+const char * __attribute__ ((pure))
+extract_html(const char *buffer, size_t size_buffer)
 {
-	char *end = buffer + size_buffer;
-	char *cur;
+	const char *end = buffer + size_buffer;
+	const char *cur;
 
 	for (cur = buffer; cur + 3 < end; cur++)
 		if (*cur == '\r' && *(cur+1) == '\n'
diff --git a/tools/keepalived/lib/html.h b/tools/keepalived/lib/html.h
index fea330530..379564735 100644
--- a/tools/keepalived/lib/html.h
+++ b/tools/keepalived/lib/html.h
@@ -17,18 +17,17 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _HTML_H
 #define _HTML_H
 
-/* HTTP header tag */
-#define CONTENT_LENGTH	"Content-Length:"
+#include <sys/types.h>
 
 /* Prototypes */
-extern int extract_content_length(char *buffer, int size);
-extern int extract_status_code(char *buffer, int size);
-extern char *extract_html(char *buffer, int size_buffer);
+extern size_t extract_content_length(const char *buffer, size_t size);
+extern int extract_status_code(const char *buffer, size_t size);
+extern const char *extract_html(const char *buffer, size_t size_buffer) __attribute__ ((pure));
 
 #endif
diff --git a/tools/keepalived/lib/json_writer.c b/tools/keepalived/lib/json_writer.c
new file mode 100644
index 000000000..fe8f776a6
--- /dev/null
+++ b/tools/keepalived/lib/json_writer.c
@@ -0,0 +1,304 @@
+/*
+ * Simple streaming JSON writer
+ *
+ * This takes care of the annoying bits of JSON syntax like the commas
+ * after elements
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version
+ * 2 of the License, or (at your option) any later version.
+ *
+ * Authors:	Stephen Hemminger <stephen@networkplumber.org>
+ */
+
+#include <stdio.h>
+#include <stdbool.h>
+#include <stdarg.h>
+#include <assert.h>
+#include <malloc.h>
+#include <inttypes.h>
+#include <stdint.h>
+
+#include "memory.h"
+#include "json_writer.h"
+
+struct json_writer {
+	FILE		*out;	/* output file */
+	unsigned	depth;  /* nesting */
+	bool		pretty; /* optional whitepace */
+	char		sep;	/* either nul or comma */
+};
+
+/* indentation for pretty print */
+static void jsonw_indent(const json_writer_t *self)
+{
+	unsigned i;
+	for (i = 0; i < self->depth; ++i)
+		fputs("    ", self->out);
+}
+
+/* end current line and indent if pretty printing */
+static void jsonw_eol(const json_writer_t *self)
+{
+	if (!self->pretty)
+		return;
+
+	putc('\n', self->out);
+	jsonw_indent(self);
+}
+
+/* If current object is not empty print a comma */
+static void jsonw_eor(json_writer_t *self)
+{
+	if (self->sep != '\0')
+		putc(self->sep, self->out);
+	self->sep = ',';
+}
+
+
+/* Output JSON encoded string */
+/* Handles C escapes, does not do Unicode */
+static void jsonw_puts(const json_writer_t *self, const char *str)
+{
+	putc('"', self->out);
+	for (; *str; ++str)
+		switch (*str) {
+		case '\t':
+			fputs("\\t", self->out);
+			break;
+		case '\n':
+			fputs("\\n", self->out);
+			break;
+		case '\r':
+			fputs("\\r", self->out);
+			break;
+		case '\f':
+			fputs("\\f", self->out);
+			break;
+		case '\b':
+			fputs("\\b", self->out);
+			break;
+		case '\\':
+			fputs("\\n", self->out);
+			break;
+		case '"':
+			fputs("\\\"", self->out);
+			break;
+		case '/':
+			fputs("\\/", self->out);
+			break;
+		default:
+			putc(*str, self->out);
+		}
+	putc('"', self->out);
+}
+
+/* Create a new JSON stream */
+json_writer_t *jsonw_new(FILE *f)
+{
+	json_writer_t *self = MALLOC(sizeof(*self));
+	if (self) {
+		self->out = f;
+		self->depth = 0;
+		self->pretty = false;
+		self->sep = '\0';
+	}
+	return self;
+}
+
+/* End output to JSON stream */
+void jsonw_destroy(json_writer_t ** const self_p)
+{
+	json_writer_t *self = *self_p;
+
+	assert(self->depth == 0);
+	fputs("\n", self->out);
+	fflush(self->out);
+	FREE(self);
+	*self_p = NULL;
+}
+
+void jsonw_pretty(json_writer_t *self, bool on)
+{
+	self->pretty = on;
+}
+
+/* Basic blocks */
+static void jsonw_begin(json_writer_t *self, int c)
+{
+	jsonw_eor(self);
+	putc(c, self->out);
+	++self->depth;
+	self->sep = '\0';
+}
+
+static void jsonw_end(json_writer_t *self, int c)
+{
+	assert(self->depth > 0);
+
+	--self->depth;
+	if (self->sep != '\0')
+		jsonw_eol(self);
+	putc(c, self->out);
+	self->sep = ',';
+}
+
+
+/* Add a JSON property name */
+void jsonw_name(json_writer_t *self, const char *name)
+{
+	jsonw_eor(self);
+	jsonw_eol(self);
+	self->sep = '\0';
+	jsonw_puts(self, name);
+	putc(':', self->out);
+	if (self->pretty)
+		putc(' ', self->out);
+}
+
+void jsonw_vprintf_enquote(json_writer_t *self, const char *fmt, va_list ap)
+{
+	jsonw_eor(self);
+	putc('"', self->out);
+	vfprintf(self->out, fmt, ap);
+	putc('"', self->out);
+}
+
+void jsonw_printf(json_writer_t *self, const char *fmt, ...)
+{
+	va_list ap;
+
+	va_start(ap, fmt);
+	jsonw_eor(self);
+	vfprintf(self->out, fmt, ap);
+	va_end(ap);
+}
+
+/* Collections */
+void jsonw_start_object(json_writer_t *self)
+{
+	jsonw_begin(self, '{');
+}
+
+void jsonw_end_object(json_writer_t *self)
+{
+	jsonw_end(self, '}');
+}
+
+void jsonw_start_array(json_writer_t *self)
+{
+	jsonw_begin(self, '[');
+}
+
+void jsonw_end_array(json_writer_t *self)
+{
+	jsonw_end(self, ']');
+}
+
+/* JSON value types */
+void jsonw_string(json_writer_t *self, const char *value)
+{
+	jsonw_eor(self);
+	jsonw_puts(self, value);
+}
+
+void jsonw_bool(json_writer_t *self, bool val)
+{
+	jsonw_printf(self, "%s", val ? "true" : "false");
+}
+
+void jsonw_null(json_writer_t *self)
+{
+	jsonw_printf(self, "null");
+}
+
+void jsonw_float_fmt(json_writer_t *self, const char *fmt, double num)
+{
+	jsonw_printf(self, fmt, num);
+}
+
+void jsonw_float(json_writer_t *self, double num)
+{
+	jsonw_printf(self, "%g", num);
+}
+
+void jsonw_hu(json_writer_t *self, unsigned short num)
+{
+	jsonw_printf(self, "%hu", num);
+}
+
+void jsonw_uint(json_writer_t *self, uint64_t num)
+{
+	jsonw_printf(self, "%"PRIu64, num);
+}
+
+void jsonw_lluint(json_writer_t *self, unsigned long long int num)
+{
+	jsonw_printf(self, "%llu", num);
+}
+
+void jsonw_int(json_writer_t *self, int64_t num)
+{
+	jsonw_printf(self, "%"PRId64, num);
+}
+
+/* Basic name/value objects */
+void jsonw_string_field(json_writer_t *self, const char *prop, const char *val)
+{
+	jsonw_name(self, prop);
+	jsonw_string(self, val);
+}
+
+void jsonw_bool_field(json_writer_t *self, const char *prop, bool val)
+{
+	jsonw_name(self, prop);
+	jsonw_bool(self, val);
+}
+
+void jsonw_float_field(json_writer_t *self, const char *prop, double val)
+{
+	jsonw_name(self, prop);
+	jsonw_float(self, val);
+}
+
+void jsonw_float_field_fmt(json_writer_t *self,
+			   const char *prop,
+			   const char *fmt,
+			   double val)
+{
+	jsonw_name(self, prop);
+	jsonw_float_fmt(self, fmt, val);
+}
+
+void jsonw_uint_field(json_writer_t *self, const char *prop, uint64_t num)
+{
+	jsonw_name(self, prop);
+	jsonw_uint(self, num);
+}
+
+void jsonw_hu_field(json_writer_t *self, const char *prop, unsigned short num)
+{
+	jsonw_name(self, prop);
+	jsonw_hu(self, num);
+}
+
+void jsonw_lluint_field(json_writer_t *self,
+			const char *prop,
+			unsigned long long int num)
+{
+	jsonw_name(self, prop);
+	jsonw_lluint(self, num);
+}
+
+void jsonw_int_field(json_writer_t *self, const char *prop, int64_t num)
+{
+	jsonw_name(self, prop);
+	jsonw_int(self, num);
+}
+
+void jsonw_null_field(json_writer_t *self, const char *prop)
+{
+	jsonw_name(self, prop);
+	jsonw_null(self);
+}
diff --git a/tools/keepalived/lib/json_writer.h b/tools/keepalived/lib/json_writer.h
new file mode 100644
index 000000000..c4bda4c21
--- /dev/null
+++ b/tools/keepalived/lib/json_writer.h
@@ -0,0 +1,75 @@
+/*
+ * Simple streaming JSON writer
+ *
+ * This takes care of the annoying bits of JSON syntax like the commas
+ * after elements
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version
+ * 2 of the License, or (at your option) any later version.
+ *
+ * Authors:	Stephen Hemminger <stephen@networkplumber.org>
+ */
+
+#ifndef _JSON_WRITER_H_
+#define _JSON_WRITER_H_
+
+#include <stdbool.h>
+#include <stdint.h>
+#include <stdarg.h>
+
+/* Opaque class structure */
+typedef struct json_writer json_writer_t;
+
+/* Create a new JSON stream */
+json_writer_t *jsonw_new(FILE *f);
+
+/* End output to JSON stream */
+void jsonw_destroy(json_writer_t ** const self_p);
+
+/* Cause output to have pretty whitespace */
+void jsonw_pretty(json_writer_t *self, bool on);
+
+/* Add property name */
+void jsonw_name(json_writer_t *self, const char *name);
+
+/* Add value  */
+void jsonw_vprintf_enquote(json_writer_t *, const char *, va_list)
+		__attribute__ ((format(printf, 2, 0)));
+void jsonw_printf(json_writer_t *, const char *, ...)
+		__attribute__ ((format(printf, 2, 3)));
+void jsonw_string(json_writer_t *self, const char *value);
+void jsonw_bool(json_writer_t *self, bool value);
+void jsonw_float(json_writer_t *self, double number);
+void jsonw_float_fmt(json_writer_t *self, const char *fmt, double num);
+void jsonw_uint(json_writer_t *self, uint64_t number);
+void jsonw_hu(json_writer_t *self, unsigned short number);
+void jsonw_int(json_writer_t *self, int64_t number);
+void jsonw_null(json_writer_t *self);
+void jsonw_lluint(json_writer_t *self, unsigned long long int num);
+
+/* Useful Combinations of name and value */
+void jsonw_string_field(json_writer_t *self, const char *prop, const char *val);
+void jsonw_bool_field(json_writer_t *self, const char *prop, bool value);
+void jsonw_float_field(json_writer_t *self, const char *prop, double num);
+void jsonw_uint_field(json_writer_t *self, const char *prop, uint64_t num);
+void jsonw_hu_field(json_writer_t *self, const char *prop, unsigned short num);
+void jsonw_int_field(json_writer_t *self, const char *prop, int64_t num);
+void jsonw_null_field(json_writer_t *self, const char *prop);
+void jsonw_lluint_field(json_writer_t *self, const char *prop,
+			unsigned long long int num);
+void jsonw_float_field_fmt(json_writer_t *self, const char *prop,
+			   const char *fmt, double val);
+
+/* Collections */
+void jsonw_start_object(json_writer_t *self);
+void jsonw_end_object(json_writer_t *self);
+
+void jsonw_start_array(json_writer_t *self);
+void jsonw_end_array(json_writer_t *self);
+
+/* Override default exception handling */
+typedef void (jsonw_err_handler_fn)(const char *);
+
+#endif
diff --git a/tools/keepalived/lib/keepalived_magic.h b/tools/keepalived/lib/keepalived_magic.h
new file mode 100644
index 000000000..ff97aa2ba
--- /dev/null
+++ b/tools/keepalived/lib/keepalived_magic.h
@@ -0,0 +1,70 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        keepalived_magic.c include file.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2017-2017 Alexandre Cassen, <acassen@linux-vs.org>
+ */
+
+#ifndef _KEEPALIVED_MAGIC_H
+#define _KEEPALIVED_MAGIC_H
+
+#ifdef _HAVE_LIBMAGIC_
+#include <magic.h>
+
+#include "logger.h"
+
+static inline magic_t
+ka_magic_open(void)
+{
+	magic_t magic = magic_open(MAGIC_PRESERVE_ATIME | MAGIC_ERROR | MAGIC_NO_CHECK_CDF | MAGIC_NO_CHECK_COMPRESS);
+	if (!magic)
+		log_message(LOG_INFO, "Unable to open magic");
+	else if (magic_load(magic, NULL)) {
+		log_message(LOG_INFO, "Unable to load magic database");
+		magic_close(magic);
+		magic = NULL;
+	}
+
+	return magic;
+}
+
+static inline void
+ka_magic_close(magic_t magic)
+{
+	magic_close(magic);
+}
+
+#else
+
+/* This simplifies code when we don't have libmagic */
+typedef void* magic_t;
+
+static inline magic_t
+ka_magic_open(void)
+{
+	return NULL;
+}
+
+static inline void
+ka_magic_close(__attribute__((unused)) magic_t magic)
+{
+}
+
+#endif
+
+#endif
diff --git a/tools/keepalived/lib/list.c b/tools/keepalived/lib/list.c
index 306cfe5f5..c0cd76e1c 100644
--- a/tools/keepalived/lib/list.c
+++ b/tools/keepalived/lib/list.c
@@ -1,12 +1,12 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        List structure manipulation.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
@@ -17,33 +17,86 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#include <stdio.h>
+
 #include "list.h"
 #include "memory.h"
 
-/* Simple list helpers functions */
+/* Multiple list helpers functions */
 list
-alloc_list(void (*free_func) (void *), void (*dump_func) (void *))
+alloc_mlist_r(void (*free_func) (void *), void (*dump_func) (FILE *, const void *), size_t size)
 {
-	return alloc_mlist(free_func, dump_func, 1);
+	list new = (list) MALLOC(size * sizeof (struct _list));
+	new->free = free_func;
+	new->dump = dump_func;
+	return new;
 }
 
-static element
-alloc_element(void)
+#ifdef _VRRP_FD_DEBUG_
+void
+dump_mlist(FILE *fp, list l, size_t size)
 {
-	element new = (element) MALLOC(sizeof (struct _element));
-	return new;
+	element e;
+	unsigned i;
+
+	for (i = 0; i < size; i++) {
+		for (e = LIST_HEAD(&l[i]); e; ELEMENT_NEXT(e))
+			if (l->dump)
+				(*l->dump) (fp, e->data);
+	}
+}
+#endif
+
+static void
+free_melement(list l, void (*free_func) (void *))
+{
+	element e;
+	element next;
+
+	for (e = LIST_HEAD(l); e; e = next) {
+		next = e->next;
+		if (free_func)
+			(*free_func) (e->data);
+		FREE(e);
+	}
 }
 
 void
-list_add(list l, void *data)
+free_mlist_r(list l, size_t size)
 {
-	element e = alloc_element();
+	size_t i;
+
+	if (!l)
+		return;
+
+	for (i = 0; i < size; i++)
+		free_melement(&l[i], l->free);
+	FREE(l);
+}
+
+/* Simple list helpers functions */
+list
+alloc_list_r(void (*free_func) (void *), void (*dump_func) (FILE *fp, const void *))
+{
+	return alloc_mlist_r(free_func, dump_func, 1);
+}
 
+static element __attribute__ ((malloc))
+alloc_element(void)
+{
+	return (element) MALLOC(sizeof (struct _element));
+}
+
+static inline void
+__list_add(list l, element e)
+{
 	e->prev = l->tail;
-	e->data = data;
+	e->next = NULL;
 
 	if (l->head == NULL)
 		l->head = e;
@@ -54,56 +107,125 @@ list_add(list l, void *data)
 }
 
 void
-list_del(list l, void *data)
+list_add_r(list l, void *data)
+{
+	element e = alloc_element();
+
+	e->data = data;
+
+	__list_add(l, e);
+}
+
+void
+list_add_head_r(list l, void *data)
+{
+	element e = alloc_element();
+
+	e->data = data;
+
+	e->next = l->head;
+	e->prev = NULL;
+
+	if (l->tail == NULL)
+		l->tail = e;
+	else
+		l->head->prev = e;
+	l->head = e;
+	l->count++;
+}
+
+static inline void
+__list_remove(list l, const element e)
+{
+	if (e->prev)
+		e->prev->next = e->next;
+	else
+		l->head = e->next;
+
+	if (e->next)
+		e->next->prev = e->prev;
+	else
+		l->tail = e->prev;
+
+	l->count--;
+}
+
+void
+list_remove_r(list l, const element e)
+{
+	if (l->free)
+		(*l->free) (e->data);
+
+	__list_remove(l, e);
+	FREE_ONLY(e);
+}
+
+void
+list_extract(list l, const element e)
+{
+	__list_remove(l, e);
+}
+
+void
+list_del_r(list l, const void *data)
 {
 	element e;
 
 	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
 		if (ELEMENT_DATA(e) == data) {
-			if (e->prev)
-				e->prev->next = e->next;
-			else
-				l->head = e->next;
-
-			if (e->next)
-				e->next->prev = e->prev;
-			else
-				l->tail = e->prev;
-
-			l->count--;
-			FREE(e);
+			list_remove_r(l, e);
 			return;
 		}
 	}
 }
 
-void *
-list_element(list l, int num)
+void
+list_transfer(element e, list l_from, list l_to)
+{
+	__list_remove(l_from, e);
+	__list_add(l_to, e);
+}
+
+void * __attribute__ ((pure))
+list_element(const list l, size_t num)
 {
 	element e = LIST_HEAD(l);
-	int i = 0;
+	size_t i = 0;
 
 	/* fetch element number num */
-	for (i = 0; i < num; i++)
-		if (e)
-			ELEMENT_NEXT(e);
+	for (i = 0; i < num; i++) {
+		if (!e)
+			return NULL;
+
+		ELEMENT_NEXT(e);
+	}
+
 	if (e)
 		return ELEMENT_DATA(e);
 	return NULL;
 }
 
 void
-dump_list(list l)
+dump_list(FILE *fp, const list l)
 {
 	element e;
 
+	if (LIST_ISEMPTY(l))
+		return;
+
 	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e))
 		if (l->dump)
-			(*l->dump) (e->data);
+			(*l->dump) (fp, e->data);
+}
+
+void
+free_list_element_simple(void *data)
+{
+	FREE(data);
 }
 
 static void
-free_element(list l)
+free_elements(list l)
 {
 	element e;
 	element next;
@@ -115,97 +237,64 @@ free_element(list l)
 		l->count--;
 		FREE(e);
 	}
+#if 0
+	if (l->count)
+		log_message(LOG_INFO, "free_elements left %d elements on the list", l->count);
+#endif
 }
 
 void
-free_list_elements(list l)
+free_list_elements_r(list l)
 {
-	element e;
-	element next;
-	
-	for (e = LIST_HEAD(l); e; e = next) {
-		next = e->next;
-		l->count--;
-		FREE(e);
-	}
+	free_elements(l);
+
 	l->head = NULL;
 	l->tail = NULL;
 }
 
 void
-free_list(list l)
+free_list_r(list *lp)
 {
+	list l = *lp;
+
 	if (!l)
 		return;
-	free_element(l);
+
+	/* Remove the caller's reference to the list */
+	*lp = NULL;
+
+	free_elements(l);
 	FREE(l);
 }
 
 void
-free_list_element(list l, element e)
+free_list_element_r(list l, const element e)
 {
-	if (!e)
+	if (!l || !e)
 		return;
 	if (l->head == e)
-		l->head = (e->next == e) ? NULL : e->next;
-	if (l->tail == e)
-		l->tail = (e->prev == e) ? NULL : e->prev;
-	if (e->prev)
+		l->head = e->next;
+	else
 		e->prev->next = e->next;
-	if (e->next)
+	if (l->tail == e)
+		l->tail = e->prev;
+	else
 		e->next->prev = e->prev;
 	if (l->free)
 		(*l->free) (e->data);
 	l->count--;
-	FREE(e);
-}
-
-/* Multiple list helpers functions */
-list
-alloc_mlist(void (*free_func) (void *), void (*dump_func) (void *), int size)
-{
-	list new = (list) MALLOC(size * sizeof (struct _list));
-	new->free = free_func;
-	new->dump = dump_func;
-	return new;
+	FREE_ONLY(e);
 }
 
 void
-dump_mlist(list l, int size)
+free_list_data_r(list l, const void *data)
 {
 	element e;
-	int i;
-
-	for (i = 0; i < size; i++) {
-		for (e = LIST_HEAD(&l[i]); e; ELEMENT_NEXT(e))
-			if (l->dump)
-				(*l->dump) (e->data);
-	}
-}
-
-void
-free_melement(list l, void (*free_func) (void *))
-{
-	element e;
-	element next;
 
-	for (e = LIST_HEAD(l); e; e = next) {
-		next = e->next;
-		if (free_func)
-			(*free_func) (e->data);
-		FREE(e);
+	for (e = LIST_HEAD(l); e; ELEMENT_NEXT(e)) {
+		if (ELEMENT_DATA(e) == data) {
+			free_list_element_r(l, e);
+			return;
+		}
 	}
 }
-
-void
-free_mlist(list l, int size)
-{
-	int i;
-
-	if (!l)
-		return;
-
-	for (i = 0; i < size; i++)
-		free_melement(&l[i], l->free);
-	FREE(l);
-}
diff --git a/tools/keepalived/lib/list.h b/tools/keepalived/lib/list.h
index fe4b4c964..2b41d8ae8 100644
--- a/tools/keepalived/lib/list.h
+++ b/tools/keepalived/lib/list.h
@@ -1,10 +1,10 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        list.c include file.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -17,12 +17,15 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _LIST_H
 #define _LIST_H
 
+#include <sys/types.h>
+#include <stdio.h>
+
 /* list definition */
 typedef struct _element *element;
 typedef struct _list *list;
@@ -38,28 +41,80 @@ struct _list {
 	struct _element *tail;
 	unsigned int count;
 	void (*free) (void *);
-	void (*dump) (void *);
+	void (*dump) (FILE *, const void *);
 };
 
 /* utility macro */
 #define ELEMENT_NEXT(E)		((E) = (E)->next)
 #define ELEMENT_DATA(E)		((E)->data)
-#define LIST_HEAD(L)		((L)->head)
+#define LIST_HEAD(L)		(!(L) ? NULL : (L)->head)
+#define LIST_TAIL(L)		(!(L) ? NULL : (L)->tail)
+#define LIST_HEAD_DATA(L)	((L)->head->data)
 #define LIST_TAIL_DATA(L)	((L)->tail->data)
-#define LIST_ISEMPTY(L)		((L) == NULL || ((L)->head == NULL && (L)->tail == NULL))
-#define LIST_SIZE(V)		((V)->count)
+#define LIST_ISEMPTY(L)		(!(L) || ((L)->head == NULL && (L)->tail == NULL))
+#define LIST_EXISTS(L)		((L) != NULL)
+#define LIST_SIZE(L)		(!(L) ? 0 : (L)->count)
+#define LIST_FOREACH(L,V,E)	for ((E) = ((L) ? LIST_HEAD(L) : NULL); (E) && ((V) = ELEMENT_DATA(E), 1); ELEMENT_NEXT(E))
+#define LIST_FOREACH_FROM(F,V,E) for ((E) = (F); (E) && ((V) = ELEMENT_DATA(E), 1); ELEMENT_NEXT(E))
+#define LIST_FOREACH_NEXT(L,V,E,N) for ((E) = ((L) ? LIST_HEAD(L) : NULL); (E) && ((N) = (E)->next, (V) = ELEMENT_DATA(E), 1); (E) = (N))
+
+#ifdef _MEM_CHECK_
+#define alloc_mlist(f,d,s)	(memcheck_log("alloc_mlist", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 alloc_mlist_r((f), (d), (s)))
+#define free_mlist(f,s)		(memcheck_log("free_mlist", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 free_mlist_r((f), (s)))
+#define alloc_list(f,d)		(memcheck_log("alloc_list", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 alloc_list_r((f), (d)))
+#define free_list(l)		(memcheck_log("free_list", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 free_list_r((l)))
+#define free_list_elements(l)	(memcheck_log("free_list_elements", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 free_list_elements_r((l)))
+#define free_list_element(l,e)	(memcheck_log("free_list_element", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 free_list_element_r((l), (e)))
+#define list_add(l,e)		(memcheck_log("list_add", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 list_add_r((l), (e)))
+#define list_add_head(l,e)	(memcheck_log("list_add_head", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 list_add_head_r((l), (e)))
+#define list_remove(l,e)	(memcheck_log("list_remove", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 list_remove_r((l), (e)))
+#define list_del(l,d)		(memcheck_log("list_del", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 list_del_r((l), (d)))
+#define free_list_data(l,d)	(memcheck_log("free_list_data", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 free_list_data_r((l), (d)))
+#else
+#define alloc_mlist(f,d,s)	(alloc_mlist_r((f), (d), (s)))
+#define free_mlist(f,s)		(free_mlist_r((f), (s)))
+#define alloc_list(f,d)		(alloc_list_r((f), (d)))
+#define free_list(l)		(free_list_r((l)))
+#define free_list_elements(l)	(free_list_elements_r((l)))
+#define free_list_element(l,e)	(free_list_element_r((l), (e)))
+#define list_add(l,e)		(list_add_r((l), (e)))
+#define list_add_head(l,e)	(list_add_head_r((l), (e)))
+#define list_remove(l,e)	(list_remove_r((l), (e)))
+#define list_del(l,d)		(list_del_r((l), (d)))
+#define free_list_data(l,d)	(free_list_data_r((l), (d)))
+#endif
+
 
 /* Prototypes */
-extern list alloc_list(void (*free_func) (void *), void (*dump_func) (void *));
-extern void free_list(list l);
-extern void free_list_elements(list l);
-extern void free_list_element(list l, element e);
-extern void *list_element(list l, int num);
-extern void dump_list(list l);
-extern void list_add(list l, void *data);
-extern void list_del(list l, void *data);
-extern list alloc_mlist(void (*free_func) (void *), void (*dump_func) (void *), int size);
-extern void dump_mlist(list l, int size);
-extern void free_mlist(list l, int size);
+extern list alloc_mlist_r(void (*) (void *), void (*) (FILE *, const void *), size_t);
+#ifdef _VRRP_FD_DEBUG_
+extern void dump_mlist(FILE *, list, size_t);
+#endif
+extern void free_mlist_r(list, size_t);
+extern list alloc_list_r(void (*) (void *), void (*) (FILE *, const void *));
+extern void free_list_r(list *);
+extern void free_list_element_simple(void *);
+extern void free_list_elements_r(list);
+extern void free_list_element_r(list, const element);
+extern void list_transfer(element, list, list);
+extern void *list_element(list, size_t) __attribute__ ((pure));
+extern void dump_list(FILE *, const list);
+extern void list_add_r(list, void *);
+extern void list_add_head_r(list, void *);
+extern void list_remove_r(list, const element);
+extern void list_extract(list, const element);
+extern void list_del_r(list, const void *);
+extern void free_list_data_r(list, const void *);
 
 #endif
diff --git a/tools/keepalived/lib/list_head.c b/tools/keepalived/lib/list_head.c
index 16fca2494..66d801b77 100644
--- a/tools/keepalived/lib/list_head.c
+++ b/tools/keepalived/lib/list_head.c
@@ -2,14 +2,13 @@
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
+ *		In addition it provides a VRRPv2 & VRRPv3 stack.
  *
- * Part:        list_head. This code is comming from Linux Kernel.
+ * Author:      Alexandre Cassen, <acassen@corp.free.fr>
  *
- * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *
- *              This program is distributed in the hope that it will be useful, 
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of 
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
  *
  *              This program is free software; you can redistribute it and/or
@@ -17,16 +16,18 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2018 Alexandre Cassen, <acassen@corp.free.fr>
  */
 
 #include "list_head.h"
+#include "warnings.h"
+
 
 void list_sort(struct list_head *head,
 	       int (*cmp)(struct list_head *a, struct list_head *b))
 {
 	struct list_head *p, *q, *e, *list, *tail, *oldhead;
-	int insize, nmerges, psize, qsize, i;
+	unsigned insize, nmerges, psize, qsize, i;
 
 	list = head->next;
 	list_head_del(head);
@@ -60,14 +61,10 @@ void list_sort(struct list_head *head,
 					e = p;
 					p = p->next;
 					psize--;
-					if (p == oldhead)
-						p = NULL;
 				} else if (cmp(p, q) <= 0) {
 					e = p;
 					p = p->next;
 					psize--;
-					if (p == oldhead)
-						p = NULL;
 				} else {
 					e = q;
 					q = q->next;
diff --git a/tools/keepalived/lib/list_head.h b/tools/keepalived/lib/list_head.h
index 82300d47c..187d5c030 100644
--- a/tools/keepalived/lib/list_head.h
+++ b/tools/keepalived/lib/list_head.h
@@ -2,14 +2,13 @@
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
+ *		In addition it provides a VRRPv2 & VRRPv3 stack.
  *
- * Part:        list_head. This code is comming from Linux Kernel.
+ * Author:      Alexandre Cassen, <acassen@corp.free.fr>
  *
- * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *
- *              This program is distributed in the hope that it will be useful, 
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of 
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
  *
  *              This program is free software; you can redistribute it and/or
@@ -17,7 +16,7 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2018 Alexandre Cassen, <acassen@corp.free.fr>
  */
 
 #ifndef _LIST_HEAD_H
@@ -26,19 +25,7 @@
 #include <stdlib.h>
 #include <stddef.h>
 
-/*
- * container_of - cast a member of a structure out to the containing structure
- *
- * @ptr:	the pointer to the member.
- * @type:	the type of the container struct this is embedded in.
- * @member:	the name of the member within the struct.
- *
- */
-#ifndef container_of
-# define container_of(ptr, type, member) ({			\
-	const typeof( ((type *)0)->member ) *__mptr = (ptr);	\
-	(type *)( (char *)__mptr - offsetof(type,member) );})
-#endif
+#include "container.h"
 
 /*
  * These are non-NULL pointers that will result in page faults
@@ -64,7 +51,8 @@ typedef struct list_head {
 
 #define LIST_HEAD_INIT(name) { &(name), &(name) }
 
-#define LIST_HEAD(name) \
+// TODO
+#define LH_LIST_HEAD(name) \
 	struct list_head name = LIST_HEAD_INIT(name)
 
 #define INIT_LIST_HEAD(ptr) do { \
@@ -100,6 +88,7 @@ static inline void list_head_add(struct list_head *new, struct list_head *head)
 	__list_add(new, head, head->next);
 }
 
+// list_head_add_tail
 /**
  * list_add_tail - add a new entry
  * @new: new entry to be added
@@ -151,47 +140,47 @@ static inline void list_del_init(struct list_head *entry)
 
 /**
  * list_move - delete from one list and add as another's head
- * @list: the entry to move
+ * @lst: the entry to move
  * @head: the head that will precede our entry
  */
-static inline void list_move(struct list_head *list, struct list_head *head)
+static inline void list_move(struct list_head *lst, struct list_head *head)
 {
-	__list_del(list->prev, list->next);
-	list_head_add(list, head);
+	__list_del(lst->prev, lst->next);
+	list_head_add(lst, head);
 }
 
 /**
  * list_move_tail - delete from one list and add as another's tail
- * @list: the entry to move
+ * @lst: the entry to move
  * @head: the head that will follow our entry
  */
-static inline void list_move_tail(struct list_head *list,
+static inline void list_move_tail(struct list_head *lst,
 				  struct list_head *head)
 {
-	__list_del(list->prev, list->next);
-	list_add_tail(list, head);
+	__list_del(lst->prev, lst->next);
+	list_add_tail(lst, head);
 }
 
 /**
  * list_is_first - tests whether @list is the first entry in list @head
- * @list: the entry to test
+ * @lst: the entry to test
  * @head: the head of the list
  */
-static inline int list_is_first(const struct list_head *list,
+static inline int list_is_first(const struct list_head *lst,
 				const struct list_head *head)
 {
-	return list->prev == head;
+	return lst->prev == head;
 }
 
 /**
  * list_is_last - tests whether @list is the last entry in list @head
- * @list: the entry to test
+ * @lst: the entry to test
  * @head: the head of the list
  */
-static inline int list_is_last(const struct list_head *list,
+static inline int list_is_last(const struct list_head *lst,
 			       const struct list_head *head)
 {
-	return list->next == head;
+	return lst->next == head;
 }
 
 /**
@@ -203,11 +192,11 @@ static inline int list_empty(const struct list_head *head)
 	return head->next == head;
 }
 
-static inline void __list_splice(struct list_head *list,
+static inline void __list_splice(struct list_head *lst,
 				 struct list_head *head)
 {
-	struct list_head *first = list->next;
-	struct list_head *last = list->prev;
+	struct list_head *first = lst->next;
+	struct list_head *last = lst->prev;
 	struct list_head *at = head->next;
 
 	first->prev = head;
@@ -219,13 +208,13 @@ static inline void __list_splice(struct list_head *list,
 
 /**
  * list_splice - join two lists
- * @list: the new list to add.
+ * @lst: the new list to add.
  * @head: the place to add it in the first list.
  */
-static inline void list_splice(struct list_head *list, struct list_head *head)
+static inline void list_splice(struct list_head *lst, struct list_head *head)
 {
-	if (!list_empty(list))
-		__list_splice(list, head);
+	if (!list_empty(lst))
+		__list_splice(lst, head);
 }
 
 /**
@@ -235,12 +224,12 @@ static inline void list_splice(struct list_head *list, struct list_head *head)
  *
  * The list at @list is reinitialised
  */
-static inline void list_splice_init(struct list_head *list,
+static inline void list_splice_init(struct list_head *lst,
 				    struct list_head *head)
 {
-	if (!list_empty(list)) {
-		__list_splice(list, head);
-		INIT_LIST_HEAD(list);
+	if (!list_empty(lst)) {
+		__list_splice(lst, head);
+		INIT_LIST_HEAD(lst);
 	}
 }
 
@@ -293,6 +282,7 @@ void list_sort(struct list_head *head,
 	for (pos = (head)->next; pos != (head); \
 		pos = pos->next)
 
+// __list_for_each isn't different
 /**
  * __list_for_each	-	iterate over a list
  * @pos:	the &struct list_head to use as a loop counter.
@@ -404,6 +394,7 @@ void list_sort(struct list_head *head,
  * @head:	the head for your list.
  * @member:	the name of the list_struct within the struct.
  */
+// Try the alternative
 #define list_for_each_entry_safe(pos, n, head, member)			\
 	for (pos = list_entry((head)->next, typeof(*pos), member),	\
 		n = list_entry(pos->member.next, typeof(*pos), member);	\
@@ -418,13 +409,13 @@ void list_sort(struct list_head *head,
  * You lose the ability to access the tail in O(1).
  */
 
-struct hlist_head {
+typedef struct hlist_head {
 	struct hlist_node *first;
-};
+} hlist_head_t;
 
-struct hlist_node {
+typedef struct hlist_node {
 	struct hlist_node *next, **pprev;
-};
+} hlist_node_t;
 
 #define HLIST_HEAD_INIT { .first = NULL }
 #define HLIST_HEAD(name) struct hlist_head name = {  .first = NULL }
diff --git a/tools/keepalived/lib/logger.c b/tools/keepalived/lib/logger.c
index ae64179d0..35714dfba 100644
--- a/tools/keepalived/lib/logger.c
+++ b/tools/keepalived/lib/logger.c
@@ -1,12 +1,12 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        logging facility.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
@@ -17,35 +17,223 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <syslog.h>
+#include "config.h"
+
 #include <stdio.h>
-#include <stdarg.h>
+#include <stdbool.h>
+#include <time.h>
+#include <unistd.h>
+#include <fcntl.h>
+#include <string.h>
+#include <memory.h>
+#ifndef HAVE_SIGNALFD
+#include <signal.h>
+#endif
+
+#include "logger.h"
+#include "bitops.h"
+#include "utils.h"
 
 /* Boolean flag - send messages to console as well as syslog */
-static int log_console = 0;
+static bool log_console = false;
+
+#ifdef ENABLE_LOG_TO_FILE
+/* File to write log messages to */
+const char *log_file_name;
+static FILE *log_file;
+bool always_flush_log_file;
+#endif
 
 void
 enable_console_log(void)
 {
-	log_console = 1;
+	log_console = true;
+}
+
+#ifdef ENABLE_LOG_TO_FILE
+void
+set_flush_log_file(void)
+{
+	always_flush_log_file = true;
+}
+
+void
+close_log_file(void)
+{
+	if (log_file) {
+		fclose(log_file);
+		log_file = NULL;
+	}
+}
+
+void
+open_log_file(const char *name, const char *prog, const char *namespace, const char *instance)
+{
+	const char *file_name;
+
+	if (log_file) {
+		fclose(log_file);
+		log_file = NULL;
+	}
+
+	if (!name)
+		return;
+
+	file_name = make_file_name(name, prog, namespace, instance);
+
+	log_file = fopen_safe(file_name, "a");
+	if (log_file) {
+		int n = fileno(log_file);
+		if (fcntl(n, F_SETFD, FD_CLOEXEC | fcntl(n, F_GETFD)) == -1)
+			log_message(LOG_INFO, "Failed to set CLOEXEC on log file %s", file_name);
+		if (fcntl(n, F_SETFL, O_NONBLOCK | fcntl(n, F_GETFL)) == -1)
+			log_message(LOG_INFO, "Failed to set NONBLOCK on log file %s", file_name);
+	}
+
+	FREE_CONST(file_name);
+}
+
+void
+flush_log_file(void)
+{
+	if (log_file)
+		fflush(log_file);
+}
+
+void
+update_log_file_perms(mode_t umask_bits)
+{
+        if (log_file)
+                fchmod(fileno(log_file), (S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP | S_IROTH | S_IWOTH) & ~umask_bits);
+}
+#endif
+
+#ifndef HAVE_SIGNALFD
+static inline bool
+block_signals(sigset_t *cur_set)
+{
+	sigset_t block_set;
+
+	sigfillset(&block_set);
+	if (!sigprocmask(SIG_BLOCK, &block_set, cur_set))
+		return false;
+
+	/* Yes, we are logging without disabling signals,
+	 * but it would be useful to know that sigprocmask has
+	 * failed. The only error that could occur according
+	 * to sigprocmask(2) is EFAULT, which would be very
+	 * strange since the sigsets are on the stack. */
+	syslog(LOG_ERR, "%s", "sigprocmask failed in block_signals()");
+
+	return true;
+}
+#endif
+
+void
+vlog_message(const int facility, const char* format, va_list args)
+{
+#ifndef HAVE_SIGNALFD
+	sigset_t cur_set;
+	bool restore_signals = false;
+#endif
+#if !HAVE_VSYSLOG
+	char buf[MAX_LOG_MSG+1];
+#endif
+
+	/* Don't write syslog if testing configuration */
+	if (__test_bit(CONFIG_TEST_BIT, &debug))
+		return;
+
+#if !HAVE_VSYSLOG
+	vsnprintf(buf, sizeof(buf), format, args);
+#endif
+
+	if (
+#ifdef ENABLE_LOG_TO_FILE
+	    log_file ||
+#endif
+			(__test_bit(DONT_FORK_BIT, &debug) && log_console)) {
+#if HAVE_VSYSLOG
+		va_list args1;
+		char buf[2 * MAX_LOG_MSG + 1];
+
+		va_copy(args1, args);
+		vsnprintf(buf, sizeof(buf), format, args1);
+		va_end(args1);
+#endif
+
+		/* timestamp setup */
+		time_t t = time(NULL);
+		struct tm tm;
+		localtime_r(&t, &tm);
+		char timestamp[64];
+		strftime(timestamp, sizeof(timestamp), "%c", &tm);
+
+		if (log_console && __test_bit(DONT_FORK_BIT, &debug)) {
+#ifndef HAVE_SIGNALFD
+			if (!block_signals(&cur_set))
+				restore_signals = true;
+#endif
+
+			fprintf(stderr, "%s: %s\n", timestamp, buf);
+		}
+#ifdef ENABLE_LOG_TO_FILE
+		if (log_file) {
+#ifndef HAVE_SIGNALFD
+			if (!restore_signals && !block_signals(&cur_set))
+				restore_signals = true;
+#endif
+			fprintf(log_file, "%s: %s\n", timestamp, buf);
+			if (always_flush_log_file)
+				fflush(log_file);
+		}
+#endif
+	}
+
+	if (!__test_bit(NO_SYSLOG_BIT, &debug)) {
+#ifndef HAVE_SIGNALFD
+		if (!restore_signals && !block_signals(&cur_set))
+			restore_signals = true;
+#endif
+
+#if HAVE_VSYSLOG
+		vsyslog(facility, format, args);
+#else
+		syslog(facility, "%s", buf);
+#endif
+	}
+
+#ifndef HAVE_SIGNALFD
+	if (restore_signals)
+		sigprocmask(SIG_SETMASK, &cur_set, NULL);
+#endif
 }
 
 void
 log_message(const int facility, const char *format, ...)
 {
 	va_list args;
-	char buf[256];
 
 	va_start(args, format);
-	vsnprintf(buf, sizeof(buf), format, args);
+	vlog_message(facility, format, args);
 	va_end(args);
+}
+
+void
+conf_write(FILE *fp, const char *format, ...)
+{
+	va_list args;
 
-	if (log_console) {
-		fprintf(stderr, "%s\n", buf);
+	va_start(args, format);
+	if (fp) {
+		vfprintf(fp, format, args);
+		fprintf(fp, "\n");
 	}
+	else
+		vlog_message(LOG_INFO, format, args);
 
-	syslog(facility, "%s", buf);
+	va_end(args);
 }
diff --git a/tools/keepalived/lib/logger.h b/tools/keepalived/lib/logger.h
index 4796cf508..20b2a7e46 100644
--- a/tools/keepalived/lib/logger.h
+++ b/tools/keepalived/lib/logger.h
@@ -1,12 +1,12 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        logging facility.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
@@ -17,13 +17,38 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _LOGGER_H
 #define _LOGGER_H
 
-void enable_console_log(void);
-void log_message(int priority, char* format, ...);
+#include <stdarg.h>
+#include <syslog.h>
+#include <stdio.h>
+#ifdef ENABLE_LOG_TO_FILE
+#include <sys/stat.h>
+#endif
+
+#define	MAX_LOG_MSG	255
+
+#ifdef ENABLE_LOG_TO_FILE
+extern const char *log_file_name;
+#endif
+
+extern void enable_console_log(void);
+#ifdef ENABLE_LOG_TO_FILE
+extern void set_flush_log_file(void);
+extern void close_log_file(void);
+extern void open_log_file(const char *, const char *, const char *, const char *);
+extern void flush_log_file(void);
+extern void update_log_file_perms(mode_t);
+#endif
+extern void vlog_message(const int facility, const char* format, va_list args)
+	__attribute__ ((format (printf, 2, 0)));
+extern void log_message(int priority, const char* format, ...)
+	__attribute__ ((format (printf, 2, 3)));
+extern void conf_write(FILE *fp, const char *format, ...)
+	__attribute__ ((format (printf, 2, 3)));
 
 #endif
diff --git a/tools/keepalived/lib/memory.c b/tools/keepalived/lib/memory.c
index bd3e8e638..fe85abf2f 100644
--- a/tools/keepalived/lib/memory.c
+++ b/tools/keepalived/lib/memory.c
@@ -19,371 +19,694 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+#ifdef _MEM_CHECK_
+#include <unistd.h>
+#include <fcntl.h>
+#include <stdlib.h>
+#include <time.h>
+#include <limits.h>
+#include <sys/stat.h>
+#include <stdio.h>
+#endif
+
+#include <errno.h>
+#include <string.h>
+
 #include "memory.h"
 #include "utils.h"
+#include "bitops.h"
+#include "logger.h"
+#include "scheduler.h"
+
+#ifdef _MEM_CHECK_
+#include "timer.h"
+#include "rbtree.h"
+#include "list_head.h"
 
 /* Global var */
-unsigned long mem_allocated;	/* Total memory used in Bytes */
+size_t mem_allocated;			/* Total memory used in Bytes */
+static size_t max_mem_allocated;	/* Maximum memory used in Bytes */
 
-void *
+static const char *terminate_banner;	/* banner string for report file */
+
+static bool skip_mem_check_final;
+#endif
+
+static void * __attribute__ ((malloc))
 xalloc(unsigned long size)
 {
-	void *mem;
-	if ((mem = malloc(size)))
-		mem_allocated += size;
+	void *mem = malloc(size);
+
+	if (mem == NULL) {
+		if (__test_bit(DONT_FORK_BIT, &debug))
+			perror("Keepalived");
+		else
+			log_message(LOG_INFO, "Keepalived xalloc() error - %s", strerror(errno));
+		exit(KEEPALIVED_EXIT_NO_MEMORY);
+	}
+
+#ifdef _MEM_CHECK_
+	mem_allocated += size - sizeof(long);
+	if (mem_allocated > max_mem_allocated)
+		max_mem_allocated = mem_allocated;
+#endif
+
 	return mem;
 }
 
-void *
+#ifdef _MEM_CHECK_
+static
+#endif
+void * __attribute__ ((malloc))
 zalloc(unsigned long size)
 {
-	void *mem;
-	if ((mem = malloc(size))) {
+	void *mem = xalloc(size);
+
+	if (mem)
 		memset(mem, 0, size);
-		mem_allocated += size;
-	}
-	return mem;
-}
 
-void
-xfree(void *p)
-{
-	mem_allocated -= sizeof (p);
-	free(p);
-	p = NULL;
+	return mem;
 }
 
 /* KeepAlived memory management. in debug mode,
  * help finding eventual memory leak.
  * Allocation memory types manipulated are :
  *
- * +type+--------meaning--------+
- * ! 0  ! Free slot             !
- * ! 1  ! Overrun               !
- * ! 2  ! free null             !
- * ! 3  ! realloc null          !
- * ! 4  ! Not previus allocated !
- * ! 8  ! Last free list        !
- * ! 9  ! Allocated             !
- * +----+-----------------------+
+ * +-type------------------+-meaning------------------+
+ * ! FREE_SLOT             ! Free slot                !
+ * ! OVERRUN               ! Overrun                  !
+ * ! FREE_NULL             ! free null                !
+ * ! REALLOC_NULL          ! realloc null             !
+ * ! DOUBLE_FREE           ! double free              !
+ * ! REALLOC_DOUBLE_FREE   ! realloc freed block      !
+ * ! FREE_NOT_ALLOC        ! Not previously allocated !
+ * ! REALLOC_NOT_ALLOC     ! Not previously allocated !
+ * ! MALLOC_ZERO_SIZE      ! malloc with size 0       !
+ * ! REALLOC_ZERO_SIZE     ! realloc with size 0      !
+ * ! LAST_FREE             ! Last free list           !
+ * ! ALLOCATED             ! Allocated                !
+ * +-----------------------+--------------------------+
  *
- * global variabel debug bit 9 ( 512 ) used to
+ * global variable debug bit MEM_ERR_DETECT_BIT used to
  * flag some memory error.
  *
  */
 
-#ifdef _DEBUG_
+#ifdef _MEM_CHECK_
+
+enum slot_type {
+	FREE_SLOT = 0,
+	OVERRUN,
+	FREE_NULL,
+	REALLOC_NULL,
+	DOUBLE_FREE,
+	REALLOC_DOUBLE_FREE,
+	FREE_NOT_ALLOC,
+	REALLOC_NOT_ALLOC,
+	MALLOC_ZERO_SIZE,
+	REALLOC_ZERO_SIZE,
+	LAST_FREE,
+	ALLOCATED,
+} ;
+
+#define TIME_STR_LEN	9
+
+#if ULONG_MAX == 0xffffffffffffffffUL
+#define CHECK_VAL	0xa5a55a5aa5a55a5aUL
+#elif ULONG_MAX == 0xffffffffUL
+#define CHECK_VAL	0xa5a55a5aUL
+#else
+#define CHECK_VAL	0xa5a5
+#endif
 
 typedef struct {
-	int type;
+	enum slot_type type;
 	int line;
-	char *func;
-	char *file;
+	const char *func;
+	const char *file;
 	void *ptr;
-	unsigned long size;
-	long csum;
+	size_t size;
+	union {
+		list_head_t l;	/* When on free list */
+		rb_node_t t;
+	};
+	unsigned seq_num;
 } MEMCHECK;
 
 /* Last free pointers */
-static MEMCHECK free_list[256];
+static LH_LIST_HEAD(free_list);
+static unsigned free_list_size;
 
-static MEMCHECK alloc_list[MAX_ALLOC_LIST];
-static int number_alloc_list = 0;
-static int n = 0;		/* Alloc list pointer */
-static int f = 0;		/* Free list pointer */
+/* alloc_list entries used for 1000 VRRP instance each with VMAC interfaces is 33589 */
+static rb_root_t alloc_list = RB_ROOT;
+static LH_LIST_HEAD(bad_list);
 
-char *
-keepalived_malloc(unsigned long size, char *file, char *function, int line)
+static unsigned number_alloc_list;	/* number of alloc_list allocation entries */
+static unsigned max_alloc_list;
+static unsigned num_mallocs;
+static unsigned num_reallocs;
+static unsigned seq_num;
+
+static FILE *log_op = NULL;
+
+static inline int
+memcheck_ptr_cmp(const MEMCHECK *m1, const MEMCHECK *m2)
 {
-	void *buf;
-	int i = 0;
-	long check;
+	return (char *)m1->ptr - (char *)m2->ptr;
+}
+
+static inline int
+memcheck_seq_cmp(const MEMCHECK *m1, const MEMCHECK *m2)
+{
+	return m1->seq_num - m2->seq_num;
+}
 
-	buf = zalloc(size + sizeof (long));
+static const char *
+format_time(void)
+{
+	static char time_buf[TIME_STR_LEN+1];
+
+	strftime(time_buf, sizeof time_buf, "%T ", localtime(&time_now.tv_sec));
+
+	return time_buf;
+}
+
+void
+memcheck_log(const char *called_func, const char *param, const char *file, const char *function, int line)
+{
+	int len = strlen(called_func) + (param ? strlen(param) : 0);
+
+	if ((len = 36 - len) < 0)
+		len = 0;
 
-	check = 0xa5a5 + size;
-	*(long *) ((char *) buf + size) = check;
+	fprintf(log_op, "%s%*s%s(%s) at %s, %d, %s\n",
+	       format_time(), len, "", called_func, param ? param : "", file, line, function);
+}
 
-	while (i < number_alloc_list) {
-		if (alloc_list[i].type == 0)
-			break;
-		i++;
+static MEMCHECK *
+get_free_alloc_entry(void)
+{
+	MEMCHECK *entry;
+
+	/* If number on free list < 256, allocate new entry, otherwise take head */
+	if (free_list_size < 256)
+		entry = malloc(sizeof *entry);
+	else {
+		entry = list_first_entry(&free_list, MEMCHECK, l);
+		list_head_del(&entry->l);
+		free_list_size--;
 	}
 
-	if (i == number_alloc_list)
-		number_alloc_list++;
+	entry->seq_num = seq_num++;
+
+	return entry;
+}
+
+static void *
+keepalived_malloc_common(size_t size, const char *file, const char *function, int line, const char *name)
+{
+	void *buf;
+	MEMCHECK *entry, *entry2;
 
-	assert(number_alloc_list < MAX_ALLOC_LIST);
+	buf = zalloc(size + sizeof (unsigned long));
 
-	alloc_list[i].ptr = buf;
-	alloc_list[i].size = size;
-	alloc_list[i].file = file;
-	alloc_list[i].func = function;
-	alloc_list[i].line = line;
-	alloc_list[i].csum = check;
-	alloc_list[i].type = 9;
+#ifndef _NO_UNALIGNED_ACCESS_
+	*(unsigned long *) ((char *) buf + size) = size + CHECK_VAL;
+#else
+	unsigned long check_val = CHECK_VAL;
 
-	if (debug & 1)
-		printf("zalloc[%3d:%3d], %p, %4ld at %s, %3d, %s\n",
-		       i, number_alloc_list, buf, size, file, line,
-		       function);
+	memcpy((unsigned char *)buf + size, (unsigned char *)&check_val, sizeof(check_val));
+#endif
 
-	n++;
+	entry = get_free_alloc_entry();
+
+	entry->ptr = buf;
+	entry->size = size;
+	entry->file = file;
+	entry->func = function;
+	entry->line = line;
+	entry->type = ALLOCATED;
+
+	rb_insert_sort(&alloc_list, entry, t, memcheck_ptr_cmp);
+	if (++number_alloc_list > max_alloc_list)
+		max_alloc_list = number_alloc_list;
+
+	fprintf(log_op, "%s%s [%3u:%3u], %9p, %4zu at %s, %3d, %s%s\n",
+	       format_time(), name, entry->seq_num, number_alloc_list, buf, size, file, line, function, !size ? " - size is 0" : "");
+#ifdef _MEM_CHECK_LOG_
+	if (__test_bit(MEM_CHECK_LOG_BIT, &debug))
+		log_message(LOG_INFO, "%s[%3u:%3u], %9p, %4zu at %s, %3d, %s",
+		       name, entry->seq_num, number_alloc_list, buf, size, file, line, function);
+#endif
+
+	num_mallocs++;
+
+	if (!size) {
+		/* Record malloc with 0 size */
+		entry2 = get_free_alloc_entry();
+		*entry2 = *entry;
+		entry2->type = MALLOC_ZERO_SIZE;
+		list_add_tail(&entry2->l, &bad_list);
+	}
+
+	/* coverity[leaked_storage] */
 	return buf;
 }
 
-int
-keepalived_free(void *buffer, char *file, char *function, int line)
+void *
+keepalived_malloc(size_t size, const char *file, const char *function, int line)
 {
-	int i = 0;
-	void *buf;
+	return keepalived_malloc_common(size, file, function, line, "zalloc");
+}
+
+char *
+keepalived_strdup(const char *str, const char *file, const char *function, int line)
+{
+	char *str_p;
+
+	str_p = keepalived_malloc_common(strlen(str) + 1, file, function, line, "strdup");
+	return strcpy(str_p, str);
+}
+
+char *
+keepalived_strndup(const char *str, size_t size, const char *file, const char *function, int line)
+{
+	char *str_p;
+
+	str_p = keepalived_malloc_common(size + 1, file, function, line, "strndup");
+	return strncpy(str_p, str, size);
+}
+
+static void *
+keepalived_free_realloc_common(void *buffer, size_t size, const char *file, const char *function, int line, bool is_realloc)
+{
+	unsigned long check;
+	MEMCHECK *entry, *entry2, *le;
+	MEMCHECK search = {.ptr = buffer};
+#ifdef _NO_UNALIGNED_ACCESS_
+	unsigned long check_val = CHECK_VAL;
+#endif
 
 	/* If nullpointer remember */
 	if (buffer == NULL) {
-		i = number_alloc_list++;
+		entry = get_free_alloc_entry();
 
-		assert(number_alloc_list < MAX_ALLOC_LIST);
+		entry->ptr = NULL;
+		entry->size = size;
+		entry->file = file;
+		entry->func = function;
+		entry->line = line;
+		entry->type = !size ? FREE_NULL : REALLOC_NULL;
 
-		alloc_list[i].ptr = buffer;
-		alloc_list[i].size = 0;
-		alloc_list[i].file = file;
-		alloc_list[i].func = function;
-		alloc_list[i].line = line;
-		alloc_list[i].type = 2;
-		if (debug & 1)
-			printf("free NULL in %s, %3d, %s\n", file,
-			       line, function);
+		if (!is_realloc)
+			fprintf(log_op, "%s%-7s%9s, %9s, %4s at %s, %3d, %s\n", format_time(),
+				"free", "ERROR", "NULL", "",
+				file, line, function);
+		else
+			fprintf(log_op, "%s%-7s%9s, %9s, %4zu at %s, %3d, %s%s\n", format_time(),
+				"realloc", "ERROR", "NULL",
+				size, file, line, function, size ? " *** converted to malloc" : "");
 
-		debug |= 512;	/* Memory Error detect */
+		__set_bit(MEM_ERR_DETECT_BIT, &debug);
 
-		return n;
-	} else
-		buf = buffer;
-
-	while (i < number_alloc_list) {
-		if (alloc_list[i].type == 9 && alloc_list[i].ptr == buf) {
-			if (*
-			    ((long *) ((char *) alloc_list[i].ptr +
-				       alloc_list[i].size)) ==
-			    alloc_list[i].csum)
-				alloc_list[i].type = 0;	/* Release */
-			else {
-				alloc_list[i].type = 1;	/* Overrun */
-				if (debug & 1) {
-					printf("free corrupt, buffer overrun [%3d:%3d], %p, %4ld at %s, %3d, %s\n",
-					       i, number_alloc_list,
-					       buf, alloc_list[i].size, file,
-					       line, function);
-					dump_buffer(alloc_list[i].ptr,
-						    alloc_list[i].size + sizeof (long));
-					printf("Check_sum\n");
-					dump_buffer((char *) &alloc_list[i].csum,
-						    sizeof(long));
-
-					debug |= 512;	/* Memory Error detect */
-				}
+		list_add_tail(&entry->l, &bad_list);
+
+		return !size ? NULL : keepalived_malloc(size, file, function, line);
+	}
+
+	entry = rb_search(&alloc_list, &search, t, memcheck_ptr_cmp);
+
+	/* Not found */
+	if (!entry) {
+		entry = get_free_alloc_entry();
+
+		entry->ptr = buffer;
+		entry->size = size;
+		entry->file = file;
+		entry->func = function;
+		entry->line = line;
+		entry->type = !size ? FREE_NOT_ALLOC : REALLOC_NOT_ALLOC;
+		entry->seq_num = seq_num++;
+
+		if (!is_realloc)
+			fprintf(log_op, "%s%-7s%9s, %9p,      at %s, %3d, %s - not found\n", format_time(),
+				"free", "ERROR",
+				buffer, file, line, function);
+		else
+			fprintf(log_op, "%s%-7s%9s, %9p, %4zu at %s, %3d, %s - not found\n", format_time(),
+				"realloc", "ERROR",
+				buffer, size, file, line, function);
+
+		__set_bit(MEM_ERR_DETECT_BIT, &debug);
+
+		list_for_each_entry_reverse(le, &free_list, l) {
+			if (le->ptr == buffer &&
+			    le->type == LAST_FREE) {
+				fprintf
+				    (log_op, "%11s-> pointer last released at [%3u:%3u], at %s, %3d, %s\n",
+				     "", le->seq_num, number_alloc_list,
+				     le->file, le->line,
+				     le->func);
+
+				entry->type = !size ? DOUBLE_FREE : REALLOC_DOUBLE_FREE;
+				break;
 			}
-			break;
-		}
-		i++;
+		};
+
+		list_add_tail(&entry->l, &bad_list);
+
+		/* coverity[leaked_storage] */
+		return NULL;
 	}
 
-	/*  Not found */
-	if (i == number_alloc_list) {
-		printf("Free ERROR %p\n", buffer);
-		number_alloc_list++;
+	check = entry->size + CHECK_VAL;
+#ifndef _NO_UNALIGNED_ACCESS_
+	if (*(unsigned long *)((char *)buffer + entry->size) != check) {
+#else
+	if (memcmp((unsigned char *)buffer + entry->size, (unsigned char *)&check_val, sizeof(check_val))) {
+#endif
+		entry2 = get_free_alloc_entry();
+
+		*entry2 = *entry;
+		entry2->type = OVERRUN;
+		list_add_tail(&entry2->l, &bad_list);
+
+		fprintf(log_op, "%s%s corrupt, buffer overrun [%3u:%3u], %9p, %4zu at %s, %3d, %s\n",
+		       format_time(), !is_realloc ? "free" : "realloc",
+		       entry->seq_num, number_alloc_list, buffer,
+		       entry->size, file,
+		       line, function);
+		dump_buffer(entry->ptr,
+			    entry->size + sizeof (check), log_op, TIME_STR_LEN);
+		fprintf(log_op, "%*sCheck_sum\n", TIME_STR_LEN, "");
+		dump_buffer((char *) &check,
+			    sizeof(check), log_op, TIME_STR_LEN);
+
+		__set_bit(MEM_ERR_DETECT_BIT, &debug);
+	}
 
-		assert(number_alloc_list < MAX_ALLOC_LIST);
+	mem_allocated -= entry->size;
+
+	if (!size) {
+		free(buffer);
+
+		if (is_realloc) {
+			fprintf(log_op, "%s%-7s[%3u:%3u], %9p, %4zu at %s, %3d, %s -> %9s, %4s at %s, %3d, %s\n",
+			       format_time(), "realloc", entry->seq_num,
+			       number_alloc_list, entry->ptr,
+			       entry->size, entry->file,
+			       entry->line, entry->func,
+			       "made free", "", file, line, function);
+
+			/* Record bad realloc */
+			entry2 = get_free_alloc_entry();
+			*entry2 = *entry;
+			entry2->type = REALLOC_ZERO_SIZE;
+			entry2->file = file;
+			entry2->line = line;
+			entry2->func = function;
+			list_add_tail(&entry2->l, &bad_list);
+		}
+		else
+			fprintf(log_op, "%s%-7s[%3u:%3u], %9p, %4zu at %s, %3d, %s -> %9s, %4s at %s, %3d, %s\n",
+			       format_time(), "free", entry->seq_num,
+			       number_alloc_list, entry->ptr,
+			       entry->size, entry->file,
+			       entry->line, entry->func,
+			       "NULL", "", file, line, function);
+#ifdef _MEM_CHECK_LOG_
+		if (__test_bit(MEM_CHECK_LOG_BIT, &debug))
+			log_message(LOG_INFO, "%-7s[%3u:%3u], %9p, %4zu at %s, %3d, %s",
+			       is_realloc ? "realloc" : "free",
+			       entry->seq_num, number_alloc_list, buffer,
+			       entry->size, file, line, function);
+#endif
+
+		entry->file = file;
+		entry->line = line;
+		entry->func = function;
+		entry->type = LAST_FREE;
+
+		rb_erase(&entry->t, &alloc_list);
+		list_add_tail(&entry->l, &free_list);
+		free_list_size++;
 
-		alloc_list[i].ptr = buf;
-		alloc_list[i].size = 0;
-		alloc_list[i].file = file;
-		alloc_list[i].func = function;
-		alloc_list[i].line = line;
-		alloc_list[i].type = 4;
-		debug |= 512;
+		number_alloc_list--;
 
-		return n;
+		return NULL;
 	}
 
-	if (buffer != NULL)
-		xfree(buffer);
+	buffer = realloc(buffer, size + sizeof (unsigned long));
+	mem_allocated += size;
+
+	if (mem_allocated > max_mem_allocated)
+		max_mem_allocated = mem_allocated;
+
+	fprintf(log_op, "%srealloc[%3u:%3u], %9p, %4zu at %s, %3d, %s -> %9p, %4zu at %s, %3d, %s\n",
+	       format_time(), entry->seq_num,
+	       number_alloc_list, entry->ptr,
+	       entry->size, entry->file,
+	       entry->line, entry->func,
+	       buffer, size, file, line, function);
+#ifdef _MEM_CHECK_LOG_
+	if (__test_bit(MEM_CHECK_LOG_BIT, &debug))
+		log_message(LOG_INFO, "realloc[%3u:%3u], %9p, %4zu at %s, %3d, %s -> %9p, %4zu at %s, %3d, %s",
+		       entry->seq_num, number_alloc_list, entry->ptr,
+		       entry->size, entry->file,
+		       entry->line, entry->func,
+		       buffer, size, file, line, function);
+#endif
 
-	if (debug & 1)
-		printf("free  [%3d:%3d], %p, %4ld at %s, %3d, %s\n",
-		       i, number_alloc_list, buf,
-		       alloc_list[i].size, file, line, function);
+#ifndef _NO_UNALIGNED_ACCESS_
+	*(unsigned long *) ((char *) buffer + size) = size + CHECK_VAL;
+#else
+	memcpy((unsigned char *)buffer + size, (unsigned char *)&check_val, sizeof(check_val));
+#endif
 
-	free_list[f].file = file;
-	free_list[f].line = line;
-	free_list[f].func = function;
-	free_list[f].ptr = buffer;
-	free_list[f].type = 8;
-	free_list[f].csum = i;	/* Using this field for row id */
+	if (entry->ptr != buffer) {
+		rb_erase(&entry->t, &alloc_list);
+		entry->ptr = buffer;
+		rb_insert_sort(&alloc_list, entry, t, memcheck_ptr_cmp);
+	} else
+		entry->ptr = buffer;
+	entry->size = size;
+	entry->file = file;
+	entry->line = line;
+	entry->func = function;
 
-	f++;
-	f &= 255;
-	n--;
+	num_reallocs++;
 
-	return n;
+	/* coverity[leaked_storage] */
+	return buffer;
 }
 
 void
-keepalived_free_final(char *banner)
+keepalived_free(void *buffer, const char *file, const char *function, int line)
+{
+	keepalived_free_realloc_common(buffer, 0, file, function, line, false);
+}
+
+void *
+keepalived_realloc(void *buffer, size_t size, const char *file,
+		   const char *function, int line)
+{
+	return keepalived_free_realloc_common(buffer, size, file, function, line, true);
+}
+
+static void
+keepalived_alloc_log(bool final)
 {
-	unsigned int sum = 0, overrun = 0, badptr = 0;
-	int i, j;
-	i = 0;
-
-	printf("\n---[ Keepalived memory dump for (%s)]---\n\n", banner);
-
-	while (i < number_alloc_list) {
-		switch (alloc_list[i].type) {
-		case 3:
-			badptr++;
-			printf
-			    ("null pointer to realloc(nil,%ld)! at %s, %3d, %s\n",
-			     alloc_list[i].size, alloc_list[i].file,
-			     alloc_list[i].line, alloc_list[i].func);
-			break;
-		case 4:
-			badptr++;
-			printf
-			    ("pointer not found in table to free(%p) [%3d:%3d], at %s, %3d, %s\n",
-			     alloc_list[i].ptr, i, number_alloc_list,
-			     alloc_list[i].file, alloc_list[i].line,
-			     alloc_list[i].func);
-			for (j = 0; j < 256; j++)
-				if (free_list[j].ptr == alloc_list[i].ptr)
-					if (free_list[j].type == 8)
-						printf
-						    ("  -> pointer allready released at [%3d:%3d], at %s, %3d, %s\n",
-						     (int) free_list[j].csum,
-						     number_alloc_list,
-						     free_list[j].file,
-						     free_list[j].line,
-						     free_list[j].func);
-			break;
-		case 2:
-			badptr++;
-			printf("null pointer to free(nil)! at %s, %3d, %s\n",
-			       alloc_list[i].file, alloc_list[i].line,
-			       alloc_list[i].func);
-			break;
-		case 1:
-			overrun++;
-			printf("%p [%3d:%3d], %4ld buffer overrun!:\n",
-			       alloc_list[i].ptr, i, number_alloc_list,
-			       alloc_list[i].size);
-			printf(" --> source of malloc: %s, %3d, %s\n",
-			       alloc_list[i].file, alloc_list[i].line,
-			       alloc_list[i].func);
-			break;
-		case 9:
-			sum += alloc_list[i].size;
-			printf("%p [%3d:%3d], %4ld not released!:\n",
-			       alloc_list[i].ptr, i, number_alloc_list,
-			       alloc_list[i].size);
-			printf(" --> source of malloc: %s, %3d, %s\n",
-			       alloc_list[i].file, alloc_list[i].line,
-			       alloc_list[i].func);
-			break;
+	unsigned int overrun = 0, badptr = 0, zero_size = 0;
+	size_t sum = 0;
+	MEMCHECK *entry;
+
+	if (final) {
+		/* If this is a forked child, we don't want the dump */
+		if (skip_mem_check_final)
+			return;
+
+		fprintf(log_op, "\n---[ Keepalived memory dump for (%s) ]---\n\n", terminate_banner);
+	}
+	else
+		fprintf(log_op, "\n---[ Keepalived memory dump for (%s) at %s ]---\n\n", terminate_banner, format_time());
+
+	/* List the blocks currently allocated */
+	if (!RB_EMPTY_ROOT(&alloc_list)) {
+		fprintf(log_op, "Entries %s\n\n", final ? "not released" : "currently allocated");
+		rb_for_each_entry(entry, &alloc_list, t) {
+			sum += entry->size;
+			fprintf(log_op, "%9p [%3u:%3u], %4zu at %s, %3d, %s",
+			       entry->ptr, entry->seq_num, number_alloc_list,
+			       entry->size, entry->file, entry->line, entry->func);
+			if (entry->type != ALLOCATED)
+				fprintf(log_op, " type = %u", entry->type);
+			fprintf(log_op, "\n");
 		}
-		i++;
 	}
 
-	printf("\n\n---[ Keepalived memory dump summary for (%s) ]---\n", banner);
-	printf("Total number of bytes not freed...: %d\n", sum);
-	printf("Number of entries not freed.......: %d\n", n);
-	printf("Maximum allocated entries.........: %d\n", number_alloc_list);
-	printf("Number of bad entries.............: %d\n", badptr);
-	printf("Number of buffer overrun..........: %d\n\n", overrun);
+	if (!list_empty(&bad_list)) {
+		if (!RB_EMPTY_ROOT(&alloc_list))
+			fprintf(log_op, "\n");
+		fprintf(log_op, "Bad entry list\n\n");
+
+		list_for_each_entry(entry, &bad_list, l) {
+			switch (entry->type) {
+			case FREE_NULL:
+				badptr++;
+				fprintf(log_op, "%9s %9s, %4s at %s, %3d, %s - null pointer to free\n",
+				       "NULL", "", "", entry->file, entry->line, entry->func);
+				break;
+			case REALLOC_NULL:
+				badptr++;
+				fprintf(log_op, "%9s %9s, %4zu at %s, %3d, %s - null pointer to realloc (converted to malloc)\n",
+				     "NULL", "", entry->size, entry->file, entry->line, entry->func);
+				break;
+			case FREE_NOT_ALLOC:
+				badptr++;
+				fprintf(log_op, "%9p %9s, %4s at %s, %3d, %s - pointer not found for free\n",
+				     entry->ptr, "", "", entry->file, entry->line, entry->func);
+				break;
+			case REALLOC_NOT_ALLOC:
+				badptr++;
+				fprintf(log_op, "%9p %9s, %4zu at %s, %3d, %s - pointer not found for realloc\n",
+				     entry->ptr, "", entry->size, entry->file, entry->line, entry->func);
+				break;
+			case DOUBLE_FREE:
+				badptr++;
+				fprintf(log_op, "%9p %9s, %4s at %s, %3d, %s - double free of pointer\n",
+				     entry->ptr, "", "", entry->file, entry->line, entry->func);
+				break;
+			case REALLOC_DOUBLE_FREE:
+				badptr++;
+				fprintf(log_op, "%9p %9s, %4zu at %s, %3d, %s - realloc 0 size already freed\n",
+				     entry->ptr, "", entry->size, entry->file, entry->line, entry->func);
+				break;
+			case OVERRUN:
+				overrun++;
+				fprintf(log_op, "%9p [%3u:%3u], %4zu at %s, %3d, %s - buffer overrun\n",
+				       entry->ptr, entry->seq_num, number_alloc_list,
+				       entry->size, entry->file, entry->line, entry->func);
+				break;
+			case MALLOC_ZERO_SIZE:
+				zero_size++;
+				fprintf(log_op, "%9p [%3u:%3u], %4zu at %s, %3d, %s - malloc zero size\n",
+				       entry->ptr, entry->seq_num, number_alloc_list,
+				       entry->size, entry->file, entry->line, entry->func);
+				break;
+			case REALLOC_ZERO_SIZE:
+				zero_size++;
+				fprintf(log_op, "%9p [%3u:%3u], %4zu at %s, %3d, %s - realloc zero size (handled as free)\n",
+				       entry->ptr, entry->seq_num, number_alloc_list,
+				       entry->size, entry->file, entry->line, entry->func);
+				break;
+			case ALLOCATED:	/* not used - avoid compiler warning */
+			case FREE_SLOT:
+			case LAST_FREE:
+				break;
+			}
+		}
+	}
 
-	if (sum || n || badptr || overrun)
-		printf("=> Program seems to have some memory problem !!!\n\n");
-	else
-		printf("=> Program seems to be memory allocation safe...\n\n");
+	fprintf(log_op, "\n\n---[ Keepalived memory dump summary for (%s) ]---\n", terminate_banner);
+	fprintf(log_op, "Total number of bytes %s...: %zu\n", final ? "not freed" : "allocated", sum);
+	fprintf(log_op, "Number of entries %s.......: %u\n", final ? "not freed" : "allocated", number_alloc_list);
+	fprintf(log_op, "Maximum allocated entries.........: %u\n", max_alloc_list);
+	fprintf(log_op, "Maximum memory allocated..........: %zu\n", max_mem_allocated);
+	fprintf(log_op, "Number of mallocs.................: %u\n", num_mallocs);
+	fprintf(log_op, "Number of reallocs................: %u\n", num_reallocs);
+	fprintf(log_op, "Number of bad entries.............: %u\n", badptr);
+	fprintf(log_op, "Number of buffer overrun..........: %u\n", overrun);
+	fprintf(log_op, "Number of 0 size allocations......: %u\n\n", zero_size);
+	if (sum != mem_allocated)
+		fprintf(log_op, "ERROR - sum of allocated %zu != mem_allocated %zu\n", sum, mem_allocated);
+
+	if (final) {
+		if (sum || number_alloc_list || badptr || overrun)
+			fprintf(log_op, "=> Program seems to have some memory problem !!!\n\n");
+		else
+			fprintf(log_op, "=> Program seems to be memory allocation safe...\n\n");
+	}
 }
 
-void *
-keepalived_realloc(void *buffer, unsigned long size, char *file, char *function,
-		   int line)
+static void
+keepalived_free_final(void)
 {
-	int i = 0;
-	void *buf, *buf2;
-	long check;
+	keepalived_alloc_log(true);
+}
 
-	if (buffer == NULL) {
-		printf("realloc %p %s, %3d %s\n", buffer, file, line, function);
-		i = number_alloc_list++;
-
-		assert(number_alloc_list < MAX_ALLOC_LIST);
-
-		alloc_list[i].ptr = NULL;
-		alloc_list[i].size = 0;
-		alloc_list[i].file = file;
-		alloc_list[i].func = function;
-		alloc_list[i].line = line;
-		alloc_list[i].type = 3;
-		return keepalived_malloc(size, file, function, line);
-	}
+void
+keepalived_alloc_dump(void)
+{
+	keepalived_alloc_log(false);
+}
 
-	buf = buffer;
+void
+mem_log_init(const char* prog_name, const char *banner)
+{
+	size_t log_name_len;
+	char *log_name;
 
-	while (i < number_alloc_list) {
-		if (alloc_list[i].ptr == buf) {
-			buf = alloc_list[i].ptr;
-			break;
-		}
-		i++;
+	if (__test_bit(LOG_CONSOLE_BIT, &debug)) {
+		log_op = stderr;
+		return;
 	}
 
-	/* not found */
-	if (i == number_alloc_list) {
-		printf("realloc ERROR no matching zalloc %p \n", buffer);
-		number_alloc_list++;
+	if (log_op)
+		fclose(log_op);
 
-		assert(number_alloc_list < MAX_ALLOC_LIST);
+	log_name_len = 5 + strlen(prog_name) + 5 + 7 + 4 + 1;	/* "/tmp/" + prog_name + "_mem." + PID + ".log" + '\0" */
+	log_name = malloc(log_name_len);
+	if (!log_name) {
+		log_message(LOG_INFO, "Unable to malloc log file name");
+		log_op = stderr;
+		return;
+	}
 
-		alloc_list[i].ptr = buf;
-		alloc_list[i].size = 0;
-		alloc_list[i].file = file;
-		alloc_list[i].func = function;
-		alloc_list[i].line = line;
-		alloc_list[i].type = 9;
-		debug |= 512;	/* Memory Error detect */
-		return NULL;
+	snprintf(log_name, log_name_len, "/tmp/%s_mem.%d.log", prog_name, getpid());
+	log_op = fopen_safe(log_name, "w");
+	if (log_op == NULL) {
+		log_message(LOG_INFO, "Unable to open %s for appending", log_name);
+		log_op = stderr;
 	}
+	else {
+		int fd = fileno(log_op);
 
-	buf2 = ((char *) buf) + alloc_list[i].size;
+		/* We don't want any children to inherit the log file */
+		if (fcntl(fd, F_SETFD, fcntl(fd, F_GETFD) | FD_CLOEXEC))
+			log_message(LOG_INFO, "Warning - failed to set CLOEXEC on log file %s", log_name);
 
-	if (*(long *) (buf2) != alloc_list[i].csum) {
-		alloc_list[i].type = 1;
-		debug |= 512;	/* Memory Error detect */
+		/* Make the log output line buffered. This was to ensure that
+		 * children didn't inherit the buffer, but the CLOEXEC above
+		 * should resolve that. */
+		setlinebuf(log_op);
+
+		fprintf(log_op, "\n");
 	}
-	buf = realloc(buffer, size + sizeof (long));
 
-	check = 0xa5a5 + size;
-	*(long *) ((char *) buf + size) = check;
-	alloc_list[i].csum = check;
+	free(log_name);
 
-	if (debug & 1)
-		printf("realloc [%3d:%3d] %p, %4ld %s %d %s -> %p %4ld %s %d %s\n",
-		       i, number_alloc_list, alloc_list[i].ptr,
-		       alloc_list[i].size, file, line, function, buf, size,
-		       alloc_list[i].file, alloc_list[i].line,
-		       alloc_list[i].func);
+	terminate_banner = banner;
+}
 
-	alloc_list[i].ptr = buf;
-	alloc_list[i].size = size;
-	alloc_list[i].file = file;
-	alloc_list[i].line = line;
-	alloc_list[i].func = function;
+void skip_mem_dump(void)
+{
+	skip_mem_check_final = true;
+}
 
-	return buf;
+void enable_mem_log_termination(void)
+{
+	atexit(keepalived_free_final);
 }
 
+void
+update_mem_check_log_perms(mode_t umask_bits)
+{
+	if (log_op)
+		fchmod(fileno(log_op), (S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP | S_IROTH | S_IWOTH) & ~umask_bits);
+}
 #endif
diff --git a/tools/keepalived/lib/memory.h b/tools/keepalived/lib/memory.h
index 99f0d492b..598413411 100644
--- a/tools/keepalived/lib/memory.h
+++ b/tools/keepalived/lib/memory.h
@@ -18,55 +18,84 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _MEMORY_H
 #define _MEMORY_H
 
+#include "config.h"
+
 /* system includes */
-#include <stdio.h>
-#include <stdint.h>
+#include <stddef.h>
+#ifdef _MEM_CHECK_
+#include <sys/types.h>
+#include <sys/stat.h>
+#else
 #include <stdlib.h>
-#include <string.h>
-#include <assert.h>
-
-/* extern types */
-extern unsigned long mem_allocated;
-extern void *xalloc(unsigned long size);
-extern void *zalloc(unsigned long size);
-extern void xfree(void *p);
-
-/* Global alloc macro */
-#define ALLOC(n) (xalloc(n))
+#endif
 
 /* Local defines */
-#ifdef _DEBUG_
-
-#define MAX_ALLOC_LIST 2048
+#ifdef _MEM_CHECK_
 
 #define MALLOC(n)    ( keepalived_malloc((n), \
-                      (__FILE__), (char *)(__FUNCTION__), (__LINE__)) )
+		      (__FILE__), (__func__), (__LINE__)) )
+#define STRDUP(p)    (keepalived_strdup((p), \
+		      (__FILE__), (__func__), (__LINE__)) )
+#define STRNDUP(p,n) (keepalived_strndup((p),(n), \
+		      (__FILE__), (__func__), (__LINE__)) )
 #define FREE(b)      ( keepalived_free((b), \
-                      (__FILE__), (char *)(__FUNCTION__), (__LINE__)) )
+		      (__FILE__), (__func__), (__LINE__)), \
+		       (b) = NULL )
+#define FREE_ONLY(b) ( keepalived_free((b), \
+		      (__FILE__), (__func__), (__LINE__)))
 #define REALLOC(b,n) ( keepalived_realloc((b), (n), \
-                      (__FILE__), (char *)(__FUNCTION__), (__LINE__)) )
+		      (__FILE__), (__func__), (__LINE__)) )
+
+extern size_t mem_allocated;
 
 /* Memory debug prototypes defs */
-extern char *keepalived_malloc(unsigned long, char *, char *, int);
-extern int keepalived_free(void *, char *, char *, int);
-extern void *keepalived_realloc(void *, unsigned long, char *, char *, int);
-extern void keepalived_free_final(char *);
+extern void memcheck_log(const char *, const char *, const char *, const char *, int);
+extern void *keepalived_malloc(size_t, const char *, const char *, int)
+		__attribute__((alloc_size(1))) __attribute__((malloc));
+extern char *keepalived_strdup(const char *, const char *, const char *, int)
+		__attribute__((malloc)) __attribute__((nonnull (1)));
+extern char *keepalived_strndup(const char *, size_t, const char *, const char *, int)
+		__attribute__((malloc)) __attribute__((nonnull (1)));
+extern void keepalived_free(void *, const char *, const char *, int);
+extern void *keepalived_realloc(void *, size_t, const char *, const char *, int)
+		__attribute__((alloc_size(2)));
+
+extern void keepalived_alloc_dump(void);
+extern void mem_log_init(const char *, const char *);
+extern void skip_mem_dump(void);
+extern void enable_mem_log_termination(void);
 
+extern void update_mem_check_log_perms(mode_t);
 #else
 
+extern void *zalloc(unsigned long size);
+
 #define MALLOC(n)    (zalloc(n))
-#define FREE(p)      (xfree(p))
+#define FREE(p)      (free(p), (p) = NULL)
+#define FREE_ONLY(p) (free(p))
 #define REALLOC(p,n) (realloc((p),(n)))
+#define STRDUP(p)    (strdup(p))
+#define STRNDUP(p,n) (strndup((p),(n)))
 
 #endif
 
 /* Common defines */
-#define FREE_PTR(P) if((P)) FREE((P));
+typedef union _ptr_hack {
+	void *p;
+	const void *cp;
+} ptr_hack_t;
+
+#define FREE_CONST(ptr) { ptr_hack_t ptr_hack = { .cp = ptr }; FREE(ptr_hack.p); }
+#define FREE_CONST_ONLY(ptr) { ptr_hack_t ptr_hack = { .cp = ptr }; FREE_ONLY(ptr_hack.p); }
+#define REALLOC_CONST(ptr, n) ({ ptr_hack_t ptr_hack = { .cp = ptr }; REALLOC(ptr_hack.p, n); })
 
+#define PMALLOC(p)	{ p = MALLOC(sizeof(*p)); }
+#define FREE_PTR(p)	{ if (p) { FREE(p);} }
+#define FREE_CONST_PTR(p) { if (p) { FREE_CONST(p);} }
 #endif
diff --git a/tools/keepalived/lib/notify.c b/tools/keepalived/lib/notify.c
index 80cc91ead..894a144ee 100644
--- a/tools/keepalived/lib/notify.c
+++ b/tools/keepalived/lib/notify.c
@@ -17,54 +17,163 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
 #include <unistd.h>
 #include <stdlib.h>
-#include <syslog.h>
 #include <fcntl.h>
 #include <errno.h>
+#include <signal.h>
+#include <grp.h>
+#include <string.h>
+#include <sys/stat.h>
+#include <pwd.h>
+#include <sys/resource.h>
+#include <limits.h>
+#include <sys/prctl.h>
+
 #include "notify.h"
 #include "signals.h"
 #include "logger.h"
+#include "utils.h"
+#include "process.h"
+#include "parser.h"
+#include "keepalived_magic.h"
+#include "scheduler.h"
 
-/* perform a system call */
-int
-system_call(char *cmdline)
+
+/* Default user/group for script execution */
+uid_t default_script_uid;
+gid_t default_script_gid;
+
+/* Have we got a default user OK? */
+static bool default_script_uid_set = false;
+static bool default_user_fail = false;			/* Set if failed to set default user,
+							   unless it defaults to root */
+
+/* Script security enabled */
+bool script_security = false;
+
+/* Buffer length needed for getpwnam_r/getgrname_r */
+static size_t getpwnam_buf_len;
+
+static char *path;
+static bool path_is_malloced;
+
+/* The priority this process is running at */
+static int cur_prio = INT_MAX;
+
+/* Buffer for expanding notify script commands */
+static char cmd_str_buf[MAXBUF];
+
+static bool
+set_privileges(uid_t uid, gid_t gid)
 {
 	int retval;
 
-	retval = system(cmdline);
+	/* Ensure we receive SIGTERM if our parent process dies */
+	prctl(PR_SET_PDEATHSIG, SIGTERM);
+
+	/* If we have increased our priority, set it to default for the script */
+	if (cur_prio != INT_MAX)
+		cur_prio = getpriority(PRIO_PROCESS, 0);
+	if (cur_prio < 0)
+		setpriority(PRIO_PROCESS, 0, 0);
+
+	/* Drop our privileges if configured */
+	if (gid) {
+		retval = setgid(gid);
+		if (retval < 0) {
+			log_message(LOG_ALERT, "Couldn't setgid: %u (%m)", gid);
+			return true;
+		}
+
+		/* Clear any extra supplementary groups */
+		retval = setgroups(1, &gid);
+		if (retval < 0) {
+			log_message(LOG_ALERT, "Couldn't setgroups: %u (%m)", gid);
+			return true;
+		}
+	}
 
-	if (retval == 127) {
-		/* couldn't exec command */
-		log_message(LOG_ALERT, "Couldn't exec command: %s", cmdline);
-	} else if (retval == -1) {
-		/* other error */
-		log_message(LOG_ALERT, "Error exec-ing command: %s", cmdline);
+	if (uid) {
+		retval = setuid(uid);
+		if (retval < 0) {
+			log_message(LOG_ALERT, "Couldn't setuid: %u (%m)", uid);
+			return true;
+		}
 	}
 
-	return retval;
+	/* Prepare for invoking process/script */
+	signal_handler_script();
+	set_std_fd(false);
+
+	return false;
 }
 
-/* Close all FDs >= a specified value */
-void
-closeall(int fd)
+const char *
+cmd_str_r(const notify_script_t *script, char *buf, size_t len)
+{
+	char *str_p;
+	int i;
+	size_t str_len;
+
+	str_p = buf;
+
+	for (i = 0; i < script->num_args; i++) {
+		/* Check there is enough room for the next word */
+		str_len = strlen(script->args[i]);
+		if (str_p + str_len + 2 + (i ? 1 : 0) >= buf + len)
+			return NULL;
+
+		if (i)
+			*str_p++ = ' ';
+
+		/* Allow special case of bash script which is redirection only to
+		 * test for file existence. */
+		if (i || (script->args[i][0] != '<' && script->args[i][0] != '>'))
+			*str_p++ = '\'';
+
+		strcpy(str_p, script->args[i]);
+		str_p += str_len;
+
+		/* Close opening ' if we added one */
+		if (i || (script->args[i][0] != '<' && script->args[i][0] != '>'))
+			*str_p++ = '\'';
+	}
+	*str_p = '\0';
+
+	return buf;
+}
+
+const char *
+cmd_str(const notify_script_t *script)
 {
-	int fdlimit = sysconf(_SC_OPEN_MAX);
-	while (fd < fdlimit)
-		close(fd++);
+	size_t len;
+	int i;
+
+	for (i = 0, len = 0; i < script->num_args; i++)
+		len += strlen(script->args[i]) + 3; /* Add two ', and trailing space (or null for last arg) */
+
+	if (len > sizeof cmd_str_buf)
+		return NULL;
+
+	return cmd_str_r(script, cmd_str_buf, sizeof cmd_str_buf);
 }
 
-/* Execute external script/program */
-int
-notify_exec(char *cmd)
+/* Execute external script/program to process FIFO */
+static pid_t
+notify_fifo_exec(thread_master_t *m, int (*func) (thread_ref_t), void *arg, notify_script_t *script)
 {
 	pid_t pid;
-	int ret;
+	int retval;
+	const char *scr;
+	union non_const_args args;
 
-	pid = fork();
+	pid = local_fork();
 
 	/* In case of fork is error. */
 	if (pid < 0) {
@@ -73,25 +182,1051 @@ notify_exec(char *cmd)
 	}
 
 	/* In case of this is parent process */
-	if (pid)
+	if (pid) {
+		thread_add_child(m, func, arg, pid, TIMER_NEVER);
 		return 0;
+	}
 
-	signal_handler_destroy();
-	closeall(0);
+#ifdef _MEM_CHECK_
+	skip_mem_dump();
+#endif
 
-	open("/dev/null", O_RDWR);
+	setpgid(0, 0);
+	set_privileges(script->uid, script->gid);
 
-	ret = dup(0);
-	if (ret < 0) {
-		log_message(LOG_INFO, "dup(0) error");
+	if (script->flags & SC_EXECABLE) {
+		/* If keepalived dies, we want the script to die */
+		prctl(PR_SET_PDEATHSIG, SIGTERM);
+
+		args.args = script->args;	/* Note: we are casting away constness, since execve parameter type is wrong */
+		execve(script->args[0], args.execve_args, environ);
+
+		if (errno == EACCES)
+			log_message(LOG_INFO, "FIFO notify script %s is not executable", script->args[0]);
+		else
+			log_message(LOG_INFO, "Unable to execute FIFO notify script %s - errno %d - %m", script->args[0], errno);
 	}
+	else {
+		retval = system(scr = cmd_str(script));
+
+		if (retval == 127) {
+			/* couldn't exec command */
+			log_message(LOG_ALERT, "Couldn't exec FIFO command: %s", scr);
+		}
+		else if (retval == -1)
+			log_message(LOG_ALERT, "Error exec-ing FIFO command: %s", scr);
 
-	ret = dup(0);
-	if (ret < 0) {
-		log_message(LOG_INFO, "dup(0) error");
+		exit(0);
 	}
 
-	system_call(cmd);
+	/* unreached unless error */
+	exit(0);
+}
+
+static void
+fifo_open(notify_fifo_t* fifo, int (*script_exit)(thread_ref_t), const char *type)
+{
+	int ret;
+	int sav_errno;
+
+	if (fifo->name) {
+		sav_errno = 0;
+
+		if (!(ret = mkfifo(fifo->name, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH))) {
+			fifo->created_fifo = true;
+
+			if (chown(fifo->name, fifo->uid, fifo->gid))
+				log_message(LOG_INFO, "Failed to set uid:gid for fifo %s", fifo->name);
+		} else {
+			sav_errno = errno;
+
+			if (sav_errno != EEXIST)
+				log_message(LOG_INFO, "Unable to create %snotify fifo %s", type, fifo->name);
+		}
+
+		if (!sav_errno || sav_errno == EEXIST) {
+			/* Run the notify script if there is one */
+			if (fifo->script)
+				notify_fifo_exec(master, script_exit, fifo, fifo->script);
+
+			/* Now open the fifo */
+			if ((fifo->fd = open(fifo->name, O_RDWR | O_CLOEXEC | O_NONBLOCK | O_NOFOLLOW)) == -1) {
+				log_message(LOG_INFO, "Unable to open %snotify fifo %s - errno %d", type, fifo->name, errno);
+				if (fifo->created_fifo) {
+					unlink(fifo->name);
+					fifo->created_fifo = false;
+				}
+			}
+		}
+
+		if (fifo->fd == -1) {
+			FREE_CONST(fifo->name);
+			fifo->name = NULL;
+		}
+	}
+}
+
+void
+notify_fifo_open(notify_fifo_t* global_fifo, notify_fifo_t* fifo, int (*script_exit)(thread_ref_t), const char *type)
+{
+	/* Open the global FIFO if specified */
+	if (global_fifo->name)
+		fifo_open(global_fifo, script_exit, "");
+
+	/* Now the specific FIFO */
+	if (fifo->name)
+		fifo_open(fifo, script_exit, type);
+}
+
+static void
+fifo_close(notify_fifo_t* fifo)
+{
+	if (fifo->fd != -1) {
+		close(fifo->fd);
+		fifo->fd = -1;
+	}
+	if (fifo->created_fifo)
+		unlink(fifo->name);
+}
+
+void
+notify_fifo_close(notify_fifo_t* global_fifo, notify_fifo_t* fifo)
+{
+	if (global_fifo->fd != -1)
+		fifo_close(global_fifo);
+
+	fifo_close(fifo);
+}
+
+/* perform a system call */
+static void __attribute__ ((noreturn))
+system_call(const notify_script_t* script)
+{
+	char *command_line = NULL;
+	const char *str;
+	int retval;
+	union non_const_args args;
+
+	if (set_privileges(script->uid, script->gid))
+		exit(0);
+
+	/* Move us into our own process group, so if the script needs to be killed
+	 * all its child processes will also be killed. */
+	setpgid(0, 0);
+
+	if (script->flags & SC_EXECABLE) {
+		/* If keepalived dies, we want the script to die */
+		prctl(PR_SET_PDEATHSIG, SIGTERM);
+
+		args.args = script->args;	/* Note: we are casting away constness, since execve parameter type is wrong */
+		execve(script->args[0], args.execve_args, environ);
+
+		/* error */
+		log_message(LOG_ALERT, "Error exec-ing command '%s', error %d: %m", script->args[0], errno);
+	}
+	else {
+		retval = system(str = cmd_str(script));
+
+		if (retval == -1)
+			log_message(LOG_ALERT, "Error exec-ing command: %s", str);
+		else if (WIFEXITED(retval)) {
+			if (WEXITSTATUS(retval) == 127) {
+				/* couldn't find command */
+				log_message(LOG_ALERT, "Couldn't find command: %s", str);
+			}
+			else if (WEXITSTATUS(retval) == 126) {
+				/* couldn't find command */
+				log_message(LOG_ALERT, "Couldn't execute command: %s", str);
+			}
+		}
+
+		if (command_line)
+			FREE(command_line);
+
+		if (retval == -1 ||
+		    (WIFEXITED(retval) && (WEXITSTATUS(retval) == 126 || WEXITSTATUS(retval) == 127)))
+			exit(0);
+		if (WIFEXITED(retval))
+			exit(WEXITSTATUS(retval));
+		if (WIFSIGNALED(retval))
+			kill(getpid(), WTERMSIG(retval));
+		exit(0);
+	}
 
 	exit(0);
 }
+
+/* Execute external script/program */
+int
+notify_exec(const notify_script_t *script)
+{
+	pid_t pid;
+
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		flush_log_file();
+#endif
+
+	pid = local_fork();
+
+	if (pid < 0) {
+		/* fork error */
+		log_message(LOG_INFO, "Failed fork process");
+		return -1;
+	}
+
+	if (pid) {
+		/* parent process */
+		return 0;
+	}
+
+#ifdef _MEM_CHECK_
+	skip_mem_dump();
+#endif
+
+	system_call(script);
+
+	/* We should never get here */
+	exit(0);
+}
+
+int
+system_call_script(thread_master_t *m, int (*func) (thread_ref_t), void * arg, unsigned long timer, notify_script_t* script)
+{
+	pid_t pid;
+
+	/* Daemonization to not degrade our scheduling timer */
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		flush_log_file();
+#endif
+
+	pid = local_fork();
+
+	if (pid < 0) {
+		/* fork error */
+		log_message(LOG_INFO, "Failed fork process");
+		return -1;
+	}
+
+	if (pid) {
+		/* parent process */
+		thread_add_child(m, func, arg, pid, timer);
+		return 0;
+	}
+
+	/* Child process */
+#ifdef _MEM_CHECK_
+	skip_mem_dump();
+#endif
+
+	system_call(script);
+
+	exit(0); /* Script errors aren't server errors */
+}
+
+int
+child_killed_thread(thread_ref_t thread)
+{
+	thread_master_t *m = thread->master;
+
+	/* If the child didn't die, then force it */
+	if (thread->type == THREAD_CHILD_TIMEOUT)
+		kill(-getpgid(thread->u.c.pid), SIGKILL);
+
+	/* If all children have died, we can now complete the
+	 * termination process */
+	if (!&m->child.rb_root.rb_node && !m->shutdown_timer_running)
+		thread_add_terminate_event(m);
+
+	return 0;
+}
+
+void
+script_killall(thread_master_t *m, int signo, bool requeue)
+{
+	thread_t *thread;
+	pid_t p_pgid, c_pgid;
+#ifndef HAVE_SIGNALFD
+	sigset_t old_set, child_wait;
+
+	sigmask_func(0, NULL, &old_set);
+	if (!sigismember(&old_set, SIGCHLD)) {
+		sigemptyset(&child_wait);
+		sigaddset(&child_wait, SIGCHLD);
+		sigmask_func(SIG_BLOCK, &child_wait, NULL);
+	}
+#endif
+
+	p_pgid = getpgid(0);
+
+	rb_for_each_entry_cached(thread, &m->child, n) {
+		c_pgid = getpgid(thread->u.c.pid);
+		if (c_pgid != p_pgid)
+			kill(-c_pgid, signo);
+		else {
+			log_message(LOG_INFO, "Child process %d in our process group %d", c_pgid, p_pgid);
+			kill(thread->u.c.pid, signo);
+		}
+	}
+
+	/* We want to timeout the killed children in 1 second */
+	if (requeue && signo != SIGKILL)
+		thread_children_reschedule(m, child_killed_thread, TIMER_HZ);
+
+#ifndef HAVE_SIGNALFD
+	if (!sigismember(&old_set, SIGCHLD))
+		sigmask_func(SIG_UNBLOCK, &child_wait, NULL);
+#endif
+}
+
+static bool
+is_executable(const struct stat *buf, uid_t uid, gid_t gid)
+{
+	return (uid == 0 && buf->st_mode & (S_IXUSR | S_IXGRP | S_IXOTH)) ||
+	       (uid == buf->st_uid && buf->st_mode & S_IXUSR) ||
+	       (uid != buf->st_uid &&
+		((gid == buf->st_gid && buf->st_mode & S_IXGRP) ||
+		 (gid != buf->st_gid && buf->st_mode & S_IXOTH)));
+}
+
+static void
+replace_cmd_name(notify_script_t *script, const char *new_path)
+{
+	size_t len;
+	const char * const *wp = &script->args[1];
+	size_t num_words = 1;
+	char **params;
+	char **word_ptrs;
+	char *words;
+	/* Avoid gcc warning: to be safe all intermediate pointers in cast from ‘char **’
+	 *   to ‘const char **’ must be ‘const’ qualified
+	 * What we want to assign to is a pointer (therefore non const) to an array of pointers
+	 *   which can be modified, therefore non-const, to const strings, i.e. const char **;
+	 *   but if assign a char ** to a const char ** we get the above warning
+	 */
+	union {
+		char **params;
+		const char **cparams;
+	} args;
+
+	len = strlen(new_path) + 1;
+	while (*wp)
+		len += strlen(*wp++) + 1;
+	num_words = (script->args[0] - (const char *)&script->args[0]) - 1;
+
+	params = word_ptrs = MALLOC((num_words + 1) * sizeof(char *) + len);
+	words = (char *)&params[num_words + 1];
+
+	strcpy(words, new_path);
+	*(word_ptrs++) = words;
+	words += strlen(words) + 1;
+
+	wp = &script->args[1];
+	while (*wp) {
+		strcpy(words, *wp);
+		*(word_ptrs++) = words;
+		words += strlen(*wp) + 1;
+		wp++;
+	}
+	*word_ptrs = NULL;
+
+	FREE_CONST(script->args);
+	args.params = params;
+	script->args = args.cparams;
+}
+
+/* The following function is essentially __execve() from glibc */
+static int
+find_path(notify_script_t *script)
+{
+	size_t filename_len;
+	size_t file_len;
+	size_t path_len;
+	const char *file = script->args[0];
+	struct stat buf;
+	int ret;
+	int ret_val = ENOENT;
+	int sgid_num;
+	gid_t *sgid_list = NULL;
+	const char *subp;
+	bool got_eacces = false;
+	const char *p;
+
+	/* We check the simple case first. */
+	if (*file == '\0')
+		return ENOENT;
+
+	filename_len = strlen(file);
+	if (filename_len >= PATH_MAX) {
+		ret_val = ENAMETOOLONG;
+		goto exit1;
+	}
+
+	/* Don't search when it contains a slash. */
+	if (strchr (file, '/') != NULL) {
+		ret_val = 0;
+		goto exit1;
+	}
+
+	/* Get the path if we haven't already done so, and if that doesn't
+	 * exist, use CS_PATH */
+	if (!path) {
+		path = getenv ("PATH");
+
+		if (!path) {
+			size_t cs_path_len;
+			path = MALLOC(cs_path_len = confstr(_CS_PATH, NULL, 0));
+			confstr(_CS_PATH, path, cs_path_len);
+			path_is_malloced = true;
+		}
+	}
+
+	/* Although GLIBC does not enforce NAME_MAX, we set it as the maximum
+	   size to avoid unbounded stack allocation.  Same applies for
+	   PATH_MAX. */
+	file_len = strnlen (file, NAME_MAX + 1);
+	path_len = strnlen (path, PATH_MAX - 1) + 1;
+
+	if (file_len > NAME_MAX) {
+		ret_val = ENAMETOOLONG;
+		goto exit1;
+	}
+
+	/* Set file access to the relevant uid/gid */
+	if (script->gid) {
+		if (setegid(script->gid)) {
+			log_message(LOG_INFO, "Unable to set egid to %u (%m)", script->gid);
+			ret_val = EACCES;
+			goto exit1;
+		}
+
+		/* Get our supplementary groups */
+		sgid_num = getgroups(0, NULL);
+		if (sgid_num == -1) {
+			log_message(LOG_INFO, "Unable to get number of supplementary gids (%m)");
+			ret_val = EACCES;
+			goto exit;
+		}
+		sgid_list = MALLOC(((size_t)sgid_num + 1) * sizeof(gid_t));
+		sgid_num = getgroups(sgid_num, sgid_list);
+		sgid_list[sgid_num++] = 0;
+
+		/* Clear the supplementary group list */
+		if (setgroups(1, &script->gid)) {
+			log_message(LOG_INFO, "Unable to set supplementary gids (%m)");
+			ret_val = EACCES;
+			goto exit;
+		}
+	}
+	if (script->uid && seteuid(script->uid)) {
+		log_message(LOG_INFO, "Unable to set euid to %u (%m)", script->uid);
+		ret_val = EACCES;
+		goto exit;
+	}
+
+	for (p = path; ; p = subp)
+	{
+		subp = strchrnul (p, ':');
+
+		/* PATH is larger than PATH_MAX and thus potentially larger than
+		   the stack allocation. */
+		if (subp >= p + path_len) {
+			/* There are no more paths, bail out. */
+			if (*subp == '\0') {
+				ret_val = ENOENT;
+				goto exit;
+			}
+
+			/* Otherwise skip to next one. */
+			continue;
+		}
+
+		/* Use the current path entry, plus a '/' if nonempty, plus the file to execute. */
+		char *buffer = MALLOC(path_len + file_len + 1);
+		char *pend = mempcpy (buffer, p, (size_t)(subp - p));
+		*pend = '/';
+		memcpy (pend + (p < subp), file, file_len + 1);
+
+		ret = stat (buffer, &buf);
+		if (!ret) {
+			if (!S_ISREG(buf.st_mode))
+				errno = EACCES;
+			else if (!is_executable(&buf, script->uid, script->gid)) {
+				errno = EACCES;
+			} else {
+				/* Success */
+				log_message(LOG_INFO, "WARNING - script `%s` resolved by path search to `%s`. Please specify full path.", script->args[0], buffer);
+
+				/* Copy the found file name, and any parameters */
+				replace_cmd_name(script, buffer);
+
+				ret_val = 0;
+				got_eacces = false;
+				FREE(buffer);
+				goto exit;
+			}
+		}
+		FREE(buffer);
+
+		switch (errno)
+		{
+		case ENOEXEC:
+		case EACCES:
+			/* Record that we got a 'Permission denied' error.  If we end
+			   up finding no executable we can use, we want to diagnose
+			   that we did find one but were denied access. */
+			if (!ret)
+				got_eacces = true;
+		case ENOENT:
+		case ESTALE:
+		case ENOTDIR:
+			/* Those errors indicate the file is missing or not executable
+			   by us, in which case we want to just try the next path
+			   directory. */
+		case ENODEV:
+		case ETIMEDOUT:
+			/* Some strange filesystems like AFS return even
+			   stranger error numbers.  They cannot reasonably mean
+			   anything else so ignore those, too. */
+			break;
+
+		default:
+			/* Some other error means we found an executable file, but
+			   something went wrong accessing it; return the error to our
+			   caller. */
+			ret_val = -1;
+			goto exit;
+		}
+
+		if (*subp++ == '\0')
+			break;
+	}
+
+exit:
+	/* Restore root euid/egid */
+	if (script->uid && seteuid(0))
+		log_message(LOG_INFO, "Unable to restore euid after script search (%m)");
+	if (script->gid) {
+		if (setegid(0))
+			log_message(LOG_INFO, "Unable to restore egid after script search (%m)");
+
+		/* restore supplementary groups */
+		if (sgid_list) {
+			if (setgroups((size_t)sgid_num, sgid_list))
+				log_message(LOG_INFO, "Unable to restore supplementary groups after script search (%m)");
+			FREE(sgid_list);
+		}
+	}
+
+exit1:
+	/* We tried every element and none of them worked. */
+	if (got_eacces) {
+		/* At least one failure was due to permissions, so report that error. */
+		return EACCES;
+	}
+
+	return ret_val;
+}
+
+static int
+check_security(const char *filename, bool using_script_security)
+{
+	const char *next;
+	char *slash;
+	int ret;
+	struct stat buf;
+	int flags = 0;
+	char *filename_copy;
+
+	next = filename;
+	while (next) {
+		slash = strchrnul(next, '/');
+		if (*slash)
+			next = slash + 1;
+		else {
+			slash = NULL;
+			next = NULL;
+		}
+
+		if (slash) {
+			/* We want to check '/' for first time around */
+			if (slash == filename)
+				slash++;
+			filename_copy = STRNDUP(filename, slash - filename);
+		}
+
+		ret = fstatat(0, slash ? filename_copy : filename, &buf, AT_SYMLINK_NOFOLLOW);
+
+		/* Restore the full path name */
+		if (slash)
+			FREE(filename_copy);
+
+		if (ret) {
+			if (errno == EACCES || errno == ELOOP || errno == ENOENT || errno == ENOTDIR)
+				log_message(LOG_INFO, "check_script_secure could not find script '%s' - disabling", filename);
+			else
+				log_message(LOG_INFO, "check_script_secure('%s') returned errno %d - %s - disabling", filename, errno, strerror(errno));
+			return flags | SC_NOTFOUND;
+		}
+
+		/* If it is not the last item, it must be a directory. If it is the last item
+		 * it must be a file or a symbolic link. */
+		if ((slash && !S_ISDIR(buf.st_mode)) ||
+		    (!slash &&
+		     !S_ISREG(buf.st_mode) &&
+		     !S_ISLNK(buf.st_mode))) {
+			log_message(LOG_INFO, "Wrong file type found in script path '%s'.", filename);
+			return flags | SC_INHIBIT;
+		}
+
+		if (buf.st_uid ||				/* Owner is not root */
+		    (((S_ISDIR(buf.st_mode) &&			/* A directory without the sticky bit set */
+		       !(buf.st_mode & S_ISVTX)) ||
+		      S_ISREG(buf.st_mode)) &&			/* This is a file */
+		     ((buf.st_gid && buf.st_mode & S_IWGRP) ||	/* Group is not root and group write permission */
+		      buf.st_mode & S_IWOTH))) {		/* World has write permission */
+			log_message(LOG_INFO, "Unsafe permissions found for script '%s'%s.", filename, using_script_security ? " - disabling" : "");
+			flags |= SC_INSECURE;
+			return flags | (using_script_security ? SC_INHIBIT : 0);
+		}
+	}
+
+	return flags;
+}
+
+int
+check_script_secure(notify_script_t *script,
+#ifndef _HAVE_LIBMAGIC_
+					     __attribute__((unused))
+#endif
+								     magic_t magic)
+{
+	int flags;
+	int ret, ret_real, ret_new;
+	struct stat file_buf, real_buf;
+	bool need_script_protection = false;
+	uid_t old_uid = 0;
+	gid_t old_gid = 0;
+	char *new_path;
+	int sav_errno;
+	char *real_file_path;
+	char *orig_file_part, *new_file_part;
+
+	if (!script)
+		return 0;
+
+	/* If the script starts "</" (possibly with white space between
+	 * the '<' and '/'), it is checking for a file being openable,
+	 * so it won't be executed */
+	if (script->args[0][0] == '<' &&
+	    script->args[0][strspn(script->args[0] + 1, " \t") + 1] == '/')
+		return SC_SYSTEM;
+
+	if (!strchr(script->args[0], '/')) {
+		/* It is a bare file name, so do a path search */
+		if ((ret = find_path(script))) {
+			if (ret == EACCES)
+				log_message(LOG_INFO, "Permissions failure for script %s in path - disabling", script->args[0]);
+			else
+				log_message(LOG_INFO, "Cannot find script %s in path - disabling", script->args[0]);
+			return SC_NOTFOUND;
+		}
+	}
+
+	/* Check script accessible by the user running it */
+	if (script->uid)
+		old_uid = geteuid();
+	if (script->gid)
+		old_gid = getegid();
+
+	if ((script->gid && setegid(script->gid)) ||
+	    (script->uid && seteuid(script->uid))) {
+		log_message(LOG_INFO, "Unable to set uid:gid %u:%u for script %s - disabling", script->uid, script->gid, script->args[0]);
+
+		if ((script->uid && seteuid(old_uid)) ||
+		    (script->gid && setegid(old_gid)))
+			log_message(LOG_INFO, "Unable to restore uid:gid %u:%u after script %s", script->uid, script->gid, script->args[0]);
+
+		return SC_INHIBIT;
+	}
+
+	/* Remove /./, /../, multiple /'s, and resolve symbolic links */
+	new_path = realpath(script->args[0], NULL);
+	sav_errno = errno;
+
+	if ((script->gid && setegid(old_gid)) ||
+	    (script->uid && seteuid(old_uid)))
+		log_message(LOG_INFO, "Unable to restore uid:gid %u:%u after checking script %s", script->uid, script->gid, script->args[0]);
+
+	if (!new_path)
+	{
+		log_message(LOG_INFO, "Script %s cannot be accessed - %s", script->args[0], strerror(sav_errno));
+
+		return SC_NOTFOUND;
+	}
+
+	real_file_path = NULL;
+
+	orig_file_part = strrchr(script->args[0], '/');
+	new_file_part = strrchr(new_path, '/');
+	if (strcmp(script->args[0], new_path)) {
+		/* The path name is different */
+
+		/* If the file name parts don't match, we need to be careful to
+		 * ensure that we preserve the file name part since some executables
+		 * alter their behaviour based on what they are called */
+		if (strcmp(orig_file_part + 1, new_file_part + 1)) {
+			real_file_path = new_path;
+			new_path = MALLOC(new_file_part - real_file_path + 1 + strlen(orig_file_part) - 1 + 1);
+			strncpy(new_path, real_file_path, new_file_part + 1 - real_file_path);
+			strcpy(new_path + (new_file_part + 1 - real_file_path), orig_file_part + 1);
+
+			/* Now check this is the same file */
+			ret_real = stat(real_file_path, &real_buf);
+			ret_new = stat(new_path, &file_buf);
+			if (!ret_real &&
+			    (ret_new ||
+			     real_buf.st_dev != file_buf.st_dev ||
+			     real_buf.st_ino != file_buf.st_ino)) {
+				/* It doesn't resolve to the same file */
+				FREE(new_path);
+				new_path = real_file_path;
+				real_file_path = NULL;
+			}
+		}
+
+		if (strcmp(script->args[0], new_path)) {
+	 		/* We need to set up all the args again */
+			replace_cmd_name(script, new_path);
+		}
+	}
+
+	if (!real_file_path)
+		free(new_path);
+	else
+		FREE(new_path);
+
+	/* Get the permissions for the file itself */
+	if (stat(real_file_path ? real_file_path : script->args[0], &file_buf)) {
+		log_message(LOG_INFO, "Unable to access script `%s` - disabling", script->args[0]);
+		return SC_NOTFOUND;
+	}
+
+	flags = SC_ISSCRIPT;
+
+	/* We have the final file. Check if root is executing it, or it is set uid/gid root. */
+	if (is_executable(&file_buf, script->uid, script->gid)) {
+		flags |= SC_EXECUTABLE;
+		if (script->uid == 0 || script->gid == 0 ||
+		    (file_buf.st_uid == 0 && (file_buf.st_mode & S_IXUSR) && (file_buf.st_mode & S_ISUID)) ||
+		    (file_buf.st_gid == 0 && (file_buf.st_mode & S_IXGRP) && (file_buf.st_mode & S_ISGID)))
+			need_script_protection = true;
+	} else
+		log_message(LOG_INFO, "WARNING - script '%s' is not executable for uid:gid %u:%u - disabling.", script->args[0], script->uid, script->gid);
+
+	/* Default to execable */
+	script->flags |= SC_EXECABLE;
+#ifdef _HAVE_LIBMAGIC_
+	if (magic && flags & SC_EXECUTABLE) {
+		const char *magic_desc = magic_file(magic, real_file_path ? real_file_path : script->args[0]);
+		if (!strstr(magic_desc, " executable") &&
+		    !strstr(magic_desc, " shared object")) {
+			log_message(LOG_INFO, "Please add a #! shebang to script %s", script->args[0]);
+			script->flags &= ~SC_EXECABLE;
+		}
+	}
+#endif
+
+	if (!need_script_protection) {
+		if (real_file_path)
+			free(real_file_path);
+
+		return flags;
+	}
+
+	/* Make sure that all parts of the path are not non-root writable */
+	flags |= check_security(script->args[0], script_security);
+
+	if (real_file_path) {
+		flags |= check_security(real_file_path, script_security);
+		free(real_file_path);
+	}
+
+	return flags;
+}
+
+int
+check_notify_script_secure(notify_script_t **script_p, magic_t magic)
+{
+	int flags;
+	notify_script_t *script = *script_p;
+
+	if (!script)
+		return 0;
+
+	flags = check_script_secure(script, magic);
+
+	/* Mark not to run if needs inhibiting */
+	if ((flags & (SC_INHIBIT | SC_NOTFOUND)) ||
+	    !(flags & SC_EXECUTABLE))
+		free_notify_script(script_p);
+
+	return flags;
+}
+
+static void
+set_pwnam_buf_len(void)
+{
+	long buf_len;
+
+	/* Get buffer length needed for getpwnam_r/getgrnam_r */
+	if ((buf_len = sysconf(_SC_GETPW_R_SIZE_MAX)) == -1)
+		getpwnam_buf_len = 1024;	/* A safe default if no value is returned */
+	else
+		getpwnam_buf_len = (size_t)buf_len;
+	if ((buf_len = sysconf(_SC_GETGR_R_SIZE_MAX)) != -1 &&
+	    (size_t)buf_len > getpwnam_buf_len)
+		getpwnam_buf_len = (size_t)buf_len;
+}
+
+static bool
+set_uid_gid(const char *username, const char *groupname, uid_t *uid_p, gid_t *gid_p, bool default_user)
+{
+	uid_t uid;
+	gid_t gid;
+	struct passwd pwd;
+	struct passwd *pwd_p;
+	struct group grp;
+	struct group *grp_p;
+	int ret;
+	bool using_default_default_user = false;
+	char *buf;
+
+	if (!getpwnam_buf_len)
+		set_pwnam_buf_len();
+
+	buf = MALLOC(getpwnam_buf_len);
+
+	if (default_user && !username) {
+		using_default_default_user = true;
+		username = "keepalived_script";
+	}
+
+	if ((ret = getpwnam_r(username, &pwd, buf, getpwnam_buf_len, &pwd_p))) {
+		log_message(LOG_INFO, "Unable to resolve %sscript username '%s' - ignoring", default_user ? "default " : "", username);
+		FREE(buf);
+		return true;
+	}
+	if (!pwd_p) {
+		if (using_default_default_user)
+			log_message(LOG_INFO, "WARNING - default user '%s' for script execution does not exist - please create.", username);
+		else
+			log_message(LOG_INFO, "%script user '%s' does not exist", default_user ? "Default s" : "S", username);
+		FREE(buf);
+		return true;
+	}
+
+	uid = pwd.pw_uid;
+	gid = pwd.pw_gid;
+
+	if (groupname) {
+		if ((ret = getgrnam_r(groupname, &grp, buf, getpwnam_buf_len, &grp_p))) {
+			log_message(LOG_INFO, "Unable to resolve %sscript group name '%s' - ignoring", default_user ? "default " : "", groupname);
+			FREE(buf);
+			return true;
+		}
+		if (!grp_p) {
+			log_message(LOG_INFO, "%script group '%s' does not exist", default_user ? "Default s" : "S", groupname);
+			FREE(buf);
+			return true;
+		}
+		gid = grp.gr_gid;
+	}
+
+	*uid_p = uid;
+	*gid_p = gid;
+
+	FREE(buf);
+
+	return false;
+}
+
+/* The default script user/group is keepalived_script if it exists, or root otherwise */
+bool
+set_default_script_user(const char *username, const char *groupname)
+{
+	if (!default_script_uid_set || username) {
+		/* Even if we fail to set it, there is no point in trying again */
+		default_script_uid_set = true;
+
+		if (set_uid_gid(username, groupname, &default_script_uid, &default_script_gid, true)) {
+			if (username || script_security)
+				default_user_fail = true;
+		}
+		else
+			default_user_fail = false;
+	}
+
+	return default_user_fail;
+}
+
+bool
+set_script_uid_gid(const vector_t *strvec, unsigned keyword_offset, uid_t *uid_p, gid_t *gid_p)
+{
+	const char *username;
+	const char *groupname;
+
+	username = strvec_slot(strvec, keyword_offset);
+	if (vector_size(strvec) > keyword_offset + 1)
+		groupname = strvec_slot(strvec, keyword_offset + 1);
+	else
+		groupname = NULL;
+
+	return set_uid_gid(username, groupname, uid_p, gid_p, false);
+}
+
+void
+set_script_params_array(const vector_t *strvec, notify_script_t *script, unsigned extra_params)
+{
+	unsigned num_words = 0;
+	size_t len = 0;
+	char **word_ptrs;
+	char *words;
+	const vector_t *strvec_qe = NULL;
+	unsigned i;
+	union {		/* See replace_cmd_line for details of why this is necessary */
+		char **params;
+		const char **cparams;
+	} args;
+
+	/* Count the number of words, and total string length */
+	if (vector_size(strvec) >= 2)
+		strvec_qe = alloc_strvec_quoted_escaped(strvec_slot(strvec, 1));
+
+	if (!strvec_qe)
+		return;
+
+	num_words = vector_size(strvec_qe);
+	for (i = 0; i < num_words; i++)
+		len += strlen(strvec_slot(strvec_qe, i)) + 1;
+
+	/* Allocate memory for pointers to words and words themselves */
+	word_ptrs = MALLOC((num_words + extra_params + 1) * sizeof(char *) + len);
+	words = (char *)word_ptrs + (num_words + extra_params + 1) * sizeof(char *);
+	args.params = word_ptrs;
+	script->args = args.cparams;
+
+	/* Set up pointers to words, and copy the words */
+	for (i = 0; i < num_words; i++) {
+		strcpy(words, strvec_slot(strvec_qe, i));
+		*(word_ptrs++) = words;
+		words += strlen(words) + 1;
+	}
+	*word_ptrs = NULL;
+
+	script->num_args = num_words;
+
+	free_strvec(strvec_qe);
+}
+
+notify_script_t*
+notify_script_init(int extra_params, const char *type)
+{
+	notify_script_t *script = MALLOC(sizeof(notify_script_t));
+	const vector_t *strvec_qe;
+
+	/* We need to reparse the command line, allowing for quoted and escaped strings */
+	strvec_qe = alloc_strvec_quoted_escaped(NULL);
+
+	if (!strvec_qe) {
+		log_message(LOG_INFO, "Unable to parse notify script");
+		FREE(script);
+		return NULL;
+	}
+
+	set_script_params_array(strvec_qe, script, extra_params);
+	if (!script->args) {
+		log_message(LOG_INFO, "Unable to parse script '%s' - ignoring", strvec_slot(strvec_qe, 1));
+		FREE(script);
+		free_strvec(strvec_qe);
+		return NULL;
+	}
+
+	script->flags = 0;
+
+	if (vector_size(strvec_qe) > 2) {
+		if (set_script_uid_gid(strvec_qe, 2, &script->uid, &script->gid)) {
+			log_message(LOG_INFO, "Invalid user/group for %s script %s - ignoring", type, script->args[0]);
+			FREE_CONST(script->args);
+			FREE(script);
+			free_strvec(strvec_qe);
+			return NULL;
+		}
+	}
+	else {
+		if (set_default_script_user(NULL, NULL)) {
+			log_message(LOG_INFO, "Failed to set default user for %s script %s - ignoring", type, script->args[0]);
+			FREE_CONST(script->args);
+			FREE(script);
+			free_strvec(strvec_qe);
+			return NULL;
+		}
+
+		script->uid = default_script_uid;
+		script->gid = default_script_gid;
+	}
+
+	free_strvec(strvec_qe);
+
+	return script;
+}
+
+void
+add_script_param(notify_script_t *script, const char *param)
+{
+	/* We store the args as an array of pointers to the args, terminated
+	 * by a NULL pointer, followed by the null terminated strings themselves
+	 */
+
+	if (script->args[script->num_args + 1]) {
+		log_message(LOG_INFO, "notify_fifo_script %s no room to add parameter %s", script->args[0], param);
+		return;
+	}
+
+	/* Add the extra parameter in the pre-reserved slot at the end */
+	script->args[script->num_args++] = param;
+}
+
+void
+notify_resource_release(void)
+{
+	if (path_is_malloced) {
+		FREE(path);
+		path_is_malloced = false;
+		path = NULL;
+	}
+}
+
+bool __attribute__ ((pure))
+notify_script_compare(const notify_script_t *a, const notify_script_t *b)
+{
+	int i;
+
+	if (a->num_args != b->num_args)
+		return false;
+	for (i = 0; i < a->num_args; i++) {
+		if (strcmp(a->args[i], b->args[i]))
+			return false;
+	}
+
+	return true;
+}
+
+#ifdef THREAD_DUMP
+void
+register_notify_addresses(void)
+{
+	register_thread_address("child_killed_thread", child_killed_thread);
+}
+#endif
diff --git a/tools/keepalived/lib/notify.h b/tools/keepalived/lib/notify.h
index a17cb751a..6dfd97525 100644
--- a/tools/keepalived/lib/notify.h
+++ b/tools/keepalived/lib/notify.h
@@ -17,15 +17,100 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _NOTIFY_H
 #define _NOTIFY_H
 
 /* system includes */
-extern int system_call(char *cmdline);
-extern void closeall(int fd);
-extern int notify_exec(char *cmd);
+#include <sys/types.h>
+#include <stdbool.h>
+
+/* application includes */
+#include "scheduler.h"
+#include "memory.h"
+#include "vector.h"
+#include "keepalived_magic.h"
+
+/* Flags returned by check_script_secure() */
+#define SC_INSECURE     0x01    /* Script is insecure */
+#define SC_ISSCRIPT     0x02    /* It is a script */
+#define SC_INHIBIT      0x04    /* Script needs inhibiting */
+#define SC_NOTFOUND	0x08	/* Cannot find element of path */
+#define SC_EXECUTABLE	0x10	/* The script is marked executable */
+#define SC_EXECABLE	0x20	/* The script can be invoked via execve() */
+#define SC_SYSTEM	0x40	/* The script can safely be executed via system() */
+
+typedef enum {
+	SCRIPT_STATE_IDLE,
+	SCRIPT_STATE_RUNNING,
+	SCRIPT_STATE_REQUESTING_TERMINATION,
+	SCRIPT_STATE_FORCING_TERMINATION
+} script_state_t;
+
+typedef enum {
+	SCRIPT_INIT_STATE_DONE,
+	SCRIPT_INIT_STATE_INIT,
+	SCRIPT_INIT_STATE_FAILED,
+} script_init_state_t;
+
+/* notify_script details */
+typedef struct _notify_script {
+	const char **args;	/* Script args - should be "char const * const *" */
+	int	num_args;	/* Used for notify script when adding last 4 parameters */
+	int	flags;
+	uid_t	uid;		/* uid of user to execute script */
+	gid_t	gid;		/* gid of group to execute script */
+} notify_script_t;
+
+/* notify_fifo details */
+typedef struct _notify_fifo {
+	const char *name;
+	int	fd;
+	uid_t	uid;		/* uid of user of fifo if create */
+	gid_t	gid;		/* gid of group of fifo */
+	bool	created_fifo;	/* We created the FIFO */
+	notify_script_t *script; /* Script to run to process FIFO */
+} notify_fifo_t;
+
+static inline void
+free_notify_script(notify_script_t **script)
+{
+	if (!*script)
+		return;
+	FREE_PTR((*script)->args);
+	FREE_PTR(*script);
+	*script = NULL;
+}
+
+/* Default user/group for script execution */
+extern uid_t default_script_uid;
+extern gid_t default_script_gid;
+
+/* Script security enabled */
+extern bool script_security;
+
+/* prototypes */
+extern const char *cmd_str_r(const notify_script_t *, char *, size_t);
+extern const char *cmd_str(const notify_script_t *);
+extern void notify_fifo_open(notify_fifo_t*, notify_fifo_t*, int (*)(thread_ref_t), const char *);
+extern void notify_fifo_close(notify_fifo_t*, notify_fifo_t*);
+extern int system_call_script(thread_master_t *, int (*)(thread_ref_t), void *, unsigned long, notify_script_t *);
+extern int notify_exec(const notify_script_t *);
+extern int child_killed_thread(thread_ref_t);
+extern void script_killall(thread_master_t *, int, bool);
+extern int check_script_secure(notify_script_t *, magic_t);
+extern int check_notify_script_secure(notify_script_t **, magic_t);
+extern bool set_default_script_user(const char *, const char *);
+extern bool set_script_uid_gid(const vector_t *, unsigned, uid_t *, gid_t *);
+extern void set_script_params_array(const vector_t *, notify_script_t *, unsigned);
+extern notify_script_t* notify_script_init(int, const char *);
+extern void add_script_param(notify_script_t *, const char *);
+extern void notify_resource_release(void);
+extern bool notify_script_compare(const notify_script_t *, const notify_script_t *) __attribute__ ((pure));
+#ifdef THREAD_DUMP
+extern void register_notify_addresses(void);
+#endif
 
 #endif
diff --git a/tools/keepalived/lib/old_socket.c b/tools/keepalived/lib/old_socket.c
new file mode 100644
index 000000000..9b8e512e5
--- /dev/null
+++ b/tools/keepalived/lib/old_socket.c
@@ -0,0 +1,53 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        old_socket.c
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2016 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include <sys/socket.h>
+#include <unistd.h>
+#include <fcntl.h>
+#include <string.h>
+#include <errno.h>
+
+#include "old_socket.h"
+#include "logger.h"
+
+bool set_sock_flags(int fd, int cmd, long flags)
+{
+	/* This is slightly odd. The man page for fcntl says that the
+	   parameter passed to F_SETFD/F_SETFL is a long, but fnctl
+	   only returns an int to F_GETFD/F_GETFL */
+	long sock_flags;
+	int get_cmd = (cmd == F_SETFD) ? F_GETFD : F_GETFL;
+
+	if ((sock_flags = fcntl(fd, get_cmd)) == -1) {
+		log_message(LOG_INFO, "Netlink: Cannot get socket flags : (%s)", strerror(errno));
+		return true;
+	}
+
+	if (fcntl(fd, cmd, sock_flags | flags) < 0) {
+		log_message(LOG_INFO, "Netlink: Cannot set socket flags: (%s)", strerror(errno));
+		return true;
+	}
+
+	return false;
+}
diff --git a/tools/keepalived/lib/old_socket.h b/tools/keepalived/lib/old_socket.h
new file mode 100644
index 000000000..a2c0ed823
--- /dev/null
+++ b/tools/keepalived/lib/old_socket.h
@@ -0,0 +1,46 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        old_socket.h include file.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2016 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _OLD_SOCKET_H
+#define _OLD_SOCKET_H 1
+
+#include "config.h"
+
+#if !HAVE_DECL_SOCK_NONBLOCK || !HAVE_DECL_SOCK_CLOEXEC
+#include <stdbool.h>
+
+/* Kernels < 2.6.27 and glibc < 2.9 don't support the SOCK_CLOEXEC or SOCK_NONBLOCK options */
+
+/* We need to know if SOCK_NONBLOCK is desired */
+#if !HAVE_DECL_SOCK_NONBLOCK
+#define SOCK_NONBLOCK	04000
+#endif
+
+/* SOCK_CLOEXEC is always wanted, so we don't want to set if it is not defined */
+#if !HAVE_DECL_SOCK_CLOEXEC
+#define SOCK_CLOEXEC	0
+#endif
+
+extern bool set_sock_flags(int fd, int cmd, long flags);
+#endif
+
+#endif
diff --git a/tools/keepalived/lib/parser.c b/tools/keepalived/lib/parser.c
index 2c4ab9b7a..fe754f4eb 100644
--- a/tools/keepalived/lib/parser.c
+++ b/tools/keepalived/lib/parser.c
@@ -1,14 +1,14 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        Configuration file parser/reader. Place into the dynamic
  *              data structure representation the conf file representing
  *              the loadbalanced server pool.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
@@ -19,29 +19,366 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
 #include <glob.h>
 #include <unistd.h>
 #include <libgen.h>
 #include <errno.h>
+#include <sys/stat.h>
+#include <sys/types.h>
+#include <fcntl.h>
+#include <stdlib.h>
+#include <ctype.h>
+#include <stdbool.h>
+#include <linux/version.h>
+#include <pwd.h>
+#include <string.h>
+#include <stdio.h>
+#include <stdarg.h>
+#include <math.h>
+#include <inttypes.h>
+
 #include "parser.h"
 #include "memory.h"
 #include "logger.h"
+#include "rttables.h"
+#include "scheduler.h"
+#include "notify.h"
+#include "list.h"
+#include "bitops.h"
+#include "utils.h"
+
+
+#define DEF_LINE_END	"\n"
+
+#define BOB "{"
+#define EOB "}"
+#define WHITE_SPACE_STR " \t\f\n\r\v"
+
+typedef struct _defs {
+	const char *name;
+	size_t name_len;
+	const char *value;
+	size_t value_len;
+	bool multiline;
+	const char *(*fn)(const struct _defs *);
+	unsigned max_params;
+	const char *params;
+	const char *params_end;
+} def_t;
+
+typedef struct _multiline_stack_ent {
+	const char *ptr;
+	size_t seq_depth;
+} multiline_stack_ent;
 
 /* global vars */
 vector_t *keywords;
-vector_t *current_keywords;
-FILE *current_stream;
-char *current_conf_file;
-int reload = 0;
+const char *config_id;
+const char *WHITE_SPACE = WHITE_SPACE_STR;
+#ifdef _PARSER_DEBUG_
+bool do_parser_debug;
+#endif
+#ifdef _DUMP_KEYWORDS_
+bool do_dump_keywords;
+#endif
 
 /* local vars */
+static vector_t *current_keywords;
+static FILE *current_stream;
+static const char *current_file_name;
+static size_t current_file_line_no;
 static int sublevel = 0;
+static int skip_sublevel = 0;
+static list multiline_stack;
+size_t multiline_seq_depth = 0;
+static char *buf_extern;
+static config_err_t config_err = CONFIG_OK; /* Highest level of config error for --config-test */
+static unsigned int random_seed;
+bool random_seed_configured;
+
+/* Parameter definitions */
+static list defs;
+
+/* Forward declarations for recursion */
+static bool read_line(char *, size_t);
+
+void
+report_config_error(config_err_t err, const char *format, ...)
+{
+	va_list args;
+	char *format_buf = NULL;
+
+	/* current_file_name will be set if there is more than one config file, in which
+	 * case we need to specify the file name. */
+	if (current_file_name) {
+		/* "(file_name:line_no) format" + '\0' */
+		format_buf = MALLOC(1 + strlen(current_file_name) + 1 + 10 + 1 + 1 + strlen(format) + 1);
+		sprintf(format_buf, "(%s:%zu) %s", current_file_name, current_file_line_no, format);
+	} else if (current_file_line_no) {	/* Set while reading from config files */
+		/* "(Line line_no) format" + '\0' */
+		format_buf = MALLOC(1 + 5 + 10 + 1 + 1 + strlen(format) + 1);
+		sprintf(format_buf, "(%s %zu) %s", "Line", current_file_line_no, format);
+	}
+
+	va_start(args, format);
+
+	if (__test_bit(CONFIG_TEST_BIT, &debug)) {
+		vfprintf(stderr, format_buf ? format_buf : format, args);
+		fputc('\n', stderr);
+
+		if (config_err == CONFIG_OK || config_err < err)
+			config_err = err;
+	}
+	else
+		vlog_message(LOG_INFO, format_buf ? format_buf : format, args);
+
+	va_end(args);
+
+	if (format_buf)
+		FREE(format_buf);
+}
+
+config_err_t __attribute__ ((pure))
+get_config_status(void)
+{
+	return config_err;
+}
+
+static const char * __attribute__ ((noreturn))
+null_strvec(const vector_t *strvec, size_t index)
+{
+	if (index - 1 < vector_size(strvec) && index > 0 && vector_slot(strvec, index - 1))
+		report_config_error(CONFIG_MISSING_PARAMETER, "*** Configuration line starting `%s` is missing a parameter after keyword `%s` at word position %zu", vector_slot(strvec, 0) ? (char *)vector_slot(strvec, 0) : "***MISSING ***", (char *)vector_slot(strvec, index - 1), index + 1);
+	else
+		report_config_error(CONFIG_MISSING_PARAMETER, "*** Configuration line starting `%s` is missing a parameter at word position %zu", vector_slot(strvec, 0) ? (char *)vector_slot(strvec, 0) : "***MISSING ***", index + 1);
+
+	exit(KEEPALIVED_EXIT_CONFIG);
+}
+
+static bool
+read_int_func(const char *number, int base, int *res, int min_val, int max_val, __attribute__((unused)) bool ignore_error)
+{
+	long val;
+	char *endptr;
+	const char *warn = "";
+
+#ifndef _STRICT_CONFIG_
+	if (ignore_error && !__test_bit(CONFIG_TEST_BIT, &debug))
+		warn = "WARNING - ";
+#endif
+
+	errno = 0;
+	val = strtol(number, &endptr, base);
+	*res = (int)val;
+
+	if (*endptr)
+		report_config_error(CONFIG_INVALID_NUMBER, "%sinvalid number '%s'", warn, number);
+	else if (errno == ERANGE || val < INT_MIN || val > INT_MAX)
+		report_config_error(CONFIG_INVALID_NUMBER, "%snumber '%s' outside integer range", warn, number);
+	else if (val < min_val || val > max_val)
+		report_config_error(CONFIG_INVALID_NUMBER, "number '%s' outside range [%d, %d]", number, min_val, max_val);
+	else
+		return true;
+
+#ifdef _STRICT_CONFIG_
+	return false;
+#else
+	return ignore_error && val >= min_val && val <= max_val && !__test_bit(CONFIG_TEST_BIT, &debug);
+#endif
+}
+
+static bool
+read_unsigned_func(const char *number, int base, unsigned *res, unsigned min_val, unsigned max_val, __attribute__((unused)) bool ignore_error)
+{
+	unsigned long val;
+	char *endptr;
+	const char *warn = "";
+	size_t offset;
+
+#ifndef _STRICT_CONFIG_
+	if (ignore_error && !__test_bit(CONFIG_TEST_BIT, &debug))
+		warn = "WARNING - ";
+#endif
+
+	/* In case the string starts with spaces (even in the configuration this
+	 * can be achieved by enclosing the number in quotes - e.g. weight "  -100")
+	 * skip any leading whitespace */
+	offset = strspn(number, WHITE_SPACE);
+
+	errno = 0;
+	val = strtoul(number + offset, &endptr, base);
+	*res = (unsigned)val;
+
+	if (number[offset] == '-')
+		report_config_error(CONFIG_INVALID_NUMBER, "%snegative number '%s'", warn, number);
+	else if (*endptr)
+		report_config_error(CONFIG_INVALID_NUMBER, "%sinvalid number '%s'", warn, number);
+	else if (errno == ERANGE || val > UINT_MAX)
+		report_config_error(CONFIG_INVALID_NUMBER, "%snumber '%s' outside unsigned integer range", warn, number);
+	else if (val < min_val || val > max_val)
+		report_config_error(CONFIG_INVALID_NUMBER, "number '%s' outside range [%u, %u]", number, min_val, max_val);
+	else
+		return true;
+
+#ifdef _STRICT_CONFIG_
+	return false;
+#else
+	return ignore_error && val >= min_val && val <= max_val && !__test_bit(CONFIG_TEST_BIT, &debug);
+#endif
+}
+
+static bool
+read_unsigned64_func(const char *number, int base, uint64_t *res, uint64_t min_val, uint64_t max_val, __attribute__((unused)) bool ignore_error)
+{
+	unsigned long long val;
+	char *endptr;
+	const char *warn = "";
+	size_t offset;
+
+#ifndef _STRICT_CONFIG_
+	if (ignore_error && !__test_bit(CONFIG_TEST_BIT, &debug))
+		warn = "WARNING - ";
+#endif
+
+	/* In case the string starts with spaces (even in the configuration this
+	 * can be achieved by enclosing the number in quotes - e.g. weight "  -100")
+	 * skip any leading whitespace */
+	offset = strspn(number, WHITE_SPACE);
+
+	errno = 0;
+	val = strtoull(number + offset, &endptr, base);
+	*res = (unsigned)val;
+
+	if (number[offset] == '-')
+		report_config_error(CONFIG_INVALID_NUMBER, "%snegative number '%s'", warn, number);
+	else if (*endptr)
+		report_config_error(CONFIG_INVALID_NUMBER, "%sinvalid number '%s'", warn, number);
+	else if (errno == ERANGE)
+		report_config_error(CONFIG_INVALID_NUMBER, "%snumber '%s' outside unsigned 64 bit range", warn, number);
+	else if (val < min_val || val > max_val)
+		report_config_error(CONFIG_INVALID_NUMBER, "number '%s' outside range [%" PRIu64 ", %" PRIu64 "]", number, min_val, max_val);
+	else
+		return true;
+
+#ifdef _STRICT_CONFIG_
+	return false;
+#else
+	return ignore_error && val >= min_val && val <= max_val && !__test_bit(CONFIG_TEST_BIT, &debug);
+#endif
+}
+
+static bool
+read_double_func(const char *number, double *res, double min_val, double max_val, __attribute__((unused)) bool ignore_error)
+{
+	double val;
+	char *endptr;
+	const char *warn = "";
+	int ftype;
+
+#ifndef _STRICT_CONFIG_
+	if (ignore_error && !__test_bit(CONFIG_TEST_BIT, &debug))
+		warn = "WARNING - ";
+#endif
+
+	errno = 0;
+	val = strtod(number, &endptr);
+	*res = val;
+
+	if (*endptr)
+		report_config_error(CONFIG_INVALID_NUMBER, "%sinvalid number '%s'", warn, number);
+	else if (errno == ERANGE)
+		report_config_error(CONFIG_INVALID_NUMBER, "%snumber '%s' out of range", warn, number);
+	else {
+		ftype = fpclassify(val);
+		if (ftype == FP_INFINITE)	/* +/- Inf */
+			report_config_error(CONFIG_INVALID_NUMBER, "infinite number '%s'", number);
+		else if (ftype == FP_NAN)	/* NaN */
+			report_config_error(CONFIG_INVALID_NUMBER, "not a number '%s'", number);
+		else if (ftype == FP_SUBNORMAL)	{ /* to small */
+			*res = 0.0F;
+			return true;
+		}
+		else if (val < min_val || val > max_val)
+			report_config_error(CONFIG_INVALID_NUMBER, "number '%s' outside range [%g, %g]", number, min_val, max_val);
+		else /* FP_NORMAL or FP_ZERO */
+			return true;
+	}
+
+#ifdef _STRICT_CONFIG_
+	return false;
+#else
+	return ignore_error && val >= min_val && val <= max_val && !__test_bit(CONFIG_TEST_BIT, &debug);
+#endif
+}
+
+bool
+read_int(const char *str, int *res, int min_val, int max_val, bool ignore_error)
+{
+	return read_int_func(str, 10, res, min_val, max_val, ignore_error);
+}
+
+bool
+read_unsigned(const char *str, unsigned *res, unsigned min_val, unsigned max_val, bool ignore_error)
+{
+	return read_unsigned_func(str, 10, res, min_val, max_val, ignore_error);
+}
+
+bool
+read_unsigned64(const char *str, uint64_t *res, uint64_t min_val, uint64_t max_val, bool ignore_error)
+{
+	return read_unsigned64_func(str, 10, res, min_val, max_val, ignore_error);
+}
+
+bool
+read_double(const char *str, double *res, double min_val, double max_val, bool ignore_error)
+{
+	return read_double_func(str, res, min_val, max_val, ignore_error);
+}
+
+bool
+read_int_strvec(const vector_t *strvec, size_t index, int *res, int min_val, int max_val, bool ignore_error)
+{
+	return read_int_func(strvec_slot(strvec, index), 10, res, min_val, max_val, ignore_error);
+}
+
+bool
+read_unsigned_strvec(const vector_t *strvec, size_t index, unsigned *res, unsigned min_val, unsigned max_val, bool ignore_error)
+{
+	return read_unsigned_func(strvec_slot(strvec, index), 10, res, min_val, max_val, ignore_error);
+}
+
+bool
+read_unsigned64_strvec(const vector_t *strvec, size_t index, uint64_t *res, uint64_t min_val, uint64_t max_val, bool ignore_error)
+{
+	return read_unsigned64_func(strvec_slot(strvec, index), 10, res, min_val, max_val, ignore_error);
+}
+
+bool
+read_double_strvec(const vector_t *strvec, size_t index, double *res, double min_val, double max_val, bool ignore_error)
+{
+	return read_double_func(strvec_slot(strvec, index), res, min_val, max_val, ignore_error);
+}
+
+bool
+read_unsigned_base_strvec(const vector_t *strvec, size_t index, int base, unsigned *res, unsigned min_val, unsigned max_val, bool ignore_error)
+{
+	return read_unsigned_func(strvec_slot(strvec, index), base, res, min_val, max_val, ignore_error);
+}
 
 void
-keyword_alloc(vector_t *keywords_vec, char *string, void (*handler) (vector_t *))
+set_random_seed(unsigned int seed)
+{
+	random_seed = seed;
+	random_seed_configured = true;
+}
+
+static void
+keyword_alloc(vector_t *keywords_vec, const char *string, void (*handler) (const vector_t *), bool active)
 {
 	keyword_t *keyword;
 
@@ -50,12 +387,13 @@ keyword_alloc(vector_t *keywords_vec, char *string, void (*handler) (vector_t *)
 	keyword = (keyword_t *) MALLOC(sizeof(keyword_t));
 	keyword->string = string;
 	keyword->handler = handler;
+	keyword->active = active;
 
 	vector_set_slot(keywords_vec, keyword);
 }
 
-void
-keyword_alloc_sub(vector_t *keywords_vec, char *string, void (*handler) (vector_t *))
+static void
+keyword_alloc_sub(vector_t *keywords_vec, const char *string, void (*handler) (const vector_t *))
 {
 	int i = 0;
 	keyword_t *keyword;
@@ -63,17 +401,20 @@ keyword_alloc_sub(vector_t *keywords_vec, char *string, void (*handler) (vector_
 	/* fetch last keyword */
 	keyword = vector_slot(keywords_vec, vector_size(keywords_vec) - 1);
 
+	/* Don't install subordinate keywords if configuration block inactive */
+	if (!keyword->active)
+		return;
+
 	/* position to last sub level */
 	for (i = 0; i < sublevel; i++)
-		keyword =
-		    vector_slot(keyword->sub, vector_size(keyword->sub) - 1);
+		keyword = vector_slot(keyword->sub, vector_size(keyword->sub) - 1);
 
 	/* First sub level allocation */
 	if (!keyword->sub)
 		keyword->sub = vector_alloc();
 
 	/* add new sub keyword */
-	keyword_alloc(keyword->sub, string, handler);
+	keyword_alloc(keyword->sub, string, handler, true);
 }
 
 /* Exported helpers */
@@ -90,38 +431,83 @@ install_sublevel_end(void)
 }
 
 void
-install_keyword_root(char *string, void (*handler) (vector_t *))
+install_keyword_root(const char *string, void (*handler) (const vector_t *), bool active)
+{
+	/* If the root keyword is inactive, the handler will still be called,
+	 * but with a NULL strvec */
+	keyword_alloc(keywords, string, handler, active);
+}
+
+void
+install_root_end_handler(void (*handler) (void))
 {
-	keyword_alloc(keywords, string, handler);
+	keyword_t *keyword;
+
+	/* fetch last keyword */
+	keyword = vector_slot(keywords, vector_size(keywords) - 1);
+
+	if (!keyword->active)
+		return;
+
+	keyword->sub_close_handler = handler;
 }
 
 void
-install_keyword(char *string, void (*handler) (vector_t *))
+install_keyword(const char *string, void (*handler) (const vector_t *))
 {
 	keyword_alloc_sub(keywords, string, handler);
 }
 
 void
-dump_keywords(vector_t *keydump, int level)
+install_sublevel_end_handler(void (*handler) (void))
 {
-	int i, j;
+	int i = 0;
+	keyword_t *keyword;
+
+	/* fetch last keyword */
+	keyword = vector_slot(keywords, vector_size(keywords) - 1);
+
+	if (!keyword->active)
+		return;
+
+	/* position to last sub level */
+	for (i = 0; i < sublevel; i++)
+		keyword = vector_slot(keyword->sub, vector_size(keyword->sub) - 1);
+	keyword->sub_close_handler = handler;
+}
+
+#ifdef _DUMP_KEYWORDS_
+static void
+dump_keywords(vector_t *keydump, int level, FILE *fp)
+{
+	unsigned int i;
 	keyword_t *keyword_vec;
+	char file_name[22];
+
+	if (!level) {
+		snprintf(file_name, sizeof(file_name), "/tmp/keywords.%d", getpid());
+		fp = fopen_safe(file_name, "w");
+		if (!fp)
+			return;
+	}
 
 	for (i = 0; i < vector_size(keydump); i++) {
 		keyword_vec = vector_slot(keydump, i);
-		for (j = 0; j < level; j++)
-			printf("  ");
-		printf("Keyword : %s\n", keyword_vec->string);
+		fprintf(fp, "%*sKeyword : %s (%s)\n", level * 2, "", keyword_vec->string, keyword_vec->active ? "active": "disabled");
 		if (keyword_vec->sub)
-			dump_keywords(keyword_vec->sub, level + 1);
+			dump_keywords(keyword_vec->sub, level + 1, fp);
 	}
+
+	if (!level)
+		fclose(fp);
 }
+#endif
 
-void
+static void
 free_keywords(vector_t *keywords_vec)
 {
 	keyword_t *keyword_vec;
-	int i;
+	unsigned int i;
 
 	for (i = 0; i < vector_size(keywords_vec); i++) {
 		keyword_vec = vector_slot(keywords_vec, i);
@@ -132,344 +518,1583 @@ free_keywords(vector_t *keywords_vec)
 	vector_free(keywords_vec);
 }
 
-vector_t *
-alloc_strvec(char *string)
+/* Functions used for standard definitions */
+static const char *
+get_cwd(__attribute__((unused))const def_t *def)
 {
-	char *cp, *start, *token;
-	int str_len;
-	vector_t *strvec;
+	char *dir = MALLOC(PATH_MAX);
 
-	if (!string)
-		return NULL;
+	/* Since keepalived doesn't do a chroot(), we don't need to be concerned
+	 * about (unreachable) - see getcwd(3) man page. */
+	return getcwd(dir, PATH_MAX);
+}
 
-	cp = string;
+static const char *
+get_instance(__attribute__((unused))const def_t *def)
+{
+	return STRDUP(config_id);
+}
+
+static const char *
+get_random(const def_t *def)
+{
+	unsigned long min = 0;
+	unsigned long max = 32767;
+	long val;
+	char *endp;
+	char *rand_str;
+	size_t rand_str_len = 0;
+
+	/* We have already checked that the parameter string comprises
+	 * only spaces and decimal digits */
+	if (def->params) {
+		min = strtoul(def->params, &endp, 10);
+		if (endp < def->params_end) {
+			max = strtoul(endp, &endp, 10);
+			if (endp != def->params_end + 1)
+				log_message(LOG_INFO, "Too many parameters or extra text for ${_RANDOM %.*s}", (int)(def->params_end - def->params + 1), def->params);
+		}
+	}
 
-	/* Skip white spaces */
-	while (isspace((int) *cp) && *cp != '\0')
-		cp++;
+	val = max;
+	do {
+		rand_str_len++;
+	} while (val /= 10);
+	rand_str = MALLOC(rand_str_len + 1);
 
-	/* Return if there is only white spaces */
-	if (*cp == '\0')
-		return NULL;
+	/* coverity[dont_call] */
+	val = random() % (max - min + 1) + min;
+	snprintf(rand_str, rand_str_len + 1, "%ld", val);
 
-	/* Return if string begin with a comment */
-	if (*cp == '!' || *cp == '#')
-		return NULL;
+	return rand_str;
+}
+
+const vector_t *
+alloc_strvec_quoted_escaped(const char *src)
+{
+	vector_t *strvec;
+	char cur_quote = 0;
+	char *ofs_op;
+	char *op_buf;
+	const char *ofs, *ofs1;
+	char op_char;
+
+	if (!src) {
+		if (!buf_extern)
+			return NULL;
+		src = buf_extern;
+	}
 
 	/* Create a vector and alloc each command piece */
 	strvec = vector_alloc();
+	op_buf = MALLOC(MAXBUF);
 
-	while (1) {
-		start = cp;
-		if (*cp == '"') {
-			cp++;
-			token = MALLOC(2);
-			*(token) = '"';
-			*(token + 1) = '\0';
-		} else {
-			while (!isspace((int) *cp) && *cp != '\0' && *cp != '"')
-				cp++;
-			str_len = cp - start;
-			token = MALLOC(str_len + 1);
-			memcpy(token, start, str_len);
-			*(token + str_len) = '\0';
-		}
+	ofs = src;
+	while (*ofs) {
+		/* Find the next 'word' */
+		ofs += strspn(ofs, WHITE_SPACE);
+		if (!*ofs)
+			break;
 
-		/* Alloc & set the slot */
-		vector_alloc_slot(strvec);
-		vector_set_slot(strvec, token);
+		ofs_op = op_buf;
 
-		while (isspace((int) *cp) && *cp != '\0')
-			cp++;
-		if (*cp == '\0' || *cp == '!' || *cp == '#')
-			return strvec;
-	}
-}
+		while (*ofs) {
+			ofs1 = strpbrk(ofs, cur_quote == '"' ? "\"\\" : cur_quote == '\'' ? "'\\" : WHITE_SPACE_STR "'\"\\");
 
-void read_conf_file(char *conf_file)
-{
-	FILE *stream;
-	char *path;
-	int ret;
+			if (!ofs1) {
+				size_t len;
+				if (cur_quote) {
+					report_config_error(CONFIG_UNMATCHED_QUOTE, "String '%s': missing terminating %c", src, cur_quote);
+					goto err_exit;
+				}
+				strcpy(ofs_op, ofs);
+				len =  strlen(ofs);
+				ofs += len;
+				ofs_op += len;
+				break;
+			}
 
-	glob_t globbuf;
+			/* Save the wanted text */
+			strncpy(ofs_op, ofs, ofs1 - ofs);
+			ofs_op += ofs1 - ofs;
+			ofs = ofs1;
 
-	globbuf.gl_offs = 0;
-	glob(conf_file, 0, NULL, &globbuf);
+			if (*ofs == '\\') {
+				/* It is a '\' */
+				ofs++;
 
-	int i;
-	for(i = 0; i < globbuf.gl_pathc; i++){
-		log_message(LOG_INFO, "Opening file '%s'.", globbuf.gl_pathv[i]);
-		stream = fopen(globbuf.gl_pathv[i], "r");
-		if (!stream) {
-			log_message(LOG_INFO, "Configuration file '%s' open problem (%s)..."
-				       , globbuf.gl_pathv[i], strerror(errno));
-			return;
-		}
-		current_stream = stream;
-		current_conf_file = globbuf.gl_pathv[i];
-		
-		char prev_path[MAXBUF];
-		path = getcwd(prev_path, MAXBUF);
-		if (!path) {
-			log_message(LOG_INFO, "getcwd(%s) error (%s)"
-					    , prev_path, strerror(errno));
-		}
-
-		char *confpath = strdup(globbuf.gl_pathv[i]);
-		dirname(confpath);
-		ret = chdir(confpath);
-		if (ret < 0) {
-			log_message(LOG_INFO, "chdir(%s) error (%s)"
-					    , confpath, strerror(errno));
-		}
-		free(confpath);
-		process_stream(current_keywords);
-		fclose(stream);
+				if (!*ofs) {
+					log_message(LOG_INFO, "Missing escape char at end: '%s'", src);
+					goto err_exit;
+				}
 
-		ret = chdir(prev_path);
-		if (ret < 0) {
-			log_message(LOG_INFO, "chdir(%s) error (%s)"
-					    , prev_path, strerror(errno));
-		}
-	}
+				if (*ofs == 'x' && isxdigit(ofs[1])) {
+					op_char = 0;
+					ofs++;
+					while (isxdigit(*ofs)) {
+						op_char <<= 4;
+						op_char |= isdigit(*ofs) ? *ofs - '0' : (10 + *ofs - (isupper(*ofs)  ? 'A' : 'a'));
+						ofs++;
+					}
+				}
+				else if (*ofs == 'c' && ofs[1]) {
+					op_char = *++ofs & 0x1f;	/* Convert to control character */
+					ofs++;
+				}
+				else if (*ofs >= '0' && *ofs <= '7') {
+					op_char = *ofs++ - '0';
+					if (*ofs >= '0' && *ofs <= '7') {
+						op_char <<= 3;
+						op_char += *ofs++ - '0';
+					}
+					if (*ofs >= '0' && *ofs <= '7') {
+						op_char <<= 3;
+						op_char += *ofs++ - '0';
+					}
+				}
+				else {
+					switch (*ofs) {
+					case 'a':
+						op_char = '\a';
+						break;
+					case 'b':
+						op_char = '\b';
+						break;
+					case 'E':
+						op_char = 0x1b;
+						break;
+					case 'f':
+						op_char = '\f';
+						break;
+					case 'n':
+						op_char = '\n';
+						break;
+					case 'r':
+						op_char = '\r';
+						break;
+					case 't':
+						op_char = '\t';
+						break;
+					case 'v':
+						op_char = '\v';
+						break;
+					default: /* \"'  */
+						op_char = *ofs;
+						break;
+					}
+					ofs++;
+				}
 
-	globfree(&globbuf);
-}
+				*ofs_op++ = op_char;
+				continue;
+			}
 
-int
-check_include(char *buf)
-{
-	char *str;
-	vector_t *strvec;
-	char *path;
-	int ret;
+			if (cur_quote) {
+				/* It's the close quote */
+				ofs++;
+				cur_quote = 0;
+				continue;
+			}
 
-	strvec = alloc_strvec(buf);
+			if (*ofs == '"' || *ofs == '\'') {
+				cur_quote = *ofs++;
+				continue;
+			}
 
-	if (!strvec){
-		return 0;
-	}
-	str = vector_slot(strvec, 0);
-	
-	if (!strcmp(str, EOB)) {
-		free_strvec(strvec);
-		return 0;
-	}
+			break;
+		}
 
-	if(!strcmp("include", str) && vector_size(strvec) == 2){
-		char *conf_file = vector_slot(strvec, 1);
+		/* Alloc & set the slot */
+		vector_alloc_slot(strvec);
+		vector_set_slot(strvec, STRNDUP(op_buf, ofs_op - op_buf));
+	}
 
-		FILE *prev_stream = current_stream;
-		char *prev_conf_file = current_conf_file;
-		char prev_path[MAXBUF];
-		path = getcwd(prev_path, MAXBUF);
-		if (!path) {
-			log_message(LOG_INFO, "getcwd(%s) error (%s)\n"
-					    , prev_path, strerror(errno));
-		}
+	FREE(op_buf);
 
-		read_conf_file(conf_file);
-		current_stream = prev_stream;
-		current_conf_file = prev_conf_file;
-		ret = chdir(prev_path);
-		if (ret < 0) {
-			log_message(LOG_INFO, "chdir(%s) error (%s)\n"
-					    , prev_path, strerror(errno));
-		}
+	if (!vector_size(strvec)) {
 		free_strvec(strvec);
-		return 1;
+		return NULL;
 	}
-	free_strvec(strvec);
-	return 0;
-}
 
-int
-read_line(char *buf, int size)
-{
-	int ch;
+	return strvec;
 
-	do {
-		int count = 0;
-		memset(buf, 0, MAXBUF);
-		while ((ch = fgetc(current_stream)) != EOF && (int) ch != '\n'
-			   && (int) ch != '\r') {
-			if (count < size)
-				buf[count] = (int) ch;
-			else
-				break;
-			count++;
-		}
-	} while (check_include(buf) == 1);
-	return (ch == EOF) ? 0 : 1;
+err_exit:
+	free_strvec(strvec);
+	FREE(op_buf);
+	return NULL;
 }
 
 vector_t *
-read_value_block(void)
+alloc_strvec_r(const char *string)
 {
-	char *buf;
-	int i;
-	char *str = NULL;
-	char *dup;
-	vector_t *vec = NULL;
-	vector_t *elements = vector_alloc();
+	const char *cp, *start;
+	size_t str_len;
+	vector_t *strvec;
 
-	buf = (char *) MALLOC(MAXBUF);
-	while (read_line(buf, MAXBUF)) {
-		vec = alloc_strvec(buf);
-		if (vec) {
-			str = vector_slot(vec, 0);
-			if (!strcmp(str, EOB)) {
-				free_strvec(vec);
-				break;
-			}
+	if (!string)
+		return NULL;
 
-			if (vector_size(vec))
-				for (i = 0; i < vector_size(vec); i++) {
-					str = vector_slot(vec, i);
-					dup = (char *) MALLOC(strlen(str) + 1);
-					memcpy(dup, str, strlen(str));
-					vector_alloc_slot(elements);
-					vector_set_slot(elements, dup);
-				}
-			free_strvec(vec);
-		}
-		memset(buf, 0, MAXBUF);
-	}
+	/* Create a vector and alloc each command piece */
+	strvec = vector_alloc();
 
-	FREE(buf);
-	return elements;
-}
+	cp = string;
+	while (true) {
+		cp += strspn(cp, WHITE_SPACE);
+		if (!*cp)
+			break;
 
-void
-alloc_value_block(vector_t *strvec, void (*alloc_func) (vector_t *))
-{
-	char *buf;
-	char *str = NULL;
-	vector_t *vec = NULL;
+		start = cp;
 
-	buf = (char *) MALLOC(MAXBUF);
-	while (read_line(buf, MAXBUF)) {
-		vec = alloc_strvec(buf);
-		if (vec) {
-			str = vector_slot(vec, 0);
-			if (!strcmp(str, EOB)) {
-				free_strvec(vec);
+		/* Save a quoted string without the ""s as a single string */
+		if (*start == '"') {
+			start++;
+			if (!(cp = strchr(start, '"'))) {
+				report_config_error(CONFIG_UNMATCHED_QUOTE, "Unmatched quote: '%s'", string);
 				break;
 			}
+			str_len = (size_t)(cp - start);
+			cp++;
+		} else {
+			cp += strcspn(start, WHITE_SPACE_STR "\"");
+			str_len = (size_t)(cp - start);
+		}
 
-			if (vector_size(vec))
-				(*alloc_func) (vec);
+		/* Alloc & set the slot */
+		vector_alloc_slot(strvec);
+		vector_set_slot(strvec, STRNDUP(start, str_len));
+	}
 
-			free_strvec(vec);
-		}
-		memset(buf, 0, MAXBUF);
+	if (!vector_size(strvec)) {
+		free_strvec(strvec);
+		return NULL;
 	}
-	FREE(buf);
+
+	return strvec;
 }
 
+typedef struct _seq {
+	const char *var;
+	int next;
+	int last;
+	int step;
+	const char *text;
+} seq_t;
 
-void *
-set_value(vector_t *strvec)
+static list seq_list;	/* List of seq_t */
+
+#ifdef _PARSER_DEBUG_
+static void
+dump_seqs(void)
 {
-	char *str = vector_slot(strvec, 1);
-	int size = strlen(str);
-	int i = 0;
-	int len = 0;
-	char *alloc = NULL;
-	char *tmp;
-
-	if (*str == '"') {
-		for (i = 2; i < vector_size(strvec); i++) {
-			str = vector_slot(strvec, i);
-			len += strlen(str);
-			if (!alloc)
-				alloc = (char *) MALLOC(len + 1);
-			else {
-				alloc = (char *) REALLOC(alloc, 2 * (len + 1));
-				tmp = vector_slot(strvec, i-1);
-				if (*str != '"' && *tmp != '"')
-					strncat(alloc, " ", 1);
-			}
+	seq_t *seq;
+	element e;
 
-			if (i != vector_size(strvec)-1)
-				strncat(alloc, str, strlen(str));
-		}
-	} else {
-		alloc = (char *) MALLOC(size + 1);
-		memcpy(alloc, str, size);
-	}
-	return alloc;
+	LIST_FOREACH(seq_list, seq, e)
+		log_message(LOG_INFO, "SEQ: %s => %d -> %d step %d: '%s'", seq->var, seq->next, seq->last, seq->step, seq->text);
+	log_message(LOG_INFO, "%s", "");
 }
+#endif
 
-/* recursive configuration stream handler */
-static int kw_level = 0;
-void
-process_stream(vector_t *keywords_vec)
+static void
+free_seq(void *s)
 {
-	int i;
-	keyword_t *keyword_vec;
-	char *str;
-	char *buf;
-	vector_t *strvec;
-	vector_t *prev_keywords = current_keywords;
-	current_keywords = keywords_vec;
+	seq_t *seq = s;
 
-	buf = zalloc(MAXBUF);
-	while (read_line(buf, MAXBUF)) {
-		strvec = alloc_strvec(buf);
-		memset(buf,0, MAXBUF);
+	FREE_CONST(seq->var);
+	FREE_CONST(seq->text);
+	FREE(seq);
+}
 
-		if (!strvec)
-			continue;
+static bool
+add_seq(char *buf)
+{
+	char *p = buf + 4;	/* Skip ~SEQ */
+	long one, two, three;
+	long start, step, end;
+	seq_t *seq_ent;
+	const char *var;
+	const char *var_end;
+
+	p += strspn(p, " \t");
+	if (*p++ != '(')
+		return false;
+	p += strspn(p, " \t");
+
+	var = p;
+
+	p += strcspn(p, " \t,)");
+	var_end = p;
+	p += strspn(p, " \t");
+	if (!*p || *p == ')' || p == var) {
+		report_config_error(CONFIG_GENERAL_ERROR, "Invalid ~SEQ definition '%s'", buf);
+		return false;
+	}
 
-		str = vector_slot(strvec, 0);
+	p++;
+	do {
+		// Handle missing number
+		one = strtol(p, &p, 0);
+		p += strspn(p, " \t");
+		if (*p == ')') {
+			end = one;
+			step = (end < 1) ? -1 : 1;
+			start = (end < 0) ? -1 : 1;
+
+			break;
+		}
+
+		if (*p != ',') {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid ~SEQ definition '%s'", buf);
+			return false;
+		}
+
+		two = strtol(p + 1, &p, 0);
+		p += strspn(p, " \t");
+		if (*p == ')') {
+			start = one;
+			end = two;
+			step = start <= end ? 1 : -1;
+
+			break;
+		}
+
+		if (*p != ',') {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid ~SEQ definition '%s'", buf);
+			return false;
+		}
+
+		three = strtol(p + 1, &p, 0);
+		p += strspn(p, " \t");
+		if (*p != ')') {
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid ~SEQ definition '%s'", buf);
+			return false;
+		}
+
+		start = one;
+		step = two;
+		end = three;
+
+		if (!step ||
+		    (start < end && step < 0) ||
+		    (start > end && step > 0))
+		{
+			report_config_error(CONFIG_GENERAL_ERROR, "Invalid ~SEQ values '%s'", buf);
+			return false;
+		}
+	} while (false);
+
+	p += strspn(p + 1, " \t") + 1;
+
+	PMALLOC(seq_ent);
+	seq_ent->var = STRNDUP(var, var_end - var);
+	seq_ent->next = start;
+	seq_ent->step = step;
+	seq_ent->last = end;
+	seq_ent->text = STRDUP(p);
+
+	if (!seq_list)
+		seq_list = alloc_list(free_seq, NULL);
+	list_add(seq_list, seq_ent);
+
+	return true;
+}
+
+#ifdef _PARSER_DEBUG_
+static void
+dump_definitions(void)
+{
+	const def_t *def;
+	element e;
+
+	LIST_FOREACH(defs, def, e)
+		log_message(LOG_INFO, "Defn %s = '%s'", def->name, def->value);
+	log_message(LOG_INFO, "%s", "");
+}
+#endif
+
+/* recursive configuration stream handler */
+static int kw_level;
+static int block_depth;
+
+static bool
+process_stream(vector_t *keywords_vec, int need_bob)
+{
+	unsigned int i;
+	keyword_t *keyword_vec;
+	const char *str;
+	char *buf;
+	vector_t *strvec;
+	vector_t *prev_keywords = current_keywords;
+	current_keywords = keywords_vec;
+	int bob_needed = 0;
+	bool ret_err = false;
+	bool ret;
+
+	buf = MALLOC(MAXBUF);
+	while (read_line(buf, MAXBUF)) {
+		strvec = alloc_strvec(buf);
+
+		if (!strvec)
+			continue;
+
+		str = vector_slot(strvec, 0);
+
+		if (skip_sublevel == -1) {
+			/* There wasn't a '{' on the keyword line */
+			if (!strcmp(str, BOB)) {
+				/* We've got the opening '{' now */
+				skip_sublevel = 1;
+				need_bob = 0;
+				free_strvec(strvec);
+				continue;
+			}
+
+			/* The skipped keyword doesn't have a {} block, so we no longer want to skip */
+			skip_sublevel = 0;
+		}
+		if (skip_sublevel) {
+			for (i = 0; i < vector_size(strvec); i++) {
+				str = vector_slot(strvec,i);
+				if (!strcmp(str,BOB))
+					skip_sublevel++;
+				else if (!strcmp(str,EOB)) {
+					if (--skip_sublevel == 0)
+						break;
+				}
+			}
+
+			/* If we have reached the outer level of the block and we have
+			 * nested keyword level, then we need to return to restore the
+			 * next level up of keywords. */
+			if (!strcmp(str, EOB) && skip_sublevel == 0 && kw_level > 0) {
+				ret_err = true;
+				free_strvec(strvec);
+				break;
+			}
+
+			free_strvec(strvec);
+			continue;
+		}
+
+		if (need_bob) {
+			need_bob = 0;
+			if (!strcmp(str, BOB) && kw_level > 0) {
+				free_strvec(strvec);
+				continue;
+			}
+			else
+				report_config_error(CONFIG_MISSING_BOB, "Missing '%s' at beginning of configuration block", BOB);
+		}
+		else if (!strcmp(str, BOB)) {
+			report_config_error(CONFIG_UNEXPECTED_BOB, "Unexpected '%s' - ignoring", BOB);
+			free_strvec(strvec);
+			continue;
+		}
 
 		if (!strcmp(str, EOB) && kw_level > 0) {
 			free_strvec(strvec);
 			break;
 		}
 
+		if (!strncmp(str, "~SEQ", 4)) {
+			if (!add_seq(buf))
+				report_config_error(CONFIG_GENERAL_ERROR, "Invalid ~SEQ specification '%s'", buf);
+			free_strvec(strvec);
+#ifdef _PARSER_DEBUG_
+			if (do_parser_debug) {
+				dump_definitions();
+				dump_seqs();
+			}
+#endif
+			continue;
+		}
+
 		for (i = 0; i < vector_size(keywords_vec); i++) {
 			keyword_vec = vector_slot(keywords_vec, i);
 
 			if (!strcmp(keyword_vec->string, str)) {
-				if (keyword_vec->handler)
+				if (!keyword_vec->active) {
+					if (!strcmp(vector_slot(strvec, vector_size(strvec)-1), BOB))
+						skip_sublevel = 1;
+					else
+						skip_sublevel = -1;
+
+					/* Sometimes a process wants to know if another process
+					 * has any of a type of configuration. For example, there
+					 * is no point starting the VRRP process of there are no
+					 * vrrp instances, and so the parent process would be
+					 * interested in that. */
+					if (keyword_vec->handler)
+						(*keyword_vec->handler)(NULL);
+				}
+
+				/* There is an inconsistency here. 'static_ipaddress' for example
+				 * does not have sub levels, but needs a '{' */
+				if (keyword_vec->sub) {
+					/* Remove a trailing '{' */
+					char *bob = vector_slot(strvec, vector_size(strvec)-1) ;
+					if (!strcmp(bob, BOB)) {
+						vector_unset(strvec, vector_size(strvec)-1);
+						FREE(bob);
+						bob_needed = 0;
+					}
+					else
+						bob_needed = 1;
+				}
+
+				if (keyword_vec->active && keyword_vec->handler) {
+					buf_extern = buf;	/* In case the raw line wants to be accessed */
 					(*keyword_vec->handler) (strvec);
+				}
 
 				if (keyword_vec->sub) {
 					kw_level++;
-					process_stream(keyword_vec->sub);
+					ret = process_stream(keyword_vec->sub, bob_needed);
 					kw_level--;
+
+					/* We mustn't run any close handler if the block was skipped */
+					if (!ret && keyword_vec->active && keyword_vec->sub_close_handler)
+						(*keyword_vec->sub_close_handler) ();
 				}
 				break;
 			}
 		}
 
+		if (i >= vector_size(keywords_vec))
+			report_config_error(CONFIG_UNKNOWN_KEYWORD, "Unknown keyword '%s'", str);
+
 		free_strvec(strvec);
 	}
 
 	current_keywords = prev_keywords;
-	free(buf);
-	return;
+	FREE(buf);
+	return ret_err;
+}
+
+static bool
+read_conf_file(const char *conf_file)
+{
+	FILE *stream;
+	glob_t globbuf;
+	size_t i;
+	int	res;
+	struct stat stb;
+	unsigned num_matches = 0;
+
+	globbuf.gl_offs = 0;
+	res = glob(conf_file, GLOB_MARK
+#if HAVE_DECL_GLOB_BRACE
+					| GLOB_BRACE
+#endif
+						    , NULL, &globbuf);
+
+	if (res) {
+		if (res == GLOB_NOMATCH)
+			log_message(LOG_INFO, "No config files matched '%s'.", conf_file);
+		else
+			log_message(LOG_INFO, "Error reading config file(s): glob(\"%s\") returned %d, skipping.", conf_file, res);
+		return true;
+	}
+
+	for (i = 0; i < globbuf.gl_pathc; i++) {
+		if (globbuf.gl_pathv[i][strlen(globbuf.gl_pathv[i])-1] == '/') {
+			/* This is a directory - so skip */
+			continue;
+		}
+
+		log_message(LOG_INFO, "Opening file '%s'.", globbuf.gl_pathv[i]);
+		stream = fopen(globbuf.gl_pathv[i], "r");
+		if (!stream) {
+			log_message(LOG_INFO, "Configuration file '%s' open problem (%s) - skipping"
+				       , globbuf.gl_pathv[i], strerror(errno));
+			continue;
+		}
+
+		/* Make sure what we have opened is a regular file, and not for example a directory or executable */
+		if (fstat(fileno(stream), &stb) ||
+		    !S_ISREG(stb.st_mode) ||
+		    (stb.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH))) {
+			log_message(LOG_INFO, "Configuration file '%s' is not a regular non-executable file - skipping", globbuf.gl_pathv[i]);
+			fclose(stream);
+			continue;
+		}
+
+		num_matches++;
+
+		current_stream = stream;
+
+		/* We only want to report the file name if there is more than one file used */
+		if (current_file_name || globbuf.gl_pathc > 1)
+			current_file_name = globbuf.gl_pathv[i];
+		current_file_line_no = 0;
+
+		int curdir_fd = -1;
+		if (strchr(globbuf.gl_pathv[i], '/')) {
+			/* If the filename contains a directory element, change to that directory.
+			   The man page open(2) states that fchdir() didn't support O_PATH until Linux 3.5,
+			   even though testing on Linux 3.1 shows it appears to work. To be safe, don't
+			   use it until Linux 3.5. */
+			curdir_fd = open(".", O_RDONLY | O_DIRECTORY
+#if HAVE_DECL_O_PATH && LINUX_VERSION_CODE >= KERNEL_VERSION(3,5,0)
+								     | O_PATH
+#endif
+									     );
+
+			char *confpath = strdup(globbuf.gl_pathv[i]);
+			dirname(confpath);
+			if (chdir(confpath) < 0)
+				log_message(LOG_INFO, "chdir(%s) error (%s)", confpath, strerror(errno));
+			free(confpath);
+		}
+
+		process_stream(current_keywords, 0);
+		fclose(stream);
+
+		free_list(&seq_list);
+
+		/* If we changed directory, restore the previous directory */
+		if (curdir_fd != -1) {
+			if ((res = fchdir(curdir_fd)))
+				log_message(LOG_INFO, "Failed to restore previous directory after include");
+			close(curdir_fd);
+			if (res)
+				return true;
+		}
+	}
+
+	globfree(&globbuf);
+
+	if (!num_matches)
+		log_message(LOG_INFO, "No config files matched '%s'.", conf_file);
+
+	return false;
+}
+
+bool check_conf_file(const char *conf_file)
+{
+	glob_t globbuf;
+	size_t i;
+	bool ret = true;
+	int res;
+	struct stat stb;
+	unsigned num_matches = 0;
+
+	globbuf.gl_offs = 0;
+	res = glob(conf_file, GLOB_MARK
+#if HAVE_DECL_GLOB_BRACE
+					| GLOB_BRACE
+#endif
+						    , NULL, &globbuf);
+	if (res) {
+		report_config_error(CONFIG_FILE_NOT_FOUND, "Unable to find configuration file %s (glob returned %d)", conf_file, res);
+		return false;
+	}
+
+	for (i = 0; i < globbuf.gl_pathc; i++) {
+		if (globbuf.gl_pathv[i][strlen(globbuf.gl_pathv[i])-1] == '/') {
+			/* This is a directory - so skip */
+			continue;
+		}
+
+		if (access(globbuf.gl_pathv[i], R_OK)) {
+			log_message(LOG_INFO, "Unable to read configuration file %s", globbuf.gl_pathv[i]);
+			ret = false;
+			break;
+		}
+
+		/* Make sure that the file is a regular file, and not for example a directory or executable */
+		if (stat(globbuf.gl_pathv[i], &stb) ||
+		    !S_ISREG(stb.st_mode) ||
+		     (stb.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH))) {
+			log_message(LOG_INFO, "Configuration file '%s' is not a regular non-executable file", globbuf.gl_pathv[i]);
+			ret = false;
+			break;
+		}
+
+		num_matches++;
+	}
+
+	if (ret) {
+		if (num_matches > 1)
+			report_config_error(CONFIG_MULTIPLE_FILES, "WARNING, more than one file matches configuration file %s, using %s", conf_file, globbuf.gl_pathv[0]);
+		else if (num_matches == 0) {
+			report_config_error(CONFIG_FILE_NOT_FOUND, "Unable to find configuration file %s", conf_file);
+			ret = false;
+		}
+	}
+
+	globfree(&globbuf);
+
+	return ret;
+}
+
+static bool
+check_include(const char *buf)
+{
+	const vector_t *strvec;
+	bool ret = false;
+	FILE *prev_stream;
+	const char *prev_file_name;
+	size_t prev_file_line_no;
+
+	/* Simple check first for include */
+	if (!strstr(buf, "include"))
+		return false;
+
+	strvec = alloc_strvec(buf);
+
+	if (!strvec)
+		return false;
+
+	if(!strcmp("include", vector_slot(strvec, 0)) && vector_size(strvec) == 2) {
+		prev_stream = current_stream;
+		prev_file_name = current_file_name;
+		prev_file_line_no = current_file_line_no;
+
+		read_conf_file(vector_slot(strvec, 1));
+
+		current_stream = prev_stream;
+		current_file_name = prev_file_name;
+		current_file_line_no = prev_file_line_no;
+
+		ret = true;
+	}
+
+	free_strvec(strvec);
+	return ret;
+}
+
+static def_t * __attribute__ ((pure))
+find_definition(const char *name, size_t len, bool definition)
+{
+	element e;
+	def_t *def;
+	const char *p;
+	bool using_braces = false;
+	bool allow_multiline;
+	const char *param_start = NULL;
+	const char *param_end = NULL;
+
+	if (LIST_ISEMPTY(defs))
+		return NULL;
+
+	if (!definition && *name == BOB[0]) {
+		using_braces = true;
+		name++;
+	}
+
+	if (!isalpha(*name) && *name != '_')
+		return NULL;
+
+	if (!len) {
+		for (len = 1, p = name + 1; *p != '\0' && (isalnum(*p) || *p == '_'); len++, p++);
+
+		/* Check we have a suitable end character */
+		if (using_braces) {
+			if (!definition) {
+				/* Allow for parameters to the definition */
+				while (*p && (*p == ' ' || isdigit (*p))) {
+					if (*p != ' ') {
+					       if (!param_start)
+						       param_start = p;
+					       param_end = p;
+					}
+					p++;
+				}
+				/* Ensure don't end with a space */
+				if (param_start && param_end + 1 != p)
+					return NULL;
+			}
+			if (*p != EOB[0])
+				return NULL;
+		} else if (!definition && *p != ' ' && *p != '\t' && *p != '\0')
+			return NULL;
+	}
+
+	if (definition ||
+	    (!using_braces && name[len] == '\0') ||
+	    (using_braces && name[len+1] == '\0'))
+		allow_multiline = true;
+	else
+		allow_multiline = false;
+
+	LIST_FOREACH(defs, def, e) {
+		if (def->name_len == len &&
+		    (allow_multiline || !def->multiline) &&
+		    !strncmp(def->name, name, len)) {
+			if (param_start && !def->max_params)
+				return NULL;
+			if (param_start) {
+				def->params = param_start;
+				def->params_end = param_end;
+			}
+			else
+				def->params = NULL;
+			return def;
+		}
+	}
+
+	return NULL;
+}
+
+static void
+multiline_stack_push(const char *ptr)
+{
+	multiline_stack_ent *stack_ent;
+
+	if (!LIST_EXISTS(multiline_stack))
+		multiline_stack = alloc_list(free_list_element_simple, NULL);
+
+	PMALLOC(stack_ent);
+	stack_ent->ptr = ptr;
+	stack_ent->seq_depth = multiline_seq_depth;
+
+	list_add(multiline_stack, stack_ent);
+}
+
+static const char *
+multiline_stack_pop(void)
+{
+	multiline_stack_ent *stack_ent;
+	const char *next_ptr;
+
+	if (!LIST_EXISTS(multiline_stack) || LIST_ISEMPTY(multiline_stack))
+		return NULL;
+
+	stack_ent = LIST_TAIL_DATA(multiline_stack);
+	next_ptr = stack_ent->ptr;
+	multiline_seq_depth = stack_ent->seq_depth;
+
+	list_remove(multiline_stack, multiline_stack->tail);
+
+	return next_ptr;
+}
+
+static bool
+replace_param(char *buf, size_t max_len, char const **multiline_ptr_ptr)
+{
+	char *cur_pos = buf;
+	size_t len_used = strlen(buf);
+	def_t *def;
+	char *s, *d;
+	const char *e;
+	ssize_t i;
+	size_t extra_braces;
+	size_t replacing_len;
+	size_t replaced_len;
+	const char *next_ptr = NULL;
+	bool found_defn = false;
+	const char *multiline_ptr = *multiline_ptr_ptr;
+
+	while ((cur_pos = strchr(cur_pos, '$')) && cur_pos[1] != '\0') {
+		if ((def = find_definition(cur_pos + 1, 0, false))) {
+			found_defn = true;
+			extra_braces = cur_pos[1] == BOB[0] ? 2 : 0;
+			next_ptr = multiline_ptr;
+
+			/* We are in a multiline expansion, and now have another
+			 * one, so save the previous state on the multiline stack */
+			if (def->multiline && multiline_ptr)
+				multiline_stack_push(multiline_ptr);
+
+			if (def->multiline)
+				multiline_seq_depth = LIST_EXISTS(seq_list) ? seq_list->count : 0;
+
+			if (def->fn) {
+				/* This is a standard definition that uses a function for the replacement text */
+				if (def->value)
+					FREE_CONST(def->value);
+				def->value = (*def->fn)(def);
+				def->value_len = strlen(def->value);
+			}
+
+			/* Ensure there is enough room to replace $PARAM or ${PARAM} with value */
+			replaced_len = def->name_len;
+			if (def->multiline) {
+				replacing_len = strcspn(def->value, DEF_LINE_END);
+				next_ptr = def->value + replacing_len + 1;
+				multiline_ptr = next_ptr;
+			}
+			else {
+				if (def->params)
+					replaced_len = def->params_end - (cur_pos + 1 )+ (extra_braces ? 0 : 1);
+				replacing_len = def->value_len;
+			}
+
+			if (len_used + replacing_len - (replaced_len + 1 + extra_braces) >= max_len) {
+				log_message(LOG_INFO, "Parameter substitution on line '%s' would exceed maximum line length", buf);
+				return NULL;
+			}
+
+			if (replaced_len + 1 + extra_braces != replacing_len) {
+				/* We need to move the existing text */
+				if (replaced_len + 1 + extra_braces < replacing_len) {
+					/* We are lengthening the buf text */
+					s = cur_pos + strlen(cur_pos);
+					d = s - (replaced_len + 1 + extra_braces) + replacing_len;
+					e = cur_pos;
+					i = -1;
+				} else {
+					/* We are shortening the buf text */
+					s = cur_pos + (replaced_len + 1 + extra_braces) - replacing_len;
+					d = cur_pos;
+					if (def->params)
+						e = def->params_end + (extra_braces ? 2 : 1);
+					else
+						e = cur_pos + strlen(cur_pos);
+					i = 1;
+				}
+				do {
+					*d = *s;
+					if (s == e)
+						break;
+					d += i;
+					s += i;
+				} while (true);
+
+				len_used = len_used + replacing_len - (replaced_len + 1 + extra_braces);
+			}
+
+			/* Now copy the replacement text */
+			strncpy(cur_pos, def->value, replacing_len);
+
+			if (def->value[strspn(def->value, " \t")] == '~')
+				break;
+		}
+		else
+			cur_pos++;
+	}
+
+	/* If we did a replacement, update the multiline_ptr */
+	if (found_defn)
+		*multiline_ptr_ptr = next_ptr;
+
+	return found_defn;
+}
+
+static void
+free_definition(void *d)
+{
+	def_t *def = d;
+
+	FREE_CONST(def->name);
+	FREE_CONST_PTR(def->value);
+	FREE(def);
+}
+
+static def_t*
+set_definition(const char *name, const char *value)
+{
+	def_t *def;
+	size_t name_len = strlen(name);
+
+	if ((def = find_definition(name, name_len, false))) {
+		FREE_CONST(def->value);
+		def->fn = NULL;		/* Allow a standard definition to be overridden */
+	}
+	else {
+		def = MALLOC(sizeof(*def));
+		def->name_len = name_len;
+		def->name = STRNDUP(name, def->name_len);
+
+		if (!LIST_EXISTS(defs))
+			defs = alloc_list(free_definition, NULL);
+		list_add(defs, def);
+	}
+	def->value_len = strlen(value);
+	def->value = STRNDUP(value, def->value_len);
+
+#ifdef _PARSER_DEBUG_
+	if (do_parser_debug)
+		log_message(LOG_INFO, "Definition %s now '%s'", def->name, def->value);
+#endif
+
+	return def;
+}
+
+/* A definition is of the form $NAME=TEXT */
+static def_t*
+check_definition(const char *buf)
+{
+	const char *p;
+	def_t* def;
+	size_t def_name_len;
+	char *str;
+
+	if (buf[0] != '$')
+		return false;
+
+	if (!isalpha(buf[1]) && buf[1] != '_')
+		return NULL;
+
+	for (p = buf + 2; *p; p++) {
+		if (*p == '=')
+			break;
+		if (!isalnum(*p) &&
+		    !isdigit(*p) &&
+		    *p != '_')
+			return NULL;
+	}
+
+	def_name_len = (size_t)(p - &buf[1]);
+
+	p += strspn(p, " \t");
+	if (*p != '=')
+		return NULL;
+
+	if ((def = find_definition(&buf[1], def_name_len, true))) {
+		FREE_CONST(def->value);
+		def->fn = NULL;		/* Allow a standard definition to be overridden */
+	}
+	else {
+		def = MALLOC(sizeof(*def));
+		def->name_len = def_name_len;
+		def->name = STRNDUP(buf + 1, def->name_len);
+
+		if (!LIST_EXISTS(defs))
+			defs = alloc_list(free_definition, NULL);
+		list_add(defs, def);
+	}
+
+	/* Skip leading whitespace */
+	p += strspn(p + 1, " \t") + 1;
+	def->value_len = strlen(p);
+	if (p[def->value_len - 1] == '\\') {
+		/* Remove trailing whitespace */
+		while (def->value_len >= 2 &&
+		       isblank(p[def->value_len - 2]))
+			def->value_len--;
+
+		if (def->value_len < 2) {
+			/* If the string has nothing except spaces and terminating '\'
+			 * point to the string terminator. */
+			p += def->value_len;
+			def->value_len = 0;
+		}
+		def->multiline = true;
+	} else
+		def->multiline = false;
+
+	str = STRNDUP(p, def->value_len);
+
+	/* If it a multiline definition, we need to mark the end of the first line
+	 * by overwriting the '\' with the line end marker. */
+	if (def->value_len >= 2 && def->multiline)
+		str[def->value_len - 1] = DEF_LINE_END[0];
+
+	def->value = str;
+
+	return def;
+}
+
+static void
+add_std_definition(const char *name, const char *value, const char *(*fn)(const def_t *), unsigned max_params)
+{
+	def_t* def;
+
+	def = MALLOC(sizeof(*def));
+	def->name_len = strlen(name);
+	def->name = STRNDUP(name, def->name_len);
+	if (value) {
+		def->value_len = strlen(value);
+		def->value = STRNDUP(value, def->value_len);
+	}
+	def->fn = fn;
+	def->max_params = max_params;
+
+	if (!LIST_EXISTS(defs))
+		defs = alloc_list(free_definition, NULL);
+	list_add(defs, def);
+}
+
+static void
+set_std_definitions(void)
+{
+	time_t tim;
+
+	add_std_definition("_PWD", NULL, get_cwd, 0);
+	add_std_definition("_INSTANCE", NULL, get_instance, 0);
+	add_std_definition("_RANDOM", NULL, get_random, 2);
+
+	/* In case $_RANDOM is used, seed the pseudo RNG */
+	if (random_seed_configured)
+		srandom(random_seed);
+	else {
+		time(&tim);
+		srandom((unsigned int)tim);
+	}
+}
+
+static void
+free_parser_data(void)
+{
+	if (LIST_EXISTS(defs))
+		free_list(&defs);
+
+	if (LIST_EXISTS(multiline_stack))
+		free_list(&multiline_stack);
+}
+
+/* decomment() removes comments, the escaping of comment start characters,
+ * and leading and trailing whitespace, including whitespace before a
+ * terminating \ character */
+static void
+decomment(char *str)
+{
+	bool quote = false;
+	bool cont = false;
+	char *skip = NULL;
+	char *p = str + strspn(str, " \t");
+
+	/* Remove leading whitespace */
+	if (p != str)
+		memmove(str, p, strlen(p) + 1);
+
+	p = str;
+	while ((p = strpbrk(p, "!#\"\\"))) {
+		if (*p == '"') {
+			if (!skip)
+				quote = !quote;
+			p++;
+			continue;
+		}
+		if (*p == '\\') {
+			if (p[1]) {
+				/* Don't modify quoted strings */
+				if (!quote && (p[1] == '#' || p[1] == '!')) {
+					memmove(p, p + 1, strlen(p + 1) + 1);
+					p++;
+				} else
+					p += 2;
+				continue;
+			}
+			*p = '\0';
+			cont = true;
+			break;
+		}
+		if (!quote && !skip && (*p == '!' || *p == '#'))
+			skip = p;
+		p++;
+	}
+
+	if (quote)
+		report_config_error(CONFIG_GENERAL_ERROR, "Unterminated quote '%s'", str);
+
+	if (skip)
+		*skip = '\0';
+
+	/* Remove trailing whitespace */
+	p = str + strlen(str) - 1;
+	while (p >= str && isblank(*p))		// This line causes a strict-overflow=4 warning in gcc 5.4.0
+		*p-- = '\0';
+	if (cont) {
+		*++p = '\\';
+		*++p = '\0';
+	}
+}
+
+static bool
+read_line(char *buf, size_t size)
+{
+	static def_t *def = NULL;
+	static const char *next_ptr = NULL;
+	static char *line_residue = NULL;
+
+	size_t len ;
+	bool eof = false;
+	size_t config_id_len;
+	char *buf_start;
+	bool rev_cmp;
+	size_t ofs;
+	bool recheck;
+	bool multiline_param_def = false;
+	char *end;
+	size_t skip;
+	char *p;
+
+	config_id_len = config_id ? strlen(config_id) : 0;
+	do {
+		if (line_residue) {
+			strcpy(buf, line_residue);
+			FREE(line_residue);
+			line_residue = NULL;
+		}
+		else if (!LIST_ISEMPTY(seq_list) &&
+			 seq_list->count > multiline_seq_depth) {
+			seq_t *seq = LIST_TAIL_DATA(seq_list);
+			char val[12];
+			snprintf(val, sizeof(val), "%d", seq->next);
+#ifdef _PARSER_DEBUG_
+			if (do_parser_debug)
+				log_message(LOG_INFO, "Processing seq %d of %s for '%s'",  seq->next, seq->var, seq->text);
+#endif
+			set_definition(seq->var, val);
+			strcpy(buf, seq->text);
+			seq->next += seq->step;
+			if ((seq->step > 0 && seq->next > seq->last) ||
+			    (seq->step < 0 && seq->next < seq->last)) {
+#ifdef _PARSER_DEBUG_
+				if (do_parser_debug)
+					log_message(LOG_INFO, "Removing seq %s for '%s'", seq->var, seq->text);
+#endif
+				list_remove(seq_list, seq_list->tail);
+			}
+		}
+		else if (next_ptr) {
+			/* We are expanding a multiline parameter, so copy next line */
+			end = strchr(next_ptr, DEF_LINE_END[0]);
+			if (!end) {
+				strcpy(buf, next_ptr);
+				if (!LIST_ISEMPTY(multiline_stack))
+					next_ptr = multiline_stack_pop();
+				else {
+					next_ptr = NULL;
+					multiline_seq_depth = 0;
+				}
+			} else {
+				strncpy(buf, next_ptr, (size_t)(end - next_ptr));
+				buf[end - next_ptr] = '\0';
+				next_ptr = end + 1;
+			}
+		}
+		else {
+			/* Get the next non-blank line */
+			do {
+				if (!fgets(buf, (int)size, current_stream))
+				{
+					eof = true;
+					len = 0;
+					break;
+				}
+
+				/* Check if we have read the end of a line */
+				len = strlen(buf);
+				if (buf[0] && buf[len-1] == '\n')
+					current_file_line_no++;
+
+				/* Remove end of line chars */
+				while (len && (buf[len-1] == '\n' || buf[len-1] == '\r'))
+					len--;
+
+				if (!len && multiline_param_def) {
+					multiline_param_def = false;
+					if (!def->value_len)
+						def->multiline = false;
+				}
+			} while (!len);
+
+			buf[len] = '\0';
+
+			if (len)
+				decomment(buf);
+
+			if (!buf[0])
+				break;
+		}
+
+		len = strlen(buf);
+
+		/* Handle multi-line definitions */
+		if (multiline_param_def) {
+			/* Remove trailing whitespace */
+			if (len && buf[len-1] == '\\') {
+				len--;
+				while (len >= 1 && isblank(buf[len - 1]))
+					len--;
+				buf[len++] = DEF_LINE_END[0];
+			} else {
+				multiline_param_def = false;
+				if (!def->value_len)
+					def->multiline = false;
+			}
+
+			/* Don't add blank lines */
+			if (len >= 2 ||
+			    (len && !multiline_param_def)) {
+				/* Add the line to the definition */
+				char *str = REALLOC_CONST(def->value, def->value_len + len + 1);
+				strncpy(str + def->value_len, buf, len);
+				def->value_len += len;
+				str[def->value_len] = '\0';
+				def->value = str;
+			}
+
+			buf[0] = '\0';
+			continue;
+		}
+
+		if (len == 0)
+			continue;
+
+		recheck = false;
+		do {
+			if (buf[0] == '@') {
+				/* If the line starts '@', check the following word matches the system id.
+				   @^ reverses the sense of the match */
+				if (buf[1] == '^') {
+					rev_cmp = true;
+					ofs = 2;
+				} else {
+					rev_cmp = false;
+					ofs = 1;
+				}
+
+				/* We need something after the system_id */
+				if (!(buf_start = strpbrk(buf + ofs, " \t"))) {
+					buf[0] = '\0';
+					break;
+				}
+
+				/* Check if config_id matches/doesn't match as appropriate */
+				if ((!config_id ||
+				     (size_t)(buf_start - (buf + ofs)) != config_id_len ||
+				     strncmp(buf + ofs, config_id, config_id_len)) != rev_cmp) {
+					buf[0] = '\0';
+					break;
+				}
+
+				/* Remove the @config_id from start of line */
+				buf_start += strspn(buf_start, " \t");
+				len -= (buf_start - buf);
+				memmove(buf, buf_start, len + 1);
+			}
+
+			if (buf[0] == '$' && (def = check_definition(buf))) {
+				/* check_definition() saves the definition */
+				if (def->multiline)
+					multiline_param_def = true;
+				buf[0] = '\0';
+				break;
+			}
+
+			if (buf[0] == '~')
+				break;
+
+			if (!LIST_ISEMPTY(defs) && (p = strchr(buf, '$'))) {
+				if (!replace_param(buf, size, &next_ptr)) {
+					/* If nothing has changed, we don't need to do any more processing */
+					break;
+				}
+
+				if (buf[0] == '@')
+					recheck = true;
+				if (strchr(buf, '$'))
+					recheck = true;
+			}
+		} while (recheck);
+	} while (buf[0] == '\0' || check_include(buf));
+
+	/* Search for BOB[0] or EOB[0] not in "" */
+	if (buf[0]) {
+		p = buf;
+		if (p[0] != BOB[0] && p[0] != EOB[0]) {
+			while ((p = strpbrk(p, BOB EOB "\""))) {
+				if (*p != '"')
+					break;
+
+				/* Skip over anything in ""s */
+				if (!(p = strchr(p + 1, '"')))
+					break;
+
+				p++;
+			}
+		}
+
+		if (p && (p[0] == BOB[0] || p[0] == EOB[0])) {
+			if (p == buf)
+				skip = strspn(p + 1, " \t") + 1;
+			else
+				skip = 0;
+
+			if (p[skip]) {
+				/* Skip trailing whitespace */
+				len = strlen(p + skip);
+				while (len && (p[skip+len-1] == ' ' || p[skip+len-1] == '\t'))
+					len--;
+				line_residue = MALLOC(len + 1);
+				p[skip+len] = '\0';
+				strcpy(line_residue, p + skip);
+				p[skip] = '\0';
+			}
+		}
+
+		/* Skip trailing whitespace */
+		len = strlen(buf);
+		while (len && (buf[len-1] == ' ' || buf[len-1] == '\t'))
+			len--;
+		buf[len] = '\0';
+
+		/* Check that we haven't got too many '}'s */
+		if (!strcmp(buf, BOB))
+			block_depth++;
+		else if (!strcmp(buf, EOB)) {
+			if (block_depth-- < 1) {
+				report_config_error(CONFIG_UNEXPECTED_EOB, "Extra '}' found");
+				block_depth = 0;
+			}
+		}
+	}
+
+#ifdef _PARSER_DEBUG_
+	if (do_parser_debug)
+		log_message(LOG_INFO, "read_line(%d): '%s'", block_depth, buf);
+#endif
+
+	return !eof;
+}
+
+void
+alloc_value_block(void (*alloc_func) (const vector_t *), const char *block_type)
+{
+	char *buf;
+	const char *str = NULL;
+	const vector_t *vec = NULL;
+	bool first_line = true;
+
+	buf = (char *) MALLOC(MAXBUF);
+	while (read_line(buf, MAXBUF)) {
+		if (!(vec = alloc_strvec(buf)))
+			continue;
+
+		if (first_line) {
+			first_line = false;
+
+			if (!strcmp(vector_slot(vec, 0), BOB)) {
+				free_strvec(vec);
+				continue;
+			}
+
+			log_message(LOG_INFO, "'%s' missing from beginning of block %s", BOB, block_type);
+		}
+
+		str = vector_slot(vec, 0);
+		if (!strcmp(str, EOB)) {
+			free_strvec(vec);
+			break;
+		}
+
+		if (vector_size(vec))
+			(*alloc_func) (vec);
+
+		free_strvec(vec);
+	}
+	FREE(buf);
+}
+
+static vector_t *read_value_block_vec;
+static void
+read_value_block_line(const vector_t *strvec)
+{
+	size_t word;
+	const char *str;
+
+	if (!read_value_block_vec)
+		read_value_block_vec = vector_alloc();
+
+	vector_foreach_slot(strvec, str, word) {
+		vector_alloc_slot(read_value_block_vec);
+		vector_set_slot(read_value_block_vec, STRDUP(str));
+	}
+}
+
+const vector_t *
+read_value_block(const vector_t *strvec)
+{
+	vector_t *ret_vec;
+
+	alloc_value_block(read_value_block_line, vector_slot(strvec,0));
+
+	ret_vec = read_value_block_vec;
+	read_value_block_vec = NULL;
+
+	return ret_vec;
+}
+
+/* min_time and max_time are in micro-seconds. The returned value is also in micro-seconds */
+bool
+read_timer(const vector_t *strvec, size_t index, unsigned long *res, unsigned long min_time, unsigned long max_time, bool ignore_error)
+{
+	double timer;
+	bool ret;
+	double fmin_time, fmax_time;
+
+	fmin_time = (double)min_time / TIMER_HZ;
+	fmax_time = (double)((max_time) ? max_time : TIMER_MAXIMUM) / TIMER_HZ;
+
+	ret = read_double_strvec(strvec, index, &timer, fmin_time, fmax_time, ignore_error);
+	*res = timer * TIMER_HZ > TIMER_MAXIMUM ? TIMER_MAXIMUM : (unsigned long)(timer * TIMER_HZ);
+
+	return ret;
+}
+
+/* Checks for on/true/yes or off/false/no */
+int __attribute__ ((pure))
+check_true_false(const char *str)
+{
+	if (!strcmp(str, "true") || !strcmp(str, "on") || !strcmp(str, "yes"))
+		return true;
+	if (!strcmp(str, "false") || !strcmp(str, "off") || !strcmp(str, "no"))
+		return false;
+
+	return -1;	/* error */
+}
+
+void skip_block(bool need_block_start)
+{
+	/* Don't process the rest of the configuration block */
+	if (need_block_start)
+		skip_sublevel = -1;
+	else
+		skip_sublevel = 1;
 }
 
 /* Data initialization */
 void
-init_data(char *conf_file, vector_t * (*init_keywords) (void))
+init_data(const char *conf_file, const vector_t * (*init_keywords) (void))
 {
 	/* Init Keywords structure */
 	keywords = vector_alloc();
+
 	(*init_keywords) ();
 
-#if 0
+	/* Add out standard definitions */
+	set_std_definitions();
+
+#ifdef _DUMP_KEYWORDS_
 	/* Dump configuration */
-	vector_dump(keywords);
-	dump_keywords(keywords, 0);
+	if (do_dump_keywords)
+		dump_keywords(keywords, 0, NULL);
 #endif
 
 	/* Stream handling */
 	current_keywords = keywords;
-	read_conf_file((conf_file) ? conf_file : CONF);
+
+	current_file_name = NULL;
+	current_file_line_no = 0;
+
+	/* A parent process may have left these set */
+	block_depth = 0;
+	kw_level = 0;
+
+	register_null_strvec_handler(null_strvec);
+	read_conf_file(conf_file);
+	unregister_null_strvec_handler();
+
+	/* Report if there are missing '}'s. If there are missing '{'s it will already have been reported */
+	if (block_depth > 0)
+		report_config_error(CONFIG_MISSING_EOB, "There are %d missing '%s's or extra '%s's", block_depth, EOB, BOB);
+
+	/* We have finished reading the configuration files, so any configuration
+	 * errors report from now mustn't include a reference to the config file name */
+	current_file_line_no = 0;
+
+	/* Close the password database if it was opened */
+	endpwent();
+
 	free_keywords(keywords);
+	free_parser_data();
+#ifdef _WITH_VRRP_
+	clear_rt_names();
+#endif
+	notify_resource_release();
 }
diff --git a/tools/keepalived/lib/parser.h b/tools/keepalived/lib/parser.h
index 715247558..0d9e288ae 100644
--- a/tools/keepalived/lib/parser.h
+++ b/tools/keepalived/lib/parser.h
@@ -1,10 +1,10 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        cfreader.c include file.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -17,60 +17,122 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _PARSER_H
 #define _PARSER_H
 
 /* system includes */
-#include <stdlib.h>
-#include <stdio.h>
-#include <string.h>
+#include <sys/types.h>
+#include <stdbool.h>
 #include <stdint.h>
-#include <syslog.h>
-#include <ctype.h>
+#include <string.h>
 
 /* local includes */
 #include "vector.h"
+#include "memory.h"
 
 /* Global definitions */
-#define CONF "/etc/keepalived/keepalived.conf"
-#define EOB  "}"
+#define KEEPALIVED_CONFIG_FILE	DEFAULT_CONFIG_FILE
+
+/* Maximum config line length */
 #define MAXBUF	1024
 
-/* ketword definition */
+/* Maximum time read_timer can read - in micro-seconds */
+#define TIMER_MAXIMUM (ULONG_MAX)
+
+/* Configuration test errors. These should be in decreasing order of severity */
+typedef enum {
+	CONFIG_OK,
+
+	/* The following mean keepalived cannot run the config */
+	CONFIG_FILE_NOT_FOUND,
+	CONFIG_BAD_IF,
+	CONFIG_FATAL,
+
+	/* The following are configuration errors, but keepalived will still run */
+	CONFIG_MULTIPLE_FILES,
+	CONFIG_UNKNOWN_KEYWORD,
+	CONFIG_UNEXPECTED_BOB,	/* '{' */
+	CONFIG_MISSING_BOB,	/* '{' */
+	CONFIG_UNEXPECTED_EOB,	/* '}' */
+	CONFIG_MISSING_EOB,	/* '}' */
+	CONFIG_UNMATCHED_QUOTE,
+	CONFIG_MISSING_PARAMETER,
+	CONFIG_INVALID_NUMBER,
+	CONFIG_GENERAL_ERROR,
+
+	/* The following is for script security not enabled when needed */
+	CONFIG_SECURITY_ERROR,
+} config_err_t;
+
+/* keyword definition */
 typedef struct _keyword {
-	char *string;
-	void (*handler) (vector_t *);
+	const char *string;
+	void (*handler) (const vector_t *);
 	vector_t *sub;
+	void (*sub_close_handler) (void);
+	bool active;
 } keyword_t;
 
-/* Reloading helpers */
-#define SET_RELOAD      (reload = 1)
-#define UNSET_RELOAD    (reload = 0)
-#define RELOAD_DELAY    5
-
 /* global vars exported */
 extern vector_t *keywords;
-extern FILE *current_stream;
-extern int reload;
+extern const char *config_id;
+extern const char *WHITE_SPACE;
+
+#ifdef _PARSER_DEBUG_
+extern bool do_parser_debug;
+#endif
+#ifdef _DUMP_KEYWORDS_
+extern bool do_dump_keywords;
+#endif
+
+static inline char * __attribute__((malloc))
+set_value_r(const vector_t *strvec)
+{
+        return STRDUP(strvec_slot(strvec, 1));
+}
+
+#ifdef _MEM_CHECK_
+#define alloc_strvec(str)	(memcheck_log("alloc_strvec", str, (__FILE__), (__func__), (__LINE__)), \
+                                 alloc_strvec_r(str))
+
+#define set_value(str)		(memcheck_log("set_value", strvec_slot(str,1), (__FILE__), (__func__), (__LINE__)), \
+				 set_value_r(str))
+#else
+#define alloc_strvec(str)	(alloc_strvec_r(str))
+#define set_value(str)		(set_value_r(str))
+#endif
 
 /* Prototypes */
-extern void keyword_alloc(vector_t *, char *, void (*handler) (vector_t *));
-extern void keyword_alloc_sub(vector_t *, char *, void (*handler) (vector_t *));
-extern void install_keyword_root(char *, void (*handler) (vector_t *));
+extern void report_config_error(config_err_t, const char *format, ...)
+	__attribute__((format (printf, 2, 3)));
+extern config_err_t get_config_status(void) __attribute__ ((pure));
+extern bool read_int(const char *, int *, int, int, bool);
+extern bool read_unsigned(const char *, unsigned *, unsigned, unsigned, bool);
+extern bool read_unsigned64(const char *, uint64_t *, uint64_t, uint64_t, bool);
+extern bool read_double(const char *, double *, double, double, bool);
+extern bool read_int_strvec(const vector_t *, size_t, int *, int, int, bool);
+extern bool read_unsigned_strvec(const vector_t *, size_t, unsigned *, unsigned, unsigned, bool);
+extern bool read_unsigned64_strvec(const vector_t *, size_t, uint64_t *, uint64_t, uint64_t, bool);
+extern bool read_unsigned_base_strvec(const vector_t *, size_t, int, unsigned *, unsigned, unsigned, bool);
+extern bool read_double_strvec(const vector_t *, size_t, double *, double, double, bool);
+extern void set_random_seed(unsigned int);
+extern void install_keyword_root(const char *, void (*handler) (const vector_t *), bool);
+extern void install_root_end_handler(void (*handler) (void));
 extern void install_sublevel(void);
 extern void install_sublevel_end(void);
-extern void install_keyword(char *, void (*handler) (vector_t *));
-extern void dump_keywords(vector_t *, int);
-extern void free_keywords(vector_t *);
-extern vector_t *alloc_strvec(char *);
-extern int read_line(char *, int);
-extern vector_t *read_value_block(void);
-extern void alloc_value_block(vector_t *, void (*alloc_func) (vector_t *));
-extern void *set_value(vector_t *);
-extern void process_stream(vector_t *);
-extern void init_data(char *, vector_t * (*init_keywords) (void));
+extern void install_sublevel_end_handler(void (*handler) (void));
+extern void install_keyword(const char *, void (*handler) (const vector_t *));
+extern const vector_t *alloc_strvec_quoted_escaped(const char *);
+extern vector_t *alloc_strvec_r(const char *);
+extern bool check_conf_file(const char*);
+extern const vector_t *read_value_block(const vector_t *);
+extern void alloc_value_block(void (*alloc_func) (const vector_t *), const char *);
+extern bool read_timer(const vector_t *, size_t, unsigned long *, unsigned long, unsigned long, bool);
+extern int check_true_false(const char *) __attribute__ ((pure));
+extern void skip_block(bool);
+extern void init_data(const char *, const vector_t * (*init_keywords) (void));
 
 #endif
diff --git a/tools/keepalived/lib/process.c b/tools/keepalived/lib/process.c
new file mode 100644
index 000000000..221a6bac0
--- /dev/null
+++ b/tools/keepalived/lib/process.c
@@ -0,0 +1,297 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Process management
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2016 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#include "config.h"
+
+#include <sys/mman.h>
+#include <sys/resource.h>
+#include <errno.h>
+#include <string.h>
+#include <unistd.h>
+#include <stdbool.h>
+
+#include "process.h"
+#include "utils.h"
+#include "logger.h"
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+#include "signals.h"
+#endif
+#include "warnings.h"
+#include "bitops.h"
+
+#ifdef _HAVE_SCHED_RT_
+static bool realtime_priority_set;
+
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+static bool rlimit_rt_set;
+static struct rlimit orig_rlimit_rt;
+#endif
+#endif
+
+static bool priority_set;
+static int orig_priority;
+static bool process_locked_in_memory;
+
+static struct rlimit orig_fd_limit;
+
+/* rlimit values to set for child processes */
+bool rlimit_nofile_set;
+static struct rlimit core;
+bool rlimit_core_set;
+
+static void
+set_process_dont_swap(size_t stack_reserve)
+{
+	/* Ensure stack pages allocated */
+	size_t pagesize = (size_t)sysconf(_SC_PAGESIZE);
+	char stack[stack_reserve];
+	size_t i;
+
+	stack[0] = 23;		/* A random number */
+	for (i = 0; i < stack_reserve; i += pagesize)
+		stack[i] = stack[0];
+
+	if (mlockall(MCL_FUTURE) == -1)
+		log_message(LOG_INFO, "Unable to lock process in memory - %s", strerror(errno));
+	else
+		process_locked_in_memory = true;
+}
+
+static void
+set_process_priority(int priority)
+{
+	orig_priority = getpriority(PRIO_PROCESS, 0);
+
+	errno = 0;
+	if (setpriority(PRIO_PROCESS, 0, priority) == -1 && errno) {
+		log_message(LOG_INFO, "Unable to set process priority to %d - %s", priority, strerror(errno));
+		return;
+	}
+
+	priority_set = true;
+}
+
+static void
+reset_process_priority(void)
+{
+	errno = 0;
+	if (setpriority(PRIO_PROCESS, 0, orig_priority) == -1 && errno) {
+		log_message(LOG_INFO, "Unable to reset process priority - %m");
+		return;
+	}
+
+	priority_set = false;
+}
+
+/* NOTE: This function generates a "stack protector not protecting local variables:
+   variable length buffer" warning */
+RELAX_STACK_PROTECTOR_START
+void
+set_process_priorities(
+#ifdef _HAVE_SCHED_RT_
+		       int realtime_priority,
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+		       int rlimit_rt,
+#endif
+#endif
+		       int process_priority, int no_swap_stack_size)
+{
+#ifdef _HAVE_SCHED_RT_
+	if (realtime_priority) {
+		/* Set realtime priority */
+		struct sched_param sp = {
+			.sched_priority = realtime_priority
+		};
+
+		if (sched_setscheduler(getpid(), SCHED_RR | SCHED_RESET_ON_FORK, &sp))
+			log_message(LOG_WARNING, "child process: cannot raise priority");
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+		else if (rlimit_rt)
+		{
+			struct rlimit rlim;
+
+			set_sigxcpu_handler();
+
+			rlim.rlim_cur = rlimit_rt / 2;	/* Get warnings if approaching limit */
+			rlim.rlim_max = rlimit_rt;
+			if (setrlimit(RLIMIT_RTTIME, &rlim))
+				log_message(LOG_WARNING, "child process cannot set realtime rlimit");
+		}
+#endif
+	}
+	else
+#endif
+	     if (process_priority)
+		set_process_priority(process_priority);
+
+// TODO - measure max stack usage
+	if (no_swap_stack_size)
+		set_process_dont_swap(no_swap_stack_size);
+}
+RELAX_STACK_PROTECTOR_END
+
+#ifdef _HAVE_SCHED_RT_
+int
+set_process_cpu_affinity(cpu_set_t *set, const char *process)
+{
+	/* If not used then empty set */
+	if (!CPU_COUNT(set))
+		return 0;
+
+	if (sched_setaffinity(0, sizeof(cpu_set_t), set)) {
+		log_message(LOG_WARNING, "unable to set cpu affinity to %s process (%m)"
+				       , process);
+		return -1;
+	}
+
+	return 0;
+}
+
+int
+get_process_cpu_affinity_string(cpu_set_t *set, char *buffer, size_t size)
+{
+	int i, num_cpus, len, s = size;
+	char *cp = buffer;
+
+	/* If not used then empty set */
+	if (!CPU_COUNT(set))
+		return 0;
+
+	num_cpus = sysconf(_SC_NPROCESSORS_ONLN);
+	for (i = 0; i < num_cpus; i++) {
+		if (!CPU_ISSET(i, set))
+			continue;
+
+		len = integer_to_string(i, cp, s);
+		if (len < 0 || s <= len + 1) {
+			*cp = '\0';
+			return -1;
+		}
+		*(cp + len) = ' ';
+		cp += len + 1;
+		s -= len + 1;
+	}
+
+	*cp = '\0';
+	return 0;
+}
+
+#endif
+
+void
+reset_process_priorities(void)
+{
+#ifdef _HAVE_SCHED_RT_
+	if (realtime_priority_set) {
+		/* Set realtime priority */
+		struct sched_param sp = {
+			.sched_priority = 0
+		};
+
+		if (sched_setscheduler(getpid(), SCHED_OTHER, &sp))
+			log_message(LOG_WARNING, "child process: cannot reset realtime scheduling");
+		else {
+			realtime_priority_set = false;
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+			if (rlimit_rt_set)
+			{
+				if (setrlimit(RLIMIT_RTTIME, &orig_rlimit_rt))
+					log_message(LOG_WARNING, "child process cannot reset realtime rlimit");
+				else
+					rlimit_rt_set = false;
+
+			}
+#endif
+		}
+	}
+#endif
+	if (priority_set)
+		reset_process_priority();
+
+	if (process_locked_in_memory) {
+		munlockall();
+		process_locked_in_memory = false;
+	}
+
+	if (rlimit_nofile_set) {
+		setrlimit(RLIMIT_NOFILE, &orig_fd_limit);
+		rlimit_nofile_set = false;
+	}
+	if (rlimit_core_set) {
+		setrlimit(RLIMIT_CORE, &core);
+		rlimit_core_set = false;
+	}
+}
+
+void
+set_child_rlimit(int resource, const struct rlimit *rlim)
+{
+	if (resource == RLIMIT_CORE) {
+		core = *rlim;
+		rlimit_core_set = true;
+	}
+	else
+		log_message(LOG_INFO, "Unknown rlimit resource %d", resource);
+}
+
+pid_t
+local_fork(void)
+{
+	pid_t pid;
+
+	pid = fork();
+
+	/* If we are the child process, reset all elevated priorities */
+	if (pid == 0)
+		reset_process_priorities();
+
+	return pid;
+}
+
+void
+set_max_file_limit(unsigned fd_required)
+{
+	struct rlimit limit = { .rlim_cur = 0 };
+
+	if (orig_fd_limit.rlim_cur == 0) {
+		if (getrlimit(RLIMIT_NOFILE, &orig_fd_limit))
+			log_message(LOG_INFO, "Failed to get original RLIMIT_NOFILE, errno %d", errno);
+		else
+			limit = orig_fd_limit;
+	} else if (getrlimit(RLIMIT_NOFILE, &limit))
+		log_message(LOG_INFO, "Failed to get current RLIMIT_NOFILE, errno %d", errno);
+
+	if (fd_required <= orig_fd_limit.rlim_cur &&
+	    orig_fd_limit.rlim_cur == limit.rlim_cur)
+		return;
+
+	limit.rlim_cur = orig_fd_limit.rlim_cur > fd_required ? orig_fd_limit.rlim_cur : fd_required;
+	limit.rlim_max = orig_fd_limit.rlim_max > fd_required ? orig_fd_limit.rlim_max : fd_required;
+
+	if (setrlimit(RLIMIT_NOFILE, &limit) == -1)
+		log_message(LOG_INFO, "Failed to set open file limit to %" PRI_rlim_t ":%" PRI_rlim_t " failed - errno %d", limit.rlim_cur, limit.rlim_max, errno);
+	else if (__test_bit(LOG_DETAIL_BIT, &debug))
+		log_message(LOG_INFO, "Set open file limit to %" PRI_rlim_t ":%" PRI_rlim_t ".", limit.rlim_cur, limit.rlim_max);
+
+	/* We don't want child processes to get excessive limits */
+	rlimit_nofile_set = (limit.rlim_cur != orig_fd_limit.rlim_cur);
+}
diff --git a/tools/keepalived/lib/process.h b/tools/keepalived/lib/process.h
new file mode 100644
index 000000000..4741c3656
--- /dev/null
+++ b/tools/keepalived/lib/process.h
@@ -0,0 +1,53 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Process management
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _PROCESS_H
+#define _PROCESS_H
+
+#ifdef _HAVE_SCHED_RT_
+#include <sched.h>
+#endif
+#include <sys/types.h>
+#include <sys/resource.h>
+
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+#define	RT_RLIMIT_DEFAULT	10000
+#endif
+
+extern void set_process_priorities(
+#ifdef _HAVE_SCHED_RT_
+			           int,
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+			           int,
+#endif
+#endif
+				   int, int);
+#ifdef _HAVE_SCHED_RT_
+extern int set_process_cpu_affinity(cpu_set_t *, const char *);
+extern int get_process_cpu_affinity_string(cpu_set_t *, char *, size_t);
+#endif
+extern void reset_process_priorities(void);
+extern void set_child_rlimit(int, const struct rlimit *);
+extern pid_t local_fork(void);
+
+extern void set_max_file_limit(unsigned);
+#endif
diff --git a/tools/keepalived/lib/rbtree.c b/tools/keepalived/lib/rbtree.c
new file mode 100644
index 000000000..d054ff6be
--- /dev/null
+++ b/tools/keepalived/lib/rbtree.c
@@ -0,0 +1,678 @@
+/*
+  Red Black Trees
+  (C) 1999  Andrea Arcangeli <andrea@suse.de>
+  (C) 2002  David Woodhouse <dwmw2@infradead.org>
+  (C) 2012  Michel Lespinasse <walken@google.com>
+
+  This program is free software; you can redistribute it and/or modify
+  it under the terms of the GNU General Public License as published by
+  the Free Software Foundation; either version 2 of the License, or
+  (at your option) any later version.
+
+  This program is distributed in the hope that it will be useful,
+  but WITHOUT ANY WARRANTY; without even the implied warranty of
+  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+  GNU General Public License for more details.
+
+  You should have received a copy of the GNU General Public License
+  along with this program; if not, write to the Free Software
+  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+
+  linux/lib/rbtree.c
+*/
+
+/* This is updated to Linux v4.18.10 lib/rbtree.c
+ *   with the addition of the defined helper "functions" in rbtree.h
+ */
+
+#include "config.h"
+
+#include <stdlib.h>
+#include "rbtree_augmented.h"
+
+/*
+ * red-black trees properties:  http://en.wikipedia.org/wiki/Rbtree
+ *
+ *  1) A node is either red or black
+ *  2) The root is black
+ *  3) All leaves (NULL) are black
+ *  4) Both children of every red node are black
+ *  5) Every simple path from root to leaves contains the same number
+ *     of black nodes.
+ *
+ *  4 and 5 give the O(log n) guarantee, since 4 implies you cannot have two
+ *  consecutive red nodes in a path and every red node is therefore followed by
+ *  a black. So if B is the number of black nodes on every simple path (as per
+ *  5), then the longest possible path due to 4 is 2B.
+ *
+ *  We shall indicate color with case, where black nodes are uppercase and red
+ *  nodes will be lowercase. Unknown color nodes shall be drawn as red within
+ *  parentheses and have some accompanying text comment.
+ */
+
+/*
+ * Notes on lockless lookups:
+ *
+ * All stores to the tree structure (rb_left and rb_right) must be done using
+ * WRITE_ONCE(). And we must not inadvertently cause (temporary) loops in the
+ * tree structure as seen in program order.
+ *
+ * These two requirements will allow lockless iteration of the tree -- not
+ * correct iteration mind you, tree rotations are not atomic so a lookup might
+ * miss entire subtrees.
+ *
+ * But they do guarantee that any such traversal will only see valid elements
+ * and that it will indeed complete -- does not get stuck in a loop.
+ *
+ * It also guarantees that if the lookup returns an element it is the 'correct'
+ * one. But not returning an element does _NOT_ mean it's not present.
+ *
+ * NOTE:
+ *
+ * Stores to __rb_parent_color are not important for simple lookups so those
+ * are left undone as of now. Nor did I check for loops involving parent
+ * pointers.
+ */
+
+static inline void rb_set_black(struct rb_node *rb)
+{
+	rb->__rb_parent_color |= RB_BLACK;
+}
+
+static inline struct rb_node *rb_red_parent(struct rb_node *red)
+{
+	return (struct rb_node *)red->__rb_parent_color;
+}
+
+/*
+ * Helper function for rotations:
+ * - old's parent and color get assigned to new
+ * - old gets assigned new as a parent and 'color' as a color.
+ */
+static inline void
+__rb_rotate_set_parents(struct rb_node *old, struct rb_node *new,
+			struct rb_root *root, int color)
+{
+	struct rb_node *parent = rb_parent(old);
+	new->__rb_parent_color = old->__rb_parent_color;
+	rb_set_parent_color(old, new, color);
+	__rb_change_child(old, new, parent, root);
+}
+
+static __always_inline void
+__rb_insert(struct rb_node *node, struct rb_root *root,
+	    bool newleft, struct rb_node **leftmost,
+	    void (*augment_rotate)(struct rb_node *old, struct rb_node *new))
+{
+	struct rb_node *parent = rb_red_parent(node), *gparent, *tmp;
+
+	if (newleft)
+		*leftmost = node;
+
+	while (true) {
+		/*
+		 * Loop invariant: node is red.
+		 */
+		if (!parent) {
+			/*
+			 * The inserted node is root. Either this is the
+			 * first node, or we recursed at Case 1 below and
+			 * are no longer violating 4).
+			 */
+			rb_set_parent_color(node, NULL, RB_BLACK);
+			break;
+		}
+
+		/*
+		 * If there is a black parent, we are done.
+		 * Otherwise, take some corrective action as,
+		 * per 4), we don't want a red root or two
+		 * consecutive red nodes.
+		 */
+		if(rb_is_black(parent))
+			break;
+
+		gparent = rb_red_parent(parent);
+
+		tmp = gparent->rb_right;
+		if (parent != tmp) {	/* parent == gparent->rb_left */
+			if (tmp && rb_is_red(tmp)) {
+				/*
+				 * Case 1 - node's uncle is red (color flips).
+				 *
+				 *       G            g
+				 *      / \          / \
+				 *     p   u  -->   P   U
+				 *    /            /
+				 *   n            n
+				 *
+				 * However, since g's parent might be red, and
+				 * 4) does not allow this, we need to recurse
+				 * at g.
+				 */
+				rb_set_parent_color(tmp, gparent, RB_BLACK);
+				rb_set_parent_color(parent, gparent, RB_BLACK);
+				node = gparent;
+				parent = rb_parent(node);
+				rb_set_parent_color(node, parent, RB_RED);
+				continue;
+			}
+
+			tmp = parent->rb_right;
+			if (node == tmp) {
+				/*
+				 * Case 2 - node's uncle is black and node is
+				 * the parent's right child (left rotate at parent).
+				 *
+				 *      G             G
+				 *     / \           / \
+				 *    p   U  -->    n   U
+				 *     \           /
+				 *      n         p
+				 *
+				 * This still leaves us in violation of 4), the
+				 * continuation into Case 3 will fix that.
+				 */
+				tmp = node->rb_left;
+				WRITE_ONCE(parent->rb_right, tmp);
+				WRITE_ONCE(node->rb_left, parent);
+				if (tmp)
+					rb_set_parent_color(tmp, parent,
+							    RB_BLACK);
+				rb_set_parent_color(parent, node, RB_RED);
+				augment_rotate(parent, node);
+				parent = node;
+				tmp = node->rb_right;
+			}
+
+			/*
+			 * Case 3 - node's uncle is black and node is
+			 * the parent's left child (right rotate at gparent).
+			 *
+			 *        G           P
+			 *       / \         / \
+			 *      p   U  -->  n   g
+			 *     /                 \
+			 *    n                   U
+			 */
+			WRITE_ONCE(gparent->rb_left, tmp); /* == parent->rb_right */
+			WRITE_ONCE(parent->rb_right, gparent);
+			if (tmp)
+				rb_set_parent_color(tmp, gparent, RB_BLACK);
+			__rb_rotate_set_parents(gparent, parent, root, RB_RED);
+			augment_rotate(gparent, parent);
+			break;
+		} else {
+			tmp = gparent->rb_left;
+			if (tmp && rb_is_red(tmp)) {
+				/* Case 1 - color flips */
+				rb_set_parent_color(tmp, gparent, RB_BLACK);
+				rb_set_parent_color(parent, gparent, RB_BLACK);
+				node = gparent;
+				parent = rb_parent(node);
+				rb_set_parent_color(node, parent, RB_RED);
+				continue;
+			}
+
+			tmp = parent->rb_left;
+			if (node == tmp) {
+				/* Case 2 - right rotate at parent */
+				tmp = node->rb_right;
+				WRITE_ONCE(parent->rb_left, tmp);
+				WRITE_ONCE(node->rb_right, parent);
+				if (tmp)
+					rb_set_parent_color(tmp, parent,
+							    RB_BLACK);
+				rb_set_parent_color(parent, node, RB_RED);
+				augment_rotate(parent, node);
+				parent = node;
+				tmp = node->rb_left;
+			}
+
+			/* Case 3 - left rotate at gparent */
+			WRITE_ONCE(gparent->rb_right, tmp); /* == parent->rb_left */
+			WRITE_ONCE(parent->rb_left, gparent);
+			if (tmp)
+				rb_set_parent_color(tmp, gparent, RB_BLACK);
+			__rb_rotate_set_parents(gparent, parent, root, RB_RED);
+			augment_rotate(gparent, parent);
+			break;
+		}
+	}
+}
+
+/*
+ * Inline version for rb_erase() use - we want to be able to inline
+ * and eliminate the dummy_rotate callback there
+ */
+static __always_inline void
+____rb_erase_color(struct rb_node *parent, struct rb_root *root,
+	void (*augment_rotate)(struct rb_node *old, struct rb_node *new))
+{
+	struct rb_node *node = NULL, *sibling, *tmp1, *tmp2;
+
+	while (true) {
+		/*
+		 * Loop invariants:
+		 * - node is black (or NULL on first iteration)
+		 * - node is not the root (parent is not NULL)
+		 * - All leaf paths going through parent and node have a
+		 *   black node count that is 1 lower than other leaf paths.
+		 */
+		sibling = parent->rb_right;
+		if (node != sibling) {	/* node == parent->rb_left */
+			if (rb_is_red(sibling)) {
+				/*
+				 * Case 1 - left rotate at parent
+				 *
+				 *     P               S
+				 *    / \             / \
+				 *   N   s    -->    p   Sr
+				 *      / \         / \
+				 *     Sl  Sr      N   Sl
+				 */
+				tmp1 = sibling->rb_left;
+				WRITE_ONCE(parent->rb_right, tmp1);
+				WRITE_ONCE(sibling->rb_left, parent);
+				rb_set_parent_color(tmp1, parent, RB_BLACK);
+				__rb_rotate_set_parents(parent, sibling, root,
+							RB_RED);
+				augment_rotate(parent, sibling);
+				sibling = tmp1;
+			}
+			tmp1 = sibling->rb_right;
+			if (!tmp1 || rb_is_black(tmp1)) {
+				tmp2 = sibling->rb_left;
+				if (!tmp2 || rb_is_black(tmp2)) {
+					/*
+					 * Case 2 - sibling color flip
+					 * (p could be either color here)
+					 *
+					 *    (p)           (p)
+					 *    / \           / \
+					 *   N   S    -->  N   s
+					 *      / \           / \
+					 *     Sl  Sr        Sl  Sr
+					 *
+					 * This leaves us violating 5) which
+					 * can be fixed by flipping p to black
+					 * if it was red, or by recursing at p.
+					 * p is red when coming from Case 1.
+					 */
+					rb_set_parent_color(sibling, parent,
+							    RB_RED);
+					if (rb_is_red(parent))
+						rb_set_black(parent);
+					else {
+						node = parent;
+						parent = rb_parent(node);
+						if (parent)
+							continue;
+					}
+					break;
+				}
+				/*
+				 * Case 3 - right rotate at sibling
+				 * (p could be either color here)
+				 *
+				 *   (p)           (p)
+				 *   / \           / \
+				 *  N   S    -->  N   sl
+				 *     / \             \
+				 *    sl  Sr            S
+				 *                       \
+				 *                        Sr
+				 *
+				 * Note: p might be red, and then both
+				 * p and sl are red after rotation(which
+				 * breaks property 4). This is fixed in
+				 * Case 4 (in __rb_rotate_set_parents()
+				 *         which set sl the color of p
+				 *         and set p RB_BLACK)
+				 *
+				 *   (p)            (sl)
+				 *   / \            /  \
+				 *  N   sl   -->   P    S
+				 *       \        /      \
+				 *        S      N        Sr
+				 *         \
+				 *          Sr
+				 */
+				tmp1 = tmp2->rb_right;
+				WRITE_ONCE(sibling->rb_left, tmp1);
+				WRITE_ONCE(tmp2->rb_right, sibling);
+				WRITE_ONCE(parent->rb_right, tmp2);
+				if (tmp1)
+					rb_set_parent_color(tmp1, sibling,
+							    RB_BLACK);
+				augment_rotate(sibling, tmp2);
+				tmp1 = sibling;
+				sibling = tmp2;
+			}
+			/*
+			 * Case 4 - left rotate at parent + color flips
+			 * (p and sl could be either color here.
+			 *  After rotation, p becomes black, s acquires
+			 *  p's color, and sl keeps its color)
+			 *
+			 *      (p)             (s)
+			 *      / \             / \
+			 *     N   S     -->   P   Sr
+			 *        / \         / \
+			 *      (sl) sr      N  (sl)
+			 */
+			tmp2 = sibling->rb_left;
+			WRITE_ONCE(parent->rb_right, tmp2);
+			WRITE_ONCE(sibling->rb_left, parent);
+			rb_set_parent_color(tmp1, sibling, RB_BLACK);
+			if (tmp2)
+				rb_set_parent(tmp2, parent);
+			__rb_rotate_set_parents(parent, sibling, root,
+						RB_BLACK);
+			augment_rotate(parent, sibling);
+			break;
+		} else {
+			sibling = parent->rb_left;
+			if (rb_is_red(sibling)) {
+				/* Case 1 - right rotate at parent */
+				tmp1 = sibling->rb_right;
+				WRITE_ONCE(parent->rb_left, tmp1);
+				WRITE_ONCE(sibling->rb_right, parent);
+				rb_set_parent_color(tmp1, parent, RB_BLACK);
+				__rb_rotate_set_parents(parent, sibling, root,
+							RB_RED);
+				augment_rotate(parent, sibling);
+				sibling = tmp1;
+			}
+			tmp1 = sibling->rb_left;
+			if (!tmp1 || rb_is_black(tmp1)) {
+				tmp2 = sibling->rb_right;
+				if (!tmp2 || rb_is_black(tmp2)) {
+					/* Case 2 - sibling color flip */
+					rb_set_parent_color(sibling, parent,
+							    RB_RED);
+					if (rb_is_red(parent))
+						rb_set_black(parent);
+					else {
+						node = parent;
+						parent = rb_parent(node);
+						if (parent)
+							continue;
+					}
+					break;
+				}
+				/* Case 3 - left rotate at sibling */
+				tmp1 = tmp2->rb_left;
+				WRITE_ONCE(sibling->rb_right, tmp1);
+				WRITE_ONCE(tmp2->rb_left, sibling);
+				WRITE_ONCE(parent->rb_left, tmp2);
+				if (tmp1)
+					rb_set_parent_color(tmp1, sibling,
+							    RB_BLACK);
+				augment_rotate(sibling, tmp2);
+				tmp1 = sibling;
+				sibling = tmp2;
+			}
+			/* Case 4 - right rotate at parent + color flips */
+			tmp2 = sibling->rb_right;
+			WRITE_ONCE(parent->rb_left, tmp2);
+			WRITE_ONCE(sibling->rb_right, parent);
+			rb_set_parent_color(tmp1, sibling, RB_BLACK);
+			if (tmp2)
+				rb_set_parent(tmp2, parent);
+			__rb_rotate_set_parents(parent, sibling, root,
+						RB_BLACK);
+			augment_rotate(parent, sibling);
+			break;
+		}
+	}
+}
+
+/* Non-inline version for rb_erase_augmented() use */
+void __rb_erase_color(struct rb_node *parent, struct rb_root *root,
+	void (*augment_rotate)(struct rb_node *old, struct rb_node *new))
+{
+	____rb_erase_color(parent, root, augment_rotate);
+}
+
+/*
+ * Non-augmented rbtree manipulation functions.
+ *
+ * We use dummy augmented callbacks here, and have the compiler optimize them
+ * out of the rb_insert_color() and rb_erase() function definitions.
+ */
+
+static inline void dummy_propagate(__attribute__((unused)) struct rb_node *node, __attribute__((unused)) struct rb_node *stop) {}
+static inline void dummy_copy(__attribute__((unused)) struct rb_node *old, __attribute__((unused)) struct rb_node *new) {}
+static inline void dummy_rotate(__attribute__((unused)) struct rb_node *old, __attribute__((unused)) struct rb_node *new) {}
+
+static const struct rb_augment_callbacks dummy_callbacks = {
+	.propagate = dummy_propagate,
+	.copy = dummy_copy,
+	.rotate = dummy_rotate
+};
+
+void rb_insert_color(struct rb_node *node, struct rb_root *root)
+{
+	__rb_insert(node, root, false, NULL, dummy_rotate);
+}
+
+void rb_erase(struct rb_node *node, struct rb_root *root)
+{
+	struct rb_node *rebalance;
+	rebalance = __rb_erase_augmented(node, root,
+					 NULL, &dummy_callbacks);
+	if (rebalance)
+		____rb_erase_color(rebalance, root, dummy_rotate);
+}
+
+void rb_insert_color_cached(struct rb_node *node,
+			    struct rb_root_cached *root, bool leftmost)
+{
+	__rb_insert(node, &root->rb_root, leftmost,
+		    &root->rb_leftmost, dummy_rotate);
+}
+
+void rb_erase_cached(struct rb_node *node, struct rb_root_cached *root)
+{
+	struct rb_node *rebalance;
+	rebalance = __rb_erase_augmented(node, &root->rb_root,
+					 &root->rb_leftmost, &dummy_callbacks);
+	if (rebalance)
+		____rb_erase_color(rebalance, &root->rb_root, dummy_rotate);
+}
+
+/*
+ * Augmented rbtree manipulation functions.
+ *
+ * This instantiates the same __always_inline functions as in the non-augmented
+ * case, but this time with user-defined callbacks.
+ */
+
+void __rb_insert_augmented(struct rb_node *node, struct rb_root *root,
+			   bool newleft, struct rb_node **leftmost,
+	void (*augment_rotate)(struct rb_node *old, struct rb_node *new))
+{
+	__rb_insert(node, root, newleft, leftmost, augment_rotate);
+}
+
+/*
+ * This function returns the first node (in sort order) of the tree.
+ */
+struct rb_node * __attribute__ ((pure))
+rb_first(const struct rb_root *root)
+{
+	struct rb_node	*n;
+
+	n = root->rb_node;
+	if (!n)
+		return NULL;
+	while (n->rb_left)
+		n = n->rb_left;
+	return n;
+}
+
+struct rb_node * __attribute__ ((pure))
+rb_last(const struct rb_root *root)
+{
+	struct rb_node	*n;
+
+	n = root->rb_node;
+	if (!n)
+		return NULL;
+	while (n->rb_right)
+		n = n->rb_right;
+	return n;
+}
+
+struct rb_node * __attribute__ ((pure))
+rb_next(const struct rb_node *node)
+{
+	struct rb_node *parent;
+	struct rb_node *node1;
+
+	if (RB_EMPTY_NODE(node))
+		return NULL;
+
+	/*
+	 * If we have a right-hand child, go down and then left as far
+	 * as we can.
+	 */
+	if (node->rb_right) {
+		node1 = node->rb_right;
+		while (node1->rb_left)
+			node1=node1->rb_left;
+		return node1;
+	}
+
+	/*
+	 * No right-hand children. Everything down and left is smaller than us,
+	 * so any 'next' node must be in the general direction of our parent.
+	 * Go up the tree; any time the ancestor is a right-hand child of its
+	 * parent, keep going up. First time it's a left-hand child of its
+	 * parent, said parent is our 'next' node.
+	 */
+	while ((parent = rb_parent(node)) && node == parent->rb_right)
+		node = parent;
+
+	return parent;
+}
+
+struct rb_node * __attribute__ ((pure))
+rb_prev(const struct rb_node *node)
+{
+	struct rb_node *parent;
+	struct rb_node *node1;
+
+	if (RB_EMPTY_NODE(node))
+		return NULL;
+
+	/*
+	 * If we have a left-hand child, go down and then right as far
+	 * as we can.
+	 */
+	if (node->rb_left) {
+		node1 = node->rb_left;
+		while (node1->rb_right)
+			node1=node1->rb_right;
+		return node1;
+	}
+
+	/*
+	 * No left-hand children. Go up till we find an ancestor which
+	 * is a right-hand child of its parent.
+	 */
+	while ((parent = rb_parent(node)) && node == parent->rb_left)
+		node = parent;
+
+	return parent;
+}
+
+void rb_replace_node(struct rb_node *victim, struct rb_node *new,
+		     struct rb_root *root)
+{
+	struct rb_node *parent = rb_parent(victim);
+
+	/* Copy the pointers/colour from the victim to the replacement */
+	*new = *victim;
+
+	/* Set the surrounding nodes to point to the replacement */
+	if (victim->rb_left)
+		rb_set_parent(victim->rb_left, new);
+	if (victim->rb_right)
+		rb_set_parent(victim->rb_right, new);
+	__rb_change_child(victim, new, parent, root);
+}
+
+void rb_replace_node_cached(struct rb_node *victim, struct rb_node *new,
+			    struct rb_root_cached *root)
+{
+	rb_replace_node(victim, new, &root->rb_root);
+
+	if (root->rb_leftmost == victim)
+		root->rb_leftmost = new;
+}
+
+#ifdef _INCLUDE_UNUSED_CODE_
+void rb_replace_node_rcu(struct rb_node *victim, struct rb_node *new,
+			 struct rb_root *root)
+{
+	struct rb_node *parent = rb_parent(victim);
+
+	/* Copy the pointers/colour from the victim to the replacement */
+	*new = *victim;
+
+	/* Set the surrounding nodes to point to the replacement */
+	if (victim->rb_left)
+		rb_set_parent(victim->rb_left, new);
+	if (victim->rb_right)
+		rb_set_parent(victim->rb_right, new);
+
+	/* Set the parent's pointer to the new node last after an RCU barrier
+	 * so that the pointers onwards are seen to be set correctly when doing
+	 * an RCU walk over the tree.
+	 */
+	__rb_change_child_rcu(victim, new, parent, root);
+}
+#endif
+
+static struct rb_node * __attribute__ ((pure))
+rb_left_deepest_node(struct rb_node *node)
+{
+	for (;;) {
+		if (node->rb_left)
+			node = node->rb_left;
+		else if (node->rb_right)
+			node = node->rb_right;
+		else
+			return node;
+	}
+}
+
+struct rb_node * __attribute__ ((pure))
+rb_next_postorder(const struct rb_node *node)
+{
+	struct rb_node *parent;
+	if (!node)
+		return NULL;
+	parent = rb_parent(node);
+
+	/* If we're sitting on node, we've already seen our children */
+	if (parent && node == parent->rb_left && parent->rb_right) {
+		/* If we are the parent's left node, go to the parent's right
+		 * node then all the way down to the left */
+		return rb_left_deepest_node(parent->rb_right);
+	} else
+		/* Otherwise we are the parent's right node, and the parent
+		 * should be next */
+		return parent;
+}
+
+struct rb_node * __attribute__ ((pure))
+rb_first_postorder(const struct rb_root *root)
+{
+	if (!root->rb_node)
+		return NULL;
+
+	return rb_left_deepest_node(root->rb_node);
+}
diff --git a/tools/keepalived/lib/rbtree.h b/tools/keepalived/lib/rbtree.h
new file mode 100644
index 000000000..b19597f89
--- /dev/null
+++ b/tools/keepalived/lib/rbtree.h
@@ -0,0 +1,400 @@
+/*
+  Red Black Trees
+  (C) 1999  Andrea Arcangeli <andrea@suse.de>
+
+  This program is free software; you can redistribute it and/or modify
+  it under the terms of the GNU General Public License as published by
+  the Free Software Foundation; either version 2 of the License, or
+  (at your option) any later version.
+
+  This program is distributed in the hope that it will be useful,
+  but WITHOUT ANY WARRANTY; without even the implied warranty of
+  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+  GNU General Public License for more details.
+
+  You should have received a copy of the GNU General Public License
+  along with this program; if not, write to the Free Software
+  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+
+  linux/include/linux/rbtree.h
+
+  To use rbtrees you'll have to implement your own insert and search cores.
+  This will avoid us to use callbacks and to drop drammatically performances.
+  I know it's not the cleaner way,  but in C (not in C++) to get
+  performances and genericity...
+
+  See Documentation/rbtree.txt for documentation and samples.
+*/
+
+#ifndef	_LINUX_RBTREE_H
+#define	_LINUX_RBTREE_H
+
+#include <stdbool.h>
+
+#include "container.h"
+
+typedef struct rb_node {
+	unsigned long  __rb_parent_color;
+	struct rb_node *rb_right;
+	struct rb_node *rb_left;
+} rb_node_t;
+
+typedef struct rb_root {
+	struct rb_node *rb_node;
+} rb_root_t;
+
+/*
+ * Leftmost-cached rbtrees.
+ *
+ * We do not cache the rightmost node based on footprint
+ * size vs number of potential users that could benefit
+ * from O(1) rb_last(). Just not worth it, users that want
+ * this feature can always implement the logic explicitly.
+ * Furthermore, users that want to cache both pointers may
+ * find it a bit asymmetric, but that's ok.
+ */
+typedef struct rb_root_cached {
+	struct rb_root rb_root;
+	struct rb_node *rb_leftmost;
+} rb_root_cached_t;
+
+
+#define rb_parent(r)   ((struct rb_node *)((r)->__rb_parent_color & ~3))
+
+#define RB_ROOT	(struct rb_root) { NULL, }
+#define RB_ROOT_CACHED (struct rb_root_cached) { {NULL, }, NULL }
+#define	rb_entry(ptr, type, member) container_of(ptr, type, member)
+#define	rb_entry_const(ptr, type, member) container_of_const(ptr, type, member)
+
+#define RB_EMPTY_ROOT(root)  (((root)->rb_node) == NULL)
+
+/* 'empty' nodes are nodes that are known not to be inserted in an rbtree */
+#define RB_EMPTY_NODE(node)  \
+	((node)->__rb_parent_color == (unsigned long)(node))
+#define RB_CLEAR_NODE(node)  \
+	((node)->__rb_parent_color = (unsigned long)(node))
+
+
+extern void rb_insert_color(struct rb_node *, struct rb_root *);
+extern void rb_erase(struct rb_node *, struct rb_root *);
+
+
+/* Find logical next and previous nodes in a tree */
+extern struct rb_node *rb_next(const struct rb_node *) __attribute__ ((pure));
+extern struct rb_node *rb_prev(const struct rb_node *) __attribute__ ((pure));
+extern struct rb_node *rb_first(const struct rb_root *) __attribute__ ((pure));
+extern struct rb_node *rb_last(const struct rb_root *) __attribute__ ((pure));
+
+extern void rb_insert_color_cached(struct rb_node *,
+				   struct rb_root_cached *, bool);
+extern void rb_erase_cached(struct rb_node *node, struct rb_root_cached *);
+/* Same as rb_first(), but O(1) */
+#define rb_first_cached(root) (root)->rb_leftmost
+
+/* Postorder iteration - always visit the parent after its children */
+extern struct rb_node *rb_first_postorder(const struct rb_root *) __attribute__ ((pure));
+extern struct rb_node *rb_next_postorder(const struct rb_node *) __attribute__ ((pure));
+
+/* Fast replacement of a single node without remove/rebalance/add/rebalance */
+extern void rb_replace_node(struct rb_node *victim, struct rb_node *new,
+			    struct rb_root *root);
+extern void rb_replace_node_rcu(struct rb_node *victim, struct rb_node *new,
+				struct rb_root *root);
+extern void rb_replace_node_cached(struct rb_node *victim, struct rb_node *new,
+				   struct rb_root_cached *root);
+
+static inline void rb_link_node(struct rb_node *node, struct rb_node *parent,
+				struct rb_node **rb_link)
+{
+	node->__rb_parent_color = (unsigned long)parent;
+	node->rb_left = node->rb_right = NULL;
+
+	*rb_link = node;
+}
+
+#ifdef _INCLUDE_UNUSED_CODE_
+static inline void rb_link_node_rcu(struct rb_node *node, struct rb_node *parent,
+				    struct rb_node **rb_link)
+{
+	node->__rb_parent_color = (unsigned long)parent;
+	node->rb_left = node->rb_right = NULL;
+
+	rcu_assign_pointer(*rb_link, node);
+}
+#endif
+
+#define rb_entry_safe(ptr, type, member) \
+	({ typeof(ptr) ____ptr = (ptr); \
+	   ____ptr ? rb_entry(____ptr, type, member) : NULL; \
+	})
+#define rb_entry_safe_const(ptr, type, member) \
+	({ typeof(ptr) ____ptr = (ptr); \
+	   ____ptr ? rb_entry_const(____ptr, type, member) : NULL; \
+	})
+
+/**
+ * rbtree_postorder_for_each_entry_safe - iterate in post-order over rb_root of
+ * given type allowing the backing memory of @pos to be invalidated
+ *
+ * @pos:	the 'type *' to use as a loop cursor.
+ * @n:		another 'type *' to use as temporary storage
+ * @root:	'rb_root *' of the rbtree.
+ * @field:	the name of the rb_node field within 'type'.
+ *
+ * rbtree_postorder_for_each_entry_safe() provides a similar guarantee as
+ * list_for_each_entry_safe() and allows the iteration to continue independent
+ * of changes to @pos by the body of the loop.
+ *
+ * Note, however, that it cannot handle other modifications that re-order the
+ * rbtree it is iterating over. This includes calling rb_erase() on @pos, as
+ * rb_erase() may rebalance the tree, causing us to miss some nodes.
+ */
+#define rbtree_postorder_for_each_entry_safe(pos, n, root, field) \
+	for (pos = rb_entry_safe(rb_first_postorder(root), typeof(*pos), field); \
+	     pos && ({ n = rb_entry_safe(rb_next_postorder(&pos->field), \
+			typeof(*pos), field); 1; }); \
+	     pos = n)
+
+/* The following are keepalived specific code */
+
+/**
+ * rb_search -	Search for a specific value in rbtree
+ * @root:	the rbtree root.
+ * @key:	the key to seach for in your rbtree.
+ * @member:	the name of the rb_node within the struct.
+ * @compar:	the name of the comparison function to use.
+ */
+#define rb_search(root, key, member, compar)				\
+({									\
+	rb_node_t *__n = (root)->rb_node;				\
+	typeof(key) __ret = NULL, __data;				\
+									\
+	while (__n) {							\
+		__data = rb_entry(__n, typeof(*key), member);		\
+		int __cmp = compar(key, __data);			\
+									\
+		if (__cmp < 0)						\
+			__n = __n->rb_left;				\
+		else if (__cmp > 0)					\
+			__n = __n->rb_right;				\
+		else {							\
+			__ret = __data;					\
+			break;						\
+		}							\
+	}								\
+	__ret;								\
+})
+
+/**
+ * rb_search_first -	Search for the first greater value in rbtree
+ * @root:		the rbtree root.
+ * @key:		the key to seach for in your rbtree.
+ * @member:		the name of the rb_node within the struct.
+ * @compar:		the name of the comparison function to use.
+ */
+#define rb_search_first(root, key, member, compar)			\
+({									\
+	rb_node_t *__n = (root)->rb_node;				\
+	typeof(key) __ret = NULL, __data;				\
+									\
+	while (__n) {							\
+		__data = rb_entry(__n, typeof(*key), member);		\
+		int __cmp = compar(key, __data);			\
+									\
+		if (__cmp < 0) {					\
+			__ret = __data;					\
+			__n = __n->rb_left;				\
+		} else if (__cmp > 0)					\
+			__n = __n->rb_right;				\
+		else {							\
+			__ret = __data;					\
+			break;						\
+		}							\
+	}								\
+	if (!__ret && !RB_EMPTY_ROOT(root))				\
+		__ret = rb_entry(rb_first(root), typeof(*key), member); \
+	__ret;								\
+})
+
+/**
+ * rb_insert -	Insert a new node into your rbtree
+ * @root:	the rbtree root.
+ * @new:	the node to insert.
+ * @member:	the name of the rb_node within the struct.
+ * @compar:	the name of the comparison function to use.
+ */
+#define rb_insert(root, new, member, compar)				\
+({									\
+	rb_node_t **__n = &(root)->rb_node, *__parent = NULL;		\
+	typeof(new) __old = NULL, __data;				\
+									\
+	while (*__n) {							\
+		__data = rb_entry(*__n, typeof(*new), member);		\
+		int __cmp = compar(new, __data);			\
+									\
+		__parent = *__n;					\
+		if (__cmp < 0)						\
+			__n = &((*__n)->rb_left);			\
+		else if (__cmp > 0)					\
+			__n = &((*__n)->rb_right);			\
+		else {							\
+			__old = __data;					\
+			break;						\
+		}							\
+	}								\
+									\
+	if (__old == NULL) {						\
+		/* Add new node and rebalance tree. */			\
+		rb_link_node(&((new)->member), __parent, __n);		\
+		rb_insert_color(&((new)->member), root);		\
+	}								\
+									\
+	__old;								\
+})
+
+/**
+ * rb_insert -	Insert & Sort a new node into your rbtree
+ * @root:	the rbtree root.
+ * @new:	the node to insert.
+ * @member:	the name of the rb_node within the struct.
+ * @compar:	the name of the comparison function to use.
+ */
+#define rb_insert_sort(root, new, member, compar)			\
+({									\
+	rb_node_t **__n = &(root)->rb_node, *__parent = NULL;		\
+	typeof(new) __data;						\
+									\
+	while (*__n) {							\
+		__data = rb_entry(*__n, typeof(*new), member);		\
+		int __cmp = compar(new, __data);			\
+									\
+		__parent = *__n;					\
+		if (__cmp <= 0)						\
+			__n = &((*__n)->rb_left);			\
+		else if (__cmp > 0)					\
+			__n = &((*__n)->rb_right);			\
+	}								\
+									\
+	/* Add new node and rebalance tree. */				\
+	rb_link_node(&((new)->member), __parent, __n);			\
+	rb_insert_color(&((new)->member), root);			\
+})
+
+/**
+ * rb_insert_cached - Insert & Sort a new node into your cached rbtree
+ * @root:       the rbtree root.
+ * @new:        the node to insert.
+ * @member:     the name of the rb_node within the struct.
+ * @compar:     the name of the comparison function to use.
+ */
+#define rb_insert_sort_cached(root, new, member, compar)		\
+({									\
+        rb_node_t **__n = &(root)->rb_root.rb_node, *__parent = NULL;	\
+        typeof(new) __data;						\
+									\
+        while (*__n) {							\
+                __data = rb_entry(*__n, typeof(*new), member);		\
+                int __cmp = compar(new, __data);			\
+									\
+                __parent = *__n;					\
+                if (__cmp <= 0)						\
+                        __n = &((*__n)->rb_left);			\
+                else if (__cmp > 0)					\
+                        __n = &((*__n)->rb_right);			\
+        }								\
+	/* Add new node and rebalance tree. */				\
+	rb_link_node(&((new)->member), __parent, __n);			\
+	rb_insert_color_cached(&((new)->member), root,			\
+				!(root)->rb_leftmost || __n == &(root)->rb_leftmost->rb_left);	\
+})
+
+/**
+ * rb_for_each_entry -  Iterate over rbtree of given type
+ * @pos:		the type * to use as a loop cursor.
+ * @root:		the rbtree root.
+ * @member:		the name of the rb_node within the struct.
+ */
+#define rb_for_each_entry(pos, root, member)				\
+	for (pos = rb_entry_safe(rb_first(root), typeof(*pos), member);	\
+	     pos; pos = rb_entry_safe(rb_next(&pos->member), typeof(*pos), member))
+#define rb_for_each_entry_const(pos, root, member)				\
+	for (pos = rb_entry_safe_const(rb_first(root), typeof(*pos), member);	\
+	     pos; pos = rb_entry_safe_const(rb_next(&pos->member), typeof(*pos), member))
+
+/**
+ * rb_for_each_entry_safe - 	Iterate over rbtree of given type safe against removal
+ * @pos:			the type * to use as a loop cursor.
+ * @root:			the rbtree root.
+ * @member:			the name of the rb_node within the struct.
+ */
+#define rb_for_each_entry_safe(pos, n, root, member)					\
+	for (pos = rb_entry_safe(rb_first(root), typeof(*pos), member);			\
+	     pos && (n = rb_entry_safe(rb_next(&pos->member), typeof(*n), member), 1);	\
+	     pos = n)
+
+/**
+ * rb_for_each_entry_cached -  Iterate over cached rbtree of given type
+ * @pos:                the type * to use as a loop cursor.
+ * @root:               the rbtree root.
+ * @member:             the name of the rb_node within the struct.
+ */
+#define rb_for_each_entry_cached(pos, root, member)				\
+	for (pos = rb_entry_safe(rb_first_cached(root), typeof(*pos), member);	\
+	     pos; pos = rb_entry_safe(rb_next(&pos->member), typeof(*pos), member))
+#define rb_for_each_entry_cached_const(pos, root, member)				\
+	for (pos = rb_entry_safe_const(rb_first_cached(root), typeof(*pos), member);	\
+	     pos; pos = rb_entry_safe_const(rb_next(&pos->member), typeof(*pos), member))
+
+/**
+ * rb_for_each_entry_safe_cached - Iterate over cached rbtree of given type
+ * @pos:                the type * to use as a loop cursor.
+ * @root:               the rbtree root.
+ * @member:             the name of the rb_node within the struct.
+ */
+#define rb_for_each_entry_safe_cached(pos, n, root, member)				\
+	for (pos = rb_entry_safe(rb_first_cached(root), typeof(*pos), member);		\
+	     pos && (n = rb_entry_safe(rb_next(&pos->member), typeof(*n), member), 1);	\
+	     pos = n)
+
+/**
+ * rb_for_each_entry_from -	Iterate over rbtree of given type from the given point
+ * @pos:			the type * to use as a loop cursor.
+ * @root:			the rbtree root.
+ * @member:			the name of the rb_node within the struct.
+ */
+#define rb_for_each_entry_from(pos, root, member)			\
+	for (rb_node_t *n = &pos->member;				\
+	     n && pos = rb_entry(n, typeof(*pos), member);		\
+	     n = rb_next(n))
+
+/**
+ * rb_move_cached -	Move node to new position in tree
+ * @root:		the rbtree root.
+ * @node:		the node to move.
+ * @member:		the name of the rb_node within the struct.
+ * @compar:		the name of the comparison function to use.
+ */
+#define rb_move_cached(root, node, member, compar)				\
+({										\
+	rb_node_t *prev_node, *next_node;					\
+	typeof(node) prev, next;						\
+										\
+	prev_node = rb_prev(&node->member);					\
+	next_node = rb_next(&node->member);					\
+										\
+	if (prev_node || next_node) {						\
+		prev = rb_entry_safe(prev_node, typeof(*node), member);		\
+		next = rb_entry_safe(next_node, typeof(*node), member);		\
+										\
+		/* If node is between our predecessor and sucessor,		\
+		 * it can stay where it is */					\
+		if ((prev && compar(prev, node) > 0) ||				\
+		    (next && compar(next, node) < 0)) {				\
+			/* Can this be optimised? */				\
+			rb_erase_cached(&node->member, root);			\
+			rb_insert_sort_cached(root, node, member, compar);	\
+		}								\
+	}									\
+})
+
+#endif	/* _LINUX_RBTREE_H */
diff --git a/tools/keepalived/lib/rbtree_augmented.h b/tools/keepalived/lib/rbtree_augmented.h
new file mode 100644
index 000000000..1a84df29e
--- /dev/null
+++ b/tools/keepalived/lib/rbtree_augmented.h
@@ -0,0 +1,294 @@
+/*
+  Red Black Trees
+  (C) 1999  Andrea Arcangeli <andrea@suse.de>
+  (C) 2002  David Woodhouse <dwmw2@infradead.org>
+  (C) 2012  Michel Lespinasse <walken@google.com>
+
+  This program is free software; you can redistribute it and/or modify
+  it under the terms of the GNU General Public License as published by
+  the Free Software Foundation; either version 2 of the License, or
+  (at your option) any later version.
+
+  This program is distributed in the hope that it will be useful,
+  but WITHOUT ANY WARRANTY; without even the implied warranty of
+  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+  GNU General Public License for more details.
+
+  You should have received a copy of the GNU General Public License
+  along with this program; if not, write to the Free Software
+  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+
+  linux/include/linux/rbtree_augmented.h
+*/
+
+#ifndef _LINUX_RBTREE_AUGMENTED_H
+#define _LINUX_RBTREE_AUGMENTED_H
+
+#include "rbtree.h"
+
+/*
+ * Please note - only struct rb_augment_callbacks and the prototypes for
+ * rb_insert_augmented() and rb_erase_augmented() are intended to be public.
+ * The rest are implementation details you are not expected to depend on.
+ *
+ * See Documentation/rbtree.txt for documentation and samples.
+ */
+
+#define WRITE_ONCE(a,b)	(a) = (b)
+
+struct rb_augment_callbacks {
+	void (*propagate)(struct rb_node *node, struct rb_node *stop);
+	void (*copy)(struct rb_node *old, struct rb_node *new);
+	void (*rotate)(struct rb_node *old, struct rb_node *new);
+};
+
+extern void __rb_insert_augmented(struct rb_node *node,
+				  struct rb_root *root,
+				  bool newleft, struct rb_node **leftmost,
+	void (*augment_rotate)(struct rb_node *old, struct rb_node *new));
+/*
+ * Fixup the rbtree and update the augmented information when rebalancing.
+ *
+ * On insertion, the user must update the augmented information on the path
+ * leading to the inserted node, then call rb_link_node() as usual and
+ * rb_augment_inserted() instead of the usual rb_insert_color() call.
+ * If rb_augment_inserted() rebalances the rbtree, it will callback into
+ * a user provided function to update the augmented information on the
+ * affected subtrees.
+ */
+static inline void
+rb_insert_augmented(struct rb_node *node, struct rb_root *root,
+		    const struct rb_augment_callbacks *augment)
+{
+	__rb_insert_augmented(node, root, false, NULL, augment->rotate);
+}
+
+static inline void
+rb_insert_augmented_cached(struct rb_node *node,
+			   struct rb_root_cached *root, bool newleft,
+			   const struct rb_augment_callbacks *augment)
+{
+	__rb_insert_augmented(node, &root->rb_root,
+			      newleft, &root->rb_leftmost, augment->rotate);
+}
+
+#define RB_DECLARE_CALLBACKS(rbstatic, rbname, rbstruct, rbfield,	\
+			     rbtype, rbaugmented, rbcompute)		\
+static inline void							\
+rbname ## _propagate(struct rb_node *rb, struct rb_node *stop)		\
+{									\
+	while (rb != stop) {						\
+		rbstruct *node = rb_entry(rb, rbstruct, rbfield);	\
+		rbtype augmented = rbcompute(node);			\
+		if (node->rbaugmented == augmented)			\
+			break;						\
+		node->rbaugmented = augmented;				\
+		rb = rb_parent(&node->rbfield);				\
+	}								\
+}									\
+static inline void							\
+rbname ## _copy(struct rb_node *rb_old, struct rb_node *rb_new)		\
+{									\
+	rbstruct *old = rb_entry(rb_old, rbstruct, rbfield);		\
+	rbstruct *new = rb_entry(rb_new, rbstruct, rbfield);		\
+	new->rbaugmented = old->rbaugmented;				\
+}									\
+static void								\
+rbname ## _rotate(struct rb_node *rb_old, struct rb_node *rb_new)	\
+{									\
+	rbstruct *old = rb_entry(rb_old, rbstruct, rbfield);		\
+	rbstruct *new = rb_entry(rb_new, rbstruct, rbfield);		\
+	new->rbaugmented = old->rbaugmented;				\
+	old->rbaugmented = rbcompute(old);				\
+}									\
+rbstatic const struct rb_augment_callbacks rbname = {			\
+	.propagate = rbname ## _propagate,				\
+	.copy = rbname ## _copy,					\
+	.rotate = rbname ## _rotate					\
+};
+
+
+#define	RB_RED		0
+#define	RB_BLACK	1
+
+#define __rb_parent(pc)    ((struct rb_node *)(pc & ~3))
+
+#define __rb_color(pc)     ((pc) & 1)
+#define __rb_is_black(pc)  __rb_color(pc)
+#define __rb_is_red(pc)    (!__rb_color(pc))
+#define rb_color(rb)       __rb_color((rb)->__rb_parent_color)
+#define rb_is_red(rb)      __rb_is_red((rb)->__rb_parent_color)
+#define rb_is_black(rb)    __rb_is_black((rb)->__rb_parent_color)
+
+static inline void rb_set_parent(struct rb_node *rb, struct rb_node *p)
+{
+	rb->__rb_parent_color = rb_color(rb) | (unsigned long)p;
+}
+
+static inline void rb_set_parent_color(struct rb_node *rb,
+				       struct rb_node *p, int color)
+{
+	rb->__rb_parent_color = (unsigned long)p | color;
+}
+
+static inline void
+__rb_change_child(struct rb_node *old, struct rb_node *new,
+		  struct rb_node *parent, struct rb_root *root)
+{
+	if (parent) {
+		if (parent->rb_left == old)
+			WRITE_ONCE(parent->rb_left, new);
+		else
+			WRITE_ONCE(parent->rb_right, new);
+	} else
+		WRITE_ONCE(root->rb_node, new);
+}
+
+#ifdef _INCLUDE_UNUSED_CODE_
+static inline void
+__rb_change_child_rcu(struct rb_node *old, struct rb_node *new,
+		      struct rb_node *parent, struct rb_root *root)
+{
+	if (parent) {
+		if (parent->rb_left == old)
+			rcu_assign_pointer(parent->rb_left, new);
+		else
+			rcu_assign_pointer(parent->rb_right, new);
+	} else
+		rcu_assign_pointer(root->rb_node, new);
+}
+#endif
+
+extern void __rb_erase_color(struct rb_node *parent, struct rb_root *root,
+	void (*augment_rotate)(struct rb_node *old, struct rb_node *new));
+
+static __always_inline struct rb_node *
+__rb_erase_augmented(struct rb_node *node, struct rb_root *root,
+		     struct rb_node **leftmost,
+		     const struct rb_augment_callbacks *augment)
+{
+	struct rb_node *child = node->rb_right;
+	struct rb_node *tmp = node->rb_left;
+	struct rb_node *parent, *rebalance;
+	unsigned long pc;
+
+	if (leftmost && node == *leftmost)
+		*leftmost = rb_next(node);
+
+	if (!tmp) {
+		/*
+		 * Case 1: node to erase has no more than 1 child (easy!)
+		 *
+		 * Note that if there is one child it must be red due to 5)
+		 * and node must be black due to 4). We adjust colors locally
+		 * so as to bypass __rb_erase_color() later on.
+		 */
+		pc = node->__rb_parent_color;
+		parent = __rb_parent(pc);
+		__rb_change_child(node, child, parent, root);
+		if (child) {
+			child->__rb_parent_color = pc;
+			rebalance = NULL;
+		} else
+			rebalance = __rb_is_black(pc) ? parent : NULL;
+		tmp = parent;
+	} else if (!child) {
+		/* Still case 1, but this time the child is node->rb_left */
+		tmp->__rb_parent_color = pc = node->__rb_parent_color;
+		parent = __rb_parent(pc);
+		__rb_change_child(node, tmp, parent, root);
+		rebalance = NULL;
+		tmp = parent;
+	} else {
+		struct rb_node *successor = child, *child2;
+
+		tmp = child->rb_left;
+		if (!tmp) {
+			/*
+			 * Case 2: node's successor is its right child
+			 *
+			 *    (n)          (s)
+			 *    / \          / \
+			 *  (x) (s)  ->  (x) (c)
+			 *        \
+			 *        (c)
+			 */
+			parent = successor;
+			child2 = successor->rb_right;
+
+			augment->copy(node, successor);
+		} else {
+			/*
+			 * Case 3: node's successor is leftmost under
+			 * node's right child subtree
+			 *
+			 *    (n)          (s)
+			 *    / \          / \
+			 *  (x) (y)  ->  (x) (y)
+			 *      /            /
+			 *    (p)          (p)
+			 *    /            /
+			 *  (s)          (c)
+			 *    \
+			 *    (c)
+			 */
+			do {
+				parent = successor;
+				successor = tmp;
+				tmp = tmp->rb_left;
+			} while (tmp);
+			child2 = successor->rb_right;
+			WRITE_ONCE(parent->rb_left, child2);
+			WRITE_ONCE(successor->rb_right, child);
+			rb_set_parent(child, successor);
+
+			augment->copy(node, successor);
+			augment->propagate(parent, successor);
+		}
+
+		tmp = node->rb_left;
+		WRITE_ONCE(successor->rb_left, tmp);
+		rb_set_parent(tmp, successor);
+
+		pc = node->__rb_parent_color;
+		tmp = __rb_parent(pc);
+		__rb_change_child(node, successor, tmp, root);
+
+		if (child2) {
+			successor->__rb_parent_color = pc;
+			rb_set_parent_color(child2, parent, RB_BLACK);
+			rebalance = NULL;
+		} else {
+			unsigned long pc2 = successor->__rb_parent_color;
+			successor->__rb_parent_color = pc;
+			rebalance = __rb_is_black(pc2) ? parent : NULL;
+		}
+		tmp = successor;
+	}
+
+	augment->propagate(tmp, NULL);
+	return rebalance;
+}
+
+static __always_inline void
+rb_erase_augmented(struct rb_node *node, struct rb_root *root,
+		   const struct rb_augment_callbacks *augment)
+{
+	struct rb_node *rebalance = __rb_erase_augmented(node, root,
+							 NULL, augment);
+	if (rebalance)
+		__rb_erase_color(rebalance, root, augment->rotate);
+}
+
+static __always_inline void
+rb_erase_augmented_cached(struct rb_node *node, struct rb_root_cached *root,
+			  const struct rb_augment_callbacks *augment)
+{
+	struct rb_node *rebalance = __rb_erase_augmented(node, &root->rb_root,
+							 &root->rb_leftmost,
+							 augment);
+	if (rebalance)
+		__rb_erase_color(rebalance, &root->rb_root, augment->rotate);
+}
+
+#endif	/* _LINUX_RBTREE_AUGMENTED_H */
diff --git a/tools/keepalived/lib/rttables.c b/tools/keepalived/lib/rttables.c
new file mode 100644
index 000000000..ea89c5342
--- /dev/null
+++ b/tools/keepalived/lib/rttables.c
@@ -0,0 +1,436 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Routing table names parser/reader. Place into the dynamic
+ *              data structure representation the table names and ids.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+#include "config.h"
+
+#include <errno.h>
+#include <stdlib.h>
+#include <string.h>
+#include <sys/socket.h>
+#include <linux/rtnetlink.h>
+
+#include "list.h"
+#include "memory.h"
+#include "logger.h"
+#include "parser.h"
+#include "rttables.h"
+
+#define IPROUTE2_DIR	"/etc/iproute2/"
+
+#ifdef _HAVE_FIB_ROUTING_
+#define RT_TABLES_FILE	IPROUTE2_DIR "rt_tables"
+#define	RT_DSFIELD_FILE IPROUTE2_DIR "rt_dsfield"
+#define	RT_REALMS_FILE	IPROUTE2_DIR "rt_realms"
+#define	RT_PROTOS_FILE	IPROUTE2_DIR "rt_protos"
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+#define	RT_GROUPS_FILE	IPROUTE2_DIR "group"
+#endif
+#endif
+#define	RT_SCOPES_FILE	IPROUTE2_DIR "rt_scopes"
+
+struct rt_entry {
+	unsigned int id;
+	const char *name;
+} ;
+typedef struct rt_entry rt_entry_t;
+
+#ifdef _HAVE_FIB_ROUTING_
+static rt_entry_t const rtntypes[] = {
+	{ RTN_LOCAL, "local"},
+	{ RTN_NAT, "nat"},
+	{ RTN_BROADCAST, "broadcast"},
+	{ RTN_BROADCAST, "brd"},
+	{ RTN_ANYCAST, "anycast"},
+	{ RTN_MULTICAST, "multicast"},
+	{ RTN_PROHIBIT, "prohibit"},
+	{ RTN_UNREACHABLE, "unreachable"},
+	{ RTN_BLACKHOLE, "blackhole"},
+	{ RTN_XRESOLVE, "xresolve"},
+	{ RTN_UNICAST, "unicast"},
+	{ RTN_THROW, "throw"},
+	{ 0, NULL},
+};
+
+static rt_entry_t const rtprot_default[] = {
+	{ RTPROT_UNSPEC, "none"},
+	{ RTPROT_REDIRECT, "redirect"},
+	{ RTPROT_KERNEL, "kernel"},
+	{ RTPROT_BOOT, "boot"},
+	{ RTPROT_STATIC, "static"},
+
+	{ RTPROT_GATED, "gated"},
+	{ RTPROT_RA, "ra"},
+	{ RTPROT_MRT, "mrt"},
+	{ RTPROT_ZEBRA, "zebra"},
+	{ RTPROT_BIRD, "bird"},
+#ifdef RTPROT_BABEL		/* Since Linux 3.19 */
+	{ RTPROT_BABEL, "babel"},
+#endif
+	{ RTPROT_DNROUTED, "dnrouted"},
+	{ RTPROT_XORP, "xorp"},
+	{ RTPROT_NTK, "ntk"},
+	{ RTPROT_DHCP, "dhcp"},
+	{ 0, NULL},
+};
+
+static rt_entry_t const rttable_default[] = {
+	{ RT_TABLE_DEFAULT, "default"},
+	{ RT_TABLE_MAIN, "main"},
+	{ RT_TABLE_LOCAL, "local"},
+	{ 0, NULL},
+};
+#endif
+
+static rt_entry_t const rtscope_default[] = {
+	{ RT_SCOPE_UNIVERSE, "global"},
+	{ RT_SCOPE_NOWHERE, "nowhere"},
+	{ RT_SCOPE_HOST, "host"},
+	{ RT_SCOPE_LINK, "link"},
+	{ RT_SCOPE_SITE, "site"},
+	{ 0, NULL},
+};
+
+#define	MAX_RT_BUF	128
+
+#ifdef _HAVE_FIB_ROUTING_
+static list rt_tables;
+static list rt_dsfields;
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+static list rt_groups;
+#endif
+static list rt_realms;
+static list rt_protos;
+#endif
+static list rt_scopes;
+
+static char ret_buf[11];	/* uint32_t in decimal */
+
+static void
+read_file(const char* file_name, list *l, uint32_t max)
+{
+	FILE *fp;
+	rt_entry_t *rte;
+	vector_t *strvec = NULL;
+	char buf[MAX_RT_BUF];
+	unsigned long id;
+	const char *number;
+	char *endptr;
+
+	fp = fopen(file_name, "r");
+	if (!fp)
+		return;
+
+	while (fgets(buf, MAX_RT_BUF, fp)) {
+		strvec = alloc_strvec(buf);
+
+		if (!strvec)
+			continue;
+
+		if (vector_size(strvec) != 2) {
+			free_strvec(strvec);
+			continue;
+		}
+
+		rte = MALLOC(sizeof(rt_entry_t));
+		if (!rte) {
+			free_strvec(strvec);
+			goto err;
+		}
+
+		number = strvec_slot(strvec, 0);
+		number += strspn(number, " \t");
+		id = strtoul(number, &endptr, 0);
+		if (*number == '-' || number == endptr || *endptr || id > max) {
+			FREE(rte);
+			free_strvec(strvec);
+			continue;
+		}
+		rte->id = (unsigned)id;
+
+		rte->name = STRDUP(strvec_slot(strvec, 1));
+		if (!rte->name) {
+			FREE(rte);
+			free_strvec(strvec);
+			goto err;
+		}
+
+		list_add(*l, rte);
+
+		free_strvec(strvec);
+	}
+
+	fclose(fp);
+
+	return;
+err:
+	fclose(fp);
+
+	if (strvec)
+		free_strvec(strvec);
+
+	free_list(l);
+
+	return;
+}
+
+void
+clear_rt_names(void)
+{
+#ifdef _HAVE_FIB_ROUTING_
+	free_list(&rt_tables);
+	free_list(&rt_dsfields);
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+	free_list(&rt_groups);
+#endif
+	free_list(&rt_realms);
+	free_list(&rt_protos);
+#endif
+	free_list(&rt_scopes);
+}
+
+static void
+free_rt_entry(void *e)
+{
+	rt_entry_t *rte = (rt_entry_t*)e;
+
+	if (rte->name)
+		FREE_CONST(rte->name);
+	FREE(rte);
+}
+
+static void
+dump_rt_entry(FILE *fp, const void *e)
+{
+	const rt_entry_t *rte = (const rt_entry_t *)e;
+
+	conf_write(fp, "rt_table %u, name %s", rte->id, rte->name);
+}
+
+static void
+add_default(list *l, const struct rt_entry* default_list)
+{
+	bool found;
+	rt_entry_t *rte;
+	element e;
+
+	for (;default_list->name; default_list++) {
+		for (e = LIST_HEAD(*l), found = false; e; ELEMENT_NEXT(e)) {
+			rte = ELEMENT_DATA(e);
+
+			if (rte->id == default_list->id) {
+				found = true;
+				break;
+			}
+		}
+
+		if (found)
+			continue;
+
+		rte = MALLOC(sizeof(rt_entry_t));
+		rte->name = STRDUP(default_list->name);
+		if (!rte->name) {
+			FREE(rte);
+			return;
+		}
+
+		rte->id = default_list->id;
+
+		list_add(*l, rte);
+	}
+}
+
+static void
+initialise_list(list *l, const char *file_name, const struct rt_entry *default_list, uint32_t max)
+{
+
+	if (*l)
+		return;
+
+	*l = alloc_list(free_rt_entry, dump_rt_entry);
+	if (!*l)
+		return;
+
+	read_file(file_name, l, max);
+
+	if (default_list)
+		add_default(l, default_list);
+}
+
+static bool
+find_entry(const char *name, unsigned int *id, list *l, const char* file_name, const struct rt_entry* default_list, uint32_t max)
+{
+	element e;
+	char	*endptr;
+	unsigned long l_id;
+
+	l_id = strtoul(name, &endptr, 0);
+	*id = (unsigned int)l_id;
+	if (endptr != name && *endptr == '\0')
+		return (*id <= max);
+
+	if (!(*l))
+		initialise_list(l, file_name, default_list, max);
+
+	if (LIST_ISEMPTY(*l))
+		return false;
+
+	for (e = LIST_HEAD(*l); e; ELEMENT_NEXT(e)) {
+		rt_entry_t *rte = ELEMENT_DATA(e);
+
+		if (!strcmp(rte->name, name)) {
+			*id = rte->id;
+			return true;
+		}
+	}
+	return false;
+}
+
+#ifdef _HAVE_FIB_ROUTING_
+bool
+find_rttables_table(const char *name, uint32_t *id)
+{
+	return find_entry(name, id, &rt_tables, RT_TABLES_FILE, rttable_default, RT_TABLE_MAX);
+}
+
+bool
+find_rttables_dsfield(const char *name, uint8_t *id)
+{
+	uint32_t val;
+	bool ret;
+
+	ret = find_entry(name, &val, &rt_dsfields, RT_DSFIELD_FILE, NULL, 255);
+	*id = val & 0xff;
+
+	return ret;
+}
+
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+bool
+find_rttables_group(const char *name, uint32_t *id)
+{
+	return find_entry(name, id, &rt_groups, RT_GROUPS_FILE, NULL, INT32_MAX);
+}
+#endif
+
+bool
+find_rttables_realms(const char *name, uint32_t *id)
+{
+	return find_entry(name, id, &rt_realms, RT_REALMS_FILE, NULL, 255);
+}
+
+bool
+find_rttables_proto(const char *name, uint8_t *id)
+{
+	uint32_t val;
+	bool ret;
+
+	ret = find_entry(name, &val, &rt_protos, RT_PROTOS_FILE, rtprot_default, 255);
+	*id = val & 0xff;
+
+	return ret;
+}
+
+bool
+find_rttables_rtntype(const char *str, uint8_t *id)
+{
+	char *end;
+	unsigned long res;
+	int i;
+
+	for (i = 0; rtntypes[i].name; i++) {
+		if (!strcmp(str, rtntypes[i].name)) {
+			*id = (uint8_t)rtntypes[i].id;
+			return true;
+		}
+	}
+
+	res = strtoul(str, &end, 0);
+	if (*end || res > 255 || str[0] == '-')
+		return false;
+
+	*id = (uint8_t)res;
+	return true;
+}
+#endif
+
+static const char *
+get_entry(unsigned int id, list* l, const char* file_name, const struct rt_entry* default_list, uint32_t max)
+{
+	element e;
+	const rt_entry_t *rte;
+
+
+	if (!(*l))
+		initialise_list(l, file_name, default_list, max);
+
+	if (!LIST_ISEMPTY(*l)) {
+		LIST_FOREACH(*l, rte, e) {
+			if (rte->id == id)
+				return rte->name;
+		}
+	}
+
+	snprintf(ret_buf, sizeof(ret_buf), "%u", id);
+	return ret_buf;
+}
+
+#ifdef _HAVE_FIB_ROUTING_
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+const char *
+get_rttables_group(uint32_t id)
+{
+	return get_entry(id, &rt_groups, RT_GROUPS_FILE, NULL, INT32_MAX);
+}
+#endif
+
+const char *
+get_rttables_rtntype(uint8_t val)
+{
+	int i;
+
+	for (i = 0; rtntypes[i].name; i++) {
+		if (val == rtntypes[i].id)
+			return rtntypes[i].name;
+	}
+
+	snprintf(ret_buf, sizeof(ret_buf), "%u", val);
+	return ret_buf;
+}
+#endif
+
+bool
+find_rttables_scope(const char *name, uint8_t *id)
+{
+	uint32_t val;
+	bool ret;
+
+	ret = find_entry(name, &val, &rt_scopes, RT_SCOPES_FILE, rtscope_default, 255);
+	*id = val & 0xff;
+
+	return ret;
+}
+
+const char *
+get_rttables_scope(uint32_t id)
+{
+	return get_entry(id, &rt_scopes, RT_SCOPES_FILE, rtscope_default, 255);
+}
diff --git a/tools/keepalived/lib/rttables.h b/tools/keepalived/lib/rttables.h
new file mode 100644
index 000000000..57a91f02a
--- /dev/null
+++ b/tools/keepalived/lib/rttables.h
@@ -0,0 +1,51 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        Routing table names parser/reader. Place into the dynamic
+ *              data structure representation the table names and ids.
+ *
+ * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _READ_RTTABLES_H
+#define _READ_RTTABLES_H
+
+#include <stdbool.h>
+#include <stdint.h>
+
+extern void clear_rt_names(void);
+#ifdef _HAVE_FIB_ROUTING_
+extern bool find_rttables_table(const char *, uint32_t *);
+extern bool find_rttables_dsfield(const char *, uint8_t *);
+extern bool find_rttables_realms(const char *, uint32_t *);
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+extern bool find_rttables_group(const char *, uint32_t *);
+#endif
+extern bool find_rttables_proto(const char *, uint8_t *);
+extern bool find_rttables_rtntype(const char *, uint8_t *);
+#endif
+extern bool find_rttables_scope(const char *, uint8_t *);
+
+extern const char *get_rttables_scope(uint32_t);
+#ifdef _HAVE_FIB_ROUTING_
+#if HAVE_DECL_FRA_SUPPRESS_IFGROUP
+extern const char *get_rttables_group(uint32_t);
+#endif
+extern const char *get_rttables_rtntype(uint8_t);
+#endif
+
+#endif
diff --git a/tools/keepalived/lib/scheduler.c b/tools/keepalived/lib/scheduler.c
index 19c801961..4f242e410 100644
--- a/tools/keepalived/lib/scheduler.c
+++ b/tools/keepalived/lib/scheduler.c
@@ -4,14 +4,14 @@
  *              a loadbalanced server pool using multi-layer checks.
  *
  * Part:        Scheduling framework. This code is highly inspired from
- *              the thread management routine (thread.c) present in the 
+ *              the thread management routine (thread.c) present in the
  *              very nice zebra project (http://www.zebra.org).
  *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
  *
- *              This program is distributed in the hope that it will be useful, 
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of 
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  *              See the GNU General Public License for more details.
  *
  *              This program is free software; you can redistribute it and/or
@@ -19,180 +19,899 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
 /* SNMP should be included first: it redefines "FREE" */
 #ifdef _WITH_SNMP_
 #include <net-snmp/net-snmp-config.h>
 #include <net-snmp/net-snmp-includes.h>
 #include <net-snmp/agent/net-snmp-agent-includes.h>
-#include <net-snmp/agent/snmp_vars.h>
 #undef FREE
 #endif
 
-#include <signal.h>
+#include <errno.h>
 #include <sys/wait.h>
-#include <sys/select.h>
+#include <sys/timerfd.h>
+#include <sys/epoll.h>
 #include <unistd.h>
+#ifdef HAVE_SIGNALFD
+#include <sys/signalfd.h>
+#endif
+#include <sys/utsname.h>
+#include <linux/version.h>
+
 #include "scheduler.h"
 #include "memory.h"
+#include "rbtree.h"
 #include "utils.h"
 #include "signals.h"
 #include "logger.h"
+#include "bitops.h"
+#include "git-commit.h"
+#include "timer.h"
+#if !HAVE_EPOLL_CREATE1 || !defined TFD_NONBLOCK
+#include "old_socket.h"
+#endif
+#include "assert_debug.h"
+#include "warnings.h"
+#include "utils.h"
+
+
+#ifdef THREAD_DUMP
+typedef struct _func_det {
+	const char *name;
+	thread_func_t func;
+	rb_node_t n;
+} func_det_t;
+#endif
 
 /* global vars */
 thread_master_t *master = NULL;
+#ifndef _DEBUG_
+prog_type_t prog_type;		/* Parent/VRRP/Checker process */
+#endif
+#ifdef _WITH_SNMP_
+bool snmp_running;		/* True if this process is running SNMP */
+#endif
 
-/* Make thread master. */
-thread_master_t *
-thread_make_master(void)
+/* local variables */
+static bool shutting_down;
+static int sav_argc;
+static char * const *sav_argv;
+#ifdef _EPOLL_DEBUG_
+bool do_epoll_debug;
+#endif
+#ifdef _EPOLL_THREAD_DUMP_
+bool do_epoll_thread_dump;
+#endif
+#ifdef THREAD_DUMP
+static rb_root_t funcs = RB_ROOT;
+#endif
+#ifdef _VRRP_FD_DEBUG_
+static void (*extra_threads_debug)(void);
+#endif
+
+
+/* Function that returns prog_name if pid is a known child */
+static char const * (*child_finder_name)(pid_t);
+
+#ifdef THREAD_DUMP
+static const char *
+get_thread_type_str(thread_type_t id)
 {
-	thread_master_t *new;
+	if (id == THREAD_READ) return "READ";
+	if (id == THREAD_WRITE) return "WRITE";
+	if (id == THREAD_TIMER) return "TIMER";
+	if (id == THREAD_TIMER_SHUTDOWN) return "TIMER_SHUTDOWN";
+	if (id == THREAD_EVENT) return "EVENT";
+	if (id == THREAD_CHILD) return "CHILD";
+	if (id == THREAD_READY) return "READY";
+	if (id == THREAD_UNUSED) return "UNUSED";
+	if (id == THREAD_WRITE_TIMEOUT) return "WRITE_TIMEOUT";
+	if (id == THREAD_READ_TIMEOUT) return "READ_TIMEOUT";
+	if (id == THREAD_CHILD_TIMEOUT) return "CHILD_TIMEOUT";
+	if (id == THREAD_CHILD_TERMINATED) return "CHILD_TERMINATED";
+	if (id == THREAD_TERMINATE_START) return "TERMINATE_START";
+	if (id == THREAD_TERMINATE) return "TERMINATE";
+	if (id == THREAD_READY_READ_FD) return "READY_READ_FD";
+	if (id == THREAD_READY_WRITE_FD) return "READY_WRITE_FD";
+	if (id == THREAD_READ_ERROR) return "READ_ERROR";
+	if (id == THREAD_WRITE_ERROR) return "WRITE_ERROR";
+#ifdef USE_SIGNAL_THREADS
+	if (id == THREAD_SIGNAL) return "SIGNAL";
+#endif
 
-	new = (thread_master_t *) MALLOC(sizeof (thread_master_t));
-	return new;
+	return "unknown";
 }
 
-/* Add a new thread to the list. */
-static void
-thread_list_add(thread_list_t * list, thread_t * thread)
+static inline int
+function_cmp(const func_det_t *func1, const func_det_t *func2)
 {
-	thread->next = NULL;
-	thread->prev = list->tail;
-	if (list->tail)
-		list->tail->next = thread;
-	else
-		list->head = thread;
-	list->tail = thread;
-	list->count++;
+	if (func1->func < func2->func)
+		return -1;
+	if (func1->func > func2->func)
+		return 1;
+	return 0;
+}
+
+static const char *
+get_function_name(thread_func_t func)
+{
+	func_det_t func_det = { .func = func };
+	func_det_t *match;
+	static char address[19];
+
+	if (!RB_EMPTY_ROOT(&funcs)) {
+		match = rb_search(&funcs, &func_det, n, function_cmp);
+		if (match)
+			return match->name;
+	}
+
+	snprintf(address, sizeof address, "%p", func);
+	return address;
+}
+
+const char *
+get_signal_function_name(void (*func)(void *, int))
+{
+	/* The cast should really be (int (*)(thread_t *))func, but gcc 8.1 produces
+	 * a warning with -Wcast-function-type, that the cast is to an incompatible
+	 * function type. Since we don't actually call the function, but merely use
+	 * it to compare function addresses, what we cast it do doesn't really matter */
+	return get_function_name((void *)func);
 }
 
-/* Add a new thread to the list. */
 void
-thread_list_add_before(thread_list_t * list, thread_t * point, thread_t * thread)
+register_thread_address(const char *func_name, thread_func_t func)
 {
-	thread->next = point;
-	thread->prev = point->prev;
-	if (point->prev)
-		point->prev->next = thread;
-	else
-		list->head = thread;
-	point->prev = thread;
-	list->count++;
+	func_det_t *func_det;
+
+	func_det = (func_det_t *) MALLOC(sizeof(func_det_t));
+	if (!func_det)
+		return;
+
+	func_det->name = func_name;
+	func_det->func = func;
+
+	rb_insert_sort(&funcs, func_det, n, function_cmp);
+}
+
+void
+register_signal_handler_address(const char *func_name, void (*func)(void *, int))
+{
+	/* See comment in get_signal_function_name() above */
+	register_thread_address(func_name, (void *)func);
+}
+
+void
+deregister_thread_addresses(void)
+{
+	func_det_t *func_det, *func_det_tmp;
+
+	if (RB_EMPTY_ROOT(&funcs))
+		return;
+
+	rb_for_each_entry_safe(func_det, func_det_tmp, &funcs, n) {
+		rb_erase(&func_det->n, &funcs);
+		FREE(func_det);
+	}
 }
+#endif
 
-/* Add a thread in the list sorted by timeval */
+#ifdef _VRRP_FD_DEBUG_
 void
-thread_list_add_timeval(thread_list_t * list, thread_t * thread)
+set_extra_threads_debug(void (*func)(void))
 {
-	thread_t *tt;
+	extra_threads_debug = func;
+}
+#endif
 
-	for (tt = list->head; tt; tt = tt->next) {
-		if (timer_cmp(thread->sands, tt->sands) <= 0)
+/* Move ready thread into ready queue */
+static int
+thread_move_ready(thread_master_t *m, rb_root_cached_t *root, thread_t *thread, int type)
+{
+	rb_erase_cached(&thread->n, root);
+	if (type == THREAD_CHILD_TIMEOUT)
+		rb_erase(&thread->rb_data, &master->child_pid);
+	INIT_LIST_HEAD(&thread->next);
+	list_add_tail(&thread->next, &m->ready);
+	if (thread->type != THREAD_TIMER_SHUTDOWN)
+		thread->type = type;
+	return 0;
+}
+
+/* Move ready thread into ready queue */
+static void
+thread_rb_move_ready(thread_master_t *m, rb_root_cached_t *root, int type)
+{
+	thread_t *thread, *thread_tmp;
+
+	rb_for_each_entry_safe_cached(thread, thread_tmp, root, n) {
+		if (thread->sands.tv_sec == TIMER_DISABLED || timercmp(&time_now, &thread->sands, <))
 			break;
+
+		if (type == THREAD_READ_TIMEOUT)
+			thread->event->read = NULL;
+		else if (type == THREAD_WRITE_TIMEOUT)
+			thread->event->write = NULL;
+		thread_move_ready(m, root, thread, type);
 	}
+}
 
-	if (tt)
-		thread_list_add_before(list, tt, thread);
-	else
-		thread_list_add(list, thread);
+/* Update timer value */
+static void
+thread_update_timer(rb_root_cached_t *root, timeval_t *timer_min)
+{
+	const thread_t *first;
+
+	if (!root->rb_root.rb_node)
+		return;
+
+	first = rb_entry(rb_first_cached(root), thread_t, n);
+
+	if (first->sands.tv_sec == TIMER_DISABLED)
+		return;
+
+	if (!timerisset(timer_min) ||
+	    timercmp(&first->sands, timer_min, <=))
+		*timer_min = first->sands;
 }
 
-/* Delete a thread from the list. */
-thread_t *
-thread_list_delete(thread_list_t * list, thread_t * thread)
+/* Compute the wait timer. Take care of timeouted fd */
+static void
+thread_set_timer(thread_master_t *m)
 {
-	if (thread->next)
-		thread->next->prev = thread->prev;
+	timeval_t timer_wait;
+	struct itimerspec its;
+
+	/* Prepare timer */
+	timerclear(&timer_wait);
+	thread_update_timer(&m->timer, &timer_wait);
+	thread_update_timer(&m->write, &timer_wait);
+	thread_update_timer(&m->read, &timer_wait);
+	thread_update_timer(&m->child, &timer_wait);
+
+	if (timerisset(&timer_wait)) {
+		/* Re-read the current time to get the maximum accuracy */
+		set_time_now();
+
+		/* Take care about monotonic clock */
+		timersub(&timer_wait, &time_now, &timer_wait);
+
+		if (timer_wait.tv_sec < 0) {
+			/* This will disable the timerfd */
+			timerclear(&timer_wait);
+		}
+	} else {
+		/* set timer to a VERY long time */
+		timer_wait.tv_sec = LONG_MAX;
+		timer_wait.tv_usec = 0;
+	}
+
+	its.it_value.tv_sec = timer_wait.tv_sec;
+	if (!timerisset(&timer_wait)) {
+		/* We could try to avoid doing the epoll_wait since
+		 * testing shows it takes about 4 microseconds
+		 * for the timer to expire. */
+		its.it_value.tv_nsec = 1;
+	}
 	else
-		list->tail = thread->prev;
-	if (thread->prev)
-		thread->prev->next = thread->next;
+		its.it_value.tv_nsec = timer_wait.tv_usec * 1000;
+
+	/* We don't want periodic timer expiry */
+	its.it_interval.tv_sec = its.it_interval.tv_nsec = 0;
+
+	timerfd_settime(m->timer_fd, 0, &its, NULL);
+
+#ifdef _EPOLL_DEBUG_
+	if (do_epoll_debug)
+		log_message(LOG_INFO, "Setting timer_fd %ld.%9.9ld", its.it_value.tv_sec, its.it_value.tv_nsec);
+#endif
+}
+
+static int
+thread_timerfd_handler(thread_ref_t thread)
+{
+	thread_master_t *m = thread->master;
+	uint64_t expired;
+	ssize_t len;
+
+	len = read(m->timer_fd, &expired, sizeof(expired));
+	if (len < 0)
+		log_message(LOG_ERR, "scheduler: Error reading on timerfd fd:%d (%m)", m->timer_fd);
+
+	/* Read, Write, Timer, Child thread. */
+	thread_rb_move_ready(m, &m->read, THREAD_READ_TIMEOUT);
+	thread_rb_move_ready(m, &m->write, THREAD_WRITE_TIMEOUT);
+	thread_rb_move_ready(m, &m->timer, THREAD_READY);
+	thread_rb_move_ready(m, &m->child, THREAD_CHILD_TIMEOUT);
+
+	/* Register next timerfd thread */
+	m->timer_thread = thread_add_read(m, thread_timerfd_handler, NULL, m->timer_fd, TIMER_NEVER, false);
+
+	return 0;
+}
+
+/* Child PID cmp helper */
+static inline int
+thread_child_pid_cmp(const thread_t *t1, const thread_t *t2)
+{
+	return t1->u.c.pid - t2->u.c.pid;
+}
+
+void
+set_child_finder_name(char const * (*func)(pid_t))
+{
+	child_finder_name = func;
+}
+
+void
+save_cmd_line_options(int argc, char * const *argv)
+{
+	sav_argc = argc;
+	sav_argv = argv;
+}
+
+#ifndef _DEBUG_
+static const char *
+get_end(const char *str, size_t max_len)
+{
+	size_t len = strlen(str);
+	const char *end;
+
+	if (len <= max_len)
+		return str + len;
+
+	end = str + max_len;
+	if (*end == ' ')
+		return end;
+
+	while (end > str && *--end != ' ');
+	if (end > str)
+		return end;
+
+	return str + max_len;
+}
+
+static void
+log_options(const char *option, const char *option_str, unsigned indent)
+{
+	const char *p = option_str;
+	size_t opt_len = strlen(option);
+	const char *end;
+	bool first_line = true;
+
+	while (*p) {
+		/* Skip leading spaces */
+		while (*p == ' ')
+			p++;
+
+		end = get_end(p, 100 - opt_len);
+		if (first_line) {
+			log_message(LOG_INFO, "%*s%s: %.*s", (int)indent, "", option, (int)(end - p), p);
+			first_line = false;
+		}
+		else
+			log_message(LOG_INFO, "%*s%.*s", (int)(indent + opt_len + 2), "", (int)(end - p), p);
+		p = end;
+	}
+}
+
+void
+log_command_line(unsigned indent)
+{
+	size_t len = 0;
+	char *log_str;
+	char *p;
+	int i;
+
+	if (!sav_argv)
+		return;
+
+	for (i = 0; i < sav_argc; i++)
+		len += strlen(sav_argv[i]) + 3;	/* Add opening and closing 's, and following space or '\0' */
+
+	log_str = MALLOC(len);
+
+RELAX_STRICT_OVERFLOW_START
+	for (i = 0, p = log_str; i < sav_argc; i++) {
+RELAX_STRICT_OVERFLOW_END
+		p += sprintf(p, "%s'%s'", i ? " " : "", sav_argv[i]);
+	}
+
+	log_options("Command line", log_str, indent);
+
+	FREE(log_str);
+}
+
+/* report_child_status returns true if the exit is a hard error, so unable to continue */
+bool
+report_child_status(int status, pid_t pid, char const *prog_name)
+{
+	char const *prog_id = NULL;
+	char pid_buf[12];	/* "pid 4194303" + '\0' - see definition of PID_MAX_LIMIT in include/linux/threads.h */
+	int exit_status ;
+
+	if (prog_name)
+		prog_id = prog_name;
+	else if (child_finder_name)
+		prog_id = child_finder_name(pid);
+
+	if (!prog_id) {
+		snprintf(pid_buf, sizeof(pid_buf), "pid %d", pid);
+		prog_id = pid_buf;
+	}
+
+	if (WIFEXITED(status)) {
+		exit_status = WEXITSTATUS(status);
+
+		/* Handle exit codes of vrrp or checker child */
+		if (exit_status == KEEPALIVED_EXIT_FATAL ||
+		    exit_status == KEEPALIVED_EXIT_CONFIG) {
+			log_message(LOG_INFO, "%s exited with permanent error %s. Terminating", prog_id, exit_status == KEEPALIVED_EXIT_CONFIG ? "CONFIG" : "FATAL" );
+			return true;
+		}
+
+		if (exit_status != EXIT_SUCCESS)
+			log_message(LOG_INFO, "%s exited with status %d", prog_id, exit_status);
+	} else if (WIFSIGNALED(status)) {
+		if (WTERMSIG(status) == SIGSEGV) {
+			struct utsname uname_buf;
+
+			log_message(LOG_INFO, "%s exited due to segmentation fault (SIGSEGV).", prog_id);
+			log_message(LOG_INFO, "  %s", "Please report a bug at https://github.com/acassen/keepalived/issues");
+			log_message(LOG_INFO, "  %s", "and include this log from when keepalived started, a description");
+			log_message(LOG_INFO, "  %s", "of what happened before the crash, your configuration file and the details below.");
+			log_message(LOG_INFO, "  %s", "Also provide the output of keepalived -v, what Linux distro and version");
+			log_message(LOG_INFO, "  %s", "you are running on, and whether keepalived is being run in a container or VM.");
+			log_message(LOG_INFO, "  %s", "A failure to provide all this information may mean the crash cannot be investigated.");
+			log_message(LOG_INFO, "  %s", "If you are able to provide a stack backtrace with gdb that would really help.");
+			log_message(LOG_INFO, "  Source version %s %s%s", PACKAGE_VERSION,
+#ifdef GIT_COMMIT
+									   ", git commit ", GIT_COMMIT
+#else
+									   "", ""
+#endif
+				   );
+			log_message(LOG_INFO, "  Built with kernel headers for Linux %d.%d.%d",
+						(LINUX_VERSION_CODE >> 16) & 0xff,
+						(LINUX_VERSION_CODE >>  8) & 0xff,
+						(LINUX_VERSION_CODE      ) & 0xff);
+			uname(&uname_buf);
+			log_message(LOG_INFO, "  Running on %s %s %s", uname_buf.sysname, uname_buf.release, uname_buf.version);
+			log_command_line(2);
+			log_options("configure options", KEEPALIVED_CONFIGURE_OPTIONS, 2);
+			log_options("Config options", CONFIGURATION_OPTIONS, 2);
+			log_options("System options", SYSTEM_OPTIONS, 2);
+
+//			if (__test_bit(DONT_RESPAWN_BIT, &debug))
+//				segv_termination = true;
+		}
+		else
+			log_message(LOG_INFO, "%s exited due to signal %d", prog_id, WTERMSIG(status));
+	}
+
+	return false;
+}
+#endif
+
+/* epoll related */
+static int
+thread_events_resize(thread_master_t *m, int delta)
+{
+	unsigned int new_size;
+
+	m->epoll_count += delta;
+	if (m->epoll_count < m->epoll_size)
+		return 0;
+
+	new_size = ((m->epoll_count / THREAD_EPOLL_REALLOC_THRESH) + 1);
+	new_size *= THREAD_EPOLL_REALLOC_THRESH;
+
+	if (m->epoll_events)
+		FREE(m->epoll_events);
+	m->epoll_events = MALLOC(new_size * sizeof(struct epoll_event));
+	if (!m->epoll_events) {
+		m->epoll_size = 0;
+		return -1;
+	}
+
+	m->epoll_size = new_size;
+	return 0;
+}
+
+static inline int
+thread_event_cmp(const thread_event_t *event1, const thread_event_t *event2)
+{
+	if (event1->fd < event2->fd)
+		return -1;
+	if (event1->fd > event2->fd)
+		return 1;
+	return 0;
+}
+
+static thread_event_t *
+thread_event_new(thread_master_t *m, int fd)
+{
+	thread_event_t *event;
+
+	event = (thread_event_t *) MALLOC(sizeof(thread_event_t));
+	if (!event)
+		return NULL;
+
+	if (thread_events_resize(m, 1) < 0) {
+		FREE(event);
+		return NULL;
+	}
+
+	event->fd = fd;
+
+	rb_insert_sort(&m->io_events, event, n, thread_event_cmp);
+
+	return event;
+}
+
+static thread_event_t * __attribute__ ((pure))
+thread_event_get(thread_master_t *m, int fd)
+{
+	thread_event_t event = { .fd = fd };
+
+	return rb_search(&m->io_events, &event, n, thread_event_cmp);
+}
+
+static int
+thread_event_set(const thread_t *thread)
+{
+	thread_event_t *event = thread->event;
+	thread_master_t *m = thread->master;
+	struct epoll_event ev = { .events = 0 };
+	int op;
+
+	ev.data.ptr = event;
+	if (__test_bit(THREAD_FL_READ_BIT, &event->flags))
+		ev.events |= EPOLLIN;
+
+	if (__test_bit(THREAD_FL_WRITE_BIT, &event->flags))
+		ev.events |= EPOLLOUT;
+
+	if (__test_bit(THREAD_FL_EPOLL_BIT, &event->flags))
+		op = EPOLL_CTL_MOD;
 	else
-		list->head = thread->next;
-	thread->next = thread->prev = NULL;
-	list->count--;
-	return thread;
+		op = EPOLL_CTL_ADD;
+
+	if (epoll_ctl(m->epoll_fd, op, event->fd, &ev) < 0) {
+		log_message(LOG_INFO, "scheduler: Error performing control on EPOLL instance (%m)");
+		return -1;
+	}
+
+	__set_bit(THREAD_FL_EPOLL_BIT, &event->flags);
+	return 0;
 }
 
-/* Free all unused thread. */
+static int
+thread_event_cancel(const thread_t *thread_cp)
+{
+	thread_t *thread = no_const(thread_t, thread_cp);
+	thread_event_t *event = thread->event;
+	thread_master_t *m = thread->master;
+
+	if (!event) {
+		log_message(LOG_INFO, "scheduler: Error performing epoll_ctl DEL op no event linked?!");
+		return -1;
+	}
+
+	/* Ignore error if it was an SNMP fd, since we don't know
+	 * if they have been closed */
+	if (m->epoll_fd != -1 &&
+	    epoll_ctl(m->epoll_fd, EPOLL_CTL_DEL, event->fd, NULL) < 0 &&
+#ifdef _WITH_SNMP_
+	    !FD_ISSET(event->fd, &m->snmp_fdset) &&
+#endif
+	    errno != EBADF)
+		log_message(LOG_INFO, "scheduler: Error performing epoll_ctl DEL op for fd:%d (%m)", event->fd);
+
+	rb_erase(&event->n, &m->io_events);
+	if (event == m->current_event)
+		m->current_event = NULL;
+	FREE(thread->event);
+	return 0;
+}
+
+static int
+thread_event_del(const thread_t *thread_cp, unsigned flag)
+{
+	thread_t *thread = no_const(thread_t, thread_cp);
+	thread_event_t *event = thread->event;
+
+	if (!__test_bit(flag, &event->flags))
+		return 0;
+
+	if (flag == THREAD_FL_EPOLL_READ_BIT) {
+		__clear_bit(THREAD_FL_READ_BIT, &event->flags);
+		if (!__test_bit(THREAD_FL_EPOLL_WRITE_BIT, &event->flags))
+			return thread_event_cancel(thread);
+
+		event->read = NULL;
+	}
+	else if (flag == THREAD_FL_EPOLL_WRITE_BIT) {
+		__clear_bit(THREAD_FL_WRITE_BIT, &event->flags);
+		if (!__test_bit(THREAD_FL_EPOLL_READ_BIT, &event->flags))
+			return thread_event_cancel(thread);
+
+		event->write = NULL;
+	}
+
+	if (thread_event_set(thread) < 0)
+		return -1;
+
+	__clear_bit(flag, &event->flags);
+	return 0;
+}
+
+/* Make thread master. */
+thread_master_t *
+thread_make_master(void)
+{
+	thread_master_t *new;
+
+	new = (thread_master_t *) MALLOC(sizeof (thread_master_t));
+
+#if HAVE_EPOLL_CREATE1
+	new->epoll_fd = epoll_create1(EPOLL_CLOEXEC);
+#else
+	new->epoll_fd = epoll_create(1);
+#endif
+	if (new->epoll_fd < 0) {
+		log_message(LOG_INFO, "scheduler: Error creating EPOLL instance (%m)");
+		FREE(new);
+		return NULL;
+	}
+
+#if !HAVE_EPOLL_CREATE1
+	if (set_sock_flags(new->epoll_fd, F_SETFD, FD_CLOEXEC))
+		log_message(LOG_INFO, "Unable to set CLOEXEC on epoll_fd - %s (%d)", strerror(errno), errno);
+#endif
+
+	new->read = RB_ROOT_CACHED;
+	new->write = RB_ROOT_CACHED;
+	new->timer = RB_ROOT_CACHED;
+	new->child = RB_ROOT_CACHED;
+	new->io_events = RB_ROOT;
+	new->child_pid = RB_ROOT;
+	INIT_LIST_HEAD(&new->event);
+#ifdef USE_SIGNAL_THREADS
+	INIT_LIST_HEAD(&new->signal);
+#endif
+	INIT_LIST_HEAD(&new->ready);
+	INIT_LIST_HEAD(&new->unuse);
+
+
+	/* Register timerfd thread */
+	new->timer_fd = timerfd_create(CLOCK_MONOTONIC,
+#ifdef TFD_NONBLOCK				/* Since Linux 2.6.27 */
+						        TFD_NONBLOCK | TFD_CLOEXEC
+#else
+							0
+#endif
+										  );
+	if (new->timer_fd < 0) {
+		log_message(LOG_ERR, "scheduler: Cant create timerfd (%m)");
+		FREE(new);
+		return NULL;
+	}
+
+#ifndef TFD_NONBLOCK
+	if (set_sock_flags(new->timer_fd, F_SETFL, O_NONBLOCK))
+		log_message(LOG_INFO, "Unable to set NONBLOCK on timer_fd - %s (%d)", strerror(errno), errno);
+
+	if (set_sock_flags(new->timer_fd, F_SETFD, FD_CLOEXEC))
+		log_message(LOG_INFO, "Unable to set CLOEXEC on timer_fd - %s (%d)", strerror(errno), errno);
+#endif
+
+	new->signal_fd = signal_handler_init();
+
+	new->timer_thread = thread_add_read(new, thread_timerfd_handler, NULL, new->timer_fd, TIMER_NEVER, false);
+
+	add_signal_read_thread(new);
+
+	return new;
+}
+
+#ifdef THREAD_DUMP
+static const char *
+timer_delay(timeval_t sands)
+{
+	static char str[43];
+
+	if (sands.tv_sec == TIMER_DISABLED)
+		return "NEVER";
+	if (sands.tv_sec == 0 && sands.tv_usec == 0)
+		return "UNSET";
+
+	if (timercmp(&sands, &time_now, >=)) {
+		sands = timer_sub_now(sands);
+		snprintf(str, sizeof str, "%ld.%6.6ld", sands.tv_sec, sands.tv_usec);
+	} else {
+		timersub(&time_now, &sands, &sands);
+		snprintf(str, sizeof str, "-%ld.%6.6ld", sands.tv_sec, sands.tv_usec);
+	}
+
+	return str;
+}
+
+/* Dump rbtree */
 static void
-thread_clean_unuse(thread_master_t * m)
+thread_rb_dump(const rb_root_cached_t *root, const char *tree, FILE *fp)
 {
 	thread_t *thread;
+	int i = 1;
+
+	conf_write(fp, "----[ Begin rb_dump %s ]----", tree);
+
+	rb_for_each_entry_cached(thread, root, n)
+		conf_write(fp, "#%.2d Thread type %s, event_fd %d, val/fd/pid %d, fd_close %d, timer: %s, func %s(), id %lu", i++, get_thread_type_str(thread->type), thread->event ? thread->event->fd: -2, thread->u.val, thread->u.f.close_on_reload, timer_delay(thread->sands), get_function_name(thread->func), thread->id);
+
+	conf_write(fp, "----[ End rb_dump ]----");
+}
+
+static void
+thread_list_dump(const list_head_t *l, const char *list_type, FILE *fp)
+{
+	thread_t *thread;
+	int i = 1;
+
+	conf_write(fp, "----[ Begin list_dump %s ]----", list_type);
+
+	list_for_each_entry(thread, l, next)
+		conf_write(fp, "#%.2d Thread:%p type %s func %s() id %lu",
+				i++, thread, get_thread_type_str(thread->type), get_function_name(thread->func), thread->id);
+
+	conf_write(fp, "----[ End list_dump ]----");
+}
+
+static void
+event_rb_dump(const rb_root_t *root, const char *tree, FILE *fp)
+{
+	thread_event_t *event;
+	int i = 1;
+
+	conf_write(fp, "----[ Begin rb_dump %s ]----", tree);
+	rb_for_each_entry(event, root, n)
+		conf_write(fp, "#%.2d event %p fd %d, flags: 0x%lx, read %p, write %p", i++, event, event->fd, event->flags, event->read, event->write);
+	conf_write(fp, "----[ End rb_dump ]----");
+}
+
+void
+dump_thread_data(const thread_master_t *m, FILE *fp)
+{
+	thread_rb_dump(&m->read, "read", fp);
+	thread_rb_dump(&m->write, "write", fp);
+	thread_rb_dump(&m->child, "child", fp);
+	thread_rb_dump(&m->timer, "timer", fp);
+	thread_list_dump(&m->event, "event", fp);
+	thread_list_dump(&m->ready, "ready", fp);
+#ifdef USE_SIGNAL_THREADS
+	thread_list_dump(&m->signal, "signal", fp);
+#endif
+	thread_list_dump(&m->unuse, "unuse", fp);
+	event_rb_dump(&m->io_events, "io_events", fp);
+}
+#endif
 
-	thread = m->unuse.head;
-	while (thread) {
-		thread_t *t;
+/* declare thread_timer_cmp() for rbtree compares */
+RB_TIMER_CMP(thread);
 
-		t = thread;
-		thread = t->next;
+/* Free all unused thread. */
+static void
+thread_clean_unuse(thread_master_t * m)
+{
+	thread_t *thread, *thread_tmp;
+	list_head_t *l = &m->unuse;
 
-		thread_list_delete(&m->unuse, t);
+	list_for_each_entry_safe(thread, thread_tmp, l, next) {
+		list_head_del(&thread->next);
 
 		/* free the thread */
-		FREE(t);
+		FREE(thread);
 		m->alloc--;
 	}
+
+	INIT_LIST_HEAD(l);
 }
 
 /* Move thread to unuse list. */
 static void
-thread_add_unuse(thread_master_t * m, thread_t * thread)
+thread_add_unuse(thread_master_t *m, thread_t *thread)
 {
 	assert(m != NULL);
-	assert(thread->next == NULL);
-	assert(thread->prev == NULL);
-	assert(thread->type == THREAD_UNUSED);
-	thread_list_add(&m->unuse, thread);
+
+	thread->type = THREAD_UNUSED;
+	thread->event = NULL;
+	INIT_LIST_HEAD(&thread->next);
+	list_add_tail(&thread->next, &m->unuse);
 }
 
 /* Move list element to unuse queue */
 static void
-thread_destroy_list(thread_master_t * m, thread_list_t thread_list)
+thread_destroy_list(thread_master_t *m, list_head_t *l)
 {
-	thread_t *thread;
-
-	thread = thread_list.head;
+	thread_t *thread, *thread_tmp;
 
-	while (thread) {
-		thread_t *t;
-
-		t = thread;
-		thread = t->next;
+	list_for_each_entry_safe(thread, thread_tmp, l, next) {
+		if (thread->event) {
+			thread_del_read(thread);
+			thread_del_write(thread);
+		}
+		list_head_del(&thread->next);
+		thread_add_unuse(m, thread);
+	}
+}
 
-		if (t->type == THREAD_READY_FD ||
-		    t->type == THREAD_READ ||
-		    t->type == THREAD_WRITE ||
-		    t->type == THREAD_READ_TIMEOUT ||
-		    t->type == THREAD_WRITE_TIMEOUT)
-			close (t->u.fd);
+static void
+thread_destroy_rb(thread_master_t *m, rb_root_cached_t *root)
+{
+	thread_t *thread, *thread_tmp;
+
+	rb_for_each_entry_safe_cached(thread, thread_tmp, root, n) {
+		rb_erase_cached(&thread->n, root);
+
+		if (thread->type == THREAD_READ ||
+		    thread->type == THREAD_WRITE ||
+		    thread->type == THREAD_READY_READ_FD ||
+		    thread->type == THREAD_READY_WRITE_FD ||
+		    thread->type == THREAD_READ_TIMEOUT ||
+		    thread->type == THREAD_WRITE_TIMEOUT ||
+		    thread->type == THREAD_READ_ERROR ||
+		    thread->type == THREAD_WRITE_ERROR) {
+			/* Do we have a thread_event, and does it need deleting? */
+			if (thread->type == THREAD_READ)
+				thread_del_read(thread);
+			else if (thread->type == THREAD_WRITE)
+				thread_del_write(thread);
+
+			/* Do we have a file descriptor that needs closing ? */
+			if (thread->u.f.close_on_reload)
+				thread_close_fd(thread);
+		}
 
-		thread_list_delete(&thread_list, t);
-		t->type = THREAD_UNUSED;
-		thread_add_unuse(m, t);
+		thread_add_unuse(m, thread);
 	}
 }
 
 /* Cleanup master */
-static void
+void
 thread_cleanup_master(thread_master_t * m)
 {
 	/* Unuse current thread lists */
-	thread_destroy_list(m, m->read);
-	thread_destroy_list(m, m->write);
-	thread_destroy_list(m, m->timer);
-	thread_destroy_list(m, m->event);
-	thread_destroy_list(m, m->ready);
-
-	/* Clear all FDs */
-	FD_ZERO(&m->readfd);
-	FD_ZERO(&m->writefd);
-	FD_ZERO(&m->exceptfd);
+	m->current_event = NULL;
+	thread_destroy_rb(m, &m->read);
+	thread_destroy_rb(m, &m->write);
+	thread_destroy_rb(m, &m->timer);
+	thread_destroy_rb(m, &m->child);
+	thread_destroy_list(m, &m->event);
+#ifdef USE_SIGNAL_THREADS
+	thread_destroy_list(m, &m->signal);
+#endif
+	thread_destroy_list(m, &m->ready);
+	m->child_pid = RB_ROOT;
 
 	/* Clean garbage */
 	thread_clean_unuse(m);
+
+	FREE(m->epoll_events);
+	m->epoll_size = 0;
+	m->epoll_count = 0;
+
+	m->timer_thread = NULL;
+
+#ifdef _WITH_SNMP_
+	m->snmp_timer_thread = NULL;
+	FD_ZERO(&m->snmp_fdset);
+	m->snmp_fdsetsize = 0;
+#endif
 }
 
 /* Stop thread scheduler. */
@@ -201,107 +920,279 @@ thread_destroy_master(thread_master_t * m)
 {
 	if (!m)
 		return;
+
+	if (m->epoll_fd != -1) {
+		close(m->epoll_fd);
+		m->epoll_fd = -1;
+	}
+
+	if (m->timer_fd != -1)
+		close(m->timer_fd);
+
+	if (m->signal_fd != -1)
+		signal_handler_destroy();
+
 	thread_cleanup_master(m);
+
 	FREE(m);
 }
 
 /* Delete top of the list and return it. */
-thread_t *
-thread_trim_head(thread_list_t * list)
+static thread_t *
+thread_trim_head(list_head_t *l)
 {
-	if (list->head)
-		return thread_list_delete(list, list->head);
-	return NULL;
+	thread_t *thread;
+
+	if (list_empty(l))
+		return NULL;
+
+	thread = list_first_entry(l, thread_t, next);
+	list_del_init(&thread->next);
+	return thread;
+}
+
+/* Make unique thread id for non pthread version of thread manager. */
+static inline unsigned long
+thread_get_id(thread_master_t *m)
+{
+	return m->id++;
 }
 
 /* Make new thread. */
-thread_t *
-thread_new(thread_master_t * m)
+static thread_t *
+thread_new(thread_master_t *m)
 {
 	thread_t *new;
 
 	/* If one thread is already allocated return it */
-	if (m->unuse.head) {
-		new = thread_trim_head(&m->unuse);
-		memset(new, 0, sizeof (thread_t));
-		return new;
+	new = thread_trim_head(&m->unuse);
+	if (!new) {
+		new = (thread_t *)MALLOC(sizeof(thread_t));
+		m->alloc++;
 	}
 
-	new = (thread_t *) MALLOC(sizeof (thread_t));
-	m->alloc++;
+	INIT_LIST_HEAD(&new->next);
+	new->id = thread_get_id(m);
 	return new;
 }
 
 /* Add new read thread. */
-thread_t *
-thread_add_read(thread_master_t * m, int (*func) (thread_t *)
-		, void *arg, int fd, long timer)
+thread_ref_t
+thread_add_read_sands(thread_master_t *m, thread_func_t func, void *arg, int fd, const timeval_t *sands, bool close_on_reload)
 {
+	thread_event_t *event;
 	thread_t *thread;
 
 	assert(m != NULL);
 
-	if (FD_ISSET(fd, &m->readfd)) {
-		log_message(LOG_WARNING, "There is already read fd [%d]", fd);
+	/* I feel lucky ! :D */
+	if (m->current_event && m->current_event->fd == fd)
+		event = m->current_event;
+	else
+		event = thread_event_get(m, fd);
+
+	if (!event) {
+		if (!(event = thread_event_new(m, fd))) {
+			log_message(LOG_INFO, "scheduler: Cant allocate read event for fd [%d](%m)", fd);
+			return NULL;
+		}
+	}
+	else if (__test_bit(THREAD_FL_READ_BIT, &event->flags) && event->read) {
+		log_message(LOG_INFO, "scheduler: There is already read event %p (read %p) registered on fd [%d]", event, event->read, fd);
 		return NULL;
 	}
 
 	thread = thread_new(m);
 	thread->type = THREAD_READ;
-	thread->id = 0;
 	thread->master = m;
 	thread->func = func;
 	thread->arg = arg;
-	FD_SET(fd, &m->readfd);
-	thread->u.fd = fd;
+	thread->u.f.fd = fd;
+	thread->u.f.close_on_reload = close_on_reload;
+	thread->event = event;
+
+	/* Set & flag event */
+	__set_bit(THREAD_FL_READ_BIT, &event->flags);
+	event->read = thread;
+	if (!__test_bit(THREAD_FL_EPOLL_READ_BIT, &event->flags)) {
+		if (thread_event_set(thread) < 0) {
+			log_message(LOG_INFO, "scheduler: Cant register read event for fd [%d](%m)", fd);
+			thread_add_unuse(m, thread);
+			return NULL;
+		}
+		__set_bit(THREAD_FL_EPOLL_READ_BIT, &event->flags);
+	}
 
-	/* Compute read timeout value */
-	set_time_now();
-	thread->sands = timer_add_long(time_now, timer);
+	thread->sands = *sands;
 
 	/* Sort the thread. */
-	thread_list_add_timeval(&m->read, thread);
+	rb_insert_sort_cached(&m->read, thread, n, thread_timer_cmp);
 
 	return thread;
 }
 
+thread_ref_t
+thread_add_read(thread_master_t *m, thread_func_t func, void *arg, int fd, unsigned long timer, bool close_on_reload)
+{
+	timeval_t sands;
+
+	/* Compute read timeout value */
+	if (timer == TIMER_NEVER) {
+		sands.tv_sec = TIMER_DISABLED;
+		sands.tv_usec = 0;
+	} else {
+		set_time_now();
+		sands = timer_add_long(time_now, timer);
+	}
+
+	return thread_add_read_sands(m, func, arg, fd, &sands, close_on_reload);
+}
+
+int
+thread_del_read(thread_ref_t thread)
+{
+	if (!thread || !thread->event)
+		return -1;
+
+	if (thread_event_del(thread, THREAD_FL_EPOLL_READ_BIT) < 0)
+		return -1;
+
+	return 0;
+}
+
+#ifdef _WITH_SNMP_
+static void
+thread_del_read_fd(thread_master_t *m, int fd)
+{
+	const thread_event_t *event;
+
+	event = thread_event_get(m, fd);
+	if (!event || !event->read)
+		return;
+
+	thread_cancel(event->read);
+}
+#endif
+
+static void
+thread_read_requeue(thread_master_t *m, int fd, const timeval_t *new_sands)
+{
+	thread_t *thread;
+	thread_event_t *event;
+
+	event = thread_event_get(m, fd);
+	if (!event || !event->read)
+		return;
+
+	thread = event->read;
+
+	if (thread->type != THREAD_READ) {
+		/* If the thread is not on the read list, don't touch it */
+		return;
+	}
+
+	thread->sands = *new_sands;
+
+	rb_move_cached(&thread->master->read, thread, n, thread_timer_cmp);
+}
+
+void
+thread_requeue_read(thread_master_t *m, int fd, const timeval_t *sands)
+{
+	thread_read_requeue(m, fd, sands);
+}
+
 /* Add new write thread. */
-thread_t *
-thread_add_write(thread_master_t * m, int (*func) (thread_t *)
-		 , void *arg, int fd, long timer)
+thread_ref_t
+thread_add_write(thread_master_t *m, thread_func_t func, void *arg, int fd, unsigned long timer, bool close_on_reload)
 {
+	thread_event_t *event;
 	thread_t *thread;
 
 	assert(m != NULL);
 
-	if (FD_ISSET(fd, &m->writefd)) {
-		log_message(LOG_WARNING, "There is already write fd [%d]", fd);
+	/* I feel lucky ! :D */
+	if (m->current_event && m->current_event->fd == fd)
+		event = m->current_event;
+	else
+		event = thread_event_get(m, fd);
+
+	if (!event) {
+		if (!(event = thread_event_new(m, fd))) {
+			log_message(LOG_INFO, "scheduler: Cant allocate write event for fd [%d](%m)", fd);
+			return NULL;
+		}
+	}
+	else if (__test_bit(THREAD_FL_WRITE_BIT, &event->flags) && event->write) {
+		log_message(LOG_INFO, "scheduler: There is already write event registered on fd [%d]", fd);
 		return NULL;
 	}
 
 	thread = thread_new(m);
 	thread->type = THREAD_WRITE;
-	thread->id = 0;
 	thread->master = m;
 	thread->func = func;
 	thread->arg = arg;
-	FD_SET(fd, &m->writefd);
-	thread->u.fd = fd;
+	thread->u.f.fd = fd;
+	thread->u.f.close_on_reload = close_on_reload;
+	thread->event = event;
+
+	/* Set & flag event */
+	__set_bit(THREAD_FL_WRITE_BIT, &event->flags);
+	event->write = thread;
+	if (!__test_bit(THREAD_FL_EPOLL_WRITE_BIT, &event->flags)) {
+		if (thread_event_set(thread) < 0) {
+			log_message(LOG_INFO, "scheduler: Cant register write event for fd [%d](%m)" , fd);
+			thread_add_unuse(m, thread);
+			return NULL;
+		}
+		__set_bit(THREAD_FL_EPOLL_WRITE_BIT, &event->flags);
+	}
+
+	/* Compute write timeout value */
+	if (timer == TIMER_NEVER)
+		thread->sands.tv_sec = TIMER_DISABLED;
+	else {
+		set_time_now();
+		thread->sands = timer_add_long(time_now, timer);
+	}
+
+	/* Sort the thread. */
+	rb_insert_sort_cached(&m->write, thread, n, thread_timer_cmp);
+
+	return thread;
+}
+
+int
+thread_del_write(thread_ref_t thread)
+{
+	if (!thread || !thread->event)
+		return -1;
+
+	if (thread_event_del(thread, THREAD_FL_EPOLL_WRITE_BIT) < 0)
+		return -1;
+
+	return 0;
+}
+
+void
+thread_close_fd(thread_ref_t thread_cp)
+{
+	thread_t *thread = no_const(thread_t, thread_cp);
 
-	/* Compute write timeout value */
-	set_time_now();
-	thread->sands = timer_add_long(time_now, timer);
+	if (thread->u.f.fd == -1)
+		return;
 
-	/* Sort the thread. */
-	thread_list_add_timeval(&m->write, thread);
+	if (thread->event)
+		thread_event_cancel(thread);
 
-	return thread;
+	close(thread->u.f.fd);
+	thread->u.f.fd = -1;
 }
 
 /* Add timer event thread. */
-thread_t *
-thread_add_timer(thread_master_t * m, int (*func) (thread_t *)
-		 , void *arg, long timer)
+thread_ref_t
+thread_add_timer(thread_master_t *m, thread_func_t func, void *arg, unsigned long timer)
 {
 	thread_t *thread;
 
@@ -309,25 +1200,65 @@ thread_add_timer(thread_master_t * m, int (*func) (thread_t *)
 
 	thread = thread_new(m);
 	thread->type = THREAD_TIMER;
-	thread->id = 0;
 	thread->master = m;
 	thread->func = func;
 	thread->arg = arg;
+	thread->u.val = 0;
 
 	/* Do we need jitter here? */
-	set_time_now();
-	thread->sands = timer_add_long(time_now, timer);
+	if (timer == TIMER_NEVER)
+		thread->sands.tv_sec = TIMER_DISABLED;
+	else {
+		set_time_now();
+		thread->sands = timer_add_long(time_now, timer);
+	}
 
 	/* Sort by timeval. */
-	thread_list_add_timeval(&m->timer, thread);
+	rb_insert_sort_cached(&m->timer, thread, n, thread_timer_cmp);
 
 	return thread;
 }
 
+void
+timer_thread_update_timeout(thread_ref_t thread_cp, unsigned long timer)
+{
+	thread_t *thread = no_const(thread_t, thread_cp);
+	timeval_t sands;
+
+	if (thread->type > THREAD_MAX_WAITING) {
+		/* It is probably on the ready list, so we'd better just let it run */
+		return;
+	}
+
+	set_time_now();
+	sands = timer_add_long(time_now, timer);
+
+	if (timercmp(&thread->sands, &sands, ==))
+		return;
+
+	thread->sands = sands;
+
+	rb_move_cached(&thread->master->timer, thread, n, thread_timer_cmp);
+}
+
+thread_ref_t
+thread_add_timer_shutdown(thread_master_t *m, thread_func_t func, void *arg, unsigned long timer)
+{
+	union {
+		thread_t *p;
+		const thread_t *cp;
+	} thread;
+       
+	thread.cp = thread_add_timer(m, func, arg, timer);
+
+	thread.p->type = THREAD_TIMER_SHUTDOWN;
+
+	return thread.cp;
+}
+
 /* Add a child thread. */
-thread_t *
-thread_add_child(thread_master_t * m, int (*func) (thread_t *)
-		 , void * arg, pid_t pid, long timer)
+thread_ref_t
+thread_add_child(thread_master_t * m, thread_func_t func, void * arg, pid_t pid, unsigned long timer)
 {
 	thread_t *thread;
 
@@ -335,27 +1266,45 @@ thread_add_child(thread_master_t * m, int (*func) (thread_t *)
 
 	thread = thread_new(m);
 	thread->type = THREAD_CHILD;
-	thread->id = 0;
 	thread->master = m;
 	thread->func = func;
 	thread->arg = arg;
 	thread->u.c.pid = pid;
 	thread->u.c.status = 0;
 
-	/* Compute write timeout value */
-	set_time_now();
-	thread->sands = timer_add_long(time_now, timer);
+	/* Compute child timeout value */
+	if (timer == TIMER_NEVER)
+		thread->sands.tv_sec = TIMER_DISABLED;
+	else {
+		set_time_now();
+		thread->sands = timer_add_long(time_now, timer);
+	}
 
 	/* Sort by timeval. */
-	thread_list_add_timeval(&m->child, thread);
+	rb_insert_sort_cached(&m->child, thread, n, thread_timer_cmp);
+
+	/* Sort by PID */
+	rb_insert_sort(&m->child_pid, thread, rb_data, thread_child_pid_cmp);
 
 	return thread;
 }
 
+void
+thread_children_reschedule(thread_master_t *m, thread_func_t func, unsigned long timer)
+{
+	thread_t *thread;
+
+// What is this used for ??
+	set_time_now();
+	rb_for_each_entry_cached(thread, &m->child, n) {
+		thread->func = func;
+		thread->sands = timer_add_long(time_now, timer);
+	}
+}
+
 /* Add simple event thread. */
-thread_t *
-thread_add_event(thread_master_t * m, int (*func) (thread_t *)
-		 , void *arg, int val)
+thread_ref_t
+thread_add_event(thread_master_t * m, thread_func_t func, void *arg, int val)
 {
 	thread_t *thread;
 
@@ -363,424 +1312,637 @@ thread_add_event(thread_master_t * m, int (*func) (thread_t *)
 
 	thread = thread_new(m);
 	thread->type = THREAD_EVENT;
-	thread->id = 0;
 	thread->master = m;
 	thread->func = func;
 	thread->arg = arg;
 	thread->u.val = val;
-	thread_list_add(&m->event, thread);
+	INIT_LIST_HEAD(&thread->next);
+	list_add_tail(&thread->next, &m->event);
 
 	return thread;
 }
 
-/* Add simple event thread. */
-thread_t *
-thread_add_terminate_event(thread_master_t * m)
+/* Add terminate event thread. */
+static thread_ref_t
+thread_add_generic_terminate_event(thread_master_t * m, thread_type_t type, thread_func_t func)
 {
 	thread_t *thread;
 
 	assert(m != NULL);
 
 	thread = thread_new(m);
-	thread->type = THREAD_TERMINATE;
-	thread->id = 0;
+	thread->type = type;
 	thread->master = m;
-	thread->func = NULL;
+	thread->func = func;
 	thread->arg = NULL;
 	thread->u.val = 0;
-	thread_list_add(&m->event, thread);
+	INIT_LIST_HEAD(&thread->next);
+	list_add_tail(&thread->next, &m->event);
+
+	return thread;
+}
+
+thread_ref_t
+thread_add_terminate_event(thread_master_t *m)
+{
+	return thread_add_generic_terminate_event(m, THREAD_TERMINATE, NULL);
+}
+
+thread_ref_t
+thread_add_start_terminate_event(thread_master_t *m, thread_func_t func)
+{
+	return thread_add_generic_terminate_event(m, THREAD_TERMINATE_START, func);
+}
+
+#ifdef USE_SIGNAL_THREADS
+/* Add signal thread. */
+thread_ref_t
+thread_add_signal(thread_master_t *m, thread_func_t func, void *arg, int signum)
+{
+	thread_t *thread;
+
+	assert(m != NULL);
+
+	thread = thread_new(m);
+	thread->type = THREAD_SIGNAL;
+	thread->master = m;
+	thread->func = func;
+	thread->arg = arg;
+	thread->u.val = signum;
+	INIT_LIST_HEAD(&thread->next);
+	list_add_tail(&thread->next, &m->signal);
+
+	/* Update signalfd accordingly */
+	if (sigismember(&m->signal_mask, signum))
+		return thread;
+	sigaddset(&m->signal_mask, signum);
+	signalfd(m->signal_fd, &m->signal_mask, 0);
 
 	return thread;
 }
+#endif
 
 /* Cancel thread from scheduler. */
-int
-thread_cancel(thread_t * thread)
+void
+thread_cancel(thread_ref_t thread_cp)
 {
-	if (!thread)
-		return -1;
+	thread_t *thread = no_const(thread_t, thread_cp);
+	thread_master_t *m;
+
+	if (!thread || thread->type == THREAD_UNUSED)
+		return;
+
+	m = thread->master;
 
 	switch (thread->type) {
 	case THREAD_READ:
-		assert(FD_ISSET(thread->u.fd, &thread->master->readfd));
-		FD_CLR(thread->u.fd, &thread->master->readfd);
-		thread_list_delete(&thread->master->read, thread);
+		thread_event_del(thread, THREAD_FL_EPOLL_READ_BIT);
+		rb_erase_cached(&thread->n, &m->read);
 		break;
 	case THREAD_WRITE:
-		assert(FD_ISSET(thread->u.fd, &thread->master->writefd));
-		FD_CLR(thread->u.fd, &thread->master->writefd);
-		thread_list_delete(&thread->master->write, thread);
+		thread_event_del(thread, THREAD_FL_EPOLL_WRITE_BIT);
+		rb_erase_cached(&thread->n, &m->write);
 		break;
 	case THREAD_TIMER:
-		thread_list_delete(&thread->master->timer, thread);
+		rb_erase_cached(&thread->n, &m->timer);
 		break;
 	case THREAD_CHILD:
 		/* Does this need to kill the child, or is that the
 		 * caller's job?
 		 * This function is currently unused, so leave it for now.
 		 */
-		thread_list_delete(&thread->master->child, thread);
+		rb_erase_cached(&thread->n, &m->child);
+		rb_erase(&thread->rb_data, &m->child_pid);
 		break;
-	case THREAD_EVENT:
-		thread_list_delete(&thread->master->event, thread);
+	case THREAD_READY_READ_FD:
+	case THREAD_READ_TIMEOUT:
+		if (thread->event)
+			thread_event_del(thread, THREAD_FL_EPOLL_READ_BIT);
+		list_head_del(&thread->next);
 		break;
+	case THREAD_READY_WRITE_FD:
+	case THREAD_WRITE_TIMEOUT:
+		if (thread->event)
+			thread_event_del(thread, THREAD_FL_EPOLL_WRITE_BIT);
+		list_head_del(&thread->next);
+		break;
+	case THREAD_EVENT:
 	case THREAD_READY:
-	case THREAD_READY_FD:
-		thread_list_delete(&thread->master->ready, thread);
+#ifdef USE_SIGNAL_THREADS
+	case THREAD_SIGNAL:
+#endif
+	case THREAD_CHILD_TIMEOUT:
+	case THREAD_CHILD_TERMINATED:
+		list_head_del(&thread->next);
 		break;
 	default:
 		break;
 	}
 
-	thread->type = THREAD_UNUSED;
-	thread_add_unuse(thread->master, thread);
-	return 0;
+	thread_add_unuse(m, thread);
 }
 
-/* Delete all events which has argument value arg. */
 void
-thread_cancel_event(thread_master_t * m, void *arg)
+thread_cancel_read(thread_master_t *m, int fd)
 {
-	thread_t *thread;
-
-	thread = m->event.head;
-	while (thread) {
-		thread_t *t;
-
-		t = thread;
-		thread = t->next;
+	thread_t *thread, *thread_tmp;
 
-		if (t->arg == arg) {
-			thread_list_delete(&m->event, t);
-			t->type = THREAD_UNUSED;
-			thread_add_unuse(m, t);
+	rb_for_each_entry_safe_cached(thread, thread_tmp, &m->read, n) {
+		if (thread->u.f.fd == fd) {
+			if (thread->event->write) {
+				thread_cancel(thread->event->write);
+				thread->event->write = NULL;
+			}
+			thread_cancel(thread);
+			break;
 		}
 	}
 }
 
-/* Update timer value */
-static void
-thread_update_timer(thread_list_t *list, timeval_t *timer_min)
+#ifdef _INCLUDE_UNUSED_CODE_
+/* Delete all events which has argument value arg. */
+void
+thread_cancel_event(thread_master_t *m, void *arg)
 {
-	if (list->head) {
-		if (!timer_isnull(*timer_min)) {
-			if (timer_cmp(list->head->sands, *timer_min) <= 0) {
-				*timer_min = list->head->sands;
-			}
-		} else {
-			*timer_min = list->head->sands;
+	thread_t *thread, *thread_tmp;
+	list_head_t *l = &m->event;
+
+// Why doesn't this use thread_cancel() above
+	list_for_each_entry_safe(thread, thread_tmp, l, next) {
+		if (thread->arg == arg) {
+			list_head_del(&thread->next);
+			thread_add_unuse(m, thread);
 		}
 	}
 }
+#endif
 
-/* Compute the wait timer. Take care of timeouted fd */
-static void
-thread_compute_timer(thread_master_t * m, timeval_t * timer_wait)
+#ifdef _WITH_SNMP_
+static int
+snmp_read_thread(thread_ref_t thread)
 {
-	timeval_t timer_min;
+	fd_set snmp_fdset;
 
-	/* Prepare timer */
-	timer_reset(timer_min);
-	thread_update_timer(&m->timer, &timer_min);
-	thread_update_timer(&m->write, &timer_min);
-	thread_update_timer(&m->read, &timer_min);
-	thread_update_timer(&m->child, &timer_min);
-
-	/* Take care about monothonic clock */
-	if (!timer_isnull(timer_min)) {
-		timer_min = timer_sub(timer_min, time_now);
-		if (timer_min.tv_sec < 0) {
-			timer_min.tv_sec = timer_min.tv_usec = 0;
-		} else if (timer_min.tv_sec >= 1) {
-			timer_min.tv_sec = 1;
-			timer_min.tv_usec = 0;
-		}
+	FD_ZERO(&snmp_fdset);
+	FD_SET(thread->u.f.fd, &snmp_fdset);
 
-		timer_wait->tv_sec = timer_min.tv_sec;
-		timer_wait->tv_usec = timer_min.tv_usec;
-	} else {
-		timer_wait->tv_sec = 1;
-		timer_wait->tv_usec = 0;
-	}
+	snmp_read(&snmp_fdset);
+	netsnmp_check_outstanding_agent_requests();
+
+	thread_add_read(thread->master, snmp_read_thread, thread->arg, thread->u.f.fd, TIMER_NEVER, false);
+
+	return 0;
 }
 
-/* Fetch next ready thread. */
-thread_t *
-thread_fetch(thread_master_t * m, thread_t * fetch)
+int
+snmp_timeout_thread(thread_ref_t thread)
 {
-	int ret, old_errno;
-	thread_t *thread;
-	fd_set readfd;
-	fd_set writefd;
-	fd_set exceptfd;
-	timeval_t timer_wait;
-	int signal_fd;
-#ifdef _WITH_SNMP_
-	timeval_t snmp_timer_wait;
-	int snmpblock = 0;
-	int fdsetsize;
+	snmp_timeout();
+	run_alarms();
+	netsnmp_check_outstanding_agent_requests();
+
+	thread->master->snmp_timer_thread = thread_add_timer(thread->master, snmp_timeout_thread, thread->arg, TIMER_NEVER);
+
+	return 0;
+}
+
+// See https://vincent.bernat.im/en/blog/2012-snmp-event-loop
+static void
+snmp_epoll_info(thread_master_t *m)
+{
+	fd_set snmp_fdset;
+	int fdsetsize = 0;
+	int max_fdsetsize;
+	int set_words;
+	struct timeval snmp_timer_wait = { .tv_sec = TIMER_DISABLED };
+	int snmpblock = true;
+	unsigned long *old_set, *new_set;	// Must be unsigned for ffsl() to work for us
+	unsigned long diff;
+	int i;
+	int fd;
+	int bit;
+
+#if 0
+// TODO
+#if sizeof fd_mask  != sizeof diff
+#error "snmp_epoll_info sizeof(fd_mask) does not match old_set/new_set/diff"
+#endif
 #endif
 
-	assert(m != NULL);
+	FD_ZERO(&snmp_fdset);
 
-	/* Timer initialization */
-	memset(&timer_wait, 0, sizeof (timeval_t));
+	/* When SNMP is enabled, we may have to select() on additional
+	 * FD. snmp_select_info() will add them to `readfd'. The trick
+	 * with this function is its last argument. We need to set it
+	 * true to set its own timer that we then compare against ours. */
+	snmp_select_info(&fdsetsize, &snmp_fdset, &snmp_timer_wait, &snmpblock);
 
-retry:	/* When thread can't fetch try to find next thread again. */
+	if (snmpblock)
+		snmp_timer_wait.tv_sec = TIMER_DISABLED;
+	timer_thread_update_timeout(m->snmp_timer_thread, timer_long(snmp_timer_wait));
 
-	/* If there is event process it first. */
-	while ((thread = thread_trim_head(&m->event))) {
-		*fetch = *thread;
+	max_fdsetsize = m->snmp_fdsetsize > fdsetsize ? m->snmp_fdsetsize : fdsetsize;
+	if (!max_fdsetsize)
+		return;
+	set_words = (max_fdsetsize - 1) / (sizeof(*old_set) * CHAR_BIT) + 1;
+
+	for (i = 0, old_set = (unsigned long *)&m->snmp_fdset, new_set = (unsigned long *)&snmp_fdset; i < set_words; i++, old_set++, new_set++) {
+		if (*old_set == *new_set)
+			continue;
+
+		diff = *old_set ^ *new_set;
+		fd = i * sizeof(*old_set) * CHAR_BIT - 1;
+		do {
+			bit = ffsl(diff);
+			diff >>= bit;
+			fd += bit;
+			if (FD_ISSET(fd, &snmp_fdset)) {
+				/* Add the fd */
+				thread_add_read(m, snmp_read_thread, 0, fd, TIMER_NEVER, false);
+				FD_SET(fd, &m->snmp_fdset);
+			} else {
+				/* Remove the fd */
+				thread_del_read_fd(m, fd);
+				FD_CLR(fd, &m->snmp_fdset);
+			}
+		} while (diff);
+	}
+	m->snmp_fdsetsize = fdsetsize;
+}
 
-		/* If daemon hanging event is received return NULL pointer */
-		if (thread->type == THREAD_TERMINATE) {
-			thread->type = THREAD_UNUSED;
-			thread_add_unuse(m, thread);
-			return NULL;
-		}
-		thread->type = THREAD_UNUSED;
-		thread_add_unuse(m, thread);
-		return fetch;
+/* If a file descriptor was registered with epoll, but it has been closed, the registration
+ * will have been lost, even though the new fd value is the same. We therefore need to
+ * unregister all the fds we had registered, and reregister them. */
+void
+snmp_epoll_reset(thread_master_t *m)
+{
+	fd_set snmp_fdset;
+	int fdsetsize = 0;
+	int set_words;
+	int max_fdsetsize;
+	struct timeval snmp_timer_wait = { .tv_sec = TIMER_DISABLED };
+	int snmpblock = true;
+	unsigned long *old_set, *new_set;	// Must be unsigned for ffsl() to work for us
+	unsigned long bits;
+	int i;
+	int fd;
+	int bit;
+
+	FD_ZERO(&snmp_fdset);
+
+	snmp_select_info(&fdsetsize, &snmp_fdset, &snmp_timer_wait, &snmpblock);
+
+	max_fdsetsize = m->snmp_fdsetsize > fdsetsize ? m->snmp_fdsetsize : fdsetsize;
+	if (!max_fdsetsize)
+		return;
+
+	set_words = (max_fdsetsize - 1) / (sizeof(*old_set) * CHAR_BIT) + 1;
+
+	/* Clear all the fds that were registered with epoll */
+	for (i = 0, old_set = (unsigned long *)&m->snmp_fdset; i < set_words; i++, old_set++) {
+		bits = *old_set;
+		fd = i * sizeof(*old_set) * CHAR_BIT - 1;
+		do {
+			bit = ffsl(bits);
+			bits >>= bit;
+			fd += bit;
+
+			/* Remove the fd */
+			thread_del_read_fd(m, fd);
+			FD_CLR(fd, &m->snmp_fdset);
+		} while (bits);
 	}
 
-	/* If there is ready threads process them */
-	while ((thread = thread_trim_head(&m->ready))) {
-		*fetch = *thread;
-		thread->type = THREAD_UNUSED;
-		thread_add_unuse(m, thread);
-		return fetch;
+	/* Add the file descriptors that are now in use */
+	for (i = 0, new_set = (unsigned long *)&snmp_fdset; i < set_words; i++, new_set++) {
+		bits = *new_set;
+		fd = i * sizeof(*new_set) * CHAR_BIT - 1;
+		do {
+			bit = ffsl(bits);
+			bits >>= bit;
+			fd += bit;
+
+			/* Add the fd */
+			thread_add_read(m, snmp_read_thread, 0, fd, TIMER_NEVER, false);
+			FD_SET(fd, &m->snmp_fdset);
+		} while (bits);
 	}
+	m->snmp_fdsetsize = fdsetsize;
+}
+#endif
 
-	/*
-	 * Re-read the current time to get the maximum accuracy.
-	 * Calculate select wait timer. Take care of timeouted fd.
-	 */
-	set_time_now();
-	thread_compute_timer(m, &timer_wait);
+/* Fetch next ready thread. */
+static list_head_t *
+thread_fetch_next_queue(thread_master_t *m)
+{
+	int last_epoll_errno = 0;
+	int ret;
+	int i;
+
+	assert(m != NULL);
 
-	/* Call select function. */
-	readfd = m->readfd;
-	writefd = m->writefd;
-	exceptfd = m->exceptfd;
+	/* If there is event process it first. */
+	if (m->event.next != &m->event)
+		return &m->event;
 
-	signal_fd = signal_rfd();
-	FD_SET(signal_fd, &readfd);
+	/* If there are ready threads process them */
+	if (m->ready.next != &m->ready)
+		return &m->ready;
 
+	do {
 #ifdef _WITH_SNMP_
-	/* When SNMP is enabled, we may have to select() on additional
-	 * FD. snmp_select_info() will add them to `readfd'. The trick
-	 * with this function is its last argument. We need to set it
-	 * to 0 and we need to use the provided new timer only if it
-	 * is still set to 0. */
-	fdsetsize = FD_SETSIZE;
-	snmpblock = 0;
-	memcpy(&snmp_timer_wait, &timer_wait, sizeof(timeval_t));
-	snmp_select_info(&fdsetsize, &readfd, &snmp_timer_wait, &snmpblock);
-	if (snmpblock == 0)
-		memcpy(&timer_wait, &snmp_timer_wait, sizeof(timeval_t));
+		if (snmp_running)
+			snmp_epoll_info(m);
 #endif
 
-	ret = select(FD_SETSIZE, &readfd, &writefd, &exceptfd, &timer_wait);
-
-	/* we have to save errno here because the next syscalls will set it */
-	old_errno = errno;
+		/* Calculate and set wait timer. Take care of timeouted fd.  */
+		thread_set_timer(m);
 
-       /* Handle SNMP stuff */
-#ifdef _WITH_SNMP_
-	if (ret > 0)
-		snmp_read(&readfd);
-	else if (ret == 0)
-		snmp_timeout();
+#ifdef _VRRP_FD_DEBUG_
+		if (extra_threads_debug)
+			extra_threads_debug();
 #endif
 
-	/* handle signals synchronously, including child reaping */
-	if (FD_ISSET(signal_fd, &readfd))
-		signal_run_callback();
+#ifdef _EPOLL_THREAD_DUMP_
+		if (do_epoll_thread_dump)
+			dump_thread_data(m, NULL);
+#endif
 
-	/* Update current time */
-	set_time_now();
+#ifdef _EPOLL_DEBUG_
+		if (do_epoll_debug)
+			log_message(LOG_INFO, "calling epoll_wait");
+#endif
 
-	if (ret < 0) {
-		if (old_errno == EINTR)
-			goto retry;
-		/* Real error. */
-		DBG("select error: %s", strerror(old_errno));
-		assert(0);
-	}
+		/* Call epoll function. */
+		ret = epoll_wait(m->epoll_fd, m->epoll_events, m->epoll_count, -1);
 
-	/* Timeout children */
-	thread = m->child.head;
-	while (thread) {
-		thread_t *t;
+#ifdef _EPOLL_DEBUG_
+		if (do_epoll_debug) {
+			int sav_errno = errno;
 
-		t = thread;
-		thread = t->next;
+			if (ret == -1)
+				log_message(LOG_INFO, "epoll_wait returned %d, errno %d", ret, sav_errno);
+			else
+				log_message(LOG_INFO, "epoll_wait returned %d fds", ret);
 
-		if (timer_cmp(time_now, t->sands) >= 0) {
-			thread_list_delete(&m->child, t);
-			thread_list_add(&m->ready, t);
-			t->type = THREAD_CHILD_TIMEOUT;
+			errno = sav_errno;
 		}
-	}
+#endif
+
+		if (ret < 0) {
+			if (check_EINTR(errno))
+				continue;
 
-	/* Read thead. */
-	thread = m->read.head;
-	while (thread) {
-		thread_t *t;
-
-		t = thread;
-		thread = t->next;
-
-		if (FD_ISSET(t->u.fd, &readfd)) {
-			assert(FD_ISSET(t->u.fd, &m->readfd));
-			FD_CLR(t->u.fd, &m->readfd);
-			thread_list_delete(&m->read, t);
-			thread_list_add(&m->ready, t);
-			t->type = THREAD_READY_FD;
-		} else {
-			if (timer_cmp(time_now, t->sands) >= 0) {
-				FD_CLR(t->u.fd, &m->readfd);
-				thread_list_delete(&m->read, t);
-				thread_list_add(&m->ready, t);
-				t->type = THREAD_READ_TIMEOUT;
+			/* Real error. */
+			if (errno != last_epoll_errno) {
+				last_epoll_errno = errno;
+
+				/* Log the error first time only */
+				log_message(LOG_INFO, "scheduler: epoll_wait error: %s", strerror(errno));
 			}
+
+			/* Make sure we don't sit it a tight loop */
+			if (last_epoll_errno == EBADF || last_epoll_errno == EFAULT || last_epoll_errno == EINVAL)
+				sleep(1);
+
+			continue;
 		}
-	}
 
-	/* Write thead. */
-	thread = m->write.head;
-	while (thread) {
-		thread_t *t;
-
-		t = thread;
-		thread = t->next;
-
-		if (FD_ISSET(t->u.fd, &writefd)) {
-			assert(FD_ISSET(t->u.fd, &writefd));
-			FD_CLR(t->u.fd, &m->writefd);
-			thread_list_delete(&m->write, t);
-			thread_list_add(&m->ready, t);
-			t->type = THREAD_READY_FD;
-		} else {
-			if (timer_cmp(time_now, t->sands) >= 0) {
-				FD_CLR(t->u.fd, &m->writefd);
-				thread_list_delete(&m->write, t);
-				thread_list_add(&m->ready, t);
-				t->type = THREAD_WRITE_TIMEOUT;
+		/* Handle epoll events */
+		for (i = 0; i < ret; i++) {
+			struct epoll_event *ep_ev;
+			thread_event_t *ev;
+
+			ep_ev = &m->epoll_events[i];
+			ev = ep_ev->data.ptr;
+
+			/* Error */
+// TODO - no thread processing function handles THREAD_READ_ERROR/THREAD_WRITE_ERROR yet
+			if (ep_ev->events & (EPOLLHUP | EPOLLERR | EPOLLRDHUP)) {
+				if (ev->read) {
+					thread_move_ready(m, &m->read, ev->read, THREAD_READ_ERROR);
+					ev->read = NULL;
+				}
+
+				if (ev->write) {
+					thread_move_ready(m, &m->write, ev->write, THREAD_WRITE_ERROR);
+					ev->write = NULL;
+				}
+
+				if (__test_bit(LOG_DETAIL_BIT, &debug)) {
+					if (ep_ev->events & EPOLLRDHUP)
+						log_message(LOG_INFO, "Received EPOLLRDHUP for fd %d", ev->fd);
+				}
+
+				continue;
+			}
+
+			/* READ */
+			if (ep_ev->events & EPOLLIN) {
+				if (!ev->read) {
+					log_message(LOG_INFO, "scheduler: No read thread bound on fd:%d (fl:0x%.4X)"
+						      , ev->fd, ep_ev->events);
+					continue;
+				}
+				thread_move_ready(m, &m->read, ev->read, THREAD_READY_READ_FD);
+				ev->read = NULL;
+			}
+
+			/* WRITE */
+			if (ep_ev->events & EPOLLOUT) {
+				if (!ev->write) {
+					log_message(LOG_INFO, "scheduler: No write thread bound on fd:%d (fl:0x%.4X)"
+						      , ev->fd, ep_ev->events);
+					continue;
+				}
+				thread_move_ready(m, &m->write, ev->write, THREAD_READY_WRITE_FD);
+				ev->write = NULL;
 			}
 		}
-	}
-	/* Exception thead. */
-	/*... */
 
-	/* Timer update. */
-	thread = m->timer.head;
-	while (thread) {
-		thread_t *t;
+		/* Update current time */
+		set_time_now();
+
+		/* If there is a ready thread, return it. */
+		if (m->ready.next != &m->ready)
+			return &m->ready;
+	} while (true);
+}
+
+/* Call thread ! */
+static inline void
+thread_call(thread_t * thread)
+{
+#ifdef _EPOLL_DEBUG_
+	if (do_epoll_debug)
+		log_message(LOG_INFO, "Calling thread function %s(), type %s, val/fd/pid %d, status %d id %lu", get_function_name(thread->func), get_thread_type_str(thread->type), thread->u.val, thread->u.c.status, thread->id);
+#endif
+
+	(*thread->func) (thread);
+}
+
+void
+process_threads(thread_master_t *m)
+{
+	thread_t* thread;
+	list_head_t *thread_list;
+	int thread_type;
 
-		t = thread;
-		thread = t->next;
+	/*
+	 * Processing the master thread queues,
+	 * return and execute one ready thread.
+	 */
+	while ((thread_list = thread_fetch_next_queue(m))) {
+		/* Run until error, used for debuging only */
+#if defined _DEBUG_ && defined _MEM_CHECK_
+		if (__test_bit(MEM_ERR_DETECT_BIT, &debug)
+#ifdef _WITH_VRRP_
+		    && __test_bit(DONT_RELEASE_VRRP_BIT, &debug)
+#endif
+								) {
+			__clear_bit(MEM_ERR_DETECT_BIT, &debug);
+#ifdef _WITH_VRRP_
+			__clear_bit(DONT_RELEASE_VRRP_BIT, &debug);
+#endif
+			thread_add_terminate_event(master);
+		}
+#endif
 
-		if (timer_cmp(time_now, t->sands) >= 0) {
-			thread_list_delete(&m->timer, t);
-			thread_list_add(&m->ready, t);
-			t->type = THREAD_READY;
+		/* If we are shutting down, only process relevant thread types.
+		 * We only want timer and signal fd, and don't want inotify, vrrp socket,
+		 * snmp_read, bfd_receiver, bfd pipe in vrrp/check, dbus pipe or netlink fds. */
+		thread = thread_trim_head(thread_list);
+		if (!shutting_down ||
+		    ((thread->type == THREAD_READY_READ_FD ||
+		      thread->type == THREAD_READY_WRITE_FD) &&
+		     (thread->u.f.fd == m->timer_fd ||
+		      thread->u.f.fd == m->signal_fd
+#ifdef _WITH_SNMP_
+		      || FD_ISSET(thread->u.f.fd, &m->snmp_fdset)
+#endif
+							       )) ||
+		    thread->type == THREAD_CHILD ||
+		    thread->type == THREAD_CHILD_TIMEOUT ||
+		    thread->type == THREAD_CHILD_TERMINATED ||
+		    thread->type == THREAD_TIMER_SHUTDOWN ||
+		    thread->type == THREAD_TERMINATE) {
+			if (thread->func)
+				thread_call(thread);
+
+			if (thread->type == THREAD_TERMINATE_START)
+				shutting_down = true;
 		}
+
+		m->current_event = (thread->type == THREAD_READY_READ_FD || thread->type == THREAD_READY_WRITE_FD) ? thread->event : NULL;
+		thread_type = thread->type;
+		thread_add_unuse(master, thread);
+
+		/* If we are shutting down, and the shutdown timer is not running and
+		 * all children have terminated, then we can terminate */
+		if (shutting_down && !m->shutdown_timer_running && !m->child.rb_root.rb_node)
+			break;
+
+		/* If daemon hanging event is received stop processing */
+		if (thread_type == THREAD_TERMINATE)
+			break;
 	}
+}
+
+static void
+process_child_termination(pid_t pid, int status)
+{
+	thread_master_t * m = master;
+	thread_t th = {0};
+	th.u.c.pid = pid ;
+	thread_t *thread;
+	bool permanent_vrrp_checker_error = false;
 
-	/* Return one event. */
-	thread = thread_trim_head(&m->ready);
+#ifndef _DEBUG_
+	if (prog_type == PROG_TYPE_PARENT)
+		permanent_vrrp_checker_error = report_child_status(status, pid, NULL);
+#endif
 
-#ifdef _WITH_SNMP_
-	run_alarms();
-	netsnmp_check_outstanding_agent_requests();
+	thread = rb_search(&master->child_pid, &th, rb_data, thread_child_pid_cmp);
+
+#ifdef _EPOLL_DEBUG_
+	if (do_epoll_debug)
+		log_message(LOG_INFO, "Child %d terminated with status 0x%x, thread_id %lu", pid, (unsigned)status, thread ? thread->id : 0);
 #endif
 
-	/* There is no ready thread. */
 	if (!thread)
-		goto retry;
+		return;
 
-	*fetch = *thread;
-	thread->type = THREAD_UNUSED;
-	thread_add_unuse(m, thread);
+	rb_erase(&thread->rb_data, &master->child_pid);
+
+	thread->u.c.status = status;
+
+	if (permanent_vrrp_checker_error)
+	{
+		/* The child had a permanant error, so no point in respawning */
+		rb_erase_cached(&thread->n, &m->child);
+		thread_add_unuse(m, thread);
 
-	return fetch;
+		thread_add_terminate_event(m);
+	}
+	else
+		thread_move_ready(m, &m->child, thread, THREAD_CHILD_TERMINATED);
 }
 
 /* Synchronous signal handler to reap child processes */
 void
-thread_child_handler(void * v, int sig)
+thread_child_handler(__attribute__((unused)) void *v, __attribute__((unused)) int unused)
 {
-	thread_master_t * m = v;
-
-	/*
-	 * This is O(n^2), but there will only be a few entries on
-	 * this list.
-	 */
-	thread_t *thread;
 	pid_t pid;
-	int status = 77;
+	int status;
+
 	while ((pid = waitpid(-1, &status, WNOHANG))) {
 		if (pid == -1) {
 			if (errno == ECHILD)
 				return;
-			DBG("waitpid error: %s", strerror(errno));
+			log_message(LOG_DEBUG, "waitpid error %d: %s", errno, strerror(errno));
 			assert(0);
-		} else {
-			thread = m->child.head;
-			while (thread) {
-				thread_t *t;
-				t = thread;
-				thread = t->next;
-				if (pid == t->u.c.pid) {
-					thread_list_delete(&m->child, t);
-					thread_list_add(&m->ready, t);
-					t->u.c.status = status;
-					t->type = THREAD_READY;
-					break;
-				}
-			}
+
+			return;
 		}
+		process_child_termination(pid, status);
 	}
 }
 
-
-/* Make unique thread id for non pthread version of thread manager. */
-unsigned long int
-thread_get_id(void)
-{
-	static unsigned long int counter = 0;
-	return ++counter;
-}
-
-/* Call thread ! */
 void
-thread_call(thread_t * thread)
+thread_add_base_threads(thread_master_t *m,
+#ifndef _WITH_SNMP_
+					    __attribute__ ((unused))
+#endif
+								     bool with_snmp)
 {
-	thread->id = thread_get_id();
-	(*thread->func) (thread);
+	m->timer_thread = thread_add_read(m, thread_timerfd_handler, NULL, m->timer_fd, TIMER_NEVER, false);
+	add_signal_read_thread(m);
+#ifdef _WITH_SNMP_
+	if (with_snmp)
+		m->snmp_timer_thread = thread_add_timer(m, snmp_timeout_thread, 0, TIMER_NEVER);
+#endif
 }
 
 /* Our infinite scheduling loop */
 void
-launch_scheduler(void)
+launch_thread_scheduler(thread_master_t *m)
 {
-	thread_t thread;
+// TODO - do this somewhere better
+	signal_set(SIGCHLD, thread_child_handler, m);
 
-	signal_set(SIGCHLD, thread_child_handler, master);
+	process_threads(m);
+}
 
-	/*
-	 * Processing the master thread queues,
-	 * return and execute one ready thread.
-	 */
-	while (thread_fetch(master, &thread)) {
-		/* Run until error, used for debuging only */
-#ifdef _DEBUG_
-		if ((debug & 520) == 520) {
-			debug &= ~520;
-			thread_add_terminate_event(master);
-		}
+#ifdef THREAD_DUMP
+void
+register_scheduler_addresses(void)
+{
+#ifdef _WITH_SNMP_
+	register_thread_address("snmp_timeout_thread", snmp_timeout_thread);
+	register_thread_address("snmp_read_thread", snmp_read_thread);
 #endif
-		thread_call(&thread);
-	}
+	register_thread_address("thread_timerfd_handler", thread_timerfd_handler);
+
+	register_signal_handler_address("thread_child_handler", thread_child_handler);
 }
+#endif
diff --git a/tools/keepalived/lib/scheduler.h b/tools/keepalived/lib/scheduler.h
index a2026f48d..fea99cd01 100644
--- a/tools/keepalived/lib/scheduler.h
+++ b/tools/keepalived/lib/scheduler.h
@@ -1,122 +1,266 @@
 /*
- * Soft:        Keepalived is a failover program for the LVS project
- *              <www.linuxvirtualserver.org>. It monitor & manipulate
- *              a loadbalanced server pool using multi-layer checks.
+ * Soft:	Keepalived is a failover program for the LVS project
+ *		<www.linuxvirtualserver.org>. It monitor & manipulate
+ *		a loadbalanced server pool using multi-layer checks.
  *
- * Part:        scheduler.c include file.
+ * Part:	scheduler.c include file.
  *
- * Author:      Alexandre Cassen, <acassen@linux-vs.org>
+ * Author:	Alexandre Cassen, <acassen@linux-vs.org>
  *
- *              This program is distributed in the hope that it will be useful,
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
- *              See the GNU General Public License for more details.
+ *		This program is distributed in the hope that it will be useful,
+ *		but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *		MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *		See the GNU General Public License for more details.
  *
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
+ *		This program is free software; you can redistribute it and/or
+ *		modify it under the terms of the GNU General Public License
+ *		as published by the Free Software Foundation; either version
+ *		2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _SCHEDULER_H
 #define _SCHEDULER_H
 
 /* system includes */
-#include <sys/time.h>
 #include <sys/types.h>
-#include <sys/wait.h>
-#include <assert.h>
-#include <fcntl.h>
-#include <errno.h>
-#include <syslog.h>
+#include <stdbool.h>
+#include <stdlib.h>
+#include <sys/timerfd.h>
+#ifdef _WITH_SNMP_
+#include <sys/select.h>
+#endif
+
 #include "timer.h"
+#include "list.h"
+#include "list_head.h"
+#include "rbtree.h"
+
+/* Thread types. */
+typedef enum {
+	THREAD_READ,		/* thread_master.read rb tree */
+	THREAD_WRITE,		/* thread_master.write rb tree */
+	THREAD_TIMER,		/* thread_master.timer rb tree */
+	THREAD_TIMER_SHUTDOWN,	/* thread_master.timer rb tree */
+	THREAD_CHILD,		/* thread_master.child rb tree */
+#define THREAD_MAX_WAITING THREAD_CHILD
+	THREAD_UNUSED,		/* thread_master.unuse list_head */
+
+	/* The following are all on the thread_master.next list_head */
+	THREAD_READY,
+	THREAD_EVENT,
+	THREAD_WRITE_TIMEOUT,
+	THREAD_READ_TIMEOUT,
+	THREAD_CHILD_TIMEOUT,
+	THREAD_CHILD_TERMINATED,
+	THREAD_TERMINATE_START,
+	THREAD_TERMINATE,
+	THREAD_READY_READ_FD,
+	THREAD_READY_WRITE_FD,
+	THREAD_READ_ERROR,
+	THREAD_WRITE_ERROR,
+#ifdef USE_SIGNAL_THREADS
+	THREAD_SIGNAL,
+#endif
+} thread_type_t;
+
+/* Thread Event flags */
+enum thread_flags {
+	THREAD_FL_READ_BIT,
+	THREAD_FL_WRITE_BIT,
+	THREAD_FL_EPOLL_BIT,
+	THREAD_FL_EPOLL_READ_BIT,
+	THREAD_FL_EPOLL_WRITE_BIT,
+};
+
+/* epoll def */
+#define THREAD_EPOLL_REALLOC_THRESH	64
+
+typedef struct _thread thread_t;
+typedef const thread_t * thread_ref_t;
+typedef int (*thread_func_t)(thread_ref_t);
 
 /* Thread itself. */
-typedef struct _thread {
+struct _thread {
 	unsigned long id;
-	unsigned char type;		/* thread type */
-	struct _thread *next;		/* next pointer of the thread */
-	struct _thread *prev;		/* previous pointer of the thread */
+	thread_type_t type;		/* thread type */
 	struct _thread_master *master;	/* pointer to the struct thread_master. */
-	int (*func) (struct _thread *);	/* event function */
+	thread_func_t func;		/* event function */
 	void *arg;			/* event argument */
 	timeval_t sands;		/* rest of time sands value. */
 	union {
 		int val;		/* second argument of the event. */
-		int fd;			/* file descriptor in case of read/write. */
+		struct {
+			int fd;		/* file descriptor in case of read/write. */
+			bool close_on_reload;
+		} f;
 		struct {
 			pid_t pid;	/* process id a child thread is wanting. */
 			int status;	/* return status of the process */
 		} c;
 	} u;
-} thread_t;
+	struct _thread_event *event;	/* Thread Event back-pointer */
 
-/* Linked list of thread. */
-typedef struct _thread_list {
-	thread_t *head;
-	thread_t *tail;
-	int count;
-} thread_list_t;
+	union {
+		rb_node_t n;
+		list_head_t next;
+	};
+
+	rb_node_t rb_data;		/* PID or fd/vrid */
+};
+
+/* Thread Event */
+typedef struct _thread_event {
+	thread_t		*read;
+	thread_t		*write;
+	unsigned long		flags;
+	int			fd;
 
-/* Master of the theads. */
+	rb_node_t		n;
+} thread_event_t;
+
+/* Master of the threads. */
 typedef struct _thread_master {
-	thread_list_t read;
-	thread_list_t write;
-	thread_list_t timer;
-	thread_list_t child;
-	thread_list_t event;
-	thread_list_t ready;
-	thread_list_t unuse;
-	fd_set readfd;
-	fd_set writefd;
-	fd_set exceptfd;
-	unsigned long alloc;
+	rb_root_cached_t	read;
+	rb_root_cached_t	write;
+	rb_root_cached_t	timer;
+	rb_root_cached_t	child;
+	list_head_t		event;
+#ifdef USE_SIGNAL_THREADS
+	list_head_t 		signal;
+#endif
+	list_head_t		ready;
+	list_head_t		unuse;
+
+	/* child process related */
+	rb_root_t		child_pid;
+
+	/* epoll related */
+	rb_root_t		io_events;
+	struct epoll_event	*epoll_events;
+	thread_event_t		*current_event;
+	unsigned int		epoll_size;
+	unsigned int		epoll_count;
+	int			epoll_fd;
+
+	/* timer related */
+	int			timer_fd;
+	thread_ref_t		timer_thread;
+
+	/* signal related */
+	int			signal_fd;
+
+#ifdef _WITH_SNMP_
+	/* snmp related */
+	thread_ref_t		snmp_timer_thread;
+	int			snmp_fdsetsize;
+	fd_set			snmp_fdset;
+#endif
+
+	/* Local data */
+	unsigned long		alloc;
+	unsigned long		id;
+	bool			shutdown_timer_running;
 } thread_master_t;
 
-/* Thread types. */
-#define THREAD_READ		0
-#define THREAD_WRITE		1
-#define THREAD_TIMER		2
-#define THREAD_EVENT		3
-#define THREAD_CHILD		4
-#define THREAD_READY		5
-#define THREAD_UNUSED		6
-#define THREAD_WRITE_TIMEOUT	7
-#define THREAD_READ_TIMEOUT	8
-#define THREAD_CHILD_TIMEOUT	9
-#define THREAD_TERMINATE	10
-#define THREAD_READY_FD		11
+#ifndef _DEBUG_
+typedef enum {
+	PROG_TYPE_PARENT,
+#ifdef _WITH_VRRP_
+	PROG_TYPE_VRRP,
+#endif
+#ifdef _WITH_LVS_
+	PROG_TYPE_CHECKER,
+#endif
+#ifdef _WITH_BFD_
+	PROG_TYPE_BFD,
+#endif
+} prog_type_t;
+#endif
 
 /* MICRO SEC def */
 #define BOOTSTRAP_DELAY TIMER_HZ
-#define RESPAWN_TIMER	60*TIMER_HZ
 
 /* Macros. */
 #define THREAD_ARG(X) ((X)->arg)
-#define THREAD_FD(X)  ((X)->u.fd)
 #define THREAD_VAL(X) ((X)->u.val)
 #define THREAD_CHILD_PID(X) ((X)->u.c.pid)
 #define THREAD_CHILD_STATUS(X) ((X)->u.c.status)
 
+/* Exit codes */
+#define KEEPALIVED_EXIT_OK			EXIT_SUCCESS
+#define KEEPALIVED_EXIT_NO_MEMORY		(EXIT_FAILURE  )
+#define KEEPALIVED_EXIT_FATAL			(EXIT_FAILURE+1)
+#define KEEPALIVED_EXIT_CONFIG			(EXIT_FAILURE+2)
+#define KEEPALIVED_EXIT_CONFIG_TEST		(EXIT_FAILURE+3)
+#define KEEPALIVED_EXIT_CONFIG_TEST_SECURITY	(EXIT_FAILURE+4)
+#define KEEPALIVED_EXIT_NO_CONFIG		(EXIT_FAILURE+5)
+
+#define DEFAULT_CHILD_FINDER ((void *)1)
+
 /* global vars exported */
 extern thread_master_t *master;
+#ifndef _DEBUG_
+extern prog_type_t prog_type;		/* Parent/VRRP/Checker process */
+#endif
+#ifdef _WITH_SNMP_
+extern bool snmp_running;
+#endif
+#ifdef _EPOLL_DEBUG_
+extern bool do_epoll_debug;
+#endif
+#ifdef _EPOLL_THREAD_DUMP_
+extern bool do_epoll_thread_dump;
+#endif
 
 /* Prototypes. */
+extern void set_child_finder_name(char const * (*)(pid_t));
+extern void save_cmd_line_options(int, char * const *);
+extern void log_command_line(unsigned);
+#ifndef _DEBUG_
+extern bool report_child_status(int, pid_t, const char *);
+#endif
 extern thread_master_t *thread_make_master(void);
-extern thread_t *thread_add_terminate_event(thread_master_t *);
+extern thread_ref_t thread_add_terminate_event(thread_master_t *);
+extern thread_ref_t thread_add_start_terminate_event(thread_master_t *, thread_func_t);
+#ifdef THREAD_DUMP
+extern void dump_thread_data(const thread_master_t *, FILE *);
+#endif
+extern void thread_cleanup_master(thread_master_t *);
 extern void thread_destroy_master(thread_master_t *);
-extern thread_t *thread_add_read(thread_master_t *, int (*func) (thread_t *), void *, int, long);
-extern thread_t *thread_add_write(thread_master_t *, int (*func) (thread_t *), void *, int, long);
-extern thread_t *thread_add_timer(thread_master_t *, int (*func) (thread_t *), void *, long);
-extern thread_t *thread_add_child(thread_master_t *, int (*func) (thread_t *), void *, pid_t, long);
-extern thread_t *thread_add_event(thread_master_t *, int (*func) (thread_t *), void *, int);
-extern int thread_cancel(thread_t *);
-extern void thread_cancel_event(thread_master_t *, void *);
-extern thread_t *thread_fetch(thread_master_t *, thread_t *);
+extern thread_ref_t thread_add_read_sands(thread_master_t *, thread_func_t, void *, int, const timeval_t *, bool);
+extern thread_ref_t thread_add_read(thread_master_t *, thread_func_t, void *, int, unsigned long, bool);
+extern int thread_del_read(thread_ref_t);
+extern void thread_requeue_read(thread_master_t *, int, const timeval_t *);
+extern thread_ref_t thread_add_write(thread_master_t *, thread_func_t, void *, int, unsigned long, bool);
+extern int thread_del_write(thread_ref_t);
+extern void thread_close_fd(thread_ref_t);
+extern thread_ref_t thread_add_timer(thread_master_t *, thread_func_t, void *, unsigned long);
+extern void timer_thread_update_timeout(thread_ref_t, unsigned long);
+extern thread_ref_t thread_add_timer_shutdown(thread_master_t *, thread_func_t, void *, unsigned long);
+extern thread_ref_t thread_add_child(thread_master_t *, thread_func_t, void *, pid_t, unsigned long);
+extern void thread_children_reschedule(thread_master_t *, thread_func_t, unsigned long);
+extern thread_ref_t thread_add_event(thread_master_t *, thread_func_t, void *, int);
+extern void thread_cancel(thread_ref_t);
+extern void thread_cancel_read(thread_master_t *, int);
+#ifdef _WITH_SNMP_
+extern int snmp_timeout_thread(thread_ref_t);
+extern void snmp_epoll_reset(thread_master_t *);
+#endif
+extern void process_threads(thread_master_t *);
 extern void thread_child_handler(void *, int);
-extern void thread_call(thread_t *);
-extern void launch_scheduler(void);
+extern void thread_add_base_threads(thread_master_t *, bool);
+extern void launch_thread_scheduler(thread_master_t *);
+#ifdef THREAD_DUMP
+extern const char *get_signal_function_name(void (*)(void *, int));
+extern void register_signal_handler_address(const char *, void (*)(void *, int));
+extern void register_thread_address(const char *, thread_func_t);
+extern void deregister_thread_addresses(void);
+extern void register_scheduler_addresses(void);
+#endif
+#ifdef _VRRP_FD_DEBUG_
+extern void set_extra_threads_debug(void (*)(void));
+#endif
 
 #endif
diff --git a/tools/keepalived/lib/signals.c b/tools/keepalived/lib/signals.c
index 983c71d2f..8626624a4 100644
--- a/tools/keepalived/lib/signals.c
+++ b/tools/keepalived/lib/signals.c
@@ -1,13 +1,13 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        Signals framework.
- *  
+ *
  * Author:      Kevin Lindsay, <kevinl@netnation.com>
  *              Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
@@ -18,198 +18,577 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <signal.h>
+#include "config.h"
+
 #include <string.h>
-#include <unistd.h>
 #include <fcntl.h>
-#include <sys/types.h>
+#include <unistd.h>
 #include <sys/wait.h>
 #include <errno.h>
-#include <assert.h>
-#include <syslog.h>
+#ifdef HAVE_SIGNALFD
+#include <sys/signalfd.h>
+#endif
+#ifdef _INCLUDE_UNUSED_CODE_
+#include <sys/epoll.h>
+#endif
+#include <inttypes.h>
 
 #include "signals.h"
 #include "utils.h"
+#include "logger.h"
+#include "scheduler.h"
+#include "assert_debug.h"
+
+#ifdef _WITH_JSON_
+#include "../keepalived/include/vrrp_json.h"
+#endif
+
+#ifdef _WITH_JSON_
+  /* We need to include the realtime signals, but
+   * unfortunately SIGRTMIN/SIGRTMAX are not constants.
+   * I'm not clear if _NSIG is always defined, so play safe.
+   * Although we are not meant to use __SIGRTMAX, we are
+   * using it here as an upper bound, which is rather different. */
+  #ifdef _NSIG
+    #define SIG_MAX	_NSIG
+  #elif defined __SIGRTMAX
+    #define SIG_MAX __SIGRTMAX
+  #else
+    #define SIG_MAX 64
+  #endif
+#else
+  /* The signals currently used are HUP, INT, TERM, USR1,
+   * USR2, CHLD and XCPU. */
+  #if SIGCHLD > SIGUSR2
+    /* Architectures except alpha and sparc - see signal(7) */
+    #if HAVE_DECL_RLIMIT_RTTIME == 1
+      #define SIG_MAX SIGXCPU
+    #else
+      #define SIG_MAX SIGCHLD
+    #endif
+  #else
+    /* alpha and sparc */
+    #define SIG_MAX SIGUSR2
+  #endif
+#endif
 
 /* Local Vars */
-void (*signal_SIGHUP_handler) (void *, int sig);
-void *signal_SIGHUP_v;
-void (*signal_SIGINT_handler) (void *, int sig);
-void *signal_SIGINT_v;
-void (*signal_SIGTERM_handler) (void *, int sig);
-void *signal_SIGTERM_v;
-void (*signal_SIGCHLD_handler) (void *, int sig);
-void *signal_SIGCHLD_v;
+#ifndef USE_SIGNAL_THREADS
+static void (*signal_handler_func[SIG_MAX]) (void *, int sig);
+static void *signal_v[SIG_MAX];
+#endif
 
+#ifdef HAVE_SIGNALFD
+static int signal_fd = -1;
+static sigset_t signal_fd_set;
+#else
 static int signal_pipe[2] = { -1, -1 };
+#endif
+
+/* Remember signal disposition for not default disposition */
+static sigset_t dfl_sig;
 
+/* Signal handlers set in parent */
+static sigset_t parent_sig;
+
+/* Signal handling thread */
+static thread_ref_t signal_thread;
+
+int __attribute__((pure))
+get_signum(const char *sigfunc)
+{
+	if (!strcmp(sigfunc, "STOP"))
+		return SIGTERM;
+	else if (!strcmp(sigfunc, "RELOAD"))
+		return SIGHUP;
+	else if (!strcmp(sigfunc, "DATA"))
+		return SIGUSR1;
+	else if (!strcmp(sigfunc, "STATS"))
+		return SIGUSR2;
+#ifdef _WITH_JSON_
+	else if (!strcmp(sigfunc, "JSON"))
+		return SIGJSON;
+#endif
+
+	/* Not found */
+	return -1;
+}
+
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+static void
+log_sigxcpu(__attribute__((unused)) void * ptr, __attribute__((unused)) int signum)
+{
+	log_message(LOG_INFO, "%s process has used too much CPU time, %s_rlimit_rtime may need to be increased",
+#ifdef _DEBUG_
+		    "Main debug",
+#else
+#ifdef _WITH_VRRP_
+		    prog_type == PROG_TYPE_VRRP ? "VRRP" :
+#endif
+#ifdef _WITH_LVS_
+		    prog_type == PROG_TYPE_CHECKER ? "Checker" :
+#endif
+#ifdef _WITH_BFD_
+		    prog_type == PROG_TYPE_BFD ? "BFD" :
+#endif
+		    "Unknown",
+#endif
+#ifdef _DEBUG_
+		    "UNDEFINED"
+#else
+#ifdef _WITH_VRRP_
+		    prog_type == PROG_TYPE_VRRP ? "vrrp" :
+#endif
+#ifdef _WITH_LVS_
+		    prog_type == PROG_TYPE_CHECKER ? "checker" :
+#endif
+#ifdef _WITH_BFD_
+		    prog_type == PROG_TYPE_BFD ? "bfd" :
+#endif
+		    "Unknown"
+#endif
+		    );
+}
+#endif
+
+#ifdef _INCLUDE_UNUSED_CODE_
 /* Local signal test */
-int
+bool
 signal_pending(void)
 {
-	fd_set readset;
 	int rc;
-	struct timeval timeout = { 0, 0 };
+	int efd;
+	struct epoll_event ev = { .events = EPOLLIN };
 
-	FD_ZERO(&readset);
-	FD_SET(signal_pipe[0], &readset);
+	efd = epoll_create(1);
+#ifdef HAVE_SIGNALFD
+	epoll_ctl(efd, EPOLL_CTL_ADD, signal_fd,  &ev);
+#else
+	epoll_ctl(efd, EPOLL_CTL_ADD, signal_pipe[0],  &ev);
+#endif
+	rc = epoll_wait(efd, &ev, 1, 0);
+	close(efd);
 
-	rc = select(signal_pipe[0] + 1, &readset, NULL, NULL, &timeout);
-
-	return rc>0?1:0;
+	return rc > 0;
 }
+#endif
 
 /* Signal flag */
-void
-signal_handler(int sig)
+#ifndef HAVE_SIGNALFD
+static void
+signal_handler(uint32_t sig)
 {
-	if (write(signal_pipe[1], &sig, sizeof(int)) != sizeof(int)) {
+	if (write(signal_pipe[1], &sig, sizeof(uint32_t)) != sizeof(uint32_t)) {
 		DBG("signal_pipe write error %s", strerror(errno));
 		assert(0);
+
+		log_message(LOG_INFO, "BUG - write to signal_pipe[1] error %s - please report", strerror(errno));
 	}
-}	
+}
+#endif
 
 /* Signal wrapper */
-void *
+void
 signal_set(int signo, void (*func) (void *, int), void *v)
 {
 	int ret;
+	sigset_t sset;
 	struct sigaction sig;
+#ifndef HAVE_SIGNALFD
 	struct sigaction osig;
+#endif
+#ifdef _SIGNAL_DEBUG_
+	static int max_signo = SIG_MAX;
+	static int min_signo = 1;
+
+	if ((signo < min_signo) || (signo > max_signo)) {
+		log_message(LOG_ERR, "BUG - signal %d out of range (1..%d)", signo, SIG_MAX);
+		if (signo > max_signo)
+			max_signo = signo;
+		else
+			min_signo = signo;
+		return;
+	}
+#endif
+
+	if (func == (void *)SIG_DFL)
+		sigaddset(&dfl_sig, signo);
+	else
+		sigdelset(&dfl_sig, signo);
+
+	if (func == (void*)SIG_IGN || func == (void*)SIG_DFL) {
+		/* We are no longer handling the signal, so
+		 * clear our handlers */
+		func = NULL;
+		v = NULL;
+	}
+
+#ifdef HAVE_SIGNALFD
+	sigemptyset(&sset);
+	sigaddset(&sset, signo);
+
+	sigemptyset(&sig.sa_mask);
+	sig.sa_flags = 0;
+
+	if (!func) {
+		sigdelset(&signal_fd_set, signo);
+		sig.sa_handler = SIG_IGN;
+	}
+	else {
+		sigaddset(&signal_fd_set, signo);
+		sigmask_func(SIG_BLOCK, &sset, NULL);
+		sig.sa_handler = SIG_DFL;
+	}
+
+	/* Don't open signal_fd if clearing the handler */
+	if (func || signal_fd != -1) {
+		ret = signalfd(signal_fd, &signal_fd_set, 0);
+		if (ret == -1)
+			log_message(LOG_INFO, "BUG - signal_fd update failed - %d (%s), please report", errno, strerror(errno));
+	}
+
+	if (sigaction(signo, &sig, NULL))
+		log_message(LOG_INFO, "sigaction failed for signalfd");
+
+	if (!func)
+		sigmask_func(SIG_UNBLOCK, &sset, NULL);
+#else
+	if (func)
+		sig.sa_handler = signal_handler;
+	else
+		sig.sa_handler = (void*)func;
 
-	sig.sa_handler = signal_handler;
 	sigemptyset(&sig.sa_mask);
 	sig.sa_flags = 0;
-#ifdef SA_RESTART
 	sig.sa_flags |= SA_RESTART;
-#endif				/* SA_RESTART */
 
-	ret = sigaction(signo, &sig, &osig);
+	/* Block the signal we are about to configure, to avoid
+	 * any race conditions while setting the handler and
+	 * parameter */
+	if (func) {
+		sigemptyset(&sset);
+		sigaddset(&sset, signo);
+		sigmask_func(SIG_BLOCK, &sset, NULL);
 
-	switch(signo) {
-	case SIGHUP:
-		signal_SIGHUP_handler = func;
-		signal_SIGHUP_v = v;
-		break;
-	case SIGINT:
-		signal_SIGINT_handler = func;
-		signal_SIGINT_v = v;
-		break;
-	case SIGTERM:
-		signal_SIGTERM_handler = func;
-		signal_SIGTERM_v = v;
-		break;
-	case SIGCHLD:
-		signal_SIGCHLD_handler = func;
-		signal_SIGCHLD_v = v;
-		break;
+		/* Remember what signals we set, so any child processes can clear them */
+		sigaddset(&parent_sig, signo);
 	}
+	else
+		sigdelset(&parent_sig, signo);
+
+	ret = sigaction(signo, &sig, &osig);
+#endif
 
+	signal_handler_func[signo-1] = func;
+	signal_v[signo-1] = v;
+
+#ifndef HAVE_SIGNALFD
 	if (ret < 0)
-		return (SIG_ERR);
-	else
-		return (osig.sa_handler);
+		return;
+
+	/* Release the signal */
+	if (func != NULL)
+		sigmask_func(SIG_UNBLOCK, &sset, NULL);
+#endif
 }
 
 /* Signal Ignore */
-void *
+void
 signal_ignore(int signo)
 {
-	return signal_set(signo, NULL, NULL);
+	signal_set(signo, (void *)SIG_IGN, NULL);
+	sigdelset(&parent_sig, signo);
+}
+
+/* Handlers callback  */
+static int
+signal_run_callback(thread_ref_t thread)
+{
+	uint32_t sig;
+#ifdef HAVE_SIGNALFD
+	struct signalfd_siginfo siginfo;
+
+	while (read(signal_fd, &siginfo, sizeof(struct signalfd_siginfo)) == sizeof(struct signalfd_siginfo)) {
+		sig = siginfo.ssi_signo;
+#else
+	while (read(signal_pipe[0], &sig, sizeof(uint32_t)) == sizeof(uint32_t)) {
+#endif
+
+#ifdef _EPOLL_DEBUG_
+		if (do_epoll_debug) {
+			if (sig >= 1 && sig < sizeof(signal_handler_func) / sizeof(signal_handler_func[0]))
+				log_message(LOG_INFO, "Signal %" PRIu32 ", func %s()", sig, get_signal_function_name(signal_handler_func[sig-1]));
+			else
+				log_message(LOG_INFO, "Signal %" PRIu32 ", unknown function", sig);
+		}
+#endif
+
+#ifdef USE_SIGNAL_THREADS
+		/* This is instead of signal_handler_func[] array if signals are
+		 * handled by threads. The thread handling function would have to
+		 * do a thread_add_signal() to reinstate itself. */
+		list_for_each_entry_safe(t, t_tmp, &m->signal, next) {
+			if (t->u.val == sig) {
+				list_head_del(&t->next);
+				INIT_LIST_HEAD(&t->next);
+				list_add_tail(&t->next, &m->ready);
+				t->type = THREAD_READY;
+			}
+		}
+#else
+		if (sig >= 1 && sig <= SIG_MAX && signal_handler_func[sig-1])
+			signal_handler_func[sig-1](signal_v[sig-1], sig);
+#endif
+	}
+
+	signal_thread = thread_add_read(master, signal_run_callback, NULL, thread->u.f.fd, TIMER_NEVER, false);
+
+	return 0;
+}
+
+static void
+clear_signal_handler_addresses(void)
+{
+	int i;
+
+	for (i = 0; i < SIG_MAX; i++)
+		signal_handler_func[i] = NULL;
 }
 
 /* Handlers intialization */
 void
-signal_handler_init(void)
+add_signal_read_thread(thread_master_t *thread_master)
 {
-	int n = pipe(signal_pipe);
-	assert(!n);
+	signal_thread = thread_add_read(thread_master, signal_run_callback, NULL, thread_master->signal_fd, TIMER_NEVER, false);
+}
 
-	fcntl(signal_pipe[0], F_SETFL, O_NONBLOCK | fcntl(signal_pipe[0], F_GETFL));
-	fcntl(signal_pipe[1], F_SETFL, O_NONBLOCK | fcntl(signal_pipe[1], F_GETFL));
+void
+cancel_signal_read_thread(void)
+{
+	if (signal_thread) {
+		thread_cancel(signal_thread);
+		signal_thread = NULL;
+	}
+}
+
+static int
+open_signal_fd(void)
+{
+#ifdef HAVE_SIGNALFD
+	sigemptyset(&signal_fd_set);
+
+#ifdef SFD_NONBLOCK	/* From Linux 2.6.26 */
+	signal_fd = signalfd(signal_fd, &signal_fd_set, SFD_NONBLOCK | SFD_CLOEXEC);
+#else
+	signal_fd = signalfd(signal_fd, &signal_fd_set, 0);
+
+	if (signal_fd != -1) {
+		fcntl(signal_fd, F_SETFL, O_NONBLOCK | fcntl(signal_fd, F_GETFL));
+		fcntl(signal_fd, F_SETFD, FD_CLOEXEC | fcntl(signal_fd, F_GETFD));
+	}
+#endif
+	if (signal_fd == -1)
+		log_message(LOG_INFO, "BUG - signal_fd init failed - %d (%s), please report", errno, strerror(errno));
 
-	signal_SIGHUP_handler = NULL;
-	signal_SIGINT_handler = NULL;
-	signal_SIGTERM_handler = NULL;
-	signal_SIGCHLD_handler = NULL;
+	return signal_fd;
+#else
+	if (open_pipe(signal_pipe))
+		log_message(LOG_INFO, "BUG - pipe in open_signal_fd() failed - %d (%s), please report", errno, strerror(errno));
+
+	return signal_pipe[0];
+#endif
 }
 
-void
-signal_wait_handlers(void)
+static void
+signal_handler_parent_init(void)
 {
-	struct sigaction sig;
+	sigset_t sset;
+	int sig;
+	struct sigaction act;
 
-	sig.sa_handler = SIG_DFL;
-	sigemptyset(&sig.sa_mask);
-	sig.sa_flags = 0;
+	/* Ignore all signals except essential ones */
+	sigemptyset(&sset);
+	sigaddset(&sset, SIGILL);
+	sigaddset(&sset, SIGFPE);
+	sigaddset(&sset, SIGSEGV);
+	sigaddset(&sset, SIGBUS);
+	sigaddset(&sset, SIGKILL);
+	sigaddset(&sset, SIGSTOP);
 
-	/* Ensure no more pending signals */
-	sigaction(SIGHUP, &sig, NULL);
-	sigaction(SIGINT, &sig, NULL);
-	sigaction(SIGTERM, &sig, NULL);
-	sigaction(SIGCHLD, &sig, NULL);
+	dfl_sig = sset;
+
+	act.sa_handler = SIG_IGN;
+	sigemptyset(&act.sa_mask);
+	act.sa_flags = 0;
 
-	/* reset */
-	signal_SIGHUP_v = NULL;
-	signal_SIGINT_v = NULL;
-	signal_SIGTERM_v = NULL;
-	signal_SIGCHLD_v = NULL;
+	for (sig = 1; sig <= SIGRTMAX; sig++) {
+		if (!sigismember(&sset, sig))
+			sigaction(sig, &act, NULL);
+	}
+
+#ifdef HAVE_SIGNALFD
+	sigemptyset(&sset);
+	sigmask_func(SIG_SETMASK, &sset, NULL);
+#endif
 }
 
-void signal_reset(void)
+#ifndef _DEBUG_
+static void
+signal_handler_child_init(void)
 {
-	signal_wait_handlers();
-	signal_SIGHUP_handler = NULL;
-	signal_SIGINT_handler = NULL;
-	signal_SIGTERM_handler = NULL;
-	signal_SIGCHLD_handler = NULL;
+	struct sigaction act;
+	int sig;
+
+	act.sa_handler = SIG_IGN;
+	sigemptyset(&act.sa_mask);
+	act.sa_flags = 0;
+
+	for (sig = 1; sig <= SIGRTMAX; sig++) {
+		if (sigismember(&parent_sig, sig))
+			sigaction(sig, &act, NULL);
+	}
+}
+#endif
+
+int
+signal_handler_init(void)
+{
+	int fd;
+
+#ifdef _DEBUG_
+	signal_handler_parent_init();
+#else
+	if (prog_type == PROG_TYPE_PARENT)
+		signal_handler_parent_init();
+	else
+		signal_handler_child_init();
+#endif
+
+	sigemptyset(&parent_sig);
+
+	fd = open_signal_fd();
+
+	clear_signal_handler_addresses();
+
+	return fd;
+}
+
+static void
+signal_handlers_clear(void *state)
+{
+	/* Ensure no more pending signals */
+	signal_set(SIGHUP, state, NULL);
+	signal_set(SIGINT, state, NULL);
+	signal_set(SIGTERM, state, NULL);
+	signal_set(SIGCHLD, state, NULL);
+	signal_set(SIGUSR1, state, NULL);
+	signal_set(SIGUSR2, state, NULL);
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+	signal_set(SIGXCPU, state, NULL);
+#endif
+#ifdef _WITH_JSON_
+	signal_set(SIGJSON, state, NULL);
+#endif
 }
 
 void
 signal_handler_destroy(void)
 {
-	signal_wait_handlers();
-	close(signal_pipe[1]);
-	close(signal_pipe[0]);
-	signal_pipe[1] = -1;
-	signal_pipe[0] = -1;
-}	
+	if (signal_thread) {
+		thread_cancel(signal_thread);
+		signal_thread = NULL;
+	}
 
-int
-signal_rfd(void)
-{
-	return(signal_pipe[0]);
+#ifdef HAVE_SIGNALFD
+	if (signal_fd != -1) {
+		close(signal_fd);
+		signal_fd = -1;
+	}
+	sigemptyset(&signal_fd_set);
+#endif
+
+	signal_handlers_clear(SIG_IGN);
+
+#ifndef HAVE_SIGNALFD
+	if (signal_pipe[1] != -1) {
+		close(signal_pipe[1]);
+		signal_pipe[1] = -1;
+	}
+	if (signal_pipe[0] != -1) {
+		close(signal_pipe[0]);
+		signal_pipe[0] = -1;
+	}
+#endif
 }
 
-/* Handlers callback  */
+/* Called prior to exec'ing a script. The script can reasonably
+ * expect to have the standard signal disposition */
 void
-signal_run_callback(void)
+signal_handler_script(void)
 {
+	struct sigaction dfl;
 	int sig;
+#ifdef HAVE_SIGNALFD
+	sigset_t sset;
+
+	if (signal_fd != -1){
+		close(signal_fd);
+		signal_fd = -1;
+	}
+#endif
 
-	while(read(signal_pipe[0], &sig, sizeof(int)) == sizeof(int)) {
-		switch(sig) {
-		case SIGHUP:
-			if (signal_SIGHUP_handler)
-				signal_SIGHUP_handler(signal_SIGHUP_v, SIGHUP);
-			break;
-		case SIGINT:
-			if (signal_SIGINT_handler)
-				signal_SIGINT_handler(signal_SIGINT_v, SIGINT);
-			break;
-		case SIGTERM:
-			if (signal_SIGTERM_handler)
-				signal_SIGTERM_handler(signal_SIGTERM_v, SIGTERM);
-			break;	
-		case SIGCHLD:	
-			if (signal_SIGCHLD_handler)
-				signal_SIGCHLD_handler(signal_SIGCHLD_v, SIGCHLD);
-			break;
-		default:
-			break;
-		}	
+	dfl.sa_handler = SIG_DFL;
+	dfl.sa_flags = 0;
+	sigemptyset(&dfl.sa_mask);
+
+	for (sig = 1; sig <= SIGRTMAX; sig++) {
+		if (!sigismember(&dfl_sig, sig))
+			sigaction(sig, &dfl, NULL);
+	}
+
+#ifdef HAVE_SIGNALFD
+	sigemptyset(&sset);
+	sigmask_func(SIG_SETMASK, &sset, NULL);
+#endif
+}
+
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+void
+set_sigxcpu_handler(void)
+{
+	signal_set(SIGXCPU, log_sigxcpu, NULL);
+#ifdef THREAD_DUMP
+	register_signal_handler_address("log_sigxcpu", log_sigxcpu);
+#endif
+}
+#endif
+
+void signal_fd_close(int min_fd)
+{
+#ifdef HAVE_SIGNALFD
+	if (signal_fd >= min_fd) {
+		close(signal_fd);
+		signal_fd = -1;
+	}
+#else
+	if (signal_pipe[0] >= min_fd) {
+		close(signal_pipe[0]);
+		signal_pipe[0] = -1;
+	}
+	if (signal_pipe[1] >= min_fd) {
+		close(signal_pipe[1]);
+		signal_pipe[1] = -1;
 	}
+#endif
+}
+
+#ifdef THREAD_DUMP
+void
+register_signal_thread_addresses(void)
+{
+        register_thread_address("signal_run_callback", signal_run_callback);
 }
+#endif
diff --git a/tools/keepalived/lib/signals.h b/tools/keepalived/lib/signals.h
index 59fac4ac7..1146f93f5 100644
--- a/tools/keepalived/lib/signals.h
+++ b/tools/keepalived/lib/signals.h
@@ -1,10 +1,10 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        signals.c include file.
- *  
+ *
  * Author:      Kevin Lindsay, <kevinl@netnation.com>
  *              Alexandre Cassen, <acassen@linux-vs.org>
  *
@@ -18,22 +18,46 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _SIGNALS_H
 #define _SIGNALS_H
 
+#include "config.h"
+
+#include <signal.h>
+#include <stdbool.h>
+
+#include "scheduler.h"
+
+static inline int
+sigmask_func(int how, const sigset_t *set, sigset_t *oldset)
+{
+#ifdef _WITH_PTHREADS_
+    return pthread_sigmask(how, set, oldset);
+#else
+    return sigprocmask(how, set, oldset);
+#endif
+}
+
 /* Prototypes */
-extern int signal_pending(void);
-extern void *signal_set(int signo, void (*func) (void *, int), void *);
-extern void *signal_ignore(int signo);
-extern void signal_handler_init(void);
+extern int get_signum(const char *);
+extern void signal_set(int, void (*) (void *, int), void *);
+extern void signal_ignore(int);
+extern int signal_handler_init(void);
 extern void signal_handler_destroy(void);
-extern void signal_reset(void);
-extern void signal_run_callback(void);
-extern void signal_wait_handlers(void);
+extern void signal_handler_script(void);
+extern void add_signal_read_thread(thread_master_t *);
+extern void cancel_signal_read_thread(void);
+#if HAVE_DECL_RLIMIT_RTTIME == 1
+extern void set_sigxcpu_handler(void);
+#endif
 
-extern int signal_rfd(void);
+extern void signal_fd_close(int);
+
+#ifdef THREAD_DUMP
+extern void register_signal_thread_addresses(void);
+#endif
 
 #endif
diff --git a/tools/keepalived/lib/timer.c b/tools/keepalived/lib/timer.c
index fc38b21e0..7b85e41ac 100644
--- a/tools/keepalived/lib/timer.c
+++ b/tools/keepalived/lib/timer.c
@@ -1,12 +1,12 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        Timer manipulations.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
@@ -17,212 +17,177 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
-#include <stdio.h>
+#include "config.h"
+
 #include <string.h>
 #include <errno.h>
+#include <sys/time.h>
+#include <time.h>
+#include <stdbool.h>
+
 #include "timer.h"
+#ifdef _TIMER_CHECK_
+#include "logger.h"
+#endif
 
 /* time_now holds current time */
-timeval_t time_now = { tv_sec: 0, tv_usec: 0 };
+timeval_t time_now;
+#ifdef _TIMER_CHECK_
+static timeval_t last_time;
+bool do_timer_check;
+#endif
 
-/* set a timer to a specific value */
 timeval_t
-timer_dup(timeval_t b)
+timer_add_long(timeval_t a, unsigned long b)
 {
-	timeval_t a;
-
-	timer_reset(a);
-	a.tv_sec = b.tv_sec;
-	a.tv_usec = b.tv_usec;
-	return a;
-}
+	if (b == TIMER_NEVER)
+	{
+		a.tv_usec = TIMER_HZ - 1;
+		a.tv_sec = LONG_MAX;
 
-/* timer compare */
-int
-timer_cmp(timeval_t a, timeval_t b)
-{
-	if (a.tv_sec > b.tv_sec)
-		return 1;
-	if (a.tv_sec < b.tv_sec)
-		return -1;
-	if (a.tv_usec > b.tv_usec)
-		return 1;
-	if (a.tv_usec < b.tv_usec)
-		return -1;
-	return 0;
-}
-
-/* timer sub */
-timeval_t
-timer_sub(timeval_t a, timeval_t b)
-{
-	timeval_t ret;
+		return a;
+	}
 
-	timer_reset(ret);
-	ret.tv_usec = a.tv_usec - b.tv_usec;
-	ret.tv_sec = a.tv_sec - b.tv_sec;
+	a.tv_usec += b % TIMER_HZ;
+	a.tv_sec += b / TIMER_HZ;
 
-	if (ret.tv_usec < 0) {
-		ret.tv_usec += TIMER_HZ;
-		ret.tv_sec--;
+	if (a.tv_usec >= TIMER_HZ) {
+		a.tv_sec++;
+		a.tv_usec -= TIMER_HZ;
 	}
 
-	return ret;
+	return a;
 }
 
-/* timer add */
 timeval_t
-timer_add_long(timeval_t a, long b)
+timer_sub_long(timeval_t a, unsigned long b)
 {
-	timeval_t ret;
+	if (a.tv_usec < (suseconds_t)(b % TIMER_HZ)) {
+		a.tv_usec += TIMER_HZ;
+		a.tv_sec--;
+	}
+	a.tv_usec -= b % TIMER_HZ;
+	a.tv_sec -= b / TIMER_HZ;
 
-	timer_reset(ret);
-	ret.tv_usec = a.tv_usec + b % TIMER_HZ;
-	ret.tv_sec = a.tv_sec + b / TIMER_HZ;
+	return a;
+}
 
-	if (ret.tv_usec >= TIMER_HZ) {
-		ret.tv_sec++;
-		ret.tv_usec -= TIMER_HZ;
+static void
+set_mono_offset(struct timespec *ts)
+{
+	struct timespec realtime, realtime_1, mono_offset;
+
+	/* Calculate the offset of the realtime clock from the monotonic
+	 * clock. We read the realtime clock twice and take the mean,
+	 * which should then make it very close to the time the monotonic
+	 * clock was read. */
+	clock_gettime(CLOCK_REALTIME, &realtime);
+	clock_gettime(CLOCK_MONOTONIC, &mono_offset);
+	clock_gettime(CLOCK_REALTIME, &realtime_1);
+
+	/* Calculate the mean realtime */
+	realtime.tv_nsec = (realtime.tv_nsec + realtime_1.tv_nsec) / 2;
+	if ((realtime.tv_sec + realtime_1.tv_sec) & 1)
+		realtime.tv_nsec += NSEC_PER_SEC / 2;
+	realtime.tv_sec = (realtime.tv_sec + realtime_1.tv_sec) / 2;
+
+	if (realtime.tv_nsec < mono_offset.tv_nsec) {
+		realtime.tv_nsec += NSEC_PER_SEC;
+		realtime.tv_sec--;
 	}
+	realtime.tv_sec -= mono_offset.tv_sec;
+	realtime.tv_nsec -= mono_offset.tv_nsec;
 
-	return ret;
+	*ts = realtime;
 }
 
-/* This function is a wrapper for gettimeofday(). It uses local storage to
- * guarantee that the returned time will always be monotonic. If the time goes
- * backwards, it returns the same as previous one and readjust its internal
- * drift. If the time goes forward further than TIME_MAX_FORWARD_US
- * microseconds since last call, it will bound it to that value. It is designed
- * to be used as a drop-in replacement of gettimeofday(&now, NULL). It will
- * normally return 0, unless <now> is NULL, in which case it will return -1 and
- * set errno to EFAULT.
+/* This function is a wrapper for gettimeofday(). It uses the monotonic clock to
+ * guarantee that the returned time will always be monotonicly increasing.
+ * When called for the first time it calculates the difference between the
+ * monotonic clock and the realtime clock, and this difference is then subsequently
+ * added to the monotonic clock to return a monotonic approximation to realtime.
+ *
+ * It is designed to be used as a drop-in replacement of gettimeofday(&now, NULL).
+ * It will normally return 0, unless <now> is NULL, in which case it will
+ * return -1 and set errno to EFAULT.
  */
-int monotonic_gettimeofday(timeval_t *now)
+static int
+monotonic_gettimeofday(timeval_t *now)
 {
-	static timeval_t mono_date;
-	static timeval_t drift; /* warning: signed seconds! */
-	timeval_t sys_date, adjusted, deadline;
+	static struct timespec mono_offset;
+	static bool initialised = false;
+	struct timespec cur_time;
 
 	if (!now) {
 		errno = EFAULT;
 		return -1;
 	}
 
-	gettimeofday(&sys_date, NULL);
-
-	/* on first call, we set mono_date to system date */
-	if (mono_date.tv_sec == 0) {
-		mono_date = sys_date;
-		drift.tv_sec = drift.tv_usec = 0;
-		*now = mono_date;
-		return 0;
-	}
-
-	/* compute new adjusted time by adding the drift offset */
-	adjusted.tv_sec  = sys_date.tv_sec  + drift.tv_sec;
-	adjusted.tv_usec = sys_date.tv_usec + drift.tv_usec;
-	if (adjusted.tv_usec >= TIMER_HZ) {
-		adjusted.tv_usec -= TIMER_HZ;
-		adjusted.tv_sec++;
+	if (!initialised) {
+		set_mono_offset(&mono_offset);
+		initialised = true;
 	}
 
-	/* check for jumps in the past, and bound to last date */
-	if (adjusted.tv_sec  <  mono_date.tv_sec ||
-	    (adjusted.tv_sec  == mono_date.tv_sec &&
-	     adjusted.tv_usec <  mono_date.tv_usec))
-		goto fixup;
-
-	/* check for jumps too far in the future, and bound them to
-	 * TIME_MAX_FORWARD_US microseconds.
-	 */
-	deadline.tv_sec  = mono_date.tv_sec  + TIME_MAX_FORWARD_US / TIMER_HZ;
-	deadline.tv_usec = mono_date.tv_usec + TIME_MAX_FORWARD_US % TIMER_HZ;
-	if (deadline.tv_usec >= TIMER_HZ) {
-		deadline.tv_usec -= TIMER_HZ;
-		deadline.tv_sec++;
+	/* Read the monotonic clock and add the offset we initially
+	 * calculated of the realtime clock */
+	clock_gettime(CLOCK_MONOTONIC, &cur_time);
+	cur_time.tv_sec += mono_offset.tv_sec;
+	cur_time.tv_nsec += mono_offset.tv_nsec;
+	if (cur_time.tv_nsec > NSEC_PER_SEC) {
+		cur_time.tv_nsec -= NSEC_PER_SEC;
+		cur_time.tv_sec++;
 	}
 
-	if (adjusted.tv_sec  >  deadline.tv_sec ||
-	    (adjusted.tv_sec  == deadline.tv_sec &&
-	     adjusted.tv_usec >= deadline.tv_usec)) {
-		mono_date = deadline;
-		goto fixup;
-	}
-
-	/* adjusted date is correct */
-	mono_date = adjusted;
-	*now = mono_date;
-	return 0;
+	TIMESPEC_TO_TIMEVAL(now, &cur_time);
 
- fixup:
-	/* Now we have to recompute the drift between sys_date and
-	 * mono_date. Since it can be negative and we don't want to
-	 * play with negative carries in all computations, we take
-	 * care of always having the microseconds positive.
-	 */
-	drift.tv_sec  = mono_date.tv_sec  - sys_date.tv_sec;
-	drift.tv_usec = mono_date.tv_usec - sys_date.tv_usec;
-	if (drift.tv_usec < 0) {
-		drift.tv_usec += TIMER_HZ;
-		drift.tv_sec--;
-	}
-	*now = mono_date;
 	return 0;
 }
 
 /* current time */
 timeval_t
+#ifdef _TIMER_CHECK_
+timer_now_r(const char *file, const char *function, int line_no)
+#else
 timer_now(void)
+#endif
 {
 	timeval_t curr_time;
-	int old_errno = errno;
 
 	/* init timer */
-	timer_reset(curr_time);
 	monotonic_gettimeofday(&curr_time);
-	errno = old_errno;
+
+#ifdef _TIMER_CHECK_
+	if (do_timer_check) {
+		unsigned long timediff = (curr_time.tv_sec - last_time.tv_sec) * 1000000 + curr_time.tv_usec - last_time.tv_usec;
+		log_message(LOG_INFO, "timer_now called from %s %s:%d - difference %lu usec", file, function, line_no, timediff);
+		last_time = curr_time;
+	}
+#endif
 
 	return curr_time;
 }
 
 /* sets and returns current time from system time */
 timeval_t
+#ifdef _TIMER_CHECK_
+set_time_now_r(const char *file, const char *function, int line_no)
+#else
 set_time_now(void)
+#endif
 {
-	int old_errno = errno;
-
 	/* init timer */
-	timer_reset(time_now);
 	monotonic_gettimeofday(&time_now);
-	errno = old_errno;
 
-	return time_now;
-}
-
-/* timer sub from current time */
-timeval_t
-timer_sub_now(timeval_t a)
-{
-	return timer_sub(time_now, a);
-}
-
-/* print timer value */
-void
-timer_dump(timeval_t a)
-{
-	unsigned long timer;
-	timer = a.tv_sec * TIMER_HZ + a.tv_usec;
-	printf("=> %lu (usecs)\n", timer);
-}
+#ifdef _TIMER_CHECK_
+	if (do_timer_check) {
+		unsigned long timediff = (time_now.tv_sec - last_time.tv_sec) * 1000000 + time_now.tv_usec - last_time.tv_usec;
+		log_message(LOG_INFO, "set_time_now called from %s %s:%d, time %ld.%6.6ld difference %lu usec", file, function, line_no, time_now.tv_sec, time_now.tv_usec, timediff);
+		last_time = time_now;
+	}
+#endif
 
-unsigned long
-timer_tol(timeval_t a)
-{
-	unsigned long timer;
-	timer = a.tv_sec * TIMER_HZ + a.tv_usec;
-	return timer;
+	return time_now;
 }
-
diff --git a/tools/keepalived/lib/timer.h b/tools/keepalived/lib/timer.h
index 8b314915f..b4b09674f 100644
--- a/tools/keepalived/lib/timer.h
+++ b/tools/keepalived/lib/timer.h
@@ -1,10 +1,10 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        timer.c include file.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -17,39 +17,115 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _TIMER_H
 #define _TIMER_H
 
 #include <sys/time.h>
+#include <limits.h>
+#include <string.h>
+#include <stdbool.h>
 
 typedef struct timeval timeval_t;
 
 /* Global vars */
 extern timeval_t time_now;
 
+#ifdef _TIMER_CHECK_
+extern bool do_timer_check;
+#endif
+
 /* Some defines */
-#define TIME_MAX_FORWARD_US	2000000
 #define TIMER_HZ		1000000
-#define TIMER_MAX_SEC		1000
+#define TIMER_HZ_FLOAT		1000000.0F
+#define TIMER_HZ_DOUBLE		((double)1000000.0F)
+#define TIMER_CENTI_HZ		10000
+#define TIMER_MAX_SEC		1000U
+#define TIMER_NEVER		ULONG_MAX	/* Used with time intervals in TIMER_HZ units */
+#define TIMER_DISABLED		LONG_MIN	/* Value in timeval_t tv_sec */
+
+#define	NSEC_PER_SEC		1000000000	/* nanoseconds per second. Avoids typos by having a definition */
+
+#ifdef _TIMER_CHECK_
+#define timer_now()	timer_now_r((__FILE__), (__func__), (__LINE__))
+#define set_time_now()	set_time_now_r((__FILE__), (__func__), (__LINE__))
+#endif
+
+#define RB_TIMER_CMP(obj)					\
+static inline int						\
+obj##_timer_cmp(const obj##_t *r1, const obj##_t *r2)		\
+{								\
+	if (r1->sands.tv_sec == TIMER_DISABLED) {		\
+		if (r2->sands.tv_sec == TIMER_DISABLED)		\
+			return 0;				\
+		return 1;					\
+	}							\
+								\
+	if (r2->sands.tv_sec == TIMER_DISABLED)			\
+		return -1;					\
+								\
+	if (r1->sands.tv_sec != r2->sands.tv_sec)		\
+		return r1->sands.tv_sec - r2->sands.tv_sec;	\
+								\
+	return r1->sands.tv_usec - r2->sands.tv_usec;		\
+}
+
+/* timer sub from current time */
+static inline timeval_t
+timer_sub_now(timeval_t a)
+{
+	timersub(&a, &time_now, &a);
 
-/* Some usefull macros */
-#define timer_sec(T) ((T).tv_sec)
-#define timer_long(T) ((T).tv_sec * TIMER_HZ + (T).tv_usec)
-#define timer_isnull(T) ((T).tv_sec == 0 && (T).tv_usec == 0)
-#define timer_reset(T) (memset(&(T), 0, sizeof(timeval_t)))
+	return a;
+}
+
+/* timer add to current time */
+static inline timeval_t
+timer_add_now(timeval_t a)
+{
+	timeradd(&time_now, &a, &a);
+
+	return a;
+}
+
+/* Returns true if time a + diff_hz < time_now */
+static inline bool
+timer_cmp_now_diff(timeval_t a, unsigned long diff_hz)
+{
+	timeval_t b = { .tv_sec = diff_hz / TIMER_HZ, .tv_usec = diff_hz % TIMER_HZ };
+
+	timeradd(&b, &a, &b);
+
+	return !!timercmp(&b, &time_now, <);
+}
+
+/* Return time as unsigned long */
+static inline unsigned long
+timer_long(timeval_t a)
+{
+	return (unsigned long)a.tv_sec * TIMER_HZ + (unsigned long)a.tv_usec;
+}
+
+#ifdef _INCLUDE_UNUSED_CODE_
+/* print timer value */
+static inline void
+timer_dump(timeval_t a)
+{
+	printf("=> %lu (usecs)\n", timer_tol(a));
+}
+#endif
 
 /* prototypes */
+#ifdef _TIMER_CHECK_
+extern timeval_t timer_now_r(const char *, const char *, int);
+extern timeval_t set_time_now_r(const char *, const char *, int);
+#else
 extern timeval_t timer_now(void);
 extern timeval_t set_time_now(void);
-extern timeval_t timer_dup(timeval_t);
-extern int timer_cmp(timeval_t, timeval_t);
-extern timeval_t timer_sub(timeval_t, timeval_t);
-extern timeval_t timer_add_long(timeval_t, long);
-extern timeval_t timer_sub_now(timeval_t);
-extern void timer_dump(timeval_t);
-extern unsigned long timer_tol(timeval_t);
+#endif
+extern timeval_t timer_add_long(timeval_t, unsigned long);
+extern timeval_t timer_sub_long(timeval_t, unsigned long);
 
 #endif
diff --git a/tools/keepalived/lib/utils.c b/tools/keepalived/lib/utils.c
index ef84a1bef..0fc5dd452 100644
--- a/tools/keepalived/lib/utils.c
+++ b/tools/keepalived/lib/utils.c
@@ -17,20 +17,67 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
+/* System includes */
+#include <string.h>
+#include <unistd.h>
+#include <fcntl.h>
+#include <stdlib.h>
+#include <netdb.h>
+#include <arpa/inet.h>
+#include <sys/utsname.h>
+#include <sys/stat.h>
+#include <stdint.h>
+#include <errno.h>
+#include <sys/prctl.h>
+#if defined _WITH_LVS_ || defined _LIBIPSET_DYNAMIC_
+#include <sys/wait.h>
+#endif
+#ifdef _WITH_PERF_
+#include <stdio.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <sys/epoll.h>
+#include <sys/inotify.h>
+#endif
+
+#if !defined _HAVE_LIBIPTC_ || defined _LIBIPTC_DYNAMIC_
+#include <signal.h>
+#include <sys/wait.h>
+#endif
+
+#ifdef _WITH_STACKTRACE_
+#include <sys/stat.h>
+#include <execinfo.h>
+#include <memory.h>
+#endif
+
+/* Local includes */
+#include "utils.h"
+#include "memory.h"
 #include "utils.h"
+#include "signals.h"
+#include "bitops.h"
+#include "parser.h"
+#include "logger.h"
+#if !defined _HAVE_LIBIPTC_ || defined _LIBIPTC_DYNAMIC_
+#include "process.h"
+#endif
 
 /* global vars */
-int debug = 0;
+unsigned long debug = 0;
+mode_t umask_val = S_IXUSR | S_IRWXG | S_IRWXO;
 
 /* Display a buffer into a HEXA formated output */
 void
-dump_buffer(char *buff, int count)
+dump_buffer(const char *buff, size_t count, FILE* fp, int indent)
 {
-	int i, j, c;
-	int printnext = 1;
+	size_t i, j, c;
+	bool printnext = true;
 
 	if (count % 16)
 		c = count + (16 - count % 16);
@@ -39,43 +86,292 @@ dump_buffer(char *buff, int count)
 
 	for (i = 0; i < c; i++) {
 		if (printnext) {
-			printnext--;
-			printf("%.4x ", i & 0xffff);
+			printnext = false;
+			fprintf(fp, "%*s%.4zu ", indent, "", i & 0xffff);
 		}
 		if (i < count)
-			printf("%3.2x", buff[i] & 0xff);
+			fprintf(fp, "%3.2x", (unsigned char)buff[i] & 0xff);
 		else
-			printf("   ");
+			fprintf(fp, "   ");
 		if (!((i + 1) % 8)) {
 			if ((i + 1) % 16)
-				printf(" -");
+				fprintf(fp, " -");
 			else {
-				printf("   ");
+				fprintf(fp, "   ");
 				for (j = i - 15; j <= i; j++)
 					if (j < count) {
 						if ((buff[j] & 0xff) >= 0x20
 						    && (buff[j] & 0xff) <= 0x7e)
-							printf("%c",
+							fprintf(fp, "%c",
 							       buff[j] & 0xff);
 						else
-							printf(".");
+							fprintf(fp, ".");
 					} else
-						printf(" ");
-				printf("\n");
-				printnext = 1;
+						fprintf(fp, " ");
+				fprintf(fp, "\n");
+				printnext = true;
 			}
 		}
 	}
 }
 
+#ifdef CHECKSUM_DIAGNOSTICS
+void
+log_buffer(const char *msg, const void *buff, size_t count)
+{
+	char op_buf[60];	// Probably 56 really
+	const unsigned char *bufp = buff;
+	char *ptr;
+	size_t offs = 0;
+	unsigned i;
+
+	log_message(LOG_INFO, "%s - len %zu", msg, count);
+
+	while (offs < count) {
+		ptr = op_buf;
+		ptr += snprintf(ptr, op_buf + sizeof(op_buf) - ptr, "%4.4lx ", offs);
+
+		for (i = 0; i < 16 && offs < count; i++) {
+			if (i == 8)
+				*ptr++ = ' ';
+			ptr += snprintf(ptr, op_buf + sizeof(op_buf) - ptr, " %2.2x", bufp[offs++]);
+		}
+
+		log_message(LOG_INFO, "%s", op_buf);
+	}
+}
+#endif
+
+#ifdef _WITH_STACKTRACE_
+void
+write_stacktrace(const char *file_name, const char *str)
+{
+	int fd;
+	void *buffer[100];
+	unsigned int nptrs;
+	unsigned int i;
+	char **strs;
+
+	nptrs = backtrace(buffer, 100);
+	if (file_name) {
+		fd = open(file_name, O_WRONLY | O_APPEND | O_CREAT | O_NOFOLLOW, S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP | S_IROTH | S_IWOTH);
+		if (str)
+			dprintf(fd, "%s\n", str);
+		backtrace_symbols_fd(buffer, nptrs, fd);
+		if (write(fd, "\n", 1) != 1) {
+			/* We don't care, but this stops a warning on Ubuntu */
+		}
+		close(fd);
+	} else {
+		if (str)
+			log_message(LOG_INFO, "%s", str);
+		strs = backtrace_symbols(buffer, nptrs);
+		if (strs == NULL) {
+			log_message(LOG_INFO, "Unable to get stack backtrace");
+			return;
+		}
+
+		/* We don't need the call to this function, or the first two entries on the stack */
+		nptrs -= 2;
+		for (i = 1; i < nptrs; i++)
+			log_message(LOG_INFO, "  %s", strs[i]);
+		free(strs);
+	}
+}
+#endif
+
+const char *
+make_file_name(const char *name, const char *prog, const char *namespace, const char *instance)
+{
+	const char *extn_start;
+	const char *dir_end;
+	size_t len;
+	char *file_name;
+
+	if (!name)
+		return NULL;
+
+	len = strlen(name);
+	if (prog)
+		len += strlen(prog) + 1;
+	if (namespace)
+		len += strlen(namespace) + 1;
+	if (instance)
+		len += strlen(instance) + 1;
+
+	file_name = MALLOC(len + 1);
+	dir_end = strrchr(name, '/');
+	extn_start = strrchr(dir_end ? dir_end : name, '.');
+	strncpy(file_name, name, extn_start ? (size_t)(extn_start - name) : len);
+
+	if (prog) {
+		strcat(file_name, "_");
+		strcat(file_name, prog);
+	}
+	if (namespace) {
+		strcat(file_name, "_");
+		strcat(file_name, namespace);
+	}
+	if (instance) {
+		strcat(file_name, "_");
+		strcat(file_name, instance);
+	}
+	if (extn_start)
+		strcat(file_name, extn_start);
+
+	return file_name;
+}
+
+void
+set_process_name(const char *name)
+{
+	if (!name)
+		name = "keepalived";
+
+	if (prctl(PR_SET_NAME, name))
+		log_message(LOG_INFO, "Failed to set process name '%s'", name);
+}
+
+#ifdef _WITH_PERF_
+void
+run_perf(const char *process, const char *network_namespace, const char *instance_name)
+{
+	int ret;
+	pid_t pid;
+	char *orig_name = NULL;
+	const char *new_name;
+	const char *perf_name = "perf.data";
+	int in = -1;
+	int ep = -1;
+
+	do {
+		orig_name = MALLOC(PATH_MAX);
+		if (!getcwd(orig_name, PATH_MAX)) {
+			log_message(LOG_INFO, "Unable to get cwd");
+			break;
+		}
+
+#ifdef IN_CLOEXEC
+		in = inotify_init1(IN_CLOEXEC | IN_NONBLOCK);
+#else
+		if ((in = inotify_init()) != -1) {
+			fcntl(in, F_SETFD, FD_CLOEXEC | fcntl(n, F_GETFD));
+			fcntl(in, F_SETFL, O_NONBLOCK | fcntl(n, F_GETFL));
+		}
+#endif
+		if (in == -1) {
+			log_message(LOG_INFO, "inotify_init failed %d - %m", errno);
+			break;
+		}
+
+		if (inotify_add_watch(in, orig_name, IN_CREATE) == -1) {
+			log_message(LOG_INFO, "inotify_add_watch of %s failed %d - %m", orig_name, errno);
+			break;
+		}
+
+		pid = fork();
+
+		if (pid == -1) {
+			log_message(LOG_INFO, "fork() for perf failed");
+			break;
+		}
+
+		/* Child */
+		if (!pid) {
+			char buf[9];
+
+			snprintf(buf, sizeof buf, "%d", getppid());
+			execlp("perf", "perf", "record", "-p", buf, "-q", "-g", "--call-graph", "fp", NULL);
+			exit(0);
+		}
+
+		/* Parent */
+		char buf[sizeof(struct inotify_event) + NAME_MAX + 1];
+		struct inotify_event *ie = (struct inotify_event*)buf;
+		struct epoll_event ee = { .events = EPOLLIN, .data.fd = in };
+
+		if ((ep = epoll_create(1)) == -1) {
+			log_message(LOG_INFO, "perf epoll_create failed errno %d - %m", errno);
+			break;
+		}
+
+		if (epoll_ctl(ep, EPOLL_CTL_ADD, in, &ee) == -1) {
+			log_message(LOG_INFO, "perf epoll_ctl failed errno %d - %m", errno);
+			break;
+		}
+
+		do {
+			ret = epoll_wait(ep, &ee, 1, 1000);
+			if (ret == 0) {
+				log_message(LOG_INFO, "Timed out waiting for creation of %s", perf_name);
+				break;
+			}
+			else if (ret == -1) {
+				if (check_EINTR(errno))
+					continue;
+
+				log_message(LOG_INFO, "perf epoll returned errno %d - %m", errno);
+				break;
+			}
+
+			ret = read(in, buf, sizeof(buf));
+			if (ret == -1) {
+				if (check_EINTR(errno))
+					continue;
+
+				log_message(LOG_INFO, "perf inotify read returned errno %d %m", errno);
+				break;
+			}
+			if (ret < (int)sizeof(*ie)) {
+				log_message(LOG_INFO, "read returned %d", ret);
+				break;
+			}
+			if (!(ie->mask & IN_CREATE)) {
+				log_message(LOG_INFO, "mask is 0x%x", ie->mask);
+				continue;
+			}
+			if (!ie->len) {
+				log_message(LOG_INFO, "perf inotify read returned no len");
+				continue;
+			}
+
+			if (strcmp(ie->name, perf_name))
+				continue;
+
+			/* Rename the /perf.data file */
+			strcat(orig_name, perf_name);
+			new_name = make_file_name(orig_name, process,
+#if HAVE_DECL_CLONE_NEWNET
+							network_namespace,
+#else
+							NULL,
+#endif
+							instance_name);
+
+			if (rename(orig_name, new_name))
+				log_message(LOG_INFO, "Rename %s to %s failed - %m (%d)", orig_name, new_name, errno);
+
+			FREE_CONST(new_name);
+		} while (false);
+	} while (false);
+
+	if (ep != -1)
+		close(ep);
+	if (in != -1)
+		close(in);
+	if (orig_name)
+		FREE(orig_name);
+}
+#endif
+
 /* Compute a checksum */
-u_short
-in_csum(u_short * addr, int len, u_short csum)
+uint16_t
+in_csum(const uint16_t *addr, size_t len, uint32_t csum, uint32_t *acc)
 {
-	register int nleft = len;
-	const u_short *w = addr;
-	register u_short answer;
-	register int sum = csum;
+	register size_t nleft = len;
+	const uint16_t *w = addr;
+	register uint16_t answer;
+	register uint32_t sum = csum;
 
 	/*
 	 *  Our algorithm is simple, using a 32 bit accumulator (sum),
@@ -90,29 +386,33 @@ in_csum(u_short * addr, int len, u_short csum)
 
 	/* mop up an odd byte, if necessary */
 	if (nleft == 1)
-		sum += htons(*(u_char *) w << 8);
+		sum += htons(*(const u_char *)w << 8);
+
+	if (acc)
+		*acc = sum;
 
 	/*
 	 * add back carry outs from top 16 bits to low 16 bits
 	 */
 	sum = (sum >> 16) + (sum & 0xffff);	/* add hi 16 to low 16 */
 	sum += (sum >> 16);			/* add carry */
-	answer = ~sum;				/* truncate to 16 bits */
+	answer = (~sum & 0xffff);		/* truncate to 16 bits */
 	return (answer);
 }
 
 /* IP network to ascii representation */
-char *
+const char *
 inet_ntop2(uint32_t ip)
 {
 	static char buf[16];
-	unsigned char *bytep;
+	const unsigned char *bytep;
 
-	bytep = (unsigned char *) &(ip);
+	bytep = (const unsigned char *)&ip;
 	sprintf(buf, "%d.%d.%d.%d", bytep[0], bytep[1], bytep[2], bytep[3]);
 	return buf;
 }
 
+#ifdef _INCLUDE_UNUSED_CODE_
 /*
  * IP network to ascii representation. To use
  * for multiple IP address convertion into the same call.
@@ -120,105 +420,218 @@ inet_ntop2(uint32_t ip)
 char *
 inet_ntoa2(uint32_t ip, char *buf)
 {
-	unsigned char *bytep;
+	const unsigned char *bytep;
 
-	bytep = (unsigned char *) &(ip);
+	bytep = (const unsigned char *)&ip;
 	sprintf(buf, "%d.%d.%d.%d", bytep[0], bytep[1], bytep[2], bytep[3]);
 	return buf;
 }
+#endif
 
-/* IP string to network mask representation. CIDR notation. */
-uint8_t
-inet_stom(char *addr)
+/* IP string to network range representation. */
+bool
+inet_stor(const char *addr, uint32_t *range_end)
 {
-	uint8_t mask = 32;
-	char *cp = addr;
+	const char *cp;
+	char *endptr;
+	unsigned long range;
+	int family = strchr(addr, ':') ? AF_INET6 : AF_INET;
+	const char *warn = "";
+
+#ifndef _STRICT_CONFIG_
+	if (!__test_bit(CONFIG_TEST_BIT, &debug))
+		warn = "WARNING - ";
+#endif
 
-	if (!strstr(addr, "/"))
-		return mask;
-	while (*cp != '/' && *cp != '\0')
-		cp++;
-	if (*cp == '/')
-		return atoi(++cp);
-	return mask;
+	/* Return UINT32_MAX to indicate no range */
+	if (!(cp = strchr(addr, '-'))) {
+		*range_end = UINT32_MAX;
+		return true;
+	}
+
+	errno = 0;
+	range = strtoul(cp + 1, &endptr, family == AF_INET6 ? 16 : 10);
+	*range_end = range;
+
+	if (*endptr)
+		report_config_error(CONFIG_INVALID_NUMBER, "%sVirtual server group range '%s' has extra characters at end '%s'", warn, addr, endptr);
+	else if (errno == ERANGE ||
+		 (family == AF_INET6 && range > 0xffff) ||
+		 (family == AF_INET && range > 255)) {
+		report_config_error(CONFIG_INVALID_NUMBER, "Virtual server group range '%s' end '%s' too large", addr, cp + 1);
+
+		/* Indicate error */
+		return false;
+	}
+	else
+		return true;
+
+#ifdef _STRICT_CONFIG_
+        return false;
+#else
+        return !__test_bit(CONFIG_TEST_BIT, &debug);
+#endif
 }
 
-/* IP string to network range representation. */
-uint8_t
-inet_stor(char *addr)
+/* Domain to sockaddr_storage */
+int
+domain_stosockaddr(const char *domain, const char *port, struct sockaddr_storage *addr)
 {
-	char *cp = addr;
+	struct addrinfo *res = NULL;
+	unsigned port_num;
+
+	if (port) {
+		if (!read_unsigned(port, &port_num, 1, 65535, true)) {
+			addr->ss_family = AF_UNSPEC;
+			return -1;
+		}
+	}
+
+	if (getaddrinfo(domain, NULL, NULL, &res) != 0 || !res) {
+		addr->ss_family = AF_UNSPEC;
+		return -1;
+	}
+
+	addr->ss_family = (sa_family_t)res->ai_family;
+
+	if (addr->ss_family == AF_INET6) {
+		struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
+		*addr6 = *(struct sockaddr_in6 *)res->ai_addr;
+		if (port)
+			addr6->sin6_port = htons(port_num);
+	} else {
+		struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
+		*addr4 = *(struct sockaddr_in *)res->ai_addr;
+		if (port)
+			addr4->sin_port = htons(port_num);
+	}
+
+	freeaddrinfo(res);
 
-	if (!strstr(addr, "-"))
-		return 0;
-	while (*cp != '-' && *cp != '\0')
-		cp++;
-	if (*cp == '-')
-		return strtoul(++cp, NULL, (strchr(addr, ':')) ? 16 : 10);
 	return 0;
 }
 
-/* IP string to sockaddr_storage */
-int
-inet_stosockaddr(char *ip, char *port, struct sockaddr_storage *addr)
+/* IP string to sockaddr_storage
+ *   return value is "error". */
+bool
+inet_stosockaddr(const char *ip, const char *port, struct sockaddr_storage *addr)
 {
 	void *addr_ip;
-	char *cp = ip;
+	const char *cp;
+	char *ip_str = NULL;
+	unsigned port_num;
+	int res;
 
 	addr->ss_family = (strchr(ip, ':')) ? AF_INET6 : AF_INET;
 
-	/* remove range and mask stuff */
-	if (strstr(ip, "-")) {
-		while (*cp != '-' && *cp != '\0')
-			cp++;
-		if (*cp == '-')
-			*cp = 0;
-	} else if (strstr(ip, "/")) {
-		while (*cp != '/' && *cp != '\0')
-			cp++;
-		if (*cp == '/')
-			*cp = 0;
+	if (port) {
+		if (!read_unsigned(port, &port_num, 1, 65535, true)) {
+			addr->ss_family = AF_UNSPEC;
+			return true;
+		}
 	}
 
 	if (addr->ss_family == AF_INET6) {
 		struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
 		if (port)
-			addr6->sin6_port = htons(atoi(port));
+			addr6->sin6_port = htons(port_num);
 		addr_ip = &addr6->sin6_addr;
 	} else {
 		struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
 		if (port)
-			addr4->sin_port = htons(atoi(port));
+			addr4->sin_port = htons(port_num);
 		addr_ip = &addr4->sin_addr;
 	}
 
-	if (!inet_pton(addr->ss_family, ip, addr_ip))
-		return -1;
+	/* remove range and mask stuff */
+	if ((cp = strchr(ip, '-')) ||
+	    (cp = strchr(ip, '/')))
+		ip_str = STRNDUP(ip, cp - ip);
 
-	return 0;
+	res = inet_pton(addr->ss_family, ip_str ? ip_str : ip, addr_ip);
+
+	if (ip_str)
+		free(ip_str);
+
+	if (!res) {
+		addr->ss_family = AF_UNSPEC;
+		return true;
+	}
+
+	return false;
 }
 
 /* IPv4 to sockaddr_storage */
-int
-inet_ip4tosockaddr(uint32_t addr_ip, struct sockaddr_storage *addr)
+void
+inet_ip4tosockaddr(const struct in_addr *sin_addr, struct sockaddr_storage *addr)
 {
 	struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
 	addr4->sin_family = AF_INET;
-	addr4->sin_addr.s_addr = addr_ip;
-	return 0;
+	addr4->sin_addr = *sin_addr;
+}
+
+/* IPv6 to sockaddr_storage */
+void
+inet_ip6tosockaddr(const struct in6_addr *sin_addr, struct sockaddr_storage *addr)
+{
+	struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
+	addr6->sin6_family = AF_INET6;
+	addr6->sin6_addr = *sin_addr;
+}
+
+/* Check address, possibly with mask, is valid */
+bool
+check_valid_ipaddress(const char *str, bool allow_subnet_mask)
+{
+	int family;
+	unsigned long prefixlen;
+	const char *p;
+	char *endptr;
+	union {
+		struct in_addr in;
+		struct in6_addr in6;
+	} addr;
+	int res;
+	const char *str_dup = NULL;
+
+	if (!strchr(str, ':') && !strchr(str, '.'))
+		return false;
+
+	family = (strchr(str, ':')) ? AF_INET6 : AF_INET;
+
+	if (allow_subnet_mask)
+		p = strchr(str, '/');
+	else
+		p = NULL;
+
+	if (p) {
+		if (!p[1])
+			return false;
+		prefixlen = strtoul(p + 1, &endptr, 10);
+		if (*endptr || prefixlen > (family == AF_INET6 ? 128 : 32))
+			return false;
+		str_dup = STRNDUP(str, p - str);
+	}
+
+	res = inet_pton(family, str_dup ? str_dup : str, &addr);
+
+	if (str_dup)
+		FREE_CONST(str_dup);
+
+	return res;
 }
 
 /* IP network to string representation */
-char *
-inet_sockaddrtos2(struct sockaddr_storage *addr, char *addr_str)
+static char *
+inet_sockaddrtos2(const struct sockaddr_storage *addr, char *addr_str)
 {
-	void *addr_ip;
+	const void *addr_ip;
 
 	if (addr->ss_family == AF_INET6) {
-		struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
+		const struct sockaddr_in6 *addr6 = (const struct sockaddr_in6 *) addr;
 		addr_ip = &addr6->sin6_addr;
 	} else {
-		struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
+		const struct sockaddr_in *addr4 = (const struct sockaddr_in *) addr;
 		addr_ip = &addr4->sin_addr;
 	}
 
@@ -228,69 +641,154 @@ inet_sockaddrtos2(struct sockaddr_storage *addr, char *addr_str)
 	return addr_str;
 }
 
-char *
-inet_sockaddrtos(struct sockaddr_storage *addr)
+const char *
+inet_sockaddrtos(const struct sockaddr_storage *addr)
 {
 	static char addr_str[INET6_ADDRSTRLEN];
 	inet_sockaddrtos2(addr, addr_str);
 	return addr_str;
 }
 
-uint16_t
-inet_sockaddrport(struct sockaddr_storage *addr)
+uint16_t __attribute__ ((pure))
+inet_sockaddrport(const struct sockaddr_storage *addr)
 {
-	uint16_t port;
+	if (addr->ss_family == AF_INET6) {
+		const struct sockaddr_in6 *addr6 = (const struct sockaddr_in6 *) addr;
+		return addr6->sin6_port;
+	}
+
+	/* Note: this might be AF_UNSPEC if it is the sequence number of
+	 * a virtual server in a virtual server group */
+	const struct sockaddr_in *addr4 = (const struct sockaddr_in *) addr;
+	return addr4->sin_port;
+}
 
+void
+inet_set_sockaddrport(struct sockaddr_storage *addr, uint16_t port)
+{
 	if (addr->ss_family == AF_INET6) {
 		struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
-		port = addr6->sin6_port;
+		addr6->sin6_port = port;
 	} else {
 		struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
-		port = addr4->sin_port;
+		addr4->sin_port = port;
 	}
-	
-	return port;
 }
 
-char *
-inet_sockaddrtopair(struct sockaddr_storage *addr)
+const char *
+inet_sockaddrtopair(const struct sockaddr_storage *addr)
 {
-	static char addr_str[INET6_ADDRSTRLEN + 1];
-	static char ret[sizeof(addr_str) + 16];
+	char addr_str[INET6_ADDRSTRLEN];
+	static char ret[sizeof(addr_str) + 8];	/* '[' + addr_str + ']' + ':' + 'nnnnn' */
 
 	inet_sockaddrtos2(addr, addr_str);
-	snprintf(ret, sizeof(ret) - 1, "[%s]:%d"
+	snprintf(ret, sizeof(ret), "[%s]:%d"
 		, addr_str
 		, ntohs(inet_sockaddrport(addr)));
 	return ret;
 }
 
-uint32_t
-inet_sockaddrip4(struct sockaddr_storage *addr)
+char *
+inet_sockaddrtotrio_r(const struct sockaddr_storage *addr, uint16_t proto, char *buf)
+{
+	char addr_str[INET6_ADDRSTRLEN];
+	const char *proto_str =
+			proto == IPPROTO_TCP ? "tcp" :
+			proto == IPPROTO_UDP ? "udp" :
+			proto == IPPROTO_SCTP ? "sctp" :
+			proto == 0 ? "none" : "?";
+
+	inet_sockaddrtos2(addr, addr_str);
+	snprintf(buf, SOCKADDRTRIO_STR_LEN, "[%s]:%s:%d", addr_str, proto_str,
+		 ntohs(inet_sockaddrport(addr)));
+	return buf;
+}
+
+const char *
+inet_sockaddrtotrio(const struct sockaddr_storage *addr, uint16_t proto)
+{
+	static char ret[SOCKADDRTRIO_STR_LEN];
+
+	inet_sockaddrtotrio_r(addr, proto, ret);
+
+	return ret;
+}
+
+uint32_t __attribute__ ((pure))
+inet_sockaddrip4(const struct sockaddr_storage *addr)
 {
 	if (addr->ss_family != AF_INET)
-		return -1;
-	
-	return ((struct sockaddr_in *) addr)->sin_addr.s_addr;
+		return 0xffffffff;
+
+	return ((const struct sockaddr_in *) addr)->sin_addr.s_addr;
 }
 
 int
-inet_sockaddrip6(struct sockaddr_storage *addr, struct in6_addr *ip6)
+inet_sockaddrip6(const struct sockaddr_storage *addr, struct in6_addr *ip6)
 {
 	if (addr->ss_family != AF_INET6)
 		return -1;
-	
-	*ip6 = ((struct sockaddr_in6 *) addr)->sin6_addr;
+
+	*ip6 = ((const struct sockaddr_in6 *) addr)->sin6_addr;
+	return 0;
+}
+
+/* IPv6 address compare */
+int __attribute__ ((pure))
+inet_inaddrcmp(const int family, const void *a, const void *b)
+{
+	int64_t addr_diff;
+
+	if (family == AF_INET) {
+		addr_diff = (int64_t)ntohl(*((const uint32_t *) a)) - (int64_t)ntohl(*((const uint32_t *) b));
+		if (addr_diff > 0)
+			return 1;
+		if (addr_diff < 0)
+			return -1;
+		return 0;
+	}
+
+	if (family == AF_INET6) {
+		int i;
+
+		for (i = 0; i < 4; i++ ) {
+			addr_diff = (int64_t)ntohl(((const uint32_t *) (a))[i]) - (int64_t)ntohl(((const uint32_t *) (b))[i]);
+			if (addr_diff > 0)
+				return 1;
+			if (addr_diff < 0)
+				return -1;
+		}
+		return 0;
+	}
+
+	return -2;
+}
+
+int  __attribute__ ((pure))
+inet_sockaddrcmp(const struct sockaddr_storage *a, const struct sockaddr_storage *b)
+{
+	if (a->ss_family != b->ss_family)
+		return -2;
+
+	if (a->ss_family == AF_INET)
+		return inet_inaddrcmp(a->ss_family,
+				      &((const struct sockaddr_in *) a)->sin_addr,
+				      &((const struct sockaddr_in *) b)->sin_addr);
+	if (a->ss_family == AF_INET6)
+		return inet_inaddrcmp(a->ss_family,
+				      &((const struct sockaddr_in6 *) a)->sin6_addr,
+				      &((const struct sockaddr_in6 *) b)->sin6_addr);
 	return 0;
 }
 
 
+#ifdef _INCLUDE_UNUSED_CODE_
 /*
  * IP string to network representation
  * Highly inspired from Paul Vixie code.
  */
 int
-inet_ston(const char *addr, uint32_t * dst)
+inet_ston(const char *addr, uint32_t *dst)
 {
 	static char digits[] = "0123456789";
 	int saw_digit, octets, ch;
@@ -350,35 +848,397 @@ inet_cidrtomask(uint8_t cidr)
 		mask |= (1 << (31 - b));
 	return ntohl(mask);
 }
+#endif
+
+void
+format_mac_buf(char *op, size_t op_len, const unsigned char *addr, size_t addr_len)
+{
+	size_t i;
+	char *buf_end = op + op_len;
+
+	for (i = 0; i < addr_len; i++)
+		op += snprintf(op, buf_end - op, "%.2x%s",
+		      addr[i], i < addr_len -1 ? ":" : "");
+}
 
 /* Getting localhost official canonical name */
-char *
+const char * __attribute__((malloc))
 get_local_name(void)
 {
-	struct hostent *host;
 	struct utsname name;
+	struct addrinfo hints, *res = NULL;
+	char *canonname = NULL;
+
+	memset(&hints, 0, sizeof(struct addrinfo));
+	hints.ai_flags = AI_CANONNAME;
 
 	if (uname(&name) < 0)
 		return NULL;
 
-	if (!(host = gethostbyname(name.nodename)))
+	if (getaddrinfo(name.nodename, NULL, &hints, &res) != 0)
 		return NULL;
 
-	return host->h_name;
+	if (res && res->ai_canonname)
+		canonname = STRDUP(res->ai_canonname);
+
+	freeaddrinfo(res);
+
+	return canonname;
 }
 
 /* String compare with NULL string handling */
-int
+bool __attribute__ ((pure))
 string_equal(const char *str1, const char *str2)
 {
 	if (!str1 && !str2)
-		return 1;
-	if ((!str1 && str2) || (str1 && !str2))
-		return 0;
-	for (; *str1 == *str2; str1++, str2++) {
-		if (*str1 == 0 || *str2 == 0)
-			break;
+		return true;
+	if (!str1 != !str2)
+		return false;
+
+	return !strcmp(str1, str2);
+}
+
+/* Convert an integer into a string */
+int
+integer_to_string(const int value, char *str, size_t size)
+{
+	int i, len = 0, t = value, s = size;
+
+	for (i = value; i; i/=10) {
+		if (++len > s)
+			return -1;
+	}
+
+	for (i = 0; i < len; i++,t/=10)
+		str[len - (i + 1)] = t % 10 + '0';
+
+	return len;
+}
+
+/* We need to use O_NOFOLLOW if opening a file for write, so that a non privileged user can't
+ * create a symbolic link from the path to a system file and cause a system file to be overwritten. */
+FILE *fopen_safe(const char *path, const char *mode)
+{
+	int fd;
+	FILE *file;
+#ifdef ENABLE_LOG_FILE_APPEND
+	int flags = O_NOFOLLOW | O_CREAT | O_CLOEXEC;
+#endif
+	int sav_errno;
+	char file_tmp_name[PATH_MAX];
+
+	if (mode[0] == 'r')
+		return fopen(path, mode);
+
+	if ((mode[0] != 'a' && mode[0] != 'w') ||
+	    (mode[1] &&
+	     (mode[1] != '+' || mode[2]))) {
+		errno = EINVAL;
+		return NULL;
+	}
+
+	if (mode[0] == 'w') {
+		/* If we truncate an existing file, any non-privileged user who already has the file
+		 * open would be able to read what we write, even though the file access mode is changed.
+		 *
+		 * If we unlink an existing file and the desired file is subsequently created via open,
+		 * it leaves a window for someone else to create the same file between the unlink and the open.
+		 *
+		 * The solution is to create a temporary file that we will rename to the desired file name.
+		 * Since the temporary file is created owned by root with the only file access permissions being
+		 * owner read and write, no non root user will have access to the file. Further, the rename to
+		 * the requested filename is atomic, and so there is no window when someone else could create
+		 * another file of the same name.
+		 */
+		strcpy_safe(file_tmp_name, path);
+		if (strlen(path) + 6 < sizeof(file_tmp_name))
+			strcat(file_tmp_name, "XXXXXX");
+		else
+			strcpy(file_tmp_name + sizeof(file_tmp_name) - 6 - 1, "XXXXXX");
+		fd = mkostemp(file_tmp_name, O_CLOEXEC);
+	} else {
+		/* Only allow append mode if debugging features requiring append are enabled. Since we
+		 * can't unlink the file, there may be a non privileged user who already has the file open
+		 * for read (e.g. tail -f). If these debug option aren't enabled, there is no potential
+		 * security risk in that respect. */
+#ifndef ENABLE_LOG_FILE_APPEND
+		log_message(LOG_INFO, "BUG - shouldn't be opening file for append with current build options");
+		errno = EINVAL;
+		return NULL;
+#else
+		flags = O_NOFOLLOW | O_CREAT | O_CLOEXEC | O_APPEND;
+
+		if (mode[1])
+			flags |= O_RDWR;
+		else
+			flags |= O_WRONLY;
+
+		fd = open(path, flags, S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP | S_IROTH | S_IWOTH);
+#endif
+	}
+
+	if (fd == -1) {
+		sav_errno = errno;
+		log_message(LOG_INFO, "Unable to open '%s' - errno %d (%m)", path, errno);
+		errno = sav_errno;
+		return NULL;
+	}
+
+#ifndef ENABLE_LOG_FILE_APPEND
+	/* Change file ownership to root */
+	if (mode[0] == 'a' && fchown(fd, 0, 0)) {
+		sav_errno = errno;
+		log_message(LOG_INFO, "Unable to change file ownership of %s- errno %d (%m)", path, errno);
+		close(fd);
+		errno = sav_errno;
+		return NULL;
+	}
+#endif
+
+	/* Set file mode, default rw------- */
+	if (fchmod(fd, (S_IRUSR | S_IWUSR | S_IRGRP | S_IWGRP | S_IROTH | S_IWOTH) & ~umask_val)) {
+		sav_errno = errno;
+		log_message(LOG_INFO, "Unable to change file permission of %s - errno %d (%m)", path, errno);
+		close(fd);
+		errno = sav_errno;
+		return NULL;
+	}
+
+	if (mode[0] == 'w') {
+		/* Rename the temporary file to the one we want */
+		if (rename(file_tmp_name, path)) {
+			sav_errno = errno;
+			log_message(LOG_INFO, "Failed to rename %s to %s - errno %d (%m)", file_tmp_name, path, errno);
+			close(fd);
+			errno = sav_errno;
+			return NULL;
+		}
+	}
+
+	file = fdopen (fd, "w");
+	if (!file) {
+		sav_errno = errno;
+		log_message(LOG_INFO, "fdopen(\"%s\") failed - errno %d (%m)", path, errno);
+		close(fd);
+		errno = sav_errno;
+		return NULL;
+	}
+
+	return file;
+}
+
+void
+set_std_fd(bool force)
+{
+	int fd;
+
+	if (force || __test_bit(DONT_FORK_BIT, &debug)) {
+		fd = open("/dev/null", O_RDWR);
+		if (fd != -1) {
+			dup2(fd, STDIN_FILENO);
+			dup2(fd, STDOUT_FILENO);
+			dup2(fd, STDERR_FILENO);
+			if (fd > STDERR_FILENO)
+				close(fd);
+		}
+	}
+
+	signal_fd_close(STDERR_FILENO+1);
+
+	/* coverity[leaked_handle] */
+}
+
+void
+close_std_fd(void)
+{
+	close(STDIN_FILENO);
+	close(STDOUT_FILENO);
+	close(STDERR_FILENO);
+}
+
+#if !defined _HAVE_LIBIPTC_ || defined _LIBIPTC_DYNAMIC_
+int
+fork_exec(const char * const argv[])
+{
+	pid_t pid;
+	int ret_pid;
+	int status;
+	struct sigaction act, old_act;
+	int res = 0;
+	union non_const_args args;
+
+	act.sa_handler = SIG_DFL;
+	sigemptyset(&act.sa_mask);
+	act.sa_flags = 0;
+
+	sigaction(SIGCHLD, &act, &old_act);
+
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		flush_log_file();
+#endif
+
+	pid = local_fork();
+	if (pid < 0)
+		res = -1;
+	else if (pid == 0) {
+		/* Child */
+		set_std_fd(false);
+
+		signal_handler_script();
+
+		args.args = argv;       /* Note: we are casting away constness, since execvp parameter type is wrong */
+		execvp(*argv, args.execve_args);
+		exit(EXIT_FAILURE);
+	} else {
+		/* Parent */
+		while ((ret_pid = waitpid(pid, &status, 0)) == -1 && check_EINTR(errno));
+
+		if (ret_pid != pid || !WIFEXITED(status) || WEXITSTATUS(status) != EXIT_SUCCESS)
+			res = -1;
+	}
+
+	sigaction(SIGCHLD, &old_act, NULL);
+
+	return res;
+}
+#endif
+
+#if defined _WITH_VRRP_ || defined _WITH_BFD_
+int
+open_pipe(int pipe_arr[2])
+{
+	/* Open pipe */
+#ifdef HAVE_PIPE2
+	if (pipe2(pipe_arr, O_CLOEXEC | O_NONBLOCK) == -1)
+#else
+	if (pipe(pipe_arr) == -1)
+#endif
+		return -1;
+
+#ifndef HAVE_PIPE2
+	fcntl(pipe_arr[0], F_SETFL, O_NONBLOCK | fcntl(pipe_arr[0], F_GETFL));
+	fcntl(pipe_arr[1], F_SETFL, O_NONBLOCK | fcntl(pipe_arr[1], F_GETFL));
+
+	fcntl(pipe_arr[0], F_SETFD, FD_CLOEXEC | fcntl(pipe_arr[0], F_GETFD));
+	fcntl(pipe_arr[1], F_SETFD, FD_CLOEXEC | fcntl(pipe_arr[1], F_GETFD));
+#endif
+
+	return 0;
+}
+#endif
+
+/*
+ * memcmp time constant variant.
+ * Need to ensure compiler doesnt get too smart by optimizing generated asm code.
+ */
+__attribute__((optimize("O0"))) int __attribute__ ((pure))
+memcmp_constant_time(const void *s1, const void *s2, size_t n)
+{
+	const unsigned char *a, *b;
+	unsigned char ret = 0;
+	size_t i;
+
+	for (i = 0, a = s1, b = s2; i < n; i++)
+		ret |= (*a++ ^ *b++);
+
+	return ret;
+}
+
+/*
+ * Utility functions coming from Wensong code
+ */
+
+#if defined _WITH_LVS_ || defined _LIBIPSET_DYNAMIC_
+static char*
+get_modprobe(void)
+{
+	int procfile;
+	char *ret;
+	ssize_t count;
+	struct stat buf;
+
+	ret = MALLOC(PATH_MAX);
+	if (!ret)
+		return NULL;
+
+	procfile = open("/proc/sys/kernel/modprobe", O_RDONLY | O_CLOEXEC);
+	if (procfile < 0) {
+		FREE(ret);
+		return NULL;
+	}
+
+	count = read(procfile, ret, PATH_MAX - 1);
+	ret[PATH_MAX - 1] = '\0';
+	close(procfile);
+
+	if (count > 0 && count < PATH_MAX - 1)
+	{
+		if (ret[count - 1] == '\n')
+			ret[count - 1] = '\0';
+		else
+			ret[count] = '\0';
+
+		/* Check it is a regular file, with a execute bit set */
+		if (!stat(ret, &buf) &&
+		    S_ISREG(buf.st_mode) &&
+		    (buf.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH)))
+			return ret;
+	}
+
+	FREE(ret);
+
+	return NULL;
+}
+
+bool
+keepalived_modprobe(const char *mod_name)
+{
+	const char *argv[] = { "/sbin/modprobe", "-s", "--", mod_name, NULL };
+	int child;
+	int status;
+	int rc;
+	char *modprobe = get_modprobe();
+	struct sigaction act, old_act;
+	union non_const_args args;
+
+	if (modprobe)
+		argv[0] = modprobe;
+
+	act.sa_handler = SIG_DFL;
+	sigemptyset(&act.sa_mask);
+	act.sa_flags = 0;
+
+	sigaction ( SIGCHLD, &act, &old_act);
+
+#ifdef ENABLE_LOG_TO_FILE
+	if (log_file_name)
+		flush_log_file();
+#endif
+
+	if (!(child = fork())) {
+		args.args = argv;
+		/* coverity[tainted_string] */
+		execv(argv[0], args.execve_args);
+		exit(1);
+	}
+
+	rc = waitpid(child, &status, 0);
+
+	sigaction ( SIGCHLD, &old_act, NULL);
+
+	if (rc < 0) {
+		log_message(LOG_INFO, "IPVS: waitpid error (%s)"
+				    , strerror(errno));
+	}
+
+	if (modprobe)
+		FREE(modprobe);
+
+	if (!WIFEXITED(status) || WEXITSTATUS(status)) {
+		return true;
 	}
 
-	return (*str1 == 0 && *str2 == 0);
+	return false;
 }
+#endif
diff --git a/tools/keepalived/lib/utils.h b/tools/keepalived/lib/utils.h
index 2b03626b7..1f1b66e01 100644
--- a/tools/keepalived/lib/utils.h
+++ b/tools/keepalived/lib/utils.h
@@ -17,52 +17,262 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _UTILS_H
 #define _UTILS_H
 
+#include "config.h"
+
 /* system includes */
-#include <stdio.h>
-#include <stdlib.h>
+#include <sys/types.h>
 #include <stdint.h>
+#include <stdbool.h>
+#include <sys/socket.h>
+#include <netinet/in.h>
+#include <stdio.h>
+#include <errno.h>
 #include <string.h>
-#include <arpa/inet.h>
-#include <arpa/nameser.h>
-#include <sys/param.h>
-#include <sys/utsname.h>
-#include <netdb.h>
+
+#include "vector.h"
+#if defined _DEBUG_ || defined DEBUG_EINTR
+#include "logger.h"
+#endif
 
 /* Global debugging logging facilities */
 #ifdef _DEBUG_
-#define DBG(fmt, msg...) syslog(LOG_DEBUG, fmt, ## msg)
+#define DBG(fmt, msg...) log_message(LOG_DEBUG, fmt, ## msg)
 #else
 #define DBG(fmt, msg...)
 #endif
 
+#define STR(x)  #x
+
+#define	VERSION_STRING		PACKAGE_NAME " v" PACKAGE_VERSION " (" GIT_DATE ")"
+#define COPYRIGHT_STRING	"Copyright(C) 2001-" GIT_YEAR " Alexandre Cassen, <acassen@gmail.com>"
+
+#ifndef max
+#define max(a,b) ((a) >= (b) ? (a) : (b))
+#endif
+
+#ifdef _WITH_PERF_
+typedef enum {
+	PERF_NONE,
+	PERF_RUN,
+	PERF_ALL,
+	PERF_END,
+} perf_t;
+#endif
+
+/* Some library functions that take pointer parameters should have them
+ * specified as const pointers, but don't. We need to cast away the constness,
+ * but also want to avoid compiler warnings for doing so. The following "trick"
+ * achieves that. */ 
+#define no_const(type, var_cp) \
+({ union { type *p; const type *cp; } ps = { .cp = var_cp }; \
+ ps.p;})
+
+#define no_const_char_p(var_cp)	no_const(char, var_cp)
+
+/* If signalfd() is used, we will have no signal handlers, and
+ * so we cannot get EINTR. If we cannot get EINTR, there is no
+ * point checking for it.
+ * If check_EINTR is defined as false, gcc will optimise out the
+ * test, and remove any surrounding while loop such as:
+ * while (recvmsg(...) == -1 && check_EINTR(errno)); */
+#if defined DEBUG_EINTR
+static inline bool
+check_EINTR(int xx)
+{
+	if ((xx) == EINTR) {
+		log_message(LOG_INFO, "%s:%s(%d) - EINTR returned", (__FILE__), (__func__), (__LINE__));
+		return true;
+	}
+
+	return false;
+}
+#elif defined CHECK_EINTR
+#define check_EINTR(xx)	((xx) == EINTR)
+#else
+#define check_EINTR(xx)	(false)
+#endif
+
+/* Functions that can return EAGAIN also document that they can return
+ * EWOULDBLOCK, and that both should be checked. If they are the same
+ * value, that is unnecessary. */
+#if EAGAIN == EWOULDBLOCK
+#define check_EAGAIN(xx)	((xx) == EAGAIN)
+#else
+#define check_EAGAIN(xx)	((xx) == EAGAIN || (xx) == EWOULDBLOCK)
+#endif
+
+/* Used in functions returning a string matching a defined value */
+#define switch_define_str(x) case x: return #x
+
+/* Buffer length needed for inet_sockaddrtotrio() - '[' + INET6_ADDRSTRLEN + ']' + ':' + 'sctp' + ':' + 'nnnnn' */
+#define SOCKADDRTRIO_STR_LEN	(INET6_ADDRSTRLEN + 13)
+
+/* The argv parameter to execve etc is declared as char *const [], whereas
+ * it should be char const *const [], so we use the following union to cast
+ * away the const that we have, but execve etc doesn't. */
+union non_const_args {
+	const char *const *args;
+	char *const *execve_args;
+};
+
+/* inline stuff */
+static inline int __ip6_addr_equal(const struct in6_addr *a1,
+				   const struct in6_addr *a2)
+{
+	return (((a1->s6_addr32[0] ^ a2->s6_addr32[0]) |
+		 (a1->s6_addr32[1] ^ a2->s6_addr32[1]) |
+		 (a1->s6_addr32[2] ^ a2->s6_addr32[2]) |
+		 (a1->s6_addr32[3] ^ a2->s6_addr32[3])) == 0);
+}
+
+static inline bool sockstorage_equal(const struct sockaddr_storage *s1,
+				    const struct sockaddr_storage *s2)
+{
+	if (s1->ss_family != s2->ss_family)
+		return false;
+
+	if (s1->ss_family == AF_INET6) {
+		const struct sockaddr_in6 *a1 = (const struct sockaddr_in6 *) s1;
+		const struct sockaddr_in6 *a2 = (const struct sockaddr_in6 *) s2;
+
+//		if (IN6_ARE_ADDR_EQUAL(a1, a2) && (a1->sin6_port == a2->sin6_port))
+		if (__ip6_addr_equal(&a1->sin6_addr, &a2->sin6_addr) &&
+		    (a1->sin6_port == a2->sin6_port))
+			return true;
+	} else if (s1->ss_family == AF_INET) {
+		const struct sockaddr_in *a1 = (const struct sockaddr_in *) s1;
+		const struct sockaddr_in *a2 = (const struct sockaddr_in *) s2;
+
+		if ((a1->sin_addr.s_addr == a2->sin_addr.s_addr) &&
+		    (a1->sin_port == a2->sin_port))
+			return true;
+	} else if (s1->ss_family == AF_UNSPEC)
+		return true;
+
+	return false;
+}
+
+static inline bool inaddr_equal(sa_family_t family, const void *addr1, const void *addr2)
+{
+	if (family == AF_INET6) {
+		const struct in6_addr *a1 = (const struct in6_addr *) addr1;
+		const struct in6_addr *a2 = (const struct in6_addr *) addr2;
+
+		return __ip6_addr_equal(a1, a2);
+	}
+
+	if (family == AF_INET) {
+		const struct in_addr *a1 = (const struct in_addr *) addr1;
+		const struct in_addr *a2 = (const struct in_addr *) addr2;
+
+		return (a1->s_addr == a2->s_addr);
+	}
+
+	return false;
+}
+
+static inline uint16_t csum_incremental_update32(const uint16_t old_csum, const uint32_t old_val, const uint32_t new_val)
+{
+	/* This technique for incremental IP checksum update is described in RFC1624,
+	 * along with accompanying errata */
+
+	if (old_val == new_val)
+		return old_csum;
+
+	uint32_t acc = (~old_csum & 0xffff) + (~(old_val >> 16 ) & 0xffff) + (~old_val & 0xffff);
+
+	acc += (new_val >> 16) + (new_val & 0xffff);
+
+	/* finally compute vrrp checksum */
+	acc = (acc & 0xffff) + (acc >> 16);
+	acc += acc >> 16;
+
+	return ~acc & 0xffff;
+}
+
+static inline uint16_t csum_incremental_update16(const uint16_t old_csum, const uint16_t old_val, const uint16_t new_val)
+{
+	/* This technique for incremental IP checksum update is described in RFC1624,
+	 * along with accompanying errata */
+
+	if (old_val == new_val)
+		return old_csum;
+
+	uint32_t acc = (~old_csum & 0xffff) + (~old_val & 0xffff);
+
+	acc += new_val;
+
+	/* finally compute vrrp checksum */
+	acc = (acc & 0xffff) + (acc >> 16);
+	acc += acc >> 16;
+
+	return ~acc & 0xffff;
+}
+
+#define strcpy_safe(dst, src) \
+	(dst[0] = '\0', strncat(dst, src, sizeof(dst) - 1))
+
 /* global vars exported */
-extern int debug;
+extern unsigned long debug;
+extern mode_t umask_val;
+#ifdef _WITH_PERF_
+extern perf_t perf_run;
+#endif
 
 /* Prototypes defs */
-extern void dump_buffer(char *, int);
-extern u_short in_csum(u_short *, int, u_short);
-extern char *inet_ntop2(uint32_t);
-extern char *inet_ntoa2(uint32_t, char *);
-extern uint8_t inet_stom(char *);
-extern uint8_t inet_stor(char *);
-extern int inet_stosockaddr(char *, char *, struct sockaddr_storage *);
-extern int inet_ip4tosockaddr(uint32_t, struct sockaddr_storage *);
-extern char *inet_sockaddrtos(struct sockaddr_storage *);
-extern char *inet_sockaddrtos2(struct sockaddr_storage *, char *);
-extern char *inet_sockaddrtopair(struct sockaddr_storage *addr);
-extern uint16_t inet_sockaddrport(struct sockaddr_storage *);
-extern uint32_t inet_sockaddrip4(struct sockaddr_storage *);
-extern int inet_sockaddrip6(struct sockaddr_storage *, struct in6_addr *);
-extern int inet_ston(const char *, uint32_t *);
-uint32_t inet_broadcast(uint32_t, uint32_t);
-uint32_t inet_cidrtomask(uint8_t);
-extern char *get_local_name(void);
-extern int string_equal(const char *, const char *);
+extern void dump_buffer(const char *, size_t, FILE *, int);
+#ifdef CHECKSUM_DIAGNOSTICS
+extern void log_buffer(const char *, const void *, size_t);
+#endif
+#ifdef _WITH_STACKTRACE_
+extern void write_stacktrace(const char *, const char *);
+#endif
+extern const char *make_file_name(const char *, const char *, const char *, const char *);
+extern void set_process_name(const char *);
+#ifdef _WITH_PERF_
+extern void run_perf(const char *, const char *, const char *);
+#endif
+extern uint16_t in_csum(const uint16_t *, size_t, uint32_t, uint32_t *);
+extern const char *inet_ntop2(uint32_t);
+extern bool inet_stor(const char *, uint32_t *);
+extern int domain_stosockaddr(const char *, const char *, struct sockaddr_storage *);
+extern bool inet_stosockaddr(const char *, const char *, struct sockaddr_storage *);
+extern void inet_ip4tosockaddr(const struct in_addr *, struct sockaddr_storage *);
+extern void inet_ip6tosockaddr(const struct in6_addr *, struct sockaddr_storage *);
+extern bool check_valid_ipaddress(const char *, bool);
+extern const char *inet_sockaddrtos(const struct sockaddr_storage *);
+extern const char *inet_sockaddrtopair(const struct sockaddr_storage *);
+extern const char *inet_sockaddrtotrio(const struct sockaddr_storage *, uint16_t);
+extern char *inet_sockaddrtotrio_r(const struct sockaddr_storage *, uint16_t, char *);
+extern uint16_t inet_sockaddrport(const struct sockaddr_storage *) __attribute__ ((pure));
+extern void inet_set_sockaddrport(struct sockaddr_storage *, uint16_t);
+extern uint32_t inet_sockaddrip4(const struct sockaddr_storage *) __attribute__ ((pure));
+extern int inet_sockaddrip6(const struct sockaddr_storage *, struct in6_addr *);
+extern int inet_inaddrcmp(int, const void *, const void *); __attribute__ ((pure))
+extern int inet_sockaddrcmp(const struct sockaddr_storage *, const struct sockaddr_storage *) __attribute__ ((pure));
+extern void format_mac_buf(char *, size_t, const unsigned char *, size_t);
+extern const char *get_local_name(void) __attribute__((malloc));
+extern bool string_equal(const char *, const char *) __attribute__ ((pure));
+extern int integer_to_string(const int, char *, size_t);
+extern FILE *fopen_safe(const char *, const char *);
+extern void set_std_fd(bool);
+extern void close_std_fd(void);
+#if !defined _HAVE_LIBIPTC_ || defined _LIBIPTC_DYNAMIC_
+extern int fork_exec(const char * const []);
+#endif
+#if defined _WITH_VRRP_ || defined _WITH_BFD_
+extern int open_pipe(int [2]);
+#endif
+extern int memcmp_constant_time(const void *, const void *, size_t);
+
+#if defined _WITH_LVS_ || defined _LIBIPSET_DYNAMIC_
+extern bool keepalived_modprobe(const char *);
+#endif
 
 #endif
diff --git a/tools/keepalived/lib/vector.c b/tools/keepalived/lib/vector.c
index 23f94eb13..d5d4a3586 100644
--- a/tools/keepalived/lib/vector.c
+++ b/tools/keepalived/lib/vector.c
@@ -1,12 +1,12 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        Vector structure manipulation.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *              
+ *
  *              This program is distributed in the hope that it will be useful,
  *              but WITHOUT ANY WARRANTY; without even the implied warranty of
  *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
@@ -17,23 +17,61 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
+#include "config.h"
+
 #include "vector.h"
 #include "memory.h"
 
-/* 
+/* Function to call if attempt to read beyond end of strvec */
+static null_strvec_handler_t null_strvec_handler;
+
+null_strvec_handler_t register_null_strvec_handler(null_strvec_handler_t null_strvec_func)
+{
+	null_strvec_handler_t old_handler = null_strvec_handler;
+
+	null_strvec_handler = null_strvec_func;
+
+	return old_handler;
+}
+
+null_strvec_handler_t unregister_null_strvec_handler(void)
+{
+	null_strvec_handler_t old_handler = null_strvec_handler;
+
+	null_strvec_handler = NULL;
+
+	return old_handler;
+}
+
+const char *
+strvec_slot(const vector_t *strvec, size_t index)
+{
+	if (strvec &&
+	    index < vector_size(strvec) &&
+	    strvec->slot[index])
+		return strvec->slot[index];
+
+	if (null_strvec_handler)
+		(*null_strvec_handler)(strvec, index);
+
+	return "";
+}
+
+/*
  * Initialize vector struct.
  * allocalted 'size' slot elements then return vector.
  */
 vector_t *
-vector_alloc(void)
+vector_alloc_r(void)
 {
 	vector_t *v = (vector_t *) MALLOC(sizeof(vector_t));
 	return v;
 }
 
+#ifdef _INCLUDE_UNUSED_CODE_
 vector_t *
 vector_init(unsigned int size)
 {
@@ -48,10 +86,11 @@ vector_init(unsigned int size)
 	v->slot = (void *) MALLOC(sizeof(void *) * size);
 	return v;
 }
+#endif
 
 /* allocated one slot */
 void
-vector_alloc_slot(vector_t *v)
+vector_alloc_slot_r(vector_t *v)
 {
 	v->allocated += VECTOR_DEFAULT_SIZE;
 	if (v->slot)
@@ -60,21 +99,26 @@ vector_alloc_slot(vector_t *v)
 		v->slot = (void *) MALLOC(sizeof (void *) * v->allocated);
 }
 
+#ifdef _INCLUDE_UNUSED_CODE_
 /* Insert a value into a specific slot */
-void
-vector_insert_slot(vector_t *v, int index, void *value)
+static void
+vector_insert_slot(vector_t *v, unsigned int index, void *value)
 {
-	int i;
+	unsigned int i;
 
 	vector_alloc_slot(v);
 	for (i = (v->allocated / VECTOR_DEFAULT_SIZE) - 2; i >= index; i--)
 		v->slot[i + 1] = v->slot[i];
 	v->slot[index] = value;
+	if (v->active >= index + 1)
+		v->active++;
+	else
+		v->active = index + 1;
 }
 
 /* Copy / dup a vector */
-vector_t *
-vector_copy(vector_t *v)
+static vector_t *
+vector_copy(const vector_t *v)
 {
 	unsigned int size;
 	vector_t *new = vector_alloc();
@@ -90,8 +134,8 @@ vector_copy(vector_t *v)
 }
 
 /* Check assigned index, and if it runs short double index pointer */
-void
-vector_ensure(vector_t *v, unsigned int num)
+static void
+vector_ensure(const vector_t *v, unsigned int num)
 {
 	if (v->allocated > num)
 		return;
@@ -108,8 +152,8 @@ vector_ensure(vector_t *v, unsigned int num)
  * the slot's index memory is assigned, please call vector_ensure()
  * after calling this function.
  */
-int
-vector_empty_slot(vector_t *v)
+static int
+vector_empty_slot(const vector_t *v)
 {
 	unsigned int i;
 
@@ -126,8 +170,8 @@ vector_empty_slot(vector_t *v)
 }
 
 /* Set value to the smallest empty slot. */
-int
-vector_set(vector_t *v, void *val)
+static int
+vector_set(const vector_t *v, void *val)
 {
 	unsigned int i;
 
@@ -141,6 +185,7 @@ vector_set(vector_t *v, void *val)
 
 	return i;
 }
+#endif
 
 /* Set a vector slot value */
 void
@@ -149,10 +194,12 @@ vector_set_slot(vector_t *v, void *value)
 	unsigned int i = v->allocated - 1;
 
 	v->slot[i] = value;
+	v->active = v->allocated;
 }
 
+#ifdef _INCLUDE_UNUSED_CODE_
 /* Set value to specified index slot. */
-int
+static int
 vector_set_index(vector_t *v, unsigned int i, void *val)
 {
 	vector_ensure(v, i);
@@ -166,8 +213,8 @@ vector_set_index(vector_t *v, unsigned int i, void *val)
 }
 
 /* Look up vector.  */
-void *
-vector_lookup(vector_t *v, unsigned int i)
+static void *
+vector_lookup(const vector_t *v, unsigned int i)
 {
 	if (i >= v->active)
 		return NULL;
@@ -175,12 +222,13 @@ vector_lookup(vector_t *v, unsigned int i)
 }
 
 /* Lookup vector, ensure it. */
-void *
-vector_lookup_ensure(vector_t *v, unsigned int i)
+static void *
+vector_lookup_ensure(const vector_t *v, unsigned int i)
 {
 	vector_ensure(v, i);
 	return v->slot[i];
 }
+#endif
 
 /* Unset value at specified index slot. */
 void
@@ -198,9 +246,9 @@ vector_unset(vector_t *v, unsigned int i)
 	}
 }
 
-/* Count the number of not emplty slot. */
-unsigned int
-vector_count(vector_t *v)
+/* Count the number of not empty slot. */
+unsigned int __attribute__ ((pure))
+vector_count(const vector_t *v)
 {
 	unsigned int i;
 	unsigned count = 0;
@@ -214,6 +262,7 @@ vector_count(vector_t *v)
 	return count;
 }
 
+#ifdef _INCLUDE_UNUSED_CODE_
 /* Free memory vector allocation */
 void
 vector_only_wrapper_free(vector_t *v)
@@ -232,34 +281,38 @@ vector_only_index_free(void *slot)
 {
 	vector_only_slot_free(slot);
 }
+#endif
 
 void
-vector_free(vector_t *v)
+vector_free_r(const vector_t *v)
 {
-	FREE(v->slot);
-	FREE(v);
+	if (v->slot)
+		FREE_CONST_ONLY(v->slot);
+	FREE_CONST_ONLY(v);
 }
 
+#ifdef _INCLUDE_UNUSED_CODE_
 /* dump vector slots */
 void
-vector_dump(vector_t *v)
+vector_dump(FILE *fp, const vector_t *v)
 {
-	int i;
+	unsigned int i;
 
-	printf("Vector Size : %d\n", v->allocated);
+	fprintf(fp, "Vector Size : %d, active %d\n", v->allocated, v->active);
 
 	for (i = 0; i < v->allocated; i++) {
 		if (v->slot[i] != NULL) {
-			printf("  Slot [%d]: %p\n", i, vector_slot(v, i));
+			fprintf(fp, "  Slot [%d]: %p\n", i, vector_slot(v, i));
 		}
 	}
 }
+#endif
 
 /* String vector related */
 void
-free_strvec(vector_t *strvec)
+free_strvec(const vector_t *strvec)
 {
-	int i;
+	unsigned int i;
 	char *str;
 
 	if (!strvec)
@@ -274,10 +327,11 @@ free_strvec(vector_t *strvec)
 	vector_free(strvec);
 }
 
+#ifdef _INCLUDE_UNUSED_CODE_
 void
-dump_strvec(vector_t *strvec)
+dump_strvec(const vector_t *strvec)
 {
-	int i;
+	unsigned int i;
 	char *str;
 
 	if (!strvec)
@@ -291,3 +345,4 @@ dump_strvec(vector_t *strvec)
 	}
 	printf("\n");
 }
+#endif
diff --git a/tools/keepalived/lib/vector.h b/tools/keepalived/lib/vector.h
index 199dab1eb..42e294d5f 100644
--- a/tools/keepalived/lib/vector.h
+++ b/tools/keepalived/lib/vector.h
@@ -1,10 +1,10 @@
-/* 
+/*
  * Soft:        Keepalived is a failover program for the LVS project
  *              <www.linuxvirtualserver.org>. It monitor & manipulate
  *              a loadbalanced server pool using multi-layer checks.
- * 
+ *
  * Part:        vector.c include file.
- *  
+ *
  * Author:      Alexandre Cassen, <acassen@linux-vs.org>
  *
  *              This program is distributed in the hope that it will be useful,
@@ -17,12 +17,15 @@
  *              as published by the Free Software Foundation; either version
  *              2 of the License, or (at your option) any later version.
  *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
+ * Copyright (C) 2001-2017 Alexandre Cassen, <acassen@gmail.com>
  */
 
 #ifndef _VECTOR_H
 #define _VECTOR_H
 
+#include <sys/types.h>
+#include <stdio.h>
+
 /* vector definition */
 typedef struct _vector {
 	unsigned int	active;
@@ -30,37 +33,46 @@ typedef struct _vector {
 	void		**slot;
 } vector_t;
 
+typedef const char *(*null_strvec_handler_t)(const vector_t *, size_t);
+
 /* Some defines */
 #define VECTOR_DEFAULT_SIZE 1
 
-/* Some usefull macros */
-#define vector_slot(V,E) ((V)->slot[(E)])
+/* Some useful macros */
 #define vector_size(V)   ((V)->allocated)
+#define vector_slot(V,E) ((V)->slot[(E)])
+//#define vector_slot(V,E) (vector_lookup(V,E))
+
 #define vector_active(V) ((V)->active)
 #define vector_foreach_slot(v,p,i) \
 	for (i = 0; i < (v)->allocated && ((p) = (v)->slot[i]); i++)
 
+#ifdef _MEM_CHECK_
+#define vector_alloc()		(memcheck_log("vector_alloc", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 vector_alloc_r())
+#define vector_alloc_slot(v)	(memcheck_log("vector_alloc_slot", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 vector_alloc_slot_r(v))
+#define vector_free(v)		(memcheck_log("vector_free", NULL, (__FILE__), (__func__), (__LINE__)), \
+				 vector_free_r(v))
+#else
+#define vector_alloc()		(vector_alloc_r())
+#define vector_alloc_slot(v)	(vector_alloc_slot_r(v))
+#define vector_free(v)		(vector_free_r(v))
+#endif
+
 /* Prototypes */
-extern vector_t *vector_alloc(void);
-extern vector_t *vector_init(unsigned int);
-extern void vector_alloc_slot(vector_t *);
-extern void vector_insert_slot(vector_t *, int, void *);
-extern vector_t *vector_copy(vector_t *);
-extern void vector_ensure(vector_t *, unsigned int);
-extern int vector_empty_slot(vector_t *);
-extern int vector_set(vector_t *, void *);
+extern null_strvec_handler_t register_null_strvec_handler(null_strvec_handler_t);
+extern null_strvec_handler_t unregister_null_strvec_handler(void);
+extern const char *strvec_slot(const vector_t *strvec, size_t index);
+extern vector_t *vector_alloc_r(void) __attribute__ ((malloc));
+extern void vector_alloc_slot_r(vector_t *);
 extern void vector_set_slot(vector_t *, void *);
-extern int vector_set_index(vector_t *, unsigned int, void *);
-extern void *vector_lookup(vector_t *, unsigned int);
-extern void *vector_lookup_ensure(vector_t *, unsigned int);
 extern void vector_unset(vector_t *, unsigned int);
-extern unsigned int vector_count(vector_t *);
-extern void vector_only_wrapper_free(vector_t *);
-extern void vector_only_index_free(void *);
-extern void vector_only_slot_free(void *);
-extern void vector_free(vector_t *);
-extern void vector_dump(vector_t *);
-extern void free_strvec(vector_t *);
-extern void dump_strvec(vector_t *);
+extern unsigned int vector_count(const vector_t *) __attribute__ ((pure));
+extern void vector_free_r(const vector_t *);
+#ifdef _INCLUDE_UNUSED_CODE_
+extern void vector_dump(FILE *fp, const vector_t *);
+#endif
+extern void free_strvec(const vector_t *);
 
 #endif
diff --git a/tools/keepalived/lib/vty.c b/tools/keepalived/lib/vty.c
deleted file mode 100644
index f1d4dff1a..000000000
--- a/tools/keepalived/lib/vty.c
+++ /dev/null
@@ -1,2163 +0,0 @@
-/*
- * Soft:        Keepalived is a failover program for the LVS project
- *              <www.linuxvirtualserver.org>. It monitor & manipulate
- *              a loadbalanced server pool using multi-layer checks.
- *
- * Part:        Virtual Terminal.
- *              This code is coming from quagga.net.
- *
- * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *
- *              This program is distributed in the hope that it will be useful,
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
- *              See the GNU General Public License for more details.
- *
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
- *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
- */
-#include <errno.h>
-#include <ctype.h>
-#include <termios.h>
-#include <stdarg.h>
-#include <unistd.h>
-#include <time.h>
-#include <arpa/telnet.h>
-#include <sys/types.h>
-#include <sys/socket.h>
-#include <sys/stat.h>
-#include <netinet/tcp.h>
-
-#include "scheduler.h"
-#include "vty.h"
-#include "timer.h"
-#include "utils.h"
-#include "command.h"
-#include "memory.h"
-#include "logger.h"
-
-
-static void vty_event(event_t, int, vty_t *);
-
-/* Extern host structure from command.c */
-extern host_t host;
-
-/* Vector which store each vty structure. */
-static vector_t *vtyvec;
-
-/* Vty timeout value. */
-static unsigned long vty_timeout_val = VTY_TIMEOUT_DEFAULT;
-
-/* VTY server thread. */
-vector_t *Vvty_serv_thread;
-
-/* Current directory. */
-char *vty_cwd = NULL;
-
-/* Configure lock. */
-static int vty_config;
-
-/* Login password check. */
-static int no_password_check = 0;
-
-/* Integrated configuration file path */
-#define SYSCONFDIR	"/etc/keepalived"
-char integrate_default[] = SYSCONFDIR INTEGRATE_DEFAULT_CONFIG;
-
-/* VTY standard output function. */
-int
-vty_out(vty_t *vty, const char *format, ...)
-{
-	va_list args;
-	int len = 0;
-	int size = 1024;
-	char buf[1024];
-	char *tmp = NULL;
-	char *p = NULL;
-
-	if (vty_shell (vty)) {
-		va_start(args, format);
-		vprintf(format, args);
-		va_end(args);
-	} else {
-		/* Try to write to initial buffer.  */
-		va_start(args, format);
-		len = vsnprintf(buf, sizeof buf, format, args);
-		va_end(args);
-
-		/* Initial buffer is not enough.  */
-		if (len < 0 || len >= size) {
-		for (;;) {
-			if (len > -1)
-				size = len + 1;
-			else
-				size = size * 2;
-
-			tmp = REALLOC(p, size);
-			if (! tmp) {
-				FREE(p);
-				return -1;
-			}
-			p = tmp;
-
-			va_start(args, format);
-			len = vsnprintf(p, size, format, args);
-			va_end(args);
-
-			if (len > -1 && len < size)
-				break;
-		}
-	}
-
-	/* When initial buffer is enough to store all output.  */
-	if (! p)
-		p = buf;
-
-	/* Pointer p must point out buffer. */
-	buffer_put(vty->obuf, (u_char *) p, len);
-
-	/* If p is not different with buf, it is allocated buffer.  */
-	if (p != buf)
-		FREE(p);
-	}
-
-	return len;
-}
-
-/* Output current time to vty. */
-void
-vty_time_print(vty_t *vty, int cr)
-{
-	struct tm tmp;
-	time_t current_time;
-	char buf[25];
-
-	/* Get current time */
-	current_time = time(NULL);
-	memset(&tmp, 0, sizeof(struct tm));
-	tmp.tm_isdst = -1;
-	localtime_r(&current_time, &tmp);
-	strftime(buf, sizeof(buf), "%Y/%m/%d %H:%M:%S", &tmp);
-
-	vty_out(vty, "%s%s", buf, (cr)?"\n":" ");
-}
-
-/* Say hello to vty interface. */
-void
-vty_hello (vty_t *vty)
-{
-	if (host.motdfile) {
-		FILE *f;
-		char buf[4096];
-
-		f = fopen(host.motdfile, "r");
-		if (f) {
-			while (fgets(buf, sizeof(buf), f)) {
-				char *s;
-				/* work backwards to ignore trailling isspace() */
-				for (s = buf + strlen(buf); (s > buf) && isspace((int)*(s - 1));
-				     s--);
-					*s = '\0';
-				vty_out(vty, "%s%s", buf, VTY_NEWLINE);
-			}
-			fclose (f);
-		} else {
-			vty_out(vty, "MOTD file not found%s", VTY_NEWLINE);
-		}
-	} else if (host.motd) {
-		vty_out(vty, "%s", host.motd);
-	}
-}
-
-/* Put out prompt and wait input from user. */
-static void
-vty_prompt(vty_t *vty)
-{
-	struct utsname names;
-	const char*hostname;
-
-	if (vty->type == VTY_TERM) {
-		hostname = host.name;
-		if (!hostname) {
-			uname(&names);
-			hostname = names.nodename;
-		}
-		vty_out(vty, cmd_prompt (vty->node), hostname);
-	}
-}
-
-/* Send WILL TELOPT_ECHO to remote server. */
-static void
-vty_will_echo(vty_t *vty)
-{
-	unsigned char cmd[] = { IAC, WILL, TELOPT_ECHO, '\0' };
-	vty_out(vty, "%s", cmd);
-}
-
-/* Make suppress Go-Ahead telnet option. */
-static void
-vty_will_suppress_go_ahead(vty_t *vty)
-{
-	unsigned char cmd[] = { IAC, WILL, TELOPT_SGA, '\0' };
-	vty_out(vty, "%s", cmd);
-}
-
-/* Make don't use linemode over telnet. */
-static void
-vty_dont_linemode(vty_t *vty)
-{
-	unsigned char cmd[] = { IAC, DONT, TELOPT_LINEMODE, '\0' };
-	vty_out(vty, "%s", cmd);
-}
-
-/* Use window size. */
-static void
-vty_do_window_size(vty_t *vty)
-{
-	unsigned char cmd[] = { IAC, DO, TELOPT_NAWS, '\0' };
-	vty_out(vty, "%s", cmd);
-}
-
-/* Allocate new vty struct. */
-vty_t *
-vty_new(void)
-{
-	vty_t *new = (vty_t *) MALLOC(sizeof(vty_t));
-
-	new->obuf = buffer_new(0);	/* Use default buffer size. */
-	new->buf = (char *) MALLOC(VTY_BUFSIZ);
-	new->max = VTY_BUFSIZ;
-
-	return new;
-}
-
-/* Authentication of vty */
-static void
-vty_auth(vty_t *vty, char *buf)
-{
-	char *passwd = NULL;
-	node_type_t next_node = 0;
-	int fail;
-	char *crypt (const char *, const char *);
-
-	switch (vty->node) {
-	case AUTH_NODE:
-		if (host.encrypt)
-			passwd = host.password_encrypt;
-		else
-			passwd = host.password;
-		if (host.advanced)
-			next_node = host.enable ? VIEW_NODE : ENABLE_NODE;
-		else
-			next_node = VIEW_NODE;
-		break;
-	case AUTH_ENABLE_NODE:
-		if (host.encrypt)
-			passwd = host.enable_encrypt;
-		else
-			passwd = host.enable;
-		next_node = ENABLE_NODE;
-		break;
-	}
-
-	if (passwd) {
-		if (host.encrypt)
-			fail = strcmp (crypt(buf, passwd), passwd);
-		else
-			fail = strcmp (buf, passwd);
-	} else {
-		fail = 1;
-	}
-
-	if (!fail) {
-		vty->fail = 0;
-		vty->node = next_node;	/* Success ! */
-	} else {
-		vty->fail++;
-		if (vty->fail >= 3) {
-			if (vty->node == AUTH_NODE) {
-				vty_out(vty, "%% Bad passwords, too many failures!%s", VTY_NEWLINE);
-				vty->status = VTY_CLOSE;
-			} else {
-				/* AUTH_ENABLE_NODE */
-				vty->fail = 0;
-				vty_out(vty, "%% Bad enable passwords, too many failures!%s", VTY_NEWLINE);
-				vty->node = VIEW_NODE;
-			}
-		}
-	}
-}
-
-/* Command execution over the vty interface. */
-static int
-vty_command(vty_t *vty, char *buf)
-{
-	int ret;
-	vector_t *vline;
-
-	/* Split readline string up into the vector */
-	vline = cmd_make_strvec(buf);
-
-	if (vline == NULL)
-		return CMD_SUCCESS;
-
-	ret = cmd_execute_command(vline, vty, NULL, 0);
-
-	if (ret != CMD_SUCCESS) {
-		switch (ret) {
-		case CMD_WARNING:
-			if (vty->type == VTY_FILE)
-				vty_out(vty, "Warning...%s", VTY_NEWLINE);
-			break;
-		case CMD_ERR_AMBIGUOUS:
-			vty_out(vty, "%% Ambiguous command.%s", VTY_NEWLINE);
-			break;
-		case CMD_ERR_NO_MATCH:
-			vty_out(vty, "%% Unknown command: %s%s", buf, VTY_NEWLINE);
-			break;
-		case CMD_ERR_INCOMPLETE:
-			vty_out(vty, "%% Command incomplete.%s", VTY_NEWLINE);
-			break;
-		}
-	}
-
-	cmd_free_strvec(vline);
-
-	return ret;
-}
-
-static const char telnet_backward_char = 0x08;
-static const char telnet_space_char = ' ';
-
-/* Basic function to write buffer to vty. */
-static void
-vty_write(vty_t *vty, const char *buf, size_t nbytes)
-{
-	if ((vty->node == AUTH_NODE) || (vty->node == AUTH_ENABLE_NODE))
-		return;
-
-	/* Should we do buffering here ?  And make vty_flush (vty) ? */
-	buffer_put(vty->obuf, buf, nbytes);
-}
-
-/* Ensure length of input buffer.  Is buffer is short, double it. */
-static void
-vty_ensure(vty_t *vty, int length)
-{
-	if (vty->max <= length) {
-		vty->max *= 2;
-		vty->buf = REALLOC(vty->buf, vty->max);
-	}
-}
-
-/* Basic function to insert character into vty. */
-static void
-vty_self_insert(vty_t *vty, char c)
-{
-	int i, length;
-
-	vty_ensure(vty, vty->length + 1);
-	length = vty->length - vty->cp;
-	memmove(&vty->buf[vty->cp + 1], &vty->buf[vty->cp], length);
-	vty->buf[vty->cp] = c;
-
-	vty_write(vty, &vty->buf[vty->cp], length + 1);
-	for (i = 0; i < length; i++)
-		vty_write(vty, &telnet_backward_char, 1);
-
-	vty->cp++;
-	vty->length++;
-}
-
-/* Self insert character 'c' in overwrite mode. */
-static void
-vty_self_insert_overwrite(vty_t *vty, char c)
-{
-	vty_ensure(vty, vty->length + 1);
-	vty->buf[vty->cp++] = c;
-
-	if (vty->cp > vty->length)
-		vty->length++;
-
-	if ((vty->node == AUTH_NODE) || (vty->node == AUTH_ENABLE_NODE))
-		return;
-
-	vty_write(vty, &c, 1);
-}
-
-/* Insert a word into vty interface with overwrite mode. */
-static void
-vty_insert_word_overwrite(vty_t *vty, char *str)
-{
-	int len = strlen (str);
-	vty_write(vty, str, len);
-	strcpy(&vty->buf[vty->cp], str);
-	vty->cp += len;
-	vty->length = vty->cp;
-}
-
-/* Forward character. */
-static void
-vty_forward_char(vty_t *vty)
-{
-	if (vty->cp < vty->length) {
-		vty_write(vty, &vty->buf[vty->cp], 1);
-		vty->cp++;
-	}
-}
-
-/* Backward character. */
-static void
-vty_backward_char(vty_t *vty)
-{
-	if (vty->cp > 0) {
-		vty->cp--;
-		vty_write(vty, &telnet_backward_char, 1);
-	}
-}
-
-/* Move to the beginning of the line. */
-static void
-vty_beginning_of_line(vty_t *vty)
-{
-	while (vty->cp) {
-		vty_backward_char(vty);
-	}
-}
-
-/* Move to the end of the line. */
-static void
-vty_end_of_line(vty_t *vty)
-{
-  while (vty->cp < vty->length)
-    vty_forward_char (vty);
-}
-
-static void vty_kill_line_from_beginning(vty_t *);
-static void vty_redraw_line(vty_t *);
-
-/* Print command line history.  This function is called from
- * vty_next_line and vty_previous_line. */
-static void
-vty_history_print(vty_t *vty)
-{
-	int length;
-
-	vty_kill_line_from_beginning(vty);
-
-	/* Get previous line from history buffer */
-	length = strlen(vty->hist[vty->hp]);
-	memcpy(vty->buf, vty->hist[vty->hp], length);
-	vty->cp = vty->length = length;
-
-	/* Redraw current line */
-	vty_redraw_line(vty);
-}
-
-/* Show next command line history. */
-static void
-vty_next_line(vty_t *vty)
-{
-	int try_index;
-
-	if (vty->hp == vty->hindex)
-		return;
-
-	/* Try is there history exist or not. */
-	try_index = vty->hp;
-	if (try_index == (VTY_MAXHIST - 1)) {
-		try_index = 0;
-	} else {
-		try_index++;
-	}
-
-	/* If there is not history return. */
-	if (vty->hist[try_index] == NULL) {
-		return;
-	} else {
-		vty->hp = try_index;
-	}
-
-	vty_history_print(vty);
-}
-
-/* Show previous command line history. */
-static void
-vty_previous_line(vty_t *vty)
-{
-	int try_index;
-
-	try_index = vty->hp;
-	if (try_index == 0) {
-		try_index = VTY_MAXHIST - 1;
-	} else {
-		try_index--;
-	}
-
-	if (vty->hist[try_index] == NULL) {
-		return;
-	} else {
-		vty->hp = try_index;
-	}
-
-	vty_history_print(vty);
-}
-
-/* This function redraw all of the command line character. */
-static void
-vty_redraw_line(vty_t *vty)
-{
-	vty_write(vty, vty->buf, vty->length);
-	vty->cp = vty->length;
-}
-
-/* Forward word. */
-static void
-vty_forward_word(vty_t *vty)
-{
-	while (vty->cp != vty->length && vty->buf[vty->cp] != ' ')
-		vty_forward_char(vty);
-  
-	while (vty->cp != vty->length && vty->buf[vty->cp] == ' ')
-		vty_forward_char(vty);
-}
-
-/* Backward word without skipping training space. */
-static void
-vty_backward_pure_word(vty_t *vty)
-{
-	while (vty->cp > 0 && vty->buf[vty->cp - 1] != ' ')
-		vty_backward_char(vty);
-}
-
-/* Backward word. */
-static void
-vty_backward_word(vty_t *vty)
-{
-	while (vty->cp > 0 && vty->buf[vty->cp - 1] == ' ')
-		vty_backward_char(vty);
-
-	while (vty->cp > 0 && vty->buf[vty->cp - 1] != ' ')
-		vty_backward_char(vty);
-}
-
-/* When '^D' is typed at the beginning of the line we move to the down
- * level. */
-static void
-vty_down_level(vty_t *vty)
-{
-	vty_out(vty, "%s", VTY_NEWLINE);
-		(*config_exit_cmd.func) (NULL, vty, 0, NULL);
-	vty_prompt(vty);
-	vty->cp = 0;
-}
-
-/* When '^Z' is received from vty, move down to the enable mode. */
-static void
-vty_end_config(vty_t *vty)
-{
-	vty_out(vty, "%s", VTY_NEWLINE);
-
-	switch (vty->node) {
-	case VIEW_NODE:
-	case ENABLE_NODE:
-		/* Nothing to do. */
-		break;
-	case CONFIG_NODE:
-	case VTY_NODE:
-		vty_config_unlock(vty);
-		vty->node = ENABLE_NODE;
-		break;
-	default:
-		/* Unknown node, we have to ignore it. */
-		break;
-	}
-
-	vty_prompt(vty);
-	vty->cp = 0;
-}
-
-/* Delete a charcter at the current point. */
-static void
-vty_delete_char(vty_t *vty)
-{
-	int i, size;
-
-	if (vty->length == 0) {
-		vty_down_level(vty);
-		return;
-	}
-
-	if (vty->cp == vty->length)
-		return;			/* completion need here? */
-
-	size = vty->length - vty->cp;
-
-	vty->length--;
-	memmove(&vty->buf[vty->cp], &vty->buf[vty->cp + 1], size - 1);
-	vty->buf[vty->length] = '\0';
-  
-	if (vty->node == AUTH_NODE || vty->node == AUTH_ENABLE_NODE)
-		return;
-
-	vty_write(vty, &vty->buf[vty->cp], size - 1);
-	vty_write(vty, &telnet_space_char, 1);
-
-	for (i = 0; i < size; i++)
-		vty_write (vty, &telnet_backward_char, 1);
-}
-
-/* Delete a character before the point. */
-static void
-vty_delete_backward_char(vty_t *vty)
-{
-	if (vty->cp == 0)
-		return;
-
-	vty_backward_char(vty);
-	vty_delete_char(vty);
-}
-
-/* Kill rest of line from current point. */
-static void
-vty_kill_line(vty_t *vty)
-{
-	int i, size;
-
-	size = vty->length - vty->cp;
-  
-	if (size == 0)
-		return;
-
-	for (i = 0; i < size; i++)
-		vty_write(vty, &telnet_space_char, 1);
-	for (i = 0; i < size; i++)
-		vty_write(vty, &telnet_backward_char, 1);
-
-	memset (&vty->buf[vty->cp], 0, size);
-	vty->length = vty->cp;
-}
-
-/* Kill line from the beginning. */
-static void
-vty_kill_line_from_beginning(vty_t *vty)
-{
-  vty_beginning_of_line (vty);
-  vty_kill_line (vty);
-}
-
-/* Delete a word before the point. */
-static void
-vty_forward_kill_word(vty_t *vty)
-{
-	while (vty->cp != vty->length && vty->buf[vty->cp] == ' ')
-		vty_delete_char(vty);
-	while (vty->cp != vty->length && vty->buf[vty->cp] != ' ')
-		vty_delete_char(vty);
-}
-
-/* Delete a word before the point. */
-static void
-vty_backward_kill_word(vty_t *vty)
-{
-	while (vty->cp > 0 && vty->buf[vty->cp - 1] == ' ')
-		vty_delete_backward_char(vty);
-	while (vty->cp > 0 && vty->buf[vty->cp - 1] != ' ')
-		vty_delete_backward_char(vty);
-}
-
-/* Transpose chars before or at the point. */
-static void
-vty_transpose_chars(vty_t *vty)
-{
-	char c1, c2;
-
-	/* If length is short or point is near by the beginning of line then
-	 * return. */
-	if (vty->length < 2 || vty->cp < 1)
-		return;
-
-	/* In case of point is located at the end of the line. */
-	if (vty->cp == vty->length) {
-		c1 = vty->buf[vty->cp - 1];
-		c2 = vty->buf[vty->cp - 2];
-
-		vty_backward_char(vty);
-		vty_backward_char(vty);
-		vty_self_insert_overwrite(vty, c1);
-		vty_self_insert_overwrite(vty, c2);
-	} else {
-		c1 = vty->buf[vty->cp];
-		c2 = vty->buf[vty->cp - 1];
-
-		vty_backward_char(vty);
-		vty_self_insert_overwrite(vty, c1);
-		vty_self_insert_overwrite(vty, c2);
-	}
-}
-
-/* Do completion at vty interface. */
-static void
-vty_complete_command(vty_t *vty)
-{
-	int i, ret;
-	char **matched = NULL;
-	vector_t *vline;
-
-	if (vty->node == AUTH_NODE || vty->node == AUTH_ENABLE_NODE)
-		return;
-
-	vline = cmd_make_strvec(vty->buf);
-	if (vline == NULL)
-		return;
-
-	/* In case of 'help \t'. */
-	if (isspace ((int) vty->buf[vty->length - 1]))
-		vector_set(vline, '\0');
-
-	matched = cmd_complete_command(vline, vty, &ret);
-  
-	cmd_free_strvec(vline);
-
-	vty_out(vty, "%s", VTY_NEWLINE);
-	switch (ret) {
-	case CMD_ERR_AMBIGUOUS:
-		vty_out(vty, "%% Ambiguous command.%s", VTY_NEWLINE);
-		vty_prompt(vty);
-		vty_redraw_line(vty);
-		break;
-	case CMD_ERR_NO_MATCH:
-		/* vty_out (vty, "%% There is no matched command.%s", VTY_NEWLINE); */
-		vty_prompt(vty);
-		vty_redraw_line(vty);
-		break;
-	case CMD_COMPLETE_FULL_MATCH:
-		vty_prompt(vty);
-		vty_redraw_line(vty);
-		vty_backward_pure_word(vty);
-		vty_insert_word_overwrite(vty, matched[0]);
-		vty_self_insert(vty, ' ');
-		FREE(matched[0]);
-		break;
-	case CMD_COMPLETE_MATCH:
-		vty_prompt (vty);
-		vty_redraw_line (vty);
-		vty_backward_pure_word (vty);
-		vty_insert_word_overwrite (vty, matched[0]);
-		FREE(matched[0]);
-		vector_only_index_free (matched);
-		return;
-		break;
-	case CMD_COMPLETE_LIST_MATCH:
-		for (i = 0; matched[i] != NULL; i++) {
-			if (i != 0 && ((i % 6) == 0))
-				vty_out(vty, "%s", VTY_NEWLINE);
-			vty_out(vty, "%-10s ", matched[i]);
-			FREE(matched[i]);
-		}
-		vty_out(vty, "%s", VTY_NEWLINE);
-
-		vty_prompt(vty);
-		vty_redraw_line(vty);
-		break;
-	case CMD_ERR_NOTHING_TODO:
-		vty_prompt(vty);
-		vty_redraw_line(vty);
-		break;
-	default:
-		break;
-	}
-	if (matched)
-		vector_only_index_free(matched);
-}
-
-static void
-vty_describe_fold(vty_t *vty, int cmd_width, unsigned int desc_width, desc_t *desc)
-{
-	char *buf;
-	const char *cmd, *p;
-	int pos;
-
-	cmd = desc->cmd[0] == '.' ? desc->cmd + 1 : desc->cmd;
-
-	if (desc_width <= 0) {
-		vty_out(vty, "  %-*s  %s%s", cmd_width, cmd, desc->str, VTY_NEWLINE);
-		return;
-	}
-
-	buf = (char *) MALLOC(strlen (desc->str) + 1);
-
-	for (p = desc->str; strlen (p) > desc_width; p += pos + 1) {
-		for (pos = desc_width; pos > 0; pos--)
-			if (*(p + pos) == ' ')
-				break;
-
-		if (pos == 0)
-			break;
-
-		strncpy (buf, p, pos);
-		buf[pos] = '\0';
-		vty_out(vty, "  %-*s  %s%s", cmd_width, cmd, buf, VTY_NEWLINE);
-
-		cmd = "";
-	}
-
-	vty_out(vty, "  %-*s  %s%s", cmd_width, cmd, p, VTY_NEWLINE);
-
-	FREE(buf);
-}
-
-/* Describe matched command function. */
-static void
-vty_describe_command(vty_t *vty)
-{
-	int ret;
-	vector_t *vline, *describe;
-	unsigned int i, width, desc_width;
-	desc_t *desc, *desc_cr = NULL;
-
-	vline = cmd_make_strvec(vty->buf);
-
-	/* In case of '> ?'. */
-	if (vline == NULL) {
-		vline = vector_init(1);
-		vector_set(vline, '\0');
-	} else {
-		if (isspace ((int) vty->buf[vty->length - 1])) {
-			vector_set(vline, '\0');
-		}
-	}
-
-	describe = cmd_describe_command(vline, vty, &ret);
-
-	vty_out(vty, "%s", VTY_NEWLINE);
-
-	/* Ambiguous error. */
-	switch (ret) {
-	case CMD_ERR_AMBIGUOUS:
-		vty_out(vty, "%% Ambiguous command.%s", VTY_NEWLINE);
-		goto out;
-		break;
-	case CMD_ERR_NO_MATCH:
-		vty_out(vty, "%% There is no matched command.%s", VTY_NEWLINE);
-		goto out;
-		break;
-	}  
-
-	/* Get width of command string. */
-	width = 0;
-	for (i = 0; i < vector_active (describe); i++) {
-		if ((desc = vector_slot (describe, i)) != NULL) {
-			unsigned int len;
-
-			if (desc->cmd[0] == '\0')
-				continue;
-
-			len = strlen (desc->cmd);
-			if (desc->cmd[0] == '.')
-				len--;
-
-			if (width < len)
-				width = len;
-		}
-	}
-
-	/* Get width of description string. */
-	desc_width = vty->width - (width + 6);
-
-	/* Print out description. */
-	for (i = 0; i < vector_active (describe); i++) {
-		if ((desc = vector_slot(describe, i)) != NULL) {
-			if (desc->cmd[0] == '\0')
-				continue;
-	
-			if (strcmp (desc->cmd, command_cr) == 0) {
-				desc_cr = desc;
-				continue;
-			}
-
-			if (!desc->str) {
-				vty_out(vty, "  %-s%s",
-					desc->cmd[0] == '.' ? desc->cmd + 1 : desc->cmd,
-					VTY_NEWLINE);
-			} else if (desc_width >= strlen (desc->str)) {
-				vty_out(vty, "  %-*s  %s%s", width,
-					desc->cmd[0] == '.' ? desc->cmd + 1 : desc->cmd,
-					desc->str, VTY_NEWLINE);
-			} else {
-				vty_describe_fold(vty, width, desc_width, desc);
-			}
-		}
-	}
-
-	if ((desc = desc_cr)) {
-		if (!desc->str) {
-			vty_out(vty, "  %-s%s",
-				desc->cmd[0] == '.' ? desc->cmd + 1 : desc->cmd,
-				VTY_NEWLINE);
-		} else if (desc_width >= strlen (desc->str)) {
-			vty_out(vty, "  %-*s  %s%s", width,
-				desc->cmd[0] == '.' ? desc->cmd + 1 : desc->cmd,
-				desc->str, VTY_NEWLINE);
-		} else {
-			vty_describe_fold(vty, width, desc_width, desc);
-		}
-    }
-
-out:
-	cmd_free_strvec(vline);
-	if (describe)
-		vector_free(describe);
-
-	vty_prompt(vty);
-	vty_redraw_line(vty);
-}
-
-static void
-vty_clear_buf(vty_t *vty)
-{
-	memset(vty->buf, 0, vty->max);
-}
-
-/* ^C stop current input and do not add command line to the history. */
-static void
-vty_stop_input(vty_t *vty)
-{
-	vty->cp = vty->length = 0;
-	vty_clear_buf(vty);
-	vty_out(vty, "%s", VTY_NEWLINE);
-
-	switch (vty->node) {
-	case VIEW_NODE:
-	case ENABLE_NODE:
-		/* Nothing to do. */
-		break;
-	case CONFIG_NODE:
-	case VTY_NODE:
-		vty_config_unlock(vty);
-		vty->node = ENABLE_NODE;
-		break;
-	default:
-		/* Unknown node, we have to ignore it. */
-		break;
-	}
-	vty_prompt(vty);
-
-	/* Set history pointer to the latest one. */
-	vty->hp = vty->hindex;
-}
-
-/* Add current command line to the history buffer. */
-static void
-vty_hist_add(vty_t *vty)
-{
-	int index;
-
-	if (vty->length == 0)
-		return;
-
-	index = vty->hindex ? vty->hindex - 1 : VTY_MAXHIST - 1;
-
-	/* Ignore the same string as previous one. */
-	if (vty->hist[index]) {
-		if (strcmp (vty->buf, vty->hist[index]) == 0) {
-			vty->hp = vty->hindex;
-			return;
-		}
-	}
-
-	/* Insert history entry. */
-	FREE_PTR(vty->hist[vty->hindex]);
-	vty->hist[vty->hindex] = strdup(vty->buf);
-
-	/* History index rotation. */
-	vty->hindex++;
-	if (vty->hindex == VTY_MAXHIST)
-		vty->hindex = 0;
-
-	vty->hp = vty->hindex;
-}
-
-/* Get telnet window size. */
-static int
-vty_telnet_option(vty_t *vty, unsigned char *buf, int nbytes)
-{
-	switch (buf[0]) {
-	case SB:
-		vty->sb_len = 0;
-		vty->iac_sb_in_progress = 1;
-		return 0;
-		break;
-	case SE: 
-	{
-		if (!vty->iac_sb_in_progress)
-			return 0;
-
-		if ((vty->sb_len == 0) || (vty->sb_buf[0] == '\0')) {
-			vty->iac_sb_in_progress = 0;
-			return 0;
-		}
-
-		switch (vty->sb_buf[0]) {
-		case TELOPT_NAWS:
-			if (vty->sb_len != TELNET_NAWS_SB_LEN) {
-				log_message(LOG_ERR, "RFC 1073 violation detected: telnet NAWS option "
-						     "should send %d characters, but we received %lu"
-						   , TELNET_NAWS_SB_LEN, (u_long)vty->sb_len);
-			} else if (sizeof(vty->sb_buf) < TELNET_NAWS_SB_LEN) {
-				log_message(LOG_ERR, "Bug detected: sizeof(vty->sb_buf) %lu < %d, "
-						     "too small to handle the telnet NAWS option"
-						   , (u_long)sizeof(vty->sb_buf), TELNET_NAWS_SB_LEN);
-			} else {
-				vty->width = ((vty->sb_buf[1] << 8)|vty->sb_buf[2]);
-				vty->height = ((vty->sb_buf[3] << 8)|vty->sb_buf[4]);
-			}
-			break;
-		}
-		vty->iac_sb_in_progress = 0;
-		return 0;
-		break;
-	}
-	default:
-		break;
-	}
-
-	return 1;
-}
-
-/* Execute current command line. */
-static int
-vty_execute(vty_t *vty)
-{
-	int ret;
-
-	ret = CMD_SUCCESS;
-
-	switch (vty->node) {
-	case AUTH_NODE:
-	case AUTH_ENABLE_NODE:
-		vty_auth(vty, vty->buf);
-		break;
-	default:
-		ret = vty_command(vty, vty->buf);
-		if (vty->type == VTY_TERM)
-			vty_hist_add(vty);
-		break;
-	}
-
-	/* Clear command line buffer. */
-	vty->cp = vty->length = 0;
-	vty_clear_buf(vty);
-
-	if (vty->status != VTY_CLOSE)
-		vty_prompt(vty);
-
-	return ret;
-}
-
-#define CONTROL(X)  ((X) - '@')
-#define VTY_NORMAL     0
-#define VTY_PRE_ESCAPE 1
-#define VTY_ESCAPE     2
-
-/* Escape character command map. */
-static void
-vty_escape_map(unsigned char c, vty_t *vty)
-{
-	switch (c) {
-	case ('A'):
-		vty_previous_line(vty);
-		break;
-	case ('B'):
-		vty_next_line(vty);
-		break;
-	case ('C'):
-		vty_forward_char(vty);
-		break;
-	case ('D'):
-		vty_backward_char(vty);
-		break;
-	default:
-		break;
-	}
-
-	/* Go back to normal mode. */
-	vty->escape = VTY_NORMAL;
-}
-
-/* Quit print out to the buffer. */
-static void
-vty_buffer_reset(vty_t *vty)
-{
-	buffer_reset(vty->obuf);
-	vty_prompt(vty);
-	vty_redraw_line(vty);
-}
-
-/* Read data via vty socket. */
-static int
-vty_read(thread_t *thread)
-{
-	int i, nbytes;
-	unsigned char buf[VTY_READ_BUFSIZ];
-
-	int vty_sock = THREAD_FD(thread);
-	vty_t *vty = THREAD_ARG(thread);
-	vty->t_read = NULL;
-
-	/* Handle Read Timeout */
-	if (thread->type == THREAD_READ_TIMEOUT) {
-		vty_event(VTY_READ, vty_sock, vty);
-		return 0;
-	}
-
-	/* Read raw data from socket */
-	if ((nbytes = read(vty->fd, buf, VTY_READ_BUFSIZ)) <= 0) {
-		if (nbytes < 0) {
-			if (ERRNO_IO_RETRY(errno)) {
-				vty_event(VTY_READ, vty_sock, vty);
-				return 0;
-			}
-			vty->monitor = 0; /* disable monitoring to avoid infinite recursion */
-			log_message(LOG_WARNING, "%s: read error on vty client fd %d, closing: %s"
-					       , __func__, vty->fd, strerror(errno));
-		}
-		buffer_reset(vty->obuf);
-		vty->status = VTY_CLOSE;
-	}
-
-	for (i = 0; i < nbytes; i++) {
-		if (buf[i] == IAC) {
-			if (!vty->iac) {
-				vty->iac = 1;
-				continue;
-			} else {
-				vty->iac = 0;
-			}
-		}
-      
-		if (vty->iac_sb_in_progress && !vty->iac) {
-			if (vty->sb_len < sizeof(vty->sb_buf))
-				vty->sb_buf[vty->sb_len] = buf[i];
-			vty->sb_len++;
-			continue;
-		}
-
-		if (vty->iac) {
-			/* In case of telnet command */
-			int ret = 0;
-			ret = vty_telnet_option(vty, buf + i, nbytes - i);
-			vty->iac = 0;
-			i += ret;
-			continue;
-		}
-	        
-		if (vty->status == VTY_MORE) {
-			switch (buf[i]) {
-			case CONTROL('C'):
-			case 'q':
-			case 'Q':
-				vty_buffer_reset(vty);
-				break;
-			default:
-				break;
-			}
-			continue;
-		}
-
-		/* Escape character. */
-		if (vty->escape == VTY_ESCAPE) {
-			vty_escape_map(buf[i], vty);
-			continue;
-		}
-
-		/* Pre-escape status. */
-		if (vty->escape == VTY_PRE_ESCAPE) {
-			switch (buf[i]) {
-			case '[':
-				vty->escape = VTY_ESCAPE;
-				break;
-			case 'b':
-				vty_backward_word(vty);
-				vty->escape = VTY_NORMAL;
-				break;
-			case 'f':
-				vty_forward_word(vty);
-				vty->escape = VTY_NORMAL;
-				break;
-			case 'd':
-				vty_forward_kill_word(vty);
-				vty->escape = VTY_NORMAL;
-				break;
-			case CONTROL('H'):
-			case 0x7f:
-				vty_backward_kill_word(vty);
-				vty->escape = VTY_NORMAL;
-				break;
-			default:
-				vty->escape = VTY_NORMAL;
-				break;
-			}
-			continue;
-		}
-
-		switch (buf[i]) {
-		case CONTROL('A'):
-			vty_beginning_of_line(vty);
-			break;
-		case CONTROL('B'):
-			vty_backward_char(vty);
-			break;
-		case CONTROL('C'):
-			vty_stop_input(vty);
-			break;
-		case CONTROL('D'):
-			vty_delete_char(vty);
-			break;
-		case CONTROL('E'):
-			vty_end_of_line(vty);
-			break;
-		case CONTROL('F'):
-			vty_forward_char (vty);
-			break;
-		case CONTROL('H'):
-		case 0x7f:
-			vty_delete_backward_char(vty);
-			break;
-		case CONTROL('K'):
-			vty_kill_line(vty);
-			break;
-		case CONTROL('N'):
-			vty_next_line(vty);
-			break;
-		case CONTROL('P'):
-			vty_previous_line(vty);
-			break;
-		case CONTROL('T'):
-			vty_transpose_chars(vty);
-			break;
-		case CONTROL('U'):
-			vty_kill_line_from_beginning(vty);
-			break;
-		case CONTROL('W'):
-			vty_backward_kill_word(vty);
-			break;
-		case CONTROL('Z'):
-			vty_end_config(vty);
-			break;
-		case '\n':
-		case '\r':
-			vty_out(vty, "%s", VTY_NEWLINE);
-			vty_execute(vty);
-			break;
-		case '\t':
-			vty_complete_command(vty);
-			break;
-		case '?':
-			if (vty->node == AUTH_NODE || vty->node == AUTH_ENABLE_NODE) {
-				vty_self_insert(vty, buf[i]);
-			} else {
-				vty_describe_command(vty);
-			}
-			break;
-		case '\033':
-			if (i + 1 < nbytes && buf[i + 1] == '[') {
-				vty->escape = VTY_ESCAPE;
-				i++;
-			} else {
-				vty->escape = VTY_PRE_ESCAPE;
-			}
-			break;
-		default:
-			if (buf[i] > 31 && buf[i] < 127)
-				vty_self_insert(vty, buf[i]);
-			break;
-		}
-	}
-
-	/* Check status. */
-	if (vty->status == VTY_CLOSE) {
-		vty_close (vty);
-	} else {
-		vty_event(VTY_WRITE, vty_sock, vty);
-		vty_event(VTY_READ, vty_sock, vty);
-	}
-
-	return 0;
-}
-
-/* Flush buffer to the vty. */
-static int
-vty_flush(thread_t *thread)
-{
-	int erase;
-	buffer_status_t flushrc;
-	int vty_sock = THREAD_FD(thread);
-	vty_t *vty = THREAD_ARG(thread);
-
-	vty->t_write = NULL;
-
-	/* Handle Write Timeout */
-	if (thread->type == THREAD_WRITE_TIMEOUT) {
-		vty_event(VTY_WRITE, vty_sock, vty);
-		return 0;
-	}
-
-	/* Tempolary disable read thread. */
-	if ((vty->lines == 0) && vty->t_read) {
-		thread_cancel(vty->t_read);
-		vty->t_read = NULL;
-	}
-
-	/* Function execution continue. */
-	erase = ((vty->status == VTY_MORE || vty->status == VTY_MORELINE));
-
-	/* N.B. if width is 0, that means we don't know the window size. */
-	if ((vty->lines == 0) || (vty->width == 0)) {
-		flushrc = buffer_flush_available(vty->obuf, vty->fd);
-	} else if (vty->status == VTY_MORELINE) {
-		flushrc = buffer_flush_window(vty->obuf, vty->fd, vty->width,
-					      1, erase, 0);
-	} else {
-		flushrc = buffer_flush_window(vty->obuf, vty->fd, vty->width,
-					      vty->lines >= 0 ? vty->lines :
-							        vty->height,
-					      erase, 0);
-	}
-
-	switch (flushrc) {
-	case BUFFER_ERROR:
-		vty->monitor = 0; /* disable monitoring to avoid infinite recursion */
-		log_message(LOG_WARNING, "buffer_flush failed on vty client fd %d, closing"
-				       , vty->fd);
-		buffer_reset(vty->obuf);
-		vty_close(vty);
-		return 0;
-	case BUFFER_EMPTY:
-		if (vty->status == VTY_CLOSE) {
-			vty_close (vty);
-		} else {
-			vty->status = VTY_NORMAL;
-			if (vty->lines == 0) {
-				vty_event(VTY_READ, vty_sock, vty);
-			}
-		}
-		break;
-	case BUFFER_PENDING:
-		/* There is more data waiting to be written. */
-		vty->status = VTY_MORE;
-		if (vty->lines == 0) {
-			vty_event(VTY_WRITE, vty_sock, vty);
-		}
-		break;
-	}
-
-	return 0;
-}
-
-/* Create new vty structure. */
-static vty_t *
-vty_create(int vty_sock, struct sockaddr_storage *addr)
-{
-	vty_t *vty;
-
-	/* Allocate new vty structure and set up default values. */
-	vty = vty_new();
-	vty->fd = vty_sock;
-	vty->type = VTY_TERM;
-	vty->address = *addr;
-	if (no_password_check) {
-		vty->node = (host.advanced) ? ENABLE_NODE : VIEW_NODE;
-	} else {
-		vty->node = AUTH_NODE;
-	}
-
-	vty->fail = 0;
-	vty->cp = 0;
-	vty_clear_buf(vty);
-	vty->length = 0;
-	memset(vty->hist, 0, sizeof(vty->hist));
-	vty->hp = 0;
-	vty->hindex = 0;
-	vector_set_index(vtyvec, vty_sock, vty);
-	vty->status = VTY_NORMAL;
-	vty->v_timeout = vty_timeout_val;
-	vty->lines = (host.lines >= 0) ? host.lines: -1;
-	vty->iac = 0;
-	vty->iac_sb_in_progress = 0;
-	vty->sb_len = 0;
-
-	if (!no_password_check) {
-		/* Vty is not available if password isn't set. */
-		if (host.password == NULL && host.password_encrypt == NULL) {
-			vty_out(vty, "Vty password is not set.%s", VTY_NEWLINE);
-			vty->status = VTY_CLOSE;
-			vty_close(vty);
-			return NULL;
-		}
-	}
-
-	/* Say hello to the world. */
-	vty_hello(vty);
-	if (!no_password_check) {
-		vty_out(vty, "%sUser Access Verification%s%s"
-			   , VTY_NEWLINE, VTY_NEWLINE, VTY_NEWLINE);
-	}
-
-	/* Setting up terminal. */
-	vty_will_echo(vty);
-	vty_will_suppress_go_ahead(vty);
-
-	vty_dont_linemode(vty);
-	vty_do_window_size(vty);
-
-	vty_prompt(vty);
-
-	/* Add read/write thread. */
-	vty_event(VTY_WRITE, vty_sock, vty);
-	vty_event(VTY_READ, vty_sock, vty);
-
-	return vty;
-}
-
-/* Accept connection from the network. */
-static int
-vty_accept(thread_t *thread)
-{
-	struct sockaddr_storage sock;
-	socklen_t len;
-	int vty_sock, ret, val;
-	unsigned int on = 1;
-	int accept_sock = THREAD_FD(thread);
-
-	/* Handle Read Timeout */
-	if (thread->type == THREAD_READ_TIMEOUT) {
-		vty_event(VTY_SERV, accept_sock, NULL);
-		return 0;
-	}
-
-	/* We continue hearing vty socket. */
-	vty_event(VTY_SERV, accept_sock, NULL);
-
-	/* We can handle IPv4 or IPv6 socket. */
-	memset(&sock, 0, sizeof(struct sockaddr_storage));
-	len = sizeof(struct sockaddr_storage);
-	vty_sock = accept(accept_sock, (struct sockaddr *) &sock, &len);
-	if (vty_sock < 0) {
-		log_message(LOG_WARNING, "can't accept vty socket : %s"
-				       , strerror(errno));
-		return -1;
-	}
-
-	/* Make socket non-block. */
-	val = fcntl(vty_sock, F_GETFL, 0);
-	fcntl(vty_sock, F_SETFL, val | O_NONBLOCK);
-
-	/* Set NODELAY */
-	ret = setsockopt(vty_sock, IPPROTO_TCP, TCP_NODELAY, 
-			 (char *) &on, sizeof(on));
-	if (ret < 0) {
-		log_message(LOG_INFO, "can't set sockopt to vty_sock : %s"
-				    , strerror(errno));
-	}
-
-	log_message(LOG_INFO, "Vty connection from %s"
-			    , inet_sockaddrtos(&sock));
-
-	vty_create(vty_sock, &sock);
-	return 0;
-}
-
-/* Start listner thread */
-int
-vty_listen(struct sockaddr_storage *addr)
-{
-	int accept_sock, ret, on = 1;
-	socklen_t len;
-	mode_t old_mask;
-
-	/* Mask */
-	old_mask = umask(0077);
-
-	/* Socket */
-	accept_sock = socket(addr->ss_family, SOCK_STREAM, 0);
-	if (accept_sock < 0) {
-		log_message(LOG_INFO, "Vty error creating listening socket on [%s]:%d (%s)"
-				    , inet_sockaddrtos(addr)
-				    , ntohs(inet_sockaddrport(addr))
-				    , strerror(errno));
-		return -1;
-	}
-
-	/* Socket tweaking */
-	ret = setsockopt(accept_sock, SOL_SOCKET, SO_REUSEADDR, &on, sizeof(on));
-	if (ret < 0) {
-		log_message(LOG_INFO, "Vty error cant do SO_REUSEADDR errno=%d (%s)"
-				    , errno
-				    , strerror(errno));
-		close(accept_sock);
-		return -1;
-	}
-
-	/* Socket bind */
-	len = sizeof(*addr);
-	ret = bind(accept_sock, (struct sockaddr *) addr, len);
-	if (ret < 0) {
-		log_message(LOG_INFO, "Vty error cant bind to [%s]:%d (%s)"
-				    , inet_sockaddrtos(addr)
-				    , ntohs(inet_sockaddrport(addr))
-				    , strerror(errno));
-		close(accept_sock);
-		return -1;
-	}
-
-	/* Socket listen */
-	ret = listen(accept_sock, 3);
-	if (ret < 0) {
-		log_message(LOG_INFO, "Vty error cant listen to [%s]:%d (%s)"
-				    , inet_sockaddrtos(addr)
-				    , ntohs(inet_sockaddrport(addr))
-				    , strerror(errno));
-		close(accept_sock);
-		return -1;
-
-	}
-
-	/* Restore old mask */
-	umask(old_mask);
-
-	log_message(LOG_INFO, "Vty start listening on [%s]:%d"
-			    , inet_sockaddrtos(addr)
-			    , ntohs(inet_sockaddrport(addr)));
-
-	vty_event(VTY_SERV, accept_sock, NULL);
-	return accept_sock;
-}
-
-/* Close vty interface.  Warning: call this only from functions that
- * will be careful not to access the vty afterwards (since it has
- * now been freed).  This is safest from top-level functions (called
- * directly by the thread dispatcher). */
-void
-vty_close(vty_t *vty)
-{
-	int i;
-
-	/* Cancel threads.*/
-	if (vty->t_read)
-		thread_cancel(vty->t_read);
-	if (vty->t_write)
-		thread_cancel(vty->t_write);
-	if (vty->t_timeout)
-		thread_cancel(vty->t_timeout);
-
-	/* Flush buffer. */
-	buffer_flush_all(vty->obuf, vty->fd);
-
-	/* Free input buffer. */
-	buffer_free(vty->obuf);
-
-	/* Free command history. */
-	for (i = 0; i < VTY_MAXHIST; i++) {
-		FREE_PTR(vty->hist[i]);
-	}
-
-	/* Unset vector. */
-	vector_unset(vtyvec, vty->fd);
-
-	/* Close socket. */
-	if (vty->fd > 0)
-		close(vty->fd);
-
-	FREE_PTR(vty->buf);
-
-	/* Check configure. */
-	vty_config_unlock(vty);
-
-	/* OK free vty. */
-	FREE(vty);
-}
-
-/* When time out occur output message then close connection. */
-static int
-vty_timeout(thread_t *thread)
-{
-	vty_t *vty;
-
-	vty = THREAD_ARG(thread);
-	vty->t_timeout = NULL;
-	vty->v_timeout = 0;
-
-	/* Clear buffer*/
-	buffer_reset(vty->obuf);
-	vty_out(vty, "%sVty connection is timed out.%s", VTY_NEWLINE, VTY_NEWLINE);
-
-	/* Close connection. */
-	vty->status = VTY_CLOSE;
-	vty_close(vty);
-
-	return 0;
-}
-
-/* Read up configuration file from file_name. */
-static int
-vty_read_file(FILE *confp)
-{
-	int ret;
-	vty_t *vty;
-
-	vty = vty_new();
-	vty->fd = 0;			/* stdout */
-	vty->type = VTY_TERM;
-	vty->node = CONFIG_NODE;
-  
-	/* Execute configuration file */
-	ret = config_from_file(vty, confp);
-
-	if (!((ret == CMD_SUCCESS) || (ret == CMD_ERR_NOTHING_TODO))) {
-		switch (ret) {
-		case CMD_ERR_AMBIGUOUS:
-			log_message(LOG_ERR, "Ambiguous command.\n");
-			break;
-		case CMD_ERR_NO_MATCH:
-			log_message(LOG_ERR, "There is no such command.\n");
-			break;
-		}
-		log_message(LOG_ERR, "Error occured during reading below line.\n%s\n"
-				   , vty->buf);
-		vty_close(vty);
-		return -1;
-	}
-
-	vty_close(vty);
-	return 0;
-}
-
-static FILE *
-vty_use_backup_config(char *fullpath)
-{
-	char *fullpath_sav, *fullpath_tmp;
-	FILE *ret = NULL;
-	struct stat buf;
-	int tmp, sav;
-	int c, retval;
-	char buffer[512];
-  
-	fullpath_sav = MALLOC(strlen(fullpath) + strlen (CONF_BACKUP_EXT) + 1);
-	strcpy(fullpath_sav, fullpath);
-	strcat(fullpath_sav, CONF_BACKUP_EXT);
-	if (stat (fullpath_sav, &buf) == -1) {
-		FREE(fullpath_sav);
-		return NULL;
-	}
-
-	fullpath_tmp = MALLOC(strlen(fullpath) + 8);
-	sprintf(fullpath_tmp, "%s.XXXXXX", fullpath);
-  
-	/* Open file to configuration write. */
-	tmp = mkstemp(fullpath_tmp);
-	if (tmp < 0) {
-		FREE(fullpath_sav);
-		FREE(fullpath_tmp);
-		return NULL;
-	}
-
-	sav = open(fullpath_sav, O_RDONLY);
-	if (sav < 0) {
-		unlink(fullpath_tmp);
-		FREE(fullpath_sav);
-		FREE(fullpath_tmp);
-		return NULL;
-	}
-  
-	while((c = read(sav, buffer, 512)) > 0) {
-		retval = write(tmp, buffer, c);
-		if (retval < 0) {
-			unlink(fullpath_tmp);
-			FREE(fullpath_sav);
-			FREE(fullpath_tmp);
-			close(sav);
-			close(tmp);
-			return NULL;
-		}
-	}
-  
-	close(sav);
-	close(tmp);
-  
-	if (chmod(fullpath_tmp, 0600) != 0) {
-		unlink(fullpath_tmp);
-		FREE(fullpath_sav);
-		FREE(fullpath_tmp);
-		return NULL;
-	}
-  
-	if (link(fullpath_tmp, fullpath) == 0)
-		ret = fopen(fullpath, "r");
-
-	unlink(fullpath_tmp);
-  
-	FREE(fullpath_sav);
-	FREE(fullpath_tmp);
-	return ret;
-}
-
-/* Read up configuration file from file_name. */
-int
-vty_read_config(char *config_file, char *config_default_dir)
-{
-	char cwd[MAXPATHLEN];
-	FILE *confp = NULL;
-	char *fullpath;
-	char *tmp = NULL;
-	char *retpath;
-
-	/* If -f flag specified. */
-	if (config_file != NULL) {
-		if (!IS_DIRECTORY_SEP(config_file[0])) {
-			retpath = getcwd(cwd, MAXPATHLEN);
-			if (!retpath) {
-				log_message(LOG_ERR, "%s: failed to get current working directory: %s\n"
-						   , __func__, strerror(errno));
-				return -1;
-			}
-			tmp = MALLOC(strlen(cwd) + strlen(config_file) + 2);
-			sprintf(tmp, "%s/%s", cwd, config_file);
-			fullpath = tmp;
-		} else {
-			fullpath = config_file;
-		}
-
-		confp = fopen(fullpath, "r");
-
-		if (confp == NULL) {
-			log_message(LOG_ERR, "%s: failed to open configuration file %s: %s\n"
-					   , __func__, fullpath, strerror (errno));
-          
-			confp = vty_use_backup_config(fullpath);
-			if (confp) {
-				log_message(LOG_ERR, "WARNING: using backup configuration file!\n");
-			} else {
-				log_message(LOG_ERR, "can't open configuration file [%s]\n"
-						   , config_file);
-				FREE_PTR(tmp);
-				return -1;
-			}
-		}
-	} else {
-		confp = fopen(config_default_dir, "r");
-		if (confp == NULL) {
-			log_message(LOG_ERR, "%s: failed to open configuration file %s: %s\n"
-					   , __func__, config_default_dir, strerror(errno));
-          
-			confp = vty_use_backup_config(config_default_dir);
-			if (confp) {
-				log_message(LOG_ERR, "WARNING: using backup configuration file!\n");
-				fullpath = config_default_dir;
-			} else {
-				log_message(LOG_ERR, "can't open configuration file [%s]\n"
-						   , config_default_dir);
-				return -1;
-			}
-		} else {
-			fullpath = config_default_dir;
-		}
-	}
-
-	vty_read_file(confp);
-	fclose(confp);
-	host_config_set(fullpath);
-	FREE_PTR(tmp);
-	return 0;
-}
-
-int
-vty_config_lock(vty_t *vty)
-{
-	if (vty_config == 0) {
-		vty->config = 1;
-		vty_config = 1;
-	}
-
-	return vty->config;
-}
-
-int
-vty_config_unlock(vty_t *vty)
-{
-	if (vty_config == 1 && vty->config == 1) {
-		vty->config = 0;
-		vty_config = 0;
-	}
-
-	return vty->config;
-}
-
-/* Master of the threads. */
-static void
-vty_event(event_t event, int sock, vty_t *vty)
-{
-	thread_t *vty_serv_thread;
-
-	switch (event) {
-	case VTY_SERV:
-		vty_serv_thread = thread_add_read(master, vty_accept, vty, sock,
-						  VTY_IO_TIMEOUT);
-		vector_set_index(Vvty_serv_thread, sock, vty_serv_thread);
-		break;
-
-	case VTY_READ:
-		vty->t_read = thread_add_read(master, vty_read, vty, sock, VTY_IO_TIMEOUT);
-
-		/* Time out treatment. */
-		if (vty->v_timeout) {
-			if (vty->t_timeout)
-				thread_cancel(vty->t_timeout);
-			vty->t_timeout = thread_add_timer(master, vty_timeout, vty,
-							  vty->v_timeout*TIMER_HZ);
-		}
-		break;
-
-	case VTY_WRITE:
-		if (!vty->t_write)
-			vty->t_write = thread_add_write(master, vty_flush, vty, sock,
-							VTY_IO_TIMEOUT);
-		break;
-
-	case VTY_TIMEOUT_RESET:
-		if (vty->t_timeout) {
-			thread_cancel(vty->t_timeout);
-			vty->t_timeout = NULL;
-		}
-
-		if (vty->v_timeout) {
-			vty->t_timeout = thread_add_timer(master, vty_timeout, vty,
-							  vty->v_timeout*TIMER_HZ);
-		}
-		break;
-	}
-}
-
-DEFUN(config_who,
-      config_who_cmd,
-      "who",
-      "Display who is on vty\n")
-{
-	char ipaddr[INET6_ADDRSTRLEN];
-	unsigned int i;
-	vty_t *v;
-
-	for (i = 0; i < vector_active(vtyvec); i++) {
-		if ((v = vector_slot(vtyvec, i)) != NULL) {
-			vty_out(vty, "%svty[%d] connected from %s.%s"
-				   , v->config ? "*" : " "
-				   , i, inet_sockaddrtos2(&v->address, ipaddr)
-				   , VTY_NEWLINE);
-		}
-	}
-	return CMD_SUCCESS;
-}
-
-/* Move to vty configuration mode. */
-DEFUN(line_vty,
-      line_vty_cmd,
-      "line vty",
-      "Configure a terminal line\n"
-      "Virtual terminal\n")
-{
-	vty->node = VTY_NODE;
-	return CMD_SUCCESS;
-}
-
-/* Set time out value. */
-static int
-exec_timeout(vty_t *vty, const char *min_str, const char *sec_str)
-{
-	unsigned long timeout = 0;
-
-	/* min_str and sec_str are already checked by parser.  So it must be
-	  all digit string. */
-	if (min_str) {
-		timeout = strtol(min_str, NULL, 10);
-		timeout *= 60;
-	}
-
-	if (sec_str) {
-		timeout += strtol(sec_str, NULL, 10);
-	}
-
-	vty_timeout_val = timeout;
-	vty->v_timeout = timeout;
-	vty_event(VTY_TIMEOUT_RESET, 0, vty);
-
-	return CMD_SUCCESS;
-}
-
-DEFUN(exec_timeout_min,
-      exec_timeout_min_cmd,
-      "exec-timeout <0-35791>",
-      "Set timeout value\n"
-      "Timeout value in minutes\n")
-{
-	return exec_timeout(vty, argv[0], NULL);
-}
-
-DEFUN(exec_timeout_sec,
-      exec_timeout_sec_cmd,
-      "exec-timeout <0-35791> <0-2147483>",
-      "Set the EXEC timeout\n"
-      "Timeout in minutes\n"
-      "Timeout in seconds\n")
-{
-	return exec_timeout(vty, argv[0], argv[1]);
-}
-
-DEFUN(no_exec_timeout,
-      no_exec_timeout_cmd,
-      "no exec-timeout",
-      NO_STR
-      "Set the EXEC timeout\n")
-{
-	return exec_timeout(vty, NULL, NULL);
-}
-
-/* vty login. */
-DEFUN(vty_login,
-      vty_login_cmd,
-      "login",
-      "Enable password checking\n")
-{
-	no_password_check = 0;
-	return CMD_SUCCESS;
-}
-
-DEFUN(no_vty_login,
-      no_vty_login_cmd,
-      "no login",
-      NO_STR
-      "Enable password checking\n")
-{
-	no_password_check = 1;
-	return CMD_SUCCESS;
-}
-
-/* initial mode. */
-DEFUN(service_advanced_vty,
-      service_advanced_vty_cmd,
-      "service advanced-vty",
-      "Set up miscellaneous service\n"
-      "Enable advanced mode vty interface\n")
-{
-	host.advanced = 1;
-	return CMD_SUCCESS;
-}
-
-DEFUN(no_service_advanced_vty,
-      no_service_advanced_vty_cmd,
-      "no service advanced-vty",
-      NO_STR
-      "Set up miscellaneous service\n"
-      "Enable advanced mode vty interface\n")
-{
-	host.advanced = 0;
-	return CMD_SUCCESS;
-}
-
-DEFUN(terminal_monitor,
-      terminal_monitor_cmd,
-      "terminal monitor",
-      "Set terminal line parameters\n"
-      "Copy debug output to the current terminal line\n")
-{
-	vty->monitor = 1;
-	return CMD_SUCCESS;
-}
-
-DEFUN(terminal_no_monitor,
-      terminal_no_monitor_cmd,
-      "terminal no monitor",
-      "Set terminal line parameters\n"
-      NO_STR
-      "Copy debug output to the current terminal line\n")
-{
-	vty->monitor = 0;
-	return CMD_SUCCESS;
-}
-
-ALIAS(terminal_no_monitor,
-      no_terminal_monitor_cmd,
-      "no terminal monitor",
-      NO_STR
-      "Set terminal line parameters\n"
-      "Copy debug output to the current terminal line\n")
-
-DEFUN(show_history,
-      show_history_cmd,
-      "show history",
-      SHOW_STR
-      "Display the session command history\n")
-{
-	int index;
-
-	for (index = vty->hindex + 1; index != vty->hindex;) {
-		if (index == VTY_MAXHIST) {
-			index = 0;
-			continue;
-		}
-
-		if (vty->hist[index] != NULL) {
-			vty_out(vty, "  %s%s", vty->hist[index], VTY_NEWLINE);
-		}
-
-		index++;
-	}
-
-	return CMD_SUCCESS;
-}
-
-/* Display current configuration. */
-static int
-vty_config_write(vty_t *vty)
-{
-	vty_out(vty, "line vty%s", VTY_NEWLINE);
-
-	/* exec-timeout */
-	if (vty_timeout_val != VTY_TIMEOUT_DEFAULT) {
-		vty_out(vty, " exec-timeout %ld %ld%s", 
-			vty_timeout_val / 60,
-			vty_timeout_val % 60, VTY_NEWLINE);
-	}
-
-	/* login */
-	if (no_password_check)
-		vty_out(vty, " no login%s", VTY_NEWLINE);
-    
-	vty_out(vty, "!%s", VTY_NEWLINE);
-
-	return CMD_SUCCESS;
-}
-
-cmd_node_t vty_node = {
-	VTY_NODE,
-	"%s(config-line)# ",
-	1,
-};
-
-/* Reset all VTY status. */
-void
-vty_reset(void)
-{
-	unsigned int i;
-	vty_t *vty;
-	thread_t *vty_serv_thread;
-
-	for (i = 0; i < vector_active(vtyvec); i++) {
-		if ((vty = vector_slot(vtyvec, i)) != NULL) {
-			buffer_reset(vty->obuf);
-			vty->status = VTY_CLOSE;
-			vty_close(vty);
-		}
-	}
-
-	for (i = 0; i < vector_active(Vvty_serv_thread); i++) {
-		if ((vty_serv_thread = vector_slot(Vvty_serv_thread, i)) != NULL) {
-			thread_cancel(vty_serv_thread);
-			vector_slot(Vvty_serv_thread, i) = NULL;
-			close(i);
-		}
-	}
-
-	vty_timeout_val = VTY_TIMEOUT_DEFAULT;
-}
-
-static void
-vty_save_cwd(void)
-{
-	char cwd[MAXPATHLEN];
-	char *c;
-	int retval;
-	char *retpath;
-
-	c = getcwd(cwd, MAXPATHLEN);
-
-	if (!c) {
-		retval = chdir(SYSCONFDIR);
-		if (!retval)
-			return;
-		retpath = getcwd(cwd, MAXPATHLEN);
-		if (!retpath)
-			return;
-	}
-
-	vty_cwd = MALLOC(strlen(cwd) + 1);
-	strcpy(vty_cwd, cwd);
-}
-
-char *
-vty_get_cwd(void)
-{
-	return vty_cwd;
-}
-
-int
-vty_shell(vty_t *vty)
-{
-	return vty->type == VTY_SHELL ? 1 : 0;
-}
-
-int
-vty_shell_serv(vty_t *vty)
-{
-	return vty->type == VTY_SHELL_SERV ? 1 : 0;
-}
-
-/* Install vty's own commands like `who' command. */
-void
-vty_init(void)
-{
-	/* For further configuration read, preserve current directory. */
-	vty_save_cwd();
-
-	vtyvec = vector_init(VECTOR_DEFAULT_SIZE);
-
-	/* Initilize server thread vector. */
-	Vvty_serv_thread = vector_init(VECTOR_DEFAULT_SIZE);
-
-	/* Install basic node. */
-	install_node(&vty_node, vty_config_write);
-
-	install_element(VIEW_NODE, &config_who_cmd);
-	install_element(VIEW_NODE, &show_history_cmd);
-	install_element(ENABLE_NODE, &config_who_cmd);
-	install_element(CONFIG_NODE, &line_vty_cmd);
-	install_element(CONFIG_NODE, &service_advanced_vty_cmd);
-	install_element(CONFIG_NODE, &no_service_advanced_vty_cmd);
-	install_element(CONFIG_NODE, &show_history_cmd);
-	install_element(ENABLE_NODE, &terminal_monitor_cmd);
-	install_element(ENABLE_NODE, &terminal_no_monitor_cmd);
-	install_element(ENABLE_NODE, &no_terminal_monitor_cmd);
-	install_element(ENABLE_NODE, &show_history_cmd);
-
-	install_default(VTY_NODE);
-	install_element(VTY_NODE, &exec_timeout_min_cmd);
-	install_element(VTY_NODE, &exec_timeout_sec_cmd);
-	install_element(VTY_NODE, &no_exec_timeout_cmd);
-	install_element(VTY_NODE, &vty_login_cmd);
-	install_element(VTY_NODE, &no_vty_login_cmd);
-}
-
-void
-vty_terminate(void)
-{
-	FREE_PTR(vty_cwd);
-
-	if (vtyvec && Vvty_serv_thread) {
-		vty_reset();
-		vector_free(vtyvec);
-		vector_free(Vvty_serv_thread);
-	}
-}
diff --git a/tools/keepalived/lib/vty.h b/tools/keepalived/lib/vty.h
deleted file mode 100644
index 2c4b44f85..000000000
--- a/tools/keepalived/lib/vty.h
+++ /dev/null
@@ -1,196 +0,0 @@
-/*
- * Soft:        Keepalived is a failover program for the LVS project
- *              <www.linuxvirtualserver.org>. It monitor & manipulate
- *              a loadbalanced server pool using multi-layer checks.
- *
- * Part:        vty.c include file.
- *
- * Author:      Alexandre Cassen, <acassen@linux-vs.org>
- *
- *              This program is distributed in the hope that it will be useful,
- *              but WITHOUT ANY WARRANTY; without even the implied warranty of
- *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
- *              See the GNU General Public License for more details.
- *
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
- *
- * Copyright (C) 2001-2012 Alexandre Cassen, <acassen@linux-vs.org>
- */
-
-#ifndef _VTY_H
-#define _VTY_H
-
-#include <netinet/in.h>
-#include "timer.h"
-#include "scheduler.h"
-#include "buffer.h"
-
-#define VTY_BUFSIZ 512
-#define VTY_MAXHIST 20
-#define TELNET_NAWS_SB_LEN 5
-
-typedef enum _event {
-	VTY_SERV,
-	VTY_READ,
-	VTY_WRITE,
-	VTY_TIMEOUT_RESET
-} event_t;
-
-typedef enum _vty_type {
-	VTY_TERM,
-	VTY_FILE,
-	VTY_SHELL,
-	VTY_SHELL_SERV
-} vty_type_t;
-
-typedef enum _vty_status {
-	VTY_NORMAL,
-	VTY_CLOSE,
-	VTY_MORE,
-	VTY_MORELINE
-} vty_status_t;
-
-
-/* VTY struct. */
-typedef struct _vty {
-	int			fd;				/* File descripter of this vty. */
-	vty_type_t		type;				/* Is this vty connect to file or not */
-	int			node;				/* Node status of this vty */
-	int			fail;				/* Failure count */
-	buffer_t		*obuf;				/* Output buffer */
-	char			*buf;				/* Command input buffer */
-	int			cp;				/* Command cursor point */
-	int			length;				/* Command length */
-	int			max;				/* Command max length */
-	char			*hist[VTY_MAXHIST];		/* Histry of command */
-	int			hp;				/* History lookup current point */
-	int			hindex;				/* History insert end point */
-	void			*index;				/* For current referencing point */
-	void			*index_sub;			/* For multiple level index treatment such
-								 * as key chain and key.
-								 */
-	unsigned char		escape;				/* For escape character. */
-	vty_status_t		status;				/* Current vty status. */
-	unsigned char		iac;				/* IAC handling: was the last character received
-								 * the IAC (interpret-as-command) escape character
-								 * (and therefore the next character will be the
-								 * command code)?  Refer to Telnet RFC 854.
-								 */
-	unsigned char		iac_sb_in_progress;		/* IAC SB (option subnegotiation) handling */
-	unsigned char		sb_buf[TELNET_NAWS_SB_LEN];	/* At the moment, we care only about the NAWS
-								 * (window size) negotiation, and that requires
-								 * just a 5-character buffer (RFC 1073):
-								 * <NAWS char> <16-bit width> <16-bit height>
-								 */
-	size_t			sb_len;				/* How many subnegotiation characters have we
-								 * received?  We just drop those that do not
-								 * fit in the buffer.
-								 */
-	int			width;				/* Window width */
-	int			height;				/* Window height */
-	int			lines;				/* Configure lines */
-	int			monitor;			/* Terminal monitor */
-	int			config;				/* In configure mode */
-	thread_t		*t_read;			/* Read thread */
-	thread_t		*t_write;			/* Write thread */
-	unsigned long		v_timeout;			/* Timeout seconds */
-	thread_t		*t_timeout;			/* Timeout thread */
-	struct sockaddr_storage	address;			/* What address is this vty comming from. */
-} vty_t;
-
-/* Integrated configuration file. */
-#define INTEGRATE_DEFAULT_CONFIG "keepalived.conf"
-
-/* Small macro to determine newline is newline only or linefeed needed. */
-#define VTY_NEWLINE	((vty->type == VTY_TERM) ? "\r\n" : "\n")
-
-/* Default time out value */
-#define VTY_TIMEOUT_DEFAULT	600
-#define VTY_IO_TIMEOUT		(10 * TIMER_HZ)
-
-/* Vty read buffer size. */
-#define VTY_READ_BUFSIZ 512
-
-/* Directory separator. */
-#define DIRECTORY_SEP '/'
-#define IS_DIRECTORY_SEP(c) ((c) == DIRECTORY_SEP)
-
-/* GCC have printf type attribute check.  */
-#ifdef __GNUC__
-#define PRINTF_ATTRIBUTE(a,b) __attribute__ ((__format__ (__printf__, a, b)))
-#else
-#define PRINTF_ATTRIBUTE(a,b)
-#endif
-
-/* Utility macros to convert VTY argument to unsigned long or integer. */
-#define VTY_GET_LONG(NAME,V,STR)					\
-do {									\
-  char *endptr = NULL;							\
-  errno = 0;								\
-  (V) = strtoul((STR), &endptr, 10);					\
-  if (*(STR) == '-' || *endptr != '\0' || errno) {			\
-      vty_out(vty, "%% Invalid %s value%s", NAME, VTY_NEWLINE);		\
-      return CMD_WARNING;						\
-    }									\
-} while (0)
-
-#define VTY_GET_INTEGER_RANGE(NAME,V,STR,MIN,MAX)			\
-do {									\
-  unsigned long tmpl;							\
-  VTY_GET_LONG(NAME, tmpl, STR);					\
-  if ((tmpl < (MIN)) || (tmpl > (MAX))) {				\
-      vty_out(vty, "%% Invalid %s value%s", NAME, VTY_NEWLINE);		\
-      return CMD_WARNING;						\
-    }									\
-  (V) = tmpl;								\
-} while (0)
-
-#define VTY_GET_INTEGER(NAME,V,STR) \
-	VTY_GET_INTEGER_RANGE(NAME,V,STR,0U,UINT32_MAX)
-
-#define VTY_GET_IPV4_ADDRESS(NAME,V,STR)				\
-do {									\
-  int retv;								\
-  retv = inet_aton((STR), &(V));					\
-  if (!retv) {								\
-      vty_out(vty, "%% Invalid %s value%s", NAME, VTY_NEWLINE);		\
-      return CMD_WARNING;						\
-    }									\
-} while (0)
-
-#define VTY_GET_IPV4_PREFIX(NAME,V,STR)					\
-do {									\
-  int retv;								\
-  retv = str2prefix_ipv4((STR), &(V));					\
-  if (retv <= 0) {							\
-      vty_out(vty, "%% Invalid %s value%s", NAME, VTY_NEWLINE);		\
-      return CMD_WARNING;						\
-    }									\
-} while (0)
-
-/* Exported variables */
-extern char integrate_default[];
-
-/* Prototypes. */
-extern void vty_init(void);
-extern void vty_terminate(void);
-extern int vty_listen(struct sockaddr_storage *);
-extern void vty_reset(void);
-extern vty_t *vty_new(void);
-extern int vty_out(vty_t *, const char *, ...) PRINTF_ATTRIBUTE(2, 3);
-extern int vty_read_config(char *, char *);
-extern void vty_time_print(vty_t *, int);
-extern void vty_serv_sock(const char *, unsigned short, const char *);
-extern void vty_close(vty_t *);
-extern char *vty_get_cwd(void);
-extern int vty_config_lock(vty_t *);
-extern int vty_config_unlock(vty_t *);
-extern int vty_shell(vty_t *);
-extern int vty_shell_serv(vty_t *);
-extern void vty_time_print(vty_t *, int);
-extern void vty_hello(vty_t *);
-
-#endif
diff --git a/tools/keepalived/lib/warnings.h b/tools/keepalived/lib/warnings.h
new file mode 100644
index 000000000..8f62cb04e
--- /dev/null
+++ b/tools/keepalived/lib/warnings.h
@@ -0,0 +1,110 @@
+/*
+ * Soft:        Keepalived is a failover program for the LVS project
+ *              <www.linuxvirtualserver.org>. It monitor & manipulate
+ *              a loadbalanced server pool using multi-layer checks.
+ *
+ * Part:        warnings.h include file.
+ *
+ * Author:      Quentin Armitage <quentin@armitage.org.uk>
+ *
+ *              This program is distributed in the hope that it will be useful,
+ *              but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *              MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ *              See the GNU General Public License for more details.
+ *
+ *              This program is free software; you can redistribute it and/or
+ *              modify it under the terms of the GNU General Public License
+ *              as published by the Free Software Foundation; either version
+ *              2 of the License, or (at your option) any later version.
+ *
+ * Copyright (C) 2019-2019 Alexandre Cassen, <acassen@gmail.com>
+ */
+
+#ifndef _WARNINGS_H
+#define _WARNINGS_H
+
+#ifdef __GNUC__
+#include <features.h>
+#endif
+
+#include "config.h"
+
+
+/* musl does not define __GNUC_PREREQ, so create a dummy definition */
+#ifndef __GNUC_PREREQ
+#define __GNUC_PREREQ(maj, min) 0
+#endif
+
+/* GCC allows pragmas in functions, and diagnostic push/pop from version 4.6.0 */
+
+/* See https://clang.llvm.org/docs/DiagnosticsReference.html for clang diagnostics
+ * See https://gcc.gnu.org/onlinedocs/gcc/Warning-Options.html for GCC warnings
+*/
+
+#ifdef _HAVE_DIAGNOSTIC_PUSH_POP_PRAGMAS_
+#define RELAX_STACK_PROTECTOR_START \
+_Pragma("GCC diagnostic push") \
+_Pragma("GCC diagnostic ignored \"-Wstack-protector\"")
+#else
+#define RELAX_STACK_PROTECTOR_START
+#endif
+
+#ifdef _HAVE_DIAGNOSTIC_PUSH_POP_PRAGMAS_
+#define RELAX_STACK_PROTECTOR_END \
+_Pragma("GCC diagnostic pop")
+#else
+#define RELAX_STACK_PROTECTOR_END
+#endif
+
+#if __GNUC__ && !__GNUC_PREREQ(8,0) && defined _HAVE_DIAGNOSTIC_PUSH_POP_PRAGMAS_
+#ifdef _HAVE_PRAGMA_WARN_STRICT_OVERFLOW_1_
+#define RELAX_STRICT_OVERFLOW_START \
+_Pragma("GCC diagnostic push") \
+_Pragma("GCC diagnostic warning \"-Wstrict-overflow=1\"")
+#else
+#define RELAX_STRICT_OVERFLOW_START \
+_Pragma("GCC diagnostic push") \
+_Pragma("GCC diagnostic warning \"-Wstrict-overflow\"")
+#endif
+#else
+#define RELAX_STRICT_OVERFLOW_START
+#endif
+
+#if __GNUC__ && !__GNUC_PREREQ(8,0) && defined _HAVE_DIAGNOSTIC_PUSH_POP_PRAGMAS_
+#define RELAX_STRICT_OVERFLOW_END \
+_Pragma("GCC diagnostic pop")
+#else
+#define RELAX_STRICT_OVERFLOW_END
+#endif
+
+#ifdef _HAVE_DIAGNOSTIC_PUSH_POP_PRAGMAS_
+#define RELAX_CAST_QUAL_START \
+_Pragma("GCC diagnostic push") \
+_Pragma("GCC diagnostic ignored \"-Wcast-qual\"")
+#else
+#define RELAX_CAST_QUAL_START
+#endif
+
+#ifdef _HAVE_DIAGNOSTIC_PUSH_POP_PRAGMAS_
+#define RELAX_CAST_QUAL_END \
+_Pragma("GCC diagnostic pop")
+#else
+#define RELAX_CAST_QUAL_END
+#endif
+
+#ifdef _HAVE_DIAGNOSTIC_PUSH_POP_PRAGMAS_
+#define RELAX_SUGGEST_ATTRIBUTE_CONST_START \
+_Pragma("GCC diagnostic push") \
+_Pragma("GCC diagnostic ignored \"-Wsuggest-attribute=const\"")
+#else
+#define RELAX_SUGGEST_ATTRIBUTE_CONST_START
+#endif
+
+#ifdef _HAVE_DIAGNOSTIC_PUSH_POP_PRAGMAS_
+#define RELAX_SUGGEST_ATTRIBUTE_CONST_END \
+_Pragma("GCC diagnostic pop")
+#else
+#define RELAX_SUGGEST_ATTRIBUTE_CONST_END
+#endif
+
+#endif
diff --git a/tools/keepalived/snap-tools/keepalived-wrapper b/tools/keepalived/snap-tools/keepalived-wrapper
new file mode 100755
index 000000000..357b1a1eb
--- /dev/null
+++ b/tools/keepalived/snap-tools/keepalived-wrapper
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+MAJ_VER=$(uname -r | cut -d'.' -f1)
+MIN_VER=$(uname -r | cut -d'.' -f2)
+RUNNING_KERNEL_VER=$(printf "%d%2.2d\n" $MAJ_VER $MIN_VER)
+if [ ${RUNNING_KERNEL_VER} -ge 500 ]; then
+  BINARY="keepalived-500"
+elif [ ${RUNNING_KERNEL_VER} -ge 418 ]; then
+  BINARY="keepalived-418"
+elif [ ${RUNNING_KERNEL_VER} -ge 415 ]; then
+  BINARY="keepalived-415"
+#elif [ ${RUNNING_KERNEL_VER} -ge 413 ]; then
+#  BINARY="keepalived-413"
+elif [ ${RUNNING_KERNEL_VER} -ge 404 ]; then
+  BINARY="keepalived-404"
+elif [ ${RUNNING_KERNEL_VER} -ge 313 ]; then
+  BINARY="keepalived-313"
+elif [ ${RUNNING_KERNEL_VER} -ge 305 ]; then
+  BINARY="keepalived-310"
+else
+  echo "ERROR! You are running kernel ${RUNNING_KERNEL_VER},"
+  echo "       which is not currently supported by the keepalived snap."
+  echo "If you need support for kernel ${RUNNING_KERNEL_VER} please file"
+  echo "an issue: https://github.com/acassen/keepalived/issues"
+exit 1
+fi
+
+exec ${SNAP}/usr/sbin/${BINARY} "$@"
diff --git a/tools/keepalived/snap/hooks/install b/tools/keepalived/snap/hooks/install
new file mode 100755
index 000000000..3ff8b5342
--- /dev/null
+++ b/tools/keepalived/snap/hooks/install
@@ -0,0 +1,15 @@
+#!/bin/sh
+
+# Create a default (emtpy) configuration file
+if [ ! -f /etc/keepalived/keepalived.conf ]; then
+  mkdir -p /etc/keepalived
+  touch /etc/keepalived/keepalived.conf
+fi
+
+# Copy the DBus files to the required directories
+for file in /etc/dbus-1/system.d/org.keepalived.Vrrp1.conf /usr/share/dbus-1/interfaces/org.keepalived.Vrrp1.Instance.xml /usr/share/dbus-1/interfaces/org.keepalived.Vrrp1.Vrrp.xml; do
+  DIR=`echo $fred | sed -e "s:/[^/]*$::"`
+  if [ -d $DIR ]; then
+    cp -p $SNAP$file $file
+  fi
+done
diff --git a/tools/keepalived/snap/hooks/post-refresh b/tools/keepalived/snap/hooks/post-refresh
new file mode 120000
index 000000000..f7ffc47af
--- /dev/null
+++ b/tools/keepalived/snap/hooks/post-refresh
@@ -0,0 +1 @@
+install
\ No newline at end of file
diff --git a/tools/keepalived/snap/snapcraft.yaml b/tools/keepalived/snap/snapcraft.yaml
new file mode 100644
index 000000000..31072c6b9
--- /dev/null
+++ b/tools/keepalived/snap/snapcraft.yaml
@@ -0,0 +1,444 @@
+name: keepalived
+adopt-info: keepalived
+summary: High availability VRRP and load-balancing for Linux
+description: |
+  Keepalived provides simple and robust loadbalancing and high-availability
+  to Linux based infrastructures using VRRP and the well-known Linux Virtual
+  Server (IPVS) kernel module.
+
+grade: stable
+confinement: classic
+
+apps:
+  daemon:
+    daemon: forking
+    command: bin/keepalived-wrapper
+  keepalived:
+    command: bin/keepalived-wrapper
+  "500":
+    command: usr/sbin/keepalived-500
+  "418":
+    command: usr/sbin/keepalived-418
+  "415":
+    command: usr/sbin/keepalived-415
+#  "413":
+#    command: usr/sbin/keepalived-413
+  "404":
+    command: usr/sbin/keepalived-404
+  "313":
+    command: usr/sbin/keepalived-313
+  "310":
+    command: usr/sbin/keepalived-310
+  genhash:
+    command: usr/bin/genhash
+
+parts:
+  keepalived:
+    plugin: autotools
+    source: .
+    source-type: git
+    configflags:
+      - --prefix=/usr
+      - --enable-bfd
+      - --enable-dbus
+      - --enable-json
+      - --enable-regex
+      - --enable-snmp
+      - --enable-snmp-rfc
+      - --disable-libipset-dynamic
+    override-build: |
+      snapcraftctl build
+      VER=$(grep GIT_COMMIT lib/git-commit.h | cut -d'"' -f2)
+      snapcraftctl set-version $VER
+    build-packages:
+      - iptables-dev
+      - libipset-dev
+      - libjson-c-dev
+      - libglib2.0-dev
+      - libmagic-dev
+      - libmnl-dev
+      - libnftnl-dev
+      - libnl-3-dev
+      - libnl-genl-3-dev
+      - libnfnetlink-dev
+      - libpcre2-dev
+      - libsnmp-dev
+      - libssl-dev
+    stage-packages:
+      - libnfnetlink0
+      - libipset3
+      - libjson-c2
+      - libglib2.0-0
+      - libmagic1
+      - libmnl0
+      - libnftnl4
+      - libnl-3-200
+      - libnl-genl-3-200
+      - libpcre2-8-0
+      - libsnmp30
+    organize:
+      'usr/sbin/keepalived': usr/sbin/keepalived-404
+
+  linux-headers-500:
+    plugin: nil
+    build-packages:
+      - dpkg
+      - dpkg-dev
+      - wget
+    after:
+      - keepalived
+    override-pull: |
+      KERNEL_VER="5.0.0"
+      ARCH=$(dpkg-architecture -q DEB_BUILD_ARCH)
+      if [ $ARCH = amd64 ] || [ $ARCH = i386 ]; then
+        ARCHIVE_URL="http://security.ubuntu.com/ubuntu/pool/main/l/linux/"
+      else
+        ARCHIVE_URL="http://ports.ubuntu.com/pool/main/l/linux/"
+      fi
+      DEB_SUFFIX=$(wget ${ARCHIVE_URL} -O - | grep linux-libc-dev | cut -d'_' -f2-3 | cut -d'"' -f1 | grep ${ARCH} | grep ${KERNEL_VER} | tail -n1)
+      wget --quiet ${ARCHIVE_URL}/linux-libc-dev_${DEB_SUFFIX} -O ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb
+      echo "Unpacking kernel headers..."
+      dpkg -x ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb ${SNAPCRAFT_PART_INSTALL}
+      cat ${SNAPCRAFT_PART_INSTALL}/usr/include/linux/version.h
+      rm -f ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb
+    override-build: |
+      snapcraftctl build
+      # Move the headers on the host out of the way
+      echo -n "Host kernel:"
+      cat /usr/include/linux/version.h
+      rm -rf /usr/include/linux || true
+      # Move header from the part to the host
+      mv ${SNAPCRAFT_PART_INSTALL}/usr/include/linux /usr/include/ || true
+      echo -n "Build kernel:"
+      cat /usr/include/linux/version.h
+    stage:
+      - -*
+    prime:
+      - -*
+
+  keepalived-500:
+    plugin: autotools
+    source: .
+    source-type: git
+    after:
+      - linux-headers-500
+    configflags:
+      - --prefix=/usr
+      - --enable-bfd
+      - --enable-dbus
+      - --enable-json
+      - --enable-regex
+      - --enable-snmp
+      - --enable-snmp-rfc
+      - --disable-libipset-dynamic
+    organize:
+      'usr/sbin/keepalived': usr/sbin/keepalived-500
+      'usr/etc/dbus-1/system.d/org.keepalived.Vrrp1.conf': etc/dbus-1/system.d/org.keepalived.Vrrp1.conf
+    stage:
+      - usr/sbin/keepalived-500
+      - etc/dbus-1/system.d/org.keepalived.Vrrp1.conf
+      - usr/share/dbus-1/interfaces/org.keepalived.Vrrp1.Instance.xml
+      - usr/share/dbus-1/interfaces/org.keepalived.Vrrp1.Vrrp.xml
+    prime:
+      - usr/sbin/keepalived-500
+      - etc/dbus-1/system.d/org.keepalived.Vrrp1.conf
+      - usr/share/dbus-1/interfaces/org.keepalived.Vrrp1.Instance.xml
+      - usr/share/dbus-1/interfaces/org.keepalived.Vrrp1.Vrrp.xml
+
+  linux-headers-418:
+    plugin: nil
+    build-packages:
+      - dpkg
+      - dpkg-dev
+      - wget
+    after:
+      - keepalived-500
+    override-pull: |
+      KERNEL_VER="4.18.0"
+      ARCH=$(dpkg-architecture -q DEB_BUILD_ARCH)
+      if [ $ARCH = amd64 ] || [ $ARCH = i386 ]; then
+        ARCHIVE_URL="http://security.ubuntu.com/ubuntu/pool/main/l/linux/"
+      else
+        ARCHIVE_URL="http://ports.ubuntu.com/pool/main/l/linux/"
+      fi
+      DEB_SUFFIX=$(wget ${ARCHIVE_URL} -O - | grep linux-libc-dev | cut -d'_' -f2-3 | cut -d'"' -f1 | grep ${ARCH} | grep ${KERNEL_VER} | tail -n1)
+      wget --quiet ${ARCHIVE_URL}/linux-libc-dev_${DEB_SUFFIX} -O ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb
+      echo "Unpacking kernel headers..."
+      dpkg -x ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb ${SNAPCRAFT_PART_INSTALL}
+      cat ${SNAPCRAFT_PART_INSTALL}/usr/include/linux/version.h
+      rm -f ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb
+    override-build: |
+      snapcraftctl build
+      # Move the headers on the host out of the way
+      echo -n "Host kernel:"
+      cat /usr/include/linux/version.h
+      rm -rf /usr/include/linux || true
+      # Move header from the part to the host
+      mv ${SNAPCRAFT_PART_INSTALL}/usr/include/linux /usr/include/ || true
+      echo -n "Build kernel:"
+      cat /usr/include/linux/version.h
+    stage:
+      - -*
+    prime:
+      - -*
+
+  keepalived-418:
+    plugin: autotools
+    source: .
+    source-type: git
+    after:
+      - linux-headers-418
+    configflags:
+      - --prefix=/usr
+      - --enable-bfd
+      - --enable-dbus
+      - --enable-json
+      - --enable-regex
+      - --enable-snmp
+      - --enable-snmp-rfc
+      - --disable-libipset-dynamic
+    organize:
+      'usr/sbin/keepalived': usr/sbin/keepalived-418
+    stage:
+      - usr/sbin/keepalived-418
+    prime:
+      - usr/sbin/keepalived-418
+
+  linux-headers-415:
+    plugin: nil
+    build-packages:
+      - dpkg
+      - dpkg-dev
+      - wget
+    after:
+      - keepalived-418
+    override-pull: |
+      KERNEL_VER="4.15.0"
+      ARCH=$(dpkg-architecture -q DEB_BUILD_ARCH)
+      if [ $ARCH = amd64 ] || [ $ARCH = i386 ]; then
+        ARCHIVE_URL="http://security.ubuntu.com/ubuntu/pool/main/l/linux/"
+      else
+        ARCHIVE_URL="http://ports.ubuntu.com/pool/main/l/linux/"
+      fi
+      DEB_SUFFIX=$(wget ${ARCHIVE_URL} -O - | grep linux-libc-dev | cut -d'_' -f2-3 | cut -d'"' -f1 | grep ${ARCH} | grep ${KERNEL_VER} | tail -n1)
+      wget --quiet ${ARCHIVE_URL}/linux-libc-dev_${DEB_SUFFIX} -O ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb
+      echo "Unpacking kernel headers..."
+      dpkg -x ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb ${SNAPCRAFT_PART_INSTALL}
+      cat ${SNAPCRAFT_PART_INSTALL}/usr/include/linux/version.h
+      rm -f ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb
+    override-build: |
+      snapcraftctl build
+      # Move the headers on the host out of the way
+      echo -n "Host kernel:"
+      cat /usr/include/linux/version.h
+      rm -rf /usr/include/linux || true
+      # Move header from the part to the host
+      mv ${SNAPCRAFT_PART_INSTALL}/usr/include/linux /usr/include/ || true
+      echo -n "Build kernel:"
+      cat /usr/include/linux/version.h
+    stage:
+      - -*
+    prime:
+      - -*
+
+  keepalived-415:
+    plugin: autotools
+    source: .
+    source-type: git
+    after:
+      - linux-headers-415
+    configflags:
+      - --prefix=/usr
+      - --enable-bfd
+      - --enable-dbus
+      - --enable-json
+      - --enable-regex
+      - --enable-snmp
+      - --enable-snmp-rfc
+      - --disable-libipset-dynamic
+    organize:
+      'usr/sbin/keepalived': usr/sbin/keepalived-415
+    stage:
+      - usr/sbin/keepalived-415
+    prime:
+      - usr/sbin/keepalived-415
+
+  # linux-headers-413:
+  #   plugin: nil
+  #   build-packages:
+  #     - dpkg
+  #     - dpkg-dev
+  #     - wget
+  #   after:
+  #     - keepalived-415
+  #   override-pull: |
+  #     KERNEL_VER="4.13.0"
+  #     ARCH=$(dpkg-architecture -q DEB_BUILD_ARCH)
+  #     ARCHIVE_URL="http://old-releases.ubuntu.com/ubuntu/pool/main/l/linux/"
+  #     DEB_SUFFIX=$(wget ${ARCHIVE_URL} -O - | grep linux-libc-dev | cut -d'_' -f2-3 | cut -d'"' -f1 | grep ${ARCH} | grep ${KERNEL_VER} | tail -n1)
+  #     wget --quiet ${ARCHIVE_URL}/linux-libc-dev_${DEB_SUFFIX} -O ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb
+  #     echo "Unpacking kernel headers..."
+  #     dpkg -x ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb ${SNAPCRAFT_PART_INSTALL}
+  #     cat ${SNAPCRAFT_PART_INSTALL}/usr/include/linux/version.h
+  #     rm -f ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb
+  #   override-build: |
+  #     snapcraftctl build
+  #     # Move the headers on the host out of the way
+  #     echo -n "Host kernel:"
+  #     cat /usr/include/linux/version.h
+  #     rm -rf /usr/include/linux || true
+  #     # Move header from the part to the host
+  #     mv ${SNAPCRAFT_PART_INSTALL}/usr/include/linux /usr/include/ || true
+  #     echo -n "Build kernel:"
+  #     cat /usr/include/linux/version.h
+  #   stage:
+  #     - -*
+  #   prime:
+  #     - -*
+
+  # keepalived-413:
+  #   plugin: autotools
+  #   source: .
+  #   source-type: git
+  #   after:
+  #     - linux-headers-413
+  #   configflags:
+  #     - --prefix=/usr
+  #     - --enable-bfd
+  #     - --enable-dbus
+  #     - --enable-json
+  #     - --enable-regex
+  #     - --enable-snmp
+  #     - --enable-snmp-rfc
+  #     - --disable-libipset-dynamic
+  #   organize:
+  #     'usr/sbin/keepalived': usr/sbin/keepalived-413
+  #   stage:
+  #     - usr/sbin/keepalived-413
+  #   prime:
+  #     - usr/sbin/keepalived-413
+
+  linux-headers-313:
+    plugin: nil
+    build-packages:
+      - dpkg
+      - dpkg-dev
+      - wget
+    after:
+      - keepalived-415
+#     - keepalived-413
+    override-pull: |
+      KERNEL_VER="3.13.0"
+      ARCH=$(dpkg-architecture -q DEB_BUILD_ARCH)
+      if [ $ARCH = amd64 ] || [ $ARCH = i386 ]; then
+        ARCHIVE_URL="http://security.ubuntu.com/ubuntu/pool/main/l/linux/"
+      else
+        ARCHIVE_URL="http://ports.ubuntu.com/pool/main/l/linux/"
+      fi
+      DEB_SUFFIX=$(wget ${ARCHIVE_URL} -O - | grep linux-libc-dev | cut -d'_' -f2-3 | cut -d'"' -f1 | grep ${ARCH} | grep ${KERNEL_VER} | tail -n1)
+      wget --quiet ${ARCHIVE_URL}/linux-libc-dev_${DEB_SUFFIX} -O ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb
+      echo "Unpacking kernel headers..."
+      dpkg -x ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb ${SNAPCRAFT_PART_INSTALL}
+      cat ${SNAPCRAFT_PART_INSTALL}/usr/include/linux/version.h
+      rm -f ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb
+    override-build: |
+      snapcraftctl build
+      # Move the headers on the host out of the way
+      echo -n "Host kernel:"
+      cat /usr/include/linux/version.h
+      rm -rf /usr/include/linux || true
+      # Move header from the part to the host
+      mv ${SNAPCRAFT_PART_INSTALL}/usr/include/linux /usr/include/ || true
+      echo -n "Build kernel:"
+      cat /usr/include/linux/version.h
+    stage:
+      - -*
+    prime:
+      - -*
+
+  keepalived-313:
+    plugin: autotools
+    source: .
+    source-type: git
+    after:
+      - linux-headers-313
+    configflags:
+      - --prefix=/usr
+      - --enable-bfd
+      - --enable-dbus
+      - --enable-json
+      - --enable-regex
+      - --enable-snmp
+      - --enable-snmp-rfc
+      - --disable-libipset-dynamic
+    organize:
+      'usr/sbin/keepalived': usr/sbin/keepalived-313
+    stage:
+      - usr/sbin/keepalived-313
+    prime:
+      - usr/sbin/keepalived-313
+
+  linux-headers-310:
+    plugin: nil
+    build-packages:
+      - dpkg
+      - dpkg-dev
+      - wget
+    after:
+      - keepalived-313
+    override-pull: |
+      ARCH=$(dpkg-architecture -q DEB_BUILD_ARCH)
+      if [ $ARCH = amd64 ] || [ $ARCH = ppc64el ] ||  [ $ARCH = arm64 ]; then
+        DEB_URL="http://launchpadlibrarian.net/144719237/linux-libc-dev_3.10.0-2.11_amd64.deb"
+      elif [ $ARCH = i386 ]; then
+        DEB_URL="http://launchpadlibrarian.net/144720155/linux-libc-dev_3.10.0-2.11_i386.deb"
+      elif [ $ARCH = armhf ]; then
+        DEB_URL="http://launchpadlibrarian.net/144753483/linux-libc-dev_3.10.0-2.11_armhf.deb"
+      fi
+      wget --quiet ${DEB_URL} -O ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb
+      echo "Unpacking kernel headers..."
+      dpkg -x ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb ${SNAPCRAFT_PART_INSTALL}
+      cat ${SNAPCRAFT_PART_INSTALL}/usr/include/linux/version.h
+      rm -f ${SNAPCRAFT_PART_INSTALL}/linux-libc-dev.deb
+    override-build: |
+      snapcraftctl build
+      # Move the headers on the host out of the way
+      echo -n "Host kernel:"
+      cat /usr/include/linux/version.h
+      rm -rf /usr/include/linux || true
+      # Move header from the part to the host
+      mv ${SNAPCRAFT_PART_INSTALL}/usr/include/linux /usr/include/ || true
+      echo -n "Build kernel:"
+      cat /usr/include/linux/version.h
+    stage:
+      - -*
+    prime:
+      - -*
+
+  keepalived-310:
+    plugin: autotools
+    source: .
+    source-type: git
+    after:
+      - linux-headers-310
+    configflags:
+      - --prefix=/usr
+      - --enable-bfd
+      - --enable-dbus
+      - --enable-json
+      - --enable-regex
+      - --enable-snmp
+      - --enable-snmp-rfc
+      - --disable-libipset-dynamic
+    organize:
+      'usr/sbin/keepalived': usr/sbin/keepalived-310
+    stage:
+      - usr/sbin/keepalived-310
+    prime:
+      - usr/sbin/keepalived-310
+
+  keepalived-wrapper:
+    plugin: dump
+    source: snap-tools
+    organize:
+      'keepalived-wrapper': bin/
diff --git a/tools/keepalived/test/.gitignore b/tools/keepalived/test/.gitignore
new file mode 100644
index 000000000..bf2fc123c
--- /dev/null
+++ b/tools/keepalived/test/.gitignore
@@ -0,0 +1 @@
+tcp_server
diff --git a/tools/keepalived/test/ci/build.sh b/tools/keepalived/test/ci/build.sh
new file mode 100755
index 000000000..bab08ca5c
--- /dev/null
+++ b/tools/keepalived/test/ci/build.sh
@@ -0,0 +1,10 @@
+#!/bin/sh
+
+echo Configuring with: $KEEPALIVED_CONFIG_ARGS
+
+./configure $KEEPALIVED_CONFIG_ARGS || {
+    cat config.log
+    exit 1
+}
+
+make
diff --git a/tools/keepalived/test/ci/setup.sh b/tools/keepalived/test/ci/setup.sh
new file mode 100755
index 000000000..303813aae
--- /dev/null
+++ b/tools/keepalived/test/ci/setup.sh
@@ -0,0 +1,22 @@
+#!/bin/sh
+
+# kernel version
+#uname -a
+
+# compiler version
+#gcc -v
+
+# Distro
+#cat /etc/*release
+
+# Packages installed
+#sudo apt list --installed
+
+# Update kernel headers to match kernel
+CURDIR=$(pwd)
+cd /tmp
+KER_VER=$(sudo apt list --installed | grep "^linux-image-[0-9]" | sed -e "s/.*,now //" -e "s/~.*//")
+wget http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux-libc-dev_${KER_VER}_amd64.deb
+sudo dpkg --install linux-libc-dev_${KER_VER}_amd64.deb
+rm linux-libc-dev_${KER_VER}_amd64.deb
+cd $CURDIR
diff --git a/tools/keepalived/test/genhash-test.sh b/tools/keepalived/test/genhash-test.sh
new file mode 100755
index 000000000..f575aee13
--- /dev/null
+++ b/tools/keepalived/test/genhash-test.sh
@@ -0,0 +1,62 @@
+#!/bin/bash
+
+LANG=C
+#set -eu
+
+: ${GENHASH:=$(which genhash 2>/dev/null)}
+: ${GENHASH:=../bin/genhash}
+: ${TESTFILE:=$(basename "$0")}
+: ${HASH:=MD5}
+: ${ITERNUM:=500}
+: ${LIMITERR:=10}
+: ${SHOWERR:=0}
+
+trap kill_server EXIT
+
+kill_server() { pkill -f -u $(id -u) SimpleHTTPServer;}
+
+die() {
+	echo "$*"
+	exit 1
+}
+
+do_test() {
+	test -x "${GENHASH}" || die "genhash required (tried ${GENHASH})"
+	which python &>/dev/null || die "python required"
+	case "${HASH}" in
+	"MD5")
+		which md5sum &>/dev/null || die "md5sum required"
+		digest=$(md5sum "${TESTFILE}" | cut -d' ' -f1)
+		;;
+	"SHA1")
+		which sha1sum &>/dev/null || die "sha1sum required"
+		digest=$(sha1sum "${TESTFILE}" | cut -d' ' -f1)
+		;;
+	*)
+		die "unsupported hash ${HASH}"
+		;;
+	esac
+	echo "Test TESTFILE=${TESTFILE} with MD5SUM=${digest}"
+	echo "Using GENHASH=${GENHASH} and HASH=${HASH}"
+	python -m SimpleHTTPServer &
+	echo "Waiting for Python SimpleHTTPServer..."
+	slept=0
+	while netstat -tln 2>/dev/null | grep -qv 8000 && test $slept -lt 3; do
+		let slept+=1
+		sleep 1;
+	done
+	echo "Python SimpleHTTPServer started"
+	e=0
+	for ((i=0;i<${ITERNUM};i++)); do
+		gotdigest=$(${GENHASH} -H ${HASH} -s 127.0.0.1 -p 8000 \
+			    -u "/${TESTFILE}" | tail -n2 | cut -d' ' -f3)
+		test "${gotdigest}" = "${digest}" && echo -n '.' \
+		  || { let e+=1 && echo -e "\n${gotdigest}";}
+		test ${e} -ge ${LIMITERR} && break
+	done
+	echo -e "\n--- ${e} ---"
+	test ${e} -eq 0
+}
+
+kill_server
+test ${SHOWERR} -ne 0 && do_test || do_test 2>/dev/null
diff --git a/tools/keepalived/test/mk_if b/tools/keepalived/test/mk_if
new file mode 100755
index 000000000..265482e1c
--- /dev/null
+++ b/tools/keepalived/test/mk_if
@@ -0,0 +1,74 @@
+#!/bin/bash
+
+ECHO=
+IP_BASE_ADDR=10.1
+IP6_BASE_ADDR=fd00:0:1
+
+CMD=$1
+LOW=$2
+HIGH=$3
+SIDE=$4
+
+if [[ $CMD = add ]]; then
+	for n in high medium low; do
+		unshare -n ip netns add $n
+		ip netns exec $n ip link set up lo
+	done
+
+	for n in high medium low; do
+		for v in "" 6; do
+			for d in IN OUT; do
+				ip netns exec $n ip${v}tables -N TEST$d
+			done
+		done
+	done
+fi
+
+for n in $(seq $LOW $HIGH); do
+	if [[ $CMD = add ]]; then
+		$ECHO ip netns exec medium ip link add br${n} type bridge
+		$ECHO ip netns exec medium ip link set br${n} up
+		$ECHO ip netns exec medium ip addr add ${IP_BASE_ADDR}.${n}.2/24 broadcast ${IP_BASE_ADDR}.${n}.255 dev br${n}
+		$ECHO ip netns exec medium ip addr add ${IP6_BASE_ADDR}:$((100 + $n))::2/64 dev br${n}
+
+		ip=1
+		for p in high low; do
+			$ECHO ip netns exec medium ip link add eth${n}.$p type veth peer name eth${n}
+			$ECHO ip netns exec medium ip link set eth${n}.$p master br${n}
+			$ECHO ip netns exec medium ip link set eth${n}.$p up
+
+			$ECHO ip netns exec medium ip link set eth${n} netns $p
+
+			$ECHO ip netns exec $p ip link set eth${n} up
+			$ECHO ip netns exec $p ip addr add ${IP_BASE_ADDR}.${n}.${ip}/24 broadcast ${IP_BASE_ADDR}.${n}.255 dev eth${n}
+			$ECHO ip netns exec $p ip addr add ${IP6_BASE_ADDR}:$((100 + $n))::${ip}/64 dev eth${n}
+
+			((ip += 2))
+		done
+
+		$ECHO ip netns exec medium ip link add eth${n} type dummy
+		$ECHO ip netns exec medium ip link set eth${n} master br${n}
+		$ECHO ip netns exec medium ip link set up eth${n}
+	elif [[ $CMD = del ]]; then
+		$ECHO ip netns exec medium ip link del eth${n}.low
+		$ECHO ip netns exec medium ip link del eth${n}.high
+		$ECHO ip netns exec medium ip link del eth${n}
+		$ECHO ip netns exec medium ip link del br${n}
+	elif [[ $CMD = remake ]]; then
+		p=$SIDE
+		[[ $p = low ]] && ip=3 || ip=1
+
+		$ECHO ip netns exec medium ip link add eth${n}.$p type veth peer name eth${n}
+		$ECHO ip netns exec medium ip link set eth${n}.$p master br${n}
+		$ECHO ip netns exec medium ip link set eth${n}.$p up
+
+		$ECHO ip netns exec medium ip link set eth${n} netns $p
+
+		$ECHO ip netns exec $p ip addr add ${IP_BASE_ADDR}.${n}.${ip}/24 broadcast ${IP_BASE_ADDR}.${n}.255 dev eth${n}
+		$ECHO ip netns exec $p ip addr add ${IP6_BASE_ADDR}:$((100 + $n))::${ip}/64 dev eth${n}
+
+		$ECHO ip netns exec $p ip link set eth${n} up
+	else
+		echo Unknown command $CMD
+	fi
+done
diff --git a/tools/keepalived/test/mk_lots b/tools/keepalived/test/mk_lots
new file mode 100755
index 000000000..5308611fb
--- /dev/null
+++ b/tools/keepalived/test/mk_lots
@@ -0,0 +1,59 @@
+#!/bin/bash
+
+cat <<EOF
+@high net_namespace high
+@medium net_namespace medium
+@low net_namespace low
+
+global_defs {
+    vrrp_garp_master_delay 0
+    vrrp_garp_master_repeat 1
+    vrrp_garp_lower_prio_delay 0
+    vrrp_garp_lower_prio_repeat 2
+    vrrp_lower_prio_no_advert true
+}
+EOF
+
+for n in $(seq 0 3); do
+	cat <<EOF
+
+vrrp_sync_group sync_${n} {
+	group {
+EOF
+for i in $(seq 0 3); do
+	cat <<EOF
+		VI_$((i * 4 + n))
+EOF
+	done
+cat <<EOF
+	}
+}
+EOF
+done
+
+I=0
+for n in $(seq 0 3); do
+	for i in $(seq 0 3); do
+		[[ $i -ge 2 ]] && USE_VMAC= || USE_VMAC=use_vmac
+
+cat <<EOF
+
+vrrp_instance VI_${I} {
+	state BACKUP
+	interface eth${n}
+	virtual_router_id $((i + 1))
+@high	priority 170
+@medium	priority 127
+@low	priority 85
+	advert_int 1
+	version 3
+	$USE_VMAC
+
+	virtual_ipaddress {
+		141.1.${n}.$((254-$i))/32
+	}
+}
+EOF
+		((I++))
+	done
+done
diff --git a/tools/keepalived/test/netns-test.sh b/tools/keepalived/test/netns-test.sh
new file mode 100755
index 000000000..4e5654da9
--- /dev/null
+++ b/tools/keepalived/test/netns-test.sh
@@ -0,0 +1,160 @@
+#! /bin/bash
+
+# Usage:
+#  netns-test.sh [options]
+#
+# This script will create interfaces in a network namespace (default test)
+# that are needed for the specified keepalived configuration (or all
+# interfaces if configuration explicitly set to ""), so that keepalived
+# can be run in that namespace for testing or other purposes.
+
+DFLT_NS=test
+DFLT_CONF=/etc/keepalived/keepalived.conf
+
+NS_NAME=$DFLT_NS
+CONF=$DFLT_CONF
+IP=ip
+CREATE_PREFIX=
+EXTRA_IF=
+
+CREATED_IFACES=
+SHOW_IFACES=
+
+show_help()
+{
+	cat <<EOF
+$0 - Usage:
+        -h              Show this!
+	-n		network namespace name (default test)
+	-f		keepalived config file to read interfaces from
+			  if no config file, all interfaces will be duplicated
+	-i		command to use instead of \`ip\`
+	-u		use 'unshare -n' before creating network namespace
+	-x		create interfaces in config file that don't exist
+	-p		show created interfaces
+EOF
+}
+
+while getopts ":hn:f:i:uxp" opt; do
+	case $opt in
+	h)
+		show_help
+		exit 0
+		;;
+	n)
+		NS_NAME=$OPTARG
+		;;
+	f)
+		CONF=$OPTARG
+		;;
+	i)
+		IP=$OPTARG
+		;;
+	u)
+		CREATE_PREFIX="unshare -n"
+		;;
+	x)
+		EXTRA_IF=yes
+		;;
+	p)
+		SHOW_IFACES=yes
+		;;
+	?)
+		echo Unknown option \'$OPTARG\' && show_help && exit 1
+		;;
+	esac
+done
+
+[[ -n $CONF && ! -f $CONF ]] && echo Cannot read config file $CONF && exit 1
+
+IPN="$IP netns exec $NS_NAME $IP"
+
+if [[ -n $CONF ]]; then
+	IFACES=$(grep interface $CONF | sed -e "s/[!#].*//" -e "s/interface //" | sort -u)
+	IFACES=$(echo $IFACES)
+	IFACES=" $IFACES "
+
+	HOSTED_IFACES=$($IP link show | grep @ | sed -e "s/^[0-9]*: //" -e "s/:.*//")
+
+	# Add parents of any sub interfaces
+	for if in $HOSTED_IFACES; do
+		[[ $IFACES =~ " ${if%@*} " ]] && IFACES="$IFACES ${if##*@} "
+	done
+else
+	IFACES=
+fi
+
+$IP netns del $NS_NAME 2>/dev/null
+
+$CREATE_PREFIX $IP netns add $NS_NAME
+
+$IPN link set up lo
+
+ip addr show | \
+while read line; do
+	set $line
+	if [[ ${line:0:1} =~ [1-9] ]]; then
+		iface=$(<<<$line sed -e "s/^[0-9]*: *//" -e "s/:.*//")
+		[[ -n $IFACES && ! $IFACES =~ " ${iface%@*} " ]] && iface= && continue
+
+		if [[ $iface =~ @ ]]; then
+			# This is an interface built on top of another one
+			vlan_info=$(grep "^${iface%@*} " /proc/net/vlan/config)
+			if [[ -n $vlan_info ]]; then
+				set $vlan_info
+				vlan_id=$3
+				vlan_parent=$5
+			fi
+
+			iface=${iface%@*}
+		else
+			vlan_id=
+		fi
+		continue
+	fi
+
+	[[ -z $iface ]] && continue
+
+	if [[ $line =~ "link/ether" ]]; then
+		if [[ -n $vlan_id ]]; then
+			$IPN link add link $vlan_parent name $iface type vlan id $vlan_id
+		else
+			$IPN link add $iface address $2 broadcast $4 type dummy
+		fi
+		$IPN link set up $iface
+		CREATED_IFACES=" $CREATED_IFACES $iface "
+	elif [[ $1 = inet ]]; then
+		[[ $3 = brd ]] && BCAST="$3 $4" || BCAST=
+		$IPN addr add $2 $BCAST dev $iface 2>/dev/null
+	elif [[ $1 = inet6 ]]; then
+		# We could try and detect the default link local address, and not try to
+		# add it again, but let's just be lazy and ignore an error.
+		$IPN addr add $2 dev $iface 2>/dev/null
+	else
+:		echo Unknown line: $line
+	fi
+done
+
+# Now deal with any additional interfaces in the config that don't exist
+if [[ -n $CONF ]]; then
+	for if in $IFACES; do
+		if [[ ! $CREATED_IFACES =~ " $if " ]]; then
+			if [[ -z $EXTRA_IF ]]; then
+				echo Interface $if specified in configuration file doesn\'t exist
+			else
+				$IPN link add $if type dummy
+				$IPN link set up $if
+			fi
+		fi
+	done
+fi
+
+[[ -n $SHOW_IFACES ]] && $IPN addr show
+
+[[ -n $CONF ]] && EXTRA=" for config $CONF" || EXTRA=
+echo
+echo Network namespace $NS_NAME set up to mirror default namespace$EXTRA.
+echo
+[[ -n $CONF ]] && echo To test keepalived execute \`$IP netns exec $NS_NAME keepalived [OPTIONS] -f $CONF -s $NS_NAME\` && echo
+echo Don\'t forget to delete namespace $NS_NAME with \'$IP netns del $NS_NAME\' when finished.
+echo
diff --git a/tools/keepalived/test/tcp_server.c b/tools/keepalived/test/tcp_server.c
new file mode 100644
index 000000000..4fe453772
--- /dev/null
+++ b/tools/keepalived/test/tcp_server.c
@@ -0,0 +1,282 @@
+#include <strings.h>
+#include <sys/types.h>
+#include <sys/socket.h>
+#include <netinet/in.h>
+#include <arpa/inet.h>
+#include <stdlib.h>
+#include <stdio.h>
+#include <unistd.h>
+#include <signal.h>
+#include <string.h>
+#include <stdbool.h>
+#include <errno.h>
+#include <time.h>
+
+struct cmd_resp {
+	struct cmd_resp *next;
+	char *cmd;
+	char *resp;
+};
+
+static struct cmd_resp *cmd_resp_list;
+static char EOL = '\r';
+static struct timespec rep_delay;
+static bool random_delay;
+static int random_seed = 0;
+
+static void find_resp(int fd, const char *cmd)
+{
+	struct cmd_resp *p;
+	const char *s, *e;
+	size_t len;
+	const char *resp;
+	struct timespec delay;
+
+//printf("Processing: '%s', end = %d\n", cmd, cmd[strlen(cmd)-1]);
+	s = cmd;
+	for (s = cmd; *s; s = *e ? e + 1 : e) {
+		e = strchr(s, EOL);
+		if (!e)
+			e = s + strlen(s);
+		len = e - s;
+//printf("Looking for '%.*s'\n", len, s);
+
+		resp = s;
+		for (p = cmd_resp_list; p; p = p->next) {
+			if (len == strlen(p->cmd) &&
+			    !strncmp(p->cmd, s, len)) {
+//printf("Found %s -> %s\n", p->cmd, p->resp);
+				resp = p->resp;
+				len = strlen(resp);
+				if (!len)
+					exit(0);
+				break;
+			}
+		}
+		if (rep_delay.tv_nsec || rep_delay.tv_sec) {
+			if (random_delay) {
+				delay.tv_nsec = (rep_delay.tv_sec * 1000000000 + rep_delay.tv_nsec) * random();
+				delay.tv_sec = delay.tv_nsec / 1000000000;
+				delay.tv_nsec %= 1000000000;
+			} else
+				delay = rep_delay;
+			nanosleep(&delay, NULL);
+		}
+
+printf("Replying '%.*s'\n", len, resp);
+		write(fd, resp, len);
+	}
+}
+
+static void
+process_data(int fd)
+{
+	char buf[129];
+	int len;
+
+	while ((len = read(fd, buf, sizeof(buf) - 1)) > 0) {
+		/* Exit if receive ^D */
+		if (len == 1 && buf[0] == 4)
+			return;
+		if (cmd_resp_list) {
+			buf[len] = '\0';
+			find_resp(fd, buf);
+		} else
+			write(fd, buf, len);
+	}
+}
+
+int main(int argc, char **argv)
+{
+	int family = AF_UNSPEC;
+	int port = 30080;
+	int listenfd, connfd;
+	pid_t childpid;
+	socklen_t clilen;
+	struct sockaddr_in cliaddr, servaddr;
+	struct sockaddr_in6 cliaddr6, servaddr6;
+	int opt;
+	int sock_type = SOCK_STREAM;
+	int n;
+	char buf[128];
+	struct sigaction sa;
+	bool silent = false;
+	char *addr_str = NULL;
+	char addr_buf[sizeof (struct in6_addr)];
+	bool echo_data = false;
+	char *endptr;
+	long port_num;
+	unsigned backlog = 4;
+	struct cmd_resp *cr;
+
+	while ((opt = getopt(argc, argv, ":46a:p:sueb:c:l:d:r")) != -1) {
+		switch (opt) {
+		case '4':
+			family = AF_INET;
+			break;
+		case '6':
+			family = AF_INET6;
+			break;
+		case 'a':
+			addr_str = optarg;
+			break;
+		case 'p':
+			port_num = strtol(optarg, &endptr, 10);
+			if (*endptr || port_num <= 0 || port_num > 65535) {
+				fprintf(stderr, "Port number '%s' invalid\n", optarg);
+				exit(EXIT_FAILURE);
+			}
+			port = port_num;
+			break;
+		case 's':
+			silent = true;
+			break;
+		case 'u':
+			sock_type = SOCK_DGRAM;
+			break;
+		case 'e':
+			echo_data = true;
+			break;
+		case 'b':
+			backlog = strtoul(optarg, &endptr, 10);
+			if (*endptr || backlog > 65535) {
+				fprintf(stderr, "Backlog '%s' invalid\n", optarg);
+				exit(EXIT_FAILURE);
+			}
+			break;
+		case 'c':
+			if (optind >= argc) {
+				fprintf(stderr, "-c '%s' missing response\n", optarg);
+				exit(EXIT_FAILURE);
+			}
+
+			cr = malloc(sizeof(struct cmd_resp));
+			cr->next = cmd_resp_list;
+			cmd_resp_list = cr;
+			cr->cmd = malloc(strlen(optarg)+1);
+			cr->resp = malloc(strlen(argv[optind]) + 1);
+			strcpy(cr->cmd, optarg);
+			strcpy(cr->resp, argv[optind++]);
+			break;
+		case 'l':
+			EOL = strtoul(optarg, &endptr, 10);
+			break;
+		case 'd':
+			rep_delay.tv_nsec = strtoul(optarg, &endptr, 10);
+			rep_delay.tv_sec = rep_delay.tv_nsec / 1000;
+			rep_delay.tv_nsec %= 1000;
+			rep_delay.tv_nsec *= 1000000;
+			break;
+		case 'r':
+			random_delay = true;
+			if (optind < argc && argv[optind][0] != '-')
+				random_seed = strtoul(argv[optind++], &endptr, 10);
+			break;
+		case ':':
+			fprintf(stderr, "Option '%c' is missing an argument\n", optopt);
+			break;
+		default: /* '?' */
+			fprintf(stderr, "Usage: %s [-a bind address] [-p port] [-4] [-6] [-s(ilent)] [-u(dp)] [-e(cho)] [-b(acklog) n][-c cmd resp] [-l EOL char value] [-d reply-delay [-r]]\n", argv[0]);
+			exit(EXIT_FAILURE);
+		}
+	}
+
+	if (random_delay) {
+		if (!random_seed)
+			random_seed = time(NULL);
+		srandom(random_seed);
+	}
+
+	if (addr_str) {
+		if (family == AF_UNSPEC) {
+			if (strchr(addr_str, ':'))
+				family = AF_INET6;
+			else
+				family = AF_INET;
+		}
+			
+		if (inet_pton(family, addr_str, addr_buf) != 1) {
+			printf("Invalid IPv%d address - %s\n", family == AF_INET ? 4 : 6, addr_str);
+			exit (1);
+		}
+	}
+	else if (family == AF_UNSPEC)
+		family = AF_INET6;
+ 
+	if ((listenfd = socket(family, sock_type, 0)) == -1) {
+		printf ("Unable to create socket, errno %d (%m)\n", errno);
+		exit(1);
+	}
+
+	if (family == AF_INET) {
+		bzero(&servaddr, sizeof(servaddr));
+		servaddr.sin_family = AF_INET;
+		servaddr.sin_addr.s_addr = addr_str ? *(uint32_t*)addr_buf : htonl(INADDR_ANY);
+		servaddr.sin_port = htons(port);
+
+		if (bind(listenfd, (struct sockaddr *)&servaddr, sizeof(servaddr))) {
+			printf ("bind returned %d (%m)\n", errno);
+			exit(1);
+		}
+	} else {
+		bzero(&servaddr6, sizeof(servaddr6));
+		servaddr6.sin6_family = AF_INET6;
+		servaddr6.sin6_addr = addr_str ? *(struct in6_addr *)addr_buf : in6addr_any;
+		servaddr6.sin6_port = htons(port);
+
+		if (bind(listenfd, (struct sockaddr *)&servaddr6, sizeof(servaddr6))) {
+			printf ("bind returned %d (%m)\n", errno);
+			exit(1);
+		}
+	}
+
+	memset(&sa, 0, sizeof(sa));
+	sa.sa_handler = SIG_DFL;
+	sa.sa_flags = SA_NOCLDWAIT;
+	sigaction(SIGCHLD, &sa, NULL);
+
+	if (sock_type == SOCK_STREAM) {
+		listen(listenfd, backlog);
+
+		for (;;) {
+			if (family == AF_INET) {
+				clilen = sizeof (cliaddr);
+				connfd = accept(listenfd, (struct sockaddr *)&cliaddr, &clilen);
+			}
+			else {
+				clilen = sizeof (cliaddr6);
+				connfd = accept(listenfd, (struct sockaddr *)&cliaddr6, &clilen);
+			}
+
+			if (!silent)
+				printf("Received connection\n");
+			if ((childpid = fork()) == 0) {
+				close(listenfd);
+				if (echo_data || cmd_resp_list)
+					process_data(connfd);
+				else
+					sleep (1);
+				exit(0);
+			}
+
+			close(connfd);
+		}
+	}
+	else
+	{
+		for (;;) {
+			if (family == AF_INET) {
+				clilen = sizeof (cliaddr);
+				n = recvfrom(listenfd, buf, sizeof(buf), 0, (struct sockaddr *)&cliaddr, &clilen);
+				sendto(listenfd, buf, n, 0, (struct sockaddr *)&cliaddr, clilen);
+			}
+			else {
+				clilen = sizeof (cliaddr6);
+				n = recvfrom(listenfd, buf, sizeof(buf), 0, (struct sockaddr *)&cliaddr6, &clilen);
+				sendto(listenfd, buf, n, 0, (struct sockaddr *)&cliaddr6, clilen);
+			}
+			if (!silent)
+				printf("Received %d bytes\n", n);
+		}
+	}
+}
diff --git a/tools/keepalived/tools/json_tracking/isolate b/tools/keepalived/tools/json_tracking/isolate
new file mode 100755
index 000000000..3a8ba2c8d
--- /dev/null
+++ b/tools/keepalived/tools/json_tracking/isolate
@@ -0,0 +1,172 @@
+#!/usr/bin/env python3
+
+#####
+#
+# This script is used to start a slow transition of many vrrp instances
+# towards the peer router. Launch with -h to get the full list of options.
+# For this script to work you need each instance to track a different file.
+# You can generate such config with the templates in the same folder.
+#
+# Author: Damien Clabaut <damien.clabaut@corp.ovh.com>
+#
+#####
+
+import argparse
+import json
+import os
+from termcolor import cprint
+import time
+import _thread
+import sys
+
+# Configuration
+# Path to the keepalived json dump
+keepalived_json_file = "/tmp/keepalived.json"
+
+# Path to the keepalived PID file
+keepalived_pid_file = "/var/run/keepalived.pid"
+
+# Path to the folder containing files tracked by each instance
+keepalived_offset_folder = "/etc/keepalived_offset/"
+
+# Offset we want with the "-r" option
+offset_default = 0
+
+# Offset we want without the "-r" option
+offset_slave = -100
+
+# Delay in seconds between each priority change
+offset_delay = 1
+
+# Delay in seconds between each update given to the user
+check_delay = 5
+
+
+def main(args):
+    keepalived_data = getFreshData()
+
+    if args.reset:
+        offset = offset_default
+        action = "Removing"
+        partial_list = getSlaves(keepalived_data)
+    else:
+        offset = offset_slave
+        action = "Adding"
+        partial_list = getMasters(keepalived_data)
+
+    # No specification of count or instances: we impact everything
+    if args.count == 0 and args.instances == 0:
+        for instance in keepalived_data:
+            print(action + " offset for instance " + instance["data"]["iname"])
+            if (updateOffset(instance["data"]["iname"], offset) == 1):
+                time.sleep(offset_delay)
+
+    # Here we impact a certain count of instances
+    elif args.count != 0:
+        done = 0
+        for instance in partial_list:
+            if (updateOffset(instance["data"]["iname"], offset) == 1):
+                print(action + " offset for instance " + instance["data"]["iname"])
+                done += 1
+                if done >= args.count:
+                    break
+                time.sleep(offset_delay)
+
+    # Here we impact specific instances. There is no check that this instance actually exists.
+    # It may be populated in the future
+    elif args.instances != 0:
+        for instance in args.instances:
+            print(action + " offset for instance " + str(instance))
+            if (updateOffset(str(instance), offset) == 1):
+                time.sleep(offset_delay)
+
+
+def getFreshData():
+    with open(keepalived_pid_file, "r") as f:
+        keepalived_pid = int(f.read())
+    os.kill(keepalived_pid, 36)
+    time.sleep(0.1)
+    try:
+        with open(keepalived_json_file) as jsonfile:
+            return json.load(jsonfile)
+    except:
+        return {}
+
+
+def getMasters(keepalived_data):
+    masters = []
+    for instance in keepalived_data:
+        if instance["data"]["state"] == 2:
+            masters.append(instance)
+    return masters
+
+
+def getSlaves(keepalived_data):
+    slaves = []
+    for instance in keepalived_data:
+        if instance["data"]["state"] == 1:
+            slaves.append(instance)
+    return slaves
+
+
+def updateOffset(instance, offset):
+    try:
+        with open(keepalived_offset_folder + str(instance), "r") as f:
+            offset_cur = f.read()
+    except:
+        offset_cur = 0
+
+    try:
+        if int(offset_cur) == int(offset):
+            # Notify that we did not change anything
+            to_return = 0
+
+        else:
+            # Notify that we changed something
+            to_return = 1
+    # Value does not exist in json file
+    except:
+        offset_cur = int(offset)
+        if int(offset) == 0:
+            # Notify that we did not change anything
+            to_return = 0
+        else:
+            # Notify that we changed something
+            to_return = 1
+
+    if to_return == 1:
+        with open(keepalived_offset_folder + str(instance), "w") as f:
+            f.write(str(offset))
+
+    return to_return
+
+
+def checkStatus():
+    while True:
+        keepalived_data = getFreshData()
+        instance_count = len(keepalived_data)
+        master_count = len(getMasters(keepalived_data))
+        slave_count = len(getSlaves(keepalived_data))
+        cprint(
+               "Instances: " + str(instance_count) + ", Masters: "
+               + str(master_count) + ", Slaves: " + str(slave_count), 'green'
+        )
+        time.sleep(check_delay)
+    return 0
+
+
+if __name__ == "__main__":
+    parser = argparse.ArgumentParser(description='Arguments')
+    parser.add_argument('--count', '-c', type=int, default=0, help="Number of instances to impact")
+    parser.add_argument('--instances', '-i', type=int, nargs='+', default=0, help="List of instances to impact")
+    parser.add_argument('--reset', '-r', action='store_true', help="Set to get instances back to their base priority")
+    args = parser.parse_args()
+    if (args.count != 0) and (args.instances) != 0:
+        sys.exit("You cannot define instances and count at the same time")
+    mon = _thread.start_new_thread(checkStatus, ())
+    main(args)
+    cprint(
+           "All modifications in priorities have been made. I will keep monitoring Keepalived until you press enter",
+           'yellow'
+    )
+    input()
diff --git a/tools/keepalived/tools/json_tracking/make_conf.py b/tools/keepalived/tools/json_tracking/make_conf.py
new file mode 100755
index 000000000..9eefc15b4
--- /dev/null
+++ b/tools/keepalived/tools/json_tracking/make_conf.py
@@ -0,0 +1,62 @@
+#!/usr/bin/env python3
+
+#####
+#
+# This script will generate a sample configuration for Keepalived.
+# The configuration is as follows:
+# Each vlan contains a VRRPv2 instance with a private IPv4 address
+# and a VRRPv3 instance with a Local Address.
+# Each instance tracks a file located in keepalived_offset_folder.
+#
+# Author: Damien Clabaut <damien.clabaut@corp.ovh.com>
+#
+#####
+
+import jinja2
+
+# Configuration
+# First vlan of the range
+first_vlan = 2
+
+# Last vlan of the range, must not be higher than 255
+last_vlan = 100
+
+# Path to the folder containing files tracked by each instance
+keepalived_offset_folder = "/etc/keepalived_offset/"
+
+# Path to the output file
+output_file = "keepalived.conf"
+
+# Underlying interface.
+# For this configuration to work you need vlan subinterfaces.
+# For example, if the value below is bond0, you need to have
+# interfaces bond0.2 to bond0.<last_vlan>
+interface = "bond0"
+
+class Vlan:
+    def __init__(self, name, ip4addr, ip4net, ip6addr):
+        self.name = name
+        self.ip4addr = ip4addr
+        self.ip4net = ip4net
+        self.ip6addr = ip6addr
+
+
+vlans = []
+for vlan_id in range(first_vlan, last_vlan + 1):
+    ip4addr = "10.0." + str(vlan_id) + ".254"
+    ip4net = "10.0." + str(vlan_id) + ".0/24"
+    ip6addr = "fd00:42:ffff:" + format(vlan_id, '02x') + ":ff:ff:ff:ff/64"
+    new_vlan = Vlan(vlan_id, ip4addr, ip4net, ip6addr)
+    vlans.append(new_vlan)
+
+to_return = ""
+templateLoader = jinja2.FileSystemLoader(searchpath="./")
+templateEnv = jinja2.Environment(loader=templateLoader)
+vrrpconf = templateEnv.get_template('template_vrrp_instance').render(
+                vlans=vlans, track_files=keepalived_offset_folder,
+                interface=interface
+                ) + "\n"
+
+output_file = open(output_file, "w")
+output_file.write(vrrpconf)
+output_file.close()
diff --git a/tools/keepalived/tools/json_tracking/template_vrrp_instance b/tools/keepalived/tools/json_tracking/template_vrrp_instance
new file mode 100644
index 000000000..2a3502c4e
--- /dev/null
+++ b/tools/keepalived/tools/json_tracking/template_vrrp_instance
@@ -0,0 +1,55 @@
+! Configuration File for keepalived
+
+global_defs {
+}
+{% for vlan in vlans %}
+vrrp_track_file offset_instance_4{{ vlan.name }} {
+    file "{{ track_files }}4{{ vlan.name }}"
+    init_file 0
+}
+
+vrrp_track_file offset_instance_6{{ vlan.name }} {
+    file "{{ track_files }}6{{ vlan.name }}"
+    init_file 0
+}
+
+{% endfor %}
+{% for vlan in vlans %}
+vrrp_instance 4{{ vlan.name }} {
+    state BACKUP
+    interface {{ interface }}.{{ vlan.name }}
+    use_vmac vrrp4.{{ vlan.name }}.1
+    virtual_router_id 1
+    priority 100
+    advert_int 1
+    preempt_delay 5
+    virtual_ipaddress {
+        {{ vlan.ip4addr }}
+    }
+    unicast_src_ip {{ vlan.ip4addr }}
+
+    track_file {
+        offset_instance_4{{ vlan.name }}
+    }
+}
+vrrp_instance 6{{ vlan.name }} {
+    version 3
+    native_ipv6
+    state BACKUP
+    interface {{ interface }}.{{ vlan.name }}
+    use_vmac vrrp6.{{ vlan.name }}.1
+    virtual_router_id 1
+    priority 100
+    advert_int 1
+    preempt_delay 5
+    virtual_ipaddress {
+        fe80::1/64
+        {{ vlan.ip6addr }}
+    }
+
+
+    track_file {
+        offset_instance_6{{ vlan.name }}
+    }
+}
+{% endfor %}
diff --git a/tools/keepalived/tools/json_tracking/vrrp_recap b/tools/keepalived/tools/json_tracking/vrrp_recap
new file mode 100755
index 000000000..88a4e61cb
--- /dev/null
+++ b/tools/keepalived/tools/json_tracking/vrrp_recap
@@ -0,0 +1,66 @@
+#!/usr/bin/env python3
+
+#####
+#
+# This script triggers Keepalived's dump-to-json function
+# and prints most of the interesting info into a table.
+#
+# Author: Damien Clabaut <damien.clabaut@corp.ovh.com>
+#
+#####
+
+import datetime
+import json
+import os
+import sys
+import time
+from prettytable import PrettyTable
+
+# Configuration
+# Path to the keepalived json dump
+keepalived_json_file = "/tmp/keepalived.json"
+
+# Path to the keepalived PID file
+keepalived_pid_file = "/var/run/keepalived.pid"
+
+
+with open(keepalived_pid_file, "r") as f:
+    keepalived_pid = int(f.read())
+
+os.kill(keepalived_pid, 36)
+
+try:
+    time.sleep(0.5)
+    keepalived_data = json.load(open(keepalived_json_file))
+except:
+    sys.exit("Could not load json from file, please check that keepalived is running at a compatible version")
+
+data_table = PrettyTable([
+                          "Instance", "Interface", "Addresses", "Version",
+                          "Priority", "Master prio", "State", "Last Transition"
+                        ])
+for instance in keepalived_data:
+    if instance["data"]["state"] == 0:
+        instance["data"]["state_cleartext"] = "Init"
+    elif instance["data"]["state"] == 1:
+        instance["data"]["state_cleartext"] = "Slave"
+    elif instance["data"]["state"] == 2:
+        instance["data"]["state_cleartext"] = "Master"
+    else:
+        instance["data"]["state_cleartext"] = "Fault"
+
+    unicast_vips = []
+    for vip in instance["data"]["vips"]:
+        # We do not display link-local addresses as they are usually not relevant
+        if not vip.startswith("fe80"):
+            unicast_vips.append(vip)
+
+    data_table.add_row([
+                        int(instance["data"]["iname"]), instance["data"]["vmac_ifname"],
+                        "\n".join(unicast_vips), instance["data"]["version"],
+                        instance["data"]["effective_priority"], instance["data"]["master_priority"],
+                        instance["data"]["state_cleartext"],
+                        datetime.datetime.fromtimestamp(instance["data"]["last_transition"])
+                      ])
+
+print(data_table.get_string(sortby="Instance"))

From 33b6af44fb4c44cdaa4888b16295c060a599516c Mon Sep 17 00:00:00 2001
From: ytwang0320 <wyt900320@163.com>
Date: Wed, 25 Dec 2019 16:28:50 +0800
Subject: [PATCH 39/62] fix ipvsadm errors after keepalived updated

---
 tools/ipvsadm/Makefile  |   2 +-
 tools/ipvsadm/ipvsadm.c | 418 +++++++++++++++++++---------------------
 2 files changed, 200 insertions(+), 220 deletions(-)

diff --git a/tools/ipvsadm/Makefile b/tools/ipvsadm/Makefile
index dc5464001..413cfc238 100644
--- a/tools/ipvsadm/Makefile
+++ b/tools/ipvsadm/Makefile
@@ -43,7 +43,7 @@ MAN		= $(RPM_BUILD_ROOT)/$(MANDIR)/man8
 INIT		= $(RPM_BUILD_ROOT)/etc/rc.d/init.d
 MKDIR		= mkdir
 INSTALL		= install
-STATIC_LIBS	= ../keepalived/keepalived/libipvs-2.6/libipvs.a
+STATIC_LIBS	= ../keepalived/keepalived/check/libcheck.a
 DPVSDEPS    = ../../src/common.o
 
 ifeq "${ARCH}" "sparc64"
diff --git a/tools/ipvsadm/ipvsadm.c b/tools/ipvsadm/ipvsadm.c
index 274d01e0a..154ae3c16 100644
--- a/tools/ipvsadm/ipvsadm.c
+++ b/tools/ipvsadm/ipvsadm.c
@@ -115,7 +115,11 @@
 #define IPVS_OPTION_PROCESSING	"popt"
 
 #include "config_stream.h"
-#include "../keepalived/keepalived/libipvs-2.6/libipvs.h"
+//#include "../keepalived/keepalived/libipvs-2.6/libipvs.h"
+#include "../keepalived/keepalived/include/libipvs.h"
+//#include "../keepalived/lib/config.h"
+
+//#define _HAVE_PE_NAME_ 1
 
 #define IPVSADM_VERSION_NO	"v" VERSION
 #define IPVSADM_VERSION_DATE	"2008/5/15"
@@ -162,8 +166,8 @@ static const char* cmdnames[] = {
 	"restore",
 	"save",
 	"zero",
-	"add-laddr" ,
-	"del-laddr" ,
+	"add-laddr" , 
+	"del-laddr" , 
 	"get-laddr" ,
 	"add-blklst",
 	"del-blklst",
@@ -193,11 +197,11 @@ static const char* optnames[] = {
 	"syncid",
 	"exact",
 	"ops",
-	"pe" ,
+	"pe" , 
 	"local-address" ,
-	"blklst-address",
-	"synproxy" ,
-	"ifname" ,
+	"blklst-address", 
+	"synproxy" , 
+	"ifname" , 
 	"sockpair" ,
 	"hash-target",
 };
@@ -552,13 +556,13 @@ parse_options(int argc, char **argv, struct ipvs_command_entry *ce,
 		case 'q':
 			set_option(options, OPT_SERVICE);
 			if (c == 't')
-				ce->svc.protocol = IPPROTO_TCP;
+				ce->svc.user.protocol = IPPROTO_TCP;
 			else if (c == 'u')
-				ce->svc.protocol = IPPROTO_UDP;
+				ce->svc.user.protocol = IPPROTO_UDP;
 			else if (c == 'q')
-				ce->svc.protocol = IPPROTO_ICMP;
+				ce->svc.user.protocol = IPPROTO_ICMP;
 			else if (c == '1') // a~Z is out. ipvsadm is really not friendly here
-				ce->svc.protocol = IPPROTO_ICMPV6;
+				ce->svc.user.protocol = IPPROTO_ICMPV6;
 
 			parse = parse_service(optarg, &ce->svc);
 			if (!(parse & SERVICE_ADDR))
@@ -577,32 +581,32 @@ parse_options(int argc, char **argv, struct ipvs_command_entry *ce,
 			 * though it is not used
 			 */
 			ce->svc.af = AF_INET;/*FIXME:DPVS not support fwmark?*/
-			ce->svc.protocol = IPPROTO_TCP;
-			ce->svc.fwmark = parse_fwmark(optarg);
+			ce->svc.user.protocol = IPPROTO_TCP;
+			ce->svc.user.fwmark = parse_fwmark(optarg);
 			break;
 		case 's':
 			set_option(options, OPT_SCHEDULER);
-			strncpy(ce->svc.sched_name,
+			strncpy(ce->svc.user.sched_name,
 				optarg, IP_VS_SCHEDNAME_MAXLEN);
-			if (!memcmp(ce->svc.sched_name, "conhash", strlen("conhash")))
-				ce->svc.flags = ce->svc.flags | IP_VS_SVC_F_SIP_HASH;
+			if (!memcmp(ce->svc.user.sched_name, "conhash", strlen("conhash")))
+				ce->svc.user.flags = ce->svc.user.flags | IP_VS_SVC_F_SIP_HASH; 
 			break;
 		case 'p':
 			set_option(options, OPT_PERSISTENT);
-			ce->svc.flags |= IP_VS_SVC_F_PERSISTENT;
-			ce->svc.timeout =
+			ce->svc.user.flags |= IP_VS_SVC_F_PERSISTENT;
+			ce->svc.user.timeout =
 				parse_timeout(optarg, 1, MAX_TIMEOUT);
 			break;
 		case 'M':
 			set_option(options, OPT_NETMASK);
 			if (ce->svc.af != AF_INET6) {
-				parse = parse_netmask(optarg, &ce->svc.netmask);
+				parse = parse_netmask(optarg, &ce->svc.user.netmask);
 				if (parse != 1)
 					fail(2, "illegal virtual server "
 					     "persistent mask specified");
 			} else {
-				ce->svc.netmask = atoi(optarg);
-				if ((ce->svc.netmask < 1) || (ce->svc.netmask > 128))
+				ce->svc.user.netmask = atoi(optarg);
+				if ((ce->svc.user.netmask < 1) || (ce->svc.user.netmask > 128))
 					fail(2, "illegal ipv6 netmask specified");
 			}
 			break;
@@ -611,50 +615,50 @@ parse_options(int argc, char **argv, struct ipvs_command_entry *ce,
 			ipvs_service_t t_dest = ce->svc;
 			parse = parse_service(optarg, &t_dest);
 			ce->dest.af = t_dest.af;
-			ce->dest.addr = t_dest.addr;
-			ce->dest.port = t_dest.port;
+			ce->dest.nf_addr = t_dest.nf_addr;
+			ce->dest.user.port = t_dest.user.port;
 			if (!(parse & SERVICE_ADDR))
 				fail(2, "illegal real server "
 				     "address[:port] specified");
 			/* copy vport to dport if not specified */
 			if (parse == 1)
-				ce->dest.port = ce->svc.port;
+				ce->dest.user.port = ce->svc.user.port;
 			break;
 		case 'i':
 			set_option(options, OPT_FORWARD);
-			ce->dest.conn_flags = IP_VS_CONN_F_TUNNEL;
+			ce->dest.user.conn_flags = IP_VS_CONN_F_TUNNEL;
 			break;
 		case 'g':
 			set_option(options, OPT_FORWARD);
-			ce->dest.conn_flags = IP_VS_CONN_F_DROUTE;
+			ce->dest.user.conn_flags = IP_VS_CONN_F_DROUTE;
 			break;
 		case 'b':
 			set_option(options, OPT_FORWARD);
-			ce->dest.conn_flags = IP_VS_CONN_F_FULLNAT;
+			ce->dest.user.conn_flags = IP_VS_CONN_F_FULLNAT;
 			break;
 		case 'J':
 			set_option(options, OPT_FORWARD);
-			ce->dest.conn_flags = IP_VS_CONN_F_SNAT;
+			ce->dest.user.conn_flags = IP_VS_CONN_F_SNAT;
 			break;
 		case 'm':
 			set_option(options, OPT_FORWARD);
-			ce->dest.conn_flags = IP_VS_CONN_F_MASQ;
+			ce->dest.user.conn_flags = IP_VS_CONN_F_MASQ;
 			break;
 		case 'w':
 			set_option(options, OPT_WEIGHT);
-			if ((ce->dest.weight =
+			if ((ce->dest.user.weight =
 			     string_to_number(optarg, 0, 65535)) == -1)
 				fail(2, "illegal weight specified");
 			break;
 		case 'x':
 			set_option(options, OPT_UTHRESHOLD);
-			if ((ce->dest.u_threshold =
+			if ((ce->dest.user.u_threshold =
 			     string_to_number(optarg, 0, INT_MAX)) == -1)
 				fail(2, "illegal u_threshold specified");
 			break;
 		case 'y':
 			set_option(options, OPT_LTHRESHOLD);
-			if ((ce->dest.l_threshold =
+			if ((ce->dest.user.l_threshold =
 			     string_to_number(optarg, 0, INT_MAX)) == -1)
 				fail(2, "illegal l_threshold specified");
 			break;
@@ -716,16 +720,16 @@ parse_options(int argc, char **argv, struct ipvs_command_entry *ce,
 			*format |= FMT_EXACT;
 			break;
 		case '6':
-			if (ce->svc.fwmark) {
+			if (ce->svc.user.fwmark) {
 				ce->svc.af = AF_INET6;
-				ce->svc.netmask = 128;
+				ce->svc.user.netmask = 128;
 			} else {
 				fail(2, "-6 used before -f\n");
 			}
 			break;
 		case 'o':
 			set_option(options, OPT_ONEPACKET);
-			ce->svc.flags |= IP_VS_SVC_F_ONEPACKET;
+			ce->svc.user.flags |= IP_VS_SVC_F_ONEPACKET;
 			break;
 		case TAG_PERSISTENCE_ENGINE:
 			set_option(options, OPT_PERSISTENCE_ENGINE);
@@ -740,8 +744,8 @@ parse_options(int argc, char **argv, struct ipvs_command_entry *ce,
 			if (!(parse & SERVICE_ADDR))
 				fail(2, "illegal local address");
 			ce->laddr.af = nsvc.af;
-			ce->laddr.addr = nsvc.addr;
-			ce->laddr.__addr_v4 = nsvc.addr.ip;
+			ce->laddr.addr = nsvc.nf_addr;
+			ce->laddr.__addr_v4 = nsvc.nf_addr.ip;
 			break;
 
 			}
@@ -753,8 +757,8 @@ parse_options(int argc, char **argv, struct ipvs_command_entry *ce,
 			if (!(parse & SERVICE_ADDR))
 				fail(2, "illegal blacklist address");
 			ce->blklst.af = nsvc.af;
-			ce->blklst.addr = nsvc.addr;
-			ce->blklst.__addr_v4 = nsvc.addr.ip;
+			ce->blklst.addr = nsvc.nf_addr;
+			ce->blklst.__addr_v4 = nsvc.nf_addr.ip;
 			break;
 
 			}
@@ -767,9 +771,9 @@ parse_options(int argc, char **argv, struct ipvs_command_entry *ce,
 			set_option(options, OPT_SYNPROXY);
 
 			if(!memcmp(optarg , "enable" , strlen("enable")))
-				ce->svc.flags = ce->svc.flags | IP_VS_CONN_F_SYNPROXY;
+				ce->svc.user.flags = ce->svc.user.flags | IP_VS_CONN_F_SYNPROXY;
 			else if(!memcmp(optarg , "disable" , strlen("disable")))
-				ce->svc.flags = ce->svc.flags & (~IP_VS_CONN_F_SYNPROXY);
+				ce->svc.user.flags = ce->svc.user.flags & (~IP_VS_CONN_F_SYNPROXY);
 			else
 				fail(2 , "synproxy switch must be enable or disable\n");
 
@@ -779,17 +783,19 @@ parse_options(int argc, char **argv, struct ipvs_command_entry *ce,
 			{
 			set_option(options, OPT_HASHTAG);
 
-			if (strcmp(ce->svc.sched_name, "conhash"))
+			if (strcmp(ce->svc.user.sched_name, "conhash"))
 				fail(2 , "hash target can only be set when schedule is conhash\n");
 			if (!memcmp(optarg, "sip", strlen("sip"))) {
-				ce->svc.flags = ce->svc.flags | IP_VS_SVC_F_SIP_HASH;
-				ce->svc.flags = ce->svc.flags & (~IP_VS_SVC_F_QID_HASH);
+				set_option(options, OPT_SIPHASH);
+				ce->svc.user.flags = ce->svc.user.flags | IP_VS_SVC_F_SIP_HASH;
+				ce->svc.user.flags = ce->svc.user.flags & (~IP_VS_SVC_F_QID_HASH);
 			}
 			else if (!memcmp(optarg, "qid", strlen("qid"))) {
-				if (ce->svc.protocol != IPPROTO_UDP)
+				if (ce->svc.user.protocol != IPPROTO_UDP)
 					fail(2 , "qid hash can only be set in udp service\n");
-				ce->svc.flags = ce->svc.flags | IP_VS_SVC_F_QID_HASH;
-				ce->svc.flags = ce->svc.flags & (~IP_VS_SVC_F_SIP_HASH);
+				set_option(options, OPT_QIDHASH);
+				ce->svc.user.flags = ce->svc.user.flags | IP_VS_SVC_F_QID_HASH;
+				ce->svc.user.flags = ce->svc.user.flags & (~IP_VS_SVC_F_SIP_HASH);
 			}
 			else
 				fail(2 , "hash target not support\n");
@@ -866,11 +872,11 @@ static int process_options(int argc, char **argv, int reading_stdin)
 	memset(&ce, 0, sizeof(struct ipvs_command_entry));
 	ce.cmd = CMD_NONE;
 	/* Set the default weight 1 */
-	ce.dest.weight = 1;
+	ce.dest.user.weight = 1;
 	/* Set direct routing as default forwarding method */
-	ce.dest.conn_flags = IP_VS_CONN_F_DROUTE;
+	ce.dest.user.conn_flags = IP_VS_CONN_F_DROUTE;
 	/* Set the default persistent granularity to /32 mask */
-	ce.svc.netmask = ((u_int32_t) 0xffffffff);
+	ce.svc.user.netmask = ((u_int32_t) 0xffffffff);
 
 	if (parse_options(argc, argv, &ce, &options, &format))
 		return -1;
@@ -879,21 +885,21 @@ static int process_options(int argc, char **argv, int reading_stdin)
 
 	if (ce.cmd == CMD_ADD || ce.cmd == CMD_EDIT) {
 		/* Make sure that port zero service is persistent */
-		if (!ce.svc.fwmark && !ce.svc.port &&
-		    !(ce.svc.flags & IP_VS_SVC_F_PERSISTENT) &&
-            (!strlen(ce.svc.srange) && !strlen(ce.svc.drange) &&
-             !strlen(ce.svc.iifname) && !strlen(ce.svc.oifname)))
+		if (!ce.svc.user.fwmark && !ce.svc.user.port &&
+		    !(ce.svc.user.flags & IP_VS_SVC_F_PERSISTENT) &&
+            (!strlen(ce.svc.user.srange) && !strlen(ce.svc.user.drange) &&
+             !strlen(ce.svc.user.iifname) && !strlen(ce.svc.user.oifname)))
 			fail(2, "Zero port specified "
 			     "for no-match and non-persistent service");
 
-		if (ce.svc.flags & IP_VS_SVC_F_ONEPACKET &&
-		    !ce.svc.fwmark && ce.svc.protocol != IPPROTO_UDP)
+		if (ce.svc.user.flags & IP_VS_SVC_F_ONEPACKET &&
+		    !ce.svc.user.fwmark && ce.svc.user.protocol != IPPROTO_UDP)
 			fail(2, "One-Packet Scheduling is only "
 			     "for UDP virtual services");
 
 		/* Set the default scheduling algorithm if not specified */
-		if (strlen(ce.svc.sched_name) == 0)
-			strcpy(ce.svc.sched_name, DEF_SCHED);
+		if (strlen(ce.svc.user.sched_name) == 0)
+			strcpy(ce.svc.user.sched_name, DEF_SCHED);
 	}
 
 	if (ce.cmd == CMD_STARTDAEMON && strlen(ce.daemon.mcast_ifn) == 0)
@@ -905,10 +911,10 @@ static int process_options(int argc, char **argv, int reading_stdin)
 		 * if the IP_VS_CONN_F_TUNNEL or IP_VS_CONN_F_DROUTE is set.
 		 * Don't worry about this if fwmark is used.
 		 */
-		if (!ce.svc.fwmark &&
-		    (ce.dest.conn_flags == IP_VS_CONN_F_TUNNEL
-		     || ce.dest.conn_flags == IP_VS_CONN_F_DROUTE))
-			ce.dest.port = ce.svc.port;
+		if (!ce.svc.user.fwmark &&
+		    (ce.dest.user.conn_flags == IP_VS_CONN_F_TUNNEL
+		     || ce.dest.user.conn_flags == IP_VS_CONN_F_DROUTE))
+			ce.dest.user.port = ce.svc.user.port;
 	}
 
 	switch (ce.cmd) {
@@ -1013,7 +1019,7 @@ static int process_options(int argc, char **argv, int reading_stdin)
 	case CMD_GETBLKLST:
 		if(options & OPT_SERVICE) {
 			list_blklsts_print_title();
-			result = list_blklst(ce.svc.addr.ip, ce.svc.port, ce.svc.protocol);
+			result = list_blklst(ce.svc.nf_addr.ip, ce.svc.user.port, ce.svc.user.protocol);
 		}
 		else
 			result = list_all_blklsts();
@@ -1132,19 +1138,19 @@ parse_service(char *buf, ipvs_service_t *svc)
 			return SERVICE_NONE;
 	}
 	if (inet_pton(AF_INET6, buf, &inaddr6) > 0) {
-		svc->addr.in6 = inaddr6;
+		svc->nf_addr.in6 = inaddr6;
 		svc->af = AF_INET6;
-		svc->netmask = 128;
+		svc->user.netmask = 128;
 	} else {
 		portp = strrchr(buf, ':');
 		if (portp != NULL)
 			*portp = '\0';
 
 		if (inet_aton(buf, &inaddr) != 0) {
-			svc->addr.ip = inaddr.s_addr;
+			svc->nf_addr.ip = inaddr.s_addr;
 			svc->af = AF_INET;
 		} else if (host_to_addr(buf, &inaddr) != -1) {
-			svc->addr.ip = inaddr.s_addr;
+			svc->nf_addr.ip = inaddr.s_addr;
 			svc->af = AF_INET;
 		} else
 			return SERVICE_NONE;
@@ -1156,9 +1162,9 @@ parse_service(char *buf, ipvs_service_t *svc)
 		result |= SERVICE_PORT;
 
 		if ((portn = string_to_number(portp+1, 0, 65535)) != -1)
-			svc->port = htons(portn);
-		else if ((portn = service_to_port(portp+1, svc->protocol)) != -1)
-			svc->port = htons(portn);
+			svc->user.port = htons(portn);
+		else if ((portn = service_to_port(portp+1, svc->user.protocol)) != -1)
+			svc->user.port = htons(portn);
 		else
 			return SERVICE_NONE;
 	}
@@ -1169,15 +1175,15 @@ parse_service(char *buf, ipvs_service_t *svc)
  * Get sockpair from the arguments.
  * sockpair := PROTO:SIP:SPORT:TIP:TPORT
  * PROTO := [tcp|udp]
- * SIP,TIP := dotted-decimal ip address or square-blacketed ip6 address
+ * SIP,TIP := dotted-decimal ip address
  * SPORT,TPORT := range(0, 65535)
  */
 static int
 parse_sockpair(char *buf, ipvs_sockpair_t *sockpair)
 {
     char *pos = buf, *end;
-    int af = (strchr(pos, '[') == NULL ? AF_INET : AF_INET6);
-    union inet_addr sip, tip;
+    int af = AF_INET;
+    struct in_addr sip, tip;
     unsigned short proto, sport, tport;
     long portn;
 
@@ -1194,26 +1200,13 @@ parse_sockpair(char *buf, ipvs_sockpair_t *sockpair)
 	else
 		return 0;
 
-    if (af == AF_INET) {
-        pos = end;
-        end = strchr(pos, ':');
-        if (!end)
-            return 0;
-        *end++ = '\0';
-        if (inet_pton(af, pos, &sip) != 1)
-            return 0;
-    } else {
-        if (*end != '[')
-            return 0;
-        pos = end + 1;
-        end = strchr(pos, ']');
-        if (!end || *(end+1) != ':')
-            return 0;
-        *end++ = '\0';
-        *end++ = '\0';
-        if (inet_pton(af, pos, &sip.in6) != 1)
-            return 0;
-    }
+	pos = end;
+    end = strchr(pos, ':');
+    if (!end)
+        return 0;
+    *end++ = '\0';
+    if (inet_pton(af, pos, &sip) != 1)
+        return 0;
 
     pos = end;
     end = strchr(pos, ':');
@@ -1224,26 +1217,13 @@ parse_sockpair(char *buf, ipvs_sockpair_t *sockpair)
         return 0;
     sport = portn;
 
-    if (af == AF_INET) {
-        pos = end;
-        end = strchr(pos, ':');
-        if (!end)
-            return 0;
-        *end++ = '\0';
-        if (inet_pton(af, pos, &tip.in) != 1)
-            return 0;
-    } else {
-        if (*end !='[')
-            return 0;
-        pos = end + 1;
-        end = strchr(pos, ']');
-        if (!end || *(end+1) != ':')
-            return 0;
-        *end++ = '\0';
-        *end++ = '\0';
-        if (inet_pton(af, pos, &tip.in6) != 1)
-            return 0;
-    }
+    pos = end;
+    end = strchr(pos, ':');
+    if (!end)
+        return 0;
+    *end++ = '\0';
+    if (inet_pton(af, pos, &tip) != 1)
+        return 0;
 
     pos = end;
     if ((portn = string_to_number(pos, 0, 65535)) == -1)
@@ -1252,9 +1232,9 @@ parse_sockpair(char *buf, ipvs_sockpair_t *sockpair)
 
     sockpair->af = af;
 	sockpair->proto = proto;
-    sockpair->sip = sip;
+    memcpy(&sockpair->sip, &sip, sizeof(sockpair->sip));
     sockpair->sport = ntohs(sport);
-    sockpair->tip = tip;
+    memcpy(&sockpair->tip, &tip, sizeof(sockpair->tip));
     sockpair->tport = ntohs(tport);
 
     return 1;
@@ -1282,7 +1262,7 @@ static int parse_match_snat(const char *buf, ipvs_service_t *svc)
     snprintf(params, sizeof(params), "%s", buf);
 
     svc->af = AF_INET; /* now IPv4 only */
-    svc->protocol = IPPROTO_NONE;
+    svc->user.protocol = IPPROTO_NONE;
 
     for (start = params; (arg = strtok_r(start, ",", &sp)); start = NULL) {
         r = sscanf(arg, "%31[^=]=%127s", key, val);
@@ -1294,23 +1274,23 @@ static int parse_match_snat(const char *buf, ipvs_service_t *svc)
 
         if (strcmp(key, "proto") == 0) {
             if (strcmp(val, "tcp") == 0)
-                svc->protocol = IPPROTO_TCP;
+                svc->user.protocol = IPPROTO_TCP;
             else if (strcmp(val, "udp") == 0)
-                svc->protocol = IPPROTO_UDP;
+                svc->user.protocol = IPPROTO_UDP;
             else if (strcmp(val, "icmp") == 0)
-                svc->protocol = IPPROTO_ICMP;
+                svc->user.protocol = IPPROTO_ICMP;
             else if (strcmp(val, "icmpv6") == 0)
-                svc->protocol = IPPROTO_ICMPV6;
+                svc->user.protocol = IPPROTO_ICMPV6;
             else
                 return -1;
         } else if (strcmp(key, "src-range") == 0) {
-            snprintf(svc->srange, sizeof(svc->srange), "%s", val);
+            snprintf(svc->user.srange, sizeof(svc->user.srange), "%s", val);
         } else if (strcmp(key, "dst-range") == 0) {
-            snprintf(svc->drange, sizeof(svc->drange), "%s", val);
+            snprintf(svc->user.drange, sizeof(svc->user.drange), "%s", val);
         } else if (strcmp(key, "iif") == 0) {
-            snprintf(svc->iifname, sizeof(svc->iifname), "%s", val);
+            snprintf(svc->user.iifname, sizeof(svc->user.iifname), "%s", val);
         } else if (strcmp(key, "oif") == 0) {
-            snprintf(svc->oifname, sizeof(svc->oifname), "%s", val);
+            snprintf(svc->user.oifname, sizeof(svc->user.oifname), "%s", val);
         } else {
             return -1;
         }
@@ -1549,16 +1529,16 @@ static void print_conn_entry(const ipvs_conn_entry_t *conn_entry,
 
 	snprintf(time_str, sizeof(time_str), "%ds", conn_entry->timeout);
 
-	if (!(cname = addrport_to_anyname(conn_entry->in_af, &conn_entry->caddr,
+	if (!(cname = addrport_to_anyname(conn_entry->af, &conn_entry->caddr,
                     ntohs(conn_entry->cport), conn_entry->proto, format)))
 		goto exit;
-	if (!(vname = addrport_to_anyname(conn_entry->in_af, &conn_entry->vaddr,
+	if (!(vname = addrport_to_anyname(conn_entry->af, &conn_entry->vaddr,
                     ntohs(conn_entry->vport), conn_entry->proto, format)))
 		goto exit;
-	if (!(lname = addrport_to_anyname(conn_entry->out_af, &conn_entry->laddr,
+	if (!(lname = addrport_to_anyname(conn_entry->af, &conn_entry->laddr,
                     ntohs(conn_entry->lport), conn_entry->proto, format)))
 		goto exit;
-	if (!(dname = addrport_to_anyname(conn_entry->out_af, &conn_entry->daddr,
+	if (!(dname = addrport_to_anyname(conn_entry->af, &conn_entry->daddr,
                     ntohs(conn_entry->dport), conn_entry->proto, format)))
 		goto exit;
 
@@ -1668,11 +1648,11 @@ static inline char *fwd_switch(unsigned flags)
 }
 
 /*notice when rs is deleted svc stats count will be less than before*/
-static void copy_stats_from_dest(ipvs_service_entry_t *se, struct ip_vs_get_dests *d)
+static void copy_stats_from_dest(ipvs_service_entry_t *se, struct ip_vs_get_dests_app *d)
 {
 	int i = 0;
-	for (i = 0; i < d->num_dests; i++) {
-		ipvs_dest_entry_t *e = &d->entrytable[i];
+	for (i = 0; i < d->user.num_dests; i++) {
+		ipvs_dest_entry_t *e = &d->user.entrytable[i];
 		se->stats.conns += e->stats.conns;
 		se->stats.inpkts += e->stats.inpkts;
 		se->stats.outpkts += e->stats.outpkts;
@@ -1691,7 +1671,7 @@ static void print_largenum(unsigned long long i, unsigned int format)
 		printf("%*llu", len <= 8 ? 9 : len + 1, i);
 		return;
 	}
-
+	
 	if (i < 100000000)			/* less than 100 million */
 		printf("%9llu", i);
 	else if (i < 1000000000)		/* less than 1 billion */
@@ -1736,7 +1716,7 @@ static void print_title(unsigned int format)
 static void
 print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 {
-	struct ip_vs_get_dests *d;
+	struct ip_vs_get_dests_app *d;
 	char svc_name[256];
 	int i;
 
@@ -1745,40 +1725,40 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 		exit(1);
 	}
 
-	if (se->fwmark) {
+	if (se->user.fwmark) {
 		if (format & FMT_RULE)
 			if (se->af == AF_INET6)
-				sprintf(svc_name, "-f %d -6", se->fwmark);
+				sprintf(svc_name, "-f %d -6", se->user.fwmark);
 			else
-				sprintf(svc_name, "-f %d", se->fwmark);
+				sprintf(svc_name, "-f %d", se->user.fwmark);
 		else
 			if (se->af == AF_INET6)
-				sprintf(svc_name, "FWM  %d IPv6", se->fwmark);
+				sprintf(svc_name, "FWM  %d IPv6", se->user.fwmark);
 			else
-				sprintf(svc_name, "FWM  %d", se->fwmark);
-	} else if (se->__addr_v4 || se->port) {
+				sprintf(svc_name, "FWM  %d", se->user.fwmark);
+	} else if (se->user.__addr_v4 || se->user.port) {
 		char *vname, *proto;
 
-		if (!(vname = addrport_to_anyname(se->af, &se->addr, ntohs(se->port),
-						  se->protocol, format)))
+		if (!(vname = addrport_to_anyname(se->af, &se->nf_addr, ntohs(se->user.port),
+						  se->user.protocol, format)))
 			fail(2, "addrport_to_anyname: %s", strerror(errno));
 		if (format & FMT_RULE) {
-			if (se->protocol == IPPROTO_TCP)
+			if (se->user.protocol == IPPROTO_TCP)
 				proto = "-t";
-			else if (se->protocol == IPPROTO_UDP)
+			else if (se->user.protocol == IPPROTO_UDP)
 				proto = "-u";
 			else
 				proto = "-q";
 
 			sprintf(svc_name, "%s %s", proto, vname);
 		} else {
-			if (se->protocol == IPPROTO_TCP)
+			if (se->user.protocol == IPPROTO_TCP)
 				proto = "TCP";
-			else if (se->protocol == IPPROTO_UDP)
+			else if (se->user.protocol == IPPROTO_UDP)
 				proto = "UDP";
-			else if (se->protocol == IPPROTO_ICMP)
+			else if (se->user.protocol == IPPROTO_ICMP)
 				proto = "ICMP";
-			else
+			else 
 				proto = "ICMPv6";
 
 			sprintf(svc_name, "%s  %s", proto, vname);
@@ -1789,19 +1769,19 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 	} else { /* match */
 		char *proto;
 
-		if (se->protocol == IPPROTO_TCP)
+		if (se->user.protocol == IPPROTO_TCP)
 			proto = "tcp";
-		else if (se->protocol == IPPROTO_UDP)
+		else if (se->user.protocol == IPPROTO_UDP)
 			proto = "udp";
-		else if (se->protocol == IPPROTO_ICMP)
+		else if (se->user.protocol == IPPROTO_ICMP)
 			proto = "icmp";
 		else
 			proto = "icmpv6";
-
+			
 		if (format & FMT_RULE) {
 			snprintf(svc_name, sizeof(svc_name),
 			"-H proto=%s,src-range=%s,dst-range=%s,iif=%s,oif=%s",
-			proto, se->srange, se->drange, se->iifname, se->oifname);
+			proto, se->user.srange, se->user.drange, se->user.iifname, se->user.oifname);
 
 		} else {
 			int left = sizeof(svc_name);
@@ -1809,24 +1789,24 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 
 			left -= snprintf(svc_name + strlen(svc_name), left,
 				"MATCH %s", proto);
-
-			if (strcmp(se->srange, "[::-::]:0-0") != 0 &&
-                            strcmp(se->srange, "0.0.0.0-0.0.0.0:0-0") != 0)
+            
+			if (strcmp(se->user.srange, "[::-::]:0-0") != 0 &&
+                            strcmp(se->user.srange, "0.0.0.0-0.0.0.0:0-0") != 0)
 				left -= snprintf(svc_name + strlen(svc_name), left,
-				",from=%s", se->srange);
+				",from=%s", se->user.srange);
 
-			if (strcmp(se->drange, "[::-::]:0-0") != 0 &&
-                            strcmp(se->drange, "0.0.0.0-0.0.0.0:0-0") != 0)
+			if (strcmp(se->user.drange, "[::-::]:0-0") != 0 &&
+                            strcmp(se->user.drange, "0.0.0.0-0.0.0.0:0-0") != 0)
 				left -= snprintf(svc_name + strlen(svc_name), left,
-				",to=%s", se->drange);
+				",to=%s", se->user.drange);
 
-			if (strlen(se->iifname))
+			if (strlen(se->user.iifname))
 				left -= snprintf(svc_name + strlen(svc_name), left,
-				",iif=%s", se->iifname);
+				",iif=%s", se->user.iifname);
 
-			if (strlen(se->oifname))
+			if (strlen(se->user.oifname))
 				left -= snprintf(svc_name + strlen(svc_name), left,
-				",oif=%s", se->oifname);
+				",oif=%s", se->user.oifname);
 		}
 	}
 
@@ -1835,23 +1815,23 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 
 	/* print virtual service info */
 	if (format & FMT_RULE) {
-		printf("-A %s -s %s", svc_name, se->sched_name);
-		if (se->flags & IP_VS_SVC_F_PERSISTENT) {
-			printf(" -p %u", se->timeout);
+		printf("-A %s -s %s", svc_name, se->user.sched_name);
+		if (se->user.flags & IP_VS_SVC_F_PERSISTENT) {
+			printf(" -p %u", se->user.timeout);
 			if (se->af == AF_INET)
-				if (se->netmask != (unsigned long int) 0xffffffff) {
+				if (se->user.netmask != (unsigned long int) 0xffffffff) {
 					struct in_addr mask;
-					mask.s_addr = se->netmask;
+					mask.s_addr = se->user.netmask;
 					printf(" -M %s", inet_ntoa(mask));
 				}
 			if (se->af == AF_INET6)
-				if (se->netmask != 128) {
-					printf(" -M %i", se->netmask);
+				if (se->user.netmask != 128) {
+					printf(" -M %i", se->user.netmask);
 				}
 		}
 		if (se->pe_name[0])
 			printf(" pe %s", se->pe_name);
-		if (se->flags & IP_VS_SVC_F_ONEPACKET)
+		if (se->user.flags & IP_VS_SVC_F_ONEPACKET)
 			printf(" ops");
 	} else if (format & FMT_STATS) {
 		printf("%-33s", svc_name);
@@ -1861,8 +1841,8 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 		print_largenum(se->stats.inbytes, format);
 		print_largenum(se->stats.outbytes, format);
 	} else if (format & FMT_RATE) {
-		if (se->bps > 0) {
-			sprintf(svc_name, "%s bps %dM", svc_name, se->bps);
+		if (se->user.bps > 0) {
+			sprintf(svc_name, "%s bps %dM", svc_name, se->user.bps);
 		}
 		printf("%-33s", svc_name);
 		print_largenum(se->stats.cps, format);
@@ -1871,31 +1851,31 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 		print_largenum(se->stats.inbps, format);
 		print_largenum(se->stats.outbps, format);
 	} else {
-		printf("%s %s", svc_name, se->sched_name);
-		if (se->flags & IP_VS_SVC_F_SIP_HASH)
+		printf("%s %s", svc_name, se->user.sched_name);
+		if (se->user.flags & IP_VS_SVC_F_SIP_HASH)
 			printf(" sip");
-		if (se->flags & IP_VS_SVC_F_QID_HASH)
+		if (se->user.flags & IP_VS_SVC_F_QID_HASH)
 			printf(" qid");
-		if (se->flags & IP_VS_SVC_F_PERSISTENT) {
-			printf(" persistent %u", se->timeout);
+		if (se->user.flags & IP_VS_SVC_F_PERSISTENT) {
+			printf(" persistent %u", se->user.timeout);
 			if (se->af == AF_INET)
-				if (se->netmask != (unsigned long int) 0xffffffff) {
+				if (se->user.netmask != (unsigned long int) 0xffffffff) {
 					struct in_addr mask;
-					mask.s_addr = se->netmask;
+					mask.s_addr = se->user.netmask;
 					printf(" mask %s", inet_ntoa(mask));
 				}
 			if (se->af == AF_INET6)
-				if (se->netmask != 128)
-					printf(" mask %i", se->netmask);
+				if (se->user.netmask != 128)
+					printf(" mask %i", se->user.netmask);
 			if (se->pe_name[0])
 				printf(" pe %s", se->pe_name);
-			if (se->flags & IP_VS_SVC_F_ONEPACKET)
+			if (se->user.flags & IP_VS_SVC_F_ONEPACKET)
 				printf(" ops");
 		}
-		if (se->flags & IP_VS_CONN_F_SYNPROXY)
+		if (se->user.flags & IP_VS_CONN_F_SYNPROXY)
 			printf(" synproxy");
-        if (se->conn_timeout != 0)
-            printf(" conn_timeout %u", se->conn_timeout);
+        if (se->user.conn_timeout != 0)
+            printf(" conn_timeout %u", se->user.conn_timeout);
 	}
 	printf("\n");
 
@@ -1903,12 +1883,12 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 	if (!(format & FMT_NOSORT))
 		ipvs_sort_dests(d, ipvs_cmp_dests);
 
-	for (i = 0; i < d->num_dests; i++) {
+	for (i = 0; i < d->user.num_dests; i++) {
 		char *dname;
-		ipvs_dest_entry_t *e = &d->entrytable[i];
+		ipvs_dest_entry_t *e = &d->user.entrytable[i];
 
-		if (!(dname = addrport_to_anyname(e->af, &(e->addr), ntohs(e->port),
-						  se->protocol, format))) {
+		if (!(dname = addrport_to_anyname(e->af, &(e->nf_addr), ntohs(e->user.port),
+						  se->user.protocol, format))) {
 			fprintf(stderr, "addrport_to_anyname fails\n");
 			exit(1);
 		}
@@ -1917,7 +1897,7 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 
 		if (format & FMT_RULE) {
 			printf("-a %s -r %s %s -w %d\n", svc_name, dname,
-			       fwd_switch(e->conn_flags), e->weight);
+			       fwd_switch(e->user.conn_flags), e->user.weight);
 		} else if (format & FMT_STATS) {
 			printf("  -> %-28s", dname);
 			print_largenum(e->stats.conns, format);
@@ -1936,16 +1916,16 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 			printf("\n");
 		} else if (format & FMT_THRESHOLDS) {
 			printf("  -> %-28s %-10u %-10u %-10u %-10u\n", dname,
-			       e->u_threshold, e->l_threshold,
-			       e->activeconns, e->inactconns);
+			       e->user.u_threshold, e->user.l_threshold,
+			       e->user.activeconns, e->user.inactconns);
 		} else if (format & FMT_PERSISTENTCONN) {
 			printf("  -> %-28s %-9u %-11u %-10u %-10u\n", dname,
-			       e->weight, e->persistconns,
-			       e->activeconns, e->inactconns);
+			       e->user.weight, e->user.persistconns,
+			       e->user.activeconns, e->user.inactconns);
 		} else
 			printf("  -> %-28s %-7s %-6d %-10u %-10u\n",
-			       dname, fwd_name(e->conn_flags),
-			       e->weight, e->activeconns, e->inactconns);
+			       dname, fwd_name(e->user.conn_flags),
+			       e->user.weight, e->user.activeconns, e->user.inactconns);
 		free(dname);
 	}
 	free(d);
@@ -1953,7 +1933,7 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format)
 
 static void list_laddrs_print_title(void)
 {
-	printf("%-20s %-8s %-20s %-10s %-10s\n" ,
+	printf("%-20s %-8s %-20s %-10s %-10s\n" , 
 		"VIP:VPORT" ,
 		"TOTAL" ,
 		"SNAT_IP",
@@ -1967,7 +1947,7 @@ static void list_laddrs_print_service(struct ip_vs_get_laddrs *d)
 
 	if (!(vname = addrport_to_anyname(d->af, &d->addr, ntohs(d->port),
 		d->protocol, FMT_NUMERIC)))
-		fail(2, "addrport_to_anyname: %s", strerror(errno));
+		fail(2, "addrport_to_anyname: %s", strerror(errno));	
 
 	printf("%-20s %-8u \n" , vname , d->num_laddrs);
 	free(vname);
@@ -1984,7 +1964,7 @@ static void list_laddrs_print_laddr(struct ip_vs_laddr_entry * entry)
 	char	pbuf[INET6_ADDRSTRLEN];
 
 	inet_ntop(entry->af, (char *)&entry->addr, pbuf, sizeof(pbuf));
-
+	
 	printf("%-20s %-8s %-20s %-10lu %-10u\n",
 		"",
 		"",
@@ -1996,13 +1976,13 @@ static void list_laddrs_print_laddr(struct ip_vs_laddr_entry * entry)
 static void print_service_and_laddrs(struct ip_vs_get_laddrs* d, int with_title)
 {
 	int i = 0;
-
+	
 	if(with_title)
 		list_laddrs_print_title();
 
 	list_laddrs_print_service(d);
 	for(i = 0 ; i < d->num_laddrs ; i ++){
-		list_laddrs_print_laddr(d->entrytable + i);
+		list_laddrs_print_laddr(d->entrytable + i); 
 	}
 
 	return;
@@ -2023,7 +2003,7 @@ static int list_laddrs(ipvs_service_t *svc , int with_title)
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		free(entry);
 		return -1;
-	}
+	}	
 
 	print_service_and_laddrs(d, with_title);
 
@@ -2036,7 +2016,7 @@ static int list_laddrs(ipvs_service_t *svc , int with_title)
 
 static int list_all_laddrs(void)
 {
-	struct ip_vs_get_services *get;
+	struct ip_vs_get_services_app *get;
 	struct ip_vs_get_laddrs   *d;
 	int i;
 	int title_enable = 1;
@@ -2046,20 +2026,20 @@ static int list_all_laddrs(void)
 		return -1;
 	}
 
-	for (i = 0; i < get->num_services; i++){
-		if(!(d = ipvs_get_laddrs(&(get->entrytable[i])))) {
+	for (i = 0; i < get->user.num_services; i++){
+		if(!(d = ipvs_get_laddrs(&(get->user.entrytable[i])))) {
 			free(get);
 			fprintf(stderr, "%s\n", ipvs_strerror(errno));
 			return -1;
 		}
-
+		
 		if(i != 0)
 			title_enable = 0;
 		print_service_and_laddrs(d, title_enable);
 
 		free(d);
 	}
-
+	
 	free(get);
 	return 0;
 
@@ -2099,8 +2079,8 @@ static int list_blklst(uint32_t addr_v4, uint16_t port, uint16_t protocol)
 	}
 
 	for (i = 0; i < get->naddr; i++) {
-		if ( addr_v4== get->blklsts[i].vaddr.in.s_addr &&
-		     port == get->blklsts[i].vport&&
+		if ( addr_v4== get->blklsts[i].vaddr.in.s_addr && 
+		     port == get->blklsts[i].vport&& 
 		     protocol == get->blklsts[i].proto) {
 			print_service_and_blklsts(&get->blklsts[i]);
 		}
@@ -2111,7 +2091,7 @@ static int list_blklst(uint32_t addr_v4, uint16_t port, uint16_t protocol)
 
 static int list_all_blklsts(void)
 {
-	struct ip_vs_get_services *get;
+	struct ip_vs_get_services_app *get;
 	int i;
 
 	if (!(get = ipvs_get_services())) {
@@ -2120,10 +2100,10 @@ static int list_all_blklsts(void)
 	}
 
 	list_blklsts_print_title();
-	for (i = 0; i < get->num_services; i++)
-		list_blklst(get->entrytable[i].__addr_v4, get->entrytable[i].port,
-				get->entrytable[i].protocol);
-
+	for (i = 0; i < get->user.num_services; i++)
+		list_blklst(get->user.entrytable[i].user.__addr_v4, get->user.entrytable[i].user.port, 
+				get->user.entrytable[i].user.protocol);
+	
 	free(get);
 	return 0;
 }
@@ -2146,12 +2126,12 @@ static void list_service(ipvs_service_t *svc, unsigned int format)
 
 static void list_all(unsigned int format)
 {
-	struct ip_vs_get_services *get;
+	struct ip_vs_get_services_app *get;
 	int i;
 
 	if (!(format & FMT_RULE))
 		printf("IP Virtual Server version %d.%d.%d (size=%d)\n",
-		       NVERSION(ipvs_info.version), ipvs_info.size);
+		       NVERSION(g_ipvs_info.version), g_ipvs_info.size);
 
 	if (!(get = ipvs_get_services())) {
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
@@ -2162,8 +2142,8 @@ static void list_all(unsigned int format)
 		ipvs_sort_services(get, ipvs_cmp_services);
 
 	print_title(format);
-	for (i = 0; i < get->num_services; i++)
-		print_service_entry(&get->entrytable[i], format);
+	for (i = 0; i < get->user.num_services; i++)
+		print_service_entry(&get->user.entrytable[i], format);
 	free(get);
 }
 

From af523bd0253a3ee4dd84e9d6c96020990c91e653 Mon Sep 17 00:00:00 2001
From: ytwang0320 <wyt900320@163.com>
Date: Tue, 31 Dec 2019 14:24:01 +0800
Subject: [PATCH 40/62] clear merge warnings

---
 tools/ipvsadm/ipvsadm.c                          | 2 +-
 tools/keepalived/keepalived/check/check_parser.c | 2 +-
 tools/keepalived/keepalived/check/libipvs.c      | 2 +-
 tools/keepalived/keepalived/include/libipvs.h    | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/tools/ipvsadm/ipvsadm.c b/tools/ipvsadm/ipvsadm.c
index 8e17c0b30..75c7872dc 100644
--- a/tools/ipvsadm/ipvsadm.c
+++ b/tools/ipvsadm/ipvsadm.c
@@ -1833,7 +1833,7 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format, lcoreid_t cid
 		if (format & FMT_RULE) {
 			snprintf(svc_name, sizeof(svc_name),
 			"-H af=%s, proto=%s,src-range=%s,dst-range=%s,iif=%s,oif=%s",
-			proto, se->user.srange, se->user.drange, se->user.iifname, se->user.oifname);
+			af, proto, se->user.srange, se->user.drange, se->user.iifname, se->user.oifname);
 
 		} else {
 			int left = sizeof(svc_name);
diff --git a/tools/keepalived/keepalived/check/check_parser.c b/tools/keepalived/keepalived/check/check_parser.c
index 8dbb56df3..f11ea62f1 100644
--- a/tools/keepalived/keepalived/check/check_parser.c
+++ b/tools/keepalived/keepalived/check/check_parser.c
@@ -1049,7 +1049,7 @@ iif_handler(const vector_t *strvec)
 }
 
 static void
-af_handler(vector_t *strvec)
+af_handler(const vector_t *strvec)
 {
 	virtual_server_t *vs = LIST_TAIL_DATA(check_data->vs);
 	char *str = vector_slot(strvec, 1);
diff --git a/tools/keepalived/keepalived/check/libipvs.c b/tools/keepalived/keepalived/check/libipvs.c
index 0670b64d4..1e6467b9d 100644
--- a/tools/keepalived/keepalived/check/libipvs.c
+++ b/tools/keepalived/keepalived/check/libipvs.c
@@ -636,7 +636,7 @@ static inline sockoptid_t cpu2opt_laddr(lcoreid_t cid, sockoptid_t old_opt)
 	return old_opt + cid;
 }
 
-struct ip_vs_get_services *ipvs_get_services(lcoreid_t cid)
+struct ip_vs_get_services_app *ipvs_get_services(lcoreid_t cid)
 {
 	struct ip_vs_get_services_app *get;
 	struct ip_vs_service_entry_app *ipvs_entry;
diff --git a/tools/keepalived/keepalived/include/libipvs.h b/tools/keepalived/keepalived/include/libipvs.h
index 5fa964ac3..e211f8751 100644
--- a/tools/keepalived/keepalived/include/libipvs.h
+++ b/tools/keepalived/keepalived/include/libipvs.h
@@ -132,7 +132,7 @@ extern int ipvs_start_daemon(ipvs_daemon_t *dm);
 extern int ipvs_stop_daemon(ipvs_daemon_t *dm);
 
 /* get all the ipvs services */
-extern struct ip_vs_get_services *ipvs_get_services(lcoreid_t);
+extern struct ip_vs_get_services_app *ipvs_get_services(lcoreid_t);
 
 /* get the destination array of the specified service */
 extern struct ip_vs_get_dests_app *ipvs_get_dests(ipvs_service_entry_t *svc, lcoreid_t cid);

From c27c09049f9e2a030b9e4f3ce841a79d8da058fe Mon Sep 17 00:00:00 2001
From: ytwang0320 <wyt900320@163.com>
Date: Tue, 7 Jan 2020 20:22:56 +0800
Subject: [PATCH 41/62] removed trailing spaces and blank lines

---
 src/ipset.c             | 10 ++++------
 tools/ipvsadm/ipvsadm.c | 30 +++++++++---------------------
 2 files changed, 13 insertions(+), 27 deletions(-)

diff --git a/src/ipset.c b/src/ipset.c
index bdfddd3eb..0cddc3e26 100644
--- a/src/ipset.c
+++ b/src/ipset.c
@@ -341,16 +341,13 @@ static int ipset_parse_conf_file(void)
         RTE_LOG(WARNING, IPSET, "no memory for ipset buf\n");
         return -1;
     }
-
-    while(!feof(g_current_stream))
-    {
+    while(!feof(g_current_stream)) {
         if((ch=getc(g_current_stream))=='\n')
             ip_num++;
     }
-
-    if (!ip_num)
-    {
+    if (!ip_num) {
         RTE_LOG(WARNING, IPSET, "no ip in the gfwip \n");
+        FREE(buf);
         return -1;
     }
         
@@ -362,6 +359,7 @@ static int ipset_parse_conf_file(void)
     ips = rte_calloc_socket(NULL, 1, ipset_size, 0, rte_socket_id());
     if (ips == NULL) {
         RTE_LOG(WARNING, IPSET, "no memory for ipset conf\n");
+        FREE(buf);
         return -1;
     }                        
     ips->num = ip_num;
diff --git a/tools/ipvsadm/ipvsadm.c b/tools/ipvsadm/ipvsadm.c
index 75c7872dc..be2ec7f7f 100644
--- a/tools/ipvsadm/ipvsadm.c
+++ b/tools/ipvsadm/ipvsadm.c
@@ -115,11 +115,7 @@
 #define IPVS_OPTION_PROCESSING	"popt"
 
 #include "config_stream.h"
-//#include "../keepalived/keepalived/libipvs-2.6/libipvs.h"
 #include "../keepalived/keepalived/include/libipvs.h"
-//#include "../keepalived/lib/config.h"
-
-//#define _HAVE_PE_NAME_ 1
 
 #define IPVSADM_VERSION_NO	"v" VERSION
 #define IPVSADM_VERSION_DATE	"2008/5/15"
@@ -166,8 +162,8 @@ static const char* cmdnames[] = {
 	"restore",
 	"save",
 	"zero",
-	"add-laddr" , 
-	"del-laddr" , 
+	"add-laddr" ,
+	"del-laddr" ,
 	"get-laddr" ,
 	"add-blklst",
 	"del-blklst",
@@ -199,9 +195,9 @@ static const char* optnames[] = {
 	"ops",
 	"pe" , 
 	"local-address" ,
-	"blklst-address", 
-	"synproxy" , 
-	"ifname" , 
+	"blklst-address",
+	"synproxy" ,
+	"ifname" ,
 	"sockpair" ,
 	"hash-target",
 	"cpu"
@@ -1988,7 +1984,7 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format, lcoreid_t cid
 
 static void list_laddrs_print_title(void)
 {
-	printf("%-20s %-8s %-20s %-10s %-10s\n" , 
+	printf("%-20s %-8s %-20s %-10s %-10s\n" ,
 		"VIP:VPORT" ,
 		"TOTAL" ,
 		"SNAT_IP",
@@ -2031,7 +2027,6 @@ static void list_laddrs_print_laddr(struct ip_vs_laddr_entry * entry)
 static void print_service_and_laddrs(struct ip_vs_get_laddrs* d, int with_title)
 {
 	int i = 0;
-	
 	if(with_title)
 		list_laddrs_print_title();
 
@@ -2053,15 +2048,12 @@ static int list_laddrs(ipvs_service_t *svc , int with_title, lcoreid_t cid)
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		return -1;
 	}
-
 	if (!(d = ipvs_get_laddrs(entry, cid))) {
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		free(entry);
 		return -1;
 	}	
-
 	print_service_and_laddrs(d, with_title);
-
 	free(entry);
 	free(d);
 
@@ -2080,7 +2072,6 @@ static int list_all_laddrs(lcoreid_t cid)
 		fprintf(stderr, "%s\n", ipvs_strerror(errno));
 		return -1;
 	}
-
 	for (i = 0; i < get->user.num_services; i++){
 		if(!(d = ipvs_get_laddrs(&(get->user.entrytable[i]), cid))) {
 			free(get);
@@ -2091,10 +2082,8 @@ static int list_all_laddrs(lcoreid_t cid)
 		if(i != 0)
 			title_enable = 0;
 		print_service_and_laddrs(d, title_enable);
-
 		free(d);
 	}
-	
 	free(get);
 	return 0;
 
@@ -2134,8 +2123,8 @@ static int list_blklst(uint32_t addr_v4, uint16_t port, uint16_t protocol)
 	}
 
 	for (i = 0; i < get->naddr; i++) {
-		if ( addr_v4== get->blklsts[i].vaddr.in.s_addr && 
-		     port == get->blklsts[i].vport&& 
+		if ( addr_v4== get->blklsts[i].vaddr.in.s_addr &&
+		     port == get->blklsts[i].vport&&
 		     protocol == get->blklsts[i].proto) {
 			print_service_and_blklsts(&get->blklsts[i]);
 		}
@@ -2156,9 +2145,8 @@ static int list_all_blklsts(void)
 
 	list_blklsts_print_title();
 	for (i = 0; i < get->user.num_services; i++)
-		list_blklst(get->user.entrytable[i].user.__addr_v4, get->user.entrytable[i].user.port, 
+		list_blklst(get->user.entrytable[i].user.__addr_v4, get->user.entrytable[i].user.port,
 				get->user.entrytable[i].user.protocol);
-	
 	free(get);
 	return 0;
 }

From 05d1d9c6f4f32fba40ccd0193740ea60fae08f21 Mon Sep 17 00:00:00 2001
From: ytwang0320 <wyt900320@163.com>
Date: Tue, 7 Jan 2020 20:59:23 +0800
Subject: [PATCH 42/62] added inboud and outbound af

---
 tools/ipvsadm/ipvsadm.c                       | 66 +++++++++++++------
 .../keepalived/keepalived/include/conf/conn.h |  3 +-
 2 files changed, 48 insertions(+), 21 deletions(-)

diff --git a/tools/ipvsadm/ipvsadm.c b/tools/ipvsadm/ipvsadm.c
index be2ec7f7f..a986e7989 100644
--- a/tools/ipvsadm/ipvsadm.c
+++ b/tools/ipvsadm/ipvsadm.c
@@ -1209,8 +1209,8 @@ static int
 parse_sockpair(char *buf, ipvs_sockpair_t *sockpair)
 {
     char *pos = buf, *end;
-    int af = AF_INET;
-    struct in_addr sip, tip;
+    int af = (strchr(pos, '[') == NULL ? AF_INET : AF_INET6);
+    union inet_addr sip, tip;
     unsigned short proto, sport, tport;
     long portn;
 
@@ -1227,13 +1227,26 @@ parse_sockpair(char *buf, ipvs_sockpair_t *sockpair)
 	else
 		return 0;
 
-	pos = end;
-    end = strchr(pos, ':');
-    if (!end)
-        return 0;
-    *end++ = '\0';
-    if (inet_pton(af, pos, &sip) != 1)
-        return 0;
+    if (af == AF_INET) {
+        pos = end;
+        end = strchr(pos, ':');
+        if (!end)
+            return 0;
+        *end++ = '\0';
+        if (inet_pton(af, pos, &sip) != 1)
+            return 0;
+    } else {
+        if (*end != '[')
+            return 0;
+        pos = end + 1;
+        end = strchr(pos, ']');
+        if (!end || *(end+1) != ':')
+            return 0;
+        *end++ = '\0';
+        *end++ = '\0';
+        if (inet_pton(af, pos, &sip.in6) != 1)
+            return 0;
+    }
 
     pos = end;
     end = strchr(pos, ':');
@@ -1244,13 +1257,26 @@ parse_sockpair(char *buf, ipvs_sockpair_t *sockpair)
         return 0;
     sport = portn;
 
-    pos = end;
-    end = strchr(pos, ':');
-    if (!end)
-        return 0;
-    *end++ = '\0';
-    if (inet_pton(af, pos, &tip) != 1)
-        return 0;
+    if (af == AF_INET) {
+        pos = end;
+        end = strchr(pos, ':');
+        if (!end)
+            return 0;
+        *end++ = '\0';
+        if (inet_pton(af, pos, &tip.in) != 1)
+            return 0;
+    } else {
+        if (*end !='[')
+            return 0;
+        pos = end + 1;
+        end = strchr(pos, ']');
+        if (!end || *(end+1) != ':')
+            return 0;
+        *end++ = '\0';
+        *end++ = '\0';
+        if (inet_pton(af, pos, &tip.in6) != 1)
+            return 0;
+    }
 
     pos = end;
     if ((portn = string_to_number(pos, 0, 65535)) == -1)
@@ -1571,16 +1597,16 @@ static void print_conn_entry(const ipvs_conn_entry_t *conn_entry,
 
 	snprintf(time_str, sizeof(time_str), "%ds", conn_entry->timeout);
 
-	if (!(cname = addrport_to_anyname(conn_entry->af, &conn_entry->caddr,
+	if (!(cname = addrport_to_anyname(conn_entry->in_af, &conn_entry->caddr,
                     ntohs(conn_entry->cport), conn_entry->proto, format)))
 		goto exit;
-	if (!(vname = addrport_to_anyname(conn_entry->af, &conn_entry->vaddr,
+	if (!(vname = addrport_to_anyname(conn_entry->in_af, &conn_entry->vaddr,
                     ntohs(conn_entry->vport), conn_entry->proto, format)))
 		goto exit;
-	if (!(lname = addrport_to_anyname(conn_entry->af, &conn_entry->laddr,
+	if (!(lname = addrport_to_anyname(conn_entry->out_af, &conn_entry->laddr,
                     ntohs(conn_entry->lport), conn_entry->proto, format)))
 		goto exit;
-	if (!(dname = addrport_to_anyname(conn_entry->af, &conn_entry->daddr,
+	if (!(dname = addrport_to_anyname(conn_entry->out_af, &conn_entry->daddr,
                     ntohs(conn_entry->dport), conn_entry->proto, format)))
 		goto exit;
 
diff --git a/tools/keepalived/keepalived/include/conf/conn.h b/tools/keepalived/keepalived/include/conf/conn.h
index c7ffd3511..86da70b66 100644
--- a/tools/keepalived/keepalived/include/conf/conn.h
+++ b/tools/keepalived/keepalived/include/conf/conn.h
@@ -59,7 +59,8 @@ struct ip_vs_sockpair {
 typedef struct ip_vs_sockpair ipvs_sockpair_t;
 
 struct ip_vs_conn_entry {
-    uint16_t            af;
+    uint16_t            in_af;
+    uint16_t            out_af;
     uint16_t            proto;
     union inet_addr     caddr;
     union inet_addr     vaddr;

From 143058b37b697107371da9ce4919cf0712869ca5 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Wed, 8 Jan 2020 11:09:05 +0800
Subject: [PATCH 43/62] fix format and build problem of new keepalived version

---
 .gitignore                  |  1 +
 src/ipset.c                 |  4 +--
 tools/Makefile              |  1 +
 tools/ipvsadm/ipvsadm.c     | 52 ++++++++++++++++++-------------------
 tools/keepalived/install-sh |  1 -
 5 files changed, 30 insertions(+), 29 deletions(-)
 delete mode 120000 tools/keepalived/install-sh

diff --git a/.gitignore b/.gitignore
index 8be1e7227..7a3fc6ac5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -26,6 +26,7 @@ tools/keepalived/keepalived/libipvs-2.6/libipvs.a
 tools/keepalived/keepalived/vrrp/Makefile
 tools/keepalived/lib/Makefile
 tools/keepalived/lib/config.h
+tools/keepalived/install-sh
 src/dpvs
 .cache.mk
 .tmp_versions/
diff --git a/src/ipset.c b/src/ipset.c
index 0cddc3e26..301d3d419 100644
--- a/src/ipset.c
+++ b/src/ipset.c
@@ -341,8 +341,8 @@ static int ipset_parse_conf_file(void)
         RTE_LOG(WARNING, IPSET, "no memory for ipset buf\n");
         return -1;
     }
-    while(!feof(g_current_stream)) {
-        if((ch=getc(g_current_stream))=='\n')
+    while (!feof(g_current_stream)) {
+        if ((ch=getc(g_current_stream)) == '\n')
             ip_num++;
     }
     if (!ip_num) {
diff --git a/tools/Makefile b/tools/Makefile
index 0692213bb..01e31fb5c 100644
--- a/tools/Makefile
+++ b/tools/Makefile
@@ -28,6 +28,7 @@ config: keepalived_conf
 keepalived_conf:
 	if [ ! -f keepalived/Makefile ]; then \
 		cd keepalived && \
+		./build_setup && \
 		./configure && \
 		cd -; \
 	fi
diff --git a/tools/ipvsadm/ipvsadm.c b/tools/ipvsadm/ipvsadm.c
index a986e7989..2092bc6d8 100644
--- a/tools/ipvsadm/ipvsadm.c
+++ b/tools/ipvsadm/ipvsadm.c
@@ -193,7 +193,7 @@ static const char* optnames[] = {
 	"syncid",
 	"exact",
 	"ops",
-	"pe" , 
+	"pe" ,
 	"local-address" ,
 	"blklst-address",
 	"synproxy" ,
@@ -214,39 +214,39 @@ static const char* optnames[] = {
 static const char commands_v_options[NUMBER_OF_CMD][NUMBER_OF_OPT] =
 {
 /* -n   -c   svc  -s   -p   -M   -r   fwd  -w   -x   -y   -mc  tot  dmn  -st  -rt  thr  -pc  srt  sid  -ex  ops  pe   laddr blst syn ifname sockpair hashtag cpu*/
-/*ADD*/   
+/*ADD*/
     {'x', 'x', '+', ' ', ' ', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x',  ' ', 'x' ,'x' ,' ', 'x'},
-/*EDIT*/  
+/*EDIT*/
     {'x', 'x', '+', ' ', ' ', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x',  ' ', 'x' ,'x' ,' ', 'x'},
-/*DEL*/      
+/*DEL*/
     {'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
-/*FLUSH*/    
+/*FLUSH*/
     {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
-/*LIST*/     
+/*LIST*/
     {' ', '1', '1', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '1', '1', ' ', ' ', ' ', ' ', ' ', ' ', ' ', 'x', 'x', 'x', 'x',  'x', 'x' ,' ' ,'x', ' '},
-/*ADDSRV*/   
+/*ADDSRV*/
     {'x', 'x', '+', 'x', 'x', 'x', '+', ' ', ' ', ' ', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
-/*DELSRV*/   
+/*DELSRV*/
     {'x', 'x', '+', 'x', 'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
-/*EDITSRV*/  
+/*EDITSRV*/
     {'x', 'x', '+', 'x', 'x', 'x', '+', ' ', ' ', ' ', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
-/*TIMEOUT*/  
+/*TIMEOUT*/
     {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
-/*STARTD*/   
+/*STARTD*/
     {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
-/*STOPD*/    
+/*STOPD*/
     {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
-/*RESTORE*/  
+/*RESTORE*/
     {'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
-/*SAVE*/     
+/*SAVE*/
     {' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
-/*ZERO*/     
+/*ZERO*/
     {'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', 'x'},
-/*ADDLADDR*/ 
+/*ADDLADDR*/
     {'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '+', 'x',  'x', '+' ,'x' ,'x', 'x'},
-/*DELLADDR*/ 
+/*DELLADDR*/
     {'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '+', 'x',  'x', '+' ,'x' ,'x', 'x'},
-/*GETLADDR*/ 
+/*GETLADDR*/
     {'x', 'x', ' ', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x',  'x', 'x' ,'x' ,'x', ' '},
 /*ADDBLKLST*/
     {'x', 'x', '+', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', 'x', '+',  'x', 'x' ,'x' ,'x', 'x'},
@@ -307,7 +307,7 @@ enum {
 	TAG_NO_SORT,
 	TAG_PERSISTENCE_ENGINE,
 	TAG_SOCKPAIR,
-	TAG_CPU, 
+	TAG_CPU,
 };
 
 /* various parsing helpers & parsing functions */
@@ -610,7 +610,7 @@ parse_options(int argc, char **argv, struct ipvs_command_entry *ce,
 			strncpy(ce->svc.user.sched_name,
 				optarg, IP_VS_SCHEDNAME_MAXLEN);
 			if (!memcmp(ce->svc.user.sched_name, "conhash", strlen("conhash")))
-				ce->svc.user.flags = ce->svc.user.flags | IP_VS_SVC_F_SIP_HASH; 
+				ce->svc.user.flags = ce->svc.user.flags | IP_VS_SVC_F_SIP_HASH;
 			break;
 		case 'p':
 			set_option(options, OPT_PERSISTENT);
@@ -1202,7 +1202,7 @@ parse_service(char *buf, ipvs_service_t *svc)
  * Get sockpair from the arguments.
  * sockpair := PROTO:SIP:SPORT:TIP:TPORT
  * PROTO := [tcp|udp]
- * SIP,TIP := dotted-decimal ip address
+ * SIP,TIP := dotted-decimal ip address or square-blacketed ip6 address
  * SPORT,TPORT := range(0, 65535)
  */
 static int
@@ -1739,7 +1739,7 @@ static void print_largenum(unsigned long long i, unsigned int format)
 		printf("%*llu", len <= 8 ? 9 : len + 1, i);
 		return;
 	}
-	
+
 	if (i < 100000000)			/* less than 100 million */
 		printf("%9llu", i);
 	else if (i < 1000000000)		/* less than 1 billion */
@@ -1826,7 +1826,7 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format, lcoreid_t cid
 				proto = "UDP";
 			else if (se->user.protocol == IPPROTO_ICMP)
 				proto = "ICMP";
-			else 
+			else
 				proto = "ICMPv6";
 
 			sprintf(svc_name, "%s  %s", proto, vname);
@@ -1866,7 +1866,7 @@ print_service_entry(ipvs_service_entry_t *se, unsigned int format, lcoreid_t cid
 
 			left -= snprintf(svc_name + strlen(svc_name), left,
 				",MATCH %s", proto);
-            
+
 			if (strcmp(se->user.srange, "[::-::]:0-0") != 0 &&
                             strcmp(se->user.srange, "0.0.0.0-0.0.0.0:0-0") != 0)
 				left -= snprintf(svc_name + strlen(svc_name), left,
@@ -2041,7 +2041,7 @@ static void list_laddrs_print_laddr(struct ip_vs_laddr_entry * entry)
 	char	pbuf[INET6_ADDRSTRLEN];
 
 	inet_ntop(entry->af, (char *)&entry->addr, pbuf, sizeof(pbuf));
-	
+
 	printf("%-20s %-8s %-20s %-10lu %-10u\n",
 		"",
 		"",
@@ -2058,7 +2058,7 @@ static void print_service_and_laddrs(struct ip_vs_get_laddrs* d, int with_title)
 
 	list_laddrs_print_service(d);
 	for(i = 0 ; i < d->num_laddrs ; i ++){
-		list_laddrs_print_laddr(d->entrytable + i); 
+		list_laddrs_print_laddr(d->entrytable + i);
 	}
 
 	return;
diff --git a/tools/keepalived/install-sh b/tools/keepalived/install-sh
deleted file mode 120000
index 4fcda595b..000000000
--- a/tools/keepalived/install-sh
+++ /dev/null
@@ -1 +0,0 @@
-/usr/share/automake-1.13/install-sh
\ No newline at end of file

From d5e6402720a42cf3ca93ab73a75d9c5f906aaf41 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Thu, 14 Nov 2019 21:12:20 +0800
Subject: [PATCH 44/62] separate scheduler module from netif

---
 include/cfgfile.h     |    1 -
 include/ctrl.h        |    5 +-
 include/global_data.h |   38 +
 include/iftraf.h      |    1 -
 include/neigh.h       |    2 -
 include/netif.h       |   73 +-
 include/netif_addr.h  |   23 +
 include/scheduler.h   |   62 ++
 src/cfgfile.c         |   24 +-
 src/ctrl.c            |  106 +-
 src/global_data.c     |   41 +
 src/iftraf.c          | 2247 +++++++++++++++++++++--------------------
 src/ipv4_frag.c       |    9 +-
 src/log.c             |   10 +-
 src/main.c            |   63 +-
 src/neigh.c           |   29 +-
 src/netif.c           |  365 ++-----
 src/netif_addr.c      |   48 +
 src/scheduler.c       |  235 +++++
 src/sys_time.c        |    5 +-
 src/timer.c           |    3 +-
 21 files changed, 1867 insertions(+), 1523 deletions(-)
 create mode 100644 include/global_data.h
 create mode 100644 include/scheduler.h
 create mode 100644 src/global_data.c
 create mode 100644 src/scheduler.c

diff --git a/include/cfgfile.h b/include/cfgfile.h
index ebc199b68..2a91f479e 100644
--- a/include/cfgfile.h
+++ b/include/cfgfile.h
@@ -18,7 +18,6 @@
 #ifndef __CONFIG_H__
 #define __CONFIG_H__
 
-void try_reload(void);
 int cfgfile_init(void);
 int cfgfile_term(void);
 
diff --git a/include/ctrl.h b/include/ctrl.h
index 16c4c7072..451cb89d5 100644
--- a/include/ctrl.h
+++ b/include/ctrl.h
@@ -18,6 +18,7 @@
 #ifndef __DPVS_MSGMGR_H__
 #define __DPVS_MSGMGR_H__
 
+#include "global_data.h"
 #include "common.h"
 #include "list.h"
 #include "dpdk.h"
@@ -171,9 +172,6 @@ int multicast_msg_send(struct dpvs_msg *msg,
         uint32_t flags, /* only DPVS_MSG_F_ASYNC supported now */
         struct dpvs_multicast_queue **reply); /* response, use it before msg_destroy */
 
-/* Master lcore msg process loop */
-int msg_master_process(int step); /* Master lcore msg loop */
-
 /* Slave lcore msg process loop */
 int msg_slave_process(int step);  /* Slave lcore msg loop */
 
@@ -277,7 +275,6 @@ struct dpvs_sockopts {
     int (*get)(sockoptid_t opt, const void *in, size_t inlen, void **out, size_t *outlen);
 };
 
-int sockopt_ctl(void *arg);
 int sockopt_register(struct dpvs_sockopts *sockopts);
 int sockopt_unregister(struct dpvs_sockopts *sockopts);
 
diff --git a/include/global_data.h b/include/global_data.h
new file mode 100644
index 000000000..3c263f41c
--- /dev/null
+++ b/include/global_data.h
@@ -0,0 +1,38 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+
+#ifndef __GLOBAL_DATA_H__
+#define __GLOBAL_DATA_H__
+
+#include "common.h"
+
+typedef enum dpvs_lcore_role_type {
+    LCORE_ROLE_IDLE,
+    LCORE_ROLE_MASTER,
+    LCORE_ROLE_FWD_WORKER,
+    LCORE_ROLE_ISOLRX_WORKER,
+    LCORE_ROLE_MAX
+} dpvs_lcore_role_t;
+
+extern uint64_t g_cycles_per_sec;
+extern dpvs_lcore_role_t g_lcore_role[DPVS_MAX_LCORE];
+
+int global_data_init(void);
+int global_data_term(void);
+
+#endif
diff --git a/include/iftraf.h b/include/iftraf.h
index 95eb60649..628759a0f 100644
--- a/include/iftraf.h
+++ b/include/iftraf.h
@@ -12,7 +12,6 @@ int iftraf_sockopt_get(sockoptid_t opt, const void *conf, size_t size,  void **o
 
 int iftraf_pkt_in(int af, struct rte_mbuf *mbuf, struct netif_port *dev);
 int iftraf_pkt_out(int af, struct rte_mbuf *mbuf, struct netif_port *dev);
-void iftraf_process_ring(void);
 
 int iftraf_init(void);
 int iftraf_term(void); /* cleanup */
diff --git a/include/neigh.h b/include/neigh.h
index bbac65e05..a6b50ea3f 100644
--- a/include/neigh.h
+++ b/include/neigh.h
@@ -113,8 +113,6 @@ int neigh_gratuitous_arp(struct in_addr *src, struct netif_port *port);
 
 int neigh_resolve_input(struct rte_mbuf *mbuf, struct netif_port *port);
 
-void neigh_process_ring(void *arg);
-
 void neigh_confirm(int af, union inet_addr *nexthop, struct netif_port *port);
 
 int neigh_sync_core(const void *param, bool add_del, enum param_kind kind);
diff --git a/include/netif.h b/include/netif.h
index a0a722a8d..07b1708b0 100644
--- a/include/netif.h
+++ b/include/netif.h
@@ -26,6 +26,10 @@
 
 #define RTE_LOGTYPE_NETIF RTE_LOGTYPE_USER1
 
+#ifndef DPVS_MAX_LCORE
+#define DPVS_MAX_LCORE RTE_MAX_LCORE
+#endif
+
 enum {
     NETIF_PORT_FLAG_ENABLED                 = (0x1<<0),
     NETIF_PORT_FLAG_RUNNING                 = (0x1<<1),
@@ -119,38 +123,17 @@ struct rx_partner {
 /**************************** lcore statistics ***************************/
 struct netif_lcore_stats
 {
-    uint64_t lcore_loop; /* Total number of loops since start */
-    uint64_t pktburst;  /* Total number of receive bursts */
-    uint64_t zpktburst; /* Total number of receive bursts with ZERO packets */
-    uint64_t fpktburst; /* Total number of receive bursts with MAX packets */
-    uint64_t z2hpktburst; /* Total number of receive bursts with [0, 0.5*MAX] packets */
-    uint64_t h2fpktburst; /* Total number of receive bursts with (0.5*MAX, MAX] packets */
-    uint64_t ipackets; /* Total number of successfully received packets. */
-    uint64_t ibytes; /* Total number of successfully received bytes. */
-    uint64_t opackets; /* Total number of successfully transmitted packets. */
-    uint64_t obytes;/* Total number of successfully transmitted bytes. */
-    uint64_t dropped; /* Total number of dropped packets by software. */
-} __rte_cache_aligned;
-
-/**************************** lcore loop job ****************************/
-enum netif_lcore_job_type {
-    NETIF_LCORE_JOB_INIT      = 0,
-    NETIF_LCORE_JOB_LOOP      = 1,
-    NETIF_LCORE_JOB_SLOW      = 2,
-    NETIF_LCORE_JOB_TYPE_MAX  = 3,
-};
-
-struct netif_lcore_loop_job
-{
-    char name[32];
-    void (*func)(void *arg);
-    void *data;
-    enum netif_lcore_job_type type;
-    uint32_t skip_loops; /* for NETIF_LCORE_JOB_SLOW type only */
-#ifdef CONFIG_RECORD_BIG_LOOP
-    uint32_t job_time[DPVS_MAX_LCORE];
-#endif
-    struct list_head list;
+    uint64_t lcore_loop;        /* Total number of loops since start */
+    uint64_t pktburst;          /* Total number of receive bursts */
+    uint64_t zpktburst;         /* Total number of receive bursts with ZERO packets */
+    uint64_t fpktburst;         /* Total number of receive bursts with MAX packets */
+    uint64_t z2hpktburst;       /* Total number of receive bursts with [0, 0.5*MAX] packets */
+    uint64_t h2fpktburst;       /* Total number of receive bursts with (0.5*MAX, MAX] packets */
+    uint64_t ipackets;          /* Total number of successfully received packets. */
+    uint64_t ibytes;            /* Total number of successfully received bytes. */
+    uint64_t opackets;          /* Total number of successfully transmitted packets. */
+    uint64_t obytes;            /* Total number of successfully transmitted bytes. */
+    uint64_t dropped;           /* Total number of dropped packets by software. */
 } __rte_cache_aligned;
 
 /******************* packet type for upper protocol *********************/
@@ -276,12 +259,10 @@ int netif_print_lcore_conf(char *buf, int *len, bool is_all, portid_t pid);
 int netif_print_lcore_queue_conf(lcoreid_t cid, char *buf, int *len, bool title);
 void netif_get_slave_lcores(uint8_t *nb, uint64_t *mask);
 void netif_update_master_loop_cnt(void);
+void netif_update_worker_loop_cnt(void);
 // function only for init or termination //
 int netif_register_master_xmit_msg(void);
 int netif_lcore_conf_set(int lcores, const struct netif_lcore_conf *lconf);
-int netif_lcore_loop_job_register(struct netif_lcore_loop_job *lcore_job);
-int netif_lcore_loop_job_unregister(struct netif_lcore_loop_job *lcore_job);
-int netif_lcore_start(void);
 bool is_lcore_id_valid(lcoreid_t cid);
 bool netif_lcore_is_idle(lcoreid_t cid);
 void lcore_process_packets(struct netif_queue_conf *qconf, struct rte_mbuf **mbufs,
@@ -332,9 +313,6 @@ void netif_cfgfile_init(void);
 void netif_keyword_value_init(void);
 void install_netif_keywords(void);
 
-/*************************** kni api *******************************/
-void kni_process_on_master(void);
-
 
 static inline void *netif_priv(struct netif_port *dev)
 {
@@ -346,25 +324,6 @@ static inline struct netif_tc *netif_tc(struct netif_port *dev)
     return &dev->tc;
 }
 
-static inline int eth_addr_equal(const struct ether_addr *addr1,
-                                 const struct ether_addr *addr2)
-{
-    const uint16_t *a = (const uint16_t *)addr1;
-    const uint16_t *b = (const uint16_t *)addr2;
-
-    return ((a[0]^b[0]) | (a[1]^b[1]) | (a[2]^b[2])) == 0;
-}
-
-static inline char *eth_addr_dump(const struct ether_addr *ea,
-                                  char *buf, size_t size)
-{
-    snprintf(buf, size, "%02x:%02x:%02x:%02x:%02x:%02x",
-             ea->addr_bytes[0], ea->addr_bytes[1],
-             ea->addr_bytes[2], ea->addr_bytes[3],
-             ea->addr_bytes[4], ea->addr_bytes[5]);
-    return buf;
-}
-
 static inline uint16_t dpvs_rte_eth_dev_count(void)
 {
 #if RTE_VERSION < RTE_VERSION_NUM(18, 11, 0, 0)
diff --git a/include/netif_addr.h b/include/netif_addr.h
index 4954ac20c..41f81b27d 100644
--- a/include/netif_addr.h
+++ b/include/netif_addr.h
@@ -35,6 +35,10 @@ int __netif_mc_dump(struct netif_port *dev,
                     struct ether_addr *addrs, size_t *naddr);
 int netif_mc_dump(struct netif_port *dev,
                   struct ether_addr *addrs, size_t *naddr);
+int __netif_mc_print(struct netif_port *dev,
+                     char *buf, int *len, int *pnaddr);
+int netif_mc_print(struct netif_port *dev,
+                   char *buf, int *len, int *pnaddr);
 
 int __netif_mc_sync(struct netif_port *to, struct netif_port *from);
 int netif_mc_sync(struct netif_port *to, struct netif_port *from);
@@ -46,4 +50,23 @@ int netif_mc_sync_multiple(struct netif_port *to, struct netif_port *from);
 int __netif_mc_unsync_multiple(struct netif_port *to, struct netif_port *from);
 int netif_mc_unsync_multiple(struct netif_port *to, struct netif_port *from);
 
+static inline int eth_addr_equal(const struct ether_addr *addr1,
+                                 const struct ether_addr *addr2)
+{
+    const uint16_t *a = (const uint16_t *)addr1;
+    const uint16_t *b = (const uint16_t *)addr2;
+
+    return ((a[0]^b[0]) | (a[1]^b[1]) | (a[2]^b[2])) == 0;
+}
+
+static inline char *eth_addr_dump(const struct ether_addr *ea,
+                                  char *buf, size_t size)
+{
+    snprintf(buf, size, "%02x:%02x:%02x:%02x:%02x:%02x",
+             ea->addr_bytes[0], ea->addr_bytes[1],
+             ea->addr_bytes[2], ea->addr_bytes[3],
+             ea->addr_bytes[4], ea->addr_bytes[5]);
+    return buf;
+}
+
 #endif /* __DPVS_NETIF_ADDR_H__ */
diff --git a/include/scheduler.h b/include/scheduler.h
new file mode 100644
index 000000000..91d3577fe
--- /dev/null
+++ b/include/scheduler.h
@@ -0,0 +1,62 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+
+#ifndef __SCHEDULER_H__
+#define __SCHEDULER_H__
+
+#include "netif.h"
+#include "global_data.h"
+
+#define RTE_LOGTYPE_DSCHED RTE_LOGTYPE_USER1
+
+#ifdef CONFIG_RECORD_BIG_LOOP
+#define BIG_LOOP_THRESH_SLAVE   100         /* microsecond time for slave lcore big loop threshold */
+#define BIG_LOOP_THRESH_MASTER  2000        /* microsecond time for master lcore big loop threshold */
+#endif
+
+typedef enum dpvs_lcore_job_type {
+    LCORE_JOB_INIT,
+    LCORE_JOB_LOOP,
+    LCORE_JOB_SLOW,
+    LCORE_JOB_TYPE_MAX
+} dpvs_lcore_job_t;
+
+struct dpvs_lcore_job
+{
+    char name[32];
+    void (*func)(void *arg);
+    void *data;
+    dpvs_lcore_job_t type;
+    uint32_t skip_loops;        /* for LCORE_JOB_SLOW type only */
+#ifdef CONFIG_RECORD_BIG_LOOP
+    uint32_t job_time[DPVS_MAX_LCORE];
+#endif
+    struct list_head list;
+} __rte_cache_aligned;
+
+
+const char *dpvs_lcore_role_str(dpvs_lcore_role_t role);
+
+int dpvs_lcore_job_register(struct dpvs_lcore_job *lcore_job, dpvs_lcore_role_t role);
+int dpvs_lcore_job_unregister(struct dpvs_lcore_job *lcore_job, dpvs_lcore_role_t role);
+int dpvs_lcore_start(int is_master);
+
+int dpvs_scheduler_init(void);
+int dpvs_scheduler_term(void);
+
+#endif
diff --git a/src/cfgfile.c b/src/cfgfile.c
index 6dea928cd..6320888fc 100644
--- a/src/cfgfile.c
+++ b/src/cfgfile.c
@@ -33,6 +33,7 @@
 #include "ipvs/proto_tcp.h"
 #include "ipvs/proto_udp.h"
 #include "ipvs/synproxy.h"
+#include "scheduler.h"
 
 typedef void (*sighandler_t)(int);
 
@@ -103,7 +104,7 @@ static inline void sighup(void)
     SET_RELOAD;
 }
 
-void try_reload(void)
+static void try_reload(void *dump)
 {
     if (unlikely(RELOAD_STATUS)) {
         UNSET_RELOAD;
@@ -134,6 +135,12 @@ static void sig_callback(int sig)
     }
 }
 
+static struct dpvs_lcore_job reload_job = {
+    .func = try_reload,
+    .data = NULL,
+    .type = LCORE_JOB_LOOP,
+};
+
 int cfgfile_init(void)
 {
     int ret;
@@ -162,7 +169,14 @@ int cfgfile_init(void)
 
     /* load configuration file on start */
     SET_RELOAD;
-    try_reload();
+    try_reload(NULL);
+
+    snprintf(reload_job.name, sizeof(reload_job.name), "%s", "cfgfile_reload");
+    ret = dpvs_lcore_job_register(&reload_job, LCORE_ROLE_MASTER);
+    if (ret != EDPVS_OK) {
+        RTE_LOG(ERR, CFG_FILE, "%s: fail to register cfgfile_reload job\n", __func__);
+        return ret;
+    }
 
     return EDPVS_OK;
 }
@@ -177,5 +191,11 @@ int cfgfile_term(void)
         return ret;
     }
 
+    ret = dpvs_lcore_job_unregister(&reload_job, LCORE_ROLE_MASTER);
+    if (ret != EDPVS_OK) {
+        RTE_LOG(ERR, CFG_FILE, "%s: fail to unregister cfgfile_reload job\n", __func__);
+        return ret;
+    }
+
     return EDPVS_OK;
 }
diff --git a/src/ctrl.c b/src/ctrl.c
index e6f80d78a..a99a84765 100644
--- a/src/ctrl.c
+++ b/src/ctrl.c
@@ -26,6 +26,7 @@
 #include "netif.h"
 #include "mempool.h"
 #include "parser/parser.h"
+#include "scheduler.h"
 
 /////////////////////////////////// lcore  msg ///////////////////////////////////////////
 
@@ -36,8 +37,6 @@ uint8_t slave_lcore_nb;        /* slave lcore number */
 lcoreid_t master_lcore;        /* master lcore id */
 struct dpvs_mempool *msg_pool; /* memory pool for msg */
 
-struct netif_lcore_loop_job ctrl_lcore_job;
-
 #define MSG_TIMEOUT_US 2000
 static int g_msg_timeout = MSG_TIMEOUT_US;
 
@@ -441,6 +440,7 @@ int msg_destroy(struct dpvs_msg **pmsg)
     return EDPVS_OK;
 }
 
+static int msg_master_process(int step);
 /* "msg" must be produced by "msg_make" */
 int msg_send(struct dpvs_msg *msg, lcoreid_t cid, uint32_t flags, struct dpvs_msg_reply **reply)
 {
@@ -500,7 +500,7 @@ int msg_send(struct dpvs_msg *msg, lcoreid_t cid, uint32_t flags, struct dpvs_ms
     /* blockable msg, wait here until done or timeout */
     add_msg_flags(msg, DPVS_MSG_F_STATE_SEND);
     start = rte_get_timer_cycles();
-    delay = (uint64_t)g_msg_timeout * rte_get_timer_hz() / 1000000;
+    delay = (uint64_t)g_msg_timeout * g_cycles_per_sec / 1000000;
     while(!(test_msg_flags(msg, (DPVS_MSG_F_STATE_FIN | DPVS_MSG_F_STATE_DROP)))) {
         if (start + delay < rte_get_timer_cycles()) {
             RTE_LOG(WARNING, MSGMGR, "%s:msg@%p, uc_msg(type:%d, cid:%d->%d, flags=%d) timeout"
@@ -607,7 +607,7 @@ int multicast_msg_send(struct dpvs_msg *msg, uint32_t flags, struct dpvs_multica
     /* blockable msg wait here until done or timeout */
     add_msg_flags(msg, DPVS_MSG_F_STATE_SEND);
     start = rte_get_timer_cycles();
-    delay = (uint64_t)g_msg_timeout * rte_get_timer_hz() / 1000000;
+    delay = (uint64_t)g_msg_timeout * g_cycles_per_sec / 1000000;
     while(!(test_msg_flags(msg, (DPVS_MSG_F_STATE_FIN | DPVS_MSG_F_STATE_DROP)))) {
         if (start + delay < rte_get_timer_cycles()) {
             RTE_LOG(WARNING, MSGMGR, "%s:msg@%p, mcq(type:%d, cid:%d->slaves) timeout"
@@ -634,7 +634,7 @@ int multicast_msg_send(struct dpvs_msg *msg, uint32_t flags, struct dpvs_multica
 }
 
 /* both unicast msg and multicast msg can be recieved on master lcore */
-int msg_master_process(int step)
+static int msg_master_process(int step)
 {
     int n = 0;
     struct dpvs_msg *msg;
@@ -792,11 +792,6 @@ int msg_slave_process(int step)
     return ret;
 }
 
-static inline void slave_lcore_loop_func(__rte_unused void *dumpy)
-{
-    msg_slave_process(0);
-}
-
 /* for debug */
 int msg_dump(const struct dpvs_msg *msg, char *buf, int len)
 {
@@ -995,6 +990,53 @@ static int unregister_built_in_msg(void)
     return ret;
 }
 
+static inline void master_lcore_loop_func(__rte_unused void *dummy)
+{
+    msg_master_process(0);
+}
+
+static inline void slave_lcore_loop_func(__rte_unused void *dummy)
+{
+    msg_slave_process(0);
+}
+
+static struct dpvs_lcore_job msg_master_job = {
+    .func = master_lcore_loop_func,
+    .data = NULL,
+    .type = LCORE_JOB_LOOP,
+};
+
+static struct dpvs_lcore_job msg_slave_job = {
+    .func = slave_lcore_loop_func,
+    .data = NULL,
+    .type = LCORE_JOB_LOOP,
+};
+
+static inline int msg_lcore_job_register(void)
+{
+    int ret;
+
+    snprintf(msg_master_job.name, sizeof(msg_master_job.name), "%s", "msg_master_job");
+    ret = dpvs_lcore_job_register(&msg_master_job, LCORE_ROLE_MASTER);
+    if (ret < 0)
+        return ret;
+
+    snprintf(msg_slave_job.name, sizeof(msg_slave_job.name), "%s", "msg_slave_job");
+    ret = dpvs_lcore_job_register(&msg_slave_job, LCORE_ROLE_FWD_WORKER);
+    if (ret < 0) {
+        dpvs_lcore_job_unregister(&msg_master_job, LCORE_ROLE_MASTER);
+        return ret;
+    }
+
+    return EDPVS_OK;
+}
+
+static inline void msg_lcore_job_unregister(void)
+{
+    dpvs_lcore_job_unregister(&msg_master_job, LCORE_ROLE_MASTER);
+    dpvs_lcore_job_unregister(&msg_slave_job, LCORE_ROLE_FWD_WORKER);
+}
+
 static inline int msg_init(void)
 {
     int ii, jj;
@@ -1044,18 +1086,19 @@ static inline int msg_init(void)
         if (unlikely(NULL == msg_ring[ii])) {
             RTE_LOG(ERR, MSGMGR, "%s: fail to create msg ring\n", __func__);
             dpvs_mempool_destroy(msg_pool);
+            for (--ii; ii >= 0; ii--)
+                rte_ring_free(msg_ring[ii]);
             return EDPVS_DPDKAPIFAIL;
         }
     }
 
     /* register netif-lcore-loop-job for Slaves */
-    snprintf(ctrl_lcore_job.name, sizeof(ctrl_lcore_job.name) - 1, "%s", "slave_ctrl_plane");
-    ctrl_lcore_job.func = slave_lcore_loop_func;
-    ctrl_lcore_job.data = NULL;
-    ctrl_lcore_job.type = NETIF_LCORE_JOB_LOOP;
-    if ((ret = netif_lcore_loop_job_register(&ctrl_lcore_job)) < 0) {
-        RTE_LOG(ERR, MSGMGR, "%s: fail to register ctrl func on slave lcores\n", __func__);
+    ret = msg_lcore_job_register();
+    if (ret != EDPVS_OK) {
+        RTE_LOG(ERR, MSGMGR, "%s: fail to register msg jobs\n", __func__);
         dpvs_mempool_destroy(msg_pool);
+        for (ii = 0; ii < DPVS_MAX_LCORE; ii++)
+            rte_ring_free(msg_ring[ii]);
         return ret;
     }
 
@@ -1069,16 +1112,13 @@ static inline int msg_init(void)
 
 static inline int msg_term(void)
 {
-    int ii, ret;
+    int ii;
 
     /* unregister built-in msg type */
     unregister_built_in_msg();
 
     /* unregister netif-lcore-loop-job for Slaves */
-    if ((ret = netif_lcore_loop_job_unregister(&ctrl_lcore_job)) < 0) {
-        RTE_LOG(ERR, MSGMGR, "%s: fail to unregister ctrl func on slave lcores\n", __func__);
-        return ret;
-    }
+    msg_lcore_job_unregister();
 
     /* per-lcore msg queue */
     for (ii= 0; ii < DPVS_MAX_LCORE; ii++)
@@ -1286,7 +1326,7 @@ static int sockopt_msg_send(int clt_fd,
     return EDPVS_OK;
 }
 
-int sockopt_ctl(__rte_unused void *arg)
+static int sockopt_ctl(__rte_unused void *arg)
 {
     int clt_fd;
     int ret;
@@ -1358,10 +1398,22 @@ int sockopt_ctl(__rte_unused void *arg)
     return EDPVS_OK;
 }
 
+static inline void sockopt_job_func(void *dummy)
+{
+    sockopt_ctl(NULL);
+}
+
+static struct dpvs_lcore_job sockopt_job = {
+    .func = sockopt_job_func,
+    .data = NULL,
+    .type = LCORE_JOB_LOOP,
+};
+
 static inline int sockopt_init(void)
 {
     struct sockaddr_un srv_addr;
     int srv_fd_flags = 0;
+    int err;
 
     INIT_LIST_HEAD(&sockopt_list);
 
@@ -1400,6 +1452,14 @@ static inline int sockopt_init(void)
         return EDPVS_IO;
     }
 
+    snprintf(sockopt_job.name, sizeof(sockopt_job.name), "%s", "sockopt_job");
+    if ((err = dpvs_lcore_job_register(&sockopt_job, LCORE_ROLE_MASTER)) != EDPVS_OK) {
+        RTE_LOG(ERR, MSGMGR, "%s: Fail to register sockopt_job into master\n", __func__);
+        close(srv_fd);
+        unlink(ipc_unix_domain);
+        return err;
+    }
+
     return EDPVS_OK;
 }
 
@@ -1407,6 +1467,8 @@ static inline int sockopt_term(void)
 {
     close(srv_fd);
     unlink(ipc_unix_domain);
+    dpvs_lcore_job_unregister(&sockopt_job, LCORE_ROLE_MASTER);
+
     return EDPVS_OK;
 }
 
diff --git a/src/global_data.c b/src/global_data.c
new file mode 100644
index 000000000..d46f00d89
--- /dev/null
+++ b/src/global_data.c
@@ -0,0 +1,41 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+
+#include <rte_cycles.h>
+#include "global_data.h"
+#include "common.h"
+
+uint64_t g_cycles_per_sec;
+dpvs_lcore_role_t g_lcore_role[DPVS_MAX_LCORE];
+
+int global_data_init(void)
+{
+    int i;
+
+    g_cycles_per_sec = rte_get_timer_hz();
+
+    for (i = 0; i < DPVS_MAX_LCORE; i++)
+        g_lcore_role[i] = LCORE_ROLE_IDLE;
+
+    return EDPVS_OK;
+}
+
+int global_data_term(void)
+{
+    return EDPVS_OK;
+}
diff --git a/src/iftraf.c b/src/iftraf.c
index 352e4079a..f0e539d43 100644
--- a/src/iftraf.c
+++ b/src/iftraf.c
@@ -1,1116 +1,1131 @@
-#include <stdio.h>
-#include <string.h>
-#include "inet.h"
-#include "ipv4.h"
-#include "ipv6.h"
-#include "iftraf.h"
-#include "conf/iftraf.h"
-#include "vlan.h"
-
-#ifndef IFTRAF
-#define IFTRAF
-#define RTE_LOGTYPE_IFTRAF    RTE_LOGTYPE_USER1
-#endif
-
-#define IFTRAF_TOPN 20
-
-#define IFTRAF_RING_SIZE  1024
-#define IFTRAF_INTERVAL   1024 
-
-#define IFTRAF_PKT_DIR_IN 0
-#define IFTRAF_PKT_DIR_OUT 1
-
-#define IFTRAF_TBL_BITS          12
-#define IFTRAF_TBL_SIZE          (1 << IFTRAF_TBL_BITS)
-#define IFTRAF_TBL_MASK          (IFTRAF_TBL_SIZE - 1)
-
-#define IFTRAF_IFTBL_BITS          10
-#define IFTRAF_IFTBL_SIZE          (1 << IFTRAF_IFTBL_BITS)
-#define IFTRAF_IFTBL_MASK          (IFTRAF_IFTBL_SIZE - 1)
-
-#define IFTRAF_HISTORY_LENGTH  30
-#define IFTRAF_TIME_INTERVAL 0x100000
-
-static int history_pos = 0;
-static int iftraf_ticket = 0;
-bool iftraf_disable = true;
-
-typedef struct sorted_list_node_tag {
-    struct sorted_list_node_tag* next;
-    void* data;
-} sorted_list_node;
-
-typedef struct {
-    sorted_list_node root;
-    int (*compare)(void*, void*);
-    int sorted_list_num;
-} sorted_list_type;
-
-sorted_list_type iftraf_sorted_list;
-sorted_list_type sorted_list[NETIF_MAX_PORTS];
-
-static struct list_head *iftraf_tbl;
-static struct list_head *iftraf_iftbl;
-
-static struct rte_ring *iftraf_ring[DPVS_MAX_LCORE];
-
-#define this_inpkts_count   (RTE_PER_LCORE(inpkts_count))
-#define this_outpkts_count  (RTE_PER_LCORE(outpkts_count))
-
-static RTE_DEFINE_PER_LCORE(uint32_t, inpkts_count);
-static RTE_DEFINE_PER_LCORE(uint32_t, outpkts_count);
-
-static uint32_t iftraf_tlb_rnd; /* hash random */
-
-typedef enum {
-    HASH_STATUS_OK,
-    HASH_STATUS_KEY_NOT_FOUND
-} hash_status_enum;
-
-struct iftraf_pkt {
-    uint8_t af;
-    uint8_t proto;
-    uint8_t dir;
-    lcoreid_t cid;
-    uint32_t pkt_len;
-    union inet_addr saddr;
-    union inet_addr daddr;
-    uint16_t src_port;
-    uint16_t dst_port; 
-    portid_t  devid;
-    char ifname[IFNAMSIZ]; 
-} __rte_cache_aligned;
-
-struct iftraf_entry {
-    struct list_head list;
-
-    uint8_t af;
-    uint8_t proto;
-    lcoreid_t cid;
-    portid_t devid;
-    char ifname[IFNAMSIZ];
-
-    union inet_addr saddr;
-    union inet_addr daddr;
-    uint16_t sport;
-    uint16_t dport;
-
-    uint32_t recv[IFTRAF_HISTORY_LENGTH];
-    uint32_t sent[IFTRAF_HISTORY_LENGTH];	
-	
-    uint32_t total_recv;
-    uint32_t total_sent;
-    int last_write;
-
-} __rte_cache_aligned;
-
-
-static inline uint32_t iftraf_tlb_hashkey(int af,
-    const union inet_addr *saddr, uint16_t sport,
-    const union inet_addr *daddr, uint16_t dport)
-{
-    switch (af) {
-    case AF_INET:
-        return rte_jhash_3words((uint32_t)saddr->in.s_addr,
-                (uint32_t)daddr->in.s_addr,
-                ((uint32_t)sport) << 16 | (uint32_t)dport,
-                iftraf_tlb_rnd) & IFTRAF_TBL_MASK;
-
-    case AF_INET6:
-        {
-            uint32_t vect[9];
-
-            vect[0] = ((uint32_t)sport) << 16 | (uint32_t)dport;
-            memcpy(&vect[1], &saddr->in6, 16);
-            memcpy(&vect[5], &daddr->in6, 16);
-
-            return rte_jhash_32b(vect, 9, iftraf_tlb_rnd) & IFTRAF_TBL_MASK;
-        }
-
-    default:
-        RTE_LOG(DEBUG, IFTRAF, "%s: hashing unsupported protocol %d\n", __func__, af);
-        return 0;
-    }
-}
-
-static hash_status_enum iftraf_entry_get(uint32_t hash, struct iftraf_pkt *param, struct iftraf_entry **out_entry)
-{
-    struct iftraf_entry *entry;
-	
-    list_for_each_entry(entry, &iftraf_tbl[hash], list) {
-        if (entry->sport == param->src_port && entry->dport == param->dst_port
-            && inet_addr_equal(param->af, &entry->saddr, &param->saddr)
-            && inet_addr_equal(param->af, &entry->daddr, &param->daddr)
-            && entry->proto == param->proto
-            && entry->af == param->af) {
-            /* hit */
-            *out_entry = entry;
-            RTE_LOG(DEBUG, IFTRAF,
-                "%s: [hit]\n", __func__);	
-            return HASH_STATUS_OK;
-        }
-    }
-    RTE_LOG(DEBUG, IFTRAF,
-        "%s: [not found]\n", __func__);	
-
-    return HASH_STATUS_KEY_NOT_FOUND;
-}
-
-
-static void history_rotate(void) 
-{
-    uint32_t hash = 0;
-    struct iftraf_entry *entry, *nxt;
-    struct iftraf_entry *ifentry, *ifnxt;
-    history_pos = (history_pos + 1) % IFTRAF_HISTORY_LENGTH;
-
-    for(hash = 0; hash < IFTRAF_TBL_SIZE; hash++) {
-
-        list_for_each_entry_safe(entry, nxt, &iftraf_tbl[hash], list) {
-            /* no data in the last 20s */
-            if (entry->last_write == history_pos) {
-                list_del(&entry->list);
-                if (entry->af == AF_INET) {
-                    RTE_LOG(DEBUG, IFTRAF,
-                        "%s:[v4] [history_pos : %d, cid:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u]\n",
-                        __func__, history_pos, entry->cid, entry->proto, entry->saddr.in.s_addr, entry->daddr.in.s_addr, entry->sport, entry->dport);
-                }
-                rte_free(entry);
-            } else {
-                entry->total_recv -= entry->recv[history_pos];
-                entry->total_sent -= entry->sent[history_pos];
-                entry->recv[history_pos] = 0;
-                entry->sent[history_pos] = 0;
-            }
-        }
-    }
-
-    for(hash = 0; hash < IFTRAF_IFTBL_SIZE; hash++) {
-
-        list_for_each_entry_safe(ifentry, ifnxt, &iftraf_iftbl[hash], list) {
-
-            /* no data in the last 20s */
-            if (ifentry->last_write == history_pos) {
-                list_del(&ifentry->list);
-                if (ifentry->af == AF_INET) {
-                    RTE_LOG(DEBUG, IFTRAF,
-                        "%s:[v4] [history_pos : %d, cid:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u]\n",
-                        __func__, history_pos, ifentry->cid, ifentry->proto, ifentry->saddr.in.s_addr, entry->daddr.in.s_addr, entry->sport, entry->dport);
-                }
-                rte_free(ifentry);
-            } else {
-                ifentry->total_recv -= ifentry->recv[history_pos];
-                ifentry->total_sent -= ifentry->sent[history_pos];
-                ifentry->recv[history_pos] = 0;
-                ifentry->sent[history_pos] = 0;
-            }
-        }
-    }
-}
-
-static int iftraf_entry_compare(void* aa, void* bb) 
-{
-    struct iftraf_entry * a = (struct iftraf_entry *)aa;
-    struct iftraf_entry * b = (struct iftraf_entry *)bb;
-
-    return (a->total_recv + a->total_sent) > (b->total_recv + b->total_sent);
-}
-
-static void sorted_list_initialise(sorted_list_type* list) 
-{
-    list->root.next = NULL;
-    list->sorted_list_num = 0;
-    list->compare = &iftraf_entry_compare;
-}
-
-static void insert_top_list(struct iftraf_entry *entry, sorted_list_type *p_iftraf_sorted_list)
-{
-    sorted_list_node *node, *p, *first;
-    struct iftraf_entry *data;
-
-    p = &(p_iftraf_sorted_list->root);
-
-    if (p_iftraf_sorted_list->sorted_list_num == IFTRAF_TOPN && p_iftraf_sorted_list->compare(p->next->data, entry)) {   
-        struct iftraf_entry *firstentry = (struct iftraf_entry *)p->next->data;
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: no need to insert[%u: %u, %u: %u]\n", 
-             __func__, firstentry->total_recv, firstentry->total_sent, entry->total_recv, entry->total_sent);
-
-        return;
-    }
-
-    while (p->next != NULL && p_iftraf_sorted_list->compare(entry, p->next->data) > 0) {
-        p = p->next;
-    } 
-
-    node = rte_zmalloc(NULL, sizeof(*node), RTE_CACHE_LINE_SIZE);
-    if (node == NULL) {
-        RTE_LOG(ERR, IFTRAF,
-            "%s: no memory\n", __func__);
-        return;
-    }
-
-    node->next = p->next;
-    node->data = entry;
-    p->next = node;
-    RTE_LOG(DEBUG, IFTRAF,
-        "%s: [insert list]cid : %d, sp : %u, dp : %u, recv : %u, sent : %u\n", 
-        __func__, entry->cid, ntohs(entry->sport), ntohs(entry->dport), entry->total_recv, entry->total_sent);
-    if(p_iftraf_sorted_list->sorted_list_num < IFTRAF_TOPN)
-        p_iftraf_sorted_list->sorted_list_num++;
-    else {
-        /* free the first node */
-        p = &(p_iftraf_sorted_list->root);
-        first = p->next;
-	
-        data = (struct iftraf_entry *)first->data;
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: [free first entry]cid : %d, sp : %u, dp : %u, recv : %u, sent : %u\n", 
-             __func__, data->cid, ntohs(data->sport), ntohs(data->dport), data->total_recv, data->total_sent);
-        p->next = first->next;
-
-        rte_free(first);
-    }
-}
-
-static void list_merge(void)
-{
-    sorted_list_type *list;
-    portid_t devid = 0;
-    sorted_list_node *node, *p, *pp;	
-    uint32_t num = 0;
-
-    pp = &(iftraf_sorted_list.root);
-    for (devid = 0; devid < NETIF_MAX_PORTS; devid++) {
-
-        list = &sorted_list[devid];
-        p = &(list->root);
-        while (p->next != NULL && num < list->sorted_list_num) {
-            node = p->next;
-            p->next = node->next;	
-
-            /*insert*/
-            node->next = pp->next;
-            pp->next = node;
-            iftraf_sorted_list.sorted_list_num++;
-			
-            num++;
-        }		
-        num = 0;
-        list->sorted_list_num = 0;
-    }
-}
-
-static void iftraf_sort_top(portid_t port_id)
-{
-    uint32_t hash = 0;
-    struct iftraf_entry *entry, *nxt;
-    struct iftraf_entry *ifentry, *ifnxt;
-
-    if (port_id == NETIF_MAX_PORTS) {
-        for (hash = 0; hash < IFTRAF_IFTBL_SIZE; hash++) {
-            list_for_each_entry_safe(ifentry, ifnxt, &iftraf_iftbl[hash], list) {	                
-                insert_top_list(ifentry, &sorted_list[ifentry->devid]);
-            }
-        }
-
-        list_merge();
-		
-    } else if (port_id < NETIF_MAX_PORTS) {
-        for (hash = 0; hash < IFTRAF_IFTBL_SIZE; hash++) {
-            list_for_each_entry_safe(ifentry, ifnxt, &iftraf_iftbl[hash], list) {	
-                if (ifentry->devid == port_id) {
-                    RTE_LOG(DEBUG, IFTRAF,
-                        "%s: [devid : %u\n", 
-                         __func__, port_id);
-                    insert_top_list(ifentry, &iftraf_sorted_list);
-                }
-            }
-        }
-		
-    } else {
-        for(hash = 0; hash < IFTRAF_TBL_SIZE; hash++) {
-            list_for_each_entry_safe(entry, nxt, &iftraf_tbl[hash], list) {		    				
-                insert_top_list(entry, &iftraf_sorted_list);
-            }
-        }
-    }
-}
-
-static void iftraf_addr_cpy(int af, union inet_addr *daddr, union inet_addr *saddr)
-{
-    if (af == AF_INET) {
-        daddr->in.s_addr = saddr->in.s_addr;
-    } else if (af == AF_INET6) {
-        memcpy(daddr->in6.s6_addr, saddr->in6.s6_addr, 16);
-    } else {
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: unsupported\n", __func__);
-    }    
-}
-
-int iftraf_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
-                             void **out, size_t *outsize)
-{
-    struct iftraf_param_array *array;
-    sorted_list_node *node, *p;
-    struct iftraf_entry *entry;
-    uint32_t off;
-    struct netif_port *port = NULL;
-    const struct dp_vs_iftraf_conf *cf;
-    portid_t port_id = UINT16_MAX;
-
-    if (iftraf_disable) {
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: iftraf disable\n",  __func__);      
-        return EDPVS_OK;
-    }   
-
-    if (!conf || size < sizeof(struct dp_vs_iftraf_conf) || !out || !outsize)
-        return EDPVS_INVAL;
-	cf = conf;
-
-    if (cf && strlen(cf->ifname)) {
-        port = netif_port_get_by_name(cf->ifname);
-        port_id = (port != NULL ) ? port->id : NETIF_MAX_PORTS;
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: ifname : %s, id = %d\n", __func__, cf->ifname, port_id);
-    }
-
-    /* sort iftraf */
-    iftraf_sort_top(port_id);
-
-    RTE_LOG(DEBUG, IFTRAF,
-        "%s: sorted_list_num = %d\n", __func__, iftraf_sorted_list.sorted_list_num);
-
-    *outsize = sizeof(struct iftraf_param_array) + \
-               iftraf_sorted_list.sorted_list_num * sizeof(struct iftraf_param);
-    *out = rte_calloc(NULL, 1, *outsize, RTE_CACHE_LINE_SIZE);
-    if (!(*out)) {
-	RTE_LOG(ERR, IFTRAF, "%s: no memory \n", __func__);
-        return EDPVS_NOMEM;
-    }
-
-    array = *out;
-    array->ntrafs = iftraf_sorted_list.sorted_list_num;
-    off = 0;
-
-    p = &(iftraf_sorted_list.root);
-    while (p->next != NULL && off < iftraf_sorted_list.sorted_list_num) {
-        node = p->next;
-        p->next = node->next;	
-
-        entry = (struct iftraf_entry *)node->data;
-        array->iftraf[off].af = entry->af;
-        array->iftraf[off].proto = entry->proto;
-        array->iftraf[off].cid = entry->cid;
-        iftraf_addr_cpy(entry->af, &array->iftraf[off].saddr, &entry->saddr);
-        iftraf_addr_cpy(entry->af, &array->iftraf[off].daddr, &entry->daddr);
-        array->iftraf[off].sport = entry->sport;
-        array->iftraf[off].dport = entry->dport;
-        array->iftraf[off].total_recv = entry->total_recv;
-        array->iftraf[off].total_sent = entry->total_sent;
-        strcpy(array->iftraf[off].ifname, entry->ifname);
-       
-        if (AF_INET == entry->af) {
-            RTE_LOG(DEBUG, IFTRAF,"%s: sip = %s, sport = %u, dip = %s, dport = %u\n", 
-                __func__, inet_ntoa(array->iftraf[off].saddr.in), ntohs(entry->sport), inet_ntoa(array->iftraf[off].daddr.in), ntohs(entry->dport));
-        } else if (AF_INET6 == entry->af) {
-            char src_addr[INET6_ADDRSTRLEN];
-            char dst_addr[INET6_ADDRSTRLEN];
-
-            inet_ntop(AF_INET6, &entry->saddr.in6, src_addr, INET6_ADDRSTRLEN);
-            inet_ntop(AF_INET6, &entry->daddr.in6, dst_addr, INET6_ADDRSTRLEN);
-
-            RTE_LOG(DEBUG, IFTRAF,"%s: sip = %s sport = %u, dip = %s, dport = %u\n",
-                __func__, src_addr, ntohs(entry->sport), dst_addr, ntohs(entry->dport));
-        } else {
-            RTE_LOG(DEBUG, IFTRAF, "%s: unsupported\n", __func__);
-        }
-        
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: off : %u, cid : %d, proto: %u, total_recv: %u,  total_sent : %u\n", 
-            __func__, off, entry->cid, entry->proto, array->iftraf[off].total_recv, array->iftraf[off].total_sent);
-        
-        rte_free(node);
-
-        off++;
-    }
-
-    iftraf_sorted_list.sorted_list_num = 0;
-    return EDPVS_OK;
-}
-
-static void inline iftraf_tlb_add(struct iftraf_pkt *param)
-{
-    uint32_t hash;
-    struct iftraf_entry *entry = NULL;
-	
-    hash = iftraf_tlb_hashkey(param->af, &param->saddr, param->src_port, &param->daddr, 
-               param->dst_port);
-	
-    if (iftraf_entry_get(hash, param, &entry) == HASH_STATUS_KEY_NOT_FOUND) {
-
-        entry = rte_zmalloc(NULL, sizeof(struct iftraf_entry), RTE_CACHE_LINE_SIZE);
-        if (entry == NULL) {
-            RTE_LOG(ERR, IFTRAF,
-                "%s: no memory\n", __func__);
-            return;
-        }
-		
-        memset(entry, 0, sizeof(struct iftraf_entry));
-        entry->af = param->af;
-        entry->cid = param->cid;
-        entry->devid = param->devid;
-        entry->proto = param->proto;
-        iftraf_addr_cpy(param->af, &entry->saddr, &param->saddr);
-        iftraf_addr_cpy(param->af, &entry->daddr, &param->daddr);
-        entry->sport = param->src_port;
-        entry->dport = param->dst_port;
-        strcpy(entry->ifname, param->ifname);
-
-        list_add(&entry->list, &iftraf_tbl[hash]);				  
-    }
-	
-    if (param->af == AF_INET) {
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s:[v4] dequeue iftraf_ring[cid:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u, len:%u]\n",
-            __func__, entry->cid, entry->proto, entry->saddr.in.s_addr, 
-            entry->daddr.in.s_addr, ntohs(entry->sport), ntohs(entry->dport), param->pkt_len);
-    } else {
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s:[v6] dequeue iftraf_ring[cid:%d, dir:%d, proto:%u, src:%08X %08X %08X %08X, dst:%08X %08X %08X %08X, sp:%u, dp:%u, len:%u]\n",
-            __func__, entry->cid, param->dir, entry->proto, 
-            entry->saddr.in6.s6_addr32[0], entry->saddr.in6.s6_addr32[1],
-            entry->saddr.in6.s6_addr32[2], entry->saddr.in6.s6_addr32[3],
-            entry->daddr.in6.s6_addr32[0],entry->daddr.in6.s6_addr32[1],
-            entry->daddr.in6.s6_addr32[2],entry->daddr.in6.s6_addr32[3],
-            ntohs(entry->sport), ntohs(entry->dport), param->pkt_len);
-	}
-
-    /* Update record */
-    entry->last_write = history_pos;
-    if (param->dir == IFTRAF_PKT_DIR_IN) {
-        entry->recv[history_pos] += param->pkt_len;
-        entry->total_recv += param->pkt_len;
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: history_pos: %d, recv : %u, total_recv : %u\n", __func__, history_pos, entry->recv[history_pos], entry->total_recv);
-
-    } else {
-        entry->sent[history_pos] += param->pkt_len;
-        entry->total_sent += param->pkt_len;
-
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: history_pos: %d: sent : %u, total_sent: %u\n", __func__, history_pos, entry->sent[history_pos], entry->total_sent);
-    }
-}
-
-static inline unsigned iftraf_byif_hashkey(int af,
-					const union inet_addr *addr,
-					portid_t  devid)
-{
-    uint32_t addr_fold;
-
-    addr_fold = inet_addr_fold(af, addr);
-
-    if (!addr_fold) {
-        RTE_LOG(DEBUG, IFTRAF, "%s: IP proto not support.\n", __func__);
-        return 0;
-    }
-
-    return (ntohl(addr_fold) ^ (devid >> IFTRAF_IFTBL_BITS) ^ devid)
-        & IFTRAF_IFTBL_MASK;
-}
-
-static hash_status_enum iftraf_ifentry_get(uint32_t hash, struct iftraf_pkt *param, struct iftraf_entry **out_entry)
-{
-    struct iftraf_entry *entry;
-	
-    list_for_each_entry(entry, &iftraf_iftbl[hash], list) {
-        if (inet_addr_equal(param->af, &entry->saddr, &param->saddr)
-            && entry->devid == param->devid
-            && entry->af == param->af) {
-            /* hit */
-            *out_entry = entry;
-            RTE_LOG(DEBUG, IFTRAF,
-                "%s: [hit]\n", __func__);	
-            return HASH_STATUS_OK;
-        }
-    }
-    RTE_LOG(DEBUG, IFTRAF,
-        "%s: [not found]\n", __func__);	
-
-    return HASH_STATUS_KEY_NOT_FOUND;
-}
-
-static void inline iftraf_iftlb_add(struct iftraf_pkt *param)
-{
-    uint32_t hash;
-    struct iftraf_entry *entry = NULL;
-	
-    hash = iftraf_byif_hashkey(param->af, &param->saddr, param->devid);
-	
-    if (iftraf_ifentry_get(hash, param, &entry) == HASH_STATUS_KEY_NOT_FOUND) {
-
-        entry = rte_zmalloc(NULL, sizeof(struct iftraf_entry), RTE_CACHE_LINE_SIZE);
-        if (entry == NULL) {
-            RTE_LOG(ERR, IFTRAF,
-                "%s: no memory\n", __func__);
-            return;
-        }
-		
-        memset(entry, 0, sizeof(struct iftraf_entry));
-        entry->af = param->af;
-        entry->cid = param->cid;
-        entry->devid = param->devid;
-        entry->proto = 0;//param->proto;
-        iftraf_addr_cpy(param->af, &entry->saddr, &param->saddr);
-        iftraf_addr_cpy(param->af, &entry->daddr, &param->daddr);
-        entry->sport = 0;//param->src_port;
-        entry->dport = 0;//param->dst_port;
-        strcpy(entry->ifname, param->ifname);
-
-        list_add(&entry->list, &iftraf_iftbl[hash]);				  
-    }
-	
-    if (param->af == AF_INET) {
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s:[v4] dequeue iftraf_ring[cid:%d, proto:%u, devid:%u, ifname:%s,src:%08X, dst:%08X, sp:%u, dp:%u, len:%u]\n",
-            __func__, entry->cid, entry->proto, entry->devid, entry->ifname, entry->saddr.in.s_addr, 
-            entry->daddr.in.s_addr, ntohs(entry->sport), ntohs(entry->dport), param->pkt_len);
-    } else {
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s:[v6] dequeue iftraf_ring[cid:%d, dir:%d, proto:%u, devid:%u,  src:%08X %08X %08X %08X, dst:%08X %08X %08X %08X, sp:%u, dp:%u, len:%u]\n",
-            __func__, entry->cid, param->dir, entry->proto, entry->devid, 
-            entry->saddr.in6.s6_addr32[0], entry->saddr.in6.s6_addr32[1],
-            entry->saddr.in6.s6_addr32[2], entry->saddr.in6.s6_addr32[3],
-            entry->daddr.in6.s6_addr32[0],entry->daddr.in6.s6_addr32[1],
-            entry->daddr.in6.s6_addr32[2],entry->daddr.in6.s6_addr32[3],
-            ntohs(entry->sport), ntohs(entry->dport), param->pkt_len);
-    }
-
-    /* Update record */
-    entry->last_write = history_pos;
-    if (param->dir == IFTRAF_PKT_DIR_IN) {
-        entry->recv[history_pos] += param->pkt_len;
-        entry->total_recv += param->pkt_len;
-        RTE_LOG(DEBUG, IFTRAF,
-        "%s: history_pos: %d, recv : %u, total_recv : %u\n", __func__, history_pos, entry->recv[history_pos], entry->total_recv);
-
-    } else {
-        entry->sent[history_pos] += param->pkt_len;
-        entry->total_sent += param->pkt_len;
-
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: history_pos: %d: sent : %u, total_sent: %u\n", __func__, history_pos, entry->sent[history_pos], entry->total_sent);
-    }
-}
-
-
-void iftraf_process_ring(void)
-{    
-    int i;
-    uint16_t nb_rb;
-    lcoreid_t cid;
-    struct iftraf_pkt *param;
-    struct iftraf_pkt *params[NETIF_MAX_PKT_BURST];	
-
-    if (likely(iftraf_disable)) {		
-        return;
-    }	
-
-    iftraf_ticket++;
-    if(iftraf_ticket % IFTRAF_TIME_INTERVAL == 0) {
-        history_rotate();
-        iftraf_ticket = 0;
-    }
-	
-    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
-        if (!rte_lcore_is_enabled(cid)) {
-            continue;
-        }
-
-        nb_rb = rte_ring_dequeue_burst(iftraf_ring[cid], (void **)params,
-                    NETIF_MAX_PKT_BURST, NULL);
-
-        if (nb_rb > 0) {			
-            for (i = 0; i < nb_rb; i++) {
-                param = params[i];
-
-                /* insert into iftraf table */
-                iftraf_tlb_add(param);
-
-                /* insert into iftraf table by if && source ip */
-                iftraf_iftlb_add(param);
-           }
-        }
-    }
-}
-
-static int iftraf_pkt_deliver(int af, struct rte_mbuf *mbuf, struct netif_port *dev, uint8_t dir)
-{
-    int ret;
-    struct iftraf_pkt *pkt;
-    __be16 _ports[2], *ports;
-    lcoreid_t cid = rte_lcore_id();
-    portid_t devid;
-
-    if (af == AF_INET) {
-        struct ipv4_hdr *ip4h = ip4_hdr(mbuf);
-
-        if (unlikely(ip4h->next_proto_id != IPPROTO_TCP &&
-            ip4h->next_proto_id != IPPROTO_UDP)) {
-            RTE_LOG(DEBUG, IFTRAF,
-                "%s: unspported proto[core: %d, proto: %d]\n",
-                __func__, cid, ip4h->next_proto_id);
-            return EDPVS_NOPROT;
-        }
-
-        ports = mbuf_header_pointer(mbuf, ip4_hdrlen(mbuf), sizeof(_ports), _ports);
-        if (!ports) {
-            RTE_LOG(ERR, IFTRAF,
-                "%s: invalid pkt[%d, %d]\n",
-                __func__, cid, dir);
-            return EDPVS_INVPKT;
-        }	
-		
-        pkt = rte_zmalloc("iftraf_inpkt", sizeof(struct iftraf_pkt), RTE_CACHE_LINE_SIZE);
-        if (pkt == NULL) {
-            RTE_LOG(ERR, IFTRAF,
-                "%s: no memory[%d, %d]\n",
-                __func__, cid, dir);
-            return EDPVS_NOMEM;
-        }
-
-        if (dev->type == PORT_TYPE_VLAN) {
-            struct vlan_dev_priv *vlan = netif_priv(dev);
-            struct netif_port *real_dev = vlan->real_dev;
-            RTE_LOG(DEBUG, IFTRAF, "%s: id = %u, ifname = %s, type=%d\n", 
-                __func__, real_dev->id,real_dev->name,real_dev->type);
-            devid = real_dev->id;
-            strcpy(pkt->ifname, real_dev->name);
-        } else {		
-            devid = mbuf->port;
-            strcpy(pkt->ifname, dev->name);
-        }
-
-        pkt->devid = devid;
-        pkt->af = AF_INET;
-        pkt->cid = cid;
-        pkt->dir = dir;
-        pkt->proto = ip4h->next_proto_id;
-        if (dir == IFTRAF_PKT_DIR_IN) {
-            pkt->saddr.in.s_addr = ip4h->src_addr;
-            pkt->daddr.in.s_addr = ip4h->dst_addr;
-            pkt->src_port = ports[0];
-            pkt->dst_port = ports[1];
-        } else {
-            pkt->saddr.in.s_addr = ip4h->dst_addr;
-            pkt->daddr.in.s_addr = ip4h->src_addr;
-            pkt->src_port = ports[1];
-            pkt->dst_port = ports[0];
-        }
-
-        pkt->pkt_len = mbuf->pkt_len;
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s:[v4] enqueued to iftraf_ring[cid:%d, dir:%d, devid:%u, ifname:%s, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u, len:%u]\n",
-            __func__, cid, dir, pkt->devid, pkt->ifname, pkt->proto, ip4h->src_addr, ip4h->dst_addr, ntohs(pkt->src_port), ntohs(pkt->dst_port), pkt->pkt_len);
-
-    } else if (af == AF_INET6) {
-        struct ip6_hdr *ip6h = ip6_hdr(mbuf);
-        uint8_t ip6nxt = ip6h->ip6_nxt;
-
-        if (unlikely(ip6nxt != IPPROTO_TCP &&
-            ip6nxt != IPPROTO_UDP)) {
-            RTE_LOG(DEBUG, IFTRAF,
-                "%s: unspported proto[core: %d, proto: %d]\n",
-                __func__, cid, ip6nxt);
-            return EDPVS_NOPROT;
-        }
-        
-        ports = mbuf_header_pointer(mbuf, ip6_hdrlen(mbuf), sizeof(_ports), _ports);
-        if (!ports) {
-            RTE_LOG(ERR, IFTRAF,
-                "%s: invalid pkt[%d, %d]\n",
-                __func__, cid, dir);
-            return EDPVS_INVPKT;
-        }	 
-		
-        pkt = rte_zmalloc("iftraf_inpkt", sizeof(struct iftraf_pkt), RTE_CACHE_LINE_SIZE);
-        if (pkt == NULL) {
-            RTE_LOG(ERR, IFTRAF,
-                "%s: no memory[%d, %d]\n",
-                __func__, cid, dir);
-            return EDPVS_NOMEM;
-        }
-
-        if (dev->type == PORT_TYPE_VLAN) {
-            struct vlan_dev_priv *vlan = netif_priv(dev);
-            struct netif_port *real_dev = vlan->real_dev;
-            RTE_LOG(DEBUG, IFTRAF, "%s: id = %u, ifname = %s, type=%d\n", 
-                __func__, real_dev->id,real_dev->name,real_dev->type);
-            devid = real_dev->id;
-            strcpy(pkt->ifname, real_dev->name);
-        } else {		
-            devid = mbuf->port;
-            strcpy(pkt->ifname, dev->name);
-        }
-        		 
-        pkt->af = AF_INET6;
-        pkt->devid = devid;
-        pkt->cid = cid;
-        pkt->dir = dir;
-        pkt->proto = ip6nxt;
-        if (dir == IFTRAF_PKT_DIR_IN) {
-            pkt->saddr.in6 = ip6h->ip6_src;
-            pkt->daddr.in6 = ip6h->ip6_dst;
-            pkt->src_port = ports[0];
-            pkt->dst_port = ports[1];
-        } else {
-            pkt->saddr.in6 = ip6h->ip6_dst;
-            pkt->daddr.in6 = ip6h->ip6_src;
-            pkt->src_port = ports[1];
-            pkt->dst_port = ports[0];
-        }
-        pkt->pkt_len = mbuf->pkt_len;
-
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s:[v6] enqueued to iftraf_ring[cid:%d, dir:%d, devid:%u,  proto:%u, src:%08X %08X %08X %08X, dst:%08X %08X %08X %08X, sp:%u, dp:%u, len:%u]\n",
-            __func__, cid, dir, pkt->devid, pkt->proto, 
-            pkt->saddr.in6.s6_addr32[0], pkt->saddr.in6.s6_addr32[1],
-            pkt->saddr.in6.s6_addr32[2], pkt->saddr.in6.s6_addr32[3],
-            pkt->daddr.in6.s6_addr32[0],pkt->daddr.in6.s6_addr32[1],
-            pkt->daddr.in6.s6_addr32[2],pkt->daddr.in6.s6_addr32[3],
-            ntohs(pkt->src_port), ntohs(pkt->dst_port), pkt->pkt_len);
-    } else {
-        return EDPVS_INVPKT;
-    }	
-
-    ret = rte_ring_enqueue(iftraf_ring[cid], pkt);
-    if (ret < 0) {
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: failed to enqueue iftraf_ring[%d]\n",
-            __func__, cid);
-        rte_free(pkt);
-        return EDPVS_DROP;
-    }
-
-    return EDPVS_OK;
-}
-
-int iftraf_pkt_in(int af, struct rte_mbuf *mbuf, struct netif_port *dev)
-{
-    if (likely(iftraf_disable)) {
-        return EDPVS_OK;
-    }		
-
-    this_inpkts_count++;
-    if (this_inpkts_count % IFTRAF_INTERVAL == 0) {
-        iftraf_pkt_deliver(af, mbuf, dev, IFTRAF_PKT_DIR_IN);
-    }
-
-    return EDPVS_OK;
-}
-
-int iftraf_pkt_out(int af, struct rte_mbuf *mbuf, struct netif_port *dev)
-{
-    if (likely(iftraf_disable)) {
-        return EDPVS_OK;
-    }		
-
-    this_outpkts_count++;
-    if (this_outpkts_count % IFTRAF_INTERVAL == 0) {
-        iftraf_pkt_deliver(af, mbuf, dev, IFTRAF_PKT_DIR_OUT);
-    }
-
-    return EDPVS_OK; 
-}
-
-
-/*
- * master core allocates iftraf rings with the other lcores espectively.
- */
-static int iftraf_ring_create(void)
-{
-    char name_buf[RTE_RING_NAMESIZE];
-    int socket_id;
-    lcoreid_t cid, ccid;
-
-    socket_id = rte_socket_id();
-
-    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
-        if (!rte_lcore_is_enabled(cid)) {
-            continue;
-        }
-
-        snprintf(name_buf, RTE_RING_NAMESIZE,
-            "iftraf_ring[%d]", cid);
-
-        iftraf_ring[cid] =
-            rte_ring_create(name_buf, IFTRAF_RING_SIZE, socket_id,
-                            RING_F_SP_ENQ | RING_F_SC_DEQ);
-
-        if (!iftraf_ring[cid]) {
-            RTE_LOG(ERR, IFTRAF,
-                "%s: failed to create iftraf_ring[%d]\n",
-                 __func__, cid);
-            for (ccid = 0; ccid < cid; ccid++) {
-                if (iftraf_ring[ccid])
-                    rte_ring_free(iftraf_ring[ccid]);
-            }
-            return EDPVS_NOMEM;
-        }
-
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: success to create iftraf_ring[%d]\n",
-            __func__, cid);
-    }
-
-    return EDPVS_OK;
-}
-
-static int iftraf_enable_func(void)
-{
-    int i;
-    int err;
-    lcoreid_t cid;
-
-    if (iftraf_disable == false) {
-        return EDPVS_OK;
-    }
-
-    err = iftraf_ring_create();
-    if (err != EDPVS_OK) {
-        return err;
-    }
-
-    iftraf_tbl = rte_malloc_socket(NULL, sizeof(struct list_head) * IFTRAF_TBL_SIZE,
-                    RTE_CACHE_LINE_SIZE, rte_socket_id());
-
-    if (!iftraf_tbl) {
-        RTE_LOG(ERR, IFTRAF,
-            "%s: rte_malloc_socket null\n",
-            __func__);
-        goto tbl_fail;
-    }
-
-    for (i = 0; i < IFTRAF_TBL_SIZE; i++)
-        INIT_LIST_HEAD(&iftraf_tbl[i]);
-
-    iftraf_iftbl = rte_malloc_socket(NULL, sizeof(struct list_head) * IFTRAF_IFTBL_SIZE,
-                      RTE_CACHE_LINE_SIZE, rte_socket_id());
-
-    if (!iftraf_iftbl) {
-        RTE_LOG(ERR, IFTRAF,
-            "%s: rte_malloc_socket null\n",
-            __func__);
-        goto iftbl_fail;
-    }
-
-    for (i = 0; i < IFTRAF_IFTBL_SIZE; i++)
-        INIT_LIST_HEAD(&iftraf_iftbl[i]);	
-	
-    iftraf_disable = false;
-    RTE_LOG(INFO, IFTRAF,
-        "%s: %s\n", __func__, "iftraf enabled");
-
-    return EDPVS_OK;
- 
-iftbl_fail:
-    if (iftraf_tbl) 
-        rte_free(iftraf_tbl);
-
-tbl_fail:
-    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
-        if (!rte_lcore_is_enabled(cid)) {
-            continue;
-        }
-        if (iftraf_ring[cid])
-            rte_ring_free(iftraf_ring[cid]);
-        }
-
-    return EDPVS_NOMEM;
-}
-
-static void iftraf_variable_reset(void)
-{
-    history_pos = 0;	
-    this_inpkts_count = 0;
-    this_outpkts_count = 0;
-}
-
-static void iftraf_ring_free(void)
-{
-    lcoreid_t cid;
-
-    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
-        if (!rte_lcore_is_enabled(cid)) {
-             continue;
-        }
-        if (iftraf_ring[cid]) {
-            rte_ring_free(iftraf_ring[cid]);
-        }
-        
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: iftraf_ring free[%d]\n",
-            __func__, cid);
-    }
-}
-
-
-static int iftraf_disable_func(void)
-{
-    uint32_t hash;
-    int i;
-    uint16_t nb_rb;
-    lcoreid_t cid;
-    struct iftraf_pkt *param;
-    struct iftraf_pkt *params[NETIF_MAX_PKT_BURST];
-    struct iftraf_entry *entry, *nxt;
-    int count = 0;
-
-    if (iftraf_disable == true) {
-        return EDPVS_OK;
-    }
-
-    iftraf_disable = true;
-
-    /* dequeue iftraf ring and free elements */
-    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
-        if (!rte_lcore_is_enabled(cid)) {
-            continue;
-        }
-
-        nb_rb = rte_ring_dequeue_burst(iftraf_ring[cid], (void **)params,
-                    NETIF_MAX_PKT_BURST, NULL);
-
-        while (nb_rb > 0) {		
-            count += nb_rb;
-            for (i = 0; i < nb_rb; i++) {
-                param = params[i];
-                rte_free(param);
-            }
-			
-            nb_rb = rte_ring_dequeue_burst(iftraf_ring[cid], (void **)params,
-                        NETIF_MAX_PKT_BURST, NULL);
-        }
-		
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: iftraf ring[%d] free [%d] pkts\n",
-            __func__, cid, count);
-
-        count = 0;
-		
-    }	
-
-    /* free iftraf ring */
-    iftraf_ring_free();
-
-    /* free tlb */
-    if (iftraf_tbl) {
-        count = 0;
-        /* delete and free all entry added to iftraf_tbl */
-        for(hash = 0; hash < IFTRAF_TBL_SIZE; hash++) {
-            list_for_each_entry_safe(entry, nxt, &iftraf_tbl[hash], list) {
-                list_del(&entry->list);
-                rte_free(entry);
-                count++;
-            }
-        }
-
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: iftraf_tbl free [%d]\n",
-            __func__, count);
-
-        rte_free(iftraf_tbl);
-    }
-
-    /* free tlb */
-    if (iftraf_iftbl) {
-        count = 0;
-        /* delete and free all entry added to iftraf_tbl */
-        for(hash = 0; hash < IFTRAF_IFTBL_SIZE; hash++) {
-            list_for_each_entry_safe(entry, nxt, &iftraf_iftbl[hash], list) {
-                list_del(&entry->list);
-                rte_free(entry);
-                count++;
-            }
-        }
-		
-        RTE_LOG(DEBUG, IFTRAF,
-            "%s: iftraf_iftbl free [%d]\n",
-            __func__, count);
-
-        rte_free(iftraf_iftbl);
-    }
-    
-    iftraf_variable_reset();
-    RTE_LOG(INFO, IFTRAF,
-        "%s: %s\n", __func__, "iftraf disabled");
-
-    return EDPVS_OK;
-}
-
-static void iftraf_sorted_list_init(void) {  
-    portid_t devid = 0;
-    sorted_list_initialise(&iftraf_sorted_list);
-
-    for (devid = 0; devid < NETIF_MAX_PORTS; devid++) {
-        sorted_list_initialise(&sorted_list[devid]);
-    }
-}
-
-static int iftraf_sockopt_set(sockoptid_t opt, const void *conf, size_t size)
-{
-     switch (opt) {
-     case SOCKOPT_SET_IFTRAF_ADD:
-          return iftraf_enable_func(); 
-     case SOCKOPT_SET_IFTRAF_DEL:
-          return iftraf_disable_func(); 
-
-     default:
-          return EDPVS_NOTSUPP;
-     }
-}
-
-
-static struct dpvs_sockopts iftraf_sockopts = {
-    .version        = SOCKOPT_VERSION,
-    .set_opt_min    = SOCKOPT_SET_IFTRAF_ADD,
-    .set_opt_max    = SOCKOPT_SET_IFTRAF_DEL,
-    .set            = iftraf_sockopt_set,
-    .get_opt_min    = SOCKOPT_GET_IFTRAF_SHOW,
-    .get_opt_max    = SOCKOPT_GET_IFTRAF_SHOW,
-    .get            = iftraf_sockopt_get,
-};
-
-int iftraf_init(void)
-{
-    int err;
-	
-    iftraf_disable = true;
-
-    iftraf_tlb_rnd = (uint32_t)random();
-
-    iftraf_sorted_list_init();
-
-    if ((err = sockopt_register(&iftraf_sockopts)) != EDPVS_OK)
-        return err;
-
-    return EDPVS_OK;
-}
-
-int iftraf_term(void)
-{
-    int err;
-
-    err = sockopt_unregister(&iftraf_sockopts);
-    if (err != EDPVS_OK)
-        return err;
-
-    err = iftraf_disable_func();
-    if (err != EDPVS_OK)
-        return err;
-
-    return EDPVS_OK;
-}
+#include <stdio.h>
+#include <string.h>
+#include "inet.h"
+#include "ipv4.h"
+#include "ipv6.h"
+#include "iftraf.h"
+#include "conf/iftraf.h"
+#include "vlan.h"
+#include "scheduler.h"
+
+#ifndef IFTRAF
+#define IFTRAF
+#define RTE_LOGTYPE_IFTRAF    RTE_LOGTYPE_USER1
+#endif
+
+#define IFTRAF_TOPN 20
+
+#define IFTRAF_RING_SIZE  1024
+#define IFTRAF_INTERVAL   1024
+
+#define IFTRAF_PKT_DIR_IN 0
+#define IFTRAF_PKT_DIR_OUT 1
+
+#define IFTRAF_TBL_BITS          12
+#define IFTRAF_TBL_SIZE          (1 << IFTRAF_TBL_BITS)
+#define IFTRAF_TBL_MASK          (IFTRAF_TBL_SIZE - 1)
+
+#define IFTRAF_IFTBL_BITS          10
+#define IFTRAF_IFTBL_SIZE          (1 << IFTRAF_IFTBL_BITS)
+#define IFTRAF_IFTBL_MASK          (IFTRAF_IFTBL_SIZE - 1)
+
+#define IFTRAF_HISTORY_LENGTH  30
+#define IFTRAF_TIME_INTERVAL 0x100000
+
+static int history_pos = 0;
+static int iftraf_ticket = 0;
+bool iftraf_disable = true;
+
+typedef struct sorted_list_node_tag {
+    struct sorted_list_node_tag* next;
+    void* data;
+} sorted_list_node;
+
+typedef struct {
+    sorted_list_node root;
+    int (*compare)(void*, void*);
+    int sorted_list_num;
+} sorted_list_type;
+
+sorted_list_type iftraf_sorted_list;
+sorted_list_type sorted_list[NETIF_MAX_PORTS];
+
+static struct list_head *iftraf_tbl;
+static struct list_head *iftraf_iftbl;
+
+static struct rte_ring *iftraf_ring[DPVS_MAX_LCORE];
+
+#define this_inpkts_count   (RTE_PER_LCORE(inpkts_count))
+#define this_outpkts_count  (RTE_PER_LCORE(outpkts_count))
+
+static RTE_DEFINE_PER_LCORE(uint32_t, inpkts_count);
+static RTE_DEFINE_PER_LCORE(uint32_t, outpkts_count);
+
+static uint32_t iftraf_tlb_rnd; /* hash random */
+
+typedef enum {
+    HASH_STATUS_OK,
+    HASH_STATUS_KEY_NOT_FOUND
+} hash_status_enum;
+
+struct iftraf_pkt {
+    uint8_t af;
+    uint8_t proto;
+    uint8_t dir;
+    lcoreid_t cid;
+    uint32_t pkt_len;
+    union inet_addr saddr;
+    union inet_addr daddr;
+    uint16_t src_port;
+    uint16_t dst_port;
+    portid_t  devid;
+    char ifname[IFNAMSIZ];
+} __rte_cache_aligned;
+
+struct iftraf_entry {
+    struct list_head list;
+
+    uint8_t af;
+    uint8_t proto;
+    lcoreid_t cid;
+    portid_t devid;
+    char ifname[IFNAMSIZ];
+
+    union inet_addr saddr;
+    union inet_addr daddr;
+    uint16_t sport;
+    uint16_t dport;
+
+    uint32_t recv[IFTRAF_HISTORY_LENGTH];
+    uint32_t sent[IFTRAF_HISTORY_LENGTH];
+
+    uint32_t total_recv;
+    uint32_t total_sent;
+    int last_write;
+
+} __rte_cache_aligned;
+
+
+static inline uint32_t iftraf_tlb_hashkey(int af,
+    const union inet_addr *saddr, uint16_t sport,
+    const union inet_addr *daddr, uint16_t dport)
+{
+    switch (af) {
+    case AF_INET:
+        return rte_jhash_3words((uint32_t)saddr->in.s_addr,
+                (uint32_t)daddr->in.s_addr,
+                ((uint32_t)sport) << 16 | (uint32_t)dport,
+                iftraf_tlb_rnd) & IFTRAF_TBL_MASK;
+
+    case AF_INET6:
+        {
+            uint32_t vect[9];
+
+            vect[0] = ((uint32_t)sport) << 16 | (uint32_t)dport;
+            memcpy(&vect[1], &saddr->in6, 16);
+            memcpy(&vect[5], &daddr->in6, 16);
+
+            return rte_jhash_32b(vect, 9, iftraf_tlb_rnd) & IFTRAF_TBL_MASK;
+        }
+
+    default:
+        RTE_LOG(DEBUG, IFTRAF, "%s: hashing unsupported protocol %d\n", __func__, af);
+        return 0;
+    }
+}
+
+static hash_status_enum iftraf_entry_get(uint32_t hash, struct iftraf_pkt *param, struct iftraf_entry **out_entry)
+{
+    struct iftraf_entry *entry;
+
+    list_for_each_entry(entry, &iftraf_tbl[hash], list) {
+        if (entry->sport == param->src_port && entry->dport == param->dst_port
+            && inet_addr_equal(param->af, &entry->saddr, &param->saddr)
+            && inet_addr_equal(param->af, &entry->daddr, &param->daddr)
+            && entry->proto == param->proto
+            && entry->af == param->af) {
+            /* hit */
+            *out_entry = entry;
+            RTE_LOG(DEBUG, IFTRAF,
+                "%s: [hit]\n", __func__);
+            return HASH_STATUS_OK;
+        }
+    }
+    RTE_LOG(DEBUG, IFTRAF,
+        "%s: [not found]\n", __func__);
+
+    return HASH_STATUS_KEY_NOT_FOUND;
+}
+
+
+static void history_rotate(void)
+{
+    uint32_t hash = 0;
+    struct iftraf_entry *entry, *nxt;
+    struct iftraf_entry *ifentry, *ifnxt;
+    history_pos = (history_pos + 1) % IFTRAF_HISTORY_LENGTH;
+
+    for(hash = 0; hash < IFTRAF_TBL_SIZE; hash++) {
+
+        list_for_each_entry_safe(entry, nxt, &iftraf_tbl[hash], list) {
+            /* no data in the last 20s */
+            if (entry->last_write == history_pos) {
+                list_del(&entry->list);
+                if (entry->af == AF_INET) {
+                    RTE_LOG(DEBUG, IFTRAF,
+                        "%s:[v4] [history_pos : %d, cid:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u]\n",
+                        __func__, history_pos, entry->cid, entry->proto, entry->saddr.in.s_addr, entry->daddr.in.s_addr, entry->sport, entry->dport);
+                }
+                rte_free(entry);
+            } else {
+                entry->total_recv -= entry->recv[history_pos];
+                entry->total_sent -= entry->sent[history_pos];
+                entry->recv[history_pos] = 0;
+                entry->sent[history_pos] = 0;
+            }
+        }
+    }
+
+    for(hash = 0; hash < IFTRAF_IFTBL_SIZE; hash++) {
+
+        list_for_each_entry_safe(ifentry, ifnxt, &iftraf_iftbl[hash], list) {
+
+            /* no data in the last 20s */
+            if (ifentry->last_write == history_pos) {
+                list_del(&ifentry->list);
+                if (ifentry->af == AF_INET) {
+                    RTE_LOG(DEBUG, IFTRAF,
+                        "%s:[v4] [history_pos : %d, cid:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u]\n",
+                        __func__, history_pos, ifentry->cid, ifentry->proto, ifentry->saddr.in.s_addr, entry->daddr.in.s_addr, entry->sport, entry->dport);
+                }
+                rte_free(ifentry);
+            } else {
+                ifentry->total_recv -= ifentry->recv[history_pos];
+                ifentry->total_sent -= ifentry->sent[history_pos];
+                ifentry->recv[history_pos] = 0;
+                ifentry->sent[history_pos] = 0;
+            }
+        }
+    }
+}
+
+static int iftraf_entry_compare(void* aa, void* bb)
+{
+    struct iftraf_entry * a = (struct iftraf_entry *)aa;
+    struct iftraf_entry * b = (struct iftraf_entry *)bb;
+
+    return (a->total_recv + a->total_sent) > (b->total_recv + b->total_sent);
+}
+
+static void sorted_list_initialise(sorted_list_type* list)
+{
+    list->root.next = NULL;
+    list->sorted_list_num = 0;
+    list->compare = &iftraf_entry_compare;
+}
+
+static void insert_top_list(struct iftraf_entry *entry, sorted_list_type *p_iftraf_sorted_list)
+{
+    sorted_list_node *node, *p, *first;
+    struct iftraf_entry *data;
+
+    p = &(p_iftraf_sorted_list->root);
+
+    if (p_iftraf_sorted_list->sorted_list_num == IFTRAF_TOPN && p_iftraf_sorted_list->compare(p->next->data, entry)) {
+        struct iftraf_entry *firstentry = (struct iftraf_entry *)p->next->data;
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: no need to insert[%u: %u, %u: %u]\n",
+             __func__, firstentry->total_recv, firstentry->total_sent, entry->total_recv, entry->total_sent);
+
+        return;
+    }
+
+    while (p->next != NULL && p_iftraf_sorted_list->compare(entry, p->next->data) > 0) {
+        p = p->next;
+    }
+
+    node = rte_zmalloc(NULL, sizeof(*node), RTE_CACHE_LINE_SIZE);
+    if (node == NULL) {
+        RTE_LOG(ERR, IFTRAF,
+            "%s: no memory\n", __func__);
+        return;
+    }
+
+    node->next = p->next;
+    node->data = entry;
+    p->next = node;
+    RTE_LOG(DEBUG, IFTRAF,
+        "%s: [insert list]cid : %d, sp : %u, dp : %u, recv : %u, sent : %u\n",
+        __func__, entry->cid, ntohs(entry->sport), ntohs(entry->dport), entry->total_recv, entry->total_sent);
+    if(p_iftraf_sorted_list->sorted_list_num < IFTRAF_TOPN)
+        p_iftraf_sorted_list->sorted_list_num++;
+    else {
+        /* free the first node */
+        p = &(p_iftraf_sorted_list->root);
+        first = p->next;
+
+        data = (struct iftraf_entry *)first->data;
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: [free first entry]cid : %d, sp : %u, dp : %u, recv : %u, sent : %u\n",
+             __func__, data->cid, ntohs(data->sport), ntohs(data->dport), data->total_recv, data->total_sent);
+        p->next = first->next;
+
+        rte_free(first);
+    }
+}
+
+static void list_merge(void)
+{
+    sorted_list_type *list;
+    portid_t devid = 0;
+    sorted_list_node *node, *p, *pp;
+    uint32_t num = 0;
+
+    pp = &(iftraf_sorted_list.root);
+    for (devid = 0; devid < NETIF_MAX_PORTS; devid++) {
+
+        list = &sorted_list[devid];
+        p = &(list->root);
+        while (p->next != NULL && num < list->sorted_list_num) {
+            node = p->next;
+            p->next = node->next;
+
+            /*insert*/
+            node->next = pp->next;
+            pp->next = node;
+            iftraf_sorted_list.sorted_list_num++;
+
+            num++;
+        }
+        num = 0;
+        list->sorted_list_num = 0;
+    }
+}
+
+static void iftraf_sort_top(portid_t port_id)
+{
+    uint32_t hash = 0;
+    struct iftraf_entry *entry, *nxt;
+    struct iftraf_entry *ifentry, *ifnxt;
+
+    if (port_id == NETIF_MAX_PORTS) {
+        for (hash = 0; hash < IFTRAF_IFTBL_SIZE; hash++) {
+            list_for_each_entry_safe(ifentry, ifnxt, &iftraf_iftbl[hash], list) {
+                insert_top_list(ifentry, &sorted_list[ifentry->devid]);
+            }
+        }
+
+        list_merge();
+
+    } else if (port_id < NETIF_MAX_PORTS) {
+        for (hash = 0; hash < IFTRAF_IFTBL_SIZE; hash++) {
+            list_for_each_entry_safe(ifentry, ifnxt, &iftraf_iftbl[hash], list) {
+                if (ifentry->devid == port_id) {
+                    RTE_LOG(DEBUG, IFTRAF,
+                        "%s: [devid : %u\n",
+                         __func__, port_id);
+                    insert_top_list(ifentry, &iftraf_sorted_list);
+                }
+            }
+        }
+
+    } else {
+        for(hash = 0; hash < IFTRAF_TBL_SIZE; hash++) {
+            list_for_each_entry_safe(entry, nxt, &iftraf_tbl[hash], list) {
+                insert_top_list(entry, &iftraf_sorted_list);
+            }
+        }
+    }
+}
+
+static void iftraf_addr_cpy(int af, union inet_addr *daddr, union inet_addr *saddr)
+{
+    if (af == AF_INET) {
+        daddr->in.s_addr = saddr->in.s_addr;
+    } else if (af == AF_INET6) {
+        memcpy(daddr->in6.s6_addr, saddr->in6.s6_addr, 16);
+    } else {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: unsupported\n", __func__);
+    }
+}
+
+int iftraf_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
+                             void **out, size_t *outsize)
+{
+    struct iftraf_param_array *array;
+    sorted_list_node *node, *p;
+    struct iftraf_entry *entry;
+    uint32_t off;
+    struct netif_port *port = NULL;
+    const struct dp_vs_iftraf_conf *cf;
+    portid_t port_id = UINT16_MAX;
+
+    if (iftraf_disable) {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: iftraf disable\n",  __func__);
+        return EDPVS_OK;
+    }
+
+    if (!conf || size < sizeof(struct dp_vs_iftraf_conf) || !out || !outsize)
+        return EDPVS_INVAL;
+	cf = conf;
+
+    if (cf && strlen(cf->ifname)) {
+        port = netif_port_get_by_name(cf->ifname);
+        port_id = (port != NULL ) ? port->id : NETIF_MAX_PORTS;
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: ifname : %s, id = %d\n", __func__, cf->ifname, port_id);
+    }
+
+    /* sort iftraf */
+    iftraf_sort_top(port_id);
+
+    RTE_LOG(DEBUG, IFTRAF,
+        "%s: sorted_list_num = %d\n", __func__, iftraf_sorted_list.sorted_list_num);
+
+    *outsize = sizeof(struct iftraf_param_array) + \
+               iftraf_sorted_list.sorted_list_num * sizeof(struct iftraf_param);
+    *out = rte_calloc(NULL, 1, *outsize, RTE_CACHE_LINE_SIZE);
+    if (!(*out)) {
+	RTE_LOG(ERR, IFTRAF, "%s: no memory \n", __func__);
+        return EDPVS_NOMEM;
+    }
+
+    array = *out;
+    array->ntrafs = iftraf_sorted_list.sorted_list_num;
+    off = 0;
+
+    p = &(iftraf_sorted_list.root);
+    while (p->next != NULL && off < iftraf_sorted_list.sorted_list_num) {
+        node = p->next;
+        p->next = node->next;
+
+        entry = (struct iftraf_entry *)node->data;
+        array->iftraf[off].af = entry->af;
+        array->iftraf[off].proto = entry->proto;
+        array->iftraf[off].cid = entry->cid;
+        iftraf_addr_cpy(entry->af, &array->iftraf[off].saddr, &entry->saddr);
+        iftraf_addr_cpy(entry->af, &array->iftraf[off].daddr, &entry->daddr);
+        array->iftraf[off].sport = entry->sport;
+        array->iftraf[off].dport = entry->dport;
+        array->iftraf[off].total_recv = entry->total_recv;
+        array->iftraf[off].total_sent = entry->total_sent;
+        strcpy(array->iftraf[off].ifname, entry->ifname);
+
+        if (AF_INET == entry->af) {
+            RTE_LOG(DEBUG, IFTRAF,"%s: sip = %s, sport = %u, dip = %s, dport = %u\n",
+                __func__, inet_ntoa(array->iftraf[off].saddr.in), ntohs(entry->sport), inet_ntoa(array->iftraf[off].daddr.in), ntohs(entry->dport));
+        } else if (AF_INET6 == entry->af) {
+            char src_addr[INET6_ADDRSTRLEN];
+            char dst_addr[INET6_ADDRSTRLEN];
+
+            inet_ntop(AF_INET6, &entry->saddr.in6, src_addr, INET6_ADDRSTRLEN);
+            inet_ntop(AF_INET6, &entry->daddr.in6, dst_addr, INET6_ADDRSTRLEN);
+
+            RTE_LOG(DEBUG, IFTRAF,"%s: sip = %s sport = %u, dip = %s, dport = %u\n",
+                __func__, src_addr, ntohs(entry->sport), dst_addr, ntohs(entry->dport));
+        } else {
+            RTE_LOG(DEBUG, IFTRAF, "%s: unsupported\n", __func__);
+        }
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: off : %u, cid : %d, proto: %u, total_recv: %u,  total_sent : %u\n",
+            __func__, off, entry->cid, entry->proto, array->iftraf[off].total_recv, array->iftraf[off].total_sent);
+
+        rte_free(node);
+
+        off++;
+    }
+
+    iftraf_sorted_list.sorted_list_num = 0;
+    return EDPVS_OK;
+}
+
+static void inline iftraf_tlb_add(struct iftraf_pkt *param)
+{
+    uint32_t hash;
+    struct iftraf_entry *entry = NULL;
+
+    hash = iftraf_tlb_hashkey(param->af, &param->saddr, param->src_port, &param->daddr,
+               param->dst_port);
+
+    if (iftraf_entry_get(hash, param, &entry) == HASH_STATUS_KEY_NOT_FOUND) {
+
+        entry = rte_zmalloc(NULL, sizeof(struct iftraf_entry), RTE_CACHE_LINE_SIZE);
+        if (entry == NULL) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: no memory\n", __func__);
+            return;
+        }
+
+        memset(entry, 0, sizeof(struct iftraf_entry));
+        entry->af = param->af;
+        entry->cid = param->cid;
+        entry->devid = param->devid;
+        entry->proto = param->proto;
+        iftraf_addr_cpy(param->af, &entry->saddr, &param->saddr);
+        iftraf_addr_cpy(param->af, &entry->daddr, &param->daddr);
+        entry->sport = param->src_port;
+        entry->dport = param->dst_port;
+        strcpy(entry->ifname, param->ifname);
+
+        list_add(&entry->list, &iftraf_tbl[hash]);
+    }
+
+    if (param->af == AF_INET) {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s:[v4] dequeue iftraf_ring[cid:%d, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u, len:%u]\n",
+            __func__, entry->cid, entry->proto, entry->saddr.in.s_addr,
+            entry->daddr.in.s_addr, ntohs(entry->sport), ntohs(entry->dport), param->pkt_len);
+    } else {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s:[v6] dequeue iftraf_ring[cid:%d, dir:%d, proto:%u, src:%08X %08X %08X %08X, dst:%08X %08X %08X %08X, sp:%u, dp:%u, len:%u]\n",
+            __func__, entry->cid, param->dir, entry->proto,
+            entry->saddr.in6.s6_addr32[0], entry->saddr.in6.s6_addr32[1],
+            entry->saddr.in6.s6_addr32[2], entry->saddr.in6.s6_addr32[3],
+            entry->daddr.in6.s6_addr32[0],entry->daddr.in6.s6_addr32[1],
+            entry->daddr.in6.s6_addr32[2],entry->daddr.in6.s6_addr32[3],
+            ntohs(entry->sport), ntohs(entry->dport), param->pkt_len);
+	}
+
+    /* Update record */
+    entry->last_write = history_pos;
+    if (param->dir == IFTRAF_PKT_DIR_IN) {
+        entry->recv[history_pos] += param->pkt_len;
+        entry->total_recv += param->pkt_len;
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: history_pos: %d, recv : %u, total_recv : %u\n", __func__, history_pos, entry->recv[history_pos], entry->total_recv);
+
+    } else {
+        entry->sent[history_pos] += param->pkt_len;
+        entry->total_sent += param->pkt_len;
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: history_pos: %d: sent : %u, total_sent: %u\n", __func__, history_pos, entry->sent[history_pos], entry->total_sent);
+    }
+}
+
+static inline unsigned iftraf_byif_hashkey(int af,
+					const union inet_addr *addr,
+					portid_t  devid)
+{
+    uint32_t addr_fold;
+
+    addr_fold = inet_addr_fold(af, addr);
+
+    if (!addr_fold) {
+        RTE_LOG(DEBUG, IFTRAF, "%s: IP proto not support.\n", __func__);
+        return 0;
+    }
+
+    return (ntohl(addr_fold) ^ (devid >> IFTRAF_IFTBL_BITS) ^ devid)
+        & IFTRAF_IFTBL_MASK;
+}
+
+static hash_status_enum iftraf_ifentry_get(uint32_t hash, struct iftraf_pkt *param, struct iftraf_entry **out_entry)
+{
+    struct iftraf_entry *entry;
+
+    list_for_each_entry(entry, &iftraf_iftbl[hash], list) {
+        if (inet_addr_equal(param->af, &entry->saddr, &param->saddr)
+            && entry->devid == param->devid
+            && entry->af == param->af) {
+            /* hit */
+            *out_entry = entry;
+            RTE_LOG(DEBUG, IFTRAF,
+                "%s: [hit]\n", __func__);
+            return HASH_STATUS_OK;
+        }
+    }
+    RTE_LOG(DEBUG, IFTRAF,
+        "%s: [not found]\n", __func__);
+
+    return HASH_STATUS_KEY_NOT_FOUND;
+}
+
+static void inline iftraf_iftlb_add(struct iftraf_pkt *param)
+{
+    uint32_t hash;
+    struct iftraf_entry *entry = NULL;
+
+    hash = iftraf_byif_hashkey(param->af, &param->saddr, param->devid);
+
+    if (iftraf_ifentry_get(hash, param, &entry) == HASH_STATUS_KEY_NOT_FOUND) {
+
+        entry = rte_zmalloc(NULL, sizeof(struct iftraf_entry), RTE_CACHE_LINE_SIZE);
+        if (entry == NULL) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: no memory\n", __func__);
+            return;
+        }
+
+        memset(entry, 0, sizeof(struct iftraf_entry));
+        entry->af = param->af;
+        entry->cid = param->cid;
+        entry->devid = param->devid;
+        entry->proto = 0;//param->proto;
+        iftraf_addr_cpy(param->af, &entry->saddr, &param->saddr);
+        iftraf_addr_cpy(param->af, &entry->daddr, &param->daddr);
+        entry->sport = 0;//param->src_port;
+        entry->dport = 0;//param->dst_port;
+        strcpy(entry->ifname, param->ifname);
+
+        list_add(&entry->list, &iftraf_iftbl[hash]);
+    }
+
+    if (param->af == AF_INET) {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s:[v4] dequeue iftraf_ring[cid:%d, proto:%u, devid:%u, ifname:%s,src:%08X, dst:%08X, sp:%u, dp:%u, len:%u]\n",
+            __func__, entry->cid, entry->proto, entry->devid, entry->ifname, entry->saddr.in.s_addr,
+            entry->daddr.in.s_addr, ntohs(entry->sport), ntohs(entry->dport), param->pkt_len);
+    } else {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s:[v6] dequeue iftraf_ring[cid:%d, dir:%d, proto:%u, devid:%u,  src:%08X %08X %08X %08X, dst:%08X %08X %08X %08X, sp:%u, dp:%u, len:%u]\n",
+            __func__, entry->cid, param->dir, entry->proto, entry->devid,
+            entry->saddr.in6.s6_addr32[0], entry->saddr.in6.s6_addr32[1],
+            entry->saddr.in6.s6_addr32[2], entry->saddr.in6.s6_addr32[3],
+            entry->daddr.in6.s6_addr32[0],entry->daddr.in6.s6_addr32[1],
+            entry->daddr.in6.s6_addr32[2],entry->daddr.in6.s6_addr32[3],
+            ntohs(entry->sport), ntohs(entry->dport), param->pkt_len);
+    }
+
+    /* Update record */
+    entry->last_write = history_pos;
+    if (param->dir == IFTRAF_PKT_DIR_IN) {
+        entry->recv[history_pos] += param->pkt_len;
+        entry->total_recv += param->pkt_len;
+        RTE_LOG(DEBUG, IFTRAF,
+        "%s: history_pos: %d, recv : %u, total_recv : %u\n", __func__, history_pos, entry->recv[history_pos], entry->total_recv);
+
+    } else {
+        entry->sent[history_pos] += param->pkt_len;
+        entry->total_sent += param->pkt_len;
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: history_pos: %d: sent : %u, total_sent: %u\n", __func__, history_pos, entry->sent[history_pos], entry->total_sent);
+    }
+}
+
+
+static void iftraf_process_ring(void *dummy)
+{
+    int i;
+    uint16_t nb_rb;
+    lcoreid_t cid;
+    struct iftraf_pkt *param;
+    struct iftraf_pkt *params[NETIF_MAX_PKT_BURST];
+
+    if (likely(iftraf_disable)) {
+        return;
+    }
+
+    iftraf_ticket++;
+    if(iftraf_ticket % IFTRAF_TIME_INTERVAL == 0) {
+        history_rotate();
+        iftraf_ticket = 0;
+    }
+
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        if (!rte_lcore_is_enabled(cid)) {
+            continue;
+        }
+
+        nb_rb = rte_ring_dequeue_burst(iftraf_ring[cid], (void **)params,
+                    NETIF_MAX_PKT_BURST, NULL);
+
+        if (nb_rb > 0) {
+            for (i = 0; i < nb_rb; i++) {
+                param = params[i];
+
+                /* insert into iftraf table */
+                iftraf_tlb_add(param);
+
+                /* insert into iftraf table by if && source ip */
+                iftraf_iftlb_add(param);
+           }
+        }
+    }
+}
+
+static int iftraf_pkt_deliver(int af, struct rte_mbuf *mbuf, struct netif_port *dev, uint8_t dir)
+{
+    int ret;
+    struct iftraf_pkt *pkt;
+    __be16 _ports[2], *ports;
+    lcoreid_t cid = rte_lcore_id();
+    portid_t devid;
+
+    if (af == AF_INET) {
+        struct ipv4_hdr *ip4h = ip4_hdr(mbuf);
+
+        if (unlikely(ip4h->next_proto_id != IPPROTO_TCP &&
+            ip4h->next_proto_id != IPPROTO_UDP)) {
+            RTE_LOG(DEBUG, IFTRAF,
+                "%s: unspported proto[core: %d, proto: %d]\n",
+                __func__, cid, ip4h->next_proto_id);
+            return EDPVS_NOPROT;
+        }
+
+        ports = mbuf_header_pointer(mbuf, ip4_hdrlen(mbuf), sizeof(_ports), _ports);
+        if (!ports) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: invalid pkt[%d, %d]\n",
+                __func__, cid, dir);
+            return EDPVS_INVPKT;
+        }
+
+        pkt = rte_zmalloc("iftraf_inpkt", sizeof(struct iftraf_pkt), RTE_CACHE_LINE_SIZE);
+        if (pkt == NULL) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: no memory[%d, %d]\n",
+                __func__, cid, dir);
+            return EDPVS_NOMEM;
+        }
+
+        if (dev->type == PORT_TYPE_VLAN) {
+            struct vlan_dev_priv *vlan = netif_priv(dev);
+            struct netif_port *real_dev = vlan->real_dev;
+            RTE_LOG(DEBUG, IFTRAF, "%s: id = %u, ifname = %s, type=%d\n",
+                __func__, real_dev->id,real_dev->name,real_dev->type);
+            devid = real_dev->id;
+            strcpy(pkt->ifname, real_dev->name);
+        } else {
+            devid = mbuf->port;
+            strcpy(pkt->ifname, dev->name);
+        }
+
+        pkt->devid = devid;
+        pkt->af = AF_INET;
+        pkt->cid = cid;
+        pkt->dir = dir;
+        pkt->proto = ip4h->next_proto_id;
+        if (dir == IFTRAF_PKT_DIR_IN) {
+            pkt->saddr.in.s_addr = ip4h->src_addr;
+            pkt->daddr.in.s_addr = ip4h->dst_addr;
+            pkt->src_port = ports[0];
+            pkt->dst_port = ports[1];
+        } else {
+            pkt->saddr.in.s_addr = ip4h->dst_addr;
+            pkt->daddr.in.s_addr = ip4h->src_addr;
+            pkt->src_port = ports[1];
+            pkt->dst_port = ports[0];
+        }
+
+        pkt->pkt_len = mbuf->pkt_len;
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s:[v4] enqueued to iftraf_ring[cid:%d, dir:%d, devid:%u, ifname:%s, proto:%u, src:%08X, dst:%08X, sp:%u, dp:%u, len:%u]\n",
+            __func__, cid, dir, pkt->devid, pkt->ifname, pkt->proto, ip4h->src_addr, ip4h->dst_addr, ntohs(pkt->src_port), ntohs(pkt->dst_port), pkt->pkt_len);
+
+    } else if (af == AF_INET6) {
+        struct ip6_hdr *ip6h = ip6_hdr(mbuf);
+        uint8_t ip6nxt = ip6h->ip6_nxt;
+
+        if (unlikely(ip6nxt != IPPROTO_TCP &&
+            ip6nxt != IPPROTO_UDP)) {
+            RTE_LOG(DEBUG, IFTRAF,
+                "%s: unspported proto[core: %d, proto: %d]\n",
+                __func__, cid, ip6nxt);
+            return EDPVS_NOPROT;
+        }
+
+        ports = mbuf_header_pointer(mbuf, ip6_hdrlen(mbuf), sizeof(_ports), _ports);
+        if (!ports) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: invalid pkt[%d, %d]\n",
+                __func__, cid, dir);
+            return EDPVS_INVPKT;
+        }
+
+        pkt = rte_zmalloc("iftraf_inpkt", sizeof(struct iftraf_pkt), RTE_CACHE_LINE_SIZE);
+        if (pkt == NULL) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: no memory[%d, %d]\n",
+                __func__, cid, dir);
+            return EDPVS_NOMEM;
+        }
+
+        if (dev->type == PORT_TYPE_VLAN) {
+            struct vlan_dev_priv *vlan = netif_priv(dev);
+            struct netif_port *real_dev = vlan->real_dev;
+            RTE_LOG(DEBUG, IFTRAF, "%s: id = %u, ifname = %s, type=%d\n",
+                __func__, real_dev->id,real_dev->name,real_dev->type);
+            devid = real_dev->id;
+            strcpy(pkt->ifname, real_dev->name);
+        } else {
+            devid = mbuf->port;
+            strcpy(pkt->ifname, dev->name);
+        }
+
+        pkt->af = AF_INET6;
+        pkt->devid = devid;
+        pkt->cid = cid;
+        pkt->dir = dir;
+        pkt->proto = ip6nxt;
+        if (dir == IFTRAF_PKT_DIR_IN) {
+            pkt->saddr.in6 = ip6h->ip6_src;
+            pkt->daddr.in6 = ip6h->ip6_dst;
+            pkt->src_port = ports[0];
+            pkt->dst_port = ports[1];
+        } else {
+            pkt->saddr.in6 = ip6h->ip6_dst;
+            pkt->daddr.in6 = ip6h->ip6_src;
+            pkt->src_port = ports[1];
+            pkt->dst_port = ports[0];
+        }
+        pkt->pkt_len = mbuf->pkt_len;
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s:[v6] enqueued to iftraf_ring[cid:%d, dir:%d, devid:%u,  proto:%u, src:%08X %08X %08X %08X, dst:%08X %08X %08X %08X, sp:%u, dp:%u, len:%u]\n",
+            __func__, cid, dir, pkt->devid, pkt->proto,
+            pkt->saddr.in6.s6_addr32[0], pkt->saddr.in6.s6_addr32[1],
+            pkt->saddr.in6.s6_addr32[2], pkt->saddr.in6.s6_addr32[3],
+            pkt->daddr.in6.s6_addr32[0],pkt->daddr.in6.s6_addr32[1],
+            pkt->daddr.in6.s6_addr32[2],pkt->daddr.in6.s6_addr32[3],
+            ntohs(pkt->src_port), ntohs(pkt->dst_port), pkt->pkt_len);
+    } else {
+        return EDPVS_INVPKT;
+    }
+
+    ret = rte_ring_enqueue(iftraf_ring[cid], pkt);
+    if (ret < 0) {
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: failed to enqueue iftraf_ring[%d]\n",
+            __func__, cid);
+        rte_free(pkt);
+        return EDPVS_DROP;
+    }
+
+    return EDPVS_OK;
+}
+
+int iftraf_pkt_in(int af, struct rte_mbuf *mbuf, struct netif_port *dev)
+{
+    if (likely(iftraf_disable)) {
+        return EDPVS_OK;
+    }
+
+    this_inpkts_count++;
+    if (this_inpkts_count % IFTRAF_INTERVAL == 0) {
+        iftraf_pkt_deliver(af, mbuf, dev, IFTRAF_PKT_DIR_IN);
+    }
+
+    return EDPVS_OK;
+}
+
+int iftraf_pkt_out(int af, struct rte_mbuf *mbuf, struct netif_port *dev)
+{
+    if (likely(iftraf_disable)) {
+        return EDPVS_OK;
+    }
+
+    this_outpkts_count++;
+    if (this_outpkts_count % IFTRAF_INTERVAL == 0) {
+        iftraf_pkt_deliver(af, mbuf, dev, IFTRAF_PKT_DIR_OUT);
+    }
+
+    return EDPVS_OK;
+}
+
+
+/*
+ * master core allocates iftraf rings with the other lcores espectively.
+ */
+static int iftraf_ring_create(void)
+{
+    char name_buf[RTE_RING_NAMESIZE];
+    int socket_id;
+    lcoreid_t cid, ccid;
+
+    socket_id = rte_socket_id();
+
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        if (!rte_lcore_is_enabled(cid)) {
+            continue;
+        }
+
+        snprintf(name_buf, RTE_RING_NAMESIZE,
+            "iftraf_ring[%d]", cid);
+
+        iftraf_ring[cid] =
+            rte_ring_create(name_buf, IFTRAF_RING_SIZE, socket_id,
+                            RING_F_SP_ENQ | RING_F_SC_DEQ);
+
+        if (!iftraf_ring[cid]) {
+            RTE_LOG(ERR, IFTRAF,
+                "%s: failed to create iftraf_ring[%d]\n",
+                 __func__, cid);
+            for (ccid = 0; ccid < cid; ccid++) {
+                if (iftraf_ring[ccid])
+                    rte_ring_free(iftraf_ring[ccid]);
+            }
+            return EDPVS_NOMEM;
+        }
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: success to create iftraf_ring[%d]\n",
+            __func__, cid);
+    }
+
+    return EDPVS_OK;
+}
+
+static int iftraf_enable_func(void)
+{
+    int i;
+    int err;
+    lcoreid_t cid;
+
+    if (iftraf_disable == false) {
+        return EDPVS_OK;
+    }
+
+    err = iftraf_ring_create();
+    if (err != EDPVS_OK) {
+        return err;
+    }
+
+    iftraf_tbl = rte_malloc_socket(NULL, sizeof(struct list_head) * IFTRAF_TBL_SIZE,
+                    RTE_CACHE_LINE_SIZE, rte_socket_id());
+
+    if (!iftraf_tbl) {
+        RTE_LOG(ERR, IFTRAF,
+            "%s: rte_malloc_socket null\n",
+            __func__);
+        goto tbl_fail;
+    }
+
+    for (i = 0; i < IFTRAF_TBL_SIZE; i++)
+        INIT_LIST_HEAD(&iftraf_tbl[i]);
+
+    iftraf_iftbl = rte_malloc_socket(NULL, sizeof(struct list_head) * IFTRAF_IFTBL_SIZE,
+                      RTE_CACHE_LINE_SIZE, rte_socket_id());
+
+    if (!iftraf_iftbl) {
+        RTE_LOG(ERR, IFTRAF,
+            "%s: rte_malloc_socket null\n",
+            __func__);
+        goto iftbl_fail;
+    }
+
+    for (i = 0; i < IFTRAF_IFTBL_SIZE; i++)
+        INIT_LIST_HEAD(&iftraf_iftbl[i]);
+
+    iftraf_disable = false;
+    RTE_LOG(INFO, IFTRAF,
+        "%s: %s\n", __func__, "iftraf enabled");
+
+    return EDPVS_OK;
+
+iftbl_fail:
+    if (iftraf_tbl)
+        rte_free(iftraf_tbl);
+
+tbl_fail:
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        if (!rte_lcore_is_enabled(cid)) {
+            continue;
+        }
+        if (iftraf_ring[cid])
+            rte_ring_free(iftraf_ring[cid]);
+        }
+
+    return EDPVS_NOMEM;
+}
+
+static void iftraf_variable_reset(void)
+{
+    history_pos = 0;
+    this_inpkts_count = 0;
+    this_outpkts_count = 0;
+}
+
+static void iftraf_ring_free(void)
+{
+    lcoreid_t cid;
+
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        if (!rte_lcore_is_enabled(cid)) {
+             continue;
+        }
+        if (iftraf_ring[cid]) {
+            rte_ring_free(iftraf_ring[cid]);
+        }
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: iftraf_ring free[%d]\n",
+            __func__, cid);
+    }
+}
+
+
+static int iftraf_disable_func(void)
+{
+    uint32_t hash;
+    int i;
+    uint16_t nb_rb;
+    lcoreid_t cid;
+    struct iftraf_pkt *param;
+    struct iftraf_pkt *params[NETIF_MAX_PKT_BURST];
+    struct iftraf_entry *entry, *nxt;
+    int count = 0;
+
+    if (iftraf_disable == true) {
+        return EDPVS_OK;
+    }
+
+    iftraf_disable = true;
+
+    /* dequeue iftraf ring and free elements */
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        if (!rte_lcore_is_enabled(cid)) {
+            continue;
+        }
+
+        nb_rb = rte_ring_dequeue_burst(iftraf_ring[cid], (void **)params,
+                    NETIF_MAX_PKT_BURST, NULL);
+
+        while (nb_rb > 0) {
+            count += nb_rb;
+            for (i = 0; i < nb_rb; i++) {
+                param = params[i];
+                rte_free(param);
+            }
+
+            nb_rb = rte_ring_dequeue_burst(iftraf_ring[cid], (void **)params,
+                        NETIF_MAX_PKT_BURST, NULL);
+        }
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: iftraf ring[%d] free [%d] pkts\n",
+            __func__, cid, count);
+
+        count = 0;
+
+    }
+
+    /* free iftraf ring */
+    iftraf_ring_free();
+
+    /* free tlb */
+    if (iftraf_tbl) {
+        count = 0;
+        /* delete and free all entry added to iftraf_tbl */
+        for(hash = 0; hash < IFTRAF_TBL_SIZE; hash++) {
+            list_for_each_entry_safe(entry, nxt, &iftraf_tbl[hash], list) {
+                list_del(&entry->list);
+                rte_free(entry);
+                count++;
+            }
+        }
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: iftraf_tbl free [%d]\n",
+            __func__, count);
+
+        rte_free(iftraf_tbl);
+    }
+
+    /* free tlb */
+    if (iftraf_iftbl) {
+        count = 0;
+        /* delete and free all entry added to iftraf_tbl */
+        for(hash = 0; hash < IFTRAF_IFTBL_SIZE; hash++) {
+            list_for_each_entry_safe(entry, nxt, &iftraf_iftbl[hash], list) {
+                list_del(&entry->list);
+                rte_free(entry);
+                count++;
+            }
+        }
+
+        RTE_LOG(DEBUG, IFTRAF,
+            "%s: iftraf_iftbl free [%d]\n",
+            __func__, count);
+
+        rte_free(iftraf_iftbl);
+    }
+
+    iftraf_variable_reset();
+    RTE_LOG(INFO, IFTRAF,
+        "%s: %s\n", __func__, "iftraf disabled");
+
+    return EDPVS_OK;
+}
+
+static void iftraf_sorted_list_init(void) {
+    portid_t devid = 0;
+    sorted_list_initialise(&iftraf_sorted_list);
+
+    for (devid = 0; devid < NETIF_MAX_PORTS; devid++) {
+        sorted_list_initialise(&sorted_list[devid]);
+    }
+}
+
+static int iftraf_sockopt_set(sockoptid_t opt, const void *conf, size_t size)
+{
+     switch (opt) {
+     case SOCKOPT_SET_IFTRAF_ADD:
+          return iftraf_enable_func();
+     case SOCKOPT_SET_IFTRAF_DEL:
+          return iftraf_disable_func();
+
+     default:
+          return EDPVS_NOTSUPP;
+     }
+}
+
+
+static struct dpvs_sockopts iftraf_sockopts = {
+    .version        = SOCKOPT_VERSION,
+    .set_opt_min    = SOCKOPT_SET_IFTRAF_ADD,
+    .set_opt_max    = SOCKOPT_SET_IFTRAF_DEL,
+    .set            = iftraf_sockopt_set,
+    .get_opt_min    = SOCKOPT_GET_IFTRAF_SHOW,
+    .get_opt_max    = SOCKOPT_GET_IFTRAF_SHOW,
+    .get            = iftraf_sockopt_get,
+};
+
+static struct dpvs_lcore_job iftraf_job = {
+    .func = iftraf_process_ring,
+    .data = NULL,
+    .type = LCORE_JOB_LOOP,
+};
+
+int iftraf_init(void)
+{
+    int err;
+
+    iftraf_disable = true;
+
+    iftraf_tlb_rnd = (uint32_t)random();
+
+    iftraf_sorted_list_init();
+
+    snprintf(iftraf_job.name, sizeof(iftraf_job.name), "%s", "iftraf_ring_proc");
+    if ((err = dpvs_lcore_job_register(&iftraf_job, LCORE_ROLE_MASTER)) != EDPVS_OK)
+        return err;
+
+    if ((err = sockopt_register(&iftraf_sockopts)) != EDPVS_OK) {
+        dpvs_lcore_job_unregister(&iftraf_job, LCORE_ROLE_MASTER);
+        return err;
+    }
+
+    return EDPVS_OK;
+}
+
+int iftraf_term(void)
+{
+    int err;
+
+    err = sockopt_unregister(&iftraf_sockopts);
+    if (err != EDPVS_OK)
+        return err;
+
+    err = iftraf_disable_func();
+    if (err != EDPVS_OK)
+        return err;
+
+    dpvs_lcore_job_unregister(&iftraf_job, LCORE_ROLE_MASTER);
+
+    return EDPVS_OK;
+}
diff --git a/src/ipv4_frag.c b/src/ipv4_frag.c
index fdcd119ba..b4aabad32 100644
--- a/src/ipv4_frag.c
+++ b/src/ipv4_frag.c
@@ -25,6 +25,7 @@
 #include "ipv4_frag.h"
 #include "icmp.h"
 #include "parser/parser.h"
+#include "scheduler.h"
 
 #define IP4FRAG
 #define RTE_LOGTYPE_IP4FRAG RTE_LOGTYPE_USER1
@@ -364,7 +365,7 @@ static void ipv4_frag_job(void *arg)
     return;
 }
 
-static struct netif_lcore_loop_job frag_job;
+static struct dpvs_lcore_job frag_job;
 
 int ipv4_frag_init(void)
 {
@@ -412,9 +413,9 @@ int ipv4_frag_init(void)
     snprintf(frag_job.name, sizeof(frag_job.name) - 1, "%s", "ipv4_frag");
     frag_job.func = ipv4_frag_job;
     frag_job.data = NULL;
-    frag_job.type = NETIF_LCORE_JOB_SLOW;
+    frag_job.type = LCORE_JOB_SLOW;
     frag_job.skip_loops = IP4_FRAG_FREE_DEATH_ROW_INTERVAL;
-    err = netif_lcore_loop_job_register(&frag_job);
+    err = dpvs_lcore_job_register(&frag_job, LCORE_ROLE_FWD_WORKER);
     if (err != EDPVS_OK) {
         RTE_LOG(ERR, IP4FRAG, "fail to register loop job.\n");
         return err;
@@ -427,7 +428,7 @@ int ipv4_frag_term(void)
 {
     int err;
 
-    err = netif_lcore_loop_job_unregister(&frag_job);
+    err = dpvs_lcore_job_unregister(&frag_job, LCORE_ROLE_FWD_WORKER);
     if (err != EDPVS_OK) {
         RTE_LOG(ERR, IP4FRAG, "fail to unregister loop job.\n");
         return err;
diff --git a/src/log.c b/src/log.c
index c8e744ddb..2277f21a0 100644
--- a/src/log.c
+++ b/src/log.c
@@ -7,6 +7,7 @@
 #include "log.h"
 #include "common.h"
 #include "dpdk.h"
+#include "global_data.h"
 
 int g_dpvs_log_thread_ready = 0;
 int g_dpvs_log_time_off = 0;
@@ -138,7 +139,8 @@ static int dpvs_async_log(uint32_t level, uint32_t logtype, lcoreid_t cid, char
 
     log_hash_new = log_BKDRHash(log+off, len);
     if (log_hash_new == log_stats_info[cid].log_hash
-            && (rte_get_timer_cycles()-log_stats_info[cid].log_begin) < log_internal*rte_get_timer_hz()){
+            && (rte_get_timer_cycles() - log_stats_info[cid].log_begin)
+            < log_internal * g_cycles_per_sec) {
         log_stats_info[cid].missed++;
         return -1;
     }
@@ -193,10 +195,10 @@ int dpvs_log(uint32_t level, uint32_t logtype, const char *func, int line, const
         cid = rte_lcore_id();
         if (log_stats_info[cid].slow) {
             /* set log limit rate to 5 sec and keep for 10 mins */
-            if (rte_get_timer_cycles() - log_stats_info[cid].slow_begin > LOG_SLOW_INTERNAL_TIME * rte_get_timer_hz()) {
+            if (rte_get_timer_cycles() - log_stats_info[cid].slow_begin > LOG_SLOW_INTERNAL_TIME * g_cycles_per_sec) {
                 log_stats_info[cid].slow = 0;
             }
-            if ((rte_get_timer_cycles() - log_stats_info[cid].log_begin) < log_internal * rte_get_timer_hz()) {
+            if ((rte_get_timer_cycles() - log_stats_info[cid].log_begin) < log_internal * g_cycles_per_sec) {
                 log_stats_info[cid].missed++;
                 break;
             }
@@ -232,7 +234,7 @@ static int log_buf_timeout_flush(FILE *f, int timeout)
 
     now = rte_get_timer_cycles();
 
-    if (w_buf.pos && ((now - w_buf.time) >= timeout * rte_get_timer_hz())) {
+    if (w_buf.pos && ((now - w_buf.time) >= timeout * g_cycles_per_sec)) {
         log_buf_flush(f);
     }
     return 0;
diff --git a/src/main.c b/src/main.c
index 0b12c5514..e2cde3ea0 100644
--- a/src/main.c
+++ b/src/main.c
@@ -36,6 +36,7 @@
 #include "sys_time.h"
 #include "route6.h"
 #include "iftraf.h"
+#include "scheduler.h"
 
 #define DPVS    "dpvs"
 #define RTE_LOGTYPE_DPVS RTE_LOGTYPE_USER1
@@ -147,10 +148,6 @@ int main(int argc, char *argv[])
     char pql_conf_buf[LCORE_CONF_BUFFER_LEN];
     int pql_conf_buf_len = LCORE_CONF_BUFFER_LEN;
 
-    int timer_sched_interval_us;
-    uint64_t cycles_per_sec;
-    uint64_t now_cycles, prev_cycles;
-
     /**
      * add application agruments parse before EAL ones.
      * use it like the following:
@@ -199,20 +196,25 @@ int main(int argc, char *argv[])
     /* initialize packet capture framework */
     err = rte_pdump_init(NULL);
     if (err < 0) {
-        rte_exit(EXIT_FAILURE, "Fail init dpdk pdump framework\n");
+        rte_exit(EXIT_FAILURE, "Fail to init dpdk pdump framework\n");
     }
 #endif
+    if ((err = dpvs_scheduler_init()) != EDPVS_OK)
+        rte_exit(EXIT_FAILURE, "Fail to init dpvs scheduler\n");
+
+    if ((err = global_data_init()) != EDPVS_OK)
+        rte_exit(EXIT_FAILURE, "Fail to init global data\n");
 
     if ((err = cfgfile_init()) != EDPVS_OK)
-        rte_exit(EXIT_FAILURE, "Fail init configuration file: %s\n",
+        rte_exit(EXIT_FAILURE, "Fail to init configuration file: %s\n",
                  dpvs_strerror(err));
 
     if ((err = netif_virtual_devices_add()) != EDPVS_OK)
-        rte_exit(EXIT_FAILURE, "Fail add virtual devices:%s\n",
+        rte_exit(EXIT_FAILURE, "Fail to add virtual devices:%s\n",
                  dpvs_strerror(err));
 
     if ((err = dpvs_timer_init()) != EDPVS_OK)
-        rte_exit(EXIT_FAILURE, "Fail init timer on %s\n", dpvs_strerror(err));
+        rte_exit(EXIT_FAILURE, "Fail to init timer on %s\n", dpvs_strerror(err));
 
     if ((err = tc_init()) != EDPVS_OK)
         rte_exit(EXIT_FAILURE, "Fail to init traffic control: %s\n",
@@ -273,47 +275,19 @@ int main(int argc, char *argv[])
     RTE_LOG(INFO, DPVS, "\nport-queue-lcore relation array: \n%s\n",
             pql_conf_buf);
 
-    /* start data plane threads */
-    netif_lcore_start();
-
     log_slave_init();
+
+    /* start slave worker threads */
+    dpvs_lcore_start(0);
+
     /* write pid file */
     if (!pidfile_write(DPVS_PIDFILE, getpid()))
         goto end;
 
-    timer_sched_interval_us = dpvs_timer_sched_interval_get();
-    cycles_per_sec = rte_get_timer_hz();
-    prev_cycles = 0;
-    assert(timer_sched_interval_us > 0);
-
     dpvs_state_set(DPVS_STATE_NORMAL);
 
-    /* start control plane thread */
-    while (1) {
-        /* reload configuations if reload flag is set */
-        try_reload();
-        /* IPC loop */
-        sockopt_ctl(NULL);
-        /* msg loop */
-        msg_master_process(0);
-        /* timer */
-        now_cycles = rte_get_timer_cycles();
-        if ((now_cycles - prev_cycles) * 1000000 / cycles_per_sec > timer_sched_interval_us) {
-            rte_timer_manage();
-            prev_cycles = now_cycles;
-        }
-        /* kni */
-        kni_process_on_master();
-
-        /* process mac ring on master */
-        neigh_process_ring(NULL);
-
-        /* process iftraf ring */
-        iftraf_process_ring();
-
-        /* increase loop counts */
-        netif_update_master_loop_cnt();
-    }
+    /* start control plane thread loop */
+    dpvs_lcore_start(1);
 
 end:
     dpvs_state_set(DPVS_STATE_FINISH);
@@ -341,6 +315,11 @@ int main(int argc, char *argv[])
     if ((err = cfgfile_term()) != 0)
         RTE_LOG(ERR, DPVS, "Fail to term configuration file: %s\n",
                 dpvs_strerror(err));
+    if ((err = global_data_term()) != 0)
+        RTE_LOG(ERR, DPVS, "Fail to clean global data\n");
+    if ((err = dpvs_scheduler_term()) != 0)
+        RTE_LOG(ERR, DPVS, "Fail to term dpvs scheduler\n");
+
 #ifdef CONFIG_DPVS_PDUMP
     if ((err = rte_pdump_uninit()) != 0) {
         RTE_LOG(ERR, DPVS, "Fail to uninitialize dpdk pdump framework.\n");
diff --git a/src/neigh.c b/src/neigh.c
index cb9b048c7..b8ea95036 100644
--- a/src/neigh.c
+++ b/src/neigh.c
@@ -31,6 +31,7 @@
 #include "ctrl.h"
 #include "ndisc.h"
 #include "conf/neigh.h"
+#include "scheduler.h"
 
 #define NEIGH_ENTRY_BUFF_SIZE_DEF 128
 #define NEIGH_ENTRY_BUFF_SIZE_MIN 16
@@ -747,7 +748,7 @@ static struct raw_neigh* neigh_ring_clone_param(const struct dp_vs_neigh_conf *p
  *1, master core static neighbour sync slave core;
  *2, ipv6 slave core sync slave core when recieve ns/na
  */
-void neigh_process_ring(void *arg)
+static void neigh_process_ring(void *arg)
 {
     struct raw_neigh *params[NETIF_MAX_PKT_BURST];
     uint16_t nb_rb;
@@ -1041,7 +1042,8 @@ static struct dpvs_sockopts neigh_sockopts = {
     .set         = neigh_sockopt_set,
 };
 
-static struct netif_lcore_loop_job neigh_sync_job;
+#define NEIGH_LCORE_JOB_MAX     2
+static struct dpvs_lcore_job neigh_jobs[NEIGH_LCORE_JOB_MAX];
 
 static int arp_init(void)
 {
@@ -1066,13 +1068,19 @@ static int arp_init(void)
     neigh_ring_init();
 
     /*get static arp entry from master*/
-    snprintf(neigh_sync_job.name, sizeof(neigh_sync_job.name) - 1, "%s", "neigh_sync");
-    neigh_sync_job.func = neigh_process_ring;
-    neigh_sync_job.data = NULL;
-    neigh_sync_job.type = NETIF_LCORE_JOB_SLOW;
-    neigh_sync_job.skip_loops = NEIGH_PROCESS_MAC_RING_INTERVAL;
-    err = netif_lcore_loop_job_register(&neigh_sync_job);
-    if (err != EDPVS_OK)
+    snprintf(neigh_jobs[0].name, sizeof(neigh_jobs[0].name) - 1, "%s", "neigh_sync");
+    neigh_jobs[0].func = neigh_process_ring;
+    neigh_jobs[0].data = NULL;
+    neigh_jobs[0].type = LCORE_JOB_SLOW;
+    neigh_jobs[0].skip_loops = NEIGH_PROCESS_MAC_RING_INTERVAL;
+    if ((err = dpvs_lcore_job_register(&neigh_jobs[0], LCORE_ROLE_FWD_WORKER)) != EDPVS_OK)
+        return err;
+
+    snprintf(neigh_jobs[1].name, sizeof(neigh_jobs[1].name) - 1, "%s", "neigh_sync");
+    neigh_jobs[1].func = neigh_process_ring;
+    neigh_jobs[1].data = NULL;
+    neigh_jobs[1].type = LCORE_JOB_LOOP;
+    if ((err = dpvs_lcore_job_register(&neigh_jobs[1], LCORE_ROLE_MASTER)) != EDPVS_OK)
         return err;
 
     return EDPVS_OK;
@@ -1117,5 +1125,8 @@ int neigh_term(void)
 {
     unregister_stats_cb();
 
+    dpvs_lcore_job_unregister(&neigh_jobs[0], LCORE_ROLE_FWD_WORKER);
+    dpvs_lcore_job_unregister(&neigh_jobs[1], LCORE_ROLE_MASTER);
+
     return EDPVS_OK;
 }
diff --git a/src/netif.c b/src/netif.c
index a6328c9f2..277da8de3 100644
--- a/src/netif.c
+++ b/src/netif.c
@@ -37,6 +37,7 @@
 #include "timer.h"
 #include "parser/parser.h"
 #include "neigh.h"
+#include "scheduler.h"
 
 #include <rte_arp.h>
 #include <netinet/in.h>
@@ -77,8 +78,6 @@ static portid_t port_id_end = 0;
 
 static uint16_t g_nports;
 
-static uint64_t cycles_per_sec;
-
 #define NETIF_BOND_MODE_DEF     BONDING_MODE_ROUND_ROBIN
 
 struct port_conf_stream {
@@ -1056,54 +1055,6 @@ static struct pkt_type *pkt_type_get(uint16_t type, struct netif_port *port)
     return NULL;
 }
 
-/****************************************** lcore job *********************************************/
-/* Note: lockless, lcore_job can only be register on initialization stage and
- *       unregistered on cleanup stage.
- */
-struct list_head netif_lcore_jobs[NETIF_LCORE_JOB_TYPE_MAX];
-
-static inline void netif_lcore_jobs_init(void)
-{
-    int ii;
-    for (ii = 0; ii < NETIF_LCORE_JOB_TYPE_MAX; ii++) {
-        INIT_LIST_HEAD(&netif_lcore_jobs[ii]);
-    }
-}
-
-int netif_lcore_loop_job_register(struct netif_lcore_loop_job *lcore_job)
-{
-    struct netif_lcore_loop_job *cur;
-    if (unlikely(NULL == lcore_job))
-        return EDPVS_INVAL;
-
-    list_for_each_entry(cur, &netif_lcore_jobs[lcore_job->type], list) {
-        if (cur == lcore_job) {
-            return EDPVS_EXIST;
-        }
-    }
-
-    if (unlikely(NETIF_LCORE_JOB_SLOW == lcore_job->type && lcore_job->skip_loops <= 0))
-        return EDPVS_INVAL;
-
-    list_add_tail(&lcore_job->list, &netif_lcore_jobs[lcore_job->type]);
-    return EDPVS_OK;
-}
-
-int netif_lcore_loop_job_unregister(struct netif_lcore_loop_job *lcore_job)
-{
-    struct netif_lcore_loop_job *cur;
-    if (unlikely(NULL == lcore_job))
-        return EDPVS_INVAL;
-
-    list_for_each_entry(cur, &netif_lcore_jobs[lcore_job->type], list) {
-        if (cur == lcore_job) {
-            list_del_init(&cur->list);
-            return EDPVS_OK;
-        }
-    }
-    return EDPVS_NOTEXIST;
-}
-
 /*************************** function declared for kni ********************************************/
 static void kni_ingress(struct rte_mbuf *mbuf, struct netif_port *dev,
                         struct netif_queue_conf *qconf);
@@ -1312,6 +1263,43 @@ static void netif_get_isol_rx_lcores(uint8_t *nb, uint64_t *mask)
         *mask = isol_lcore_mask;
 }
 
+static void lcore_role_init(void)
+{
+    int i, cid, lcore_max_count;
+
+    lcore_max_count = rte_lcore_count();
+    if (lcore_max_count > DPVS_MAX_LCORE)
+        lcore_max_count = DPVS_MAX_LCORE;
+    else
+        for (cid = lcore_max_count; cid < DPVS_MAX_LCORE; cid++)
+            g_lcore_role[cid] = LCORE_ROLE_MAX;  // invalidate nonexistent lcores
+    for (cid = 0; cid < lcore_max_count; cid++)
+        if (!rte_lcore_is_enabled(cid))
+            g_lcore_role[cid] = LCORE_ROLE_MAX;  // invalidate disabled lcores
+
+    cid = rte_get_master_lcore();
+    assert(g_lcore_role[cid] == LCORE_ROLE_IDLE);
+    g_lcore_role[cid] = LCORE_ROLE_MASTER;
+
+    i = 0;
+    while (lcore_conf[i].nports > 0) {
+        cid = lcore_conf[i].id;
+        assert(g_lcore_role[cid] == LCORE_ROLE_IDLE);
+        g_lcore_role[cid] = LCORE_ROLE_FWD_WORKER;
+        i++;
+    }
+
+    for (cid = 0; cid < lcore_max_count; cid++) {
+        if (!list_empty(&isol_rxq_tab[cid])) {
+            assert(g_lcore_role[cid] == LCORE_ROLE_IDLE);
+            g_lcore_role[cid] =  LCORE_ROLE_ISOLRX_WORKER;
+        }
+    }
+
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++)
+        printf("[%02d]\t\t\t%s\n", cid, dpvs_lcore_role_str(g_lcore_role[cid]));
+}
+
 static inline void netif_copy_lcore_stats(struct netif_lcore_stats *stats)
 {
     lcoreid_t cid;
@@ -1545,7 +1533,7 @@ static void isol_rxq_del(struct rx_partner *isol_rxq, bool force)
     isol_rxq = NULL;
 }
 
-inline static void recv_on_isol_lcore(void)
+inline static void recv_on_isol_lcore(void *dump)
 {
     struct rx_partner *isol_rxq;
     struct rte_mbuf *mbufs[NETIF_MAX_PKT_BURST];
@@ -1579,20 +1567,6 @@ inline static bool is_isol_rxq_lcore(lcoreid_t cid)
     return !list_empty(&isol_rxq_tab[cid]);
 }
 
-static void try_isol_rxq_lcore_loop(void)
-{
-    lcoreid_t cid = rte_lcore_id();
-
-    if (!is_isol_rxq_lcore(cid))
-        return;
-    RTE_LOG(INFO, NETIF, "isolate packet recieving on lcore%d !!!\n", cid);
-
-    while (1) {
-        recv_on_isol_lcore();
-        lcore_stats[cid].lcore_loop++;
-    }
-}
-
 static inline uint16_t netif_rx_burst(portid_t pid, struct netif_queue_conf *qconf)
 {
     struct rte_mbuf *mbuf;
@@ -2460,15 +2434,21 @@ static void lcore_job_timer_manage(void *args)
     uint64_t now = rte_get_timer_cycles();
     portid_t cid = rte_lcore_id();
 
-    if (unlikely((now - tm_manager_time[cid]) * 1000000 / cycles_per_sec
+    if (unlikely((now - tm_manager_time[cid]) * 1000000 / g_cycles_per_sec
             > timer_sched_interval_us)) {
         rte_timer_manage();
         tm_manager_time[cid] = now;
     }
 }
 
-#define NETIF_JOB_COUNT 3
-struct netif_lcore_loop_job netif_jobs[NETIF_JOB_COUNT];
+static void kni_process_on_master(void *dummy);
+
+#define NETIF_JOB_MAX   6
+struct dpvs_lcore_job_array {
+    struct dpvs_lcore_job job;
+    dpvs_lcore_role_t role;
+} netif_jobs[NETIF_JOB_MAX];
+
 static void netif_lcore_init(void)
 {
     int ii, res;
@@ -2498,25 +2478,51 @@ static void netif_lcore_init(void)
     /* build port fast searching table */
     port_index_init();
 
+    /* assign lcore roles */
+    lcore_role_init();
+
     /* register lcore jobs*/
-    snprintf(netif_jobs[0].name, sizeof(netif_jobs[0].name) - 1, "%s", "recv_fwd");
-    netif_jobs[0].func = lcore_job_recv_fwd;
-    netif_jobs[0].data = NULL;
-    netif_jobs[0].type = NETIF_LCORE_JOB_LOOP;
-    snprintf(netif_jobs[1].name, sizeof(netif_jobs[1].name) - 1, "%s", "xmit");
-    netif_jobs[1].func = lcore_job_xmit;
-    netif_jobs[1].data = NULL;
-    netif_jobs[1].type = NETIF_LCORE_JOB_LOOP;
-    snprintf(netif_jobs[2].name, sizeof(netif_jobs[2].name) - 1, "%s", "timer_manage");
-    netif_jobs[2].func = lcore_job_timer_manage;
-    netif_jobs[2].data = NULL;
-    netif_jobs[2].type = NETIF_LCORE_JOB_LOOP;
-
-    for (ii = 0; ii < NETIF_JOB_COUNT; ii++) {
-        res = netif_lcore_loop_job_register(&netif_jobs[ii]);
+    netif_jobs[0].role = LCORE_ROLE_FWD_WORKER;
+    snprintf(netif_jobs[0].job.name, sizeof(netif_jobs[0].job.name) - 1, "%s", "recv_fwd");
+    netif_jobs[0].job.func = lcore_job_recv_fwd;
+    netif_jobs[0].job.data = NULL;
+    netif_jobs[0].job.type = LCORE_JOB_LOOP;
+
+    netif_jobs[1].role = LCORE_ROLE_FWD_WORKER;
+    snprintf(netif_jobs[1].job.name, sizeof(netif_jobs[1].job.name) - 1, "%s", "xmit");
+    netif_jobs[1].job.func = lcore_job_xmit;
+    netif_jobs[1].job.data = NULL;
+    netif_jobs[1].job.type = LCORE_JOB_LOOP;
+
+    netif_jobs[2].role = LCORE_ROLE_FWD_WORKER;
+    snprintf(netif_jobs[2].job.name, sizeof(netif_jobs[2].job.name) - 1, "%s", "timer_manage");
+    netif_jobs[2].job.func = lcore_job_timer_manage;
+    netif_jobs[2].job.data = NULL;
+    netif_jobs[2].job.type = LCORE_JOB_LOOP;
+
+    netif_jobs[3].role = LCORE_ROLE_ISOLRX_WORKER;
+    snprintf(netif_jobs[3].job.name, sizeof(netif_jobs[3].job.name) - 1, "%s", "isol_pkt_rcv");
+    netif_jobs[3].job.func = recv_on_isol_lcore;
+    netif_jobs[3].job.data = NULL;
+    netif_jobs[3].job.type = LCORE_JOB_LOOP;
+
+    netif_jobs[4].role = LCORE_ROLE_MASTER;
+    snprintf(netif_jobs[4].job.name, sizeof(netif_jobs[4].job.name) - 1, "%s", "timer_manage");
+    netif_jobs[4].job.func = lcore_job_timer_manage;
+    netif_jobs[4].job.data = NULL;
+    netif_jobs[4].job.type = LCORE_JOB_LOOP;
+
+    netif_jobs[5].role = LCORE_ROLE_MASTER;
+    snprintf(netif_jobs[5].job.name, sizeof(netif_jobs[5].job.name) - 1, "%s", "kni_master_proc");
+    netif_jobs[5].job.func = kni_process_on_master;
+    netif_jobs[5].job.data = NULL;
+    netif_jobs[5].job.type = LCORE_JOB_LOOP;
+
+    for (ii = 0; ii < NETIF_JOB_MAX; ii++) {
+        res = dpvs_lcore_job_register(&netif_jobs[ii].job, netif_jobs[ii].role);
         if (res < 0) {
-            rte_exit(EXIT_FAILURE,
-                    "[%s] Fail to register netif lcore jobs, exiting ...\n", __func__);
+            rte_exit(EXIT_FAILURE, "%s: fail to register lcore job '%s', exiting ...\n",
+                    __func__, netif_jobs[ii].job.name);
             break;
         }
     }
@@ -2526,9 +2532,10 @@ static inline void netif_lcore_cleanup(void)
 {
     int ii;
 
-    for (ii = 0; ii < NETIF_JOB_COUNT; ii++) {
-        if (netif_lcore_loop_job_unregister(&netif_jobs[ii]) < 0)
-            RTE_LOG(WARNING, NETIF, "[%s] Fail to unregister netif lcore jobs\n", __func__);
+    for (ii = 0; ii < NETIF_JOB_MAX; ii++) {
+        if (dpvs_lcore_job_unregister(&netif_jobs[ii].job, netif_jobs[ii].role) < 0)
+            RTE_LOG(WARNING, NETIF, "%s: fail to unregister lcore job '%s'\n",
+                    __func__, netif_jobs[ii].job.name);
     }
 }
 
@@ -2639,7 +2646,7 @@ static void kni_send2port_loop(struct netif_port *port)
         netif_xmit(kni_pkts_burst[i], port);
 }
 
-void kni_process_on_master(void)
+static void kni_process_on_master(void *dummy)
 {
     struct netif_port *dev;
     portid_t id;
@@ -3991,135 +3998,8 @@ inline static void netif_port_init(const struct rte_eth_conf *conf)
 }
 
 /******************************************* module ***********************************************/
-void netif_update_master_loop_cnt(void)
-{
-    lcoreid_t cid = rte_get_master_lcore();
-    lcore_stats[cid].lcore_loop++;
-}
-
-#ifdef CONFIG_RECORD_BIG_LOOP
-#define BIG_LOOP_THRESH 2000 // 2000 us
-static uint32_t longest_lcore_loop[DPVS_MAX_LCORE] = { 0 };
-
-static void print_job_time(char *buf, size_t len)
-{
-    assert(buf);
-    size_t pos = 0;
-    struct netif_lcore_loop_job *job;
-    lcoreid_t cid;
-
-    memset(buf, 0, len);
-    cid = rte_lcore_id();
 
-    list_for_each_entry(job, &netif_lcore_jobs[NETIF_LCORE_JOB_INIT], list) {
-        if (unlikely(pos + 1 >= len))
-            return;
-        snprintf(buf + pos, len - pos - 1, "%s=%d ",
-                job->name, job->job_time[cid]);
-        pos = strlen(buf);
-    }
-
-    list_for_each_entry(job, &netif_lcore_jobs[NETIF_LCORE_JOB_LOOP], list) {
-        if (unlikely(pos + 1 >= len))
-            return;
-        snprintf(buf + pos, len - pos - 1, "%s=%d ",
-                job->name, job->job_time[cid]);
-        pos = strlen(buf);
-    }
-
-    list_for_each_entry(job, &netif_lcore_jobs[NETIF_LCORE_JOB_SLOW], list) {
-        if (unlikely(pos + 1 >= len))
-            return;
-        snprintf(buf + pos, len - pos - 1, "%s=%d ",
-                job->name, job->job_time[cid]);
-        pos = strlen(buf);
-    }
-}
-#endif
-
-static inline void do_lcore_job(struct netif_lcore_loop_job *job)
-{
-#ifdef CONFIG_RECORD_BIG_LOOP
-    uint64_t job_start, job_end;
-    job_start = rte_get_timer_cycles();
-#endif
-
-    job->func(job->data);
-
-#ifdef CONFIG_RECORD_BIG_LOOP
-    job_end = rte_get_timer_cycles();
-    job->job_time[rte_lcore_id()] = (job_end - job_start) * 1E6 / cycles_per_sec;
-#endif
-}
-
-static uint32_t netif_loop_tick[DPVS_MAX_LCORE] = { 0 };
-
-static int netif_loop(void *dummy)
-{
-    struct netif_lcore_loop_job *job;
-    lcoreid_t cid = rte_lcore_id();
-#ifdef CONFIG_RECORD_BIG_LOOP
-    char buf[512];
-    uint32_t loop_time;
-    uint64_t loop_start, loop_end;
-#endif
-
-#ifdef DPVS_MAX_LCORE
-    if (cid >= DPVS_MAX_LCORE)
-        return EDPVS_IDLE;
-#endif
-
-    assert(LCORE_ID_ANY != cid);
-
-    try_isol_rxq_lcore_loop();
-    if (0 == lcore_conf[lcore2index[cid]].nports) {
-        RTE_LOG(INFO, NETIF, "[%s] Lcore %d has nothing to do.\n", __func__, cid);
-        return EDPVS_IDLE;
-    }
-
-    list_for_each_entry(job, &netif_lcore_jobs[NETIF_LCORE_JOB_INIT], list) {
-        do_lcore_job(job);
-    }
-    while (1) {
-#ifdef CONFIG_RECORD_BIG_LOOP
-        loop_start = rte_get_timer_cycles();
-#endif
-        lcore_stats[cid].lcore_loop++;
-        list_for_each_entry(job, &netif_lcore_jobs[NETIF_LCORE_JOB_LOOP], list) {
-            do_lcore_job(job);
-        }
-        ++netif_loop_tick[cid];
-        list_for_each_entry(job, &netif_lcore_jobs[NETIF_LCORE_JOB_SLOW], list) {
-            if (netif_loop_tick[cid] % job->skip_loops == 0) {
-                do_lcore_job(job);
-                //netif_loop_tick[cid] = 0;
-            }
-        }
-#ifdef CONFIG_RECORD_BIG_LOOP
-        loop_end = rte_get_timer_cycles();
-        loop_time = (loop_end - loop_start) * 1E6 / cycles_per_sec;
-        if (loop_time > longest_lcore_loop[cid]) {
-            RTE_LOG(WARNING, NETIF, "update longest_lcore_loop[%d] = %d (<- %d)\n",
-                    cid, loop_time, longest_lcore_loop[cid]);
-            longest_lcore_loop[cid] = loop_time;
-        }
-        if (loop_time > BIG_LOOP_THRESH) {
-            print_job_time(buf, sizeof(buf));
-            RTE_LOG(WARNING, NETIF, "lcore[%d] loop over %d usecs (actual=%d, max=%d):\n%s\n",
-                    cid, BIG_LOOP_THRESH, loop_time, longest_lcore_loop[cid], buf);
-        }
-#endif
-    }
-    return EDPVS_OK;
-}
-
-int netif_lcore_start(void)
-{
-    rte_eal_mp_remote_launch(netif_loop, NULL, SKIP_MASTER);
-    return EDPVS_OK;
-}
-
-/*! \brief obtain DPDk bond device name
+/*! \brief obtain DPDK bond device name
  *
  *  obtain new DPDK bond device name to fit with DPDK 17.11
  *
@@ -4236,11 +4116,9 @@ int netif_virtual_devices_add(void)
 
 int netif_init(const struct rte_eth_conf *conf)
 {
-    cycles_per_sec = rte_get_timer_hz();
     netif_pktmbuf_pool_init();
     netif_arp_ring_init();
     netif_pkt_type_tab_init();
-    netif_lcore_jobs_init();
     // use default port conf if conf=NULL
     netif_port_init(conf);
     netif_lcore_init();
@@ -4393,6 +4271,17 @@ static inline int lcore_stats_msg_term(void)
     return EDPVS_OK;
 }
 
+void netif_update_master_loop_cnt(void)
+{
+    lcoreid_t cid = rte_get_master_lcore();
+    lcore_stats[cid].lcore_loop++;
+}
+
+void netif_update_worker_loop_cnt(void)
+{
+    lcore_stats[rte_lcore_id()].lcore_loop++;
+}
+
 static int get_lcore_stats(lcoreid_t cid, void **out, size_t *out_len)
 {
     assert(out && out_len);
@@ -4624,42 +4513,6 @@ static inline void copy_dev_info(struct netif_nic_dev_get *get,
     get->speed_capa = dev_info->speed_capa;
 }
 
-static int netif_print_mc_list(struct netif_port *dev, char *buf,
-        int *len, int *pnaddr)
-{
-    struct ether_addr addrs[NETIF_MAX_HWADDR];
-    size_t naddr = NELEMS(addrs);
-    int err, i;
-    int strlen = 0;
-
-    err = netif_mc_dump(dev, addrs, &naddr);
-    if (err != EDPVS_OK)
-        goto errout;
-
-    for (i = 0; i < naddr; i++) {
-        err = snprintf(buf + strlen, *len - strlen,
-                "        link %02x:%02x:%02x:%02x:%02x:%02x\n",
-                addrs[i].addr_bytes[0], addrs[i].addr_bytes[1],
-                addrs[i].addr_bytes[2], addrs[i].addr_bytes[3],
-                addrs[i].addr_bytes[4], addrs[i].addr_bytes[5]);
-        if (err < 0) {
-            err = EDPVS_NOROOM;
-            goto errout;
-        }
-        strlen += err;
-    }
-
-    *len = strlen;
-    *pnaddr = naddr;
-    return EDPVS_OK;
-
-errout:
-    *len = 0;
-    *pnaddr = 0;
-    buf[0] = '\0';
-    return err;
-}
-
 static int get_port_ext_info(struct netif_port *port, void **out, size_t *out_len)
 {
     assert(out || out_len);
@@ -4705,7 +4558,7 @@ static int get_port_ext_info(struct netif_port *port, void **out, size_t *out_le
 
     /* mc_list */
     len = NETIF_CTRL_BUFFER_LEN;
-    err = netif_print_mc_list(port, ctrlbuf, &len, &naddr);
+    err = netif_mc_print(port, ctrlbuf, &len, &naddr);
     if (unlikely(EDPVS_OK != err))
         goto errout;
 
diff --git a/src/netif_addr.c b/src/netif_addr.c
index 1c107fd40..1c9d45dac 100644
--- a/src/netif_addr.c
+++ b/src/netif_addr.c
@@ -299,6 +299,54 @@ int netif_mc_dump(struct netif_port *dev,
     return err;
 }
 
+int __netif_mc_print(struct netif_port *dev,
+                     char *buf, int *len, int *pnaddr)
+{
+    struct ether_addr addrs[NETIF_MAX_HWADDR];
+    size_t naddr = NELEMS(addrs);
+    int err, i;
+    int strlen = 0;
+
+    err = __netif_mc_dump(dev, addrs, &naddr);
+    if (err != EDPVS_OK)
+        goto errout;
+
+    for (i = 0; i < naddr; i++) {
+        err = snprintf(buf + strlen, *len - strlen,
+                "        link %02x:%02x:%02x:%02x:%02x:%02x\n",
+                addrs[i].addr_bytes[0], addrs[i].addr_bytes[1],
+                addrs[i].addr_bytes[2], addrs[i].addr_bytes[3],
+                addrs[i].addr_bytes[4], addrs[i].addr_bytes[5]);
+        if (err < 0) {
+            err = EDPVS_NOROOM;
+            goto errout;
+        }
+        strlen += err;
+    }
+
+    *len = strlen;
+    *pnaddr = naddr;
+    return EDPVS_OK;
+
+errout:
+    *len = 0;
+    *pnaddr = 0;
+    buf[0] = '\0';
+    return err;
+}
+
+int netif_mc_print(struct netif_port *dev,
+                     char *buf, int *len, int *pnaddr)
+{
+    int err;
+
+    rte_rwlock_read_lock(&dev->dev_lock);
+    err = __netif_mc_print(dev, buf, len, pnaddr);
+    rte_rwlock_read_unlock(&dev->dev_lock);
+
+    return err;
+}
+
 int __netif_mc_sync(struct netif_port *to, struct netif_port *from)
 {
     int err;
diff --git a/src/scheduler.c b/src/scheduler.c
new file mode 100644
index 000000000..97a087908
--- /dev/null
+++ b/src/scheduler.c
@@ -0,0 +1,235 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+
+#include <assert.h>
+#include "common.h"
+#include "scheduler.h"
+
+/* Note: lockless, lcore_job can only be register on initialization stage and
+ *       unregistered on cleanup stage.
+ */
+static struct list_head dpvs_lcore_jobs[LCORE_ROLE_MAX][LCORE_JOB_TYPE_MAX];
+
+struct dpvs_role_str {
+    dpvs_lcore_role_t role;
+    const char *str;
+};
+
+const char *dpvs_lcore_role_str(dpvs_lcore_role_t role)
+{
+    int i;
+    const static struct dpvs_role_str role_str_tab[] = {
+        { LCORE_ROLE_IDLE,          "lcore_role_idle"  },
+        { LCORE_ROLE_MASTER,        "lcore_role_master" },
+        { LCORE_ROLE_FWD_WORKER,    "lcore_role_fwd_worker"},
+        { LCORE_ROLE_ISOLRX_WORKER, "lcore_role_isolrx_worker"},
+        { LCORE_ROLE_MAX,           "lcore_role_null"},
+    };
+
+    for (i = 0; i < NELEMS(role_str_tab); i++) {
+        if (role == role_str_tab[i].role)
+            return role_str_tab[i].str;
+    }
+
+    return "lcore_role_unkown";
+}
+
+int dpvs_scheduler_init(void)
+{
+    int ii, jj;
+    for (ii = 0; ii < LCORE_ROLE_MAX; ii++) {
+        for (jj = 0; jj < LCORE_JOB_TYPE_MAX; jj++) {
+            INIT_LIST_HEAD(&dpvs_lcore_jobs[ii][jj]);
+        }
+    }
+    return EDPVS_OK;
+}
+
+int dpvs_scheduler_term(void)
+{
+    return EDPVS_OK;
+}
+
+int dpvs_lcore_job_register(struct dpvs_lcore_job *lcore_job, dpvs_lcore_role_t role)
+{
+    struct dpvs_lcore_job *cur;
+
+    if (unlikely(NULL == lcore_job || role >= LCORE_ROLE_MAX))
+        return EDPVS_INVAL;
+
+    if (unlikely(LCORE_JOB_SLOW == lcore_job->type && lcore_job->skip_loops <= 0))
+        return EDPVS_INVAL;
+
+    list_for_each_entry(cur, &dpvs_lcore_jobs[role][lcore_job->type], list) {
+        if (cur == lcore_job) {
+            return EDPVS_EXIST;
+        }
+    }
+
+    list_add_tail(&lcore_job->list, &dpvs_lcore_jobs[role][lcore_job->type]);
+
+    return EDPVS_OK;
+}
+
+int dpvs_lcore_job_unregister(struct dpvs_lcore_job *lcore_job, dpvs_lcore_role_t role)
+{
+    struct dpvs_lcore_job *cur;
+
+    if (unlikely(NULL == lcore_job || role >= LCORE_ROLE_MAX))
+        return EDPVS_INVAL;
+
+    list_for_each_entry(cur, &dpvs_lcore_jobs[role][lcore_job->type], list) {
+        if (cur == lcore_job) {
+            list_del_init(&cur->list);
+            return EDPVS_OK;
+        }
+    }
+
+    return EDPVS_NOTEXIST;
+}
+
+#ifdef CONFIG_RECORD_BIG_LOOP
+
+static void print_job_time(char *buf, size_t len, dpvs_lcore_role_t role)
+{
+    int ii, jj;
+    size_t pos = 0;
+    struct dpvs_lcore_job *job;
+    lcoreid_t cid;
+
+    assert(buf);
+    buf[0] = '\0';
+    cid = rte_lcore_id();
+
+    if (role < LCORE_ROLE_MAX) {
+        for (jj = 0; jj < LCORE_JOB_TYPE_MAX; jj++) {
+            list_for_each_entry(job, &dpvs_lcore_jobs[role][jj], list) {
+                if (unlikely(pos + 1 >= len))
+                    return;
+                snprintf(buf + pos, len - pos -1, "%s=%d ",
+                        job->name, job->job_time[cid]);
+                pos = strlen(buf);
+            }
+        }
+        return;
+    }
+
+    for (ii = 0; ii < LCORE_ROLE_MAX; ii++) {
+        for (jj = 0; jj < LCORE_JOB_TYPE_MAX; jj++) {
+            list_for_each_entry(job, &dpvs_lcore_jobs[ii][jj], list) {
+                if (unlikely(pos + 1 >= len))
+                    return;
+                snprintf(buf + pos, len - pos - 1, "%s=%d ",
+                        job->name, job->job_time[cid]);
+                pos = strlen(buf);
+            }
+        }
+    }
+}
+#endif
+
+static inline void do_lcore_job(struct dpvs_lcore_job *job)
+{
+#ifdef CONFIG_RECORD_BIG_LOOP
+    uint64_t job_start, job_end;
+    job_start = rte_get_timer_cycles();
+#endif
+
+    job->func(job->data);
+
+#ifdef CONFIG_RECORD_BIG_LOOP
+    job_end = rte_get_timer_cycles();
+    job->job_time[rte_lcore_id()] = (job_end - job_start) * 1E6 / g_cycles_per_sec;
+#endif
+}
+
+static int dpvs_job_loop(void *arg)
+{
+    struct dpvs_lcore_job *job;
+    lcoreid_t cid = rte_lcore_id();
+    dpvs_lcore_role_t role = g_lcore_role[cid];
+    static uint32_t dpvs_job_loop_tick[DPVS_MAX_LCORE] = { 0 };
+#ifdef CONFIG_RECORD_BIG_LOOP
+    char buf[512];
+    uint32_t loop_time, thres_time;
+    uint64_t loop_start, loop_end;
+    static uint32_t longest_lcore_loop[DPVS_MAX_LCORE] = { 0 };
+
+    if (likely(role != LCORE_ROLE_MASTER))
+        thres_time = BIG_LOOP_THRESH_SLAVE;
+    else
+        thres_time = BIG_LOOP_THRESH_MASTER;
+#endif
+
+    /* skip irrelative job loops */
+    if (role == LCORE_ROLE_MAX)
+        return EDPVS_INVAL;
+    if (role == LCORE_ROLE_IDLE)
+        return EDPVS_IDLE;
+
+    RTE_LOG(INFO, DSCHED, "lcore %02d enter %s loop\n", cid, dpvs_lcore_role_str(role));
+
+    /* do init job */
+    list_for_each_entry(job, &dpvs_lcore_jobs[role][LCORE_JOB_INIT], list) {
+        do_lcore_job(job);
+    }
+
+    while (1) {
+#ifdef CONFIG_RECORD_BIG_LOOP
+        loop_start = rte_get_timer_cycles();
+#endif
+        ++dpvs_job_loop_tick[cid];
+        netif_update_worker_loop_cnt();
+
+        /* do normal job */
+        list_for_each_entry(job, &dpvs_lcore_jobs[role][LCORE_JOB_LOOP], list) {
+            do_lcore_job(job);
+        }
+
+        /* do slow job */
+        list_for_each_entry(job, &dpvs_lcore_jobs[role][LCORE_JOB_SLOW], list) {
+            if (dpvs_job_loop_tick[cid] % job->skip_loops == 0) {
+                do_lcore_job(job);
+            }
+        }
+
+#ifdef CONFIG_RECORD_BIG_LOOP
+        loop_end = rte_get_timer_cycles();
+        loop_time = (loop_end - loop_start) * 1000000 / g_cycles_per_sec;
+        if (loop_time > longest_lcore_loop[cid]) {
+            RTE_LOG(WARNING, DSCHED, "update longest_lcore_loop[%d] = %d (<- %d)\n",
+                    cid, loop_time, longest_lcore_loop[cid]);
+            longest_lcore_loop[cid] = loop_time;
+        }
+        if (loop_time > thres_time) {
+            print_job_time(buf, sizeof(buf), role);
+            RTE_LOG(WARNING, DSCHED, "lcore[%d] loop over %d usecs (actual=%d, max=%d):\n%s\n",
+                    cid, thres_time, loop_time, longest_lcore_loop[cid], buf);
+        }
+#endif
+    }
+
+    return EDPVS_OK;
+}
+
+int dpvs_lcore_start(int is_master)
+{
+    if (is_master)
+        return dpvs_job_loop(NULL);
+    return rte_eal_mp_remote_launch(dpvs_job_loop, NULL, SKIP_MASTER);
+}
diff --git a/src/sys_time.c b/src/sys_time.c
index 1dcc779c5..a09cd6c98 100644
--- a/src/sys_time.c
+++ b/src/sys_time.c
@@ -2,6 +2,7 @@
 #include <string.h>
 #include "sys_time.h"
 #include "dpdk.h"
+#include "global_data.h"
 
 /*Notice:
  * the time zone is the value compared with the server's;
@@ -28,7 +29,7 @@ char* cycles_to_stime(uint64_t cycles, char* stime, int len)
         return NULL;
 
     memset(stime, 0, len);
-    ts = (cycles - g_start_cycles) / rte_get_timer_hz();
+    ts = (cycles - g_start_cycles) / g_cycles_per_sec;
     ts += g_dpvs_timer;
     sys_time_to_str(&ts, stime, len);
 
@@ -53,7 +54,7 @@ time_t sys_current_time(void)
 {
     time_t now;
 
-    now = (rte_rdtsc() - g_start_cycles) / rte_get_timer_hz();
+    now = (rte_rdtsc() - g_start_cycles) / g_cycles_per_sec;
     return now + g_dpvs_timer;
 }
 
diff --git a/src/timer.c b/src/timer.c
index da7a7e37d..3376321ff 100644
--- a/src/timer.c
+++ b/src/timer.c
@@ -33,6 +33,7 @@
 #include "rte_timer.h"
 #include "rte_spinlock.h"
 #include "parser/parser.h"
+#include "global_data.h"
 
 #define DTIMER
 #define RTE_LOGTYPE_DTIMER      RTE_LOGTYPE_USER1
@@ -372,7 +373,7 @@ static int timer_init_schedler(struct timer_scheduler *sched, lcoreid_t cid)
 
     rte_timer_init(&sched->rte_tim);
     /* ticks should be exactly same with precision */
-    if (rte_timer_reset(&sched->rte_tim, rte_get_timer_hz() / DPVS_TIMER_HZ,
+    if (rte_timer_reset(&sched->rte_tim, g_cycles_per_sec / DPVS_TIMER_HZ,
                         PERIODICAL, cid, rte_timer_tick_cb, sched) != 0) {
         RTE_LOG(ERR, DTIMER, "[%02d] fail to reset rte timer.\n", cid);
         return EDPVS_INVAL;

From 25a6a3b304cd62ba17bcb6b23e02b9a2e699d627 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Tue, 19 Nov 2019 09:59:07 +0800
Subject: [PATCH 45/62] debug: add debug module for dpvs

---
 include/common.h |  3 --
 include/debug.h  | 33 +++++++++++++++++++++
 src/common.c     | 28 ------------------
 src/debug.c      | 76 ++++++++++++++++++++++++++++++++++++++++++++++++
 src/scheduler.c  |  2 +-
 5 files changed, 110 insertions(+), 32 deletions(-)
 create mode 100644 include/debug.h
 create mode 100644 src/debug.c

diff --git a/include/common.h b/include/common.h
index 6c2d79257..43ed3fdd1 100644
--- a/include/common.h
+++ b/include/common.h
@@ -142,9 +142,6 @@ ssize_t writen(int fd, const void *vptr, size_t n);
 /* send "n" bytes to a descriptor */
 ssize_t sendn(int fd, const void *vptr, size_t n, int flags);
 
-/* get backtrace for the calling program */
-int dpvs_backtrace(char *buf, int len);
-
 static inline char *strupr(char *str) {
     char *s;
     for (s = str; *s != '\0'; s++)
diff --git a/include/debug.h b/include/debug.h
new file mode 100644
index 000000000..c43de796e
--- /dev/null
+++ b/include/debug.h
@@ -0,0 +1,33 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+
+#ifndef __DPVS_DEBUG_H__
+#define __DPVS_DEBUG_H__
+
+#define TRACE_STACK_DEPTH_MAX       128
+
+/* get backtrace for the calling program */
+int dpvs_backtrace(char *buf, int len);
+
+void dpvs_timing_start(void);
+void dpvs_timing_stop(void);
+/*  return elapsed time of the most recent call between
+ * "dpvs_timing_start" and "dpvs_timing_stop" in microsecond */
+int dpvs_timing_get(void);
+
+#endif
diff --git a/src/common.c b/src/common.c
index c5c7cd4b1..c7997e6a1 100644
--- a/src/common.c
+++ b/src/common.c
@@ -27,7 +27,6 @@
 #include <net/if.h>
 #include <netinet/in.h>
 #include <net/ethernet.h>
-#include <execinfo.h>
 #include "common.h"
 
 struct dpvs_err_tab {
@@ -272,30 +271,3 @@ ssize_t sendn(int fd, const void *vptr, size_t n, int flags)
     return (n);
 }
 
-/* get backtrace for the calling program */
-#define TRACE_STACK_DEPTH_MAX   128
-int dpvs_backtrace(char *buf, int len)
-{
-    int ii, depth, slen;
-    char **trace;
-    void *btbuf[TRACE_STACK_DEPTH_MAX] = { NULL };
-
-    if (len <= 0)
-        return 0;
-    buf[0] = '\0';
-
-    depth = backtrace(btbuf, TRACE_STACK_DEPTH_MAX);
-    trace = backtrace_symbols(btbuf, depth);
-    if (!trace)
-        return 0;
-
-    for (ii = 0; ii < depth; ++ii) {
-        slen = strlen(buf);
-        if (slen + 1 >= len)
-            break;
-        snprintf(buf+slen, len-slen-1, "[%02d] %s\n", ii, trace[ii]);
-    }
-    free(trace);
-
-    return strlen(buf);
-}
diff --git a/src/debug.c b/src/debug.c
new file mode 100644
index 000000000..b0f418bde
--- /dev/null
+++ b/src/debug.c
@@ -0,0 +1,76 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <stdint.h>
+#include <execinfo.h>
+#include <rte_cycles.h>
+#include <rte_per_lcore.h>
+#include "global_data.h"
+#include "debug.h"
+
+RTE_DEFINE_PER_LCORE(uint64_t, cycles_start);
+RTE_DEFINE_PER_LCORE(uint64_t, cycles_stop);
+
+#define timing_cycle_var1 RTE_PER_LCORE(cycles_start)
+#define timing_cycle_var2 RTE_PER_LCORE(cycles_stop)
+
+int dpvs_backtrace(char *buf, int len)
+{
+    int ii, depth, slen;
+    char **trace;
+    void *btbuf[TRACE_STACK_DEPTH_MAX] = { NULL };
+
+    if (len <= 0)
+        return 0;
+    buf[0] = '\0';
+
+    depth = backtrace(btbuf, TRACE_STACK_DEPTH_MAX);
+    trace = backtrace_symbols(btbuf, depth);
+    if (!trace)
+        return 0;
+
+    for (ii = 0; ii < depth; ++ii) {
+        slen = strlen(buf);
+        if (slen + 1 >= len)
+            break;
+        snprintf(buf+slen, len-slen-1, "[%02d] %s\n", ii, trace[ii]);
+    }
+    free(trace);
+
+    return strlen(buf);
+}
+
+void dpvs_timing_start(void)
+{
+    timing_cycle_var1 = rte_get_timer_cycles();
+}
+
+void dpvs_timing_stop(void)
+{
+    timing_cycle_var2 = rte_get_timer_cycles();
+}
+
+int dpvs_timing_get(void)
+{
+    if (timing_cycle_var2 < timing_cycle_var1)
+        return 0;
+
+    return (timing_cycle_var2 - timing_cycle_var1) * 1000000 / g_cycles_per_sec;
+}
diff --git a/src/scheduler.c b/src/scheduler.c
index 97a087908..6044e0089 100644
--- a/src/scheduler.c
+++ b/src/scheduler.c
@@ -154,7 +154,7 @@ static inline void do_lcore_job(struct dpvs_lcore_job *job)
 
 #ifdef CONFIG_RECORD_BIG_LOOP
     job_end = rte_get_timer_cycles();
-    job->job_time[rte_lcore_id()] = (job_end - job_start) * 1E6 / g_cycles_per_sec;
+    job->job_time[rte_lcore_id()] = (job_end - job_start) * 1000000 / g_cycles_per_sec;
 #endif
 }
 

From 45a65f5d82a5ba58131d679dcb47e0890d0d1d76 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Thu, 21 Nov 2019 17:56:32 +0800
Subject: [PATCH 46/62] fix problems when DPDK EAL param '--master-lcore' or
 '--lcores' is used

---
 include/global_data.h    | 19 +++++++++++++++++++
 src/global_data.c        |  5 ++++-
 src/ipvs/ip_vs_laddr.c   |  6 ++++--
 src/ipvs/ip_vs_service.c |  5 +++--
 src/netif.c              | 23 ++++++++++++++++++-----
 src/sa_pool.c            |  2 +-
 6 files changed, 49 insertions(+), 11 deletions(-)

diff --git a/include/global_data.h b/include/global_data.h
index 3c263f41c..7f9302bc4 100644
--- a/include/global_data.h
+++ b/include/global_data.h
@@ -32,6 +32,25 @@ typedef enum dpvs_lcore_role_type {
 extern uint64_t g_cycles_per_sec;
 extern dpvs_lcore_role_t g_lcore_role[DPVS_MAX_LCORE];
 
+/*
+ *  Lcore fast search table:  g_lcore_index[index]-->cid
+ *
+ *  cid                 index
+ *  ---------------------------
+ *  master              0
+ *  fwd_worker1         1
+ *  fwd_worker2         2
+ *  ...                 ...
+ *  fwd_worker_n        n
+ *  ioslrx_worker1      n+1
+ *  isolrx_worker2      n+2
+ *  ...                 ...
+ *  isolrx_worker_m     n+m
+ *
+ *  anything else       -1
+ * */
+extern int g_lcore_index[DPVS_MAX_LCORE];
+
 int global_data_init(void);
 int global_data_term(void);
 
diff --git a/src/global_data.c b/src/global_data.c
index d46f00d89..873b37d22 100644
--- a/src/global_data.c
+++ b/src/global_data.c
@@ -22,6 +22,7 @@
 
 uint64_t g_cycles_per_sec;
 dpvs_lcore_role_t g_lcore_role[DPVS_MAX_LCORE];
+int g_lcore_index[DPVS_MAX_LCORE];
 
 int global_data_init(void)
 {
@@ -29,8 +30,10 @@ int global_data_init(void)
 
     g_cycles_per_sec = rte_get_timer_hz();
 
-    for (i = 0; i < DPVS_MAX_LCORE; i++)
+    for (i = 0; i < DPVS_MAX_LCORE; i++) {
         g_lcore_role[i] = LCORE_ROLE_IDLE;
+        g_lcore_index[i] = -1;
+    }
 
     return EDPVS_OK;
 }
diff --git a/src/ipvs/ip_vs_laddr.c b/src/ipvs/ip_vs_laddr.c
index d9deab89d..ae3e70ebd 100644
--- a/src/ipvs/ip_vs_laddr.c
+++ b/src/ipvs/ip_vs_laddr.c
@@ -548,7 +548,9 @@ static int dp_vs_copy_percore_laddrs_stats(struct dp_vs_laddr_conf *master_laddr
 
 static void opt2cpu(sockoptid_t opt, sockoptid_t *new_opt, lcoreid_t *cid)
 {
-    *cid = opt - SOCKOPT_GET_LADDR_GETALL;
+    *cid = g_lcore_index[opt - SOCKOPT_GET_LADDR_GETALL];
+    assert(*cid >=0 && *cid < DPVS_MAX_LCORE);
+
     *new_opt = SOCKOPT_GET_LADDR_GETALL;
 }
 
@@ -570,7 +572,7 @@ static int laddr_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
 
     netif_get_slave_lcores(&num_lcores, NULL);
     opt2cpu(opt, &new_opt, &cid);
-    if (cid > num_lcores || new_opt > SOCKOPT_GET_LADDR_GETALL)
+    if (new_opt > SOCKOPT_GET_LADDR_GETALL)
         return EDPVS_INVAL;
 
     if (!conf && size < sizeof(*laddr_conf))
diff --git a/src/ipvs/ip_vs_service.c b/src/ipvs/ip_vs_service.c
index 5bd23a812..fdffe90e8 100644
--- a/src/ipvs/ip_vs_service.c
+++ b/src/ipvs/ip_vs_service.c
@@ -1026,7 +1026,8 @@ static inline void opt2cpu(sockoptid_t old_opt, sockoptid_t *new_opt, lcoreid_t
 
     *new_opt = (old_opt - SOCKOPT_SVC_BASE)%(SOCKOPT_SVC_GET_CMD_MAX - SOCKOPT_SVC_BASE + 1)
                + SOCKOPT_SVC_BASE;
-    *cid     = (old_opt - SOCKOPT_SVC_BASE)/(SOCKOPT_SVC_GET_CMD_MAX - SOCKOPT_SVC_BASE + 1);
+    *cid     = g_lcore_index[(old_opt - SOCKOPT_SVC_BASE)/(SOCKOPT_SVC_GET_CMD_MAX - SOCKOPT_SVC_BASE + 1)];
+    assert(*cid >= 0 && *cid < DPVS_MAX_LCORE);
 }
 
 /* copy service/dest/stats */
@@ -1199,7 +1200,7 @@ static int dp_vs_get_svc(sockoptid_t opt, const void *user, size_t len, void **o
 
     netif_get_slave_lcores(&num_lcores, NULL);
     opt2cpu(opt, &new_opt, &cid);
-    if (cid > num_lcores || new_opt > SOCKOPT_SVC_MAX)
+    if (new_opt > SOCKOPT_SVC_MAX)
         return EDPVS_INVAL; 
 
     switch (new_opt){
diff --git a/src/netif.c b/src/netif.c
index 277da8de3..eee327c42 100644
--- a/src/netif.c
+++ b/src/netif.c
@@ -1146,7 +1146,7 @@ static void config_lcores(struct list_head *worker_list)
                                 worker_min->cpu_id, port->name, queue->rx_queues[ii]);
                     } else {
                         RTE_LOG(INFO, NETIF, "[%s]: isol_rxq on cpu%d with ring size %d is "
-                                "added for cpu%d:%s:rx%d, ", __func__,
+                                "added for cpu%d:%s:rx%d\n", __func__,
                                 queue->isol_rxq_lcore_ids[ii], queue->isol_rxq_ring_sz,
                                 worker_min->cpu_id, port->name, queue->rx_queues[ii]);
                     }
@@ -1263,6 +1263,21 @@ static void netif_get_isol_rx_lcores(uint8_t *nb, uint64_t *mask)
         *mask = isol_lcore_mask;
 }
 
+static void build_lcore_index(int lcore_max)
+{
+    int idx = 0, ii;
+
+    g_lcore_index[idx++] = rte_get_master_lcore();
+
+    for (ii = 0; ii < lcore_max; ii++)
+        if (g_lcore_role[ii] == LCORE_ROLE_FWD_WORKER)
+            g_lcore_index[idx++] = ii;
+
+    for (ii = 0; ii < lcore_max; ii++)
+        if (g_lcore_role[ii] == LCORE_ROLE_ISOLRX_WORKER)
+            g_lcore_index[idx++] = ii;
+}
+
 static void lcore_role_init(void)
 {
     int i, cid, lcore_max_count;
@@ -1296,6 +1311,8 @@ static void lcore_role_init(void)
         }
     }
 
+    build_lcore_index(lcore_max_count);
+
     for (cid = 0; cid < DPVS_MAX_LCORE; cid++)
         printf("[%02d]\t\t\t%s\n", cid, dpvs_lcore_role_str(g_lcore_role[cid]));
 }
@@ -1365,7 +1382,6 @@ static uint8_t get_configured_port_nb(int lcores, const struct netif_lcore_conf
 
 #define LCONFCHK_MARK                       255
 #define LCONFCHK_OK                         0
-#define LCONFCHK_LCORE_NOT_INDEXED          -1
 #define LCONFCHK_REPEATED_RX_QUEUE_ID       -2
 #define LCONFCHK_REPEATED_TX_QUEUE_ID       -3
 #define LCONFCHK_DISCONTINUOUS_QUEUE_ID     -4
@@ -1385,9 +1401,6 @@ static int check_lcore_conf(int lcores, const struct netif_lcore_conf *lcore_con
     nports = dpvs_rte_eth_dev_count();
     while (lcore_conf[i].nports > 0)
     {
-        if (lcore2index[lcore_conf[i].id] != i) {
-            return LCONFCHK_LCORE_NOT_INDEXED;
-        }
         if (lcore_conf[i].nports > nports)
             return LCONFCHK_PORT_NOT_ENOUGH;
         for (j = 0; j < lcore_conf[i].nports; j++) {
diff --git a/src/sa_pool.c b/src/sa_pool.c
index b9e01f946..87e9be7c8 100644
--- a/src/sa_pool.c
+++ b/src/sa_pool.c
@@ -865,7 +865,7 @@ int sa_pool_init(void)
 
     port_base = 0;
     for (cid = 0; cid < RTE_MAX_LCORE; cid++) {
-        if (cid > 64 || !(sa_lcore_mask & (1L << cid)))
+        if (cid >= 64 || !(sa_lcore_mask & (1L << cid)))
             continue;
         assert(rte_lcore_is_enabled(cid) && cid != rte_get_master_lcore());
 

From 40dd1c9f60c7b472bd1a70b207dd2d82111aa383 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Fri, 22 Nov 2019 20:49:41 +0800
Subject: [PATCH 47/62] doc: add worker performance tuning doc

---
 doc/Worker-Performance-Tuning.md | 284 +++++++++++++++++++++++++++++++
 1 file changed, 284 insertions(+)
 create mode 100644 doc/Worker-Performance-Tuning.md

diff --git a/doc/Worker-Performance-Tuning.md b/doc/Worker-Performance-Tuning.md
new file mode 100644
index 000000000..7e91ecb15
--- /dev/null
+++ b/doc/Worker-Performance-Tuning.md
@@ -0,0 +1,284 @@
+# DPVS Worker Performance Tuning
+
+This doc should tell you how to achieve best performance by tunning CPU cores on which DPVS process is running.
+
+### About DPVS Workers
+
+DPVS is a multi-thread DPDK application program. It is based on the "polling" framework, all the threads would get into an infinite loop to process various jobs registered for the thread during the initialization stage. We call each such DPVS thread to be a DPVS Worker. There exists three different DPVS  Worker types now.
+
+* **Master Worker**:  in charge of all the jobs from the control plane;
+* **Forwarding Worker**: the data plane worker in charge of packet receiving, processing, forwarding and all other jobs in the data plane;
+* **Isolate Recieving Worker**: an optional  worker used to take the responsibility of Forwarding Worker to receive packets to reduce NIC packets imiss.
+
+As all other DPDK applications, each DPVS Worker is bound to a distinct CPU core to avoid they interfere with each other. By default, the first N CPUs of the system are bound with DPVS Workers. The performance may not good enough when many other work load are scheduled into these CPUs  by the system. For example, CPU0, the first CPU core in the system, is generally a lot busier than other CPU cores, because many processes, interrupts, and kernel threads run on it by default. The following of this doc would tell you how to alleviate/offload irrelative work load on DPVS Workers.
+
+### When do you need to consider this performance tuning?
+
+In case of the following situations, you should consider this performance tuning.
+
+* There are increasing imissed packets from NIC. You can get imiss data using the following command.
+
+  ```
+  dpip link show -s
+  dpip link show [dpvs-nic-name] -s -i 2 -C
+  ```
+
+* There are frequent msg timeout from DPVS log.
+
+  > Another msg timeout reason is the configuration "ctrl_defs/lcore_msg/sync_msg_timeout_us" is too  small. The default value for this configuration is 2000 us.
+
+* There exists big  worker loops.
+
+  > To observe worker loop time, you should uncomment the macro "CONFIG_RECORD_BIG_LOOP" in src/config.mk，recompile DPVS program and run it.
+  >
+  >  Besides, macros "BIG_LOOP_THRESH_SLAVE" and "BIG_LOOP_THRESH_MASTER" define the threshold time of worker loop. Modify them if needed.
+
+### Optimize work load on CPUs for DPVS Worker
+
+**Optimize Kernel  Command Line Parameters (Boot Options)**
+
+```
+default_hugepagesz=1G hugepagesz=1G hugepages=[nr-hugepages] isolcpus=[cpu-list] nohz_full=[cpu-list] nowatchdog nmi_watchdog=0 rcu_nocbs=[cpu-list] rcu_nocb_poll
+```
+
+Refer to [Linux kernel parameters document](https://www.kernel.org/doc/Documentation/admin-guide/kernel-parameters.txt) for detailed explanations of the above boot options.
+
+Refer to [DPDK performance report](https://fast.dpdk.org/doc/perf/) for more BOOT and BIOS settings about high performance of DPDK applications.
+
+Set the boot options and reboot your system，then you can check the hardware/software interrupts on each CPU from the system proc file `/proc/interrupts` and `/proc/softirqs`. Hopefully, the interrupts on the CPU specified by "cpu-list" would be reduced dramatically.
+
+**How to choose CPU cores for DPVS Workers ?** 
+
+The [cpu-list] in the above kernel command line parameters is the list of CPU cores for DPVS Workers.
+
+Generally speaking, we may follow some practical rules below to choose the CPU core list.
+
+* Avoid using the first CPU core, including both HT(Hyper-Threading) CPU cores of the first physical CPU core.
+* Turn off  HT(Hyper-Threading) CPUs in the system if possible.
+* Do not use boot HT CPU cores from one physical CPU, unless the workers are the "forwarding worker" and "isolate receiving worker" couples.
+
+You can get the CPU layout of your system by the script provided by DPDK `cpu_layout.py `, example as shown below. 
+
+```
+[root@~ dpdk]# python dpdk-stable-18.11.2/usertools/cpu_layout.py 
+======================================================================
+Core and Socket Information (as reported by '/sys/devices/system/cpu')
+======================================================================
+
+cores =  [0, 1, 2, 3, 4, 8, 9, 10, 11, 12]
+sockets =  [0, 1]
+
+        Socket 0    Socket 1   
+        --------    --------   
+Core 0  [0]         [10]       
+Core 1  [1]         [11]       
+Core 2  [2]         [12]       
+Core 3  [3]         [13]       
+Core 4  [4]         [14]       
+Core 8  [5]         [15]       
+Core 9  [6]         [16]       
+Core 10 [7]         [17]       
+Core 11 [8]         [18]       
+Core 12 [9]         [19] 
+```
+
+There are 20 HT CPU cores, which is derived from 10 physical CPU cores in my system.  Following examples are based on this environment.
+
+**Example #1: Run DPVS with 1 master worker and 4 forwarding worker**
+
+* Master Worker:        Cpu1
+
+* Forwarding Worker:    Cpu2 - Cpu5 
+
+* Boot Option Cpu List: Cpu1 - Cpu5, Cpu11 - Cpu15
+
+Use DPDK EAL common option `--lcore` to map System CPU ID to DPVS Worker ID. Boot DPVS with the command:
+
+```
+./bin/dpvs -- --lcores 0@1,1@2,2@3,3@4,4@5
+```
+
+> The above command indicates DPVS to map the system's Cpu1 - Cpu5 into DPVS Worker 0 - 4, respectively.
+
+Note:
+
+1.  DPVS Worker ID is specified in DPVS configuration file "worker_defs/work [name]/cpu_id".
+2.  EAL common option `-c COREMASK` or `-l CORELIST` is not supported by DPVS, because they conflict with  DPVS Worker ID.
+
+```
+### dpvs.conf worker config
+worker_defs {
+    <init> worker cpu0 {
+        type    master
+        cpu_id  0       #  DPVS Master Worker ID
+    }
+
+    <init> worker cpu1 {
+        type    slave
+        cpu_id  1       #  DPVS Forwarding Worker ID
+        port    dpdk0 {
+            rx_queue_ids     0
+            tx_queue_ids     0
+        }
+    }
+
+    <init> worker cpu2 {
+        type    slave
+        cpu_id  2       #  DPVS Forwarding Worker ID
+        port    dpdk0 {
+            rx_queue_ids     1
+            tx_queue_ids     1
+        }
+    }
+
+    <init> worker cpu3 {
+        type        slave
+        cpu_id      3   #  DPVS Forwarding Worker ID
+        port        dpdk0 {
+            rx_queue_ids     2
+            tx_queue_ids     2
+        }
+    }
+
+    <init> worker   cpu4 {
+        type        slave
+        cpu_id      4   #  DPVS Forwarding Worker ID
+        port        dpdk0 {
+            rx_queue_ids     3
+            tx_queue_ids     3
+        }
+    }
+}
+```
+
+Check CPU work load using the `top` command. The zero-idle CPUs are occupied by DPVS Workers.
+
+```
+top - 17:46:28 up 2 days, 21:29,  1 user,  load average: 8.35, 14.57, 16.19
+Tasks: 244 total,   2 running, 241 sleeping,   0 stopped,   1 zombie
+%Cpu0  :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu1  : 40.9 us, 59.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu2  :100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu3  :100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu4  :100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu5  :100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu6  :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu7  :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu8  :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu9  :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu10 :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu11 :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu12 :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu13 :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu14 :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu15 :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu16 :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu17 :  0.3 us,  0.3 sy,  0.0 ni, 99.3 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu18 :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu19 :  1.3 us,  0.3 sy,  0.0 ni, 98.3 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+KiB Mem : 65685352 total, 15709580 free, 48904136 used,  1071636 buff/cache
+KiB Swap:  4194300 total,  4194300 free,        0 used. 16183592 avail Mem 
+```
+
+**Example #2: Run DPVS with 1 master worker, 4 forwarding worker, 4 isolate receiving worker**
+
+- Master Worker:                Cpu3
+- Forwarding Worker:            Cpu1, Cpu2, Cpu4, Cpu5
+- Isolate Receiving Worker:     Cpu11, Cpu12, Cpu14, Cpu15
+
+- Boot Option Cpu List:         Cpu1 - Cpu5, Cpu11 - Cpu15
+
+In this case, we change the Master Worker to the 3rd Worker(Worker ID is 2), just to explain how to specify DPVS Master Worker to any DPVS Worker as we want. Use DPDK EAL common option `--master-lcore` to specify the Master Worker ID, use DPDK EAL common option `--lcore` to map System CPU ID to DPVS Worker ID. Boot DPVS with the command:
+
+```
+./bin/dpvs  -- --lcores 0@1,1@2,2@3,3@4,4@5,5@11,6@12,7@14,8@15 --master-lcore 2
+```
+
+> The above command indicates DPVS to map the system's Cpu1-Cpu5,Cpu11,Cpu12,Cpu14,Cpu15 into DPVS Worker ID 0-8, and use the 2nd worker as DPVS Master Worker, respectively. We skip Cpu13 because it resides in the same physical CPU core as Cpu3, on which the Master Worker is to run.
+
+The DPVS worker configurations for this case shown as below. Note the configurations for the "cpu_id" fields.
+
+```
+### dpvs.conf worker config
+worker_defs {
+    <init> worker cpu0 {
+        type    master
+        cpu_id  2                   #  DPVS Master Worker ID
+    }
+
+    <init> worker cpu1 {
+        type    slave
+        cpu_id  0                   #  DPVS Forwarding Worker ID
+        port    dpdk0 {
+            rx_queue_ids     0
+            tx_queue_ids     0
+            isol_rx_cpu_ids  5      #  DPVS Isolate Receiving Worker ID
+            isol_rxq_ring_sz 1048576
+        }
+    }
+
+    <init> worker cpu2 {
+        type    slave
+        cpu_id  1                   #  DPVS Forwarding Worker ID
+        port    dpdk0 {
+            rx_queue_ids     1
+            tx_queue_ids     1
+            isol_rx_cpu_ids  6      #  DPVS Isolate Receiving Worker ID
+            isol_rxq_ring_sz 1048576
+        }
+    }
+
+    <init> worker cpu3 {
+        type        slave
+        cpu_id      3               #  DPVS Forwarding Worker ID
+        port        dpdk0 {
+            rx_queue_ids     2
+            tx_queue_ids     2
+            isol_rx_cpu_ids  7      #  DPVS Isolate Receiving Worker ID
+            isol_rxq_ring_sz 1048576
+        }
+    }
+
+    <init> worker   cpu4 {
+        type        slave
+        cpu_id      4               #  DPVS Forwarding Worker ID
+        port        dpdk0 {
+            rx_queue_ids     3
+            tx_queue_ids     3
+            isol_rx_cpu_ids  8      #  DPVS Isolate Receiving Worker ID
+            isol_rxq_ring_sz 1048576
+        }
+    }
+}
+```
+
+Check CPU work load using the `top` command. The zero-idle CPUs are occupied by DPVS Workers.
+
+```
+top - 19:38:15 up 2 days, 23:20,  1 user,  load average: 6.19, 1.89, 0.75
+Tasks: 249 total,   2 running, 246 sleeping,   0 stopped,   1 zombie
+%Cpu0  :  0.0 us,  0.4 sy,  0.0 ni, 99.6 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu1  :100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu2  :100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu3  : 63.3 us, 36.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu4  :100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu5  :100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu6  :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu7  :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu8  :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu9  :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu10 :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu11 :100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu12 :100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu13 :100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu14 :100.0 us,  0.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu15 :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu16 :  0.0 us,  0.0 sy,  0.0 ni,100.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu17 :  0.0 us,  0.3 sy,  0.0 ni, 99.7 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu18 :  0.0 us,  0.3 sy,  0.0 ni, 99.7 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+%Cpu19 :  1.0 us,  0.3 sy,  0.0 ni, 98.7 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
+KiB Mem : 65685352 total, 15695352 free, 48908988 used,  1081012 buff/cache
+KiB Swap:  4194300 total,  4194300 free,        0 used. 16171432 avail Mem 
+
+```
+

From daf6676f55fe864435d432d5b308143d1b81c7a4 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Thu, 5 Dec 2019 17:30:25 +0800
Subject: [PATCH 48/62] inetaddr: fix fail problem when add ipv6 addresses

---
 src/inetaddr.c    | 12 ++++++------
 src/ipv6/route6.c | 17 ++++++-----------
 src/netif.c       | 11 ++++++++---
 3 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/src/inetaddr.c b/src/inetaddr.c
index be6a13785..32e924594 100644
--- a/src/inetaddr.c
+++ b/src/inetaddr.c
@@ -366,29 +366,29 @@ static int ifa_add_del_mcast(struct inet_ifaddr *ifa, bool add)
 
     if (add) {
         err = idev_mc_add(ifa->af, ifa->idev, &iaddr);
-        if (err)
+        if (err && err != EDPVS_EXIST && err != EDPVS_NOTEXIST)
             return err;
 
         err = netif_mc_add(ifa->idev->dev, &eaddr);
-        if (err) {
+        if (err && err != EDPVS_EXIST && err != EDPVS_NOTEXIST) {
             /* rollback */
             idev_mc_del(ifa->af, ifa->idev, &iaddr);
             return err;
         }
     } else {
         err = idev_mc_del(ifa->af, ifa->idev, &iaddr);
-        if (err)
+        if (err && err != EDPVS_EXIST && err != EDPVS_NOTEXIST)
             return err;
 
         err = netif_mc_del(ifa->idev->dev, &eaddr);
-        if (err) {
+        if (err && err != EDPVS_EXIST && err != EDPVS_NOTEXIST) {
             /* rollback */
             idev_mc_add(ifa->af, ifa->idev, &iaddr);
             return err;
         }
     }
 
-    return err;
+    return EDPVS_OK;
 }
 
 static int inet_ifaddr_dad_completed(void *arg)
@@ -683,7 +683,7 @@ static int ifa_add_set(int af, const struct netif_port *dev,
 errout:
     rte_rwlock_write_unlock(&in_addr_lock);
     idev_put(idev);
-    RTE_LOG(WARNING, IFA, "add %s in %s failed\n", addr_str, __func__);
+    RTE_LOG(WARNING, IFA, "%s %s failed -- %s\n", __func__, addr_str, dpvs_strerror(err));
     return err;
 }
 
diff --git a/src/ipv6/route6.c b/src/ipv6/route6.c
index 6874d75b3..c44fdf5ca 100644
--- a/src/ipv6/route6.c
+++ b/src/ipv6/route6.c
@@ -230,23 +230,18 @@ static int rt6_add_del(const struct dp_vs_route6_conf *cf)
     msg = msg_make(MSG_TYPE_ROUTE6, 0, DPVS_MSG_MULTICAST, cid,
             sizeof(struct dp_vs_route6_conf), cf);
     if (unlikely(msg == NULL)) {
-        err = EDPVS_NOMEM;
-        goto slave_fail;
+        RTE_LOG(ERR, RT6, "%s: fail to add/del route on slaves -- %s\n",
+                __func__, dpvs_strerror(err));
+        return EDPVS_NOMEM;
     }
 
     err = multicast_msg_send(msg, 0, NULL);
-    if (err != EDPVS_OK) {
-        msg_destroy(&msg);
-        goto slave_fail;
-    }
+    if (err != EDPVS_OK)
+        RTE_LOG(WARNING, RT6, "%s: multicast_msg_send failed -- %s\n",
+                __func__, dpvs_strerror(err));
     msg_destroy(&msg);
 
     return EDPVS_OK;
-
-slave_fail:
-    RTE_LOG(ERR, RT6, "%s: fail to add/del route on slaves -- %s\n",
-            __func__, dpvs_strerror(err));
-    return err;
 }
 
 static int __route6_add_del(const struct in6_addr *dest, int plen, uint32_t flags,
diff --git a/src/netif.c b/src/netif.c
index eee327c42..0be896d7f 100644
--- a/src/netif.c
+++ b/src/netif.c
@@ -2902,7 +2902,7 @@ static int dpdk_set_mc_list(struct netif_port *dev)
 {
     struct ether_addr addrs[NETIF_MAX_HWADDR];
     int err;
-    int ret = 0;
+    int ret;
     size_t naddr = NELEMS(addrs);
 
     err = __netif_mc_dump(dev, addrs, &naddr);
@@ -2915,10 +2915,15 @@ static int dpdk_set_mc_list(struct netif_port *dev)
         RTE_LOG(WARNING, NETIF, "%s: rte_eth_dev_set_mc_addr_list is not supported, "
                 "enable all multicast.\n", __func__);
         rte_eth_allmulticast_enable(dev->id);
-        ret = EDPVS_OK;
+        return  EDPVS_OK;
+    }
+    if (ret) {
+        RTE_LOG(WARNING, NETIF, "%s: rte_eth_dev_set_mc_addr_list failed -- %s",
+                dev->name, rte_strerror(ret));
+        return EDPVS_DPDKAPIFAIL;
     }
 
-    return ret;
+    return EDPVS_OK;
 }
 
 static int dpdk_filter_supported(struct netif_port *dev, enum rte_filter_type fltype)

From eabcd0d9cc3f91c90612911f0fde2f5442fd54e7 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Tue, 10 Dec 2019 14:23:09 +0800
Subject: [PATCH 49/62] laddr: fix crash problem when delete all local IPs

Signed-off-by: ywc689 <ywc689@163.com>
---
 src/ipvs/ip_vs_laddr.c | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/src/ipvs/ip_vs_laddr.c b/src/ipvs/ip_vs_laddr.c
index ae3e70ebd..9403bbe04 100644
--- a/src/ipvs/ip_vs_laddr.c
+++ b/src/ipvs/ip_vs_laddr.c
@@ -159,7 +159,9 @@ static inline void put_laddr(struct dp_vs_laddr *laddr)
 
     if (rte_atomic32_dec_and_test(&laddr->refcnt)) {
         rte_free(laddr);
-        RTE_LOG(DEBUG, IPVS, "%s: delete laddr.\n", __func__);
+#ifdef CONFIG_DPVS_IPVS_DEBUG
+        RTE_LOG(DEBUG, IPVS, "%s: [%02d] delete laddr.\n", rte_lcore_id(), __func__);
+#endif
     }
 }
 
@@ -169,6 +171,7 @@ int dp_vs_laddr_bind(struct dp_vs_conn *conn, struct dp_vs_service *svc)
     int i;
     uint16_t sport = 0;
     struct sockaddr_storage dsin, ssin;
+    bool found = false;
 
     if (!conn || !conn->dest || !svc)
         return EDPVS_INVAL;
@@ -218,7 +221,7 @@ int dp_vs_laddr_bind(struct dp_vs_conn *conn, struct dp_vs_service *svc)
                 snprintf(buf, sizeof(buf), "::");
 
 #ifdef CONFIG_DPVS_IPVS_DEBUG
-            RTE_LOG(ERR, IPVS, "%s: [%d] no lport available on %s, "
+            RTE_LOG(DEBUG, IPVS, "%s: [%02d] no lport available on %s, "
                     "try next laddr.\n", __func__, rte_lcore_id(), buf);
 #endif
             put_laddr(laddr);
@@ -227,16 +230,15 @@ int dp_vs_laddr_bind(struct dp_vs_conn *conn, struct dp_vs_service *svc)
 
         sport = (laddr->af == AF_INET ? (((struct sockaddr_in *)&ssin)->sin_port)
                 : (((struct sockaddr_in6 *)&ssin)->sin6_port));
+        found = true;
         break;
     }
 
-    if (!laddr || sport == 0) {
+    if (!found) {
 #ifdef CONFIG_DPVS_IPVS_DEBUG
-        RTE_LOG(ERR, IPVS, "%s: [%d] no lport available !!\n",
+        RTE_LOG(ERR, IPVS, "%s: [%02d] no lip/lport available !!\n",
                 __func__, rte_lcore_id());
 #endif
-        if (laddr)
-            put_laddr(laddr);
         return EDPVS_RESOURCE;
     }
 

From 5af991cff583018539ab6d5956146a472f1222b4 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Tue, 10 Dec 2019 21:06:17 +0800
Subject: [PATCH 50/62] replace RTE_MAX_LCORE with DPVS_MAX_LCORE for per-lcore
 array

---
 include/inetaddr.h      | 2 +-
 include/tc/sch.h        | 6 +++---
 include/vlan.h          | 2 +-
 src/ipv4_frag.c         | 4 ++--
 src/sa_pool.c           | 8 ++++----
 src/tc/sch_pfifo_fast.c | 4 ++--
 src/tc/tc_ctrl.c        | 2 +-
 src/timer.c             | 4 ++--
 8 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/include/inetaddr.h b/include/inetaddr.h
index 4d8ba2b43..b23e5179e 100644
--- a/include/inetaddr.h
+++ b/include/inetaddr.h
@@ -75,7 +75,7 @@ struct inet_ifaddr {
     struct dpvs_timer       dad_timer;
 
     /* per-lcore socket address pool */
-    struct sa_pool          *sa_pools[RTE_MAX_LCORE];
+    struct sa_pool          *sa_pools[DPVS_MAX_LCORE];
 
 #define this_sa_pool sa_pools[rte_lcore_id()]
 };
diff --git a/include/tc/sch.h b/include/tc/sch.h
index ea4dc6fe1..156dd4f3d 100644
--- a/include/tc/sch.h
+++ b/include/tc/sch.h
@@ -82,14 +82,14 @@ struct Qsch {
     rte_atomic32_t          refcnt;
 
     uint32_t                limit;
-    struct tc_mbuf_head     q[RTE_MAX_LCORE];
+    struct tc_mbuf_head     q[DPVS_MAX_LCORE];
     uint32_t                flags;
 
     struct Qsch_ops         *ops;
 
     /* per-lcore statistics */
-    struct qsch_qstats      qstats[RTE_MAX_LCORE];
-    struct qsch_bstats      bstats[RTE_MAX_LCORE];
+    struct qsch_qstats      qstats[DPVS_MAX_LCORE];
+    struct qsch_bstats      bstats[DPVS_MAX_LCORE];
 
     struct dpvs_timer       rc_timer;
 
diff --git a/include/vlan.h b/include/vlan.h
index 8994adba3..5ae63ad81 100644
--- a/include/vlan.h
+++ b/include/vlan.h
@@ -74,7 +74,7 @@ struct vlan_dev_priv {
 
     /* per-CPU statistics
      * RTE_DEFINE_PER_LCORE cannot be used inside struct */
-    struct vlan_stats   lcore_stats[RTE_MAX_LCORE];
+    struct vlan_stats   lcore_stats[DPVS_MAX_LCORE];
 };
 
 /**
diff --git a/src/ipv4_frag.c b/src/ipv4_frag.c
index b4aabad32..3f38e6a51 100644
--- a/src/ipv4_frag.c
+++ b/src/ipv4_frag.c
@@ -161,7 +161,7 @@ void install_ip4_frag_keywords(void)
  * it need to use rte_eal_mp_remote_launch with additional func.
  * that's not straightforward, so let's use array.
  */
-static struct ipv4_frag ip4_frags[RTE_MAX_LCORE];
+static struct ipv4_frag ip4_frags[DPVS_MAX_LCORE];
 #define this_ip4_frag    (ip4_frags[rte_lcore_id()])
 
 /*
@@ -389,7 +389,7 @@ int ipv4_frag_init(void)
     max_cycles = (rte_get_tsc_hz() + MS_PER_S - 1) / MS_PER_S *
              (ip4_frag_ttl * MS_PER_S);
 
-    for (cid = 0; cid < RTE_MAX_LCORE; cid++) {
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
         if (!rte_lcore_is_enabled(cid))
             continue;
 
diff --git a/src/sa_pool.c b/src/sa_pool.c
index 87e9be7c8..4e35b5efa 100644
--- a/src/sa_pool.c
+++ b/src/sa_pool.c
@@ -133,7 +133,7 @@ struct sa_fdir {
                                            increase after use. */
 };
 
-static struct sa_fdir       sa_fdirs[RTE_MAX_LCORE];
+static struct sa_fdir       sa_fdirs[DPVS_MAX_LCORE];
 
 static uint8_t              sa_nlcore;
 static uint64_t             sa_lcore_mask;
@@ -306,7 +306,7 @@ int sa_pool_create(struct inet_ifaddr *ifa, uint16_t low, uint16_t high)
         return EDPVS_INVAL;
     }
 
-    for (cid = 0; cid < RTE_MAX_LCORE; cid++) {
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
         uint32_t filtids[MAX_FDIR_PROTO];
         struct sa_fdir *fdir = &sa_fdirs[cid];
 
@@ -366,7 +366,7 @@ int sa_pool_destroy(struct inet_ifaddr *ifa)
     if (!ifa || !ifa->sa_pools)
         return EDPVS_INVAL;
 
-    for (cid = 0; cid < RTE_MAX_LCORE; cid++) {
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
         struct sa_pool *ap = ifa->sa_pools[cid];
         struct sa_fdir *fdir = &sa_fdirs[cid];
 
@@ -864,7 +864,7 @@ int sa_pool_init(void)
         return EDPVS_INVAL; /* bad config */
 
     port_base = 0;
-    for (cid = 0; cid < RTE_MAX_LCORE; cid++) {
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
         if (cid >= 64 || !(sa_lcore_mask & (1L << cid)))
             continue;
         assert(rte_lcore_is_enabled(cid) && cid != rte_get_master_lcore());
diff --git a/src/tc/sch_pfifo_fast.c b/src/tc/sch_pfifo_fast.c
index 71cedf6f0..a5bf19893 100644
--- a/src/tc/sch_pfifo_fast.c
+++ b/src/tc/sch_pfifo_fast.c
@@ -39,8 +39,8 @@ static const uint8_t prio2band[TC_PRIO_MAX + 1] = {
 static const int bitmap2band[] = {-1, 0, 1, 0, 2, 0, 1, 0};
 
 struct pfifo_fast_priv {
-    uint32_t bitmap[RTE_MAX_LCORE];
-    struct tc_mbuf_head q[RTE_MAX_LCORE][PFIFO_FAST_BANDS];
+    uint32_t bitmap[DPVS_MAX_LCORE];
+    struct tc_mbuf_head q[DPVS_MAX_LCORE][PFIFO_FAST_BANDS];
 
 #define this_bitmap bitmap[rte_lcore_id()]
 #define this_pff_q  q[rte_lcore_id()]
diff --git a/src/tc/tc_ctrl.c b/src/tc/tc_ctrl.c
index 9d67c5a11..7366d92ee 100644
--- a/src/tc/tc_ctrl.c
+++ b/src/tc/tc_ctrl.c
@@ -60,7 +60,7 @@ static int fill_qsch_param(struct Qsch *sch, struct tc_qsch_param *pr)
     /* handle replies */
     list_for_each_entry(reply, &replies->mq, mq_node) {
         st = (struct tc_qsch_stats *)reply->data;
-        assert(st && reply->cid < RTE_MAX_LCORE);
+        assert(st && reply->cid < DPVS_MAX_LCORE);
 
         pr->qstats_cpus[reply->cid] = st->qstats;
         pr->bstats_cpus[reply->cid] = st->bstats;
diff --git a/src/timer.c b/src/timer.c
index 3376321ff..089649dcf 100644
--- a/src/timer.c
+++ b/src/timer.c
@@ -261,8 +261,8 @@ static void timer_expire(struct timer_scheduler *sched, struct dpvs_timer *timer
 #ifdef CONFIG_TIMER_MEASURE
 static inline void deviation_measure(void)
 {
-    static struct timeval tv_prev[RTE_MAX_LCORE];
-    static uint32_t count[RTE_MAX_LCORE];
+    static struct timeval tv_prev[DPVS_MAX_LCORE];
+    static uint32_t count[DPVS_MAX_LCORE];
     struct timeval tv_now, tv_elapse;
 
     if (count[rte_lcore_id()]++ % DPVS_TIMER_HZ == 0) {

From 72e309a4ba238085501e37735ce4b8b4e2700d92 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Thu, 19 Dec 2019 20:51:37 +0800
Subject: [PATCH 51/62] inetaddr/sapool: per-cpu refactor

---
 include/conf/inetaddr.h                       |   45 +-
 include/ctrl.h                                |    6 +-
 include/inetaddr.h                            |   32 +-
 include/linux_ipv6.h                          |    5 +-
 include/netif.h                               |    2 +-
 include/sa_pool.h                             |    4 +-
 src/ctrl.c                                    |    2 +-
 src/inetaddr.c                                | 2245 +++++++++++------
 src/ipvs/ip_vs_laddr.c                        |    8 +-
 src/netif.c                                   |   26 +-
 src/route.c                                   |    9 +-
 src/sa_pool.c                                 |  363 ++-
 tools/dpip/addr.c                             |   90 +-
 tools/keepalived/keepalived/check/libipvs.c   |   27 +-
 .../keepalived/vrrp/vrrp_ipaddress.c          |   31 +-
 15 files changed, 1839 insertions(+), 1056 deletions(-)

diff --git a/include/conf/inetaddr.h b/include/conf/inetaddr.h
index 16a5e79c4..9f0aa99dc 100644
--- a/include/conf/inetaddr.h
+++ b/include/conf/inetaddr.h
@@ -42,27 +42,56 @@ enum {
 };
 
 /* leverage IFA_F_XXX in linux/if_addr.h*/
-#define IFA_F_SAPOOL        0x10000 /* if address with sockaddr pool */
+#define IFA_F_SAPOOL    0x10000 /* if address with sockaddr pool */
 
-struct inet_addr_param {
+/* ifa command flags */
+#define IFA_F_OPS_VERBOSE   0x0001
+#define IFA_F_OPS_STATS     0x0002
+
+typedef enum ifaddr_ops {
+    INET_ADDR_GET       = 1,
+    INET_ADDR_ADD,
+    INET_ADDR_DEL,
+    INET_ADDR_MOD,
+    INET_ADDR_FLUSH,
+    INET_ADDR_SYNC,
+} ifaddr_ops_t;
+
+struct inet_addr_entry {
     int                 af;
     char                ifname[IFNAMSIZ];
     union inet_addr     addr;
-    uint8_t             plen;
     union inet_addr     bcast;
+    uint8_t             plen;
+    uint8_t             scope;
+    lcoreid_t           cid;
     uint32_t            valid_lft;
     uint32_t            prefered_lft;
-    uint8_t             scope;
     uint32_t            flags;
+} __attribute__((__packed__));
 
+struct inet_addr_stats {
     uint32_t            sa_used;
     uint32_t            sa_free;
     uint32_t            sa_miss;
 } __attribute__((__packed__));
 
-struct inet_addr_param_array {
-    int                 naddr;
-    struct inet_addr_param addrs[0];
-};
+struct inet_addr_param {
+    ifaddr_ops_t            ifa_ops;
+    uint32_t                ifa_ops_flags;
+    struct inet_addr_entry  ifa_entry;
+} __attribute__((__packed__));
+
+struct inet_addr_data {
+    struct inet_addr_entry  ifa_entry;
+    struct inet_addr_stats  ifa_stats;
+} __attribute__((__packed__));
+
+struct inet_addr_data_array {
+    ifaddr_ops_t            ops;
+    uint32_t                ops_flags;
+    int                     naddr;
+    struct inet_addr_data   addrs[0];
+} __attribute__((__packed__));
 
 #endif /* __DPVS_INETADDR_CONF_H__ */
diff --git a/include/ctrl.h b/include/ctrl.h
index 451cb89d5..9010b25bb 100644
--- a/include/ctrl.h
+++ b/include/ctrl.h
@@ -195,7 +195,6 @@ int msg_dump(const struct dpvs_msg *msg, char *buf, int len);
 #define MSG_TYPE_BLKLST_ADD                 9
 #define MSG_TYPE_BLKLST_DEL                 10
 #define MSG_TYPE_STATS_GET                  11
-#define MSG_TYPE_SAPOOL_STATS               12
 #define MSG_TYPE_TC_STATS                   13
 #define MSG_TYPE_CONN_GET                   14
 #define MSG_TYPE_CONN_GET_ALL               15
@@ -205,10 +204,13 @@ int msg_dump(const struct dpvs_msg *msg, char *buf, int len);
 #define MSG_TYPE_IPSET_ADD                  19
 #define MSG_TYPE_IPSET_DEL                  20
 #define MSG_TYPE_IPSET_FLUSH                21
+#define MSG_TYPE_IFA_GET                    22
+#define MSG_TYPE_IFA_SET                    23
+#define MSG_TYPE_IFA_SYNC                   24
 
 /* for svc per_core, refer to service.h*/
 enum {
-    MSG_TYPE_SVC_SET_FLUSH = MSG_TYPE_IPSET_FLUSH + 1,
+    MSG_TYPE_SVC_SET_FLUSH = MSG_TYPE_IFA_SYNC + 1,
     MSG_TYPE_SVC_SET_ZERO,    
     MSG_TYPE_SVC_SET_ADD,      
     MSG_TYPE_SVC_SET_EDIT,    
diff --git a/include/inetaddr.h b/include/inetaddr.h
index b23e5179e..43173ecb1 100644
--- a/include/inetaddr.h
+++ b/include/inetaddr.h
@@ -28,10 +28,13 @@
 
 struct inet_device {
     struct netif_port   *dev;
-    struct list_head    ifa_list;   /* inet_ifaddr list */
-    struct list_head    ifm_list;   /* inet_ifmcaddr list*/
-    rte_atomic32_t      ifa_cnt;
-    rte_atomic32_t      refcnt;
+    struct list_head    ifa_list[DPVS_MAX_LCORE];   /* inet_ifaddr list */
+    struct list_head    ifm_list[DPVS_MAX_LCORE];   /* inet_ifmcaddr list*/
+    uint32_t            ifa_cnt[DPVS_MAX_LCORE];
+    rte_atomic32_t      refcnt;                     /* not used yet */
+#define this_ifa_list   ifa_list[rte_lcore_id()]
+#define this_ifm_list   ifm_list[rte_lcore_id()]
+#define this_ifa_cnt    ifa_cnt[rte_lcore_id()]
 };
 
 /*
@@ -40,8 +43,9 @@ struct inet_device {
 struct inet_ifmcaddr {
     struct list_head        d_list;
     struct inet_device      *idev;
-    union  inet_addr         addr;
-    uint32_t                flags;
+    int                     af;
+    union  inet_addr        addr;
+    uint32_t                flags;      /* not used yet */
     rte_atomic32_t          refcnt;
 };
 
@@ -75,18 +79,16 @@ struct inet_ifaddr {
     struct dpvs_timer       dad_timer;
 
     /* per-lcore socket address pool */
-    struct sa_pool          *sa_pools[DPVS_MAX_LCORE];
-
-#define this_sa_pool sa_pools[rte_lcore_id()]
+    struct sa_pool          *sa_pool;
 };
 
-int inet_addr_add(int af, const struct netif_port *dev,
+int inet_addr_add(int af, struct netif_port *dev,
                   const union inet_addr *addr, uint8_t plen,
                   const union inet_addr *bcast,
                   uint32_t valid_lft, uint32_t prefered_lft,
                   uint8_t scope, uint32_t flags);
 
-int inet_addr_mod(int af, const struct netif_port *dev,
+int inet_addr_mod(int af, struct netif_port *dev,
                   const union inet_addr *addr, uint8_t plen,
                   const union inet_addr *bcast,
                   uint32_t valid_lft, uint32_t prefered_lft,
@@ -105,11 +107,9 @@ void inet_addr_select(int af, const struct netif_port *dev,
 
 struct inet_ifaddr *inet_addr_ifa_get(int af, const struct netif_port *dev,
                                       union inet_addr *addr);
-
-static inline void inet_addr_ifa_put(struct inet_ifaddr *ifa)
-{
-    rte_atomic32_dec(&ifa->refcnt);
-}
+struct inet_ifaddr *inet_addr_ifa_get_expired(int af, const struct netif_port *dev,
+                                              union inet_addr *addr);
+void inet_addr_ifa_put(struct inet_ifaddr *ifa);
 
 bool inet_chk_mcast_addr(int af, struct netif_port *dev,
                         const union inet_addr *group,
diff --git a/include/linux_ipv6.h b/include/linux_ipv6.h
index 39a495ebd..622bf0e3f 100644
--- a/include/linux_ipv6.h
+++ b/include/linux_ipv6.h
@@ -583,6 +583,7 @@ static inline int ipv6_addr_select(struct inet_device *idev,
     int dst_type;
     struct inet_ifaddr *ifa;
     int i;
+    lcoreid_t cid = rte_lcore_id();
 
     dst_type  = __ipv6_addr_type(&daddr->in6);
     dst.addr  = &daddr->in6;
@@ -592,7 +593,9 @@ static inline int ipv6_addr_select(struct inet_device *idev,
     hiscore->rule = -1;
     hiscore->ifa  = NULL;
 
-    list_for_each_entry(ifa, &idev->ifa_list, d_list) {
+    list_for_each_entry(ifa, &idev->ifa_list[cid], d_list) {
+        if (ifa->af != AF_INET6)
+            continue;
 
         if (ifa->flags & IFA_F_TENTATIVE)
             continue;
diff --git a/include/netif.h b/include/netif.h
index 07b1708b0..25fff85ff 100644
--- a/include/netif.h
+++ b/include/netif.h
@@ -55,7 +55,7 @@ enum {
 /* maximum bonding slave number */
 #define NETIF_MAX_BOND_SLAVES       32
 /* maximum number of hw addr */
-#define NETIF_MAX_HWADDR            64
+#define NETIF_MAX_HWADDR            1024
 /* maximum number of kni device */
 #define NETIF_MAX_KNI               64
 /* maximum number of DPDK rte device */
diff --git a/include/sa_pool.h b/include/sa_pool.h
index 7a136aebb..d3477acb2 100644
--- a/include/sa_pool.h
+++ b/include/sa_pool.h
@@ -52,7 +52,6 @@ int sa_pool_init(void);
 int sa_pool_term(void);
 
 int sa_pool_create(struct inet_ifaddr *ifa, uint16_t low, uint16_t high);
-
 int sa_pool_destroy(struct inet_ifaddr *ifa);
 
 /**
@@ -67,7 +66,8 @@ int sa_release(const struct netif_port *dev,
                const struct sockaddr_storage *daddr,
                const struct sockaddr_storage *saddr);
 
-int sa_pool_stats(const struct inet_ifaddr *ifa, struct sa_pool_stats *stats);
+int get_sa_pool_stats(const struct inet_ifaddr *ifa,
+                       struct sa_pool_stats *stats);
 
 /* config file */
 void install_sa_pool_keywords(void);
diff --git a/src/ctrl.c b/src/ctrl.c
index a99a84765..f80c18a78 100644
--- a/src/ctrl.c
+++ b/src/ctrl.c
@@ -744,7 +744,7 @@ int msg_slave_process(int step)
         if (likely(msg_type->unicast_msg_cb != NULL)) {
             if (msg_type->unicast_msg_cb(msg) < 0) {
                 add_msg_flags(msg, DPVS_MSG_F_CALLBACK_FAIL);
-                RTE_LOG(WARNING, MSGMGR, "%s:msg@%p, msg_type %d callback failed on lcore %d\n",
+                RTE_LOG(DEBUG, MSGMGR, "%s:msg@%p, msg_type %d callback failed on lcore %d\n",
                      __func__, msg, msg->type, cid);
             }
         }
diff --git a/src/inetaddr.c b/src/inetaddr.c
index 32e924594..565f3c7ce 100644
--- a/src/inetaddr.c
+++ b/src/inetaddr.c
@@ -15,40 +15,65 @@
  * GNU General Public License for more details.
  *
  */
-#include <stdlib.h>
-#include <stdbool.h>
 #include <assert.h>
-#include <linux/if_addr.h>
-#include "common.h"
 #include "dpdk.h"
+#include "ctrl.h"
 #include "netif.h"
+#include "netif_addr.h"
 #include "timer.h"
-#include "route.h"
-#include "ctrl.h"
 #include "sa_pool.h"
+#include "ndisc.h"
+#include "route.h"
+#include "route6.h"
 #include "inetaddr.h"
-#include "neigh.h"
-#include "netif_addr.h"
 #include "conf/inetaddr.h"
-#include "route6.h"
-#include "ndisc.h"
 
 #define IFA
-#define RTE_LOGTYPE_IFA             RTE_LOGTYPE_USER1
-#define INET_ADDR_LOCK
-
-#define INET_ADDR_HSIZE_SHIFT       8
-#define INET_ADDR_HSIZE             (1U << INET_ADDR_HSIZE_SHIFT)
-
-enum ifaddr_timer_t
-{
-    INET_NONE,
-    INET_DAD
+#define RTE_LOGTYPE_IFA         RTE_LOGTYPE_USER1
+
+#define INET_ADDR_HSIZE_SHIFT   8
+#define INET_ADDR_HSIZE         (1U << INET_ADDR_HSIZE_SHIFT)
+
+struct ifaddr_action {
+    int                 af;
+    union inet_addr     addr;
+    union inet_addr     bcast;
+    uint8_t             plen;
+    uint8_t             scope;
+    uint32_t            flags;
+    uint32_t            valid_lft;
+    uint32_t            prefered_lft;
+    struct netif_port   *dev;
+
+    ifaddr_ops_t        op;
 };
 
-static struct list_head     in_addr_tab[INET_ADDR_HSIZE];
-static rte_rwlock_t         in_addr_lock;
-static rte_atomic32_t       in_addr_cnt;
+static struct list_head     inet_addr_tab[DPVS_MAX_LCORE][INET_ADDR_HSIZE];
+static uint32_t             inet_addr_cnt[DPVS_MAX_LCORE];
+static struct list_head     ifa_expired_list[DPVS_MAX_LCORE];
+static uint8_t              slave_workers;
+static uint64_t             slave_worker_mask;
+
+/* forward declarations */
+static void ifa_free(struct inet_ifaddr **ifa_p);
+static void fill_ifaddr_action(int af, struct netif_port *dev,
+                               const union inet_addr *addr, uint8_t plen,
+                               const union inet_addr *bcast,
+                               uint32_t valid_lft, uint32_t prefered_lft,
+                               uint8_t scope, uint32_t flags, ifaddr_ops_t op,
+                               struct ifaddr_action *param);
+static int __inet_addr_add(const struct ifaddr_action *param);
+static int __inet_addr_del(const struct ifaddr_action *param);
+static int __inet_addr_mod(const struct ifaddr_action *param);
+static int __inet_addr_flush(const struct ifaddr_action *param);
+static int __inet_addr_sync(const struct ifaddr_action *param);
+static int inet_addr_sync(const struct ifaddr_action *param);
+
+static uint32_t ifa_msg_seq(void)
+{
+    static uint32_t counter = 0;        /* for mc msg, called from master only */
+    return counter++;
+}
 
 static inline struct inet_device *dev_get_idev(const struct netif_port *dev)
 {
@@ -57,310 +82,111 @@ static inline struct inet_device *dev_get_idev(const struct netif_port *dev)
     return dev->in_ptr;
 }
 
-static void idev_put(struct inet_device *idev)
+static inline void idev_put(struct inet_device *idev)
 {
     rte_atomic32_dec(&idev->refcnt);
 }
 
-static uint32_t inline in_addr_hash(struct in_addr *in)
-{
-    uint32_t hash;
-
-    hash = (in->s_addr * 0x61C88647) >> (32 - INET_ADDR_HSIZE_SHIFT);
-    return hash % INET_ADDR_HSIZE;
-}
-
-static inline bool ifa_prefix_check(int af, const union inet_addr *addr,
-                                    uint8_t plen)
+static inline void imc_hash(struct inet_ifmcaddr *imc, struct inet_device *idev)
 {
-    if ((af != AF_INET && af != AF_INET6)
-            || inet_is_addr_any(af, addr)
-            || (af == AF_INET && plen > 32)
-            || (af == AF_INET6 && plen > 128))
-        return false;
-    else
-        return true;
+    list_add(&imc->d_list, &idev->this_ifm_list);
+    rte_atomic32_inc(&imc->refcnt);
 }
 
-/* zero for infinity lifetime */
-static void ifa_set_lifetime(struct inet_ifaddr *ifa,
-                             uint32_t valid_lft, uint32_t prefered_lft)
+static inline void imc_unhash(struct inet_ifmcaddr *imc)
 {
-    /* XXX: do not support prefered_lft */
-    prefered_lft = valid_lft;
-
-    if (!valid_lft)
-        ifa->flags |= IFA_F_PERMANENT;
-    else
-        ifa->flags &= ~IFA_F_PERMANENT;
+    assert(rte_atomic32_read(&imc->refcnt) > 1);
 
-    ifa->valid_lft = valid_lft;
-    ifa->prefered_lft = prefered_lft;
-    return;
+    list_del(&imc->d_list);
+    rte_atomic32_dec(&imc->refcnt);
 }
 
-static struct inet_ifaddr *__ifa_lookup(struct inet_device *idev,
-                                        const union inet_addr *addr,
-                                        uint8_t plen, int af)
+static struct inet_ifmcaddr *imc_lookup(int af, const struct inet_device *idev,
+                                        const union inet_addr *maddr)
 {
-    struct inet_ifaddr *ifa;
+    struct inet_ifmcaddr *imc;
+    lcoreid_t cid = rte_lcore_id();
 
-    list_for_each_entry(ifa, &idev->ifa_list, d_list) {
-        if ((!plen || ifa->plen == plen) && ifa->af == af
-             && inet_addr_equal(ifa->af, &ifa->addr, addr)) {
-            return ifa;
+    list_for_each_entry(imc, &idev->ifm_list[cid], d_list) {
+        if (inet_addr_equal(af, &imc->addr, maddr)) {
+            rte_atomic32_inc(&imc->refcnt);
+            return imc;
         }
     }
 
     return NULL;
 }
 
-static int __ifa_insert(struct inet_device *idev, struct inet_ifaddr *ifa)
-{
-    uint32_t hash = in_addr_hash(&ifa->addr.in);
-
-    /* add to inet_device's list */
-    list_add(&ifa->d_list, &idev->ifa_list);
-    rte_atomic32_inc(&ifa->refcnt);
-
-    /* add to global hash table */
-    list_add(&ifa->h_list, &in_addr_tab[hash]);
-    rte_atomic32_inc(&ifa->refcnt);
-
-    return EDPVS_OK;
-}
-
-static inline void ___ifa_remove(struct inet_ifaddr *ifa)
-{
-    list_del(&ifa->d_list);
-    list_del(&ifa->h_list);
-    INIT_LIST_HEAD(&ifa->d_list);
-    INIT_LIST_HEAD(&ifa->h_list);
-}
-
-/* make lookup and remove atmomic, also cancel the timer */
-static int __ifa_remove(struct inet_device *idev, const union inet_addr *addr,
-                        uint8_t plen, struct inet_ifaddr **ifa, int af)
-{
-    struct inet_ifaddr *ent;
-
-    if ((ent = __ifa_lookup(idev, addr, plen, af)) == NULL)
-        return EDPVS_NOTEXIST;
-
-    if (rte_atomic32_read(&ent->refcnt) > 2)
-        return EDPVS_BUSY;
-
-    ___ifa_remove(ent);
-
-    if (ifa)
-        *ifa = ent;
-    return EDPVS_OK;
-}
-
-static int __ifa_add_route4(struct inet_ifaddr *ifa)
-{
-    int err;
-    union inet_addr net;
-
-    err = route_add(&ifa->addr.in, 32, RTF_LOCALIN,
-                    NULL, ifa->idev->dev, NULL, 0, 0);
-    /* may already added by same IP with diff plen */
-    if (err != EDPVS_OK && err != EDPVS_EXIST)
-        return err;
-
-    if (ifa->plen == 32)
-        return EDPVS_OK;
-
-    err = inet_addr_net(ifa->af, &ifa->addr, &ifa->mask, &net);
-    if (err != EDPVS_OK)
-        goto errout;
-
-    err = route_add(&net.in, ifa->plen, RTF_FORWARD,
-                    NULL, ifa->idev->dev, &ifa->addr.in, 0, 0);
-    /* may already added by another IP */
-    if (err != EDPVS_OK && err != EDPVS_EXIST)
-        goto errout;
-
-    return EDPVS_OK;
-
-errout:
-    route_del(&ifa->addr.in, ifa->plen, RTF_LOCALIN,
-              NULL, ifa->idev->dev, NULL, 0, 0);
-    return err;
-}
-
-static int __ifa_add_route6(struct inet_ifaddr *ifa)
-{
-    int err;
-    struct in6_addr net;
-
-    err = route6_add(&ifa->addr.in6, 128, RTF_LOCALIN,
-                     &in6addr_any, ifa->idev->dev,
-                     &in6addr_any, ifa->idev->dev->mtu);
-
-    if (err != EDPVS_OK && err != EDPVS_EXIST)
-        return err;
-
-    if (ifa->plen == 128)
-        return EDPVS_OK;
-
-    ipv6_addr_prefix(&net, &ifa->addr.in6, ifa->plen);
-
-    err = route6_add(&net, ifa->plen, RTF_FORWARD,
-                     &in6addr_any, ifa->idev->dev,
-                     &ifa->addr.in6, ifa->idev->dev->mtu);
-
-    if (err != EDPVS_OK && err != EDPVS_EXIST)
-        goto errout;
-
-    return EDPVS_OK;
-
-errout:
-    route6_del(&ifa->addr.in6, 128, RTF_LOCALIN,
-               &in6addr_any, ifa->idev->dev,
-               &in6addr_any, ifa->idev->dev->mtu);
-    return err;
-}
-
-static int ifa_add_route(struct inet_ifaddr *ifa)
-{
-    if (ifa->af == AF_INET)
-        return __ifa_add_route4(ifa);
-    else if(ifa->af == AF_INET6)
-        return __ifa_add_route6(ifa);
-    else
-        return EDPVS_NOTSUPP;
-}
-
-static int __ifa_del_route4(struct inet_ifaddr *ifa)
-{
-    int err;
-    union inet_addr net;
-
-    err = route_del(&ifa->addr.in, 32, RTF_LOCALIN,
-                    NULL, ifa->idev->dev, NULL, 0, 0);
-    if (err != EDPVS_OK && err != EDPVS_NOTEXIST)
-        RTE_LOG(WARNING, IFA, "%s: fail to delete route", __func__);
-
-    if (ifa->plen == 32)
-        return EDPVS_OK;
-
-    err = inet_addr_net(ifa->af, &ifa->addr, &ifa->mask, &net);
-    if (err != EDPVS_OK)
-        RTE_LOG(WARNING, IFA, "%s: fail to delete route", __func__);
-
-    err = route_del(&net.in, ifa->plen, RTF_FORWARD,
-                    NULL, ifa->idev->dev, &ifa->addr.in, 0, 0);
-    if (err != EDPVS_OK && err != EDPVS_NOTEXIST)
-        RTE_LOG(WARNING, IFA, "%s: fail to delete route", __func__);
-
-    return EDPVS_OK;
-}
-
-static int __ifa_del_route6(struct inet_ifaddr *ifa)
-{
-    int err;
-    struct in6_addr net;
-
-    err = route6_del(&ifa->addr.in6, 128, RTF_LOCALIN,
-                     &in6addr_any, ifa->idev->dev,
-                     &in6addr_any, ifa->idev->dev->mtu);
-    if (err != EDPVS_OK && err != EDPVS_NOTEXIST)
-        RTE_LOG(WARNING, IFA, "%s: fail to delete route", __func__);
-
-    if (ifa->plen == 128)
-        return EDPVS_OK;
-
-    ipv6_addr_prefix(&net, &ifa->addr.in6, ifa->plen);
-
-    err = route6_del(&net, ifa->plen, RTF_FORWARD,
-                     &in6addr_any, ifa->idev->dev,
-                     &in6addr_any, ifa->idev->dev->mtu);
-    if (err != EDPVS_OK && err != EDPVS_NOTEXIST)
-        RTE_LOG(WARNING, IFA, "%s: fail to delete route", __func__);
-
-    return EDPVS_OK;
-}
-
-static int ifa_del_route(struct inet_ifaddr *ifa)
-{
-    if (ifa->af == AF_INET)
-        return __ifa_del_route4(ifa);
-    else if(ifa->af == AF_INET6)
-        return __ifa_del_route6(ifa);
-    else
-        return EDPVS_NOTSUPP;
-}
-
-static struct inet_ifmcaddr *__imc_lookup( int af, const struct inet_device *idev,
-                                           const union inet_addr *maddr)
+static void imc_put(struct inet_ifmcaddr *imc)
 {
-    struct inet_ifmcaddr *imc;
+    char ipstr[64];
 
-    list_for_each_entry(imc, &idev->ifm_list, d_list) {
-        if (inet_addr_equal(af, &imc->addr, maddr)) {
-            return imc;
-        }
+    if (rte_atomic32_dec_and_test(&imc->refcnt)) {
+        RTE_LOG(DEBUG, IFA, "[%02d] %s: del mcaddr %s\n",
+                rte_lcore_id(), __func__,
+                inet_ntop(imc->af, &imc->addr, ipstr, sizeof(ipstr)));
+        /* check unhashed? */
+        rte_free(imc);
     }
-
-    return NULL;
 }
 
 static int idev_mc_add(int af, struct inet_device *idev,
                        const union inet_addr *maddr)
 {
-    struct inet_ifmcaddr  *imc;
+    struct inet_ifmcaddr *imc;
+    char ipstr[64];
 
-    imc = __imc_lookup(af, idev, maddr);
+    imc = imc_lookup(af, idev, maddr);
     if (imc) {
-        rte_atomic32_inc(&imc->refcnt);
-        return EDPVS_OK;
+        imc_put(imc);
+        return EDPVS_EXIST;
     }
 
     imc = rte_calloc(NULL, 1, sizeof(struct inet_ifmcaddr), RTE_CACHE_LINE_SIZE);
-    if (!imc) {
+    if (!imc)
         return EDPVS_NOMEM;
-    }
 
+    imc->af   = af;
     imc->idev = idev;
-    memcpy(&imc->addr, maddr, sizeof(*maddr));
-    list_add(&imc->d_list, &idev->ifm_list);
-    rte_atomic32_set(&imc->refcnt, 1);
+    imc->addr = *maddr;
+    rte_atomic32_init(&imc->refcnt);
+
+    imc_hash(imc, idev);
+
+    RTE_LOG(DEBUG, IFA, "[%02d] %s: create and add mcaddr %s\n",
+            rte_lcore_id(), __func__,
+            inet_ntop(af, &imc->addr, ipstr, sizeof(ipstr)));
 
     return EDPVS_OK;
 }
 
 static int idev_mc_del(int af, struct inet_device *idev,
-                      const union inet_addr *maddr)
+                       const union inet_addr *maddr)
 {
     struct inet_ifmcaddr *imc;
 
-    imc = __imc_lookup(af, idev, maddr);
-    if (!imc) {
+    imc = imc_lookup(af, idev, maddr);
+    if (!imc)
         return EDPVS_NOTEXIST;
-    }
 
-    rte_atomic32_dec(&imc->refcnt);
-    if (rte_atomic32_read(&imc->refcnt) < 1) {
-        list_del(&imc->d_list);
-        rte_free(imc);
-    }
+    imc_unhash(imc);
+    imc_put(imc);
+
     return EDPVS_OK;
 }
 
-/* support ipv6 only, and not support source filter */
 static int ifa_add_del_mcast(struct inet_ifaddr *ifa, bool add)
 {
+    int err;
     union inet_addr iaddr;
     struct ether_addr eaddr;
-    int err = 0;
 
+    /* for ipv6 only */
     if (ifa->af != AF_INET6)
         return EDPVS_OK;
 
     memset(&iaddr, 0, sizeof(iaddr));
     memset(&eaddr, 0, sizeof(eaddr));
-
     addrconf_addr_solict_mult(&ifa->addr.in6, &iaddr.in6);
     ipv6_mac_mult(&iaddr.in6, &eaddr);
 
@@ -368,10 +194,8 @@ static int ifa_add_del_mcast(struct inet_ifaddr *ifa, bool add)
         err = idev_mc_add(ifa->af, ifa->idev, &iaddr);
         if (err && err != EDPVS_EXIST && err != EDPVS_NOTEXIST)
             return err;
-
         err = netif_mc_add(ifa->idev->dev, &eaddr);
         if (err && err != EDPVS_EXIST && err != EDPVS_NOTEXIST) {
-            /* rollback */
             idev_mc_del(ifa->af, ifa->idev, &iaddr);
             return err;
         }
@@ -379,10 +203,8 @@ static int ifa_add_del_mcast(struct inet_ifaddr *ifa, bool add)
         err = idev_mc_del(ifa->af, ifa->idev, &iaddr);
         if (err && err != EDPVS_EXIST && err != EDPVS_NOTEXIST)
             return err;
-
         err = netif_mc_del(ifa->idev->dev, &eaddr);
         if (err && err != EDPVS_EXIST && err != EDPVS_NOTEXIST) {
-            /* rollback */
             idev_mc_add(ifa->af, ifa->idev, &iaddr);
             return err;
         }
@@ -391,90 +213,13 @@ static int ifa_add_del_mcast(struct inet_ifaddr *ifa, bool add)
     return EDPVS_OK;
 }
 
-static int inet_ifaddr_dad_completed(void *arg)
-{
-    struct inet_ifaddr *ifa = arg;
-
-    rte_rwlock_write_lock(&in_addr_lock);
-    dpvs_timer_cancel_nolock(&ifa->timer, true);
-    ifa->flags &= ~(IFA_F_TENTATIVE|IFA_F_OPTIMISTIC|IFA_F_DADFAILED);
-    rte_rwlock_write_unlock(&in_addr_lock);
-
-    return DTIMER_OK;
-}
-
-/* change timer callback, refer to 'addrconf_mod_timer' */
-static void inet_ifaddr_mod_timer(struct inet_ifaddr *ifa,
-                                  enum ifaddr_timer_t what,
-                                  struct timeval *when)
-{
-    dpvs_timer_cancel(&ifa->timer, true);
-
-    switch (what) {
-    case INET_DAD:
-        dpvs_timer_sched(&ifa->timer, when, inet_ifaddr_dad_completed,
-                                                           ifa, true);
-        break;
-    /* TODO: other timer support */
-    default:
-        break;
-    }
-}
-
-static void inet_ifaddr_dad_stop(struct inet_ifaddr *ifa, int dad_failed)
-{
-    rte_rwlock_write_lock(&in_addr_lock);
-    if (ifa->flags & IFA_F_PERMANENT) {
-        if (dad_failed && ifa->flags & IFA_F_TENTATIVE)
-            ifa->flags |= IFA_F_DADFAILED;
-        dpvs_timer_cancel(&ifa->timer, true);
-        rte_rwlock_write_unlock(&in_addr_lock);
-    } else if (ifa->flags & IFA_F_TEMPORARY) {
-        /* TODO: support privacy addr */
-        RTE_LOG(ERR, IFA, "%s: Not support privacy addr\n", __func__);
-        rte_rwlock_write_unlock(&in_addr_lock);
-    } else {
-        inet_addr_del(AF_INET6, ifa->idev->dev, &ifa->addr, ifa->plen);
-        rte_rwlock_write_unlock(&in_addr_lock);
-    }
-}
-
-/* recv DAD: change ifa's state */
-void inet_ifaddr_dad_failure(struct inet_ifaddr *ifa)
-{
-    inet_ifaddr_dad_stop(ifa, 1);
-}
-
-/* call me by lock */
-static void inet_ifaddr_dad_start(struct inet_ifaddr *ifa)
-{
-    struct timeval tv;
-
-    if (ifa->flags & IFA_F_NODAD ||
-        !(ifa->flags & IFA_F_TENTATIVE)) {
-        ifa->flags &= ~(IFA_F_TENTATIVE|IFA_F_OPTIMISTIC|IFA_F_DADFAILED);
-        return;
-    }
-
-    tv.tv_sec  = 3;
-    tv.tv_usec = 0;
-
-    ifa->flags |= IFA_F_TENTATIVE | IFA_F_OPTIMISTIC;
-    inet_ifaddr_mod_timer(ifa, INET_DAD, &tv);
-    ndisc_send_dad(ifa->idev->dev, &ifa->addr.in6);
-}
-
-/*
- * no need to rollback, dpvs can not start successfully;
- * should not be init in 'inetaddr_init';
- * because multicast address should be added after port_start
- */
+/* add ipv6 multicast address after port start */
 int idev_add_mcast_init(struct netif_port *dev)
 {
+    int err;
     struct inet_device *idev;
-    struct ether_addr eaddr_nodes, eaddr_routers;
     union inet_addr all_nodes, all_routers;
-    int err = 0;
+    struct ether_addr eaddr_nodes, eaddr_routers;
 
     idev = dev_get_idev(dev);
 
@@ -487,23 +232,23 @@ int idev_add_mcast_init(struct netif_port *dev)
     ipv6_mac_mult(&all_nodes.in6, &eaddr_nodes);
     ipv6_mac_mult(&all_routers.in6, &eaddr_routers);
 
-    rte_rwlock_write_lock(&in_addr_lock);
     err = idev_mc_add(AF_INET6, idev, &all_nodes);
     if (err != EDPVS_OK)
         goto errout;
+
     err = netif_mc_add(idev->dev, &eaddr_nodes);
     if (err != EDPVS_OK)
         goto free_idev_nodes;
+
     err = idev_mc_add(AF_INET6, idev, &all_routers);
     if (err != EDPVS_OK)
         goto free_netif_nodes;
+
     err = netif_mc_add(idev->dev, &eaddr_routers);
     if (err != EDPVS_OK)
         goto free_idev_routers;
 
-    rte_rwlock_write_unlock(&in_addr_lock);
     idev_put(idev);
-
     return EDPVS_OK;
 
 free_idev_routers:
@@ -513,513 +258,1418 @@ int idev_add_mcast_init(struct netif_port *dev)
 free_idev_nodes:
     idev_mc_del(AF_INET6, idev, &all_nodes);
 errout:
-    rte_rwlock_write_unlock(&in_addr_lock);
     idev_put(idev);
     return err;
 }
 
-static int ifa_expire(void *arg)
+/* refer to linux:ipv6_chk_mcast_addr */
+bool inet_chk_mcast_addr(int af, struct netif_port *dev,
+                           const union inet_addr *group,
+                           const union inet_addr *src)
 {
-    struct inet_ifaddr *ifa = arg;
-    struct timeval tv;
-
-    /**
-     * TODO: handle invalid/prefered lifttime
-     * move to expire list instead of delete ?
-     */
-    rte_rwlock_write_lock(&in_addr_lock);
-    if (rte_atomic32_read(&ifa->refcnt) > 2) {
-        RTE_LOG(WARNING, IFA, "%s: addr in use, try expire later\n", __func__);
-        tv.tv_sec = 5;
-        tv.tv_usec = 0;
-        dpvs_timer_update_nolock(&ifa->timer, &tv, true);
-        rte_rwlock_write_unlock(&in_addr_lock);
-        return DTIMER_OK;
-    }
+    int ret;
+    struct inet_device *idev;
+    struct inet_ifmcaddr *imc;
+
+    /* for ipv6 only */
+    if (af != AF_INET6)
+        return true;
+
+    idev = dev_get_idev(dev);
+    if (unlikely(idev == NULL))
+        return false;
+
+    ret = false;
+    imc = imc_lookup(af, idev, group);
+    if (imc) {
+        if (src && !ipv6_addr_any(&src->in6)) {
+            /* TODO: check source-specific multicast (SSM) if @src is assigned */
+            ret = true;
+        } else {
+            ret = true;
+        }
+        imc_put(imc);
+    }
+
+    idev_put(idev);
+
+    return ret;
+}
+
+static inline bool ifa_prefix_check(int af, const union inet_addr *addr,
+                                    uint8_t plen)
+{
+    if (af != AF_INET && af != AF_INET6)
+        return false;
+
+    if (inet_is_addr_any(af, addr))
+        return false;
+
+    if ((af == AF_INET && plen > 32) ||
+        (af == AF_INET6 && plen > 128))
+        return false;
+
+    return true;
+}
+
+static inline void ifa_set_lifetime(struct inet_ifaddr *ifa,
+                                    uint32_t valid_lft, uint32_t prefered_lft)
+{
+    /* TODO: support prefered_lft */
+    prefered_lft = valid_lft;
+
+    if (!valid_lft)
+        ifa->flags |= IFA_F_PERMANENT;
+    else
+        ifa->flags &= ~IFA_F_PERMANENT;
+
+    ifa->valid_lft      = valid_lft;
+    ifa->prefered_lft   = prefered_lft;
+}
+
+static uint32_t ifa_hash_key(int af, const union inet_addr *addr)
+{
+    uint32_t hash, fold;
+
+    fold = inet_addr_fold(af, addr);
+    hash = (fold * 0x61C88647) >> (32 - INET_ADDR_HSIZE_SHIFT);
+
+    return hash % INET_ADDR_HSIZE;
+}
+
+static struct inet_ifaddr *ifa_lookup(struct inet_device *idev,
+                                      const union inet_addr *addr,
+                                      uint8_t plen, int af)
+{
+    struct inet_ifaddr *ifa;
+
+    list_for_each_entry(ifa, &idev->this_ifa_list, d_list) {
+        if ((!plen || ifa->plen == plen) && (ifa->af == af)
+            && inet_addr_equal(ifa->af, &ifa->addr, addr)) {
+            rte_atomic32_inc(&ifa->refcnt);
+            return ifa;
+        }
+    }
+
+    return NULL;
+}
+
+static void ifa_put(struct inet_ifaddr *ifa)
+{
+    if (rte_atomic32_dec_and_test(&ifa->refcnt)) {
+        /* check unhashed? */
+
+        ifa_free(&ifa);
+    }
+}
+
+static void ifa_hash(struct inet_device *idev, struct inet_ifaddr *ifa)
+{
+    uint32_t hash;
+    lcoreid_t cid = rte_lcore_id();
+
+    /* add to global hash table */
+    hash = ifa_hash_key(ifa->af, &ifa->addr);
+    list_add(&ifa->h_list, &inet_addr_tab[cid][hash]);
+    ++inet_addr_cnt[cid];
+
+    /* add to inet_device's list */
+    list_add(&ifa->d_list, &idev->ifa_list[cid]);
+    ++idev->ifa_cnt[cid];
+
+    rte_atomic32_inc(&ifa->refcnt);
+}
+
+static void ifa_unhash(struct inet_ifaddr *ifa)
+{
+    lcoreid_t cid = rte_lcore_id();
+
+    assert(rte_atomic32_read(&ifa->refcnt) > 1);
+
+    list_del(&ifa->h_list);
+    list_del(&ifa->d_list);
 
-    list_del(&ifa->d_list);
-    list_del(&ifa->h_list);
-    INIT_LIST_HEAD(&ifa->d_list);
     INIT_LIST_HEAD(&ifa->h_list);
+    INIT_LIST_HEAD(&ifa->d_list);
+
+    assert(inet_addr_cnt[cid] > 0 && ifa->idev->ifa_cnt[cid] > 0);
+    --inet_addr_cnt[cid];
+    --ifa->idev->ifa_cnt[cid];
+
+    /* move @ifa to @ifa_expired_list, and remove it @ifa_free later */
+    list_add_tail(&ifa->h_list, &ifa_expired_list[cid]);
+
+    /* free sapool when no one is using it.
+     * note ifa may free from here. */
+    if (ifa->flags & IFA_F_SAPOOL)
+        sa_pool_destroy(ifa);
+
+    rte_atomic32_dec(&ifa->refcnt);
+}
+
+struct netif_port *inet_addr_get_iface(int af, union inet_addr *addr)
+{
+    lcoreid_t cid;
+    uint32_t hash;
+    struct inet_ifaddr *ifa;
+
+    cid = rte_lcore_id();
+    hash = ifa_hash_key(af, addr);
+
+    list_for_each_entry(ifa, &inet_addr_tab[cid][hash], h_list) {
+        if (inet_addr_equal(af, &ifa->addr, addr))
+            return ifa->idev->dev;
+    }
+
+    return NULL;
+}
+
+struct inet_ifaddr *inet_addr_ifa_get(int af, const struct netif_port *dev,
+                                      union inet_addr *addr)
+{
+    struct inet_ifaddr *ifa;
+    struct inet_device *idev;
+
+    if (!dev) {
+        dev = inet_addr_get_iface(af, addr);
+        if (!dev)
+            return NULL;
+    }
+
+    idev = dev_get_idev(dev);
+    assert(idev != NULL);
+
+    ifa = ifa_lookup(idev, addr, 0, af);
+
+    idev_put(idev);
+    return ifa;
+}
+
+struct inet_ifaddr *inet_addr_ifa_get_expired(int af, const struct netif_port *dev,
+                                              union inet_addr *addr)
+{
+    struct inet_ifaddr *ifa;
+    struct inet_device *idev;
+    lcoreid_t cid = rte_lcore_id();
+
+    if (!dev) {
+        dev = inet_addr_get_iface(af, addr);
+        if (!dev)
+            return NULL;
+    }
+
+    idev = dev_get_idev(dev);
+    assert(idev != NULL);
+
+    list_for_each_entry(ifa, &ifa_expired_list[cid], h_list) {
+        if (ifa->af == af && inet_addr_equal(af, &ifa->addr, addr)) {
+            idev_put(idev);
+            rte_atomic32_inc(&ifa->refcnt);
+            return ifa;
+        }
+    }
+
+    idev_put(idev);
+    return NULL;
+}
+
+void inet_addr_ifa_put(struct inet_ifaddr *ifa)
+{
+    ifa_put(ifa);
+}
+
+void inet_addr_select(int af, const struct netif_port *dev,
+                      const union inet_addr *dst, int scope,
+                      union inet_addr *addr)
+{
+    struct inet_device *idev;
+    struct inet_ifaddr *ifa;
+    lcoreid_t cid = rte_lcore_id();
+
+    if (!addr || !dev)
+        return;
+
+    idev = dev_get_idev(dev);
+    if (unlikely(!idev))
+        return;
+
+    switch (af) {
+        case AF_INET:
+            addr->in.s_addr = htonl(INADDR_ANY);
+            list_for_each_entry(ifa, &idev->ifa_list[cid], d_list) {
+                if (ifa->af != AF_INET)
+                    continue;
+                if ((ifa->flags & IFA_F_SECONDARY) ||
+                    (ifa->flags & IFA_F_TENTATIVE))
+                    continue;
+                if (ifa->scope > scope)
+                    continue;
+                if (!dst || inet_addr_same_net(af, ifa->plen, dst, &ifa->addr)) {
+                    *addr = ifa->addr;
+                    break;
+                }
+                /* save it and may have better choice later */
+                *addr = ifa->addr;
+            }
+            break;
+        case AF_INET6:
+            addr->in6 = in6addr_any;
+            ipv6_addr_select(idev, dst, addr);
+            break;
+        default:
+            break;
+    }
+
+    idev_put(idev);
+}
+
+static int ifa_add_route4(struct inet_ifaddr *ifa)
+{
+    int err;
+    union inet_addr net;
+
+    err = route_add(&ifa->addr.in, 32, RTF_LOCALIN,
+                    NULL, ifa->idev->dev, NULL, 0, 0);
+    if (err != EDPVS_OK && err != EDPVS_EXIST)
+        return err;
+
+    err = inet_addr_net(ifa->af, &ifa->addr, &ifa->mask, &net);
+    if (err != EDPVS_OK)
+        goto errout;
+
+    err = route_add(&net.in, ifa->plen, RTF_FORWARD,
+                    NULL, ifa->idev->dev, &ifa->addr.in, 0, 0);
+    if (err != EDPVS_OK && err != EDPVS_EXIST)
+        goto errout;
+
+    return EDPVS_OK;
+
+errout:
+    route_del(&ifa->addr.in, ifa->plen, RTF_LOCALIN,
+              NULL, ifa->idev->dev, NULL, 0, 0);
+    return err;
+}
+
+static int ifa_add_route6(struct inet_ifaddr *ifa)
+{
+    int err;
+    struct in6_addr net;
+
+    err = route6_add(&ifa->addr.in6, 128, RTF_LOCALIN,
+                    &in6addr_any, ifa->idev->dev,
+                    &in6addr_any, ifa->idev->dev->mtu);
+    if (err != EDPVS_OK && err != EDPVS_EXIST)
+        return err;
+
+    if (ifa->plen == 128)
+        return EDPVS_OK;
+
+    ipv6_addr_prefix(&net, &ifa->addr.in6, ifa->plen);
+    err = route6_add(&net, ifa->plen, RTF_FORWARD,
+                     &in6addr_any, ifa->idev->dev,
+                     &ifa->addr.in6, ifa->idev->dev->mtu);
+    if (err != EDPVS_OK && err != EDPVS_EXIST)
+        goto errout;
+
+    return EDPVS_OK;
+
+errout:
+    route6_del(&ifa->addr.in6, 128, RTF_LOCALIN,
+               &in6addr_any, ifa->idev->dev,
+               &in6addr_any, ifa->idev->dev->mtu);
+    return err;
+}
+
+static int ifa_add_route(struct inet_ifaddr *ifa)
+{
+    /* set route from master */
+    if (unlikely(rte_lcore_id() != rte_get_master_lcore()))
+        return EDPVS_OK;
+
+    switch (ifa->af) {
+        case AF_INET:
+            return ifa_add_route4(ifa);
+        case AF_INET6:
+            return ifa_add_route6(ifa);
+        default:
+            return EDPVS_NOTSUPP;
+    }
+}
+
+static int ifa_del_route4(struct inet_ifaddr *ifa)
+{
+    int err;
+    union inet_addr net;
+
+    err = route_del(&ifa->addr.in, 32, RTF_LOCALIN,
+                    NULL, ifa->idev->dev, NULL, 0, 0);
+    if (err != EDPVS_OK && err != EDPVS_NOTEXIST)
+        RTE_LOG(WARNING, IFA, "%s: fail to delete localin route\n", __func__);
+
+    if (ifa->plen == 32)
+        return EDPVS_OK;
+
+    err = inet_addr_net(ifa->af, &ifa->addr, &ifa->mask, &net);
+    if (err != EDPVS_OK)
+        RTE_LOG(WARNING, IFA, "%s: fail to get ip net\n", __func__);
+
+    err = route_del(&net.in, ifa->plen, RTF_FORWARD,
+                    NULL, ifa->idev->dev, &ifa->addr.in, 0, 0);
+    if (err != EDPVS_OK && err != EDPVS_NOTEXIST)
+        RTE_LOG(WARNING, IFA, "%s: fail to delete forward route\n", __func__);
+
+    return EDPVS_OK;
+}
+
+static int ifa_del_route6(struct inet_ifaddr *ifa)
+{
+    int err;
+    struct in6_addr net;
+
+    err = route6_del(&ifa->addr.in6, 128, RTF_LOCALIN,
+                     &in6addr_any, ifa->idev->dev,
+                     &in6addr_any, ifa->idev->dev->mtu);
+    if (err != EDPVS_OK && err != EDPVS_NOTEXIST)
+        RTE_LOG(WARNING, IFA, "%s: fail to delete localin route\n", __func__);
+
+    if (ifa->plen == 128)
+        return EDPVS_OK;
+
+    ipv6_addr_prefix(&net, &ifa->addr.in6, ifa->plen);
+
+    err = route6_del(&net, ifa->plen, RTF_FORWARD,
+                     &in6addr_any, ifa->idev->dev,
+                     &in6addr_any, ifa->idev->dev->mtu);
+    if (err != EDPVS_OK && err != EDPVS_NOTEXIST)
+        RTE_LOG(WARNING, IFA, "%s: fail to delete forward route\n", __func__);
+
+    return EDPVS_OK;
+}
+
+static int ifa_del_route(struct inet_ifaddr *ifa)
+{
+    /* set route from master */
+    if (unlikely(rte_lcore_id() != rte_get_master_lcore()))
+        return EDPVS_OK;
+
+    switch (ifa->af) {
+        case AF_INET:
+            return ifa_del_route4(ifa);
+        case AF_INET6:
+            return ifa_del_route6(ifa);
+        default:
+            return EDPVS_NOTSUPP;
+    }
+}
+
+static int inet_ifaddr_dad_completed(void *arg)
+{
+    int err;
+    struct ifaddr_action param;
+    struct inet_ifaddr *ifa = arg;
 
-    dpvs_timer_cancel_nolock(&ifa->timer, true);
-    if (ifa->flags & IFA_F_SAPOOL)
-        sa_pool_destroy(ifa);
-    ifa_add_del_mcast(ifa, false);
-    ifa_del_route(ifa);
-    idev_put(ifa->idev);
-    rte_atomic32_dec(&ifa->idev->ifa_cnt);
-    rte_free(ifa);
-    rte_atomic32_dec(&in_addr_cnt);
+    /* only master's ifa scheduled ifa->dad_timer */
+    assert(rte_lcore_id() == rte_get_master_lcore());
+
+    dpvs_timer_cancel_nolock(&ifa->dad_timer, true);
+    ifa->flags &= ~(IFA_F_TENTATIVE | IFA_F_OPTIMISTIC | IFA_F_DADFAILED);
+
+    /* sync ifa->flags */
+    fill_ifaddr_action(ifa->af, ifa->idev->dev, &ifa->addr, ifa->plen, &ifa->bcast,
+                       ifa->valid_lft, ifa->prefered_lft, ifa->scope,
+                       ifa->flags, INET_ADDR_SYNC, &param);
+
+    err = inet_addr_sync(&param);
+    if (err != EDPVS_OK)
+        RTE_LOG(ERR, IFA, "%s: inet_addr_sync failed\n", __func__);
+
+    return DTIMER_OK;
+}
+
+static void inet_ifaddr_dad_start(struct inet_ifaddr *ifa)
+{
+    lcoreid_t cid = rte_lcore_id();
+    struct timeval tv = {
+        .tv_sec     = 3,
+        .tv_usec    = 0
+    };
+
+    if (ifa->flags & IFA_F_NODAD || !(ifa->flags & IFA_F_TENTATIVE)) {
+        ifa->flags &= ~(IFA_F_TENTATIVE | IFA_F_OPTIMISTIC | IFA_F_DADFAILED);
+        return;
+    }
+
+    ifa->flags |= IFA_F_TENTATIVE | IFA_F_OPTIMISTIC;
+
+    /* timing and sending dad on master only */
+    if (cid != rte_get_master_lcore())
+        return;
+
+    dpvs_time_rand_delay(&tv, 1000000);
+    dpvs_timer_sched(&ifa->dad_timer, &tv, inet_ifaddr_dad_completed, ifa, true);
+
+    ndisc_send_dad(ifa->idev->dev, &ifa->addr.in6);
+}
+
+/* called from slave lcore */
+void inet_ifaddr_dad_failure(struct inet_ifaddr *ifa)
+{
+    struct ifaddr_action param;
+
+    if (ifa->flags & IFA_F_PERMANENT) {
+        ifa->flags |= IFA_F_DADFAILED;
+        fill_ifaddr_action(ifa->af, ifa->idev->dev, &ifa->addr, ifa->plen,
+                           &ifa->bcast, ifa->valid_lft, ifa->prefered_lft,
+                           ifa->scope, ifa->flags, INET_ADDR_SYNC, &param);
+        if (inet_addr_sync(&param) != EDPVS_OK)
+            RTE_LOG(ERR, IFA, "[%02d] %s: inet_addr_sync failed\n",
+                    rte_lcore_id(), __func__);
+    } else if (ifa->flags & IFA_F_TENTATIVE) {
+        /* TODO: support privacy addr */
+        RTE_LOG(WARNING, IFA, "[%02d] %s: privacy addr is not supported.\n",
+                rte_lcore_id(), __func__);
+        return;
+    } else {
+        /* delete ifa from all lcores */
+        fill_ifaddr_action(ifa->af, ifa->idev->dev, &ifa->addr, ifa->plen, &ifa->bcast,
+                ifa->valid_lft, ifa->prefered_lft, ifa->scope,
+                ifa->flags, INET_ADDR_DEL, &param);
+        if (inet_addr_sync(&param) != EDPVS_OK)
+            RTE_LOG(ERR, IFA, "[%02d] %s: inet_addr_sync failed\n",
+                    rte_lcore_id(), __func__);
+    }
+}
+
+static int ifa_expire(void *arg)
+{
+    int err;
+    lcoreid_t cid = rte_lcore_id();
+    struct inet_ifaddr *ifa = (struct inet_ifaddr *)arg;
+
+    /* only master's ifa scheduled ifa->timer */
+    assert(cid == rte_get_master_lcore());
+
+    err = inet_addr_del(ifa->af, ifa->idev->dev, &ifa->addr, ifa->plen);
+    if (err != EDPVS_OK) {
+        RTE_LOG(ERR, IFA, "inet_addr_del failed\n", __func__);
+        return DTIMER_OK;
+    }
 
-    rte_rwlock_write_unlock(&in_addr_lock);
     return DTIMER_STOP;
 }
 
-static int ifa_add_set(int af, const struct netif_port *dev,
-                       const union inet_addr *addr, uint8_t plen,
-                       const union inet_addr *bcast,
-                       uint32_t valid_lft, uint32_t prefered_lft,
-                       uint8_t scope, uint32_t flags, bool create)
+static int ifa_entry_add(const struct ifaddr_action *param)
 {
-    struct inet_device *idev = NULL;
-    struct inet_ifaddr *ifa = NULL;
-    struct timeval timeo = {0};
     int err;
-    char addr_str[64];
+    char ipstr[64];
+    struct inet_device *idev;
+    struct inet_ifaddr *ifa;
+    struct timeval timeo = { 0 };
+    bool is_master = (rte_lcore_id() == rte_get_master_lcore());
 
-    if (!dev || !ifa_prefix_check(af, addr, plen))
+    if (!param || !param->dev || !ifa_prefix_check(param->af,
+                &param->addr, param->plen))
         return EDPVS_INVAL;
 
-    idev = dev_get_idev(dev);
+    idev = dev_get_idev(param->dev);
     if (!idev)
         return EDPVS_RESOURCE;
 
-    inet_ntop(af, &addr->in.s_addr, addr_str, sizeof(addr_str));
-    RTE_LOG(INFO, IFA, "try to add %s in %s \n", addr_str, __func__);
-
-    rte_rwlock_write_lock(&in_addr_lock);
-
-    ifa = __ifa_lookup(idev, addr, plen, af);
-    if (ifa && create) {
+    ifa = ifa_lookup(idev, &param->addr, param->plen, param->af);
+    if (ifa) {
+        ifa_put(ifa);
         err = EDPVS_EXIST;
         goto errout;
-    } else if (!ifa && !create) {
-        err = EDPVS_NOTEXIST;
-        goto errout;
     }
 
+    ifa = rte_calloc(NULL, 1, sizeof(*ifa), RTE_CACHE_LINE_SIZE);
     if (!ifa) {
-        ifa = rte_calloc(NULL, 1, sizeof(*ifa), RTE_CACHE_LINE_SIZE);
-        if (!ifa) {
-            err = EDPVS_NOMEM;
-            goto errout;
-        }
+        err = EDPVS_NOMEM;
+        goto errout;
+    }
 
-        ifa->af   = af;
-        ifa->idev = idev;
-        ifa->addr = *addr;
-        ifa->plen = plen;
-        ifa->flags = flags;
+    ifa->idev   = idev;
+    ifa->af     = param->af;
+    ifa->addr   = param->addr;
+    ifa->plen   = param->plen;
+    ifa->bcast  = param->bcast;
+    ifa->scope  = param->scope;
+    ifa->flags  = param->flags;
 
-        if (af == AF_INET)
-            inet_plen_to_mask(af, plen, &ifa->mask);
+    if (param->af == AF_INET)
+        inet_plen_to_mask(param->af, param->plen, &ifa->mask);
 
-        dpvs_time_now(&ifa->cstemp, true);
-        rte_atomic32_init(&ifa->refcnt);
+    rte_atomic32_init(&ifa->refcnt);
 
-        /* set mult*/
-        err = ifa_add_del_mcast(ifa, true);
-        if (err != EDPVS_OK)
-            goto free_ifa;
+    ifa_set_lifetime(ifa, param->valid_lft, param->prefered_lft);
+    dpvs_time_now(&ifa->tstemp, is_master); /* mod time */
+    dpvs_time_now(&ifa->cstemp, is_master); /* create time */
 
-        /* set routes for local and network */
-        err = ifa_add_route(ifa);
-        if (err != EDPVS_OK && err != EDPVS_EXIST)
-            goto del_mc;
+    err = ifa_add_del_mcast(ifa, true);
+    if (err != EDPVS_OK)
+        goto free_ifa;
+
+    err = ifa_add_route(ifa);
+    if (err != EDPVS_OK && err != EDPVS_EXIST)
+        goto del_mc;
 
-        err = __ifa_insert(idev, ifa);
+    if (ifa->flags & IFA_F_SAPOOL) {
+        err = sa_pool_create(ifa, 0, 0);
         if (err != EDPVS_OK)
             goto del_route;
+    }
 
-        if (ifa->flags & IFA_F_SAPOOL) {
-            err = sa_pool_create(ifa, 0, 0);
-            if (err != EDPVS_OK)
-                goto rem_ifa;
+    if (!(ifa->flags & IFA_F_PERMANENT)) {
+        timeo.tv_sec = ifa->valid_lft;
+        if (is_master) {
+            dpvs_time_rand_delay(&timeo, 1000000);
+            dpvs_timer_sched(&ifa->timer, &timeo, ifa_expire, ifa, true);
         }
+    }
 
-        /* add counter for idev and gobal */
-        rte_atomic32_inc(&idev->ifa_cnt);
-        rte_atomic32_inc(&in_addr_cnt);
-        /* hold idev */
-        rte_atomic32_inc(&idev->refcnt);
+    if ((ifa->af == AF_INET6) && (ifa->flags & IFA_F_PERMANENT)) {
+        ifa->flags |= IFA_F_TENTATIVE | IFA_F_OPTIMISTIC;
+        inet_ifaddr_dad_start(ifa);
     }
 
-    if (bcast)
-        ifa->bcast = *bcast;
-    if (scope)
-        ifa->scope = scope;
-    ifa_set_lifetime(ifa, valid_lft, prefered_lft);
-    dpvs_time_now(&ifa->tstemp, true); /* mod time */
-
-    /* timer */
-    if (create) {
-        if (!(ifa->flags & IFA_F_PERMANENT)) {
-            timeo.tv_sec = ifa->valid_lft;
+    ifa_hash(idev, ifa);
+
+    RTE_LOG(DEBUG, IFA, "[%02d] %s: add ifaddr %s\n", rte_lcore_id(), __func__,
+            inet_ntop(ifa->af, &ifa->addr, ipstr, sizeof(ipstr)));
+
+    /* note: hold @idev until ifa deleted */
+
+    return EDPVS_OK;
+
+del_route:
+    ifa_del_route(ifa);
+del_mc:
+    ifa_add_del_mcast(ifa, false);
+free_ifa:
+    rte_free(ifa);
+errout:
+    idev_put(idev);
+    RTE_LOG(WARNING, IFA, "[%02d] %s: add ifaddr %s failed -- %s\n", rte_lcore_id(), __func__,
+            inet_ntop(param->af, &param->addr, ipstr, sizeof(ipstr)), dpvs_strerror(err));
+    return err;
+}
+
+static int ifa_entry_mod(const struct ifaddr_action *param)
+{
+    int err;
+    char ipstr[64];
+    struct inet_device *idev;
+    struct inet_ifaddr *ifa;
+    struct timeval timeo = { 0 };
+    bool is_master = (rte_lcore_id() == rte_get_master_lcore());
+
+    if (!param || !param->dev || !ifa_prefix_check(param->af,
+                &param->addr, param->plen))
+        return EDPVS_INVAL;
+
+    idev = dev_get_idev(param->dev);
+    if (!idev)
+        return EDPVS_RESOURCE;
+
+    ifa = ifa_lookup(idev, &param->addr, param->plen, param->af);
+    if (!ifa) {
+        err = EDPVS_NOTEXIST;
+        goto errout;
+    }
+
+    dpvs_time_now(&ifa->tstemp, false); /* mod time */
+
+    ifa->bcast = param->bcast;
+    ifa->scope = param->scope;
+
+    ifa_set_lifetime(ifa, param->valid_lft, param->prefered_lft);
+    if (!(ifa->flags & IFA_F_PERMANENT)) {
+        timeo.tv_sec = ifa->valid_lft;
+        if (is_master) {
+            dpvs_timer_cancel(&ifa->timer, true);
+            dpvs_time_rand_delay(&timeo, 1000000);
             dpvs_timer_sched(&ifa->timer, &timeo, ifa_expire, ifa, true);
         }
-    } else {
-        /* ok to cancel a timer not scheduled */
+    }
+
+    if ((ifa->af == AF_INET6) && (ifa->flags & IFA_F_PERMANENT)) {
+        ifa->flags |= IFA_F_TENTATIVE | IFA_F_OPTIMISTIC;
+        inet_ifaddr_dad_start(ifa);
+    }
+
+    RTE_LOG(DEBUG, IFA, "[%02d] %s: edit ifaddr %s\n", rte_lcore_id(), __func__,
+            inet_ntop(ifa->af, &ifa->addr, ipstr, sizeof(ipstr)));
+
+    ifa_put(ifa);
+    idev_put(idev);
+    return EDPVS_OK;
+
+errout:
+    idev_put(idev);
+    RTE_LOG(WARNING, IFA, "[%02d] %s: edit ifaddr %s failed -- %s\n", rte_lcore_id(), __func__,
+            inet_ntop(param->af, &param->addr, ipstr, sizeof(ipstr)), dpvs_strerror(err));
+    return err;
+}
+
+static int ifa_entry_del(const struct ifaddr_action *param)
+{
+    struct inet_ifaddr *ifa;
+    struct inet_device *idev;
+
+    if (!param || !param->dev || !ifa_prefix_check(param->af,
+                &param->addr, param->plen))
+        return EDPVS_INVAL;
+
+    idev = dev_get_idev(param->dev);
+    if (unlikely(!idev))
+        return EDPVS_RESOURCE;
+
+    ifa = ifa_lookup(idev, &param->addr, param->plen, param->af);
+    if (!ifa) {
+        idev_put(idev);
+        return EDPVS_NOTEXIST;
+    }
+
+    ifa_unhash(ifa);
+    ifa_put(ifa);
+
+    idev_put(idev);
+    return EDPVS_OK;
+}
+
+static int ifa_entry_flush(const struct ifaddr_action *param)
+{
+    struct inet_ifaddr *ifa, *nxt;
+    struct inet_device *idev;
+    lcoreid_t cid = rte_lcore_id();
+
+    if (!param || !param->dev)
+        return EDPVS_INVAL;
+
+    idev = dev_get_idev(param->dev);
+    if (unlikely(!idev))
+        return EDPVS_RESOURCE;
+
+    list_for_each_entry_safe(ifa, nxt, &idev->ifa_list[cid], d_list) {
+        rte_atomic32_inc(&ifa->refcnt); /* hold @ifa before unhash */
+        ifa_unhash(ifa);
+        ifa_put(ifa);
+    }
+
+    idev_put(idev);
+    return EDPVS_OK;
+}
+
+static int ifa_entry_sync(const struct ifaddr_action *param)
+{
+    struct inet_device *idev;
+    struct inet_ifaddr *ifa;
+
+    if (!param || !param->dev || !ifa_prefix_check(param->af,
+                &param->addr, param->plen))
+        return EDPVS_INVAL;
+
+    idev = dev_get_idev(param->dev);
+    if (!idev)
+        return EDPVS_RESOURCE;
+
+    ifa = ifa_lookup(idev, &param->addr, param->plen, param->af);
+    if (!ifa) {
+        idev_put(idev);
+        return EDPVS_NOTEXIST;
+    }
+
+    /* only support snyc flags now */
+    ifa->flags = param->flags;
+    if ((ifa->flags & IFA_F_DADFAILED) &&
+        (rte_lcore_id() == rte_get_master_lcore()))
+        dpvs_timer_cancel(&ifa->dad_timer, true);
+
+    ifa_put(ifa);
+    idev_put(idev);
+    return EDPVS_OK;
+}
+
+static void ifa_free(struct inet_ifaddr **ifa_p)
+{
+    char ipstr[64];
+    struct inet_ifaddr *ifa;
+    lcoreid_t cid = rte_lcore_id();
+
+    assert(ifa_p != NULL && *ifa_p != NULL);
+    ifa = *ifa_p;
+
+    /* remove @ifa from @ifa_expired_list */
+    list_del_init(&ifa->h_list);
+
+    if (cid == rte_get_master_lcore()) {
+        /* it's safe to cancel timer not pending but zeroed */
+        dpvs_timer_cancel(&ifa->dad_timer, true);
         dpvs_timer_cancel(&ifa->timer, true);
+    }
+
+    /* note:
+     *   sapool has been destroyed when unhash(refer to @ifa_unhash).
+     *   If sapool destroyed here, the ifa would not be freed.
+     * */
+
+    ifa_add_del_mcast(ifa, false);
+    ifa_del_route(ifa);
+
+    /* release @idev held by @ifa */
+    idev_put(ifa->idev);
+
+    RTE_LOG(DEBUG, IFA, "[%02d] %s: del ifaddr %s\n", cid, __func__,
+            inet_ntop(ifa->af, &ifa->addr, ipstr, sizeof(ipstr)));
+
+    rte_free(ifa);
+    *ifa_p = NULL;
+}
+
+static void fill_ifaddr_action(int af, struct netif_port *dev,
+                               const union inet_addr *addr, uint8_t plen,
+                               const union inet_addr *bcast,
+                               uint32_t valid_lft, uint32_t prefered_lft,
+                               uint8_t scope, uint32_t flags, ifaddr_ops_t op,
+                               struct ifaddr_action *param)
+{
+    if (!param)
+        return;
+    param->af           = af;
+    if (addr)
+        param->addr     = *addr;
+    if (bcast)
+        param->bcast    = *bcast;
+    param->plen         = plen;
+    param->scope        = scope;
+    param->flags        = flags;
+    param->valid_lft    = valid_lft;
+    param->prefered_lft = prefered_lft;
+    param->dev          = dev;
+
+    param->op           = op;
+}
+
+static void fill_ifaddr_entry(lcoreid_t cid, const struct inet_ifaddr *ifa, struct inet_addr_data *entry)
+{
+    entry->ifa_entry.af       = ifa->af;
+    entry->ifa_entry.addr     = ifa->addr;
+    entry->ifa_entry.bcast    = ifa->bcast;
+    entry->ifa_entry.plen     = ifa->plen;
+    entry->ifa_entry.scope    = ifa->scope;
+    entry->ifa_entry.cid      = cid;
+    entry->ifa_entry.flags    = ifa->flags;
+    snprintf(entry->ifa_entry.ifname, sizeof(entry->ifa_entry.ifname), "%.15s", ifa->idev->dev->name);
+
+    if (ifa->flags & IFA_F_PERMANENT) {
+        entry->ifa_entry.valid_lft    = 0;
+        entry->ifa_entry.prefered_lft = 0;
+    } else {
+        struct timeval now, diff;
+        dpvs_time_now(&now, rte_lcore_id() == rte_get_master_lcore());
+        timersub(&now, &ifa->tstemp, &diff);
+        entry->ifa_entry.valid_lft    = ifa->valid_lft - diff.tv_sec;
+        entry->ifa_entry.prefered_lft = ifa->prefered_lft - diff.tv_sec;
+    }
+
+    if (ifa->flags & IFA_F_SAPOOL) {
+        struct sa_pool_stats st;
+        if (get_sa_pool_stats(ifa, &st) == EDPVS_OK) {
+            entry->ifa_stats.sa_used = st.used_cnt;
+            entry->ifa_stats.sa_free = st.free_cnt;
+            entry->ifa_stats.sa_miss = st.miss_cnt;
+        }
+    }
+}
+
+static int copy_lcore_entries(const struct inet_device *idev,
+                              int max_entries, struct inet_addr_data_array *array)
+{
+    int off, hash;
+    struct inet_ifaddr *ifa;
+    lcoreid_t cid = rte_lcore_id();
+
+    if (!array)
+        return EDPVS_INVAL;
+
+    if (!max_entries)
+        return EDPVS_OK;    /* no ip configured */
+
+    off = array->naddr;
+    if (off >= max_entries)
+        return EDPVS_NOROOM;
+
+    if (idev) {
+        list_for_each_entry(ifa, &idev->ifa_list[cid], d_list) {
+            fill_ifaddr_entry(cid, ifa, &array->addrs[off++]);
+            if (off >= max_entries)
+                break;
+        }
+    } else {
+        for (hash = 0; hash < INET_ADDR_HSIZE; hash++) {
+            list_for_each_entry(ifa, &inet_addr_tab[cid][hash], h_list) {
+                fill_ifaddr_entry(cid, ifa, &array->addrs[off++]);
+                if (off >= max_entries)
+                    break;
+            }
+        }
+    }
+    array->naddr = off;
+
+    return EDPVS_OK;
+}
+
+static int ifa_msg_get_cb(struct dpvs_msg *msg)
+{
+    int ifa_cnt, len;
+    struct inet_device *idev;
+    struct inet_addr_data_array *array;
+    lcoreid_t cid = rte_lcore_id();
+
+    if (!msg || (msg->len && msg->len != sizeof(idev)))
+        return EDPVS_INVAL;
+    idev = msg->len ? (struct inet_device *)msg->data : NULL;
+
+    if (idev)
+        ifa_cnt = idev->ifa_cnt[cid];
+    else
+        ifa_cnt = inet_addr_cnt[cid];
+    len = sizeof(struct inet_addr_data_array) + ifa_cnt * sizeof(struct inet_addr_data);
+    array = msg_reply_alloc(len);
+    if (unlikely(!array))
+        return EDPVS_NOMEM;
+
+    /* zero naddr before copy, do not memset the whole memory for performance */
+    array->naddr = 0;
+
+    if (copy_lcore_entries(idev, ifa_cnt, array) != EDPVS_OK)
+        RTE_LOG(WARNING, IFA, "[%02d] %s: fail to copy ifa entries\n.", cid, __func__);
+
+    msg->reply.len = len;
+    msg->reply.data = array;
+
+    return EDPVS_OK;
+}
+
+static int ifa_msg_set_cb(struct dpvs_msg *msg)
+{
+    struct ifaddr_action *param;
+
+    if (!msg || msg->len != sizeof(*param))
+        return EDPVS_INVAL;
+    param = (struct ifaddr_action *)msg->data;
+
+    switch (param->op) {
+        case INET_ADDR_ADD:
+            return ifa_entry_add(param);
+        case INET_ADDR_DEL:
+            return ifa_entry_del(param);
+        case INET_ADDR_MOD:
+            return ifa_entry_mod(param);
+        case INET_ADDR_FLUSH:
+            return ifa_entry_flush(param);
+        case INET_ADDR_SYNC:
+            return ifa_entry_sync(param);
+        case INET_ADDR_GET:
+            RTE_LOG(WARNING, IFA, "[%02d] INET_ADDR_GET is not supposed by %s\n",
+                    rte_lcore_id(), __func__);
+            return EDPVS_INVAL;
+        default:
+            return EDPVS_NOTSUPP;
+    }
+
+    return EDPVS_OK;
+}
+
+static int ifa_msg_sync_cb(struct dpvs_msg *msg)
+{
+    struct ifaddr_action *param;
+
+    /* sync from master lcore only */
+    assert(rte_lcore_id() == rte_get_master_lcore());
+
+    if (!msg || msg->len != sizeof(*param))
+        return EDPVS_INVAL;
+    param = (struct ifaddr_action *)msg->data;
+
+    switch (param->op) {
+        case INET_ADDR_ADD:
+            return __inet_addr_add(param);
+        case INET_ADDR_DEL:
+            return __inet_addr_del(param);
+        case INET_ADDR_MOD:
+            return __inet_addr_mod(param);
+        case INET_ADDR_FLUSH:
+            return __inet_addr_flush(param);
+        case INET_ADDR_SYNC:
+            return __inet_addr_sync(param);
+        case INET_ADDR_GET:
+            RTE_LOG(WARNING, IFA, "[%02d] INET_ADDR_GET is not supposed by %s\n",
+                    rte_lcore_id(), __func__);
+            return EDPVS_INVAL;
+        default:
+            return EDPVS_NOTSUPP;
+    }
+
+    return EDPVS_OK;
+}
+
+static int __inet_addr_add(const struct ifaddr_action *param)
+{
+    int err;
+    struct dpvs_msg *msg = NULL;
 
-        if (!(ifa->flags & IFA_F_PERMANENT)) {
-            timeo.tv_sec = ifa->valid_lft;
-            dpvs_timer_sched(&ifa->timer, &timeo, ifa_expire, ifa, true);
-        }
-    }
+    err = ifa_entry_add(param);
+    if (err != EDPVS_OK)
+        return err;
 
-    /* TODO: support privacy addr, don't need it now */
-    if (af == AF_INET6) {
-        assert(ifa->flags & IFA_F_PERMANENT);
+    msg = msg_make(MSG_TYPE_IFA_SET, ifa_msg_seq(), DPVS_MSG_MULTICAST,
+                   rte_lcore_id(), sizeof(*param), param);
+    if (!msg) {
+        err = EDPVS_NOMEM;
+        goto errout;
     }
 
-    if ((af == AF_INET6) && (ifa->flags & IFA_F_PERMANENT)) {
-        ifa->flags |= IFA_F_TENTATIVE|IFA_F_OPTIMISTIC;
-        inet_ifaddr_dad_start(ifa);
-    }
+    err = multicast_msg_send(msg, DPVS_MSG_F_ASYNC, NULL);
+    if (err != EDPVS_OK)
+        goto errout;
+    msg_destroy(&msg);
 
-    rte_rwlock_write_unlock(&in_addr_lock);
-    idev_put(idev);
     return EDPVS_OK;
 
-rem_ifa:
-    ___ifa_remove(ifa);
-del_route:
-    ifa_del_route(ifa);
-del_mc:
-    ifa_add_del_mcast(ifa, false);
-free_ifa:
-    rte_free(ifa);
 errout:
-    rte_rwlock_write_unlock(&in_addr_lock);
-    idev_put(idev);
-    RTE_LOG(WARNING, IFA, "%s %s failed -- %s\n", __func__, addr_str, dpvs_strerror(err));
+    if (msg)
+        msg_destroy(&msg);
+    ifa_entry_del(param);
     return err;
 }
 
-int inet_addr_add(int af, const struct netif_port *dev,
+int inet_addr_add(int af, struct netif_port *dev,
                   const union inet_addr *addr, uint8_t plen,
                   const union inet_addr *bcast,
                   uint32_t valid_lft, uint32_t prefered_lft,
                   uint8_t scope, uint32_t flags)
 {
-    return ifa_add_set(af, dev, addr, plen, bcast, valid_lft, prefered_lft,
-                       scope, flags, true);
+    struct ifaddr_action param;
+
+    fill_ifaddr_action(af, dev, addr, plen, bcast,
+                       valid_lft, prefered_lft, scope,
+                       flags, INET_ADDR_ADD, &param);
+
+    return __inet_addr_add(&param);
+}
+
+static int __inet_addr_mod(const struct ifaddr_action *param)
+{
+    int err;
+    struct dpvs_msg *msg;
+
+    err = ifa_entry_mod(param);
+    if (err != EDPVS_OK)
+        return err;
+
+    msg = msg_make(MSG_TYPE_IFA_SET, ifa_msg_seq(), DPVS_MSG_MULTICAST,
+                   rte_lcore_id(), sizeof(*param), param);
+    if (!msg) {
+        RTE_LOG(WARNING, IFA, "%s: msg_make failed\n", __func__);
+        return EDPVS_NOMEM;
+    }
+
+    err = multicast_msg_send(msg, DPVS_MSG_F_ASYNC, NULL);
+    if (err != EDPVS_OK)
+        RTE_LOG(WARNING, IFA, "%s: multicast_msg_send failed\n", __func__);
+    msg_destroy(&msg);
+
+    return err;
 }
 
-int inet_addr_mod(int af, const struct netif_port *dev,
+int inet_addr_mod(int af, struct netif_port *dev,
                   const union inet_addr *addr, uint8_t plen,
                   const union inet_addr *bcast,
                   uint32_t valid_lft, uint32_t prefered_lft,
                   uint8_t scope)
 {
-    return ifa_add_set(af, dev, addr, plen, bcast, valid_lft, prefered_lft,
-                       scope, 0, false);
+    struct ifaddr_action param;
+
+    fill_ifaddr_action(af, dev, addr, plen, bcast,
+                       valid_lft, prefered_lft, scope,
+                       0, INET_ADDR_MOD, &param);
+
+    return __inet_addr_mod(&param);
 }
 
-int inet_addr_del(int af, struct netif_port *dev,
-                  const union inet_addr *addr, uint8_t plen)
+static int __inet_addr_del(const struct ifaddr_action *param)
 {
-    struct inet_ifaddr *ifa;
-    struct inet_device *idev;
     int err;
-    char addr_str[64];
+    struct dpvs_msg *msg = NULL;
 
-    if (!dev || !ifa_prefix_check(af, addr, plen))
-        return EDPVS_INVAL;
-
-    idev = dev_get_idev(dev);
-    if (!idev)
-        return EDPVS_RESOURCE;
+    err = ifa_entry_del(param);
+    if (err != EDPVS_OK)
+        return err;
 
-    rte_rwlock_write_lock(&in_addr_lock);
-    err = __ifa_remove(idev, addr, plen, &ifa, af);
-    if (err == EDPVS_OK) {
-        dpvs_timer_cancel(&ifa->timer, true);
-        if (ifa->flags & IFA_F_SAPOOL)
-            sa_pool_destroy(ifa);
-        ifa_add_del_mcast(ifa, false);
-        ifa_del_route(ifa);
-        idev_put(ifa->idev);
-        rte_free(ifa);
-        rte_atomic32_dec(&idev->ifa_cnt);
-        rte_atomic32_dec(&in_addr_cnt);
+    msg = msg_make(MSG_TYPE_IFA_SET, ifa_msg_seq(), DPVS_MSG_MULTICAST,
+                   rte_lcore_id(), sizeof(*param), param);
+    if (!msg) {
+        err = EDPVS_NOMEM;
+        goto errout;
     }
-    rte_rwlock_write_unlock(&in_addr_lock);
 
-    inet_ntop(af, &addr->in.s_addr, addr_str, sizeof(addr_str));
-    RTE_LOG(INFO, IFA, "del %s in %s \n", addr_str, __func__);
+    err = multicast_msg_send(msg, DPVS_MSG_F_ASYNC, NULL);
+    if (err != EDPVS_OK)
+        goto errout;
+    msg_destroy(&msg);
 
-    idev_put(idev);
+    return EDPVS_OK;
+
+errout:
+    if (msg)
+        msg_destroy(&msg);
+    ifa_entry_add(param);
     return err;
 }
 
-int inet_addr_flush(int af, struct netif_port *dev)
+int inet_addr_del(int af, struct netif_port *dev,
+                  const union inet_addr *addr, uint8_t plen)
 {
-    struct inet_device *idev;
-    struct inet_ifaddr *ifa, *next;
-    char buf[64];
-
-    if ((af != AF_INET && af != AF_INET6) && !dev)
-        return EDPVS_INVAL;
+    struct ifaddr_action param;
 
-    idev = dev_get_idev(dev);
-    if (!idev)
-        return EDPVS_RESOURCE;
+    fill_ifaddr_action(af, dev, addr, plen, NULL,
+                       0, 0, 0, 0, INET_ADDR_DEL, &param);
 
-    rte_rwlock_write_lock(&in_addr_lock);
+    return __inet_addr_del(&param);
+}
 
-    list_for_each_entry_safe(ifa, next, &idev->ifa_list, d_list) {
-        list_del(&ifa->d_list);
-        list_del(&ifa->h_list);
-        INIT_LIST_HEAD(&ifa->d_list);
-        INIT_LIST_HEAD(&ifa->h_list);
+static int __inet_addr_flush(const struct ifaddr_action *param)
+{
+    int err;
+    struct dpvs_msg *msg;
 
-        if (rte_atomic32_read(&ifa->refcnt) > 2) {
-            RTE_LOG(ERR, IFA, "%s: address %s/%d is in use\n", __func__,
-                    inet_ntop(af, &ifa->addr, buf, sizeof(buf)) ? buf : "::",
-                    ifa->plen);
-            continue;
-        }
+    err = ifa_entry_flush(param);
+    if (err != EDPVS_OK)
+        return err;
 
-        dpvs_timer_cancel(&ifa->timer, true);
-        if (ifa->flags & IFA_F_SAPOOL)
-            sa_pool_destroy(ifa);
-        ifa_add_del_mcast(ifa, false);
-        ifa_del_route(ifa);
-        idev_put(ifa->idev);
-        rte_free(ifa);
-        rte_atomic32_dec(&idev->ifa_cnt);
-        rte_atomic32_dec(&in_addr_cnt);
+    msg = msg_make(MSG_TYPE_IFA_SET, ifa_msg_seq(), DPVS_MSG_MULTICAST,
+                   rte_lcore_id(), sizeof(*param), param);
+    if (!msg) {
+        RTE_LOG(WARNING, IFA, "%s: msg_make failed\n", __func__);
+        return EDPVS_NOMEM;
     }
 
-    rte_rwlock_write_unlock(&in_addr_lock);
+    err = multicast_msg_send(msg, DPVS_MSG_F_ASYNC, NULL);
+    if (err != EDPVS_OK)
+        RTE_LOG(WARNING, IFA, "%s: multicast_msg_send failed\n", __func__);
+    msg_destroy(&msg);
 
-    idev_put(idev);
-    return EDPVS_OK;
+    return err;
 }
 
-static struct netif_port *__inet_addr_get_iface(int af, union inet_addr *addr)
+int inet_addr_flush(int af, struct netif_port *dev)
 {
-    uint32_t hash = in_addr_hash(&addr->in);
-    struct inet_ifaddr *ifa;
-    struct netif_port *iface = NULL;
+    struct ifaddr_action param;
 
-    list_for_each_entry(ifa, &in_addr_tab[hash], h_list) {
-        if (inet_addr_equal(af, &ifa->addr, addr)) {
-            iface = ifa->idev->dev;
-            break;
-        }
-    }
+    fill_ifaddr_action(af, dev, NULL, 0, NULL,
+                       0, 0, 0, 0, INET_ADDR_FLUSH, &param);
 
-    return iface;
+    return __inet_addr_flush(&param);
 }
 
-struct netif_port *inet_addr_get_iface(int af, union inet_addr *addr)
+static int __inet_addr_sync(const struct ifaddr_action *param)
 {
-    struct netif_port *dev;
+    int err;
+    struct dpvs_msg *msg;
+
+    err = ifa_entry_sync(param);
+    if (err != EDPVS_OK)
+        return err;
+
+    msg = msg_make(MSG_TYPE_IFA_SET, ifa_msg_seq(), DPVS_MSG_MULTICAST,
+                   rte_lcore_id(), sizeof(*param), param);
+    if (!msg) {
+        RTE_LOG(WARNING, IFA, "%s: msg_make failed\n", __func__);
+        return EDPVS_NOMEM;
+    }
 
-#ifdef INET_ADDR_LOCK
-    rte_rwlock_read_lock(&in_addr_lock);
-#endif
-    dev = __inet_addr_get_iface(af, addr);
-#ifdef INET_ADDR_LOCK
-    rte_rwlock_read_unlock(&in_addr_lock);
-#endif
+    err = multicast_msg_send(msg, DPVS_MSG_F_ASYNC, NULL);
+    if (err != EDPVS_OK)
+        RTE_LOG(WARNING, IFA, "%s: multicast_msg_send failed\n", __func__);
+    msg_destroy(&msg);
 
-    return dev;
+    return err;
 }
 
-void inet_addr_select(int af, const struct netif_port *dev,
-                      const union inet_addr *dst, int scope,
-                      union inet_addr *addr)
+/*
+ * sync ifaddr_action from one slave lcore to master,
+ * and then master sync it to all slave lcores, i.e.
+ *
+ *           unicast msg            mulitcast msg
+ * slave(X) --------------> master ----------------> all slaves
+ *
+ * supported ifaddr_action:
+ * - add    : add ifa to all lcores
+ * - del    : delete ifa from all lcores
+ * - mod    : modify ifa of all lcores
+ * - flush  : flush all ifa of all lcores
+ * - sync   : sync ifa data to all lcores, only support ifa::flags now
+ */
+static int inet_addr_sync(const struct ifaddr_action *param)
 {
-    struct inet_device *idev = dev_get_idev(dev);
-    struct inet_ifaddr *ifa;
+    int err;
+    lcoreid_t cid, mid;
+    struct dpvs_msg *msg;
 
-    if (!addr || !idev)
-        return;
+    cid = rte_lcore_id();
+    mid = rte_get_master_lcore();
 
-    if (af == AF_INET) {
-        addr->in.s_addr = htonl(INADDR_ANY);
-    } else if (af == AF_INET6) {
-        addr->in6 = in6addr_any;
-    } else {
-        idev_put(idev);
-        return;
+    /* call from master */
+    if (cid == mid)
+        return __inet_addr_sync(param);
+
+    /* call from slave */
+    msg = msg_make(MSG_TYPE_IFA_SYNC, 0, DPVS_MSG_UNICAST,
+                   cid, sizeof(*param), param);
+    if (!msg) {
+        RTE_LOG(WARNING, IFA, "[%02d] %s: msg_make failed\n", cid, __func__);
+        return EDPVS_NOMEM;
     }
 
-    rte_rwlock_read_lock(&in_addr_lock);
-    /* for each primary address */
-    if (af == AF_INET) {
-        list_for_each_entry(ifa, &idev->ifa_list, d_list) {
-            if ((ifa->flags & IFA_F_SECONDARY) ||
-                (ifa->flags & IFA_F_TENTATIVE))
-                continue;
-            if (ifa->scope > scope)
-                continue;
-            if (!dst || inet_addr_same_net(af, ifa->plen, dst, &ifa->addr)) {
-                *addr = ifa->addr;
-                break;
-            }
+    err = msg_send(msg, rte_get_master_lcore(), DPVS_MSG_F_ASYNC, NULL);
+    if (err != EDPVS_OK)
+        RTE_LOG(WARNING, IFA, "[%02d] %s: msg_send failed\n", cid, __func__);
 
-            /* save it and may have better choise later */
-            *addr = ifa->addr;
-        }
-    } else if (af == AF_INET6) {
-        ipv6_addr_select(idev, dst, addr);
+    return err;
+}
+
+static int ifaddr_get_basic(struct inet_device *idev, struct inet_addr_data_array **parray, int *plen)
+{
+    lcoreid_t cid;
+    int ifa_cnt, len, err;
+    struct inet_addr_data_array *array;
+
+    /* convey ifa data on master lcore */
+    cid = rte_lcore_id();
+    assert(cid == rte_get_master_lcore());
+
+    if (idev)
+        ifa_cnt = idev->ifa_cnt[cid];
+    else
+        ifa_cnt = inet_addr_cnt[cid];
+
+    len = sizeof(struct inet_addr_data_array) + ifa_cnt * sizeof(struct inet_addr_data);
+    array = rte_calloc(NULL, 1, len, RTE_CACHE_LINE_SIZE);
+    if (unlikely(!array))
+        return EDPVS_NOMEM;
+
+    err = copy_lcore_entries(idev, ifa_cnt, array);
+    if (err != EDPVS_OK) {
+        rte_free(array);
+        return err;
     }
 
-    /* should we use other interface's address ? */
-    rte_rwlock_read_unlock(&in_addr_lock);
-    idev_put(idev);
-    return;
+    *parray = array;
+    *plen   = len;
+    return EDPVS_OK;
 }
 
-struct inet_ifaddr *inet_addr_ifa_get(int af, const struct netif_port *dev,
-                                      union inet_addr *addr)
+static int ifaddr_get_stats(struct inet_device *idev, struct inet_addr_data_array **parray, int *plen)
 {
-    struct inet_ifaddr *ifa = NULL;
-    struct inet_device *idev = NULL;
+    int ii, err;
+    struct inet_addr_data_array *arrmsg, *array;
+    struct dpvs_msg *cur, *msg = NULL;
+    struct dpvs_multicast_queue *reply = NULL;
 
-    assert(addr);
-#ifdef INET_ADDR_LOCK
-    rte_rwlock_write_lock(&in_addr_lock);
-#endif
+    err = ifaddr_get_basic(idev, parray, plen);
+    if (err != EDPVS_OK)
+        return err;
+    array = *parray;
 
-    if (!dev) {
-        dev = __inet_addr_get_iface(af, addr);
-        if (!dev)
-            goto out;
+    /* collect ifa sapool stats from slaves */
+    if (idev)
+        msg = msg_make(MSG_TYPE_IFA_GET, 0, DPVS_MSG_MULTICAST, rte_lcore_id(), sizeof(idev), idev);
+    else
+        msg = msg_make(MSG_TYPE_IFA_GET, 0, DPVS_MSG_MULTICAST, rte_lcore_id(), 0, NULL);
+    if (!msg) {
+        err = EDPVS_NOMEM;
+        goto errout;
     }
 
-    idev = dev_get_idev(dev);
-    assert(idev);
+    err = multicast_msg_send(msg, 0, &reply);
+    if (err != EDPVS_OK)
+        goto errout;
 
-    ifa = __ifa_lookup(idev, addr, 0, af);
-    if (!ifa)
-        goto out;
+    list_for_each_entry(cur, &reply->mq, mq_node) {
+        arrmsg = (struct inet_addr_data_array *)cur->data;
+        if (arrmsg->naddr != array->naddr) {
+            RTE_LOG(WARNING, IFA, "%s: ifa naddr does not match -- master=%d, slave[%d]=%d\n",
+                    __func__, array->naddr, cur->cid, arrmsg->naddr);
+            goto errout;
+        }
+        for (ii = 0; ii < array->naddr; ii++) {
+            assert(memcmp(&array->addrs[ii].ifa_entry.addr,
+                          &arrmsg->addrs[ii].ifa_entry.addr,
+                          sizeof(union inet_addr)) == 0);
+            array->addrs[ii].ifa_stats.sa_used += arrmsg->addrs[ii].ifa_stats.sa_used;
+            array->addrs[ii].ifa_stats.sa_free += arrmsg->addrs[ii].ifa_stats.sa_free;
+            array->addrs[ii].ifa_stats.sa_miss += arrmsg->addrs[ii].ifa_stats.sa_miss;
+        }
+    }
+    msg_destroy(&msg);
+    return EDPVS_OK;
 
-    rte_atomic32_inc(&ifa->refcnt);
-out:
-#ifdef INET_ADDR_LOCK
-    rte_rwlock_write_unlock(&in_addr_lock);
-#endif
-    if (idev)
-        idev_put(idev);
-    return ifa;
+errout:
+    if (msg)
+        msg_destroy(&msg);
+    rte_free(*parray);
+    *parray = NULL;
+    *plen   = 0;
+    return err;
 }
 
-/* support ipv6 only, refer linux:ipv6_chk_mcast_addr */
-bool inet_chk_mcast_addr(int af, struct netif_port *dev,
-                         const union inet_addr *group,
-                         const union inet_addr *src)
+static int ifaddr_get_verbose(struct inet_device *idev, struct inet_addr_data_array **parray, int *plen)
 {
-    struct inet_device *idev = NULL;
-    struct inet_ifmcaddr *imc;
-    int ret = false;
+    lcoreid_t cid;
+    int ifa_cnt, len, off, ii, err;
+    struct inet_addr_data_array *array, *arrmsg;
+    struct dpvs_msg *cur, *msg = NULL;
+    struct dpvs_multicast_queue *reply = NULL;
 
-    if (af != AF_INET6)
-        return true;
+    cid = rte_lcore_id();
+    if (idev)
+        ifa_cnt = (slave_workers + 1) * idev->ifa_cnt[cid];
+    else
+        ifa_cnt = (slave_workers + 1) * inet_addr_cnt[cid];
 
-    idev = dev_get_idev(dev);
+    len = sizeof(struct inet_addr_data_array) + ifa_cnt * sizeof(struct inet_addr_data);
+    array = rte_calloc(NULL, 1, len, RTE_CACHE_LINE_SIZE);
+    if (unlikely(!array))
+        return EDPVS_NOMEM;
 
-    if (idev) {
-        rte_rwlock_read_lock(&in_addr_lock);
+    /* master ifa entries */
+    err = copy_lcore_entries(idev, ifa_cnt, array);
+    if (err != EDPVS_OK)
+        goto errout;
+    off = array->naddr;
 
-        imc = __imc_lookup(af, idev, group);
-        if (imc){
-            if (src && !ipv6_addr_any(&src->in6)) {
-            /* TODO: check source-specific multicast (SSM) if @src is assigned */
-                ret = true;
-            } else {
-                ret = true;
+    if (idev)
+        msg = msg_make(MSG_TYPE_IFA_GET, 0, DPVS_MSG_MULTICAST, rte_lcore_id(), sizeof(idev), idev);
+    else
+        msg = msg_make(MSG_TYPE_IFA_GET, 0, DPVS_MSG_MULTICAST, rte_lcore_id(), 0, NULL);
+    if (!msg) {
+        err = EDPVS_NOMEM;
+        goto errout;
+    }
+
+    /* slave ifa entries */
+    err = multicast_msg_send(msg, 0, &reply);
+    if (err != EDPVS_OK)
+        goto errout;
+    list_for_each_entry(cur, &reply->mq, mq_node) {
+        arrmsg = (struct inet_addr_data_array *)cur->data;
+        if (arrmsg->naddr != array->naddr) {
+            RTE_LOG(WARNING, IFA, "%s: ifa naddr does not match -- master=%d, slave[%02d]=%d\n",
+                    __func__, array->naddr, cur->cid, arrmsg->naddr);
+        }
+        for (ii = 0; ii < array->naddr && ii < arrmsg->naddr; ii++) {
+            if (memcmp(&array->addrs[ii].ifa_entry.addr,
+                          &arrmsg->addrs[ii].ifa_entry.addr,
+                          sizeof(union inet_addr)) != 0) {
+                RTE_LOG(WARNING, IFA, "%s: ifa addr does not match -- master=%X, "
+                        "slave[%02d]=%X\n", __func__,
+                        array->addrs[ii].ifa_entry.addr, cur->cid,
+                        arrmsg->addrs[ii].ifa_entry.addr);
             }
+            if (off >= ifa_cnt)
+                break;
+            memcpy(&array->addrs[off++], &arrmsg->addrs[ii], sizeof(array->addrs[0]));
+            array->addrs[ii].ifa_stats.sa_used += arrmsg->addrs[ii].ifa_stats.sa_used;
+            array->addrs[ii].ifa_stats.sa_free += arrmsg->addrs[ii].ifa_stats.sa_free;
+            array->addrs[ii].ifa_stats.sa_miss += arrmsg->addrs[ii].ifa_stats.sa_miss;
         }
-
-        rte_rwlock_read_unlock(&in_addr_lock);
-        idev_put(idev);
     }
+    array->naddr = off;
+    msg_destroy(&msg);
 
-    return ret;
+    *parray = array;
+    *plen   = len;
+    return EDPVS_OK;
+
+errout:
+    if (msg)
+        msg_destroy(&msg);
+    rte_free(array);
+    *parray = NULL;
+    *plen   = 0;
+    return err;
 }
 
-/**
- * control plane
- */
 static int ifa_sockopt_set(sockoptid_t opt, const void *conf, size_t size)
 {
-    const struct inet_addr_param *param = conf;
     struct netif_port *dev;
+    const struct inet_addr_param *param = conf;
 
     if (!conf || size < sizeof(struct inet_addr_param))
         return EDPVS_INVAL;
 
     if (opt != SOCKOPT_SET_IFADDR_FLUSH) {
-        if (!ifa_prefix_check(param->af, &param->addr, param->plen))
+        if (!ifa_prefix_check(param->ifa_entry.af,
+                              &param->ifa_entry.addr,
+                              param->ifa_entry.plen)) {
+            RTE_LOG(WARNING, IFA, "%s: bad %s prefix %d\n", __func__,
+                    param->ifa_entry.af == AF_INET ? "ipv4" : "ipv6",
+                    param->ifa_entry.plen);
             return EDPVS_INVAL;
+        }
     }
 
-    dev = netif_port_get_by_name(param->ifname);
+    dev = netif_port_get_by_name(param->ifa_entry.ifname);
     if (!dev) {
-        RTE_LOG(WARNING, IFA, "%s: no such device: %s\n",
-                __func__, param->ifname);
+        RTE_LOG(WARNING, IFA, "%s: device %s not found\n", __func__,
+                param->ifa_entry.ifname);
         return EDPVS_NOTEXIST;
     }
 
     switch (opt) {
-    case SOCKOPT_SET_IFADDR_ADD:
-        return inet_addr_add(param->af, dev, &param->addr, param->plen,
-                             &param->bcast, param->valid_lft,
-                             param->prefered_lft, param->scope, param->flags);
-
-    case SOCKOPT_SET_IFADDR_DEL:
-        return inet_addr_del(param->af, dev, &param->addr, param->plen);
-
-    case SOCKOPT_SET_IFADDR_SET:
-        return inet_addr_mod(param->af, dev, &param->addr, param->plen,
-                             &param->bcast, param->valid_lft,
-                             param->prefered_lft, param->scope);
-
-    case SOCKOPT_SET_IFADDR_FLUSH:
-        return inet_addr_flush(param->af, dev);
-
-    default:
-        return EDPVS_NOTSUPP;
-    }
-}
-
-static void ifa_fill_param(int af, struct inet_addr_param *param,
-                           const struct inet_ifaddr *ifa)
-{
-    struct sa_pool_stats st;
-
-    param->af       = af;
-    param->addr     = ifa->addr;
-    param->plen     = ifa->plen;
-    param->bcast    = ifa->bcast;
-    param->scope    = ifa->scope;
-    param->flags    = ifa->flags;
-    snprintf(param->ifname, sizeof(param->ifname), "%.15s", ifa->idev->dev->name);
-
-    if (ifa->flags & IFA_F_PERMANENT) {
-        param->valid_lft = param->prefered_lft = 0;
-    } else {
-        struct timeval now, diff;
-
-        dpvs_time_now(&now, true);
-        timersub(&now, &ifa->tstemp, &diff);
-        param->valid_lft    = ifa->valid_lft - diff.tv_sec;
-        param->prefered_lft = ifa->prefered_lft - diff.tv_sec;
+        case SOCKOPT_SET_IFADDR_ADD:
+            return inet_addr_add(param->ifa_entry.af, dev,
+                                 &param->ifa_entry.addr,
+                                 param->ifa_entry.plen,
+                                 &param->ifa_entry.bcast,
+                                 param->ifa_entry.valid_lft,
+                                 param->ifa_entry.prefered_lft,
+                                 param->ifa_entry.scope,
+                                 param->ifa_entry.flags);
+
+        case SOCKOPT_SET_IFADDR_DEL:
+            return inet_addr_del(param->ifa_entry.af, dev,
+                                 &param->ifa_entry.addr,
+                                 param->ifa_entry.plen);
+
+        case SOCKOPT_SET_IFADDR_SET:
+            return inet_addr_mod(param->ifa_entry.af, dev,
+                                 &param->ifa_entry.addr,
+                                 param->ifa_entry.plen,
+                                 &param->ifa_entry.bcast,
+                                 param->ifa_entry.valid_lft,
+                                 param->ifa_entry.prefered_lft,
+                                 param->ifa_entry.scope);
+
+        case SOCKOPT_SET_IFADDR_FLUSH:
+            return inet_addr_flush(param->ifa_entry.af, dev);
+
+        default:
+            return EDPVS_NOTSUPP;
     }
 
-    param->sa_used = param->sa_free = param->sa_miss = 0;
-    if ((ifa->flags & IFA_F_SAPOOL) && sa_pool_stats(ifa, &st) == EDPVS_OK) {
-        param->sa_used  = st.used_cnt;
-        param->sa_free  = st.free_cnt;
-        param->sa_miss  = st.miss_cnt;
-    }
+    return EDPVS_OK;
 }
 
 static int ifa_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
                            void **out, size_t *outsize)
 {
-    const struct inet_addr_param *param = conf;
-    struct inet_addr_param_array *array;
+    int err, len = 0;
     struct netif_port *dev;
     struct inet_device *idev = NULL;
-    struct inet_ifaddr *ifa;
-    uint32_t naddr, hash, off;
+    struct inet_addr_data_array *array = NULL;
+    const struct inet_addr_param *param = conf;
 
     if (!conf || size < sizeof(struct inet_addr_param) || !out || !outsize)
         return EDPVS_INVAL;
@@ -1027,16 +1677,19 @@ static int ifa_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
     if (opt != SOCKOPT_GET_IFADDR_SHOW)
         return EDPVS_NOTSUPP;
 
-    if (param->af != AF_INET &&
-        param->af != AF_UNSPEC &&
-        param->af != AF_INET6)
+    if (param->ifa_ops != INET_ADDR_GET)
+        return EDPVS_INVAL;
+
+    if (param->ifa_entry.af != AF_INET &&
+        param->ifa_entry.af != AF_INET6 &&
+        param->ifa_entry.af != AF_UNSPEC)
         return EDPVS_NOTSUPP;
 
-    if (strlen(param->ifname)) {
-        dev = netif_port_get_by_name(param->ifname);
+    if (strlen(param->ifa_entry.ifname)) {
+        dev = netif_port_get_by_name(param->ifa_entry.ifname);
         if (!dev) {
             RTE_LOG(WARNING, IFA, "%s: no such device: %s\n",
-                    __func__, param->ifname);
+                    __func__, param->ifa_entry.ifname);
             return EDPVS_NOTEXIST;
         }
 
@@ -1045,49 +1698,58 @@ static int ifa_sockopt_get(sockoptid_t opt, const void *conf, size_t size,
             return EDPVS_RESOURCE;
     }
 
-    rte_rwlock_read_lock(&in_addr_lock);
-
-    if (idev)
-        naddr = rte_atomic32_read(&idev->ifa_cnt);
+    if (param->ifa_ops_flags & IFA_F_OPS_VERBOSE)
+        err = ifaddr_get_verbose(idev, &array, &len);
+    else if (param->ifa_ops_flags & IFA_F_OPS_STATS)
+        err = ifaddr_get_stats(idev, &array, &len);
     else
-        naddr = rte_atomic32_read(&in_addr_cnt);
+        err = ifaddr_get_basic(idev, &array, &len);
 
-    *outsize = sizeof(struct inet_addr_param_array) + \
-               naddr * sizeof(struct inet_addr_param);
-    *out = rte_calloc(NULL, 1, *outsize, RTE_CACHE_LINE_SIZE);
-    if (!(*out)) {
-        if (idev)
-            idev_put(idev);
-        rte_rwlock_read_unlock(&in_addr_lock);
-        return EDPVS_NOMEM;
+    if (err != EDPVS_OK) {
+        RTE_LOG(WARNING, IFA, "%s: fail to get inet addresses -- %s!\n",
+                __func__, dpvs_strerror(err));
+        return err;
     }
 
-    array = *out;
-    array->naddr = naddr;
-    off = 0;
-
-    if (idev) {
-        list_for_each_entry(ifa, &idev->ifa_list, d_list) {
-            if (off >= naddr)
-                break;
-            ifa_fill_param(ifa->af, &array->addrs[off++], ifa);
-        }
-
+    if (idev)
         idev_put(idev);
-    } else {
-        for (hash = 0; hash < INET_ADDR_HSIZE; hash++) {
-            list_for_each_entry(ifa, &in_addr_tab[hash], h_list) {
-                if (off >= naddr)
-                    break;
-                ifa_fill_param(ifa->af, &array->addrs[off++], ifa);
-            }
-        }
+
+    if (array) {
+        array->ops = INET_ADDR_GET;
+        array->ops_flags = param->ifa_ops_flags;
     }
 
-    rte_rwlock_read_unlock(&in_addr_lock);
+    *out = array;
+    *outsize = len;
+
     return EDPVS_OK;
 }
 
+static struct dpvs_msg_type ifa_msg_types[] = {
+    {
+        .type               = MSG_TYPE_IFA_GET,
+        .prio               = MSG_PRIO_LOW,
+        .mode               = DPVS_MSG_MULTICAST,
+        .unicast_msg_cb     = ifa_msg_get_cb,
+        .multicast_msg_cb   = NULL,
+    },
+    {
+        .type               = MSG_TYPE_IFA_SET,
+        .prio               = MSG_PRIO_NORM,
+        .mode               = DPVS_MSG_MULTICAST,
+        .unicast_msg_cb     = ifa_msg_set_cb,
+        .multicast_msg_cb   = NULL,
+    },
+    {
+        .type               = MSG_TYPE_IFA_SYNC,
+        .prio               = MSG_PRIO_NORM,
+        .mode               = DPVS_MSG_UNICAST,
+        //.cid              = rte_get_master_lcore(),
+        .unicast_msg_cb     = ifa_msg_sync_cb,
+        .multicast_msg_cb   = NULL
+    }
+};
+
 static struct dpvs_sockopts ifa_sockopts = {
     .version        = SOCKOPT_VERSION,
     .set_opt_min    = SOCKOPT_SET_IFADDR_ADD,
@@ -1100,27 +1762,86 @@ static struct dpvs_sockopts ifa_sockopts = {
 
 int inet_addr_init(void)
 {
-    int err, hash;
+    lcoreid_t cid;
+    int err, ii;
+
+    netif_get_slave_lcores(&slave_workers, &slave_worker_mask);
 
-    rte_rwlock_init(&in_addr_lock);
-    rte_rwlock_write_lock(&in_addr_lock);
-    for (hash = 0; hash < INET_ADDR_HSIZE; hash++)
-        INIT_LIST_HEAD(&in_addr_tab[hash]);
-    rte_rwlock_write_unlock(&in_addr_lock);
+    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
+        for (ii = 0; ii < INET_ADDR_HSIZE; ii++) {
+            INIT_LIST_HEAD(&inet_addr_tab[cid][ii]);
+        }
+        INIT_LIST_HEAD(&ifa_expired_list[cid]);
+    }
 
-    if ((err = sockopt_register(&ifa_sockopts)) != EDPVS_OK)
+    ifa_msg_types[2].cid = rte_get_master_lcore();
+
+    if ((err = sockopt_register(&ifa_sockopts)) != EDPVS_OK) {
+        RTE_LOG(ERR, IFA, "%s: fail to register ifa_sockopts -- %s\n",
+                __func__, dpvs_strerror(err));
         return err;
+    }
+
+    for (ii = 0; ii < NELEMS(ifa_msg_types); ii++) {
+        switch (ifa_msg_types[ii].mode) {
+            case DPVS_MSG_UNICAST:
+                err = msg_type_register(&ifa_msg_types[ii]);
+                break;
+            case DPVS_MSG_MULTICAST:
+                err = msg_type_mc_register(&ifa_msg_types[ii]);
+                break;
+            default:
+                err = EDPVS_INVAL;
+                break;
+        }
+        if (err != EDPVS_OK) {
+            RTE_LOG(ERR, IFA, "%s: fail to register ifa_msg_types[%d] -- %s\n",
+                    __func__, ii, dpvs_strerror(err));
+            for (--ii; ii >= 0; ii--) {
+                switch (ifa_msg_types[ii].mode) {
+                    case DPVS_MSG_UNICAST:
+                        msg_type_unregister(&ifa_msg_types[ii]);
+                        break;
+                    case DPVS_MSG_MULTICAST:
+                        msg_type_mc_unregister(&ifa_msg_types[ii]);
+                        break;
+                }
+            }
+            sockopt_unregister(&ifa_sockopts);
+            return err;
+        }
+    }
 
     return EDPVS_OK;
 }
 
 int inet_addr_term(void)
 {
-    int err;
-
-    if ((err = sockopt_unregister(&ifa_sockopts)) != EDPVS_OK)
-        return err;
+    int ii, err = EDPVS_OK;
 
     /* TODO: flush all address */
-    return EDPVS_OK;
+
+    if ((err = sockopt_unregister(&ifa_sockopts)) != EDPVS_OK) {
+        RTE_LOG(ERR, IFA, "%s: fail to unregister ifa_sockopts -- %s\n",
+                __func__, dpvs_strerror(err));
+    }
+
+    for (ii = 0; ii < NELEMS(ifa_msg_types); ii++) {
+        switch (ifa_msg_types[ii].mode) {
+            case DPVS_MSG_UNICAST:
+                err = msg_type_unregister(&ifa_msg_types[ii]);
+                break;
+            case DPVS_MSG_MULTICAST:
+                err = msg_type_mc_unregister(&ifa_msg_types[ii]);
+                break;
+            default:
+                err = EDPVS_INVAL;
+                break;
+        }
+        if (err != EDPVS_OK)
+            RTE_LOG(ERR, IFA, "%s: fail to unregister ifa_msg_types[%d] -- %s\n",
+                    __func__, ii, dpvs_strerror(err));
+    }
+
+    return err;
 }
diff --git a/src/ipvs/ip_vs_laddr.c b/src/ipvs/ip_vs_laddr.c
index 9403bbe04..e0b0ce084 100644
--- a/src/ipvs/ip_vs_laddr.c
+++ b/src/ipvs/ip_vs_laddr.c
@@ -419,6 +419,12 @@ int dp_vs_laddr_flush(struct dp_vs_service *svc)
  * for control plane
  */
 
+static uint32_t laddr_msg_seq(void)
+{
+    static uint32_t counter = 0;
+    return counter++;
+}
+
 static inline sockoptid_t set_opt_so2msg(int opt)
 {
     return opt - SOCKOPT_LADDR_BASE + MSG_TYPE_SET_LADDR_BASE;
@@ -436,7 +442,7 @@ static int laddr_sockopt_set(sockoptid_t opt, const void *conf, size_t size)
     if (cid == rte_get_master_lcore()) {
         struct dpvs_msg *msg;
 
-        msg = msg_make(set_opt_so2msg(opt), 0, DPVS_MSG_MULTICAST, cid, size, conf);
+        msg = msg_make(set_opt_so2msg(opt), laddr_msg_seq(), DPVS_MSG_MULTICAST, cid, size, conf);
         if (!msg)
             return EDPVS_NOMEM;
 
diff --git a/src/netif.c b/src/netif.c
index 0be896d7f..06aa9280d 100644
--- a/src/netif.c
+++ b/src/netif.c
@@ -2757,6 +2757,7 @@ struct netif_port *netif_alloc(size_t priv_size, const char *namefmt,
                                unsigned int nrxq, unsigned int ntxq,
                                void (*setup)(struct netif_port *))
 {
+    int ii;
     struct netif_port *dev;
     static const uint8_t mac_zero[6] = {0};
 
@@ -2815,8 +2816,10 @@ struct netif_port *netif_alloc(size_t priv_size, const char *namefmt,
         return NULL;
     }
     dev->in_ptr->dev = dev;
-    INIT_LIST_HEAD(&dev->in_ptr->ifa_list);
-    INIT_LIST_HEAD(&dev->in_ptr->ifm_list);
+    for (ii = 0; ii < DPVS_MAX_LCORE; ii++) {
+        INIT_LIST_HEAD(&dev->in_ptr->ifa_list[ii]);
+        INIT_LIST_HEAD(&dev->in_ptr->ifm_list[ii]);
+    }
 
     if (tc_init_dev(dev) != EDPVS_OK) {
         RTE_LOG(ERR, NETIF, "%s: fail to init TC\n", __func__);
@@ -2947,7 +2950,7 @@ void netif_mask_fdir_filter(int af, const struct netif_port *port,
 
     if (rte_eth_dev_filter_ctrl(port->id, RTE_ETH_FILTER_FDIR,
                 RTE_ETH_FILTER_INFO, &fdir_info) < 0) {
-        RTE_LOG(WARNING, NETIF, "%s: Fail to fetch fdir info of %s !\n",
+        RTE_LOG(DEBUG, NETIF, "%s: Fail to fetch fdir info of %s !\n",
                 __func__, port->name);
         return;
     }
@@ -2989,8 +2992,10 @@ static int dpdk_set_fdir_filt(struct netif_port *dev, enum rte_filter_op op,
 {
     int ret;
 
+    rte_rwlock_write_lock(&dev->dev_lock);
     ret = rte_eth_dev_filter_ctrl(dev->id,
             RTE_ETH_FILTER_FDIR, op, (void *)filt);
+    rte_rwlock_write_unlock(&dev->dev_lock);
     if (ret < 0) {
         RTE_LOG(WARNING, NETIF, "%s: fdir filt set failed for %s -- %s(%d)\n!",
                 __func__, dev->name, rte_strerror(-ret), ret);
@@ -3062,6 +3067,7 @@ static inline void setup_dev_of_flags(struct netif_port *port)
 static struct netif_port* netif_rte_port_alloc(portid_t id, int nrxq,
         int ntxq, const struct rte_eth_conf *conf)
 {
+    int ii;
     struct netif_port *port;
 
     port = rte_zmalloc("port", sizeof(struct netif_port) +
@@ -3115,8 +3121,10 @@ static struct netif_port* netif_rte_port_alloc(portid_t id, int nrxq,
         return NULL;
     }
     port->in_ptr->dev = port;
-    INIT_LIST_HEAD(&port->in_ptr->ifa_list);
-    INIT_LIST_HEAD(&port->in_ptr->ifm_list);
+    for (ii = 0; ii < DPVS_MAX_LCORE; ii++) {
+        INIT_LIST_HEAD(&port->in_ptr->ifa_list[ii]);
+        INIT_LIST_HEAD(&port->in_ptr->ifm_list[ii]);
+    }
 
     if (tc_init_dev(port) != EDPVS_OK) {
         RTE_LOG(ERR, NETIF, "%s: fail to init TC\n", __func__);
@@ -3162,7 +3170,7 @@ struct netif_port* netif_port_get_by_name(const char *name)
 
 int netif_get_queue(struct netif_port *port, lcoreid_t cid, queueid_t *qid)
 {
-    static unsigned idx = 0;
+    static unsigned idx[DPVS_MAX_LCORE] = { 0 };
     struct netif_port_conf *qconf;
     static const unsigned IDX_MAX = (1 << sizeof(unsigned)) - 2;
 
@@ -3180,10 +3188,10 @@ int netif_get_queue(struct netif_port *port, lcoreid_t cid, queueid_t *qid)
     if (unlikely(!qconf->nrxq))
         return EDPVS_INVAL;
 
-    if (++idx > IDX_MAX)
-        idx = 0;
+    if (++idx[cid] > IDX_MAX)
+        idx[cid] = 0;
 
-    *qid = qconf->rxqs[idx % qconf->nrxq].id;
+    *qid = qconf->rxqs[idx[cid] % qconf->nrxq].id;
     return EDPVS_OK;
 }
 
diff --git a/src/route.c b/src/route.c
index 00953ec8a..9f55e6b1f 100644
--- a/src/route.c
+++ b/src/route.c
@@ -350,7 +350,8 @@ static int route_add_del(bool add, struct in_addr* dest,
         err = route_del_lcore(dest, netmask, flag, gw, port, src, mtu, metric);
 
     if (err != EDPVS_OK && err != EDPVS_EXIST && err != EDPVS_NOTEXIST) {
-        RTE_LOG(INFO, ROUTE, "[%s] fail to set route\n", __func__);
+        RTE_LOG(INFO, ROUTE, "[%s] fail to set route -- %s\n",
+                __func__, dpvs_strerror(err));
         return err;
     }
 
@@ -694,11 +695,13 @@ static int route_msg_process(bool add, struct dpvs_msg *msg)
         err = route_del_lcore(&cf->dst.in, cf->plen, cf->flags,
                               &cf->via.in, netif_port_get_by_name(cf->ifname),
                               &cf->src.in, cf->mtu, cf->metric);
-    if (err != EDPVS_OK)
+    if (err != EDPVS_OK && err != EDPVS_EXIST && err != EDPVS_NOTEXIST) {
         RTE_LOG(ERR, ROUTE, "%s: fail to %s route: %s.\n",
                 __func__, add ? "add" : "del", dpvs_strerror(err));
+        return err;
+    }
 
-    return err;
+    return EDPVS_OK;
 }
 
 static int route_add_msg_cb(struct dpvs_msg *msg)
diff --git a/src/sa_pool.c b/src/sa_pool.c
index 4e35b5efa..618925ff6 100644
--- a/src/sa_pool.c
+++ b/src/sa_pool.c
@@ -99,12 +99,12 @@ struct sa_entry_pool {
     /* another way is use total_used/free_cnt in sa_pool,
      * so that we need not travels the hash to get stats.
      * we use cnt here, since we may need per-pool stats. */
-    rte_atomic16_t          used_cnt;
-    rte_atomic16_t          free_cnt;
+    uint16_t                used_cnt;
+    uint16_t                free_cnt;
     uint32_t                miss_cnt;
 };
 
-/* no lock needed because inet_ifaddr.sa_pool[]
+/* no lock needed because inet_ifaddr.sa_pool
  * is per-lcore. */
 struct sa_pool {
     struct inet_ifaddr      *ifa;       /* back-pointer */
@@ -118,6 +118,7 @@ struct sa_pool {
      * for each dest, that'll be too complicated. */
     struct sa_entry_pool    *pool_hash;
     uint8_t                 pool_hash_sz;
+    uint32_t                flags;      /* SA_POOL_F_XXX */
 
     /* fdir filter ID */
     uint32_t                filter_id[MAX_FDIR_PROTO];
@@ -144,6 +145,10 @@ static int __add_del_filter(int af, struct netif_port *dev, lcoreid_t cid,
                             const union inet_addr *dip, __be16 dport,
                             uint32_t filter_id[MAX_FDIR_PROTO], bool add)
 {
+    queueid_t queue;
+    int err;
+    enum rte_filter_op op, rop;
+
     struct rte_eth_fdir_filter filt[MAX_FDIR_PROTO] = {
         {
             .action.behavior = RTE_ETH_FDIR_ACCEPT,
@@ -175,13 +180,6 @@ static int __add_del_filter(int af, struct netif_port *dev, lcoreid_t cid,
         return EDPVS_NOTSUPP;
     }
 
-    queueid_t queue;
-    int err;
-    enum rte_filter_op op, rop;
-#ifdef CONFIG_DPVS_SAPOOL_DEBUG
-    char ipaddr[64];
-#endif
-
     if (dev->netif_ops && dev->netif_ops->op_filter_supported) {
         if (dev->netif_ops->op_filter_supported(dev, RTE_ETH_FILTER_FDIR) < 0) {
             if (dev->nrxq <= 1)
@@ -218,13 +216,16 @@ static int __add_del_filter(int af, struct netif_port *dev, lcoreid_t cid,
     }
 
 #ifdef CONFIG_DPVS_SAPOOL_DEBUG
-    RTE_LOG(DEBUG, SAPOOL, "FDIR: %s %s %s TCP/UDP "
-            "ip %s port %d (0x%04x) mask 0x%04X queue %d lcore %2d filterID %d/%d\n",
-            add ? "add" : "del", dev->name,
-            af == AF_INET ? "IPv4" : "IPv6",
-            inet_ntop(af, dip, ipaddr, sizeof(ipaddr)) ? : "::",
-            ntohs(dport), ntohs(dport), sa_fdirs[cid].mask, queue, cid,
-            filter_id[0], filter_id[1]);
+    {
+        char ipaddr[64];
+        RTE_LOG(DEBUG, SAPOOL, "FDIR: %s %s %s TCP/UDP "
+                "ip %s port %d (0x%04x) mask 0x%04X queue %d lcore %2d filterID %d/%d\n",
+                add ? "add" : "del", dev->name,
+                af == AF_INET ? "IPv4" : "IPv6",
+                inet_ntop(af, dip, ipaddr, sizeof(ipaddr)) ? : "::",
+                ntohs(dport), ntohs(dport), sa_fdirs[cid].mask, queue, cid,
+                filter_id[0], filter_id[1]);
+    }
 #endif
 
     return err;
@@ -258,14 +259,15 @@ static int sa_pool_alloc_hash(struct sa_pool *ap, uint8_t hash_sz,
 
     ap->pool_hash_sz = hash_sz;
 
+    /* the big loop takes about 17ms */
     for (hash = 0; hash < hash_sz; hash++) {
         pool = &ap->pool_hash[hash];
 
         INIT_LIST_HEAD(&pool->used_enties);
         INIT_LIST_HEAD(&pool->free_enties);
 
-        rte_atomic16_set(&pool->used_cnt, 0);
-        rte_atomic16_set(&pool->free_cnt, 0);
+        pool->used_cnt = 0;
+        pool->free_cnt = 0;
 
         for (port = ap->low; port <= ap->high; port++) {
             struct sa_entry *sa;
@@ -278,7 +280,7 @@ static int sa_pool_alloc_hash(struct sa_pool *ap, uint8_t hash_sz,
             sa->addr = ap->ifa->addr;
             sa->port = htons((uint16_t)port);
             list_add_tail(&sa->list, &pool->free_enties);
-            rte_atomic16_inc(&pool->free_cnt);
+            pool->free_cnt++;
         }
     }
 
@@ -287,16 +289,32 @@ static int sa_pool_alloc_hash(struct sa_pool *ap, uint8_t hash_sz,
 
 static int sa_pool_free_hash(struct sa_pool *ap)
 {
-    rte_free(ap->pool_hash);
+    /* FIXME: it may takes about 3ms to free the huge `sa->pool_hash`, and
+     * @rte_free uses a spinlock to protect its heap. If multiple workers
+     * free their sapools simultaneously, a worker may be stuck up to 3*N ms,
+     * where `N` is the dpvs worker number.
+     *
+     * use mempool for sapool could solve the problem. we still use @rte_free
+     * here considering sapool is not frequently changed.
+     */
+    rte_free(ap->pool_hash);    /* it may takes up to 3ms */
     ap->pool_hash_sz = 0;
     return EDPVS_OK;
 }
 
 int sa_pool_create(struct inet_ifaddr *ifa, uint16_t low, uint16_t high)
 {
-    struct sa_pool *ap;
     int err;
-    lcoreid_t cid;
+    struct sa_pool *ap;
+    struct sa_fdir *fdir;
+    uint32_t filtids[MAX_FDIR_PROTO];
+    lcoreid_t cid = rte_lcore_id();
+
+    if (cid > 64 || !((sa_lcore_mask & (1UL << cid)))) {
+        if (cid == rte_get_master_lcore())
+            return EDPVS_OK; /* no sapool on master */
+        return EDPVS_INVAL;
+    }
 
     low = low ? : DEF_MIN_PORT;
     high = high ? : DEF_MAX_PORT;
@@ -306,92 +324,104 @@ int sa_pool_create(struct inet_ifaddr *ifa, uint16_t low, uint16_t high)
         return EDPVS_INVAL;
     }
 
-    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
-        uint32_t filtids[MAX_FDIR_PROTO];
-        struct sa_fdir *fdir = &sa_fdirs[cid];
+    fdir = &sa_fdirs[cid];
 
-        /* skip master and unused cores */
-        if (cid > 64 || !(sa_lcore_mask & (1L << cid)))
-            continue;
-        assert(rte_lcore_is_enabled(cid) && cid != rte_get_master_lcore());
+    ap = rte_zmalloc(NULL, sizeof(struct sa_pool), 0);
+    if (unlikely(!ap))
+        return EDPVS_NOMEM;
 
-        ap = rte_zmalloc(NULL, sizeof(struct sa_pool), 0);
-        if (!ap) {
-            err = EDPVS_NOMEM;
-            goto errout;
-        }
+    ap->ifa = ifa;
+    ap->low = low;
+    ap->high = high;
+    ap->flags = 0;
+    rte_atomic32_set(&ap->refcnt, 1);
 
-        ap->ifa = ifa;
-        ap->low = low;
-        ap->high = high;
-        rte_atomic32_set(&ap->refcnt, 0);
+    err = sa_pool_alloc_hash(ap, sa_pool_hash_size, fdir);
+    if (err != EDPVS_OK) {
+        goto free_ap;
+    }
 
-        err = sa_pool_alloc_hash(ap, sa_pool_hash_size, fdir);
-        if (err != EDPVS_OK) {
-            rte_free(ap);
-            goto errout;
-        }
+    filtids[0] = fdir->soft_id++;
+    filtids[1] = fdir->soft_id++;
+    err = sa_add_filter(ifa->af, ifa->idev->dev, cid, &ifa->addr,
+                        fdir->port_base, filtids); /* thread-safe ? */
+    if (err != EDPVS_OK) {
+        goto free_hash;
+    }
 
-        /* if add filter failed, waste some soft-id is acceptable. */
-        filtids[0] = fdir->soft_id++;
-        filtids[1] = fdir->soft_id++;
+    ap->filter_id[0] = filtids[0];
+    ap->filter_id[1] = filtids[1];
 
-        err = sa_add_filter(ifa->af, ifa->idev->dev, cid, &ifa->addr,
-                            fdir->port_base, filtids);
-        if (err != EDPVS_OK) {
-            sa_pool_free_hash(ap);
-            rte_free(ap);
-            goto errout;
-        }
-        ap->filter_id[0] = filtids[0];
-        ap->filter_id[1] = filtids[1];
+    ifa->sa_pool = ap;
 
-        ifa->sa_pools[cid] = ap;
-    }
+    /* inc ifa->refcnt to hold it */
+    rte_atomic32_inc(&ifa->refcnt);
 
 #ifdef CONFIG_DPVS_SAPOOL_DEBUG
-    RTE_LOG(DEBUG, SAPOOL, "%s: sa pool created\n", __func__);
+    {
+        char addr[64];
+        RTE_LOG(INFO, SAPOOL, "[%02d] %s: sa pool created -- %s\n", rte_lcore_id(),
+                __func__, inet_ntop(ifa->af, &ifa->addr, addr, sizeof(addr)) ? : NULL);
+    }
 #endif
+
     return EDPVS_OK;
 
-errout:
-    sa_pool_destroy(ifa);
+free_hash:
+    sa_pool_free_hash(ap);
+free_ap:
+    rte_free(ap);
     return err;
 }
 
+/*
+ * the func name @sa_pool_destroy is a litle confusing, its more reasonable
+ * name may be something like `sa_pool_put`. we keep the name to correspond
+ * with @sa_pool_create.
+ * */
 int sa_pool_destroy(struct inet_ifaddr *ifa)
 {
-    lcoreid_t cid;
+    int err;
+    struct sa_pool *ap;
+    lcoreid_t cid = rte_lcore_id();
 
-    if (!ifa || !ifa->sa_pools)
+    if (cid > 64 || !((sa_lcore_mask & (1UL << cid)))) {
+        if (cid == rte_get_master_lcore())
+            return EDPVS_OK;
         return EDPVS_INVAL;
+    }
 
-    for (cid = 0; cid < DPVS_MAX_LCORE; cid++) {
-        struct sa_pool *ap = ifa->sa_pools[cid];
-        struct sa_fdir *fdir = &sa_fdirs[cid];
+    if (!ifa || !ifa->sa_pool)
+        return EDPVS_INVAL;
+    ap = ifa->sa_pool;
 
-        if (cid > 64 || !(sa_lcore_mask & (1L << cid)))
-            continue;
-        assert(rte_lcore_is_enabled(cid) && cid != rte_get_master_lcore());
+    if (!rte_atomic32_dec_and_test(&ap->refcnt))
+        return EDPVS_OK;
 
-        if (!ap)
-            continue;
+    err = sa_del_filter(ifa->af, ifa->idev->dev, cid, &ifa->addr,
+            sa_fdirs[cid].port_base, ap->filter_id); /* thread-safe ? */
+    if (err != EDPVS_OK) {
+        RTE_LOG(ERR, SAPOOL, "[%02d] %s: sa_del_filter failed -- %s\n",
+                cid, __func__, dpvs_strerror(err));
+        return err;
+    }
 
-        if (rte_atomic32_read(&ap->refcnt) != 0) {
-            RTE_LOG(WARNING, SAPOOL, "%s: sa pool is inusing\n", __func__);
-            return EDPVS_BUSY;
-        }
+    sa_pool_free_hash(ap);
+    rte_free(ap);
 
-        sa_del_filter(ifa->af, ifa->idev->dev, cid, &ifa->addr,
-                      fdir->port_base, ap->filter_id);
-        sa_pool_free_hash(ap);
-        rte_free(ap);
-        ifa->sa_pools[cid] = NULL;
-    }
+    ifa->sa_pool = NULL;
 
 #ifdef CONFIG_DPVS_SAPOOL_DEBUG
-    RTE_LOG(DEBUG, SAPOOL, "%s: sa pool destroyed\n", __func__);
+    {
+        char addr[64];
+        RTE_LOG(INFO, SAPOOL, "[%02d] %s: sa pool destroyed -- %s\n", rte_lcore_id(),
+                __func__, inet_ntop(ifa->af, &ifa->addr, addr, sizeof(addr)) ? : NULL);
+    }
 #endif
+
+    /* release ifa held by @sa_pool_create */
+    inet_addr_ifa_put(ifa);
+
     return EDPVS_OK;
 }
 
@@ -435,16 +465,12 @@ static inline int sa_pool_fetch(struct sa_entry_pool *pool,
     struct sa_entry *ent;
     struct sockaddr_in *sin = (struct sockaddr_in *)ss;
     struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)ss;
-#ifdef CONFIG_DPVS_SAPOOL_DEBUG
-    char addr[64];
-#endif
 
     ent = list_first_entry_or_null(&pool->free_enties, struct sa_entry, list);
     if (!ent) {
 #ifdef CONFIG_DPVS_SAPOOL_DEBUG
         RTE_LOG(DEBUG, SAPOOL, "%s: no entry (used/free %d/%d)\n", __func__,
-                rte_atomic16_read(&pool->used_cnt),
-                rte_atomic16_read(&pool->free_cnt));
+                pool->used_cnt, pool->free_cnt);
 #endif
         pool->miss_cnt++;
         return EDPVS_RESOURCE;
@@ -464,13 +490,16 @@ static inline int sa_pool_fetch(struct sa_entry_pool *pool,
 
     ent->flags |= SA_F_USED;
     list_move_tail(&ent->list, &pool->used_enties);
-    rte_atomic16_inc(&pool->used_cnt);
-    rte_atomic16_dec(&pool->free_cnt);
+    pool->used_cnt++;
+    pool->free_cnt--;
 
 #ifdef CONFIG_DPVS_SAPOOL_DEBUG
-    RTE_LOG(DEBUG, SAPOOL, "%s: %s:%d fetched!\n", __func__,
-            inet_ntop(ss->ss_family, &ent->addr, addr, sizeof(addr)) ? : NULL,
-            ntohs(ent->port));
+    {
+        char addr[64];
+        RTE_LOG(DEBUG, SAPOOL, "%s: %s:%d fetched!\n", __func__,
+                inet_ntop(ss->ss_family, &ent->addr, addr, sizeof(addr)) ? : NULL,
+                ntohs(ent->port));
+    }
 #endif
 
     return EDPVS_OK;
@@ -485,9 +514,6 @@ static inline int sa_pool_release(struct sa_entry_pool *pool,
     const struct sockaddr_in *sin = (const struct sockaddr_in *)ss;
     const struct sockaddr_in6 *sin6 = (const struct sockaddr_in6 *)ss;
     __be16 port;
-#ifdef CONFIG_DPVS_SAPOOL_DEBUG
-    char addr[64];
-#endif
 
     if (ss->ss_family == AF_INET)
         port = ntohs(sin->sin_port);
@@ -515,13 +541,16 @@ static inline int sa_pool_release(struct sa_entry_pool *pool,
 
     ent->flags &= (~SA_F_USED);
     list_move_tail(&ent->list, &pool->free_enties);
-    rte_atomic16_dec(&pool->used_cnt);
-    rte_atomic16_inc(&pool->free_cnt);
+    pool->used_cnt--;
+    pool->free_cnt++;
 
 #ifdef CONFIG_DPVS_SAPOOL_DEBUG
-    RTE_LOG(DEBUG, SAPOOL, "%s: %s:%d released!\n", __func__,
-            inet_ntop(ss->ss_family, &ent->addr, addr, sizeof(addr)) ? : NULL,
-            ntohs(ent->port));
+    {
+        char addr[64];
+        RTE_LOG(DEBUG, SAPOOL, "%s: %s:%d released!\n", __func__,
+                inet_ntop(ss->ss_family, &ent->addr, addr, sizeof(addr)) ? : NULL,
+                ntohs(ent->port));
+    }
 #endif
 
     return EDPVS_OK;
@@ -566,24 +595,24 @@ static int sa4_fetch(struct netif_port *dev,
     if (saddr && saddr->sin_addr.s_addr != INADDR_ANY && saddr->sin_port != 0)
         return EDPVS_OK; /* everything is known, why call this function ? */
 
-    /* if source IP is assiged, we can find ifa->this_sa_pool
+    /* if source IP is assiged, we can find ifa->sa_pool
      * without @daddr and @dev. */
     if (saddr->sin_addr.s_addr) {
         ifa = inet_addr_ifa_get(AF_INET, dev, (union inet_addr*)&saddr->sin_addr);
         if (!ifa)
             return EDPVS_NOTEXIST;
 
-        if (!ifa->this_sa_pool) {
-            RTE_LOG(WARNING, SAPOOL, "%s: fetch addr on IP without pool.", __func__);
+        if (!ifa->sa_pool) {
+            RTE_LOG(WARNING, SAPOOL, "%s: fetch addr on IP without sapool.", __func__);
             inet_addr_ifa_put(ifa);
             return EDPVS_INVAL;
         }
 
-        err = sa_pool_fetch(sa_pool_hash(ifa->this_sa_pool,
+        err = sa_pool_fetch(sa_pool_hash(ifa->sa_pool,
                             (struct sockaddr_storage *)daddr),
                             (struct sockaddr_storage *)saddr);
         if (err == EDPVS_OK)
-            rte_atomic32_inc(&ifa->this_sa_pool->refcnt);
+            rte_atomic32_inc(&ifa->sa_pool->refcnt);
         inet_addr_ifa_put(ifa);
         return err;
     }
@@ -609,7 +638,7 @@ static int sa4_fetch(struct netif_port *dev,
     }
     route4_put(rt);
 
-    if (!ifa->this_sa_pool) {
+    if (!ifa->sa_pool) {
         RTE_LOG(WARNING, SAPOOL, "%s: fetch addr on IP without pool.",
                 __func__);
         inet_addr_ifa_put(ifa);
@@ -617,11 +646,11 @@ static int sa4_fetch(struct netif_port *dev,
     }
 
     /* do fetch socket address */
-    err = sa_pool_fetch(sa_pool_hash(ifa->this_sa_pool,
+    err = sa_pool_fetch(sa_pool_hash(ifa->sa_pool,
                         (struct sockaddr_storage *)daddr),
                         (struct sockaddr_storage *)saddr);
     if (err == EDPVS_OK)
-        rte_atomic32_inc(&ifa->this_sa_pool->refcnt);
+        rte_atomic32_inc(&ifa->sa_pool->refcnt);
 
     inet_addr_ifa_put(ifa);
     return err;
@@ -640,24 +669,24 @@ static int sa6_fetch(struct netif_port *dev,
     if (saddr && !ipv6_addr_any(&saddr->sin6_addr) && saddr->sin6_port != 0)
         return EDPVS_OK; /* everything is known, why call this function ? */
 
-    /* if source IP is assiged, we can find ifa->this_sa_pool
+    /* if source IP is assiged, we can find ifa->sa_pool
      * without @daddr and @dev. */
     if (!ipv6_addr_any(&saddr->sin6_addr)) {
         ifa = inet_addr_ifa_get(AF_INET6, dev, (union inet_addr*)&saddr->sin6_addr);
         if (!ifa)
             return EDPVS_NOTEXIST;
 
-        if (!ifa->this_sa_pool) {
+        if (!ifa->sa_pool) {
             RTE_LOG(WARNING, SAPOOL, "%s: fetch addr on IP without pool.", __func__);
             inet_addr_ifa_put(ifa);
             return EDPVS_INVAL;
         }
 
-        err = sa_pool_fetch(sa_pool_hash(ifa->this_sa_pool,
+        err = sa_pool_fetch(sa_pool_hash(ifa->sa_pool,
                             (struct sockaddr_storage *)daddr),
                             (struct sockaddr_storage *)saddr);
         if (err == EDPVS_OK)
-            rte_atomic32_inc(&ifa->this_sa_pool->refcnt);
+            rte_atomic32_inc(&ifa->sa_pool->refcnt);
         inet_addr_ifa_put(ifa);
         return err;
     }
@@ -688,7 +717,7 @@ static int sa6_fetch(struct netif_port *dev,
     }
     route6_put(rt6);
 
-    if (!ifa->this_sa_pool) {
+    if (!ifa->sa_pool) {
         RTE_LOG(WARNING, SAPOOL, "%s: fetch addr on IP without pool.",
                 __func__);
         inet_addr_ifa_put(ifa);
@@ -696,11 +725,11 @@ static int sa6_fetch(struct netif_port *dev,
     }
 
     /* do fetch socket address */
-    err = sa_pool_fetch(sa_pool_hash(ifa->this_sa_pool,
+    err = sa_pool_fetch(sa_pool_hash(ifa->sa_pool,
                         (struct sockaddr_storage *)daddr),
                         (struct sockaddr_storage *)saddr);
     if (err == EDPVS_OK)
-        rte_atomic32_inc(&ifa->this_sa_pool->refcnt);
+        rte_atomic32_inc(&ifa->sa_pool->refcnt);
 
     inet_addr_ifa_put(ifa);
     return err;
@@ -724,7 +753,7 @@ int sa_fetch(int af, struct netif_port *dev,
         return EDPVS_NOTSUPP;
 }
 
-/* call me with `saddr` must not NULL */
+/* call me with @saddr must not NULL */
 int sa_release(const struct netif_port *dev,
                const struct sockaddr_storage *daddr,
                const struct sockaddr_storage *saddr)
@@ -742,10 +771,16 @@ int sa_release(const struct netif_port *dev,
         const struct sockaddr_in *saddr4 = (const struct sockaddr_in *)saddr;
         ifa = inet_addr_ifa_get(AF_INET, dev,
                 (union inet_addr*)&saddr4->sin_addr);
+        if (unlikely(!ifa))
+            ifa = inet_addr_ifa_get_expired(AF_INET, dev,
+                    (union inet_addr*)&saddr4->sin_addr);
     } else if (AF_INET6 == saddr->ss_family) {
         const struct sockaddr_in6 *saddr6 = (const struct sockaddr_in6 *)saddr;
         ifa = inet_addr_ifa_get(AF_INET6, dev,
                 (union inet_addr*)&saddr6->sin6_addr);
+        if (unlikely(!ifa))
+            ifa = inet_addr_ifa_get_expired(AF_INET6, dev,
+                    (union inet_addr*)&saddr6->sin6_addr);
     } else {
         return EDPVS_NOTSUPP;
     }
@@ -753,104 +788,50 @@ int sa_release(const struct netif_port *dev,
     if (!ifa)
         return EDPVS_NOTEXIST;
 
-    if (!ifa->this_sa_pool) {
+    if (!ifa->sa_pool) {
         RTE_LOG(WARNING, SAPOOL, "%s: release addr on IP without pool.",
                 __func__);
         inet_addr_ifa_put(ifa);
         return EDPVS_INVAL;
     }
 
-    err = sa_pool_release(sa_pool_hash(ifa->this_sa_pool, daddr), saddr);
-    if (err == EDPVS_OK)
-        rte_atomic32_dec(&ifa->this_sa_pool->refcnt);
-    inet_addr_ifa_put(ifa);
-    return err;
-}
-
-int sa_pool_stats(const struct inet_ifaddr *ifa, struct sa_pool_stats *stats)
-{
-    struct dpvs_msg *req, *reply;
-    struct dpvs_multicast_queue *replies = NULL;
-    int err;
-
-    memset(stats, 0, sizeof(*stats));
-
-    /*
-     * worker need know which ifa's stats to get.
-     * but passing @ifa pointer to worker lcores doesn't make sense,
-     * note the worker must only access per-lcore data ifa->sa_pools[cid].
-     */
-    req = msg_make(MSG_TYPE_SAPOOL_STATS, 0, DPVS_MSG_MULTICAST,
-                   rte_lcore_id(), sizeof(struct inet_ifaddr *), &ifa);
-    if (!req)
-        return EDPVS_NOMEM;
-
-    err = multicast_msg_send(req, 0, &replies);
+    err = sa_pool_release(sa_pool_hash(ifa->sa_pool, daddr), saddr);
     if (err != EDPVS_OK) {
-        RTE_LOG(ERR, SAPOOL, "%s: mc msg send fail: %s\n", __func__,
-                dpvs_strerror(err));
-        msg_destroy(&req);
+        inet_addr_ifa_put(ifa);
         return err;
     }
 
-    list_for_each_entry(reply, &replies->mq, mq_node) {
-        struct sa_pool_stats *st = (struct sa_pool_stats *)reply->data;
-        assert(st);
+    sa_pool_destroy(ifa);
 
-        stats->used_cnt += st->used_cnt;
-        stats->free_cnt += st->free_cnt;
-        stats->miss_cnt += st->miss_cnt;
-    }
+    inet_addr_ifa_put(ifa);
 
-    msg_destroy(&req);
-    return 0;
+    return EDPVS_OK;
 }
 
-static int sa_msg_get_stats(struct dpvs_msg *msg)
+int get_sa_pool_stats(const struct inet_ifaddr *ifa, struct sa_pool_stats *stats)
 {
-    const struct inet_ifaddr *ifa;
-    struct sa_pool_stats *stats;
-    struct sa_entry_pool *pool;
-    void *ptr;
     int hash;
+    struct sa_entry_pool *pool;
 
-    assert(msg && msg->len == sizeof(struct inet_ifaddr *));
-
-    ptr = msg->data;
-    ifa = *(struct inet_ifaddr **)ptr;
-
-    stats = msg_reply_alloc(sizeof(*stats));
-    if (!stats)
-        return EDPVS_NOMEM;
-
-    if (!ifa->this_sa_pool)
-        goto reply;
+    if (!ifa || !ifa->sa_pool || !stats)
+        return EDPVS_INVAL;
 
-    for (hash = 0; hash < ifa->this_sa_pool->pool_hash_sz; hash++) {
-        pool = &ifa->this_sa_pool->pool_hash[hash];
+    memset(stats, 0, sizeof(*stats));
+    for (hash = 0; hash < ifa->sa_pool->pool_hash_sz; hash++) {
+        pool = &ifa->sa_pool->pool_hash[hash];
         assert(pool);
 
-        stats->used_cnt += rte_atomic16_read(&pool->used_cnt);
-        stats->free_cnt += rte_atomic16_read(&pool->free_cnt);
+        stats->used_cnt += pool->used_cnt;
+        stats->free_cnt += pool->free_cnt;
         stats->miss_cnt += pool->miss_cnt;
     }
 
-reply:
-    msg->reply.len = sizeof(*stats);
-    msg->reply.data = stats;
-
     return EDPVS_OK;
 }
 
-static struct dpvs_msg_type sa_stats_msg = {
-    .type           = MSG_TYPE_SAPOOL_STATS,
-    .prio           = MSG_PRIO_LOW,
-    .unicast_msg_cb = sa_msg_get_stats,
-};
-
 int sa_pool_init(void)
 {
-    int shift, err;
+    int shift;
     lcoreid_t cid;
     uint16_t port_base;
 
@@ -877,18 +858,12 @@ int sa_pool_init(void)
         port_base++;
     }
 
-    err = msg_type_mc_register(&sa_stats_msg);
-
-    return err;
+    return EDPVS_OK;
 }
 
 int sa_pool_term(void)
 {
-    int err;
-
-    err = msg_type_mc_unregister(&sa_stats_msg);
-
-    return err;
+    return EDPVS_OK;
 }
 
 /*
diff --git a/tools/dpip/addr.c b/tools/dpip/addr.c
index 441bbbfa2..d29ef15e8 100644
--- a/tools/dpip/addr.c
+++ b/tools/dpip/addr.c
@@ -80,30 +80,32 @@ static const char *scope_itoa(uint8_t scope, char *buf, size_t size)
     return buf;
 }
 
-static void addr_dump(const struct inet_addr_param *param)
+static void addr_dump(const struct inet_addr_data *data, uint32_t flags)
 {
     char addr[64], bcast[64 + sizeof("broadcast ")];
     char scope[64], vld_lft[64], prf_lft[64];
 
     bcast[0] = '\0';
-    if (!inet_is_addr_any(param->af, &param->bcast)) {
+    if (!inet_is_addr_any(data->ifa_entry.af, &data->ifa_entry.bcast)) {
         snprintf(bcast, sizeof(bcast), "broadcast ");
-        if (inet_ntop(param->af, &param->bcast, bcast + strlen(bcast),
+        if (inet_ntop(data->ifa_entry.af, &data->ifa_entry.bcast, bcast + strlen(bcast),
                       sizeof(bcast) - strlen(bcast)) == NULL)
             bcast[0] = '\0';
     }
 
+    if (flags & IFA_F_OPS_VERBOSE)
+        printf("[%02d] ", data->ifa_entry.cid);
     printf("%s %s/%d scope %s %s\n    %s valid_lft %s preferred_lft %s",
-           af_itoa(param->af),
-           inet_ntop(param->af, &param->addr, addr, sizeof(addr)) ? addr : "::",
-           param->plen, scope_itoa(param->scope, scope, sizeof(scope)),
-           param->ifname, bcast,
-           lft_itoa(param->valid_lft, vld_lft, sizeof(vld_lft)),
-           lft_itoa(param->prefered_lft, prf_lft, sizeof(prf_lft)));
-
-    if (param->flags & IFA_F_SAPOOL)
+           af_itoa(data->ifa_entry.af),
+           inet_ntop(data->ifa_entry.af, &data->ifa_entry.addr, addr, sizeof(addr)) ? addr : "::",
+           data->ifa_entry.plen, scope_itoa(data->ifa_entry.scope, scope, sizeof(scope)),
+           data->ifa_entry.ifname, bcast,
+           lft_itoa(data->ifa_entry.valid_lft, vld_lft, sizeof(vld_lft)),
+           lft_itoa(data->ifa_entry.prefered_lft, prf_lft, sizeof(prf_lft)));
+
+    if ((flags & (IFA_F_OPS_STATS | IFA_F_OPS_VERBOSE)) && (data->ifa_entry.flags & IFA_F_SAPOOL))
         printf(" sa_used %u sa_free %u sa_miss %u",
-               param->sa_used, param->sa_free, param->sa_miss);
+               data->ifa_stats.sa_used, data->ifa_stats.sa_free, data->ifa_stats.sa_miss);
 
     printf("\n");
 
@@ -117,44 +119,50 @@ static int addr_parse_args(struct dpip_conf *conf,
     char *addr, *plen;
 
     memset(param, 0, sizeof(*param));
-    param->af = conf->af;
-    param->scope = IFA_SCOPE_GLOBAL;
+
+    if (conf->verbose)
+        param->ifa_ops_flags |= IFA_F_OPS_VERBOSE;
+    if (conf->stats)
+        param->ifa_ops_flags |= IFA_F_OPS_STATS;
+
+    param->ifa_entry.af = conf->af;
+    param->ifa_entry.scope = IFA_SCOPE_GLOBAL;
 
     while (conf->argc > 0) {
         if (strcmp(conf->argv[0], "dev") == 0) {
             NEXTARG_CHECK(conf, "dev");
-            snprintf(param->ifname, sizeof(param->ifname), "%s", conf->argv[0]);
+            snprintf(param->ifa_entry.ifname, sizeof(param->ifa_entry.ifname), "%s", conf->argv[0]);
         } else if (strcmp(conf->argv[0], "scope") == 0) {
             NEXTARG_CHECK(conf, "scope");
 
             if (strcmp(conf->argv[0], "host") == 0)
-                param->scope = IFA_SCOPE_HOST;
+                param->ifa_entry.scope = IFA_SCOPE_HOST;
             else if (strcmp(conf->argv[0], "link") == 0)
-                param->scope = IFA_SCOPE_LINK;
+                param->ifa_entry.scope = IFA_SCOPE_LINK;
             else if (strcmp(conf->argv[0], "global") == 0)
-                param->scope = IFA_SCOPE_GLOBAL;
+                param->ifa_entry.scope = IFA_SCOPE_GLOBAL;
             else
-                param->scope = atoi(conf->argv[0]);
+                param->ifa_entry.scope = atoi(conf->argv[0]);
         } else if (strcmp(conf->argv[0], "broadcast") == 0) {
             NEXTARG_CHECK(conf, "broadcast");
-            if (inet_pton_try(&param->af, conf->argv[0], &param->bcast) <= 0)
+            if (inet_pton_try(&param->ifa_entry.af, conf->argv[0], &param->ifa_entry.bcast) <= 0)
                 return -1;
         } else if (strcmp(conf->argv[0], "valid_lft") == 0) {
             NEXTARG_CHECK(conf, "valid_lft");
 
             if (strcmp(conf->argv[0], "forever") == 0)
-                param->valid_lft = 0;
+                param->ifa_entry.valid_lft = 0;
             else
-                param->valid_lft = atoi(conf->argv[0]);
+                param->ifa_entry.valid_lft = atoi(conf->argv[0]);
         } else if (strcmp(conf->argv[0], "prefered_lft") == 0) {
             NEXTARG_CHECK(conf, "prefered_lft");
 
             if (strcmp(conf->argv[0], "forever") == 0)
-                param->prefered_lft = 0;
+                param->ifa_entry.prefered_lft = 0;
             else
-                param->prefered_lft = atoi(conf->argv[0]);
+                param->ifa_entry.prefered_lft = atoi(conf->argv[0]);
         } else if (strcmp(conf->argv[0], "sapool") == 0) {
-            param->flags |= IFA_F_SAPOOL;
+            param->ifa_entry.flags |= IFA_F_SAPOOL;
         } else {
             prefix = conf->argv[0];
         }
@@ -179,32 +187,29 @@ static int addr_parse_args(struct dpip_conf *conf,
         addr = prefix;
         if ((plen = strchr(addr, '/')) != NULL)
             *plen++ = '\0';
-        if (inet_pton_try(&param->af, prefix, &param->addr) <= 0)
+        if (inet_pton_try(&param->ifa_entry.af, prefix, &param->ifa_entry.addr) <= 0)
             return -1;
-        param->plen = plen ? atoi(plen) : 0;
+        param->ifa_entry.plen = plen ? atoi(plen) : 0;
     }
 
-    switch (param->af) {
+    switch (param->ifa_entry.af) {
     case AF_INET:
-        if (!param->plen)
-            param->plen = 32;
+        if (!param->ifa_entry.plen)
+            param->ifa_entry.plen = 32;
         break;
     case AF_INET6:
-        if (!param->plen)
-            param->plen = 128;
+        if (!param->ifa_entry.plen)
+            param->ifa_entry.plen = 128;
         break;
     default:
         break;
     }
 
-    if (conf->cmd != DPIP_CMD_SHOW && !strlen(param->ifname)) {
+    if (conf->cmd != DPIP_CMD_SHOW && !strlen(param->ifa_entry.ifname)) {
         fprintf(stderr, "no device specified.\n");
         return -1;
     }
 
-    if (conf->verbose)
-        addr_dump(param);
-
     return 0;
 }
 
@@ -212,7 +217,7 @@ static int addr_do_cmd(struct dpip_obj *obj, dpip_cmd_t cmd,
                        struct dpip_conf *conf)
 {
     struct inet_addr_param param;
-    struct inet_addr_param_array *array;
+    struct inet_addr_data_array *array;
     size_t size, i;
     int err;
 
@@ -221,29 +226,34 @@ static int addr_do_cmd(struct dpip_obj *obj, dpip_cmd_t cmd,
 
     switch (conf->cmd) {
     case DPIP_CMD_ADD:
+        param.ifa_ops = INET_ADDR_ADD;
         return dpvs_setsockopt(SOCKOPT_SET_IFADDR_ADD, &param, sizeof(param));
     case DPIP_CMD_DEL:
+        param.ifa_ops = INET_ADDR_DEL;
         return dpvs_setsockopt(SOCKOPT_SET_IFADDR_DEL, &param, sizeof(param));
     case DPIP_CMD_SET:
+        param.ifa_ops = INET_ADDR_MOD;
         return dpvs_setsockopt(SOCKOPT_SET_IFADDR_SET, &param, sizeof(param));
     case DPIP_CMD_FLUSH:
+        param.ifa_ops = INET_ADDR_FLUSH;
         return dpvs_setsockopt(SOCKOPT_SET_IFADDR_FLUSH, &param, sizeof(param));
     case DPIP_CMD_SHOW:
+        param.ifa_ops = INET_ADDR_GET;
         err = dpvs_getsockopt(SOCKOPT_GET_IFADDR_SHOW, &param, sizeof(param),
                               (void **)&array, &size);
         if (err != 0)
             return err;
 
         if (size < sizeof(*array)
-                || size != sizeof(*array) + \
-                           array->naddr * sizeof(struct inet_addr_param)) {
+                || size < sizeof(*array) + \
+                           array->naddr * sizeof(struct inet_addr_data)) {
             fprintf(stderr, "corrupted response.\n");
             dpvs_sockopt_msg_free(array);
             return EDPVS_INVAL;
         }
 
         for (i = 0; i < array->naddr; i++)
-            addr_dump(&array->addrs[i]);
+            addr_dump(&array->addrs[i], array->ops_flags);
 
         dpvs_sockopt_msg_free(array);
         return EDPVS_OK;
diff --git a/tools/keepalived/keepalived/check/libipvs.c b/tools/keepalived/keepalived/check/libipvs.c
index 1e6467b9d..c3af1760a 100644
--- a/tools/keepalived/keepalived/check/libipvs.c
+++ b/tools/keepalived/keepalived/check/libipvs.c
@@ -495,15 +495,26 @@ static void ipvs_fill_laddr_conf(ipvs_service_t *svc, ipvs_laddr_t *laddr,
 	return ;
 }
 
-static void ipvs_fill_ipaddr_conf(ipvs_laddr_t *laddr, struct inet_addr_param *param)
+static void ipvs_fill_ipaddr_conf(int is_add, uint32_t flags,
+                                  ipvs_laddr_t *laddr, struct inet_addr_param *param)
 {
 	memset(param, 0, sizeof(*param));
-	param->af = AF_INET;
+	if (is_add)
+		param->ifa_ops = INET_ADDR_ADD;
+	else
+		param->ifa_ops = INET_ADDR_DEL;
+	param->ifa_ops_flags = flags;
+	param->ifa_entry.af = laddr->af;
 	if (strlen(laddr->ifname))
-		snprintf(param->ifname, sizeof(param->ifname), "%s", laddr->ifname);
-	param->addr.in = laddr->addr.in;
-	param->plen = 32;
-	param->flags |= IFA_F_SAPOOL;
+		snprintf(param->ifa_entry.ifname, sizeof(param->ifa_entry.ifname), "%s", laddr->ifname);
+	if (laddr->af == AF_INET) {
+		param->ifa_entry.addr.in = laddr->addr.in;
+		param->ifa_entry.plen = 32;
+	} else {
+		param->ifa_entry.plen = 128;
+		param->ifa_entry.addr.in6 = laddr->addr.in6;
+	}
+	param->ifa_entry.flags |= IFA_F_SAPOOL;
 	return;
 }
 
@@ -513,7 +524,7 @@ int ipvs_add_laddr(ipvs_service_t *svc, ipvs_laddr_t * laddr)
 	struct inet_addr_param param;
 
 	ipvs_fill_laddr_conf(svc, laddr, &conf);
-	ipvs_fill_ipaddr_conf(laddr, &param);
+	ipvs_fill_ipaddr_conf(1, 0, laddr, &param);
 	ipvs_set_ipaddr(&param, 1);
 
 	return dpvs_setsockopt(SOCKOPT_SET_LADDR_ADD, &conf, sizeof(conf));
@@ -525,7 +536,7 @@ int ipvs_del_laddr(ipvs_service_t *svc, ipvs_laddr_t * laddr)
 	struct inet_addr_param param;
 
 	ipvs_fill_laddr_conf(svc, laddr, &conf);
-	ipvs_fill_ipaddr_conf(laddr, &param);
+	ipvs_fill_ipaddr_conf(0, 0, laddr, &param);
 	ipvs_set_ipaddr(&param, 0);
 
 	return dpvs_setsockopt(SOCKOPT_SET_LADDR_DEL, &conf, sizeof(conf));
diff --git a/tools/keepalived/keepalived/vrrp/vrrp_ipaddress.c b/tools/keepalived/keepalived/vrrp/vrrp_ipaddress.c
index bdece488d..00d267939 100644
--- a/tools/keepalived/keepalived/vrrp/vrrp_ipaddress.c
+++ b/tools/keepalived/keepalived/vrrp/vrrp_ipaddress.c
@@ -73,13 +73,26 @@ ipaddresstos(char *buf, const ip_address_t *ipaddress)
 
 /* Add/Delete IP address to a specific interface_t */
 static void
-dpvs_fill_addrconf(ip_address_t *ipaddress, char *dpdk_port, struct inet_addr_param *param)
+dpvs_fill_addrconf(int is_add, uint32_t flags, ip_address_t *ipaddress,
+				   char *dpdk_port, struct inet_addr_param *param)
 {
-	param->af = ipaddress->ifa.ifa_family;
-	param->addr.in = ipaddress->u.sin.sin_addr;
-	strcpy(param->ifname, dpdk_port);
-	param->plen = ipaddress->ifa.ifa_prefixlen;
-	param->flags &= ~IFA_F_SAPOOL;
+	if (is_add)
+		param->ifa_ops = INET_ADDR_ADD;
+	else
+		param->ifa_ops = INET_ADDR_DEL;
+	param->ifa_ops_flags = 0;
+	param->ifa_entry.af = ipaddress->ifa.ifa_family;
+	if (dpdk_port) {
+		strcpy(param->ifa_entry.ifname, dpdk_port);
+	} else {
+		strcpy(param->ifa_entry.ifname, IF_NAME(if_get_by_ifindex(ipaddress->ifa.ifa_index)));
+	}
+	if (param->ifa_entry.af == AF_INET)
+		param->ifa_entry.addr.in  = ipaddress->u.sin.sin_addr;
+	else
+		param->ifa_entry.addr.in6 = ipaddress->u.sin6_addr;
+	param->ifa_entry.plen = ipaddress->ifa.ifa_prefixlen;
+	param->ifa_entry.flags &= ~IFA_F_SAPOOL;
 }
 
 int
@@ -89,10 +102,12 @@ netlink_ipaddress(ip_address_t* ipaddress, char *dpdk_port, int cmd)
 
 	if (dpdk_port == NULL)
 		return 1;
-	
+
 	memset(&param, 0, sizeof(param));
-	dpvs_fill_addrconf(ipaddress, dpdk_port, &param);
+	dpvs_fill_addrconf(cmd == IPADDRESS_DEL ? 0 : 1, 0,
+			ipaddress, dpdk_port, &param);
 	ipvs_set_ipaddr(&param, cmd);
+
 	return 1;
 }
 

From 1d7ce44d91935620ed0ced0e5e25f085d238c092 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Fri, 27 Dec 2019 20:03:40 +0800
Subject: [PATCH 52/62] toa: fix ipv6 crash problem caused by page write
 protect

---
 kmod/toa/toa.c | 78 ++++++++++++++++++++++++++++++++------------------
 1 file changed, 50 insertions(+), 28 deletions(-)

diff --git a/kmod/toa/toa.c b/kmod/toa/toa.c
index 2d755b7f1..e78ce3fb7 100644
--- a/kmod/toa/toa.c
+++ b/kmod/toa/toa.c
@@ -761,45 +761,57 @@ hook_toa_functions(void)
     /* hook inet_getname for ipv4 */
     inet_stream_ops_p = (struct proto_ops *)&inet_stream_ops;
     
-    if(is_ro_addr((unsigned long)(&inet_stream_ops.getname)))
-    {
+    if (is_ro_addr((unsigned long)(&inet_stream_ops.getname))) {
             set_addr_rw((unsigned long)(&inet_stream_ops.getname));
             rw_enable = 1;
     }
     inet_stream_ops_p->getname = inet_getname_toa;
-    if(rw_enable == 1)
-    {
+    if (rw_enable == 1) {
             set_addr_ro((unsigned long)(&inet_stream_ops.getname));
             rw_enable = 0;
     }
     TOA_INFO("CPU [%u] hooked inet_getname <%p> --> <%p>\n",
-    	smp_processor_id(), inet_getname, inet_stream_ops_p->getname);
+            smp_processor_id(), inet_getname, inet_stream_ops_p->getname);
     
     ipv4_specific_p = (struct inet_connection_sock_af_ops *)&ipv4_specific;
     
-    if(is_ro_addr((unsigned long)(&ipv4_specific.syn_recv_sock)))
-    {
+    if (is_ro_addr((unsigned long)(&ipv4_specific.syn_recv_sock))) {
             set_addr_rw((unsigned long)(&ipv4_specific.syn_recv_sock));
             rw_enable = 1;
     }
     ipv4_specific_p->syn_recv_sock = tcp_v4_syn_recv_sock_toa;
-    if(rw_enable == 1)
-    {
+    if (rw_enable == 1) {
             set_addr_ro((unsigned long)(&ipv4_specific.syn_recv_sock));
             rw_enable = 0;
     }
     TOA_INFO("CPU [%u] hooked tcp_v4_syn_recv_sock <%p> --> <%p>\n",
-    	smp_processor_id(), tcp_v4_syn_recv_sock,
-    	ipv4_specific_p->syn_recv_sock);
+            smp_processor_id(), tcp_v4_syn_recv_sock,
+            ipv4_specific_p->syn_recv_sock);
 #ifdef TOA_IPV6_ENABLE
+    if (is_ro_addr((unsigned long)(&inet6_stream_ops_p->getname))) {
+            set_addr_rw((unsigned long)(&inet6_stream_ops_p->getname));
+            rw_enable = 1;
+    }
     inet6_stream_ops_p->getname = inet6_getname_toa;
+    if (rw_enable == 1) {
+            set_addr_ro((unsigned long)(&inet6_stream_ops_p->getname));
+            rw_enable = 0;
+    }
     TOA_INFO("CPU [%u] hooked inet6_getname <%p> --> <%p>\n",
-        smp_processor_id(), inet6_getname, inet6_stream_ops_p->getname);
+            smp_processor_id(), inet6_getname, inet6_stream_ops_p->getname);
 
+    if (is_ro_addr((unsigned long)(&ipv6_specific_p->syn_recv_sock))) {
+            set_addr_rw((unsigned long)(&ipv6_specific_p->syn_recv_sock));
+            rw_enable = 1;
+    }
     ipv6_specific_p->syn_recv_sock = tcp_v6_syn_recv_sock_toa;
+    if (rw_enable == 1) {
+            set_addr_ro((unsigned long)(&ipv6_specific_p->syn_recv_sock));
+            rw_enable = 0;
+    }
     TOA_INFO("CPU [%u] hooked tcp_v6_syn_recv_sock <%p> --> <%p>\n",
-        smp_processor_id(), tcp_v6_syn_recv_sock_org_pt,
-        ipv6_specific_p->syn_recv_sock);
+            smp_processor_id(), tcp_v6_syn_recv_sock_org_pt,
+            ipv6_specific_p->syn_recv_sock);
 #endif
 
     return 0;
@@ -817,14 +829,12 @@ unhook_toa_functions(void)
     /* unhook inet_getname for ipv4 */
     inet_stream_ops_p = (struct proto_ops *)&inet_stream_ops;
     
-    if(is_ro_addr((unsigned long)(&inet_stream_ops.getname)))
-    {
+    if (is_ro_addr((unsigned long)(&inet_stream_ops.getname))) {
             set_addr_rw((unsigned long)(&inet_stream_ops.getname));
             rw_enable = 1;
     }
     inet_stream_ops_p->getname = inet_getname;
-    if(rw_enable == 1)
-    {
+    if (rw_enable == 1) {
             set_addr_ro((unsigned long)(&inet_stream_ops.getname));
             rw_enable = 0;
     }
@@ -832,15 +842,13 @@ unhook_toa_functions(void)
     
     /* unhook tcp_v4_syn_recv_sock for ipv4 */
     ipv4_specific_p = (struct inet_connection_sock_af_ops *)&ipv4_specific;
-    if(is_ro_addr((unsigned long)(&ipv4_specific.syn_recv_sock)))
-    {
+    if (is_ro_addr((unsigned long)(&ipv4_specific.syn_recv_sock))) {
             set_addr_rw((unsigned long)(&ipv4_specific.syn_recv_sock));
             rw_enable = 1;
     }
     set_addr_rw((unsigned long)(&ipv4_specific.syn_recv_sock));
     ipv4_specific_p->syn_recv_sock = tcp_v4_syn_recv_sock;
-    if(rw_enable == 1)
-    {
+    if (rw_enable == 1) {
             set_addr_ro((unsigned long)(&ipv4_specific.syn_recv_sock));
             rw_enable = 0;
     }
@@ -849,14 +857,28 @@ unhook_toa_functions(void)
 
 #ifdef TOA_IPV6_ENABLE
     if (inet6_stream_ops_p) {
-        inet6_stream_ops_p->getname = inet6_getname;
-        TOA_INFO("CPU [%u] unhooked inet6_getname\n",
-            smp_processor_id());
+            if (is_ro_addr((unsigned long)(&inet6_stream_ops_p->getname))) {
+                    set_addr_rw((unsigned long)(&inet6_stream_ops_p->getname));
+                    rw_enable = 1;
+            }
+            inet6_stream_ops_p->getname = inet6_getname;
+            if (rw_enable == 1) {
+                    set_addr_ro((unsigned long)(&inet6_stream_ops_p->getname));
+                    rw_enable = 0;
+            }
+            TOA_INFO("CPU [%u] unhooked inet6_getname\n", smp_processor_id());
     }
     if (ipv6_specific_p) {
-        ipv6_specific_p->syn_recv_sock = tcp_v6_syn_recv_sock_org_pt;
-        TOA_INFO("CPU [%u] unhooked tcp_v6_syn_recv_sock\n",
-            smp_processor_id());
+            if (is_ro_addr((unsigned long)(&ipv6_specific_p->syn_recv_sock))) {
+                    set_addr_rw((unsigned long)(&ipv6_specific_p->syn_recv_sock));
+                    rw_enable = 1;
+            }
+            ipv6_specific_p->syn_recv_sock = tcp_v6_syn_recv_sock_org_pt;
+            if (rw_enable == 1) {
+                    set_addr_ro((unsigned long)(&ipv6_specific_p->syn_recv_sock));
+                    rw_enable = 0;
+            }
+            TOA_INFO("CPU [%u] unhooked tcp_v6_syn_recv_sock\n", smp_processor_id());
     }
 #endif
 

From 329c78b2ec57135c3a32e47b37e85deca66cbac4 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Mon, 30 Dec 2019 14:18:16 +0800
Subject: [PATCH 53/62] use async multicast msg for route/route6/svc/dest
 setting

---
 src/ipv6/route6.c        | 11 +++++++++--
 src/ipvs/ip_vs_service.c |  9 ++++++++-
 src/route.c              | 19 +++++++++++--------
 3 files changed, 28 insertions(+), 11 deletions(-)

diff --git a/src/ipv6/route6.c b/src/ipv6/route6.c
index c44fdf5ca..27279f8ac 100644
--- a/src/ipv6/route6.c
+++ b/src/ipv6/route6.c
@@ -41,6 +41,13 @@ struct rt6_dustbin {
 static int g_rt6_recycle_time = RT6_RECYCLE_TIME_DEF;
 static RTE_DEFINE_PER_LCORE(struct rt6_dustbin, rt6_dbin);
 
+static int rt6_msg_seq(void)
+{
+    static uint32_t seq = 0;
+
+    return seq++;
+}
+
 static inline void rt6_zero_prefix_tail(struct rt6_prefix *rt6_p)
 {
     struct in6_addr addr6;
@@ -227,7 +234,7 @@ static int rt6_add_del(const struct dp_vs_route6_conf *cf)
     }
 
     /* for slaves */
-    msg = msg_make(MSG_TYPE_ROUTE6, 0, DPVS_MSG_MULTICAST, cid,
+    msg = msg_make(MSG_TYPE_ROUTE6, rt6_msg_seq(), DPVS_MSG_MULTICAST, cid,
             sizeof(struct dp_vs_route6_conf), cf);
     if (unlikely(msg == NULL)) {
         RTE_LOG(ERR, RT6, "%s: fail to add/del route on slaves -- %s\n",
@@ -235,7 +242,7 @@ static int rt6_add_del(const struct dp_vs_route6_conf *cf)
         return EDPVS_NOMEM;
     }
 
-    err = multicast_msg_send(msg, 0, NULL);
+    err = multicast_msg_send(msg, DPVS_MSG_F_ASYNC, NULL);
     if (err != EDPVS_OK)
         RTE_LOG(WARNING, RT6, "%s: multicast_msg_send failed -- %s\n",
                 __func__, dpvs_strerror(err));
diff --git a/src/ipvs/ip_vs_service.c b/src/ipvs/ip_vs_service.c
index fdffe90e8..773ff5e3c 100644
--- a/src/ipvs/ip_vs_service.c
+++ b/src/ipvs/ip_vs_service.c
@@ -904,6 +904,13 @@ static inline int set_opt_so2msg(sockoptid_t opt)
     return opt - SOCKOPT_SVC_BASE + MSG_TYPE_SVC_SET_BASE;
 }
 
+static int svc_msg_seq(void)
+{
+    static uint32_t seq = 0;
+
+    return seq++;
+}
+
 static int dp_vs_set_svc(sockoptid_t opt, const void *user, size_t len)
 {
     int ret;
@@ -925,7 +932,7 @@ static int dp_vs_set_svc(sockoptid_t opt, const void *user, size_t len)
     if (cid == rte_get_master_lcore()) {
         struct dpvs_msg *msg;
 
-        msg = msg_make(set_opt_so2msg(opt), 0, DPVS_MSG_MULTICAST, cid, len, user);
+        msg = msg_make(set_opt_so2msg(opt), svc_msg_seq(), DPVS_MSG_MULTICAST, cid, len, user);
         if (!msg)
             return EDPVS_NOMEM;
 
diff --git a/src/route.c b/src/route.c
index 9f55e6b1f..011de3ec9 100644
--- a/src/route.c
+++ b/src/route.c
@@ -51,6 +51,13 @@ static RTE_DEFINE_PER_LCORE(struct route_lcore, route_lcore);
 static RTE_DEFINE_PER_LCORE(rte_atomic32_t, num_routes);
 static RTE_DEFINE_PER_LCORE(rte_atomic32_t, num_out_routes);
 
+static int route_msg_seq(void)
+{
+    static uint32_t seq = 0;
+
+    return seq++;
+}
+
 static inline bool net_cmp(const struct netif_port *port, uint32_t dest,
                            uint8_t mask, const struct route_entry *route_node)
 {
@@ -370,20 +377,16 @@ static int route_add_del(bool add, struct in_addr* dest,
     cf.metric = metric;
 
     if (add)
-        msg = msg_make(MSG_TYPE_ROUTE_ADD, 0, DPVS_MSG_MULTICAST,
+        msg = msg_make(MSG_TYPE_ROUTE_ADD, route_msg_seq(), DPVS_MSG_MULTICAST,
                        cid, sizeof(struct dp_vs_route_conf), &cf);
     else
-        msg = msg_make(MSG_TYPE_ROUTE_DEL, 0, DPVS_MSG_MULTICAST,
+        msg = msg_make(MSG_TYPE_ROUTE_DEL, route_msg_seq(), DPVS_MSG_MULTICAST,
                        cid, sizeof(struct dp_vs_route_conf), &cf);
 
-    err = multicast_msg_send(msg, 0/*DPVS_MSG_F_ASYNC*/, NULL);
-    if (err != EDPVS_OK) {
-        /* ignore timeout for msg, or keepalived will cause a lot bug.
-         * Timeout error is ok because route can still be set,
-         * no mem is another possible err, but problem will not just be here */
+    err = multicast_msg_send(msg, DPVS_MSG_F_ASYNC, NULL);
+    if (err != EDPVS_OK)
         RTE_LOG(INFO, ROUTE, "[%s] fail to send multicast message, error code = %d\n",
                                                                       __func__, err);
-    }
     msg_destroy(&msg);
 
     return EDPVS_OK;

From 238f0016d7944c2896ab8b295fc1b08231348d62 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Wed, 27 Nov 2019 21:27:06 +0800
Subject: [PATCH 54/62] timer: remove useless debug info

---
 include/timer.h |  4 ----
 src/timer.c     | 16 ++++------------
 2 files changed, 4 insertions(+), 16 deletions(-)

diff --git a/include/timer.h b/include/timer.h
index 7102a48fc..e02691301 100644
--- a/include/timer.h
+++ b/include/timer.h
@@ -39,10 +39,6 @@ typedef uint32_t dpvs_tick_t;
 struct dpvs_timer {
     struct list_head    list;
 
-#ifdef CONFIG_TIMER_DEBUG
-    struct list_head    dummy;
-#endif
-
     dpvs_timer_cb_t     handler;
     void                *priv;
     bool                is_period;
diff --git a/src/timer.c b/src/timer.c
index 089649dcf..c87a50c0f 100644
--- a/src/timer.c
+++ b/src/timer.c
@@ -38,11 +38,6 @@
 #define DTIMER
 #define RTE_LOGTYPE_DTIMER      RTE_LOGTYPE_USER1
 
-#ifdef CONFIG_TIMER_DEBUG
-#define TIMER_DUMMY_DATA0       0x3659AC
-#define TIMER_DUMMY_DATA1       0x93C5A6
-#endif
-
 /*
  * the use case of dpvs timer is huge number of connections has concentrated
  * timeouts like 120s/60s, while other timeout values are not that much.
@@ -162,8 +157,6 @@ static int __dpvs_timer_sched(struct timer_scheduler *sched,
         RTE_LOG(WARNING, DTIMER, "[%02d]: timer %p handler possibly changed maliciously: %p ->%p\n%s",
                 rte_lcore_id(), timer, timer->handler, handler, trace);
     }
-    timer->dummy.next = (void *)TIMER_DUMMY_DATA0;
-    timer->dummy.prev = (void *)TIMER_DUMMY_DATA1;
 #endif
 
     assert(delay && handler);
@@ -235,13 +228,12 @@ static void timer_expire(struct timer_scheduler *sched, struct dpvs_timer *timer
         list_del(&timer->list);
 
 #ifdef CONFIG_TIMER_DEBUG
-    if (unlikely(timer->dummy.next != (void *)TIMER_DUMMY_DATA0 ||
-                timer->dummy.prev != (void *)TIMER_DUMMY_DATA1)) {
+    if (unlikely(!handler || (uint64_t)handler > 0x7ffffffffULL)) {
         char trace[8192];
         dpvs_backtrace(trace, sizeof(trace));
-        RTE_LOG(WARNING, DTIMER, "[%02d]: timer(%p) dummy info invalid -- dummy.next:%p,"
-                "dummy.prev:%p, handler:%p, priv:%p, trace:\n%s", rte_lcore_id(), timer,
-                timer->dummy.next, timer->dummy.prev, timer->handler, timer->priv, trace);
+        RTE_LOG(WARNING, DTIMER, "[%02d]: invalid timer(%p) handler "
+                "-- handler:%p, priv:%p, trace:\n%s", rte_lcore_id(),
+                timer, timer->handler, timer->priv, trace);
     }
 #endif
 

From c6aa4ad0f4b5fcd5afd8ddde591c032504cb45d5 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Mon, 30 Dec 2019 15:40:02 +0800
Subject: [PATCH 55/62] neigh: use mempool to allocate memory

---
 conf/dpvs.conf.items              |   2 +-
 conf/dpvs.conf.sample             |   2 +-
 conf/dpvs.conf.single-bond.sample |   2 +-
 conf/dpvs.conf.single-nic.sample  |   2 +-
 src/neigh.c                       | 221 +++++++++++++++++++-----------
 5 files changed, 144 insertions(+), 85 deletions(-)

diff --git a/conf/dpvs.conf.items b/conf/dpvs.conf.items
index c2871009b..45820df4c 100644
--- a/conf/dpvs.conf.items
+++ b/conf/dpvs.conf.items
@@ -138,7 +138,7 @@ timer_defs {
 ! dpvs neighbor config
 neigh_defs {
     <init> unres_queue_length  128      <128, 16-8192>
-    <init> timeout             60       <60, 1-3600>
+    timeout                    60       <60, 1-3600>
 }
 
 ! dpvs ipv4 config
diff --git a/conf/dpvs.conf.sample b/conf/dpvs.conf.sample
index 88940f51a..2c518097f 100644
--- a/conf/dpvs.conf.sample
+++ b/conf/dpvs.conf.sample
@@ -223,7 +223,7 @@ timer_defs {
 ! dpvs neighbor config
 neigh_defs {
     <init> unres_queue_length  128
-    <init> timeout             60
+    timeout                    60
 }
 
 ! dpvs ipv4 config
diff --git a/conf/dpvs.conf.single-bond.sample b/conf/dpvs.conf.single-bond.sample
index 2bde8bac3..470cd9599 100644
--- a/conf/dpvs.conf.single-bond.sample
+++ b/conf/dpvs.conf.single-bond.sample
@@ -175,7 +175,7 @@ timer_defs {
 ! dpvs neighbor config
 neigh_defs {
     <init> unres_queue_length  128
-    <init> timeout             60
+    timeout                    60
 }
 
 ! dpvs ipv4 config
diff --git a/conf/dpvs.conf.single-nic.sample b/conf/dpvs.conf.single-nic.sample
index 45c2d900f..c169eef8d 100644
--- a/conf/dpvs.conf.single-nic.sample
+++ b/conf/dpvs.conf.single-nic.sample
@@ -148,7 +148,7 @@ timer_defs {
 ! dpvs neighbor config
 neigh_defs {
     <init> unres_queue_length  128
-    <init> timeout             60
+    timeout                    60
 }
 
 ! dpvs ipv4 config
diff --git a/src/neigh.c b/src/neigh.c
index b8ea95036..928a8da72 100644
--- a/src/neigh.c
+++ b/src/neigh.c
@@ -32,6 +32,7 @@
 #include "ndisc.h"
 #include "conf/neigh.h"
 #include "scheduler.h"
+#include "mempool.h"
 
 #define NEIGH_ENTRY_BUFF_SIZE_DEF 128
 #define NEIGH_ENTRY_BUFF_SIZE_MIN 16
@@ -41,7 +42,8 @@
 #define DPVS_NEIGH_TIMEOUT_MIN 1
 #define DPVS_NEIGH_TIMEOUT_MAX 3600
 
-static int neigh_nums[DPVS_MAX_LCORE] = {0};
+static int neigh_nums[DPVS_MAX_LCORE] = { 0 };
+static struct dpvs_mempool *neigh_mempool;
 
 struct neighbour_mbuf_entry {
     struct rte_mbuf   *m;
@@ -129,16 +131,16 @@ void neigh_keyword_value_init(void)
     if (dpvs_state_get() == DPVS_STATE_INIT) {
         /* KW_TYPE_INIT keyword */
         arp_unres_qlen = NEIGH_ENTRY_BUFF_SIZE_DEF;
-        nud_timeouts[DPVS_NUD_S_REACHABLE] = DPVS_NEIGH_TIMEOUT_DEF;
     }
     /* KW_TYPE_NORMAL keyword */
+    nud_timeouts[DPVS_NUD_S_REACHABLE] = DPVS_NEIGH_TIMEOUT_DEF;
 }
 
 void install_neighbor_keywords(void)
 {
     install_keyword_root("neigh_defs", NULL);
     install_keyword("unres_queue_length", unres_qlen_handler, KW_TYPE_INIT);
-    install_keyword("timeout", timeout_handler, KW_TYPE_INIT);
+    install_keyword("timeout", timeout_handler, KW_TYPE_NORMAL);
 }
 
 static lcoreid_t master_cid = 0;
@@ -186,10 +188,42 @@ static void dump_arp_hdr(const char *msg, const struct arp_hdr *ah, portid_t por
 }
 #endif
 
+#ifdef CONFIG_DPVS_NEIGH_DEBUG
+static int dump_neigh_entry(const struct neighbour_entry *ne, char *buf, size_t buflen)
+{
+    size_t slen = 0;
+    char fmtbuf[256];
+
+    if (!ne || !buf || buflen < 1)
+        return EDPVS_INVAL;
+
+    buf[0] = '\0';
+    snprintf(&buf[slen], buflen - slen, "ip=%s",
+            inet_ntop(ne->af, &ne->ip_addr, fmtbuf, sizeof(fmtbuf)));
+    if ((slen = strlen(buf)) + 1 >= buflen)
+        return slen;
+
+    snprintf(&buf[slen], buflen - slen, ", mac=%s",
+            eth_addr_itoa(&ne->eth_addr, fmtbuf, sizeof(fmtbuf)));
+    if ((slen = strlen(buf)) + 1 >= buflen)
+        return slen;
+
+    snprintf(&buf[slen], buflen - slen, ", %s", ne->port->name);
+    if ((slen = strlen(buf)) + 1 >= buflen)
+        return slen;
+
+    snprintf(&buf[slen], buflen - slen, ", que_num=%d, state=%d, ts=%d, flag=0x%x",
+            ne->que_num, ne->state, ne->ts, ne->flag);
+
+    return strlen(buf);
+}
+#endif
+
 static inline int neigh_hash(struct neighbour_entry *neighbour, unsigned int hashkey)
 {
     lcoreid_t cid = rte_lcore_id();
-    if(!(neighbour->flag & NEIGHBOUR_HASHED)){
+
+    if (!(neighbour->flag & NEIGHBOUR_HASHED)) {
         list_add(&neighbour->neigh_list, &neigh_table[cid][hashkey]);
         neighbour->flag |= NEIGHBOUR_HASHED;
         return EDPVS_OK;
@@ -200,17 +234,14 @@ static inline int neigh_hash(struct neighbour_entry *neighbour, unsigned int has
 
 static inline int neigh_unhash(struct neighbour_entry *neighbour)
 {
-    int err;
-    if((neighbour->flag & NEIGHBOUR_HASHED)){
+    if (neighbour->flag & NEIGHBOUR_HASHED) {
         list_del(&neighbour->neigh_list);
         neighbour->flag &= ~NEIGHBOUR_HASHED;
-        err = EDPVS_OK;
-    } else {
-        err = EDPVS_NOTEXIST;
+        return EDPVS_OK;
     }
-    if (unlikely(err == EDPVS_NOTEXIST))
-        RTE_LOG(DEBUG, NEIGHBOUR, "%s: neighbour entry not hashed.\n", __func__);
-    return err;
+
+    RTE_LOG(DEBUG, NEIGHBOUR, "%s: neighbour entry not hashed.\n", __func__);
+    return EDPVS_NOTEXIST;
 }
 
 static inline bool neigh_key_cmp(int af, const struct neighbour_entry *neighbour,
@@ -226,19 +257,28 @@ static int neigh_entry_expire(struct neighbour_entry *neighbour)
 {
     struct neighbour_mbuf_entry *mbuf, *mbuf_next;
     lcoreid_t cid = rte_lcore_id();
+    assert(cid != master_cid);
 
     dpvs_timer_cancel_nolock(&neighbour->timer, false);
     neigh_unhash(neighbour);
-        //release pkts saved in neighbour entry
-    list_for_each_entry_safe(mbuf,mbuf_next,
-              &neighbour->queue_list,neigh_mbuf_list){
+
+#ifdef CONFIG_DPVS_NEIGH_DEBUG
+    {
+        char buf[512];
+        dump_neigh_entry(neighbour, buf, sizeof(buf));
+        RTE_LOG(INFO, NEIGHBOUR, "%s:[%02d] del neigh entry: %s\n", __func__, cid, buf);
+    }
+#endif
+
+    /* release pkts saved in neighbour entry */
+    list_for_each_entry_safe(mbuf, mbuf_next,
+              &neighbour->queue_list, neigh_mbuf_list) {
         list_del(&mbuf->neigh_mbuf_list);
         rte_pktmbuf_free(mbuf->m);
-        rte_free(mbuf);
+        dpvs_mempool_put(neigh_mempool, mbuf);
     }
 
-    rte_free(neighbour);
-    assert(cid != master_cid);
+    dpvs_mempool_put(neigh_mempool, neighbour);
     neigh_nums[cid]--;
 
     return DTIMER_STOP;
@@ -248,7 +288,7 @@ void neigh_entry_state_trans(struct neighbour_entry *neighbour, int idx)
 {
     struct timeval timeout;
 
-    /*DPVS_NUD_S_KEEP is not a real state, just use it to keep original state*/
+    /* DPVS_NUD_S_KEEP is not a real state, just use it to keep original state */
     if ((nud_states[idx].next_state[neighbour->state] != DPVS_NUD_S_KEEP)
         && !(neighbour->flag & NEIGHBOUR_STATIC)) {
         int old_state = neighbour->state;
@@ -259,17 +299,24 @@ void neigh_entry_state_trans(struct neighbour_entry *neighbour, int idx)
             if (likely(clock_gettime(CLOCK_REALTIME_COARSE, &now)) == 0)
                 /* frequent timer updates hurt performance,
                  * do not update timer unless half timeout passed */
-                if ((now.tv_sec - neighbour->ts)*2 < nud_timeouts[old_state])
+                if ((now.tv_sec - neighbour->ts) * 2 < nud_timeouts[old_state])
                     return;
         }
 
         timeout.tv_sec = nud_timeouts[neighbour->state];
         timeout.tv_usec = 0;
+        dpvs_time_rand_delay(&timeout, 200000); /* delay 200ms randomly to avoid timer performance problem */
         dpvs_timer_update_nolock(&neighbour->timer, &timeout, false);
         neighbour->ts = now.tv_sec;
 #ifdef CONFIG_DPVS_NEIGH_DEBUG
-        RTE_LOG(DEBUG, NEIGHBOUR, "%s trans state to %s.\n",
-               nud_state_name(old_state), nud_state_name(neighbour->state));
+        if (neighbour->state != old_state)
+        {
+            char buf[512];
+            dump_neigh_entry(neighbour, buf, sizeof(buf));
+            RTE_LOG(INFO, NEIGHBOUR, "[%02d] neighbor (%s) trans state: %s -> %s, idx:%d.\n",
+                    rte_lcore_id(), buf, nud_state_name(old_state),
+                    nud_state_name(neighbour->state), idx);
+        }
 #endif
     }
 }
@@ -316,9 +363,8 @@ struct neighbour_entry *neigh_add_table(int af, const union inet_addr *ipaddr,
     struct timeval delay;
     lcoreid_t cid = rte_lcore_id();
 
-    new_neighbour = rte_zmalloc("new_neighbour_entry",
-                    sizeof(struct neighbour_entry), RTE_CACHE_LINE_SIZE);
-    if(new_neighbour == NULL)
+    new_neighbour = dpvs_mempool_get(neigh_mempool, sizeof(struct neighbour_entry));
+    if (unlikely(new_neighbour == NULL))
         return NULL;
 
     rte_memcpy(&new_neighbour->ip_addr, ipaddr,
@@ -326,11 +372,10 @@ struct neighbour_entry *neigh_add_table(int af, const union inet_addr *ipaddr,
     new_neighbour->flag = flag;
     new_neighbour->af   = af;
 
-    if(eth_addr){
+    if (eth_addr) {
         rte_memcpy(&new_neighbour->eth_addr, eth_addr, 6);
         new_neighbour->state = DPVS_NUD_S_REACHABLE;
-    }
-    else{
+    } else {
         new_neighbour->state = DPVS_NUD_S_NONE;
     }
 
@@ -342,6 +387,7 @@ struct neighbour_entry *neigh_add_table(int af, const union inet_addr *ipaddr,
     INIT_LIST_HEAD(&new_neighbour->queue_list);
 
     if (!(new_neighbour->flag & NEIGHBOUR_STATIC)) {
+        dpvs_time_rand_delay(&delay, 200000); /* delay 200ms randomly to avoid timer performance problem */
         dpvs_timer_sched(&new_neighbour->timer, &delay,
                 neighbour_timer_event, new_neighbour, false);
     }
@@ -349,6 +395,14 @@ struct neighbour_entry *neigh_add_table(int af, const union inet_addr *ipaddr,
     neigh_hash(new_neighbour, hashkey);
     neigh_nums[cid]++;
 
+#ifdef CONFIG_DPVS_NEIGH_DEBUG
+    {
+        char buf[512];
+        dump_neigh_entry(new_neighbour, buf, sizeof(buf));
+        RTE_LOG(INFO, NEIGHBOUR, "[%02d] add neigh entry: %s\n", cid, buf);
+    }
+#endif
+
     return new_neighbour;
 }
 
@@ -383,13 +437,13 @@ void neigh_send_mbuf_cach(struct neighbour_entry *neighbour)
     struct rte_mbuf *m;
 
     list_for_each_entry_safe(mbuf, mbuf_next,
-                             &neighbour->queue_list,neigh_mbuf_list){
+                             &neighbour->queue_list, neigh_mbuf_list) {
         list_del(&mbuf->neigh_mbuf_list);
         m = mbuf->m;
         neigh_fill_mac(neighbour, m, NULL, neighbour->port);
         netif_xmit(m, neighbour->port);
         neighbour->que_num--;
-        rte_free(mbuf);
+        dpvs_mempool_put(neigh_mempool, mbuf);
     }
 }
 
@@ -398,6 +452,7 @@ void neigh_confirm(int af, union inet_addr *nexthop, struct netif_port *port)
     struct neighbour_entry *neighbour;
     unsigned int hashkey;
     lcoreid_t cid = rte_lcore_id();
+
     /*find nexhop/neighbour to confirm, no matter whether it is the route in*/
     hashkey = neigh_hashkey(af, nexthop, port);
     list_for_each_entry(neighbour, &neigh_table[cid][hashkey], neigh_list) {
@@ -417,27 +472,23 @@ static void neigh_state_confirm(struct neighbour_entry *neighbour)
     if (neighbour->af == AF_INET) {
         daddr.in.s_addr = neighbour->ip_addr.in.s_addr;
         inet_addr_select(AF_INET, neighbour->port, &daddr, 0, &saddr);
-        if (!saddr.in.s_addr) {
-            RTE_LOG(ERR, NEIGHBOUR, "[%s]no source ip\n", __func__);
-        }
+        if (!saddr.in.s_addr)
+            RTE_LOG(ERR, NEIGHBOUR, "%s: no source ip\n", __func__);
 
         if (neigh_send_arp(neighbour->port, saddr.in.s_addr,
-                           daddr.in.s_addr) != EDPVS_OK) {
-            RTE_LOG(ERR, NEIGHBOUR, "[%s] send arp failed\n", __func__);
-        }
+                           daddr.in.s_addr) != EDPVS_OK)
+            RTE_LOG(ERR, NEIGHBOUR, "%s: send arp failed\n", __func__);
     } else if (neighbour->af == AF_INET6) {
-        /*to be continue*/
         ipv6_addr_copy(&daddr.in6, &neighbour->ip_addr.in6);
         inet_addr_select(AF_INET6, neighbour->port, &daddr, 0, &saddr);
 
         if (ipv6_addr_any(&saddr.in6))
-            RTE_LOG(ERR, NEIGHBOUR, "[%s]no source ip\n", __func__);
+            RTE_LOG(ERR, NEIGHBOUR, "%s: no source ip\n", __func__);
 
         ndisc_solicit(neighbour, &saddr.in6);
     }
 }
 
-/*arp*/
 int neigh_resolve_input(struct rte_mbuf *m, struct netif_port *port)
 {
     struct arp_hdr *arp = rte_pktmbuf_mtod(m, struct arp_hdr *);
@@ -460,7 +511,7 @@ int neigh_resolve_input(struct rte_mbuf *m, struct netif_port *port)
         rte_memcpy(&eth->s_addr, &port->addr, 6);
         arp->arp_op = rte_cpu_to_be_16(ARP_OP_REPLY);
 
-        ether_addr_copy(&arp->arp_data.arp_sha, &arp->arp_data.arp_tha);//from to
+        ether_addr_copy(&arp->arp_data.arp_sha, &arp->arp_data.arp_tha);
         ether_addr_copy(&eth->s_addr, &arp->arp_data.arp_sha);
 
         ipaddr = arp->arp_data.arp_sip;
@@ -472,24 +523,23 @@ int neigh_resolve_input(struct rte_mbuf *m, struct netif_port *port)
         netif_xmit(m, port);
         return EDPVS_OK;
 
-    } else if(arp->arp_op == htons(ARP_OP_REPLY)) {
+    } else if (arp->arp_op == htons(ARP_OP_REPLY)) {
         ipaddr = arp->arp_data.arp_sip;
         hashkey = neigh_hashkey(AF_INET, (union inet_addr *)&ipaddr, port);
         neighbour = neigh_lookup_entry(AF_INET, (union inet_addr *)&ipaddr,
                                        port, hashkey);
         if (neighbour && !(neighbour->flag & NEIGHBOUR_STATIC)) {
             neigh_edit(neighbour, &arp->arp_data.arp_sha);
-            neigh_entry_state_trans(neighbour, 1);
         } else {
             neighbour = neigh_add_table(AF_INET, (union inet_addr *)&ipaddr,
                                     &arp->arp_data.arp_sha, port, hashkey, 0);
-            if(!neighbour){
-                RTE_LOG(ERR, NEIGHBOUR, "[%s] add neighbour wrong\n", __func__);
+            if (!neighbour) {
+                RTE_LOG(ERR, NEIGHBOUR, "%s: add neighbour wrong\n", __func__);
                 rte_pktmbuf_free(m);
                 return EDPVS_NOMEM;
             }
-            neigh_entry_state_trans(neighbour, 1);
         }
+        neigh_entry_state_trans(neighbour, 1);
         neigh_send_mbuf_cach(neighbour);
         return EDPVS_KNICONTINUE;
     } else {
@@ -507,7 +557,7 @@ static int neigh_send_arp(struct netif_port *port, uint32_t src_ip, uint32_t dst
     uint32_t addr;
 
     m = rte_pktmbuf_alloc(port->mbuf_pool);
-    if(unlikely(m==NULL)){
+    if (unlikely(m == NULL)) {
         return EDPVS_NOMEM;
     }
     m->userdata = NULL;
@@ -515,7 +565,7 @@ static int neigh_send_arp(struct netif_port *port, uint32_t src_ip, uint32_t dst
     eth = rte_pktmbuf_mtod(m, struct ether_hdr *);
     arp = (struct arp_hdr *)&eth[1];
 
-    memset(&eth->d_addr,0xFF,6);
+    memset(&eth->d_addr, 0xFF, 6);
     ether_addr_copy(&port->addr, &eth->s_addr);
     eth->ether_type = htons(ETHER_TYPE_ARP);
 
@@ -615,9 +665,8 @@ int neigh_output(int af, union inet_addr *nexhop,
                 return EDPVS_DROP;
             }
 
-            m_buf = rte_zmalloc("neigh_new_mbuf",
-                                sizeof(struct neighbour_mbuf_entry), RTE_CACHE_LINE_SIZE);
-            if (!m_buf) {
+            m_buf = dpvs_mempool_get(neigh_mempool, sizeof(struct neighbour_mbuf_entry));
+            if (unlikely(!m_buf)) {
                 rte_pktmbuf_free(m);
                 return EDPVS_DROP;
             }
@@ -654,14 +703,13 @@ int neigh_output(int af, union inet_addr *nexhop,
     /* create the neighbour entry if not found */
     neighbour = neigh_add_table(af, nexhop, NULL, port, hashkey, 0);
     if (!neighbour) {
-        RTE_LOG(ERR, NEIGHBOUR, "[%s] add neighbour wrong\n", __func__);
+        RTE_LOG(ERR, NEIGHBOUR, "%s: add neighbour wrong\n", __func__);
         rte_pktmbuf_free(m);
         return EDPVS_NOMEM;
     }
 
-    m_buf = rte_zmalloc("neigh_new_mbuf",
-                        sizeof(struct neighbour_mbuf_entry), RTE_CACHE_LINE_SIZE);
-    if (!m_buf) {
+    m_buf = dpvs_mempool_get(neigh_mempool, sizeof(struct neighbour_mbuf_entry));
+    if (unlikely(!m_buf)) {
         rte_pktmbuf_free(m);
         return EDPVS_DROP;
     }
@@ -713,8 +761,9 @@ static struct raw_neigh* neigh_ring_clone_entry(const struct neighbour_entry* ne
                                                 bool add)
 {
     struct raw_neigh* mac_param;
-    mac_param = rte_zmalloc("mac_entry", sizeof(struct raw_neigh), RTE_CACHE_LINE_SIZE);
-    if (mac_param == NULL)
+
+    mac_param = dpvs_mempool_get(neigh_mempool, sizeof(struct raw_neigh));
+    if (unlikely(mac_param == NULL))
         return NULL;
     mac_param->af = neighbour->af;
     rte_memcpy(&mac_param->ip_addr, &neighbour->ip_addr, sizeof(union inet_addr));
@@ -723,6 +772,7 @@ static struct raw_neigh* neigh_ring_clone_entry(const struct neighbour_entry* ne
     mac_param->add = add;
     /*just copy*/
     rte_memcpy(&mac_param->eth_addr, &neighbour->eth_addr, 6);
+
     return mac_param;
 }
 
@@ -731,16 +781,18 @@ static struct raw_neigh* neigh_ring_clone_param(const struct dp_vs_neigh_conf *p
 {
     struct netif_port *port;
     struct raw_neigh* mac_param;
-    port = netif_port_get_by_name(param->ifname);
-    mac_param = rte_zmalloc("mac_entry", sizeof(struct raw_neigh), RTE_CACHE_LINE_SIZE);
-    if (mac_param == NULL)
+
+    mac_param = dpvs_mempool_get(neigh_mempool, sizeof(struct raw_neigh));
+    if (unlikely(mac_param == NULL))
         return NULL;
+    port = netif_port_get_by_name(param->ifname);
     mac_param->af = param->af;
     rte_memcpy(&mac_param->ip_addr, &param->ip_addr, sizeof(union inet_addr));
     mac_param->flag = param->flag | NEIGHBOUR_STATIC;
     mac_param->port = port;
     mac_param->add = add;
     rte_memcpy(&mac_param->eth_addr, &param->eth_addr, 6);
+
     return mac_param;
 }
 
@@ -756,6 +808,7 @@ static void neigh_process_ring(void *arg)
     struct neighbour_entry *neigh;
     struct raw_neigh *param;
     lcoreid_t cid = rte_lcore_id();
+
     nb_rb = rte_ring_dequeue_burst(neigh_ring[cid], (void **)params,
                                    NETIF_MAX_PKT_BURST, NULL);
     if (nb_rb > 0) {
@@ -768,39 +821,43 @@ static void neigh_process_ring(void *arg)
            if (param->add) {
                if (neigh) {
                    neigh_edit(neigh, &param->eth_addr);
-                   if (!(param->flag & NEIGHBOUR_STATIC))
-                       neigh_entry_state_trans(neigh, 1);
-               }
-               else {
+               } else {
                    neigh = neigh_add_table(param->af, &param->ip_addr,
                                            &param->eth_addr, param->port,
                                            hash, param->flag);
-                   if (!(param->flag & NEIGHBOUR_STATIC))
-                       neigh_entry_state_trans(neigh, 1);
+                   if (unlikely(!neigh))
+                       goto cont;
                }
-
+               if (!(param->flag & NEIGHBOUR_STATIC))
+                   neigh_entry_state_trans(neigh, 1);
                neigh_send_mbuf_cach(neigh);
-
            } else {
                if (neigh) {
+                   struct neighbour_mbuf_entry *mbuf, *mbuf_next;
                    if (!(neigh->flag & NEIGHBOUR_STATIC))
                        dpvs_timer_cancel(&neigh->timer, false);
                    neigh_unhash(neigh);
-
-                   struct neighbour_mbuf_entry *mbuf, *mbuf_next;
+#ifdef CONFIG_DPVS_NEIGH_DEBUG
+                   {
+                       char buf[512];
+                       dump_neigh_entry(neigh, buf, sizeof(buf));
+                       RTE_LOG(INFO, NEIGHBOUR, "%s:[%02d] del neigh entry: %s\n", __func__, cid, buf);
+                   }
+#endif
                    list_for_each_entry_safe(mbuf, mbuf_next,
                                      &neigh->queue_list, neigh_mbuf_list) {
                        list_del(&mbuf->neigh_mbuf_list);
                        rte_pktmbuf_free(mbuf->m);
-                       rte_free(mbuf);
+                       dpvs_mempool_put(neigh_mempool, mbuf);
                    }
-                   rte_free(neigh);
+                   dpvs_mempool_put(neigh_mempool, neigh);
                    neigh_nums[cid]--;
-               }
-               else
+               } else {
                    RTE_LOG(WARNING, NEIGHBOUR, "%s: not exist\n", __func__);
+               }
            }
-           rte_free(param);
+cont:
+           dpvs_mempool_put(neigh_mempool, param);
        }
     }
 }
@@ -838,7 +895,6 @@ static void neigh_fill_array(struct netif_port *dev, lcoreid_t cid,
                         RTE_LOG(WARNING, NEIGHBOUR, "%s: neigh num not match\n", __func__);
                         break;
                     }
-
                     neigh_fill_param(&array->addrs[off++], entry, cid);
                     array->neigh_nums = off;
                 }
@@ -851,7 +907,6 @@ static void neigh_fill_array(struct netif_port *dev, lcoreid_t cid,
                     RTE_LOG(WARNING, NEIGHBOUR, "%s: neigh num not match\n", __func__);
                     break;
                 }
-
                 neigh_fill_param(&array->addrs[off++], entry, cid);
                 array->neigh_nums = off;
             }
@@ -975,7 +1030,7 @@ int neigh_sync_core(const void *param, bool add_del, enum param_kind kind)
                 RTE_LOG(WARNING, NEIGHBOUR, "%s: neigh ring quota exceeded\n",
                 __func__);
             } else if (ret < 0) {
-                rte_free(mac_param);
+                dpvs_mempool_put(neigh_mempool, mac_param);
                 RTE_LOG(WARNING, NEIGHBOUR, "%s: neigh ring enqueue failed\n",
                 __func__);
                 return EDPVS_DPDKAPIFAIL;
@@ -1056,7 +1111,6 @@ static int arp_init(void)
         }
     }
 
-
     master_cid = rte_lcore_id();
 
     arp_pkt_type.type = rte_cpu_to_be_16(ETHER_TYPE_ARP);
@@ -1067,7 +1121,6 @@ static int arp_init(void)
 
     neigh_ring_init();
 
-    /*get static arp entry from master*/
     snprintf(neigh_jobs[0].name, sizeof(neigh_jobs[0].name) - 1, "%s", "neigh_sync");
     neigh_jobs[0].func = neigh_process_ring;
     neigh_jobs[0].data = NULL;
@@ -1112,13 +1165,19 @@ static void unregister_stats_cb(void)
 
 int neigh_init(void)
 {
-    if(EDPVS_NOMEM == arp_init()){
+    /* mempool for "neighbour_entry"(128 bytes), "raw_neigh"(64 byte) and
+     * "neighbour_mbuf_entry"(64 bytes), mempool use 4MB memory in total,
+     * and can provide memory for up to 8K neighbour entries. */
+    neigh_mempool = dpvs_mempool_create("neigh_mempool", 32, 256, 1024);
+    if (!neigh_mempool) {
+        RTE_LOG(ERR, NEIGHBOUR, "%s: fail to create mempool for neigh entry -- %s",
+                __func__, rte_strerror(rte_errno));
         return EDPVS_NOMEM;
     }
 
     register_stats_cb();
 
-    return EDPVS_OK;
+    return arp_init();
 }
 
 int neigh_term(void)

From d600b82c78963c3fb8985bb0d1f5e156098b4dd4 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Tue, 31 Dec 2019 20:32:05 +0800
Subject: [PATCH 56/62] mempool: ajust log, obj_num type and msg pool size

---
 include/mempool.h |  6 +++---
 src/config.mk     |  1 +
 src/ctrl.c        |  5 +++--
 src/mempool.c     | 18 ++++++++++++------
 4 files changed, 19 insertions(+), 11 deletions(-)

diff --git a/include/mempool.h b/include/mempool.h
index b9da10152..283eabdaf 100644
--- a/include/mempool.h
+++ b/include/mempool.h
@@ -25,7 +25,7 @@
 #define MP_OBJ_COOKIE_MARK      0xA55AC33C
 #define MP_SIZE_MIN             16
 #define MP_OBJ_SIZE_MIN         32
-#define MP_OBJ_SIZE_MAX         65536   /* 64KB */
+#define MP_OBJ_SIZE_MAX         1048576 /* 1MB */
 
 #define RTE_LOGTYPE_DPVS_MPOOL     RTE_LOGTYPE_USER1
 
@@ -43,8 +43,8 @@ struct dpvs_mp_obj_cookie {
 struct dpvs_mp_elem {
     char name[MP_NAMSIZ];
     uint32_t obj_size;
-    uint16_t obj_num;
-    uint16_t cache_size;
+    uint32_t obj_num;
+    uint32_t cache_size;
     struct rte_mempool *pool;
 };
 
diff --git a/src/config.mk b/src/config.mk
index cf1a668a9..26764d98e 100644
--- a/src/config.mk
+++ b/src/config.mk
@@ -43,6 +43,7 @@ CFLAGS += -D DPVS_MAX_LCORE=64
 #CFLAGS += -D CONFIG_DPVS_IPSET_DEBUG
 #CFLAGS += -D CONFIG_NDISC_DEBUG
 #CFLAGS += -D CONFIG_MSG_DEBUG
+#CFLAGS += -D CONFIG_DPVS_MP_DEBUG
 
 GCC_MAJOR = $(shell echo __GNUC__ | $(CC) -E -x c - | tail -n 1)
 GCC_MINOR = $(shell echo __GNUC_MINOR__ | $(CC) -E -x c - | tail -n 1)
diff --git a/src/ctrl.c b/src/ctrl.c
index f80c18a78..d10601c75 100644
--- a/src/ctrl.c
+++ b/src/ctrl.c
@@ -429,6 +429,7 @@ int msg_destroy(struct dpvs_msg **pmsg)
     }
 
     if (msg->reply.data) {
+        assert(msg->reply.len != 0);
         msg_reply_free(msg->reply.data);
         msg->reply.len = 0;
     }
@@ -1061,8 +1062,8 @@ static inline int msg_init(void)
         return EDPVS_NOTSUPP;
     }
 
-    /* msg_pool uses about 10MB memory */
-    msg_pool = dpvs_mempool_create("mp_msg", 32, 65536, 1024);
+    /* msg_pool uses about 26MB memory */
+    msg_pool = dpvs_mempool_create("mp_msg", 32, 131072, 2048);
     if (!msg_pool)
         return EDPVS_NOMEM;
 
diff --git a/src/mempool.c b/src/mempool.c
index 173bd7a4c..4cdc9898d 100644
--- a/src/mempool.c
+++ b/src/mempool.c
@@ -38,7 +38,7 @@ static inline int log2_lower(int num)
     return lg;
 }
 
-static int mp_elem_create(char *name_pref, struct dpvs_mp_elem *mp_elt, uint32_t obj_sz, uint16_t obj_num)
+static int mp_elem_create(char *name_pref, struct dpvs_mp_elem *mp_elt, uint32_t obj_sz, uint32_t obj_num)
 {
     unsigned cache_size;
     struct rte_mempool *pool;
@@ -54,7 +54,7 @@ static int mp_elem_create(char *name_pref, struct dpvs_mp_elem *mp_elt, uint32_t
 
     snprintf(name, sizeof(name), "%s_s%d_n%d", name_pref, obj_sz, obj_num);
     pool = rte_mempool_create(name, obj_num, obj_sz, cache_size, 0, NULL, NULL,
-            NULL, NULL, rte_socket_id(), 0);
+            NULL, NULL, SOCKET_ID_ANY, 0);
     if (unlikely(!pool))
         return EDPVS_NOMEM;
 
@@ -82,7 +82,7 @@ struct dpvs_mempool *dpvs_mempool_create(char *name,
 {
     int i, idx_start, idx_end, arr_size;
     uint32_t obj_size, pool_mem;
-    uint16_t obj_num;
+    uint32_t obj_num;
     struct dpvs_mempool *mp;
 
     if (rte_lcore_id() != rte_get_master_lcore()) {
@@ -134,7 +134,7 @@ struct dpvs_mempool *dpvs_mempool_create(char *name,
             return NULL;
         }
         obj_size *= 2;
-        RTE_LOG(DEBUG, DPVS_MPOOL, "elem mempool created: %s.\n", mp->pool_array[i].name);
+        RTE_LOG(INFO, DPVS_MPOOL, "elem mempool created: %s.\n", mp->pool_array[i].name);
     }
 
     RTE_LOG(INFO, DPVS_MPOOL, "%s: create mempool %s: obj_size %d->%d, arr_size %d, pool_mem %dKB\n",
@@ -158,7 +158,7 @@ void dpvs_mempool_destroy(struct dpvs_mempool *mp)
             __func__, mp->name, mp->obj_size_min, mp->obj_size_max, mp->pool_arr_size, mp->pool_mem/1024);
 
     for (i = 0; i < mp->pool_arr_size; i++) {
-        RTE_LOG(DEBUG, DPVS_MPOOL, "elem mempool destroyed: %s.\n", mp->pool_array[i].name);
+        RTE_LOG(INFO, DPVS_MPOOL, "elem mempool destroyed: %s.\n", mp->pool_array[i].name);
         mp_elem_destroy(&mp->pool_array[i]);
     }
 
@@ -199,8 +199,10 @@ void *dpvs_mempool_get(struct dpvs_mempool *mp, int size)
 
     arr_idx = get_pool_array_index(mp, size);
     if (arr_idx < 0) {
+#ifdef CONFIG_DPVS_MP_DEBUG
         RTE_LOG(INFO, DPVS_MPOOL, "%s: %s allocate %d memory from heap!\n",
                 __func__, mp->name, size);
+#endif
         goto alloc_from_heap;
     }
 
@@ -210,8 +212,10 @@ void *dpvs_mempool_get(struct dpvs_mempool *mp, int size)
     }
 
     if (rte_mempool_get(mp->pool_array[arr_idx].pool, &ptr) < 0) {
+#ifdef CONFIG_DPVS_MP_DEBUG
         RTE_LOG(WARNING, DPVS_MPOOL, "%s: mempool %s full, allocate memory from heap!\n",
                 __func__,  mp->pool_array[arr_idx].name);
+#endif
         goto alloc_from_heap;
     }
     data = ptr + MP_OBJ_COOKIE_OFFSET;;
@@ -220,7 +224,9 @@ void *dpvs_mempool_get(struct dpvs_mempool *mp, int size)
     cookie->flag = MEM_OBJ_FROM_POOL;
     cookie->pool_idx = arr_idx;
 
-    //RTE_LOG(DEBUG, DPVS_MPOOL, "allocate %d memory from %s\n", size, mp->pool_array[arr_idx].name);
+#ifdef CONFIG_DPVS_MP_DEBUG
+    RTE_LOG(DEBUG, DPVS_MPOOL, "allocate %d memory from %s\n", size, mp->pool_array[arr_idx].name);
+#endif
     memset(data, 0, size);
     return data;
 

From 40941dc44207a67d6cfb8ce84770574e3f32c70c Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Mon, 6 Jan 2020 20:45:16 +0800
Subject: [PATCH 57/62] mempool: fix memory underflow problem and add more
 debug info

1. fix memory underflow problem when allocating memory for eal heap
2. add tailer cookier for dpvs mempool
3. add `dpvs_mp_elem_ok` for debug
4. use correct smaller memory size when getting lcore services by msg
---
 include/mempool.h                             | 12 ++-
 .../enable-dpdk-eal-memory-debug.patch        | 68 ++++++++++++++++
 src/ipvs/ip_vs_service.c                      |  2 +-
 src/mempool.c                                 | 77 ++++++++++++++++---
 4 files changed, 145 insertions(+), 14 deletions(-)
 create mode 100644 patch/dpdk-stable-17.11.6/enable-dpdk-eal-memory-debug.patch

diff --git a/include/mempool.h b/include/mempool.h
index 283eabdaf..f76d99749 100644
--- a/include/mempool.h
+++ b/include/mempool.h
@@ -21,14 +21,18 @@
 #include <rte_mempool.h>
 
 #define MP_NAMSIZ               32
-#define MP_OBJ_COOKIE_OFFSET    8
+#define MP_OBJ_COOKIE_OFFSET    12
 #define MP_OBJ_COOKIE_MARK      0xA55AC33C
+#define MP_OBJ_TAILER_SIZE      4
+#define MP_OBJ_TAILER_MARK      0x5ADB2E5B
 #define MP_SIZE_MIN             16
-#define MP_OBJ_SIZE_MIN         32
+#define MP_OBJ_SIZE_MIN         64
 #define MP_OBJ_SIZE_MAX         1048576 /* 1MB */
 
 #define RTE_LOGTYPE_DPVS_MPOOL     RTE_LOGTYPE_USER1
 
+typedef uint32_t tailer_marker_t;
+
 enum dpvs_mp_obj_flag {
     MEM_OBJ_FROM_POOL = 1,
     MEM_OBJ_FROM_HEAP
@@ -36,6 +40,7 @@ enum dpvs_mp_obj_flag {
 
 struct dpvs_mp_obj_cookie {
     uint32_t mark;
+    uint32_t memsize;
     uint16_t flag;
     uint16_t pool_idx;
 };
@@ -72,4 +77,7 @@ void *dpvs_mempool_get(struct dpvs_mempool *mp, int size);
 
 void dpvs_mempool_put(struct dpvs_mempool *mp, void *obj);
 
+/* for debug */
+bool dpvs_mp_elem_ok(void *obj);
+
 #endif /* __DPVS_MEMPOOL_H__ */
diff --git a/patch/dpdk-stable-17.11.6/enable-dpdk-eal-memory-debug.patch b/patch/dpdk-stable-17.11.6/enable-dpdk-eal-memory-debug.patch
new file mode 100644
index 000000000..96c4940b8
--- /dev/null
+++ b/patch/dpdk-stable-17.11.6/enable-dpdk-eal-memory-debug.patch
@@ -0,0 +1,68 @@
+From e21a4e12c4e8dd60a68041a7b52f07e9e68053ff Mon Sep 17 00:00:00 2001
+From: wencyu <yuwenchao@qiyi.com>
+Date: Mon, 6 Jan 2020 20:20:17 +0800
+Subject: [PATCH] debug: enable dpdk eal memory debug
+
+---
+ config/common_base                         |  2 +-
+ lib/librte_eal/common/include/rte_malloc.h | 15 +++++++++++++++
+ lib/librte_eal/common/rte_malloc.c         |  4 ++++
+ 3 files changed, 20 insertions(+), 1 deletion(-)
+
+diff --git a/config/common_base b/config/common_base
+index 31f50b4..4cb1957 100644
+--- a/config/common_base
++++ b/config/common_base
+@@ -103,7 +103,7 @@ CONFIG_RTE_EAL_ALLOW_INV_SOCKET_ID=n
+ CONFIG_RTE_EAL_ALWAYS_PANIC_ON_ERROR=n
+ CONFIG_RTE_EAL_IGB_UIO=n
+ CONFIG_RTE_EAL_VFIO=n
+-CONFIG_RTE_MALLOC_DEBUG=n
++CONFIG_RTE_MALLOC_DEBUG=y
+ CONFIG_RTE_EAL_NUMA_AWARE_HUGEPAGES=n
+ CONFIG_RTE_USE_LIBBSD=n
+ 
+diff --git a/lib/librte_eal/common/include/rte_malloc.h b/lib/librte_eal/common/include/rte_malloc.h
+index 5d4c11a..0d3833e 100644
+--- a/lib/librte_eal/common/include/rte_malloc.h
++++ b/lib/librte_eal/common/include/rte_malloc.h
+@@ -242,6 +242,21 @@ struct rte_malloc_socket_stats {
+ rte_calloc_socket(const char *type, size_t num, size_t size, unsigned align, int socket);
+ 
+ /**
++ * Check the header/tailer cookies of memory pointed to by the provided pointer.
++ *
++ * This pointer must have been returned by a previous call to
++ * rte_malloc(), rte_zmalloc(), rte_calloc() or rte_realloc().
++ *
++ * @param ptr
++ *   The pointer to memory to be checked.
++ * @return
++ *   - true if the header/tailer cookies are OK.
++ *   - Otherwise, false.
++ */
++int
++rte_memmory_ok(void *ptr);
++
++/**
+  * Frees the memory space pointed to by the provided pointer.
+  *
+  * This pointer must have been returned by a previous call to
+diff --git a/lib/librte_eal/common/rte_malloc.c b/lib/librte_eal/common/rte_malloc.c
+index fe2278b..81d22f0 100644
+--- a/lib/librte_eal/common/rte_malloc.c
++++ b/lib/librte_eal/common/rte_malloc.c
+@@ -53,6 +53,10 @@
+ #include "malloc_elem.h"
+ #include "malloc_heap.h"
+ 
++int rte_memmory_ok(void *addr)
++{
++	return malloc_elem_cookies_ok(RTE_PTR_SUB(addr, MALLOC_ELEM_HEADER_LEN));
++}
+ 
+ /* Free the memory space back to heap */
+ void rte_free(void *addr)
+-- 
+1.8.3.1
+
diff --git a/src/ipvs/ip_vs_service.c b/src/ipvs/ip_vs_service.c
index 773ff5e3c..c133ce85d 100644
--- a/src/ipvs/ip_vs_service.c
+++ b/src/ipvs/ip_vs_service.c
@@ -1252,7 +1252,7 @@ static int dp_vs_get_svc(sockoptid_t opt, const void *user, size_t len, void **o
 
                 /* get slave core svc */
                 msg = msg_make(MSG_TYPE_SVC_GET_SERVICES, 0, DPVS_MSG_MULTICAST, rte_lcore_id(),
-                               size, user);
+                               sizeof(*get), user);
                 if (!msg) {
                     return EDPVS_NOMEM;
                 }
diff --git a/src/mempool.c b/src/mempool.c
index 4cdc9898d..4a6b81ccd 100644
--- a/src/mempool.c
+++ b/src/mempool.c
@@ -172,14 +172,14 @@ static int get_pool_array_index(const struct dpvs_mempool *mp, int size)
     lower = 0;
     upper = mp->pool_arr_size - 1;
 
-    if (unlikely(size + MP_OBJ_COOKIE_OFFSET > mp->pool_array[upper].obj_size))
+    if (unlikely(size > mp->pool_array[upper].obj_size))
         return -1;
 
     while (lower < upper) {
-        if (size + MP_OBJ_COOKIE_OFFSET <= mp->pool_array[lower].obj_size)
+        if (size <= mp->pool_array[lower].obj_size)
             return lower;
         mid = (lower + upper) / 2;
-        if (size + MP_OBJ_COOKIE_OFFSET <= mp->pool_array[mid].obj_size)
+        if (size <= mp->pool_array[mid].obj_size)
             upper = mid;
         else
             lower = mid + 1;
@@ -190,17 +190,20 @@ static int get_pool_array_index(const struct dpvs_mempool *mp, int size)
 
 void *dpvs_mempool_get(struct dpvs_mempool *mp, int size)
 {
-    int arr_idx;
+    int arr_idx, alloc_size;
     void *ptr, *data;
     struct dpvs_mp_obj_cookie *cookie;
+    tailer_marker_t *tailer;
 
     if (unlikely(!mp))
         return NULL;
 
-    arr_idx = get_pool_array_index(mp, size);
+    alloc_size = size + MP_OBJ_COOKIE_OFFSET + MP_OBJ_TAILER_SIZE;
+
+    arr_idx = get_pool_array_index(mp, alloc_size);
     if (arr_idx < 0) {
 #ifdef CONFIG_DPVS_MP_DEBUG
-        RTE_LOG(INFO, DPVS_MPOOL, "%s: %s allocate %d memory from heap!\n",
+        RTE_LOG(INFO, DPVS_MPOOL, "%s: %s allocate %d bytes memory from heap!\n",
                 __func__, mp->name, size);
 #endif
         goto alloc_from_heap;
@@ -213,17 +216,22 @@ void *dpvs_mempool_get(struct dpvs_mempool *mp, int size)
 
     if (rte_mempool_get(mp->pool_array[arr_idx].pool, &ptr) < 0) {
 #ifdef CONFIG_DPVS_MP_DEBUG
-        RTE_LOG(WARNING, DPVS_MPOOL, "%s: mempool %s full, allocate memory from heap!\n",
-                __func__,  mp->pool_array[arr_idx].name);
+        RTE_LOG(WARNING, DPVS_MPOOL, "%s: mempool %s full, allocate %d bytes memory from heap!\n",
+                __func__,  mp->pool_array[arr_idx].name, size);
 #endif
         goto alloc_from_heap;
     }
-    data = ptr + MP_OBJ_COOKIE_OFFSET;;
+
     cookie = (struct dpvs_mp_obj_cookie *)ptr;
     cookie->mark = MP_OBJ_COOKIE_MARK;
+    cookie->memsize = alloc_size;
     cookie->flag = MEM_OBJ_FROM_POOL;
     cookie->pool_idx = arr_idx;
 
+    tailer = (tailer_marker_t *)(ptr + size + MP_OBJ_COOKIE_OFFSET);
+    *tailer = MP_OBJ_TAILER_MARK;
+
+    data = ptr + MP_OBJ_COOKIE_OFFSET;;
 #ifdef CONFIG_DPVS_MP_DEBUG
     RTE_LOG(DEBUG, DPVS_MPOOL, "allocate %d memory from %s\n", size, mp->pool_array[arr_idx].name);
 #endif
@@ -231,20 +239,28 @@ void *dpvs_mempool_get(struct dpvs_mempool *mp, int size)
     return data;
 
 alloc_from_heap:
-    ptr = rte_zmalloc(NULL, size, RTE_CACHE_LINE_SIZE);
+    ptr = rte_zmalloc(NULL, alloc_size, RTE_CACHE_LINE_SIZE);
     if (!ptr)
         return NULL;
-    data = ptr + MP_OBJ_COOKIE_OFFSET;
+
     cookie = (struct dpvs_mp_obj_cookie *)ptr;
     cookie->mark = MP_OBJ_COOKIE_MARK;
+    cookie->memsize = alloc_size;
     cookie->flag = MEM_OBJ_FROM_HEAP;
     cookie->pool_idx = mp->pool_arr_size; // invalid pool index
+
+    tailer = (tailer_marker_t *)(ptr + size + MP_OBJ_COOKIE_OFFSET);
+    *tailer = (uint32_t)MP_OBJ_TAILER_MARK;
+
+    data = ptr + MP_OBJ_COOKIE_OFFSET;
+    assert(dpvs_mp_elem_ok(data));
     return data;
 }
 
 void dpvs_mempool_put(struct dpvs_mempool *mp, void *obj)
 {
     struct dpvs_mp_obj_cookie *cookie;
+    tailer_marker_t *tailer;
 
     if (!mp || !obj)
         return;
@@ -252,6 +268,9 @@ void dpvs_mempool_put(struct dpvs_mempool *mp, void *obj)
     cookie = (struct dpvs_mp_obj_cookie *)(obj - MP_OBJ_COOKIE_OFFSET);
     assert(cookie->mark == MP_OBJ_COOKIE_MARK);
 
+    tailer = (tailer_marker_t *)(obj - MP_OBJ_COOKIE_OFFSET + cookie->memsize - MP_OBJ_TAILER_SIZE);
+    assert(*tailer == MP_OBJ_TAILER_MARK);
+
     if (cookie->flag == MEM_OBJ_FROM_POOL)
         rte_mempool_put(mp->pool_array[cookie->pool_idx].pool, (void *)cookie);
     else if (cookie->flag == MEM_OBJ_FROM_HEAP)
@@ -259,3 +278,39 @@ void dpvs_mempool_put(struct dpvs_mempool *mp, void *obj)
     else
         RTE_LOG(ERR, DPVS_MPOOL, "%s: unkown memory object flag %d\n", __func__, cookie->flag);
 }
+
+#ifdef CONFIG_DPVS_MP_DEBUG
+bool dpvs_mp_elem_ok(void *obj)
+{
+    struct dpvs_mp_obj_cookie *cookie;
+    tailer_marker_t *tailer;
+
+    if (!obj)
+        return true;
+
+    cookie = (struct dpvs_mp_obj_cookie *)(obj - MP_OBJ_COOKIE_OFFSET);
+    tailer = (tailer_marker_t *)(obj - MP_OBJ_COOKIE_OFFSET + cookie->memsize - MP_OBJ_TAILER_SIZE);
+
+    if (cookie->mark != MP_OBJ_COOKIE_MARK) {
+        assert(0);
+        return false;
+    }
+
+    if (*tailer != MP_OBJ_TAILER_MARK) {
+        assert(0);
+        return false;
+    }
+
+    /* apply the patch to get `rte_memmory_ok`:
+     * dpdk-stable-17.11.6/enable-dpdk-eal-memory-debug.patch */
+    if (cookie->flag == MEM_OBJ_FROM_HEAP)
+        assert(rte_memmory_ok((void *)cookie));
+
+    return true;
+}
+#else
+bool dpvs_mp_elem_ok(void *obj)
+{
+    return true;
+}
+#endif

From 962434c94846fb0b09b315dc58f24f88e675e45d Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Wed, 8 Jan 2020 14:46:16 +0800
Subject: [PATCH 58/62] fix compatible problem after keepalived update

---
 include/conf/inetaddr.h                       |   2 +-
 tools/dpip/Makefile                           |   4 +-
 .../keepalived/keepalived/check/check_data.c  |   2 -
 tools/keepalived/keepalived/check/check_tcp.c |   2 +-
 .../keepalived/keepalived/check/ipvswrapper.c |  21 +-
 .../keepalived/include/conf/inetaddr.h        |  43 +++-
 .../keepalived/keepalived/libipvs-2.6/dp_vs.h |  26 --
 .../keepalived/libipvs-2.6/sockopt.c          | 236 ------------------
 .../keepalived/libipvs-2.6/sockopt.h          |  60 -----
 .../keepalived/keepalived/libipvs-2.6/test.c  |  59 -----
 10 files changed, 51 insertions(+), 404 deletions(-)
 delete mode 100644 tools/keepalived/keepalived/libipvs-2.6/dp_vs.h
 delete mode 100644 tools/keepalived/keepalived/libipvs-2.6/sockopt.c
 delete mode 100644 tools/keepalived/keepalived/libipvs-2.6/sockopt.h
 delete mode 100644 tools/keepalived/keepalived/libipvs-2.6/test.c

diff --git a/include/conf/inetaddr.h b/include/conf/inetaddr.h
index 9f0aa99dc..571327d06 100644
--- a/include/conf/inetaddr.h
+++ b/include/conf/inetaddr.h
@@ -42,7 +42,7 @@ enum {
 };
 
 /* leverage IFA_F_XXX in linux/if_addr.h*/
-#define IFA_F_SAPOOL    0x10000 /* if address with sockaddr pool */
+#define IFA_F_SAPOOL        0x10000 /* if address with sockaddr pool */
 
 /* ifa command flags */
 #define IFA_F_OPS_VERBOSE   0x0001
diff --git a/tools/dpip/Makefile b/tools/dpip/Makefile
index 04822c80b..ab5b59187 100644
--- a/tools/dpip/Makefile
+++ b/tools/dpip/Makefile
@@ -25,7 +25,7 @@ CFLAGS = -g -O0
 CFLAGS += -Wall -Werror -Wstrict-prototypes -Wmissing-prototypes
 
 CFLAGS += -I ../../include
-CFLAGS += -I ../keepalived/keepalived/libipvs-2.6
+CFLAGS += -I ../keepalived/keepalived/include
 
 LIBS = -lnuma
 DEFS = -D DPVS_MAX_LCORE=64
@@ -34,7 +34,7 @@ CFLAGS += $(DEFS)
 
 OBJS = dpip.o utils.o route.o addr.o neigh.o link.o vlan.o \
 	   qsch.o cls.o tunnel.o ipset.o ipv6.o iftraf.o ../../src/common.o \
-	   ../keepalived/keepalived/libipvs-2.6/sockopt.o
+	   ../keepalived/keepalived/check/sockopt.o
 
 all: $(TARGET)
 
diff --git a/tools/keepalived/keepalived/check/check_data.c b/tools/keepalived/keepalived/check/check_data.c
index 5ad77deda..d48fceab3 100644
--- a/tools/keepalived/keepalived/check/check_data.c
+++ b/tools/keepalived/keepalived/check/check_data.c
@@ -524,7 +524,6 @@ alloc_vs(const char *param1, const char *param2)
 	new->blklst_addr_gname = NULL;
 	new->vip_bind_dev = NULL;
 	new->hash_target = 0;
-	new->af = 0;
 	new->bps = 0;
 	new->limit_proportion = 100;
 	memset(new->srange, 0, 256);
@@ -532,7 +531,6 @@ alloc_vs(const char *param1, const char *param2)
 	memset(new->iifname, 0, IFNAMSIZ);
 	memset(new->oifname, 0, IFNAMSIZ);
 
-
 	list_add(check_data->vs, new);
 }
 
diff --git a/tools/keepalived/keepalived/check/check_tcp.c b/tools/keepalived/keepalived/check/check_tcp.c
index 67779fa57..c46e8888a 100644
--- a/tools/keepalived/keepalived/check/check_tcp.c
+++ b/tools/keepalived/keepalived/check/check_tcp.c
@@ -105,7 +105,7 @@ tcp_epilog(thread_ref_t thread, bool is_success)
 		checker->retry_it = 0;
 
 		if (is_success && (!checker->is_up || !checker->has_run)) {
-			log_message(LOG_INFO, "TCP connection to %s success."
+			log_message(LOG_DEBUG, "TCP connection to %s success."
 					, FMT_CHK(checker));
 			checker_was_up = checker->is_up;
 			rs_was_alive = checker->rs->alive;
diff --git a/tools/keepalived/keepalived/check/ipvswrapper.c b/tools/keepalived/keepalived/check/ipvswrapper.c
index 70777673d..6092f85b4 100644
--- a/tools/keepalived/keepalived/check/ipvswrapper.c
+++ b/tools/keepalived/keepalived/check/ipvswrapper.c
@@ -222,15 +222,15 @@ ipvs_talk(int cmd,
 	}
 
 	if (result) {//EDPVS_MSG_FAIL just ignore set failed
-                if ((result == EDPVS_EXIST || result == EDPVS_MSG_FAIL || result == EDPVS_NOTSUPP)
-                        && (cmd == IP_VS_SO_SET_ADD || cmd == IP_VS_SO_SET_ADDDEST))
-                        ignore_error = true;
-                else if ((result == EDPVS_NOTEXIST || result == EDPVS_MSG_FAIL || result == EDPVS_NOTSUPP)
-                        && (cmd == IP_VS_SO_SET_DEL || cmd == IP_VS_SO_SET_DELDEST))
-                        ignore_error = true;
-                log_message(LOG_INFO, "IPVS: %s", ipvs_strerror(errno));
-        }
-
+		if ((result == EDPVS_EXIST || result == EDPVS_MSG_FAIL || result == EDPVS_NOTSUPP)
+				&& (cmd == IP_VS_SO_SET_ADD || cmd == IP_VS_SO_SET_ADDDEST))
+			ignore_error = true;
+		else if ((result == EDPVS_NOTEXIST || result == EDPVS_MSG_FAIL || result == EDPVS_NOTSUPP)
+				&& (cmd == IP_VS_SO_SET_DEL || cmd == IP_VS_SO_SET_DELDEST))
+			ignore_error = true;
+		if (errno)
+			log_message(LOG_INFO, "IPVS: %s", ipvs_strerror(errno));
+	}
 
 	if (ignore_error)
 		result = 0;
@@ -241,7 +241,8 @@ ipvs_talk(int cmd,
 		else if (errno == ENOENT &&
 			(cmd == IP_VS_SO_SET_DEL || cmd == IP_VS_SO_SET_DELDEST))
 			result = 0;
-		log_message(LOG_INFO, "IPVS (cmd %d, errno %d): %s", cmd, errno, ipvs_strerror(errno));
+		if (errno)
+			log_message(LOG_INFO, "IPVS (cmd %d, errno %d): %s", cmd, errno, ipvs_strerror(errno));
 	}
 	return result;
 }
diff --git a/tools/keepalived/keepalived/include/conf/inetaddr.h b/tools/keepalived/keepalived/include/conf/inetaddr.h
index 16a5e79c4..571327d06 100644
--- a/tools/keepalived/keepalived/include/conf/inetaddr.h
+++ b/tools/keepalived/keepalived/include/conf/inetaddr.h
@@ -44,25 +44,54 @@ enum {
 /* leverage IFA_F_XXX in linux/if_addr.h*/
 #define IFA_F_SAPOOL        0x10000 /* if address with sockaddr pool */
 
-struct inet_addr_param {
+/* ifa command flags */
+#define IFA_F_OPS_VERBOSE   0x0001
+#define IFA_F_OPS_STATS     0x0002
+
+typedef enum ifaddr_ops {
+    INET_ADDR_GET       = 1,
+    INET_ADDR_ADD,
+    INET_ADDR_DEL,
+    INET_ADDR_MOD,
+    INET_ADDR_FLUSH,
+    INET_ADDR_SYNC,
+} ifaddr_ops_t;
+
+struct inet_addr_entry {
     int                 af;
     char                ifname[IFNAMSIZ];
     union inet_addr     addr;
-    uint8_t             plen;
     union inet_addr     bcast;
+    uint8_t             plen;
+    uint8_t             scope;
+    lcoreid_t           cid;
     uint32_t            valid_lft;
     uint32_t            prefered_lft;
-    uint8_t             scope;
     uint32_t            flags;
+} __attribute__((__packed__));
 
+struct inet_addr_stats {
     uint32_t            sa_used;
     uint32_t            sa_free;
     uint32_t            sa_miss;
 } __attribute__((__packed__));
 
-struct inet_addr_param_array {
-    int                 naddr;
-    struct inet_addr_param addrs[0];
-};
+struct inet_addr_param {
+    ifaddr_ops_t            ifa_ops;
+    uint32_t                ifa_ops_flags;
+    struct inet_addr_entry  ifa_entry;
+} __attribute__((__packed__));
+
+struct inet_addr_data {
+    struct inet_addr_entry  ifa_entry;
+    struct inet_addr_stats  ifa_stats;
+} __attribute__((__packed__));
+
+struct inet_addr_data_array {
+    ifaddr_ops_t            ops;
+    uint32_t                ops_flags;
+    int                     naddr;
+    struct inet_addr_data   addrs[0];
+} __attribute__((__packed__));
 
 #endif /* __DPVS_INETADDR_CONF_H__ */
diff --git a/tools/keepalived/keepalived/libipvs-2.6/dp_vs.h b/tools/keepalived/keepalived/libipvs-2.6/dp_vs.h
deleted file mode 100644
index 70c339036..000000000
--- a/tools/keepalived/keepalived/libipvs-2.6/dp_vs.h
+++ /dev/null
@@ -1,26 +0,0 @@
-#ifndef _DP_VS_H
-#define _DP_VS_H
-
-#include <netinet/in.h>
-
-enum{
-    DPVS_SO_SET_FLUSH = 200,
-    DPVS_SO_SET_ZERO,
-    DPVS_SO_SET_ADD,
-    DPVS_SO_SET_EDIT,
-    DPVS_SO_SET_DEL,
-    DPVS_SO_SET_ADDDEST,
-    DPVS_SO_SET_EDITDEST,
-    DPVS_SO_SET_DELDEST,
-    DPVS_SO_SET_GRATARP,
-};
-
-enum{
-    DPVS_SO_GET_VERSION = 200,
-    DPVS_SO_GET_INFO,
-    DPVS_SO_GET_SERVICES,
-    DPVS_SO_GET_SERVICE,
-    DPVS_SO_GET_DESTS,
-};
-
-#endif
diff --git a/tools/keepalived/keepalived/libipvs-2.6/sockopt.c b/tools/keepalived/keepalived/libipvs-2.6/sockopt.c
deleted file mode 100644
index 48c207aeb..000000000
--- a/tools/keepalived/keepalived/libipvs-2.6/sockopt.c
+++ /dev/null
@@ -1,236 +0,0 @@
-#include "sockopt.h"
-#include <stdio.h>
-#include <errno.h>
-#include <malloc.h>
-#include <pthread.h>
-#include <unistd.h>
-#include "common.h"
-
-#define UNIX_DOMAIN "/var/run/dpvs_ctrl"
-
-static inline int sockopt_msg_send(int clt_fd,
-        const struct dpvs_sock_msg *hdr,
-        const char *data, int data_len)
-{
-    int len, res;
-
-    if (!hdr) {
-        fprintf(stderr, "[%s] empty socket msg header\n", __func__);
-        return -ESOCKOPT_INVAL;
-    }
-
-    len = sizeof(struct dpvs_sock_msg);
-    res = sendn(clt_fd, hdr, len, MSG_NOSIGNAL);
-    if (len != res) {
-        fprintf(stderr, "[%s] socket msg header send error -- %d/%d sent\n",
-                __func__, res, len);
-        return -ESOCKOPT_IO;
-    }
-
-    if (data && data_len) {
-        res = sendn(clt_fd, data, data_len, MSG_NOSIGNAL);
-        if (data_len != res) {
-            fprintf(stderr, "[%s] scoket msg body send error -- %d/%d sent\n",
-                    __func__, res, data_len);
-            return -ESOCKOPT_IO;
-        }
-    }
-
-    return 0;
-}
-
-static inline int sockopt_msg_recv(int clt_fd, struct dpvs_sock_msg_reply *reply_hdr, 
-        void **out, size_t *out_len)
-{
-    void *msg = NULL;
-    int len, res;
-
-    if (!reply_hdr) {
-        fprintf(stderr, "[%s] empty reply msg pointer\n", __func__);
-        return -ESOCKOPT_INVAL;
-    }
-
-    if (out)
-        *out = NULL;
-    if (out_len)
-        *out_len = 0;
-
-    len = sizeof(struct dpvs_sock_msg_reply);
-    memset(reply_hdr, 0, len);
-    res = readn(clt_fd, reply_hdr, len);
-    if (len != res) {
-        fprintf(stderr, "[%s] socket msg header recv error -- %d/%d recieved\n",
-                __func__, res, len);
-        return -ESOCKOPT_IO;
-    }
-
-    if (reply_hdr->errcode) {
-        fprintf(stderr, "[%s] errcode set in socket msg#%d header: %s(%d)\n", __func__,
-                reply_hdr->id, reply_hdr->errstr, reply_hdr->errcode);
-        return reply_hdr->errcode;
-    }
-
-    if (reply_hdr->len > 0) {
-        msg = malloc(reply_hdr->len);
-        if (NULL == msg) {
-            fprintf(stderr, "[%s] no memory\n", __func__);
-            return -ESOCKOPT_NOMEM;
-        }
-
-        res = readn(clt_fd, msg, reply_hdr->len);
-        if (res != reply_hdr->len) {
-            fprintf(stderr, "[%s] socket msg body recv error -- %d/%d recieved\n",
-                    __func__, res, (int)reply_hdr->len);
-            free(msg);
-            return -ESOCKOPT_IO;
-        }
-    }
-
-    if (SOCKOPT_VERSION != reply_hdr->version) {
-        fprintf(stderr, "[%s] socket msg version not match\n", __func__);
-        if (reply_hdr->len > 0)
-            free(msg);
-        return -ESOCKOPT_VERSION;
-    }
-
-    if (out && out_len) {
-        *out = msg;
-        *out_len = reply_hdr->len;
-    } else if (reply_hdr->len > 0) {
-        free(msg);
-        if (out)
-            *out = NULL;
-        if (out_len)
-            *out_len = 0;
-    }
-
-    return ESOCKOPT_OK;
-}
-
-int dpvs_setsockopt(sockoptid_t cmd, const void *in, size_t in_len)
-{
-    struct dpvs_sock_msg *msg;
-    struct dpvs_sock_msg_reply reply_hdr;
-    struct sockaddr_un clt_addr;
-    int clt_fd;
-    int res;
-    size_t msg_len;
-
-    memset(&clt_addr, 0, sizeof(struct sockaddr_un));
-    clt_addr.sun_family = AF_UNIX;
-    strncpy(clt_addr.sun_path, UNIX_DOMAIN, sizeof(clt_addr.sun_path) - 1);
-
-    msg_len = sizeof(struct dpvs_sock_msg);
-    msg = malloc(msg_len);
-    if (NULL == msg) {
-        fprintf(stderr, "[%s] no memory\n", __func__);
-        return -ESOCKOPT_INVAL;
-    }
-
-    clt_fd = socket(PF_UNIX, SOCK_STREAM, 0);
-    res = connect(clt_fd, (struct sockaddr *)&clt_addr, sizeof(clt_addr));
-    if (-1 == res) {
-        fprintf(stderr, "[%s] scoket msg connection error: %s\n",
-                __func__, strerror(errno));
-        free(msg);
-        return -ESOCKOPT_IO;
-    }
-
-    memset(msg, 0, msg_len);
-    msg->version = SOCKOPT_VERSION;
-    msg->id = cmd;
-    msg->type = SOCKOPT_SET;
-    msg->len = in_len;
-    res = sockopt_msg_send(clt_fd, msg, in, in_len);
-
-    free(msg);
-    msg = NULL;
-
-    if (res) {
-        close(clt_fd);
-        return res;
-    }
-
-    res = sockopt_msg_recv(clt_fd, &reply_hdr, NULL, NULL);
-    if (res) {
-        close(clt_fd);
-        return res;
-    }
-
-    if (reply_hdr.errcode) {
-        fprintf(stderr, "[%s] Server error: %s\n", __func__, reply_hdr.errstr);
-        close(clt_fd);
-        return reply_hdr.errcode;
-    }
-
-    close(clt_fd);
-    return ESOCKOPT_OK;
-}
-
-int dpvs_getsockopt(sockoptid_t cmd, const void *in, size_t in_len,
-        void **out, size_t *out_len)
-{
-    struct dpvs_sock_msg *msg;
-    struct dpvs_sock_msg_reply reply_hdr;
-    struct sockaddr_un clt_addr;
-    int clt_fd;
-    int res;
-    size_t msg_len;
-
-    if (NULL == out || NULL == out_len) {
-        fprintf(stderr, "[%s] no pointer for info return\n", __func__);
-        return -1;
-    }
-    *out = NULL;
-    *out_len = 0;
-
-    memset(&clt_addr, 0, sizeof(struct sockaddr_un));
-    clt_addr.sun_family = AF_UNIX;
-    strncpy(clt_addr.sun_path, UNIX_DOMAIN, sizeof(clt_addr.sun_path) - 1);
-
-    msg_len = sizeof(struct dpvs_sock_msg);
-    msg = malloc(msg_len);
-    if (NULL == msg) {
-        fprintf(stderr, "[%s] no memory\n", __func__);
-        return -ESOCKOPT_NOMEM;
-    }
-
-    clt_fd = socket(PF_UNIX, SOCK_STREAM, 0);
-    res = connect(clt_fd, (struct sockaddr*)&clt_addr, sizeof(clt_addr));
-    if (-1 == res) {
-        fprintf(stderr, "[%s] scoket msg connection error: %s\n",
-                __func__, strerror(errno));
-        free(msg);
-        return -ESOCKOPT_IO;
-    }
-
-    memset(msg, 0, msg_len);
-    msg->version = SOCKOPT_VERSION;
-    msg->id = cmd;
-    msg->type = SOCKOPT_GET;
-    msg->len = in_len;
-    res = sockopt_msg_send(clt_fd, msg, in, in_len);
-
-    free(msg);
-    msg = NULL;
-
-    if (res) {
-        close(clt_fd);
-        return res;
-    }
-
-    res = sockopt_msg_recv(clt_fd, &reply_hdr, out, out_len);
-    if (res) {
-        close(clt_fd);
-        return res;
-    }
-
-    if (reply_hdr.errcode) {
-        fprintf(stderr, "[%s] Server error: %s\n", __func__, reply_hdr.errstr);
-        close(clt_fd);
-        return reply_hdr.errcode;
-    }
-
-    close(clt_fd);
-    return ESOCKOPT_OK;
-}
diff --git a/tools/keepalived/keepalived/libipvs-2.6/sockopt.h b/tools/keepalived/keepalived/libipvs-2.6/sockopt.h
deleted file mode 100644
index 8a7ef07ea..000000000
--- a/tools/keepalived/keepalived/libipvs-2.6/sockopt.h
+++ /dev/null
@@ -1,60 +0,0 @@
-#include <stdint.h>
-#include <stdlib.h>
-#include <sys/socket.h>
-#include <sys/un.h>
-
-#define SOCKOPT_VERSION_MAJOR           1
-#define SOCKOPT_VERSION_MINOR           0
-#define SOCKOPT_VERSION_PATCH           0
-#define SOCKOPT_VERSION     ((SOCKOPT_VERSION_MAJOR << 16) + \
-        (SOCKOPT_VERSION_MINOR << 8) + SOCKOPT_VERSION_PATCH)
-
-#define SOCKOPT_MSG_BUFFER_SIZE         (1UL << 12)
-#define SOCKOPT_ERRSTR_LEN              64
-
-enum {
-    ESOCKOPT_INVAL = -16385,
-    ESOCKOPT_IO,
-    ESOCKOPT_NOMEM,
-    ESOCKOPT_VERSION,
-    ESOCKOPT_UNKOWN = 65535,
-    ESOCKOPT_OK = 0,
-};
-
-typedef uint32_t sockoptid_t;
-
-enum sockopt_type {
-    SOCKOPT_GET = 0,
-    SOCKOPT_SET,
-    SOCKOPT_TYPE_MAX,
-};
-
-struct dpvs_sock_msg {
-    uint32_t version;
-    sockoptid_t id;
-    enum sockopt_type type;
-    size_t len;
-    char data[0];
-};
-
-struct dpvs_sock_msg_reply {
-    uint32_t version;
-    sockoptid_t id;
-    enum sockopt_type type;
-    int errcode;
-    char errstr[SOCKOPT_ERRSTR_LEN];
-    size_t len;
-    char data[0];
-};
-
-int dpvs_setsockopt(sockoptid_t cmd, const void *in, size_t in_len);
-int dpvs_getsockopt(sockoptid_t cmd, const void *in, size_t in_len,
-        void **out, size_t *out_len);
-
-static inline void dpvs_sockopt_msg_free(void *msg)
-{
-    free(msg);
-    msg = NULL;
-}
-
-
diff --git a/tools/keepalived/keepalived/libipvs-2.6/test.c b/tools/keepalived/keepalived/libipvs-2.6/test.c
deleted file mode 100644
index 5d85d87c3..000000000
--- a/tools/keepalived/keepalived/libipvs-2.6/test.c
+++ /dev/null
@@ -1,59 +0,0 @@
-#include "sockopt.h"
-#include <stdio.h>
-
-#define SOCKOPT_MSG_BASE            23
-
-#define SOCKOPT_MSG_SET_CMD_1       SOCKOPT_MSG_BASE + 1
-#define SOCKOPT_MSG_SET_CMD_2       SOCKOPT_MSG_BASE + 2
-#define SOCKOPT_MSG_SET_CMD_3       SOCKOPT_MSG_BASE + 3
-#define SOCKOPT_MSG_SET_CMD_MAX     SOCKOPT_MSG_SET_CMD_3 + 1
-
-#define SOCKOPT_MSG_GET_CMD_1       SOCKOPT_MSG_BASE + 1
-#define SOCKOPT_MSG_GET_CMD_2       SOCKOPT_MSG_BASE + 2
-#define SOCKOPT_MSG_GET_CMD_3       SOCKOPT_MSG_BASE + 3
-#define SOCKOPT_MSG_GET_CMD_MAX     SOCKOPT_MSG_GET_CMD_3 + 1
-
-static void send_set_msg(sockoptid_t cmd, char *in, size_t in_len)
-{
-    printf("[%s] send set msg #%u (len=%u): %s\n", __func__, cmd, in_len, in);
-    dpvs_setsockopt(cmd, in, in_len);
-}
-
-static void send_get_msg(sockoptid_t cmd, char *in, size_t in_len)
-{
-    void *out;
-    size_t out_len;
-
-    printf("[%s] send get msg #%u (len=%u): %s\n", __func__, cmd, in_len, in);
-    dpvs_getsockopt(cmd, in, in_len, &out, &out_len);
-    if (out) {
-        printf("[%s] get msg #%u reply:%s\n", __func__, cmd, (char *)out);
-        dpvs_sockopt_msg_free(out);
-    } else
-        printf("[%s] fail to recieve get msg#%u reply\n", __func__, cmd);
-}
-
-
-int main(void)
-{
-    char buf[SOCKOPT_MSG_BUFFER_SIZE];
-    size_t out_len = SOCKOPT_MSG_BUFFER_SIZE;
-
-    printf("Start ...\n");
-    sprintf(buf, "Hello, I'm set#%u", SOCKOPT_MSG_SET_CMD_1);
-    send_set_msg(SOCKOPT_MSG_SET_CMD_1, buf, strlen(buf) + 1);
-    sprintf(buf, "Hello, I'm set#%u", SOCKOPT_MSG_SET_CMD_2);
-    send_set_msg(SOCKOPT_MSG_SET_CMD_2, buf, strlen(buf) + 1);
-    sprintf(buf, "Hello, I'm set#%u", SOCKOPT_MSG_SET_CMD_3);
-    send_set_msg(SOCKOPT_MSG_SET_CMD_3, buf, strlen(buf) + 1);
-
-    sprintf(buf, "Hello, I'm get#%u", SOCKOPT_MSG_GET_CMD_1);
-    send_get_msg(SOCKOPT_MSG_SET_CMD_1, buf, strlen(buf) + 1);
-    sprintf(buf, "Hello, I'm get#%u", SOCKOPT_MSG_GET_CMD_2);
-    send_get_msg(SOCKOPT_MSG_SET_CMD_2, buf, strlen(buf) + 1);
-    sprintf(buf, "Hello, I'm get#%u", SOCKOPT_MSG_GET_CMD_3);
-    send_get_msg(SOCKOPT_MSG_SET_CMD_3, buf, strlen(buf) + 1);
-    printf("End ...\n");
-
-    return 0;
-}

From afdfb5ee3f949b9a5786eef1fc0793093de9269a Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Fri, 17 Jan 2020 17:19:15 +0800
Subject: [PATCH 59/62] adjust header files used both by tools(keepalived) and
 dpvs

---
 include/conf/README                           |      4 +
 include/{ => conf}/common.h                   |      0
 include/conf/dest.h                           |    108 +
 include/conf/flow.h                           |     54 +
 .../include => include/conf}/inet.h           |     91 +-
 include/conf/ip_tunnel.h                      |     71 +
 include/{ => conf}/match.h                    |      0
 include/conf/service.h                        |    139 +
 .../ipvs/proto_udp.h => include/conf/stats.h  |     29 +-
 include/ctrl.h                                |      2 +-
 include/flow.h                                |     32 +-
 include/global_conf.h                         |      2 +-
 include/global_data.h                         |      2 +-
 include/iftraf.h                              |     19 +-
 include/inet.h                                |    240 +-
 include/ip_tunnel.h                           |     46 +-
 include/ipset.h                               |      2 +-
 include/ipv4.h                                |      2 +-
 include/ipvs/blklst.h                         |      2 +-
 include/ipvs/conn.h                           |      2 +-
 include/ipvs/dest.h                           |     94 +-
 include/ipvs/ipvs.h                           |      2 +-
 include/ipvs/laddr.h                          |      2 +-
 include/ipvs/proto.h                          |      2 +-
 include/ipvs/redirect.h                       |      2 +-
 include/ipvs/sched.h                          |      2 +-
 include/ipvs/service.h                        |    118 +-
 include/ipvs/stats.h                          |     21 +-
 include/linux_ipv6.h                          |      2 +-
 include/log.h                                 |     17 +
 include/route.h                               |      2 +-
 include/tc/cls.h                              |      4 +-
 include/tc/sch.h                              |      2 +-
 include/vlan.h                                |      2 +-
 src/cfgfile.c                                 |      2 +-
 src/common.c                                  |      2 +-
 src/global_data.c                             |      2 +-
 src/iftraf.c                                  |     18 +
 src/ip_tunnel.c                               |      2 +-
 src/ipset.c                                   |      2 +-
 src/ipv6/icmp6.c                              |      2 +-
 src/ipv6/ipv6.c                               |      2 +-
 src/ipv6/ipv6_ctrl.c                          |      2 +-
 src/ipv6/ndisc.c                              |      2 +-
 src/ipvs/ip_vs_blklst.c                       |      2 +-
 src/ipvs/ip_vs_conn.c                         |      2 +-
 src/ipvs/ip_vs_core.c                         |      2 +-
 src/ipvs/ip_vs_laddr.c                        |      2 +-
 src/ipvs/ip_vs_proto.c                        |      2 +-
 src/ipvs/ip_vs_proto_icmp.c                   |      2 +-
 src/ipvs/ip_vs_proto_tcp.c                    |      2 +-
 src/ipvs/ip_vs_proto_udp.c                    |      2 +-
 src/ipvs/ip_vs_stats.c                        |      2 +-
 src/ipvs/ip_vs_synproxy.c                     |      2 +-
 src/kni.c                                     |      2 +-
 src/log.c                                     |     20 +-
 src/main.c                                    |      2 +-
 src/mempool.c                                 |      2 +-
 src/neigh.c                                   |      2 +-
 src/netif.c                                   |      2 +-
 src/parser.c                                  |      2 +-
 src/scheduler.c                               |      2 +-
 src/tc/cls_match.c                            |      2 +-
 src/timer.c                                   |      2 +-
 tools/dpip/addr.c                             |      2 +-
 tools/dpip/cls.c                              |      4 +-
 tools/dpip/dpip.c                             |      2 +-
 tools/dpip/iftraf.c                           |      2 +-
 tools/dpip/ipset.c                            |      2 +-
 tools/dpip/ipv6.c                             |      4 +-
 tools/dpip/link.c                             |      2 +-
 tools/dpip/neigh.c                            |      2 +-
 tools/dpip/qsch.c                             |      2 +-
 tools/dpip/route.c                            |      2 +-
 tools/dpip/tunnel.c                           |      4 +-
 tools/dpip/utils.c                            |      2 +-
 tools/dpip/utils.h                            |      2 +-
 tools/dpip/vlan.c                             |      2 +-
 tools/keepalived/keepalived.conf              |  37053 -----
 tools/keepalived/keepalived/check/sockopt.c   |      2 +-
 .../keepalived/keepalived/include/conf/README |      4 +
 .../keepalived/include/{ => conf}/common.h    |     23 +-
 .../keepalived/keepalived/include/conf/dest.h |    108 +
 .../keepalived/keepalived/include/conf/flow.h |     54 +
 .../keepalived/include/conf/iftraf.h          |     60 +
 .../keepalived/keepalived/include/conf/inet.h |    261 +
 .../keepalived/include/conf/ip_tunnel.h       |     89 +-
 .../include/{ipvs/blklst.h => conf/ipset.h}   |     45 +-
 .../keepalived/include/conf/laddr.h           |      3 +
 .../keepalived/include/{ => conf}/match.h     |     28 +-
 .../keepalived/include/conf/neigh.h           |      4 +-
 .../keepalived/include/conf/route.h           |      2 +-
 .../keepalived/include/conf/service.h         |    139 +
 .../include/{ipvs/conhash.h => conf/stats.h}  |     23 +-
 tools/keepalived/keepalived/include/dp_vs.h   |     46 +-
 tools/keepalived/keepalived/include/flow.h    |    122 -
 tools/keepalived/keepalived/include/ip_vs.h   |     16 +-
 .../keepalived/keepalived/include/ipvs/conn.h |    273 -
 .../keepalived/keepalived/include/ipvs/dest.h |    212 -
 .../keepalived/keepalived/include/ipvs/ipvs.h |     58 -
 .../keepalived/include/ipvs/laddr.h           |     35 -
 .../keepalived/include/ipvs/nat64.h           |     49 -
 .../keepalived/include/ipvs/proto.h           |    108 -
 .../keepalived/include/ipvs/proto_icmp.h      |     24 -
 .../keepalived/include/ipvs/proto_tcp.h       |    109 -
 tools/keepalived/keepalived/include/ipvs/rr.h |     28 -
 .../keepalived/include/ipvs/sched.h           |     59 -
 .../keepalived/include/ipvs/service.h         |    257 -
 .../keepalived/include/ipvs/stats.h           |    118 -
 .../keepalived/include/ipvs/synproxy.h        |    128 -
 .../keepalived/keepalived/include/ipvs/wlc.h  |     28 -
 .../keepalived/keepalived/include/ipvs/wrr.h  |     28 -
 .../keepalived/keepalived/include/ipvs/xmit.h |     63 -
 tools/keepalived/kpalive_cluster_test.conf    | 104953 ---------------
 114 files changed, 1270 insertions(+), 144589 deletions(-)
 create mode 100644 include/conf/README
 rename include/{ => conf}/common.h (100%)
 create mode 100644 include/conf/dest.h
 create mode 100644 include/conf/flow.h
 rename {tools/keepalived/keepalived/include => include/conf}/inet.h (81%)
 create mode 100644 include/conf/ip_tunnel.h
 rename include/{ => conf}/match.h (100%)
 create mode 100644 include/conf/service.h
 rename tools/keepalived/keepalived/include/ipvs/proto_udp.h => include/conf/stats.h (63%)
 delete mode 100644 tools/keepalived/keepalived.conf
 create mode 100644 tools/keepalived/keepalived/include/conf/README
 rename tools/keepalived/keepalived/include/{ => conf}/common.h (92%)
 create mode 100644 tools/keepalived/keepalived/include/conf/dest.h
 create mode 100644 tools/keepalived/keepalived/include/conf/flow.h
 create mode 100644 tools/keepalived/keepalived/include/conf/iftraf.h
 create mode 100644 tools/keepalived/keepalived/include/conf/inet.h
 rename tools/keepalived/keepalived/include/{ipvs/blklst.h => conf/ipset.h} (52%)
 rename tools/keepalived/keepalived/include/{ => conf}/match.h (84%)
 create mode 100644 tools/keepalived/keepalived/include/conf/service.h
 rename tools/keepalived/keepalived/include/{ipvs/conhash.h => conf/stats.h} (63%)
 delete mode 100644 tools/keepalived/keepalived/include/flow.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/conn.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/dest.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/ipvs.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/laddr.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/nat64.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/proto.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/proto_icmp.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/proto_tcp.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/rr.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/sched.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/service.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/stats.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/synproxy.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/wlc.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/wrr.h
 delete mode 100644 tools/keepalived/keepalived/include/ipvs/xmit.h
 delete mode 100644 tools/keepalived/kpalive_cluster_test.conf

diff --git a/include/conf/README b/include/conf/README
new file mode 100644
index 000000000..d3173f632
--- /dev/null
+++ b/include/conf/README
@@ -0,0 +1,4 @@
+Header files in "./tools/keepalived/keepalived/include/conf/"
+is a mirror of "./include/conf/".
+
+Always keep the header files of the two paths the same!
diff --git a/include/common.h b/include/conf/common.h
similarity index 100%
rename from include/common.h
rename to include/conf/common.h
diff --git a/include/conf/dest.h b/include/conf/dest.h
new file mode 100644
index 000000000..11faecc52
--- /dev/null
+++ b/include/conf/dest.h
@@ -0,0 +1,108 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_DEST_CONF_H__
+#define __DPVS_DEST_CONF_H__
+
+#include "conf/service.h"
+
+/* must consistent with IP_VS_CONN_F_XXX (libipvs-2.6/ip_vs.h) */
+enum dpvs_fwd_mode {
+    DPVS_FWD_MASQ           = 0,
+    DPVS_FWD_LOCALNODE      = 1,
+    DPVS_FWD_MODE_TUNNEL    = 2,
+    DPVS_FWD_MODE_DR        = 3,
+    DPVS_FWD_MODE_BYPASS    = 4,
+    DPVS_FWD_MODE_FNAT      = 5,
+    DPVS_FWD_MODE_NAT       = DPVS_FWD_MASQ,
+    DPVS_FWD_MODE_SNAT      = 6,
+};
+
+enum {
+    DPVS_DEST_F_AVAILABLE       = 0x1<<0,
+    DPVS_DEST_F_OVERLOAD        = 0x1<<1,
+};
+
+struct dp_vs_dest_conf {
+    /* destination server address */
+    int                af;
+    union inet_addr    addr;
+    uint16_t           port;
+
+    enum dpvs_fwd_mode fwdmode;
+    /* real server options */
+    unsigned           conn_flags;    /* connection flags */
+    int                weight;     /* destination weight */
+
+    /* thresholds for active connections */
+    uint32_t           max_conn;    /* upper threshold */
+    uint32_t           min_conn;    /* lower threshold */
+};
+
+struct dp_vs_dest_entry {
+    int             af;
+    union inet_addr addr;        /* destination address */
+    uint16_t        port;
+    unsigned        conn_flags;    /* connection flags */
+    int             weight;     /* destination weight */
+
+    uint32_t        max_conn;  /* upper threshold */
+    uint32_t        min_conn;  /* lower threshold */
+
+    uint32_t        actconns;  /* active connections */
+    uint32_t        inactconns;   /* inactive connections */
+    uint32_t        persistconns; /* persistent connections */
+
+    /* statistics */
+    struct dp_vs_stats stats;
+};
+
+struct dp_vs_get_dests {
+    /* which service: user fills in these */
+    int              af;
+    uint16_t         proto;
+    union inet_addr  addr;        /* virtual address */
+    uint16_t         port;
+    uint32_t         fwmark;       /* firwall mark of service */
+
+    /* number of real servers */
+    unsigned int num_dests;
+
+    lcoreid_t        cid;
+
+    char        srange[256];
+    char        drange[256];
+    char        iifname[IFNAMSIZ];
+    char        oifname[IFNAMSIZ];
+
+    /* the real servers */
+    struct dp_vs_dest_entry entrytable[0];
+};
+
+struct dp_vs_dest_user {
+    int             af;
+    union inet_addr addr;
+    uint16_t        port;
+
+    unsigned        conn_flags;
+    int             weight;
+
+    uint32_t        max_conn;
+    uint32_t        min_conn;
+};
+
+#endif /* __DPVS_DEST_CONF_H__ */
diff --git a/include/conf/flow.h b/include/conf/flow.h
new file mode 100644
index 000000000..5945823b8
--- /dev/null
+++ b/include/conf/flow.h
@@ -0,0 +1,54 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2018 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+/**
+ * flow for IPv4/IPv6 route lookup.
+ * Linux Kernel is referred.
+ *
+ * Lei Chen <raychen@qiyi.com>, initial, Jul 2018.
+ */
+#ifndef __DPVS_FLOW_CONF_H__
+#define __DPVS_FLOW_CONF_H__
+
+#include <netinet/in.h>
+
+/* linux:include/uapi/route.h */
+#define RTF_UP          0x0001      /* route usable                 */
+#define RTF_GATEWAY     0x0002      /* destination is a gateway     */
+#define RTF_HOST        0x0004      /* host entry (net otherwise)   */
+#define RTF_REINSTATE   0x0008      /* reinstate route after tmout  */
+#define RTF_DYNAMIC     0x0010      /* created dyn. (by redirect)   */
+#define RTF_MODIFIED    0x0020      /* modified dyn. (by redirect)  */
+#define RTF_MTU         0x0040      /* specific MTU for this route  */
+#define RTF_MSS         RTF_MTU     /* Compatibility :-(            */
+#define RTF_WINDOW      0x0080      /* per route window clamping    */
+#define RTF_IRTT        0x0100      /* Initial round trip time      */
+#define RTF_REJECT      0x0200      /* Reject route                 */
+
+/* dpvs defined. */
+#define RTF_FORWARD     0x0400
+#define RTF_LOCALIN     0x0800
+#define RTF_DEFAULT     0x1000
+#define RTF_KNI         0X2000
+#define RTF_OUTWALL     0x4000
+
+struct rt6_prefix {
+    struct in6_addr     addr;
+    int                 plen;
+};
+
+#endif /* __DPVS_FLOW_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/inet.h b/include/conf/inet.h
similarity index 81%
rename from tools/keepalived/keepalived/include/inet.h
rename to include/conf/inet.h
index bff82a3ce..5c6a3323b 100644
--- a/tools/keepalived/keepalived/include/inet.h
+++ b/include/conf/inet.h
@@ -15,15 +15,15 @@
  * GNU General Public License for more details.
  *
  */
-#ifndef __DPVS_INET_H__
-#define __DPVS_INET_H__
+#ifndef __DPVS_INET_CONF_H__
+#define __DPVS_INET_CONF_H__
 #include <stdio.h>
 #include <stdlib.h>
 #include <stdbool.h>
 #include <string.h>
 #include <netinet/in.h>
 #include <arpa/inet.h>
-#include "common.h"
+#include "conf/common.h"
 
 #define INET_DEF_TTL        64
 
@@ -86,7 +86,7 @@ struct inet_stats {
 
 static inline const char *inet_proto_name(uint8_t proto)
 {
-    static const char *proto_names[256] = {
+    const static char *proto_names[256] = {
         [IPPROTO_TCP]     = "TCP",
         [IPPROTO_UDP]     = "UDP",
         [IPPROTO_ICMP]    = "ICMP",
@@ -98,7 +98,7 @@ static inline const char *inet_proto_name(uint8_t proto)
 
 static inline uint32_t inet_addr_fold(int af, const union inet_addr *addr)
 {
-    uint32_t addr_fold = 0; 
+    uint32_t addr_fold = 0;
 
     if (af == AF_INET) {
         addr_fold = addr->in.s_addr;
@@ -109,7 +109,7 @@ static inline uint32_t inet_addr_fold(int af, const union inet_addr *addr)
         return 0;
     }
 
-    return addr_fold; 
+    return addr_fold;
 }
 
 /* ip1[-ip2][:port1[-port2]] */
@@ -258,81 +258,4 @@ static inline void inet_stats_dump(const char *title, const char *prefix,
     printf("%s%-18s %lu\n", prefix ? : "", "InCEPkts:", st->cepkts);
 }
 
-#ifdef __DPVS__
-#include "dpdk.h"
-#include "netif.h"
-/*
- * Inet Hooks
- */
-enum {
-    INET_HOOK_PRE_ROUTING,
-    INET_HOOK_LOCAL_IN,
-    INET_HOOK_FORWARD,
-    INET_HOOK_LOCAL_OUT,
-    INET_HOOK_POST_ROUTING,
-    INET_HOOK_NUMHOOKS,
-};
-
-struct inet_hook_state {
-    unsigned int        hook;
-} __rte_cache_aligned;
-
-enum {
-    INET_DROP           = 0,
-    INET_ACCEPT,
-    INET_STOLEN,
-    INET_REPEAT,
-    INET_STOP,
-    INET_VERDICT_NUM,
-};
-
-typedef int (*inet_hook_fn)(void *priv, struct rte_mbuf *mbuf,
-                            const struct inet_hook_state *state);
-
-struct inet_hook_ops {
-    inet_hook_fn        hook;
-    unsigned int        hooknum;
-    int                 af;
-    void                *priv;
-    int                 priority;
-
-    struct list_head    list;
-};
-
-struct netif_port;
-
-int INET_HOOK(int af, unsigned int hook, struct rte_mbuf *mbuf,
-              struct netif_port *in, struct netif_port *out,
-              int (*okfn)(struct rte_mbuf *mbuf));
-
-int inet_init(void);
-int inet_term(void);
-
-bool inet_addr_equal(int af, const union inet_addr *a1, 
-                     const union inet_addr *a2);
-
-const char *inet_proto_name(uint8_t proto);
-
-bool inet_is_addr_any(int af, const union inet_addr *addr);
-
-int inet_plen_to_mask(int af, uint8_t plen, union inet_addr *mask);
-
-int inet_addr_net(int af, const union inet_addr *addr, 
-                  const union inet_addr *mask,
-                  union inet_addr *net);
-
-bool inet_addr_same_net(int af, uint8_t plen,
-                        const union inet_addr *addr1,
-                        const union inet_addr *addr2);
-
-int inet_addr_range_dump(int af, const struct inet_addr_range *range,
-                         char *buf, size_t size);
-
-int inet_register_hooks(struct inet_hook_ops *reg, size_t n);
-int inet_unregister_hooks(struct inet_hook_ops *reg, size_t n);
-
-void inet_stats_add(struct inet_stats *stats, const struct inet_stats *diff);
-
-#endif /* __DPVS__ */
-
-#endif /* __DPVS_INET_H__ */
+#endif /* __DPVS_INET_CONF_H__ */
diff --git a/include/conf/ip_tunnel.h b/include/conf/ip_tunnel.h
new file mode 100644
index 000000000..fd1964231
--- /dev/null
+++ b/include/conf/ip_tunnel.h
@@ -0,0 +1,71 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+/*
+ * dpvs IPv4 tunnel common codes.
+ * refer linux:include/net/ip_tunnels.h
+ *       linux:include/uapi/linux/if_tunnel.h
+ *
+ * raychen@qiyi.com, Dec 2017, initial.
+ */
+#ifndef __DPVS_TUNNEL_CONF_H__
+#define __DPVS_TUNNEL_CONF_H__
+#include <net/if.h>
+#include <netinet/ip.h>
+#include <endian.h>
+
+#define TNLKINDSIZ              16
+
+#define TUNNEL_F_CSUM           htobe16(0x01)
+#define TUNNEL_F_ROUTING        htobe16(0x02)
+#define TUNNEL_F_KEY            htobe16(0x04)
+#define TUNNEL_F_SEQ            htobe16(0x08)
+#define TUNNEL_F_STRICT         htobe16(0x10)
+#define TUNNEL_F_REC            htobe16(0x20)
+#define TUNNEL_F_VERSION        htobe16(0x40)
+#define TUNNEL_F_NO_KEY         htobe16(0x80)
+#define TUNNEL_F_DONT_FRAGMENT  htobe16(0x0100)
+#define TUNNEL_F_OAM            htobe16(0x0200)
+#define TUNNEL_F_CRIT_OPT       htobe16(0x0400)
+#define TUNNEL_F_GENEVE_OPT     htobe16(0x0800)
+#define TUNNEL_F_VXLAN_OPT      htobe16(0x1000)
+#define TUNNEL_F_NOCACHE        htobe16(0x2000)
+#define TUNNEL_F_ERSPAN_OPT     htobe16(0x4000)
+
+enum {
+    /* set */
+    SOCKOPT_TUNNEL_ADD          = 1000,
+    SOCKOPT_TUNNEL_DEL,
+    SOCKOPT_TUNNEL_CHANGE,
+    SOCKOPT_TUNNEL_REPLACE,
+
+    /* get */
+    SOCKOPT_TUNNEL_SHOW,
+};
+
+struct ip_tunnel_param {
+    char            ifname[IFNAMSIZ];
+    char            kind[TNLKINDSIZ];
+    char            link[IFNAMSIZ];
+    __be16          i_flags;
+    __be16          o_flags;
+    __be32          i_key;
+    __be32          o_key;
+    struct iphdr    iph;
+} __attribute__((__packed__));
+
+#endif /* __DPVS_TUNNEL_CONF_H__ */
diff --git a/include/match.h b/include/conf/match.h
similarity index 100%
rename from include/match.h
rename to include/conf/match.h
diff --git a/include/conf/service.h b/include/conf/service.h
new file mode 100644
index 000000000..741fc0cac
--- /dev/null
+++ b/include/conf/service.h
@@ -0,0 +1,139 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_SVC_CONF_H__
+#define __DPVS_SVC_CONF_H__
+
+#include <stdint.h>
+#include <net/if.h>
+#include "inet.h"
+#include "conf/match.h"
+#include "conf/stats.h"
+#include "conf/dest.h"
+
+#define DP_VS_SCHEDNAME_MAXLEN      16
+
+struct dp_vs_service_conf {
+    /* virtual service addresses */
+    uint16_t            af;
+    uint16_t            protocol;
+    union inet_addr     addr;       /* virtual ip address */
+    uint16_t            port;
+    uint32_t            fwmark;     /* firwall mark of service */
+    struct dp_vs_match  match;
+
+    /* virtual service options */
+    char                *sched_name;
+    unsigned            flags;     /* virtual service flags */
+    unsigned            timeout;   /* persistent timeout in sec */
+    unsigned            conn_timeout;
+    uint32_t            netmask;        /* persistent netmask */
+    unsigned            bps;
+    unsigned            limit_proportion;
+};
+
+struct dp_vs_service_entry {
+    int                 af;
+    uint16_t            proto;
+    union inet_addr     addr;
+    uint16_t            port;
+    uint32_t            fwmark;
+
+    char                sched_name[DP_VS_SCHEDNAME_MAXLEN];
+    unsigned            flags;
+    unsigned            timeout;
+    unsigned            conn_timeout;
+    uint32_t            netmask;
+    unsigned            bps;
+    unsigned            limit_proportion;
+
+    unsigned int        num_dests;
+    unsigned int        num_laddrs;
+    lcoreid_t           cid;
+
+    struct dp_vs_stats  stats;
+
+    char                srange[256];
+    char                drange[256];
+    char                iifname[IFNAMSIZ];
+    char                oifname[IFNAMSIZ];
+};
+
+struct dp_vs_get_services {
+    lcoreid_t     cid;
+    unsigned int        num_services;
+    struct dp_vs_service_entry entrytable[0];
+};
+
+struct dp_vs_service_user {
+    int               af;
+    uint16_t          proto;
+    union inet_addr   addr;
+    uint16_t          port;
+    uint32_t          fwmark;
+
+    char              sched_name[DP_VS_SCHEDNAME_MAXLEN];
+    unsigned          flags;
+    unsigned          timeout;
+    unsigned          conn_timeout;
+    uint32_t          netmask;
+    unsigned          bps;
+    unsigned          limit_proportion;
+
+    char              srange[256];
+    char              drange[256];
+    char              iifname[IFNAMSIZ];
+    char              oifname[IFNAMSIZ];
+};
+
+struct dp_vs_getinfo {
+    unsigned int version;
+    unsigned int size;
+    unsigned int num_services;
+    unsigned int num_lcores;
+};
+
+enum{
+    DPVS_SO_SET_FLUSH = 200,
+    DPVS_SO_SET_ZERO,
+    DPVS_SO_SET_ADD,
+    DPVS_SO_SET_EDIT,
+    DPVS_SO_SET_DEL,
+    DPVS_SO_SET_ADDDEST,
+    DPVS_SO_SET_EDITDEST,
+    DPVS_SO_SET_DELDEST,
+    DPVS_SO_SET_GRATARP,
+};
+
+enum{
+    DPVS_SO_GET_VERSION = 200,
+    DPVS_SO_GET_INFO,
+    DPVS_SO_GET_SERVICES,
+    DPVS_SO_GET_SERVICE,
+    DPVS_SO_GET_DESTS,
+};
+
+
+#define SOCKOPT_SVC_BASE         DPVS_SO_SET_FLUSH
+#define SOCKOPT_SVC_SET_CMD_MAX  DPVS_SO_SET_GRATARP
+#define SOCKOPT_SVC_GET_CMD_MAX  DPVS_SO_GET_DESTS
+#define SOCKOPT_SVC_MAX          299
+
+#define MAX_ARG_LEN    (sizeof(struct dp_vs_service_user) +    \
+                         sizeof(struct dp_vs_dest_user))
+
+#endif /* __DPVS_SVC_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/proto_udp.h b/include/conf/stats.h
similarity index 63%
rename from tools/keepalived/keepalived/include/ipvs/proto_udp.h
rename to include/conf/stats.h
index 8b28c6b71..a6cfbb044 100644
--- a/tools/keepalived/keepalived/include/ipvs/proto_udp.h
+++ b/include/conf/stats.h
@@ -15,22 +15,21 @@
  * GNU General Public License for more details.
  *
  */
-#ifndef __DP_VS_PROTO_UDP_H__
-#define __DP_VS_PROTO_UDP_H__
+#ifndef __DPVS_STATS_CONF_H__
+#define __DPVS_STATS_CONF_H__
 
-#include <netinet/udp.h>
+struct dp_vs_stats {
+    uint64_t            conns;
+    uint64_t            inpkts;
+    uint64_t            inbytes;
+    uint64_t            outpkts;
+    uint64_t            outbytes;
 
-enum {
-    DPVS_UDP_S_NORMAL   = 0,
-    DPVS_UDP_S_LAST
+    uint32_t cps;
+    uint32_t inpps;
+    uint32_t inbps;
+    uint32_t outpps;
+    uint32_t outbps;
 };
 
-extern int g_defence_udp_drop;
-
-void install_proto_udp_keywords(void);
-void udp_keyword_value_init(void);
-
-void udp4_send_csum(struct ipv4_hdr *iph, struct udp_hdr *uh);
-void udp6_send_csum(struct ipv6_hdr *iph, struct udp_hdr *uh);
-
-#endif
+#endif /* __DPVS_STATS_CONF_H__ */
diff --git a/include/ctrl.h b/include/ctrl.h
index 9010b25bb..3d794fe57 100644
--- a/include/ctrl.h
+++ b/include/ctrl.h
@@ -19,7 +19,7 @@
 #define __DPVS_MSGMGR_H__
 
 #include "global_data.h"
-#include "common.h"
+#include "conf/common.h"
 #include "list.h"
 #include "dpdk.h"
 
diff --git a/include/flow.h b/include/flow.h
index 27ee06fd8..6295a9829 100644
--- a/include/flow.h
+++ b/include/flow.h
@@ -24,38 +24,11 @@
 #ifndef __DPVS_FLOW_H__
 #define __DPVS_FLOW_H__
 
-#ifdef __DPVS__
-#include "common.h"
+#include "conf/common.h"
+#include "conf/flow.h"
 #include "netif.h"
 #include "inet.h"
-#endif
 
-/* linux:include/uapi/route.h */
-#define RTF_UP          0x0001      /* route usable                 */
-#define RTF_GATEWAY     0x0002      /* destination is a gateway     */
-#define RTF_HOST        0x0004      /* host entry (net otherwise)   */
-#define RTF_REINSTATE   0x0008      /* reinstate route after tmout  */
-#define RTF_DYNAMIC     0x0010      /* created dyn. (by redirect)   */
-#define RTF_MODIFIED    0x0020      /* modified dyn. (by redirect)  */
-#define RTF_MTU         0x0040      /* specific MTU for this route  */
-#define RTF_MSS         RTF_MTU     /* Compatibility :-(            */
-#define RTF_WINDOW      0x0080      /* per route window clamping    */
-#define RTF_IRTT        0x0100      /* Initial round trip time      */
-#define RTF_REJECT      0x0200      /* Reject route                 */
-
-/* dpvs defined. */
-#define RTF_FORWARD     0x0400
-#define RTF_LOCALIN     0x0800
-#define RTF_DEFAULT     0x1000
-#define RTF_KNI         0X2000
-#define RTF_OUTWALL     0x4000
-
-struct rt6_prefix {
-    struct in6_addr     addr;
-    int                 plen;
-};
-
-#ifdef __DPVS__
 /* common flow info of upper layer (l4) */
 union flow_ul {
     struct {
@@ -122,5 +95,4 @@ struct flow6 {
 #define fl6_dport       __fl_ul.ports.dport
 };
 
-#endif /* __DPVS__ */
 #endif /* __DPVS_FLOW_H__ */
diff --git a/include/global_conf.h b/include/global_conf.h
index 451e68d03..2d7380465 100644
--- a/include/global_conf.h
+++ b/include/global_conf.h
@@ -19,7 +19,7 @@
 #define __GLOBAL_CONF_H__
 
 #include <unistd.h>
-#include "common.h"
+#include "conf/common.h"
 #include "parser/parser.h"
 #include "dpdk.h"
 
diff --git a/include/global_data.h b/include/global_data.h
index 7f9302bc4..dab9f698d 100644
--- a/include/global_data.h
+++ b/include/global_data.h
@@ -19,7 +19,7 @@
 #ifndef __GLOBAL_DATA_H__
 #define __GLOBAL_DATA_H__
 
-#include "common.h"
+#include "conf/common.h"
 
 typedef enum dpvs_lcore_role_type {
     LCORE_ROLE_IDLE,
diff --git a/include/iftraf.h b/include/iftraf.h
index 628759a0f..6a084f61a 100644
--- a/include/iftraf.h
+++ b/include/iftraf.h
@@ -1,7 +1,24 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
 #ifndef __IFTRAF_H__
 #define __IFTRAF_H__
 
-#include "common.h"
+#include "conf/common.h"
 #include "list.h"
 #include "dpdk.h"
 #include "timer.h"
diff --git a/include/inet.h b/include/inet.h
index 1c1167fba..435c046de 100644
--- a/include/inet.h
+++ b/include/inet.h
@@ -23,244 +23,12 @@
 #include <string.h>
 #include <netinet/in.h>
 #include <arpa/inet.h>
-#include "common.h"
+#include "conf/common.h"
+#include "conf/inet.h"
 
-#define INET_DEF_TTL        64
-
-#define INET_MAX_PROTS      256     /* cannot change */
-
-union inet_addr {
-    struct in_addr      in;
-    struct in6_addr     in6;
-};
-
-struct inet_prefix {
-    int                 plen;
-    union inet_addr     addr;
-};
-
-struct inet_addr_range {
-    union inet_addr     min_addr;
-    union inet_addr     max_addr;
-    __be16              min_port;
-    __be16              max_port;
-};
-
-struct inet_stats {
-    uint64_t inpkts;            /* InReceives */
-    uint64_t inoctets;          /* InOctets */
-    uint64_t indelivers;        /* InDelivers */
-    uint64_t outforwdatagrams;  /* OutForwDatagrams */
-    uint64_t outpkts;           /* OutRequests */
-    uint64_t outoctets;         /* OutOctets */
-    uint64_t inhdrerrors;       /* InHdrErrors */
-    uint64_t intoobigerrors;    /* InTooBigErrors */
-    uint64_t innoroutes;        /* InNoRoutes */
-    uint64_t inaddrerrors;      /* InAddrErrors */
-    uint64_t inunknownprotos;   /* InUnknownProtos */
-    uint64_t intruncatedpkts;   /* InTruncatedPkts */
-    uint64_t indiscards;        /* InDiscards */
-    uint64_t outdiscards;       /* OutDiscards */
-    uint64_t outnoroutes;       /* OutNoRoutes */
-    uint64_t reasmtimeout;      /* ReasmTimeout */
-    uint64_t reasmreqds;        /* ReasmReqds */
-    uint64_t reasmoks;          /* ReasmOKs */
-    uint64_t reasmfails;        /* ReasmFails */
-    uint64_t fragoks;           /* FragOKs */
-    uint64_t fragfails;         /* FragFails */
-    uint64_t fragcreates;       /* FragCreates */
-    uint64_t inmcastpkts;       /* InMcastPkts */
-    uint64_t outmcastpkts;      /* OutMcastPkts */
-    uint64_t inbcastpkts;       /* InBcastPkts */
-    uint64_t outbcastpkts;      /* OutBcastPkts */
-    uint64_t inmcastoctets;     /* InMcastOctets */
-    uint64_t outmcastoctets;    /* OutMcastOctets */
-    uint64_t inbcastoctets;     /* InBcastOctets */
-    uint64_t outbcastoctets;    /* OutBcastOctets */
-    uint64_t csumerrors;        /* InCsumErrors */
-    uint64_t noectpkts;         /* InNoECTPkts */
-    uint64_t ect1pkts;          /* InECT1Pkts */
-    uint64_t ect0pkts;          /* InECT0Pkts */
-    uint64_t cepkts;            /* InCEPkts */
-};
-
-static inline const char *inet_proto_name(uint8_t proto)
-{
-    const static char *proto_names[256] = {
-        [IPPROTO_TCP]     = "TCP",
-        [IPPROTO_UDP]     = "UDP",
-        [IPPROTO_ICMP]    = "ICMP",
-        [IPPROTO_ICMPV6]  = "ICMPV6",
-    };
-
-    return proto_names[proto] ? proto_names[proto] : "<unknow>";
-}
-
-static inline uint32_t inet_addr_fold(int af, const union inet_addr *addr)
-{
-    uint32_t addr_fold = 0;
-
-    if (af == AF_INET) {
-        addr_fold = addr->in.s_addr;
-    } else if (af == AF_INET6) {
-        addr_fold = addr->in6.s6_addr32[0] ^ addr->in6.s6_addr32[1] ^
-                    addr->in6.s6_addr32[2] ^ addr->in6.s6_addr32[3];
-    } else {
-        return 0;
-    }
-
-    return addr_fold;
-}
-
-/* ip1[-ip2][:port1[-port2]] */
-static inline int inet_addr_range_parse(const char *param,
-                                        struct inet_addr_range *range,
-                                        int *af)
-{
-    char _param[256], *ips, *ports = NULL;
-    char *ip1, *ip2, *port1, *port2;
-
-    if (strlen(param) == 0)
-        return EDPVS_OK; /* return asap */
-
-    snprintf(_param, sizeof(_param), "%s", param);
-
-    ips = _param;
-    if (_param[0] == '[') {
-        ips++;
-        ports = strrchr(_param, ']');
-        if (ports == NULL)
-            return EDPVS_INVAL;
-        *ports++ = '\0';
-        if (*ports == ':')
-            *ports++ = '\0';
-        else
-            return EDPVS_INVAL;
-    }
-
-    /* judge ipv4 */
-    if (strrchr(_param, ':') == strchr(_param, ':')) {
-        ports = strrchr(_param, ':');
-        if (ports)
-            *ports++ = '\0';
-    }
-
-    ip1 = ips;
-    ip2 = strrchr(ips, '-');
-    if (ip2)
-        *ip2++ = '\0';
-
-    if (ports) {
-        port1 = ports;
-        port2 = strrchr(ports, '-');
-        if (port2)
-            *port2++ = '\0';
-    } else {
-        port1 = port2 = NULL;
-    }
-
-    memset(range, 0, sizeof(*range));
-
-    if (strlen(ip1) && inet_pton(AF_INET6, ip1, &range->min_addr.in6) > 0) {
-        if (ip2 && strlen(ip2)) {
-            if (inet_pton(AF_INET6, ip2, &range->max_addr.in6) <= 0)
-                return EDPVS_INVAL;
-        } else {
-            range->max_addr = range->min_addr;
-        }
-        *af = AF_INET6;
-    } else {
-        if (strlen(ip1) && inet_pton(AF_INET, ip1, &range->min_addr.in) <= 0)
-            return EDPVS_INVAL;
-
-        if (ip2 && strlen(ip2)) {
-           if (inet_pton(AF_INET, ip2, &range->max_addr.in) <= 0)
-               return EDPVS_INVAL;
-        } else {
-            range->max_addr = range->min_addr;
-        }
-        *af = AF_INET;
-    }
-
-    if (port1 && strlen(port1))
-        range->min_port = htons(atoi(port1));
-
-    if (port2 && strlen(port2))
-        range->max_port = htons(atoi(port2));
-    else
-        range->max_port = range->min_port;
-
-    return EDPVS_OK;
-}
-
-static inline int inet_addr_range_dump(int af,
-                                       const struct inet_addr_range *range,
-                                       char *buf, size_t size)
-{
-    char min_ip[64], max_ip[64];
-    char min_port[16], max_port[16];
-
-    inet_ntop(af, &range->min_addr, min_ip, sizeof(min_ip));
-    inet_ntop(af, &range->max_addr, max_ip, sizeof(max_ip));
-    snprintf(min_port, sizeof(min_port), "%u",  ntohs(range->min_port));
-    snprintf(max_port, sizeof(max_port), "%u",  ntohs(range->max_port));
-
-    if (af == AF_INET)
-        return snprintf(buf, size, "%s-%s:%s-%s",
-                    min_ip, max_ip, min_port, max_port);
-    return snprintf(buf, size, "[%s-%s]:%s-%s",
-                    min_ip, max_ip, min_port, max_port);
-}
-
-static inline void inet_stats_dump(const char *title, const char *prefix,
-                                   const struct inet_stats *st)
-{
-    if (!st)
-        return;
-
-    if (title)
-        printf("%s\n", title);
-
-    printf("%s%-18s %lu\n", prefix ? : "", "InReceives:", st->inpkts);
-    printf("%s%-18s %lu\n", prefix ? : "", "InOctets:", st->inoctets);
-    printf("%s%-18s %lu\n", prefix ? : "", "InDelivers:", st->indelivers);
-    printf("%s%-18s %lu\n", prefix ? : "", "OutForwDatagrams:", st->outforwdatagrams);
-    printf("%s%-18s %lu\n", prefix ? : "", "OutRequests:", st->outpkts);
-    printf("%s%-18s %lu\n", prefix ? : "", "OutOctets:", st->outoctets);
-    printf("%s%-18s %lu\n", prefix ? : "", "InHdrErrors:", st->inhdrerrors);
-    printf("%s%-18s %lu\n", prefix ? : "", "InTooBigErrors:", st->intoobigerrors);
-    printf("%s%-18s %lu\n", prefix ? : "", "InNoRoutes:", st->innoroutes);
-    printf("%s%-18s %lu\n", prefix ? : "", "InAddrErrors:", st->inaddrerrors);
-    printf("%s%-18s %lu\n", prefix ? : "", "InUnknownProtos:", st->inunknownprotos);
-    printf("%s%-18s %lu\n", prefix ? : "", "InTruncatedPkts:", st->intruncatedpkts);
-    printf("%s%-18s %lu\n", prefix ? : "", "InDiscards:", st->indiscards);
-    printf("%s%-18s %lu\n", prefix ? : "", "OutDiscards:", st->outdiscards);
-    printf("%s%-18s %lu\n", prefix ? : "", "OutNoRoutes:", st->outnoroutes);
-    printf("%s%-18s %lu\n", prefix ? : "", "ReasmTimeout:", st->reasmtimeout);
-    printf("%s%-18s %lu\n", prefix ? : "", "ReasmReqds:", st->reasmreqds);
-    printf("%s%-18s %lu\n", prefix ? : "", "ReasmOKs:", st->reasmoks);
-    printf("%s%-18s %lu\n", prefix ? : "", "ReasmFails:", st->reasmfails);
-    printf("%s%-18s %lu\n", prefix ? : "", "FragOKs:", st->fragoks);
-    printf("%s%-18s %lu\n", prefix ? : "", "FragFails:", st->fragfails);
-    printf("%s%-18s %lu\n", prefix ? : "", "FragCreates:", st->fragcreates);
-    printf("%s%-18s %lu\n", prefix ? : "", "InMcastPkts:", st->inmcastpkts);
-    printf("%s%-18s %lu\n", prefix ? : "", "OutMcastPkts:", st->outmcastpkts);
-    printf("%s%-18s %lu\n", prefix ? : "", "InBcastPkts:", st->inbcastpkts);
-    printf("%s%-18s %lu\n", prefix ? : "", "OutBcastPkts:", st->outbcastpkts);
-    printf("%s%-18s %lu\n", prefix ? : "", "InMcastOctets:", st->inmcastoctets);
-    printf("%s%-18s %lu\n", prefix ? : "", "OutMcastOctets:", st->outmcastoctets);
-    printf("%s%-18s %lu\n", prefix ? : "", "InBcastOctets:", st->inbcastoctets);
-    printf("%s%-18s %lu\n", prefix ? : "", "OutBcastOctets:", st->outbcastoctets);
-    printf("%s%-18s %lu\n", prefix ? : "", "InCsumErrors:", st->csumerrors);
-    printf("%s%-18s %lu\n", prefix ? : "", "InNoECTPkts:", st->noectpkts);
-    printf("%s%-18s %lu\n", prefix ? : "", "InECT1Pkts:", st->ect1pkts);
-    printf("%s%-18s %lu\n", prefix ? : "", "InECT0Pkts:", st->ect0pkts);
-    printf("%s%-18s %lu\n", prefix ? : "", "InCEPkts:", st->cepkts);
-}
-
-#ifdef __DPVS__
 #include "dpdk.h"
 #include "netif.h"
+
 /*
  * Inet Hooks
  */
@@ -333,6 +101,4 @@ int inet_unregister_hooks(struct inet_hook_ops *reg, size_t n);
 
 void inet_stats_add(struct inet_stats *stats, const struct inet_stats *diff);
 
-#endif /* __DPVS__ */
-
 #endif /* __DPVS_INET_H__ */
diff --git a/include/ip_tunnel.h b/include/ip_tunnel.h
index e3b9c5f85..92568fcbb 100644
--- a/include/ip_tunnel.h
+++ b/include/ip_tunnel.h
@@ -27,53 +27,10 @@
 #include <net/if.h>
 #include <netinet/ip.h>
 #include <endian.h>
-#if defined(__DPVS__)
+#include "conf/ip_tunnel.h"
 #include "list.h"
 #include "netif.h"
 #include "route.h"
-#endif
-
-#define TNLKINDSIZ              16
-
-#define TUNNEL_F_CSUM           htobe16(0x01)
-#define TUNNEL_F_ROUTING        htobe16(0x02)
-#define TUNNEL_F_KEY            htobe16(0x04)
-#define TUNNEL_F_SEQ            htobe16(0x08)
-#define TUNNEL_F_STRICT         htobe16(0x10)
-#define TUNNEL_F_REC            htobe16(0x20)
-#define TUNNEL_F_VERSION        htobe16(0x40)
-#define TUNNEL_F_NO_KEY         htobe16(0x80)
-#define TUNNEL_F_DONT_FRAGMENT  htobe16(0x0100)
-#define TUNNEL_F_OAM            htobe16(0x0200)
-#define TUNNEL_F_CRIT_OPT       htobe16(0x0400)
-#define TUNNEL_F_GENEVE_OPT     htobe16(0x0800)
-#define TUNNEL_F_VXLAN_OPT      htobe16(0x1000)
-#define TUNNEL_F_NOCACHE        htobe16(0x2000)
-#define TUNNEL_F_ERSPAN_OPT     htobe16(0x4000)
-
-enum {
-    /* set */
-    SOCKOPT_TUNNEL_ADD          = 1000,
-    SOCKOPT_TUNNEL_DEL,
-    SOCKOPT_TUNNEL_CHANGE,
-    SOCKOPT_TUNNEL_REPLACE,
-
-    /* get */
-    SOCKOPT_TUNNEL_SHOW,
-};
-
-struct ip_tunnel_param {
-    char            ifname[IFNAMSIZ];
-    char            kind[TNLKINDSIZ];
-    char            link[IFNAMSIZ];
-    __be16          i_flags;
-    __be16          o_flags;
-    __be32          i_key;
-    __be32          o_key;
-    struct iphdr    iph;
-} __attribute__((__packed__));
-
-#if defined(__DPVS__)
 
 struct ip_tunnel_tab;
 
@@ -151,5 +108,4 @@ int ipip_term(void);
 int gre_init(void);
 int gre_term(void);
 
-#endif /* __DPVS__ */
 #endif /* __DPVS_TUNNEL_H__ */
diff --git a/include/ipset.h b/include/ipset.h
index 9f9ab01eb..1e8db9a4c 100644
--- a/include/ipset.h
+++ b/include/ipset.h
@@ -24,7 +24,7 @@
 
 #include "list.h"
 #include "netif.h"
-#include "common.h"
+#include "conf/common.h"
 #include "flow.h"
 
 #define RTE_LOGTYPE_IPSET       RTE_LOGTYPE_USER1
diff --git a/include/ipv4.h b/include/ipv4.h
index d708dea64..055fdb50f 100644
--- a/include/ipv4.h
+++ b/include/ipv4.h
@@ -18,7 +18,7 @@
 #ifndef __DPVS_IPV4_H__
 #define __DPVS_IPV4_H__
 #include <stdint.h>
-#include "common.h"
+#include "conf/common.h"
 #include "inet.h"
 #include "netif.h"
 #include "route.h"
diff --git a/include/ipvs/blklst.h b/include/ipvs/blklst.h
index 96d035e55..10ab86d42 100644
--- a/include/ipvs/blklst.h
+++ b/include/ipvs/blklst.h
@@ -17,7 +17,7 @@
  */
 #ifndef __DPVS_BLKLST_H__
 #define __DPVS_BLKLST_H__
-#include "common.h"
+#include "conf/common.h"
 #include "ipvs/service.h"
 #include "timer.h"
 
diff --git a/include/ipvs/conn.h b/include/ipvs/conn.h
index bfb07cfdc..9306e11ec 100644
--- a/include/ipvs/conn.h
+++ b/include/ipvs/conn.h
@@ -18,7 +18,7 @@
 #ifndef __DPVS_CONN_H__
 #define __DPVS_CONN_H__
 #include <arpa/inet.h>
-#include "common.h"
+#include "conf/common.h"
 #include "list.h"
 #include "dpdk.h"
 #include "timer.h"
diff --git a/include/ipvs/dest.h b/include/ipvs/dest.h
index 86f7fbdec..6da5788e1 100644
--- a/include/ipvs/dest.h
+++ b/include/ipvs/dest.h
@@ -18,27 +18,10 @@
 #ifndef __DPVS_DEST_H__
 #define __DPVS_DEST_H__
 
+#include "conf/dest.h"
 #include "ipvs/service.h"
 
-/* must consistent with IP_VS_CONN_F_XXX (libipvs-2.6/ip_vs.h) */
-enum dpvs_fwd_mode {
-    DPVS_FWD_MASQ           = 0,
-    DPVS_FWD_LOCALNODE      = 1,
-    DPVS_FWD_MODE_TUNNEL    = 2,
-    DPVS_FWD_MODE_DR        = 3,
-    DPVS_FWD_MODE_BYPASS    = 4,
-    DPVS_FWD_MODE_FNAT      = 5,
-    DPVS_FWD_MODE_NAT       = DPVS_FWD_MASQ,
-    DPVS_FWD_MODE_SNAT      = 6,
-};
-
-enum {
-    DPVS_DEST_F_AVAILABLE       = 0x1<<0,
-    DPVS_DEST_F_OVERLOAD        = 0x1<<1,
-};
-
-#ifdef __DPVS__
-#include "common.h"
+#include "conf/common.h"
 #include "list.h"
 #include "dpdk.h"
 
@@ -79,77 +62,7 @@ struct dp_vs_dest {
     unsigned            conn_timeout; /* conn timeout copied from svc*/
     unsigned            limit_proportion; /* limit copied from svc*/
 } __rte_cache_aligned;
-#endif
-
-struct dp_vs_dest_conf {
-    /* destination server address */
-    int                af;
-    union inet_addr    addr;
-    uint16_t           port;
-
-    enum dpvs_fwd_mode fwdmode;
-    /* real server options */
-    unsigned           conn_flags;    /* connection flags */
-    int                weight;     /* destination weight */
-
-    /* thresholds for active connections */
-    uint32_t           max_conn;    /* upper threshold */
-    uint32_t           min_conn;    /* lower threshold */
-};
-
-struct dp_vs_dest_entry {
-    int             af;
-    union inet_addr addr;        /* destination address */
-    uint16_t        port;
-    unsigned        conn_flags;    /* connection flags */
-    int             weight;     /* destination weight */
-
-    uint32_t        max_conn;  /* upper threshold */
-    uint32_t        min_conn;  /* lower threshold */
-
-    uint32_t        actconns;  /* active connections */
-    uint32_t        inactconns;   /* inactive connections */
-    uint32_t        persistconns; /* persistent connections */
-
-    /* statistics */
-    struct dp_vs_stats stats;
-};
-
-struct dp_vs_get_dests {
-    /* which service: user fills in these */
-    int              af;
-    uint16_t         proto;
-    union inet_addr  addr;        /* virtual address */
-    uint16_t         port;
-    uint32_t         fwmark;       /* firwall mark of service */
-
-    /* number of real servers */
-    unsigned int num_dests;
-
-    lcoreid_t        cid;
-
-    char        srange[256];
-    char        drange[256];
-    char        iifname[IFNAMSIZ];
-    char        oifname[IFNAMSIZ];
-
-    /* the real servers */
-    struct dp_vs_dest_entry entrytable[0];
-};
-
-struct dp_vs_dest_user{
-    int             af;
-    union inet_addr addr;
-    uint16_t        port;
-
-    unsigned        conn_flags;
-    int             weight;
-
-    uint32_t        max_conn;
-    uint32_t        min_conn;
-};
-
-#ifdef __DPVS__
+
 static inline bool
 dp_vs_dest_is_avail(struct dp_vs_dest *dest)
 {
@@ -200,6 +113,5 @@ int dp_vs_get_dest_entries(const struct dp_vs_service *svc,
 int dp_vs_dest_init(void);
 
 int dp_vs_dest_term(void);
-#endif
 
 #endif /* __DPVS_DEST_H__ */
diff --git a/include/ipvs/ipvs.h b/include/ipvs/ipvs.h
index 25fe15750..d0dc3c377 100644
--- a/include/ipvs/ipvs.h
+++ b/include/ipvs/ipvs.h
@@ -17,7 +17,7 @@
  */
 #ifndef __DPVS_IPVS_H__
 #define __DPVS_IPVS_H__
-#include "common.h"
+#include "conf/common.h"
 #include "inet.h"
 #include "ipvs/service.h"
 
diff --git a/include/ipvs/laddr.h b/include/ipvs/laddr.h
index 9dbc830c7..682b8b0ad 100644
--- a/include/ipvs/laddr.h
+++ b/include/ipvs/laddr.h
@@ -17,7 +17,7 @@
  */
 #ifndef __DPVS_LADDR_H__
 #define __DPVS_LADDR_H__
-#include "common.h"
+#include "conf/common.h"
 #include "ipvs/conn.h"
 #include "ipvs/service.h"
 
diff --git a/include/ipvs/proto.h b/include/ipvs/proto.h
index bf3fb0821..f7690546e 100644
--- a/include/ipvs/proto.h
+++ b/include/ipvs/proto.h
@@ -19,7 +19,7 @@
 #define __DPVS_PROTO_H__
 #include "list.h"
 #include "dpdk.h"
-#include "common.h"
+#include "conf/common.h"
 #include "ipvs/ipvs.h"
 #include "ipvs/conn.h"
 
diff --git a/include/ipvs/redirect.h b/include/ipvs/redirect.h
index fe94dd922..8f0ce60ec 100644
--- a/include/ipvs/redirect.h
+++ b/include/ipvs/redirect.h
@@ -17,7 +17,7 @@
  */
 #ifndef __DPVS_REDIRECT_H__
 #define __DPVS_REDIRECT_H__
-#include "common.h"
+#include "conf/common.h"
 #include "list.h"
 #include "dpdk.h"
 #include "netif.h"
diff --git a/include/ipvs/sched.h b/include/ipvs/sched.h
index a8af48c85..88bbcf8bb 100644
--- a/include/ipvs/sched.h
+++ b/include/ipvs/sched.h
@@ -19,7 +19,7 @@
 #define __DPVS_SCHED_H__
 #include "list.h"
 #include "dpdk.h"
-#include "common.h"
+#include "conf/common.h"
 #include "ctrl.h"
 #include "ipvs/service.h"
 
diff --git a/include/ipvs/service.h b/include/ipvs/service.h
index b25b7841f..10faee647 100644
--- a/include/ipvs/service.h
+++ b/include/ipvs/service.h
@@ -20,19 +20,16 @@
 
 #include <stdint.h>
 #include <net/if.h>
-#include "match.h"
 #include "ipvs/stats.h"
 #include "ipvs/dest.h"
 #include "inet.h"
-
-#define DP_VS_SCHEDNAME_MAXLEN      16
-
-#ifdef __DPVS__
 #include "list.h"
 #include "dpdk.h"
 #include "netif.h"
 #include "ipvs/ipvs.h"
 #include "ipvs/sched.h"
+#include "conf/match.h"
+#include "conf/service.h"
 
 #define RTE_LOGTYPE_SERVICE RTE_LOGTYPE_USER3
 #define DP_VS_SVC_F_PERSISTENT      0x0001      /* peristent port */
@@ -88,89 +85,8 @@ struct dp_vs_service {
 
     /* ... flags, timer ... */
 } __rte_cache_aligned;
-#endif
-
-struct dp_vs_service_conf {
-    /* virtual service addresses */
-    uint16_t            af;
-    uint16_t            protocol;
-    union inet_addr     addr;       /* virtual ip address */
-    uint16_t            port;
-    uint32_t            fwmark;     /* firwall mark of service */
-    struct dp_vs_match  match;
-
-    /* virtual service options */
-    char                *sched_name;
-    unsigned            flags;     /* virtual service flags */
-    unsigned            timeout;   /* persistent timeout in sec */
-    unsigned            conn_timeout;
-    uint32_t            netmask;        /* persistent netmask */
-    unsigned            bps;
-    unsigned            limit_proportion;
-};
-
-struct dp_vs_service_entry {
-    int                 af;
-    uint16_t            proto;
-    union inet_addr     addr;
-    uint16_t            port;
-    uint32_t            fwmark;
 
-    char                sched_name[DP_VS_SCHEDNAME_MAXLEN];
-    unsigned            flags;
-    unsigned            timeout;
-    unsigned            conn_timeout;
-    uint32_t            netmask;
-    unsigned            bps;
-    unsigned            limit_proportion;
-
-    unsigned int        num_dests;
-    unsigned int        num_laddrs;
-    lcoreid_t           cid;
 
-    struct dp_vs_stats  stats;
-
-    char                srange[256];
-    char                drange[256];
-    char                iifname[IFNAMSIZ];
-    char                oifname[IFNAMSIZ];
-};
-
-struct dp_vs_get_services {
-    lcoreid_t     cid;
-    unsigned int        num_services;
-    struct dp_vs_service_entry entrytable[0];
-};
-
-struct dp_vs_service_user{
-    int               af;
-    uint16_t          proto;
-    union inet_addr   addr;
-    uint16_t          port;
-    uint32_t          fwmark;
-
-    char              sched_name[DP_VS_SCHEDNAME_MAXLEN];
-    unsigned          flags;
-    unsigned          timeout;
-    unsigned          conn_timeout;
-    uint32_t          netmask;
-    unsigned          bps;
-    unsigned          limit_proportion;
-
-    char              srange[256];
-    char              drange[256];
-    char              iifname[IFNAMSIZ];
-    char              oifname[IFNAMSIZ];
-};
-
-struct dp_vs_getinfo {
-    unsigned int version;
-    unsigned int size;
-    unsigned int num_services;
-    unsigned int num_lcores;
-};
-
-#ifdef __DPVS__
 int dp_vs_service_init(void);
 int dp_vs_service_term(void);
 
@@ -198,34 +114,4 @@ struct dp_vs_service *dp_vs_lookup_vip(int af, uint16_t protocol,
 
 unsigned dp_vs_get_conn_timeout(struct dp_vs_conn *conn);
 
-#define MAX_ARG_LEN    (sizeof(struct dp_vs_service_user) +    \
-                         sizeof(struct dp_vs_dest_user))
-#endif
-
-enum{
-    DPVS_SO_SET_FLUSH = 200,
-    DPVS_SO_SET_ZERO,
-    DPVS_SO_SET_ADD,
-    DPVS_SO_SET_EDIT,
-    DPVS_SO_SET_DEL,
-    DPVS_SO_SET_ADDDEST,
-    DPVS_SO_SET_EDITDEST,
-    DPVS_SO_SET_DELDEST,
-    DPVS_SO_SET_GRATARP,
-};
-
-enum{
-    DPVS_SO_GET_VERSION = 200,
-    DPVS_SO_GET_INFO,
-    DPVS_SO_GET_SERVICES,
-    DPVS_SO_GET_SERVICE,
-    DPVS_SO_GET_DESTS,
-};
-
-
-#define SOCKOPT_SVC_BASE         DPVS_SO_SET_FLUSH
-#define SOCKOPT_SVC_SET_CMD_MAX  DPVS_SO_SET_GRATARP
-#define SOCKOPT_SVC_GET_CMD_MAX  DPVS_SO_GET_DESTS
-#define SOCKOPT_SVC_MAX          299
-
 #endif /* __DPVS_SVC_H__ */
diff --git a/include/ipvs/stats.h b/include/ipvs/stats.h
index fc6ecde3a..91fd760b9 100644
--- a/include/ipvs/stats.h
+++ b/include/ipvs/stats.h
@@ -17,25 +17,11 @@
  */
 #ifndef __DPVS_STATS_H__
 #define __DPVS_STATS_H__
-#include <stdint.h>
-#include "ipvs/service.h"
 
-struct dp_vs_stats {
-    uint64_t            conns;
-    uint64_t            inpkts;
-    uint64_t            inbytes;
-    uint64_t            outpkts;
-    uint64_t            outbytes;
-
-    uint32_t cps;
-    uint32_t inpps;
-    uint32_t inbps;
-    uint32_t outpps;
-    uint32_t outbps;
-};
-
-#ifdef __DPVS__
+#include <stdint.h>
 #include "dpdk.h"
+#include "conf/stats.h"
+#include "ipvs/service.h"
 
 struct dp_vs_conn;
 
@@ -110,6 +96,5 @@ uint64_t dp_vs_estats_get(enum dp_vs_estats_type field);
 int dp_vs_add_stats(struct dp_vs_stats* dst, struct dp_vs_stats* src);
 
 int dp_vs_copy_stats(struct dp_vs_stats* dst, struct dp_vs_stats* src);
-#endif
 
 #endif /* __DPVS_STATS_H__ */
diff --git a/include/linux_ipv6.h b/include/linux_ipv6.h
index 622bf0e3f..d95a4cc12 100644
--- a/include/linux_ipv6.h
+++ b/include/linux_ipv6.h
@@ -23,7 +23,7 @@
 #include <stdbool.h>
 #include <netinet/in.h>
 #include <linux/if_addr.h>
-#include "common.h"
+#include "conf/common.h"
 #ifdef __DPVS__
 #include "inetaddr.h"
 #endif
diff --git a/include/log.h b/include/log.h
index 257003561..a62c0e5ed 100644
--- a/include/log.h
+++ b/include/log.h
@@ -1,3 +1,20 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
 #ifndef _DPVS_LOG_H_
 #define _DPVS_LOG_H_
 
diff --git a/include/route.h b/include/route.h
index 7d61f1cf3..4e3f4307f 100644
--- a/include/route.h
+++ b/include/route.h
@@ -24,7 +24,7 @@
 
 #include "list.h"
 #include "netif.h"
-#include "common.h"
+#include "conf/common.h"
 #include "flow.h"
 
 struct route_entry {
diff --git a/include/tc/cls.h b/include/tc/cls.h
index 03a3be44a..23581c6d2 100644
--- a/include/tc/cls.h
+++ b/include/tc/cls.h
@@ -22,8 +22,8 @@
  */
 #ifndef __DPVS_TC_CLS_H__
 #define __DPVS_TC_CLS_H__
-#include "common.h"
-#include "match.h"
+#include "conf/common.h"
+#include "conf/match.h"
 #ifdef __DPVS__
 #include "dpdk.h"
 #endif /* __DPVS__ */
diff --git a/include/tc/sch.h b/include/tc/sch.h
index 156dd4f3d..49c5cd017 100644
--- a/include/tc/sch.h
+++ b/include/tc/sch.h
@@ -25,7 +25,7 @@
 #ifndef __DPVS_TC_SCH_H__
 #define __DPVS_TC_SCH_H__
 #include <assert.h>
-#include "common.h"
+#include "conf/common.h"
 #ifdef __DPVS__
 #include "dpdk.h"
 #include "timer.h"
diff --git a/include/vlan.h b/include/vlan.h
index 5ae63ad81..c5d156996 100644
--- a/include/vlan.h
+++ b/include/vlan.h
@@ -23,7 +23,7 @@
 #ifndef __DPVS_VLAN_H__
 #define __DPVS_VLAN_H__
 #include <linux/if_ether.h>
-#include "common.h"
+#include "conf/common.h"
 #include "list.h"
 #include "netif.h"
 
diff --git a/src/cfgfile.c b/src/cfgfile.c
index 6320888fc..135429732 100644
--- a/src/cfgfile.c
+++ b/src/cfgfile.c
@@ -18,7 +18,7 @@
 #include <unistd.h>
 #include <signal.h>
 #include "dpdk.h"
-#include "common.h"
+#include "conf/common.h"
 #include "parser/parser.h"
 #include "cfgfile.h"
 #include "global_conf.h"
diff --git a/src/common.c b/src/common.c
index c7997e6a1..2371e5eba 100644
--- a/src/common.c
+++ b/src/common.c
@@ -27,7 +27,7 @@
 #include <net/if.h>
 #include <netinet/in.h>
 #include <net/ethernet.h>
-#include "common.h"
+#include "conf/common.h"
 
 struct dpvs_err_tab {
     int errcode;
diff --git a/src/global_data.c b/src/global_data.c
index 873b37d22..777bb3f86 100644
--- a/src/global_data.c
+++ b/src/global_data.c
@@ -18,7 +18,7 @@
 
 #include <rte_cycles.h>
 #include "global_data.h"
-#include "common.h"
+#include "conf/common.h"
 
 uint64_t g_cycles_per_sec;
 dpvs_lcore_role_t g_lcore_role[DPVS_MAX_LCORE];
diff --git a/src/iftraf.c b/src/iftraf.c
index f0e539d43..cb3c024bb 100644
--- a/src/iftraf.c
+++ b/src/iftraf.c
@@ -1,3 +1,21 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+
 #include <stdio.h>
 #include <string.h>
 #include "inet.h"
diff --git a/src/ip_tunnel.c b/src/ip_tunnel.c
index e6dfb05ff..9aecba42c 100644
--- a/src/ip_tunnel.c
+++ b/src/ip_tunnel.c
@@ -24,7 +24,7 @@
 #include <netinet/ip.h>
 #include <linux/if_ether.h>
 #include "list.h"
-#include "common.h"
+#include "conf/common.h"
 #include "netif.h"
 #include "ipv4.h"
 #include "icmp.h"
diff --git a/src/ipset.c b/src/ipset.c
index 301d3d419..fcaf1fa94 100644
--- a/src/ipset.c
+++ b/src/ipset.c
@@ -24,7 +24,7 @@
 #include "ipset.h"
 #include "conf/ipset.h"
 #include "ctrl.h"
-#include "common.h"
+#include "conf/common.h"
 #include "parser/parser.h"
 
 #define IPSET_TAB_SIZE (1<<8)
diff --git a/src/ipv6/icmp6.c b/src/ipv6/icmp6.c
index 0732794c4..29ccab966 100644
--- a/src/ipv6/icmp6.c
+++ b/src/ipv6/icmp6.c
@@ -1,7 +1,7 @@
 /* just for testing IPv6, not real ICMPv6 implementation. */
 #include <assert.h>
 #include "ipv6.h"
-#include "common.h"
+#include "conf/common.h"
 #include "icmp6.h"
 #include "ndisc.h"
 
diff --git a/src/ipv6/ipv6.c b/src/ipv6/ipv6.c
index 3392953f5..ac383ddff 100644
--- a/src/ipv6/ipv6.c
+++ b/src/ipv6/ipv6.c
@@ -27,7 +27,7 @@
 #include <string.h>
 #include <assert.h>
 #include <netinet/ip6.h>
-#include "common.h"
+#include "conf/common.h"
 #include "mbuf.h"
 #include "inet.h"
 #include "ipv6.h"
diff --git a/src/ipv6/ipv6_ctrl.c b/src/ipv6/ipv6_ctrl.c
index 763093ad2..81e02b56c 100644
--- a/src/ipv6/ipv6_ctrl.c
+++ b/src/ipv6/ipv6_ctrl.c
@@ -21,7 +21,7 @@
  * Lei Chen <raychen@qiyi.com>, initial, Jul 2018.
  */
 #include <assert.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpdk.h"
 #include "inet.h"
 #include "ipv6.h"
diff --git a/src/ipv6/ndisc.c b/src/ipv6/ndisc.c
index 62f69402f..42b66f481 100644
--- a/src/ipv6/ndisc.c
+++ b/src/ipv6/ndisc.c
@@ -28,7 +28,7 @@
 
 #include "conf/neigh.h"
 #include "neigh.h"
-#include "common.h"
+#include "conf/common.h"
 #include "ipv6.h"
 #include "ndisc.h"
 #include "icmp6.h"
diff --git a/src/ipvs/ip_vs_blklst.c b/src/ipvs/ip_vs_blklst.c
index f9b9fa7aa..e4152bd47 100644
--- a/src/ipvs/ip_vs_blklst.c
+++ b/src/ipvs/ip_vs_blklst.c
@@ -21,7 +21,7 @@
 #include <netinet/in.h>
 #include "dpdk.h"
 #include "list.h"
-#include "common.h"
+#include "conf/common.h"
 #include "netif.h"
 #include "inet.h"
 #include "ctrl.h"
diff --git a/src/ipvs/ip_vs_conn.c b/src/ipvs/ip_vs_conn.c
index 65f66d7b2..2002fdd5c 100644
--- a/src/ipvs/ip_vs_conn.c
+++ b/src/ipvs/ip_vs_conn.c
@@ -17,7 +17,7 @@
  */
 #include <assert.h>
 #include <netinet/tcp.h>
-#include "common.h"
+#include "conf/common.h"
 #include "inet.h"
 #include "ipv4.h"
 #include "ipv6.h"
diff --git a/src/ipvs/ip_vs_core.c b/src/ipvs/ip_vs_core.c
index 146266123..6c10e0300 100644
--- a/src/ipvs/ip_vs_core.c
+++ b/src/ipvs/ip_vs_core.c
@@ -18,7 +18,7 @@
 #include <assert.h>
 #include <netinet/ip_icmp.h>
 #include <netinet/icmp6.h>
-#include "common.h"
+#include "conf/common.h"
 #include "ipv4.h"
 #include "ipv6.h"
 #include "icmp.h"
diff --git a/src/ipvs/ip_vs_laddr.c b/src/ipvs/ip_vs_laddr.c
index e0b0ce084..01873ed3f 100644
--- a/src/ipvs/ip_vs_laddr.c
+++ b/src/ipvs/ip_vs_laddr.c
@@ -21,7 +21,7 @@
 #include <netinet/in.h>
 #include "dpdk.h"
 #include "list.h"
-#include "common.h"
+#include "conf/common.h"
 #include "netif.h"
 #include "route.h"
 #include "inet.h"
diff --git a/src/ipvs/ip_vs_proto.c b/src/ipvs/ip_vs_proto.c
index 30188a34a..bae0977b2 100644
--- a/src/ipvs/ip_vs_proto.c
+++ b/src/ipvs/ip_vs_proto.c
@@ -16,7 +16,7 @@
  *
  */
 #include <assert.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpdk.h"
 #include "ipv4.h"
 #include "ipvs/ipvs.h"
diff --git a/src/ipvs/ip_vs_proto_icmp.c b/src/ipvs/ip_vs_proto_icmp.c
index 01bfb46f3..0b304d29f 100644
--- a/src/ipvs/ip_vs_proto_icmp.c
+++ b/src/ipvs/ip_vs_proto_icmp.c
@@ -24,7 +24,7 @@
 #include <linux/icmp.h>
 #include <netinet/icmp6.h>
 #include "dpdk.h"
-#include "common.h"
+#include "conf/common.h"
 #include "inet.h"
 #include "ipv4.h"
 #include "ipv6.h"
diff --git a/src/ipvs/ip_vs_proto_tcp.c b/src/ipvs/ip_vs_proto_tcp.c
index 3b6155c00..e4cc12262 100644
--- a/src/ipvs/ip_vs_proto_tcp.c
+++ b/src/ipvs/ip_vs_proto_tcp.c
@@ -17,7 +17,7 @@
  */
 #include <assert.h>
 #include <time.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpdk.h"
 #include "ipv4.h"
 #include "ipv6.h"
diff --git a/src/ipvs/ip_vs_proto_udp.c b/src/ipvs/ip_vs_proto_udp.c
index 2dd6b103d..0c5f3e213 100644
--- a/src/ipvs/ip_vs_proto_udp.c
+++ b/src/ipvs/ip_vs_proto_udp.c
@@ -18,7 +18,7 @@
 #include <assert.h>
 #include <netinet/ip.h>
 #include <netinet/ip6.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpdk.h"
 #include "ipv4.h"
 #include "ipv6.h"
diff --git a/src/ipvs/ip_vs_stats.c b/src/ipvs/ip_vs_stats.c
index 0ff01672f..664f27877 100644
--- a/src/ipvs/ip_vs_stats.c
+++ b/src/ipvs/ip_vs_stats.c
@@ -16,7 +16,7 @@
  *
  */
 #include <assert.h>
-#include "common.h"
+#include "conf/common.h"
 #include "netif.h"
 #include "list.h"
 #include "ctrl.h"
diff --git a/src/ipvs/ip_vs_synproxy.c b/src/ipvs/ip_vs_synproxy.c
index bf08fc197..2fc967709 100644
--- a/src/ipvs/ip_vs_synproxy.c
+++ b/src/ipvs/ip_vs_synproxy.c
@@ -19,7 +19,7 @@
 #include <netinet/ip.h>
 #include <netinet/tcp.h>
 #include <openssl/md5.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpdk.h"
 #include "ipvs/ipvs.h"
 #include "ipvs/synproxy.h"
diff --git a/src/kni.c b/src/kni.c
index 98b84b3d6..c6bf9589c 100644
--- a/src/kni.c
+++ b/src/kni.c
@@ -31,7 +31,7 @@
 #include <sys/socket.h>
 #include <linux/netlink.h>
 #include <linux/rtnetlink.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpdk.h"
 #include "netif.h"
 #include "netif_addr.h"
diff --git a/src/log.c b/src/log.c
index 2277f21a0..71b5b7570 100644
--- a/src/log.c
+++ b/src/log.c
@@ -1,3 +1,21 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+
 #include <string.h>
 #include <syslog.h>
 #include <rte_mempool.h>
@@ -5,7 +23,7 @@
 #include "netif.h"
 #include "sys_time.h"
 #include "log.h"
-#include "common.h"
+#include "conf/common.h"
 #include "dpdk.h"
 #include "global_data.h"
 
diff --git a/src/main.c b/src/main.c
index e2cde3ea0..999f0d54f 100644
--- a/src/main.c
+++ b/src/main.c
@@ -21,7 +21,7 @@
 #include <getopt.h>
 #include "pidfile.h"
 #include "dpdk.h"
-#include "common.h"
+#include "conf/common.h"
 #include "netif.h"
 #include "vlan.h"
 #include "inet.h"
diff --git a/src/mempool.c b/src/mempool.c
index 4a6b81ccd..1e2672526 100644
--- a/src/mempool.c
+++ b/src/mempool.c
@@ -17,7 +17,7 @@
  */
 
 #include <assert.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpdk.h"
 #include "mempool.h"
 
diff --git a/src/neigh.c b/src/neigh.c
index 928a8da72..318f5df08 100644
--- a/src/neigh.c
+++ b/src/neigh.c
@@ -26,7 +26,7 @@
 #include "parser/parser.h"
 #include "netif.h"
 #include "neigh.h"
-#include "common.h"
+#include "conf/common.h"
 #include "route.h"
 #include "ctrl.h"
 #include "ndisc.h"
diff --git a/src/netif.c b/src/netif.c
index 06aa9280d..a4ec6d752 100644
--- a/src/netif.c
+++ b/src/netif.c
@@ -25,7 +25,7 @@
 #include <linux/rtnetlink.h>
 #include <net/if.h>
 #include "dpdk.h"
-#include "common.h"
+#include "conf/common.h"
 #include "netif.h"
 #include "netif_addr.h"
 #include "vlan.h"
diff --git a/src/parser.c b/src/parser.c
index b145384c0..2b04948fe 100644
--- a/src/parser.c
+++ b/src/parser.c
@@ -19,7 +19,7 @@
 #include <libgen.h>
 #include <errno.h>
 #include <glob.h>
-#include "common.h"
+#include "conf/common.h"
 #include "parser/parser.h"
 
 /* exported global vars */
diff --git a/src/scheduler.c b/src/scheduler.c
index 6044e0089..3922f6bc6 100644
--- a/src/scheduler.c
+++ b/src/scheduler.c
@@ -17,7 +17,7 @@
  */
 
 #include <assert.h>
-#include "common.h"
+#include "conf/common.h"
 #include "scheduler.h"
 
 /* Note: lockless, lcore_job can only be register on initialization stage and
diff --git a/src/tc/cls_match.c b/src/tc/cls_match.c
index 9e00e395e..b48916074 100644
--- a/src/tc/cls_match.c
+++ b/src/tc/cls_match.c
@@ -25,11 +25,11 @@
 #include <netinet/tcp.h>
 #include <netinet/udp.h>
 #include "netif.h"
-#include "match.h"
 #include "vlan.h"
 #include "tc/tc.h"
 #include "tc/sch.h"
 #include "tc/cls.h"
+#include "conf/match.h"
 #include "conf/tc.h"
 
 struct match_cls_priv {
diff --git a/src/timer.c b/src/timer.c
index c87a50c0f..1b107e007 100644
--- a/src/timer.c
+++ b/src/timer.c
@@ -27,7 +27,7 @@
 #include <stdbool.h>
 #include <assert.h>
 #include "list.h"
-#include "common.h"
+#include "conf/common.h"
 #include "timer.h"
 #include "dpdk.h"
 #include "rte_timer.h"
diff --git a/tools/dpip/addr.c b/tools/dpip/addr.c
index d29ef15e8..740032edb 100644
--- a/tools/dpip/addr.c
+++ b/tools/dpip/addr.c
@@ -19,7 +19,7 @@
 #include <string.h>
 #include <arpa/inet.h>
 #include <netinet/in.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpip.h"
 #include "conf/inetaddr.h"
 #include "sockopt.h"
diff --git a/tools/dpip/cls.c b/tools/dpip/cls.c
index 05e36ef7f..2f917128a 100644
--- a/tools/dpip/cls.c
+++ b/tools/dpip/cls.c
@@ -23,10 +23,10 @@
  */
 #include <stdlib.h>
 #include <string.h>
-#include "common.h"
-#include "match.h"
+#include "conf/common.h"
 #include "dpip.h"
 #include "sockopt.h"
+#include "conf/match.h"
 #include "conf/tc.h"
 
 static void cls_help(void)
diff --git a/tools/dpip/dpip.c b/tools/dpip/dpip.c
index 18f03f95c..ca2e3b64c 100644
--- a/tools/dpip/dpip.c
+++ b/tools/dpip/dpip.c
@@ -23,7 +23,7 @@
 #include <arpa/inet.h>
 #include "dpip.h"
 #include "list.h"
-#include "common.h"
+#include "conf/common.h"
 
 static struct list_head dpip_objs = LIST_HEAD_INIT(dpip_objs);
 
diff --git a/tools/dpip/iftraf.c b/tools/dpip/iftraf.c
index 5cd4c6330..73b5365dc 100644
--- a/tools/dpip/iftraf.c
+++ b/tools/dpip/iftraf.c
@@ -19,7 +19,7 @@
 #include <string.h>
 #include <arpa/inet.h>
 #include <netinet/in.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpip.h"
 #include "conf/inetaddr.h"
 #include "conf/iftraf.h"
diff --git a/tools/dpip/ipset.c b/tools/dpip/ipset.c
index a997d1d6e..b121d0096 100755
--- a/tools/dpip/ipset.c
+++ b/tools/dpip/ipset.c
@@ -17,7 +17,7 @@
  */
 #include <stdlib.h>
 #include <string.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpip.h"
 #include "conf/ipset.h"
 #include "linux_ipv6.h"
diff --git a/tools/dpip/ipv6.c b/tools/dpip/ipv6.c
index c63a8e05a..718e995a2 100644
--- a/tools/dpip/ipv6.c
+++ b/tools/dpip/ipv6.c
@@ -24,8 +24,8 @@
 #include <string.h>
 #include <arpa/inet.h>
 #include <netinet/in.h>
-#include "common.h"
-#include "inet.h"
+#include "conf/common.h"
+#include "conf/inet.h"
 #include "dpip.h"
 #include "sockopt.h"
 #include "conf/ipv6.h"
diff --git a/tools/dpip/link.c b/tools/dpip/link.c
index e9e966612..b65136c31 100644
--- a/tools/dpip/link.c
+++ b/tools/dpip/link.c
@@ -20,7 +20,7 @@
 #include <string.h>
 #include <unistd.h>
 #include <getopt.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpip.h"
 #include "conf/netif.h"
 #include "sockopt.h"
diff --git a/tools/dpip/neigh.c b/tools/dpip/neigh.c
index 2159b103c..11d446e46 100644
--- a/tools/dpip/neigh.c
+++ b/tools/dpip/neigh.c
@@ -20,7 +20,7 @@
 #include <arpa/inet.h>
 #include <netinet/in.h>
 #include "net/ethernet.h"
-#include "common.h"
+#include "conf/common.h"
 #include "dpip.h"
 #include "conf/neigh.h"
 #include "sockopt.h"
diff --git a/tools/dpip/qsch.c b/tools/dpip/qsch.c
index 376d93a00..591be6f19 100644
--- a/tools/dpip/qsch.c
+++ b/tools/dpip/qsch.c
@@ -25,7 +25,7 @@
 #include <stdlib.h>
 #include <string.h>
 #include <ctype.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpip.h"
 #include "sockopt.h"
 #include "conf/tc.h"
diff --git a/tools/dpip/route.c b/tools/dpip/route.c
index 076758a69..87ae74d4f 100755
--- a/tools/dpip/route.c
+++ b/tools/dpip/route.c
@@ -19,7 +19,7 @@
 #include <string.h>
 #include <arpa/inet.h>
 #include <netinet/in.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpip.h"
 #include "conf/route.h"
 #include "conf/route6.h"
diff --git a/tools/dpip/tunnel.c b/tools/dpip/tunnel.c
index bd61d693a..6174daade 100644
--- a/tools/dpip/tunnel.c
+++ b/tools/dpip/tunnel.c
@@ -22,10 +22,10 @@
  * raychen@qiyi.com, Jan 2018, initial.
  */
 #include <arpa/inet.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpip.h"
 #include "sockopt.h"
-#include "ip_tunnel.h"
+#include "conf/ip_tunnel.h"
 
 static int addr_atoi(const char *addr, __be32 *ip)
 {
diff --git a/tools/dpip/utils.c b/tools/dpip/utils.c
index 34a40d1b6..42ea81f29 100644
--- a/tools/dpip/utils.c
+++ b/tools/dpip/utils.c
@@ -18,7 +18,7 @@
 #include <stdint.h>
 #include <netinet/in.h>
 #include <arpa/inet.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpip.h"
 
 const char *af_itoa(int af)
diff --git a/tools/dpip/utils.h b/tools/dpip/utils.h
index 05642b6f7..55acf8743 100644
--- a/tools/dpip/utils.h
+++ b/tools/dpip/utils.h
@@ -17,7 +17,7 @@
  */
 #ifndef __DPIP_UTILS_H__
 #define __DPIP_UTILS_H__
-#include "inet.h"
+#include "conf/inet.h"
 
 #define __init __attribute__((constructor))
 #define __exit __attribute__((destructor))
diff --git a/tools/dpip/vlan.c b/tools/dpip/vlan.c
index 81c62e56e..e54d51202 100644
--- a/tools/dpip/vlan.c
+++ b/tools/dpip/vlan.c
@@ -24,7 +24,7 @@
 #include <stdlib.h>
 #include <string.h>
 #include <linux/if_ether.h>
-#include "common.h"
+#include "conf/common.h"
 #include "dpip.h"
 #include "utils.h"
 #include "conf/vlan.h"
diff --git a/tools/keepalived/keepalived.conf b/tools/keepalived/keepalived.conf
deleted file mode 100644
index 3090a7396..000000000
--- a/tools/keepalived/keepalived.conf
+++ /dev/null
@@ -1,37053 +0,0 @@
-############################## 1 ##############################
-virtual_server_group 111.13.235.211-80-TCP_QLB {
-    111.13.235.211 80
-}
-
-deny_address_group 111.13.235.211_deny {
-}
-
-virtual_server  group 111.13.235.211-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.211_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.211 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.211 bond1.kni;"
-
-    real_server 192.168.9.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 2 ##############################
-virtual_server_group 111.13.235.66-80-TCP_QLB {
-    111.13.235.66 80
-}
-
-deny_address_group 111.13.235.66_deny {
-}
-
-virtual_server  group 111.13.235.66-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.66_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.66 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.66 bond1.kni;"
-
-    real_server 192.168.39.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 3 ##############################
-virtual_server_group 192.168.1.64-80-TCP_QLB {
-    192.168.1.64 80
-}
-
-deny_address_group 192.168.1.64_deny {
-}
-
-virtual_server  group 192.168.1.64-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.64_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.64 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.64 bond1.kni;"
-
-    real_server 192.168.30.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 4 ##############################
-virtual_server_group 111.13.235.111-80-TCP_QLB {
-    111.13.235.111 80
-}
-
-deny_address_group 111.13.235.111_deny {
-}
-
-virtual_server  group 111.13.235.111-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.111_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.111 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.111 bond1.kni;"
-
-    real_server 192.168.26.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 5 ##############################
-virtual_server_group 111.13.235.69-80-TCP_QLB {
-    111.13.235.69 80
-}
-
-deny_address_group 111.13.235.69_deny {
-}
-
-virtual_server  group 111.13.235.69-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.69_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.69 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.69 bond1.kni;"
-
-    real_server 192.168.49.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 6 ##############################
-virtual_server_group 111.13.235.153-80-TCP_QLB {
-    111.13.235.153 80
-}
-
-deny_address_group 111.13.235.153_deny {
-}
-
-virtual_server  group 111.13.235.153-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.153_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.153 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.153 bond1.kni;"
-
-    real_server 192.168.18.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 7 ##############################
-virtual_server_group 111.13.235.205-80-TCP_QLB {
-    111.13.235.205 80
-}
-
-deny_address_group 111.13.235.205_deny {
-}
-
-virtual_server  group 111.13.235.205-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.205_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.205 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.205 bond1.kni;"
-
-    real_server 192.168.39.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 8 ##############################
-virtual_server_group 192.168.1.9-80-TCP_QLB {
-    192.168.1.9 80
-}
-
-deny_address_group 192.168.1.9_deny {
-}
-
-virtual_server  group 192.168.1.9-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.9_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.9 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.9 bond1.kni;"
-
-    real_server 192.168.38.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 9 ##############################
-virtual_server_group 111.13.235.197-80-TCP_QLB {
-    111.13.235.197 80
-}
-
-deny_address_group 111.13.235.197_deny {
-}
-
-virtual_server  group 111.13.235.197-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.197_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.197 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.197 bond1.kni;"
-
-    real_server 192.168.22.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 10 ##############################
-virtual_server_group 111.13.235.239-80-TCP_QLB {
-    111.13.235.239 80
-}
-
-deny_address_group 111.13.235.239_deny {
-}
-
-virtual_server  group 111.13.235.239-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.239_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.239 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.239 bond1.kni;"
-
-    real_server 192.168.47.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 11 ##############################
-virtual_server_group 111.13.235.201-80-TCP_QLB {
-    111.13.235.201 80
-}
-
-deny_address_group 111.13.235.201_deny {
-}
-
-virtual_server  group 111.13.235.201-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.201_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.201 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.201 bond1.kni;"
-
-    real_server 192.168.25.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 12 ##############################
-virtual_server_group 111.13.235.212-80-TCP_QLB {
-    111.13.235.212 80
-}
-
-deny_address_group 111.13.235.212_deny {
-}
-
-virtual_server  group 111.13.235.212-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.212_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.212 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.212 bond1.kni;"
-
-    real_server 192.168.3.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 13 ##############################
-virtual_server_group 111.13.235.208-80-TCP_QLB {
-    111.13.235.208 80
-}
-
-deny_address_group 111.13.235.208_deny {
-}
-
-virtual_server  group 111.13.235.208-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.208_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.208 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.208 bond1.kni;"
-
-    real_server 192.168.49.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 14 ##############################
-virtual_server_group 192.168.1.86-80-TCP_QLB {
-    192.168.1.86 80
-}
-
-deny_address_group 192.168.1.86_deny {
-}
-
-virtual_server  group 192.168.1.86-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.86_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.86 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.86 bond1.kni;"
-
-    real_server 192.168.50.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 15 ##############################
-virtual_server_group 192.168.1.40-80-TCP_QLB {
-    192.168.1.40 80
-}
-
-deny_address_group 192.168.1.40_deny {
-}
-
-virtual_server  group 192.168.1.40-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.40_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.40 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.40 bond1.kni;"
-
-    real_server 192.168.39.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 16 ##############################
-virtual_server_group 111.13.235.84-80-TCP_QLB {
-    111.13.235.84 80
-}
-
-deny_address_group 111.13.235.84_deny {
-}
-
-virtual_server  group 111.13.235.84-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.84_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.84 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.84 bond1.kni;"
-
-    real_server 192.168.33.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 17 ##############################
-virtual_server_group 111.13.235.127-80-TCP_QLB {
-    111.13.235.127 80
-}
-
-deny_address_group 111.13.235.127_deny {
-}
-
-virtual_server  group 111.13.235.127-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.127_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.127 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.127 bond1.kni;"
-
-    real_server 192.168.1.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 18 ##############################
-virtual_server_group 192.168.1.87-80-TCP_QLB {
-    192.168.1.87 80
-}
-
-deny_address_group 192.168.1.87_deny {
-}
-
-virtual_server  group 192.168.1.87-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.87_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.87 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.87 bond1.kni;"
-
-    real_server 192.168.35.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 19 ##############################
-virtual_server_group 111.13.235.93-80-TCP_QLB {
-    111.13.235.93 80
-}
-
-deny_address_group 111.13.235.93_deny {
-}
-
-virtual_server  group 111.13.235.93-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.93_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.93 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.93 bond1.kni;"
-
-    real_server 192.168.33.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 20 ##############################
-virtual_server_group 192.168.1.15-80-TCP_QLB {
-    192.168.1.15 80
-}
-
-deny_address_group 192.168.1.15_deny {
-}
-
-virtual_server  group 192.168.1.15-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.15_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.15 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.15 bond1.kni;"
-
-    real_server 192.168.6.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 21 ##############################
-virtual_server_group 111.13.235.244-80-TCP_QLB {
-    111.13.235.244 80
-}
-
-deny_address_group 111.13.235.244_deny {
-}
-
-virtual_server  group 111.13.235.244-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.244_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.244 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.244 bond1.kni;"
-
-    real_server 192.168.26.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 22 ##############################
-virtual_server_group 111.13.235.100-80-TCP_QLB {
-    111.13.235.100 80
-}
-
-deny_address_group 111.13.235.100_deny {
-}
-
-virtual_server  group 111.13.235.100-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.100_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.100 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.100 bond1.kni;"
-
-    real_server 192.168.54.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 23 ##############################
-virtual_server_group 111.13.235.194-80-TCP_QLB {
-    111.13.235.194 80
-}
-
-deny_address_group 111.13.235.194_deny {
-}
-
-virtual_server  group 111.13.235.194-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.194_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.194 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.194 bond1.kni;"
-
-    real_server 192.168.31.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 24 ##############################
-virtual_server_group 111.13.235.173-80-TCP_QLB {
-    111.13.235.173 80
-}
-
-deny_address_group 111.13.235.173_deny {
-}
-
-virtual_server  group 111.13.235.173-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.173_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.173 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.173 bond1.kni;"
-
-    real_server 192.168.22.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 25 ##############################
-virtual_server_group 111.13.235.183-80-TCP_QLB {
-    111.13.235.183 80
-}
-
-deny_address_group 111.13.235.183_deny {
-}
-
-virtual_server  group 111.13.235.183-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.183_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.183 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.183 bond1.kni;"
-
-    real_server 192.168.19.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 26 ##############################
-virtual_server_group 192.168.1.19-80-TCP_QLB {
-    192.168.1.19 80
-}
-
-deny_address_group 192.168.1.19_deny {
-}
-
-virtual_server  group 192.168.1.19-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.19_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.19 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.19 bond1.kni;"
-
-    real_server 192.168.10.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 27 ##############################
-virtual_server_group 111.13.235.76-80-TCP_QLB {
-    111.13.235.76 80
-}
-
-deny_address_group 111.13.235.76_deny {
-}
-
-virtual_server  group 111.13.235.76-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.76_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.76 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.76 bond1.kni;"
-
-    real_server 192.168.7.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 28 ##############################
-virtual_server_group 111.13.235.148-80-TCP_QLB {
-    111.13.235.148 80
-}
-
-deny_address_group 111.13.235.148_deny {
-}
-
-virtual_server  group 111.13.235.148-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.148_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.148 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.148 bond1.kni;"
-
-    real_server 192.168.57.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 29 ##############################
-virtual_server_group 111.13.235.109-80-TCP_QLB {
-    111.13.235.109 80
-}
-
-deny_address_group 111.13.235.109_deny {
-}
-
-virtual_server  group 111.13.235.109-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.109_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.109 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.109 bond1.kni;"
-
-    real_server 192.168.33.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 30 ##############################
-virtual_server_group 192.168.1.42-80-TCP_QLB {
-    192.168.1.42 80
-}
-
-deny_address_group 192.168.1.42_deny {
-}
-
-virtual_server  group 192.168.1.42-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.42_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.42 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.42 bond1.kni;"
-
-    real_server 192.168.1.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 31 ##############################
-virtual_server_group 111.13.235.224-80-TCP_QLB {
-    111.13.235.224 80
-}
-
-deny_address_group 111.13.235.224_deny {
-}
-
-virtual_server  group 111.13.235.224-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.224_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.224 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.224 bond1.kni;"
-
-    real_server 192.168.46.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 32 ##############################
-virtual_server_group 192.168.1.67-80-TCP_QLB {
-    192.168.1.67 80
-}
-
-deny_address_group 192.168.1.67_deny {
-}
-
-virtual_server  group 192.168.1.67-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.67_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.67 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.67 bond1.kni;"
-
-    real_server 192.168.3.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 33 ##############################
-virtual_server_group 192.168.1.2-80-TCP_QLB {
-    192.168.1.2 80
-}
-
-deny_address_group 192.168.1.2_deny {
-}
-
-virtual_server  group 192.168.1.2-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.2_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.2 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.2 bond1.kni;"
-
-    real_server 192.168.25.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 34 ##############################
-virtual_server_group 111.13.235.85-80-TCP_QLB {
-    111.13.235.85 80
-}
-
-deny_address_group 111.13.235.85_deny {
-}
-
-virtual_server  group 111.13.235.85-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.85_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.85 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.85 bond1.kni;"
-
-    real_server 192.168.54.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 35 ##############################
-virtual_server_group 192.168.1.43-80-TCP_QLB {
-    192.168.1.43 80
-}
-
-deny_address_group 192.168.1.43_deny {
-}
-
-virtual_server  group 192.168.1.43-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.43_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.43 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.43 bond1.kni;"
-
-    real_server 192.168.29.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 36 ##############################
-virtual_server_group 192.168.1.70-80-TCP_QLB {
-    192.168.1.70 80
-}
-
-deny_address_group 192.168.1.70_deny {
-}
-
-virtual_server  group 192.168.1.70-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.70_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.70 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.70 bond1.kni;"
-
-    real_server 192.168.54.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 37 ##############################
-virtual_server_group 111.13.235.181-80-TCP_QLB {
-    111.13.235.181 80
-}
-
-deny_address_group 111.13.235.181_deny {
-}
-
-virtual_server  group 111.13.235.181-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.181_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.181 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.181 bond1.kni;"
-
-    real_server 192.168.31.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 38 ##############################
-virtual_server_group 111.13.235.103-80-TCP_QLB {
-    111.13.235.103 80
-}
-
-deny_address_group 111.13.235.103_deny {
-}
-
-virtual_server  group 111.13.235.103-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.103_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.103 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.103 bond1.kni;"
-
-    real_server 192.168.41.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 39 ##############################
-virtual_server_group 111.13.235.254-80-TCP_QLB {
-    111.13.235.254 80
-}
-
-deny_address_group 111.13.235.254_deny {
-}
-
-virtual_server  group 111.13.235.254-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.254_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.254 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.254 bond1.kni;"
-
-    real_server 192.168.7.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 40 ##############################
-virtual_server_group 111.13.235.70-80-TCP_QLB {
-    111.13.235.70 80
-}
-
-deny_address_group 111.13.235.70_deny {
-}
-
-virtual_server  group 111.13.235.70-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.70_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.70 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.70 bond1.kni;"
-
-    real_server 192.168.22.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 41 ##############################
-virtual_server_group 192.168.1.83-80-TCP_QLB {
-    192.168.1.83 80
-}
-
-deny_address_group 192.168.1.83_deny {
-}
-
-virtual_server  group 192.168.1.83-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.83_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.83 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.83 bond1.kni;"
-
-    real_server 192.168.11.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 42 ##############################
-virtual_server_group 111.13.235.193-80-TCP_QLB {
-    111.13.235.193 80
-}
-
-deny_address_group 111.13.235.193_deny {
-}
-
-virtual_server  group 111.13.235.193-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.193_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.193 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.193 bond1.kni;"
-
-    real_server 192.168.38.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 43 ##############################
-virtual_server_group 111.13.235.165-80-TCP_QLB {
-    111.13.235.165 80
-}
-
-deny_address_group 111.13.235.165_deny {
-}
-
-virtual_server  group 111.13.235.165-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.165_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.165 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.165 bond1.kni;"
-
-    real_server 192.168.38.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 44 ##############################
-virtual_server_group 192.168.1.75-80-TCP_QLB {
-    192.168.1.75 80
-}
-
-deny_address_group 192.168.1.75_deny {
-}
-
-virtual_server  group 192.168.1.75-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.75_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.75 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.75 bond1.kni;"
-
-    real_server 192.168.9.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 45 ##############################
-virtual_server_group 192.168.1.20-80-TCP_QLB {
-    192.168.1.20 80
-}
-
-deny_address_group 192.168.1.20_deny {
-}
-
-virtual_server  group 192.168.1.20-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.20_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.20 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.20 bond1.kni;"
-
-    real_server 192.168.50.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 46 ##############################
-virtual_server_group 111.13.235.177-80-TCP_QLB {
-    111.13.235.177 80
-}
-
-deny_address_group 111.13.235.177_deny {
-}
-
-virtual_server  group 111.13.235.177-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.177_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.177 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.177 bond1.kni;"
-
-    real_server 192.168.3.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 47 ##############################
-virtual_server_group 111.13.235.129-80-TCP_QLB {
-    111.13.235.129 80
-}
-
-deny_address_group 111.13.235.129_deny {
-}
-
-virtual_server  group 111.13.235.129-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.129_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.129 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.129 bond1.kni;"
-
-    real_server 192.168.7.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 48 ##############################
-virtual_server_group 192.168.1.66-80-TCP_QLB {
-    192.168.1.66 80
-}
-
-deny_address_group 192.168.1.66_deny {
-}
-
-virtual_server  group 192.168.1.66-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.66_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.66 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.66 bond1.kni;"
-
-    real_server 192.168.23.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 49 ##############################
-virtual_server_group 111.13.235.64-80-TCP_QLB {
-    111.13.235.64 80
-}
-
-deny_address_group 111.13.235.64_deny {
-}
-
-virtual_server  group 111.13.235.64-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.64_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.64 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.64 bond1.kni;"
-
-    real_server 192.168.45.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 50 ##############################
-virtual_server_group 111.13.235.118-80-TCP_QLB {
-    111.13.235.118 80
-}
-
-deny_address_group 111.13.235.118_deny {
-}
-
-virtual_server  group 111.13.235.118-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.118_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.118 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.118 bond1.kni;"
-
-    real_server 192.168.38.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 51 ##############################
-virtual_server_group 111.13.235.243-80-TCP_QLB {
-    111.13.235.243 80
-}
-
-deny_address_group 111.13.235.243_deny {
-}
-
-virtual_server  group 111.13.235.243-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.243_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.243 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.243 bond1.kni;"
-
-    real_server 192.168.1.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 52 ##############################
-virtual_server_group 111.13.235.155-80-TCP_QLB {
-    111.13.235.155 80
-}
-
-deny_address_group 111.13.235.155_deny {
-}
-
-virtual_server  group 111.13.235.155-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.155_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.155 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.155 bond1.kni;"
-
-    real_server 192.168.7.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 53 ##############################
-virtual_server_group 111.13.235.253-80-TCP_QLB {
-    111.13.235.253 80
-}
-
-deny_address_group 111.13.235.253_deny {
-}
-
-virtual_server  group 111.13.235.253-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.253_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.253 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.253 bond1.kni;"
-
-    real_server 192.168.33.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 54 ##############################
-virtual_server_group 192.168.1.11-80-TCP_QLB {
-    192.168.1.11 80
-}
-
-deny_address_group 192.168.1.11_deny {
-}
-
-virtual_server  group 192.168.1.11-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.11_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.11 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.11 bond1.kni;"
-
-    real_server 192.168.38.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 55 ##############################
-virtual_server_group 111.13.235.115-80-TCP_QLB {
-    111.13.235.115 80
-}
-
-deny_address_group 111.13.235.115_deny {
-}
-
-virtual_server  group 111.13.235.115-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.115_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.115 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.115 bond1.kni;"
-
-    real_server 192.168.17.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 56 ##############################
-virtual_server_group 111.13.235.139-80-TCP_QLB {
-    111.13.235.139 80
-}
-
-deny_address_group 111.13.235.139_deny {
-}
-
-virtual_server  group 111.13.235.139-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.139_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.139 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.139 bond1.kni;"
-
-    real_server 192.168.11.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 57 ##############################
-virtual_server_group 192.168.1.21-80-TCP_QLB {
-    192.168.1.21 80
-}
-
-deny_address_group 192.168.1.21_deny {
-}
-
-virtual_server  group 192.168.1.21-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.21_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.21 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.21 bond1.kni;"
-
-    real_server 192.168.3.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 58 ##############################
-virtual_server_group 111.13.235.249-80-TCP_QLB {
-    111.13.235.249 80
-}
-
-deny_address_group 111.13.235.249_deny {
-}
-
-virtual_server  group 111.13.235.249-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.249_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.249 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.249 bond1.kni;"
-
-    real_server 192.168.43.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 59 ##############################
-virtual_server_group 192.168.1.82-80-TCP_QLB {
-    192.168.1.82 80
-}
-
-deny_address_group 192.168.1.82_deny {
-}
-
-virtual_server  group 192.168.1.82-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.82_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.82 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.82 bond1.kni;"
-
-    real_server 192.168.34.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 60 ##############################
-virtual_server_group 111.13.235.174-80-TCP_QLB {
-    111.13.235.174 80
-}
-
-deny_address_group 111.13.235.174_deny {
-}
-
-virtual_server  group 111.13.235.174-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.174_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.174 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.174 bond1.kni;"
-
-    real_server 192.168.21.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 61 ##############################
-virtual_server_group 111.13.235.235-80-TCP_QLB {
-    111.13.235.235 80
-}
-
-deny_address_group 111.13.235.235_deny {
-}
-
-virtual_server  group 111.13.235.235-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.235_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.235 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.235 bond1.kni;"
-
-    real_server 192.168.43.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 62 ##############################
-virtual_server_group 111.13.235.141-80-TCP_QLB {
-    111.13.235.141 80
-}
-
-deny_address_group 111.13.235.141_deny {
-}
-
-virtual_server  group 111.13.235.141-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.141_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.141 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.141 bond1.kni;"
-
-    real_server 192.168.21.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 63 ##############################
-virtual_server_group 192.168.1.96-80-TCP_QLB {
-    192.168.1.96 80
-}
-
-deny_address_group 192.168.1.96_deny {
-}
-
-virtual_server  group 192.168.1.96-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.96_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.96 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.96 bond1.kni;"
-
-    real_server 192.168.25.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 64 ##############################
-virtual_server_group 111.13.235.130-80-TCP_QLB {
-    111.13.235.130 80
-}
-
-deny_address_group 111.13.235.130_deny {
-}
-
-virtual_server  group 111.13.235.130-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.130_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.130 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.130 bond1.kni;"
-
-    real_server 192.168.3.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 65 ##############################
-virtual_server_group 192.168.1.32-80-TCP_QLB {
-    192.168.1.32 80
-}
-
-deny_address_group 192.168.1.32_deny {
-}
-
-virtual_server  group 192.168.1.32-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.32_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.32 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.32 bond1.kni;"
-
-    real_server 192.168.27.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 66 ##############################
-virtual_server_group 192.168.1.53-80-TCP_QLB {
-    192.168.1.53 80
-}
-
-deny_address_group 192.168.1.53_deny {
-}
-
-virtual_server  group 192.168.1.53-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.53_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.53 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.53 bond1.kni;"
-
-    real_server 192.168.53.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 67 ##############################
-virtual_server_group 111.13.235.188-80-TCP_QLB {
-    111.13.235.188 80
-}
-
-deny_address_group 111.13.235.188_deny {
-}
-
-virtual_server  group 111.13.235.188-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.188_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.188 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.188 bond1.kni;"
-
-    real_server 192.168.42.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 68 ##############################
-virtual_server_group 111.13.235.220-80-TCP_QLB {
-    111.13.235.220 80
-}
-
-deny_address_group 111.13.235.220_deny {
-}
-
-virtual_server  group 111.13.235.220-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.220_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.220 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.220 bond1.kni;"
-
-    real_server 192.168.6.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 69 ##############################
-virtual_server_group 111.13.235.128-80-TCP_QLB {
-    111.13.235.128 80
-}
-
-deny_address_group 111.13.235.128_deny {
-}
-
-virtual_server  group 111.13.235.128-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.128_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.128 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.128 bond1.kni;"
-
-    real_server 192.168.11.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 70 ##############################
-virtual_server_group 111.13.235.144-80-TCP_QLB {
-    111.13.235.144 80
-}
-
-deny_address_group 111.13.235.144_deny {
-}
-
-virtual_server  group 111.13.235.144-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.144_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.144 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.144 bond1.kni;"
-
-    real_server 192.168.30.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 71 ##############################
-virtual_server_group 111.13.235.196-80-TCP_QLB {
-    111.13.235.196 80
-}
-
-deny_address_group 111.13.235.196_deny {
-}
-
-virtual_server  group 111.13.235.196-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.196_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.196 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.196 bond1.kni;"
-
-    real_server 192.168.13.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 72 ##############################
-virtual_server_group 111.13.235.114-80-TCP_QLB {
-    111.13.235.114 80
-}
-
-deny_address_group 111.13.235.114_deny {
-}
-
-virtual_server  group 111.13.235.114-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.114_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.114 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.114 bond1.kni;"
-
-    real_server 192.168.7.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 73 ##############################
-virtual_server_group 111.13.235.237-80-TCP_QLB {
-    111.13.235.237 80
-}
-
-deny_address_group 111.13.235.237_deny {
-}
-
-virtual_server  group 111.13.235.237-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.237_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.237 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.237 bond1.kni;"
-
-    real_server 192.168.14.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 74 ##############################
-virtual_server_group 111.13.235.241-80-TCP_QLB {
-    111.13.235.241 80
-}
-
-deny_address_group 111.13.235.241_deny {
-}
-
-virtual_server  group 111.13.235.241-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.241_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.241 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.241 bond1.kni;"
-
-    real_server 192.168.5.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 75 ##############################
-virtual_server_group 111.13.235.89-80-TCP_QLB {
-    111.13.235.89 80
-}
-
-deny_address_group 111.13.235.89_deny {
-}
-
-virtual_server  group 111.13.235.89-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.89_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.89 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.89 bond1.kni;"
-
-    real_server 192.168.43.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 76 ##############################
-virtual_server_group 192.168.1.79-80-TCP_QLB {
-    192.168.1.79 80
-}
-
-deny_address_group 192.168.1.79_deny {
-}
-
-virtual_server  group 192.168.1.79-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.79_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.79 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.79 bond1.kni;"
-
-    real_server 192.168.54.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 77 ##############################
-virtual_server_group 111.13.235.135-80-TCP_QLB {
-    111.13.235.135 80
-}
-
-deny_address_group 111.13.235.135_deny {
-}
-
-virtual_server  group 111.13.235.135-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.135_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.135 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.135 bond1.kni;"
-
-    real_server 192.168.51.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 78 ##############################
-virtual_server_group 111.13.235.186-80-TCP_QLB {
-    111.13.235.186 80
-}
-
-deny_address_group 111.13.235.186_deny {
-}
-
-virtual_server  group 111.13.235.186-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.186_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.186 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.186 bond1.kni;"
-
-    real_server 192.168.14.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 79 ##############################
-virtual_server_group 111.13.235.207-80-TCP_QLB {
-    111.13.235.207 80
-}
-
-deny_address_group 111.13.235.207_deny {
-}
-
-virtual_server  group 111.13.235.207-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.207_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.207 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.207 bond1.kni;"
-
-    real_server 192.168.18.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 80 ##############################
-virtual_server_group 192.168.1.34-80-TCP_QLB {
-    192.168.1.34 80
-}
-
-deny_address_group 192.168.1.34_deny {
-}
-
-virtual_server  group 192.168.1.34-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.34_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.34 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.34 bond1.kni;"
-
-    real_server 192.168.33.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 81 ##############################
-virtual_server_group 111.13.235.225-80-TCP_QLB {
-    111.13.235.225 80
-}
-
-deny_address_group 111.13.235.225_deny {
-}
-
-virtual_server  group 111.13.235.225-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.225_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.225 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.225 bond1.kni;"
-
-    real_server 192.168.9.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 82 ##############################
-virtual_server_group 192.168.1.30-80-TCP_QLB {
-    192.168.1.30 80
-}
-
-deny_address_group 192.168.1.30_deny {
-}
-
-virtual_server  group 192.168.1.30-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.30_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.30 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.30 bond1.kni;"
-
-    real_server 192.168.51.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 83 ##############################
-virtual_server_group 192.168.1.60-80-TCP_QLB {
-    192.168.1.60 80
-}
-
-deny_address_group 192.168.1.60_deny {
-}
-
-virtual_server  group 192.168.1.60-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.60_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.60 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.60 bond1.kni;"
-
-    real_server 192.168.29.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 84 ##############################
-virtual_server_group 111.13.235.116-80-TCP_QLB {
-    111.13.235.116 80
-}
-
-deny_address_group 111.13.235.116_deny {
-}
-
-virtual_server  group 111.13.235.116-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.116_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.116 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.116 bond1.kni;"
-
-    real_server 192.168.21.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 85 ##############################
-virtual_server_group 111.13.235.209-80-TCP_QLB {
-    111.13.235.209 80
-}
-
-deny_address_group 111.13.235.209_deny {
-}
-
-virtual_server  group 111.13.235.209-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.209_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.209 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.209 bond1.kni;"
-
-    real_server 192.168.50.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 86 ##############################
-virtual_server_group 111.13.235.150-80-TCP_QLB {
-    111.13.235.150 80
-}
-
-deny_address_group 111.13.235.150_deny {
-}
-
-virtual_server  group 111.13.235.150-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.150_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.150 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.150 bond1.kni;"
-
-    real_server 192.168.1.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 87 ##############################
-virtual_server_group 111.13.235.184-80-TCP_QLB {
-    111.13.235.184 80
-}
-
-deny_address_group 111.13.235.184_deny {
-}
-
-virtual_server  group 111.13.235.184-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.184_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.184 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.184 bond1.kni;"
-
-    real_server 192.168.26.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 88 ##############################
-virtual_server_group 111.13.235.101-80-TCP_QLB {
-    111.13.235.101 80
-}
-
-deny_address_group 111.13.235.101_deny {
-}
-
-virtual_server  group 111.13.235.101-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.101_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.101 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.101 bond1.kni;"
-
-    real_server 192.168.6.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 89 ##############################
-virtual_server_group 192.168.1.3-80-TCP_QLB {
-    192.168.1.3 80
-}
-
-deny_address_group 192.168.1.3_deny {
-}
-
-virtual_server  group 192.168.1.3-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.3_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.3 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.3 bond1.kni;"
-
-    real_server 192.168.37.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 90 ##############################
-virtual_server_group 111.13.235.147-80-TCP_QLB {
-    111.13.235.147 80
-}
-
-deny_address_group 111.13.235.147_deny {
-}
-
-virtual_server  group 111.13.235.147-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.147_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.147 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.147 bond1.kni;"
-
-    real_server 192.168.13.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 91 ##############################
-virtual_server_group 111.13.235.79-80-TCP_QLB {
-    111.13.235.79 80
-}
-
-deny_address_group 111.13.235.79_deny {
-}
-
-virtual_server  group 111.13.235.79-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.79_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.79 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.79 bond1.kni;"
-
-    real_server 192.168.1.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 92 ##############################
-virtual_server_group 192.168.1.22-80-TCP_QLB {
-    192.168.1.22 80
-}
-
-deny_address_group 192.168.1.22_deny {
-}
-
-virtual_server  group 192.168.1.22-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.22_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.22 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.22 bond1.kni;"
-
-    real_server 192.168.31.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 93 ##############################
-virtual_server_group 111.13.235.74-80-TCP_QLB {
-    111.13.235.74 80
-}
-
-deny_address_group 111.13.235.74_deny {
-}
-
-virtual_server  group 111.13.235.74-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.74_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.74 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.74 bond1.kni;"
-
-    real_server 192.168.25.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 94 ##############################
-virtual_server_group 111.13.235.98-80-TCP_QLB {
-    111.13.235.98 80
-}
-
-deny_address_group 111.13.235.98_deny {
-}
-
-virtual_server  group 111.13.235.98-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.98_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.98 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.98 bond1.kni;"
-
-    real_server 192.168.2.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 95 ##############################
-virtual_server_group 111.13.235.245-80-TCP_QLB {
-    111.13.235.245 80
-}
-
-deny_address_group 111.13.235.245_deny {
-}
-
-virtual_server  group 111.13.235.245-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.245_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.245 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.245 bond1.kni;"
-
-    real_server 192.168.22.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 96 ##############################
-virtual_server_group 192.168.1.55-80-TCP_QLB {
-    192.168.1.55 80
-}
-
-deny_address_group 192.168.1.55_deny {
-}
-
-virtual_server  group 192.168.1.55-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.55_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.55 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.55 bond1.kni;"
-
-    real_server 192.168.58.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 97 ##############################
-virtual_server_group 192.168.1.88-80-TCP_QLB {
-    192.168.1.88 80
-}
-
-deny_address_group 192.168.1.88_deny {
-}
-
-virtual_server  group 192.168.1.88-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.88_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.88 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.88 bond1.kni;"
-
-    real_server 192.168.34.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 98 ##############################
-virtual_server_group 111.13.235.169-80-TCP_QLB {
-    111.13.235.169 80
-}
-
-deny_address_group 111.13.235.169_deny {
-}
-
-virtual_server  group 111.13.235.169-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.169_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.169 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.169 bond1.kni;"
-
-    real_server 192.168.19.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 99 ##############################
-virtual_server_group 111.13.235.86-80-TCP_QLB {
-    111.13.235.86 80
-}
-
-deny_address_group 111.13.235.86_deny {
-}
-
-virtual_server  group 111.13.235.86-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.86_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.86 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.86 bond1.kni;"
-
-    real_server 192.168.17.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 100 ##############################
-virtual_server_group 111.13.235.122-80-TCP_QLB {
-    111.13.235.122 80
-}
-
-deny_address_group 111.13.235.122_deny {
-}
-
-virtual_server  group 111.13.235.122-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.122_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.122 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.122 bond1.kni;"
-
-    real_server 192.168.1.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 101 ##############################
-virtual_server_group 111.13.235.91-80-TCP_QLB {
-    111.13.235.91 80
-}
-
-deny_address_group 111.13.235.91_deny {
-}
-
-virtual_server  group 111.13.235.91-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.91_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.91 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.91 bond1.kni;"
-
-    real_server 192.168.21.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 102 ##############################
-virtual_server_group 192.168.1.51-80-TCP_QLB {
-    192.168.1.51 80
-}
-
-deny_address_group 192.168.1.51_deny {
-}
-
-virtual_server  group 192.168.1.51-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.51_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.51 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.51 bond1.kni;"
-
-    real_server 192.168.13.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 103 ##############################
-virtual_server_group 192.168.1.4-80-TCP_QLB {
-    192.168.1.4 80
-}
-
-deny_address_group 192.168.1.4_deny {
-}
-
-virtual_server  group 192.168.1.4-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.4_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.4 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.4 bond1.kni;"
-
-    real_server 192.168.10.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 104 ##############################
-virtual_server_group 192.168.1.54-80-TCP_QLB {
-    192.168.1.54 80
-}
-
-deny_address_group 192.168.1.54_deny {
-}
-
-virtual_server  group 192.168.1.54-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.54_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.54 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.54 bond1.kni;"
-
-    real_server 192.168.53.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 105 ##############################
-virtual_server_group 111.13.235.151-80-TCP_QLB {
-    111.13.235.151 80
-}
-
-deny_address_group 111.13.235.151_deny {
-}
-
-virtual_server  group 111.13.235.151-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.151_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.151 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.151 bond1.kni;"
-
-    real_server 192.168.41.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 106 ##############################
-virtual_server_group 111.13.235.83-80-TCP_QLB {
-    111.13.235.83 80
-}
-
-deny_address_group 111.13.235.83_deny {
-}
-
-virtual_server  group 111.13.235.83-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.83_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.83 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.83 bond1.kni;"
-
-    real_server 192.168.53.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 107 ##############################
-virtual_server_group 192.168.1.29-80-TCP_QLB {
-    192.168.1.29 80
-}
-
-deny_address_group 192.168.1.29_deny {
-}
-
-virtual_server  group 192.168.1.29-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.29_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.29 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.29 bond1.kni;"
-
-    real_server 192.168.7.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 108 ##############################
-virtual_server_group 111.13.235.75-80-TCP_QLB {
-    111.13.235.75 80
-}
-
-deny_address_group 111.13.235.75_deny {
-}
-
-virtual_server  group 111.13.235.75-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.75_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.75 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.75 bond1.kni;"
-
-    real_server 192.168.58.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 109 ##############################
-virtual_server_group 192.168.1.10-80-TCP_QLB {
-    192.168.1.10 80
-}
-
-deny_address_group 192.168.1.10_deny {
-}
-
-virtual_server  group 192.168.1.10-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.10_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.10 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.10 bond1.kni;"
-
-    real_server 192.168.14.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 110 ##############################
-virtual_server_group 192.168.1.59-80-TCP_QLB {
-    192.168.1.59 80
-}
-
-deny_address_group 192.168.1.59_deny {
-}
-
-virtual_server  group 192.168.1.59-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.59_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.59 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.59 bond1.kni;"
-
-    real_server 192.168.33.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 111 ##############################
-virtual_server_group 192.168.1.95-80-TCP_QLB {
-    192.168.1.95 80
-}
-
-deny_address_group 192.168.1.95_deny {
-}
-
-virtual_server  group 192.168.1.95-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.95_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.95 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.95 bond1.kni;"
-
-    real_server 192.168.17.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 112 ##############################
-virtual_server_group 111.13.235.124-80-TCP_QLB {
-    111.13.235.124 80
-}
-
-deny_address_group 111.13.235.124_deny {
-}
-
-virtual_server  group 111.13.235.124-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.124_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.124 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.124 bond1.kni;"
-
-    real_server 192.168.5.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 113 ##############################
-virtual_server_group 111.13.235.94-80-TCP_QLB {
-    111.13.235.94 80
-}
-
-deny_address_group 111.13.235.94_deny {
-}
-
-virtual_server  group 111.13.235.94-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.94_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.94 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.94 bond1.kni;"
-
-    real_server 192.168.54.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 114 ##############################
-virtual_server_group 192.168.1.24-80-TCP_QLB {
-    192.168.1.24 80
-}
-
-deny_address_group 192.168.1.24_deny {
-}
-
-virtual_server  group 192.168.1.24-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.24_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.24 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.24 bond1.kni;"
-
-    real_server 192.168.26.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 115 ##############################
-virtual_server_group 111.13.235.230-80-TCP_QLB {
-    111.13.235.230 80
-}
-
-deny_address_group 111.13.235.230_deny {
-}
-
-virtual_server  group 111.13.235.230-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.230_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.230 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.230 bond1.kni;"
-
-    real_server 192.168.23.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 116 ##############################
-virtual_server_group 192.168.1.45-80-TCP_QLB {
-    192.168.1.45 80
-}
-
-deny_address_group 192.168.1.45_deny {
-}
-
-virtual_server  group 192.168.1.45-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.45_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.45 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.45 bond1.kni;"
-
-    real_server 192.168.45.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 117 ##############################
-virtual_server_group 192.168.1.27-80-TCP_QLB {
-    192.168.1.27 80
-}
-
-deny_address_group 192.168.1.27_deny {
-}
-
-virtual_server  group 192.168.1.27-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.27_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.27 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.27 bond1.kni;"
-
-    real_server 192.168.17.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 118 ##############################
-virtual_server_group 192.168.1.61-80-TCP_QLB {
-    192.168.1.61 80
-}
-
-deny_address_group 192.168.1.61_deny {
-}
-
-virtual_server  group 192.168.1.61-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.61_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.61 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.61 bond1.kni;"
-
-    real_server 192.168.59.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 119 ##############################
-virtual_server_group 192.168.1.37-80-TCP_QLB {
-    192.168.1.37 80
-}
-
-deny_address_group 192.168.1.37_deny {
-}
-
-virtual_server  group 192.168.1.37-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.37_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.37 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.37 bond1.kni;"
-
-    real_server 192.168.47.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 120 ##############################
-virtual_server_group 111.13.235.149-80-TCP_QLB {
-    111.13.235.149 80
-}
-
-deny_address_group 111.13.235.149_deny {
-}
-
-virtual_server  group 111.13.235.149-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.149_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.149 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.149 bond1.kni;"
-
-    real_server 192.168.58.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 121 ##############################
-virtual_server_group 111.13.235.77-80-TCP_QLB {
-    111.13.235.77 80
-}
-
-deny_address_group 111.13.235.77_deny {
-}
-
-virtual_server  group 111.13.235.77-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.77_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.77 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.77 bond1.kni;"
-
-    real_server 192.168.14.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 122 ##############################
-virtual_server_group 111.13.235.232-80-TCP_QLB {
-    111.13.235.232 80
-}
-
-deny_address_group 111.13.235.232_deny {
-}
-
-virtual_server  group 111.13.235.232-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.232_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.232 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.232 bond1.kni;"
-
-    real_server 192.168.18.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 123 ##############################
-virtual_server_group 111.13.235.138-80-TCP_QLB {
-    111.13.235.138 80
-}
-
-deny_address_group 111.13.235.138_deny {
-}
-
-virtual_server  group 111.13.235.138-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.138_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.138 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.138 bond1.kni;"
-
-    real_server 192.168.6.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 124 ##############################
-virtual_server_group 192.168.1.38-80-TCP_QLB {
-    192.168.1.38 80
-}
-
-deny_address_group 192.168.1.38_deny {
-}
-
-virtual_server  group 192.168.1.38-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.38_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.38 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.38 bond1.kni;"
-
-    real_server 192.168.45.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 125 ##############################
-virtual_server_group 111.13.235.80-80-TCP_QLB {
-    111.13.235.80 80
-}
-
-deny_address_group 111.13.235.80_deny {
-}
-
-virtual_server  group 111.13.235.80-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.80_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.80 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.80 bond1.kni;"
-
-    real_server 192.168.10.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 126 ##############################
-virtual_server_group 111.13.235.133-80-TCP_QLB {
-    111.13.235.133 80
-}
-
-deny_address_group 111.13.235.133_deny {
-}
-
-virtual_server  group 111.13.235.133-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.133_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.133 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.133 bond1.kni;"
-
-    real_server 192.168.47.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 127 ##############################
-virtual_server_group 192.168.1.41-80-TCP_QLB {
-    192.168.1.41 80
-}
-
-deny_address_group 192.168.1.41_deny {
-}
-
-virtual_server  group 192.168.1.41-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.41_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.41 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.41 bond1.kni;"
-
-    real_server 192.168.25.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 128 ##############################
-virtual_server_group 192.168.1.77-80-TCP_QLB {
-    192.168.1.77 80
-}
-
-deny_address_group 192.168.1.77_deny {
-}
-
-virtual_server  group 192.168.1.77-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.77_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.77 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.77 bond1.kni;"
-
-    real_server 192.168.54.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 129 ##############################
-virtual_server_group 192.168.1.56-80-TCP_QLB {
-    192.168.1.56 80
-}
-
-deny_address_group 192.168.1.56_deny {
-}
-
-virtual_server  group 192.168.1.56-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.56_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.56 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.56 bond1.kni;"
-
-    real_server 192.168.37.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 130 ##############################
-virtual_server_group 111.13.235.113-80-TCP_QLB {
-    111.13.235.113 80
-}
-
-deny_address_group 111.13.235.113_deny {
-}
-
-virtual_server  group 111.13.235.113-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.113_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.113 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.113 bond1.kni;"
-
-    real_server 192.168.58.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 131 ##############################
-virtual_server_group 111.13.235.167-80-TCP_QLB {
-    111.13.235.167 80
-}
-
-deny_address_group 111.13.235.167_deny {
-}
-
-virtual_server  group 111.13.235.167-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.167_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.167 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.167 bond1.kni;"
-
-    real_server 192.168.7.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 132 ##############################
-virtual_server_group 111.13.235.217-80-TCP_QLB {
-    111.13.235.217 80
-}
-
-deny_address_group 111.13.235.217_deny {
-}
-
-virtual_server  group 111.13.235.217-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.217_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.217 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.217 bond1.kni;"
-
-    real_server 192.168.7.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 133 ##############################
-virtual_server_group 111.13.235.204-80-TCP_QLB {
-    111.13.235.204 80
-}
-
-deny_address_group 111.13.235.204_deny {
-}
-
-virtual_server  group 111.13.235.204-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.204_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.204 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.204 bond1.kni;"
-
-    real_server 192.168.45.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 134 ##############################
-virtual_server_group 192.168.1.18-80-TCP_QLB {
-    192.168.1.18 80
-}
-
-deny_address_group 192.168.1.18_deny {
-}
-
-virtual_server  group 192.168.1.18-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.18_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.18 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.18 bond1.kni;"
-
-    real_server 192.168.43.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 135 ##############################
-virtual_server_group 111.13.235.215-80-TCP_QLB {
-    111.13.235.215 80
-}
-
-deny_address_group 111.13.235.215_deny {
-}
-
-virtual_server  group 111.13.235.215-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.215_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.215 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.215 bond1.kni;"
-
-    real_server 192.168.43.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 136 ##############################
-virtual_server_group 111.13.235.190-80-TCP_QLB {
-    111.13.235.190 80
-}
-
-deny_address_group 111.13.235.190_deny {
-}
-
-virtual_server  group 111.13.235.190-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.190_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.190 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.190 bond1.kni;"
-
-    real_server 192.168.27.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 137 ##############################
-virtual_server_group 111.13.235.171-80-TCP_QLB {
-    111.13.235.171 80
-}
-
-deny_address_group 111.13.235.171_deny {
-}
-
-virtual_server  group 111.13.235.171-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.171_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.171 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.171 bond1.kni;"
-
-    real_server 192.168.27.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 138 ##############################
-virtual_server_group 192.168.1.81-80-TCP_QLB {
-    192.168.1.81 80
-}
-
-deny_address_group 192.168.1.81_deny {
-}
-
-virtual_server  group 192.168.1.81-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.81_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.81 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.81 bond1.kni;"
-
-    real_server 192.168.31.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 139 ##############################
-virtual_server_group 111.13.235.162-80-TCP_QLB {
-    111.13.235.162 80
-}
-
-deny_address_group 111.13.235.162_deny {
-}
-
-virtual_server  group 111.13.235.162-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.162_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.162 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.162 bond1.kni;"
-
-    real_server 192.168.10.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 140 ##############################
-virtual_server_group 111.13.235.251-80-TCP_QLB {
-    111.13.235.251 80
-}
-
-deny_address_group 111.13.235.251_deny {
-}
-
-virtual_server  group 111.13.235.251-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.251_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.251 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.251 bond1.kni;"
-
-    real_server 192.168.45.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 141 ##############################
-virtual_server_group 192.168.1.47-80-TCP_QLB {
-    192.168.1.47 80
-}
-
-deny_address_group 192.168.1.47_deny {
-}
-
-virtual_server  group 192.168.1.47-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.47_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.47 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.47 bond1.kni;"
-
-    real_server 192.168.41.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 142 ##############################
-virtual_server_group 192.168.1.73-80-TCP_QLB {
-    192.168.1.73 80
-}
-
-deny_address_group 192.168.1.73_deny {
-}
-
-virtual_server  group 192.168.1.73-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.73_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.73 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.73 bond1.kni;"
-
-    real_server 192.168.13.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 143 ##############################
-virtual_server_group 111.13.235.178-80-TCP_QLB {
-    111.13.235.178 80
-}
-
-deny_address_group 111.13.235.178_deny {
-}
-
-virtual_server  group 111.13.235.178-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.178_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.178 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.178 bond1.kni;"
-
-    real_server 192.168.21.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 144 ##############################
-virtual_server_group 192.168.1.7-80-TCP_QLB {
-    192.168.1.7 80
-}
-
-deny_address_group 192.168.1.7_deny {
-}
-
-virtual_server  group 192.168.1.7-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.7_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.7 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.7 bond1.kni;"
-
-    real_server 192.168.49.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 145 ##############################
-virtual_server_group 111.13.235.192-80-TCP_QLB {
-    111.13.235.192 80
-}
-
-deny_address_group 111.13.235.192_deny {
-}
-
-virtual_server  group 111.13.235.192-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.192_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.192 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.192 bond1.kni;"
-
-    real_server 192.168.33.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 146 ##############################
-virtual_server_group 111.13.235.227-80-TCP_QLB {
-    111.13.235.227 80
-}
-
-deny_address_group 111.13.235.227_deny {
-}
-
-virtual_server  group 111.13.235.227-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.227_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.227 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.227 bond1.kni;"
-
-    real_server 192.168.42.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 147 ##############################
-virtual_server_group 111.13.235.110-80-TCP_QLB {
-    111.13.235.110 80
-}
-
-deny_address_group 111.13.235.110_deny {
-}
-
-virtual_server  group 111.13.235.110-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.110_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.110 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.110 bond1.kni;"
-
-    real_server 192.168.42.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 148 ##############################
-virtual_server_group 111.13.235.247-80-TCP_QLB {
-    111.13.235.247 80
-}
-
-deny_address_group 111.13.235.247_deny {
-}
-
-virtual_server  group 111.13.235.247-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.247_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.247 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.247 bond1.kni;"
-
-    real_server 192.168.50.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 149 ##############################
-virtual_server_group 111.13.235.67-80-TCP_QLB {
-    111.13.235.67 80
-}
-
-deny_address_group 111.13.235.67_deny {
-}
-
-virtual_server  group 111.13.235.67-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.67_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.67 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.67 bond1.kni;"
-
-    real_server 192.168.50.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 150 ##############################
-virtual_server_group 192.168.1.90-80-TCP_QLB {
-    192.168.1.90 80
-}
-
-deny_address_group 192.168.1.90_deny {
-}
-
-virtual_server  group 192.168.1.90-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.90_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.90 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.90 bond1.kni;"
-
-    real_server 192.168.57.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 151 ##############################
-virtual_server_group 192.168.1.44-80-TCP_QLB {
-    192.168.1.44 80
-}
-
-deny_address_group 192.168.1.44_deny {
-}
-
-virtual_server  group 192.168.1.44-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.44_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.44 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.44 bond1.kni;"
-
-    real_server 192.168.18.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 152 ##############################
-virtual_server_group 111.13.235.203-80-TCP_QLB {
-    111.13.235.203 80
-}
-
-deny_address_group 111.13.235.203_deny {
-}
-
-virtual_server  group 111.13.235.203-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.203_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.203 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.203 bond1.kni;"
-
-    real_server 192.168.35.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 153 ##############################
-virtual_server_group 192.168.1.26-80-TCP_QLB {
-    192.168.1.26 80
-}
-
-deny_address_group 192.168.1.26_deny {
-}
-
-virtual_server  group 192.168.1.26-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.26_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.26 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.26 bond1.kni;"
-
-    real_server 192.168.7.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 154 ##############################
-virtual_server_group 111.13.235.172-80-TCP_QLB {
-    111.13.235.172 80
-}
-
-deny_address_group 111.13.235.172_deny {
-}
-
-virtual_server  group 111.13.235.172-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.172_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.172 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.172 bond1.kni;"
-
-    real_server 192.168.58.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 155 ##############################
-virtual_server_group 111.13.235.182-80-TCP_QLB {
-    111.13.235.182 80
-}
-
-deny_address_group 111.13.235.182_deny {
-}
-
-virtual_server  group 111.13.235.182-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.182_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.182 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.182 bond1.kni;"
-
-    real_server 192.168.39.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 156 ##############################
-virtual_server_group 111.13.235.161-80-TCP_QLB {
-    111.13.235.161 80
-}
-
-deny_address_group 111.13.235.161_deny {
-}
-
-virtual_server  group 111.13.235.161-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.161_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.161 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.161 bond1.kni;"
-
-    real_server 192.168.6.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 157 ##############################
-virtual_server_group 111.13.235.221-80-TCP_QLB {
-    111.13.235.221 80
-}
-
-deny_address_group 111.13.235.221_deny {
-}
-
-virtual_server  group 111.13.235.221-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.221_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.221 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.221 bond1.kni;"
-
-    real_server 192.168.58.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 158 ##############################
-virtual_server_group 111.13.235.136-80-TCP_QLB {
-    111.13.235.136 80
-}
-
-deny_address_group 111.13.235.136_deny {
-}
-
-virtual_server  group 111.13.235.136-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.136_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.136 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.136 bond1.kni;"
-
-    real_server 192.168.58.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 159 ##############################
-virtual_server_group 192.168.1.46-80-TCP_QLB {
-    192.168.1.46 80
-}
-
-deny_address_group 192.168.1.46_deny {
-}
-
-virtual_server  group 192.168.1.46-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.46_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.46 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.46 bond1.kni;"
-
-    real_server 192.168.2.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 160 ##############################
-virtual_server_group 111.13.235.99-80-TCP_QLB {
-    111.13.235.99 80
-}
-
-deny_address_group 111.13.235.99_deny {
-}
-
-virtual_server  group 111.13.235.99-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.99_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.99 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.99 bond1.kni;"
-
-    real_server 192.168.27.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 161 ##############################
-virtual_server_group 111.13.235.92-80-TCP_QLB {
-    111.13.235.92 80
-}
-
-deny_address_group 111.13.235.92_deny {
-}
-
-virtual_server  group 111.13.235.92-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.92_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.92 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.92 bond1.kni;"
-
-    real_server 192.168.1.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 162 ##############################
-virtual_server_group 111.13.235.240-80-TCP_QLB {
-    111.13.235.240 80
-}
-
-deny_address_group 111.13.235.240_deny {
-}
-
-virtual_server  group 111.13.235.240-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.240_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.240 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.240 bond1.kni;"
-
-    real_server 192.168.54.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 163 ##############################
-virtual_server_group 111.13.235.120-80-TCP_QLB {
-    111.13.235.120 80
-}
-
-deny_address_group 111.13.235.120_deny {
-}
-
-virtual_server  group 111.13.235.120-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.120_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.120 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.120 bond1.kni;"
-
-    real_server 192.168.19.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 164 ##############################
-virtual_server_group 111.13.235.72-80-TCP_QLB {
-    111.13.235.72 80
-}
-
-deny_address_group 111.13.235.72_deny {
-}
-
-virtual_server  group 111.13.235.72-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.72_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.72 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.72 bond1.kni;"
-
-    real_server 192.168.37.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 165 ##############################
-virtual_server_group 111.13.235.229-80-TCP_QLB {
-    111.13.235.229 80
-}
-
-deny_address_group 111.13.235.229_deny {
-}
-
-virtual_server  group 111.13.235.229-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.229_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.229 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.229 bond1.kni;"
-
-    real_server 192.168.7.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 166 ##############################
-virtual_server_group 192.168.1.36-80-TCP_QLB {
-    192.168.1.36 80
-}
-
-deny_address_group 192.168.1.36_deny {
-}
-
-virtual_server  group 192.168.1.36-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.36_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.36 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.36 bond1.kni;"
-
-    real_server 192.168.57.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 167 ##############################
-virtual_server_group 111.13.235.223-80-TCP_QLB {
-    111.13.235.223 80
-}
-
-deny_address_group 111.13.235.223_deny {
-}
-
-virtual_server  group 111.13.235.223-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.223_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.223 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.223 bond1.kni;"
-
-    real_server 192.168.29.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 168 ##############################
-virtual_server_group 192.168.1.91-80-TCP_QLB {
-    192.168.1.91 80
-}
-
-deny_address_group 192.168.1.91_deny {
-}
-
-virtual_server  group 192.168.1.91-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.91_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.91 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.91 bond1.kni;"
-
-    real_server 192.168.33.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 169 ##############################
-virtual_server_group 111.13.235.189-80-TCP_QLB {
-    111.13.235.189 80
-}
-
-deny_address_group 111.13.235.189_deny {
-}
-
-virtual_server  group 111.13.235.189-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.189_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.189 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.189 bond1.kni;"
-
-    real_server 192.168.51.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 170 ##############################
-virtual_server_group 111.13.235.152-80-TCP_QLB {
-    111.13.235.152 80
-}
-
-deny_address_group 111.13.235.152_deny {
-}
-
-virtual_server  group 111.13.235.152-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.152_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.152 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.152 bond1.kni;"
-
-    real_server 192.168.29.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 171 ##############################
-virtual_server_group 111.13.235.68-80-TCP_QLB {
-    111.13.235.68 80
-}
-
-deny_address_group 111.13.235.68_deny {
-}
-
-virtual_server  group 111.13.235.68-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.68_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.68 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.68 bond1.kni;"
-
-    real_server 192.168.11.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 172 ##############################
-virtual_server_group 111.13.235.104-80-TCP_QLB {
-    111.13.235.104 80
-}
-
-deny_address_group 111.13.235.104_deny {
-}
-
-virtual_server  group 111.13.235.104-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.104_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.104 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.104 bond1.kni;"
-
-    real_server 192.168.9.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 173 ##############################
-virtual_server_group 111.13.235.145-80-TCP_QLB {
-    111.13.235.145 80
-}
-
-deny_address_group 111.13.235.145_deny {
-}
-
-virtual_server  group 111.13.235.145-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.145_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.145 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.145 bond1.kni;"
-
-    real_server 192.168.27.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 174 ##############################
-virtual_server_group 111.13.235.218-80-TCP_QLB {
-    111.13.235.218 80
-}
-
-deny_address_group 111.13.235.218_deny {
-}
-
-virtual_server  group 111.13.235.218-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.218_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.218 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.218 bond1.kni;"
-
-    real_server 192.168.17.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 175 ##############################
-virtual_server_group 111.13.235.248-80-TCP_QLB {
-    111.13.235.248 80
-}
-
-deny_address_group 111.13.235.248_deny {
-}
-
-virtual_server  group 111.13.235.248-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.248_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.248 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.248 bond1.kni;"
-
-    real_server 192.168.58.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 176 ##############################
-virtual_server_group 192.168.1.62-80-TCP_QLB {
-    192.168.1.62 80
-}
-
-deny_address_group 192.168.1.62_deny {
-}
-
-virtual_server  group 192.168.1.62-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.62_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.62 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.62 bond1.kni;"
-
-    real_server 192.168.41.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 177 ##############################
-virtual_server_group 111.13.235.255-80-TCP_QLB {
-    111.13.235.255 80
-}
-
-deny_address_group 111.13.235.255_deny {
-}
-
-virtual_server  group 111.13.235.255-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.255_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.255 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.255 bond1.kni;"
-
-    real_server 192.168.46.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 178 ##############################
-virtual_server_group 111.13.235.137-80-TCP_QLB {
-    111.13.235.137 80
-}
-
-deny_address_group 111.13.235.137_deny {
-}
-
-virtual_server  group 111.13.235.137-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.137_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.137 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.137 bond1.kni;"
-
-    real_server 192.168.18.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 179 ##############################
-virtual_server_group 111.13.235.157-80-TCP_QLB {
-    111.13.235.157 80
-}
-
-deny_address_group 111.13.235.157_deny {
-}
-
-virtual_server  group 111.13.235.157-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.157_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.157 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.157 bond1.kni;"
-
-    real_server 192.168.58.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 180 ##############################
-virtual_server_group 111.13.235.206-80-TCP_QLB {
-    111.13.235.206 80
-}
-
-deny_address_group 111.13.235.206_deny {
-}
-
-virtual_server  group 111.13.235.206-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.206_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.206 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.206 bond1.kni;"
-
-    real_server 192.168.50.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 181 ##############################
-virtual_server_group 111.13.235.121-80-TCP_QLB {
-    111.13.235.121 80
-}
-
-deny_address_group 111.13.235.121_deny {
-}
-
-virtual_server  group 111.13.235.121-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.121_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.121 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.121 bond1.kni;"
-
-    real_server 192.168.42.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 182 ##############################
-virtual_server_group 192.168.1.76-80-TCP_QLB {
-    192.168.1.76 80
-}
-
-deny_address_group 192.168.1.76_deny {
-}
-
-virtual_server  group 192.168.1.76-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.76_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.76 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.76 bond1.kni;"
-
-    real_server 192.168.19.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 183 ##############################
-virtual_server_group 192.168.1.72-80-TCP_QLB {
-    192.168.1.72 80
-}
-
-deny_address_group 192.168.1.72_deny {
-}
-
-virtual_server  group 192.168.1.72-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.72_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.72 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.72 bond1.kni;"
-
-    real_server 192.168.17.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 184 ##############################
-virtual_server_group 111.13.235.214-80-TCP_QLB {
-    111.13.235.214 80
-}
-
-deny_address_group 111.13.235.214_deny {
-}
-
-virtual_server  group 111.13.235.214-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.214_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.214 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.214 bond1.kni;"
-
-    real_server 192.168.46.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 185 ##############################
-virtual_server_group 111.13.235.71-80-TCP_QLB {
-    111.13.235.71 80
-}
-
-deny_address_group 111.13.235.71_deny {
-}
-
-virtual_server  group 111.13.235.71-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.71_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.71 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.71 bond1.kni;"
-
-    real_server 192.168.11.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 186 ##############################
-virtual_server_group 111.13.235.102-80-TCP_QLB {
-    111.13.235.102 80
-}
-
-deny_address_group 111.13.235.102_deny {
-}
-
-virtual_server  group 111.13.235.102-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.102_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.102 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.102 bond1.kni;"
-
-    real_server 192.168.47.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 187 ##############################
-virtual_server_group 111.13.235.140-80-TCP_QLB {
-    111.13.235.140 80
-}
-
-deny_address_group 111.13.235.140_deny {
-}
-
-virtual_server  group 111.13.235.140-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.140_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.140 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.140 bond1.kni;"
-
-    real_server 192.168.43.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 188 ##############################
-virtual_server_group 111.13.235.195-80-TCP_QLB {
-    111.13.235.195 80
-}
-
-deny_address_group 111.13.235.195_deny {
-}
-
-virtual_server  group 111.13.235.195-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.195_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.195 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.195 bond1.kni;"
-
-    real_server 192.168.3.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 189 ##############################
-virtual_server_group 192.168.1.89-80-TCP_QLB {
-    192.168.1.89 80
-}
-
-deny_address_group 192.168.1.89_deny {
-}
-
-virtual_server  group 192.168.1.89-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.89_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.89 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.89 bond1.kni;"
-
-    real_server 192.168.11.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 190 ##############################
-virtual_server_group 192.168.1.78-80-TCP_QLB {
-    192.168.1.78 80
-}
-
-deny_address_group 192.168.1.78_deny {
-}
-
-virtual_server  group 192.168.1.78-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.78_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.78 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.78 bond1.kni;"
-
-    real_server 192.168.46.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 191 ##############################
-virtual_server_group 111.13.235.250-80-TCP_QLB {
-    111.13.235.250 80
-}
-
-deny_address_group 111.13.235.250_deny {
-}
-
-virtual_server  group 111.13.235.250-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.250_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.250 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.250 bond1.kni;"
-
-    real_server 192.168.58.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 192 ##############################
-virtual_server_group 192.168.1.39-80-TCP_QLB {
-    192.168.1.39 80
-}
-
-deny_address_group 192.168.1.39_deny {
-}
-
-virtual_server  group 192.168.1.39-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.39_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.39 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.39 bond1.kni;"
-
-    real_server 192.168.33.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 193 ##############################
-virtual_server_group 111.13.235.198-80-TCP_QLB {
-    111.13.235.198 80
-}
-
-deny_address_group 111.13.235.198_deny {
-}
-
-virtual_server  group 111.13.235.198-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.198_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.198 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.198 bond1.kni;"
-
-    real_server 192.168.35.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 194 ##############################
-virtual_server_group 111.13.235.123-80-TCP_QLB {
-    111.13.235.123 80
-}
-
-deny_address_group 111.13.235.123_deny {
-}
-
-virtual_server  group 111.13.235.123-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.123_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.123 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.123 bond1.kni;"
-
-    real_server 192.168.6.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 195 ##############################
-virtual_server_group 192.168.1.100-80-TCP_QLB {
-    192.168.1.100 80
-}
-
-deny_address_group 192.168.1.100_deny {
-}
-
-virtual_server  group 192.168.1.100-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.100_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.100 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.100 bond1.kni;"
-
-    real_server 192.168.25.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 196 ##############################
-virtual_server_group 111.13.235.97-80-TCP_QLB {
-    111.13.235.97 80
-}
-
-deny_address_group 111.13.235.97_deny {
-}
-
-virtual_server  group 111.13.235.97-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.97_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.97 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.97 bond1.kni;"
-
-    real_server 192.168.6.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 197 ##############################
-virtual_server_group 111.13.235.112-80-TCP_QLB {
-    111.13.235.112 80
-}
-
-deny_address_group 111.13.235.112_deny {
-}
-
-virtual_server  group 111.13.235.112-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.112_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.112 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.112 bond1.kni;"
-
-    real_server 192.168.7.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 198 ##############################
-virtual_server_group 111.13.235.154-80-TCP_QLB {
-    111.13.235.154 80
-}
-
-deny_address_group 111.13.235.154_deny {
-}
-
-virtual_server  group 111.13.235.154-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.154_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.154 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.154 bond1.kni;"
-
-    real_server 192.168.41.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 199 ##############################
-virtual_server_group 111.13.235.119-80-TCP_QLB {
-    111.13.235.119 80
-}
-
-deny_address_group 111.13.235.119_deny {
-}
-
-virtual_server  group 111.13.235.119-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.119_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.119 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.119 bond1.kni;"
-
-    real_server 192.168.34.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 200 ##############################
-virtual_server_group 192.168.1.84-80-TCP_QLB {
-    192.168.1.84 80
-}
-
-deny_address_group 192.168.1.84_deny {
-}
-
-virtual_server  group 192.168.1.84-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.84_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.84 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.84 bond1.kni;"
-
-    real_server 192.168.59.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 201 ##############################
-virtual_server_group 111.13.235.159-80-TCP_QLB {
-    111.13.235.159 80
-}
-
-deny_address_group 111.13.235.159_deny {
-}
-
-virtual_server  group 111.13.235.159-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.159_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.159 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.159 bond1.kni;"
-
-    real_server 192.168.55.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 202 ##############################
-virtual_server_group 192.168.1.28-80-TCP_QLB {
-    192.168.1.28 80
-}
-
-deny_address_group 192.168.1.28_deny {
-}
-
-virtual_server  group 192.168.1.28-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.28_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.28 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.28 bond1.kni;"
-
-    real_server 192.168.3.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 203 ##############################
-virtual_server_group 111.13.235.187-80-TCP_QLB {
-    111.13.235.187 80
-}
-
-deny_address_group 111.13.235.187_deny {
-}
-
-virtual_server  group 111.13.235.187-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.187_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.187 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.187 bond1.kni;"
-
-    real_server 192.168.5.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 204 ##############################
-virtual_server_group 192.168.1.12-80-TCP_QLB {
-    192.168.1.12 80
-}
-
-deny_address_group 192.168.1.12_deny {
-}
-
-virtual_server  group 192.168.1.12-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.12_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.12 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.12 bond1.kni;"
-
-    real_server 192.168.13.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 205 ##############################
-virtual_server_group 111.13.235.234-80-TCP_QLB {
-    111.13.235.234 80
-}
-
-deny_address_group 111.13.235.234_deny {
-}
-
-virtual_server  group 111.13.235.234-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.234_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.234 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.234 bond1.kni;"
-
-    real_server 192.168.58.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 206 ##############################
-virtual_server_group 192.168.1.68-80-TCP_QLB {
-    192.168.1.68 80
-}
-
-deny_address_group 192.168.1.68_deny {
-}
-
-virtual_server  group 192.168.1.68-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.68_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.68 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.68 bond1.kni;"
-
-    real_server 192.168.50.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 207 ##############################
-virtual_server_group 111.13.235.82-80-TCP_QLB {
-    111.13.235.82 80
-}
-
-deny_address_group 111.13.235.82_deny {
-}
-
-virtual_server  group 111.13.235.82-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.82_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.82 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.82 bond1.kni;"
-
-    real_server 192.168.54.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 208 ##############################
-virtual_server_group 192.168.1.50-80-TCP_QLB {
-    192.168.1.50 80
-}
-
-deny_address_group 192.168.1.50_deny {
-}
-
-virtual_server  group 192.168.1.50-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.50_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.50 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.50 bond1.kni;"
-
-    real_server 192.168.54.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 209 ##############################
-virtual_server_group 111.13.235.96-80-TCP_QLB {
-    111.13.235.96 80
-}
-
-deny_address_group 111.13.235.96_deny {
-}
-
-virtual_server  group 111.13.235.96-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.96_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.96 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.96 bond1.kni;"
-
-    real_server 192.168.51.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 210 ##############################
-virtual_server_group 111.13.235.108-80-TCP_QLB {
-    111.13.235.108 80
-}
-
-deny_address_group 111.13.235.108_deny {
-}
-
-virtual_server  group 111.13.235.108-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.108_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.108 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.108 bond1.kni;"
-
-    real_server 192.168.2.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 211 ##############################
-virtual_server_group 111.13.235.213-80-TCP_QLB {
-    111.13.235.213 80
-}
-
-deny_address_group 111.13.235.213_deny {
-}
-
-virtual_server  group 111.13.235.213-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.213_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.213 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.213 bond1.kni;"
-
-    real_server 192.168.7.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 212 ##############################
-virtual_server_group 111.13.235.158-80-TCP_QLB {
-    111.13.235.158 80
-}
-
-deny_address_group 111.13.235.158_deny {
-}
-
-virtual_server  group 111.13.235.158-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.158_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.158 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.158 bond1.kni;"
-
-    real_server 192.168.30.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 213 ##############################
-virtual_server_group 192.168.1.5-80-TCP_QLB {
-    192.168.1.5 80
-}
-
-deny_address_group 192.168.1.5_deny {
-}
-
-virtual_server  group 192.168.1.5-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.5_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.5 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.5 bond1.kni;"
-
-    real_server 192.168.17.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 214 ##############################
-virtual_server_group 192.168.1.8-80-TCP_QLB {
-    192.168.1.8 80
-}
-
-deny_address_group 192.168.1.8_deny {
-}
-
-virtual_server  group 192.168.1.8-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.8_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.8 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.8 bond1.kni;"
-
-    real_server 192.168.19.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 215 ##############################
-virtual_server_group 111.13.235.88-80-TCP_QLB {
-    111.13.235.88 80
-}
-
-deny_address_group 111.13.235.88_deny {
-}
-
-virtual_server  group 111.13.235.88-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.88_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.88 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.88 bond1.kni;"
-
-    real_server 192.168.37.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 216 ##############################
-virtual_server_group 192.168.1.31-80-TCP_QLB {
-    192.168.1.31 80
-}
-
-deny_address_group 192.168.1.31_deny {
-}
-
-virtual_server  group 192.168.1.31-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.31_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.31 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.31 bond1.kni;"
-
-    real_server 192.168.43.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 217 ##############################
-virtual_server_group 192.168.1.35-80-TCP_QLB {
-    192.168.1.35 80
-}
-
-deny_address_group 192.168.1.35_deny {
-}
-
-virtual_server  group 192.168.1.35-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.35_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.35 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.35 bond1.kni;"
-
-    real_server 192.168.46.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 218 ##############################
-virtual_server_group 111.13.235.87-80-TCP_QLB {
-    111.13.235.87 80
-}
-
-deny_address_group 111.13.235.87_deny {
-}
-
-virtual_server  group 111.13.235.87-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.87_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.87 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.87 bond1.kni;"
-
-    real_server 192.168.13.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 219 ##############################
-virtual_server_group 192.168.1.33-80-TCP_QLB {
-    192.168.1.33 80
-}
-
-deny_address_group 192.168.1.33_deny {
-}
-
-virtual_server  group 192.168.1.33-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.33_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.33 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.33 bond1.kni;"
-
-    real_server 192.168.39.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 220 ##############################
-virtual_server_group 111.13.235.180-80-TCP_QLB {
-    111.13.235.180 80
-}
-
-deny_address_group 111.13.235.180_deny {
-}
-
-virtual_server  group 111.13.235.180-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.180_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.180 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.180 bond1.kni;"
-
-    real_server 192.168.54.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 221 ##############################
-virtual_server_group 192.168.1.23-80-TCP_QLB {
-    192.168.1.23 80
-}
-
-deny_address_group 192.168.1.23_deny {
-}
-
-virtual_server  group 192.168.1.23-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.23_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.23 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.23 bond1.kni;"
-
-    real_server 192.168.21.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 222 ##############################
-virtual_server_group 111.13.235.191-80-TCP_QLB {
-    111.13.235.191 80
-}
-
-deny_address_group 111.13.235.191_deny {
-}
-
-virtual_server  group 111.13.235.191-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.191_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.191 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.191 bond1.kni;"
-
-    real_server 192.168.34.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 223 ##############################
-virtual_server_group 111.13.235.228-80-TCP_QLB {
-    111.13.235.228 80
-}
-
-deny_address_group 111.13.235.228_deny {
-}
-
-virtual_server  group 111.13.235.228-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.228_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.228 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.228 bond1.kni;"
-
-    real_server 192.168.27.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 224 ##############################
-virtual_server_group 192.168.1.1-80-TCP_QLB {
-    192.168.1.1 80
-}
-
-deny_address_group 192.168.1.1_deny {
-}
-
-virtual_server  group 192.168.1.1-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.1_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.1 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.1 bond1.kni;"
-
-    real_server 192.168.38.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 225 ##############################
-virtual_server_group 111.13.235.160-80-TCP_QLB {
-    111.13.235.160 80
-}
-
-deny_address_group 111.13.235.160_deny {
-}
-
-virtual_server  group 111.13.235.160-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.160_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.160 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.160 bond1.kni;"
-
-    real_server 192.168.34.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 226 ##############################
-virtual_server_group 192.168.1.93-80-TCP_QLB {
-    192.168.1.93 80
-}
-
-deny_address_group 192.168.1.93_deny {
-}
-
-virtual_server  group 192.168.1.93-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.93_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.93 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.93 bond1.kni;"
-
-    real_server 192.168.9.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 227 ##############################
-virtual_server_group 111.13.235.73-80-TCP_QLB {
-    111.13.235.73 80
-}
-
-deny_address_group 111.13.235.73_deny {
-}
-
-virtual_server  group 111.13.235.73-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.73_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.73 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.73 bond1.kni;"
-
-    real_server 192.168.14.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 228 ##############################
-virtual_server_group 111.13.235.78-80-TCP_QLB {
-    111.13.235.78 80
-}
-
-deny_address_group 111.13.235.78_deny {
-}
-
-virtual_server  group 111.13.235.78-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.78_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.78 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.78 bond1.kni;"
-
-    real_server 192.168.41.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 229 ##############################
-virtual_server_group 111.13.235.146-80-TCP_QLB {
-    111.13.235.146 80
-}
-
-deny_address_group 111.13.235.146_deny {
-}
-
-virtual_server  group 111.13.235.146-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.146_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.146 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.146 bond1.kni;"
-
-    real_server 192.168.5.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 230 ##############################
-virtual_server_group 111.13.235.226-80-TCP_QLB {
-    111.13.235.226 80
-}
-
-deny_address_group 111.13.235.226_deny {
-}
-
-virtual_server  group 111.13.235.226-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.226_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.226 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.226 bond1.kni;"
-
-    real_server 192.168.19.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 231 ##############################
-virtual_server_group 111.13.235.106-80-TCP_QLB {
-    111.13.235.106 80
-}
-
-deny_address_group 111.13.235.106_deny {
-}
-
-virtual_server  group 111.13.235.106-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.106_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.106 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.106 bond1.kni;"
-
-    real_server 192.168.13.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 232 ##############################
-virtual_server_group 192.168.1.63-80-TCP_QLB {
-    192.168.1.63 80
-}
-
-deny_address_group 192.168.1.63_deny {
-}
-
-virtual_server  group 192.168.1.63-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.63_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.63 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.63 bond1.kni;"
-
-    real_server 192.168.6.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 233 ##############################
-virtual_server_group 111.13.235.126-80-TCP_QLB {
-    111.13.235.126 80
-}
-
-deny_address_group 111.13.235.126_deny {
-}
-
-virtual_server  group 111.13.235.126-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.126_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.126 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.126 bond1.kni;"
-
-    real_server 192.168.34.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 234 ##############################
-virtual_server_group 111.13.235.170-80-TCP_QLB {
-    111.13.235.170 80
-}
-
-deny_address_group 111.13.235.170_deny {
-}
-
-virtual_server  group 111.13.235.170-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.170_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.170 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.170 bond1.kni;"
-
-    real_server 192.168.30.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 235 ##############################
-virtual_server_group 192.168.1.97-80-TCP_QLB {
-    192.168.1.97 80
-}
-
-deny_address_group 192.168.1.97_deny {
-}
-
-virtual_server  group 192.168.1.97-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.97_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.97 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.97 bond1.kni;"
-
-    real_server 192.168.26.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 236 ##############################
-virtual_server_group 111.13.235.231-80-TCP_QLB {
-    111.13.235.231 80
-}
-
-deny_address_group 111.13.235.231_deny {
-}
-
-virtual_server  group 111.13.235.231-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.231_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.231 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.231 bond1.kni;"
-
-    real_server 192.168.45.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 237 ##############################
-virtual_server_group 111.13.235.163-80-TCP_QLB {
-    111.13.235.163 80
-}
-
-deny_address_group 111.13.235.163_deny {
-}
-
-virtual_server  group 111.13.235.163-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.163_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.163 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.163 bond1.kni;"
-
-    real_server 192.168.51.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 238 ##############################
-virtual_server_group 111.13.235.200-80-TCP_QLB {
-    111.13.235.200 80
-}
-
-deny_address_group 111.13.235.200_deny {
-}
-
-virtual_server  group 111.13.235.200-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.200_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.200 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.200 bond1.kni;"
-
-    real_server 192.168.37.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 239 ##############################
-virtual_server_group 111.13.235.134-80-TCP_QLB {
-    111.13.235.134 80
-}
-
-deny_address_group 111.13.235.134_deny {
-}
-
-virtual_server  group 111.13.235.134-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.134_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.134 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.134 bond1.kni;"
-
-    real_server 192.168.58.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 240 ##############################
-virtual_server_group 111.13.235.168-80-TCP_QLB {
-    111.13.235.168 80
-}
-
-deny_address_group 111.13.235.168_deny {
-}
-
-virtual_server  group 111.13.235.168-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.168_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.168 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.168 bond1.kni;"
-
-    real_server 192.168.2.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 241 ##############################
-virtual_server_group 192.168.1.85-80-TCP_QLB {
-    192.168.1.85 80
-}
-
-deny_address_group 192.168.1.85_deny {
-}
-
-virtual_server  group 192.168.1.85-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.85_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.85 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.85 bond1.kni;"
-
-    real_server 192.168.46.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 242 ##############################
-virtual_server_group 192.168.1.65-80-TCP_QLB {
-    192.168.1.65 80
-}
-
-deny_address_group 192.168.1.65_deny {
-}
-
-virtual_server  group 192.168.1.65-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.65_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.65 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.65 bond1.kni;"
-
-    real_server 192.168.35.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 243 ##############################
-virtual_server_group 192.168.1.6-80-TCP_QLB {
-    192.168.1.6 80
-}
-
-deny_address_group 192.168.1.6_deny {
-}
-
-virtual_server  group 192.168.1.6-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.6_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.6 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.6 bond1.kni;"
-
-    real_server 192.168.38.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 244 ##############################
-virtual_server_group 111.13.235.238-80-TCP_QLB {
-    111.13.235.238 80
-}
-
-deny_address_group 111.13.235.238_deny {
-}
-
-virtual_server  group 111.13.235.238-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.238_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.238 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.238 bond1.kni;"
-
-    real_server 192.168.51.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 245 ##############################
-virtual_server_group 192.168.1.92-80-TCP_QLB {
-    192.168.1.92 80
-}
-
-deny_address_group 192.168.1.92_deny {
-}
-
-virtual_server  group 192.168.1.92-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.92_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.92 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.92 bond1.kni;"
-
-    real_server 192.168.1.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 246 ##############################
-virtual_server_group 111.13.235.175-80-TCP_QLB {
-    111.13.235.175 80
-}
-
-deny_address_group 111.13.235.175_deny {
-}
-
-virtual_server  group 111.13.235.175-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.175_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.175 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.175 bond1.kni;"
-
-    real_server 192.168.59.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 247 ##############################
-virtual_server_group 111.13.235.242-80-TCP_QLB {
-    111.13.235.242 80
-}
-
-deny_address_group 111.13.235.242_deny {
-}
-
-virtual_server  group 111.13.235.242-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.242_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.242 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.242 bond1.kni;"
-
-    real_server 192.168.57.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 248 ##############################
-virtual_server_group 192.168.1.52-80-TCP_QLB {
-    192.168.1.52 80
-}
-
-deny_address_group 192.168.1.52_deny {
-}
-
-virtual_server  group 192.168.1.52-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.52_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.52 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.52 bond1.kni;"
-
-    real_server 192.168.5.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 249 ##############################
-virtual_server_group 192.168.1.49-80-TCP_QLB {
-    192.168.1.49 80
-}
-
-deny_address_group 192.168.1.49_deny {
-}
-
-virtual_server  group 192.168.1.49-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.49_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.49 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.49 bond1.kni;"
-
-    real_server 192.168.23.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 250 ##############################
-virtual_server_group 111.13.235.216-80-TCP_QLB {
-    111.13.235.216 80
-}
-
-deny_address_group 111.13.235.216_deny {
-}
-
-virtual_server  group 111.13.235.216-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.216_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.216 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.216 bond1.kni;"
-
-    real_server 192.168.25.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 251 ##############################
-virtual_server_group 111.13.235.131-80-TCP_QLB {
-    111.13.235.131 80
-}
-
-deny_address_group 111.13.235.131_deny {
-}
-
-virtual_server  group 111.13.235.131-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.131_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.131 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.131 bond1.kni;"
-
-    real_server 192.168.33.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 252 ##############################
-virtual_server_group 111.13.235.185-80-TCP_QLB {
-    111.13.235.185 80
-}
-
-deny_address_group 111.13.235.185_deny {
-}
-
-virtual_server  group 111.13.235.185-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.185_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.185 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.185 bond1.kni;"
-
-    real_server 192.168.50.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 253 ##############################
-virtual_server_group 111.13.235.107-80-TCP_QLB {
-    111.13.235.107 80
-}
-
-deny_address_group 111.13.235.107_deny {
-}
-
-virtual_server  group 111.13.235.107-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.107_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.107 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.107 bond1.kni;"
-
-    real_server 192.168.27.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 254 ##############################
-virtual_server_group 111.13.235.202-80-TCP_QLB {
-    111.13.235.202 80
-}
-
-deny_address_group 111.13.235.202_deny {
-}
-
-virtual_server  group 111.13.235.202-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.202_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.202 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.202 bond1.kni;"
-
-    real_server 192.168.58.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 255 ##############################
-virtual_server_group 111.13.235.252-80-TCP_QLB {
-    111.13.235.252 80
-}
-
-deny_address_group 111.13.235.252_deny {
-}
-
-virtual_server  group 111.13.235.252-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.252_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.252 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.252 bond1.kni;"
-
-    real_server 192.168.25.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 256 ##############################
-virtual_server_group 111.13.235.125-80-TCP_QLB {
-    111.13.235.125 80
-}
-
-deny_address_group 111.13.235.125_deny {
-}
-
-virtual_server  group 111.13.235.125-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.125_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.125 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.125 bond1.kni;"
-
-    real_server 192.168.21.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 257 ##############################
-virtual_server_group 111.13.235.210-80-TCP_QLB {
-    111.13.235.210 80
-}
-
-deny_address_group 111.13.235.210_deny {
-}
-
-virtual_server  group 111.13.235.210-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.210_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.210 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.210 bond1.kni;"
-
-    real_server 192.168.2.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 258 ##############################
-virtual_server_group 192.168.1.94-80-TCP_QLB {
-    192.168.1.94 80
-}
-
-deny_address_group 192.168.1.94_deny {
-}
-
-virtual_server  group 192.168.1.94-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.94_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.94 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.94 bond1.kni;"
-
-    real_server 192.168.57.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 259 ##############################
-virtual_server_group 192.168.1.57-80-TCP_QLB {
-    192.168.1.57 80
-}
-
-deny_address_group 192.168.1.57_deny {
-}
-
-virtual_server  group 192.168.1.57-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.57_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.57 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.57 bond1.kni;"
-
-    real_server 192.168.37.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 260 ##############################
-virtual_server_group 111.13.235.236-80-TCP_QLB {
-    111.13.235.236 80
-}
-
-deny_address_group 111.13.235.236_deny {
-}
-
-virtual_server  group 111.13.235.236-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.236_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.236 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.236 bond1.kni;"
-
-    real_server 192.168.57.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 261 ##############################
-virtual_server_group 192.168.1.58-80-TCP_QLB {
-    192.168.1.58 80
-}
-
-deny_address_group 192.168.1.58_deny {
-}
-
-virtual_server  group 192.168.1.58-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.58_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.58 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.58 bond1.kni;"
-
-    real_server 192.168.29.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 262 ##############################
-virtual_server_group 111.13.235.222-80-TCP_QLB {
-    111.13.235.222 80
-}
-
-deny_address_group 111.13.235.222_deny {
-}
-
-virtual_server  group 111.13.235.222-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.222_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.222 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.222 bond1.kni;"
-
-    real_server 192.168.22.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 263 ##############################
-virtual_server_group 192.168.1.69-80-TCP_QLB {
-    192.168.1.69 80
-}
-
-deny_address_group 192.168.1.69_deny {
-}
-
-virtual_server  group 192.168.1.69-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.69_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.69 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.69 bond1.kni;"
-
-    real_server 192.168.9.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 264 ##############################
-virtual_server_group 192.168.1.13-80-TCP_QLB {
-    192.168.1.13 80
-}
-
-deny_address_group 192.168.1.13_deny {
-}
-
-virtual_server  group 192.168.1.13-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.13_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.13 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.13 bond1.kni;"
-
-    real_server 192.168.1.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 265 ##############################
-virtual_server_group 111.13.235.176-80-TCP_QLB {
-    111.13.235.176 80
-}
-
-deny_address_group 111.13.235.176_deny {
-}
-
-virtual_server  group 111.13.235.176-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.176_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.176 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.176 bond1.kni;"
-
-    real_server 192.168.13.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 266 ##############################
-virtual_server_group 192.168.1.48-80-TCP_QLB {
-    192.168.1.48 80
-}
-
-deny_address_group 192.168.1.48_deny {
-}
-
-virtual_server  group 192.168.1.48-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.48_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.48 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.48 bond1.kni;"
-
-    real_server 192.168.14.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 267 ##############################
-virtual_server_group 111.13.235.105-80-TCP_QLB {
-    111.13.235.105 80
-}
-
-deny_address_group 111.13.235.105_deny {
-}
-
-virtual_server  group 111.13.235.105-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.105_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.105 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.105 bond1.kni;"
-
-    real_server 192.168.18.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 268 ##############################
-virtual_server_group 111.13.235.199-80-TCP_QLB {
-    111.13.235.199 80
-}
-
-deny_address_group 111.13.235.199_deny {
-}
-
-virtual_server  group 111.13.235.199-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.199_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.199 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.199 bond1.kni;"
-
-    real_server 192.168.7.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 269 ##############################
-virtual_server_group 111.13.235.143-80-TCP_QLB {
-    111.13.235.143 80
-}
-
-deny_address_group 111.13.235.143_deny {
-}
-
-virtual_server  group 111.13.235.143-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.143_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.143 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.143 bond1.kni;"
-
-    real_server 192.168.14.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 270 ##############################
-virtual_server_group 111.13.235.179-80-TCP_QLB {
-    111.13.235.179 80
-}
-
-deny_address_group 111.13.235.179_deny {
-}
-
-virtual_server  group 111.13.235.179-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.179_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.179 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.179 bond1.kni;"
-
-    real_server 192.168.13.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 271 ##############################
-virtual_server_group 192.168.1.80-80-TCP_QLB {
-    192.168.1.80 80
-}
-
-deny_address_group 192.168.1.80_deny {
-}
-
-virtual_server  group 192.168.1.80-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.80_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.80 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.80 bond1.kni;"
-
-    real_server 192.168.7.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 272 ##############################
-virtual_server_group 111.13.235.132-80-TCP_QLB {
-    111.13.235.132 80
-}
-
-deny_address_group 111.13.235.132_deny {
-}
-
-virtual_server  group 111.13.235.132-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.132_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.132 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.132 bond1.kni;"
-
-    real_server 192.168.42.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 273 ##############################
-virtual_server_group 111.13.235.81-80-TCP_QLB {
-    111.13.235.81 80
-}
-
-deny_address_group 111.13.235.81_deny {
-}
-
-virtual_server  group 111.13.235.81-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.81_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.81 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.81 bond1.kni;"
-
-    real_server 192.168.55.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 274 ##############################
-virtual_server_group 192.168.1.98-80-TCP_QLB {
-    192.168.1.98 80
-}
-
-deny_address_group 192.168.1.98_deny {
-}
-
-virtual_server  group 192.168.1.98-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.98_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.98 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.98 bond1.kni;"
-
-    real_server 192.168.30.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 275 ##############################
-virtual_server_group 111.13.235.65-80-TCP_QLB {
-    111.13.235.65 80
-}
-
-deny_address_group 111.13.235.65_deny {
-}
-
-virtual_server  group 111.13.235.65-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.65_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.65 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.65 bond1.kni;"
-
-    real_server 192.168.18.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 276 ##############################
-virtual_server_group 192.168.1.25-80-TCP_QLB {
-    192.168.1.25 80
-}
-
-deny_address_group 192.168.1.25_deny {
-}
-
-virtual_server  group 192.168.1.25-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.25_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.25 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.25 bond1.kni;"
-
-    real_server 192.168.53.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 277 ##############################
-virtual_server_group 192.168.1.16-80-TCP_QLB {
-    192.168.1.16 80
-}
-
-deny_address_group 192.168.1.16_deny {
-}
-
-virtual_server  group 192.168.1.16-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.16_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.16 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.16 bond1.kni;"
-
-    real_server 192.168.43.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 278 ##############################
-virtual_server_group 111.13.235.219-80-TCP_QLB {
-    111.13.235.219 80
-}
-
-deny_address_group 111.13.235.219_deny {
-}
-
-virtual_server  group 111.13.235.219-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.219_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.219 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.219 bond1.kni;"
-
-    real_server 192.168.11.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 279 ##############################
-virtual_server_group 192.168.1.14-80-TCP_QLB {
-    192.168.1.14 80
-}
-
-deny_address_group 192.168.1.14_deny {
-}
-
-virtual_server  group 192.168.1.14-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.14_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.14 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.14 bond1.kni;"
-
-    real_server 192.168.55.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 280 ##############################
-virtual_server_group 192.168.1.74-80-TCP_QLB {
-    192.168.1.74 80
-}
-
-deny_address_group 192.168.1.74_deny {
-}
-
-virtual_server  group 192.168.1.74-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.74_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.74 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.74 bond1.kni;"
-
-    real_server 192.168.29.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 281 ##############################
-virtual_server_group 111.13.235.95-80-TCP_QLB {
-    111.13.235.95 80
-}
-
-deny_address_group 111.13.235.95_deny {
-}
-
-virtual_server  group 111.13.235.95-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.95_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.95 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.95 bond1.kni;"
-
-    real_server 192.168.29.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 282 ##############################
-virtual_server_group 111.13.235.117-80-TCP_QLB {
-    111.13.235.117 80
-}
-
-deny_address_group 111.13.235.117_deny {
-}
-
-virtual_server  group 111.13.235.117-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.117_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.117 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.117 bond1.kni;"
-
-    real_server 192.168.25.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 283 ##############################
-virtual_server_group 111.13.235.156-80-TCP_QLB {
-    111.13.235.156 80
-}
-
-deny_address_group 111.13.235.156_deny {
-}
-
-virtual_server  group 111.13.235.156-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.156_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.156 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.156 bond1.kni;"
-
-    real_server 192.168.13.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 284 ##############################
-virtual_server_group 111.13.235.164-80-TCP_QLB {
-    111.13.235.164 80
-}
-
-deny_address_group 111.13.235.164_deny {
-}
-
-virtual_server  group 111.13.235.164-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.164_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.164 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.164 bond1.kni;"
-
-    real_server 192.168.51.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 285 ##############################
-virtual_server_group 192.168.1.71-80-TCP_QLB {
-    192.168.1.71 80
-}
-
-deny_address_group 192.168.1.71_deny {
-}
-
-virtual_server  group 192.168.1.71-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.71_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.71 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.71 bond1.kni;"
-
-    real_server 192.168.38.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 286 ##############################
-virtual_server_group 192.168.1.17-80-TCP_QLB {
-    192.168.1.17 80
-}
-
-deny_address_group 192.168.1.17_deny {
-}
-
-virtual_server  group 192.168.1.17-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.17_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.17 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.17 bond1.kni;"
-
-    real_server 192.168.23.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 287 ##############################
-virtual_server_group 111.13.235.246-80-TCP_QLB {
-    111.13.235.246 80
-}
-
-deny_address_group 111.13.235.246_deny {
-}
-
-virtual_server  group 111.13.235.246-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.246_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.246 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.246 bond1.kni;"
-
-    real_server 192.168.45.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 288 ##############################
-virtual_server_group 111.13.235.142-80-TCP_QLB {
-    111.13.235.142 80
-}
-
-deny_address_group 111.13.235.142_deny {
-}
-
-virtual_server  group 111.13.235.142-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.142_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.142 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.142 bond1.kni;"
-
-    real_server 192.168.58.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 289 ##############################
-virtual_server_group 111.13.235.90-80-TCP_QLB {
-    111.13.235.90 80
-}
-
-deny_address_group 111.13.235.90_deny {
-}
-
-virtual_server  group 111.13.235.90-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.90_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.90 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.90 bond1.kni;"
-
-    real_server 192.168.31.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 290 ##############################
-virtual_server_group 192.168.1.99-80-TCP_QLB {
-    192.168.1.99 80
-}
-
-deny_address_group 192.168.1.99_deny {
-}
-
-virtual_server  group 192.168.1.99-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.1.99_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.1.99 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.1.99 bond1.kni;"
-
-    real_server 192.168.58.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 291 ##############################
-virtual_server_group 111.13.235.233-80-TCP_QLB {
-    111.13.235.233 80
-}
-
-deny_address_group 111.13.235.233_deny {
-}
-
-virtual_server  group 111.13.235.233-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.233_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.233 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.233 bond1.kni;"
-
-    real_server 192.168.13.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 292 ##############################
-virtual_server_group 111.13.235.166-80-TCP_QLB {
-    111.13.235.166 80
-}
-
-deny_address_group 111.13.235.166_deny {
-}
-
-virtual_server  group 111.13.235.166-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.166_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.166 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.166 bond1.kni;"
-
-    real_server 192.168.15.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-
diff --git a/tools/keepalived/keepalived/check/sockopt.c b/tools/keepalived/keepalived/check/sockopt.c
index b6b8d982d..1d985582f 100644
--- a/tools/keepalived/keepalived/check/sockopt.c
+++ b/tools/keepalived/keepalived/check/sockopt.c
@@ -4,7 +4,7 @@
 #include <malloc.h>
 #include <pthread.h>
 #include <unistd.h>
-#include "../include/common.h"
+#include "../include/conf/common.h"
 
 #define UNIX_DOMAIN "/var/run/dpvs_ctrl"
 
diff --git a/tools/keepalived/keepalived/include/conf/README b/tools/keepalived/keepalived/include/conf/README
new file mode 100644
index 000000000..d3173f632
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/README
@@ -0,0 +1,4 @@
+Header files in "./tools/keepalived/keepalived/include/conf/"
+is a mirror of "./include/conf/".
+
+Always keep the header files of the two paths the same!
diff --git a/tools/keepalived/keepalived/include/common.h b/tools/keepalived/keepalived/include/conf/common.h
similarity index 92%
rename from tools/keepalived/keepalived/include/common.h
rename to tools/keepalived/keepalived/include/conf/common.h
index 66f69df2b..43ed3fdd1 100644
--- a/tools/keepalived/keepalived/include/common.h
+++ b/tools/keepalived/keepalived/include/conf/common.h
@@ -30,18 +30,18 @@
 
 #ifndef min
 #define min(x,y) ({ \
-	typeof(x) _x = (x);	\
-	typeof(y) _y = (y);	\
-	(void) (&_x == &_y);	\
-	_x < _y ? _x : _y; })
+    typeof(x) _x = (x);    \
+    typeof(y) _y = (y);    \
+    (void) (&_x == &_y);    \
+    _x < _y ? _x : _y; })
 #endif
 
 #ifndef max
 #define max(x,y) ({ \
-	typeof(x) _x = (x);	\
-	typeof(y) _y = (y);	\
-	(void) (&_x == &_y);	\
-	_x > _y ? _x : _y; })
+    typeof(x) _x = (x);    \
+    typeof(y) _y = (y);    \
+    (void) (&_x == &_y);    \
+    _x > _y ? _x : _y; })
 #endif
 
 #ifndef min_t
@@ -71,6 +71,13 @@ typedef uint16_t    __u16;
 typedef uint32_t    __u32;
 #endif
 
+#ifndef lcoreid_t
+typedef uint8_t lcoreid_t;
+#endif
+
+
+#define DPVS_WAIT_WHILE(expr) while(expr){;}
+
 typedef enum {
     DPVS_STATE_STOP = 1,
     DPVS_STATE_INIT,
diff --git a/tools/keepalived/keepalived/include/conf/dest.h b/tools/keepalived/keepalived/include/conf/dest.h
new file mode 100644
index 000000000..11faecc52
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/dest.h
@@ -0,0 +1,108 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_DEST_CONF_H__
+#define __DPVS_DEST_CONF_H__
+
+#include "conf/service.h"
+
+/* must consistent with IP_VS_CONN_F_XXX (libipvs-2.6/ip_vs.h) */
+enum dpvs_fwd_mode {
+    DPVS_FWD_MASQ           = 0,
+    DPVS_FWD_LOCALNODE      = 1,
+    DPVS_FWD_MODE_TUNNEL    = 2,
+    DPVS_FWD_MODE_DR        = 3,
+    DPVS_FWD_MODE_BYPASS    = 4,
+    DPVS_FWD_MODE_FNAT      = 5,
+    DPVS_FWD_MODE_NAT       = DPVS_FWD_MASQ,
+    DPVS_FWD_MODE_SNAT      = 6,
+};
+
+enum {
+    DPVS_DEST_F_AVAILABLE       = 0x1<<0,
+    DPVS_DEST_F_OVERLOAD        = 0x1<<1,
+};
+
+struct dp_vs_dest_conf {
+    /* destination server address */
+    int                af;
+    union inet_addr    addr;
+    uint16_t           port;
+
+    enum dpvs_fwd_mode fwdmode;
+    /* real server options */
+    unsigned           conn_flags;    /* connection flags */
+    int                weight;     /* destination weight */
+
+    /* thresholds for active connections */
+    uint32_t           max_conn;    /* upper threshold */
+    uint32_t           min_conn;    /* lower threshold */
+};
+
+struct dp_vs_dest_entry {
+    int             af;
+    union inet_addr addr;        /* destination address */
+    uint16_t        port;
+    unsigned        conn_flags;    /* connection flags */
+    int             weight;     /* destination weight */
+
+    uint32_t        max_conn;  /* upper threshold */
+    uint32_t        min_conn;  /* lower threshold */
+
+    uint32_t        actconns;  /* active connections */
+    uint32_t        inactconns;   /* inactive connections */
+    uint32_t        persistconns; /* persistent connections */
+
+    /* statistics */
+    struct dp_vs_stats stats;
+};
+
+struct dp_vs_get_dests {
+    /* which service: user fills in these */
+    int              af;
+    uint16_t         proto;
+    union inet_addr  addr;        /* virtual address */
+    uint16_t         port;
+    uint32_t         fwmark;       /* firwall mark of service */
+
+    /* number of real servers */
+    unsigned int num_dests;
+
+    lcoreid_t        cid;
+
+    char        srange[256];
+    char        drange[256];
+    char        iifname[IFNAMSIZ];
+    char        oifname[IFNAMSIZ];
+
+    /* the real servers */
+    struct dp_vs_dest_entry entrytable[0];
+};
+
+struct dp_vs_dest_user {
+    int             af;
+    union inet_addr addr;
+    uint16_t        port;
+
+    unsigned        conn_flags;
+    int             weight;
+
+    uint32_t        max_conn;
+    uint32_t        min_conn;
+};
+
+#endif /* __DPVS_DEST_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/flow.h b/tools/keepalived/keepalived/include/conf/flow.h
new file mode 100644
index 000000000..5945823b8
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/flow.h
@@ -0,0 +1,54 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2018 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+/**
+ * flow for IPv4/IPv6 route lookup.
+ * Linux Kernel is referred.
+ *
+ * Lei Chen <raychen@qiyi.com>, initial, Jul 2018.
+ */
+#ifndef __DPVS_FLOW_CONF_H__
+#define __DPVS_FLOW_CONF_H__
+
+#include <netinet/in.h>
+
+/* linux:include/uapi/route.h */
+#define RTF_UP          0x0001      /* route usable                 */
+#define RTF_GATEWAY     0x0002      /* destination is a gateway     */
+#define RTF_HOST        0x0004      /* host entry (net otherwise)   */
+#define RTF_REINSTATE   0x0008      /* reinstate route after tmout  */
+#define RTF_DYNAMIC     0x0010      /* created dyn. (by redirect)   */
+#define RTF_MODIFIED    0x0020      /* modified dyn. (by redirect)  */
+#define RTF_MTU         0x0040      /* specific MTU for this route  */
+#define RTF_MSS         RTF_MTU     /* Compatibility :-(            */
+#define RTF_WINDOW      0x0080      /* per route window clamping    */
+#define RTF_IRTT        0x0100      /* Initial round trip time      */
+#define RTF_REJECT      0x0200      /* Reject route                 */
+
+/* dpvs defined. */
+#define RTF_FORWARD     0x0400
+#define RTF_LOCALIN     0x0800
+#define RTF_DEFAULT     0x1000
+#define RTF_KNI         0X2000
+#define RTF_OUTWALL     0x4000
+
+struct rt6_prefix {
+    struct in6_addr     addr;
+    int                 plen;
+};
+
+#endif /* __DPVS_FLOW_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/iftraf.h b/tools/keepalived/keepalived/include/conf/iftraf.h
new file mode 100644
index 000000000..2ff57c838
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/iftraf.h
@@ -0,0 +1,60 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_IFTRAF_CONF_H__
+#define __DPVS_IFTRAF_CONF_H__
+#include <stdint.h>
+#include <linux/if_addr.h>
+#include "inet.h"
+	
+enum {
+    /* set */
+    SOCKOPT_SET_IFTRAF_ADD = 6400,
+    SOCKOPT_SET_IFTRAF_DEL,
+
+    /* get */
+    SOCKOPT_GET_IFTRAF_SHOW,
+};
+
+struct dp_vs_iftraf_conf {
+    char ifname[IFNAMSIZ];
+} __attribute__((__packed__));
+
+
+struct iftraf_param {
+    uint8_t af;
+    uint8_t proto;
+    uint8_t cid;
+    uint16_t devid;
+    char ifname[IFNAMSIZ];
+    union inet_addr saddr;
+    union inet_addr daddr;
+    uint16_t sport;
+    uint16_t dport;
+
+    uint32_t total_recv;
+    uint32_t total_sent;
+
+} __attribute__((__packed__));
+
+struct iftraf_param_array {
+    int ntrafs;
+    struct iftraf_param iftraf[0];
+};
+
+#endif /* __DPVS_INETADDR_CONF_H__ */
+
diff --git a/tools/keepalived/keepalived/include/conf/inet.h b/tools/keepalived/keepalived/include/conf/inet.h
new file mode 100644
index 000000000..5c6a3323b
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/inet.h
@@ -0,0 +1,261 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_INET_CONF_H__
+#define __DPVS_INET_CONF_H__
+#include <stdio.h>
+#include <stdlib.h>
+#include <stdbool.h>
+#include <string.h>
+#include <netinet/in.h>
+#include <arpa/inet.h>
+#include "conf/common.h"
+
+#define INET_DEF_TTL        64
+
+#define INET_MAX_PROTS      256     /* cannot change */
+
+union inet_addr {
+    struct in_addr      in;
+    struct in6_addr     in6;
+};
+
+struct inet_prefix {
+    int                 plen;
+    union inet_addr     addr;
+};
+
+struct inet_addr_range {
+    union inet_addr     min_addr;
+    union inet_addr     max_addr;
+    __be16              min_port;
+    __be16              max_port;
+};
+
+struct inet_stats {
+    uint64_t inpkts;            /* InReceives */
+    uint64_t inoctets;          /* InOctets */
+    uint64_t indelivers;        /* InDelivers */
+    uint64_t outforwdatagrams;  /* OutForwDatagrams */
+    uint64_t outpkts;           /* OutRequests */
+    uint64_t outoctets;         /* OutOctets */
+    uint64_t inhdrerrors;       /* InHdrErrors */
+    uint64_t intoobigerrors;    /* InTooBigErrors */
+    uint64_t innoroutes;        /* InNoRoutes */
+    uint64_t inaddrerrors;      /* InAddrErrors */
+    uint64_t inunknownprotos;   /* InUnknownProtos */
+    uint64_t intruncatedpkts;   /* InTruncatedPkts */
+    uint64_t indiscards;        /* InDiscards */
+    uint64_t outdiscards;       /* OutDiscards */
+    uint64_t outnoroutes;       /* OutNoRoutes */
+    uint64_t reasmtimeout;      /* ReasmTimeout */
+    uint64_t reasmreqds;        /* ReasmReqds */
+    uint64_t reasmoks;          /* ReasmOKs */
+    uint64_t reasmfails;        /* ReasmFails */
+    uint64_t fragoks;           /* FragOKs */
+    uint64_t fragfails;         /* FragFails */
+    uint64_t fragcreates;       /* FragCreates */
+    uint64_t inmcastpkts;       /* InMcastPkts */
+    uint64_t outmcastpkts;      /* OutMcastPkts */
+    uint64_t inbcastpkts;       /* InBcastPkts */
+    uint64_t outbcastpkts;      /* OutBcastPkts */
+    uint64_t inmcastoctets;     /* InMcastOctets */
+    uint64_t outmcastoctets;    /* OutMcastOctets */
+    uint64_t inbcastoctets;     /* InBcastOctets */
+    uint64_t outbcastoctets;    /* OutBcastOctets */
+    uint64_t csumerrors;        /* InCsumErrors */
+    uint64_t noectpkts;         /* InNoECTPkts */
+    uint64_t ect1pkts;          /* InECT1Pkts */
+    uint64_t ect0pkts;          /* InECT0Pkts */
+    uint64_t cepkts;            /* InCEPkts */
+};
+
+static inline const char *inet_proto_name(uint8_t proto)
+{
+    const static char *proto_names[256] = {
+        [IPPROTO_TCP]     = "TCP",
+        [IPPROTO_UDP]     = "UDP",
+        [IPPROTO_ICMP]    = "ICMP",
+        [IPPROTO_ICMPV6]  = "ICMPV6",
+    };
+
+    return proto_names[proto] ? proto_names[proto] : "<unknow>";
+}
+
+static inline uint32_t inet_addr_fold(int af, const union inet_addr *addr)
+{
+    uint32_t addr_fold = 0;
+
+    if (af == AF_INET) {
+        addr_fold = addr->in.s_addr;
+    } else if (af == AF_INET6) {
+        addr_fold = addr->in6.s6_addr32[0] ^ addr->in6.s6_addr32[1] ^
+                    addr->in6.s6_addr32[2] ^ addr->in6.s6_addr32[3];
+    } else {
+        return 0;
+    }
+
+    return addr_fold;
+}
+
+/* ip1[-ip2][:port1[-port2]] */
+static inline int inet_addr_range_parse(const char *param,
+                                        struct inet_addr_range *range,
+                                        int *af)
+{
+    char _param[256], *ips, *ports = NULL;
+    char *ip1, *ip2, *port1, *port2;
+
+    if (strlen(param) == 0)
+        return EDPVS_OK; /* return asap */
+
+    snprintf(_param, sizeof(_param), "%s", param);
+
+    ips = _param;
+    if (_param[0] == '[') {
+        ips++;
+        ports = strrchr(_param, ']');
+        if (ports == NULL)
+            return EDPVS_INVAL;
+        *ports++ = '\0';
+        if (*ports == ':')
+            *ports++ = '\0';
+        else
+            return EDPVS_INVAL;
+    }
+
+    /* judge ipv4 */
+    if (strrchr(_param, ':') == strchr(_param, ':')) {
+        ports = strrchr(_param, ':');
+        if (ports)
+            *ports++ = '\0';
+    }
+
+    ip1 = ips;
+    ip2 = strrchr(ips, '-');
+    if (ip2)
+        *ip2++ = '\0';
+
+    if (ports) {
+        port1 = ports;
+        port2 = strrchr(ports, '-');
+        if (port2)
+            *port2++ = '\0';
+    } else {
+        port1 = port2 = NULL;
+    }
+
+    memset(range, 0, sizeof(*range));
+
+    if (strlen(ip1) && inet_pton(AF_INET6, ip1, &range->min_addr.in6) > 0) {
+        if (ip2 && strlen(ip2)) {
+            if (inet_pton(AF_INET6, ip2, &range->max_addr.in6) <= 0)
+                return EDPVS_INVAL;
+        } else {
+            range->max_addr = range->min_addr;
+        }
+        *af = AF_INET6;
+    } else {
+        if (strlen(ip1) && inet_pton(AF_INET, ip1, &range->min_addr.in) <= 0)
+            return EDPVS_INVAL;
+
+        if (ip2 && strlen(ip2)) {
+           if (inet_pton(AF_INET, ip2, &range->max_addr.in) <= 0)
+               return EDPVS_INVAL;
+        } else {
+            range->max_addr = range->min_addr;
+        }
+        *af = AF_INET;
+    }
+
+    if (port1 && strlen(port1))
+        range->min_port = htons(atoi(port1));
+
+    if (port2 && strlen(port2))
+        range->max_port = htons(atoi(port2));
+    else
+        range->max_port = range->min_port;
+
+    return EDPVS_OK;
+}
+
+static inline int inet_addr_range_dump(int af,
+                                       const struct inet_addr_range *range,
+                                       char *buf, size_t size)
+{
+    char min_ip[64], max_ip[64];
+    char min_port[16], max_port[16];
+
+    inet_ntop(af, &range->min_addr, min_ip, sizeof(min_ip));
+    inet_ntop(af, &range->max_addr, max_ip, sizeof(max_ip));
+    snprintf(min_port, sizeof(min_port), "%u",  ntohs(range->min_port));
+    snprintf(max_port, sizeof(max_port), "%u",  ntohs(range->max_port));
+
+    if (af == AF_INET)
+        return snprintf(buf, size, "%s-%s:%s-%s",
+                    min_ip, max_ip, min_port, max_port);
+    return snprintf(buf, size, "[%s-%s]:%s-%s",
+                    min_ip, max_ip, min_port, max_port);
+}
+
+static inline void inet_stats_dump(const char *title, const char *prefix,
+                                   const struct inet_stats *st)
+{
+    if (!st)
+        return;
+
+    if (title)
+        printf("%s\n", title);
+
+    printf("%s%-18s %lu\n", prefix ? : "", "InReceives:", st->inpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InOctets:", st->inoctets);
+    printf("%s%-18s %lu\n", prefix ? : "", "InDelivers:", st->indelivers);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutForwDatagrams:", st->outforwdatagrams);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutRequests:", st->outpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutOctets:", st->outoctets);
+    printf("%s%-18s %lu\n", prefix ? : "", "InHdrErrors:", st->inhdrerrors);
+    printf("%s%-18s %lu\n", prefix ? : "", "InTooBigErrors:", st->intoobigerrors);
+    printf("%s%-18s %lu\n", prefix ? : "", "InNoRoutes:", st->innoroutes);
+    printf("%s%-18s %lu\n", prefix ? : "", "InAddrErrors:", st->inaddrerrors);
+    printf("%s%-18s %lu\n", prefix ? : "", "InUnknownProtos:", st->inunknownprotos);
+    printf("%s%-18s %lu\n", prefix ? : "", "InTruncatedPkts:", st->intruncatedpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InDiscards:", st->indiscards);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutDiscards:", st->outdiscards);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutNoRoutes:", st->outnoroutes);
+    printf("%s%-18s %lu\n", prefix ? : "", "ReasmTimeout:", st->reasmtimeout);
+    printf("%s%-18s %lu\n", prefix ? : "", "ReasmReqds:", st->reasmreqds);
+    printf("%s%-18s %lu\n", prefix ? : "", "ReasmOKs:", st->reasmoks);
+    printf("%s%-18s %lu\n", prefix ? : "", "ReasmFails:", st->reasmfails);
+    printf("%s%-18s %lu\n", prefix ? : "", "FragOKs:", st->fragoks);
+    printf("%s%-18s %lu\n", prefix ? : "", "FragFails:", st->fragfails);
+    printf("%s%-18s %lu\n", prefix ? : "", "FragCreates:", st->fragcreates);
+    printf("%s%-18s %lu\n", prefix ? : "", "InMcastPkts:", st->inmcastpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutMcastPkts:", st->outmcastpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InBcastPkts:", st->inbcastpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutBcastPkts:", st->outbcastpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InMcastOctets:", st->inmcastoctets);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutMcastOctets:", st->outmcastoctets);
+    printf("%s%-18s %lu\n", prefix ? : "", "InBcastOctets:", st->inbcastoctets);
+    printf("%s%-18s %lu\n", prefix ? : "", "OutBcastOctets:", st->outbcastoctets);
+    printf("%s%-18s %lu\n", prefix ? : "", "InCsumErrors:", st->csumerrors);
+    printf("%s%-18s %lu\n", prefix ? : "", "InNoECTPkts:", st->noectpkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InECT1Pkts:", st->ect1pkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InECT0Pkts:", st->ect0pkts);
+    printf("%s%-18s %lu\n", prefix ? : "", "InCEPkts:", st->cepkts);
+}
+
+#endif /* __DPVS_INET_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/ip_tunnel.h b/tools/keepalived/keepalived/include/conf/ip_tunnel.h
index 9eb610acc..fd1964231 100644
--- a/tools/keepalived/keepalived/include/conf/ip_tunnel.h
+++ b/tools/keepalived/keepalived/include/conf/ip_tunnel.h
@@ -22,16 +22,12 @@
  *
  * raychen@qiyi.com, Dec 2017, initial.
  */
-#ifndef __DPVS_TUNNEL_H__
-#define __DPVS_TUNNEL_H__
+#ifndef __DPVS_TUNNEL_CONF_H__
+#define __DPVS_TUNNEL_CONF_H__
 #include <net/if.h>
 #include <netinet/ip.h>
 #include <endian.h>
 
-#include "list.h"
-#include "netif.h"
-#include "route.h"
-
 #define TNLKINDSIZ              16
 
 #define TUNNEL_F_CSUM           htobe16(0x01)
@@ -72,83 +68,4 @@ struct ip_tunnel_param {
     struct iphdr    iph;
 } __attribute__((__packed__));
 
-#if defined(__DPVS__)
-
-struct ip_tunnel_tab;
-
-struct ip_tunnel_ops {
-    const char              *kind;
-    uint32_t                priv_size;
-    struct list_head        list;
-    struct ip_tunnel_tab    *tab;
-    void                    (*setup)(struct netif_port *dev);
-    int                     (*change)(struct netif_port *dev,
-                                      const struct ip_tunnel_param *params);
-};
-
-#define IP_TNL_HASH_BITS    7
-#define IP_TNL_HASH_SIZE    (1 << IP_TNL_HASH_BITS)
-
-/* table of tunnels for each kind. */
-struct ip_tunnel_tab {
-    struct netif_port       *fb_tunnel_dev; /* fullback device */
-    struct hlist_head       tunnels[IP_TNL_HASH_SIZE];
-    int                     nb_tnl; /* total number of tunnel */
-    struct ip_tunnel_ops    *ops;
-};
-
-struct ip_tunnel {
-    struct hlist_node       hlist;
-    struct netif_port       *dev;
-    struct netif_port       *link;
-    struct ip_tunnel_tab    *tab;
-    struct ip_tunnel_param  params;
-    int                     hlen;
-
-    struct route_entry      *rt_cache;
-
-    /* GRE only */
-    uint32_t                i_seqno;
-    uint32_t                o_seqno;
-};
-
-struct ip_tunnel_pktinfo {
-    __be16  flags;
-    __be16  proto;
-    __be32  key;
-    __be32  seq;
-    int     hdr_len;
-};
-
-int ip_tunnel_init(void);
-int ip_tunnel_term(void);
-
-int ip_tunnel_init_tab(struct ip_tunnel_tab *tab, struct ip_tunnel_ops *ops,
-                       const char *fbname);
-int ip_tunnel_term_tab(struct ip_tunnel_tab *tab);
-
-struct ip_tunnel *ip_tunnel_lookup(struct ip_tunnel_tab *tab,
-                                   portid_t link, __be16 flags,
-                                   __be32 remote, __be32 local,
-                                   __be32 key);
-
-int ip_tunnel_rcv(struct ip_tunnel *tnl, struct ip_tunnel_pktinfo *tpi,
-                  struct rte_mbuf *mbuf);
-
-int ip_tunnel_xmit(struct rte_mbuf *mbuf, struct netif_port *dev,
-                   const struct iphdr *tiph, uint8_t proto);
-
-int ip_tunnel_pull_header(struct rte_mbuf *mbuf, int hlen, __be16 in_proto);
-
-int ip_tunnel_get_link(struct netif_port *dev, struct rte_eth_link *link);
-int ip_tunnel_get_stats(struct netif_port *dev, struct rte_eth_stats *stats);
-int ip_tunnel_get_promisc(struct netif_port *dev, bool *promisc);
-
-int ipip_init(void);
-int ipip_term(void);
-
-int gre_init(void);
-int gre_term(void);
-
-#endif /* __DPVS__ */
-#endif /* __DPVS_TUNNEL_H__ */
+#endif /* __DPVS_TUNNEL_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/blklst.h b/tools/keepalived/keepalived/include/conf/ipset.h
similarity index 52%
rename from tools/keepalived/keepalived/include/ipvs/blklst.h
rename to tools/keepalived/keepalived/include/conf/ipset.h
index 30a02ff09..acbe52d36 100644
--- a/tools/keepalived/keepalived/include/ipvs/blklst.h
+++ b/tools/keepalived/keepalived/include/conf/ipset.h
@@ -15,25 +15,36 @@
  * GNU General Public License for more details.
  *
  */
-#ifndef __DPVS_BLKLST_H__
-#define __DPVS_BLKLST_H__
-#include "common.h"
-#include "ipvs/service.h"
-#include "timer.h"
+/**
+ * Note: control plane only
+ * based on dpvs_sockopt.
+ */
+#ifndef __DPVS_IPSET_CONF_H__
+#define __DPVS_IPSET_CONF_H__
+
+enum {
+    /* set */
+    SOCKOPT_SET_IPSET_ADD   = 3300,
+    SOCKOPT_SET_IPSET_DEL,
+    SOCKOPT_SET_IPSET_FLUSH,
 
-struct blklst_entry {
-    struct list_head    list;
-    union inet_addr     vaddr;
-    uint16_t            vport;
-    uint8_t             proto; 
-    union inet_addr     blklst;
+    /* get */
+    SOCKOPT_GET_IPSET_SHOW,
 };
 
-struct blklst_entry *dp_vs_blklst_lookup(uint8_t proto, const union inet_addr *vaddr,
-                                         uint16_t vport, const union inet_addr *blklst);
-void dp_vs_blklst_flush(struct dp_vs_service *svc);
+struct dp_vs_ipset_conf {
+	int af;
+	union inet_addr    addr;
+};
+
+struct dp_vs_multi_ipset_conf {
+    int num;
+    struct dp_vs_ipset_conf ipset_conf[0];
+};
 
-int dp_vs_blklst_init(void);
-int dp_vs_blklst_term(void);
+struct dp_vs_ipset_conf_array {
+    int                 nipset;
+    struct dp_vs_ipset_conf   ips[0];
+} __attribute__((__packed__));
 
-#endif /* __DPVS_BLKLST_H__ */
+#endif /* __DPVS_IPSET_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/conf/laddr.h b/tools/keepalived/keepalived/include/conf/laddr.h
index e620d0d85..09a3bc66f 100644
--- a/tools/keepalived/keepalived/include/conf/laddr.h
+++ b/tools/keepalived/keepalived/include/conf/laddr.h
@@ -34,6 +34,9 @@ enum {
     SOCKOPT_GET_LADDR_GETALL,
 };
 
+#define SOCKOPT_LADDR_BASE SOCKOPT_SET_LADDR_ADD
+#define SOCKOPT_GET_LADDR_MAX 199
+
 struct dp_vs_laddr_entry {
     int af;
     union inet_addr addr;
diff --git a/tools/keepalived/keepalived/include/match.h b/tools/keepalived/keepalived/include/conf/match.h
similarity index 84%
rename from tools/keepalived/keepalived/include/match.h
rename to tools/keepalived/keepalived/include/conf/match.h
index f94dfed9c..f47e08d0f 100644
--- a/tools/keepalived/keepalived/include/match.h
+++ b/tools/keepalived/keepalived/include/conf/match.h
@@ -38,21 +38,7 @@ struct dp_vs_match {
 
 static inline bool is_empty_match(const struct dp_vs_match *match)
 {
-    static const struct dp_vs_match zero_match = {
-        .af = 0,
-        .srange = {
-            .min_addr.in = {0},
-            .max_addr.in = {0},
-            .min_port = 0,
-            .max_port = 0,
-        },
-        .drange = {
-            .min_addr.in = {0},
-            .max_addr.in = {0},
-            .min_port = 0,
-            .max_port = 0,
-        }
-    };
+    const static struct dp_vs_match zero_match = {};
     return !memcmp(match, &zero_match, sizeof(*match));
 }
 
@@ -60,14 +46,14 @@ static inline int parse_match(const char *pattern, uint8_t *proto,
                               struct dp_vs_match *match)
 {
     char _pat[256];
-    char *start, *tok, *sp;
+    char *start, *tok, *sp, *delim = ",";
     int err;
 
     *proto = 0;
     memset(match, 0, sizeof(*match));
     snprintf(_pat, sizeof(_pat), "%s", pattern);
 
-    for (start = _pat; (tok = strtok_r(start, ",", &sp)); start = NULL) {
+    for (start = _pat; (tok = strtok_r(start, delim, &sp)); start = NULL) {
         if (strcmp(tok, "tcp") == 0) {
             *proto = IPPROTO_TCP;
         } else if (strcmp(tok, "udp") == 0) {
@@ -101,13 +87,7 @@ static inline int parse_match(const char *pattern, uint8_t *proto,
 static inline char *dump_match(uint8_t proto, const struct dp_vs_match *match,
                                char *buf, size_t size)
 {
-    //static const struct inet_addr_range zero_range = {{{0}}};
-    static const struct inet_addr_range zero_range = {
-        .min_addr.in = {0},
-        .max_addr.in = {0},
-        .min_port = 0,
-        .max_port = 0
-    };
+    const static struct inet_addr_range zero_range = {{{0}}};
     size_t left = size;
 
     if (!match || !buf || size < 1)
diff --git a/tools/keepalived/keepalived/include/conf/neigh.h b/tools/keepalived/keepalived/include/conf/neigh.h
index fca935c79..9bb74764a 100644
--- a/tools/keepalived/keepalived/include/conf/neigh.h
+++ b/tools/keepalived/keepalived/include/conf/neigh.h
@@ -32,7 +32,7 @@ enum {
 };
 
 enum {
-    DPVS_NUD_S_NONE        = 0, 
+    DPVS_NUD_S_NONE        = 0,
     DPVS_NUD_S_SEND,
     DPVS_NUD_S_REACHABLE,
     DPVS_NUD_S_PROBE,
@@ -83,4 +83,4 @@ static inline const char *nud_state_name(int state)
 #define NEIGHBOUR_HASHED     0x01
 #define NEIGHBOUR_STATIC     0x02
 
-#endif 
+#endif
diff --git a/tools/keepalived/keepalived/include/conf/route.h b/tools/keepalived/keepalived/include/conf/route.h
index 60fea80f7..b6faebe91 100644
--- a/tools/keepalived/keepalived/include/conf/route.h
+++ b/tools/keepalived/keepalived/include/conf/route.h
@@ -23,7 +23,6 @@
 #define __DPVS_ROUTE_CONF_H__
 #include "inet.h"
 #include "net/if.h"
-#include "flow.h"
 
 enum {
     /* set */
@@ -69,6 +68,7 @@ struct dp_vs_route_conf {
     uint8_t         metric;
     uint8_t         proto;  /* routing protocol */
     uint32_t        flags;
+    int32_t         outwalltb;
 } __attribute__((__packed__));
 
 struct dp_vs_route_conf_array {
diff --git a/tools/keepalived/keepalived/include/conf/service.h b/tools/keepalived/keepalived/include/conf/service.h
new file mode 100644
index 000000000..741fc0cac
--- /dev/null
+++ b/tools/keepalived/keepalived/include/conf/service.h
@@ -0,0 +1,139 @@
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+#ifndef __DPVS_SVC_CONF_H__
+#define __DPVS_SVC_CONF_H__
+
+#include <stdint.h>
+#include <net/if.h>
+#include "inet.h"
+#include "conf/match.h"
+#include "conf/stats.h"
+#include "conf/dest.h"
+
+#define DP_VS_SCHEDNAME_MAXLEN      16
+
+struct dp_vs_service_conf {
+    /* virtual service addresses */
+    uint16_t            af;
+    uint16_t            protocol;
+    union inet_addr     addr;       /* virtual ip address */
+    uint16_t            port;
+    uint32_t            fwmark;     /* firwall mark of service */
+    struct dp_vs_match  match;
+
+    /* virtual service options */
+    char                *sched_name;
+    unsigned            flags;     /* virtual service flags */
+    unsigned            timeout;   /* persistent timeout in sec */
+    unsigned            conn_timeout;
+    uint32_t            netmask;        /* persistent netmask */
+    unsigned            bps;
+    unsigned            limit_proportion;
+};
+
+struct dp_vs_service_entry {
+    int                 af;
+    uint16_t            proto;
+    union inet_addr     addr;
+    uint16_t            port;
+    uint32_t            fwmark;
+
+    char                sched_name[DP_VS_SCHEDNAME_MAXLEN];
+    unsigned            flags;
+    unsigned            timeout;
+    unsigned            conn_timeout;
+    uint32_t            netmask;
+    unsigned            bps;
+    unsigned            limit_proportion;
+
+    unsigned int        num_dests;
+    unsigned int        num_laddrs;
+    lcoreid_t           cid;
+
+    struct dp_vs_stats  stats;
+
+    char                srange[256];
+    char                drange[256];
+    char                iifname[IFNAMSIZ];
+    char                oifname[IFNAMSIZ];
+};
+
+struct dp_vs_get_services {
+    lcoreid_t     cid;
+    unsigned int        num_services;
+    struct dp_vs_service_entry entrytable[0];
+};
+
+struct dp_vs_service_user {
+    int               af;
+    uint16_t          proto;
+    union inet_addr   addr;
+    uint16_t          port;
+    uint32_t          fwmark;
+
+    char              sched_name[DP_VS_SCHEDNAME_MAXLEN];
+    unsigned          flags;
+    unsigned          timeout;
+    unsigned          conn_timeout;
+    uint32_t          netmask;
+    unsigned          bps;
+    unsigned          limit_proportion;
+
+    char              srange[256];
+    char              drange[256];
+    char              iifname[IFNAMSIZ];
+    char              oifname[IFNAMSIZ];
+};
+
+struct dp_vs_getinfo {
+    unsigned int version;
+    unsigned int size;
+    unsigned int num_services;
+    unsigned int num_lcores;
+};
+
+enum{
+    DPVS_SO_SET_FLUSH = 200,
+    DPVS_SO_SET_ZERO,
+    DPVS_SO_SET_ADD,
+    DPVS_SO_SET_EDIT,
+    DPVS_SO_SET_DEL,
+    DPVS_SO_SET_ADDDEST,
+    DPVS_SO_SET_EDITDEST,
+    DPVS_SO_SET_DELDEST,
+    DPVS_SO_SET_GRATARP,
+};
+
+enum{
+    DPVS_SO_GET_VERSION = 200,
+    DPVS_SO_GET_INFO,
+    DPVS_SO_GET_SERVICES,
+    DPVS_SO_GET_SERVICE,
+    DPVS_SO_GET_DESTS,
+};
+
+
+#define SOCKOPT_SVC_BASE         DPVS_SO_SET_FLUSH
+#define SOCKOPT_SVC_SET_CMD_MAX  DPVS_SO_SET_GRATARP
+#define SOCKOPT_SVC_GET_CMD_MAX  DPVS_SO_GET_DESTS
+#define SOCKOPT_SVC_MAX          299
+
+#define MAX_ARG_LEN    (sizeof(struct dp_vs_service_user) +    \
+                         sizeof(struct dp_vs_dest_user))
+
+#endif /* __DPVS_SVC_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/conhash.h b/tools/keepalived/keepalived/include/conf/stats.h
similarity index 63%
rename from tools/keepalived/keepalived/include/ipvs/conhash.h
rename to tools/keepalived/keepalived/include/conf/stats.h
index effa2d515..a6cfbb044 100644
--- a/tools/keepalived/keepalived/include/ipvs/conhash.h
+++ b/tools/keepalived/keepalived/include/conf/stats.h
@@ -15,14 +15,21 @@
  * GNU General Public License for more details.
  *
  */
-#ifndef __DPVS_CH_H__
-#define __DPVS_CH_H__
+#ifndef __DPVS_STATS_CONF_H__
+#define __DPVS_STATS_CONF_H__
 
-#include "ipvs/service.h"
-#include "ipvs/dest.h"
-#include "ipvs/sched.h"
+struct dp_vs_stats {
+    uint64_t            conns;
+    uint64_t            inpkts;
+    uint64_t            inbytes;
+    uint64_t            outpkts;
+    uint64_t            outbytes;
 
-int dp_vs_conhash_init(void);
-int dp_vs_conhash_term(void);
+    uint32_t cps;
+    uint32_t inpps;
+    uint32_t inbps;
+    uint32_t outpps;
+    uint32_t outbps;
+};
 
-#endif
+#endif /* __DPVS_STATS_CONF_H__ */
diff --git a/tools/keepalived/keepalived/include/dp_vs.h b/tools/keepalived/keepalived/include/dp_vs.h
index 2bf81bb95..76f999014 100644
--- a/tools/keepalived/keepalived/include/dp_vs.h
+++ b/tools/keepalived/keepalived/include/dp_vs.h
@@ -1,5 +1,23 @@
-#ifndef _DP_VS_H
-#define _DP_VS_H
+/*
+ * DPVS is a software load balancer (Virtual Server) based on DPDK.
+ *
+ * Copyright (C) 2017 iQIYI (www.iqiyi.com).
+ * All Rights Reserved.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ */
+
+#ifndef __DP_VS_H
+#define __DP_VS_H
 
 #include <netinet/in.h>
 #include "conf/route.h"
@@ -9,27 +27,7 @@
 #include "conf/blklst.h"
 #include "conf/conn.h"
 #include "conf/ip_tunnel.h"
-#include "ipvs/service.h"
-#include "ipvs/dest.h"
-
-enum{
-    DPVS_SO_SET_FLUSH = 200,
-    DPVS_SO_SET_ZERO,
-    DPVS_SO_SET_ADD,
-    DPVS_SO_SET_EDIT,
-    DPVS_SO_SET_DEL,
-    DPVS_SO_SET_ADDDEST,
-    DPVS_SO_SET_EDITDEST,
-    DPVS_SO_SET_DELDEST,
-    DPVS_SO_SET_GRATARP,
-};
-
-enum{
-    DPVS_SO_GET_VERSION = 200,
-    DPVS_SO_GET_INFO,
-    DPVS_SO_GET_SERVICES,
-    DPVS_SO_GET_SERVICE,
-    DPVS_SO_GET_DESTS,
-};
+#include "conf/service.h"
+#include "conf/dest.h"
 
 #endif
diff --git a/tools/keepalived/keepalived/include/flow.h b/tools/keepalived/keepalived/include/flow.h
deleted file mode 100644
index 849ce9c06..000000000
--- a/tools/keepalived/keepalived/include/flow.h
+++ /dev/null
@@ -1,122 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2018 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-/**
- * flow for IPv4/IPv6 route lookup.
- * Linux Kernel is referred.
- *
- * Lei Chen <raychen@qiyi.com>, initial, Jul 2018.
- */
-#ifndef __DPVS_FLOW_H__
-#define __DPVS_FLOW_H__
-
-#include "common.h"
-#include "conf/netif.h"
-#include "inet.h"
-
-/* linux:include/uapi/route.h */
-#define RTF_UP          0x0001      /* route usable                 */
-#define RTF_GATEWAY     0x0002      /* destination is a gateway     */
-#define RTF_HOST        0x0004      /* host entry (net otherwise)   */
-#define RTF_REINSTATE   0x0008      /* reinstate route after tmout  */
-#define RTF_DYNAMIC     0x0010      /* created dyn. (by redirect)   */
-#define RTF_MODIFIED    0x0020      /* modified dyn. (by redirect)  */
-#define RTF_MTU         0x0040      /* specific MTU for this route  */
-#define RTF_MSS         RTF_MTU     /* Compatibility :-(            */
-#define RTF_WINDOW      0x0080      /* per route window clamping    */
-#define RTF_IRTT        0x0100      /* Initial round trip time      */
-#define RTF_REJECT      0x0200      /* Reject route                 */
-
-/* dpvs defined. */
-#define RTF_FORWARD     0x0400
-#define RTF_LOCALIN     0x0800
-#define RTF_DEFAULT     0x1000
-#define RTF_KNI         0X2000
-#define RTF_OUTWALL     0x4000
-
-struct rt6_prefix {
-    struct in6_addr     addr;
-    int                 plen;
-};
-
-/* common flow info of upper layer (l4) */
-union flow_ul {
-    struct {
-        __be16          dport;
-        __be16          sport;
-    } ports;
-
-    struct {
-        __u8            type;
-        __u8            code;
-    } icmpt;
-
-    __be32              gre_key;
-};
-
-/* common flow info */
-struct flow_common {
-    struct netif_port   *flc_oif;
-    struct netif_port   *flc_iif;
-    uint8_t             flc_tos;
-    uint8_t             flc_proto;
-    uint8_t             flc_scope;
-    uint8_t             flc_ttl;
-    uint32_t            flc_mark;
-    uint32_t            flc_flags;
-};
-
-struct flow4 {
-    struct flow_common  __fl_common;
-#define fl4_oif         __fl_common.flc_oif
-#define fl4_iif         __fl_common.flc_iif
-#define fl4_tos         __fl_common.flc_tos
-#define fl4_proto       __fl_common.flc_proto
-#define fl4_scope       __fl_common.flc_scope
-#define fl4_ttl         __fl_common.flc_ttl
-#define fl4_mark        __fl_common.flc_mark
-#define fl4_flags       __fl_common.flc_flags
-
-    struct in_addr      fl4_saddr;
-    struct in_addr      fl4_daddr;
-
-    union flow_ul       __fl_ul;
-#define fl4_sport       __fl_ul.ports.sport
-#define fl4_dport       __fl_ul.ports.dport
-};
-
-struct flow6 {
-    struct flow_common  __fl_common;
-#define fl6_oif         __fl_common.flc_oif
-#define fl6_iif         __fl_common.flc_iif
-#define fl6_tos         __fl_common.flc_tos
-#define fl6_proto       __fl_common.flc_proto
-#define fl6_scope       __fl_common.flc_scope
-#define fl6_ttl         __fl_common.flc_ttl
-#define fl6_mark        __fl_common.flc_mark
-#define fl6_flags       __fl_common.flc_flags
-
-    struct in6_addr     fl6_daddr;
-    struct in6_addr     fl6_saddr;
-    __be32              fl6_flow;
-
-    union flow_ul       __fl_ul;
-#define fl6_sport       __fl_ul.ports.sport
-#define fl6_dport       __fl_ul.ports.dport
-};
-
-#endif /* __DPVS_FLOW_H__ */
diff --git a/tools/keepalived/keepalived/include/ip_vs.h b/tools/keepalived/keepalived/include/ip_vs.h
index caa982245..cd2bef2e6 100644
--- a/tools/keepalived/keepalived/include/ip_vs.h
+++ b/tools/keepalived/keepalived/include/ip_vs.h
@@ -9,25 +9,17 @@
 /* #include "config.h" */
 
 /* System includes */
+#include <stdint.h>
+#include <stdbool.h>
 #include <net/if.h>	/* Force inclusion of net/if.h before linux/if.h */
 #include <sys/types.h>
 #include <netinet/in.h>
 /* Prior to Linux 4.2 have to include linux/in.h and linux/in6.h
  * or linux/netlink.h to include linux/netfilter.h */
 #include <linux/netfilter.h>	/* For nf_inet_addr */
-#include <stdint.h>
-
 #include <linux/types.h>
-#include <stdbool.h>
-#include "conf/route.h"
-#include "conf/route6.h"
-#include "conf/inetaddr.h"
-#include "conf/laddr.h"
-#include "conf/blklst.h"
-#include "conf/conn.h"
-#include "conf/ip_tunnel.h"
-#include "ipvs/service.h"
-#include "ipvs/dest.h"
+
+#include "dp_vs.h"
 
 #define IP_VS_VERSION_CODE	0x010201
 #define NVERSION(version)			\
diff --git a/tools/keepalived/keepalived/include/ipvs/conn.h b/tools/keepalived/keepalived/include/ipvs/conn.h
deleted file mode 100644
index 28db75daf..000000000
--- a/tools/keepalived/keepalived/include/ipvs/conn.h
+++ /dev/null
@@ -1,273 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DPVS_CONN_H__
-#define __DPVS_CONN_H__
-#include <arpa/inet.h>
-#include "common.h"
-#include "list.h"
-#include "dpdk.h"
-#include "timer.h"
-#include "inet.h"
-#include "ipv4.h"
-#include "ipvs/conn.h"
-#include "ipvs/proto.h"
-#include "ipvs/service.h"
-
-enum {
-    DPVS_CONN_DIR_INBOUND = 0,
-    DPVS_CONN_DIR_OUTBOUND,
-    DPVS_CONN_DIR_MAX,
-};
-
-enum {
-    DPVS_CONN_F_HASHED      = 0x0040,
-    DPVS_CONN_F_INACTIVE    = 0x0100,
-    DPVS_CONN_F_SYNPROXY    = 0x8000,
-    DPVS_CONN_F_TEMPLATE    = 0x1000,
-    DPVS_CONN_F_NOFASTXMIT  = 0x2000,
-};
-
-struct dp_vs_conn_param {
-    int                 af;
-    uint16_t            proto;
-    const union inet_addr *caddr;
-    const union inet_addr *vaddr;
-    uint16_t            cport;
-    uint16_t            vport;
-    uint16_t            ct_dport; /* RS port for template connection */
-};
-
-struct conn_tuple_hash {
-    struct list_head    list;
-    int                 direct; /* inbound/outbound */
-
-    /* tuple info */
-    int                 af;
-    uint16_t            proto;
-    union inet_addr     saddr;  /* pkt's source addr */
-    union inet_addr     daddr;  /* pkt's dest addr */
-    uint16_t            sport;
-    uint16_t            dport;
-} __rte_cache_aligned;
-
-struct dp_vs_conn_stats {
-    rte_atomic64_t      inpkts;
-    rte_atomic64_t      inbytes;
-    rte_atomic64_t      outpkts;
-    rte_atomic64_t      outbytes;
-} __rte_cache_aligned;
-
-struct dp_vs_fdir_filt;
-struct dp_vs_proto;
-
-struct dp_vs_conn {
-    int                     af;
-    uint8_t                 proto;
-    union inet_addr         caddr;  /* Client address */
-    union inet_addr         vaddr;  /* Virtual address */
-    union inet_addr         laddr;  /* director Local address */
-    union inet_addr         daddr;  /* Destination (RS) address */
-    uint16_t                cport;
-    uint16_t                vport;
-    uint16_t                lport;
-    uint16_t                dport;
-
-    struct rte_mempool      *connpool;
-    struct conn_tuple_hash  tuplehash[DPVS_CONN_DIR_MAX];
-    rte_atomic32_t          refcnt;
-    struct dpvs_timer       timer;
-    struct timeval          timeout;
-    lcoreid_t               lcore;
-    struct dp_vs_dest       *dest;  /* real server */
-    void                    *prot_data;  /* protocol specific data */
-
-    /* for FNAT */
-    struct dp_vs_laddr      *local; /* local address */
-    struct dp_vs_seq        fnat_seq;
-
-    /* save last SEQ/ACK from RS for RST when conn expire*/
-    uint32_t                rs_end_seq;
-    uint32_t                rs_end_ack;
-
-    int (*packet_xmit)(struct dp_vs_proto *prot,
-                        struct dp_vs_conn *conn,
-                        struct rte_mbuf *mbuf);
-    int (*packet_out_xmit)(struct dp_vs_proto *prot,
-                        struct dp_vs_conn *conn,
-                        struct rte_mbuf *mbuf);
-
-    /* L2 fast xmit */
-    struct ether_addr       in_smac;
-    struct ether_addr       in_dmac;
-    struct ether_addr       out_smac;
-    struct ether_addr       out_dmac;
-
-    /* route for neigbour */
-    struct netif_port       *in_dev;    /* inside to rs*/
-    struct netif_port       *out_dev;   /* outside to client*/
-    union inet_addr         in_nexthop;  /* to rs*/
-    union inet_addr         out_nexthop; /* to client*/
-
-    /* statistics */
-    struct dp_vs_conn_stats stats;
-
-    /* synproxy related members */
-    struct dp_vs_seq syn_proxy_seq;     /* seq used in synproxy */
-    struct list_head ack_mbuf;          /* ack mbuf saved in step2 */
-    uint32_t ack_num;                   /* ack mbuf number stored */
-    struct rte_mbuf *syn_mbuf;          /* saved rs syn packet for retransmition */
-    rte_atomic32_t syn_retry_max;       /* syn retransmition max packets */
-
-    /* add for stopping ack storm */
-    uint32_t last_seq;                  /* seq of the last ack packet */
-    uint32_t last_ack_seq;              /* ack seq of the last ack packet */
-    rte_atomic32_t dup_ack_cnt;         /* count of repeated ack packets */
-
-    /* flags and state transition */
-    volatile uint16_t       flags;
-    volatile uint16_t       state;
-    volatile uint16_t       old_state;  /* old state, to be used for state transition
-                                           triggered synchronization */
-    /* controll members */
-    struct dp_vs_conn *control;         /* master who controlls me */
-    rte_atomic32_t n_control;           /* number of connections controlled by me*/
-    uint64_t ctime;                     /* create time */
-} __rte_cache_aligned;
-
-/* for syn-proxy to save all ack packet in conn before rs's syn-ack arrives */
-struct dp_vs_synproxy_ack_pakcet {
-    struct list_head list;
-    struct rte_mbuf *mbuf;
-} __rte_cache_aligned;
-
-/* helpers */
-#define tuplehash_in(c)         ((c)->tuplehash[DPVS_CONN_DIR_INBOUND])
-#define tuplehash_out(c)        ((c)->tuplehash[DPVS_CONN_DIR_OUTBOUND])
-
-int dp_vs_conn_init(void);
-int dp_vs_conn_term(void);
-
-struct dp_vs_conn * 
-dp_vs_conn_new(struct rte_mbuf *mbuf, 
-               const struct dp_vs_iphdr *iph,
-               struct dp_vs_conn_param *param,
-               struct dp_vs_dest *dest,
-               uint32_t flags);
-int dp_vs_conn_del(struct dp_vs_conn *conn);
-
-struct dp_vs_conn *
-dp_vs_conn_get(int af, uint16_t proto, 
-                const union inet_addr *saddr, 
-                const union inet_addr *daddr, 
-                uint16_t sport, uint16_t dport,
-                int *dir, bool reverse);
-
-struct dp_vs_conn *
-dp_vs_ct_in_get(int af, uint16_t proto,
-                const union inet_addr *saddr,
-                const union inet_addr *daddr,
-                uint16_t sport, uint16_t dport);
-
-void dp_vs_conn_put(struct dp_vs_conn *conn);
-/* put conn without reset the timer */
-void dp_vs_conn_put_no_reset(struct dp_vs_conn *conn);
-
-void ipvs_conn_keyword_value_init(void);
-void install_ipvs_conn_keywords(void);
-
-static inline void dp_vs_conn_fill_param(int af, uint8_t proto, 
-        const union inet_addr *caddr, const union inet_addr *vaddr, 
-        uint16_t cport, uint16_t vport, uint16_t ct_dport,
-        struct dp_vs_conn_param *param)
-{
-    param->af       = af;
-    param->proto    = proto;
-    param->caddr    = caddr;
-    param->vaddr    = vaddr;
-    param->cport    = cport;
-    param->vport    = vport;
-    param->ct_dport = ct_dport; /* only for template connection */
-}
-
-
-int dp_vs_check_template(struct dp_vs_conn *ct);
-
-static inline void dp_vs_control_del(struct dp_vs_conn *conn)
-{
-    struct dp_vs_conn *ctl_conn = conn->control;
-    char cbuf[64], vbuf[64];
-
-    if (!ctl_conn) {
-#ifdef CONFIG_DPVS_IPVS_DEBUG
-        RTE_LOG(DEBUG, IPVS, "%s: request control DEL for uncontrolled: "
-                "%s:%u to %s:%u\n", __func__,
-                inet_ntop(conn->af, &conn->caddr, cbuf, sizeof(cbuf)),
-                ntohs(conn->cport),
-                inet_ntop(conn->af, &conn->vaddr, vbuf, sizeof(vbuf)),
-                ntohs(conn->vport));
-#endif
-        return;
-    }
-
-#ifdef CONFIG_DPVS_IPVS_DEBUG
-    RTE_LOG(DEBUG, IPVS, "%s: deleting control for: conn.client=%s:%u "
-            "ctrl_conn.client=%s:%u\n", __func__,
-            inet_ntop(conn->af, &conn->caddr, cbuf, sizeof(cbuf)),
-            ntohs(conn->cport),
-            inet_ntop(conn->af, &ctl_conn->vaddr, cbuf, sizeof(cbuf)),
-            ntohs(conn->vport));
-#endif
-    conn->control = NULL;
-    if (rte_atomic32_read(&ctl_conn->n_control) == 0) {
-        RTE_LOG(ERR, IPVS, "%s: BUG control DEL with zero n_control: "
-                "%s:%u to %s:%u\n", __func__,
-                inet_ntop(conn->af, &conn->caddr, cbuf, sizeof(cbuf)),
-                ntohs(conn->cport),
-                inet_ntop(conn->af, &conn->vaddr, vbuf, sizeof(vbuf)),
-                ntohs(conn->vport));
-        return;
-    }
-    rte_atomic32_dec(&ctl_conn->n_control);
-}
-
-static inline void dp_vs_control_add(struct dp_vs_conn *conn, struct dp_vs_conn *ctl_conn)
-{
-    char cbuf[64], vbuf[64];
-
-    if (unlikely(conn->control != NULL)) {
-        RTE_LOG(ERR, IPVS, "%s: request control ADD for already controlled conn: "
-                "%s:%u to %s:%u\n", __func__,
-                inet_ntop(conn->af, &conn->caddr, cbuf, sizeof(cbuf)) ? cbuf : "::",
-                ntohs(conn->cport),
-                inet_ntop(conn->af, &conn->vaddr, vbuf, sizeof(vbuf)) ? vbuf : "::",
-                ntohs(conn->vport));
-        dp_vs_control_del(conn);
-    }
-#ifdef CONFIG_OPVS_IPVS_DEBUG
-    RTE_LOG(DEBUG, IPVS, "%s: Adding control for: conn.client=%s:%u "
-            "ctrl_conn.client=%s:%u\n", __func__,
-            inet_ntop(conn->af, &conn->caddr, cbuf, sizeof(cbuf)) ? cbuf : "::",
-            ntohs(conn->cport),
-            inet_ntop(conn->af, &ctl_conn->caddr, vbuf, sizeof(cbuf)) ? cbuf : "::",
-            ntohs(ctl_conn->cport));
-#endif
-    conn->control = ctl_conn;
-    rte_atomic32_inc(&ctl_conn->n_control);
-}
-
-#endif /* __DPVS_CONN_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/dest.h b/tools/keepalived/keepalived/include/ipvs/dest.h
deleted file mode 100644
index 9314c0268..000000000
--- a/tools/keepalived/keepalived/include/ipvs/dest.h
+++ /dev/null
@@ -1,212 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DPVS_DEST_H__
-#define __DPVS_DEST_H__
-
-#include "ipvs/service.h"
-
-/* must consistent with IP_VS_CONN_F_XXX (libipvs-2.6/ip_vs.h) */
-enum dpvs_fwd_mode {
-    DPVS_FWD_MASQ           = 0,
-    DPVS_FWD_LOCALNODE      = 1,
-    DPVS_FWD_MODE_TUNNEL    = 2,
-    DPVS_FWD_MODE_DR        = 3,
-    DPVS_FWD_MODE_BYPASS    = 4,
-    DPVS_FWD_MODE_FNAT      = 5,
-    DPVS_FWD_MODE_NAT       = DPVS_FWD_MASQ,
-    DPVS_FWD_MODE_SNAT      = 6,
-};
-
-enum {
-    DPVS_DEST_F_AVAILABLE       = 0x1<<0,
-    DPVS_DEST_F_OVERLOAD        = 0x1<<1,
-};
-
-#ifdef __DPVS__
-#include "common.h"
-#include "list.h"
-#include "dpdk.h"
-
-struct dp_vs_dest {
-    struct list_head    n_list;     /* for the dests in the service */
-    struct list_head    d_list;     /* for table with all the dests */
-
-    int                 af;         /* address family */
-    /*
-     * normally, addr/port is for Real Server,
-     * but for SNAT, addr/port is the "to-source"
-     * (the target source ip/port translated to).
-     */
-    union inet_addr     addr;       /* IP address of the server */
-    uint16_t            port;       /* port number of the server */
-
-    volatile unsigned   flags;      /* dest status flags */
-    rte_atomic16_t      conn_flags; /* flags to copy to conn */
-    rte_atomic16_t      weight;     /* server weight */
-
-    rte_atomic32_t      refcnt;     /* reference counter */
-    struct dp_vs_stats  *stats;     /* Use per-cpu statistics for destination server */
-
-    enum dpvs_fwd_mode  fwdmode;
-
-    /* connection counters and thresholds */
-    rte_atomic32_t      actconns;   /* active connections */
-    rte_atomic32_t      inactconns; /* inactive connections */
-    rte_atomic32_t      persistconns;   /* persistent connections */
-    uint32_t            max_conn;   /* upper threshold */
-    uint32_t            min_conn;   /* lower threshold */
-
-    /* for virtual service */
-    uint16_t            proto;      /* which protocol (TCP/UDP) */
-    uint16_t            vport;      /* virtual port number */
-    uint32_t            vfwmark;    /* firewall mark of service */
-    struct dp_vs_service *svc;      /* service it belongs to */
-    union inet_addr     vaddr;      /* virtual IP address */
-    unsigned            conn_timeout; /* conn timeout copied from svc*/
-    unsigned            limit_proportion; /* limit copied from svc*/
-} __rte_cache_aligned;
-#endif
-
-struct dp_vs_dest_conf {
-    /* destination server address */
-    int                af;
-    union inet_addr    addr;
-    uint16_t           port;
-
-    enum dpvs_fwd_mode fwdmode;
-    /* real server options */
-    unsigned           conn_flags;    /* connection flags */
-    int                weight;     /* destination weight */
-
-    /* thresholds for active connections */
-    uint32_t           max_conn;    /* upper threshold */
-    uint32_t           min_conn;    /* lower threshold */
-};
-
-struct dp_vs_dest_entry {
-    int             af;
-    union inet_addr addr;        /* destination address */
-    uint16_t        port;
-    unsigned        conn_flags;    /* connection flags */
-    int             weight;     /* destination weight */
-
-    uint32_t        max_conn;  /* upper threshold */
-    uint32_t        min_conn;  /* lower threshold */
-
-    uint32_t        actconns;  /* active connections */
-    uint32_t        inactconns;   /* inactive connections */
-    uint32_t        persistconns; /* persistent connections */
-
-    /* statistics */
-    struct dp_vs_stats stats;
-};
-
-struct dp_vs_get_dests {
-    /* which service: user fills in these */
-    int              af;
-    uint16_t         proto;
-    union inet_addr  addr;        /* virtual address */
-    uint16_t         port;
-    uint32_t         fwmark;       /* firwall mark of service */
-
-    /* number of real servers */
-    unsigned int num_dests;
-
-    lcoreid_t        cid;
-
-    char        srange[256];
-    char        drange[256];
-    char        iifname[IFNAMSIZ];
-    char        oifname[IFNAMSIZ];
-
-    /* the real servers */
-    struct dp_vs_dest_entry entrytable[0];
-};
-
-struct dp_vs_dest_user{
-    int             af;
-    union inet_addr addr;
-    uint16_t        port;
-
-    unsigned        conn_flags;
-    int             weight;
-
-    uint32_t        max_conn;
-    uint32_t        min_conn;
-};
-
-#ifdef __DPVS__
-static inline bool
-dp_vs_dest_is_avail(struct dp_vs_dest *dest)
-{
-    return (dest->flags & DPVS_DEST_F_AVAILABLE) ? true : false;
-}
-
-static inline bool
-dp_vs_dest_is_overload(struct dp_vs_dest *dest)
-{
-    return (dest->flags & DPVS_DEST_F_OVERLOAD) ? true : false;
-}
-
-static inline int16_t
-dp_vs_dest_get_weight(struct dp_vs_dest *dest)
-{
-    return rte_atomic16_read(&dest->weight);
-}
-
-static inline bool
-dp_vs_dest_is_valid(struct dp_vs_dest *dest)
-{
-    return (dest
-            && dp_vs_dest_is_avail(dest)
-            && !dp_vs_dest_is_overload(dest)
-            && dp_vs_dest_get_weight(dest) > 0) ? true : false;
-}
-
-int dp_vs_new_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest,
-                                              struct dp_vs_dest **dest_p);
-
-struct dp_vs_dest *dp_vs_lookup_dest(int af, struct dp_vs_service *svc,
-                                     const union inet_addr *daddr, uint16_t dport);
-
-struct dp_vs_dest *dp_vs_trash_get_dest(struct dp_vs_service *svc,
-                                        const union inet_addr *daddr, uint16_t dport);
-
-void dp_vs_trash_cleanup(void);
-
-int dp_vs_add_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest);
-
-int dp_vs_edit_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest);
-
-void __dp_vs_unlink_dest(struct dp_vs_service *svc,
-                        struct dp_vs_dest *dest, int svcupd);
-
-void __dp_vs_del_dest(struct dp_vs_dest *dest);
-
-int dp_vs_del_dest(struct dp_vs_service *svc, struct dp_vs_dest_conf *udest);
-
-int dp_vs_get_dest_entries(const struct dp_vs_service *svc,
-                           const struct dp_vs_get_dests *get,
-                           struct dp_vs_get_dests *uptr);
-
-int dp_vs_dest_init(void);
-
-int dp_vs_dest_term(void);
-#endif
-
-#endif /* __DPVS_DEST_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/ipvs.h b/tools/keepalived/keepalived/include/ipvs/ipvs.h
deleted file mode 100644
index 07305a954..000000000
--- a/tools/keepalived/keepalived/include/ipvs/ipvs.h
+++ /dev/null
@@ -1,58 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DPVS_IPVS_H__
-#define __DPVS_IPVS_H__
-#include "common.h"
-#include "inet.h"
-#include "ipvs/service.h"
-
-#ifndef IPVS
-#define IPVS
-#define RTE_LOGTYPE_IPVS    RTE_LOGTYPE_USER1
-#endif
-
-#define IPVS_TIMEOUT_MIN    0
-#define IPVS_TIMEOUT_MAX    31536000 /* one year */
-
-struct dp_vs_iphdr {
-    int             af;
-    int             len;
-    uint8_t         proto;
-    union inet_addr saddr;
-    union inet_addr daddr;
-};
-
-/* for sequence number adjusting */
-struct dp_vs_seq {
-    uint32_t        isn;
-    uint32_t        delta;
-    uint32_t        fdata_seq;
-    uint32_t        prev_delta;
-};
-
-int dp_vs_init(void);
-int dp_vs_term(void);
-
-struct dp_vs_service;
-
-struct dp_vs_conn *dp_vs_schedule(struct dp_vs_service *svc,
-                                  const struct dp_vs_iphdr *iph,
-                                  struct rte_mbuf *mbuf,
-                                  bool is_synproxy_on);
-
-#endif /* __DPVS_IPVS_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/laddr.h b/tools/keepalived/keepalived/include/ipvs/laddr.h
deleted file mode 100644
index 9dbc830c7..000000000
--- a/tools/keepalived/keepalived/include/ipvs/laddr.h
+++ /dev/null
@@ -1,35 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DPVS_LADDR_H__
-#define __DPVS_LADDR_H__
-#include "common.h"
-#include "ipvs/conn.h"
-#include "ipvs/service.h"
-
-int dp_vs_laddr_bind(struct dp_vs_conn *conn, struct dp_vs_service *svc);
-int dp_vs_laddr_unbind(struct dp_vs_conn *conn);
-
-int dp_vs_laddr_add(struct dp_vs_service *svc, int af, const union inet_addr *addr,
-                    const char *ifname);
-int dp_vs_laddr_del(struct dp_vs_service *svc, int af, const union inet_addr *addr);
-int dp_vs_laddr_flush(struct dp_vs_service *svc);
-
-int dp_vs_laddr_init(void);
-int dp_vs_laddr_term(void);
-
-#endif /* __DPVS_LADDR_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/nat64.h b/tools/keepalived/keepalived/include/ipvs/nat64.h
deleted file mode 100644
index ac6e44d02..000000000
--- a/tools/keepalived/keepalived/include/ipvs/nat64.h
+++ /dev/null
@@ -1,49 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DPVS_NAT64_H__
-#define __DPVS_NAT64_H__
-
-#include "ipv4.h"
-#include "ipv6.h"
-
-static inline int mbuf_nat6to4_len(struct rte_mbuf *mbuf)
-{
-    int offset = sizeof(struct ip6_hdr);
-    uint8_t nexthdr = ip6_hdr(mbuf)->ip6_nxt;
-    int len;
-
-    offset = ip6_skip_exthdr(mbuf, offset, &nexthdr);
-    len = mbuf->pkt_len - offset + sizeof(struct ipv4_hdr);
-
-    return len;
-}
-
-static inline int mbuf_nat4to6_len(struct rte_mbuf *mbuf)
-{
-    return (mbuf->pkt_len - ip4_hdrlen(mbuf) + sizeof(struct ip6_hdr));
-}
-
-int mbuf_6to4(struct rte_mbuf *mbuf, 
-              const struct in_addr *saddr,
-              const struct in_addr *daddr);
-
-int mbuf_4to6(struct rte_mbuf *mbuf,
-              const struct in6_addr *saddr,
-              const struct in6_addr *daddr);
-
-#endif /* __DPVS_NAT64_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/proto.h b/tools/keepalived/keepalived/include/ipvs/proto.h
deleted file mode 100644
index 2a364e3c1..000000000
--- a/tools/keepalived/keepalived/include/ipvs/proto.h
+++ /dev/null
@@ -1,108 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DPVS_PROTO_H__
-#define __DPVS_PROTO_H__
-#include "list.h"
-#include "dpdk.h"
-#include "common.h"
-#include "ipvs/ipvs.h"
-#include "ipvs/conn.h"
-
-struct dp_vs_conn;
-#define IPV6_ADDR_LEN_IN_BYTES 16
-#define IPV4_ADDR_LEN_IN_BYTES 4
-
-struct dp_vs_proto {
-    char                    *name;
-    uint8_t                 proto;
-    int                     *timeout_table; /* protocol timeout table */
-
-    int (*init)(struct dp_vs_proto *proto);
-    int (*exit)(struct dp_vs_proto *proto);
-
-    /* schedule RS and create new conn */
-    int (*conn_sched)(struct dp_vs_proto *proto, 
-                      const struct dp_vs_iphdr *iph,
-                      struct rte_mbuf *mbuf,
-                      struct dp_vs_conn **conn,
-                      int *verdict);
-
-    /* lookup conn by <proto, saddr, sport, daddr, dport>
-     * return conn and direction or NULL if miss */
-    struct dp_vs_conn *
-        (*conn_lookup)(struct dp_vs_proto *proto, 
-                       const struct dp_vs_iphdr *iph,
-                       struct rte_mbuf *mbuf, int *direct, 
-                       bool reverse, bool *drop);
-
-    int (*conn_expire)(struct dp_vs_proto *proto, 
-                       struct dp_vs_conn *conn);
-
-    /* for NAT mode */
-    int (*nat_in_handler)(struct dp_vs_proto *proto,
-                       struct dp_vs_conn *conn,
-                       struct rte_mbuf *mbuf);
-    int (*nat_out_handler)(struct dp_vs_proto *proto,
-                       struct dp_vs_conn *conn,
-                       struct rte_mbuf *mbuf);
-
-    /* for FNAT mode */
-    int (*fnat_in_handler)(struct dp_vs_proto *proto,
-                       struct dp_vs_conn *conn,
-                       struct rte_mbuf *mbuf);
-    int (*fnat_out_handler)(struct dp_vs_proto *proto,
-                       struct dp_vs_conn *conn,
-                       struct rte_mbuf *mbuf);
-    /* pre-handler for FNAT */
-    int (*fnat_in_pre_handler)(struct dp_vs_proto *proto,
-                       struct dp_vs_conn *conn,
-                       struct rte_mbuf *mbuf);
-    int (*fnat_out_pre_handler)(struct dp_vs_proto *proto,
-                       struct dp_vs_conn *conn,
-                       struct rte_mbuf *mbuf);
-
-    /* for SNAT mode */
-    int (*snat_in_handler)(struct dp_vs_proto *proto,
-                       struct dp_vs_conn *conn,
-                       struct rte_mbuf *mbuf);
-    int (*snat_out_handler)(struct dp_vs_proto *proto,
-                       struct dp_vs_conn *conn,
-                       struct rte_mbuf *mbuf);
-
-    int (*csum_check)(struct dp_vs_proto *proto, int af,
-                       struct rte_mbuf *mbuf);
-    int (*dump_packet)(struct dp_vs_proto *proto, int af,
-                       struct rte_mbuf *mbuf, int off, 
-                       const char *msg);
-
-    /* try trans connn's states by packet and direction */
-    int (*state_trans)(struct dp_vs_proto *proto, 
-                       struct dp_vs_conn *conn, 
-                       struct rte_mbuf *mbuf, 
-                       int direct);
-
-    const char *
-        (*state_name)(int state);
-} __rte_cache_aligned;
-
-int dp_vs_proto_init(void);
-int dp_vs_proto_term(void);
-
-struct dp_vs_proto *dp_vs_proto_lookup(uint8_t proto);
-
-#endif /* __DPVS_PROTO_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/proto_icmp.h b/tools/keepalived/keepalived/include/ipvs/proto_icmp.h
deleted file mode 100644
index caa810909..000000000
--- a/tools/keepalived/keepalived/include/ipvs/proto_icmp.h
+++ /dev/null
@@ -1,24 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-
-#ifndef __DP_VS_PROTO_ICMP_H__
-#define __DP_VS_PROTO_ICMP_H__
-
-enum {
-    DPVS_ICMP_S_NORMAL      = 0,
-    DPVS_ICMP_S_LAST
-};
-
-#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/proto_tcp.h b/tools/keepalived/keepalived/include/ipvs/proto_tcp.h
deleted file mode 100644
index 541f38bd7..000000000
--- a/tools/keepalived/keepalived/include/ipvs/proto_tcp.h
+++ /dev/null
@@ -1,109 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DP_VS_PROTO_TCP_H__
-#define __DP_VS_PROTO_TCP_H__
-
-#include <netinet/in.h>
-
-enum {
-    TCP_OPT_EOL         = 0,
-    TCP_OPT_NOP         = 1,
-    TCP_OPT_MSS         = 2,
-    TCP_OPT_WINDOW      = 3,
-    TCP_OPT_SACK_PERM   = 4,
-    TCP_OPT_SACK        = 5,
-    TCP_OPT_TIMESTAMP   = 8,
-    TCP_OPT_ADDR        = 254, /* non-standard */
-};
-
-#define TCP_OLEN_MSS                4
-#define TCP_OLEN_TIMESTAMP          10
-#define TCP_OLEN_IP4_ADDR           8
-#define TCP_OLEN_IP6_ADDR           20
-
-#define TCP_OLEN_TSTAMP_ALIGNED     12
-#define TCP_OLEN_SACK_BASE          2
-#define TCP_OLEN_SACK_PERBLOCK      8
-
-#define TCP_OLEN_WSCALE_ALIGNED      4
-#define TCP_OLEN_SACKPERMITTED_ALIGNED   4
-
-#define TCP_OPT_TIMESTAMP(tm_spec) \
-    (((tm_spec).tv_sec % 100) * 1000000 + \
-     ((tm_spec).tv_nsec / 1000))
-
-struct tcpopt_ip4_addr {
-    uint8_t opcode;
-    uint8_t opsize;
-    __be16 port;
-    struct in_addr  addr;
-} __attribute__((__packed__));
-
-struct tcpopt_ip6_addr {
-    uint8_t opcode;
-    uint8_t opsize;
-    __be16 port;
-    struct in6_addr addr;
-} __attribute__((__packed__));
-
-struct tcpopt_addr {
-    uint8_t opcode;
-    uint8_t opsize;
-    __be16 port;
-    uint8_t addr[16];
-} __attribute__((__packed__));
-
-enum {
-    DPVS_TCP_S_NONE         = 0,
-    DPVS_TCP_S_ESTABLISHED,
-    DPVS_TCP_S_SYN_SENT,
-    DPVS_TCP_S_SYN_RECV,
-    DPVS_TCP_S_FIN_WAIT,
-    DPVS_TCP_S_TIME_WAIT,
-    DPVS_TCP_S_CLOSE,
-    DPVS_TCP_S_CLOSE_WAIT,
-    DPVS_TCP_S_LAST_ACK,
-    DPVS_TCP_S_LISTEN,
-    DPVS_TCP_S_SYNACK,
-    DPVS_TCP_S_LAST
-};
-
-struct tcp_state {
-    int next_state[DPVS_TCP_S_LAST];
-};
-
-#define sNO DPVS_TCP_S_NONE
-#define sES DPVS_TCP_S_ESTABLISHED
-#define sSS DPVS_TCP_S_SYN_SENT
-#define sSR DPVS_TCP_S_SYN_RECV
-#define sFW DPVS_TCP_S_FIN_WAIT
-#define sTW DPVS_TCP_S_TIME_WAIT
-#define sCL DPVS_TCP_S_CLOSE
-#define sCW DPVS_TCP_S_CLOSE_WAIT
-#define sLA DPVS_TCP_S_LAST_ACK
-#define sLI DPVS_TCP_S_LISTEN
-#define sSA DPVS_TCP_S_SYNACK
-
-struct tcphdr *tcp_hdr(const struct rte_mbuf *mbuf);
-void tcp4_send_csum(struct ipv4_hdr *iph, struct tcphdr *th);
-void tcp6_send_csum(struct ipv6_hdr *iph, struct tcphdr *th);
-struct rte_mempool *get_mbuf_pool(const struct dp_vs_conn *conn, int dir);
-void install_proto_tcp_keywords(void);
-void tcp_keyword_value_init(void);
-
-#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/rr.h b/tools/keepalived/keepalived/include/ipvs/rr.h
deleted file mode 100644
index 025af4c66..000000000
--- a/tools/keepalived/keepalived/include/ipvs/rr.h
+++ /dev/null
@@ -1,28 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DPVS_RR_H__
-#define __DPVS_RR_H__
-
-#include "ipvs/service.h"
-#include "ipvs/dest.h"
-#include "ipvs/sched.h"
-
-int dp_vs_rr_init(void);
-int dp_vs_rr_term(void);
-
-#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/sched.h b/tools/keepalived/keepalived/include/ipvs/sched.h
deleted file mode 100644
index b525e273b..000000000
--- a/tools/keepalived/keepalived/include/ipvs/sched.h
+++ /dev/null
@@ -1,59 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DPVS_SCHED_H__
-#define __DPVS_SCHED_H__
-#include "list.h"
-#include "dpdk.h"
-#include "common.h"
-#include "ctrl.h"
-#include "ipvs/service.h"
-
-
-struct dp_vs_scheduler {
-    struct list_head    n_list;
-    char                *name;
-//    rte_atomic32_t      refcnt;
-
-    struct dp_vs_dest *
-        (*schedule)(struct dp_vs_service *svc, 
-                    const struct rte_mbuf *mbuf);
-
-    int (*init_service)(struct dp_vs_service *svc);
-    int (*exit_service)(struct dp_vs_service *svc);
-    int (*update_service)(struct dp_vs_service *svc, struct dp_vs_dest *dest,
-            sockoptid_t opt);
-} __rte_cache_aligned;
-
-int dp_vs_sched_init(void);
-int dp_vs_sched_term(void);
-
-struct dp_vs_scheduler *
-dp_vs_scheduler_get(const char *name);
-
-int dp_vs_bind_scheduler(struct dp_vs_service *svc,
-                     struct dp_vs_scheduler *scheduler);
-
-int dp_vs_unbind_scheduler(struct dp_vs_service *svc);
-
-void dp_vs_scheduler_put(struct dp_vs_scheduler *scheduler);
-
-int register_dp_vs_scheduler(struct dp_vs_scheduler *scheduler);
-
-int unregister_dp_vs_scheduler(struct dp_vs_scheduler *scheduler);
-
-#endif /* __DPVS_SCHED_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/service.h b/tools/keepalived/keepalived/include/ipvs/service.h
deleted file mode 100644
index 8f22dbef9..000000000
--- a/tools/keepalived/keepalived/include/ipvs/service.h
+++ /dev/null
@@ -1,257 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DPVS_SVC_H__
-#define __DPVS_SVC_H__
-
-#include <stdint.h>
-#include <net/if.h>
-#include "match.h"
-#include "ipvs/stats.h"
-#include "ipvs/dest.h"
-#include "inet.h"
-
-#define DP_VS_SCHEDNAME_MAXLEN      16
-
-#ifdef __DPVS__
-#include "list.h"
-#include "dpdk.h"
-#include "netif.h"
-#include "ipvs/ipvs.h"
-#include "ipvs/sched.h"
-
-#define RTE_LOGTYPE_SERVICE RTE_LOGTYPE_USER3
-#define DP_VS_SVC_F_PERSISTENT      0x0001      /* peristent port */
-#define DP_VS_SVC_F_HASHED          0x0002      /* hashed entry */
-#define DP_VS_SVC_F_SYNPROXY        0x8000      /* synrpoxy flag */
-
-#define DP_VS_SVC_F_SIP_HASH        0x0100      /* sip hash target */
-#define DP_VS_SVC_F_QID_HASH        0x0200      /* quic cid hash target */
-
-rte_rwlock_t __dp_vs_svc_lock;
-
-/* virtual service */
-struct dp_vs_service {
-    struct list_head    s_list;     /* node for normal service table */
-    struct list_head    f_list;     /* node for fwmark service table */
-    struct list_head    m_list;     /* node for match  service table */
-    rte_atomic32_t      refcnt;
-    rte_atomic32_t      usecnt;
-
-    /*
-     * to identify a service
-     * 1. <af, proto, vip, vport>
-     * 2. fwmark (no use now).
-     * 3. match.
-     */
-    int                 af;
-    uint8_t             proto;      /* TCP/UDP/... */
-    union inet_addr     addr;       /* virtual IP address */
-    uint16_t            port;
-    uint32_t            fwmark;
-    struct dp_vs_match  *match;
-
-    unsigned            flags;
-    unsigned            timeout;
-    unsigned            conn_timeout;
-    unsigned            bps;
-    unsigned            limit_proportion;
-    uint32_t            netmask;
-
-    struct list_head    dests;      /* real services (dp_vs_dest{}) */
-    uint32_t            num_dests;
-    long                weight;     /* sum of servers weight */
-
-    struct dp_vs_scheduler  *scheduler;
-    void                *sched_data;
-    rte_rwlock_t        sched_lock;
-
-    struct dp_vs_stats  *stats;
-
-    /* FNAT only */
-    struct list_head    laddr_list; /* local address (LIP) pool */
-    struct list_head    *laddr_curr;
-    rte_rwlock_t        laddr_lock;
-    uint32_t            num_laddrs;
-
-    /* ... flags, timer ... */
-} __rte_cache_aligned;
-#endif
-
-struct dp_vs_service_conf {
-    /* virtual service addresses */
-    uint16_t            af;
-    uint16_t            protocol;
-    union inet_addr     addr;       /* virtual ip address */
-    uint16_t            port;
-    uint32_t            fwmark;     /* firwall mark of service */
-    struct dp_vs_match  match;
-
-    /* virtual service options */
-    char                *sched_name;
-    unsigned            flags;     /* virtual service flags */
-    unsigned            timeout;   /* persistent timeout in sec */
-    unsigned            conn_timeout;
-    uint32_t            netmask;        /* persistent netmask */
-    unsigned            bps;
-    unsigned            limit_proportion;
-};
-
-struct dp_vs_service_entry {
-    int                 af;
-    uint16_t            proto;
-    union inet_addr     addr;
-    uint16_t            port;
-    uint32_t            fwmark;
-
-    char                sched_name[DP_VS_SCHEDNAME_MAXLEN];
-    unsigned            flags;
-    unsigned            timeout;
-    unsigned            conn_timeout;
-    uint32_t            netmask;
-    unsigned            bps;
-    unsigned            limit_proportion;
-
-    unsigned int        num_dests;
-    unsigned int        num_laddrs;
-    lcoreid_t           cid;
-
-    struct dp_vs_stats  stats;
-
-    char                srange[256];
-    char                drange[256];
-    char                iifname[IFNAMSIZ];
-    char                oifname[IFNAMSIZ];
-};
-
-struct dp_vs_get_services {
-    lcoreid_t     cid;
-    unsigned int        num_services;
-    struct dp_vs_service_entry entrytable[0];
-};
-
-struct dp_vs_service_user{
-    int               af;
-    uint16_t          proto;
-    union inet_addr   addr;
-    uint16_t          port;
-    uint32_t          fwmark;
-
-    char              sched_name[DP_VS_SCHEDNAME_MAXLEN];
-    unsigned          flags;
-    unsigned          timeout;
-    unsigned          conn_timeout;
-    uint32_t          netmask;
-    unsigned          bps;
-    unsigned          limit_proportion;
-
-    char              srange[256];
-    char              drange[256];
-    char              iifname[IFNAMSIZ];
-    char              oifname[IFNAMSIZ];
-};
-
-struct dp_vs_getinfo {
-    unsigned int version;
-    unsigned int size;
-    unsigned int num_services;
-};
-
-#ifdef __DPVS__
-int dp_vs_service_init(void);
-int dp_vs_service_term(void);
-
-int dp_vs_add_service(struct dp_vs_service_conf *u,
-                      struct dp_vs_service **svc_p);
-
-int dp_vs_del_service(struct dp_vs_service *svc);
-
-int dp_vs_edit_service(struct dp_vs_service *svc, 
-                       struct dp_vs_service_conf *u);
-
-struct dp_vs_service *
-dp_vs_service_lookup(int af, uint16_t protocol,
-                     const union inet_addr *vaddr, 
-                     uint16_t vport, uint32_t fwmark,
-                     const struct rte_mbuf *mbuf,
-                     const struct dp_vs_match *match);
-
-int dp_vs_match_parse(const char *srange, const char *drange,
-                      const char *iifname, const char *oifname,
-                      struct dp_vs_match *match);
-
-void __dp_vs_bind_svc(struct dp_vs_dest *dest, struct dp_vs_service *svc);
-
-void __dp_vs_unbind_svc(struct dp_vs_dest *dest);
-
-struct dp_vs_service *dp_vs_lookup_vip(int af, uint16_t protocol,
-                                    const union inet_addr *vaddr);
-
-static inline void dp_vs_service_put(struct dp_vs_service *svc)
-{
-    rte_atomic32_dec(&svc->usecnt);
-}
-
-struct dp_vs_service *__dp_vs_service_get(int af, uint16_t protocol,
-                       const union inet_addr *vaddr, uint16_t vport);
-
-struct dp_vs_service *__dp_vs_svc_fwm_get(int af, uint32_t fwmark);
-
-int dp_vs_get_service_entries(const struct dp_vs_get_services *get,
-        struct dp_vs_get_services *uptr);
-
-unsigned dp_vs_get_conn_timeout(struct dp_vs_conn *conn);
-
-/* flush all services */
-int dp_vs_flush(void);
-
-int dp_vs_zero_service(struct dp_vs_service *svc);
-
-int dp_vs_zero_all(void);
-
-enum{
-    DPVS_SO_SET_FLUSH = 200,
-    DPVS_SO_SET_ZERO,
-    DPVS_SO_SET_ADD,
-    DPVS_SO_SET_EDIT,
-    DPVS_SO_SET_DEL,
-    DPVS_SO_SET_ADDDEST,
-    DPVS_SO_SET_EDITDEST,
-    DPVS_SO_SET_DELDEST,
-    DPVS_SO_SET_GRATARP,
-};
-
-enum{
-    DPVS_SO_GET_VERSION = 200,
-    DPVS_SO_GET_INFO,
-    DPVS_SO_GET_SERVICES,
-    DPVS_SO_GET_SERVICE,
-    DPVS_SO_GET_DESTS,
-};
-
-#endif
-
-#define SOCKOPT_SVC_BASE         DPVS_SO_SET_FLUSH
-#define SOCKOPT_SVC_SET_CMD_MAX  DPVS_SO_SET_GRATARP
-#define SOCKOPT_SVC_GET_CMD_MAX  DPVS_SO_GET_DESTS
-
-#define MAX_ARG_LEN    (sizeof(struct dp_vs_service_user) +    \
-                         sizeof(struct dp_vs_dest_user))
-
-#define DPVS_WAIT_WHILE(expr) while(expr){;}
-
-#endif /* __DPVS_SVC_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/stats.h b/tools/keepalived/keepalived/include/ipvs/stats.h
deleted file mode 100644
index 665ae04f1..000000000
--- a/tools/keepalived/keepalived/include/ipvs/stats.h
+++ /dev/null
@@ -1,118 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DPVS_STATS_H__
-#define __DPVS_STATS_H__
-#include <stdint.h>
-#include "ipvs/service.h"
-
-struct dp_vs_stats {
-    uint64_t            conns;
-    uint64_t            inpkts;
-    uint64_t            inbytes;
-    uint64_t            outpkts;
-    uint64_t            outbytes;
-
-    uint32_t cps;
-    uint32_t inpps;
-    uint32_t inbps;
-    uint32_t outpps;
-    uint32_t outbps;
-};
-
-#ifdef __DPVS__
-#include "dpdk.h"
-
-struct dp_vs_conn;
-
-/* statistics for FULLNAT and SYNPROXY */
-enum  dp_vs_estats_type {
-    FULLNAT_ADD_TOA_OK = 1,
-    FULLNAT_ADD_TOA_FAIL_LEN,
-    FULLNAT_ADD_TOA_HEAD_FULL,
-    FULLNAT_ADD_TOA_FAIL_MEM,
-    FULLNAT_ADD_TOA_FAIL_PROTO,
-    FULLNAT_CONN_REUSED,
-    FULLNAT_CONN_REUSED_CLOSE,
-    FULLNAT_CONN_REUSED_TIMEWAIT,
-    FULLNAT_CONN_REUSED_FINWAIT,
-    FULLNAT_CONN_REUSED_CLOSEWAIT,
-    FULLNAT_CONN_REUSED_LASTACK,
-    FULLNAT_CONN_REUSED_ESTAB,
-    SYNPROXY_RS_ERROR,
-    SYNPROXY_NULL_ACK,
-    SYNPROXY_BAD_ACK,
-    SYNPROXY_OK_ACK,
-    SYNPROXY_SYN_CNT,
-    SYNPROXY_ACK_STORM,
-    SYNPROXY_SYNSEND_QLEN,
-    SYNPROXY_CONN_REUSED,
-    SYNPROXY_CONN_REUSED_CLOSE,
-    SYNPROXY_CONN_REUSED_TIMEWAIT,
-    SYNPROXY_CONN_REUSED_FINWAIT,
-    SYNPROXY_CONN_REUSED_CLOSEWAIT,
-    SYNPROXY_CONN_REUSED_LASTACK,
-    DEFENCE_IP_FRAG_DROP,
-    DEFENCE_TCP_DROP,
-    DEFENCE_UDP_DROP,
-    FAST_XMIT_REJECT,
-    FAST_XMIT_PASS,
-    FAST_XMIT_SKB_COPY,
-    FAST_XMIT_NO_MAC,
-    FAST_XMIT_SYNPROXY_SAVE,
-    FAST_XMIT_DEV_LOST,
-    FAST_XMIT_REJECT_INSIDE,
-    FAST_XMIT_PASS_INSIDE,
-    FAST_XMIT_SYNPROXY_SAVE_INSIDE,
-    RST_IN_SYN_SENT,
-    RST_OUT_SYN_SENT,
-    RST_IN_ESTABLISHED,
-    RST_OUT_ESTABLISHED,
-    GRO_PASS,
-    LRO_REJECT,
-    XMIT_UNEXPECTED_MTU,
-    CONN_SCHED_UNREACH,
-    SYNPROXY_NO_DEST,
-    CONN_EXCEEDED,
-    DP_VS_EXT_STAT_LAST
-};
-
-struct dp_vs_estats {
-    unsigned long mibs[DP_VS_EXT_STAT_LAST];
-} __rte_cache_aligned;
-
-int dp_vs_stats_init(void);
-int dp_vs_stats_term(void);
-
-void dp_vs_stats_clear(void);
-void dp_svc_stats_clear(struct dp_vs_stats *stats);
-
-int dp_vs_stats_in(struct dp_vs_conn *conn, struct rte_mbuf *mbuf);
-int dp_vs_stats_out(struct dp_vs_conn *conn, struct rte_mbuf *mbuf);
-void dp_vs_stats_conn(struct dp_vs_conn *conn);
-
-void dp_vs_estats_inc(enum dp_vs_estats_type field);
-void dp_vs_estats_clear(void);
-uint64_t dp_vs_estats_get(enum dp_vs_estats_type field);
-
-int dp_vs_new_stats(struct dp_vs_stats **p);
-void dp_vs_del_stats(struct dp_vs_stats *p);
-void dp_vs_zero_stats(struct dp_vs_stats* stats);
-int dp_vs_copy_stats(struct dp_vs_stats* dst, struct dp_vs_stats* src);
-#endif
-
-#endif /* __DPVS_STATS_H__ */
diff --git a/tools/keepalived/keepalived/include/ipvs/synproxy.h b/tools/keepalived/keepalived/include/ipvs/synproxy.h
deleted file mode 100644
index 412e981d7..000000000
--- a/tools/keepalived/keepalived/include/ipvs/synproxy.h
+++ /dev/null
@@ -1,128 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#include <netinet/tcp.h>
-/*
- *  DPDK IP Virtual Server Syn-Proxy
- *  data structure and functionality definitions
- *
- */
-
-#ifndef __DPVS_SYNPROXY_H__
-#define __DPVS_SYNPROXY_H__
-
-#include "dpdk.h"
-#include "ipvs/ipvs.h"
-#include "ipvs/conn.h"
-#include "ipvs/dest.h"
-#include "ipvs/service.h"
-
-/* Add MASKs for TCP OPT in "data" coded in cookie */
-/* |[21][20][19-16][15-0]|
- * [21]     SACK
- * [20]     TimeStamp
- * [19-16]  snd_wscale
- * [15-0]   MSSIND
- */
-#define DP_VS_SYNPROXY_OTHER_BITS   12
-#define DP_VS_SYNPROXY_OTHER_MASK   (((uint32_t)1 << DP_VS_SYNPROXY_OTHER_BITS) - 1)
-
-#define DP_VS_SYNPROXY_MSS_BITS     12
-#define DP_VS_SYNPROXY_MSS_MASK     ((uint32_t)0xf << DP_VS_SYNPROXY_MSS_BITS)
-
-#define DP_VS_SYNPROXY_SACKOK_BIT   21
-#define DP_VS_SYNPROXY_SACKOK_MASK  ((uint32_t)1 << DP_VS_SYNPROXY_SACKOK_BIT)
-
-#define DP_VS_SYNPROXY_TSOK_BIT     20
-#define DP_VS_SYNPROXY_TSOK_MASK    ((uint32_t)1 << DP_VS_SYNPROXY_TSOK_BIT)
-
-#define DP_VS_SYNPROXY_SND_WSCALE_BITS  16
-#define DP_VS_SYNPROXY_SND_WSCALE_MASK  ((uint32_t)0xf << DP_VS_SYNPROXY_SND_WSCALE_BITS)
-#define DP_VS_SYNPROXY_WSCALE_MAX       14
-
-extern struct rte_mempool *dp_vs_synproxy_ack_mbufpool[DPVS_MAX_SOCKET];
-#define this_ack_mbufpool (dp_vs_synproxy_ack_mbufpool[rte_socket_id()])
-
-extern int dp_vs_synproxy_ctrl_conn_reuse;
-
-#ifdef CONFIG_SYNPROXY_DEBUG
-extern rte_atomic32_t sp_syn_saved;
-extern rte_atomic32_t sp_ack_saved;
-extern rte_atomic64_t sp_ack_refused;
-#endif
-
-#ifdef CONFIG_SYNPROXY_DEBUG
-#define sp_dbg_stats32_inc(x) (rte_atomic32_inc(&x))
-#define sp_dbg_stats32_dec(x) (rte_atomic32_dec(&x))
-#define sp_dbg_stats64_inc(x) (rte_atomic64_inc(&x))
-#define sp_dbg_stats64_dec(x) (rte_atomic64_dec(&x))
-#else
-#define sp_dbg_stats32_inc(x)
-#define sp_dbg_stats32_dec(x)
-#define sp_dbg_stats64_inc(x)
-#define sp_dbg_stats64_dec(x)
-#endif
-
-/* add for supporting tcp options in syn-proxy */
-struct dp_vs_synproxy_opt {
-    uint16_t snd_wscale:8,  /* Window scaling received from sender */
-             tstamp_ok:1,   /* TIMESTAMP seen on SYN packet */
-             wscale_ok:1,   /* Wscale seen on SYN packet */
-             sack_ok:1;     /* SACK seen on SYN packet */
-    uint16_t mss_clamp;     /* Max mss, negotiated at connectons setup */
-} __rte_cache_aligned;
-
-/* synproxy(syncookies and one-minute-timer) init & cleanup */
-int dp_vs_synproxy_init(void);
-int dp_vs_synproxy_term(void);
-
-/* Syn-proxy step 1 logic: receive client's Syn. */
-int dp_vs_synproxy_syn_rcv(int af, struct rte_mbuf *mbuf,
-        const struct dp_vs_iphdr *iph, int *verdict);
-
-/* Syn-proxy step 2 logic: receive client's Ack */
-int dp_vs_synproxy_ack_rcv(int af, struct rte_mbuf *mbuf,
-        struct tcphdr *th, struct dp_vs_proto *pp,
-        struct dp_vs_conn **cpp,
-        const struct dp_vs_iphdr *iph, int *verdict);
-
-/* Syn-proxy step 3 logic: receive rs's Syn/Ack. */
-int dp_vs_synproxy_synack_rcv(struct rte_mbuf *mbuf, struct dp_vs_conn *cp,
-        struct dp_vs_proto *pp, int th_offset, int *verdict);
-
-/* Syn-proxy conn reuse logic: receive client's Ack */
-int dp_vs_synproxy_reuse_conn(int af, struct rte_mbuf *mbuf,
-        struct dp_vs_conn *cp,
-        struct dp_vs_proto *pp,
-        const struct dp_vs_iphdr *iph, int *verdict);
-
-/* Store or drop client's ack packet, when dpvs is waiting for rs's Syn/Ack packet */
-int dp_vs_synproxy_filter_ack(struct rte_mbuf *mbuf, struct dp_vs_conn *cp,
-        struct dp_vs_proto *pp,
-        const struct dp_vs_iphdr *iph, int *verdict);
-
-/* Transfer ack seq and sack opt for Out-In packet */
-void dp_vs_synproxy_dnat_handler(struct tcphdr *tcph, struct dp_vs_seq *sp_seq);
-
-/* Transer seq for In-Out packet */
-int dp_vs_synproxy_snat_handler(struct tcphdr *tcph, struct dp_vs_conn *cp);
-
-/* configuration file support */
-void synproxy_keyword_value_init(void);
-void install_synproxy_keywords(void);
-
-#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/wlc.h b/tools/keepalived/keepalived/include/ipvs/wlc.h
deleted file mode 100644
index 82fd6420a..000000000
--- a/tools/keepalived/keepalived/include/ipvs/wlc.h
+++ /dev/null
@@ -1,28 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DPVS_WLC_H__
-#define __DPVS_WLC_H__
-
-#include "ipvs/service.h"
-#include "ipvs/dest.h"
-#include "ipvs/sched.h"
-
-int dp_vs_wlc_init(void);
-int dp_vs_wlc_term(void);
-
-#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/wrr.h b/tools/keepalived/keepalived/include/ipvs/wrr.h
deleted file mode 100644
index 7514ccbb6..000000000
--- a/tools/keepalived/keepalived/include/ipvs/wrr.h
+++ /dev/null
@@ -1,28 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DPVS_WRR_H__
-#define __DPVS_WRR_H__
-
-#include "ipvs/service.h"
-#include "ipvs/dest.h"
-#include "ipvs/sched.h"
-
-int dp_vs_wrr_init(void);
-int dp_vs_wrr_term(void);
-
-#endif
diff --git a/tools/keepalived/keepalived/include/ipvs/xmit.h b/tools/keepalived/keepalived/include/ipvs/xmit.h
deleted file mode 100644
index f23e0f292..000000000
--- a/tools/keepalived/keepalived/include/ipvs/xmit.h
+++ /dev/null
@@ -1,63 +0,0 @@
-/*
- * DPVS is a software load balancer (Virtual Server) based on DPDK.
- *
- * Copyright (C) 2017 iQIYI (www.iqiyi.com).
- * All Rights Reserved.
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation; either version 2
- * of the License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- */
-#ifndef __DPVS_XMIT_H__
-#define __DPVS_XMIT_H__
-#include "dpdk.h"
-#include "ipvs/proto.h"
-#include "ipvs/conn.h"
-
-int dp_vs_xmit_fnat(struct dp_vs_proto *proto,
-                        struct dp_vs_conn *conn,
-                        struct rte_mbuf *mbuf);
-
-int dp_vs_out_xmit_fnat(struct dp_vs_proto *prot,
-                        struct dp_vs_conn *conn,
-                        struct rte_mbuf *mbuf);
-
-void dp_vs_xmit_icmp(struct rte_mbuf *mbuf, 
-                     struct dp_vs_proto *prot,
-                     struct dp_vs_conn *conn, 
-                     int dir);
-
-int dp_vs_xmit_dr(struct dp_vs_proto *proto,
-                        struct dp_vs_conn *conn,
-                        struct rte_mbuf *mbuf);
-
-int dp_vs_xmit_snat(struct dp_vs_proto *proto,
-                        struct dp_vs_conn *conn,
-                        struct rte_mbuf *mbuf);
-
-int dp_vs_out_xmit_snat(struct dp_vs_proto *proto,
-                        struct dp_vs_conn *conn,
-                        struct rte_mbuf *mbuf);
-
-int dp_vs_xmit_nat(struct dp_vs_proto *proto,
-                        struct dp_vs_conn *conn,
-                        struct rte_mbuf *mbuf);
-
-int dp_vs_out_xmit_nat(struct dp_vs_proto *proto,
-                        struct dp_vs_conn *conn,
-                        struct rte_mbuf *mbuf);
-
-int dp_vs_xmit_tunnel(struct dp_vs_proto *proto,
-                        struct dp_vs_conn *conn,
-                        struct rte_mbuf *mbuf);
-
-void install_xmit_keywords(void);
-
-#endif /* __DPVS_XMIT_H__ */
diff --git a/tools/keepalived/kpalive_cluster_test.conf b/tools/keepalived/kpalive_cluster_test.conf
deleted file mode 100644
index 7cb599b12..000000000
--- a/tools/keepalived/kpalive_cluster_test.conf
+++ /dev/null
@@ -1,104953 +0,0 @@
-############################## 1 ##############################
-virtual_server_group 111.13.235.69-80-TCP_QLB {
-    111.13.235.69 80
-}
-
-deny_address_group 111.13.235.69_deny {
-}
-
-virtual_server  group 111.13.235.69-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.69_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.69 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.69 bond1.kni;"
-
-    real_server 192.168.49.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 2 ##############################
-virtual_server_group 192.168.102.169-80-TCP_QLB {
-    192.168.102.169 80
-}
-
-deny_address_group 192.168.102.169_deny {
-}
-
-virtual_server  group 192.168.102.169-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.169_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.169 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.169 bond1.kni;"
-
-    real_server 192.168.14.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 3 ##############################
-virtual_server_group 192.168.101.63-80-TCP_QLB {
-    192.168.101.63 80
-}
-
-deny_address_group 192.168.101.63_deny {
-}
-
-virtual_server  group 192.168.101.63-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.63_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.63 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.63 bond1.kni;"
-
-    real_server 192.168.31.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 4 ##############################
-virtual_server_group 192.168.102.88-80-TCP_QLB {
-    192.168.102.88 80
-}
-
-deny_address_group 192.168.102.88_deny {
-}
-
-virtual_server  group 192.168.102.88-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.88_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.88 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.88 bond1.kni;"
-
-    real_server 192.168.43.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 5 ##############################
-virtual_server_group 111.13.235.132-80-TCP_QLB {
-    111.13.235.132 80
-}
-
-deny_address_group 111.13.235.132_deny {
-}
-
-virtual_server  group 111.13.235.132-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.132_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.132 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.132 bond1.kni;"
-
-    real_server 192.168.25.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 6 ##############################
-virtual_server_group 192.168.101.61-80-TCP_QLB {
-    192.168.101.61 80
-}
-
-deny_address_group 192.168.101.61_deny {
-}
-
-virtual_server  group 192.168.101.61-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.61_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.61 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.61 bond1.kni;"
-
-    real_server 192.168.35.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 7 ##############################
-virtual_server_group 192.168.101.7-80-TCP_QLB {
-    192.168.101.7 80
-}
-
-deny_address_group 192.168.101.7_deny {
-}
-
-virtual_server  group 192.168.101.7-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.7_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.7 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.7 bond1.kni;"
-
-    real_server 192.168.18.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 8 ##############################
-virtual_server_group 111.13.235.154-80-TCP_QLB {
-    111.13.235.154 80
-}
-
-deny_address_group 111.13.235.154_deny {
-}
-
-virtual_server  group 111.13.235.154-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.154_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.154 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.154 bond1.kni;"
-
-    real_server 192.168.9.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 9 ##############################
-virtual_server_group 192.168.101.167-80-TCP_QLB {
-    192.168.101.167 80
-}
-
-deny_address_group 192.168.101.167_deny {
-}
-
-virtual_server  group 192.168.101.167-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.167_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.167 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.167 bond1.kni;"
-
-    real_server 192.168.58.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 10 ##############################
-virtual_server_group 111.13.235.244-80-TCP_QLB {
-    111.13.235.244 80
-}
-
-deny_address_group 111.13.235.244_deny {
-}
-
-virtual_server  group 111.13.235.244-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.244_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.244 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.244 bond1.kni;"
-
-    real_server 192.168.49.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 11 ##############################
-virtual_server_group 192.168.101.122-80-TCP_QLB {
-    192.168.101.122 80
-}
-
-deny_address_group 192.168.101.122_deny {
-}
-
-virtual_server  group 192.168.101.122-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.122_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.122 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.122 bond1.kni;"
-
-    real_server 192.168.59.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 12 ##############################
-virtual_server_group 192.168.102.135-80-TCP_QLB {
-    192.168.102.135 80
-}
-
-deny_address_group 192.168.102.135_deny {
-}
-
-virtual_server  group 192.168.102.135-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.135_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.135 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.135 bond1.kni;"
-
-    real_server 192.168.7.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 13 ##############################
-virtual_server_group 192.168.102.28-80-TCP_QLB {
-    192.168.102.28 80
-}
-
-deny_address_group 192.168.102.28_deny {
-}
-
-virtual_server  group 192.168.102.28-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.28_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.28 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.28 bond1.kni;"
-
-    real_server 192.168.11.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 14 ##############################
-virtual_server_group 192.168.101.139-80-TCP_QLB {
-    192.168.101.139 80
-}
-
-deny_address_group 192.168.101.139_deny {
-}
-
-virtual_server  group 192.168.101.139-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.139_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.139 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.139 bond1.kni;"
-
-    real_server 192.168.37.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 15 ##############################
-virtual_server_group 192.168.102.62-80-TCP_QLB {
-    192.168.102.62 80
-}
-
-deny_address_group 192.168.102.62_deny {
-}
-
-virtual_server  group 192.168.102.62-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.62_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.62 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.62 bond1.kni;"
-
-    real_server 192.168.15.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 16 ##############################
-virtual_server_group 192.168.101.80-80-TCP_QLB {
-    192.168.101.80 80
-}
-
-deny_address_group 192.168.101.80_deny {
-}
-
-virtual_server  group 192.168.101.80-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.80_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.80 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.80 bond1.kni;"
-
-    real_server 192.168.3.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 17 ##############################
-virtual_server_group 192.168.102.214-80-TCP_QLB {
-    192.168.102.214 80
-}
-
-deny_address_group 192.168.102.214_deny {
-}
-
-virtual_server  group 192.168.102.214-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.214_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.214 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.214 bond1.kni;"
-
-    real_server 192.168.17.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 18 ##############################
-virtual_server_group 111.13.235.85-80-TCP_QLB {
-    111.13.235.85 80
-}
-
-deny_address_group 111.13.235.85_deny {
-}
-
-virtual_server  group 111.13.235.85-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.85_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.85 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.85 bond1.kni;"
-
-    real_server 192.168.11.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 19 ##############################
-virtual_server_group 192.168.101.244-80-TCP_QLB {
-    192.168.101.244 80
-}
-
-deny_address_group 192.168.101.244_deny {
-}
-
-virtual_server  group 192.168.101.244-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.244_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.244 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.244 bond1.kni;"
-
-    real_server 192.168.39.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 20 ##############################
-virtual_server_group 111.13.235.103-80-TCP_QLB {
-    111.13.235.103 80
-}
-
-deny_address_group 111.13.235.103_deny {
-}
-
-virtual_server  group 111.13.235.103-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.103_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.103 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.103 bond1.kni;"
-
-    real_server 192.168.5.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 21 ##############################
-virtual_server_group 192.168.101.82-80-TCP_QLB {
-    192.168.101.82 80
-}
-
-deny_address_group 192.168.101.82_deny {
-}
-
-virtual_server  group 192.168.101.82-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.82_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.82 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.82 bond1.kni;"
-
-    real_server 192.168.37.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 22 ##############################
-virtual_server_group 192.168.102.5-80-TCP_QLB {
-    192.168.102.5 80
-}
-
-deny_address_group 192.168.102.5_deny {
-}
-
-virtual_server  group 192.168.102.5-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.5_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.5 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.5 bond1.kni;"
-
-    real_server 192.168.6.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 23 ##############################
-virtual_server_group 192.168.102.166-80-TCP_QLB {
-    192.168.102.166 80
-}
-
-deny_address_group 192.168.102.166_deny {
-}
-
-virtual_server  group 192.168.102.166-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.166_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.166 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.166 bond1.kni;"
-
-    real_server 192.168.38.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 24 ##############################
-virtual_server_group 192.168.102.33-80-TCP_QLB {
-    192.168.102.33 80
-}
-
-deny_address_group 192.168.102.33_deny {
-}
-
-virtual_server  group 192.168.102.33-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.33_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.33 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.33 bond1.kni;"
-
-    real_server 192.168.19.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 25 ##############################
-virtual_server_group 192.168.102.92-80-TCP_QLB {
-    192.168.102.92 80
-}
-
-deny_address_group 192.168.102.92_deny {
-}
-
-virtual_server  group 192.168.102.92-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.92_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.92 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.92 bond1.kni;"
-
-    real_server 192.168.15.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 26 ##############################
-virtual_server_group 192.168.101.191-80-TCP_QLB {
-    192.168.101.191 80
-}
-
-deny_address_group 192.168.101.191_deny {
-}
-
-virtual_server  group 192.168.101.191-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.191_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.191 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.191 bond1.kni;"
-
-    real_server 192.168.15.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 27 ##############################
-virtual_server_group 192.168.102.170-80-TCP_QLB {
-    192.168.102.170 80
-}
-
-deny_address_group 192.168.102.170_deny {
-}
-
-virtual_server  group 192.168.102.170-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.170_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.170 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.170 bond1.kni;"
-
-    real_server 192.168.6.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 28 ##############################
-virtual_server_group 192.168.102.233-80-TCP_QLB {
-    192.168.102.233 80
-}
-
-deny_address_group 192.168.102.233_deny {
-}
-
-virtual_server  group 192.168.102.233-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.233_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.233 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.233 bond1.kni;"
-
-    real_server 192.168.30.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 29 ##############################
-virtual_server_group 192.168.101.18-80-TCP_QLB {
-    192.168.101.18 80
-}
-
-deny_address_group 192.168.101.18_deny {
-}
-
-virtual_server  group 192.168.101.18-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.18_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.18 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.18 bond1.kni;"
-
-    real_server 192.168.3.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 30 ##############################
-virtual_server_group 192.168.101.42-80-TCP_QLB {
-    192.168.101.42 80
-}
-
-deny_address_group 192.168.101.42_deny {
-}
-
-virtual_server  group 192.168.101.42-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.42_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.42 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.42 bond1.kni;"
-
-    real_server 192.168.13.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 31 ##############################
-virtual_server_group 111.13.235.187-80-TCP_QLB {
-    111.13.235.187 80
-}
-
-deny_address_group 111.13.235.187_deny {
-}
-
-virtual_server  group 111.13.235.187-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.187_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.187 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.187 bond1.kni;"
-
-    real_server 192.168.13.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 32 ##############################
-virtual_server_group 192.168.101.5-80-TCP_QLB {
-    192.168.101.5 80
-}
-
-deny_address_group 192.168.101.5_deny {
-}
-
-virtual_server  group 192.168.101.5-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.5_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.5 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.5 bond1.kni;"
-
-    real_server 192.168.1.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 33 ##############################
-virtual_server_group 111.13.235.174-80-TCP_QLB {
-    111.13.235.174 80
-}
-
-deny_address_group 111.13.235.174_deny {
-}
-
-virtual_server  group 111.13.235.174-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.174_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.174 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.174 bond1.kni;"
-
-    real_server 192.168.46.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 34 ##############################
-virtual_server_group 192.168.102.110-80-TCP_QLB {
-    192.168.102.110 80
-}
-
-deny_address_group 192.168.102.110_deny {
-}
-
-virtual_server  group 192.168.102.110-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.110_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.110 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.110 bond1.kni;"
-
-    real_server 192.168.18.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 35 ##############################
-virtual_server_group 111.13.235.141-80-TCP_QLB {
-    111.13.235.141 80
-}
-
-deny_address_group 111.13.235.141_deny {
-}
-
-virtual_server  group 111.13.235.141-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.141_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.141 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.141 bond1.kni;"
-
-    real_server 192.168.41.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 36 ##############################
-virtual_server_group 192.168.101.150-80-TCP_QLB {
-    192.168.101.150 80
-}
-
-deny_address_group 192.168.101.150_deny {
-}
-
-virtual_server  group 192.168.101.150-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.150_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.150 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.150 bond1.kni;"
-
-    real_server 192.168.6.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 37 ##############################
-virtual_server_group 192.168.101.199-80-TCP_QLB {
-    192.168.101.199 80
-}
-
-deny_address_group 192.168.101.199_deny {
-}
-
-virtual_server  group 192.168.101.199-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.199_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.199 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.199 bond1.kni;"
-
-    real_server 192.168.35.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 38 ##############################
-virtual_server_group 111.13.235.130-80-TCP_QLB {
-    111.13.235.130 80
-}
-
-deny_address_group 111.13.235.130_deny {
-}
-
-virtual_server  group 111.13.235.130-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.130_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.130 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.130 bond1.kni;"
-
-    real_server 192.168.45.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 39 ##############################
-virtual_server_group 192.168.102.94-80-TCP_QLB {
-    192.168.102.94 80
-}
-
-deny_address_group 192.168.102.94_deny {
-}
-
-virtual_server  group 192.168.102.94-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.94_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.94 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.94 bond1.kni;"
-
-    real_server 192.168.14.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 40 ##############################
-virtual_server_group 192.168.102.54-80-TCP_QLB {
-    192.168.102.54 80
-}
-
-deny_address_group 192.168.102.54_deny {
-}
-
-virtual_server  group 192.168.102.54-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.54_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.54 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.54 bond1.kni;"
-
-    real_server 192.168.38.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 41 ##############################
-virtual_server_group 192.168.102.251-80-TCP_QLB {
-    192.168.102.251 80
-}
-
-deny_address_group 192.168.102.251_deny {
-}
-
-virtual_server  group 192.168.102.251-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.251_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.251 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.251 bond1.kni;"
-
-    real_server 192.168.11.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 42 ##############################
-virtual_server_group 111.13.235.220-80-TCP_QLB {
-    111.13.235.220 80
-}
-
-deny_address_group 111.13.235.220_deny {
-}
-
-virtual_server  group 111.13.235.220-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.220_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.220 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.220 bond1.kni;"
-
-    real_server 192.168.22.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 43 ##############################
-virtual_server_group 111.13.235.114-80-TCP_QLB {
-    111.13.235.114 80
-}
-
-deny_address_group 111.13.235.114_deny {
-}
-
-virtual_server  group 111.13.235.114-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.114_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.114 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.114 bond1.kni;"
-
-    real_server 192.168.29.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 44 ##############################
-virtual_server_group 192.168.102.137-80-TCP_QLB {
-    192.168.102.137 80
-}
-
-deny_address_group 192.168.102.137_deny {
-}
-
-virtual_server  group 192.168.102.137-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.137_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.137 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.137 bond1.kni;"
-
-    real_server 192.168.41.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 45 ##############################
-virtual_server_group 111.13.235.241-80-TCP_QLB {
-    111.13.235.241 80
-}
-
-deny_address_group 111.13.235.241_deny {
-}
-
-virtual_server  group 111.13.235.241-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.241_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.241 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.241 bond1.kni;"
-
-    real_server 192.168.26.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 46 ##############################
-virtual_server_group 111.13.235.89-80-TCP_QLB {
-    111.13.235.89 80
-}
-
-deny_address_group 111.13.235.89_deny {
-}
-
-virtual_server  group 111.13.235.89-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.89_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.89 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.89 bond1.kni;"
-
-    real_server 192.168.53.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 47 ##############################
-virtual_server_group 111.13.235.135-80-TCP_QLB {
-    111.13.235.135 80
-}
-
-deny_address_group 111.13.235.135_deny {
-}
-
-virtual_server  group 111.13.235.135-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.135_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.135 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.135 bond1.kni;"
-
-    real_server 192.168.31.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 48 ##############################
-virtual_server_group 192.168.102.109-80-TCP_QLB {
-    192.168.102.109 80
-}
-
-deny_address_group 192.168.102.109_deny {
-}
-
-virtual_server  group 192.168.102.109-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.109_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.109 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.109 bond1.kni;"
-
-    real_server 192.168.39.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 49 ##############################
-virtual_server_group 192.168.102.60-80-TCP_QLB {
-    192.168.102.60 80
-}
-
-deny_address_group 192.168.102.60_deny {
-}
-
-virtual_server  group 192.168.102.60-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.60_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.60 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.60 bond1.kni;"
-
-    real_server 192.168.3.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 50 ##############################
-virtual_server_group 111.13.235.225-80-TCP_QLB {
-    111.13.235.225 80
-}
-
-deny_address_group 111.13.235.225_deny {
-}
-
-virtual_server  group 111.13.235.225-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.225_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.225 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.225 bond1.kni;"
-
-    real_server 192.168.18.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 51 ##############################
-virtual_server_group 192.168.102.189-80-TCP_QLB {
-    192.168.102.189 80
-}
-
-deny_address_group 192.168.102.189_deny {
-}
-
-virtual_server  group 192.168.102.189-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.189_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.189 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.189 bond1.kni;"
-
-    real_server 192.168.27.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 52 ##############################
-virtual_server_group 192.168.101.255-80-TCP_QLB {
-    192.168.101.255 80
-}
-
-deny_address_group 192.168.101.255_deny {
-}
-
-virtual_server  group 192.168.101.255-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.255_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.255 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.255 bond1.kni;"
-
-    real_server 192.168.31.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 53 ##############################
-virtual_server_group 111.13.235.116-80-TCP_QLB {
-    111.13.235.116 80
-}
-
-deny_address_group 111.13.235.116_deny {
-}
-
-virtual_server  group 111.13.235.116-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.116_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.116 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.116 bond1.kni;"
-
-    real_server 192.168.53.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 54 ##############################
-virtual_server_group 111.13.235.101-80-TCP_QLB {
-    111.13.235.101 80
-}
-
-deny_address_group 111.13.235.101_deny {
-}
-
-virtual_server  group 111.13.235.101-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.101_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.101 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.101 bond1.kni;"
-
-    real_server 192.168.53.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 55 ##############################
-virtual_server_group 192.168.101.241-80-TCP_QLB {
-    192.168.101.241 80
-}
-
-deny_address_group 192.168.101.241_deny {
-}
-
-virtual_server  group 192.168.101.241-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.241_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.241 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.241 bond1.kni;"
-
-    real_server 192.168.34.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 56 ##############################
-virtual_server_group 192.168.101.87-80-TCP_QLB {
-    192.168.101.87 80
-}
-
-deny_address_group 192.168.101.87_deny {
-}
-
-virtual_server  group 192.168.101.87-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.87_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.87 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.87 bond1.kni;"
-
-    real_server 192.168.11.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 57 ##############################
-virtual_server_group 111.13.235.74-80-TCP_QLB {
-    111.13.235.74 80
-}
-
-deny_address_group 111.13.235.74_deny {
-}
-
-virtual_server  group 111.13.235.74-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.74_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.74 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.74 bond1.kni;"
-
-    real_server 192.168.11.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 58 ##############################
-virtual_server_group 192.168.102.15-80-TCP_QLB {
-    192.168.102.15 80
-}
-
-deny_address_group 192.168.102.15_deny {
-}
-
-virtual_server  group 192.168.102.15-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.15_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.15 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.15 bond1.kni;"
-
-    real_server 192.168.14.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 59 ##############################
-virtual_server_group 192.168.101.147-80-TCP_QLB {
-    192.168.101.147 80
-}
-
-deny_address_group 192.168.101.147_deny {
-}
-
-virtual_server  group 192.168.101.147-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.147_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.147 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.147 bond1.kni;"
-
-    real_server 192.168.19.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 60 ##############################
-virtual_server_group 192.168.101.173-80-TCP_QLB {
-    192.168.101.173 80
-}
-
-deny_address_group 192.168.101.173_deny {
-}
-
-virtual_server  group 192.168.101.173-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.173_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.173 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.173 bond1.kni;"
-
-    real_server 192.168.41.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 61 ##############################
-virtual_server_group 192.168.101.67-80-TCP_QLB {
-    192.168.101.67 80
-}
-
-deny_address_group 192.168.101.67_deny {
-}
-
-virtual_server  group 192.168.101.67-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.67_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.67 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.67 bond1.kni;"
-
-    real_server 192.168.30.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 62 ##############################
-virtual_server_group 111.13.235.173-80-TCP_QLB {
-    111.13.235.173 80
-}
-
-deny_address_group 111.13.235.173_deny {
-}
-
-virtual_server  group 111.13.235.173-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.173_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.173 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.173 bond1.kni;"
-
-    real_server 192.168.3.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 63 ##############################
-virtual_server_group 192.168.102.22-80-TCP_QLB {
-    192.168.102.22 80
-}
-
-deny_address_group 192.168.102.22_deny {
-}
-
-virtual_server  group 192.168.102.22-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.22_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.22 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.22 bond1.kni;"
-
-    real_server 192.168.23.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 64 ##############################
-virtual_server_group 192.168.102.184-80-TCP_QLB {
-    192.168.102.184 80
-}
-
-deny_address_group 192.168.102.184_deny {
-}
-
-virtual_server  group 192.168.102.184-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.184_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.184 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.184 bond1.kni;"
-
-    real_server 192.168.29.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 65 ##############################
-virtual_server_group 192.168.101.30-80-TCP_QLB {
-    192.168.101.30 80
-}
-
-deny_address_group 192.168.101.30_deny {
-}
-
-virtual_server  group 192.168.101.30-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.30_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.30 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.30 bond1.kni;"
-
-    real_server 192.168.9.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 66 ##############################
-virtual_server_group 192.168.101.111-80-TCP_QLB {
-    192.168.101.111 80
-}
-
-deny_address_group 192.168.101.111_deny {
-}
-
-virtual_server  group 192.168.101.111-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.111_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.111 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.111 bond1.kni;"
-
-    real_server 192.168.51.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 67 ##############################
-virtual_server_group 192.168.101.50-80-TCP_QLB {
-    192.168.101.50 80
-}
-
-deny_address_group 192.168.101.50_deny {
-}
-
-virtual_server  group 192.168.101.50-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.50_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.50 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.50 bond1.kni;"
-
-    real_server 192.168.27.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 68 ##############################
-virtual_server_group 192.168.102.47-80-TCP_QLB {
-    192.168.102.47 80
-}
-
-deny_address_group 192.168.102.47_deny {
-}
-
-virtual_server  group 192.168.102.47-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.47_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.47 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.47 bond1.kni;"
-
-    real_server 192.168.37.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 69 ##############################
-virtual_server_group 192.168.102.145-80-TCP_QLB {
-    192.168.102.145 80
-}
-
-deny_address_group 192.168.102.145_deny {
-}
-
-virtual_server  group 192.168.102.145-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.145_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.145 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.145 bond1.kni;"
-
-    real_server 192.168.30.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 70 ##############################
-virtual_server_group 192.168.101.141-80-TCP_QLB {
-    192.168.101.141 80
-}
-
-deny_address_group 192.168.101.141_deny {
-}
-
-virtual_server  group 192.168.101.141-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.141_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.141 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.141 bond1.kni;"
-
-    real_server 192.168.30.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 71 ##############################
-virtual_server_group 192.168.101.130-80-TCP_QLB {
-    192.168.101.130 80
-}
-
-deny_address_group 192.168.101.130_deny {
-}
-
-virtual_server  group 192.168.101.130-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.130_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.130 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.130 bond1.kni;"
-
-    real_server 192.168.6.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 72 ##############################
-virtual_server_group 192.168.102.253-80-TCP_QLB {
-    192.168.102.253 80
-}
-
-deny_address_group 192.168.102.253_deny {
-}
-
-virtual_server  group 192.168.102.253-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.253_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.253 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.253 bond1.kni;"
-
-    real_server 192.168.25.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 73 ##############################
-virtual_server_group 192.168.101.142-80-TCP_QLB {
-    192.168.101.142 80
-}
-
-deny_address_group 192.168.101.142_deny {
-}
-
-virtual_server  group 192.168.101.142-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.142_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.142 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.142 bond1.kni;"
-
-    real_server 192.168.54.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 74 ##############################
-virtual_server_group 192.168.102.77-80-TCP_QLB {
-    192.168.102.77 80
-}
-
-deny_address_group 192.168.102.77_deny {
-}
-
-virtual_server  group 192.168.102.77-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.77_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.77 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.77 bond1.kni;"
-
-    real_server 192.168.59.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 75 ##############################
-virtual_server_group 111.13.235.80-80-TCP_QLB {
-    111.13.235.80 80
-}
-
-deny_address_group 111.13.235.80_deny {
-}
-
-virtual_server  group 111.13.235.80-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.80_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.80 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.80 bond1.kni;"
-
-    real_server 192.168.43.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 76 ##############################
-virtual_server_group 192.168.102.198-80-TCP_QLB {
-    192.168.102.198 80
-}
-
-deny_address_group 192.168.102.198_deny {
-}
-
-virtual_server  group 192.168.102.198-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.198_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.198 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.198 bond1.kni;"
-
-    real_server 192.168.21.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 77 ##############################
-virtual_server_group 111.13.235.133-80-TCP_QLB {
-    111.13.235.133 80
-}
-
-deny_address_group 111.13.235.133_deny {
-}
-
-virtual_server  group 111.13.235.133-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.133_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.133 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.133 bond1.kni;"
-
-    real_server 192.168.47.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 78 ##############################
-virtual_server_group 192.168.102.7-80-TCP_QLB {
-    192.168.102.7 80
-}
-
-deny_address_group 192.168.102.7_deny {
-}
-
-virtual_server  group 192.168.102.7-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.7_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.7 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.7 bond1.kni;"
-
-    real_server 192.168.59.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 79 ##############################
-virtual_server_group 192.168.102.249-80-TCP_QLB {
-    192.168.102.249 80
-}
-
-deny_address_group 192.168.102.249_deny {
-}
-
-virtual_server  group 192.168.102.249-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.249_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.249 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.249 bond1.kni;"
-
-    real_server 192.168.11.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 80 ##############################
-virtual_server_group 192.168.101.243-80-TCP_QLB {
-    192.168.101.243 80
-}
-
-deny_address_group 192.168.101.243_deny {
-}
-
-virtual_server  group 192.168.101.243-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.243_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.243 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.243 bond1.kni;"
-
-    real_server 192.168.13.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 81 ##############################
-virtual_server_group 192.168.102.35-80-TCP_QLB {
-    192.168.102.35 80
-}
-
-deny_address_group 192.168.102.35_deny {
-}
-
-virtual_server  group 192.168.102.35-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.35_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.35 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.35 bond1.kni;"
-
-    real_server 192.168.18.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 82 ##############################
-virtual_server_group 111.13.235.204-80-TCP_QLB {
-    111.13.235.204 80
-}
-
-deny_address_group 111.13.235.204_deny {
-}
-
-virtual_server  group 111.13.235.204-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.204_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.204 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.204 bond1.kni;"
-
-    real_server 192.168.3.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 83 ##############################
-virtual_server_group 192.168.102.164-80-TCP_QLB {
-    192.168.102.164 80
-}
-
-deny_address_group 192.168.102.164_deny {
-}
-
-virtual_server  group 192.168.102.164-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.164_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.164 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.164 bond1.kni;"
-
-    real_server 192.168.34.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 84 ##############################
-virtual_server_group 111.13.235.213-80-TCP_QLB {
-    111.13.235.213 80
-}
-
-deny_address_group 111.13.235.213_deny {
-}
-
-virtual_server  group 111.13.235.213-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.213_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.213 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.213 bond1.kni;"
-
-    real_server 192.168.51.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 85 ##############################
-virtual_server_group 192.168.102.247-80-TCP_QLB {
-    192.168.102.247 80
-}
-
-deny_address_group 192.168.102.247_deny {
-}
-
-virtual_server  group 192.168.102.247-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.247_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.247 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.247 bond1.kni;"
-
-    real_server 192.168.53.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 86 ##############################
-virtual_server_group 192.168.102.9-80-TCP_QLB {
-    192.168.102.9 80
-}
-
-deny_address_group 192.168.102.9_deny {
-}
-
-virtual_server  group 192.168.102.9-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.9_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.9 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.9 bond1.kni;"
-
-    real_server 192.168.37.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 87 ##############################
-virtual_server_group 192.168.102.213-80-TCP_QLB {
-    192.168.102.213 80
-}
-
-deny_address_group 192.168.102.213_deny {
-}
-
-virtual_server  group 192.168.102.213-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.213_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.213 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.213 bond1.kni;"
-
-    real_server 192.168.29.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 88 ##############################
-virtual_server_group 192.168.102.12-80-TCP_QLB {
-    192.168.102.12 80
-}
-
-deny_address_group 192.168.102.12_deny {
-}
-
-virtual_server  group 192.168.102.12-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.12_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.12 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.12 bond1.kni;"
-
-    real_server 192.168.35.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 89 ##############################
-virtual_server_group 192.168.102.129-80-TCP_QLB {
-    192.168.102.129 80
-}
-
-deny_address_group 192.168.102.129_deny {
-}
-
-virtual_server  group 192.168.102.129-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.129_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.129 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.129 bond1.kni;"
-
-    real_server 192.168.57.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 90 ##############################
-virtual_server_group 111.13.235.211-80-TCP_QLB {
-    111.13.235.211 80
-}
-
-deny_address_group 111.13.235.211_deny {
-}
-
-virtual_server  group 111.13.235.211-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.211_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.211 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.211 bond1.kni;"
-
-    real_server 192.168.17.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 91 ##############################
-virtual_server_group 192.168.102.236-80-TCP_QLB {
-    192.168.102.236 80
-}
-
-deny_address_group 192.168.102.236_deny {
-}
-
-virtual_server  group 192.168.102.236-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.236_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.236 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.236 bond1.kni;"
-
-    real_server 192.168.23.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 92 ##############################
-virtual_server_group 192.168.102.209-80-TCP_QLB {
-    192.168.102.209 80
-}
-
-deny_address_group 192.168.102.209_deny {
-}
-
-virtual_server  group 192.168.102.209-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.209_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.209 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.209 bond1.kni;"
-
-    real_server 192.168.49.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 93 ##############################
-virtual_server_group 192.168.102.40-80-TCP_QLB {
-    192.168.102.40 80
-}
-
-deny_address_group 192.168.102.40_deny {
-}
-
-virtual_server  group 192.168.102.40-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.40_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.40 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.40 bond1.kni;"
-
-    real_server 192.168.22.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 94 ##############################
-virtual_server_group 192.168.101.65-80-TCP_QLB {
-    192.168.101.65 80
-}
-
-deny_address_group 192.168.101.65_deny {
-}
-
-virtual_server  group 192.168.101.65-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.65_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.65 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.65 bond1.kni;"
-
-    real_server 192.168.27.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 95 ##############################
-virtual_server_group 192.168.102.10-80-TCP_QLB {
-    192.168.102.10 80
-}
-
-deny_address_group 192.168.102.10_deny {
-}
-
-virtual_server  group 192.168.102.10-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.10_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.10 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.10 bond1.kni;"
-
-    real_server 192.168.11.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 96 ##############################
-virtual_server_group 192.168.101.194-80-TCP_QLB {
-    192.168.101.194 80
-}
-
-deny_address_group 192.168.101.194_deny {
-}
-
-virtual_server  group 192.168.101.194-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.194_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.194 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.194 bond1.kni;"
-
-    real_server 192.168.31.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 97 ##############################
-virtual_server_group 192.168.102.99-80-TCP_QLB {
-    192.168.102.99 80
-}
-
-deny_address_group 192.168.102.99_deny {
-}
-
-virtual_server  group 192.168.102.99-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.99_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.99 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.99 bond1.kni;"
-
-    real_server 192.168.41.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 98 ##############################
-virtual_server_group 192.168.101.19-80-TCP_QLB {
-    192.168.101.19 80
-}
-
-deny_address_group 192.168.101.19_deny {
-}
-
-virtual_server  group 192.168.101.19-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.19_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.19 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.19 bond1.kni;"
-
-    real_server 192.168.45.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 99 ##############################
-virtual_server_group 192.168.102.226-80-TCP_QLB {
-    192.168.102.226 80
-}
-
-deny_address_group 192.168.102.226_deny {
-}
-
-virtual_server  group 192.168.102.226-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.226_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.226 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.226 bond1.kni;"
-
-    real_server 192.168.46.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 100 ##############################
-virtual_server_group 192.168.102.105-80-TCP_QLB {
-    192.168.102.105 80
-}
-
-deny_address_group 192.168.102.105_deny {
-}
-
-virtual_server  group 192.168.102.105-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.105_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.105 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.105 bond1.kni;"
-
-    real_server 192.168.11.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 101 ##############################
-virtual_server_group 192.168.102.42-80-TCP_QLB {
-    192.168.102.42 80
-}
-
-deny_address_group 192.168.102.42_deny {
-}
-
-virtual_server  group 192.168.102.42-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.42_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.42 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.42 bond1.kni;"
-
-    real_server 192.168.47.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 102 ##############################
-virtual_server_group 192.168.101.113-80-TCP_QLB {
-    192.168.101.113 80
-}
-
-deny_address_group 192.168.101.113_deny {
-}
-
-virtual_server  group 192.168.101.113-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.113_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.113 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.113 bond1.kni;"
-
-    real_server 192.168.39.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 103 ##############################
-virtual_server_group 192.168.102.59-80-TCP_QLB {
-    192.168.102.59 80
-}
-
-deny_address_group 192.168.102.59_deny {
-}
-
-virtual_server  group 192.168.102.59-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.59_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.59 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.59 bond1.kni;"
-
-    real_server 192.168.35.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 104 ##############################
-virtual_server_group 192.168.101.135-80-TCP_QLB {
-    192.168.101.135 80
-}
-
-deny_address_group 192.168.101.135_deny {
-}
-
-virtual_server  group 192.168.101.135-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.135_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.135 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.135 bond1.kni;"
-
-    real_server 192.168.38.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 105 ##############################
-virtual_server_group 111.13.235.120-80-TCP_QLB {
-    111.13.235.120 80
-}
-
-deny_address_group 111.13.235.120_deny {
-}
-
-virtual_server  group 111.13.235.120-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.120_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.120 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.120 bond1.kni;"
-
-    real_server 192.168.41.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 106 ##############################
-virtual_server_group 111.13.235.223-80-TCP_QLB {
-    111.13.235.223 80
-}
-
-deny_address_group 111.13.235.223_deny {
-}
-
-virtual_server  group 111.13.235.223-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.223_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.223 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.223 bond1.kni;"
-
-    real_server 192.168.25.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 107 ##############################
-virtual_server_group 192.168.102.96-80-TCP_QLB {
-    192.168.102.96 80
-}
-
-deny_address_group 192.168.102.96_deny {
-}
-
-virtual_server  group 192.168.102.96-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.96_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.96 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.96 bond1.kni;"
-
-    real_server 192.168.51.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 108 ##############################
-virtual_server_group 111.13.235.104-80-TCP_QLB {
-    111.13.235.104 80
-}
-
-deny_address_group 111.13.235.104_deny {
-}
-
-virtual_server  group 111.13.235.104-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.104_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.104 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.104 bond1.kni;"
-
-    real_server 192.168.37.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 109 ##############################
-virtual_server_group 111.13.235.218-80-TCP_QLB {
-    111.13.235.218 80
-}
-
-deny_address_group 111.13.235.218_deny {
-}
-
-virtual_server  group 111.13.235.218-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.218_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.218 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.218 bond1.kni;"
-
-    real_server 192.168.37.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 110 ##############################
-virtual_server_group 192.168.101.81-80-TCP_QLB {
-    192.168.101.81 80
-}
-
-deny_address_group 192.168.101.81_deny {
-}
-
-virtual_server  group 192.168.101.81-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.81_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.81 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.81 bond1.kni;"
-
-    real_server 192.168.7.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 111 ##############################
-virtual_server_group 111.13.235.248-80-TCP_QLB {
-    111.13.235.248 80
-}
-
-deny_address_group 111.13.235.248_deny {
-}
-
-virtual_server  group 111.13.235.248-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.248_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.248 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.248 bond1.kni;"
-
-    real_server 192.168.10.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 112 ##############################
-virtual_server_group 192.168.102.156-80-TCP_QLB {
-    192.168.102.156 80
-}
-
-deny_address_group 192.168.102.156_deny {
-}
-
-virtual_server  group 192.168.102.156-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.156_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.156 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.156 bond1.kni;"
-
-    real_server 192.168.47.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 113 ##############################
-virtual_server_group 192.168.101.202-80-TCP_QLB {
-    192.168.101.202 80
-}
-
-deny_address_group 192.168.101.202_deny {
-}
-
-virtual_server  group 192.168.101.202-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.202_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.202 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.202 bond1.kni;"
-
-    real_server 192.168.33.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 114 ##############################
-virtual_server_group 111.13.235.206-80-TCP_QLB {
-    111.13.235.206 80
-}
-
-deny_address_group 111.13.235.206_deny {
-}
-
-virtual_server  group 111.13.235.206-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.206_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.206 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.206 bond1.kni;"
-
-    real_server 192.168.50.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 115 ##############################
-virtual_server_group 192.168.102.187-80-TCP_QLB {
-    192.168.102.187 80
-}
-
-deny_address_group 192.168.102.187_deny {
-}
-
-virtual_server  group 192.168.102.187-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.187_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.187 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.187 bond1.kni;"
-
-    real_server 192.168.26.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 116 ##############################
-virtual_server_group 192.168.101.53-80-TCP_QLB {
-    192.168.101.53 80
-}
-
-deny_address_group 192.168.101.53_deny {
-}
-
-virtual_server  group 192.168.101.53-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.53_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.53 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.53 bond1.kni;"
-
-    real_server 192.168.49.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 117 ##############################
-virtual_server_group 111.13.235.71-80-TCP_QLB {
-    111.13.235.71 80
-}
-
-deny_address_group 111.13.235.71_deny {
-}
-
-virtual_server  group 111.13.235.71-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.71_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.71 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.71 bond1.kni;"
-
-    real_server 192.168.37.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 118 ##############################
-virtual_server_group 111.13.235.102-80-TCP_QLB {
-    111.13.235.102 80
-}
-
-deny_address_group 111.13.235.102_deny {
-}
-
-virtual_server  group 111.13.235.102-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.102_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.102 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.102 bond1.kni;"
-
-    real_server 192.168.13.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 119 ##############################
-virtual_server_group 111.13.235.216-80-TCP_QLB {
-    111.13.235.216 80
-}
-
-deny_address_group 111.13.235.216_deny {
-}
-
-virtual_server  group 111.13.235.216-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.216_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.216 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.216 bond1.kni;"
-
-    real_server 192.168.19.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 120 ##############################
-virtual_server_group 192.168.101.207-80-TCP_QLB {
-    192.168.101.207 80
-}
-
-deny_address_group 192.168.101.207_deny {
-}
-
-virtual_server  group 192.168.101.207-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.207_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.207 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.207 bond1.kni;"
-
-    real_server 192.168.38.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 121 ##############################
-virtual_server_group 192.168.101.105-80-TCP_QLB {
-    192.168.101.105 80
-}
-
-deny_address_group 192.168.101.105_deny {
-}
-
-virtual_server  group 192.168.101.105-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.105_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.105 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.105 bond1.kni;"
-
-    real_server 192.168.30.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 122 ##############################
-virtual_server_group 192.168.102.36-80-TCP_QLB {
-    192.168.102.36 80
-}
-
-deny_address_group 192.168.102.36_deny {
-}
-
-virtual_server  group 192.168.102.36-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.36_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.36 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.36 bond1.kni;"
-
-    real_server 192.168.15.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 123 ##############################
-virtual_server_group 192.168.101.79-80-TCP_QLB {
-    192.168.101.79 80
-}
-
-deny_address_group 192.168.101.79_deny {
-}
-
-virtual_server  group 192.168.101.79-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.79_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.79 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.79 bond1.kni;"
-
-    real_server 192.168.22.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 124 ##############################
-virtual_server_group 192.168.101.138-80-TCP_QLB {
-    192.168.101.138 80
-}
-
-deny_address_group 192.168.101.138_deny {
-}
-
-virtual_server  group 192.168.101.138-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.138_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.138 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.138 bond1.kni;"
-
-    real_server 192.168.21.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 125 ##############################
-virtual_server_group 111.13.235.214-80-TCP_QLB {
-    111.13.235.214 80
-}
-
-deny_address_group 111.13.235.214_deny {
-}
-
-virtual_server  group 111.13.235.214-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.214_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.214 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.214 bond1.kni;"
-
-    real_server 192.168.13.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 126 ##############################
-virtual_server_group 192.168.101.24-80-TCP_QLB {
-    192.168.101.24 80
-}
-
-deny_address_group 192.168.101.24_deny {
-}
-
-virtual_server  group 192.168.101.24-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.24_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.24 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.24 bond1.kni;"
-
-    real_server 192.168.5.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 127 ##############################
-virtual_server_group 192.168.101.35-80-TCP_QLB {
-    192.168.101.35 80
-}
-
-deny_address_group 192.168.101.35_deny {
-}
-
-virtual_server  group 192.168.101.35-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.35_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.35 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.35 bond1.kni;"
-
-    real_server 192.168.17.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 128 ##############################
-virtual_server_group 192.168.102.234-80-TCP_QLB {
-    192.168.102.234 80
-}
-
-deny_address_group 192.168.102.234_deny {
-}
-
-virtual_server  group 192.168.102.234-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.234_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.234 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.234 bond1.kni;"
-
-    real_server 192.168.57.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 129 ##############################
-virtual_server_group 192.168.102.30-80-TCP_QLB {
-    192.168.102.30 80
-}
-
-deny_address_group 192.168.102.30_deny {
-}
-
-virtual_server  group 192.168.102.30-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.30_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.30 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.30 bond1.kni;"
-
-    real_server 192.168.23.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 130 ##############################
-virtual_server_group 192.168.101.200-80-TCP_QLB {
-    192.168.101.200 80
-}
-
-deny_address_group 192.168.101.200_deny {
-}
-
-virtual_server  group 192.168.101.200-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.200_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.200 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.200 bond1.kni;"
-
-    real_server 192.168.19.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 131 ##############################
-virtual_server_group 192.168.102.178-80-TCP_QLB {
-    192.168.102.178 80
-}
-
-deny_address_group 192.168.102.178_deny {
-}
-
-virtual_server  group 192.168.102.178-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.178_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.178 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.178 bond1.kni;"
-
-    real_server 192.168.25.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 132 ##############################
-virtual_server_group 192.168.101.48-80-TCP_QLB {
-    192.168.101.48 80
-}
-
-deny_address_group 192.168.101.48_deny {
-}
-
-virtual_server  group 192.168.101.48-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.48_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.48 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.48 bond1.kni;"
-
-    real_server 192.168.45.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 133 ##############################
-virtual_server_group 192.168.102.1-80-TCP_QLB {
-    192.168.102.1 80
-}
-
-deny_address_group 192.168.102.1_deny {
-}
-
-virtual_server  group 192.168.102.1-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.1_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.1 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.1 bond1.kni;"
-
-    real_server 192.168.21.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 134 ##############################
-virtual_server_group 111.13.235.82-80-TCP_QLB {
-    111.13.235.82 80
-}
-
-deny_address_group 111.13.235.82_deny {
-}
-
-virtual_server  group 111.13.235.82-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.82_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.82 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.82 bond1.kni;"
-
-    real_server 192.168.18.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 135 ##############################
-virtual_server_group 192.168.101.71-80-TCP_QLB {
-    192.168.101.71 80
-}
-
-deny_address_group 192.168.101.71_deny {
-}
-
-virtual_server  group 192.168.101.71-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.71_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.71 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.71 bond1.kni;"
-
-    real_server 192.168.27.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 136 ##############################
-virtual_server_group 111.13.235.160-80-TCP_QLB {
-    111.13.235.160 80
-}
-
-deny_address_group 111.13.235.160_deny {
-}
-
-virtual_server  group 111.13.235.160-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.160_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.160 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.160 bond1.kni;"
-
-    real_server 192.168.14.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 137 ##############################
-virtual_server_group 111.13.235.221-80-TCP_QLB {
-    111.13.235.221 80
-}
-
-deny_address_group 111.13.235.221_deny {
-}
-
-virtual_server  group 111.13.235.221-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.221_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.221 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.221 bond1.kni;"
-
-    real_server 192.168.41.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 138 ##############################
-virtual_server_group 192.168.101.158-80-TCP_QLB {
-    192.168.101.158 80
-}
-
-deny_address_group 192.168.101.158_deny {
-}
-
-virtual_server  group 192.168.101.158-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.158_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.158 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.158 bond1.kni;"
-
-    real_server 192.168.26.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 139 ##############################
-virtual_server_group 111.13.235.87-80-TCP_QLB {
-    111.13.235.87 80
-}
-
-deny_address_group 111.13.235.87_deny {
-}
-
-virtual_server  group 111.13.235.87-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.87_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.87 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.87 bond1.kni;"
-
-    real_server 192.168.9.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 140 ##############################
-virtual_server_group 111.13.235.228-80-TCP_QLB {
-    111.13.235.228 80
-}
-
-deny_address_group 111.13.235.228_deny {
-}
-
-virtual_server  group 111.13.235.228-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.228_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.228 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.228 bond1.kni;"
-
-    real_server 192.168.13.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 141 ##############################
-virtual_server_group 192.168.101.83-80-TCP_QLB {
-    192.168.101.83 80
-}
-
-deny_address_group 192.168.101.83_deny {
-}
-
-virtual_server  group 192.168.101.83-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.83_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.83 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.83 bond1.kni;"
-
-    real_server 192.168.59.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 142 ##############################
-virtual_server_group 111.13.235.73-80-TCP_QLB {
-    111.13.235.73 80
-}
-
-deny_address_group 111.13.235.73_deny {
-}
-
-virtual_server  group 111.13.235.73-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.73_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.73 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.73 bond1.kni;"
-
-    real_server 192.168.18.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 143 ##############################
-virtual_server_group 111.13.235.226-80-TCP_QLB {
-    111.13.235.226 80
-}
-
-deny_address_group 111.13.235.226_deny {
-}
-
-virtual_server  group 111.13.235.226-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.226_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.226 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.226 bond1.kni;"
-
-    real_server 192.168.55.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 144 ##############################
-virtual_server_group 192.168.102.191-80-TCP_QLB {
-    192.168.102.191 80
-}
-
-deny_address_group 192.168.102.191_deny {
-}
-
-virtual_server  group 192.168.102.191-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.191_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.191 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.191 bond1.kni;"
-
-    real_server 192.168.39.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 145 ##############################
-virtual_server_group 192.168.101.99-80-TCP_QLB {
-    192.168.101.99 80
-}
-
-deny_address_group 192.168.101.99_deny {
-}
-
-virtual_server  group 192.168.101.99-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.99_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.99 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.99 bond1.kni;"
-
-    real_server 192.168.42.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 146 ##############################
-virtual_server_group 192.168.102.27-80-TCP_QLB {
-    192.168.102.27 80
-}
-
-deny_address_group 192.168.102.27_deny {
-}
-
-virtual_server  group 192.168.102.27-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.27_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.27 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.27 bond1.kni;"
-
-    real_server 192.168.5.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 147 ##############################
-virtual_server_group 192.168.101.169-80-TCP_QLB {
-    192.168.101.169 80
-}
-
-deny_address_group 192.168.101.169_deny {
-}
-
-virtual_server  group 192.168.101.169-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.169_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.169 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.169 bond1.kni;"
-
-    real_server 192.168.49.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 148 ##############################
-virtual_server_group 192.168.102.126-80-TCP_QLB {
-    192.168.102.126 80
-}
-
-deny_address_group 192.168.102.126_deny {
-}
-
-virtual_server  group 192.168.102.126-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.126_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.126 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.126 bond1.kni;"
-
-    real_server 192.168.2.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 149 ##############################
-virtual_server_group 192.168.101.181-80-TCP_QLB {
-    192.168.101.181 80
-}
-
-deny_address_group 192.168.101.181_deny {
-}
-
-virtual_server  group 192.168.101.181-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.181_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.181 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.181 bond1.kni;"
-
-    real_server 192.168.6.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 150 ##############################
-virtual_server_group 192.168.102.44-80-TCP_QLB {
-    192.168.102.44 80
-}
-
-deny_address_group 192.168.102.44_deny {
-}
-
-virtual_server  group 192.168.102.44-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.44_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.44 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.44 bond1.kni;"
-
-    real_server 192.168.6.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 151 ##############################
-virtual_server_group 192.168.101.97-80-TCP_QLB {
-    192.168.101.97 80
-}
-
-deny_address_group 192.168.101.97_deny {
-}
-
-virtual_server  group 192.168.101.97-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.97_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.97 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.97 bond1.kni;"
-
-    real_server 192.168.27.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 152 ##############################
-virtual_server_group 192.168.101.217-80-TCP_QLB {
-    192.168.101.217 80
-}
-
-deny_address_group 192.168.101.217_deny {
-}
-
-virtual_server  group 192.168.101.217-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.217_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.217 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.217 bond1.kni;"
-
-    real_server 192.168.21.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 153 ##############################
-virtual_server_group 111.13.235.238-80-TCP_QLB {
-    111.13.235.238 80
-}
-
-deny_address_group 111.13.235.238_deny {
-}
-
-virtual_server  group 111.13.235.238-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.238_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.238 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.238 bond1.kni;"
-
-    real_server 192.168.22.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 154 ##############################
-virtual_server_group 192.168.101.54-80-TCP_QLB {
-    192.168.101.54 80
-}
-
-deny_address_group 192.168.101.54_deny {
-}
-
-virtual_server  group 192.168.101.54-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.54_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.54 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.54 bond1.kni;"
-
-    real_server 192.168.59.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 155 ##############################
-virtual_server_group 192.168.101.133-80-TCP_QLB {
-    192.168.101.133 80
-}
-
-deny_address_group 192.168.101.133_deny {
-}
-
-virtual_server  group 192.168.101.133-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.133_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.133 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.133 bond1.kni;"
-
-    real_server 192.168.13.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 156 ##############################
-virtual_server_group 192.168.102.190-80-TCP_QLB {
-    192.168.102.190 80
-}
-
-deny_address_group 192.168.102.190_deny {
-}
-
-virtual_server  group 192.168.102.190-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.190_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.190 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.190 bond1.kni;"
-
-    real_server 192.168.3.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 157 ##############################
-virtual_server_group 192.168.101.10-80-TCP_QLB {
-    192.168.101.10 80
-}
-
-deny_address_group 192.168.101.10_deny {
-}
-
-virtual_server  group 192.168.101.10-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.10_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.10 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.10 bond1.kni;"
-
-    real_server 192.168.51.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 158 ##############################
-virtual_server_group 111.13.235.185-80-TCP_QLB {
-    111.13.235.185 80
-}
-
-deny_address_group 111.13.235.185_deny {
-}
-
-virtual_server  group 111.13.235.185-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.185_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.185 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.185 bond1.kni;"
-
-    real_server 192.168.53.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 159 ##############################
-virtual_server_group 192.168.102.91-80-TCP_QLB {
-    192.168.102.91 80
-}
-
-deny_address_group 192.168.102.91_deny {
-}
-
-virtual_server  group 192.168.102.91-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.91_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.91 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.91 bond1.kni;"
-
-    real_server 192.168.59.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 160 ##############################
-virtual_server_group 111.13.235.125-80-TCP_QLB {
-    111.13.235.125 80
-}
-
-deny_address_group 111.13.235.125_deny {
-}
-
-virtual_server  group 111.13.235.125-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.125_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.125 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.125 bond1.kni;"
-
-    real_server 192.168.19.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 161 ##############################
-virtual_server_group 192.168.101.72-80-TCP_QLB {
-    192.168.101.72 80
-}
-
-deny_address_group 192.168.101.72_deny {
-}
-
-virtual_server  group 192.168.101.72-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.72_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.72 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.72 bond1.kni;"
-
-    real_server 192.168.22.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 162 ##############################
-virtual_server_group 192.168.102.210-80-TCP_QLB {
-    192.168.102.210 80
-}
-
-deny_address_group 192.168.102.210_deny {
-}
-
-virtual_server  group 192.168.102.210-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.210_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.210 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.210 bond1.kni;"
-
-    real_server 192.168.41.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 163 ##############################
-virtual_server_group 192.168.101.206-80-TCP_QLB {
-    192.168.101.206 80
-}
-
-deny_address_group 192.168.101.206_deny {
-}
-
-virtual_server  group 192.168.101.206-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.206_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.206 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.206 bond1.kni;"
-
-    real_server 192.168.14.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 164 ##############################
-virtual_server_group 192.168.102.100-80-TCP_QLB {
-    192.168.102.100 80
-}
-
-deny_address_group 192.168.102.100_deny {
-}
-
-virtual_server  group 192.168.102.100-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.100_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.100 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.100 bond1.kni;"
-
-    real_server 192.168.59.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 165 ##############################
-virtual_server_group 192.168.102.19-80-TCP_QLB {
-    192.168.102.19 80
-}
-
-deny_address_group 192.168.102.19_deny {
-}
-
-virtual_server  group 192.168.102.19-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.19_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.19 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.19 bond1.kni;"
-
-    real_server 192.168.29.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 166 ##############################
-virtual_server_group 192.168.102.117-80-TCP_QLB {
-    192.168.102.117 80
-}
-
-deny_address_group 192.168.102.117_deny {
-}
-
-virtual_server  group 192.168.102.117-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.117_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.117 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.117 bond1.kni;"
-
-    real_server 192.168.1.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 167 ##############################
-virtual_server_group 192.168.102.144-80-TCP_QLB {
-    192.168.102.144 80
-}
-
-deny_address_group 192.168.102.144_deny {
-}
-
-virtual_server  group 192.168.102.144-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.144_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.144 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.144 bond1.kni;"
-
-    real_server 192.168.35.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 168 ##############################
-virtual_server_group 192.168.101.58-80-TCP_QLB {
-    192.168.101.58 80
-}
-
-deny_address_group 192.168.101.58_deny {
-}
-
-virtual_server  group 192.168.101.58-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.58_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.58 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.58 bond1.kni;"
-
-    real_server 192.168.30.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 169 ##############################
-virtual_server_group 192.168.101.254-80-TCP_QLB {
-    192.168.101.254 80
-}
-
-deny_address_group 192.168.101.254_deny {
-}
-
-virtual_server  group 192.168.101.254-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.254_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.254 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.254 bond1.kni;"
-
-    real_server 192.168.30.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 170 ##############################
-virtual_server_group 192.168.102.153-80-TCP_QLB {
-    192.168.102.153 80
-}
-
-deny_address_group 192.168.102.153_deny {
-}
-
-virtual_server  group 192.168.102.153-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.153_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.153 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.153 bond1.kni;"
-
-    real_server 192.168.11.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 171 ##############################
-virtual_server_group 111.13.235.81-80-TCP_QLB {
-    111.13.235.81 80
-}
-
-deny_address_group 111.13.235.81_deny {
-}
-
-virtual_server  group 111.13.235.81-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.81_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.81 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.81 bond1.kni;"
-
-    real_server 192.168.19.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 172 ##############################
-virtual_server_group 111.13.235.176-80-TCP_QLB {
-    111.13.235.176 80
-}
-
-deny_address_group 111.13.235.176_deny {
-}
-
-virtual_server  group 111.13.235.176-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.176_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.176 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.176 bond1.kni;"
-
-    real_server 192.168.58.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 173 ##############################
-virtual_server_group 192.168.101.174-80-TCP_QLB {
-    192.168.101.174 80
-}
-
-deny_address_group 192.168.101.174_deny {
-}
-
-virtual_server  group 192.168.101.174-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.174_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.174 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.174 bond1.kni;"
-
-    real_server 192.168.17.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 174 ##############################
-virtual_server_group 192.168.101.68-80-TCP_QLB {
-    192.168.101.68 80
-}
-
-deny_address_group 192.168.101.68_deny {
-}
-
-virtual_server  group 192.168.101.68-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.68_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.68 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.68 bond1.kni;"
-
-    real_server 192.168.41.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 175 ##############################
-virtual_server_group 192.168.102.216-80-TCP_QLB {
-    192.168.102.216 80
-}
-
-deny_address_group 192.168.102.216_deny {
-}
-
-virtual_server  group 192.168.102.216-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.216_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.216 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.216 bond1.kni;"
-
-    real_server 192.168.10.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 176 ##############################
-virtual_server_group 192.168.101.201-80-TCP_QLB {
-    192.168.101.201 80
-}
-
-deny_address_group 192.168.101.201_deny {
-}
-
-virtual_server  group 192.168.101.201-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.201_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.201 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.201 bond1.kni;"
-
-    real_server 192.168.54.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 177 ##############################
-virtual_server_group 192.168.102.217-80-TCP_QLB {
-    192.168.102.217 80
-}
-
-deny_address_group 192.168.102.217_deny {
-}
-
-virtual_server  group 192.168.102.217-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.217_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.217 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.217 bond1.kni;"
-
-    real_server 192.168.31.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 178 ##############################
-virtual_server_group 192.168.101.196-80-TCP_QLB {
-    192.168.101.196 80
-}
-
-deny_address_group 192.168.101.196_deny {
-}
-
-virtual_server  group 192.168.101.196-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.196_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.196 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.196 bond1.kni;"
-
-    real_server 192.168.57.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 179 ##############################
-virtual_server_group 192.168.102.231-80-TCP_QLB {
-    192.168.102.231 80
-}
-
-deny_address_group 192.168.102.231_deny {
-}
-
-virtual_server  group 192.168.102.231-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.231_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.231 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.231 bond1.kni;"
-
-    real_server 192.168.34.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 180 ##############################
-virtual_server_group 111.13.235.212-80-TCP_QLB {
-    111.13.235.212 80
-}
-
-deny_address_group 111.13.235.212_deny {
-}
-
-virtual_server  group 111.13.235.212-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.212_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.212 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.212 bond1.kni;"
-
-    real_server 192.168.53.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 181 ##############################
-virtual_server_group 192.168.101.37-80-TCP_QLB {
-    192.168.101.37 80
-}
-
-deny_address_group 192.168.101.37_deny {
-}
-
-virtual_server  group 192.168.101.37-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.37_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.37 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.37 bond1.kni;"
-
-    real_server 192.168.10.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 182 ##############################
-virtual_server_group 192.168.101.186-80-TCP_QLB {
-    192.168.101.186 80
-}
-
-deny_address_group 192.168.101.186_deny {
-}
-
-virtual_server  group 192.168.101.186-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.186_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.186 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.186 bond1.kni;"
-
-    real_server 192.168.3.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 183 ##############################
-virtual_server_group 192.168.102.32-80-TCP_QLB {
-    192.168.102.32 80
-}
-
-deny_address_group 192.168.102.32_deny {
-}
-
-virtual_server  group 192.168.102.32-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.32_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.32 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.32 bond1.kni;"
-
-    real_server 192.168.26.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 184 ##############################
-virtual_server_group 192.168.101.226-80-TCP_QLB {
-    192.168.101.226 80
-}
-
-deny_address_group 192.168.101.226_deny {
-}
-
-virtual_server  group 192.168.101.226-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.226_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.226 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.226 bond1.kni;"
-
-    real_server 192.168.35.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 185 ##############################
-virtual_server_group 111.13.235.246-80-TCP_QLB {
-    111.13.235.246 80
-}
-
-deny_address_group 111.13.235.246_deny {
-}
-
-virtual_server  group 111.13.235.246-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.246_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.246 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.246 bond1.kni;"
-
-    real_server 192.168.42.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 186 ##############################
-virtual_server_group 192.168.101.109-80-TCP_QLB {
-    192.168.101.109 80
-}
-
-deny_address_group 192.168.101.109_deny {
-}
-
-virtual_server  group 192.168.101.109-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.109_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.109 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.109 bond1.kni;"
-
-    real_server 192.168.33.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 187 ##############################
-virtual_server_group 192.168.101.184-80-TCP_QLB {
-    192.168.101.184 80
-}
-
-deny_address_group 192.168.101.184_deny {
-}
-
-virtual_server  group 192.168.101.184-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.184_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.184 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.184 bond1.kni;"
-
-    real_server 192.168.42.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 188 ##############################
-virtual_server_group 192.168.102.89-80-TCP_QLB {
-    192.168.102.89 80
-}
-
-deny_address_group 192.168.102.89_deny {
-}
-
-virtual_server  group 192.168.102.89-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.89_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.89 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.89 bond1.kni;"
-
-    real_server 192.168.1.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 189 ##############################
-virtual_server_group 192.168.101.73-80-TCP_QLB {
-    192.168.101.73 80
-}
-
-deny_address_group 192.168.101.73_deny {
-}
-
-virtual_server  group 192.168.101.73-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.73_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.73 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.73 bond1.kni;"
-
-    real_server 192.168.47.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 190 ##############################
-virtual_server_group 192.168.101.128-80-TCP_QLB {
-    192.168.101.128 80
-}
-
-deny_address_group 192.168.101.128_deny {
-}
-
-virtual_server  group 192.168.101.128-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.128_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.128 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.128 bond1.kni;"
-
-    real_server 192.168.39.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 191 ##############################
-virtual_server_group 192.168.102.237-80-TCP_QLB {
-    192.168.102.237 80
-}
-
-deny_address_group 192.168.102.237_deny {
-}
-
-virtual_server  group 192.168.102.237-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.237_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.237 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.237 bond1.kni;"
-
-    real_server 192.168.11.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 192 ##############################
-virtual_server_group 111.13.235.153-80-TCP_QLB {
-    111.13.235.153 80
-}
-
-deny_address_group 111.13.235.153_deny {
-}
-
-virtual_server  group 111.13.235.153-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.153_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.153 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.153 bond1.kni;"
-
-    real_server 192.168.17.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 193 ##############################
-virtual_server_group 192.168.102.123-80-TCP_QLB {
-    192.168.102.123 80
-}
-
-deny_address_group 192.168.102.123_deny {
-}
-
-virtual_server  group 192.168.102.123-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.123_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.123 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.123 bond1.kni;"
-
-    real_server 192.168.54.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 194 ##############################
-virtual_server_group 192.168.102.46-80-TCP_QLB {
-    192.168.102.46 80
-}
-
-deny_address_group 192.168.102.46_deny {
-}
-
-virtual_server  group 192.168.102.46-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.46_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.46 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.46 bond1.kni;"
-
-    real_server 192.168.3.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 195 ##############################
-virtual_server_group 111.13.235.243-80-TCP_QLB {
-    111.13.235.243 80
-}
-
-deny_address_group 111.13.235.243_deny {
-}
-
-virtual_server  group 111.13.235.243-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.243_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.243 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.243 bond1.kni;"
-
-    real_server 192.168.6.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 196 ##############################
-virtual_server_group 192.168.101.131-80-TCP_QLB {
-    192.168.101.131 80
-}
-
-deny_address_group 192.168.101.131_deny {
-}
-
-virtual_server  group 192.168.101.131-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.131_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.131 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.131 bond1.kni;"
-
-    real_server 192.168.17.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 197 ##############################
-virtual_server_group 192.168.102.121-80-TCP_QLB {
-    192.168.102.121 80
-}
-
-deny_address_group 192.168.102.121_deny {
-}
-
-virtual_server  group 192.168.102.121-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.121_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.121 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.121 bond1.kni;"
-
-    real_server 192.168.5.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 198 ##############################
-virtual_server_group 111.13.235.127-80-TCP_QLB {
-    111.13.235.127 80
-}
-
-deny_address_group 111.13.235.127_deny {
-}
-
-virtual_server  group 111.13.235.127-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.127_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.127 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.127 bond1.kni;"
-
-    real_server 192.168.19.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 199 ##############################
-virtual_server_group 111.13.235.100-80-TCP_QLB {
-    111.13.235.100 80
-}
-
-deny_address_group 111.13.235.100_deny {
-}
-
-virtual_server  group 111.13.235.100-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.100_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.100 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.100 bond1.kni;"
-
-    real_server 192.168.41.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 200 ##############################
-virtual_server_group 192.168.102.93-80-TCP_QLB {
-    192.168.102.93 80
-}
-
-deny_address_group 192.168.102.93_deny {
-}
-
-virtual_server  group 192.168.102.93-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.93_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.93 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.93 bond1.kni;"
-
-    real_server 192.168.15.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 201 ##############################
-virtual_server_group 192.168.102.248-80-TCP_QLB {
-    192.168.102.248 80
-}
-
-deny_address_group 192.168.102.248_deny {
-}
-
-virtual_server  group 192.168.102.248-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.248_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.248 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.248 bond1.kni;"
-
-    real_server 192.168.46.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 202 ##############################
-virtual_server_group 192.168.102.6-80-TCP_QLB {
-    192.168.102.6 80
-}
-
-deny_address_group 192.168.102.6_deny {
-}
-
-virtual_server  group 192.168.102.6-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.6_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.6 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.6 bond1.kni;"
-
-    real_server 192.168.34.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 203 ##############################
-virtual_server_group 111.13.235.76-80-TCP_QLB {
-    111.13.235.76 80
-}
-
-deny_address_group 111.13.235.76_deny {
-}
-
-virtual_server  group 111.13.235.76-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.76_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.76 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.76 bond1.kni;"
-
-    real_server 192.168.33.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 204 ##############################
-virtual_server_group 111.13.235.109-80-TCP_QLB {
-    111.13.235.109 80
-}
-
-deny_address_group 111.13.235.109_deny {
-}
-
-virtual_server  group 111.13.235.109-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.109_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.109 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.109 bond1.kni;"
-
-    real_server 192.168.54.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 205 ##############################
-virtual_server_group 192.168.101.154-80-TCP_QLB {
-    192.168.101.154 80
-}
-
-deny_address_group 192.168.101.154_deny {
-}
-
-virtual_server  group 192.168.101.154-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.154_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.154 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.154 bond1.kni;"
-
-    real_server 192.168.14.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 206 ##############################
-virtual_server_group 111.13.235.175-80-TCP_QLB {
-    111.13.235.175 80
-}
-
-deny_address_group 111.13.235.175_deny {
-}
-
-virtual_server  group 111.13.235.175-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.175_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.175 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.175 bond1.kni;"
-
-    real_server 192.168.47.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 207 ##############################
-virtual_server_group 111.13.235.224-80-TCP_QLB {
-    111.13.235.224 80
-}
-
-deny_address_group 111.13.235.224_deny {
-}
-
-virtual_server  group 111.13.235.224-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.224_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.224 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.224 bond1.kni;"
-
-    real_server 192.168.30.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 208 ##############################
-virtual_server_group 192.168.101.203-80-TCP_QLB {
-    192.168.101.203 80
-}
-
-deny_address_group 192.168.101.203_deny {
-}
-
-virtual_server  group 192.168.101.203-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.203_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.203 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.203 bond1.kni;"
-
-    real_server 192.168.58.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 209 ##############################
-virtual_server_group 111.13.235.70-80-TCP_QLB {
-    111.13.235.70 80
-}
-
-deny_address_group 111.13.235.70_deny {
-}
-
-virtual_server  group 111.13.235.70-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.70_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.70 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.70 bond1.kni;"
-
-    real_server 192.168.23.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 210 ##############################
-virtual_server_group 111.13.235.210-80-TCP_QLB {
-    111.13.235.210 80
-}
-
-deny_address_group 111.13.235.210_deny {
-}
-
-virtual_server  group 111.13.235.210-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.210_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.210 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.210 bond1.kni;"
-
-    real_server 192.168.45.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 211 ##############################
-virtual_server_group 192.168.101.177-80-TCP_QLB {
-    192.168.101.177 80
-}
-
-deny_address_group 192.168.101.177_deny {
-}
-
-virtual_server  group 192.168.101.177-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.177_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.177 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.177 bond1.kni;"
-
-    real_server 192.168.27.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 212 ##############################
-virtual_server_group 192.168.102.78-80-TCP_QLB {
-    192.168.102.78 80
-}
-
-deny_address_group 192.168.102.78_deny {
-}
-
-virtual_server  group 192.168.102.78-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.78_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.78 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.78 bond1.kni;"
-
-    real_server 192.168.47.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 213 ##############################
-virtual_server_group 111.13.235.139-80-TCP_QLB {
-    111.13.235.139 80
-}
-
-deny_address_group 111.13.235.139_deny {
-}
-
-virtual_server  group 111.13.235.139-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.139_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.139 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.139 bond1.kni;"
-
-    real_server 192.168.35.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 214 ##############################
-virtual_server_group 111.13.235.177-80-TCP_QLB {
-    111.13.235.177 80
-}
-
-deny_address_group 111.13.235.177_deny {
-}
-
-virtual_server  group 111.13.235.177-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.177_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.177 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.177 bond1.kni;"
-
-    real_server 192.168.7.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 215 ##############################
-virtual_server_group 192.168.101.238-80-TCP_QLB {
-    192.168.101.238 80
-}
-
-deny_address_group 192.168.101.238_deny {
-}
-
-virtual_server  group 192.168.101.238-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.238_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.238 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.238 bond1.kni;"
-
-    real_server 192.168.33.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 216 ##############################
-virtual_server_group 111.13.235.155-80-TCP_QLB {
-    111.13.235.155 80
-}
-
-deny_address_group 111.13.235.155_deny {
-}
-
-virtual_server  group 111.13.235.155-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.155_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.155 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.155 bond1.kni;"
-
-    real_server 192.168.29.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 217 ##############################
-virtual_server_group 192.168.102.158-80-TCP_QLB {
-    192.168.102.158 80
-}
-
-deny_address_group 192.168.102.158_deny {
-}
-
-virtual_server  group 192.168.102.158-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.158_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.158 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.158 bond1.kni;"
-
-    real_server 192.168.47.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 218 ##############################
-virtual_server_group 111.13.235.131-80-TCP_QLB {
-    111.13.235.131 80
-}
-
-deny_address_group 111.13.235.131_deny {
-}
-
-virtual_server  group 111.13.235.131-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.131_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.131 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.131 bond1.kni;"
-
-    real_server 192.168.34.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 219 ##############################
-virtual_server_group 192.168.102.67-80-TCP_QLB {
-    192.168.102.67 80
-}
-
-deny_address_group 192.168.102.67_deny {
-}
-
-virtual_server  group 192.168.102.67-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.67_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.67 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.67 bond1.kni;"
-
-    real_server 192.168.39.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 220 ##############################
-virtual_server_group 192.168.102.102-80-TCP_QLB {
-    192.168.102.102 80
-}
-
-deny_address_group 192.168.102.102_deny {
-}
-
-virtual_server  group 192.168.102.102-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.102_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.102 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.102 bond1.kni;"
-
-    real_server 192.168.43.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 221 ##############################
-virtual_server_group 111.13.235.235-80-TCP_QLB {
-    111.13.235.235 80
-}
-
-deny_address_group 111.13.235.235_deny {
-}
-
-virtual_server  group 111.13.235.235-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.235_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.235 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.235 bond1.kni;"
-
-    real_server 192.168.2.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 222 ##############################
-virtual_server_group 192.168.102.115-80-TCP_QLB {
-    192.168.102.115 80
-}
-
-deny_address_group 192.168.102.115_deny {
-}
-
-virtual_server  group 192.168.102.115-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.115_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.115 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.115 bond1.kni;"
-
-    real_server 192.168.5.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 223 ##############################
-virtual_server_group 111.13.235.161-80-TCP_QLB {
-    111.13.235.161 80
-}
-
-deny_address_group 111.13.235.161_deny {
-}
-
-virtual_server  group 111.13.235.161-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.161_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.161 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.161 bond1.kni;"
-
-    real_server 192.168.13.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 224 ##############################
-virtual_server_group 192.168.102.146-80-TCP_QLB {
-    192.168.102.146 80
-}
-
-deny_address_group 192.168.102.146_deny {
-}
-
-virtual_server  group 192.168.102.146-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.146_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.146 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.146 bond1.kni;"
-
-    real_server 192.168.47.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 225 ##############################
-virtual_server_group 192.168.101.55-80-TCP_QLB {
-    192.168.101.55 80
-}
-
-deny_address_group 192.168.101.55_deny {
-}
-
-virtual_server  group 192.168.101.55-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.55_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.55 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.55 bond1.kni;"
-
-    real_server 192.168.15.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 226 ##############################
-virtual_server_group 192.168.102.151-80-TCP_QLB {
-    192.168.102.151 80
-}
-
-deny_address_group 192.168.102.151_deny {
-}
-
-virtual_server  group 192.168.102.151-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.151_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.151 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.151 bond1.kni;"
-
-    real_server 192.168.43.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 227 ##############################
-virtual_server_group 111.13.235.128-80-TCP_QLB {
-    111.13.235.128 80
-}
-
-deny_address_group 111.13.235.128_deny {
-}
-
-virtual_server  group 111.13.235.128-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.128_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.128 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.128 bond1.kni;"
-
-    real_server 192.168.43.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 228 ##############################
-virtual_server_group 111.13.235.237-80-TCP_QLB {
-    111.13.235.237 80
-}
-
-deny_address_group 111.13.235.237_deny {
-}
-
-virtual_server  group 111.13.235.237-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.237_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.237 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.237 bond1.kni;"
-
-    real_server 192.168.51.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 229 ##############################
-virtual_server_group 192.168.102.154-80-TCP_QLB {
-    192.168.102.154 80
-}
-
-deny_address_group 192.168.102.154_deny {
-}
-
-virtual_server  group 192.168.102.154-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.154_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.154 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.154 bond1.kni;"
-
-    real_server 192.168.59.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 230 ##############################
-virtual_server_group 111.13.235.136-80-TCP_QLB {
-    111.13.235.136 80
-}
-
-deny_address_group 111.13.235.136_deny {
-}
-
-virtual_server  group 111.13.235.136-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.136_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.136 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.136 bond1.kni;"
-
-    real_server 192.168.58.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 231 ##############################
-virtual_server_group 192.168.102.254-80-TCP_QLB {
-    192.168.102.254 80
-}
-
-deny_address_group 192.168.102.254_deny {
-}
-
-virtual_server  group 192.168.102.254-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.254_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.254 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.254 bond1.kni;"
-
-    real_server 192.168.54.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 232 ##############################
-virtual_server_group 192.168.102.124-80-TCP_QLB {
-    192.168.102.124 80
-}
-
-deny_address_group 192.168.102.124_deny {
-}
-
-virtual_server  group 192.168.102.124-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.124_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.124 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.124 bond1.kni;"
-
-    real_server 192.168.15.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 233 ##############################
-virtual_server_group 111.13.235.79-80-TCP_QLB {
-    111.13.235.79 80
-}
-
-deny_address_group 111.13.235.79_deny {
-}
-
-virtual_server  group 111.13.235.79-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.79_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.79 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.79 bond1.kni;"
-
-    real_server 192.168.21.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 234 ##############################
-virtual_server_group 192.168.101.153-80-TCP_QLB {
-    192.168.101.153 80
-}
-
-deny_address_group 192.168.101.153_deny {
-}
-
-virtual_server  group 192.168.101.153-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.153_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.153 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.153 bond1.kni;"
-
-    real_server 192.168.6.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 235 ##############################
-virtual_server_group 192.168.101.11-80-TCP_QLB {
-    192.168.101.11 80
-}
-
-deny_address_group 192.168.101.11_deny {
-}
-
-virtual_server  group 192.168.101.11-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.11_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.11 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.11 bond1.kni;"
-
-    real_server 192.168.9.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 236 ##############################
-virtual_server_group 111.13.235.245-80-TCP_QLB {
-    111.13.235.245 80
-}
-
-deny_address_group 111.13.235.245_deny {
-}
-
-virtual_server  group 111.13.235.245-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.245_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.245 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.245 bond1.kni;"
-
-    real_server 192.168.23.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 237 ##############################
-virtual_server_group 192.168.102.188-80-TCP_QLB {
-    192.168.102.188 80
-}
-
-deny_address_group 192.168.102.188_deny {
-}
-
-virtual_server  group 192.168.102.188-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.188_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.188 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.188 bond1.kni;"
-
-    real_server 192.168.35.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 238 ##############################
-virtual_server_group 192.168.102.202-80-TCP_QLB {
-    192.168.102.202 80
-}
-
-deny_address_group 192.168.102.202_deny {
-}
-
-virtual_server  group 192.168.102.202-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.202_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.202 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.202 bond1.kni;"
-
-    real_server 192.168.27.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 239 ##############################
-virtual_server_group 192.168.102.127-80-TCP_QLB {
-    192.168.102.127 80
-}
-
-deny_address_group 192.168.102.127_deny {
-}
-
-virtual_server  group 192.168.102.127-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.127_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.127 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.127 bond1.kni;"
-
-    real_server 192.168.2.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 240 ##############################
-virtual_server_group 111.13.235.122-80-TCP_QLB {
-    111.13.235.122 80
-}
-
-deny_address_group 111.13.235.122_deny {
-}
-
-virtual_server  group 111.13.235.122-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.122_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.122 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.122 bond1.kni;"
-
-    real_server 192.168.46.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 241 ##############################
-virtual_server_group 192.168.102.243-80-TCP_QLB {
-    192.168.102.243 80
-}
-
-deny_address_group 192.168.102.243_deny {
-}
-
-virtual_server  group 192.168.102.243-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.243_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.243 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.243 bond1.kni;"
-
-    real_server 192.168.3.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 242 ##############################
-virtual_server_group 192.168.102.112-80-TCP_QLB {
-    192.168.102.112 80
-}
-
-deny_address_group 192.168.102.112_deny {
-}
-
-virtual_server  group 192.168.102.112-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.112_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.112 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.112 bond1.kni;"
-
-    real_server 192.168.43.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 243 ##############################
-virtual_server_group 192.168.102.95-80-TCP_QLB {
-    192.168.102.95 80
-}
-
-deny_address_group 192.168.102.95_deny {
-}
-
-virtual_server  group 192.168.102.95-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.95_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.95 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.95 bond1.kni;"
-
-    real_server 192.168.29.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 244 ##############################
-virtual_server_group 192.168.101.121-80-TCP_QLB {
-    192.168.101.121 80
-}
-
-deny_address_group 192.168.101.121_deny {
-}
-
-virtual_server  group 192.168.101.121-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.121_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.121 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.121 bond1.kni;"
-
-    real_server 192.168.11.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 245 ##############################
-virtual_server_group 192.168.101.110-80-TCP_QLB {
-    192.168.101.110 80
-}
-
-deny_address_group 192.168.101.110_deny {
-}
-
-virtual_server  group 192.168.101.110-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.110_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.110 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.110 bond1.kni;"
-
-    real_server 192.168.25.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 246 ##############################
-virtual_server_group 111.13.235.83-80-TCP_QLB {
-    111.13.235.83 80
-}
-
-deny_address_group 111.13.235.83_deny {
-}
-
-virtual_server  group 111.13.235.83-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.83_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.83 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.83 bond1.kni;"
-
-    real_server 192.168.18.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 247 ##############################
-virtual_server_group 192.168.101.228-80-TCP_QLB {
-    192.168.101.228 80
-}
-
-deny_address_group 192.168.101.228_deny {
-}
-
-virtual_server  group 192.168.101.228-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.228_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.228 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.228 bond1.kni;"
-
-    real_server 192.168.53.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 248 ##############################
-virtual_server_group 192.168.102.65-80-TCP_QLB {
-    192.168.102.65 80
-}
-
-deny_address_group 192.168.102.65_deny {
-}
-
-virtual_server  group 192.168.102.65-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.65_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.65 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.65 bond1.kni;"
-
-    real_server 192.168.29.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 249 ##############################
-virtual_server_group 192.168.101.249-80-TCP_QLB {
-    192.168.101.249 80
-}
-
-deny_address_group 192.168.101.249_deny {
-}
-
-virtual_server  group 192.168.101.249-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.249_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.249 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.249 bond1.kni;"
-
-    real_server 192.168.39.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 250 ##############################
-virtual_server_group 192.168.101.189-80-TCP_QLB {
-    192.168.101.189 80
-}
-
-deny_address_group 192.168.101.189_deny {
-}
-
-virtual_server  group 192.168.101.189-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.189_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.189 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.189 bond1.kni;"
-
-    real_server 192.168.22.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 251 ##############################
-virtual_server_group 111.13.235.124-80-TCP_QLB {
-    111.13.235.124 80
-}
-
-deny_address_group 111.13.235.124_deny {
-}
-
-virtual_server  group 111.13.235.124-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.124_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.124 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.124 bond1.kni;"
-
-    real_server 192.168.47.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 252 ##############################
-virtual_server_group 111.13.235.230-80-TCP_QLB {
-    111.13.235.230 80
-}
-
-deny_address_group 111.13.235.230_deny {
-}
-
-virtual_server  group 111.13.235.230-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.230_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.230 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.230 bond1.kni;"
-
-    real_server 192.168.43.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 253 ##############################
-virtual_server_group 192.168.102.241-80-TCP_QLB {
-    192.168.102.241 80
-}
-
-deny_address_group 192.168.102.241_deny {
-}
-
-virtual_server  group 192.168.102.241-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.241_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.241 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.241 bond1.kni;"
-
-    real_server 192.168.34.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 254 ##############################
-virtual_server_group 192.168.102.29-80-TCP_QLB {
-    192.168.102.29 80
-}
-
-deny_address_group 192.168.102.29_deny {
-}
-
-virtual_server  group 192.168.102.29-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.29_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.29 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.29 bond1.kni;"
-
-    real_server 192.168.41.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 255 ##############################
-virtual_server_group 192.168.101.123-80-TCP_QLB {
-    192.168.101.123 80
-}
-
-deny_address_group 192.168.101.123_deny {
-}
-
-virtual_server  group 192.168.101.123-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.123_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.123 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.123 bond1.kni;"
-
-    real_server 192.168.47.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 256 ##############################
-virtual_server_group 192.168.102.14-80-TCP_QLB {
-    192.168.102.14 80
-}
-
-deny_address_group 192.168.102.14_deny {
-}
-
-virtual_server  group 192.168.102.14-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.14_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.14 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.14 bond1.kni;"
-
-    real_server 192.168.29.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 257 ##############################
-virtual_server_group 192.168.102.143-80-TCP_QLB {
-    192.168.102.143 80
-}
-
-deny_address_group 192.168.102.143_deny {
-}
-
-virtual_server  group 192.168.102.143-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.143_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.143 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.143 bond1.kni;"
-
-    real_server 192.168.43.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 258 ##############################
-virtual_server_group 192.168.102.255-80-TCP_QLB {
-    192.168.102.255 80
-}
-
-deny_address_group 192.168.102.255_deny {
-}
-
-virtual_server  group 192.168.102.255-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.255_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.255 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.255 bond1.kni;"
-
-    real_server 192.168.42.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 259 ##############################
-virtual_server_group 111.13.235.232-80-TCP_QLB {
-    111.13.235.232 80
-}
-
-deny_address_group 111.13.235.232_deny {
-}
-
-virtual_server  group 111.13.235.232-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.232_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.232 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.232 bond1.kni;"
-
-    real_server 192.168.37.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 260 ##############################
-virtual_server_group 111.13.235.229-80-TCP_QLB {
-    111.13.235.229 80
-}
-
-deny_address_group 111.13.235.229_deny {
-}
-
-virtual_server  group 111.13.235.229-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.229_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.229 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.229 bond1.kni;"
-
-    real_server 192.168.42.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 261 ##############################
-virtual_server_group 192.168.102.152-80-TCP_QLB {
-    192.168.102.152 80
-}
-
-deny_address_group 192.168.102.152_deny {
-}
-
-virtual_server  group 192.168.102.152-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.152_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.152 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.152 bond1.kni;"
-
-    real_server 192.168.49.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 262 ##############################
-virtual_server_group 192.168.102.235-80-TCP_QLB {
-    192.168.102.235 80
-}
-
-deny_address_group 192.168.102.235_deny {
-}
-
-virtual_server  group 192.168.102.235-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.235_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.235 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.235 bond1.kni;"
-
-    real_server 192.168.50.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 263 ##############################
-virtual_server_group 192.168.101.211-80-TCP_QLB {
-    192.168.101.211 80
-}
-
-deny_address_group 192.168.101.211_deny {
-}
-
-virtual_server  group 192.168.101.211-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.211_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.211 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.211 bond1.kni;"
-
-    real_server 192.168.37.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 264 ##############################
-virtual_server_group 192.168.101.62-80-TCP_QLB {
-    192.168.101.62 80
-}
-
-deny_address_group 192.168.101.62_deny {
-}
-
-virtual_server  group 192.168.101.62-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.62_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.62 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.62 bond1.kni;"
-
-    real_server 192.168.6.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 265 ##############################
-virtual_server_group 111.13.235.190-80-TCP_QLB {
-    111.13.235.190 80
-}
-
-deny_address_group 111.13.235.190_deny {
-}
-
-virtual_server  group 111.13.235.190-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.190_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.190 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.190 bond1.kni;"
-
-    real_server 192.168.31.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 266 ##############################
-virtual_server_group 192.168.101.98-80-TCP_QLB {
-    192.168.101.98 80
-}
-
-deny_address_group 192.168.101.98_deny {
-}
-
-virtual_server  group 192.168.101.98-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.98_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.98 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.98 bond1.kni;"
-
-    real_server 192.168.35.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 267 ##############################
-virtual_server_group 192.168.101.180-80-TCP_QLB {
-    192.168.101.180 80
-}
-
-deny_address_group 192.168.101.180_deny {
-}
-
-virtual_server  group 192.168.101.180-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.180_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.180 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.180 bond1.kni;"
-
-    real_server 192.168.47.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 268 ##############################
-virtual_server_group 192.168.101.6-80-TCP_QLB {
-    192.168.101.6 80
-}
-
-deny_address_group 192.168.101.6_deny {
-}
-
-virtual_server  group 192.168.101.6-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.6_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.6 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.6 bond1.kni;"
-
-    real_server 192.168.25.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 269 ##############################
-virtual_server_group 192.168.102.49-80-TCP_QLB {
-    192.168.102.49 80
-}
-
-deny_address_group 192.168.102.49_deny {
-}
-
-virtual_server  group 192.168.102.49-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.49_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.49 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.49 bond1.kni;"
-
-    real_server 192.168.54.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 270 ##############################
-virtual_server_group 192.168.102.63-80-TCP_QLB {
-    192.168.102.63 80
-}
-
-deny_address_group 192.168.102.63_deny {
-}
-
-virtual_server  group 192.168.102.63-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.63_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.63 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.63 bond1.kni;"
-
-    real_server 192.168.29.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 271 ##############################
-virtual_server_group 111.13.235.192-80-TCP_QLB {
-    111.13.235.192 80
-}
-
-deny_address_group 111.13.235.192_deny {
-}
-
-virtual_server  group 111.13.235.192-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.192_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.192 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.192 bond1.kni;"
-
-    real_server 192.168.47.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 272 ##############################
-virtual_server_group 192.168.101.216-80-TCP_QLB {
-    192.168.101.216 80
-}
-
-deny_address_group 192.168.101.216_deny {
-}
-
-virtual_server  group 192.168.101.216-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.216_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.216 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.216 bond1.kni;"
-
-    real_server 192.168.38.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 273 ##############################
-virtual_server_group 111.13.235.247-80-TCP_QLB {
-    111.13.235.247 80
-}
-
-deny_address_group 111.13.235.247_deny {
-}
-
-virtual_server  group 111.13.235.247-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.247_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.247 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.247 bond1.kni;"
-
-    real_server 192.168.1.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 274 ##############################
-virtual_server_group 192.168.102.239-80-TCP_QLB {
-    192.168.102.239 80
-}
-
-deny_address_group 192.168.102.239_deny {
-}
-
-virtual_server  group 192.168.102.239-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.239_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.239 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.239 bond1.kni;"
-
-    real_server 192.168.53.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 275 ##############################
-virtual_server_group 192.168.101.172-80-TCP_QLB {
-    192.168.101.172 80
-}
-
-deny_address_group 192.168.101.172_deny {
-}
-
-virtual_server  group 192.168.101.172-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.172_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.172 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.172 bond1.kni;"
-
-    real_server 192.168.38.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 276 ##############################
-virtual_server_group 192.168.102.125-80-TCP_QLB {
-    192.168.102.125 80
-}
-
-deny_address_group 192.168.102.125_deny {
-}
-
-virtual_server  group 192.168.102.125-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.125_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.125 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.125 bond1.kni;"
-
-    real_server 192.168.57.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 277 ##############################
-virtual_server_group 111.13.235.179-80-TCP_QLB {
-    111.13.235.179 80
-}
-
-deny_address_group 111.13.235.179_deny {
-}
-
-virtual_server  group 111.13.235.179-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.179_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.179 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.179 bond1.kni;"
-
-    real_server 192.168.49.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 278 ##############################
-virtual_server_group 111.13.235.199-80-TCP_QLB {
-    111.13.235.199 80
-}
-
-deny_address_group 111.13.235.199_deny {
-}
-
-virtual_server  group 111.13.235.199-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.199_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.199 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.199 bond1.kni;"
-
-    real_server 192.168.29.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 279 ##############################
-virtual_server_group 192.168.101.4-80-TCP_QLB {
-    192.168.101.4 80
-}
-
-deny_address_group 192.168.101.4_deny {
-}
-
-virtual_server  group 192.168.101.4-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.4_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.4 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.4 bond1.kni;"
-
-    real_server 192.168.10.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 280 ##############################
-virtual_server_group 111.13.235.172-80-TCP_QLB {
-    111.13.235.172 80
-}
-
-deny_address_group 111.13.235.172_deny {
-}
-
-virtual_server  group 111.13.235.172-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.172_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.172 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.172 bond1.kni;"
-
-    real_server 192.168.42.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 281 ##############################
-virtual_server_group 192.168.101.22-80-TCP_QLB {
-    192.168.101.22 80
-}
-
-deny_address_group 192.168.101.22_deny {
-}
-
-virtual_server  group 192.168.101.22-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.22_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.22 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.22 bond1.kni;"
-
-    real_server 192.168.33.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 282 ##############################
-virtual_server_group 192.168.101.101-80-TCP_QLB {
-    192.168.101.101 80
-}
-
-deny_address_group 192.168.101.101_deny {
-}
-
-virtual_server  group 192.168.101.101-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.101_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.101 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.101 bond1.kni;"
-
-    real_server 192.168.53.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 283 ##############################
-virtual_server_group 192.168.101.17-80-TCP_QLB {
-    192.168.101.17 80
-}
-
-deny_address_group 192.168.101.17_deny {
-}
-
-virtual_server  group 192.168.101.17-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.17_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.17 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.17 bond1.kni;"
-
-    real_server 192.168.49.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 284 ##############################
-virtual_server_group 111.13.235.99-80-TCP_QLB {
-    111.13.235.99 80
-}
-
-deny_address_group 111.13.235.99_deny {
-}
-
-virtual_server  group 111.13.235.99-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.99_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.99 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.99 bond1.kni;"
-
-    real_server 192.168.59.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 285 ##############################
-virtual_server_group 192.168.101.115-80-TCP_QLB {
-    192.168.101.115 80
-}
-
-deny_address_group 192.168.101.115_deny {
-}
-
-virtual_server  group 192.168.101.115-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.115_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.115 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.115 bond1.kni;"
-
-    real_server 192.168.38.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 286 ##############################
-virtual_server_group 192.168.102.244-80-TCP_QLB {
-    192.168.102.244 80
-}
-
-deny_address_group 192.168.102.244_deny {
-}
-
-virtual_server  group 192.168.102.244-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.244_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.244 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.244 bond1.kni;"
-
-    real_server 192.168.5.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 287 ##############################
-virtual_server_group 111.13.235.240-80-TCP_QLB {
-    111.13.235.240 80
-}
-
-deny_address_group 111.13.235.240_deny {
-}
-
-virtual_server  group 111.13.235.240-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.240_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.240 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.240 bond1.kni;"
-
-    real_server 192.168.10.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 288 ##############################
-virtual_server_group 111.13.235.72-80-TCP_QLB {
-    111.13.235.72 80
-}
-
-deny_address_group 111.13.235.72_deny {
-}
-
-virtual_server  group 111.13.235.72-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.72_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.72 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.72 bond1.kni;"
-
-    real_server 192.168.10.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 289 ##############################
-virtual_server_group 192.168.101.175-80-TCP_QLB {
-    192.168.101.175 80
-}
-
-deny_address_group 192.168.101.175_deny {
-}
-
-virtual_server  group 192.168.101.175-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.175_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.175 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.175 bond1.kni;"
-
-    real_server 192.168.38.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 290 ##############################
-virtual_server_group 192.168.101.14-80-TCP_QLB {
-    192.168.101.14 80
-}
-
-deny_address_group 192.168.101.14_deny {
-}
-
-virtual_server  group 192.168.101.14-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.14_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.14 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.14 bond1.kni;"
-
-    real_server 192.168.50.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 291 ##############################
-virtual_server_group 111.13.235.68-80-TCP_QLB {
-    111.13.235.68 80
-}
-
-deny_address_group 111.13.235.68_deny {
-}
-
-virtual_server  group 111.13.235.68-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.68_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.68 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.68 bond1.kni;"
-
-    real_server 192.168.37.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 292 ##############################
-virtual_server_group 192.168.101.155-80-TCP_QLB {
-    192.168.101.155 80
-}
-
-deny_address_group 192.168.101.155_deny {
-}
-
-virtual_server  group 192.168.101.155-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.155_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.155 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.155 bond1.kni;"
-
-    real_server 192.168.34.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 293 ##############################
-virtual_server_group 192.168.101.161-80-TCP_QLB {
-    192.168.101.161 80
-}
-
-deny_address_group 192.168.101.161_deny {
-}
-
-virtual_server  group 192.168.101.161-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.161_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.161 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.161 bond1.kni;"
-
-    real_server 192.168.39.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 294 ##############################
-virtual_server_group 111.13.235.157-80-TCP_QLB {
-    111.13.235.157 80
-}
-
-deny_address_group 111.13.235.157_deny {
-}
-
-virtual_server  group 111.13.235.157-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.157_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.157 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.157 bond1.kni;"
-
-    real_server 192.168.17.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 295 ##############################
-virtual_server_group 192.168.101.60-80-TCP_QLB {
-    192.168.101.60 80
-}
-
-deny_address_group 192.168.101.60_deny {
-}
-
-virtual_server  group 192.168.101.60-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.60_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.60 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.60 bond1.kni;"
-
-    real_server 192.168.50.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 296 ##############################
-virtual_server_group 192.168.101.209-80-TCP_QLB {
-    192.168.101.209 80
-}
-
-deny_address_group 192.168.101.209_deny {
-}
-
-virtual_server  group 192.168.101.209-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.209_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.209 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.209 bond1.kni;"
-
-    real_server 192.168.33.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 297 ##############################
-virtual_server_group 192.168.101.74-80-TCP_QLB {
-    192.168.101.74 80
-}
-
-deny_address_group 192.168.101.74_deny {
-}
-
-virtual_server  group 192.168.101.74-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.74_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.74 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.74 bond1.kni;"
-
-    real_server 192.168.49.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 298 ##############################
-virtual_server_group 192.168.102.139-80-TCP_QLB {
-    192.168.102.139 80
-}
-
-deny_address_group 192.168.102.139_deny {
-}
-
-virtual_server  group 192.168.102.139-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.139_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.139 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.139 bond1.kni;"
-
-    real_server 192.168.9.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 299 ##############################
-virtual_server_group 192.168.102.97-80-TCP_QLB {
-    192.168.102.97 80
-}
-
-deny_address_group 192.168.102.97_deny {
-}
-
-virtual_server  group 192.168.102.97-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.97_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.97 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.97 bond1.kni;"
-
-    real_server 192.168.45.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 300 ##############################
-virtual_server_group 111.13.235.197-80-TCP_QLB {
-    111.13.235.197 80
-}
-
-deny_address_group 111.13.235.197_deny {
-}
-
-virtual_server  group 111.13.235.197-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.197_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.197 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.197 bond1.kni;"
-
-    real_server 192.168.37.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 301 ##############################
-virtual_server_group 192.168.102.55-80-TCP_QLB {
-    192.168.102.55 80
-}
-
-deny_address_group 192.168.102.55_deny {
-}
-
-virtual_server  group 192.168.102.55-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.55_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.55 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.55 bond1.kni;"
-
-    real_server 192.168.30.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 302 ##############################
-virtual_server_group 192.168.102.175-80-TCP_QLB {
-    192.168.102.175 80
-}
-
-deny_address_group 192.168.102.175_deny {
-}
-
-virtual_server  group 192.168.102.175-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.175_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.175 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.175 bond1.kni;"
-
-    real_server 192.168.9.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 303 ##############################
-virtual_server_group 192.168.102.204-80-TCP_QLB {
-    192.168.102.204 80
-}
-
-deny_address_group 192.168.102.204_deny {
-}
-
-virtual_server  group 192.168.102.204-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.204_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.204 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.204 bond1.kni;"
-
-    real_server 192.168.31.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 304 ##############################
-virtual_server_group 192.168.101.36-80-TCP_QLB {
-    192.168.101.36 80
-}
-
-deny_address_group 192.168.101.36_deny {
-}
-
-virtual_server  group 192.168.101.36-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.36_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.36 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.36 bond1.kni;"
-
-    real_server 192.168.18.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 305 ##############################
-virtual_server_group 192.168.101.117-80-TCP_QLB {
-    192.168.101.117 80
-}
-
-deny_address_group 192.168.101.117_deny {
-}
-
-virtual_server  group 192.168.101.117-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.117_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.117 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.117 bond1.kni;"
-
-    real_server 192.168.57.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 306 ##############################
-virtual_server_group 192.168.102.108-80-TCP_QLB {
-    192.168.102.108 80
-}
-
-deny_address_group 192.168.102.108_deny {
-}
-
-virtual_server  group 192.168.102.108-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.108_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.108 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.108 bond1.kni;"
-
-    real_server 192.168.45.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 307 ##############################
-virtual_server_group 111.13.235.137-80-TCP_QLB {
-    111.13.235.137 80
-}
-
-deny_address_group 111.13.235.137_deny {
-}
-
-virtual_server  group 111.13.235.137-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.137_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.137 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.137 bond1.kni;"
-
-    real_server 192.168.42.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 308 ##############################
-virtual_server_group 192.168.101.93-80-TCP_QLB {
-    192.168.101.93 80
-}
-
-deny_address_group 192.168.101.93_deny {
-}
-
-virtual_server  group 192.168.101.93-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.93_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.93 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.93 bond1.kni;"
-
-    real_server 192.168.51.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 309 ##############################
-virtual_server_group 192.168.102.18-80-TCP_QLB {
-    192.168.102.18 80
-}
-
-deny_address_group 192.168.102.18_deny {
-}
-
-virtual_server  group 192.168.102.18-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.18_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.18 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.18 bond1.kni;"
-
-    real_server 192.168.59.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 310 ##############################
-virtual_server_group 192.168.101.240-80-TCP_QLB {
-    192.168.101.240 80
-}
-
-deny_address_group 192.168.101.240_deny {
-}
-
-virtual_server  group 192.168.101.240-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.240_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.240 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.240 bond1.kni;"
-
-    real_server 192.168.2.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 311 ##############################
-virtual_server_group 192.168.102.159-80-TCP_QLB {
-    192.168.102.159 80
-}
-
-deny_address_group 192.168.102.159_deny {
-}
-
-virtual_server  group 192.168.102.159-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.159_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.159 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.159 bond1.kni;"
-
-    real_server 192.168.53.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 312 ##############################
-virtual_server_group 111.13.235.96-80-TCP_QLB {
-    111.13.235.96 80
-}
-
-deny_address_group 111.13.235.96_deny {
-}
-
-virtual_server  group 111.13.235.96-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.96_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.96 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.96 bond1.kni;"
-
-    real_server 192.168.5.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 313 ##############################
-virtual_server_group 111.13.235.108-80-TCP_QLB {
-    111.13.235.108 80
-}
-
-deny_address_group 111.13.235.108_deny {
-}
-
-virtual_server  group 111.13.235.108-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.108_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.108 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.108 bond1.kni;"
-
-    real_server 192.168.35.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 314 ##############################
-virtual_server_group 192.168.101.39-80-TCP_QLB {
-    192.168.101.39 80
-}
-
-deny_address_group 192.168.101.39_deny {
-}
-
-virtual_server  group 192.168.101.39-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.39_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.39 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.39 bond1.kni;"
-
-    real_server 192.168.39.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 315 ##############################
-virtual_server_group 192.168.101.86-80-TCP_QLB {
-    192.168.101.86 80
-}
-
-deny_address_group 192.168.101.86_deny {
-}
-
-virtual_server  group 192.168.101.86-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.86_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.86 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.86 bond1.kni;"
-
-    real_server 192.168.1.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 316 ##############################
-virtual_server_group 192.168.101.31-80-TCP_QLB {
-    192.168.101.31 80
-}
-
-deny_address_group 192.168.101.31_deny {
-}
-
-virtual_server  group 192.168.101.31-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.31_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.31 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.31 bond1.kni;"
-
-    real_server 192.168.37.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 317 ##############################
-virtual_server_group 192.168.101.91-80-TCP_QLB {
-    192.168.101.91 80
-}
-
-deny_address_group 192.168.101.91_deny {
-}
-
-virtual_server  group 192.168.101.91-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.91_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.91 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.91 bond1.kni;"
-
-    real_server 192.168.37.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 318 ##############################
-virtual_server_group 192.168.101.242-80-TCP_QLB {
-    192.168.101.242 80
-}
-
-deny_address_group 192.168.101.242_deny {
-}
-
-virtual_server  group 192.168.101.242-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.242_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.242 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.242 bond1.kni;"
-
-    real_server 192.168.50.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 319 ##############################
-virtual_server_group 192.168.101.157-80-TCP_QLB {
-    192.168.101.157 80
-}
-
-deny_address_group 192.168.101.157_deny {
-}
-
-virtual_server  group 192.168.101.157-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.157_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.157 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.157 bond1.kni;"
-
-    real_server 192.168.41.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 320 ##############################
-virtual_server_group 192.168.101.85-80-TCP_QLB {
-    192.168.101.85 80
-}
-
-deny_address_group 192.168.101.85_deny {
-}
-
-virtual_server  group 192.168.101.85-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.85_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.85 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.85 bond1.kni;"
-
-    real_server 192.168.2.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 321 ##############################
-virtual_server_group 192.168.101.182-80-TCP_QLB {
-    192.168.101.182 80
-}
-
-deny_address_group 192.168.101.182_deny {
-}
-
-virtual_server  group 192.168.101.182-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.182_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.182 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.182 bond1.kni;"
-
-    real_server 192.168.29.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 322 ##############################
-virtual_server_group 111.13.235.78-80-TCP_QLB {
-    111.13.235.78 80
-}
-
-deny_address_group 111.13.235.78_deny {
-}
-
-virtual_server  group 111.13.235.78-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.78_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.78 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.78 bond1.kni;"
-
-    real_server 192.168.15.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 323 ##############################
-virtual_server_group 192.168.102.119-80-TCP_QLB {
-    192.168.102.119 80
-}
-
-deny_address_group 192.168.102.119_deny {
-}
-
-virtual_server  group 192.168.102.119-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.119_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.119 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.119 bond1.kni;"
-
-    real_server 192.168.10.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 324 ##############################
-virtual_server_group 111.13.235.156-80-TCP_QLB {
-    111.13.235.156 80
-}
-
-deny_address_group 111.13.235.156_deny {
-}
-
-virtual_server  group 111.13.235.156-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.156_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.156 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.156 bond1.kni;"
-
-    real_server 192.168.45.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 325 ##############################
-virtual_server_group 192.168.102.224-80-TCP_QLB {
-    192.168.102.224 80
-}
-
-deny_address_group 192.168.102.224_deny {
-}
-
-virtual_server  group 192.168.102.224-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.224_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.224 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.224 bond1.kni;"
-
-    real_server 192.168.41.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 326 ##############################
-virtual_server_group 111.13.235.126-80-TCP_QLB {
-    111.13.235.126 80
-}
-
-deny_address_group 111.13.235.126_deny {
-}
-
-virtual_server  group 111.13.235.126-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.126_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.126 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.126 bond1.kni;"
-
-    real_server 192.168.33.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 327 ##############################
-virtual_server_group 111.13.235.170-80-TCP_QLB {
-    111.13.235.170 80
-}
-
-deny_address_group 111.13.235.170_deny {
-}
-
-virtual_server  group 111.13.235.170-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.170_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.170 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.170 bond1.kni;"
-
-    real_server 192.168.18.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 328 ##############################
-virtual_server_group 192.168.101.20-80-TCP_QLB {
-    192.168.101.20 80
-}
-
-deny_address_group 192.168.101.20_deny {
-}
-
-virtual_server  group 192.168.101.20-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.20_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.20 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.20 bond1.kni;"
-
-    real_server 192.168.58.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 329 ##############################
-virtual_server_group 192.168.101.15-80-TCP_QLB {
-    192.168.101.15 80
-}
-
-deny_address_group 192.168.101.15_deny {
-}
-
-virtual_server  group 192.168.101.15-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.15_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.15 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.15 bond1.kni;"
-
-    real_server 192.168.10.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 330 ##############################
-virtual_server_group 192.168.101.143-80-TCP_QLB {
-    192.168.101.143 80
-}
-
-deny_address_group 192.168.101.143_deny {
-}
-
-virtual_server  group 192.168.101.143-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.143_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.143 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.143 bond1.kni;"
-
-    real_server 192.168.30.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 331 ##############################
-virtual_server_group 192.168.102.114-80-TCP_QLB {
-    192.168.102.114 80
-}
-
-deny_address_group 192.168.102.114_deny {
-}
-
-virtual_server  group 192.168.102.114-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.114_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.114 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.114 bond1.kni;"
-
-    real_server 192.168.3.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 332 ##############################
-virtual_server_group 111.13.235.242-80-TCP_QLB {
-    111.13.235.242 80
-}
-
-deny_address_group 111.13.235.242_deny {
-}
-
-virtual_server  group 111.13.235.242-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.242_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.242 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.242 bond1.kni;"
-
-    real_server 192.168.33.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 333 ##############################
-virtual_server_group 192.168.102.242-80-TCP_QLB {
-    192.168.102.242 80
-}
-
-deny_address_group 192.168.102.242_deny {
-}
-
-virtual_server  group 192.168.102.242-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.242_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.242 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.242 bond1.kni;"
-
-    real_server 192.168.39.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 334 ##############################
-virtual_server_group 111.13.235.195-80-TCP_QLB {
-    111.13.235.195 80
-}
-
-deny_address_group 111.13.235.195_deny {
-}
-
-virtual_server  group 111.13.235.195-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.195_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.195 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.195 bond1.kni;"
-
-    real_server 192.168.55.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 335 ##############################
-virtual_server_group 192.168.102.150-80-TCP_QLB {
-    192.168.102.150 80
-}
-
-deny_address_group 192.168.102.150_deny {
-}
-
-virtual_server  group 192.168.102.150-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.150_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.150 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.150 bond1.kni;"
-
-    real_server 192.168.51.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 336 ##############################
-virtual_server_group 192.168.101.8-80-TCP_QLB {
-    192.168.101.8 80
-}
-
-deny_address_group 192.168.101.8_deny {
-}
-
-virtual_server  group 192.168.101.8-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.8_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.8 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.8 bond1.kni;"
-
-    real_server 192.168.58.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 337 ##############################
-virtual_server_group 192.168.102.17-80-TCP_QLB {
-    192.168.102.17 80
-}
-
-deny_address_group 192.168.102.17_deny {
-}
-
-virtual_server  group 192.168.102.17-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.17_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.17 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.17 bond1.kni;"
-
-    real_server 192.168.59.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 338 ##############################
-virtual_server_group 111.13.235.107-80-TCP_QLB {
-    111.13.235.107 80
-}
-
-deny_address_group 111.13.235.107_deny {
-}
-
-virtual_server  group 111.13.235.107-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.107_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.107 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.107 bond1.kni;"
-
-    real_server 192.168.58.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 339 ##############################
-virtual_server_group 192.168.101.229-80-TCP_QLB {
-    192.168.101.229 80
-}
-
-deny_address_group 192.168.101.229_deny {
-}
-
-virtual_server  group 192.168.101.229-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.229_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.229 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.229 bond1.kni;"
-
-    real_server 192.168.58.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 340 ##############################
-virtual_server_group 111.13.235.252-80-TCP_QLB {
-    111.13.235.252 80
-}
-
-deny_address_group 111.13.235.252_deny {
-}
-
-virtual_server  group 111.13.235.252-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.252_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.252 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.252 bond1.kni;"
-
-    real_server 192.168.1.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 341 ##############################
-virtual_server_group 192.168.102.199-80-TCP_QLB {
-    192.168.102.199 80
-}
-
-deny_address_group 192.168.102.199_deny {
-}
-
-virtual_server  group 192.168.102.199-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.199_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.199 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.199 bond1.kni;"
-
-    real_server 192.168.2.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 342 ##############################
-virtual_server_group 111.13.235.236-80-TCP_QLB {
-    111.13.235.236 80
-}
-
-deny_address_group 111.13.235.236_deny {
-}
-
-virtual_server  group 111.13.235.236-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.236_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.236 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.236 bond1.kni;"
-
-    real_server 192.168.23.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 343 ##############################
-virtual_server_group 192.168.102.185-80-TCP_QLB {
-    192.168.102.185 80
-}
-
-deny_address_group 192.168.102.185_deny {
-}
-
-virtual_server  group 192.168.102.185-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.185_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.185 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.185 bond1.kni;"
-
-    real_server 192.168.58.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 344 ##############################
-virtual_server_group 192.168.101.220-80-TCP_QLB {
-    192.168.101.220 80
-}
-
-deny_address_group 192.168.101.220_deny {
-}
-
-virtual_server  group 192.168.101.220-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.220_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.220 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.220 bond1.kni;"
-
-    real_server 192.168.9.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 345 ##############################
-virtual_server_group 111.13.235.105-80-TCP_QLB {
-    111.13.235.105 80
-}
-
-deny_address_group 111.13.235.105_deny {
-}
-
-virtual_server  group 111.13.235.105-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.105_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.105 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.105 bond1.kni;"
-
-    real_server 192.168.11.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 346 ##############################
-virtual_server_group 192.168.101.78-80-TCP_QLB {
-    192.168.101.78 80
-}
-
-deny_address_group 192.168.101.78_deny {
-}
-
-virtual_server  group 192.168.101.78-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.78_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.78 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.78 bond1.kni;"
-
-    real_server 192.168.23.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 347 ##############################
-virtual_server_group 192.168.101.252-80-TCP_QLB {
-    192.168.101.252 80
-}
-
-deny_address_group 192.168.101.252_deny {
-}
-
-virtual_server  group 192.168.101.252-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.252_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.252 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.252 bond1.kni;"
-
-    real_server 192.168.13.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 348 ##############################
-virtual_server_group 192.168.102.3-80-TCP_QLB {
-    192.168.102.3 80
-}
-
-deny_address_group 192.168.102.3_deny {
-}
-
-virtual_server  group 192.168.102.3-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.3_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.3 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.3 bond1.kni;"
-
-    real_server 192.168.55.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 349 ##############################
-virtual_server_group 192.168.101.94-80-TCP_QLB {
-    192.168.101.94 80
-}
-
-deny_address_group 192.168.101.94_deny {
-}
-
-virtual_server  group 192.168.101.94-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.94_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.94 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.94 bond1.kni;"
-
-    real_server 192.168.47.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 350 ##############################
-virtual_server_group 192.168.102.205-80-TCP_QLB {
-    192.168.102.205 80
-}
-
-deny_address_group 192.168.102.205_deny {
-}
-
-virtual_server  group 192.168.102.205-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.205_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.205 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.205 bond1.kni;"
-
-    real_server 192.168.37.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 351 ##############################
-virtual_server_group 192.168.101.231-80-TCP_QLB {
-    192.168.101.231 80
-}
-
-deny_address_group 192.168.101.231_deny {
-}
-
-virtual_server  group 192.168.101.231-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.231_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.231 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.231 bond1.kni;"
-
-    real_server 192.168.13.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 352 ##############################
-virtual_server_group 192.168.102.41-80-TCP_QLB {
-    192.168.102.41 80
-}
-
-deny_address_group 192.168.102.41_deny {
-}
-
-virtual_server  group 192.168.102.41-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.41_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.41 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.41 bond1.kni;"
-
-    real_server 192.168.34.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 353 ##############################
-virtual_server_group 192.168.102.128-80-TCP_QLB {
-    192.168.102.128 80
-}
-
-deny_address_group 192.168.102.128_deny {
-}
-
-virtual_server  group 192.168.102.128-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.128_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.128 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.128 bond1.kni;"
-
-    real_server 192.168.39.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 354 ##############################
-virtual_server_group 192.168.102.98-80-TCP_QLB {
-    192.168.102.98 80
-}
-
-deny_address_group 192.168.102.98_deny {
-}
-
-virtual_server  group 192.168.102.98-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.98_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.98 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.98 bond1.kni;"
-
-    real_server 192.168.5.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 355 ##############################
-virtual_server_group 192.168.101.164-80-TCP_QLB {
-    192.168.101.164 80
-}
-
-deny_address_group 192.168.101.164_deny {
-}
-
-virtual_server  group 192.168.101.164-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.164_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.164 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.164 bond1.kni;"
-
-    real_server 192.168.6.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 356 ##############################
-virtual_server_group 192.168.101.70-80-TCP_QLB {
-    192.168.101.70 80
-}
-
-deny_address_group 192.168.101.70_deny {
-}
-
-virtual_server  group 192.168.101.70-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.70_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.70 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.70 bond1.kni;"
-
-    real_server 192.168.18.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 357 ##############################
-virtual_server_group 192.168.102.207-80-TCP_QLB {
-    192.168.102.207 80
-}
-
-deny_address_group 192.168.102.207_deny {
-}
-
-virtual_server  group 192.168.102.207-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.207_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.207 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.207 bond1.kni;"
-
-    real_server 192.168.47.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 358 ##############################
-virtual_server_group 192.168.101.27-80-TCP_QLB {
-    192.168.101.27 80
-}
-
-deny_address_group 192.168.101.27_deny {
-}
-
-virtual_server  group 192.168.101.27-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.27_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.27 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.27 bond1.kni;"
-
-    real_server 192.168.47.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 359 ##############################
-virtual_server_group 192.168.102.177-80-TCP_QLB {
-    192.168.102.177 80
-}
-
-deny_address_group 192.168.102.177_deny {
-}
-
-virtual_server  group 192.168.102.177-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.177_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.177 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.177 bond1.kni;"
-
-    real_server 192.168.33.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 360 ##############################
-virtual_server_group 192.168.101.148-80-TCP_QLB {
-    192.168.101.148 80
-}
-
-deny_address_group 192.168.101.148_deny {
-}
-
-virtual_server  group 192.168.101.148-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.148_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.148 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.148 bond1.kni;"
-
-    real_server 192.168.41.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 361 ##############################
-virtual_server_group 111.13.235.142-80-TCP_QLB {
-    111.13.235.142 80
-}
-
-deny_address_group 111.13.235.142_deny {
-}
-
-virtual_server  group 111.13.235.142-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.142_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.142 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.142 bond1.kni;"
-
-    real_server 192.168.7.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 362 ##############################
-virtual_server_group 192.168.102.45-80-TCP_QLB {
-    192.168.102.45 80
-}
-
-deny_address_group 192.168.102.45_deny {
-}
-
-virtual_server  group 192.168.102.45-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.45_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.45 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.45 bond1.kni;"
-
-    real_server 192.168.49.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 363 ##############################
-virtual_server_group 192.168.101.102-80-TCP_QLB {
-    192.168.101.102 80
-}
-
-deny_address_group 192.168.101.102_deny {
-}
-
-virtual_server  group 192.168.101.102-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.102_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.102 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.102 bond1.kni;"
-
-    real_server 192.168.31.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 364 ##############################
-virtual_server_group 192.168.101.25-80-TCP_QLB {
-    192.168.101.25 80
-}
-
-deny_address_group 192.168.101.25_deny {
-}
-
-virtual_server  group 192.168.101.25-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.25_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.25 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.25 bond1.kni;"
-
-    real_server 192.168.55.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 365 ##############################
-virtual_server_group 192.168.102.72-80-TCP_QLB {
-    192.168.102.72 80
-}
-
-deny_address_group 192.168.102.72_deny {
-}
-
-virtual_server  group 192.168.102.72-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.72_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.72 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.72 bond1.kni;"
-
-    real_server 192.168.41.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 366 ##############################
-virtual_server_group 192.168.102.172-80-TCP_QLB {
-    192.168.102.172 80
-}
-
-deny_address_group 192.168.102.172_deny {
-}
-
-virtual_server  group 192.168.102.172-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.172_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.172 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.172 bond1.kni;"
-
-    real_server 192.168.34.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 367 ##############################
-virtual_server_group 192.168.101.134-80-TCP_QLB {
-    192.168.101.134 80
-}
-
-deny_address_group 192.168.101.134_deny {
-}
-
-virtual_server  group 192.168.101.134-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.134_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.134 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.134 bond1.kni;"
-
-    real_server 192.168.33.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 368 ##############################
-virtual_server_group 192.168.101.188-80-TCP_QLB {
-    192.168.101.188 80
-}
-
-deny_address_group 192.168.101.188_deny {
-}
-
-virtual_server  group 192.168.101.188-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.188_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.188 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.188 bond1.kni;"
-
-    real_server 192.168.21.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 369 ##############################
-virtual_server_group 192.168.101.76-80-TCP_QLB {
-    192.168.101.76 80
-}
-
-deny_address_group 192.168.101.76_deny {
-}
-
-virtual_server  group 192.168.101.76-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.76_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.76 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.76 bond1.kni;"
-
-    real_server 192.168.38.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 370 ##############################
-virtual_server_group 111.13.235.239-80-TCP_QLB {
-    111.13.235.239 80
-}
-
-deny_address_group 111.13.235.239_deny {
-}
-
-virtual_server  group 111.13.235.239-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.239_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.239 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.239 bond1.kni;"
-
-    real_server 192.168.18.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 371 ##############################
-virtual_server_group 192.168.102.218-80-TCP_QLB {
-    192.168.102.218 80
-}
-
-deny_address_group 192.168.102.218_deny {
-}
-
-virtual_server  group 192.168.102.218-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.218_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.218 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.218 bond1.kni;"
-
-    real_server 192.168.9.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 372 ##############################
-virtual_server_group 192.168.102.240-80-TCP_QLB {
-    192.168.102.240 80
-}
-
-deny_address_group 192.168.102.240_deny {
-}
-
-virtual_server  group 192.168.102.240-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.240_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.240 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.240 bond1.kni;"
-
-    real_server 192.168.26.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 373 ##############################
-virtual_server_group 111.13.235.208-80-TCP_QLB {
-    111.13.235.208 80
-}
-
-deny_address_group 111.13.235.208_deny {
-}
-
-virtual_server  group 111.13.235.208-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.208_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.208 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.208 bond1.kni;"
-
-    real_server 192.168.27.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 374 ##############################
-virtual_server_group 111.13.235.84-80-TCP_QLB {
-    111.13.235.84 80
-}
-
-deny_address_group 111.13.235.84_deny {
-}
-
-virtual_server  group 111.13.235.84-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.84_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.84 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.84 bond1.kni;"
-
-    real_server 192.168.6.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 375 ##############################
-virtual_server_group 111.13.235.93-80-TCP_QLB {
-    111.13.235.93 80
-}
-
-deny_address_group 111.13.235.93_deny {
-}
-
-virtual_server  group 111.13.235.93-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.93_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.93 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.93 bond1.kni;"
-
-    real_server 192.168.45.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 376 ##############################
-virtual_server_group 192.168.101.179-80-TCP_QLB {
-    192.168.101.179 80
-}
-
-deny_address_group 192.168.101.179_deny {
-}
-
-virtual_server  group 192.168.101.179-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.179_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.179 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.179 bond1.kni;"
-
-    real_server 192.168.42.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 377 ##############################
-virtual_server_group 192.168.101.235-80-TCP_QLB {
-    192.168.101.235 80
-}
-
-deny_address_group 192.168.101.235_deny {
-}
-
-virtual_server  group 192.168.101.235-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.235_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.235 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.235 bond1.kni;"
-
-    real_server 192.168.11.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 378 ##############################
-virtual_server_group 192.168.101.250-80-TCP_QLB {
-    192.168.101.250 80
-}
-
-deny_address_group 192.168.101.250_deny {
-}
-
-virtual_server  group 192.168.101.250-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.250_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.250 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.250 bond1.kni;"
-
-    real_server 192.168.18.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 379 ##############################
-virtual_server_group 192.168.102.26-80-TCP_QLB {
-    192.168.102.26 80
-}
-
-deny_address_group 192.168.102.26_deny {
-}
-
-virtual_server  group 192.168.102.26-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.26_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.26 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.26 bond1.kni;"
-
-    real_server 192.168.21.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 380 ##############################
-virtual_server_group 111.13.235.217-80-TCP_QLB {
-    111.13.235.217 80
-}
-
-deny_address_group 111.13.235.217_deny {
-}
-
-virtual_server  group 111.13.235.217-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.217_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.217 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.217 bond1.kni;"
-
-    real_server 192.168.30.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 381 ##############################
-virtual_server_group 192.168.101.132-80-TCP_QLB {
-    192.168.101.132 80
-}
-
-deny_address_group 192.168.101.132_deny {
-}
-
-virtual_server  group 192.168.101.132-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.132_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.132 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.132 bond1.kni;"
-
-    real_server 192.168.9.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 382 ##############################
-virtual_server_group 192.168.101.32-80-TCP_QLB {
-    192.168.101.32 80
-}
-
-deny_address_group 192.168.101.32_deny {
-}
-
-virtual_server  group 192.168.101.32-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.32_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.32 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.32 bond1.kni;"
-
-    real_server 192.168.42.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 383 ##############################
-virtual_server_group 111.13.235.148-80-TCP_QLB {
-    111.13.235.148 80
-}
-
-deny_address_group 111.13.235.148_deny {
-}
-
-virtual_server  group 111.13.235.148-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.148_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.148 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.148 bond1.kni;"
-
-    real_server 192.168.42.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 384 ##############################
-virtual_server_group 192.168.102.200-80-TCP_QLB {
-    192.168.102.200 80
-}
-
-deny_address_group 192.168.102.200_deny {
-}
-
-virtual_server  group 192.168.102.200-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.200_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.200 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.200 bond1.kni;"
-
-    real_server 192.168.34.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 385 ##############################
-virtual_server_group 192.168.102.197-80-TCP_QLB {
-    192.168.102.197 80
-}
-
-deny_address_group 192.168.102.197_deny {
-}
-
-virtual_server  group 192.168.102.197-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.197_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.197 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.197 bond1.kni;"
-
-    real_server 192.168.47.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 386 ##############################
-virtual_server_group 192.168.102.43-80-TCP_QLB {
-    192.168.102.43 80
-}
-
-deny_address_group 192.168.102.43_deny {
-}
-
-virtual_server  group 192.168.102.43-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.43_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.43 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.43 bond1.kni;"
-
-    real_server 192.168.55.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 387 ##############################
-virtual_server_group 192.168.102.221-80-TCP_QLB {
-    192.168.102.221 80
-}
-
-deny_address_group 192.168.102.221_deny {
-}
-
-virtual_server  group 192.168.102.221-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.221_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.221 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.221 bond1.kni;"
-
-    real_server 192.168.55.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 388 ##############################
-virtual_server_group 111.13.235.159-80-TCP_QLB {
-    111.13.235.159 80
-}
-
-deny_address_group 111.13.235.159_deny {
-}
-
-virtual_server  group 111.13.235.159-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.159_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.159 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.159 bond1.kni;"
-
-    real_server 192.168.1.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 389 ##############################
-virtual_server_group 192.168.102.75-80-TCP_QLB {
-    192.168.102.75 80
-}
-
-deny_address_group 192.168.102.75_deny {
-}
-
-virtual_server  group 192.168.102.75-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.75_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.75 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.75 bond1.kni;"
-
-    real_server 192.168.14.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 390 ##############################
-virtual_server_group 111.13.235.193-80-TCP_QLB {
-    111.13.235.193 80
-}
-
-deny_address_group 111.13.235.193_deny {
-}
-
-virtual_server  group 111.13.235.193-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.193_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.193 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.193 bond1.kni;"
-
-    real_server 192.168.26.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 391 ##############################
-virtual_server_group 192.168.101.218-80-TCP_QLB {
-    192.168.101.218 80
-}
-
-deny_address_group 192.168.101.218_deny {
-}
-
-virtual_server  group 192.168.101.218-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.218_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.218 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.218 bond1.kni;"
-
-    real_server 192.168.38.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 392 ##############################
-virtual_server_group 192.168.101.187-80-TCP_QLB {
-    192.168.101.187 80
-}
-
-deny_address_group 192.168.101.187_deny {
-}
-
-virtual_server  group 192.168.101.187-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.187_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.187 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.187 bond1.kni;"
-
-    real_server 192.168.1.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 393 ##############################
-virtual_server_group 192.168.102.206-80-TCP_QLB {
-    192.168.102.206 80
-}
-
-deny_address_group 192.168.102.206_deny {
-}
-
-virtual_server  group 192.168.102.206-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.206_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.206 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.206 bond1.kni;"
-
-    real_server 192.168.59.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 394 ##############################
-virtual_server_group 192.168.102.86-80-TCP_QLB {
-    192.168.102.86 80
-}
-
-deny_address_group 192.168.102.86_deny {
-}
-
-virtual_server  group 192.168.102.86-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.86_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.86 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.86 bond1.kni;"
-
-    real_server 192.168.27.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 395 ##############################
-virtual_server_group 192.168.102.186-80-TCP_QLB {
-    192.168.102.186 80
-}
-
-deny_address_group 192.168.102.186_deny {
-}
-
-virtual_server  group 192.168.102.186-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.186_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.186 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.186 bond1.kni;"
-
-    real_server 192.168.41.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 396 ##############################
-virtual_server_group 192.168.102.116-80-TCP_QLB {
-    192.168.102.116 80
-}
-
-deny_address_group 192.168.102.116_deny {
-}
-
-virtual_server  group 192.168.102.116-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.116_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.116 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.116 bond1.kni;"
-
-    real_server 192.168.59.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 397 ##############################
-virtual_server_group 111.13.235.151-80-TCP_QLB {
-    111.13.235.151 80
-}
-
-deny_address_group 111.13.235.151_deny {
-}
-
-virtual_server  group 111.13.235.151-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.151_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.151 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.151 bond1.kni;"
-
-    real_server 192.168.31.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 398 ##############################
-virtual_server_group 192.168.101.100-80-TCP_QLB {
-    192.168.101.100 80
-}
-
-deny_address_group 192.168.101.100_deny {
-}
-
-virtual_server  group 192.168.101.100-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.100_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.100 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.100 bond1.kni;"
-
-    real_server 192.168.49.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 399 ##############################
-virtual_server_group 192.168.101.224-80-TCP_QLB {
-    192.168.101.224 80
-}
-
-deny_address_group 192.168.101.224_deny {
-}
-
-virtual_server  group 192.168.101.224-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.224_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.224 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.224 bond1.kni;"
-
-    real_server 192.168.50.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 400 ##############################
-virtual_server_group 192.168.102.174-80-TCP_QLB {
-    192.168.102.174 80
-}
-
-deny_address_group 192.168.102.174_deny {
-}
-
-virtual_server  group 192.168.102.174-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.174_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.174 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.174 bond1.kni;"
-
-    real_server 192.168.9.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 401 ##############################
-virtual_server_group 111.13.235.115-80-TCP_QLB {
-    111.13.235.115 80
-}
-
-deny_address_group 111.13.235.115_deny {
-}
-
-virtual_server  group 111.13.235.115-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.115_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.115 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.115 bond1.kni;"
-
-    real_server 192.168.39.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 402 ##############################
-virtual_server_group 192.168.101.92-80-TCP_QLB {
-    192.168.101.92 80
-}
-
-deny_address_group 192.168.101.92_deny {
-}
-
-virtual_server  group 192.168.101.92-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.92_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.92 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.92 bond1.kni;"
-
-    real_server 192.168.54.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 403 ##############################
-virtual_server_group 111.13.235.171-80-TCP_QLB {
-    111.13.235.171 80
-}
-
-deny_address_group 111.13.235.171_deny {
-}
-
-virtual_server  group 111.13.235.171-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.171_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.171 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.171 bond1.kni;"
-
-    real_server 192.168.6.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 404 ##############################
-virtual_server_group 111.13.235.215-80-TCP_QLB {
-    111.13.235.215 80
-}
-
-deny_address_group 111.13.235.215_deny {
-}
-
-virtual_server  group 111.13.235.215-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.215_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.215 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.215 bond1.kni;"
-
-    real_server 192.168.46.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 405 ##############################
-virtual_server_group 192.168.102.232-80-TCP_QLB {
-    192.168.102.232 80
-}
-
-deny_address_group 192.168.102.232_deny {
-}
-
-virtual_server  group 192.168.102.232-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.232_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.232 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.232 bond1.kni;"
-
-    real_server 192.168.23.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 406 ##############################
-virtual_server_group 192.168.101.230-80-TCP_QLB {
-    192.168.101.230 80
-}
-
-deny_address_group 192.168.101.230_deny {
-}
-
-virtual_server  group 192.168.101.230-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.230_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.230 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.230 bond1.kni;"
-
-    real_server 192.168.50.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 407 ##############################
-virtual_server_group 192.168.102.24-80-TCP_QLB {
-    192.168.102.24 80
-}
-
-deny_address_group 192.168.102.24_deny {
-}
-
-virtual_server  group 192.168.102.24-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.24_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.24 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.24 bond1.kni;"
-
-    real_server 192.168.10.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 408 ##############################
-virtual_server_group 192.168.102.180-80-TCP_QLB {
-    192.168.102.180 80
-}
-
-deny_address_group 192.168.102.180_deny {
-}
-
-virtual_server  group 192.168.102.180-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.180_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.180 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.180 bond1.kni;"
-
-    real_server 192.168.30.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 409 ##############################
-virtual_server_group 192.168.101.52-80-TCP_QLB {
-    192.168.101.52 80
-}
-
-deny_address_group 192.168.101.52_deny {
-}
-
-virtual_server  group 192.168.101.52-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.52_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.52 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.52 bond1.kni;"
-
-    real_server 192.168.17.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 410 ##############################
-virtual_server_group 111.13.235.207-80-TCP_QLB {
-    111.13.235.207 80
-}
-
-deny_address_group 111.13.235.207_deny {
-}
-
-virtual_server  group 111.13.235.207-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.207_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.207 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.207 bond1.kni;"
-
-    real_server 192.168.37.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 411 ##############################
-virtual_server_group 192.168.101.214-80-TCP_QLB {
-    192.168.101.214 80
-}
-
-deny_address_group 192.168.101.214_deny {
-}
-
-virtual_server  group 192.168.101.214-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.214_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.214 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.214 bond1.kni;"
-
-    real_server 192.168.50.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 412 ##############################
-virtual_server_group 111.13.235.234-80-TCP_QLB {
-    111.13.235.234 80
-}
-
-deny_address_group 111.13.235.234_deny {
-}
-
-virtual_server  group 111.13.235.234-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.234_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.234 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.234 bond1.kni;"
-
-    real_server 192.168.53.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 413 ##############################
-virtual_server_group 192.168.101.44-80-TCP_QLB {
-    192.168.101.44 80
-}
-
-deny_address_group 192.168.101.44_deny {
-}
-
-virtual_server  group 192.168.101.44-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.44_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.44 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.44 bond1.kni;"
-
-    real_server 192.168.49.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 414 ##############################
-virtual_server_group 192.168.101.127-80-TCP_QLB {
-    192.168.101.127 80
-}
-
-deny_address_group 192.168.101.127_deny {
-}
-
-virtual_server  group 192.168.101.127-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.127_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.127 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.127 bond1.kni;"
-
-    real_server 192.168.15.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 415 ##############################
-virtual_server_group 111.13.235.150-80-TCP_QLB {
-    111.13.235.150 80
-}
-
-deny_address_group 111.13.235.150_deny {
-}
-
-virtual_server  group 111.13.235.150-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.150_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.150 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.150 bond1.kni;"
-
-    real_server 192.168.33.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 416 ##############################
-virtual_server_group 192.168.102.230-80-TCP_QLB {
-    192.168.102.230 80
-}
-
-deny_address_group 192.168.102.230_deny {
-}
-
-virtual_server  group 192.168.102.230-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.230_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.230 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.230 bond1.kni;"
-
-    real_server 192.168.10.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 417 ##############################
-virtual_server_group 192.168.102.39-80-TCP_QLB {
-    192.168.102.39 80
-}
-
-deny_address_group 192.168.102.39_deny {
-}
-
-virtual_server  group 192.168.102.39-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.39_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.39 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.39 bond1.kni;"
-
-    real_server 192.168.31.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 418 ##############################
-virtual_server_group 111.13.235.147-80-TCP_QLB {
-    111.13.235.147 80
-}
-
-deny_address_group 111.13.235.147_deny {
-}
-
-virtual_server  group 111.13.235.147-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.147_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.147 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.147 bond1.kni;"
-
-    real_server 192.168.27.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 419 ##############################
-virtual_server_group 192.168.102.223-80-TCP_QLB {
-    192.168.102.223 80
-}
-
-deny_address_group 192.168.102.223_deny {
-}
-
-virtual_server  group 192.168.102.223-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.223_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.223 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.223 bond1.kni;"
-
-    real_server 192.168.47.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 420 ##############################
-virtual_server_group 192.168.101.129-80-TCP_QLB {
-    192.168.101.129 80
-}
-
-deny_address_group 192.168.101.129_deny {
-}
-
-virtual_server  group 192.168.101.129-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.129_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.129 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.129 bond1.kni;"
-
-    real_server 192.168.49.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 421 ##############################
-virtual_server_group 192.168.102.23-80-TCP_QLB {
-    192.168.102.23 80
-}
-
-deny_address_group 192.168.102.23_deny {
-}
-
-virtual_server  group 192.168.102.23-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.23_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.23 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.23 bond1.kni;"
-
-    real_server 192.168.10.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 422 ##############################
-virtual_server_group 111.13.235.98-80-TCP_QLB {
-    111.13.235.98 80
-}
-
-deny_address_group 111.13.235.98_deny {
-}
-
-virtual_server  group 111.13.235.98-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.98_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.98 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.98 bond1.kni;"
-
-    real_server 192.168.10.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 423 ##############################
-virtual_server_group 192.168.102.90-80-TCP_QLB {
-    192.168.102.90 80
-}
-
-deny_address_group 192.168.102.90_deny {
-}
-
-virtual_server  group 192.168.102.90-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.90_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.90 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.90 bond1.kni;"
-
-    real_server 192.168.45.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 424 ##############################
-virtual_server_group 192.168.102.250-80-TCP_QLB {
-    192.168.102.250 80
-}
-
-deny_address_group 192.168.102.250_deny {
-}
-
-virtual_server  group 192.168.102.250-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.250_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.250 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.250 bond1.kni;"
-
-    real_server 192.168.2.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 425 ##############################
-virtual_server_group 192.168.102.83-80-TCP_QLB {
-    192.168.102.83 80
-}
-
-deny_address_group 192.168.102.83_deny {
-}
-
-virtual_server  group 192.168.102.83-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.83_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.83 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.83 bond1.kni;"
-
-    real_server 192.168.45.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 426 ##############################
-virtual_server_group 111.13.235.169-80-TCP_QLB {
-    111.13.235.169 80
-}
-
-deny_address_group 111.13.235.169_deny {
-}
-
-virtual_server  group 111.13.235.169-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.169_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.169 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.169 bond1.kni;"
-
-    real_server 192.168.11.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 427 ##############################
-virtual_server_group 111.13.235.86-80-TCP_QLB {
-    111.13.235.86 80
-}
-
-deny_address_group 111.13.235.86_deny {
-}
-
-virtual_server  group 111.13.235.86-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.86_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.86 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.86 bond1.kni;"
-
-    real_server 192.168.6.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 428 ##############################
-virtual_server_group 111.13.235.91-80-TCP_QLB {
-    111.13.235.91 80
-}
-
-deny_address_group 111.13.235.91_deny {
-}
-
-virtual_server  group 111.13.235.91-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.91_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.91 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.91 bond1.kni;"
-
-    real_server 192.168.23.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 429 ##############################
-virtual_server_group 192.168.101.223-80-TCP_QLB {
-    192.168.101.223 80
-}
-
-deny_address_group 192.168.101.223_deny {
-}
-
-virtual_server  group 192.168.101.223-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.223_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.223 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.223 bond1.kni;"
-
-    real_server 192.168.31.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 430 ##############################
-virtual_server_group 111.13.235.75-80-TCP_QLB {
-    111.13.235.75 80
-}
-
-deny_address_group 111.13.235.75_deny {
-}
-
-virtual_server  group 111.13.235.75-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.75_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.75 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.75 bond1.kni;"
-
-    real_server 192.168.41.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 431 ##############################
-virtual_server_group 192.168.101.28-80-TCP_QLB {
-    192.168.101.28 80
-}
-
-deny_address_group 192.168.101.28_deny {
-}
-
-virtual_server  group 192.168.101.28-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.28_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.28 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.28 bond1.kni;"
-
-    real_server 192.168.51.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 432 ##############################
-virtual_server_group 192.168.101.9-80-TCP_QLB {
-    192.168.101.9 80
-}
-
-deny_address_group 192.168.101.9_deny {
-}
-
-virtual_server  group 192.168.101.9-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.9_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.9 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.9 bond1.kni;"
-
-    real_server 192.168.21.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 433 ##############################
-virtual_server_group 111.13.235.94-80-TCP_QLB {
-    111.13.235.94 80
-}
-
-deny_address_group 111.13.235.94_deny {
-}
-
-virtual_server  group 111.13.235.94-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.94_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.94 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.94 bond1.kni;"
-
-    real_server 192.168.50.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 434 ##############################
-virtual_server_group 192.168.102.25-80-TCP_QLB {
-    192.168.102.25 80
-}
-
-deny_address_group 192.168.102.25_deny {
-}
-
-virtual_server  group 192.168.102.25-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.25_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.25 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.25 bond1.kni;"
-
-    real_server 192.168.9.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 435 ##############################
-virtual_server_group 192.168.101.90-80-TCP_QLB {
-    192.168.101.90 80
-}
-
-deny_address_group 192.168.101.90_deny {
-}
-
-virtual_server  group 192.168.101.90-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.90_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.90 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.90 bond1.kni;"
-
-    real_server 192.168.38.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 436 ##############################
-virtual_server_group 111.13.235.77-80-TCP_QLB {
-    111.13.235.77 80
-}
-
-deny_address_group 111.13.235.77_deny {
-}
-
-virtual_server  group 111.13.235.77-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.77_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.77 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.77 bond1.kni;"
-
-    real_server 192.168.49.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 437 ##############################
-virtual_server_group 192.168.101.170-80-TCP_QLB {
-    192.168.101.170 80
-}
-
-deny_address_group 192.168.101.170_deny {
-}
-
-virtual_server  group 192.168.101.170-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.170_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.170 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.170 bond1.kni;"
-
-    real_server 192.168.57.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 438 ##############################
-virtual_server_group 192.168.101.118-80-TCP_QLB {
-    192.168.101.118 80
-}
-
-deny_address_group 192.168.101.118_deny {
-}
-
-virtual_server  group 192.168.101.118-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.118_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.118 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.118 bond1.kni;"
-
-    real_server 192.168.41.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 439 ##############################
-virtual_server_group 192.168.102.52-80-TCP_QLB {
-    192.168.102.52 80
-}
-
-deny_address_group 192.168.102.52_deny {
-}
-
-virtual_server  group 192.168.102.52-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.52_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.52 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.52 bond1.kni;"
-
-    real_server 192.168.19.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 440 ##############################
-virtual_server_group 192.168.101.75-80-TCP_QLB {
-    192.168.101.75 80
-}
-
-deny_address_group 192.168.101.75_deny {
-}
-
-virtual_server  group 192.168.101.75-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.75_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.75 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.75 bond1.kni;"
-
-    real_server 192.168.33.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 441 ##############################
-virtual_server_group 192.168.101.185-80-TCP_QLB {
-    192.168.101.185 80
-}
-
-deny_address_group 192.168.101.185_deny {
-}
-
-virtual_server  group 192.168.101.185-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.185_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.185 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.185 bond1.kni;"
-
-    real_server 192.168.55.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 442 ##############################
-virtual_server_group 192.168.102.103-80-TCP_QLB {
-    192.168.102.103 80
-}
-
-deny_address_group 192.168.102.103_deny {
-}
-
-virtual_server  group 192.168.102.103-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.103_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.103 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.103 bond1.kni;"
-
-    real_server 192.168.37.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 443 ##############################
-virtual_server_group 192.168.102.71-80-TCP_QLB {
-    192.168.102.71 80
-}
-
-deny_address_group 192.168.102.71_deny {
-}
-
-virtual_server  group 192.168.102.71-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.71_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.71 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.71 bond1.kni;"
-
-    real_server 192.168.50.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 444 ##############################
-virtual_server_group 192.168.102.84-80-TCP_QLB {
-    192.168.102.84 80
-}
-
-deny_address_group 192.168.102.84_deny {
-}
-
-virtual_server  group 192.168.102.84-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.84_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.84 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.84 bond1.kni;"
-
-    real_server 192.168.55.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 445 ##############################
-virtual_server_group 192.168.101.21-80-TCP_QLB {
-    192.168.101.21 80
-}
-
-deny_address_group 192.168.101.21_deny {
-}
-
-virtual_server  group 192.168.101.21-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.21_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.21 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.21 bond1.kni;"
-
-    real_server 192.168.39.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 446 ##############################
-virtual_server_group 111.13.235.158-80-TCP_QLB {
-    111.13.235.158 80
-}
-
-deny_address_group 111.13.235.158_deny {
-}
-
-virtual_server  group 111.13.235.158-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.158_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.158 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.158 bond1.kni;"
-
-    real_server 192.168.49.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 447 ##############################
-virtual_server_group 111.13.235.178-80-TCP_QLB {
-    111.13.235.178 80
-}
-
-deny_address_group 111.13.235.178_deny {
-}
-
-virtual_server  group 111.13.235.178-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.178_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.178 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.178 bond1.kni;"
-
-    real_server 192.168.33.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 448 ##############################
-virtual_server_group 192.168.102.181-80-TCP_QLB {
-    192.168.102.181 80
-}
-
-deny_address_group 192.168.102.181_deny {
-}
-
-virtual_server  group 192.168.102.181-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.181_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.181 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.181 bond1.kni;"
-
-    real_server 192.168.14.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 449 ##############################
-virtual_server_group 192.168.102.79-80-TCP_QLB {
-    192.168.102.79 80
-}
-
-deny_address_group 192.168.102.79_deny {
-}
-
-virtual_server  group 192.168.102.79-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.79_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.79 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.79 bond1.kni;"
-
-    real_server 192.168.27.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 450 ##############################
-virtual_server_group 192.168.101.137-80-TCP_QLB {
-    192.168.101.137 80
-}
-
-deny_address_group 192.168.101.137_deny {
-}
-
-virtual_server  group 192.168.101.137-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.137_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.137 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.137 bond1.kni;"
-
-    real_server 192.168.25.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 451 ##############################
-virtual_server_group 192.168.102.133-80-TCP_QLB {
-    192.168.102.133 80
-}
-
-deny_address_group 192.168.102.133_deny {
-}
-
-virtual_server  group 192.168.102.133-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.133_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.133 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.133 bond1.kni;"
-
-    real_server 192.168.37.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 452 ##############################
-virtual_server_group 192.168.102.203-80-TCP_QLB {
-    192.168.102.203 80
-}
-
-deny_address_group 192.168.102.203_deny {
-}
-
-virtual_server  group 192.168.102.203-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.203_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.203 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.203 bond1.kni;"
-
-    real_server 192.168.2.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 453 ##############################
-virtual_server_group 192.168.102.113-80-TCP_QLB {
-    192.168.102.113 80
-}
-
-deny_address_group 192.168.102.113_deny {
-}
-
-virtual_server  group 192.168.102.113-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.113_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.113 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.113 bond1.kni;"
-
-    real_server 192.168.34.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 454 ##############################
-virtual_server_group 192.168.102.162-80-TCP_QLB {
-    192.168.102.162 80
-}
-
-deny_address_group 192.168.102.162_deny {
-}
-
-virtual_server  group 192.168.102.162-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.162_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.162 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.162 bond1.kni;"
-
-    real_server 192.168.41.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 455 ##############################
-virtual_server_group 192.168.102.157-80-TCP_QLB {
-    192.168.102.157 80
-}
-
-deny_address_group 192.168.102.157_deny {
-}
-
-virtual_server  group 192.168.102.157-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.157_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.157 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.157 bond1.kni;"
-
-    real_server 192.168.51.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 456 ##############################
-virtual_server_group 192.168.101.221-80-TCP_QLB {
-    192.168.101.221 80
-}
-
-deny_address_group 192.168.101.221_deny {
-}
-
-virtual_server  group 192.168.101.221-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.221_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.221 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.221 bond1.kni;"
-
-    real_server 192.168.25.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 457 ##############################
-virtual_server_group 192.168.102.238-80-TCP_QLB {
-    192.168.102.238 80
-}
-
-deny_address_group 192.168.102.238_deny {
-}
-
-virtual_server  group 192.168.102.238-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.238_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.238 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.238 bond1.kni;"
-
-    real_server 192.168.18.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 458 ##############################
-virtual_server_group 111.13.235.92-80-TCP_QLB {
-    111.13.235.92 80
-}
-
-deny_address_group 111.13.235.92_deny {
-}
-
-virtual_server  group 111.13.235.92-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.92_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.92 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.92 bond1.kni;"
-
-    real_server 192.168.41.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 459 ##############################
-virtual_server_group 192.168.101.163-80-TCP_QLB {
-    192.168.101.163 80
-}
-
-deny_address_group 192.168.101.163_deny {
-}
-
-virtual_server  group 192.168.101.163-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.163_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.163 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.163 bond1.kni;"
-
-    real_server 192.168.18.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 460 ##############################
-virtual_server_group 192.168.101.212-80-TCP_QLB {
-    192.168.101.212 80
-}
-
-deny_address_group 192.168.101.212_deny {
-}
-
-virtual_server  group 192.168.101.212-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.212_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.212 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.212 bond1.kni;"
-
-    real_server 192.168.58.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 461 ##############################
-virtual_server_group 192.168.101.46-80-TCP_QLB {
-    192.168.101.46 80
-}
-
-deny_address_group 192.168.101.46_deny {
-}
-
-virtual_server  group 192.168.101.46-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.46_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.46 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.46 bond1.kni;"
-
-    real_server 192.168.43.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 462 ##############################
-virtual_server_group 192.168.101.33-80-TCP_QLB {
-    192.168.101.33 80
-}
-
-deny_address_group 192.168.101.33_deny {
-}
-
-virtual_server  group 192.168.101.33-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.33_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.33 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.33 bond1.kni;"
-
-    real_server 192.168.39.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 463 ##############################
-virtual_server_group 192.168.101.12-80-TCP_QLB {
-    192.168.101.12 80
-}
-
-deny_address_group 192.168.101.12_deny {
-}
-
-virtual_server  group 192.168.101.12-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.12_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.12 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.12 bond1.kni;"
-
-    real_server 192.168.2.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 464 ##############################
-virtual_server_group 111.13.235.145-80-TCP_QLB {
-    111.13.235.145 80
-}
-
-deny_address_group 111.13.235.145_deny {
-}
-
-virtual_server  group 111.13.235.145-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.145_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.145 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.145 bond1.kni;"
-
-    real_server 192.168.38.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 465 ##############################
-virtual_server_group 192.168.102.21-80-TCP_QLB {
-    192.168.102.21 80
-}
-
-deny_address_group 192.168.102.21_deny {
-}
-
-virtual_server  group 192.168.102.21-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.21_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.21 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.21 bond1.kni;"
-
-    real_server 192.168.34.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 466 ##############################
-virtual_server_group 192.168.101.239-80-TCP_QLB {
-    192.168.101.239 80
-}
-
-deny_address_group 192.168.101.239_deny {
-}
-
-virtual_server  group 192.168.101.239-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.239_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.239 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.239 bond1.kni;"
-
-    real_server 192.168.19.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 467 ##############################
-virtual_server_group 192.168.102.66-80-TCP_QLB {
-    192.168.102.66 80
-}
-
-deny_address_group 192.168.102.66_deny {
-}
-
-virtual_server  group 192.168.102.66-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.66_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.66 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.66 bond1.kni;"
-
-    real_server 192.168.34.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 468 ##############################
-virtual_server_group 111.13.235.255-80-TCP_QLB {
-    111.13.235.255 80
-}
-
-deny_address_group 111.13.235.255_deny {
-}
-
-virtual_server  group 111.13.235.255-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.255_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.255 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.255 bond1.kni;"
-
-    real_server 192.168.33.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 469 ##############################
-virtual_server_group 192.168.101.171-80-TCP_QLB {
-    192.168.101.171 80
-}
-
-deny_address_group 192.168.101.171_deny {
-}
-
-virtual_server  group 192.168.101.171-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.171_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.171 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.171 bond1.kni;"
-
-    real_server 192.168.5.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 470 ##############################
-virtual_server_group 111.13.235.121-80-TCP_QLB {
-    111.13.235.121 80
-}
-
-deny_address_group 111.13.235.121_deny {
-}
-
-virtual_server  group 111.13.235.121-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.121_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.121 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.121 bond1.kni;"
-
-    real_server 192.168.26.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 471 ##############################
-virtual_server_group 192.168.102.120-80-TCP_QLB {
-    192.168.102.120 80
-}
-
-deny_address_group 192.168.102.120_deny {
-}
-
-virtual_server  group 192.168.102.120-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.120_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.120 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.120 bond1.kni;"
-
-    real_server 192.168.21.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 472 ##############################
-virtual_server_group 192.168.102.57-80-TCP_QLB {
-    192.168.102.57 80
-}
-
-deny_address_group 192.168.102.57_deny {
-}
-
-virtual_server  group 192.168.102.57-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.57_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.57 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.57 bond1.kni;"
-
-    real_server 192.168.21.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 473 ##############################
-virtual_server_group 192.168.102.81-80-TCP_QLB {
-    192.168.102.81 80
-}
-
-deny_address_group 192.168.102.81_deny {
-}
-
-virtual_server  group 192.168.102.81-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.81_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.81 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.81 bond1.kni;"
-
-    real_server 192.168.47.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 474 ##############################
-virtual_server_group 192.168.102.252-80-TCP_QLB {
-    192.168.102.252 80
-}
-
-deny_address_group 192.168.102.252_deny {
-}
-
-virtual_server  group 192.168.102.252-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.252_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.252 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.252 bond1.kni;"
-
-    real_server 192.168.29.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 475 ##############################
-virtual_server_group 192.168.102.220-80-TCP_QLB {
-    192.168.102.220 80
-}
-
-deny_address_group 192.168.102.220_deny {
-}
-
-virtual_server  group 192.168.102.220-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.220_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.220 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.220 bond1.kni;"
-
-    real_server 192.168.34.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 476 ##############################
-virtual_server_group 111.13.235.140-80-TCP_QLB {
-    111.13.235.140 80
-}
-
-deny_address_group 111.13.235.140_deny {
-}
-
-virtual_server  group 111.13.235.140-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.140_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.140 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.140 bond1.kni;"
-
-    real_server 192.168.23.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 477 ##############################
-virtual_server_group 192.168.102.134-80-TCP_QLB {
-    192.168.102.134 80
-}
-
-deny_address_group 192.168.102.134_deny {
-}
-
-virtual_server  group 192.168.102.134-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.134_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.134 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.134 bond1.kni;"
-
-    real_server 192.168.30.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 478 ##############################
-virtual_server_group 192.168.102.73-80-TCP_QLB {
-    192.168.102.73 80
-}
-
-deny_address_group 192.168.102.73_deny {
-}
-
-virtual_server  group 192.168.102.73-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.73_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.73 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.73 bond1.kni;"
-
-    real_server 192.168.49.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 479 ##############################
-virtual_server_group 111.13.235.250-80-TCP_QLB {
-    111.13.235.250 80
-}
-
-deny_address_group 111.13.235.250_deny {
-}
-
-virtual_server  group 111.13.235.250-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.250_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.250 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.250 bond1.kni;"
-
-    real_server 192.168.19.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 480 ##############################
-virtual_server_group 192.168.101.246-80-TCP_QLB {
-    192.168.101.246 80
-}
-
-deny_address_group 192.168.101.246_deny {
-}
-
-virtual_server  group 192.168.101.246-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.246_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.246 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.246 bond1.kni;"
-
-    real_server 192.168.13.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 481 ##############################
-virtual_server_group 111.13.235.123-80-TCP_QLB {
-    111.13.235.123 80
-}
-
-deny_address_group 111.13.235.123_deny {
-}
-
-virtual_server  group 111.13.235.123-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.123_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.123 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.123 bond1.kni;"
-
-    real_server 192.168.51.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 482 ##############################
-virtual_server_group 111.13.235.112-80-TCP_QLB {
-    111.13.235.112 80
-}
-
-deny_address_group 111.13.235.112_deny {
-}
-
-virtual_server  group 111.13.235.112-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.112_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.112 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.112 bond1.kni;"
-
-    real_server 192.168.27.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 483 ##############################
-virtual_server_group 192.168.102.20-80-TCP_QLB {
-    192.168.102.20 80
-}
-
-deny_address_group 192.168.102.20_deny {
-}
-
-virtual_server  group 192.168.102.20-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.20_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.20 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.20 bond1.kni;"
-
-    real_server 192.168.5.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 484 ##############################
-virtual_server_group 192.168.101.248-80-TCP_QLB {
-    192.168.101.248 80
-}
-
-deny_address_group 192.168.101.248_deny {
-}
-
-virtual_server  group 192.168.101.248-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.248_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.248 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.248 bond1.kni;"
-
-    real_server 192.168.38.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 485 ##############################
-virtual_server_group 192.168.102.122-80-TCP_QLB {
-    192.168.102.122 80
-}
-
-deny_address_group 192.168.102.122_deny {
-}
-
-virtual_server  group 192.168.102.122-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.122_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.122 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.122 bond1.kni;"
-
-    real_server 192.168.13.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 486 ##############################
-virtual_server_group 192.168.102.192-80-TCP_QLB {
-    192.168.102.192 80
-}
-
-deny_address_group 192.168.102.192_deny {
-}
-
-virtual_server  group 192.168.102.192-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.192_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.192 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.192 bond1.kni;"
-
-    real_server 192.168.53.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 487 ##############################
-virtual_server_group 192.168.101.41-80-TCP_QLB {
-    192.168.101.41 80
-}
-
-deny_address_group 192.168.101.41_deny {
-}
-
-virtual_server  group 192.168.101.41-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.41_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.41 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.41 bond1.kni;"
-
-    real_server 192.168.35.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 488 ##############################
-virtual_server_group 192.168.101.166-80-TCP_QLB {
-    192.168.101.166 80
-}
-
-deny_address_group 192.168.101.166_deny {
-}
-
-virtual_server  group 192.168.101.166-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.166_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.166 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.166 bond1.kni;"
-
-    real_server 192.168.37.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 489 ##############################
-virtual_server_group 192.168.102.131-80-TCP_QLB {
-    192.168.102.131 80
-}
-
-deny_address_group 192.168.102.131_deny {
-}
-
-virtual_server  group 192.168.102.131-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.131_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.131 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.131 bond1.kni;"
-
-    real_server 192.168.15.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 490 ##############################
-virtual_server_group 192.168.102.179-80-TCP_QLB {
-    192.168.102.179 80
-}
-
-deny_address_group 192.168.102.179_deny {
-}
-
-virtual_server  group 192.168.102.179-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.179_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.179 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.179 bond1.kni;"
-
-    real_server 192.168.31.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 491 ##############################
-virtual_server_group 192.168.101.124-80-TCP_QLB {
-    192.168.101.124 80
-}
-
-deny_address_group 192.168.101.124_deny {
-}
-
-virtual_server  group 192.168.101.124-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.124_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.124 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.124 bond1.kni;"
-
-    real_server 192.168.42.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 492 ##############################
-virtual_server_group 192.168.101.43-80-TCP_QLB {
-    192.168.101.43 80
-}
-
-deny_address_group 192.168.101.43_deny {
-}
-
-virtual_server  group 192.168.101.43-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.43_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.43 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.43 bond1.kni;"
-
-    real_server 192.168.55.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 493 ##############################
-virtual_server_group 192.168.101.210-80-TCP_QLB {
-    192.168.101.210 80
-}
-
-deny_address_group 192.168.101.210_deny {
-}
-
-virtual_server  group 192.168.101.210-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.210_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.210 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.210 bond1.kni;"
-
-    real_server 192.168.39.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 494 ##############################
-virtual_server_group 192.168.101.152-80-TCP_QLB {
-    192.168.101.152 80
-}
-
-deny_address_group 192.168.101.152_deny {
-}
-
-virtual_server  group 192.168.101.152-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.152_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.152 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.152 bond1.kni;"
-
-    real_server 192.168.58.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 495 ##############################
-virtual_server_group 192.168.101.145-80-TCP_QLB {
-    192.168.101.145 80
-}
-
-deny_address_group 192.168.101.145_deny {
-}
-
-virtual_server  group 192.168.101.145-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.145_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.145 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.145 bond1.kni;"
-
-    real_server 192.168.31.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 496 ##############################
-virtual_server_group 192.168.101.160-80-TCP_QLB {
-    192.168.101.160 80
-}
-
-deny_address_group 192.168.101.160_deny {
-}
-
-virtual_server  group 192.168.101.160-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.160_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.160 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.160 bond1.kni;"
-
-    real_server 192.168.13.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 497 ##############################
-virtual_server_group 192.168.101.151-80-TCP_QLB {
-    192.168.101.151 80
-}
-
-deny_address_group 192.168.101.151_deny {
-}
-
-virtual_server  group 192.168.101.151-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.151_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.151 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.151 bond1.kni;"
-
-    real_server 192.168.39.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 498 ##############################
-virtual_server_group 192.168.101.219-80-TCP_QLB {
-    192.168.101.219 80
-}
-
-deny_address_group 192.168.101.219_deny {
-}
-
-virtual_server  group 192.168.101.219-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.219_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.219 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.219 bond1.kni;"
-
-    real_server 192.168.42.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 499 ##############################
-virtual_server_group 192.168.101.23-80-TCP_QLB {
-    192.168.101.23 80
-}
-
-deny_address_group 192.168.101.23_deny {
-}
-
-virtual_server  group 192.168.101.23-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.23_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.23 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.23 bond1.kni;"
-
-    real_server 192.168.3.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 500 ##############################
-virtual_server_group 192.168.102.229-80-TCP_QLB {
-    192.168.102.229 80
-}
-
-deny_address_group 192.168.102.229_deny {
-}
-
-virtual_server  group 192.168.102.229-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.229_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.229 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.229 bond1.kni;"
-
-    real_server 192.168.9.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 501 ##############################
-virtual_server_group 111.13.235.146-80-TCP_QLB {
-    111.13.235.146 80
-}
-
-deny_address_group 111.13.235.146_deny {
-}
-
-virtual_server  group 111.13.235.146-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.146_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.146 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.146 bond1.kni;"
-
-    real_server 192.168.46.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 502 ##############################
-virtual_server_group 111.13.235.231-80-TCP_QLB {
-    111.13.235.231 80
-}
-
-deny_address_group 111.13.235.231_deny {
-}
-
-virtual_server  group 111.13.235.231-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.231_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.231 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.231 bond1.kni;"
-
-    real_server 192.168.43.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 503 ##############################
-virtual_server_group 192.168.102.111-80-TCP_QLB {
-    192.168.102.111 80
-}
-
-deny_address_group 192.168.102.111_deny {
-}
-
-virtual_server  group 192.168.102.111-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.111_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.111 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.111 bond1.kni;"
-
-    real_server 192.168.23.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 504 ##############################
-virtual_server_group 111.13.235.200-80-TCP_QLB {
-    111.13.235.200 80
-}
-
-deny_address_group 111.13.235.200_deny {
-}
-
-virtual_server  group 111.13.235.200-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.200_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.200 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.200 bond1.kni;"
-
-    real_server 192.168.22.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 505 ##############################
-virtual_server_group 192.168.102.160-80-TCP_QLB {
-    192.168.102.160 80
-}
-
-deny_address_group 192.168.102.160_deny {
-}
-
-virtual_server  group 192.168.102.160-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.160_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.160 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.160 bond1.kni;"
-
-    real_server 192.168.58.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 506 ##############################
-virtual_server_group 111.13.235.168-80-TCP_QLB {
-    111.13.235.168 80
-}
-
-deny_address_group 111.13.235.168_deny {
-}
-
-virtual_server  group 111.13.235.168-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.168_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.168 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.168 bond1.kni;"
-
-    real_server 192.168.30.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 507 ##############################
-virtual_server_group 192.168.102.155-80-TCP_QLB {
-    192.168.102.155 80
-}
-
-deny_address_group 192.168.102.155_deny {
-}
-
-virtual_server  group 192.168.102.155-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.155_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.155 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.155 bond1.kni;"
-
-    real_server 192.168.13.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 508 ##############################
-virtual_server_group 111.13.235.162-80-TCP_QLB {
-    111.13.235.162 80
-}
-
-deny_address_group 111.13.235.162_deny {
-}
-
-virtual_server  group 111.13.235.162-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.162_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.162 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.162 bond1.kni;"
-
-    real_server 192.168.30.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 509 ##############################
-virtual_server_group 192.168.102.16-80-TCP_QLB {
-    192.168.102.16 80
-}
-
-deny_address_group 192.168.102.16_deny {
-}
-
-virtual_server  group 192.168.102.16-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.16_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.16 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.16 bond1.kni;"
-
-    real_server 192.168.47.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 510 ##############################
-virtual_server_group 192.168.102.212-80-TCP_QLB {
-    192.168.102.212 80
-}
-
-deny_address_group 192.168.102.212_deny {
-}
-
-virtual_server  group 192.168.102.212-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.212_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.212 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.212 bond1.kni;"
-
-    real_server 192.168.22.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 511 ##############################
-virtual_server_group 192.168.101.3-80-TCP_QLB {
-    192.168.101.3 80
-}
-
-deny_address_group 192.168.101.3_deny {
-}
-
-virtual_server  group 192.168.101.3-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.3_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.3 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.3 bond1.kni;"
-
-    real_server 192.168.29.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 512 ##############################
-virtual_server_group 111.13.235.202-80-TCP_QLB {
-    111.13.235.202 80
-}
-
-deny_address_group 111.13.235.202_deny {
-}
-
-virtual_server  group 111.13.235.202-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.202_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.202 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.202 bond1.kni;"
-
-    real_server 192.168.18.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 513 ##############################
-virtual_server_group 192.168.101.156-80-TCP_QLB {
-    192.168.101.156 80
-}
-
-deny_address_group 192.168.101.156_deny {
-}
-
-virtual_server  group 192.168.101.156-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.156_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.156 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.156 bond1.kni;"
-
-    real_server 192.168.46.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 514 ##############################
-virtual_server_group 192.168.101.88-80-TCP_QLB {
-    192.168.101.88 80
-}
-
-deny_address_group 192.168.101.88_deny {
-}
-
-virtual_server  group 192.168.101.88-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.88_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.88 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.88 bond1.kni;"
-
-    real_server 192.168.22.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 515 ##############################
-virtual_server_group 192.168.101.190-80-TCP_QLB {
-    192.168.101.190 80
-}
-
-deny_address_group 192.168.101.190_deny {
-}
-
-virtual_server  group 192.168.101.190-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.190_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.190 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.190 bond1.kni;"
-
-    real_server 192.168.38.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 516 ##############################
-virtual_server_group 192.168.102.219-80-TCP_QLB {
-    192.168.102.219 80
-}
-
-deny_address_group 192.168.102.219_deny {
-}
-
-virtual_server  group 192.168.102.219-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.219_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.219 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.219 bond1.kni;"
-
-    real_server 192.168.38.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 517 ##############################
-virtual_server_group 192.168.101.26-80-TCP_QLB {
-    192.168.101.26 80
-}
-
-deny_address_group 192.168.101.26_deny {
-}
-
-virtual_server  group 192.168.101.26-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.26_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.26 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.26 bond1.kni;"
-
-    real_server 192.168.19.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 518 ##############################
-virtual_server_group 192.168.102.138-80-TCP_QLB {
-    192.168.102.138 80
-}
-
-deny_address_group 192.168.102.138_deny {
-}
-
-virtual_server  group 192.168.102.138-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.138_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.138 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.138 bond1.kni;"
-
-    real_server 192.168.14.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 519 ##############################
-virtual_server_group 192.168.101.126-80-TCP_QLB {
-    192.168.101.126 80
-}
-
-deny_address_group 192.168.101.126_deny {
-}
-
-virtual_server  group 192.168.101.126-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.126_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.126 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.126 bond1.kni;"
-
-    real_server 192.168.5.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 520 ##############################
-virtual_server_group 192.168.101.51-80-TCP_QLB {
-    192.168.101.51 80
-}
-
-deny_address_group 192.168.101.51_deny {
-}
-
-virtual_server  group 192.168.101.51-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.51_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.51 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.51 bond1.kni;"
-
-    real_server 192.168.19.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 521 ##############################
-virtual_server_group 192.168.101.140-80-TCP_QLB {
-    192.168.101.140 80
-}
-
-deny_address_group 192.168.101.140_deny {
-}
-
-virtual_server  group 192.168.101.140-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.140_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.140 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.140 bond1.kni;"
-
-    real_server 192.168.25.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 522 ##############################
-virtual_server_group 192.168.101.108-80-TCP_QLB {
-    192.168.101.108 80
-}
-
-deny_address_group 192.168.101.108_deny {
-}
-
-virtual_server  group 192.168.101.108-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.108_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.108 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.108 bond1.kni;"
-
-    real_server 192.168.15.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 523 ##############################
-virtual_server_group 192.168.101.59-80-TCP_QLB {
-    192.168.101.59 80
-}
-
-deny_address_group 192.168.101.59_deny {
-}
-
-virtual_server  group 192.168.101.59-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.59_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.59 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.59 bond1.kni;"
-
-    real_server 192.168.34.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 524 ##############################
-virtual_server_group 192.168.102.130-80-TCP_QLB {
-    192.168.102.130 80
-}
-
-deny_address_group 192.168.102.130_deny {
-}
-
-virtual_server  group 192.168.102.130-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.130_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.130 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.130 bond1.kni;"
-
-    real_server 192.168.26.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 525 ##############################
-virtual_server_group 111.13.235.117-80-TCP_QLB {
-    111.13.235.117 80
-}
-
-deny_address_group 111.13.235.117_deny {
-}
-
-virtual_server  group 111.13.235.117-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.117_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.117 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.117 bond1.kni;"
-
-    real_server 192.168.2.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 526 ##############################
-virtual_server_group 111.13.235.163-80-TCP_QLB {
-    111.13.235.163 80
-}
-
-deny_address_group 111.13.235.163_deny {
-}
-
-virtual_server  group 111.13.235.163-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.163_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.163 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.163 bond1.kni;"
-
-    real_server 192.168.41.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 527 ##############################
-virtual_server_group 192.168.102.167-80-TCP_QLB {
-    192.168.102.167 80
-}
-
-deny_address_group 192.168.102.167_deny {
-}
-
-virtual_server  group 192.168.102.167-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.167_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.167 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.167 bond1.kni;"
-
-    real_server 192.168.15.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 528 ##############################
-virtual_server_group 192.168.102.82-80-TCP_QLB {
-    192.168.102.82 80
-}
-
-deny_address_group 192.168.102.82_deny {
-}
-
-virtual_server  group 192.168.102.82-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.82_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.82 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.82 bond1.kni;"
-
-    real_server 192.168.58.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 529 ##############################
-virtual_server_group 192.168.101.114-80-TCP_QLB {
-    192.168.101.114 80
-}
-
-deny_address_group 192.168.101.114_deny {
-}
-
-virtual_server  group 192.168.101.114-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.114_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.114 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.114 bond1.kni;"
-
-    real_server 192.168.37.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 530 ##############################
-virtual_server_group 192.168.101.103-80-TCP_QLB {
-    192.168.101.103 80
-}
-
-deny_address_group 192.168.101.103_deny {
-}
-
-virtual_server  group 192.168.101.103-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.103_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.103 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.103 bond1.kni;"
-
-    real_server 192.168.50.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 531 ##############################
-virtual_server_group 111.13.235.90-80-TCP_QLB {
-    111.13.235.90 80
-}
-
-deny_address_group 111.13.235.90_deny {
-}
-
-virtual_server  group 111.13.235.90-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.90_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.90 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.90 bond1.kni;"
-
-    real_server 192.168.21.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 532 ##############################
-virtual_server_group 192.168.101.237-80-TCP_QLB {
-    192.168.101.237 80
-}
-
-deny_address_group 192.168.101.237_deny {
-}
-
-virtual_server  group 192.168.101.237-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.237_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.237 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.237 bond1.kni;"
-
-    real_server 192.168.5.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 533 ##############################
-virtual_server_group 111.13.235.233-80-TCP_QLB {
-    111.13.235.233 80
-}
-
-deny_address_group 111.13.235.233_deny {
-}
-
-virtual_server  group 111.13.235.233-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.233_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.233 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.233 bond1.kni;"
-
-    real_server 192.168.10.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 534 ##############################
-virtual_server_group 192.168.102.165-80-TCP_QLB {
-    192.168.102.165 80
-}
-
-deny_address_group 192.168.102.165_deny {
-}
-
-virtual_server  group 192.168.102.165-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.165_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.165 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.165 bond1.kni;"
-
-    real_server 192.168.59.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 535 ##############################
-virtual_server_group 192.168.101.56-80-TCP_QLB {
-    192.168.101.56 80
-}
-
-deny_address_group 192.168.101.56_deny {
-}
-
-virtual_server  group 192.168.101.56-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.56_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.56 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.56 bond1.kni;"
-
-    real_server 192.168.30.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 536 ##############################
-virtual_server_group 111.13.235.66-80-TCP_QLB {
-    111.13.235.66 80
-}
-
-deny_address_group 111.13.235.66_deny {
-}
-
-virtual_server  group 111.13.235.66-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.66_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.66 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.66 bond1.kni;"
-
-    real_server 192.168.9.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 537 ##############################
-virtual_server_group 111.13.235.111-80-TCP_QLB {
-    111.13.235.111 80
-}
-
-deny_address_group 111.13.235.111_deny {
-}
-
-virtual_server  group 111.13.235.111-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.111_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.111 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.111 bond1.kni;"
-
-    real_server 192.168.33.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 538 ##############################
-virtual_server_group 192.168.102.245-80-TCP_QLB {
-    192.168.102.245 80
-}
-
-deny_address_group 192.168.102.245_deny {
-}
-
-virtual_server  group 192.168.102.245-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.245_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.245 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.245 bond1.kni;"
-
-    real_server 192.168.14.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 539 ##############################
-virtual_server_group 111.13.235.205-80-TCP_QLB {
-    111.13.235.205 80
-}
-
-deny_address_group 111.13.235.205_deny {
-}
-
-virtual_server  group 111.13.235.205-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.205_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.205 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.205 bond1.kni;"
-
-    real_server 192.168.29.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 540 ##############################
-virtual_server_group 192.168.101.29-80-TCP_QLB {
-    192.168.101.29 80
-}
-
-deny_address_group 192.168.101.29_deny {
-}
-
-virtual_server  group 192.168.101.29-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.29_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.29 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.29 bond1.kni;"
-
-    real_server 192.168.38.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 541 ##############################
-virtual_server_group 192.168.101.232-80-TCP_QLB {
-    192.168.101.232 80
-}
-
-deny_address_group 192.168.101.232_deny {
-}
-
-virtual_server  group 192.168.101.232-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.232_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.232 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.232 bond1.kni;"
-
-    real_server 192.168.19.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 542 ##############################
-virtual_server_group 111.13.235.110-80-TCP_QLB {
-    111.13.235.110 80
-}
-
-deny_address_group 111.13.235.110_deny {
-}
-
-virtual_server  group 111.13.235.110-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.110_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.110 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.110 bond1.kni;"
-
-    real_server 192.168.21.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 543 ##############################
-virtual_server_group 192.168.101.116-80-TCP_QLB {
-    192.168.101.116 80
-}
-
-deny_address_group 192.168.101.116_deny {
-}
-
-virtual_server  group 192.168.101.116-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.116_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.116 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.116 bond1.kni;"
-
-    real_server 192.168.50.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 544 ##############################
-virtual_server_group 192.168.102.8-80-TCP_QLB {
-    192.168.102.8 80
-}
-
-deny_address_group 192.168.102.8_deny {
-}
-
-virtual_server  group 192.168.102.8-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.8_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.8 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.8 bond1.kni;"
-
-    real_server 192.168.45.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 545 ##############################
-virtual_server_group 192.168.102.246-80-TCP_QLB {
-    192.168.102.246 80
-}
-
-deny_address_group 192.168.102.246_deny {
-}
-
-virtual_server  group 192.168.102.246-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.246_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.246 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.246 bond1.kni;"
-
-    real_server 192.168.51.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 546 ##############################
-virtual_server_group 111.13.235.249-80-TCP_QLB {
-    111.13.235.249 80
-}
-
-deny_address_group 111.13.235.249_deny {
-}
-
-virtual_server  group 111.13.235.249-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.249_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.249 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.249 bond1.kni;"
-
-    real_server 192.168.7.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 547 ##############################
-virtual_server_group 192.168.102.13-80-TCP_QLB {
-    192.168.102.13 80
-}
-
-deny_address_group 192.168.102.13_deny {
-}
-
-virtual_server  group 192.168.102.13-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.13_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.13 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.13 bond1.kni;"
-
-    real_server 192.168.17.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 548 ##############################
-virtual_server_group 192.168.101.1-80-TCP_QLB {
-    192.168.101.1 80
-}
-
-deny_address_group 192.168.101.1_deny {
-}
-
-virtual_server  group 192.168.101.1-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.1_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.1 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.1 bond1.kni;"
-
-    real_server 192.168.46.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 549 ##############################
-virtual_server_group 192.168.102.208-80-TCP_QLB {
-    192.168.102.208 80
-}
-
-deny_address_group 192.168.102.208_deny {
-}
-
-virtual_server  group 192.168.102.208-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.208_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.208 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.208 bond1.kni;"
-
-    real_server 192.168.35.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 550 ##############################
-virtual_server_group 192.168.101.106-80-TCP_QLB {
-    192.168.101.106 80
-}
-
-deny_address_group 192.168.101.106_deny {
-}
-
-virtual_server  group 192.168.101.106-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.106_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.106 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.106 bond1.kni;"
-
-    real_server 192.168.27.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 551 ##############################
-virtual_server_group 192.168.102.222-80-TCP_QLB {
-    192.168.102.222 80
-}
-
-deny_address_group 192.168.102.222_deny {
-}
-
-virtual_server  group 192.168.102.222-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.222_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.222 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.222 bond1.kni;"
-
-    real_server 192.168.38.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 552 ##############################
-virtual_server_group 111.13.235.194-80-TCP_QLB {
-    111.13.235.194 80
-}
-
-deny_address_group 111.13.235.194_deny {
-}
-
-virtual_server  group 111.13.235.194-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.194_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.194 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.194 bond1.kni;"
-
-    real_server 192.168.38.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 553 ##############################
-virtual_server_group 192.168.102.69-80-TCP_QLB {
-    192.168.102.69 80
-}
-
-deny_address_group 192.168.102.69_deny {
-}
-
-virtual_server  group 192.168.102.69-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.69_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.69 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.69 bond1.kni;"
-
-    real_server 192.168.58.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 554 ##############################
-virtual_server_group 111.13.235.183-80-TCP_QLB {
-    111.13.235.183 80
-}
-
-deny_address_group 111.13.235.183_deny {
-}
-
-virtual_server  group 111.13.235.183-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.183_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.183 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.183 bond1.kni;"
-
-    real_server 192.168.39.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 555 ##############################
-virtual_server_group 192.168.101.34-80-TCP_QLB {
-    192.168.101.34 80
-}
-
-deny_address_group 192.168.101.34_deny {
-}
-
-virtual_server  group 192.168.101.34-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.34_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.34 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.34 bond1.kni;"
-
-    real_server 192.168.11.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 556 ##############################
-virtual_server_group 192.168.101.215-80-TCP_QLB {
-    192.168.101.215 80
-}
-
-deny_address_group 192.168.101.215_deny {
-}
-
-virtual_server  group 192.168.101.215-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.215_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.215 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.215 bond1.kni;"
-
-    real_server 192.168.58.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 557 ##############################
-virtual_server_group 192.168.102.183-80-TCP_QLB {
-    192.168.102.183 80
-}
-
-deny_address_group 192.168.102.183_deny {
-}
-
-virtual_server  group 192.168.102.183-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.183_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.183 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.183 bond1.kni;"
-
-    real_server 192.168.46.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 558 ##############################
-virtual_server_group 192.168.101.245-80-TCP_QLB {
-    192.168.101.245 80
-}
-
-deny_address_group 192.168.101.245_deny {
-}
-
-virtual_server  group 192.168.101.245-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.245_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.245 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.245 bond1.kni;"
-
-    real_server 192.168.45.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 559 ##############################
-virtual_server_group 111.13.235.181-80-TCP_QLB {
-    111.13.235.181 80
-}
-
-deny_address_group 111.13.235.181_deny {
-}
-
-virtual_server  group 111.13.235.181-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.181_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.181 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.181 bond1.kni;"
-
-    real_server 192.168.11.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 560 ##############################
-virtual_server_group 111.13.235.254-80-TCP_QLB {
-    111.13.235.254 80
-}
-
-deny_address_group 111.13.235.254_deny {
-}
-
-virtual_server  group 111.13.235.254-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.254_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.254 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.254 bond1.kni;"
-
-    real_server 192.168.53.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 561 ##############################
-virtual_server_group 192.168.101.165-80-TCP_QLB {
-    192.168.101.165 80
-}
-
-deny_address_group 192.168.101.165_deny {
-}
-
-virtual_server  group 192.168.101.165-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.165_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.165 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.165 bond1.kni;"
-
-    real_server 192.168.14.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 562 ##############################
-virtual_server_group 192.168.102.149-80-TCP_QLB {
-    192.168.102.149 80
-}
-
-deny_address_group 192.168.102.149_deny {
-}
-
-virtual_server  group 192.168.102.149-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.149_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.149 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.149 bond1.kni;"
-
-    real_server 192.168.49.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 563 ##############################
-virtual_server_group 192.168.102.132-80-TCP_QLB {
-    192.168.102.132 80
-}
-
-deny_address_group 192.168.102.132_deny {
-}
-
-virtual_server  group 192.168.102.132-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.132_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.132 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.132 bond1.kni;"
-
-    real_server 192.168.11.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 564 ##############################
-virtual_server_group 192.168.101.233-80-TCP_QLB {
-    192.168.101.233 80
-}
-
-deny_address_group 192.168.101.233_deny {
-}
-
-virtual_server  group 192.168.101.233-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.233_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.233 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.233 bond1.kni;"
-
-    real_server 192.168.11.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 565 ##############################
-virtual_server_group 111.13.235.165-80-TCP_QLB {
-    111.13.235.165 80
-}
-
-deny_address_group 111.13.235.165_deny {
-}
-
-virtual_server  group 111.13.235.165-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.165_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.165 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.165 bond1.kni;"
-
-    real_server 192.168.18.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 566 ##############################
-virtual_server_group 192.168.102.215-80-TCP_QLB {
-    192.168.102.215 80
-}
-
-deny_address_group 192.168.102.215_deny {
-}
-
-virtual_server  group 192.168.102.215-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.215_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.215 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.215 bond1.kni;"
-
-    real_server 192.168.49.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 567 ##############################
-virtual_server_group 111.13.235.129-80-TCP_QLB {
-    111.13.235.129 80
-}
-
-deny_address_group 111.13.235.129_deny {
-}
-
-virtual_server  group 111.13.235.129-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.129_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.129 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.129 bond1.kni;"
-
-    real_server 192.168.58.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 568 ##############################
-virtual_server_group 111.13.235.64-80-TCP_QLB {
-    111.13.235.64 80
-}
-
-deny_address_group 111.13.235.64_deny {
-}
-
-virtual_server  group 111.13.235.64-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.64_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.64 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.64 bond1.kni;"
-
-    real_server 192.168.55.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 569 ##############################
-virtual_server_group 111.13.235.118-80-TCP_QLB {
-    111.13.235.118 80
-}
-
-deny_address_group 111.13.235.118_deny {
-}
-
-virtual_server  group 111.13.235.118-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.118_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.118 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.118 bond1.kni;"
-
-    real_server 192.168.22.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 570 ##############################
-virtual_server_group 111.13.235.253-80-TCP_QLB {
-    111.13.235.253 80
-}
-
-deny_address_group 111.13.235.253_deny {
-}
-
-virtual_server  group 111.13.235.253-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.253_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.253 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.253 bond1.kni;"
-
-    real_server 192.168.29.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 571 ##############################
-virtual_server_group 192.168.102.182-80-TCP_QLB {
-    192.168.102.182 80
-}
-
-deny_address_group 192.168.102.182_deny {
-}
-
-virtual_server  group 192.168.102.182-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.182_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.182 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.182 bond1.kni;"
-
-    real_server 192.168.38.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 572 ##############################
-virtual_server_group 192.168.102.34-80-TCP_QLB {
-    192.168.102.34 80
-}
-
-deny_address_group 192.168.102.34_deny {
-}
-
-virtual_server  group 192.168.102.34-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.34_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.34 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.34 bond1.kni;"
-
-    real_server 192.168.22.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 573 ##############################
-virtual_server_group 192.168.101.183-80-TCP_QLB {
-    192.168.101.183 80
-}
-
-deny_address_group 192.168.101.183_deny {
-}
-
-virtual_server  group 192.168.101.183-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.183_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.183 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.183 bond1.kni;"
-
-    real_server 192.168.46.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 574 ##############################
-virtual_server_group 192.168.101.162-80-TCP_QLB {
-    192.168.101.162 80
-}
-
-deny_address_group 192.168.101.162_deny {
-}
-
-virtual_server  group 192.168.101.162-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.162_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.162 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.162 bond1.kni;"
-
-    real_server 192.168.31.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 575 ##############################
-virtual_server_group 192.168.102.107-80-TCP_QLB {
-    192.168.102.107 80
-}
-
-deny_address_group 192.168.102.107_deny {
-}
-
-virtual_server  group 192.168.102.107-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.107_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.107 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.107 bond1.kni;"
-
-    real_server 192.168.5.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 576 ##############################
-virtual_server_group 192.168.101.192-80-TCP_QLB {
-    192.168.101.192 80
-}
-
-deny_address_group 192.168.101.192_deny {
-}
-
-virtual_server  group 192.168.101.192-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.192_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.192 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.192 bond1.kni;"
-
-    real_server 192.168.31.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 577 ##############################
-virtual_server_group 192.168.101.84-80-TCP_QLB {
-    192.168.101.84 80
-}
-
-deny_address_group 192.168.101.84_deny {
-}
-
-virtual_server  group 192.168.101.84-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.84_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.84 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.84 bond1.kni;"
-
-    real_server 192.168.37.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 578 ##############################
-virtual_server_group 111.13.235.188-80-TCP_QLB {
-    111.13.235.188 80
-}
-
-deny_address_group 111.13.235.188_deny {
-}
-
-virtual_server  group 111.13.235.188-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.188_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.188 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.188 bond1.kni;"
-
-    real_server 192.168.25.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 579 ##############################
-virtual_server_group 192.168.101.146-80-TCP_QLB {
-    192.168.101.146 80
-}
-
-deny_address_group 192.168.101.146_deny {
-}
-
-virtual_server  group 192.168.101.146-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.146_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.146 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.146 bond1.kni;"
-
-    real_server 192.168.9.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 580 ##############################
-virtual_server_group 111.13.235.144-80-TCP_QLB {
-    111.13.235.144 80
-}
-
-deny_address_group 111.13.235.144_deny {
-}
-
-virtual_server  group 111.13.235.144-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.144_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.144 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.144 bond1.kni;"
-
-    real_server 192.168.21.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 581 ##############################
-virtual_server_group 192.168.101.77-80-TCP_QLB {
-    192.168.101.77 80
-}
-
-deny_address_group 192.168.101.77_deny {
-}
-
-virtual_server  group 192.168.101.77-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.77_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.77 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.77 bond1.kni;"
-
-    real_server 192.168.3.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 582 ##############################
-virtual_server_group 111.13.235.186-80-TCP_QLB {
-    111.13.235.186 80
-}
-
-deny_address_group 111.13.235.186_deny {
-}
-
-virtual_server  group 111.13.235.186-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.186_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.186 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.186 bond1.kni;"
-
-    real_server 192.168.31.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 583 ##############################
-virtual_server_group 192.168.102.104-80-TCP_QLB {
-    192.168.102.104 80
-}
-
-deny_address_group 192.168.102.104_deny {
-}
-
-virtual_server  group 192.168.102.104-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.104_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.104 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.104 bond1.kni;"
-
-    real_server 192.168.33.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 584 ##############################
-virtual_server_group 111.13.235.209-80-TCP_QLB {
-    111.13.235.209 80
-}
-
-deny_address_group 111.13.235.209_deny {
-}
-
-virtual_server  group 111.13.235.209-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.209_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.209 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.209 bond1.kni;"
-
-    real_server 192.168.15.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 585 ##############################
-virtual_server_group 111.13.235.184-80-TCP_QLB {
-    111.13.235.184 80
-}
-
-deny_address_group 111.13.235.184_deny {
-}
-
-virtual_server  group 111.13.235.184-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.184_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.184 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.184 bond1.kni;"
-
-    real_server 192.168.18.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 586 ##############################
-virtual_server_group 192.168.101.247-80-TCP_QLB {
-    192.168.101.247 80
-}
-
-deny_address_group 192.168.101.247_deny {
-}
-
-virtual_server  group 192.168.101.247-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.247_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.247 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.247 bond1.kni;"
-
-    real_server 192.168.54.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 587 ##############################
-virtual_server_group 192.168.102.140-80-TCP_QLB {
-    192.168.102.140 80
-}
-
-deny_address_group 192.168.102.140_deny {
-}
-
-virtual_server  group 192.168.102.140-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.140_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.140 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.140 bond1.kni;"
-
-    real_server 192.168.23.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 588 ##############################
-virtual_server_group 192.168.102.228-80-TCP_QLB {
-    192.168.102.228 80
-}
-
-deny_address_group 192.168.102.228_deny {
-}
-
-virtual_server  group 192.168.102.228-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.228_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.228 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.228 bond1.kni;"
-
-    real_server 192.168.30.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 589 ##############################
-virtual_server_group 192.168.101.149-80-TCP_QLB {
-    192.168.101.149 80
-}
-
-deny_address_group 192.168.101.149_deny {
-}
-
-virtual_server  group 192.168.101.149-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.149_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.149 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.149 bond1.kni;"
-
-    real_server 192.168.13.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 590 ##############################
-virtual_server_group 111.13.235.222-80-TCP_QLB {
-    111.13.235.222 80
-}
-
-deny_address_group 111.13.235.222_deny {
-}
-
-virtual_server  group 111.13.235.222-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.222_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.222 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.222 bond1.kni;"
-
-    real_server 192.168.15.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 591 ##############################
-virtual_server_group 192.168.102.195-80-TCP_QLB {
-    192.168.102.195 80
-}
-
-deny_address_group 192.168.102.195_deny {
-}
-
-virtual_server  group 192.168.102.195-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.195_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.195 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.195 bond1.kni;"
-
-    real_server 192.168.33.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 592 ##############################
-virtual_server_group 192.168.101.104-80-TCP_QLB {
-    192.168.101.104 80
-}
-
-deny_address_group 192.168.101.104_deny {
-}
-
-virtual_server  group 192.168.101.104-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.104_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.104 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.104 bond1.kni;"
-
-    real_server 192.168.54.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 593 ##############################
-virtual_server_group 192.168.101.234-80-TCP_QLB {
-    192.168.101.234 80
-}
-
-deny_address_group 192.168.101.234_deny {
-}
-
-virtual_server  group 192.168.101.234-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.234_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.234 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.234 bond1.kni;"
-
-    real_server 192.168.3.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 594 ##############################
-virtual_server_group 111.13.235.201-80-TCP_QLB {
-    111.13.235.201 80
-}
-
-deny_address_group 111.13.235.201_deny {
-}
-
-virtual_server  group 111.13.235.201-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.201_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.201 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.201 bond1.kni;"
-
-    real_server 192.168.18.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 595 ##############################
-virtual_server_group 192.168.101.195-80-TCP_QLB {
-    192.168.101.195 80
-}
-
-deny_address_group 192.168.101.195_deny {
-}
-
-virtual_server  group 192.168.101.195-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.195_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.195 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.195 bond1.kni;"
-
-    real_server 192.168.7.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 596 ##############################
-virtual_server_group 192.168.101.47-80-TCP_QLB {
-    192.168.101.47 80
-}
-
-deny_address_group 192.168.101.47_deny {
-}
-
-virtual_server  group 192.168.101.47-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.47_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.47 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.47 bond1.kni;"
-
-    real_server 192.168.10.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 597 ##############################
-virtual_server_group 192.168.101.253-80-TCP_QLB {
-    192.168.101.253 80
-}
-
-deny_address_group 192.168.101.253_deny {
-}
-
-virtual_server  group 192.168.101.253-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.253_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.253 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.253 bond1.kni;"
-
-    real_server 192.168.15.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 598 ##############################
-virtual_server_group 192.168.102.50-80-TCP_QLB {
-    192.168.102.50 80
-}
-
-deny_address_group 192.168.102.50_deny {
-}
-
-virtual_server  group 192.168.102.50-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.50_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.50 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.50 bond1.kni;"
-
-    real_server 192.168.39.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 599 ##############################
-virtual_server_group 192.168.101.222-80-TCP_QLB {
-    192.168.101.222 80
-}
-
-deny_address_group 192.168.101.222_deny {
-}
-
-virtual_server  group 192.168.101.222-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.222_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.222 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.222 bond1.kni;"
-
-    real_server 192.168.34.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 600 ##############################
-virtual_server_group 192.168.101.197-80-TCP_QLB {
-    192.168.101.197 80
-}
-
-deny_address_group 192.168.101.197_deny {
-}
-
-virtual_server  group 192.168.101.197-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.197_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.197 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.197 bond1.kni;"
-
-    real_server 192.168.33.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 601 ##############################
-virtual_server_group 192.168.102.31-80-TCP_QLB {
-    192.168.102.31 80
-}
-
-deny_address_group 192.168.102.31_deny {
-}
-
-virtual_server  group 192.168.102.31-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.31_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.31 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.31 bond1.kni;"
-
-    real_server 192.168.37.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 602 ##############################
-virtual_server_group 192.168.102.168-80-TCP_QLB {
-    192.168.102.168 80
-}
-
-deny_address_group 192.168.102.168_deny {
-}
-
-virtual_server  group 192.168.102.168-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.168_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.168 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.168 bond1.kni;"
-
-    real_server 192.168.51.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 603 ##############################
-virtual_server_group 192.168.101.95-80-TCP_QLB {
-    192.168.101.95 80
-}
-
-deny_address_group 192.168.101.95_deny {
-}
-
-virtual_server  group 192.168.101.95-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.95_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.95 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.95 bond1.kni;"
-
-    real_server 192.168.21.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 604 ##############################
-virtual_server_group 192.168.101.89-80-TCP_QLB {
-    192.168.101.89 80
-}
-
-deny_address_group 192.168.101.89_deny {
-}
-
-virtual_server  group 192.168.101.89-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.89_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.89 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.89 bond1.kni;"
-
-    real_server 192.168.59.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 605 ##############################
-virtual_server_group 192.168.101.251-80-TCP_QLB {
-    192.168.101.251 80
-}
-
-deny_address_group 192.168.101.251_deny {
-}
-
-virtual_server  group 192.168.101.251-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.251_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.251 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.251 bond1.kni;"
-
-    real_server 192.168.15.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 606 ##############################
-virtual_server_group 192.168.101.144-80-TCP_QLB {
-    192.168.101.144 80
-}
-
-deny_address_group 192.168.101.144_deny {
-}
-
-virtual_server  group 192.168.101.144-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.144_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.144 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.144 bond1.kni;"
-
-    real_server 192.168.18.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 607 ##############################
-virtual_server_group 192.168.101.96-80-TCP_QLB {
-    192.168.101.96 80
-}
-
-deny_address_group 192.168.101.96_deny {
-}
-
-virtual_server  group 192.168.101.96-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.96_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.96 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.96 bond1.kni;"
-
-    real_server 192.168.10.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 608 ##############################
-virtual_server_group 111.13.235.149-80-TCP_QLB {
-    111.13.235.149 80
-}
-
-deny_address_group 111.13.235.149_deny {
-}
-
-virtual_server  group 111.13.235.149-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.149_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.149 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.149 bond1.kni;"
-
-    real_server 192.168.41.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 609 ##############################
-virtual_server_group 111.13.235.138-80-TCP_QLB {
-    111.13.235.138 80
-}
-
-deny_address_group 111.13.235.138_deny {
-}
-
-virtual_server  group 111.13.235.138-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.138_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.138 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.138 bond1.kni;"
-
-    real_server 192.168.2.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 610 ##############################
-virtual_server_group 192.168.101.208-80-TCP_QLB {
-    192.168.101.208 80
-}
-
-deny_address_group 192.168.101.208_deny {
-}
-
-virtual_server  group 192.168.101.208-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.208_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.208 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.208 bond1.kni;"
-
-    real_server 192.168.9.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 611 ##############################
-virtual_server_group 192.168.102.201-80-TCP_QLB {
-    192.168.102.201 80
-}
-
-deny_address_group 192.168.102.201_deny {
-}
-
-virtual_server  group 192.168.102.201-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.201_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.201 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.201 bond1.kni;"
-
-    real_server 192.168.41.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 612 ##############################
-virtual_server_group 111.13.235.113-80-TCP_QLB {
-    111.13.235.113 80
-}
-
-deny_address_group 111.13.235.113_deny {
-}
-
-virtual_server  group 111.13.235.113-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.113_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.113 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.113 bond1.kni;"
-
-    real_server 192.168.34.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 613 ##############################
-virtual_server_group 111.13.235.167-80-TCP_QLB {
-    111.13.235.167 80
-}
-
-deny_address_group 111.13.235.167_deny {
-}
-
-virtual_server  group 111.13.235.167-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.167_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.167 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.167 bond1.kni;"
-
-    real_server 192.168.15.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 614 ##############################
-virtual_server_group 111.13.235.196-80-TCP_QLB {
-    111.13.235.196 80
-}
-
-deny_address_group 111.13.235.196_deny {
-}
-
-virtual_server  group 111.13.235.196-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.196_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.196 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.196 bond1.kni;"
-
-    real_server 192.168.29.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 615 ##############################
-virtual_server_group 192.168.101.136-80-TCP_QLB {
-    192.168.101.136 80
-}
-
-deny_address_group 192.168.101.136_deny {
-}
-
-virtual_server  group 192.168.101.136-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.136_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.136 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.136 bond1.kni;"
-
-    real_server 192.168.42.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 616 ##############################
-virtual_server_group 192.168.102.161-80-TCP_QLB {
-    192.168.102.161 80
-}
-
-deny_address_group 192.168.102.161_deny {
-}
-
-virtual_server  group 192.168.102.161-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.161_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.161 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.161 bond1.kni;"
-
-    real_server 192.168.58.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 617 ##############################
-virtual_server_group 111.13.235.189-80-TCP_QLB {
-    111.13.235.189 80
-}
-
-deny_address_group 111.13.235.189_deny {
-}
-
-virtual_server  group 111.13.235.189-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.189_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.189 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.189 bond1.kni;"
-
-    real_server 192.168.50.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 618 ##############################
-virtual_server_group 111.13.235.251-80-TCP_QLB {
-    111.13.235.251 80
-}
-
-deny_address_group 111.13.235.251_deny {
-}
-
-virtual_server  group 111.13.235.251-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.251_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.251 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.251 bond1.kni;"
-
-    real_server 192.168.41.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 619 ##############################
-virtual_server_group 192.168.102.118-80-TCP_QLB {
-    192.168.102.118 80
-}
-
-deny_address_group 192.168.102.118_deny {
-}
-
-virtual_server  group 192.168.102.118-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.118_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.118 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.118 bond1.kni;"
-
-    real_server 192.168.23.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.83 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 620 ##############################
-virtual_server_group 192.168.101.69-80-TCP_QLB {
-    192.168.101.69 80
-}
-
-deny_address_group 192.168.101.69_deny {
-}
-
-virtual_server  group 192.168.101.69-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.69_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.69 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.69 bond1.kni;"
-
-    real_server 192.168.26.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 621 ##############################
-virtual_server_group 192.168.101.236-80-TCP_QLB {
-    192.168.101.236 80
-}
-
-deny_address_group 192.168.101.236_deny {
-}
-
-virtual_server  group 192.168.101.236-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.236_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.236 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.236 bond1.kni;"
-
-    real_server 192.168.46.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 622 ##############################
-virtual_server_group 111.13.235.227-80-TCP_QLB {
-    111.13.235.227 80
-}
-
-deny_address_group 111.13.235.227_deny {
-}
-
-virtual_server  group 111.13.235.227-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.227_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.227 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.227 bond1.kni;"
-
-    real_server 192.168.13.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 623 ##############################
-virtual_server_group 111.13.235.67-80-TCP_QLB {
-    111.13.235.67 80
-}
-
-deny_address_group 111.13.235.67_deny {
-}
-
-virtual_server  group 111.13.235.67-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.67_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.67 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.67 bond1.kni;"
-
-    real_server 192.168.10.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 624 ##############################
-virtual_server_group 192.168.101.178-80-TCP_QLB {
-    192.168.101.178 80
-}
-
-deny_address_group 192.168.101.178_deny {
-}
-
-virtual_server  group 192.168.101.178-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.178_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.178 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.178 bond1.kni;"
-
-    real_server 192.168.46.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 625 ##############################
-virtual_server_group 111.13.235.152-80-TCP_QLB {
-    111.13.235.152 80
-}
-
-deny_address_group 111.13.235.152_deny {
-}
-
-virtual_server  group 111.13.235.152-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.152_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.152 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.152 bond1.kni;"
-
-    real_server 192.168.11.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 626 ##############################
-virtual_server_group 111.13.235.203-80-TCP_QLB {
-    111.13.235.203 80
-}
-
-deny_address_group 111.13.235.203_deny {
-}
-
-virtual_server  group 111.13.235.203-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.203_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.203 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.203 bond1.kni;"
-
-    real_server 192.168.19.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 627 ##############################
-virtual_server_group 192.168.102.196-80-TCP_QLB {
-    192.168.102.196 80
-}
-
-deny_address_group 192.168.102.196_deny {
-}
-
-virtual_server  group 192.168.102.196-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.196_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.196 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.196 bond1.kni;"
-
-    real_server 192.168.47.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 628 ##############################
-virtual_server_group 192.168.101.45-80-TCP_QLB {
-    192.168.101.45 80
-}
-
-deny_address_group 192.168.101.45_deny {
-}
-
-virtual_server  group 192.168.101.45-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.45_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.45 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.45 bond1.kni;"
-
-    real_server 192.168.30.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 629 ##############################
-virtual_server_group 192.168.101.227-80-TCP_QLB {
-    192.168.101.227 80
-}
-
-deny_address_group 192.168.101.227_deny {
-}
-
-virtual_server  group 192.168.101.227-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.227_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.227 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.227 bond1.kni;"
-
-    real_server 192.168.7.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 630 ##############################
-virtual_server_group 192.168.101.120-80-TCP_QLB {
-    192.168.101.120 80
-}
-
-deny_address_group 192.168.101.120_deny {
-}
-
-virtual_server  group 192.168.101.120-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.120_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.120 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.120 bond1.kni;"
-
-    real_server 192.168.3.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 631 ##############################
-virtual_server_group 192.168.102.74-80-TCP_QLB {
-    192.168.102.74 80
-}
-
-deny_address_group 192.168.102.74_deny {
-}
-
-virtual_server  group 192.168.102.74-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.74_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.74 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.74 bond1.kni;"
-
-    real_server 192.168.59.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 632 ##############################
-virtual_server_group 192.168.101.159-80-TCP_QLB {
-    192.168.101.159 80
-}
-
-deny_address_group 192.168.101.159_deny {
-}
-
-virtual_server  group 192.168.101.159-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.159_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.159 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.159 bond1.kni;"
-
-    real_server 192.168.39.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 633 ##############################
-virtual_server_group 192.168.102.106-80-TCP_QLB {
-    192.168.102.106 80
-}
-
-deny_address_group 192.168.102.106_deny {
-}
-
-virtual_server  group 192.168.102.106-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.106_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.106 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.106 bond1.kni;"
-
-    real_server 192.168.13.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 634 ##############################
-virtual_server_group 111.13.235.182-80-TCP_QLB {
-    111.13.235.182 80
-}
-
-deny_address_group 111.13.235.182_deny {
-}
-
-virtual_server  group 111.13.235.182-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.182_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.182 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.182 bond1.kni;"
-
-    real_server 192.168.55.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 635 ##############################
-virtual_server_group 192.168.102.173-80-TCP_QLB {
-    192.168.102.173 80
-}
-
-deny_address_group 192.168.102.173_deny {
-}
-
-virtual_server  group 192.168.102.173-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.173_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.173 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.173 bond1.kni;"
-
-    real_server 192.168.7.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 636 ##############################
-virtual_server_group 192.168.102.171-80-TCP_QLB {
-    192.168.102.171 80
-}
-
-deny_address_group 192.168.102.171_deny {
-}
-
-virtual_server  group 192.168.102.171-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.171_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.171 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.171 bond1.kni;"
-
-    real_server 192.168.47.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.4 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 637 ##############################
-virtual_server_group 192.168.102.142-80-TCP_QLB {
-    192.168.102.142 80
-}
-
-deny_address_group 192.168.102.142_deny {
-}
-
-virtual_server  group 192.168.102.142-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.142_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.142 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.142 bond1.kni;"
-
-    real_server 192.168.34.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 638 ##############################
-virtual_server_group 192.168.101.49-80-TCP_QLB {
-    192.168.101.49 80
-}
-
-deny_address_group 192.168.101.49_deny {
-}
-
-virtual_server  group 192.168.101.49-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.49_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.49 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.49 bond1.kni;"
-
-    real_server 192.168.53.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 639 ##############################
-virtual_server_group 192.168.101.16-80-TCP_QLB {
-    192.168.101.16 80
-}
-
-deny_address_group 192.168.101.16_deny {
-}
-
-virtual_server  group 192.168.101.16-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.16_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.16 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.16 bond1.kni;"
-
-    real_server 192.168.21.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 640 ##############################
-virtual_server_group 192.168.101.107-80-TCP_QLB {
-    192.168.101.107 80
-}
-
-deny_address_group 192.168.101.107_deny {
-}
-
-virtual_server  group 192.168.101.107-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.107_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.107 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.107 bond1.kni;"
-
-    real_server 192.168.17.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 641 ##############################
-virtual_server_group 192.168.102.61-80-TCP_QLB {
-    192.168.102.61 80
-}
-
-deny_address_group 192.168.102.61_deny {
-}
-
-virtual_server  group 192.168.102.61-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.61_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.61 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.61 bond1.kni;"
-
-    real_server 192.168.7.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 642 ##############################
-virtual_server_group 192.168.102.147-80-TCP_QLB {
-    192.168.102.147 80
-}
-
-deny_address_group 192.168.102.147_deny {
-}
-
-virtual_server  group 192.168.102.147-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.147_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.147 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.147 bond1.kni;"
-
-    real_server 192.168.25.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 643 ##############################
-virtual_server_group 192.168.102.2-80-TCP_QLB {
-    192.168.102.2 80
-}
-
-deny_address_group 192.168.102.2_deny {
-}
-
-virtual_server  group 192.168.102.2-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.2_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.2 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.2 bond1.kni;"
-
-    real_server 192.168.1.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 644 ##############################
-virtual_server_group 111.13.235.95-80-TCP_QLB {
-    111.13.235.95 80
-}
-
-deny_address_group 111.13.235.95_deny {
-}
-
-virtual_server  group 111.13.235.95-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.95_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.95 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.95 bond1.kni;"
-
-    real_server 192.168.49.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 645 ##############################
-virtual_server_group 192.168.102.85-80-TCP_QLB {
-    192.168.102.85 80
-}
-
-deny_address_group 192.168.102.85_deny {
-}
-
-virtual_server  group 192.168.102.85-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.85_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.85 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.85 bond1.kni;"
-
-    real_server 192.168.29.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 646 ##############################
-virtual_server_group 192.168.102.176-80-TCP_QLB {
-    192.168.102.176 80
-}
-
-deny_address_group 192.168.102.176_deny {
-}
-
-virtual_server  group 192.168.102.176-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.176_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.176 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.176 bond1.kni;"
-
-    real_server 192.168.59.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 647 ##############################
-virtual_server_group 111.13.235.97-80-TCP_QLB {
-    111.13.235.97 80
-}
-
-deny_address_group 111.13.235.97_deny {
-}
-
-virtual_server  group 111.13.235.97-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.97_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.97 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.97 bond1.kni;"
-
-    real_server 192.168.17.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 648 ##############################
-virtual_server_group 111.13.235.119-80-TCP_QLB {
-    111.13.235.119 80
-}
-
-deny_address_group 111.13.235.119_deny {
-}
-
-virtual_server  group 111.13.235.119-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.119_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.119 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.119 bond1.kni;"
-
-    real_server 192.168.21.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 649 ##############################
-virtual_server_group 192.168.101.38-80-TCP_QLB {
-    192.168.101.38 80
-}
-
-deny_address_group 192.168.101.38_deny {
-}
-
-virtual_server  group 192.168.101.38-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.38_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.38 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.38 bond1.kni;"
-
-    real_server 192.168.11.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 650 ##############################
-virtual_server_group 192.168.101.225-80-TCP_QLB {
-    192.168.101.225 80
-}
-
-deny_address_group 192.168.101.225_deny {
-}
-
-virtual_server  group 192.168.101.225-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.225_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.225 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.225 bond1.kni;"
-
-    real_server 192.168.43.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 651 ##############################
-virtual_server_group 192.168.102.53-80-TCP_QLB {
-    192.168.102.53 80
-}
-
-deny_address_group 192.168.102.53_deny {
-}
-
-virtual_server  group 192.168.102.53-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.53_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.53 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.53 bond1.kni;"
-
-    real_server 192.168.50.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 652 ##############################
-virtual_server_group 192.168.101.119-80-TCP_QLB {
-    192.168.101.119 80
-}
-
-deny_address_group 192.168.101.119_deny {
-}
-
-virtual_server  group 192.168.101.119-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.119_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.119 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.119 bond1.kni;"
-
-    real_server 192.168.55.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 653 ##############################
-virtual_server_group 192.168.101.198-80-TCP_QLB {
-    192.168.101.198 80
-}
-
-deny_address_group 192.168.101.198_deny {
-}
-
-virtual_server  group 192.168.101.198-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.198_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.198 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.198 bond1.kni;"
-
-    real_server 192.168.6.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.9 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 654 ##############################
-virtual_server_group 192.168.102.211-80-TCP_QLB {
-    192.168.102.211 80
-}
-
-deny_address_group 192.168.102.211_deny {
-}
-
-virtual_server  group 192.168.102.211-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.211_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.211 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.211 bond1.kni;"
-
-    real_server 192.168.14.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.180 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 655 ##############################
-virtual_server_group 192.168.102.194-80-TCP_QLB {
-    192.168.102.194 80
-}
-
-deny_address_group 192.168.102.194_deny {
-}
-
-virtual_server  group 192.168.102.194-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.194_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.194 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.194 bond1.kni;"
-
-    real_server 192.168.27.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 656 ##############################
-virtual_server_group 192.168.102.101-80-TCP_QLB {
-    192.168.102.101 80
-}
-
-deny_address_group 192.168.102.101_deny {
-}
-
-virtual_server  group 192.168.102.101-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.101_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.101 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.101 bond1.kni;"
-
-    real_server 192.168.50.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 657 ##############################
-virtual_server_group 192.168.102.68-80-TCP_QLB {
-    192.168.102.68 80
-}
-
-deny_address_group 192.168.102.68_deny {
-}
-
-virtual_server  group 192.168.102.68-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.68_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.68 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.68 bond1.kni;"
-
-    real_server 192.168.13.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 658 ##############################
-virtual_server_group 192.168.102.38-80-TCP_QLB {
-    192.168.102.38 80
-}
-
-deny_address_group 192.168.102.38_deny {
-}
-
-virtual_server  group 192.168.102.38-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.38_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.38 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.38 bond1.kni;"
-
-    real_server 192.168.9.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.194 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.86 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.96 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 659 ##############################
-virtual_server_group 192.168.101.125-80-TCP_QLB {
-    192.168.101.125 80
-}
-
-deny_address_group 192.168.101.125_deny {
-}
-
-virtual_server  group 192.168.101.125-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.125_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.125 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.125 bond1.kni;"
-
-    real_server 192.168.19.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 660 ##############################
-virtual_server_group 192.168.102.76-80-TCP_QLB {
-    192.168.102.76 80
-}
-
-deny_address_group 192.168.102.76_deny {
-}
-
-virtual_server  group 192.168.102.76-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.76_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.76 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.76 bond1.kni;"
-
-    real_server 192.168.51.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 661 ##############################
-virtual_server_group 192.168.102.70-80-TCP_QLB {
-    192.168.102.70 80
-}
-
-deny_address_group 192.168.102.70_deny {
-}
-
-virtual_server  group 192.168.102.70-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.70_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.70 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.70 bond1.kni;"
-
-    real_server 192.168.54.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 662 ##############################
-virtual_server_group 192.168.102.80-80-TCP_QLB {
-    192.168.102.80 80
-}
-
-deny_address_group 192.168.102.80_deny {
-}
-
-virtual_server  group 192.168.102.80-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.80_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.80 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.80 bond1.kni;"
-
-    real_server 192.168.58.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 663 ##############################
-virtual_server_group 111.13.235.88-80-TCP_QLB {
-    111.13.235.88 80
-}
-
-deny_address_group 111.13.235.88_deny {
-}
-
-virtual_server  group 111.13.235.88-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.88_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.88 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.88 bond1.kni;"
-
-    real_server 192.168.55.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 664 ##############################
-virtual_server_group 192.168.102.148-80-TCP_QLB {
-    192.168.102.148 80
-}
-
-deny_address_group 192.168.102.148_deny {
-}
-
-virtual_server  group 192.168.102.148-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.148_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.148 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.148 bond1.kni;"
-
-    real_server 192.168.27.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 665 ##############################
-virtual_server_group 192.168.102.11-80-TCP_QLB {
-    192.168.102.11 80
-}
-
-deny_address_group 192.168.102.11_deny {
-}
-
-virtual_server  group 192.168.102.11-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.11_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.11 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.11 bond1.kni;"
-
-    real_server 192.168.6.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 666 ##############################
-virtual_server_group 111.13.235.180-80-TCP_QLB {
-    111.13.235.180 80
-}
-
-deny_address_group 111.13.235.180_deny {
-}
-
-virtual_server  group 111.13.235.180-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.180_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.180 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.180 bond1.kni;"
-
-    real_server 192.168.33.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 667 ##############################
-virtual_server_group 111.13.235.191-80-TCP_QLB {
-    111.13.235.191 80
-}
-
-deny_address_group 111.13.235.191_deny {
-}
-
-virtual_server  group 111.13.235.191-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.191_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.191 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.191 bond1.kni;"
-
-    real_server 192.168.1.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.193 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 668 ##############################
-virtual_server_group 192.168.102.37-80-TCP_QLB {
-    192.168.102.37 80
-}
-
-deny_address_group 192.168.102.37_deny {
-}
-
-virtual_server  group 192.168.102.37-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.37_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.37 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.37 bond1.kni;"
-
-    real_server 192.168.17.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.93 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 669 ##############################
-virtual_server_group 192.168.102.163-80-TCP_QLB {
-    192.168.102.163 80
-}
-
-deny_address_group 192.168.102.163_deny {
-}
-
-virtual_server  group 192.168.102.163-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.163_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.163 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.163 bond1.kni;"
-
-    real_server 192.168.22.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 670 ##############################
-virtual_server_group 192.168.102.64-80-TCP_QLB {
-    192.168.102.64 80
-}
-
-deny_address_group 192.168.102.64_deny {
-}
-
-virtual_server  group 192.168.102.64-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.64_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.64 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.64 bond1.kni;"
-
-    real_server 192.168.22.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 671 ##############################
-virtual_server_group 192.168.102.141-80-TCP_QLB {
-    192.168.102.141 80
-}
-
-deny_address_group 192.168.102.141_deny {
-}
-
-virtual_server  group 192.168.102.141-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.141_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.141 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.141 bond1.kni;"
-
-    real_server 192.168.6.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 672 ##############################
-virtual_server_group 111.13.235.106-80-TCP_QLB {
-    111.13.235.106 80
-}
-
-deny_address_group 111.13.235.106_deny {
-}
-
-virtual_server  group 111.13.235.106-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.106_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.106 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.106 bond1.kni;"
-
-    real_server 192.168.31.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.230 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.125 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.34 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 673 ##############################
-virtual_server_group 111.13.235.164-80-TCP_QLB {
-    111.13.235.164 80
-}
-
-deny_address_group 111.13.235.164_deny {
-}
-
-virtual_server  group 111.13.235.164-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.164_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.164 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.164 bond1.kni;"
-
-    real_server 192.168.42.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 674 ##############################
-virtual_server_group 192.168.101.66-80-TCP_QLB {
-    192.168.101.66 80
-}
-
-deny_address_group 192.168.101.66_deny {
-}
-
-virtual_server  group 192.168.101.66-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.66_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.66 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.66 bond1.kni;"
-
-    real_server 192.168.50.8 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 675 ##############################
-virtual_server_group 192.168.101.193-80-TCP_QLB {
-    192.168.101.193 80
-}
-
-deny_address_group 192.168.101.193_deny {
-}
-
-virtual_server  group 192.168.101.193-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.193_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.193 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.193 bond1.kni;"
-
-    real_server 192.168.54.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.72 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.30 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.77 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.237 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 676 ##############################
-virtual_server_group 192.168.101.176-80-TCP_QLB {
-    192.168.101.176 80
-}
-
-deny_address_group 192.168.101.176_deny {
-}
-
-virtual_server  group 192.168.101.176-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.176_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.176 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.176 bond1.kni;"
-
-    real_server 192.168.3.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.163 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 677 ##############################
-virtual_server_group 192.168.101.2-80-TCP_QLB {
-    192.168.101.2 80
-}
-
-deny_address_group 192.168.101.2_deny {
-}
-
-virtual_server  group 192.168.101.2-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.2_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.2 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.2 bond1.kni;"
-
-    real_server 192.168.55.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 678 ##############################
-virtual_server_group 192.168.102.225-80-TCP_QLB {
-    192.168.102.225 80
-}
-
-deny_address_group 192.168.102.225_deny {
-}
-
-virtual_server  group 192.168.102.225-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.225_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.225 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.225 bond1.kni;"
-
-    real_server 192.168.30.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.46 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.130 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.254 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.120 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.61 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.189 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.161 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.13 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.24 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 679 ##############################
-virtual_server_group 192.168.101.64-80-TCP_QLB {
-    192.168.101.64 80
-}
-
-deny_address_group 192.168.101.64_deny {
-}
-
-virtual_server  group 192.168.101.64-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.64_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.64 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.64 bond1.kni;"
-
-    real_server 192.168.2.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.45 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.218 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 680 ##############################
-virtual_server_group 192.168.101.205-80-TCP_QLB {
-    192.168.101.205 80
-}
-
-deny_address_group 192.168.101.205_deny {
-}
-
-virtual_server  group 192.168.101.205-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.205_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.205 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.205 bond1.kni;"
-
-    real_server 192.168.2.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 681 ##############################
-virtual_server_group 192.168.102.51-80-TCP_QLB {
-    192.168.102.51 80
-}
-
-deny_address_group 192.168.102.51_deny {
-}
-
-virtual_server  group 192.168.102.51-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.51_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.51 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.51 bond1.kni;"
-
-    real_server 192.168.55.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 682 ##############################
-virtual_server_group 192.168.102.193-80-TCP_QLB {
-    192.168.102.193 80
-}
-
-deny_address_group 192.168.102.193_deny {
-}
-
-virtual_server  group 192.168.102.193-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.193_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.193 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.193 bond1.kni;"
-
-    real_server 192.168.5.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 683 ##############################
-virtual_server_group 192.168.101.213-80-TCP_QLB {
-    192.168.101.213 80
-}
-
-deny_address_group 192.168.101.213_deny {
-}
-
-virtual_server  group 192.168.101.213-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.213_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.213 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.213 bond1.kni;"
-
-    real_server 192.168.25.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.124 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.119 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.57 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.176 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.248 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.104 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.73 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.97 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.7 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.43 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.5 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.247 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.111 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.39 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 684 ##############################
-virtual_server_group 192.168.102.4-80-TCP_QLB {
-    192.168.102.4 80
-}
-
-deny_address_group 192.168.102.4_deny {
-}
-
-virtual_server  group 192.168.102.4-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.4_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.4 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.4 bond1.kni;"
-
-    real_server 192.168.5.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.205 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 685 ##############################
-virtual_server_group 111.13.235.134-80-TCP_QLB {
-    111.13.235.134 80
-}
-
-deny_address_group 111.13.235.134_deny {
-}
-
-virtual_server  group 111.13.235.134-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.134_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.134 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.134 bond1.kni;"
-
-    real_server 192.168.1.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.109 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.147 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.66 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 686 ##############################
-virtual_server_group 192.168.101.40-80-TCP_QLB {
-    192.168.101.40 80
-}
-
-deny_address_group 192.168.101.40_deny {
-}
-
-virtual_server  group 192.168.101.40-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.40_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.40 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.40 bond1.kni;"
-
-    real_server 192.168.1.199 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 687 ##############################
-virtual_server_group 192.168.102.58-80-TCP_QLB {
-    192.168.102.58 80
-}
-
-deny_address_group 192.168.102.58_deny {
-}
-
-virtual_server  group 192.168.102.58-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.58_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.58 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.58 bond1.kni;"
-
-    real_server 192.168.53.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.54 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.166 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.63 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 688 ##############################
-virtual_server_group 192.168.101.57-80-TCP_QLB {
-    192.168.101.57 80
-}
-
-deny_address_group 192.168.101.57_deny {
-}
-
-virtual_server  group 192.168.101.57-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.57_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.57 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.57 bond1.kni;"
-
-    real_server 192.168.27.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.214 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.244 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.87 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.232 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.223 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 689 ##############################
-virtual_server_group 192.168.101.112-80-TCP_QLB {
-    192.168.101.112 80
-}
-
-deny_address_group 192.168.101.112_deny {
-}
-
-virtual_server  group 192.168.101.112-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.112_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.112 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.112 bond1.kni;"
-
-    real_server 192.168.47.84 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.110 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.185 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.18 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.174 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.143 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.53 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.141 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.177 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.235 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.127 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.33 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.92 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.56 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.213 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.51 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.106 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.19 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.190 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.102 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.144 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.236 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.201 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.240 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.222 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.122 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.117 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 690 ##############################
-virtual_server_group 111.13.235.143-80-TCP_QLB {
-    111.13.235.143 80
-}
-
-deny_address_group 111.13.235.143_deny {
-}
-
-virtual_server  group 111.13.235.143-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.143_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.143 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.143 bond1.kni;"
-
-    real_server 192.168.6.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.16 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 691 ##############################
-virtual_server_group 192.168.102.227-80-TCP_QLB {
-    192.168.102.227 80
-}
-
-deny_address_group 192.168.102.227_deny {
-}
-
-virtual_server  group 192.168.102.227-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.227_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.227 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.227 bond1.kni;"
-
-    real_server 192.168.55.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 692 ##############################
-virtual_server_group 192.168.101.13-80-TCP_QLB {
-    192.168.101.13 80
-}
-
-deny_address_group 192.168.101.13_deny {
-}
-
-virtual_server  group 192.168.101.13-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.13_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.13 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.13 bond1.kni;"
-
-    real_server 192.168.41.62 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.27 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 693 ##############################
-virtual_server_group 192.168.102.56-80-TCP_QLB {
-    192.168.102.56 80
-}
-
-deny_address_group 192.168.102.56_deny {
-}
-
-virtual_server  group 192.168.102.56-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.56_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.56 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.56 bond1.kni;"
-
-    real_server 192.168.31.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.135 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.132 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.186 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.233 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.155 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.139 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.170 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.188 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 694 ##############################
-virtual_server_group 111.13.235.65-80-TCP_QLB {
-    111.13.235.65 80
-}
-
-deny_address_group 111.13.235.65_deny {
-}
-
-virtual_server  group 111.13.235.65-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.65_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.65 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.65 bond1.kni;"
-
-    real_server 192.168.5.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.158 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 695 ##############################
-virtual_server_group 192.168.102.87-80-TCP_QLB {
-    192.168.102.87 80
-}
-
-deny_address_group 192.168.102.87_deny {
-}
-
-virtual_server  group 192.168.102.87-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.87_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.87 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.87 bond1.kni;"
-
-    real_server 192.168.47.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.216 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.224 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.241 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.49 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.6 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.207 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.195 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.113 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.88 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.226 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.58 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.164 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.38 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.115 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.220 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.200 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 696 ##############################
-virtual_server_group 111.13.235.219-80-TCP_QLB {
-    111.13.235.219 80
-}
-
-deny_address_group 111.13.235.219_deny {
-}
-
-virtual_server  group 111.13.235.219-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.219_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.219 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.219 bond1.kni;"
-
-    real_server 192.168.37.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.245 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.21 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.89 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.172 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.168 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 697 ##############################
-virtual_server_group 111.13.235.198-80-TCP_QLB {
-    111.13.235.198 80
-}
-
-deny_address_group 111.13.235.198_deny {
-}
-
-virtual_server  group 111.13.235.198-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.198_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.198 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.198 bond1.kni;"
-
-    real_server 192.168.30.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 698 ##############################
-virtual_server_group 192.168.102.48-80-TCP_QLB {
-    192.168.102.48 80
-}
-
-deny_address_group 192.168.102.48_deny {
-}
-
-virtual_server  group 192.168.102.48-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.48_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.48 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.48 bond1.kni;"
-
-    real_server 192.168.35.3 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.253 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 699 ##############################
-virtual_server_group 192.168.101.168-80-TCP_QLB {
-    192.168.101.168 80
-}
-
-deny_address_group 192.168.101.168_deny {
-}
-
-virtual_server  group 192.168.101.168-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.168_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.168 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.168 bond1.kni;"
-
-    real_server 192.168.30.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.154 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.17 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.10 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 700 ##############################
-virtual_server_group 192.168.102.136-80-TCP_QLB {
-    192.168.102.136 80
-}
-
-deny_address_group 192.168.102.136_deny {
-}
-
-virtual_server  group 192.168.102.136-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.102.136_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.102.136 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.102.136 bond1.kni;"
-
-    real_server 192.168.14.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.128 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.160 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.25 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.95 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.118 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 701 ##############################
-virtual_server_group 111.13.235.166-80-TCP_QLB {
-    111.13.235.166 80
-}
-
-deny_address_group 111.13.235.166_deny {
-}
-
-virtual_server  group 111.13.235.166-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 111.13.235.166_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   111.13.235.166 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 111.13.235.166 bond1.kni;"
-
-    real_server 192.168.59.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.98 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.242 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-############################## 702 ##############################
-virtual_server_group 192.168.101.204-80-TCP_QLB {
-    192.168.101.204 80
-}
-
-deny_address_group 192.168.101.204_deny {
-}
-
-virtual_server  group 192.168.101.204-80-TCP_QLB {
-    delay_loop 3
-    lb_algo rr
-    lb_kind FNAT
-    protocol TCP
-
-    daddr_group_name 192.168.101.204_deny
-
-    syn_proxy
-    laddr_group_name laddr_g1
-
-    omega
-    quorum 1
-    hysteresis 0
-    alpha
-    quorum_up   "sh /usr/bin/quorum_up.sh   192.168.101.204 bond1.kni;"
-    quorum_down "sh /usr/bin/quorum_down.sh 192.168.101.204 bond1.kni;"
-
-    real_server 192.168.21.82 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.148 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.145 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.42 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.37 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.47 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.159 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.209 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.215 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.81 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.26 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.126 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.198 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.149 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.146 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.234 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.204 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.2 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.239 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.134 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.99 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.55 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.121 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.79 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.48 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.28 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.156 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.251 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.94 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.181 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.20 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.136 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.252 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.11 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.36 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.219 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.197 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.178 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.196 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.44 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.19.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.150 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.68 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.210 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.105 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.65 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.31 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.107 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.90 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.11.191 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.184 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.64 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.13.142 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.157 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.71 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.169 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.231 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.162 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.212 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.151 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.57.112 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.91 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.74 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.192 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.2.35 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.123 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.203 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.41 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.47.227 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.12 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.75 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.43.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.15.1 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.69 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.206 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.250 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.45.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.67 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.187 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.60 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.229 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.165 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.33.76 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.167 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.10.173 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.228 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.40 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.46.103 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.100 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.137 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.171 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.50 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.211 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.27.15 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.42.221 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.152 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.50.133 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.23.249 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.208 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.80 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.25.179 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.58.246 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.114 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.17.52 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.29.85 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.49.116 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.30.78 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.32 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.53.129 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.5.22 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.35.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.21.29 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.26.183 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.22.243 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.7.225 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.108 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.37.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.51.70 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.9.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.59.217 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.14.202 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.38.175 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.41.59 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.1.140 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.54.182 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.18.14 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.3.153 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.6.238 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.55.131 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.39.101 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.34.23 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-
-    real_server 192.168.31.138 80 {
-        weight 100
-        inhibit_on_failure
-        TCP_CHECK {
-            nb_sock_retry 2
-            connect_timeout 3
-            connect_port 80
-        }
-    }
-}
-

From 479570f0ebacedd6ad4142fa954812fb8b9e5b03 Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Sun, 19 Jan 2020 10:05:20 +0800
Subject: [PATCH 60/62] keepalived: fix compile problem

---
 .gitignore                 |    16 -
 Makefile                   |     4 +-
 tools/Makefile             |     8 +-
 tools/ipvsadm/.gitignore   |     1 +
 tools/keepalived/configure | 14446 -----------------------------------
 5 files changed, 9 insertions(+), 14466 deletions(-)
 create mode 100644 tools/ipvsadm/.gitignore
 delete mode 100755 tools/keepalived/configure

diff --git a/.gitignore b/.gitignore
index 7a3fc6ac5..f63453907 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,22 +11,6 @@ cscope*
 filenametags
 build/
 bin/
-tools/ipvsadm/ipvsadm
-tools/keepalived/Makefile
-tools/keepalived/bin/genhash
-tools/keepalived/bin/keepalived
-tools/keepalived/config.status
-tools/keepalived/genhash/Makefile
-tools/keepalived/keepalived.spec
-tools/keepalived/keepalived/Makefile
-tools/keepalived/keepalived/check/Makefile
-tools/keepalived/keepalived/core/Makefile
-tools/keepalived/keepalived/libipvs-2.6/Makefile
-tools/keepalived/keepalived/libipvs-2.6/libipvs.a
-tools/keepalived/keepalived/vrrp/Makefile
-tools/keepalived/lib/Makefile
-tools/keepalived/lib/config.h
-tools/keepalived/install-sh
 src/dpvs
 .cache.mk
 .tmp_versions/
diff --git a/Makefile b/Makefile
index ab5c62c3d..634b5225c 100644
--- a/Makefile
+++ b/Makefile
@@ -36,7 +36,9 @@ clean:
 	for i in $(SUBDIRS); do $(MAKE) -C $$i clean || exit 1; done
 
 distclean:
-	$(MAKE) -C tools/keepalived distclean || exit 1
+	$(MAKE) -C tools/keepalived distclean || true
+	-rm -f tools/keepalived/configure
+	-rm -f tools/keepalived/Makefile
 
 install:all
 	-mkdir -p $(INSDIR)
diff --git a/tools/Makefile b/tools/Makefile
index 01e31fb5c..8144137cb 100644
--- a/tools/Makefile
+++ b/tools/Makefile
@@ -27,9 +27,11 @@ config: keepalived_conf
 
 keepalived_conf:
 	if [ ! -f keepalived/Makefile ]; then \
-		cd keepalived && \
-		./build_setup && \
-		./configure && \
+		cd keepalived; \
+		if [ ! -f keepalived/configure ]; then \
+			./build_setup; \
+		fi; \
+		./configure; \
 		cd -; \
 	fi
 
diff --git a/tools/ipvsadm/.gitignore b/tools/ipvsadm/.gitignore
new file mode 100644
index 000000000..1802ab266
--- /dev/null
+++ b/tools/ipvsadm/.gitignore
@@ -0,0 +1 @@
+ipvsadm
diff --git a/tools/keepalived/configure b/tools/keepalived/configure
deleted file mode 100755
index d0ff7d95e..000000000
--- a/tools/keepalived/configure
+++ /dev/null
@@ -1,14446 +0,0 @@
-#! /bin/sh
-# Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.69 for Keepalived 2.0.19.
-#
-# Report bugs to <keepalived-users@groups.io>.
-#
-#
-# Copyright (C) 1992-1996, 1998-2012 Free Software Foundation, Inc.
-#
-#
-# This configure script is free software; the Free Software Foundation
-# gives unlimited permission to copy, distribute and modify it.
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # is contrary to our usage.  Disable this feature.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else
-  case `(set -o) 2>/dev/null` in #(
-  *posix*) :
-    set -o posix ;; #(
-  *) :
-     ;;
-esac
-fi
-
-
-as_nl='
-'
-export as_nl
-# Printing a long string crashes Solaris 7 /usr/bin/printf.
-as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo
-as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo
-# Prefer a ksh shell builtin over an external printf program on Solaris,
-# but without wasting forks for bash or zsh.
-if test -z "$BASH_VERSION$ZSH_VERSION" \
-    && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then
-  as_echo='print -r --'
-  as_echo_n='print -rn --'
-elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then
-  as_echo='printf %s\n'
-  as_echo_n='printf %s'
-else
-  if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then
-    as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"'
-    as_echo_n='/usr/ucb/echo -n'
-  else
-    as_echo_body='eval expr "X$1" : "X\\(.*\\)"'
-    as_echo_n_body='eval
-      arg=$1;
-      case $arg in #(
-      *"$as_nl"*)
-	expr "X$arg" : "X\\(.*\\)$as_nl";
-	arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;;
-      esac;
-      expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl"
-    '
-    export as_echo_n_body
-    as_echo_n='sh -c $as_echo_n_body as_echo'
-  fi
-  export as_echo_body
-  as_echo='sh -c $as_echo_body as_echo'
-fi
-
-# The user is always right.
-if test "${PATH_SEPARATOR+set}" != set; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# IFS
-# We need space, tab and new line, in precisely that order.  Quoting is
-# there to prevent editors from complaining about space-tab.
-# (If _AS_PATH_WALK were called with IFS unset, it would disable word
-# splitting by setting IFS to empty value.)
-IFS=" ""	$as_nl"
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in #((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as `sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-# Unset variables that we do not need and which cause bugs (e.g. in
-# pre-3.0 UWIN ksh).  But do not cause bugs in bash 2.01; the "|| exit 1"
-# suppresses any "Segmentation fault" message there.  '((' could
-# trigger a bug in pdksh 5.2.14.
-for as_var in BASH_ENV ENV MAIL MAILPATH
-do eval test x\${$as_var+set} = xset \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# NLS nuisances.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# CDPATH.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-# Use a proper internal environment variable to ensure we don't fall
-  # into an infinite loop, continuously re-executing ourselves.
-  if test x"${_as_can_reexec}" != xno && test "x$CONFIG_SHELL" != x; then
-    _as_can_reexec=no; export _as_can_reexec;
-    # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in # ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"}
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed `exec'.
-$as_echo "$0: could not re-execute with $CONFIG_SHELL" >&2
-as_fn_exit 255
-  fi
-  # We don't want this to propagate to other subprocesses.
-          { _as_can_reexec=; unset _as_can_reexec;}
-if test "x$CONFIG_SHELL" = x; then
-  as_bourne_compatible="if test -n \"\${ZSH_VERSION+set}\" && (emulate sh) >/dev/null 2>&1; then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which
-  # is contrary to our usage.  Disable this feature.
-  alias -g '\${1+\"\$@\"}'='\"\$@\"'
-  setopt NO_GLOB_SUBST
-else
-  case \`(set -o) 2>/dev/null\` in #(
-  *posix*) :
-    set -o posix ;; #(
-  *) :
-     ;;
-esac
-fi
-"
-  as_required="as_fn_return () { (exit \$1); }
-as_fn_success () { as_fn_return 0; }
-as_fn_failure () { as_fn_return 1; }
-as_fn_ret_success () { return 0; }
-as_fn_ret_failure () { return 1; }
-
-exitcode=0
-as_fn_success || { exitcode=1; echo as_fn_success failed.; }
-as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; }
-as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; }
-as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; }
-if ( set x; as_fn_ret_success y && test x = \"\$1\" ); then :
-
-else
-  exitcode=1; echo positional parameters were not saved.
-fi
-test x\$exitcode = x0 || exit 1
-test -x / || exit 1"
-  as_suggested="  as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO
-  as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO
-  eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" &&
-  test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1
-test \$(( 1 + 1 )) = 2 || exit 1"
-  if (eval "$as_required") 2>/dev/null; then :
-  as_have_required=yes
-else
-  as_have_required=no
-fi
-  if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null; then :
-
-else
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  as_found=:
-  case $as_dir in #(
-	 /*)
-	   for as_base in sh bash ksh sh5; do
-	     # Try only shells that exist, to save several forks.
-	     as_shell=$as_dir/$as_base
-	     if { test -f "$as_shell" || test -f "$as_shell.exe"; } &&
-		    { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$as_shell"; } 2>/dev/null; then :
-  CONFIG_SHELL=$as_shell as_have_required=yes
-		   if { $as_echo "$as_bourne_compatible""$as_suggested" | as_run=a "$as_shell"; } 2>/dev/null; then :
-  break 2
-fi
-fi
-	   done;;
-       esac
-  as_found=false
-done
-$as_found || { if { test -f "$SHELL" || test -f "$SHELL.exe"; } &&
-	      { $as_echo "$as_bourne_compatible""$as_required" | as_run=a "$SHELL"; } 2>/dev/null; then :
-  CONFIG_SHELL=$SHELL as_have_required=yes
-fi; }
-IFS=$as_save_IFS
-
-
-      if test "x$CONFIG_SHELL" != x; then :
-  export CONFIG_SHELL
-             # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in # ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"}
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed `exec'.
-$as_echo "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-fi
-
-    if test x$as_have_required = xno; then :
-  $as_echo "$0: This script requires a shell more modern than all"
-  $as_echo "$0: the shells that I found on your system."
-  if test x${ZSH_VERSION+set} = xset ; then
-    $as_echo "$0: In particular, zsh $ZSH_VERSION has bugs and should"
-    $as_echo "$0: be upgraded to zsh 4.3.4 or later."
-  else
-    $as_echo "$0: Please tell bug-autoconf@gnu.org and
-$0: keepalived-users@groups.io about your system, including
-$0: any error possibly output before this message. Then
-$0: install a modern shell, or manually run the script
-$0: under such a shell if you do have one."
-  fi
-  exit 1
-fi
-fi
-fi
-SHELL=${CONFIG_SHELL-/bin/sh}
-export SHELL
-# Unset more variables known to interfere with behavior of common tools.
-CLICOLOR_FORCE= GREP_OPTIONS=
-unset CLICOLOR_FORCE GREP_OPTIONS
-
-## --------------------- ##
-## M4sh Shell Functions. ##
-## --------------------- ##
-# as_fn_unset VAR
-# ---------------
-# Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-# as_fn_set_status STATUS
-# -----------------------
-# Set $? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} # as_fn_set_status
-
-# as_fn_exit STATUS
-# -----------------
-# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} # as_fn_exit
-
-# as_fn_mkdir_p
-# -------------
-# Create "$as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} # as_fn_mkdir_p
-
-# as_fn_executable_p FILE
-# -----------------------
-# Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} # as_fn_executable_p
-# as_fn_append VAR VALUE
-# ----------------------
-# Append the text in VALUE to the end of the definition contained in VAR. Take
-# advantage of any shell optimizations that allow amortized linear growth over
-# repeated appends, instead of the typical quadratic growth present in naive
-# implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else
-  as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  }
-fi # as_fn_append
-
-# as_fn_arith ARG...
-# ------------------
-# Perform arithmetic evaluation on the ARGs, and store the result in the
-# global $as_val. Take advantage of shells that can avoid forks. The arguments
-# must be portable across $(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else
-  as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  }
-fi # as_fn_arith
-
-
-# as_fn_error STATUS ERROR [LINENO LOG_FD]
-# ----------------------------------------
-# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-# script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  $as_echo "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} # as_fn_error
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-
-  as_lineno_1=$LINENO as_lineno_1a=$LINENO
-  as_lineno_2=$LINENO as_lineno_2a=$LINENO
-  eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" &&
-  test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || {
-  # Blame Lee E. McMahon (1931-1989) for sed's syntax.  :-)
-  sed -n '
-    p
-    /[$]LINENO/=
-  ' <$as_myself |
-    sed '
-      s/[$]LINENO.*/&-/
-      t lineno
-      b
-      :lineno
-      N
-      :loop
-      s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/
-      t loop
-      s/-\n.*//
-    ' >$as_me.lineno &&
-  chmod +x "$as_me.lineno" ||
-    { $as_echo "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; }
-
-  # If we had to re-execute with $CONFIG_SHELL, we're ensured to have
-  # already done that, so ensure we don't try to do so again and fall
-  # in an infinite loop.  This has already happened in practice.
-  _as_can_reexec=no; export _as_can_reexec
-  # Don't try to exec as it changes $[0], causing all sort of problems
-  # (the dirname of $[0] is not the place where we might find the
-  # original and so on.  Autoconf is especially sensitive to this).
-  . "./$as_me.lineno"
-  # Exit status is that of the last command.
-  exit
-}
-
-ECHO_C= ECHO_N= ECHO_T=
-case `echo -n x` in #(((((
--n*)
-  case `echo 'xy\c'` in
-  *c*) ECHO_T='	';;	# ECHO_T is single tab character.
-  xy)  ECHO_C='\c';;
-  *)   echo `echo ksh88 bug on AIX 6.1` > /dev/null
-       ECHO_T='	';;
-  esac;;
-*)
-  ECHO_N='-n';;
-esac
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
-    # In both cases, we have to default to `cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'"
-
-# Sed expression to map a string onto a valid variable name.
-as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'"
-
-
-test -n "$DJDIR" || exec 7<&0 </dev/null
-exec 6>&1
-
-# Name of the host.
-# hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status,
-# so uname gets run too.
-ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q`
-
-#
-# Initializations.
-#
-ac_default_prefix=/usr/local
-ac_clean_files=
-ac_config_libobj_dir=.
-LIBOBJS=
-cross_compiling=no
-subdirs=
-MFLAGS=
-MAKEFLAGS=
-
-# Identity of this package.
-PACKAGE_NAME='Keepalived'
-PACKAGE_TARNAME='keepalived'
-PACKAGE_VERSION='2.0.19'
-PACKAGE_STRING='Keepalived 2.0.19'
-PACKAGE_BUGREPORT='keepalived-users@groups.io'
-PACKAGE_URL='http://www.keepalived.org/'
-
-ac_unique_file="keepalived/core/main.c"
-# Factoring default headers for most tests.
-ac_includes_default="\
-#include <stdio.h>
-#ifdef HAVE_SYS_TYPES_H
-# include <sys/types.h>
-#endif
-#ifdef HAVE_SYS_STAT_H
-# include <sys/stat.h>
-#endif
-#ifdef STDC_HEADERS
-# include <stdlib.h>
-# include <stddef.h>
-#else
-# ifdef HAVE_STDLIB_H
-#  include <stdlib.h>
-# endif
-#endif
-#ifdef HAVE_STRING_H
-# if !defined STDC_HEADERS && defined HAVE_MEMORY_H
-#  include <memory.h>
-# endif
-# include <string.h>
-#endif
-#ifdef HAVE_STRINGS_H
-# include <strings.h>
-#endif
-#ifdef HAVE_INTTYPES_H
-# include <inttypes.h>
-#endif
-#ifdef HAVE_STDINT_H
-# include <stdint.h>
-#endif
-#ifdef HAVE_UNISTD_H
-# include <unistd.h>
-#endif"
-
-ac_subst_vars='am__EXEEXT_FALSE
-am__EXEEXT_TRUE
-LTLIBOBJS
-INIT_SUSE_FALSE
-INIT_SUSE_TRUE
-INIT_OPENRC_FALSE
-INIT_OPENRC_TRUE
-INIT_SYSV_FALSE
-INIT_SYSV_TRUE
-INIT_SYSTEMD_FALSE
-INIT_SYSTEMD_TRUE
-INIT_UPSTART_FALSE
-INIT_UPSTART_TRUE
-systemdsystemunitdir
-DEFAULT_CONFIG_FILE
-RPM_BIP_FALSE
-RPM_BIP_TRUE
-RPM_FALSE
-RPM_TRUE
-HAVE_RPMBUILD
-HAVE_RPM
-PROFILE_FALSE
-PROFILE_TRUE
-ASSERTS_FALSE
-ASSERTS_TRUE
-DEBUG_FALSE
-DEBUG_TRUE
-BUILD_DOCS_FALSE
-BUILD_DOCS_TRUE
-HAVE_SPHINX_BUILD
-SPHINXBUILDNAME
-PID_DIR
-WITH_NAMESPACES_FALSE
-WITH_NAMESPACES_TRUE
-WITH_SHA1_FALSE
-WITH_SHA1_TRUE
-DBUS_CREATE_INSTANCE_FALSE
-DBUS_CREATE_INSTANCE_TRUE
-WITH_DBUS_FALSE
-WITH_DBUS_TRUE
-SNMP_SERVICE
-SNMP_REPLY_V3_FOR_V2_FALSE
-SNMP_REPLY_V3_FOR_V2_TRUE
-SNMP_RFCV3_FALSE
-SNMP_RFCV3_TRUE
-SNMP_RFCV2_FALSE
-SNMP_RFCV2_TRUE
-SNMP_RFC_FALSE
-SNMP_RFC_TRUE
-SNMP_CHECKER_FALSE
-SNMP_CHECKER_TRUE
-SNMP_VRRP_FALSE
-SNMP_VRRP_TRUE
-SNMP_KEEPALIVED_FALSE
-SNMP_KEEPALIVED_TRUE
-SNMP_FALSE
-SNMP_TRUE
-NETSNMP_CONFIG
-FIB_ROUTING_FALSE
-FIB_ROUTING_TRUE
-SOCK_NONBLOCK_FALSE
-SOCK_NONBLOCK_TRUE
-CN_PROC_FALSE
-CN_PROC_TRUE
-WITH_BFD_FALSE
-WITH_BFD_TRUE
-WITH_JSON_FALSE
-WITH_JSON_TRUE
-VMAC_FALSE
-VMAC_TRUE
-VRRP_AUTH_FALSE
-VRRP_AUTH_TRUE
-WITH_VRRP_FALSE
-WITH_VRRP_TRUE
-WITH_REGEX_FALSE
-WITH_REGEX_TRUE
-WITH_IPVS_FALSE
-WITH_IPVS_TRUE
-FIREWALL_FALSE
-FIREWALL_TRUE
-NFTABLES_FALSE
-NFTABLES_TRUE
-REQUIRE_IPTABLES_LIBS_FALSE
-REQUIRE_IPTABLES_LIBS_TRUE
-LIBIPSET_DYNAMIC_FALSE
-LIBIPSET_DYNAMIC_TRUE
-LIBIPTC_DYNAMIC_FALSE
-LIBIPTC_DYNAMIC_TRUE
-IPTABLES_CMD_FALSE
-IPTABLES_CMD_TRUE
-IPTABLES_FALSE
-IPTABLES_TRUE
-LIBIPSET_FALSE
-LIBIPSET_TRUE
-LIBIPTC_FALSE
-LIBIPTC_TRUE
-LIBNL_DYNAMIC_FALSE
-LIBNL_DYNAMIC_TRUE
-LIBNL3_FALSE
-LIBNL3_TRUE
-LIBNL1_FALSE
-LIBNL1_TRUE
-BUILD_GENHASH_FALSE
-BUILD_GENHASH_TRUE
-GENHASH_LIBS
-LIBOBJS
-EGREP
-CPP
-KA_LIBS
-KA_LDFLAGS
-KA_CFLAGS
-KA_CPPFLAGS
-WITH_STRICT_CONFIG_CHECKS_FALSE
-WITH_STRICT_CONFIG_CHECKS_TRUE
-ARFLAGS
-ac_ct_AR
-AR
-LDD
-SED
-LN_S
-GREP
-RANLIB
-am__fastdepCC_FALSE
-am__fastdepCC_TRUE
-CCDEPMODE
-am__nodep
-AMDEPBACKSLASH
-AMDEP_FALSE
-AMDEP_TRUE
-am__quote
-am__include
-DEPDIR
-OBJEXT
-EXEEXT
-ac_ct_CC
-CPPFLAGS
-LDFLAGS
-CFLAGS
-CC
-PKG_CONFIG_LIBDIR
-PKG_CONFIG_PATH
-PKG_CONFIG
-MAINTAINERCLEANFILES
-AM_BACKSLASH
-AM_DEFAULT_VERBOSITY
-AM_DEFAULT_V
-AM_V
-am__untar
-am__tar
-AMTAR
-am__leading_dot
-SET_MAKE
-AWK
-mkdir_p
-MKDIR_P
-INSTALL_STRIP_PROGRAM
-STRIP
-install_sh
-MAKEINFO
-AUTOHEADER
-AUTOMAKE
-AUTOCONF
-ACLOCAL
-VERSION
-PACKAGE
-CYGPATH_W
-am__isrc
-INSTALL_DATA
-INSTALL_SCRIPT
-INSTALL_PROGRAM
-target_alias
-host_alias
-build_alias
-LIBS
-ECHO_T
-ECHO_N
-ECHO_C
-DEFS
-mandir
-localedir
-libdir
-psdir
-pdfdir
-dvidir
-htmldir
-infodir
-docdir
-oldincludedir
-includedir
-localstatedir
-sharedstatedir
-sysconfdir
-datadir
-datarootdir
-libexecdir
-sbindir
-bindir
-program_transform_name
-prefix
-exec_prefix
-PACKAGE_URL
-PACKAGE_BUGREPORT
-PACKAGE_STRING
-PACKAGE_VERSION
-PACKAGE_TARNAME
-PACKAGE_NAME
-PATH_SEPARATOR
-SHELL'
-ac_subst_files=''
-ac_user_opts='
-enable_option_checking
-enable_silent_rules
-enable_lvs_syncd
-enable_lvs
-enable_lvs_64bit_stats
-enable_vrrp
-enable_bfd
-with_kernel_dir
-enable_fwmark
-enable_snmp
-enable_snmp_vrrp
-enable_snmp_keepalived
-enable_snmp_checker
-enable_snmp_rfc
-enable_snmp_rfcv2
-enable_snmp_rfcv3
-enable_snmp_reply_v3_for_v2
-enable_dbus
-enable_dbus_create_instance
-enable_sha1
-enable_regex
-enable_regex_timers
-enable_json
-with_init
-enable_vrrp_auth
-enable_checksum_compat
-enable_routes
-enable_linkbeat
-enable_gnu_std_paths
-enable_dynamic_linking
-enable_iptables
-enable_libiptc_dynamic
-enable_libipset_dynamic
-enable_libnl_dynamic
-enable_libiptc
-enable_libipset
-enable_nftables
-enable_libnl
-enable_track_process
-with_run_dir
-enable_strict_config_checks
-enable_hardening
-enable_optimise
-enable_warnings
-enable_extra_warnings
-enable_mem_check
-enable_mem_check_log
-enable_timer_check
-enable_debug
-enable_netlink_timers
-enable_smtp_alert_debug
-enable_stacktrace
-enable_perf
-enable_log_file
-enable_dump_threads
-enable_epoll_debug
-enable_epoll_thread_dump
-enable_regex_debug
-enable_tsm_debug
-enable_vrrp_fd_debug
-enable_eintr_debug
-enable_track_process_debug
-enable_parser_debug
-enable_checksum_debug
-enable_dump_keywords
-enable_network_timestamp
-enable_asserts
-with_fixed_if_type
-with_default_config_file
-enable_profile
-enable_conversion_checks
-enable_force_conversion_checks
-enable_Werror
-with_systemdsystemunitdir
-enable_dependency_tracking
-'
-      ac_precious_vars='build_alias
-host_alias
-target_alias
-PKG_CONFIG
-PKG_CONFIG_PATH
-PKG_CONFIG_LIBDIR
-CC
-CFLAGS
-LDFLAGS
-LIBS
-CPPFLAGS
-CPP'
-
-
-# Initialize some variables set by options.
-ac_init_help=
-ac_init_version=false
-ac_unrecognized_opts=
-ac_unrecognized_sep=
-# The variables have the same names as the options, with
-# dashes changed to underlines.
-cache_file=/dev/null
-exec_prefix=NONE
-no_create=
-no_recursion=
-prefix=NONE
-program_prefix=NONE
-program_suffix=NONE
-program_transform_name=s,x,x,
-silent=
-site=
-srcdir=
-verbose=
-x_includes=NONE
-x_libraries=NONE
-
-# Installation directory options.
-# These are left unexpanded so users can "make install exec_prefix=/foo"
-# and all the variables that are supposed to be based on exec_prefix
-# by default will actually change.
-# Use braces instead of parens because sh, perl, etc. also accept them.
-# (The list follows the same order as the GNU Coding Standards.)
-bindir='${exec_prefix}/bin'
-sbindir='${exec_prefix}/sbin'
-libexecdir='${exec_prefix}/libexec'
-datarootdir='${prefix}/share'
-datadir='${datarootdir}'
-sysconfdir='${prefix}/etc'
-sharedstatedir='${prefix}/com'
-localstatedir='${prefix}/var'
-includedir='${prefix}/include'
-oldincludedir='/usr/include'
-docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
-infodir='${datarootdir}/info'
-htmldir='${docdir}'
-dvidir='${docdir}'
-pdfdir='${docdir}'
-psdir='${docdir}'
-libdir='${exec_prefix}/lib'
-localedir='${datarootdir}/locale'
-mandir='${datarootdir}/man'
-
-ac_prev=
-ac_dashdash=
-for ac_option
-do
-  # If the previous option needs an argument, assign it.
-  if test -n "$ac_prev"; then
-    eval $ac_prev=\$ac_option
-    ac_prev=
-    continue
-  fi
-
-  case $ac_option in
-  *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;;
-  *=)   ac_optarg= ;;
-  *)    ac_optarg=yes ;;
-  esac
-
-  # Accept the important Cygnus configure options, so we can diagnose typos.
-
-  case $ac_dashdash$ac_option in
-  --)
-    ac_dashdash=yes ;;
-
-  -bindir | --bindir | --bindi | --bind | --bin | --bi)
-    ac_prev=bindir ;;
-  -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*)
-    bindir=$ac_optarg ;;
-
-  -build | --build | --buil | --bui | --bu)
-    ac_prev=build_alias ;;
-  -build=* | --build=* | --buil=* | --bui=* | --bu=*)
-    build_alias=$ac_optarg ;;
-
-  -cache-file | --cache-file | --cache-fil | --cache-fi \
-  | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c)
-    ac_prev=cache_file ;;
-  -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \
-  | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*)
-    cache_file=$ac_optarg ;;
-
-  --config-cache | -C)
-    cache_file=config.cache ;;
-
-  -datadir | --datadir | --datadi | --datad)
-    ac_prev=datadir ;;
-  -datadir=* | --datadir=* | --datadi=* | --datad=*)
-    datadir=$ac_optarg ;;
-
-  -datarootdir | --datarootdir | --datarootdi | --datarootd | --dataroot \
-  | --dataroo | --dataro | --datar)
-    ac_prev=datarootdir ;;
-  -datarootdir=* | --datarootdir=* | --datarootdi=* | --datarootd=* \
-  | --dataroot=* | --dataroo=* | --dataro=* | --datar=*)
-    datarootdir=$ac_optarg ;;
-
-  -disable-* | --disable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: $ac_useropt"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=no ;;
-
-  -docdir | --docdir | --docdi | --doc | --do)
-    ac_prev=docdir ;;
-  -docdir=* | --docdir=* | --docdi=* | --doc=* | --do=*)
-    docdir=$ac_optarg ;;
-
-  -dvidir | --dvidir | --dvidi | --dvid | --dvi | --dv)
-    ac_prev=dvidir ;;
-  -dvidir=* | --dvidir=* | --dvidi=* | --dvid=* | --dvi=* | --dv=*)
-    dvidir=$ac_optarg ;;
-
-  -enable-* | --enable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: $ac_useropt"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=\$ac_optarg ;;
-
-  -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \
-  | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \
-  | --exec | --exe | --ex)
-    ac_prev=exec_prefix ;;
-  -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \
-  | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \
-  | --exec=* | --exe=* | --ex=*)
-    exec_prefix=$ac_optarg ;;
-
-  -gas | --gas | --ga | --g)
-    # Obsolete; use --with-gas.
-    with_gas=yes ;;
-
-  -help | --help | --hel | --he | -h)
-    ac_init_help=long ;;
-  -help=r* | --help=r* | --hel=r* | --he=r* | -hr*)
-    ac_init_help=recursive ;;
-  -help=s* | --help=s* | --hel=s* | --he=s* | -hs*)
-    ac_init_help=short ;;
-
-  -host | --host | --hos | --ho)
-    ac_prev=host_alias ;;
-  -host=* | --host=* | --hos=* | --ho=*)
-    host_alias=$ac_optarg ;;
-
-  -htmldir | --htmldir | --htmldi | --htmld | --html | --htm | --ht)
-    ac_prev=htmldir ;;
-  -htmldir=* | --htmldir=* | --htmldi=* | --htmld=* | --html=* | --htm=* \
-  | --ht=*)
-    htmldir=$ac_optarg ;;
-
-  -includedir | --includedir | --includedi | --included | --include \
-  | --includ | --inclu | --incl | --inc)
-    ac_prev=includedir ;;
-  -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \
-  | --includ=* | --inclu=* | --incl=* | --inc=*)
-    includedir=$ac_optarg ;;
-
-  -infodir | --infodir | --infodi | --infod | --info | --inf)
-    ac_prev=infodir ;;
-  -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*)
-    infodir=$ac_optarg ;;
-
-  -libdir | --libdir | --libdi | --libd)
-    ac_prev=libdir ;;
-  -libdir=* | --libdir=* | --libdi=* | --libd=*)
-    libdir=$ac_optarg ;;
-
-  -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \
-  | --libexe | --libex | --libe)
-    ac_prev=libexecdir ;;
-  -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \
-  | --libexe=* | --libex=* | --libe=*)
-    libexecdir=$ac_optarg ;;
-
-  -localedir | --localedir | --localedi | --localed | --locale)
-    ac_prev=localedir ;;
-  -localedir=* | --localedir=* | --localedi=* | --localed=* | --locale=*)
-    localedir=$ac_optarg ;;
-
-  -localstatedir | --localstatedir | --localstatedi | --localstated \
-  | --localstate | --localstat | --localsta | --localst | --locals)
-    ac_prev=localstatedir ;;
-  -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \
-  | --localstate=* | --localstat=* | --localsta=* | --localst=* | --locals=*)
-    localstatedir=$ac_optarg ;;
-
-  -mandir | --mandir | --mandi | --mand | --man | --ma | --m)
-    ac_prev=mandir ;;
-  -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*)
-    mandir=$ac_optarg ;;
-
-  -nfp | --nfp | --nf)
-    # Obsolete; use --without-fp.
-    with_fp=no ;;
-
-  -no-create | --no-create | --no-creat | --no-crea | --no-cre \
-  | --no-cr | --no-c | -n)
-    no_create=yes ;;
-
-  -no-recursion | --no-recursion | --no-recursio | --no-recursi \
-  | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r)
-    no_recursion=yes ;;
-
-  -oldincludedir | --oldincludedir | --oldincludedi | --oldincluded \
-  | --oldinclude | --oldinclud | --oldinclu | --oldincl | --oldinc \
-  | --oldin | --oldi | --old | --ol | --o)
-    ac_prev=oldincludedir ;;
-  -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \
-  | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \
-  | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*)
-    oldincludedir=$ac_optarg ;;
-
-  -prefix | --prefix | --prefi | --pref | --pre | --pr | --p)
-    ac_prev=prefix ;;
-  -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*)
-    prefix=$ac_optarg ;;
-
-  -program-prefix | --program-prefix | --program-prefi | --program-pref \
-  | --program-pre | --program-pr | --program-p)
-    ac_prev=program_prefix ;;
-  -program-prefix=* | --program-prefix=* | --program-prefi=* \
-  | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*)
-    program_prefix=$ac_optarg ;;
-
-  -program-suffix | --program-suffix | --program-suffi | --program-suff \
-  | --program-suf | --program-su | --program-s)
-    ac_prev=program_suffix ;;
-  -program-suffix=* | --program-suffix=* | --program-suffi=* \
-  | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*)
-    program_suffix=$ac_optarg ;;
-
-  -program-transform-name | --program-transform-name \
-  | --program-transform-nam | --program-transform-na \
-  | --program-transform-n | --program-transform- \
-  | --program-transform | --program-transfor \
-  | --program-transfo | --program-transf \
-  | --program-trans | --program-tran \
-  | --progr-tra | --program-tr | --program-t)
-    ac_prev=program_transform_name ;;
-  -program-transform-name=* | --program-transform-name=* \
-  | --program-transform-nam=* | --program-transform-na=* \
-  | --program-transform-n=* | --program-transform-=* \
-  | --program-transform=* | --program-transfor=* \
-  | --program-transfo=* | --program-transf=* \
-  | --program-trans=* | --program-tran=* \
-  | --progr-tra=* | --program-tr=* | --program-t=*)
-    program_transform_name=$ac_optarg ;;
-
-  -pdfdir | --pdfdir | --pdfdi | --pdfd | --pdf | --pd)
-    ac_prev=pdfdir ;;
-  -pdfdir=* | --pdfdir=* | --pdfdi=* | --pdfd=* | --pdf=* | --pd=*)
-    pdfdir=$ac_optarg ;;
-
-  -psdir | --psdir | --psdi | --psd | --ps)
-    ac_prev=psdir ;;
-  -psdir=* | --psdir=* | --psdi=* | --psd=* | --ps=*)
-    psdir=$ac_optarg ;;
-
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil)
-    silent=yes ;;
-
-  -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
-    ac_prev=sbindir ;;
-  -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
-  | --sbi=* | --sb=*)
-    sbindir=$ac_optarg ;;
-
-  -sharedstatedir | --sharedstatedir | --sharedstatedi \
-  | --sharedstated | --sharedstate | --sharedstat | --sharedsta \
-  | --sharedst | --shareds | --shared | --share | --shar \
-  | --sha | --sh)
-    ac_prev=sharedstatedir ;;
-  -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \
-  | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \
-  | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \
-  | --sha=* | --sh=*)
-    sharedstatedir=$ac_optarg ;;
-
-  -site | --site | --sit)
-    ac_prev=site ;;
-  -site=* | --site=* | --sit=*)
-    site=$ac_optarg ;;
-
-  -srcdir | --srcdir | --srcdi | --srcd | --src | --sr)
-    ac_prev=srcdir ;;
-  -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*)
-    srcdir=$ac_optarg ;;
-
-  -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \
-  | --syscon | --sysco | --sysc | --sys | --sy)
-    ac_prev=sysconfdir ;;
-  -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \
-  | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*)
-    sysconfdir=$ac_optarg ;;
-
-  -target | --target | --targe | --targ | --tar | --ta | --t)
-    ac_prev=target_alias ;;
-  -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*)
-    target_alias=$ac_optarg ;;
-
-  -v | -verbose | --verbose | --verbos | --verbo | --verb)
-    verbose=yes ;;
-
-  -version | --version | --versio | --versi | --vers | -V)
-    ac_init_version=: ;;
-
-  -with-* | --with-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: $ac_useropt"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=\$ac_optarg ;;
-
-  -without-* | --without-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: $ac_useropt"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`$as_echo "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=no ;;
-
-  --x)
-    # Obsolete; use --with-x.
-    with_x=yes ;;
-
-  -x-includes | --x-includes | --x-include | --x-includ | --x-inclu \
-  | --x-incl | --x-inc | --x-in | --x-i)
-    ac_prev=x_includes ;;
-  -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \
-  | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*)
-    x_includes=$ac_optarg ;;
-
-  -x-libraries | --x-libraries | --x-librarie | --x-librari \
-  | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l)
-    ac_prev=x_libraries ;;
-  -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \
-  | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*)
-    x_libraries=$ac_optarg ;;
-
-  -*) as_fn_error $? "unrecognized option: \`$ac_option'
-Try \`$0 --help' for more information"
-    ;;
-
-  *=*)
-    ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='`
-    # Reject names that are not valid shell variable names.
-    case $ac_envvar in #(
-      '' | [0-9]* | *[!_$as_cr_alnum]* )
-      as_fn_error $? "invalid variable name: \`$ac_envvar'" ;;
-    esac
-    eval $ac_envvar=\$ac_optarg
-    export $ac_envvar ;;
-
-  *)
-    # FIXME: should be removed in autoconf 3.0.
-    $as_echo "$as_me: WARNING: you should use --build, --host, --target" >&2
-    expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null &&
-      $as_echo "$as_me: WARNING: invalid host type: $ac_option" >&2
-    : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}"
-    ;;
-
-  esac
-done
-
-if test -n "$ac_prev"; then
-  ac_option=--`echo $ac_prev | sed 's/_/-/g'`
-  as_fn_error $? "missing argument to $ac_option"
-fi
-
-if test -n "$ac_unrecognized_opts"; then
-  case $enable_option_checking in
-    no) ;;
-    fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;;
-    *)     $as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;;
-  esac
-fi
-
-# Check all directory arguments for consistency.
-for ac_var in	exec_prefix prefix bindir sbindir libexecdir datarootdir \
-		datadir sysconfdir sharedstatedir localstatedir includedir \
-		oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
-		libdir localedir mandir
-do
-  eval ac_val=\$$ac_var
-  # Remove trailing slashes.
-  case $ac_val in
-    */ )
-      ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'`
-      eval $ac_var=\$ac_val;;
-  esac
-  # Be sure to have absolute directory names.
-  case $ac_val in
-    [\\/$]* | ?:[\\/]* )  continue;;
-    NONE | '' ) case $ac_var in *prefix ) continue;; esac;;
-  esac
-  as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val"
-done
-
-# There might be people who depend on the old broken behavior: `$host'
-# used to hold the argument of --host etc.
-# FIXME: To remove some day.
-build=$build_alias
-host=$host_alias
-target=$target_alias
-
-# FIXME: To remove some day.
-if test "x$host_alias" != x; then
-  if test "x$build_alias" = x; then
-    cross_compiling=maybe
-  elif test "x$build_alias" != "x$host_alias"; then
-    cross_compiling=yes
-  fi
-fi
-
-ac_tool_prefix=
-test -n "$host_alias" && ac_tool_prefix=$host_alias-
-
-test "$silent" = yes && exec 6>/dev/null
-
-
-ac_pwd=`pwd` && test -n "$ac_pwd" &&
-ac_ls_di=`ls -di .` &&
-ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` ||
-  as_fn_error $? "working directory cannot be determined"
-test "X$ac_ls_di" = "X$ac_pwd_ls_di" ||
-  as_fn_error $? "pwd does not report name of working directory"
-
-
-# Find the source files, if location was not specified.
-if test -z "$srcdir"; then
-  ac_srcdir_defaulted=yes
-  # Try the directory containing this script, then the parent directory.
-  ac_confdir=`$as_dirname -- "$as_myself" ||
-$as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_myself" : 'X\(//\)[^/]' \| \
-	 X"$as_myself" : 'X\(//\)$' \| \
-	 X"$as_myself" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X"$as_myself" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  srcdir=$ac_confdir
-  if test ! -r "$srcdir/$ac_unique_file"; then
-    srcdir=..
-  fi
-else
-  ac_srcdir_defaulted=no
-fi
-if test ! -r "$srcdir/$ac_unique_file"; then
-  test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .."
-  as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir"
-fi
-ac_msg="sources are in $srcdir, but \`cd $srcdir' does not work"
-ac_abs_confdir=`(
-	cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg"
-	pwd)`
-# When building in place, set srcdir=.
-if test "$ac_abs_confdir" = "$ac_pwd"; then
-  srcdir=.
-fi
-# Remove unnecessary trailing slashes from srcdir.
-# Double slashes in file names in object file debugging info
-# mess up M-x gdb in Emacs.
-case $srcdir in
-*/) srcdir=`expr "X$srcdir" : 'X\(.*[^/]\)' \| "X$srcdir" : 'X\(.*\)'`;;
-esac
-for ac_var in $ac_precious_vars; do
-  eval ac_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_env_${ac_var}_value=\$${ac_var}
-  eval ac_cv_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_cv_env_${ac_var}_value=\$${ac_var}
-done
-
-#
-# Report the --help message.
-#
-if test "$ac_init_help" = "long"; then
-  # Omit some internal or obsolete options to make the list less imposing.
-  # This message is too long to be a string in the A/UX 3.1 sh.
-  cat <<_ACEOF
-\`configure' configures Keepalived 2.0.19 to adapt to many kinds of systems.
-
-Usage: $0 [OPTION]... [VAR=VALUE]...
-
-To assign environment variables (e.g., CC, CFLAGS...), specify them as
-VAR=VALUE.  See below for descriptions of some of the useful variables.
-
-Defaults for the options are specified in brackets.
-
-Configuration:
-  -h, --help              display this help and exit
-      --help=short        display options specific to this package
-      --help=recursive    display the short help of all the included packages
-  -V, --version           display version information and exit
-  -q, --quiet, --silent   do not print \`checking ...' messages
-      --cache-file=FILE   cache test results in FILE [disabled]
-  -C, --config-cache      alias for \`--cache-file=config.cache'
-  -n, --no-create         do not create output files
-      --srcdir=DIR        find the sources in DIR [configure dir or \`..']
-
-Installation directories:
-  --prefix=PREFIX         install architecture-independent files in PREFIX
-                          [$ac_default_prefix]
-  --exec-prefix=EPREFIX   install architecture-dependent files in EPREFIX
-                          [PREFIX]
-
-By default, \`make install' will install all the files in
-\`$ac_default_prefix/bin', \`$ac_default_prefix/lib' etc.  You can specify
-an installation prefix other than \`$ac_default_prefix' using \`--prefix',
-for instance \`--prefix=\$HOME'.
-
-For better control, use the options below.
-
-Fine tuning of the installation directories:
-  --bindir=DIR            user executables [EPREFIX/bin]
-  --sbindir=DIR           system admin executables [EPREFIX/sbin]
-  --libexecdir=DIR        program executables [EPREFIX/libexec]
-  --sysconfdir=DIR        read-only single-machine data [PREFIX/etc]
-  --sharedstatedir=DIR    modifiable architecture-independent data [PREFIX/com]
-  --localstatedir=DIR     modifiable single-machine data [PREFIX/var]
-  --libdir=DIR            object code libraries [EPREFIX/lib]
-  --includedir=DIR        C header files [PREFIX/include]
-  --oldincludedir=DIR     C header files for non-gcc [/usr/include]
-  --datarootdir=DIR       read-only arch.-independent data root [PREFIX/share]
-  --datadir=DIR           read-only architecture-independent data [DATAROOTDIR]
-  --infodir=DIR           info documentation [DATAROOTDIR/info]
-  --localedir=DIR         locale-dependent data [DATAROOTDIR/locale]
-  --mandir=DIR            man documentation [DATAROOTDIR/man]
-  --docdir=DIR            documentation root [DATAROOTDIR/doc/keepalived]
-  --htmldir=DIR           html documentation [DOCDIR]
-  --dvidir=DIR            dvi documentation [DOCDIR]
-  --pdfdir=DIR            pdf documentation [DOCDIR]
-  --psdir=DIR             ps documentation [DOCDIR]
-_ACEOF
-
-  cat <<\_ACEOF
-
-Program names:
-  --program-prefix=PREFIX            prepend PREFIX to installed program names
-  --program-suffix=SUFFIX            append SUFFIX to installed program names
-  --program-transform-name=PROGRAM   run sed PROGRAM on installed program names
-_ACEOF
-fi
-
-if test -n "$ac_init_help"; then
-  case $ac_init_help in
-     short | recursive ) echo "Configuration of Keepalived 2.0.19:";;
-   esac
-  cat <<\_ACEOF
-
-Optional Features:
-  --disable-option-checking  ignore unrecognized --enable/--with options
-  --disable-FEATURE       do not include FEATURE (same as --enable-FEATURE=no)
-  --enable-FEATURE[=ARG]  include FEATURE [ARG=yes]
-  --enable-silent-rules   less verbose build output (undo: "make V=1")
-  --disable-silent-rules  verbose build output (undo: "make V=0")
-  --disable-lvs-syncd     do not use LVS synchronization daemon
-  --disable-lvs           do not use the LVS framework
-  --disable-lvs-64bit-stats
-                          do not use the LVS 64-bit stats
-  --disable-vrrp          do not use the VRRP framework
-  --enable-bfd            use the BFD framework
-  --disable-fwmark        compile without SO_MARK support
-  --enable-snmp           compile with SNMP support
-  --enable-snmp-vrrp      compile with SNMP vrrp support
-  --enable-snmp-keepalived
-                          obsolete - use --enable-snmp-vrrp
-  --enable-snmp-checker   compile with SNMP checker support
-  --enable-snmp-rfc       compile with SNMP RFC2787 (VRRPv2) and SNMP RFC6527
-                          (VRRPv3) support
-  --enable-snmp-rfcv2     compile with SNMP RFC2787 (VRRPv2) support
-  --enable-snmp-rfcv3     compile with SNMP RFC6527 (VRRPv3) support
-  --disable-snmp-reply-v3-for-v2
-                          disable RFC6527 responses for VRRPv2 instances
-  --enable-dbus           compile with dbus support
-  --enable-dbus-create-instance
-                          compile with dbus support for creating instances
-  --enable-sha1           compile with SHA1 support
-  --enable-regex          build with HTTP_GET regex checking
-  --enable-regex-timers   build with HTTP_GET regex timers
-  --enable-json           compile with signal to dump configuration and stats
-                          as json
-  --disable-vrrp-auth     compile without VRRP authentication
-  --disable-checksum-compat
-                          compile without v1.3.6 and earlier VRRPv3 unicast
-                          checksum compatibility
-  --disable-routes        compile without ip rules/routes
-  --disable-linkbeat      build without linkbeat support
-  --enable-gnu-std-paths  use GNU standard paths for pid files etc
-  --enable-dynamic-linking
-                          compile with/without dynamically linked
-                          libiptc/libipset/libnl
-  --disable-iptables      compile without iptables support
-  --enable-libiptc-dynamic
-                          compile with libiptc dynamically linked
-  --disable-libipset-dynamic
-                          compile with libipset statically linked
-  --enable-libnl-dynamic  compile with libnl dynamically linked
-  --disable-libiptc       compile without libiptc
-  --disable-libipset      compile without libipset
-  --disable-nftables      build without nftables support
-  --disable-libnl         compile without libnl
-  --disable-track-process build without track-process functionality
-  --enable-strict-config-checks
-                          build with strict configuration checking
-  --disable-hardening     do not build with security hardening
-  --enable-optimise       compiler optimisation level
-  --enable-warnings[=WARNINGS]
-                          additional compiler warnings, disable for reduced
-                          set
-  --enable-extra-warnings extra compiler warnings that will probably produce
-                          many warnings
-  --enable-mem-check      compile with memory alloc checking
-  --enable-mem-check-log  compile with memory alloc checking writing to syslog
-  --enable-timer-check    compile with set time logging
-  --enable-debug          compile with debugging flags
-  --enable-netlink-timers compile with netlink command timers
-  --enable-smtp-alert-debug
-                          compile with smtp-alert debugging
-  --enable-stacktrace     compile with stacktrace support
-  --enable-perf           compile with perf performance data recording support
-                          for vrrp process
-  --enable-log-file       enable logging to file (-g)
-  --enable-dump-threads   compile with thread dumping support
-  --enable-epoll-debug    compile with epoll_wait() debugging support
-  --enable-epoll-thread-dump
-                          compile with epoll thread dumping support
-  --enable-regex-debug    compile with regex debugging support
-  --enable-tsm-debug      compile with TSM debugging support
-  --enable-vrrp-fd-debug  compile with vrrp fd debugging support
-  --enable-eintr-debug    compile with EINTR debugging support, set to
-                          check/nocheck to check/not check for EINTR
-  --enable-track-process-debug
-                          compile with track process debugging support, set to
-                          log all process connector events
-  --enable-parser-debug   compile with parser debugging support
-  --enable-checksum-debug compile with checksum debugging support
-  --enable-dump-keywords  compile with keyword dumping support
-  --enable-network-timestamp
-                          compile with network timestamp debugging support
-  --enable-asserts        compile with assert() enabled
-  --enable-profile        compile with profiling flags
-  --enable-conversion-checks
-                          compile with conversion warnings if sensible
-  --enable-force-conversion-checks
-                          compile with conversion warnings
-  --enable-Werror         compile with warnings being errors
-  --enable-dependency-tracking
-                          do not reject slow dependency extractors
-  --disable-dependency-tracking
-                          speeds up one-time build
-
-Optional Packages:
-  --with-PACKAGE[=ARG]    use PACKAGE [ARG=yes]
-  --without-PACKAGE       do not use PACKAGE (same as --with-PACKAGE=no)
-  --with-kernel-dir=DIR   path to linux kernel source directory
-  --with-init=(upstart|systemd|SYSV|SUSE|openrc)
-                          specify init type
-  --with-run-dir=PATH_TO_RUN
-                          specify directory where /run is located
-  --with-fixed-if-type=TYPE
-                          treat interface type TYPE as unchangeable
-  --with-default-config-file=FILE
-                          Default configuration file
-  --with-systemdsystemunitdir=DIR
-                          Directory for systemd service files]
-
-Some influential environment variables:
-  PKG_CONFIG  path to pkg-config utility
-  PKG_CONFIG_PATH
-              directories to add to pkg-config's search path
-  PKG_CONFIG_LIBDIR
-              path overriding pkg-config's built-in search path
-  CC          C compiler command
-  CFLAGS      C compiler flags
-  LDFLAGS     linker flags, e.g. -L<lib dir> if you have libraries in a
-              nonstandard directory <lib dir>
-  LIBS        libraries to pass to the linker, e.g. -l<library>
-  CPPFLAGS    (Objective) C/C++ preprocessor flags, e.g. -I<include dir> if
-              you have headers in a nonstandard directory <include dir>
-  CPP         C preprocessor
-
-Use these variables to override the choices made by `configure' or to help
-it to find libraries and programs with nonstandard names/locations.
-
-Report bugs to <keepalived-users@groups.io>.
-Keepalived home page: <http://www.keepalived.org/>.
-_ACEOF
-ac_status=$?
-fi
-
-if test "$ac_init_help" = "recursive"; then
-  # If there are subdirs, report their specific --help.
-  for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue
-    test -d "$ac_dir" ||
-      { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } ||
-      continue
-    ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-    cd "$ac_dir" || { ac_status=$?; continue; }
-    # Check for guested configure.
-    if test -f "$ac_srcdir/configure.gnu"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure.gnu" --help=recursive
-    elif test -f "$ac_srcdir/configure"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure" --help=recursive
-    else
-      $as_echo "$as_me: WARNING: no configuration information is in $ac_dir" >&2
-    fi || ac_status=$?
-    cd "$ac_pwd" || { ac_status=$?; break; }
-  done
-fi
-
-test -n "$ac_init_help" && exit $ac_status
-if $ac_init_version; then
-  cat <<\_ACEOF
-Keepalived configure 2.0.19
-generated by GNU Autoconf 2.69
-
-Copyright (C) 2012 Free Software Foundation, Inc.
-This configure script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it.
-_ACEOF
-  exit
-fi
-
-## ------------------------ ##
-## Autoconf initialization. ##
-## ------------------------ ##
-
-# ac_fn_c_try_compile LINENO
-# --------------------------
-# Try to compile conftest.$ac_ext, and return whether this succeeded.
-ac_fn_c_try_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext
-  if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest.$ac_objext; then :
-  ac_retval=0
-else
-  $as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1
-fi
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} # ac_fn_c_try_compile
-
-# ac_fn_c_try_link LINENO
-# -----------------------
-# Try to link conftest.$ac_ext, and return whether this succeeded.
-ac_fn_c_try_link ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest$ac_exeext
-  if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest$ac_exeext && {
-	 test "$cross_compiling" = yes ||
-	 test -x conftest$ac_exeext
-       }; then :
-  ac_retval=0
-else
-  $as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1
-fi
-  # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information
-  # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would
-  # interfere with the next link command; also delete a directory that is
-  # left behind by Apple's compiler.  We do this before executing the actions.
-  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} # ac_fn_c_try_link
-
-# ac_fn_c_try_run LINENO
-# ----------------------
-# Try to link conftest.$ac_ext, and return whether this succeeded. Assumes
-# that executables *can* be run.
-ac_fn_c_try_run ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && { ac_try='./conftest$ac_exeext'
-  { { case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; }; then :
-  ac_retval=0
-else
-  $as_echo "$as_me: program exited with status $ac_status" >&5
-       $as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-       ac_retval=$ac_status
-fi
-  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} # ac_fn_c_try_run
-
-# ac_fn_c_try_cpp LINENO
-# ----------------------
-# Try to preprocess conftest.$ac_ext, and return whether this succeeded.
-ac_fn_c_try_cpp ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  if { { ac_try="$ac_cpp conftest.$ac_ext"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_cpp conftest.$ac_ext") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } > conftest.i && {
-	 test -z "$ac_c_preproc_warn_flag$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       }; then :
-  ac_retval=0
-else
-  $as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-    ac_retval=1
-fi
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} # ac_fn_c_try_cpp
-
-# ac_fn_c_check_header_mongrel LINENO HEADER VAR INCLUDES
-# -------------------------------------------------------
-# Tests whether HEADER exists, giving a warning if it cannot be compiled using
-# the include files in INCLUDES and setting the cache variable VAR
-# accordingly.
-ac_fn_c_check_header_mongrel ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  if eval \${$3+:} false; then :
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-$as_echo_n "checking for $2... " >&6; }
-if eval \${$3+:} false; then :
-  $as_echo_n "(cached) " >&6
-fi
-eval ac_res=\$$3
-	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-else
-  # Is the header compilable?
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking $2 usability" >&5
-$as_echo_n "checking $2 usability... " >&6; }
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-#include <$2>
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_header_compiler=yes
-else
-  ac_header_compiler=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_header_compiler" >&5
-$as_echo "$ac_header_compiler" >&6; }
-
-# Is the header present?
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking $2 presence" >&5
-$as_echo_n "checking $2 presence... " >&6; }
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <$2>
-_ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
-  ac_header_preproc=yes
-else
-  ac_header_preproc=no
-fi
-rm -f conftest.err conftest.i conftest.$ac_ext
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_header_preproc" >&5
-$as_echo "$ac_header_preproc" >&6; }
-
-# So?  What about this header?
-case $ac_header_compiler:$ac_header_preproc:$ac_c_preproc_warn_flag in #((
-  yes:no: )
-    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: accepted by the compiler, rejected by the preprocessor!" >&5
-$as_echo "$as_me: WARNING: $2: accepted by the compiler, rejected by the preprocessor!" >&2;}
-    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: proceeding with the compiler's result" >&5
-$as_echo "$as_me: WARNING: $2: proceeding with the compiler's result" >&2;}
-    ;;
-  no:yes:* )
-    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: present but cannot be compiled" >&5
-$as_echo "$as_me: WARNING: $2: present but cannot be compiled" >&2;}
-    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2:     check for missing prerequisite headers?" >&5
-$as_echo "$as_me: WARNING: $2:     check for missing prerequisite headers?" >&2;}
-    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: see the Autoconf documentation" >&5
-$as_echo "$as_me: WARNING: $2: see the Autoconf documentation" >&2;}
-    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2:     section \"Present But Cannot Be Compiled\"" >&5
-$as_echo "$as_me: WARNING: $2:     section \"Present But Cannot Be Compiled\"" >&2;}
-    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $2: proceeding with the compiler's result" >&5
-$as_echo "$as_me: WARNING: $2: proceeding with the compiler's result" >&2;}
-( $as_echo "## ----------------------------------------- ##
-## Report this to keepalived-users@groups.io ##
-## ----------------------------------------- ##"
-     ) | sed "s/^/$as_me: WARNING:     /" >&2
-    ;;
-esac
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-$as_echo_n "checking for $2... " >&6; }
-if eval \${$3+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  eval "$3=\$ac_header_compiler"
-fi
-eval ac_res=\$$3
-	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-fi
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_header_mongrel
-
-# ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES
-# -------------------------------------------------------
-# Tests whether HEADER exists and can be compiled using the include files in
-# INCLUDES, setting the cache variable VAR accordingly.
-ac_fn_c_check_header_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-$as_echo_n "checking for $2... " >&6; }
-if eval \${$3+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-#include <$2>
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  eval "$3=yes"
-else
-  eval "$3=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$3
-	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_header_compile
-
-# ac_fn_c_check_type LINENO TYPE VAR INCLUDES
-# -------------------------------------------
-# Tests whether TYPE exists after having included INCLUDES, setting cache
-# variable VAR accordingly.
-ac_fn_c_check_type ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-$as_echo_n "checking for $2... " >&6; }
-if eval \${$3+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  eval "$3=no"
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-int
-main ()
-{
-if (sizeof ($2))
-	 return 0;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-int
-main ()
-{
-if (sizeof (($2)))
-	    return 0;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-else
-  eval "$3=yes"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$3
-	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_type
-
-# ac_fn_c_find_intX_t LINENO BITS VAR
-# -----------------------------------
-# Finds a signed integer type with width BITS, setting cache variable VAR
-# accordingly.
-ac_fn_c_find_intX_t ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for int$2_t" >&5
-$as_echo_n "checking for int$2_t... " >&6; }
-if eval \${$3+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  eval "$3=no"
-     # Order is important - never check a type that is potentially smaller
-     # than half of the expected target width.
-     for ac_type in int$2_t 'int' 'long int' \
-	 'long long int' 'short int' 'signed char'; do
-       cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_includes_default
-	     enum { N = $2 / 2 - 1 };
-int
-main ()
-{
-static int test_array [1 - 2 * !(0 < ($ac_type) ((((($ac_type) 1 << N) << N) - 1) * 2 + 1))];
-test_array [0] = 0;
-return test_array [0];
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_includes_default
-	        enum { N = $2 / 2 - 1 };
-int
-main ()
-{
-static int test_array [1 - 2 * !(($ac_type) ((((($ac_type) 1 << N) << N) - 1) * 2 + 1)
-		 < ($ac_type) ((((($ac_type) 1 << N) << N) - 1) * 2 + 2))];
-test_array [0] = 0;
-return test_array [0];
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-else
-  case $ac_type in #(
-  int$2_t) :
-    eval "$3=yes" ;; #(
-  *) :
-    eval "$3=\$ac_type" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-       if eval test \"x\$"$3"\" = x"no"; then :
-
-else
-  break
-fi
-     done
-fi
-eval ac_res=\$$3
-	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_find_intX_t
-
-# ac_fn_c_find_uintX_t LINENO BITS VAR
-# ------------------------------------
-# Finds an unsigned integer type with width BITS, setting cache variable VAR
-# accordingly.
-ac_fn_c_find_uintX_t ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for uint$2_t" >&5
-$as_echo_n "checking for uint$2_t... " >&6; }
-if eval \${$3+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  eval "$3=no"
-     # Order is important - never check a type that is potentially smaller
-     # than half of the expected target width.
-     for ac_type in uint$2_t 'unsigned int' 'unsigned long int' \
-	 'unsigned long long int' 'unsigned short int' 'unsigned char'; do
-       cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_includes_default
-int
-main ()
-{
-static int test_array [1 - 2 * !((($ac_type) -1 >> ($2 / 2 - 1)) >> ($2 / 2 - 1) == 3)];
-test_array [0] = 0;
-return test_array [0];
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  case $ac_type in #(
-  uint$2_t) :
-    eval "$3=yes" ;; #(
-  *) :
-    eval "$3=\$ac_type" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-       if eval test \"x\$"$3"\" = x"no"; then :
-
-else
-  break
-fi
-     done
-fi
-eval ac_res=\$$3
-	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_find_uintX_t
-
-# ac_fn_c_check_func LINENO FUNC VAR
-# ----------------------------------
-# Tests whether FUNC exists, setting the cache variable VAR accordingly
-ac_fn_c_check_func ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-$as_echo_n "checking for $2... " >&6; }
-if eval \${$3+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-/* Define $2 to an innocuous variant, in case <limits.h> declares $2.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $2 innocuous_$2
-
-/* System header to define __stub macros and hopefully few prototypes,
-    which can conflict with char $2 (); below.
-    Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-    <limits.h> exists even on freestanding compilers.  */
-
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-
-#undef $2
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $2 ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$2 || defined __stub___$2
-choke me
-#endif
-
-int
-main ()
-{
-return $2 ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  eval "$3=yes"
-else
-  eval "$3=no"
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-eval ac_res=\$$3
-	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_func
-
-# ac_fn_c_check_decl LINENO SYMBOL VAR INCLUDES
-# ---------------------------------------------
-# Tests whether SYMBOL is declared in INCLUDES, setting cache variable VAR
-# accordingly.
-ac_fn_c_check_decl ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  as_decl_name=`echo $2|sed 's/ *(.*//'`
-  as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'`
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $as_decl_name is declared" >&5
-$as_echo_n "checking whether $as_decl_name is declared... " >&6; }
-if eval \${$3+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-int
-main ()
-{
-#ifndef $as_decl_name
-#ifdef __cplusplus
-  (void) $as_decl_use;
-#else
-  (void) $as_decl_name;
-#endif
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  eval "$3=yes"
-else
-  eval "$3=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$3
-	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_decl
-
-# ac_fn_c_check_member LINENO AGGR MEMBER VAR INCLUDES
-# ----------------------------------------------------
-# Tries to find if the field MEMBER exists in type AGGR, after including
-# INCLUDES, setting cache variable VAR accordingly.
-ac_fn_c_check_member ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $2.$3" >&5
-$as_echo_n "checking for $2.$3... " >&6; }
-if eval \${$4+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$5
-int
-main ()
-{
-static $2 ac_aggr;
-if (ac_aggr.$3)
-return 0;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  eval "$4=yes"
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$5
-int
-main ()
-{
-static $2 ac_aggr;
-if (sizeof ac_aggr.$3)
-return 0;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  eval "$4=yes"
-else
-  eval "$4=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-eval ac_res=\$$4
-	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_member
-cat >config.log <<_ACEOF
-This file contains any messages produced by compilers while
-running configure, to aid debugging if configure makes a mistake.
-
-It was created by Keepalived $as_me 2.0.19, which was
-generated by GNU Autoconf 2.69.  Invocation command line was
-
-  $ $0 $@
-
-_ACEOF
-exec 5>>config.log
-{
-cat <<_ASUNAME
-## --------- ##
-## Platform. ##
-## --------- ##
-
-hostname = `(hostname || uname -n) 2>/dev/null | sed 1q`
-uname -m = `(uname -m) 2>/dev/null || echo unknown`
-uname -r = `(uname -r) 2>/dev/null || echo unknown`
-uname -s = `(uname -s) 2>/dev/null || echo unknown`
-uname -v = `(uname -v) 2>/dev/null || echo unknown`
-
-/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown`
-/bin/uname -X     = `(/bin/uname -X) 2>/dev/null     || echo unknown`
-
-/bin/arch              = `(/bin/arch) 2>/dev/null              || echo unknown`
-/usr/bin/arch -k       = `(/usr/bin/arch -k) 2>/dev/null       || echo unknown`
-/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown`
-/usr/bin/hostinfo      = `(/usr/bin/hostinfo) 2>/dev/null      || echo unknown`
-/bin/machine           = `(/bin/machine) 2>/dev/null           || echo unknown`
-/usr/bin/oslevel       = `(/usr/bin/oslevel) 2>/dev/null       || echo unknown`
-/bin/universe          = `(/bin/universe) 2>/dev/null          || echo unknown`
-
-_ASUNAME
-
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    $as_echo "PATH: $as_dir"
-  done
-IFS=$as_save_IFS
-
-} >&5
-
-cat >&5 <<_ACEOF
-
-
-## ----------- ##
-## Core tests. ##
-## ----------- ##
-
-_ACEOF
-
-
-# Keep a trace of the command line.
-# Strip out --no-create and --no-recursion so they do not pile up.
-# Strip out --silent because we don't want to record it for future runs.
-# Also quote any args containing shell meta-characters.
-# Make two passes to allow for proper duplicate-argument suppression.
-ac_configure_args=
-ac_configure_args0=
-ac_configure_args1=
-ac_must_keep_next=false
-for ac_pass in 1 2
-do
-  for ac_arg
-  do
-    case $ac_arg in
-    -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;;
-    -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-    | -silent | --silent | --silen | --sile | --sil)
-      continue ;;
-    *\'*)
-      ac_arg=`$as_echo "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    case $ac_pass in
-    1) as_fn_append ac_configure_args0 " '$ac_arg'" ;;
-    2)
-      as_fn_append ac_configure_args1 " '$ac_arg'"
-      if test $ac_must_keep_next = true; then
-	ac_must_keep_next=false # Got value, back to normal.
-      else
-	case $ac_arg in
-	  *=* | --config-cache | -C | -disable-* | --disable-* \
-	  | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \
-	  | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \
-	  | -with-* | --with-* | -without-* | --without-* | --x)
-	    case "$ac_configure_args0 " in
-	      "$ac_configure_args1"*" '$ac_arg' "* ) continue ;;
-	    esac
-	    ;;
-	  -* ) ac_must_keep_next=true ;;
-	esac
-      fi
-      as_fn_append ac_configure_args " '$ac_arg'"
-      ;;
-    esac
-  done
-done
-{ ac_configure_args0=; unset ac_configure_args0;}
-{ ac_configure_args1=; unset ac_configure_args1;}
-
-# When interrupted or exit'd, cleanup temporary files, and complete
-# config.log.  We remove comments because anyway the quotes in there
-# would cause problems or look ugly.
-# WARNING: Use '\'' to represent an apostrophe within the trap.
-# WARNING: Do not start the trap code with a newline, due to a FreeBSD 4.0 bug.
-trap 'exit_status=$?
-  # Save into config.log some information that might help in debugging.
-  {
-    echo
-
-    $as_echo "## ---------------- ##
-## Cache variables. ##
-## ---------------- ##"
-    echo
-    # The following way of writing the cache mishandles newlines in values,
-(
-  for ac_var in `(set) 2>&1 | sed -n '\''s/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'\''`; do
-    eval ac_val=\$$ac_var
-    case $ac_val in #(
-    *${as_nl}*)
-      case $ac_var in #(
-      *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
-$as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
-      esac
-      case $ac_var in #(
-      _ | IFS | as_nl) ;; #(
-      BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
-      *) { eval $ac_var=; unset $ac_var;} ;;
-      esac ;;
-    esac
-  done
-  (set) 2>&1 |
-    case $as_nl`(ac_space='\'' '\''; set) 2>&1` in #(
-    *${as_nl}ac_space=\ *)
-      sed -n \
-	"s/'\''/'\''\\\\'\'''\''/g;
-	  s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\''\\2'\''/p"
-      ;; #(
-    *)
-      sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
-      ;;
-    esac |
-    sort
-)
-    echo
-
-    $as_echo "## ----------------- ##
-## Output variables. ##
-## ----------------- ##"
-    echo
-    for ac_var in $ac_subst_vars
-    do
-      eval ac_val=\$$ac_var
-      case $ac_val in
-      *\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
-      esac
-      $as_echo "$ac_var='\''$ac_val'\''"
-    done | sort
-    echo
-
-    if test -n "$ac_subst_files"; then
-      $as_echo "## ------------------- ##
-## File substitutions. ##
-## ------------------- ##"
-      echo
-      for ac_var in $ac_subst_files
-      do
-	eval ac_val=\$$ac_var
-	case $ac_val in
-	*\'\''*) ac_val=`$as_echo "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
-	esac
-	$as_echo "$ac_var='\''$ac_val'\''"
-      done | sort
-      echo
-    fi
-
-    if test -s confdefs.h; then
-      $as_echo "## ----------- ##
-## confdefs.h. ##
-## ----------- ##"
-      echo
-      cat confdefs.h
-      echo
-    fi
-    test "$ac_signal" != 0 &&
-      $as_echo "$as_me: caught signal $ac_signal"
-    $as_echo "$as_me: exit $exit_status"
-  } >&5
-  rm -f core *.core core.conftest.* &&
-    rm -f -r conftest* confdefs* conf$$* $ac_clean_files &&
-    exit $exit_status
-' 0
-for ac_signal in 1 2 13 15; do
-  trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal
-done
-ac_signal=0
-
-# confdefs.h avoids OS command line length limits that DEFS can exceed.
-rm -f -r conftest* confdefs.h
-
-$as_echo "/* confdefs.h */" > confdefs.h
-
-# Predefined preprocessor variables.
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_NAME "$PACKAGE_NAME"
-_ACEOF
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_TARNAME "$PACKAGE_TARNAME"
-_ACEOF
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_VERSION "$PACKAGE_VERSION"
-_ACEOF
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_STRING "$PACKAGE_STRING"
-_ACEOF
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_BUGREPORT "$PACKAGE_BUGREPORT"
-_ACEOF
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_URL "$PACKAGE_URL"
-_ACEOF
-
-
-# Let the site file select an alternate cache file if it wants to.
-# Prefer an explicitly selected file to automatically selected ones.
-ac_site_file1=NONE
-ac_site_file2=NONE
-if test -n "$CONFIG_SITE"; then
-  # We do not want a PATH search for config.site.
-  case $CONFIG_SITE in #((
-    -*)  ac_site_file1=./$CONFIG_SITE;;
-    */*) ac_site_file1=$CONFIG_SITE;;
-    *)   ac_site_file1=./$CONFIG_SITE;;
-  esac
-elif test "x$prefix" != xNONE; then
-  ac_site_file1=$prefix/share/config.site
-  ac_site_file2=$prefix/etc/config.site
-else
-  ac_site_file1=$ac_default_prefix/share/config.site
-  ac_site_file2=$ac_default_prefix/etc/config.site
-fi
-for ac_site_file in "$ac_site_file1" "$ac_site_file2"
-do
-  test "x$ac_site_file" = xNONE && continue
-  if test /dev/null != "$ac_site_file" && test -r "$ac_site_file"; then
-    { $as_echo "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5
-$as_echo "$as_me: loading site script $ac_site_file" >&6;}
-    sed 's/^/| /' "$ac_site_file" >&5
-    . "$ac_site_file" \
-      || { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "failed to load site script $ac_site_file
-See \`config.log' for more details" "$LINENO" 5; }
-  fi
-done
-
-if test -r "$cache_file"; then
-  # Some versions of bash will fail to source /dev/null (special files
-  # actually), so we avoid doing that.  DJGPP emulates it as a regular file.
-  if test /dev/null != "$cache_file" && test -f "$cache_file"; then
-    { $as_echo "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5
-$as_echo "$as_me: loading cache $cache_file" >&6;}
-    case $cache_file in
-      [\\/]* | ?:[\\/]* ) . "$cache_file";;
-      *)                      . "./$cache_file";;
-    esac
-  fi
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5
-$as_echo "$as_me: creating cache $cache_file" >&6;}
-  >$cache_file
-fi
-
-# Check that the precious variables saved in the cache have kept the same
-# value.
-ac_cache_corrupted=false
-for ac_var in $ac_precious_vars; do
-  eval ac_old_set=\$ac_cv_env_${ac_var}_set
-  eval ac_new_set=\$ac_env_${ac_var}_set
-  eval ac_old_val=\$ac_cv_env_${ac_var}_value
-  eval ac_new_val=\$ac_env_${ac_var}_value
-  case $ac_old_set,$ac_new_set in
-    set,)
-      { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&5
-$as_echo "$as_me: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,set)
-      { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was not set in the previous run" >&5
-$as_echo "$as_me: error: \`$ac_var' was not set in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,);;
-    *)
-      if test "x$ac_old_val" != "x$ac_new_val"; then
-	# differences in whitespace do not lead to failure.
-	ac_old_val_w=`echo x $ac_old_val`
-	ac_new_val_w=`echo x $ac_new_val`
-	if test "$ac_old_val_w" != "$ac_new_val_w"; then
-	  { $as_echo "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' has changed since the previous run:" >&5
-$as_echo "$as_me: error: \`$ac_var' has changed since the previous run:" >&2;}
-	  ac_cache_corrupted=:
-	else
-	  { $as_echo "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&5
-$as_echo "$as_me: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&2;}
-	  eval $ac_var=\$ac_old_val
-	fi
-	{ $as_echo "$as_me:${as_lineno-$LINENO}:   former value:  \`$ac_old_val'" >&5
-$as_echo "$as_me:   former value:  \`$ac_old_val'" >&2;}
-	{ $as_echo "$as_me:${as_lineno-$LINENO}:   current value: \`$ac_new_val'" >&5
-$as_echo "$as_me:   current value: \`$ac_new_val'" >&2;}
-      fi;;
-  esac
-  # Pass precious variables to config.status.
-  if test "$ac_new_set" = set; then
-    case $ac_new_val in
-    *\'*) ac_arg=$ac_var=`$as_echo "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;;
-    *) ac_arg=$ac_var=$ac_new_val ;;
-    esac
-    case " $ac_configure_args " in
-      *" '$ac_arg' "*) ;; # Avoid dups.  Use of quotes ensures accuracy.
-      *) as_fn_append ac_configure_args " '$ac_arg'" ;;
-    esac
-  fi
-done
-if $ac_cache_corrupted; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-  { $as_echo "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5
-$as_echo "$as_me: error: changes in the environment can compromise the build" >&2;}
-  as_fn_error $? "run \`make distclean' and/or \`rm $cache_file' and start over" "$LINENO" 5
-fi
-## -------------------- ##
-## Main body of script. ##
-## -------------------- ##
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-am__api_version='1.13'
-
-ac_aux_dir=
-for ac_dir in "$srcdir" "$srcdir/.." "$srcdir/../.."; do
-  if test -f "$ac_dir/install-sh"; then
-    ac_aux_dir=$ac_dir
-    ac_install_sh="$ac_aux_dir/install-sh -c"
-    break
-  elif test -f "$ac_dir/install.sh"; then
-    ac_aux_dir=$ac_dir
-    ac_install_sh="$ac_aux_dir/install.sh -c"
-    break
-  elif test -f "$ac_dir/shtool"; then
-    ac_aux_dir=$ac_dir
-    ac_install_sh="$ac_aux_dir/shtool install -c"
-    break
-  fi
-done
-if test -z "$ac_aux_dir"; then
-  as_fn_error $? "cannot find install-sh, install.sh, or shtool in \"$srcdir\" \"$srcdir/..\" \"$srcdir/../..\"" "$LINENO" 5
-fi
-
-# These three variables are undocumented and unsupported,
-# and are intended to be withdrawn in a future Autoconf release.
-# They can cause serious problems if a builder's source tree is in a directory
-# whose full name contains unusual characters.
-ac_config_guess="$SHELL $ac_aux_dir/config.guess"  # Please don't use this var.
-ac_config_sub="$SHELL $ac_aux_dir/config.sub"  # Please don't use this var.
-ac_configure="$SHELL $ac_aux_dir/configure"  # Please don't use this var.
-
-
-# Find a good install program.  We prefer a C program (faster),
-# so one script is as good as another.  But avoid the broken or
-# incompatible versions:
-# SysV /etc/install, /usr/sbin/install
-# SunOS /usr/etc/install
-# IRIX /sbin/install
-# AIX /bin/install
-# AmigaOS /C/install, which installs bootblocks on floppy discs
-# AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag
-# AFS /usr/afsws/bin/install, which mishandles nonexistent args
-# SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
-# OS/2's system install, which has a completely different semantic
-# ./install, which can be erroneously created by make from ./install.sh.
-# Reject install programs that cannot install multiple files.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5
-$as_echo_n "checking for a BSD-compatible install... " >&6; }
-if test -z "$INSTALL"; then
-if ${ac_cv_path_install+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    # Account for people who put trailing slashes in PATH elements.
-case $as_dir/ in #((
-  ./ | .// | /[cC]/* | \
-  /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \
-  ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \
-  /usr/ucb/* ) ;;
-  *)
-    # OSF1 and SCO ODT 3.0 have their own names for install.
-    # Don't use installbsd from OSF since it installs stuff as root
-    # by default.
-    for ac_prog in ginstall scoinst install; do
-      for ac_exec_ext in '' $ac_executable_extensions; do
-	if as_fn_executable_p "$as_dir/$ac_prog$ac_exec_ext"; then
-	  if test $ac_prog = install &&
-	    grep dspmsg "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # AIX install.  It has an incompatible calling convention.
-	    :
-	  elif test $ac_prog = install &&
-	    grep pwplus "$as_dir/$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # program-specific install script used by HP pwplus--don't use.
-	    :
-	  else
-	    rm -rf conftest.one conftest.two conftest.dir
-	    echo one > conftest.one
-	    echo two > conftest.two
-	    mkdir conftest.dir
-	    if "$as_dir/$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir" &&
-	      test -s conftest.one && test -s conftest.two &&
-	      test -s conftest.dir/conftest.one &&
-	      test -s conftest.dir/conftest.two
-	    then
-	      ac_cv_path_install="$as_dir/$ac_prog$ac_exec_ext -c"
-	      break 3
-	    fi
-	  fi
-	fi
-      done
-    done
-    ;;
-esac
-
-  done
-IFS=$as_save_IFS
-
-rm -rf conftest.one conftest.two conftest.dir
-
-fi
-  if test "${ac_cv_path_install+set}" = set; then
-    INSTALL=$ac_cv_path_install
-  else
-    # As a last resort, use the slow shell script.  Don't cache a
-    # value for INSTALL within a source directory, because that will
-    # break other packages using the cache if that directory is
-    # removed, or if the value is a relative name.
-    INSTALL=$ac_install_sh
-  fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5
-$as_echo "$INSTALL" >&6; }
-
-# Use test -z because SunOS4 sh mishandles braces in ${var-val}.
-# It thinks the first close brace ends the variable substitution.
-test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}'
-
-test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}'
-
-test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether build environment is sane" >&5
-$as_echo_n "checking whether build environment is sane... " >&6; }
-# Reject unsafe characters in $srcdir or the absolute working directory
-# name.  Accept space and tab only in the latter.
-am_lf='
-'
-case `pwd` in
-  *[\\\"\#\$\&\'\`$am_lf]*)
-    as_fn_error $? "unsafe absolute working directory name" "$LINENO" 5;;
-esac
-case $srcdir in
-  *[\\\"\#\$\&\'\`$am_lf\ \	]*)
-    as_fn_error $? "unsafe srcdir value: '$srcdir'" "$LINENO" 5;;
-esac
-
-# Do 'set' in a subshell so we don't clobber the current shell's
-# arguments.  Must try -L first in case configure is actually a
-# symlink; some systems play weird games with the mod time of symlinks
-# (eg FreeBSD returns the mod time of the symlink's containing
-# directory).
-if (
-   am_has_slept=no
-   for am_try in 1 2; do
-     echo "timestamp, slept: $am_has_slept" > conftest.file
-     set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null`
-     if test "$*" = "X"; then
-	# -L didn't work.
-	set X `ls -t "$srcdir/configure" conftest.file`
-     fi
-     if test "$*" != "X $srcdir/configure conftest.file" \
-	&& test "$*" != "X conftest.file $srcdir/configure"; then
-
-	# If neither matched, then we have a broken ls.  This can happen
-	# if, for instance, CONFIG_SHELL is bash and it inherits a
-	# broken ls alias from the environment.  This has actually
-	# happened.  Such a system could not be considered "sane".
-	as_fn_error $? "ls -t appears to fail.  Make sure there is not a broken
-  alias in your environment" "$LINENO" 5
-     fi
-     if test "$2" = conftest.file || test $am_try -eq 2; then
-       break
-     fi
-     # Just in case.
-     sleep 1
-     am_has_slept=yes
-   done
-   test "$2" = conftest.file
-   )
-then
-   # Ok.
-   :
-else
-   as_fn_error $? "newly created file is older than distributed files!
-Check your system clock" "$LINENO" 5
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-# If we didn't sleep, we still need to ensure time stamps of config.status and
-# generated files are strictly newer.
-am_sleep_pid=
-if grep 'slept: no' conftest.file >/dev/null 2>&1; then
-  ( sleep 1 ) &
-  am_sleep_pid=$!
-fi
-
-rm -f conftest.file
-
-test "$program_prefix" != NONE &&
-  program_transform_name="s&^&$program_prefix&;$program_transform_name"
-# Use a double $ so make ignores it.
-test "$program_suffix" != NONE &&
-  program_transform_name="s&\$&$program_suffix&;$program_transform_name"
-# Double any \ or $.
-# By default was `s,x,x', remove it if useless.
-ac_script='s/[\\$]/&&/g;s/;s,x,x,$//'
-program_transform_name=`$as_echo "$program_transform_name" | sed "$ac_script"`
-
-# expand $ac_aux_dir to an absolute path
-am_aux_dir=`cd $ac_aux_dir && pwd`
-
-if test x"${MISSING+set}" != xset; then
-  case $am_aux_dir in
-  *\ * | *\	*)
-    MISSING="\${SHELL} \"$am_aux_dir/missing\"" ;;
-  *)
-    MISSING="\${SHELL} $am_aux_dir/missing" ;;
-  esac
-fi
-# Use eval to expand $SHELL
-if eval "$MISSING --is-lightweight"; then
-  am_missing_run="$MISSING "
-else
-  am_missing_run=
-  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: 'missing' script is too old or missing" >&5
-$as_echo "$as_me: WARNING: 'missing' script is too old or missing" >&2;}
-fi
-
-if test x"${install_sh}" != xset; then
-  case $am_aux_dir in
-  *\ * | *\	*)
-    install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;;
-  *)
-    install_sh="\${SHELL} $am_aux_dir/install-sh"
-  esac
-fi
-
-# Installed binaries are usually stripped using 'strip' when the user
-# run "make install-strip".  However 'strip' might not be the right
-# tool to use in cross-compilation environments, therefore Automake
-# will honor the 'STRIP' environment variable to overrule this program.
-if test "$cross_compiling" != no; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_STRIP+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-$as_echo "$STRIP" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_STRIP+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-$as_echo "$ac_ct_STRIP" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-fi
-INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s"
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for a thread-safe mkdir -p" >&5
-$as_echo_n "checking for a thread-safe mkdir -p... " >&6; }
-if test -z "$MKDIR_P"; then
-  if ${ac_cv_path_mkdir+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/opt/sfw/bin
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_prog in mkdir gmkdir; do
-	 for ac_exec_ext in '' $ac_executable_extensions; do
-	   as_fn_executable_p "$as_dir/$ac_prog$ac_exec_ext" || continue
-	   case `"$as_dir/$ac_prog$ac_exec_ext" --version 2>&1` in #(
-	     'mkdir (GNU coreutils) '* | \
-	     'mkdir (coreutils) '* | \
-	     'mkdir (fileutils) '4.1*)
-	       ac_cv_path_mkdir=$as_dir/$ac_prog$ac_exec_ext
-	       break 3;;
-	   esac
-	 done
-       done
-  done
-IFS=$as_save_IFS
-
-fi
-
-  test -d ./--version && rmdir ./--version
-  if test "${ac_cv_path_mkdir+set}" = set; then
-    MKDIR_P="$ac_cv_path_mkdir -p"
-  else
-    # As a last resort, use the slow shell script.  Don't cache a
-    # value for MKDIR_P within a source directory, because that will
-    # break other packages using the cache if that directory is
-    # removed, or if the value is a relative name.
-    MKDIR_P="$ac_install_sh -d"
-  fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $MKDIR_P" >&5
-$as_echo "$MKDIR_P" >&6; }
-
-for ac_prog in gawk mawk nawk awk
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_AWK+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$AWK"; then
-  ac_cv_prog_AWK="$AWK" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AWK="$ac_prog"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-AWK=$ac_cv_prog_AWK
-if test -n "$AWK"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5
-$as_echo "$AWK" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-  test -n "$AWK" && break
-done
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} sets \$(MAKE)" >&5
-$as_echo_n "checking whether ${MAKE-make} sets \$(MAKE)... " >&6; }
-set x ${MAKE-make}
-ac_make=`$as_echo "$2" | sed 's/+/p/g; s/[^a-zA-Z0-9_]/_/g'`
-if eval \${ac_cv_prog_make_${ac_make}_set+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat >conftest.make <<\_ACEOF
-SHELL = /bin/sh
-all:
-	@echo '@@@%%%=$(MAKE)=@@@%%%'
-_ACEOF
-# GNU make sometimes prints "make[1]: Entering ...", which would confuse us.
-case `${MAKE-make} -f conftest.make 2>/dev/null` in
-  *@@@%%%=?*=@@@%%%*)
-    eval ac_cv_prog_make_${ac_make}_set=yes;;
-  *)
-    eval ac_cv_prog_make_${ac_make}_set=no;;
-esac
-rm -f conftest.make
-fi
-if eval test \$ac_cv_prog_make_${ac_make}_set = yes; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-  SET_MAKE=
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-  SET_MAKE="MAKE=${MAKE-make}"
-fi
-
-rm -rf .tst 2>/dev/null
-mkdir .tst 2>/dev/null
-if test -d .tst; then
-  am__leading_dot=.
-else
-  am__leading_dot=_
-fi
-rmdir .tst 2>/dev/null
-
-# Check whether --enable-silent-rules was given.
-if test "${enable_silent_rules+set}" = set; then :
-  enableval=$enable_silent_rules;
-fi
-
-case $enable_silent_rules in # (((
-  yes) AM_DEFAULT_VERBOSITY=0;;
-   no) AM_DEFAULT_VERBOSITY=1;;
-    *) AM_DEFAULT_VERBOSITY=1;;
-esac
-am_make=${MAKE-make}
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5
-$as_echo_n "checking whether $am_make supports nested variables... " >&6; }
-if ${am_cv_make_support_nested_variables+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if $as_echo 'TRUE=$(BAR$(V))
-BAR0=false
-BAR1=true
-V=1
-am__doit:
-	@$(TRUE)
-.PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then
-  am_cv_make_support_nested_variables=yes
-else
-  am_cv_make_support_nested_variables=no
-fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5
-$as_echo "$am_cv_make_support_nested_variables" >&6; }
-if test $am_cv_make_support_nested_variables = yes; then
-    AM_V='$(V)'
-  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-else
-  AM_V=$AM_DEFAULT_VERBOSITY
-  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
-fi
-AM_BACKSLASH='\'
-
-if test "`cd $srcdir && pwd`" != "`pwd`"; then
-  # Use -I$(srcdir) only when $(srcdir) != ., so that make's output
-  # is not polluted with repeated "-I."
-  am__isrc=' -I$(srcdir)'
-  # test to see if srcdir already configured
-  if test -f $srcdir/config.status; then
-    as_fn_error $? "source directory already configured; run \"make distclean\" there first" "$LINENO" 5
-  fi
-fi
-
-# test whether we have cygpath
-if test -z "$CYGPATH_W"; then
-  if (cygpath --version) >/dev/null 2>/dev/null; then
-    CYGPATH_W='cygpath -w'
-  else
-    CYGPATH_W=echo
-  fi
-fi
-
-
-# Define the identity of the package.
- PACKAGE='keepalived'
- VERSION='2.0.19'
-
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE "$PACKAGE"
-_ACEOF
-
-
-cat >>confdefs.h <<_ACEOF
-#define VERSION "$VERSION"
-_ACEOF
-
-# Some tools Automake needs.
-
-ACLOCAL=${ACLOCAL-"${am_missing_run}aclocal-${am__api_version}"}
-
-
-AUTOCONF=${AUTOCONF-"${am_missing_run}autoconf"}
-
-
-AUTOMAKE=${AUTOMAKE-"${am_missing_run}automake-${am__api_version}"}
-
-
-AUTOHEADER=${AUTOHEADER-"${am_missing_run}autoheader"}
-
-
-MAKEINFO=${MAKEINFO-"${am_missing_run}makeinfo"}
-
-# For better backward compatibility.  To be removed once Automake 1.9.x
-# dies out for good.  For more background, see:
-# <http://lists.gnu.org/archive/html/automake/2012-07/msg00001.html>
-# <http://lists.gnu.org/archive/html/automake/2012-07/msg00014.html>
-mkdir_p='$(MKDIR_P)'
-
-# We need awk for the "check" target.  The system "awk" is bad on
-# some platforms.
-# Always define AMTAR for backward compatibility.  Yes, it's still used
-# in the wild :-(  We should find a proper way to deprecate it ...
-AMTAR='$${TAR-tar}'
-
-
-# We'll loop over all known methods to create a tar archive until one works.
-_am_tools='gnutar  pax cpio none'
-
-am__tar='$${TAR-tar} chof - "$$tardir"' am__untar='$${TAR-tar} xf -'
-
-
-
-
-
-
-
-
-
-ac_config_headers="$ac_config_headers lib/config.h lib/config_warnings.h"
-
-
-
-
-
-ac_config_files="$ac_config_files Makefile keepalived/Makefile lib/Makefile keepalived/core/Makefile keepalived.spec genhash/Makefile keepalived/check/Makefile keepalived/vrrp/Makefile keepalived/bfd/Makefile doc/Makefile bin_install/Makefile keepalived/dbus/Makefile keepalived/etc/Makefile keepalived/etc/init/Makefile keepalived/etc/init.d/Makefile doc/man/man8/Makefile"
-
-
-
-MAINTAINERCLEANFILES="*~ *.orig *.rej core core.*"
-
-CONFIG_OPTIONS=
-SYSTEM_OPTIONS=
-
-# Check whether --enable-silent-rules was given.
-if test "${enable_silent_rules+set}" = set; then :
-  enableval=$enable_silent_rules;
-fi
-
-case $enable_silent_rules in # (((
-  yes) AM_DEFAULT_VERBOSITY=0;;
-   no) AM_DEFAULT_VERBOSITY=1;;
-    *) AM_DEFAULT_VERBOSITY=0;;
-esac
-am_make=${MAKE-make}
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5
-$as_echo_n "checking whether $am_make supports nested variables... " >&6; }
-if ${am_cv_make_support_nested_variables+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if $as_echo 'TRUE=$(BAR$(V))
-BAR0=false
-BAR1=true
-V=1
-am__doit:
-	@$(TRUE)
-.PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then
-  am_cv_make_support_nested_variables=yes
-else
-  am_cv_make_support_nested_variables=no
-fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5
-$as_echo "$am_cv_make_support_nested_variables" >&6; }
-if test $am_cv_make_support_nested_variables = yes; then
-    AM_V='$(V)'
-  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-else
-  AM_V=$AM_DEFAULT_VERBOSITY
-  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
-fi
-AM_BACKSLASH='\'
-
-
-
-
-
-
-
-
-
-if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
-	if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args.
-set dummy ${ac_tool_prefix}pkg-config; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_PKG_CONFIG+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  case $PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PKG_CONFIG="$PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_path_PKG_CONFIG="$as_dir/$ac_word$ac_exec_ext"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac
-fi
-PKG_CONFIG=$ac_cv_path_PKG_CONFIG
-if test -n "$PKG_CONFIG"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $PKG_CONFIG" >&5
-$as_echo "$PKG_CONFIG" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_path_PKG_CONFIG"; then
-  ac_pt_PKG_CONFIG=$PKG_CONFIG
-  # Extract the first word of "pkg-config", so it can be a program name with args.
-set dummy pkg-config; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_ac_pt_PKG_CONFIG+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  case $ac_pt_PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_ac_pt_PKG_CONFIG="$ac_pt_PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_path_ac_pt_PKG_CONFIG="$as_dir/$ac_word$ac_exec_ext"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac
-fi
-ac_pt_PKG_CONFIG=$ac_cv_path_ac_pt_PKG_CONFIG
-if test -n "$ac_pt_PKG_CONFIG"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKG_CONFIG" >&5
-$as_echo "$ac_pt_PKG_CONFIG" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-  if test "x$ac_pt_PKG_CONFIG" = x; then
-    PKG_CONFIG=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    PKG_CONFIG=$ac_pt_PKG_CONFIG
-  fi
-else
-  PKG_CONFIG="$ac_cv_path_PKG_CONFIG"
-fi
-
-fi
-if test -n "$PKG_CONFIG"; then
-	_pkg_min_version=0.9.0
-	{ $as_echo "$as_me:${as_lineno-$LINENO}: checking pkg-config is at least version $_pkg_min_version" >&5
-$as_echo_n "checking pkg-config is at least version $_pkg_min_version... " >&6; }
-	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
-		{ $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-	else
-		{ $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-		PKG_CONFIG=""
-	fi
-fi
-
-# Check whether --enable-lvs-syncd was given.
-if test "${enable_lvs_syncd+set}" = set; then :
-  enableval=$enable_lvs_syncd;
-fi
-
-# Check whether --enable-lvs was given.
-if test "${enable_lvs+set}" = set; then :
-  enableval=$enable_lvs;
-fi
-
-# Check whether --enable-lvs-64bit-stats was given.
-if test "${enable_lvs_64bit_stats+set}" = set; then :
-  enableval=$enable_lvs_64bit_stats;
-fi
-
-# Check whether --enable-vrrp was given.
-if test "${enable_vrrp+set}" = set; then :
-  enableval=$enable_vrrp;
-fi
-
-# Check whether --enable-bfd was given.
-if test "${enable_bfd+set}" = set; then :
-  enableval=$enable_bfd;
-fi
-
-
-# Check whether --with-kernel-dir was given.
-if test "${with_kernel_dir+set}" = set; then :
-  withval=$with_kernel_dir;   kernel_src_path="$withval"
-                          else kernel_src_path=""
-fi
-
-# Check whether --enable-fwmark was given.
-if test "${enable_fwmark+set}" = set; then :
-  enableval=$enable_fwmark;
-fi
-
-# Check whether --enable-snmp was given.
-if test "${enable_snmp+set}" = set; then :
-  enableval=$enable_snmp;
-fi
-
-# Check whether --enable-snmp-vrrp was given.
-if test "${enable_snmp_vrrp+set}" = set; then :
-  enableval=$enable_snmp_vrrp;
-fi
-
-# Check whether --enable-snmp-keepalived was given.
-if test "${enable_snmp_keepalived+set}" = set; then :
-  enableval=$enable_snmp_keepalived;
-fi
-
-# Check whether --enable-snmp-checker was given.
-if test "${enable_snmp_checker+set}" = set; then :
-  enableval=$enable_snmp_checker;
-fi
-
-# Check whether --enable-snmp-rfc was given.
-if test "${enable_snmp_rfc+set}" = set; then :
-  enableval=$enable_snmp_rfc;
-fi
-
-# Check whether --enable-snmp-rfcv2 was given.
-if test "${enable_snmp_rfcv2+set}" = set; then :
-  enableval=$enable_snmp_rfcv2;
-fi
-
-# Check whether --enable-snmp-rfcv3 was given.
-if test "${enable_snmp_rfcv3+set}" = set; then :
-  enableval=$enable_snmp_rfcv3;
-fi
-
-# Check whether --enable-snmp-reply-v3-for-v2 was given.
-if test "${enable_snmp_reply_v3_for_v2+set}" = set; then :
-  enableval=$enable_snmp_reply_v3_for_v2;
-fi
-
-# Check whether --enable-dbus was given.
-if test "${enable_dbus+set}" = set; then :
-  enableval=$enable_dbus;
-fi
-
-# Check whether --enable-dbus-create-instance was given.
-if test "${enable_dbus_create_instance+set}" = set; then :
-  enableval=$enable_dbus_create_instance;
-fi
-
-# Check whether --enable-sha1 was given.
-if test "${enable_sha1+set}" = set; then :
-  enableval=$enable_sha1;
-fi
-
-# Check whether --enable-regex was given.
-if test "${enable_regex+set}" = set; then :
-  enableval=$enable_regex;
-fi
-
-# Check whether --enable-regex-timers was given.
-if test "${enable_regex_timers+set}" = set; then :
-  enableval=$enable_regex_timers;
-fi
-
-# Check whether --enable-json was given.
-if test "${enable_json+set}" = set; then :
-  enableval=$enable_json;
-fi
-
-
-# Check whether --with-init was given.
-if test "${with_init+set}" = set; then :
-  withval=$with_init; init_type="$withval"
-else
-  init_type=""
-fi
-
-# Check whether --enable-vrrp-auth was given.
-if test "${enable_vrrp_auth+set}" = set; then :
-  enableval=$enable_vrrp_auth;
-fi
-
-# Check whether --enable-checksum_compat was given.
-if test "${enable_checksum_compat+set}" = set; then :
-  enableval=$enable_checksum_compat;
-fi
-
-# Check whether --enable-routes was given.
-if test "${enable_routes+set}" = set; then :
-  enableval=$enable_routes;
-fi
-
-# Check whether --enable-linkbeat was given.
-if test "${enable_linkbeat+set}" = set; then :
-  enableval=$enable_linkbeat;
-fi
-
-# Check whether --enable-gnu-std-paths was given.
-if test "${enable_gnu_std_paths+set}" = set; then :
-  enableval=$enable_gnu_std_paths;
-fi
-
-# Check whether --enable-dynamic-linking was given.
-if test "${enable_dynamic_linking+set}" = set; then :
-  enableval=$enable_dynamic_linking;
-fi
-
-# Check whether --enable-iptables was given.
-if test "${enable_iptables+set}" = set; then :
-  enableval=$enable_iptables;
-else
-  IPTABLES_SILENT=Yes
-fi
-
-# Check whether --enable-libiptc-dynamic was given.
-if test "${enable_libiptc_dynamic+set}" = set; then :
-  enableval=$enable_libiptc_dynamic;
-fi
-
-# Check whether --enable-libipset-dynamic was given.
-if test "${enable_libipset_dynamic+set}" = set; then :
-  enableval=$enable_libipset_dynamic;
-fi
-
-# Check whether --enable-libnl-dynamic was given.
-if test "${enable_libnl_dynamic+set}" = set; then :
-  enableval=$enable_libnl_dynamic;
-fi
-
-# Check whether --enable-libiptc was given.
-if test "${enable_libiptc+set}" = set; then :
-  enableval=$enable_libiptc;
-fi
-
-# Check whether --enable-libipset was given.
-if test "${enable_libipset+set}" = set; then :
-  enableval=$enable_libipset;
-fi
-
-# Check whether --enable-nftables was given.
-if test "${enable_nftables+set}" = set; then :
-  enableval=$enable_nftables;
-else
-  NFTABLES_SILENT=Yes
-fi
-
-# Check whether --enable-libnl was given.
-if test "${enable_libnl+set}" = set; then :
-  enableval=$enable_libnl;
-fi
-
-# Check whether --enable-track-process was given.
-if test "${enable_track_process+set}" = set; then :
-  enableval=$enable_track_process;
-fi
-
-
-# Check whether --with-run-dir was given.
-if test "${with_run_dir+set}" = set; then :
-  withval=$with_run_dir; RUN_DIR_SPECIFIED=Y
-else
-  RUN_DIR_SPECIFIED=N
-fi
-
-# Check whether --enable-strict-config-checks was given.
-if test "${enable_strict_config_checks+set}" = set; then :
-  enableval=$enable_strict_config_checks;
-fi
-
-# Check whether --enable-hardening was given.
-if test "${enable_hardening+set}" = set; then :
-  enableval=$enable_hardening;
-fi
-
-# Check whether --enable-optimise was given.
-if test "${enable_optimise+set}" = set; then :
-  enableval=$enable_optimise;
-else
-  enable_optimise=not-specified
-fi
-
-# Check whether --enable-warnings was given.
-if test "${enable_warnings+set}" = set; then :
-  enableval=$enable_warnings;
-else
-  enable_warnings=yes
-fi
-
-# Check whether --enable-extra-warnings was given.
-if test "${enable_extra_warnings+set}" = set; then :
-  enableval=$enable_extra_warnings;
-fi
-
-# Check whether --enable-mem-check was given.
-if test "${enable_mem_check+set}" = set; then :
-  enableval=$enable_mem_check;
-fi
-
-# Check whether --enable-mem-check-log was given.
-if test "${enable_mem_check_log+set}" = set; then :
-  enableval=$enable_mem_check_log;
-fi
-
-# Check whether --enable-timer-check was given.
-if test "${enable_timer_check+set}" = set; then :
-  enableval=$enable_timer_check;
-fi
-
-# Check whether --enable-debug was given.
-if test "${enable_debug+set}" = set; then :
-  enableval=$enable_debug;
-fi
-
-# Check whether --enable-netlink-timers was given.
-if test "${enable_netlink_timers+set}" = set; then :
-  enableval=$enable_netlink_timers;
-fi
-
-# Check whether --enable-smtp-alert-debug was given.
-if test "${enable_smtp_alert_debug+set}" = set; then :
-  enableval=$enable_smtp_alert_debug;
-fi
-
-# Check whether --enable-stacktrace was given.
-if test "${enable_stacktrace+set}" = set; then :
-  enableval=$enable_stacktrace;
-fi
-
-# Check whether --enable-perf was given.
-if test "${enable_perf+set}" = set; then :
-  enableval=$enable_perf;
-fi
-
-# Check whether --enable-log-file was given.
-if test "${enable_log_file+set}" = set; then :
-  enableval=$enable_log_file;
-fi
-
-# Check whether --enable-dump-threads was given.
-if test "${enable_dump_threads+set}" = set; then :
-  enableval=$enable_dump_threads;
-fi
-
-# Check whether --enable-epoll-debug was given.
-if test "${enable_epoll_debug+set}" = set; then :
-  enableval=$enable_epoll_debug;
-fi
-
-# Check whether --enable-epoll-thread-dump was given.
-if test "${enable_epoll_thread_dump+set}" = set; then :
-  enableval=$enable_epoll_thread_dump;
-fi
-
-# Check whether --enable-regex-debug was given.
-if test "${enable_regex_debug+set}" = set; then :
-  enableval=$enable_regex_debug;
-fi
-
-# Check whether --enable-tsm-debug was given.
-if test "${enable_tsm_debug+set}" = set; then :
-  enableval=$enable_tsm_debug;
-fi
-
-# Check whether --enable-vrrp-fd-debug was given.
-if test "${enable_vrrp_fd_debug+set}" = set; then :
-  enableval=$enable_vrrp_fd_debug;
-fi
-
-# Check whether --enable-eintr-debug was given.
-if test "${enable_eintr_debug+set}" = set; then :
-  enableval=$enable_eintr_debug;
-fi
-
-# Check whether --enable-track-process-debug was given.
-if test "${enable_track_process_debug+set}" = set; then :
-  enableval=$enable_track_process_debug;
-fi
-
-# Check whether --enable-parser-debug was given.
-if test "${enable_parser_debug+set}" = set; then :
-  enableval=$enable_parser_debug;
-fi
-
-# Check whether --enable-checksum-debug was given.
-if test "${enable_checksum_debug+set}" = set; then :
-  enableval=$enable_checksum_debug;
-fi
-
-# Check whether --enable-dump-keywords was given.
-if test "${enable_dump_keywords+set}" = set; then :
-  enableval=$enable_dump_keywords;
-fi
-
-# Check whether --enable-network-timestamp was given.
-if test "${enable_network_timestamp+set}" = set; then :
-  enableval=$enable_network_timestamp;
-fi
-
-# Check whether --enable-asserts was given.
-if test "${enable_asserts+set}" = set; then :
-  enableval=$enable_asserts;
-fi
-
-
-# Check whether --with-fixed-if-type was given.
-if test "${with_fixed_if_type+set}" = set; then :
-  withval=$with_fixed_if_type;
-fi
-
-
-# Check whether --with-default-config-file was given.
-if test "${with_default_config_file+set}" = set; then :
-  withval=$with_default_config_file; default_config_file="$withval"
-else
-  default_config_file=""
-fi
-
-# Check whether --enable-profile was given.
-if test "${enable_profile+set}" = set; then :
-  enableval=$enable_profile;
-fi
-
-# Check whether --enable-conversion-checks was given.
-if test "${enable_conversion_checks+set}" = set; then :
-  enableval=$enable_conversion_checks;
-fi
-
-# Check whether --enable-force-conversion-checks was given.
-if test "${enable_force_conversion_checks+set}" = set; then :
-  enableval=$enable_force_conversion_checks;
-fi
-
-# Check whether --enable-Werror was given.
-if test "${enable_Werror+set}" = set; then :
-  enableval=$enable_Werror;
-fi
-
-
-
-# Check whether --with-systemdsystemunitdir was given.
-if test "${with_systemdsystemunitdir+set}" = set; then :
-  withval=$with_systemdsystemunitdir;
-fi
-
-
-# Set the kernel headers path
-if test -n "$kernel_src_path"; then
-  if test ! -d $kernel_src_path/include; then
-    as_fn_error $? "kernel source path $kernel_src_path/include does not exist" "$LINENO" 5
-  fi
-  if test ! -d $kernel_src_path/include/linux; then
-    as_fn_error $? "kernel source path $kernel_src_path/include does not appear to include linux header files" "$LINENO" 5
-  fi
-  if test -d $kernel_src_path/include/uapi/linux; then
-    as_fn_error $? "kernel source path $kernel_src_path appears to be an unprocessed kernel source tree" "$LINENO" 5
-  fi
-  kernelinc="-isystem $kernel_src_path/include"
-elif test ! -d /usr/include/linux -a \
-	    -d /usr/src/linux/include; then
-  kernelinc="-isystem /usr/src/linux/include"
-else
-  kernelinc=
-fi
-
-CPPFLAGS="$kernelinc $CPPFLAGS"
-
-# Checks for programs.
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}gcc; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_CC+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}gcc"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-$as_echo "$CC" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "gcc", so it can be a program name with args.
-set dummy gcc; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_CC+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="gcc"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-$as_echo "$ac_ct_CC" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-else
-  CC="$ac_cv_prog_CC"
-fi
-
-if test -z "$CC"; then
-          if test -n "$ac_tool_prefix"; then
-    # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}cc; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_CC+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}cc"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-$as_echo "$CC" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-  fi
-fi
-if test -z "$CC"; then
-  # Extract the first word of "cc", so it can be a program name with args.
-set dummy cc; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_CC+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-  ac_prog_rejected=no
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    if test "$as_dir/$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then
-       ac_prog_rejected=yes
-       continue
-     fi
-    ac_cv_prog_CC="cc"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-if test $ac_prog_rejected = yes; then
-  # We found a bogon in the path, so make sure we never use it.
-  set dummy $ac_cv_prog_CC
-  shift
-  if test $# != 0; then
-    # We chose a different compiler from the bogus one.
-    # However, it has the same basename, so the bogon will be chosen
-    # first if we set CC to just the basename; use the full file name.
-    shift
-    ac_cv_prog_CC="$as_dir/$ac_word${1+' '}$@"
-  fi
-fi
-fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-$as_echo "$CC" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  for ac_prog in cl.exe
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_CC+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="$ac_tool_prefix$ac_prog"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-$as_echo "$CC" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-    test -n "$CC" && break
-  done
-fi
-if test -z "$CC"; then
-  ac_ct_CC=$CC
-  for ac_prog in cl.exe
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_CC+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="$ac_prog"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-$as_echo "$ac_ct_CC" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_CC" && break
-done
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-fi
-
-fi
-
-
-test -z "$CC" && { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "no acceptable C compiler found in \$PATH
-See \`config.log' for more details" "$LINENO" 5; }
-
-# Provide some information about the compiler.
-$as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5
-set X $ac_compile
-ac_compiler=$2
-for ac_option in --version -v -V -qversion; do
-  { { ac_try="$ac_compiler $ac_option >&5"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_compiler $ac_option >&5") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    sed '10a\
-... rest of stderr output deleted ...
-         10q' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-  fi
-  rm -f conftest.er1 conftest.err
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-done
-
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main ()
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files_save=$ac_clean_files
-ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out"
-# Try to create an executable without -o first, disregard a.out.
-# It will help us diagnose broken compilers, and finding out an intuition
-# of exeext.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5
-$as_echo_n "checking whether the C compiler works... " >&6; }
-ac_link_default=`$as_echo "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
-
-# The possible output files:
-ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*"
-
-ac_rmfiles=
-for ac_file in $ac_files
-do
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    * ) ac_rmfiles="$ac_rmfiles $ac_file";;
-  esac
-done
-rm -f $ac_rmfiles
-
-if { { ac_try="$ac_link_default"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_link_default") 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then :
-  # Autoconf-2.13 could set the ac_cv_exeext variable to `no'.
-# So ignore a value of `no', otherwise this would lead to `EXEEXT = no'
-# in a Makefile.  We should not override ac_cv_exeext if it was cached,
-# so that the user can short-circuit this test for compilers unknown to
-# Autoconf.
-for ac_file in $ac_files ''
-do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj )
-	;;
-    [ab].out )
-	# We found the default executable, but exeext='' is most
-	# certainly right.
-	break;;
-    *.* )
-	if test "${ac_cv_exeext+set}" = set && test "$ac_cv_exeext" != no;
-	then :; else
-	   ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	fi
-	# We set ac_cv_exeext here because the later test for it is not
-	# safe: cross compilers may not add the suffix if given an `-o'
-	# argument, so we may need to know it at that point already.
-	# Even if this section looks crufty: it has the advantage of
-	# actually working.
-	break;;
-    * )
-	break;;
-  esac
-done
-test "$ac_cv_exeext" = no && ac_cv_exeext=
-
-else
-  ac_file=''
-fi
-if test -z "$ac_file"; then :
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-$as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error 77 "C compiler cannot create executables
-See \`config.log' for more details" "$LINENO" 5; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5
-$as_echo_n "checking for C compiler default output file name... " >&6; }
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5
-$as_echo "$ac_file" >&6; }
-ac_exeext=$ac_cv_exeext
-
-rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out
-ac_clean_files=$ac_clean_files_save
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5
-$as_echo_n "checking for suffix of executables... " >&6; }
-if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then :
-  # If both `conftest.exe' and `conftest' are `present' (well, observable)
-# catch `conftest.exe'.  For instance with Cygwin, `ls conftest' will
-# work properly (i.e., refer to `conftest.exe'), while it won't with
-# `rm'.
-for ac_file in conftest.exe conftest conftest.*; do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	  break;;
-    * ) break;;
-  esac
-done
-else
-  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of executables: cannot compile and link
-See \`config.log' for more details" "$LINENO" 5; }
-fi
-rm -f conftest conftest$ac_cv_exeext
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5
-$as_echo "$ac_cv_exeext" >&6; }
-
-rm -f conftest.$ac_ext
-EXEEXT=$ac_cv_exeext
-ac_exeext=$EXEEXT
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <stdio.h>
-int
-main ()
-{
-FILE *f = fopen ("conftest.out", "w");
- return ferror (f) || fclose (f) != 0;
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files="$ac_clean_files conftest.out"
-# Check that the compiler produces executables we can run.  If not, either
-# the compiler is broken, or we cross compile.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5
-$as_echo_n "checking whether we are cross compiling... " >&6; }
-if test "$cross_compiling" != yes; then
-  { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-  if { ac_try='./conftest$ac_cv_exeext'
-  { { case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; }; then
-    cross_compiling=no
-  else
-    if test "$cross_compiling" = maybe; then
-	cross_compiling=yes
-    else
-	{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "cannot run C compiled programs.
-If you meant to cross compile, use \`--host'.
-See \`config.log' for more details" "$LINENO" 5; }
-    fi
-  fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5
-$as_echo "$cross_compiling" >&6; }
-
-rm -f conftest.$ac_ext conftest$ac_cv_exeext conftest.out
-ac_clean_files=$ac_clean_files_save
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5
-$as_echo_n "checking for suffix of object files... " >&6; }
-if ${ac_cv_objext+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main ()
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.o conftest.obj
-if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-$as_echo "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then :
-  for ac_file in conftest.o conftest.obj conftest.*; do
-  test -f "$ac_file" || continue;
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;;
-    *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'`
-       break;;
-  esac
-done
-else
-  $as_echo "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of object files: cannot compile
-See \`config.log' for more details" "$LINENO" 5; }
-fi
-rm -f conftest.$ac_cv_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5
-$as_echo "$ac_cv_objext" >&6; }
-OBJEXT=$ac_cv_objext
-ac_objext=$OBJEXT
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether we are using the GNU C compiler" >&5
-$as_echo_n "checking whether we are using the GNU C compiler... " >&6; }
-if ${ac_cv_c_compiler_gnu+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main ()
-{
-#ifndef __GNUC__
-       choke me
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_compiler_gnu=yes
-else
-  ac_compiler_gnu=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-ac_cv_c_compiler_gnu=$ac_compiler_gnu
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5
-$as_echo "$ac_cv_c_compiler_gnu" >&6; }
-if test $ac_compiler_gnu = yes; then
-  GCC=yes
-else
-  GCC=
-fi
-ac_test_CFLAGS=${CFLAGS+set}
-ac_save_CFLAGS=$CFLAGS
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5
-$as_echo_n "checking whether $CC accepts -g... " >&6; }
-if ${ac_cv_prog_cc_g+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_save_c_werror_flag=$ac_c_werror_flag
-   ac_c_werror_flag=yes
-   ac_cv_prog_cc_g=no
-   CFLAGS="-g"
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main ()
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_prog_cc_g=yes
-else
-  CFLAGS=""
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main ()
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-else
-  ac_c_werror_flag=$ac_save_c_werror_flag
-	 CFLAGS="-g"
-	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main ()
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_prog_cc_g=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-   ac_c_werror_flag=$ac_save_c_werror_flag
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5
-$as_echo "$ac_cv_prog_cc_g" >&6; }
-if test "$ac_test_CFLAGS" = set; then
-  CFLAGS=$ac_save_CFLAGS
-elif test $ac_cv_prog_cc_g = yes; then
-  if test "$GCC" = yes; then
-    CFLAGS="-g -O2"
-  else
-    CFLAGS="-g"
-  fi
-else
-  if test "$GCC" = yes; then
-    CFLAGS="-O2"
-  else
-    CFLAGS=
-  fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $CC option to accept ISO C89" >&5
-$as_echo_n "checking for $CC option to accept ISO C89... " >&6; }
-if ${ac_cv_prog_cc_c89+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_cv_prog_cc_c89=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <stdarg.h>
-#include <stdio.h>
-struct stat;
-/* Most of the following tests are stolen from RCS 5.7's src/conf.sh.  */
-struct buf { int x; };
-FILE * (*rcsopen) (struct buf *, struct stat *, int);
-static char *e (p, i)
-     char **p;
-     int i;
-{
-  return p[i];
-}
-static char *f (char * (*g) (char **, int), char **p, ...)
-{
-  char *s;
-  va_list v;
-  va_start (v,p);
-  s = g (p, va_arg (v,int));
-  va_end (v);
-  return s;
-}
-
-/* OSF 4.0 Compaq cc is some sort of almost-ANSI by default.  It has
-   function prototypes and stuff, but not '\xHH' hex character constants.
-   These don't provoke an error unfortunately, instead are silently treated
-   as 'x'.  The following induces an error, until -std is added to get
-   proper ANSI mode.  Curiously '\x00'!='x' always comes out true, for an
-   array size at least.  It's necessary to write '\x00'==0 to get something
-   that's true only with -std.  */
-int osf4_cc_array ['\x00' == 0 ? 1 : -1];
-
-/* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters
-   inside strings and character constants.  */
-#define FOO(x) 'x'
-int xlc6_cc_array[FOO(a) == 'x' ? 1 : -1];
-
-int test (int i, double x);
-struct s1 {int (*f) (int a);};
-struct s2 {int (*f) (double a);};
-int pairnames (int, char **, FILE *(*)(struct buf *, struct stat *, int), int, int);
-int argc;
-char **argv;
-int
-main ()
-{
-return f (e, argv, 0) != argv[0]  ||  f (e, argv, 1) != argv[1];
-  ;
-  return 0;
-}
-_ACEOF
-for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std \
-	-Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__"
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_prog_cc_c89=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext
-  test "x$ac_cv_prog_cc_c89" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC
-
-fi
-# AC_CACHE_VAL
-case "x$ac_cv_prog_cc_c89" in
-  x)
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-$as_echo "none needed" >&6; } ;;
-  xno)
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-$as_echo "unsupported" >&6; } ;;
-  *)
-    CC="$CC $ac_cv_prog_cc_c89"
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5
-$as_echo "$ac_cv_prog_cc_c89" >&6; } ;;
-esac
-if test "x$ac_cv_prog_cc_c89" != xno; then :
-
-fi
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-DEPDIR="${am__leading_dot}deps"
-
-ac_config_commands="$ac_config_commands depfiles"
-
-
-am_make=${MAKE-make}
-cat > confinc << 'END'
-am__doit:
-	@echo this is the am__doit target
-.PHONY: am__doit
-END
-# If we don't find an include directive, just comment out the code.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for style of include used by $am_make" >&5
-$as_echo_n "checking for style of include used by $am_make... " >&6; }
-am__include="#"
-am__quote=
-_am_result=none
-# First try GNU make style include.
-echo "include confinc" > confmf
-# Ignore all kinds of additional output from 'make'.
-case `$am_make -s -f confmf 2> /dev/null` in #(
-*the\ am__doit\ target*)
-  am__include=include
-  am__quote=
-  _am_result=GNU
-  ;;
-esac
-# Now try BSD make style include.
-if test "$am__include" = "#"; then
-   echo '.include "confinc"' > confmf
-   case `$am_make -s -f confmf 2> /dev/null` in #(
-   *the\ am__doit\ target*)
-     am__include=.include
-     am__quote="\""
-     _am_result=BSD
-     ;;
-   esac
-fi
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $_am_result" >&5
-$as_echo "$_am_result" >&6; }
-rm -f confinc confmf
-
-# Check whether --enable-dependency-tracking was given.
-if test "${enable_dependency_tracking+set}" = set; then :
-  enableval=$enable_dependency_tracking;
-fi
-
-if test "x$enable_dependency_tracking" != xno; then
-  am_depcomp="$ac_aux_dir/depcomp"
-  AMDEPBACKSLASH='\'
-  am__nodep='_no'
-fi
- if test "x$enable_dependency_tracking" != xno; then
-  AMDEP_TRUE=
-  AMDEP_FALSE='#'
-else
-  AMDEP_TRUE='#'
-  AMDEP_FALSE=
-fi
-
-
-
-depcc="$CC"   am_compiler_list=
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking dependency style of $depcc" >&5
-$as_echo_n "checking dependency style of $depcc... " >&6; }
-if ${am_cv_CC_dependencies_compiler_type+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then
-  # We make a subdir and do the tests there.  Otherwise we can end up
-  # making bogus files that we don't know about and never remove.  For
-  # instance it was reported that on HP-UX the gcc test will end up
-  # making a dummy file named 'D' -- because '-MD' means "put the output
-  # in D".
-  rm -rf conftest.dir
-  mkdir conftest.dir
-  # Copy depcomp to subdir because otherwise we won't find it if we're
-  # using a relative directory.
-  cp "$am_depcomp" conftest.dir
-  cd conftest.dir
-  # We will build objects and dependencies in a subdirectory because
-  # it helps to detect inapplicable dependency modes.  For instance
-  # both Tru64's cc and ICC support -MD to output dependencies as a
-  # side effect of compilation, but ICC will put the dependencies in
-  # the current directory while Tru64 will put them in the object
-  # directory.
-  mkdir sub
-
-  am_cv_CC_dependencies_compiler_type=none
-  if test "$am_compiler_list" = ""; then
-     am_compiler_list=`sed -n 's/^#*\([a-zA-Z0-9]*\))$/\1/p' < ./depcomp`
-  fi
-  am__universal=false
-  case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac
-
-  for depmode in $am_compiler_list; do
-    # Setup a source with many dependencies, because some compilers
-    # like to wrap large dependency lists on column 80 (with \), and
-    # we should not choose a depcomp mode which is confused by this.
-    #
-    # We need to recreate these files for each test, as the compiler may
-    # overwrite some of them when testing with obscure command lines.
-    # This happens at least with the AIX C compiler.
-    : > sub/conftest.c
-    for i in 1 2 3 4 5 6; do
-      echo '#include "conftst'$i'.h"' >> sub/conftest.c
-      # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with
-      # Solaris 10 /bin/sh.
-      echo '/* dummy */' > sub/conftst$i.h
-    done
-    echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
-
-    # We check with '-c' and '-o' for the sake of the "dashmstdout"
-    # mode.  It turns out that the SunPro C++ compiler does not properly
-    # handle '-M -o', and we need to detect this.  Also, some Intel
-    # versions had trouble with output in subdirs.
-    am__obj=sub/conftest.${OBJEXT-o}
-    am__minus_obj="-o $am__obj"
-    case $depmode in
-    gcc)
-      # This depmode causes a compiler race in universal mode.
-      test "$am__universal" = false || continue
-      ;;
-    nosideeffect)
-      # After this tag, mechanisms are not by side-effect, so they'll
-      # only be used when explicitly requested.
-      if test "x$enable_dependency_tracking" = xyes; then
-	continue
-      else
-	break
-      fi
-      ;;
-    msvc7 | msvc7msys | msvisualcpp | msvcmsys)
-      # This compiler won't grok '-c -o', but also, the minuso test has
-      # not run yet.  These depmodes are late enough in the game, and
-      # so weak that their functioning should not be impacted.
-      am__obj=conftest.${OBJEXT-o}
-      am__minus_obj=
-      ;;
-    none) break ;;
-    esac
-    if depmode=$depmode \
-       source=sub/conftest.c object=$am__obj \
-       depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
-       $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \
-         >/dev/null 2>conftest.err &&
-       grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep $am__obj sub/conftest.Po > /dev/null 2>&1 &&
-       ${MAKE-make} -s -f confmf > /dev/null 2>&1; then
-      # icc doesn't choke on unknown options, it will just issue warnings
-      # or remarks (even with -Werror).  So we grep stderr for any message
-      # that says an option was ignored or not supported.
-      # When given -MP, icc 7.0 and 7.1 complain thusly:
-      #   icc: Command line warning: ignoring option '-M'; no argument required
-      # The diagnosis changed in icc 8.0:
-      #   icc: Command line remark: option '-MP' not supported
-      if (grep 'ignoring option' conftest.err ||
-          grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else
-        am_cv_CC_dependencies_compiler_type=$depmode
-        break
-      fi
-    fi
-  done
-
-  cd ..
-  rm -rf conftest.dir
-else
-  am_cv_CC_dependencies_compiler_type=none
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_CC_dependencies_compiler_type" >&5
-$as_echo "$am_cv_CC_dependencies_compiler_type" >&6; }
-CCDEPMODE=depmode=$am_cv_CC_dependencies_compiler_type
-
- if
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_CC_dependencies_compiler_type" = gcc3; then
-  am__fastdepCC_TRUE=
-  am__fastdepCC_FALSE='#'
-else
-  am__fastdepCC_TRUE='#'
-  am__fastdepCC_FALSE=
-fi
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} sets \$(MAKE)" >&5
-$as_echo_n "checking whether ${MAKE-make} sets \$(MAKE)... " >&6; }
-set x ${MAKE-make}
-ac_make=`$as_echo "$2" | sed 's/+/p/g; s/[^a-zA-Z0-9_]/_/g'`
-if eval \${ac_cv_prog_make_${ac_make}_set+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat >conftest.make <<\_ACEOF
-SHELL = /bin/sh
-all:
-	@echo '@@@%%%=$(MAKE)=@@@%%%'
-_ACEOF
-# GNU make sometimes prints "make[1]: Entering ...", which would confuse us.
-case `${MAKE-make} -f conftest.make 2>/dev/null` in
-  *@@@%%%=?*=@@@%%%*)
-    eval ac_cv_prog_make_${ac_make}_set=yes;;
-  *)
-    eval ac_cv_prog_make_${ac_make}_set=no;;
-esac
-rm -f conftest.make
-fi
-if eval test \$ac_cv_prog_make_${ac_make}_set = yes; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-  SET_MAKE=
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-  SET_MAKE="MAKE=${MAKE-make}"
-fi
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args.
-set dummy ${ac_tool_prefix}ranlib; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_RANLIB+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$RANLIB"; then
-  ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-RANLIB=$ac_cv_prog_RANLIB
-if test -n "$RANLIB"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5
-$as_echo "$RANLIB" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_RANLIB"; then
-  ac_ct_RANLIB=$RANLIB
-  # Extract the first word of "ranlib", so it can be a program name with args.
-set dummy ranlib; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_RANLIB+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$ac_ct_RANLIB"; then
-  ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_RANLIB="ranlib"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB
-if test -n "$ac_ct_RANLIB"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5
-$as_echo "$ac_ct_RANLIB" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-  if test "x$ac_ct_RANLIB" = x; then
-    RANLIB=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    RANLIB=$ac_ct_RANLIB
-  fi
-else
-  RANLIB="$ac_cv_prog_RANLIB"
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5
-$as_echo_n "checking for grep that handles long lines and -e... " >&6; }
-if ${ac_cv_path_GREP+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -z "$GREP"; then
-  ac_path_GREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_prog in grep ggrep; do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_GREP="$as_dir/$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_GREP" || continue
-# Check for GNU ac_path_GREP and select it if it is found.
-  # Check for GNU $ac_path_GREP
-case `"$ac_path_GREP" --version 2>&1` in
-*GNU*)
-  ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;;
-*)
-  ac_count=0
-  $as_echo_n 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    $as_echo 'GREP' >> "conftest.nl"
-    "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_GREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_GREP="$ac_path_GREP"
-      ac_path_GREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_GREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_GREP"; then
-    as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_GREP=$GREP
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5
-$as_echo "$ac_cv_path_GREP" >&6; }
- GREP="$ac_cv_path_GREP"
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking whether ln -s works" >&5
-$as_echo_n "checking whether ln -s works... " >&6; }
-LN_S=$as_ln_s
-if test "$LN_S" = "ln -s"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no, using $LN_S" >&5
-$as_echo "no, using $LN_S" >&6; }
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for a sed that does not truncate output" >&5
-$as_echo_n "checking for a sed that does not truncate output... " >&6; }
-if ${ac_cv_path_SED+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-            ac_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/
-     for ac_i in 1 2 3 4 5 6 7; do
-       ac_script="$ac_script$as_nl$ac_script"
-     done
-     echo "$ac_script" 2>/dev/null | sed 99q >conftest.sed
-     { ac_script=; unset ac_script;}
-     if test -z "$SED"; then
-  ac_path_SED_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_prog in sed gsed; do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_SED="$as_dir/$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_SED" || continue
-# Check for GNU ac_path_SED and select it if it is found.
-  # Check for GNU $ac_path_SED
-case `"$ac_path_SED" --version 2>&1` in
-*GNU*)
-  ac_cv_path_SED="$ac_path_SED" ac_path_SED_found=:;;
-*)
-  ac_count=0
-  $as_echo_n 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    $as_echo '' >> "conftest.nl"
-    "$ac_path_SED" -f conftest.sed < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_SED_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_SED="$ac_path_SED"
-      ac_path_SED_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_SED_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_SED"; then
-    as_fn_error $? "no acceptable sed could be found in \$PATH" "$LINENO" 5
-  fi
-else
-  ac_cv_path_SED=$SED
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_SED" >&5
-$as_echo "$ac_cv_path_SED" >&6; }
- SED="$ac_cv_path_SED"
-  rm -f conftest.sed
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_STRIP+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-$as_echo "$STRIP" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_STRIP+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-$as_echo "$ac_ct_STRIP" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}ldd", so it can be a program name with args.
-set dummy ${ac_tool_prefix}ldd; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_LDD+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$LDD"; then
-  ac_cv_prog_LDD="$LDD" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_LDD="${ac_tool_prefix}ldd"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-LDD=$ac_cv_prog_LDD
-if test -n "$LDD"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $LDD" >&5
-$as_echo "$LDD" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_LDD"; then
-  ac_ct_LDD=$LDD
-  # Extract the first word of "ldd", so it can be a program name with args.
-set dummy ldd; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_LDD+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$ac_ct_LDD"; then
-  ac_cv_prog_ac_ct_LDD="$ac_ct_LDD" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_LDD="ldd"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_LDD=$ac_cv_prog_ac_ct_LDD
-if test -n "$ac_ct_LDD"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_LDD" >&5
-$as_echo "$ac_ct_LDD" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-  if test "x$ac_ct_LDD" = x; then
-    LDD=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    LDD=$ac_ct_LDD
-  fi
-else
-  LDD="$ac_cv_prog_LDD"
-fi
-
-
-
-if test -n "$ac_tool_prefix"; then
-  for ac_prog in ar lib "link -lib"
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_AR+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$AR"; then
-  ac_cv_prog_AR="$AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AR="$ac_tool_prefix$ac_prog"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-AR=$ac_cv_prog_AR
-if test -n "$AR"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $AR" >&5
-$as_echo "$AR" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-    test -n "$AR" && break
-  done
-fi
-if test -z "$AR"; then
-  ac_ct_AR=$AR
-  for ac_prog in ar lib "link -lib"
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_ac_ct_AR+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$ac_ct_AR"; then
-  ac_cv_prog_ac_ct_AR="$ac_ct_AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_AR="$ac_prog"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_AR=$ac_cv_prog_ac_ct_AR
-if test -n "$ac_ct_AR"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_ct_AR" >&5
-$as_echo "$ac_ct_AR" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_AR" && break
-done
-
-  if test "x$ac_ct_AR" = x; then
-    AR="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    AR=$ac_ct_AR
-  fi
-fi
-
-: ${AR=ar}
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking the archiver ($AR) interface" >&5
-$as_echo_n "checking the archiver ($AR) interface... " >&6; }
-if ${am_cv_ar_interface+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  am_cv_ar_interface=ar
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int some_variable = 0;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  am_ar_try='$AR cru libconftest.a conftest.$ac_objext >&5'
-      { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$am_ar_try\""; } >&5
-  (eval $am_ar_try) 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-      if test "$ac_status" -eq 0; then
-        am_cv_ar_interface=ar
-      else
-        am_ar_try='$AR -NOLOGO -OUT:conftest.lib conftest.$ac_objext >&5'
-        { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$am_ar_try\""; } >&5
-  (eval $am_ar_try) 2>&5
-  ac_status=$?
-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-        if test "$ac_status" -eq 0; then
-          am_cv_ar_interface=lib
-        else
-          am_cv_ar_interface=unknown
-        fi
-      fi
-      rm -f conftest.lib libconftest.a
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $am_cv_ar_interface" >&5
-$as_echo "$am_cv_ar_interface" >&6; }
-
-case $am_cv_ar_interface in
-ar)
-  ;;
-lib)
-  # Microsoft lib, so override with the ar-lib wrapper script.
-  # FIXME: It is wrong to rewrite AR.
-  # But if we don't then we get into trouble of one sort or another.
-  # A longer-term fix would be to have automake use am__AR in this case,
-  # and then we could set am__AR="$am_aux_dir/ar-lib \$(AR)" or something
-  # similar.
-  AR="$am_aux_dir/ar-lib $AR"
-  ;;
-unknown)
-  as_fn_error $? "could not determine $AR interface" "$LINENO" 5
-  ;;
-esac
-
-ARFLAGS=cr
-
-
-# Default settings
-ENABLE_LOG_FILE_APPEND=No
-
-# AC_PROG_LIBTOOL
-
-#
-# save the configure arguments
-#
-args=`echo $ac_configure_args | $SED -e "s/'//g"`
-
-cat >>confdefs.h <<_ACEOF
-#define KEEPALIVED_CONFIGURE_OPTIONS "$args"
-_ACEOF
-
-
-# Save the CPPFLAGS, CFLAGS, LDFLAGS and LDLIBS settings for make time
-KA_CPPFLAGS="$kernelinc -D_GNU_SOURCE $CPPFLAGS"
-KA_CFLAGS="-g $CFLAGS"
-KA_LDFLAGS=$LDFLAGS
-KA_LIBS=$LDLIBS
-
-NEED_LIBDL=No
-#KA_LIBTOOLFLAGS =
-
-# Set up the compiler warnings we want
-MAX_FRAME_SIZE=5120
-WARNINGS_BASIC="all extra unused strict-prototypes"
-WARNINGS_STD="absolute-value address-of-packed-member alloca alloc-zero array-bounds=2 attribute-alias bad-function-cast cast-align cast-qual chkp date-time disabled-optimization double-promotion duplicated-branches duplicated-cond float-conversion float-equal format-overflow format-security format-signedness format-truncation frame-larger-than=$MAX_FRAME_SIZE implicit-fallthrough=3 init-self inline jump-misses-init logical-op missing-declarations missing-field-initializers missing-prototypes nested-externs normalized null-dereference old-style-definition overlength-strings pointer-arith redundant-decls shadow shift-overflow=2 stack-protector strict-overflow=4 strict-prototypes stringop-overflow=2 suggest-attribute=cold suggest-attribute=const suggest-attribute=format suggest-attribute=malloc suggest-attribute=noreturn suggest-attribute=pure sync-nand trampolines undef uninitialized unknown-pragmas unsuffixed-float-constants unused-const-variable=2 unused-macros variadic-macros write-strings"
-WARNINGS_EXTRA="aggregate-return cast-align= strict conversion format-nonliteral format-overflow=2 format-truncation=2 padded pedantic sign-conversion stack-usage=$MAX_FRAME_SIZE strict-overflow=5 stringop-overflow=3 stringop-overflow=4 switch-enum system-headers traditional-conversion"
-
-# We want _GNU_SOURCE defined always
-CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE"
-
-# fpclassify() needs -lm
-KA_LIBS="$KA_LIBS -lm"
-
-# Some sanity checks on configure options
-if test .$enable_vrrp = .no; then :
-  if test .$IPTABLES_SILENT == .Yes; then :
-  enable_iptables=no
-fi
-    if test .$NFTABLES_SILENT == .Yes; then :
-  enable_nftables=no
-fi
-
-    if test .$enable_perf != .; then :
-  as_fn_error $? "enable-perf requires vrrp" "$LINENO" 5
-fi
-    if test $with_fixed_if_type; then :
-  as_fn_error $? "with-fixed-if-type requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_vrrp_fd_debug != .; then :
-  as_fn_error $? "enable-vrrp-fd-debug requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_tsm_debug != .; then :
-  as_fn_error $? "enable-tsm-debug requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_json != .; then :
-  as_fn_error $? "enable-json requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_snmp_vrrp != .; then :
-  as_fn_error $? "enable-snmp-vrrp requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_snmp_keepalived != .; then :
-  as_fn_error $? "enable-snmp-keepalived requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_snmp_rfc != .; then :
-  as_fn_error $? "enable-snmp-rfc requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_snmp_rfcv2 != .; then :
-  as_fn_error $? "enable-snmp-rfcv2 requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_snmp_rfcv3 != .; then :
-  as_fn_error $? "enable-snmp-rfcv3 requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_dbus != .; then :
-  as_fn_error $? "enable-dbus requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_vrrp_auth != .; then :
-  as_fn_error $? "disable-vrrp-auth requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_checksum_compat != .; then :
-  as_fn_error $? "disable-checksum-compat requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_routes != .; then :
-  as_fn_error $? "disable-routes requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_linkbeat != .; then :
-  as_fn_error $? "disable-linkbeat requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_bfd != .; then :
-  as_fn_error $? "enable-bfd requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_iptables != .no; then :
-  as_fn_error $? "enable-iptables requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_nftables != .no; then :
-  as_fn_error $? "enable-nftables requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_track_process != .; then :
-  as_fn_error $? "enable-track-process requires vrrp" "$LINENO" 5
-fi
-    if test .$enable_network_timestamp != .; then :
-  as_fn_error $? "enable-network_timestamp requires vrrp" "$LINENO" 5
-fi
-
-fi
-if test .$enable_iptables = .no; then :
-  if test .$enable_libiptc != .; then :
-  as_fn_error $? "disable-libiptc requires vrrp and iptables" "$LINENO" 5
-fi
-    if test .$enable_libipset != .; then :
-  as_fn_error $? "disable-libipset requires vrrp and iptables" "$LINENO" 5
-fi
-
-fi
-if test .$enable_libiptc = .no; then :
-  if test .$enable_libiptc_dynamic != .; then :
-  as_fn_error $? "enable-libiptc-dynamic requires vrrp and libiptc" "$LINENO" 5
-fi
-    if test .$enable_libipset != .; then :
-  as_fn_error $? "disable-libipset requires libiptc" "$LINENO" 5
-fi
-    if test .$enable_libipset_dynamic != .; then :
-  as_fn_error $? "disable-libipset-dynamic requires libiptc" "$LINENO" 5
-fi
-
-fi
-if test .$enable_libipset = .no; then :
-  if test .$enable_libipset_dynamic != .; then :
-  as_fn_error $? "disable-libipset-dynamic requires ipsets" "$LINENO" 5
-fi
-
-fi
-if test .$enable_snmp_rfc != .yes -a .$enable_snmp_rfcv3 != yes; then :
-  if test .$enable_snmp_reply_v3_for_v2 != .; then :
-  as_fn_error $? "enable-snmp-reply-v3-for-v2 requires enable-snmp-rfcv3 or enable-snmp-rfc" "$LINENO" 5
-fi
-
-fi
-if test .$enable_dbus != .yes; then :
-  if test .$enable_dbus_create_instance != .; then :
-  as_fn_error $? "enable-dbus-create-instance requires enable-dbus" "$LINENO" 5
-fi
-
-fi
-if test .$enable_lvs = .no; then :
-  if test .$enable_regex != .; then :
-  as_fn_error $? "enable-regex requires lvs" "$LINENO" 5
-fi
-    if test .$enable_libnl != .; then :
-  as_fn_error $? "disable-libnl requires lvs" "$LINENO" 5
-fi
-    if test .$enable_lvs_syncd != .; then :
-  as_fn_error $? "disable-lvs-syncd requires lvs" "$LINENO" 5
-fi
-    if test .$enable_lvs_64bit_stats != .; then :
-  as_fn_error $? "disable-lvs-64bit-stats requires lvs" "$LINENO" 5
-fi
-    if test .$enable_fwmark != .; then :
-  as_fn_error $? "enable-fwmark requires lvs" "$LINENO" 5
-fi
-
-fi
-if test .$enable_lvs = .no; then :
-  if test .$enable_libnl_dynamic != .; then :
-  as_fn_error $? "enable-libnl-dynamic requires lvs and libnl" "$LINENO" 5
-fi
-
-fi
-if test .$enable_regex != .yes; then :
-  if test .$enable_regex_timers != .; then :
-  as_fn_error $? "enable-regex-timers requires enable-regex" "$LINENO" 5
-fi
-    if test .$enable_regex_debug != .; then :
-  as_fn_error $? "enable-regex-debug requires enable-regex" "$LINENO" 5
-fi
-
-fi
-if test .$enable_track_process = .no; then :
-  if test .$enable_track_process_debug != .; then :
-  as_fn_error $? "enable-track-process-debug incompatible with disable-track-process" "$LINENO" 5
-fi
-
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking diagnostic pragmas in functions" >&5
-$as_echo_n "checking diagnostic pragmas in functions... " >&6; }
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-  int main(int argc, char**argv)
-  {
-_Pragma("GCC diagnostic warning \"-Wall\"")
-  }
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-
-$as_echo "#define _HAVE_FUNCTION_DIAGNOSTIC_PRAGMAS_  1 " >>confdefs.h
-
-
-else
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking diagnostic push/pop pragmas" >&5
-$as_echo_n "checking diagnostic push/pop pragmas... " >&6; }
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-  int main(int argc, char**argv)
-  {
-_Pragma("GCC diagnostic push")
-  }
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-
-$as_echo "#define _HAVE_DIAGNOSTIC_PUSH_POP_PRAGMAS_  1 " >>confdefs.h
-
-
-else
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-
-if test ".$enable_warnings" = .no; then :
-  WARNINGS_ENABLED=$WARNINGS_BASIC
-else
-  if test ".$enable_warnings" != .yes; then :
-  WARN_LIST=`echo $enable_warnings | sed -e "s/-W//g"`
-	      WARNINGS_ENABLED="$WARNINGS_ENABLED "$WARN_LIST""
-
-fi
-
-
-fi
-if test .$enable_extra_warnings = .yes; then :
-  WARNINGS_ENABLED="$WARNINGS_ENABLED "$WARNINGS_EXTRA""
-fi
-
-if test "$enable_conversion_checks" = yes; then
-  # Check if we can sensibly enable -Wconversion
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for usable -Wconversion" >&5
-$as_echo_n "checking for usable -Wconversion... " >&6; }
-  SAV_CFLAGS="$CFLAGS"
-  CFLAGS="$CFLAGS -Wconversion -O2 -Wp,-D_FORTIFY_SOURCE=2 -Werror"
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-    #include <sys/types.h>
-    #include <sys/select.h>
-    #include <stdint.h>
-    #include <stdbool.h>
-    #include <sys/socket.h>
-    #include <linux/rtnetlink.h>
-
-    #define VAL	255
-
-    static void
-    fun(uint8_t val)
-    {
-    }
-
-    int main(int argc, char**argv)
-    {
-      fd_set set;
-      uint8_t	val = 42;
-      unsigned u;
-      bool b;
-      size_t size = 17;
-      char c[2];
-      char *c_ptr = c;
-      struct rtattr rta;
-      struct rtattr *rta_p = &rta;
-
-      FD_SET(argc+1, &set);
-
-      fun(argc == VAL ? VAL : val);
-
-      //      vrrp->lower_prio_no_advert = vrrp->strict_mode ? true : global_data->vrrp_lower_prio_no_advert;
-      u = u ? true : b;
-
-      size = RTA_LENGTH(size);
-      c_ptr = RTA_DATA(c_ptr);
-      rta_p = RTA_NEXT(rta_p, size);
-
-      val = (u < 256 ) ? u & 0xff : 0;
-    }
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-      { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-      WARNINGS_ENABLED="$WARNINGS_ENABLED conversion"
-
-else
-
-      { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-      { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: -Wconversion is not sensible with this compiler. Use --enable-force-conversion-checks to override." >&5
-$as_echo "$as_me: WARNING: -Wconversion is not sensible with this compiler. Use --enable-force-conversion-checks to override." >&2;}
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  CFLAGS="$SAV_CFLAGS"
-elif test "$enable_force_conversion_checks" = yes; then
-  WARNINGS_ENABLED="$WARNINGS_ENABLED conversion"
-fi
-
-if test "$enable_Werror" = yes; then
-  WARNINGS_ENABLED="$WARNINGS_ENABLED error"
-fi
-
-CONFIG_WARNINGS=lib/config_warnings.h.in
-
-# Save (or restore) lib/config_warnings.h.in
-if test ! -f ${CONFIG_WARNINGS}.sav; then :
-  cp -p ${CONFIG_WARNINGS} ${CONFIG_WARNINGS}.sav
-else
-  cp -p ${CONFIG_WARNINGS}.sav ${CONFIG_WARNINGS}
-fi
-
-SAV_CFLAGS="$CFLAGS"
-for WARN in $WARNINGS_ENABLED
-do
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for -W$WARN" >&5
-$as_echo_n "checking for -W$WARN... " >&6; }
-  CFLAGS="$SAV_CFLAGS -W$WARN"
-
-  WARN_VAR=_HAVE_WARNING_`echo $WARN | tr "a-z=-" "A-Z__"`_
-  LOCAL_WARN_VAR=HAVE_WARNING_`echo $WARN | sed -e "s/=.*//" | tr "a-z-" "A-Z_"`
-  grep -q "^#undef $WARN_VAR$" $CONFIG_WARNINGS
-  if test $? -ne 0; then :
-  echo -e "\n/* Define to 1 if -W$WARN in use */\n#undef $WARN_VAR" >>$CONFIG_WARNINGS
-
-fi
-
-  test `echo $WARN | grep "=[0-9][0-9]*$"`
-  if test $? -eq 0; then :
-   WARN_SHORT=`echo $WARN | sed -e 's/=[0-9][0-9]*$//'`
-	  WARN_VAR_SHORT=_HAVE_WARNING_`echo $WARN_SHORT | tr "a-z=-" "A-Z__"`_
-	  grep -q "^#undef $WARN_VAR_SHORT$" $CONFIG_WARNINGS
-	  if test $? -ne 0; then :
-  echo -e "\n/* Define to 1 if -W$WARN_SHORT in use */\n#undef $WARN_VAR_SHORT" >>$CONFIG_WARNINGS
-
-fi
-
-else
-   unset WARN_VAR_SHORT
-
-fi
-
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-    int main(int argc, char**argv)
-    {
-    }
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-      # gcc 9 removed -Wchkp and doesn't error if it is specified,
-      # but rather outputs:
-      #  warning: switch '-Wchkp' is no longer supported
-      # so check for the warning.
-      touch conftest.err
-      grep -q "is no longer supported" conftest.err
-      if test $? -ne 0; then :
-
-	{ $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-	eval $LOCAL_WARN_VAR=yes
-	KA_CFLAGS="$KA_CFLAGS -W$WARN"
-	cat >>confdefs.h <<_ACEOF
-#define $WARN_VAR  1
-_ACEOF
-
-	if test -z "$WARN_VAR_SHORT"; then :
-
-else
-  cat >>confdefs.h <<_ACEOF
-#define $WARN_VAR_SHORT  1
-_ACEOF
-
-
-fi
-
-else
-
-	{ $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-	eval $LOCAL_WARN_VAR=no
-
-fi
-
-else
-
-      { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-      eval $LOCAL_WARN_VAR=no
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-done
-if test .$HAVE_WARNING_STRICT_OVERFLOW = .yes; then :
-
-	# The following is not supported in gcc 5.4.0
-	CFLAGS="$CFLAGS -Werror"
-	cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-	  _Pragma("GCC diagnostic warning \"-Wstrict-overflow=1\"")
-	  int main(int argc, char**argv)
-	  {
-	  }
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-$as_echo "#define _HAVE_PRAGMA_WARN_STRICT_OVERFLOW_1_  1 " >>confdefs.h
-
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-
-
-fi
-CFLAGS="$SAV_CFLAGS"
-
-STRICT_CONFIG=No
-if test "$enable_strict_config_checks" = yes; then
-
-$as_echo "#define _STRICT_CONFIG_  1 " >>confdefs.h
-
-  STRICT_CONFIG=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS STRICT_CONFIG"
-fi
- if test $STRICT_CONFIG = Yes; then
-  WITH_STRICT_CONFIG_CHECKS_TRUE=
-  WITH_STRICT_CONFIG_CHECKS_FALSE='#'
-else
-  WITH_STRICT_CONFIG_CHECKS_TRUE='#'
-  WITH_STRICT_CONFIG_CHECKS_FALSE=
-fi
-
-
-if test "$enable_hardening" != no; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for PIE support" >&5
-$as_echo_n "checking for PIE support... " >&6; }
-  SAV_CFLAGS="$CFLAGS"
-  SAV_LDFLAGS="$LDFLAGS"
-  CFLAGS="$CFLAGS -fPIE"
-  LDFLAGS="$LDFLAGS -pie"
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-    int main(int argc, char **argv)
-    {
-      int i = 0;
-    }
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-      KA_CFLAGS="$KA_CFLAGS -fPIE"
-      KA_LDFLAGS="$KA_LDFLAGS -pie"
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-  CFLAGS=$SAV_CFLAGS
-  LDFLAGS=$SAV_LDFLAGS
-
-  for FLAG in \
-	  "-Wformat -Werror=format-security" \
-	  "-Wp,-D_FORTIFY_SOURCE=2" \
-	  "-fexceptions" \
-	  "-fstack-protector-strong" \
-	  "--param=ssp-buffer-size=4" \
-	  "-grecord-gcc-switches"
-  do
-    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for $FLAG support" >&5
-$as_echo_n "checking for $FLAG support... " >&6; }
-    CFLAGS="$CFLAGS $FLAG"
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-	KA_CFLAGS="$KA_CFLAGS $FLAG"
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-    CFLAGS=$SAV_CFLAGS
-  done
-
-  WL_FLAGS=
-  for FLAG in \
-	  "-z,relro" \
-	  "-z,now"
-  do
-    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for -Wl,$FLAG support" >&5
-$as_echo_n "checking for -Wl,$FLAG support... " >&6; }
-    LDFLAGS="$LDFLAGS -Wl,$FLAG"
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-      int main(int argc, char **argv)
-      {
-	int i = 0;
-      }
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-
-	{ $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-	WL_FLAGS="$WL_FLAGS -Wl,$FLAG"
-
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-    CFLAGS=$SAV_CFLAGS
-    LDFLAGS=$SAV_LDFLAGS
-  done
-  if test -n "$WL_FLAGS"; then
-    KA_LDFLAGS="$KA_LDFLAGS $WL_FLAGS"
-  fi
-fi
-
-# enable-optimise
-if test "$enable_optimise" = yes -o "$enable_optimise" = not-specified; then :
-  optimise_level=2
-else
-  optimise_level=$enable_optimise
-fi
-if test "$enable_optimise" = no; then :
-  optimise_level=0
-fi
-if test "$optimise_level" -eq 0; then :
-
-    echo $KA_CFLAGS | $GREP -q -- "-D_FORTIFY_SOURCE=[^0]"
-    if test $? -eq 0; then :
-  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: --disable-optimise requires --disable-hardening" >&5
-$as_echo "$as_me: WARNING: --disable-optimise requires --disable-hardening" >&2;}
-fi
-
-fi
-FLAG="-O$optimise_level"
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $FLAG support" >&5
-$as_echo_n "checking for $FLAG support... " >&6; }
-SAV_CFLAGS=$CFLAGS
-CFLAGS="$CFLAGS $FLAG"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-    KA_CFLAGS="$KA_CFLAGS $FLAG"
-else
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-    if test "$enable_optimise" != not-specified; then :
-  as_fn_error $? "Invalid optimisation level specified" "$LINENO" 5
-fi
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-CFLAGS=$SAV_CFLAGS
-
-
-
-
-
-# AC_SUBST(KA_LIBTOOLFLAGS)
-
-# Check if unaligned memory access is supported (for ARM not supported prior to ARMv6 processors)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for unaligned memory access" >&5
-$as_echo_n "checking for unaligned memory access... " >&6; }
-if test "$cross_compiling" = yes; then :
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: unknown" >&5
-$as_echo "unknown" >&6; }
-    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Cannot determine if unaligned access supported. Assuming yes." >&5
-$as_echo "$as_me: WARNING: Cannot determine if unaligned access supported. Assuming yes." >&2;}
-
-
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-
-	#include <limits.h>
-	#include <endian.h>
-
-	#if __BYTE_ORDER == __BIG_ENDIAN
-	#if ULONG_MAX == 0xffffffffffffffffUL
-	#define CHK_VAL       0x1234567890abcdefUL
-	#elif ULONG_MAX == 0xffffffffUL
-	#define CHK_VAL       0x12345678UL
-	#else
-	#define CHK_VAL       0x1234UL
-	#endif
-	#elif __BYTE_ORDER == __LITTLE_ENDIAN
-	#if ULONG_MAX == 0xffffffffffffffffUL
-	#define CHK_VAL       0xefcdab9078563412UL
-	#elif ULONG_MAX == 0xffffffffUL
-	#define CHK_VAL       0x78563412UL
-	#else
-	#define CHK_VAL       0x3412UL
-	#endif
-	#else
-	#error Neither big nor little endian - unsupported
-	#endif
-
-int
-main ()
-{
-
-	unsigned long arr[2] = { 0, 0 };
-	unsigned char *p = (unsigned char *)arr + 1;
-	unsigned i;
-
-	*(unsigned long *)p = CHK_VAL;
-
-	return !!(arr[0] == CHK_VAL || p[0] != 0x12 || p[1] != 0x34 || p[2] != 0x56);
-
-
-  ;
-  return 0;
-}
-
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-else
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-$as_echo "#define _NO_UNALIGNED_ACCESS_  1 " >>confdefs.h
-
-
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-  conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-
-# Checks for libraries.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for clock_gettime() requires -lrt" >&5
-$as_echo_n "checking for clock_gettime() requires -lrt... " >&6; }
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-  #include <time.h>
-  int main(int argc, char **argv)
-  {
-    int i;
-    struct timespec ts;
-
-    i = clock_gettime(CLOCK_MONOTONIC, &ts);
-  }
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-else
-
-    SAV_LIBS="$LIBS"
-    LIBS="$LIBS -lrt"
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-      #include <time.h>
-      int main(int argc, char **argv)
-      {
-	int i;
-	struct timespec ts;
-
-	i = clock_gettime(CLOCK_MONOTONIC, &ts);
-      }
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-	KA_LIBS="$KA_LIBS -lrt"
-else
-  as_fn_error $? "clock_gettime() not supported" "$LINENO" 5
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-    LIBS=$SAV_LIBS
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-
-# Checks for header files.
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking how to run the C preprocessor" >&5
-$as_echo_n "checking how to run the C preprocessor... " >&6; }
-# On Suns, sometimes $CPP names a directory.
-if test -n "$CPP" && test -d "$CPP"; then
-  CPP=
-fi
-if test -z "$CPP"; then
-  if ${ac_cv_prog_CPP+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-      # Double quotes because CPP needs to be expanded
-    for CPP in "$CC -E" "$CC -E -traditional-cpp" "/lib/cpp"
-    do
-      ac_preproc_ok=false
-for ac_c_preproc_warn_flag in '' yes
-do
-  # Use a header file that comes with gcc, so configuring glibc
-  # with a fresh cross-compiler works.
-  # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-  # <limits.h> exists even on freestanding compilers.
-  # On the NeXT, cc -E runs the code through the compiler's parser,
-  # not just through cpp. "Syntax error" is here to catch this case.
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-		     Syntax error
-_ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
-
-else
-  # Broken: fails on valid input.
-continue
-fi
-rm -f conftest.err conftest.i conftest.$ac_ext
-
-  # OK, works on sane cases.  Now check whether nonexistent headers
-  # can be detected and how.
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <ac_nonexistent.h>
-_ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
-  # Broken: success on invalid input.
-continue
-else
-  # Passes both tests.
-ac_preproc_ok=:
-break
-fi
-rm -f conftest.err conftest.i conftest.$ac_ext
-
-done
-# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
-rm -f conftest.i conftest.err conftest.$ac_ext
-if $ac_preproc_ok; then :
-  break
-fi
-
-    done
-    ac_cv_prog_CPP=$CPP
-
-fi
-  CPP=$ac_cv_prog_CPP
-else
-  ac_cv_prog_CPP=$CPP
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $CPP" >&5
-$as_echo "$CPP" >&6; }
-ac_preproc_ok=false
-for ac_c_preproc_warn_flag in '' yes
-do
-  # Use a header file that comes with gcc, so configuring glibc
-  # with a fresh cross-compiler works.
-  # Prefer <limits.h> to <assert.h> if __STDC__ is defined, since
-  # <limits.h> exists even on freestanding compilers.
-  # On the NeXT, cc -E runs the code through the compiler's parser,
-  # not just through cpp. "Syntax error" is here to catch this case.
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#ifdef __STDC__
-# include <limits.h>
-#else
-# include <assert.h>
-#endif
-		     Syntax error
-_ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
-
-else
-  # Broken: fails on valid input.
-continue
-fi
-rm -f conftest.err conftest.i conftest.$ac_ext
-
-  # OK, works on sane cases.  Now check whether nonexistent headers
-  # can be detected and how.
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <ac_nonexistent.h>
-_ACEOF
-if ac_fn_c_try_cpp "$LINENO"; then :
-  # Broken: success on invalid input.
-continue
-else
-  # Passes both tests.
-ac_preproc_ok=:
-break
-fi
-rm -f conftest.err conftest.i conftest.$ac_ext
-
-done
-# Because of `break', _AC_PREPROC_IFELSE's cleaning code was skipped.
-rm -f conftest.i conftest.err conftest.$ac_ext
-if $ac_preproc_ok; then :
-
-else
-  { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "C preprocessor \"$CPP\" fails sanity check
-See \`config.log' for more details" "$LINENO" 5; }
-fi
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
-$as_echo_n "checking for egrep... " >&6; }
-if ${ac_cv_path_EGREP+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
-   then ac_cv_path_EGREP="$GREP -E"
-   else
-     if test -z "$EGREP"; then
-  ac_path_EGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_prog in egrep; do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_EGREP="$as_dir/$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_EGREP" || continue
-# Check for GNU ac_path_EGREP and select it if it is found.
-  # Check for GNU $ac_path_EGREP
-case `"$ac_path_EGREP" --version 2>&1` in
-*GNU*)
-  ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
-*)
-  ac_count=0
-  $as_echo_n 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    $as_echo 'EGREP' >> "conftest.nl"
-    "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_EGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_EGREP="$ac_path_EGREP"
-      ac_path_EGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_EGREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_EGREP"; then
-    as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_EGREP=$EGREP
-fi
-
-   fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
-$as_echo "$ac_cv_path_EGREP" >&6; }
- EGREP="$ac_cv_path_EGREP"
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for ANSI C header files" >&5
-$as_echo_n "checking for ANSI C header files... " >&6; }
-if ${ac_cv_header_stdc+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <stdlib.h>
-#include <stdarg.h>
-#include <string.h>
-#include <float.h>
-
-int
-main ()
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_header_stdc=yes
-else
-  ac_cv_header_stdc=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-
-if test $ac_cv_header_stdc = yes; then
-  # SunOS 4.x string.h does not declare mem*, contrary to ANSI.
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <string.h>
-
-_ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "memchr" >/dev/null 2>&1; then :
-
-else
-  ac_cv_header_stdc=no
-fi
-rm -f conftest*
-
-fi
-
-if test $ac_cv_header_stdc = yes; then
-  # ISC 2.0.2 stdlib.h does not declare free, contrary to ANSI.
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <stdlib.h>
-
-_ACEOF
-if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
-  $EGREP "free" >/dev/null 2>&1; then :
-
-else
-  ac_cv_header_stdc=no
-fi
-rm -f conftest*
-
-fi
-
-if test $ac_cv_header_stdc = yes; then
-  # /bin/cc in Irix-4.0.5 gets non-ANSI ctype macros unless using -ansi.
-  if test "$cross_compiling" = yes; then :
-  :
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <ctype.h>
-#include <stdlib.h>
-#if ((' ' & 0x0FF) == 0x020)
-# define ISLOWER(c) ('a' <= (c) && (c) <= 'z')
-# define TOUPPER(c) (ISLOWER(c) ? 'A' + ((c) - 'a') : (c))
-#else
-# define ISLOWER(c) \
-		   (('a' <= (c) && (c) <= 'i') \
-		     || ('j' <= (c) && (c) <= 'r') \
-		     || ('s' <= (c) && (c) <= 'z'))
-# define TOUPPER(c) (ISLOWER(c) ? ((c) | 0x40) : (c))
-#endif
-
-#define XOR(e, f) (((e) && !(f)) || (!(e) && (f)))
-int
-main ()
-{
-  int i;
-  for (i = 0; i < 256; i++)
-    if (XOR (islower (i), ISLOWER (i))
-	|| toupper (i) != TOUPPER (i))
-      return 2;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
-
-else
-  ac_cv_header_stdc=no
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-  conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-fi
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_stdc" >&5
-$as_echo "$ac_cv_header_stdc" >&6; }
-if test $ac_cv_header_stdc = yes; then
-
-$as_echo "#define STDC_HEADERS 1" >>confdefs.h
-
-fi
-
-# On IRIX 5.3, sys/types and inttypes.h are conflicting.
-for ac_header in sys/types.h sys/stat.h stdlib.h string.h memory.h strings.h \
-		  inttypes.h stdint.h unistd.h
-do :
-  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default
-"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-
-done
-
-
-for ac_header in arpa/inet.h fcntl.h limits.h netdb.h netinet/in.h stdint.h stdlib.h string.h sys/ioctl.h sys/param.h sys/prctl.h sys/socket.h sys/time.h syslog.h unistd.h
-do :
-  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-else
-  as_fn_error $? "Missing/unusable system header file <$ac_header>" "$LINENO" 5
-fi
-
-done
-
-
-# check for kernel headers
-SAV_CPPFLAGS="$CPPFLAGS"
-CPPFLAGS="$CPPFLAGS $kernelinc"
-NETLINK_EXTRA_INCLUDE=
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-  #include <linux/netlink.h>
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-else
-  ac_fn_c_check_header_compile "$LINENO" "linux/netlink.h" "ac_cv_header_linux_netlink_h" "#include <sys/socket.h>
-"
-if test "x$ac_cv_header_linux_netlink_h" = xyes; then :
-
-
-$as_echo "#define NETLINK_H_NEEDS_SYS_SOCKET_H  1 " >>confdefs.h
-
-      NETLINK_EXTRA_INCLUDE="#include <sys/socket.h>"
-
-else
-  as_fn_error $? "Missing/unusable kernel header file <linux/netlink.h>" "$LINENO" 5
-fi
-
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-
-RTNETLINK_EXTRA_INCLUDE=
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-  #include <linux/rtnetlink.h>
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-else
-  ac_fn_c_check_header_compile "$LINENO" "linux/rtnetlink.h" "ac_cv_header_linux_rtnetlink_h" "#include <sys/socket.h>
-"
-if test "x$ac_cv_header_linux_rtnetlink_h" = xyes; then :
-
-
-$as_echo "#define RTNETLINK_H_NEEDS_SYS_SOCKET_H  1 " >>confdefs.h
-
-      RTNETLINK_EXTRA_INCLUDE="#include <sys/socket.h>"
-
-else
-  as_fn_error $? "Missing/unusable kernel header file <linux/rtnetlink.h>" "$LINENO" 5
-fi
-
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-
-for ac_header in asm/types.h linux/ethtool.h linux/icmpv6.h linux/if_ether.h linux/if_packet.h linux/ip.h linux/sockios.h linux/types.h
-do :
-  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-else
-  as_fn_error $? "Missing/unusable kernel header file <$ac_header>" "$LINENO" 5
-fi
-
-done
-
-for ac_header in linux/fib_rules.h linux/if_addr.h linux/if_link.h
-do :
-  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "$NETLINK_EXTRA_INCLUDE
-"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-else
-  as_fn_error $? "Missing/unusable kernel header file <$ac_header>" "$LINENO" 5
-fi
-
-done
-
-for ac_header in linux/if_arp.h
-do :
-  ac_fn_c_check_header_compile "$LINENO" "linux/if_arp.h" "ac_cv_header_linux_if_arp_h" "#include <sys/socket.h>
-"
-if test "x$ac_cv_header_linux_if_arp_h" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_LINUX_IF_ARP_H 1
-_ACEOF
-
-else
-  as_fn_error $? "Missing/unusable <$ac_header>" "$LINENO" 5
-fi
-
-done
-
-CPPFLAGS="$SAV_CPPFLAGS"
-
-# Checks for typedefs, structures, and compiler characteristics.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for stdbool.h that conforms to C99" >&5
-$as_echo_n "checking for stdbool.h that conforms to C99... " >&6; }
-if ${ac_cv_header_stdbool_h+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-             #include <stdbool.h>
-             #ifndef bool
-              "error: bool is not defined"
-             #endif
-             #ifndef false
-              "error: false is not defined"
-             #endif
-             #if false
-              "error: false is not 0"
-             #endif
-             #ifndef true
-              "error: true is not defined"
-             #endif
-             #if true != 1
-              "error: true is not 1"
-             #endif
-             #ifndef __bool_true_false_are_defined
-              "error: __bool_true_false_are_defined is not defined"
-             #endif
-
-             struct s { _Bool s: 1; _Bool t; } s;
-
-             char a[true == 1 ? 1 : -1];
-             char b[false == 0 ? 1 : -1];
-             char c[__bool_true_false_are_defined == 1 ? 1 : -1];
-             char d[(bool) 0.5 == true ? 1 : -1];
-             /* See body of main program for 'e'.  */
-             char f[(_Bool) 0.0 == false ? 1 : -1];
-             char g[true];
-             char h[sizeof (_Bool)];
-             char i[sizeof s.t];
-             enum { j = false, k = true, l = false * true, m = true * 256 };
-             /* The following fails for
-                HP aC++/ANSI C B3910B A.05.55 [Dec 04 2003]. */
-             _Bool n[m];
-             char o[sizeof n == m * sizeof n[0] ? 1 : -1];
-             char p[-1 - (_Bool) 0 < 0 && -1 - (bool) 0 < 0 ? 1 : -1];
-             /* Catch a bug in an HP-UX C compiler.  See
-                http://gcc.gnu.org/ml/gcc-patches/2003-12/msg02303.html
-                http://lists.gnu.org/archive/html/bug-coreutils/2005-11/msg00161.html
-              */
-             _Bool q = true;
-             _Bool *pq = &q;
-
-int
-main ()
-{
-
-             bool e = &s;
-             *pq |= q;
-             *pq |= ! q;
-             /* Refer to every declared value, to avoid compiler optimizations.  */
-             return (!a + !b + !c + !d + !e + !f + !g + !h + !i + !!j + !k + !!l
-                     + !m + !n + !o + !p + !q + !pq);
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_header_stdbool_h=yes
-else
-  ac_cv_header_stdbool_h=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_header_stdbool_h" >&5
-$as_echo "$ac_cv_header_stdbool_h" >&6; }
-   ac_fn_c_check_type "$LINENO" "_Bool" "ac_cv_type__Bool" "$ac_includes_default"
-if test "x$ac_cv_type__Bool" = xyes; then :
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE__BOOL 1
-_ACEOF
-
-
-fi
-
-
-if test $ac_cv_header_stdbool_h = yes; then
-
-$as_echo "#define HAVE_STDBOOL_H 1" >>confdefs.h
-
-fi
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for inline" >&5
-$as_echo_n "checking for inline... " >&6; }
-if ${ac_cv_c_inline+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_cv_c_inline=no
-for ac_kw in inline __inline__ __inline; do
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#ifndef __cplusplus
-typedef int foo_t;
-static $ac_kw foo_t static_foo () {return 0; }
-$ac_kw foo_t foo () {return 0; }
-#endif
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_c_inline=$ac_kw
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-  test "$ac_cv_c_inline" != no && break
-done
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_inline" >&5
-$as_echo "$ac_cv_c_inline" >&6; }
-
-case $ac_cv_c_inline in
-  inline | yes) ;;
-  *)
-    case $ac_cv_c_inline in
-      no) ac_val=;;
-      *) ac_val=$ac_cv_c_inline;;
-    esac
-    cat >>confdefs.h <<_ACEOF
-#ifndef __cplusplus
-#define inline $ac_val
-#endif
-_ACEOF
-    ;;
-esac
-
-ac_fn_c_find_intX_t "$LINENO" "64" "ac_cv_c_int64_t"
-case $ac_cv_c_int64_t in #(
-  no|yes) ;; #(
-  *)
-
-cat >>confdefs.h <<_ACEOF
-#define int64_t $ac_cv_c_int64_t
-_ACEOF
-;;
-esac
-
-ac_fn_c_check_type "$LINENO" "pid_t" "ac_cv_type_pid_t" "$ac_includes_default"
-if test "x$ac_cv_type_pid_t" = xyes; then :
-
-else
-
-cat >>confdefs.h <<_ACEOF
-#define pid_t int
-_ACEOF
-
-fi
-
-ac_fn_c_check_type "$LINENO" "size_t" "ac_cv_type_size_t" "$ac_includes_default"
-if test "x$ac_cv_type_size_t" = xyes; then :
-
-else
-
-cat >>confdefs.h <<_ACEOF
-#define size_t unsigned int
-_ACEOF
-
-fi
-
-ac_fn_c_find_uintX_t "$LINENO" "16" "ac_cv_c_uint16_t"
-case $ac_cv_c_uint16_t in #(
-  no|yes) ;; #(
-  *)
-
-
-cat >>confdefs.h <<_ACEOF
-#define uint16_t $ac_cv_c_uint16_t
-_ACEOF
-;;
-  esac
-
-ac_fn_c_find_uintX_t "$LINENO" "32" "ac_cv_c_uint32_t"
-case $ac_cv_c_uint32_t in #(
-  no|yes) ;; #(
-  *)
-
-$as_echo "#define _UINT32_T 1" >>confdefs.h
-
-
-cat >>confdefs.h <<_ACEOF
-#define uint32_t $ac_cv_c_uint32_t
-_ACEOF
-;;
-  esac
-
-ac_fn_c_find_uintX_t "$LINENO" "64" "ac_cv_c_uint64_t"
-case $ac_cv_c_uint64_t in #(
-  no|yes) ;; #(
-  *)
-
-$as_echo "#define _UINT64_T 1" >>confdefs.h
-
-
-cat >>confdefs.h <<_ACEOF
-#define uint64_t $ac_cv_c_uint64_t
-_ACEOF
-;;
-  esac
-
-ac_fn_c_find_uintX_t "$LINENO" "8" "ac_cv_c_uint8_t"
-case $ac_cv_c_uint8_t in #(
-  no|yes) ;; #(
-  *)
-
-$as_echo "#define _UINT8_T 1" >>confdefs.h
-
-
-cat >>confdefs.h <<_ACEOF
-#define uint8_t $ac_cv_c_uint8_t
-_ACEOF
-;;
-  esac
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for an ANSI C-conforming const" >&5
-$as_echo_n "checking for an ANSI C-conforming const... " >&6; }
-if ${ac_cv_c_const+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main ()
-{
-
-#ifndef __cplusplus
-  /* Ultrix mips cc rejects this sort of thing.  */
-  typedef int charset[2];
-  const charset cs = { 0, 0 };
-  /* SunOS 4.1.1 cc rejects this.  */
-  char const *const *pcpcc;
-  char **ppc;
-  /* NEC SVR4.0.2 mips cc rejects this.  */
-  struct point {int x, y;};
-  static struct point const zero = {0,0};
-  /* AIX XL C 1.02.0.0 rejects this.
-     It does not let you subtract one const X* pointer from another in
-     an arm of an if-expression whose if-part is not a constant
-     expression */
-  const char *g = "string";
-  pcpcc = &g + (g ? g-g : 0);
-  /* HPUX 7.0 cc rejects these. */
-  ++pcpcc;
-  ppc = (char**) pcpcc;
-  pcpcc = (char const *const *) ppc;
-  { /* SCO 3.2v4 cc rejects this sort of thing.  */
-    char tx;
-    char *t = &tx;
-    char const *s = 0 ? (char *) 0 : (char const *) 0;
-
-    *t++ = 0;
-    if (s) return 0;
-  }
-  { /* Someone thinks the Sun supposedly-ANSI compiler will reject this.  */
-    int x[] = {25, 17};
-    const int *foo = &x[0];
-    ++foo;
-  }
-  { /* Sun SC1.0 ANSI compiler rejects this -- but not the above. */
-    typedef const int *iptr;
-    iptr p = 0;
-    ++p;
-  }
-  { /* AIX XL C 1.02.0.0 rejects this sort of thing, saying
-       "k.c", line 2.27: 1506-025 (S) Operand must be a modifiable lvalue. */
-    struct s { int j; const int *ap[3]; } bx;
-    struct s *b = &bx; b->j = 5;
-  }
-  { /* ULTRIX-32 V3.1 (Rev 9) vcc rejects this */
-    const int foo = 10;
-    if (!foo) return 0;
-  }
-  return !cs[0] && !zero.x;
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  ac_cv_c_const=yes
-else
-  ac_cv_c_const=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_const" >&5
-$as_echo "$ac_cv_c_const" >&6; }
-if test $ac_cv_c_const = no; then
-
-$as_echo "#define const /**/" >>confdefs.h
-
-fi
-
-
-# Checks for library functions.
-for ac_header in vfork.h
-do :
-  ac_fn_c_check_header_mongrel "$LINENO" "vfork.h" "ac_cv_header_vfork_h" "$ac_includes_default"
-if test "x$ac_cv_header_vfork_h" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_VFORK_H 1
-_ACEOF
-
-fi
-
-done
-
-for ac_func in fork vfork
-do :
-  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-done
-
-if test "x$ac_cv_func_fork" = xyes; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for working fork" >&5
-$as_echo_n "checking for working fork... " >&6; }
-if ${ac_cv_func_fork_works+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test "$cross_compiling" = yes; then :
-  ac_cv_func_fork_works=cross
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_includes_default
-int
-main ()
-{
-
-	  /* By Ruediger Kuhlmann. */
-	  return fork () < 0;
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
-  ac_cv_func_fork_works=yes
-else
-  ac_cv_func_fork_works=no
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-  conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_fork_works" >&5
-$as_echo "$ac_cv_func_fork_works" >&6; }
-
-else
-  ac_cv_func_fork_works=$ac_cv_func_fork
-fi
-if test "x$ac_cv_func_fork_works" = xcross; then
-  case $host in
-    *-*-amigaos* | *-*-msdosdjgpp*)
-      # Override, as these systems have only a dummy fork() stub
-      ac_cv_func_fork_works=no
-      ;;
-    *)
-      ac_cv_func_fork_works=yes
-      ;;
-  esac
-  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: result $ac_cv_func_fork_works guessed because of cross compilation" >&5
-$as_echo "$as_me: WARNING: result $ac_cv_func_fork_works guessed because of cross compilation" >&2;}
-fi
-ac_cv_func_vfork_works=$ac_cv_func_vfork
-if test "x$ac_cv_func_vfork" = xyes; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for working vfork" >&5
-$as_echo_n "checking for working vfork... " >&6; }
-if ${ac_cv_func_vfork_works+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test "$cross_compiling" = yes; then :
-  ac_cv_func_vfork_works=cross
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-/* Thanks to Paul Eggert for this test.  */
-$ac_includes_default
-#include <sys/wait.h>
-#ifdef HAVE_VFORK_H
-# include <vfork.h>
-#endif
-/* On some sparc systems, changes by the child to local and incoming
-   argument registers are propagated back to the parent.  The compiler
-   is told about this with #include <vfork.h>, but some compilers
-   (e.g. gcc -O) don't grok <vfork.h>.  Test for this by using a
-   static variable whose address is put into a register that is
-   clobbered by the vfork.  */
-static void
-#ifdef __cplusplus
-sparc_address_test (int arg)
-# else
-sparc_address_test (arg) int arg;
-#endif
-{
-  static pid_t child;
-  if (!child) {
-    child = vfork ();
-    if (child < 0) {
-      perror ("vfork");
-      _exit(2);
-    }
-    if (!child) {
-      arg = getpid();
-      write(-1, "", 0);
-      _exit (arg);
-    }
-  }
-}
-
-int
-main ()
-{
-  pid_t parent = getpid ();
-  pid_t child;
-
-  sparc_address_test (0);
-
-  child = vfork ();
-
-  if (child == 0) {
-    /* Here is another test for sparc vfork register problems.  This
-       test uses lots of local variables, at least as many local
-       variables as main has allocated so far including compiler
-       temporaries.  4 locals are enough for gcc 1.40.3 on a Solaris
-       4.1.3 sparc, but we use 8 to be safe.  A buggy compiler should
-       reuse the register of parent for one of the local variables,
-       since it will think that parent can't possibly be used any more
-       in this routine.  Assigning to the local variable will thus
-       munge parent in the parent process.  */
-    pid_t
-      p = getpid(), p1 = getpid(), p2 = getpid(), p3 = getpid(),
-      p4 = getpid(), p5 = getpid(), p6 = getpid(), p7 = getpid();
-    /* Convince the compiler that p..p7 are live; otherwise, it might
-       use the same hardware register for all 8 local variables.  */
-    if (p != p1 || p != p2 || p != p3 || p != p4
-	|| p != p5 || p != p6 || p != p7)
-      _exit(1);
-
-    /* On some systems (e.g. IRIX 3.3), vfork doesn't separate parent
-       from child file descriptors.  If the child closes a descriptor
-       before it execs or exits, this munges the parent's descriptor
-       as well.  Test for this by closing stdout in the child.  */
-    _exit(close(fileno(stdout)) != 0);
-  } else {
-    int status;
-    struct stat st;
-
-    while (wait(&status) != child)
-      ;
-    return (
-	 /* Was there some problem with vforking?  */
-	 child < 0
-
-	 /* Did the child fail?  (This shouldn't happen.)  */
-	 || status
-
-	 /* Did the vfork/compiler bug occur?  */
-	 || parent != getpid()
-
-	 /* Did the file descriptor bug occur?  */
-	 || fstat(fileno(stdout), &st) != 0
-	 );
-  }
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
-  ac_cv_func_vfork_works=yes
-else
-  ac_cv_func_vfork_works=no
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-  conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_vfork_works" >&5
-$as_echo "$ac_cv_func_vfork_works" >&6; }
-
-fi;
-if test "x$ac_cv_func_fork_works" = xcross; then
-  ac_cv_func_vfork_works=$ac_cv_func_vfork
-  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: result $ac_cv_func_vfork_works guessed because of cross compilation" >&5
-$as_echo "$as_me: WARNING: result $ac_cv_func_vfork_works guessed because of cross compilation" >&2;}
-fi
-
-if test "x$ac_cv_func_vfork_works" = xyes; then
-
-$as_echo "#define HAVE_WORKING_VFORK 1" >>confdefs.h
-
-else
-
-$as_echo "#define vfork fork" >>confdefs.h
-
-fi
-if test "x$ac_cv_func_fork_works" = xyes; then
-
-$as_echo "#define HAVE_WORKING_FORK 1" >>confdefs.h
-
-fi
-
-for ac_header in stdlib.h
-do :
-  ac_fn_c_check_header_mongrel "$LINENO" "stdlib.h" "ac_cv_header_stdlib_h" "$ac_includes_default"
-if test "x$ac_cv_header_stdlib_h" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_STDLIB_H 1
-_ACEOF
-
-fi
-
-done
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for GNU libc compatible malloc" >&5
-$as_echo_n "checking for GNU libc compatible malloc... " >&6; }
-if ${ac_cv_func_malloc_0_nonnull+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test "$cross_compiling" = yes; then :
-  ac_cv_func_malloc_0_nonnull=no
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#if defined STDC_HEADERS || defined HAVE_STDLIB_H
-# include <stdlib.h>
-#else
-char *malloc ();
-#endif
-
-int
-main ()
-{
-return ! malloc (0);
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
-  ac_cv_func_malloc_0_nonnull=yes
-else
-  ac_cv_func_malloc_0_nonnull=no
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-  conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_malloc_0_nonnull" >&5
-$as_echo "$ac_cv_func_malloc_0_nonnull" >&6; }
-if test $ac_cv_func_malloc_0_nonnull = yes; then :
-
-$as_echo "#define HAVE_MALLOC 1" >>confdefs.h
-
-else
-  $as_echo "#define HAVE_MALLOC 0" >>confdefs.h
-
-   case " $LIBOBJS " in
-  *" malloc.$ac_objext "* ) ;;
-  *) LIBOBJS="$LIBOBJS malloc.$ac_objext"
- ;;
-esac
-
-
-$as_echo "#define malloc rpl_malloc" >>confdefs.h
-
-fi
-
-
-for ac_header in stdlib.h
-do :
-  ac_fn_c_check_header_mongrel "$LINENO" "stdlib.h" "ac_cv_header_stdlib_h" "$ac_includes_default"
-if test "x$ac_cv_header_stdlib_h" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_STDLIB_H 1
-_ACEOF
-
-fi
-
-done
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for GNU libc compatible realloc" >&5
-$as_echo_n "checking for GNU libc compatible realloc... " >&6; }
-if ${ac_cv_func_realloc_0_nonnull+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test "$cross_compiling" = yes; then :
-  ac_cv_func_realloc_0_nonnull=no
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#if defined STDC_HEADERS || defined HAVE_STDLIB_H
-# include <stdlib.h>
-#else
-char *realloc ();
-#endif
-
-int
-main ()
-{
-return ! realloc (0, 0);
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
-  ac_cv_func_realloc_0_nonnull=yes
-else
-  ac_cv_func_realloc_0_nonnull=no
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-  conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_func_realloc_0_nonnull" >&5
-$as_echo "$ac_cv_func_realloc_0_nonnull" >&6; }
-if test $ac_cv_func_realloc_0_nonnull = yes; then :
-
-$as_echo "#define HAVE_REALLOC 1" >>confdefs.h
-
-else
-  $as_echo "#define HAVE_REALLOC 0" >>confdefs.h
-
-   case " $LIBOBJS " in
-  *" realloc.$ac_objext "* ) ;;
-  *) LIBOBJS="$LIBOBJS realloc.$ac_objext"
- ;;
-esac
-
-
-$as_echo "#define realloc rpl_realloc" >>confdefs.h
-
-fi
-
-
-for ac_func in dup2 getcwd gettimeofday memmove memset select setenv socket strcasecmp strchr strdup strerror strpbrk strstr strtol strtoul uname
-do :
-  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-done
-
-for ac_func in pipe2
-do :
-  ac_fn_c_check_func "$LINENO" "pipe2" "ac_cv_func_pipe2"
-if test "x$ac_cv_func_pipe2" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_PIPE2 1
-_ACEOF
- SYSTEM_OPTIONS="$SYSTEM_OPTIONS PIPE2"
-fi
-done
-
-for ac_func in signalfd
-do :
-  ac_fn_c_check_func "$LINENO" "signalfd" "ac_cv_func_signalfd"
-if test "x$ac_cv_func_signalfd" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_SIGNALFD 1
-_ACEOF
- SYSTEM_OPTIONS="$SYSTEM_OPTIONS SIGNALFD"
-fi
-done
-
-for ac_func in inotify_init1
-do :
-  ac_fn_c_check_func "$LINENO" "inotify_init1" "ac_cv_func_inotify_init1"
-if test "x$ac_cv_func_inotify_init1" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_INOTIFY_INIT1 1
-_ACEOF
- SYSTEM_OPTIONS="$SYSTEM_OPTIONS INOTIFY_INIT1"
-fi
-done
-
-for ac_func in vsyslog
-do :
-  ac_fn_c_check_func "$LINENO" "vsyslog" "ac_cv_func_vsyslog"
-if test "x$ac_cv_func_vsyslog" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_VSYSLOG 1
-_ACEOF
- SYSTEM_OPTIONS="$SYSTEM_OPTIONS VSYSLOG"
-fi
-done
-
-for ac_func in epoll_create1
-do :
-  ac_fn_c_check_func "$LINENO" "epoll_create1" "ac_cv_func_epoll_create1"
-if test "x$ac_cv_func_epoll_create1" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_EPOLL_CREATE1 1
-_ACEOF
- SYSTEM_OPTIONS="$SYSTEM_OPTIONS EPOLL_CREATE1"
-fi
-done
-
-
-# glibc uses unsigned int as 3rd parameter to __assert_fail(), musl uses int.
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-  #include <assert.h>
-  #include <stdlib.h>
-
-  void __assert_fail(const char * a, const char *b, unsigned int l, const char *c)
-  {
-    exit(a[0] + b[0] + c[0] + l == 0);
-  }
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  LINE_type="unsigned int"
-else
-  LINE_type="int"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-
-cat >>confdefs.h <<_ACEOF
-#define LINE_type  $LINE_type
-_ACEOF
-
-
-SAV_CFLAGS="$CFLAGS"
-CFLAGS="$CFLAGS -Wattributes -Werror"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-  #include <stdlib.h>
-  static __always_inline int
-  test_func(int val)
-  {
-    return val;
-  }
-
-  int
-  main(int argc, char **argv)
-  {
-    int val = test_func(3);
-    return val;
-  }
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-    static __inline __attribute__ ((__always_inline__)) int
-    test_func(int val)
-    {
-      return val;
-    }
-
-    int
-    main(int argc, char **argv)
-    {
-      int val = test_func(3);
-      return val;
-    }
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-$as_echo "#define __always_inline __inline __attribute__ ((__always_inline__))" >>confdefs.h
-
-else
-
-$as_echo "#define __always_inline inline" >>confdefs.h
-
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-CFLAGS="$SAV_CFLAGS"
-
-if test "$enable_dynamic_linking"; then :
-
-    if test .$enable_vrrp != .no; then :
-
-	enable_libiptc_dynamic=$enable_dynamic_linking
-	enable_libipset_dynamic=$enable_dynamic_linking
-
-fi
-    if test .$enable_lvs != .no; then :
-
-	enable_libnl_dynamic=$enable_dynamic_linking
-
-fi
-
-fi
-
-# check for missing definition - added in glibc 2.8
-ac_fn_c_check_decl "$LINENO" "ETHERTYPE_IPV6" "ac_cv_have_decl_ETHERTYPE_IPV6" "#include <net/ethernet.h>
-"
-if test "x$ac_cv_have_decl_ETHERTYPE_IPV6" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_ETHERTYPE_IPV6 $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-
-$as_echo "#define ETHERTYPE_IPV6 0x86dd" >>confdefs.h
-
-
-fi
-
-
-BUILD_GENHASH=Yes
-# check for openssl headers
-NEED_MD5=no
-NEED_SSL=no
-if test "$enable_vrrp" != no -a \
-	"$enable_vrrp_auth" != no; then
-  NEED_MD5=yes
-fi
-if test "$enable_lvs" != no; then
-  NEED_MD5=yes
-  NEED_SSL=yes
-fi
-for ac_header in openssl/ssl.h openssl/err.h
-do :
-  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-else
-
-    if test $NEED_SSL = yes; then
-      as_fn_error $? "
-  !!! OpenSSL is not properly installed on your system. !!!
-  !!! Can not include OpenSSL headers files.            !!!" "$LINENO" 5
-    fi
-    BUILD_GENHASH=No
-    NEED_SSL=no
-    break
-
-fi
-
-done
-
-for ac_header in openssl/md5.h
-do :
-  ac_fn_c_check_header_mongrel "$LINENO" "openssl/md5.h" "ac_cv_header_openssl_md5_h" "$ac_includes_default"
-if test "x$ac_cv_header_openssl_md5_h" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_OPENSSL_MD5_H 1
-_ACEOF
-
-else
-
-    if test $NEED_MD5 = yes; then
-      as_fn_error $? "
-  !!! OpenSSL is not properly installed on your system. !!!
-  !!! Can not include OpenSSL MD5 headers files.        !!!" "$LINENO" 5
-    fi
-    BUILD_GENHASH=No
-    NEED_MD5=no
-    break
-
-fi
-
-done
-
-unset LIBS
-
-$PKG_CONFIG --exists openssl
-if test $? -eq 0; then
-   if test -n "OPENSSL"; then
-      KA_PKG_PFX=OPENSSL
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I openssl`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other openssl`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test . = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires openssl`
-      var=`$PKG_CONFIG --libs-only-l openssl`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs openssl`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-else
-  OPENSSL_LIBS="-lssl -lcrypto"
-fi
-
-EXTRA_LIBS=`echo $OPENSSL_LIBS | sed -e "s/-lcrypto//"`
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for MD5_Init in -lcrypto" >&5
-$as_echo_n "checking for MD5_Init in -lcrypto... " >&6; }
-if ${ac_cv_lib_crypto_MD5_Init+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcrypto $EXTRA_LIBS $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char MD5_Init ();
-int
-main ()
-{
-return MD5_Init ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_crypto_MD5_Init=yes
-else
-  ac_cv_lib_crypto_MD5_Init=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_MD5_Init" >&5
-$as_echo "$ac_cv_lib_crypto_MD5_Init" >&6; }
-if test "x$ac_cv_lib_crypto_MD5_Init" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBCRYPTO 1
-_ACEOF
-
-  LIBS="-lcrypto $LIBS"
-
-else
-
-    if test $NEED_MD5 = yes; then
-      as_fn_error $? "OpenSSL MD5 libraries are required" "$LINENO" 5
-    fi
-    BUILD_GENHASH=No
-
-fi
-
-if test $NEED_MD5 = yes; then
-  KA_LIBS="$KA_LIBS $LIBS"
-fi
-GENHASH_LIBS="$GENHASH_LIBS $LIBS"
-unset LIBS
-
-EXTRA_LIBS=`echo $OPENSSL_LIBS | sed -e "s/-lssl//"`
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for SSL_CTX_new in -lssl" >&5
-$as_echo_n "checking for SSL_CTX_new in -lssl... " >&6; }
-if ${ac_cv_lib_ssl_SSL_CTX_new+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-lssl $EXTRA_LIBS $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char SSL_CTX_new ();
-int
-main ()
-{
-return SSL_CTX_new ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_ssl_SSL_CTX_new=yes
-else
-  ac_cv_lib_ssl_SSL_CTX_new=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ssl_SSL_CTX_new" >&5
-$as_echo "$ac_cv_lib_ssl_SSL_CTX_new" >&6; }
-if test "x$ac_cv_lib_ssl_SSL_CTX_new" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBSSL 1
-_ACEOF
-
-  LIBS="-lssl $LIBS"
-
-else
-
-    if test $NEED_SSL = yes; then
-      as_fn_error $? "OpenSSL libraries are required" "$LINENO" 5
-    fi
-    BUILD_GENHASH=No
-
-fi
-
-if test $NEED_SSL = yes; then
-  KA_LIBS="$KA_LIBS $LIBS"
-fi
-GENHASH_LIBS="$GENHASH_LIBS $LIBS"
-unset LIBS
-
-# Introduced in OpenSSL ver 0.9.9
-LIBS=$OPENSSL_LIBS
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking SSL_set_tlsext_host_name() - may be a definition" >&5
-$as_echo_n "checking SSL_set_tlsext_host_name() - may be a definition... " >&6; }
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-    #include <openssl/ssl.h>
-    int main(void)
-    {
-      request_t req;
-      SSL_set_tlsext_host_name(req.ssl, "SSL");
-    }
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-else
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-
-$as_echo "#define _HAVE_SSL_SET_TLSEXT_HOST_NAME_  1 " >>confdefs.h
-
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-
-# SSL_CTX_set_verify_depth() introduced OpenSSL v0.9.5a
-for ac_func in SSL_CTX_set_verify_depth
-do :
-  ac_fn_c_check_func "$LINENO" "SSL_CTX_set_verify_depth" "ac_cv_func_SSL_CTX_set_verify_depth"
-if test "x$ac_cv_func_SSL_CTX_set_verify_depth" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_SSL_CTX_SET_VERIFY_DEPTH 1
-_ACEOF
-
-fi
-done
-
-
-# SSL_set0_rbio(), SSL_set0_wbio() OPENSSL_init_crypto() and TLS_method() introduced OpenSSL v1.1.0
-for ac_func in SSL_set0_rbio OPENSSL_init_crypto TLS_method
-do :
-  as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
-ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
-if eval test \"x\$"$as_ac_var"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_func" | $as_tr_cpp` 1
-_ACEOF
-
-fi
-done
-
-
-# In OpenSSL v1.1.1 the call to SSL_CTX_new() fails if OPENSSL_init_crypto() has been called with
-# OPENSSL_INIT_NO_LOAD_CONFIG. It does not fail in v1.1.0h and v1.1.1b.
-if test .$ac_cv_func_OPENSSL_init_crypto = .yes; then :
-
-	if test .$ac_cv_func_TLS_method = .yes; then :
-  method_func=TLS_method
-else
-  method_func=SSLv23_method
-fi
-	if test "$cross_compiling" = yes; then :
-
-	    { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Cannot determine if need to OPENSSL_init_crypto() problem. Assuming yes for safety." >&5
-$as_echo "$as_me: WARNING: Cannot determine if need to OPENSSL_init_crypto() problem. Assuming yes for safety." >&2;}
-	    openssl_init_no_load_bug=1
-
-
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <openssl/ssl.h>
-int
-main ()
-{
-
-	      const SSL_METHOD *meth;
-	      SSL_CTX *ctx;
-
-	      if (!OPENSSL_init_crypto(OPENSSL_INIT_NO_LOAD_CONFIG, NULL))
-		return 1;
-
-	      /* Initialize SSL context */
-	      meth = $method_func();
-	      if (!(ctx = SSL_CTX_new(meth)))
-		return 1;
-	      return 0;
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
-  openssl_init_no_load_bug=0
-else
-  openssl_init_no_load_bug=1
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-  conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-	if test $openssl_init_no_load_bug -eq 1; then :
-
-$as_echo "#define HAVE_OPENSSL_INIT_NO_LOAD_CONFIG_BUG  1 " >>confdefs.h
-
-fi
-
-fi
-unset LIBS
-
-if test $BUILD_GENHASH = No; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: Unable to build genhash due to missing openssl headers/libraries" >&5
-$as_echo "$as_me: Unable to build genhash due to missing openssl headers/libraries" >&6;}
-  GENHASH_LIBS=
-fi
-
- if test $BUILD_GENHASH = Yes; then
-  BUILD_GENHASH_TRUE=
-  BUILD_GENHASH_FALSE='#'
-else
-  BUILD_GENHASH_TRUE='#'
-  BUILD_GENHASH_FALSE=
-fi
-
-
-IPV4_DEVCONF=No
-if test .$enable_vrrp != .no; then
-    SAV_CPPFLAGS="$CPPFLAGS"
-  CPPFLAGS="$CPP_FLAGS $kernelinc"
-  IPV4_DEVCONF=Yes
-  ac_fn_c_check_decl "$LINENO" "IPV4_DEVCONF_ARP_IGNORE" "ac_cv_have_decl_IPV4_DEVCONF_ARP_IGNORE" "#include <linux/ip.h>
-"
-if test "x$ac_cv_have_decl_IPV4_DEVCONF_ARP_IGNORE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPV4_DEVCONF_ARP_IGNORE $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-      IPV4_DEVCONF=No
-      break
-
-fi
-ac_fn_c_check_decl "$LINENO" "IPV4_DEVCONF_ACCEPT_LOCAL" "ac_cv_have_decl_IPV4_DEVCONF_ACCEPT_LOCAL" "#include <linux/ip.h>
-"
-if test "x$ac_cv_have_decl_IPV4_DEVCONF_ACCEPT_LOCAL" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPV4_DEVCONF_ACCEPT_LOCAL $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-      IPV4_DEVCONF=No
-      break
-
-fi
-ac_fn_c_check_decl "$LINENO" "IPV4_DEVCONF_RP_FILTER" "ac_cv_have_decl_IPV4_DEVCONF_RP_FILTER" "#include <linux/ip.h>
-"
-if test "x$ac_cv_have_decl_IPV4_DEVCONF_RP_FILTER" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPV4_DEVCONF_RP_FILTER $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-      IPV4_DEVCONF=No
-      break
-
-fi
-ac_fn_c_check_decl "$LINENO" "IPV4_DEVCONF_ARPFILTER" "ac_cv_have_decl_IPV4_DEVCONF_ARPFILTER" "#include <linux/ip.h>
-"
-if test "x$ac_cv_have_decl_IPV4_DEVCONF_ARPFILTER" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPV4_DEVCONF_ARPFILTER $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-      IPV4_DEVCONF=No
-      break
-
-fi
-
-  if test $IPV4_DEVCONF = Yes; then
-
-$as_echo "#define _HAVE_IPV4_DEVCONF_  1 " >>confdefs.h
-
-    SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPV4_DEVCONF"
-  fi
-  for ac_header in linux/rtnetlink.h
-do :
-  ac_fn_c_check_header_compile "$LINENO" "linux/rtnetlink.h" "ac_cv_header_linux_rtnetlink_h" "$RTNETLINK_EXTRA_INCLUDE
-"
-if test "x$ac_cv_header_linux_rtnetlink_h" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_LINUX_RTNETLINK_H 1
-_ACEOF
-
-else
-  as_fn_error $? "Unusable linux/rtnetlink.h" "$LINENO" 5
-fi
-
-done
-
-  CPPFLAGS="$SAV_CPPFLAGS"
-fi
-
-IPV6_ADVANCED_API=No
-ac_fn_c_check_decl "$LINENO" "IPV6_RECVHOPLIMIT" "ac_cv_have_decl_IPV6_RECVHOPLIMIT" "#include <netinet/ip6.h>
-"
-if test "x$ac_cv_have_decl_IPV6_RECVHOPLIMIT" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPV6_RECVHOPLIMIT $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-  IPV6_ADVANCED_API=Yes
-fi
-ac_fn_c_check_decl "$LINENO" "IPV6_RECVPKTINFO" "ac_cv_have_decl_IPV6_RECVPKTINFO" "#include <netinet/ip6.h>
-"
-if test "x$ac_cv_have_decl_IPV6_RECVPKTINFO" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPV6_RECVPKTINFO $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-  IPV6_ADVANCED_API=Yes
-fi
-
-if test $IPV6_ADVANCED_API = Yes; then :
-  SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPV6_ADVANCED_API"
-fi
-
-NETLINK_VER=0
-IPVS_USE_NL=No
-if test .$enable_lvs != .no -a .${enable_libnl} != .no; then
-  $PKG_CONFIG --exists libnl-3.0
-  if test $? -eq 0; then
-     if test -n "NL3"; then
-      KA_PKG_PFX=NL3
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I libnl-3.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other libnl-3.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test .remove-requires = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires libnl-3.0`
-      var=`$PKG_CONFIG --libs-only-l libnl-3.0`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs libnl-3.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-    as_ac_Lib=`$as_echo "ac_cv_lib_$NL3_LIB_NAMES''_nl_socket_alloc" | $as_tr_sh`
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for nl_socket_alloc in -l$NL3_LIB_NAMES" >&5
-$as_echo_n "checking for nl_socket_alloc in -l$NL3_LIB_NAMES... " >&6; }
-if eval \${$as_ac_Lib+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-l$NL3_LIB_NAMES  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char nl_socket_alloc ();
-int
-main ()
-{
-return nl_socket_alloc ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  eval "$as_ac_Lib=yes"
-else
-  eval "$as_ac_Lib=no"
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-eval ac_res=\$$as_ac_Lib
-	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-if eval test \"x\$"$as_ac_Lib"\" = x"yes"; then :
-
-	NETLINK_VER=3
-	NEED_NL3=No
-
-	 if test -n "GENL"; then
-      KA_PKG_PFX=GENL
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I libnl-genl-3.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other libnl-genl-3.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test .remove-requires = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires libnl-genl-3.0`
-      var=`$PKG_CONFIG --libs-only-l libnl-genl-3.0`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs libnl-genl-3.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-	as_ac_Lib=`$as_echo "ac_cv_lib_$GENL_LIB_NAMES''_genl_connect" | $as_tr_sh`
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for genl_connect in -l$GENL_LIB_NAMES" >&5
-$as_echo_n "checking for genl_connect in -l$GENL_LIB_NAMES... " >&6; }
-if eval \${$as_ac_Lib+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-l$GENL_LIB_NAMES  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char genl_connect ();
-int
-main ()
-{
-return genl_connect ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  eval "$as_ac_Lib=yes"
-else
-  eval "$as_ac_Lib=no"
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-eval ac_res=\$$as_ac_Lib
-	       { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-$as_echo "$ac_res" >&6; }
-if eval test \"x\$"$as_ac_Lib"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_LIB$GENL_LIB_NAMES" | $as_tr_cpp` 1
-_ACEOF
-
-  LIBS="-l$GENL_LIB_NAMES $LIBS"
-
-else
-  as_fn_error $? "libnl-3 is installed but not libnl-gen-3. Please, install libnl-gen-3/libnl-genl-3." "$LINENO" 5
-fi
-
-	IPVS_USE_NL=Yes
-	if test .$enable_libnl_dynamic = .yes; then
-	   if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in $($PKG_CONFIG --cflags-only-I libnl-genl-3.0); do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in $($PKG_CONFIG --cflags-only-other libnl-genl-3.0); do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-
-    if test $LDD = :; then
-      as_fn_error $? "ldd is required for dynamic run-time linking support" "$LINENO" 5
-    fi
-
-    SAV_LIBS="$LIBS"
-    LIBS="$LIBS -l$GENL_LIB_NAMES"
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-      extern void genl_connect(void);
-      int main(void)
-      {
-	genl_connect();
-	return 0;
-      }
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-
-      LIB_DETAILS=`$LDD ./conftest$EXEEXT | grep $GENL_LIB_NAMES.so | sed -e "s/^[ \t]*//"`
-      LIB_NAME=`echo $LIB_DETAILS | sed -e "s/ .*//"`
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-    LIBS="$SAV_LIBS"
-
-
-cat >>confdefs.h <<_ACEOF
-#define NL3_GENL_LIB_NAME  "$LIB_NAME"
-_ACEOF
-
-	else
-	   if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I libnl-genl-3.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other libnl-genl-3.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test . = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires libnl-genl-3.0`
-      var=`$PKG_CONFIG --libs-only-l libnl-genl-3.0`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs libnl-genl-3.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-	fi
-	NEED_NL3=Yes
-
-	if test $NEED_NL3 = Yes; then
-
-$as_echo "#define _HAVE_LIBNL3_  1 " >>confdefs.h
-
-	  SYSTEM_OPTIONS="$SYSTEM_OPTIONS LIBNL3"
-	  if test .$enable_libnl_dynamic = .yes; then
-	    SYSTEM_OPTIONS="$SYSTEM_OPTIONS LIBNL_DYNAMIC"
-	     if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in $($PKG_CONFIG --cflags-only-I libnl-3.0); do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in $($PKG_CONFIG --cflags-only-other libnl-3.0); do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-
-$as_echo "#define _LIBNL_DYNAMIC_  1 " >>confdefs.h
-
-	    NEED_LIBDL=Yes
-
-    if test $LDD = :; then
-      as_fn_error $? "ldd is required for dynamic run-time linking support" "$LINENO" 5
-    fi
-
-    SAV_LIBS="$LIBS"
-    LIBS="$LIBS -l$NL3_LIB_NAMES"
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-      extern void nl_socket_alloc(void);
-      int main(void)
-      {
-	nl_socket_alloc();
-	return 0;
-      }
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-
-      LIB_DETAILS=`$LDD ./conftest$EXEEXT | grep $NL3_LIB_NAMES.so | sed -e "s/^[ \t]*//"`
-      LIB_NAME=`echo $LIB_DETAILS | sed -e "s/ .*//"`
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-    LIBS="$SAV_LIBS"
-
-
-cat >>confdefs.h <<_ACEOF
-#define NL3_LIB_NAME  "$LIB_NAME"
-_ACEOF
-
-	  else
-	     if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I libnl-3.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other libnl-3.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test . = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires libnl-3.0`
-      var=`$PKG_CONFIG --libs-only-l libnl-3.0`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs libnl-3.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-	  fi
-	fi
-
-fi
-
-  fi
-
-  if test $NETLINK_VER -eq 0; then
-    { $as_echo "$as_me:${as_lineno-$LINENO}: checking for nl_socket_modify_cb in -lnl" >&5
-$as_echo_n "checking for nl_socket_modify_cb in -lnl... " >&6; }
-if ${ac_cv_lib_nl_nl_socket_modify_cb+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-lnl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char nl_socket_modify_cb ();
-int
-main ()
-{
-return nl_socket_modify_cb ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_nl_nl_socket_modify_cb=yes
-else
-  ac_cv_lib_nl_nl_socket_modify_cb=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_nl_nl_socket_modify_cb" >&5
-$as_echo "$ac_cv_lib_nl_nl_socket_modify_cb" >&6; }
-if test "x$ac_cv_lib_nl_nl_socket_modify_cb" = xyes; then :
-
-	IPVS_USE_NL=Yes
-	NETLINK_VER=1
-
-$as_echo "#define _HAVE_LIBNL1_  1 " >>confdefs.h
-
-	SYSTEM_OPTIONS="$SYSTEM_OPTIONS LIBNL1"
-	if test .$enable_libnl_dynamic = .yes; then
-	   if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in $($PKG_CONFIG --cflags-only-I libnl-1); do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in $($PKG_CONFIG --cflags-only-other libnl-1); do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-	  CONFIG_OPTIONS="$CONFIG_OPTIONS LIBNL_DYNAMIC"
-
-$as_echo "#define _LIBNL_DYNAMIC_  1 " >>confdefs.h
-
-	  NEED_LIBDL=Yes
-
-    if test $LDD = :; then
-      as_fn_error $? "ldd is required for dynamic run-time linking support" "$LINENO" 5
-    fi
-
-    SAV_LIBS="$LIBS"
-    LIBS="$LIBS -lnl"
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-      extern void nl_socket_modify_cb(void);
-      int main(void)
-      {
-	nl_socket_modify_cb();
-	return 0;
-      }
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-
-      LIB_DETAILS=`$LDD ./conftest$EXEEXT | grep nl.so | sed -e "s/^[ \t]*//"`
-      LIB_NAME=`echo $LIB_DETAILS | sed -e "s/ .*//"`
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-    LIBS="$SAV_LIBS"
-
-
-cat >>confdefs.h <<_ACEOF
-#define NL_LIB_NAME  "$LIB_NAME"
-_ACEOF
-
-	else
-	   if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I libnl-1`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other libnl-1`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test . = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires libnl-1`
-      var=`$PKG_CONFIG --libs-only-l libnl-1`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs libnl-1`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-	fi
-
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: keepalived will be built without libnl support." >&5
-$as_echo "$as_me: WARNING: keepalived will be built without libnl support." >&2;}
-
-fi
-
-  fi
-
-  if test $NETLINK_VER -ne 0; then
-    SAV_CPPFLAGS="$CPPFLAGS"
-    CPPFLAGS="$SAV_CPPFLAGS $NL3_CPPFLAGS"
-    for ac_header in netlink/netlink.h
-do :
-  ac_fn_c_check_header_mongrel "$LINENO" "netlink/netlink.h" "ac_cv_header_netlink_netlink_h" "$ac_includes_default"
-if test "x$ac_cv_header_netlink_netlink_h" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_NETLINK_NETLINK_H 1
-_ACEOF
-
-else
-  as_fn_error $? "netlink headers missing" "$LINENO" 5
-fi
-
-done
-
-    for ac_header in netlink/genl/ctrl.h netlink/genl/genl.h
-do :
-  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-else
-  as_fn_error $? "netlink genl headers missing" "$LINENO" 5
-fi
-
-done
-
-    CPPFLAGS="$SAV_CPPFLAGS"
-  fi
-fi
- if test $NETLINK_VER -eq 1; then
-  LIBNL1_TRUE=
-  LIBNL1_FALSE='#'
-else
-  LIBNL1_TRUE='#'
-  LIBNL1_FALSE=
-fi
-
- if test $NETLINK_VER -eq 3; then
-  LIBNL3_TRUE=
-  LIBNL3_FALSE='#'
-else
-  LIBNL3_TRUE='#'
-  LIBNL3_FALSE=
-fi
-
- if test .$enable_lvs != .no -a .$enable_libnl_dynamic = .yes -a $NETLINK_VER -ne 0; then
-  LIBNL_DYNAMIC_TRUE=
-  LIBNL_DYNAMIC_FALSE='#'
-else
-  LIBNL_DYNAMIC_TRUE='#'
-  LIBNL_DYNAMIC_FALSE=
-fi
-
-unset LIBS
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for magic_open in -lmagic" >&5
-$as_echo_n "checking for magic_open in -lmagic... " >&6; }
-if ${ac_cv_lib_magic_magic_open+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-lmagic  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char magic_open ();
-int
-main ()
-{
-return magic_open ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_magic_magic_open=yes
-else
-  ac_cv_lib_magic_magic_open=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_magic_magic_open" >&5
-$as_echo "$ac_cv_lib_magic_magic_open" >&6; }
-if test "x$ac_cv_lib_magic_magic_open" = xyes; then :
-
-
-$as_echo "#define _HAVE_LIBMAGIC_  1 " >>confdefs.h
-
-    KA_LIBS="$KA_LIBS -lmagic"
-
-fi
-
-unset LIBS
-
-ac_fn_c_check_decl "$LINENO" "RTA_ENCAP" "ac_cv_have_decl_RTA_ENCAP" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_RTA_ENCAP" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_RTA_ENCAP $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "RTA_EXPIRES" "ac_cv_have_decl_RTA_EXPIRES" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_RTA_EXPIRES" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_RTA_EXPIRES $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "RTA_NEWDST" "ac_cv_have_decl_RTA_NEWDST" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_RTA_NEWDST" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_RTA_NEWDST $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "RTA_PREF" "ac_cv_have_decl_RTA_PREF" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_RTA_PREF" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_RTA_PREF $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "FRA_SUPPRESS_PREFIXLEN" "ac_cv_have_decl_FRA_SUPPRESS_PREFIXLEN" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_FRA_SUPPRESS_PREFIXLEN" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_FRA_SUPPRESS_PREFIXLEN $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "FRA_SUPPRESS_IFGROUP" "ac_cv_have_decl_FRA_SUPPRESS_IFGROUP" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_FRA_SUPPRESS_IFGROUP" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_FRA_SUPPRESS_IFGROUP $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "FRA_TUN_ID" "ac_cv_have_decl_FRA_TUN_ID" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_FRA_TUN_ID" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_FRA_TUN_ID $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "RTAX_CC_ALGO" "ac_cv_have_decl_RTAX_CC_ALGO" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_RTAX_CC_ALGO" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_RTAX_CC_ALGO $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "RTAX_QUICKACK" "ac_cv_have_decl_RTAX_QUICKACK" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_RTAX_QUICKACK" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_RTAX_QUICKACK $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "RTEXT_FILTER_SKIP_STATS" "ac_cv_have_decl_RTEXT_FILTER_SKIP_STATS" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_RTEXT_FILTER_SKIP_STATS" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_RTEXT_FILTER_SKIP_STATS $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "FRA_L3MDEV" "ac_cv_have_decl_FRA_L3MDEV" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_FRA_L3MDEV" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_FRA_L3MDEV $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "FRA_UID_RANGE" "ac_cv_have_decl_FRA_UID_RANGE" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_FRA_UID_RANGE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_FRA_UID_RANGE $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "RTAX_FASTOPEN_NO_COOKIE" "ac_cv_have_decl_RTAX_FASTOPEN_NO_COOKIE" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_RTAX_FASTOPEN_NO_COOKIE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_RTAX_FASTOPEN_NO_COOKIE $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "RTA_VIA" "ac_cv_have_decl_RTA_VIA" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_RTA_VIA" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_RTA_VIA $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "FRA_OIFNAME" "ac_cv_have_decl_FRA_OIFNAME" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_FRA_OIFNAME" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_FRA_OIFNAME $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "FRA_PROTOCOL" "ac_cv_have_decl_FRA_PROTOCOL" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_FRA_PROTOCOL" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_FRA_PROTOCOL $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "FRA_IP_PROTO" "ac_cv_have_decl_FRA_IP_PROTO" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_FRA_IP_PROTO" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_FRA_IP_PROTO $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "FRA_SPORT_RANGE" "ac_cv_have_decl_FRA_SPORT_RANGE" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_FRA_SPORT_RANGE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_FRA_SPORT_RANGE $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "FRA_DPORT_RANGE" "ac_cv_have_decl_FRA_DPORT_RANGE" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_FRA_DPORT_RANGE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_FRA_DPORT_RANGE $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "RTA_TTL_PROPAGATE" "ac_cv_have_decl_RTA_TTL_PROPAGATE" "$RTNETLINK_EXTRA_INCLUDES
-    #include <linux/rtnetlink.h>
-    #include <sys/socket.h>
-    #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_RTA_TTL_PROPAGATE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_RTA_TTL_PROPAGATE $ac_have_decl
-_ACEOF
-
-for flag in RTA_ENCAP RTA_EXPIRES RTA_NEWDST RTA_PREF FRA_SUPPRESS_PREFIXLEN FRA_SUPPRESS_IFGROUP FRA_TUN_ID RTAX_CC_ALGO RTAX_QUICKACK RTEXT_FILTER_SKIP_STATS FRA_L3MDEV FRA_UID_RANGE RTAX_FASTOPEN_NO_COOKIE RTA_VIA FRA_OIFNAME FRA_PROTOCOL FRA_IP_PROTO FRA_SPORT_RANGE FRA_DPORT_RANGE RTA_TTL_PROPAGATE; do
-  eval decl_var=\$ac_cv_have_decl_$flag
-  if test ${decl_var} = yes; then
-    SYSTEM_OPTIONS="$SYSTEM_OPTIONS "${flag}
-  fi
-done
-
-ac_fn_c_check_decl "$LINENO" "IFA_FLAGS" "ac_cv_have_decl_IFA_FLAGS" "#include <linux/if_addr.h>
-"
-if test "x$ac_cv_have_decl_IFA_FLAGS" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IFA_FLAGS $ac_have_decl
-_ACEOF
-
-for flag in IFA_FLAGS; do
-  eval decl_var=\$ac_cv_have_decl_$flag
-  if test ${decl_var} = yes; then
-    SYSTEM_OPTIONS="$SYSTEM_OPTIONS "${flag}
-  fi
-done
-
-ac_fn_c_check_decl "$LINENO" "IP_MULTICAST_ALL" "ac_cv_have_decl_IP_MULTICAST_ALL" "
-    #include <sys/socket.h>
-    #include <linux/in.h>
-
-"
-if test "x$ac_cv_have_decl_IP_MULTICAST_ALL" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IP_MULTICAST_ALL $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-    SYSTEM_OPTIONS="$SYSTEM_OPTIONS "IP_MULTICAST_ALL
-    # Check if definition is in netinet/in.h, since we can't include linux/in.h
-    # due to conflicting definitions
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-
-	    #include <netinet/in.h>
-	    int main(int argc, char **argv)
-	    {
-	      int i = IP_MULTICAST_ALL;
-	    }
-
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-
-else
-
-	# No - netinet/in.h doesn't have IP_MULTICAST_ALL
-	# Build a program that will output the value of the kernel's IP_MULTICAST_ALL
-	cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-
-		#include <sys/socket.h>
-		#include <linux/in.h>
-		#include <stdio.h>
-		int main(int argc, char **argv)
-		{
-		  printf("%d\n", IP_MULTICAST_ALL);
-		}
-
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-
-	    # Create local definition of IP_MULTICAST_ALL
-	    IMA=$(./conftest$EXEEXT)
-
-cat >>confdefs.h <<_ACEOF
-#define IP_MULTICAST_ALL  $IMA
-_ACEOF
-
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-
-fi
-
-
-if test $ac_cv_have_decl_RTA_ENCAP = yes; then :
-
-    ac_fn_c_check_decl "$LINENO" "LWTUNNEL_ENCAP_MPLS" "ac_cv_have_decl_LWTUNNEL_ENCAP_MPLS" "#include <linux/lwtunnel.h>
-"
-if test "x$ac_cv_have_decl_LWTUNNEL_ENCAP_MPLS" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_LWTUNNEL_ENCAP_MPLS $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "LWTUNNEL_ENCAP_ILA" "ac_cv_have_decl_LWTUNNEL_ENCAP_ILA" "#include <linux/lwtunnel.h>
-"
-if test "x$ac_cv_have_decl_LWTUNNEL_ENCAP_ILA" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_LWTUNNEL_ENCAP_ILA $ac_have_decl
-_ACEOF
-
-    for flag in LWTUNNEL_ENCAP_MPLS LWTUNNEL_ENCAP_ILA; do
-      eval decl_var=\$ac_cv_have_decl_$flag
-      if test ${decl_var} = yes; then
-	SYSTEM_OPTIONS="$SYSTEM_OPTIONS ${flag}"
-      fi
-    done
-
-fi
-
-USE_IPTABLES=No
-USE_LIBIPTC=No
-USE_LIBIPSET=No
-if test .$enable_iptables != .no; then :
-
-    USE_IPTABLES=Yes
-
-$as_echo "#define _WITH_IPTABLES_  1 " >>confdefs.h
-
-    if test .${enable_libiptc} = .no; then
-      CONFIG_OPTIONS="$CONFIG_OPTIONS IPTABLES_CMD"
-    else
-      USE_LIBIPTC=Yes
-            SAV_CPPFLAGS="$CPPFLAGS"
-      CPPFLAGS="$CPPFLAGS $kernelinc"
-      for ac_header in linux/netfilter/x_tables.h libiptc/libip6tc.h libiptc/libiptc.h libiptc/libxtc.h
-do :
-  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-else
-
-	  USE_LIBIPTC=No
-	  break
-
-fi
-
-done
-
-      CPPFLAGS="$SAV_CPPFLAGS"
-
-      if test $USE_LIBIPTC = Yes; then
-	 if test -n "IPTC"; then
-      KA_PKG_PFX=IPTC
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I --static libiptc`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other --static libiptc`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test . = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires --static libiptc`
-      var=`$PKG_CONFIG --libs-only-l --static libiptc`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs --static libiptc`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-	LIBS="$IPTC_LIBS"
-	SAV_CPPFLAGS="$CPPFLAGS"
-	CPPFLAGS="$CPPFLAGS $kernelinc"
-	{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for iptc_init in -liptc" >&5
-$as_echo_n "checking for iptc_init in -liptc... " >&6; }
-if ${ac_cv_lib_iptc_iptc_init+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-liptc  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char iptc_init ();
-int
-main ()
-{
-return iptc_init ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_iptc_iptc_init=yes
-else
-  ac_cv_lib_iptc_iptc_init=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_iptc_iptc_init" >&5
-$as_echo "$ac_cv_lib_iptc_iptc_init" >&6; }
-if test "x$ac_cv_lib_iptc_iptc_init" = xyes; then :
-
-
-$as_echo "#define _HAVE_LIBIPTC_  1 " >>confdefs.h
-
-	    SYSTEM_OPTIONS="$SYSTEM_OPTIONS LIBIPTC"
-	    if test .${enable_libiptc_dynamic} != .yes; then
-	       if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I --static libiptc`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other --static libiptc`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test . = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires --static libiptc`
-      var=`$PKG_CONFIG --libs-only-l --static libiptc`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs --static libiptc`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-	      CONFIG_OPTIONS="$CONFIG_OPTIONS LIBIPTC"
-	      	      KA_LIBS=`echo $KA_LIBS | sed -e "s/ -liptc//"`
-	      	      IPTC_LIBS=`echo $IPTC_LIBS | sed -e "s/ *-L[^ ]*  */ /" -e "s/ *-liptc */ /" -e "s/^  *$//"`
-	      if test ".$IPTC_LIBS" = .; then
-		KA_LIBS=`echo $KA_LIBS -lip4tc -lip6tc`
-	      fi
-	    else
-	       if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in $($PKG_CONFIG --cflags-only-I libiptc); do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in $($PKG_CONFIG --cflags-only-other libiptc); do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-	      CONFIG_OPTIONS="$CONFIG_OPTIONS LIBIPTC_DYNAMIC"
-
-$as_echo "#define _LIBIPTC_DYNAMIC_  1 " >>confdefs.h
-
-	      NEED_LIBDL=Yes
-
-    if test $LDD = :; then
-      as_fn_error $? "ldd is required for dynamic run-time linking support" "$LINENO" 5
-    fi
-
-    SAV_LIBS="$LIBS"
-    LIBS="$LIBS -lip4tc"
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-      extern void iptc_init(void);
-      int main(void)
-      {
-	iptc_init();
-	return 0;
-      }
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-
-      LIB_DETAILS=`$LDD ./conftest$EXEEXT | grep ip4tc.so | sed -e "s/^[ \t]*//"`
-      LIB_NAME=`echo $LIB_DETAILS | sed -e "s/ .*//"`
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-    LIBS="$SAV_LIBS"
-
-
-cat >>confdefs.h <<_ACEOF
-#define IP4TC_LIB_NAME  "$LIB_NAME"
-_ACEOF
-
-
-    if test $LDD = :; then
-      as_fn_error $? "ldd is required for dynamic run-time linking support" "$LINENO" 5
-    fi
-
-    SAV_LIBS="$LIBS"
-    LIBS="$LIBS -lip6tc"
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-      extern void ip6tc_init(void);
-      int main(void)
-      {
-	ip6tc_init();
-	return 0;
-      }
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-
-      LIB_DETAILS=`$LDD ./conftest$EXEEXT | grep ip6tc.so | sed -e "s/^[ \t]*//"`
-      LIB_NAME=`echo $LIB_DETAILS | sed -e "s/ .*//"`
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-    LIBS="$SAV_LIBS"
-
-
-cat >>confdefs.h <<_ACEOF
-#define IP6TC_LIB_NAME  "$LIB_NAME"
-_ACEOF
-
-	      LIBIPTC_DYNAMIC=Yes
-	    fi
-
-else
-  USE_LIBIPTC=No
-fi
-
-	CPPFLAGS="$SAV_CPPFLAGS"
-      fi
-
-      if test $USE_LIBIPTC = Yes; then
-		SAV_CPPFLAGS="$CPPFLAGS"
-	CPPFLAGS="$CPPFLAGS $kernelinc"
-	if test "${enable_libipset}" != no; then
-	  $PKG_CONFIG --exists libipset
-	  if test $? -eq 0; then
-	     if test -n "IPSET"; then
-      KA_PKG_PFX=IPSET
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I libipset`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other libipset`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test . = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires libipset`
-      var=`$PKG_CONFIG --libs-only-l libipset`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs libipset`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-	  else
-	    IPSET_LIBS="-lipset"
-	  fi
-	  SAV_LIBS=$LIBS
-	  LIBS="$IPTC_LIBS $IPSET_LIBS"
-
-	  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ipset_session_init in -lipset" >&5
-$as_echo_n "checking for ipset_session_init in -lipset... " >&6; }
-if ${ac_cv_lib_ipset_ipset_session_init+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-lipset  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char ipset_session_init ();
-int
-main ()
-{
-return ipset_session_init ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_ipset_ipset_session_init=yes
-else
-  ac_cv_lib_ipset_ipset_session_init=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ipset_ipset_session_init" >&5
-$as_echo "$ac_cv_lib_ipset_ipset_session_init" >&6; }
-if test "x$ac_cv_lib_ipset_ipset_session_init" = xyes; then :
-
-	      USE_LIBIPSET=Yes
-	      for ac_header in libipset/data.h libipset/linux_ip_set.h libipset/session.h libipset/types.h
-do :
-  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-else
-
-		  USE_LIBIPSET=No
-		  break
-
-fi
-
-done
-
-
-	      if test $USE_LIBIPSET = Yes; then
-				EXTRA_INCLUDE=
-		cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-		  #include <linux/netfilter/xt_set.h>
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-  for ac_header in linux/netfilter/xt_set.h
-do :
-  ac_fn_c_check_header_mongrel "$LINENO" "linux/netfilter/xt_set.h" "ac_cv_header_linux_netfilter_xt_set_h" "$ac_includes_default"
-if test "x$ac_cv_header_linux_netfilter_xt_set_h" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_LINUX_NETFILTER_XT_SET_H 1
-_ACEOF
-
-else
-  USE_LIBIPSET=No
-fi
-
-done
-
-else
-  ac_fn_c_check_header_compile "$LINENO" "linux/netfilter/xt_set.h" "ac_cv_header_linux_netfilter_xt_set_h" "#include <libipset/linux_ip_set.h>
-"
-if test "x$ac_cv_header_linux_netfilter_xt_set_h" = xyes; then :
-
-
-$as_echo "#define USE_LIBIPSET_LINUX_IP_SET_H  1 " >>confdefs.h
-
-		      EXTRA_INCLUDE="#include <libipset/linux_ip_set.h>"
-
-else
-  USE_LIBIPSET=No
-fi
-
-
-
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-	      fi
-
-	      if test $USE_LIBIPSET = Yes; then
-
-$as_echo "#define _HAVE_LIBIPSET_  1 " >>confdefs.h
-
-		$PKG_CONFIG --exists libipset
-		if test $? -eq 0; then
-		  if test .${enable_libipset_dynamic} = .no; then
-		     if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I libipset`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other libipset`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test . = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires libipset`
-      var=`$PKG_CONFIG --libs-only-l libipset`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs libipset`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-		  else
-		     if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in $($PKG_CONFIG --cflags-only-I libipset); do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in $($PKG_CONFIG --cflags-only-other libipset); do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-		  fi
-		elif test .${enable_libipset_dynamic} = .no; then
-		  KA_LIBS="$KA_LIBS -lipset"
-		fi
-		if test .${enable_libipset_dynamic} != .no; then
-
-$as_echo "#define _LIBIPSET_DYNAMIC_  1 " >>confdefs.h
-
-		  CONFIG_OPTIONS="$CONFIG_OPTIONS LIBIPSET_DYNAMIC"
-		  NEED_LIBDL=Yes
-
-    if test $LDD = :; then
-      as_fn_error $? "ldd is required for dynamic run-time linking support" "$LINENO" 5
-    fi
-
-    SAV_LIBS="$LIBS"
-    LIBS="$LIBS -lipset"
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-      extern void ipset_session_init(void);
-      int main(void)
-      {
-	ipset_session_init();
-	return 0;
-      }
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-
-      LIB_DETAILS=`$LDD ./conftest$EXEEXT | grep ipset.so | sed -e "s/^[ \t]*//"`
-      LIB_NAME=`echo $LIB_DETAILS | sed -e "s/ .*//"`
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-    LIBS="$SAV_LIBS"
-
-
-cat >>confdefs.h <<_ACEOF
-#define IPSET_LIB_NAME  "$LIB_NAME"
-_ACEOF
-
-		else
-		  CONFIG_OPTIONS="$CONFIG_OPTIONS LIBIPSET"
-		fi
-
-						ac_fn_c_check_member "$LINENO" "struct xt_set_info_match_v1" "match_set.index" "ac_cv_member_struct_xt_set_info_match_v1_match_set_index" "
-		    $EXTRA_INCLUDE
-		    #include <linux/netfilter/xt_set.h>
-
-"
-if test "x$ac_cv_member_struct_xt_set_info_match_v1_match_set_index" = xyes; then :
-
-$as_echo "#define HAVE_XT_SET_INFO_MATCH_V1  1 " >>confdefs.h
-
-fi
-
-				ac_fn_c_check_member "$LINENO" "struct xt_set_info_match_v3" "match_set.index" "ac_cv_member_struct_xt_set_info_match_v3_match_set_index" "
-		    $EXTRA_INCLUDE
-		    #include <linux/netfilter/xt_set.h>
-
-"
-if test "x$ac_cv_member_struct_xt_set_info_match_v3_match_set_index" = xyes; then :
-
-$as_echo "#define HAVE_XT_SET_INFO_MATCH_V3  1 " >>confdefs.h
-
-fi
-
-				ac_fn_c_check_member "$LINENO" "struct xt_set_info_match_v4" "match_set.index" "ac_cv_member_struct_xt_set_info_match_v4_match_set_index" "
-		    $EXTRA_INCLUDE
-		    #include <linux/netfilter/xt_set.h>
-
-"
-if test "x$ac_cv_member_struct_xt_set_info_match_v4_match_set_index" = xyes; then :
-
-$as_echo "#define HAVE_XT_SET_INFO_MATCH_V4  1 " >>confdefs.h
-
-fi
-
-
-				cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-		  #include <linux/netfilter/ipset/ip_set.h>
-		  int main(void) { int var = IPSET_ATTR_IFACE; }
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-$as_echo "#define HAVE_IPSET_ATTR_IFACE  1 " >>confdefs.h
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-
-																						cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-		  #include <linux/netfilter/ipset/ip_set.h>
-		  #include <libipset/linux_ip_set.h>
-		  int main(void) {}
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-		     #include <linux/netfilter/ipset/ip_set.h>
-		     #ifdef _UAPI_IP_SET_H
-		     #error _UAPI_IP_SET_H defined
-		     #endif
-		     int main(void) {}
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-$as_echo "#define LIBIPSET_H_ADD_UAPI_IP_SET_H_GUARD 1" >>confdefs.h
-
-else
-
-$as_echo "#define LIBIPSET_H_ADD_IP_SET_H_GUARD 1" >>confdefs.h
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-	      fi
-
-	      if test $USE_LIBIPSET = Yes; then
-		{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for libipset version 7 or later" >&5
-$as_echo_n "checking for libipset version 7 or later... " >&6; }
-		cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-		    #include <libipset/session.h>
-
-		    void test_func(void)
-		    {
-		      ipset_session_init(NULL, NULL);
-		    }
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-		    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-
-else
-
-		    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-$as_echo "#define LIBIPSET_PRE_V7_COMPAT  1 " >>confdefs.h
-
-		    SYSTEM_OPTIONS="$SYSTEM_OPTIONS "LIBIPSET_PRE_V7
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-	      fi
-
-fi
-
-	  LIBS="$SAV_LIBS"
-	fi
-
-		ac_fn_c_check_decl "$LINENO" "XT_EXTENSION_MAXNAMELEN" "ac_cv_have_decl_XT_EXTENSION_MAXNAMELEN" "#include <linux/netfilter/x_tables.h>
-"
-if test "x$ac_cv_have_decl_XT_EXTENSION_MAXNAMELEN" = xyes; then :
-
-else
-
-$as_echo "#define XT_EXTENSION_MAXNAMELEN  (XT_FUNCTION_MAXNAMELEN - 1) " >>confdefs.h
-
-fi
-
-
-	CPPFLAGS="$SAV_CPPFLAGS"
-      fi
-    fi
-    if test $USE_LIBIPTC = No -o .$LIBIPTC_DYNAMIC = .Yes; then :
-
-$as_echo "#define _USE_IPTABLES_CMD_  1 " >>confdefs.h
-
-fi
-
-fi
- if test $USE_LIBIPTC = Yes; then
-  LIBIPTC_TRUE=
-  LIBIPTC_FALSE='#'
-else
-  LIBIPTC_TRUE='#'
-  LIBIPTC_FALSE=
-fi
-
- if test $USE_LIBIPSET = Yes; then
-  LIBIPSET_TRUE=
-  LIBIPSET_FALSE='#'
-else
-  LIBIPSET_TRUE='#'
-  LIBIPSET_FALSE=
-fi
-
- if test $USE_IPTABLES = Yes; then
-  IPTABLES_TRUE=
-  IPTABLES_FALSE='#'
-else
-  IPTABLES_TRUE='#'
-  IPTABLES_FALSE=
-fi
-
- if test $USE_IPTABLES = Yes -a \( $USE_LIBIPTC = No -o .$LIBIPTC_DYNAMIC = .Yes \); then
-  IPTABLES_CMD_TRUE=
-  IPTABLES_CMD_FALSE='#'
-else
-  IPTABLES_CMD_TRUE='#'
-  IPTABLES_CMD_FALSE=
-fi
-
- if test $USE_LIBIPTC = Yes -a .$LIBIPTC_DYNAMIC = .Yes; then
-  LIBIPTC_DYNAMIC_TRUE=
-  LIBIPTC_DYNAMIC_FALSE='#'
-else
-  LIBIPTC_DYNAMIC_TRUE='#'
-  LIBIPTC_DYNAMIC_FALSE=
-fi
-
- if test $USE_LIBIPSET = Yes -a .${enable_libipset_dynamic} != .no; then
-  LIBIPSET_DYNAMIC_TRUE=
-  LIBIPSET_DYNAMIC_FALSE='#'
-else
-  LIBIPSET_DYNAMIC_TRUE='#'
-  LIBIPSET_DYNAMIC_FALSE=
-fi
-
- if test $USE_IPTABLES = Yes -a $USE_LIBIPTC = Yes -a .$LIBIPTC_DYNAMIC = .Yes; then
-  REQUIRE_IPTABLES_LIBS_TRUE=
-  REQUIRE_IPTABLES_LIBS_FALSE='#'
-else
-  REQUIRE_IPTABLES_LIBS_TRUE='#'
-  REQUIRE_IPTABLES_LIBS_FALSE=
-fi
-
-unset LIBS
-
-USE_NFTABLES=No
-if test .${enable_nftables} != .no; then
-  USE_NFTABLES=Yes
-    SAV_CPPFLAGS="$CPPFLAGS"
-  CPPFLAGS="$CPPFLAGS $kernelinc"
-  ac_fn_c_check_decl "$LINENO" "NFTA_TABLE_MAX" "ac_cv_have_decl_NFTA_TABLE_MAX" "#include <linux/netfilter/nf_tables.h>
-"
-if test "x$ac_cv_have_decl_NFTA_TABLE_MAX" = xyes; then :
-
-else
-
-     if test .${enable_nftables} = .yes; then :
-  as_fn_error $? "nftables header files missing/not useable" "$LINENO" 5
-fi
-     USE_NFTABLES=No
-
-fi
-
-
-  if test $USE_NFTABLES = Yes; then
-    $PKG_CONFIG --exists libnftnl
-    if test $? -ne 0; then
-      USE_NFTABLES=No
-      { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: libnftnl missing" >&5
-$as_echo "$as_me: WARNING: libnftnl missing" >&2;}
-    fi
-    $PKG_CONFIG --exists libmnl
-    if test $? -ne 0; then
-      USE_NFTABLES=No
-      { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: libmnl missing" >&5
-$as_echo "$as_me: WARNING: libmnl missing" >&2;}
-    fi
-
-    if test $USE_NFTABLES = Yes; then
-      # nft prior to version 0.8.3 does not support type ifname in sets. We can't check the version of
-      #  nft, but we can check the version of libnftnl. nft v0.8.3 required libnftnl v1.0.9, but so did
-      #  nft v0.8.2. So play safe, and require the next version.
-      #LIBNFTNL_VERSION=`printf "0x%2.2x%2.2x%2.2xU" \`pkg-config --modversion libnftnl | sed -e "s/\./ /g"\``
-      #AC_DEFINE_UNQUOTED([LIBNFTNL_VERSION], [ $LIBNFTNL_VERSION ], [libnftnl version in hex])
-
-       if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I libnftnl`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other libnftnl`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test . = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires libnftnl`
-      var=`$PKG_CONFIG --libs-only-l libnftnl`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs libnftnl`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-       if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I libmnl`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other libmnl`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test . = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires libmnl`
-      var=`$PKG_CONFIG --libs-only-l libmnl`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs libmnl`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-
-$as_echo "#define _WITH_NFTABLES_  1 " >>confdefs.h
-
-      CONFIG_OPTIONS="$CONFIG_OPTIONS NFTABLES"
-      { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether NFTNL_EXPR_LOOKUP_FLAGS is defined" >&5
-$as_echo_n "checking whether NFTNL_EXPR_LOOKUP_FLAGS is defined... " >&6; }
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-	#include <libnftnl/expr.h>
-	int main(void)
-	{
-	  int i = NFTNL_EXPR_LOOKUP_FLAGS;
-	  return 0;
-	}
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-
-	  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-
-$as_echo "#define HAVE_NFTNL_EXPR_LOOKUP_FLAGS  1 " >>confdefs.h
-
-
-else
-
-	  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-      # nft dup from Linux 4.3
-      ac_fn_c_check_decl "$LINENO" "NFTA_DUP_MAX" "ac_cv_have_decl_NFTA_DUP_MAX" "#include <linux/netfilter/nf_tables.h>
-"
-if test "x$ac_cv_have_decl_NFTA_DUP_MAX" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_NFTA_DUP_MAX $ac_have_decl
-_ACEOF
-
-
-      for ac_header in libnftnl/udata.h
-do :
-  ac_fn_c_check_header_mongrel "$LINENO" "libnftnl/udata.h" "ac_cv_header_libnftnl_udata_h" "$ac_includes_default"
-if test "x$ac_cv_header_libnftnl_udata_h" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBNFTNL_UDATA_H 1
-_ACEOF
-
-          { $as_echo "$as_me:${as_lineno-$LINENO}: checking for nftnl_udata_put_u32" >&5
-$as_echo_n "checking for nftnl_udata_put_u32... " >&6; }
-          SAV_LIBS="$LIBS"
-          LIBS="$LIBS `$PKG_CONFIG --libs libnftnl`"
-          cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-	      #include <libnftnl/udata.h>
-	      int main(void)
-	      {
-	        nftnl_udata_put_u32(NULL, 0, 0);
-	        return 0;
-	      }
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-
-	      { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-
-$as_echo "#define HAVE_NFTNL_UDATA_PUT_U32  1 " >>confdefs.h
-
-
-else
-
-	      { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-          LIBS="$SAV_LIBS"
-
-fi
-
-done
-
-    fi
-  fi
-  CPPFLAGS="$SAV_CPPFLAGS"
-fi
- if test $USE_NFTABLES = Yes; then
-  NFTABLES_TRUE=
-  NFTABLES_FALSE='#'
-else
-  NFTABLES_TRUE='#'
-  NFTABLES_FALSE=
-fi
-
-unset LIBS
-
-if test $USE_IPTABLES = Yes -o $USE_NFTABLES = Yes; then :
-
-$as_echo "#define _WITH_FIREWALL_  1 " >>confdefs.h
-
-fi
- if test $USE_IPTABLES = Yes -o $USE_NFTABLES = Yes; then
-  FIREWALL_TRUE=
-  FIREWALL_FALSE='#'
-else
-  FIREWALL_TRUE='#'
-  FIREWALL_FALSE=
-fi
-
-
-# Including <linux/if.h> and <net/if.h> can cause a namespace collision.
-# Later versions of the headers are OK if linux/if.h is included second
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for linux/if.h and net/if.h namespace collision" >&5
-$as_echo_n "checking for linux/if.h and net/if.h namespace collision... " >&6; }
-SAV_CPPFLAGS="$CPPFLAGS"
-CPPFLAGS="$CPPFLAGS $kernelinc"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-    #include <linux/if.h>
-    #include <net/if.h>
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-else
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-
-$as_echo "#define _HAVE_NET_LINUX_IF_H_COLLISION_  1 " >>confdefs.h
-
-    SYSTEM_OPTIONS="$SYSTEM_OPTIONS NET_LINUX_IF_H_COLLISION"
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-CPPFLAGS="$SAV_CPPFLAGS"
-
-# Including <linux/if_ether.h> and <netinet/if_ether.h> causes a namespace collision
-# with musl libc, but the collision only occurs if linux/ip_ether.h is included
-# before netinet/if_ether.h. The problem is that we want to include them in that
-# order.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for linux/if_ether.h then netinet/if_ether.h namespace collision" >&5
-$as_echo_n "checking for linux/if_ether.h then netinet/if_ether.h namespace collision... " >&6; }
-SAV_CPPFLAGS="$CPPFLAGS"
-CPPFLAGS="$CPPFLAGS $kernelinc"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-    #include <linux/if_ether.h>
-    #include <netinet/if_ether.h>
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-else
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-
-$as_echo "#define _HAVE_NETINET_LINUX_IF_ETHER_H_COLLISION_  1 " >>confdefs.h
-
-    SYSTEM_OPTIONS="$SYSTEM_OPTIONS NETINET_LINUX_IF_ETHER_H_COLLISION"
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-CPPFLAGS="$SAV_CPPFLAGS"
-
-# Linux 4.5 to 4.5.4 has <libiptc/libiptc.h> indirectly including <net/if.h>
-# and <linux/if.h> which causes a namespace collision.
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for libiptc/libiptc.h linux/if.h and net/if.h namespace collision" >&5
-$as_echo_n "checking for libiptc/libiptc.h linux/if.h and net/if.h namespace collision... " >&6; }
-SAV_CPPFLAGS="$CPPFLAGS"
-CPPFLAGS="$CPPFLAGS $kernelinc"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-    #include <libiptc/libiptc.h>
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-
-else
-
-    { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-
-$as_echo "#define _HAVE_LIBIPTC_LINUX_NET_IF_H_COLLISION_  1 " >>confdefs.h
-
-    SYSTEM_OPTIONS="$SYSTEM_OPTIONS LIBIPTC_LINUX_NET_IF_H_COLLISION"
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-CPPFLAGS="$SAV_CPPFLAGS"
-
-IPVS_SYNCD_ATTRIBUTES=No
-IPVS_64BIT_STATS=No
-WITH_REGEX=No
-ENABLE_REGEX_DEBUG=No
-if test "$enable_lvs" != no; then
-  IPVS_SUPPORT=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS LVS"
-
-$as_echo "#define _WITH_LVS_  1 " >>confdefs.h
-
-
-    for ac_header in linux/ip_vs.h
-do :
-  ac_fn_c_check_header_mongrel "$LINENO" "linux/ip_vs.h" "ac_cv_header_linux_ip_vs_h" "$ac_includes_default"
-if test "x$ac_cv_header_linux_ip_vs_h" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_LINUX_IP_VS_H 1
-_ACEOF
-
-            ac_fn_c_check_decl "$LINENO" "IP_VS_SVC_F_ONEPACKET" "ac_cv_have_decl_IP_VS_SVC_F_ONEPACKET" "#include <linux/ip_vs.h>
-"
-if test "x$ac_cv_have_decl_IP_VS_SVC_F_ONEPACKET" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IP_VS_SVC_F_ONEPACKET $ac_have_decl
-_ACEOF
-
-
-fi
-
-done
-
-
-  if test $IPVS_USE_NL = Yes; then
-
-$as_echo "#define LIBIPVS_USE_NL  1 " >>confdefs.h
-
-    SYSTEM_OPTIONS="$SYSTEM_OPTIONS LIBIPVS_NETLINK"
-  fi
-
-    SAV_CPPFLAGS="$CPPFLAGS"
-  CPPFLAGS="$CPPFLAGS $kernelinc"
-
-    ac_fn_c_check_decl "$LINENO" "IPVS_DEST_ATTR_ADDR_FAMILY" "ac_cv_have_decl_IPVS_DEST_ATTR_ADDR_FAMILY" "#include <linux/ip_vs.h>
-"
-if test "x$ac_cv_have_decl_IPVS_DEST_ATTR_ADDR_FAMILY" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPVS_DEST_ATTR_ADDR_FAMILY $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-  SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPVS_DEST_ATTR_ADDR_FAMILY"
-fi
-
-
-    IPVS_SYNCD_ATTRIBUTES=Yes
-  ac_fn_c_check_decl "$LINENO" "IPVS_DAEMON_ATTR_SYNC_MAXLEN" "ac_cv_have_decl_IPVS_DAEMON_ATTR_SYNC_MAXLEN" "#include <linux/ip_vs.h>
-"
-if test "x$ac_cv_have_decl_IPVS_DAEMON_ATTR_SYNC_MAXLEN" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPVS_DAEMON_ATTR_SYNC_MAXLEN $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-      IPVS_SYNCD_ATTRIBUTES=No
-      break
-
-fi
-ac_fn_c_check_decl "$LINENO" "IPVS_DAEMON_ATTR_MCAST_GROUP" "ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_GROUP" "#include <linux/ip_vs.h>
-"
-if test "x$ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_GROUP" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPVS_DAEMON_ATTR_MCAST_GROUP $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-      IPVS_SYNCD_ATTRIBUTES=No
-      break
-
-fi
-ac_fn_c_check_decl "$LINENO" "IPVS_DAEMON_ATTR_MCAST_GROUP6" "ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_GROUP6" "#include <linux/ip_vs.h>
-"
-if test "x$ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_GROUP6" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPVS_DAEMON_ATTR_MCAST_GROUP6 $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-      IPVS_SYNCD_ATTRIBUTES=No
-      break
-
-fi
-ac_fn_c_check_decl "$LINENO" "IPVS_DAEMON_ATTR_MCAST_PORT" "ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_PORT" "#include <linux/ip_vs.h>
-"
-if test "x$ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_PORT" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPVS_DAEMON_ATTR_MCAST_PORT $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-      IPVS_SYNCD_ATTRIBUTES=No
-      break
-
-fi
-ac_fn_c_check_decl "$LINENO" "IPVS_DAEMON_ATTR_MCAST_TTL" "ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_TTL" "#include <linux/ip_vs.h>
-"
-if test "x$ac_cv_have_decl_IPVS_DAEMON_ATTR_MCAST_TTL" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPVS_DAEMON_ATTR_MCAST_TTL $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-      IPVS_SYNCD_ATTRIBUTES=No
-      break
-
-fi
-
-
-    if test $IPVS_SYNCD_ATTRIBUTES = Yes; then
-
-$as_echo "#define _HAVE_IPVS_SYNCD_ATTRIBUTES_  1 " >>confdefs.h
-
-    SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPVS_SYNCD_ATTRIBUTES"
-  fi
-
-      if test "$enable_lvs_64bit_stats" != "no"; then
-    IPVS_64BIT_STATS=Yes
-    ac_fn_c_check_decl "$LINENO" "IPVS_SVC_ATTR_STATS64" "ac_cv_have_decl_IPVS_SVC_ATTR_STATS64" "#include <linux/ip_vs.h>
-"
-if test "x$ac_cv_have_decl_IPVS_SVC_ATTR_STATS64" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPVS_SVC_ATTR_STATS64 $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-	IPVS_64BIT_STATS=No
-	break
-
-fi
-ac_fn_c_check_decl "$LINENO" "IPVS_DEST_ATTR_STATS64" "ac_cv_have_decl_IPVS_DEST_ATTR_STATS64" "#include <linux/ip_vs.h>
-"
-if test "x$ac_cv_have_decl_IPVS_DEST_ATTR_STATS64" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPVS_DEST_ATTR_STATS64 $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-	IPVS_64BIT_STATS=No
-	break
-
-fi
-
-    if test $IPVS_64BIT_STATS = Yes; then
-
-$as_echo "#define _WITH_LVS_64BIT_STATS_  1 " >>confdefs.h
-
-      SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPVS_64BIT_STATS"
-    fi
-  fi
-
-      ac_fn_c_check_decl "$LINENO" "IPVS_DEST_ATTR_TUN_TYPE" "ac_cv_have_decl_IPVS_DEST_ATTR_TUN_TYPE" "#include <linux/ip_vs.h>
-"
-if test "x$ac_cv_have_decl_IPVS_DEST_ATTR_TUN_TYPE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IPVS_DEST_ATTR_TUN_TYPE $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-
-$as_echo "#define _HAVE_IPVS_TUN_TYPE_  1 " >>confdefs.h
-
-      SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPVS_TUN_TYPE"
-
-fi
-
-
-    ac_fn_c_check_decl "$LINENO" "IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM" "ac_cv_have_decl_IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM" "#include <linux/ip_vs.h>
-"
-if test "x$ac_cv_have_decl_IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IP_VS_TUNNEL_ENCAP_FLAG_NOCSUM $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-
-$as_echo "#define _HAVE_IPVS_TUN_CSUM_  1 " >>confdefs.h
-
-      SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPVS_TUN_CSUM"
-
-fi
-
-
-    ac_fn_c_check_decl "$LINENO" "IP_VS_CONN_F_TUNNEL_TYPE_GRE" "ac_cv_have_decl_IP_VS_CONN_F_TUNNEL_TYPE_GRE" "#include <linux/ip_vs.h>
-"
-if test "x$ac_cv_have_decl_IP_VS_CONN_F_TUNNEL_TYPE_GRE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IP_VS_CONN_F_TUNNEL_TYPE_GRE $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-
-$as_echo "#define _HAVE_IPVS_TUN_GRE_  1 " >>confdefs.h
-
-      SYSTEM_OPTIONS="$SYSTEM_OPTIONS IPVS_TUN_GRE"
-
-fi
-
-
-  CPPFLAGS="$SAV_CPPFLAGS"
-
-    if test "$enable_regex" = yes; then :
-
-      $PKG_CONFIG --exists libpcre2-8
-      HAVE_PCRE2=$?
-      if test $HAVE_PCRE2 -ne 0; then :
-  as_fn_error $? "cannot find pcre library" "$LINENO" 5
-fi
-      { $as_echo "$as_me:${as_lineno-$LINENO}: checking for pcre.h" >&5
-$as_echo_n "checking for pcre.h... " >&6; }
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-	#define PCRE2_CODE_UNIT_WIDTH 8
-	#include <pcre2.h>
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-	  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-	  WITH_REGEX=Yes
-	   if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I libpcre2-8`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other libpcre2-8`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test . = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires libpcre2-8`
-      var=`$PKG_CONFIG --libs-only-l libpcre2-8`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs libpcre2-8`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-
-$as_echo "#define _WITH_REGEX_CHECK_  1 " >>confdefs.h
-
-	  CONFIG_OPTIONS="$CONFIG_OPTIONS REGEX"
-
-else
-
-	  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-	  as_fn_error $? "pcre2.h is missing" "$LINENO" 5
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-      if test "$enable_regex_timers" = yes; then
-
-$as_echo "#define _WITH_REGEX_TIMERS_  1 " >>confdefs.h
-
-      fi
-
-      if test "${enable_regex_debug}" = yes; then
-
-$as_echo "#define _REGEX_DEBUG_  1 " >>confdefs.h
-
-	ENABLE_REGEX_DEBUG=Yes
-	CONFIG_OPTIONS="$CONFIG_OPTIONS REGEX_DEBUG"
-      fi
-
-fi
-else
-  IPVS_SUPPORT=No
-fi
- if test $IPVS_SUPPORT = Yes; then
-  WITH_IPVS_TRUE=
-  WITH_IPVS_FALSE='#'
-else
-  WITH_IPVS_TRUE='#'
-  WITH_IPVS_FALSE=
-fi
-
- if test $WITH_REGEX = Yes; then
-  WITH_REGEX_TRUE=
-  WITH_REGEX_FALSE='#'
-else
-  WITH_REGEX_TRUE='#'
-  WITH_REGEX_FALSE=
-fi
-
-
-VRRP_SUPPORT=No
-VRRP_AUTH_SUPPORT=No
-MACVLAN_SUPPORT=No
-ENABLE_JSON=No
-BFD_SUPPORT=No
-HAVE_CN_PROC=No
-if test "$enable_vrrp" != no; then
-  VRRP_SUPPORT=Yes
-
-$as_echo "#define _WITH_VRRP_  1 " >>confdefs.h
-
-  CONFIG_OPTIONS="$CONFIG_OPTIONS VRRP"
-
-    if test "${enable_vrrp_auth}" != no; then
-    VRRP_AUTH_SUPPORT=Yes
-
-$as_echo "#define _WITH_VRRP_AUTH_  1 " >>confdefs.h
-
-    CONFIG_OPTIONS="$CONFIG_OPTIONS VRRP_AUTH"
-  fi
-
-    SAV_CPPFLAGS="$CPPFLAGS"
-  CPPFLAGS="$CPPFLAGS $kernelinc"
-  MACVLAN_SUPPORT=Yes
-    ac_fn_c_check_decl "$LINENO" "IFLA_MACVLAN_MODE" "ac_cv_have_decl_IFLA_MACVLAN_MODE" "
-      #include <sys/socket.h>
-      #include <linux/if_link.h>
-
-"
-if test "x$ac_cv_have_decl_IFLA_MACVLAN_MODE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IFLA_MACVLAN_MODE $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-      MACVLAN_SUPPORT=No
-      break
-
-fi
-ac_fn_c_check_decl "$LINENO" "MACVLAN_MODE_PRIVATE" "ac_cv_have_decl_MACVLAN_MODE_PRIVATE" "
-      #include <sys/socket.h>
-      #include <linux/if_link.h>
-
-"
-if test "x$ac_cv_have_decl_MACVLAN_MODE_PRIVATE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_MACVLAN_MODE_PRIVATE $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-      MACVLAN_SUPPORT=No
-      break
-
-fi
-
-  if test $MACVLAN_SUPPORT = Yes; then
-
-$as_echo "#define _HAVE_VRRP_VMAC_  1 " >>confdefs.h
-
-    SYSTEM_OPTIONS="$SYSTEM_OPTIONS VRRP_VMAC"
-  fi
-  CPPFLAGS="$SAV_CPPFLAGS"
-
-    SAV_CPPFLAGS="$CPPFLAGS"
-  CPPFLAGS="$CPPFLAGS $kernelinc"
-  IPVLAN_SUPPORT=Yes
-    ac_fn_c_check_decl "$LINENO" "IFLA_IPVLAN_MODE" "ac_cv_have_decl_IFLA_IPVLAN_MODE" "
-      #include <sys/socket.h>
-      #include <linux/if_link.h>
-
-"
-if test "x$ac_cv_have_decl_IFLA_IPVLAN_MODE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IFLA_IPVLAN_MODE $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-else
-
-      IPVLAN_SUPPORT=No
-      break
-
-fi
-
-  if test $IPVLAN_SUPPORT = Yes; then
-
-$as_echo "#define _HAVE_VRRP_IPVLAN_  1 " >>confdefs.h
-
-    SYSTEM_OPTIONS="$SYSTEM_OPTIONS VRRP_IPVLAN"
-  fi
-  CPPFLAGS="$SAV_CPPFLAGS"
-
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-    #include <linux/if_link.h>
-    int main(void) { int var = IFLA_LINK_NETNSID; }
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-
-$as_echo "#define HAVE_IFLA_LINK_NETNSID  1 " >>confdefs.h
-
-      SYSTEM_OPTIONS="$SYSTEM_OPTIONS IFLA_LINK_NETNSID"
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-
-    if test "${enable_json}" = yes; then
-    ENABLE_JSON=Yes
-
-$as_echo "#define _WITH_JSON_  1 " >>confdefs.h
-
-    CONFIG_OPTIONS="$CONFIG_OPTIONS JSON"
-  fi
-
-    if test "${enable_bfd}" = yes; then
-    BFD_SUPPORT=Yes
-
-$as_echo "#define _WITH_BFD_  1 " >>confdefs.h
-
-    CONFIG_OPTIONS="$CONFIG_OPTIONS BFD"
-  fi
-
-    if test .$enable_track_process != .no; then :
-
-      SYSTEM_OPTIONS="$SYSTEM_OPTIONS CN_PROC"
-      HAVE_CN_PROC=Yes
-
-$as_echo "#define _WITH_CN_PROC_  1 " >>confdefs.h
-
-                              ac_fn_c_check_decl "$LINENO" "PROC_EVENT_SID" "ac_cv_have_decl_PROC_EVENT_SID" "#include <linux/cn_proc.h>
-"
-if test "x$ac_cv_have_decl_PROC_EVENT_SID" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_PROC_EVENT_SID $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "PROC_EVENT_PTRACE" "ac_cv_have_decl_PROC_EVENT_PTRACE" "#include <linux/cn_proc.h>
-"
-if test "x$ac_cv_have_decl_PROC_EVENT_PTRACE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_PROC_EVENT_PTRACE $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "PROC_EVENT_COMM" "ac_cv_have_decl_PROC_EVENT_COMM" "#include <linux/cn_proc.h>
-"
-if test "x$ac_cv_have_decl_PROC_EVENT_COMM" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_PROC_EVENT_COMM $ac_have_decl
-_ACEOF
-ac_fn_c_check_decl "$LINENO" "PROC_EVENT_COREDUMP" "ac_cv_have_decl_PROC_EVENT_COREDUMP" "#include <linux/cn_proc.h>
-"
-if test "x$ac_cv_have_decl_PROC_EVENT_COREDUMP" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_PROC_EVENT_COREDUMP $ac_have_decl
-_ACEOF
-
-
-else
-  CONFIG_OPTIONS="$CONFIG_OPTIONS DISABLE_TRACK_PROCESS"
-fi
-fi
- if test $VRRP_SUPPORT = Yes; then
-  WITH_VRRP_TRUE=
-  WITH_VRRP_FALSE='#'
-else
-  WITH_VRRP_TRUE='#'
-  WITH_VRRP_FALSE=
-fi
-
- if test $VRRP_AUTH_SUPPORT = Yes; then
-  VRRP_AUTH_TRUE=
-  VRRP_AUTH_FALSE='#'
-else
-  VRRP_AUTH_TRUE='#'
-  VRRP_AUTH_FALSE=
-fi
-
- if test $MACVLAN_SUPPORT = Yes; then
-  VMAC_TRUE=
-  VMAC_FALSE='#'
-else
-  VMAC_TRUE='#'
-  VMAC_FALSE=
-fi
-
- if test $ENABLE_JSON = Yes; then
-  WITH_JSON_TRUE=
-  WITH_JSON_FALSE='#'
-else
-  WITH_JSON_TRUE='#'
-  WITH_JSON_FALSE=
-fi
-
- if test $BFD_SUPPORT = Yes; then
-  WITH_BFD_TRUE=
-  WITH_BFD_FALSE='#'
-else
-  WITH_BFD_TRUE='#'
-  WITH_BFD_FALSE=
-fi
-
- if test $HAVE_CN_PROC = Yes; then
-  CN_PROC_TRUE=
-  CN_PROC_FALSE='#'
-else
-  CN_PROC_TRUE='#'
-  CN_PROC_FALSE=
-fi
-
-
-if test ${IPVS_SUPPORT} = No -a ${VRRP_SUPPORT} = No; then
-  as_fn_error $? "keepalived MUST be compiled with at least one of LVS or VRRP framework" "$LINENO" 5
-fi
-
-# Introduced in Linux 2.6.27 and glibc 2.9
-ac_fn_c_check_decl "$LINENO" "SOCK_NONBLOCK" "ac_cv_have_decl_SOCK_NONBLOCK" "#include <sys/socket.h>
-"
-if test "x$ac_cv_have_decl_SOCK_NONBLOCK" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_SOCK_NONBLOCK $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-  SYSTEM_OPTIONS="$SYSTEM_OPTIONS SOCK_NONBLOCK"
-fi
-
- if test $ac_cv_have_decl_SOCK_NONBLOCK = yes; then
-  SOCK_NONBLOCK_TRUE=
-  SOCK_NONBLOCK_FALSE='#'
-else
-  SOCK_NONBLOCK_TRUE='#'
-  SOCK_NONBLOCK_FALSE=
-fi
-
-
-# Introduced in Linux 2.6.27 and glibc 2.9
-ac_fn_c_check_decl "$LINENO" "SOCK_CLOEXEC" "ac_cv_have_decl_SOCK_CLOEXEC" "#include <sys/socket.h>
-"
-if test "x$ac_cv_have_decl_SOCK_CLOEXEC" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_SOCK_CLOEXEC $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-  SYSTEM_OPTIONS="$SYSTEM_OPTIONS SOCK_CLOEXEC"
-fi
-
-
-# Introduced in Linux 2.6.37
-ac_fn_c_check_decl "$LINENO" "IPVS_SVC_ATTR_PE_NAME" "ac_cv_have_decl_IPVS_SVC_ATTR_PE_NAME" "#include <linux/ip_vs.h>
-"
-if test "x$ac_cv_have_decl_IPVS_SVC_ATTR_PE_NAME" = xyes; then :
-
-
-$as_echo "#define _HAVE_PE_NAME_  1 " >>confdefs.h
-
-
-fi
-
-
-# Introduced in Linux 2.6.39
-SAV_CPPFLAGS="$CPPFLAGS"
-CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE"
-ac_fn_c_check_decl "$LINENO" "O_PATH" "ac_cv_have_decl_O_PATH" "#include <fcntl.h>
-"
-if test "x$ac_cv_have_decl_O_PATH" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_O_PATH $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-    SYSTEM_OPTIONS="$SYSTEM_OPTIONS O_PATH"
-
-fi
-
-CPPFLAGS="$SAV_CPPFLAGS"
-
-ac_fn_c_check_decl "$LINENO" "GLOB_BRACE" "ac_cv_have_decl_GLOB_BRACE" "#include <glob.h>
-"
-if test "x$ac_cv_have_decl_GLOB_BRACE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_GLOB_BRACE $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-  SYSTEM_OPTIONS="$SYSTEM_OPTIONS GLOB_BRACE"
-fi
-
-
-UNICAST_CHKSUM_COMPAT_SUPPORT=No
-if test .$enable_checksum_compat != .no; then
-  UNICAST_CHKSUM_COMPAT_SUPPORT=Yes
-
-$as_echo "#define _WITH_UNICAST_CHKSUM_COMPAT_  1 " >>confdefs.h
-
-  CONFIG_OPTIONS="$CONFIG_OPTIONS OLD_CHKSUM_COMPAT"
-fi
-
-FIB_ROUTING_SUPPORT=No
-if test .$enable_vrrp != .no -a .$enable_routes != .no; then
-  # Introduced in Linux 2.6.19
-  SAV_CPPFLAGS="$CPPFLAGS"
-  CPPFLAGS="$CPPFLAGS $kernelinc"
-  ac_fn_c_check_decl "$LINENO" "FRA_SRC" "ac_cv_have_decl_FRA_SRC" "#include <sys/socket.h>
-      #include <linux/fib_rules.h>
-"
-if test "x$ac_cv_have_decl_FRA_SRC" = xyes; then :
-
-      FIB_ROUTING_SUPPORT=Yes
-
-$as_echo "#define _HAVE_FIB_ROUTING_  1 " >>confdefs.h
-
-      CONFIG_OPTIONS="$CONFIG_OPTIONS FIB_ROUTING"
-
-fi
-
-  CPPFLAGS="$SAV_CPPFLAGS"
-fi
- if test $FIB_ROUTING_SUPPORT = Yes; then
-  FIB_ROUTING_TRUE=
-  FIB_ROUTING_FALSE='#'
-else
-  FIB_ROUTING_TRUE='#'
-  FIB_ROUTING_FALSE=
-fi
-
-
-if test .$enable_linkbeat = .no; then :
-
-    LINKBEAT_SUPPORT=No
-    CONFIG_OPTIONS="$CONFIG_OPTIONS NO_LINKBEAT"
-
-else
-
-    LINKBEAT_SUPPORT=Yes
-
-$as_echo "#define _WITH_LINKBEAT_  1 " >>confdefs.h
-
-
-fi
-
-SAV_CPPFLAGS="$CPPFLAGS"
-CPPFLAGS="$CPPFLAGS $kernelinc"
-if test ${MACVLAN_SUPPORT} = Yes; then
-  # Introduced in Linux 3.17
-  ac_fn_c_check_decl "$LINENO" "IFLA_INET6_ADDR_GEN_MODE" "ac_cv_have_decl_IFLA_INET6_ADDR_GEN_MODE" "
-      #include <linux/if_link.h>
-
-"
-if test "x$ac_cv_have_decl_IFLA_INET6_ADDR_GEN_MODE" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IFLA_INET6_ADDR_GEN_MODE $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-      SYSTEM_OPTIONS="$SYSTEM_OPTIONS INET6_ADDR_GEN_MODE"
-
-fi
-
-fi
-CPPFLAGS="$SAV_CPPFLAGS"
-
-SAV_CPPFLAGS="$CPPFLAGS"
-CPPFLAGS="$CPPFLAGS $kernelinc"
-if test ${MACVLAN_SUPPORT} = Yes; then
-  # Introduced in Linux 4.3
-  ac_fn_c_check_decl "$LINENO" "IFLA_VRF_MAX" "ac_cv_have_decl_IFLA_VRF_MAX" "
-      #include <linux/if_link.h>
-
-"
-if test "x$ac_cv_have_decl_IFLA_VRF_MAX" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_IFLA_VRF_MAX $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-      SYSTEM_OPTIONS="$SYSTEM_OPTIONS VRF"
-
-$as_echo "#define _HAVE_VRF_  1 " >>confdefs.h
-
-
-fi
-
-fi
-CPPFLAGS="$SAV_CPPFLAGS"
-
-SNMP_SUPPORT=No
-SNMP_KEEPALIVED_SUPPORT=No
-SNMP_VRRP_SUPPORT=No
-SNMP_RFC_SUPPORT=No
-SNMP_RFCV2_SUPPORT=No
-SNMP_RFCV3_SUPPORT=No
-SNMP_CHECKER_SUPPORT=No
-SNMP_V3_FOR_V2=No
-if test "$enable_snmp_keepalived" = yes; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: --enable-snmp-keepalived is obsolete. Use --enable-snmp-vrrp." >&5
-$as_echo "$as_me: WARNING: --enable-snmp-keepalived is obsolete. Use --enable-snmp-vrrp." >&2;}
-  enable_snmp_vrrp=$enable_snmp_keepalived
-fi
-if test "$enable_snmp" = yes -o \
-	"$enable_snmp_vrrp" = yes -o \
-	"$enable_snmp_checker" = yes -o \
-	"$enable_snmp_rfc" = yes -o \
-	"$enable_snmp_rfcv2" = yes -o \
-	"$enable_snmp_rfcv3" = yes; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}net-snmp-config", so it can be a program name with args.
-set dummy ${ac_tool_prefix}net-snmp-config; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_NETSNMP_CONFIG+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  case $NETSNMP_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_NETSNMP_CONFIG="$NETSNMP_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_path_NETSNMP_CONFIG="$as_dir/$ac_word$ac_exec_ext"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac
-fi
-NETSNMP_CONFIG=$ac_cv_path_NETSNMP_CONFIG
-if test -n "$NETSNMP_CONFIG"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $NETSNMP_CONFIG" >&5
-$as_echo "$NETSNMP_CONFIG" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_path_NETSNMP_CONFIG"; then
-  ac_pt_NETSNMP_CONFIG=$NETSNMP_CONFIG
-  # Extract the first word of "net-snmp-config", so it can be a program name with args.
-set dummy net-snmp-config; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_path_ac_pt_NETSNMP_CONFIG+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  case $ac_pt_NETSNMP_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_ac_pt_NETSNMP_CONFIG="$ac_pt_NETSNMP_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_path_ac_pt_NETSNMP_CONFIG="$as_dir/$ac_word$ac_exec_ext"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac
-fi
-ac_pt_NETSNMP_CONFIG=$ac_cv_path_ac_pt_NETSNMP_CONFIG
-if test -n "$ac_pt_NETSNMP_CONFIG"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_pt_NETSNMP_CONFIG" >&5
-$as_echo "$ac_pt_NETSNMP_CONFIG" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-  if test "x$ac_pt_NETSNMP_CONFIG" = x; then
-    NETSNMP_CONFIG="no"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-$as_echo "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    NETSNMP_CONFIG=$ac_pt_NETSNMP_CONFIG
-  fi
-else
-  NETSNMP_CONFIG="$ac_cv_path_NETSNMP_CONFIG"
-fi
-
-  if test "$NETSNMP_CONFIG" = no; then
-    as_fn_error $? "*** unable to find net-snmp-config" "$LINENO" 5
-  fi
-  NETSNMP_LIBS_AGENT=`${NETSNMP_CONFIG} --netsnmp-agent-libs`
-  NETSNMP_LIBS_EXT=`${NETSNMP_CONFIG} --external-libs`
-  NETSNMP_LIBS="$NETSNMP_LIBS_AGENT $NETSNMP_LIBS_EXT"
-  NETSNMP_CFLAGS="`${NETSNMP_CONFIG} --base-cflags`"
-  NETSNMP_CPPFLAGS="-DNETSNMP_NO_INLINE"
-
-  # net-snmp-config adds compiler and linker options that were set at the time
-  # net-snmp was built, and this can include spec files that may not exist
-  # on the system building keepalived. We need to check if any spec files
-  # are specified, and if they do not exist on this system, then remove them
-  # from NETSNMP_LIBS or NETSNMP_CFLAGS.
-  # For further information, see https://bugzilla.redhat.com/show_bug.cgi?id=1544527
-  # and the other bugs referred to in it.
-  for spec in `echo $NETSNMP_LIBS | sed -e "s? ?\n?g" | grep "^-specs="`; do
-    SPEC_FILE=`echo $spec | sed -e "s?^-spaces=??"`
-    if test ! -f $SPEC_FILE; then
-      NETSNMP_LIBS=`echo $NETSNMP_LIBS | sed -e "s? *$spec *? ?"`
-      { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Removing $spec from NETSNMP_LIBS since spec file not installed" >&5
-$as_echo "$as_me: WARNING: Removing $spec from NETSNMP_LIBS since spec file not installed" >&2;}
-    fi
-  done
-  for spec in `echo $NETSNMP_CFLAGS | sed -e "s? ?\n?g" | grep "^-specs="`; do
-    SPEC_FILE=`echo $spec | sed -e "s?^-spaces=??"`
-    if test ! -f $SPEC_FILE; then
-      NETSNMP_CFLAGS=`echo $NETSNMP_CFLAGS | sed -e "s? *$spec *? ?"`
-      { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Removing $spec from NETSNMP_CFLAGS since spec file not installed" >&5
-$as_echo "$as_me: WARNING: Removing $spec from NETSNMP_CFLAGS since spec file not installed" >&2;}
-    fi
-  done
-
-  SAV_CFLAGS="$CFLAGS"
-  CFLAGS="$CFLAGS ${NETSNMP_CFLAGS}"
-  SAV_LIBS="$LIBS"
-  LIBS="$LIBS ${NETSNMP_LIBS}"
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether C compiler supports flag \"${NETSNMP_CFLAGS} ${NETSNMP_LIBS}\" from Net-SNMP" >&5
-$as_echo_n "checking whether C compiler supports flag \"${NETSNMP_CFLAGS} ${NETSNMP_LIBS}\" from Net-SNMP... " >&6; }
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-      int main(void)
-      {
-	return 0;
-      }
-
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-
-      { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-$as_echo "yes" >&6; }
-
-else
-
-     { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-     as_fn_error $? "*** incorrect CFLAGS from net-snmp-config" "$LINENO" 5
-
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-
-  # Do we have subagent support?
-  for ac_func in netsnmp_enable_subagent
-do :
-  ac_fn_c_check_func "$LINENO" "netsnmp_enable_subagent" "ac_cv_func_netsnmp_enable_subagent"
-if test "x$ac_cv_func_netsnmp_enable_subagent" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_NETSNMP_ENABLE_SUBAGENT 1
-_ACEOF
-
-else
-  as_fn_error $? "*** no subagent support in net-snmp" "$LINENO" 5
-fi
-done
-
-
-  # check for net-snmp headers
-  # Some ancient distributions may miss <net-snmp/agent/util_funcs.h> header
-  SAV_CPPFLAGS="$CPPFLAGS"
-  CPPFLAGS="$CPPFLAGS $NETSNMP_CFLAGS"
-  for ac_header in net-snmp/agent/agent_sysORTable.h net-snmp/agent/snmp_vars.h net-snmp/agent/util_funcs.h
-do :
-  as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
-ac_fn_c_check_header_compile "$LINENO" "$ac_header" "$as_ac_Header" "
-      #include <net-snmp/net-snmp-config.h>
-      #include <net-snmp/net-snmp-includes.h>
-      #include <net-snmp/agent/net-snmp-agent-includes.h>
-
-"
-if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
-  cat >>confdefs.h <<_ACEOF
-#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
-_ACEOF
-
-else
-  as_fn_error $? "missing net-snmp headers" "$LINENO" 5
-fi
-
-done
-
-
-  SNMP_SUPPORT=Yes
-
-  # NETSNMP_CFLAGS can have CPPFLAGS options, so separate them
-  NETSNMP_CPPFLAGS_XTRA=`echo " $NETSNMP_CFLAGS " | sed -e "s/ /  /g" -e "s/ -[^IDU] *-/ -/g" -e "s/ -[^IDU] *[^-][^ ]* / /g" -e "s/  */ /g"`
-  NETSNMP_CFLAGS=`echo " $NETSNMP_CFLAGS " | sed -e "s/ /  /g" -e "s/ -[IDU] *[^ ]* / /g" -e "s/  */ /g"`
-  KA_CFLAGS="$KA_CFLAGS $NETSNMP_CFLAGS"
-  KA_CPPFLAGS="$KA_CPPFLAGS $NETSNMP_CPPFLAGS $NETSNMP_CPPFLAGS_XTRA"
-
-  # NETSNMP_LIBS may have some LDFLAGS options, so separate them
-  NETSNMP_LDFLAGS_XTRA=`echo " $NETSNMP_LIBS " | sed -e "s/ /  /g" -e "s/ -l *[^ ]* /  /g" -e "s/  */ /g" -e "s/ -/ @-/g" | tr "@" "\n" | sed -e "s/^  *//" -e "s/  *$//" | sort -u | tr "\n" " "`
-  NETSNMP_LIBS=`echo " $NETSNMP_LIBS " | sed -e "s/ /  /g" -e "s/ \(-l *[^ ]*\) /@\1@/g" | tr "@" "\n" | grep  "^-l" | tr "\n" " " | sed -e "s/  */ /g"`
-  KA_LDFLAGS="$KA_LDFLAGS $NETSNMP_LDFLAGS $NETSNMP_LDFLAGS_XTRA"
-  KA_LIBS="$KA_LIBS $NETSNMP_LIBS"
-
-  if test "$enable_snmp_rfc" = yes; then
-    SNMP_RFCV2_SUPPORT=Yes
-    SNMP_RFCV3_SUPPORT=Yes
-  else
-    if test "$enable_snmp_rfcv2" = yes; then
-      SNMP_RFCV2_SUPPORT=Yes
-    fi
-    if test "$enable_snmp_rfcv3" = yes; then
-      SNMP_RFCV3_SUPPORT=Yes
-    fi
-  fi
-  if test ${SNMP_RFCV2_SUPPORT} = Yes -o \
-	  ${SNMP_RFCV3_SUPPORT} = Yes; then
-    if test ${VRRP_SUPPORT} != Yes; then
-      as_fn_error $? "RFC SNMP support requires VRRP" "$LINENO" 5
-    fi
-    SNMP_RFC_SUPPORT=Yes
-  fi
-  if test ${SNMP_RFCV3_SUPPORT} = Yes -a \
-	  "$enable_snmp_reply_v3_for_v2" != no; then
-
-$as_echo "#define _SNMP_REPLY_V3_FOR_V2_  1 " >>confdefs.h
-
-    SNMP_V3_FOR_V2=Yes
-    CONFIG_OPTIONS="$CONFIG_OPTIONS SNMP_V3_FOR_V2"
-  fi
-
-  if test "$enable_snmp" = yes; then
-    if test ${VRRP_SUPPORT} = Yes; then
-      SNMP_VRRP_SUPPORT=Yes
-    fi
-    if test ${IPVS_SUPPORT} = Yes; then
-      SNMP_CHECKER_SUPPORT=Yes
-    fi
-  else
-    if test "$enable_snmp_vrrp" = yes; then
-      SNMP_VRRP_SUPPORT=Yes
-    fi
-    if test "$enable_snmp_checker" = yes; then
-      SNMP_CHECKER_SUPPORT=Yes
-    fi
-  fi
-  if test ${VRRP_SUPPORT} != Yes -a \
-	  ${SNMP_VRRP_SUPPORT} = Yes; then
-    as_fn_error $? "VRRP SNMP support requires VRRP" "$LINENO" 5
-  fi
-  if test ${IPVS_SUPPORT} = No -a \
-	  ${SNMP_CHECKER_SUPPORT} = Yes; then
-    as_fn_error $? "CHECKER SNMP support requires checker" "$LINENO" 5
-  fi
-
-  if test ${SNMP_VRRP_SUPPORT} = Yes -o \
-	  ${SNMP_CHECKER_SUPPORT} = Yes; then
-    SNMP_KEEPALIVED_SUPPORT=Yes
-  fi
-
-  CPPFLAGS="$SAV_CPPFLAGS"
-  CFLAGS="$SAV_CFLAGS"
-  LIBS="$SAV_LIBS"
-fi
-
-if test $SNMP_SUPPORT = Yes; then
-
-$as_echo "#define _WITH_SNMP_  1 " >>confdefs.h
-
-fi
-if test $SNMP_KEEPALIVED_SUPPORT = Yes; then
-
-$as_echo "#define _WITH_SNMP_KEEPALIVED_  1 " >>confdefs.h
-
-fi
-if test $SNMP_VRRP_SUPPORT = Yes; then
-
-$as_echo "#define _WITH_SNMP_VRRP_  1 " >>confdefs.h
-
-  CONFIG_OPTIONS="$CONFIG_OPTIONS SNMP_VRRP"
-fi
-if test $SNMP_CHECKER_SUPPORT = Yes; then
-
-$as_echo "#define _WITH_SNMP_CHECKER_  1 " >>confdefs.h
-
-  CONFIG_OPTIONS="$CONFIG_OPTIONS SNMP_CHECKER"
-fi
-if test $SNMP_RFC_SUPPORT = Yes; then
-
-$as_echo "#define _WITH_SNMP_RFC_  1 " >>confdefs.h
-
-fi
-if test $SNMP_RFCV2_SUPPORT = Yes; then
-
-$as_echo "#define _WITH_SNMP_RFCV2_  1 " >>confdefs.h
-
-  CONFIG_OPTIONS="$CONFIG_OPTIONS SNMP_RFCV2"
-fi
-if test $SNMP_RFCV3_SUPPORT = Yes; then
-
-$as_echo "#define _WITH_SNMP_RFCV3_  1 " >>confdefs.h
-
-  CONFIG_OPTIONS="$CONFIG_OPTIONS SNMP_RFCV3"
-fi
- if test $SNMP_SUPPORT = Yes; then
-  SNMP_TRUE=
-  SNMP_FALSE='#'
-else
-  SNMP_TRUE='#'
-  SNMP_FALSE=
-fi
-
- if test $SNMP_KEEPALIVED_SUPPORT = Yes; then
-  SNMP_KEEPALIVED_TRUE=
-  SNMP_KEEPALIVED_FALSE='#'
-else
-  SNMP_KEEPALIVED_TRUE='#'
-  SNMP_KEEPALIVED_FALSE=
-fi
-
- if test $SNMP_VRRP_SUPPORT = Yes -o $SNMP_RFC_SUPPORT = Yes; then
-  SNMP_VRRP_TRUE=
-  SNMP_VRRP_FALSE='#'
-else
-  SNMP_VRRP_TRUE='#'
-  SNMP_VRRP_FALSE=
-fi
-
- if test $SNMP_CHECKER_SUPPORT = Yes; then
-  SNMP_CHECKER_TRUE=
-  SNMP_CHECKER_FALSE='#'
-else
-  SNMP_CHECKER_TRUE='#'
-  SNMP_CHECKER_FALSE=
-fi
-
- if test $SNMP_RFCV2_SUPPORT = Yes -o $SNMP_RFCV3_SUPPORT = Yes; then
-  SNMP_RFC_TRUE=
-  SNMP_RFC_FALSE='#'
-else
-  SNMP_RFC_TRUE='#'
-  SNMP_RFC_FALSE=
-fi
-
- if test $SNMP_RFCV2_SUPPORT = Yes; then
-  SNMP_RFCV2_TRUE=
-  SNMP_RFCV2_FALSE='#'
-else
-  SNMP_RFCV2_TRUE='#'
-  SNMP_RFCV2_FALSE=
-fi
-
- if test $SNMP_RFCV3_SUPPORT = Yes; then
-  SNMP_RFCV3_TRUE=
-  SNMP_RFCV3_FALSE='#'
-else
-  SNMP_RFCV3_TRUE='#'
-  SNMP_RFCV3_FALSE=
-fi
-
- if test $SNMP_V3_FOR_V2 = Yes; then
-  SNMP_REPLY_V3_FOR_V2_TRUE=
-  SNMP_REPLY_V3_FOR_V2_FALSE='#'
-else
-  SNMP_REPLY_V3_FOR_V2_TRUE='#'
-  SNMP_REPLY_V3_FOR_V2_FALSE=
-fi
-
-if test $SNMP_SUPPORT = Yes; then :
-  SNMP_SERVICE=snmpd.service
-else
-  SNMP_SERVICE=
-fi
-
-
-DBUS_SUPPORT=No
-DBUS_CREATE_INSTANCE=No
-if test "$enable_dbus" = yes; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for g_bus_own_name in -lgio-2.0" >&5
-$as_echo_n "checking for g_bus_own_name in -lgio-2.0... " >&6; }
-if ${ac_cv_lib_gio_2_0_g_bus_own_name+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-lgio-2.0  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char g_bus_own_name ();
-int
-main ()
-{
-return g_bus_own_name ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_gio_2_0_g_bus_own_name=yes
-else
-  ac_cv_lib_gio_2_0_g_bus_own_name=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_gio_2_0_g_bus_own_name" >&5
-$as_echo "$ac_cv_lib_gio_2_0_g_bus_own_name" >&6; }
-if test "x$ac_cv_lib_gio_2_0_g_bus_own_name" = xyes; then :
-
-       if test -n ""; then
-      KA_PKG_PFX=
-    else
-      KA_PKG_PFX=KA
-    fi
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CPPFLAGS
-    for item in `$PKG_CONFIG --cflags-only-I gio-2.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CPPFLAGS=\"\$${KA_PKG_PFX}_CPPFLAGS $ADD_NEW\"
-
-    ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_CFLAGS
-    for item in `$PKG_CONFIG --cflags-only-other gio-2.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_CFLAGS=\"\$${KA_PKG_PFX}_CFLAGS $ADD_NEW\"
-
-
-    if test . = .remove-requires; then
-      REQUIRES=`$PKG_CONFIG --print-requires gio-2.0`
-      var=`$PKG_CONFIG --libs-only-l gio-2.0`
-      for r in $REQUIRES; do
-	REQ_LIBS=`$PKG_CONFIG --libs-only-l $r`
-	for l in $REQ_LIBS; do
-	  var=`echo " $var " | sed -e "s: $l : :g"`
-	done
-      done
-      var=`echo $var | sed -e "s:^ *::" -e "s:  *$::"`
-      eval ${KA_PKG_PFX}_LIBS="\"$var\""
-
-      var=`echo $var | sed -e "s/-l//g"`
-      eval ${KA_PKG_PFX}_LIB_NAMES="\"$var\""
-    else
-      ADD_NEW=
-   eval var=\$${KA_PKG_PFX}_LIBS
-    for item in `$PKG_CONFIG --libs gio-2.0`; do
-      echo " $var " | $GREP -q " $item "
-      if test $? -ne 0; then
-	ADD_NEW="$ADD_NEW $item"
-      fi
-    done
-    eval ${KA_PKG_PFX}_LIBS=\"\$${KA_PKG_PFX}_LIBS $ADD_NEW\"
-
-    fi
-
-      DBUS_SUPPORT=Yes
-
-$as_echo "#define _WITH_DBUS_  1 " >>confdefs.h
-
-      CONFIG_OPTIONS="$CONFIG_OPTIONS DBUS"
-
-            SAV_CFLAGS=$CFLAGS
-      CFLAGS="$($PKG_CONFIG --cflags gio-2.0)"
-      SAV_LIBS=$LIBS
-      LIBS="$($PKG_CONFIG --libs gio-2.0)"
-      if test "$cross_compiling" = yes; then :
-
-	  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: Cannot determine if need to call g_type_init(). Assuming yes for safety." >&5
-$as_echo "$as_me: WARNING: Cannot determine if need to call g_type_init(). Assuming yes for safety." >&2;}
-	  need_g_type_init=1
-
-else
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-	  #include <gio/gio.h>
-int
-main ()
-{
-return !g_thread_functions_for_glib_use.mutex_lock;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_run "$LINENO"; then :
-  need_g_type_init=0
-else
-  need_g_type_init=1
-fi
-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
-  conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-
-      if test $need_g_type_init -eq 1; then
-
-$as_echo "#define DBUS_NEED_G_TYPE_INIT  1 " >>confdefs.h
-
-      fi
-      LIBS=$SAV_LIBS
-      CFLAGS=$SAV_CFLAGS
-      if test "$enable_dbus_create_instance" = yes; then
-
-$as_echo "#define _WITH_DBUS_CREATE_INSTANCE_  1 " >>confdefs.h
-
-	DBUS_CREATE_INSTANCE=Yes
-	CONFIG_OPTIONS="$CONFIG_OPTIONS DBUS_CREATE_INSTANCE"
-	{ $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: DBus create instance functionality is dangerous - why do you want it?" >&5
-$as_echo "$as_me: WARNING: DBus create instance functionality is dangerous - why do you want it?" >&2;}
-      fi
-
-else
-  as_fn_error $? "DBUS support requested but libgio-2.0 not found." "$LINENO" 5
-fi
-
-  unset LIBS
-fi
- if test $DBUS_SUPPORT = Yes; then
-  WITH_DBUS_TRUE=
-  WITH_DBUS_FALSE='#'
-else
-  WITH_DBUS_TRUE='#'
-  WITH_DBUS_FALSE=
-fi
-
- if test $DBUS_CREATE_INSTANCE = Yes; then
-  DBUS_CREATE_INSTANCE_TRUE=
-  DBUS_CREATE_INSTANCE_FALSE='#'
-else
-  DBUS_CREATE_INSTANCE_TRUE='#'
-  DBUS_CREATE_INSTANCE_FALSE=
-fi
-
-
-SHA1_SUPPORT=No
-if test "${enable_sha1}" = yes; then
-  for ac_header in openssl/sha.h
-do :
-  ac_fn_c_check_header_mongrel "$LINENO" "openssl/sha.h" "ac_cv_header_openssl_sha_h" "$ac_includes_default"
-if test "x$ac_cv_header_openssl_sha_h" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_OPENSSL_SHA_H 1
-_ACEOF
-
-else
-  as_fn_error $? "unable to find openssl/sha.h" "$LINENO" 5
-fi
-
-done
-
-  { $as_echo "$as_me:${as_lineno-$LINENO}: checking for SHA1_Init in -lcrypto" >&5
-$as_echo_n "checking for SHA1_Init in -lcrypto... " >&6; }
-if ${ac_cv_lib_crypto_SHA1_Init+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcrypto  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char SHA1_Init ();
-int
-main ()
-{
-return SHA1_Init ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_crypto_SHA1_Init=yes
-else
-  ac_cv_lib_crypto_SHA1_Init=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_SHA1_Init" >&5
-$as_echo "$ac_cv_lib_crypto_SHA1_Init" >&6; }
-if test "x$ac_cv_lib_crypto_SHA1_Init" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBCRYPTO 1
-_ACEOF
-
-  LIBS="-lcrypto $LIBS"
-
-else
-
-            { ac_cv_lib_crypto_SHA1_Init=; unset ac_cv_lib_crypto_SHA1_Init;}
-      SAV_CFLAGS=$CFLAGS
-      CFLAGS="$CFLAGS -fpic"
-      { $as_echo "$as_me:${as_lineno-$LINENO}: checking for SHA1_Init in -lcrypto" >&5
-$as_echo_n "checking for SHA1_Init in -lcrypto... " >&6; }
-if ${ac_cv_lib_crypto_SHA1_Init+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-lcrypto  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char SHA1_Init ();
-int
-main ()
-{
-return SHA1_Init ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"; then :
-  ac_cv_lib_crypto_SHA1_Init=yes
-else
-  ac_cv_lib_crypto_SHA1_Init=no
-fi
-rm -f core conftest.err conftest.$ac_objext \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_crypto_SHA1_Init" >&5
-$as_echo "$ac_cv_lib_crypto_SHA1_Init" >&6; }
-if test "x$ac_cv_lib_crypto_SHA1_Init" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_LIBCRYPTO 1
-_ACEOF
-
-  LIBS="-lcrypto $LIBS"
-
-else
-  as_fn_error $? "SHA1 in OpenSSL required" "$LINENO" 5
-fi
-
-      CFLAGS=$SAV_CFLAGS
-      KA_CFLAGS="$KA_CFLAGS -fpic"
-
-fi
-
-  SHA1_SUPPORT=Yes
-
-$as_echo "#define _WITH_SHA1_  1 " >>confdefs.h
-
-fi
- if test $SHA1_SUPPORT = Yes; then
-  WITH_SHA1_TRUE=
-  WITH_SHA1_FALSE='#'
-else
-  WITH_SHA1_TRUE='#'
-  WITH_SHA1_FALSE=
-fi
-
-unset LIBS
-
-SO_MARK_SUPPORT=No
-if test "${enable_fwmark}" != no; then
-  ac_fn_c_check_decl "$LINENO" "SO_MARK" "ac_cv_have_decl_SO_MARK" "#include <sys/socket.h>
-"
-if test "x$ac_cv_have_decl_SO_MARK" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_SO_MARK $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-      SO_MARK_SUPPORT=Yes
-
-$as_echo "#define _WITH_SO_MARK_  1 " >>confdefs.h
-
-      SYSTEM_OPTIONS="$SYSTEM_OPTIONS SO_MARK"
-
-fi
-
-fi
-
-SAV_CFLAGS="$CFLAGS"
-ac_fn_c_check_decl "$LINENO" "CLONE_NEWNET" "ac_cv_have_decl_CLONE_NEWNET" "#include <sched.h>
-"
-if test "x$ac_cv_have_decl_CLONE_NEWNET" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_CLONE_NEWNET $ac_have_decl
-_ACEOF
-
-for ac_func in setns
-do :
-  ac_fn_c_check_func "$LINENO" "setns" "ac_cv_func_setns"
-if test "x$ac_cv_func_setns" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_SETNS 1
-_ACEOF
-
-fi
-done
-
-if test $ac_cv_func_setns = no; then :
-
-	{ ac_cv_func_setns=; unset ac_cv_func_setns;}
-	CFLAGS="$CFLAGS -fPIC"
-	for ac_func in setns
-do :
-  ac_fn_c_check_func "$LINENO" "setns" "ac_cv_func_setns"
-if test "x$ac_cv_func_setns" = xyes; then :
-  cat >>confdefs.h <<_ACEOF
-#define HAVE_SETNS 1
-_ACEOF
-
-fi
-done
-
-
-fi
-CFLAGS="$SAV_CFLAGS"
- if test $ac_cv_have_decl_CLONE_NEWNET = yes; then
-  WITH_NAMESPACES_TRUE=
-  WITH_NAMESPACES_FALSE='#'
-else
-  WITH_NAMESPACES_TRUE='#'
-  WITH_NAMESPACES_FALSE=
-fi
-
-
-ac_fn_c_check_decl "$LINENO" "SCHED_RR" "ac_cv_have_decl_SCHED_RR" "#include <sched.h>
-"
-if test "x$ac_cv_have_decl_SCHED_RR" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_SCHED_RR $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-
-    SCHED_RT_SUPPORT=Yes
-
-$as_echo "#define _HAVE_SCHED_RT_  1 " >>confdefs.h
-
-    SYSTEM_OPTIONS="$SYSTEM_OPTIONS SCHED_RT"
-
-        ac_fn_c_check_decl "$LINENO" "RLIMIT_RTTIME" "ac_cv_have_decl_RLIMIT_RTTIME" "#include <sys/resource.h>
-"
-if test "x$ac_cv_have_decl_RLIMIT_RTTIME" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_RLIMIT_RTTIME $ac_have_decl
-_ACEOF
-
-
-        ac_fn_c_check_decl "$LINENO" "SCHED_RESET_ON_FORK" "ac_cv_have_decl_SCHED_RESET_ON_FORK" "#include <sched.h>
-"
-if test "x$ac_cv_have_decl_SCHED_RESET_ON_FORK" = xyes; then :
-  ac_have_decl=1
-else
-  ac_have_decl=0
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define HAVE_DECL_SCHED_RESET_ON_FORK $ac_have_decl
-_ACEOF
-if test $ac_have_decl = 1; then :
-  SYSTEM_OPTIONS="$SYSTEM_OPTIONS SCHED_RESET_ON_FORK"
-else
-
-$as_echo "#define SCHED_RESET_ON_FORK  0 " >>confdefs.h
-
-fi
-
-
-else
-
-    SCHED_RT_SUPPORT=No
-
-fi
-
-
-GNU_STD_PATHS=No
-if test "${enable_gnu_std_paths}" = "yes"; then
-
-$as_echo "#define GNU_STD_PATHS  1 " >>confdefs.h
-
-  PID_DIR=$localstatedir
-elif test $RUN_DIR_SPECIFIED = Y -a .${with_run_dir} != .no; then
-  PID_DIR=`echo ${with_run_dir} | sed -e "s:/run$::"`	# Remove a trailing /run - somewill will include it sometime
-elif test -d /run; then
-  PID_DIR=
-else
-  PID_DIR=/var
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define PID_DIR_ROOT  "${PID_DIR}"
-_ACEOF
-
-
-
-SAV_CFLAGS="$CFLAGS"
-CFLAGS="-Wformat -Werror=format $SAV_CPPFLAGS $KA_CPPFLAGS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-  #include <stdio.h>
-  #include <sys/resource.h>
-  int
-  main(int argc, char **argv)
-  {
-    rlim_t val = 23U;
-    printf("%lu %d %p", val, argc, argv);
-
-    return 0;
-  }
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"; then :
-
-$as_echo "#define PRI_rlim_t \"lu\"" >>confdefs.h
-
-else
-
-$as_echo "#define PRI_rlim_t \"llu\"" >>confdefs.h
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
-CFLAGS="$SAV_CFLAGS"
-
-if test -z "$SPHINXBUILD"; then
-  SPHINXBUILDNAME=sphinx-build
-else
-  SPHINXBUILDNAME=${SPHINXBUILD}
-fi
-
-# Extract the first word of "$SPHINXBUILDNAME", so it can be a program name with args.
-set dummy $SPHINXBUILDNAME; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_HAVE_SPHINX_BUILD+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$HAVE_SPHINX_BUILD"; then
-  ac_cv_prog_HAVE_SPHINX_BUILD="$HAVE_SPHINX_BUILD" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_HAVE_SPHINX_BUILD="Yes"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  test -z "$ac_cv_prog_HAVE_SPHINX_BUILD" && ac_cv_prog_HAVE_SPHINX_BUILD="No"
-fi
-fi
-HAVE_SPHINX_BUILD=$ac_cv_prog_HAVE_SPHINX_BUILD
-if test -n "$HAVE_SPHINX_BUILD"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $HAVE_SPHINX_BUILD" >&5
-$as_echo "$HAVE_SPHINX_BUILD" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
- if test $HAVE_SPHINX_BUILD = Yes; then
-  BUILD_DOCS_TRUE=
-  BUILD_DOCS_FALSE='#'
-else
-  BUILD_DOCS_TRUE='#'
-  BUILD_DOCS_FALSE=
-fi
-
-
-MEM_CHECK=No
-MEM_CHECK_LOG=No
-if test "${enable_mem_check}" = "yes"; then
-  MEM_CHECK=Yes
-
-$as_echo "#define _MEM_CHECK_  1 " >>confdefs.h
-
-  CONFIG_OPTIONS="$CONFIG_OPTIONS MEM_CHECK"
-  if test "${enable_mem_check_log}" = "yes"; then
-    MEM_CHECK_LOG=Yes
-
-$as_echo "#define _MEM_CHECK_LOG_  1 " >>confdefs.h
-
-    CONFIG_OPTIONS="$CONFIG_OPTIONS MEM_CHECK_LOG"
-  fi
-fi
-
-TIMER_CHECK=No
-if test "${enable_timer_check}" = "yes"; then
-  TIMER_CHECK=Yes
-
-$as_echo "#define _TIMER_CHECK_  1 " >>confdefs.h
-
-  CONFIG_OPTIONS="$CONFIG_OPTIONS TIMER_CHECK"
-fi
-
-if test "${enable_debug}" = yes; then
-
-$as_echo "#define _DEBUG_  1 " >>confdefs.h
-
-  ENABLE_DEBUG=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS DEBUG"
-else
-  ENABLE_DEBUG=No
-fi
- if test $ENABLE_DEBUG = Yes; then
-  DEBUG_TRUE=
-  DEBUG_FALSE='#'
-else
-  DEBUG_TRUE='#'
-  DEBUG_FALSE=
-fi
-
-
-if test "${enable_netlink_timers}" = yes; then
-
-$as_echo "#define _NETLINK_TIMERS_  1 " >>confdefs.h
-
-  ENABLE_NETLINK_TIMERS=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS NETLINK_TIMERS"
-else
-  ENABLE_NETLINK_TIMERS=No
-fi
-
-if test "${enable_smtp_alert_debug}" = yes; then
-
-$as_echo "#define _SMTP_ALERT_DEBUG_  1 " >>confdefs.h
-
-  ENABLE_SMTP_ALERT_DEBUG=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS SMTP_ALERT_DEBUG"
-  ENABLE_LOG_FILE_APPEND=Yes
-else
-  ENABLE_SMTP_ALERT_DEBUG=No
-fi
-
-if test "${enable_stacktrace}" = yes; then
-
-$as_echo "#define _WITH_STACKTRACE_  1 " >>confdefs.h
-
-  ENABLE_STACKTRACE=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS STACKTRACE"
-  KA_LDFLAGS="$KA_LDFLAGS -rdynamic"
-else
-  ENABLE_STACKTRACE=No
-fi
-
-if test "${enable_dump_threads}" = yes; then
-
-$as_echo "#define _WITH_DUMP_THREADS_  1 " >>confdefs.h
-
-  ENABLE_DUMP_THREADS=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS DUMP_THREADS"
-else
-  ENABLE_DUMP_THREADS=No
-fi
-
-if test "${enable_epoll_debug}" = yes; then
-
-$as_echo "#define _EPOLL_DEBUG_  1 " >>confdefs.h
-
-  ENABLE_EPOLL_DEBUG=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS EPOLL_DEBUG"
-else
-  ENABLE_EPOLL_DEBUG=No
-fi
-
-if test "${enable_epoll_thread_dump}" = yes; then
-
-$as_echo "#define _EPOLL_THREAD_DUMP_  1 " >>confdefs.h
-
-  ENABLE_EPOLL_THREAD_DUMP=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS EPOLL_THREAD_DUMP"
-else
-  ENABLE_EPOLL_THREAD_DUMP=No
-fi
-
-if test $ENABLE_EPOLL_THREAD_DUMP = Yes -o $ENABLE_DUMP_THREADS = Yes -o $ENABLE_EPOLL_DEBUG = Yes; then
-
-$as_echo "#define THREAD_DUMP  1 " >>confdefs.h
-
-fi
-
-if test "${enable_tsm_debug}" = yes; then
-
-$as_echo "#define _TSM_DEBUG_  1 " >>confdefs.h
-
-  ENABLE_TSM_DEBUG=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS TSM_DEBUG"
-else
-  ENABLE_TSM_DEBUG=No
-fi
-
-if test "${enable_vrrp_fd_debug}" = yes; then
-
-$as_echo "#define _VRRP_FD_DEBUG_  1 " >>confdefs.h
-
-  ENABLE_VRRP_FD_DEBUG=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS VRRP_FD_DEBUG"
-else
-  ENABLE_VRRP_FD_DEBUG=No
-fi
-
-if test "${enable_network_timestamp}" = yes; then
-
-$as_echo "#define _NETWORK_TIMESTAMP_  1 " >>confdefs.h
-
-  ENABLE_NETWORK_TIMESTAMP=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS NETWORK_TIMESTAMP"
-else
-  ENABLE_NETWORK_TIMESTAMP=No
-fi
-
-if test "${enable_asserts}" = yes; then
-
-$as_echo "#define _ENABLE_ASSERT_  1 " >>confdefs.h
-
-  ENABLE_ASSERT=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS ASSERT"
-else
-  ENABLE_ASSERT=No
-fi
- if test $ENABLE_ASSERT = Yes; then
-  ASSERTS_TRUE=
-  ASSERTS_FALSE='#'
-else
-  ASSERTS_TRUE='#'
-  ASSERTS_FALSE=
-fi
-
-
-if test "${with_fixed_if_type}"; then
-  if test "${with_fixed_if_type}" = yes -o ${with_fixed_if_type} = no; then
-    as_fn_error $? "An interface type must be specified with --with-fixed-if-type" "$LINENO" 5
-  fi
-
-cat >>confdefs.h <<_ACEOF
-#define _FIXED_IF_TYPE_  "${with_fixed_if_type}"
-_ACEOF
-
-  FIXED_IF_TYPE=${with_fixed_if_type}
-  CONFIG_OPTIONS="$CONFIG_OPTIONS FIXED_IF_TYPE=${with_fixed_if_type}"
-else
-  FIXED_IF_TYPE=
-fi
-
-WITH_PROFILING=No
-if test "${enable_profile}" = yes; then
-  WITH_PROFILING=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS PROFILING"
-  KA_CFLAGS="$KA_CFLAGS -pg"
-fi
- if test $WITH_PROFILING = Yes; then
-  PROFILE_TRUE=
-  PROFILE_FALSE='#'
-else
-  PROFILE_TRUE='#'
-  PROFILE_FALSE=
-fi
-
-
-if test "${enable_perf}" = yes; then
-
-$as_echo "#define _WITH_PERF_  1 " >>confdefs.h
-
-  ENABLE_PERF=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS PERF"
-  KA_CFLAGS="$KA_CFLAGS -pg"
-else
-  ENABLE_PERF=No
-fi
-
-if test "${enable_log_file}" = yes; then
-
-$as_echo "#define ENABLE_LOG_TO_FILE  1 " >>confdefs.h
-
-  ENABLE_LOG_FILE_APPEND=Yes
-  CONFIG_OPTIONS="$CONFIG_OPTIONS FILE_LOGGING"
-fi
-
-if test ${ENABLE_LOG_FILE_APPEND} = Yes; then
-
-$as_echo "#define ENABLE_LOG_FILE_APPEND  1 " >>confdefs.h
-
-  CONFIG_OPTIONS="$CONFIG_OPTIONS LOG_FILE_APPEND"
-fi
-
-if test .$enable_eintr_debug = .yes; then :
-
-
-$as_echo "#define DEBUG_EINTR  1 " >>confdefs.h
-
-    CONFIG_OPTIONS="$CONFIG_OPTIONS EINTR_DEBUG"
-
-else
-
-        if test .$ac_cv_func_signalfd != .yes -o .$enable_eintr_debug = .check; then :
-
-
-$as_echo "#define CHECK_EINTR  1 " >>confdefs.h
-
-	if test .$ac_cv_func_signalfd = .yes; then :
-  CONFIG_OPTIONS="$CONFIG_OPTIONS EINTR_CHECK"
-fi
-
-fi
-
-fi
-
-if test .$enable_track_process_debug = .yes; then :
-
-
-$as_echo "#define _TRACK_PROCESS_DEBUG_  1 " >>confdefs.h
-
-    CONFIG_OPTIONS="$CONFIG_OPTIONS TRACK_PROCESS_DEBUG"
-
-fi
-
-if test .$enable_parser_debug = .yes; then :
-
-
-$as_echo "#define _PARSER_DEBUG_  1 " >>confdefs.h
-
-    CONFIG_OPTIONS="$CONFIG_OPTIONS PARSER_DEBUG"
-
-fi
-
-if test .$enable_checksum_debug = .yes; then :
-
-
-$as_echo "#define CHECKSUM_DIAGNOSTICS  1 " >>confdefs.h
-
-    CONFIG_OPTIONS="$CONFIG_OPTIONS CHECKSUM_DEBUG"
-
-fi
-
-if test .$enable_dump_keywords = .yes; then :
-
-
-$as_echo "#define _DUMP_KEYWORDS_  1 " >>confdefs.h
-
-    CONFIG_OPTIONS="$CONFIG_OPTIONS DUMP_KEYWORDS"
-
-fi
-
-if test ${NEED_LIBDL} = Yes; then
-  KA_LIBS="$KA_LIBS -ldl"
-fi
-
-echo " $KA_LIBS" | grep -qE -- " -l?pthread "
-if test $? -eq 0 ;then
-
-$as_echo "#define _WITH_PTHREADS_  1 " >>confdefs.h
-
-fi
-
-RPM_NO_BIP=1
-# Extract the first word of "rpm", so it can be a program name with args.
-set dummy rpm; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_HAVE_RPM+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$HAVE_RPM"; then
-  ac_cv_prog_HAVE_RPM="$HAVE_RPM" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_HAVE_RPM="Yes"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  test -z "$ac_cv_prog_HAVE_RPM" && ac_cv_prog_HAVE_RPM="No"
-fi
-fi
-HAVE_RPM=$ac_cv_prog_HAVE_RPM
-if test -n "$HAVE_RPM"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $HAVE_RPM" >&5
-$as_echo "$HAVE_RPM" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-if test $HAVE_RPM = Yes; then
-  # Extract the first word of "rpmbuild", so it can be a program name with args.
-set dummy rpmbuild; ac_word=$2
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-$as_echo_n "checking for $ac_word... " >&6; }
-if ${ac_cv_prog_HAVE_RPMBUILD+:} false; then :
-  $as_echo_n "(cached) " >&6
-else
-  if test -n "$HAVE_RPMBUILD"; then
-  ac_cv_prog_HAVE_RPMBUILD="$HAVE_RPMBUILD" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
-    ac_cv_prog_HAVE_RPMBUILD="Yes"
-    $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  test -z "$ac_cv_prog_HAVE_RPMBUILD" && ac_cv_prog_HAVE_RPMBUILD="No"
-fi
-fi
-HAVE_RPMBUILD=$ac_cv_prog_HAVE_RPMBUILD
-if test -n "$HAVE_RPMBUILD"; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: $HAVE_RPMBUILD" >&5
-$as_echo "$HAVE_RPMBUILD" >&6; }
-else
-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
-$as_echo "no" >&6; }
-fi
-
-
-  RPM_SRC_DIR=`rpm --eval "%{_sourcedir}"`
-  if ! test -d $RPM_SRC_DIR; then
-    HAVE_RPMBUILD=No
-  fi
-  if test $HAVE_RPMBUILD = Yes; then
-    rpmbuild --help | grep -q -- --build-in-place
-    RPM_NO_BIP=$?
-  fi
-fi
- if test $HAVE_RPM = Yes; then
-  RPM_TRUE=
-  RPM_FALSE='#'
-else
-  RPM_TRUE='#'
-  RPM_FALSE=
-fi
-
- if test $RPM_NO_BIP -eq 0; then
-  RPM_BIP_TRUE=
-  RPM_BIP_FALSE='#'
-else
-  RPM_BIP_TRUE='#'
-  RPM_BIP_FALSE=
-fi
-
-
-INIT_TYPE=
-if test -n "$init_type"; then :
-  INIT_TYPE=$init_type
-elif test -n "$with_systemdsystemunitdir"; then :
-  INIT_TYPE=systemd
-else
-
-    /sbin/init --version 2>/dev/null | grep -q upstart
-    if test $? -eq 0; then :
-  INIT_TYPE=upstart
-else
-
-	init_path=`which systemctl 2>/dev/null`
-	if test \( $? -eq 0 -a -x "$init_path" \); then :
-
-	    systemctl | grep -q -- "-\.mount"
-	    if test $? -eq 0; then :
-  INIT_TYPE=systemd
-fi
-
-fi
-	if test \( -z "$INIT_TYPE" -a -f /etc/init.d/networking \); then :
-
-	    init_path=`which openrc-run 2>/dev/null`
-	    if test \( $? -eq 0 -a -x "$init_path" \); then :
-
-		head -1 /etc/init.d/networking | grep -q "^#! */.*/openrc-run$"
-		if test $? -eq 0; then :
-  INIT_TYPE=openrc
-fi
-
-fi
-
-fi
-	if test \( -z "$INIT_TYPE" -a -f /etc/init.d/cron -a ! -h /etc/init.d/cron \); then :
-  INIT_TYPE=SYSV
-fi
-
-fi
-
-fi
-if test \( .$INIT_TYPE = .systemd -a -z "$with_systemdsystemunitdir" \); then :
-  with_systemdsystemunitdir=$($PKG_CONFIG --variable=systemdsystemunitdir systemd)
-fi
-
-if test $default_config_file; then :
-
-    if test $default_config_file = yes -o $default_config_file = no; then :
-  as_fn_error $? "A filename must be specified for default-config-file" "$LINENO" 5
-fi
-    CONFIG_FILE=$default_config_file
-    CONFIG_OPTIONS="$CONFIG_OPTIONS DEFAULT_CONFIG_FILE=${default_config_file}"
-
-else
-  default_config_file="/etc/$PACKAGE/$PACKAGE.conf"
-fi
-
-cat >>confdefs.h <<_ACEOF
-#define DEFAULT_CONFIG_FILE "$default_config_file"
-_ACEOF
-
-DEFAULT_CONFIG_FILE=$default_config_file
-
-
-if test -z "$INIT_TYPE"; then
-  INIT_TYPE=undetected
-elif test $INIT_TYPE = systemd; then
-  systemdsystemunitdir=$with_systemdsystemunitdir
-
-fi
-
- if test $INIT_TYPE = upstart; then
-  INIT_UPSTART_TRUE=
-  INIT_UPSTART_FALSE='#'
-else
-  INIT_UPSTART_TRUE='#'
-  INIT_UPSTART_FALSE=
-fi
-
- if test $INIT_TYPE = systemd; then
-  INIT_SYSTEMD_TRUE=
-  INIT_SYSTEMD_FALSE='#'
-else
-  INIT_SYSTEMD_TRUE='#'
-  INIT_SYSTEMD_FALSE=
-fi
-
- if test $INIT_TYPE = SYSV; then
-  INIT_SYSV_TRUE=
-  INIT_SYSV_FALSE='#'
-else
-  INIT_SYSV_TRUE='#'
-  INIT_SYSV_FALSE=
-fi
-
- if test $INIT_TYPE = openrc; then
-  INIT_OPENRC_TRUE=
-  INIT_OPENRC_FALSE='#'
-else
-  INIT_OPENRC_TRUE='#'
-  INIT_OPENRC_FALSE=
-fi
-
- if test $INIT_TYPE = SUSE; then
-  INIT_SUSE_TRUE=
-  INIT_SUSE_FALSE='#'
-else
-  INIT_SUSE_TRUE='#'
-  INIT_SUSE_FALSE=
-fi
-
-
-
-cat >>confdefs.h <<_ACEOF
-#define CONFIGURATION_OPTIONS "$CONFIG_OPTIONS"
-_ACEOF
-
-
-cat >>confdefs.h <<_ACEOF
-#define SYSTEM_OPTIONS "$SYSTEM_OPTIONS"
-_ACEOF
-
-
-if test $NETLINK_VER -eq 0; then
-	NETLINK_VER=None
-fi
-
-echo
-
-# Tidy up some strings
-KA_CPPFLAGS=`echo $KA_CPPFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
-KA_CFLAGS=`echo $KA_CFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
-KA_LDFLAGS=`echo $KA_LDFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
-KA_LIBS=`echo $KA_LIBS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
-
-# Tidy up some strings
-KA_CPPFLAGS=`echo $KA_CPPFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
-KA_CFLAGS=`echo $KA_CFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
-KA_LDFLAGS=`echo $KA_LDFLAGS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
-KA_LIBS=`echo $KA_LIBS | sed -e "s/  */ /g" -e "s/^ //" -e "s/ $//"`
-
-cat >confcache <<\_ACEOF
-# This file is a shell script that caches the results of configure
-# tests run on this system so they can be shared between configure
-# scripts and configure runs, see configure's option --config-cache.
-# It is not useful on other systems.  If it contains results you don't
-# want to keep, you may remove or edit it.
-#
-# config.status only pays attention to the cache file if you give it
-# the --recheck option to rerun configure.
-#
-# `ac_cv_env_foo' variables (set or unset) will be overridden when
-# loading this file, other *unset* `ac_cv_foo' will be assigned the
-# following values.
-
-_ACEOF
-
-# The following way of writing the cache mishandles newlines in values,
-# but we know of no workaround that is simple, portable, and efficient.
-# So, we kill variables containing newlines.
-# Ultrix sh set writes to stderr and can't be redirected directly,
-# and sets the high bit in the cache file unless we assign to the vars.
-(
-  for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do
-    eval ac_val=\$$ac_var
-    case $ac_val in #(
-    *${as_nl}*)
-      case $ac_var in #(
-      *_cv_*) { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
-$as_echo "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
-      esac
-      case $ac_var in #(
-      _ | IFS | as_nl) ;; #(
-      BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
-      *) { eval $ac_var=; unset $ac_var;} ;;
-      esac ;;
-    esac
-  done
-
-  (set) 2>&1 |
-    case $as_nl`(ac_space=' '; set) 2>&1` in #(
-    *${as_nl}ac_space=\ *)
-      # `set' does not quote correctly, so add quotes: double-quote
-      # substitution turns \\\\ into \\, and sed turns \\ into \.
-      sed -n \
-	"s/'/'\\\\''/g;
-	  s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p"
-      ;; #(
-    *)
-      # `set' quotes correctly as required by POSIX, so do not add quotes.
-      sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
-      ;;
-    esac |
-    sort
-) |
-  sed '
-     /^ac_cv_env_/b end
-     t clear
-     :clear
-     s/^\([^=]*\)=\(.*[{}].*\)$/test "${\1+set}" = set || &/
-     t end
-     s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/
-     :end' >>confcache
-if diff "$cache_file" confcache >/dev/null 2>&1; then :; else
-  if test -w "$cache_file"; then
-    if test "x$cache_file" != "x/dev/null"; then
-      { $as_echo "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5
-$as_echo "$as_me: updating cache $cache_file" >&6;}
-      if test ! -f "$cache_file" || test -h "$cache_file"; then
-	cat confcache >"$cache_file"
-      else
-        case $cache_file in #(
-        */* | ?:*)
-	  mv -f confcache "$cache_file"$$ &&
-	  mv -f "$cache_file"$$ "$cache_file" ;; #(
-        *)
-	  mv -f confcache "$cache_file" ;;
-	esac
-      fi
-    fi
-  else
-    { $as_echo "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5
-$as_echo "$as_me: not updating unwritable cache $cache_file" >&6;}
-  fi
-fi
-rm -f confcache
-
-test "x$prefix" = xNONE && prefix=$ac_default_prefix
-# Let make expand exec_prefix.
-test "x$exec_prefix" = xNONE && exec_prefix='${prefix}'
-
-DEFS=-DHAVE_CONFIG_H
-
-ac_libobjs=
-ac_ltlibobjs=
-U=
-for ac_i in : $LIBOBJS; do test "x$ac_i" = x: && continue
-  # 1. Remove the extension, and $U if already installed.
-  ac_script='s/\$U\././;s/\.o$//;s/\.obj$//'
-  ac_i=`$as_echo "$ac_i" | sed "$ac_script"`
-  # 2. Prepend LIBOBJDIR.  When used with automake>=1.10 LIBOBJDIR
-  #    will be set to the directory where LIBOBJS objects are built.
-  as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext"
-  as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo'
-done
-LIBOBJS=$ac_libobjs
-
-LTLIBOBJS=$ac_ltlibobjs
-
-
-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking that generated files are newer than configure" >&5
-$as_echo_n "checking that generated files are newer than configure... " >&6; }
-   if test -n "$am_sleep_pid"; then
-     # Hide warnings about reused PIDs.
-     wait $am_sleep_pid 2>/dev/null
-   fi
-   { $as_echo "$as_me:${as_lineno-$LINENO}: result: done" >&5
-$as_echo "done" >&6; }
- if test -n "$EXEEXT"; then
-  am__EXEEXT_TRUE=
-  am__EXEEXT_FALSE='#'
-else
-  am__EXEEXT_TRUE='#'
-  am__EXEEXT_FALSE=
-fi
-
-if test -z "${AMDEP_TRUE}" && test -z "${AMDEP_FALSE}"; then
-  as_fn_error $? "conditional \"AMDEP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${am__fastdepCC_TRUE}" && test -z "${am__fastdepCC_FALSE}"; then
-  as_fn_error $? "conditional \"am__fastdepCC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${WITH_STRICT_CONFIG_CHECKS_TRUE}" && test -z "${WITH_STRICT_CONFIG_CHECKS_FALSE}"; then
-  as_fn_error $? "conditional \"WITH_STRICT_CONFIG_CHECKS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${BUILD_GENHASH_TRUE}" && test -z "${BUILD_GENHASH_FALSE}"; then
-  as_fn_error $? "conditional \"BUILD_GENHASH\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${LIBNL1_TRUE}" && test -z "${LIBNL1_FALSE}"; then
-  as_fn_error $? "conditional \"LIBNL1\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${LIBNL3_TRUE}" && test -z "${LIBNL3_FALSE}"; then
-  as_fn_error $? "conditional \"LIBNL3\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${LIBNL_DYNAMIC_TRUE}" && test -z "${LIBNL_DYNAMIC_FALSE}"; then
-  as_fn_error $? "conditional \"LIBNL_DYNAMIC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${LIBIPTC_TRUE}" && test -z "${LIBIPTC_FALSE}"; then
-  as_fn_error $? "conditional \"LIBIPTC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${LIBIPSET_TRUE}" && test -z "${LIBIPSET_FALSE}"; then
-  as_fn_error $? "conditional \"LIBIPSET\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${IPTABLES_TRUE}" && test -z "${IPTABLES_FALSE}"; then
-  as_fn_error $? "conditional \"IPTABLES\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${IPTABLES_CMD_TRUE}" && test -z "${IPTABLES_CMD_FALSE}"; then
-  as_fn_error $? "conditional \"IPTABLES_CMD\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${LIBIPTC_DYNAMIC_TRUE}" && test -z "${LIBIPTC_DYNAMIC_FALSE}"; then
-  as_fn_error $? "conditional \"LIBIPTC_DYNAMIC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${LIBIPSET_DYNAMIC_TRUE}" && test -z "${LIBIPSET_DYNAMIC_FALSE}"; then
-  as_fn_error $? "conditional \"LIBIPSET_DYNAMIC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${REQUIRE_IPTABLES_LIBS_TRUE}" && test -z "${REQUIRE_IPTABLES_LIBS_FALSE}"; then
-  as_fn_error $? "conditional \"REQUIRE_IPTABLES_LIBS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${NFTABLES_TRUE}" && test -z "${NFTABLES_FALSE}"; then
-  as_fn_error $? "conditional \"NFTABLES\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${FIREWALL_TRUE}" && test -z "${FIREWALL_FALSE}"; then
-  as_fn_error $? "conditional \"FIREWALL\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${WITH_IPVS_TRUE}" && test -z "${WITH_IPVS_FALSE}"; then
-  as_fn_error $? "conditional \"WITH_IPVS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${WITH_REGEX_TRUE}" && test -z "${WITH_REGEX_FALSE}"; then
-  as_fn_error $? "conditional \"WITH_REGEX\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${WITH_VRRP_TRUE}" && test -z "${WITH_VRRP_FALSE}"; then
-  as_fn_error $? "conditional \"WITH_VRRP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${VRRP_AUTH_TRUE}" && test -z "${VRRP_AUTH_FALSE}"; then
-  as_fn_error $? "conditional \"VRRP_AUTH\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${VMAC_TRUE}" && test -z "${VMAC_FALSE}"; then
-  as_fn_error $? "conditional \"VMAC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${WITH_JSON_TRUE}" && test -z "${WITH_JSON_FALSE}"; then
-  as_fn_error $? "conditional \"WITH_JSON\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${WITH_BFD_TRUE}" && test -z "${WITH_BFD_FALSE}"; then
-  as_fn_error $? "conditional \"WITH_BFD\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${CN_PROC_TRUE}" && test -z "${CN_PROC_FALSE}"; then
-  as_fn_error $? "conditional \"CN_PROC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${SOCK_NONBLOCK_TRUE}" && test -z "${SOCK_NONBLOCK_FALSE}"; then
-  as_fn_error $? "conditional \"SOCK_NONBLOCK\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${FIB_ROUTING_TRUE}" && test -z "${FIB_ROUTING_FALSE}"; then
-  as_fn_error $? "conditional \"FIB_ROUTING\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${SNMP_TRUE}" && test -z "${SNMP_FALSE}"; then
-  as_fn_error $? "conditional \"SNMP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${SNMP_KEEPALIVED_TRUE}" && test -z "${SNMP_KEEPALIVED_FALSE}"; then
-  as_fn_error $? "conditional \"SNMP_KEEPALIVED\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${SNMP_VRRP_TRUE}" && test -z "${SNMP_VRRP_FALSE}"; then
-  as_fn_error $? "conditional \"SNMP_VRRP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${SNMP_CHECKER_TRUE}" && test -z "${SNMP_CHECKER_FALSE}"; then
-  as_fn_error $? "conditional \"SNMP_CHECKER\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${SNMP_RFC_TRUE}" && test -z "${SNMP_RFC_FALSE}"; then
-  as_fn_error $? "conditional \"SNMP_RFC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${SNMP_RFCV2_TRUE}" && test -z "${SNMP_RFCV2_FALSE}"; then
-  as_fn_error $? "conditional \"SNMP_RFCV2\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${SNMP_RFCV3_TRUE}" && test -z "${SNMP_RFCV3_FALSE}"; then
-  as_fn_error $? "conditional \"SNMP_RFCV3\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${SNMP_REPLY_V3_FOR_V2_TRUE}" && test -z "${SNMP_REPLY_V3_FOR_V2_FALSE}"; then
-  as_fn_error $? "conditional \"SNMP_REPLY_V3_FOR_V2\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${WITH_DBUS_TRUE}" && test -z "${WITH_DBUS_FALSE}"; then
-  as_fn_error $? "conditional \"WITH_DBUS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${DBUS_CREATE_INSTANCE_TRUE}" && test -z "${DBUS_CREATE_INSTANCE_FALSE}"; then
-  as_fn_error $? "conditional \"DBUS_CREATE_INSTANCE\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${WITH_SHA1_TRUE}" && test -z "${WITH_SHA1_FALSE}"; then
-  as_fn_error $? "conditional \"WITH_SHA1\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${WITH_NAMESPACES_TRUE}" && test -z "${WITH_NAMESPACES_FALSE}"; then
-  as_fn_error $? "conditional \"WITH_NAMESPACES\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${BUILD_DOCS_TRUE}" && test -z "${BUILD_DOCS_FALSE}"; then
-  as_fn_error $? "conditional \"BUILD_DOCS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${DEBUG_TRUE}" && test -z "${DEBUG_FALSE}"; then
-  as_fn_error $? "conditional \"DEBUG\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${ASSERTS_TRUE}" && test -z "${ASSERTS_FALSE}"; then
-  as_fn_error $? "conditional \"ASSERTS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${PROFILE_TRUE}" && test -z "${PROFILE_FALSE}"; then
-  as_fn_error $? "conditional \"PROFILE\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${RPM_TRUE}" && test -z "${RPM_FALSE}"; then
-  as_fn_error $? "conditional \"RPM\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${RPM_BIP_TRUE}" && test -z "${RPM_BIP_FALSE}"; then
-  as_fn_error $? "conditional \"RPM_BIP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${INIT_UPSTART_TRUE}" && test -z "${INIT_UPSTART_FALSE}"; then
-  as_fn_error $? "conditional \"INIT_UPSTART\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${INIT_SYSTEMD_TRUE}" && test -z "${INIT_SYSTEMD_FALSE}"; then
-  as_fn_error $? "conditional \"INIT_SYSTEMD\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${INIT_SYSV_TRUE}" && test -z "${INIT_SYSV_FALSE}"; then
-  as_fn_error $? "conditional \"INIT_SYSV\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${INIT_OPENRC_TRUE}" && test -z "${INIT_OPENRC_FALSE}"; then
-  as_fn_error $? "conditional \"INIT_OPENRC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${INIT_SUSE_TRUE}" && test -z "${INIT_SUSE_FALSE}"; then
-  as_fn_error $? "conditional \"INIT_SUSE\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-
-: "${CONFIG_STATUS=./config.status}"
-ac_write_fail=0
-ac_clean_files_save=$ac_clean_files
-ac_clean_files="$ac_clean_files $CONFIG_STATUS"
-{ $as_echo "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5
-$as_echo "$as_me: creating $CONFIG_STATUS" >&6;}
-as_write_fail=0
-cat >$CONFIG_STATUS <<_ASEOF || as_write_fail=1
-#! $SHELL
-# Generated by $as_me.
-# Run this file to recreate the current configuration.
-# Compiler output produced by configure, useful for debugging
-# configure, is in config.log if it exists.
-
-debug=false
-ac_cs_recheck=false
-ac_cs_silent=false
-
-SHELL=\${CONFIG_SHELL-$SHELL}
-export SHELL
-_ASEOF
-cat >>$CONFIG_STATUS <<\_ASEOF || as_write_fail=1
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # is contrary to our usage.  Disable this feature.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else
-  case `(set -o) 2>/dev/null` in #(
-  *posix*) :
-    set -o posix ;; #(
-  *) :
-     ;;
-esac
-fi
-
-
-as_nl='
-'
-export as_nl
-# Printing a long string crashes Solaris 7 /usr/bin/printf.
-as_echo='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo
-as_echo=$as_echo$as_echo$as_echo$as_echo$as_echo$as_echo
-# Prefer a ksh shell builtin over an external printf program on Solaris,
-# but without wasting forks for bash or zsh.
-if test -z "$BASH_VERSION$ZSH_VERSION" \
-    && (test "X`print -r -- $as_echo`" = "X$as_echo") 2>/dev/null; then
-  as_echo='print -r --'
-  as_echo_n='print -rn --'
-elif (test "X`printf %s $as_echo`" = "X$as_echo") 2>/dev/null; then
-  as_echo='printf %s\n'
-  as_echo_n='printf %s'
-else
-  if test "X`(/usr/ucb/echo -n -n $as_echo) 2>/dev/null`" = "X-n $as_echo"; then
-    as_echo_body='eval /usr/ucb/echo -n "$1$as_nl"'
-    as_echo_n='/usr/ucb/echo -n'
-  else
-    as_echo_body='eval expr "X$1" : "X\\(.*\\)"'
-    as_echo_n_body='eval
-      arg=$1;
-      case $arg in #(
-      *"$as_nl"*)
-	expr "X$arg" : "X\\(.*\\)$as_nl";
-	arg=`expr "X$arg" : ".*$as_nl\\(.*\\)"`;;
-      esac;
-      expr "X$arg" : "X\\(.*\\)" | tr -d "$as_nl"
-    '
-    export as_echo_n_body
-    as_echo_n='sh -c $as_echo_n_body as_echo'
-  fi
-  export as_echo_body
-  as_echo='sh -c $as_echo_body as_echo'
-fi
-
-# The user is always right.
-if test "${PATH_SEPARATOR+set}" != set; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# IFS
-# We need space, tab and new line, in precisely that order.  Quoting is
-# there to prevent editors from complaining about space-tab.
-# (If _AS_PATH_WALK were called with IFS unset, it would disable word
-# splitting by setting IFS to empty value.)
-IFS=" ""	$as_nl"
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in #((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-    test -r "$as_dir/$0" && as_myself=$as_dir/$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as `sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  $as_echo "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-# Unset variables that we do not need and which cause bugs (e.g. in
-# pre-3.0 UWIN ksh).  But do not cause bugs in bash 2.01; the "|| exit 1"
-# suppresses any "Segmentation fault" message there.  '((' could
-# trigger a bug in pdksh 5.2.14.
-for as_var in BASH_ENV ENV MAIL MAILPATH
-do eval test x\${$as_var+set} = xset \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# NLS nuisances.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# CDPATH.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-
-# as_fn_error STATUS ERROR [LINENO LOG_FD]
-# ----------------------------------------
-# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-# script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    $as_echo "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  $as_echo "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} # as_fn_error
-
-
-# as_fn_set_status STATUS
-# -----------------------
-# Set $? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} # as_fn_set_status
-
-# as_fn_exit STATUS
-# -----------------
-# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} # as_fn_exit
-
-# as_fn_unset VAR
-# ---------------
-# Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-# as_fn_append VAR VALUE
-# ----------------------
-# Append the text in VALUE to the end of the definition contained in VAR. Take
-# advantage of any shell optimizations that allow amortized linear growth over
-# repeated appends, instead of the typical quadratic growth present in naive
-# implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null; then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else
-  as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  }
-fi # as_fn_append
-
-# as_fn_arith ARG...
-# ------------------
-# Perform arithmetic evaluation on the ARGs, and store the result in the
-# global $as_val. Take advantage of shells that can avoid forks. The arguments
-# must be portable across $(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null; then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else
-  as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  }
-fi # as_fn_arith
-
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-ECHO_C= ECHO_N= ECHO_T=
-case `echo -n x` in #(((((
--n*)
-  case `echo 'xy\c'` in
-  *c*) ECHO_T='	';;	# ECHO_T is single tab character.
-  xy)  ECHO_C='\c';;
-  *)   echo `echo ksh88 bug on AIX 6.1` > /dev/null
-       ECHO_T='	';;
-  esac;;
-*)
-  ECHO_N='-n';;
-esac
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
-    # In both cases, we have to default to `cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-
-# as_fn_mkdir_p
-# -------------
-# Create "$as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`$as_echo "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} # as_fn_mkdir_p
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-
-# as_fn_executable_p FILE
-# -----------------------
-# Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} # as_fn_executable_p
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'"
-
-# Sed expression to map a string onto a valid variable name.
-as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'"
-
-
-exec 6>&1
-## ----------------------------------- ##
-## Main body of $CONFIG_STATUS script. ##
-## ----------------------------------- ##
-_ASEOF
-test $as_write_fail = 0 && chmod +x $CONFIG_STATUS || ac_write_fail=1
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-# Save the log message, to keep $0 and so on meaningful, and to
-# report actual input values of CONFIG_FILES etc. instead of their
-# values after options handling.
-ac_log="
-This file was extended by Keepalived $as_me 2.0.19, which was
-generated by GNU Autoconf 2.69.  Invocation command line was
-
-  CONFIG_FILES    = $CONFIG_FILES
-  CONFIG_HEADERS  = $CONFIG_HEADERS
-  CONFIG_LINKS    = $CONFIG_LINKS
-  CONFIG_COMMANDS = $CONFIG_COMMANDS
-  $ $0 $@
-
-on `(hostname || uname -n) 2>/dev/null | sed 1q`
-"
-
-_ACEOF
-
-case $ac_config_files in *"
-"*) set x $ac_config_files; shift; ac_config_files=$*;;
-esac
-
-case $ac_config_headers in *"
-"*) set x $ac_config_headers; shift; ac_config_headers=$*;;
-esac
-
-
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-# Files that config.status was made for.
-config_files="$ac_config_files"
-config_headers="$ac_config_headers"
-config_commands="$ac_config_commands"
-
-_ACEOF
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-ac_cs_usage="\
-\`$as_me' instantiates files and other configuration actions
-from templates according to the current configuration.  Unless the files
-and actions are specified as TAGs, all are instantiated by default.
-
-Usage: $0 [OPTION]... [TAG]...
-
-  -h, --help       print this help, then exit
-  -V, --version    print version number and configuration settings, then exit
-      --config     print configuration, then exit
-  -q, --quiet, --silent
-                   do not print progress messages
-  -d, --debug      don't remove temporary files
-      --recheck    update $as_me by reconfiguring in the same conditions
-      --file=FILE[:TEMPLATE]
-                   instantiate the configuration file FILE
-      --header=FILE[:TEMPLATE]
-                   instantiate the configuration header FILE
-
-Configuration files:
-$config_files
-
-Configuration headers:
-$config_headers
-
-Configuration commands:
-$config_commands
-
-Report bugs to <keepalived-users@groups.io>.
-Keepalived home page: <http://www.keepalived.org/>."
-
-_ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
-ac_cs_version="\\
-Keepalived config.status 2.0.19
-configured by $0, generated by GNU Autoconf 2.69,
-  with options \\"\$ac_cs_config\\"
-
-Copyright (C) 2012 Free Software Foundation, Inc.
-This config.status script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it."
-
-ac_pwd='$ac_pwd'
-srcdir='$srcdir'
-INSTALL='$INSTALL'
-MKDIR_P='$MKDIR_P'
-AWK='$AWK'
-test -n "\$AWK" || AWK=awk
-_ACEOF
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-# The default lists apply if the user does not specify any file.
-ac_need_defaults=:
-while test $# != 0
-do
-  case $1 in
-  --*=?*)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'`
-    ac_shift=:
-    ;;
-  --*=)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=
-    ac_shift=:
-    ;;
-  *)
-    ac_option=$1
-    ac_optarg=$2
-    ac_shift=shift
-    ;;
-  esac
-
-  case $ac_option in
-  # Handling of the options.
-  -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r)
-    ac_cs_recheck=: ;;
-  --version | --versio | --versi | --vers | --ver | --ve | --v | -V )
-    $as_echo "$ac_cs_version"; exit ;;
-  --config | --confi | --conf | --con | --co | --c )
-    $as_echo "$ac_cs_config"; exit ;;
-  --debug | --debu | --deb | --de | --d | -d )
-    debug=: ;;
-  --file | --fil | --fi | --f )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    '') as_fn_error $? "missing file argument" ;;
-    esac
-    as_fn_append CONFIG_FILES " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --header | --heade | --head | --hea )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`$as_echo "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    as_fn_append CONFIG_HEADERS " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --he | --h)
-    # Conflict between --help and --header
-    as_fn_error $? "ambiguous option: \`$1'
-Try \`$0 --help' for more information.";;
-  --help | --hel | -h )
-    $as_echo "$ac_cs_usage"; exit ;;
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil | --si | --s)
-    ac_cs_silent=: ;;
-
-  # This is an error.
-  -*) as_fn_error $? "unrecognized option: \`$1'
-Try \`$0 --help' for more information." ;;
-
-  *) as_fn_append ac_config_targets " $1"
-     ac_need_defaults=false ;;
-
-  esac
-  shift
-done
-
-ac_configure_extra_args=
-
-if $ac_cs_silent; then
-  exec 6>/dev/null
-  ac_configure_extra_args="$ac_configure_extra_args --silent"
-fi
-
-_ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-if \$ac_cs_recheck; then
-  set X $SHELL '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion
-  shift
-  \$as_echo "running CONFIG_SHELL=$SHELL \$*" >&6
-  CONFIG_SHELL='$SHELL'
-  export CONFIG_SHELL
-  exec "\$@"
-fi
-
-_ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-exec 5>>config.log
-{
-  echo
-  sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX
-## Running $as_me. ##
-_ASBOX
-  $as_echo "$ac_log"
-} >&5
-
-_ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-#
-# INIT-COMMANDS
-#
-AMDEP_TRUE="$AMDEP_TRUE" ac_aux_dir="$ac_aux_dir"
-
-_ACEOF
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-
-# Handling of arguments.
-for ac_config_target in $ac_config_targets
-do
-  case $ac_config_target in
-    "lib/config.h") CONFIG_HEADERS="$CONFIG_HEADERS lib/config.h" ;;
-    "lib/config_warnings.h") CONFIG_HEADERS="$CONFIG_HEADERS lib/config_warnings.h" ;;
-    "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;;
-    "keepalived/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/Makefile" ;;
-    "lib/Makefile") CONFIG_FILES="$CONFIG_FILES lib/Makefile" ;;
-    "keepalived/core/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/core/Makefile" ;;
-    "keepalived.spec") CONFIG_FILES="$CONFIG_FILES keepalived.spec" ;;
-    "genhash/Makefile") CONFIG_FILES="$CONFIG_FILES genhash/Makefile" ;;
-    "keepalived/check/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/check/Makefile" ;;
-    "keepalived/vrrp/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/vrrp/Makefile" ;;
-    "keepalived/bfd/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/bfd/Makefile" ;;
-    "doc/Makefile") CONFIG_FILES="$CONFIG_FILES doc/Makefile" ;;
-    "bin_install/Makefile") CONFIG_FILES="$CONFIG_FILES bin_install/Makefile" ;;
-    "keepalived/dbus/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/dbus/Makefile" ;;
-    "keepalived/etc/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/etc/Makefile" ;;
-    "keepalived/etc/init/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/etc/init/Makefile" ;;
-    "keepalived/etc/init.d/Makefile") CONFIG_FILES="$CONFIG_FILES keepalived/etc/init.d/Makefile" ;;
-    "doc/man/man8/Makefile") CONFIG_FILES="$CONFIG_FILES doc/man/man8/Makefile" ;;
-    "depfiles") CONFIG_COMMANDS="$CONFIG_COMMANDS depfiles" ;;
-
-  *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;;
-  esac
-done
-
-
-# If the user did not use the arguments to specify the items to instantiate,
-# then the envvar interface is used.  Set only those that are not.
-# We use the long form for the default assignment because of an extremely
-# bizarre bug on SunOS 4.1.3.
-if $ac_need_defaults; then
-  test "${CONFIG_FILES+set}" = set || CONFIG_FILES=$config_files
-  test "${CONFIG_HEADERS+set}" = set || CONFIG_HEADERS=$config_headers
-  test "${CONFIG_COMMANDS+set}" = set || CONFIG_COMMANDS=$config_commands
-fi
-
-# Have a temporary directory for convenience.  Make it in the build tree
-# simply because there is no reason against having it here, and in addition,
-# creating and moving files from /tmp can sometimes cause problems.
-# Hook for its removal unless debugging.
-# Note that there is a small window in which the directory will not be cleaned:
-# after its creation but before its name has been assigned to `$tmp'.
-$debug ||
-{
-  tmp= ac_tmp=
-  trap 'exit_status=$?
-  : "${ac_tmp:=$tmp}"
-  { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status
-' 0
-  trap 'as_fn_exit 1' 1 2 13 15
-}
-# Create a (secure) tmp directory for tmp files.
-
-{
-  tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` &&
-  test -d "$tmp"
-}  ||
-{
-  tmp=./conf$$-$RANDOM
-  (umask 077 && mkdir "$tmp")
-} || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5
-ac_tmp=$tmp
-
-# Set up the scripts for CONFIG_FILES section.
-# No need to generate them if there are no CONFIG_FILES.
-# This happens for instance with `./config.status config.h'.
-if test -n "$CONFIG_FILES"; then
-
-
-ac_cr=`echo X | tr X '\015'`
-# On cygwin, bash can eat \r inside `` if the user requested igncr.
-# But we know of no other shell where ac_cr would be empty at this
-# point, so we can use a bashism as a fallback.
-if test "x$ac_cr" = x; then
-  eval ac_cr=\$\'\\r\'
-fi
-ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' </dev/null 2>/dev/null`
-if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then
-  ac_cs_awk_cr='\\r'
-else
-  ac_cs_awk_cr=$ac_cr
-fi
-
-echo 'BEGIN {' >"$ac_tmp/subs1.awk" &&
-_ACEOF
-
-
-{
-  echo "cat >conf$$subs.awk <<_ACEOF" &&
-  echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' &&
-  echo "_ACEOF"
-} >conf$$subs.sh ||
-  as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-ac_delim_num=`echo "$ac_subst_vars" | grep -c '^'`
-ac_delim='%!_!# '
-for ac_last_try in false false false false false :; do
-  . ./conf$$subs.sh ||
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-
-  ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | grep -c X`
-  if test $ac_delim_n = $ac_delim_num; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-rm -f conf$$subs.sh
-
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK &&
-_ACEOF
-sed -n '
-h
-s/^/S["/; s/!.*/"]=/
-p
-g
-s/^[^!]*!//
-:repl
-t repl
-s/'"$ac_delim"'$//
-t delim
-:nl
-h
-s/\(.\{148\}\)..*/\1/
-t more1
-s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/
-p
-n
-b repl
-:more1
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t nl
-:delim
-h
-s/\(.\{148\}\)..*/\1/
-t more2
-s/["\\]/\\&/g; s/^/"/; s/$/"/
-p
-b
-:more2
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t delim
-' <conf$$subs.awk | sed '
-/^[^""]/{
-  N
-  s/\n//
-}
-' >>$CONFIG_STATUS || ac_write_fail=1
-rm -f conf$$subs.awk
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-_ACAWK
-cat >>"\$ac_tmp/subs1.awk" <<_ACAWK &&
-  for (key in S) S_is_set[key] = 1
-  FS = ""
-
-}
-{
-  line = $ 0
-  nfields = split(line, field, "@")
-  substed = 0
-  len = length(field[1])
-  for (i = 2; i < nfields; i++) {
-    key = field[i]
-    keylen = length(key)
-    if (S_is_set[key]) {
-      value = S[key]
-      line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3)
-      len += length(value) + length(field[++i])
-      substed = 1
-    } else
-      len += 1 + keylen
-  }
-
-  print line
-}
-
-_ACAWK
-_ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then
-  sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g"
-else
-  cat
-fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \
-  || as_fn_error $? "could not setup config files machinery" "$LINENO" 5
-_ACEOF
-
-# VPATH may cause trouble with some makes, so we remove sole $(srcdir),
-# ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and
-# trailing colons and then remove the whole line if VPATH becomes empty
-# (actually we leave an empty line to preserve line numbers).
-if test "x$srcdir" = x.; then
-  ac_vpsub='/^[	 ]*VPATH[	 ]*=[	 ]*/{
-h
-s///
-s/^/:/
-s/[	 ]*$/:/
-s/:\$(srcdir):/:/g
-s/:\${srcdir}:/:/g
-s/:@srcdir@:/:/g
-s/^:*//
-s/:*$//
-x
-s/\(=[	 ]*\).*/\1/
-G
-s/\n//
-s/^[^=]*=[	 ]*$//
-}'
-fi
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-fi # test -n "$CONFIG_FILES"
-
-# Set up the scripts for CONFIG_HEADERS section.
-# No need to generate them if there are no CONFIG_HEADERS.
-# This happens for instance with `./config.status Makefile'.
-if test -n "$CONFIG_HEADERS"; then
-cat >"$ac_tmp/defines.awk" <<\_ACAWK ||
-BEGIN {
-_ACEOF
-
-# Transform confdefs.h into an awk script `defines.awk', embedded as
-# here-document in config.status, that substitutes the proper values into
-# config.h.in to produce config.h.
-
-# Create a delimiter string that does not exist in confdefs.h, to ease
-# handling of long lines.
-ac_delim='%!_!# '
-for ac_last_try in false false :; do
-  ac_tt=`sed -n "/$ac_delim/p" confdefs.h`
-  if test -z "$ac_tt"; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-
-# For the awk script, D is an array of macro values keyed by name,
-# likewise P contains macro parameters if any.  Preserve backslash
-# newline sequences.
-
-ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]*
-sed -n '
-s/.\{148\}/&'"$ac_delim"'/g
-t rset
-:rset
-s/^[	 ]*#[	 ]*define[	 ][	 ]*/ /
-t def
-d
-:def
-s/\\$//
-t bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3"/p
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2"/p
-d
-:bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3\\\\\\n"\\/p
-t cont
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p
-t cont
-d
-:cont
-n
-s/.\{148\}/&'"$ac_delim"'/g
-t clear
-:clear
-s/\\$//
-t bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/"/p
-d
-:bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p
-b cont
-' <confdefs.h | sed '
-s/'"$ac_delim"'/"\\\
-"/g' >>$CONFIG_STATUS || ac_write_fail=1
-
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-  for (key in D) D_is_set[key] = 1
-  FS = ""
-}
-/^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ {
-  line = \$ 0
-  split(line, arg, " ")
-  if (arg[1] == "#") {
-    defundef = arg[2]
-    mac1 = arg[3]
-  } else {
-    defundef = substr(arg[1], 2)
-    mac1 = arg[2]
-  }
-  split(mac1, mac2, "(") #)
-  macro = mac2[1]
-  prefix = substr(line, 1, index(line, defundef) - 1)
-  if (D_is_set[macro]) {
-    # Preserve the white space surrounding the "#".
-    print prefix "define", macro P[macro] D[macro]
-    next
-  } else {
-    # Replace #undef with comments.  This is necessary, for example,
-    # in the case of _POSIX_SOURCE, which is predefined and required
-    # on some systems where configure will not decide to define it.
-    if (defundef == "undef") {
-      print "/*", prefix defundef, macro, "*/"
-      next
-    }
-  }
-}
-{ print }
-_ACAWK
-_ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-  as_fn_error $? "could not setup config headers machinery" "$LINENO" 5
-fi # test -n "$CONFIG_HEADERS"
-
-
-eval set X "  :F $CONFIG_FILES  :H $CONFIG_HEADERS    :C $CONFIG_COMMANDS"
-shift
-for ac_tag
-do
-  case $ac_tag in
-  :[FHLC]) ac_mode=$ac_tag; continue;;
-  esac
-  case $ac_mode$ac_tag in
-  :[FHL]*:*);;
-  :L* | :C*:*) as_fn_error $? "invalid tag \`$ac_tag'" "$LINENO" 5;;
-  :[FH]-) ac_tag=-:-;;
-  :[FH]*) ac_tag=$ac_tag:$ac_tag.in;;
-  esac
-  ac_save_IFS=$IFS
-  IFS=:
-  set x $ac_tag
-  IFS=$ac_save_IFS
-  shift
-  ac_file=$1
-  shift
-
-  case $ac_mode in
-  :L) ac_source=$1;;
-  :[FH])
-    ac_file_inputs=
-    for ac_f
-    do
-      case $ac_f in
-      -) ac_f="$ac_tmp/stdin";;
-      *) # Look for the file first in the build tree, then in the source tree
-	 # (if the path is not absolute).  The absolute path cannot be DOS-style,
-	 # because $ac_f cannot contain `:'.
-	 test -f "$ac_f" ||
-	   case $ac_f in
-	   [\\/$]*) false;;
-	   *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";;
-	   esac ||
-	   as_fn_error 1 "cannot find input file: \`$ac_f'" "$LINENO" 5;;
-      esac
-      case $ac_f in *\'*) ac_f=`$as_echo "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac
-      as_fn_append ac_file_inputs " '$ac_f'"
-    done
-
-    # Let's still pretend it is `configure' which instantiates (i.e., don't
-    # use $as_me), people would be surprised to read:
-    #    /* config.h.  Generated by config.status.  */
-    configure_input='Generated from '`
-	  $as_echo "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g'
-	`' by configure.'
-    if test x"$ac_file" != x-; then
-      configure_input="$ac_file.  $configure_input"
-      { $as_echo "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5
-$as_echo "$as_me: creating $ac_file" >&6;}
-    fi
-    # Neutralize special characters interpreted by sed in replacement strings.
-    case $configure_input in #(
-    *\&* | *\|* | *\\* )
-       ac_sed_conf_input=`$as_echo "$configure_input" |
-       sed 's/[\\\\&|]/\\\\&/g'`;; #(
-    *) ac_sed_conf_input=$configure_input;;
-    esac
-
-    case $ac_tag in
-    *:-:* | *:-) cat >"$ac_tmp/stdin" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;;
-    esac
-    ;;
-  esac
-
-  ac_dir=`$as_dirname -- "$ac_file" ||
-$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$ac_file" : 'X\(//\)[^/]' \| \
-	 X"$ac_file" : 'X\(//\)$' \| \
-	 X"$ac_file" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X"$ac_file" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  as_dir="$ac_dir"; as_fn_mkdir_p
-  ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`$as_echo "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`$as_echo "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-
-  case $ac_mode in
-  :F)
-  #
-  # CONFIG_FILE
-  #
-
-  case $INSTALL in
-  [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;;
-  *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;;
-  esac
-  ac_MKDIR_P=$MKDIR_P
-  case $MKDIR_P in
-  [\\/$]* | ?:[\\/]* ) ;;
-  */*) ac_MKDIR_P=$ac_top_build_prefix$MKDIR_P ;;
-  esac
-_ACEOF
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-# If the template does not know about datarootdir, expand it.
-# FIXME: This hack should be removed a few years after 2.60.
-ac_datarootdir_hack=; ac_datarootdir_seen=
-ac_sed_dataroot='
-/datarootdir/ {
-  p
-  q
-}
-/@datadir@/p
-/@docdir@/p
-/@infodir@/p
-/@localedir@/p
-/@mandir@/p'
-case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in
-*datarootdir*) ac_datarootdir_seen=yes;;
-*@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*)
-  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5
-$as_echo "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;}
-_ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-  ac_datarootdir_hack='
-  s&@datadir@&$datadir&g
-  s&@docdir@&$docdir&g
-  s&@infodir@&$infodir&g
-  s&@localedir@&$localedir&g
-  s&@mandir@&$mandir&g
-  s&\\\${datarootdir}&$datarootdir&g' ;;
-esac
-_ACEOF
-
-# Neutralize VPATH when `$srcdir' = `.'.
-# Shell code in configure.ac might set extrasub.
-# FIXME: do we really want to maintain this feature?
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-ac_sed_extra="$ac_vpsub
-$extrasub
-_ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-:t
-/@[a-zA-Z_][a-zA-Z_0-9]*@/!b
-s|@configure_input@|$ac_sed_conf_input|;t t
-s&@top_builddir@&$ac_top_builddir_sub&;t t
-s&@top_build_prefix@&$ac_top_build_prefix&;t t
-s&@srcdir@&$ac_srcdir&;t t
-s&@abs_srcdir@&$ac_abs_srcdir&;t t
-s&@top_srcdir@&$ac_top_srcdir&;t t
-s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t
-s&@builddir@&$ac_builddir&;t t
-s&@abs_builddir@&$ac_abs_builddir&;t t
-s&@abs_top_builddir@&$ac_abs_top_builddir&;t t
-s&@INSTALL@&$ac_INSTALL&;t t
-s&@MKDIR_P@&$ac_MKDIR_P&;t t
-$ac_datarootdir_hack
-"
-eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \
-  >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-
-test -z "$ac_datarootdir_hack$ac_datarootdir_seen" &&
-  { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } &&
-  { ac_out=`sed -n '/^[	 ]*datarootdir[	 ]*:*=/p' \
-      "$ac_tmp/out"`; test -z "$ac_out"; } &&
-  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable \`datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&5
-$as_echo "$as_me: WARNING: $ac_file contains a reference to the variable \`datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&2;}
-
-  rm -f "$ac_tmp/stdin"
-  case $ac_file in
-  -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";;
-  *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";;
-  esac \
-  || as_fn_error $? "could not create $ac_file" "$LINENO" 5
- ;;
-  :H)
-  #
-  # CONFIG_HEADER
-  #
-  if test x"$ac_file" != x-; then
-    {
-      $as_echo "/* $configure_input  */" \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs"
-    } >"$ac_tmp/config.h" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then
-      { $as_echo "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5
-$as_echo "$as_me: $ac_file is unchanged" >&6;}
-    else
-      rm -f "$ac_file"
-      mv "$ac_tmp/config.h" "$ac_file" \
-	|| as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    fi
-  else
-    $as_echo "/* $configure_input  */" \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \
-      || as_fn_error $? "could not create -" "$LINENO" 5
-  fi
-# Compute "$ac_file"'s index in $config_headers.
-_am_arg="$ac_file"
-_am_stamp_count=1
-for _am_header in $config_headers :; do
-  case $_am_header in
-    $_am_arg | $_am_arg:* )
-      break ;;
-    * )
-      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
-  esac
-done
-echo "timestamp for $_am_arg" >`$as_dirname -- "$_am_arg" ||
-$as_expr X"$_am_arg" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$_am_arg" : 'X\(//\)[^/]' \| \
-	 X"$_am_arg" : 'X\(//\)$' \| \
-	 X"$_am_arg" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X"$_am_arg" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`/stamp-h$_am_stamp_count
- ;;
-
-  :C)  { $as_echo "$as_me:${as_lineno-$LINENO}: executing $ac_file commands" >&5
-$as_echo "$as_me: executing $ac_file commands" >&6;}
- ;;
-  esac
-
-
-  case $ac_file$ac_mode in
-    "depfiles":C) test x"$AMDEP_TRUE" != x"" || {
-  # Older Autoconf quotes --file arguments for eval, but not when files
-  # are listed without --file.  Let's play safe and only enable the eval
-  # if we detect the quoting.
-  case $CONFIG_FILES in
-  *\'*) eval set x "$CONFIG_FILES" ;;
-  *)   set x $CONFIG_FILES ;;
-  esac
-  shift
-  for mf
-  do
-    # Strip MF so we end up with the name of the file.
-    mf=`echo "$mf" | sed -e 's/:.*$//'`
-    # Check whether this is an Automake generated Makefile or not.
-    # We used to match only the files named 'Makefile.in', but
-    # some people rename them; so instead we look at the file content.
-    # Grep'ing the first line is not enough: some people post-process
-    # each Makefile.in and add a new line on top of each file to say so.
-    # Grep'ing the whole file is not good either: AIX grep has a line
-    # limit of 2048, but all sed's we know have understand at least 4000.
-    if sed -n 's,^#.*generated by automake.*,X,p' "$mf" | grep X >/dev/null 2>&1; then
-      dirpart=`$as_dirname -- "$mf" ||
-$as_expr X"$mf" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$mf" : 'X\(//\)[^/]' \| \
-	 X"$mf" : 'X\(//\)$' \| \
-	 X"$mf" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X"$mf" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    else
-      continue
-    fi
-    # Extract the definition of DEPDIR, am__include, and am__quote
-    # from the Makefile without running 'make'.
-    DEPDIR=`sed -n 's/^DEPDIR = //p' < "$mf"`
-    test -z "$DEPDIR" && continue
-    am__include=`sed -n 's/^am__include = //p' < "$mf"`
-    test -z "$am__include" && continue
-    am__quote=`sed -n 's/^am__quote = //p' < "$mf"`
-    # Find all dependency output files, they are included files with
-    # $(DEPDIR) in their names.  We invoke sed twice because it is the
-    # simplest approach to changing $(DEPDIR) to its actual value in the
-    # expansion.
-    for file in `sed -n "
-      s/^$am__include $am__quote\(.*(DEPDIR).*\)$am__quote"'$/\1/p' <"$mf" | \
-	 sed -e 's/\$(DEPDIR)/'"$DEPDIR"'/g'`; do
-      # Make sure the directory exists.
-      test -f "$dirpart/$file" && continue
-      fdir=`$as_dirname -- "$file" ||
-$as_expr X"$file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$file" : 'X\(//\)[^/]' \| \
-	 X"$file" : 'X\(//\)$' \| \
-	 X"$file" : 'X\(/\)' \| . 2>/dev/null ||
-$as_echo X"$file" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      as_dir=$dirpart/$fdir; as_fn_mkdir_p
-      # echo "creating $dirpart/$file"
-      echo '# dummy' > "$dirpart/$file"
-    done
-  done
-}
- ;;
-
-  esac
-done # for ac_tag
-
-
-as_fn_exit 0
-_ACEOF
-ac_clean_files=$ac_clean_files_save
-
-test $ac_write_fail = 0 ||
-  as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5
-
-
-# configure is writing to config.log, and then calls config.status.
-# config.status does its own redirection, appending to config.log.
-# Unfortunately, on DOS this fails, as config.log is still kept open
-# by configure, so config.status won't be able to write to it; its
-# output is simply discarded.  So we exec the FD to /dev/null,
-# effectively closing config.log, so it can be properly (re)opened and
-# appended to by config.status.  When coming back to configure, we
-# need to make the FD available again.
-if test "$no_create" != yes; then
-  ac_cs_success=:
-  ac_config_status_args=
-  test "$silent" = yes &&
-    ac_config_status_args="$ac_config_status_args --quiet"
-  exec 5>/dev/null
-  $SHELL $CONFIG_STATUS $ac_config_status_args || ac_cs_success=false
-  exec 5>>config.log
-  # Use ||, not &&, to avoid exiting from the if with $? = 1, which
-  # would make configure fail if this is the last instruction.
-  $ac_cs_success || as_fn_exit 1
-fi
-if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then
-  { $as_echo "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5
-$as_echo "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
-fi
-
-
-# Restore lib/config_warnings.h.in
-mv ${CONFIG_WARNINGS}.sav ${CONFIG_WARNINGS}
-
-cat <<EOF;
-
-Keepalived configuration
-------------------------
-Keepalived version       : ${VERSION}
-Compiler                 : ${CC}
-Preprocessor flags       : ${KA_CPPFLAGS}
-Compiler flags           : ${KA_CFLAGS}
-EOF
-
-if test -n "$KA_LDFLAGS$KA_LIBS"; then
-  echo "Linker flags             : $KA_LDFLAGS"
-  echo "Extra Lib                : $KA_LIBS"
-fi
-
-echo "Use IPVS Framework       : ${IPVS_SUPPORT}"
-if test ${IPVS_SUPPORT} = Yes; then
-  echo "IPVS use libnl           : ${IPVS_USE_NL}"
-  echo "IPVS syncd attributes    : ${IPVS_SYNCD_ATTRIBUTES}"
-  echo "IPVS 64 bit stats        : ${IPVS_64BIT_STATS}"
-  echo "HTTP_GET regex support   : ${WITH_REGEX}"
-fi
-echo "fwmark socket support    : ${SO_MARK_SUPPORT}"
-echo "Use VRRP Framework       : ${VRRP_SUPPORT}"
-if test ${VRRP_SUPPORT} = Yes; then
-  echo "Use VRRP VMAC            : ${MACVLAN_SUPPORT}"
-  echo "Use VRRP authentication  : ${VRRP_AUTH_SUPPORT}"
-  echo "With ip rules/routes     : ${FIB_ROUTING_SUPPORT}"
-  echo "With track_process       : ${HAVE_CN_PROC}"
-  echo "With linkbeat            : ${LINKBEAT_SUPPORT}"
-fi
-echo "Use BFD Framework        : ${BFD_SUPPORT}"
-echo "SNMP vrrp support        : ${SNMP_VRRP_SUPPORT}"
-echo "SNMP checker support     : ${SNMP_CHECKER_SUPPORT}"
-echo "SNMP RFCv2 support       : ${SNMP_RFCV2_SUPPORT}"
-echo "SNMP RFCv3 support       : ${SNMP_RFCV3_SUPPORT}"
-if test ${SNMP_RFCV3_SUPPORT} = Yes; then
-  echo "SNMP send V3 for V2      : ${SNMP_V3_FOR_V2}"
-fi
-echo "DBUS support             : ${DBUS_SUPPORT}"
-if test ${DBUS_SUPPORT} = Yes; then
-  echo "DBUS create instance     : ${DBUS_CREATE_INSTANCE}"
-fi
-echo "SHA1 support             : ${SHA1_SUPPORT}"
-echo "Use JSON output          : ${ENABLE_JSON}"
-echo "libnl version            : ${NETLINK_VER}"
-echo "Use IPv4 devconf         : ${IPV4_DEVCONF}"
-echo "Use iptables             : ${USE_IPTABLES}"
-if test .$USE_IPTABLES = .Yes; then
-  echo "Use libiptc              : ${USE_LIBIPTC}"
-  echo "Use libipset             : ${USE_LIBIPSET}"
-fi
-echo "Use nftables             : ${USE_NFTABLES}"
-echo "init type                : ${INIT_TYPE}"
-echo "Strict config checks     : ${STRICT_CONFIG}"
-echo "Build genhash            : ${BUILD_GENHASH}"
-echo "Build documentation      : ${HAVE_SPHINX_BUILD}"
-if test ${ENABLE_STACKTRACE} = Yes; then
-  echo "Stacktrace support       : ${ENABLE_STACKTRACE}"
-fi
-if test ${ENABLE_PERF} = Yes; then
-  echo "Perf support             : ${ENABLE_PERF}"
-fi
-if test ${MEM_CHECK} = Yes; then
-  echo "Memory alloc check       : ${MEM_CHECK}"
-  echo "Memory alloc check log   : ${MEM_CHECK_LOG}"
-fi
-if test ${TIMER_CHECK} = Yes; then
-  echo "Set time logging         : ${TIMER_CHECK}"
-fi
-if test ${ENABLE_DUMP_THREADS} = Yes; then
-  echo "Thread debugging         : ${ENABLE_DUMP_THREADS}"
-fi
-if test ${ENABLE_EPOLL_DEBUG} = Yes; then
-  echo "epoll_wait() debugging   : ${ENABLE_EPOLL_DEBUG}"
-fi
-if test ${ENABLE_EPOLL_THREAD_DUMP} = Yes; then
-  echo "epoll thread dumping     : ${ENABLE_EPOLL_THREAD_DUMP}"
-fi
-if test ${ENABLE_REGEX_DEBUG} = Yes; then
-  echo "regex debugging          : ${ENABLE_REGEX_DEBUG}"
-fi
-if test ${ENABLE_TSM_DEBUG} = Yes; then
-  echo "TSM debugging            : ${ENABLE_TSM_DEBUG}"
-fi
-if test ${ENABLE_VRRP_FD_DEBUG} = Yes; then
-  echo "VRRP_FD debugging        : ${ENABLE_VRRP_FD_DEBUG}"
-fi
-if test ${ENABLE_NETWORK_TIMESTAMP} = Yes; then
-  echo "network timestamping     : ${ENABLE_NETWORK_TIMESTAMP}"
-fi
-if test ${ENABLE_ASSERT} = Yes; then
-  echo "asserts enabled          : ${ENABLE_ASSERT}"
-fi
-if test ${ENABLE_DEBUG} = Yes; then
-  echo "Use Debug flags          : ${ENABLE_DEBUG}"
-fi
-if test ${ENABLE_NETLINK_TIMERS} = Yes; then
-  echo "Netlink command timers   : ${ENABLE_NETLINK_TIMERS}"
-fi
-if test ${ENABLE_SMTP_ALERT_DEBUG} = Yes; then
-  echo "smtp-alert debugging     : ${ENABLE_SMTP_ALERT_DEBUG}"
-fi
-if test "${FIXED_IF_TYPE}"; then
-  echo "Fixed interface type     : ${FIXED_IF_TYPE}"
-fi
-if test "${CONFIG_FILE}"; then
-  echo "Default config file      : ${CONFIG_FILE}"
-fi
-
-
-if test ${IPVS_SUPPORT} = Yes -a ${IPVS_USE_NL} = No; then
-  echo
-  echo "*** WARNING - this build will not support IPVS with IPv6. Please install libnl/libnl-3 dev libraries to support IPv6 with IPVS."
-  echo
-fi
-
-if test ${ENABLE_DEBUG} = Yes; then
-  echo
-  echo "*** WARNING --enable-debug is only for debugging purposes and isn't expected to work properly"
-  echo
-fi

From 4069794e927ae587819b7706cc337fc819afd58c Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Sun, 19 Jan 2020 13:07:10 +0800
Subject: [PATCH 61/62] ctrl: output msg callbak fail error log only when debug

---
 src/ctrl.c | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/src/ctrl.c b/src/ctrl.c
index d10601c75..f614616da 100644
--- a/src/ctrl.c
+++ b/src/ctrl.c
@@ -658,8 +658,10 @@ static int msg_master_process(int step)
             if (likely(msg_type->unicast_msg_cb != NULL)) {
                 if (msg_type->unicast_msg_cb(msg) < 0) {
                     add_msg_flags(msg, DPVS_MSG_F_CALLBACK_FAIL);
-                    RTE_LOG(WARNING, MSGMGR, "%s:msg@%p, uc msg_type %d callback failed on master\n",
+#ifdef CONFIG_MSG_DEBUG
+                    RTE_LOG(INFO, MSGMGR, "%s:msg@%p, uc msg_type %d callback failed on master\n",
                             __func__, msg, msg->type);
+#endif
                 }
             }
             add_msg_flags(msg, DPVS_MSG_F_STATE_FIN);
@@ -686,8 +688,10 @@ static int msg_master_process(int step)
                 if (unlikely(0 == mcq->mask)) { /* okay, all slave reply msg arrived */
                     if (msg_type->multicast_msg_cb(mcq) < 0) {
                         add_msg_flags(mcq->org_msg, DPVS_MSG_F_CALLBACK_FAIL);/* callback on master failed */
-                        RTE_LOG(WARNING, MSGMGR, "%s:msg@%p, mc msg_type %d callback failed on master\n",
+#ifdef CONFIG_MSG_DEBUG
+                        RTE_LOG(INFO, MSGMGR, "%s:msg@%p, mc msg_type %d callback failed on master\n",
                                 __func__, mcq->org_msg, msg->type);
+#endif
                     }
                     add_msg_flags(mcq->org_msg, DPVS_MSG_F_STATE_FIN);
                     msg_destroy(&mcq->org_msg);
@@ -745,8 +749,10 @@ int msg_slave_process(int step)
         if (likely(msg_type->unicast_msg_cb != NULL)) {
             if (msg_type->unicast_msg_cb(msg) < 0) {
                 add_msg_flags(msg, DPVS_MSG_F_CALLBACK_FAIL);
-                RTE_LOG(DEBUG, MSGMGR, "%s:msg@%p, msg_type %d callback failed on lcore %d\n",
+#ifdef CONFIG_MSG_DEBUG
+                RTE_LOG(INFO, MSGMGR, "%s:msg@%p, msg_type %d callback failed on lcore %d\n",
                      __func__, msg, msg->type, cid);
+#endif
             }
         }
         /* send reply msg to master for multicast msg */
@@ -1368,8 +1374,10 @@ static int sockopt_ctl(__rte_unused void *arg)
             /* assume that reply_data is freed by user when callback fails */
             reply_data = NULL;
             reply_data_len = 0;
+#ifdef CONFIG_MSG_DEBUG
             RTE_LOG(INFO, MSGMGR, "%s: socket msg<type=%s, id=%d> callback failed\n",
                     __func__, msg->type == SOCKOPT_GET ? "GET" : "SET", msg->id);
+#endif
         }
 
         memset(&reply_hdr, 0, sizeof(reply_hdr));

From a6e58f31ccb011418e9b01294cfd1f14301532bc Mon Sep 17 00:00:00 2001
From: ywc689 <ywc689@163.com>
Date: Tue, 11 Feb 2020 18:44:11 +0800
Subject: [PATCH 62/62] release  v1.8.2

---
 src/VERSION | 47 ++++++++++++++++++++++++++++++++++++++---------
 1 file changed, 38 insertions(+), 9 deletions(-)

diff --git a/src/VERSION b/src/VERSION
index 209f4f0cc..11a7ee49d 100755
--- a/src/VERSION
+++ b/src/VERSION
@@ -1,13 +1,42 @@
 #!/bin/sh -
 # program: dpvs
-# Oct 8, 2019
-# Commit: 3d8f47575bd18ebfda88d83d869b36a18d2f49c1
-#         "route6: fix some problems"
-# Features: 
-#     1. add dummy info and backtrace for dpvs timer crash problem
-#     2. fix some problems in route6
-
-export VERSION=1.7
-export RELEASE=8
+# Feb 12, 2020
+
+# # Features
+# ----------
+# - **Per-cpu refactor for service/dest/inetaddr/laddr/sapool modules.**
+# - **Keepalived upgrades from v1.2.13 to v2.0.19.**
+# - **Add supports for newer dpdk: dpdk-stable-18.11.2 and dpdk-stable-17.11.6.**
+# - Add dpvs `scheduler module` to manage jobs on master and slaves in the same fasion.
+# - Add support for Mallenox 25G NIC MLX5.
+# - Add `iftraf module` to collect top N traffic clients.
+# - Add dpvs worker performance tuning doc.
+# - Add `debug module` for dpvs.
+# - Use dpvs mempool to allocate memory.
+# - Enable dpdk pdump tool for DPVS.
+# - Show the concrete neighbour entry info when its queue is full.
+# - Adjust header files used both by tools(keepalived/dpip/ipvsadm) and dpvs.
+# 
+# 
+# # Bugfix
+# --------
+# - Use async multicast msg to avoid config setting failures caused by msg timeout.
+# - Alleviate the NIC imiss problem caused by inetaddr lock and heap memory.
+# - Reduce sapool stats lookup failure problem.
+# - Fix memory underflow problem and add more debug info for dpvs mempool.
+# - Fix failure problem when add ipv6 addresses.
+# - Fix crash problem when delete all local addresses.
+# - Fix toa ipv6 crash problem caused by page write protect.
+# - Fix memory leak problem in `tunnel_xmit`.
+# - Fix crash problem when out of memory.
+# - Fix problem when DPDK EAL param '--master-lcore' or '--lcores' is used.
+# - Patch dpdk-stable-17.11.2 to support rh75.
+# - Several optimizations of memory allocation from eal heaps.
+# - Refactor several code episodes to make logic clear.
+# - Adjust some logs.
+
+
+export VERSION=1.8
+export RELEASE=2
 
 echo $VERSION-$RELEASE